Computer - Spyware

Zeer trage PC.-opgelost

Gestart door MartinSr op 17 mar 2017, 11:16 14 berichten 8.372 keer gelezen
MartinSr Startte dit onderwerp 17 mar 2017, 11:16 114 berichten
Hallo,

Van de ene op de andere dag heb ik een zeer trage PC.
Zou iemand mij kunnen helpen om van dit probleem af te komen.
Ik zet hier een Hijack This neer:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:15:49, on 17-3-2017
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.14393.0000)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Users\MartinSr\AppData\Local\Microsoft\OneDrive\OneDrive.exe
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe
C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe
C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe
C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
C:\Users\MartinSr\Desktop\HijackThis.exe
C:\WINDOWS\SysWoW64\DllHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/search?q={searchTer ... DF&PC=AV01
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_121\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_121\bin\jp2ssv.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [Microsoft Default Manager] "C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe" -resume
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Wondershare Helper Compact.exe] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
O4 - HKLM\..\Run: [Aimersoft Helper Compact.exe] C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe
O4 - HKLM\..\Run: [PSUAMain] "C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe" /LaunchSysTray
O4 - HKLM\..\Run: [Dropbox] "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [ProductUpdater] C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe
O4 - HKLM\..\RunOnce: [Sonaca] C:\WINDOWS\SysWoW64\wscript.exe /E:vbscript /B "C:\Users\MartinSr\AppData\Local\5B1CF7~1\Baceboko.dat"
O4 - HKCU\..\Run: [Web Companion] C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize
O4 - HKCU\..\Run: [OneDrive] "C:\Users\MartinSr\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [Chromium] c:\users\martinsr\appdata\local\chromium\application\chrome.exe --auto-launch-at-startup --profile-directory=Default --restore-last-session
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'NETWORK SERVICE')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\Program Files (x86)\Microsoft Office\Office12\EXCEL.EXE/3000
O9 - Extra button: Add to VideoGet - {88CFA58B-A63F-4A94-9C54-0C7A58E3333E} - C:\PROGRA~2\NUCLEA~1\VideoGet\Plugins\VIDEOG~1.DLL
O9 - Extra 'Tools' menuitem: Add to VideoGet - {88CFA58B-A63F-4A94-9C54-0C7A58E3333E} - C:\PROGRA~2\NUCLEA~1\VideoGet\Plugins\VIDEOG~1.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://*.webcompanion.com
O16 - DPF: {28B66320-9687-4B13-8757-36F901887AB5} (CanvasX Class) - http://foto.blokker.nl/ips-opdata/layou ... anvasx.cab
O16 - DPF: {9191F686-7F0A-441D-8A98-2FE3AC1BD913} - http://acs.pandasoftware.com/activescan ... stubie.cab
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Protocol: WSAMVCUchrome - (no CLSID) - (no file)
O18 - Protocol: WSWSVCUchrome - (no CLSID) - (no file)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: ASGT - Unknown owner - C:\Windows\SysWOW64\ASGT.exe
O23 - Service: Dropbox-update-service (dbupdate) (dbupdate) - Dropbox, Inc. - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
O23 - Service: Dropbox-update-service (dbupdatem) (dbupdatem) - Dropbox, Inc. - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
O23 - Service: DbxSvc - Unknown owner - C:\WINDOWS\system32\DbxSvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Freemake Improver - Freemake - C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
O23 - Service: NVIDIA GeForce Experience Service (GfExperienceService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - HP Inc. - C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
O23 - Service: HuaweiHiSuiteService64.exe - Unknown owner - C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @mqutil.dll,-6102 (MSMQ) - Unknown owner - C:\WINDOWS\system32\mqsvc.exe (file missing)
O23 - Service: Panda Protection Service (NanoServiceMain) - Panda Security, S.L. - C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe
O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: Panda Devices Agent (PandaAgent) - Panda Security, S.L. - C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe
O23 - Service: panda_url_filtering Service (panda_url_filtering) - Visicom Media Inc. - C:\Program Files\Panda Security URL Filtering\Panda_URL_Filteringb.exe
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: Panda Product Service (PSUAService) - Panda Security, S.L. - C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Wondershare Application Framework Service (WsAppService) - Wondershare - C:\Program Files (x86)\Wondershare\WAF\2.1.6.0\WsAppService.exe

--
End of file - 12642 bytes

Alvast hartelijk dank.
MartinSr
Medion Akoya ,Windows 10 / Intel Pentium G6960 processor. AMD Radeon HD 6670 / 512 MB DDRS geheugen. 4 GB werkgeheugen. 1.5 TB harde schijf. /Microsoft Edge /Windows Live Mail/ Windows Defender / Nero DVD/CD Brander/HP ENVY 4500
MartinSr Startte dit onderwerp 17 mar 2017, 16:47 114 berichten
Extra scanresultaten van Farbar Recovery Scan Tool (x64) Versie: 15-03-2017
Gestart door MartinSr (17-03-2017 16:42:12)
Gestart vanaf C:\Users\MartinSr\Downloads
Windows 10 Home Versie 1607 (X64) (2016-10-10 09:18:05)
Boot Modus: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3628179315-1915274704-1408630806-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3628179315-1915274704-1408630806-503 - Limited - Disabled)
Gast (S-1-5-21-3628179315-1915274704-1408630806-501 - Limited - Disabled)
MartinSr (S-1-5-21-3628179315-1915274704-1408630806-1000 - Administrator - Enabled) => C:\Users\MartinSr

==================== Security Center ========================

(Als een item is opgenomen in de fixlist, zal het worden verwijderd.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Panda Internet Security (Enabled - Up to date) {46AEFD02-ACA3-E038-1FA5-4A15EFD361E0}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Panda Internet Security (Enabled - Up to date) {FDCF1CE6-8A99-EFB6-2515-716794542B5D}
FW: Panda Firewall (Enabled) {7E957C27-E6CC-E160-34FA-E3201100269B}

==================== Geïnstalleerde programma's ======================

(Alleen de adware-programma's met 'verborgen' vlag zou kunnen worden toegevoegd aan de fixlist om ze zichtbaar te maken. De adware-programma's moeten handmatig gedeinstallerd worden.)

