start CreateRestorePoint: Task: {6415FA2E-0003-4FD1-876A-0F5A423BC9EB} - System32\Tasks\AutoKMS => C:\WINDOWS\AutoKMS\AutoKMS.exe [2016-04-22] () C:\WINDOWS\AutoKMS HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== AANDACHT 2017-09-25 11:02 - 2016-08-15 15:38 - 000003808 _____ C:\WINDOWS\System32\Tasks\AutoKMS EmptyTemp: end