start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
HKLM\...\Run: [AirPlane] => C:\Program Files (x86)\EA\Setup\EArouting.exe [78336 2015-09-15] () [Fichier non signé]
Task: C:\WINDOWS\Tasks\Norton Product InstallerIdle.job => C:\ProgramData\NortonInstaller\NSSInstallStub.exe
HKU\S-1-5-21-1574671842-692639246-3787852387-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://oem17win10.msn.com/?PC=NMTE/
HKU\S-1-5-21-1574671842-692639246-3787852387-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://OEM17WIN10.MSN.COM/?PC=NMTE/
FF Extension: (Avira Password Manager) - C:\Users\LAURENT ET YANIS\AppData\Roaming\Mozilla\Firefox\Profiles\N4z0HMTd.default\Extensions\passwordmanager@avira.com
CHR HKLM\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM-x32\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]
OPR Extension: (Avira Browser Safety) - C:\Users\LAURENT ET YANIS\AppData\Roaming\Opera Software\Opera Stable\Extensions\dalelnnofafalcmkmnhdbigbjjkloabo [2019-12-11]
OPR Extension: (Avira Password Manager) - C:\Users\LAURENT ET YANIS\AppData\Roaming\Opera Software\Opera Stable\Extensions\ngohaaocccbohaffogpbgfpmpgbcgccg [2019-12-11]
OPR Extension: (Free Avira Phantom VPN – Unblock Websites) - C:\Users\LAURENT ET YANIS\AppData\Roaming\Opera Software\Opera Stable\Extensions\pcgkmkjdikhiodinhloioejnpjgmfigd [2019-12-11]
2019-12-20 20:27 - 2019-12-20 20:27 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avira
2019-12-11 17:05 - 2019-12-28 19:15 - 000000000 ____D C:\ProgramData\GlarySoft
2019-12-11 17:02 - 2019-12-28 19:15 - 000000000 ____D C:\Users\LAURENT ET YANIS\AppData\Roaming\GlarySoft
2019-12-11 15:27 - 2019-12-11 15:27 - 000000000 ____D C:\Users\LAURENT ET YANIS\AppData\Local\Avira
2019-12-11 15:03 - 2019-12-28 18:56 - 000000000 ____D C:\Program Files (x86)\Avira
2019-12-11 15:02 - 2019-12-28 18:56 - 000000000 ____D C:\ProgramData\Avira
2019-12-11 14:57 - 2019-12-28 19:15 - 000000000 ____D C:\ProgramData\ProductData
2019-12-11 14:55 - 2019-12-28 19:14 - 000000000 ____D C:\Users\LAURENT ET YANIS\AppData\Roaming\IObit
2019-12-11 14:55 - 2019-12-20 16:18 - 000000000 ____D C:\ProgramData\IObit
2019-12-11 14:54 - 2019-12-11 14:54 - 000000000 ____D C:\Program Files\Common Files\AV
2019-12-10 17:14 - 2019-12-10 17:14 - 000000000 ____D C:\Users\Public\Downloads\Norton
2019-12-10 17:06 - 2019-12-10 20:51 - 000000000 ____D C:\Users\LAURENT ET YANIS\AppData\LocalLow\IObit
2019-12-10 14:37 - 2019-12-10 14:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security Scan
2019-12-10 14:14 - 2019-12-28 18:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2019-12-11 16:54 - 2019-05-19 15:23 - 000000000 ____D C:\ProgramData\Norton
2019-12-11 13:06 - 2019-05-19 15:54 - 000000534 ____H C:\WINDOWS\Tasks\Norton Product InstallerIdle.job
2019-12-11 12:59 - 2019-05-19 15:22 - 000000000 ____D C:\ProgramData\NortonInstaller
ContextMenuHandlers1: [BtSendToMenuEx] -> {CF24E6B8-F148-4BCB-9108-ADF313966E80} => -> Pas de fichier
ContextMenuHandlers1: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => -> Pas de fichier
ContextMenuHandlers2: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => -> Pas de fichier
ContextMenuHandlers6: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => -> Pas de fichier
EmptyTemp:
cmd: netsh advfirewall reset
cmd: ipconfig /flushdns
end::