_ zoals gevraagd onderstaand het resultaat van de uitgevoerde Farbar Recovery Scan. FRST de ADITION wordt in een volgende bericht doorgestuurd hopelijk komt het bestand goed terecht dank bij voorbaat voor een reactie.
Scanresultaten van Farbar Recovery Scan Tool (FRST) (x64) Versie: 20-05-2017
Gestart door vdb (Beheerder) op VDB-VAIO (20-05-2017 19:51:35)
Gestart vanaf C:\Users\vdb\Downloads
Geladen Profielen: vdb (Beschikbare Profielen: vdb & nini gast)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Taal: Nederlands (Nederland)
Internet Explorer Versie 11 (Standaardbrowser: FF)
Boot Modus: Normal
Handleiding voor Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processen (gefilterd) =================
(Als een item is opgenomen in de fixlist, het proces zal worden gesloten. Het bestand zal niet worden verplaatst.)
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
(Microsoft Corporation) C:\Windows\System32\Locator.exe
(Microsoft Corporation) C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe
(IObit) C:\Program Files (x86)\IObit\Smart Defrag 4\SmartDefrag.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Windows\System32\UI0Detect.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFTips.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Improvement\vim.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Improvement\vim.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Farbar) C:\Users\vdb\Downloads\FRST64 (1).exe
(Farbar) C:\Users\vdb\Downloads\FRST64 (1).exe
==================== Register (gefilterd) ====================
(Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1407744 2016-02-13] (Realtek Semiconductor)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [213824 2017-05-10] (AVAST Software)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [IObit Malware Fighter] => C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [5296416 2017-04-11] (IObit)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-03-15] (Oracle Corporation)
HKU\S-1-5-21-2796669195-1309056228-551787618-1001\...\Run: [Advanced SystemCare 10] => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe [3920672 2017-03-30] (IObit)
HKU\S-1-5-21-2796669195-1309056228-551787618-1001\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
HKU\S-1-5-21-2796669195-1309056228-551787618-1001\...\MountPoints2: D - D:\EPSETUP.EXE
HKU\S-1-5-21-2796669195-1309056228-551787618-1001\...\MountPoints2: F - F:\LaunchU3.exe
HKU\S-1-5-21-2796669195-1309056228-551787618-1001\...\MountPoints2: H - H:\Setup.exe
HKU\S-1-5-21-2796669195-1309056228-551787618-1001\...\MountPoints2: {30ee6979-68aa-11e2-bae4-844bf5c870a0} - D:\SETUP.EXE
HKU\S-1-5-21-2796669195-1309056228-551787618-1001\...\MountPoints2: {35058b67-219e-11e3-af18-806e6f6e6963} - D:\EPSETUP.EXE
HKU\S-1-5-21-2796669195-1309056228-551787618-1001\...\MountPoints2: {533b4c0e-e20c-11e2-ba3d-30f9edf10789} - D:\setup64.exe
HKU\S-1-5-21-2796669195-1309056228-551787618-1001\...\MountPoints2: {5e870c1f-4acd-11e2-a4dc-844bf5c870a0} - E:\LaunchU3.exe
HKU\S-1-5-21-2796669195-1309056228-551787618-1001\...\MountPoints2: {69b4aeb7-e2f2-11e2-99f1-844bf5c8709f} - D:\LaunchU3.exe -a
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-05-10] (AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-05-10] (AVAST Software)
ShellIconOverlayIdentifiers: [MOBK] -> {3c3f3c1a-9153-7c05-f938-622e7003894d} => C:\Program Files (x86)\McAfee Online Backup\MOBKshell.dll [2010-04-13] (McAfee, Inc.)
ShellIconOverlayIdentifiers: [MOBK2] -> {e6ea1d7d-144e-b977-98c4-84c53c1a69d0} => C:\Program Files (x86)\McAfee Online Backup\MOBKshell.dll [2010-04-13] (McAfee, Inc.)
ShellIconOverlayIdentifiers: [MOBK3] -> {b4caf489-1eec-c617-49ad-8d7088598c06} => C:\Program Files (x86)\McAfee Online Backup\MOBKshell.dll [2010-04-13] (McAfee, Inc.)
Startup: C:\Users\vdb\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Inktwaarschuwingen controleren - HP Deskjet 1010 series.lnk [2017-05-20]
ShortcutTarget: Inktwaarschuwingen controleren - HP Deskjet 1010 series.lnk -> C:\Program Files\HP\HP Deskjet 1010 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
==================== Internet (gefilterd) ====================
(Als een item is opgenomen in de fixlist, als het een registry item is wordt verwijderd of hersteld naar de standaard.)
ProxyEnable: [S-1-5-21-2796669195-1309056228-551787618-1001] => Proxy is ingeschakeld.
Tcpip\Parameters: [DhcpNameServer] 195.130.130.4 195.130.131.4
Tcpip\..\Interfaces\{3757D445-4F98-47FE-A13D-6B5990842618}: [DhcpNameServer] 195.130.130.4 195.130.131.4
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restrictie <======= AANDACHT
HKU\S-1-5-21-2796669195-1309056228-551787618-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://vaioportal.sony.eu/
HKU\S-1-5-21-2796669195-1309056228-551787618-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://vaioportal.sony.eu
HKU\S-1-5-21-2796669195-1309056228-551787618-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://sony.msn.com/
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2796669195-1309056228-551787618-1001 -> DefaultScope {CACC2F3D-B9AD-43BD-9AC9-626C509FAA76} URL = hxxp://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2796669195-1309056228-551787618-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2796669195-1309056228-551787618-1001 -> {136B8FA6-FC44-483D-86DB-067C95E8A811} URL = hxxp://rover.ebay.com/rover/1/1346-81661-16445-14/4?mpre=hxxp://shop.ebay.nl/?oemInLn=ieSrch-Q212&_nkw={searchTerms}
SearchScopes: HKU\S-1-5-21-2796669195-1309056228-551787618-1001 -> {CACC2F3D-B9AD-43BD-9AC9-626C509FAA76} URL = hxxp://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms}
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2015-11-12] (IObit)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_131\bin\ssv.dll [2017-05-06] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2017-04-06] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-05-06] (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\ssv.dll [2017-05-10] (Oracle Corporation)
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2012-03-29] (Atheros Commnucations)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-04-06] (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO-x32: IObit Surfing Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\IObit Malware Fighter\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll [2016-12-22] (IObit)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-05-10] (Oracle Corporation)
BHO-x32: IObit Ads Removal -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files (x86)\IObit\IObit Malware Fighter\Surfing Protection\Adblock\Adblock.dll [2016-12-22] (IObit)
FireFox:
========
FF ProfilePath: C:\Users\vdb\AppData\Roaming\Mozilla\Firefox\Profiles\zz7z1ban.default [2017-05-20]
FF user.js: detected! => C:\Users\vdb\AppData\Roaming\Mozilla\Firefox\Profiles\zz7z1ban.default\user.js [2016-02-28]
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\zz7z1ban.default -> Yahoo
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\zz7z1ban.default -> Yahoo
FF Keyword.URL: Mozilla\Firefox\Profiles\zz7z1ban.default -> hxxp://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=198484&p=
FF Extension: (IObit Surfing Protection & Ads Removal) - C:\Users\vdb\AppData\Roaming\Mozilla\Firefox\Profiles\zz7z1ban.default\Extensions\ascsurfingprotectionnew@iobit.com.xpi [2016-10-25]
FF Extension: (Belgium eID) - C:\Users\vdb\AppData\Roaming\Mozilla\Firefox\Profiles\zz7z1ban.default\Extensions\belgiumeid@eid.belgium.be.xpi [2017-05-14]
FF Extension: (Avast SafePrice) - C:\Users\vdb\AppData\Roaming\Mozilla\Firefox\Profiles\zz7z1ban.default\Extensions\sp@avast.com.xpi [2017-05-10]
FF Extension: (Avast Online Security) - C:\Users\vdb\AppData\Roaming\Mozilla\Firefox\Profiles\zz7z1ban.default\Extensions\wrc@avast.com.xpi [2017-05-10]
FF Extension: (Belgium eID) - C:\Program Files (x86)\Mozilla Firefox\extensions\belgiumeid@eid.belgium.be [2017-05-06]
FF HKLM-x32\...\Firefox\Extensions: [belgiumeid@eid.belgium.be] - C:\Program Files (x86)\Mozilla Firefox\extensions\belgiumeid@eid.belgium.be
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => niet gevonden
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_25_0_0_171.dll [2017-05-10] ()
FF Plugin: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-05-06] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-05-06] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [Geen bestand]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_25_0_0_171.dll [2017-05-10] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-05-10] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-05-10] (Oracle Corporation)
FF Plugin-x32: @mcafee.com/MVT -> C:\Program Files (x86)\McAfee\Supportability\MVT\NPMVTPlugin.dll [Geen bestand]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Geen bestand]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @SonyCreativeSoftware.com/Media Go,version=1.0 -> C:\Program Files (x86)\Sony\Media Go\npmediago.dll [2011-08-02] (Sony Network Entertainment International LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems Inc.)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\vdb\AppData\Local\Google\Chrome\User Data\Default [2017-05-20]
CHR Extension: (Betalingen via Chrome Web Store) - C:\Users\vdb\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-04-06]
CHR Extension: (Amazon Shopping Assistant by Spigot) - C:\Users\vdb\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfndaklgolladniicklehhancnlgocpp [2016-02-05] [UpdateUrl: hxxp://update.mybrowserbar.com/update/wt/gc/shoppingassistantamazon/update.xml] <==== AANDACHT
CHR Extension: (Chrome Media Router) - C:\Users\vdb\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-05-16]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx <niet gevonden>
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <niet gevonden>
CHR HKLM-x32\...\Chrome\Extension: [hbcennhacfaagdopikcegfcobcadeocj] - C:\Program Files (x86)\Common Files\Spigot\GC\saebay_1.0.crx [2012-11-22]
CHR HKLM-x32\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files (x86)\Common Files\Spigot\GC\errorassistant_1.1.crx [2013-07-05]
CHR HKLM-x32\...\Chrome\Extension: [pfndaklgolladniicklehhancnlgocpp] - C:\Program Files (x86)\Common Files\Spigot\GC\saamazon_1.0.crx [2012-11-22]
==================== Services (gefilterd) ====================
(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)
S4 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [173472 2017-05-06] (SUPERAntiSpyware.com)
S4 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 AdvancedSystemCareService10; C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe [462624 2017-03-21] (IObit)
S4 AMD FUEL Service; c:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-03-06] (Advanced Micro Devices, Inc.) [Bestand niet getekend]
S3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7346208 2017-05-10] (AVAST Software s.r.o.)
