start
CreateRestorePoint:
CustomCLSID: HKU\S-1-5-21-3495224090-2880344782-4187742138-1001_Classes\CLSID\{d79b57ed-727c-4ab8-ba67-e7c6fd30fac1}\localserver32 -> C:\Program Files\TotalAV\TotalAV.exe => Geen bestand
AlternateDataStreams: C:\Windows:AstInfo [0]
AlternateDataStreams: C:\WINDOWS\zoek-delete.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\aepic(162).dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-crt-conio-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-crt-convert-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-crt-environment-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-crt-filesystem-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-crt-heap-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-crt-locale-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-crt-math-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-crt-multibyte-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-crt-private-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-crt-process-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-crt-runtime-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-crt-stdio-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-crt-string-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-crt-time-l1-1-0.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-crt-utility-l1-1-0.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\apphelp(163).dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\appinfo(164).dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\AudioSes(165).dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\BRCrypt.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\BrDctF2.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\BrDctF2L.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\BrDctF2S.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\brinsstr.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\BrMfNt.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\BrMuSNMP.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\BrNetSti.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Brnsplg.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\BrnStiCp.cpl:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\BroSNMP.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\BrSti07a.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\BrUsi09a.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\BrWia09b.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\BrWiaNCp.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\centel.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\dciman32(167).dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\dfp.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\DfpCommon.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\fbnative.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\lockscreencn.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\msjava.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\NSSearch.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\nvaudcap32v.dll:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\nvcpl.cpl:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\nvcplui.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\nvcpluir.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\nvdispco3234174.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\nvdispco3234195.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\nvdispgenco3234174.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\nvdispgenco3234195.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\sdnclean.exe:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Vim.RWBlock.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\vimbase.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\vimsdk.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\WdfCoinstaller01009.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\wer(168).dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\WISPTIS.EXE:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\wu.upgrade.ps.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\WudfUpdate_01009.dll:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\eubakup.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\EUBKMON.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\eudskacs.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\EuFdDisk.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\nvvad32v.sys:$CmdTcID [130]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\tap0901.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\UimBus.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\UimFIO.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\uim_devim.sys:$CmdTcID [64]
AlternateDataStreams: C:\WINDOWS\system32\Drivers\uim_im.sys:$CmdTcID [64]
