start::
closeprocesses:
createrestorepoint:
virustotal: C:\Windows\System32\MicTray64.exe
CustomCLSID: HKU\S-1-5-21-752917551-609229451-930518509-1002_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32 -> C:\Users\QAdrill-CS\AppData\Local\GoToMeeting\17359\G2MOutlookAddin64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-752917551-609229451-930518509-1002_Classes\CLSID\{CB965DF1-B8EA-49C7-BDAD-5457FDC1BF92}\InprocServer32 -> C:\Users\QAdrill-CS\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20244.4\x64\Microsoft.Teams.AddinLoader.dll => Pas de fichier
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier
FirewallRules: [UDP Query User{46C3AFC5-11CE-4B3B-AA59-8DC30AC7C41E}C:\users\qadrill-cs\axelor\axelor-erp\opt\jdk\jre\bin\java.exe] => (Allow) C:\users\qadrill-cs\axelor\axelor-erp\opt\jdk\jre\bin\java.exe => Pas de fichier
FirewallRules: [TCP Query User{3780D034-FE93-46B8-9B44-A03CDEF2EFD2}C:\users\qadrill-cs\axelor\axelor-erp\opt\jdk\jre\bin\java.exe] => (Allow) C:\users\qadrill-cs\axelor\axelor-erp\opt\jdk\jre\bin\java.exe => Pas de fichier
FirewallRules: [UDP Query User{E302EE95-61F0-4E3F-83FD-180C93E95374}C:\users\qadrill-cs\axelor\axelor-erp\opt\jdk\jre\bin\javaw.exe] => (Allow) C:\users\qadrill-cs\axelor\axelor-erp\opt\jdk\jre\bin\javaw.exe => Pas de fichier
FirewallRules: [TCP Query User{4710CE3B-AC57-493C-8317-7DBBDAAEECF7}C:\users\qadrill-cs\axelor\axelor-erp\opt\jdk\jre\bin\javaw.exe] => (Allow) C:\users\qadrill-cs\axelor\axelor-erp\opt\jdk\jre\bin\javaw.exe => Pas de fichier
FirewallRules: [UDP Query User{A6859889-63CC-4487-ACCA-4DF8CD6B8F88}C:\program files (x86)\axelor\axelor-erp\opt\jdk\jre\bin\javaw.exe] => (Allow) C:\program files (x86)\axelor\axelor-erp\opt\jdk\jre\bin\javaw.exe => Pas de fichier
FirewallRules: [TCP Query User{C5175786-6B73-4A44-9BFB-E423B20F4B9B}C:\program files (x86)\axelor\axelor-erp\opt\jdk\jre\bin\javaw.exe] => (Allow) C:\program files (x86)\axelor\axelor-erp\opt\jdk\jre\bin\javaw.exe => Pas de fichier
FirewallRules: [TCP Query User{D9183BB8-60B4-46DA-8A22-530B65A94A1C}C:\users\qadrill-cs\downloads\anydesk.exe] => (Allow) C:\users\qadrill-cs\downloads\anydesk.exe => Pas de fichier
FirewallRules: [UDP Query User{2F5403C1-7137-42D0-8663-B5F1A8461819}C:\users\qadrill-cs\downloads\anydesk.exe] => (Allow) C:\users\qadrill-cs\downloads\anydesk.exe => Pas de fichier
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\HP\HP ProtectTools Security Manager\Bin\DPAgent.exe, <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {0CBB7B5A-448A-4B38-9DFC-0158A3DDCBA1} - System32\Tasks\HP\HP Hotkey Support\Start QLBController Process => C:\Program Files (x86)\HP\HP Hotkey Support\QLBController.exe (Pas de fichier)
Task: {64FC2835-7A15-4084-92FA-284C44B2380F} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => C:\WINDOWS\system32\MusNotification.exe /RunOnBattery ReadyToReboot (Pas de fichier)
Task: {6ECC17BA-2F21-4D1D-A937-AF5B7E29ED7A} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => C:\WINDOWS\system32\MusNotification.exe ReadyToReboot (Pas de fichier)
Task: {9D5950FF-488B-4F22-BDE5-D0A5D835443D} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_Broker_Display => C:\WINDOWS\system32\MusNotification.exe Display (Pas de fichier)
Task: {A7DFF0FE-0727-482D-A590-9A7CF6E8967E} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_LogonUpdateResults => C:\WINDOWS\system32\MusNotification.exe LogonUpdateResults (Pas de fichier)
Task: {C1E45ED8-D586-4E2C-9971-9937C9EAEFE8} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => C:\WINDOWS\system32\MusNotification.exe /RunOnAC ReadyToReboot (Pas de fichier)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\WINDOWS\System32\MbaeParserTask.exe (Pas de fichier)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => C:\WINDOWS\system32\MusNotification.exe (Pas de fichier)
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
2023-04-23 16:10 - 2023-04-23 16:11 - 000000000 ____D C:\Users\QAdrill-CS\AppData\Roaming\AnyDesk
emptytemp:
end::