start::
closeprocesses:
createrestorepoint:
HKLM\...\Run: [WindowsDefender] => "%ProgramFiles%\Windows Defender\MSASCuiL.exe" (Pas de fichier)
HKU\S-1-5-21-4081850850-620095167-1108837016-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8358680 2015-06-01] (Piriform Ltd -> Piriform Ltd)
HKU\S-1-5-21-4081850850-620095167-1108837016-1001\...\Run: [CCleaner] => C:\Program Files\CCleaner\CCleaner64.exe [8358680 2015-06-01] (Piriform Ltd -> Piriform Ltd)
HKU\S-1-5-18\...\Run: [abDocsDllLoader] => C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe (Pas de fichier)
Task: {0D8A891D-890C-4808-84D8-2F436AB14653} - \Microsoft\Windows\Application Experience\AitAgent -> Pas de fichier <==== ATTENTION
Task: {0E4151F2-6E9A-4281-8C19-4F8FCDD380E9} - System32\Tasks\{93D93E16-DCAF-44CB-9C95-CC1B2AEAFD9A} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxps://www.skype.com/go/downloading?source=lightinstaller&ver=7.39.0.102&LastError=404
Task: {1274336E-AB06-46B6-A48C-0671C5557CC6} - \Microsoft\Windows\TaskScheduler\Maintenance Configurator -> Pas de fichier <==== ATTENTION
Task: {1687544D-7247-4F5A-965A-A6E920E55278} - \Microsoft\Windows\TaskScheduler\Manual Maintenance -> Pas de fichier <==== ATTENTION
Task: {1785E2F8-7934-48DC-AADA-4F5DCF381E7D} - System32\Tasks\Microsoft\Windows\OrangeUpdate_Install => C:\Program Files (x86)\Orange Update\install.bat [0 2021-09-10] () <==== ATTENTION [zéro octet Fichier/Dossier] <==== ATTENTION
Task: {1C0DE01B-E177-4E5A-89CF-DD029C9AFF69} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe do-task "E7CF176E110C211B"
Task: {25C4BCB2-8838-4E20-BA40-A1F7FB465B1C} - System32\Tasks\{51DFBED0-14F1-4605-914F-A0AD35A45CA8} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=7.18.0.112&LastError=404
Task: {28C0F4C7-788D-4328-836B-A77FC61FA4FE} - System32\Tasks\Mozilla\Firefox Background Update E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\E7CF176E110C211B\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {2C4163B8-F0AD-4BE2-B6A2-76EC3B37CD3B} - System32\Tasks\{73FF0E66-98A3-40C0-9396-F95F283A28BE} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxps://www.skype.com/go/downloading?source=lightinstaller&ver=7.39.0.102&LastError=404
Task: {388412EF-3253-4BCE-9056-82269AA7C1F3} - System32\Tasks\{1754E753-938F-44F5-9DFF-DABA496CEF42} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=7.23.0.105&LastError=404
Task: {3B175F48-035D-4417-AFFC-270124C9E293} - System32\Tasks\{09A1D5D5-75B5-4209-BA90-1E6693085B97} => C:\Windows\system32\pcalua.exe -a C:\Users\Daniel\Downloads\wmp11-windowsxp-x86-FR-FR.exe -d C:\Users\Daniel\Downloads
Task: {40EE0450-E354-404F-A0C7-E8555EA0B228} - System32\Tasks\Microsoft\Windows\OrangeUpdate_Launch => Command(1): Net -> stop "Orange Update Core Service"
Task: {40EE0450-E354-404F-A0C7-E8555EA0B228} - System32\Tasks\Microsoft\Windows\OrangeUpdate_Launch => Command(2): Net -> start "Orange Update Core Service"
Task: {4ECDBA54-D39A-479F-8ACE-0B9B4D6358BF} - System32\Tasks\{E17E1E58-0673-4B67-8853-3FFDBC1B5650} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxps://www.skype.com/go/downloading?source=lightinstaller&ver=7.39.0.102&LastError=404
Task: {4F0B68A3-F767-4FA3-B884-F6DF89675E1B} - System32\Tasks\ALU => C:\Program Files (x86)\Packard Bell\Live Updater\updater.exe [4153648 2017-03-15] (Acer Incorporated -> )
Task: {4F528327-35F6-4BAA-8EDF-39348B90ADBA} - System32\Tasks\{FE008471-6B25-4B39-BDAC-AD4D8ED0A061} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxps://www.skype.com/go/downloading?source=lightinstaller&ver=7.39.0.102&LastError=404
Task: {53C62A25-F4FA-4C1C-BE5F-7A229D8B3F32} - System32\Tasks\{9DD99AAD-4078-4709-9F0B-FB262D10E7C4} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxps://www.skype.com/go/downloading?source=lightinstaller&ver=7.39.0.102&LastError=404
Task: {56AACCF2-564E-4128-9493-CAB95E43652F} - System32\Tasks\{7A03587C-8206-470E-B2E3-D851B2A5524B} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxps://www.skype.com/go/downloading?source=lightinstaller&ver=7.39.0.102&LastError=404
