start::
closeprocesses:
createrestorepoint:
HKLM\...\StartupApproved\Run32: => "SDTray"
HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.) [Fichier non signé]
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKU\S-1-5-21-2237261834-1263866364-1506138106-1001\...\Run: [Spotify Web Helper] => C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe [1168896 2014-12-19] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-2237261834-1263866364-1506138106-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [44486048 2023-12-05] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [>{D8F51CBC-4929-4BCB-BC5C-3ECA029885C6}] -> RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => %SystemRoot%\System32\AutoWorkplace.exe join (Pas de fichier)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [Pas de fichier]
FF Plugin-x32: @videolan.org/vlc,version=3.0.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [Pas de fichier]
FF Plugin-x32: @videolan.org/vlc,version=3.0.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [Pas de fichier]
FF Plugin-x32: @videolan.org/vlc,version=3.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [Pas de fichier]
CHR Notifications: Default -> hxxps://bestdealfor31.life; hxxps://blog.joomeo.com; hxxps://dlcr.lameterthenhep.info; hxxps://forums.commentcamarche.net; hxxps://fr.aliexpress.com; hxxps://gcx.aliexpress.com; hxxps://openload.co; hxxps://recoverit.wondershare.net; hxxps://testonsensemble.pushcrew.com; hxxps://uptobox.com; hxxps://www.aramisauto.com; hxxps://www.bonial.fr; hxxps://www.cinecalidad.is; hxxps://www.cnetfrance.fr; hxxps://www.fotor.com; hxxps://www.just-eat.fr; hxxps://www.kizoa.com; hxxps://www.leptidigital.fr; hxxps://www.oui.sncf; hxxps://www.paruvendu.fr; hxxps://www.pixiz.com; hxxps://www.repelisplus.vip; hxxps://www.tectake.fr; hxxps://www.wish.com; hxxps://www.youtube.com; hxxps://www.zone-telechargement.al; hxxps://www.zonefr.com; hxxps://x0b1.lalittandkedsi.info; hxxps://zoagremo.net
CHR HomePage: Default -> hxxp://www.google.fr/
CHR DefaultSearchURL: Default -> hxxps://fr.search.yahoo.com/search?fr=mcafee&type=E210FR91082G0&p={searchTerms}
CHR DefaultSearchKeyword: Default -> mcafee
CHR DefaultSuggestURL: Default -> hxxps://fr.search.yahoo.com/sugg/gossip/gossip-fr-partner?output=fxjson&appid=mca&source=yahoo_mcafee_searchassist&command={searchTerms}
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
S2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [408944 2017-10-09] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [895152 2024-01-06] (McAfee, LLC -> McAfee, LLC)
R2 avgntflt; C:\WINDOWS\System32\DRIVERS\avgntflt.sys [208176 2020-04-02] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R1 avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [197176 2020-04-02] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [46704 2020-04-02] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S2 MBAMChameleon; \SystemRoot\System32\Drivers\MbamChameleon.sys [X]
cmd: sfc /scannow
emptytemp:
end::