start::
CreateRestorePoint:
CloseProcesses:
(IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
Startup: C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\injector.vbs.vbs [2018-01-28] ()
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2017-05-22] (IObit)
CHR HKU\S-1-5-21-2746970837-595597586-80605456-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
R2 IObitUnSvr; C:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe [206112 2017-06-14] (IObit)
S3 IUFileFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IUFileFilter.sys [39904 2017-06-06] (IObit.com)
S3 IURegProcessFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IURegProcessFilter.sys [39792 2017-09-28] (IObit.com)
2018-02-07 22:59 - 2018-02-07 22:59 - 000001448 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller.lnk
2018-02-07 22:59 - 2018-02-07 22:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
2018-02-07 22:59 - 2017-08-12 23:29 - 000000000 ____D C:\ProgramData\IObit
2018-02-07 22:56 - 2017-08-12 23:29 - 000000000 ____D C:\Users\admin\AppData\Roaming\IObit
ContextMenuHandlers1: [IObitUnstaler] -> {B19ED566-D419-470b-B111-3C89040BC027} => C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMenuRight.dll [2017-05-22] (IObit)
ContextMenuHandlers4: [IObitUnstaler] -> {B19ED566-D419-470b-B111-3C89040BC027} => C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMenuRight.dll [2017-05-22] (IObit)
ContextMenuHandlers6: [IObitUnstaler] -> {B19ED566-D419-470b-B111-3C89040BC027} => C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMenuRight.dll [2017-05-22] (IObit)
Task: {522EFBC8-324E-4213-BC22-7DE09025439D} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [2016-04-06] ()
2018-02-07 22:59 - 2017-05-22 11:16 - 000442144 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madExcept_.bpl
2018-02-07 22:59 - 2017-05-22 11:16 - 000210720 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madBasic_.bpl
2018-02-07 22:59 - 2017-05-22 11:16 - 000059680 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madDisAsm_.bpl
AlternateDataStreams: C:\Users\admin\Local Settings:9STWxbe6gPm4bLfBYdsBS3bQ9 [2356]
AlternateDataStreams: C:\Users\admin\AppData\Local:9STWxbe6gPm4bLfBYdsBS3bQ9 [2356]
AlternateDataStreams: C:\Users\Carole\Documents\detailPaiementsecu8.jpeg:3or4kl4x13tuuug3Byamue2s4b [87]
AlternateDataStreams: C:\Users\Carole\Documents\detailPaiementsecu8.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
AlternateDataStreams: C:\Users\Richard\Local Settings:9STWxbe6gPm4bLfBYdsBS3bQ9 [2228]
AlternateDataStreams: C:\Users\Richard\AppData\Local:9STWxbe6gPm4bLfBYdsBS3bQ9 [2228]
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\injector.vbs.vbs
Hosts:
EmptyTemp:
end::