start::
closeprocesses:
createrestorepoint:
deletekey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
CHR DefaultSearchURL: Default -> hxxps://www.google.com/search?q={searchTerms}&btnK=Recherche+Google&source=hp&ei=szQCYaT1HNK4lwTtlKjYAg&iflsig=AINFCbYAAAAAYQJCwyLbuiXoDzferBrEKWEno65IIemV&oq=abd&gs_lcp=Cgdnd3Mtd2l6EAMyBQgAELEDMggIABCxAxCDATICCAAyCAgAELEDEIMBMggIABCxAxCDATIFCAAQsQMyBQgAELEDMggILhDHARCjAjICCC4yAggAOgsILhCxAxDHARCjAlBkWL8EYNEFaABwAHgAgAFriAHEAZIBAzEuMZgBAKABAaoBB2d3cy13aXo&sclient=gws-wiz&ved=0ahUKEwjkmp7FvofyAhVS3IUKHW0KCisQ4dUDCAg&uact=5
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfhcmdonhekjhfbjmeacdjbhlfgpjabp
CHR HKLM-x32\...\Chrome\Extension: [mfhcmdonhekjhfbjmeacdjbhlfgpjabp]
C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk
HKU\S-1-5-21-1679550381-4098076221-200382707-1001\...\MountPoints2: {6f6396db-8063-11eb-a82a-6c6a770b9464} - "E:\AutoRun.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\$McRebootA5E6DEAA56$.lnk [2021-07-29]
ShortcutTarget: $McRebootA5E6DEAA56$.lnk -> (Pas de fichier)
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
FF HKLM\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSKHKLM => non trouvé(e)
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\File System\*
emptytemp:
end::