start::
CreateRestorePoint:
CloseProcesses:
AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Avast Antivirus (Disabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-08-17] (Avast Software s.r.o. -> AVAST Software)
C:\Program Files\AVAST Software
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-08-17] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-08-17] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-08-17] (Avast Software s.r.o. -> AVAST Software)
2020-09-21 09:31 - 2020-09-21 09:31 - 000114176 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\_ctypes.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 000172544 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\_elementtree.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 002250240 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\_hashlib.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 000032256 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\_multiprocessing.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 000046080 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\_psutil_windows.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 000047616 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\_socket.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 002819584 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\_ssl.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 000026112 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\_yappi.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 000080896 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\bz2.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 000016384 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\common.time34.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 000007680 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\hashobjs_ext.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 000301568 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\PIL._imaging.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 000168448 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\pyexpat.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 001084416 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\pysqlite2._sqlite.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 000548864 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\pythoncom27.dll
2020-09-21 09:31 - 2020-09-21 09:31 - 000137728 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\pywintypes27.dll
2020-09-21 09:31 - 2020-09-21 09:31 - 000010752 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\select.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 000020992 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\thumbnails_ext.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 000689664 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\unicodedata.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 000119808 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\usb_ext.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 000128512 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\win32api.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 000438784 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\win32com.shell.shell.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 000011776 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\win32crypt.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 000023040 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\win32event.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 000149504 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\win32file.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 000223232 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\win32gui.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 000048128 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\win32inet.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 000029696 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\win32pdh.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 000027648 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\win32pipe.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 000044032 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\win32process.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 000020480 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\win32profile.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 000136192 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\win32security.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 000026624 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\win32ts.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 000034816 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\windows.conditional.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 000038400 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\windows.connectivity.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 000071680 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\windows.device_monitor.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 000109056 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\windows.volumes.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 000020480 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\windows.winwrap.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 001325056 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\wx._controls_.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 001489408 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\wx._core_.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 001007104 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\wx._gdi_.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 000103424 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\wx._html2.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 000916992 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\wx._misc_.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 001039872 _____ () [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\wx._windows_.pyd
