start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
FF Extension: (Avast SafePrice | Comparaison, offres, coupons) - C:\Users\3040-1\AppData\Roaming\Mozilla\Firefox\Profiles\nz4tiyp4.default\Extensions\sp@avast.com.xpi [2020-01-21]
U1 aswbdisk; pas de ImagePath
2024-01-20 22:36 - 2024-01-20 22:36 - 003148461 _____ C:\Users\3040-1\Downloads\video_game-five_nights
2024-01-27 21:14 - 2020-01-21 09:21 - 000000000 ____D C:\ProgramData\AVAST Software
2024-01-27 20:57 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2024-01-27 20:57 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Macromed
2024-01-27 14:32 - 2022-05-02 20:35 - 000000000 ____D C:\Program Files (x86)\Altruistics
Avast Update Helper (HKLM-x32\...\{19C3AB22-3718-4E4D-B203-242F5001565B}) (Version: 1.8.1579.3 - AVAST Software)
AVG Update Helper (HKLM-x32\...\{EDB7AEE7-E932-4836-AE50-D3B0B7766CB5}) (Version: 1.8.1582.3 - AVG Technologies)
AlternateDataStreams: C:\Users\3040-1\AppData\Local\Temp:$DATA&#8203; [16]
C:\WINDOWS\SECOH-QAD.exe
C:\WINDOWS\SECOH-QAD.dll
C:\Program Files\KMSpico\AutoPico.exe
C:\Program Files\KMSpico\KMSELDI.exe
C:\Program Files\KMSpico\Service_KMS.exe
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico\AutoPico.lnk
C:\WINDOWS\System32\Tasks\AutoPico Daily Restart
EmptyTemp:
md: sfc /scannow
cmd: DISM /Online /Cleanup-image /Restorehealth
cmd: netsh winsock reset
end::