start:: SystemRestore: On closeprocesses: createrestorepoint: virustotal: C:\Users\Jack\AppData\Roaming\run.exe HKLM-x32\...\Run: [Aimersoft Helper Compact.exe] => C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe [2138272 2016-10-08] (Shenzhen Jia Xing Investment Co., Ltd. -> AimerSoft) C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION GroupPolicy: Restriction ? <==== ATTENTION Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION FF Plugin-x32: @qq.com/QQlive -> C:\Program Files (x86)\Tencent\QQLive\npQQLive.dll [Pas de fichier] S2 DCIService; C:\Program Files (x86)\Lavasoft\Web Companion\Service\x64\DCIService.exe [X] C:\Program Files (x86)\Lavasoft S3 Rockstar Service; "C:\Program Files (x86)\Steam\steamapps\common\RockstarService.exe" [X] S3 hsstap; \SystemRoot\System32\drivers\hsstap.sys [X] 2023-03-10 11:14 - 2022-12-01 12:50 - 000000000 ____D C:\Users\Jack\AppData\Roaming\Lavasoft 2023-03-10 11:14 - 2022-12-01 12:50 - 000000000 ____D C:\Users\Jack\AppData\Local\Lavasoft 2023-03-10 11:14 - 2022-12-01 12:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft 2023-03-10 11:14 - 2022-12-01 12:50 - 000000000 ____D C:\Program Files (x86)\Lavasoft 2023-03-10 11:14 - 2022-12-01 12:49 - 000000000 ____D C:\ProgramData\Lavasoft HKLM\...\StartupApproved\Run: => "Wondershare Helper Compact.exe" HKLM\...\StartupApproved\Run32: => "Aimersoft Helper Compact.exe" cmd: netsh advfirewall reset emptytemp: end::