start
CreateRestorePoint:
CloseProcesses:

CHR HomePage: Default -> hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=38670011A31BBB66&affID=119357&tsp=4951 
CHR StartupUrls: Default -> hxxps://mail.google.com/mail/u/0/#inbox,hxxps://drive.google.com/drive/my-drive,hxxps://62.210.182.80/rutorrent/,hxxp://www.hostingpics.net/,hxxps://en.freemags.cc/filter?order=def&tag=fr,hxxp://ultima-dl.org/forum.php [Pays US - 216.58.213.133]
2017-07-03 17:46 - 2017-07-06 17:43 - 00003606 _____ C:\WINDOWS\System32\Tasks\AutoKMS 
2017-07-03 17:46 - 2017-07-04 17:46 - 00000000 ____D C:\WINDOWS\AutoKMS  
2017-07-03 17:43 - 2017-07-03 17:43 - 00000000 ____D C:\Program Files (x86)\CODYQX4 
2017-06-25 14:59 - 2017-06-25 14:59 - 00000000 ____D C:\Users\loic\AppData\Local\Apps\2.0  
2016-10-07 23:04 - 2016-10-07 23:04 - 0855040 _____ (Computing Systems ORG) C:\Users\loic\AppData\Roaming\xrhgcg.exe 
2017-07-03 17:51 - 2016-10-07 23:04 - 0855040 _____ (Computing Systems ORG) C:\Users\loic\AppData\Local\app.exe 
Task: {EA5BAA23-4C31-47B4-92C3-7AEAD5F17185} - System32\Tasks\AutoKMS => C:\WINDOWS\AutoKMS\AutoKMS.exe [2017-07-03] () 
AlternateDataStreams: C:\Windows:nlsPreferences

RemoveProxy:
Hosts:
EmptyTemp: 
end