• Hulpvragenden in dit forumonderdeel worden enkel geholpen door daartoe bevoegde teamleden.
    Dit is belangrijk, zodat de hulpvragende goed geholpen kan worden zonder (goedbedoelde) aanvullende berichten van andere leden.
    Reageren op andermans discussie is daarom uitgeschakeld.
  • De afgelopen dagen zijn er meerdere fora waarop bestaande accounts worden overgenomen door spammers. De gebruikersnamen en wachtwoorden zijn via een hack of een lek via andere sites buitgemaakt. Via have i been pwned? kan je controleren of jouw gegeven ook zijn buitgemaakt. Wijzig bij twijfel jouw wachtwoord of schakel de twee-staps-verificatie in.

Internetblokkade door spammails

Status
Niet open voor verdere reacties.

Sed

Bekend gezicht
Lid geworden
10 mei 2005
Berichten
144
Waarderingsscore
0
Hoi Allen,

Afgelopen week is mijn internetverbinding geblokkeerd doordat er in korte tijd meer dan 650 mails zijn verstuurd. Ik heb een virusscan, hitman pro en spybot gedraaid op mijn pc en laptop. Op de laptop werd door AVIRA enkel opencandy.gen gevonden in de PowerIso map.
Ziggo heeft me na het opgeven van bovenstaand verhaal weer aangesloten met de waarschuwing dat ik bij herhaling een week afgesloten wordt. Ik begrijp heel goed waarom dit gedaan wordt en ben er niet zeker van dat opencandy de oorzaak is van de verstuurde mails. Ik heb momenteel poort 25 geblokkeerd zodat er geen mails uit kunnen vanuit mijn ziggo mail adres. Volgens mij blokkeert het niet mijn hotmail berichten.

Toen ik vandaag bitcomet opende klapte internet er uit. Op mijn modem bleek nog wel verbinding te zijn, maar mijn router werkte niet goed, alle apparaten verloren hun verbinding. Na het afsluiten van bitcomet ontstond weer verbinding met de router. Misschien heeft dit er niets mee te maken en is het puur toeval.

Om er zeker van te zijn dat mijn laptop en pc schoon zijn wil ik graag het logje laten controleren. Onderstaande log is van mijn laptop aangezien daar OpenCandy op gevonden is.

(In het logje is te zien dat WireShark draait. Ik vond op internet dat daarmee inzicht te krijgen is in het dataverkeer. Ik snap er echter helemaal niks van, maar als ik daar iets van moet posten hoor ik het graag)

Alvast bedankt!!

Groeten Sed

Scanresultaten van Farbar Recovery Scan Tool (FRST) (x64) Versie: 05-03-2017
Gestart door Amy (Beheerder) op AMY-MSI (05-03-2017 20:46:00)
Gestart vanaf C:\Users\Amy\Desktop
Geladen Profielen: Amy (Beschikbare Profielen: Amy & DefaultAppPool)
Platform: Windows 10 Home Versie 1607 (X64) Taal: Nederlands (Nederland)
Internet Explorer Versie 11 (Standaardbrowser: FF)
Boot Modus: Normal
Handleiding voor Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/


==================== Processen (gefilterd) =================


(Als een item is opgenomen in de fixlist, het proces zal worden gesloten. Het bestand zal niet worden verplaatst.)


(SurfRight B.V.) C:\Program Files\HitmanPro\hmpsched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(New Softwares.net) C:\Windows\SysWOW64\WinFLService.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\nlssrv32.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(X-Rite Inc.) C:\Program Files (x86)\X-Rite\Devices\Services\xrdd.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Micro-Star International Co., Ltd.) C:\Program Files (x86)\System Control Manager\MSIService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
( New Softwares.net) C:\Windows\SysWOW64\WinFLTray.exe
(New Softwares.net) C:\Program Files (x86)\NewSoftware's\Folder Lock\FLComServCtrl.exe
( New Softwares.net) C:\Program Files (x86)\NewSoftware's\Folder Lock\FLComServ.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Micro-Star International Co., Ltd.) C:\Program Files (x86)\System Control Manager\MGSysCtrl.exe
(Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\concentr.exe
(Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\redirector.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\Receiver\Receiver.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\SelfServicePlugin\SelfServicePlugin.exe
(Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) C:\Windows\splwow64.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.110.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.214.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17012.10301.0_x64__8wekyb3d8bbwe\Video.UI.exe
(The Wireshark developer community, hxxp://www.wireshark.org/) C:\Program Files\Wireshark\Wireshark.exe
(The Wireshark developer community) C:\Program Files\Wireshark\dumpcap.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avcenter.exe


==================== Register (gefilterd) ====================


(Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.)


HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [7938080 2009-07-02] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] => C:\Program Files\Realtek\Audio\HDA\Skytel.exe [1833504 2009-07-02] (Realtek Semiconductor Corp.)
HKLM-x32\...\Run: [MGSysCtrl] => C:\Program Files (x86)\System Control Manager\MGSysCtrl.exe [2072576 2009-08-05] (Micro-Star International Co., Ltd.)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [ArcSoft Connection Service] => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [ConnectionCenter] => C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [526648 2016-09-04] (Citrix Systems, Inc.)
HKLM-x32\...\Run: [Redirector] => C:\Program Files (x86)\Citrix\ICA Client\redirector.exe [231736 2016-09-04] (Citrix Systems, Inc.)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [61944 2017-02-22] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [909744 2017-02-17] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKU\PE_C_DEFAULTAPPPOOL\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2016-07-16] (Microsoft Corporation)
HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\Run: [WinFLTray] => C:\windows\SysWow64\WinFLTray.ex
HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\Run: [FLBackup] => C:\Program Files (x86)\NewSoftware's\Folder Lock\FLComServCtrl.ex
HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\Run: [Steam] => D:\Steam\steam.exe [3014224 2016-02-04] (Valve Corporation)
HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\Run: [Spotify Web Helper] => C:\Users\Amy\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1431664 2017-02-05] (Spotify Ltd)
HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [29494400 2016-07-13] (Skype Technologies S.A.)
HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9363672 2017-02-08] (Piriform Ltd)
HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\RunOnce: [Uninstall 17.3.6743.1212\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Amy\AppData\Local\Microsoft\OneDrive\17.3.6743.1212\amd64"
HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\RunOnce: [Uninstall 17.3.6743.1212] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Amy\AppData\Local\Microsoft\OneDrive\17.3.6743.1212"
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-11-30] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-11-30] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-11-30] (Google)
ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => -> Geen bestand
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\i1Profiler Tray.lnk [2016-01-10]
ShortcutTarget: i1Profiler Tray.lnk -> C:\Program Files (x86)\X-Rite\i1Profiler\i1ProfilerTray.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\stle.exe [2010-09-28] (Leithauser Research)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\XRGamma.lnk [2016-01-10]
ShortcutTarget: XRGamma.lnk -> C:\Program Files (x86)\X-Rite\i1Profiler\XRGamma.exe (LOGO Kommunikations- und Drucktechnik GmbH & Co. KG)
BootExecute: autocheck autochk * sdnclean64.exe


==================== Internet (gefilterd) ====================


(Als een item is opgenomen in de fixlist, als het een registry item is wordt verwijderd of hersteld naar de standaard.)


Hosts: Er zijn meer dan n item in Hosts. Zie Hosts deel van Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{41024f9e-4698-4feb-bf1f-ec229ca7365a}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{91a430ef-6dba-47da-bd39-76f949a72427}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{9a08b586-9f67-4c3b-b704-66c94e7c3ca6}: [DhcpNameServer] 192.168.42.129


Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restrictie <======= AANDACHT
HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restrictie <======= AANDACHT
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/nl-nl/?ocid=iehp
SearchScopes: HKLM -> DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL =
SearchScopes: HKLM -> {6ED3F8CD-A3FC-4528-97FF-8D7AFA4140B9} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSITDF&pc=MAMI&src=IE-SearchBox
SearchScopes: HKLM-x32 -> DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL =
SearchScopes: HKLM-x32 -> {3A4C54EC-0219-4DBC-B5B8-C988D5D3AFFB} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSITDF&pc=MAMI&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000 -> DefaultScope {A2610E39-F544-4072-A88C-8C5FF87198DF} URL = hxxp://www.google.nl/search?hl=nl&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000 -> {1A75D00B-4764-4BD7-A207-E7E10ABE056A} URL = hxxp://nl.wikipedia.org/w/index.php?title=Speciaal:Zoeken&search={searchTerms}
SearchScopes: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000 -> {3A4C54EC-0219-4DBC-B5B8-C988D5D3AFFB} URL =
SearchScopes: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000 -> {452CB57D-A3C3-6BAE-5D55-8CCC16A2C6DB} URL = hxxp://www.bing.com/search?q={searchTerms}&pc=Z125&form=ZGAIDF&install_date=20110913&iesrc={referrer:source}
SearchScopes: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000 -> {6ED3F8CD-A3FC-4528-97FF-8D7AFA4140B9} URL =
SearchScopes: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000 -> {A2610E39-F544-4072-A88C-8C5FF87198DF} URL = hxxp://www.google.nl/search?hl=nl&q={searchTerms}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Geen Naam -> {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} -> Geen bestand
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27] (Adobe Systems Incorporated)
BHO-x32: BitComet Helper -> {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} -> C:\Program Files (x86)\BitComet\tools\BitCometBHO_1.5.4.11.dll [2011-04-11] (BitComet)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-10-08] (Oracle Corporation)
BHO-x32: Samsung BHO Class -> {AA609D72-8482-4076-8991-8CDAE5B93BCB} -> C:\Program Files (x86)\Samsung AnyWeb Print\W2PBrowser.dll [2011-04-22] ()
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-10-08] (Oracle Corporation)
Toolbar: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000 -> Geen Naam - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - Geen bestand
DPF: HKLM-x32 {9191F686-7F0A-441D-8A98-2FE3AC1BD913} hxxp://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
DPF: HKLM-x32 {A2505C6C-6F17-456F-89D2-4301FBDC6EC7} hxxps://extranet.rvagroep.nl/nortel_cacheable/iewiper.cab
DPF: HKLM-x32 {D83C1BD1-DCBB-11D4-9425-0050BF33FA6E} hxxp://www.cyclomedia.nl/download/components/CycloScopeLite.cab
Filter-x32: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2016-09-04] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2016-09-04] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2016-09-04] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2016-09-04] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2016-09-04] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2016-09-04] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2016-09-04] (Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2016-09-04] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2016-09-04] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2016-09-04] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2016-09-04] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2016-09-04] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2016-09-04] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2016-09-04] (Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2016-09-04] (Citrix Systems, Inc.)
Filter-x32: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2016-09-04] (Citrix Systems, Inc.)


FireFox:
========
FF DefaultProfile: f5xo4bih.default
FF ProfilePath: C:\Users\Amy\AppData\Roaming\Philips-Songbird\Profiles\2hwfiq8q.default [2013-12-08]
FF NetworkProxy: Philips-Songbird\Profiles\2hwfiq8q.default -> no_proxies_on", "127.0.0.1;localhost"
FF Extension: (7digital Music Store) - C:\Program Files (x86)\Philips\Philips Songbird\extensions\7digital@songbirdnest.com [2013-12-04] [ niet getekend]
FF Extension: (Artwork Extras) - C:\Program Files (x86)\Philips\Philips Songbird\extensions\albumart@songbirdnest.com [2013-12-04] [ niet getekend]
FF Extension: (CD Rip Support) - C:\Program Files (x86)\Philips\Philips Songbird\extensions\cd-rip@songbirdnest.com [2013-12-04] [ niet getekend]
FF Extension: (Concerts) - C:\Program Files (x86)\Philips\Philips Songbird\extensions\concerts@songbirdnest.com [2013-12-04] [ niet getekend]
FF Extension: (AAC Decoding Support) - C:\Program Files (x86)\Philips\Philips Songbird\extensions\ewaacdec@songbirdnest.com [2013-12-04] [ niet getekend]
FF Extension: (H.264 Video Decoding Support) - C:\Program Files (x86)\Philips\Philips Songbird\extensions\ewh264dec@songbirdnest.com [2013-12-04] [ niet getekend]
FF Extension: (MP3 Encoding Support) - C:\Program Files (x86)\Philips\Philips Songbird\extensions\ewmp3enc@songbirdnest.com [2013-12-04] [ niet getekend]
FF Extension: (MPEG-4 Video Decoding Support) - C:\Program Files (x86)\Philips\Philips Songbird\extensions\ewmpeg4dec@songbirdnest.com [2013-12-04] [ niet getekend]
FF Extension: (File association) - C:\Program Files (x86)\Philips\Philips Songbird\extensions\fileassociation@philips.com [2013-12-04] [ niet getekend]
FF Extension: (Philips GoGear Device Manager) - C:\Program Files (x86)\Philips\Philips Songbird\extensions\gogear@songbirdnest.com [2013-12-04] [ niet getekend]
FF Extension: (gonzo) - C:\Program Files (x86)\Philips\Philips Songbird\extensions\gonzo@songbirdnest.com [2013-12-04] [ niet getekend]
FF Extension: (Gracenote Metadata Lookup Provider) - C:\Program Files (x86)\Philips\Philips Songbird\extensions\gracenote@songbirdnest.com [2013-12-04] [ niet getekend]
FF Extension: (Dutch (nl) Language Pack) - C:\Program Files (x86)\Philips\Philips Songbird\extensions\langpack-nl@songbirdnest.com [2013-12-04] [ niet getekend]
FF Extension: (mashTape) - C:\Program Files (x86)\Philips\Philips Songbird\extensions\mashTape@songbirdnest.com [2013-12-04] [ niet getekend]
FF Extension: (MSC Device Support) - C:\Program Files (x86)\Philips\Philips Songbird\extensions\msc@songbirdnest.com [2013-12-04] [ niet getekend]
FF Extension: (MTP Device Support) - C:\Program Files (x86)\Philips\Philips Songbird\extensions\mtp@songbirdnest.com [2013-12-04] [ niet getekend]
FF Extension: (Philips addon manager) - C:\Program Files (x86)\Philips\Philips Songbird\extensions\philips-addon-manager@philips.com [2013-12-04] [ niet getekend]
FF Extension: (Philips Branding) - C:\Program Files (x86)\Philips\Philips Songbird\extensions\philips-branding@philips.com [2013-12-04] [ niet getekend]
FF Extension: (LikeMusic) - C:\Program Files (x86)\Philips\Philips Songbird\extensions\philips-likemusic@philips.com [2013-12-04] [ niet getekend]
FF Extension: (Philips auto msc-mtp switch) - C:\Program Files (x86)\Philips\Philips Songbird\extensions\philips-msc-mtp-switch@philips.com [2013-12-04] [ niet getekend]
FF Extension: (Philips Promotions) - C:\Program Files (x86)\Philips\Philips Songbird\extensions\philips-promotions@philips.com [2013-12-04] [ niet getekend]
FF Extension: (Philips Skin) - C:\Program Files (x86)\Philips\Philips Songbird\extensions\philips-skin@philips.com [2013-12-04] [ niet getekend]
FF Extension: (Philips UI) - C:\Program Files (x86)\Philips\Philips Songbird\extensions\philips-ui@philips.com [2013-12-04] [ niet getekend]
FF Extension: (Purple Rain) - C:\Program Files (x86)\Philips\Philips Songbird\extensions\purplerain@songbirdnest.com [2013-12-04] [ niet getekend]
FF Extension: (Windows Media Playback) - C:\Program Files (x86)\Philips\Philips Songbird\extensions\windowsmedia@songbirdnest.com [2013-12-04] [ niet getekend]
FF SearchPlugin: C:\Users\Amy\AppData\Roaming\Philips-Songbird\Profiles\2hwfiq8q.default\searchplugins\7digital.xml [2013-12-04]
FF ProfilePath: C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\f5xo4bih.default [2017-03-05]
FF Extension: (Avira Browser Safety) - C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\f5xo4bih.default\Extensions\abs@avira.com [2017-03-02]
FF Extension: (Adblock Plus) - C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\f5xo4bih.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-11-25]
FF Extension: (SHA-1 deprecation staged rollout) - C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\f5xo4bih.default\features\{13d3600d-82bf-4331-9e47-50e3f09ebc11}\disableSHA1rollout@mozilla.org.xpi [2017-03-02]
FF Extension: (TLS 1.3 Compatibility Testing 3) - C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\f5xo4bih.default\features\{13d3600d-82bf-4331-9e47-50e3f09ebc11}\tls13-compat-ff51@mozilla.org.xpi [2017-03-02]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_24_0_0_186.dll [2016-12-28] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_24_0_0_186.dll [2016-12-28] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\system32\Adobe\Director\np32dsw.dll [Geen bestand]
FF Plugin-x32: @Citrix.com/npican -> C:\Program Files (x86)\Citrix\ICA Client\npicaN.dll [2016-09-04] (Citrix Systems, Inc.)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2013-04-02] (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2013-10-08] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2013-10-08] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @pandasecurity.com/activescan -> C:\Program Files (x86)\Panda Security\ActiveScan 2.0\npwrapper.dll [2010-07-27] (Panda Security, S.L.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-20] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-20] (Google Inc.)


Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.nu.nl/"
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\ppGoogleNaClPluginChrome.dll => Geen bestand
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\pdf.dll => Geen bestand
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\gcswf32.dll => Geen bestand
CHR Plugin: (20-20 3D Viewer for IKEA) - C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnbjlpbcjbhgeeloohnpbcfblhnkhffm\5.0.93.0_0\NP_2020Player_IKEA.dll (20-20 Technologies)
CHR Plugin: (Intel(R) Threading Building Blocks for Windows) - C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnbjlpbcjbhgeeloohnpbcfblhnkhffm\5.0.93.0_0\tbb.dll (Intel Corporation)
CHR Plugin: (Intel(R) Threading Building Blocks for Windows) - C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnbjlpbcjbhgeeloohnpbcfblhnkhffm\5.0.93.0_0\tbbmalloc.dll (Intel Corporation)
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.300.12) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U30) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll => Geen bestand
CHR Plugin: (DivX Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll => Geen bestand
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll => Geen bestand
CHR Plugin: (Picasa) - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll => Geen bestand
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.0.61118.0\npctrl.dll => Geen bestand
CHR Plugin: (Panda ActiveScan 2.0) - C:\Program Files (x86)\Panda Security\ActiveScan 2.0\npwrapper.dll (Panda Security, S.L.)
CHR Plugin: (Windows Live? Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Shockwave for Director) - C:\windows\system32\Adobe\Director\np32dsw.dll => Geen bestand
CHR Profile: C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default [2017-03-05]
CHR Extension: (Torrent Search) - C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\afbpdhiclgghnffhkinjikglgmolhpee [2016-10-04]
CHR Extension: (Media Hint) - C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\anepbdekljkmmimmhbniglnnanmmkoja [2014-04-12] [UpdateUrl: hxxps://mediahint.com/chromeupdates.xml] <==== AANDACHT
CHR Extension: (Google Drive) - C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-22]
CHR Extension: (Biertijd.com Best fun & babes guaranteed
dotcom sinds 2005) - C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjgdbblninljpemihdmcocedicapflch [2012-09-29]
CHR Extension: (Torrent Search Engine) - C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\blojkkpcfjmhjbcdbdlifkflodghjeng [2012-09-29]
CHR Extension: (YouTube) - C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-03]
CHR Extension: (Facebook) - C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\celnaknmndcdcjcagffhbhciignkeokb [2012-09-29]
CHR Extension: (Adblock Plus) - C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-12-03]
CHR Extension: (Avira Browser Safety) - C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2017-03-05]
CHR Extension: (Offline Documenten) - C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-07-02]
CHR Extension: (nu.nl
Het laatste nieuws het eerst op nu.nl) - C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\hlnijahmebncpnefmpepadcookpglblo [2012-09-29]
CHR Extension: (Dropbox) - C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioekoebejdcmnlefjiknokhhafglcjdl [2015-10-03]
CHR Extension: (Auto HD voor YouTube) - C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\koiaokdomkpjdgniimnkhgbilbjgpeak [2015-05-31]
CHR Extension: (Evernote Web) - C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbfehkoinhhcknnbdgnnmjhiladcgbol [2014-03-05]
CHR Extension: (Download Youtube as mp3) - C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\mepapnoaejebkkpkpacihjlfekoggahp [2013-10-06]
CHR Extension: (YouTube To MP3) - C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjjpcapcaijnbknmbklfjfajjopafpck [2013-10-06]
CHR Extension: (ScrewAds - Block, Skip, Remove YouTube Ads) - C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmbnjoljpgkhiaicaejkdcjbfjknipnc [2013-05-18]
CHR Extension: (Autonieuws van de straat : Autoblog.nl) - C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpjphepfojmppemckknemcnednajablo [2012-09-29]
CHR Extension: (Aanmelden) - C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nangjmijgboblcmlpeedobafiohnalci [2012-09-29]
CHR Extension: (EXIF Reader) - C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nchnjcdahncnilbicljpnbfobpnljnki [2013-08-04]
CHR Extension: (Google Hangouts) - C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nckgahadagoaajjgafhacjanaoiihapd [2017-01-28]
CHR Extension: (OneDrive) - C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nffchahhjecejoiigmnhhicpoabngedk [2014-04-09]
CHR Extension: (Betalingen via Chrome Web Store) - C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-28]
CHR Extension: (20-20 3D Viewer for IKEA) - C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnbjlpbcjbhgeeloohnpbcfblhnkhffm [2012-01-21]
CHR Extension: (VPN in Touch) - C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofpdbhlplgmjciokcplneebmibpclalk [2013-09-12]
CHR Extension: (Netflix) - C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pcfiaopfckdkaalloknhljmkmjljakki [2013-09-27]
CHR Extension: (Chrome Media Router) - C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-02-08]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Amy\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2013-04-30]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx


==================== Services (gefilterd) ====================


(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)


R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [1115552 2017-02-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [487424 2017-02-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [487424 2017-02-17] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1519144 2017-02-17] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [349048 2017-02-22] (Avira Operations GmbH & Co. KG)
S3 BITCOMET_HELPER_SERVICE; C:\Program Files (x86)\BitComet\tools\BitCometService.exe [1296728 2010-12-28] (www.BitComet.com)
R2 FLService; C:\windows\SysWow64\WinFLService.exe [92360 2013-12-15] (New Softwares.net)
R2 HitmanProScheduler; C:\Program Files\HitmanPro\hmpsched.exe [135496 2017-03-01] (SurfRight B.V.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [Bestand niet getekend]
R2 Micro Star SCM; C:\Program Files (x86)\System Control Manager\MSIService.exe [160768 2009-07-10] (Micro-Star International Co., Ltd.) [Bestand niet getekend]
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [4088608 2016-09-21] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [235984 2016-11-24] (Safer-Networking Ltd.)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Bestand niet getekend]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
R2 xrdd.exe; C:\Program Files (x86)\X-Rite\Devices\Services\xrdd.exe [83312 2015-08-11] (X-Rite Inc.)


===================== Drivers (gefilterd) ======================


(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)


S3 ArcSoftKsUFilter; C:\WINDOWS\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
R2 avgntflt; C:\WINDOWS\System32\DRIVERS\avgntflt.sys [161824 2017-02-17] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [163976 2017-02-17] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [44488 2017-02-17] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\WINDOWS\system32\DRIVERS\avnetflt.sys [88488 2017-02-17] (Avira Operations GmbH & Co. KG)
R0 avusbflt; C:\WINDOWS\System32\Drivers\avusbflt.sys [48584 2017-02-17] (Avira Operations GmbH & Co. KG)
R3 EST_BusEnum; C:\WINDOWS\System32\drivers\GenBus.sys [29696 2009-10-06] ( )
S3 EUCR; C:\WINDOWS\System32\drivers\EUCR6SK.SYS [87888 2009-12-05] (ENE Technology Inc.)
R2 hardlock; C:\WINDOWS\system32\drivers\hardlock.sys [331608 2014-11-27] (SafeNet Inc.)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R2 NEWDRIVER; C:\windows\SysWow64\WinVDEdrv6.sys [197648 2013-12-15] ()
R3 NPF; C:\WINDOWS\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
R3 NUS_Bus; C:\WINDOWS\System32\drivers\NUS_Bus.sys [30208 2010-01-28] (Elite Silicon Technology Inc.)
R0 pavboot; C:\WINDOWS\System32\drivers\pavboot64.sys [33800 2009-06-30] (Panda Security, S.L.)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [589824 2016-07-16] (Realtek )
S3 taphss6; C:\WINDOWS\System32\DRIVERS\taphss6.sys [42184 2013-04-24] (Anchorfree Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
R1 WinFLAdrv; C:\Windows\SysWow64\WinFLAdrv.sys [34816 2013-12-15] ()
R2 WinI2C-DDC; C:\WINDOWS\system32\drivers\DDCDrv.sys [20832 2015-08-26] (Nicomsoft Ltd.)
R2 WinI2C-DDC; C:\WINDOWS\SysWOW64\drivers\DDCDrv.sys [10240 2015-08-26] (Nicomsoft Ltd.) [Bestand niet getekend]
R2 WinVDEDrv; C:\windows\SysWow64\WinVDEdrv.sys [225680 2013-12-15] (NewSoftwares.net, Inc.)
U3 idsvc; geen ImagePath


==================== NetSvcs (gefilterd) ===================


(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)




==================== Een Maand Aangemaakt bestanden en mappen ========


(Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)


2017-03-05 20:46 - 2017-03-05 20:47 - 00038714 _____ C:\Users\Amy\Desktop\FRST.txt
2017-03-05 20:45 - 2017-03-05 20:46 - 00000000 ____D C:\FRST
2017-03-05 20:44 - 2017-03-05 20:44 - 00000000 ____D C:\Users\Amy\AppData\Roaming\Avira
2017-03-05 20:42 - 2017-03-05 20:45 - 02423808 _____ (Farbar) C:\Users\Amy\Desktop\FRST64.exe
2017-03-05 20:07 - 2017-03-05 20:07 - 00000000 ____D C:\Program Files\Common Files\AV
2017-03-05 20:07 - 2015-07-28 17:52 - 00821920 _____ (Safer-Networking Ltd. ) C:\Users\Public\Desktop\Post Win10 Spybot-install.exe
2017-03-02 23:18 - 2017-03-05 20:26 - 00000000 ____D C:\Users\Amy\AppData\Roaming\Wireshark
2017-03-02 23:13 - 2017-03-02 23:13 - 00001837 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wireshark.lnk
2017-03-02 23:13 - 2017-03-02 23:13 - 00001565 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wireshark Legacy.lnk
2017-03-02 23:13 - 2017-03-02 23:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap
2017-03-02 23:13 - 2017-03-02 23:13 - 00000000 ____D C:\Program Files (x86)\WinPcap
2017-03-02 23:11 - 2017-03-02 23:13 - 00000000 ____D C:\Program Files\Wireshark
2017-03-02 23:04 - 2017-03-02 23:04 - 00000790 _____ C:\Users\Amy\Desktop\Afbeeldingen - Snelkoppeling.lnk
2017-03-02 21:52 - 2017-03-02 21:52 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_avusbflt_01011.Wdf
2017-03-02 21:50 - 2017-02-17 09:44 - 00163976 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2017-03-02 21:50 - 2017-02-17 09:44 - 00161824 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2017-03-02 21:50 - 2017-02-17 09:44 - 00088488 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys
2017-03-02 21:50 - 2017-02-17 09:44 - 00048584 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avusbflt.sys
2017-03-02 21:50 - 2017-02-17 09:44 - 00044488 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avkmgr.sys
2017-03-02 21:45 - 2017-03-02 21:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2017-03-02 21:45 - 2017-03-02 21:50 - 00000000 ____D C:\ProgramData\Avira
2017-03-02 21:45 - 2017-03-02 21:50 - 00000000 ____D C:\Program Files (x86)\Avira
2017-03-02 21:45 - 2017-03-02 21:45 - 00001295 _____ C:\Users\Public\Desktop\Avira Connect.lnk
2017-03-01 21:55 - 2017-03-01 21:55 - 00001474 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2017-03-01 21:55 - 2017-03-01 21:55 - 00001462 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2017-03-01 21:55 - 2017-03-01 21:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2017-03-01 21:55 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\WINDOWS\system32\sdnclean64.exe
2017-03-01 21:50 - 2017-03-01 21:50 - 00002850 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2017-03-01 21:50 - 2017-03-01 21:50 - 00000873 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-03-01 21:50 - 2017-03-01 21:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-03-01 21:49 - 2017-03-01 21:50 - 00000000 ____D C:\Program Files\CCleaner
2017-03-01 21:35 - 2017-03-01 21:35 - 00870022 _____ C:\Users\Amy\AppData\Local\census.cache
2017-03-01 21:34 - 2017-03-01 21:34 - 00000085 _____ C:\WINDOWS\wininit.ini
2017-03-01 21:33 - 2017-03-01 21:33 - 00249125 _____ C:\Users\Amy\AppData\Local\ars.cache
2017-03-01 21:32 - 2017-03-01 21:32 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2017-03-01 21:31 - 2017-03-05 20:28 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2017-03-01 21:26 - 2017-03-05 20:07 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2017-03-01 21:25 - 2017-03-01 21:25 - 00003636 _____ C:\WINDOWS\System32\Tasks\CreateExplorerShellUnelevatedTask
2017-03-01 21:23 - 2017-03-01 21:23 - 00017022 _____ C:\WINDOWS\system32\.crusader
2017-03-01 21:03 - 2017-03-01 21:03 - 00000010 _____ C:\Users\Amy\AppData\Local\sponge.last.runtime.cache
2017-03-01 20:56 - 2017-03-01 20:56 - 00000000 ____D C:\WINDOWS\Trend Micro
2017-03-01 20:56 - 2017-03-01 20:56 - 00000000 ____D C:\ProgramData\Trend Micro
2017-03-01 20:52 - 2017-03-01 20:52 - 00000036 _____ C:\Users\Amy\AppData\Local\housecall.guid.cache
2017-03-01 20:52 - 2015-05-29 08:43 - 00307352 _____ (Trend Micro Inc.) C:\WINDOWS\system32\Drivers\tmcomm.sys
2017-03-01 20:51 - 2017-03-01 21:25 - 00000000 ____D C:\ProgramData\HitmanPro
2017-03-01 20:51 - 2017-03-01 20:51 - 00001962 _____ C:\Users\Public\Desktop\HitmanPro.lnk
2017-03-01 20:51 - 2017-03-01 20:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
2017-03-01 20:51 - 2017-03-01 20:51 - 00000000 ____D C:\Program Files\HitmanPro


