start::
closeprocesses:
createrestorepoint:
VIRUSTOTAL: C:\WINDOWS\wininit.ini
AV: Spybot - Search and Destroy (Disabled - Up to date) {F77C7796-45C4-531E-0DAE-B4A8229B11C8}
ContextMenuHandlers1: [ExpressZip] -> [CC]{8EEA165E-0B8B-4BA7-9796-50214C767171} => -> Pas de fichier
ContextMenuHandlers1: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => -> Pas de fichier
ContextMenuHandlers1: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => -> Pas de fichier
ContextMenuHandlers1: [TuneUp Shredder Shell Extension] -> [CC]{4858E7D9-8E12-45a3-B6A3-1CD128C9D403} => -> Pas de fichier
ContextMenuHandlers2: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => -> Pas de fichier
ContextMenuHandlers2: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => -> Pas de fichier
ContextMenuHandlers4: [TuneUp Disk Space Explorer Shell Extension] -> [CC]{4838CD50-7E5D-4811-9B17-C47A85539F28} => -> Pas de fichier
ContextMenuHandlers4: [TuneUp Shredder Shell Extension] -> [CC]{4858E7D9-8E12-45a3-B6A3-1CD128C9D403} => -> Pas de fichier
ContextMenuHandlers6: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => -> Pas de fichier
ContextMenuHandlers6: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => -> Pas de fichier
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
C:\Program Files (x86)\WinThruster
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
BootExecute: autocheck autochk /m /P \Device\HarddiskVolume8autocheck autochk /m /P \Device\HarddiskVolume50autocheck autochk /m /P \Device\HarddiskVolume49autocheck autochk * sdnclean64.exe
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
Task: {0114A46B-F136-4B0A-A600-DB1CF9FFDF4F} - System32\Tasks\CleanGenius => C:\Program Files (x86)\EaseUS\EaseUS CleanGenius\bin\CleanGenius.exe [608592 2022-09-23] (CHENGDU YIWO Tech Development Co., Ltd. -> )
Task: {07135258-F24E-4154-BAD9-B71B0EEA5EB6} - System32\Tasks\DualSafe Password Manager Init SkipUAC(UserPC) => C:\Program Files (x86)\DualSafe Password Manager\DPMInit.exe /skipuac (Pas de fichier)
Task: {1D44DA44-C6A2-454A-AD76-389CB7AB7B77} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Critical => {613FBA38-A3DF-4AB8-9674-5604984A299A} C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentasklauncher.dll (Pas de fichier)
Task: {3CC0DA15-CCCD-4A71-91ED-1DF43C4B688F} - System32\Tasks\ASC_SkipUac_UserPC => C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe /SkipUac (Pas de fichier)
C:\Program Files (x86)\IObit\Advanced SystemCare
Task: {7BB40EE3-43DE-4FB2-8913-FED900DBAC55} - System32\Tasks\EOSv3 Scheduler onLogOn => C:\Users\UserPC\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [21737944 2022-10-10] (ESET, spol. s r.o. -> ESET)
C:\Users\UserPC\AppData\Local\ESET
Task: {A5B07A6C-A87A-4FD1-A093-1398374AC6E2} - System32\Tasks\DualSafe Password Manager Task => C:\Program Files (x86)\DualSafe Password Manager\DPMInit.exe /startpc (Pas de fichier)
Task: {B750F9BA-94F7-495C-9AA5-9E0BFB0E1F63} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 Critical => {DE434264-8FE9-4C0B-A83B-89EBEEBFF78E} C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentasklauncher.dll (Pas de fichier)
Task: {BAF4B9A8-1B02-4B38-B231-7EA97230256B} - System32\Tasks\Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 => {84F0FAE1-C27B-4F6F-807B-28CF6F96287D} C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentasklauncher.dll (Pas de fichier)
Task: {D0DCBB90-3A84-4838-BA81-1BC8321015CB} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2011 => C:\Program Files (x86)\TuneUp Utilities 2011\OneClick.exe $(Arg0) (Pas de fichier)
C:\Program Files (x86)\TuneUp Utilities 2011
Task: {F3EC534D-E51E-4379-908F-3F19DCC2A495} - System32\Tasks\EOSv3 Scheduler onTime => C:\Users\UserPC\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [21737944 2022-10-10] (ESET, spol. s r.o. -> ESET)
Task: {FA9F3179-E9B9-43AE-A35D-E0FEF87E8140} - System32\Tasks\IObitSelfCheckTask => C:\Program Files (x86)\IObit\Smart Defrag\IObitSelfCheck.exe /dotip (Pas de fichier)
Edge HKLM\...\Edge\Extension: [bobgdmjpamhpbiobbklajbdkgmmmbcja]
Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKU\S-1-5-21-4012117945-2187670023-1133160361-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [bobgdmjpamhpbiobbklajbdkgmmmbcja]
Edge HKLM-x32\...\Edge\Extension: [bobgdmjpamhpbiobbklajbdkgmmmbcja]
Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM\...\Chrome\Extension: [lgbjhdkjmpgjgcbcdlhkokkckpjmedgc]
CHR HKLM-x32\...\Chrome\Extension: [lgbjhdkjmpgjgcbcdlhkokkckpjmedgc]
S3 AscFileControl; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscFileControl.sys [X]
S3 AscFileFilter; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscFileFilter.sys [X]
S3 AscRegistryFilter; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscRegistryFilter.sys [X]
S3 cpuz150; \??\C:\WINDOWS\temp\cpuz150\cpuz150_x64.sys [X]
S3 cpuz154; \??\C:\WINDOWS\temp\cpuz154\cpuz154_x64.sys [X]
S3 iobit_monitor_server2021; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\Monitor_win10_x64.sys [X]
S3 MBAMSwissArmy; \SystemRoot\System32\Drivers\mbamswissarmy.sys [X]
2023-02-28 12:19 - 2023-02-28 12:19 - 000009014 _____ C:\Users\UserPC\Desktop\ZHPCleaner (R).html
2023-02-28 12:19 - 2023-02-28 12:19 - 000002382 _____ C:\Users\UserPC\Desktop\ZHPCleaner (R).txt
2023-02-28 11:55 - 2023-02-28 11:55 - 000008712 _____ C:\Users\UserPC\Desktop\ZHPCleaner (S).html
2023-02-28 11:55 - 2023-02-28 11:55 - 000002189 _____ C:\Users\UserPC\Desktop\ZHPCleaner (S).txt
2023-02-28 11:25 - 2023-02-28 11:25 - 000000920 _____ C:\Users\UserPC\Desktop\ZHPCleaner.lnk
2023-02-28 10:50 - 2022-11-05 22:29 - 000000000 ____D C:\ProgramData\TuneUp Software
2023-02-28 10:44 - 2022-12-12 23:33 - 000000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
cmd: sfc /scannow
emptytemp:
end::