start::
SystemRestore: on
CreateRestorePoint:
CloseProcesses:
Hosts:
RemoveProxy:
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
ShortcutTarget: APC UPS Status.lnk -> C:\Program Files (x86)\APC\PowerChute Personal Edition\Display.exe
GroupPolicy: Restriction ?
GroupPolicy-Firefox: Restriction
S1 nordlwf; \SystemRoot\system32\DRIVERS\nordlwf.sys [X]
Policies: C:\ProgramData\NTUSER.pol: Restriction
AV: Avira Antivirus (Enabled - Up to date) {88AE6B46-DC3C-455A-A21B-085F285A3546}
AS: Avira Antivirus (Enabled - Up to date) {33CF8AA2-FA06-4AD4-98AB-332D53DD7FFB}
C:\Users\bques\AppData\Local\BraveSoftware\
CustomCLSID: HKU\S-1-5-21-3229633961-1422230100-3445060282-1001_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32 -> C:\Users\bques\AppData\Local\GoToMeeting\18962\G2MOutlookAddin64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-3229633961-1422230100-3445060282-1001_Classes\CLSID\{b72e6f5e-f6e0-a9eb-461b-6118363bd15c}\localserver32 -> "C:\Users\bques\AppData\Local\0install.net\implementations\sha256new
ContextMenuHandlers1: [PDFCreator.ShellContextMenu] -> {d9cea52e-100d-4159-89ea-76e845bc13e1} => -> Pas de fichier
ShortcutWithArgument: C:\Users\bques\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\fd3cf8886ea458e8\Click&Clean.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
ShortcutTarget: DeepL auto-start.lnk -> C:\Users\bques\AppData\Roaming\0install.net\desktop-integration\stubs\1eae01f3cdb5ff0ecf683b15a60a1489573c1188cb34abc205fcf7a924b4e54d\auto-start.exe
EmptyTemp:
cmd: ipconfig /flushdns
end::