start::
CreateRestorePoint:
CloseProcesses:
HKU\S-1-5-21-757660363-632061097-3878602844-1001\...\Run: [Chromium] => "c:\users\utilisateur\appdata\local\chromium\application\chrome.exe" --auto-launch-at-startup --profile-directory="Default" --restore-last-session
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {12294519-5C63-4202-8FBD-34BBBED51BE7} - \Microsoft\Windows\UpdateOrchestrator\Schedule Retry Scan -> Pas de fichier <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
HKU\S-1-5-21-757660363-632061097-3878602844-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://fr.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wsg_cigdxjtnqwo_20_09_ssg00¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0F0EyByByByEyCtBtBtBzyyEtDyEyEyDtN0D0Tzu0StBzyzztBtN1L2XzuyEtFyCtCtFtDtFtCtBtBtN1L1Czu1BtCtN1L1G1B1V1N2Y1L1Qzu2SyBzz0FtDtC0FyEtCtGyD0A0DtCtG0ByBzz0BtGyDyEzy0EtGyE0F0D0AtC0FtC0CyB0ByEyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyDyEyCyDtCyE1O1PtG1R1Q1PzztGyEzzyBzytGzztCtByBtGtAzytD1S1SyBtC1RtC1T1P1S2QtN0A0LzuyEtN1B2Z1V1T1S1NzutN1Q2Z1B1P1RzutCyDzztAtDzytCyEtDyD%26cr%3D1786981409%26a%3Dwsg_cigdxjtnqwo_20_09_ssg00%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wsg_cigdxjtnqwo_20_09_ssg00¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0F0EyByByByEyCtBtBtBzyyEtDyEyEyDtN0D0Tzu0StBzyzztBtN1L2XzuyEtFyCtCtFtDtFtCtBtBtN1L1Czu1BtCtN1L1G1B1V1N2Y1L1Qzu2SyBzz0FtDtC0FyEtCtGyD0A0DtCtG0ByBzz0BtGyDyEzy0EtGyE0F0D0AtC0FtC0CyB0ByEyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyDyEyCyDtCyE1O1PtG1R1Q1PzztGyEzzyBzytGzztCtByBtGtAzytD1S1SyBtC1RtC1T1P1S2QtN0A0LzuyEtN1B2Z1V1T1S1NzutN1Q2Z1B1P1RzutCyDzztAtDzytCyEtDyD%26cr%3D1786981409%26a%3Dwsg_cigdxjtnqwo_20_09_ssg00%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wsg_cigdxjtnqwo_20_09_ssg00¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0F0EyByByByEyCtBtBtBzyyEtDyEyEyDtN0D0Tzu0StBzyzztBtN1L2XzuyEtFyCtCtFtDtFtCtBtBtN1L1Czu1BtCtN1L1G1B1V1N2Y1L1Qzu2SyBzz0FtDtC0FyEtCtGyD0A0DtCtG0ByBzz0BtGyDyEzy0EtGyE0F0D0AtC0FtC0CyB0ByEyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyDyEyCyDtCyE1O1PtG1R1Q1PzztGyEzzyBzytGzztCtByBtGtAzytD1S1SyBtC1RtC1T1P1S2QtN0A0LzuyEtN1B2Z1V1T1S1NzutN1Q2Z1B1P1RzutCyDzztAtDzytCyEtDyD%26cr%3D1786981409%26a%3Dwsg_cigdxjtnqwo_20_09_ssg00%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wsg_cigdxjtnqwo_20_09_ssg00¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0F0EyByByByEyCtBtBtBzyyEtDyEyEyDtN0D0Tzu0StBzyzztBtN1L2XzuyEtFyCtCtFtDtFtCtBtBtN1L1Czu1BtCtN1L1G1B1V1N2Y1L1Qzu2SyBzz0FtDtC0FyEtCtGyD0A0DtCtG0ByBzz0BtGyDyEzy0EtGyE0F0D0AtC0FtC0CyB0ByEyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyDyEyCyDtCyE1O1PtG1R1Q1PzztGyEzzyBzytGzztCtByBtGtAzytD1S1SyBtC1RtC1T1P1S2QtN0A0LzuyEtN1B2Z1V1T1S1NzutN1Q2Z1B1P1RzutCyDzztAtDzytCyEtDyD%26cr%3D1786981409%26a%3Dwsg_cigdxjtnqwo_20_09_ssg00%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms}
