Start::
CreateRestorePoint:
CloseProcesses:
S4 sedsvc; "C:\Program Files\rempl\sedsvc.exe" [X]
CustomCLSID: HKU\S-1-5-21-2510740528-1461986670-2548991349-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\Vivi\AppData\Local\Microsoft\OneDrive\19.192.0926.0012\amd64\FileSyncShell64.dll => Geen bestand
CustomCLSID: HKU\S-1-5-21-2510740528-1461986670-2548991349-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\Vivi\AppData\Local\Microsoft\OneDrive\19.192.0926.0012\amd64\FileSyncShell64.dll => Geen bestand
CustomCLSID: HKU\S-1-5-21-2510740528-1461986670-2548991349-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\Vivi\AppData\Local\Microsoft\OneDrive\19.192.0926.0012\amd64\FileSyncShell64.dll => Geen bestand
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> Geen bestand
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Booking.com.lnk -> C:\Program Files (x86)\HP\Shared\WizLink.exe () -> hxxp://secure.rezserver.com/sdk/v1/LinkFwd?refid=7684&destination=booking&refclickid=square
FirewallRules: [{2991367A-5AAB-4A02-AAB0-087877F8E1FE}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe Geen bestand
EmptyTemp:
End::