start::
closeprocesses:
createrestorepoint:
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
IE trusted site: HKU\S-1-5-21-1725595267-1234763938-117686443-1001\...\ma-config.com -> hxxp://ma-config.com
IE trusted site: HKU\S-1-5-21-1725595267-1234763938-117686443-1001\...\touslesdrivers.com -> hxxp://touslesdrivers.com
HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe"
HKLM\...\StartupApproved\Run32: => "AvgUi"
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2086240 2015-04-28] (Wondershare software CO., LIMITED -> Wondershare)
HKLM\Software\...\AppCompatFlags\Custom\chrome.exe: [{cf2797aa-b7ec-e311-8ed9-005056c00008}.sdb] ->
HKLM\Software\...\AppCompatFlags\Custom\explorer.zza: [{cf2797aa-b7ec-e311-8ed9-005056c00008}.sdb] ->
HKLM\Software\...\AppCompatFlags\Custom\FinalSun.exe: [{cec3d75e-7642-439d-bcfd-87074e209639}.sdb] -> Final Sun Compatibility Fix
HKLM\Software\...\AppCompatFlags\Custom\FinalSun_DTA.exe: [{cec3d75e-7642-439d-bcfd-87074e209639}.sdb] -> Final Sun Compatibility Fix
HKLM\Software\...\AppCompatFlags\Custom\FinalTI.exe: [{cec3d75e-7642-439d-bcfd-87074e209639}.sdb] -> Final Sun Compatibility Fix
HKLM\Software\...\AppCompatFlags\Custom\game.exe: [{1654a60f-73ac-4fa8-8bba-55140ccce37e}.sdb] -> TiberianSunCompatFix
HKLM\Software\...\AppCompatFlags\Custom\game.exe: [{3f4535f8-e996-4cf1-bb6d-66eb87969155}.sdb] -> TS Compatibility Fix
HKLM\Software\...\AppCompatFlags\Custom\iexplore.exe: [{cf2797aa-b7ec-e311-8ed9-005056c00008}.sdb] ->
HKLM\Software\...\AppCompatFlags\Custom\Map Editor.exe: [{cec3d75e-7642-439d-bcfd-87074e209639}.sdb] -> Final Sun Compatibility Fix
HKLM\Software\...\AppCompatFlags\Custom\ts-spawn.exe: [{1654a60f-73ac-4fa8-8bba-55140ccce37e}.sdb] -> TiberianSunCompatFix
HKLM\Software\...\AppCompatFlags\InstalledSDB\{1654a60f-73ac-4fa8-8bba-55140ccce37e}: [DatabasePath] -> C:\WINDOWS\AppPatch\CustomSDB\{1654a60f-73ac-4fa8-8bba-55140ccce37e}.sdb [2015-01-10]
HKLM\Software\...\AppCompatFlags\InstalledSDB\{3f4535f8-e996-4cf1-bb6d-66eb87969155}: [DatabasePath] -> C:\WINDOWS\AppPatch\CustomSDB\{3f4535f8-e996-4cf1-bb6d-66eb87969155}.sdb [2015-11-07]
HKLM\Software\...\AppCompatFlags\InstalledSDB\{cec3d75e-7642-439d-bcfd-87074e209639}: [DatabasePath] -> C:\WINDOWS\AppPatch\CustomSDB\{cec3d75e-7642-439d-bcfd-87074e209639}.sdb [2015-11-07]
HKLM\Software\...\Authentication\Credential Providers: [{5355DA8C-FE32-49b4-A567-A67535C86592}] -> C:\Program Files\CSR\CSR Harmony Wireless Software Stack\BLEtokenCredentialProvider.dll [2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
Task: {016881FC-38D4-4373-8350-7BA9941E9CA6} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Pas de fichier <==== ATTENTION
Task: {1943C115-6804-4E00-99E6-EF0E67CD7B5F} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Pas de fichier <==== ATTENTION
Task: {26F466A9-5DB0-4B65-8D74-1AAC674F63D7} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Pas de fichier <==== ATTENTION
Task: {3E411590-437D-4AA3-8DF6-581914752C87} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Pas de fichier <==== ATTENTION
Task: {427F575E-B608-43A5-842F-3B24B4E84A7C} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
Task: {4E624919-6607-4D6F-9A55-F51194DF5ED6} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Pas de fichier <==== ATTENTION
Task: {75E08609-4153-4063-99AF-1AD219BCA1FD} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Pas de fichier <==== ATTENTION
Task: {83889EB1-8246-43E4-807D-6ADB474E314B} - System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe
Task: {845B0F96-4E40-4523-9412-939F25EAF028} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Pas de fichier <==== ATTENTION
Task: {877CFB21-C34D-4EA6-83FB-C439CEEC150E} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\AVG\AVG PC TuneUp\OneClick.exe
Task: {AB6CD312-C656-4334-9B1D-490F75E7F4E9} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Pas de fichier <==== ATTENTION
Task: {C3A6D4ED-EC9E-47AF-8DDB-196CA5B5764E} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Pas de fichier <==== ATTENTION
Task: {C4F18378-0F38-49D7-89C6-6EAF9636F18A} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Pas de fichier <==== ATTENTION
Task: {D2C153BC-6375-4412-89CC-21174D2FAEF9} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Pas de fichier <==== ATTENTION
Task: {DD8CD12A-E80B-4A53-89D0-AD58CC1521A2} - \WPD\SqmUpload_S-1-5-21-1725595267-1234763938-117686443-1001 -> Pas de fichier <==== ATTENTION
Task: {E23C2796-9889-4FD2-80B3-C5333BA60DB9} - System32\Tasks\{C5359701-6A9B-49CC-8C79-2CCF77311942} => C:\WINDOWS\system32\pcalua.exe -a J:\Redist\directx7\dxsetup.exe -d J:\
Task: {E4CE6F20-371C-4F95-BC0E-8F6133186EA6} - System32\Tasks\{D88AE226-6526-43BA-A4EE-D8FF1A70F22F} => C:\WINDOWS\system32\pcalua.exe -a J:\RiskInstall.exe -d J:\
Task: {E6B3A446-F00F-4E46-8D51-2BDA446FBDD8} - System32\Tasks\{758E9B4B-C179-498D-B82A-61508F6E7B76} => C:\WINDOWS\system32\pcalua.exe -a %µ£C:\Users\ben et laura\AppData\Local\Temp\NeroInstallFiles\NERO20150504083826662\ISSetupPrerequisites\systemRequirementValidator\NeroOSValidator.exe%µ£ <==== ATTENTION
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - Pas de fichier
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - Pas de fichier
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - Pas de fichier
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - Pas de fichier
FF SearchPlugin: C:\Users\ben et laura\AppData\Roaming\Mozilla\Firefox\Profiles\vdhbczn5.default\searchplugins\bing-lavasoft-ff59.xml [2018-05-26]
FF Plugin-x32: @t.garena.com/garenatalk -> C:\Program Files (x86)\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll [Pas de fichier]
HKU\S-1-5-21-1725595267-1234763938-117686443-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
cmd: md C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database
cmd: DISM /Online /Cleanup-image /Restorehealth
cmd: sfc /scannow
emptytemp:
end::