µTorrent (HKU\S-1-5-21-3628179315-1915274704-1408630806-1000\...\uTorrent) (Version: 3.4.9.43295 - BitTorrent Inc.)
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Aangifte inkomstenbelasting 2010 (HKLM-x32\...\Aangifte inkomstenbelasting 2010) (Version: - Belastingdienst)
Aangifte inkomstenbelasting 2011 (HKLM-x32\...\Aangifte inkomstenbelasting 2011) (Version: - Belastingdienst)
Aangifte inkomstenbelasting 2013 (HKLM-x32\...\Aangifte inkomstenbelasting 2013) (Version: - Belastingdienst)
Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe Acrobat Reader DC - Nederlands (HKLM-x32\...\{AC76BA86-7AD7-1043-7B44-AC0F074E4100}) (Version: 15.023.20070 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.5.1.17730 - Adobe Systems Inc.)
Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.162 - Adobe Systems Incorporated)
Aimersoft Helper Compact 2.5.0 (HKLM-x32\...\{405147F7-FCC5-499B-A27E-EA6BD4A80435}_is1) (Version: 2.5.0 - Aimersoft)
Album Art Downloader XUI 1.00 (HKLM-x32\...\Album Art Downloader XUI) (Version: 1.00 - hxxp://sourceforge.net/projects/album-art)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Ashampoo Burning Studio (HKLM-x32\...\Ashampoo Burning Studio_is1) (Version: 9.23.0 - ashampoo GmbH & Co. KG)
Ashampoo Photo Commander (HKLM-x32\...\Ashampoo Photo Commander_is1) (Version: 8.1.0 - ashampoo GmbH & Co. KG)
Ashampoo Photo Optimizer (HKLM-x32\...\Ashampoo Photo Optimizer_is1) (Version: 3.12.0 - ashampoo GmbH & Co. KG)
Ashampoo Snap (HKLM-x32\...\Ashampoo Snap_is1) (Version: 3.4.0 - ashampoo GmbH & Co. KG)
ASUS GPU Tweak (HKLM-x32\...\InstallShield_{532F6E8A-AF97-41C3-915F-39F718EC07D1}) (Version: 2.3.9.2 - ASUSTek COMPUTER INC.)
ASUS GPU Tweak (x32 Version: 2.3.9.2 - ASUSTek COMPUTER INC.) Hidden
BufferChm (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
ccc-core-static (x32 Version: 2010.1013.2133.36853 - ATI) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.28 - Piriform)
Compatibiliteitspakket voor het 2007 Microsoft Office system (HKLM-x32\...\{90120000-0020-0413-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Control ActiveX de Windows Live Mesh para conexiones remotas (HKLM-x32\...\{04668DF2-D32F-4555-9C7E-35523DCD6544}) (Version: 15.4.5722.2 - Microsoft Corporation)
Contrôle ActiveX Windows Live Mesh pour connexions à distance (HKLM-x32\...\{55D003F4-9599-44BF-BA9E-95D060730DD3}) (Version: 15.4.5722.2 - Microsoft Corporation)
Controlo ActiveX do Windows Live Mesh para Ligações Remotas (HKLM-x32\...\{E54EEB5D-41ED-40FE-B4A8-8565DB81469B}) (Version: 15.4.5722.2 - Microsoft Corporation)
Corel Shell Extension - 64Bit (Version: 14.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Content (x32 Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Draw (x32 Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Filters (x32 Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - ICA (x32 Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - IPM - No VBA (x32 Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Lang BR (x32 Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Lang DE (x32 Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Lang EN (x32 Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Lang ES (x32 Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Lang FR (x32 Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Lang IT (x32 Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Lang NL (x32 Version: 4.0 - Uw bedrijfsnaam) Hidden
CorelDRAW Essentials 4 - PHOTO-PAINT (x32 Version: 4.0 - Corel Corporation) Hidden
CorelDRAW Essentials 4 - Windows Shell Extension (HKLM-x32\...\_{CF0ADC18-6D8F-4353-8EAA-DF45456B7853}) (Version: - Corel Corporation)
CorelDRAW Essentials 4 - Windows Shell Extension (x32 Version: 1.1 - Corel Corporation) Hidden
CorelDRAW Essentials 4 (HKLM-x32\...\_{C0237AA4-1BFB-46EA-860D-7B0EB365CA13}) (Version: - Corel Corporation)
CorelDRAW Essentials 4 (x32 Version: 4.0 - Corel Corporation) Hidden
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.2515 - CyberLink Corp.)
CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.3602c - CyberLink Corp.)
CyberLink PowerDVD Copy (HKLM-x32\...\InstallShield_{E3D04529-6EDB-11D8-A372-0050BAE317E1}) (Version: 1.5.1306 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Destinations (x32 Version: 140.0.77.000 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
Dropbox (HKLM-x32\...\Dropbox) (Version: 21.4.25 - Dropbox, Inc.)
Dropbox Update Helper (x32 Version: 1.3.59.1 - Dropbox, Inc.) Hidden
DVD Flick 1.3.0.7 (HKLM-x32\...\DVD Flick_is1) (Version: 1.3.0.7 - Dennis Meuwissen)
DVD Shrink 3.2 (HKLM-x32\...\DVD Shrink_is1) (Version: - DVD Shrink)
File Type Advisor 1.6 (HKLM-x32\...\File Type Advisor_is1) (Version: - )
Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (HKLM-x32\...\{B04A0E2F-1E4C-4E61-B18E-3B2BD6779CA7}) (Version: 15.4.5722.2 - Microsoft Corporation)
FormatFactory 4.0.0.0 (HKLM-x32\...\FormatFactory) (Version: 4.0.0.0 - Free Time)
Fotogalerija Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Free FLAC to MP3 Converter 1.4 (HKLM-x32\...\{A54C01BD-1277-4722-B42B-EC9800A90B1E}_is1) (Version: 1.4 - PolySoft Solutions)
Free M4a to MP3 Converter 9.3 (HKLM-x32\...\Free M4a to MP3 Converter_is1) (Version: - ManiacTools.com)
Freemake Video Converter versie 4.1.9 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.9 - Ellora Assets Corporation)
Gadwin PrintScreen (HKLM-x32\...\Gadwin PrintScreen) (Version: 4.5 - Gadwin Systems, Inc.)
Galeria de Fotografias do Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galería fotográfica de Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galeria fotografii usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
GIMP 2.6.11 (HKLM-x32\...\WinGimp-2.0_is1) (Version: 2.6.11 - The GIMP Team)
Google Chrome (HKLM-x32\...\{1FA8CC13-BD11-324A-AA1C-2675D3B2EDD0}) (Version: 66.129.103 - Google, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 56.0.2924.87 - Google Inc.)
Google Earth (HKLM-x32\...\{F6430171-B86B-4639-839E-374913E7911D}) (Version: 7.1.8.3036 - Google)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
GPBaseService2 (x32 Version: 140.0.211.000 - Hewlett-Packard) Hidden
HandBrake 0.10.2 (HKLM-x32\...\HandBrake) (Version: 0.10.2 - )
Hewlett-Packard ACLM.NET v1.1.0.0 (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
HiSuite (HKLM-x32\...\Hi Suite) (Version: 1.0 - Huawei Technologies Co.,Ltd)
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP ENVY 4500 series Basic Device Software (HKLM\...\{6915424E-704F-4F5D-9057-9C7B406B36DB}) (Version: 32.3.198.49673 - Hewlett-Packard Co.)
HP FWUpdateEDO2 (HKLM-x32\...\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Photo Creations (HKU\S-1-5-21-3628179315-1915274704-1408630806-1000\...\HP Photo Creations) (Version: 1.0.0.22192 - HP)
HP Product Detection (HKLM-x32\...\{A436F67F-687E-4736-BD2B-537121A804CF}) (Version: 11.14.0001 - HP)
HP Smart Web Printing 4.60 (HKLM\...\HP Smart Web Printing) (Version: 4.60 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Support Solutions Framework (HKLM-x32\...\{FE8457A5-748D-41ED-A1E6-78CFDC0629D7}) (Version: 12.5.32.203 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
HPProductAssistant (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 140.0.211.000 - Hewlett-Packard) Hidden
Icecream Ebook Reader versie 4.26 (HKLM-x32\...\{B8C30F0F-1F23-49E1-A3ED-44DE17660EE2}_is1) (Version: 4.26 - Icecream Apps)
Java 8 Update 121 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180121F0}) (Version: 8.0.1210.13 - Oracle Corporation)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Kontrolnik Windows Live Mesh ActiveX za oddaljene povezave (HKLM-x32\...\{CA227A9D-09BE-4BFB-9764-48FED2DA5454}) (Version: 15.4.5722.2 - Microsoft Corporation)
MagicDirector 1.2 (HKLM-x32\...\{F79A208D-D929-11D9-9D77-000129760D75}) (Version: 0928-std_Medion-1.2-ZZZ060823-01 - )
MakeDisc (HKLM-x32\...\{B145EC69-66F5-11D8-9D75-000129760D75}) (Version: - )
Malwarebytes Anti-Malware versie 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
MarketResearch (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
MCE Software Encoder 1.0 (HKLM-x32\...\{7655E113-C306-11D9-A373-0050BAE317E1}) (Version: - )
MediaShow 3.0 (HKLM-x32\...\{D5A9B7C0-8751-11D8-9D75-000129760D75}) (Version: - )
Medion Home Cinema (HKLM-x32\...\InstallShield_{AB770FDE-8087-4C98-9A85-BD64262C104C}) (Version: 6.0.0000 - CyberLink Corp.)
Medion Home Cinema (x32 Version: 6.0.0000 - CyberLink Corp.) Hidden
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft Office 2000 Premium (HKLM-x32\...\{00000413-78E1-11D2-B60F-006097C998E7}) (Version: 9.00.2720 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3628179315-1915274704-1408630806-1000\...\OneDriveSetup.exe) (Version: 17.3.6798.0207 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 7 Ultra Edition (HKLM-x32\...\{CF097717-F174-4144-954A-FBC4BF301043}) (Version: 7.02.9753 - Nero AG)
Nuclear Coffee - VideoGet (HKLM-x32\...\VideoGet_is1) (Version: 2014 - Nuclear Coffee)
NVIDIA 3D Vision controllerstuurprogramma 344.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.65 - NVIDIA Corporation)
NVIDIA 3D Vision stuurprogramma 376.53 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 376.53 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.2 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.2 - NVIDIA Corporation)
NVIDIA Grafisch stuurprogramma 376.53 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 376.53 - NVIDIA Corporation)
NVIDIA HD Audio-stuurprogramma 1.3.34.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.17 - NVIDIA Corporation)
NVIDIA PhysX systeemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
OpenOffice 4.0.1 (HKLM-x32\...\{EA9BAE1A-2D68-4160-81E6-14B712435D66}) (Version: 4.01.9714 - Apache Software Foundation)
Panda ActiveScan 2.0 (HKLM-x32\...\ActiveScan 2.0) (Version: 01.04.01.0014 - Panda Security)
Panda Devices Agent (x32 Version: 1.03.08 - Panda Security) Hidden
Panda Devices Agent (x32 Version: 1.08.00 - Panda Security) Hidden
Panda Internet Security (HKLM-x32\...\Panda Universal Agent Endpoint) (Version: 17.00.01.0000 - Panda Security)
Panda Internet Security (Version: 8.31.00 - Panda Security) Hidden
Panda Security URL Filtering (HKLM-x32\...\Panda Security URL Filtering) (Version: 2.0.3.5 - Panda Security)
Photo Story 3 for Windows (HKLM-x32\...\{4F41AD68-89F2-4262-A32C-2F70B01FCE9E}) (Version: 3.0.1115.11 - Microsoft Corporation)
PhotoNow! 1.0 (HKLM-x32\...\{D36DD326-7280-11D8-97C8-000129760CBE}) (Version: - )
PhotoRazor (HKLM-x32\...\PhotoRazor) (Version: - )
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
Poczta usługi Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Po¨ta Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
PowerProducer (HKLM-x32\...\{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: - )
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6136 - Realtek Semiconductor Corp.)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.1.25.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.1.25.0 - Renesas Electronics Corporation) Hidden
Samsung New PC Studio (HKLM-x32\...\InstallShield_{F193FC0E-9E18-40FC-A974-509A1BDD240A}) (Version: 1.00.0000 - Samsung Electronics Co., Ltd.)
Samsung New PC Studio (x32 Version: 1.00.0000 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.3.650.0 - SAMSUNG Electronics Co., Ltd.)
SHIELD Streaming (Version: 3.1.200 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.13.42 - NVIDIA Corporation) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
SmartWebPrinting (x32 Version: 140.0.186.000 - Hewlett-Packard) Hidden
SolutionCenter (x32 Version: 140.0.214.000 - Hewlett-Packard) Hidden
Spelling Dictionaries Support For Adobe Reader 9 (HKLM-x32\...\{AC76BA86-7AD7-5464-3428-900000000004}) (Version: 9.0.0 - Adobe Systems Incorporated)
Status (x32 Version: 140.0.256.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
Uzak Bağlantılar İçin Windows Live Mesh ActiveX Denetimi (HKLM-x32\...\{241E7104-937A-4366-AD57-8FDDDB003939}) (Version: 15.4.5722.2 - Microsoft Corporation)
Visual C++ 2008 x86 Runtime - v9.0.30729.01 (HKLM-x32\...\{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01) (Version: 9.0.30729.01 - Microsoft Corporation)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Windows 7 USB/DVD Download Tool (HKLM-x32\...\{CCF298AF-9CE1-4B26-B251-486E98A34789}) (Version: 1.0.30 - Microsoft Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (HKLM-x32\...\{C32CE55C-12BA-4951-8797-0967FDEF556F}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{C63A1E60-B6A4-440B-89A5-1FC6E4AC1C94}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX-objekt til fjernforbindelser (HKLM-x32\...\{57220148-3B2B-412A-A2E0-82B9DF423696}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX-vezérlő távoli kapcsolatokhoz (HKLM-x32\...\{6E29C4F7-C2C2-4B18-A15C-E09B92065F15}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Media Encoder 9 Series (HKLM-x32\...\Windows Media Encoder 9) (Version: - )
Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις (HKLM-x32\...\{F665F3B8-01B4-46A9-8E47-FF8DC2208C9F}) (Version: 15.4.5722.2 - Microsoft Corporation)
Συλλογή φωτογραφιών του Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

==================== Aangepaste CLSID (gefilterd): ==========================

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

CustomCLSID: HKU\S-1-5-21-3628179315-1915274704-1408630806-1000_Classes\CLSID\{F0D5B8DF-FA50-4AC1-B644-6DD3DABA2DC0}\InprocServer32 -> 42494E41525953545245414D030000000300000074397B31DA29FA6910ABDB7EAEE970F80FBD84F729966595EFDCFEA5BDF9 (de data item heeft 16 mee tekens).

