start::
closeprocesses:
createrestorepoint:
AV: Malwarebytes (Disabled - Out of date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
virustotal: C:\Program Files\Audient\iD\iD.exe
HKU\S-1-5-21-721099943-786999080-816867309-1002\...\Winlogon: [Shell] explorer.exe,
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Host Services x64.lnk [2021-08-29]
ShortcutTarget: Host Services x64.lnk -> C:\Program Files\qemu\Host Services x64.exe (Pas de fichier)
Task: {F54D1C82-3366-4FFB-926D-FBB71C2F019D} - System32\Tasks\Firefox Default Browser Agent 01FDFD1A6B364EA5 => C:\Users\Martin VDD\AppData\Roaming\rfbrgjb [42072 2021-08-09] (Microsoft Corporation -> Microsoft Corporation)
C:\Users\Martin VDD\AppData\Roaming\rfbrgjb
S3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [42256 2020-05-29] (AVB Disc Soft, SIA -> Disc Soft Ltd)
S3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [59360 2020-05-29] (AVB Disc Soft, SIA -> Disc Soft Ltd)
2021-11-01 15:39 - 2021-11-01 15:39 - 000000000 ____D C:\Program Files (x86)\KMSauto.net
2021-08-09 21:36 - 2021-08-09 21:36 - 000248375 ___SH () C:\Users\Martin VDD\AppData\Roaming\abwuwub
2021-09-09 16:26 - 2021-11-01 16:15 - 000000016 _____ () C:\Users\Martin VDD\AppData\Roaming\msregsvv.dll
2021-08-09 21:36 - 2021-08-09 21:36 - 000042072 ___SH (Microsoft Corporation) C:\Users\Martin VDD\AppData\Roaming\rfbrgjb
cmd: cscript %windir%\System32\slmgr.vbs /dli
reg query "HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall" /s
reg query "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall" /s
hosts:
cmd: netsh advfirewall reset
emptytemp:
end::