start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{73FA19D0-2D75-11D2-995D-00C04F98BBC9}] ->
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {61276310-4342-4A96-8FCB-786413D0F23B} - System32\Tasks\avastBCLRestartS-1-5-21-385812461-3628370256-2887409038-1000 => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Task: {72C14844-C2C5-447F-BAE4-2BB3BEBC76BD} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\19.0.0.128\WSCStub.exe
Task: {9954B244-97E8-449A-A894-D1D6BD05461F} - System32\Tasks\avastBCLRestart_chrome.exe => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Task: {AA2936CB-DF12-4163-B037-A322D7CA984B} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\19.0.0.128\SymErr.exe
Task: {B4A35BEB-F340-4092-A485-879C2919C9AC} - System32\Tasks\{5E0D7EAA-6B3D-4AE2-8A37-D97003667A91} => C:\Users\Slawek\Downloads\uTorrent.exe
Task: {BB02CDCA-9116-49D5-AB9C-B5448ADDCBDE} - System32\Tasks\{56CB0805-37C2-4C98-AAB9-503848B25823} => C:\Windows\system32\pcalua.exe -a "C:\Users\Slawek\AppData\Local\Temp\QZTEMP\Win10 driver\setup.exe" -d "C:\Users\Slawek\AppData\Local\Temp\QZTEMP\Win10 driver"
Task: {EC141E18-A3D1-4336-8DF1-9C020279C121} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {FED496F2-56FF-4207-BEE1-5A0B68903209} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\19.0.0.128\SymErr.exe
SearchScopes: HKLM-x32 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://fr.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPDTDF
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-385812461-3628370256-2887409038-1000 -> {57926A14-DB1B-49AB-A8B4-1611616ABB34} URL = hxxp://www.amazon.fr/s/ref=azs_osd_ieafr?ie=UTF-8&tag=
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - Pas de fichier
Toolbar: HKU\S-1-5-21-385812461-3628370256-2887409038-1000 -> Pas de nom - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Pas de fichier
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Pas de fichier
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <non trouvé(e)>
CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - <pas de Path/update_url>
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [50976 2014-08-11]
2020-08-06 03:34 - 2020-08-06 03:35 - 000002674 _____ C:\WINDOWS\system32\Tasks\Norton WSC Integration
2020-08-06 03:34 - 2020-08-06 03:35 - 000002578 _____ C:\WINDOWS\system32\Tasks\RMCreator
2020-08-06 03:34 - 2020-08-06 03:35 - 000002558 _____ C:\WINDOWS\system32\Tasks\avastBCLRestartS-1-5-21-385812461-3628370256-2887409038-1000
2020-08-06 03:34 - 2020-08-06 03:35 - 000002542 _____ C:\WINDOWS\system32\Tasks\RealUpgradeScheduledTaskS-1-5-21-385812461-3628370256-2887409038-1000
2020-08-06 03:34 - 2020-08-06 03:35 - 000002490 _____ C:\WINDOWS\system32\Tasks\avastBCLRestart_chrome.exe
2020-08-06 03:34 - 2020-08-06 03:34 - 000000000 ____D C:\WINDOWS\system32\Tasks\Norton Internet Security
2020-08-06 03:34 - 2020-08-06 03:34 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVAST Software
2020-08-03 14:25 - 2020-08-03 14:25 - 000000000 ____D C:\Users\Slawek\AppData\Local\{303CF1CE-F0BB-4105-9C51-3B630A286B2A}
2020-08-02 12:45 - 2020-08-02 12:45 - 000000000 ____D C:\Users\Slawek\AppData\Local\{9D6CEAE6-2F12-4CC5-B624-546D7A5890D4}
2020-08-06 03:44 - 2015-10-24 10:47 - 000000000 ____D C:\WINDOWS\system32\豀ȥ
2020-08-06 03:44 - 2015-10-24 10:43 - 000000000 ____D C:\WINDOWS\system32\豀Ȣ
2016-09-14 20:21 - 2016-09-14 20:21 - 000000000 _____ () C:\Users\Slawek\ZHPCleaner.exe
2017-08-31 11:49 - 2017-08-31 12:00 - 000000000 _____ () C:\Users\Slawek\ZHPDiag3.exe
2017-03-02 09:48 - 2017-03-02 09:48 - 000000000 _____ () C:\Users\Slawek\AppData\Local\{41854025-0E0B-493C-8D2D-BB6BCD017098}
2016-09-14 18:20 - 2016-09-14 18:21 - 000000000 _____ () C:\Users\Slawek\AppData\Local\{9A677B2B-4C86-4E4C-ABF7-3354AF089CBD}
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
EmptyTemp:
cmd: ipconfig /flushdns
cmd: netsh advfirewall reset
end::