1. ========================= SEAF 1.0.1.0 - C_XX
2.
3. Commencé à: 16:15:35 le 19/10/2016
4.
5. Valeur(s) recherchée(s):
6. AdAnti
7.
8. Légende: TC => Date de création, TM => Date de modification, DA => Dernier accès
9.
10. (!) --- Recherche registre
11.
12. ====== Fichier(s) ======
13.
14.
15. "C:\$RECYCLE.BIN\S-1-5-21-1413675022-3679237491-1003182551-1000\$RHBNYHG\AdAntiHS.exe" [ ARCHIVE | 33 Ko ]
16. TC: 09/12/2008,16:03:57 | TM: 09/12/2008,16:03:57 | DA: 01/10/2016,18:06:02
17.
18.
19. =========================
20.
21.
22. "C:\Users\Bruno\AppData\Roaming\AdAnti\AdAntiHS.exe" [ ARCHIVE | 33 Ko ]
23. TC: 09/12/2008,16:03:57 | TM: 09/12/2008,16:03:57 | DA: 19/10/2016,09:53:44
24.
25.
26. =========================
27.
28.
29. "C:\Users\Bruno\Pictures\capture guitar.bruno Adanti.jpg" [ ARCHIVE | 1647 Ko ]
30. TC: 02/10/2016,15:29:17 | TM: 02/10/2016,09:11:40 | DA: 17/10/2016,12:20:38
31.
32.
33. =========================
34.
35.
36. "C:\Users\Bruno\Pictures\guitar.bruno Adanti détails.jpg" [ ARCHIVE | 116 Ko ]
37. TC: 02/10/2016,15:47:37 | TM: 02/10/2016,15:47:37 | DA: 17/10/2016,12:20:39
38.
39.
40. =========================
41.
42.
43. "C:\Windows\pss\AdAntiHS.exe.CommonStartup" [ NORMAL | 33 Ko ]
44. TC: 10/10/2016,12:09:52 | TM: 09/12/2008,16:03:57 | DA: 15/10/2016,18:29:39
45.
46.
47. =========================
48.
49.
50.
51. ====== Entrée(s) du registre ======
52.
53.
54. [HKLM\Software\Policies\Softros\Process Blocker\BlackList]
55. "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AdAntiHS.exe"="enabled
56. 0
57. " (REG_MULTI_SZ)
58.
59. [HKLM\Software\Policies\Softros\Process Blocker\BlackList]
60. "C:\Users\Bruno\AppData\Roaming\AdAnti\AdAntiHS.exe:1"="enabled
61. 0
62. " (REG_MULTI_SZ)
63.
64. [HKLM\Software\Policies\Softros\Process Blocker\BlackList]
65. "C:\Utilisateurs\Bruno\AppData\Roaming\AdAnti\AdAntiHS.exe:1"="enabled
66. 0
67. " (REG_MULTI_SZ)
68.
69. [HKU\S-1-5-21-1413675022-3679237491-1003182551-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs]
70. "27"="capture guitar.bruno Adanti.jpg" (REG_BINARY)
71.
72. [HKU\S-1-5-21-1413675022-3679237491-1003182551-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.jpg]
73. "1"="capture guitar.bruno Adanti.jpg" (REG_BINARY)
74.
75. [HKU\S-1-5-21-1413675022-3679237491-1003182551-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\WordWheelQuery]
76. "11"="%AppData%\[AdAntiHS]" (REG_BINARY)
77.
78. [HKU\S-1-5-21-1413675022-3679237491-1003182551-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\WordWheelQuery]
79. "12"="%Temp%\[AdAntiHS]" (REG_BINARY)
80.
81. [HKU\S-1-5-21-1413675022-3679237491-1003182551-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\WordWheelQuery]
82. "13"="%LocalAppData%\[AdAntiHS].exe" (REG_BINARY)
83.
84. [HKU\S-1-5-21-1413675022-3679237491-1003182551-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\WordWheelQuery]
85. "15"="%CommonAppData%\[AdAntiHS]" (REG_BINARY)
86.
87. [HKU\S-1-5-21-1413675022-3679237491-1003182551-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\WordWheelQuery]
88. "5"="AdAnti" (REG_BINARY)
89.
90. =========================
91.
92. Fin à: 16:17:17 le 19/10/2016
93. 626751 Éléments analysés
94.
95. =========================
96. E.O.F