Task: {5CBEA949-0C51-4BB6-BD3A-DAAC5CC512F4} - System32\Tasks\{7C1B1BCF-D217-41EC-9308-7F30D3997428} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxps://www.skype.com/go/downloading?source=lightinstaller&ver=7.39.0.102&LastError=404
Task: {61A3918F-39E8-4550-8C00-033DAC74558F} - System32\Tasks\{40138934-9956-4E6F-A711-39FE4EFA62F7} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxps://ui.skype.com/ui/0/7.39.0.102/fr/go/help.faq.installer?source=lightinstaller&LastError=1618
Task: {6328B8EF-D098-4AA7-AFD6-6A1FCC25DFD9} - System32\Tasks\Pokki => C:\Users\Daniel\AppData\Local\Pokki\Engine\HostAppServiceUpdater.exe /LOGON (Pas de fichier) <==== ATTENTION
Task: {665C5B3A-50D4-4F8B-A23B-E8CB4445556B} - System32\Tasks\Microsoft\Windows\orangeinside => C:\Users\Daniel\AppData\Roaming\Orange\OrangeInside\OrangeInside.exe [1974064 2021-11-10] (Orange -> Orange)
Task: {6E5B09D5-19E9-43B5-8F6D-2F100C285572} - System32\Tasks\{FE364CB3-DF71-452D-B2E9-58B75098F25E} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxps://www.skype.com/go/downloading?source=lightinstaller&ver=7.39.0.102&LastError=404
Task: {6F02587F-8A2B-4552-97F6-DEEF229E335B} - \Microsoft\Windows\TaskScheduler\Idle Maintenance -> Pas de fichier <==== ATTENTION
Task: {716CFEDF-3C12-45A9-8589-CC771043B251} - System32\Tasks\{45920540-49B3-4667-A04A-BD2DE7A623B9} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxps://www.skype.com/go/downloading?source=lightinstaller&ver=7.39.0.102&LastError=404
Task: {7B4ACCAA-B377-481F-98D4-C87CE2ED641F} - System32\Tasks\{F3352B0F-B0D1-4F93-BDA5-B22849FC52C5} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/7.11.0.102/fr/abandoninstall?page=tsMain
Task: {8140477C-6931-4A23-A304-8A784BE59059} - System32\Tasks\{50464910-C409-46CF-9686-A963FFCD8A81} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxps://www.skype.com/go/downloading?source=lightinstaller&ver=7.39.0.102&LastError=404
Task: {8712B284-5550-4D8C-BE74-38C29918ED6F} - System32\Tasks\Mneolulknopol => C:\ProgramData\Mneolulknopol\1.0.4.1\wernooge.exe "/e=L3A9MjEwOTAxXi91PWVjYWE5MmEzNTA3NzQxOTliY2MxZmIwZDYxM2Q3OTkxXi9kPXRyYWNrYnJlYWtpbmduZXdzLmNvbV4vbj1ORVdTXi9hPUJyZWFraW5nTmV3c0FsZXJ0Xi90" (Pas de fichier)
Task: {8B6A7BE2-E355-4D4B-8B86-D59437A1D2EE} - System32\Tasks\{ADBA62AF-4EBE-4135-8AED-8A714071BDD6} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=7.18.0.112&LastError=404
Task: {8E995260-1A62-445C-88EA-034643056DDC} - System32\Tasks\{EE0AC50B-54EE-4142-9173-320C34F82E14} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxps://www.skype.com/go/downloading?source=lightinstaller&ver=7.39.0.102&LastError=404
Task: {947A2D9D-BC45-40B3-A063-7FF1B7DCC778} - System32\Tasks\{6AB6DF5E-B291-4665-B745-684320DF559A} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxps://www.skype.com/go/downloading?source=lightinstaller&ver=7.39.0.102&LastError=404
Task: {9723B9BE-AD59-4DE3-9451-55089261FC68} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [6405912 2015-06-01] (Piriform Ltd -> Piriform Ltd)
Task: {9B851081-4B64-43F3-89DE-914E3BD75F62} - System32\Tasks\{34CF7A2C-D34E-481D-B81F-B765040F410C} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxps://ui.skype.com/ui/0/7.39.0.102/fr/abandoninstall?source=lightinstaller&page=tsMain
Task: {A3B9EC74-F3ED-41E5-93FC-DCA4DF56C95D} - System32\Tasks\{DF45FC87-F523-4F7E-818A-E3F99B58B8F9} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxps://www.skype.com/go/downloading?source=lightinstaller&ver=7.39.0.102&LastError=404
Task: {B1B36C62-E5D6-4A5F-BB68-E2C38B44DAD0} - System32\Tasks\{6DBD9190-5541-46FF-B62D-D7D9C7B5CBB0} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxps://www.skype.com/go/downloading?source=lightinstaller&ver=7.39.0.102&LastError=404
Task: {B7992938-01F1-4F40-A0EC-0D23D2F0F152} - \Microsoft\Windows\TaskScheduler\Regular Maintenance -> Pas de fichier <==== ATTENTION
