start::
CreateRestorePoint:
CloseProcesses:
RemoveProxy:
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {9EC12635-4F59-4408-817E-900A4353001C} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe /backup /iavs (Pas de fichier)
Task: {9F31C5E6-4048-4B9E-BEEB-DD3930712C3B} - System32\Tasks\{9AE0AD74-56BC-426B-B24E-50655C44F5F3} => "c:\program files (x86)\google\chrome\application\chrome.exe" http://www.skype.com/go/downloading?source=
Task: {A8DBCF81-04A7-473D-8A2F-D32B94832606} - System32\Tasks\{83473520-C32E-4868-89C0-F873135E506C} => "c:\program files (x86)\google\chrome\application\chrome.exe" http://ui.skype.com/ui/0/7.13.64.101/fr/abandoninstall?page=
Task: {F42ED771-F4AE-4D06-A425-8947EA00226C} - System32\Tasks\{4B297E59-3DD9-4A25-80AC-257FB823FB99} => "c:\program files (x86)\google\chrome\application\chrome.exe" http://ui.skype.com/ui/0/7.23.0.105/fr/abandoninstall?source=
FF Extension: (Pas de nom) - C:\Users\domicoeur\AppData\Roaming\Mozilla\Firefox\Profiles\z6gfs6b9.default\extensions\default_newtabff@gmail.com [non trouvé(e)]
CHR Extension: (FOE Tools) - C:\Users\domicoeur\AppData\Local\Google\Chrome\User Data\Default\Extensions\ooijphhnnjffbjombbaomhmphhanicce
S3 aswTap; C:\windows\system32\DRIVERS\aswTap.sys
S3 Neo_VPN; C:\windows\system32\DRIVERS\neo_vpn.sys
S3 phantomtap; C:\windows\system32\DRIVERS\phantomtap.sys
ContextMenuHandlers1: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => -> Pas de fichier
ContextMenuHandlers2: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => -> Pas de fichier
AlternateDataStreams: C:\ProgramData\Temp:05E9FFE5 [145]
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {7B707795-AACB-4C89-BFA1-9201900A16E6} URL = hxxp://www.amazon.fr/s/ref=azs_osd_ieafr?ie=
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2104973056-1472199495-3043253115-1001 -> DefaultScope {32715CE2-0D8A-4935-9977-753B71CF0B1F} URL = hxxp://www.google.com/search?q=
SearchScopes: HKU\S-1-5-21-2104973056-1472199495-3043253115-1001 -> OldSearch URL = hxxp://www.google.com/search?q=
SearchScopes: HKU\S-1-5-21-2104973056-1472199495-3043253115-1001 -> {32715CE2-0D8A-4935-9977-753B71CF0B1F} URL = hxxp://www.google.com/search?q=
FirewallRules: [TCP Query User{0AF1342F-C8D0-4360-AA7C-737E13193A83}C:\program files\avast software\avast\avastui.exe] => (Allow) C:\program files\avast software\avast\avastui.exe => Pas de fichier
FirewallRules: [UDP Query User{00790A27-2A38-4FDF-87D5-31DB3FB491A6}C:\program files\avast software\avast\avastui.exe] => (Allow) C:\program files\avast software\avast\avastui.exe => Pas de fichier
EmptyTemp:
cmd: ipconfig /flushdns
cmd: sfc /scannow
end::