start::
CreateRestorePoint:
CloseProcesses:
RemoveProxy:
HKU\S-1-5-21-3156094616-2390077373-788685940-1001\...\Run: [EPSDNMON] => "" (Pas de fichier)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
ShortcutTarget: $McRebootA5E6DEAA56$.lnk -> (Pas de fichier)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\$McRebootA5E6DEAA56$.lnk [2018-04-30]
Task: {91E2C36D-1C98-4C2E-89A6-1216037E4DBD} - System32\Tasks\Microsoft\Windows\Clip\ClipESU => %SystemRoot%\system32\clipesu.exe (Pas de fichier)
Task: {E88D9B2C-DDEA-47B2-9582-085153004DB5} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (Pas de fichier)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (Pas de fichier)
Task: {888E34A9-90FF-45AD-90DC-22C8A82B2652} - System32\Tasks\Microsoft\Windows\rempl\shell => %ProgramFiles%\rempl\sedlauncher.exe (Pas de fichier)
Task: {6ECC17BA-2F21-4D1D-A937-AF5B7E29ED7A} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => %systemroot%\system32\MusNotification.exe RebootDialog (Pas de fichier)
Task: {717485AD-CF07-4F77-911F-AD4BE7AAEDD1} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC RebootDialog (Pas de fichier)
Task: {60AA8C80-5DD2-41C4-93F6-6778CE65181F} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery RebootDialog (Pas de fichier)
Task: {0709881D-3C39-405B-9E61-1B6926BF4D08} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_Broker_Display => %systemroot%\system32\MusNotification.exe Display (Pas de fichier)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (Pas de fichier)
Task: {87092E5A-370B-4846-940C-8B38A040607A} - System32\Tasks\Remove AdwCleaner Application => C:\Windows\system32\CMD.EXE [376832 2025-05-09]
Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
Task: C:\WINDOWS\Tasks\EPSON WF-3820 Series Update {1E49CFF9-DBCF-4451-B67F-1F5D9785D388}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSXKE.EXE
Task: C:\WINDOWS\Tasks\EPSON WF-3820 Series Update {323D4C36-9890-4D4F-AB74-98026EE9B512}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSXKE.EXE
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction
S4 BDSafepaySrv; "C:\Program Files\Bitdefender\Bitdefender Security App\Safepay\bdservicehost.exe" "settings/services/configs/bdsafepaysrv_config.json" [X]
2025-05-25 16:35 - 2025-05-25 16:35 - 002363664 _____ (kernel-panik) C:\Users\JOHAN\Downloads\kprm_2.19.exe
2025-05-25 13:05 - 2025-05-25 13:05 - 000108476 _____ C:\ProgramData\agent.uninstall.1748171093.bdinstall.v2.bin
2025-05-25 13:04 - 2025-05-25 13:04 - 000114512 _____ C:\ProgramData\vpn.uninstall.1748170815.bdinstall.v2.bin
2025-05-25 11:23 - 2025-05-25 11:23 - 000493404 _____ C:\ProgramData\cl.uninstall.1748163610.bdinstall.v2.bin
2025-05-24 19:22 - 2025-05-24 19:22 - 387423947 _____ (NVIDIA Corporation) C:\Users\JOHAN\Downloads\Non confirmé 25642.crdownload
2025-05-20 18:45 - 2025-05-20 18:45 - 000112840 _____ C:\ProgramData\agent.update.1747759489.bdinstall.v2.bin
2025-05-09 02:01 - 2025-05-09 02:01 - 000000000 ____D C:\WINDOWS\system32\Tasks\McAfee
2025-05-08 20:26 - 2025-05-08 20:41 - 000000000 ____D C:\ESD
2025-05-25 16:37 - 2023-06-26 20:46 - 000000000 ____D C:\KPRM
2025-05-25 14:24 - 2023-03-13 19:19 - 000000000 ____D C:\Program Files\Bitdefender
2025-05-25 11:15 - 2018-05-01 15:58 - 000000000 ____D C:\ProgramData\Bitdefender
2025-05-25 11:10 - 2018-10-12 21:55 - 000000000 ____D C:\Program Files\Common Files\Bitdefender
AlternateDataStreams: C:\Users\JOHAN\Downloads\576.52-notebook-win10-win11-64bit-international-nsd-dch-whql.exe:BDU
AlternateDataStreams: C:\Users\JOHAN\Downloads\ccsetup628.exe:BDU
AlternateDataStreams: C:\Users\JOHAN\Downloads\ccsetup635.exe:BDU
AlternateDataStreams: C:\Users\JOHAN\Downloads\ChromeSetup (1).exe:BDU
AlternateDataStreams: C:\Users\JOHAN\Downloads\ChromeSetup.exe:BDU
AlternateDataStreams: C:\Users\JOHAN\Downloads\cpu-z_2.13-en.exe:BDU
AlternateDataStreams: C:\Users\JOHAN\Downloads\DDU v18.1.1.3.exe:BDU
AlternateDataStreams: C:\Users\JOHAN\Downloads\display-driver-uninstaller-ddu-18-1-1-1.exe:BDU
AlternateDataStreams: C:\Users\JOHAN\Downloads\mediacreationtool.exe:BDU
AlternateDataStreams: C:\Users\JOHAN\Downloads\Non confirmé 25642.crdownload:BDU
AlternateDataStreams: C:\Users\JOHAN\Downloads\PDF-XChange Editor Installer.exe:BDU
AlternateDataStreams: C:\Users\JOHAN\Downloads\reolink_setup_81812_0.exe:BDU
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
BHO: Bitdefender Anti-tracker -> {159ff5d5-55f1-4d2f-b706-767a55f77abb} -> C:\Program Files\Bitdefender\Bitdefender Security App\bdtrackerstbie.dll => Pas de fichier
BHO-x32: Bitdefender Anti-tracker -> {159ff5d5-55f1-4d2f-b706-767a55f77abb} -> C:\Program Files\Bitdefender\Bitdefender Security App\antispam32\bdtrackerstbie.dll => Pas de fichier
HKLM\...\StartupApproved\Run32: => "ccleaner_update_helper"
HKU\S-1-5-21-3156094616-2390077373-788685940-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
EmptyTemp:
cmd: ipconfig /flushdns
end::