start::
closeprocesses:
createrestorepoint:
AS: Avira Antivirus (Enabled - Up to date) {33CF8AA2-FA06-4AD4-98AB-332D53DD7FFB}
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ContextMenuHandlers3: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> Pas de fichier
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier
AlternateDataStreams: C:\Users\Serge\justif.jpeg:3or4kl4x13tuuug3Byamue2s4b [85]
AlternateDataStreams: C:\Users\Serge\justif.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
AlternateDataStreams: C:\Users\Serge\msa.jpeg:3or4kl4x13tuuug3Byamue2s4b [85]
AlternateDataStreams: C:\Users\Serge\msa.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
AlternateDataStreams: C:\Users\Serge\REMISE CHQ 21 AOUT 2019.jpeg:3or4kl4x13tuuug3Byamue2s4b [85]
AlternateDataStreams: C:\Users\Serge\REMISE CHQ 21 AOUT 2019.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.61\Installer\chrmstp.exe [2020-05-28] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->
GroupPolicy: Restriction - Chrome <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
HKU\S-1-5-21-4144143443-573726039-2838408097-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
Toolbar: HKLM - Pas de nom - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - Pas de fichier
CHR Notifications: Default -> hxxps://bestdealfor.life; hxxps://www.doctissimo.fr; hxxps://www.dossierfamilial.com; hxxps://www.joptimisemonsite.fr; hxxps://www.obtenezemails.com; hxxps://www.pinterest.fr; hxxps://www.youtube.com
CHR RestoreOnStartup: Default -> "hxxp://www.trovi.com/?gd=&ctid=CT3324425&octid=EB_ORIGINAL_CTID&ISID=MDF72D9C0-AB00-466B-B368-CCF12D57EDB2&SearchSource=55&CUI=&UM=6&UP=SP332E6E07-04E6-4D48-80C3-ED9C1DD81986&SSPV="
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
2020-05-18 19:36 - 2018-06-22 11:40 - 000000000 ____D C:\Program Files (x86)\Avira
2020-05-18 15:45 - 2018-06-22 11:40 - 000000000 ____D C:\ProgramData\Avira
Task: {37DD9896-403A-4842-91DE-7F251AF590F3} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Pas de fichier <==== ATTENTION
Task: {6558F0B3-630C-4ECE-A41B-312AF2416C79} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Pas de fichier <==== ATTENTION
Task: {6A3DA882-082D-430D-95F6-B49CB6437343} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Pas de fichier <==== ATTENTION
Task: {705646AC-C4F5-43D9-8EA3-732F186028CF} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Pas de fichier <==== ATTENTION
Task: {75CC1514-904C-41C5-9A20-12F6DE3A31DC} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Pas de fichier <==== ATTENTION
Task: {7CC74156-8D21-4B33-96D6-358E269BAF5D} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Pas de fichier <==== ATTENTION
Task: {7FDE2A85-0851-412A-AC84-D83F6D54FFC2} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Pas de fichier <==== ATTENTION
Task: {99ADD4AF-4B5B-4FDD-A8C4-713C35CC7ADC} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Pas de fichier <==== ATTENTION
Task: {A7E6EE22-AAEB-40ED-AFEC-1A683E54B65D} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
Task: {CEC3423B-DA48-49FF-ADFC-F389C854E991} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Pas de fichier <==== ATTENTION
Task: {F4FE0AD1-21C3-4E9F-A7EB-A6719CA995CB} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Pas de fichier <==== ATTENTION
Task: {F99B0909-5B94-41CB-9DA0-29778C01F0EB} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Pas de fichier <==== ATTENTION
cmd: md C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database
cmd: ipconfig /flushdns
hosts:
cmd: netsh advfirewall reset
emptytemp:
end::