Start::
CreateRestorePoint:
CloseProcesses:
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction
Task: {7A14C993-E1DB-4A7C-83EE-87943A8848CE} - System32\Tasks\{5DB2CDA9-A085-4C3C-9E1F-614F963B1C53} => C:\Windows\system32\pcalua.exe -a D:\Temp\jre-8u131-windows-au.exe -d C:\Windows\SysWOW64 -c /installmethod=jau FAMILYUPGRADE=1
Task: {86736FC1-086A-4ABB-A791-6082D590015E} - System32\Tasks\ByteFence Scan => C:\Program Files\ByteFence\ByteFence.exe
Task: {A2B71058-D1E5-4F88-8450-B9475A629587} - System32\Tasks\{22E18C57-5B05-456B-9862-B3EEC4775B64} => C:\Windows\system32\pcalua.exe -a D:\Temp\jre-8u65-windows-au.exe -d C:\Windows\SysWOW64 -c /installmethod=jau FAMILYUPGRADE=1
Task: {C2D8EA90-DB96-499B-AA04-AE84DFBA12F6} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2820608 2014-11-27] () [Fichier non signé]
Task: {DB4931F9-74DB-4A4E-9FBB-BF1C8EC0F224} - System32\Tasks\Mise à jour de PC Health Advisor => C:\Program Files (x86)\ParetoLogic\PCHA\PCHA.exe
Task: C:\WINDOWS\Tasks\Mise à jour de PC Health Advisor.job => C:\Program Files (x86)\ParetoLogic\PCHA\PCHA.exe
FF SearchPlugin: C:\Users\PoussinMalin\AppData\Roaming\Mozilla\Firefox\Profiles\nm1e6i9v.default\searchplugins\yahoo-ysp.xml [2015-10-24]
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\local-settings.js [2013-09-22]
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\mozilla.cfg [2013-09-22]
R2 Amazon Assistant Service; C:\Program Files (x86)\Amazon\Amazon Assistant\amazonAssistantService.exe [102064 2017-02-28] (Amazon Services LLC -> )
R2 BitDefenderCOM; C:\Program Files\BDServices\BitDefenderCom.exe [1028096 2016-11-21] (Digital Care Solutions) [Fichier non signé]
S3 scan; C:\Program Files\BDServices\scan.dll [627688 2016-11-10] (Bitdefender SRL -> Bitdefender)
2020-01-10 23:19 - 2020-01-10 23:19 - 000000262 _____ () C:\ProgramData\fontcacheev1.dat
C:\Program Files\BDServices
C:\Program Files (x86)\Amazon
C:\Program Files\ByteFence
C:\Program Files (x86)\ParetoLogic
ContextMenuHandlers1: [PC Protector Plus] -> {63F58340-0CD0-403B-B6E8-4E1449F01C6F} => -> Pas de fichier
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> Pas de fichier
WMI:subscription\__FilterToConsumerBinding->CommandLineEventConsumer.Name=\"BVTConsumer\"",Filter="__EventFilter.Name=\"BVTFilter\"::
WMI:subscription\__EventFilter->BVTFilter::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99]
WMI:subscription\CommandLineEventConsumer->BVTConsumer::[CommandLineTemplate => cscript KernCap.vbs][WorkingDirectory => C:\\tools\\kernrate]
AlternateDataStreams: C:\ProgramData\TEMP:2CB9631F [134]
AlternateDataStreams: C:\ProgramData\TEMP:4D348522 [131]
AlternateDataStreams: C:\ProgramData\TEMP:52E5A75A [516]
AlternateDataStreams: C:\ProgramData\TEMP:7A2101AB [478]
AlternateDataStreams: C:\ProgramData\TEMP:A6A65B80 [143]
AlternateDataStreams: C:\ProgramData\TEMP:A745DB5D [444]
AlternateDataStreams: C:\ProgramData\TEMP:A9ABA3FF [480]
AlternateDataStreams: C:\ProgramData\TEMP:F5FC5DCE [490]
AlternateDataStreams: C:\ProgramData\TEMP:F7370879 [438]
IE trusted site: HKU\S-1-5-21-2831640672-2712382546-1733512007-1000\...\amazon.fr -> hxxps://amazon.fr
EmptyTemp:
End::