start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-21-1086876511-3136088703-2866204027-1001\...\Run: [cacaoweb] => C:\Users\jacqueline\AppData\Roaming\cacaoweb\cacaoweb.exe
Lsa: [Notification Packages] scecli C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter "C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter"
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO-x32: Pas de nom -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> Pas de fichier
FF Extension: (Avast SafePrice | Comparaison, offres, coupons) - C:\Users\jacqueline\AppData\Roaming\Mozilla\Firefox\Profiles\y84ptd1p.default\Extensions\sp@avast.com.xpi
FF Extension: (Avast Online Security) - C:\Users\jacqueline\AppData\Roaming\Mozilla\Firefox\Profiles\y84ptd1p.default\Extensions\wrc@avast.com.xpi
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
2019-04-05 17:04 - 2019-04-05 17:04 - 000000000 ____D C:\Users\jacqueline\AppData\Roaming\cacaoweb
2019-02-03 14:02 - 2019-02-03 14:02 - 009860808 _____ C:\Users\jacqueline\Downloads\bitdefender_tsecurity.exe
2019-02-03 14:02 - 2019-02-03 14:02 - 000451072 _____ C:\Users\jacqueline\Downloads\cacaoweb_fr_404668.exe
2019-02-03 13:58 - 2019-02-03 13:59 - 000567192 _____ C:\Users\jacqueline\Downloads\cacaoweb (29).exe
2019-01-31 19:30 - 2019-01-31 19:31 - 000567192 _____ C:\Users\jacqueline\Downloads\cacaoweb (28).exe
2019-01-20 19:03 - 2019-01-20 19:04 - 000567192 _____ C:\Users\jacqueline\Downloads\cacaoweb (27).exe
2019-04-05 17:29 - 2018-10-29 16:46 - 000000000 ____D C:\Program Files\McAfee
2019-04-05 17:29 - 2017-05-09 08:31 - 000000000 ____D C:\Program Files (x86)\McAfee
2019-04-05 17:29 - 2017-05-09 08:19 - 000000000 ____D C:\ProgramData\McAfee
2019-04-05 17:28 - 2017-11-03 17:46 - 000000000 ____D C:\ProgramData\AVAST Software
2019-04-05 17:28 - 2013-10-03 11:46 - 000000000 ____D C:\ProgramData\Avira
2019-04-05 17:28 - 2013-10-03 11:46 - 000000000 ____D C:\Program Files (x86)\Avira
2019-04-05 16:43 - 2013-10-03 11:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2019-04-05 16:42 - 2013-10-03 11:52 - 000000000 ____D C:\Users\jacqueline\AppData\Roaming\Avira
2019-04-05 16:33 - 2018-06-27 10:05 - 000000000 ____D C:\Users\jacqueline\AppData\Local\AVAST Software
2019-04-05 15:10 - 2018-05-28 20:56 - 000000000 ____D C:\WINDOWS\System32\Tasks\Avast Software
2019-04-03 15:38 - 2018-05-28 19:54 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2018-07-12 17:42 - 2018-07-12 17:42 - 000000000 _____ () C:\Users\jacqueline\AppData\Local\{0DBDD344-D83F-4FB1-BC75-F3D36A9157CD}
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
Task: {06021210-5E6A-4172-883C-91C175146186} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Pas de fichier
Task: {145BA793-5A3E-4BA1-B2B1-53E76A58206C} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe
Task: {4A14E7B3-0D7F-4607-8E7E-CA713639B5EE} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Pas de fichier
Task: {4B3BD78B-BEF7-4D41-9F87-45674F330FDE} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Pas de fichier
Task: {5366A99E-1695-485A-8BA1-25AA574D3B35} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Pas de fichier
Task: {5F0912D0-09E8-455F-AB0A-366357B2145D} - System32\Tasks\Avast TUNEUP Update => C:\Program Files (x86)\AVAST Software\Avast Cleanup\TUNEUpdate.exe
Task: {8D8FA4A6-FF0E-48B0-8536-189C26472D97} - \Microsoft\Windows\Flighting\FeatureConfig\ReconcileFeatures -> Pas de fichier
Task: {92120801-DE57-4C5A-954C-D15EB5A0E082} - System32\Tasks\{6B4E81DF-91C4-4263-B816-2C6E3C6D4499} => C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files (x86)\Maxis\The Sims Creator\TheSimsCreator.exe
Task: {96CCF61C-5B8A-400C-91EE-0C34E737AEC6} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Pas de fichier
Task: {982A5503-159E-4932-B05A-4593A6CA9D6B} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Pas de fichier
Task: {C3505610-42F4-4468-BC5D-CEC7EF05FFBF} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Pas de fichier
Task: {E864E62C-53AD-469E-97D1-121DBC8D3CCA} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Pas de fichier
Task: {EA234859-05C0-4B23-9F15-6624291282A3} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Pas de fichier
Task: {F0886697-FA2D-44CF-AE34-C62FCAEC3B02} - \WPD\SqmUpload_S-1-5-21-1086876511-3136088703-2866204027-1001 -> Pas de fichier
Task: {F1C612F0-251C-4775-AEF9-087031E22C83} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Pas de fichier
Task: {F90635BC-C146-4B16-86E3-BB2DD412C3B1} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Pas de fichier
Task: {F9DC3AB1-9ED6-445F-8E4B-AF8E8D3A770F} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Pas de fichier
Task: {FA67185C-0CFC-4511-A006-6ACEF93DD0F5} - System32\Tasks\{1B0C87E2-DDAC-4421-9564-0A0B70A122F0} => C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files (x86)\Maxis\Les Sims\Sims.exe"
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (Pas de fichier)
EmptyTemp:
cmd: ipconfig /flushdns
end::