S3 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [107648 2012-03-29] (Atheros Commnucations) [Bestand niet getekend]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [263304 2017-05-10] (AVAST Software)
S2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [223600 2016-07-04] (AVAST Software)
S4 DCDhcpService; C:\Program Files\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe [112256 2012-03-21] (Atheros Communication Inc.) [Bestand niet getekend]
R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG) [Bestand niet getekend]
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [Bestand niet getekend]
S3 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [89840 2015-03-28] (Hewlett-Packard Company)
R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [1764640 2017-04-11] (IObit)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2945312 2016-01-14] (IObit)
S4 MOBKbackup; C:\Program Files (x86)\McAfee Online Backup\MOBKbackup.exe [231224 2010-04-13] (McAfee, Inc.)
S4 PMBDeviceInfoProvider; c:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [473960 2012-02-21] (Sony Corporation)
S3 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [260768 2011-11-30] (Sony Corporation)
S3 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10883824 2017-03-17] (TeamViewer GmbH)
S4 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [105024 2011-02-23] (ArcSoft, Inc.)
S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [960160 2011-12-29] (Sony Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S4 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [163456 2012-03-29] (Atheros) [Bestand niet getekend]
===================== Drivers (gefilterd) ======================
(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)
R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
R1 aswbidsdriver; C:\Windows\system32\drivers\aswbidsdrivera.sys [311808 2017-05-10] (AVAST Software s.r.o.)
R0 aswbidsh; C:\Windows\system32\drivers\aswbidsha.sys [190256 2017-05-10] (AVAST Software s.r.o.)
R0 aswblog; C:\Windows\system32\drivers\aswbloga.sys [334576 2017-05-10] (AVAST Software s.r.o.)
R0 aswbuniv; C:\Windows\system32\drivers\aswbuniva.sys [49016 2017-05-10] (AVAST Software s.r.o.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [38296 2017-05-10] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [32600 2017-05-10] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [128648 2017-05-10] (AVAST Software)
R3 aswNetNd6; C:\Windows\System32\DRIVERS\aswNetNd6.sys [28312 2016-07-04] (AVAST Software)
R1 aswNetSec; C:\Windows\system32\drivers\aswNetSec.sys [572120 2016-07-04] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [101152 2017-05-10] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [75704 2017-05-10] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1007160 2017-05-10] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [569192 2017-05-10] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [158880 2017-05-13] (AVAST Software)
R0 aswVmm; C:\Windows\system32\drivers\aswVmm.sys [339696 2017-05-10] (AVAST Software)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-04-11] (REALiX(tm))
R1 IMFCameraProtect; C:\Windows\system32\drivers\IMFCameraProtect.sys [26272 2017-03-29] (IObit.com)
R3 IMFDownProtect; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\IMFDownProtect.sys [21360 2017-03-08] (IObit.com)
R3 IMFFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\IMFFilter.sys [22440 2016-12-22] (IObit)
R3 IMFForceDelete; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\IMFForceDelete.sys [16216 2017-03-29] (IObit.com)
S3 lehidmini; C:\Windows\system32\drivers\leath_hid.sys [36608 2012-03-29] (Atheros)
S3 Linksys_adapter_H; C:\Windows\System32\DRIVERS\AE1200w764.sys [1254464 2011-03-29] (Broadcom Corporation)
R1 MOBKFilter; C:\Windows\System32\DRIVERS\MOBK.sys [66040 2010-04-13] (Mozy, Inc.)
R3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34752 2016-11-03] (IObit.com)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21184 2014-06-04] (IObit)
S3 SmbDrv; C:\Windows\system32\drivers\Smb_driver.sys [21264 2012-04-12] (Synaptics Incorporated)
S3 RTL8192su; system32\DRIVERS\RTL8192su.sys [X]
==================== NetSvcs (gefilterd) ===================
(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)
==================== Een Maand Aangemaakt bestanden en mappen ========
(Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)
2017-05-20 19:51 - 2017-05-20 19:53 - 00023120 _____ C:\Users\vdb\Downloads\FRST.txt
2017-05-20 19:50 - 2017-05-20 19:51 - 00000000 ____D C:\FRST
2017-05-20 19:49 - 2017-05-20 19:49 - 02429952 _____ (Farbar) C:\Users\vdb\Downloads\FRST64.exe
2017-05-20 19:49 - 2017-05-20 19:49 - 02429952 _____ (Farbar) C:\Users\vdb\Downloads\FRST64 (1).exe
2017-05-20 16:33 - 2017-05-20 16:33 - 00000000 ____D C:\ProgramData\SWCUTemp
2017-05-17 18:20 - 2017-05-17 18:20 - 00596449 _____ C:\Users\vdb\Documents\antw controle boekh fidimco dd.15 5 2017.pdf
2017-05-17 08:45 - 2017-05-17 08:45 - 00000000 ____D C:\c6cc16b5f9876f149722ef774e7150
2017-05-16 21:02 - 2017-05-16 21:02 - 00000573 _____ C:\Users\vdb\Desktop\Computer - Snelkoppeling.lnk
2017-05-16 19:18 - 2017-05-16 19:18 - 00748226 _____ C:\Users\vdb\Documents\tips Riswana.pdf
2017-05-16 12:49 - 2017-05-16 12:49 - 00512691 _____ C:\Users\vdb\Downloads\Belastingaangifte 2016_1015(via Tax-on-web)(1).pdf
2017-05-14 08:25 - 2017-05-14 08:25 - 26243360 _____ (Belgian Government) C:\Users\vdb\Downloads\belgium-eid-quickinstaller-4.1.20-signed(2).exe
2017-05-11 17:28 - 2017-05-11 17:28 - 00115200 _____ C:\Users\vdb\Documents\BEREKENING V.xls
2017-05-11 09:27 - 2017-05-11 09:27 - 00008500 _____ C:\Users\vdb\Documents\SALDO RECORDBANK OP 11 5 2017 VOOR AFSLITEN NA INTREST 2017.xlsx
2017-05-11 09:17 - 2017-05-11 09:17 - 00168602 _____ C:\Users\vdb\Downloads\BE18652824100665_2015_1_2_1494487038536.pdf
2017-05-11 09:02 - 2017-05-11 09:02 - 00097491 _____ C:\Users\vdb\Downloads\BE79652936986033_2014_2_4_1494486131421.pdf
2017-05-11 08:59 - 2017-05-11 08:59 - 00000578 _____ C:\Users\vdb\Downloads\RECORD Download_1494485999652.csv
2017-05-11 08:59 - 2017-05-11 08:59 - 00000332 _____ C:\Users\vdb\Downloads\RECORD Download_1494485992680.csv
2017-05-11 08:59 - 2017-05-11 08:59 - 00000332 _____ C:\Users\vdb\Downloads\RECORD Download_1494485979101.csv
2017-05-11 08:59 - 2017-05-11 08:59 - 00000332 _____ C:\Users\vdb\Downloads\RECORD Download_1494485978864.csv
2017-05-11 08:58 - 2017-05-11 08:59 - 00000578 _____ C:\Users\vdb\Downloads\RECORD Download_1494485938919.csv
2017-05-10 14:08 - 2017-05-06 10:55 - 00110144 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-64.dll
2017-05-10 12:00 - 2017-05-10 11:59 - 00400456 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2017-05-09 19:05 - 2017-05-09 19:05 - 01398244 _____ C:\Users\vdb\Documents\br aan fidimco dd. 8 5 2017.pdf
2017-05-09 07:47 - 2017-05-09 07:47 - 00107520 _____ C:\Users\vdb\Documents\BEREKENING fIDINCO SINDS AANSTELLING NOG nazien.xls
2017-05-09 07:19 - 2017-05-09 08:38 - 00066145 _____ C:\Users\vdb\Downloads\BEREKENING V.xlsx
