Start::
(Intel Corporation -> Intel Corporation) C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
GroupPolicy: Restriction - Chrome <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {13AA30DA-260F-430E-91DB-0CBCDF4D1AD1} - System32\Tasks\Opera scheduled Autoupdate 1639036706 => C:\Users\percy\AppData\Local\Programs\Opera\launcher.exe --scheduledautoupdate $(Arg0) (No File)
Task: {956C64DB-7ECC-4101-B679-87F0425AE26F} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe --automatic (No File)
Task: {F0C06D77-3429-41A2-8D19-CD99212F3615} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [3075936 2021-07-21] (Intel Corporation -> Intel Corporation)
Task: {F272CFEE-7931-4D8B-B460-2CF39EA33AFE} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [3075936 2021-07-21] (Intel Corporation -> Intel Corporation)
Task: {FD95B684-239B-4F85-98B6-B818B83A6F6D} - System32\Tasks\USER_ESRV_SVC_QUEENCREEK => "C:\Windows\System32\Wscript.exe" //B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\x64\task.vbs"
Tcpip\Parameters: [DhcpNameServer] 192.168.30.223 192.168.30.8
Tcpip\..\Interfaces\{4ce2f601-daa3-4d72-bcf4-ef5fe3c5ce27}: [DhcpNameServer] 192.168.30.223 192.168.30.8
Edge HKLM-x32\...\Edge\Extension: [odbmjgikedenicicookngdckhkjbebpd]
CHR HomePage: Default -> hxxps://find-it.pro/?utm_source=distr_m
CHR StartupUrls: Default -> "hxxps://www.google.com.tr/","hxxps://find-it.pro/?utm_source=distr_m"
CHR DefaultSearchURL: Default -> hxxp://extension-search.online/?q={searchTerms}
CHR DefaultSuggestURL: Default -> hxxp://extension-search.online/suggest/get?part={searchTerms}
CHR Extension: (Find-it.Pro Search) - C:\Users\percy\AppData\Local\Google\Chrome\User Data\Default\Extensions\meejmcfbiapijdfaadackoblffmidlig [2021-12-24]
CHR Extension: (Adblocker for Youtube™) - C:\Users\percy\AppData\Local\Google\Chrome\User Data\Default\Extensions\gakekacnalcpkgkogmbmknlcdikjghba [2021-12-09] [UpdateUrl:hxxps://clients80.google.com/service/update2/crx] <==== ATTENTION
CHR Extension: (Google Sheets Offline) - C:\Users\percy\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbenffkgdeokfgjbbjibklflbaeelinh [2021-12-09] [UpdateUrl:hxxps://clients69.google.com/service/update2/crx] <==== ATTENTION
S2 cphs; %SystemRoot%\System32\IntelCpHeciSvc.exe [X]
2021-12-09 11:00 - 2021-12-09 21:06 - 000000004 _____ C:\ProgramData\rc.dat
2021-12-09 10:59 - 2021-12-09 23:41 - 000000004 _____ C:\ProgramData\lock.dat
2021-12-09 10:59 - 2021-12-09 23:38 - 000000040 _____ C:\ProgramData\lir.bats
2021-12-09 10:59 - 2021-12-09 10:59 - 000000008 _____ C:\ProgramData\ts.dat
2021-12-09 10:58 - 2021-12-11 10:54 - 000000000 ____D C:\Users\percy\AppData\Roaming\neofed
2021-12-09 10:58 - 2021-12-11 10:54 - 000000000 ____D C:\Program Files (x86)\lOwFCGmbHyUn
2021-12-09 10:58 - 2021-12-11 10:51 - 000000000 ____D C:\Program Files (x86)\zVogHLNYxpNlC
2021-12-09 10:58 - 2021-12-11 10:51 - 000000000 ____D C:\Program Files (x86)\yAWmtmExGoPU2
2021-12-09 10:58 - 2021-12-11 10:51 - 000000000 ____D C:\Program Files (x86)\iWImyDASlsYzxxjhYER
2021-12-09 10:58 - 2021-12-11 10:51 - 000000000 ____D C:\Program Files (x86)\cbRHKOfZU
2021-12-09 10:58 - 2021-12-09 18:07 - 000000000 ____D C:\Users\percy\AppData\Local\Opera Software
2021-12-09 10:58 - 2021-12-09 10:58 - 000004208 _____ C:\Windows\system32\Tasks\Opera scheduled Autoupdate 1639036706
2021-12-09 10:58 - 2021-12-09 10:58 - 000000000 ____D C:\Users\percy\AppData\Roaming\queasy
2021-12-09 10:58 - 2021-12-09 10:58 - 000000000 ____D C:\Users\percy\AppData\Roaming\NCH Software
2021-12-09 10:58 - 2021-12-09 10:58 - 000000000 ____D C:\Users\percy\AppData\Local\Yandex
2021-12-09 10:58 - 2021-12-09 10:58 - 000000000 ____D C:\Program Files (x86)\foler
2021-12-09 10:58 - 2021-12-09 10:58 - 000000000 _____ C:\ProgramData\sqlite3.dll
2021-12-09 10:57 - 2021-12-09 21:08 - 000000000 ____D C:\ProgramData\MemoryOptimizer
2021-12-09 10:57 - 2021-12-09 21:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneKeyManager
2021-12-09 10:57 - 2021-12-09 21:07 - 000000000 ____D C:\Program Files (x86)\OneKeyManager
2021-12-09 10:57 - 2021-12-09 18:07 - 000000000 ____D C:\Users\percy\AppData\Roaming\Opera Software
2021-12-09 10:57 - 2021-12-09 10:58 - 000004732 __RSH C:\ProgramData\ntuser.pol
2021-12-09 10:56 - 2021-12-11 10:17 - 000000000 ____D C:\Program Files (x86)\Qui
C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-559131013-3136940072-3681618654-1001
Virustotal: C:\Windows\system32\DrtmAuthTxt.wim;C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
Intel Driver && Support Assistant (HKLM-x32\...\{9E0D27E1-B7C9-4D9E-BADF-67CC919A9EAC}) (Version: 21.7.50.3 - Intel) Hidden
AlternateDataStreams: C:\ProgramData\lir.bats:286F7FC5C6 [10]
AlternateDataStreams: C:\ProgramData\lock.dat:B839BDBBBE [10]
2019-12-07 12:14 - 2019-12-07 12:12 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts
End::