Start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
EmptyTemp:
Task: {C8F86DFF-498A-41A5-9503-85E1F6257875} - System32\Tasks\PC HelpSoft Driver Updater automatic scan and new device notifications => C:\Program Files (x86)\PC HelpSoft Driver Updater\HDMTray.exe [1894144 2020-03-26] (PC HelpSoft Labs Inc -> PC HelpSoft) <==== ATTENTION
HKLM-x32\...\Run: [] => [X]
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_131\bin\ssv.dll [2017-07-07] (Oracle America, Inc. -> Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-07-07] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\ssv.dll [2017-04-23] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-04-23] (Oracle America, Inc. -> Oracle Corporation)
Toolbar: HKLM-x32 - PDF Architect 5 Toolbar - {84F23192-A475-4038-B5C0-8584777F2DF4} - C:\Program Files (x86)\PDF Architect 5\creator-ie-plugin.dll [2017-02-10] (pdfforge GmbH -> pdfforge GmbH)
FF Extension: (Protection Web Avira) - C:\Users\Muller\AppData\Roaming\Mozilla\Firefox\Profiles\frJDfj6B.default\Extensions\abs@avira.com.xpi [2017-04-16] [UpdateUrl:hxxps://download.avira.com/package/abs/firefox/update-webext.rdf]
FF Extension: (Web Developer) - C:\Users\Muller\AppData\Roaming\Mozilla\Firefox\Profiles\frJDfj6B.default\Extensions\{c45c406e-ab73-11d8-be73-000a95be3b12}.xpi [2020-03-25]
FF Extension: (Pas de nom) - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi [non trouvé(e)]
FF Plugin: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-07-07] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-07-07] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-04-23] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-04-23] (Oracle America, Inc. -> Oracle Corporation)
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
S2 CorsairGamingAudioConfig; C:\Windows\System32\CorsairGamingAudioCfgService64.exe [X]
S3 cpuz138; C:\Users\Muller\AppData\Local\Temp\cpuz138\cpuz138_x64.sys [27320 2020-06-07] (CPUID -> CPUID) <==== ATTENTION
2020-05-14 21:10 - 2020-05-14 21:10 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin
2020-05-14 21:10 - 2020-05-14 21:10 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2020-05-14 21:10 - 2020-05-14 21:10 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2020-05-14 21:10 - 2020-05-14 21:10 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2020-05-14 21:10 - 2020-05-14 21:10 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2020-05-14 21:10 - 2020-05-14 21:10 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2020-05-14 21:10 - 2020-05-14 21:10 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2020-05-14 21:10 - 2020-05-14 21:10 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2020-05-14 21:10 - 2020-05-14 21:10 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin
2020-05-14 21:10 - 2020-05-14 21:10 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin
2020-05-14 21:10 - 2020-05-14 21:10 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin
2020-05-14 21:10 - 2020-05-14 21:10 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
Folder: C:\temp
C:\Users\Muller\AppData\Local\file__0.localstorage
C:\Users\Muller\AppData\Local\oobelibMkey.log
C:\Users\Muller\AppData\Local\updater.log
AlternateDataStreams: C:\ProgramData\TEMP:ADAB671B [159]
FirewallRules: [{5BD6306D-3AC3-4743-B18A-9D46FCFF8440}] => (Allow) C:\Program Files\BlueStacks\HD-Player.exe => Pas de fichier
FirewallRules: [TCP Query User{4049536E-9376-467D-81E6-F2B7470FD81E}C:\games\world_of_warships\wowslauncher.exe] => (Allow) C:\games\world_of_warships\wowslauncher.exe => Pas de fichier
FirewallRules: [UDP Query User{7DA49039-ED70-4775-AA82-56FA4C62EF30}C:\games\world_of_warships\wowslauncher.exe] => (Allow) C:\games\world_of_warships\wowslauncher.exe => Pas de fichier
C:\Windows\Temp\*.*
C:\Users\CurrentUserName\AppData\Local\Temp\*.*
cmd: ipconfig /flushdns
CMD: netsh advfirewall reset
end::