Start::
CreateRestorePoint:
BHO-x32: Geen Naam -> {C0E8AE32-0758-4C8D-AB71-23B361FE8964} -> Geen bestand
CHR NewTab: Default ->  Not-active:"chrome-extension://maajolkefbigbiaekfgmkiehhkeaodpk/newtabpage.html", Not-active:"chrome-extension://dmieilohcciojgiclflbcgnkacbbgden/newtabproduct.html", Not-active:"chrome-extension://lgbfeddflgjmcjkinakpbljigfgdgekj/newtabproduct.html"
CHR DefaultSearchURL: Default -> hxxps://search.tb.ask.com/search/GGmain.jhtml?searchfor={searchTerms}&enableSearch=true&rdrct=no&redirect=CPC
CHR DefaultSearchKeyword: Default -> ask
CHR DefaultSuggestURL: Default -> hxxps://ss.search.ask.com/ss?li=ff&sstype=prefix&limit=10&hl=en&q={searchTerms}&enableSearch=true&rdrct=no
CHR Extension: (Ask Web Search) - C:\Users\Bettina\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgfehfbnofiffladdncogfobimealokp [2020-03-31]
U3 idsvc; geen ImagePath
2020-05-05 15:22 - 2020-05-05 15:22 - 002283520 _____ (Farbar) C:\Users\Bettina\Downloads\FRST64.exe
2020-05-04 22:18 - 2020-05-05 02:05 - 000000000 ____D C:\Program Files\Restoro
2020-05-04 22:17 - 2020-05-05 02:04 - 000000150 _____ C:\WINDOWS\restoro.ini
2020-05-04 22:17 - 2020-05-04 22:17 - 000931056 _____ (Restoro) C:\Users\Bettina\Downloads\Restoro (1).exe
2020-05-04 22:16 - 2020-05-04 22:17 - 000931056 _____ (Restoro) C:\Users\Bettina\Downloads\Restoro.exe
2020-04-25 21:10 - 2020-04-25 21:10 - 027347176 _____ (TeamViewer Germany GmbH) C:\Users\Bettina\Downloads\TeamViewer_Setup (2).exe
2020-04-25 21:01 - 2020-04-25 21:01 - 027347176 _____ (TeamViewer Germany GmbH) C:\Users\Bettina\Downloads\TeamViewer_Setup (1).exe
2020-05-01 13:38 - 2020-05-01 13:38 - 001295576 _____ (Google LLC) C:\Users\Bettina\Downloads\ChromeSetup (4).exe
2020-05-01 13:38 - 2020-05-01 13:38 - 001295576 _____ (Google LLC) C:\Users\Bettina\Downloads\ChromeSetup (3).exe
2020-05-01 13:34 - 2020-05-01 13:34 - 001295576 _____ (Google LLC) C:\Users\Bettina\Downloads\ChromeSetup (2).exe
2020-05-01 13:19 - 2020-05-01 13:20 - 001295576 _____ (Google LLC) C:\Users\Bettina\Downloads\ChromeSetup(4).exe
2020-05-01 13:19 - 2020-05-01 13:19 - 001295576 _____ (Google LLC) C:\Users\Bettina\Downloads\ChromeSetup(3).exe
2020-05-01 13:18 - 2020-05-01 13:18 - 001295576 _____ (Google LLC) C:\Users\Bettina\Downloads\ChromeSetup(2).exe
2020-04-24 09:56 - 2020-04-24 09:56 - 001295576 _____ (Google LLC) C:\Users\Bettina\Downloads\ChromeSetup (1).exe
C:\Users\Bettina\AppData\Local\{922033FD-8AC1-4840-85B4-F76EC5385EF6}
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (Geen bestand)
MSCONFIG\startupreg: ZaAntiRansomware => "C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\ZAAR.exe"
EmptyTemp:
Reboot:
End::