start::
closeprocesses:
createrestorepoint:
HKU\S-1-5-21-965243653-3650824245-4198753901-1001\...\Run: [AdobeBridge] => [X]
virustotal: C:\Users\nadeg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PowerReg Scheduler.exe
Edge HKLM\...\Edge\Extension: [bobgdmjpamhpbiobbklajbdkgmmmbcja]
Edge HKU\S-1-5-21-965243653-3650824245-4198753901-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [bobgdmjpamhpbiobbklajbdkgmmmbcja]
Edge HKLM-x32\...\Edge\Extension: [bobgdmjpamhpbiobbklajbdkgmmmbcja]
FF user.js: detected! => C:\Users\nadeg\AppData\Roaming\Mozilla\Firefox\Profiles\ijt4znxf.default\user.js [2023-05-04]
FF user.js: detected! => C:\Users\nadeg\AppData\Roaming\Mozilla\Firefox\Profiles\cn1jexct.default-release\user.js [2023-05-04]
CHR HKLM\...\Chrome\Extension: [lgbjhdkjmpgjgcbcdlhkokkckpjmedgc]
CHR HKU\S-1-5-21-965243653-3650824245-4198753901-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lgbjhdkjmpgjgcbcdlhkokkckpjmedgc]
CHR HKLM-x32\...\Chrome\Extension: [lgbjhdkjmpgjgcbcdlhkokkckpjmedgc]
CustomCLSID: HKU\S-1-5-21-965243653-3650824245-4198753901-1001_Classes\CLSID\{202A3C4A-4F48-3BBB-1140-61A09D6D04BC}\InprocServer32 -> pas de chemin du fichier
SearchScopes: HKU\S-1-5-21-965243653-3650824245-4198753901-1001 -> DefaultScope {52219D69-1159-4859-B649-22C1521184B1} URL =
SearchScopes: HKU\S-1-5-21-965243653-3650824245-4198753901-1001 -> {52219D69-1159-4859-B649-22C1521184B1} URL =
FirewallRules: [{9368C08B-8B69-4D6D-A67C-CA1E9944C39E}] => (Allow) C:\Program Files (x86)\Common Files\Mcafee\MMSSHost\MMSSHost.exe => Pas de fichier
C:\Program Files (x86)\Common Files\Mcafee
FirewallRules: [{6BF6A372-E55F-4C8A-A9C5-CAE9E485B013}] => (Allow) C:\Program Files\Common Files\McAfee\MMSSHost\MMSSHost.exe => Pas de fichier
C:\Program Files\Common Files\McAfee
emptytemp:
end::