start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
EmptyTemp:
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier
Task: {3888F101-17C1-405B-A601-0BB40D22DFFA} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
Task: {6A74E9BF-6C3C-40B2-8A15-E6C7F1CB182D} - System32\Tasks\{768341FD-0517-C91B-AAFF-3CFF92A4637C} => C:\Users\Laurine\AppData\Roaming\768341fd0517c91baaff3cff92a4637c\updtask.exe [2013-04-11] () <==== ATTENTION
C:\Users\Laurine\AppData\Roaming\768341fd0517c91baaff3cff92a4637c
Task: C:\WINDOWS\Tasks\{139BF746-7F88-4FCA-5A08-27E590A4A671}.job => C:\Users\Laurine\AppData\Roaming\minio\SYNHEL~1.EXE
Task: C:\WINDOWS\Tasks\{219F71AB-902A-2A05-3342-3D3988015098}.job => C:\Users\Laurine\AppData\Roaming\bodor\SYNCVE~1.EXE
Task: C:\WINDOWS\Tasks\{3CC6AF10-455C-48F5-324F-4A4E64CEFBF4}.job => C:\Users\Laurine\AppData\Local\bodor\sync.exe
Task: C:\WINDOWS\Tasks\{768341FD-0517-C91B-AAFF-3CFF92A4637C}.job => C:\Users\Laurine\AppData\Roaming\768341~1\updtask.exe <==== ATTENTION
2017-10-04 12:06 - 2017-10-04 12:06 - 000105136 _____ () C:\Program Files (x86)\Amazon\Amazon Assistant\amazonAssistantService.exe
2017-10-04 12:07 - 2017-10-04 12:07 - 000159408 _____ () C:\Program Files (x86)\Amazon\Amazon Assistant\aaLoader64.dll
2018-01-23 17:04 - 2018-01-23 17:04 - 000015064 _____ () C:\WINDOWS\assembly\GAC_MSIL\MyService\1.0.0.1__2dfa3f50f0bed57d\MyService.dll
IE trusted site: HKU\S-1-5-21-2908261632-1851004443-4056158539-1001\...\amazon.fr -> amazon.fr
() C:\Program Files (x86)\Amazon
C:\Program Files (x86)\McAfee
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
GroupPolicy: Restriction <==== ATTENTION
Tcpip\..\Interfaces\{4b37746c-94c4-4da6-b35d-313468925114}: [DhcpNameServer] 40.30.1.55
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2908261632-1851004443-4056158539-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://fr.search.yahoo.com/yhs/web?hspart=arh&hsimp=yhs-001&type=zxy_b2db24c86614e4766f¶m1=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%3D¶m2=NqZcNaR5MWtaNZ%3D%3D
HKU\S-1-5-21-2908261632-1851004443-4056158539-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.acer15.msn.com/?pc=ACTE
SearchScopes: HKLM -> DefaultScope {114F24C5-5EE5-43FD-AB49-7E8144BAE898} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {114F24C5-5EE5-43FD-AB49-7E8144BAE898} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {f79e5d1c-5148-469e-9f98-a11d8d7863f4} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_secureddownload_17_02_ssg01¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuzyyC0EzyyBzyyDtAyBtB0FyD0Bzz0F0BtN0D0Tzu0StCzztAyBtN1L2XzutAtFtByDtFtCtFtCtDyDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyBzyzztAzy0E0FzztGyB0FyByDtGtBtC0BtBtGtB0DtBzytGtA0Azz0FyByEyB0CtBtB0C0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0F0E0AyCyD0C0E0EtG0E0Bzz0FtGyEyB0C0CtG0A0CzyyEtGtBtC0EzyzytDzy0C0EyCyE0C2QtN0A0LzuyE%26cr%3D289575849%26a%3Dwbf_secureddownload_17_02_ssg01%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {114F24C5-5EE5-43FD-AB49-7E8144BAE898} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> {114F24C5-5EE5-43FD-AB49-7E8144BAE898} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> {f79e5d1c-5148-469e-9f98-a11d8d7863f4} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_secureddownload_17_02_ssg01¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuzyyC0EzyyBzyyDtAyBtB0FyD0Bzz0F0BtN0D0Tzu0StCzztAyBtN1L2XzutAtFtByDtFtCtFtCtDyDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyBzyzztAzy0E0FzztGyB0FyByDtGtBtC0BtBtGtB0DtBzytGtA0Azz0FyByEyB0CtBtB0C0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0F0E0AyCyD0C0E0EtG0E0Bzz0FtGyEyB0C0CtG0A0CzyyEtGtBtC0EzyzytDzy0C0EyCyE0C2QtN0A0LzuyE%26cr%3D289575849%26a%3Dwbf_secureddownload_17_02_ssg01%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2908261632-1851004443-4056158539-1001 -> DefaultScope {114F24C5-5EE5-43FD-AB49-7E8144BAE898} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=arh&hsimp=yhs-001&type=zxy_b2db24c86614e4766f¶m1=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%3D¶m2=MWBcNGtaMaR%3D&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2908261632-1851004443-4056158539-1001 -> {114F24C5-5EE5-43FD-AB49-7E8144BAE898} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=arh&hsimp=yhs-001&type=zxy_b2db24c86614e4766f¶m1=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%3D¶m2=MWBcNGtaMaR%3D&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2908261632-1851004443-4056158539-1001 -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_secureddownload_17_02_ssg01¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuzyyC0EzyyBzyyDtAyBtB0FyD0Bzz0F0BtN0D0Tzu0StCzztAyBtN1L2XzutAtFtByDtFtCtFtCtDyDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyBzyzztAzy0E0FzztGyB0FyByDtGtBtC0BtBtGtB0DtBzytGtA0Azz0FyByEyB0CtBtB0C0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0F0E0AyCyD0C0E0EtG0E0Bzz0FtGyEyB0C0CtG0A0CzyyEtGtBtC0EzyzytDzy0C0EyCyE0C2QtN0A0LzuyE%26cr%3D289575849%26a%3Dwbf_secureddownload_17_02_ssg01%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms}
BHO: Amazon Assistant -> {0ddcea2a-7b00-4349-8acb-af7ba6da251f} -> C:\Windows\system32\mscoree.dll [2017-09-29] (Microsoft Corporation)
BHO: McAfee WebAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2018-01-07] (McAfee, Inc.)
