start::
CreateRestorePoint:
CloseProcesses:
AlternateDataStreams: C:\Users\Admin\AppData\Local\Temp:$DATA​ [16]
FirewallRules: [{4BD8D197-AECF-494C-9131-F2E780282B3D}] => (Allow) C:\Users\Admin\AppData\Roaming\Zoom\bin\airhost.exe => Pas de fichier
FirewallRules: [{8A8CE230-B5D7-4C8C-B24A-D542CB296894}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => Pas de fichier
FirewallRules: [{B9F1990A-E325-4197-99C6-618C9F0B2552}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => Pas de fichier
FirewallRules: [TCP Query User{59EB2BC8-EB89-471F-93B2-764D145EB1FA}C:\users\admin\appdata\local\programs\opera\67.0.3575.137\opera.exe] => (Block) C:\users\admin\appdata\local\programs\opera\67.0.3575.137\opera.exe => Pas de fichier
FirewallRules: [UDP Query User{A1D7DBE6-D066-4B16-99D8-1802C0D02BD7}C:\users\admin\appdata\local\programs\opera\67.0.3575.137\opera.exe] => (Block) C:\users\admin\appdata\local\programs\opera\67.0.3575.137\opera.exe => Pas de fichier
FirewallRules: [TCP Query User{D89EFE3E-2AF6-4DB6-850C-F65ABD8E7AE8}C:\users\admin\appdata\local\programs\opera\68.0.3618.63\opera.exe] => (Block) C:\users\admin\appdata\local\programs\opera\68.0.3618.63\opera.exe => Pas de fichier
FirewallRules: [UDP Query User{ED9F9643-B337-4B0D-BC2E-0D5E113C02A8}C:\users\admin\appdata\local\programs\opera\68.0.3618.63\opera.exe] => (Block) C:\users\admin\appdata\local\programs\opera\68.0.3618.63\opera.exe => Pas de fichier
FirewallRules: [TCP Query User{8EDDF5AA-8ECF-4A23-BE8E-7C19079DF3C8}C:\program files\videolan\vlc\vlc.exe] => (Block) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [UDP Query User{9A98B92B-612E-436D-B496-B18A21FA9653}C:\program files\videolan\vlc\vlc.exe] => (Block) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [TCP Query User{EF448EF2-AAA4-4767-B61E-24F2264F4532}C:\users\admin\appdata\local\programs\opera\68.0.3618.104\opera.exe] => (Block) C:\users\admin\appdata\local\programs\opera\68.0.3618.104\opera.exe => Pas de fichier
FirewallRules: [UDP Query User{B354DFBB-7F41-472B-A074-1D60ACECEDA8}C:\users\admin\appdata\local\programs\opera\68.0.3618.104\opera.exe] => (Block) C:\users\admin\appdata\local\programs\opera\68.0.3618.104\opera.exe => Pas de fichier
FirewallRules: [TCP Query User{DE8AAFD0-689F-44D3-A955-E1BE2AFDFC8F}C:\users\admin\appdata\local\programs\opera\68.0.3618.125\opera.exe] => (Block) C:\users\admin\appdata\local\programs\opera\68.0.3618.125\opera.exe => Pas de fichier
FirewallRules: [UDP Query User{115D6CBD-A22F-4F44-BFA5-2881FF8E97A8}C:\users\admin\appdata\local\programs\opera\68.0.3618.125\opera.exe] => (Block) C:\users\admin\appdata\local\programs\opera\68.0.3618.125\opera.exe => Pas de fichier
FirewallRules: [TCP Query User{CEA73AD1-8F22-4E8E-A44D-B5C2C6C6B97C}C:\users\admin\appdata\local\programs\opera\68.0.3618.165\opera.exe] => (Block) C:\users\admin\appdata\local\programs\opera\68.0.3618.165\opera.exe => Pas de fichier
FirewallRules: [UDP Query User{B286B9B0-B590-4537-A0D8-CE93A058ABF1}C:\users\admin\appdata\local\programs\opera\68.0.3618.165\opera.exe] => (Block) C:\users\admin\appdata\local\programs\opera\68.0.3618.165\opera.exe => Pas de fichier
FirewallRules: [TCP Query User{133438DD-7008-4F93-A00F-4614337A22FC}C:\users\admin\appdata\local\programs\opera\68.0.3618.173\opera.exe] => (Block) C:\users\admin\appdata\local\programs\opera\68.0.3618.173\opera.exe => Pas de fichier
FirewallRules: [UDP Query User{CCEB3EAC-04E4-4206-B7B2-DF99C4E53D3E}C:\users\admin\appdata\local\programs\opera\68.0.3618.173\opera.exe] => (Block) C:\users\admin\appdata\local\programs\opera\68.0.3618.173\opera.exe => Pas de fichier
cmd: md C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database
cmd: DISM /Online /Cleanup-image /Restorehealth
C:\Windows\Temp\*.*
C:\Users\CurrentUserName\AppData\Local\Temp\*.*
end::