Start::
CreateRestorePoint:
HKU\S-1-5-21-1326076328-647220812-2880691162-1002\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-1326076328-647220812-2880691162-1002\...\MountPoints2: {4ba9e0b9-0a68-11e7-b940-705a0fbf5f31} - "F:\iLinker.exe" 
AutoConfigURL: [S-1-5-21-1326076328-647220812-2880691162-1002] => hxxp://unstop-access.biz/wpad.dat?f6be619176fc020004f69828077f4d6437998453
ManualProxies: 0hxxp://unstop-access.biz/wpad.dat?f6be619176fc020004f69828077f4d6437998453
BHO: Geen Naam -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> Geen bestand
BHO-x32: Geen Naam -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> Geen bestand
Toolbar: HKU\S-1-5-21-1326076328-647220812-2880691162-1002 -> Geen Naam - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  Geen bestand
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\410898281.js [2017-09-10] <==== AANDACHT (Gericht op * .cfg bestand)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\410898281.cfg [2017-09-10] <==== AANDACHT
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Geen bestand
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Geen bestand
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Geen bestand
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Geen bestand
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Geen bestand
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Geen bestand
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> Geen bestand
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Geen bestand
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Geen bestand
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Geen bestand
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Geen bestand
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Geen bestand
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Geen bestand
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Geen bestand
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> Geen bestand
Task: {4A941B77-FD52-4E74-A0F2-7EF0100C2360} - \Microsoft\Windows\UNP\RunCampaignManager -> Geen bestand <==== AANDACHT
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Booking.com.lnk -> C:\Program Files (x86)\Hewlett-Packard\Shared\WizLink.exe () -> hxxp://www.booking.com/index.html?aid=398438&label=square
AlternateDataStreams: C:\Users\hcoor\Cookies:gs5sys [5632]
AlternateDataStreams: C:\Users\hcoor\Desktop\desktop.ini:gs5sys [5888]
AlternateDataStreams: C:\Users\hcoor\AppData\Local\Geschiedenis:gs5sys [8192]
AlternateDataStreams: C:\Users\hcoor\Documents\desktop.ini:gs5sys [7168]
RemoveProxy:
EmptyTemp:
End::