Start::
CreateRestorePoint:
CloseProcesses:
HKU\S-1-5-21-1846443989-2895531904-1631654992-1001\...\Run: [svcs] => C:\Users\CEDRIC\AppData\Local\svcs.exe -boot
HKU\S-1-5-21-1846443989-2895531904-1631654992-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07162019080124137\...\Run: [svcs] => C:\Users\CEDRIC\AppData\Local\svcs.exe -boot
Task: {40F9D5AD-001E-42A0-816A-FFB3F3B52ADD} - System32\Tasks\SpyHunter4Startup => C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe
Task: {F83CFBE3-5ADC-4A52-B5A7-B956C6FE0E88} - System32\Tasks\KMSAuto => C:\Windows\KMSAutoS\KMSAuto.exe
R2 EsgShKernel; C:\Program Files\EnigmaSoft\SpyHunter\ShKernel.exe [11457840 2019-07-13] (EnigmaSoft Limited -> EnigmaSoft Limited)
R2 ShMonitor; C:\Program Files\EnigmaSoft\SpyHunter\ShMonitor.exe [512816 2019-07-13] (EnigmaSoft Limited -> EnigmaSoft Limited)
S2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\Sh4Service.exe [889016 2019-07-13] (Enigma Software Group USA, LLC -> Enigma Software Group USA, LLC.)
R3 EnigmaFileMonDriver; C:\WINDOWS\System32\drivers\EnigmaFileMonDriver.sys [68424 2019-07-16] (EnigmaSoft Limited -> EnigmaSoft Limited)
S3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [15920 2019-07-13] (Enigma Software Group USA, LLC -> Enigma Software Group USA, LLC.)
S3 EsgScanner; C:\WINDOWS\System32\DRIVERS\EsgScanner.sys [22704 2019-07-13] (Enigma Software Group USA, LLC -> )
2019-07-13 19:42 - 2019-07-13 19:42 - 000000000 _____ C:\autoexec.bat
2019-07-13 19:41 - 2019-07-14 22:10 - 000000000 ____D C:\Users\CEDRIC\AppData\Roaming\Enigma Software Group
2019-07-13 19:41 - 2019-07-13 19:41 - 000003446 _____ C:\WINDOWS\System32\Tasks\SpyHunter4Startup
2019-07-13 19:41 - 2019-07-13 19:41 - 000000000 ____D C:\sh4ldr
2019-07-13 19:39 - 2019-07-13 19:39 - 001309592 _____ (BraveSoftware Inc.) C:\Users\CEDRIC\Downloads\BraveBrowserSetup-CLU884.exe
2019-07-13 19:39 - 2019-07-13 19:39 - 000022704 _____ C:\WINDOWS\system32\Drivers\EsgScanner.sys
2019-07-13 19:39 - 2019-07-13 19:39 - 000000000 ____D C:\Program Files\Enigma Software Group
2019-07-13 16:24 - 2019-07-16 08:02 - 000068424 _____ (EnigmaSoft Limited) C:\WINDOWS\system32\Drivers\EnigmaFileMonDriver.sys
2019-07-13 16:23 - 2019-07-13 16:23 - 000001055 _____ C:\Users\Public\Desktop\SpyHunter5.lnk
2019-07-13 16:23 - 2019-07-13 16:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EnigmaSoft
2019-07-13 16:23 - 2019-07-13 16:23 - 000000000 ____D C:\ProgramData\EnigmaSoft Limited
2019-07-13 16:22 - 2019-07-13 16:23 - 000000000 ____D C:\sh5ldr
2019-07-13 16:19 - 2019-07-13 16:19 - 000000000 ____D C:\Program Files\EnigmaSoft
2019-06-26 20:51 - 2019-06-26 20:51 - 000003770 _____ C:\WINDOWS\System32\Tasks\KMSAuto
2019-07-13 02:41 - 2019-07-13 02:41 - 000368562 _____ () C:\Users\CEDRIC\AppData\Local\svcs.exe.id[56B57E8C-2275].[supportcrypt2019@cock.li].Adame
C:\Program Files\Enigma Software Group
C:\Users\CEDRIC\AppData\Local\svcs.exe
EmptyTemp:
End::