start
CloseProcesses:
Hosts:
CreateRestorePoint:
C:\Windows\AutoKMS\AutoKMS.exe
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://speedial.com/results.php?f=4&q={searchTerms}&a=spd_tele_14_19_ff&cd=2XzuyEtN2Y1L1Qzu0AtDtC0DyEzztDzz0EyCtByE0A0Fzz0BtN0D0Tzu0SzzyCtBtN1L2XzutBtFtBtDtFzytFtCtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyE0ByBtC0A0EyD0FtGtC0CyE0CtG0ByC0D0FtG0B0D0BtDtGtC0FzzyB0C0D0EyCzz0EtD0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyC0EyCtA0EtCzzyEtG0CtD0C0FtG0D0DyD0AtGyC0C0B0CtGtDyBzzzy0B0BtA0B0CtDtB0D2Q&cr=392736475&ir=
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://speedial.com/results.php?f=4&q={searchTerms}&a=spd_tele_14_19_ff&cd=2XzuyEtN2Y1L1Qzu0AtDtC0DyEzztDzz0EyCtByE0A0Fzz0BtN0D0Tzu0SzzyCtBtN1L2XzutBtFtBtDtFzytFtCtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyE0ByBtC0A0EyD0FtGtC0CyE0CtG0ByC0D0FtG0B0D0BtDtGtC0FzzyB0C0D0EyCzz0EtD0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyC0EyCtA0EtCzzyEtG0CtD0C0FtG0D0DyD0AtGyC0C0B0CtGtDyBzzzy0B0BtA0B0CtDtB0D2Q&cr=392736475&ir=
SearchScopes: HKLM-x32 -> DefaultScope la valeur est absente
S3 clwvd; \SystemRoot\system32\DRIVERS\clwvd.sys [X]
U3 McAPExe; pas de ImagePath
U3 McMPFSvc; pas de ImagePath
U3 McNaiAnn; pas de ImagePath
U3 mcpltsvc; pas de ImagePath
U3 mfecore; pas de ImagePath
U3 MSK80Service; pas de ImagePath
2016-09-17 09:47 - 2016-09-17 09:47 - 00003758 _____ C:\Windows\System32\Tasks\AutoKMS
Task: {EE30394C-F982-4184-AEF2-756780397A1F} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2014-07-09] ()
2014-07-09 12:01 - 2014-07-09 12:01 - 03798528 _____ () C:\Windows\AutoKMS\AutoKMS.exe


EmptyTemp:
end