Start::
CloseProcesses:
CreateRestorePoint:
Removeproxy:
Hosts:
Shortcut: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DVDFab 11 (x64)\Visite du siteDVDFab.lnk -> hxxp://www.dvdfab.cn/?s=dvdfab11&p=x64&v=11.0.4.
ShortcutWithArgument: C:\Users\Marc\Desktop\Eurosport Player.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=leadnpkekfeaadcgcfjkmadkblpnhlim
ShortcutWithArgument: C:\Users\Marc\Desktop\RouteYou.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=cbclfccgoofclllfkmjcflhlbbpghfdm
ShortcutWithArgument: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome\Eurosport Player.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=leadnpkekfeaadcgcfjkmadkblpnhlim
ShortcutWithArgument: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome\RouteYou.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=cbclfccgoofclllfkmjcflhlbbpghfdm
ShortcutWithArgument: C:\Users\Marc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome\YouTube.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=agimnkijcaahngcdmfeangaknmldooml
ShortcutWithArgument: C:\Users\Marc\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\d249d9ddd424b688\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default
HKLM\...\StartupApproved\Run32: => "NUSB3MON"
HKU\S-1-5-21-1884309661-4178977230-3774313253-1001\...\StartupApproved\Run: => "Moveslink2"
HKU\S-1-5-21-1884309661-4178977230-3774313253-1001\...\StartupApproved\Run: => "SuuntolinkLauncher"
HKU\S-1-5-21-1884309661-4178977230-3774313253-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-1884309661-4178977230-3774313253-1001\...\StartupApproved\Run: => "Delete Cached Standalone Update Binary"
HKU\S-1-5-21-1884309661-4178977230-3774313253-1001\...\StartupApproved\Run: => "Delete Cached Update Binary"
HKU\S-1-5-21-1884309661-4178977230-3774313253-1001\...\StartupApproved\Run: => "Uninstall 19.232.1124.0008"
HKU\S-1-5-21-1884309661-4178977230-3774313253-1001\...\StartupApproved\Run: => "Uninstall 19.232.1124.0008\amd64"
HKU\S-1-5-21-1884309661-4178977230-3774313253-1001\...\StartupApproved\Run: => "Uninstall 20.169.0823.0006"
HKU\S-1-5-21-1884309661-4178977230-3774313253-1001\...\StartupApproved\Run: => "Uninstall 20.169.0823.0006\amd64"
HKU\S-1-5-21-1884309661-4178977230-3774313253-1001\...\MountPoints2: {1984c9fc-1214-11ea-9202-8c89a57f8209} - "F:\LaunchU3.exe"
BHO: PDF Architect 7 Helper -> {2B035CAB-1F3D-4DE6-A32D-39B9E5F456D0} -> C:\Program Files\PDF Architect 7\creator\plugins\IEAddin\creator-ie-helper.dll => Pas de fichier
Toolbar: HKLM - PDF Architect 7 Toolbar - {61E612A7-2382-4570-8D3F-42BC136DDAD7} - C:\Program Files\PDF Architect 7\creator\plugins\IEAddin\creator-ie-plugin.dll Pas de fichier
FF HKLM\...\Firefox\Extensions: [pdf_architect_7_conv_v.2@pdfforge.org] - C:\Program Files\PDF Architect 7\creator\plugins\FirefoxAddin\pdf_architect_7_conv_v.2@pdfforge.org.xpi => non trouvé(e)
FF HKLM-x32\...\Firefox\Extensions: [pdf_architect_7_conv_v.2@pdfforge.org] - C:\Program Files\PDF Architect 7\creator\plugins\FirefoxAddin\pdf_architect_7_conv_v.2@pdfforge.org.xpi => non trouvé(e)
IE trusted site: HKU\S-1-5-21-1884309661-4178977230-3774313253-1001\...\localhost -> localhost
HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [] => [X]
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
Task: {21614497-7B02-47D2-848C-5051037B15B5} - \Microsoft_Hardware_Launch_itype_exe -> Pas de fichier <==== ATTENTION
Task: {56B3213F-4C05-414C-B671-EB55852E8798} - \Microsoft_Hardware_Launch_mousekeyboardcenter_exe -> Pas de fichier <==== ATTENTION
Task: {AA063379-F6E2-4156-A747-799ACD3933CF} - \Microsoft_Hardware_Launch_ipoint_exe -> Pas de fichier <==== ATTENTION
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
R2 BdDci; C:\WINDOWS\system32\DRIVERS\bddci.sys [367096 2020-11-23] (Bitdefender SRL -> Bitdefender)
C:\WINDOWS\system32\DRIVERS\bddci.sys
AlternateDataStreams: C:\ProgramData\TEMP:B801D4E2 [132]
cmd: ipconfig /flushdns
cmd: netsh advfirewall reset
cmd: netsh advfirewall set allprofiles state on
cmd: netsh winsock reset
cmd: sfc /scannow
Emptytemp:
End::