1. ========================= SEAF 1.0.1.0 - C_XX
2.
3. Commencé à: 16:04:16 le 20/10/2016
4.
5. Valeur(s) recherchée(s):
6. AdAnti
7.
8. Légende: TC => Date de création, TM => Date de modification, DA => Dernier accès
9.
10. (!) --- Recherche registre
11.
12. ====== Fichier(s) ======
13.
14.
15. "C:\$RECYCLE.BIN\S-1-5-21-1413675022-3679237491-1003182551-1000\$RH78V9V\AdAntiHS.dll" [ NOT_CONTENT_INDEXED|ARCHIVE | 29 Ko ]
16. TC: 20/10/2016,15:49:58 | TM: 20/10/2016,15:49:58 | DA: 20/10/2016,15:49:58
17.
18.
19. =========================
20.
21.
22. "C:\Users\Bruno\AppData\Roaming\AdAnti\AdAntiHS.dll" [ NOT_CONTENT_INDEXED|ARCHIVE | 29 Ko ]
23. TC: 20/10/2016,16:02:34 | TM: 20/10/2016,16:02:34 | DA: 20/10/2016,16:02:34
24.
25.
26. =========================
27.
28.
29. "C:\Users\Bruno\Pictures\capture guitar.bruno Adanti.jpg" [ ARCHIVE | 1647 Ko ]
30. TC: 02/10/2016,15:29:17 | TM: 02/10/2016,09:11:40 | DA: 17/10/2016,12:20:38
31.
32.
33. =========================
34.
35.
36. "C:\Users\Bruno\Pictures\guitar.bruno Adanti détails.jpg" [ ARCHIVE | 116 Ko ]
37. TC: 02/10/2016,15:47:37 | TM: 02/10/2016,15:47:37 | DA: 17/10/2016,12:20:39
38.
39.
40. =========================
41.
42.
43.
44. ====== Entrée(s) du registre ======
45.
46.
47. [HKLM\Software\Policies\Softros\Process Blocker\BlackList]
48. "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AdAntiHS.exe"="enabled
49. 0
50. " (REG_MULTI_SZ)
51.
52. [HKLM\Software\Policies\Softros\Process Blocker\BlackList]
53. "C:\Users\Bruno\AppData\Roaming\AdAnti\AdAntiHS.exe:1"="enabled
54. 0
55. " (REG_MULTI_SZ)
56.
57. [HKLM\Software\Policies\Softros\Process Blocker\BlackList]
58. "C:\Utilisateurs\Bruno\AppData\Roaming\AdAnti\AdAntiHS.exe:1"="enabled
59. 0
60. " (REG_MULTI_SZ)
61.
62. [HKU\S-1-5-21-1413675022-3679237491-1003182551-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs]
63. "27"="capture guitar.bruno Adanti.jpg" (REG_BINARY)
64.
65. [HKU\S-1-5-21-1413675022-3679237491-1003182551-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.jpg]
66. "1"="capture guitar.bruno Adanti.jpg" (REG_BINARY)
67.
68. [HKU\S-1-5-21-1413675022-3679237491-1003182551-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\WordWheelQuery]
69. "11"="%AppData%\[AdAntiHS]" (REG_BINARY)
70.
71. [HKU\S-1-5-21-1413675022-3679237491-1003182551-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\WordWheelQuery]
72. "12"="%Temp%\[AdAntiHS]" (REG_BINARY)
73.
74. [HKU\S-1-5-21-1413675022-3679237491-1003182551-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\WordWheelQuery]
75. "13"="%LocalAppData%\[AdAntiHS].exe" (REG_BINARY)
76.
77. [HKU\S-1-5-21-1413675022-3679237491-1003182551-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\WordWheelQuery]
78. "15"="%CommonAppData%\[AdAntiHS]" (REG_BINARY)
79.
80. [HKU\S-1-5-21-1413675022-3679237491-1003182551-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\WordWheelQuery]
81. "5"="AdAnti" (REG_BINARY)
82.
83. =========================
84.
85. Fin à: 16:08:21 le 20/10/2016
86. 624877 Éléments analysés
87.
88. =========================
89. E.O.F