Start::
CreateRestorePoint:
CloseProcesses:
HKU\S-1-5-21-2077671028-3459961108-1282865966-1001\...\Run: [Chromium] => "c:\users\rayan\appdata\local\chromium\application\chrome.exe" --auto-launch-at-startup --profile-directory="Default" --restore-last-session
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction
HKU\S-1-5-21-2077671028-3459961108-1282865966-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.accueil-nav.com/
SearchScopes: HKU\S-1-5-21-2077671028-3459961108-1282865966-1001 -> DefaultScope {2B19DB12-7F73-4A76-8F1E-2941D524B5E0} URL = hxxp://www.accueil-nav.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2077671028-3459961108-1282865966-1001 -> {2B19DB12-7F73-4A76-8F1E-2941D524B5E0} URL = hxxp://www.accueil-nav.com/search?q={searchTerms}
Edge HomeButtonPage: HKU\S-1-5-21-2077671028-3459961108-1282865966-1001 -> hxxp://www.accueil-nav.com/
Edge Notifications: HKU\S-1-5-21-2077671028-3459961108-1282865966-1001 -> hxxps://www.facebook.com; hxxps://sauwoaptain.com; hxxps://yakrl.mdhok.pro
CHR Notifications: Default -> hxxps://sauwoaptain.com
CHR StartupUrls: Default -> "hxxp://www.google.fr/","hxxp://www.accueil-nav.com/"
C:\Users\Rayan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhoagceacaklimpcejjofabngcjkebfg
C:\Users\Rayan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nccfgpamboionigdpfjmijhlgmgdbael
CHR HKLM\...\Chrome\Extension: [bhoagceacaklimpcejjofabngcjkebfg]
CHR HKLM\...\Chrome\Extension: [nccfgpamboionigdpfjmijhlgmgdbael]
CHR HKU\S-1-5-21-2077671028-3459961108-1282865966-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bhoagceacaklimpcejjofabngcjkebfg]
CHR HKU\S-1-5-21-2077671028-3459961108-1282865966-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [nccfgpamboionigdpfjmijhlgmgdbael]
CHR HKLM-x32\...\Chrome\Extension: [bhoagceacaklimpcejjofabngcjkebfg]
CHR HKLM-x32\...\Chrome\Extension: [nccfgpamboionigdpfjmijhlgmgdbael]
2020-03-10 02:27 - 2020-03-10 02:27 - 000000000 ____D C:\ProgramData\ByteFence
2020-03-09 21:56 - 2020-03-09 22:04 - 000000000 ____D C:\Program Files (x86)\Chromium
2020-03-09 21:55 - 2020-03-11 02:31 - 000000000 ____D C:\Program Files (x86)\Digital Communications
c:\users\rayan\appdata\local\chromium
EmptyTemp:
End::