Start::
CreateRestorePoint:
CloseProcesses:
DeleteKey: HKEY_USERS\S-1-5-21-1628460482-1749839512-3475147610-1000\Software\csastats
DeleteKey: HKCU\Software\csastats
DeleteKey: HKCU\Software\ProductSetup
DeleteKey: HKU\S-1-5-21-1628460482-1749839512-3475147610-1000\SOFTWARE\csastats
DeleteKey: HKU\S-1-5-21-1628460482-1749839512-3475147610-1000\SOFTWARE\ProductSetup
StartRegEdit:
Windows Registry Editor Version 5.00
[HKCU\SOFTWARE\Microsoft\Internet Explorer\Main]
"Start Page"="about:Blank"
[HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E0CFC9BD-7D0B-4D09-8715-5E018AA285AC}]
"URL"=""
EndRegEdit:
DeleteKey: HKCU\Software\undefined
DeleteKey: HKU\S-1-5-21-1628460482-1749839512-3475147610-1000\SOFTWARE\undefined
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{AEEBD97C-C820-4EFB-AF52-2ED1183D0FD3}
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{2847B20B-DDDD-474E-B867-B87C26C15B71}
C:\Windows\Installer\1445b33.msp
C:\Windows\Installer\17895c0.msp
C:\Windows\Installer\263000.msp
C:\Windows\Installer\f2ff2.msp
DeleteKey: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E0CFC9BD-7D0B-4D09-8715-5E018AA285AC}
C:\Users\ACER\AppData\Local\Google\Chrome\User Data\Default\File System\000
C:\Users\ACER\AppData\Local\Google\Chrome\User Data\Default\File System\001
C:\Users\ACER\AppData\Local\Google\Chrome\User Data\Default\File System\002
C:\Users\ACER\AppData\Local\Google\Chrome\User Data\Default\File System\003
C:\Users\ACER\AppData\Local\Google\Chrome\User Data\Default\File System\004
C:\Users\ACER\AppData\Local\Google\Chrome\User Data\Default\File System\005
C:\Users\ACER\AppData\Local\Google\Chrome\User Data\Default\File System\006
C:\Users\ACER\AppData\Local\Google\Chrome\User Data\Default\File System\007
C:\Users\ACER\AppData\Local\Google\Chrome\User Data\Default\File System\008
C:\Users\ACER\AppData\Local\Google\Chrome\User Data\Default\File System\009
C:\Users\ACER\AppData\Local\Google\Chrome\User Data\Default\File System\010
C:\Users\ACER\AppData\Local\Google\Chrome\User Data\Default\File System\011
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
EmtyTemp:
Hosts:
RemoveProxy:
End::