start::
closeprocesses:
createrestorepoint:
CustomCLSID: HKU\S-1-5-21-1788026646-3637739301-3623088312-1001_Classes\CLSID\{227C9E8F-71A1-4B23-9076-682A1A8EAAED}\localserver32 -> "c:\program files\macrium\common\reflectmonitor.exe" -ToastActivated => Pas de fichier
CustomCLSID: HKU\S-1-5-21-1788026646-3637739301-3623088312-1001_Classes\CLSID\{b3cbcea3-dc91-b564-6fc1-0008e589c47b}\localserver32 -> "D:\FICHIERS\ProtonVPN.exe" -ToastActivated => Pas de fichier
AV: Kaspersky (Disabled - Up to date) {4F76F112-43EB-40E8-11D8-F7BD1853EA23}
FW: Kaspersky (Disabled) {774D7037-0984-41B0-3A87-5E88E680AD58}
ContextMenuHandlers1: [ReflectShellExt] -> {DEBB9B79-B3DD-47F4-9E5C-EA6975BAB611} => D:\FICHIERS\Macrium\Reflect\RContextMenu.dll -> Pas de fichier
ContextMenuHandlers2: [ReflectShellExt] -> {DEBB9B79-B3DD-47F4-9E5C-EA6975BAB611} => D:\FICHIERS\Macrium\Reflect\RContextMenu.dll -> Pas de fichier
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre-10.0.1\bin\ssv.dll => Pas de fichier
MSCONFIG\Services: AdvancedSystemCareService15 => 2
MSCONFIG\Services: avast! Tools => 2
HKLM\...\StartupApproved\Run: => "Wondershare Helper Compact.exe"
HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe"
HKU\S-1-5-21-1788026646-3637739301-3623088312-1001\...\StartupApproved\Run: => "Advanced SystemCare"
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKU\S-1-5-19\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe /background /setautostart (Pas de fichier)
HKU\S-1-5-20\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe /background /setautostart (Pas de fichier)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
Startup: C:\Users\Camou Finfou\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Intelligent standby list cleaner ISLC.exe - Raccourci.lnk [2022-09-29]
ShortcutTarget: Intelligent standby list cleaner ISLC.exe - Raccourci.lnk -> C:\Users\Camou Finfou\Documents\.S E L F\ISLC v1.0.2.8\Intelligent standby list cleaner ISLC.exe (Pas de fichier)
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION
HKU\S-1-5-21-1788026646-3637739301-3623088312-1001\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION
Task: {0C2D8173-25D7-4C7B-8502-958D6429B0FF} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe (Pas de fichier)
Task: {3391ED98-9BD6-4446-AC26-8146B6406ACA} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval => C:\WINDOWS\system32\MusNotification.exe Display (Pas de fichier)
Task: {5B7297F6-593A-4DDF-AECE-39F5F33AF06B} - System32\Tasks\ISLC \ISLC => C:\Users\Camou Finfou\Documents\.S E L F\ISLC v1.0.2.8\Intelligent standby list cleaner ISLC.exe (Pas de fichier)
Task: {6B1F03D0-0853-4FE7-94A8-1C9F974C9AD5} - System32\Tasks\Driver Booster SkipUAC (Camou Finfou) => C:\Program Files (x86)\IObit\Driver Booster\9.0.0\DriverBooster.exe /skipuac (Pas de fichier)
Task: {6DF141D2-17A1-4721-82E4-D430C3879ECF} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-1788026646-3637739301-3623088312-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe /reporting (Pas de fichier)
Task: {C188ECB0-7490-4CF0-B0D0-ECE846B5E9CC} - System32\Tasks\Driver Booster Update => C:\Program Files (x86)\IObit\Driver Booster\9.0.0\AutoUpdate.exe /auto (Pas de fichier)
Task: {C1D065DC-5A72-4C51-A090-755F657C9C10} - System32\Tasks\S-1-5-21-1788026646-3637739301-3623088312-1001\DataSenseLiveTileTask => C:\WINDOWS\System32\DataUsageLiveTileTask.exe (Pas de fichier)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\WINDOWS\System32\MbaeParserTask.exe (Pas de fichier)
Task: {DEEEB032-937B-419B-9A65-5E179CB9DF75} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => C:\WINDOWS\system32\MusNotification.exe /RunOnBattery RebootDialog (Pas de fichier)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => C:\WINDOWS\system32\MusNotification.exe (Pas de fichier)
Task: {F3F52B7E-FCF2-40EE-8CCC-8A0B1650AF14} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => C:\WINDOWS\system32\MusNotification.exe /RunOnAC RebootDialog (Pas de fichier)
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
CHR Notifications: Default -> hxxps://www23.todhamilton.pro
CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]
CHR HKLM-x32\...\Chrome\Extension: [mfhcmdonhekjhfbjmeacdjbhlfgpjabp]
2022-11-24 19:49 - 2022-11-24 19:49 - 000002572 _____ C:\WINDOWS\system32\Tasks\Driver Booster Update
2022-11-24 19:49 - 2022-11-24 19:49 - 000002426 _____ C:\WINDOWS\system32\Tasks\Driver Booster SkipUAC (Camou Finfou)
C:\WINDOWS\SysWOW64\version_IObitDel.dll
cmd: netsh advfirewall reset
emptytemp:
end::