start::
closeprocesses:
createrestorepoint:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\MRT: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender Security Center: Restriction <==== ATTENTION
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION
Task: {66997551-0EF7-430D-A296-D99A7DF62EC2} - System32\Tasks\McAfee\DAD.Execute.Updates => "C:\Program Files\Common Files\McAfee\DynamicAppDownloader\1.7.108\DADUpdater.exe" (Pas de fichier)
C:\Program Files\Common Files\McAfee
Task: {D2CE34B4-FF3D-47FD-9D26-6647F5ED023F} - System32\Tasks\McAfee\StartOOBEFix => C:\Program Files\Common Files\McAfee\OOBE\McOOBEFix.exe (Pas de fichier)
Task: {AB6418E9-DF14-4A80-8CB1-07DEA86AC4DA} - System32\Tasks\McAfeeTsk\OOBEUpgrader => C:\Program Files\McAfee\MSC\OOBE_Upgrader.exe /Run (Pas de fichier)
C:\Program Files\McAfee
Task: {8E72AE5E-C82C-42FE-BEB5-C68C24A86CE1} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\57732768-429B-4F03-8E1C-E24CA3F3792A\Login Schedule created by enrollment client => C:\WINDOWS\system32\deviceenroller.exe [520192 2024-04-01] (Microsoft Windows -> Microsoft Corporation)
Task: {1B91B672-27C0-45FC-81C0-F4A392CFB72F} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\57732768-429B-4F03-8E1C-E24CA3F3792A\OS Edition Upgrade event listener created by enrollment client => C:\WINDOWS\system32\deviceenroller.exe [520192 2024-04-01] (Microsoft Windows -> Microsoft Corporation)
Task: {0086EB98-AC08-4BA6-8A0A-130A0BE821E2} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\57732768-429B-4F03-8E1C-E24CA3F3792A\Passport for Work alert created by enrollment client => C:\WINDOWS\system32\deviceenroller.exe [520192 2024-04-01] (Microsoft Windows -> Microsoft Corporation)
Task: {FB34959B-C775-4B53-AF6A-7FC9D8E10E1B} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\57732768-429B-4F03-8E1C-E24CA3F3792A\Provisioning initiated session => C:\WINDOWS\system32\deviceenroller.exe [520192 2024-04-01] (Microsoft Windows -> Microsoft Corporation)
Task: {501F978B-FA98-4161-A544-C7D5C129113B} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\57732768-429B-4F03-8E1C-E24CA3F3792A\PushLaunch => C:\WINDOWS\system32\deviceenroller.exe [520192 2024-04-01] (Microsoft Windows -> Microsoft Corporation)
Task: {081CD024-3F32-441A-A2C3-515CE52C0082} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\57732768-429B-4F03-8E1C-E24CA3F3792A\PushRenewal => C:\WINDOWS\system32\deviceenroller.exe [520192 2024-04-01] (Microsoft Windows -> Microsoft Corporation)
Task: {74199CCA-2997-4D66-AD26-2D5D94B0C587} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\57732768-429B-4F03-8E1C-E24CA3F3792A\Refresh schedule created by Declared Configuration to refresh any settings changed on the device => C:\WINDOWS\system32\deviceenroller.exe [520192 2024-04-01] (Microsoft Windows -> Microsoft Corporation)
Task: {EDCC011A-4647-4598-8309-5CE3C4A93E50} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\57732768-429B-4F03-8E1C-E24CA3F3792A\Schedule #1 created by enrollment client => C:\WINDOWS\system32\deviceenroller.exe [520192 2024-04-01] (Microsoft Windows -> Microsoft Corporation)
Task: {243A3158-260C-48D9-93E0-0AA8B507EFE1} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\57732768-429B-4F03-8E1C-E24CA3F3792A\Schedule #2 created by enrollment client => C:\WINDOWS\system32\deviceenroller.exe [520192 2024-04-01] (Microsoft Windows -> Microsoft Corporation)
Task: {224CD06D-1FD5-4364-B07D-465E13A87ACD} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\57732768-429B-4F03-8E1C-E24CA3F3792A\Schedule #3 created by enrollment client => C:\WINDOWS\system32\deviceenroller.exe [520192 2024-04-01] (Microsoft Windows -> Microsoft Corporation)
