Start::
CreateRestorePoint
EmptyCLSID
EmptyFlash
EmptyTracing
EmptyPrefetch
EmptyProxy
O3 - Toolbar: 0xB1C218236549D4119B18009027A5CD4F - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} . (...) -- (.not file.)
O3 - Toolbar: 0x530CAC1D237DB34A856AB04D98CD982A - [HKCU]{1DAC0C53-7D23-4AB3-856A-B04D98CD982A} . (...) -- (.not file.)
C:\Users\xav\AppData\Roaming\Mozilla\Firefox\Profiles\f4g0fsdp.default\searchplugins\bing-lavasoft-ff59.xml =>PUP.Optional.LavasoftWebCompanion
C:\Users\xav\AppData\Roaming\Mozilla\Firefox\Profiles\f4g0fsdp.default\searchplugins\bing-lavasoft-ff59.xml [Unsigned] =>PUP.Optional.LavasoftWebCompanion
G2 - GCE: Preference [xav][User Data\Default\Extensions] [khndhdhbebhaddchcgnalcjlaekbbeof] =>.Bitdefender
G2 - GCE: Preference [xav][User Data\Default\Local Extension Settings] [fjjddemkcndmbbeeibicagaobbijjgmm] =>Toolbar.RechercheFrance
C:\Users\xav\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjjddemkcndmbbeeibicagaobbijjgmm =>Toolbar.RechercheFrance
C:\Users\xav\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fjjddemkcndmbbeeibicagaobbijjgmm =>Toolbar.RechercheFrance
C:\Users\xav\AppData\Roaming\Mozilla\Firefox\Profiles\f4g0fsdp.default\searchplugins\bing-lavasoft-ff59.xml =>PUP.Optional.LavasoftWebCompanion
C:\Windows\Installer\18d5f19.msp =>.SUP.Obsolete.Adobe
C:\Windows\Installer\4964823.msp =>.SUP.Obsolete.Adobe
C:\Windows\Installer\54f0075.msp =>.SUP.Obsolete.Adobe
C:\Users\xav\AppData\Local\Google\Chrome\User Data\Default\File System\002 =>.SUP.Temporary.Chrome
C:\Users\xav\AppData\Local\Google\Chrome\User Data\Default\File System\003 =>.SUP.Temporary.Chrome
C:\Users\xav\AppData\Local\Google\Chrome\User Data\Default\File System\004 =>.SUP.Temporary.Chrome
C:\Users\xav\AppData\Local\Google\Chrome\User Data\Default\File System\005 =>.SUP.Temporary.Chrome
C:\Users\xav\AppData\Local\Google\Chrome\User Data\Default\File System\006 =>.SUP.Temporary.Chrome
C:\Users\xav\AppData\Local\Google\Chrome\User Data\Default\File System\007 =>.SUP.Temporary.Chrome
C:\Users\xav\AppData\Local\Google\Chrome\User Data\Default\File System\008 =>.SUP.Temporary.Chrome
C:\Windows\System32\drivers\mfeaack.sys =>.McAfee, Inc.
C:\Windows\System32\drivers\mfeavfk.sys =>.McAfee, Inc.
C:\Windows\System32\drivers\mfefirek.sys =>.McAfee, Inc.
C:\Windows\System32\drivers\mfehidk.sys =>.McAfee, Inc.
C:\Windows\System32\drivers\mfeplk.sys =>.McAfee, Inc.
C:\Windows\System32\drivers\mfewfpk.sys =>.McAfee, Inc.
C:\Windows\Installer\13305.msi [1448448] =>.McAfee
O42 - Logiciel: Shared C Run-time for x64 - (.McAfee.) [HKLM][64Bits] -- {EF79C448-6946-4D71-8134-03407888C054} [Unsigned] =>.McAfee
HKLM\SOFTWARE\McAfee =>.McAfee Inc.
HKLM\SOFTWARE\WOW6432Node\McAfee =>.McAfee Inc.
HKU\S-1-5-21-4198092444-1068901214-1710953190-1002\SOFTWARE\67490f87-0893-5593-ae76-b1e5d0acd13f =>Adware.CrossRider
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} =>.SUP.Orphan
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:Q:\%SFT_MNT%\140066.fra\Office14\MSOSYNC.EXE =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:Q:\%SFT_MNT%\140066.fra\Office14\ONENOTEM.EXE =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:Q:\140066.fra\Office14\MSTORE.EXE =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:Q:\%systemDrive%\oasys\shared\ClrTestHost.exe =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:Q:\%systemDrive%\oasys\shared\ClrTestHost_x86.exe =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:Q:\%windir%\system32\Control.exe =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:Q:\140066.fra\Office14\EXCELC.EXE =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:Q:\140066.fra\Office14\MSOUC.EXE =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:Q:\140066.fra\Office14\OIS.EXE =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:Q:\140066.fra\Office14\MOMM.EXE =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:Q:\140066.fra\Office14\WINWORDC.EXE =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:Q:\%commonprogramfiles%\microsoft shared\virtualization handler\OfficeVirt.exe =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:Q:\%commonprogramfiles%\microsoft shared\virtualization handler\MapiServer.exe =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:Q:\%windir%\system32\cmd.exe =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:Q:\%commonprogramfiles%\microsoft shared\virtualization handler\VirtualOWSSuppManager.exe =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:Q:\%commonprogramfiles%\microsoft shared\virtualization handler\VirtualSearchHost.exe =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:Q:\%systemroot%\system32\rundll32.exe =>.SUP.Orphan.MUICache
cmd: ipconfig /flushdns
cmd: netsh advfirewall reset
cmd: netsh advfirewall set allprofiles state on
WinsockFix
EmptyRecycle
EmptyTemp
End::