Scanresultaten van Farbar Recovery Scan Tool (FRST) (x86) Versie: 06.10.2018
Gestart door gebruiker (Beheerder) op GEBRUIKER-PC (08-10-2018 19:09:30)
Gestart vanaf C:\Users\gebruiker\Desktop
Geladen Profielen: gebruiker (Beschikbare Profielen: gebruiker)
Platform: Microsoft Windows 7 Professional Service Pack 1 (X86) Taal: Nederlands (Nederland)
Internet Explorer Versie 11 (Standaardbrowser: IE)
Boot Modus: Normal
Handleiding voor Farbar Recovery Scan Tool:
http://www.geekstogo.com/forum/topic/33 ... scan-tool/==================== Processen (gefilterd) =================(Als een item is opgenomen in de fixlist, het proces zal worden gesloten. Het bestand zal niet worden verplaatst.)(Egis Technology Inc. ) C:\Program Files\Common Files\EgisTec\Services\EgisTicketService.exe
(devolo AG) C:\Program Files\devolo\dlan\devolonetsvc.exe
() C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
(Acer Incorporated) C:\Program Files\Acer\Registration\GREGsvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(NTI Corporation) C:\Program Files\NTI\Acer Backup Manager\IScheduleSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(NTI Corporation) C:\Program Files\NTI\Acer Backup Manager\BackupManagerTray.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\PmmUpdate.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Egis Technology Inc. ) C:\Program Files\Acer ProShield\EgisTSR.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\EgisUpdate.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\HPNetworkCommunicator.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe==================== Register (gefilterd) ===========================(Als een item is opgenomen in de fixlist, zal het registeritem worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.)HKLM\...\Run: [IMSS] => C:\Program Files\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [112152 2011-02-01] (Intel Corporation)
HKLM\...\Run: [BackupManagerTray] => C:\Program Files\NTI\Acer Backup Manager\BackupManagerTray.exe [297280 2011-04-23] (NTI Corporation)
HKLM\...\Run: [EgisTecPMMUpdate] => C:\Program Files\EgisTec IPS\PmmUpdate.exe [407920 2010-11-05] (Egis Technology Inc.)
HKLM\...\Run: [EgisUpdate] => C:\Program Files\EgisTec IPS\EgisUpdate.exe [202096 2010-11-05] (Egis Technology Inc.)
HKLM\...\Run: [ProShieldTSR] => C:\Program Files\Acer ProShield\EgisTSR.exe [127536 2012-02-02] (Egis Technology Inc. )
HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\AVG2015\avgui.exe [3780008 2015-10-30] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [HP Software Update] => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKU\S-1-5-21-1657345562-4261169192-2774220942-1000\...\Run: [HP Deskjet 3050A J611 series (NET)] => C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe [1837672 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-1657345562-4261169192-2774220942-1000\...\Run: [QuickTime Task] => "C:\Program Files\QuickTime\qttask.exe" -atboottime
HKU\S-1-5-21-1657345562-4261169192-2774220942-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner.exe [13769584 2018-09-19] (Piriform Ltd)
HKU\S-1-5-21-1657345562-4261169192-2774220942-1000\...\MountPoints2: I - I:\LaunchU3.exe -a
HKU\S-1-5-21-1657345562-4261169192-2774220942-1000\...\MountPoints2: {5d10e612-b45d-11e1-9f64-00190e02beeb} - I:\LaunchU3.exe -a
Lsa: [Notification Packages] scecli EgisPwdFilter EgisDSPwdFilter==================== Internet (gefilterd) ====================(Als een item is opgenomen in de fixlist en een registeritem is, wordt het verwijderd of hersteld naar de standaard.)Tcpip\Parameters: [DhcpNameServer] 195.130.131.5 195.130.130.5
Tcpip\..\Interfaces\{3F2D85E1-901F-48E7-8A51-C1F591A435AE}: [DhcpNameServer] 195.130.131.5 195.130.130.5
Tcpip\..\Interfaces\{B0BA8F31-966D-41F9-A0D7-8CDA062614A6}: [DhcpNameServer] 195.130.130.2 195.130.131.2Internet Explorer:
==================
