start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe [1707080 2020-05-13]
HKU\S-1-5-21-2316644190-2871315461-3037774804-1001\...\Run: [Web Companion] => C:\Users\Utilisateur\AppData\Roaming\Lavasoft\Web Companion\Application\WebCompanion.exe
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction
Task: {52BD860C-E0F5-41A4-9B8E-1D5A5246042E} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
FF NewTab: Mozilla\Firefox\Profiles\p2ck6cmi.default -> hxxps://mysearchengine.co/homepage?hp=1&bitmask=9996&pId=IC200301&iDate=2020-10-30 10:48:40&bName=
FF SearchPlugin: C:\Users\Utilisateur\AppData\Roaming\Mozilla\Firefox\Profiles\p2ck6cmi.default\searchplugins\My Bing Search.xml
FF NewTab: Mozilla\Firefox\Profiles\z8xkw8ds.default-release -> hxxps://mysearchengine.co/homepage?hp=1&bitmask=9996&pId=IC200301&iDate=2020-10-30 10:48:40&bName=
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\190.7.0\\npsitesafety.dll
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
BRA Extension: (Avast SafePrice | Comparison, deals, coupons) - C:\Users\Utilisateur\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
BRA Extension: (Avast Online Security) - C:\Users\Utilisateur\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
BRA Extension: (Brave Tor Client Updater (Windows)) - C:\Users\Utilisateur\AppData\Local\BraveSoftware\Brave-Browser\User Data\cpoalefficncklhjfpglfiplenlpccdb
R2 vToolbarUpdater190.7.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\190.7.0\ToolbarUpdater.exe
2021-05-28 22:22 - 2021-05-28 22:22 - 000014837 ____H C:\Users\Utilisateur\Desktop\~WRL3008.tmp
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
SearchScopes: HKU\S-1-5-21-2316644190-2871315461-3037774804-1001 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid=
Toolbar: HKLM - AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG SafeGuard toolbar\19.7.0.632\AVG SafeGuard toolbar_toolbar.dll
Toolbar: HKLM-x32 - AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\19.7.0.632\AVG SafeGuard toolbar_toolbar.dll
Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\190.7.0\ViProtocol.dll
IE trusted site: HKU\S-1-5-21-2316644190-2871315461-3037774804-1001\...\webcompanion.com -> hxxp://webcompanion.com
EmptyTemp:
cmd: sfc /scannow
cmd: DISM /Online /Cleanup-image /Restorehealth
cmd: ipconfig /flushdns
cmd: netsh winsock reset
end::