start::
closeprocesses:
createrestorepoint:
AlternateDataStreams: C:\ProgramData:482EE99B1E21CE8C [217]
AlternateDataStreams: C:\ProgramData:49F43025E96C51E7 [217]
AlternateDataStreams: C:\Users\All Users:482EE99B1E21CE8C [217]
AlternateDataStreams: C:\Users\All Users:49F43025E96C51E7 [217]
AlternateDataStreams: C:\ProgramData\Application Data:482EE99B1E21CE8C [217]
AlternateDataStreams: C:\ProgramData\Application Data:49F43025E96C51E7 [217]
AlternateDataStreams: C:\ProgramData\Temp:0888F409 [146]
AlternateDataStreams: C:\ProgramData\Temp:0CE7F3C9 [175]
AlternateDataStreams: C:\ProgramData\Temp:3440EB47 [322]
AlternateDataStreams: C:\ProgramData\Temp:66633281 [139]
AlternateDataStreams: C:\ProgramData\Temp:93433455 [158]
AlternateDataStreams: C:\ProgramData\Temp:EFDFF94D [352]
AlternateDataStreams: C:\ProgramData\Temp:F7F48F12 [286]
AlternateDataStreams: C:\Users\Francis\AppData\Local\Temp:com.affinity.photo.2 [240]
AlternateDataStreams: C:\Users\Francis\AppData\Local\Temp:com.affinity.photo.3 [197]
SearchScopes: HKU\S-1-5-21-2872576533-1184751126-2132402246-1000 -> DefaultScope {49606DC7-976D-4030-A74E-9FB5C842FA68} URL =
SearchScopes: HKU\S-1-5-21-2872576533-1184751126-2132402246-1000 -> {49606DC7-976D-4030-A74E-9FB5C842FA68} URL =
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-06-02] (Sun Microsystems, Inc. -> Sun Microsystems, Inc.)
BHO-x32: Programme d'aide de l'Assistant de connexion Windows Live ID -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
BHO-x32: Skype add-on for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08] (Skype Technologies SA -> Skype Technologies S.A.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-06-02] (Sun Microsystems, Inc. -> Sun Microsystems, Inc.)
DPF: HKLM {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: HKLM {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: HKLM {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: HKLM-x32 {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: HKLM-x32 {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
DPF: HKLM-x32 {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08] (Skype Technologies SA -> Skype Technologies S.A.)
FirewallRules: [{0CA96905-CA8C-48D9-B403-11CE035928E9}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe => Pas de fichier
FirewallRules: [{1E257089-E855-4BD8-A436-2DF7802E633D}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe => Pas de fichier
FirewallRules: [{40EC878C-BF4F-45A8-BB06-168C7799FB53}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe => Pas de fichier
FirewallRules: [{84BD37B4-D6C6-473A-B5AA-E6B2B2AD9932}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe => Pas de fichier
FirewallRules: [{2D771375-CEAD-4EAE-A0A0-32315EDE1E0C}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe => Pas de fichier
FirewallRules: [{EA487A9D-0B6F-4DBA-81D1-DC340EB564FF}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe => Pas de fichier
FirewallRules: [{D6520572-0FD1-49E6-9B51-8CE839D0467B}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe => Pas de fichier
FirewallRules: [{8E396F7A-1EFE-4845-9349-3B488947034C}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe => Pas de fichier
FirewallRules: [{22553FA0-9BD8-4A92-B698-77693E9F146A}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe => Pas de fichier
