start CloseProcesses: CreateRestorePoint: HKU\S-1-5-21-444115513-1170614783-1086148597-1001\Software\Microsoft\Internet Explorer\Main,Start Page = SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\.DEFAULT -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-444115513-1170614783-1086148597-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = CHR DefaultSearchURL: ChromeDefaultData -> hxxp://www.trotux.com/search/?q={searchTerms}&z=128cb70a5a78ac50b1f06e9g4z6b9mco4wccdcaqct&from=isr&uid=HGSTXHTS721010A9E630_JR10004M3PE1PF3PE1PFX&type=sp CHR DefaultSearchKeyword: ChromeDefaultData -> trotux CHR Profile: C:\Users\schan\AppData\Local\Google\Chrome\User Data\ChromeDefaultData [2017-03-08] <==== ATTENTION CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2017-02-24] (Hi-Rez Studios) [Fichier non signé] R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X] 2017-03-05 22:21 - 2017-03-05 22:22 - 06248164 _____ C:\Users\schan\Downloads\KMS.10.1.5.zip 2017-03-05 22:11 - 2017-03-05 22:11 - 00000000 ____D C:\ProgramData\KMSAuto WinSnare (HKLM-x32\...\{6F28E3A8-BEC0-4CCD-A35F-7155729C7A88}) (Version: 4.2.6 - WinSnare) <==== ATTENTION Task: {08821D92-F7C6-4433-B110-DB9227521830} - \Gautain -> Pas de fichier <==== ATTENTION Task: {6782652E-36F1-4A4D-84AA-24B2403D431D} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe [2015-08-16] (@ByELDI) C:\Program Files\KMSpico\AutoPico.exe 2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" EmptyTemp: end