start::
closeprocesses:
createrestorepoint:
ContextMenuHandlers4-x32: [Kaspersky Anti-Virus 18.0.0] -> {FF48AD48-74C7-4260-B385-FAEB80947450} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 18.0.0\shellex.dll -> Pas de fichier
Task: {7991AE59-F699-4195-8A47-844826271762} - System32\Tasks\ChromiumUpdateTaskMachineCore => C:\Program Files (x86)\Chromium\Update\ChromiumUpdate.exe <==== ATTENTION
Task: {B0A3CBBF-0A64-4CE1-AB84-176D74BDD8AB} - System32\Tasks\ChromiumUpdateTaskMachineUA => C:\Program Files (x86)\Chromium\Update\ChromiumUpdate.exe <==== ATTENTION
C:\Program Files (x86)\Chromium
SearchScopes: HKU\S-1-5-21-648945572-3327687920-132717809-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=shnl&hsimp=yhs-001&type=c11070775709cccc0934ff56884¶m1=IE¶m2=4¶m3=campaignID%3D162%26UserID%3D2091335865¶m4=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&p={searchterms}
SearchScopes: HKU\S-1-5-21-648945572-3327687920-132717809-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=shnl&hsimp=yhs-001&type=c11070775709cccc0934ff56884¶m1=IE¶m2=4¶m3=campaignID%3D162%26UserID%3D2091335865¶m4=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&p={searchTerms}
CHR HKLM-x32\...\Chrome\Extension: [cifnddnffldieaamihfkhkdgnbhfmaci] - C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\ChromeAddin\ChromeAddin.crx <non trouvé(e)>
2020-08-18 11:29 - 2019-08-29 23:23 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVAST Software
cmd: sfc /scannow
emptytemp:
end::