start::
CreateRestorePoint:
CloseProcesses:
RemoveProxy:
HKLM\...\Run: [Avira SystrayStartTrigger] => C:\Program Files\Avira\Launcher\Avira.SystrayStartTrigger.exe
HKU\S-1-5-21-3290363562-2599634470-2307636891-1001\...\Run: [Speech Recognition] => C:\Windows\Speech\Common\sapisvr.exe
HKLM\Software\Microsoft\Active Setup\Installed Components: [{2D00AE86-E9F9-43A0-82A4-79EBA59183E2}] -> "C:\Program Files\Avira\Scout\Application\58.0.3029.2702\Installer\chrmstp.exe"
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FF ProfilePath: C:\Users\DELL\AppData\Roaming\Mozilla\Sunbird\Profiles\mbzsyjxy.default [2012-12-26]
FF Extension: (Avira Password Manager) - C:\Users\DELL\AppData\Roaming\Mozilla\Firefox\Profiles\9l3hq0pt.default\Extensions\passwordmanager@avira.com.xpi
FF Plugin HKU\S-1-5-21-3290363562-2599634470-2307636891-1001: @tools.google.com/Google Update;version=3 -> C:\Users\DELL\AppData\Local\Google\Update\1.3.33.23\npGoogleUpdate3.dll [Pas de fichier]
FF Plugin HKU\S-1-5-21-3290363562-2599634470-2307636891-1001: @tools.google.com/Google Update;version=9 -> C:\Users\DELL\AppData\Local\Google\Update\1.3.33.23\npGoogleUpdate3.dll [Pas de fichier]
CHR DefaultSearchURL: Default -> hxxps://search.avira.com/#web/result?source=omnibar&q={searchTerms}
CHR DefaultSearchKeyword: Default -> Avira
CHR DefaultSuggestURL: Default -> hxxps://search.avira.com/suggestions?q={searchTerms}&li=ff&hl=en
CHR Extension: (Avira Password Manager) - C:\Users\DELL\AppData\Local\Google\Chrome\User Data\Default\Extensions\caljgklbbfbcjjanaijlacgncafpegll
CHR HKLM\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [ipmkfpcnmccejididiaagpgchgjfajgp] - hxxps://clients2.google.com/service/update2/crx
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys
2019-01-27 00:02 - 2019-01-27 00:03 - 003181960 _____ (Avira Operations GmbH & Co. KG) C:\Users\DELL\Downloads\avira_registry_cleaner_en(1).exe
2019-01-27 00:02 - 2019-01-27 00:02 - 003181960 _____ (Avira Operations GmbH & Co. KG) C:\Users\DELL\Downloads\avira_registry_cleaner_en.exe
2019-01-07 11:19 - 2019-01-07 11:19 - 003300224 _____ C:\Users\DELL\ZHPCleaner.exe
2019-01-07 11:19 - 2019-01-07 11:19 - 000000000 ____D C:\Users\DELL\AppData\Local\ZHP
2019-01-06 00:02 - 2019-01-06 00:19 - 000000000 ____D C:\Windows\erdnt
2018-12-31 02:33 - 2018-12-31 02:38 - 005822840 _____ (Avira Operations GmbH & Co. KG) C:\Users\DELL\Downloads\avira_fr_asu80_3217668128_01cihr0iylwyb24n4mem_wd.exe
2018-12-31 02:32 - 2018-12-31 02:34 - 005822840 _____ (Avira Operations GmbH & Co. KG) C:\Users\DELL\Downloads\avira_fr_avpn0_3217668128_bihqajrv0tc5ysxj5xkk_wd.exe
2018-12-31 01:58 - 2018-12-31 02:02 - 005822840 _____ (Avira Operations GmbH & Co. KG) C:\Users\DELL\Downloads\avira_en_fass0_5c296920a3ecb__ws.exe
2019-01-26 23:47 - 2015-03-16 22:09 - 000000000 ____D C:\Program Files\Avira
2019-01-26 23:37 - 2015-03-16 22:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2019-01-26 23:37 - 2015-03-16 22:09 - 000000000 ____D C:\ProgramData\Avira
2019-01-26 23:30 - 2017-03-23 14:07 - 000000000 ____D C:\Users\DELL\AppData\Local\Avira
2019-01-10 14:09 - 2017-03-23 13:34 - 000000000 ____D C:\Users\DELL\AppData\Roaming\ZHP
2019-01-07 11:19 - 2019-01-07 11:19 - 003300224 _____ () C:\Users\DELL\ZHPCleaner.exe
ContextMenuHandlers1: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => -> Pas de fichier
ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => -> Pas de fichier
Task: {0B60FEC5-5FE2-423E-A04C-A447C8E03514} - System32\Tasks\{E349F8B1-3AD2-4412-81EC-054DB4E17400} => C:\Windows\system32\pcalua.exe -a "C:\Program Files\Avira\AntiVir Desktop\setup.exe" -c /REMOVE
EmptyTemp:
end::