CloseProcesses: SystemRestore: On CreateRestorePoint: StartRegedit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer] "SmartScreenEnabled"="Warn" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=dword:00000005 "ConsentPromptBehaviorUser"=dword:00000003 "EnableLUA"=dword:00000001 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Configuration Manager] "EnablePeriodicBackup"=dword:00000001 EndRegedit: HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION HKLM\SOFTWARE\Policies\Microsoft\Windows Defender Security Center: Restriction <==== ATTENTION HKU\S-1-5-21-2024083206-1142390696-1087889392-1001\...\Run: [bookinxgm141] => schtasks /run /tn bookinxgm141 (No File) HKU\S-1-5-21-2024083206-1142390696-1087889392-1001\...\Run: [bookinxgm100] => schtasks /run /tn bookinxgm100 (No File) HKU\S-1-5-21-2024083206-1142390696-1087889392-1001\...\Run: [bookigncom] => schtasks /run /tn bookigncom (No File) GroupPolicy: Restriction ? <==== ATTENTION Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION Task: {CA1C5F2E-E136-4BE8-9907-74580661BCF5} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe (No File) Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File) Task: {FB50E09B-ECD6-48FF-B6A6-FA9DCB19079B} - System32\Tasks\Microsoft\Windows\PI\SecureBootEncodeUEFI => %WINDIR%\system32\SecureBootEncodeUEFI.exe (No File) Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File) File: C:\Program Files (x86)\Gigabyte\AppCenter\AdjustService.exe File: C:\Program Files (x86)\PrinterShare\paConsole.exe FirewallRules: [{2C266DF8-2294-416D-992E-9EE9240DD946}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe => No File FirewallRules: [{89D547AE-928D-42E1-AACE-C5917008B20D}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe => No File FirewallRules: [{15F2008F-37C2-4F62-A640-4A7E5E723CB5}] => (Allow) C:\Users\Utente\OneDrive\Desktop\AnyDesk(1).exe => No File FirewallRules: [{35D82222-246C-45FE-9BBD-46C5640AFBC8}] => (Allow) C:\Users\Utente\OneDrive\Desktop\AnyDesk(1).exe => No File FirewallRules: [{4899E89B-758E-49D4-8664-D656D5FAEA22}] => (Allow) C:\Users\Utente\OneDrive\Desktop\AnyDesk(1).exe => No File FirewallRules: [{1D15AF15-EABE-48BD-824C-8C1CDA144B6A}] => (Allow) C:\Users\Utente\OneDrive\Desktop\AnyDesk(1).exe => No File FirewallRules: [{40084650-E272-4CAE-BA7A-7F0CD25DEEBB}] => (Allow) C:\Users\Utente\OneDrive\Desktop\AnyDesk(1).exe => No File FirewallRules: [{1199B4F5-8F6A-44AF-A823-58E8F1EA6BA1}] => (Allow) C:\Users\Utente\OneDrive\Desktop\AnyDesk(1).exe => No File FirewallRules: [{9D7AC974-448C-4BB5-9EB4-31691582B157}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe => No File FirewallRules: [{7E9449CF-B412-41E3-A540-DF393DFBEFBA}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe => No File FirewallRules: [{554AAD9E-AD22-48C5-AF69-1555293CECE6}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe => No File FirewallRules: [{C0476687-636F-4293-BEB6-3289F23E55EB}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe => No File FirewallRules: [{428C20DD-F9A0-4A79-B875-B95582837D1A}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe => No File FirewallRules: [{CCAD7282-9AA6-485A-9300-159DAB16D99A}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe => No File Reboot: