start::
closeprocesses:
createrestorepoint:
IE trusted site: HKU\S-1-5-21-633009231-2671329059-1315211732-1002\...\hola.org -> hxxp://hola.org
FirewallRules: [UDP Query User{B1F7F458-8955-40E7-A49F-3B69F8E7CD88}C:\program files\hola\app\chromium\hola_cr.exe] => (Allow) C:\program files\hola\app\chromium\hola_cr.exe => Pas de fichier
FirewallRules: [TCP Query User{96DB5935-0821-44C3-B562-761813DF5AC6}C:\program files\hola\app\chromium\hola_cr.exe] => (Allow) C:\program files\hola\app\chromium\hola_cr.exe => Pas de fichier
FirewallRules: [{144D7F51-C307-4967-A292-7A82779D2D4E}] => (Allow) D:\steam\bin\cef\cef.win7\steamwebhelper.exe => Pas de fichier
FirewallRules: [{AB6503A5-CAB1-4A59-82A1-691D109D8A1C}] => (Allow) D:\steam\bin\cef\cef.win7\steamwebhelper.exe => Pas de fichier
HKU\S-1-5-21-633009231-2671329059-1315211732-1002\...\MountPoints2: {462f5f9d-c452-11eb-b8c0-00d861514329} - "E:\OInstall.exe"
Startup: C:\Users\aless\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\stream.x64.x-all.dat.lnk [2021-06-22]
ShortcutAndArgument: stream.x64.x-all.dat.lnk -> C:\WINDOWS\system32\wscript.exe => /E:vbscript "C:\Users\aless\AppData\Roaming\stream.x64.x-all.dat.vbs"
C:\Users\aless\AppData\Roaming\stream.x64.x-all.dat.vbs
emptytemp:
end::