start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {427B32E1-DB79-4D35-BC09-2256417343EE} - System32\Tasks\{BBD5200C-940D-4D1F-B3DE-81522D85B53E} => C:\WINDOWS\system32\pcalua.exe -a
Task: {6A67C9B8-9A8B-45A1-8496-A007DA2FD9D7} - System32\Tasks\{09F8CCA5-1E2C-4897-89BF-73086BA3B1FF} => C:\WINDOWS\system32\pcalua.exe -a
Task: {70121575-DDF9-4257-91E5-C67568E6B24F} - System32\Tasks\{10CD5F73-F070-4B14-89B5-B63BA2FA6262} => C:\WINDOWS\system32\pcalua.exe -a
Task: {B85A52DF-8315-4ABE-90CB-82566505EDE6} - System32\Tasks\USER_ESRV_SVC_QUEENCREEK => "C:\WINDOWS\System32\Wscript.exe" //B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\x64\task.vbs"
Task: {BBBE9070-7218-4BA4-A0EF-544EE10B0607} - System32\Tasks\{B7C9D620-A569-462E-BEBE-D8F85F6D1CFA} => C:\WINDOWS\system32\pcalua.exe -a
Task: {DD497A1F-592B-4B99-A264-4DD045D42410} - System32\Tasks\{166286A3-6ACB-42FD-98AC-71198C180A21} => C:\WINDOWS\system32\pcalua.exe -a
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1725595267-1234763938-117686443-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Edge Notifications: Default -> hxxps://lpgengine.net; hxxps://wvvw.filmstoon.xyz; hxxps://www.filmstoon.pro
Edge StartupUrls: Default -> "hxxps://www.google.fr/webhp?hl=fr&sa=X&ved=0ahUKEwjZ6_qDruTpAhWcD2MBHYSGCQsQPAgH"
Edge Extension: (Urban Free VPN proxy Unblocker - Best VPN) - C:\Users\ben et laura\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\nimlmejbmnecnaghgmbahmbaddhjbecg
FF Extension: (Urban Free VPN proxy Unblocker - Best VPN) - C:\Users\ben et laura\AppData\Roaming\Mozilla\Firefox\Profiles\14pxigps.default-1587608314921\Extensions\{fca67f41-776b-438a-9382-662171858615}.xpi
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl]
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [52000 2015-01-13]
R1 bdfwfpf; C:\Program Files\adaware\adaware antivirus\AdAwareProxyEngine\1.0.0.8\bdfwfpf.sys
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
HKLM\...\StartupApproved\Run: => "AvastUI.exe"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKU\S-1-5-21-1725595267-1234763938-117686443-1001\...\StartupApproved\Run: => "PeerBlock"
HKU\S-1-5-21-1725595267-1234763938-117686443-1001\...\StartupApproved\Run: => "uTorrent"
HKU\S-1-5-21-1725595267-1234763938-117686443-1001\...\StartupApproved\Run: => "CyberGhost"
EmptyTemp:
cmd: ipconfig /flushdns
cmd: sfc /scannow
end::