start::
closeprocesses:
createrestorepoint:
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ Client (40455a90-1f18-4cbe-8936-bb659f0035e2) => ""="Service"
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
ask: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (Pas de fichier)
Task: {27CE9D59-9D48-4D29-99BC-64657AEBA494} - System32\Tasks\Microsoft\Windows\Security\Pwdless\IntelligentPwdlessTask => {8702A841-D5CA-47C3-812D-9CEDC304C200}
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (Pas de fichier)
R2 ScreenConnect Client (40455a90-1f18-4cbe-8936-bb659f0035e2); C:\Users\elola\AppData\Local\Apps\2.0\PJ9WXYAT.LX2\4ATAHL5L.734\scre..tion_2c2536e5112611c9_0006.0003_f4ee8a9eacb49b04\ScreenConnect.ClientService.exe [90768 2025-03-20] (ScreenConnect Software -> ) <==== ATTENTION
C:\Users\elola\AppData\Local\Apps\2.0\PJ9WXYAT.LX2\4ATAHL5L.734\scre..tion_2c2536e5112611c9_0006.0003_f4ee8a9eacb49b04
2025-03-20 12:46 - 2025-03-23 17:24 - 000000000 ____D C:\ProgramData\scre..tion_2c2536e5112611c9_0006.0003_f4ee8a9eacb49b04
2025-03-20 12:45 - 2025-03-20 12:45 - 000086672 _____ C:\Users\elola\Downloads\ConnectWiseControl.Client.exe
2025-03-20 12:45 - 2025-03-20 12:45 - 000000000 ____D C:\Users\elola\AppData\Local\Deployment
2025-03-20 12:45 - 2025-03-20 12:45 - 000000000 ____D C:\Users\elola\AppData\Local\Apps\2.0
2025-03-20 12:44 - 2025-03-20 12:44 - 000002264 _____ C:\Users\elola\AppData\LocalLow\bc1248fe311c322fef17a574155f691ef961e79e56843e50d9762ab1b90be081
2025-03-20 12:43 - 2025-03-20 16:47 - 000000130 _____ C:\Users\elola\AppData\LocalLow\6b47a238d8b0b2f2fdd659e7a341ee309e29009ffd93f32c7ae53bf4bc67a657
2025-03-20 12:43 - 2025-03-20 12:44 - 000011216 _____ C:\Users\elola\AppData\LocalLow\326b849c5925622d17ab622c9eb20ee8b5c4f12d95e4947f23c457ed95b67661
2025-03-20 12:43 - 2025-03-20 12:43 - 000000026 _____ C:\Users\elola\AppData\LocalLow\d664d1b3e3fa9ac1443bebd2e5c2977fc0c808f895dbf7971b5e70121b4b0388
2025-03-20 12:43 - 2025-03-20 12:43 - 000000026 _____ C:\Users\elola\AppData\LocalLow\4f39134f5c1d14977fabfc4a1ab75490046603ad162203811aaf6cbb569d28cb
2025-03-20 12:42 - 2025-03-20 12:44 - 000000130 _____ C:\Users\elola\AppData\LocalLow\21cc95bc5477f799af3f16db494a0020b59d0d84b4ce5882c7a4b865488096c8
2025-03-20 12:42 - 2025-03-20 12:43 - 000094265 _____ C:\Users\elola\AppData\LocalLow\28214953ae58d8ba1ee00ce31081ac97e9c2c4c896d29cbf9aab2b3e8bc729d3
emptytemp:
end::