start::
closeprocesses:
createrestorepoint:
virustotal: C:\Program Files (x86)\Google\GoogleUpdater\124.0.6315.0\updater.exe
AV: Norton Security (Enabled - Up to date) {1122B19A-E671-38EC-8EAC-87048FD4528D}
AV: Norton Security (Enabled - Up to date) {30744133-1E94-7B35-F4A3-82A5AEF1CBAA}
FW: Norton Security (Enabled) {084FC016-54FB-7A6D-DFFC-2B9050228CD1}
FW: Norton Security (Enabled) {291930BF-AC1E-39B4-A5F3-2E31710715F6}
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => -> Pas de fichier
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-3267126900-3040596677-2520193458-1001\...\Run: [EPSDNMON] => "" (Pas de fichier)
HKU\S-1-5-21-3267126900-3040596677-2520193458-1001\...\Run: [AMDNoiseSuppression] => "C:\WINDOWS\system32\AMD\ANR\AMDNoiseSuppression.exe" (Pas de fichier)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION
Task: {FBB3FACC-FEB1-4D82-AB8F-92A8F3ECBABB} - System32\Tasks\AdobeAAMUpdater-1.0-DESKTOP-KA9BI5H-klader jérémy => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe -mode=scheduled (Pas de fichier)
Task: {CAD1EB93-DA18-4C65-AC71-5EA1377F55C3} - System32\Tasks\ArtificiusUpdater => C:\Program Files (x86)\Artificius Browser Solutions\Artificius\ArtificiusUpdater.exe (Pas de fichier)
Task: {6ACF634B-F25C-458A-AED3-B56737C99AB0} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(1): schtasks.exe -> /Change /TN "\AdobeAAMUpdater-1.0-DESKTOP-KA9BI5H-klader jérémy" /ENABLE
Task: {6ACF634B-F25C-458A-AED3-B56737C99AB0} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(10): schtasks.exe -> /Change /TN "\MicrosoftEdgeUpdateTaskMachineCore" /ENABLE
Task: {6ACF634B-F25C-458A-AED3-B56737C99AB0} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(11): schtasks.exe -> /Change /TN "\MicrosoftEdgeUpdateTaskMachineCore1d71900951f8a94" /ENABLE
Task: {6ACF634B-F25C-458A-AED3-B56737C99AB0} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(12): schtasks.exe -> /Change /TN "\MicrosoftEdgeUpdateTaskMachineUA" /ENABLE
Task: {6ACF634B-F25C-458A-AED3-B56737C99AB0} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(13): schtasks.exe -> /Change /TN "\MSI Task Host - Detect_Monitor" /ENABLE
Task: {6ACF634B-F25C-458A-AED3-B56737C99AB0} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(14): schtasks.exe -> /Change /TN "\MSI Task Host - DisplayID" /ENABLE
Task: {6ACF634B-F25C-458A-AED3-B56737C99AB0} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(15): schtasks.exe -> /Change /TN "\MSI Task Host - LEDKeeper2_Host" /ENABLE
Task: {6ACF634B-F25C-458A-AED3-B56737C99AB0} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(16): schtasks.exe -> /Change /TN "\MSI Task Host - MSI.True Color" /ENABLE
Task: {6ACF634B-F25C-458A-AED3-B56737C99AB0} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(17): schtasks.exe -> /Change /TN "\MSISW_Host" /ENABLE
Task: {6ACF634B-F25C-458A-AED3-B56737C99AB0} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(18): schtasks.exe -> /Change /TN "\OneDrive Standalone Update Task-S-1-5-21-3267126900-3040596677-2520193458-1001" /ENABLE
Task: {6ACF634B-F25C-458A-AED3-B56737C99AB0} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(19): schtasks.exe -> /Change /TN "\Overwolf Updater Task" /ENABLE
Task: {6ACF634B-F25C-458A-AED3-B56737C99AB0} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(2): schtasks.exe -> /Change /TN "\AdobeGCInvoker-1.0" /ENABLE
Task: {6ACF634B-F25C-458A-AED3-B56737C99AB0} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(20): schtasks.exe -> /Change /TN "\SIV" /ENABLE
Task: {6ACF634B-F25C-458A-AED3-B56737C99AB0} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(21): schtasks.exe -> /Change /TN "\SIV-VGA" /ENABLE
Task: {6ACF634B-F25C-458A-AED3-B56737C99AB0} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(22): schtasks.exe -> /Change /TN "\StartCN" /ENABLE
Task: {6ACF634B-F25C-458A-AED3-B56737C99AB0} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(23): schtasks.exe -> /Change /TN "\StartDVR" /ENABLE
Task: {6ACF634B-F25C-458A-AED3-B56737C99AB0} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(24): schtasks.exe -> /Change /TN "\AVAST Software\Gaming mode Task Scheduler recovery" /DISABLE
Task: {6ACF634B-F25C-458A-AED3-B56737C99AB0} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(3): schtasks.exe -> /Change /TN "\AMDInstallLauncher" /ENABLE
Task: {6ACF634B-F25C-458A-AED3-B56737C99AB0} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(4): schtasks.exe -> /Change /TN "\AMDLinkUpdate" /ENABLE
Task: {6ACF634B-F25C-458A-AED3-B56737C99AB0} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(5): schtasks.exe -> /Change /TN "\EasyTune" /ENABLE
Task: {6ACF634B-F25C-458A-AED3-B56737C99AB0} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(6): schtasks.exe -> /Change /TN "\EasyTune 1" /ENABLE
Task: {6ACF634B-F25C-458A-AED3-B56737C99AB0} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(7): schtasks.exe -> /Change /TN "\GoogleUpdateTaskMachineCore" /ENABLE
Task: {6ACF634B-F25C-458A-AED3-B56737C99AB0} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(8): schtasks.exe -> /Change /TN "\GoogleUpdateTaskMachineUA" /ENABLE
Task: {6ACF634B-F25C-458A-AED3-B56737C99AB0} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(9): schtasks.exe -> /Change /TN "\GraphicsCardEngine" /ENABLE
Task: {0D99C521-EC40-4C4F-B06E-3464CD25DBD4} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem124.0.6315.0{6012971E-8719-4AD6-9AD4-7D67B74D1B1F} => C:\Program Files (x86)\Google\GoogleUpdater\124.0.6315.0\updater.exe [4698400 2024-02-22] (Google LLC -> Google LLC) <==== ATTENTION
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (Pas de fichier)
Task: {D99A4F43-5046-46A5-B6C4-D711E58FAD4B} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval => %systemroot%\system32\MusNotification.exe Display (Pas de fichier)
Task: {EAF3F0D6-E12D-4EF2-885F-2F0CF5E63570} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => %systemroot%\system32\MusNotification.exe RebootDialog (Pas de fichier)
Task: {E5557940-67D5-4576-9EC2-FDB7FF22D80E} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC RebootDialog (Pas de fichier)
Task: {96C8DB0C-1B04-44C6-A7BC-E9C20B7C7A2F} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery RebootDialog (Pas de fichier)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (Pas de fichier)
Task: {0B2018B9-39FE-4858-A033-A651CE1D4B4C} - System32\Tasks\Opera scheduled Autoupdate 1692875507 => C:\Users\klader jérémy\AppData\Local\Programs\Opera\launcher.exe --scheduledautoupdate $(Arg0) (Pas de fichier)
Task: {601998E1-A648-4959-8421-235EC1A440E0} - System32\Tasks\pdfforge GmbH\PDF Architect 8\App Notification => C:\Program Files\PDF Architect 8\architect-launcher.exe --check-notifications (Pas de fichier)
Task: {7D014572-F231-4835-A732-71BA055B0EF4} - System32\Tasks\pdfforge GmbH\Update => C:\Program Files\PDF Architect 8\architect.exe --update --mode check auto notify (Pas de fichier)
S2 OCButtonService; "C:\Program Files (x86)\Gigabyte\EasyTuneEngineService\OcButtonService.exe" [X]
S1 MSIO; \??\C:\WINDOWS\system32\drivers\MsIo64.sys [X]
S3 NTIOLib_CC_Clock; \??\C:\Program Files (x86)\MSI\One Dragon Center\Lib\NTIOLib_X64.sys [X]
S1 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X]
2024-03-03 17:26 - 2024-03-03 17:26 - 000003302 _____ C:\WINDOWS\system32\Tasks\StartCNBM
2024-03-03 17:26 - 2024-03-03 17:26 - 000003208 _____ C:\WINDOWS\system32\Tasks\StartAUEP
cmd: netsh advfirewall reset
emptytemp:
end::