start 
CreateRestorePoint: 
CloseProcesses: 
RemoveProxy: 

HKU\S-1-5-21-3633014729-3307552484-3653661422-1000\...\Policies\Explorer: [DisallowRun] 1 
HKU\S-1-5-21-3633014729-3307552484-3653661422-1000\...\Policies\Explorer\DisallowRun: [1] Mshta.exe 
HKU\S-1-5-21-3633014729-3307552484-3653661422-1000\...\Policies\Explorer\DisallowRun: [2] powershell.exe 
HKU\S-1-5-21-3633014729-3307552484-3653661422-1000\...\Policies\Explorer\DisallowRun: [3] bitsadmin.exe 
BootExecute: autocheck autochk * bootdelete 
GroupPolicy: Restriction ? <==== ATTENTION 
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch 
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome 
HKU\S-1-5-21-3633014729-3307552484-3653661422-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch 
HKU\S-1-5-21-3633014729-3307552484-3653661422-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/ar-eg/?ocid=iehp 
S3 catchme; \??\C:\Users\mgss\AppData\Local\Temp\catchme.sys [X] 
U2 ERSvc; pas de ImagePath 
U2 IAStorDataMgrsvc; pas de ImagePath 
U2 NIHardwareService; pas de ImagePath 
U2 NVSvc; pas de ImagePath 
U2 srService; pas de ImagePath 
Task: {324ECADB-C6FD-4AAC-90EA-98F1A565625B} - \Similar Photo Cleaner_Logon -> Pas de fichier <==== ATTENTION 
Task: {62A3CF33-1844-4A42-8037-0B40F4E97FB3} - \AutoKMS -> Pas de fichier <==== ATTENTION 
Task: {9E1B289E-3B88-4417-8C07-6CF422E0A14C} - \MEGA\MEGAsync Update Task S-1-5-21-3633014729-3307552484-3653661422-1000 -> Pas de fichier <==== ATTENTION 


CMD: netsh winsock reset all 
CMD: ipconfig /flushdns 
hosts: 
EmptyTemp: 
Reboot: 
end