start::
closeprocesses:
createrestorepoint:
AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
DriverUpdate (HKLM-x32\...\{53C9EBD2-F3F7-49BB-BDB4-147D3A4D5E6D}) (Version: 2.7.10 - Slimware Utilities Holdings, Inc.) Hidden <==== ATTENTION
SlimCleaner Plus (HKLM\...\{ABA29C63-B22D-45F8-BA20-7C8EF17B5E62}) (Version: 2.5.10 - Slimware Utilities Holdings, Inc.) Hidden
CustomCLSID: HKU\S-1-5-21-2238367292-1815982713-3710956016-1001_Classes\CLSID\{75f92b33-bbaa-b4b4-04ac-a7c07959e5a66}\InprocServer32 -> 0x9CD33F78A9CFD5012BEB67038ED2D501020000000200000000000000 => Pas de fichier
CustomCLSID: HKU\S-1-5-21-2238367292-1815982713-3710956016-1001_Classes\CLSID\{9486aaf1-0930-362a-962d-8e6908739c817}\InprocServer32 -> 0x9E4A309646CDD501CED854038ED2D501030000000A00000000000000 => Pas de fichier
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => -> Pas de fichier
ContextMenuHandlers1: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => -> Pas de fichier
ContextMenuHandlers1: [Atheros] -> {B8952421-0E55-400B-94A6-FA858FC0A39F} => -> Pas de fichier
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => -> Pas de fichier
ContextMenuHandlers1: [PDFArchitectExtension] -> {DBDB3433-0E01-40CE-A026-D9F54FAC3CA9} => -> Pas de fichier
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => -> Pas de fichier
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => -> Pas de fichier
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier
AlternateDataStreams: C:\ProgramData\Temp:373E1720 [118]
AlternateDataStreams: C:\ProgramData\Temp:5C321E34 [125]
SearchScopes: HKU\S-1-5-21-2238367292-1815982713-3710956016-1001 -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wcg_dpyqptgki1320egikmoq9ay_19_37_ssg00¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0B0CzzyDyDyCtDyC0F0A0FtDzz0CyCyDtN0D0Tzu0StBzztCtCtN1L2XzuyEtFyDyDtFtDtFtCtAtCtN1L1Czu1ByE1VzztN1L1G1B1V1N2Y1L1Qzu2SyE0CtDyDtDtDtB0AtGtC0DtDtCtGyC0DyEyCtGtAzyyDtCtG0AzytBtBtCyC0EtBtCyB0A0C2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDyBtDzy0Ezz0DtCtGzzyB0AtCtGyE0AyDyBtG0B0FzyzytGyEtD0CtBtCtD0C0D0A0CtByB2QtN0A0LzutBtN1B2Z1V1T1S1NzutN1Q2Z1B1P1RzutCyDyCzztByByDzzyCtC%26cr%3D983345798%26a%3Dwcg_dpyqptgki1320egikmoq9ay_19_37_ssg00%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms}
BHO-x32: Pas de nom -> {13D67BB7-DB5F-48AA-884D-7A5D94168509} -> Pas de fichier
BHO-x32: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> Pas de fichier
Toolbar: HKLM-x32 - Pas de nom - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Pas de fichier
DPF: HKLM-x32 {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} hxxp://quickscan.bitdefender.com/qsax/qsax.cab
IE trusted site: HKU\.DEFAULT\...\webcompanion.com -> hxxp://webcompanion.com
IE trusted site: HKU\S-1-5-21-2238367292-1815982713-3710956016-1001\...\webcompanion.com -> hxxp://webcompanion.com
HKLM\...\StartupApproved\StartupFolder: => "McAfee Security Scan Plus.lnk"
HKU\S-1-5-21-2238367292-1815982713-3710956016-1001\...\StartupApproved\Run: => "Spybot-S&D Cleaning"
HKU\S-1-5-21-2238367292-1815982713-3710956016-1001\...\StartupApproved\Run: => "Chromium"
HKLM\Software\...\Authentication\Credential Provider Filters: [{ACFC407B-266C-8504-8DAE-F3E276336E4B}] ->
IFEO\DisplaySwitch.exe: [Debugger]
IFEO\taskmgr.exe: [Debugger]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2017-12-19]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.599\SSScheduler.exe (McAfee, Inc. -> McAfee, Inc.)
C:\Program Files\Common Files\mcafee
GroupPolicy: Restriction - Chrome <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {00F257A2-5C54-47C4-B90A-9AE173F78C27} - System32\Tasks\IObitSelfCheckTask => C:\Program Files (x86)\IObit\Smart Defrag\IObitSelfCheck.exe
Task: {02168C5B-2B33-41F0-A65A-AA5BFCEF4B53} - \WPD\SqmUpload_S-1-5-21-2238367292-1815982713-3710956016-1001 -> Pas de fichier <==== ATTENTION
Task: {11A2B6AF-EB19-49C3-ACA3-482BE08D3D1E} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Pas de fichier <==== ATTENTION
Task: {1D856D78-076D-4F8A-BD5D-81544F77CEB3} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Pas de fichier <==== ATTENTION
Task: {27402B59-B5AF-453D-82B5-3ACBE6E3ABE7} - System32\Tasks\EuroFortune UpdateCasino => C:\Program Files (x86)\EuroFortune\UpdateCasino.exe
Task: {43E6649F-8BC4-4052-8C99-8DEB1D36844E} - System32\Tasks\Start WinZip Driver Updater Update => C:\Program Files\WinZip Driver Updater\DriverUpdater.exe [27591976 2020-09-22] () [Fichier non signé]
Task: {48200742-89B3-4D34-B516-C51A23855E43} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Pas de fichier <==== ATTENTION
Task: {4ABED8FA-4103-4673-ACBB-7469A4FB5E62} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
Task: {4CAF4C99-25B6-47E0-888A-48316DEB59EE} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDFE067B1}
Task: {5676C4AA-A6CC-4898-86D0-99526074CC6E} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {59504D44-302A-4884-AFFC-C30D00E1B371} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Pas de fichier <==== ATTENTION
Task: {5F659184-CCA9-4E13-B4FF-237C1B694600} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Pas de fichier <==== ATTENTION
Task: {710C1752-B9A0-4B30-BF77-E8CA6257BBDB} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-07-18] (Adobe Inc. -> Adobe)
Task: {746A51CF-D8AB-4926-92F0-0D2722BABEAE} - \52c7f24b-d97f-443a-9318-a7dbe165a705-3 -> Pas de fichier <==== ATTENTION
Task: {80D54EE3-A934-4B62-AB30-9C1444B43ED8} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Pas de fichier <==== ATTENTION
Task: {9F66BEFD-3A9E-4FEB-8A7A-C2D846359FD2} - System32\Tasks\ByteFence => C:\Program Files\ByteFence\ByteFence.exe <==== ATTENTION
Task: {A0FDB83E-A1F9-4476-88A9-CB4E7897BF24} - System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe
Task: {AACE99CF-7523-4754-825B-B1C1D1CA4E0A} - \52c7f24b-d97f-443a-9318-a7dbe165a705-5 -> Pas de fichier <==== ATTENTION
Task: {B4BA238E-FBE5-4495-8B53-35BB5C6DE10E} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Pas de fichier <==== ATTENTION
Task: {B9572196-4809-43F4-A916-B7C22120DD63} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Pas de fichier <==== ATTENTION
Task: {B9C45595-06EA-4D59-A584-5A3B272FCEE9} - \52c7f24b-d97f-443a-9318-a7dbe165a705-1 -> Pas de fichier <==== ATTENTION
Task: {BAAFFABC-35D8-40B2-9614-6C5118881619} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4F47-879B-29A80C355D61}
Task: {BDF977D7-E395-4811-8200-783626519A22} - \52c7f24b-d97f-443a-9318-a7dbe165a705-4 -> Pas de fichier <==== ATTENTION
Task: {C0E7FCC1-8257-4FED-8EFA-EF23A894EAB3} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Pas de fichier <==== ATTENTION
Task: {CD6FC605-AACA-4B5E-8605-F29C80541BB9} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [1741416 2020-09-18] (Avast Software s.r.o. -> Avast Software)
Task: {DA5CC24F-CC7F-4AA8-B62C-CF8BB5BE0ED8} - \StartMenuAutoupdate -> Pas de fichier <==== ATTENTION
Task: {DEF90D25-4E83-4FEC-BB83-6986C81EB1E7} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(1): schtasks.exe -> /Change /TN %µ£\Adobe Acrobat Update Task%µ£ /ENABLE
Task: {DEF90D25-4E83-4FEC-BB83-6986C81EB1E7} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(2): schtasks.exe -> /Change /TN %µ£\CCleaner Update%µ£ /ENABLE
Task: {DEF90D25-4E83-4FEC-BB83-6986C81EB1E7} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(3): schtasks.exe -> /Change /TN %µ£\CCleanerSkipUAC%µ£ /ENABLE
Task: {DEF90D25-4E83-4FEC-BB83-6986C81EB1E7} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(4): schtasks.exe -> /Change /TN %µ£\CLMLSvc_P2G8%µ£ /ENABLE
Task: {DEF90D25-4E83-4FEC-BB83-6986C81EB1E7} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(5): schtasks.exe -> /Change /TN %µ£\CLVDLauncher%µ£ /ENABLE
Task: {DEF90D25-4E83-4FEC-BB83-6986C81EB1E7} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(6): schtasks.exe -> /Change /TN %µ£\CreateChoiceProcessTask%µ£ /ENABLE
Task: {DEF90D25-4E83-4FEC-BB83-6986C81EB1E7} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(7): schtasks.exe -> /Change /TN %µ£\Dell SupportAssistAgent AutoUpdate%µ£ /ENABLE
Task: {DEF90D25-4E83-4FEC-BB83-6986C81EB1E7} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(8): schtasks.exe -> /Change /TN %µ£\FreeDownloadManagerNetworkMonitor%µ£ /ENABLE
Task: {DEF90D25-4E83-4FEC-BB83-6986C81EB1E7} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(9): schtasks.exe -> /Change /TN %µ£\GoogleUpdateTaskMachineCore%µ£ /ENABLE
Task: {DEF90D25-4E83-4FEC-BB83-6986C81EB1E7} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(10): schtasks.exe -> /Change /TN %µ£\GoogleUpdateTaskMachineUA%µ£ /ENABLE
Task: {DEF90D25-4E83-4FEC-BB83-6986C81EB1E7} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(11): schtasks.exe -> /Change /TN %µ£\HP AR Program Upload - b010e8a9657649c3b397d3205160d369eed7498a36ef4b978da765dceba6630c%µ£ /ENABLE
Task: {DEF90D25-4E83-4FEC-BB83-6986C81EB1E7} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(12): schtasks.exe -> /Change /TN %µ£\HPCeeScheduleForjcld1950%µ£ /ENABLE
Task: {DEF90D25-4E83-4FEC-BB83-6986C81EB1E7} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(13): schtasks.exe -> /Change /TN %µ£\HPCustParticipation HP Deskjet 3050A J611 series%µ£ /ENABLE
Task: {DEF90D25-4E83-4FEC-BB83-6986C81EB1E7} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(14): schtasks.exe -> /Change /TN %µ£\IObitSelfCheckTask%µ£ /ENABLE
Task: {DEF90D25-4E83-4FEC-BB83-6986C81EB1E7} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(15): schtasks.exe -> /Change /TN %µ£\MicrosoftEdgeUpdateTaskMachineCore%µ£ /ENABLE
Task: {DEF90D25-4E83-4FEC-BB83-6986C81EB1E7} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(16): schtasks.exe -> /Change /TN %µ£\MicrosoftEdgeUpdateTaskMachineUA%µ£ /ENABLE
Task: {DEF90D25-4E83-4FEC-BB83-6986C81EB1E7} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(17): schtasks.exe -> /Change /TN %µ£\OneDrive Standalone Update Task-S-1-5-21-2238367292-1815982713-3710956016-1001%µ£ /ENABLE
Task: {DEF90D25-4E83-4FEC-BB83-6986C81EB1E7} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(18): schtasks.exe -> /Change /TN %µ£\Start WinZip Driver Updater Check Driver Update%µ£ /ENABLE
