start::
systemrestore: on
closeprocesses:
createrestorepoint:
AlternateDataStreams: C:\WINDOWS\system32\7B296FC0-376B-497d-B013-58F4D9633A22-5P-1.B5841A4C-A289-439d-8115-50AB69CD450B:2A0D8CE55C [4298]
AlternateDataStreams: C:\ProgramData\goyslgxe.nnn:7297ACA992 [4298]
AlternateDataStreams: C:\ProgramData\juutbubq.wrj:C3E58011A3 [4298]
AlternateDataStreams: C:\ProgramData\mntemp:8EAD8B3507 [4298]
AlternateDataStreams: C:\ProgramData\WnHqYU0nH4:D39ABDACE2 [4298]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini:B1DA6C571C [4298]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BakkesMod.lnk:14E057C8D9 [4298]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini:41964AA945 [4298]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk:C8B6D970BF [4298]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Driver & Support Assistant.lnk:CE654E1443 [4298]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk:E77773B271 [4298]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++.lnk:159ADC9AA1 [4298]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Health Check.lnk:F20EF51E1F [4298]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Streamlabs OBS.lnk:5BF9B01493 [4298]
FirewallRules: [TCP Query User{FE9C05E7-930B-4B2D-925F-C309094F4507}D:\rocketleague\binaries\win64\rocketleague.exe] => (Allow) D:\rocketleague\binaries\win64\rocketleague.exe => Pas de fichier
FirewallRules: [UDP Query User{07C4095D-35CC-4C4B-974D-22CAA6CAC218}D:\rocketleague\binaries\win64\rocketleague.exe] => (Allow) D:\rocketleague\binaries\win64\rocketleague.exe => Pas de fichier
FirewallRules: [{6EBB22E7-B09E-42F9-9FA9-245735061DBD}] => (Block) D:\rocketleague\binaries\win64\rocketleague.exe => Pas de fichier
FirewallRules: [{E21C860F-F266-43E9-8BC0-3218D8A2C523}] => (Block) D:\rocketleague\binaries\win64\rocketleague.exe => Pas de fichier
FirewallRules: [TCP Query User{8149648F-58E2-48AF-8F72-143F385ABDAF}C:\users\lilian\appdata\local\medal\app-4.2054.0\medal.exe] => (Allow) C:\users\lilian\appdata\local\medal\app-4.2054.0\medal.exe => Pas de fichier
FirewallRules: [UDP Query User{BCD05806-CACC-4DAB-8902-27584757727D}C:\users\lilian\appdata\local\medal\app-4.2054.0\medal.exe] => (Allow) C:\users\lilian\appdata\local\medal\app-4.2054.0\medal.exe => Pas de fichier
FirewallRules: [{1F819D41-FF13-4500-BDCD-DBF098E487B6}] => (Block) C:\users\lilian\appdata\local\medal\app-4.2054.0\medal.exe => Pas de fichier
FirewallRules: [{3140B1A4-6327-46E9-B7C7-F8997E644ABA}] => (Block) C:\users\lilian\appdata\local\medal\app-4.2054.0\medal.exe => Pas de fichier
C:\Program Files\qemu
C:\Users\Lilian\Downloads\LUXONIX.Purity.v1.2.5.WIN.OSX.Incl.Keygen-AiR
HKU\S-1-5-21-2611484917-3855663659-1011142020-1001\...\Run: [Medal] => "C:\Users\Lilian\AppData\Local\Medal\update.exe" --processStart "Medal.exe" (Pas de fichier)
Task: {7138E53F-C410-48D6-8AF2-C7B764147A9E} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe --automatic (Pas de fichier)
S2 IAStorDataMgrSvc; "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe" [X]
S2 WMIRegistrationService; %SystemRoot%\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_cad1db73e8c782a6\WMIRegistrationService.exe [X]
S3 rsDwf; \SystemRoot\system32\DRIVERS\rsDwf.sys [X]
2023-07-06 17:34 - 2023-07-06 17:34 - 006893544 _____ (EnigmaSoft Limited) C:\Users\Lilian\Downloads\SpyHunter-Installer.exe
emptytemp:
end::