start::
CreateRestorePoint:
CloseProcesses:
HKLM\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe (Geen bestand)
HKLM\...\Run: [WSVCUUpdateHelper.exe] => C:\Program Files\Wondershare\UniConverter 13\WSVCUUpdateHelper.exe (Geen bestand)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Geen bestand)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe (Geen bestand)
HKLM-x32\...\Run: [WSVCUUpdateHelper.exe] => C:\Program Files (x86)\Wondershare\Video Converter Free\WSVCUUpdateHelper.exe (Geen bestand)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restrictie <==== AANDACHT
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restrictie <==== AANDACHT
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restrictie <==== AANDACHT
HKU\S-1-12-1-1045427199-1201164449-3859945119-2244745868\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize  (Geen bestand)
HKU\S-1-12-1-1045427199-1201164449-3859945119-2244745868\...\Run: [hiddis 5 check updates and quit] => "C:\Program Files (x86)\Hidden Disk 5\hiddis.exe" protocol3 (Geen bestand)
GroupPolicy: Restrictie ? <==== AANDACHT
Policies: C:\ProgramData\NTUSER.pol: Restrictie <==== AANDACHT
HKU\S-1-12-1-1045427199-1201164449-3859945119-2244745868\SOFTWARE\Policies\Google: Restrictie <==== AANDACHT
Task: {2531997E-CBA6-433A-9D98-1A65BD082C75} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe --automatic (Geen bestand)
Task: {7E2CA4D9-AE79-4274-90CA-4BE95A22B8FF} - System32\Tasks\Opera GX scheduled Autoupdate 1643383214 => C:\Users\zander13381\AppData\Local\Programs\Opera GX\launcher.exe --scheduledautoupdate $(Arg0) (Geen bestand)
Task: {95D26D33-CE77-4FB9-990E-24D7A696AE37} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2390676961-1970208939-1502202127-1000 => C:\Program Files (x86)\Microsoft OneDrive\OneDriveStandaloneUpdater.exe /reporting (Geen bestand)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\WINDOWS\System32\MbaeParserTask.exe (Geen bestand)
S3 WsDrvInst; "C:\Program Files (x86)\Wondershare\Video Converter Free\Transfer\DriverInstall.exe" [X]
U4 npcap_wifi; geen ImagePath
2022-06-10 21:27 - 2022-02-24 18:27 - 000000000 ____D C:\Users\zander13381\AppData\Roaming\FreeFirewall
HKLM\...\StartupApproved\Run: => "Wondershare Helper Compact.exe"
HKLM\...\StartupApproved\Run: => "WSVCUUpdateHelper.exe"
HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe"
HKLM\...\StartupApproved\Run32: => "WSVCUUpdateHelper.exe"
FirewallRules: [{04704025-7F97-4A0C-B40F-583CFD2881C1}] => (Allow) C:\Program Files\McAfee\Agent\macmnsvc.exe => Geen bestand
FirewallRules: [{C093D563-C0EE-4260-9F31-DD80500F2717}] => (Allow) C:\Program Files\McAfee\Agent\macmnsvc.exe => Geen bestand
FirewallRules: [{BD60472D-8E60-4D09-B671-02F1967455C6}] => (Allow) C:\Program Files\McAfee\Agent\macmnsvc.exe => Geen bestand
FirewallRules: [{7BC95213-608C-4321-A118-E5BD10FE9401}] => (Allow) C:\Program Files\McAfee\Agent\macmnsvc.exe => Geen bestand
FirewallRules: [{C64959C2-AA72-45CF-8502-A2CA62ED915E}] => (Allow) C:\Program Files\McAfee\Agent\macmnsvc.exe => Geen bestand
FirewallRules: [{7CC60B48-DA13-40CA-9D4D-86AAA4323220}] => (Allow) C:\Program Files\McAfee\Agent\macmnsvc.exe => Geen bestand
FirewallRules: [{1385A442-C23E-49FB-A4D7-D46576475026}] => (Allow) C:\Users\zander13381\AppData\Local\Programs\Opera GX\82.0.4227.50\opera.exe => Geen bestand
FirewallRules: [{9751BA05-8A58-4617-A823-DD9ECD481839}] => (Allow) C:\Program Files (x86)\iMobie\DroidKit\xldownload\download\MiniThunderPlatform.exe => Geen bestand
FirewallRules: [{378F1224-BB67-4463-8C1F-5ADCC2CA1A83}] => (Allow) C:\Program Files (x86)\iMobie\DroidKit\xldownload\download\MiniThunderPlatform.exe => Geen bestand
FirewallRules: [{C7892E05-0DB5-433B-96BE-243B256ED590}] => (Allow) C:\Users\zander13381\Downloads\freefirewall-setup.exe => Geen bestand
FirewallRules: [{11882AF4-75A7-4C2B-8576-11968BAC5E62}] => (Allow) C:\Users\zander13381\AppData\Roaming\uTorrent\uTorrent.exe => Geen bestand
FirewallRules: [{8784BA47-F27F-4CCE-830C-A91CAC148639}] => (Allow) C:\Users\zander13381\AppData\Roaming\uTorrent\uTorrent.exe => Geen bestand
FirewallRules: [{C11E52AD-7833-44DB-B536-3B220E5916F3}] => (Allow) C:\Users\zander13381\AppData\Roaming\uTorrent Web\utweb.exe => Geen bestand
FirewallRules: [{41C921C4-79A4-4E39-B7C8-673F764C4226}] => (Allow) C:\Users\zander13381\AppData\Roaming\uTorrent Web\utweb.exe => Geen bestand
EmptyTemp:
Reboot:
end::