start:: closeprocesses: createrestorepoint: HKU\S-1-5-21-3657819930-786984755-2511640322-1001\...\Run: [WebDiscoverBrowser] => C:\Users\carol\AppData\Local\WebDiscoverBrowser\4.28.2\browser.exe [4010720 2018-07-17] (web discover -> WebDiscover Media) [Fichier non signé] <==== ATTENTION C:\Users\carol\AppData\Local\WebDiscoverBrowser Task: {43F10545-29B5-4F2D-B319-1BC2DC380EBD} - \WebDiscover Browser Update Task -> Pas de fichier <==== ATTENTION FF Extension: (McAfee® WebAdvisor) - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi [2020-10-16] [UpdateUrl:hxxps://sadownload.mcafee.com/products/SA/Win/xpi/webadvisor/update.json] CHR HomePage: Default -> hxxp://search.babylon.com/?babsrc=HP_Prot CHR NewTab: Default -> Not-active:"chrome-extension://maffoojmaafjmmohkhhclgjjmghlifjo/ntp1.html", Not-active:"chrome-extension://hjfmdccpchjbocfcmenkfmkcbmoldfee/ntp1.html", Not-active:"chrome-extension://fkgedicakildehepikeopegehmojomfk/ntp1.html", Active:"chrome-extension://naedfjpkboljpmbmdnfnibcndmmgdnen/ntp1.html", Active:"chrome-extension://oflgkilnmdbbjfipiciogmmhhbimckol/ntp1.html", Active:"chrome-extension://gpmaefnapfbhjmalebhcplfiepgmmdkf/ntp1.html", Not-active:"chrome-extension://cpjbkhbhimkbbekiaelopeddeheljabm/ntp1.html" CHR DefaultSearchURL: Default -> hxxps://fr.search.yahoo.com/search?fr=mcafee&type=E211FR885G0&p={searchTerms} CHR DefaultSuggestURL: Default -> hxxps://fr.search.yahoo.com/sugg/gossip/gossip-fr-partner?output=fxjson&appid=mca&source=yahoo_mcafee_searchassist&command={searchTerms} C:\Users\carol\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgfehfbnofiffladdncogfobimealokp CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] CHR HKU\S-1-5-21-3657819930-786984755-2511640322-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [jdanfkhnfpagoijgfmklhgakdicpnfil] CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] R2 PremierOpinion; C:\Program Files (x86)\PremierOpinion\pmservice.exe [170336 2020-04-10] (VoiceFive, Inc. -> VoiceFive, Inc.) <==== ATTENTION C:\Program Files (x86)\PremierOpinion S3 MyWiFiDHCPDNS; "C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe" [X] 2020-10-14 14:39 - 2020-10-14 14:39 - 000000000 ____D C:\Users\carol\AppData\Local\WebDiscoverBrowser HKU\S-1-5-21-3657819930-786984755-2511640322-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://fr.yahoo.com/?fr=fes_yfp_chr_nt_yfp2&type=wnf_aeuhewiom1bdfhjlntz65m_20_42_ssg82 SearchScopes: HKU\S-1-5-21-3657819930-786984755-2511640322-1001 -> DefaultScope {2f23ab71-4ac6-41f2-a955-ea576e553146} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wnf_aeuhewiom1bdfhjlntz65m_20_42_ssg82¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuzztBtAtByDtAtDtC0BtByDtCyBtC0B0BtN0D0Tzu0StAtBtDzytN1L2XzuyDtFtBtFtDtFtCyDzztN1L1Czu1BtCtN1L1G1B1V1N2Y1L1Qzu2StDyByCyByBtCyC0CtGyE0E0ByDtGyDyEzyyCtGtDyDyD0CtG0BzztA0BtDyB0A0AyEyBtBzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyCyEzz1Q1P1T1PyBtGtCtDyDzztGyEyDzztBtGzyyEyC1StG1PyBzytAzytCtByB1QtA1T1S2QtN0A0LzuyEtN1B2Z1V1T1S1NzutN1Q2Z1B1P1RzutCyCtDtByCyBzytCtCyC%26cr%3D1657942325%26a%3Dwnf_aeuhewiom1bdfhjlntz65m_20_42_ssg82%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms} SearchScopes: HKU\S-1-5-21-3657819930-786984755-2511640322-1001 -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wnf_aeuhewiom1bdfhjlntz65m_20_42_ssg82¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuzztBtAtByDtAtDtC0BtByDtCyBtC0B0BtN0D0Tzu0StAtBtDzytN1L2XzuyDtFtBtFtDtFtCyDzztN1L1Czu1BtCtN1L1G1B1V1N2Y1L1Qzu2StDyByCyByBtCyC0CtGyE0E0ByDtGyDyEzyyCtGtDyDyD0CtG0BzztA0BtDyB0A0AyEyBtBzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyCyEzz1Q1P1T1PyBtGtCtDyDzztGyEyDzztBtGzyyEyC1StG1PyBzytAzytCtByB1QtA1T1S2QtN0A0LzuyEtN1B2Z1V1T1S1NzutN1Q2Z1B1P1RzutCyCtDtByCyBzytCtCyC%26cr%3D1657942325%26a%3Dwnf_aeuhewiom1bdfhjlntz65m_20_42_ssg82%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms} BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2020-10-16] (McAfee, LLC -> McAfee, LLC) FirewallRules: [{D9A768C9-700D-4F13-8787-1F42565FF0D9}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe => Pas de fichier FirewallRules: [{4FD2E35E-71B0-4FF2-BAA9-A729120F7F44}] => (Allow) C:\Program Files (x86)\PremierOpinion\pmropn.exe (VoiceFive, Inc. -> VoiceFive, Inc.) FirewallRules: [{DC02C821-810A-452C-89B5-D7855A1BBF24}] => (Allow) C:\Program Files (x86)\PremierOpinion\pmropn.exe (VoiceFive, Inc. -> VoiceFive, Inc.) emptytemp: end::