start::
closeprocesses:
createrestorepoint:
HKLM-x32\...\Run: [DriverPack Notifier] => C:\Program Files (x86)\DriverPack Notifier\DriverPackNotifier.exe [258560 2015-12-18] () [Fichier non signé]
C:\Program Files (x86)\DriverPack Notifier
C:\Users\HP ENVY 17\Desktop\A installer\Office 2016 AIO FR SELECTION MANUEL by Flamme-Demon.iso
HKLM-x32\...\RunOnce: [GrpConv] => grpconv -o (Pas de fichier)
HKU\S-1-5-21-688324211-2926851042-1444127058-1001\...\Run: [SearcherBar] => "C:\Windows\system32\mshta.exe" "C:\SearcherBar\run.hta" [14848 2019-12-07] (Microsoft Windows -> Microsoft Corporation) <==== ATTENTION
C:\SearcherBar
HKU\S-1-5-21-688324211-2926851042-1444127058-1001\...\Run: [uTorrent] => C:\Users\HP ENVY 17\AppData\Roaming\uTorrent\uTorrent.exe [2004128 2022-08-19] (BitTorrent Inc -> BitTorrent Inc.)
HKU\S-1-5-21-688324211-2926851042-1444127058-1001\...\Run: [ut] => C:\Users\HP ENVY 17\AppData\Roaming\uTorrent\uTorrent.exe [2004128 2022-08-19] (BitTorrent Inc -> BitTorrent Inc.)
Task: {2955CC5D-BD21-4662-8301-170EC80BAC7D} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [145304 2022-08-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {31F1F446-0241-4C53-AF77-E3E2FC7B4628} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [61856 2022-08-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {625F17CE-2B31-4B73-9099-D3141043F4BB} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23713200 2022-08-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {7DE9FBC3-BBAE-4A5B-A38F-19D96FF37121} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [145304 2022-08-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {82325AF9-3629-4D36-8C3F-8A8E5A565A33} - System32\Tasks\DriverPack Notifier => C:\Program Files (x86)\DriverPack Notifier\DriverPackNotifier.exe [258560 2015-12-18] () [Fichier non signé]
Task: {8503F6AA-0799-4CF5-9CEC-36E6E66DBF41} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8406496 2022-08-12] (Microsoft Corporation -> Microsoft Corporation)
FF Extension: (Советник Яндекс.Маркета) - C:\Program Files (x86)\Mozilla Firefox\distribution\extensions\sovetnik-yandex@yandex.ru.xpi [2017-06-06] [UpdateUrl:hxxps://static.sovetnik.yandex.net/sovetnik/extension/firefox-webextension-yandex-update.json]
FF Extension: (Visual Bookmarks) - C:\Program Files (x86)\Mozilla Firefox\distribution\extensions\vb@yandex.ru.xpi [2017-06-06] []
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-08-12] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2022-08-02] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2022-08-12] (Microsoft Corporation -> Microsoft Corporation)
CHR StartupUrls: Default -> "hxxp://mysearch.avg.com?cid={AA54C640-30D5-48E7-A104-02935A0A904A}&mid=66171236299447d29cffa138fa3f07c9-674a61126688f29120c7c460c1714bc46db99ca2&lang=fr&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2014-06-25 12:50:22&v=18.1.0.443&pid=safeguard&sg=&sap=hp","hxxp://mysearch.avg.com?cid={AA54C640-30D5-48E7-A104-02935A0A904A}&mid=66171236299447d29cffa138fa3f07c9-674a61126688f29120c7c460c1714bc46db99ca2&lang=fr&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2014-06-25 12:50:22&v=18.1.7.598&pid=safeguard&sg=&sap=hp","hxxps://mysearch.avg.com?cid={AA54C640-30D5-48E7-A104-02935A0A904A}&mid=66171236299447d29cffa138fa3f07c9-674a61126688f29120c7c460c1714bc46db99ca2&lang=fr&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2014-06-25 12:50:22&v=18.1.9.786&pid=safeguard&sg=&sap=hp"
C:\Users\HP ENVY 17\AppData\Local\Google\Chrome\User Data\Default\Extensions\aegnopegbbhjeeiganiajffnalhlkkjb
CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
S3 FileSyncHelper; "C:\Program Files (x86)\Microsoft OneDrive\21.220.1024.0005\FileSyncHelper.exe" [X]
S3 OneDrive Updater Service; "C:\Program Files (x86)\Microsoft OneDrive\21.220.1024.0005\OneDriveUpdaterService.exe" [X]
emptytemp:
end::