Start::
CloseProcesses:
CreateRestorePoint:
Removeproxy:
Hosts:
C:\Program Files (x86)\UNWISE.EXE
HKU\S-1-5-21-2457494525-961283668-3758402138-1001\...\MountPoints2: {3ba91fe4-7458-11ea-93da-5c260a054c56} - "D:\autorun.exe"
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction
CHR HKLM\SOFTWARE\Policies\Google: Restriction
AlternateDataStreams: C:\Windows:nlsPreferences [0]
SearchScopes: HKU\S-1-5-21-2457494525-961283668-3758402138-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FirewallRules: [{87647B13-8DC1-4B5B-BE79-B5023E50E80E}] => (Allow) C:\Program Files (x86)\Baidu WiFiHotspot\WifiHotspot.exe => Pas de fichier
FirewallRules: [{5BBE1F3E-4071-4D83-8E60-90E1530B7D99}] => (Allow) C:\Program Files (x86)\Baidu WiFiHotspot\WifiHotspot.exe => Pas de fichier
FirewallRules: [{F4F6951E-845A-4F29-805A-65C9982BB97F}] => (Allow) C:\Users\dell\AppData\Local\Temp\DriverPack-20191130122454\tools\aria2c.exe => Pas de fichier
FirewallRules: [{A91081F2-BF85-46CB-8D8E-7725CC2E3FF5}] => (Allow) C:\Users\dell\AppData\Roaming\Zoom\bin\airhost.exe => Pas de fichier
FirewallRules: [{090D6066-088A-4F69-AAA0-CC8B97313732}] => (Allow) C:\Users\dell\AppData\Roaming\Zoom\bin\Zoom.exe => Pas de fichier
cmd: ipconfig /flushdns
cmd: netsh advfirewall reset
cmd: netsh advfirewall set allprofiles state on
cmd: netsh winsock reset
StartPowershell:
DISM /Online /Cleanup-image /Restorehealth
EndPowershell:
cmd: sfc /scannow
Emptytemp:
End::