Taboola virus

start::
closeprocesses:
createrestorepoint:
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Pas de fichier
IE trusted site: HKU\.DEFAULT\...\webcompanion.com -> hxxp://webcompanion.com
IE trusted site: HKU\S-1-5-21-1055408671-576087031-2926056998-1001\...\webcompanion.com -> hxxp://webcompanion.com
FirewallRules: [UDP Query User{450B11BF-F204-4EAD-BFE9-02A951EE6117}C:\users\chloé gaulupeau\downloads\the.sims.4.get.famous.update.v1.48.90.1020\codex\game\bin\ts4_x64.exe] => (Allow) C:\users\chloé gaulupeau\downloads\the.sims.4.get.famous.update.v1.48.90.1020\codex\game\bin\ts4_x64.exe Pas de fichier
FirewallRules: [TCP Query User{36EA5370-9C27-45F0-A0E0-3569BD4A9409}C:\users\chloé gaulupeau\downloads\the.sims.4.get.famous.update.v1.48.90.1020\codex\game\bin\ts4_x64.exe] => (Allow) C:\users\chloé gaulupeau\downloads\the.sims.4.get.famous.update.v1.48.90.1020\codex\game\bin\ts4_x64.exe Pas de fichier
FirewallRules: [{C73DAA62-90BC-4A59-83F6-5FC07794C53F}] => (Allow) C:\Users\Chloé Gaulupeau\AppData\Local\Programs\Opera\58.0.3135.102\opera.exe Pas de fichier
FirewallRules: [{DF06E16C-87CB-4452-9131-DF583521D2BA}] => (Allow) C:\Program Files\Common Files\McAfee\MMSSHost\MMSSHost.exe Pas de fichier
FirewallRules: [{AFF95A4F-7206-4DC5-80D9-2B2B0981BCF4}] => (Allow) C:\Program Files (x86)\Common Files\Mcafee\MMSSHost\MMSSHost.exe Pas de fichier
FirewallRules: [{238DAB25-3A82-438F-82B4-91F3A8230CC4}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe Pas de fichier
C:\Program Files\mcafee\WebAdvisor
C:\Program Files (x86)\Lavasoft
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2019-08-24] (McAfee, LLC -> McAfee, Inc.)
BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2019-08-24] (McAfee, LLC -> McAfee, Inc.)
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
FF Extension: (McAfee® WebAdvisor) - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi [2019-08-24]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
C:\Users\Chloé Gaulupeau\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho
C:\Users\Chloé Gaulupeau\AppData\Local\Google\Chrome\User Data\Default\Extensions\hfapbcheiepjppjbnkphkmegjlipojba
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
CHR HKLM-x32\...\Chrome\Extension: [nladljmabboanhihfkjacnnkgjhnokhj]
C:\Users\Chloé Gaulupeau\AppData\Local\Google\Chrome\User Data\Default\Extensions\nladljmabboanhihfkjacnnkgjhnokhj
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [905472 2019-08-24] (McAfee, LLC -> McAfee, Inc.)
R2 WCAssistantService; C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe [28760 2019-11-30] (LAVASOFT SOFTWARE CANADA INC -> )
S3 MyWiFiDHCPDNS; "C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe" [X]
2020-03-16 16:07 - 2019-03-13 17:08 - 000000000 ____D C:\ProgramData\AVAST Software
2020-03-16 16:10 - 2020-03-16 16:10 - 000002090 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Antivirus Gratuit.lnk
2020-03-16 16:10 - 2020-03-16 16:10 - 000000000 ____D C:\Users\Chloé Gaulupeau\AppData\Roaming\AVAST Software
2020-03-16 16:09 - 2020-03-16 16:09 - 000458584 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw711161c733fa48b2.tmp
2020-03-16 16:09 - 2020-03-16 16:09 - 000368056 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2020-03-16 16:09 - 2020-03-16 16:09 - 000316256 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw70966504037c26ed.tmp
2020-03-16 16:09 - 2020-03-16 16:09 - 000279360 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw6ec626a600c47340.tmp
2020-03-16 16:09 - 2020-03-16 16:09 - 000235184 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw2bb9ce5c8ba40c16.tmp
2020-03-16 16:09 - 2020-03-16 16:09 - 000175400 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswc294e6352bc9f209.tmp
2020-03-16 16:09 - 2020-03-16 16:09 - 000110560 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswcb85a817139eff9e.tmp
2020-03-16 16:09 - 2020-03-16 16:09 - 000084056 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw592a687a31efad4e.tmp
2020-03-16 16:09 - 2020-03-16 16:09 - 000042976 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw069de8e3c380916e.tmp
2020-03-16 16:09 - 2020-03-16 16:09 - 000016304 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswf19930d65d314375.tmp
2020-03-16 16:09 - 2020-03-16 16:09 - 000000000 ____D C:\Program Files\Common Files\AVAST Software
2020-03-16 16:09 - 2020-03-16 16:08 - 000848672 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswfd20799d931c1637.tmp
2020-03-16 16:09 - 2020-03-16 16:08 - 000271120 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw16269fc07edc31fb.tmp
2020-03-16 16:09 - 2020-03-16 16:08 - 000206608 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw63ae849490b1278c.tmp
2020-03-16 16:09 - 2020-03-16 16:08 - 000205576 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswd6931d073a773762.tmp
2020-03-16 16:09 - 2020-03-16 16:08 - 000064272 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswea4ec00cf7594b7b.tmp
2020-03-16 16:09 - 2020-03-16 16:08 - 000037864 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw53de405b55cc3c94.tmp
2020-03-16 16:07 - 2020-03-16 16:07 - 000000000 ____D C:\Program Files\AVAST Software
2020-03-15 21:53 - 2020-03-18 10:57 - 000000017 _____ C:\ProgramData\adaware-installer-reboot-required.tmp
2020-03-15 21:51 - 2020-03-15 21:51 - 000000000 ____D C:\Users\Chloé Gaulupeau\AppData\Local\AdAwareUpdater
2020-03-15 21:05 - 2020-03-15 21:05 - 000000000 ____D C:\Users\Chloé Gaulupeau\AppData\Local\AdAwareDesktop
2020-03-15 21:04 - 2020-03-15 21:04 - 000000000 ____D C:\Program Files\Common Files\adaware
cmd: md C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database
hosts:
emptytemp:
end::

• Réparer Mozilla Firefox (premier paragraphe)
• Réparer Google Chrome (seulement le premier paragraphe).