start 
CreateRestorePoint:
CloseProcesses:
RemoveProxy:
HKU\S-1-5-18\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 
HKU\S-1-5-18\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1 
HKU\S-1-5-18\...\Policies\Explorer: [NoResolveSearch] 1 
HKU\S-1-5-18\...\Policies\Explorer: [NoInternetOpenWith] 1 
HKU\S-1-5-18\...\Policies\Explorer: [NoSMBalloonTip] 1 
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => Pas de fichier 
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.DamasGate.com.com/vb 
FF DefaultSearchEngine: Bing 
FF SearchEngineOrder.3: Bing 
FF SelectedSearchEngine: Bing 
FF Session Restore: -> est activé. 
CHR StartupUrls: Default -> "hxxp://search.avira.com/?l=dis&o=APN10267&gct=hp&dc=EU&locale=fr_DZ","hxxps://chrome.google.com/webstore?hl=fr&category=theme","hxxp://www.google.fr/","hxxp://www.linkat-araby.com/?src=1044","hxxp://search.creativetoolbars.com/?src=hp&id=smartbar&g=","hxxp://arabic.arabia.msn.com/?ocid=oa-BeautifulBeaches","hxxp://www.bing.com/?scope=web&setmkt=ar-xa&setlang=match&FORM=W5WA&uid=F2036E0","hxxp://fr.msn.com/?pc=UP97&ocid=UP97DHP","hxxp://fr.msn.com/?ocid=iehp" 
CHR DefaultSearchURL: Default -> hxxp://search.medianewtabsearch.com/?src=MediaNewTab_ds&q={searchTerms} 
S3 cpuz134; \??\C:\Users\med\AppData\Local\Temp\cpuz134\cpuz134_x32.sys [X] 
U4 klkbdflt2; system32\DRIVERS\klkbdflt2.sys [X] 
S3 netr28u; system32\DRIVERS\netr28u.sys [X] 
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X] 
S3 tsusbhub; system32\drivers\tsusbhub.sys [X] 
S3 VGPU; System32\drivers\rdvgkmd.sys [X] 

CMD: netsh winsock reset all
CMD: ipconfig /flushdns
hosts:
EmptyTemp:
Reboot:
end