Start::
CreateRestorePoint:
CloseProcesses:
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction
HKU\S-1-5-21-3580634007-1832247221-977927462-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://fr.search.yahoo.com/yhs/web?hspart=omr&hsimp=yhs-001&type=87pjerwruz9bdfhjlxsikmoqsudj1003919¶m1=y6bdVFVIsvuYsgEClQfz8K%2Bo6Q0vSSZ8NEpnXTnSHR%2BAMqd6k0TpXqFG28qWUDFbY5Bjmx49YRj2hZgP6ShYlhkec9Uu9fqKgcX3wwkldyhmPgMcj9V5W%2F9fhj617Is7RMZJkRfmxAnjNY2APu8avHrDCPRgBdgLI6MYnq5xy07b3IFtDJ%2BO7u7V0ZfhrHj0fIQ%2FIZBA4Ri4DXpxn34HvLs8ekn9EWAYoyz3gKS07uqOPwjs7P8lmOn7sIYiNq2QB040QD2vDWc2BDHOdV8np9dAexChNgTllMsLG3AbXfqEY2dJXnwy9hIDp1sJEmoxqyaYUwtBHjOKsZl%2FS0lj3yYyjDMJKLk0Q%2FMn%2BBbH%2Be94BXXEGMZs7%2FZRXty31wBVjYg%2FxEA6UL5eaatguiajMwybSJ5UrKPlhQn8j2FF7jQ%3D
HKU\S-1-5-21-3580634007-1832247221-977927462-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.oem15.msn.com/?pc=NMTE
SearchScopes: HKU\S-1-5-21-3580634007-1832247221-977927462-1001 -> DefaultScope {BB37379D-C433-4ECC-8053-4EA2D67CB4A6} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=omr&hsimp=yhs-001&type=87pjerwruz9bdfhjlxsikmoqsudj1003919¶m1=y6bdVFVIsvuYsgEClQfz8K%2Bo6Q0vSSZ8NEpnXTnSHR%2BAMqd6k0TpXqFG28qWUDFbY5Bjmx49YRj2hZgP6ShYlhkec9Uu9fqKgcX3wwkldyizEzdc7TZpbO6SUK54c9Ez5JADxwjCvIXwpeOh%2B8RbDeualnlP4n0ZpxSpmC27UOJUR%2FpMhPyigKpt9AACjMGpCsVCYhfDV7G3uH1lr7ihI8JolbsddIUPl6ivrA6kB4A0RZr%2FCY6oJ2ZM1HKYIiaX6xdScYKK3sqYyEuuc3Ken%2BqyQLFp3wMv6pYWM4QGMjiXBdq04UohmLGqNXueQs6OaW96fP3m7eAfIPfQRVK7qfQLa7%2F%2Fwn3OEC1EpwTdQ%2F6lC7BQZHtjmB%2BT8RpTxu6Zqd8ACjE5wwh0L5s%2BlrS2XA%3D%3D&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3580634007-1832247221-977927462-1001 -> {4CDC0335-C473-4990-81B9-AE6C16BF6B5D} URL =
SearchScopes: HKU\S-1-5-21-3580634007-1832247221-977927462-1001 -> {BA37379D-C433-4ECC-8053-4EA2D67CB4A6} URL =
