1. ========================= SEAF 1.0.1.0 - C_XX
2.
3. Commencé à: 18:15:04 le 18/12/2016
4.
5. Valeur(s) recherchée(s):
6. AdAnti
7.
8. Légende: TC => Date de création, TM => Date de modification, DA => Dernier accès
9.
10. (!) --- Recherche registre
11.
12. ====== Fichier(s) ======
13.
14.
15. "C:\$RECYCLE.BIN\S-1-5-18\$RO28EZU\AdAntiHS.dll" [ NOT_CONTENT_INDEXED|ARCHIVE | 29 Ko ]
16. TC: 26/10/2016,08:53:57 | TM: 26/10/2016,09:09:47 | DA: 05/11/2016,14:31:20
17.
18.
19. =========================
20.
21.
22. "C:\$RECYCLE.BIN\S-1-5-18\$RQAL188\AdAntiHS.dll" [ NOT_CONTENT_INDEXED|ARCHIVE | 29 Ko ]
23. TC: 25/10/2016,17:43:57 | TM: 26/10/2016,08:45:58 | DA: 05/11/2016,14:31:21
24.
25.
26. =========================
27.
28.
29. "C:\Users\Bruno\AppData\Roaming\AdAnti\AdAntiHS.dll" [ NOT_CONTENT_INDEXED|ARCHIVE | 29 Ko ]
30. TC: 18/12/2016,15:59:08 | TM: 18/12/2016,18:14:39 | DA: 18/12/2016,18:14:39
31.
32.
33. =========================
34.
35.
36. "C:\Users\Bruno\Desktop\Fichiers txt\Adanti passé de dll à txt.txt" [ ARCHIVE | 29 Ko ]
37. TC: 09/11/2016,14:55:00 | TM: 09/11/2016,14:55:00 | DA: 09/11/2016,14:55:00
38.
39.
40. =========================
41.
42.
43. "C:\Users\Bruno\Downloads\Anti_AdAnti.exe" [ ARCHIVE | 859 Ko ]
44. TC: 18/12/2016,14:54:57 | TM: 18/12/2016,14:55:04 | DA: 18/12/2016,14:55:04
45.
46.
47. =========================
48.
49.
50. "C:\Users\Bruno\Pictures\AdAnti Lockhunter 041216.jpg" [ ARCHIVE | 300 Ko ]
51. TC: 04/12/2016,23:27:14 | TM: 04/12/2016,23:27:14 | DA: 18/12/2016,15:33:03
52.
53.
54. =========================
55.
56.
57. "C:\Users\Bruno\Pictures\AdAnti Lockhunter 2.jpg" [ ARCHIVE | 102 Ko ]
58. TC: 26/10/2016,08:54:39 | TM: 26/10/2016,08:54:39 | DA: 18/12/2016,15:33:03
59.
60.
61. =========================
62.
63.
64. "C:\Users\Bruno\Pictures\Adanti lockhunter.bmp" [ ARCHIVE | 4915 Ko ]
65. TC: 26/10/2016,08:49:05 | TM: 26/10/2016,08:49:05 | DA: 18/12/2016,15:33:03
66.
67.
68. =========================
69.
70.
71. "C:\Users\Bruno\Pictures\Adanti lockhunter.jpg" [ ARCHIVE | 101 Ko ]
72. TC: 26/10/2016,08:50:01 | TM: 26/10/2016,08:52:15 | DA: 18/12/2016,15:33:03
73.
74.
75. =========================
76.
77.
78. "C:\Users\Bruno\Pictures\AntiAdanti demarrage.jpg" [ ARCHIVE | 42 Ko ]
79. TC: 18/12/2016,15:34:01 | TM: 18/12/2016,15:34:01 | DA: 18/12/2016,15:34:02
80.
81.
82. =========================
83.
84.
85. "C:\Users\Bruno\Pictures\capture guitar.bruno Adanti.jpg" [ ARCHIVE | 1647 Ko ]
86. TC: 02/10/2016,14:29:17 | TM: 02/10/2016,08:11:40 | DA: 18/12/2016,15:33:04
87.
88.
89. =========================
90.
91.
92. "C:\Users\Bruno\Pictures\guitar.bruno Adanti détails.jpg" [ ARCHIVE | 116 Ko ]
93. TC: 02/10/2016,14:47:37 | TM: 02/10/2016,14:47:37 | DA: 18/12/2016,15:33:04
94.
95.
96. =========================
97.
98.
99.
100. ====== Entrée(s) du registre ======
101.
102.
103. [HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce\ApprovedByRegRun2\AntiRepl\0]
104. "Target"="\??\C:\USERS\BRUNO\APPDATA\ROAMING\ADANTI" (REG_SZ)
105.
106. [HKLM\System\ControlSet001\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
107. "{8DF8C961-F41C-4994-9AA6-4607C5B8A97A}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\Users\Bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Anti_AdAnti.exe|Name=Anti_AdAnti.exe|" (REG_SZ)
108.
109. [HKLM\System\ControlSet001\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
110. "{CF1B8D56-5D18-4077-83BC-78DF90C84EA8}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\Users\Bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Anti_AdAnti.exe|Name=Anti_AdAnti.exe|" (REG_SZ)
111.
112. [HKLM\System\ControlSet001\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
113. "{FD6B293C-7C44-4EA2-991E-4C15178DA773}"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|App=C:\Users\Bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Anti_AdAnti.exe|Name=Anti_AdAnti.exe|" (REG_SZ)
114.
115. [HKLM\System\ControlSet001\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
116. "{373187DE-6A35-4DC8-B7DB-029B92487025}"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|App=C:\Users\Bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Anti_AdAnti.exe|Name=Anti_AdAnti.exe|" (REG_SZ)
117.
118. [HKLM\System\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
119. "{8DF8C961-F41C-4994-9AA6-4607C5B8A97A}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=6|Profile=Private|App=C:\Users\Bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Anti_AdAnti.exe|Name=Anti_AdAnti.exe|" (REG_SZ)
120.
121. [HKLM\System\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
122. "{CF1B8D56-5D18-4077-83BC-78DF90C84EA8}"="v2.10|Action=Allow|Active=TRUE|Dir=In|Protocol=17|Profile=Private|App=C:\Users\Bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Anti_AdAnti.exe|Name=Anti_AdAnti.exe|" (REG_SZ)
123.
124. [HKLM\System\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
125. "{FD6B293C-7C44-4EA2-991E-4C15178DA773}"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=6|Profile=Domain|App=C:\Users\Bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Anti_AdAnti.exe|Name=Anti_AdAnti.exe|" (REG_SZ)
126.
127. [HKLM\System\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
128. "{373187DE-6A35-4DC8-B7DB-029B92487025}"="v2.10|Action=Allow|Active=FALSE|Dir=In|Protocol=17|Profile=Domain|App=C:\Users\Bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Anti_AdAnti.exe|Name=Anti_AdAnti.exe|" (REG_SZ)
129.
130. [HKU\S-1-5-21-1413675022-3679237491-1003182551-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
131. "C:\Users\Bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Anti_AdAnti.exe"="Anti_AdAnti.exe" (REG_SZ)
132.
133. [HKU\S-1-5-21-1413675022-3679237491-1003182551-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
134. "C:\Users\Bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Anti_AdAnti.exe"="Anti_AdAnti.exe" (REG_SZ)
135.
136. =========================
137.
138. Fin à: 18:18:55 le 18/12/2016
139. 628890 Éléments analysés
140.
141. =========================
142. E.O.F