start::
closeprocesses:
createrestorepoint:
cmd: type C:\ProgramData\NTUSER.pol
HKU\S-1-5-21-3798059755-1009560777-152125786-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [32440376 2021-01-06] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-3798059755-1009560777-152125786-1001\...\Run: [EPSDNMON] => ""
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {0734E3CB-057D-406A-A0DD-619C1C8BDC03} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Pas de fichier <==== ATTENTION
Task: {0834B982-B225-417A-9878-FFC2A541BC32} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Pas de fichier <==== ATTENTION
Task: {084EA669-359D-4D37-9ED7-DDA65BF6BAE8} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
Task: {08D518E2-E627-4B6B-ADB9-B3B119B11E17} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Pas de fichier <==== ATTENTION
Task: {20CC5E29-8EBA-4753-867F-2977ABF90515} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Pas de fichier <==== ATTENTION
Task: {22DB95E3-735F-44B2-B723-887EF1117CBA} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Pas de fichier <==== ATTENTION
Task: {35FF38EE-CAC1-490F-B5BC-7165A1384A87} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Pas de fichier <==== ATTENTION
Task: {3C84798F-3D89-485D-87DE-A01E83F91C9C} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Pas de fichier <==== ATTENTION
Task: {3E2C0AAC-5E77-4510-B44F-EECC6E44FC2C} - \WPD\SqmUpload_S-1-5-21-3798059755-1009560777-152125786-1001 -> Pas de fichier <==== ATTENTION
Task: {3EE960A7-18E5-44FD-AB47-9F5288207435} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Pas de fichier <==== ATTENTION
Task: {4C184F37-3581-457E-B762-7B1A3F0C364E} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Pas de fichier <==== ATTENTION
Task: {543D254E-4EAF-4489-933B-4A285DF461DB} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload => {EBF00FCB-0769-4B81-9BEC-6C05514111AA}
Task: {6CC3A103-24C3-4298-B11F-519A64A0400B} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Pas de fichier <==== ATTENTION
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task => {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Task: {70E9C07A-5758-46DB-830B-EC8967F2EFC1} - System32\Tasks\{C00F59E7-E6EE-44E4-BB49-06C83E4A2510} => C:\windows\system32\pcalua.exe -a E:\Msetup.exe -d E:\
Task: {7CBA9B03-9C63-4EAE-9BF1-8A007D6B3217} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Pas de fichier <==== ATTENTION
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task => {1B1F472E-3221-4826-97DB-2C2324D389AE}
Task: {AD920824-9FDF-4DBE-9DC5-F933CA79D7E9} - System32\Tasks\{6EAB815A-DBF8-42D0-A1E8-5FAFC6BF3A4C} => C:\windows\system32\pcalua.exe -a E:\setup.exe -d E:\
Task: {B4832F03-7B2B-4718-8CFB-8607D9BCB95A} - \Microsoft\Windows\Setup\gwx\rundetector -> Pas de fichier <==== ATTENTION
Task: {B728F426-D2EE-40C4-B588-18E1B509552B} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Pas de fichier <==== ATTENTION
Task: {CE7EA6B6-6BD8-4AF0-A88E-CFA418518BC6} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Pas de fichier <==== ATTENTION
Task: {D0A556CD-B700-422B-8A33-A6BAB27F7F06} - System32\Tasks\{C9BA1240-8F8B-4B1E-8765-D1A5E6C3C2C5} => C:\windows\system32\pcalua.exe -a E:\setup.exe -d E:\
Task: {FC29EB69-3EE8-436F-A0D4-4F0B08B2AA4F} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Pas de fichier <==== ATTENTION
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt => non trouvé(e)
CHR HKLM\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl]
2021-01-18 15:32 - 2019-12-22 10:30 - 000000000 ____D C:\ProgramData\AVG
2021-01-10 11:48 - 2019-12-22 10:35 - 000469040 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\aswcfb5b17101cb5432.tmp
2021-01-08 09:26 - 2020-12-18 12:06 - 000214936 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\asw487e952f55c8130b.tmp
2021-01-08 09:25 - 2019-12-22 10:35 - 000325056 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\asw04f9679f0547646c.tmp
2020-12-28 19:32 - 2020-08-21 10:48 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVAST Software
AV: Avira Antivirus (Disabled - Out of date) {B3F630BD-538D-1B4A-14FA-14B63235278F}
AV: AVG Antivirus (Enabled - Up to date) {4FC75CA5-1654-5411-7CFB-1893D506BCF4}
AS: Avira Antivirus (Disabled - Out of date) {0897D159-75B7-14C4-2E4A-2FC449B26D32}
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`26hfm [0]
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`27hfm [0]
FirewallRules: [{5CAECBDA-3280-4478-A949-C8C20FE39F4D}] => (Allow) E:\Network\EpsonNetSetup\ENEasyApp.exe => Pas de fichier
FirewallRules: [{3EB7E2D6-524E-4DB9-AADE-665483A293E4}] => (Allow) E:\Network\EpsonNetSetup\ENEasyApp.exe => Pas de fichier
cmd: sfc /scannow
emptytemp:
end::