start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKU\S-1-5-21-3964081236-2966355866-2484160079-1001\...\Run: [MicrosoftEdgeAutoLaunch_8E32580D4032BD4E45D3D85AB6E09F85] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5
HKU\S-1-5-21-3964081236-2966355866-2484160079-1001\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\ADMIN\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" (Pas de fichier)
HKU\S-1-5-21-3964081236-2966355866-2484160079-1001\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\ADMIN\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" (Pas de fichier)
HKU\S-1-5-21-3964081236-2966355866-2484160079-1001\...\RunOnce: [Uninstall 22.121.0605.0002] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\ADMIN\AppData\Local\Microsoft\OneDrive\22.121.0605.0002" (Pas de fichier)
HKU\S-1-5-21-3964081236-2966355866-2484160079-1006\...\Run: [MicrosoftEdgeAutoLaunch_E366E5E6AF98057EB6410578BC1FD47F] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5
2022-07-08 21:42 - 2022-07-08 21:42 - 000000000 _____ C:\Users\gabri\Downloads\Non confirmé 574032.crdownload
SearchScopes: HKU\S-1-5-21-3964081236-2966355866-2484160079-1006 -> DefaultScope {156CD203-2396-4534-9D14-7496D539BD39} URL =
SearchScopes: HKU\S-1-5-21-3964081236-2966355866-2484160079-1006 -> {156CD203-2396-4534-9D14-7496D539BD39} URL =
EmptyTemp:
cmd: ipconfig /flushdns
cmd: netsh winsock reset
end::