start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
EmptyTemp:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-527342032-1351197127-1598037576-1000\...\Run: [AdobeBridge] => [X]
SearchScopes: HKU\S-1-5-21-527342032-1351197127-1598037576-1000 -> {1C7D14B6-6FC0-4454-BF7C-3E0FBDF18243} URL = hxxp://www.google.com/cse?cx=partner-pub-3794288947762788%3A7941509802&ie=
SearchScopes: HKU\S-1-5-21-527342032-1351197127-1598037576-1000 -> {F27A3FB8-5BF2-4dd1-AD3A-6408FA3CA576} URL = hxxp://fr.search.yahoo.com/search?p=
R2 ADVANCEDSYSTEMCARESERVICE12; C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe
S3 AscFileControl; C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win7_amd64\AscFileControl.sys [22440 2018-09-20] (IObit)
R3 AscFileFilter; C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win7_amd64\AscFileFilter.sys [25512 2018-09-20] (IObit)
R3 AscRegistryFilter; C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win7_amd64\AscRegistryFilter.sys [25000 2018-07-04] (IObit)
R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [201408 2018-10-27] (AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdrivera.sys [230512 2018-10-27] (AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidsha.sys [201928 2018-10-27] (AVAST Software)
R0 aswblog; C:\Windows\System32\drivers\aswbloga.sys [346760 2018-10-27] (AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbuniva.sys [59664 2018-10-27] (AVAST Software)
R1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [185240 2018-10-27] (AVAST Software)
S3 aswHwid; C:\Windows\System32\drivers\aswHwid.sys [47064 2018-10-27] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [88112 2018-10-27] (AVAST Software)
R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [208640 2018-10-27] (AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [381144 2018-10-27] (AVAST Software)
R3 IOBIT_MONITOR_SERVER; C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\Monitor_win7_x64.sys
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [30744 2017-03-09] (IObit)
S3 IUProcessFilter; \??\C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win7_amd64\IUProcessFilter.sys [X]
S3 IURegistryFilter; \??\C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win7_amd64\IURegistryFilter.sys [X]
2018-11-26 03:21 - 2018-11-29 06:58 - 000002276 _____ C:\Users\Public\Desktop\Advanced SystemCare 12.lnk
2018-11-25 07:29 - 2018-11-25 07:34 - 000000000 ____D C:\ProgramData\F-Secure
2018-11-25 07:29 - 2018-11-25 07:29 - 009605768 _____ (F-Secure Corporation) C:\Users\Alain\Downloads\F-SecureOnlineScanner.exe
2018-11-25 07:29 - 2018-11-25 07:29 - 000000000 ____D C:\Users\Alain\AppData\Local\F-Secure
2018-11-23 17:32 - 2018-11-23 17:33 - 019229160 _____ (Microsoft Corporation) C:\Users\Alain\Documents\MediaCreationTool1809.exe
2018-11-23 17:31 - 2018-11-23 17:31 - 019119064 _____ (Microsoft Corporation) C:\Users\Alain\Documents\MediaCreationTool1803.exe
2018-11-23 15:48 - 2018-11-23 15:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare
2018-11-20 06:51 - 2018-11-20 06:51 - 073072640 _____ C:\Windows\system32\config\SOFTWARE.iobit
2018-11-20 06:51 - 2018-11-20 06:51 - 000249856 _____ C:\Windows\system32\config\DEFAULT.iobit
2018-11-20 06:51 - 2018-11-20 06:51 - 000028672 _____ C:\Windows\system32\config\SAM.iobit
2018-11-20 06:51 - 2018-11-20 06:51 - 000024576 _____ C:\Windows\system32\config\SECURITY.iobit
2018-11-17 10:12 - 2018-11-17 10:12 - 000214496 _____ C:\Users\Alain\AppData\Roaming\DMGR_1N1I1F1S1T1I0M1F1Q2Y1I1P1B0C1F1Q1P.txt
2018-11-17 10:12 - 2018-11-17 10:12 - 000029710 _____ C:\Users\Alain\AppData\Roaming\DMGR_0N1F1C1T1B1B1L1PtJ1V0C1F1H1B1R1F1C1P.txt
2018-11-17 10:12 - 2018-11-17 10:12 - 000026130 _____ C:\Users\Alain\AppData\Roaming\DMGR_0N1F1C1T1B1B1L1PtJ1V0O1E1P1C1T0B1C1F2W1B1P1C.txt
2018-11-09 07:53 - 2018-11-09 07:53 - 000000000 ____D C:\ProgramData\{F86B0233-9A85-4589-8AAF-524CC4F8211B}
2018-11-28 07:30 - 2018-10-27 08:15 - 000000000 ____D C:\ProgramData\IObit
2018-11-28 07:29 - 2018-10-27 08:15 - 000000000 ____D C:\Program Files (x86)\IObit
2018-11-28 07:26 - 2018-10-27 08:15 - 000000000 ____D C:\Users\Alain\AppData\Roaming\IObit
2018-11-09 07:56 - 2018-10-27 10:52 - 000000000 ____D C:\Windows\System32\Tasks\Avast Software
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ContextMenuHandlers1: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll
ContextMenuHandlers1-x32: [SmartDefragExtension] -> {189F1E63-33A7-404B-B2F6-8C76A452CC54} => C:\Windows\System32\IObitSmartDefragExtension.dll
ContextMenuHandlers2: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll
ContextMenuHandlers4: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll
ContextMenuHandlers6: [SmartDefragExtension] -> {189F1E63-33A7-404B-B2F6-8C76A452CC54} => C:\Windows\System32\IObitSmartDefragExtension.dll
Task: {16320482-DA09-48CC-BB65-747F69383423} - System32\Tasks\SmartDefrag_Update => C:\Program Files (x86)\IObit\Smart Defrag\AutoUpdate.exe
Task: {440846E6-7DF9-47ED-86CA-90CF1B9FDB1F} - System32\Tasks\ASC12_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe
Task: {8E007F0F-CF12-4288-9349-D05E6947D502} - System32\Tasks\ASC12_SkipUac_Alain => C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe
Task: {8E7DF12A-0F58-42E9-88C2-23D35C6DC6AF} - System32\Tasks\SmartDefrag_AutoAnalyze => C:\Program Files (x86)\IObit\Smart Defrag\AutoDefrag.exe
Task: {D587C1EE-D636-49B3-827F-71FC7FCCFB88} - System32\Tasks\SmartDefrag_Startup => C:\Program Files (x86)\IObit\Smart Defrag\SmartDefrag.exe
MSCONFIG\startupreg: Advanced SystemCare 12 => "C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe" /Auto
cmd: ipconfig /flushdns
end::