closeprocesses:
createrestorepoint:
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier
ContextMenuHandlers1_.DEFAULT: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => -> Pas de fichier
ContextMenuHandlers4_.DEFAULT: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => -> Pas de fichier
ContextMenuHandlers5_.DEFAULT: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => -> Pas de fichier
AlternateDataStreams: C:\Users\melis\OneDrive:${3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0}.SyncRootIdentity [130]
FirewallRules: [{252EEA36-0EC5-4002-AE63-BF26A385244F}] => (Allow) C:\Users\happy\AppData\Local\Temp\EpInsNav\DL\3013\Network\EpsonNetSetup\Data\ENEasyApp.exe Pas de fichier
FirewallRules: [{239FB167-793C-4F2B-A6A8-6031710DB972}] => (Allow) C:\Users\happy\AppData\Local\Temp\EpInsNav\DL\3013\Network\EpsonNetSetup\Data\ENEasyApp.exe Pas de fichier
SearchScopes: HKU\S-1-5-21-4103935436-3102128521-4288535938-1001 -> DefaultScope {45C49A37-4D6B-4AC9-BA8D-B2B3D1A74082} URL =
SearchScopes: HKU\S-1-5-21-4103935436-3102128521-4288535938-1001 -> {F60556A0-D8EF-4C6B-9515-509F732A289B} URL =
FF Plugin HKU\S-1-5-21-4103935436-3102128521-4288535938-1001: @updates.epicbrowser.com/Epic Privacy Browser Installer;version=3 -> C:\Users\happy\AppData\Local\Epic Privacy Browser\Installer\1.3.27.13\npEpicUpdate3.dll [Pas de fichier]
FF Plugin HKU\S-1-5-21-4103935436-3102128521-4288535938-1001: @updates.epicbrowser.com/Epic Privacy Browser Installer;version=9 -> C:\Users\happy\AppData\Local\Epic Privacy Browser\Installer\1.3.27.13\npEpicUpdate3.dll [Pas de fichier]
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
S3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2018-12-02] (Disc Soft Ltd -> Disc Soft Ltd)
S3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2018-12-02] (Disc Soft Ltd -> Disc Soft Ltd)
cmd: DISM /Online /Cleanup-image /Restorehealth
cmd: sfc /scannow
emptytemp: