start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
HKU\S-1-5-21-3556661858-2793891131-1438561949-1001\...\Run: [cacaoweb] => C:\Users\Ninon Pinsard\AppData\Roaming\cacaoweb\cacaoweb.exe
Task: {64F7FB8A-B341-474D-8571-352A7F8984B7} - System32\Tasks\App Explorer => C:\Users\Ninon Pinsard\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe
Task: {6FEDD7CD-EE8B-455A-9650-82CEBC25F2E3} - System32\Tasks\McAfee\McAfee Idle Detection Task => {ABCDCA3B-DE6B-5A7C-B132-6D7CBA63E5C5} C:\Program Files\Common Files\McAfee\TaskScheduler\McAMTaskAgent.exe
Task: {B1DFA2AE-40C1-4D48-8FCA-D0F58EDB1181} - System32\Tasks\McAfee\DAD.Execute.Updates => C:\Program Files\Common Files\McAfee\DynamicAppDownloader\1.4.153\DADUpdater.exe
Task: {C00ACF51-8613-4B90-BA83-10BC7999AC7C} - System32\Tasks\McAfeeLogon => C:\Program Files\Common Files\mcafee\platform\McUICnt.exe
FF Extension: (cacaoweb) - C:\Users\Ninon Pinsard\AppData\Roaming\Mozilla\Firefox\Profiles\8aj4rvcs.default\Extensions\cacaoweb@cacaoweb.org
FF Extension: (McAfee® WebAdvisor) - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
FF Extension: (McAfee Anti-Spam Thunderbird Extension) - C:\Program Files\McAfee\MSK
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe
R2 McAPExe; C:\Program Files\Common Files\McAfee\VSCore_18_6\McApExe.exe
S3 McAWFwk; C:\Program Files\Common Files\mcafee\actwiz\McAWFwk.exe
R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\3.0.127.0\\McCSPServiceHost.exe
S3 McSecDashboardService; C:\Program Files\McAfeeDashboard\McSecDashboardService.exe
S3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe
R2 mfevtp; C:\Windows\system32\mfevtps.exe
R2 ModuleCoreService; C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe
R2 PEFService; C:\Program Files\Common Files\McAfee\PEF\CORE\PEFService.exe
R3 cfwids; C:\WINDOWS\System32\drivers\cfwids.sys
S3 HipShieldK; C:\WINDOWS\System32\drivers\HipShieldK.sys
R3 mfeaack; C:\WINDOWS\System32\drivers\mfeaack.sys
R3 mfeavfk; C:\WINDOWS\System32\drivers\mfeavfk.sys
R3 mfefirek; C:\WINDOWS\System32\drivers\mfefirek.sys
R0 mfehidk; C:\WINDOWS\System32\drivers\mfehidk.sys
R3 mfencbdc; C:\WINDOWS\System32\DRIVERS\mfencbdc.sys
S3 mfencrk; C:\WINDOWS\System32\DRIVERS\mfencrk.sys
R3 mfeplk; C:\WINDOWS\System32\drivers\mfeplk.sys
R0 mfewfpk; C:\WINDOWS\System32\drivers\mfewfpk.sys
2020-09-14 17:28 - 2020-09-14 17:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2020-09-14 13:50 - 2020-09-14 13:53 - 000000000 ____D C:\Users\Ninon Pinsard\Desktop\vofuxu
2020-09-09 13:37 - 2018-07-09 22:01 - 000000000 ____D C:\Program Files (x86)\McAfee
2020-09-09 13:34 - 2019-03-25 20:54 - 000000000 ____D C:\Program Files\McAfeeDashboard
ContextMenuHandlers1: [McCtxMenuFrmWrk] -> {CCA9EFD3-29ED-430A-BA6D-E6BBFF0A60C2} => c:\Program Files\mcafee\msc\McCtxMenuFrmWrk.dll
ContextMenuHandlers6: [McCtxMenuFrmWrk] -> {CCA9EFD3-29ED-430A-BA6D-E6BBFF0A60C2} => c:\Program Files\mcafee\msc\McCtxMenuFrmWrk.dll
AlternateDataStreams: C:\Users\Ninon Pinsard\Downloads\Teams_windows_x64_s_8D853D5A57CBCFE-7-0_.exe:SmartScreen [7]
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfemms => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeplk => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeplk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Service"
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-3556661858-2793891131-1438561949-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com/
BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll
BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll
EmptyTemp:
cmd: ipconfig /flushdns
cmd: netsh winsock reset
cmd: md C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database
cmd: DISM /Online /Cleanup-image /Restorehealth
cmd: sfc /scannow
end::