Het herstellen naar gewone opstart is gebeurd !
Hierna volgen de twee gevraagde resultaten van FRST :
FRST
Scanresultaten van Farbar Recovery Scan Tool (FRST) (x86) Versie: 20-04-2017
Gestart door raymo (Beheerder) op DESKTOP-QO9RLJB (21-04-2017 12:35:23)
Gestart vanaf C:\Users\raymo\Documents
Geladen Profielen: raymo (Beschikbare Profielen: raymo & Rita)
Platform: Microsoft Windows 10 Home Versie 1607 (X86) Taal: Nederlands (Nederland)
Internet Explorer Versie 11 (Standaardbrowser: Edge)
Boot Modus: Normal
Handleiding voor Farbar Recovery Scan Tool:
http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processen (gefilterd) =================
(Als een item is opgenomen in de fixlist, het proces zal worden gesloten. Het bestand zal niet worden verplaatst.)
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
() C:\Program Files\Common Files\Appkeys\yytool.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.13.133.0_x86__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(HP Inc.) C:\Program Files\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.33.3\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
==================== Register (gefilterd) ====================
(Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.)
HKLM\...\Run: [HP Software Update] => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [164152 2017-01-19] (Apple Inc.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2780112 2017-01-20] (Malwarebytes)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [483840 2017-03-28] (Microsoft Corporation)
Winlogon\Notify\ScCertProp: wlnotify.dll [X]
HKU\S-1-5-21-53659956-481862063-3313251717-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [7348440 2017-03-03] (Piriform Ltd)
HKU\S-1-5-21-53659956-481862063-3313251717-1001\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [23819304 2017-03-21] (Google)
HKU\S-1-5-21-53659956-481862063-3313251717-1001\...\Run: [iCloudServices] => C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2016-11-17] (Apple Inc.)
HKU\S-1-5-21-53659956-481862063-3313251717-1001\...\Run: [iCloudDrive] => C:\Program Files\Common Files\Apple\Internet Services\iCloudDrive.exe [110392 2016-11-17] (Apple Inc.)
HKU\S-1-5-21-53659956-481862063-3313251717-1001\...\Run: [ApplePhotoStreams] => C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [67896 2016-11-17] (Apple Inc.)
HKU\S-1-5-21-53659956-481862063-3313251717-1001\...\Run: [antMR] => C:\Program Files\Ant Download Manager\antMR.exe [132608 2016-09-25] (AntGROUP)
HKU\S-1-5-21-53659956-481862063-3313251717-1001\...\Run: [AntDM] => C:\Program Files\Ant Download Manager\AntDM.exe [6358528 2016-11-12] (AntGROUP)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync32.dll [2017-03-21] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync32.dll [2017-03-21] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync32.dll [2017-03-21] (Google)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2015-12-01]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\raymo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Schermopname en Snel starten.lnk [2015-12-01]
ShortcutTarget: OneNote 2007 Schermopname en Snel starten.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
==================== Internet (gefilterd) ====================
(Als een item is opgenomen in de fixlist, als het een registry item is wordt verwijderd of hersteld naar de standaard.)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 195.130.130.3 195.130.131.3
Tcpip\..\Interfaces\{10701864-7d4a-407f-965a-cf8df198ead5}: [DhcpNameServer] 195.130.130.3 195.130.131.3
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://
www.google.com
HKU\S-1-5-21-53659956-481862063-3313251717-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://
www.hbvl.be/
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_121\bin\ssv.dll [2017-03-07] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-03-07] (Oracle Corporation)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation)
Edge:
======
Edge HomeButtonPage: HKU\S-1-5-21-53659956-481862063-3313251717-1001 -> hxxp://
www.hbvl.be/
Edge Extension: (Adblock Plus) -> 10_EyeoGmbHAdblockPlus_d55gg7py3s0m0 => C:\Program Files\WindowsApps\EyeoGmbH.AdblockPlus_0.9.9.0_neutral__d55gg7py3s0m0 [2017-04-21]
Edge Extension: (AdBlock) -> EdgeExtension_BetaFishAdBlock_c1wakc4j0nefm => C:\Program Files\WindowsApps\BetaFish.AdBlock_1.11.0.0_neutral__c1wakc4j0nefm [2017-04-21]
Edge Extension: (Translator For Microsoft Edge) -> MicrosoftTranslate_MicrosoftTranslatorforMicrosoftEdge_8wekyb3d8bbwe => C:\Program Files\WindowsApps\Microsoft.TranslatorforMicrosoftEdge_0.91.16.0_neutral__8wekyb3d8bbwe [2017-04-21]
FireFox:
========
FF DefaultProfile: pn82tto2.default
FF ProfilePath: C:\Users\raymo\AppData\Roaming\Mozilla\Firefox\Profiles\pn82tto2.default [2017-04-20]
FF NewTab: Mozilla\Firefox\Profiles\pn82tto2.default -> about:newtab
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\pn82tto2.default -> Google
FF DefaultSearchUrl: Mozilla\Firefox\Profiles\pn82tto2.default -> hxxps://
www.google.com/search?bcutc=sp-006
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\pn82tto2.default -> Google
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\pn82tto2.default -> Google
FF Homepage: Mozilla\Firefox\Profiles\pn82tto2.default -> hxxps://
www.google.com/?bcutc=sp-006
FF Keyword.URL: Mozilla\Firefox\Profiles\pn82tto2.default -> hxxps://
www.google.com/search?bcutc=sp-006
FF Extension: (Firefox Hotfix) - C:\Users\raymo\AppData\Roaming\Mozilla\Firefox\Profiles\pn82tto2.default\Extensions\
firefox-hotfix@mozilla.org.xpi [2017-03-28]
FF Extension: (Disable Prefetch) - C:\Users\raymo\AppData\Roaming\Mozilla\Firefox\Profiles\pn82tto2.default\features\{62b473b8-5a33-4db1-8e51-34ff59461abe}\
disable-prefetch@mozilla.org.xpi [2017-04-10]
FF SearchPlugin: C:\Users\raymo\AppData\Roaming\Mozilla\Firefox\Profiles\pn82tto2.default\searchplugins\google-avast.xml [2016-12-22]
FF Extension: (Belgium eID) - C:\Program Files\Mozilla Firefox\extensions\
belgiumeid@eid.belgium.be [2016-07-25] [niet getekend]
FF Extension: (Site Deployment Checker) - C:\Program Files\Mozilla Firefox\browser\features\
deployment-checker@mozilla.org.xpi [2017-04-01] [niet getekend]
FF HKLM\...\Firefox\Extensions: [
belgiumeid@eid.belgium.be] - C:\Program Files\Mozilla Firefox\extensions\
belgiumeid@eid.belgium.be
FF HKU\S-1-5-21-53659956-481862063-3313251717-1001\...\Firefox\Extensions: [
antgroup@antdownloadmanager.com] - C:\Program Files\Ant Download Manager\antFF\antFF.xpi
FF Extension: (AntFF) - C:\Program Files\Ant Download Manager\antFF\antFF.xpi [2016-02-26]
FF HKU\S-1-5-21-53659956-481862063-3313251717-1001\...\SeaMonkey\Extensions: [
antgroup@antdownloadmanager.com] - C:\Program Files\Ant Download Manager\antFF\antFF.xpi
FF Plugin: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-03-07] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-03-07] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50906.0\npctrl.dll [2017-03-09] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.3\npGoogleUpdate3.dll [2017-04-11] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.3\npGoogleUpdate3.dll [2017-04-11] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems Inc.)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\itms.js [2017-01-03]
