start::
CreateRestorePoint:
CloseProcesses:
2018-11-26 20:12 - 2018-12-03 10:00 - 000000000 ____D C:\ProgramData\KMSAutoS
2018-11-26 20:12 - 2018-11-26 20:12 - 000003786 _____ C:\WINDOWS\System32\Tasks\KMSAutoNet
2018-11-26 19:59 - 2018-11-26 20:04 - 000003568 _____ C:\WINDOWS\System32\Tasks\SVC Update
2018-11-26 12:22 - 2018-11-26 12:22 - 000003584 _____ C:\WINDOWS\SECOH-QAD.dll
2018-12-12 13:17 - 2018-04-14 18:33 - 000000000 ____D C:\Program Files (x86)\KMSPico
2018-11-26 20:57 - 2017-12-15 06:35 - 000000000 ____D C:\Users\Fabrice\AppData\Local\MSfree Inc
2018-11-26 20:08 - 2018-04-17 10:46 - 001611944 _____ (Secure Download Ltd. ) C:\Users\Fabrice\Downloads\KMSpico_patch
Task: {369A3CF0-9A57-45C1-8469-973D7514E0A6} - System32\Tasks\SVC Update => C:\WINDOWS\explorer.exe "hxxp://lktoday.ru" <==== ATTENTION
Task: {AA8337F9-D6DF-482C-8B70-2EBD4071911E} - System32\Tasks\KMSAutoNet => C:\ProgramData\KMSAutoS\KMSAuto Net.exe [2015-08-10] (MSFree Inc.)
FirewallRules: [{692D9EE2-E7E0-4137-BCD5-0A8243C46D8E}] => (Allow) C:\Users\Fabrice\Desktop\KMSpico 10.2.0 FINAL + Portable (Office and Windows 10 Activator) [TechTools.NET]\KMSpico Portable\AutoPico.exe
FirewallRules: [{FFE2867C-4585-40EC-BB43-AB3832666038}] => (Allow) C:\Users\Fabrice\Desktop\KMSpico 10.2.0 FINAL + Portable (Office and Windows 10 Activator) [TechTools.NET]\KMSpico Portable\AutoPico.exe
C:\Users\Fabrice\Desktop\KMSpico 10.2.0 FINAL + Portable (Office and Windows 10 Activator) [TechTools.NET]\KMSpico Portable
EmptyTemp:
end::