start::
CreateRestorePoint:
CloseProcesses:
RemoveProxy:
Task: {00755338-D88D-4BD8-9C00-AB6E0B7B8AE6} - System32\Tasks\SafeZone scheduled Autoupdate 1486806724 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe
Task: {1D3B6CC5-159B-4D5B-BA23-9C10DBD4DDF1} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Pas de fichier
Task: {1E417261-1366-4C3B-9306-BE1C24EBE0A8} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Pas de fichier
Task: {334796DA-CB44-4FE8-A6EF-543F0AD2C944} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Pas de fichier
Task: {597AFD0C-BCAA-44B0-A26F-77A6AE733F28} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Pas de fichier
Task: {A24BEB14-880B-4470-AC62-E391DE680638} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Pas de fichier
Task: {A966F864-8E88-445D-AE0C-89BFB79060CC} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Pas de fichier
Task: {C53A61CF-256D-488D-84E8-4102D13B0791} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Pas de fichier
Task: {DEFB9BED-CDE5-4B9C-9A54-AB0D6B9D39E8} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Pas de fichier
Task: {FC7A6A94-589E-4687-B739-341D1F1059F9} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Pas de fichier
SearchScopes: HKU\S-1-5-21-930400344-1600436398-98965620-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-930400344-1600436398-98965620-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FF Extension: (Touch VPN) - C:\Users\malen_000\AppData\Roaming\Mozilla\Firefox\Profiles\lj7xkmdd.default-1487177101161-1556960625243\Extensions\touch-vpn@anchorfree.com.xpi
FF Extension: (Urlbar Top Sites Experiment) - C:\Users\malen_000\AppData\Roaming\Mozilla\Firefox\Profiles\lj7xkmdd.default-1487177101161-1556960625243\Extensions\urlbar-top-sites-experiment@shield.mozilla.org.xpi
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [2018-11-01]
2017-10-24 23:53 - 2017-10-24 23:56 - 000004096 ____H () C:\Users\malen_000\AppData\Local\keyfile3.drm
2018-09-30 11:35 - 2018-09-30 11:35 - 000000000 _____ () C:\Users\malen_000\AppData\Local\oobelibMkey.log
2018-10-02 22:30 - 2018-10-23 21:28 - 000007406 _____ () C:\Users\malen_000\AppData\Local\SquareClock.Production_Home_ConforamaIcon.ico
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`27hfm
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRkrn => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WRSVC => ""="Service"
HKU\S-1-5-21-930400344-1600436398-98965620-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.reg\UserChoice => regfile
HKLM\...\StartupApproved\Run32: => "GwxControlPanelMonitor"
HKU\S-1-5-21-930400344-1600436398-98965620-1001\...\StartupApproved\Run: => "utweb"
EmptyTemp:
cmd: ipconfig /flushdns
cmd: sfc /scannow
end::