Start::
CloseProcesses:
CreateRestorePoint:
Removeproxy:
Hosts:
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
FF Homepage: Mozilla\Firefox\Profiles\z6gfs6b9.default -> hxxps://www.malwarebytes.org/restorebrowser//?type=hp&ts=1450105420&z=8d206d0cc6667af5df60552gczewde6g7e2w5z9c4e&from=wpm07173&uid=WDCXWD5000AAKX-60U6AA0_WD-WCC2EDJJXLP1JXLP1
FF Extension: (Français Language Pack) - C:\Users\domicoeur\AppData\Roaming\Mozilla\Firefox\Profiles\z6gfs6b9.default\Extensions\langpack-fr@firefox.mozilla.org.xpi [2016-01-26] []
FF Extension: (Pas de nom) - C:\Users\domicoeur\AppData\Roaming\Mozilla\Firefox\Profiles\z6gfs6b9.default\extensions\yahooprotected@gmail.com [non trouvé(e)]
FF Extension: (Pas de nom) - C:\Users\domicoeur\AppData\Roaming\Mozilla\Firefox\Profiles\z6gfs6b9.default\extensions\default_newtabff@gmail.com [non trouvé(e)]
SearchScopes: HKLM -> DefaultScope la valeur est absente
SearchScopes: HKLM-x32 -> DefaultScope la valeur est absente
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - \Microsoft\Windows\SettingSync\BackupTask -> Pas de fichier <==== ATTENTION
Task: {D9904FAB-71DD-412E-A4E9-B996DB58D068} - \{3AF0050E-DE06-D00D-243E-9DDF2E711235} -> Pas de fichier <==== ATTENTION
Task: {B7992938-01F1-4F40-A0EC-0D23D2F0F152} - \Microsoft\Windows\TaskScheduler\Regular Maintenance -> Pas de fichier <==== ATTENTION
Task: {71FAEAEB-4051-438D-8C83-9434B19AFAF2} - pas de chemin du fichier
Task: {73AC25E4-36BC-47C8-BC6C-785A10DAE876} - pas de chemin du fichier
Task: {60FAAB2C-DCB0-4885-8365-0A181CB9B4A5} - System32\Tasks\{384CD350-E9F2-7A10-7E2A-880B7F064B44} => C:\windows\system32\regsvr32.exe /s /n /i:"/rt" "C:\PROGRA~3\7776a829\357e71ce.dll" <==== ATTENTION
Task: {6F02587F-8A2B-4552-97F6-DEEF229E335B} - \Microsoft\Windows\TaskScheduler\Idle Maintenance -> Pas de fichier <==== ATTENTION
Task: {0CFCF34A-F2FD-44B6-A98A-62C3CABC61CA} - pas de chemin du fichier
Task: {0D8A891D-890C-4808-84D8-2F436AB14653} - \Microsoft\Windows\Application Experience\AitAgent -> Pas de fichier <==== ATTENTION
Task: {10D0F5EF-8932-4AC9-B9D3-27516FE7B3BD} - \{6BB92FEE-9D57-ECCB-7646-FD3F86E5A5BB} -> Pas de fichier <==== ATTENTION
Task: {1274336E-AB06-46B6-A48C-0671C5557CC6} - \Microsoft\Windows\TaskScheduler\Maintenance Configurator -> Pas de fichier <==== ATTENTION
Task: {1687544D-7247-4F5A-965A-A6E920E55278} - \Microsoft\Windows\TaskScheduler\Manual Maintenance -> Pas de fichier <==== ATTENTION
Task: {08F5D3B9-00C8-462D-96E6-0BE9C5F90271} - pas de chemin du fichier
ContextMenuHandlers6: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll -> Pas de fichier
ContextMenuHandlers2: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll -> Pas de fichier
ContextMenuHandlers1: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => -> Pas de fichier
DeleteKey: HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc
DeleteKey: HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc
C:\Program Files\WindowsApps\2703103D.McAfeeCentral_5.0.177.1_x64__4ehj4w4frejdr
FirewallRules: [TCP Query User{CE933F60-8D97-463B-9CBC-A46108455DFC}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe Pas de fichier
FirewallRules: [UDP Query User{74428557-6648-46F9-B504-124F26AF45F3}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe Pas de fichier
FirewallRules: [TCP Query User{A8010B86-E2C7-472B-B7C1-D67D1D898026}C:\users\domicoeur\appdata\local\vghd\bin\vghd.exe] => (Allow) C:\users\domicoeur\appdata\local\vghd\bin\vghd.exe Pas de fichier
FirewallRules: [UDP Query User{5532D33F-6FC0-43CF-AA55-F41AE0BACE2D}C:\users\domicoeur\appdata\local\vghd\bin\vghd.exe] => (Allow) C:\users\domicoeur\appdata\local\vghd\bin\vghd.exe Pas de fichier
FirewallRules: [{A7D784AD-A6C2-41F0-816C-587468377FE4}] => (Allow) C:\Program Files\Trust.Zone VPN Client\tzclient.exe Pas de fichier
FirewallRules: [{18E56A40-9373-4209-8B5C-8B4DA7843BAF}] => (Allow) C:\Program Files\Trust.Zone VPN Client\tzclient_x64.exe Pas de fichier
FirewallRules: [{57854D0C-EF46-4B8A-955D-FACC7ADD37DE}] => (Allow) C:\Program Files\Trust.Zone VPN Client\trustzone.exe Pas de fichier
FirewallRules: [{1F921803-4A87-4D43-830C-B0751F3423BC}] => (Allow) C:\Program Files\Trust.Zone VPN Client\trustzone_x64.exe Pas de fichier
FirewallRules: [{09DA68AC-6DFD-4FAA-BEF4-DF194486BFE8}] => (Allow) C:\Users\domicoeur\AppData\Roaming\uTorrent\uTorrent.exe Pas de fichier
FirewallRules: [{C44B0E7C-A457-4721-9D55-5786A7782B82}] => (Allow) C:\Users\domicoeur\AppData\Roaming\uTorrent\uTorrent.exe Pas de fichier
FirewallRules: [{1A2A8DF7-4AAC-4BFF-8464-22FF51BE1999}] => (Allow) C:\Program Files\BlueStacks\HD-Player.exe Pas de fichier
FirewallRules: [{AA8FA103-5292-4640-9D4C-4318D0D48A1C}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe Pas de fichier
FirewallRules: [{4F751488-9C16-472C-89DA-52DC77FF53F8}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe Pas de fichier
FirewallRules: [{D3F0DD05-49A7-4675-9678-696114B964ED}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe Pas de fichier
FirewallRules: [{CC6448B9-EDF5-4D21-8221-B22344CFC3E0}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe Pas de fichier
IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site: HKU\.DEFAULT\...\webcompanion.com -> hxxp://webcompanion.com
IE trusted site: HKU\S-1-5-21-2104973056-1472199495-3043253115-1001\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-2104973056-1472199495-3043253115-1001\...\webcompanion.com -> hxxp://webcompanion.com
cmd: ipconfig /flushdns
cmd: netsh advfirewall reset
cmd: netsh advfirewall set allprofiles state on
cmd: netsh winsock reset
Emptytemp:
End::