start::
CreateRestorePoint:
CloseProcesses:
RemoveProxy:
Task: {015A09B3-931C-4BF8-9BC0-4118369D3D75} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Pas de fichier
Task: {0EE57720-613F-40CF-B299-8EBCA7D8CC77} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Pas de fichier
Task: {11FF7AF6-D756-4C56-AE7F-060E34B89974} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Pas de fichier
Task: {16E1D70F-6F46-4087-B0FF-D4DBE0F0CC53} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Pas de fichier
Task: {4B7CF932-6377-4D1F-8959-2E430D5966E0} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Pas de fichier
Task: {7D4ACC43-ABF8-48AF-BDD4-D298E2CEB2B9} - \WPD\SqmUpload_S-1-5-21-4009318394-3256531958-2587531209-1004 -> Pas de fichier
Task: {8143FA70-1B64-454A-B88A-5A262F3C07E9} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Pas de fichier
Task: {84C4EE7A-E765-44AC-95A3-50133E2763E0} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Pas de fichier
Task: {8B3EF698-B7DA-444C-8FF1-CAA85AB8774B} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Pas de fichier
Task: {9649D1B3-4C18-4E5D-8E30-4BFBD4A85972} - \WPD\SqmUpload_S-1-5-21-4009318394-3256531958-2587531209-1001 -> Pas de fichier
Task: {A383476B-B575-454A-BC85-53B96BCF8D25} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Pas de fichier
Task: {AB02F52F-E16C-4702-A912-5B64FB0B5113} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Pas de fichier
Task: {BF393B60-4606-4FB5-B6CB-E79F9D9D4185} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Pas de fichier
Task: {E89BC225-0F98-449C-8CF5-4D2F123097A4} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Pas de fichier
Task: {EA682F72-72E0-45DB-8310-930C1BC4B415} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Pas de fichier
Task: {ECA41CF7-E61E-473C-8E66-045AE0D5D679} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier
SearchScopes: HKU\S-1-5-21-4009318394-3256531958-2587531209-1004 -> DefaultScope {2f23ab71-4ac6-41f2-a955-ea576e553146} URL =
FF Extension: (ZenMate Security, Privacy & Unblock VPN) - C:\Users\laura\AppData\Roaming\Mozilla\Firefox\Profiles\3su0p5y0.default-1505808383365\Extensions\firefox@zenmate.com.xpi
FF Extension: (Java-Redirector) - C:\Users\laura\AppData\Roaming\Mozilla\Firefox\Profiles\3su0p5y0.default-1505808383365\Extensions\{b75af37b-574d-4746-ac34-629fa349cf81}.xpi
S2 GamesAppIntegrationService; "C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe" [X]
S3 GamesAppService; "C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe" [X]
ShortcutWithArgument: C:\Users\laura\Favorites\Storm Codec.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.stormcodec.com
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
EmptyTemp:
cmd: ipconfig /flushdns
cmd: md C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database
cmd: DISM /Online /Cleanup-image /Restorehealth
end::