start::
CreateRestorePoint:
CloseProcesses:
Hosts:
HKLM-x32\...\Run: [Genshin Impact_Launcher] => [X]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\87.0.4280.141\Installer\chrmstp.exe [2021-01-11] (Google LLC -> Google LLC)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
ProxyServer: [S-1-5-21-2855243879-2265203264-3635203944-1001] => http=127.0.0.1:42822;https=127.0.0.1:42822
CHR Notifications: Default -> hxxps://algo-x.fr; hxxps://chatroulettelist.blogspot.com; hxxps://discord.com; hxxps://fr.tradingview.com; hxxps://golive.im; hxxps://teams.microsoft.com; hxxps://www.dailymail.co.uk; hxxps://www.habbocity.me; hxxps://www.zdnet.fr
CHR HomePage: Default -> hxxp://www.google.be/
CHR StartupUrls: Default -> "hxxp://iron-start.com"
CHR DefaultSearchURL: Default -> hxxp://www.google.be/search?q={searchTerms}.
CHR DefaultSearchKeyword: Default -> googlebe
CHR Session Restore: Default -> est activé.
2021-01-19 16:47 - 2021-01-19 16:47 - 000265161 _____ C:\Users\Public\Desktop\ZHPDiag.txt
2021-01-19 16:25 - 2021-01-19 16:47 - 000000000 ____D C:\Users\Faïssal\AppData\Roaming\ZHP
2021-01-19 16:25 - 2021-01-19 16:25 - 000000871 _____ C:\Users\Faïssal\Desktop\ZHPDiag.lnk
2021-01-19 16:25 - 2021-01-19 16:25 - 000000000 ____D C:\Users\Faïssal\AppData\Local\ZHP
2021-01-19 16:23 - 2021-01-19 16:23 - 003284104 _____ (Nicolas Coolman) C:\Users\Faïssal\Desktop\ZHPDiag3.exe
2021-01-15 12:56 - 2021-01-15 12:56 - 000000000 ____D C:\avast! sandbox
2021-01-20 22:17 - 2021-01-20 22:17 - 012448056 _____ (AVAST Software) C:\Users\Faïssal\Desktop\avastclear.exe
2021-01-20 22:28 - 2019-06-23 16:51 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2021-01-20 22:27 - 2019-09-27 23:38 - 000000000 ____D C:\ProgramData\AVAST Software
CustomCLSID: HKU\S-1-5-21-2855243879-2265203264-3635203944-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\Faïssal\AppData\Local\Microsoft\OneDrive\19.152.0801.0009\amd64\FileSyncShell64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-2855243879-2265203264-3635203944-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\Faïssal\AppData\Local\Microsoft\OneDrive\19.152.0801.0009\amd64\FileSyncShell64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-2855243879-2265203264-3635203944-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\Faïssal\AppData\Local\Microsoft\OneDrive\19.152.0801.0009\amd64\FileSyncShell64.dll => Pas de fichier
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier
AlternateDataStreams: C:\Users\Faïssal\Desktop\changement d'adresse.jpeg:3or4kl4x13tuuug3Byamue2s4b [95]
AlternateDataStreams: C:\Users\Faïssal\Desktop\changement d'adresse.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
AlternateDataStreams: C:\Users\Faïssal\Desktop\CPAS.jpeg:3or4kl4x13tuuug3Byamue2s4b [95]
AlternateDataStreams: C:\Users\Faïssal\Desktop\CPAS.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