2017-05-07 13:49 - 2017-05-07 13:53 - 00000000 ____D C:\Users\vdb\AppData\Roaming\MAGIX
2017-05-07 13:49 - 2017-05-07 13:49 - 00001087 _____ C:\Users\Public\Desktop\MAGIX Foto Manager 15.lnk
2017-05-07 13:49 - 2017-05-07 13:49 - 00000000 ___RD C:\Users\vdb\Documents\MAGIX
2017-05-07 13:49 - 2017-05-07 13:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX
2017-05-07 13:48 - 2017-05-07 13:48 - 00000000 ____D C:\Program Files (x86)\MAGIX
2017-05-07 13:46 - 2017-05-07 13:46 - 00001043 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myphotobook print service NL.lnk
2017-05-07 13:46 - 2017-05-07 13:46 - 00001031 _____ C:\Users\Public\Desktop\myphotobook print service NL.lnk
2017-05-07 13:45 - 2017-05-07 13:45 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2017-05-07 13:45 - 2017-05-07 13:45 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2017-05-07 13:45 - 2017-05-07 13:45 - 00000000 ____D C:\Program Files (x86)\myphotobook print service NL
2017-05-07 13:43 - 2017-05-07 13:53 - 00000000 ____D C:\ProgramData\MAGIX
2017-05-07 12:47 - 2017-05-07 12:47 - 00000000 ____D C:\Users\vdb\AppData\Local\{E790DE1F-2849-4ED8-A0AD-9E40FA1D177A}
2017-05-07 12:46 - 2017-05-07 12:46 - 00000000 ____D C:\Users\vdb\AppData\Local\{DF37537D-11F3-4692-8003-2536AF33B0EF}
2017-05-06 12:05 - 2017-05-06 12:05 - 00000000 ____D C:\ProgramData\{BE2ACE5C-32B7-4777-9BDF-ECF87CDAB705}
2017-05-06 11:25 - 2017-05-06 11:25 - 00000000 ____D C:\Users\vdb\AppData\LocalLow\ADSRemoval
2017-05-06 10:59 - 2017-05-06 10:59 - 00043004 _____ C:\Users\vdb\Documents\cc_20170506_105921.reg
2017-05-06 10:52 - 2017-03-29 18:05 - 00026272 _____ (IObit.com) C:\Windows\system32\Drivers\IMFCameraProtect.sys
2017-05-06 10:51 - 2017-05-19 06:26 - 00002222 _____ C:\Users\Public\Desktop\Advanced SystemCare 10.lnk
2017-05-06 10:51 - 2017-05-06 10:51 - 00003008 _____ C:\Windows\System32\Tasks\ASC10_PerformanceMonitor
2017-05-06 10:51 - 2017-05-06 10:51 - 00002812 _____ C:\Windows\System32\Tasks\ASC10_SkipUac_vdb
2017-05-06 10:51 - 2017-05-06 10:51 - 00000000 ____D C:\ProgramData\{74E9F814-C737-42CC-B721-DBBC4059367A}
2017-05-06 10:50 - 2017-05-06 10:50 - 00001133 _____ C:\Users\Public\Desktop\IObit Malware Fighter.lnk
2017-05-06 10:50 - 2017-05-06 10:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Malware Fighter
2017-05-06 08:00 - 2017-05-06 11:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-05-04 08:08 - 2017-05-06 10:50 - 00002882 _____ C:\Windows\System32\Tasks\Driver Booster SkipUAC (vdb)
2017-05-04 07:28 - 2017-05-10 11:52 - 00000000 _____ C:\Windows\SysWOW64\last.dump
2017-05-02 17:15 - 2017-05-02 17:15 - 00000000 ____D C:\Users\nini gast\AppData\Roaming\Sun
2017-04-30 09:06 - 2017-04-30 09:06 - 00040960 _____ C:\Users\vdb\Documents\FW betreffende facturen ivm Fraude Fidimo.msg
2017-04-28 15:07 - 2017-04-28 15:07 - 26243360 _____ (Belgian Government) C:\Users\vdb\Downloads\belgium-eid-quickinstaller-4.1.20-signed(1).exe
2017-04-27 22:37 - 2017-04-27 22:37 - 00503295 _____ C:\Users\vdb\Documents\28 4 2017 nota exempl door 4 mede-eigenaars ondertekend.pdf
2017-04-27 12:21 - 2017-04-27 14:21 - 00066048 _____ C:\Users\vdb\Documents\VP17106 - BENOYVME EIKENLEI 68-LOCHTENBERGPLEIN 10-12.msg
2017-04-25 17:34 - 2017-05-06 12:03 - 00000000 ____D C:\Program Files\WinZip Smart Monitor
2017-04-25 17:32 - 2017-04-25 17:32 - 14600624 _____ (WinZip) C:\Users\vdb\Downloads\wzdu34(1).exe
2017-04-25 17:31 - 2017-04-25 17:32 - 14600624 _____ (WinZip) C:\Users\vdb\Downloads\wzdu34.exe
2017-04-25 10:57 - 2017-04-25 11:12 - 00010270 _____ C:\Users\vdb\Documents\BETALINGEN DE ROY PETER.xlsx
2017-04-24 09:48 - 2017-04-24 09:48 - 00010473 _____ C:\Users\vdb\Documents\berekenen betaald Tandarts De Roy.xlsx
2017-04-24 09:20 - 2017-04-24 09:20 - 00000000 ____D C:\ProgramData\VirtualizedApplications
2017-04-24 08:40 - 2017-04-24 08:41 - 00000000 ____D C:\Users\vdb\AppData\Local\{A1AF483A-D632-4C62-832E-F5ABDDF7407A}
2017-04-21 09:57 - 2017-04-21 09:57 - 06674472 _____ (383 Media, Inc.) C:\Users\vdb\Downloads\DriverRestore.exe
2017-04-21 09:49 - 2017-05-20 19:35 - 00000000 ____D C:\Users\vdb\AppData\LocalLow\Mozilla
2017-04-21 09:45 - 2017-04-21 09:45 - 00001190 _____ C:\Users\Public\Desktop\eID Viewer.lnk
2017-04-21 09:45 - 2017-04-21 09:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Belgium - eID
2017-04-21 09:44 - 2017-04-21 09:44 - 00000000 ____D C:\Windows\SysWOW64\beidpp
2017-04-21 09:43 - 2017-04-21 09:44 - 26243360 _____ (Belgian Government) C:\Users\vdb\Downloads\Belgium-eID-QuickInstaller-4.1.20-signed.exe
2017-04-21 09:43 - 2017-04-21 09:44 - 26243360 _____ (Belgian Government) C:\Users\vdb\Downloads\Belgium-eID-QuickInstaller-4.1.20-signed (1).exe
2017-04-21 09:34 - 2017-04-21 09:34 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WUDFUsbccidDriver_01_09_00.Wdf
==================== Een Maand Gewijzigd bestanden en mappen ========
(Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)
2017-05-20 19:35 - 2013-09-07 02:33 - 637944832 _____ C:\Users\Public\Documents\postvak in.pst
2017-05-20 17:44 - 2013-04-17 20:07 - 00000000 ____D C:\Users\vdb\Documents\boekhouding Eikenlei
2017-05-20 16:46 - 2012-08-17 10:24 - 00000000 ____D C:\Users\vdb\AppData\Local\CrashDumps
2017-05-20 16:43 - 2009-07-14 06:45 - 00028576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-05-20 16:43 - 2009-07-14 06:45 - 00028576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-05-20 16:28 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-05-20 13:53 - 2013-04-17 20:07 - 00000000 ____D C:\Users\vdb\Documents\appartement eikeneli
2017-05-18 18:03 - 2009-07-14 07:08 - 00032522 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-05-18 11:23 - 2012-05-03 06:12 - 00763826 _____ C:\Windows\system32\perfh013.dat
2017-05-18 11:23 - 2012-05-03 06:12 - 00159896 _____ C:\Windows\system32\perfc013.dat
2017-05-18 11:23 - 2009-07-14 07:13 - 01708374 _____ C:\Windows\system32\PerfStringBackup.INI
2017-05-18 11:22 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2017-05-17 19:32 - 2015-04-11 01:01 - 00002900 _____ C:\Windows\System32\Tasks\Uninstaller_SkipUac_vdb
2017-05-17 10:24 - 2013-02-20 00:07 - 00000000 ____D C:\ProgramData\IObit
2017-05-16 21:08 - 2011-02-11 01:03 - 01683042 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2017-05-16 18:13 - 2017-04-06 04:02 - 00004172 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2017-05-16 11:10 - 2013-04-08 01:23 - 00002175 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-05-16 11:10 - 2013-04-08 01:23 - 00002163 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-05-14 08:01 - 2013-08-06 05:35 - 67822592 _____ C:\Users\vdb\Documents\postvak in.pst
2017-05-13 20:03 - 2015-04-11 00:59 - 00000000 ____D C:\ProgramData\ProductData
2017-05-13 08:16 - 2015-04-04 17:01 - 00158880 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2017-05-11 17:43 - 2013-10-07 17:21 - 00000000 ____D C:\eikenlei brecht
2017-05-11 09:29 - 2012-12-24 15:48 - 00000000 ____D C:\Program Files (x86)\Belgium Identity Card
2017-05-11 07:42 - 2017-04-06 03:58 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-05-11 07:42 - 2012-05-03 07:35 - 00000000 ____D C:\ProgramData\Skype
