start::
closeprocesses:
createrestorepoint:
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133728 2017-09-12] (Wondershare Technology Co.,Ltd -> Wondershare)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender Security Center: Restriction <==== ATTENTION
C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact
Task: {6A8349C4-60BB-4488-8AB8-4C94ACD5E3D3} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe (Pas de fichier)
Task: {8333EDFA-4735-4CF9-95E2-2FB975B2D2F7} - System32\Tasks\GoogleSystem\iisuont => C:\Windows\microsoft.net\framework\v4.0.30319\RegAsm.exe [58856 2024-04-01] (Microsoft Corporation -> Microsoft Corporation) -> C:\Program Files (x86)\Common Files\PassShell\YilterSuppolt\/u "C:\Program Files (x86)\Common Files\PassShell\YilterSuppolt\IJBr6Tnnp.dll" <==== ATTENTION
C:\Program Files (x86)\Common Files\PassShell
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (Pas de fichier)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (Pas de fichier)
emptytemp:
end::