CreateRestorePoint:
CloseProcesses:
Task: {8EA68391-8BA3-466B-9B84-D7398682EECB} - System32\Tasks\runTask => %TEMP%/Updater.exe
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge StartupUrls: Default -> "hxxp://www.oursurfing.com/?type=hp&ts=1445461902&z=ad053a9cf340c2227822aaag3zez6w7z3qbgateebo&from=amt&uid=hitachixhts727575a9e364_j3340084j703daj703dax"
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1065.0\npAvastBrowserUpdate3.dll [Pas de fichier]
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1065.0\npAvastBrowserUpdate3.dll [Pas de fichier]
 C:\Program Files (x86)\AVAST Software
S3 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [507984 2017-12-27] (Symantec Corporation -> Symantec Corporation)
S3 EraserUtilDrv11521; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11521.sys [156912 2016-04-27] (Symantec Corporation -> Symantec Corporation)
S3 EraserUtilDrv11730; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11730.sys [152656 2017-12-27] (Symantec Corporation -> Symantec Corporation)
S3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [140376 2013-08-27] (Symantec Corporation -> Symantec Corporation)
C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys
C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11521.sys
C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11730.sys
C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys 
C:\Program Files (x86)\Common Files\Symantec Shared
C:\program files (x86)\symantec
C:\Program Files (x86)\Bonjour
BHO: Pas de nom -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> Pas de fichier
BHO: Pas de nom -> {B54F3AB9-D9AB-01A2-4C2B-FB009A1AE2EC} -> Pas de fichier
BHO-x32: Pas de nom -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> Pas de fichier
FirewallRules: [UDP Query User{77E5A100-3B9B-4C4C-8BB6-75DAADF5720C}C:\program files (x86)\symantec\norton online backup\nobuclient.exe] => (Allow) C:\program files (x86)\symantec\norton online backup\nobuclient.exe => Pas de fichier
FirewallRules: [TCP Query User{D9B25170-D78C-4876-858D-F89A6B912759}C:\program files (x86)\symantec\norton online backup\nobuclient.exe] => (Allow) C:\program files (x86)\symantec\norton online backup\nobuclient.exe => Pas de fichier
FirewallRules: [{32D32139-9865-4C86-A97D-BAF73A73A629}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe => Pas de fichier
FirewallRules: [{6A12BDF0-A91A-4C9B-B55A-F3B907FFBD6C}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe => Pas de fichier
FirewallRules: [{C275151D-3F86-4E83-BB6D-097A507A4F68}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe => Pas de fichier
FirewallRules: [{CCCABBF8-4428-4061-B803-6BC04DCD77F1}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe => Pas de fichier
FirewallRules: [{18DDD63E-B235-4EF1-AF9B-CF83781F2115}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe => Pas de fichier
FirewallRules: [{51A8FFE1-F793-45B9-996F-B920D1F17D83}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe => Pas de fichier
EmptyTemp: