start::
closeprocesses:
createrestorepoint:
CustomCLSID: HKU\S-1-5-21-1240594582-1182374497-2561965475-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\besne\AppData\Local\Microsoft\OneDrive\19.232.1124.0010\amd64\FileSyncShell64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-1240594582-1182374497-2561965475-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\besne\AppData\Local\Microsoft\OneDrive\19.232.1124.0010\amd64\FileSyncShell64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-1240594582-1182374497-2561965475-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\besne\AppData\Local\Microsoft\OneDrive\19.232.1124.0010\amd64\FileSyncShell64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-1240594582-1182374497-2561965475-1001_Classes\CLSID\{930e604a-cc01-4d06-8d7a-5a07914f3afb}\localserver32 -> "C:\Program Files\TechSmith\Camtasia 2019\CamtasiaStudio.exe" -ToastActivated => Pas de fichier
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => D:\rarext.dll -> Pas de fichier
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => D:\rarext32.dll -> Pas de fichier
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => D:\rarext.dll -> Pas de fichier
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => D:\rarext32.dll -> Pas de fichier
FirewallRules: [{EE0A7670-510A-4973-8FD2-103A5D19F563}] => (Allow) D:\ApowerMirror\ApowerMirror.exe => Pas de fichier
FirewallRules: [{16D5F363-CD5E-48D6-ACBC-C5CCC4CE9EB4}] => (Allow) D:\ApowerMirror\ApowerMirror.exe => Pas de fichier
FirewallRules: [{738018A8-E584-409B-97C6-EE3582D0FD35}] => (Allow) D:\APowerMirror fix\APowerMirror\App\ApowerMirror\ApowerMirror.exe => Pas de fichier
FirewallRules: [{A6D00CA3-977E-4EE5-94F4-1D1C0506672A}] => (Allow) D:\APowerMirror fix\APowerMirror\App\ApowerMirror\ApowerMirror.exe => Pas de fichier
FirewallRules: [TCP Query User{D6DD3D88-1C40-4423-88BD-76DD80C8E9FC}D:\ivcam\ivcam.exe] => (Allow) D:\ivcam\ivcam.exe => Pas de fichier
FirewallRules: [UDP Query User{C199953B-A1B7-4B39-AE8E-7226CF27CEFC}D:\ivcam\ivcam.exe] => (Allow) D:\ivcam\ivcam.exe => Pas de fichier
FirewallRules: [TCP Query User{B22F25D0-5A9B-43B6-8D2A-F1E0DC6222BC}D:\tt rgb plus\tt rgb plus.exe] => (Allow) D:\tt rgb plus\tt rgb plus.exe => Pas de fichier
FirewallRules: [UDP Query User{8E7DA4C9-D4D4-472A-851A-82542208A259}D:\tt rgb plus\tt rgb plus.exe] => (Allow) D:\tt rgb plus\tt rgb plus.exe => Pas de fichier
FirewallRules: [TCP Query User{D46BFF93-F383-4897-9DEA-C6C07CD4FDFD}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe => Pas de fichier
FirewallRules: [UDP Query User{C8D80029-7B12-46FB-93D9-5F6F0E18CA46}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe => Pas de fichier
FirewallRules: [TCP Query User{10AF0238-59E8-4B14-8D59-AFA7ABE3D2AA}D:\az-launcher\az-launcher.exe] => (Allow) D:\az-launcher\az-launcher.exe => Pas de fichier
FirewallRules: [UDP Query User{44625576-A843-4113-B315-4D29C6F03FDD}D:\az-launcher\az-launcher.exe] => (Allow) D:\az-launcher\az-launcher.exe => Pas de fichier
FirewallRules: [{A205BDED-FDB8-4DDC-B8A1-8224C41E503D}] => (Allow) LPort=32682
FirewallRules: [TCP Query User{402E487C-F602-47DC-A0F3-3FC7F865FF79}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe => Pas de fichier
FirewallRules: [UDP Query User{3E9CD376-4FAE-4163-AC05-7B7574D16812}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe => Pas de fichier
HKLM\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
C:\Program Files\Common Files\Wondershare
HKU\S-1-5-21-1240594582-1182374497-2561965475-1001\...\Run: [SearchFilter] => C:\ProgramData\SearchFilter\SearchFilter.vbs [157 2017-08-27] () [Fichier non signé]
C:\ProgramData\SearchFilter
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {8fc8d322-e283-4e1c-a488-f84e8f52b205} - pas de chemin du fichier
S3 HWiNFO_150; \??\C:\Users\besne\AppData\Local\Temp\HWiNFO64A_150.SYS [X] <==== ATTENTION
emptytemp:
end::