==================== Een Maand Gewijzigd bestanden en mappen ========


(Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)


2017-03-05 19:57 - 2011-11-19 16:26 - 00000000 ____D C:\Users\Amy\AppData\Roaming\BitComet
2017-03-05 19:50 - 2016-08-29 20:30 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-03-05 15:27 - 2017-01-31 00:07 - 00003270 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2017-03-05 15:27 - 2015-10-06 18:31 - 00002430 _____ C:\Users\Amy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-03-05 15:27 - 2015-10-06 18:31 - 00000000 ___RD C:\Users\Amy\OneDrive
2017-03-05 14:22 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-03-05 14:22 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-03-03 12:36 - 2016-11-20 08:46 - 00000000 ____D C:\Users\Amy\AppData\LocalLow\Mozilla
2017-03-02 23:12 - 2015-10-03 08:15 - 00000000 ____D C:\ProgramData\Package Cache
2017-03-02 22:35 - 2016-08-29 21:07 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-03-02 22:35 - 2016-08-29 20:30 - 05079216 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-03-02 22:34 - 2016-07-16 07:04 - 00524288 _____ C:\WINDOWS\system32\config\BBI
2017-03-02 21:37 - 2010-09-03 20:16 - 00000000 ____D C:\Users\Amy\AppData\Local\Adobe
2017-03-01 17:37 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\NDF
2017-03-01 15:18 - 2016-09-16 06:40 - 00000000 ____D C:\Users\Amy\AppData\Local\Citrix
2017-02-27 07:30 - 2013-08-16 11:22 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-02-27 07:24 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-02-27 07:24 - 2010-12-23 15:28 - 138020592 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-02-14 15:23 - 2016-11-17 23:35 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-02-14 15:23 - 2015-11-22 17:42 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-02-08 19:22 - 2010-11-23 14:34 - 00002302 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-02-06 20:48 - 2016-07-16 12:49 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-02-06 20:48 - 2016-07-16 12:49 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-02-05 20:39 - 2013-12-15 15:57 - 00000000 ____D C:\Users\Amy\AppData\Local\Spotify
2017-02-05 20:30 - 2013-12-15 15:57 - 00000000 ____D C:\Users\Amy\AppData\Roaming\Spotify
2017-02-05 19:51 - 2011-09-13 23:35 - 00000000 ____D C:\Users\Amy\AppData\Roaming\vlc


==================== Bestanden in de root van sommige mappen =======


2013-04-10 16:53 - 2013-04-10 16:53 - 0000132 _____ () C:\Users\Amy\AppData\Roaming\Adobe GIF Format CS6 Prefs
2013-12-06 19:55 - 2013-12-06 19:55 - 0000132 _____ () C:\Users\Amy\AppData\Roaming\Adobe PNG Format CS6 Prefs
2012-02-07 20:18 - 2014-06-04 20:17 - 0000268 ___RH () C:\Users\Amy\AppData\Roaming\Synth Textures
2011-06-15 22:08 - 2011-06-15 22:08 - 0000268 ___RH () C:\Users\Amy\AppData\Roaming\Tables
2011-06-15 22:08 - 2011-06-15 22:08 - 0000268 ___RH () C:\Users\Amy\AppData\Roaming\Techno Kit
2011-06-15 22:08 - 2011-06-15 22:08 - 0000268 ___RH () C:\Users\Amy\AppData\Roaming\Templates
2010-10-26 22:07 - 2010-12-23 12:02 - 0000328 _____ () C:\Users\Amy\AppData\Roaming\wklnhst.dat
2013-05-11 22:13 - 2013-05-11 22:15 - 0001456 _____ () C:\Users\Amy\AppData\Local\Adobe Save for Web 13.0 Prefs
2017-03-01 21:33 - 2017-03-01 21:33 - 0249125 _____ () C:\Users\Amy\AppData\Local\ars.cache
2017-03-01 21:35 - 2017-03-01 21:35 - 0870022 _____ () C:\Users\Amy\AppData\Local\census.cache
2013-10-06 07:41 - 2013-10-06 07:48 - 0003584 _____ () C:\Users\Amy\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2017-03-01 20:52 - 2017-03-01 20:52 - 0000036 _____ () C:\Users\Amy\AppData\Local\housecall.guid.cache
2011-03-10 20:15 - 2012-09-11 19:18 - 0000453 _____ () C:\Users\Amy\AppData\Local\Images.fl
2013-09-13 20:20 - 2013-09-13 23:08 - 0000600 _____ () C:\Users\Amy\AppData\Local\PUTTY.RND
2013-08-16 11:01 - 2013-08-18 14:15 - 0136169 _____ () C:\Users\Amy\AppData\Local\RAContactHistory.xml
2012-02-10 17:38 - 2012-06-08 19:47 - 0007606 _____ () C:\Users\Amy\AppData\Local\Resmon.ResmonCfg
2017-03-01 21:03 - 2017-03-01 21:03 - 0000010 _____ () C:\Users\Amy\AppData\Local\sponge.last.runtime.cache
2013-12-15 20:37 - 2013-12-15 21:38 - 0000700 ___SH () C:\Users\Amy\AppData\Local\systemFL7.dat
2013-12-15 20:34 - 2013-12-15 20:37 - 0000693 ___SH () C:\Users\Amy\AppData\Local\win_lockerdb_sys.dat
2013-12-15 20:31 - 2013-12-15 21:38 - 0003465 ___SH () C:\Users\Amy\AppData\Local\win_stlthdb_sys.dat
2016-07-03 22:33 - 2016-07-03 22:33 - 0000016 _____ () C:\ProgramData\mntemp
2012-02-07 20:03 - 2016-01-17 17:39 - 0000020 ____H () C:\ProgramData\PKP_DLdy.DAT
2011-06-15 22:08 - 2011-06-15 22:08 - 0000020 ____H () C:\ProgramData\PKP_DLes.DAT
2011-06-15 22:08 - 2016-01-17 18:28 - 0000020 ____H () C:\ProgramData\PKP_DLet.DAT
2011-06-15 22:08 - 2013-04-28 16:11 - 0000020 ____H () C:\ProgramData\PKP_DLev.DAT
2014-06-04 20:17 - 2014-06-04 20:17 - 0000000 _____ () C:\ProgramData\Stingers
2012-02-07 20:18 - 2014-06-04 20:17 - 0000268 ___RH () C:\ProgramData\Techno Kit
2011-06-15 22:08 - 2011-06-15 22:08 - 0000268 ___RH () C:\ProgramData\Themes
2011-06-15 22:08 - 2011-06-15 22:08 - 0000268 ___RH () C:\ProgramData\Track Settings
2011-06-15 22:08 - 2011-06-15 22:08 - 0000268 ___RH () C:\ProgramData\Trance Pad
2012-02-07 20:18 - 2014-06-04 20:17 - 0000012 ___RH () C:\ProgramData\Trumpet Section
2011-06-15 22:08 - 2011-06-15 22:08 - 0000012 ___RH () C:\ProgramData\Vocal Transformer
2011-06-15 22:08 - 2011-06-15 22:08 - 0000012 ___RH () C:\ProgramData\WebServer
2013-12-15 20:31 - 2013-12-15 21:38 - 0002568 ___SH () C:\ProgramData\win_mpwd_sys.dat
2011-06-15 22:08 - 2011-06-15 22:08 - 0000012 ___RH () C:\ProgramData\Woodwind


Bestanden om te verplaatsen of verwijderen:
====================
C:\ProgramData\win_mpwd_sys.dat
C:\Windows\Tasks\{F29C1970-8FA7-40FC-ABCB-56E147C44F22}.job




Sommige bestanden in TEMP:
====================
2016-08-29 22:36 - 2016-08-29 22:36 - 0515584 _____ () C:\Users\Amy\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll


==================== Bamital & volsnap ======================


(Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.)


C:\WINDOWS\system32\winlogon.exe => Bestand is getekend
C:\WINDOWS\system32\wininit.exe => Bestand is getekend
C:\WINDOWS\explorer.exe => Bestand is getekend
C:\WINDOWS\SysWOW64\explorer.exe => Bestand is getekend
C:\WINDOWS\system32\svchost.exe => Bestand is getekend
C:\WINDOWS\SysWOW64\svchost.exe => Bestand is getekend
C:\WINDOWS\system32\services.exe => Bestand is getekend
C:\WINDOWS\system32\User32.dll => Bestand is getekend
C:\WINDOWS\SysWOW64\User32.dll => Bestand is getekend
C:\WINDOWS\system32\userinit.exe => Bestand is getekend
C:\WINDOWS\SysWOW64\userinit.exe => Bestand is getekend
C:\WINDOWS\system32\rpcss.dll => Bestand is getekend
C:\WINDOWS\system32\dnsapi.dll => Bestand is getekend
C:\WINDOWS\SysWOW64\dnsapi.dll => Bestand is getekend
C:\WINDOWS\system32\Drivers\volsnap.sys => Bestand is getekend


LastRegBack: 2017-03-01 21:42


==================== Eind van FRST.txt ============================





Extra scanresultaten van Farbar Recovery Scan Tool (x64) Versie: 05-03-2017
Gestart door Amy (05-03-2017 20:48:16)
Gestart vanaf C:\Users\Amy\Desktop
Windows 10 Home Versie 1607 (X64) (2016-08-29 20:17:32)
Boot Modus: Normal
==========================================================




==================== Accounts: =============================


Administrator (S-1-5-21-1097378128-3316138746-2142345461-500 - Administrator - Disabled)
Amy (S-1-5-21-1097378128-3316138746-2142345461-1000 - Administrator - Enabled) => C:\Users\Amy
DefaultAccount (S-1-5-21-1097378128-3316138746-2142345461-503 - Limited - Disabled)
Gast (S-1-5-21-1097378128-3316138746-2142345461-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1097378128-3316138746-2142345461-1002 - Limited - Enabled)


==================== Security Center ========================


(Als een item is opgenomen in de fixlist, zal het worden verwijderd.)


AV: Avira Antivirus (Disabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {A16C3F68-9280-E053-1818-342707FECF4D}
AS: Avira Antivirus (Disabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Disabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}


==================== Genstalleerde programma's ======================


(Alleen de adware-programma's met 'verborgen' vlag zou kunnen worden toegevoegd aan de fixlist om ze zichtbaar te maken. De adware-programma's moeten handmatig gedeinstallerd worden.)


Aangifte inkomstenbelasting 2011 (HKLM-x32\...\Aangifte inkomstenbelasting 2011) (Version: - Belastingdienst)
Aangifte inkomstenbelasting 2012 (HKLM-x32\...\Aangifte inkomstenbelasting 2012) (Version: - Belastingdienst)
Aangifte inkomstenbelasting 2013 (HKLM-x32\...\Aangifte inkomstenbelasting 2013) (Version: - Belastingdienst)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.9.0.1380 - Adobe Systems Incorporated)
Adobe Flash Player 24 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 24.0.0.186 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Adobe Photoshop Lightroom 3.4.1 64-bit (HKLM\...\{8BBA6F77-4A79-4E90-BD82-E24669ACF221}) (Version: 3.4.2 - Adobe)
Adobe Photoshop Lightroom 5.2 64-bit (HKLM\...\{54E6C675-3AD4-42E4-957F-31666ABF1603}) (Version: 5.2.1 - Adobe)
Adobe Reader 9.1 - Nederlands (HKLM-x32\...\{AC76BA86-7AD7-1043-7B44-A91000000001}) (Version: 9.1.0 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (HKLM-x32\...\Adobe Shockwave Player) (Version: 11.6.4.634 - Adobe Systems, Inc.)
Akamai NetSession Interface (HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\Akamai) (Version: - Akamai Technologies, Inc)
Albelli Fotoboeken (HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\{B7961CCE-CF36-4858-BC1A-D06D3D25ECE5}_is1) (Version: - Albelli)
Any Video Converter 5.9.6 (HKLM-x32\...\Any Video Converter) (Version: 5.9.6 - Anvsoft)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)
ArcSoft Magic-i Visual Effects 2 (HKLM-x32\...\{8E90189A-A5D4-4C0E-A908-06C4236F98EE}) (Version: 2.0.10.102 - ArcSoft)
ArcSoft Print Creations - Brochures & Flyers (HKLM-x32\...\{01A1A019-E1D8-482A-BE17-5E118D17C0A0}) (Version: - ArcSoft)
ArcSoft Print Creations - Funhouse (HKLM-x32\...\{9591C049-5CAE-4E89-A8D9-191F1899628B}) (Version: - ArcSoft)
ArcSoft Print Creations - Funhouse II (HKLM-x32\...\{3CE47E6B-AE27-4E40-AC54-329EED96B933}) (Version: - ArcSoft)
ArcSoft Print Creations - Greeting Card (HKLM-x32\...\{F04F9557-81A9-4293-BC49-2C216FA325A7}) (Version: - ArcSoft)
ArcSoft Print Creations - Photo Book (HKLM-x32\...\{56589DFE-0C29-4DFE-8E42-887B771ECD23}) (Version: - ArcSoft)
ArcSoft Print Creations - Photo Calendar (HKLM-x32\...\{CA9ED5E4-1548-485B-A293-417840060158}) (Version: - ArcSoft)
ArcSoft Print Creations - Photo Prints (HKLM-x32\...\{95F875CC-1B85-43E6-B3E0-13EA04F3D995}) (Version: - ArcSoft)
ArcSoft Print Creations - Poster Creator (HKLM-x32\...\{5D1C82E7-7EC0-4404-A8AD-36C3B444BC34}) (Version: - ArcSoft)
ArcSoft Print Creations - Scrapbook (HKLM-x32\...\{B0D83FCD-9D42-43ED-8315-250326AADA02}) (Version: - ArcSoft)
ArcSoft Print Creations - Slimline Card (HKLM-x32\...\{007B37D9-0C45-4202-834B-DD5FAAE99D63}) (Version: - ArcSoft)
ArcSoft Print Creations (HKLM-x32\...\{C5D7039E-0803-4FE8-976D-156DE1147E4F}) (Version: 3.0.255.407 - ArcSoft)
ArcSoft WebCam Companion 3 (HKLM-x32\...\{25478065-4CB1-448C-80E4-8C4529017EE3}) (Version: 3.0.32.262 - ArcSoft)
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.25.154 - Avira Operations GmbH & Co. KG)
Avira Connect (HKLM-x32\...\{7b509672-8eb5-466b-b85a-482e26ccc500}) (Version: 1.2.81.30631 - Avira Operations GmbH & Co. KG)
Avira Connect (x32 Version: 1.2.81.30631 - Avira Operations GmbH & Co. KG) Hidden
BitComet 1.35 (HKLM-x32\...\BitComet) (Version: 1.35 - CometNetwork)
BorderMaker (HKLM-x32\...\BorderMaker) (Version: 4.1 - SEMANTICA)
Bridge! (HKLM-x32\...\{22EDD164-65D5-41DD-961E-08C7CDA4D471}) (Version: 1.00 - aerosoft)
BulletProof FTP Client 2010 (remove only) (HKLM-x32\...\BulletProof FTP Client 2010_is1) (Version: - BulletProof Software LLC)
BurnRecovery (HKLM-x32\...\{2892E1B7-E24D-4CCB-B8A7-B63D4B66F89F}) (Version: 3.0.912.401 - Micro-Star International Co., Ltd.)
Camera Control Pro 2 (HKLM-x32\...\{FE96C49B-DB90-405E-A00E-09E38372F880}) (Version: 2.8.0 - Nikon)
CCleaner (HKLM\...\CCleaner) (Version: 5.27 - Piriform)
Citrix Receiver 4.5 (HKLM-x32\...\CitrixOnlinePluginPackWeb) (Version: 14.5.0.10018 - Citrix Systems, Inc.)
Compatibiliteitspakket voor het 2007 Microsoft Office system (HKLM-x32\...\{90120000-0020-0413-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DIYPhotoBits.com Camera Control 5.2 (HKLM-x32\...\{6A5B1D32-CC86-4689-B43C-AD52A9B8773B}) (Version: 5.2 - Raymond Lowe)
Dropbox (HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\Dropbox) (Version: 2.8.2 - Dropbox, Inc.)
ePub to PDF Converter 2.0.4 (HKLM-x32\...\ePub to PDF Converter_is1) (Version: - DONGSOFT Company, Inc.)
Evernote v. 4.5.7 (HKLM-x32\...\{0BE73D3C-B5AF-11E1-933A-984BE15F174E}) (Version: 4.5.7.7146 - Evernote Corp.)
ffdshow v1.1.3562 [2010-09-07] (HKLM-x32\...\ffdshow_is1) (Version: 1.1.3562.0 - )
File Renamer - Basic (HKLM-x32\...\File Renamer - Basic) (Version: 6.3 - Sherrod Computers)
Folder Lock (HKLM-x32\...\Folder Lock) (Version: - New Softwares.net)
Free MP3 Cutter and Editor 2.6 (HKLM-x32\...\Free MP3 Cutter and Editor_is1) (Version: - musetips.com)
Fundy Designer version 1.9.34 (HKLM-x32\...\{2EB6CDD7-506F-4D1A-989A-27DC85A11739}_is1) (Version: 1.9.34 - Fundy Software)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 56.0.2924.87 - Google Inc.)
Google Drive (HKLM-x32\...\{07A12123-B717-496B-B471-48AF6407B433}) (Version: 1.32.4066.7445 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
HD Tune Pro 5.60 (HKLM-x32\...\HD Tune Pro_is1) (Version: - EFD Software)
HiJackThis (HKLM-x32\...\{45A66726-69BC-466B-A7A4-12FCBA4883D7}) (Version: 1.0.0 - Trend Micro)
HitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.15.281 - SurfRight B.V.)
Huur- en zorgtoeslag 2010 (HKLM-x32\...\Huur- en zorgtoeslag 2010) (Version: - Belastingdienst)
Huur- en zorgtoeslag 2011 (HKLM-x32\...\Huur- en zorgtoeslag 2011) (Version: - Belastingdienst)
i1Profiler (HKLM-x32\...\i1Profiler_is1) (Version: 1.6.3 - X-Rite)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.7.0 - LIGHTNING UK!)
Intel(R) Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2008 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.32 - Irfan Skiljan)
Java 7 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217040FF}) (Version: 7.0.450 - Oracle)
Java(TM) 6 Update 30 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216020FF}) (Version: 6.0.300 - Sun Microsystems, Inc.)
JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
KooBits 4.0 (HKLM-x32\...\koobits.koobits4.com) (Version: 4.0.1.9 - UNKNOWN)
KooBits 4.0 (x32 Version: 4.0.1 - UNKNOWN) Hidden
Light Image Resizer 4.0.4.1 (HKLM-x32\...\{EBE030DD-D404-4D92-85E9-8C3624820808}_is1) (Version: 4.0.4.1 - ObviousIdea)
Logitech Harmony Remote Software 7 (HKLM-x32\...\{5C6F884D-680C-448B-B4C9-22296EE1B206}) (Version: 7.7.0.0 - Logitech)
Magic Duels (HKLM-x32\...\Steam App 316010) (Version: - Stainless Games Ltd.)
Magic ISO Maker v5.5 (build 0281) (HKLM-x32\...\Magic ISO Maker v5.5 (build 0281)) (Version: - )
Malwarebytes Anti-Malware versie 1.75.0.1300 (HKLM-x32\...\Malwarebytes' Anti-Malware_is1) (Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft Camera Codec Pack (HKLM-x32\...\{F55AF1BB-B493-4D78-80DA-828958B9098C}) (Version: 16.4.1734.1104 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\OneDriveSetup.exe) (Version: 17.3.6798.0207 - Microsoft Corporation)
Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0413-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40649 (HKLM-x32\...\{5d0723d3-cff7-4e07-8d0b-ada737deb5e6}) (Version: 12.0.40649.5 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Works (HKLM-x32\...\{5158F1F5-FA1B-4D49-B546-55A5004B89BD}) (Version: 9.7.0621 - Microsoft Corporation)
Movavi Video Converter 16 (HKLM-x32\...\Movavi Video Converter 16) (Version: 16.2.0 - Movavi)
Mozilla Firefox 51.0.1 (x86 nl) (HKLM-x32\...\Mozilla Firefox 51.0.1 (x86 nl)) (Version: 51.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 51.0.1.6234 - Mozilla)
msi Software Install (HKLM-x32\...\{07690F1C-04B1-4060-9691-6748ED1826B9}) (Version: 3.0.911.2701 - msi)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB973685) (HKLM-x32\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)
my Picturetown Uploader (HKLM-x32\...\com.mypicturetown.myptuploader.F9C4985A082C78528AFA4529A49FFE7D3454A64B.1) (Version: 1.4 - NIKON CORPORATION)
my Picturetown Uploader (x32 Version: 1.4 - NIKON CORPORATION) Hidden
MyFreeCodec (HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\MyFreeCodec) (Version: - )
Nik Collection (HKLM-x32\...\Nik Collection) (Version: 1.2.11 - Google)
Online Plug-in (x32 Version: 14.5.0.10018 - Citrix Systems, Inc.) Hidden
Panda ActiveScan 2.0 (HKLM-x32\...\ActiveScan 2.0) (Version: 01.04.01.0014 - Panda Security)
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
PeerBlock 1.1 (r518) (HKLM\...\{015C5B35-B678-451C-9AEE-821E8D69621C}_is1) (Version: 1.1.0.518 - PeerBlock, LLC)
Philips Songbird (HKLM-x32\...\Philips Songbird) (Version: 5.4.1980 (1980) - Koninklijke Philips Electronics N.V.)
Photomatix Pro version 4.0.2 (HKLM\...\PhotomatixPro4.0x64_is1) (Version: 4.0.2 - HDRsoft Sarl)
PHOTOWEBSERVICE (HKLM-x32\...\PHOTOWEBSERVICE.09E811A49857C99F38513E5AB8806E09FBF6F7FA.1) (Version: v7.4050 - AREAL - MEDIA, DESENVOLVIMENTO DE SOFTWARE, LDA)
PHOTOWEBSERVICE (x32 Version: 7.255 - AREAL - MEDIA, DESENVOLVIMENTO DE SOFTWARE, LDA) Hidden
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Picture Control Utility (HKLM-x32\...\{87441A59-5E64-4096-A170-14EFE67200C3}) (Version: 1.2.2 - Nikon)
Pinnacle videodriver (HKLM\...\{6DE721A5-5E89-4D74-994C-652BB3C0672E}) (Version: 12.1.0.030 - Pinnacle Systems)
PlayItAll media player 1.0.5 (HKLM-x32\...\PlayItAll media player) (Version: 1.0.5 - PlayItAll)
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
PlayReady PC Runtime x86 (HKLM-x32\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)
PolderbitS Sound Recorder and Editor (32-bit Edition) (HKLM-x32\...\PolderbitSRecorder) (Version: 9.0.0.129 - PolderbitS Software)
PowerISO (HKLM-x32\...\PowerISO) (Version: 5.5 - Power Software Ltd)
PSE11 STI Installer (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
QNAP Finder (HKLM-x32\...\QNAP_FINDER) (Version: 3.4.3.0523 - QNAP Systems, Inc.)
QNAP QGet (HKLM-x32\...\QGet) (Version: 3.0.8.1030 - QNAP Systems, Inc.)
QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
Realtek 8136 8168 8169 Ethernet Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0005 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5886 - Realtek Semiconductor Corp.)
Remote Control USB Driver (HKLM-x32\...\{8471021C-F529-43DE-84DF-3612E10F58C4}) (Version: 2.3.2.317 - )
Samsung AnyWeb Print (HKLM-x32\...\{318DBE01-1E6B-4243-84B0-210391FE789A}) (Version: 2.0.75.0 - Samsung Electronics Co., Ltd.)
Samsung Easy Color Manager (HKLM-x32\...\{778EACF8-06C1-47AA-9284-91550E9BAD39}) (Version: - Samsung Electronics Co., Ltd.)
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.1.13105_6 - Samsung Electronics Co., Ltd.)
Samsung Kies (x32 Version: 2.6.1.13105_6 - Samsung Electronics Co., Ltd.) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.29.0 - SAMSUNG Electronics Co., Ltd.)
Self-service Plug-in (x32 Version: 4.5.0.14155 - Citrix Systems, Inc.) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Skype 7.26 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.26.101 - Skype Technologies S.A.)
Software Informer 1.1 (HKLM-x32\...\Software Informer_is1) (Version: - Informer Technologies, Inc.)
Software Time Lock (HKLM-x32\...\Software Time Lock) (Version: - )
Spotify (HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\Spotify) (Version: 1.0.42.151.g19de0aa6 - Spotify AB)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
StorageCrypt 4.1.0 (HKLM-x32\...\{C1F113F5-7EA6-43E4-9F01-4AF0EF86EAF7}_is1) (Version: - Magiclab software)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
System Control Manager (HKLM-x32\...\{ED9C5D25-55DF-48D8-9328-2AC0D75DE5D8}) (Version: 2.209.0805.005.02 - Micro-Star International Co., Ltd.)
Taalpakket voor Microsoft Visual Studio 2010 Tools for Office Runtime (x64) - NLD (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - NLD) (Version: 10.0.50903 - Microsoft Corporation)
The TVDB XML Fetcher for the WDTV Live Hub (HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\124d7bfeeda3fda0) (Version: 1.7.1.3 - TVDB XML Fetcher)
Transmission Remote GUI 3.2 (HKLM-x32\...\transgui_is1) (Version: - Yury Sidorov)
USB Server (HKLM-x32\...\InstallShield_{1BD0D662-EDF3-412A-8893-F9B405A73662}) (Version: 0.10.0917.0048 - Sharkoon)
USB Server (Version: 0.10.0917.0048 - Sharkoon) Hidden
ViewNX 2 (HKLM-x32\...\{DDD62492-32A7-412B-8AF1-2CF032AD42E3}) (Version: 2.1.2 - Nikon)
VLC media player 1.0.1 (HKLM-x32\...\VLC media player) (Version: 1.0.1 - VideoLAN Team)
Windows Driver Package - ENE (EUCR) USB (12/04/2009 5.89.0.64) (HKLM\...\7F973C87231D745EBF31E772CC38BB9B185D3819) (Version: 12/04/2009 5.89.0.64 - ENE)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{CD19EDD9-1632-4002-9212-7478E4BA0423}) (Version: 14.0.8089.726 - Microsoft Corporation)
WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
WinRAR archiver (HKLM-x32\...\WinRAR archiver) (Version: - )
Wireshark 2.2.4 (64-bit) (HKLM-x32\...\Wireshark) (Version: 2.2.4 - The Wireshark developer community, hxxps://www.wireshark.org)
X-Rite Device Services Manager (HKLM-x32\...\{F29C1970-8FA7-40FC-ABCB-56E147C44F22}) (Version: 2.3.212 - X-Rite)


