start::
closeprocesses:
createrestorepoint:
CustomCLSID: HKU\S-1-5-21-2085099354-3484396346-279358240-1001_Classes\CLSID\{47E6DCAF-41F8-441C-BD0E-A50D5FE6C4D1}\localserver32 -> "C:\Users\seby\AppData\Local\Microsoft\OneDrive\20.201.1005.0009\MicrosoftListSync.exe" => Pas de fichier
CustomCLSID: HKU\S-1-5-21-2085099354-3484396346-279358240-1001_Classes\CLSID\{917E8742-AA3B-7318-FA12-10485FB322A2}\localserver32 -> "C:\Users\seby\AppData\Local\Microsoft\OneDrive\20.201.1005.0009\MicrosoftListSync.exe" => Pas de fichier
HKLM-x32\...\Run: [SonicMasterTray] => C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe [984400 2010-07-10] (Sonic Focus, Inc. -> Virage Logic Corporation / Sonic Focus)
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {4D66BA2B-3362-47E6-81D8-6555AE21DF78} - \Microsoft\Windows\Setup\EOSNotify -> Pas de fichier <==== ATTENTION
Task: {86059028-AEE8-42A7-88D7-FAD81AEC8A77} - \Microsoft\Windows\Setup\EOSNotify2 -> Pas de fichier <==== ATTENTION
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [X]
2021-01-11 17:48 - 2017-11-29 14:43 - 000000000 ___HD C:\Users\seby\AppData\Roaming\rlxkqymnr
emptytemp:
end::