start::
CreateRestorePoint:
CloseProcesses:
Hosts:
Task: {CE82017F-35FA-4733-8B52-1DB8C2183355} - \AMDRyzenMasterSDKTask -> Pas de fichier <==== ATTENTION 
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION 
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)] 
S3 xhunter1; C:\WINDOWS\xhunter1.sys [2729456 2021-04-25] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)
S2 AMDRyzenMasterDriverV17; \??\C:\Program Files\AMD\CNext\CNext\AMDRyzenMasterDriver.sys [X]
U4 npcap_wifi; pas de ImagePath 
2021-08-03 08:18 - 2021-08-07 21:52 - 000000000 ____D C:\Program Files (x86)\R.G. Mechanics 
AlternateDataStreams: C:\WINDOWS\System32:tdsrinu.gfc [5882]
AlternateDataStreams: C:\Users\33651\Application Data:00e481b5e22dbe1f649fcddd505d3eb7 [394]
AlternateDataStreams: C:\Users\33651\AppData\Roaming:00e481b5e22dbe1f649fcddd505d3eb7 [394] 
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
IE trusted site: HKU\S-1-5-21-3092295615-2787068036-143611277-1001\...\localhost -> localhost 
HKLM\...\StartupApproved\StartupFolder: => "$McRebootA5E6DEAA56$.lnk"
HKLM\...\StartupApproved\Run: => "Adobe Creative Cloud"
HKLM\...\StartupApproved\Run32: => "GrooveMonitor"
HKLM\...\StartupApproved\Run32: => "SecurityHealth"
HKLM\...\StartupApproved\Run32: => "AdobeGCInvoker-1.0"
HKLM\...\StartupApproved\Run32: => "Autodesk Desktop App"
HKLM\...\StartupApproved\Run32: => "Autodesk Genuine Service "
HKLM\...\StartupApproved\Run32: => "APSDaemon"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run32: => "Adobe CCXProcess"
HKU\S-1-5-21-3092295615-2787068036-143611277-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-3092295615-2787068036-143611277-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-3092295615-2787068036-143611277-1001\...\StartupApproved\Run: => "uTorrent"
HKU\S-1-5-21-3092295615-2787068036-143611277-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-3092295615-2787068036-143611277-1001\...\StartupApproved\Run: => "Discord"
HKU\S-1-5-21-3092295615-2787068036-143611277-1001\...\StartupApproved\Run: => "CCXProcess"
HKU\S-1-5-21-3092295615-2787068036-143611277-1001\...\StartupApproved\Run: => "Adobe Reader Synchronizer" 
EmptyTemp:
cmd: ipconfig /flushdns
cmd: netsh advfirewall reset
cmd: netsh winsock reset
cmd: sfc /scannow
end::