start
CloseProcesses:
Hosts:
CreateRestorePoint:
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://fr.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_adsrch_16_08¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dfr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0AtDtB0B0BzzyE0DtCtCyCyD0CyB0DyDtN0D0Tzu0StCyDtCyCtN1L2XzutAtFtCzztFtCtFtCtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyEzyyDyBzyyB0A0FtGyEzz0AtAtG0AtB0DtAtGtBtAtDyEtGyE0D0E0FyDtB0CtCtDtA0A0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FtCtAyB0CtC0AzztGtBzytDtBtGyEtD0AtDtGzztByCyBtGtDyCtAyB0D0EtD0EyBtByB0E2QtN0A0LzuyE%26cr%3D251167527%26a%3Dwbf_adsrch_16_08%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://fr.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_adsrch_16_08¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dfr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0AtDtB0B0BzzyE0DtCtCyCyD0CyB0DyDtN0D0Tzu0StCyDtCyCtN1L2XzutAtFtCzztFtCtFtCtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyEzyyDyBzyyB0A0FtGyEzz0AtAtG0AtB0DtAtGtBtAtDyEtGyE0D0E0FyDtB0CtCtDtA0A0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FtCtAyB0CtC0AzztGtBzytDtBtGyEtD0AtDtGzztByCyBtGtDyCtAyB0D0EtD0EyBtByB0E2QtN0A0LzuyE%26cr%3D251167527%26a%3Dwbf_adsrch_16_08%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome
SearchScopes: HKLM -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_adsrch_16_08¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0AtDtB0B0BzzyE0DtCtCyCyD0CyB0DyDtN0D0Tzu0StCyDtCyCtN1L2XzutAtFtCzztFtCtFtCtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyEzyyDyBzyyB0A0FtGyEzz0AtAtG0AtB0DtAtGtBtAtDyEtGyE0D0E0FyDtB0CtCtDtA0A0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FtCtAyB0CtC0AzztGtBzytDtBtGyEtD0AtDtGzztByCyBtGtDyCtAyB0D0EtD0EyBtByB0E2QtN0A0LzuyE%26cr%3D251167527%26a%3Dwbf_adsrch_16_08%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2213925426-3503192143-2438597147-1002 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_popjar_15_53_ssg06¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0AtDtB0B0BzzyE0DtCtCyCyD0CyB0DyDtN0D0Tzu0StCyEyCtBtN1L2XzutAtFtCyCtFtCtFtDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StAyDzztByB0D0DyDtGyDtBtBtCtG0EyC0AtCtGyEzztAtCtGtBtDzytDyE0EyE0C0Azz0DyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FtCtAyB0CtC0AzztGtBzytDtBtGyEtD0AtDtGzztByCyBtGtDyCtAyB0D0EtD0EyBtByB0E2QtN0A0LzuyE%26cr%3D1442312069%26a%3Dwncy_popjar_15_53_ssg06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2213925426-3503192143-2438597147-1002 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_popjar_15_53_ssg06¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0AtDtB0B0BzzyE0DtCtCyCyD0CyB0DyDtN0D0Tzu0StCyEyCtBtN1L2XzutAtFtCyCtFtCtFtDtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StAyDzztByB0D0DyDtGyDtBtBtCtG0EyC0AtCtGyEzztAtCtGtBtDzytDyE0EyE0C0Azz0DyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FtCtAyB0CtC0AzztGtBzytDtBtGyEtD0AtDtGzztByCyBtGtDyCtAyB0D0EtD0EyBtByB0E2QtN0A0LzuyE%26cr%3D1442312069%26a%3Dwncy_popjar_15_53_ssg06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2213925426-3503192143-2438597147-1002 -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_adsrch_16_08¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0AtDtB0B0BzzyE0DtCtCyCyD0CyB0DyDtN0D0Tzu0StCyDtCyCtN1L2XzutAtFtCzztFtCtFtCtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyEzyyDyBzyyB0A0FtGyEzz0AtAtG0AtB0DtAtGtBtAtDyEtGyE0D0E0FyDtB0CtCtDtA0A0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FtCtAyB0CtC0AzztGtBzytDtBtGyEtD0AtDtGzztByCyBtGtDyCtAyB0D0EtD0EyBtByB0E2QtN0A0LzuyE%26cr%3D251167527%26a%3Dwbf_adsrch_16_08%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2213925426-3503192143-2438597147-1002 -> {8CDE19E6-71C2-4B46-89B7-35F6A18C571A} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wny_adsrch_16_04¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3DWinYahoo%26cd%3D2XzuyEtN2Y1L1Qzu0AtDtB0B0BzzyE0DtCtCyCyD0CyB0DyDtN0D0Tzu0StCyEzytCtN1L2XzutAtFtCyBtFzytFtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2StAyBzzzzyE0DyDtBtGtD0BtAzztG0EyEzzyDtGtDzztDtBtGzztDyEtBtD0CyEyBtD0DyE0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FtCtAyB0CtC0AzztGtBzytDtBtGyEtD0AtDtGzztByCyBtGtDyCtAyB0D0EtD0EyBtByB0E2QtN0A0LzuyE%26cr%3D1722201352%26a%3Dwny_adsrch_16_04%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms}
FF DefaultSearchEngine: Search Provided by Yahoo
FF SelectedSearchEngine: Search Provided by Yahoo
FF Homepage: hxxps://fr.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_adsrch_16_08¶m1=1¶m2=f%3D1%26b%3DFirefox%26cc%3Dfr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0AtDtB0B0BzzyE0DtCtCyCyD0CyB0DyDtN0D0Tzu0StCyDtCyCtN1L2XzutAtFtCzztFtCtFtCtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyEzyyDyBzyyB0A0FtGyEzz0AtAtG0AtB0DtAtGtBtAtDyEtGyE0D0E0FyDtB0CtCtDtA0A0D2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0FtCtAyB0CtC0AzztGtBzytDtBtGyEtD0AtDtGzztByCyBtGtDyCtAyB0D0EtD0EyBtByB0E2QtN0A0LzuyE%26cr%3D251167527%26a%3Dwbf_adsrch_16_08%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome
2016-01-04 18:55 - 2016-02-25 17:33 - 0000175 _____ () C:\Users\Christian\AppData\Roaming\WB.CFG
DNS Unlocker version 1.4 (HKLM-x32\...\{E1527582-8509-4011-B922-29E3FB548882}_is1) (Version: 1.4 - www.dnsunlocker.com) <==== ATTENTION
Task: {71B15D1B-0376-43F9-A8E8-10065B979CFC} - System32\Tasks\DNSWALTERS => dnswalters.exe <==== ATTENTION
AlternateDataStreams: C:\ProgramData\Temp:10894A2E [144]


EmptyTemp:
end