HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION HKU\S-1-5-21-2126566057-4181855661-943989508-1001\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\nicz8\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" (No File) HKU\S-1-5-21-2126566057-4181855661-943989508-1001\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\nicz8\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" (No File) HKU\S-1-5-21-2126566057-4181855661-943989508-1001\...\RunOnce: [Uninstall 22.151.0717.0001] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\nicz8\AppData\Local\Microsoft\OneDrive\22.151.0717.0001" (No File) Task: {1D6FA44E-65B7-4121-B01C-2A7224353DDE} - System32\Tasks\Microsoft\Office\OfficeOsfInstaller => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\osfinstaller.exe (No File) CHR StartupUrls: Default -> "hxxps://www.bing.com/?PC=PV02" CHR DefaultSearchURL: Default -> hxxps://search.yahoo.com/search?fr=mcafee&type=E211US714G0&p={searchTerms} CHR DefaultSearchKeyword: Default -> mcafee CHR Notifications: Profile 1 -> hxxps://1.dating-roo2.site; hxxps://idea-shopping.xyz CHR Extension: (LightSurf) - C:\Users\nicz8\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\eeelmcphjdlldmbaamlckoifefbncbaf [2022-08-21] U3 mfeavfk01; no ImagePath ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File FirewallRules: [{BA748F57-778C-44B8-89B0-3C8E71F1ADAE}] => (Allow) C:\Users\nicz8\AppData\Local\Temp\win-ts300-1_2-n_mcd\win\MSetup64.exe => No File CMD: DISM /Online /Cleanup-Image /RestoreHealth CMD: SFC /scannow CMD: findstr /c:"[SR]" \windows\logs\cbs\cbs.log CMD: FOR /F "usebackq delims==" %i IN (`wevtutil el`) DO wevtutil cl "%i" Reboot: