start::
closeprocesses:
createrestorepoint:
virustotal: C:\Users\lolip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kasocametoo.exe
C:\Users\lolip\AppData\Roaming\Entertainment
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RocketDock.lnk [2022-10-01]
ShortcutTarget: RocketDock.lnk -> C:\Program Files (x86)\RocketDock\RocketDock.exe (Pas de fichier)
Task: {1a20ddc8-ee33-4316-b8b1-681769d5c69d} - pas de chemin du fichier
Task: {45A7097B-8F6E-4649-8E36-207E0D91F1D6} - System32\Tasks\GoogleUpdateTaskMachineCore{26DE1487-3E3D-4863-883E-21D5B931C4C7} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c (Pas de fichier)
Task: {4E678D26-DD2B-4D22-926B-4BD2517A2F10} - System32\Tasks\Firefox Default Browser Agent 7A8D1BC7763BA766 => C:\Users\lolip\AppData\Roaming\atsgrvv [49584 2022-10-01] (Microsoft Corporation -> Microsoft Corporation)
C:\Users\lolip\AppData\Roaming\atsgrvv
Task: {8B0CC08F-1EBC-4C1C-A963-BB12C7013549} - System32\Tasks\GoogleUpdateTaskMachineUA{000EE9D5-94DF-48A7-AA90-B8682097F35E} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler (Pas de fichier)
Task: {916708d8-7307-466d-a683-1bcf7d9fdd35} - pas de chemin du fichier
Task: {c234c382-5ee0-4c90-90d5-8b9ebab978a4} - pas de chemin du fichier
Task: {CD3D4A21-9F24-4978-8BD7-987FF1BF9B7F} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [908328 2022-12-07] (Nvidia Corporation -> NVIDIA Corporation)
Task: {d0239bd3-332f-4d46-b1f5-e2e19f42c48e} - pas de chemin du fichier
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => C:\Windows\system32\MusNotification.exe (Pas de fichier)
Task: {ec26ae7b-d33c-4838-99db-6fb9f40fe43e} - pas de chemin du fichier
Task: {F00416B3-338F-4222-9C6C-35585AB1F357} - System32\Tasks\Opera scheduled Autoupdate 1664742237 => C:\Users\lolip\AppData\Local\Programs\Opera\launcher.exe --scheduledautoupdate $(Arg0) (Pas de fichier)
Task: {f48c1776-0e2c-4abc-937e-fab724c23505} - pas de chemin du fichier
CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]
S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]
2023-02-10 21:26 - 2023-02-10 21:26 - 000261120 _____ (Microsoft) C:\Users\lolip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kasocametoo.exe
2022-10-01 18:33 - 2022-10-01 18:33 - 000049584 ___SH (Microsoft Corporation) C:\Users\lolip\AppData\Roaming\atsgrvv
cmd: netsh advfirewall reset
emptytemp:
end::