start::
CreateRestorePoint:
CloseProcesses:
Hosts:
BootExecute: autocheck autochk * sdnclean64.exe
GroupPolicy: Restriction ? <==== ATTENTION
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
HKU\S-1-5-21-282646040-41399087-47231379-1001\...\MountPoints2: {2fc9f223-48dc-11e4-825b-806e6f6e6963} - "D:\AUTOPLAY.EXE" id=10000017000015000002 ver=1.0.0.0
Task: {02967387-5455-4416-9296-517D56B91A9C} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe
C:\Program Files\Common Files\AVAST Software
Task: {8ECA6570-2983-4D93-9680-C40C3B7131A3} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
C:\Program Files\AVAST Software
Task: {D90FD2C6-296D-4645-8503-A5FF5049E554} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(1): schtasks.exe -> /Change /TN "\CCleaner Update" /ENABLE
Task: {D90FD2C6-296D-4645-8503-A5FF5049E554} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(2): schtasks.exe -> /Change /TN "\CCleanerSkipUAC" /ENABLE
Task: {D90FD2C6-296D-4645-8503-A5FF5049E554} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(3): schtasks.exe -> /Change /TN "\GoogleUpdateTaskMachineCore" /ENABLE
Task: {D90FD2C6-296D-4645-8503-A5FF5049E554} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(4): schtasks.exe -> /Change /TN "\GoogleUpdateTaskMachineUA" /ENABLE
Task: {D90FD2C6-296D-4645-8503-A5FF5049E554} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(5): schtasks.exe -> /Change /TN "\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132" /ENABLE
Task: {D90FD2C6-296D-4645-8503-A5FF5049E554} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(6): schtasks.exe -> /Change /TN "\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon" /ENABLE
Task: {D90FD2C6-296D-4645-8503-A5FF5049E554} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(7): schtasks.exe -> /Change /TN "\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473" /ENABLE
Task: {D90FD2C6-296D-4645-8503-A5FF5049E554} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(8): schtasks.exe -> /Change /TN "\OneDrive Standalone Update Task-S-1-5-21-282646040-41399087-47231379-1001" /ENABLE
Task: {D90FD2C6-296D-4645-8503-A5FF5049E554} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(9): schtasks.exe -> /Change /TN "\Optimize Start Menu Cache Files-S-1-5-21-282646040-41399087-47231379-500" /ENABLE
Task: {D90FD2C6-296D-4645-8503-A5FF5049E554} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(10): schtasks.exe -> /Change /TN "\Resolution+ Setting Task" /ENABLE
Task: {D90FD2C6-296D-4645-8503-A5FF5049E554} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(11): schtasks.exe -> /Change /TN "\RTKCPL" /ENABLE
Task: {D90FD2C6-296D-4645-8503-A5FF5049E554} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(12): schtasks.exe -> /Change /TN "\Synaptics TouchPad Enhancements" /ENABLE
Task: {D90FD2C6-296D-4645-8503-A5FF5049E554} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(13): schtasks.exe -> /Change /TN "\AVAST Software\Gaming mode Task Scheduler recovery" /DISABLE
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
2020-05-18 23:05 - 2020-05-18 23:05 - 010936952 _____ (AVAST Software) C:\Users\Admin\Downloads\avastclear.exe
2020-05-17 18:29 - 2020-05-17 18:29 - 000000000 ____D C:\WINDOWS\system32\Tasks\Safer-Networking
2020-05-17 18:28 - 2020-05-18 22:56 - 000000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2020-05-17 18:28 - 2020-05-18 22:53 - 000000000 ____D C:\ProgramData\Spybot - Search & Destroy
2020-05-17 18:19 - 2020-05-17 18:27 - 051725936 _____ (Safer-Networking Ltd. ) C:\Users\Admin\Downloads\spybot-search-destroy_2-6-46_fr_10965.exe
2020-05-17 17:54 - 2020-05-17 17:56 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2020-04-27 16:41 - 2020-05-17 11:01 - 000004264 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update
2020-04-27 16:41 - 2020-05-11 21:16 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2020-05-18 23:14 - 2018-09-29 00:02 - 000000000 ____D C:\Users\Admin\AppData\Roaming\AVAST Software
2020-05-18 23:14 - 2018-09-28 23:21 - 000000000 ____D C:\ProgramData\AVAST Software
2020-05-18 23:16 - 2020-03-18 14:56 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2020-05-17 17:56 - 2020-04-10 11:00 - 000000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ContextMenuHandlers1: [GDContextMenu] -> [CC]{BB02B294-8425-42E5-983F-41A1FA970CD6} => -> Pas de fichier
ContextMenuHandlers4: [GDContextMenu] -> [CC]{BB02B294-8425-42E5-983F-41A1FA970CD6} => -> Pas de fichier
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier
EmptyTemp:
cmd: ipconfig /flushdns
end::