Chrome:
=======
CHR Profile: C:\Users\raymo\AppData\Local\Google\Chrome\User Data\Default [2017-04-17]
CHR Extension: (Google Documenten) - C:\Users\raymo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-07-05]
CHR Extension: (Google Drive) - C:\Users\raymo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-07-05]
CHR Extension: (YouTube) - C:\Users\raymo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-07-05]
CHR Extension: (Adobe Acrobat) - C:\Users\raymo\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-03-08]
CHR Extension: (Avast SafePrice) - C:\Users\raymo\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2017-04-10]
CHR Extension: (Offline Documenten) - C:\Users\raymo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-06-16]
CHR Extension: (Avast Online Security) - C:\Users\raymo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-04-10]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\raymo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2016-07-05]
CHR Extension: (Betalingen via Chrome Web Store) - C:\Users\raymo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-04-10]
CHR Extension: (Gmail) - C:\Users\raymo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-07-05]
CHR Extension: (Chrome Media Router) - C:\Users\raymo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-04-10]
CHR HKLM\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-53659956-481862063-3313251717-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efglbgfnmenhnnflfpbnbldgmldnmifb] - C:\Program Files\Ant Download Manager\antCH\antCH.crx [2016-12-05]
CHR HKU\S-1-5-21-53659956-481862063-3313251717-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
==================== Services (gefilterd) ====================
(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [35432 2016-12-21] (Dropbox, Inc.)
R2 HPSLPSVC; C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL [696320 2011-08-18] (Hewlett-Packard Co.) [Bestand niet getekend]
R2 HPSupportSolutionsFrameworkService; C:\Program Files\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [31776 2016-12-07] (HP Inc.)
R2 Leawo_service; C:\Program Files\Common Files\Appkeys\yytool.exe [942576 2016-01-22] ()
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [3303888 2017-01-20] (Malwarebytes)
R2 Net Driver HPZ12; C:\WINDOWS\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [Bestand niet getekend]
R2 Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [Bestand niet getekend]
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [271496 2017-03-28] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [84928 2017-03-28] (Microsoft Corporation)
===================== Drivers (gefilterd) ======================
(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)
S3 cxbu0wdm; C:\WINDOWS\system32\DRIVERS\cxbu0wdm.sys [135320 2015-09-08] (HID Global Corporation)
S3 dot4; C:\WINDOWS\system32\DRIVERS\Dot4.sys [137632 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\WINDOWS\System32\drivers\Dot4Prt.sys [22432 2012-10-19] (Windows (R) Win 7 DDK provider)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae.sys [59904 2017-03-22] ()
R2 MBAMChameleon; C:\WINDOWS\system32\drivers\MBAMChameleon.sys [161216 2017-04-14] (Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\drivers\mbam.sys [39360 2017-04-21] (Malwarebytes)
R0 MBAMSwissArmy; C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys [220088 2017-04-21] (Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\drivers\mwac.sys [73664 2017-04-21] (Malwarebytes)
S3 MDA_NTDRV; C:\WINDOWS\system32\MDA_NTDRV.sys [18136 2013-02-25] ()
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [62976 2016-07-16] ()
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [37912 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [244576 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [100192 2016-07-16] (Microsoft Corporation)
R3 WUDFWpdMtp; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [161280 2016-07-16] (Microsoft Corporation)
S3 dbx; system32\DRIVERS\dbx.sys [X]
==================== NetSvcs (gefilterd) ===================
(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)
==================== Een Maand Gemaakt bestanden en mappen ========
(Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)
2017-04-21 12:35 - 2017-04-21 12:36 - 00016340 _____ C:\Users\raymo\Documents\FRST.txt
2017-04-21 12:32 - 2017-04-21 12:35 - 00000000 ____D C:\FRST
2017-04-21 12:32 - 2017-04-21 12:32 - 01766912 _____ (Farbar) C:\Users\raymo\Documents\FRST.exe
2017-04-21 12:31 - 2017-04-21 12:31 - 01766912 _____ (Farbar) C:\Users\raymo\Downloads\FRST.exe
2017-04-21 11:45 - 2017-04-21 11:45 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2017-04-20 14:35 - 2017-04-20 14:35 - 08553032 _____ (AVAST Software) C:\Users\raymo\Downloads\avastclear.exe
2017-04-20 12:07 - 2017-04-20 12:08 - 00000000 ____D C:\Users\raymo\Documents\SONY-VERHAEGEN
2017-04-19 19:47 - 2017-04-19 19:47 - 00000962 _____ C:\Users\Public\Desktop\Speccy.lnk
2017-04-19 19:47 - 2017-04-19 19:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy
2017-04-19 19:47 - 2017-04-19 19:47 - 00000000 ____D C:\Program Files\Speccy
2017-04-19 19:46 - 2017-04-19 19:46 - 06293184 _____ (Piriform Ltd) C:\Users\raymo\Downloads\spsetup130.exe
2017-04-19 16:39 - 2017-04-20 12:11 - 00000352 _____ C:\WINDOWS\Tasks\HPCeeScheduleForraymo.job
2017-04-17 08:36 - 2017-04-17 08:36 - 00000416 _____ C:\Users\raymo\Downloads\take_ownership.zip
2017-04-16 17:59 - 2017-04-16 17:59 - 00000000 ___HD C:\$SysReset
2017-04-14 20:06 - 2017-04-14 20:06 - 04089296 _____ C:\Users\raymo\Downloads\adwcleaner_6.045.exe
2017-04-14 19:50 - 2017-04-14 19:50 - 00161216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2017-04-14 19:49 - 2017-04-21 12:21 - 00220088 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-04-14 19:49 - 2017-04-21 12:21 - 00073664 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-04-14 19:49 - 2017-04-21 12:21 - 00039360 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-04-14 19:49 - 2017-04-21 09:24 - 00096704 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2017-04-14 19:49 - 2017-04-14 19:49 - 00002057 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-04-14 19:49 - 2017-04-14 19:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-04-14 19:49 - 2017-04-14 19:49 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-04-14 19:49 - 2017-04-14 19:49 - 00000000 ____D C:\Program Files\Malwarebytes
2017-04-14 19:49 - 2017-03-22 11:02 - 00059904 _____ C:\WINDOWS\system32\Drivers\mbae.sys
2017-04-14 19:48 - 2017-04-14 19:49 - 60107896 _____ (Malwarebytes ) C:\Users\raymo\Downloads\mb3-setup-consumer-3.0.6.1469-10103.exe
2017-04-14 18:41 - 2017-04-21 12:20 - 00000000 ____D C:\WINDOWS\pss
2017-04-14 09:16 - 2017-04-14 09:16 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-04-12 07:02 - 2017-03-28 13:11 - 00389330 __RSH C:\bootmgr
2017-04-12 07:02 - 2016-07-16 10:25 - 00000001 ___SH C:\BOOTNXT
