start::
CreateRestorePoint:
CloseProcesses:
HKLM\...\Run: [AvastUI.exe] => "C:\Program Files\AVAST Software\Avast\AvLaunch.exe" /gui
HKLM-x32\...\Run: [avast] => C:\Program Files\AVAST Software\Avast\avastUI.exe [4297136 2012-10-30] (AVAST Software)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
BHO: avast! WebRep -> {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-10-30] (AVAST Software)
BHO-x32: avast! WebRep -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-10-30] (AVAST Software)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2012-10-30] (AVAST Software)
Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2012-10-30] (AVAST Software)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (avast! WebRep) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2017-11-09] [Legacy] [non sign&#258;©]
CHR Extension: (avast! WebRep) - C:\Users\josee parent\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda [2017-11-15]
CHR HKLM-x32\...\Chrome\Extension: [icmlaeflemplmjndnaapfdbbnpncnbda] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2017-11-09]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [44808 2012-10-30] (AVAST Software)
S3 aswbIDSAgent; "C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe" [X]
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [25232 2012-10-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [71600 2012-10-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [54072 2012-10-15] (AVAST Software)
S1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [984144 2012-10-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [370288 2012-10-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [59728 2012-10-30] (AVAST Software)
R0 Lbd; C:\Windows\System32\DRIVERS\Lbd.sys [69152 2010-11-22] (Lavasoft AB)
S1 aswArPot; system32\drivers\aswArPot.sys [X]
S1 aswbidsdriver; system32\drivers\aswbidsdrivera.sys [X]
S0 aswbidsh; system32\drivers\aswbidsha.sys [X]
S0 aswblog; system32\drivers\aswbloga.sys [X]
S0 aswbuniv; system32\drivers\aswbuniva.sys [X]
S3 aswHwid; system32\drivers\aswHwid.sys [X]
S0 aswRvrt; system32\drivers\aswRvrt.sys [X]
S2 aswStm; system32\drivers\aswStm.sys [X]
S0 aswVmm; system32\drivers\aswVmm.sys [X]
S3 dbx; system32\DRIVERS\dbx.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S3 hwusbfake; system32\DRIVERS\ewusbfake.sys [X]
S3 Lavasoft Kernexplorer; \??\C:\Program Files (x86)\Lavasoft\Ad-Aware\KernExplorer64.sys [X]
2018-12-16 09:01 - 2018-12-18 22:18 - 000000410 _____ C:\Windows\Tasks\Ad-Aware Update (Weekly).job
2018-12-16 08:53 - 2018-12-16 08:53 - 000003618 _____ C:\Windows\System32\Tasks\Ad-Aware Update (Weekly)
2018-12-15 22:37 - 2018-12-15 22:37 - 010105016 _____ (AVAST Software) C:\Users\josee parent\Downloads\avastclear(1).exe
2018-12-15 22:20 - 2018-12-15 22:20 - 000178320 _____ (AVAST Software) C:\Users\josee parent\Downloads\avast_free_antivirus_setup_online (1).exe
2018-12-11 15:23 - 2018-12-11 15:23 - 000178320 _____ (AVAST Software) C:\Users\josee parent\Downloads\avast_free_antivirus_setup_online(4).exe
2019-01-07 13:57 - 2011-08-02 19:08 - 000000000 ____D C:\ProgramData\Spybot - Search & Destroy
2019-01-07 13:57 - 2011-08-02 19:08 - 000000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy
2018-12-21 08:50 - 2017-11-09 17:17 - 000004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2012-10-30] (AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2012-10-30] (AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2012-10-30] (AVAST Software)
ContextMenuHandlers1: [LavasoftShellExt] -> {DCE027F7-16A4-4BEE-9BE7-74F80EE3738F} => C:\Program Files (x86)\Lavasoft\Ad-Aware\ShellExt_64.dll -> Pas de fichier
ContextMenuHandlers2: [LavasoftShellExt] -> {DCE027F7-16A4-4BEE-9BE7-74F80EE3738F} => C:\Program Files (x86)\Lavasoft\Ad-Aware\ShellExt_64.dll -> Pas de fichier
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2012-10-30] (AVAST Software)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2012-10-30] (AVAST Software)
ContextMenuHandlers6: [LavasoftShellExt] -> {DCE027F7-16A4-4BEE-9BE7-74F80EE3738F} => C:\Program Files (x86)\Lavasoft\Ad-Aware\ShellExt_64.dll -> Pas de fichier
Task: {5D403C9C-79EF-460D-98BB-3C06814AF4F7} - \Desk 365 RunAsStdUser -> Pas de fichier <==== ATTENTION
Task: {91C7673F-CA0D-4468-ABD6-7ED02B651586} - \Dealply -> Pas de fichier <==== ATTENTION
Task: {BDBC9155-AFF9-4F85-87E7-2860E50161CD} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2012-10-30] (AVAST Software)
Task: {E098E7D9-5F2F-463D-9E95-601144F4C56F} - System32\Tasks\Ad-Aware Update (Weekly) => C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe
Task: {E94EC42D-010B-4B15-9728-18F7AEA7A175} - \Omiga Plus RunAsStdUser -> Pas de fichier <==== ATTENTION
Task: C:\Windows\Tasks\Ad-Aware Update (Weekly).job => C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe
2017-11-09 17:17 - 2012-10-31 08:35 - 001825280 _____ () C:\Program Files\AVAST Software\Avast\defs\12103100\algo.dll
MSCONFIG\startupreg: Ad-Aware Browsing Protection => "C:\ProgramData\Ad-Aware Browsing Protection\adawarebp.exe"
MSCONFIG\startupreg: SpybotSD TeaTimer => C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
Hosts:
EmptyTemp:
end::