Script ZHPFix EmptyFlash EmptyTemp EmptyCLSID EmptyPrefetch CreateRestorePoint G2 - GCE: Preference [Administrateur][User Data\Default\Extensions] [nahhmpbckpgdidfnmfkfgiflpjijilce] Search Manager [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:WebBar Toolbar O42 - Logiciel: Search Powered by Yahoo! - (..) [HKLM][64Bits] -- {9ABA727A-CA3A-A3FA-7BBA-D37AAB3A00FA} [Unsigned] HKU\.DEFAULT\Software\ByteFence HKU\S-1-5-18\Software\ByteFence HKLM\SOFTWARE\Wow6432Node\Lavasoft\Web Companion HKLM\SOFTWARE\Lavasoft\Web Companion HKLM64\SOFTWARE\Microsoft\RADAR\HeapLeakDetection\DiagnosedApplications\ByteFence.exe HKLM\SOFTWARE\81bfc699-f883-50c7-b674-2483b6baae23 HKLM\SOFTWARE\Restoro HKLM\SOFTWARE\WebBar O43 - CFD: 26/05/2018 - [] D -- C:\ProgramData\ByteFence O45 - LFCP:[MD5.A6A14269A108B386B3859AE5F4A61FAC] 26/12/2022 A -- C:\Windows\Prefetch\RESTORO.EXE-13C22509.pf O45 - LFCP:[MD5.BE16EFA6397DD615218BF2802C108578] 26/12/2022 A -- C:\Windows\Prefetch\RESTORO.EXE-5F954CB0.pf [HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:ByteFence.exe C:\Users\sr71A12\AppData\Local\Google\Chrome\User Data\Default\Extensions\nahhmpbckpgdidfnmfkfgiflpjijilce HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9ABA727A-CA3A-A3FA-7BBA-D37AAB3A00FA} HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{9ABA727A-CA3A-A3FA-7BBA-D37AAB3A00FA} C:\ProgramData\ByteFence C:\Windows\Prefetch\RESTORO.EXE-13C22509.pf C:\Windows\Prefetch\RESTORO.EXE-5F954CB0.pf HKU\.DEFAULT\Software\ByteFence HKU\S-1-5-18\Software\ByteFence HKLM\SOFTWARE\Wow6432Node\Lavasoft\Web Companion HKLM\SOFTWARE\Lavasoft\Web Companion HKLM64\SOFTWARE\Microsoft\RADAR\HeapLeakDetection\DiagnosedApplications\ByteFence.exe G2 - GCE: Preference [Administrateur][User Data\Default\Extensions] [gomekmidlodglbbmalcneegieacbdmki] Avast Online Security & Privacy =>.Avast Software s.r.o [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:AvastUI.exe =>.Avast Software s.r.o [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:AvastUI.exe =>.Avast Software s.r.o HKLM\SOFTWARE\AVAST Software =>.AVAST Software HKLM\SOFTWARE\WOW6432Node\Avast Software =>.AVAST Software HKCU\SOFTWARE\Avast Software =>.AVAST Software HKU\.DEFAULT\SOFTWARE\avast software =>.AVAST Software HKU\.DEFAULT\SOFTWARE\Browser Cleanup =>.Avast Software s.r.o HKU\S-1-5-21-576332075-260145264-3872217823-500\SOFTWARE\Avast Software =>.AVAST Software O43 - CFD: 27/12/2022 - [] D -- C:\ProgramData\AVAST Software =>.AVAST Software O87 - FAEL: "{97AC887A-6CF7-461F-ADAE-0806BB3E3DE4}" [In-None-P6-TRUE] .(...) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [Unsigned] (.not file.) =>.SUP.Orphan O87 - FAEL: "{3E50F513-CAE8-4C22-B1E5-0F8606F0194B}" [In-None-P17-TRUE] .(...) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [Unsigned] (.not file.) =>.SUP.Orphan [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:D:\avast_one_free_antivirus.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:D:\avast_one_free_antivirus.exe.ApplicationCompany =>.SUP.Orphan.MUICache \Software\Microsoft\Windows\Shell\MuiCache]:D:\avast_one_free_antivirus.exe.FriendlyAppName =>.SUP.Orphan.MUICache [HKU\S-1-5-21-576332075-260145264-3872217823-500\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:D:\avast_one_free_antivirus.exe.ApplicationCompany =>.SUP.Orphan.MUICache [0970EF4BAD5CC44A1C2BC3D96401674C] [26/12/2022] (.Avast Software s.r.o..) - C:\Users\Administrateur\Desktop\avast_one_free_antivirus.exe =>.Avast Software s.r.o. HKLM\SOFTWARE\Wow6432Node\Lavasoft\Web Companion =>PUP.Optional.LavasoftWebCompanion HKLM\SOFTWARE\Lavasoft\Web Companion =>PUP.Optional.LavasoftWebCompanion HKLM\SOFTWARE\Wow6432Node\Lavasoft\Web Companion =>PUP.Optional.LavasoftWebCompanion HKLM\SOFTWARE\Lavasoft\Web Companion =>PUP.Optional.LavasoftWebCompanion https://nicolascoolman.eu/2017/03/12/superfluous-lavasoftwebcompanion/ =>PUP.Optional.LavasoftWebCompanion HKLM\SOFTWARE\WOW6432Node\Lavasoft =>.Lavasoft HKLM\SOFTWARE\WOW6432Node\McAfee =>.McAfee Inc.