Start::
CreateRestorePoint:
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Ask) C:\Program Files (x86)\Ask.com\Updater\Updater.exe
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [ApnUpdater] => C:\Program Files (x86)\Ask.com\Updater\Updater.exe [1648056 2014-01-31] (Ask)
HKLM-x32\...\Run: [ApnTBMon] => C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1935936 2016-12-12] (APN)
HKU\S-1-5-21-172788743-346865708-4148456231-1003\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.search.ask.com/?tpid=ORJ-ST-SPE&o=APN11461&pf=V7&trgb=IE&p2=%5EBE7%5ESET000%5EYY%5EBE&gct=hp&apn_ptnrs=BE7&apn_dtid=%5ESET000%5EYY%5EBE&apn_dbr=ie_10.0.9200.16537&apn_uid=FB96BB40-96CC-4A4F-B859-20FD446B3C94&itbv=12.18.0.81&doi=2014-10-17&psv=&pt=tb
URLSearchHook: HKU\S-1-5-21-172788743-346865708-4148456231-1003 - UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
SearchScopes: HKU\S-1-5-21-172788743-346865708-4148456231-1003 -> DefaultScope {21EABF89-6AAC-48F1-AD74-DBA2D0DECE81} URL = hxxp://www.search.ask.com/web?tpid=ORJ-ST-SPE&o=APN11461&pf=V7&p2=%5EBE7%5EOSJ000%5EYY%5EBE&gct=&itbv=12.18.0.81&apn_uid=FB96BB40-96CC-4A4F-B859-20FD446B3C94&apn_ptnrs=BE7&apn_dtid=%5EOSJ000%5EYY%5EBE&apn_dbr=ie_10.0.9200.16537&doi=2014-10-17&trgb=IE&q={searchTerms}&psv=&pt=tb 
SearchScopes: HKU\S-1-5-21-172788743-346865708-4148456231-1003 -> {21EABF89-6AAC-48F1-AD74-DBA2D0DECE81} URL = hxxp://www.search.ask.com/web?tpid=ORJ-ST-SPE&o=APN11461&pf=V7&p2=%5EBE7%5EOSJ000%5EYY%5EBE&gct=&itbv=12.18.0.81&apn_uid=FB96BB40-96CC-4A4F-B859-20FD446B3C94&apn_ptnrs=BE7&apn_dtid=%5EOSJ000%5EYY%5EBE&apn_dbr=ie_10.0.9200.16537&doi=2014-10-17&trgb=IE&q={searchTerms}&psv=&pt=tb
SearchScopes: HKU\S-1-5-21-172788743-346865708-4148456231-1003 -> {DCF204BE-997A-4E13-A1FD-44A8CA6DD744} URL = hxxp://www.search.ask.com/web?tpid=ORJ-ST-SPE&o=APN11461&pf=V7&p2=^BE7^OSJ000^YY^BE&gct=&itbv=12.18.0.81&apn_uid=FB96BB40-96CC-4A4F-B859-20FD446B3C94&apn_ptnrs=BE7&apn_dtid=^OSJ000^YY^BE&apn_dbr=ie_10.0.9200.16537&doi=2014-10-17&trgb=IE&q={searchTerms}&psv=&pt=tb
BHO: Shopping App by Ask -> {4F524A2D-5354-2D53-5045-7A786E7484D7} -> C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-ST-SPE\Passport_x64.dll [2016-11-09] (APN LLC.)
BHO: Ask Toolbar -> {4F524A2D-5637-4300-76A7-7A786E7484D7} -> C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-V7C\Passport_x64.dll [2016-12-12] (APN LLC.)
BHO-x32: Shopping App by Ask -> {4F524A2D-5354-2D53-5045-7A786E7484D7} -> C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-ST-SPE\Passport.dll [2016-11-09] (APN LLC.)
BHO-x32: Ask Toolbar -> {4F524A2D-5637-4300-76A7-7A786E7484D7} -> C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-V7C\Passport.dll [2016-12-12] (APN LLC.)
BHO-x32: Ask Toolbar -> {D4027C7F-154A-4066-A1AD-4243D8127440} -> C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2014-01-31] (Ask)
Toolbar: HKLM - Ask Toolbar - {4F524A2D-5637-4300-76A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-V7C\Passport_x64.dll [2016-12-12] (APN LLC.)
Toolbar: HKLM - Shopping App by Ask - {4F524A2D-5354-2D53-5045-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-ST-SPE\Passport_x64.dll [2016-11-09] (APN LLC.)
Toolbar: HKLM-x32 - Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2014-01-31] (Ask)
Toolbar: HKLM-x32 - Ask Toolbar - {4F524A2D-5637-4300-76A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-V7C\Passport.dll [2016-12-12] (APN LLC.)
Toolbar: HKLM-x32 - Shopping App by Ask - {4F524A2D-5354-2D53-5045-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-ST-SPE\Passport.dll [2016-11-09] (APN LLC.)
Toolbar: HKU\S-1-5-21-172788743-346865708-4148456231-1003 -> Geen Naam - {D4027C7F-154A-4066-A1AD-4243D8127440} -  Geen bestand
Toolbar: HKU\S-1-5-21-172788743-346865708-4148456231-1003 -> Ask Toolbar - {4F524A2D-5637-4300-76A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-V7C\Passport_x64.dll [2016-12-12] (APN LLC.)
Toolbar: HKU\S-1-5-21-172788743-346865708-4148456231-1003 -> Shopping App by Ask - {4F524A2D-5354-2D53-5045-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\ORJ-ST-SPE\Passport_x64.dll [2016-11-09] (APN LLC.)
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => niet gevonden
R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [202304 2016-12-12] (APN LLC.)
2015-03-25 17:59 - 2015-03-25 17:59 - 001179648 _____ (Eastman Kodak Company) C:\Users\KARINA\AppData\Local\Temp\7.5.20.2-EasyShrx.Dll
2015-02-17 15:25 - 2015-04-08 01:45 - 000000000 ____D () C:\Users\KARINA\AppData\Local\Temp\avgnt.exe
2016-07-20 13:57 - 2016-07-20 13:57 - 000741440 _____ (Oracle Corporation) C:\Users\KARINA\AppData\Local\Temp\jre-8u101-windows-au.exe
2016-10-22 10:30 - 2016-10-22 10:30 - 000737856 _____ (Oracle Corporation) C:\Users\KARINA\AppData\Local\Temp\jre-8u111-windows-au.exe
2017-01-19 09:48 - 2017-01-19 09:48 - 000739904 _____ (Oracle Corporation) C:\Users\KARINA\AppData\Local\Temp\jre-8u121-windows-au.exe
2017-04-20 09:23 - 2017-04-20 09:23 - 000739904 _____ (Oracle Corporation) C:\Users\KARINA\AppData\Local\Temp\jre-8u131-windows-au.exe
2017-07-23 17:15 - 2017-07-23 17:15 - 000739904 _____ (Oracle Corporation) C:\Users\KARINA\AppData\Local\Temp\jre-8u141-windows-au.exe
2017-10-21 18:02 - 2017-10-21 18:02 - 001856576 _____ (Oracle Corporation) C:\Users\KARINA\AppData\Local\Temp\jre-8u151-windows-au.exe
2018-01-17 09:28 - 2018-01-17 09:28 - 001864256 _____ (Oracle Corporation) C:\Users\KARINA\AppData\Local\Temp\jre-8u161-windows-au.exe
2018-04-26 15:28 - 2018-04-26 15:28 - 001884616 _____ (Oracle Corporation) C:\Users\KARINA\AppData\Local\Temp\jre-8u171-windows-au.exe
2015-10-21 00:32 - 2015-10-21 00:32 - 000585824 _____ (Oracle Corporation) C:\Users\KARINA\AppData\Local\Temp\jre-8u65-windows-au.exe
2015-11-25 01:07 - 2015-11-25 01:07 - 000585824 _____ (Oracle Corporation) C:\Users\KARINA\AppData\Local\Temp\jre-8u66-windows-au.exe
2016-01-20 12:22 - 2016-01-20 12:22 - 000644704 _____ (Oracle Corporation) C:\Users\KARINA\AppData\Local\Temp\jre-8u71-windows-au.exe
2016-02-09 00:36 - 2016-02-09 00:36 - 000736352 _____ (Oracle Corporation) C:\Users\KARINA\AppData\Local\Temp\jre-8u73-windows-au.exe
2016-03-27 18:50 - 2016-03-27 18:50 - 000736320 _____ (Oracle Corporation) C:\Users\KARINA\AppData\Local\Temp\jre-8u77-windows-au.exe
2016-04-24 00:05 - 2016-04-24 00:05 - 000739904 _____ (Oracle Corporation) C:\Users\KARINA\AppData\Local\Temp\jre-8u91-windows-au.exe
Task: {7F0FE676-6F1F-446E-984F-6AE6E58AA9E0} - System32\Tasks\DistromaticSearchProtect-hourly => C:\Program Files (x86)\Amazon Browser Settings\AmznSearchProtect.exe <==== AANDACHT
Task: {B779DFE0-49AB-41F9-A49E-97A637C49CE5} - System32\Tasks\DistromaticSearchProtect-logon => C:\Program Files (x86)\Amazon Browser Settings\AmznSearchProtect.exe <==== AANDACHT
Task: {D457BEC0-8215-4CC2-90C2-6B4276AD6EA2} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe [2014-01-31] () <==== AANDACHT
Task: {D6AF703D-432F-4BEE-BF06-22D53DC9718E} - System32\Tasks\DistromaticUpdater-logon => C:\Program Files (x86)\Amazon Browser Settings\updater.exe <==== AANDACHT
Task: {F655B23E-B289-44A4-A767-D13143ED5395} - System32\Tasks\DistromaticUpdater-periodic => C:\Program Files (x86)\Amazon Browser Settings\updater.exe <==== AANDACHT
Shortcut: C:\Users\KARINA\AppData\Local\Microsoft\Windows\RoamingTiles\-17620771510.lnk -> hxxp://www.search.ask.com/web?o=APN11461&p2=%5EBE7%5EOSJ000%5EYY%5EBE&apn_ptnrs=BE7&apn_dtid=%5EOSJ000%5EYY%5EBE&tpid=ORJ-ST-SPE&apn_dbr=ie_10.0.9200.16537&trgb=IE&apn_uid=FB96BB40-96CC-4A4F-B859-20FD446B3C94&tbv=12.25.2.61&itbv=12.18.0.81&doi=2014-10-17&crxv=105.2&psv
EmptyTemp:
End::