Start:: CreateRestorePoint: CloseProcesses: ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Geen bestand ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Geen bestand FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restrictie <==== AANDACHT CHR HKLM\SOFTWARE\Policies\Google: Restrictie <==== AANDACHT Task: {071D9BD9-6164-49E5-A098-870D67569A5E} - System32\Tasks\AutoPico Daily Restart => D:\KMSpico\AutoPico.exe S2 Service KMSELDI; D:\KMSpico\Service_KMS.exe [X] U3 aswbdisk; geen ImagePath U3 aswblog; geen ImagePath 2019-10-08 21:19 - 2019-10-08 21:19 - 000004608 _____ C:\WINDOWS\SECOH-QAD.exe 2019-10-08 21:19 - 2019-10-08 21:19 - 000003584 _____ C:\WINDOWS\SECOH-QAD.dll 2019-10-08 21:19 - 2019-10-08 21:19 - 000003436 _____ C:\WINDOWS\system32\Tasks\AutoPico Daily Restart 2019-10-08 21:19 - 2019-10-08 21:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico 2019-10-08 21:18 - 2019-10-08 21:24 - 000000000 ____D C:\ProgramData\O3FILGZKAI9ECJMVHMZAD0J7M 2019-10-08 21:18 - 2018-11-15 13:36 - 003229424 _____ C:\Users\Dell\AppData\Roaming\KMSpico-setup.exe 2019-10-08 14:44 - 2019-10-08 14:50 - 000000000 ____D C:\ProgramData\5UHDRLHSJHNJPP1014N96SFMA 2019-10-08 14:42 - 2019-10-08 14:42 - 000000000 ____D C:\ProgramData\H52MIA7M0IVAEZKEH3UE02KEX 2019-10-08 14:42 - 2019-10-08 14:42 - 000000000 ____D C:\ProgramData\{2FB9CD1E-0233-D443-4B1F-C0584BF89909} 2019-10-08 14:42 - 2019-10-08 14:42 - 000000000 ____D C:\ProgramData\{1BAA6CC6-A3EB-E050-93BE-D36C93598A3D} VirusTotal: C:\Users\Dell\AppData\Local\34afb9b507.db C:\Users\Dell\AppData\Roaming\viddl.exe EmptyTemp: End::