start::
CreateRestorePoint:
CloseProcesses:
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] -> 
Task: {E5AD57C0-9BC8-41F6-A364-B5CEA243AE82} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe  (Geen bestand)
Task: {6ECC17BA-2F21-4D1D-A937-AF5B7E29ED7A} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => %systemroot%\system32\MusNotification.exe  (Geen bestand)
Task: {D2974240-5CCB-46D7-BEF3-4BA58D135BEA} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_Broker_Display => %systemroot%\system32\MusNotification.exe  Display (Geen bestand)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (Geen bestand)
FF Notifications: Mozilla\Firefox\Profiles\0j9msxzw.default-release -> hxxps://vyzbm.crystalcraft.top
2024-01-03 16:54 - 2024-01-03 16:55 - 054963608 _____ (IObit ) C:\Users\hurkm\Downloads\advanced-systemcare-setup.exe
2023-12-11 14:10 - 2023-12-11 14:10 - 009850880 _____ C:\WINDOWS\system32\config\DRIVERS.iobit
2023-12-07 09:46 - 2023-12-07 09:46 - 057272296 _____ (IObit ) C:\Users\hurkm\Downloads\iobit_malware_fighter_setup.exe 
2024-01-05 14:17 - 2023-11-14 15:17 - 000000000 ____D C:\Program Files (x86)\IObit
2024-01-05 14:13 - 2023-11-14 15:18 - 000000000 ____D C:\Users\hurkm\AppData\LocalLow\IObit
2024-01-05 14:13 - 2023-11-14 15:17 - 000000000 ____D C:\Users\hurkm\AppData\Roaming\IObit
2024-01-05 14:13 - 2023-11-14 15:17 - 000000000 ____D C:\ProgramData\IObit
FW: McAfee (Enabled) {2FDD6819-222E-5E9F-F5E7-E13A2241D502}
HKLM\...\StartupApproved\Run32: => "IObit Malware Fighter"
HKU\S-1-5-21-2343222833-1654671474-3426894111-1001\...\StartupApproved\Run: => "Advanced SystemCare 12"
EmptyTemp:
End::