start::
closeprocesses:
createrestorepoint:
HKU\S-1-5-21-612170211-3621834227-38230802-1001\...\MountPoints2: {24422058-6c7e-11ee-bb1b-dc85deec21dc} - "C:\WINDOWS\system32\RunDLL32.EXE" Shell32.DLL,ShellExec_RunDLL D:\autorun.exe /auto
HKU\S-1-5-21-612170211-3621834227-38230802-1001\...\MountPoints2: {2a5ead99-63e0-11eb-9976-1c872ce12970} - "C:\WINDOWS\system32\RunDLL32.EXE" Shell32.DLL,ShellExec_RunDLL D:\autorun.exe /auto
HKU\S-1-5-21-612170211-3621834227-38230802-1001\...\MountPoints2: {592b1031-222f-11ee-bb10-1c872ce12970} - "C:\WINDOWS\system32\RunDLL32.EXE" Shell32.DLL,ShellExec_RunDLL D:\autorun.exe /auto
HKU\S-1-5-21-612170211-3621834227-38230802-1001\...\MountPoints2: {7fe099c4-b867-11ed-bb07-1c872ce12970} - "C:\WINDOWS\system32\RunDLL32.EXE" Shell32.DLL,ShellExec_RunDLL D:\autorun.exe /auto
HKU\S-1-5-21-612170211-3621834227-38230802-1001\...\MountPoints2: {b73553f3-9358-11eb-ba7c-dc85deec21dc} - "D:\Setup.exe"
HKU\S-1-5-21-612170211-3621834227-38230802-1001\...\MountPoints2: {dc29dbe3-057c-11ee-bb0d-dc85deec21dc} - "C:\WINDOWS\system32\RunDLL32.EXE" Shell32.DLL,ShellExec_RunDLL D:\autorun.exe /auto
virustotal: C:\Program Files (x86)\Google\GoogleUpdater\124.0.6315.0\updater.exe
C:\Program Files (x86)\Google\GoogleUpdater\124.0.6315.0\updater.exe
S3 wacommousefilter; \SystemRoot\System32\drivers\wacommousefilter.sys [X]
S3 wacomvhid; \SystemRoot\System32\drivers\wacomvhid.sys [X]
2024-02-23 09:57 - 2024-02-24 20:47 - 000000000 ____D C:\ProgramData\Avast Software
C:\WINDOWS\system32\default_error_stack*.txt
CustomCLSID: HKU\S-1-5-21-612170211-3621834227-38230802-1001_Classes\CLSID\{233525e0-5434-46ef-b464-fd7e45e2e145}\localserver32 -> "C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe" -ToastActivated => Pas de fichier
C:\Program Files (x86)\Intel\Driver and Support Assistant
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier
AlternateDataStreams: C:\ProgramData\DP45977C.lfl:677104FCAA [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini:B1DA6C571C [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk:980850BA8A [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Immersive Control Panel.lnk:DC8F23BC3A [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Health Check.lnk:F20EF51E1F [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shotcut.lnk:6762EAF92B [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SumatraPDF.lnk:5D587C99F4 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unity Hub.lnk:830092544A [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2019.lnk:7A8AE192A6 [3442]
FirewallRules: [{D0914510-3059-4950-81E1-9DCFAD11ABF5}] => (Allow) C:\Program Files\DriversCloud.com\DriversCloud.exe => Pas de fichier
FirewallRules: [{3C73BFA1-44F3-4D81-9110-CAC2C5E91292}] => (Allow) C:\Program Files\DriversCloud.com\DriversCloud.exe => Pas de fichier
FirewallRules: [TCP Query User{EF89C2C9-D5C8-43DE-AFBD-005C32774652}C:\users\melred\appdata\local\discord\app-1.0.9004\discord.exe] => (Allow) C:\users\melred\appdata\local\discord\app-1.0.9004\discord.exe => Pas de fichier
FirewallRules: [UDP Query User{CE8237B3-9C31-430E-ABCC-6B5C3D60185E}C:\users\melred\appdata\local\discord\app-1.0.9004\discord.exe] => (Allow) C:\users\melred\appdata\local\discord\app-1.0.9004\discord.exe => Pas de fichier
FirewallRules: [{19CBBF5E-AEC1-4A4F-AF72-CB23F5668D32}] => (Allow) LPort=8501
FirewallRules: [{AB11B554-FEAD-4108-A64B-AEB3BF48C4C9}] => (Allow) LPort=8501
FirewallRules: [TCP Query User{5C3C3113-57FB-43FF-B3FC-95676D798F09}C:\program files (x86)\overwatch\_retail_\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\_retail_\overwatch.exe => Pas de fichier
FirewallRules: [UDP Query User{BE07AE29-F995-4697-A031-6D72922B6FB8}C:\program files (x86)\overwatch\_retail_\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\_retail_\overwatch.exe => Pas de fichier
FirewallRules: [{D68C6724-637F-472C-BF8D-94D7316F6F06}] => (Allow) C:\Users\Melred\AppData\Roaming\Zoom\bin\airhost.exe => Pas de fichier
FirewallRules: [{60AC02C1-1A91-4713-82CA-3F36BC489514}] => (Allow) C:\Users\Melred\AppData\Roaming\Zoom\bin\airhost.exe => Pas de fichier
FirewallRules: [TCP Query User{E1F1F90B-7552-43E8-8707-30E23438CB70}C:\program files (x86)\netgear genie\bin\netgeargenie.exe] => (Block) C:\program files (x86)\netgear genie\bin\netgeargenie.exe => Pas de fichier
FirewallRules: [UDP Query User{FDD31460-C3D0-498B-BD2F-8443A0433008}C:\program files (x86)\netgear genie\bin\netgeargenie.exe] => (Block) C:\program files (x86)\netgear genie\bin\netgeargenie.exe => Pas de fichier
cmd: sfc /scannow
emptytemp:
end::