start::
closeprocesses:
createrestorepoint:
Task: {1520D881-5B39-4F40-8A52-046447793B18} - \chrome bookmarks -> Pas de fichier <==== ATTENTION
Task: {A275B92C-546A-49EF-A6D0-998C8BAC2DD6} - System32\Tasks\chrome panel => cmd /c powershell -WindowStyle Hidden -E "CgAKACQAagBwAD0AJABuAHUAbABsADsACgAKAAoAJABzAHQAcgBBAHMAYwBFAG4AYwBUAGUAeAB0AD0AWwBTAHkAcwB0AGUAbQAuAFQAZQB4AHQALgBFAG4AYwBvAGQAaQBuAGcAXQA6ADoAQQBTAEMASQBJADsACgAKACQAagBkACAAPQAgACQAbgB1AGwAbAA7AAoACgAKAGYAdQBuAGMAdABpAG8AbgAgAGcAZQB0AE4AZQB3AFAAcgBvAHAAKABbAH (l'élément de données a 5019 caractères en plus). <==== ATTENTION
Task: {A688BA6E-3086-445B-812F-78DF78F13C69} - \chrome view -> Pas de fichier <==== ATTENTION
Task: {AF181BBC-0910-4D78-8A02-5AEB0D4877CC} - \chrome tab -> Pas de fichier <==== ATTENTION
Task: {CB0B0B46-6789-433C-B58C-5F1E4AD5586E} - \chrome settings -> Pas de fichier <==== ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM-x32\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
S4 LMIRfsClientNP; pas de ImagePath
cmd: sfc /scannow
emptytemp:
end::