start::
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
HKLM\...\Print\Monitors\3D Port: 3dmon.dll (Pas de fichier)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
GroupPolicy: Restriction ?
Policies: C:\ProgramData\NTUSER.pol: Restriction
HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (Pas de fichier)
Task: {81B08E69-BC02-41FE-87D5-CDE47E29CD85} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC ReadyToReboot (Pas de fichier)
Task: {0D4401AF-1048-4BB1-A6C0-1DFD9F866776} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery ReadyToReboot (Pas de fichier)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (Pas de fichier)
Edge Notifications: Default -> hxxps://9a694twa7ikftfecd2.decyh.co.in; hxxps://controlrobot.azurewebsites.net; hxxps://initialfast.azurewebsites.net; hxxps://www.facebook.com; hxxps://www.sncf-connect.com
Edge NewTab: Default -> Not-active:"chrome-extension://fhfidmlnclkepgapcephbaciajegheco/newtab.html"
CHR NewTab: Default -> Not-active:"chrome-extension://eedlgdlajadkbbjoobobefphmfkcchfk/newtab.html"
S3 EuGdiDrv; \SystemRoot\system32\EuGdiDrv.sys [X]
S1 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X]
EmptyTemp:
cmd: ipconfig /flushdns
end::