start::
SystemRestore: on
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction
HKU\S-1-5-21-255638037-1924303046-3380138641-1012\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Test\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe"
HKU\S-1-5-21-255638037-1924303046-3380138641-1012\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Test\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe"
Task: {0CF95879-7642-4F3B-AF48-9FAD781698DF} - \MicrosoftEdgeUpdateTaskMachineCore{9221BDE2-C2EE-4A72-99F4-0B53A6EBFE69} -> Pas de fichier
Task: {9D59939F-88AA-4CEE-BDCB-A55242266787} - \MicrosoftEdgeUpdateTaskMachineUA{50D55B06-2FC5-48DE-8EA9-FD963FAB50CA} -> Pas de fichier
Task: {C4A95B0D-DA56-41BB-9C9A-67225C74E4F4} - System32\Tasks\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe
Task: {B7B1F193-95B9-40D7-89E4-714196EBFE97} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe
Task: {74C1E785-DE7B-402F-8713-F0CFFD3D15AA} - System32\Tasks\EOSv3 Scheduler onLogOn => C:\Users\miche\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe LOGON (Pas de fichier)
Task: {11D6C879-E078-4C36-9E19-C03967B58575} - System32\Tasks\EOSv3 Scheduler onTime => C:\Users\miche\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe SCHED (Pas de fichier)
Task: {7A8D2199-93B4-4ADC-947F-2EB414EC35B2} - System32\Tasks\Microsoft\Windows\termsrv\RemoteFX\RemoteFXvGPUDisableTask => %windir%\System32\RemoteFXvGPUDisablement.exe Disable (Pas de fichier)
Task: {38CAC8F2-857B-4075-A4B7-C52C23A8A217} - System32\Tasks\Microsoft\Windows\termsrv\RemoteFX\RemoteFXWarningTask => %windir%\System32\RemoteFXvGPUDisablement.exe Warning (Pas de fichier)
Task: {4A02413D-1F0F-4FEB-B391-834056D184F3} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-255638037-1924303046-3380138641-1012 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe /reporting (Pas de fichier)
Task: {82B56933-E527-4864-9612-62F3FDAF6A2E} - System32\Tasks\onedrive standalone update task-s-1-5-21-255638037-1924303046-3380138641-1001 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe (Pas de fichier)
Task: {CE99C5DD-9B72-4879-ABC2-EB1DD0A03C3A} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-255638037-1924303046-3380138641-1005 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe (Pas de fichier)
Task: {9F9E9C1C-6B1A-4A66-92F7-C42C8EED9053} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-255638037-1924303046-3380138641-1007 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe (Pas de fichier)
Task: {93C1A578-C888-4376-95F6-C27F69566BB8} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-255638037-1924303046-3380138641-1009 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe (Pas de fichier)
Task: {3EA6F684-2D72-46D6-9F93-88F26DA633A1} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-255638037-1924303046-3380138641-1012 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe (Pas de fichier)
Task: {E53BB064-3F57-4CA3-80F6-89F6D88F2C1D} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-255638037-1924303046-3380138641-500 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe (Pas de fichier)
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
FF Plugin HKU\S-1-5-21-255638037-1924303046-3380138641-1001: @360.cn/360SoftMgrPlugin -> C:\Program Files (x86)\360\360Safe\SoftMgr\np360SoftMgr.dll [Pas de fichier]
R3 aswbIDSAgent; C:\Program Files\Avast Software\Avast\aswidsagent.exe [8892824 2023-07-20]
R2 avast! Antivirus; C:\Program Files\Avast Software\Avast\AvastSvc.exe [578968 2023-07-20]
R2 avast! Tools; C:\Program Files\Avast Software\Avast\aswToolsSvc.exe [579992 2023-07-20]
R2 AvastWscReporter; C:\Program Files\Avast Software\Avast\wsc_proxy.exe [56912 2021-07-09]
R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [31368 2023-07-20] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [237424 2023-07-20] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [392832 2023-07-20] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [297832 2023-07-20] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [95960 2023-07-20] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [25576 2022-11-13] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [39600 2023-07-20] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [272016 2023-07-20] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [556576 2023-07-20] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [105248 2023-07-20] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [80416 2023-07-20] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [943456 2023-07-20] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [704264 2023-07-20] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [212632 2023-07-20] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [319512 2023-07-20] (Microsoft Windows Hardware Compatibility Publisher -> AVAST Software)
2023-07-23 11:02 - 2023-07-23 11:01 - 015274968 _____ (ESET) C:\Users\miche\Desktop\esetonlinescanner.exe
2023-07-23 10:58 - 2023-07-23 10:58 - 000000000 ____D C:\Users\Test\AppData\Roaming\Avast Software
2023-07-23 10:51 - 2023-07-23 10:51 - 000000000 ____D C:\Users\Test\AppData\Roaming\Adobe
2023-07-22 19:07 - 2023-07-22 19:07 - 000003858 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onLogOn
