start
CloseProcesses:
CreateRestorePoint:
(Flux Software LLC) C:\Users\Thomas\AppData\Local\FluxSoftware\Flux\flux.exe
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKU\S-1-5-21-2658806506-3995382961-2198554156-1000\...\Run: [f.lux] => C:\Users\Thomas\AppData\Local\FluxSoftware\Flux\flux.exe [1017224 2013-10-24] (Flux Software LLC)
HKU\S-1-5-21-2658806506-3995382961-2198554156-1000\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\Bluestacks\HD-Agent.exe
HKU\S-1-5-21-2658806506-3995382961-2198554156-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03222017003527825\...\Run: [f.lux] => C:\Users\Thomas\AppData\Local\FluxSoftware\Flux\flux.exe [1017224 2013-10-24] (Flux Software LLC)
HKU\S-1-5-21-2658806506-3995382961-2198554156-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03222017003527825\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\Bluestacks\HD-Agent.exe
HKU\S-1-5-21-2658806506-3995382961-2198554156-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03222017003740613\...\Run: [f.lux] => C:\Users\Thomas\AppData\Local\FluxSoftware\Flux\flux.exe [1017224 2013-10-24] (Flux Software LLC)
HKU\S-1-5-21-2658806506-3995382961-2198554156-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03222017003740613\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\Bluestacks\HD-Agent.exe
ShortcutTarget: Gold Barre.lnk -> C:\Program Files (x86)\Gold Barre V3\Gold Barre v3.exe (Pas de fichier)
BootExecute: autocheck autochk * sdnclean64.exe
Toolbar: HKLM - Pas de nom - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - Pas de fichier
Toolbar: HKU\S-1-5-21-2658806506-3995382961-2198554156-1000 -> Pas de nom - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Pas de fichier
Toolbar: HKU\S-1-5-21-2658806506-3995382961-2198554156-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03222017003527825 -> Pas de nom - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Pas de fichier
Toolbar: HKU\S-1-5-21-2658806506-3995382961-2198554156-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03222017003740613 -> Pas de nom - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Pas de fichier
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
S3 GGSAFERDriver; \??\C:\Program Files (x86)\Garena Plus\Room\safedrv.sys [X]
S3 libusb0; system32\drivers\libusb0.sys [X]
2017-03-21 20:03 - 2017-03-21 20:03 - 00001508 _____ C:\Windows\Tasks\989H676H398u835.job
2017-03-21 17:56 - 2015-04-23 15:51 - 00000000 ____D C:\Users\Thomas\AppData\Local\Akamai
2014-03-18 22:36 - 2014-03-18 22:55 - 0000126 _____ () C:\Users\Thomas\AppData\Roaming\Camdata.ini
2017-03-21 16:51 - 2017-03-21 16:51 - 0001270 _____ () C:\Users\Thomas\AppData\Local\Temp\icq.exe
Task: {53CF546F-4067-4FC7-9A71-B304F12D7855} - \989H676H398u835 -> Pas de fichier <==== ATTENTION
Task: {8920235A-B556-411B-9730-E4F1E73EB155} - System32\Tasks\{68134D27-DF07-416D-A959-92C39F6DFBA2} => pcalua.exe -a C:\Users\Thomas\AppData\Local\Temp\jre-8u121-windows-au.exe -d C:\Windows\SysWOW64 -c /installmethod=jau FAMILYUPGRADE=1 <==== ATTENTION
Task: C:\Windows\Tasks\989H676H398u835.job => rundll32.exe ? C:\ProgramData\989H676H398u835\989H676H398u835.dll <==== ATTENTION
AlternateDataStreams: C:\ProgramData\Temp:56E2E879 [121]
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"


EmptyTemp:
end