start
CreateRestorePoint:
CustomCLSID: HKU\S-1-5-21-455634102-3971962441-1493714179-1001_Classes\CLSID\{0D327DA6-B4DF-4842-B833-2CFF84F0948F}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2017\acad.exe /Automation => Geen bestand
CustomCLSID: HKU\S-1-5-21-455634102-3971962441-1493714179-1001_Classes\CLSID\{720DB9AF-D62C-4ED0-A377-429C22312852}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2017\acad.exe => Geen bestand
CustomCLSID: HKU\S-1-5-21-455634102-3971962441-1493714179-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2017\en-US\acadficn.dll => Geen bestand
CustomCLSID: HKU\S-1-5-21-455634102-3971962441-1493714179-1001_Classes\CLSID\{FE186CB0-BEDC-11D5-9B1D-0050DA438716}\localserver32 -> "C:\Program Files\EPLAN\Platform\2.5.4\Bin\EPLAN.exe" => Geen bestand
ContextMenuHandlers4: [EncryptionMenu] -> {A470F8CF-A1E8-4f65-8335-227475AA5C46} =>  -> Geen bestand
ContextMenuHandlers4: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} =>  -> Geen bestand
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} =>  -> Geen bestand
ContextMenuHandlers6: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} =>  -> Geen bestand
Task: {8C3985D0-4ECD-4056-846E-A2CB4B7FBBF0} - \Microsoft\Windows\UNP\RunCampaignManager -> Geen bestand <==== AANDACHT
Task: {8872D3F4-1EA3-429E-8C43-5FB585E54653} - System32\Tasks\{1E01C950-A9E4-4FED-9CB1-364B33473B1A} => C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files (x86)\Easy Speed Check\uninstall.exe"
C:\Program Files (x86)\Easy Speed Check
Task: {98769F9F-D926-49CF-A04F-3EB9BD43AAF4} - System32\Tasks\{863A6AB2-1D06-475D-8DA5-F6CFF2A87ADA} => C:\Windows\system32\pcalua.exe -a D:\Setup.EXE -d D:\
AlternateDataStreams: C:\ProgramData\Temp:5C321E34 [119]
HKU\S-1-5-21-455634102-3971962441-1493714179-1001\Software\Classes\.scr: scrfile =>  <==== AANDACHT
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== AANDACHT
Startup: C:\Users\rita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Inktwaarschuwingen controleren - .lnk [2017-09-29]
ShortcutTarget: Inktwaarschuwingen controleren - .lnk ->  (Geen bestand)
Startup: C:\Users\rita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Inktwaarschuwingen controleren - HP Officejet 4620 series (netwerk).lnk [2017-09-29]
ShortcutTarget: Inktwaarschuwingen controleren - HP Officejet 4620 series (netwerk).lnk ->  (Geen bestand)
BHO-x32: Geen Naam -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> Geen bestand
Toolbar: HKU\S-1-5-21-455634102-3971962441-1493714179-1001 -> Geen Naam - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  Geen bestand
EmptyTemp:
end