start::
closeprocesses:
createrestorepoint:
HKLM\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe (Pas de fichier)
C:\Program Files\Common Files\Wondershare
HKLM\...\Run: [WSVCUUpdateHelper.exe] => C:\Program Files (x86)\iSkysoft\Wondershare UniConverter 13 for Windows(IS)\WSVCUUpdateHelper.exe (Pas de fichier)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133216 2017-03-23] (Wondershare Technology Co.,Ltd -> Wondershare)
HKU\S-1-5-21-1841429046-1407183739-1045836971-1001\...\MountPoints2: {a3d6f536-1c8a-11ed-bd08-ec63d73ec537} - "E:\OnePlus_setup.exe" /s
S3 ACE-BASE; \??\B:\Honkai Impact 3rd glb\Games\ACE-BASE.sys [X]
S3 cpuz154; \??\C:\WINDOWS\temp\cpuz154\cpuz154_x64.sys [X]
S1 EneTechIo; \??\C:\WINDOWS\system32\drivers\ene.sys [X]
2022-11-19 18:57 - 2022-11-19 19:04 - 000000140 _____ C:\WINDOWS\Reimage.ini
2022-11-19 01:28 - 2022-11-19 01:28 - 000154456 _____ (Google LLC) C:\WINDOWS\GoogleUpdate.exe
2022-11-19 01:26 - 2022-11-19 18:43 - 000000000 ____D C:\Users\mvand\AppData\Roaming\GwzNESXBuI
2022-11-19 01:26 - 2022-11-19 18:31 - 000000000 ____D C:\Users\mvand\AppData\Roaming\OzqLuwrCYU
2022-11-19 01:26 - 2022-11-19 18:30 - 000000000 ___HD C:\ProgramData\HostData
2022-11-19 01:26 - 2022-11-19 18:30 - 000000000 ___HD C:\ProgramData\Dllhost
2022-11-19 01:26 - 2022-11-19 18:30 - 000000000 ____D C:\WINDOWS\system32\Tasks\WindowsDefenderServices
2022-11-19 01:26 - 2022-11-19 18:30 - 000000000 ____D C:\WINDOWS\system32\Tasks\SettingSysHost
2022-11-19 01:26 - 2022-11-19 18:30 - 000000000 ____D C:\WINDOWS\system32\Tasks\MicrosoftUpdateServices
2022-11-19 01:26 - 2022-11-19 18:30 - 000000000 ____D C:\WINDOWS\system32\Tasks\AntiMalwareSericeExecutable
2022-10-24 18:29 - 2022-01-05 15:09 - 000000000 ____D C:\ProgramData\Avast Software
cmd: netsh advfirewall reset
emptytemp:
end::