Start::
CloseProcesses:
SystemRestore: on
CreateRestorePoint:
Removeproxy:
hosts:
Task: {E4BB4ADA-D633-4C4D-87E3-9A3519B459BA} - \Nec -> Pas de fichier <==== ATTENTION
Task: {88FAF162-3561-4534-BD10-361FFAAA6A33} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Pas de fichier)
Task: {00297BCA-3113-4F9D-9405-6AE73C4D5744} - System32\Tasks\ASUS\P508PowerAgent_sdk => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ShareFromArmouryIII\Mouse\ROG STRIX CARRY\P508PowerAgent.exe (Pas de fichier)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (Pas de fichier)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (Pas de fichier)
Task: {FD2A8214-00D1-45F5-839F-85655136F82F} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval => %systemroot%\system32\MusNotification.exe Display (Pas de fichier)
Task: {3A4C7681-F9D6-44C9-8DB8-681511A2AAB8} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC RebootDialog (Pas de fichier)
Task: {139741E0-4689-4423-8FCE-9382E87624F9} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery RebootDialog (Pas de fichier)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (Pas de fichier)
CustomCLSID: HKU\S-1-5-21-2896008330-159720710-2358065777-1001_Classes\CLSID\{89b2b650-c4dd-d68b-46e7-3176f1973c8b}\localserver32 -> "C:\Program Files\Voicemod Desktop\VoicemodDesktop.exe" -ToastActivated => Pas de fichier
CustomCLSID: HKU\S-1-5-21-2896008330-159720710-2358065777-1001_Classes\CLSID\{D45F043D-F17F-4e8a-8435-70971D9FA46D}\InprocServer32 -> C:\Program Files\Blender Foundation\Blender 3.3\BlendThumb.dll => Pas de fichier
FirewallRules: [UDP Query User{2B82AA0A-CD35-4808-A5A1-79AD4ABB770A}G:\games\install\wwe 2k24\wwe2k24_x64.exe] => (Block) G:\games\install\wwe 2k24\wwe2k24_x64.exe => Pas de fichier
FirewallRules: [TCP Query User{04DC7303-B816-4692-B222-FA23C056714F}G:\games\install\wwe 2k24\wwe2k24_x64.exe] => (Block) G:\games\install\wwe 2k24\wwe2k24_x64.exe => Pas de fichier
FirewallRules: [UDP Query User{17E0C04D-B272-4EB1-95EC-5B3215168013}C:\program files (x86)\tiktok live studio\0.51.4\tiktok live studio.exe] => (Allow) C:\program files (x86)\tiktok live studio\0.51.4\tiktok live studio.exe => Pas de fichier
FirewallRules: [TCP Query User{C5EA359E-B8AE-4054-B724-8F008BFA8E7C}C:\program files (x86)\tiktok live studio\0.51.4\tiktok live studio.exe] => (Allow) C:\program files (x86)\tiktok live studio\0.51.4\tiktok live studio.exe => Pas de fichier
FirewallRules: [{802df96a-4ccb-43cb-afba-b272bd1769a2}] => (Block) C:\Program Files (x86)\AOMEI Partition Assistant\PartAssist.exe => Pas de fichier
FirewallRules: [{a4969187-d06f-4193-a67b-ed9a5cb1163c}] => (Block) C:\Program Files (x86)\AOMEI Partition Assistant\PartAssist.exe => Pas de fichier
FirewallRules: [{61540955-854d-490c-9fc6-8174c6de0965}] => (Block) C:\Program Files (x86)\AOMEI Partition Assistant\PartAssist.exe => Pas de fichier
FirewallRules: [{4d6d7199-1021-4f8d-a398-dcb9c25fd3b5}] => (Block) C:\Program Files (x86)\AOMEI Partition Assistant\PartAssist.exe => Pas de fichier
FirewallRules: [{76075A5A-C691-4175-B18E-ECFF4FA930E5}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe => Pas de fichier
FirewallRules: [{EECC15E5-4BE2-4EDE-BB5F-B7D38A43D9B2}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe => Pas de fichier
FirewallRules: [{B2D230C5-0C97-40B1-A8B7-4C3438A338B3}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe => Pas de fichier
FirewallRules: [{BF5FFB45-92C6-4BF2-B1E3-D6F6DF138797}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe => Pas de fichier
FirewallRules: [UDP Query User{BD3AF3D2-4C6C-43DB-9B7F-C3FEAB04DDDF}C:\games\planet of lana\planet of lana.exe] => (Block) C:\games\planet of lana\planet of lana.exe => Pas de fichier