AlternateDataStreams: C:\Users\Faïssal\Desktop\ONEM.jpeg:3or4kl4x13tuuug3Byamue2s4b [95]
AlternateDataStreams: C:\Users\Faïssal\Desktop\ONEM.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
SearchScopes: HKU\S-1-5-21-2855243879-2265203264-3635203944-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FirewallRules: [UDP Query User{9BB2DAAB-825C-4FD0-B9EE-34C11EAC4CFA}C:\users\faïssal\desktop\nouveau dossier\tanji 2.0\tanji.exe] => (Allow) C:\users\faïssal\desktop\nouveau dossier\tanji 2.0\tanji.exe => Pas de fichier
FirewallRules: [TCP Query User{200D34E1-9153-45C7-BBC2-FD4DEE05F0BE}C:\users\faïssal\desktop\nouveau dossier\tanji 2.0\tanji.exe] => (Allow) C:\users\faïssal\desktop\nouveau dossier\tanji 2.0\tanji.exe => Pas de fichier
FirewallRules: [UDP Query User{8FA3CD45-36FB-4D6B-9E7E-4884915FA10F}C:\users\faïssal\desktop\tanji2\tanji v1.4.1238.0 [sng edition]\tanji.exe] => (Block) C:\users\faïssal\desktop\tanji2\tanji v1.4.1238.0 [sng edition]\tanji.exe => Pas de fichier
FirewallRules: [TCP Query User{2F0FC0FA-9424-4FC7-B53B-36E1DCF571C1}C:\users\faïssal\desktop\tanji2\tanji v1.4.1238.0 [sng edition]\tanji.exe] => (Block) C:\users\faïssal\desktop\tanji2\tanji v1.4.1238.0 [sng edition]\tanji.exe => Pas de fichier
FirewallRules: [TCP Query User{FC5B3345-136D-47ED-A721-EFAE3F3F7E56}C:\users\faïssal\desktop\tanji\tanji\tanji.exe] => (Allow) C:\users\faïssal\desktop\tanji\tanji\tanji.exe => Pas de fichier
FirewallRules: [UDP Query User{AE01A39A-EA4D-4BCE-8521-70ACC6FA1CC5}C:\users\faïssal\desktop\tanji\tanji\tanji.exe] => (Allow) C:\users\faïssal\desktop\tanji\tanji\tanji.exe => Pas de fichier
FirewallRules: [TCP Query User{C167D696-C391-4AD8-8F97-76169B89372F}C:\users\faïssal\appdata\local\programs\opera\65.0.3467.48\opera.exe] => (Allow) C:\users\faïssal\appdata\local\programs\opera\65.0.3467.48\opera.exe => Pas de fichier
FirewallRules: [UDP Query User{F8E231EC-6BEC-4DDA-A4EC-F1F43D55CA42}C:\users\faïssal\appdata\local\programs\opera\65.0.3467.48\opera.exe] => (Allow) C:\users\faïssal\appdata\local\programs\opera\65.0.3467.48\opera.exe => Pas de fichier
FirewallRules: [TCP Query User{2EC6B162-7243-4925-85E4-FA6E087CE1CF}C:\users\faïssal\appdata\local\programs\opera\65.0.3467.62\opera.exe] => (Block) C:\users\faïssal\appdata\local\programs\opera\65.0.3467.62\opera.exe => Pas de fichier
FirewallRules: [UDP Query User{2DBFBDD5-30AE-4372-AF79-EFF7ABE16677}C:\users\faïssal\appdata\local\programs\opera\65.0.3467.62\opera.exe] => (Block) C:\users\faïssal\appdata\local\programs\opera\65.0.3467.62\opera.exe => Pas de fichier
FirewallRules: [TCP Query User{8BEB8B91-1F5A-4F04-ADFE-45A95B4C5C47}C:\users\faïssal\appdata\local\programs\opera\65.0.3467.78\opera.exe] => (Block) C:\users\faïssal\appdata\local\programs\opera\65.0.3467.78\opera.exe => Pas de fichier
