start::
closeprocesses:
createrestorepoint:
virustotal: C:\Users\MOI\Downloads\Zoom_cm_fo42anktZ9vvrZo4_mQ2BPGGQKwXpzPU6K3IH49HiQN141RVz1zol-@a04vuXmiLsSianoh_k34a1c66581effe79_.exe
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\90.0.4430.93\Installer\chrmstp.exe [2021-04-27] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\90.1.23.75\Installer\chrmstp.exe [2021-04-29] (Brave Software, Inc. -> Brave Software, Inc.)
Task: {2E96F56A-22B3-4C95-AFDE-CBED60F44B85} - System32\Tasks\Microsoft\Windows\Data Integrity Scan\Lhvwbvwzoept => C:\windows\Microsoft.NET\Framework\v4.0.30319\regsvcs.exe "C:\Program Files (x86)\SourcesStarted\MohejExvironment\Xjdws_UBH223.dll"
Task: {95A81B50-2A00-4D1A-9C15-BDC9C1AD86A2} - System32\Tasks\CTOptimizer => C:\Users\MOI\AppData\Roaming\Microsoft\Windows\Start Menu\CryptoTabUpdate\CTOptimizer.exe [2146776 2021-02-03] () [Fichier non signé] [Fichier en cours d'utilisation]
C:\Program Files (x86)\SourcesStarted
C:\Users\MOI\AppData\Roaming\Microsoft\Windows\Start Menu\CryptoTabUpdate
Task: C:\windows\Tasks\CTOptimizer.job => C:\Users\MOI\AppData\Roaming\Microsoft\Windows\Start Menu\CryptoTabUpdate\CTOptimizer.exe
2021-05-04 08:49 - 2021-05-04 08:53 - 000000394 ____H C:\windows\Tasks\CTOptimizer.job
2021-05-03 15:39 - 2021-05-04 08:48 - 000000000 ___HD C:\Users\MOI\AppData\Roaming\EdgeCP
2021-04-30 11:41 - 2021-04-30 11:41 - 000000000 ____D C:\Users\MOI\AppData\Roaming\Microsoft\Windows\Start Menu\CryptoTabUpdate
2021-04-30 11:41 - 2021-04-30 11:41 - 000000000 ____D C:\Users\MOI\AppData\Local\CryptoCompany
2021-04-30 09:29 - 2021-04-30 09:30 - 000000000 ____D C:\ProgramData\WGCIVAI1UZRXZZSHBHKGS2H03
2021-04-29 10:15 - 2021-05-04 13:58 - 000000000 ____D C:\ProgramData\{1D7BD5EC-1EA9-44E8-9114-08DDFBD26AB9}
2021-04-29 08:39 - 2021-04-29 08:39 - 000000000 ____D C:\Users\MOI\AppData\LocalLow\Oracle
2021-04-28 19:28 - 2021-04-28 19:28 - 000032768 _____ C:\Users\MOI\AppData\Roaming\1619630907956-shm
2021-04-28 19:28 - 2021-04-28 19:28 - 000000000 _____ C:\Users\MOI\AppData\Roaming\1619630907956-wal
2021-04-27 20:26 - 2021-04-27 20:27 - 000000000 ____D C:\ProgramData\MH4J58K99SZ2RNQI74FQ3GKS6
2021-04-27 15:05 - 2021-05-04 13:58 - 000000000 ____D C:\Users\MOI\AppData\Roaming\CoverSearchTool
2021-04-25 20:41 - 2021-04-25 20:43 - 000000000 ____D C:\Users\MOI\AppData\Roaming\XkhcPoUSquhmmwkpiqevsTMaaECRFZXbMcWIjRruDyeTfRBoMdTBaiUtnVelFejqo
2021-04-25 11:19 - 2021-04-25 11:19 - 000000000 ____D C:\Users\MOI\AppData\Roaming\Bisut
2021-04-25 11:17 - 2021-04-25 12:26 - 000000000 ____D C:\Users\MOI\AppData\Roaming\LQiwABuCbNQPjdWWDQMbzUtxNtacglhixyXdlAHhUCrkbCzBrSzhilL
2021-04-23 21:56 - 2021-05-04 13:58 - 000000000 ____D C:\Users\MOI\AppData\Roaming\IvOyQwkQbLuJoMKPtBkDDHoWLlKJfpkKEsadGqQPocJvcIveqPYNFpfqgSzFdCBhAvtRxxprLvxiYLBrOIImkbyxwaeNHlnGUcVYDFHGGUwpPo
2021-04-23 21:56 - 2021-04-26 08:22 - 000000000 ____D C:\Users\MOI\AppData\Roaming\Smart Clock
2021-04-23 21:53 - 2021-04-23 21:53 - 000000000 ____D C:\Users\MOI\AppData\Roaming\Bisuntr
2021-04-23 21:52 - 2021-04-23 21:56 - 000000000 ____D C:\Users\MOI\AppData\Roaming\OQSCbqHsnJDpzfVbTytabpYRwFNvRnQXOxdhaJnXqJwsRaPWWehUboIFRw
2021-04-23 21:52 - 2021-04-23 21:52 - 000000000 ____D C:\ProgramData\ALEWHR430ZJC21YAEX9VI12L0
2021-04-23 21:46 - 2021-04-23 21:46 - 000000000 ____D C:\Users\MOI\Downloads\40b6e2c0__izotope-vocalsy
2021-04-28 19:28 - 2021-04-28 19:28 - 000032768 _____ () C:\Users\MOI\AppData\Roaming\1619630907956-shm
2021-04-28 19:28 - 2021-04-28 19:28 - 000000000 _____ () C:\Users\MOI\AppData\Roaming\1619630907956-wal
cmd: sfc /scannow
emptytemp:
end::