start:: CreateRestorePoint: CloseProcesses: Hosts: RemoveProxy: HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION Task: {50FDCF7F-1958-4586-BEA2-3304E98B7924} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION FF Extension: (Avast SafePrice | Comparaison, offres, coupons) - C:\Users\Vro\AppData\Roaming\Mozilla\Firefox\Profiles\msb4add8.default\Extensions\sp@avast.com.xpi [2020-02-14] FF Extension: (Avast Online Security) - C:\Users\Vro\AppData\Roaming\Mozilla\Firefox\Profiles\msb4add8.default\Extensions\wrc@avast.com.xpi [2020-01-24] U3 iswSvc; pas de ImagePath 2020-02-14 19:26 - 2020-02-14 19:37 - 000000000 ____D C:\Users\Vro\Desktop\ZHP Cleaner 2020-02-14 19:20 - 2020-02-14 19:20 - 000002942 _____ C:\Users\Vro\Desktop\ZHPCleaner (R).txt 2020-02-14 18:46 - 2020-02-14 19:20 - 000000000 ____D C:\Users\Vro\AppData\Roaming\ZHP 2020-02-14 18:46 - 2020-02-14 18:46 - 000000880 _____ C:\Users\Vro\Desktop\ZHPCleaner.lnk 2020-02-14 18:46 - 2020-02-14 18:46 - 000000000 ____D C:\Users\Vro\AppData\Local\ZHP 2020-02-14 18:43 - 2020-02-14 18:43 - 000000000 ____D C:\Users\Vro\Desktop\Ad cleaner 2020-02-14 18:36 - 2020-02-14 18:39 - 000000000 ____D C:\AdwCleaner 2020-02-16 11:49 - 2017-07-14 17:19 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2020-02-14 19:30 - 2018-03-04 15:01 - 000000356 _____ C:\WINDOWS\Tasks\HPCeeScheduleForVro.job 2020-02-13 22:00 - 2018-04-11 21:16 - 000000000 ____D C:\Users\Vro\AppData\Local\AVAST Software 2020-02-13 22:00 - 2016-12-10 12:54 - 000000000 ____D C:\ProgramData\AVAST Software 2020-02-13 17:58 - 2019-08-10 22:32 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVAST Software ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier FirewallRules: [{BD07486F-0A74-4128-BD41-87E0C1E49640}] => (Allow) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe Pas de fichier FirewallRules: [{586F271D-2736-4261-9A5A-ECC8A7ECD7B8}] => (Allow) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe Pas de fichier FirewallRules: [{1B023356-7A78-40EF-98C7-8A75B3362CB1}] => (Allow) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe Pas de fichier FirewallRules: [{C5B9975D-39F1-4AB0-A43B-9B3B32AD9653}] => (Allow) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe Pas de fichier FirewallRules: [{8D87334B-6C35-4DC4-9F2F-EFB020896785}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD14Agent.exe Pas de fichier EmptyTemp: cmd: ipconfig /flushdns end::