start::
closeprocesses:
createrestorepoint:
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ContextMenuHandlers1: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2019-04-15] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
ContextMenuHandlers1: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2019-04-15] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
ContextMenuHandlers6: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2019-04-15] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
ContextMenuHandlers6: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2019-04-15] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
C:\Program Files (x86)\Spybot - Search & Destroy 2
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
FirewallRules: [{83E18393-1879-48CA-8241-7D1B3EDD4007}] => (Allow) C:\Program Files\ASUS\ARMOURY CRATE Service\MobilePlugin\AutoConnectHelper.exe => Pas de fichier
FirewallRules: [{84280242-4684-46E6-A70A-1C43F1C5127A}] => (Allow) C:\Users\fauch\AppData\Roaming\Zoom\bin\airhost.exe => Pas de fichier
FirewallRules: [{835C287E-B748-4D60-9250-16A1F11E861A}] => (Allow) C:\Users\fauch\AppData\Roaming\Zoom\bin\airhost.exe => Pas de fichier
FirewallRules: [{7E92DBC4-C20C-46E6-AADE-AD3889E0910D}] => (Allow) C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe => Pas de fichier
FirewallRules: [{707DA0F4-D902-4024-888C-84904B28B21C}] => (Allow) C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe => Pas de fichier
FirewallRules: [{10EA7D51-BF34-43AA-B2FD-743AC6462093}] => (Allow) C:\Program Files (x86)\Remote Mouse\RemoteMouseCore.exe => Pas de fichier
FirewallRules: [{150FE7E3-6690-4C04-B92D-3A514A7413DF}] => (Allow) C:\Program Files (x86)\Remote Mouse\RemoteMouseCore.exe => Pas de fichier
FirewallRules: [{3E8345A4-55A6-4615-8C25-1885CD997348}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe => Pas de fichier
FirewallRules: [{875C3B2B-5516-4261-AD99-4EF7D9E75E5C}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe => Pas de fichier
FirewallRules: [{764618EA-1B40-4F16-9603-13E6204632D4}] => (Allow) C:\Program Files\ASUS\ARMOURY CRATE Service\MobilePlugin\AutoConnectHelper.exe => Pas de fichier
FirewallRules: [{8A2CB209-04FE-43F8-8158-42AA8A97D109}] => (Allow) C:\Program Files\ASUS\ARMOURY CRATE Service\MobilePlugin\AutoConnectHelper.exe => Pas de fichier
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [6787856 2019-03-19] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
HKLM\...\Policies\Explorer: [HideSCAHealth] 1
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-4002426620-4048338870-2653177955-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [33698888 2021-04-22] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-4002426620-4048338870-2653177955-1001\...\Run: [StikyPro] => C:\Program Files (x86)\StikyPro\StikyPro.exe
C:\Program Files (x86)\StikyPro
BootExecute: autocheck autochk * sdnclean64.exe
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {7D77AE23-C277-45D2-AF07-CEC70A4ED9BF} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [7337200 2020-03-04] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
Task: {9C442A07-7A0B-49C4-A0D2-278BD318894E} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [5723640 2019-09-04] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
Task: {BF1D097E-C0A1-4856-8CCC-87F9D1E09571} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [6166736 2020-03-04] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
Task: {EC875081-5C22-473C-B1EB-E01955A15578} - System32\Tasks\McAfee Remediation (Prepare) => C:\Program Files\Common Files\AV\McAfee VirusScan\upgrade.exe [4603200 2020-08-16] (McAfee, LLC -> McAfee, LLC)
ProxyEnable: [S-1-5-21-4002426620-4048338870-2653177955-1001] => Proxy est activé.
ProxyServer: [S-1-5-21-4002426620-4048338870-2653177955-1001] => 127.0.0.1:8003
S2 MBAMChameleon; \SystemRoot\System32\Drivers\MbamChameleon.sys [X]
S3 MpKsl6fb1fc3c; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{CC20125C-BF4C-414B-8C07-C8E479F2703D}\MpKslDrv.sys [X]
2021-05-06 15:22 - 2021-01-18 16:14 - 000000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
ProxyEnable: [S-1-5-21-4002426620-4048338870-2653177955-1001] => Proxy est activé.
ProxyServer: [S-1-5-21-4002426620-4048338870-2653177955-1001] => 127.0.0.1:8003
Tcpip\..\Interfaces\{3fe29cf1-7923-4d98-940d-26062833c64f}: [DhcpNameServer] 40.53.1.11
removeproxy:
emptytemp:
end::