==================== Geplande Taken (gefilterd) =============

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

Task: {007330CB-667D-4392-8B4D-21FF7196190E} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => %SystemRoot%\ehome\ehPrivJob.exe
Task: {03BB9229-5C97-40A5-B3B6-A3F6DD84A275} - \Ad-Aware Update (Weekly) -> Geen bestand <==== AANDACHT
Task: {03E2F5B2-6FE2-4D51-9507-B44425A13AEB} - \{6002736F-72E5-4D96-9064-7E74DC752222} -> Geen bestand <==== AANDACHT
Task: {042433B2-45EF-4971-9B08-C4FFE55D471A} - \User_Feed_Synchronization-{14AFC280-0AAE-4BAC-A6FF-F1CBC82BE8F0} -> Geen bestand <==== AANDACHT
Task: {0C8D68FA-E5F6-4746-AA7C-B9B187DEA944} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Geen bestand <==== AANDACHT
Task: {0D9AEA78-7304-437C-BE83-54A41589DB99} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => %SystemRoot%\ehome\ehPrivJob.exe
Task: {0DF953F0-793B-46E9-BC23-E59A511A5AC8} - \{CD7E1B57-DFE2-467F-878B-492E6836B276} -> Geen bestand <==== AANDACHT
Task: {19382B83-B6FA-4E0B-A846-392BDEA9A159} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Geen bestand <==== AANDACHT
Task: {1C7275F6-586D-4C53-AE90-053EFFC1A1D4} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Geen bestand <==== AANDACHT
Task: {1D28AE47-DCA8-4DC0-87A9-34BD1C21A1D9} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Geen bestand <==== AANDACHT
Task: {1FBB5866-DDD1-4C3E-9B7D-59F9D122685D} - \{18F444FC-BB2E-4188-A7F0-A70F38B46C00} -> Geen bestand <==== AANDACHT
Task: {227526C8-3FCC-4783-B539-EE1F465E62B9} - \CreateChoiceProcessTask -> Geen bestand <==== AANDACHT
Task: {26B930F5-CEA6-4AE6-9DBA-B880055DBE14} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {28DF7078-4781-4152-A6BC-FEE248D2AAEA} - \GoogleUpdateTaskMachineUA1d1ab776fc0470d -> Geen bestand <==== AANDACHT
Task: {2CDA5A44-52EB-4E77-8966-150E33A17D63} - \GoogleUpdateTaskMachineCore1d1ab776f9a91c9 -> Geen bestand <==== AANDACHT
Task: {2CDCEB2C-9714-4CF9-BE15-3A610F52A3E3} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-12-21] (HP Inc.)
Task: {2F3A715E-0A3D-4C35-B42A-F1C4F611D26F} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => %SystemRoot%\ehome\ehPrivJob.exe
Task: {3089EBE3-AED5-471F-B7FD-B9D39C0E96CE} - \FileAdvisorUpdate -> Geen bestand <==== AANDACHT
Task: {33E36FB6-3EE6-4DBC-AF5D-D0E4E0BFFD62} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => %SystemRoot%\ehome\mcupdate.exe
Task: {43E2C806-731C-434F-938F-FC6055F8AD81} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Geen bestand <==== AANDACHT
Task: {44347A6B-5084-4430-B0BB-539C270F47FA} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => %SystemRoot%\ehome\ehPrivJob.exe
Task: {45F1C66E-53E7-4BA0-A6A7-0E15F8AFE544} - \{9A2B873F-231C-4BA0-8AAD-583DD03C4923} -> Geen bestand <==== AANDACHT
Task: {490F03A6-ECAD-4436-977B-75A6BE3EF725} - \{8653889B-D3FB-4E12-A466-D8956C40467A} -> Geen bestand <==== AANDACHT
Task: {49C75FA0-6E2D-4E79-BD41-753DF08F4E4F} - \{567D1513-6D54-4DA1-83DB-18FFD42E6427} -> Geen bestand <==== AANDACHT
Task: {4A0BA52C-504F-4A65-BA0C-3EAE5D75E132} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Geen bestand <==== AANDACHT
Task: {4E3ECF4A-448D-48C7-A8EA-82796225D4F6} - \Adobe Flash Player Updater -> Geen bestand <==== AANDACHT
Task: {54C88834-D971-45BD-A6EE-E659A08AE8BA} - \Format Factory -> Geen bestand <==== AANDACHT
Task: {5B8D8874-C845-4B6A-89D3-6C3599FFA338} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => %SystemRoot%\ehome\ehPrivJob.exe
Task: {62621F10-CF06-4343-BA31-1B3F67509DCE} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => %SystemRoot%\ehome\mcupdate.exe
Task: {6431B7AA-140F-4576-8689-85ACFAB7F277} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => %SystemRoot%\ehome\ehrec.exe
Task: {66E1A4E5-7995-48B4-A16F-74E7305F6B12} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => %SystemRoot%\ehome\mcupdate.exe
Task: {6829612A-D31D-43E8-AF1B-796DC5715107} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {6CBFE4A0-9DD3-45DF-8421-92E7BD537366} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Geen bestand <==== AANDACHT
Task: {6D7253A4-FAA0-4CE7-A6E8-25DF4E8BE0C7} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => %SystemRoot%\ehome\mcupdate.exe
Task: {747C0337-54FF-43E2-A868-C3236C010409} - \{8CF75725-732A-40C5-A654-F0E0E466D1BF} -> Geen bestand <==== AANDACHT
Task: {7CF089DD-24E3-4298-B35F-A9CCAFB1130C} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => %SystemRoot%\ehome\ehPrivJob.exe
Task: {89F655FE-9C13-4405-8F86-D76D15E9F1D3} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => %SystemRoot%\ehome\mcupdate.exe
Task: {8B1DCA96-B676-4BF0-9E25-25763F5701BB} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Geen bestand <==== AANDACHT
Task: {95A8EDD3-986F-4B11-A8D2-30E7F40D4247} - \{652B429C-F251-4F4F-A00C-4C92E16E1B4C} -> Geen bestand <==== AANDACHT
Task: {96BB770D-B8F1-48CA-9995-286B8C10D0EA} - \DropboxUpdateTaskMachineUA -> Geen bestand <==== AANDACHT
Task: {98F4B30F-D5E2-4E38-867C-A69F0670BE9D} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => %SystemRoot%\ehome\ehrec.exe
Task: {9A975FCE-BE86-4F1E-A48B-B3E16FA49BAF} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => %SystemRoot%\ehome\ehPrivJob.exe
Task: {A0C54FD9-0902-48B2-B601-7C5FFFDE9488} - \{3756CDE9-1042-4A67-A7F3-26B74A494D30} -> Geen bestand <==== AANDACHT
Task: {A36428F6-67B6-4EBD-A14F-2CE597B8CD50} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => %SystemRoot%\ehome\mcupdate.exe
Task: {A39521D1-EE12-4EAA-A6A5-8A61A683A32C} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Geen bestand <==== AANDACHT
Task: {AF9CBB55-8AA3-4A93-8A11-CA216FC10006} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => %SystemRoot%\ehome\ehPrivJob.exe
Task: {B50DA24A-50AE-4B3B-B0E4-48F0FFD36A77} - \GoogleUpdateTaskMachineCore -> Geen bestand <==== AANDACHT
Task: {B794A915-1861-4D19-B90A-5908FFDF711F} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => %windir%\ehome\MCUpdate.exe
Task: {BB1C630E-AF93-4022-A4C0-D0EBDD3643DB} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => %SystemRoot%\ehome\ehPrivJob.exe
Task: {BFA31AAD-5640-4F16-B0D2-9CBC85E4B3DB} - \{87C0E0A8-4522-467D-BD7A-133FE356D754} -> Geen bestand <==== AANDACHT
Task: {C1D1EDD5-326E-470D-A1CB-B4D6D13EE6B9} - \{1AA0FBE8-0E7A-449E-A179-585BC05C3ED0} -> Geen bestand <==== AANDACHT
Task: {C1E3CFD2-D965-40CF-9BC9-5437063CA887} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => %SystemRoot%\ehome\mcupdate.exe
Task: {C9C399B1-77B1-46FD-A17B-912E4475967C} - \{97D82AF4-42DF-438B-B2A7-4A8252A75E05} -> Geen bestand <==== AANDACHT
Task: {CAFFDCE3-D1B9-4F3C-81BD-08742306B49F} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Geen bestand <==== AANDACHT
Task: {CD3ECAE8-5B57-49FE-B912-60A7530337AB} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-12-07] (HP Inc.)
Task: {CD902FBF-C6F9-45C3-B9B0-36D4CD898F87} - \CCleanerSkipUAC -> Geen bestand <==== AANDACHT
Task: {CDE72720-7A8F-4A29-B99D-3BD913E28E44} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Geen bestand <==== AANDACHT
Task: {CE08DE29-6DF4-40FC-BBD3-34EC572A8668} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Geen bestand <==== AANDACHT
Task: {CE16ABF0-A1C9-4D3C-AD67-8ACA78FE01CB} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => %SystemRoot%\ehome\ehPrivJob.exe
Task: {D095ACA2-D094-4B44-85A2-BD0AD530C396} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => %SystemRoot%\ehome\ehPrivJob.exe
Task: {D42519FD-97C0-4EF7-A0A4-61DA56CE623C} - \GoogleUpdateTaskMachineUA -> Geen bestand <==== AANDACHT
Task: {DA02B83F-3663-4FC1-B249-1DF8C09C290F} - \{96AC608C-EC06-4BC5-A6A8-21AB8AA98342} -> Geen bestand <==== AANDACHT
Task: {DB781B42-4DB8-4FDE-84D1-2041B1BA615D} - System32\Tasks\{2353E7A6-CA91-B430-59BB-22A481CCE50F} => C:\Users\MartinSr\AppData\Roaming\Nogilofo\SYNHEL~1.EXE
Task: {DDC3382C-93B2-47AD-94A9-14E4AD50CABC} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => %SystemRoot%\ehome\ehPrivJob.exe
Task: {E6FD3E41-72BA-4588-BBC3-E29CD459D92B} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => %SystemRoot%\ehome\ehPrivJob.exe
Task: {EF6068A4-C80A-4309-939E-4810DE04D23A} - \DropboxUpdateTaskMachineCore -> Geen bestand <==== AANDACHT
Task: {EFB938A7-6138-4C2B-A4BE-E60D58BBA480} - System32\Tasks\HP Photo Creations Communicator => C:\Users\MartinSr\AppData\Roaming\HP Photo Creations\Communicator.exe [2017-02-25] ()
Task: {F4DDA4AB-4B22-47B9-BA0C-51E43E1D49B6} - System32\Tasks\NCH Software\SwitchSevenDays => C:\Program Files (x86)\NCH Software\Switch\Switch.exe
Task: {F4E05217-4827-4F22-A75E-ADA5720E0DBD} - \Adobe Acrobat Update Task -> Geen bestand <==== AANDACHT
Task: {FE5A49D1-3554-4256-A94D-5C4022F4882B} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Geen bestand <==== AANDACHT

(Als een item is opgenomen in de fixlist, de taak (job) bestand wordt verplaatst. Het bestand dat wordt uitgevoerd door de taak zal niet worden verplaatst.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\HP Photo Creations Communicator.job => C:\Users\MartinSr\AppData\Roaming\HP Photo Creations\Communicator.exe
Task: C:\WINDOWS\Tasks\{2353E7A6-CA91-B430-59BB-22A481CCE50F}.job =>

==================== Snelkoppelingen =============================

(De items kunnen worden opgenomen in de fixlist.txt om hersteld of verwijderd te worden.)

==================== Geladen Modules (gefilterd) ==============

2012-01-17 10:24 - 2012-01-17 10:24 - 00055296 _____ () C:\Windows\SysWOW64\ASGT.exe
2016-08-26 10:08 - 2016-08-26 10:08 - 00192200 _____ () C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe
2011-12-16 14:33 - 2006-06-01 20:56 - 00196708 ____N () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-12-15 16:17 - 2016-12-09 11:29 - 02681200 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-10-10 09:31 - 2016-12-29 13:44 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-12-15 16:17 - 2016-12-09 11:29 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-12-15 16:17 - 2016-12-09 11:29 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-10-10 10:19 - 2016-10-10 10:19 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-01-11 17:12 - 2016-12-21 08:09 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-01-11 17:12 - 2016-12-21 07:54 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-01-11 17:12 - 2016-12-21 07:48 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-01-11 17:12 - 2016-12-21 07:48 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-01-11 17:12 - 2016-12-21 07:48 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-01-11 17:12 - 2016-12-21 07:53 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2017-03-15 14:04 - 2017-03-15 14:05 - 00077312 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.12.112.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-03-15 14:04 - 2017-03-15 14:05 - 00182784 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.12.112.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-03-15 14:04 - 2017-03-15 14:05 - 41048064 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.12.112.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-03-15 14:04 - 2017-03-15 14:05 - 02236896 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.12.112.0_x64__kzf8qxf38zg5c\roottools.dll
2017-03-01 17:40 - 2017-02-17 11:46 - 00073216 _____ () C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe
2015-12-15 18:17 - 2015-12-15 18:17 - 00618544 _____ () C:\Program Files (x86)\Panda Security\Panda Security Protection\SQLite3.dll
2016-02-17 11:42 - 2016-06-20 14:53 - 01506304 _____ () C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\DAQExp.dll
2016-02-17 11:42 - 2014-05-19 17:19 - 00137728 _____ () C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\CBSCreateVC.dll
2017-03-10 09:13 - 2017-03-06 21:59 - 00807232 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_watchdog.dll
2017-03-10 09:13 - 2017-02-09 03:19 - 00035792 _____ () C:\Program Files (x86)\Dropbox\Client\_multiprocessing.pyd
2017-03-10 09:13 - 2017-02-09 03:19 - 00100296 _____ () C:\Program Files (x86)\Dropbox\Client\_ctypes.pyd
2017-03-10 09:13 - 2017-02-09 03:19 - 00018888 _____ () C:\Program Files (x86)\Dropbox\Client\select.pyd
2017-03-10 09:13 - 2017-03-06 22:01 - 00019776 _____ () C:\Program Files (x86)\Dropbox\Client\tornado.speedups.pyd
2017-03-10 09:13 - 2017-02-09 03:19 - 00694224 _____ () C:\Program Files (x86)\Dropbox\Client\unicodedata.pyd
2017-03-10 09:13 - 2017-03-06 22:01 - 00020824 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd
2017-03-10 09:13 - 2017-02-09 03:20 - 00123856 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_backend.pyd
2017-03-10 09:13 - 2017-03-06 22:01 - 01682768 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd
2017-03-10 09:13 - 2017-03-06 22:01 - 00020816 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd
2017-03-10 09:13 - 2017-02-09 03:19 - 00145864 _____ () C:\Program Files (x86)\Dropbox\Client\pyexpat.pyd
2017-03-10 09:13 - 2017-02-09 03:20 - 00019408 _____ () C:\Program Files (x86)\Dropbox\Client\faulthandler.pyd
2017-03-10 09:13 - 2017-02-09 03:19 - 00116688 _____ () C:\Program Files (x86)\Dropbox\Client\pywintypes27.dll
2017-03-10 09:13 - 2017-02-09 03:22 - 00105928 _____ () C:\Program Files (x86)\Dropbox\Client\win32api.pyd
2017-03-10 09:13 - 2017-03-06 22:01 - 00022864 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.crt.compiled._winffi_crt.pyd
2017-03-10 09:13 - 2017-03-06 22:01 - 00038712 _____ () C:\Program Files (x86)\Dropbox\Client\fastpath.pyd
2017-03-10 09:13 - 2017-03-06 22:01 - 00060736 _____ () C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.pyd
2017-03-10 09:13 - 2017-02-09 03:22 - 00024528 _____ () C:\Program Files (x86)\Dropbox\Client\win32event.pyd
2017-03-10 09:13 - 2017-02-09 03:22 - 00175560 _____ () C:\Program Files (x86)\Dropbox\Client\win32gui.pyd
2017-03-10 09:13 - 2017-02-09 03:19 - 00392144 _____ () C:\Program Files (x86)\Dropbox\Client\pythoncom27.dll
2017-03-10 09:13 - 2017-02-09 03:22 - 00020936 _____ () C:\Program Files (x86)\Dropbox\Client\mmapfile.pyd
2017-03-10 09:13 - 2017-02-09 03:22 - 00116176 _____ () C:\Program Files (x86)\Dropbox\Client\win32security.pyd
2017-03-10 09:13 - 2017-03-06 22:01 - 00381760 _____ () C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.pyd
2017-03-10 09:13 - 2017-02-09 03:22 - 00124880 _____ () C:\Program Files (x86)\Dropbox\Client\win32file.pyd
2017-03-10 09:13 - 2017-03-06 22:01 - 00026456 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.kernel32.compiled._winffi_kernel32.pyd
2017-03-10 09:13 - 2017-02-09 03:22 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32clipboard.pyd
2017-03-10 09:13 - 2017-02-09 03:22 - 00030160 _____ () C:\Program Files (x86)\Dropbox\Client\win32pipe.pyd
2017-03-10 09:13 - 2017-02-09 03:22 - 00043472 _____ () C:\Program Files (x86)\Dropbox\Client\win32process.pyd
2017-03-10 09:13 - 2017-02-09 03:22 - 00048592 _____ () C:\Program Files (x86)\Dropbox\Client\win32service.pyd
2017-03-10 09:13 - 2017-02-09 03:22 - 00057808 _____ () C:\Program Files (x86)\Dropbox\Client\win32evtlog.pyd
2017-03-10 09:13 - 2017-02-09 03:22 - 00024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32profile.pyd
2017-03-10 09:13 - 2017-03-06 22:01 - 00246608 _____ () C:\Program Files (x86)\Dropbox\Client\breakpad.client.windows.handler.pyd
2017-03-10 09:13 - 2017-03-06 22:01 - 00027488 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.pyd
2017-03-10 09:13 - 2017-02-09 03:21 - 00241104 _____ () C:\Program Files (x86)\Dropbox\Client\_jpegtran.pyd
2017-03-10 09:13 - 2017-03-06 22:01 - 00022336 _____ () C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.pyd
2017-03-10 09:13 - 2017-03-06 22:01 - 00025432 _____ () C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd
2017-03-10 09:13 - 2017-02-09 03:22 - 00028616 _____ () C:\Program Files (x86)\Dropbox\Client\win32ts.pyd
2017-03-10 09:13 - 2017-03-06 22:01 - 01826104 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.pyd
2017-03-10 09:13 - 2017-02-09 03:20 - 00083912 _____ () C:\Program Files (x86)\Dropbox\Client\sip.pyd
2017-03-10 09:13 - 2017-03-06 22:01 - 01972536 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.pyd
2017-03-10 09:13 - 2017-03-06 22:01 - 03928896 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.pyd
2017-03-10 09:13 - 2017-03-06 22:01 - 00531264 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.pyd
2017-03-10 09:13 - 2017-03-06 22:01 - 00053072 _____ () C:\Program Files (x86)\Dropbox\Client\winrpcserver.compiled._RPCServer.pyd
2017-03-10 09:13 - 2017-03-06 22:01 - 00133432 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.pyd
2017-03-10 09:13 - 2017-03-06 22:01 - 00224064 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd
2017-03-10 09:13 - 2017-03-06 22:01 - 00207680 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.pyd
2017-03-10 09:13 - 2017-03-06 22:01 - 00022864 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.user32.compiled._winffi_user32.pyd
2017-03-10 09:13 - 2017-03-06 22:01 - 00069968 _____ () C:\Program Files (x86)\Dropbox\Client\windisplaytoast.compiled._DisplayToast.pyd
2017-03-10 09:13 - 2017-03-06 22:01 - 00022872 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.iphlpapi.compiled._winffi_iphlpapi.pyd
2017-03-10 09:13 - 2017-03-06 22:01 - 00021848 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winerror.compiled._winffi_winerror.pyd
2017-03-10 09:13 - 2017-03-06 22:01 - 00022872 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.wininet.compiled._winffi_wininet.pyd
2017-03-10 09:13 - 2017-02-09 03:22 - 00350152 _____ () C:\Program Files (x86)\Dropbox\Client\winxpgui.pyd
2017-03-10 09:13 - 2017-03-06 22:01 - 00103232 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWinExtras.pyd
2017-03-10 09:13 - 2017-03-06 22:01 - 00023896 _____ () C:\Program Files (x86)\Dropbox\Client\winverifysignature.compiled._VerifySignature.pyd
2017-03-10 09:13 - 2017-03-06 22:01 - 00025936 _____ () C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd
2017-03-10 09:13 - 2017-02-09 03:17 - 00036296 _____ () C:\Program Files (x86)\Dropbox\Client\librsync.dll
2017-03-10 09:13 - 2017-03-06 22:01 - 00033112 _____ () C:\Program Files (x86)\Dropbox\Client\enterprise_data.compiled._enterprise_data.pyd
2017-03-10 09:13 - 2016-12-02 22:44 - 00293392 _____ () C:\Program Files (x86)\Dropbox\Client\EnterpriseDataAdapter.dll
2017-03-10 09:13 - 2017-03-06 22:01 - 00084288 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL
2017-03-10 09:13 - 2017-02-09 03:27 - 00017864 _____ () C:\Program Files (x86)\Dropbox\Client\libEGL.dll
2017-03-10 09:13 - 2017-02-09 03:27 - 01631184 _____ () C:\Program Files (x86)\Dropbox\Client\libGLESv2.dll
2017-03-10 09:13 - 2017-03-06 22:01 - 00042816 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebChannel.pyd
2017-03-10 09:13 - 2017-03-06 22:01 - 00171336 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineWidgets.pyd
2017-03-10 09:13 - 2017-03-06 22:01 - 00357688 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.pyd
2017-03-10 09:13 - 2017-02-09 03:22 - 00060880 _____ () C:\Program Files (x86)\Dropbox\Client\win32print.pyd
2017-03-10 09:13 - 2017-03-06 22:01 - 00026456 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winhttp.compiled._winffi_winhttp.pyd
2017-03-10 09:13 - 2017-03-06 22:01 - 00546104 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.pyd

