Start:: CreateRestorePoint: CloseProcesses: HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== AANDACHT CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx Task: {AB57C922-C214-47B3-8933-4D490A973213} - \Microsoft\Windows\UNP\RunCampaignManager -> Geen bestand <==== AANDACHT Task: {C6886350-541E-4575-91D4-B52EB443418B} - System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe FirewallRules: [{919EF4E4-2669-4082-A9E8-B9EEA97E56BE}] => (Block) C:\users\conti\appdata\local\temp\7zs0089\enterprisedu.exe Geen bestand FirewallRules: [{B8F9DC90-AE50-442A-B3EB-F335C0B0CEA8}] => (Block) C:\users\conti\appdata\local\temp\7zs0089\enterprisedu.exe Geen bestand FirewallRules: [UDP Query User{6854B50B-FEE0-4444-9E55-B84B19B65E6B}C:\users\conti\appdata\local\temp\7zs0089\enterprisedu.exe] => (Allow) C:\users\conti\appdata\local\temp\7zs0089\enterprisedu.exe Geen bestand FirewallRules: [TCP Query User{5091F731-F694-4A1E-831A-48A32F697284}C:\users\conti\appdata\local\temp\7zs0089\enterprisedu.exe] => (Allow) C:\users\conti\appdata\local\temp\7zs0089\enterprisedu.exe Geen bestand FirewallRules: [{D02BAEF5-5536-4F7A-8D0F-58EA371AD403}] => (Allow) C:\Users\Conti\AppData\Local\Temp\7zS313A\HPDiagnosticCoreUI.exe Geen bestand FirewallRules: [{71C1472E-5F5D-449E-919D-522CBC4EDD9D}] => (Allow) C:\Users\Conti\AppData\Local\Temp\7zS313A\HPDiagnosticCoreUI.exe Geen bestand FirewallRules: [{3A36CA46-09BF-4859-8C7D-62977E4383B0}] => (Allow) C:\Users\Conti\AppData\Local\Temp\7zS2063\HPDiagnosticCoreUI.exe Geen bestand FirewallRules: [{2DF21478-8228-4478-A7B9-E3795DE5C6FD}] => (Allow) C:\Users\Conti\AppData\Local\Temp\7zS2063\HPDiagnosticCoreUI.exe Geen bestand FirewallRules: [{F5B2F1C5-D175-46D5-A5FF-887E5F81FAD4}] => (Allow) C:\Users\Conti\AppData\Local\Temp\7zS306A\HPDiagnosticCoreUI.exe Geen bestand FirewallRules: [{025E2DEE-7C90-4EA6-AB16-8D40F801B2A5}] => (Allow) C:\Users\Conti\AppData\Local\Temp\7zS306A\HPDiagnosticCoreUI.exe Geen bestand FirewallRules: [{4CD67757-21DF-4D06-8742-63C7CE022343}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe Geen bestand FirewallRules: [{D8A91682-F0D4-4C69-AFF6-1A92ABD7F55D}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe Geen bestand FirewallRules: [{7010B0BE-DC87-4A96-A493-CFF645010866}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe Geen bestand FirewallRules: [{85887294-2A07-4382-B1FE-CCFC5E34F419}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe Geen bestand EmptyTemp: End::