start::
CreateRestorePoint:
CloseProcesses:
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {26738CEF-63E6-44BF-82CE-F30F19524ADC} - System32\Tasks\BraveSoftwareUpdateTaskUserS-1-5-21-1828836394-3510836583-4148883019-1001UA => C:\Users\Justin\AppData\Local\BraveSoftware\Update\BraveUpdate.exe <==== ATTENTION
Task: {92E687A6-64BC-4745-A69E-7D7E54AF2CEF} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
Task: {ABA2E9DC-0658-47F7-A3FD-658785F44D7C} - System32\Tasks\App Explorer => C:\Users\Justin\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe [7287976 2018-10-20] (SweetLabs Inc. -> SweetLabs, Inc) <==== ATTENTION
Task: {C8F7F572-7E1F-47CD-ABE4-2F829328B7FE} - System32\Tasks\BraveSoftwareUpdateTaskUserS-1-5-21-1828836394-3510836583-4148883019-1001Core => C:\Users\Justin\AppData\Local\BraveSoftware\Update\BraveUpdate.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\{45EA33B4-CBC7-74C0-4E2B-026E7932C87C}.job => C:\Users\Justin\AppData\Local\45EA33~1\CAPAGU~1.EXE <==== ATTENTION
Task: C:\WINDOWS\Tasks\{692079BD-14B0-7657-ED02-7ADFC52BA2D2}.job => C:\Users\Justin\AppData\Local\692079~1\SYNCVE~1.EXE <==== ATTENTION
2019-04-26 20:38 - 2019-01-04 02:21 - 000003604 _____ C:\WINDOWS\System32\Tasks\BraveSoftwareUpdateTaskUserS-1-5-21-1828836394-3510836583-4148883019-1001UA
2019-04-26 20:38 - 2019-01-04 02:21 - 000003336 _____ C:\WINDOWS\System32\Tasks\BraveSoftwareUpdateTaskUserS-1-5-21-1828836394-3510836583-4148883019-1001Core
HKU\S-1-5-21-1828836394-3510836583-4148883019-1001\Software\Classes\regfile: regedit.exe "%1" <==== ATTENTION
C:\Users\Justin\AppData\Local\BraveSoftware\Update\BraveUpdate.exe
C:\Users\Justin\AppData\Local\45EA33~1\CAPAGU~1.EXE
C:\Users\Justin\AppData\Local\692079~1\SYNCVE~1.EXE
EmptyTemp:
end::