2020-09-21 09:31 - 2020-09-21 09:31 - 000202240 _____ (wxWidgets development team) [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\wxbase30u_net_vc90_x64.dll
2020-09-21 09:31 - 2020-09-21 09:31 - 002831872 _____ (wxWidgets development team) [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\wxbase30u_vc90_x64.dll
2020-09-21 09:31 - 2020-09-21 09:31 - 001654784 _____ (wxWidgets development team) [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\wxmsw30u_adv_vc90_x64.dll
2020-09-21 09:31 - 2020-09-21 09:31 - 006542336 _____ (wxWidgets development team) [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\wxmsw30u_core_vc90_x64.dll
2020-09-21 09:31 - 2020-09-21 09:31 - 000773632 _____ (wxWidgets development team) [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\wxmsw30u_html_vc90_x64.dll
2020-09-21 09:31 - 2020-09-21 09:31 - 000137216 _____ (wxWidgets development team) [Fichier non signé] C:\Users\lysit\AppData\Local\Temp\_MEI39682\wxmsw30u_webview_vc90_x64.dll
HKLM\...\.scr: SageThumbsImage.scr => "%1" /S <==== ATTENTION
FirewallRules: [{0B808828-903B-403E-A44F-A1D50ADA9881}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => Pas de fichier
FirewallRules: [{DA515722-6F2C-48C8-A487-09EDC17E66F0}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => Pas de fichier
FirewallRules: [UDP Query User{69BF0655-5F6D-4619-B215-34B30C1E20E1}C:\program files\windowsapps\deezer.62021768415af_4.17.10.0_x86__q7m17pa7q8kj0\app\deezer.exe] => (Allow) C:\program files\windowsapps\deezer.62021768415af_4.17.10.0_x86__q7m17pa7q8kj0\app\deezer.exe => Pas de fichier
FirewallRules: [TCP Query User{6C11DF29-1509-43ED-8990-B39F00D99A8A}C:\program files\windowsapps\deezer.62021768415af_4.17.10.0_x86__q7m17pa7q8kj0\app\deezer.exe] => (Allow) C:\program files\windowsapps\deezer.62021768415af_4.17.10.0_x86__q7m17pa7q8kj0\app\deezer.exe => Pas de fichier
FirewallRules: [UDP Query User{A9D8AEBB-F4C6-43D6-9D97-A7531F6D6015}C:\program files\windowsapps\deezer.62021768415af_4.17.1.0_x86__q7m17pa7q8kj0\app\deezer.exe] => (Allow) C:\program files\windowsapps\deezer.62021768415af_4.17.1.0_x86__q7m17pa7q8kj0\app\deezer.exe => Pas de fichier
FirewallRules: [TCP Query User{57F9612D-65E2-407A-908F-DC13617500D8}C:\program files\windowsapps\deezer.62021768415af_4.17.1.0_x86__q7m17pa7q8kj0\app\deezer.exe] => (Allow) C:\program files\windowsapps\deezer.62021768415af_4.17.1.0_x86__q7m17pa7q8kj0\app\deezer.exe => Pas de fichier
FirewallRules: [UDP Query User{587818DB-EC91-4A94-AFA4-D3B6CCD5855D}C:\program files\windowsapps\deezer.62021768415af_4.17.0.0_x86__q7m17pa7q8kj0\app\deezer.exe] => (Allow) C:\program files\windowsapps\deezer.62021768415af_4.17.0.0_x86__q7m17pa7q8kj0\app\deezer.exe => Pas de fichier
FirewallRules: [TCP Query User{A5DFB01B-CEFB-4363-BA9A-4437C4C45EEF}C:\program files\windowsapps\deezer.62021768415af_4.17.0.0_x86__q7m17pa7q8kj0\app\deezer.exe] => (Allow) C:\program files\windowsapps\deezer.62021768415af_4.17.0.0_x86__q7m17pa7q8kj0\app\deezer.exe => Pas de fichier
FirewallRules: [UDP Query User{4081FA16-5A31-410C-9BB1-B44BD09B63C5}C:\program files\windowsapps\deezer.62021768415af_4.16.3.0_x86__q7m17pa7q8kj0\app\deezer.exe] => (Allow) C:\program files\windowsapps\deezer.62021768415af_4.16.3.0_x86__q7m17pa7q8kj0\app\deezer.exe => Pas de fichier
FirewallRules: [TCP Query User{A550D2A3-1835-4C89-8CF6-8AD31B53010A}C:\program files\windowsapps\deezer.62021768415af_4.16.3.0_x86__q7m17pa7q8kj0\app\deezer.exe] => (Allow) C:\program files\windowsapps\deezer.62021768415af_4.16.3.0_x86__q7m17pa7q8kj0\app\deezer.exe => Pas de fichier
FirewallRules: [{582BC6CC-F79D-4153-89F0-909A64294E03}] => (Block) C:\program files\windowsapps\deezer.62021768415af_4.15.2.0_x86__q7m17pa7q8kj0\app\deezer.exe => Pas de fichier
FirewallRules: [{619D91AB-1698-429E-8438-296D09A01440}] => (Block) C:\program files\windowsapps\deezer.62021768415af_4.15.2.0_x86__q7m17pa7q8kj0\app\deezer.exe => Pas de fichier
FirewallRules: [UDP Query User{ACD9BCD8-EC8C-4349-94BC-74669DD40786}C:\program files\windowsapps\deezer.62021768415af_4.15.2.0_x86__q7m17pa7q8kj0\app\deezer.exe] => (Allow) C:\program files\windowsapps\deezer.62021768415af_4.15.2.0_x86__q7m17pa7q8kj0\app\deezer.exe => Pas de fichier
FirewallRules: [TCP Query User{E2079C98-63B2-4112-BBC4-6E8025C83D6F}C:\program files\windowsapps\deezer.62021768415af_4.15.2.0_x86__q7m17pa7q8kj0\app\deezer.exe] => (Allow) C:\program files\windowsapps\deezer.62021768415af_4.15.2.0_x86__q7m17pa7q8kj0\app\deezer.exe => Pas de fichier
FirewallRules: [{61DA6C72-CA3F-43A5-BF36-1643776D7F98}] => (Block) C:\program files\windowsapps\deezer.62021768415af_4.13.4.0_x86__q7m17pa7q8kj0\app\deezer.exe => Pas de fichier
FirewallRules: [{4A3D3E7A-BD8C-4457-BF0C-8FF30FAE0FFE}] => (Block) C:\program files\windowsapps\deezer.62021768415af_4.13.4.0_x86__q7m17pa7q8kj0\app\deezer.exe => Pas de fichier
FirewallRules: [{E31A5652-9B8F-48CC-AEB6-B7FD7EC5A688}] => (Allow) C:\Program Files\MysticCoder\MysticThumbs\MysticThumbs64.dll => Pas de fichier
FirewallRules: [{AFAC1C85-E273-48D0-8496-7FA06E50D691}] => (Allow) C:\Program Files\MysticCoder\MysticThumbs\MysticThumbs64.dll => Pas de fichier
