start::
closeprocesses:
createrestorepoint:
HKU\S-1-5-21-3733629770-3087524424-2575938786-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://fr.yahoo.com/?fr=yset_ie_syc_oracle&type=orcl_hpset
SearchScopes: HKU\S-1-5-21-3733629770-3087524424-2575938786-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3733629770-3087524424-2575938786-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3733629770-3087524424-2575938786-1001 -> {1576607F-C2BF-49BB-BD80-A1AB056E4D66} URL = hxxps://fr.search.yahoo.com/search?p={searchTerms}&intl=fr&fr=yset_ie_syc_oracle&type=orcl_default&partnerexternal-oracle=external-oracle
FF HomepageOverride: Mozilla\Firefox\Profiles\magn9xld.default -> Disabled: _g3Members_@free.easyphotoedit.com
FF NewTabOverride: Mozilla\Firefox\Profiles\magn9xld.default -> Disabled: _g3Members_@free.easyphotoedit.com
FF Extension: (EasyPhotoEdit) - C:\Users\PC-GAETAN\AppData\Roaming\Mozilla\Firefox\Profiles\magn9xld.default\Extensions\_g3Members_@free.easyphotoedit.com.xpi [2018-05-31] [UpdateUrl:hxxps:\/\/updates.tb.ask.com\/updateXpi.json?id=227257322&version=8.815.12.50940&track=TTAB02&trackRevision=1&fromId=_g3Members_%40free.easyphotoedit.com&isBridgeExtension=false]
FF Plugin: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-09-07] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-09-07] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\dtplugin\npDeployJava1.dll [2017-08-01] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\plugin2\npjp2.dll [2017-08-01] (Oracle America, Inc. -> Oracle Corporation)
CHR HKLM-x32\...\Chrome\Extension: [gannpgaobkkhmpomoijebaigcapoeebl] - hxxps://clients2.google.com/service/update2/crx
2017-09-27 17:04 - 2017-09-27 17:11 - 000000000 _____ () C:\Users\PC-GAETAN\AppData\Local\{35E6DC88-7C06-4C3F-BF27-6EBCACA6EF9D}
2018-03-08 23:13 - 2018-03-08 23:13 - 000000000 _____ () C:\Users\PC-GAETAN\AppData\Local\{3B8A0445-1E6E-44D1-AF69-09DC1C376109}
2016-12-09 17:39 - 2016-12-09 17:40 - 000000000 _____ () C:\Users\PC-GAETAN\AppData\Local\{4F540535-4D13-4F39-B219-E8502BD0DA4F}
2018-03-08 23:16 - 2018-03-08 23:16 - 000000000 _____ () C:\Users\PC-GAETAN\AppData\Local\{7352CB0E-5607-4402-A53E-09AB70121DA9}
2017-09-26 16:08 - 2017-09-26 16:09 - 000000000 _____ () C:\Users\PC-GAETAN\AppData\Local\{BE4E7E4D-2C85-4EE0-A861-2694C735D0B9}
cmd: netsh advfirewall reset
cmd: sfc /scannow
emptytemp:
end::