==================== Alternate Data Streams (gefilterd) =========

(Als een item is opgenomen in de fixlist, alleen de ADS wordt verwijderd.)

AlternateDataStreams: C:\ProgramData\Temp:661DFA1C [136]
AlternateDataStreams: C:\Users\MartinSr\Downloads:Shareaza.GUID [16]
AlternateDataStreams: C:\Users\MartinSr\AppData\Roaming\Microsoft\Windows\Start Menu\Facebook.website:TASKICON_0news-1751121550 [2302]
AlternateDataStreams: C:\Users\MartinSr\AppData\Roaming\Microsoft\Windows\Start Menu\Facebook.website:TASKICON_1messages-431041656 [2302]
AlternateDataStreams: C:\Users\MartinSr\AppData\Roaming\Microsoft\Windows\Start Menu\Facebook.website:TASKICON_2events-250898981 [2302]
AlternateDataStreams: C:\Users\MartinSr\AppData\Roaming\Microsoft\Windows\Start Menu\Facebook.website:TASKICON_3friends-215113587 [2302]

==================== Veilige Modus (gefilterd) ===================

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. De "AlternateShell" waarde wordt hersteld.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\NanoServiceMain => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PSUAService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NanoServiceMain => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PSUAService => ""="Service"

==================== Bestandskoppeling (gefilterd) ===============

(Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd.)


==================== Internet Explorer vertrouwde/beperkte toegang ===============

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd.)

IE trusted site: HKU\S-1-5-21-3628179315-1915274704-1408630806-1000\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-3628179315-1915274704-1408630806-1000\...\webcompanion.com -> hxxp://webcompanion.com

==================== Hosts inhoud: ===============================

(Als nodig Hosts: opdracht kan worden opgenomen in de fixlist om Hosts te resetten.)

2009-07-14 03:34 - 2017-03-06 10:13 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts


==================== Andere gebieden ============================

(Momenteel is er geen automatische fix voor dit onderdeel.)

HKU\S-1-5-21-3628179315-1915274704-1408630806-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\MartinSr\AppData\Local\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 89.101.251.228 - 89.101.251.229
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is uitgeschakeld.

==================== MSCONFIG/TASK MANAGER Uitgeschakelde items ==

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Microsoft Office.lnk => C:\Windows\pss\Microsoft Office.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^MartinSr^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.3 .lnk => C:\Windows\pss\OpenOffice.org 3.3 .lnk.Startup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Adobe Speed Launcher => 1419270079
MSCONFIG\startupreg: BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} => "C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe"
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: CLMLServer => "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
MSCONFIG\startupreg: uTorrent => "C:\Users\MartinSr\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
MSCONFIG\startupreg: Wondershare Helper Compact.exe => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe

==================== Firewall regels (gefilterd) ===============

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
FirewallRules: [{7D004950-BFF4-4EC7-A7A5-724B7BA16652}] => (Allow) C:\Users\MartinSr\AppData\Local\Temp\7zS625E\HPDiagnosticCoreUI.exe
FirewallRules: [{64C821B1-4812-41E2-BB25-239EB2C45ABF}] => (Allow) C:\Users\MartinSr\AppData\Local\Temp\7zS625E\HPDiagnosticCoreUI.exe
FirewallRules: [{ABD6CC6C-F48F-4874-B0C7-EA6F6A8197E9}] => (Allow) C:\Users\MartinSr\AppData\Local\Temp\7zS6C36\HPDiagnosticCoreUI.exe
FirewallRules: [{EA419DBA-445E-40BC-A13A-D8FD8051A84D}] => (Allow) C:\Users\MartinSr\AppData\Local\Temp\7zS6C36\HPDiagnosticCoreUI.exe
FirewallRules: [{3A8A8EE2-93FD-4D2B-A119-341D55D457F6}] => (Allow) C:\Users\MartinSr\AppData\Local\Temp\7zS6865\HPDiagnosticCoreUI.exe
FirewallRules: [{A3C1B05A-FFEC-491E-9024-A2C861DE900C}] => (Allow) C:\Users\MartinSr\AppData\Local\Temp\7zS6865\HPDiagnosticCoreUI.exe
FirewallRules: [{E327F33D-DC38-4784-A320-7D1029E0A0C5}] => (Allow) C:\Users\MartinSr\AppData\Local\Temp\7zS6D57\hppiw.exe
FirewallRules: [{EA2E4250-3931-4C8D-9084-407E38029A60}] => (Allow) C:\Users\MartinSr\AppData\Local\Temp\7zS6D57\hppiw.exe
FirewallRules: [{3E44C8DE-D231-490B-BAB7-AE7D072A5DC5}] => (Allow) C:\Users\MartinSr\AppData\Local\Temp\7zS58EC\HPDiagnosticCoreUI.exe
FirewallRules: [{85D38583-DDD6-410B-8AD1-EF0EE9606F2D}] => (Allow) C:\Users\MartinSr\AppData\Local\Temp\7zS58EC\HPDiagnosticCoreUI.exe
FirewallRules: [{D5E6787B-853F-4EE4-9AED-A3A1758E5973}] => (Allow) C:\Users\MartinSr\AppData\Local\Temp\7zS5543\HPDiagnosticCoreUI.exe
FirewallRules: [{34FD8B57-5DA1-4240-956A-086BB09787CF}] => (Allow) C:\Users\MartinSr\AppData\Local\Temp\7zS5543\HPDiagnosticCoreUI.exe
FirewallRules: [{0563A56A-36C9-4C81-8F8E-45D24EEB8C7E}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftHDSDump.dll
FirewallRules: [{F98C477C-F13B-42C6-8B06-7A71E8BA545A}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftHDSDump.dll
FirewallRules: [{52159C22-48F2-4682-9C9D-42D481EFA4A4}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftDownloaderHelp.dll
FirewallRules: [{CF99D430-23FC-455B-8555-E527786A12EF}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftDownloaderHelp.dll
FirewallRules: [{45FF927A-D3F5-4091-9C75-E37270E01383}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftPlayer.dll
FirewallRules: [{DE8B3DC9-6FA8-4CD6-94E3-5ED4D35D3A8B}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftPlayer.dll
FirewallRules: [{6972E988-06B4-47AB-B9AE-F9F6CC0F7123}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftAC.dll
FirewallRules: [{FF904B7B-A06E-47BD-B667-96DD97608AC4}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftAC.dll
FirewallRules: [{A4A0EFCA-AA91-432A-8451-8EA6AF47241E}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftDump.dll
FirewallRules: [{47A69613-27C2-46A9-9E1E-7A8049379A7B}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftDump.dll
FirewallRules: [{8C1211AB-FB7E-476F-B817-9F72BEFAAA4C}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftSrv.dll
FirewallRules: [{E9A28329-F24C-4901-A2B9-8DB3A757D807}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\ApowersoftSrv.dll
FirewallRules: [{F194D504-255D-4D68-A4A1-1D3422AB37D4}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\Video Download Capture.exe
FirewallRules: [{0584648C-189E-46B4-8155-EADC7E6BB47E}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Download Capture\Video Download Capture.exe
FirewallRules: [TCP Query User{1AAFBEA7-B167-4EE1-B246-048BD07C0751}C:\users\martinsr\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\martinsr\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{BA171604-7263-4DCB-B164-490E90EC427B}C:\users\martinsr\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\martinsr\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [{AB5015DD-A601-4812-B931-D86A031139C5}] => (Allow) C:\Users\MartinSr\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{295875DB-59EF-4D14-9649-B17FAB40767B}] => (Allow) C:\Users\MartinSr\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{EE4826E3-01B8-446A-8C81-D213737516B9}] => (Allow) C:\Users\MartinSr\AppData\Local\Temp\7zS179F\HPDiagnosticCoreUI.exe
FirewallRules: [{A746B4E1-EC85-41B1-9FED-E38EE3FAA965}] => (Allow) C:\Users\MartinSr\AppData\Local\Temp\7zS179F\HPDiagnosticCoreUI.exe
FirewallRules: [{F0E7C8F5-6EF0-4040-825A-16B74FEFD8D6}] => (Allow) C:\Program Files\HP\HP ENVY 4500 series\Bin\DeviceSetup.exe
FirewallRules: [{8010D34F-537D-479C-9C35-1CE0B9916417}] => (Allow) LPort=5357
FirewallRules: [{8B25E89F-752E-4CE7-9049-91FE1683855E}] => (Allow) C:\Program Files\HP\HP ENVY 4500 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{832C4F41-FCAE-4117-9307-B48D405C59CC}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe
FirewallRules: [{CD19E5B8-737D-4900-A387-0E94FBC36E21}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe
FirewallRules: [{2135BB1B-FF36-4137-BAE6-5CDF06ED9B83}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe
FirewallRules: [{100B7DD4-1414-4030-A43B-DA433FD328CB}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe
FirewallRules: [{221308DA-D577-458E-9F2D-41876149E1D5}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Package\PTInstOnline.exe
FirewallRules: [{F75248C6-2792-433D-8A79-5B8E272B83FD}] => (Allow) C:\Program Files (x86)\PicosmosTools\PTInstOnline.exe
FirewallRules: [{3766ED08-ECBD-4879-B565-F93A6ADBA6DE}] => (Allow) C:\Program Files (x86)\NCH Software\BroadCam\broadcam.exe
FirewallRules: [{B412943C-BB28-407D-84CB-EE35507AE3A2}] => (Allow) C:\Program Files (x86)\NCH Software\BroadCam\broadcam.exe
FirewallRules: [{36AECFB3-669C-49BF-ABA0-AD9511B8EF37}] => (Allow) C:\Program Files (x86)\NCH Software\BroadCam\broadcam.exe
FirewallRules: [{C02B280A-75B8-4DEC-8F7A-F6D70176277C}] => (Allow) C:\Program Files (x86)\NCH Software\BroadCam\broadcam.exe
FirewallRules: [{4B29D34D-884B-42BD-A0C7-200DE8D8084B}] => (Allow) C:\Program Files (x86)\pandasecuritytb\ToolbarCleaner.exe
FirewallRules: [{B52CE488-4E2B-4C4C-9947-AF0111044F53}] => (Allow) C:\Program Files (x86)\pandasecuritytb\ToolbarCleaner.exe
FirewallRules: [{BE05740A-18D9-486D-9255-E263F1E35545}] => (Allow) C:\Users\MartinSr\AppData\Local\Temp\7zS14E4\HPDiagnosticCoreUI.exe
FirewallRules: [{AB8B2893-1E78-4EB8-B929-08592462A70A}] => (Allow) C:\Users\MartinSr\AppData\Local\Temp\7zS14E4\HPDiagnosticCoreUI.exe
FirewallRules: [{F121FE6B-33E0-45B3-8CB5-652DD06D13EB}] => (Allow) C:\Users\MartinSr\AppData\Local\Temp\7zS1553\HPDiagnosticCoreUI.exe
FirewallRules: [{DF3049E5-1FCD-44B9-B082-B33200906160}] => (Allow) C:\Users\MartinSr\AppData\Local\Temp\7zS1553\HPDiagnosticCoreUI.exe
FirewallRules: [{978E113D-1AA0-4F26-B2A7-F81292644E9D}] => (Allow) C:\Users\MartinSr\AppData\Local\Temp\7zS15BB\HPDiagnosticCoreUI.exe
FirewallRules: [{F6106858-AFB8-4EB0-B9D5-B04EFDE6424B}] => (Allow) C:\Users\MartinSr\AppData\Local\Temp\7zS15BB\HPDiagnosticCoreUI.exe
FirewallRules: [{C5F65B1A-B700-4A34-97B9-C6283AC56E54}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{CA49511F-893D-4C3F-9CB3-CB352E0CB947}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe
FirewallRules: [{6EE4659F-0D2E-4343-A58A-854F6907186B}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe
FirewallRules: [{D91C7A2E-70C7-498A-A447-943F26E90D4B}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe
FirewallRules: [{5B9BAA9C-91CB-42BD-956B-937EF495B87E}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe
FirewallRules: [{38037E13-6C1C-4D95-9B33-4D53AD73A9F5}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Package\PTInstOnline.exe
FirewallRules: [{2A4E9FE0-6027-4891-9BA8-5A6A2D21337E}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

