start::
closeprocesses:
createrestorepoint:
AV: Malwarebytes (Disabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Malwarebytes (Disabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKLM\...\Run: [UMonit] => C:\WINDOWS\SysWOW64\UMonit64.exe [53832 2015-07-15] (Microsoft Windows Hardware Compatibility Publisher -> )
HKU\S-1-5-21-3917520454-1897002642-3725866607-1001\...\Run: [MyDriveConnect.exe] => C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe [2154216 2019-10-04] (TomTom International BV -> TomTom)
FF Extension: (Avast Online Security) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\hkpkjpa1.default\Extensions\wrc@avast.com.xpi [2019-12-31]
FF Extension: (Avast SafePrice | Comparaison, offres, coupons) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\hkpkjpa1.default\Extensions\sp@avast.com.xpi [2019-12-21]
2020-01-06 23:28 - 2016-10-29 16:30 - 000000000 ____D C:\ProgramData\AVAST Software
2019-12-28 21:47 - 2018-04-05 16:21 - 000000000 ____D C:\Users\User\AppData\Local\AVAST Software
cmd: DISM /Online /Cleanup-image /Restorehealth
cmd: sfc /scannow
emptytemp:
end::