start::
closeprocesses:
createrestorepoint:
virustotal: C:\Users\Kathy\AppData\Local\Minion\Minion.exe
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-2185653618-3629892486-1276901516-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-2185653618-3629892486-1276901516-1001\...\MountPoints2: {5c82de7c-e0c8-11eb-9ccf-7085c2c03711} - "V:\Autoplay.exe" -auto
HKU\S-1-5-21-2185653618-3629892486-1276901516-1001\...\MountPoints2: {5c82de90-e0c8-11eb-9ccf-7085c2c03711} - "V:\Autoplay.exe" -auto
HKU\S-1-5-21-2185653618-3629892486-1276901516-1001\...\MountPoints2: {9e6a581d-d908-11eb-9cc5-7085c2c03711} - "V:\Autoplay.exe" -auto
HKU\S-1-5-21-2185653618-3629892486-1276901516-1001\...\MountPoints2: {a74e4a9c-c77b-11eb-9cc2-7085c2c03711} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-2185653618-3629892486-1276901516-1001\...\MountPoints2: {c3624829-db3e-11eb-9cc5-7085c2c03711} - "V:\Autoplay.exe" -auto
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
FF HKLM\...\Firefox\Extensions: [light_plugin_7571494CE0B94E11BB762B659A4AD71F@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 21.3\FFExt\light_plugin_firefox\addon.xpi => non trouvé(e)
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_7571494CE0B94E11BB762B659A4AD71F@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 21.3\FFExt\light_plugin_firefox\addon.xpi => non trouvé(e)
S2 AdAppMgrSvc; "C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe" [X]
cmd: netsh advfirewall reset
emptytemp:
end::