start
CreateRestorePoint:
CustomCLSID: HKU\S-1-5-21-3015601504-3025773419-1296765090-1002_Classes\CLSID\{9486aaf1-0930-362a-962d-8e6908739c817}\InprocServer32 -> 0xF7E4E0C2DF7BD301C544894A8062D4014F0000005800000000000000 => Geen bestand
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Geen bestand
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [98024 2018-06-18] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [425864 2017-12-22] (Acronis International GmbH)
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> {7242F108-46F1-4F2A-B916-395765780D25} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-3015601504-3025773419-1296765090-1002 -> {7242F108-46F1-4F2A-B916-395765780D25} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
FF Extension: (Avira Browser Safety) - C:\Users\Frans\AppData\Roaming\Mozilla\Firefox\Profiles\Hcp9rwd2.default\Extensions\abs@avira.com [2018-01-02]
FF Extension: (Avira Browser Safety) - C:\Users\Frans\AppData\Roaming\Mozilla\Firefox\Profiles\Hcp9rwd2.default\Extensions\abs@avira.com [2018-01-02]
CHR Extension: (Avira Safe Shopping) - C:\Users\Frans\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccbpbkebodcjkknkfkpmfeciinhidaeh [2018-05-16]
S2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [452352 2018-06-18] (Avira Operations GmbH & Co. KG)
S2 AviraPhantomVPN; C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe [346528 2018-05-17] (Avira Operations GmbH & Co. KG)
U3 aswbdisk; geen ImagePath
S3 GENERICDRV; \??\C:\Users\ADMINI~1\AppData\Local\Temp\pft2B9E.tmp\amifldrv64.sys [X] <==== AANDACHT
EmptyTemp:
end