start::
closeprocesses:
createrestorepoint:
HKLM\...\Run: [Edge] => C:\Program Files (x86)\MSCaches\Apply\FilesInUse\XXRR85FA5F-5AE7-4FB4-952B-7F02457AAB21\Edge.exe [190976 2021-11-28] () [Fichier non signé]
C:\Program Files (x86)\MSCaches
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133728 2017-09-12] (Wondershare Technology Co.,Ltd -> Wondershare)
HKLM-x32\...\Run: [Edge] => C:\Program Files (x86)\MSCaches\Apply\FilesInUse\XXRR85FA5F-5AE7-4FB4-952B-7F02457AAB21\Edge.exe [190976 2021-11-28] () [Fichier non signé]
C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
C:\WINDOWS\nl.exe
cmd: DISM /Online /Cleanup-image /Restorehealth
emptytemp:
end::