start::
closeprocesses:
createrestorepoint:
FF Extension: (Search Extension by Ask) - C:\Users\Michel Bourquard\AppData\Roaming\Mozilla\Firefox\Profiles\0jwsc3ru.default-1511107266372\Extensions\_j5Membersttab03_@ext.ask.com.xpi [2021-01-30] [UpdateUrl:hxxps\/\/updates.tb.ask.com\/updateXpi.json?id=232530392&version=50.237.18.22572&track=TTAB03&trackRevision=1&fromId=_j5Membersttab03_%40ext.ask.com&isBridgeExtension=false]
FF Extension: (MyWay Search By FromDocToPDF) - C:\Users\Michel Bourquard\AppData\Roaming\Mozilla\Firefox\Profiles\0jwsc3ru.default-1511107266372\Extensions\_65Membersttab03_@download.fromdoctopdf.com.xpi [2021-01-30] [UpdateUrl:hxxps\/\/updates.tb.ask.com\/updateXpi.json?id=207743773&version=9.107.19.17356&track=TTAB03&trackRevision=1&fromId=_65Membersttab03_%40download.fromdoctopdf.com&isBridgeExtension=false]
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [Pas de fichier]
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Hosts: 0.0.0.1 mssplus.mcafee.com
2021-10-24 15:45 - 2019-03-10 11:23 - 000000000 ____D C:\Program Files\McAfee
2021-10-24 15:45 - 2014-10-29 20:15 - 000000000 ____D C:\ProgramData\McAfee
2021-10-24 15:44 - 2017-03-11 20:26 - 000000000 ____D C:\Program Files\Common Files\McAfee
Task: {066B95E4-871E-46FB-9CD9-15C1E14B3C2C} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Pas de fichier <==== ATTENTION
Task: {094CD275-5C71-4753-B57E-5566CA859498} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {0F6DBBD1-1FA5-490B-A482-1F43FCC689E6} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {11391F95-4D2C-429E-A78D-E3899B454753} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
Task: {187B3798-529E-4502-B845-3B969303C490} - System32\Tasks\Microsoft\Windows\Setup\UpgradeTriggers\UpgradeNowTask => C:\WINDOWS\System32\GWX\GWXUXWorker.exe
Task: {20B2D049-9C4F-4BBC-95F3-93B181EB0E79} - \AdobeFlashPlayerUpdate -> Pas de fichier <==== ATTENTION
Task: {28E6452A-7CFE-4AE9-B613-C14D97EC3F12} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Pas de fichier <==== ATTENTION
Task: {2D568052-6A2C-4B3B-A75F-17AD22477F5C} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Pas de fichier <==== ATTENTION
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe
Task: {60144C7B-AC18-41F4-A05A-9BA592701B9B} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Pas de fichier <==== ATTENTION
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task => {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Task: {748BA9A7-C8D2-45B9-B192-5C13BE173407} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Pas de fichier <==== ATTENTION
Task: {7858B52C-7A2A-4753-B607-FC18361B435F} - \Microsoft\Windows\Setup\gwx\rundetector -> Pas de fichier <==== ATTENTION
Task: {7B5E546E-5FD7-4143-B14B-45CCCD116002} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2019-08-15] (Adobe Inc. -> Adobe)
Task: {7F788DF8-77D1-43DB-B1C8-25054EBA722C} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Pas de fichier <==== ATTENTION
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task => {1B1F472E-3221-4826-97DB-2C2324D389AE}
Task: {8B6759EE-1C08-4B8F-955C-774AB5A6544E} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDFE067B1}
Task: {92DF0958-4CF5-4760-859A-2FA567FEF436} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Pas de fichier <==== ATTENTION
Task: {9FA1232C-EAB1-49E8-936D-8050BEDC0961} - \Microsoft\Windows\Setup\GWXTriggers\Time-Weekend -> Pas de fichier <==== ATTENTION
Task: {AFA50935-21CA-49C8-8B18-615A53162ED6} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Pas de fichier <==== ATTENTION
