start::
closeprocesses:
createrestorepoint:
CustomCLSID: HKU\S-1-5-21-510769006-1078831347-2412443523-1002_Classes\CLSID\{d1b22d3d-8585-53a6-acb3-0e803c7e8d2a}\localserver32 -> "C:\Users\Kévin\AppData\Local\Microsoft\Teams\current\Teams.exe" --toast => Pas de fichier
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier
SearchScopes: HKU\S-1-5-21-510769006-1078831347-2412443523-1002 -> {52F2D9A9-8B38-44ED-B98F-E4F44BD8CE7F} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre-10.0.2\bin\ssv.dll => Pas de fichier
HKLM\...\StartupApproved\StartupFolder: => "Lancement rapide de SolidWorks 2014.lnk"
HKLM\...\StartupApproved\StartupFolder: => "Téléchargement en arrière-plan de SolidWorks.lnk"
HKLM-x32\...\RunOnce: [ccleaner_update_helper] => C:\Program Files\CCleaner\ccleaner_update_helper.exe [783160 2024-01-25] (PIRIFORM SOFTWARE LIMITED -> Piriform)
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKU\S-1-5-21-510769006-1078831347-2412443523-1002\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [44540320 2024-01-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {909E56BC-FFED-4329-A655-A3044240A544} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
Task: {8EFD1089-C1C1-4687-8FC1-699AE787FBCD} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe /c (Pas de fichier)
Task: {450A3760-6A95-43BB-B9B5-516F59F46926} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe /ua /installsource scheduler
C:\Program Files (x86)\AVAST Software
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => %SystemRoot%\System32\AutoWorkplace.exe join (Pas de fichier)
Task: {49A5E8D2-C887-438D-A5C2-6A37EE365B02} - System32\Tasks\MySQLNotifierTask => "C:\Program Files (x86)\MySQL\MySQL Notifier 1.1MySQLNotifier.exe" --c (Pas de fichier)
CHR Notifications: Default -> hxxps://ai.alimebot.alibaba.com; hxxps://app.slack.com; hxxps://mail.google.com; hxxps://message.alibaba.com; hxxps://padlet.com; hxxps://www.chess.com; hxxps://www.evernote.com; hxxps://www.junglescout.com
C:\Users\Kévin\AppData\Local\Google\Chrome\User Data\Default\Extensions\daanglpcpkjjlkhcbladppjphglbigam
C:\Users\Kévin\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
C:\Users\Kévin\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\daanglpcpkjjlkhcbladppjphglbigam
C:\Users\Kévin\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
C:\Users\Kévin\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\gomekmidlodglbbmalcneegieacbdmki
C:\Users\Kévin\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\daanglpcpkjjlkhcbladppjphglbigam
C:\Users\Kévin\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
C:\Users\Kévin\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\gomekmidlodglbbmalcneegieacbdmki
S3 SolidWorks Licensing Service; C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe [79360 2014-12-28] (SolidWorks) [Fichier non signé]
cmd: netsh advfirewall reset
cmd: sfc /scannow
emptytemp:
end::