start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
HKU\S-1-5-21-1409082233-839522115-725345543-66575 Group Policy restriction on software: C:\Program Files\Common Files\Java\Java Update\jusched.exe
HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore: [DisableSR/DisableConfig]
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
HKU\S-1-5-21-1409082233-839522115-725345543-66575\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
CHR HKU\S-1-5-21-1409082233-839522115-725345543-66575\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
2018-12-15 18:45 - 2018-12-15 18:45 - 000000000 _____ () C:\Users\herreman.sylvain\AppData\Local\{BF84963F-AF49-4A8B-B33F-5DCA9B2A3E35}
WinThruster (HKLM-x32\...\WinThruster_is1)
HKU\S-1-5-21-1409082233-839522115-725345543-66575\Software\Classes\.scr: DWGTrueViewScriptFile => C:\windows\system32\notepad.exe "%1"
IE trusted site: HKU\S-1-5-21-1409082233-839522115-725345543-66575\...\appspot.com -> hxxps://drive-utils.appspot.com
EmptyTemp:
cmd: ipconfig /flushdns
cmd: netsh advfirewall reset
end::