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wsg_cigdxjtnqwo_20_09_ssg00¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0F0EyByByByEyCtBtBtBzyyEtDyEyEyDtN0D0Tzu0StBzyzztBtN1L2XzuyEtFyCtCtFtDtFtCtBtBtN1L1Czu1BtCtN1L1G1B1V1N2Y1L1Qzu2SyBzz0FtDtC0FyEtCtGyD0A0DtCtG0ByBzz0BtGyDyEzy0EtGyE0F0D0AtC0FtC0CyB0ByEyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyDyEyCyDtCyE1O1PtG1R1Q1PzztGyEzzyBzytGzztCtByBtGtAzytD1S1SyBtC1RtC1T1P1S2QtN0A0LzuyEtN1B2Z1V1T1S1NzutN1Q2Z1B1P1RzutCyDzztAtDzytCyEtDyD%26cr%3D1786981409%26a%3Dwsg_cigdxjtnqwo_20_09_ssg00%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms}
SearchScopes: HKU\S-1-5-21-757660363-632061097-3878602844-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wsg_cigdxjtnqwo_20_09_ssg00¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0F0EyByByByEyCtBtBtBzyyEtDyEyEyDtN0D0Tzu0StBzyzztBtN1L2XzuyEtFyCtCtFtDtFtCtBtBtN1L1Czu1BtCtN1L1G1B1V1N2Y1L1Qzu2SyBzz0FtDtC0FyEtCtGyD0A0DtCtG0ByBzz0BtGyDyEzy0EtGyE0F0D0AtC0FtC0CyB0ByEyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyDyEyCyDtCyE1O1PtG1R1Q1PzztGyEzzyBzytGzztCtByBtGtAzytD1S1SyBtC1RtC1T1P1S2QtN0A0LzuyEtN1B2Z1V1T1S1NzutN1Q2Z1B1P1RzutCyDzztAtDzytCyEtDyD%26cr%3D1786981409%26a%3Dwsg_cigdxjtnqwo_20_09_ssg00%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms}
SearchScopes: HKU\S-1-5-21-757660363-632061097-3878602844-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wsg_cigdxjtnqwo_20_09_ssg00¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0F0EyByByByEyCtBtBtBzyyEtDyEyEyDtN0D0Tzu0StBzyzztBtN1L2XzuyEtFyCtCtFtDtFtCtBtBtN1L1Czu1BtCtN1L1G1B1V1N2Y1L1Qzu2SyBzz0FtDtC0FyEtCtGyD0A0DtCtG0ByBzz0BtGyDyEzy0EtGyE0F0D0AtC0FtC0CyB0ByEyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyDyEyCyDtCyE1O1PtG1R1Q1PzztGyEzzyBzytGzztCtByBtGtAzytD1S1SyBtC1RtC1T1P1S2QtN0A0LzuyEtN1B2Z1V1T1S1NzutN1Q2Z1B1P1RzutCyDzztAtDzytCyEtDyD%26cr%3D1786981409%26a%3Dwsg_cigdxjtnqwo_20_09_ssg00%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms}
CHR HKLM\...\Chrome\Extension: [icmgebopaejnjlncllgmcenbbflikfjd]
CHR HKU\S-1-5-21-757660363-632061097-3878602844-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [icmgebopaejnjlncllgmcenbbflikfjd]
CHR HKLM-x32\...\Chrome\Extension: [icmgebopaejnjlncllgmcenbbflikfjd]
R2 SAntivirusIC; C:\Program Files (x86)\SAntivirus\SAntivirusIC.exe [7053808 2020-02-14] (Digital Communications Inc -> Digital Com. Inc) <==== ATTENTION
R2 SAntivirusSvc; C:\Program Files (x86)\SAntivirus\SAntivirusService.exe [163312 2020-03-01] (Digital Communications Inc -> Digital Com. Incorporated) <==== ATTENTION
R1 SANTIVIRUSKD; C:\Program Files (x86)\SAntivirus\SAntivirusKD.sys [90096 2020-03-01] (Digital Communications Inc. -> Digital Comm. Inc) <==== ATTENTION
2020-03-01 20:39 - 2020-03-01 20:44 - 000000000 ____D C:\Users\Utilisateur\AppData\Local\chromium
2020-03-01 20:39 - 2020-03-01 20:39 - 000000000 ____D C:\Users\Utilisateur\AppData\Roaming\santivirusclient
2020-03-01 20:38 - 2020-03-04 20:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SAntivirus
2020-03-01 20:38 - 2020-03-01 20:38 - 000000000 ____D C:\ProgramData\SAntivirus
2020-03-01 20:38 - 2020-03-01 20:38 - 000000000 ____D C:\Program Files (x86)\Chromium
2020-03-01 20:37 - 2020-03-05 17:37 - 000000000 ____D C:\Program Files (x86)\SAntivirus
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
EmptyTemp:
end::