start:: closeprocesses: createrestorepoint: ContextMenuHandlers4_S-1-5-21-1498443699-3671330023-4075071907-1001: [Fb2kShellExt] -> {511D48AF-9E45-4CB8-8F02-9C1BE4BC3CF8} => -> Pas de fichier AlternateDataStreams: C:\ProgramData\TEMP:15B79D44 [201] AlternateDataStreams: C:\ProgramData\TEMP:ADAB671B [150] AlternateDataStreams: C:\ProgramData\TEMP:D735933A [148] HKU\S-1-5-21-1498443699-3671330023-4075071907-1001\Software\Classes\.bat: => <==== ATTENTION HKU\S-1-5-21-1498443699-3671330023-4075071907-1001\Software\Classes\.cmd: => <==== ATTENTION HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe" FirewallRules: [{00CE9BC3-D889-40D0-A64F-5CF9A1845D93}] => (Allow) Y:\Network\EpsonNetSetup\ENEasyApp.exe => Pas de fichier FirewallRules: [{CFA83B6E-E739-4F72-AEF0-BCC01A14A130}] => (Allow) Y:\Network\EpsonNetSetup\ENEasyApp.exe => Pas de fichier FirewallRules: [{8B6E6EEF-D76D-4CF5-A27E-DFBBDFDD00FB}] => (Allow) Y:\Network\EpsonNetSetup\ENEasyApp.exe => Pas de fichier FirewallRules: [{F6D37ACB-A717-43CD-B400-BAA58AE0C344}] => (Allow) Y:\Network\EpsonNetSetup\ENEasyApp.exe => Pas de fichier FirewallRules: [{228DF4A3-9DA4-4046-8D4F-24DF07AE4AA0}] => (Allow) LPort=1900 FirewallRules: [{A6C8013D-6A7E-4C93-AAF7-A33BCC2B51A1}] => (Allow) LPort=7900 FirewallRules: [{96EEB210-9D2D-4CBC-8BBF-6ADE26AFC084}] => (Allow) LPort=24234 FirewallRules: [{87F61C7F-551D-4275-B8A8-8E46855DDF26}] => (Allow) LPort=7679 FirewallRules: [{C4D50675-43A3-4572-B6AD-5C36384F4F8B}] => (Allow) LPort=7676 FirewallRules: [{809C5A8A-CE56-4E35-BB01-AC9ED2632633}] => (Allow) LPort=8643 FirewallRules: [{0D292A59-3DDC-418D-9794-28ED4D53925C}] => (Allow) LPort=8743 FirewallRules: [{9ABA5854-0CAD-4711-9BAE-04872E257AB4}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe => Pas de fichier FirewallRules: [{1F2B691A-4E1F-4450-8B3D-AF19FAEF106A}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe => Pas de fichier FirewallRules: [{9169DFE0-49A3-487F-A180-446E2657AE4D}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe => Pas de fichier FirewallRules: [{74B45061-809E-4D75-A4D5-25A5A700A167}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe => Pas de fichier FirewallRules: [{1A308125-DD4D-4FE5-BA70-A9910DBA565A}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Package\PTInstOnline.exe => Pas de fichier FirewallRules: [{846EF0BF-28BB-40A0-BD7E-D34AB561700A}] => (Allow) LPort=2869 FirewallRules: [{E865CFA3-13AF-4B9E-85FE-B209650F364B}] => (Allow) LPort=1900 FirewallRules: [{CBA63788-CF8A-4914-B04E-C5ADDBD2CF80}] => (Allow) C:\Program Files (x86)\Edrawsoft\EdrawMax (Français)\EdrawMax.exe enable=yes => Pas de fichier FirewallRules: [{7B82E029-0059-41FC-8D21-DAFBC8F2E66E}] => (Allow) C:\Program Files (x86)\Edrawsoft\EdrawMax (Français)\EdrawMax.exe enable=yes => Pas de fichier FirewallRules: [{C1E5B63E-10F7-479D-BAEF-FE86A55018EA}] => (Allow) C:\Program Files\BlueStacks\HD-Player.exe => Pas de fichier HKLM\...\Policies\Explorer: [AllowOnlineTips] 0 HKU\S-1-5-21-1498443699-3671330023-4075071907-1001\...\Run: [ScreenRec] => K:\ScreenRec_app\screenrec.exe (Pas de fichier) HKU\S-1-5-21-1498443699-3671330023-4075071907-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 HKU\S-1-5-21-1498443699-3671330023-4075071907-1001\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1 HKU\S-1-5-21-1498443699-3671330023-4075071907-1001\...\Policies\Explorer: [NoResolveSearch] 1 HKU\S-1-5-21-1498443699-3671330023-4075071907-1001\...\Policies\Explorer: [NoInternetOpenWith] 1 HKU\S-1-5-21-1498443699-3671330023-4075071907-1001\...\MountPoints2: {17bb36dc-7267-11e6-b167-408d5c535350} - "P:\LaunchU3.exe" -a IFEO\CompatTelRunner.exe: [Debugger] %windir%\System32\taskkill.exe IFEO\DeviceCensus.exe: [Debugger] %windir%\System32\taskkill.exe HKU\S-1-5-21-1498443699-3671330023-4075071907-1000\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\51.0.16.0\GoogleDriveFS.exe --startup_mode (Pas de fichier) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Nouveautés.lnk [2016-11-29] ShortcutTarget: Nouveautés.lnk -> G:\- NOUVEAUTES () <==== ATTENTION [zéro octet Fichier/Dossier] Startup: C:\Users\melom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Elements (N).lnk [2021-05-06] ShortcutTarget: Elements (N).lnk -> N:\ () <==== ATTENTION [zéro octet Fichier/Dossier] GroupPolicy: Restriction ? <==== ATTENTION Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION Task: {06A9848F-B3ED-42BB-823D-948DBC2CDE74} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION Task: {478AEDE8-A06F-46C0-A94B-971FC634DCCC} - System32\Tasks\Office2010_KMS => C:\Windows\Act_Office14_KMS.exe -task (Pas de fichier) C:\Windows\Act_Office14_KMS.exe Task: {9D2A8997-1E87-4516-AD43-3A3E63E8039D} - System32\Tasks\AutoKMS => C:\WINDOWS\AutoKMS\AutoKMS.exe (Pas de fichier) C:\WINDOWS\AutoKMS Task: {A8EC68F1-854D-4AC9-B66C-7AC545485B4C} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe --automatic (Pas de fichier) Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)] Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)] Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)] Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)] FF Extension: (Pas de nom) - C:\Users\melom\AppData\Roaming\Mozilla\Firefox\Profiles\77dh8ae1.default-1471959329639\extensions\translator@zoli.bod.xpi [non trouvé(e)] FF Extension: (Pas de nom) - C:\Users\melom\AppData\Roaming\Mozilla\Firefox\Profiles\77dh8ae1.default-1471959329639\extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi [non trouvé(e)] FF HKLM\...\Firefox\Extensions: [light_plugin_7571494CE0B94E11BB762B659A4AD71F@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\FFExt\light_plugin_firefox\addon.xpi => non trouvé(e) FF HKLM-x32\...\Firefox\Extensions: [light_plugin_7571494CE0B94E11BB762B659A4AD71F@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\FFExt\light_plugin_firefox\addon.xpi => non trouvé(e) U4 DcpSvc; pas de ImagePath U4 HomeGroupListener; pas de ImagePath U4 HomeGroupProvider; pas de ImagePath S3 ssudmdm; \SystemRoot\system32\DRIVERS\ssudmdm.sys [X] U4 xbgm; pas de ImagePath emptytemp: end::