start::
CreateRestorePoint:
CloseProcesses:
DeleteValue: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|AvastUI.exe
DeleteValue: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce|Delete Cached Update Binary
DeleteValue: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce|Delete Cached Standalone Update Binary
DeleteValue: HKU\S-1-5-21-4000590256-866895084-3915349271-1001\\Software\Microsoft\Windows\CurrentVersion\RunOnce|Delete Cached Update Binary]
DeleteValue: HKU\S-1-5-21-4000590256-866895084-3915349271-1001\\Software\Microsoft\Windows\CurrentVersion\RunOnce|Delete Cached Standalone Update Binary]
DeleteKey: HKCU\SOFTWARE\Host App Service
DeleteKey: HKU\S-1-5-21-4000590256-866895084-3915349271-1001\SOFTWARE\Host App Service
DeleteValue: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|AvastUI.exe
DeleteValue: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|AvastUI.exe
DeleteKey: HKLM\SOFTWARE\Avast Software
DeleteKey: HKLM\SOFTWARE\WOW6432Node\Avast Software
DeleteKey: HKCU\SOFTWARE\AVAST Software
DeleteKey: HKCU\SOFTWARE\AvastAdSDK
DeleteKey: HKU\S-1-5-21-4000590256-866895084-3915349271-1001\SOFTWARE\AVAST Software
DeleteKey: HKU\S-1-5-21-4000590256-866895084-3915349271-1001\SOFTWARE\AvastAdSDK
C:\ProgramData\Avast Software
DeleteKey: HKLM\SOFTWARE\Norton
DeleteKey: HKLM\SOFTWARE\WOW6432Node\Norton
DeleteKey: HKCU\SOFTWARE\AppDataLow\Software\Norton
C:\Program Files\Norton Security
C:\ProgramData\Norton
C:\ProgramData\NortonInstaller
Task: {9F206CEE-41FF-4AF9-9858-177F594AFE34} - System32\Tasks\App Explorer => C:\Users\Yoyo\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe <==== ATTENTION
ShellIconOverlayIdentifiers: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => -> Pas de fichier
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => -> Pas de fichier
SearchScopes: HKU\S-1-5-21-4000590256-866895084-3915349271-1001 -> DefaultScope {994F4343-DA78-4833-B38D-76C4227375FD} URL =
SearchScopes: HKU\S-1-5-21-4000590256-866895084-3915349271-1001 -> {994F4343-DA78-4833-B38D-76C4227375FD} URL =
Shortcut: C:\Users\Yoyo\Documents\Aureas95\Outils Aureas v9.5.lnk -> C:\Program Files (x86)\Aureas95\Outils95.exe (Pas de fichier)
C:\Windows\Temp\ *.*
C:\Users\CurrentUserName\Appdata\Local\Temp\ *.*
C:\Windows\SoftwareDistribution\Download\ *
end::