Start::
CloseProcesses:
CreateRestorePoint:
Removeproxy:
Hosts:
HKLM\...\RunOnce: [*EmptyTemp] => cmd /c rd /q/s C:\FRST\Temp (Pas de fichier)
HKLM\...\RunOnce: [ZHPCleaner_File1] => CMD /c DEL "C:\Users\PIERRE-DAIG\AppData\Local\Temp\mat-debug-11476.log" /F /Q (Pas de fichier) <==== ATTENTION
HKU\S-1-5-21-1426486088-3157828713-298550685-1001\...\Run: [Google Update] => "C:\Users\PIERRE-DAIG\AppData\Local\Google\Update\1.3.36.132\GoogleUpdateCore.exe" (Pas de fichier)
HKU\S-1-5-21-1426486088-3157828713-298550685-1001\...\Run: [com.messenger] => "C:\Users\PIERRE-DAIG\AppData\Local\Programs\Messenger\Messenger.exe" messenger://openAtLogin (Pas de fichier)
HKU\S-1-5-21-1426486088-3157828713-298550685-1001\...\RunOnce: [Uninstall 21.235.1114.0001] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\PIERRE-DAIG\AppData\Local\Microsoft\OneDrive\21.235.1114.0001" (Pas de fichier)
HKU\S-1-5-21-1426486088-3157828713-298550685-1001\...\RunOnce: [Uninstall 22.002.0103.0002] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\PIERRE-DAIG\AppData\Local\Microsoft\OneDrive\22.002.0103.0002" (Pas de fichier)
HKU\S-1-5-21-1426486088-3157828713-298550685-1001\...\RunOnce: [Uninstall 22.007.0109.0002] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\PIERRE-DAIG\AppData\Local\Microsoft\OneDrive\22.007.0109.0002" (Pas de fichier)
HKU\S-1-5-21-1426486088-3157828713-298550685-1001\...\RunOnce: [Uninstall 22.055.0313.0001] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\PIERRE-DAIG\AppData\Local\Microsoft\OneDrive\22.055.0313.0001" (Pas de fichier)
HKU\S-1-5-21-1426486088-3157828713-298550685-1001\...\RunOnce: [Uninstall 22.070.0403.0004] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\PIERRE-DAIG\AppData\Local\Microsoft\OneDrive\22.070.0403.0004" (Pas de fichier)
HKU\S-1-5-21-1426486088-3157828713-298550685-1001\...\RunOnce: [Uninstall 22.093.0501.0001] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\PIERRE-DAIG\AppData\Local\Microsoft\OneDrive\22.093.0501.0001" (Pas de fichier)
HKU\S-1-5-21-1426486088-3157828713-298550685-1001\...\RunOnce: [Uninstall 22.099.0508.0001] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\PIERRE-DAIG\AppData\Local\Microsoft\OneDrive\22.099.0508.0001" (Pas de fichier)
Task: {0E1B2BBA-9E89-46C1-B64D-52334C1A409D} - System32\Tasks\Microsoft\Windows\Shell\UpdateAgentTask_AquireFOD => C:\WINDOWS\System32\ShellUpdateAgentTask.exe -AquireFOD (Pas de fichier)
Task: {12469F3F-5031-4F7B-8132-E18178931DA8} - System32\Tasks\Microsoft\Windows\Shell\UpdateAgentTask_SetCBSEndOfLife => C:\WINDOWS\System32\ShellUpdateAgentTask.exe -SetCBSEndOfLife (Pas de fichier)
Task: {27A1BF53-F592-428B-B60F-432016239088} - System32\Tasks\Microsoft\Windows\ShellLogonTask_SetCBSEndOfLife => C:\WINDOWS\System32\ShellLogonTask.exe -SetCBSEndOfLife (Pas de fichier)
Task: {2B91F39F-E356-441D-AF94-99C043B82C11} - System32\Tasks\Java Platform SE Auto Updater => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Pas de fichier)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe join (Pas de fichier)
Task: {D7C4784F-A6A0-44EA-82BB-489CCC56AC63} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1426486088-3157828713-298550685-1001UA => C:\Users\PIERRE-DAIG\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler (Pas de fichier)
Task: {D87CDA56-EEA6-43A7-8C46-EC77536314B5} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1426486088-3157828713-298550685-1001Core => C:\Users\PIERRE-DAIG\AppData\Local\Google\Update\GoogleUpdate.exe /c (Pas de fichier)
2019-10-15 18:21 - 2019-10-15 18:21 - 000000744 _____ () C:\Program Files (x86)\LMIR0F2F8001.tmp.bat
2019-10-15 18:21 - 2019-10-15 18:21 - 000000542 _____ () C:\Program Files (x86)\LMIR0F2F8001.tmp_r.bat
StartRegEdit:
Windows Registry Editor Version 5.00
[-HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains
[-HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains
[-HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\P3P
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\P3P]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains]
[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\P3P]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\P3P]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\microsoft.com\*.update]
"http"=dword:00000002
"https"=dword:00000002
EndRegEdit:
cmd: DISM.exe /Online /Cleanup-image /Restorehealth
cmd: sfc /scannow
cmd: ipconfig /flushdns
cmd: netsh advfirewall reset
cmd: netsh advfirewall set allprofiles state on
cmd: netsh winsock reset
Emptytemp:
End::