start::
Hosts:
Removeproxy:
CreateRestorePoint:
CloseProcesses:
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Pas de fichier .
ContextMenuHandlers1: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => -> Pas de fichier
ContextMenuHandlers2: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => -> Pas de fichier
ContextMenuHandlers6: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => -> Pas de fichier
Toolbar: HKU\S-1-5-21-2342528821-212778654-1877013611-1001 -> Pas de nom - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Pas de fichier
IE trusted site: HKU\S-1-5-21-2342528821-212778654-1877013611-1001\...\sharepoint.com -> hxxps://univfcomtefr-files.sharepoint.com
MSCONFIG\Services: GoTrust ID Plugin => 2
MSCONFIG\Services: GoTrustID Service => 2
MSCONFIG\Services: UEIPSvc => 3
HKU\S-1-5-21-2342528821-212778654-1877013611-1001\...\StartupApproved\Run: => "CustomCursor"
FirewallRules: [TCP Query User{D24B6489-DC9A-461F-B007-A7B71EE3F81A}C:\users\a.casa\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\a.casa\appdata\local\microsoft\teams\current\teams.exe => Pas de fichier
FirewallRules: [UDP Query User{8573DF9D-AC21-45C8-BA60-3F1320418808}C:\users\a.casa\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\a.casa\appdata\local\microsoft\teams\current\teams.exe => Pas de fichier
FirewallRules: [{C23EA5B8-7AD7-41B7-8587-0AF6B8D585E7}] => (Block) C:\users\a.casa\appdata\local\microsoft\teams\current\teams.exe => Pas de fichier
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\115.0.5790.111\Installer\chrmstp.exe [2023-08-04] (Google LLC -> Google LLC)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {83B5B5A8-6A45-4E9A-8F2A-00BF80E1ED69} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe -auto (Pas de fichier)
S3 Steam Client Service; "C:\Program Files (x86)\Common Files\Steam\steamservice.exe" /RunAsService [X]
S1 netfilter2; system32\drivers\netfilter2.sys [X]
S3 SrvcWTDMIOMngr; \??\C:\OEM\OA30\WTDMIoMngr.sys [X]
2023-08-06 14:55 - 2023-08-06 14:55 - 000398028 _____ C:\Users\A.casa\Downloads\ZHPDiag.txt
2023-08-06 14:48 - 2023-08-06 14:58 - 000447599 _____ C:\Users\A.casa\Desktop\ZHPDiag.html
2023-08-06 14:45 - 2023-08-06 15:10 - 000000000 ____D C:\Users\A.casa\AppData\Roaming\ZHP
2023-08-06 14:45 - 2023-08-06 15:06 - 000000909 _____ C:\Users\A.casa\Desktop\ZHPSuite.lnk
2023-08-06 14:45 - 2023-08-06 14:45 - 000000000 ____D C:\Users\A.casa\AppData\Local\ZHP
2023-08-06 14:43 - 2023-08-06 14:43 - 003511456 _____ (Nicolas Coolman) C:\Users\A.casa\Downloads\ZHPSuite.exe
2023-07-29 22:05 - 2023-07-29 22:05 - 000000000 ___HD C:\$AV_AVG
2023-07-29 22:05 - 2023-07-29 22:05 - 000000000 ____D C:\Users\A.casa\AppData\Local\AVG
2023-07-29 22:04 - 2023-07-29 22:04 - 000000000 ____D C:\Users\A.casa\AppData\Roaming\AVG
2023-07-29 22:03 - 2023-07-29 22:03 - 000313272 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\avgBoot.exe
2023-07-29 22:03 - 2023-07-29 22:03 - 000000000 ____D C:\Program Files\Common Files\AVG
2023-07-29 22:02 - 2023-07-29 22:02 - 000000000 ____D C:\Program Files\AVG
2023-07-29 21:59 - 2023-08-06 15:05 - 000000000 ____D C:\ProgramData\AVG
2023-07-29 21:59 - 2023-07-29 21:59 - 000234936 _____ (AVG Technologies CZ, s.r.o.) C:\Users\A.casa\Downloads\avg_antivirus_free_setup.exe
StartBatch:
For /D %%d In ("%userprofile%\AppData\Local\Mozilla\Firefox\Profiles\*") Do (If Exist "%%d\Cache2" Del /s /q "%%d\Cache2\*.*")
del /s /q "%userprofile%\AppData\Local\Google\Chrome\User Data\Default\Cache\*.*"
del /s /q "%userprofile%\AppData\Local\Microsoft\Edge\User Data\Default\Cache\*.*"
For /D %%d In ("%userprofile%\AppData\Local\Thunderbird\Profiles\*") Do (If Exist "%%d\Cache2" Del /s /q "%%d\Cache2\*.*")
For /D %%d In ("%userprofile%\AppData\Roaming\Mozilla\Firefox\Profiles\*") Do (If Exist "%%d\cookies.sqlite" Del /s /q "%%d\cookies.sqlite")
del /s /q "%userprofile%\AppData\Local\Google\Chrome\User Data\Default\History"
del /s /q "%userprofile%\AppData\Local\Microsoft\Edge\User Data\Default\History"
Endbatch:
cmd: ipconfig /flushdns
cmd: netsh advfirewall reset
cmd: netsh winsock reset
cmd: sfc /scannow
EmptyEventLogs:
EmptyTemp:
end::