==================== Aangepaste CLSID (gefilterd): ==========================


(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)


CustomCLSID: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Amy\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Amy\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Amy\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Amy\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Amy\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)


==================== Geplande Taken (gefilterd) =============


(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)


Task: {0810588A-1E9E-4533-BA91-38D3AE636334} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => %SystemRoot%\ehome\mcupdate.exe
Task: {0E340339-66E4-4AFD-92C5-4FDC7C24B984} - System32\Tasks\{D6EE75C7-0F68-4BB6-A05B-CA7B3AB7420C} => pcalua.exe -a I:\Setup.exe -d I:\
Task: {1FBED381-1734-4E39-BBA6-5AA4AA4975AB} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => %SystemRoot%\ehome\ehPrivJob.exe
Task: {22BAE83D-9B7D-48F8-8D1E-C7591951761B} - System32\Tasks\{5D4F23E5-7AC5-4BED-A3E0-562E2463F051} => pcalua.exe -a E:\SA52XX_installer_WMP.exe -d E:\
Task: {23DC1A07-61BA-4D00-8C3F-93FA95E4675B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-28] (Google Inc.)
Task: {241733F0-D895-43EF-909E-CC38B4E47676} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => %SystemRoot%\ehome\ehPrivJob.exe
Task: {3C7246CE-988C-402F-9A6F-75624DD27808} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\Amy\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe
Task: {4EBC2F2D-50CF-4BF9-81F1-CD399DBF783D} - System32\Tasks\{9AE48527-8FA3-453E-997E-C039A39B744B} => pcalua.exe -a "C:\Users\Amy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D49GHKG1\hz2010_win_setup[1].exe" -d C:\Users\Amy\Desktop
Task: {4F11D597-3405-4E00-898B-7FD6645AA659} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-28] (Google Inc.)
Task: {55F1541C-050C-4596-B457-796FEA35048D} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.)
Task: {5EBF2BFB-D3D4-4FF2-80D0-7374934C75A5} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => %windir%\ehome\MCUpdate.exe
Task: {61DE75D0-AAD9-4338-A97E-CC2D551AC4B3} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => %SystemRoot%\ehome\ehPrivJob.exe
Task: {65BE8F7E-B08A-485F-BD25-AE28BAFABD22} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Geen bestand <==== AANDACHT
Task: {667F31A4-A4D8-4442-8D9E-4374B7B1CBB9} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => %SystemRoot%\ehome\ehPrivJob.exe
Task: {713C36F1-F75B-463E-A4B5-CDEA02632D12} - System32\Tasks\X-Rite Device Services Software Updater => C:\Program Files (x86)\X-Rite\Devices\Services\XRD Software Update.exe [2015-08-11] (X-Rite Inc.)
Task: {714437DD-ABB5-456C-9CA1-836A43E57B1A} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => %SystemRoot%\ehome\ehPrivJob.exe
Task: {8967C0FE-DE6C-4FCF-B2F7-AE8A6B909C47} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => %SystemRoot%\ehome\mcupdate.exe
Task: {89F85E76-B926-4B43-B734-A08F874BD2BF} - System32\Tasks\{3882478D-C70E-4891-B8D1-6A8E91E95925} => pcalua.exe -a C:\Users\Amy\Downloads\ADE_2.0_Installer.exe -d C:\Users\Amy\Downloads
Task: {8AEFDF57-43F8-4429-A288-9527BA6AB395} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => %SystemRoot%\ehome\mcupdate.exe
Task: {8D4DECB9-A982-4714-98CC-8A3A821B855A} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Geen bestand <==== AANDACHT
Task: {9A492B1F-385D-4274-93A7-296BA67403D0} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Geen bestand <==== AANDACHT
Task: {A3274A8B-5C15-419A-9322-4E639A7AEE7F} - System32\Tasks\AdobeAAMUpdater-1.0-Amy-msi-Amy => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04] (Adobe Systems Incorporated)
Task: {A42FBCE1-8118-44F1-BBCE-831335B3A272} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Geen bestand <==== AANDACHT
Task: {A48015C2-6172-414C-8965-2E90227B2F7F} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => %SystemRoot%\ehome\ehPrivJob.exe
Task: {A522359E-9371-4C45-B3D4-45174B1439F6} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => %SystemRoot%\ehome\ehrec.exe
Task: {A578B8DA-C018-4E93-BF7C-5D91A2E62C33} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-02-08] (Piriform Ltd)
Task: {B627DD65-0274-4EDB-BBBD-793AD918A71D} - System32\Tasks\{E53DB491-B9F1-49C1-8380-932E9BC2922C} => pcalua.exe -a I:\setup.exe -d I:\
Task: {B73DC593-65EA-404C-BCE3-F3591AB08A34} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => %SystemRoot%\ehome\mcupdate.exe
Task: {B7FDB0F4-9EF0-4EA4-824A-20C386D40F1B} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => %SystemRoot%\ehome\ehPrivJob.exe
Task: {B879879F-0A91-42CC-8300-C62958131C26} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2015-08-26] (Apple Inc.)
Task: {B89AFF7C-5CA4-4465-96AF-C41EE20776B2} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Geen bestand <==== AANDACHT
Task: {B8B942E9-7A32-4B64-A0F1-AB54455705A3} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => %SystemRoot%\ehome\ehPrivJob.exe
Task: {BE29E9B8-DABE-4B67-9926-FD011C4E1027} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Geen bestand <==== AANDACHT
Task: {C2C10530-E3FB-4953-B09A-C9D8CF9DC6B6} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => %SystemRoot%\ehome\ehrec.exe
Task: {C55353CC-AFB1-4924-A6F5-3F01966EF3BF} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Geen bestand <==== AANDACHT
Task: {C5B2320B-5635-428C-9B84-7C9DC2FF8A3B} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => %SystemRoot%\ehome\ehPrivJob.exe
Task: {C83337C8-C0F5-4696-A896-C2266F5FDDFA} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Geen bestand <==== AANDACHT
Task: {CC932A44-AE40-473E-A9C0-93A3A62CB371} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => %SystemRoot%\ehome\mcupdate.exe
Task: {D61DD979-6C6E-4384-8BA5-20A0FA55EC13} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-12-28] (Adobe Systems Incorporated)
Task: {DBA47769-BEC3-480F-8103-D75CAF947D77} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => %SystemRoot%\ehome\mcupdate.exe
Task: {DBDF5CAC-6BDC-4966-8177-765DAE31DE8B} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2016-03-21] (Safer-Networking Ltd.)
Task: {DC267B4B-2332-4973-8492-6E3707061395} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Geen bestand <==== AANDACHT
Task: {DF5568A3-F65E-4C33-87F1-660C02621998} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2016-03-21] (Safer-Networking Ltd.)
Task: {E0958FB6-2E69-4A6D-827F-174A6F8A5848} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECK
Task: {E474E3CD-9EE9-4C7B-89BD-E424FB7D1613} - System32\Tasks\{F29C1970-8FA7-40FC-ABCB-56E147C44F22} => C:\Users\Amy\AppData\Local\Temp\is-OUDHU.tmp\XRD Manager.exe <==== AANDACHT
Task: {E569DEA9-81ED-488F-9A4D-DE397057B107} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => %SystemRoot%\ehome\ehPrivJob.exe
Task: {EC136B3D-06AF-439E-9286-066AB3FA5E55} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => %SystemRoot%\ehome\ehPrivJob.exe
Task: {ECCE4A05-808E-453D-9363-71D5ADFBCACD} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => %SystemRoot%\ehome\ehPrivJob.exe
Task: {EFFB74B8-4A9B-4E09-B0B8-6CF60C6133A0} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => %SystemRoot%\ehome\mcupdate.exe
Task: {F781F170-915F-46EF-A217-BFB24C341288} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe
Task: {F7BF3F9B-8994-4368-8D9A-81E5FEFC2646} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => %SystemRoot%\ehome\ehPrivJob.exe


(Als een item is opgenomen in de fixlist, de taak (job) bestand wordt verplaatst. Het bestand dat wordt uitgevoerd door de taak zal niet worden verplaatst.)


Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\X-Rite Device Services Software Updater.job => C:\Program Files (x86)\X-Rite\Devices\Services\XRD Software Update.exe
Task: C:\WINDOWS\Tasks\{F29C1970-8FA7-40FC-ABCB-56E147C44F22}.job => C:\Users\Amy\AppData\Local\Temp\is-OUDHU.tmp\XRD Manager.exe ?/exenoupdates /exelang 1043 /noprereqs /qr AI_RESUME=1 ADDLOCAL=MainFeature,XRDdrivers64 ACTION=INSTALL EXECUTEACTION=INSTALL ROOTDRIVE D:\ TRANSFORMS=:1043 AI_PREREQFILES=C:\Users\Amy\AppData\Local\Temp\{F29C1970-8FA7-40FC-ABCB-56E147C44F22}\drivers64.msi AI_PREREQDIRS=C:\Users\Amy\AppData\Local\Temp AI_SETUPEXEPATH=C:\Users\Amy\AppData\Local\Temp\is-OUDHU.tmp\XRD Manager.exe SETUPEXEDIR=C:\Users\Amy\AppData\Local\Temp\is-OUDHU.tmp <==== AANDACHT


==================== Snelkoppelingen =============================


(De items kunnen worden opgenomen in de fixlist.txt om hersteld of verwijderd te worden.)


==================== Geladen Modules (gefilterd) ==============


2008-09-08 10:19 - 2008-09-08 10:19 - 00022016 _____ () C:\WINDOWS\System32\cl31cl6.dll
2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-12-20 12:32 - 2016-12-09 11:29 - 02681200 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-12-20 12:32 - 2016-12-09 11:29 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-12-20 12:32 - 2016-12-09 11:29 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2005-06-07 20:26 - 2005-06-07 20:26 - 00043008 _____ () C:\Program Files (x86)\WinRAR 3.61 Multi\rarext64.dll
2016-09-15 19:44 - 2016-09-07 05:56 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-01-11 21:34 - 2016-12-21 08:09 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-01-11 21:33 - 2016-12-21 07:54 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-01-11 21:33 - 2016-12-21 07:48 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-01-11 21:33 - 2016-12-21 07:48 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-01-11 21:33 - 2016-12-21 07:48 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-01-11 21:33 - 2016-12-21 07:53 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2012-11-26 22:54 - 2012-11-26 22:54 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2017-02-23 21:15 - 2017-02-23 21:17 - 00073728 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.110.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-02-23 21:15 - 2017-02-23 21:17 - 00179712 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.110.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-02-23 21:15 - 2017-02-23 21:17 - 42895360 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.110.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-02-08 19:27 - 2017-02-08 19:31 - 02215424 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.110.0_x64__kzf8qxf38zg5c\roottools.dll
2017-03-05 14:20 - 2017-03-05 14:21 - 00019456 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.214.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2017-03-05 14:20 - 2017-03-05 14:21 - 21149696 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.214.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2017-03-05 14:20 - 2017-03-05 14:21 - 05380096 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.214.10010.0_x64__8wekyb3d8bbwe\MediaEngine.dll
2016-06-04 07:19 - 2016-06-04 07:20 - 00680448 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.214.10010.0_x64__8wekyb3d8bbwe\Microsoft.DesignCore.dll
2017-03-05 14:20 - 2017-03-05 14:21 - 00387584 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.214.10010.0_x64__8wekyb3d8bbwe\Microsoft.RichMedia.Ink.Controls.dll
2017-03-05 14:20 - 2017-03-05 14:21 - 01047552 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.214.10010.0_x64__8wekyb3d8bbwe\Microsoft.Sharing.dll
2016-03-05 09:19 - 2016-03-05 09:19 - 00291328 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.214.10010.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll
2017-01-23 22:55 - 2017-01-23 22:55 - 00585296 _____ () C:\Program Files\Wireshark\libgcrypt-20.dll
2017-01-23 22:55 - 2017-01-23 22:55 - 00122960 _____ () C:\Program Files\Wireshark\zlib1.dll
2017-01-23 22:55 - 2017-01-23 22:55 - 00108112 _____ () C:\Program Files\Wireshark\libgpg-error6-0.dll
2017-01-23 22:55 - 2017-01-23 22:55 - 00215456 _____ () C:\Program Files\Wireshark\libcares-2.dll
2017-01-23 22:55 - 2017-01-23 22:55 - 00493832 _____ () C:\Program Files\Wireshark\libGeoIP-1.dll
2017-01-23 22:55 - 2017-01-23 22:55 - 01032312 _____ () C:\Program Files\Wireshark\libgnutls-28.dll
2017-01-23 22:55 - 2017-01-23 22:55 - 00744560 _____ () C:\Program Files\Wireshark\libsmi-2.dll
2017-01-23 22:55 - 2017-01-23 22:55 - 00269392 _____ () C:\Program Files\Wireshark\lua52.dll
2017-01-23 22:55 - 2017-01-23 22:55 - 00460864 _____ () C:\Program Files\Wireshark\libgmp-10.dll
2017-01-23 22:55 - 2017-01-23 22:55 - 00197792 _____ () C:\Program Files\Wireshark\libhogweed-2-4.dll
2017-01-23 22:55 - 2017-01-23 22:55 - 00195248 _____ () C:\Program Files\Wireshark\libnettle-4-6.dll
2017-01-23 22:55 - 2017-01-23 22:55 - 00260296 _____ () C:\Program Files\Wireshark\libp11-kit-0.dll
2017-01-23 22:55 - 2017-01-23 22:55 - 00093536 _____ () C:\Program Files\Wireshark\libtasn1-6.dll
2017-01-23 22:55 - 2017-01-23 22:55 - 00045472 _____ () C:\Program Files\Wireshark\libffi-6.dll
2017-03-01 21:55 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2017-03-01 21:55 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2017-03-01 21:55 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2017-03-01 21:55 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2017-03-01 21:55 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2015-07-13 10:33 - 2015-07-13 10:33 - 01592832 _____ () C:\Program Files (x86)\X-Rite\Devices\rm200\GoldenEye.dll
2013-06-21 14:03 - 2013-06-21 14:03 - 02633728 _____ () C:\Program Files (x86)\X-Rite\Devices\colormunki\colormunki.dll
2017-02-08 19:22 - 2017-02-01 10:01 - 01870168 _____ () C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\libglesv2.dll
2017-02-08 19:22 - 2017-02-01 10:01 - 00085848 _____ () C:\Program Files (x86)\Google\Chrome\Application\56.0.2924.87\libegl.dll


==================== Alternate Data Streams (gefilterd) =========


(Als een item is opgenomen in de fixlist, alleen de ADS wordt verwijderd.)




