start::
CreateRestorePoint:
CloseProcesses:
BootExecute: autocheck autochk /p \??\D:autocheck autochk *
GroupPolicy: Restriction ? <==== ATTENTION
Task: {D5459540-0646-4F55-962E-97C78B176A1B} - System32\Tasks\{9F92735B-B327-4A96-8983-966755597537} => C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe [388096 2010-03-25] (Trend Micro Inc.) [Fichier non signé]
EmptyTemp:
end::