start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction
HKLM\SOFTWARE\Policies\Google: Restriction
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [417176 2023-12-16]
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe <5>
Task: {C309AF07-31BA-4C62-97E1-098A073E032A} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_465_Plugin.exe
Task: {75AA314F-04FB-4D24-AE53-585A93F14F70} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: {BF14DE13-6B7A-4DA3-9043-2989CA77ECAE} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe
Task: {F5E64AA2-60D5-4177-930A-F803F28AC5D1} - System32\Tasks\Opera scheduled Autoupdate 1651520205 => C:\Users\3040-1\AppData\Local\Programs\Opera\launcher.exe --scheduledautoupdate $(Arg0) (Pas de fichier)
FF Extension: (Avast SafePrice | Comparaison, offres, coupons) - C:\Users\3040-1\AppData\Roaming\Mozilla\Firefox\Profiles\nz4tiyp4.default\Extensions\sp@avast.com.xpi
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_465.dll [2021-09-13]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_465.dll [2021-09-13]
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1579.3\npAvastBrowserUpdate3.dll [Pas de fichier]
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1579.3\npAvastBrowserUpdate3.dll [Pas de fichier]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
S3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [9065880 2023-12-16]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [753048 2023-12-16]
R2 avast! Tools; C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe [1157528 2023-12-16]
R2 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [56912 2021-06-11]
S2 avast; "C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe" /svc [X]
S3 avastm; "C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe" /medsvc [X]
S2 ccleaner; "C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe" /svc [X]
S3 ccleanerm; "C:\Program Files (x86)\CCleaner Browser\Update\CCleanerBrowserUpdate.exe" /medsvc [X]
R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [31528 2023-12-16]
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [243136 2023-12-19]
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [394008 2023-12-16]
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [297984 2023-12-16]
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [96064 2023-12-16]
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [26616 2023-11-29]
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [39752 2023-12-16]
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [276848 2023-12-16]
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [561888 2023-12-16]
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [105352 2023-12-16]
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [80528 2023-12-16]
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [952856 2023-12-16]
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [711664 2023-12-16]
S2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [213296 2023-12-16]
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [319672 2023-12-16]
U1 aswbdisk; pas de ImagePath
U1 avgbdisk; pas de ImagePath
2024-01-27 16:46 - 2020-01-21 09:21 - 000000000 ____D C:\ProgramData\AVAST Software
2024-01-27 14:38 - 2021-06-11 15:32 - 000000000 ____D C:\Users\3040-1\AppData\Local\Avast Software
2024-01-26 21:29 - 2021-10-28 16:11 - 000000000 ____D C:\ProgramData\AVG
2024-01-26 21:26 - 2021-10-28 16:13 - 000000000 ____D C:\Users\3040-1\AppData\Local\AVG
2024-01-23 21:43 - 2021-02-05 23:24 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
CCleaner Update Helper (HKLM-x32\...\{E4EAC0E2-A80B-479F-BA45-DCDA595C9A93}) (Version: 1.8.1583.3 - Piriform Software) Hidden
Avast Update Helper (HKLM-x32\...\{19C3AB22-3718-4E4D-B203-242F5001565B}) (Version: 1.8.1579.3 - AVAST Software) Hidden
AVG Update Helper (HKLM-x32\...\{EDB7AEE7-E932-4836-AE50-D3B0B7766CB5}) (Version: 1.8.1582.3 - AVG Technologies) Hidden
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll
ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll
AlternateDataStreams: C:\Users\3040-1\AppData\Local\Temp:$DATA​ [16]
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"
SearchScopes: HKU\S-1-5-21-3299500577-2757214874-4124028046-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
IE trusted site: HKU\S-1-5-21-3299500577-2757214874-4124028046-1001\...\sharepoint.com -> hxxps://cneap365-files.sharepoint.com
HKU\S-1-5-21-3299500577-2757214874-4124028046-1001\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_FCA8660E61644C82AB34F053C12A07C3"
EmptyTemp:
cmd: netsh advfirewall reset
cmd: ipconfig /flushdns
end::