==================== Herstelpunten =========================

25-02-2017 11:43:12 Fotostory 3 für Windows wird installiert
27-02-2017 09:55:05 Installed Photo Story 3 for Windows
01-03-2017 16:00:12 Windows Back-up
05-03-2017 11:43:51 Removed Amazon Assistant

==================== Defecte Apparaatbeheer Apparaten =============


==================== Eventlog fouten: =========================

Applicatiefouten:
==================
Error: (03/17/2017 04:12:56 PM) (Source: Microsoft-Windows-EFS) (EventID: 4401) (User: CC525380-A)
Description: 7.488: Kan geen gebruiker inrichten voor EDP. Foutcode: 0x80070005.

Error: (03/17/2017 10:59:30 AM) (Source: Microsoft-Windows-EFS) (EventID: 4401) (User: CC525380-A)
Description: 7.488: Kan geen gebruiker inrichten voor EDP. Foutcode: 0x80070005.

Error: (03/16/2017 04:18:21 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: CC525380-A)
Description: Het pakket Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe+MicrosoftEdge#{de8d6a1b-deab-44bd-b183-ecd20dbb6c2b} is beëindigd omdat het onderbreken te lang duurde.

Error: (03/16/2017 04:16:01 PM) (Source: Microsoft-Windows-EFS) (EventID: 4401) (User: CC525380-A)
Description: 7.488: Kan geen gebruiker inrichten voor EDP. Foutcode: 0x80070005.

Error: (03/16/2017 04:13:20 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Het programma AcroRd32.exe, versie 15.23.20070.19033 reageert niet meer op Windows en is afgesloten. Als u wilt zien of er meer informatie over het probleem beschikbaar is, raadpleegt u de probleemgeschiedenis in het onderdeel Beveiliging en onderhoud van het Configuratiescherm.

Proces-id: 2c30

Starttijd: 01d29e67b9e2c257

Eindtijd: 4294967295

Toepassingspad: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe

Rapport-id: 0ebab250-0a5b-11e7-a693-6c626db99db0

Volledige pakketnaam met fout:

Relatieve toepassings-id van pakket met fout:

Error: (03/16/2017 02:56:24 PM) (Source: Microsoft-Windows-EFS) (EventID: 4401) (User: CC525380-A)
Description: 7.488: Kan geen gebruiker inrichten voor EDP. Foutcode: 0x80070005.

Error: (03/15/2017 01:57:42 PM) (Source: Microsoft-Windows-EFS) (EventID: 4401) (User: CC525380-A)
Description: 7.488: Kan geen gebruiker inrichten voor EDP. Foutcode: 0x80070005.

Error: (03/14/2017 03:41:38 PM) (Source: Microsoft-Windows-EFS) (EventID: 4401) (User: CC525380-A)
Description: 7.488: Kan geen gebruiker inrichten voor EDP. Foutcode: 0x80070005.

Error: (03/12/2017 08:27:18 AM) (Source: Microsoft-Windows-EFS) (EventID: 4401) (User: CC525380-A)
Description: 7.488: Kan geen gebruiker inrichten voor EDP. Foutcode: 0x80070005.

Error: (03/11/2017 05:27:11 PM) (Source: Microsoft-Windows-EFS) (EventID: 4401) (User: CC525380-A)
Description: 7.488: Kan geen gebruiker inrichten voor EDP. Foutcode: 0x80070005.


Systeemfouten:
=============
Error: (03/17/2017 04:13:00 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
en APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
aan de gebruiker NT AUTHORITY\SYSTEM SID (S-1-5-18) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services.

Error: (03/17/2017 10:59:35 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
en APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
aan de gebruiker NT AUTHORITY\SYSTEM SID (S-1-5-18) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services.

Error: (03/16/2017 04:16:04 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
en APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
aan de gebruiker NT AUTHORITY\SYSTEM SID (S-1-5-18) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services.

Error: (03/16/2017 02:56:30 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
en APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
aan de gebruiker NT AUTHORITY\SYSTEM SID (S-1-5-18) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services.

Error: (03/15/2017 01:57:44 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
en APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
aan de gebruiker NT AUTHORITY\SYSTEM SID (S-1-5-18) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services.

Error: (03/14/2017 03:41:40 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
en APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
aan de gebruiker NT AUTHORITY\SYSTEM SID (S-1-5-18) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services.

Error: (03/12/2017 08:27:20 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
en APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
aan de gebruiker NT AUTHORITY\SYSTEM SID (S-1-5-18) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services.

Error: (03/11/2017 05:42:19 PM) (Source: DCOM) (EventID: 10010) (User: CC525380-A)
Description: De server {AD3EDBCA-0901-415B-82E9-C16D3B65E38C} heeft zich niet binnen de vereiste termijn bij DCOM geregistreerd.

Error: (03/11/2017 05:27:13 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
en APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
aan de gebruiker NT AUTHORITY\SYSTEM SID (S-1-5-18) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services.

Error: (03/11/2017 04:26:29 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
en APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
aan de gebruiker NT AUTHORITY\SYSTEM SID (S-1-5-18) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet besc
Medion Akoya ,Windows 10 / Intel Pentium G6960 processor. AMD Radeon HD 6670 / 512 MB DDRS geheugen. 4 GB werkgeheugen. 1.5 TB harde schijf. /Microsoft Edge /Windows Live Mail/ Windows Defender / Nero DVD/CD Brander/HP ENVY 4500
abbs 17 mar 2017, 16:57 Leidschendam 1.589 berichten
Hallo,

Er zijn twee logjes aangemaakt, zou je (FRST.txt) ook willen plaatsen. :)
Groeten abbs
Afbeelding
Member of UNITE (Unified Network of Instructors and Trained Eliminators)
MartinSr Startte dit onderwerp 18 mar 2017, 14:52 114 berichten
Scanresultaten van Farbar Recovery Scan Tool (FRST) (x64) Versie: 15-03-2017
Gestart door MartinSr (Beheerder) op CC525380-A (17-03-2017 16:29:33)
Gestart vanaf C:\Users\MartinSr\Downloads
Geladen Profielen: MartinSr (Beschikbare Profielen: MartinSr & DefaultAppPool)
Platform: Windows 10 Home Versie 1607 (X64) Taal: Nederlands (Nederland)
Internet Explorer Versie 11 (Standaardbrowser: Edge)
Boot Modus: Normal
Handleiding voor Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processen (gefilterd) =================

(Als een item is opgenomen in de fixlist, het proces zal worden gesloten. Het bestand zal niet worden verplaatst.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
() C:\Windows\SysWOW64\ASGT.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
() C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Visicom Media Inc.) C:\Program Files\Panda Security URL Filtering\Panda_URL_Filteringb.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Wondershare) C:\Program Files (x86)\Wondershare\WAF\2.1.6.0\WsAppService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.12.112.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(AimerSoft) C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
() C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgentUserBroker.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

==================== Register (gefilterd) ====================

(Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10918504 2010-06-14] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2461504 2014-09-17] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2011-04-14] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [Microsoft Default Manager] => C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [439568 2010-05-10] (Microsoft Corporation)
HKLM-x32\...\Run: [NPSStartup] => [X]
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
HKLM-x32\...\Run: [Aimersoft Helper Compact.exe] => C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe [2131856 2016-06-20] (AimerSoft)
HKLM-x32\...\Run: [PSUAMain] => C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe [109824 2016-08-05] (Panda Security, S.L.)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [27308304 2017-03-06] (Dropbox, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation)
HKLM-x32\...\Run: [ProductUpdater] => C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe [73216 2017-02-17] ()
HKLM-x32\...\RunOnce: [Sonaca] => C:\WINDOWS\SysWoW64\wscript.exe /E:vbscript /B "C:\Users\MartinSr\AppData\Local\5B1CF7~1\Baceboko.dat"
HKLM\...\Winlogon: [Userinit] C:\Windows\SysWOW64\userinit.exe,
HKU\S-1-5-21-3628179315-1915274704-1408630806-1000\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [1475344 2016-03-22] (Lavasoft)
HKU\S-1-5-21-3628179315-1915274704-1408630806-1000\...\Run: [Chromium] => c:\users\martinsr\appdata\local\chromium\application\chrome.exe --auto-launch-at-startup --profile-directory=Default --restore-last-session
ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Geen bestand
ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2016-02-09]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
GroupPolicy: Restrictie <======= AANDACHT

==================== Internet (gefilterd) ====================

(Als een item is opgenomen in de fixlist, als het een registry item is wordt verwijderd of hersteld naar de standaard.)