2017-04-11 21:09 - 2017-03-28 08:20 - 01725136 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-04-11 21:09 - 2017-03-28 08:19 - 00601712 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2017-04-11 21:09 - 2017-03-28 08:13 - 00950624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2017-04-11 21:09 - 2017-03-28 08:05 - 01504056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2017-04-11 21:09 - 2017-03-28 08:04 - 05721808 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-04-11 21:09 - 2017-03-28 08:04 - 01431232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2017-04-11 21:09 - 2017-03-28 08:04 - 00861024 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2017-04-11 21:09 - 2017-03-28 07:59 - 06667520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-04-11 21:09 - 2017-03-28 07:59 - 04023008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2017-04-11 21:09 - 2017-03-28 07:59 - 00080224 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2017-04-11 21:09 - 2017-03-28 07:58 - 20967840 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-04-11 21:09 - 2017-03-28 07:58 - 01851688 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-04-11 21:09 - 2017-03-28 07:58 - 01360464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2017-04-11 21:09 - 2017-03-28 07:58 - 01344448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2017-04-11 21:09 - 2017-03-28 07:58 - 01277856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-04-11 21:09 - 2017-03-28 07:58 - 01202936 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2017-04-11 21:09 - 2017-03-28 07:58 - 00981888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2017-04-11 21:09 - 2017-03-28 07:58 - 00961192 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2017-04-11 21:09 - 2017-03-28 07:58 - 00240992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2017-04-11 21:09 - 2017-03-28 07:52 - 01966944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2017-04-11 21:09 - 2017-03-28 07:45 - 00281088 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2017-04-11 21:09 - 2017-03-28 07:42 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2017-04-11 21:09 - 2017-03-28 07:41 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
2017-04-11 21:09 - 2017-03-28 07:40 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExSMime.dll
2017-04-11 21:09 - 2017-03-28 07:40 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicDisplay.sys
2017-04-11 21:09 - 2017-03-28 07:40 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2017-04-11 21:09 - 2017-03-28 07:39 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2017-04-11 21:09 - 2017-03-28 07:39 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpRelayTransport.dll
2017-04-11 21:09 - 2017-03-28 07:38 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2017-04-11 21:09 - 2017-03-28 07:38 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2017-04-11 21:09 - 2017-03-28 07:37 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdm.tsp
2017-04-11 21:09 - 2017-03-28 07:37 - 00177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Diagnostics.dll
2017-04-11 21:09 - 2017-03-28 07:36 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-04-11 21:09 - 2017-03-28 07:35 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.XboxLive.Storage.dll
2017-04-11 21:09 - 2017-03-28 07:35 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-04-11 21:09 - 2017-03-28 07:35 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentActivation.dll
2017-04-11 21:09 - 2017-03-28 07:35 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2017-04-11 21:09 - 2017-03-28 07:34 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2017-04-11 21:09 - 2017-03-28 07:34 - 00299520 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataAccountApis.dll
2017-04-11 21:09 - 2017-03-28 07:34 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
2017-04-11 21:09 - 2017-03-28 07:33 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2017-04-11 21:09 - 2017-03-28 07:33 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2017-04-11 21:09 - 2017-03-28 07:32 - 01243136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.FaceAnalysis.dll
2017-04-11 21:09 - 2017-03-28 07:32 - 00426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Wallet.dll
2017-04-11 21:09 - 2017-03-28 07:32 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-04-11 21:09 - 2017-03-28 07:32 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-04-11 21:09 - 2017-03-28 07:32 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultcli.dll
2017-04-11 21:09 - 2017-03-28 07:32 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Identity.Provider.dll
2017-04-11 21:09 - 2017-03-28 07:32 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Scanners.dll
2017-04-11 21:09 - 2017-03-28 07:31 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-04-11 21:09 - 2017-03-28 07:31 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
2017-04-11 21:09 - 2017-03-28 07:31 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintDialogs3D.dll
2017-04-11 21:09 - 2017-03-28 07:30 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebcamUi.dll
2017-04-11 21:09 - 2017-03-28 07:30 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2017-04-11 21:09 - 2017-03-28 07:29 - 00747520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Ocr.dll
2017-04-11 21:09 - 2017-03-28 07:29 - 00529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2017-04-11 21:09 - 2017-03-28 07:29 - 00238080 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll
2017-04-11 21:09 - 2017-03-28 07:25 - 18364928 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-04-11 21:09 - 2017-03-28 07:25 - 02333184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2017-04-11 21:09 - 2017-03-28 07:24 - 19416576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-04-11 21:09 - 2017-03-28 07:24 - 04614656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-04-11 21:09 - 2017-03-28 07:24 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-04-11 21:09 - 2017-03-28 07:23 - 00691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2017-04-11 21:09 - 2017-03-28 07:23 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2017-04-11 21:09 - 2017-03-28 07:21 - 01077760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Editing.dll
2017-04-11 21:09 - 2017-03-28 07:20 - 03307008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2017-04-11 21:09 - 2017-03-28 07:19 - 00713216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2017-04-11 21:09 - 2017-03-28 07:18 - 12181504 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-04-11 21:09 - 2017-03-28 07:18 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-04-11 21:09 - 2017-03-28 07:17 - 06109696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2017-04-11 21:09 - 2017-03-28 07:17 - 00895488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2017-04-11 21:09 - 2017-03-28 07:16 - 01221120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2017-04-11 21:09 - 2017-03-28 07:15 - 01700864 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2017-04-11 21:09 - 2017-03-28 07:14 - 07468544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2017-04-11 21:09 - 2017-03-28 07:14 - 00641024 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2017-04-11 21:09 - 2017-03-28 07:13 - 06045184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-04-11 21:09 - 2017-03-28 07:13 - 02138112 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2017-04-11 21:09 - 2017-03-28 07:13 - 01656320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Perception.dll
