Start
CreateRestorePoint:
CloseProcesses:
Task: {5391DB4B-791F-4DDD-B50B-086CFEB90031} - System32\Tasks\Skype => C:\Users\uterm\AppData\Local\Temp\Colis-Suivi-Relay.vbs <==== ATTENTION
2017-03-03 15:00 - 2017-01-17 11:20 - 03843584 _____ () C:\Program Files (x86)\TorrentsTime Media Player\bin\torrent.dll
HKU\S-1-5-21-3509814789-2731912807-2533590498-1001\...\StartupApproved\StartupFolder: => "Colis-Suivi-Relay.vbs"
HKU\S-1-5-21-3509814789-2731912807-2533590498-1001\...\StartupApproved\StartupFolder: => "x.vbs"
FirewallRules: [{7035D559-72BC-4A4C-B93C-C57B20C79136}] => (Allow) C:\Program Files (x86)\TorrentsTime Media Player\bin\chromecast\node.exe
FirewallRules: [{15A226A4-326E-486C-8921-CA4D39E59273}] => (Allow) C:\Program Files (x86)\TorrentsTime Media Player\bin\chromecast\node.exe
Startup: C:\Users\uterm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Colis-Suivi-Relay.vbs [2017-05-19] ()
Startup: C:\Users\uterm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\x.vbs [2017-05-19] ()
FF Plugin HKU\S-1-5-21-3509814789-2731912807-2533590498-1001: torrents-time.com/TTPlugin -> C:\Program Files (x86)\TorrentsTime Media Player\bin\npTTPlugin.dll [2017-01-17] (Torrents Time)
R2 TTService; C:\Program Files (x86)\TorrentsTime Media Player\bin\TTService.exe [3278336 2017-01-27] (TorrentsTime) [Fichier non signé]
2017-05-22 06:02 - 2017-05-22 06:02 - 00000000 ____D C:\Users\uterm\AppData\Local\Babylon
2017-05-22 06:02 - 2017-05-22 06:02 - 00000000 ____D C:\ProgramData\Babylon
2017-05-22 06:01 - 2017-05-22 06:01 - 00000000 ____D C:\Users\uterm\AppData\Roaming\Babylon
2017-05-22 03:07 - 2017-03-03 15:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TorrentsTime Media Player
2017-01-14 17:27 - 2017-01-14 17:27 - 0000016 _____ () C:\ProgramData\mntemp
2017-01-14 17:27 - 2017-01-14 17:27 - 0004147 _____ () C:\ProgramData\rxsmznjf.zcp
C:\Program Files (x86)\TorrentsTime Media Player
EmptyTemp:
end