Tcpip\Parameters: [DhcpNameServer] 89.101.251.228 89.101.251.229
Tcpip\..\Interfaces\{1289cdfc-aecd-40dc-9824-932f5923b922}: [DhcpNameServer] 89.101.251.228 89.101.251.229

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com/?q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/
HKU\S-1-5-21-3628179315-1915274704-1408630806-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
HKU\S-1-5-21-3628179315-1915274704-1408630806-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/nl-nl/?ocid=iehp
SearchScopes: HKLM -> DefaultScope waarde ontbreekt
SearchScopes: HKLM-x32 -> DefaultScope {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL =
SearchScopes: HKLM-x32 -> URL hxxp://www.globasearch.com/?serie=211&installk ... earchTerms}
SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL =
SearchScopes: HKU\S-1-5-21-3628179315-1915274704-1408630806-1000 -> DefaultScope {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL =
SearchScopes: HKU\S-1-5-21-3628179315-1915274704-1408630806-1000 -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxps://www.amazon.com/gp/bit/amazonserp/ref=bi ... earchTerms}
SearchScopes: HKU\S-1-5-21-3628179315-1915274704-1408630806-1000 -> {B3B3A6AC-74EC-BD56-BCDB-EFA4799FB9DF} URL = hxxp://pandasecurity.mystart.com/results.php?pr=vmn&gen=ms&id=pandasecuritytb&v=4_3&idate=2016-10-10&ent=ch_675&q={searchTerms}
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-05-03] (Google Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\ssv.dll [2017-01-20] (Oracle Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-05-03] (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-01-20] (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-05-03] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-05-03] (Google Inc.)
DPF: HKLM-x32 {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} hxxp://download.microsoft.com/download/C/B/F/CBF23A2C-3E55-4664-BC5C-762780D79BA0/OGAControl.cab
DPF: HKLM-x32 {28B66320-9687-4B13-8757-36F901887AB5} hxxp://foto.blokker.nl/ips-opdata/layout/aspadmin/objects/canvasx.cab
DPF: HKLM-x32 {9191F686-7F0A-441D-8A98-2FE3AC1BD913} hxxp://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
Handler-x32: http - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: http - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: https - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: https - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: ipp - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: msdaipp - {E1D2BF42-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler-x32: msdaipp - {E1D2BF40-A96B-11D1-9C6B-0000F875AC61} - C:\PROGRA~2\COMMON~1\System\OLEDB~1\MSDAIPP.DLL [1999-02-03] (Microsoft Corporation)
Handler: WSAMVCUchrome - Geen CLSID Waarde
Handler: WSWSVCUchrome - Geen CLSID Waarde
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: (HP Smart Web Printing) - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2011-02-11] [ niet getekend]
FF HKLM-x32\...\Firefox\Extensions: [{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension
FF Extension: (Default Manager) - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension [2011-02-12] [ niet getekend]
FF HKU\S-1-5-21-3628179315-1915274704-1408630806-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_23_0_0_162.dll [2016-09-13] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_162.dll [2016-09-13] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-01-20] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-01-20] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-12-29] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-12-29] (NVIDIA Corporation)
FF Plugin-x32: @pandasecurity.com/activescan -> C:\Program Files (x86)\Panda Security\ActiveScan 2.0\npwrapper.dll [2010-07-27] (Panda Security, S.L.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-21] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-21] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3628179315-1915274704-1408630806-1000: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\Users\MartinSr\AppData\Roaming\Visan\plugins\npRLSecurePluginLayer.dll [2011-01-20] (RocketLife, LLP)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome:
=======
CHR Profile: C:\Users\MartinSr\AppData\Local\Google\Chrome\User Data\Default [2017-03-09]
CHR Extension: (Google Documenten) - C:\Users\MartinSr\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-01-22]
CHR Extension: (Google Drive) - C:\Users\MartinSr\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-09-20]
CHR Extension: (YouTube) - C:\Users\MartinSr\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-09-20]
CHR Extension: (Google Spreadsheets) - C:\Users\MartinSr\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-09-20]
CHR Extension: (Offline Documenten) - C:\Users\MartinSr\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-10-02]
CHR Extension: (Betalingen via Chrome Web Store) - C:\Users\MartinSr\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-09-20]
CHR Extension: (Gmail) - C:\Users\MartinSr\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-01-22]
CHR HKLM\...\Chrome\Extension: [fagakgcelolinfnkfgekcnedpaklfcok] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-3628179315-1915274704-1408630806-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fagakgcelolinfnkfgekcnedpaklfcok] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce] - hxxps://clients2.google.com/service/update2/crx

==================== Services (gefilterd) ====================

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] () [Bestand niet getekend]
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-08] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-08] (Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [46408 2017-01-21] (Dropbox, Inc.)
S2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [104448 2017-02-17] (Freemake) [Bestand niet getekend]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1149760 2014-09-17] (NVIDIA Corporation)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [31776 2016-12-07] (HP Inc.)
R2 HuaweiHiSuiteService64.exe; C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe [192200 2016-08-26] ()
R2 NanoServiceMain; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe [153096 2016-08-05] (Panda Security, S.L.)
S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Bestand niet getekend]
S3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [279848 2007-06-27] (Nero AG)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-12-29] (NVIDIA Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1796928 2014-09-17] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19440960 2014-09-17] (NVIDIA Corporation)
R2 PandaAgent; C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe [86104 2016-07-19] (Panda Security, S.L.)
R2 panda_url_filtering; C:\Program Files\Panda Security URL Filtering\Panda_URL_Filteringb.exe [287752 2015-11-06] (Visicom Media Inc.)
S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Bestand niet getekend]
R2 PSUAService; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe [48584 2016-08-05] (Panda Security, S.L.)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [196708 2006-06-01] () [Bestand niet getekend]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
R2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.1.6.0\WsAppService.exe [388608 2016-01-28] (Wondershare) [Bestand niet getekend]

===================== Drivers (gefilterd) ======================

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

S3 Apowersoft_AudioDevice; C:\WINDOWS\system32\drivers\Apowersoft_AudioDevice.sys [31920 2014-04-09] (Wondershare)
S3 HWHandSet; C:\WINDOWS\system32\DRIVERS\hw_quusbmdm.sys [223232 2016-05-25] (Huawei Technologies Co., Ltd.)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R1 NNSALPC; C:\WINDOWS\system32\DRIVERS\NNSALPC.sys [103856 2015-12-10] (Panda Security, S.L.)
R1 NNSHTTP; C:\WINDOWS\system32\DRIVERS\NNSHTTP.sys [210864 2015-12-10] (Panda Security, S.L.)
R1 NNSHTTPS; C:\WINDOWS\system32\DRIVERS\NNSHTTPS.sys [120240 2015-12-10] (Panda Security, S.L.)
R1 NNSIDS; C:\WINDOWS\system32\DRIVERS\NNSIDS.sys [120240 2015-12-10] (Panda Security, S.L.)
R1 NNSNAHSL; C:\WINDOWS\system32\DRIVERS\NNSNAHSL.sys [58616 2015-06-19] (Panda Security, S.L.)
R1 NNSPICC; C:\WINDOWS\system32\DRIVERS\NNSPICC.sys [112560 2015-12-10] (Panda Security, S.L.)
R1 NNSPIHSW; C:\WINDOWS\system32\DRIVERS\NNSPIHSW.sys [82864 2016-03-17] (Panda Security, S.L.)
R1 NNSPOP3; C:\WINDOWS\system32\DRIVERS\NNSPOP3.sys [133552 2015-12-10] (Panda Security, S.L.)
R1 NNSPROT; C:\WINDOWS\system32\DRIVERS\NNSPROT.sys [309680 2015-12-10] (Panda Security, S.L.)
R1 NNSPRV; C:\WINDOWS\system32\DRIVERS\NNSPRV.sys [179632 2016-02-18] (Panda Security, S.L.)
R1 NNSSMTP; C:\WINDOWS\system32\DRIVERS\NNSSMTP.sys [122800 2015-12-10] (Panda Security, S.L.)
R1 NNSSTRM; C:\WINDOWS\system32\DRIVERS\NNSSTRM.sys [267184 2016-02-18] (Panda Security, S.L.)
R1 NNSTLSC; C:\WINDOWS\system32\DRIVERS\NNSTLSC.sys [115632 2015-12-10] (Panda Security, S.L.)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispiwu.inf_amd64_b67dc924fff8de6d\nvlddmkm.sys [14199224 2017-01-04] (NVIDIA Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20288 2014-09-17] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [38048 2014-09-04] (NVIDIA Corporation)
R3 panda_url_filteringd; C:\Program Files\Panda Security URL Filtering\panda_url_filteringd.sys [51288 2014-03-19] (Visicom Media Inc.)
R2 PSINAflt; C:\WINDOWS\system32\DRIVERS\PSINAflt.sys [174000 2016-08-09] (Panda Security, S.L.)
R2 PSINFile; C:\WINDOWS\System32\DRIVERS\PSINFile.sys [129456 2016-08-09] (Panda Security, S.L.)
R1 PSINKNC; C:\WINDOWS\system32\DRIVERS\PSINKNC.sys [207272 2016-08-09] (Panda Security, S.L.)
R2 PSINProc; C:\WINDOWS\System32\DRIVERS\PSINProc.sys [133544 2016-08-09] (Panda Security, S.L.)
R2 PSINProt; C:\WINDOWS\system32\DRIVERS\PSINProt.sys [146864 2016-08-09] (Panda Security, S.L.)
R2 PSINReg; C:\WINDOWS\system32\DRIVERS\PSINReg.sys [117168 2016-08-09] (Panda Security, S.L.)
R3 PSKMAD; C:\WINDOWS\System32\DRIVERS\PSKMAD.sys [72112 2016-08-10] (Panda Security, S.L.)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [589824 2016-07-16] (Realtek )
S3 ssudserd; C:\WINDOWS\system32\DRIVERS\ssudserd.sys [206080 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
U3 aswbdisk; geen ImagePath
S3 dbx; system32\DRIVERS\dbx.sys [X]
U3 idsvc; geen ImagePath

==================== NetSvcs (gefilterd) ===================

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)


==================== Een Maand Aangemaakt bestanden en mappen ========

(Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)

