start::
CreateRestorePoint:
CloseProcesses:
Hosts:
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier
WMI:subscription\__FilterToConsumerBinding->CommandLineEventConsumer.Name=\"BVTConsumer\"",Filter="__EventFilter.Name=\"BVTFilter\"::
WMI:subscription\__EventFilter->BVTFilter::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99]
WMI:subscription\CommandLineEventConsumer->BVTConsumer::[CommandLineTemplate => cscript KernCap.vbs][WorkingDirectory => C:\\tools\\kernrate]
MSCONFIG\startupreg: Avira System Speedup User Starter => "C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe"
MSCONFIG\startupreg: Avira SystrayStartTrigger => "C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe"
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe Pas de fichier
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe Pas de fichier
C:\Program Files (x86)\Avira
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Tcpip\..\Interfaces\{A88B60AD-B47F-4767-BBC7-82BECB1B82E7}: [DhcpNameServer] 10.4.6.254
Tcpip\..\Interfaces\{B8706E5D-EC63-4D76-B9B2-2E8D4CBE15CF}: [DhcpNameServer] 10.1.6.1 10.0.2.6
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FF NewTabOverride: Mozilla\Firefox\Profiles\qbre6ipo.default-release -> Enabled: cliqz@cliqz.com
FF Extension: (Cliqz Tab) - C:\Users\Utilisateur\AppData\Roaming\Mozilla\Firefox\Profiles\qbre6ipo.default-release\Extensions\cliqz@cliqz.com.xpi [2019-10-18]
FF NewTabOverride: Mozilla\Firefox\Profiles\866jn0kz.default-1571472039679 -> Enabled: cliqz@cliqz.com
FF Extension: (Cliqz Tab) - C:\Users\Utilisateur\AppData\Roaming\Mozilla\Firefox\Profiles\866jn0kz.default-1571472039679\Extensions\cliqz@cliqz.com.xpi [2019-10-19]
CHR NewTab: Default -> "active": true,
"entry": "chrome-extension://eedlgdlajadkbbjoobobefphmfkcchfk/newtab.html"
CHR HKLM\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [ipmkfpcnmccejididiaagpgchgjfajgp] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [ipmkfpcnmccejididiaagpgchgjfajgp] - hxxps://clients2.google.com/service/update2/crx
CHR DefaultSearchURL: Default -> hxxps://www.ecosia.org/search?q={searchTerms}&addon=chrome&addonversion=2.0.3
CHR DefaultSearchKeyword: Default -> ecosia
CHR DefaultSuggestURL: Default -> hxxps://ac.ecosia.org/?q={searchTerms}&type=list&mkt=fr
R0 avdevprot; C:\Windows\System32\DRIVERS\avdevprot.sys [68152 2019-06-15] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R0 avusbflt; C:\Windows\System32\Drivers\avusbflt.sys [35376 2019-02-28] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
U3 aswbdisk; pas de ImagePath
2019-10-19 22:07 - 2019-10-19 22:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2019-10-19 21:29 - 2019-10-19 21:29 - 003181960 _____ (Avira Operations GmbH & Co. KG) C:\Users\Utilisateur\Desktop\avira_registry_cleaner_en.exe
2019-10-18 11:02 - 2019-10-19 21:22 - 000000000 ____D C:\ProgramData\AVAST Software
2019-10-19 22:06 - 2017-07-31 16:36 - 000000000 ____D C:\ProgramData\Avira
2019-10-19 22:06 - 2017-07-31 16:36 - 000000000 ____D C:\Program Files (x86)\Avira
2019-09-25 09:54 - 2017-07-31 16:41 - 000220128 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2019-09-25 09:54 - 2017-07-31 16:41 - 000175808 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
EmptyTemp:
cmd: ipconfig /flushdns
end::