start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
EmptyTemp:
Task: {E0B66D09-0D23-406D-B877-AEF4F6F9B770} - System32\Tasks\Scheduled scanning task => C:\PROGRA~1\F-Secure\ANTI-V~1\fsav.exe
AlternateDataStreams: C:\ProgramData\Microsoft:Aor4kyHDSXO6KSSFiZjKad [2306]
AlternateDataStreams: C:\ProgramData\Microsoft:uO8QmnPG8TKccnEcXUcLVWgsL [2612]
AlternateDataStreams: C:\ProgramData\Temp:373E1720 [118]
AlternateDataStreams: C:\ProgramData\Temp:A42A9F39 [126]
AlternateDataStreams: C:\ProgramData\Temp:E1F04E8D [116]
AlternateDataStreams: C:\Users\wam\Local Settings:KzOEnk7QVqW9DJkVTydQCDhH [2234]
AlternateDataStreams: C:\Users\wam\AppData\Local:KzOEnk7QVqW9DJkVTydQCDhH [2234]
AlternateDataStreams: C:\Users\wam\AppData\Local\Application Data:KzOEnk7QVqW9DJkVTydQCDhH [2234]
AlternateDataStreams: C:\Users\wam\AppData\Local\Temporary Internet Files:viZiSocGg9y5GlqYkQ00wcdR0c6Ds [2546]
FirewallRules: [{A7AC5FA6-1CC8-49B3-B147-121080B25B34}] => (Allow) C:\Program Files\Windows Live\Messenger\msnmsgr.exe
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
GroupPolicy: Restriction - Chrome <==== ATTENTION
BHO: Pas de nom -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> Pas de fichier
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-11-08] (AVAST Software)
FF Extension: (Avast SafePrice) - C:\Users\wam\AppData\Roaming\Mozilla\Firefox\Profiles\9m5n39cc.default\Extensions\sp@avast.com.xpi [2017-12-11]
CHR NewTab: Default -> Not-active:"chrome-extension://honeoiacmpjnbchlccbcbogafdfjgnim/newtab.html", Not-active:"chrome-extension://dgldcllfgcheelimlbmilnkilnamlhbd/newtab.html"
CHR HKLM\...\Chrome\Extension: [ccjleegmemocfpghkhpjmiccjcacackp] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-1871111397-3539990770-1974983793-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
cmd: ipconfig /flushdns