start::
CreateRestorePoint:
CloseProcesses:
HKLM\...\Run: [NWEReboot] => [X]
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKLM\Software\Microsoft\Active Setup\Installed Components: [{30C521FB-255B-46C8-9F0D-EE5AE371C9AA}] -> C:\Program Files\AVAST Software\Browser\Application\85.0.5674.83\Installer\chrmstp.exe [2020-09-10] (Avast Software s.r.o. -> AVAST Software)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\85.0.4183.102\Installer\chrmstp.exe [2020-09-08] (Google LLC -> Google LLC)
C:\Program Files\AVAST Software
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {7CA243DB-3217-495B-89C5-F7667F67F3F9} - System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) => C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe [1910664 2020-08-31] (Avast Software s.r.o. -> AVAST Software)
Task: {820FD607-B965-45CD-BA00-2B9795FD7782} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
Task: {B1B5DE6C-8C7E-490B-BC8D-65A73FDCB485} - System32\Tasks\Avast Secure Browser Heartbeat Task (Logon) => C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe [1910664 2020-08-31] (Avast Software s.r.o. -> AVAST Software)
Task: {D8253676-0B75-4976-A9B8-534648766E8C} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {DA0232B7-82E1-4C34-AB02-3404475FC123} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-05-18] (AVAST Software s.r.o. -> AVAST Software)
Task: {E9A02B2F-A10A-484B-B6C1-863B415EDA25} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-05-18] (AVAST Software s.r.o. -> AVAST Software)
CHR Extension: (Avast SafePrice | Comparaison, offres, coupons) - C:\Users\renaud\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2020-03-19]
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
S2 avast; C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-05-18] (AVAST Software s.r.o. -> AVAST Software)
S3 avastm; C:\Program Files\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-05-18] (AVAST Software s.r.o. -> AVAST Software)
S3 AvastSecureBrowserElevationService; C:\Program Files\AVAST Software\Browser\Application\85.0.5674.83\elevation_service.exe [1080640 2020-08-31] (Avast Software s.r.o. -> AVAST Software)
2020-09-12 21:29 - 2020-09-12 21:27 - 011635568 _____ (AVAST Software) C:\Users\renaud\Desktop\avastclear.exe
2020-09-12 21:27 - 2020-09-12 21:27 - 011635568 _____ (AVAST Software) C:\Users\renaud\Downloads\avastclear.exe
2020-09-13 16:19 - 2017-03-19 18:45 - 000000000 ____D C:\ProgramData\AVAST Software
2020-09-13 16:18 - 2017-03-19 18:47 - 000000000 ____D C:\Program Files\AVAST Software
2020-09-10 17:16 - 2018-05-18 06:06 - 000000000 ____D C:\Users\renaud\AppData\Local\AVAST Software
2020-09-10 17:14 - 2019-04-17 17:32 - 000003720 _____ C:\Windows\system32\Tasks\Avast Secure Browser Heartbeat Task (Hourly)
2020-09-10 17:14 - 2018-05-18 06:08 - 000002373 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk
2020-09-06 18:11 - 2017-03-19 18:52 - 000000000 ____D C:\Windows\system32\Tasks\AVAST Software
2017-02-22 21:24 - 2017-02-22 21:24 - 000000000 _____ () C:\Users\renaud\AppData\Local\AtStart.txt
2017-02-22 21:24 - 2017-02-22 21:24 - 000000000 _____ () C:\Users\renaud\AppData\Local\DSwitch.txt
2017-02-22 21:24 - 2017-02-22 21:24 - 000000000 _____ () C:\Users\renaud\AppData\Local\QSwitch.txt
2018-08-04 18:58 - 2018-08-04 18:58 - 000000000 _____ () C:\Users\renaud\AppData\Local\{19EE4CE7-04E8-43B2-9D4F-37BEBE49932B}
2020-07-02 16:58 - 2020-07-02 16:58 - 000000000 _____ () C:\Users\renaud\AppData\Local\{443C0787-C3A6-4867-AE05-76FC9B18EC21}
2020-05-25 17:56 - 2020-05-25 17:56 - 000000000 _____ () C:\Users\renaud\AppData\Local\{514CF2B8-4FD5-4393-87F7-C8B8F1FBAFA0}
2020-06-13 09:52 - 2020-06-13 09:52 - 000000000 _____ () C:\Users\renaud\AppData\Local\{54A585AC-F93B-4EAD-B337-D7AF422D513F}
2020-06-13 09:49 - 2020-06-13 09:49 - 000000000 _____ () C:\Users\renaud\AppData\Local\{6A99A500-B22C-415F-988A-7A6C1A4A5C36}
2020-06-29 18:08 - 2020-06-29 18:08 - 000000000 _____ () C:\Users\renaud\AppData\Local\{D3F44120-C164-47BC-B8C0-71D4D84B17F4}
2020-06-29 18:07 - 2020-06-29 18:07 - 000000000 _____ () C:\Users\renaud\AppData\Local\{ED9B1DAE-6039-446A-ADBE-5917CF07F0FF}
Avast Secure Browser (HKLM\...\Avast Secure Browser) (Version: 85.0.5674.83 - Auteurs de Avast Secure Browser)
Browser-Security (HKLM\...\Browser-Security) (Version: 1.2.0.0 - Vondos Media GmbH) <==== ATTENTION
CustomCLSID: HKU\S-1-5-21-3622059256-196897111-2602523621-1000_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\renaud\AppData\Local\Microsoft\OneDrive\17.3.6743.1212\FileCoAuthLib.dll => Pas de fichier
IE trusted site: HKU\S-1-5-21-3622059256-196897111-2602523621-1000\...\sharepoint.com -> hxxps://rpns2-files.sharepoint.com
FirewallRules: [{0160C130-724A-4E0A-95E2-FEAAA100CD0C}] => (Allow) C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe (Avast Software s.r.o. -> AVAST Software)
C:\Windows\Temp\*.*
C:\Users\CurrentUserName\AppData\Local\Temp\*.*
end::