start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => -> Pas de fichier
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => -> Pas de fichier
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => -> Pas de fichier
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => -> Pas de fichier
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => -> Pas de fichier
ContextMenuHandlers1: [SugarSync] -> {305BC11B-5175-492B-B569-866547FCDA40} => -> Pas de fichier
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> Pas de fichier
ContextMenuHandlers6: [SugarSync] -> {305BC11B-5175-492B-B569-866547FCDA40} => -> Pas de fichier
WMI:subscription\__FilterToConsumerBinding->CommandLineEventConsumer.Name=\"BVTConsumer\"",Filter="__EventFilter.Name=\"BVTFilter\"::
WMI:subscription\__EventFilter->BVTFilter::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99]
WMI:subscription\CommandLineEventConsumer->BVTConsumer::[CommandLineTemplate => cscript KernCap.vbs][WorkingDirectory => C:\\tools\\kernrate]
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {2B63D0E4-FFB8-4B65-BB86-840FC89A3C1C} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
Task: {D9949EAE-322C-4936-9B9C-C1096F40BE37} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\EXPLORER.EXE /NOUACCHECK
BHO-x32: Pas de nom -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> Pas de fichier
Toolbar: HKU\S-1-5-21-2759399383-3020363602-3771144239-1002 -> Pas de nom - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Pas de fichier
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Pas de fichier
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <non trouvé(e)>
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl]
2019-12-18 18:29 - 2019-12-18 18:29 - 000405344 _____ C:\ProgramData\cl.uninstall.1576690009.bdinstall.v2.bin
2019-12-18 18:29 - 2019-12-18 18:29 - 000066604 _____ C:\ProgramData\agent.uninstall.1576690158.bdinstall.v2.bin
2019-12-18 18:27 - 2019-12-18 18:27 - 000038229 _____ C:\ProgramData\dm.uninstall.1576690024.bdinstall.bin
2019-12-07 09:23 - 2019-12-07 09:23 - 000071179 _____ C:\ProgramData\dm.update.1575706910.bdinstall.bin
2019-12-18 18:22 - 2012-10-04 20:31 - 000000000 ____D C:\ProgramData\AVAST Software
2013-06-28 17:16 - 2018-11-08 19:03 - 000003584 _____ () C:\Users\Didile\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2017-06-21 10:31 - 2017-06-21 10:36 - 000000000 _____ () C:\Users\Didile\AppData\Local\{1D117F23-094E-4388-9C32-485BBBF54D41}
2019-02-10 10:35 - 2019-02-10 10:35 - 000000000 _____ () C:\Users\Didile\AppData\Local\{46769179-1715-4934-A382-F2807B3386B0}
EmptyTemp:
cmd: ipconfig /flushdns
end::