Task: {99BD3A94-B1A6-4233-9BBC-18CF92294868} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\57732768-429B-4F03-8E1C-E24CA3F3792A\Schedule created by enrollment client for renewal of certificate warning => C:\WINDOWS\system32\deviceenroller.exe [520192 2024-04-01] (Microsoft Windows -> Microsoft Corporation)
Task: {8B8BAA55-0EBF-4A35-B67B-BA7FF956B36D} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\57732768-429B-4F03-8E1C-E24CA3F3792A\Schedule to run OMADMClient by client => C:\WINDOWS\system32\omadmclient.exe [475136 2024-04-01] (Microsoft Windows -> Microsoft Corporation)
Task: {902FAB09-AF3B-4F08-8AFE-28799CC30C62} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\57732768-429B-4F03-8E1C-E24CA3F3792A\Schedule to run OMADMClient by server => C:\WINDOWS\system32\omadmclient.exe [475136 2024-04-01] (Microsoft Windows -> Microsoft Corporation)
Task: {15D0B429-BC9B-4A0E-8010-C40B89E1CC03} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\57732768-429B-4F03-8E1C-E24CA3F3792A\Win10 S Mode event listener created by enrollment client => C:\WINDOWS\system32\deviceenroller.exe [520192 2024-04-01] (Microsoft Windows -> Microsoft Corporation)
Task: {881A9C44-0A23-4F26-861D-7A0570E4925D} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\57732768-429B-4F03-8E1C-E24CA3F3792A\Wsc Startup event listener created by enrollment client => C:\WINDOWS\system32\deviceenroller.exe [520192 2024-04-01] (Microsoft Windows -> Microsoft Corporation)
Task: {00892820-FD5B-43CF-A385-2EC96530D83F} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\63C0B35C-0560-4518-8FD5-50349CA2DC8B\Login Schedule created by enrollment client => C:\WINDOWS\system32\deviceenroller.exe [520192 2024-04-01] (Microsoft Windows -> Microsoft Corporation)
Task: {5C736945-2166-4445-B30F-B26EC39B8B28} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\63C0B35C-0560-4518-8FD5-50349CA2DC8B\OS Edition Upgrade event listener created by enrollment client => C:\WINDOWS\system32\deviceenroller.exe [520192 2024-04-01] (Microsoft Windows -> Microsoft Corporation)
Task: {80406F3E-1FB7-429C-9899-BB690BC723F9} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\63C0B35C-0560-4518-8FD5-50349CA2DC8B\Passport for Work alert created by enrollment client => C:\WINDOWS\system32\deviceenroller.exe [520192 2024-04-01] (Microsoft Windows -> Microsoft Corporation)
Task: {B11C0CF7-7CEB-4967-A96F-73C70C8F00B8} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\63C0B35C-0560-4518-8FD5-50349CA2DC8B\Provisioning initiated session => C:\WINDOWS\system32\deviceenroller.exe [520192 2024-04-01] (Microsoft Windows -> Microsoft Corporation)
Task: {DE4C1899-2D6E-4E5A-A503-B519D2A58845} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\63C0B35C-0560-4518-8FD5-50349CA2DC8B\PushLaunch => C:\WINDOWS\system32\deviceenroller.exe [520192 2024-04-01] (Microsoft Windows -> Microsoft Corporation)
Task: {7B172632-2C42-44EA-A24F-A59B2E29E69D} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\63C0B35C-0560-4518-8FD5-50349CA2DC8B\PushRenewal => C:\WINDOWS\system32\deviceenroller.exe [520192 2024-04-01] (Microsoft Windows -> Microsoft Corporation)
Task: {5B079FE6-E3E9-4B87-9B3A-8DBD4CAE3C18} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\63C0B35C-0560-4518-8FD5-50349CA2DC8B\PushUpgrade => C:\WINDOWS\system32\deviceenroller.exe [520192 2024-04-01] (Microsoft Windows -> Microsoft Corporation)
Task: {B81DB558-B5EA-4902-8FF4-080CEEC94B91} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\63C0B35C-0560-4518-8FD5-50349CA2DC8B\Schedule #1 created by enrollment client => C:\WINDOWS\system32\deviceenroller.exe [520192 2024-04-01] (Microsoft Windows -> Microsoft Corporation)
Task: {FD61AD7F-4F0E-4941-A712-D150B63876C2} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\63C0B35C-0560-4518-8FD5-50349CA2DC8B\Schedule #2 created by enrollment client => C:\WINDOWS\system32\deviceenroller.exe [520192 2024-04-01] (Microsoft Windows -> Microsoft Corporation)