Task: {C8057690-78DD-4903-BFA9-EB5DD6E8E556} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Pas de fichier <==== ATTENTION
Task: {C9DCF59E-6B97-4C0C-8641-B8261089C8CA} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43DA-BFD7-FBEEA2180A1E}
Task: {D36FD9FD-9771-4713-872C-AC7F83872E25} - \AdobeFlashPlayerUpdate 2 -> Pas de fichier <==== ATTENTION
Task: {DB21EF32-6BA9-4118-BBC1-BC4FF48961E5} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4F47-879B-29A80C355D61}
Task: {DBB54931-11D1-4A86-AD94-72A4274C1099} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Pas de fichier <==== ATTENTION
Task: {DD252255-E3BB-4B9C-B299-4A4679B59566} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Pas de fichier <==== ATTENTION
Task: {E2253D6C-8C36-4202-890C-18A4A57B9980} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_238_Plugin.exe [1457208 2019-08-15] (Adobe Inc. -> Adobe)
Task: {F7EDB7C6-C7F2-4FDD-B405-2154E36A18DC} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload => {EBF00FCB-0769-4B81-9BEC-6C05514111AA}
Task: {FB2D3BE7-4D94-4BE9-BAEF-8F56E3B2DD98} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Pas de fichier <==== ATTENTION
Task: {FFB2F634-C9B8-47E7-891A-61377CB32817} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Pas de fichier <==== ATTENTION
HKLM\Software\...\Authentication\Credential Providers: [{B7724AE5-1135-4889-8A5F-CA98BE6CA1ED}] -> C:\Program Files\McAfee\TrueKey\McAfee.TrueKey.CredentialProvider.dll [2018-11-28] (McAfee, Inc. -> McAfee, LLC.)
Lsa: [Notification Packages] scecli C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter "C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter" "C:\Program Files\McAfee\TrueKey\McAfeeTrueKeyPasswordFilter"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2021-09-15]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.2296\SSScheduler.exe (McAfee, LLC -> McAfee, LLC)
C:\Program Files\McAfee
C:\Program Files\TrueKey
HKU\S-1-5-21-3224867791-1210344137-1425845107-1001\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp//www.delta-search.com/?affID=119722&tt=190313_wo1&babsrc=HP_ss&mntrId=A4A2689423A751F5
HKU\S-1-5-21-3224867791-1210344137-1425845107-500\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp//www.delta-search.com/?affID=119722&tt=190313_wo1&babsrc=HP_ss&mntrId=A4A2689423A751F5
SearchScopes: HKLM-x32 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp//chfr.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKU\.DEFAULT -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL =
SearchScopes: HKU\S-1-5-21-3224867791-1210344137-1425845107-1001 -> bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKU\S-1-5-21-3224867791-1210344137-1425845107-1001 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp//www.delta-search.com/?q={searchTerms}&affID=119722&tt=190313_wo1&babsrc=SP_ss&mntrId=A4A2689423A751F5
SearchScopes: HKU\S-1-5-21-3224867791-1210344137-1425845107-1001 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp//eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKU\S-1-5-21-3224867791-1210344137-1425845107-1001 -> {32F82D2E-B238-4508-8338-E13FDF55CCF1} URL = hxxp//tuvaro.com/ws/?source=9e9471a2&tbp=rbox&toolbarid=base&u=a4a2d378000000000000689423a751f5&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3224867791-1210344137-1425845107-1001 -> {3B604B64-0F55-4058-A08C-D8EBD2C7BFE2} URL = hxxp//www.amazon.fr/s/ref=azs_osd_ieafr?ie=UTF-8&tag=hp-fr3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-3224867791-1210344137-1425845107-1001 -> {9EA8E034-0D95-43AB-91F1-70C2D79F4D19} URL = hxxp//www.mysearchresults.com/search?c=3513&t=07&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3224867791-1210344137-1425845107-1001 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp//chfr.