cmd:sc config windefend start= Disabled
cmd:sc stop windefend
HKLM-x32\...\Run: [] => [X]
C:\Users\Arthur\Desktop\client.exe
Task: {15CFF8A7-51D4-461D-A412-63D0AF4CB137} - System32\Tasks\{152C5CEF-4497-4FBE-B27D-009610D07492} => C:\Users\Arthur\Desktop\client.exe
Task: {4BF20779-225E-40E9-A1E5-63C09C033B41} - System32\Tasks\{70C25F40-DD1B-40B7-80F3-F80D2C11399A} => C:\Users\Arthur\Desktop\client.exe
Task: {B93E2258-20A2-42D5-8553-A5810270ACD8} - System32\Tasks\{1C7A0FF7-6092-4F86-935D-B1724CE91BBE} => C:\Users\Arthur\Desktop\client.exe
Task: {E32E4068-6543-4CE8-B8F0-D236941F6F0D} - System32\Tasks\{87255B03-7E2F-4586-A114-13DFCD0AF190} => C:\Users\Arthur\Desktop\client.exe
Task: {FC67CC6F-7BCC-4C07-A568-F7CB4E076714} - System32\Tasks\{4ADEF459-AD33-4067-BA99-CB0EA95F4BDE} => C:\Users\Arthur\Desktop\client.exe
BootExecute: autocheck autochk * sdnclean64.exe
C:\Program Files (x86)\Spybot - Search & Destroy 2
C:\Users\Arthur\Downloads\spybotsd162.exe
C:\Users\Arthur\Downloads\spybot-2.4.exe
C:\ProgramData\Spybot - Search & Destroy
EmptyTemp: