start::
CreateRestorePoint:
CloseProcesses:
RemoveProxy:
Task: {4B636FA8-6488-468D-88E4-7E98E91B18F9} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe
HKU\S-1-5-21-3094376551-586335632-2217792166-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer17win10.msn.com/?pc=ACTE
SearchScopes: HKU\S-1-5-21-3094376551-586335632-2217792166-1001 -> DefaultScope {0707532E-824D-43F5-AF0F-573C45682CDC} URL =
SearchScopes: HKU\S-1-5-21-3094376551-586335632-2217792166-1001 -> {48173168-6B59-4B40-BAAC-49F1A3D74BB8} URL =
CHR HKU\S-1-5-21-3094376551-586335632-2217792166-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [gpggceimbegdiddifklmeponnmkppfho]
CHR HKU\S-1-5-21-3094376551-586335632-2217792166-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ojfilbbecboffgonioffpjjhcobjahoe]
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier
IE trusted site: HKU\S-1-5-21-3094376551-586335632-2217792166-1001\...\sharepoint.com -> hxxps://etuunivstetienne-files.sharepoint.com
EmptyTemp:
cmd: md C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database
cmd: DISM /Online /Cleanup-image /Restorehealth
end::