Start::
CreateRestorePoint:
CloseProcesses:
HKLM\...\Policies\Explorer: [HideSCAHealth] 1
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction
HKLM\SOFTWARE\Policies\Google: Restriction
Task: {0517A761-36BB-4C90-BD0E-A76817FE1325} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
Task: {446E4BB1-DE94-4323-8827-C5B6EDBD789C} - System32\Tasks\{40331321-87E1-C535-14AA-564E6B877E7C}\numutasar => C:\PROGRA~2\COMMON~1\MUGATI~1\NUMUTA~1.EXE
Task: {A884DD68-4C89-4C11-BDBE-E02BA776CC9E} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
Edge Extension: (Avast Online Security) - C:\Users\22nei\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\fdgpikaaheckgdijjmepmdjjkbceakif [2020-07-18]
FF Extension: (Avast SafePrice | Comparaison, offres, coupons) - C:\Users\22nei\AppData\Roaming\Mozilla\Firefox\Profiles\36blhu5b.default\Extensions\sp@avast.com.xpi [2020-05-24]
FF Extension: (Avast Online Security) - C:\Users\22nei\AppData\Roaming\Mozilla\Firefox\Profiles\36blhu5b.default\Extensions\wrc@avast.com.xpi [2020-05-24]
CHR Extension: (Avast Online Security) - C:\Users\22nei\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2020-06-03]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
S2 avast; "C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe" /svc [X]
S3 avastm; "C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe" /medsvc [X]
S2 ekrn; "C:\Program Files\ESET\ESET Security\ekrn.exe" [X]
S3 ekrnEpfw; "C:\Program Files\ESET\ESET Security\ekrn.exe" [X]
2 PremierOpinion; C:\Program Files (x86)\PremierOpinion\pmservice.exe /service [X]
S0 AMSElamDriver; C:\WINDOWS\System32\drivers\amselam.sys [21976 2019-07-01] (Microsoft Windows Early Launch Anti-malware Publisher -> Avira Operations GmbH & Co. KG)
S1 BHDrvx64; \??\C:\Program Files\Norton Security\NortonData\22.14.1.6\Definitions\BASHDefs\20190806.001\BHDrvx64.sys [X]
S3 CMUAC; \SystemRoot\System32\drivers\CMUAC.sys [X]
S1 IDSVia64; \??\C:\Program Files\Norton Security\NortonData\22.14.1.6\Definitions\IPSDefs\20190812.061\IDSvia64.sys [X]
S4 SymEvnt; \??\C:\Program Files\Norton Security\NortonData\22.14.1.6\SymPlatform\SymEvnt.sys [X]
2020-11-06 18:51 - 2019-12-22 14:00 - 000000000 ____D C:\ProgramData\TSR7Settings
2020-11-06 18:51 - 2019-12-22 14:00 - 000000000 ____D C:\Program Files (x86)\Advanced System Repair Pro 1.9.0.6.0
2020-11-06 18:51 - 2019-10-28 17:55 - 000000000 ____D C:\Program Files (x86)\Segurazo
C:\PROGRA~2\COMMON~1\MUGATI~1
C:\Program Files (x86)\AVAST Software
AV: Total AV (Disabled - Up to date) {B185458D-38B3-A010-10F7-3D378DAA6032}
AV: Total AV (Disabled - Up to date) {AC3490DF-B2AE-610F-9290-A5E6E0CD5323}
Avast Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.6.605.0 - AVAST Software) Hidden
AlternateDataStreams: C:\WINDOWS\tracing:? [16]
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxlctlfudivq`qsp`20hfm [0]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [468]
HKU\S-1-5-21-2630943717-2475315762-2493850372-1001\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_EAC8103F6B6955F9AA207DFD7AA86957"
EmptyTemp:
End::