start::
closeprocesses:
createrestorepoint:
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
IE trusted site: HKU\S-1-5-21-1233829802-4066592504-882342110-1001\...\webcompanion.com -> hxxp://webcompanion.com
C:\Program Files (x86)\Wondershare
HKLM-x32\...\Run: [DSATray] => C:\Program Files (x86)\Intel Driver and Support Assistant\DsaTray.exe [131360 2018-01-17] (Intel(R) Driver & Support Assistant -> Intel)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {8B80483C-60CE-42F7-B675-951264CA5B60} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
Task: {A836A5D2-3779-408B-AE61-D7E1DA1E44B0} - System32\Tasks\McInstruTrack => C:\ProgramData\McAfee\McInstruTrack\McInstruTrack.exe
C:\ProgramData\McAfee
Task: {F21E2F3F-EA42-42A4-A59D-7B33420F8006} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(1): schtasks.exe -> /Change /TN "\Adobe Acrobat Update Task" /ENABLE
Task: {F21E2F3F-EA42-42A4-A59D-7B33420F8006} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(2): schtasks.exe -> /Change /TN "\AdobeGCInvoker-1.0" /ENABLE
Task: {F21E2F3F-EA42-42A4-A59D-7B33420F8006} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(3): schtasks.exe -> /Change /TN "\GoogleUpdateTaskMachineCore" /ENABLE
Task: {F21E2F3F-EA42-42A4-A59D-7B33420F8006} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(4): schtasks.exe -> /Change /TN "\GoogleUpdateTaskMachineUA" /ENABLE
Task: {F21E2F3F-EA42-42A4-A59D-7B33420F8006} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(5): schtasks.exe -> /Change /TN "\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132" /ENABLE
Task: {F21E2F3F-EA42-42A4-A59D-7B33420F8006} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(6): schtasks.exe -> /Change /TN "\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon" /ENABLE
Task: {F21E2F3F-EA42-42A4-A59D-7B33420F8006} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(7): schtasks.exe -> /Change /TN "\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473" /ENABLE
Task: {F21E2F3F-EA42-42A4-A59D-7B33420F8006} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(8): schtasks.exe -> /Change /TN "\MicrosoftEdgeUpdateTaskMachineCore" /ENABLE
Task: {F21E2F3F-EA42-42A4-A59D-7B33420F8006} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(9): schtasks.exe -> /Change /TN "\MicrosoftEdgeUpdateTaskMachineCore1d73d7e909d4652" /ENABLE
Task: {F21E2F3F-EA42-42A4-A59D-7B33420F8006} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(10): schtasks.exe -> /Change /TN "\MicrosoftEdgeUpdateTaskMachineUA" /ENABLE
Task: {F21E2F3F-EA42-42A4-A59D-7B33420F8006} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(11): schtasks.exe -> /Change /TN "\Opera GX scheduled assistant Autoupdate 1617937101" /ENABLE
Task: {F21E2F3F-EA42-42A4-A59D-7B33420F8006} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(12): schtasks.exe -> /Change /TN "\Opera GX scheduled Autoupdate 1590602080" /ENABLE
Task: {F21E2F3F-EA42-42A4-A59D-7B33420F8006} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(13): schtasks.exe -> /Change /TN "\Opera GX scheduled Autoupdate 1607010867" /ENABLE
Task: {F21E2F3F-EA42-42A4-A59D-7B33420F8006} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(14): schtasks.exe -> /Change /TN "\Opera GX scheduled Autoupdate 1610966197" /ENABLE
Task: {F21E2F3F-EA42-42A4-A59D-7B33420F8006} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(15): schtasks.exe -> /Change /TN "\AVAST Software\Gaming mode Task Scheduler recovery" /DISABLE
Task: {F31C8925-F393-4126-802C-1011047E5B5E} - System32\Tasks\RtHDVBg_ListenToDevice => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1488832 2017-12-13] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Edge Extension: (Adblock Plus) -> 10_EyeoGmbHAdblockPlus_d55gg7py3s0m0 => C:\Program Files\WindowsApps\EyeoGmbH.AdblockPlus_0.9.18.0_neutral__d55gg7py3s0m0 [non trouvé(e)]
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
FF Notifications: Mozilla\Firefox\Profiles\sc4vgzbu.default -> hxxps://www.youtube.com; hxxps://www.facebook.com; hxxps://csgotrinity.com; hxxps://www.pvpro.com; hxxps://gamdom.com; hxxps://farmskins.pushcrew.com; hxxps://pubg.hellcase.com; hxxps://hellcase.com; hxxps://skinhub.com; hxxps://www.streamgratuit.ws; hxxps://allustreaming.me; hxxps://commande.dominos.fr; hxxps://aternos.org
FF Extension: (Avast Online Security) - C:\Users\ninja\AppData\Roaming\Mozilla\Firefox\Profiles\sc4vgzbu.default\Extensions\wrc@avast.com.xpi [2020-04-21] [UpdateUrl:hxxps://firefoxext.avcdn.net/firefoxext/avast/aos/update.json]
FF Extension: (Pas de nom) - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi [non trouvé(e)]
FF HKLM\...\Firefox\Extensions: [netsight@nielsen.com] - C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter1\FirefoxAddOns\netsight@nielsen.xpi => non trouvé(e)
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [X]
S3 AppleKmdfFilter; \SystemRoot\System32\drivers\AppleKmdfFilter.sys [X]
S3 AppleLowerFilter; \SystemRoot\System32\drivers\AppleLowerFilter.sys [X]
S3 VBAudioVACMME; \SystemRoot\System32\drivers\vbaudio_cable64_win7.sys [X]
2021-08-09 04:30 - 2017-10-23 03:31 - 000000000 ____D C:\ProgramData\AVAST Software
2021-08-09 02:53 - 2018-02-22 17:31 - 000000000 ____D C:\Users\ninja\AppData\Local\AVAST Software
2021-08-09 02:34 - 2021-04-30 07:32 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVAST Software
cmd: netsh advfirewall reset
cmd: sfc /scannow
cmd: DISM /Online /Cleanup-image /Restorehealth
emptytemp:
end::