start::
closeprocesses:
createrestorepoint:
HKLM\...\Policies\Explorer: [HideSCAHealth] 1
Task: {10284517-A77D-479C-9429-89421294E188} - System32\Tasks\Microsoft\Windows\Application Experience\StartupCheckLibrary => rundll32.exe StartupCheckLibrary.dll,DllMainRunLibrary <==== ATTENTION
Task: {25F22825-64B8-4EDD-88AA-249D1471AEE4} - System32\Tasks\Microsoft\Windows\Windows Error Reporting\winrmsrv => winrmsrv.exe <==== ATTENTION
C:\WINDOWS\system32\winrmsrv.exe
Task: {4A824824-ADA4-4776-8A70-5F89303B5F67} - System32\Tasks\Microsoft\Windows\Wininet\Winlogui => winlogui.exe <==== ATTENTION
C:\WINDOWS\system32\winlogui.exe
Task: {CA210CBA-5914-4621-AFB8-D287651CF660} - System32\Tasks\Microsoft\Windows\WDI\SrvHost => rundll32.exe winscomrssrv.dll,SrvMainHost <==== ATTENTION
Tcpip\..\Interfaces\{ad8f990e-37e2-4b5b-8178-1800ba0f2ac9}: [DhcpNameServer] 10.66.200.1
Edge Extension: (McAfee® WebAdvisor) - C:\Users\HugoP\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\fdhgeoginicibhagdmblfikbgbkahibd [2020-11-24]
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi => non trouvé(e)
FF HKLM\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSKHKLM => non trouvé(e)
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi => non trouvé(e)
FF Plugin: @mcafee.com/MSC,version=10 -> C:\Program Files\McAfee\MSC\npMcSnFFPl64.dll [Pas de fichier]
CHR Notifications: Default -> hxxps://luisaviaroma-by.accengage.net
CHR StartupUrls: Default -> "hxxp://www.omniboxes.com/?type=hp&ts=1431631137&z=dd6de2bcf4a71f70d1f44fcg7zdc2g1q7cagagfc1m&from=tti&uid=ST1000LM024XHN-M101MBB_S2Y9J9ED304315"
C:\Users\HugoP\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
S2 BBDemon; "D:\Logiciel\Catia\win_b64\code\bin\CATSysDemon.exe" -service [X]
BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll => Pas de fichier
C:\Program Files\McAfee\WebAdvisor
BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll => Pas de fichier
IE trusted site: HKU\S-1-5-21-3330435862-767665673-456570770-1001\...\sharepoint.com -> hxxps://estaca-files.sharepoint.com
FirewallRules: [TCP Query User{3FD4C19A-063B-4444-AF57-1823BC83750B}D:\logiciel\catia\win_b64\code\bin\orbixd.exe] => (Allow) D:\logiciel\catia\win_b64\code\bin\orbixd.exe => Pas de fichier
FirewallRules: [UDP Query User{5E336E66-8991-409B-86D7-F9F1727385F0}D:\logiciel\catia\win_b64\code\bin\orbixd.exe] => (Allow) D:\logiciel\catia\win_b64\code\bin\orbixd.exe => Pas de fichier
FirewallRules: [TCP Query User{CE6265D4-5BBC-4286-A773-99F3DEE33090}D:\logiciel\catia\win_b64\code\bin\cnext.exe] => (Allow) D:\logiciel\catia\win_b64\code\bin\cnext.exe => Pas de fichier
FirewallRules: [UDP Query User{3F6872BD-AE84-4ADD-9682-EAB41B38FDE4}D:\logiciel\catia\win_b64\code\bin\cnext.exe] => (Allow) D:\logiciel\catia\win_b64\code\bin\cnext.exe => Pas de fichier
FirewallRules: [{B5B490F6-6841-4E0B-AF51-E5467A931D0C}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe => Pas de fichier
FirewallRules: [{589D18B7-EE6B-4B5D-9779-BBE0908546B7}] => (Allow) C:\Program Files (x86)\Common Files\Mcafee\MMSSHost\MMSSHost.exe (McAfee, LLC -> McAfee, LLC)
FirewallRules: [{868EC25F-1CAB-4BAD-9625-468EE8E9F1E0}] => (Allow) C:\Program Files\Common Files\McAfee\MMSSHost\MMSSHost.exe => Pas de fichier
FirewallRules: [{1F11D550-3914-401C-B4CA-67399F5D2174}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe => Pas de fichier
emptytemp:
end::