start:: CreateRestorePoint: CloseProcesses: Startup: C:\Users\wujrm\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\NVIDIA Cryptex HD.vbs.lnk [2017-04-19] ShortcutTarget: NVIDIA Cryptex HD.vbs.lnk -> C:\Users\wujrm\AppData\Roaming\AppData\NVIDIA Cryptex HD.vbs () S3 catchme; \??\C:\Users\wujrm\AppData\Local\Temp\catchme.sys [X] WMI_ActiveScriptEventConsumer_DellCommandPowerManagerAlertEventConsumer: WMI_ActiveScriptEventConsumer_DellCommandPowerManagerPolicyChangeEventConsumer: EmptyTemp: end::