start::
closeprocesses:
createrestorepoint:
HKLM\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe 
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133728 2017-09-12] (Wondershare Technology Co.,Ltd -> Wondershare) 
HKU\S-1-5-21-2190577168-3128455721-1938284010-1001\...\Run: [pCloud] => [X] 
Edge Profile: C:\Users\Maxime Girard\AppData\Local\Microsoft\Edge\User Data\cId=128000000001363769&path= [2021-05-01] <==== ATTENTION 
C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact
CustomCLSID: HKU\S-1-5-21-2190577168-3128455721-1938284010-1001_Classes\CLSID\{a0176474-ed11-437f-8ebf-b53d64c41fc3}\localserver32 -> "C:\Program Files\Gainedge.org\Better Explorer\BetterExplorer.exe" -ToastActivated => Pas de fichier 
ContextMenuHandlers1: [PeContextMenuExtension] -> -{098A124A-AA1C-38C8-A65E-D1199A14516A} => -> Pas de fichier
ContextMenuHandlers1: [Roxio Burn] -> -{E8CB9D53-A47A-42B5-9F5B-96B037C9DD4C} => -> Pas de fichier 
BHO: Pas de nom -> {58E7AC83-6D37-4E5F-8B93-B301909F050C}' -> Pas de fichier 
BHO-x32: Pas de nom -> {58E7AC83-6D37-4E5F-8B93-B301909F050C}' -> Pas de fichier 
HKLM\...\StartupApproved\Run: => "Wondershare Helper Compact.exe" 
cmd: netsh advfirewall reset
emptytemp:
end::