2017-04-11 21:09 - 2017-03-28 07:13 - 01486336 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2017-04-11 21:09 - 2017-03-28 07:12 - 02682880 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll
2017-04-11 21:09 - 2017-03-28 07:12 - 01509376 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2017-04-11 21:09 - 2017-03-28 07:12 - 01004544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2017-04-11 21:09 - 2017-03-28 07:12 - 00941568 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2017-04-11 21:09 - 2017-03-28 07:12 - 00654336 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2017-04-11 21:09 - 2017-03-28 07:12 - 00620544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2017-04-11 21:09 - 2017-03-28 07:11 - 03596288 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2017-04-11 21:09 - 2017-03-28 07:11 - 01887232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-04-11 21:09 - 2017-03-28 07:09 - 03106304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2017-04-11 21:09 - 2017-03-28 07:08 - 00783360 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2017-04-11 21:09 - 2017-03-28 07:08 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\RADCUI.dll
2017-04-11 21:08 - 2017-03-28 09:10 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-04-11 21:08 - 2017-03-28 09:10 - 00315744 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2017-04-11 21:08 - 2017-03-28 08:59 - 00448864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2017-04-11 21:08 - 2017-03-28 08:21 - 00890984 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2017-04-11 21:08 - 2017-03-28 08:21 - 00167848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2017-04-11 21:08 - 2017-03-28 08:19 - 05999968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-04-11 21:08 - 2017-03-28 08:15 - 02048496 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2017-04-11 21:08 - 2017-03-28 08:14 - 00583136 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-04-11 21:08 - 2017-03-28 08:07 - 00263472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2017-04-11 21:08 - 2017-03-28 08:05 - 01896800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-04-11 21:08 - 2017-03-28 08:05 - 00342880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2017-04-11 21:08 - 2017-03-28 08:04 - 02262776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-04-11 21:08 - 2017-03-28 08:04 - 00975744 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2017-04-11 21:08 - 2017-03-28 08:04 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostUser.dll
2017-04-11 21:08 - 2017-03-28 08:02 - 01980768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2017-04-11 21:08 - 2017-03-28 08:02 - 00846560 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2017-04-11 21:08 - 2017-03-28 08:02 - 00576408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2017-04-11 21:08 - 2017-03-28 07:58 - 00198496 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2017-04-11 21:08 - 2017-03-28 07:58 - 00125792 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostBroker.dll
2017-04-11 21:08 - 2017-03-28 07:53 - 01412128 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2017-04-11 21:08 - 2017-03-28 07:53 - 00545944 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2017-04-11 21:08 - 2017-03-28 07:52 - 00306800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2017-04-11 21:08 - 2017-03-28 07:48 - 05685760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-04-11 21:08 - 2017-03-28 07:42 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2017-04-11 21:08 - 2017-03-28 07:41 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
2017-04-11 21:08 - 2017-03-28 07:40 - 00037376 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2017-04-11 21:08 - 2017-03-28 07:39 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafpos.dll
2017-04-11 21:08 - 2017-03-28 07:39 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Radios.dll
2017-04-11 21:08 - 2017-03-28 07:39 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2017-04-11 21:08 - 2017-03-28 07:39 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Authentication.dll
2017-04-11 21:08 - 2017-03-28 07:39 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerUI.dll
2017-04-11 21:08 - 2017-03-28 07:38 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2017-04-11 21:08 - 2017-03-28 07:38 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.dll
2017-04-11 21:08 - 2017-03-28 07:37 - 00215552 _____ (Microsoft Corporation) C:\WINDOWS\system32\apds.dll
2017-04-11 21:08 - 2017-03-28 07:37 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2017-04-11 21:08 - 2017-03-28 07:37 - 00123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.HostName.dll
2017-04-11 21:08 - 2017-03-28 07:36 - 00330752 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-04-11 21:08 - 2017-03-28 07:36 - 00136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinRtTracing.dll
2017-04-11 21:08 - 2017-03-28 07:36 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll
2017-04-11 21:08 - 2017-03-28 07:36 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2017-04-11 21:08 - 2017-03-28 07:36 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.UserDeviceAssociation.dll
2017-04-11 21:08 - 2017-03-28 07:35 - 00505856 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2017-04-11 21:08 - 2017-03-28 07:35 - 00392192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Input.dll
2017-04-11 21:08 - 2017-03-28 07:35 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.LowLevel.dll
2017-04-11 21:08 - 2017-03-28 07:35 - 00242688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Dxpserver.exe
2017-04-11 21:08 - 2017-03-28 07:35 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2017-04-11 21:08 - 2017-03-28 07:35 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinDataModelServer.dll
2017-04-11 21:08 - 2017-03-28 07:35 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Flights.dll
2017-04-11 21:08 - 2017-03-28 07:35 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.SyncEngine.dll
2017-04-11 21:08 - 2017-03-28 07:35 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2017-04-11 21:08 - 2017-03-28 07:35 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2017-04-11 21:08 - 2017-03-28 07:35 - 00142336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFi.dll
2017-04-11 21:08 - 2017-03-28 07:35 - 00113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Lights.dll
2017-04-11 21:08 - 2017-03-28 07:34 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.Phone.dll
2017-04-11 21:08 - 2017-03-28 07:34 - 00237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll
2017-04-11 21:08 - 2017-03-28 07:34 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2017-04-11 21:08 - 2017-03-28 07:34 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBroker.dll
2017-04-11 21:08 - 2017-03-28 07:34 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Core.dll
2017-04-11 21:08 - 2017-03-28 07:33 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
2017-04-11 21:08 - 2017-03-28 07:33 - 00609280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll
2017-04-11 21:08 - 2017-03-28 07:33 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll
2017-04-11 21:08 - 2017-03-28 07:32 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.dll
2017-04-11 21:08 - 2017-03-28 07:32 - 00386048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll
2017-04-11 21:08 - 2017-03-28 07:32 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2017-04-11 21:08 - 2017-03-28 07:32 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleacc.dll
2017-04-11 21:08 - 2017-03-28 07:32 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2017-04-11 21:08 - 2017-03-28 07:32 - 00298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2017-04-11 21:08 - 2017-03-28 07:32 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2017-04-11 21:08 - 2017-03-28 07:32 - 00271360 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2017-04-11 21:08 - 2017-03-28 07:32 - 00202752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2017-04-11 21:08 - 2017-03-28 07:32 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
2017-04-11 21:08 - 2017-03-28 07:31 - 00728064 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-04-11 21:08 - 2017-03-28 07:31 - 00431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
2017-04-11 21:08 - 2017-03-28 07:31 - 00390656 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
2017-04-11 21:08 - 2017-03-28 07:31 - 00332800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2017-04-11 21:08 - 2017-03-28 07:31 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2017-04-11 21:08 - 2017-03-28 07:31 - 00188416 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-04-11 21:08 - 2017-03-28 07:30 - 00816640 _____ (Microsoft Corporation) C:\WINDOWS\system32\NaturalLanguage6.dll
2017-04-11 21:08 - 2017-03-28 07:30 - 00787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\sbe.dll
2017-04-11 21:08 - 2017-03-28 07:30 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2017-04-11 21:08 - 2017-03-28 07:30 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2017-04-11 21:08 - 2017-03-28 07:30 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll
2017-04-11 21:08 - 2017-03-28 07:29 - 00314368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll
2017-04-11 21:08 - 2017-03-28 07:29 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.dll
2017-04-11 21:08 - 2017-03-28 07:29 - 00258048 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2017-04-11 21:08 - 2017-03-28 07:28 - 01110016 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2017-04-11 21:08 - 2017-03-28 07:28 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2017-04-11 21:08 - 2017-03-28 07:28 - 00661504 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2017-04-11 21:08 - 2017-03-28 07:28 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2017-04-11 21:08 - 2017-03-28 07:28 - 00500224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.dll
2017-04-11 21:08 - 2017-03-28 07:28 - 00425472 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-04-11 21:08 - 2017-03-28 07:27 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\CryptoWinRT.dll
2017-04-11 21:08 - 2017-03-28 07:26 - 01534464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll
2017-04-11 21:08 - 2017-03-28 07:26 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-04-11 21:08 - 2017-03-28 07:25 - 01196544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2017-04-11 21:08 - 2017-03-28 07:25 - 00653312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll
2017-04-11 21:08 - 2017-03-28 07:24 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2017-04-11 21:08 - 2017-03-28 07:24 - 00901120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2017-04-11 21:08 - 2017-03-28 07:24 - 00884224 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe
2017-04-11 21:08 - 2017-03-28 07:24 - 00675840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2017-04-11 21:08 - 2017-03-28 07:23 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-04-11 21:08 - 2017-03-28 07:23 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-04-11 21:08 - 2017-03-28 07:23 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2017-04-11 21:08 - 2017-03-28 07:22 - 01284096 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtctm.dll
2017-04-11 21:08 - 2017-03-28 07:22 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2017-04-11 21:08 - 2017-03-28 07:20 - 00795648 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastReceiver.dll
2017-04-11 21:08 - 2017-03-28 07:20 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmjpegdec.dll
2017-04-11 21:08 - 2017-03-28 07:19 - 00746496 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcprx.dll
2017-04-11 21:08 - 2017-03-28 07:19 - 00343040 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2017-04-11 21:08 - 2017-03-28 07:19 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\dlnashext.dll
2017-04-11 21:08 - 2017-03-28 07:19 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\flvprophandler.dll
2017-04-11 21:08 - 2017-03-28 07:19 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialclient.dll
2017-04-11 21:08 - 2017-03-28 07:18 - 01406976 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll
2017-04-11 21:08 - 2017-03-28 07:17 - 03774464 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-04-11 21:08 - 2017-03-28 07:17 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\olepro32.dll
2017-04-11 21:08 - 2017-03-28 07:16 - 03198464 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2017-04-11 21:08 - 2017-03-28 07:16 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\ErrorDetails.dll
2017-04-11 21:08 - 2017-03-28 07:15 - 01247232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2017-04-11 21:08 - 2017-03-28 07:14 - 00400384 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2017-04-11 21:08 - 2017-03-28 07:14 - 00357376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Geolocation.dll
2017-04-11 21:08 - 2017-03-28 07:14 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Devices.dll
2017-04-11 21:08 - 2017-03-28 07:13 - 01232384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Maps.dll
2017-04-11 21:08 - 2017-03-28 07:13 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2017-04-11 21:08 - 2017-03-28 07:13 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
2017-04-11 21:08 - 2017-03-28 07:12 - 02026496 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2017-04-11 21:08 - 2017-03-28 07:12 - 01235968 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-04-11 21:08 - 2017-03-28 07:12 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll
2017-04-11 21:08 - 2017-03-28 07:12 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-04-11 21:08 - 2017-03-28 07:12 - 00862208 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2017-04-11 21:08 - 2017-03-28 07:12 - 00827904 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2017-04-11 21:08 - 2017-03-28 07:12 - 00691200 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2017-04-11 21:08 - 2017-03-28 07:12 - 00598528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2017-04-11 21:08 - 2017-03-28 07:12 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
2017-04-11 21:08 - 2017-03-28 07:12 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2017-04-11 21:08 - 2017-03-28 07:12 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Midi.dll
2017-04-11 21:08 - 2017-03-28 07:11 - 02994176 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-04-11 21:08 - 2017-03-28 07:11 - 02646528 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2017-04-11 21:08 - 2017-03-28 07:11 - 01600000 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-04-11 21:08 - 2017-03-28 07:11 - 01170944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Phone.dll
2017-04-11 21:08 - 2017-03-28 07:11 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2017-04-11 21:08 - 2017-03-28 07:10 - 02483200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-04-11 21:08 - 2017-03-28 07:09 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\FontProvider.dll
2017-04-11 21:08 - 2017-03-28 07:08 - 01564160 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2017-04-11 21:08 - 2017-03-18 19:28 - 01384704 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-04-11 21:08 - 2017-03-18 19:02 - 00790528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-04-11 21:08 - 2017-03-18 18:59 - 01378304 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-04-11 21:08 - 2017-03-18 18:45 - 01949696 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-04-11 20:23 - 2017-04-01 20:52 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2017-04-11 20:23 - 2017-04-01 20:52 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2017-04-11 10:33 - 2017-04-12 09:21 - 00000000 ____D C:\Users\raymo\Documents\RITA
2017-04-09 20:06 - 2017-04-10 18:24 - 00000000 ____D C:\Users\raymo\Documents\TEKSTEN
2017-04-03 12:28 - 2017-04-16 13:32 - 00000000 ____D C:\Users\raymo\Documents\BELLEKES
2017-04-01 09:06 - 2017-04-19 13:51 - 00000000 ____D C:\Users\raymo\Documents\FAMILIEFEEST
2017-04-01 09:04 - 2017-04-16 13:20 - 00000000 ____D C:\Users\raymo\Documents\ELS
2017-03-26 18:38 - 2017-03-26 18:45 - 00000000 ____D C:\Users\raymo\Documents\ONTBIJT
==================== Een Maand Gewijzigd bestanden en mappen ========
(Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)
2017-04-21 12:25 - 2016-07-16 19:20 - 02174694 _____ C:\WINDOWS\system32\perfh013.dat
2017-04-21 12:25 - 2016-07-16 19:20 - 00607824 _____ C:\WINDOWS\system32\perfc013.dat
2017-04-21 12:25 - 2015-11-30 18:32 - 04800390 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-04-21 12:21 - 2016-08-10 12:12 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-04-21 12:20 - 2016-07-16 04:22 - 00524288 _____ C:\WINDOWS\system32\config\BBI
2017-04-21 11:45 - 2016-08-10 11:59 - 00000000 ____D C:\Users\raymo
2017-04-21 11:45 - 2016-08-10 11:56 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-04-21 11:23 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\registration
2017-04-21 09:07 - 2016-07-16 10:29 - 00000000 ___HD C:\Program Files\WindowsApps
2017-04-21 09:07 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-04-20 18:05 - 2016-09-01 16:56 - 00000000 ____D C:\Users\raymo\Documents\MIJN SCANS
2017-04-20 14:45 - 2015-11-30 18:43 - 00430248 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2017-04-20 14:41 - 2017-02-01 09:36 - 00000000 ____D C:\Program Files\Common Files\AV
2017-04-20 14:41 - 2015-12-01 11:33 - 00000000 ____D C:\ProgramData\AVAST Software
2017-04-16 17:19 - 2016-12-20 10:14 - 00000000 ____D C:\Users\raymo\AppData\LocalLow\Mozilla
2017-04-15 13:43 - 2016-07-16 10:28 - 00000000 ____D C:\WINDOWS\INF
2017-04-14 20:52 - 2016-03-21 17:00 - 00000000 ____D C:\AdwCleaner
2017-04-14 19:57 - 2015-12-01 10:15 - 00000000 ____D C:\Program Files\FormatFactory
2017-04-14 12:21 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\system32\NDF
2017-04-12 13:24 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\rescache
2017-04-12 07:03 - 2015-09-10 06:16 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-04-12 07:01 - 2016-08-10 11:56 - 00343576 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-04-12 07:01 - 2016-05-01 15:38 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2017-04-11 21:31 - 2016-07-16 10:29 - 00000000 ___SD C:\WINDOWS\system32\F12
2017-04-11 21:31 - 2016-07-16 10:29 - 00000000 ___RD C:\WINDOWS\PrintDialog
2017-04-11 21:31 - 2016-07-16 10:29 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-04-11 21:31 - 2016-07-16 10:29 - 00000000 ___RD C:\Program Files\Windows Defender
2017-04-11 21:31 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\system32\setup
2017-04-11 21:31 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\system32\appraiser
2017-04-11 21:31 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-04-11 21:31 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\Provisioning
2017-04-11 21:31 - 2016-07-16 10:29 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2017-04-11 21:15 - 2016-07-16 10:19 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-04-11 20:22 - 2015-11-30 18:41 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-04-11 20:19 - 2016-05-01 15:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-04-11 20:19 - 2015-11-30 18:41 - 145733648 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-04-10 19:50 - 2015-12-01 16:18 - 00000000 ____D C:\Users\raymo\AppData\Roaming\vlc
2017-04-10 11:08 - 2016-08-31 08:09 - 00000000 ____D C:\Users\raymo\Documents\OKRA
2017-04-05 08:58 - 2015-11-30 21:52 - 00000000 ____D C:\Users\raymo\Documents\ENECO
2017-04-04 22:13 - 2015-11-30 21:52 - 00000000 ____D C:\Users\raymo\Documents\GEDICHTEN EN TEKSTEN
2017-04-04 09:15 - 2016-12-20 10:20 - 00002200 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-04-04 09:15 - 2016-12-20 10:20 - 00002188 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-04-03 19:25 - 2017-01-27 09:38 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2017-04-03 19:25 - 2016-07-25 20:22 - 00000000 ____D C:\Program Files\Mozilla Firefox
2017-03-30 20:10 - 2016-02-04 19:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2017-03-24 09:50 - 2015-11-30 21:52 - 00000000 ____D C:\Users\raymo\Documents\TELENET
2017-03-23 13:43 - 2017-03-21 12:57 - 00007680 _____ C:\Users\raymo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
==================== Bestanden in de root van sommige mappen =======
2017-03-21 12:57 - 2017-03-23 13:43 - 0007680 _____ () C:\Users\raymo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-10-22 16:58 - 2016-10-22 16:58 - 0000854 _____ () C:\Users\raymo\AppData\Local\recently-used.xbel
2015-12-01 09:12 - 2016-01-04 19:58 - 0036146 _____ () C:\ProgramData\hpzinstall.log
==================== Bamital & volsnap ======================
(Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.)
