Start::
CreateRestorePoint:
CloseProcesses:
C:\Program Files\Printkey.exe
DeleteKey: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}
DeleteKey: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32
DeleteKey: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32
DeleteKey: HKCU\Software\undefined
DeleteKey: HKCU\SOFTWARE\ef86af50-7bb5-54f9-bc93-d0c9b5f3046c
DeleteKey: HKU\S-1-5-21-3945607270-3015043715-2881395795-1000\SOFTWARE\ef86af50-7bb5-54f9-bc93-d0c9b5f3046c
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
ShortcutTarget: Printkey.lnk -> C:\Program Files\Printkey.exe (Fred's Software Company) [Fichier non signé]
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {16B96648-0FE5-428D-8FDF-719D1B1112FC} - \{111D9327-920B-453F-B9C9-43B899795086} -> Pas de fichier <==== ATTENTION
DeleteValue: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|Spotify
DeleteValue: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|QuickTime Task
DeleteValue: HKU\S-1-5-21-3945607270-3015043715-2881395795-1000\Software\Microsoft\Windows\CurrentVersion\Run|Spotify
DeleteKey: HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA}
AlternateDataStreams: C:\Users\Public\DRM:احتضان [48]
Hosts:
EmptyTemp:
End::