2017-05-10 14:08 - 2016-11-02 07:27 - 00097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2017-05-10 14:08 - 2015-05-08 15:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-05-10 14:07 - 2015-05-08 15:47 - 00000000 ____D C:\Program Files (x86)\Java
2017-05-10 12:09 - 2012-05-03 07:16 - 00803320 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-05-10 12:09 - 2012-05-03 07:16 - 00144888 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-05-10 12:09 - 2012-05-03 07:16 - 00004312 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-05-10 12:09 - 2012-05-03 07:16 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2017-05-10 12:09 - 2012-05-03 07:16 - 00000000 ____D C:\Windows\system32\Macromed
2017-05-10 12:02 - 2016-02-05 21:11 - 00003886 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1454699507
2017-05-10 11:59 - 2015-04-04 17:01 - 00569192 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2017-05-10 11:59 - 2015-04-04 17:01 - 00339696 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2017-05-10 11:59 - 2015-04-04 17:01 - 00128648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2017-05-10 11:59 - 2015-04-04 17:01 - 00101152 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2017-05-10 11:59 - 2015-04-04 17:01 - 00075704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2017-05-10 11:59 - 2015-04-04 17:01 - 00038296 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2017-05-10 11:58 - 2017-04-06 04:02 - 00334576 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbloga.sys
2017-05-10 11:58 - 2017-04-06 04:02 - 00311808 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsdrivera.sys
2017-05-10 11:58 - 2017-04-06 04:02 - 00190256 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsha.sys
2017-05-10 11:58 - 2017-04-06 04:02 - 00049016 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbuniva.sys
2017-05-10 11:58 - 2016-02-05 20:52 - 00032600 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2017-05-10 11:58 - 2015-04-04 17:01 - 01007160 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2017-05-09 18:53 - 2017-04-06 03:49 - 00000000 ____D C:\ProgramData\Package Cache
2017-05-09 16:07 - 2012-08-14 11:47 - 00000000 ____D C:\Users\vdb
2017-05-07 21:09 - 2012-12-22 22:05 - 00000000 ____D C:\Users\Stephania
2017-05-07 21:09 - 2012-08-14 12:24 - 00000000 ____D C:\Users\vdb\AppData\Local\VirtualStore
2017-05-07 19:50 - 2013-06-17 03:46 - 00000000 ____D C:\Users\vdb\AppData\LocalLow\IObit
2017-05-07 13:45 - 2017-04-08 17:14 - 00000000 ____D C:\Program Files (x86)\Adobe
2017-05-07 13:44 - 2012-08-14 14:40 - 00000000 ____D C:\Users\vdb\AppData\Roaming\Adobe
2017-05-06 12:03 - 2015-05-08 15:46 - 00000000 ____D C:\ProgramData\WinZip
2017-05-06 11:54 - 2017-04-06 07:39 - 00000000 ____D C:\Program Files\Google
2017-05-06 11:54 - 2013-06-04 15:21 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2017-05-06 11:54 - 2013-04-08 01:22 - 00000000 ____D C:\Program Files (x86)\Google
2017-05-06 11:54 - 2013-02-11 12:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-05-06 11:18 - 2013-04-08 01:21 - 00000000 ____D C:\Users\vdb\AppData\Local\Google
2017-05-06 10:55 - 2016-11-02 07:26 - 00110144 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2017-05-06 10:53 - 2015-05-08 15:43 - 00000000 ____D C:\Program Files\Java
2017-05-06 10:51 - 2016-02-25 21:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare
2017-05-06 07:56 - 2015-07-19 20:58 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-05-02 20:01 - 2017-04-11 12:47 - 00000000 ____D C:\Users\nini gast\AppData\LocalLow\Mozilla
2017-05-02 18:39 - 2012-05-03 06:04 - 00000000 ____D C:\ProgramData\Sony Corporation
2017-05-02 18:35 - 2013-01-27 19:58 - 00000000 ____D C:\Users\nini gast\AppData\Local\Sony Corporation
2017-04-30 10:46 - 2012-12-06 01:55 - 00000000 ____D C:\Users\vdb\Desktop\RECHTBANK EXT HD
2017-04-30 08:56 - 2011-03-06 18:46 - 00000000 ____D C:\Users\vdb\Desktop\rekeningen ter controle
2017-04-28 13:53 - 2013-07-06 11:01 - 00000000 ____D C:\Users\vdb\Downloads\afspraak met dhr Krinkels dd 9 4 2013
2017-04-28 13:08 - 2016-02-05 20:47 - 00003360 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2017-04-28 13:08 - 2013-04-08 01:22 - 00003488 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-04-25 11:17 - 2013-02-07 13:27 - 00000000 ____D C:\Users\vdb\AppData\Roaming\SoftGrid Client
2017-04-25 11:17 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2017-04-25 11:16 - 2012-05-03 07:27 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2017-04-24 08:44 - 2015-09-13 09:46 - 00000000 ____D C:\Users\vdb\AppData\Local\Windows Live
2017-04-20 07:40 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
==================== Bestanden in de root van sommige mappen =======
2015-07-19 06:10 - 2015-07-19 06:10 - 6420480 _____ () C:\Program Files (x86)\GUT2C8D.tmp
2016-10-06 09:01 - 2016-10-06 09:01 - 7065600 _____ () C:\Program Files (x86)\GUTD72C.tmp
2013-08-04 01:47 - 2013-08-04 01:54 - 0009304 _____ () C:\Users\vdb\AppData\Roaming\Microsoft Excel 97-2003.EML
2012-12-24 15:32 - 2012-12-24 15:32 - 0000000 _____ () C:\Users\vdb\AppData\Local\simedit.log
2015-04-10 23:40 - 2015-04-10 23:40 - 0000057 _____ () C:\ProgramData\Ament.ini
2016-02-13 18:37 - 2016-02-13 18:37 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
==================== Bamital & volsnap ======================
(Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.)
C:\Windows\system32\winlogon.exe => Bestand is getekend
C:\Windows\system32\wininit.exe => Bestand is getekend
C:\Windows\SysWOW64\wininit.exe => Bestand is getekend
C:\Windows\explorer.exe => Bestand is getekend
C:\Windows\SysWOW64\explorer.exe => Bestand is getekend
C:\Windows\system32\svchost.exe => Bestand is getekend
C:\Windows\SysWOW64\svchost.exe => Bestand is getekend
C:\Windows\system32\services.exe => Bestand is getekend
C:\Windows\system32\User32.dll => Bestand is getekend
C:\Windows\SysWOW64\User32.dll => Bestand is getekend
C:\Windows\system32\userinit.exe => Bestand is getekend
C:\Windows\SysWOW64\userinit.exe => Bestand is getekend
C:\Windows\system32\rpcss.dll => Bestand is getekend
C:\Windows\system32\dnsapi.dll => Bestand is getekend
C:\Windows\SysWOW64\dnsapi.dll => Bestand is getekend
C:\Windows\system32\Drivers\volsnap.sys => Bestand is getekend
LastRegBack: 2016-06-05 18:39
==================== Eind van FRST.txt ============================
Scanresultaten van Farbar Recovery Scan Tool (FRST) (x64) Versie: 20-05-2017
Gestart door vdb (Beheerder) op VDB-VAIO (20-05-2017 19:51:35)
Gestart vanaf C:\Users\vdb\Downloads
Geladen Profielen: vdb (Beschikbare Profielen: vdb & nini gast)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Taal: Nederlands (Nederland)
Internet Explorer Versie 11 (Standaardbrowser: FF)
Boot Modus: Normal
Handleiding voor Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processen (gefilterd) =================
(Als een item is opgenomen in de fixlist, het proces zal worden gesloten. Het bestand zal niet worden verplaatst.)
