Start::
CreateRestorePoint:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restrictie <==== AANDACHT
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} -  Geen bestand
S3 catchme; \??\C:\Users\erw\AppData\Local\Temp\catchme.sys [X]
S3 cpuz132; \??\C:\Users\erw\AppData\Local\Temp\cpuz132\cpuz132_x32.sys [X]
CustomCLSID: HKU\S-1-5-21-1918549753-1553974762-1166484144-1000_Classes\CLSID\{08244EE6-92F0-47F2-9FC9-929BAA2E7235}\InprocServer32 -> geen bestandpad
CustomCLSID: HKU\S-1-5-21-1918549753-1553974762-1166484144-1000_Classes\CLSID\{1F486A52-3CB1-48FD-8F50-B8DC300D9F9D}\InprocServer32 -> geen bestandpad
CustomCLSID: HKU\S-1-5-21-1918549753-1553974762-1166484144-1000_Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}\InprocServer32 -> geen bestandpad
CustomCLSID: HKU\S-1-5-21-1918549753-1553974762-1166484144-1000_Classes\CLSID\{D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}\InprocServer32 -> geen bestandpad
Task: {6C6029E6-A113-4457-857A-D8C6C82DA198} - System32\Tasks\{856F5227-C9A5-4C29-88F3-DC8D90A7C4DF} => C:\windows\system32\pcalua.exe -a D:\HiJackThis.exe -d D:\
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`26hfm [0]
AlternateDataStreams: C:\ProgramData\Temp:4CF61E54 [244]
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MpfService => ""="Service"
Reboot:
EmptyTemp:
End::