Start::
CloseProcesses:
CreateRestorePoint:
Removeproxy:
Hosts:
HKU\S-1-5-21-962550837-704519019-1221734790-1001\Software\Classes\regfile: <==== ATTENTION
HKU\S-1-5-21-962550837-704519019-1221734790-1001\Software\Classes\.reg: => <==== ATTENTION
HKU\S-1-5-21-962550837-704519019-1221734790-1001\Software\Classes\.bat: => <==== ATTENTION
HKU\S-1-5-21-962550837-704519019-1221734790-1001\Software\Classes\.cmd: => <==== ATTENTION
IE trusted site: HKU\S-1-5-21-962550837-704519019-1221734790-1001\...\download.microsoft.com -> hxxp://download.microsoft.com
IE trusted site: HKU\S-1-5-21-962550837-704519019-1221734790-1001\...\download.windowsupdate.com -> hxxp://download.windowsupdate.com
IE trusted site: HKU\S-1-5-21-962550837-704519019-1221734790-1001\...\download.windowsupdate.com -> hxxps://download.windowsupdate.com
IE trusted site: HKU\S-1-5-21-962550837-704519019-1221734790-1001\...\microsoft.com -> hxxp://ntservicepack.microsoft.com
IE trusted site: HKU\S-1-5-21-962550837-704519019-1221734790-1001\...\ntservicepack.microsoft.com -> hxxp://ntservicepack.microsoft.com
IE trusted site: HKU\S-1-5-21-962550837-704519019-1221734790-1001\...\update.microsoft.com -> hxxp://update.microsoft.com
IE trusted site: HKU\S-1-5-21-962550837-704519019-1221734790-1001\...\update.microsoft.com -> hxxps://update.microsoft.com
IE trusted site: HKU\S-1-5-21-962550837-704519019-1221734790-1001\...\windows.com -> hxxp://wustat.windows.com
IE trusted site: HKU\S-1-5-21-962550837-704519019-1221734790-1001\...\windowsupdate.com -> hxxp://download.windowsupdate.com
IE trusted site: HKU\S-1-5-21-962550837-704519019-1221734790-1001\...\windowsupdate.com -> hxxps://download.windowsupdate.com
IE trusted site: HKU\S-1-5-21-962550837-704519019-1221734790-1001\...\windowsupdate.microsoft.com -> hxxp://windowsupdate.microsoft.com
IE trusted site: HKU\S-1-5-21-962550837-704519019-1221734790-1001\...\ws.microsoft.com -> hxxp://ws.microsoft.com
IE trusted site: HKU\S-1-5-21-962550837-704519019-1221734790-1001\...\ws.microsoft.com -> hxxps://ws.microsoft.com
IE trusted site: HKU\S-1-5-21-962550837-704519019-1221734790-1001\...\wustat.windows.com -> hxxp://wustat.windows.com
cmd: powershell Dism.exe /online /Cleanup-Image /StartComponentCleanup
cmd: powershell Dism.exe /online /Cleanup-Image /StartComponentCleanup /ResetBase
cmd: powershell Dism.exe /Online /Cleanup-image /Restorehealth
cmd: powershell sfc /scannow
cmd: ipconfig /flushdns
cmd: netsh advfirewall reset
cmd: netsh advfirewall set allprofiles state on
cmd: netsh winsock reset
Emptytemp:
End::