start::
CreateRestorePoint:
CloseProcesses:
Removeproxy:

HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe (Pas de fichier)
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {0107245C-6272-4A1E-81BE-399BAAB54DF0} - System32\Tasks\Time Trigger Task => C:\Users\djil\AppData\Local\04cc8a39-e725-4782-a82d-3800389ef4b7\B557.exe --Task (Pas de fichier) <==== ATTENTION
C:\Users\djil\AppData\Local\04cc8a39-e725-4782-a82d-3800389ef4b7\B557.exe
Task: {16D58959-26E1-4F0B-8B04-E8D7AE2AF162} - System32\Tasks\chrome => "C:\HP\Data\HPLB\chrome.exe" (Pas de fichier)
Task: {293E511F-1895-4320-AB88-154ABE8D6E13} - System32\Tasks\Ath_CoexAgent => C:\SYSTEM.SAV\Flags\Ath_CoexAgent.exe (Pas de fichier)
Task: {29CB3190-1E5F-4951-99EB-93F1D6881012} - System32\Tasks\TenorshareWinAdService => C:\_Exception1\TenorshareWinAdService.exe (Pas de fichier)
Task: {30BD9892-8B3A-4DE6-8E72-1581A19D7A43} - System32\Tasks\conhost => C:\HP\Data\HPLB\conhost.exe (Pas de fichier)
Task: {366A5DB5-24DF-4753-BFA1-CE01F8B3DCB9} - System32\Tasks\Firefox Default Browser Agent AFD703083B7B5B9D => C:\Users\djil\AppData\Roaming\ijvrgtj.exe (Pas de fichier) <==== ATTENTION
C:\Users\djil\AppData\Roaming\ijvrgtj.exe
Task: {37F4B6EC-F456-4391-B32C-5F170677CF92} - System32\Tasks\IrHwHnwq => C:\Windows\system32\rundll32.exe "C:\Program Files (x86)\IrHwHnwq\IrHwHnwq.dll",IrHwHnwq <==== ATTENTION
C:\Program Files (x86)\IrHwHnwq\IrHwHnwq.dll
Task: {3D0A80CA-BAB9-484F-878C-B0FFBF50AD27} - System32\Tasks\explorer => "C:\SystemID\explorer.exe" (Pas de fichier)
Task: {3FDE6E32-7DBC-41B4-8B67-035B2B6CBB49} - System32\Tasks\diagtrackrunner => C:\HP\HPQWare\StartMenuLink\EN_BE\Shopping and Services\diagtrackrunner.exe (Pas de fichier)
Task: {474CF0F3-71DA-48DE-95A6-EF81D595602B} - System32\Tasks\GoogleCrashHandler => C:\SystemID\GoogleCrashHandler.exe (Pas de fichier) <==== ATTENTION
Task: {592B32D5-A56D-4EBC-BA8B-B070130CA620} - System32\Tasks\wAaMBcdfwWT => C:\Windows\system32\rundll32.exe "C:\Program Files (x86)\wAaMBcdfwWT\wAaMBcdfwWT.dll",wAaMBcdfwWT <==== ATTENTION
C:\Program Files (x86)\wAaMBcdfwWT
Task: {59827EF9-8CE4-4343-BD0B-F3DEDBAE784D} - System32\Tasks\trackview_en => C:\Program Files (x86)\TrackView\mariejose.rodriguez12_Detection-Dev7614_2018-03-01-09-33-27_26\trackview_en.exe (Pas de fichier)
Task: {71DFCCD0-DABB-4F1A-8345-34A820BBD837} - \ScheduledUpdate -> Pas de fichier <==== ATTENTION
Task: {78F65C78-D097-4651-BF0A-7A716D207FCB} - System32\Tasks\WzPreloader => C:\SystemID\WzPreloader.exe (Pas de fichier)
Task: {7AAF3200-72DA-4B0D-B495-2D60E96D4A65} - System32\Tasks\Microsoft\Windows\Windows Error Reporting\SystemInfoTool => C:\Users\djil\AppData\Roaming\\sysinfotool\\sitool.exe -st -tu 5 (Pas de fichier) <==== ATTENTION
Task: {87982174-F5C1-4B27-8F93-7B81BFABFBED} - System32\Tasks\PwSFsMBgfGbx => C:\Windows\system32\rundll32.exe "C:\Program Files (x86)\PwSFsMBgfGbx\PwSFsMBgfGbx.dll",PwSFsMBgfGbx <==== ATTENTION
C:\Program Files (x86)\PwSFsMBgfGbx
Task: {91277AB6-AB4B-400B-9E1B-C47FED0A8EED} - System32\Tasks\cmd => "C:\Intodlldhcp\cmd\cmd.exe" (Pas de fichier)
Task: {B72D5312-A210-494A-BFC0-23A795B6B008} - System32\Tasks\ws => C:\_Exception1\ws.exe (Pas de fichier)
Task: {B9901270-577A-4F56-83C8-B6BAC80495A5} - System32\Tasks\Videocard Service => C:\Users\djil\AppData\Local\Temp\36A5.exe (Pas de fichier) <==== ATTENTION
Task: {BD87CE83-37A9-4AE0-A9DC-62A7634F98C2} - System32\Tasks\uwtcyoyK => C:\Windows\system32\rundll32.exe "C:\Program Files (x86)\uwtcyoyK\uwtcyoyK.dll",uwtcyoyK <==== ATTENTION
C:\Program Files (x86)\uwtcyoyK
Task: {C1DAD0F1-90C1-41DC-A86D-FDFB17BC3FB1} - System32\Tasks\dwm => C:\SystemID\dwm.exe (Pas de fichier) <==== ATTENTION
Task: {CD774EC3-9A08-4821-A5FE-0437537D34FD} - System32\Tasks\Firefox Default Browser Agent 7B868A1AE4C0F536 => C:\Users\djil\AppData\Roaming\thvrgtj.exe (Pas de fichier) <==== ATTENTION
Task: {D14BBB9D-3D75-4351-B4E2-2B3CDEF40416} - System32\Tasks\HPTaskBar2 => C:\Program Files\Hewlett-Packard\HP LaunchBox\WLICON\HPTaskBar2.exe (Pas de fichier)
Task: {DD12DF37-7A15-444E-BC5A-DC87E45C712F} - System32\Tasks\audiodg => C:\_Exception1\audiodg.exe (Pas de fichier)
Task: {E0628D6B-A46E-45B8-BC7F-55CD68DDB8D8} - \Microsoft\Windows\Customer Experience Improvement Program\WUDFrosoft-windows-system-synch-l1-1-0 -> Pas de fichier <==== ATTENTION
Task: {E3D42492-216C-4653-91DF-AA23DA9DED81} - System32\Tasks\VXFUSFRVIL => C:\ProgramData\Apple Computer\iTunes\adi\VXFUSFRVIL.exe (Pas de fichier)
Task: {E9676C43-598F-473D-92C9-4F77E4B67D02} - System32\Tasks\csrss => C:\Windows\rss\csrss.exe (Pas de fichier) <==== ATTENTION
ProxyEnable: [S-1-5-21-2924205904-1923366915-74640379-1002] => Proxy est activé.
ProxyServer: [S-1-5-21-2924205904-1923366915-74640379-1002] => 127.0.0.1:29616
ManualProxies: 1127.0.0.1:29616
S2 MaskVPNService; "C:\Program Files (x86)\MaskVPN\mask_svc.exe" [X]
S2 TrustedLogos; C:\Windows\trustedlogos\TrustedLogos.exe [X]
S2 WirelessKB850NotificationService; %SystemRoot%\system32\WirelessKB850NotificationService.exe [X]
S3 clwvd; system32\DRIVERS\clwvd.sys [X]
U4 dmwappushservice; pas de ImagePath
S4 PsBoot; system32\Drivers\PsBoot.sys [X]
2020-01-14 23:44 - 2020-01-03 05:33 - 000321226 ___SH () C:\Users\djil\AppData\Roaming\rwuhada
2021-07-04 16:15 C:\Windows\SysWOW64\zujetyrp

HKU\S-1-5-21-2924205904-1923366915-74640379-1002\...\ChromeHTML: -> <==== ATTENTION
AlternateDataStreams: C:\ProgramData\Temp:890CC2F3 [127]
FirewallRules: [{D6894225-6967-490C-9CEC-A1D80B551749}] => (Allow) C:\Users\djil\AppData\Local\Temp\7zS4CB4\HPDiagnosticCoreUI.exe => Pas de fichier
FirewallRules: [{F2C61EB9-F1AD-4E27-B792-910B5FC6CE48}] => (Allow) C:\Users\djil\AppData\Local\Temp\7zS4CB4\HPDiagnosticCoreUI.exe => Pas de fichier
FirewallRules: [{DC7C2860-D0C7-46D9-ABD1-64EA1A4DB4CB}] => (Allow) C:\Program Files (x86)\LG Software\LG Smart Share\DMS\SmartShareDMS.exe => Pas de fichier
FirewallRules: [{2BCCFBC2-7003-4616-872A-5A91B5AFAE9B}] => (Allow) C:\Program Files (x86)\LG Software\LG Smart Share\DMS\SmartShareDMS.exe => Pas de fichier
FirewallRules: [{D2328D44-0598-4C1F-B90D-955F53DED0E8}] => (Allow) C:\Program Files (x86)\LG Software\LG Smart Share\DMR\SmartShareDMR.exe => Pas de fichier
FirewallRules: [{DF2B1846-46AB-4F67-BC4E-4D45E207E91E}] => (Allow) C:\Program Files (x86)\LG Software\LG Smart Share\DMR\SmartShareDMR.exe => Pas de fichier
FirewallRules: [{9741A0A2-A1B1-4756-92EC-FC9661AFDAFC}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerManager\ApowerManager.exe => Pas de fichier
FirewallRules: [{AFE017B6-3B04-4E25-BAE7-6944BC23934F}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerManager\ApowerManager.exe => Pas de fichier
FirewallRules: [{4CF12937-73F3-435C-84CE-C86E447C6B6E}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerManager\ApowerManagerCoreServices.exe => Pas de fichier
FirewallRules: [{D9A85088-0218-45DC-8F8C-8EF7E6171C3C}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerManager\ApowerManagerCoreServices.exe => Pas de fichier
FirewallRules: [{F7F2806D-9500-4E94-BC26-C1E7B005C63D}] => (Allow) C:\Users\djil\AppData\Roaming\Zoom\bin\Zoom.exe => Pas de fichier
FirewallRules: [{72F89DC5-8448-4991-A781-F2F86FCABE37}] => (Allow) C:\Users\djil\AppData\Roaming\Zoom\bin\airhost.exe => Pas de fichier
FirewallRules: [{8153A7E3-D0E9-4BA7-88A4-65E3797EDA28}] => (Allow) C:\Users\djil\AppData\Local\Temp\7zS151D\HPDiagnosticCoreUI.exe => Pas de fichier
FirewallRules: [{121FD56A-933E-4CE3-8FDD-9718899ED542}] => (Allow) C:\Users\djil\AppData\Local\Temp\7zS151D\HPDiagnosticCoreUI.exe => Pas de fichier
FirewallRules: [{C7B4D0F9-40C2-46D4-A0A8-5D9132FB992D}] => (Allow) C:\Users\djil\AppData\Local\Temp\7zS2B37\HPDiagnosticCoreUI.exe => Pas de fichier
FirewallRules: [{E1A05277-5878-4291-8FE4-94334F65ECAB}] => (Allow) C:\Users\djil\AppData\Local\Temp\7zS2B37\HPDiagnosticCoreUI.exe => Pas de fichier
FirewallRules: [{8663A299-3E34-429A-A40C-A5D43537BE9E}] => (Allow) C:\Program Files\BlueStacks\HD-Player.exe => Pas de fichier
FirewallRules: [TCP Query User{EF8A47E3-18B5-4984-BC79-148E9619A203}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe => Pas de fichier
FirewallRules: [UDP Query User{8B8E9FC6-474D-47CF-860F-78EDE361E7FB}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe => Pas de fichier
FirewallRules: [{AE21C9BA-0711-4C71-8F68-0F8FD4717BB3}] => (Allow) C:\Program Files (x86)\MaskVPN\mask_svc.exe => Pas de fichier
FirewallRules: [{616D003D-7EE2-411B-8A4A-585305611F2D}] => (Allow) C:\Windows\rss\csrss.exe => Pas de fichier
FirewallRules: [{596CF920-A7CB-4E7B-97A7-E60257F7B866}] => (Allow) C:\Program Files\BlueStacks\HD-Player.exe => Pas de fichier
FirewallRules: [{B8EC1391-07DA-4EB6-9E92-83DFD564D40D}] => (Allow) C:\Program Files (x86)\LG Software\LG Smart Share\DMR\SmartShareDMR.exe => Pas de fichier
FirewallRules: [{2E16F691-90B8-4FA7-B1AA-3E1EF6DA4B0D}] => (Allow) C:\Program Files (x86)\LG Software\LG Smart Share\DMR\SmartShareDMR.exe => Pas de fichier
FirewallRules: [{B93E2C2E-B8DF-438B-803B-7F1031E8B415}] => (Allow) C:\Program Files (x86)\LG Software\LG Smart Share\DMS\SmartShareDMS.exe => Pas de fichier
FirewallRules: [{482BAD4B-A731-4E29-9053-05629B25967F}] => (Allow) C:\Program Files (x86)\LG Software\LG Smart Share\DMS\SmartShareDMS.exe => Pas de fichier
FirewallRules: [{92C4A503-4BCB-43E0-B259-F234751612BA}] => (Allow) C:\Users\djil\AppData\Roaming\Zoom\bin\airhost.exe => Pas de fichier
FirewallRules: [{FE83DAD2-0FAC-4407-8B95-3584AF172E21}] => (Allow) C:\Users\djil\AppData\Roaming\Zoom\bin\Zoom.exe => Pas de fichier
FirewallRules: [{257DCB5B-6C15-4EA9-8544-44B9645F5B20}] => (Allow) C:\Windows\rss\csrss.exe => Pas de fichier
FirewallRules: [{7A638278-1253-4C0F-B9B0-B1FA8147D072}] => (Allow) C:\Windows\rss\csrss.exe => Pas de fichier
FirewallRules: [{463655B9-3D41-4EAB-B94A-909377E87F17}] => (Allow) C:\Windows\rss\csrss.exe => Pas de fichier
FirewallRules: [{6CF5D3DA-29A6-4763-9D61-95E41073A62C}] => (Allow) C:\Windows\rss\csrss.exe => Pas de fichier
FirewallRules: [{307E4E99-2151-40E7-82A8-E1DC4854BFB7}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\VideoEditor.exe => Pas de fichier
FirewallRules: [{50264A8A-C8A3-4B47-B6B8-B76E6A247730}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\VideoEditor.exe => Pas de fichier
FirewallRules: [{C263DF61-56B2-441B-B0F5-93D169F89E63}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\Activation.exe => Pas de fichier
FirewallRules: [{BEDC71DC-2E91-4233-B657-A47AB559CCF8}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\Activation.exe => Pas de fichier
FirewallRules: [{081D8126-A7DC-40CF-A5AE-DAD6C4E8CF72}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\Updater.exe => Pas de fichier
FirewallRules: [{6FB2F75F-AC18-4630-AD34-B1BBE0EA03D2}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\Updater.exe => Pas de fichier

EmptyTemp:
end::