start::
closeprocesses:
createrestorepoint:
Avira (HKLM-x32\...\{CC898F82-66EF-4083-947F-5C69703DDBAF}) (Version: 1.2.136.25116 - Avira Operations GmbH & Co. KG) Hidden
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => -> Pas de fichier
FirewallRules: [{541F3B38-4A87-4AFF-94EB-E65E902706C1}] => (Allow) C:\Users\Drtok\AppData\Roaming\uTorrent\uTorrent.exe => Pas de fichier
FirewallRules: [{9359C12C-3813-44D4-880A-22EAA9CFC062}] => (Allow) C:\Users\Drtok\AppData\Roaming\uTorrent\uTorrent.exe => Pas de fichier
FirewallRules: [TCP Query User{01946CE9-7A61-44C4-98BC-3434D2703817}C:\users\drtok\appdata\roaming\utorrent\updates\3.5.5_45628.exe] => (Allow) C:\users\drtok\appdata\roaming\utorrent\updates\3.5.5_45628.exe => Pas de fichier
FirewallRules: [UDP Query User{2E61411E-A615-4F2B-9A40-1C5898A4D19D}C:\users\drtok\appdata\roaming\utorrent\updates\3.5.5_45628.exe] => (Allow) C:\users\drtok\appdata\roaming\utorrent\updates\3.5.5_45628.exe => Pas de fichier
FirewallRules: [{2A1B87A7-52BE-4CDA-832E-2BFE80B1CBAB}] => (Block) C:\users\drtok\appdata\roaming\utorrent\updates\3.5.5_45628.exe => Pas de fichier
FirewallRules: [{8654EE24-CAE4-4C6F-BDA5-2A65CC2E9CF5}] => (Block) C:\users\drtok\appdata\roaming\utorrent\updates\3.5.5_45628.exe => Pas de fichier
CHR StartupUrls: Default -> "hxxp://www.google.fr/","hxxp://search.babylon.com/?affID=111804&babsrc=HP_ss&mntrId=fc2f511f00000000000000a0d5ffff97"
C:\Users\Drtok\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccbpbkebodcjkknkfkpmfeciinhidaeh
CHR HKLM\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]
CHR HKU\S-1-5-21-3928925873-2287917264-2360072131-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM-x32\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]
OPR Extension: (Avira Browser Safety) - C:\Users\Drtok\AppData\Roaming\Opera Software\Opera Stable\Extensions\dalelnnofafalcmkmnhdbigbjjkloabo [2019-10-28]
OPR Extension: (Avira Password Manager) - C:\Users\Drtok\AppData\Roaming\Opera Software\Opera Stable\Extensions\ngohaaocccbohaffogpbgfpmpgbcgccg [2019-10-28]
OPR Extension: (Free Avira Phantom VPN – Unblock Websites) - C:\Users\Drtok\AppData\Roaming\Opera Software\Opera Stable\Extensions\pcgkmkjdikhiodinhloioejnpjgmfigd [2019-10-28]
2020-11-21 12:38 - 2020-11-21 12:38 - 000000000 ____D C:\Program Files (x86)\Avira
2020-11-21 09:53 - 2020-11-21 09:53 - 000000000 ____D C:\ProgramData\Avira
emptytemp:
end::