FirewallRules: [{E5DB91D5-61A1-4B3F-B9B7-394C98B4E82F}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe => Pas de fichier
FirewallRules: [{6B67CD0D-113E-4318-A7ED-20ED2235B925}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe => Pas de fichier
HKLM\...\Run: [DigidesignMMERefresh] => "C:\Program Files\Avid\Pro Tools First\MMERefresh.exe" (Pas de fichier)
HKU\S-1-5-21-2872576533-1184751126-2132402246-1000\...\MountPoints2: {71edf1d9-bd42-11e7-bc83-806e6f6e6963} - D:\Setup.exe
HKU\S-1-5-21-2872576533-1184751126-2132402246-1000\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe [30720 2010-11-21] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-2872576533-1184751126-2132402246-1000\...\Winlogon: [Shell] C:\Windows\explorer.exe [3229696 2016-08-29] (Microsoft Windows -> Microsoft Corporation) <==== ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{2D00AE86-E9F9-43A0-82A4-79EBA59183E2}] -> C:\Program Files (x86)\Avira\Scout\Application\59.0.3071.2851\Installer\chrmstp.exe [2017-08-02] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
C:\Program Files (x86)\Avira\Scout
Lsa: [Notification Packages] scecli C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AutoStart IR.lnk [2022-10-13]
GroupPolicy: Restriction ? <==== ATTENTION
GroupPolicy-Firefox-x32: Restriction <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
Task: {1F783AD3-D17E-43CF-9846-EEB2E051988E} - \{ECC9DE46-A60A-4F49-A1E6-E02A4AD532F4} -> Pas de fichier <==== ATTENTION
Task: {25018CFD-2679-4047-950A-56075D3F0DF9} - System32\Tasks\UpdaterChromeApp => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" www.googleup.cf/
Task: {422C0FE5-078D-4EAD-A4D0-544C0C54BA99} - System32\Tasks\AviraScoutUpdateTaskMachineCore => C:\Program Files (x86)\Avira\Scout Update\ScoutUpdate.exe [114824 2017-05-06] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
Task: {49DD62F2-59C0-4D38-BE04-C343FF495690} - System32\Tasks\Opera scheduled Autoupdate 1544775497 => C:\Users\Francis\AppData\Local\Programs\Opera\launcher.exe --scheduledautoupdate $(Arg0) (Pas de fichier)
Task: {59451DC7-972E-44C1-B736-E5BCA3741050} - System32\Tasks\Start WinZip Driver Updater Check Driver Update => C:\Program Files\WinZip Driver Updater\DriverUpdater.exe [27373040 2022-04-06] (Corel Corporation -> Corel Corporation)
Task: {60D936C1-98B5-4AD3-8F8C-7A7F00100364} - System32\Tasks\Avira\System Speedup\Delayed Startup\All users\1 => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Pas de fichier)
Task: {6350577E-13F2-4D2C-8203-4539FF17F906} - System32\Tasks\{DFF07903-233F-455B-BD92-43EB2F25F0D8} => C:\Windows\system32\pcalua.exe -a D:\Setup32.EXE -d D:\
Task: {766BAD4F-E9D4-4956-9E37-104EF0DA5631} - System32\Tasks\{3EDA7110-1331-404D-9BED-7CAFE0AEB8F2} => D:\SETUP32.EXE (Pas de fichier)
Task: {7B22C32D-F04A-4832-B400-A18C2F7E83F9} - System32\Tasks\{700B9A38-658E-4472-8735-5C216C033079} => C:\Windows\system32\pcalua.exe -a F:\logiciels\pe6_tbyb_e.exe -d F:\logiciels
Task: {984BB70F-3A28-432B-8D10-7105C0B8910A} - System32\Tasks\Avira\System Speedup\Delayed Startup\All users\11 => "C:\Windows\system32\RunDLL32.exe" C:\Windows\system32\THXCfg64.dll,RunDLLEntry THXCfg64
Task: {AC306227-1FA9-43E8-A7F5-3EE1CAD126EF} - \{47AF86BC-DC16-4984-A502-5F8F5DB82610} -> Pas de fichier <==== ATTENTION