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
(Microsoft Corporation) C:\Windows\System32\Locator.exe
(Microsoft Corporation) C:\Program Files\Windows Live\Mesh\wlcrasvc.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe
(IObit) C:\Program Files (x86)\IObit\Smart Defrag 4\SmartDefrag.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Windows\System32\UI0Detect.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFTips.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Improvement\vim.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Improvement\vim.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Farbar) C:\Users\vdb\Downloads\FRST64 (1).exe
(Farbar) C:\Users\vdb\Downloads\FRST64 (1).exe
==================== Register (gefilterd) ====================
(Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1407744 2016-02-13] (Realtek Semiconductor)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [213824 2017-05-10] (AVAST Software)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [IObit Malware Fighter] => C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [5296416 2017-04-11] (IObit)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-03-15] (Oracle Corporation)
HKU\S-1-5-21-2796669195-1309056228-551787618-1001\...\Run: [Advanced SystemCare 10] => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe [3920672 2017-03-30] (IObit)
HKU\S-1-5-21-2796669195-1309056228-551787618-1001\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
HKU\S-1-5-21-2796669195-1309056228-551787618-1001\...\MountPoints2: D - D:\EPSETUP.EXE
HKU\S-1-5-21-2796669195-1309056228-551787618-1001\...\MountPoints2: F - F:\LaunchU3.exe
HKU\S-1-5-21-2796669195-1309056228-551787618-1001\...\MountPoints2: H - H:\Setup.exe
HKU\S-1-5-21-2796669195-1309056228-551787618-1001\...\MountPoints2: {30ee6979-68aa-11e2-bae4-844bf5c870a0} - D:\SETUP.EXE
HKU\S-1-5-21-2796669195-1309056228-551787618-1001\...\MountPoints2: {35058b67-219e-11e3-af18-806e6f6e6963} - D:\EPSETUP.EXE
HKU\S-1-5-21-2796669195-1309056228-551787618-1001\...\MountPoints2: {533b4c0e-e20c-11e2-ba3d-30f9edf10789} - D:\setup64.exe
HKU\S-1-5-21-2796669195-1309056228-551787618-1001\...\MountPoints2: {5e870c1f-4acd-11e2-a4dc-844bf5c870a0} - E:\LaunchU3.exe
HKU\S-1-5-21-2796669195-1309056228-551787618-1001\...\MountPoints2: {69b4aeb7-e2f2-11e2-99f1-844bf5c8709f} - D:\LaunchU3.exe -a
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-05-10] (AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-05-10] (AVAST Software)
ShellIconOverlayIdentifiers: [MOBK] -> {3c3f3c1a-9153-7c05-f938-622e7003894d} => C:\Program Files (x86)\McAfee Online Backup\MOBKshell.dll [2010-04-13] (McAfee, Inc.)
ShellIconOverlayIdentifiers: [MOBK2] -> {e6ea1d7d-144e-b977-98c4-84c53c1a69d0} => C:\Program Files (x86)\McAfee Online Backup\MOBKshell.dll [2010-04-13] (McAfee, Inc.)
ShellIconOverlayIdentifiers: [MOBK3] -> {b4caf489-1eec-c617-49ad-8d7088598c06} => C:\Program Files (x86)\McAfee Online Backup\MOBKshell.dll [2010-04-13] (McAfee, Inc.)
Startup: C:\Users\vdb\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Inktwaarschuwingen controleren - HP Deskjet 1010 series.lnk [2017-05-20]
ShortcutTarget: Inktwaarschuwingen controleren - HP Deskjet 1010 series.lnk -> C:\Program Files\HP\HP Deskjet 1010 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
==================== Internet (gefilterd) ====================
(Als een item is opgenomen in de fixlist, als het een registry item is wordt verwijderd of hersteld naar de standaard.)
ProxyEnable: [S-1-5-21-2796669195-1309056228-551787618-1001] => Proxy is ingeschakeld.
Tcpip\Parameters: [DhcpNameServer] 195.130.130.4 195.130.131.4
Tcpip\..\Interfaces\{3757D445-4F98-47FE-A13D-6B5990842618}: [DhcpNameServer] 195.130.130.4 195.130.131.4
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restrictie <======= AANDACHT
HKU\S-1-5-21-2796669195-1309056228-551787618-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://vaioportal.sony.eu/
HKU\S-1-5-21-2796669195-1309056228-551787618-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://vaioportal.sony.eu
HKU\S-1-5-21-2796669195-1309056228-551787618-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://sony.msn.com/
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&for ... -SearchBox
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2796669195-1309056228-551787618-1001 -> DefaultScope {CACC2F3D-B9AD-43BD-9AC9-626C509FAA76} URL = hxxp://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2796669195-1309056228-551787618-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2796669195-1309056228-551787618-1001 -> {136B8FA6-FC44-483D-86DB-067C95E8A811} URL = hxxp://rover.ebay.com/rover/1/1346-81661-16445-14/4?mpre=hxxp://shop.ebay.nl/?oemInLn=ieSrch-Q212&_nkw={searchTerms}
SearchScopes: HKU\S-1-5-21-2796669195-1309056228-551787618-1001 -> {CACC2F3D-B9AD-43BD-9AC9-626C509FAA76} URL = hxxp://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=198484&p={searchTerms}
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2015-11-12] (IObit)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_131\bin\ssv.dll [2017-05-06] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2017-04-06] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-05-06] (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\ssv.dll [2017-05-10] (Oracle Corporation)
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2012-03-29] (Atheros Commnucations)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-04-06] (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO-x32: IObit Surfing Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files (x86)\IObit\IObit Malware Fighter\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll [2016-12-22] (IObit)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-05-10] (Oracle Corporation)
BHO-x32: IObit Ads Removal -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files (x86)\IObit\IObit Malware Fighter\Surfing Protection\Adblock\Adblock.dll [2016-12-22] (IObit)
FireFox:
========
FF ProfilePath: C:\Users\vdb\AppData\Roaming\Mozilla\Firefox\Profiles\zz7z1ban.default [2017-05-20]
FF user.js: detected! => C:\Users\vdb\AppData\Roaming\Mozilla\Firefox\Profiles\zz7z1ban.default\user.js [2016-02-28]
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\zz7z1ban.default -> Yahoo
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\zz7z1ban.default -> Yahoo
FF Keyword.URL: Mozilla\Firefox\Profiles\zz7z1ban.default -> hxxp://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=198484&p=
FF Extension: (IObit Surfing Protection & Ads Removal) - C:\Users\vdb\AppData\Roaming\Mozilla\Firefox\Profiles\zz7z1ban.default\Extensions\ascsurfingprotectionnew@iobit.com.xpi [2016-10-25]
FF Extension: (Belgium eID) - C:\Users\vdb\AppData\Roaming\Mozilla\Firefox\Profiles\zz7z1ban.default\Extensions\belgiumeid@eid.belgium.be.xpi [2017-05-14]
FF Extension: (Avast SafePrice) - C:\Users\vdb\AppData\Roaming\Mozilla\Firefox\Profiles\zz7z1ban.default\Extensions\sp@avast.com.xpi [2017-05-10]
FF Extension: (Avast Online Security) - C:\Users\vdb\AppData\Roaming\Mozilla\Firefox\Profiles\zz7z1ban.default\Extensions\wrc@avast.com.xpi [2017-05-10]
FF Extension: (Belgium eID) - C:\Program Files (x86)\Mozilla Firefox\extensions\belgiumeid@eid.belgium.be [2017-05-06]
FF HKLM-x32\...\Firefox\Extensions: [belgiumeid@eid.belgium.be] - C:\Program Files (x86)\Mozilla Firefox\extensions\belgiumeid@eid.belgium.be
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => niet gevonden
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_25_0_0_171.dll [2017-05-10] ()
FF Plugin: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-05-06] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-05-06] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [Geen bestand]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_25_0_0_171.dll [2017-05-10] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-05-10] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-05-10] (Oracle Corporation)
FF Plugin-x32: @mcafee.com/MVT -> C:\Program Files (x86)\McAfee\Supportability\MVT\NPMVTPlugin.dll [Geen bestand]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Geen bestand]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @SonyCreativeSoftware.com/Media Go,version=1.0 -> C:\Program Files (x86)\Sony\Media Go\npmediago.dll [2011-08-02] (Sony Network Entertainment International LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems Inc.)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\vdb\AppData\Local\Google\Chrome\User Data\Default [2017-05-20]
CHR Extension: (Betalingen via Chrome Web Store) - C:\Users\vdb\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-04-06]
CHR Extension: (Amazon Shopping Assistant by Spigot) - C:\Users\vdb\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfndaklgolladniicklehhancnlgocpp [2016-02-05] [UpdateUrl: hxxp://update.mybrowserbar.com/update/wt/gc/shoppingassistantamazon/update.xml] <==== AANDACHT
CHR Extension: (Chrome Media Router) - C:\Users\vdb\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-05-16]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx <niet gevonden>
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <niet gevonden>
CHR HKLM-x32\...\Chrome\Extension: [hbcennhacfaagdopikcegfcobcadeocj] - C:\Program Files (x86)\Common Files\Spigot\GC\saebay_1.0.crx [2012-11-22]
CHR HKLM-x32\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files (x86)\Common Files\Spigot\GC\errorassistant_1.1.crx [2013-07-05]
CHR HKLM-x32\...\Chrome\Extension: [pfndaklgolladniicklehhancnlgocpp] - C:\Program Files (x86)\Common Files\Spigot\GC\saamazon_1.0.crx [2012-11-22]
==================== Services (gefilterd) ====================
(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)
S4 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [173472 2017-05-06] (SUPERAntiSpyware.com)
S4 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 AdvancedSystemCareService10; C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe [462624 2017-03-21] (IObit)
S4 AMD FUEL Service; c:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-03-06] (Advanced Micro Devices, Inc.) [Bestand niet getekend]
S3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7346208 2017-05-10] (AVAST Software s.r.o.)
