start::
CreateRestorePoint:
CloseProcesses:
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
CHR Notifications: Default -> hxxps://fr.shein.com; hxxps://meet.google.com; hxxps://official-kmspico.com; hxxps://pagesjaunes-by.accengage.net; hxxps://smsmms.orange.fr; hxxps://www.1formatik.com; hxxps://www.epson.fr; hxxps://www.facebook.com; hxxps://www.techadvisor.fr; hxxps://www.winamax.fr; hxxps://www.youtube.com; hxxps://www1.debrahinton.pro
S3 cpuz149; C:\Users\admin\AppData\Local\Temp\cpuz149\cpuz149_x64.sys [44320 2020-08-14] (CPUID S.A.R.L.U. -> CPUID) <==== ATTENTION
S3 DellBIOS; C:\Users\admin\AppData\Local\Temp\DellBIOS.Sys [16880 2020-08-09] (Dell Inc. -> ) <==== ATTENTION
2020-08-07 19:17 - 2020-08-07 19:17 - 000000000 _____ C:\Users\admin\Downloads\KMSpico-setup.exe
2020-08-07 18:52 - 2020-08-15 08:37 - 000000000 ____D C:\Program Files\KMSpico
2020-08-07 18:39 - 2020-08-07 18:39 - 003194923 _____ C:\Users\admin\Downloads\kmspico.zip
C:\Windows\Temp\*.*
C:\Users\CurrentUserName\AppData\Local\Temp\*.*
cmd: ipconfig /flushdns
end::