2017-03-17 16:29 - 2017-03-17 16:32 - 00028526 _____ C:\Users\MartinSr\Downloads\FRST.txt
2017-03-17 16:29 - 2017-03-17 16:29 - 00000000 ____D C:\FRST
2017-03-17 16:28 - 2017-03-17 16:28 - 02424832 _____ (Farbar) C:\Users\MartinSr\Downloads\FRST64.exe
2017-03-17 12:01 - 2017-03-17 12:01 - 09274608 _____ (Piriform Ltd) C:\Users\MartinSr\Downloads\ccsetup528.exe
2017-03-17 11:18 - 2017-03-17 11:18 - 00000000 ____D C:\Users\MartinSr\AppData\Local\{32721EED-DEED-45D0-923D-9B25247DC576}
2017-03-17 11:15 - 2017-03-17 11:15 - 00012644 _____ C:\Users\MartinSr\Downloads\hijackthis 17-03-2017
2017-03-16 14:58 - 2017-03-16 14:58 - 00000000 ____D C:\Users\MartinSr\AppData\Local\{9AFE858F-AF38-4DF0-A2CB-067B61EC1751}
2017-03-15 13:59 - 2017-03-15 13:59 - 00000000 ____D C:\Users\MartinSr\AppData\Local\{BB02D7B2-B1A4-4A32-9CF1-D34254D779D2}
2017-03-14 15:43 - 2017-03-14 15:43 - 00000000 ____D C:\Users\MartinSr\AppData\Local\{19A38E4D-F1F8-4F97-86EC-B124934698B0}
2017-03-12 08:29 - 2017-03-12 08:29 - 00000000 ____D C:\Users\MartinSr\AppData\Local\{B858BBE5-00AD-4F5B-AAB2-D9F8D6C11FB2}
2017-03-11 15:04 - 2017-03-11 15:04 - 00042580 _____ C:\Users\MartinSr\Downloads\[limetorrents.cc]VA-Dance.Classics.Into.The.80s.1-.01.6281.61.-CD-FLAC-1991-WRE.torrent
2017-03-11 15:03 - 2017-03-11 15:11 - 00000000 ____D C:\Users\MartinSr\Downloads\Dance Classics - The Ballads (1989)
2017-03-11 15:03 - 2017-03-11 15:03 - 00018711 _____ C:\Users\MartinSr\Downloads\[limetorrents.cc]Dance.Classics.-.The.Ballads..1989..torrent
2017-03-11 15:02 - 2017-03-11 15:02 - 00031073 _____ C:\Users\MartinSr\Downloads\[limetorrents.cc]VA.-.Dance.Classics.Pop.Edition.Vol.1-12.[Bubanee].torrent
2017-03-11 15:01 - 2017-03-11 16:09 - 00000000 ____D C:\Users\MartinSr\Downloads\VA - Dance Classics
2017-03-11 15:01 - 2017-03-11 15:01 - 00089865 _____ C:\Users\MartinSr\Downloads\[limetorrents.cc]VA.-.Dance.Classics.Volume.19-20..41-56.-.2008-2013..FLAC.torrent
2017-03-11 10:45 - 2017-03-11 10:45 - 00000000 ____D C:\Users\MartinSr\AppData\Local\{15067D95-56B7-491F-BC31-2038D3DBB874}
2017-03-10 09:13 - 2017-03-10 09:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2017-03-10 09:09 - 2017-03-10 09:09 - 00000000 ____D C:\Users\MartinSr\AppData\Local\{57F2FF35-34EA-4713-8F70-79A0FCE1443D}
2017-03-09 11:21 - 2017-03-11 15:01 - 00000000 ____D C:\Users\MartinSr\AppData\LocalLow\uTorrent
2017-03-09 10:05 - 2017-03-09 10:05 - 00000000 ____D C:\Users\MartinSr\AppData\Local\{55E8FC20-D3FE-4AEB-A1BE-E6E688E8168D}
2017-03-08 09:33 - 2017-03-08 09:33 - 00000000 ____D C:\Users\MartinSr\AppData\Local\{2C83C149-2BF1-4541-8DB0-9984875B704A}
2017-03-07 09:41 - 2017-03-07 09:41 - 00000000 ____D C:\Users\MartinSr\AppData\Local\{8DCE8ABB-762A-4993-82E4-7E6C2B2DA8BB}
2017-03-06 21:50 - 2017-03-06 21:50 - 00046184 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys
2017-03-06 09:33 - 2017-03-06 09:33 - 00000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software
2017-03-06 09:29 - 2017-03-06 09:29 - 00000000 ____D C:\Users\MartinSr\AppData\Local\fontconfig
2017-03-06 09:25 - 2017-03-06 10:01 - 00000308 _____ C:\WINDOWS\Tasks\{2353E7A6-CA91-B430-59BB-22A481CCE50F}.job
2017-03-06 09:25 - 2017-03-06 09:25 - 00002848 _____ C:\WINDOWS\System32\Tasks\{2353E7A6-CA91-B430-59BB-22A481CCE50F}
2017-03-06 09:24 - 2017-03-06 10:01 - 00000000 ____D C:\ProgramData\AVAST Software
2017-03-06 09:23 - 2017-03-06 09:23 - 00001144 _____ C:\Users\MartinSr\Desktop\Format Factory.lnk
2017-03-06 09:23 - 2017-03-06 09:23 - 00000000 ____D C:\Users\MartinSr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory
2017-03-06 09:23 - 2017-03-06 09:23 - 00000000 ____D C:\Program Files (x86)\FormatFactory
2017-03-06 09:22 - 2017-03-06 09:22 - 47616432 _____ (Free Time Co., Ltd) C:\Users\MartinSr\Downloads\FFSetup.exe
2017-03-06 09:20 - 2017-03-06 09:20 - 00000000 ____D C:\Users\MartinSr\AppData\Local\{DC5513FA-E04D-42C8-A471-43C9A48E9866}
2017-03-06 08:25 - 2017-03-06 08:25 - 00000000 ____D C:\Users\MartinSr\AppData\Local\{95F94063-01B2-4ECF-A111-7C4AB6E39B55}
2017-03-06 08:21 - 2017-03-09 15:05 - 00000000 ____D C:\Users\MartinSr\Documents\G van Petersen-Krijns 13-02-2017
2017-03-06 07:50 - 2017-03-06 07:50 - 00000000 ____D C:\Users\MartinSr\AppData\Local\{0158E363-2CD0-4B1F-A9E6-589437CCDBDE}
2017-03-05 18:06 - 2017-03-05 18:07 - 99011058 _____ C:\Users\MartinSr\Downloads\Overlijden G. van Petersen-Krijns 2.wmv
2017-03-05 11:39 - 2017-03-05 11:39 - 00000000 ____D C:\Users\MartinSr\AppData\Local\{B5E91856-390B-4E68-9B80-7EE434826E00}
2017-03-04 15:37 - 2017-03-04 15:37 - 00003286 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2017-03-04 15:14 - 2017-03-04 15:14 - 00000000 ____D C:\Users\MartinSr\AppData\Local\{EF7126A0-3BAF-4F3D-A90F-9F258852DFAA}
2017-03-03 17:20 - 2017-03-03 17:22 - 918697984 _____ C:\Users\MartinSr\Downloads\Overlijden-G.-van-Petersen-Krijns-151152.vob
2017-03-03 17:15 - 2017-03-03 17:19 - 918697984 _____ C:\Users\MartinSr\Downloads\Overlijden-G.-van-Petersen-Krijns-1.vob
2017-03-03 13:14 - 2017-03-03 13:14 - 00000000 ____D C:\Users\MartinSr\AppData\Local\{608A1A87-9F51-4EC8-9B2E-486BDB9F39BE}
2017-03-02 12:16 - 2017-03-02 12:16 - 00000000 ____D C:\Users\MartinSr\AppData\Local\{80CB3297-49CE-4115-A1CD-FBC070B95A15}
2017-03-01 18:21 - 2017-03-01 18:21 - 99011058 _____ C:\Users\MartinSr\Downloads\Overlijden G. van Petersen-Krijns 1.wmv
2017-03-01 17:41 - 2017-03-01 17:41 - 00001401 _____ C:\Users\Public\Desktop\Freemake Video Converter.lnk
2017-03-01 17:41 - 2017-03-01 17:41 - 00000000 ____D C:\Users\MartinSr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2017-03-01 17:41 - 2017-03-01 17:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake
2017-03-01 17:22 - 2017-03-01 17:22 - 00647416 _____ (NCH Software) C:\Users\MartinSr\Downloads\switchsetup (1).exe
2017-03-01 17:18 - 2017-03-01 17:18 - 00637680 _____ (NCH Software) C:\Users\MartinSr\Downloads\prismpsetup.exe
2017-03-01 16:20 - 2017-03-01 16:20 - 00094053 _____ C:\Users\MartinSr\Downloads\oude_verzekeraars.pdf
2017-03-01 16:06 - 2017-03-01 16:06 - 01496584 _____ C:\Users\MartinSr\Downloads\freemake-video-converter (1).exe
2017-03-01 16:04 - 2017-03-01 16:04 - 01496584 _____ C:\Users\MartinSr\Downloads\freemake-video-converter.exe
2017-03-01 15:42 - 2017-03-01 15:42 - 01046672 _____ C:\Users\MartinSr\Downloads\video-converter-ultimate_setup_full975 (1).exe
2017-03-01 15:20 - 2017-03-01 15:20 - 00000000 ____D C:\Users\MartinSr\AppData\Local\{4E6E402D-7F95-427C-98DE-C2F9BAC82B86}
2017-02-28 12:47 - 2017-02-28 12:47 - 00000000 ____D C:\Users\MartinSr\AppData\Local\{1B719411-B4E1-4EB9-B725-C0644ECBD5AD}
2017-02-27 16:47 - 2017-02-27 16:47 - 00000000 ____D C:\Users\MartinSr\Downloads\G van Petersen-Krijns - kopie
2017-02-27 09:56 - 2017-02-27 09:56 - 00001756 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Story 3 for Windows.lnk
2017-02-27 09:56 - 2017-02-27 09:56 - 00000000 ____D C:\Program Files (x86)\Photo Story 3 for Windows
2017-02-27 09:54 - 2017-02-27 09:54 - 05271552 _____ C:\Users\MartinSr\Downloads\Pstory (2).msi
2017-02-27 09:48 - 2017-02-27 09:48 - 01073296 _____ C:\Users\MartinSr\Downloads\dsb-deluxe_setup_full965.exe
2017-02-27 09:17 - 2017-02-27 09:17 - 00000000 ____D C:\Users\MartinSr\AppData\Local\{4F71D829-655F-47CF-9BC4-CC469E22DCCD}
2017-02-26 13:26 - 2017-02-26 13:31 - 00000000 ____D C:\Users\MartinSr\Downloads\VA - The 80s Love Album (3CD, 2017)
2017-02-26 11:56 - 2017-02-26 11:56 - 00071418 _____ C:\Users\MartinSr\Downloads\12897412_313124943.pdf
2017-02-26 11:37 - 2017-02-26 11:37 - 00000000 ____D C:\Users\MartinSr\AppData\Local\{424370D6-7C28-45B3-BCD3-7863522296B9}
2017-02-25 11:49 - 2017-02-25 11:49 - 03366912 _____ C:\Users\MartinSr\Downloads\PStory (1).msi
2017-02-25 11:42 - 2017-02-25 11:42 - 03361280 _____ C:\Users\MartinSr\Downloads\PStory.msi
2017-02-25 11:35 - 2017-02-25 11:35 - 00003524 _____ C:\WINDOWS\System32\Tasks\HP Photo Creations Communicator
2017-02-25 11:33 - 2017-02-25 11:33 - 00000000 ____D C:\Users\MartinSr\AppData\Local\{6920B7A7-2F14-4CFA-AB35-8C784E25A7F2}
2017-02-24 11:28 - 2017-02-24 11:28 - 00000000 ____D C:\Users\MartinSr\AppData\Local\{BC19FD48-75FC-48F7-8C03-259ACD7AEA34}
2017-02-23 11:31 - 2017-02-23 11:31 - 00000000 ____D C:\Users\MartinSr\AppData\Local\{6E1F49E7-C5AA-4980-958E-5059C96AB4D9}
2017-02-22 13:32 - 2017-02-22 13:32 - 00000000 ____D C:\Users\MartinSr\AppData\Local\{1AAAA1FB-854C-4F95-9041-EDEAE8FD1BA7}
2017-02-21 14:48 - 2017-02-21 14:48 - 00000000 ____D C:\Users\MartinSr\AppData\Local\{53CF97B9-CC1E-4D5F-8C9E-41793C5A48D0}
2017-02-21 14:45 - 2017-02-21 14:45 - 00002225 _____ C:\Users\Public\Desktop\Google Earth.lnk
2017-02-21 14:45 - 2017-02-21 14:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
2017-02-20 15:45 - 2017-02-20 15:45 - 09261616 _____ (Piriform Ltd) C:\Users\MartinSr\Downloads\ccsetup527.exe
2017-02-20 09:36 - 2017-02-20 09:36 - 00000000 ____D C:\Users\MartinSr\AppData\Local\{FD5E367E-0AB2-455D-941C-D51F7F3F93FA}
2017-02-19 08:41 - 2017-02-19 08:41 - 00000000 ____D C:\Users\MartinSr\AppData\Local\{AF1968A4-C215-4BFF-A3FF-2282C035981E}
2017-02-18 08:48 - 2017-02-18 08:48 - 00031077 _____ C:\Users\MartinSr\Downloads\PostNl sal Febr 2017.pdf
2017-02-18 08:08 - 2017-02-18 08:08 - 00000000 ____D C:\Users\MartinSr\AppData\Local\{FE513E44-B321-4BEE-9625-C2961A6A157F}
2017-02-17 09:07 - 2017-02-17 09:07 - 00000000 ____D C:\Users\MartinSr\AppData\Local\{B05E122B-8BF5-46C3-B314-553830556660}
2017-02-16 08:44 - 2017-02-16 08:44 - 00000000 ____D C:\Users\MartinSr\AppData\Local\{32CF7699-D8F5-45B5-8C19-EDACEFCECE0E}
2017-02-15 08:47 - 2017-02-15 08:47 - 00000000 ____D C:\Users\MartinSr\AppData\Local\{B2BD6E43-C1BB-4CF6-8168-464E019BCD83}

==================== Een Maand Gewijzigd bestanden en mappen ========

(Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)

2017-03-17 16:22 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-03-17 16:22 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-03-17 16:19 - 2016-11-24 16:22 - 00000000 ____D C:\Users\MartinSr\AppData\Roaming\FileAdvisor
2017-03-17 16:15 - 2016-11-08 14:08 - 00000000 ___RD C:\Users\MartinSr\Dropbox
2017-03-17 16:11 - 2016-10-10 16:46 - 00000000 ____D C:\ProgramData\panda_url_filtering
2017-03-17 13:58 - 2016-10-10 09:29 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-03-17 13:55 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-03-17 12:03 - 2016-04-06 14:00 - 00000000 ____D C:\Users\MartinSr\AppData\Local\Packages
2017-03-17 12:02 - 2012-01-25 17:25 - 00000827 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-03-17 11:14 - 2011-05-07 09:19 - 00388608 _____ (Trend Micro Inc.) C:\Users\MartinSr\Desktop\HijackThis.exe
2017-03-16 15:02 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2017-03-14 16:35 - 2011-02-14 16:13 - 00000000 ____D C:\Users\MartinSr\AppData\Roaming\vlc
2017-03-14 16:27 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF
2017-03-12 08:32 - 2011-02-15 12:57 - 00000000 ____D C:\Users\MartinSr\AppData\Roaming\dvdcss
2017-03-11 17:03 - 2011-02-09 21:56 - 00000000 ____D C:\Users\MartinSr\AppData\Local\ElevatedDiagnostics
2017-03-11 16:22 - 2011-02-09 22:21 - 00000000 ____D C:\Users\MartinSr\AppData\Roaming\uTorrent
2017-03-11 14:33 - 2017-01-12 16:51 - 00000000 ____D C:\Users\MartinSr\Downloads\Nieuwe map
2017-03-10 09:14 - 2016-11-08 14:04 - 00000000 ____D C:\Program Files (x86)\Dropbox
2017-03-09 12:04 - 2011-02-09 22:50 - 00000000 ____D C:\Users\MartinSr\Documents\Belastingdienst
2017-03-08 16:38 - 2016-11-08 14:03 - 00000000 ____D C:\Users\MartinSr\AppData\Local\Dropbox
2017-03-07 13:23 - 2016-10-10 10:13 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-03-07 13:23 - 2016-10-10 09:32 - 00000000 ____D C:\ProgramData\NVIDIA
2017-03-07 13:22 - 2016-07-16 07:04 - 00524288 _____ C:\WINDOWS\system32\config\BBI
2017-03-07 13:20 - 2016-04-19 12:59 - 00000000 ____D C:\Users\MartinSr\AppData\Roaming\ParetoLogic
2017-03-07 13:20 - 2016-04-19 12:59 - 00000000 ____D C:\ProgramData\ParetoLogic
2017-03-07 12:57 - 2014-12-20 19:07 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-03-06 09:41 - 2017-01-22 11:42 - 00000000 ____D C:\Users\MartinSr\AppData\Local\{FC23CA7F-D88B-A6C7-B513-832F917B7FB7}
2017-03-06 09:24 - 2016-02-02 15:19 - 00000262 __RSH C:\ProgramData\ntuser.pol
2017-03-05 19:01 - 2011-02-09 14:05 - 00000000 ____D C:\ProgramData\DVD Shrink
2017-03-04 15:37 - 2016-04-06 14:06 - 00002400 _____ C:\Users\MartinSr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-03-04 15:37 - 2016-04-06 14:06 - 00000000 ___RD C:\Users\MartinSr\OneDrive
2017-03-03 16:05 - 2016-02-03 14:07 - 00000000 ____D C:\Users\MartinSr\AppData\Roaming\DVD Flick
2017-03-02 16:36 - 2016-04-06 16:58 - 00000000 ____D C:\Users\MartinSr\Documents\MVV ALCIDES
2017-03-01 17:41 - 2013-05-02 16:19 - 00000000 ____D C:\ProgramData\Freemake
2017-03-01 17:40 - 2013-05-02 16:19 - 00000000 ____D C:\Program Files (x86)\Freemake
2017-03-01 17:25 - 2014-08-24 11:00 - 00000000 ____D C:\Users\MartinSr\AppData\Roaming\NCH Software
2017-03-01 17:25 - 2014-08-24 11:00 - 00000000 ____D C:\Program Files (x86)\NCH Software
2017-03-01 17:24 - 2016-10-10 10:13 - 00000000 ____D C:\WINDOWS\System32\Tasks\NCH Software
2017-03-01 15:57 - 2016-02-17 14:56 - 00000000 ____D C:\Program Files (x86)\Wondershare
2017-03-01 15:57 - 2016-02-16 14:40 - 00000000 ____D C:\ProgramData\Wondershare
2017-03-01 15:42 - 2016-02-02 12:54 - 00000000 ____D C:\Users\Public\Documents\Wondershare
2017-02-28 17:30 - 2016-02-14 12:59 - 00000442 _____ C:\WINDOWS\Tasks\HP Photo Creations Communicator.job
2017-02-27 14:24 - 2017-02-14 10:12 - 00000000 ____D C:\Users\MartinSr\Downloads\G van Petersen-Krijns
2017-02-27 09:31 - 2013-07-20 10:40 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-02-27 09:21 - 2010-07-07 16:49 - 138020592 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-02-25 11:36 - 2016-02-14 13:00 - 00000000 ___RD C:\Users\MartinSr\Documents\RocketLifeNetwork
2017-02-25 11:36 - 2016-02-14 12:59 - 00000000 ____D C:\Users\MartinSr\AppData\Roaming\HP Photo Creations
2017-02-25 11:35 - 2016-02-14 12:59 - 00002011 _____ C:\Users\MartinSr\Desktop\HP Photo Creations.lnk
2017-02-24 11:27 - 2017-01-22 11:43 - 00000000 ____D C:\Users\MartinSr\AppData\Local\5B1CF706-5659-38CD-261A-1262DD9D5E3E
2017-02-22 13:35 - 2015-11-06 17:52 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-02-21 14:45 - 2011-02-09 20:33 - 00000000 ____D C:\Program Files (x86)\Google
2017-02-20 15:55 - 2017-02-08 17:34 - 00000000 ____D C:\Users\MartinSr\AppData\Local\CrashDumps

