start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier
IE trusted site: HKU\S-1-5-21-1307230770-429440349-1628779407-1001\...\atos.net -> hxxp://*.aw.atos.net
IE trusted site: HKU\S-1-5-21-1307230770-429440349-1628779407-1001\...\atosorigin.com -> hxxp://*.aw.atosorigin.com
IE trusted site: HKU\S-1-5-21-1307230770-429440349-1628779407-1001\...\geoportail.fr -> hxxp://geoportail.fr
IE trusted site: HKU\S-1-5-21-1307230770-429440349-1628779407-1001\...\gouv.fr -> hxxp://*.geoportail.gouv.fr
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {C9497716-E99D-4BA3-8733-7BAA0917079E} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {CE2DE968-E342-40D7-9566-427D45E4A886} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
FF Extension: (Avast Online Security) - C:\Users\Christine\AppData\Roaming\Mozilla\Firefox\Profiles\fs5bpbf9.default\Extensions\wrc@avast.com.xpi [2019-10-16] [UpdateUrl:hxxps://firefoxext.avcdn.net/firefoxext/avast/aos/update.json]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
2020-02-23 15:30 - 2017-06-20 15:34 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2018-09-08 18:36 - 2018-09-08 18:36 - 000003584 _____ () C:\Users\Christine\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-04-06 23:02 - 2016-04-06 23:02 - 000000017 _____ () C:\Users\Christine\AppData\Local\resmon.resmoncfg
2019-01-27 17:17 - 2019-01-27 17:17 - 000000000 _____ () C:\Users\Christine\AppData\Local\{EDF981D9-9842-43A5-A538-D7F3C8BC7BDF}
EmptyTemp:
cmd: ipconfig /flushdns
end::