start
CreateRestorePoint:
Task: {4C0CE787-C1B5-4ADF-BD85-824BF5D678B6} - \Microsoft\Windows\UNP\RunCampaignManager -> Geen bestand <==== AANDACHT
HKLM-x32\...\Run: [Excel XLSX To XLS Converter Software.exe] => [X]
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== AANDACHT
SearchScopes: HKU\S-1-5-21-2668737801-3381503766-2512015713-1000 -> {518b33ae-375d-712d-6742-d1fe0400268d} URL = hxxps://nl.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=bgy_dnldastr_18_06&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dnl%26pa%3Dwingy%26cd%3D2XzuyEtN2Y1L1QzuyDtBtCyB0CyE0C0A0FyE0C0C0BtCyEzztN0D0Tzu0StBtBtAtAtN1L2XzuyEtFtBtCtFtDtFyCzztN1L1CzutN1L1G1B1V1N2Y1L1Qzu2StDtDyEtCyCyD0BtBtGyEtAyDtBtGzytA0AyCtGyDtAtC0FtGtA0B0EyDyE0D0BtAtDyDzztD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S1P1OtC1P1S1R1S1TtGtAtBzytBtGyEtDzy1OtGzytD1Q1OtGtB1QyBtBtAyDtCyEyDyEtAyE2QtN0A0LzutDtN1B2Z1V1T1S1NzutCyDzyyEtBtN1Q2Z1B1P1RzutCyDtCzztAyDtDyBtDtA%26cr%3D724725711%26a%3Dbgy_dnldastr_18_06%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms}
CHR DefaultSearchURL: Default -> hxxp://srchbar.com/?q={searchTerms}
CHR DefaultSuggestURL: Default -> hxxp://srch.bar/?s={searchTerms}
EmptyTemp:
end