start CloseProcesses: CreateRestorePoint: Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X] SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_strmio_16_02¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtBtCzzzzyDzz0ByB0D0CyD0DtBtCyCtN0D0Tzu0StCyEyBtBtN1L2XzutAtFtCyCtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyC0CtByCyE0CyEzztGtBzyzz0DtGyB0BtA0BtGtA0E0EyDtGtByDtC0ByC0AyB0CtBzyzz0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DtAtCyDtDyDyB0AtGyE0AyD0BtGyE0EtD0EtG0BtD0AzztGyCzy0C0AtAzz0D0D0E0AtDyD2QtN0A0LzuyE%26cr%3D1550522199%26a%3Dwncy_strmio_16_02%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms} SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_strmio_16_02¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtBtCzzzzyDzz0ByB0D0CyD0DtBtCyCtN0D0Tzu0StCyEyBtBtN1L2XzutAtFtCyCtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyC0CtByCyE0CyEzztGtBzyzz0DtGyB0BtA0BtGtA0E0EyDtGtByDtC0ByC0AyB0CtBzyzz0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DtAtCyDtDyDyB0AtGyE0AyD0BtGyE0EtD0EtG0BtD0AzztGyCzy0C0AtAzz0D0D0E0AtDyD2QtN0A0LzuyE%26cr%3D1550522199%26a%3Dwncy_strmio_16_02%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms} SearchScopes: HKU\S-1-5-21-2227119291-465177224-2525387193-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_strmio_16_02¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtBtCzzzzyDzz0ByB0D0CyD0DtBtCyCtN0D0Tzu0StCyEyBtBtN1L2XzutAtFtCyCtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyC0CtByCyE0CyEzztGtBzyzz0DtGyB0BtA0BtGtA0E0EyDtGtByDtC0ByC0AyB0CtBzyzz0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DtAtCyDtDyDyB0AtGyE0AyD0BtGyE0EtD0EtG0BtD0AzztGyCzy0C0AtAzz0D0D0E0AtDyD2QtN0A0LzuyE%26cr%3D1550522199%26a%3Dwncy_strmio_16_02%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms} SearchScopes: HKU\S-1-5-21-2227119291-465177224-2525387193-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_strmio_16_02¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtBtCzzzzyDzz0ByB0D0CyD0DtBtCyCtN0D0Tzu0StCyEyBtBtN1L2XzutAtFtCyCtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyC0CtByCyE0CyEzztGtBzyzz0DtGyB0BtA0BtGtA0E0EyDtGtByDtC0ByC0AyB0CtBzyzz0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DtAtCyDtDyDyB0AtGyE0AyD0BtGyE0EtD0EtG0BtD0AzztGyCzy0C0AtAzz0D0D0E0AtDyD2QtN0A0LzuyE%26cr%3D1550522199%26a%3Dwncy_strmio_16_02%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms} FF SelectedSearchEngine: Search Provided by Yahoo CHR StartupUrls: Default -> "hxxps://fr.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_strmio_16_02¶m1=1¶m2=f%3D7%26b%3DChrome%26cc%3Dfr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0CtBtCzzzzyDzz0ByB0D0CyD0DtBtCyCtN0D0Tzu0StCyEyBtBtN1L2XzutAtFtCyCtFtCtFtDtN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2SyC0CtByCyE0CyEzztGtBzyzz0DtGyB0BtA0BtGtA0E0EyDtGtByDtC0ByC0AyB0CtBzyzz0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DtAtCyDtDyDyB0AtGyE0AyD0BtGyE0EtD0EtG0BtD0AzztGyCzy0C0AtAzz0D0D0E0AtDyD2QtN0A0LzuyE%26cr%3D1550522199%26a%3Dwncy_strmio_16_02%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome" S2 Update service; C:\Program Files\Popcorn Time\Updater.exe [X] Task: {77AADBA8-B961-45A9-BCA0-79CA3CAE015F} - \Safer-Networking\Spybot - Search and Destroy\Refresh immunization -> Pas de fichier <==== ATTENTION Task: {ED6BD494-5E45-43DA-B0ED-CCE928C13193} - \Safer-Networking\Spybot - Search and Destroy\Check for updates -> Pas de fichier <==== ATTENTION EmptyTemp: end