start::
CreateRestorePoint:
CloseProcesses:
Hosts:
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
FirewallRules: [{7424A3C3-61EE-4B50-BA69-61F771E07954}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeCam.exe => Pas de fichier
FirewallRules: [{60E67F08-A68F-4930-BCFC-DDA0E2075930}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeCam.exe => Pas de fichier
FirewallRules: [{B4C179BE-E6B9-46A5-BEF4-B3A1475614A7}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeEnC2.exe => Pas de fichier
FirewallRules: [{36E3C442-939D-45EB-AEBA-5413838A5E4B}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeEnC2.exe => Pas de fichier
FirewallRules: [{949A72F3-BC41-4591-9B83-9D8AF7F41010}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe => Pas de fichier
FirewallRules: [{213C8F21-5F8E-45E9-B028-C3F8549ACCF1}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe => Pas de fichier
FirewallRules: [{4815814D-BECA-4321-AFBC-75A7DBC8145D}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeTray.exe => Pas de fichier
FirewallRules: [{5CF3091D-7743-4D3F-98D8-51289AF91D09}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeTray.exe => Pas de fichier
FirewallRules: [{42861DBA-AA4C-4066-A53A-E55BE64A8230}] => (Allow) C:\Users\User\AppData\Roaming\Zoom\bin\airhost.exe => Pas de fichier
FirewallRules: [{CCCFF888-DD9B-4A4F-991C-2E21701DEBCC}] => (Allow) C:\Users\User\AppData\Roaming\Zoom\bin\airhost.exe => Pas de fichier
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
2021-09-09 11:00 - 2021-09-09 11:00 - 000266628 _____ C:\Users\User\Desktop\ZHPDiag.txt
2021-09-09 10:54 - 2021-09-09 11:00 - 000000000 ____D C:\Users\User\AppData\Roaming\ZHP
2021-09-09 10:54 - 2021-09-09 10:54 - 000000000 ____D C:\Users\User\AppData\Local\ZHP
2021-09-09 10:53 - 2021-09-09 10:53 - 003475608 _____ (Nicolas Coolman) C:\Users\User\Desktop\ZHPSuite.exe
2021-09-08 10:31 - 2021-08-05 20:31 - 000000000 ____D C:\ProgramData\McAfee Security Scan
2021-08-28 21:13 - 2018-10-29 23:45 - 000000000 ____D C:\Program Files\McAfee
2021-08-28 21:13 - 2017-02-09 13:32 - 000000000 ____D C:\Program Files\Common Files\McAfee
EmptyTemp:
cmd: ipconfig /flushdns
cmd: netsh advfirewall reset
cmd: netsh winsock reset
cmd: sfc /scannow
end::