start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
Task: {C960D1AA-26F0-449E-93C5-E44FCD265E98} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe --automatic (Pas de fichier)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys
S3 dg_ssudbus; \SystemRoot\system32\DRIVERS\ssudbus2.sys [X]
2015-04-10 17:02 - 2023-01-20 11:27 - 003306184 _____ (Nicolas Coolman) C:\Users\Utilisateur\ZHPCleaner.exe
2016-05-10 17:17 - 2018-04-19 08:22 - 003069312 _____ () C:\Users\Utilisateur\ZHPDiag3.exe
2017-02-16 17:33 - 2017-02-16 17:33 - 000000000 __SHC () C:\Users\Utilisateur\AppData\Local\LumaEmu
CustomCLSID: HKU\S-1-5-21-119555792-3545591151-3547730462-1001_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> "C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe" -ToastActivated => Pas de fichier
CustomCLSID: HKU\S-1-5-21-119555792-3545591151-3547730462-1001_Classes\CLSID\{608D599A-DCA6-4A7C-BED7-AFCD8465345A}\InprocServer32 -> C:\Users\Utilisateur\AppData\Local\Microsoft\EdgeUpdate\1.3.175.29\psuser_64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-119555792-3545591151-3547730462-1001_Classes\CLSID\{64C6EFB9-8F79-4106-B975-067448DC768F}\InprocServer32 -> C:\Users\Utilisateur\AppData\Local\Microsoft\EdgeUpdate\1.3.177.11\psuser_64.dll => Pas de fichier
AlternateDataStreams: C:\Users\Public\AppData:CSM [468]
AlternateDataStreams: C:\Users\Utilisateur\Desktop\FRST64.exe:MBAM.Zone.Identifier [193]
AlternateDataStreams: C:\Users\Utilisateur\Downloads\SumatraPDF-3.5.2-64-install.exe:MBAM.Zone.Identifier [180]
HKU\S-1-5-21-119555792-3545591151-3547730462-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.yahoo.com/?fr=vmn&type=auslog_yaapp1_hp
SearchScopes: HKU\S-1-5-21-119555792-3545591151-3547730462-1001 -> {76DEFAE6-09B2-40B2-8F8A-5A6A5D5CE4EB} URL = hxxps://search.yahoo.com/search/?toggle=1&cop=mss&ei=UTF-8&fr=vmn&type=auslog_yaapp1_ch&p={searchTerms}
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKU\S-1-5-21-119555792-3545591151-3547730462-1001\...\StartupApproved\Run: => "F0B4DAD85DCFF8C11A705B1D53E15DFDF0D581BA._service_run"
HKU\S-1-5-21-119555792-3545591151-3547730462-1001\...\StartupApproved\Run: => "com.squirrel.speedtest.speedtest"
EmptyTemp:
cmd: ipconfig /flushdns
cmd: sfc /scannow
end::