start
CreateRestorePoint:
CloseProcesses:
RemoveProxy:

HKU\S-1-5-21-2637655575-953036957-3204598369-1001\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1
HKU\S-1-5-21-2637655575-953036957-3204598369-1001\...\Policies\Explorer: [NoResolveSearch] 1
HKU\S-1-5-21-2637655575-953036957-3204598369-1001\...\Policies\Explorer: [NoInternetOpenWith] 1
ShellIconOverlayIdentifiers: [
MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => Pas de fichier
ShellIconOverlayIdentifiers: [
MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => Pas de fichier
ShellIconOverlayIdentifiers: [
MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => Pas de fichier
GroupPolicy: Restriction - Chrome <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-2637655575-953036957-3204598369-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/keyword/%s
FF Plugin: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF HKU\S-1-5-21-2637655575-953036957-3204598369-1001\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files\Internet Download Manager\idmmzcc2.xpi => non trouvé(e)
CHR DefaultSearchURL: Profile 9 -> hxxp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGIjVkxlyIP4NYe17aVLWr8UeuffMWh7dVpgHchACki1jBGZHyB8czNHVOzEEOD_ktxRFYPgYq9ftzVPCHf8unf5kwPVXK3cERfr_aTf__c6YSmtpo6VueySrFdqouOwznDKcJBShwytLbh5Z2auG48xQB9IKkE8rWT3BBPNY4Bd7IeU0sofyPj-1FuTD&q={searchTerms}
CHR DefaultSearchKeyword: Profile 9 -> feed.sonic-search.com
CHR DefaultSuggestURL: Profile 9 -> hxxps://search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command={searchTerms}
S3 catchme; \??\C:\Users\toshiba\AppData\Local\Temp\catchme.sys [X]
Task: {A8901DCF-7893-4551-867C-1F346306348D} - \p2a0dzoc -> Pas de fichier <==== ATTENTION
Task: {2FA358ED-17CE-45E3-9D03-D27B6558A9B6} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => %SystemRoot%\ehome\mcupdate [Argument = $(Arg0)]
Task: {CB99144C-88D6-4F2F-8350-AABEE7EE0460} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => %SystemRoot%\ehome\ehrec [Argument = /RestartRecording]


CMD: netsh winsock reset all
CMD: ipconfig /flushdns
hosts:
EmptyTemp:
Reboot:
end