start::
Hosts:
Removeproxy:
CreateRestorePoint:
CloseProcesses:
CustomCLSID: HKU\S-1-5-21-3615941366-1765159384-1819965134-1001_Classes\CLSID\{4AC6DFE1-607B-45B2-B289-D7FBCD44169C}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2019\acad.exe /Automation => Pas de fichier
CustomCLSID: HKU\S-1-5-21-3615941366-1765159384-1819965134-1001_Classes\CLSID\{74D0CE91-F931-4FAC-BEA9-EE32E43EAD37}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2019\acad.exe => Pas de fichier
C:\Program Files\Autodesk\
AlternateDataStreams: C:\Users\olivi\Desktop\FRST64.exe:MBAM.Zone.Identifier [193]
HKU\S-1-5-21-3615941366-1765159384-1819965134-1001\Software\Classes\.scr: AutoCADScriptFile =>
IE trusted site: HKU\S-1-5-21-3615941366-1765159384-1819965134-1001\...\sharepoint.com -> hxxps://univlyon2fr-files.sharepoint.com
FirewallRules: [UDP Query User{09D42630-0A64-4EE9-BAE6-A2B024DA6E3B}F:\jeux\railwayempire\railwayempire.exe] => (Allow) F:\jeux\railwayempire\railwayempire.exe => Pas de fichier
FirewallRules: [TCP Query User{74FAD3EA-1EF4-40A2-B761-AD5434597BE4}F:\jeux\railwayempire\railwayempire.exe] => (Allow) F:\jeux\railwayempire\railwayempire.exe => Pas de fichier
FirewallRules: [UDP Query User{F50A46EB-E06D-4B8B-84AF-005B4991541F}C:\users\olivi\desktop\runtime\jre-x64\bin\javaw.exe] => (Allow) C:\users\olivi\desktop\runtime\jre-x64\bin\javaw.exe => Pas de fichier
FirewallRules: [TCP Query User{C36126B3-EA72-4EB8-BBFB-A9324D933475}C:\users\olivi\desktop\runtime\jre-x64\bin\javaw.exe] => (Allow) C:\users\olivi\desktop\runtime\jre-x64\bin\javaw.exe => Pas de fichier
FirewallRules: [{7DFB0989-53B4-4F1B-B62E-E73D4159AE44}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\This War of Mine\Storyteller.exe => Pas de fichier
FirewallRules: [{8E67621A-F66A-43C6-A2B6-02675AECE871}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\This War of Mine\Storyteller.exe => Pas de fichier
FirewallRules: [{51CE7F86-4A67-4602-8591-2A8E29B0FC98}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\This War of Mine\This War of Mine.exe => Pas de fichier
FirewallRules: [{A28A3CFB-5D5A-45CA-8BF9-8F5B24A2A02E}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\This War of Mine\This War of Mine.exe => Pas de fichier
FirewallRules: [{A376F313-D9E9-49AB-AE59-9B7B4F11BD35}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Jurassic World Evolution\JWE.exe => Pas de fichier
FirewallRules: [{B06BD1EF-2882-4B2B-BBF8-278F307CDDA4}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Jurassic World Evolution\JWE.exe => Pas de fichier
FirewallRules: [{48B0E483-CA74-4BE6-A832-E5FC661F1EFC}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Northgard\Northgard.exe => Pas de fichier
FirewallRules: [{034E1718-BDD8-452D-8439-6E0AEFBD4CD3}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Northgard\Northgard.exe => Pas de fichier
FirewallRules: [{7A8EF284-B4E8-4180-92B0-9AE76E1A7E4A}] => (Allow) F:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => Pas de fichier
FirewallRules: [{887BC515-0A61-46BB-A451-1F824AD28DD5}] => (Allow) F:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => Pas de fichier
FirewallRules: [{81F408BD-4AE3-4C60-A7CF-C9F2EE83DE77}] => (Allow) F:\Program Files (x86)\Steam\Steam.exe => Pas de fichier
FirewallRules: [{FC81EED3-153A-488E-9CB1-02D8C20EE4AC}] => (Allow) F:\Program Files (x86)\Steam\Steam.exe => Pas de fichier
FirewallRules: [{0A7813E0-C3FD-4BB8-93CC-C734613719C9}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe => Pas de fichier
FirewallRules: [{28AD3A14-1C4C-41B8-856C-EE600D27E201}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe => Pas de fichier
FirewallRules: [{6D2D6AD0-90A0-41E0-B869-7C94D5EA362C}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Skyrim\skse_steam_boot.exe => Pas de fichier
FirewallRules: [{3D3F24F9-564A-475D-99D1-B8712A7F6464}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Skyrim\skse_steam_boot.exe => Pas de fichier
FirewallRules: [{7613F39C-1B72-4159-A1C9-6C2DE6CE9A71}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\RESIDENT EVIL RESISTANCE\REResistance.exe => Pas de fichier
