start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
ShortcutAndArgument: Adobe.IPC.lnk -> C:\WINDOWS\system32\wscript.exe => /E:vbscript "C:\Users\Inrepublica\AppData\Roaming\Adobe.IPC.vbs"
Startup: C:\Users\Inrepublica\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe.IPC.lnk
BootExecute: autocheck autochk * sdnclean64.exe
GroupPolicy: Restriction ? <==== ATTENTION
GroupPolicy\User: Restriction ? <==== ATTENTION
SearchScopes: HKU\S-1-5-21-631129171-4131166031-1247143335-1001 -> {D3172974-CB11-4C6B-AF51-43ADC6583FFF} URL = hxxps://fr.search.yahoo.com/search?p=
CHR HKU\S-1-5-21-631129171-4131166031-1247143335-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKLM-x32\...\Chrome\Extension: [fdbpcigaolookbahgdofnimidinicfid]
2019-12-24 11:16 - 2019-12-24 11:23 - 000000000 ____D C:\ProgramData\HitmanPro
ContextMenuHandlers1: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => -> Pas de fichier
ContextMenuHandlers2: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => -> Pas de fichier
ContextMenuHandlers6: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => -> Pas de fichier
EmptyTemp:
cmd: ipconfig /flushdns
end::