start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
ShortcutTarget: Folding@home.lnk -> C:\Program Files (x86)\FAHClient\HideConsole.exe (Pas de fichier)
Task: {B1E7B49A-4348-4A26-AC43-03B2EED1C130} - System32\Tasks\UninstallDDS-C960901F-CE14-4DE1-9729-1305F719A337 => C:\WINDOWS\TEMP\DeleteFolderTask.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\RunDLC.job => cmd c sc start Dell Help SupportWORKGROUP DESKTOP 9NPKK38 03
FF SearchPlugin: C:\Users\alexandre\AppData\Roaming\Mozilla\Firefox\Profiles\8a5wapu2.default\searchplugins\McSiteAdvisor.xml
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM-x32\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
OPR Extension: (Avira Safe Shopping) - C:\Users\alexandre\AppData\Roaming\Opera Software\Opera Stable\Extensions\dalelnnofafalcmkmnhdbigbjjkloabo [2020-09-23]
OPR Extension: (Avira Password Manager) - C:\Users\alexandre\AppData\Roaming\Opera Software\Opera Stable\Extensions\ngohaaocccbohaffogpbgfpmpgbcgccg [2020-09-23]
OPR Extension: (Avira Phantom VPN gratuit – débloquez des sites) - C:\Users\alexandre\AppData\Roaming\Opera Software\Opera Stable\Extensions\pcgkmkjdikhiodinhloioejnpjgmfigd [2020-09-23]
S3 Browser; %SystemRoot%\System32\browser.dll [X]
S3 GPU-Z-v2; \??\C:\Users\alexandre\AppData\Local\Temp\GPU-Z-v2.sys [X]
2021-05-17 12:21 - 2021-05-17 12:21 - 000000000 ____D C:\Program Files (x86)\DummyDir
2021-05-16 16:31 - 2021-05-16 16:31 - 000002415 _____ C:\Users\alexandre\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chromium.lnk
2021-05-16 16:31 - 2021-05-16 16:31 - 000002378 _____ C:\Users\alexandre\Desktop\Chromium.lnk
2021-05-16 16:30 - 2021-05-16 16:32 - 000000000 ____D C:\Users\alexandre\AppData\Local\Chromium
CustomCLSID: HKU\S-1-5-21-4090224801-1152743388-1623332218-1001_Classes\CLSID\{635EFA6F-08D6-4EC9-BD14-8A0FDE975159}\localserver32 -> C:\Users\alexandre\AppData\Local\Chromium\Application\92.0.4510.0\notification_helper.exe
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BFE => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TweakingRemoveSafeBoot => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TweakingRemoveSafeBoot => ""="Service"
SearchScopes: HKU\S-1-5-21-4090224801-1152743388-1623332218-1001 -> DefaultScope {9175DEAC-D3C0-4704-82B8-409C19877F3F} URL =
SearchScopes: HKU\S-1-5-21-4090224801-1152743388-1623332218-1001 -> {9175DEAC-D3C0-4704-82B8-409C19877F3F} URL =
EmptyTemp:
cmd: ipconfig /flushdns
cmd: netsh advfirewall reset
cmd: netsh winsock reset
cmd: DISM /Online /Cleanup-image /Restorehealth
end::