start::
CreateRestorePoint:
CloseProcesses:
AlternateDataStreams: C:\Users\Doss\ntuser.ini:NTV [12588]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [490]
FirewallRules: [{CCA80FFE-D0A3-4597-A27C-958BC7424A54}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => Pas de fichier
FirewallRules: [{416A1748-E02E-4C95-A160-1DA42FD4C57A}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => Pas de fichier
HKU\S-1-5-18\...\Run: [] => [X]
BootExecute: autocheck autochk * Partizan
GroupPolicy: Restriction ? <==== ATTENTION
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\bd_js_config.js [2020-04-21] <==== ATTENTION (Pointe vers un fichier *.cfg)
FF ExtraCheck: C:\Program Files\mozilla firefox\bd_config.cfg [2020-04-21] <==== ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]
CHR HKLM-x32\...\Chrome\Extension: [khndhdhbebhaddchcgnalcjlaekbbeof]
2020-09-19 10:23 - 2020-09-19 14:45 - 000000000 ____D C:\Users\Doss\AppData\Roaming\Lavasoft
2020-09-19 10:23 - 2020-09-19 14:45 - 000000000 ____D C:\Users\Doss\AppData\Local\Lavasoft
2020-09-19 10:23 - 2020-09-19 14:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
2020-09-19 10:23 - 2020-09-19 14:45 - 000000000 ____D C:\ProgramData\Lavasoft
2020-09-19 10:23 - 2020-09-19 14:45 - 000000000 ____D C:\Program Files (x86)\Lavasoft
C:\Windows\Temp\*.*
C:\Users\CurrentUserName\AppData\Local\Temp\*.*
end::