start::
closeprocesses:
createrestorepoint:
SearchScopes: HKU\S-1-5-21-3315169344-2330517061-3593892862-1001 -> DefaultScope {A9FA0840-9DAA-4015-9AC3-D556B2914758} URL =
SearchScopes: HKU\S-1-5-21-3315169344-2330517061-3593892862-1001 -> {A9FA0840-9DAA-4015-9AC3-D556B2914758} URL =
BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2021-05-03] (McAfee, LLC -> McAfee, LLC)
BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2021-05-03] (McAfee, LLC -> McAfee, LLC)
FirewallRules: [TCP Query User{9E344D96-12F7-48FC-8082-8DD40AA531FC}C:\program files\e2esoft\ivcam\ivcam.exe] => (Allow) C:\program files\e2esoft\ivcam\ivcam.exe => Pas de fichier
FirewallRules: [UDP Query User{7BD170AB-4DAE-4365-8A18-04A40AEA8A62}C:\program files\e2esoft\ivcam\ivcam.exe] => (Allow) C:\program files\e2esoft\ivcam\ivcam.exe => Pas de fichier
FirewallRules: [{2F4D7E1A-593E-4876-B9F3-06FF161045E5}] => (Allow) C:\Users\Quentin\AppData\Local\Programs\Opera\76.0.4017.94\opera.exe => Pas de fichier
C:\Program Files (x86)\VybeIrrailKa
C:\Program Files\ByteFence
C:\Program Files (x86)\Digital Communications
C:\Program Files\McAfee
Startup: C:\Users\Quentin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DesktopHut.lnk [2020-04-13]
ShortcutTarget: DesktopHut.lnk -> C:\Users\Quentin\Dropbox\Mon PC (DESKTOP-H1AEGDK)\Downloads\DesktopHut\DesktopHut App v4.0.0\DesktopHut.exe (Pas de fichier)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
CHR DefaultSearchURL: Default -> hxxps://fr.search.yahoo.com/search?fr=mcafee&type=E210FR91082G0&p={searchTerms}
CHR DefaultSearchKeyword: Default -> mcafee
CHR DefaultSuggestURL: Default -> hxxps://fr.search.yahoo.com/sugg/gossip/gossip-fr-partner?output=fxjson&appid=mca&source=yahoo_mcafee_searchassist&command={searchTerms}
C:\Users\Quentin\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
R1 TASANTIVIRUSKD; C:\Program Files (x86)\Digital Communications\SAntivirus\TASAntivirusKD.sys [86024 2021-05-03] (Digital Communications Inc -> Corp DCom) <==== ATTENTION
2021-05-03 20:01 - 2021-05-03 20:01 - 000000000 ___HD C:\avast! sandbox
2021-05-03 19:53 - 2021-05-05 22:18 - 000000000 ____D C:\Program Files (x86)\VybeIrrailKa
2021-05-03 19:52 - 2021-05-03 19:52 - 000000000 ____D C:\ProgramData\EvolutionInstaller
2021-05-03 18:47 - 2021-05-03 18:47 - 000000000 ____D C:\Program Files (x86)\Digital Communications
emptytemp:
end::