start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
HKU\S-1-5-21-1528309154-968215213-619587866-1003\...\MountPoints2: {e35ebba2-5ae6-11e9-9483-806e6f6e6963} - "E:\setup\setup.exe"
ShortcutTarget: $McRebootA5E6DEAA56$.lnk -> (Pas de fichier)
CHR Notifications: Default -> hxxps://blog.jacquesdemeter.fr; hxxps://fr.porn4you.xxx; hxxps://www.aol.com; hxxps://www.facebook.com; hxxps://www.famillevacher.fr; hxxps://www.fnac.com; hxxps://www.planetromeo.com
cmd: ipconfig /flushdns
emptytemp:
end::