FirewallRules: [TCP Query User{2C8270FB-40E9-476C-84D9-23F5F893EFC5}C:\games\planet of lana\planet of lana.exe] => (Block) C:\games\planet of lana\planet of lana.exe => Pas de fichier
FirewallRules: [UDP Query User{CE9CF903-8CD6-48F1-B15C-CA655549FE29}C:\program files (x86)\tiktok live studio\0.43.0\tiktok live studio.exe] => (Allow) C:\program files (x86)\tiktok live studio\0.43.0\tiktok live studio.exe => Pas de fichier
FirewallRules: [TCP Query User{DEAEAF98-C899-4F5F-8EA1-17C053982A43}C:\program files (x86)\tiktok live studio\0.43.0\tiktok live studio.exe] => (Allow) C:\program files (x86)\tiktok live studio\0.43.0\tiktok live studio.exe => Pas de fichier
FirewallRules: [UDP Query User{853A69D2-B3C9-4166-9425-1975A4B8F370}C:\program files (x86)\imyfone magicmic\x86\rtaivc\rtaivc.exe] => (Block) C:\program files (x86)\imyfone magicmic\x86\rtaivc\rtaivc.exe => Pas de fichier
FirewallRules: [TCP Query User{8547CD71-CCAB-41C2-B1C3-19BCA5F3D041}C:\program files (x86)\imyfone magicmic\x86\rtaivc\rtaivc.exe] => (Block) C:\program files (x86)\imyfone magicmic\x86\rtaivc\rtaivc.exe => Pas de fichier
FirewallRules: [UDP Query User{C9EDFA84-8B55-49F5-8CCD-CF27A859A966}C:\program files (x86)\imyfone magicmic\magicmic.exe] => (Allow) C:\program files (x86)\imyfone magicmic\magicmic.exe => Pas de fichier
FirewallRules: [TCP Query User{24D00DB0-3841-4764-BDD6-881809514AA0}C:\program files (x86)\imyfone magicmic\magicmic.exe] => (Allow) C:\program files (x86)\imyfone magicmic\magicmic.exe => Pas de fichier
FirewallRules: [{502683FA-8CB2-4772-BDD4-D748550E912E}] => (Block) G:\Download\_Appz\MobileTrans\MobileTrans.exe => Pas de fichier
FirewallRules: [{5C0081FD-F8F5-49F5-AC64-AD2E5CA89EE9}] => (Block) G:\Download\_Appz\MobileTrans\MobileTrans.exe => Pas de fichier
FirewallRules: [TCP Query User{808A01BD-28AF-412B-A2F8-251F120C9BB2}C:\program files (x86)\tiktok live studio\tiktok live studio.exe] => (Allow) C:\program files (x86)\tiktok live studio\tiktok live studio.exe => Pas de fichier
FirewallRules: [UDP Query User{6801B573-FEE1-48DF-97AC-9AD8D150A701}C:\program files (x86)\tiktok live studio\tiktok live studio.exe] => (Allow) C:\program files (x86)\tiktok live studio\tiktok live studio.exe => Pas de fichier
FirewallRules: [{4D85F8B3-3E72-42AB-B812-BDA7CD387C01}] => (Allow) C:\Program Files\Oculus\Support\oculus-worlds\Home2.exe => Pas de fichier
FirewallRules: [{4FCB7AA9-570D-4F0D-A4C1-DA7A9A2A6296}] => (Allow) C:\Program Files\Oculus\Support\oculus-worlds\Home2.exe => Pas de fichier
FirewallRules: [{8D7D4D9C-70DB-4464-86DC-0B075142BD29}] => (Allow) C:\Program Files\Oculus\Support\oculus-worlds\Home2\Binaries\Win64\Home2-Win64-Shipping.exe => Pas de fichier
FirewallRules: [{7F505464-7869-45A3-A277-2E263A38E6E9}] => (Allow) C:\Program Files\Oculus\Support\oculus-worlds\Home2\Binaries\Win64\Home2-Win64-Shipping.exe => Pas de fichier
FirewallRules: [{C14AA179-2C9B-4786-A99C-9D9C255FAF53}] => (Allow) C:\Program Files\Oculus\Support\oculus-worlds\Engine\Binaries\Win64\UnrealCEFSubProcess.exe => Pas de fichier
FirewallRules: [{E087C537-E610-4698-AAB6-D2E5959634F2}] => (Allow) C:\Program Files\Oculus\Support\oculus-worlds\Engine\Binaries\Win64\UnrealCEFSubProcess.exe => Pas de fichier
FirewallRules: [TCP Query User{23202D7C-2464-4881-AD4B-F5491A0E52B6}C:\users\mouaadiib\appdata\local\discord\app-1.0.9008\discord.exe] => (Allow) C:\users\mouaadiib\appdata\local\discord\app-1.0.9008\discord.exe => Pas de fichier
FirewallRules: [UDP Query User{5AD2D3BF-6440-4B8F-840C-82B48503C9FF}C:\users\mouaadiib\appdata\local\discord\app-1.0.9008\discord.exe] => (Allow) C:\users\mouaadiib\appdata\local\discord\app-1.0.9008\discord.exe => Pas de fichier
FirewallRules: [TCP Query User{DB1DEDAD-A9C8-45B8-A2F0-0204F7B64755}C:\program files (x86)\steam\steamapps\common\marvelrivals\marvelgame\marvel\binaries\win64\marvel-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\marvelrivals\marvelgame\marvel\binaries\win64\marvel-win64-shipping.exe => Pas de fichier
