start CreateRestorePoint: CustomCLSID: HKU\S-1-5-21-455634102-3971962441-1493714179-1001_Classes\CLSID\{0D327DA6-B4DF-4842-B833-2CFF84F0948F}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2017\acad.exe /Automation => Geen bestand CustomCLSID: HKU\S-1-5-21-455634102-3971962441-1493714179-1001_Classes\CLSID\{720DB9AF-D62C-4ED0-A377-429C22312852}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2017\acad.exe => Geen bestand CustomCLSID: HKU\S-1-5-21-455634102-3971962441-1493714179-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2017\en-US\acadficn.dll => Geen bestand CustomCLSID: HKU\S-1-5-21-455634102-3971962441-1493714179-1001_Classes\CLSID\{FE186CB0-BEDC-11D5-9B1D-0050DA438716}\localserver32 -> "C:\Program Files\EPLAN\Platform\2.5.4\Bin\EPLAN.exe" => Geen bestand ContextMenuHandlers4: [EncryptionMenu] -> {A470F8CF-A1E8-4f65-8335-227475AA5C46} => -> Geen bestand ContextMenuHandlers4: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> Geen bestand ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> Geen bestand ContextMenuHandlers6: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> Geen bestand Task: {8872D3F4-1EA3-429E-8C43-5FB585E54653} - System32\Tasks\{1E01C950-A9E4-4FED-9CB1-364B33473B1A} => C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files (x86)\Easy Speed Check\uninstall.exe" C:\Program Files (x86)\Easy Speed Check Task: {8C3985D0-4ECD-4056-846E-A2CB4B7FBBF0} - \Microsoft\Windows\UNP\RunCampaignManager -> Geen bestand <==== AANDACHT Task: {98769F9F-D926-49CF-A04F-3EB9BD43AAF4} - System32\Tasks\{863A6AB2-1D06-475D-8DA5-F6CFF2A87ADA} => C:\Windows\system32\pcalua.exe -a D:\Setup.EXE -d D:\ AlternateDataStreams: C:\ProgramData\Temp:5C321E34 [119] HKU\S-1-5-21-455634102-3971962441-1493714179-1001\Software\Classes\.scr: scrfile => <==== AANDACHT HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== AANDACHT Startup: C:\Users\rita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Inktwaarschuwingen controleren - .lnk [2017-09-29] ShortcutTarget: Inktwaarschuwingen controleren - .lnk -> (Geen bestand) Startup: C:\Users\rita\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Inktwaarschuwingen controleren - HP Officejet 4620 series (netwerk).lnk [2017-09-29] ShortcutTarget: Inktwaarschuwingen controleren - HP Officejet 4620 series (netwerk).lnk -> (Geen bestand) BHO-x32: Geen Naam -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> Geen bestand Toolbar: HKU\S-1-5-21-455634102-3971962441-1493714179-1001 -> Geen Naam - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Geen bestand 2018-02-24 15:02 - 2018-02-24 15:02 - 000000000 ____D C:\Users\rita\Desktop\FRST-OlderVersion 2018-01-28 20:48 - 2016-10-14 09:00 - 000000000 ____D C:\Program Files\Common Files\Autodesk Shared 2018-01-28 20:48 - 2016-10-14 09:00 - 000000000 ____D C:\Program Files\Autodesk 2018-01-28 20:48 - 2016-10-14 08:40 - 000000000 ____D C:\ProgramData\Autodesk EmptyTemp: end