Start
CloseProcesses:
CreateRestorePoint:
RemoveProxy:

HKU\S-1-5-21-608396516-1611828915-1620738805-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
2016-06-06 22:27 - 2015-10-30 07:39 - 00000000 ____D C:\WINDOWS\CbsTemp
Task: {00F05ABE-0CBF-4CA1-90B6-18E5920EDEBF} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Pas de fichier <==== ATTENTION
Task: {03F8066D-F665-4EA1-B389-B8869E1976DF} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Pas de fichier <==== ATTENTION
Task: {06F18A43-3B74-4C13-A5B3-947B3986C0C8} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Pas de fichier <==== ATTENTION
Task: {821F7916-D278-4972-850C-F260C143BCA8} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Pas de fichier <==== ATTENTION
Task: {852C23DB-3E55-4966-A821-4F63E92474F3} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Pas de fichier <==== ATTENTION
Task: {997B496A-97DC-402C-ADE0-8C2167A826A8} - \Microsoft\Windows\Setup\GWXTriggers\Time-Weekend -> Pas de fichier <==== ATTENTION
Task: {9F0C389A-1258-45C9-8468-9B5FAD7DB85F} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Pas de fichier <==== ATTENTION
Task: {A97C623C-C032-4DFA-9C36-7D9A7970C062} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Pas de fichier <==== ATTENTION
Task: {D8CC7587-BB7F-42BD-9457-2B318E850A86} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Pas de fichier <==== ATTENTION
IE restricted site: HKU\S-1-5-21-608396516-1611828915-1620738805-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-608396516-1611828915-1620738805-1000\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-608396516-1611828915-1620738805-1000\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-608396516-1611828915-1620738805-1000\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-608396516-1611828915-1620738805-1000\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-608396516-1611828915-1620738805-1000\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-608396516-1611828915-1620738805-1000\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-608396516-1611828915-1620738805-1000\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-608396516-1611828915-1620738805-1000\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-608396516-1611828915-1620738805-1000\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-608396516-1611828915-1620738805-1000\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-608396516-1611828915-1620738805-1000\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-608396516-1611828915-1620738805-1000\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-608396516-1611828915-1620738805-1000\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-608396516-1611828915-1620738805-1000\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-608396516-1611828915-1620738805-1000\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-608396516-1611828915-1620738805-1000\...\1001movie.com -> 1001movie.com
IE restricted site: HKU\S-1-5-21-608396516-1611828915-1620738805-1000\...\1001night.biz -> 1001night.biz
IE restricted site: HKU\S-1-5-21-608396516-1611828915-1620738805-1000\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-608396516-1611828915-1620738805-1000\...\100sexlinks.com -> 100sexlinks.com

emptytemp:
CMD: netsh winsock reset all
CMD: ipconfig /flushdns
hosts:
reboot:
end