Task: {39C09655-AFD4-416A-B683-E790602DEFB4} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\63C0B35C-0560-4518-8FD5-50349CA2DC8B\Schedule #3 created by enrollment client => C:\WINDOWS\system32\deviceenroller.exe [520192 2024-04-01] (Microsoft Windows -> Microsoft Corporation)
Task: {BD620442-1A60-4A20-8934-867023A2B33F} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\63C0B35C-0560-4518-8FD5-50349CA2DC8B\Schedule created by enrollment client for renewal of certificate warning => C:\WINDOWS\system32\deviceenroller.exe [520192 2024-04-01] (Microsoft Windows -> Microsoft Corporation)
Task: {642C0B3F-F1B1-4462-B7EE-3CD130FC28E1} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\63C0B35C-0560-4518-8FD5-50349CA2DC8B\Schedule to run OMADMClient by client => C:\WINDOWS\system32\omadmclient.exe [475136 2024-04-01] (Microsoft Windows -> Microsoft Corporation)
Task: {6D7F648B-71EC-4506-BBFC-1A9FBAA5AAC0} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\63C0B35C-0560-4518-8FD5-50349CA2DC8B\Schedule to run OMADMClient by server => C:\WINDOWS\system32\omadmclient.exe [475136 2024-04-01] (Microsoft Windows -> Microsoft Corporation)
Task: {C2650578-3D3A-4F4C-B928-7E2848AE0FA7} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\63C0B35C-0560-4518-8FD5-50349CA2DC8B\Win10 S Mode event listener created by enrollment client => C:\WINDOWS\system32\deviceenroller.exe [520192 2024-04-01] (Microsoft Windows -> Microsoft Corporation)
Task: {A6825189-A212-4CB0-BADE-4E89E9DAF8BD} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\63C0B35C-0560-4518-8FD5-50349CA2DC8B\Wsc Startup event listener created by enrollment client => C:\WINDOWS\system32\deviceenroller.exe [520192 2024-04-01] (Microsoft Windows -> Microsoft Corporation)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (Pas de fichier)
Task: {AF68BB6E-4B7A-4898-8EBC-CD7AA709D59C} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_LogonUpdateResults => %systemroot%\system32\MusNotification.exe LogonUpdateResults (Pas de fichier)
Task: {DDA95613-1135-41DE-90CA-B1E6C0CE4480} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC Reboot (Pas de fichier)
Task: {5271901A-632B-40EB-90C5-DE940F701150} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery Reboot (Pas de fichier)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (Pas de fichier)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => -> Pas de fichier
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - Pas de fichier
FirewallRules: [UDP Query User{6F5842C7-D827-48D3-8452-6C7406845162}C:\xampp\mysql\bin\mysqld.exe] => (Allow) C:\xampp\mysql\bin\mysqld.exe => Pas de fichier
FirewallRules: [TCP Query User{3B704607-C4B9-48A7-BD64-36CE94DE1303}C:\xampp\mysql\bin\mysqld.exe] => (Allow) C:\xampp\mysql\bin\mysqld.exe => Pas de fichier
FirewallRules: [UDP Query User{8DCB55ED-7A04-4B8D-AE09-AE8129B46A32}C:\xampp\filezillaftp\filezillaserver.exe] => (Allow) C:\xampp\filezillaftp\filezillaserver.exe => Pas de fichier
FirewallRules: [TCP Query User{F8404513-3BF2-4CBA-B231-398530A0CDF1}C:\xampp\filezillaftp\filezillaserver.exe] => (Allow) C:\xampp\filezillaftp\filezillaserver.exe => Pas de fichier
FirewallRules: [UDP Query User{36C1B6D8-276E-4B77-8341-E7F6432E11E8}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe => Pas de fichier
FirewallRules: [TCP Query User{3AFA21DD-0CAC-46AF-8658-B74EE6D5AB99}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe => Pas de fichier
FirewallRules: [{EDB3CCA1-5306-4968-855F-F7851963A05E}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe => Pas de fichier
FirewallRules: [{F17422CD-74D9-4994-9774-A7016B11AD1F}] => (Allow) C:\Program Files\Common Files\McAfee\MMSSHost\MMSSHost.exe => Pas de fichier
FirewallRules: [{DF288662-7C09-42FE-B650-E4C8D0844CFA}] => (Allow) C:\Program Files (x86)\Common Files\McAfee\MMSSHost\MMSSHost.exe => Pas de fichier
emptytemp:
end::