HKLM Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot% <==== ATTENTION HKLM Group Policy restriction on software: %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir% <==== ATTENTION Task: {57DABF48-DFC7-400C-B29B-492FF8550638} - System32\Tasks\SensorFramework-LogonTask-{100ee514-48c8-f419-6760-6fb8cb2767cd} => C:\Program Files (x86)\Microsoft Intune Management Extension\SensorLogonTask.exe SensorFramework-LogonTask-{100ee514-48c8-f419-6760-6fb8cb2767cd} (No File) Task: {D4C22D3B-F5CF-463E-9D7D-3DF2048566BE} - System32\Tasks\Run Dashboardindre => C:\Program Files (x86)\Western Digital\SSD Dashboard\Dashboard.exe (No File) CustomCLSID: HKU\S-1-5-21-1593158232-969496310-2340663774-1001_Classes\CLSID\{d1b22d3d-8585-53a6-acb3-0e803c7e8d2a}\localserver32 -> "C:\Users\indre\AppData\Local\Microsoft\Teams\current\Teams.exe" --toast => No File ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File FirewallRules: [TCP Query User{56C4283E-A791-4CBC-9F68-AC60C8E0C7B4}C:\users\indre\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\indre\appdata\roaming\spotify\spotify.exe => No File FirewallRules: [UDP Query User{1DC4DC8A-7F42-44CE-9FE4-78B806402CE0}C:\users\indre\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\indre\appdata\roaming\spotify\spotify.exe => No File FirewallRules: [{3E499D19-4DBA-4DEF-8CF8-19DA405CDB89}] => (Block) C:\users\indre\appdata\roaming\spotify\spotify.exe => No File FirewallRules: [{69A76876-400F-4C97-9AC9-188D74D4DEA6}] => (Block) C:\users\indre\appdata\roaming\spotify\spotify.exe => No File CMD: ping google.com CMD: tracert -d google.com CMD: netstat -rn CMD: ipconfig /all CMD: DISM /Online /Cleanup-Image /RestoreHealth CMD: SFC /scannow CMD: findstr /c:"[SR]" \windows\logs\cbs\cbs.log CMD: FOR /F "usebackq delims==" %i IN (`wevtutil el`) DO wevtutil cl "%i" Reboot: