Start::
CreateRestorePoint:
CloseProcesses:
HKU\S-1-5-21-3592161837-3332094344-2408621222-1001\...\Run: [SysinfY2X] => C:\WINDOWS\system32\cmd.exe /c start wscript /e:VBScript.Encode %temp%\SysinfY2X.db
Startup: C:\Users\Sylvain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Bêêê l'inclusive.lnk [2020-04-27]
ShortcutTarget: Bêêê l'inclusive.lnk -> C:\Program Files\Bêêê l'inclusive.exe () [Fichier non signé]
2020-04-24 00:56 - 2020-04-24 00:57 - 001090048 _____ () C:\Program Files\Bêêê l'inclusive.exe
EmptyTemp:
End::