start::
CreateRestorePoint:
CloseProcesses:
Hosts:
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier
Task: {BB56B492-FB30-4222-835F-1F50542D8C5E} - \AvastUpdateTaskMachineCore -> Pas de fichier <==== ATTENTION
Task: {E00F77DF-8664-4A6E-A868-4CA5914E310D} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {E54E0A0C-5724-4497-A9B3-821655AB8A29} - \AvastUpdateTaskMachineUA -> Pas de fichier <==== ATTENTION
C:\Program Files\Common Files\AV
2018-08-12 17:01 - 2018-08-12 19:44 - 000563832 _____ () C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\{4ABFF2BE-7F72-4EC7-B73F-2EA7F1CF81D4}\MpSigStub.exe
Task: {A9611FF9-3597-45B3-BEFD-C55AE5B9E8A8} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\avast software\overseer\overseer.exe [2018-06-14] (AVAST Software)
C:\Program Files (x86)\AVAST Software\
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-07-16] (AVAST Software)
S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-07-16] (AVAST Software)
2018-07-16 10:58 - 2018-07-28 19:16 - 000002503 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk
2018-07-16 10:58 - 2018-07-28 19:16 - 000002468 _____ C:\Users\Public\Desktop\Avast Secure Browser.lnk
2018-07-16 10:56 - 2018-07-16 20:44 - 000000000 ____D C:\Users\Adéla\AppData\Local\AVAST Software
2018-07-16 10:56 - 2018-07-16 10:56 - 000000000 ____D C:\Program Files (x86)\AVAST Software
2018-08-12 19:15 - 2018-01-04 13:24 - 000000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software
RemoveProxy:
EmptyTemp:
cmd: ipconfig /flushdns
end::