start::
closeprocesses:
createrestorepoint:
AV: Norton Security Ultra (Disabled - Out of date) {A2708B76-6835-6565-CB96-694212954A75}
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Pas de fichier
BHO: Pas de nom -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> Pas de fichier
BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll => Pas de fichier
C:\Program Files\Bitdefender
Toolbar: HKLM - Pas de nom - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - Pas de fichier
Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll Pas de fichier
FirewallRules: [TCP Query User{7C799275-1B44-4C8F-A32F-C17E32D1E3E5}D:\games\house flipper 2\houseflipper2.exe] => (Allow) D:\games\house flipper 2\houseflipper2.exe => Pas de fichier
FirewallRules: [UDP Query User{53DE9827-C0FE-44B8-88EC-897027EAE098}D:\games\house flipper 2\houseflipper2.exe] => (Allow) D:\games\house flipper 2\houseflipper2.exe => Pas de fichier
FirewallRules: [TCP Query User{2CFE8D36-466D-4DB6-ADA1-C0A6F05ED190}C:\users\cyrie\appdata\local\temp\rar$exa21476.20797.rartemp\arcane.arts.academy.2\arcane arts academy 2\arcane arts academy 2.exe] => (Allow) C:\users\cyrie\appdata\local\temp\rar$exa21476.20797.rartemp\arcane.arts.academy.2\arcane arts academy 2\arcane arts academy 2.exe => Pas de fichier
FirewallRules: [UDP Query User{03B0A691-58B3-485A-82C8-AE1196224AEB}C:\users\cyrie\appdata\local\temp\rar$exa21476.20797.rartemp\arcane.arts.academy.2\arcane arts academy 2\arcane arts academy 2.exe] => (Allow) C:\users\cyrie\appdata\local\temp\rar$exa21476.20797.rartemp\arcane.arts.academy.2\arcane arts academy 2\arcane arts academy 2.exe => Pas de fichier
FirewallRules: [TCP Query User{63535085-FE72-4249-8371-AF869385C7F4}C:\users\cyrie\appdata\local\temp\rar$exa17428.2657.rartemp\polda.7\game\polda7.exe] => (Allow) C:\users\cyrie\appdata\local\temp\rar$exa17428.2657.rartemp\polda.7\game\polda7.exe => Pas de fichier
FirewallRules: [UDP Query User{4B971582-F343-43F3-AB0D-1F3B65273950}C:\users\cyrie\appdata\local\temp\rar$exa17428.2657.rartemp\polda.7\game\polda7.exe] => (Allow) C:\users\cyrie\appdata\local\temp\rar$exa17428.2657.rartemp\polda.7\game\polda7.exe => Pas de fichier
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION
Task: {15405533-D790-4F32-9BC4-8C6B9BEF9F2D} - System32\Tasks\App Explorer => C:\Users\cyrie\AppData\Local\Host App Service\Engine\HostAppServiceUpdater.exe [7574560 2023-03-29] (SweetLabs Inc -> SweetLabs, Inc) <==== ATTENTION
Task: {05F20A7D-145D-4E60-8F8A-68A8A77F3444} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe /DeviceScanR6 (Pas de fichier)
Task: {6ED96977-B897-41C3-B655-1554A60D0F8F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_TH03VBM17K => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe /ForDevice:TH03VBM17K (Pas de fichier)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (Pas de fichier)
Task: {ACB9C782-B4E9-43BA-9691-5191BD9D6DC6} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval => %systemroot%\system32\MusNotification.exe Display (Pas de fichier)
Task: {6CDFEE60-19F2-4EC2-AFE7-15140FF4C211} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC RebootDialog (Pas de fichier)
Task: {581FBAB5-0A3D-4C3A-BC0F-168B77B9CB61} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery RebootDialog (Pas de fichier)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (Pas de fichier)
Task: {E84F11A0-32DC-4F1C-B352-18186CF5BFF3} - System32\Tasks\NvOptimizerTaskUpdater_V2 => C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe [450560 2024-01-26] (Microsoft Windows -> Microsoft Corporation) -> -File C:/Windows/System32/NvWinSearchOptimizer.ps1 <==== ATTENTION
Task: {109A59AA-49BC-4596-9B0C-13448FCC9199} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2491025712-515002546-1273168305-500 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe (Pas de fichier)
FF HKLM\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi => non trouvé(e)
FF HKLM-x32\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi => non trouvé(e)
C:\Users\cyrie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dafkaabahcikblhbogbnbjodajmhbini
C:\Users\cyrie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlmpchkfhgoclkajbifladignhbanjdk
CHR Extension: (Chrome Updates) - C:\Windows\InternalKernelGrid4 [2024-01-20]
CHR HKU\S-1-5-21-2491025712-515002546-1273168305-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [hkecabaloghleaicfhefejdijblljpco]
2024-05-05 16:45 - 2024-05-05 16:48 - 000000000 ____D C:\ProgramData\HitmanPro
2024-05-05 16:45 - 2024-05-05 16:45 - 014287912 _____ (Sophos B.V.) C:\Users\cyrie\Downloads\HitmanPro_x64.exe
2024-05-05 14:06 - 2024-05-05 14:06 - 000809482 _____ C:\WINDOWS\system32\perfh00C.dat
2024-05-05 14:06 - 2024-05-05 14:06 - 000156934 _____ C:\WINDOWS\system32\perfc00C.dat
2024-05-05 11:40 - 2024-05-05 11:40 - 000000000 ____D C:\Users\cyrie\AppData\Roaming\com.spyshelter
2024-05-05 11:39 - 2024-05-05 16:42 - 000000000 ____D C:\ProgramData\SpyShelter
2024-05-01 07:50 - 2024-05-01 07:50 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleSystem
emptytemp:
end::