start::
closeprocesses:
createrestorepoint:
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
CustomCLSID: HKU\S-1-5-21-112450655-2373133863-337455689-1001_Classes\CLSID\{d1b22d3d-8585-53a6-acb3-0e803c7e8d2a}\localserver32 -> "C:\Users\Anthony\AppData\Local\Microsoft\Teams\current\Teams.exe" --toast => Pas de fichier
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [480]
HKU\S-1-5-21-112450655-2373133863-337455689-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-112450655-2373133863-337455689-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
FirewallRules: [{B79B4182-8E65-4770-8E39-519AC0FE3616}] => (Allow) C:\Program Files\DriversCloud.com\DriversCloud.exe => Pas de fichier
FirewallRules: [{A4419B8C-2EA3-43CC-85C6-F99C714D5337}] => (Allow) C:\Program Files\DriversCloud.com\DriversCloud.exe => Pas de fichier
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKLM\Software\Microsoft\Active Setup\Installed Components: [{30C521FB-255B-46C8-9F0D-EE5AE371C9AA}] -> "C:\Program Files (x86)\AVAST Software\Browser\Application\91.1.10672.124\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
C:\Program Files (x86)\AVAST Software
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{30C521FB-255B-46C8-9F0D-EE5AE371C9AA}] -> "C:\Program Files (x86)\AVAST Software\Browser\Application\88.0.7980.150\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
BootExecute: autocheck autochk *
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {10683DB3-CEA8-48CD-9FE9-66200CBA0571} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe (Pas de fichier)
C:\Program Files\AVAST Software
Task: {A9B65106-6530-4A1A-9889-4928FF0AFE7C} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe /from_scheduler:1 (Pas de fichier)
Task: {139CB554-E233-448A-8D56-2D80361BF1A2} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [17920 2016-08-01] () [Fichier non signé]
Task: {2EC7D4E5-0E6A-4615-B863-40A00B5A8942} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [17920 2016-08-01] () [Fichier non signé]
C:\Program Files\Common Files\Avast Software
Task: {FD587A4E-3ED2-4341-862C-1551670561F8} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
FF Plugin-x32: @videolan.org/vlc,version=3.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [Pas de fichier]
C:\Users\Anthony\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
CHR HKLM\...\Chrome\Extension: [lbojggafdepnclikhiapkpinbfdhbdoi]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
CHR HKLM-x32\...\Chrome\Extension: [lbojggafdepnclikhiapkpinbfdhbdoi]
2021-12-05 17:24 - 2018-04-18 09:56 - 000000000 ____D C:\Users\Anthony\AppData\Local\AVAST Software
2021-12-01 00:14 - 2021-04-30 08:38 - 000004264 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update
2021-11-12 11:48 - 2017-01-11 19:55 - 000000000 ____D C:\ProgramData\McAfee
cmd: cscript %windir%\System32\slmgr.vbs /dli
cmd: sfc /scannow
emptytemp:
end::