SearchScopes: HKU\S-1-5-21-3580634007-1832247221-977927462-1001 -> {BB37379D-C433-4ECC-8053-4EA2D67CB4A6} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=omr&hsimp=yhs-001&type=87pjerwruz9bdfhjlxsikmoqsudj1003919¶m1=y6bdVFVIsvuYsgEClQfz8K%2Bo6Q0vSSZ8NEpnXTnSHR%2BAMqd6k0TpXqFG28qWUDFbY5Bjmx49YRj2hZgP6ShYlhkec9Uu9fqKgcX3wwkldyizEzdc7TZpbO6SUK54c9Ez5JADxwjCvIXwpeOh%2B8RbDeualnlP4n0ZpxSpmC27UOJUR%2FpMhPyigKpt9AACjMGpCsVCYhfDV7G3uH1lr7ihI8JolbsddIUPl6ivrA6kB4A0RZr%2FCY6oJ2ZM1HKYIiaX6xdScYKK3sqYyEuuc3Ken%2BqyQLFp3wMv6pYWM4QGMjiXBdq04UohmLGqNXueQs6OaW96fP3m7eAfIPfQRVK7qfQLa7%2F%2Fwn3OEC1EpwTdQ%2F6lC7BQZHtjmB%2BT8RpTxu6Zqd8ACjE5wwh0L5s%2BlrS2XA%3D%3D&p={searchTerms}
Edge HomeButtonPage: HKU\S-1-5-21-3580634007-1832247221-977927462-1001 -> hxxps://fr.search.yahoo.com/yhs/web?hspart=omr&hsimp=yhs-001&type=87pjerwruz9bdfhjlxsikmoqsudj1003919¶m1=y6bdVFVIsvuYsgEClQfz8K%2Bo6Q0vSSZ8NEpnXTnSHR%2BAMqd6k0TpXqFG28qWUDFbY5Bjmx49YRj2hZgP6ShYliqEk7P92Mgr2ERoosWLv%2FJA%2BU9OTMhZ2GV%2FgIVMMARRTuqC%2BbJDlwUSnb1hh9bUhKTNnGCrTmA6PtvI8BDdlYE4%2Fov95wXfclkOaLXwNCuT4QDc09RB3BMaHrwGtngSm2XHWZNnp2NmAb%2BVttQePbDjdNjvVq16%2BISzNWivr3UNk4YUZepkdmKXE1CWV6mKWbPKqvO6pyqjAouCtRXrG8KLJYtuMi9HIYwisH4pGKmRY0jhvOBiOaD1Os%2FxuKi4c%2BwkWyJc7Gda28YmKZ6wqoOLrUkZN2k5%2BdRB54xjMJqmgHNNdwPR56NEXXgYhEe8eoPGkQz3MESlli6fpnjx6NQ%3D
CHR HomePage: Default -> hxxps://fr.search.yahoo.com/yhs/web?hspart=omr&hsimp=yhs-001&type=87pjerwruz9bdfhjlxsikmoqsudj1003919¶m1=y6bdVFVIsvuYsgEClQfz8K%2Bo6Q0vSSZ8NEpnXTnSHR%2BAMqd6k0TpXqFG28qWUDFbY5Bjmx49YRj2hZgP6ShYlrcZRgrVZpAvscSnjfkdbHdPZTLVEfImwhlJ%2FHUrv7rTyM1rhkXa4WO%2FPieY5KvTI52yI6PWSSexyQ4LAPY6KmSW8nWTGMPZgPJ3kvfRJawsVvfhSWk0eSTMVdaIZje2YkYkiNTpfr8InZWhQjTsPc0BjiLmfE4aIsUyUbc%2FE%2BSLavyvaMxiVhmkgYZWIoRtak5GnrRnPPggakcDCNvFNY40L60B%2FnaA4EXV2eAPVo%2BatmpSPNvYezic7%2Bw8CSdt7fr80LCjwIdySkRP79EmbavIwnFU9c2ENYpCgc0qv8oJ10UFxTYqyNAhyw5EvsyMCONOklp0IE7n3%2ByjRA0psW4%3D
2019-09-26 17:38 - 2019-09-26 18:29 - 000000000 ____D C:\Users\Zukrad\AppData\Local\chromium
2019-09-26 17:36 - 2019-10-09 20:04 - 000000000 ____D C:\ProgramData\Segurazo
2019-09-26 17:36 - 2019-10-09 20:04 - 000000000 ____D C:\Program Files (x86)\Segurazo
2019-09-26 17:36 - 2019-09-26 18:29 - 000000000 ____D C:\Program Files (x86)\Chromium
AlternateDataStreams: C:\Users\Public\AppData:CSM [478]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [482]
EmptyTemp:
End::