HKU\S-1-5-21-1657345562-4261169192-2774220942-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://
www.facebook.com/
HKU\S-1-5-21-1657345562-4261169192-2774220942-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://
www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://
www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKU\S-1-5-21-1657345562-4261169192-2774220942-1000 -> DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={0CA185FC-4A87-459A-82AA-683F6AC7C070}&mid=6920b615871b47d0ab2519d59a3786ae-704d480d9e5a9c6942ca9c311358c9c40cb92a9c&lang=nl&ds=AVG&coid=avgtbavg&cmpid=0516tb&pr=fr&d=2015-03-05 15:41:23&v=4.3.8.510&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1657345562-4261169192-2774220942-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={0CA185FC-4A87-459A-82AA-683F6AC7C070}&mid=6920b615871b47d0ab2519d59a3786ae-704d480d9e5a9c6942ca9c311358c9c40cb92a9c&lang=nl&ds=AVG&coid=avgtbavg&cmpid=0516tb&pr=fr&d=2015-03-05 15:41:23&v=4.3.8.510&pid=wtu&sg=&sap=dsp&q={searchTerms}
BHO: EgisPBIE Sign-in Helper -> {7B51CCBE-4AF9-44A6-BDAB-D7F7E4C4E6F9} -> C:\Program Files\Acer ProShield\EgisPBIE.dll [2012-02-02] (Egis Technology Inc.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2018-10-05] (Google Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2018-10-05] (Google Inc.)FireFox:
========
FF HKLM\...\Firefox\Extensions: [{41ecbc0b-34d5-4cd4-935f-253a30e2cb7e}] - C:\Program Files\Acer ProShield\FFExt
FF Extension: ( Online Accounts Extension ) - C:\Program Files\Acer ProShield\FFExt [2012-04-28] [Verouderd] [niet getekend]
FF HKLM\...\Firefox\Extensions: [{d4da7309-b89a-45ec-8ebb-cfb2ae13618b}] - C:\Program Files\Acer ProShield\FFExt20
FF Extension: ( Online Accounts Extension ) - C:\Program Files\Acer ProShield\FFExt20 [2012-04-28] [Verouderd] [niet getekend]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-10-05] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-10-05] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-09-20] (Adobe Systems Inc.)Chrome:
=======
CHR HKLM\...\Chrome\Extension: [ladimmjldcgbeamniagencjbodhnmgen] - C:\Program Files\Acer ProShield\ChromeEx\EgisPBChromeExt.crx [2012-02-02]==================== Services (gefilterd) ====================(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)S2 avgwd; C:\Program Files\AVG\AVG2015\avgwdsvc.exe [335656 2015-10-30] (AVG Technologies CZ, s.r.o.)
R2 DevoloNetworkService; C:\Program Files\devolo\dlan\devolonetsvc.exe [4113400 2013-02-04] (devolo AG)
R2 EgisTec Ticket Service; C:\Program Files\Common Files\EgisTec\Services\EgisTicketService.exe [180272 2012-02-02] (Egis Technology Inc. )
R2 ETService; C:\Program Files\Acer\Empowering Technology\Service\ETService.exe [30080 2011-06-14] ()
R2 GREGService; C:\Program Files\Acer\Registration\GREGsvc.exe [36456 2011-05-30] (Acer Incorporated)
R2 Live Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [255376 2012-02-07] (Acer Incorporated)
R2 NTI IScheduleSvc; C:\Program Files\NTI\Acer Backup Manager\IScheduleSvc.exe [256832 2011-04-23] (NTI Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)===================== Drivers (gefilterd) ======================(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [31664 2015-07-23] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [207328 2015-06-16] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [189872 2015-08-04] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [35808 2015-03-20] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [230832 2015-08-04] (AVG Technologies CZ, s.r.o.)
S3 Bulk; C:\Windows\System32\Drivers\HDJBulk.sys [191824 2011-12-27] (© Guillemot R&D, 2010. All rights reserved.)
R3 e1cexpress; C:\Windows\System32\DRIVERS\e1c6232.sys [238248 2010-09-21] (Intel Corporation)
S3 HDJAsioK; C:\Windows\System32\Drivers\HDJAsioK.sys [252752 2011-12-27] (© Guillemot R&D, 2010. All rights reserved.)