FirewallRules: [{4C808E85-B9E1-4668-A723-2BE5F2B54697}] => (Allow) C:\Program Files\MysticCoder\MysticThumbs\MysticThumbs32.dll => Pas de fichier
FirewallRules: [{E60D1244-C070-45A3-AC76-1CF595F3A398}] => (Allow) C:\Program Files\MysticCoder\MysticThumbs\MysticThumbs32.dll => Pas de fichier
FirewallRules: [{2A4E45E8-AA71-4608-A026-F94BB77E923D}] => (Allow) C:\Program Files\MysticCoder\MysticThumbs\MysticThumbs.exe => Pas de fichier
FirewallRules: [{23867A76-F6E0-4920-B4D8-2D67B0676488}] => (Allow) C:\Program Files\MysticCoder\MysticThumbs\MysticThumbs.exe => Pas de fichier
FirewallRules: [{447B4D7E-B006-4689-9A19-F03EFBACE8EE}] => (Allow) C:\Program Files\MysticCoder\MysticThumbs\MysticThumbsControlPanel.exe => Pas de fichier
FirewallRules: [{F7FE9A92-D5DD-4272-944C-0E5527175FCF}] => (Allow) C:\Program Files\MysticCoder\MysticThumbs\MysticThumbsControlPanel.exe => Pas de fichier
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe <2>
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\wsc_proxy.exe
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [109160 2020-08-17] (Avast Software s.r.o. -> AVAST Software)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\85.0.4183.102\Installer\chrmstp.exe [2020-09-08] (Google LLC -> Google LLC)
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {10C824BC-44A0-48CB-9514-BEA390E74764} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [3810408 2020-08-17] (Avast Software s.r.o. -> AVAST Software)
Task: {6048D753-42DF-469B-813C-EB5F4D0E8982} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [1741416 2020-09-18] (Avast Software s.r.o. -> Avast Software)
Task: {EAFB28F2-7B30-4184-9A3B-CA6F99A0F1A3} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(1): schtasks.exe -> /Change /TN "\AdobeGCInvoker-1.0" /ENABLE
Task: {EAFB28F2-7B30-4184-9A3B-CA6F99A0F1A3} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(2): schtasks.exe -> /Change /TN "\CCleaner Update" /ENABLE
Task: {EAFB28F2-7B30-4184-9A3B-CA6F99A0F1A3} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(3): schtasks.exe -> /Change /TN "\CCleanerSkipUAC" /ENABLE
Task: {EAFB28F2-7B30-4184-9A3B-CA6F99A0F1A3} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(4): schtasks.exe -> /Change /TN "\GoogleUpdateTaskMachineCore" /ENABLE
Task: {EAFB28F2-7B30-4184-9A3B-CA6F99A0F1A3} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(5): schtasks.exe -> /Change /TN "\GoogleUpdateTaskMachineUA" /ENABLE
Task: {EAFB28F2-7B30-4184-9A3B-CA6F99A0F1A3} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(6): schtasks.exe -> /Change /TN "\MicrosoftEdgeUpdateTaskMachineCore" /ENABLE
Task: {EAFB28F2-7B30-4184-9A3B-CA6F99A0F1A3} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(7): schtasks.exe -> /Change /TN "\MicrosoftEdgeUpdateTaskMachineUA" /ENABLE
Task: {EAFB28F2-7B30-4184-9A3B-CA6F99A0F1A3} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(8): schtasks.exe -> /Change /TN "\OneDrive Standalone Update Task-S-1-5-21-3229119659-2636840687-1832472203-1001" /ENABLE
Task: {EAFB28F2-7B30-4184-9A3B-CA6F99A0F1A3} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(9): schtasks.exe -> /Change /TN "\User_Feed_Synchronization-{6C215D86-6C4F-4396-8928-2ADF35AF523F}" /ENABLE
Task: {EAFB28F2-7B30-4184-9A3B-CA6F99A0F1A3} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(10): schtasks.exe -> /Change /TN "\Vidange automatique corbeille" /ENABLE
Task: {EAFB28F2-7B30-4184-9A3B-CA6F99A0F1A3} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(11): schtasks.exe -> /Change /TN "\AVAST Software\Gaming mode Task Scheduler recovery" /DISABLE
CHR HKU\S-1-5-21-3229119659-2636840687-1832472203-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR Extension: (Avast Passwords) - C:\Users\lysit\AppData\Local\Google\Chrome\User Data\Default\Extensions\emhginjpijfggbofeediiojmdlmlkoik [2020-02-10]
S3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [7776160 2020-08-17] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [353696 2020-08-17] (Avast Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [58048 2020-08-17] (Avast Software s.r.o. -> AVAST Software)
R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [37152 2020-08-17] (Avast Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [205888 2020-08-17] (Avast Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [235592 2020-08-17] (Avast Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [195656 2020-08-17] (Avast Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [60488 2020-08-17] (Avast Software s.r.o. -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [16824 2020-07-21] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [42776 2020-08-17] (Avast Software s.r.o. -> AVAST Software)
R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [175200 2020-08-17] (Avast Software s.r.o. -> AVAST Software)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [515544 2020-08-17] (Avast Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [109280 2020-08-17] (Avast Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [84856 2020-08-17] (Avast Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [851608 2020-08-17] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [466752 2020-08-17] (Avast Software s.r.o. -> AVAST Software)
S2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [217336 2020-08-17] (Avast Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [323784 2020-08-17] (Avast Software s.r.o. -> AVAST Software)
2020-09-21 14:12 - 2019-07-28 11:02 - 000000000 ____D C:\Users\lysit\AppData\Local\AVAST Software
2020-09-16 09:14 - 2020-08-17 19:02 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
C:\Windows\Temp\*.*
C:\Users\CurrentUserName\AppData\Local\Temp\*.*
end::