2023-07-22 19:07 - 2023-07-22 19:07 - 000003416 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onTime
2023-07-22 19:03 - 2023-07-22 19:03 - 000001392 _____ C:\Users\miche\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk
2023-07-20 12:16 - 2023-07-20 12:16 - 000313240 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2023-07-23 11:55 - 2022-07-20 06:24 - 000155780 _____ C:\WINDOWS\system32\perfc00A.dat
2023-07-23 11:55 - 2022-07-20 06:22 - 000792902 _____ C:\WINDOWS\system32\perfh00C.dat
2023-07-23 11:55 - 2022-07-20 06:22 - 000150070 _____ C:\WINDOWS\system32\perfc00C.dat
2023-07-23 11:55 - 2022-07-20 06:19 - 000554678 _____ C:\WINDOWS\system32\perfh008.dat
2023-07-23 11:55 - 2022-07-20 06:19 - 000089326 _____ C:\WINDOWS\system32\perfc008.dat
2023-07-23 11:55 - 2022-07-20 06:17 - 000719676 _____ C:\WINDOWS\system32\perfh005.dat
2023-07-23 11:55 - 2022-07-20 06:17 - 000145526 _____ C:\WINDOWS\system32\perfc005.dat
2023-07-23 11:55 - 2022-07-20 06:15 - 000744476 _____ C:\WINDOWS\system32\perfh007.dat
2023-07-23 11:55 - 2022-07-20 06:15 - 000150378 _____ C:\WINDOWS\system32\perfc007.dat
2023-07-23 11:55 - 2022-07-20 06:11 - 000429034 _____ C:\WINDOWS\system32\prfh0804.dat
2023-07-23 11:55 - 2022-07-20 06:11 - 000133244 _____ C:\WINDOWS\system32\prfc0804.dat
2023-07-23 11:55 - 2022-07-20 06:09 - 000787236 _____ C:\WINDOWS\system32\perfh015.dat
2023-07-23 11:55 - 2022-07-20 06:09 - 000152810 _____ C:\WINDOWS\system32\perfc015.dat
2023-07-23 11:55 - 2022-07-20 06:07 - 000779054 _____ C:\WINDOWS\system32\prfh0816.dat
2023-07-23 11:55 - 2022-07-20 06:07 - 000152754 _____ C:\WINDOWS\system32\prfc0816.dat
2023-07-23 11:55 - 2022-07-20 06:05 - 000772870 _____ C:\WINDOWS\system32\perfh019.dat
2023-07-23 11:55 - 2022-07-20 06:05 - 000152080 _____ C:\WINDOWS\system32\perfc019.dat
2023-07-23 11:55 - 2022-07-20 06:03 - 000716480 _____ C:\WINDOWS\system32\perfh01D.dat
2023-07-23 11:55 - 2022-07-20 06:03 - 000146084 _____ C:\WINDOWS\system32\perfc01D.dat
2023-07-23 11:55 - 2022-07-20 06:01 - 000788770 _____ C:\WINDOWS\system32\perfh013.dat
2023-07-23 11:55 - 2022-07-20 06:01 - 000154624 _____ C:\WINDOWS\system32\perfc013.dat
2023-07-23 11:55 - 2022-07-20 05:59 - 000781624 _____ C:\WINDOWS\system32\perfh010.dat
2023-07-23 11:55 - 2022-07-20 05:59 - 000146342 _____ C:\WINDOWS\system32\perfc010.dat
2023-07-23 11:55 - 2022-07-20 05:57 - 000731328 _____ C:\WINDOWS\system32\perfh00E.dat
2023-07-23 11:55 - 2022-07-20 05:57 - 000162958 _____ C:\WINDOWS\system32\perfc00E.dat
2023-07-23 11:55 - 2022-07-20 05:56 - 000489994 _____ C:\WINDOWS\system32\perfh011.dat
2023-07-23 11:55 - 2022-07-20 05:56 - 000133374 _____ C:\WINDOWS\system32\perfc011.dat
2023-07-23 11:55 - 2022-07-20 05:54 - 000453870 _____ C:\WINDOWS\system32\perfh014.dat
2023-07-23 11:55 - 2022-07-20 05:54 - 000077570 _____ C:\WINDOWS\system32\perfc014.dat
2023-07-23 11:55 - 2022-07-20 05:53 - 000500038 _____ C:\WINDOWS\system32\perfh012.dat
2023-07-23 11:55 - 2022-07-20 05:53 - 000133398 _____ C:\WINDOWS\system32\perfc012.dat
2023-07-23 11:51 - 2021-04-02 18:24 - 000000000 ____D C:\ProgramData\Avast Software
2023-07-21 07:58 - 2021-07-09 09:51 - 000000000 ____D C:\Users\miche\AppData\Local\Avast Software
2023-07-20 12:16 - 2021-04-02 18:25 - 000943456 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2023-07-20 12:16 - 2021-04-02 18:25 - 000704264 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2023-07-20 12:16 - 2021-04-02 18:25 - 000556576 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNetHub.sys
2023-07-20 12:16 - 2021-04-02 18:25 - 000392832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2023-07-20 12:16 - 2021-04-02 18:25 - 000319512 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2023-07-20 12:16 - 2021-04-02 18:25 - 000297832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2023-07-20 12:16 - 2021-04-02 18:25 - 000272016 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2023-07-20 12:16 - 2021-04-02 18:25 - 000237424 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2023-07-20 12:16 - 2021-04-02 18:25 - 000105248 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2023-07-20 12:16 - 2021-04-02 18:25 - 000095960 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2023-07-20 12:16 - 2021-04-02 18:25 - 000080416 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2023-07-20 12:16 - 2021-04-02 18:25 - 000039600 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2023-07-20 12:16 - 2021-04-02 18:25 - 000031368 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArDisk.sys
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll
ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"
HKU\S-1-5-21-255638037-1924303046-3380138641-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://hao.360.cn/?360win10set
HKU\S-1-5-21-255638037-1924303046-3380138641-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://oem17win10.msn.com/?pc=NMTE
HKU\S-1-5-21-255638037-1924303046-3380138641-1011\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://oem17win10.msn.com/?pc=NMTE
HKU\S-1-5-21-255638037-1924303046-3380138641-1011\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://oem17win10.msn.com/?pc=NMTE
EmptyTemp:
cmd: ipconfig /flushdns
cmd: netsh winsock reset
end::