Start::
CreateRestorePoint:
CloseProcesses:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction
HKU\S-1-5-21-1250651149-2647352685-762605846-1001\...\Policies\Explorer: [NoInstrumentation] 1
GroupPolicy: Restriction ? 
Policies: C:\ProgramData\NTUSER.pol: Restriction 
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction 
HKLM\SOFTWARE\Policies\Google: Restriction
Task: {DF0A7233-156F-417B-9960-1E8133D96DDE} - System32\Tasks\UpdateTaskMachineBZ => C:\Users\Public\start.exe (Pas de fichier)
C:\Users\Public\start.exe
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction
Edge HKLM-x32\...\Edge\Extension: [caiblelclndcckfafdaggpephhgfpoip]
Edge HKLM-x32\...\Edge\Extension: [emgfgdclgfeldebanedpihppahgngnle]
CHR DefaultSearchURL: Default -> hxxps://www.thesafesearch.net/search/?category=web&s=eipr&vert=private&q={searchTerms}
CHR DefaultSearchKeyword: Default -> Browse Privately
CHR DefaultSuggestURL: Default -> hxxps://sug.thesafesearch.net/v1/sug/?yid=eipr&vert=private&q={searchTerms}
CHR HKLM\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM-x32\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
CHR HKLM-x32\...\Chrome\Extension: [hdokiejnpimakedhajhdlcegeplioahd]
EmptyTemp:
End::