start CreateRestorePoint: HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== AANDACHT SearchScopes: HKU\S-1-5-21-964534832-1966221913-2303924523-1001 -> {89426660-49D4-45C8-9DDE-AD483B24E3E6} URL = BHO: Geen Naam -> {0ddcea2a-7b00-4349-8acb-af7ba6da251f} -> Geen bestand FF Extension: (Amazon Assistant for Firefox) - C:\Program Files (x86)\Mozilla Firefox\distribution\extensions\abb-acer@amazon.com [2017-12-19] [Verouderd] R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X] ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Geen bestand Task: {E186D145-BE90-4457-BD4F-993A1994A086} - \Microsoft\Windows\UNP\RunCampaignManager -> Geen bestand <==== AANDACHT AlternateDataStreams: C:\WINDOWS\system32\dns-sd.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\hpinkcoiD711.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\hpinkinsD711.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\hpinkstsD711LM.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\HPScanTRDrv_EN4520.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\HPWia2_EN4520.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ibtproppage.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\MpSigStub.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SET3D5D.tmp:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\dns-sd.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\ibtusb.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\SET17B1.tmp:$CmdTcID [64] AlternateDataStreams: C:\Users\Sandra\Downloads\cmd_fw_installer_6113_c7.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Sandra\Downloads\cmd_fw_installer_6113_c7.exe.kzonbu7.partial:$CmdZnID [26] AlternateDataStreams: C:\Users\Sandra\Downloads\OpenOfficePortable_4.1.2_Patch_1_MultilingualAll.paf.exe:$CmdTcID [64] EmptyTemp: Reboot: end