start::
Hosts:
Removeproxy:
CreateRestorePoint:
CloseProcesses:
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxlctlfudivq`qsp`28hfm [0]
SearchScopes: HKU\S-1-5-21-2301151312-418179949-4047400409-1001 -> DefaultScope {018A9CA5-30D1-4213-9094-1873956336D5} URL =
SearchScopes: HKU\S-1-5-21-2301151312-418179949-4047400409-1001 -> {018A9CA5-30D1-4213-9094-1873956336D5} URL =
HKLM\...\StartupApproved\Run: => "PDF24"
HKLM\...\StartupApproved\Run32: => "Discord"
HKU\S-1-5-21-2301151312-418179949-4047400409-1001\...\StartupApproved\StartupFolder: => "DeepL auto-start.lnk"
HKU\S-1-5-21-2301151312-418179949-4047400409-1001\...\StartupApproved\Run: => "com.squirrel.Teams.Teams"
FirewallRules: [{DB082709-D1CC-44DB-9ED5-AA007418DD0B}] => (Allow) C:\Program Files (x86)\Repetier-Server\bin\RepetierServer.exe => Pas de fichier
FirewallRules: [{3B3070F6-8B2D-4C5C-B57E-34B1BF1A2F52}] => (Allow) C:\Program Files (x86)\Repetier-Server\bin\RepetierServer.exe => Pas de fichier
FirewallRules: [TCP Query User{D4C12558-1416-4598-9BA5-826391963134}C:\users\utilisateur\onedrive\bureau\imprimante 3d geeetech\arduino-1.6.5-r5\java\bin\javaw.exe] => (Allow) C:\users\utilisateur\onedrive\bureau\imprimante 3d geeetech\arduino-1.6.5-r5\java\bin\javaw.exe => Pas de fichier
FirewallRules: [UDP Query User{468A305F-C3D7-4F6E-89DC-B26121DA03D0}C:\users\utilisateur\onedrive\bureau\imprimante 3d geeetech\arduino-1.6.5-r5\java\bin\javaw.exe] => (Allow) C:\users\utilisateur\onedrive\bureau\imprimante 3d geeetech\arduino-1.6.5-r5\java\bin\javaw.exe => Pas de fichier
FirewallRules: [TCP Query User{0BAA3752-08DB-4B36-8F75-8A5DAF2845FE}C:\users\utilisateur\onedrive\bureau\imprimante 3d geeetech\arduino-1.6.5-r5\java\bin\java.exe] => (Allow) C:\users\utilisateur\onedrive\bureau\imprimante 3d geeetech\arduino-1.6.5-r5\java\bin\java.exe => Pas de fichier
FirewallRules: [UDP Query User{D10D6C4E-F76C-4477-99CC-0BECAD42B213}C:\users\utilisateur\onedrive\bureau\imprimante 3d geeetech\arduino-1.6.5-r5\java\bin\java.exe] => (Allow) C:\users\utilisateur\onedrive\bureau\imprimante 3d geeetech\arduino-1.6.5-r5\java\bin\java.exe => Pas de fichier
FirewallRules: [{C7A3DAD5-D181-442F-8DB4-3352981DE97F}] => (Allow) C:\Users\UTILISATEUR\Downloads\ultdata-ios.exe => Pas de fichier
FirewallRules: [{9969B686-4951-4D51-A93F-ADD5EECE0452}] => (Allow) C:\Users\UTILISATEUR\Downloads\ultdata-ios.exe => Pas de fichier
FirewallRules: [{923110F1-E331-4CC3-8632-68298D8D7179}] => (Allow) C:\Program Files (x86)\Zoom\bin\Zoom.exe => Pas de fichier
FirewallRules: [{7B0A5B93-4266-450B-B9E0-6E926A6BADF2}] => (Allow) C:\Program Files (x86)\Zoom\bin\airhost.exe => Pas de fichier
FirewallRules: [{95D1FE73-4BC4-4363-9981-7161AA4E236E}] => (Allow) C:\Program Files (x86)\Zoom\bin\airhost.exe => Pas de fichier
FirewallRules: [{1CE5D80B-A224-43E7-AB77-00DF3AD0A9D6}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Far Cry 6\bin\FarCry6.exe => Pas de fichier
FirewallRules: [{726E83B1-99CA-4AF0-97C6-88B01EA5DEA0}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Far Cry 6\bin\FarCry6.exe => Pas de fichier
FirewallRules: [{9854A8BA-670F-4B54-B833-679F16BA0A61}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Far Cry 6\bin_plus\FarCry6.exe => Pas de fichier
FirewallRules: [{F06F7D56-8BE4-474A-B5CC-94160D99933F}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Far Cry 6\bin_plus\FarCry6.exe => Pas de fichier
HKLM-x32\...\Run: [TeamsMachineUninstallerProgramData] => %ProgramData%\Microsoft\Teams\Update.exe --uninstall --msiUninstall --source=default (Pas de fichier)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKLM\...\Print\Monitors\uh004 Langmon: uh004lm.dll (Pas de fichier)
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
Task: {45cf167c-8da9-462c-b4d5-061ba0ada612} - pas de chemin du fichier. <==== ATTENTION
Task: {6d90619f-8561-45a4-b060-231ecccf65ff} - pas de chemin du fichier. <==== ATTENTION
Task: {AF99D5D3-FD8F-40AB-A30F-7BB60B7557F8} - System32\Tasks\TVInstallRestore => C:\Users\UTILIS~1\AppData\Local\Temp\40712924-1300-11ec-979a-80b6554fd2fa\TeamViewer_.exe /RESTORE (Pas de fichier) <==== ATTENTION
StartBatch:
For /D %%d In ("%userprofile%\AppData\Local\Mozilla\Firefox\Profiles\*") Do (If Exist "%%d\Cache2" Del /s /q "%%d\Cache2\*.*")
del /s /q "%userprofile%\AppData\Local\Google\Chrome\User Data\Default\Cache\*.*"
del /s /q "%userprofile%\AppData\Local\Microsoft\Edge\User Data\Default\Cache\*.*"
For /D %%d In ("%userprofile%\AppData\Local\Thunderbird\Profiles\*") Do (If Exist "%%d\Cache2" Del /s /q "%%d\Cache2\*.*")
For /D %%d In ("%userprofile%\AppData\Roaming\Mozilla\Firefox\Profiles\*") Do (If Exist "%%d\cookies.sqlite" Del /s /q "%%d\cookies.sqlite")
del /s /q "%userprofile%\AppData\Local\Google\Chrome\User Data\Default\History"
del /s /q "%userprofile%\AppData\Local\Microsoft\Edge\User Data\Default\History"
Endbatch:
cmd: ipconfig /flushdns
cmd: netsh advfirewall reset
cmd: netsh winsock reset
cmd: sfc /scannow
EmptyEventLogs:
EmptyTemp:
end::