start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
GroupPolicy: Restriction ?
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM-x32\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]
CHR StartupUrls: Default -> "hxxp://search.conduit.com/?gd=&ctid=CT3312375&octid=EB_ORIGINAL_CTID&ISID=&SearchSource=55&CUI=&UM=5&UP=SP827EFBC0-A092-4836-AA22-B64C7ECF374E&SSPV=
2020-09-09 13:24 - 2020-09-09 13:24 - 004434320 _____ (Avira Operations GmbH & Co. KG) C:\Users\Raph\Downloads\avira_fr_sptl1_474212173-1599611330__phpws (1).exe
2020-09-09 02:38 - 2020-09-09 02:38 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avira
2020-09-09 02:29 - 2020-09-09 18:08 - 000000000 ____D C:\Program Files (x86)\Avira
2020-09-09 02:29 - 2020-09-09 02:38 - 000000000 ____D C:\ProgramData\Avira
2020-09-09 02:29 - 2020-09-09 02:31 - 000000000 ____D C:\Users\Raph\AppData\Local\Avira
2020-09-09 02:28 - 2020-09-09 02:28 - 004434320 _____ (Avira Operations GmbH & Co. KG) C:\Users\Raph\Downloads\avira_fr_sptl1_474212173-1599611330__phpws.exe
2020-09-01 13:24 - 2020-09-07 21:36 - 000000000 ____D C:\Users\Raph\AppData\LocalLow\uTorrent
2020-09-07 23:41 - 2018-05-26 19:35 - 000000000 ____D C:\Users\Raph\AppData\Roaming\uTorrent
2020-09-07 21:36 - 2019-03-22 13:44 - 000000000 ____D C:\Users\Raph\AppData\Local\BitTorrentHelper
CustomCLSID: HKU\S-1-5-21-1765794696-2239269488-3900714173-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\Raph\AppData\Local\Microsoft\OneDrive\18.025.0204.0009\amd64\FileSyncShell64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-1765794696-2239269488-3900714173-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\Raph\AppData\Local\Microsoft\OneDrive\18.025.0204.0009\amd64\FileSyncShell64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-1765794696-2239269488-3900714173-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\Raph\AppData\Local\Microsoft\OneDrive\18.025.0204.0009\amd64\FileSyncShell64.dll => Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Pas de fichier
EmptyTemp:
StartPowershell:
cmd: ipconfig /flushdns
cmd: md C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database
cmd: DISM /Online /Cleanup-image /Restorehealth
cmd: netsh winsock reset
cmd: netsh advfirewall reset
EndPowershell:
end::