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKU\S-1-5-21-3224867791-1210344137-1425845107-1002 -> {9EA8E034-0D95-43AB-91F1-70C2D79F4D19} URL = hxxp//www.mysearchresults.com/search?c=3513&t=07&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3224867791-1210344137-1425845107-500 -> bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKU\S-1-5-21-3224867791-1210344137-1425845107-500 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp//www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=HPNTDFJS
SearchScopes: HKU\S-1-5-21-3224867791-1210344137-1425845107-500 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp//www.delta-search.com/?q={searchTerms}&affID=119722&tt=190313_wo1&babsrc=SP_ss&mntrId=A4A2689423A751F5
SearchScopes: HKU\S-1-5-21-3224867791-1210344137-1425845107-500 -> {2fa28606-de77-4029-af96-b231e3b8f827} URL = hxxp//eu.ask.com/web?q={searchterms}&l=dis&o=HPNTDF
SearchScopes: HKU\S-1-5-21-3224867791-1210344137-1425845107-500 -> {32F82D2E-B238-4508-8338-E13FDF55CCF1} URL = hxxp//tuvaro.com/ws/?source=9e9471a2&tbp=rbox&toolbarid=base&u=a4a2d378000000000000689423a751f5&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3224867791-1210344137-1425845107-500 -> {3B604B64-0F55-4058-A08C-D8EBD2C7BFE2} URL = hxxp//www.amazon.fr/s/ref=azs_osd_ieafr?ie=UTF-8&tag=hp-fr3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-3224867791-1210344137-1425845107-500 -> {9EA8E034-0D95-43AB-91F1-70C2D79F4D19} URL = hxxp//www.mysearchresults.com/search?c=3513&t=07&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3224867791-1210344137-1425845107-500 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp//chfr.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKU\S-1-5-21-3224867791-1210344137-1425845107-500 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp//rover.ebay.com/rover/1/5222-29882-11896-2/4 ?mpre=http%3A%2F%2Fwww.ebay.com%2Fsch%2F%3F_nkw%3D{searchTerms}&keyword={searchTerms}
BHO: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\McAfee\TrueKey\MSIE\truekey_ie64.dll [2018-04-23] (McAfee, Inc. -> Intel Security)
BHO-x32: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\McAfee\TrueKey\MSIE\truekey_ie.dll [2018-04-23] (McAfee, Inc. -> Intel Security)
Toolbar: HKLM - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\McAfee\TrueKey\MSIE\truekey_ie64.dll [2018-04-23] (McAfee, Inc. -> Intel Security)
Toolbar: HKLM-x32 - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\McAfee\TrueKey\MSIE\truekey_ie.dll [2018-04-23] (McAfee, Inc. -> Intel Security)
FirewallRules: [{B2003025-5E0E-4A43-8526-367586BC6D94}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe => Pas de fichier
FirewallRules: [{BBDC9C9D-1319-4812-B8EA-A12A0C46C697}] => (Allow) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe => Pas de fichier
FirewallRules: [{5A29B9FA-3417-45EC-9780-140B42E0124D}] => (Allow) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe => Pas de fichier
FirewallRules: [{83535F60-BE97-4366-BAE1-C35DAB06D307}] => (Allow) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe => Pas de fichier
FirewallRules: [{18F3322D-2DD2-40BF-8F5C-A86DC071FFE4}] => (Allow) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe => Pas de fichier
FirewallRules: [{83A0A91A-7101-4857-8055-A5BD69B9529A}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe => Pas de fichier
2021-10-24 18:23 - 2013-04-02 00:55 - 000000000 ____D C:\Users\Michel Bourquard\AppData\Local\eMule
2021-10-24 18:23 - 2013-04-02 00:55 - 000000000 ____D C:\ProgramData\eMule
GroupPolicy\User: Restriction ? <==== ATTENTION
emptytemp:
end::