start::
closeprocesses:
createrestorepoint:
ShellIconOverlayIdentifiers: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office\root\Office16\GROOVEEX.DLL -> Pas de fichier
ShellIconOverlayIdentifiers: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office\root\Office16\GROOVEEX.DLL -> Pas de fichier
ShellIconOverlayIdentifiers: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office\root\Office16\GROOVEEX.DLL -> Pas de fichier
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\amsdk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\amsdk.sys => ""="Driver"
FirewallRules: [{E8B7F86A-96C2-4DD0-AFF7-9604DB35ABE4}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe => Pas de fichier
FirewallRules: [{830A8453-57AD-4C98-B949-5BC66D947B69}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe => Pas de fichier
FirewallRules: [{F75503CE-0B33-4871-84CA-7324331AF9BA}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe => Pas de fichier
FirewallRules: [{A49D8FD1-97BE-4C3A-B83C-B4E28C09F203}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe => Pas de fichier
FirewallRules: [{8DE7C6CE-64F4-4C89-96C0-FB51C535B583}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe => Pas de fichier
D:\Programme\KMSPICO v10.2.0 Portable & Install
C:\Windows\SECOH-QAD.dll
HKU\S-1-5-21-2719349208-3929082466-380290458-1001\...\MountPoints2: {792033bd-20be-11ed-b4bc-c4bde571d5d0} - "E:\Autoplay.exe" -auto
Startup: C:\Users\tyran\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\stream.x64.x-all.dat.lnk [2022-08-25]
ShortcutAndArgument: stream.x64.x-all.dat.lnk -> C:\Windows\system32\wscript.exe => /E:vbscript "C:\Users\tyran\AppData\Roaming\stream.x64.x-all.dat.vbs"
C:\Users\tyran\AppData\Roaming\stream.x64.x-all.dat.vbs
Task: {3218D4E6-4463-4653-9B5A-826744D4EC80} - System32\Tasks\ASUS Live Update2 => "C:\Program Files\Google\Chrome\Application\chrome.exe" mediastream"".""icu
Task: {6617F6AC-1153-4D54-854A-41EC76C9E960} - System32\Tasks\OInstall => C:\Windows\OInstall.exe [19767560 2019-07-11] () [Fichier non signé]
Task: {BCE55589-D687-4021-A2B6-8C14F2D6FA5C} - System32\Tasks\ASUS Live Update1 => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" mediastream"".""icu
S1 amsdk; C:\Windows\system32\drivers\amsdk.sys [232792 2022-08-28] (Zemana D.O.O. Sarajevo -> Copyright 2018.)
S4 nvvad_WaveExtensible; \SystemRoot\system32\drivers\nvvad64v.sys [X]
C:\Users\tyran\Desktop\68747470733a2f2f73332e616d617a6f6e6177732e636f6d2f776174747061642d6d656469612d736572766963652f53746f7279496d6167652f307a3939624336304461652d31413d3d2d3538303636393136352e313533323963303835386262343135363231333533343936343938362e676966.gif"
2022-08-28 20:19 - 2022-08-28 20:19 - 000057095 _____ C:\Users\tyran\Downloads\Glary Malware Hunter Pro v1.146.0.763-(Win x86-x64)-Multi-Fr-Portable-Activé.torrent
2022-08-28 20:19 - 2022-08-28 20:19 - 000000000 ____D C:\Users\tyran\AppData\Roaming\Glarysoft
2022-08-28 20:19 - 2022-08-28 20:19 - 000000000 ____D C:\ProgramData\Glarysoft
2022-08-28 20:17 - 2022-08-28 20:18 - 000232792 _____ (Copyright 2018.) C:\Windows\system32\Drivers\amsdk.sys
2022-08-28 20:17 - 2022-08-28 20:18 - 000000000 ____D C:\Users\tyran\AppData\Local\AMSDK
2022-08-28 20:16 - 2022-08-28 20:16 - 000017546 _____ C:\Users\tyran\Downloads\Zemana AntiMalware Premium 3.1.395.torrent
2022-08-25 14:31 - 2022-08-25 14:31 - 000003710 _____ C:\Windows\system32\Tasks\OInstall
2022-08-25 14:31 - 2019-07-11 09:19 - 019767560 ____R C:\Windows\OInstall.exe
2022-08-25 14:28 - 2022-08-25 14:28 - 000000000 ____D C:\Program Files\Microsoft Office 15
2022-08-25 14:24 - 2022-08-25 14:24 - 000192772 _____ C:\Users\tyran\Downloads\Microsoft Office Professional Plus 2019 Version 1908 (x86-x64) (Build 11929.20254)-2.torrent
2022-08-25 14:24 - 2022-08-25 14:24 - 000192772 _____ C:\Users\tyran\Downloads\Microsoft Office Professional Plus 2019 Version 1908 (x86-x64) (Build 11929.20254)-1.torrent
2022-08-25 14:14 - 2022-08-25 14:27 - 000000181 _____ C:\Users\tyran\AppData\Roaming\stream.x64.x-all.dat.vbs
2022-08-25 14:12 - 2022-08-26 11:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico
2022-08-25 14:12 - 2022-08-26 11:00 - 000000000 ____D C:\Program Files\KMSpico
2022-08-25 14:12 - 2010-12-06 04:16 - 000090112 _____ (Vestris Inc.) C:\Windows\system32\Vestris.ResourceLib.dll
2022-08-25 14:11 - 2022-08-25 14:11 - 000042502 _____ C:\Users\tyran\Downloads\KMSPICO v10.2.0 Portable & Install.torrent
2022-08-25 14:06 - 2022-08-25 14:06 - 000192772 _____ C:\Users\tyran\Downloads\Microsoft Office Professional Plus 2019 Version 1908 (x86-x64) (Build 11929.20254).torrent
2022-08-25 14:14 - 2022-08-25 14:27 - 000000181 _____ () C:\Users\tyran\AppData\Roaming\stream.x64.x-all.dat.vbs
cmd: cscript %windir%\System32\slmgr.vbs /dli
cmd: netsh advfirewall reset
emptytemp:
end::