start CloseProcesses: CreateRestorePoint: SearchScopes: HKU\S-1-5-21-3411039410-3390015242-4192982848-1001 -> DefaultScope {643C4BD4-6696-4E6B-A12B-3E7D668AA891} URL = SearchScopes: HKU\S-1-5-21-3411039410-3390015242-4192982848-1001 -> {643C4BD4-6696-4E6B-A12B-3E7D668AA891} URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-3411039410-3390015242-4192982848-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank CHR StartupUrls: Default -> "hxxps://webmail1e.orange.fr/webmail/fr_FR/inbox.html?&dub=1&FromSubmit=true","hxxps://www.facebook.com/?ref=tn_tnmn","hxxps://www.google.fr/webhp?source=search_app" EmptyTemp: end