start
CreateRestorePoint:
FirewallRules: [{E5515650-6B83-49E9-9781-1F2DD5B0AB5C}] => (Allow) C:\Windows\KMS-R@1n.exe Geen bestand
FirewallRules: [{F49A020F-A809-4E90-9D4C-D0F0ABAFA68C}] => (Allow) C:\Windows\KMS-R@1n.exe Geen bestand
FirewallRules: [UDP Query User{0B4D8323-7DD2-4C96-8E92-6743433850FC}C:\users\daniel\downloads\stargate worlds (0.8348.1.4046) (2009-06-30) (beta)\data\sgr\binaries\win32\sgbgame.exe] => (Allow) C:\users\daniel\downloads\stargate worlds (0.8348.1.4046) (2009-06-30) (beta)\data\sgr\binaries\win32\sgbgame.exe Geen bestand
FirewallRules: [TCP Query User{3C8B193F-D5D3-4048-BB97-16CD25E879CB}C:\users\daniel\downloads\stargate worlds (0.8348.1.4046) (2009-06-30) (beta)\data\sgr\binaries\win32\sgbgame.exe] => (Allow) C:\users\daniel\downloads\stargate worlds (0.8348.1.4046) (2009-06-30) (beta)\data\sgr\binaries\win32\sgbgame.exe Geen bestand
FirewallRules: [UDP Query User{B3698D44-E5EA-4606-83AC-69A48B85E9A0}C:\users\daniel\downloads\shooter\sgr\binaries\win32\sgbgame.exe] => (Allow) C:\users\daniel\downloads\shooter\sgr\binaries\win32\sgbgame.exe Geen bestand
FirewallRules: [TCP Query User{19F667EE-3841-4EC0-8BBF-E61CAC3BA4BB}C:\users\daniel\downloads\shooter\sgr\binaries\win32\sgbgame.exe] => (Allow) C:\users\daniel\downloads\shooter\sgr\binaries\win32\sgbgame.exe Geen bestand
FirewallRules: [UDP Query User{D159CE81-B5D9-4576-9D81-ED52644DF41A}F:\games\stargate worlds-qa\working\binaries\sgw.exe] => (Allow) F:\games\stargate worlds-qa\working\binaries\sgw.exe Geen bestand
FirewallRules: [TCP Query User{437C4804-F8C2-4BCC-B1C0-524B0FD41DF6}F:\games\stargate worlds-qa\working\binaries\sgw.exe] => (Allow) F:\games\stargate worlds-qa\working\binaries\sgw.exe Geen bestand
FirewallRules: [{3BA2518E-CA62-41B6-9CAD-DCC170A9EB62}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe Geen bestand
FirewallRules: [{FA529AE8-8B5F-479F-8A5B-7952410ED2CB}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe Geen bestand
Task: {3545163B-EFC0-488B-9383-6AE0D4FA78B8} - System32\Tasks\R@1n-KMS\Office16ProPlus => wmic path SoftwareLicensingProduct where (ID="d450596f-894d-49e0-966a-fd39ed4c4c64") call Activate
2019-10-12 16:03 - 2019-10-12 16:03 - 000000000 ____D C:\WINDOWS\system32\Tasks\R@1n-KMS
2019-10-12 16:56 - 2019-08-13 13:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico
EmptyTemp:
end