AlternateDataStreams: C:\ProgramData\TEMP:5C321E34 [125]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\0425NT.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\08e6e730-35cb-74a6-7815-c1e70b0aac90.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\1-Kopie van Medicijnnen bijhouden vanaf 10-3-2016 kopie 1(1).xls:$CmdTcID [64]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\1-Kopie van Medicijnnen bijhouden vanaf 10-3-2016 kopie 1(1).xls:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\1-Kopie van Medicijnnen bijhouden vanaf 10-3-2016 kopie 1(1).xlsm:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\1-Kopie van Medicijnnen bijhouden vanaf 10-3-2016 kopie 1.xls:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\1-Kopie van Medicijnnen bijhouden vanaf 10-3-2016 kopie 1.xlsm:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\1-test_medicijnen_voorraad.xlsm:$CmdTcID [64]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\1-test_medicijnen_voorraad.xlsm:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\1-test_medicijnen_voorraad_10032016.xlsm:$CmdTcID [64]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\1-test_medicijnen_voorraad_10032016.xlsm:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\12631334_892005677586535_9126442196001546012_n.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\12651253_1099558116731476_7602429618179508011_n.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\12662581_596350067188654_92139132378461144_n.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\16406424_1388037744550177_3557894990234795778_n.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\16425727_1388534617833823_83793801060567607_n.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\1bd9140f-5de9-4f92-1a1c-fbb48e3aee9d.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\2013090415327gebruikershandleidingcom.pdf:$CmdTcID [64]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\2013090415327gebruikershandleidingcom.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\20161205123510gebruikershandleidingcom.pdf:$CmdTcID [64]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\20161205123510gebruikershandleidingcom.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\a4557871-e8b3-d7b9-c55d-6f64a1c578e2.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\Admin2016testbestandHelpMij.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\adwcleaner_5.036.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\adwcleaner_5.036.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\b5_t4_samenvatting.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\Belasting Ron 2016, Ontvangstbevestiging_Aangifte_inkomstenbelasting_2016_05-04-2017_11.55u.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\bijlage_ Nieuws uit B&W(1).pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\bijlage_ Nieuws uit B&W.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\BlackBerryDesktopSoftware_1.2.0.52_B59.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\BlackBerryDesktopSoftware_1.2.0.52_B59.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\BTH-12april2016van0900-0930uur.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\ccsetup521.exe:$CmdTcID [130]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\ccsetup521.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\CD datalijst forum.xlsm:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\ClassicShellSetup_4_2_5c.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\ClassicShellSetup_4_2_5c.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\CreativeCloudSet-Up.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\doc sepa.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\Emma en violet.jpg:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\Feestdagenvergoeding PGB Blanco 12-12-2016.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\Financieel jaaroverzicht 2015 (1).pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\Financieel jaaroverzicht 2015 (2).pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\Financieel jaaroverzicht 2015.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\Firefox Setup Stub 51.0.1.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\Gesprek orientatie op werk (1-68XA8VZ).pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\hdtune_255.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\Interview OG.docx:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\Jaarnota_26500355963.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\Jaaropgave -2015.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\LineInst.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\LineInst.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\log.txt:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\Loonstrook 07-2016.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\Loonstrook 08-2016.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\Loonstrook 09-2016.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\loonstrook_01_2017_17012017.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\loonstrook_05_2016_12052016(1).pdf:$CmdTcID [64]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\loonstrook_05_2016_12052016(1).pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\loonstrook_05_2016_12052016.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\loonstrook_11_2016_12112016(1).pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\loonstrook_11_2016_12112016(2).pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\loonstrook_11_2016_12112016.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\loonstrook_12_2016_11122016(1).pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\loonstrook_12_2016_11122016.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\m5_t5_samenvatting.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\mededelingen_NL22RABO0103535713_EUR_20160131.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\Medicijnnen bijhouden vanaf 10-3-2016 kopie 1.xls:$CmdTcID [64]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\Medicijnnen bijhouden vanaf 10-3-2016 kopie 1.xls:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\MINIKIT_Neo_Update_NLNL.plf:$CmdTcID [64]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\MINIKIT_Neo_Update_NLNL.plf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\Ontvangstbevestiging_Aangifte_inkomstenbelasting_2015_01-04-2016_13.44u(1).pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\Ontvangstbevestiging_Aangifte_inkomstenbelasting_2015_01-04-2016_13.44u(2).pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\Ontvangstbevestiging_Aangifte_inkomstenbelasting_2015_01-04-2016_13.44u.