Task: {DEF90D25-4E83-4FEC-BB83-6986C81EB1E7} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(19): schtasks.exe -> /Change /TN %µ£\Start WinZip Driver Updater for JCLD@jcld1950(logon)%µ£ /ENABLE
Task: {DEF90D25-4E83-4FEC-BB83-6986C81EB1E7} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(20): schtasks.exe -> /Change /TN %µ£\Start WinZip Driver Updater Schedule%µ£ /ENABLE
Task: {DEF90D25-4E83-4FEC-BB83-6986C81EB1E7} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(21): schtasks.exe -> /Change /TN %µ£\Start WinZip Driver Updater Update%µ£ /ENABLE
Task: {DEF90D25-4E83-4FEC-BB83-6986C81EB1E7} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(22): schtasks.exe -> /Change /TN %µ£\Start WinZip Registry Optimizer with delay for JCLD@jcld1950%µ£ /ENABLE
Task: {DEF90D25-4E83-4FEC-BB83-6986C81EB1E7} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(23): schtasks.exe -> /Change /TN %µ£\Synaptics TouchPad Enhancements%µ£ /ENABLE
Task: {DEF90D25-4E83-4FEC-BB83-6986C81EB1E7} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(24): schtasks.exe -> /Change /TN %µ£\Toolbox.exe_{5EBA4948-0308-412A-9F1F-4F7A2A77CCD5}%µ£ /ENABLE
Task: {DEF90D25-4E83-4FEC-BB83-6986C81EB1E7} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(25): schtasks.exe -> /Change /TN %µ£\User_Feed_Synchronization-{19F1BCE8-C355-423E-824F-8A05371EF1A9}%µ£ /ENABLE
Task: {DEF90D25-4E83-4FEC-BB83-6986C81EB1E7} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(26): schtasks.exe -> /Change /TN %µ£\AVAST Software\Gaming mode Task Scheduler recovery%µ£ /DISABLE
Task: {EBCD9D2A-4321-412F-9658-DDF02DF435AC} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Pas de fichier <==== ATTENTION
Task: {EE0F68BE-7CA0-4C85-9B31-02147DE69C3E} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Pas de fichier <==== ATTENTION
Task: {F45E17B7-B0DB-4958-B4B7-7F3463B6858F} - System32\Tasks\PC Cleaner automatic scan and notifications => C:\Program Files (x86)\PC Cleaner\PCCNotifications.exe [4518144 2020-12-01] (PC HelpSoft Labs Inc -> PC Helpsoft) <==== ATTENTION
Task: {FCCD8CDB-87E0-4995-A9C0-E3DFA2DAE43B} - System32\Tasks\Start WinZip Driver Updater Schedule => C:\Program Files\WinZip Driver Updater\DriverUpdater.exe [27591976 2020-09-22] () [Fichier non signé]
Task: {FE9E494B-40E1-45F2-858B-56EA4F86867F} - \52c7f24b-d97f-443a-9318-a7dbe165a705-2 -> Pas de fichier <==== ATTENTION
Task: C:\WINDOWS\Tasks\Start WinZip Registry Optimizer with delay for JCLD@jcld1950.job => C:\Program Files\WinZip Registry Optimizer\RegistryOptimizer.exe
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
HKU\S-1-5-21-2238367292-1815982713-3710956016-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
Edge HomeButtonPage: HKU\S-1-5-21-2238367292-1815982713-3710956016-1001 -> hxxp://www.ourluckysites.com/?type=hp&ts=1492590830&z=ed5ce4c98dec182fdb1fc77g9zetbo3w7tdefb8cbo&from=che0812&uid=ST500LT012-9WS142_W0V9JFHYXXXXW0V9JFHY
Edge HomePage: Default -> hxxp://www.ourluckysites.com/?type=hp&ts=1492590830&z=ed5ce4c98dec182fdb1fc77g9zetbo3w7tdefb8cbo&from=che0812&uid=ST500LT012-9WS142_W0V9JFHYXXXXW0V9JFHY
Edge StartupUrls: Default -> "hxxp://www.ourluckysites.com/?type=hp&ts=1492590830&z=ed5ce4c98dec182fdb1fc77g9zetbo3w7tdefb8cbo&from=che0812&uid=ST500LT012-9WS142_W0V9JFHYXXXXW0V9JFHY"
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
Edge HKLM-x32\...\Edge\Extension: [kajikgogckeajjplomldcempamhidmcc]
CHR DefaultSearchURL: Default -> hxxp://www.mystarting123.com/search/index.php?z=1ca2b352fa25741859aa483gdz6t4wbqbo9e3m8bfge&q={searchTerms}
CHR DefaultSearchKeyword: Default -> mystarting123
C:\Users\jcld1950\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce
C:\Users\jcld1950\AppData\Local\Google\Chrome\User Data\Default\Extensions\pilplloabdedfmialnfchjomjmpjcoej
CHR HKLM\...\Chrome\Extension: [hkhkiakolggnnicallabhkobalpeplpi] - <pas de Path/update_url>
CHR HKLM\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce]
CHR HKLM\...\Chrome\Extension: [pdpcpceofkopegffcdnffeenbfdldock]
CHR HKLM\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej]
CHR HKU\S-1-5-21-2238367292-1815982713-3710956016-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bbjllphbppobebmjpjcijfbakobcheof]
CHR HKU\S-1-5-21-2238367292-1815982713-3710956016-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce]
CHR HKU\S-1-5-21-2238367292-1815982713-3710956016-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pdpcpceofkopegffcdnffeenbfdldock]
CHR HKU\S-1-5-21-2238367292-1815982713-3710956016-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce]
CHR HKLM-x32\...\Chrome\Extension: [pdpcpceofkopegffcdnffeenbfdldock]
CHR HKLM-x32\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej]
S0 MBAMSwissArmy; System32\Drivers\mbamswissarmy.sys [X]
2020-12-29 22:59 - 2020-12-29 23:00 - 000931552 _____ (Restoro) C:\Users\jcld1950\Downloads\Restoro.exe
2020-12-29 15:16 - 2020-12-29 15:16 - 000259728 _____ (AVG Technologies CZ, s.r.o.) C:\Users\jcld1950\Downloads\avg_antivirus_free_setup.exe
2020-12-29 15:17 - 2017-01-01 17:41 - 000000000 ____D C:\ProgramData\Avg
2020-12-03 21:26 - 2020-10-26 11:45 - 000176744 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswf2afc13cd70a10c1.tmp
2020-12-03 21:26 - 2020-04-21 13:37 - 000521752 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswb2d80a5994f87b0d.tmp
2020-12-03 21:26 - 2019-09-11 10:44 - 000851608 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw856aa4676550ed24.tmp
2020-12-03 21:26 - 2019-09-11 10:44 - 000469832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswb0871501a50c5b72.tmp
2020-12-03 21:26 - 2019-09-11 10:44 - 000326416 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswce709d445934f44d.tmp
2020-12-03 21:26 - 2019-09-11 10:44 - 000247888 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswa02d22776b909d89.tmp
2020-12-03 21:26 - 2019-09-11 10:44 - 000206408 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw6ae7e158a32ac1ad.tmp
2020-12-03 21:26 - 2019-09-11 10:44 - 000109280 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswa60cbcafed6b8cc7.tmp
2020-12-03 21:26 - 2019-09-11 10:44 - 000097352 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw9e149036cd0be85e.tmp
2020-12-03 21:26 - 2019-09-11 10:44 - 000084856 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw8111818df2a81809.tmp
2020-12-03 21:26 - 2019-09-11 10:44 - 000042784 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw659f6c156cc0f7a8.tmp
2020-12-03 21:26 - 2019-09-11 10:44 - 000037152 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw78cd9ebf7e50a69c.tmp
2020-12-03 21:26 - 2019-09-11 10:44 - 000016816 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw8c87ee222099fd1b.tmp
2020-12-03 21:25 - 2019-09-11 10:44 - 000332368 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw8fcb73a1ecd5ae46.tmp
emptytemp:
end::