start::
closeprocesses:
createrestorepoint:
BHO: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll => Pas de fichier
BHO: Pas de nom -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> Pas de fichier
BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll => Pas de fichier
BHO-x32: Pas de nom -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> Pas de fichier
Toolbar: HKLM - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll Pas de fichier
Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll Pas de fichier
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - Pas de fichier
IE trusted site: HKU\S-1-5-21-3148245115-2286288855-4249394039-1001\...\webcompanion.com -> hxxp://webcompanion.com
FirewallRules: [{954286E7-5D06-494C-BCF5-2403F1416C40}] => (Allow) C:\Program Files (x86)\Common Files\Mcafee\MMSSHost\MMSSHost.exe => Pas de fichier
FirewallRules: [{7ACC97FE-0A73-45E0-BF17-00B0DFD5EB20}] => (Allow) C:\Program Files\Common Files\McAfee\MMSSHost\MMSSHost.exe => Pas de fichier
FirewallRules: [{3272E34D-9129-43D2-99C8-286DB3FF0585}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe => Pas de fichier
C:\Program Files\Common Files\McAfee
C:\Program Files\Bitdefender
FirewallRules: [{51C9FDD1-AC8C-42B4-AB23-73D25711409F}] => (Allow) C:\Users\DELL\AppData\Local\Programs\Opera\79.0.4143.66\opera.exe => Pas de fichier
Task: {34A36D35-486E-4E74-9ED4-98C95A0C202F} - System32\Tasks\Opera scheduled Autoupdate 1632558811 => C:\Users\DELL\AppData\Local\Programs\Opera\launcher.exe --scheduledautoupdate $(Arg0) (Pas de fichier)
Task: {CE4137C6-1CA6-4F72-BEE9-4ADC8C7BA72B} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB" <==== ATTENTION
CHR StartupUrls: Default -> "hxxp://mysearch.avg.com?cid={AA54C640-30D5-48E7-A104-02935A0A904A}&mid=66171236299447d29cffa138fa3f07c9-674a61126688f29120c7c460c1714bc46db99ca2&lang=fr&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2014-06-25 12:50:22&v=18.1.0.443&pid=safeguard&sg=&sap=hp","hxxp://mysearch.avg.com?cid={AA54C640-30D5-48E7-A104-02935A0A904A}&mid=66171236299447d29cffa138fa3f07c9-674a61126688f29120c7c460c1714bc46db99ca2&lang=fr&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2014-06-25 12:50:22&v=18.1.7.598&pid=safeguard&sg=&sap=hp","hxxps://mysearch.avg.com?cid={AA54C640-30D5-48E7-A104-02935A0A904A}&mid=66171236299447d29cffa138fa3f07c9-674a61126688f29120c7c460c1714bc46db99ca2&lang=fr&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2014-06-25 12:50:22&v=18.1.9.786&pid=safeguard&sg=&sap=hp"
cmd: md C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database
cmd: cscript %windir%\System32\slmgr.vbs /dli
emptytemp:
end::