Start:: CreateRestorePoint: CloseProcesses: HKLM\...\Policies\Explorer: [HideSCAHealth] 1 HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction HKLM\SOFTWARE\Policies\Google: Restriction Task: {0517A761-36BB-4C90-BD0E-A76817FE1325} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe Task: {446E4BB1-DE94-4323-8827-C5B6EDBD789C} - System32\Tasks\{40331321-87E1-C535-14AA-564E6B877E7C}\numutasar => C:\PROGRA~2\COMMON~1\MUGATI~1\NUMUTA~1.EXE Task: {A884DD68-4C89-4C11-BDBE-E02BA776CC9E} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe Edge Extension: (Avast Online Security) - C:\Users\22nei\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\fdgpikaaheckgdijjmepmdjjkbceakif [2020-07-18] FF Extension: (Avast SafePrice | Comparaison, offres, coupons) - C:\Users\22nei\AppData\Roaming\Mozilla\Firefox\Profiles\36blhu5b.default\Extensions\sp@avast.com.xpi [2020-05-24] FF Extension: (Avast Online Security) - C:\Users\22nei\AppData\Roaming\Mozilla\Firefox\Profiles\36blhu5b.default\Extensions\wrc@avast.com.xpi [2020-05-24] CHR Extension: (Avast Online Security) - C:\Users\22nei\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2020-06-03] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] S2 avast; "C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe" /svc [X] S3 avastm; "C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe" /medsvc [X] S2 ekrn; "C:\Program Files\ESET\ESET Security\ekrn.exe" [X] S3 ekrnEpfw; "C:\Program Files\ESET\ESET Security\ekrn.exe" [X] 2 PremierOpinion; C:\Program Files (x86)\PremierOpinion\pmservice.exe /service [X] S0 AMSElamDriver; C:\WINDOWS\System32\drivers\amselam.sys [21976 2019-07-01] (Microsoft Windows Early Launch Anti-malware Publisher -> Avira Operations GmbH & Co. KG) S1 BHDrvx64; \??\C:\Program Files\Norton Security\NortonData\22.14.1.6\Definitions\BASHDefs\20190806.001\BHDrvx64.sys [X] S3 CMUAC; \SystemRoot\System32\drivers\CMUAC.sys [X] S1 IDSVia64; \??\C:\Program Files\Norton Security\NortonData\22.14.1.6\Definitions\IPSDefs\20190812.061\IDSvia64.sys [X] S4 SymEvnt; \??\C:\Program Files\Norton Security\NortonData\22.14.1.6\SymPlatform\SymEvnt.sys [X] 2020-11-06 18:51 - 2019-12-22 14:00 - 000000000 ____D C:\ProgramData\TSR7Settings 2020-11-06 18:51 - 2019-12-22 14:00 - 000000000 ____D C:\Program Files (x86)\Advanced System Repair Pro 1.9.0.6.0 2020-11-06 18:51 - 2019-10-28 17:55 - 000000000 ____D C:\Program Files (x86)\Segurazo C:\PROGRA~2\COMMON~1\MUGATI~1 C:\Program Files (x86)\AVAST Software AV: Total AV (Disabled - Up to date) {B185458D-38B3-A010-10F7-3D378DAA6032} AV: Total AV (Disabled - Up to date) {AC3490DF-B2AE-610F-9290-A5E6E0CD5323} Avast Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.6.605.0 - AVAST Software) Hidden AlternateDataStreams: C:\WINDOWS\tracing:? [16] AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxlctlfudivq`qsp`20hfm [0] AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [468] HKU\S-1-5-21-2630943717-2475315762-2493850372-1001\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_EAC8103F6B6955F9AA207DFD7AA86957" EmptyTemp: End::