FirewallRules: [UDP Query User{09CAA494-C517-42AC-A47D-F95BD723C669}C:\users\faïssal\appdata\local\programs\opera\65.0.3467.78\opera.exe] => (Block) C:\users\faïssal\appdata\local\programs\opera\65.0.3467.78\opera.exe => Pas de fichier
FirewallRules: [TCP Query User{392D333A-ED81-4E49-9B4B-531E05F42202}C:\users\faïssal\appdata\local\programs\opera\66.0.3515.115\opera.exe] => (Block) C:\users\faïssal\appdata\local\programs\opera\66.0.3515.115\opera.exe => Pas de fichier
FirewallRules: [UDP Query User{A3591B98-AE0D-43BB-A635-C7EC3E194E2F}C:\users\faïssal\appdata\local\programs\opera\66.0.3515.115\opera.exe] => (Block) C:\users\faïssal\appdata\local\programs\opera\66.0.3515.115\opera.exe => Pas de fichier
FirewallRules: [TCP Query User{BA77F1C6-08AB-4B11-BBE5-3DA9E9481C16}C:\users\faïssal\desktop\tanjihb\tanjihb\tanji.exe] => (Allow) C:\users\faïssal\desktop\tanjihb\tanjihb\tanji.exe => Pas de fichier
FirewallRules: [UDP Query User{3048BD9D-C49C-41C9-B529-C5E0CDF6FD9B}C:\users\faïssal\desktop\tanjihb\tanjihb\tanji.exe] => (Allow) C:\users\faïssal\desktop\tanjihb\tanjihb\tanji.exe => Pas de fichier
FirewallRules: [TCP Query User{637746F0-6B79-49B6-AEA0-9783EF58FC46}C:\users\faïssal\appdata\local\programs\opera\67.0.3575.79\opera.exe] => (Block) C:\users\faïssal\appdata\local\programs\opera\67.0.3575.79\opera.exe => Pas de fichier
FirewallRules: [UDP Query User{025D850B-309A-4C8E-A69D-9DA57F52E7F5}C:\users\faïssal\appdata\local\programs\opera\67.0.3575.79\opera.exe] => (Block) C:\users\faïssal\appdata\local\programs\opera\67.0.3575.79\opera.exe => Pas de fichier
FirewallRules: [TCP Query User{CF0C6732-A79F-4181-8E11-1CCF5AB6E2B2}C:\users\faïssal\appdata\local\programs\opera\67.0.3575.137\opera.exe] => (Allow) C:\users\faïssal\appdata\local\programs\opera\67.0.3575.137\opera.exe => Pas de fichier FirewallRules: [UDP Query User{CB060AC1-4D08-4DBC-978B-B521234967BC}C:\users\faïssal\appdata\local\programs\opera\67.0.3575.137\opera.exe] => (Allow) C:\users\faïssal\appdata\local\programs\opera\67.0.3575.137\opera.exe => Pas de fichier
FirewallRules: [TCP Query User{5ABBA81D-C4F7-4475-81C5-48F8B4A19B38}C:\users\faïssal\appdata\local\programs\opera\68.0.3618.63\opera.exe] => (Block) C:\users\faïssal\appdata\local\programs\opera\68.0.3618.63\opera.exe => Pas de fichier
FirewallRules: [UDP Query User{6AD6AC99-7F11-44DE-88AD-006D5944698F}C:\users\faïssal\appdata\local\programs\opera\68.0.3618.63\opera.exe] => (Block) C:\users\faïssal\appdata\local\programs\opera\68.0.3618.63\opera.exe => Pas de fichier
FirewallRules: [TCP Query User{1102568E-5CB7-45AB-8B84-F299384C5981}C:\users\faïssal\appdata\local\programs\opera\68.0.3618.104\opera.exe] => (Allow) C:\users\faïssal\appdata\local\programs\opera\68.0.3618.104\opera.exe => Pas de fichier
