start::
closeprocesses:
createrestorepoint:
GroupPolicy: Restriction ? <==== ATTENTION
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
Edge Notifications: HKU\S-1-5-21-4200173485-1050352512-1272547601-1001 -> hxxp://192.168.1.20:4040
FF Extension: (Avast SafePrice | Comparaison, offres, coupons) - C:\Users\russo\AppData\Roaming\Mozilla\Firefox\Profiles\9sondt4d.default\Extensions\sp@avast.com.xpi [2019-05-13]
FF Extension: (Avast Online Security) - C:\Users\russo\AppData\Roaming\Mozilla\Firefox\Profiles\9sondt4d.default\Extensions\wrc@avast.com.xpi [2019-05-13]
FF Extension: (Avast SafePrice | Comparaison, offres, coupons) - C:\Users\russo\AppData\Roaming\Mozilla\Firefox\Profiles\lqog3h7j.default-release\Extensions\sp@avast.com.xpi [2019-05-13]
FF Extension: (Avast Online Security) - C:\Users\russo\AppData\Roaming\Mozilla\Firefox\Profiles\lqog3h7j.default-release\Extensions\wrc@avast.com.xpi [2019-05-13]
CHR DefaultSearchURL: Default -> hxxps://search.yahoo.com/search?fr=mcafee_uninternational&type=E210BE91082G0&p={searchTerms}
CHR DefaultSearchKeyword: Default -> mcafee
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
2020-02-02 13:19 - 2020-02-02 13:19 - 000000000 ____D C:\ProgramData\SystemAcCrux
2020-02-02 13:18 - 2020-02-02 13:18 - 000000000 ____D C:\Program Files (x86)\EaseUS
2020-02-13 13:27 - 2019-05-13 21:16 - 000000000 ____D C:\ProgramData\AVAST Software
2020-02-02 13:27 - 2019-10-22 22:03 - 000000000 ____D C:\Program Files (x86)\Wondershare
2020-02-02 13:22 - 2019-10-22 18:05 - 000000000 ____D C:\ProgramData\Wondershare
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => -> Pas de fichier
ContextMenuHandlers1: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => -> Pas de fichier
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => -> Pas de fichier
ContextMenuHandlers6: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => -> Pas de fichier
IE trusted site: HKU\S-1-5-21-4200173485-1050352512-1272547601-1001\...\sharepoint.com -> hxxps://ephec-files.sharepoint.com
FirewallRules: [{FE030D01-1285-4009-9A6D-EE0F1FD91E53}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{B75AA4D6-4B89-45EF-9001-A89C3F2AF5BB}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{7825A9E4-B35D-4B82-8965-D87B84934C4A}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{59C79986-50B7-45AB-BFAE-DF358997D65A}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{05E58673-E4BB-4D24-B4C0-52A3F10EF483}] => (Allow) C:\Program Files\DriversCloud.com\DriversCloud.exe Pas de fichier
FirewallRules: [{A22FCBF3-993D-496E-8CC7-968727E46178}] => (Allow) C:\Program Files\DriversCloud.com\DriversCloud.exe Pas de fichier
cmd: md C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database
emptytemp:
end::