BHO-x32: Amazon Assistant -> {0ddcea2a-7b00-4349-8acb-af7ba6da251f} -> C:\Windows\system32\mscoree.dll [2017-09-29] (Microsoft Corporation)
BHO-x32: McAfee WebAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2018-01-07] (McAfee, Inc.)
FF user.js: detected! => C:\Users\Laurine\AppData\Roaming\Mozilla\Firefox\Profiles\a46wjayk.default\user.js [2017-01-11]
FF Homepage: Mozilla\Firefox\Profiles\a46wjayk.default -> hxxps://fr.search.yahoo.com/yhs/web?hspart=arh&hsimp=yhs-001&type=zxy_a0d9d531b0c82eaf84¶m1=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%3D¶m2=LWx5MWB8MaN6
FF Extension: (Amazon Assistant for Firefox) - C:\Users\Laurine\AppData\Roaming\Mozilla\Firefox\Profiles\a46wjayk.default\Extensions\abb-acer@amazon.com [2016-12-26] [Legacy]
FF Extension: (Browser-Security) - C:\Users\Laurine\AppData\Roaming\Mozilla\Firefox\Profiles\a46wjayk.default\Extensions\firefox@browser-security.de.xpi [2017-01-11] [Legacy]
FF Extension: (SuperMediaTab Extension) - C:\Users\Laurine\AppData\Roaming\Mozilla\Firefox\Profiles\a46wjayk.default\Extensions\SuperMediaTab-the-extension1@mozilla.com.xpi [2016-12-27] [Legacy]
FF Extension: (Pas de nom) - C:\Program Files (x86)\McAfee\SiteAdvisor\e10ssaffplg.xpi [2017-10-30]
FF SearchPlugin: C:\Users\Laurine\AppData\Roaming\Mozilla\Firefox\Profiles\a46wjayk.default\searchplugins\yahoo! powered.xml [2017-01-11]
FF SearchPlugin: C:\Users\Laurine\AppData\Roaming\Mozilla\Firefox\Profiles\a46wjayk.default\searchplugins\yhs.xml [2017-01-29]
FF Extension: (Amazon Assistant for Firefox) - C:\Program Files (x86)\Mozilla Firefox\distribution\extensions\abb-acer@amazon.com [2017-07-02] [Legacy]
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\e10ssaffplg.xpi
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\e10ssaffplg.xpi
CHR HomePage: Default -> hxxps://webstart-page.com/?s=acer&m=home&brw=ch
CHR StartupUrls: Default -> "hxxps://webstart-page.com/?s=acer&m=start&brw=ch"
CHR NewTab: Default -> Not-active:"chrome-extension://khhnbllgpbneolfboemjchecpomfifcl/index.html", Not-active:"chrome-extension://bahkljhhdeciiaodlkppoonappfnheoi/index.html"
CHR Extension: (Search Manager) - C:\Users\Laurine\AppData\Local\Google\Chrome\User Data\Default\Extensions\bahkljhhdeciiaodlkppoonappfnheoi [2018-01-23]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\Laurine\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2018-01-13]
CHR Extension: (Search Manager) - C:\Users\Laurine\AppData\Local\Google\Chrome\User Data\Default\Extensions\ijahobfejgeblmkpcmgpelfibgnnjpil [2017-11-29]
CHR Extension: (Search Manager) - C:\Users\Laurine\AppData\Local\Google\Chrome\User Data\Default\Extensions\khhnbllgpbneolfboemjchecpomfifcl [2018-01-24]
CHR HKLM\...\Chrome\Extension: [bpmmandcadflhnnaiclipadomfmdbjbp] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [ijahobfejgeblmkpcmgpelfibgnnjpil] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [pbofdmdkmmhmgmiecoaofbgfdahcdflp] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2908261632-1851004443-4056158539-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bpmmandcadflhnnaiclipadomfmdbjbp] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2908261632-1851004443-4056158539-