CreateRestorePoint:
CloseProcesses:
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Win Tonic\Acheter Win Tonic.lnk -> C:\Program Files\Win Tonic\wtc.exe (Pas de fichier)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Win Tonic\Désinstaller Win Tonic.lnk -> C:\Program Files\Win Tonic\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Win Tonic\Win Tonic.lnk -> C:\Program Files\Win Tonic\wtc.exe (Pas de fichier)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Similar Photo Cleaner\Désinstaller Similar Photo Cleaner.lnk -> C:\Program Files\Similar Photo Cleaner\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Similar Photo Cleaner\Similar Photo Cleaner.lnk -> C:\Program Files\Similar Photo Cleaner\spc.exe (similarphotocleaner.com)
Shortcut: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Avast Passwords.lnk -> C:\Program Files\AVAST Software\Avast\AvastUI.exe (Pas de fichier)
AlternateDataStreams: C:\Users\Public\AppData:CSM [472]
C:\Program Files\File Extension Opener
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\File Extension Opener\
C:\Users\Public\Desktop\File Extension Opener.lnk
HKLM-x32\...\Run: [AvastUI.exe] => "C:\Program Files\AVAST Software\Avast\AvLaunch.exe" /gui
HKU\S-1-5-21-2396288658-4266684334-2000017794-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [18630056 2018-09-06] (Piriform Ltd -> Piriform Ltd)
Task: {34A92FE8-1DB6-44DC-82AB-715E76F031E8} - \Win Tonic_Logon -> Pas de fichier <==== ATTENTION
Task: {5D017BD5-9B57-48AE-9761-B88EBE88C159} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [2281944 2019-06-05] (AVAST Software s.r.o. -> AVAST Software)
Task: {E057F6F0-F332-4FF3-BD55-55EE9878530A} - \Win Tonic -> Pas de fichier <==== ATTENTION
Task: {D4D7B8D8-47ED-4040-9D30-1257D4876615} - System32\Tasks\Similar Photo Cleaner_Logon => C:\Program Files\Similar Photo Cleaner\spc.exe [3100032 2017-11-22] (Syscare Software Inc -> similarphotocleaner.com)
BHO: OffresShopping -> {F4A9D6FE-8C16-4D72-B845-7AE0FFAB2DAB} -> C:\Program Files\RecettesInstaller\BHO.dll [2015-03-06] (Prestafind) [Fichier non signé]
BHO-x32: OffresShopping -> {F4A9D6FE-8C16-4D72-B845-7AE0FFAB2DAB} -> C:\Program Files (x86)\RecettesInstaller\BHO.dll [2015-03-06] (Prestafind) [Fichier non signé]
Toolbar: HKU\S-1-5-21-2396288658-4266684334-2000017794-1000 -> Pas de nom - {093F479D-712E-46CD-9E06-62E734A05F68} - Pas de fichier
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
FF Extension: (Avast SafePrice | Comparaison, offres, coupons) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\1emhf5o8.default\Extensions\sp@avast.com.xpi [2019-03-24]
FF Extension: (Avast Online Security) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\1emhf5o8.default\Extensions\wrc@avast.com.xpi [2019-04-04]
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\kl_prefs_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.js [2019-03-24] <==== ATTENTION (Pointe vers un fichier *.cfg)
FF ExtraCheck: C:\Program Files\mozilla firefox\kl_config_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.cfg [2019-03-24] <==== ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
U3 aswbdisk; pas de ImagePath
2019-06-05 15:43 - 2018-10-13 19:24 - 000003050 _____ C:\Windows\System32\Tasks\Similar Photo Cleaner_Logon
2019-05-31 20:11 - 2019-05-31 20:11 - 005116328 _____ (Avanquest Software ) C:\Users\User\Downloads\OneSafe_PC_Cleaner (2).exe
2019-05-30 23:03 - 2019-05-30 23:03 - 005116328 _____ (Avanquest Software ) C:\Users\User\Downloads\OneSafe_PC_Cleaner.exe
2019-05-30 23:03 - 2019-05-30 23:03 - 005116328 _____ (Avanquest Software ) C:\Users\User\Downloads\OneSafe_PC_Cleaner (1).exe
FirewallRules: [{4873D20F-4F45-40EC-AC40-C4E19B4B96E5}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe Pas de fichier
FirewallRules: [{378B139F-8289-4E10-8AC3-6D2B287BAB8B}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe Pas de fichier
FirewallRules: [{8A720466-C978-4E89-839F-6D13A665CC79}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe Pas de fichier
FirewallRules: [{9D4078CC-DE29-4E69-B891-D90E7642E2FA}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe Pas de fichier
FirewallRules: [{64759DE9-9E2D-4FF6-95EE-EFF0A800F0A4}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe Pas de fichier
FirewallRules: [{C067F037-7721-49FE-A5BC-E62DA6AC5B38}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe Pas de fichier
C:\Program Files\Common Files\AVAST Software\
C:\Program Files\AVAST Software\
C:\Program Files\Similar Photo Cleaner\
C:\Program Files (x86)\IncrediMail\
EmptyTemp: