start::
Hosts:
Removeproxy:
CreateRestorePoint:
CloseProcesses:
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKU\S-1-5-21-3359679483-2508700459-785841624-1001\...\Run: [ProtonVPN] => C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPN.exe (Pas de fichier)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\110.0.5481.178\Installer\chrmstp.exe [2023-03-06] (Google LLC -> Google LLC)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {89441A1F-9A0A-46B5-B18E-2586B03B4939} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe (Pas de fichier)
Task: {92E92D8B-C5F7-40F2-8F05-2DE2737C8D2B} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [4703544 2023-02-08] (PIRIFORM SOFTWARE LIMITED -> Piriform Software) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --configpath "C:\Program Files\CCleaner\Setup" --guid "3486de1d-29da-4a11-8a95-94be969b4042" --version "6.09.10300" --silent
C:\Program Files\AVAST Software
C:\Program Files\CCleaner
Task: {E220B16E-9CBF-45FC-BD18-3D5473B94C66} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [2295192 2023-03-06] (Avast Software s.r.o. -> Avast Software)
C:\Program Files\Common Files\AVAST Software
Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (AdBlock — best ad blocker) -> EdgeExtension_BetaFishAdBlock_c1wakc4j0nefm => C:\Program Files\WindowsApps\BetaFish.AdBlock_2.13.0.0_neutral__c1wakc4j0nefm [2021-04-12]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
FF Extension: (Avast SafePrice | Comparaison, offres, coupons) - C:\Users\emeu6\AppData\Roaming\Mozilla\Firefox\Profiles\pk74b6bf.default\Extensions\sp@avast.com.xpi [2019-01-16]
FF Extension: (Avast Online Security) - C:\Users\emeu6\AppData\Roaming\Mozilla\Firefox\Profiles\pk74b6bf.default\Extensions\wrc@avast.com.xpi [2018-08-29]
CHR Extension: (Avast SafePrice | Comparateur de prix, offres, coupons) - C:\Users\emeu6\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2022-11-20]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
S3 AppleLowerFilter; \SystemRoot\System32\drivers\AppleLowerFilter.sys [X]
S3 bntap; \SystemRoot\System32\drivers\bntap.sys [X]
2023-03-06 17:14 - 2023-03-06 17:14 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2023-03-06 17:08 - 2023-03-06 17:08 - 013245512 _____ (AVAST Software) C:\Users\emeu6\Downloads\avastclear (2).exe
2023-03-06 17:18 - 2018-08-29 08:23 - 000000000 ____D C:\ProgramData\AVAST Software
2023-03-06 17:09 - 2018-07-30 21:07 - 000000000 ____D C:\Users\emeu6\AppData\Roaming\uTorrent
2023-03-06 17:08 - 2022-01-09 01:46 - 000000000 ____D C:\Users\emeu6\AppData\LocalLow\uTorrent
2023-03-06 17:08 - 2019-03-22 21:47 - 000000000 ____D C:\Users\emeu6\AppData\Local\BitTorrentHelper
2023-03-06 12:36 - 2022-01-09 00:52 - 000000000 ____D C:\Program Files (x86)\Proton Technologies
2023-03-06 12:26 - 2022-02-28 21:38 - 000000000 ____D C:\ProgramData\AVG
cmd: ipconfig /flushdns
cmd: netsh advfirewall reset
cmd: netsh winsock reset
cmd: sfc /scannow
EmptyEventLogs:
EmptyTemp:
end::