FirewallRules: [UDP Query User{9860B9D4-F871-4AED-A697-74C03DF2B5B2}C:\users\faïssal\appdata\local\programs\opera\68.0.3618.104\opera.exe] => (Allow) C:\users\faïssal\appdata\local\programs\opera\68.0.3618.104\opera.exe => Pas de fichier
FirewallRules: [TCP Query User{85276706-E71B-4310-B8A8-390AB141CA64}C:\users\faïssal\appdata\local\programs\opera\68.0.3618.125\opera.exe] => (Allow) C:\users\faïssal\appdata\local\programs\opera\68.0.3618.125\opera.exe => Pas de fichier
FirewallRules: [UDP Query User{BD584B56-422E-4174-A12A-23FC14BDBF36}C:\users\faïssal\appdata\local\programs\opera\68.0.3618.125\opera.exe] => (Allow) C:\users\faïssal\appdata\local\programs\opera\68.0.3618.125\opera.exe => Pas de fichier
FirewallRules: [TCP Query User{461DC82A-251C-4EF3-A270-23E5EB531B4C}C:\users\faïssal\appdata\local\programs\opera\68.0.3618.173\opera.exe] => (Block) C:\users\faïssal\appdata\local\programs\opera\68.0.3618.173\opera.exe => Pas de fichier
FirewallRules: [UDP Query User{E2D84EDF-E036-4B2F-B8CD-8A5F26A14DED}C:\users\faïssal\appdata\local\programs\opera\68.0.3618.173\opera.exe] => (Block) C:\users\faïssal\appdata\local\programs\opera\68.0.3618.173\opera.exe => Pas de fichier
FirewallRules: [TCP Query User{18CF9BEB-A19A-4E97-A2E1-6973A8288F86}C:\users\faïssal\desktop\tanjihb\tanji.exe] => (Block) C:\users\faïssal\desktop\tanjihb\tanji.exe => Pas de fichier
FirewallRules: [UDP Query User{80FDAE8A-D42E-46BE-8298-52DA74F7DEDA}C:\users\faïssal\desktop\tanjihb\tanji.exe] => (Block) C:\users\faïssal\desktop\tanjihb\tanji.exe => Pas de fichier
FirewallRules: [TCP Query User{916B9462-1659-434E-943C-E285DFB1C47E}C:\users\faïssal\desktop\tanji\tanji.exe] => (Allow) C:\users\faïssal\desktop\tanji\tanji.exe => Pas de fichier
FirewallRules: [UDP Query User{FD2C0B82-9C3E-47DC-AEF5-7829BFB12021}C:\users\faïssal\desktop\tanji\tanji.exe] => (Allow) C:\users\faïssal\desktop\tanji\tanji.exe => Pas de fichier
FirewallRules: [TCP Query User{89BA9FE0-A468-4572-AEAF-DD216EE61A71}C:\users\faïssal\desktop\tanji\nouveau dossier\tanji.exe] => (Block) C:\users\faïssal\desktop\tanji\nouveau dossier\tanji.exe => Pas de fichier
FirewallRules: [UDP Query User{4115A014-D5B5-4A58-B236-8C36B7511F7F}C:\users\faïssal\desktop\tanji\nouveau dossier\tanji.exe] => (Block) C:\users\faïssal\desktop\tanji\nouveau dossier\tanji.exe => Pas de fichier
C:\users\faïssal\desktop\tanji\nouveau dossier\tanji.exe
FirewallRules: [TCP Query User{AF4CECB9-707B-4FD1-883E-0A96D2CF0669}C:\users\faïssal\appdata\local\programs\opera\73.0.3856.284\opera.exe] => (Block) C:\users\faïssal\appdata\local\programs\opera\73.0.3856.284\opera.exe => Pas de fichier
FirewallRules: [UDP Query User{EA348C6D-E6CC-4DA8-BA08-D23A8C738D9F}C:\users\faïssal\appdata\local\programs\opera\73.0.3856.284\opera.exe] => (Block) C:\users\faïssal\appdata\local\programs\opera\73.0.3856.284\opera.exe => Pas de fichier
EmptyTemp:
cmd: ipconfig /flushdns
cmd: netsh advfirewall reset
cmd: netsh winsock reset
end::