start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe
Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - Pas de fichier
FF HKU\S-1-5-21-3198191166-2790113553-3553265212-1001\...\Firefox\Extensions: [acewebextension_unlisted@acestream.org] - C:\Users\max\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi
CHR Extension: (Hola Free VPN Proxy Unblocker) - C:\Users\max\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio
R1 tmlwf; C:\Windows\System32\DRIVERS\tmlwf.sys [196688 2010-11-08] (Trend Micro, Inc. -> Trend Micro Inc.)
R1 tmtdi; C:\Windows\System32\DRIVERS\tmtdi.sys [108624 2010-11-09] (Trend Micro, Inc. -> Trend Micro Inc.)
R2 tmwfp; C:\Windows\System32\DRIVERS\tmwfp.sys [338000 2010-11-08] (Trend Micro, Inc. -> Trend Micro Inc.)
2019-05-11 16:09 - 2019-05-12 19:16 - 000000000 ____D C:\Windows\System32\Tasks\Avast Software
2019-05-11 16:09 - 2019-05-11 16:09 - 000000077 _____ C:\Windows\system32\Drivers\aswSP.sys.sum
2019-05-11 16:08 - 2019-05-11 16:08 - 000000000 ____D C:\Program Files\Common Files\AVAST Software
2019-05-11 16:06 - 2019-05-11 16:39 - 000000000 ____D C:\ProgramData\AVAST Software
2019-05-06 22:56 - 2019-05-06 22:56 - 000000000 ____D C:\Users\max\AppData\LocalLow\uTorrent
2019-04-27 11:07 - 2019-04-27 11:07 - 000000000 ____D C:\Users\max\AppData\Local\{92D2573F-0BF7-4B5A-9526-55FA50705DF5}
2019-04-26 15:24 - 2019-04-26 15:24 - 000000000 ____D C:\Users\max\AppData\Local\{280C4392-75F0-4A00-9137-D9B713C111A6}
2019-05-12 20:38 - 2013-03-21 09:09 - 000000000 ____D C:\Users\max\AppData\Roaming\Avira
2019-05-12 20:38 - 2013-03-21 09:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2019-05-12 20:38 - 2013-03-21 09:03 - 000000000 ____D C:\ProgramData\Avira
2019-05-12 18:54 - 2014-11-19 14:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2019-05-12 18:54 - 2011-11-16 18:26 - 000000000 ____D C:\Program Files (x86)\Java
2019-05-11 16:14 - 2015-02-02 20:06 - 000000000 ____D C:\Users\max\AppData\Roaming\uTorrent
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`27hfm [0]
MSCONFIG\startupfolder: C:^Users^max^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupreg: OE => "c:\Program Files (x86)\Trend Micro\Client Server Security Agent\TMAS_OE\TMAS_OEMon.exe"
MSCONFIG\startupreg: OfficeScanNT Monitor => "c:\Program Files (x86)\Trend Micro\Client Server Security Agent\pccntmon.exe" -HideWindow
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
FirewallRules: [{5AAF677B-CD0C-4276-A926-8252E10B23AE}] => (Allow) C:\Users\max\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{3EEFE910-BDE4-4D55-9E77-85D1E9EC0F51}] => (Allow) C:\Users\max\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{16A99D80-E12E-4EEC-8490-FDAA5E757737}C:\users\max\appdata\roaming\utorrent\updates\3.5.5_44954.exe] => (Block) C:\users\max\appdata\roaming\utorrent\updates\3.5.5_44954.exe
FirewallRules: [UDP Query User{5090181C-454A-424A-98C8-4D407653724F}C:\users\max\appdata\roaming\utorrent\updates\3.5.5_44954.exe] => (Block) C:\users\max\appdata\roaming\utorrent\updates\3.5.5_44954.exe
FirewallRules: [TCP Query User{5291347F-513A-4DE5-82D7-1D03E5AB79AE}C:\users\max\appdata\roaming\utorrent\updates\3.5.5_45146.exe] => (Allow) C:\users\max\appdata\roaming\utorrent\updates\3.5.5_45146.exe
FirewallRules: [UDP Query User{5FC9C23C-D3F2-477A-9414-F6C444AE8ED2}C:\users\max\appdata\roaming\utorrent\updates\3.5.5_45146.exe] => (Allow) C:\users\max\appdata\roaming\utorrent\updates\3.5.5_45146.exe
FirewallRules: [TCP Query User{6FFA66FC-9986-44F0-91D6-0850157E1833}C:\users\max\appdata\roaming\utorrent\updates\3.5.5_45225.exe] => (Allow) C:\users\max\appdata\roaming\utorrent\updates\3.5.5_45225.exe
FirewallRules: [UDP Query User{1CF7F7A0-E186-4A97-98D1-D32623041ABF}C:\users\max\appdata\roaming\utorrent\updates\3.5.5_45225.exe] => (Allow) C:\users\max\appdata\roaming\utorrent\updates\3.5.5_45225.exe
EmptyTemp:
cmd: ipconfig /flushdns
end::