start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe
HKLM\...\Policies\Explorer: [NoInstrumentation] 1
HKLM\...\Policies\Explorer: [NoRecentDocsNetHood] 0
HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore: [DisableSR/DisableConfig]
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction
GroupPolicy: Restriction ? <==== ATTENTION
GroupPolicy\User: Restriction ? <==== ATTENTION
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {30A34B9C-ACAA-4519-940C-5508BF20B38D} - System32\Tasks\{31DDBD37-5DB7-4030-8064-10B0CAA806C3} => C:\Program Files\COMODO\COMODO Internet Security\cis.exe
U4 DiagTrack; pas de ImagePath
S3 SWDUMon; \SystemRoot\system32\DRIVERS\SWDUMon.sys [X]
2019-09-29 23:11 - 2019-09-29 23:17 - 000000000 ____D C:\Users\Enigma\AppData\Roaming\KSM
2019-09-28 13:22 - 2019-09-28 13:22 - 000000000 ____D C:\Users\Enigma\AppData\Roaming\Wise Euask
2019-10-01 14:33 - 2017-08-31 20:24 - 000000000 ___HD C:\VTRoot
2019-10-01 14:18 - 2016-12-27 23:26 - 000000000 ____D C:\Program Files (x86)\Wise
2018-10-29 18:37 - 2018-10-29 18:37 - 000000171 _____ () C:\Users\Enigma\AppData\Roaming\822f02e4-9e9a-4077-a765-71edfca16ad0
2018-10-29 18:37 - 2018-10-29 18:37 - 000001057 _____ () C:\Users\Enigma\AppData\Roaming\88e9dc3a-641c-4dc2-9204-9ba65cc42265
2016-12-22 00:12 - 2016-12-22 00:12 - 000000000 _____ () C:\Users\Enigma\AppData\Local\Driver_LOM_8171Present.flag
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
AlternateDataStreams: C:\ProgramData\TEMP:C31F31E6 [122]
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
EmptyTemp:
cmd: ipconfig /flushdns
end::