Start::
CloseProcesses:
CreateRestorePoint:
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
Task: {7D045EF7-036C-444D-8E5E-0DA6B588C44F} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
HKU\S-1-5-21-2907199886-734749801-480674449-1001\...\Run: [AdobeBridge] => [X]
Tcpip\..\Interfaces\{4ae36378-f904-4d2e-8529-9b1bf2749fe1}: [DhcpNameServer] 40.51.1.12
AlternateDataStreams: C:\ProgramData\TEMP:15D23447 [250]
AlternateDataStreams: C:\ProgramData\TEMP:1ACA8A2F [278]
AlternateDataStreams: C:\ProgramData\TEMP:2CB9631F [134]
AlternateDataStreams: C:\ProgramData\TEMP:37B48C40 [149]
AlternateDataStreams: C:\ProgramData\TEMP:46DC63D1 [137]
AlternateDataStreams: C:\ProgramData\TEMP:80AC539F [302]
AlternateDataStreams: C:\ProgramData\TEMP:D3C0A8F3 [130]
AlternateDataStreams: C:\ProgramData\TEMP:DC7EDF41 [126]
AlternateDataStreams: C:\ProgramData\TEMP:FA045AC8 [240]
HKU\S-1-5-21-2907199886-734749801-480674449-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus17win10.msn.com/?pc=ASTE
HKU\S-1-5-21-2907199886-734749801-480674449-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus17win10.msn.com/?pc=ASTE
SearchScopes: HKU\S-1-5-21-2907199886-734749801-480674449-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2907199886-734749801-480674449-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FirewallRules: [TCP Query User{8DC37C4C-790A-46D0-9A13-F3CDF2C24ABE}C:\program files (x86)\windscribe\wsappcontrol.exe] => (Allow) C:\program files (x86)\windscribe\wsappcontrol.exe => Pas de fichier
FirewallRules: [UDP Query User{E33454F7-1BA1-4BD6-B755-C2E922A6DB6D}C:\program files (x86)\windscribe\wsappcontrol.exe] => (Allow) C:\program files (x86)\windscribe\wsappcontrol.exe => Pas de fichier
FirewallRules: [{20C5EB6B-91E2-4165-94B3-3588B41EFFBF}] => (Block) C:\program files (x86)\windscribe\wsappcontrol.exe => Pas de fichier
FirewallRules: [{35BE9BE1-97FC-4701-836F-291C4E140CF8}] => (Block) C:\program files (x86)\windscribe\wsappcontrol.exe => Pas de fichier
FirewallRules: [{0D147768-9263-46B9-B652-1E38B24345B0}] => (Allow) C:\Users\vilme\AppData\Roaming\Zoom\bin\airhost.exe => Pas de fichier
FirewallRules: [{1C3A608E-944F-48A7-AAF7-DC75BBFC8A56}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe => Pas de fichier
FirewallRules: [{424FD816-8A35-4928-B9EC-9BBAF18EA2CD}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe => Pas de fichier


cmd: cscript %windir%\System32\slmgr.vbs /dli
EmptyTemp:
Cmd: ipconfig /flushdns
End::