S3 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [107648 2012-03-29] (Atheros Commnucations) [Bestand niet getekend]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [263304 2017-05-10] (AVAST Software)
S2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [223600 2016-07-04] (AVAST Software)
S4 DCDhcpService; C:\Program Files\Sony\VAIO Smart Network\WFDA\DCDhcpService.exe [112256 2012-03-21] (Atheros Communication Inc.) [Bestand niet getekend]
R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG) [Bestand niet getekend]
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [Bestand niet getekend]
S3 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [89840 2015-03-28] (Hewlett-Packard Company)
R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [1764640 2017-04-11] (IObit)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2945312 2016-01-14] (IObit)
S4 MOBKbackup; C:\Program Files (x86)\McAfee Online Backup\MOBKbackup.exe [231224 2010-04-13] (McAfee, Inc.)
S4 PMBDeviceInfoProvider; c:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe [473960 2012-02-21] (Sony Corporation)
S3 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [260768 2011-11-30] (Sony Corporation)
S3 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10883824 2017-03-17] (TeamViewer GmbH)
S4 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [105024 2011-02-23] (ArcSoft, Inc.)
S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [960160 2011-12-29] (Sony Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S4 ZAtheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [163456 2012-03-29] (Atheros) [Bestand niet getekend]
===================== Drivers (gefilterd) ======================
(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)
R3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
R1 aswbidsdriver; C:\Windows\system32\drivers\aswbidsdrivera.sys [311808 2017-05-10] (AVAST Software s.r.o.)
R0 aswbidsh; C:\Windows\system32\drivers\aswbidsha.sys [190256 2017-05-10] (AVAST Software s.r.o.)
R0 aswblog; C:\Windows\system32\drivers\aswbloga.sys [334576 2017-05-10] (AVAST Software s.r.o.)
R0 aswbuniv; C:\Windows\system32\drivers\aswbuniva.sys [49016 2017-05-10] (AVAST Software s.r.o.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [38296 2017-05-10] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [32600 2017-05-10] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [128648 2017-05-10] (AVAST Software)
R3 aswNetNd6; C:\Windows\System32\DRIVERS\aswNetNd6.sys [28312 2016-07-04] (AVAST Software)
R1 aswNetSec; C:\Windows\system32\drivers\aswNetSec.sys [572120 2016-07-04] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [101152 2017-05-10] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [75704 2017-05-10] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1007160 2017-05-10] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [569192 2017-05-10] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [158880 2017-05-13] (AVAST Software)
R0 aswVmm; C:\Windows\system32\drivers\aswVmm.sys [339696 2017-05-10] (AVAST Software)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-04-11] (REALiX(tm))
R1 IMFCameraProtect; C:\Windows\system32\drivers\IMFCameraProtect.sys [26272 2017-03-29] (IObit.com)
R3 IMFDownProtect; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\IMFDownProtect.sys [21360 2017-03-08] (IObit.com)
R3 IMFFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\IMFFilter.sys [22440 2016-12-22] (IObit)
R3 IMFForceDelete; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\IMFForceDelete.sys [16216 2017-03-29] (IObit.com)
S3 lehidmini; C:\Windows\system32\drivers\leath_hid.sys [36608 2012-03-29] (Atheros)
S3 Linksys_adapter_H; C:\Windows\System32\DRIVERS\AE1200w764.sys [1254464 2011-03-29] (Broadcom Corporation)
R1 MOBKFilter; C:\Windows\System32\DRIVERS\MOBK.sys [66040 2010-04-13] (Mozy, Inc.)
R3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34752 2016-11-03] (IObit.com)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21184 2014-06-04] (IObit)
S3 SmbDrv; C:\Windows\system32\drivers\Smb_driver.sys [21264 2012-04-12] (Synaptics Incorporated)
S3 RTL8192su; system32\DRIVERS\RTL8192su.sys [X]
==================== NetSvcs (gefilterd) ===================
(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)
==================== Een Maand Aangemaakt bestanden en mappen ========
(Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)
2017-05-20 19:51 - 2017-05-20 19:53 - 00023120 _____ C:\Users\vdb\Downloads\FRST.txt
2017-05-20 19:50 - 2017-05-20 19:51 - 00000000 ____D C:\FRST
2017-05-20 19:49 - 2017-05-20 19:49 - 02429952 _____ (Farbar) C:\Users\vdb\Downloads\FRST64.exe
2017-05-20 19:49 - 2017-05-20 19:49 - 02429952 _____ (Farbar) C:\Users\vdb\Downloads\FRST64 (1).exe
2017-05-20 16:33 - 2017-05-20 16:33 - 00000000 ____D C:\ProgramData\SWCUTemp
2017-05-17 18:20 - 2017-05-17 18:20 - 00596449 _____ C:\Users\vdb\Documents\antw controle boekh fidimco dd.15 5 2017.pdf
2017-05-17 08:45 - 2017-05-17 08:45 - 00000000 ____D C:\c6cc16b5f9876f149722ef774e7150
2017-05-16 21:02 - 2017-05-16 21:02 - 00000573 _____ C:\Users\vdb\Desktop\Computer - Snelkoppeling.lnk
2017-05-16 19:18 - 2017-05-16 19:18 - 00748226 _____ C:\Users\vdb\Documents\tips Riswana.pdf
2017-05-16 12:49 - 2017-05-16 12:49 - 00512691 _____ C:\Users\vdb\Downloads\Belastingaangifte 2016_1015(via Tax-on-web)(1).pdf
2017-05-14 08:25 - 2017-05-14 08:25 - 26243360 _____ (Belgian Government) C:\Users\vdb\Downloads\belgium-eid-quickinstaller-4.1.20-signed(2).exe
2017-05-11 17:28 - 2017-05-11 17:28 - 00115200 _____ C:\Users\vdb\Documents\BEREKENING V.xls
2017-05-11 09:27 - 2017-05-11 09:27 - 00008500 _____ C:\Users\vdb\Documents\SALDO RECORDBANK OP 11 5 2017 VOOR AFSLITEN NA INTREST 2017.xlsx
2017-05-11 09:17 - 2017-05-11 09:17 - 00168602 _____ C:\Users\vdb\Downloads\BE18652824100665_2015_1_2_1494487038536.pdf
2017-05-11 09:02 - 2017-05-11 09:02 - 00097491 _____ C:\Users\vdb\Downloads\BE79652936986033_2014_2_4_1494486131421.pdf
2017-05-11 08:59 - 2017-05-11 08:59 - 00000578 _____ C:\Users\vdb\Downloads\RECORD Download_1494485999652.csv
2017-05-11 08:59 - 2017-05-11 08:59 - 00000332 _____ C:\Users\vdb\Downloads\RECORD Download_1494485992680.csv
2017-05-11 08:59 - 2017-05-11 08:59 - 00000332 _____ C:\Users\vdb\Downloads\RECORD Download_1494485979101.csv
2017-05-11 08:59 - 2017-05-11 08:59 - 00000332 _____ C:\Users\vdb\Downloads\RECORD Download_1494485978864.csv
2017-05-11 08:58 - 2017-05-11 08:59 - 00000578 _____ C:\Users\vdb\Downloads\RECORD Download_1494485938919.csv
2017-05-10 14:08 - 2017-05-06 10:55 - 00110144 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-64.dll
2017-05-10 12:00 - 2017-05-10 11:59 - 00400456 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2017-05-09 19:05 - 2017-05-09 19:05 - 01398244 _____ C:\Users\vdb\Documents\br aan fidimco dd. 8 5 2017.pdf
