start::
closeprocesses:
createrestorepoint:
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
Edge DefaultSearchURL: Default -> {bing:baseURL}search?q={searchTerms}&{bing:cvid}{bing:msb}{google:assistedQueryStats}
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
S2 DgiVecp; \??\C:\WINDOWS\system32\Drivers\DgiVecp.sys [X]
2022-09-10 10:55 - 2022-09-10 11:40 - 000000000 ____D C:\Users\slyg\AppData\Roaming\ZHP
2022-09-10 10:55 - 2022-09-10 10:55 - 000000000 ____D C:\Users\slyg\AppData\Local\ZHP
cmd: sfc /scannow
emptytemp:
end::