Start CreateRestorePoint: CloseProcesses: Task: {565AAFEE-9B4E-43D6-ADC5-0F839203CD37} - System32\Tasks\Microsoft\Windows\orangeinside => C:\Users\jp\AppData\Roaming\Orange\OrangeInside\OrangeInside.exe [2018-04-09] (Orange) AlternateDataStreams: C:\Users\jp\Desktop\Decla 2017.jpeg:3or4kl4x13tuuug3Byamue2s4b [83] AlternateDataStreams: C:\Users\jp\Desktop\Decla 2017.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\jp\Desktop\Decla1.jpeg:3or4kl4x13tuuug3Byamue2s4b [83] AlternateDataStreams: C:\Users\jp\Desktop\Decla1.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\jp\Desktop\Decla2.jpeg:3or4kl4x13tuuug3Byamue2s4b [83] AlternateDataStreams: C:\Users\jp\Desktop\Decla2.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\jp\Desktop\Decla3.jpeg:3or4kl4x13tuuug3Byamue2s4b [83] AlternateDataStreams: C:\Users\jp\Desktop\Decla3.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] EmptyTemp: End