start
CreateRestorePoint:
ContextMenuHandlers1: [_Movavivc11] -> {1C604495-4D32-476e-8D7E-FBF50F6C80BF} =>  -> Geen bestand
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> Geen bestand
ContextMenuHandlers6: [_Movavivc11] -> {1C604495-4D32-476e-8D7E-FBF50F6C80BF} =>  -> Geen bestand
Task: {9B48D8A5-1D71-4E79-9513-2E0DDF2F3C24} - \Microsoft\Windows\UNP\RunCampaignManager -> Geen bestand <==== AANDACHT2018-04-01 20:07 - 2018-04-01 20:07 - 000113152 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\_ctypes.pyd
2018-04-01 20:07 - 2018-04-01 20:07 - 000080896 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\bz2.pyd
2018-04-01 20:07 - 2018-04-01 20:07 - 001585152 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\_hashlib.pyd
2018-04-01 20:08 - 2018-04-01 20:08 - 000128512 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\win32api.pyd
2018-04-01 20:08 - 2018-04-01 20:08 - 000137728 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\pywintypes27.dll
2018-04-01 20:08 - 2018-04-01 20:08 - 000548864 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\pythoncom27.dll
2018-04-01 20:08 - 2018-04-01 20:08 - 000689664 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\unicodedata.pyd
2018-04-01 20:08 - 2018-04-01 20:08 - 000438784 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\win32com.shell.shell.pyd
2018-04-01 20:08 - 2018-04-01 20:08 - 001489408 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\wx._core_.pyd
2018-04-01 20:08 - 2018-04-01 20:08 - 001007104 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\wx._gdi_.pyd
2018-04-01 20:08 - 2018-04-01 20:08 - 001039872 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\wx._windows_.pyd
2018-04-01 20:08 - 2018-04-01 20:08 - 001325056 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\wx._controls_.pyd
2018-04-01 20:08 - 2018-04-01 20:08 - 000916992 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\wx._misc_.pyd
2018-04-01 20:08 - 2018-04-01 20:08 - 001084416 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\pysqlite2._sqlite.pyd
2018-04-01 20:08 - 2018-04-01 20:08 - 000149504 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\win32file.pyd
2018-04-01 20:08 - 2018-04-01 20:08 - 000136192 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\win32security.pyd
2018-04-01 20:08 - 2018-04-01 20:08 - 000007680 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\hashobjs_ext.pyd
2018-04-01 20:08 - 2018-04-01 20:08 - 000020992 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\thumbnails_ext.pyd
2018-04-01 20:08 - 2018-04-01 20:08 - 000118784 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\usb_ext.pyd
2018-04-01 20:07 - 2018-04-01 20:07 - 000047616 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\_socket.pyd
2018-04-01 20:07 - 2018-04-01 20:07 - 002224128 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\_ssl.pyd
2018-04-01 20:08 - 2018-04-01 20:08 - 000014848 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\common.time34.pyd
2018-04-01 20:08 - 2018-04-01 20:08 - 000023040 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\win32event.pyd
2018-04-01 20:08 - 2018-04-01 20:08 - 000033280 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\windows.conditional.pyd
2018-04-01 20:08 - 2018-04-01 20:08 - 000019968 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\windows.winwrap.pyd
2018-04-01 20:08 - 2018-04-01 20:08 - 000107520 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\windows.volumes.pyd
2018-04-01 20:08 - 2018-04-01 20:08 - 000223232 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\win32gui.pyd
2018-04-01 20:07 - 2018-04-01 20:07 - 000173568 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\_elementtree.pyd
2018-04-01 20:08 - 2018-04-01 20:08 - 000169472 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\pyexpat.pyd
2018-04-01 20:08 - 2018-04-01 20:08 - 000048128 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\win32inet.pyd
2018-04-01 20:08 - 2018-04-01 20:08 - 000103424 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\wx._html2.pyd
2018-04-01 20:07 - 2018-04-01 20:07 - 000046080 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\_psutil_windows.pyd
2018-04-01 20:08 - 2018-04-01 20:08 - 000633240 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\windows._cacheinvalidation.pyd
2018-04-01 20:08 - 2018-04-01 20:08 - 005408256 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\cello.pyd
2018-04-01 20:08 - 2018-04-01 20:08 - 000010752 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\select.pyd
2018-04-01 20:08 - 2018-04-01 20:08 - 000011776 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\win32crypt.pyd
2018-04-01 20:07 - 2018-04-01 20:07 - 000301568 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\PIL._imaging.pyd
2018-04-01 20:07 - 2018-04-01 20:07 - 000032256 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\_multiprocessing.pyd
2018-04-01 20:07 - 2018-04-01 20:07 - 000026112 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\_yappi.pyd
2018-04-01 20:08 - 2018-04-01 20:08 - 000044032 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\win32process.pyd
2018-04-01 20:08 - 2018-04-01 20:08 - 000027648 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\win32pipe.pyd
2018-04-01 20:08 - 2018-04-01 20:08 - 000029696 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\win32pdh.pyd
2018-04-01 20:08 - 2018-04-01 20:08 - 000038400 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\windows.connectivity.pyd
2018-04-01 20:08 - 2018-04-01 20:08 - 000071168 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\windows.device_monitor.pyd
2018-04-01 20:08 - 2018-04-01 20:08 - 000020480 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\win32profile.pyd
2018-04-01 20:08 - 2018-04-01 20:08 - 000026624 _____ () C:\Users\Karien\AppData\Local\Temp\_MEI90682\win32ts.pyd
C:\Users\Karien\AppData\Local\Temp\_MEI90682
(Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
FF HKLM-x32\...\Firefox\Extensions: [antiphishing@bullguard] - C:\Program Files\BullGuard Ltd\BullGuard\Files32\Antiphishing\FF\antiphishing@bullguard => niet gevonden
CHR StartupUrls: Default -> "hxxp://mysearch.avg.com?cid={C0A0BF78-091B-4BE7-A3F9-CDDA3636979C}&mid=3355ea3271c647d3a021d16d126c2dde-7a6626811069c71e7fbb8a678135deab7a270967&lang=nl&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2013-12-24 15:00:31&v=17.2.0.38&pid=safeguard&sg=&sap=hp","hxxp://mysearch.avg.com?cid={C0A0BF78-091B-4BE7-A3F9-CDDA3636979C}&mid=3355ea3271c647d3a021d16d126c2dde-7a6626811069c71e7fbb8a678135deab7a270967&lang=nl&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2014-02-05 19:06:17&v=17.3.1.204&pid=safeguard&sg=&sap=hp","hxxp://mysearch.avg.com?cid={C0A0BF78-091B-4BE7-A3F9-CDDA3636979C}&mid=3355ea3271c647d3a021d16d126c2dde-7a6626811069c71e7fbb8a678135deab7a270967&lang=nl&ds=AVG&coid=avgtbavg&cmpid=&pr=pr&d=2013-12-24 15:00:31&v=18.0.5.292&pid=safeguard&sg=&sap=hp
hxxp://mysearch.avg.com?cid={C0A0BF78-091B-4BE7-A3F9-CDDA3636979C}&mid=3355ea3271c647d3a021d16d126c2dde-7a6626811069c71e7fbb8a678135deab7a270967&lang=nl&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2014-02-05 19:06:17&v=17.3.1.204&pid=safeguard&sg=&sap=hp","hxxp://www.search.ask.com/?tpid=ORJ-V7C&o=APN11412&pf=V7&trgb=CR&p2=%5EBBK%5EOSJ000%5EYY%5EBE&gct=hp&apn_ptnrs=BBK&apn_dtid=%5EOSJ000%5EYY%5EBE&apn_dbr=cr_34.0.1847.116&apn_uid=6B4CF02A-9A8F-4568-98CB-6202BE03A220&itbv=12.10.6.48&doi=2014-04-21&psv=","hxxp://mysearch.avg.com?cid={C0A0BF78-091B-4BE7-A3F9-CDDA3636979C}&mid=3355ea3271c647d3a021d16d126c2dde-7a6626811069c71e7fbb8a678135deab7a270967&lang=nl&ds=AVG&coid=avgtbavg&cmpid=&pr=pr&d=2014-02-05 19:06:17&v=18.1.0.443&pid=safeguard&sg=&sap=hp","hxxp://mysearch.avg.com?cid={C0A0BF78-091B-4BE7-A3F9-CDDA3636979C}&mid=3355ea3271c647d3a021d16d126c2dde-7a6626811069c71e7fbb8a678135deab7a270967&lang=nl&ds=AVG&coid=avgtbavg&cmpid=&pr=pr&d=2014-02-05 19:06:17&v=18.1.5.512&pid=safeguard&sg=&sap=hp","hxxp://mysearch.avg.com?cid={C0A0BF78-091B-4BE7-A3F9-CDDA3636979C}&mid=3355ea3271c647d3a021d16d126c2dde-7a6626811069c71e7fbb8a678135deab7a270967&lang=nl&ds=AVG&coid=avgtbavg&cmpid=&pr=pr&d=2014-02-05 19:06:17&v=18.1.7.598&pid=safeguard&sg=&sap=hp","hxxps://mysearch.avg.com?cid={E4994EE6-058C-4DB8-B94D-93857650F460}&mid=3355ea3271c647d3a021d16d126c2dde-7a6626811069c71e7fbb8a678135deab7a270967&lang=nl&ds=AVG&coid=avgtbavg&pr=fr&d=2014-08-10 15:14:03&v=3.1.0.6&pid=wtu&sg=&sap=hp","hxxps://mysearch.avg.com?cid={E4994EE6-058C-4DB8-B94D-93857650F460}&mid=3355ea3271c647d3a021d16d126c2dde-7a6626811069c71e7fbb8a678135deab7a270967&lang=nl&ds=AVG&coid=avgtbavg&pr=fr&d=2014-08-10 15:14:03&v=3.1.0.7&pid=wtu&sg=&sap=hp"
S3 DIRECTIO; \??\C:\Program Files\PerformanceTest\DirectIo64.sys [X]
EmptyTemp:
end