start
CreateRestorePoint:
CloseProcesses:
RemoveProxy:

HKU\S-1-5-21-3633014729-3307552484-3653661422-1000\...\Policies\Explorer: [DisallowRun] 1
HKU\S-1-5-21-3633014729-3307552484-3653661422-1000\...\Policies\Explorer\DisallowRun: [1] Mshta.exe
HKU\S-1-5-21-3633014729-3307552484-3653661422-1000\...\Policies\Explorer\DisallowRun: [2] powershell.exe
HKU\S-1-5-21-3633014729-3307552484-3653661422-1000\...\Policies\Explorer\DisallowRun: [3] bitsadmin.exe
BootExecute: autocheck autochk * bootdelete
GroupPolicy: Restriction ? <==== ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3633014729-3307552484-3653661422-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-3633014729-3307552484-3653661422-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/ar-eg/?ocid=iehp
S3 catchme; \??\C:\Users\mgss\AppData\Local\Temp\catchme.sys [X]
U2 ERSvc; pas de ImagePath
U2 IAStorDataMgrsvc; pas de ImagePath
U2 NIHardwareService; pas de ImagePath
U2 NVSvc; pas de ImagePath
U2 srService; pas de ImagePath
Task: {324ECADB-C6FD-4AAC-90EA-98F1A565625B} - \Similar Photo Cleaner_Logon -> Pas de fichier <==== ATTENTION
Task: {62A3CF33-1844-4A42-8037-0B40F4E97FB3} - \AutoKMS -> Pas de fichier <==== ATTENTION
Task: {9E1B289E-3B88-4417-8C07-6CF422E0A14C} - \MEGA\MEGAsync Update Task S-1-5-21-3633014729-3307552484-3653661422-1000 -> Pas de fichier <==== ATTENTION


CMD: netsh winsock reset all
CMD: ipconfig /flushdns
hosts:
EmptyTemp:
Reboot:
end