start CreateRestorePoint: () C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe (AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.3.8\ToolbarUpdater.exe C:\Program Files (x86)\Common Files\AVG Secure Search () C:\Program Files (x86)\AVG Web TuneUp\vprot.exe HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [2195968 2018-03-21] () HKLM-x32\...\Run: [] => [X] Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] ContextMenuHandlers1: [SmartDefragExtension] -> {189F1E63-33A7-404B-B2F6-8C76A452CC54} => C:\WINDOWS\System32\IObitSmartDefragExtension.dll [2016-03-25] (IObit) ContextMenuHandlers6: [SmartDefragExtension] -> {189F1E63-33A7-404B-B2F6-8C76A452CC54} => C:\WINDOWS\System32\IObitSmartDefragExtension.dll [2016-03-25] (IObit) C:\WINDOWS\System32\IObitSmartDefragExtension.dll Task: {0E18A807-C58B-4F0B-BCCE-D232D568FB9E} - System32\Tasks\IObitSelfCheckTask => C:\Program Files (x86)\IObit\Smart Defrag\IObitSelfCheck.exe [2016-10-18] (IObit) C:\Program Files (x86)\IObit ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Geen bestand ContextMenuHandlers3: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Geen bestand ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> Geen bestand Task: {011367F5-C920-40F2-8D2F-106E1D760A04} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Logon -> Geen bestand <==== AANDACHT Task: {01C7BBDA-27B8-4D33-AFC9-9FD000636BA1} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Geen bestand <==== AANDACHT Task: {07EE3B96-6884-4A92-A67C-6C7329F59898} - \Microsoft\Windows\UNP\RunCampaignManager -> Geen bestand <==== AANDACHT Task: {09664738-305D-4DDA-AF5B-0761AC94C227} - System32\Tasks\{88C3A3B5-6144-4A8C-BA90-FE3A83E65DFC} => C:\Windows\system32\pcalua.exe -a "C:\Users\Hans\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\REL3QR90\setup_magicdisc106[1].exe" -d C:\Users\Hans\Desktop Task: {0E2E4292-99CB-422D-89E4-D61B7D1BC0BF} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Geen bestand <==== AANDACHT Task: {2B9916D7-BB1A-48D5-A502-91215996D53B} - System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe Task: {2BEBC433-E6B2-4ED5-B313-CB769D209BFE} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Geen bestand <==== AANDACHT Task: {3801192C-5A10-4842-85BF-CB8946ECDDD5} - System32\Tasks\{12DF451D-8BB0-4EF9-903E-B221C27E920D} => C:\Windows\system32\pcalua.exe -a C:\Users\Hans\Desktop\zoek.exe -d C:\Users\Hans\Desktop C:\Users\Hans\Desktop\zoek.exe Task: {38E94C1D-2D4D-4A88-B957-1E43D552BAE0} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Geen bestand <==== AANDACHT Task: {3CCA3699-CCD8-4ADD-A4EB-E86E724F20FD} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Time -> Geen bestand <==== AANDACHT Task: {4E4FF875-12B8-470E-B102-0649E81AF2B5} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\OutOfIdle -> Geen bestand <==== AANDACHT Task: {5DE748AB-486C-4CB8-9C84-F283FFD2A18E} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Geen bestand <==== AANDACHT Task: {646C42E3-B7F2-436A-B30F-7C702F349857} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Geen bestand <==== AANDACHT Task: {7B5E235B-CB91-47CE-AF8B-3DADD9A7A1D5} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Geen bestand <==== AANDACHT Task: {A018182A-F94F-4C2D-B91A-4997985CEE36} - System32\Tasks\{E04791CF-1485-418A-B43F-2E362517E2FB} => C:\Windows\system32\pcalua.exe -a "C:\Users\Hans\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GDXO0L1X\WindowsPhone.exe" -d C:\Users\Hans\Desktop Task: {A43E614B-20E9-4709-962F-7BEC210981F6} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Geen bestand <==== AANDACHT Task: {B172D9CA-4E88-43DA-BD91-89DCED14B066} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\OnIdle -> Geen bestand <==== AANDACHT Task: {B282AFC3-BB87-4165-BA38-8E62D395B382} - System32\Tasks\{94FC00CC-D772-41E5-8AE5-EA369363D686} => C:\Windows\system32\pcalua.exe -a "C:\Users\Hans\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L537D5V0\SABnzbd-0.7.16-win32-setup.exe" -d C:\Users\Hans\Desktop Task: {CDB81735-883B-463E-805E-FB15E893DFC8} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Unlock -> Geen bestand <==== AANDACHT Task: {B6811CA3-5895-4402-ACFE-C8A181886FDA} - System32\Tasks\SmartDefrag_Startup => C:\Program Files (x86)\IObit\Smart Defrag\SmartDefrag.exe [2016-11-21] (IObit) Task: {CDB81735-883B-463E-805E-FB15E893DFC8} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\Unlock -> Geen bestand <==== AANDACHT Task: {D25182DD-F0F3-4B16-BB7E-CF89FB940EFE} - System32\Tasks\Driver Booster SkipUAC (TOLHANSEN) => C:\Program Files (x86)\IObit\Driver Booster\4.3.0\DriverBooster.exe Task: {D54752D3-5A84-4D85-B7D5-A237F82944C2} - System32\Tasks\ASC10_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe Task: {D758F63A-FAE7-45C9-A8AD-C7D7A4A3BC3A} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Geen bestand <==== AANDACHT Task: {DB11955E-510A-4E88-8C86-979737B1FC1A} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Geen bestand <==== AANDACHT Task: {E1FEA560-7D8D-4340-98C3-CFE13BCBEE3F} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Geen bestand <==== AANDACHT Task: {E46B367B-3E50-409C-9931-3034D9DE3478} - \Pocakasik\{4EE72934-62DE-CE45-5085-79FABFEA106E} -> Geen bestand <==== AANDACHT Task: {E656B23F-370E-4509-AD17-CF93F73438EE} - \Microsoft\Windows\UNP\Campaigns\{91be532c-f9f1-406a-9858-43697c6f437a}\RunCampaignManager2 -> Geen bestand <==== AANDACHT Task: {EF36CC5A-0B1D-4AD8-A702-3C9241127CA9} - System32\Tasks\ASC10_SkipUac_TOLHANSEN => C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe 2018-03-21 19:26 - 2018-03-21 19:26 - 000811520 _____ () C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe 2017-05-09 15:50 - 2018-03-21 19:26 - 002195968 _____ () C:\Program Files (x86)\AVG Web TuneUp\vprot.exe C:\Program Files (x86)\AVG Web TuneUp AlternateDataStreams: C:\ProgramData\TEMP:05E9FFE5 [148] AlternateDataStreams: C:\ProgramData\TEMP:0B4227B4 [186] AlternateDataStreams: C:\ProgramData\TEMP:430C6D84 [127] AlternateDataStreams: C:\ProgramData\TEMP:DBC416F8 [282] AlternateDataStreams: C:\ProgramData\TEMP:DFC5A2B2 [105] HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restrictie <==== AANDACHT SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-1418365825-3294327862-2350165910-1004 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = SearchScopes: HKU\S-1-5-21-1418365825-3294327862-2350165910-1004 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={40C534A2-4DE6-4A1D-AA38-6684804D0D5F}&mid=b944735bbabb47cfaa59d1409bb4a77a-cc4ba58cc7df1bccfa82829215dc83aaaa333100&lang=nl&ds=AVG&coid=avgtbavg&cmpid=0517tb&pr=fr&d=2016-12-07 23:41:24&v=4.3.7.452&pid=wtu&sg=&sap=dsp&q={searchTerms} BHO: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files\AVG Web TuneUp\4.3.9.626\AVG Web TuneUp.dll [2018-03-21] (AVG) BHO-x32: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files (x86)\AVG Web TuneUp\4.3.9.626\AVG Web TuneUp.dll [2018-03-21] (AVG) FF Extension: (PremierOpinion) - C:\Program Files (x86)\PremierOpinion\firefox [2018-07-06] [Verouderd] [ niet getekend] C:\Program Files (x86)\PremierOpinion FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.3.8\\npsitesafety.dll [Geen bestand] FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [Geen bestand] FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [Geen bestand] FF Plugin HKU\.DEFAULT: @hola.org/FlashPlayer -> C:\Users\TOLHANSEN\AppData\Local\Hola\firefox_hola\app\flash\NPSWF32_18_0_0_232.dll [Geen bestand] FF Plugin HKU\.DEFAULT: @hola.org/vlc -> C:\Users\TOLHANSEN\AppData\Local\Hola\firefox_hola\app\vlc\npvlc.dll [Geen bestand] CHR HomePage: Default -> hxxp://ad.nl/ CHR DefaultSearchURL: Default -> hxxp://srchbar.com/?q={searchTerms} CHR DefaultSuggestURL: Default -> hxxp://srch.bar/?s={searchTerms} R2 PremierOpinion; C:\Program Files (x86)\PremierOpinion\pmservice.exe [208320 2018-01-11] (VoiceFive, Inc.) <==== AANDACHT R0 SmartDefragDriver; C:\WINDOWS\System32\Drivers\SmartDefragDriver.sys [21360 2016-03-22] (IObit) S3 DrvAgent64; \??\C:\WINDOWS\SysWOW64\Drivers\DrvAgent64.SYS [X] U3 idsvc; geen ImagePath 2018-07-03 14:54 - 2018-07-03 14:54 - 000000000 ___HD C:\Users\hansd\Downloads\.ptmp535643 2018-07-02 17:45 - 2018-07-02 17:51 - 000000000 ____D C:\Program Files (x86)\McAfee 2018-07-02 17:45 - 2009-09-10 10:40 - 000000000 ____D C:\ProgramData\McAfee EmptyTemp: end