CreateRestorePoint: CloseProcesses: HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [298296 2018-07-06] (Apple Inc.) HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.) HKLM-x32\...\Run: [KLM] => C:\Program Files (x86)\MSI\KLM\KLM.exe [1571128 2015-09-04] (Application) HKU\S-1-5-21-353815776-2457090579-2274081156-1001\...\Run: [Spotify] => C:\Users\Yoann\AppData\Roaming\Spotify\Spotify.exe [24453008 2018-08-23] (Spotify Ltd) HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe" 2018-09-05 17:15 - 2013-07-31 22:25 - 001936088 _____ (Realtek Semiconductor Corporation ) C:\Users\Yoann\Desktop\rtwlane.sys Task: {402D6A78-1553-4797-81EA-C0D188601740} - System32\Tasks\{3F44504C-B217-408D-B817-B6C494CE0D6C} => C:\Windows\system32\pcalua.exe -a C:\Users\Yoann\AppData\Local\Temp\Temp1_audio_realtek_6.0.1.7101_0x2e1530al_8100.zip\7101_PG380_Win8.1_Win8_Win7_XP_WHQL\Setup.exe <==== ATTENTION Task: {A374C78F-058A-454F-8225-C570E20336BD} - System32\Tasks\{E349852E-822F-45C6-9131-9506B64DE6EC} => C:\Windows\system32\pcalua.exe -a C:\Users\Yoann\AppData\Local\Temp\Temp1_bt_awnb114h_159h_1.3.780.3_0x04037087_w81800.zip\RTBlueR_780.780.780.1021.2013\setup.exe <==== ATTENTION EmptyTemp: