start::
CreateRestorePoint:
CloseProcesses:
Hosts:
HKU\S-1-5-21-3062904362-2798878002-3293869765-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com/
HKLM\...\StartupApproved\StartupFolder: => "SteelSeries Engine 3.lnk"
HKLM\...\StartupApproved\Run: => "LogiPresentation"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKU\S-1-5-21-3062904362-2798878002-3293869765-1001\...\StartupApproved\StartupFolder: => "Twitch.lnk"
HKU\S-1-5-21-3062904362-2798878002-3293869765-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-3062904362-2798878002-3293869765-1001\...\StartupApproved\Run: => "Discord"
HKU\S-1-5-21-3062904362-2798878002-3293869765-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-3062904362-2798878002-3293869765-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-3062904362-2798878002-3293869765-1001\...\StartupApproved\Run: => "Overwolf"
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
FF Extension: (wanteeed) - C:\Users\maxim\AppData\Roaming\Mozilla\Firefox\Profiles\8iakattu.default-release\Extensions\{EDB6A15C-5F8C-4531-92FA-98E988CF233C}.xpi [2021-04-28] [UpdateUrl:hxxps://app.wanteeed.com/extensions/update_firefox.json]
CHR StartupUrls: Default -> "hxxp://www.searchnu.com/406","hxxp://www.google.fr/","hxxp://google.fr/","hxxps://twitter.com/i/connect","hxxps://www.facebook.com/MPokora","hxxp://www.youtube.com/","hxxp://start.iminent.com/?appId=11111111","hxxp://astromenda.com/?f=7&a=ast_ir_14_43_ch&cd=2XzuyEtN2Y1L1Qzu0EtDyCzyzyyD0A0DzytA0ByBtBzy0EtAtN0D0Tzu0StCtDtByDtN1L2XzutAtFyDtFtCtFyEtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyE0BtAyC0B0AtA0AtG0BtA0D0FtGyB0DyBzztG0F0E0DtCtGtCtBtCyD0CyCyDzzyC0A0E0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyDyBtCzz0F0EtC0FtGyCyC0EyBtGyEzztCyCtG0ByC0EtBtG0DtC0AyByEzy0AzzyC0A0E0C2Q&cr=1375846999&ir=","hxxp://www.mystartsearch.com/?type=hp&ts=1413912571&from=smt&uid=TOSHIBAXMK6459GSXP_51MBC03YTXX51MBC03YT"
2020-12-10 16:10 - 2020-12-10 16:10 - 000000000 _____ () C:\Users\maxim\AppData\Local\{1A448EE7-C1C1-4BED-9FED-FB2DB19EBDE2}
EmptyTemp:
cmd: ipconfig /flushdns
cmd: netsh advfirewall reset
cmd: netsh winsock reset
cmd: sfc /scannow
end::