2017-05-09 07:47 - 2017-05-09 07:47 - 00107520 _____ C:\Users\vdb\Documents\BEREKENING fIDINCO SINDS AANSTELLING NOG nazien.xls
2017-05-09 07:19 - 2017-05-09 08:38 - 00066145 _____ C:\Users\vdb\Downloads\BEREKENING V.xlsx
2017-05-07 13:49 - 2017-05-07 13:53 - 00000000 ____D C:\Users\vdb\AppData\Roaming\MAGIX
2017-05-07 13:49 - 2017-05-07 13:49 - 00001087 _____ C:\Users\Public\Desktop\MAGIX Foto Manager 15.lnk
2017-05-07 13:49 - 2017-05-07 13:49 - 00000000 ___RD C:\Users\vdb\Documents\MAGIX
2017-05-07 13:49 - 2017-05-07 13:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX
2017-05-07 13:48 - 2017-05-07 13:48 - 00000000 ____D C:\Program Files (x86)\MAGIX
2017-05-07 13:46 - 2017-05-07 13:46 - 00001043 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myphotobook print service NL.lnk
2017-05-07 13:46 - 2017-05-07 13:46 - 00001031 _____ C:\Users\Public\Desktop\myphotobook print service NL.lnk
2017-05-07 13:45 - 2017-05-07 13:45 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2017-05-07 13:45 - 2017-05-07 13:45 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2017-05-07 13:45 - 2017-05-07 13:45 - 00000000 ____D C:\Program Files (x86)\myphotobook print service NL
2017-05-07 13:43 - 2017-05-07 13:53 - 00000000 ____D C:\ProgramData\MAGIX
2017-05-07 12:47 - 2017-05-07 12:47 - 00000000 ____D C:\Users\vdb\AppData\Local\{E790DE1F-2849-4ED8-A0AD-9E40FA1D177A}
2017-05-07 12:46 - 2017-05-07 12:46 - 00000000 ____D C:\Users\vdb\AppData\Local\{DF37537D-11F3-4692-8003-2536AF33B0EF}
2017-05-06 12:05 - 2017-05-06 12:05 - 00000000 ____D C:\ProgramData\{BE2ACE5C-32B7-4777-9BDF-ECF87CDAB705}
2017-05-06 11:25 - 2017-05-06 11:25 - 00000000 ____D C:\Users\vdb\AppData\LocalLow\ADSRemoval
2017-05-06 10:59 - 2017-05-06 10:59 - 00043004 _____ C:\Users\vdb\Documents\cc_20170506_105921.reg
2017-05-06 10:52 - 2017-03-29 18:05 - 00026272 _____ (IObit.com) C:\Windows\system32\Drivers\IMFCameraProtect.sys
2017-05-06 10:51 - 2017-05-19 06:26 - 00002222 _____ C:\Users\Public\Desktop\Advanced SystemCare 10.lnk
2017-05-06 10:51 - 2017-05-06 10:51 - 00003008 _____ C:\Windows\System32\Tasks\ASC10_PerformanceMonitor
2017-05-06 10:51 - 2017-05-06 10:51 - 00002812 _____ C:\Windows\System32\Tasks\ASC10_SkipUac_vdb
2017-05-06 10:51 - 2017-05-06 10:51 - 00000000 ____D C:\ProgramData\{74E9F814-C737-42CC-B721-DBBC4059367A}
2017-05-06 10:50 - 2017-05-06 10:50 - 00001133 _____ C:\Users\Public\Desktop\IObit Malware Fighter.lnk
2017-05-06 10:50 - 2017-05-06 10:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Malware Fighter
2017-05-06 08:00 - 2017-05-06 11:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-05-04 08:08 - 2017-05-06 10:50 - 00002882 _____ C:\Windows\System32\Tasks\Driver Booster SkipUAC (vdb)
2017-05-04 07:28 - 2017-05-10 11:52 - 00000000 _____ C:\Windows\SysWOW64\last.dump
2017-05-02 17:15 - 2017-05-02 17:15 - 00000000 ____D C:\Users\nini gast\AppData\Roaming\Sun
2017-04-30 09:06 - 2017-04-30 09:06 - 00040960 _____ C:\Users\vdb\Documents\FW betreffende facturen ivm Fraude Fidimo.msg
2017-04-28 15:07 - 2017-04-28 15:07 - 26243360 _____ (Belgian Government) C:\Users\vdb\Downloads\belgium-eid-quickinstaller-4.1.20-signed(1).exe
2017-04-27 22:37 - 2017-04-27 22:37 - 00503295 _____ C:\Users\vdb\Documents\28 4 2017 nota exempl door 4 mede-eigenaars ondertekend.pdf
2017-04-27 12:21 - 2017-04-27 14:21 - 00066048 _____ C:\Users\vdb\Documents\VP17106 - BENOYVME EIKENLEI 68-LOCHTENBERGPLEIN 10-12.msg
2017-04-25 17:34 - 2017-05-06 12:03 - 00000000 ____D C:\Program Files\WinZip Smart Monitor
2017-04-25 17:32 - 2017-04-25 17:32 - 14600624 _____ (WinZip) C:\Users\vdb\Downloads\wzdu34(1).exe
2017-04-25 17:31 - 2017-04-25 17:32 - 14600624 _____ (WinZip) C:\Users\vdb\Downloads\wzdu34.exe
2017-04-25 10:57 - 2017-04-25 11:12 - 00010270 _____ C:\Users\vdb\Documents\BETALINGEN DE ROY PETER.xlsx
2017-04-24 09:48 - 2017-04-24 09:48 - 00010473 _____ C:\Users\vdb\Documents\berekenen betaald Tandarts De Roy.xlsx
2017-04-24 09:20 - 2017-04-24 09:20 - 00000000 ____D C:\ProgramData\VirtualizedApplications
2017-04-24 08:40 - 2017-04-24 08:41 - 00000000 ____D C:\Users\vdb\AppData\Local\{A1AF483A-D632-4C62-832E-F5ABDDF7407A}
2017-04-21 09:57 - 2017-04-21 09:57 - 06674472 _____ (383 Media, Inc.) C:\Users\vdb\Downloads\DriverRestore.exe
2017-04-21 09:49 - 2017-05-20 19:35 - 00000000 ____D C:\Users\vdb\AppData\LocalLow\Mozilla
2017-04-21 09:45 - 2017-04-21 09:45 - 00001190 _____ C:\Users\Public\Desktop\eID Viewer.lnk
2017-04-21 09:45 - 2017-04-21 09:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Belgium - eID
2017-04-21 09:44 - 2017-04-21 09:44 - 00000000 ____D C:\Windows\SysWOW64\beidpp
2017-04-21 09:43 - 2017-04-21 09:44 - 26243360 _____ (Belgian Government) C:\Users\vdb\Downloads\Belgium-eID-QuickInstaller-4.1.20-signed.exe
2017-04-21 09:43 - 2017-04-21 09:44 - 26243360 _____ (Belgian Government) C:\Users\vdb\Downloads\Belgium-eID-QuickInstaller-4.1.20-signed (1).exe
2017-04-21 09:34 - 2017-04-21 09:34 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WUDFUsbccidDriver_01_09_00.Wdf
==================== Een Maand Gewijzigd bestanden en mappen ========
(Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)
2017-05-20 19:35 - 2013-09-07 02:33 - 637944832 _____ C:\Users\Public\Documents\postvak in.pst
2017-05-20 17:44 - 2013-04-17 20:07 - 00000000 ____D C:\Users\vdb\Documents\boekhouding Eikenlei
2017-05-20 16:46 - 2012-08-17 10:24 - 00000000 ____D C:\Users\vdb\AppData\Local\CrashDumps
2017-05-20 16:43 - 2009-07-14 06:45 - 00028576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-05-20 16:43 - 2009-07-14 06:45 - 00028576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-05-20 16:28 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-05-20 13:53 - 2013-04-17 20:07 - 00000000 ____D C:\Users\vdb\Documents\appartement eikeneli
2017-05-18 18:03 - 2009-07-14 07:08 - 00032522 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-05-18 11:23 - 2012-05-03 06:12 - 00763826 _____ C:\Windows\system32\perfh013.dat
2017-05-18 11:23 - 2012-05-03 06:12 - 00159896 _____ C:\Windows\system32\perfc013.dat
2017-05-18 11:23 - 2009-07-14 07:13 - 01708374 _____ C:\Windows\system32\PerfStringBackup.INI
2017-05-18 11:22 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2017-05-17 19:32 - 2015-04-11 01:01 - 00002900 _____ C:\Windows\System32\Tasks\Uninstaller_SkipUac_vdb
2017-05-17 10:24 - 2013-02-20 00:07 - 00000000 ____D C:\ProgramData\IObit
2017-05-16 21:08 - 2011-02-11 01:03 - 01683042 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2017-05-16 18:13 - 2017-04-06 04:02 - 00004172 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2017-05-16 11:10 - 2013-04-08 01:23 - 00002175 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-05-16 11:10 - 2013-04-08 01:23 - 00002163 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-05-14 08:01 - 2013-08-06 05:35 - 67822592 _____ C:\Users\vdb\Documents\postvak in.pst
