start::
CreateRestorePoint:
CloseProcesses:
Hosts:
Task: {78556082-30F8-42BB-B806-434FA06B2AF5} - System32\Tasks\Mise à jour de PC Health Advisor => C:\Program Files (x86)\ParetoLogic\PCHA\PCHA.exe <==== ATTENTION
C:\Program Files (x86)\ParetoLogic
C:\Program Files (x86)\Lavasoft\
IE trusted site: HKU\S-1-5-21-892116369-2555339229-690663892-1002\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-892116369-2555339229-690663892-1002\...\objectware.fr -> hxxp://appliweb.objectware.fr
IE trusted site: HKU\S-1-5-21-892116369-2555339229-690663892-1002\...\webcompanion.com -> hxxp://webcompanion.com
IE trusted site: HKU\S-1-5-21-892116369-2555339229-690663892-1008\...\objectware.fr -> hxxp://appliweb.objectware.fr
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [emhginjpijfggbofeediiojmdlmlkoik] - C:\Program Files\AVAST Software\Avast\pam\Chrome\pam.crx <non trouvé(e)>
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <non trouvé(e)>
2018-06-10 18:14 - 2018-06-10 18:14 - 001884616 _____ (Oracle Corporation) C:\Users\Christian\AppData\Local\Temp\jre-8u171-windows-au.exe
2018-06-20 19:55 - 2018-06-23 16:33 - 000958776 _____ (adaware) C:\Users\Christian\AppData\Local\Temp\WCU009.exe
RemoveProxy:
EmptyTemp:
cmd: ipconfig /flushdns
end::