S3 HDJMidi; C:\Windows\System32\DRIVERS\HDJMidi.sys [219984 2011-12-27] (© Guillemot R&D, 2011. All rights reserved.)
R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [41088 2010-10-19] (Intel Corporation)
R1 mwlPSDFilter; C:\Windows\System32\DRIVERS\mwlPSDFilter.sys [21600 2012-04-28] (Egis Technology Inc.)
R1 mwlPSDNServ; C:\Windows\System32\DRIVERS\mwlPSDNServ.sys [16936 2012-04-28] (Egis Technology Inc.)
R1 mwlPSDVDisk; C:\Windows\System32\DRIVERS\mwlPSDVDisk.sys [62240 2012-04-28] (Egis Technology Inc.)
R2 NPF_devolo; C:\Windows\system32\drivers\npf_devolo.sys [35840 2012-09-07] (CACE Technologies) [Bestand niet getekend]
R0 PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [20640 2007-05-23] (Sonic Solutions) [Bestand niet getekend]
R3 vpcbus; C:\Windows\system32\drivers\vpchbus.sys [165376 2009-09-23] (Microsoft Corporation)
R1 vpcnfltr; C:\Windows\System32\DRIVERS\vpcnfltr.sys [55040 2009-09-23] (Microsoft Corporation)
R3 vpcusb; C:\Windows\System32\DRIVERS\vpcusb.sys [78336 2009-09-23] (Microsoft Corporation)
R1 vpcvmm; C:\Windows\System32\drivers\vpcvmm.sys [295936 2009-12-31] (Microsoft Corporation)==================== NetSvcs (gefilterd) ===================(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)
==================== Een Maand Gemaakt bestanden en mappen ========(Als een item is opgenomen in de fixlist, word de map of het bestand verplaatst.)2018-10-08 13:36 - 2018-10-08 13:37 - 000011169 ____C C:\Users\gebruiker\Documents\Search.txt
2018-10-08 11:12 - 2018-10-08 11:13 - 000011169 ____C C:\Users\gebruiker\Desktop\Fixlog.txt
2018-10-08 10:57 - 2018-10-08 10:57 - 001774592 ____C (Farbar) C:\Users\gebruiker\Desktop\FRST.exe
2018-10-08 10:27 - 2018-10-08 19:10 - 000012530 ____C C:\Users\gebruiker\Desktop\FRST.txt
2018-10-06 08:42 - 2018-10-06 08:42 - 000000933 ____C C:\Users\Public\Desktop\CCleaner.lnk
2018-10-06 08:42 - 2018-10-06 08:42 - 000000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2018-10-06 08:42 - 2018-10-06 08:42 - 000000000 ___DC C:\Program Files\CCleaner
2018-10-05 22:03 - 2018-10-08 19:09 - 000000000 ___DC C:\FRST
2018-10-05 16:57 - 2018-10-05 16:57 - 000000000 ___DC C:\ProgramData\Google
2018-10-05 16:56 - 2018-10-06 08:47 - 000000000 ___DC C:\Program Files\Google
2018-10-05 16:56 - 2018-10-06 08:44 - 000000000 ___DC C:\Users\gebruiker\AppData\Local\Google
2018-10-05 16:52 - 2018-10-05 16:52 - 001142064 ____C (Microsoft Corporation) C:\Windows\ucrtbase.dll
2018-10-05 16:52 - 2018-10-05 16:52 - 000000000 ___DC C:\Program Files\Common Files\AVG==================== Een Maand Gewijzigd bestanden en mappen ========(Als een item is opgenomen in de fixlist, word de map of het bestand verplaatst.)2018-10-08 13:40 - 2011-07-25 14:30 - 000000000 ___DC C:\Windows\system32\Macromed
2018-10-08 11:25 - 2012-04-11 13:50 - 000748030 ____C C:\Windows\system32\perfh013.dat
2018-10-08 11:25 - 2012-04-11 13:50 - 000154592 ____C C:\Windows\system32\perfc013.dat
2018-10-08 11:25 - 2010-11-20 23:01 - 001672512 ____C C:\Windows\system32\PerfStringBackup.INI
2018-10-08 11:25 - 2009-07-14 06:34 - 000027888 ___HC C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-10-08 11:25 - 2009-07-14 06:34 - 000027888 ___HC C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-10-08 11:25 - 2009-07-14 04:37 - 000000000 ___DC C:\Windows\inf