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ijahobfejgeblmkpcmgpelfibgnnjpil] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2908261632-1851004443-4056158539-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pbofdmdkmmhmgmiecoaofbgfdahcdflp] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [bpmmandcadflhnnaiclipadomfmdbjbp] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [ijahobfejgeblmkpcmgpelfibgnnjpil] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [pbjikboenpfhbbejgkoklgkhjpfogcam] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [pbofdmdkmmhmgmiecoaofbgfdahcdflp] - hxxps://clients2.google.com/service/update2/crx
U3 aswbdisk; pas de ImagePath
2018-01-23 17:24 - 2018-01-23 17:25 - 000002716 _____ C:\WINDOWS\System32\Tasks\{768341FD-0517-C91B-AAFF-3CFF92A4637C}
2018-01-23 17:24 - 2018-01-23 17:25 - 000002712 _____ C:\WINDOWS\System32\Tasks\{219F71AB-902A-2A05-3342-3D3988015098}
2018-01-23 17:24 - 2018-01-23 17:25 - 000002712 _____ C:\WINDOWS\System32\Tasks\{139BF746-7F88-4FCA-5A08-27E590A4A671}
2018-01-23 17:24 - 2018-01-23 17:25 - 000002700 _____ C:\WINDOWS\System32\Tasks\{3CC6AF10-455C-48F5-324F-4A4E64CEFBF4}
2018-01-23 17:24 - 2018-01-23 17:25 - 000002320 _____ C:\WINDOWS\System32\Tasks\{9A52BBEE-339E-435C-B572-7B5259825543}
2018-01-23 17:24 - 2018-01-23 17:25 - 000002228 _____ C:\WINDOWS\System32\Tasks\{6E89FC65-CE89-42D5-B663-884E63BC8B63}
2018-01-22 20:59 - 2017-01-20 09:07 - 000487184 _____ (McAfee, Inc.) C:\WINDOWS\system32\Drivers\mfeaack.sys.9d6b.deleteme
2018-01-22 20:59 - 2017-01-20 09:07 - 000366328 _____ (McAfee, Inc.) C:\WINDOWS\system32\Drivers\mfeavfk.sys.9c07.deleteme
2018-01-22 20:59 - 2017-01-20 09:07 - 000110256 _____ (McAfee, Inc.) C:\WINDOWS\system32\Drivers\mfeplk.sys.dbd9.deleteme
2018-01-08 00:01 - 2018-01-08 00:01 - 000000068 _____ C:\Users\Laurine\AppData\Local\3m8rdzl7qc
2014-04-10 10:27 - 2014-04-10 10:27 - 038167840 _____ (Sony Creative Software Inc.) C:\Program Files\vegas130.exe
2017-08-12 14:26 - 2017-07-19 13:59 - 000000472 _____ () C:\Users\Laurine\AppData\Roaming\install.log
2017-10-19 20:12 - 2017-10-19 20:13 - 000359936 _____ () C:\Users\Laurine\AppData\Roaming\Tosopo.exe
2017-01-12 16:42 - 2018-01-23 01:16 - 000000440 _____ () C:\Users\Laurine\AppData\Roaming\WB.CFG
2018-01-08 00:01 - 2018-01-08 00:01 - 000000068 _____ () C:\Users\Laurine\AppData\Local\3m8rdzl7qc
C:\Windows\Tasks\{139BF746-7F88-4FCA-5A08-27E590A4A671}.job
C:\Windows\Tasks\{219F71AB-902A-2A05-3342-3D3988015098}.job
C:\Windows\Tasks\{3CC6AF10-455C-48F5-324F-4A4E64CEFBF4}.job
C:\Windows\Tasks\{768341FD-0517-C91B-AAFF-3CFF92A4637C}.job
2018-01-24 22:29 - 2018-01-13 19:28 - 001031928 _____ (McAfee, Inc.) C:\Users\Laurine\AppData\Local\Temp\0173961516829390mcinst.exe
2017-02-28 10:10 - 2017-02-28 10:10 - 000244264 _____ (McAfee, Inc.) C:\Users\Laurine\AppData\Local\Temp\McCSPInstall.dll
2018-01-24 22:33 - 2017-02-28 10:10 - 000209688 _____ (McAfee Inc.) C:\Users\Laurine\AppData\Local\Temp\mccspuninstall.exe
2018-01-10 10:31 - 2017-10-28 16:31 - 000000000 ____D C:\Users\Laurine\AppData\Roaming\768341fd0517c91baaff3cff92a4637c
2018-01-10 10:31 - 2017-09-07 07:44 - 000000000 ____D C:\Users\Laurine\AppData\Roaming\bodor
cmd: ipconfig /flushdns
end::