start::
CreateRestorePoint:
CloseProcesses:
Task: {D18D9F52-12A2-409F-A448-3B67D6617438} - System32\Tasks\{83B75044-BC4C-4485-9B26-8435AE932165} => C:\WINDOWS\system32\pcalua.exe -a C:\Users\Simon\AppData\Local\08EFFE8A-1439849832-0E4E-BA02-CC47B866B2F2\Uninstall.exe
Task: {F8C3F408-4B62-4979-B9C6-6282450F7C56} - System32\Tasks\AutoKMS => C:\WINDOWS\AutoKMS\AutoKMS.exe
ShortcutWithArgument: C:\Users\henry\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://chercheztout.com/tram/120
ShortcutWithArgument: C:\Users\henry\Desktop\Internet Explorer.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://chercheztout.com/tram/116
ShortcutWithArgument: C:\Users\henry\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Internet Explorer.LNK -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://chercheztout.com/tram/116
C:\Users\Simon\AppData\Local\08EFFE8A-1439849832-0E4E-BA02-CC47B866B2F2\Uninstall.exe
C:\WINDOWS\AutoKMS\AutoKMS.exe
Startup: C:\Users\henry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Helphenry.lnk [2017-11-08]
ShortcutTarget: Helphenry.lnk -> C:\henry\henryhost.exe (Microsoft Corporation)
Startup: C:\Users\henry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Manualhenry.lnk [2017-11-08]
ShortcutTarget: Manualhenry.lnk -> D:\henry\henryhost.exe (Microsoft Corporation)
U2 agp440; pas de ImagePath
U0 Compbatt; pas de ImagePath
U2 ERSvc; pas de ImagePath
U2 IAStorDataMgrsvc; pas de ImagePath
U2 NIHardwareService; pas de ImagePath
U2 Parvdm; pas de ImagePath
U2 srService; pas de ImagePath
C:\henry
D:\henry
C:\Users\henry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Helphenry.lnk
C:\Users\henry\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Manualhenry.lnk
C:\Users\henry\Desktop\Google Chrome.lnk
C:\Users\henry\Desktop\Internet Explorer.lnk
C:\Users\henry\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Internet Explorer.LNK
EmptyTemp:
end::