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\Ontvangstbevestiging_Aangifte_inkomstenbelasting_2015_01-04-2016_14.46u.pdf:$CmdTcID [64]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\Ontvangstbevestiging_Aangifte_inkomstenbelasting_2015_01-04-2016_14.46u.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\Ontvangstbevestiging_Aangifte_inkomstenbelasting_2015_01-04-2016_15.39u.pdf:$CmdTcID [64]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\Ontvangstbevestiging_Aangifte_inkomstenbelasting_2015_01-04-2016_15.39u.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\Ontvangstbevestiging_Aangifte_inkomstenbelasting_2015_04-04-2016_21.06u.pdf:$CmdTcID [64]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\Ontvangstbevestiging_Aangifte_inkomstenbelasting_2015_04-04-2016_21.06u.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\Ontvangstbevestiging_Aangifte_inkomstenbelasting_2016_05-04-2017_11.55u.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\Ontvangstbevestiging_Aangifte_inkomstenbelasting_2016_05-04-2017_14.14u.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\ophcrack-notables-livecd-3.6.0.iso:$CmdTcID [64]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\ophcrack-notables-livecd-3.6.0.iso:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\pdf-editor_setup_full1281.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\plugin.video.genesis-5.1.4.zip:$CmdTcID [64]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\plugin.video.genesis-5.1.4.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\Polisvoorwaarden Volkswagen Up ! Manuel.pdf:$CmdTcID [64]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\Polisvoorwaarden Volkswagen Up ! Manuel.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\RapportSetup.exe:$CmdTcID [130]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\RapportSetup.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\repository.lambda-1.1.0.zip:$CmdTcID [130]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\repository.lambda-1.1.0.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\rijvaard106.pdf:$CmdTcID [64]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\rijvaard106.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\RpprtSetup(1).exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\RSITx64.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\RSITx64.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\Service Voucher 399555711.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\uitkeringsbedragenper1januari2016.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\Vistumbler_v10-6.exe:$CmdTcID [64]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\Vistumbler_v10-6.exe:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\Werken met kooldioxide172_37942.pdf:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\wetransfer-a328da.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\Win10PE_SE_2016-10-06.zip:$CmdTcID [64]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\Win10PE_SE_2016-10-06.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\WinDlg_124.zip:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\[otorrents.com]Game-Of-Thrones-Season-5-2015-1080p.torrent:$CmdTcID [130]
AlternateDataStreams: C:\Users\Feyenoorder\Downloads\[otorrents.com]Game-Of-Thrones-Season-5-2015-1080p.torrent:$CmdZnID [26]
AlternateDataStreams: C:\Users\Feyenoorder\AppData\Roaming\inst.exe:$CmdTcID [64]
(COMODO) C:\Program Files\COMODO\Internet Security Essentials\isesrv.exe
C:\Program Files\COMODO\Internet Security Essentials
(COMODO) C:\Program Files\COMODO\Internet Security Essentials\vkise.exe
HKLM\...\Run: [IseUI] => C:\Program Files\COMODO\Internet Security Essentials\vkise.exe [4260040 2018-08-31] (COMODO)
GroupPolicy: Restrictie - Chrome <==== AANDACHT
GroupPolicyScripts: Restrictie <==== AANDACHT
CHR HKLM\SOFTWARE\Policies\Google: Restrictie <==== AANDACHT
Toolbar: HKU\S-1-5-21-3495224090-2880344782-4187742138-1001 -> Geen Naam - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  Geen bestand
FF Plugin HKU\S-1-5-21-3495224090-2880344782-4187742138-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Feyenoorder\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [Geen bestand]
R2 isesrv; C:\Program Files\COMODO\Internet Security Essentials\isesrv.exe [133840 2017-08-08] (COMODO)
R1 isedrv; C:\WINDOWS\system32\drivers\isedrv.sys [49640 2018-08-29] (COMODO)
2018-11-08 10:09 - 2018-11-08 10:09 - 000000000 ____D C:\Users\Feyenoorder\Desktop\FRST-OlderVersion
2018-11-05 14:27 - 2015-12-25 14:33 - 000000000 ____D C:\Program Files\Panda Security
2018-11-05 13:55 - 2015-12-25 14:34 - 000000000 ____D C:\Users\Feyenoorder\AppData\Roaming\Panda Security
2018-11-05 13:55 - 2015-12-25 13:55 - 000000000 ____D C:\ProgramData\Panda Security
2018-11-03 18:57 - 2013-10-25 10:11 - 000000000 ____D C:\ProgramData\Comodo
2018-11-03 18:57 - 2013-10-25 10:11 - 000000000 ____D C:\Program Files\COMODO
2018-11-03 18:55 - 2013-10-25 10:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\COMODO
2018-09-28 18:11 - 2018-11-08 10:11 - 004119568 _____ (COMODO) C:\Users\Feyenoorder\AppData\Local\Temp\ise_installer.exe
EmptyTemp:
end