start::
closeprocesses:
createrestorepoint:
AS: Avira Antivirus (Enabled - Up to date) {33CF8AA2-FA06-4AD4-98AB-332D53DD7FFB}
CustomCLSID: HKU\S-1-5-21-3730651914-23975784-2391974334-1001_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32 -> C:\Users\penne\AppData\Local\Citrix\GoToMeeting\5174\G2MOutlookAddin64.dll => Pas de fichier
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => -> Pas de fichier
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier
AlternateDataStreams: C:\Windows:nlsPreferences [386]
SearchScopes: HKU\S-1-5-21-3730651914-23975784-2391974334-1001 -> {1CCEC9B9-F32B-46E0-B7CF-0F204CE5997F} URL = hxxps://fr.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll => Pas de fichier
Task: {E1A8669B-ECE1-40C9-A968-1970A5C1B242} - \Auslogics\Disk Defrag\Start Disk Defrag оn penne logon -> Pas de fichier <==== ATTENTION
Task: {FEB20CDB-850F-4046-A450-960B5BA80DF5} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
FF Extension: (Protection Web Avira) - C:\Users\penne\AppData\Roaming\Mozilla\Firefox\Profiles\bFU4Vr0v.default\Extensions\abs@avira.com.xpi [2019-03-06]
C:\Users\penne\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKU\S-1-5-21-3730651914-23975784-2391974334-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKU\S-1-5-21-3730651914-23975784-2391974334-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM-x32\...\Chrome\Extension: [kpdmjodecdegfglgaapafjleomjjlpnh]
U3 avgbdisk; pas de ImagePath
2020-12-05 19:31 - 2020-12-05 19:31 - 000000000 ____D C:\Users\penne\AppData\Local\mbam
2020-12-05 19:29 - 2020-12-05 19:29 - 000000000 ____D C:\ProgramData\Malwarebytes
2020-12-05 19:21 - 2020-12-05 19:21 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avira
2020-12-05 19:20 - 2020-12-05 19:20 - 002077136 _____ (Malwarebytes) C:\Users\penne\Downloads\MBSetup.exe
2020-11-24 17:32 - 2020-11-24 17:31 - 000217408 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\aswe2e45ea758aa4f6a.tmp
2020-11-24 17:32 - 2020-11-24 17:30 - 000340104 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\avgBoot.exe
2020-12-13 14:21 - 2016-12-02 13:01 - 000000000 ____D C:\ProgramData\IObit
2020-12-13 14:21 - 2016-12-02 13:00 - 000000000 ____D C:\Users\penne\AppData\Roaming\IObit
2020-12-13 14:16 - 2016-05-04 15:41 - 000000000 ____D C:\ProgramData\Avira
2020-12-13 14:16 - 2016-05-04 15:41 - 000000000 ____D C:\Program Files (x86)\Avira
2020-12-12 18:02 - 2020-03-26 09:52 - 000000000 ____D C:\ProgramData\AVG
2020-12-11 21:26 - 2020-08-31 12:08 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVAST Software
2020-11-24 17:31 - 2020-03-26 09:55 - 000326488 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\asw796ca2f2df206331.tmp
2020-11-24 17:31 - 2020-03-26 09:55 - 000247952 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\asw956a8b8c573a8cd4.tmp
2020-11-24 17:31 - 2020-03-26 09:55 - 000097424 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\asw790f46d64d427eda.tmp
2020-11-24 17:30 - 2020-10-22 23:10 - 000176808 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\asw17a41f0954e6abe9.tmp
2020-11-24 17:30 - 2020-06-19 09:42 - 000521816 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\asw578ab1ba908791fb.tmp
2020-11-24 17:30 - 2020-03-26 09:55 - 000851680 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\asw99ccfe4ec09340e8.tmp
2020-11-24 17:30 - 2020-03-26 09:55 - 000469896 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\aswe7a7cd0a3abd2762.tmp
2020-11-24 17:30 - 2020-03-26 09:55 - 000332432 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\asw5a5c70d78c272741.tmp
2020-11-24 17:30 - 2020-03-26 09:55 - 000206472 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\aswd8c619cab1ac2206.tmp
2020-11-24 17:30 - 2020-03-26 09:55 - 000109352 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\asw9914ebc98084c4e2.tmp
2020-11-24 17:30 - 2020-03-26 09:55 - 000084928 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\asw6093527e5b5eac1a.tmp
2020-11-24 17:30 - 2020-03-26 09:55 - 000042848 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\asw408e4359407bdf52.tmp
2020-11-24 17:30 - 2020-03-26 09:55 - 000037216 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\aswb39f7f7bdd868ec6.tmp
2020-11-24 17:30 - 2020-03-26 09:55 - 000016832 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\asw4edd0d184af9cc1a.tmp
cmd: netsh advfirewall reset
cmd: sfc /scannow
emptytemp:
end::