2017-05-13 20:03 - 2015-04-11 00:59 - 00000000 ____D C:\ProgramData\ProductData
2017-05-13 08:16 - 2015-04-04 17:01 - 00158880 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2017-05-11 17:43 - 2013-10-07 17:21 - 00000000 ____D C:\eikenlei brecht
2017-05-11 09:29 - 2012-12-24 15:48 - 00000000 ____D C:\Program Files (x86)\Belgium Identity Card
2017-05-11 07:42 - 2017-04-06 03:58 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-05-11 07:42 - 2012-05-03 07:35 - 00000000 ____D C:\ProgramData\Skype
2017-05-10 14:08 - 2016-11-02 07:27 - 00097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2017-05-10 14:08 - 2015-05-08 15:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-05-10 14:07 - 2015-05-08 15:47 - 00000000 ____D C:\Program Files (x86)\Java
2017-05-10 12:09 - 2012-05-03 07:16 - 00803320 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-05-10 12:09 - 2012-05-03 07:16 - 00144888 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-05-10 12:09 - 2012-05-03 07:16 - 00004312 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-05-10 12:09 - 2012-05-03 07:16 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2017-05-10 12:09 - 2012-05-03 07:16 - 00000000 ____D C:\Windows\system32\Macromed
2017-05-10 12:02 - 2016-02-05 21:11 - 00003886 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1454699507
2017-05-10 11:59 - 2015-04-04 17:01 - 00569192 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2017-05-10 11:59 - 2015-04-04 17:01 - 00339696 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2017-05-10 11:59 - 2015-04-04 17:01 - 00128648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2017-05-10 11:59 - 2015-04-04 17:01 - 00101152 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2017-05-10 11:59 - 2015-04-04 17:01 - 00075704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2017-05-10 11:59 - 2015-04-04 17:01 - 00038296 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2017-05-10 11:58 - 2017-04-06 04:02 - 00334576 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbloga.sys
2017-05-10 11:58 - 2017-04-06 04:02 - 00311808 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsdrivera.sys
2017-05-10 11:58 - 2017-04-06 04:02 - 00190256 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsha.sys
2017-05-10 11:58 - 2017-04-06 04:02 - 00049016 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbuniva.sys
2017-05-10 11:58 - 2016-02-05 20:52 - 00032600 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2017-05-10 11:58 - 2015-04-04 17:01 - 01007160 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2017-05-09 18:53 - 2017-04-06 03:49 - 00000000 ____D C:\ProgramData\Package Cache
2017-05-09 16:07 - 2012-08-14 11:47 - 00000000 ____D C:\Users\vdb
2017-05-07 21:09 - 2012-12-22 22:05 - 00000000 ____D C:\Users\Stephania
2017-05-07 21:09 - 2012-08-14 12:24 - 00000000 ____D C:\Users\vdb\AppData\Local\VirtualStore
2017-05-07 19:50 - 2013-06-17 03:46 - 00000000 ____D C:\Users\vdb\AppData\LocalLow\IObit
2017-05-07 13:45 - 2017-04-08 17:14 - 00000000 ____D C:\Program Files (x86)\Adobe
2017-05-07 13:44 - 2012-08-14 14:40 - 00000000 ____D C:\Users\vdb\AppData\Roaming\Adobe
2017-05-06 12:03 - 2015-05-08 15:46 - 00000000 ____D C:\ProgramData\WinZip
2017-05-06 11:54 - 2017-04-06 07:39 - 00000000 ____D C:\Program Files\Google
2017-05-06 11:54 - 2013-06-04 15:21 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2017-05-06 11:54 - 2013-04-08 01:22 - 00000000 ____D C:\Program Files (x86)\Google
2017-05-06 11:54 - 2013-02-11 12:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-05-06 11:18 - 2013-04-08 01:21 - 00000000 ____D C:\Users\vdb\AppData\Local\Google
2017-05-06 10:55 - 2016-11-02 07:26 - 00110144 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2017-05-06 10:53 - 2015-05-08 15:43 - 00000000 ____D C:\Program Files\Java
2017-05-06 10:51 - 2016-02-25 21:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare
2017-05-06 07:56 - 2015-07-19 20:58 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-05-02 20:01 - 2017-04-11 12:47 - 00000000 ____D C:\Users\nini gast\AppData\LocalLow\Mozilla
2017-05-02 18:39 - 2012-05-03 06:04 - 00000000 ____D C:\ProgramData\Sony Corporation
2017-05-02 18:35 - 2013-01-27 19:58 - 00000000 ____D C:\Users\nini gast\AppData\Local\Sony Corporation
2017-04-30 10:46 - 2012-12-06 01:55 - 00000000 ____D C:\Users\vdb\Desktop\RECHTBANK EXT HD
2017-04-30 08:56 - 2011-03-06 18:46 - 00000000 ____D C:\Users\vdb\Desktop\rekeningen ter controle
2017-04-28 13:53 - 2013-07-06 11:01 - 00000000 ____D C:\Users\vdb\Downloads\afspraak met dhr Krinkels dd 9 4 2013
2017-04-28 13:08 - 2016-02-05 20:47 - 00003360 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2017-04-28 13:08 - 2013-04-08 01:22 - 00003488 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-04-25 11:17 - 2013-02-07 13:27 - 00000000 ____D C:\Users\vdb\AppData\Roaming\SoftGrid Client
2017-04-25 11:17 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2017-04-25 11:16 - 2012-05-03 07:27 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2017-04-24 08:44 - 2015-09-13 09:46 - 00000000 ____D C:\Users\vdb\AppData\Local\Windows Live
2017-04-20 07:40 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
==================== Bestanden in de root van sommige mappen =======
2015-07-19 06:10 - 2015-07-19 06:10 - 6420480 _____ () C:\Program Files (x86)\GUT2C8D.tmp
2016-10-06 09:01 - 2016-10-06 09:01 - 7065600 _____ () C:\Program Files (x86)\GUTD72C.tmp
2013-08-04 01:47 - 2013-08-04 01:54 - 0009304 _____ () C:\Users\vdb\AppData\Roaming\Microsoft Excel 97-2003.EML
2012-12-24 15:32 - 2012-12-24 15:32 - 0000000 _____ () C:\Users\vdb\AppData\Local\simedit.log
2015-04-10 23:40 - 2015-04-10 23:40 - 0000057 _____ () C:\ProgramData\Ament.ini
2016-02-13 18:37 - 2016-02-13 18:37 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
==================== Bamital & volsnap ======================
(Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.)
C:\Windows\system32\winlogon.exe => Bestand is getekend
C:\Windows\system32\wininit.exe => Bestand is getekend
C:\Windows\SysWOW64\wininit.exe => Bestand is getekend
C:\Windows\explorer.exe => Bestand is getekend
C:\Windows\SysWOW64\explorer.exe => Bestand is getekend
C:\Windows\system32\svchost.exe => Bestand is getekend
C:\Windows\SysWOW64\svchost.exe => Bestand is getekend
C:\Windows\system32\services.exe => Bestand is getekend
C:\Windows\system32\User32.dll => Bestand is getekend
C:\Windows\SysWOW64\User32.dll => Bestand is getekend
C:\Windows\system32\userinit.exe => Bestand is getekend
C:\Windows\SysWOW64\userinit.exe => Bestand is getekend
C:\Windows\system32\rpcss.dll => Bestand is getekend
C:\Windows\system32\dnsapi.dll => Bestand is getekend
C:\Windows\SysWOW64\dnsapi.dll => Bestand is getekend
C:\Windows\system32\Drivers\volsnap.sys => Bestand is getekend
LastRegBack: 2016-06-05 18:39
==================== Eind van FRST.txt ============================
