start::
CreateRestorePoint:
CloseProcesses:
Hosts:
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-1447191453-3540396091-1263105346-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
BHO: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll => Pas de fichier
BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll => Pas de fichier
C:\Program Files\Bitdefender
Toolbar: HKLM - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll Pas de fichier
Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll Pas de fichier
FirewallRules: [{3436663D-33A2-4AF3-B7BE-E3E3B3F819AE}] => (Allow) C:\Users\lynou\AppData\Roaming\Zoom\bin\airhost.exe => Pas de fichier
FirewallRules: [{FCB9E801-C780-4A7C-8C2A-25E35AB60447}] => (Allow) C:\Users\lynou\AppData\Roaming\Zoom\bin\airhost.exe => Pas de fichier
2021-12-21 21:54 - 2021-12-21 21:54 - 000424636 _____ C:\ProgramData\cl.uninstall.1640120007.bdinstall.v2.bin
2021-12-21 21:54 - 2021-12-21 21:54 - 000090024 _____ C:\ProgramData\agent.uninstall.1640120076.bdinstall.v2.bin
2021-12-21 21:53 - 2021-12-21 21:53 - 000106708 _____ C:\ProgramData\vpn.uninstall.1640119949.bdinstall.v2.bin
2021-12-21 09:50 - 2021-12-21 09:50 - 000317424 _____ C:\Users\lynou\Desktop\ZHPDiag.txt
2021-12-21 09:45 - 2021-12-21 09:50 - 000000000 ____D C:\Users\lynou\AppData\Roaming\ZHP
2021-12-21 09:45 - 2021-12-21 09:45 - 000000867 _____ C:\Users\lynou\Desktop\ZHPSuite.lnk
2021-12-21 09:45 - 2021-12-21 09:45 - 000000000 ____D C:\Users\lynou\AppData\Local\ZHP
2021-12-21 09:43 - 2021-12-21 09:43 - 003478168 _____ (Nicolas Coolman) C:\Users\lynou\Downloads\ZHPSuite.exe
EmptyTemp:
cmd: ipconfig /flushdns
cmd: netsh advfirewall reset
cmd: netsh winsock reset
cmd: sfc /scannow
end::