start::
CreateRestorePoint:
CloseProcesses:
Hosts:
FirewallRules: [{2712A95D-802A-4238-B59C-C3B1336FC64E}] => (Allow) C:\Users\Admin\AppData\Local\Temp\7zS0F0B\HPDiagnosticCoreUI.exe
FirewallRules: [{7EEDDF4D-2139-4FB4-81C0-49B0A0943EAB}] => (Allow) C:\Users\Admin\AppData\Local\Temp\7zS0F0B\HPDiagnosticCoreUI.exe
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
FF Extension: (Avast SafePrice) - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dwc5mrlp.default-1455908844130\Extensions\sp@avast.com.xpi [2018-06-24]
FF Extension: (Avast Online Security) - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\dwc5mrlp.default-1455908844130\Extensions\wrc@avast.com.xpi [2018-05-26]
FF Extension: (WebCompat Reporter) - C:\Program Files (x86)\Mozilla Firefox\browser\features\webcompat-reporter@mozilla.org.xpi [2018-07-06] [Legacy] [non signé]
RemoveProxy:
EmptyTemp:
cmd: ipconfig /flushdns
end::