Task: {C41EC9F8-BE01-4C82-ABF2-F74C0FA93B75} - System32\Tasks\{A78B36B6-F4FC-4B4F-A104-3024554C54C3} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxps://ui.skype.com/ui/0/7.41.0.101/fr/abandoninstall?page=tsMain
Task: {C7AFFDEF-D230-4C3B-9D28-629E1391CD0D} - System32\Tasks\{29E0BCCB-209E-4918-807A-759DBF85C96D} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxps://www.skype.com/go/downloading?source=lightinstaller&ver=7.39.0.102&LastError=404
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - \Microsoft\Windows\SettingSync\BackupTask -> Pas de fichier <==== ATTENTION
Task: {D59D4DC5-BE81-4DD5-97DF-F8F497F5C6F1} - System32\Tasks\{BF042E76-8130-471C-82F8-7E0CE9DD936C} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/7.12.0.101/fr/go/help.faq.installer?source=lightinstaller&LastError=1618
Task: {E0A71837-55F8-4BCC-B3FF-5C60D21D8B36} - System32\Tasks\{1B71EEC1-0413-4862-B0F1-18756E7398BD} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxps://www.skype.com/go/downloading?source=lightinstaller&ver=7.39.0.102&LastError=404
Task: {E9DE14B9-7C81-4D20-B077-9843EAF3F6E9} - System32\Tasks\{512C5536-3753-4C3A-8877-92BAF4A22308} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxps://ui.skype.com/ui/0/7.41.0.101/fr/abandoninstall?page=tsMain
Task: {EC4C1280-ACB0-4D67-9E04-8B367AC6A17C} - System32\Tasks\{365F939D-7EE1-4280-A4AD-65F379335074} => C:\Windows\system32\pcalua.exe -a "C:\Program Files\Reimage\Reimage Repair\uninst.exe"
Task: {F0177D57-1980-4C2A-B447-3CD5C92D5C58} - \Start Simple Driver Updater Schedule -> Pas de fichier <==== ATTENTION
Task: {F43CBF01-021A-455F-97B0-41AB2FCA281B} - \Start Simple Driver Updater Update -> Pas de fichier <==== ATTENTION
Task: {F660857E-7E4D-41A9-8AE1-DD0572DBDF79} - System32\Tasks\{90A74F23-983D-481F-831E-7E7FCA317013} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxps://www.skype.com/go/downloading?source=lightinstaller&ver=7.39.0.102&LastError=404
Task: {F71A324F-430A-4D94-A6E5-95FC59A069D4} - System32\Tasks\{CDC69103-FF11-427C-93BA-6EDB31EAB019} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxps://ui.skype.com/ui/0/7.41.0.101/fr/go/help.faq.installer?LastError=1618
CHR Notifications: Default -> hxxps://0.webpushdirect.biz; hxxps://adultmebest3.pw; hxxps://bestclevercaptcha.top; hxxps://bm.smartnotif.com; hxxps://cloudmedia.fun; hxxps://dailymedia.casa; hxxps://dating-goodgirls.top; hxxps://dating-point.top; hxxps://de-visions.com; hxxps://forums.futura-sciences.com; hxxps://human-test-f4865y9j2a1pm0b9d.newsdelivery.xyz; hxxps://human-test-fbe09u3bghqgxwj026.humanchk.xyz; hxxps://mail.google.com; hxxps://secure-access-16c60ojhemyktwj096.securegate.site; hxxps://secure-access-601b48rmyftfnfe352.securegate.xyz; hxxps://smileclip.site; hxxps://starmode.biz; hxxps://stayinbedchat.com; hxxps://topernews.me; hxxps://web.skype.com; hxxps://www.facebook.com; hxxps://www.instagram.com; hxxps://www.programme-tv.net; hxxps://www.tnaflix.com; hxxps://www.velizytv.fr
CHR HomePage: Default -> orange.fr
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKU\S-1-5-21-4081850850-620095167-1108837016-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl]
CHR HKLM-x32\...\Chrome\Extension: [onghofjobpgcdeeifjfbcfepkchnenoh]
2022-03-15 12:01 - 2022-03-15 12:01 - 000002374 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\0d0ca54e-1817-444f-ad5e-cc906715ad5c.tmp
2022-06-03 19:56 - 2022-06-03 19:56 - 000002206 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\2134af1b-ae9c-45da-b4ec-70acf1147542.tmp
2022-05-11 12:32 - 2022-05-11 12:32 - 000002044 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\91d1ff49-7804-438d-9717-25dade97daa9.tmp
2022-05-11 12:02 - 2022-05-11 12:02 - 000002043 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\95cfdf7a-75cf-482d-a2f5-a638ee5e025b.tmp
2022-03-15 12:43 - 2022-03-15 12:43 - 000002373 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\cfc9229d-b45d-4ca4-855d-a93abb07287e.tmp
2022-04-07 08:04 - 2022-04-07 08:04 - 000001875 _____ () C:\Users\Daniel\AppData\Roaming\Microsoft\e8cd0b58-aa98-4d49-9091-7fdf1b14f18d.tmp
cmd: sfc /scannow
emptytemp:
end::