start::
CreateRestorePoint:
EmptyTemp:
CloseProcesses:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
S3 EUBAKUP0; \??\C:\Windows\system32\drivers\EUBAKUP0.sys [X]
S3 EUBKMON0; \??\C:\Windows\system32\drivers\EUBKMON0.sys [X]
S3 EUFDDISK0; \??\C:\Windows\system32\drivers\EUFDDISK0.sys [X]
S3 MpKsl73d90a00; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{63404FFC-68FB-4E89-BF90-D9CA8D251DD5}\MpKslDrv.sys [X]
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Pas de fichier
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Pas de fichier
SearchScopes: HKU\S-1-5-21-2568191243-2995721887-4208434668-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2568191243-2995721887-4208434668-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Shortcut: C:\Users\Yoyo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileHippo App Manager.lnk -> C:\Program Files (x86)\FileHippo.com\FileHippo.AppManager.exe (Pas de fichier)
NO SCRIPT FOR O69 - SBI: prefs.js [Yoyo - 1f5nb7hs.default-1452098528242] user_pref("dom.forms.autocomplete.formautofill", true);
C:\WINDOWS\SoftwareDistribution\Download\ *
end::