start::
closeprocesses:
createrestorepoint:
Task: {00CD5065-6146-46B8-873A-598BAC8AC88B} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Pas de fichier <==== ATTENTION
Task: {2F4EE04D-13B2-4331-9A3F-7581B71AB141} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Pas de fichier <==== ATTENTION
Task: {5C77FFD9-EC24-49DB-9EB7-C6D5B43F13DD} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Pas de fichier <==== ATTENTION
Task: {7BAEBF38-9195-4BD2-8B2B-84FAD5DAF8CC} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Pas de fichier <==== ATTENTION
Task: {89FADE14-FBD6-4BE2-92B3-A36D6D8077C5} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
Task: {8D6B62F8-7262-4142-BE24-A3921C523E4D} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Pas de fichier <==== ATTENTION
Task: {B53ECAAE-64DE-4F67-BFF9-EA7D19088F8D} - System32\Tasks\Microsoft\Windows\OrangeUpdate_Install => C:\Program Files (x86)\Orange Update\install.bat [0 2020-02-25] () <==== ATTENTION
Task: {BDAAF5AE-35D2-4A9D-8638-7B4B040CB53F} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Pas de fichier <==== ATTENTION
Task: {BDCE0C34-FF79-44F7-97E2-68DA274E325F} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Pas de fichier <==== ATTENTION
Task: {C524E5FC-F3D3-4BE5-A7FA-6333F0C6CFE2} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Pas de fichier <==== ATTENTION
Task: {F63C77D1-6E84-4242-BCEA-51CD175826B0} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Pas de fichier <==== ATTENTION
Task: {F7B9CF46-556F-4839-A403-0D6AEB9C5B98} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Pas de fichier <==== ATTENTION
Task: {FF8A47CA-FCC8-4CB0-84E0-38A5362175B6} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Pas de fichier <==== ATTENTION
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
FF Extension: (Avira Browser Safety) - C:\Users\Sylvie\AppData\Roaming\Mozilla\Firefox\Profiles\De9eYUWU.default\Extensions\abs@avira.com [2016-01-13] []
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1203133.dll [2013-06-26] (Adobe Systems, Inc.) [Fichier non signé]
CHR Notifications: Default -> hxxps://a.captcha-sourcecenter.com; hxxps://drive.google.com; hxxps://forums.futura-sciences.com; hxxps://www.pinterest.fr
C:\Users\Sylvie\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\flliilndjeohchalpbbcdekjklbdgfkk
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPNOT14/3
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT14/3
HKU\S-1-5-21-2862576371-3459039499-978489033-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPNOT14/3
HKU\S-1-5-21-2862576371-3459039499-978489033-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPNOT14/3
SearchScopes: HKLM -> {32EB8596-94B5-4755-89E1-FDA3D4AFBF6D} URL = hxxp://www.amazon.fr/s/ref=azs_osd_ieafr?ie=UTF-8&tag=hp-fr2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/709-29563-11896-9/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKLM-x32 -> {32EB8596-94B5-4755-89E1-FDA3D4AFBF6D} URL = hxxp://www.amazon.fr/s/ref=azs_osd_ieafr?ie=UTF-8&tag=hp-fr2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/709-29563-11896-9/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
SearchScopes: HKU\S-1-5-21-2862576371-3459039499-978489033-1001 -> {32EB8596-94B5-4755-89E1-FDA3D4AFBF6D} URL = hxxp://www.amazon.fr/s/ref=azs_osd_ieafr?ie=UTF-8&tag=hp-fr2-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-2862576371-3459039499-978489033-1001 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/709-29563-11896-9/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
FirewallRules: [{1C5A7430-882F-4A99-9FD6-C5EBF23C665D}] => (Allow) C:\Program Files (x86)\Orange\OrangeUpdate\Service\OUCore.exe => Pas de fichier
FirewallRules: [{D7684124-E7BB-47DE-B244-ECA6B57BF649}] => (Allow) C:\Program Files (x86)\Orange\OrangeUpdate\Service\OUCore.exe => Pas de fichier
FirewallRules: [{D4647406-F079-4F03-9E5E-C744D4A2DE5D}] => (Allow) C:\Program Files (x86)\Orange\ma Livebox\dedicarz\PluginDmControlPoint.exe => Pas de fichier
FirewallRules: [{835C9256-DF57-4577-AFDC-56B1B34106E8}] => (Allow) C:\Program Files (x86)\Orange\ma Livebox\dedicarz\PluginDmControlPoint.exe => Pas de fichier
FirewallRules: [{A888F254-12E7-4251-AFF9-C6AF29F66DA7}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPDeviceDetection3.exe => Pas de fichier
FirewallRules: [{4CCCB51E-D42A-47B1-87CB-81C0B6752992}] => (Allow) %LocalAppData%\HPConnectedMusic\Application\spotify_helper.exe => Pas de fichier
FirewallRules: [{C0DFA047-D43C-4F65-A19D-DFEB571D1578}] => (Allow) %LocalAppData%\HPConnectedMusic\Application\spotify_helper.exe => Pas de fichier
FirewallRules: [{70D4E869-F095-4987-815B-171CAF6B8A3D}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe => Pas de fichier
FirewallRules: [{9A281610-4F54-4EC7-82D0-7E6359CDE662}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe => Pas de fichier
FirewallRules: [{04D0F5DE-81DE-4724-A0E3-895C9124747A}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe => Pas de fichier
FirewallRules: [{B988E310-A41B-4AF1-92DC-E68281161C32}] => (Allow) C:\Program Files (x86)\Orange\ma Livebox\dedicarz\PluginDmControlPoint.exe => Pas de fichier
FirewallRules: [{BC6B750B-77BC-4CD5-A255-298A2D36EBEB}] => (Allow) C:\Program Files (x86)\Orange\ma Livebox\dedicarz\PluginDmControlPoint.exe => Pas de fichier
FirewallRules: [{1B1966DC-A643-4904-827C-58A2EE51673D}] => (Allow) C:\Users\Sylvie\AppData\Roaming\Zoom\bin\airhost.exe => Pas de fichier
FirewallRules: [{A0B5FE6A-3E97-46C9-A954-C68B4ADCFF20}] => (Allow) C:\Users\Sylvie\AppData\Roaming\Zoom\bin\airhost.exe => Pas de fichier
emptytemp:
end::