start::
CreateRestorePoint:
CloseProcesses:
Hosts:
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichie
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier 
FirewallRules: [{98AD532A-A518-4D5A-AB9E-BC08F8FD51DF}] => (Allow) C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe Pas de fichier
FirewallRules: [{2C5B41E0-2358-4470-870B-62D54E71119F}] => (Allow) C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe Pas de fichier 
C:\Program Files\Common Files\mcafee
FirewallRules: [{967E2A47-828B-42F1-9994-E30081710B32}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe Pas de fichier
FirewallRules: [{57C0F666-E390-4EA9-A1C4-F5B25AC7673B}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe Pas de fichier 
HKLM-x32\...\Run: [mcui_exe] => "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
HKU\S-1-5-21-10627762-2585427316-3094184233-1001\...\Run: [Chromium] => c:\users\hetman\appdata\local\chromium\application\chrome.exe [4195328 2017-10-07] (The Chromium Authors) [Fichier non signé] 
c:\users\hetman\appdata\local\chromium
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION 
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => non trouvé(e)
FF Plugin: @mcafee.com/MSC,version=10 -> C:\Program Files\mcafee\msc\npMcSnFFPl64.dll [Pas de fichier] 
2019-10-20 18:16 - 2019-10-20 18:16 - 000000952 ___SH C:\WINDOWS\SysWOW64\KGyGaAvL.sys 
2019-10-18 09:37 - 2019-10-18 09:51 - 000000000 ____D C:\Users\Hetman\AppData\Local\chromium
2019-10-18 09:36 - 2019-10-18 12:36 - 000000000 ____D C:\ProgramData\AVAST Software
2019-10-18 09:35 - 2019-10-25 11:53 - 000000000 ____D C:\ProgramData\Segurazo
2019-10-18 09:35 - 2019-10-25 11:53 - 000000000 ____D C:\Program Files (x86)\Segurazo
2019-10-18 09:35 - 2019-10-18 09:53 - 000000000 ____D C:\Program Files (x86)\Chromium
2019-10-18 09:35 - 2019-10-18 09:35 - 000000000 ____D C:\ProgramData\{7863445F-504B-3C27-0813-140FE0FBCCD7}
2019-10-18 09:34 - 2019-10-18 09:39 - 000000000 ____D C:\ProgramData\xjdzd 
2019-10-18 09:45 - 2019-10-18 09:45 - 000000000 ____D C:\ProgramData\UniqueId 
2019-10-18 01:58 - 2019-10-18 01:58 - 000000144 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 
2019-10-17 23:18 - 2019-10-23 16:38 - 000000451 _____ C:\WINDOWS\system32\{F33C3B9B-72AF-418A-B3FD-560646F7CDA2}.bat 
2019-10-17 22:29 - 2019-10-17 22:29 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin
2019-10-17 22:29 - 2019-10-17 22:29 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2019-10-17 22:29 - 2019-10-17 22:29 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2019-10-17 22:29 - 2019-10-17 22:29 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2019-10-17 22:29 - 2019-10-17 22:29 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2019-10-17 22:29 - 2019-10-17 22:29 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2019-10-17 22:29 - 2019-10-17 22:29 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2019-10-17 22:29 - 2019-10-17 22:29 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2019-10-17 22:29 - 2019-10-17 22:29 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin
2019-10-17 22:29 - 2019-10-17 22:29 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin
2019-10-17 22:29 - 2019-10-17 22:29 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin
2019-10-17 22:29 - 2019-10-17 22:29 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin 
2019-10-17 22:43 - 2012-11-27 06:11 - 000000000 ____D C:\ProgramData\McAfee 
EmptyTemp:
cmd: ipconfig /flushdns
end::