start::
closeprocesses:
createrestorepoint:
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> Pas de fichier
ContextMenuHandlers1: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => -> Pas de fichier
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> Pas de fichier
ContextMenuHandlers4: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> Pas de fichier
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> Pas de fichier
ContextMenuHandlers6: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> Pas de fichier
ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => -> Pas de fichier
AlternateDataStreams: C:\Users\caule\ntuser.ini:NTV [12610]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [478]
FirewallRules: [TCP Query User{CB32F923-75E9-44A6-B3AB-4CFC7DCC70DE}C:\program files (x86)\steam\steamapps\common\paladins\binaries\win64\paladins.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\paladins\binaries\win64\paladins.exe => Pas de fichier
FirewallRules: [UDP Query User{22E38824-76A7-402C-B83A-7D2FB9BD1AC1}C:\program files (x86)\steam\steamapps\common\paladins\binaries\win64\paladins.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\paladins\binaries\win64\paladins.exe => Pas de fichier
FirewallRules: [TCP Query User{2592B975-7E51-40C2-A993-3EE4C4E54D01}D:\apex\apex\r5apex.exe] => (Allow) D:\apex\apex\r5apex.exe => Pas de fichier
FirewallRules: [UDP Query User{0CD97DC1-45BD-4A31-B1D0-CAD96B8545D3}D:\apex\apex\r5apex.exe] => (Allow) D:\apex\apex\r5apex.exe => Pas de fichier
FirewallRules: [TCP Query User{76E20662-1536-4B53-BE25-8D1A6711900B}D:\warcraft iii\x86_64\warcraft iii.exe] => (Allow) D:\warcraft iii\x86_64\warcraft iii.exe => Pas de fichier
FirewallRules: [UDP Query User{65735331-AF86-4F33-B912-ECD83C6549F0}D:\warcraft iii\x86_64\warcraft iii.exe] => (Allow) D:\warcraft iii\x86_64\warcraft iii.exe => Pas de fichier
FirewallRules: [TCP Query User{7838AC6E-57F4-4512-A931-0182A5ECA763}D:\killingfloor2\binaries\win64\kfgame.exe] => (Allow) D:\killingfloor2\binaries\win64\kfgame.exe => Pas de fichier
FirewallRules: [UDP Query User{8AB2791E-D805-4FE0-BE98-3F29C2DF40C0}D:\killingfloor2\binaries\win64\kfgame.exe] => (Allow) D:\killingfloor2\binaries\win64\kfgame.exe => Pas de fichier
FirewallRules: [TCP Query User{58A6872A-6A9D-4DDE-B0FF-AD8795D45CCE}D:\mtga\mtga.exe] => (Allow) D:\mtga\mtga.exe => Pas de fichier
FirewallRules: [UDP Query User{060FFDD9-3235-4AF7-864E-B6B0DC22231D}D:\mtga\mtga.exe] => (Allow) D:\mtga\mtga.exe => Pas de fichier
GroupPolicy: Restriction ? <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
Task: {6A3661ED-3D89-4DA2-9973-2ED4A3115820} - System32\Tasks\Microsoft\Windows\Windows Error Reporting\winrmsrv => winrmsrv.exe <==== ATTENTION
Task: {9A15E892-DFD4-4DFF-BC8F-CCB31C1379BA} - System32\Tasks\Microsoft\Windows\Application Experience\StartupCheckLibrary => rundll32.exe StartupCheckLibrary.dll,DllMainRunLibrary <==== ATTENTION
Task: {BC4875E8-8F41-4D67-BB5D-7D813E559BBA} - System32\Tasks\Microsoft\Windows\Wininet\Winlogui => winlogui.exe <==== ATTENTION
Task: {D1D12F10-34D3-408B-A895-2E3CB18FEE7F} - System32\Tasks\Microsoft\Windows\WDI\SrvHost => rundll32.exe winscomrssrv.dll,SrvMainHost <==== ATTENTION
C:\Windows\System32\winscomrssrv.dll
C:\Windows\System32\winlogui.exe
C:\Windows\System32\winrmsrv.exe
FF Extension: (Avast Online Security) - C:\Users\caule\AppData\Roaming\Mozilla\Firefox\Profiles\9ay1xuom.default\Extensions\wrc@avast.com.xpi [2018-11-18]
C:\Users\caule\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
S2 AntiVirMailService; "C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe" [X]
S2 AntivirProtectedService; "C:\Program Files (x86)\Avira\Antivirus\ProtectedService.exe" [X]
S2 AntiVirSchedulerService; "C:\Program Files (x86)\Avira\Antivirus\sched.exe" [X]
S2 AntiVirService; "C:\Program Files (x86)\Avira\Antivirus\avguard.exe" [X]
S2 AntiVirWebService; "C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe" [X]
S3 wuauserv; C:\Windows\system32\svchost.exe [51696 2018-09-15] (Microsoft Windows Publisher -> Microsoft Corporation) <==== ATTENTION (pas de ServiceDLL)
S3 wuauserv; C:\Windows\SysWOW64\svchost.exe [45448 2018-09-15] (Microsoft Windows Publisher -> Microsoft Corporation) <==== ATTENTION (pas de ServiceDLL)
S3 CMUAC; \SystemRoot\system32\DRIVERS\CMUAC.sys [X]
emptytemp:
end::