start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
BootExecute: autocheck autochk * sdnclean64.exe
GroupPolicy: Restriction ? <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {13958588-6706-4E74-9EDA-341E18066AE1} - System32\Tasks\Open URL by RoboForm => C:\WINDOWS\system32\rundll32.exe url.dll,FileProtocolHandler "hxxp://www.roboform.com/test-pass.html?aaa=KICMHMGMLLMMOLPMOLNLCNGMJLKLPMCNJMNLOMPMCNNLGMNLKMCNLMPMGMIMLLKLMMIMJLKLGMHMJNJICMIMCNGMCNOMFMGMCNOMOMCNOMHMMMJMNMFMJMCNNMCNGMNMPMPMCNNMJNPICMPMFMAJBJLILICJFMMMNMHMOMJNHICMAJBJLILICJJNBJCMHLKINJKJNILIJNKJCMJNNICMJNDJCMJJNI"
Task: {7587C01C-787C-496D-8FDD-D91AAF34053B} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [1873288 2019-09-19] (AVAST Software s.r.o. -> AVAST Software)
C:\Program Files\Common Files\AVAST Software
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [dbchoocfamphhbbimpbggjkaepfojpgb]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
CHR HKLM-x32\...\Chrome\Extension: [hdokiejnpimakedhajhdlcegeplioahd]
StartMenuInternet: Google Chrome Dev - C:\Program Files (x86)\Google\Chrome Dev\Application\chrome.exe
2019-12-30 11:17 - 2017-12-02 16:26 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2019-07-17 10:26 - 2019-07-17 10:26 - 000003584 _____ () C:\Users\hmedi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ShellIconOverlayIdentifiers: [0TheftProtectionDll] -> {3B5B973C-92A4-4855-9D3F-0F3D23332208} => -> Pas de fichier
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier
AlternateDataStreams: C:\ProgramData\TEMP:1AAB2E68 [127]
AlternateDataStreams: C:\ProgramData\TEMP:7FFED16F [135]
AlternateDataStreams: C:\ProgramData\TEMP:A1EDB939 [114]
AlternateDataStreams: C:\ProgramData\TEMP:B755D674 [210]
HKU\S-1-5-21-242661724-3833654031-246747303-1001\Software\Classes\.scr: AutoCADScriptFile =>
FirewallRules: [UDP Query User{79F2DEF1-0B45-4ADE-862B-CAB73DBBAEBA}C:\program files\blackmagic design\davinci resolve\fuscript.exe] => (Allow) C:\program files\blackmagic design\davinci resolve\fuscript.exe Pas de fichier
FirewallRules: [TCP Query User{B61C4BCF-B391-4E56-A528-BB694D1B16C9}C:\program files\blackmagic design\davinci resolve\fuscript.exe] => (Allow) C:\program files\blackmagic design\davinci resolve\fuscript.exe Pas de fichier
FirewallRules: [{01554FD6-24EF-40DE-BE45-72E5433D0D0E}] => (Allow) C:\ProgramData\Blackmagic Design\DaVinci Resolve\Support\QtDecoder\QTDecoder.exe Pas de fichier
FirewallRules: [{08655383-022E-43AD-8721-9F232E352454}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\DPDecoder.exe Pas de fichier
FirewallRules: [{69D7438B-FFE3-4039-9BE6-FB15525D2759}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\OxygenPanelDaemon.exe Pas de fichier
FirewallRules: [{7EDD43E4-9864-48E9-9E97-323D61A1081B}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\ElementsPanelDaemon.exe Pas de fichier
FirewallRules: [{FC5EBF68-68B6-40A1-81D0-0BA5D0A3D6F2}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\TangentPanelDaemon.exe Pas de fichier
FirewallRules: [{2E98DD41-05C3-4B22-95D5-0AC1254AA587}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\EuphonixPanelDaemon.exe Pas de fichier
FirewallRules: [{AADF644D-8B9C-4DD8-BB50-4D1A918237E1}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\JLCooperPanelDaemon.exe Pas de fichier
FirewallRules: [{A2DB35E1-3E71-4F1E-94E4-927B1AE0D237}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\DaVinciPanelDaemon.exe Pas de fichier
FirewallRules: [{BBEA3E75-37E8-4D1D-B156-369EED42E7C9}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\bmdpaneld.exe Pas de fichier
FirewallRules: [{D473FBF8-FD34-4563-AADE-54AFBA609998}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\Resolve.exe Pas de fichier
FirewallRules: [{CBBC5B28-52DA-47C5-9DC6-CE8FD77AFB83}] => (Allow) C:\Program Files (x86)\Pinnacle\Studio 11\programs\RM.exe Pas de fichier
FirewallRules: [{050B2249-1297-4157-9041-5917E67D19B1}] => (Allow) C:\Program Files (x86)\Pinnacle\Studio 11\programs\RM.exe Pas de fichier
FirewallRules: [{B5840C0C-8937-4072-9F67-B23CB871D8AB}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerREC\ApowerREC.exe Pas de fichier
