Start:: CreateRestorePoint EmptyCLSID EmptyFlash EmptyTracing EmptyPrefetch EmptyProxy O69 - SBI: prefs.js [Laurent - uh978g10.default-release] user_pref("dom.forms.autocomplete.formautofill", true); =>PUP.Optional.PredictAd HKCU\SOFTWARE\13767fb8-1090-5f10-9b1e-b497b7aff594 =>Adware.CrossRider HKU\S-1-5-21-1324647586-1979836659-912804765-1001\SOFTWARE\13767fb8-1090-5f10-9b1e-b497b7aff594 =>Adware.CrossRider O4 - HKCU\..\Run: [qBittorrent] . (. - .) -- C:\Program Files\qBittorrent\qbittorrent.exe (.Not File.) =>.SUP.Orphan O4 - HKUS\S-1-5-21-1324647586-1979836659-912804765-1001\..\Run: [qBittorrent] . (. - .) -- C:\Program Files\qBittorrent\qbittorrent.exe (.Not File.) =>.SUP.Orphan O87 - FAEL: "{6BB3914B-6756-4C26-BD93-8BD6A9DAF3F4}" [In-None-P6-TRUE] .(...) -- C:\Program Files\qBittorrent\qbittorrent.exe [Unsigned] (.not file.) =>.SUP.Orphan O87 - FAEL: "{E2A80D5B-9553-4455-B6E8-ED832EED2475}" [In-None-P17-TRUE] .(...) -- C:\Program Files\qBittorrent\qbittorrent.exe [Unsigned] (.not file.) =>.SUP.Orphan [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\ProgramData\Package Cache\{56351fa8-6289-49b9-8e2c-ddad288d573a}\ExpressVPN_10.15.0.8.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\ProgramData\Package Cache\{56351fa8-6289-49b9-8e2c-ddad288d573a}\ExpressVPN_10.15.0.8.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\qBittorrent\qbittorrent.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\qBittorrent\qbittorrent.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Laurent\AppData\Local\Temp\{B6907423-7B84-4F16-A8FB-C44AB8275BD7}\.cr\3dmark-setup.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Laurent\AppData\Local\Temp\{B6907423-7B84-4F16-A8FB-C44AB8275BD7}\.cr\3dmark-setup.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Laurent\AppData\Local\Temp\{C599129A-90E1-4589-9965-43687C9D3473}\.cr\3dmark-setup.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Laurent\AppData\Local\Temp\{C599129A-90E1-4589-9965-43687C9D3473}\.cr\3dmark-setup.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Laurent\AppData\Local\Temp\{6DE268D6-6912-462D-B3C0-DE261962AAB9}\.cr\3dmark-setup.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Laurent\AppData\Local\Temp\{6DE268D6-6912-462D-B3C0-DE261962AAB9}\.cr\3dmark-setup.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Laurent\AppData\Local\Temp\{16FDB31C-8066-478A-8B13-B21F6E4EA7F9}\.cr\3dmark-setup.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Laurent\AppData\Local\Temp\{16FDB31C-8066-478A-8B13-B21F6E4EA7F9}\.cr\3dmark-setup.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Laurent\AppData\Local\Temp\{1FD852A7-A7D1-4ADD-A356-131BC9F3412E}\.cr\3dmark-setup.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Laurent\AppData\Local\Temp\{1FD852A7-A7D1-4ADD-A356-131BC9F3412E}\.cr\3dmark-setup.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Laurent\AppData\Local\Temp\{3F008D38-654C-4285-9E13-8F5DCA6C22DC}\.cr\3dmark-setup.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Laurent\AppData\Local\Temp\{3F008D38-654C-4285-9E13-8F5DCA6C22DC}\.cr\3dmark-setup.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Laurent\AppData\Local\Temp\{11CCF6F9-0ED5-48F2-A5CF-40F918B26DBA}\.cr\3dmark-setup.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Laurent\AppData\Local\Temp\{11CCF6F9-0ED5-48F2-A5CF-40F918B26DBA}\.cr\3dmark-setup.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1324647586-1979836659-912804765-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\ProgramData\Package Cache\{56351fa8-6289-49b9-8e2c-ddad288d573a}\ExpressVPN_10.15.0.8.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1324647586-1979836659-912804765-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\ProgramData\Package Cache\{56351fa8-6289-49b9-8e2c-ddad288d573a}\ExpressVPN_10.15.0.8.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1324647586-1979836659-912804765-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\qBittorrent\qbittorrent.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1324647586-1979836659-912804765-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files\qBittorrent\qbittorrent.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1324647586-1979836659-912804765-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\ProgramData\Package Cache\{56351fa8-6289-49b9-8e2c-ddad288d573a}\ExpressVPN_10.15.0.8.