start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
GroupPolicy-Firefox: Restriction
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction
HKU\S-1-5-21-4007709095-1986763349-3364286526-1001\SOFTWARE\Policies\Microsoft\Edge: Restriction
CustomCLSID: HKU\S-1-5-21-4007709095-1986763349-3364286526-1001_Classes\CLSID\{00D76C46-8D5C-43E1-BD5E-0DD971840732}\localserver32
CustomCLSID: HKU\S-1-5-21-4007709095-1986763349-3364286526-1001_Classes\CLSID\{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}\InprocServer32 -> => Pas de fichier
CustomCLSID: HKU\S-1-5-21-4007709095-1986763349-3364286526-1001_Classes\CLSID\{B581E527-0283-4EE9-8B8E-D8D54C5DEA02}\InprocServer32 ->
ContextMenuHandlers2: [ContextMenu] -> {ee10d625-cc60-30a4-b3df-4b349785be6b} => C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\Antivirus.ContextMenu.DLL -> Pas de fichier
ContextMenuHandlers3: [ContextMenu] -> {ee10d625-cc60-30a4-b3df-4b349785be6b} => C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\Antivirus.ContextMenu.DLL -> Pas de fichier
HKLM\...\Run: [Adguard] => C:\Program Files\AdGuard\Adguard.exe [7336984 2025-02-27]
Task: C:\windows\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
Task: {64161C36-9EDA-4DF4-B237-1C2A23660504} - System32\Tasks\BrowserWorks\Waterfox Default Browser Agent 6F940AC27A98DD61 =>
Task: {706BF2E3-19CB-4D13-83C8-0C7DDCD77533} - System32\Tasks\WaterfoxLimited\Waterfox Default Browser Agent 6F940AC27A98DD61 =>
Edge HKLM-x32\...\Edge\Extension: [caiblelclndcckfafdaggpephhgfpoip]
Edge HKLM-x32\...\Edge\Extension: [emgfgdclgfeldebanedpihppahgngnle]
FF Extension: (VPN gratuit - 1VPN) - C:\Users\bonne\AppData\Roaming\Waterfox\Profiles\ls7cincg.default-release\Extensions\1vpn@example.com.xpi
FF Extension: (KeepSolid VPN Unlimited® - le Meilleur Proxy Master) - C:\Users\bonne\AppData\Roaming\Waterfox\Profiles\ls7cincg.default-release\Extensions\@vpn-unlimited-secure-proxy.xpi
FF Extension: (AdGuard VPN — proxy privé gratuit et sécurisé) - C:\Users\bonne\AppData\Roaming\Waterfox\Profiles\ls7cincg.default-release\Extensions\adguard-vpn@adguard.com.xpi
FF Extension: (FastestVPN Proxy for FireFox) - C:\Users\bonne\AppData\Roaming\Waterfox\Profiles\ls7cincg.default-release\Extensions\admin@fastestvpn.com.xpi
FF Extension: (Ghostery Bloqueur de Traqueurs et de Publicités - confidentialité) - C:\Users\bonne\AppData\Roaming\Waterfox\Profiles\ls7cincg.default-release\Extensions\firefox@ghostery.com.xpi
FF Extension: (Pas de nom) - C:\Users\bonne\AppData\Roaming\Waterfox\Profiles\ls7cincg.default-release\Extensions\{8ace7694-3aea-4948-9f33-0d031a51f612}.xpi
FF Extension: (ESET Browser Privacy & Security) - C:\Users\bonne\AppData\Roaming\Mozilla\Firefox\Profiles\1brqij6d.default-release\Extensions\browserextension@eset.com.xpi
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM-x32\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2024-09-16]
R3 cpuz158; C:\windows\temp\cpuz158\cpuz158_x64.sys [44592 2025-03-09] (Microsoft Windows Hardware Compatibility Publisher -> CPUID) <==== ATTENTION
U3 aswArDisk; pas de ImagePath
U1 bdvedisk; pas de ImagePath
S3 CorsairVHidDriver; \SystemRoot\System32\drivers\CorsairVHidDriver.sys [X]
S3 SIUSBXP; \??\C:\Windows\system32\drivers\SiUSBXp.sys [X]
2025-02-27 21:11 - 2025-02-27 21:11 - 000000000 ___HD C:\$AV_ASW
2025-02-19 23:18 - 2025-02-19 23:18 - 000114612 _____ C:\ProgramData\vpn.uninstall.1740003504.bdinstall.v2.bin
2025-02-19 23:18 - 2025-02-19 23:18 - 000085320 _____ C:\ProgramData\agent.uninstall.1740003522.bdinstall.v2.bin
2025-02-19 23:16 - 2025-02-19 23:16 - 000000000 ____D C:\windows\system32\Tasks\Avira
2025-03-09 14:45 - 2024-12-16 00:46 - 000000000 ____D C:\ProgramData\Avast Software
2025-03-09 14:45 - 2024-10-11 22:22 - 000023506 _____ C:\windows\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2025-03-09 14:43 - 2024-12-16 00:47 - 000000000 ____D C:\Users\bonne\AppData\Roaming\Avast Software
2025-03-09 14:43 - 2024-12-16 00:47 - 000000000 ____D C:\Users\bonne\AppData\Local\Avast Software
2025-02-19 23:48 - 2024-10-27 00:23 - 000000000 ____D C:\ProgramData\GlarySoft
2025-02-19 23:41 - 2024-12-19 03:16 - 000000000 ____D C:\Program Files (x86)\Avira
2025-02-19 23:40 - 2024-10-25 19:37 - 000000000 ____D C:\Program Files\Bitdefender
AlternateDataStreams: C:\ProgramData:Easy$Duplicate$Finder [153]
AlternateDataStreams: C:\Users\All Users:Easy$Duplicate$Finder [153]
AlternateDataStreams: C:\ProgramData\Application Data:Easy$Duplicate$Finder [153]
ShortcutWithArgument: C:\Users\bonne\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\4242a155fcc27c2b\FlashPeak Slimjet (64 bit).lnk
EmptyTemp:
cmd: netsh advfirewall reset
cmd: ipconfig /flushdns
cmd: DISM /Online /Cleanup-image /Restorehealth
end::