start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
Task: {4CEA3B73-9AEB-4269-B06E-A35B9DF4864B} - System32\Tasks\{31DDBD37-5DB7-4030-8064-10B0CAA806C3} => C:\Program Files\COMODO\COMODO Internet Security\cis.exe
CHR StartupUrls: Default -> "hxxps://fr.yahoo.com/?fr=fpc-comodo&type=81_6113006_77.0.3865.121_u_hp_sp"
2021-04-01 17:26 - 2019-08-05 22:39 - 000000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2021-04-01 17:25 - 2019-08-05 22:39 - 000000000 ____D C:\ProgramData\Spybot - Search & Destroy
2021-04-01 17:24 - 2019-08-05 22:38 - 000000000 ____D C:\Program Files (x86)\MRU-Blaster
SearchScopes: HKU\S-1-5-21-415056769-3163022178-2462379899-1001 -> {0AA24E16-07B3-4694-8357-3C21ACC5F516} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TweakingRemoveSafeBoot => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TweakingRemoveSafeBoot => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\shellhwdetection => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\shellhwdetection => ""="Service"
EmptyTemp:
cmd: netsh advfirewall reset
cmd: ipconfig /flushdns
cmd: netsh winsock reset
cmd: sfc /scannow
cmd: DISM /Online /Cleanup-image /Restorehealth
end::