2018-10-08 11:17 - 2009-07-14 06:53 - 000000006 ___HC C:\Windows\Tasks\SA.DAT
2018-10-08 11:13 - 2012-09-03 21:46 - 000000000 ___DC C:\Users\gebruiker\AppData\LocalLow\Temp
2018-10-08 10:18 - 2009-07-14 06:33 - 000346968 ____C C:\Windows\system32\FNTCACHE.DAT
2018-10-08 10:16 - 2015-01-05 04:25 - 000000000 ___DC C:\Windows\system32\appraiser
2018-10-08 10:16 - 2014-04-30 19:24 - 000000000 __SDC C:\Windows\system32\CompatTel
2018-10-08 10:16 - 2009-07-14 04:37 - 000000000 ___DC C:\Windows\system32\Setup
2018-10-08 10:16 - 2009-07-14 04:37 - 000000000 ___DC C:\Windows\PolicyDefinitions
2018-10-07 22:40 - 2011-07-25 13:58 - 000000000 ___DC C:\ProgramData\Skype
2018-10-07 22:39 - 2016-03-18 15:11 - 000054156 ___HC C:\Windows\QTFont.qfn
2018-10-07 03:16 - 2013-08-19 23:03 - 000000000 ___DC C:\Windows\system32\MRT
2018-10-07 03:01 - 2012-04-28 17:48 - 136114104 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2018-10-06 11:11 - 2012-05-15 01:48 - 000842240 ____C (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2018-10-06 11:11 - 2011-07-25 14:30 - 000175104 ____C (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2018-10-06 10:15 - 2009-07-14 04:37 - 000000000 ___DC C:\Program Files\Common Files\microsoft shared
2018-10-06 09:57 - 2017-10-18 03:04 - 127229528 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
2018-10-06 09:01 - 2009-07-14 04:37 - 000000000 ___DC C:\Windows\ModemLogs
2018-10-06 09:01 - 2007-07-12 03:49 - 000000000 ___DC C:\Windows\Panther
2018-10-06 08:41 - 2012-06-12 20:11 - 000000284 ____C C:\Windows\Tasks\AppleSoftwareUpdate.job
2018-10-06 08:37 - 2015-06-18 12:54 - 000000317 ____C C:\Users\gebruiker\Desktop\(3) Facebook.url
2018-10-06 01:11 - 2016-10-24 17:17 - 000002441 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2018-10-05 22:09 - 2016-01-12 15:35 - 000000000 ___DC C:\ProgramData\Avg
2018-10-05 22:09 - 2015-10-20 16:16 - 000000000 ___DC C:\Users\gebruiker\AppData\Local\Avg
2018-10-05 22:09 - 2012-04-28 10:07 - 000000000 ___DC C:\Program Files\AVG
2018-10-05 17:42 - 2012-04-28 09:26 - 000000000 ___DC C:\Users\gebruiker
2018-10-05 10:54 - 2009-07-14 06:53 - 000032638 _____ C:\Windows\Tasks\SCHEDLGU.TXT==================== Bestanden in de root van sommige mappen =======2017-01-10 01:05 - 2017-01-10 01:05 - 000000416 ____C () C:\Users\gebruiker\AppData\Roaming\.backup.dm==================== Bamital & volsnap ======================(Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.)C:\Windows\explorer.exe => Bestand is getekend
C:\Windows\system32\winlogon.exe => Bestand is getekend
C:\Windows\system32\wininit.exe => Bestand is getekend
C:\Windows\system32\svchost.exe => Bestand is getekend
C:\Windows\system32\services.exe => Bestand is getekend
C:\Windows\system32\User32.dll => Bestand is getekend
C:\Windows\system32\userinit.exe => Bestand is getekend
C:\Windows\system32\rpcss.dll => Bestand is getekend
C:\Windows\system32\dnsapi.dll => Bestand is getekend
C:\Windows\system32\Drivers\volsnap.sys => Bestand is getekendLastRegBack: 2017-10-31 19:07==================== Eind van FRST.txt ============================