Task: {BBBC9DA9-8988-4886-B88B-6D9855A4E05A} - System32\Tasks\UpdaterChromeApp2 => "C:\Program Files\Google\Chrome\Application\chrome.exe" www.googleup.cf/
Task: {CD01CE0B-B3B2-45DA-8423-E0A393C09D51} - System32\Tasks\AviraScoutUpdateTaskMachineUA => C:\Program Files (x86)\Avira\Scout Update\ScoutUpdate.exe [114824 2017-05-06] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
Task: {D9AD47EE-FE55-497B-AEB8-254F20C8273F} - System32\Tasks\Avira\System Speedup\Delayed Startup\All users\12 => "C:\Windows\system32\RunDLL32.exe" C:\Windows\system32\EptMon64.dll,RunDLLEntry EptMon64
Task: {E96F36CD-E7A7-463B-97C0-3486346CD0AB} - System32\Tasks\ASR-Startup => C:\Program Files (x86)\Advanced System Repair Pro 1.9.8.3.0\AdvancedSystemRepairPro.exe /minimize (Pas de fichier)
Task: {EA48C1AF-B684-4710-A170-60A7BDB59852} - System32\Tasks\SystemToolsDailyTest => C:\Program Files\Dell Support Center\pcdrcui.exe -silentenumeration -st SystemToolsDailyTest (Pas de fichier)
Task: {FE1DE4CF-A08A-4469-B7F6-7E6E0B816BD3} - System32\Tasks\{BBAEED57-1E74-48F0-89B7-AE929590146B} => D:\SETUP32.EXE (Pas de fichier)
HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3: <==== ATTENTION (Restriction - Zones)
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll [2011-06-02] (Sun Microsystems, Inc.) [Fichier non signé]
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [Pas de fichier]
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [Pas de fichier]
FF Plugin-x32: @scout.avira-update.com/Avira Scout Update;version=3 -> C:\Program Files (x86)\Avira\Scout Update\1.3.32.7\npScoutUpdate3.dll [2017-05-06] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
FF Plugin-x32: @scout.avira-update.com/Avira Scout Update;version=9 -> C:\Program Files (x86)\Avira\Scout Update\1.3.32.7\npScoutUpdate3.dll [2017-05-06] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM-x32\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
S3 asrrealtimesrv; C:\Program Files (x86)\Advanced System Repair Pro 1.9.8.3.0\asrrealtimesrv.exe [X]
S2 DCIService; C:\Program Files (x86)\Lavasoft\Web Companion\Service\x64\DCIService.exe [X]
S2 DFWSIDService; C:\Program Files (x86)\Wondershare\drfone\WsidService.exe [X]
S2 DigiRefresh; C:\Program Files\Avid\Pro Tools First\MMERefresh.exe -s [X]
S2 ElevationService; C:\Program Files (x86)\Wondershare\drfone\Addins\Recovery\ElevationService.exe [X]
S2 luminati_net_updater_win_formatfactory_pcfreetime_com; "C:/Program Files (x86)/FormatFactory/net_updater64.exe" --updater win_formatfactory.pcfreetime.com [X]
S3 MDA_NTDRV; \??\C:\Windows\system32\MDA_NTDRV.sys [X]
S3 netprotection_network_filter2; System32\drivers\netprotection_network_filter2.sys [X]
S2 npf; \??\C:\Windows\system32\drivers\npf.sys [X]
S3 PCDSRVC{1E208CE0-FB7451FF-06020101}_0; \??\c:\program files\dell support center\pcdsrvc_x64.pkms [X]
2022-10-13 13:51 - 2022-10-13 13:51 - 005906096 _____ (Easeware ) C:\Users\Francis\Downloads\DriverEasy_Setup.exe
2022-10-13 13:50 - 2022-10-13 13:54 - 000003498 _____ C:\Windows\system32\Tasks\UpdaterChromeApp
2022-10-13 13:50 - 2022-10-13 13:54 - 000003486 _____ C:\Windows\system32\Tasks\UpdaterChromeApp2
2022-10-13 13:38 - 2022-10-13 13:39 - 000000000 ____D C:\Users\Francis\Downloads\Driver Easy Professional 5 5 6 18080 + Crack wawacity ec
emptytemp:
end::