FirewallRules: [{C1D6C4CF-EEB3-4187-8844-68C29D0BF5E8}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\RESIDENT EVIL RESISTANCE\REResistance.exe => Pas de fichier
FirewallRules: [{D2C2E84F-B265-4ECD-BDF3-F183F8E57135}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\RE3\re3.exe => Pas de fichier
FirewallRules: [{98711206-FB4D-4DD5-A8E1-F175B292B3D5}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\RE3\re3.exe => Pas de fichier
FirewallRules: [{60101BB8-9E37-4C0F-BA7F-2BDE895F17C1}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\RESIDENT EVIL 2 BIOHAZARD RE2\re2.exe => Pas de fichier
FirewallRules: [{03193C75-AA10-4195-BD3E-10CBECCED06A}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\RESIDENT EVIL 2 BIOHAZARD RE2\re2.exe => Pas de fichier
FirewallRules: [TCP Query User{9CE51EAA-0D19-4A3D-B67F-C19150E92D75}C:\users\olivi\desktop\jeux\runtime\jre-x64\bin\javaw.exe] => (Allow) C:\users\olivi\desktop\jeux\runtime\jre-x64\bin\javaw.exe => Pas de fichier
FirewallRules: [UDP Query User{D5C5AA8D-7617-4433-8741-1E4DE6E7974B}C:\users\olivi\desktop\jeux\runtime\jre-x64\bin\javaw.exe] => (Allow) C:\users\olivi\desktop\jeux\runtime\jre-x64\bin\javaw.exe => Pas de fichier
FirewallRules: [{802AD0EF-9A6E-42B5-AFFE-0B8F14FFB898}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Valheim\valheim.exe => Pas de fichier
FirewallRules: [{1A181DB8-D5C1-4C30-BEC5-1CBEBEB0C1E6}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Valheim\valheim.exe => Pas de fichier
FirewallRules: [{D190EBB4-5672-44C9-8013-10F4CB226951}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Northgard\ng32\Northgard.exe => Pas de fichier
FirewallRules: [{83E1948E-1E9F-46AC-8D47-5ED53F31BC7E}] => (Allow) F:\Program Files (x86)\Steam\steamapps\common\Northgard\ng32\Northgard.exe => Pas de fichier
FirewallRules: [TCP Query User{5612812E-F689-45D3-9855-596103F0C676}C:\users\olivi\desktop\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\bin\javaw.exe] => (Block) C:\users\olivi\desktop\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\bin\javaw.exe => Pas de fichier
FirewallRules: [UDP Query User{B5D91351-45DD-497B-80F2-C56323384E34}C:\users\olivi\desktop\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\bin\javaw.exe] => (Block) C:\users\olivi\desktop\runtime\java-runtime-alpha\windows-x64\java-runtime-alpha\bin\javaw.exe => Pas de fichier
FirewallRules: [{C1D76D21-5B03-4A22-885F-2520D921B185}] => (Allow) F:\SteamLibrary\steamapps\common\RESIDENT EVIL 2 BIOHAZARD RE2\re2.exe => Pas de fichier
FirewallRules: [{A34FE3B2-788F-4112-8359-EF8C51425883}] => (Allow) F:\SteamLibrary\steamapps\common\RESIDENT EVIL 2 BIOHAZARD RE2\re2.exe => Pas de fichier
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-3615941366-1765159384-1819965134-1001\...\Run: [Adobe Reader Synchronizer] => "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe" (Pas de fichier)
HKU\S-1-5-21-3615941366-1765159384-1819965134-1001\...\Policies\Explorer: []
Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll [133392 2015-08-12] (Apple Inc. -> Apple Inc.)
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
U3 aswbdisk; pas de ImagePath
StartBatch:
For /D %%d In ("%userprofile%\AppData\Local\Mozilla\Firefox\Profiles\*") Do (If Exist "%%d\Cache2" Del /s /q "%%d\Cache2\*.*")
del /s /q "%userprofile%\AppData\Local\Google\Chrome\User Data\Default\Cache\*.*"
del /s /q "%userprofile%\AppData\Local\Microsoft\Edge\User Data\Default\Cache\*.*"
For /D %%d In ("%userprofile%\AppData\Local\Thunderbird\Profiles\*") Do (If Exist "%%d\Cache2" Del /s /q "%%d\Cache2\*.*")
For /D %%d In ("%userprofile%\AppData\Roaming\Mozilla\Firefox\Profiles\*") Do (If Exist "%%d\cookies.sqlite" Del /s /q "%%d\cookies.sqlite")
del /s /q "%userprofile%\AppData\Local\Google\Chrome\User Data\Default\History"
del /s /q "%userprofile%\AppData\Local\Microsoft\Edge\User Data\Default\History"
Endbatch:
cmd: ipconfig /flushdns
cmd: netsh advfirewall reset
cmd: netsh winsock reset
cmd: sfc /scannow
EmptyEventLogs:
EmptyTemp:
end::