1. ========================= SEAF 1.0.1.0 - C_XX 2. 3. Commencé à: 01:18:42 le 19/07/2016 4. 5. Valeur(s) recherchée(s): 6. Osmegim 7. 8. Légende: TC => Date de création, TM => Date de modification, DA => Dernier accès 9. 10. (!) --- Recherche registre 11. 12. ====== Fichier(s) ====== 13. 14. 15. "C:\$Recycle.Bin\S-1-5-21-4256550607-910914473-3542436597-1001\$RT1US62\Application\Osmegim.exe" [ ARCHIVE | 4766 Ko ] 16. TC: 17/07/2016,22:33:36 | TM: 11/07/2016,14:44:31 | DA: 17/07/2016,22:33:36 17. 18. 19. ========================= 20. 21. 22. "C:\$Recycle.Bin\S-1-5-21-4256550607-910914473-3542436597-1001\$RT1US62\Osmegim.exe" [ ARCHIVE | 5464 Ko ] 23. TC: 17/07/2016,22:33:35 | TM: 24/03/2016,10:23:44 | DA: 17/07/2016,22:33:35 24. 25. 26. ========================= 27. 28. 29. "C:\Users\Cédric\AppData\Local\Microsoft\CLR_v2.0_32\UsageLogs\Osmegim.exe.log" [ ARCHIVE | 504 o ] 30. TC: 17/07/2016,15:21:15 | TM: 17/07/2016,15:21:15 | DA: 17/07/2016,15:21:15 31. 32. 33. ========================= 34. 35. 36. "C:\Users\Cédric\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\Osmegim.exe.log" [ ARCHIVE | 856 o ] 37. TC: 11/07/2016,14:40:52 | TM: 16/07/2016,22:34:39 | DA: 11/07/2016,14:40:52 38. 39. 40. ========================= 41. 42. 43. "C:\Users\Cédric\AppData\Roaming\Microsoft\Windows\Recent\Osmegim Jevroce (2).lnk" [ ARCHIVE | 627 o ] 44. TC: 17/07/2016,22:34:05 | TM: 17/07/2016,22:34:05 | DA: 17/07/2016,22:34:05 45. 46. 47. ========================= 48. 49. 50. "C:\Users\Cédric\AppData\Roaming\Microsoft\Windows\Recent\Osmegim Jevroce.lnk" [ ARCHIVE | 920 o ] 51. TC: 17/07/2016,00:25:53 | TM: 17/07/2016,00:25:53 | DA: 17/07/2016,00:25:53 52. 53. 54. ========================= 55. 56. 57. "C:\Users\Cédric\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Osmegim.lnk" [ ARCHIVE | 1 Ko ] 58. TC: 11/07/2016,14:39:53 | TM: 18/07/2016,04:23:22 | DA: 11/07/2016,14:44:31 59. 60. 61. ========================= 62. 63. 64. "C:\Windows\Prefetch\OSMEGIM.EXE-B6C79BF5.pf" [ NOT_CONTENT_INDEXED|ARCHIVE | 6 Ko ] 65. TC: 18/07/2016,04:21:52 | TM: 18/07/2016,04:21:52 | DA: 18/07/2016,04:21:52 66. 67. 68. ========================= 69. 70. 71. 72. ====== Entrée(s) du registre ====== 73. 74. 75. [HKU\S-1-5-21-4256550607-910914473-3542436597-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs] 76. "0"="Osmegim Jevroce" (REG_BINARY) 77. 78. [HKU\S-1-5-21-4256550607-910914473-3542436597-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs] 79. "72"="Osmegim Jevroce" (REG_BINARY) 80. 81. [HKU\S-1-5-21-4256550607-910914473-3542436597-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs] 82. "78"="Osmegim Jevroce.zip" (REG_BINARY) 83. 84. [HKU\S-1-5-21-4256550607-910914473-3542436597-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.zip] 85. "5"="Osmegim Jevroce.zip" (REG_BINARY) 86. 87. [HKU\S-1-5-21-4256550607-910914473-3542436597-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\StartupFolder] 88. "Osmegim.lnk"="" (REG_BINARY) 89. 90. [HKU\S-1-5-21-4256550607-910914473-3542436597-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\TypedPaths] 91. "url2"="C:\Users\Cédric\AppData\Roaming\Osmegim Jevroce\Osmegim.exe" (REG_SZ) 92. 93. [HKU\S-1-5-21-4256550607-910914473-3542436597-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\TypedPaths] 94. "url3"="C:\Users\Cédric\AppData\Roaming\Osmegim Jevroce" (REG_SZ) 95. 96. [HKU\S-1-5-21-4256550607-910914473-3542436597-1001\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store] 97. "C:\Users\Cédric\AppData\Roaming\Osmegim Jevroce\Osmegim.exe"="SACP" (REG_BINARY) 98. 99. [HKU\S-1-5-21-4256550607-910914473-3542436597-1001\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store] 100. "C:\Users\Cédric\AppData\Roaming\Osmegim Jevroce\Application\Osmegim.exe"="SACP" (REG_BINARY) 101. 102. [HKU\S-1-5-21-4256550607-910914473-3542436597-1001\SOFTWARE\WinRAR\DialogEditHistory\ArcName] 103. "0"="Osmegim Jevroce.zip" (REG_SZ) 104. 105. ========================= 106. 107. Fin à: 01:20:34 le 19/07/2016 108. 1786216 Éléments analysés 109. 110. ========================= 111. E.O.F