start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
HKLM\Software\...\AppCompatFlags\Custom\chrome.exe: [{cf2797aa-b7ec-e311-8ed9-005056c00008}.sdb] ->
HKLM\Software\...\AppCompatFlags\Custom\explorer.zza: [{cf2797aa-b7ec-e311-8ed9-005056c00008}.sdb] ->
HKLM\Software\...\AppCompatFlags\Custom\iexplore.exe: [{cf2797aa-b7ec-e311-8ed9-005056c00008}.sdb] ->
Task: {141F602E-2EDE-4AB0-BDB3-735B7E21E47D} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Pas de fichier
Task: {1F5DA72C-8853-4A05-8B5F-CF226D6A87D9} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Pas de fichier
Task: {43B98ABB-0171-4569-9883-854848599D72} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Pas de fichier
Task: {4490F44F-6842-43CD-91AB-3684DCCE6B5C} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Pas de fichier
Task: {5DC1EDF2-EC16-41A9-A47E-41AB0C58D33D} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Pas de fichier
Task: {71A94BBA-1567-4146-AEB8-D86190653CA2} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Pas de fichier
Task: {8731A593-7E06-42AC-8DB7-10A539F6D216} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Pas de fichier
Task: {D22DBDF4-DA53-4913-A554-CB1A9C62E826} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Pas de fichier
Task: {D89F5BDD-D3AB-41BC-93F0-25996BF484F1} - \WPD\SqmUpload_S-1-5-21-2539059618-1822319508-3678612016-1001 -> Pas de fichier
Task: {F2C83292-DCE3-40AA-84A6-905F103F8CFC} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Pas de fichier
Task: {FC2712A3-39BF-4234-8DF5-1C5BCEA7D0A8} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Pas de fichier
Task: {FD7B0FB7-7B50-436C-82A2-4E594D634238} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier
Task: {FEB17B2F-1043-441A-B93C-FD1309F9924E} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Pas de fichier
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
FF Extension: (Zotero Connector) - C:\Users\maeva\AppData\Roaming\Mozilla\Firefox\Profiles\3glqk7b1.default\Extensions\zotero@chnm.gmu.edu.xpi
FF Extension: (Cats Love Hearts) - C:\Users\maeva\AppData\Roaming\Mozilla\Firefox\Profiles\3glqk7b1.default\Extensions\{17de15cd-11e0-46b3-bb17-5a87c96a5f8c}.xpi
FF Extension: (Christmas Welcome by M♥Donna) - C:\Users\maeva\AppData\Roaming\Mozilla\Firefox\Profiles\3glqk7b1.default\Extensions\{5de42e8b-dc9d-44ab-8383-25870e4903fa}.xpi
FF Extension: (peacock tail) - C:\Users\maeva\AppData\Roaming\Mozilla\Firefox\Profiles\3glqk7b1.default\Extensions\{696bbf89-20ef-4e12-ab36-418cd4424542}.xpi
FF Extension: (Spring Garden Serenity by MaDonna) - C:\Users\maeva\AppData\Roaming\Mozilla\Firefox\Profiles\3glqk7b1.default\Extensions\{9623927c-641b-4408-b5c1-55c439395826}.xpi
FF Extension: (ANIMATED Once upon a time...) - C:\Users\maeva\AppData\Roaming\Mozilla\Firefox\Profiles\3glqk7b1.default\Extensions\{ad9cfe20-a7e9-4992-8390-d87e30c10cb6}.xpi
FF Extension: (Running Foxes by MaDonna) - C:\Users\maeva\AppData\Roaming\Mozilla\Firefox\Profiles\3glqk7b1.default\Extensions\{dfb93b31-21ba-46fc-977d-46300ce0a76b}.xpi
2021-05-03 20:38 - 2021-05-03 20:38 - 000000000 ____D C:\WINDOWS\system32\Tasks\McAfee
2021-05-03 20:29 - 2021-05-03 20:29 - 011096456 _____ (McAfee, Inc.) C:\Users\maeva\Desktop\MCPR.exe
2021-05-03 20:24 - 2021-05-03 20:24 - 000000000 ____D C:\ProgramData\McInstTemp0283831620066258
2021-05-03 20:24 - 2017-12-08 03:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
AlternateDataStreams: C:\ProgramData\Temp:FCA8C9CD [234]
SearchScopes: HKU\S-1-5-21-2539059618-1822319508-3678612016-1001 -> DefaultScope {4EBC01D2-6C1A-4879-97BC-5AD8E678B401} URL =
SearchScopes: HKU\S-1-5-21-2539059618-1822319508-3678612016-1001 -> {4EBC01D2-6C1A-4879-97BC-5AD8E678B401} URL =
IE trusted site: HKU\S-1-5-21-2539059618-1822319508-3678612016-1001\...\sharepoint.com -> hxxps://unilim-files.sharepoint.com
EmptyTemp:
cmd: ipconfig /flushdns
cmd: DISM /Online /Cleanup-image /Restorehealth
cmd: sfc /scannow
end::