start::
closeprocesses:
createrestorepoint:
virustotal: C:\Program Files (x86)\ProblemDavori\ProblemDavori.exe
2021-02-16 15:54 - 2021-02-16 15:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge
2021-02-16 15:54 - 2021-02-16 15:54 - 000000000 ____D C:\Program Files (x86)\RelevantKnowledge
2021-02-16 15:54 - 2020-04-10 01:05 - 001111408 _____ (TMRG, Inc.) C:\WINDOWS\system32\rlls64.dll
2021-02-16 15:54 - 2020-04-10 01:05 - 000754032 _____ (TMRG, Inc.) C:\WINDOWS\SysWOW64\rlls.dll
2021-02-16 15:52 - 2021-02-16 16:38 - 000000000 ____D C:\Program Files (x86)\IBuddy
2021-02-16 15:52 - 2021-02-16 15:52 - 000000000 ____D C:\Users\erreu\AppData\Local\TaskbarSystem
2021-02-16 15:52 - 2021-02-16 15:52 - 000000000 ____D C:\ProgramData\IdleBuddy
2021-02-16 15:51 - 2021-02-16 15:52 - 000000000 ____D C:\Program Files (x86)\ProblemDavori
2021-02-16 15:51 - 2021-02-16 15:51 - 000016438 _____ C:\Users\erreu\AppData\Local\partner.bmp
2021-02-16 15:50 - 2021-02-16 15:51 - 000000000 ____D C:\Users\erreu\AppData\Roaming\PumoriRealm
2021-02-16 15:41 - 2021-02-16 15:41 - 000000000 ____D C:\Users\erreu\AppData\Local\MultiPlayerManager
2021-02-16 15:17 - 2021-02-16 15:17 - 000000298 _____ C:\Users\erreu\d4ac4633ebd6440fa397b84f1bc94a3c.7z
2021-02-16 15:07 - 2021-02-16 15:07 - 000001249 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoPad - Logiciel de montage vidéo.lnk
2021-02-16 15:07 - 2021-02-16 15:07 - 000001237 _____ C:\ProgramData\Bureau\VideoPad - Logiciel de montage vidéo.lnk
2021-02-16 15:07 - 2021-02-16 15:07 - 000000000 ____D C:\WINDOWS\system32\Tasks\NCH Software
2021-02-16 15:07 - 2021-02-16 15:07 - 000000000 ____D C:\Users\erreu\AppData\Roaming\NCH Software
2021-02-16 15:07 - 2021-02-16 15:07 - 000000000 ____D C:\ProgramData\NCH Software
2021-02-16 15:07 - 2021-02-16 15:07 - 000000000 ____D C:\Program Files (x86)\NCH Software
2021-02-16 15:02 - 2021-02-16 15:28 - 3540814183 _____ C:\Users\erreu\Downloads\Adobe Photoshop 2020 & Adobe Premiere Pro 2020.rar
R2 RelevantKnowledge; C:\Program Files (x86)\RelevantKnowledge\rlservice.exe [170352 2020-04-10] (TMRG, Inc. -> TMRG, Inc.) <==== ATTENTION
Task: {9DD3F93E-99C3-4A49-B0F4-666F45FEEDC0} - System32\Tasks\Avast Software\Overseer => C:\Windows\OEM\CustomizationFiles\Overseer.exe [1741416 2021-01-28] (Avast Software s.r.o. -> Avast Software)
R2 IBuddyService; C:\Program Files (x86)\IBuddy\IBuddyService.exe [8269288 2021-02-16] (KAY ENTERPRICES LIMITED -> IdleTime Software) [Fichier non signé] [Fichier en cours d'utilisation]
cmd: reg query HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall /s
cmd: netsh advfirewall reset
emptytemp:
end::