start::
closeprocesses:
createrestorepoint:
AV: McAfee VirusScan (Enabled - Up to date) {F682A51C-4EAD-6A3A-F460-B9C1D4A2DB09}
FW: Pare-feu McAfee (Enabled) {CEB92439-04C2-6B62-DF3F-10F42A719C72}
CustomCLSID: HKU\S-1-5-21-1633864590-1049872257-3158255915-1002_Classes\CLSID\{CB965DF1-B8EA-49C7-BDAD-5457FDC1BF92}\InprocServer32 -> C:\Users\esthe\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20244.4\x64\Microsoft.Teams.AddinLoader.dll => Pas de fichier
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\$McRebootA5E6DEAA56$.lnk [2021-09-20]
ShortcutTarget: $McRebootA5E6DEAA56$.lnk -> (Pas de fichier)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {1638D694-CA80-4E84-B4A4-717CFAA4FA91} - System32\Tasks\SplendidTask => C:\ProgramData\ASUS\ASUS [Argument = Splendid\SplendidStartUp.exe]
Task: {AB56BF0E-1420-42EA-A9AE-4960B6D4F4CD} - System32\Tasks\McAfee Remediation (Prepare) => C:\Program Files\Common Files\AV\McAfee VirusScan\upgrade.exe [4623976 2020-10-19] (McAfee, LLC -> McAfee, LLC)
C:\Program Files\Common Files\AV\McAfee VirusScan
FF Plugin HKU\S-1-5-21-1633864590-1049872257-3158255915-1002: @updates.epicbrowser.com/Epic Privacy Browser Installer;version=3 -> C:\Users\esthe\AppData\Local\Epic Privacy Browser\Installer\1.3.29.13\npEpicUpdate3.dll [Pas de fichier]
FF Plugin HKU\S-1-5-21-1633864590-1049872257-3158255915-1002: @updates.epicbrowser.com/Epic Privacy Browser Installer;version=9 -> C:\Users\esthe\AppData\Local\Epic Privacy Browser\Installer\1.3.29.13\npEpicUpdate3.dll [Pas de fichier]
S2 DevActSvc; "C:\Program Files (x86)\ASUS\ASUS Device Activation\DevActSvc.exe" [X]
S2 GiftBox.Service; "C:\Program Files (x86)\ASUS\ASUS GiftBox Service\GiftBoxService.exe" [X]
2021-09-19 20:16 - 2021-09-19 20:16 - 000000818 _____ C:\Users\esthe\Desktop\ZHPFix.txt
2021-09-19 20:14 - 2021-09-19 20:14 - 000000860 _____ C:\Users\esthe\Desktop\ZHPFix2.lnk
2021-09-19 20:11 - 2021-09-19 20:11 - 000284468 _____ C:\Users\esthe\Desktop\ZHPDiag.txt
2021-09-19 20:04 - 2021-09-19 21:14 - 000000000 ____D C:\Users\esthe\AppData\Roaming\ZHP
2021-09-19 20:04 - 2021-09-19 20:14 - 000000000 ____D C:\Users\esthe\AppData\Local\ZHP
2021-09-19 20:04 - 2021-09-19 20:04 - 000000867 _____ C:\Users\esthe\Desktop\ZHPDiag.lnk
2021-09-19 20:00 - 2021-09-19 20:00 - 000000000 ____D C:\ProgramData\TotalAV
2021-09-19 20:00 - 2021-09-19 20:00 - 000000000 ____D C:\ProgramData\SecuritySuite
2021-09-19 19:01 - 2021-09-19 19:03 - 000000000 ____D C:\AdwCleaner
2021-09-15 07:30 - 2021-09-15 07:31 - 011607240 _____ (Shelblock) C:\Users\esthe\Downloads\shelblock_installer-3.1.0.exe
2021-09-15 07:33 - 2021-09-15 07:33 - 000000000 ____D C:\Users\esthe\AppData\Local\Shelblock
2021-09-20 07:29 - 2021-02-06 01:35 - 000000000 ____D C:\ProgramData\McAfee
removeproxy:
emptytemp:
end::