FirewallRules: [UDP Query User{28BFE7B8-3C14-435C-946C-63C997B6D817}C:\program files (x86)\steam\steamapps\common\marvelrivals\marvelgame\marvel\binaries\win64\marvel-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\marvelrivals\marvelgame\marvel\binaries\win64\marvel-win64-shipping.exe => Pas de fichier
FirewallRules: [TCP Query User{5780300C-484C-4821-BB84-6B0CE12B98CE}C:\program files (x86)\tiktok live studio\0.63.0\tiktok live studio.exe] => (Allow) C:\program files (x86)\tiktok live studio\0.63.0\tiktok live studio.exe => Pas de fichier
FirewallRules: [UDP Query User{0D314BB8-C5CB-49F4-8C84-7786917C44BC}C:\program files (x86)\tiktok live studio\0.63.0\tiktok live studio.exe] => (Allow) C:\program files (x86)\tiktok live studio\0.63.0\tiktok live studio.exe => Pas de fichier
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
GroupPolicy: Restriction ? <==== ATTENTION
GroupPolicy-Firefox: Restriction <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
Task: {E4BB4ADA-D633-4C4D-87E3-9A3519B459BA} - \Nec -> Pas de fichier <==== ATTENTION
S3 AppShellElevationService; "C:\Program Files (x86)\TikTok LIVE Studio\0.63.0\elevation_service.exe" [X]
AlternateDataStreams: C:\ProgramData\DisplaySessionContainer1.log:F107EE40EF [6018]
AlternateDataStreams: C:\ProgramData\DisplaySessionContainer1.log_backup1:2DD1EC5C91 [6018]
AlternateDataStreams: C:\ProgramData\DisplaySessionContainer2.log:CCB2353F35 [6018]
AlternateDataStreams: C:\ProgramData\DisplaySessionContainer2.log_backup1:0544EFE2DB [6018]
AlternateDataStreams: C:\ProgramData\DP45977C.lfl:677104FCAA [6018]
AlternateDataStreams: C:\ProgramData\mntemp:8EAD8B3507 [6018]
AlternateDataStreams: C:\ProgramData\NVDisplay.ContainerLocalSystem.log:5ACBC90093 [6018]
AlternateDataStreams: C:\ProgramData\NVDisplay.ContainerLocalSystem.log_backup1:A416BDA264 [6018]
AlternateDataStreams: C:\ProgramData\NVDisplayContainerWatchdog.log:204739A7F2 [6018]
AlternateDataStreams: C:\ProgramData\NVDisplayContainerWatchdog.log_backup1:C3CA1050CA [6018]
AlternateDataStreams: C:\ProgramData\regid.2012-06.com.global-imaging_3DA249FE-F08A-4F8A-A6A2-56274CABE997.swidtag:43DA02EAE9 [6018]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini:B1DA6C571C [6018]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk:1069064143 [6018]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller DC.lnk:9185529B88 [6018]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Character Animator 2024.lnk:0712FA4922 [6018]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Illustrator 2024.lnk:B74CC70858 [6018]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop 2024.lnk:D6CCC992C2 [6018]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk:B026C77744 [6018]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk:09A0A90EF3 [6018]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk:BE32D07BC5 [6018]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uninstall Oculus.lnk:CAC6944A29 [6018]
AlternateDataStreams: C:\Users\Mouaadiib\Downloads\Pix_invitation.pdf:shield [149]
AlternateDataStreams: C:\Users\Mouaadiib\Downloads\Preuve d'achat _ Rentalcars.com.pdf:shield [218]
AlternateDataStreams: C:\Users\Mouaadiib\Downloads\project178-main.zip:shield [150]
AlternateDataStreams: C:\Users\Mouaadiib\Downloads\RECEIPT-fr-4918165-555260790!af19b2e1-ac83-44cd-8b32-a98be53c8e40.pdf:shield [147]
AlternateDataStreams: C:\Users\Mouaadiib\Downloads\tv_channels_vQmJ1zUA7U_plus (2).m3u:shield [197]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [4498]
cmd: ipconfig /flushdns
cmd: netsh advfirewall reset
cmd: netsh advfirewall set allprofiles state on
cmd: netsh winsock reset
Emptytemp:
End::