start::
CreateRestorePoint:
CloseProcesses:
RemoveProxy:
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction
HKU\S-1-5-21-1986664393-2956018779-2686680071-1001\...\MountPoints2: {31f7374d-f00b-11ec-8d37-04421a0b1912} - "M:\mSetup.exe"
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
Task: {8592D8D7-EB56-47D4-A66E-88083BC2C2DA} - System32\Tasks\ASUS\P508PowerAgent_sdk => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ShareFromArmouryIII\Mouse\ROG STRIX CARRY\P508PowerAgent.exe (Pas de fichier)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (Pas de fichier)
Task: {2385D650-B1F8-4B49-838F-96FE97754945} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC RebootDialog (Pas de fichier)
Task: {7FF824CB-605A-4553-8A00-8545FD028668} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery RebootDialog (Pas de fichier)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (Pas de fichier)
S1 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X]
CustomCLSID: HKU\S-1-5-21-1986664393-2956018779-2686680071-1001_Classes\CLSID\{1F9E0710-2073-435F-9C1B-F29946205947}\InprocServer32 -> C:\Users\Mathieu\AppData\Local\Google\Update\1.3.36.152\psuser_64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-1986664393-2956018779-2686680071-1001_Classes\CLSID\{2919A592-BF5E-4AF5-A658-84454D70841E}\InprocServer32 -> C:\Users\Mathieu\AppData\Local\Google\Update\1.3.36.202\psuser_64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-1986664393-2956018779-2686680071-1001_Classes\CLSID\{5D44759C-CF3F-433D-9EA0-267E45577C77}\InprocServer32 -> C:\Users\Mathieu\AppData\Local\Google\Update\1.3.36.212\psuser_64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-1986664393-2956018779-2686680071-1001_Classes\CLSID\{69545769-8D02-4B07-A481-AD374CD8D5D1}\InprocServer32 -> C:\Users\Mathieu\AppData\Local\Google\Update\1.3.36.132\psuser_64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-1986664393-2956018779-2686680071-1001_Classes\CLSID\{8D422533-936A-4A82-B15C-BD5319AB0026}\InprocServer32 -> C:\Users\Mathieu\AppData\Local\Google\Update\1.3.36.332\psuser_64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-1986664393-2956018779-2686680071-1001_Classes\CLSID\{AE9899FA-E21F-4D91-BD1F-59BC10E56CA1}\InprocServer32 -> C:\Users\Mathieu\AppData\Local\Google\Update\1.3.36.292\psuser_64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-1986664393-2956018779-2686680071-1001_Classes\CLSID\{B9C751AA-D9CF-4E09-A270-E5BBD2194F83}\InprocServer32 -> C:\Users\Mathieu\AppData\Local\Google\Update\1.3.36.352\psuser_64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-1986664393-2956018779-2686680071-1001_Classes\CLSID\{CA07EE63-A212-4373-AE82-FBF92FCA8DCC}\InprocServer32 -> C:\Users\Mathieu\AppData\Local\Google\Update\1.3.36.242\psuser_64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-1986664393-2956018779-2686680071-1001_Classes\CLSID\{DA06AAE8-5748-4509-850F-17AA522F8372}\InprocServer32 -> C:\Users\Mathieu\AppData\Local\Google\Update\1.3.36.272\psuser_64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-1986664393-2956018779-2686680071-1001_Classes\CLSID\{E4949BE6-C9FF-4AFA-8672-6127D857418B}\InprocServer32 -> C:\Users\Mathieu\AppData\Local\Google\Update\1.3.36.312\psuser_64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-1986664393-2956018779-2686680071-1001_Classes\CLSID\{ED0BC9DB-3CE6-49E5-9B2F-590DCEF8C016}\InprocServer32 -> C:\Users\Mathieu\AppData\Local\Google\Update\1.3.36.342\psuser_64.dll => Pas de fichier
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Health Check.lnk:F20EF51E1F [3442]
AlternateDataStreams: C:\Users\Public\Documents\Ver.txt:99416E85EF [3442]
EmptyTemp:
cmd: ipconfig /flushdns
cmd: netsh advfirewall reset
cmd: DISM /Online /Cleanup-image /Restorehealth
cmd: sfc /scannow
end::