CreateRestorePoint:
CloseProcesses:
HKLM\...\Policies\Explorer: [HideSCAHealth] 1
Task: {1D3B0558-8EBC-4EF1-BDE3-BA0CF28FF5E0} - System32\Tasks\Microsoft\Windows\Application Experience\StartupCheckLibrary => rundll32.exe StartupCheckLibrary.dll,DllMainRunLibrary <==== ATTENTION
Task: {A47DF331-C7E8-48D7-B1C7-6D9F66654BB9} - System32\Tasks\Microsoft\Windows\Wininet\Winlogui => winlogui.exe <==== ATTENTION
Task: {CA92AC34-8E28-4F54-BB28-2204EC907F1F} - System32\Tasks\Microsoft\Windows\WDI\SrvHost => rundll32.exe winscomrssrv.dll,SrvMainHost <==== ATTENTION
Task: {E4734579-CFE5-4EE5-AC0C-07EFF0981F48} - System32\Tasks\Microsoft\Windows\Windows Error Reporting\winrmsrv => winrmsrv.exe <==== ATTENTION
S3 OverwolfUpdater; "A:\Programmes\Overwolf\OverwolfUpdater.exe" /RunningFrom SCM [X]
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => A:\Programmes\rarext.dll -> Pas de fichier
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => A:\Programmes\rarext32.dll -> Pas de fichier
\deezer.62021768415af_4.17.21.0_x86__q7m17pa7q8kj0\app\deezer.exe => Pas de fichier\deezer.62021768415af_4.17.21.0_x86__q7m17pa7q8kj0\app\deezer.exe => Pas de fichier
FirewallRules: [{DBBD8F85-DDE9-4102-A924-A218BFB8AFF5}] => (Allow) C:\Users\lilia\AppData\Roaming\BitTorrent\BitTorrent.exe => Pas de fichier
FirewallRules: [{2F72A16A-D1EC-4FBC-A87E-6FCB6C6E642A}] => (Allow) C:\Users\lilia\AppData\Roaming\BitTorrent\BitTorrent.exe => Pas de fichier
FirewallRules: [UDP Query User{77E51C41-5C52-4BF5-AE81-9B8AA3565C51}C:\program files\windowsapps\deezer.62021768415af_4.17.21.0_x86__q7m17pa7q8kj0\app\deezer.exe] => (Allow) C:\program files\windowsapps\deezer.62021768415af_4.17.21.0_x86__q7m17pa7q8kj0\app\deezer.exe => Pas de fichier
FirewallRules: [TCP Query User{250CB32E-ACF5-4847-B284-49293F00CB52}C:\program files\windowsapps\deezer.62021768415af_4.17.10.0_x86__q7m17pa7q8kj0\app\deezer.exe] => (Allow) C:\program files\windowsapps\deezer.62021768415af_4.17.10.0_x86__q7m17pa7q8kj0\app\deezer.exe => Pas de fichier
FirewallRules: [{BB729C2E-FCC6-437F-9F59-8F4DC84AD0F0}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => Pas de fichier
FirewallRules: [{0D71D3B6-2FFC-468F-8219-CC862854D92F}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => Pas de fichier
FirewallRules: [{8B3E54DB-3140-4BBE-BD6F-69DD3EB62DF7}] => (Allow) C:\WINDOWS\system32\winrmsrv.exe => Pas de fichier
C:\Users\lilia\AppData\Roaming\BitTorrent
CMD: cscript %windir%\System32\slmgr.vbs /dli
Reg: REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" /V SmartScreenEnabled /T REG_SZ /D RequireAdmin /f

StartRegedit:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Shell"="explorer.exe"
"USERINIT"="C:\\Windows\\System32\\userinit.exe,"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Shell"="explorer.exe"
"Userinit"="C:\\Windows\\system32\\userinit.exe,"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\shell\open\command]
""=""%1" %*"
 EndRegedit:

Reg: REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Dfrg\BootOptimizeFunction" /V Enable /T REG_SZ /D n /f
Reg: REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Dfrg\BootOptimizeFunction" /V OptimizeComplete /T REG_SZ /D no /f
Reg: REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /V PowerdownAfterShutdown /T REG_SZ /D 1 /f
Reg: REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /V ClearPageFileAtShutdown /T REG_DWORD /D 0 /f
Reg: REG ADD "HKEY_CURRENT_USER\Control Panel\Desktop" /V MenuShowDelay /T REG_SZ /D 400 /f
Reg: REG ADD "HKEY_CURRENT_USER\Control Panel\Desktop" /V WaitToKillAppTimeout /T REG_SZ /D 1200 /f
Reg: REG ADD "HKEY_CURRENT_USER\Control Panel\Desktop" /V HungAppTimeout /T REG_SZ /D 1200 /f
Reg: REG ADD "HKEY_CURRENT_USER\Control Panel\Desktop" /V AutoEndTasks /T REG_SZ /D 1 /f
Reg: REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control" /V WaitToKillServiceTimeout /T REG_SZ /D 1200 /f
CMD: bitsadmin /reset
CMD: netsh winsock reset
CMD: netsh advfirewall reset 
CMD: netsh int ipv4 reset all
CMD: netsh int ipv6 reset all
CMD: netsh int portproxy reset all
CMD: netsh int tcp reset all
CMD: netsh int ip reset all
c:\windows\temp\*.*
C:\Users\CurrentUserName\AppData\Local\Temp\*.*
C:\Windows\SoftwareDistribution\Download\ *
EmptyTemp: