start::
CreateRestorePoint:
CloseProcesses:
Hosts:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-295255132-320686632-1324357839-1001\...\Run: [ToolwizCareFree] => C:\Program Files (x86)\ToolwizCareFree\ToolwizCares.exe [5270360 2020-05-31] (Igloo systems Inc. -> Toolwiz)
C:\Program Files (x86)\ToolwizCareFree
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.97\Installer\chrmstp.exe [2020-06-15] (Google LLC -> Google LLC)
GroupPolicy: Restriction - Chrome <==== ATTENTION
GroupPolicy\User: Restriction ? <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {91595EA5-BAF5-4E87-A2C5-2C7551171E8C} - System32\Tasks\ToolwizCareFree => C:\Program Files (x86)\ToolwizCareFree\ToolwizCares.exe [5270360 2020-05-31] (Igloo systems Inc. -> Toolwiz)
Toolbar: HKLM - Pas de nom - {F053C368-5458-45B2-9B4D-D8914BDDDBFF} - Pas de fichier
Toolbar: HKLM-x32 - TextAloud Toolbar - {F053C368-5458-45B2-9B4D-D8914BDDDBFF} - Pas de fichier
Edge Notifications: Default -> hxxps://maaf-by.accengage.net; hxxps://meet.google.com; hxxps://ocsnext.ebay.fr; hxxps://serge-forumactif-com.forumactif.com; hxxps://www.conrad.fr; hxxps://www.naturabuy.fr; hxxps://www.wish.com; hxxps://www.youtube.com
Edge HomePage: Default -> hxxps://www.google.fr/search?q=VIADUC+METALLIQUE+A+ARCHES+REF2581&ie=UTF-8&oe=
Edge Extension: (WOT: Web of Trust, Évaluation de la réputation de sites Web) - C:\Users\Jean Louis\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2020-06-10]
Edge HKU\S-1-5-21-295255132-320686632-1324357839-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [elhpdacimkjpccooodognopfhbdgnpbk]
FFF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\kl_prefs_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.js [2020-05-10] <==== ATTENTION (Pointe vers un fichier *.cfg)
FF ExtraCheck: C:\Program Files\mozilla firefox\kl_config_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.cfg [2020-05-10] <==== ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [obcnimnkkpdkbfnnoagjogdollcfnidj]
OPR Extension: (Pas de nom) - C:\Users\Jean Louis\AppData\Roaming\Opera Software\Opera Stable\Extensions\bbkekonodcdmedgffkkbgmnnekbainbg [2019-05-07]
OPR Extension: (Pas de nom) - C:\Users\Jean Louis\AppData\Roaming\Opera Software\Opera Stable\Extensions\bopfaehpakahokaelnomggbohfbimcia [2019-05-07]
OPR Extension: (Pas de nom) - C:\Users\Jean Louis\AppData\Roaming\Opera Software\Opera Stable\Extensions\hnjalnkldgigidggphhmacmimbdlafdo [2019-05-07]
OPR Extension: (Pas de nom) - C:\Users\Jean Louis\AppData\Roaming\Opera Software\Opera Stable\Extensions\jggobmlojchhlngdhmmdghgganciigof [2019-05-07]
OPR Extension: (Pas de nom) - C:\Users\Jean Louis\AppData\Roaming\Opera Software\Opera Stable\Extensions\kccohkcpppjjkkjppopfnflnebibpida [2019-05-07]
OPR Extension: (Pas de nom) - C:\Users\Jean Louis\AppData\Roaming\Opera Software\Opera Stable\Extensions\kipjbhgniklcnglfaldilecjomjaddfi [2019-05-07]
OPR Extension: (Pas de nom) - C:\Users\Jean Louis\AppData\Roaming\Opera Software\Opera Stable\Extensions\mchdgimobfnilobnllpdnompfjkkfdmi [2019-05-07]
OPR Extension: (Pas de nom) - C:\Users\Jean Louis\AppData\Roaming\Opera Software\Opera Stable\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2019-05-07]
OPR Extension: (Pas de nom) - C:\Users\Jean Louis\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2019-05-07]
OPR Extension: (Pas de nom) - C:\Users\Jean Louis\AppData\Roaming\Opera Software\Opera Stable\Extensions\okolehhdmfccanphdbibhgjmkgbgbdif [2019-05-07]
OPR Extension: (Pas de nom) - C:\Users\Jean Louis\AppData\Roaming\Opera Software\Opera Stable\Extensions\pphjpkjjljnllpnebififokmoejkeahp [2019-05-07]
2020-07-23 14:22 - 2020-07-23 14:27 - 000000000 ____D C:\AVG_Remover
CustomCLSID: HKU\S-1-5-21-295255132-320686632-1324357839-1001_Classes\CLSID\{75f92b33-bbaa-b4b4-04ac-a7c07959e5a66}\InprocServer32 -> 0xABCDF2F44D70D501240CF9C308C6D501020000000900000000000000 => Pas de fichier
CustomCLSID: HKU\S-1-5-21-295255132-320686632-1324357839-1001_Classes\CLSID\{9486aaf1-0930-362a-962d-8e6908739c817}\InprocServer32 -> 0x8C08A01D4298D4015B49F8C308C6D501030000001800000000000000 => Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Pas de fichier
ContextMenuHandlers1: [ANotepad++64] -> [CC]{B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> Pas de fichier
ContextMenuHandlers1: [FilExileShlExt] -> [CC]{37D0B08A-2D0E-4A2E-8C8D-B2CB52BA81AC} => -> Pas de fichier
ContextMenuHandlers1: [SimpleShlExt] -> [CC]{45203D3B-3D73-4497-8AFE-D29950AC6C55} => -> Pas de fichier
ContextMenuHandlers1: [TextAloud] -> [CC]{BF31B0FB-AE0E-488F-BFD6-416FA2F9915F} => -> Pas de fichier
ContextMenuHandlers2: [SimpleShlExt] -> [CC]{45203D3B-3D73-4497-8AFE-D29950AC6C55} => -> Pas de fichier
ContextMenuHandlers4: [SimpleShlExt] -> [CC]{45203D3B-3D73-4497-8AFE-D29950AC6C55} => -> Pas de fichier
AlternateDataStreams: C:\ProgramData\TEMP:6DAA43DB [195]
C:\Windows\Temp\*.*
C:\Users\CurrentUserName\AppData\Local\Temp\*.*
cmd: ipconfig /flushdns
end::