FirewallRules: [{5F78BF2E-AA5D-46D0-8926-FE5E1E448EC8}] => (Allow) C:\Program Files (x86)\Apowersoft\ApowerREC\ApowerREC.exe Pas de fichier
FirewallRules: [{43763EC7-C3F8-42BB-9959-334F5304E7DC}] => (Block) C:\program files (x86)\wondershare\mobilego\mobilegoservice.exe Pas de fichier
FirewallRules: [{11886172-4CF4-40CD-BF14-BC24FB89FA2C}] => (Block) C:\program files (x86)\wondershare\mobilego\mobilegoservice.exe Pas de fichier
FirewallRules: [UDP Query User{AD491C23-A47C-45C9-A260-AC8D4F55C56A}C:\program files (x86)\wondershare\mobilego\mobilegoservice.exe] => (Allow) C:\program files (x86)\wondershare\mobilego\mobilegoservice.exe Pas de fichier
FirewallRules: [TCP Query User{D4A6BBA7-EB37-4137-A667-00A8FCD0A55E}C:\program files (x86)\wondershare\mobilego\mobilegoservice.exe] => (Allow) C:\program files (x86)\wondershare\mobilego\mobilegoservice.exe Pas de fichier
FirewallRules: [{2F9D5838-146E-42E6-A2B5-0295368C3061}] => (Block) C:\program files (x86)\sopcast\sopcast.exe Pas de fichier
FirewallRules: [{85140332-E736-48EB-BAAD-2BC6E216E5AA}] => (Block) C:\program files (x86)\sopcast\sopcast.exe Pas de fichier
FirewallRules: [UDP Query User{6B4E23D7-27FF-4A1B-A2D2-75419D576480}C:\program files (x86)\sopcast\sopcast.exe] => (Allow) C:\program files (x86)\sopcast\sopcast.exe Pas de fichier
FirewallRules: [TCP Query User{AD0F16AB-C89F-4F8F-BD34-4ECEFA8B42C2}C:\program files (x86)\sopcast\sopcast.exe] => (Allow) C:\program files (x86)\sopcast\sopcast.exe Pas de fichier
FirewallRules: [UDP Query User{CF2407AB-7B2C-4E93-A94A-91A4F51CDFED}C:\program files (x86)\winphone ultimate edition\bvrp messenger\bvrpmsgr.exe] => (Allow) C:\program files (x86)\winphone ultimate edition\bvrp messenger\bvrpmsgr.exe Pas de fichier
FirewallRules: [TCP Query User{7FD39D5A-9806-4705-A90D-65E83360358C}C:\program files (x86)\winphone ultimate edition\bvrp messenger\bvrpmsgr.exe] => (Allow) C:\program files (x86)\winphone ultimate edition\bvrp messenger\bvrpmsgr.exe Pas de fichier
FirewallRules: [{C439E5BA-AE48-4934-A1BE-7329970CE4CC}] => (Allow) C:\Program Files (x86)\WinPhone Ultimate Edition\BvrpKrnl.exe Pas de fichier
FirewallRules: [{45F050D0-5476-4762-BA82-6225BD37C10C}] => (Allow) C:\Program Files (x86)\WinPhone Ultimate Edition\BvrpKrnl.exe Pas de fichier
FirewallRules: [{3B982748-B7C2-4A6C-B735-C6F174A5B69F}] => (Allow) C:\Program Files (x86)\WinPhone Ultimate Edition\winphone.exe Pas de fichier
FirewallRules: [{07F49E74-8109-4BA5-A03C-81B2186401D9}] => (Allow) C:\Program Files (x86)\WinPhone Ultimate Edition\winphone.exe Pas de fichier
FirewallRules: [{7BABC3AD-B9A9-4342-8484-21C19974C181}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe Pas de fichier
FirewallRules: [{1320F839-2DC3-4037-B88B-0880EBEB1E44}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe Pas de fichier
FirewallRules: [{9CF20E7E-EADA-4CFB-8678-685934B85029}] => (Allow) C:\Users\hmedi\AppData\Local\Temp\EPSON XP-600 Series_Home\Network\EpsonNetSetup\Data\ENEasyApp.exe Pas de fichier
FirewallRules: [{6C7A99A2-4068-4CB8-BBA2-73AD66BBD0EA}] => (Allow) C:\Users\hmedi\AppData\Local\Temp\EPSON XP-600 Series_Home\Network\EpsonNetSetup\Data\ENEasyApp.exe Pas de fichier
FirewallRules: [TCP Query User{7AEA18F7-BC1E-4883-AFEB-F1F9063DA255}C:\program files (x86)\echanblard\emule.exe] => (Allow) C:\program files (x86)\echanblard\emule.exe Pas de fichier
FirewallRules: [UDP Query User{87D10531-BBBC-4DE1-91E2-83A45C8B9AA8}C:\program files (x86)\echanblard\emule.exe] => (Allow) C:\program files (x86)\echanblard\emule.exe Pas de fichier
FirewallRules: [{6068F3B4-A233-4C6B-B0E4-EC3421F946C2}] => (Allow) C:\Users\hmedi\AppData\Roaming\BitTorrent\BitTorrent.exe Pas de fichier
FirewallRules: [{4727C556-0EC6-4E5E-B208-0117F42B45EB}] => (Allow) C:\Users\hmedi\AppData\Roaming\BitTorrent\BitTorrent.exe Pas de fichier
FirewallRules: [{822EC29E-8293-42DF-BB8B-D9E3317B9B13}] => (Allow) C:\Program Files (x86)\Multilizer\MultilizerPDFTranslator\PDFTRanslationWizard.exe Pas de fichier
EmptyTemp:
cmd: ipconfig /flushdns
end::