C:\WINDOWS\explorer.exe => Bestand is getekend
C:\WINDOWS\system32\winlogon.exe => Bestand is getekend
C:\WINDOWS\system32\wininit.exe => Bestand is getekend
C:\WINDOWS\system32\svchost.exe => Bestand is getekend
C:\WINDOWS\system32\services.exe => Bestand is getekend
C:\WINDOWS\system32\User32.dll => Bestand is getekend
C:\WINDOWS\system32\userinit.exe => Bestand is getekend
C:\WINDOWS\system32\rpcss.dll => Bestand is getekend
C:\WINDOWS\system32\dnsapi.dll => Bestand is getekend
C:\WINDOWS\system32\Drivers\volsnap.sys => Bestand is getekend
LastRegBack: 2017-04-15 15:50
==================== Eind van FRST.txt ============================
ADDITION
Extra scanresultaten van Farbar Recovery Scan Tool (x86) Versie: 20-04-2017
Gestart door raymo (21-04-2017 12:36:58)
Gestart vanaf C:\Users\raymo\Documents
Microsoft Windows 10 Home Versie 1607 (X86) (2016-08-10 10:19:22)
Boot Modus: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-53659956-481862063-3313251717-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-53659956-481862063-3313251717-503 - Limited - Disabled)
Gast (S-1-5-21-53659956-481862063-3313251717-501 - Limited - Disabled)
raymo (S-1-5-21-53659956-481862063-3313251717-1001 - Administrator - Enabled) => C:\Users\raymo
Rita (S-1-5-21-53659956-481862063-3313251717-1002 - Limited - Enabled) => C:\Users\Rita
==================== Security Center ========================
(Als een item is opgenomen in de fixlist, zal het worden verwijderd.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Geïnstalleerde programma's ======================
(Alleen de adware-programma's met 'verborgen' vlag zou kunnen worden toegevoegd aan de fixlist om ze zichtbaar te maken. De adware-programma's moeten handmatig gedeinstallerd worden.)
32 Bit HP CIO Components Installer (Version: 7.1.8 - Hewlett-Packard) Hidden
5600 (Version: 140.0.425.000 - Hewlett-Packard) Hidden
5600_Help (Version: 82.0.242.000 - Hewlett-Packard) Hidden
5600Trb (Version: 82.0.242.000 - Hewlett-Packard) Hidden
7-Zip 16.02 (HKLM\...\7-Zip) (Version: 16.02 - Igor Pavlov)
7-Zip 16.04 (HKLM\...\{23170F69-40C1-2701-1604-000001000000}) (Version: 16.04.00.0 - Igor Pavlov)
Adobe Acrobat Reader DC - Nederlands (HKLM\...\{AC76BA86-7AD7-1043-7B44-AC0F074E4100}) (Version: 17.009.20044 - Adobe Systems Incorporated)
AIO_CDB_ProductContext (Version: 140.0.425.000 - Hewlett-Packard) Hidden
AIO_CDB_Software (Version: 140.0.428.000 - Hewlett-Packard) Hidden
AIO_Scan (Version: 130.0.421.000 - Hewlett-Packard) Hidden
AJCompressCopy (HKLM\...\AJCompressCopy) (Version: - )
Ant Download Manager versie 1.2.0.promo.GiveawayOfTheDay.com (HKLM\...\{754CB6A3-3FE2-40DA-9FE5-2864909BD1CC}_is1) (Version: 1.2.0.promo.GiveawayOfTheDay.com - AntGROUP, Inc.)
Apple Application Support (32-bit) (HKLM\...\{9BA1A894-B42F-4805-BC8C-349C905A3930}) (Version: 5.3.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{D9F3D66A-9885-4DDD-A800-9DDF488359A1}) (Version: 10.0.1.3 - Apple Inc.)
Apple Software Update (HKLM\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Belgium e-ID middleware 4.1.10 (build 1698) (HKLM\...\{4DDF16AE-8D5D-4027-A2D1-8CBB498E1698}) (Version: 4.1.1698 - Belgian Government)
Bonjour (HKLM\...\{D168AAD0-6686-47C1-B599-CDD4888B9D1A}) (Version: 3.1.0.1 - Apple Inc.)
