start::
SystemRestore: on
CreateRestorePoint:
CloseProcesses:
RemoveProxy:
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction
Task: {415821AC-467F-4F1C-9AC6-1592837759B0} - System32\Tasks\McAfee Remediation (Prepare) => C:\Program Files\Common Files\AV\McAfee VirusScan\upgrade.exe
Task: {5D0F1425-48F8-4E2C-AB8D-C23B67F8E4F1} - System32\Tasks\McAfee\DAD.Execute.Updates => C:\Program Files\Common Files\McAfee\DynamicAppDownloader\DADUpdater.exe
Task: {C1BD0F5A-630E-4A21-936D-7ADE4288001D} - System32\Tasks\McAfee\McAfee Auto Maintenance Task Agent => {ABCECA3B-EA5A-496B-A021-5C6BAB365E5C} C:\Program Files\Common Files\McAfee\TaskScheduler\McAMTaskAgent.exe
Task: {2FECB6E3-06F0-4775-B91D-F8997C9E94CD} - System32\Tasks\McAfee\McAfee Idle Detection Task => {ABCDCA3B-DE6B-5A7C-B132-6D7CBA63E5C5} C:\Program Files\Common Files\McAfee\TaskScheduler\McAMTaskAgent.exe
Task: {D0D901C5-EE87-400E-9E37-189D8ABE5BD8} - System32\Tasks\McAfeeLogon => C:\Program Files\Common Files\mcafee\platform\McUICnt.exe
Edge HKLM-x32\...\Edge\Extension: [caiblelclndcckfafdaggpephhgfpoip]
Edge HKLM-x32\...\Edge\Extension: [emgfgdclgfeldebanedpihppahgngnle]
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM-x32\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
S4 McAPExe; C:\Program Files\Common Files\McAfee\VSCore_15_8\McApExe.exe
S3 McAWFwk; C:\Program Files\Common Files\mcafee\actwiz\McAWFwk.exe
S2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\2.7.371.0\McCSPServiceHost.exe
S3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe
R2 mfevtp; C:\Windows\system32\mfevtps.exe [475600 2018-01-26]
R2 ModuleCoreService; C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe
R2 PEFService; C:\Program Files\Common Files\McAfee\PEF\CORE\PEFService.exe
S3 cfwids; C:\WINDOWS\System32\drivers\cfwids.sys
R3 mfeaack; C:\WINDOWS\System32\drivers\mfeaack.sys
R3 mfeavfk; C:\WINDOWS\System32\drivers\mfeavfk.sys
S0 mfeelamk; C:\WINDOWS\System32\drivers\mfeelamk.sys
R3 mfefirek; C:\WINDOWS\System32\drivers\mfefirek.sys
R0 mfehidk; C:\WINDOWS\System32\drivers\mfehidk.sys
R3 mfencbdc; C:\WINDOWS\System32\DRIVERS\mfencbdc.sys
S3 mfencrk; C:\WINDOWS\System32\DRIVERS\mfencrk.sys
R3 mfeplk; C:\WINDOWS\System32\drivers\mfeplk.sys
R0 mfewfpk; C:\WINDOWS\System32\drivers\mfewfpk.sys
U3 avgArDisk; pas de ImagePath
S4 NVSWCFilter; \SystemRoot\System32\drivers\nvswcfilter.sys [X]
2024-03-10 09:04 - 2024-03-10 09:04 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avira
2024-03-09 19:58 - 2024-03-09 19:58 - 000234944 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Damien\Downloads\avg_internet_security_setup.exe
2024-03-09 19:52 - 2024-03-09 20:12 - 000000000 ____D C:\Users\Damien\AppData\Roaming\AVG
2024-03-09 19:52 - 2024-03-09 20:12 - 000000000 ____D C:\Users\Damien\AppData\Local\AVG
2024-03-09 19:47 - 2024-03-09 19:47 - 000234944 ____N (AVG Technologies CZ, s.r.o.) C:\Users\Damien\Downloads\avg_antivirus_free_setup.exe
2024-03-09 09:42 - 2024-03-09 09:42 - 000000000 ____D C:\Users\Damien\AppData\Local\AviraWebView2Cache
2024-03-09 09:41 - 2024-03-09 09:41 - 000000000 ____D C:\Users\Damien\AppData\Local\Avira
2024-03-09 09:40 - 2024-03-09 09:41 - 006734264 _____ (Avira Operations GmbH) C:\Users\Damien\Downloads\avira_fr_sptl1_538020994-1709973478__pavwws.exe
2024-03-08 22:08 - 2024-03-09 20:13 - 000000000 ____D C:\ProgramData\AVG
2024-03-08 21:13 - 2024-03-08 21:13 - 000002486 _____ C:\WINDOWS\system32\Tasks\McAfeeLogon
2024-03-08 21:13 - 2024-03-08 21:13 - 000002386 _____ C:\WINDOWS\system32\Tasks\McAfee Remediation (Prepare)
2024-03-08 21:13 - 2024-03-08 21:13 - 000000000 ____D C:\WINDOWS\system32\Tasks\McAfee
2024-03-08 22:08 - 2018-09-09 03:34 - 000000000 ____D C:\ProgramData\McAfee
2024-03-08 21:02 - 2018-09-09 03:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2024-03-08 21:02 - 2018-09-09 03:35 - 000000000 ____D C:\Program Files\mcafee.com
2024-03-08 21:02 - 2018-09-09 03:35 - 000000000 ____D C:\Program Files\mcafee
2024-03-08 21:02 - 2018-09-09 03:34 - 000000000 ____D C:\Program Files\Common Files\mcafee
2024-03-08 21:02 - 2018-09-09 03:34 - 000000000 ____D C:\Program Files\Common Files\av
2024-03-08 21:02 - 2018-09-09 03:34 - 000000000 ____D C:\Program Files (x86)\McAfee
AVG Update Helper (HKLM-x32\...\{EDB7AEE7-E932-4836-AE50-D3B0B7766CB5}) (Version: 1.8.1650.5 - AVG Technologies) Hidden
ContextMenuHandlers1: [McCtxMenuFrmWrk] -> {CCA9EFD3-29ED-430A-BA6D-E6BBFF0A60C2} => c:\Program Files\mcafee\msc\McCtxMenuFrmWrk.dll [2018-01-25]
ContextMenuHandlers2: [ContextMenu] -> {ee10d625-cc60-30a4-b3df-4b349785be6b} => C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\Antivirus.ContextMenu.DLL -> Pas de fichier
ContextMenuHandlers3: [ContextMenu] -> {ee10d625-cc60-30a4-b3df-4b349785be6b} => C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\Antivirus.ContextMenu.DLL -> Pas de fichier
ContextMenuHandlers6: [McCtxMenuFrmWrk] -> {CCA9EFD3-29ED-430A-BA6D-E6BBFF0A60C2} => c:\Program Files\mcafee\msc\McCtxMenuFrmWrk.dll [2018-01-25]
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll [2018-01-25]
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2018-01-25]
HKU\S-1-5-21-2785169387-2636077595-2676108669-1001\...\StartupApproved\StartupFolder: => "Winexe.exe"
HKU\S-1-5-21-2785169387-2636077595-2676108669-1001\...\StartupApproved\Run: => "AVGBrowserAutoLaunch_F6C6C2689B2A3B9AE6BC0244050CE176"
EmptyTemp:
cmd: ipconfig /flushdns
end::