==================== Bestanden in de root van sommige mappen =======

2011-12-05 10:16 - 2011-12-05 10:32 - 0000215 _____ () C:\Users\MartinSr\AppData\Roaming\burnaware.ini
2011-12-16 16:29 - 2011-12-16 16:29 - 0000000 _____ () C:\Users\MartinSr\AppData\Roaming\Default.PLS
2011-04-26 16:47 - 2011-04-26 17:01 - 0001582 _____ () C:\Users\MartinSr\AppData\Roaming\dvdae.config
2017-01-23 09:12 - 2017-01-26 15:13 - 0000098 _____ () C:\Users\MartinSr\AppData\Roaming\WB.CFG
2011-02-23 16:37 - 2015-10-05 11:49 - 0004608 _____ () C:\Users\MartinSr\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-04-05 15:38 - 2014-04-05 15:38 - 0007628 _____ () C:\Users\MartinSr\AppData\Local\Resmon.ResmonCfg
2015-02-24 14:15 - 2015-02-24 14:15 - 0000000 _____ () C:\Users\MartinSr\AppData\Local\{4A8AC1C5-5586-4FC1-91BE-B665B998F467}
2011-02-11 12:20 - 2015-10-22 13:39 - 0003599 _____ () C:\ProgramData\hpzinstall.log
2011-02-28 12:40 - 2015-12-14 10:09 - 0000952 ___SH () C:\ProgramData\KGyGaAvL.sys
2011-12-04 20:49 - 2011-12-04 20:49 - 0004930 _____ () C:\ProgramData\qjaxlkio.dss

Bestanden om te verplaatsen of verwijderen:
====================
C:\ProgramData\qjaxlkio.dss
C:\Windows\Tasks\{2353E7A6-CA91-B430-59BB-22A481CCE50F}.job


==================== Bamital & volsnap ======================

(Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.)

C:\WINDOWS\system32\winlogon.exe => Bestand is getekend
C:\WINDOWS\system32\wininit.exe => Bestand is getekend
C:\WINDOWS\explorer.exe => Bestand is getekend
C:\WINDOWS\SysWOW64\explorer.exe => Bestand is getekend
C:\WINDOWS\system32\svchost.exe => Bestand is getekend
C:\WINDOWS\SysWOW64\svchost.exe => Bestand is getekend
C:\WINDOWS\system32\services.exe => Bestand is getekend
C:\WINDOWS\system32\User32.dll => Bestand is getekend
C:\WINDOWS\SysWOW64\User32.dll => Bestand is getekend
C:\WINDOWS\system32\userinit.exe => Bestand is getekend
C:\WINDOWS\SysWOW64\userinit.exe => Bestand is getekend
C:\WINDOWS\system32\rpcss.dll => Bestand is getekend
C:\WINDOWS\system32\dnsapi.dll => Bestand is getekend
C:\WINDOWS\SysWOW64\dnsapi.dll => Bestand is getekend
C:\WINDOWS\system32\Drivers\volsnap.sys => Bestand is getekend

LastRegBack: 2017-03-11 16:21

==================== Eind van FRST.txt ============================
Medion Akoya ,Windows 10 / Intel Pentium G6960 processor. AMD Radeon HD 6670 / 512 MB DDRS geheugen. 4 GB werkgeheugen. 1.5 TB harde schijf. /Microsoft Edge /Windows Live Mail/ Windows Defender / Nero DVD/CD Brander/HP ENVY 4500
MartinSr Startte dit onderwerp 20 mar 2017, 12:22 114 berichten
# AdwCleaner v6.044 - Logbestand aangemaakt 20/03/2017 op 10:52:04
# Bijgewerkt op 28/02/2017 door Malwarebytes
# Database : 2017-03-19.1 [Lokaal]
# Besturingssysteem : Windows 10 Home (X64)
# Gebruikersnaam : MartinSr - CC525380-A
# Gestart vanuit : C:\Users\MartinSr\Downloads\adwcleaner_6.044 (1).exe
# Mode: Scannen
# Ondersteuning : https://www.malwarebytes.com/support



***** [ Services ] *****

Service gevonden: panda_url_filtering


***** [ Mappen ] *****

Map gevonden: C:\Users\MartinSr\AppData\LocalLow\HPAppData
Map gevonden: C:\Users\MartinSr\AppData\Roaming\AdvertismentImages
Map gevonden: C:\Users\MartinSr\AppData\Roaming\DriverCure
Map gevonden: C:\Users\MartinSr\AppData\Roaming\ParetoLogic
Map gevonden: C:\Users\MartinSr\AppData\Roaming\RPEng
Map gevonden: C:\Users\MartinSr\AppData\Roaming\lavasoft\web companion
Map gevonden: C:\Users\MartinSr\AppData\Roaming\PARETOLOGIC
Map gevonden: C:\Program Files\Panda Security URL Filtering
Map gevonden: C:\ProgramData\ParetoLogic
Map gevonden: C:\ProgramData\lavasoft\web companion
Map gevonden: C:\ProgramData\PARETOLOGIC
Map gevonden: C:\ProgramData\Application Data\ParetoLogic
Map gevonden: C:\ProgramData\Application Data\lavasoft\web companion
Map gevonden: C:\ProgramData\Application Data\PARETOLOGIC
Map gevonden: C:\Program Files (x86)\lavasoft\web companion
Map gevonden: C:\Program Files (x86)\Common Files\freemake shared
Map gevonden: C:\extensions
Medion Akoya ,Windows 10 / Intel Pentium G6960 processor. AMD Radeon HD 6670 / 512 MB DDRS geheugen. 4 GB werkgeheugen. 1.5 TB harde schijf. /Microsoft Edge /Windows Live Mail/ Windows Defender / Nero DVD/CD Brander/HP ENVY 4500
Sony 20 mar 2017, 12:42 Boom 5.235 berichten
MartinSr,
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
Start CCleaner , Openen niet laten scannen.
Klik op Tabblad Opties
Klik op Bewaking
Verwijder al de vinkjes die daar staan.
Sluit CCleaner.
Herstart de computer.

Sony
MartinSr Startte dit onderwerp 20 mar 2017, 13:09 114 berichten
Hallo,

Er stonden geen vinkjes aan gekruist. zie voorbeeld

Afbeelding

Afwachting

MartinSr
Medion Akoya ,Windows 10 / Intel Pentium G6960 processor. AMD Radeon HD 6670 / 512 MB DDRS geheugen. 4 GB werkgeheugen. 1.5 TB harde schijf. /Microsoft Edge /Windows Live Mail/ Windows Defender / Nero DVD/CD Brander/HP ENVY 4500
lode 20 mar 2017, 14:31 1.534 berichten
MartinSr,
U hebt Adwcleaner enkel laten scannen en niets laten verwijderen !!!
1) HP Pavilion P6 2030 be/WIN 7 Home-Premium SP1 / Intel Core i5 2500-3.3GHz/ 8Gb /HD1.5Tb / Externe HD 4TB
2) HP Envy Win 11 / Intel Core I7 / 16 GB/ SSD 256 GB/ HD 1 TB
/Firefox/MS Office 2013/ OpenOffice/ LibreOffice/ Eset Smart Security Premium V17
MartinSr Startte dit onderwerp 20 mar 2017, 15:16 114 berichten
# AdwCleaner v6.044 - Logbestand aangemaakt 20/03/2017 op 14:55:30
# Bijgewerkt op 28/02/2017 door Malwarebytes
# Database : 2017-03-19.1 [Lokaal]
# Besturingssysteem : Windows 10 Home (X64)
# Gebruikersnaam : MartinSr - CC525380-A
# Gestart vanuit : C:\Users\MartinSr\Downloads\adwcleaner_6.044 (1).exe
# Mode: Verwijderen
# Ondersteuning : https://www.malwarebytes.com/support



***** [ Services ] *****



***** [ Mappen ] *****

[-] Map verwijderd: C:\Program Files\Panda Security URL Filtering


***** [ Bestanden ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Snelkoppelingen ] *****



***** [ Geplande Taken ] *****
Medion Akoya ,Windows 10 / Intel Pentium G6960 processor. AMD Radeon HD 6670 / 512 MB DDRS geheugen. 4 GB werkgeheugen. 1.5 TB harde schijf. /Microsoft Edge /Windows Live Mail/ Windows Defender / Nero DVD/CD Brander/HP ENVY 4500
abbs 20 mar 2017, 15:29 Leidschendam 1.589 berichten
Hallo,

Hoe draait de pc nu?
Groeten abbs
Afbeelding
Member of UNITE (Unified Network of Instructors and Trained Eliminators)
MartinSr Startte dit onderwerp 20 mar 2017, 16:53 114 berichten
ABBS,

PC draait weer als tevoren. Gaat nu goed.
Hartelijk dank voor de informatie etc.

Mvg

MartinSr

PS. Moet ik eens in de zoveel tijd dat programma eens draaien.
Medion Akoya ,Windows 10 / Intel Pentium G6960 processor. AMD Radeon HD 6670 / 512 MB DDRS geheugen. 4 GB werkgeheugen. 1.5 TB harde schijf. /Microsoft Edge /Windows Live Mail/ Windows Defender / Nero DVD/CD Brander/HP ENVY 4500
abbs 20 mar 2017, 16:57 Leidschendam 1.589 berichten
Hallo,

Dat is mooi, maar draai de programma's niet zomaar. (beter onder begeleiding)

Met het onderstaande tooltje ruim je o.a. alle gebruikte tools op:

Download Delfix - Alternatieve downloadlink by Xplode naar het bureaublad.

Dubbelklik op Delfix.exe om de tool te starten.
Zet nu vinkjes voor de volgende items:
  • Remove disinfection tools
Klik nu op "Run" en wacht geduldig tot de tool gereed is.
Wanneer de tool gereed is wordt er een logbestand aangemaakt. Dit hoeft je echter niet te plaatsen.
Start je pc hierna opnieuw op, mochten er nog programma's of log bestanden aanwezig zijn mag je die handmatig verwijderen.
Groeten abbs
Afbeelding
Member of UNITE (Unified Network of Instructors and Trained Eliminators)