Start::
CloseProcesses:
CreateRestorePoint:
Removeproxy:
hosts:
HKU\S-1-5-21-4144763311-214912462-1353588558-1001\SOFTWARE\e6d06ca5-4b5d-555a-82f9-96eee53026c3
HKCU\SOFTWARE\054eedb4-e983-5035-828b-2b1f3c538c8f
FirewallRules: [TCP Query User{11AF55B6-C406-4C23-B997-CB8CCEA4EBDD}C:\users\gilles\appdata\local\temp\7zoc9eba6af\setup.exe] => (Allow) C:\users\gilles\appdata\local\temp\7zoc9eba6af\setup.exe => Pas de fichier
FirewallRules: [UDP Query User{397CAEC6-745A-4979-9267-DA04928D84AA}C:\users\gilles\appdata\local\temp\7zoc9eba6af\setup.exe] => (Allow) C:\users\gilles\appdata\local\temp\7zoc9eba6af\setup.exe => Pas de fichier
FirewallRules: [{EC67C2B9-ED05-4727-A5DD-50BE55B2DE80}] => (Block) C:\users\gilles\appdata\local\temp\7zoc9eba6af\setup.exe => Pas de fichier
FirewallRules: [{C7B8DA41-03DF-4FDE-A468-111AE59D01F2}] => (Block) C:\users\gilles\appdata\local\temp\7zoc9eba6af\setup.exe => Pas de fichier
CustomCLSID: HKU\S-1-5-21-4144763311-214912462-1353588558-1001_Classes\CLSID\{FD848478-65F5-4F01-ACD9-69195EC3631F}\localserver32 -> "C:\Program Files\cFosSpeed\cFosSpeed.exe" -ToastActivated => Pas de fichier
CustomCLSID: HKU\S-1-5-21-4144763311-214912462-1353588558-1001_Classes\CLSID\{d936918b-9c4b-555e-074a-c79314be04e1}\localserver32 -> "C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPN.exe" -ToastActivated => Pas de fichier
HKLM-x32\...\Run: [AirBackupHelper] => C:\Program Files (x86)\iMobie\AnyTrans\AirBackupHelper.exe (Pas de fichier)
HKU\S-1-5-21-4144763311-214912462-1353588558-1001\...\Run: [Adobe Reader Synchronizer] => "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe" (Pas de fichier)
Task: {C5EAEF8F-53E1-4AF3-ACD7-33EDF1B22D10} - System32\Tasks\AOMEI Synchro Documents 2021-02-17, 20-36-02 => C:\Program Files (x86)\AOMEI\AOMEI Backupper 6.5.0  (Pas de fichier)
Task: {8A9422D5-69D2-474B-886B-9DFF70956705} - System32\Tasks\AOMEI Synchro Mail 2021-02-17, 20-43-21 => C:\Program Files (x86)\AOMEI\AOMEI Backupper 6.5.0  (Pas de fichier)
Task: {1642B68D-A4DF-4BF6-ABFD-4205C24DD1B8} - System32\Tasks\AOMEI Synchronisation de base 2021-02-17, 20-36-02 => C:\Program Files (x86)\AOMEI\AOMEI Backupper 6.4.0  (Pas de fichier)
Task: {2626BD30-5992-48D5-B409-BC81F695E6DC} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe  --automatic (Pas de fichier)
Task: {61860DFE-09ED-45BF-BA56-23F804624DD3} - System32\Tasks\Opera scheduled Autoupdate 1613300471 => C:\Users\Gilles\AppData\Local\Programs\Opera\launcher.exe  --scheduledautoupdate $(Arg0) (Pas de fichier)
HKLM-x32\...\Run: [HPUsageTrackingLEDM] => "C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe" "C:\Program Files (x86)\HP\HP UT LEDM\" [0 2021-02-14] () <==== ATTENTION [zéro octet Fichier/Dossier]
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKLM\SYSTEM\...\Terminal Server: [fDenyTSConnections] = 0 <==== ATTENTION
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM-x32\...\Run: [] => [X]
S2 WirelessBackupService; C:\Program Files (x86)\Wondershare\Dr.Fone\Addins\Recovery\WirelessBackupService.exe [X]
Edge Notifications: Default -> hxxps://3ebb32tsly9wfdza3f.nnoomm.co.in; hxxps://e9d7435f5e8bd58977.nnoomm.co.in;
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll [2021-02-13] (Sun Microsystems, Inc. -> Sun Microsystems, Inc.)
DPF: HKLM {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: HKLM {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
DPF: HKLM {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab
cmd: ipconfig /flushdns
cmd: netsh advfirewall reset
cmd: netsh advfirewall set allprofiles state on
cmd: netsh winsock reset
Emptytemp: 
End::