BufferChm (Version: 140.0.298.000 - Hewlett-Packard) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.28 - Piriform)
CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.7.6452 - CDBurnerXP)
Copy (Version: 140.0.298.000 - Hewlett-Packard) Hidden
D3DX10 (Version: 15.4.2368.0902 - Microsoft) Hidden
Destinations (Version: 140.0.253.000 - Hewlett-Packard) Hidden
DeviceDiscovery (Version: 140.0.298.000 - Hewlett-Packard) Hidden
DocProc (Version: 140.0.185.000 - Hewlett-Packard) Hidden
FastStone Image Viewer 5.8 (HKLM\...\FastStone Image Viewer) (Version: 5.8 - FastStone Soft)
Fax (Version: 140.0.307.000 - Hewlett-Packard) Hidden
GIMP 2.8.16 (HKLM\...\GIMP-2_is1) (Version: 2.8.16 - The GIMP Team)
Google Chrome (HKLM\...\Google Chrome) (Version: 57.0.2987.133 - Google Inc.)
Google Drive (HKLM\...\{A1238426-ECDF-4639-BE2F-8D12A97AE23C}) (Version: 2.34.5075.1619 - Google, Inc.)
Google Update Helper (Version: 1.3.33.3 - Google Inc.) Hidden
GPBaseService2 (Version: 140.0.297.000 - Hewlett-Packard) Hidden
Hard Disk Sentinel (HKLM\...\Hard Disk Sentinel_is1) (Version: 4.71 - Janos Mathe)
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Photosmart Officejet and Deskjet All-In-One Driver Software (HKLM\...\{6F5B70F0-EA6C-4A5B-BB16-8390BD66B251}) (Version: 14.0 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Support Solutions Framework (HKLM\...\{F283E29B-0B9B-492B-A4BF-5585D996E5AF}) (Version: 12.5.32.203 - Hewlett-Packard Company)
HP Update (HKLM\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPPhotoGadget (Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (Version: 140.0.298.000 - Hewlett-Packard) Hidden
HPSSupply (Version: 140.0.297.000 - Hewlett-Packard) Hidden
iCloud (HKLM\...\{1A8390CF-2C39-47CA-9D70-399F82E84550}) (Version: 6.1.0.30 - Apple Inc.)
IM-Magic Partition Resizer Professional 2015 (HKLM\...\IM_Magic_PR) (Version: 2015 - IM-Magic Inc.)
iTunes (HKLM\...\{B7C4ABF3-59A7-47AB-A72E-956BA5B4841C}) (Version: 12.5.5.5 - Apple Inc.)
Java 8 Update 101 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F32180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
Java 8 Update 111 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
Java 8 Update 121 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F32180121F0}) (Version: 8.0.1210.13 - Oracle Corporation)
Java 8 Update 66 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218066F0}) (Version: 8.0.660.18 - Oracle Corporation)
Java 8 Update 72 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218072F0}) (Version: 8.0.720.15 - Oracle Corporation)
Java 8 Update 77 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218077F0}) (Version: 8.0.770.3 - Oracle Corporation)
Junk Mail filter update (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Malwarebytes versie 3.0.6.1469 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.6.1469 - Malwarebytes)
MarketResearch (Version: 140.0.299.000 - Hewlett-Packard) Hidden
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
Microsoft Office Enterprise 2007 (HKLM\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50906.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
MiniTool Partition Wizard Free 9.1 (HKLM\...\{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1) (Version: - MiniTool Solution Ltd.)
MiniTool Power Data Recovery Edition 7.0 (HKLM\...\MiniTool Power Data Recovery Edition_is1) (Version: - MiniTool Solution Ltd.)
Movie Maker (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 52.0.2 (x86 nl) (HKLM\...\Mozilla Firefox 52.0.2 (x86 nl)) (Version: 52.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 52.0.2.6291 - Mozilla)
Network (Version: 140.0.306.000 - Hewlett-Packard) Hidden
OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
PDF to JPG Converter 1.0 (HKLM\...\{B853BF8D-10C2-4796-A8F7-E521DD652566}_is1) (Version: 1.0 - Soft Solutions)
Recuva (HKLM\...\Recuva) (Version: 1.52 - Piriform)
Scan (Version: 140.0.253.000 - Hewlett-Packard) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
SolutionCenter (Version: 140.0.299.000 - Hewlett-Packard) Hidden
Speccy (HKLM\...\Speccy) (Version: 1.30 - Piriform)
Status (Version: 140.0.342.000 - Hewlett-Packard) Hidden
Stuurprogrammapakket voor Windows - Fedict SmartCard (08/08/2015 4.1.5) (HKLM\...\9F46F7AB1E3B1B5F5482EA8D97F401B04FBF7958) (Version: 08/08/2015 4.1.5 - Fedict)
Toolbox (Version: 140.0.596.000 - Hewlett-Packard) Hidden
TrayApp (Version: 140.0.297.000 - Hewlett-Packard) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
Update voor Microsoft Office Excel 2007 Help (KB963678) (HKLM\...\{90120000-0016-0413-0000-0000000FF1CE}_ENTERPRISE_{5CF7002F-6F49-4482-9564-5614FBE560FA}) (Version: - Microsoft)
Update voor Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM\...\{90120000-0018-0413-0000-0000000FF1CE}_ENTERPRISE_{15D84E79-1ED7-42C5-B2FD-745C3FBDDDC5}) (Version: - Microsoft)
Update voor Microsoft Office Word 2007 Help (KB963665) (HKLM\...\{90120000-001B-0413-0000-0000000FF1CE}_ENTERPRISE_{A66AE6A1-8D8C-4102-BC18-38CBDE40F809}) (Version: - Microsoft)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.4 - VideoLAN)
WebReg (Version: 140.0.297.017 - Hewlett-Packard) Hidden
Windows 10-upgradeassistent (HKLM\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.17349 - Microsoft Corporation)
Windows Live Essentials (HKLM\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinX HD Video Converter Deluxe 5.9.6 (HKLM\...\WinX HD Video Converter Deluxe_is1) (Version: - Digiarty Software, Inc.)
==================== Aangepaste CLSID (gefilterd): ==========================
(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)
==================== Geplande Taken (gefilterd) =============
(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)
Task: {1C67B061-71BC-482E-909D-4181EE649D88} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-12-07] (HP Inc.)
Task: {2D0899EC-7285-4D01-AD9C-59909FFA65CC} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-02-02] (Adobe Systems Incorporated)
Task: {35B0E8D9-8E95-4C42-8E8D-D69BA0A59124} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files\
(Size: 931.5 GB) (Disk ID: D6C0670B)