start::
closeprocesses:
createrestorepoint:
virustotal: C:\WINDOWS\system32\SecureBootEncodeUEFI.exe
virustotal: C:\ProgramData\46646977128334488080.exe
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => -> Pas de fichier
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {8569844C-5245-4C5E-BF63-9EAA99645E2F} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => C:\WINDOWS\system32\MusNotification.exe /RunOnAC ReadyToReboot (Pas de fichier)
Task: {8D53D7FC-1A19-4268-981C-A100BC5DB3CD} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => C:\WINDOWS\system32\MusNotification.exe /RunOnBattery ReadyToReboot (Pas de fichier)
Task: {92E853EE-D19D-4644-B1DC-1F04F8EC24BE} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_LogonUpdateResults => C:\WINDOWS\system32\MusNotification.exe LogonUpdateResults (Pas de fichier)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\WINDOWS\System32\MbaeParserTask.exe (Pas de fichier)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => C:\WINDOWS\system32\MusNotification.exe (Pas de fichier)
2022-11-27 10:18 - 2022-11-27 10:22 - 000000000 ____D C:\Users\Mickaël\AppData\Roaming\IObit
2022-11-27 10:18 - 2022-11-27 10:22 - 000000000 ____D C:\Program Files (x86)\IObit
2022-11-27 10:18 - 2022-11-27 10:20 - 000000000 ____D C:\ProgramData\IObit
2022-11-27 10:18 - 2022-11-27 10:19 - 000000000 ____D C:\Users\Mickaël\AppData\LocalLow\IObit
2022-11-27 10:18 - 2022-11-27 10:18 - 028776800 _____ (IObit ) C:\Users\Mickaël\Downloads\driver_booster_setup.exe
2022-11-23 10:09 - 2022-11-23 10:09 - 000000000 _____ () C:\ProgramData\46646977128334488080.exe
FirewallRules: [{41B70B8E-4827-46B4-B276-E6F39BA29D3E}] => (Allow) C:\Program Files (x86)\Tenorshare\Tenorshare iAnyGo\Update.exe => Pas de fichier
emptytemp:
end::