start::
CreateRestorePoint:
CloseProcesses:
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe (Pas de fichier)
HKU\S-1-5-21-957336213-2572282109-373355364-1001\...\Run: [pCloud] => C:\Program Files\pCloud Drive\pCloud.exe (Pas de fichier)
HKU\S-1-5-21-957336213-2572282109-373355364-1001\...\RunOnce: [Application Restart #2] => C:\Users\Mlle_\AppData\Roaming\GaomonTablet\TabletDriver.exe \@BrandName\@ : \@Gaomon\@,* \@CfgWnd\@ : 66284,* \@CustomerCode\@ : [ \@GM001\@, \@OEM02\@ ],* \@DataPath\@ : \@C:\\Users\\Mlle_\\Ap (l'élément de données a 130 caractères en plus). (Pas de fichier)
HKU\S-1-5-21-957336213-2572282109-373355364-1001\...\RunOnce: [Application Restart #3] => C:\Users\Mlle_\AppData\Roaming\GaomonTablet\TabletServer.exe Json={* \@AdUrl\@ : \@\@,* \@BrandName\@ : \@Gaomon\@,* \@CfgWndMark\@ : \@GaomonWndMark\@,* \@DataPath\@ : \@C:\\Users\\Mlle_\\App (l'élément de données a 193 caractères en plus). (Pas de fichier)
GroupPolicy: Restriction ? <==== ATTENTION
GroupPolicy-Firefox: Restriction <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
FirewallRules: [TCP Query User{3AAE6D3D-4D72-441D-9F8D-AE9C9FFCAC0D}C:\program files\pcloud drive\pcloud.exe] => (Allow) C:\program files\pcloud drive\pcloud.exe => Pas de fichier
FirewallRules: [UDP Query User{30F0C851-6E04-4132-B07C-176228A81924}C:\program files\pcloud drive\pcloud.exe] => (Allow) C:\program files\pcloud drive\pcloud.exe => Pas de fichier
FirewallRules: [{32B6D293-2305-41F6-A491-A2BF4121E541}] => (Block) C:\program files\pcloud drive\pcloud.exe => Pas de fichier
FirewallRules: [{565884AA-93DE-4FEE-A130-55AC78855B6F}] => (Block) C:\program files\pcloud drive\pcloud.exe => Pas de fichier
FirewallRules: [TCP Query User{E314A40A-E15E-444C-88BC-EB57BF96E28B}C:\users\mlle_\appdata\local\discord\app-1.0.9010\discord.exe] => (Allow) C:\users\mlle_\appdata\local\discord\app-1.0.9010\discord.exe => Pas de fichier
FirewallRules: [UDP Query User{26301E2E-06B6-49FF-A90C-3D568FDF0EF9}C:\users\mlle_\appdata\local\discord\app-1.0.9010\discord.exe] => (Allow) C:\users\mlle_\appdata\local\discord\app-1.0.9010\discord.exe => Pas de fichier
FirewallRules: [{3E4E8423-9BE1-4762-8357-C9DC333DA9A5}] => (Block) C:\users\mlle_\appdata\local\discord\app-1.0.9010\discord.exe => Pas de fichier
FirewallRules: [{7E20167E-75E7-4CB7-9475-AEB5B2FDCD8B}] => (Block) C:\users\mlle_\appdata\local\discord\app-1.0.9010\discord.exe => Pas de fichier
FirewallRules: [TCP Query User{292D900B-6EA4-4C60-A023-E1A50A21976D}C:\users\mlle_\appdata\local\vysor\app-4.1.77\vysor.exe] => (Block) C:\users\mlle_\appdata\local\vysor\app-4.1.77\vysor.exe => Pas de fichier
FirewallRules: [UDP Query User{FB59C413-E079-4A82-8D6A-F82F474CBB9A}C:\users\mlle_\appdata\local\vysor\app-4.1.77\vysor.exe] => (Block) C:\users\mlle_\appdata\local\vysor\app-4.1.77\vysor.exe => Pas de fichier
FirewallRules: [TCP Query User{CD438676-97EF-4F45-B293-9A160A3C1EED}C:\users\mlle_\appdata\local\discord\app-1.0.9011\discord.exe] => (Allow) C:\users\mlle_\appdata\local\discord\app-1.0.9011\discord.exe => Pas de fichier
FirewallRules: [UDP Query User{9F7B557D-A6BA-4B86-AD7A-D4E6AC8D3DD8}C:\users\mlle_\appdata\local\discord\app-1.0.9011\discord.exe] => (Allow) C:\users\mlle_\appdata\local\discord\app-1.0.9011\discord.exe => Pas de fichier
FirewallRules: [{8A819D2E-CDDE-4E9A-BD68-DA021F691200}] => (Block) C:\users\mlle_\appdata\local\discord\app-1.0.9011\discord.exe => Pas de fichier
FirewallRules: [{AAEA8257-8E10-4FD4-9705-F7C27D7B7076}] => (Block) C:\users\mlle_\appdata\local\discord\app-1.0.9011\discord.exe => Pas de fichier
EmptyTemp:
end::