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1324647586-1979836659-912804765-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\ProgramData\Package Cache\{56351fa8-6289-49b9-8e2c-ddad288d573a}\ExpressVPN_10.15.0.8.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1324647586-1979836659-912804765-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Laurent\AppData\Local\Temp\{B6907423-7B84-4F16-A8FB-C44AB8275BD7}\.cr\3dmark-setup.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1324647586-1979836659-912804765-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Laurent\AppData\Local\Temp\{B6907423-7B84-4F16-A8FB-C44AB8275BD7}\.cr\3dmark-setup.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1324647586-1979836659-912804765-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Laurent\AppData\Local\Temp\{C599129A-90E1-4589-9965-43687C9D3473}\.cr\3dmark-setup.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1324647586-1979836659-912804765-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Laurent\AppData\Local\Temp\{C599129A-90E1-4589-9965-43687C9D3473}\.cr\3dmark-setup.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1324647586-1979836659-912804765-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Laurent\AppData\Local\Temp\{6DE268D6-6912-462D-B3C0-DE261962AAB9}\.cr\3dmark-setup.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1324647586-1979836659-912804765-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Laurent\AppData\Local\Temp\{6DE268D6-6912-462D-B3C0-DE261962AAB9}\.cr\3dmark-setup.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1324647586-1979836659-912804765-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Laurent\AppData\Local\Temp\{16FDB31C-8066-478A-8B13-B21F6E4EA7F9}\.cr\3dmark-setup.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1324647586-1979836659-912804765-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Laurent\AppData\Local\Temp\{16FDB31C-8066-478A-8B13-B21F6E4EA7F9}\.cr\3dmark-setup.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1324647586-1979836659-912804765-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Laurent\AppData\Local\Temp\{1FD852A7-A7D1-4ADD-A356-131BC9F3412E}\.cr\3dmark-setup.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1324647586-1979836659-912804765-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Laurent\AppData\Local\Temp\{1FD852A7-A7D1-4ADD-A356-131BC9F3412E}\.cr\3dmark-setup.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1324647586-1979836659-912804765-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Laurent\AppData\Local\Temp\{3F008D38-654C-4285-9E13-8F5DCA6C22DC}\.cr\3dmark-setup.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1324647586-1979836659-912804765-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Laurent\AppData\Local\Temp\{3F008D38-654C-4285-9E13-8F5DCA6C22DC}\.cr\3dmark-setup.exe.ApplicationCompany =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1324647586-1979836659-912804765-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Laurent\AppData\Local\Temp\{11CCF6F9-0ED5-48F2-A5CF-40F918B26DBA}\.cr\3dmark-setup.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-1324647586-1979836659-912804765-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Laurent\AppData\Local\Temp\{11CCF6F9-0ED5-48F2-A5CF-40F918B26DBA}\.cr\3dmark-setup.exe.ApplicationCompany =>.SUP.Orphan.MUICache HKLM\SOFTWARE\POLICIES\Mozilla\Firefox =>.SUP.FirefoxRestriction [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:AvastUI.exe =>.Avast Software s.r.o HKLM\SOFTWARE\Avast Software =>.AVAST Software HKLM\SOFTWARE\WOW6432Node\Avast Software =>.AVAST Software HKCU\SOFTWARE\AvastAdSDK =>.Avast Software s.r.o HKU\S-1-5-21-1324647586-1979836659-912804765-1001\SOFTWARE\AvastAdSDK =>.Avast Software s.r.o C:\ProgramData\Avast Software =>.AVAST Software C:\Users\Laurent\AppData\Local\Avast Software =>.AVAST Software HKLM\SOFTWARE\WOW6432Node\Bitdefender Agent =>.Bitdefender HKU\.DEFAULT\SOFTWARE\SetId =>.Bitdefender O43 - CFD: 18/02/2022 - [] D -- C:\ProgramData\BDLogging =>.Bitdefender O43 - CFD: 18/02/2022 - [] D -- C:\ProgramData\Bitdefender Agent =>.Bitdefender O43 - CFD: 18/02/2022 - [] D -- C:\Users\Laurent\AppData\Local\Bitdefender =>.Bitdefender O43 - CFD: 18/02/2022 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\Bitdefender =>.Bitdefender WinsockFix EmptyRecycle cmd: netsh advfirewall reset cmd: netsh advfirewall set allprofiles state on EmptyTemp End::