start::
closeprocesses:
createrestorepoint:
FirewallRules: [{2C7F5AE1-92E2-46E6-BA5F-F7D980C03852}] => (Allow) C:\Program Files\Cybelsoft\DriversCloud.com\DriversCloud.exe => Pas de fichier
FirewallRules: [{9F9E0D38-CD76-4EEB-BB25-0C7EB8FFDCFD}] => (Allow) C:\Program Files\Cybelsoft\DriversCloud.com\DriversCloud.exe => Pas de fichier
FirewallRules: [TCP Query User{9A29F014-17AC-4052-8DB4-4E93E5A8A2DA}D:\pilotes\sdi pilotes\sdi_x64_r2102.exe] => (Allow) D:\pilotes\sdi pilotes\sdi_x64_r2102.exe => Pas de fichier
FirewallRules: [UDP Query User{0ACABFBD-71BD-4E13-9363-2A4B7C78CA18}D:\pilotes\sdi pilotes\sdi_x64_r2102.exe] => (Allow) D:\pilotes\sdi pilotes\sdi_x64_r2102.exe => Pas de fichier
HKU\S-1-5-21-1283348373-237056699-1289496819-1002\...\RunOnce: [Delete Cached Update Binary] => C:\Windows\system32\cmd.exe /q /c del /q "C:\Users\HP\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" (Pas de fichier)
HKU\S-1-5-21-1283348373-237056699-1289496819-1002\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\Windows\system32\cmd.exe /q /c del /q "C:\Users\HP\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" (Pas de fichier)
HKU\S-1-5-21-1283348373-237056699-1289496819-1002\...\RunOnce: [Uninstall 23.081.0416.0001] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\HP\AppData\Local\Microsoft\OneDrive\23.081.0416.0001" (Pas de fichier)
HKU\S-1-5-21-1283348373-237056699-1289496819-1002\...\Policies\Explorer: []
HKU\S-1-5-21-1283348373-237056699-1289496819-1002\...\MountPoints2: {9d4d4775-e2c8-11ed-9c29-5c3a454759a2} - "D:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-1283348373-237056699-1289496819-1002\...\MountPoints2: {d826a7fc-c166-11ec-9c08-5c3a454759a2} - "D:\HiSuiteDownLoader.exe"
HKLM\...\Print\Monitors\UDC: udcpm.dll (Pas de fichier)
Startup: C:\Users\HP\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GenuineService.lnk [2022-02-20]
ShortcutTarget: GenuineService.lnk -> C:\Users\HP\Autodesk\Genuine Service\GenuineService.exe (Pas de fichier)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKU\S-1-5-21-1283348373-237056699-1289496819-1002\...\StartupApproved\StartupFolder: => "GenuineService.lnk"
Task: {8B5BA4F6-F999-4402-BC89-C2D530512EA1} - System32\Tasks\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe (Pas de fichier)
C:\Program Files\Avast Software\Avast\AvEmUpdate.exe
Task: {AAA81CF7-C766-4D65-926B-9B3C02AF2CBB} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe/from_scheduler:1
C:\Program Files\Common Files\Avast Software
Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Pas de fichier]
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Pas de fichier]
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [Pas de fichier]
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [Pas de fichier]
FF Plugin HKU\S-1-5-21-1283348373-237056699-1289496819-1002: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Pas de fichier]
FF Plugin HKU\S-1-5-21-1283348373-237056699-1289496819-1002: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Pas de fichier]
FF Plugin HKU\S-1-5-21-1283348373-237056699-1289496819-1002: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Pas de fichier]
2023-05-15 18:30 - 2023-05-15 18:31 - 017535496 _____ (AVAST Software) C:\Users\HP\Downloads\avastclear.exe
2023-05-15 18:24 - 2022-02-19 12:54 - 000003990 _____ C:\Windows\system32\Tasks\Avast Emergency Update
C:\LOGICIELS\AUTOCAD 2020
cmd: sfc /scannow
emptytemp:
end::