start::
CreateRestorepoint:
CloseProcesses:
ContextMenuHandlers1: [Glary Utilities 3] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} =>  -> Pas de fichier
ContextMenuHandlers1: [IObitUnstaler] -> {B19ED566-D419-470b-B111-3C89040BC027} =>  -> Pas de fichier
ContextMenuHandlers4: [IObitUnstaler] -> {B19ED566-D419-470b-B111-3C89040BC027} =>  -> Pas de fichier
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> Pas de fichier
ContextMenuHandlers6: [IObitUnstaler] -> {B19ED566-D419-470b-B111-3C89040BC027} =>  -> Pas de fichier
Task: {2FA89BBE-710D-457F-86DB-3F7C19106059} - System32\Tasks\Uninstaller_SkipUac_yvonne_loulou => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe
C:\Program Files (x86)\IObit
Task: {75214E03-02C3-4258-B73F-2F855905A139} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
Task: {793AF46C-C4FA-4273-B3B9-21CE146DC069} - \WebDiscover Browser Update Task -> Pas de fichier <==== ATTENTION
Task: {898E0654-3115-40D1-B066-7D624FE06B41} - System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe
Task: {E796776B-4A17-4E52-B1EE-D35FE28A6055} - System32\Tasks\Driver Booster SkipUAC (yvonne loulou) => C:\Program Files (x86)\IObit\Driver Booster\5.2.0\DriverBooster.exe
C:\Program Files (x86)\AVG\AVG PC TuneUp
Task: {4F24B71A-63EF-49E0-8A94-119F072861B5} - System32\Tasks\{152EDCBC-C346-054C-AD3A-0B6DA5BA90E0} => C:\Users\yvonne loulou\AppData\Roaming\Nigatuhane\Detohar.exe [2013-04-13] ()
Task: C:\WINDOWS\Tasks\Uninstaller_SkipUac_yvonne_loulou.job => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe
Task: C:\WINDOWS\Tasks\{152EDCBC-C346-054C-AD3A-0B6DA5BA90E0}.job => C:\Users\YVONNE~1\AppData\Roaming\NIGATU~1\Detohar.exe <==== ATTENTION
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-21-3255263403-2644392582-327085734-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [10290608 2018-02-07] (Piriform Ltd)
2018-03-29 17:47 - 2018-04-05 15:13 - 000002252 _____ C:\Users\Public\Desktop\Advanced SystemCare 11.lnk
2018-03-29 17:47 - 2018-03-29 17:47 - 000000000 ____D C:\ProgramData\{13CFD044-61E4-4EAC-AD61-02536D961216}
2018-03-29 16:17 - 2018-03-29 16:17 - 000000000 ____D C:\WINDOWS\IObit
2018-03-29 16:13 - 2018-03-29 16:13 - 000000000 ____D C:\ProgramData\{BE2ACE5C-32B7-4777-9BDF-ECF87CDAB705}
2018-03-29 15:14 - 2018-03-29 15:14 - 091820032 _____ C:\WINDOWS\system32\config\SOFTWARE.iobit
2018-03-29 15:14 - 2018-03-29 15:14 - 000741376 _____ C:\WINDOWS\system32\config\DEFAULT.iobit
2018-03-29 15:14 - 2018-03-29 15:14 - 000040960 _____ C:\WINDOWS\system32\config\SECURITY.iobit
2018-03-29 15:14 - 2018-03-29 15:14 - 000028672 _____ C:\WINDOWS\system32\config\SAM.iobit
2018-03-29 15:07 - 2018-04-06 15:00 - 000000000 ____D C:\Users\yvonne loulou\AppData\LocalLow\IObit
2018-03-29 15:07 - 2018-04-01 17:14 - 000000326 _____ C:\WINDOWS\Tasks\{152EDCBC-C346-054C-AD3A-0B6DA5BA90E0}.job
2018-03-29 15:07 - 2018-03-29 15:07 - 000002862 _____ C:\WINDOWS\System32\Tasks\{152EDCBC-C346-054C-AD3A-0B6DA5BA90E0}
2018-03-29 15:06 - 2018-04-06 16:01 - 000000000 ____D C:\Program Files (x86)\IObit
2018-03-29 15:06 - 2018-04-06 15:00 - 000000000 ____D C:\Users\yvonne loulou\AppData\Roaming\IObit
2018-03-29 15:06 - 2018-04-06 15:00 - 000000000 ____D C:\ProgramData\IObit
2018-03-29 15:06 - 2018-04-06 13:06 - 000000000 ____D C:\ProgramData\{53AD96CE-D9EF-1C08-5F29-824AC56B0984}
2018-03-29 15:06 - 2018-03-29 15:06 - 047736096 _____ (IObit) C:\Users\yvonne loulou\Downloads\advanced-systemcare-free.exe
2018-04-06 16:05 - 2017-11-01 22:49 - 000000000 ____D C:\Program Files (x86)\AVG
2018-04-06 16:05 - 2017-02-19 11:21 - 000000000 ____D C:\Users\yvonne loulou\AppData\Local\AvgSetupLog
2018-04-06 16:05 - 2017-02-19 11:21 - 000000000 ____D C:\ProgramData\Avg
S3 iobit_monitor_server; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\Monitor_win10_x64.sys [X]
2018-04-05 15:06 - 2018-04-05 15:06 - 005742592 _____ C:\WINDOWS\system32\config\DRIVERS.iobit
2018-03-29 16:17 - 2018-03-29 16:17 - 000000000 ____D C:\WINDOWS\IObit
2018-03-29 15:14 - 2018-03-29 15:14 - 091820032 _____ C:\WINDOWS\system32\config\SOFTWARE.iobit
2018-03-29 15:14 - 2018-03-29 15:14 - 000741376 _____ C:\WINDOWS\system32\config\DEFAULT.iobit
2018-03-29 15:14 - 2018-03-29 15:14 - 000040960 _____ C:\WINDOWS\system32\config\SECURITY.iobit
2018-03-29 15:14 - 2018-03-29 15:14 - 000028672 _____ C:\WINDOWS\system32\config\SAM.iobit
2018-03-29 15:07 - 2018-04-06 15:00 - 000000000 ____D C:\Users\yvonne loulou\AppData\LocalLow\IObit
2018-03-29 15:06 - 2018-04-06 16:01 - 000000000 ____D C:\Program Files (x86)\IObit
2018-03-29 15:06 - 2018-04-06 15:00 - 000000000 ____D C:\Users\yvonne loulou\AppData\Roaming\IObit
2018-03-29 15:06 - 2018-04-06 15:00 - 000000000 ____D C:\ProgramData\IObit
2018-03-29 15:06 - 2018-03-29 15:06 - 047736096 _____ (IObit) C:\Users\yvonne loulou\Downloads\advanced-systemcare-free.exe
cmd: ipconfig /flushdns
cmd: netsh advfirewall reset
cmd: netsh advfirewall set allprofiles state on
removeproxy:
cmd: netsh winsock reset
emptytemp:
end::