start
CreateRestorePoint:
Hosts:
C:\Program Files\Reimage
C:\Program Files\ByteFence
C:\Program Files (x86)\Amazon
C:\Program Files\Common Files\McAfee
HKLM-x32\...\Run: [] => [X]
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Geen bestand
SearchScopes: HKU\S-1-5-21-1342168254-4168818190-4248446226-1001 -> DefaultScope {F96DBDCA-BAD1-4A6E-8016-E505B4FE1693} URL = 
SearchScopes: HKU\S-1-5-21-1342168254-4168818190-4248446226-1001 -> {F96DBDCA-BAD1-4A6E-8016-E505B4FE1693} URL = 
R2 Amazon Assistant Service; C:\Program Files (x86)\Amazon\Amazon Assistant\amazonAssistantService.exe [102064 2017-02-28] ()
R2 ByteFenceService; C:\Program Files\ByteFence\ByteFenceService.exe [147936 2017-04-03] (Byte Technologies LLC)
R2 ReimageRealTimeProtector; C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe [8061808 2017-01-19] (ReimageŽ)
R2 rtop; C:\Program Files\ByteFence\rtop\bin\rtop_svc.exe [304456 2017-04-22] ()
S4 mccspsvc; "C:\Program Files\Common Files\McAfee\CSP\1.9.829.0\\McCSPServiceHost.exe" [X]
2017-04-22 17:27 - 2017-04-22 17:28 - 106859936 _____ C:\Users\User\Downloads\DJ2540_188.exe.2nh1yf7.partial
2017-04-22 04:27 - 2017-04-22 04:27 - 00000000 ____D C:\ProgramData\ByteFence
2017-04-22 04:19 - 2017-04-22 04:56 - 00000000 ____D C:\ProgramData\Reimage Protector
2017-04-22 04:19 - 2017-04-22 04:19 - 00004350 _____ C:\WINDOWS\System32\Tasks\ReimageUpdater
2017-04-22 04:18 - 2017-04-22 04:19 - 00000140 _____ C:\WINDOWS\Reimage.ini
2017-04-22 04:16 - 2017-04-22 04:16 - 00003552 _____ C:\WINDOWS\System32\Tasks\ByteFence Scan
2017-04-22 04:16 - 2017-04-22 04:16 - 00003450 _____ C:\WINDOWS\System32\Tasks\ByteFence
2017-04-22 04:15 - 2017-04-22 04:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Booking.com
2017-04-22 04:15 - 2017-04-22 04:15 - 00000000 ____D C:\Program Files (x86)\Booking.com
C:\ProgramData\uninstall2749598.exe
C:\ProgramData\uninstall3072852.exe
Task: {1CDDEDF1-2F36-4130-9654-8650D45DA2CE} - System32\Tasks\ReimageUpdater => C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe [2017-01-19] (ReimageŽ) <==== AANDACHT
Task: {6347765A-5383-426F-9DEF-2283D911C76D} - System32\Tasks\ByteFence Scan => C:\Program Files\ByteFence\ByteFence.exe [2017-04-03] (Byte Technologies LLC) <==== AANDACHT
Task: {EDBF8EC9-C401-40D7-ACC7-A6C81D310E84} - System32\Tasks\ByteFence => C:\Program Files\ByteFence\ByteFence.exe [2017-04-03] (Byte Technologies LLC) <==== AANDACHT
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Booking.com.lnk -> C:\Program Files\Booking.COM\StartURL.exe () -> hxxp://www.booking.com/index.html?aid=379334
EmptyTemp:
end