==================== Veilige Modus (gefilterd) ===================


(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. De "AlternateShell" waarde wordt hersteld.)




==================== Bestandskoppeling (gefilterd) ===============


(Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd.)




==================== Internet Explorer vertrouwde/beperkte toegang ===============


(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd.)


IE restricted site: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\123simsen.com -> www.123simsen.com


Er zijn 7718 Meer websites.




==================== Hosts inhoud: ==========================


(Als nodig Hosts: opdracht kan worden opgenomen in de fixlist om Hosts te resetten.)


2009-07-14 03:34 - 2014-06-04 20:15 - 00000060 ____A C:\WINDOWS\system32\Drivers\etc\hosts


127.0.0.1 localhost
127.0.0.1 sams.nikonimaging.com


==================== Andere gebieden ============================


(Momenteel is er geen automatische fix voor dit onderdeel.)


HKU\PE_C_DEFAULTAPPPOOL\Control Panel\Desktop\\Wallpaper ->
HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Amy\AppData\Roaming\Microsoft\Windows Photo Viewer\Achtergrond van Windows Photo Viewer.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is ingeschakeld.


==================== MSCONFIG/TASK MANAGER Uitgeschakelde items ==


MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^QNAP QGet.lnk => C:\windows\pss\QNAP QGet.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Amy^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Amy^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^EvernoteClipper.lnk => C:\windows\pss\EvernoteClipper.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Amy^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^KooBits 4.lnk => C:\windows\pss\KooBits 4.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Amy^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2010 Schermopname en Snel starten.lnk => C:\windows\pss\OneNote 2010 Schermopname en Snel starten.lnk.Startup
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AdobeCS6ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: Akamai NetSession Interface => "C:\Users\Amy\AppData\Local\Akamai\netsession_win.exe"
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: GoogleChromeAutoLaunch_6C099CC1D08F8E3594D1CD726B240377 => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
MSCONFIG\startupreg: GoogleDriveSync => "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
MSCONFIG\startupreg: KiesPreload => C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload
MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
MSCONFIG\startupreg: PWRISOVM.EXE => C:\Program Files (x86)\PowerISO\PWRISOVM.EXE -startup
MSCONFIG\startupreg: QGet => "C:\Program Files (x86)\QNAP\QGet\QGet.exe" /min
MSCONFIG\startupreg: Sharkoon USB Server => "C:\Program Files (x86)\Sharkoon\USB Server\Sharkoon USB Server.exe" /h
MSCONFIG\startupreg: Skytel => C:\Program Files\Realtek\Audio\HDA\Skytel.exe
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: SwitchBoard => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
HKLM\...\StartupApproved\Run: => "Skytel"
HKLM\...\StartupApproved\Run32: => "ArcSoft Connection Service"
HKLM\...\StartupApproved\Run32: => "APSDaemon"
HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\StartupApproved\Run: => "Spotify Web Helper"
HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\...\StartupApproved\Run: => "Skype"


==================== Firewall regels (gefilterd) ===============


(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)


FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
FirewallRules: [{B40BBFC1-63C2-46BE-98A0-6AC3A4366F34}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [UDP Query User{DBCF8095-1B9B-4DB8-B9AE-DFACDC7299D9}C:\users\amy\appdata\local\microsoft\windows\inetcookies\downloads\java\jre1.7.0_75\bin\java.exe] => (Allow) C:\users\amy\appdata\local\microsoft\windows\inetcookies\downloads\java\jre1.7.0_75\bin\java.exe
FirewallRules: [TCP Query User{39FF8B75-D6AA-4E96-91E8-F0532104CD18}C:\users\amy\appdata\local\microsoft\windows\inetcookies\downloads\java\jre1.7.0_75\bin\java.exe] => (Allow) C:\users\amy\appdata\local\microsoft\windows\inetcookies\downloads\java\jre1.7.0_75\bin\java.exe
FirewallRules: [{9F7E0AB1-C255-4100-BAE8-6A824A112455}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe
FirewallRules: [UDP Query User{6CF9DAD4-8041-4FF9-8EA1-6A12B680C6AF}C:\program files (x86)\sharkoon\usb server\sharkoon usb server.exe] => (Block) C:\program files (x86)\sharkoon\usb server\sharkoon usb server.exe
FirewallRules: [TCP Query User{FD43E10B-445C-448B-90A7-24896F8A993D}C:\program files (x86)\sharkoon\usb server\sharkoon usb server.exe] => (Block) C:\program files (x86)\sharkoon\usb server\sharkoon usb server.exe
FirewallRules: [UDP Query User{6E382882-7B9F-40F3-A859-DEF4D7C3D8E9}C:\program files (x86)\sharkoon\usb server\sharkoon usb server.exe] => (Allow) C:\program files (x86)\sharkoon\usb server\sharkoon usb server.exe
FirewallRules: [TCP Query User{A7A9C2A2-7F5A-4AD0-AF00-53194FF16F60}C:\program files (x86)\sharkoon\usb server\sharkoon usb server.exe] => (Allow) C:\program files (x86)\sharkoon\usb server\sharkoon usb server.exe
FirewallRules: [UDP Query User{45686D48-40FA-4684-95C1-7C9C05728E5B}C:\users\amy\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\amy\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{5B2D224E-02E7-42F5-8F01-6C9D92B147C0}C:\users\amy\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\amy\appdata\roaming\spotify\spotify.exe
FirewallRules: [{08535DFF-B3EB-43A6-A047-541BE9416318}] => (Allow) LPort=20642
FirewallRules: [{0FF7059E-8033-4166-8980-B88D75971D35}] => (Allow) LPort=20642
FirewallRules: [UDP Query User{0DE027E7-6879-4B5C-8BFC-0D870546CA9C}C:\program files (x86)\microsoft office\office14\groove.exe] => (Block) C:\program files (x86)\microsoft office\office14\groove.exe
FirewallRules: [TCP Query User{1BAA371E-62E4-4658-AB0E-E0AF69F8BDED}C:\program files (x86)\microsoft office\office14\groove.exe] => (Block) C:\program files (x86)\microsoft office\office14\groove.exe
FirewallRules: [UDP Query User{F5ACF1F2-6072-43D5-AE12-0675C14F5311}C:\program files (x86)\qnap\qget\qget.exe] => (Allow) C:\program files (x86)\qnap\qget\qget.exe
FirewallRules: [TCP Query User{ACF74BAC-0ADA-4D72-8010-025708C3BB79}C:\program files (x86)\qnap\qget\qget.exe] => (Allow) C:\program files (x86)\qnap\qget\qget.exe
FirewallRules: [UDP Query User{CF1CB685-6AFA-44C5-BE8E-6B0EEE8278CF}C:\users\amy\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\amy\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{8D97D992-85A7-4DE1-8E15-FEA7BE5AAF70}C:\users\amy\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\amy\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{980C4F41-2C4C-4D8C-8C96-BAA1B26D0569}C:\users\amy\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\amy\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{EBDF911F-0098-4F02-BA35-9426B483B290}C:\users\amy\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\amy\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{0A850FFE-904C-4937-878F-8705950FD145}C:\program files (x86)\qnap\finder\finder.exe] => (Allow) C:\program files (x86)\qnap\finder\finder.exe
FirewallRules: [TCP Query User{CB203468-67AC-448C-B656-1D7CC6399461}C:\program files (x86)\qnap\finder\finder.exe] => (Allow) C:\program files (x86)\qnap\finder\finder.exe
FirewallRules: [UDP Query User{594FB825-63F9-4D8C-AE19-852BD2091807}C:\program files (x86)\qnap\finder\finder.exe] => (Allow) C:\program files (x86)\qnap\finder\finder.exe
FirewallRules: [TCP Query User{B018AD6C-49BA-4EE1-9E43-8CDDD106B70A}C:\program files (x86)\qnap\finder\finder.exe] => (Allow) C:\program files (x86)\qnap\finder\finder.exe
FirewallRules: [UDP Query User{F815AE97-08E8-458F-B72A-761166D7E4C1}C:\program files (x86)\bitcomet\bitcomet.exe] => (Allow) C:\program files (x86)\bitcomet\bitcomet.exe
FirewallRules: [TCP Query User{D5966F55-699D-43B8-BD7F-10F98835E4BB}C:\program files (x86)\bitcomet\bitcomet.exe] => (Allow) C:\program files (x86)\bitcomet\bitcomet.exe
FirewallRules: [{FBBFC593-334D-4E6D-8E21-FE5A182624D3}] => (Allow) C:\Program Files (x86)\BitComet\BitComet.exe
FirewallRules: [{6CE8FDE6-6EF0-4CE9-BE39-CE8B3F0CBFB2}] => (Allow) C:\Program Files (x86)\BitComet\BitComet.exe
FirewallRules: [{F66639F9-7D8D-4FC3-9387-45C06174C189}] => (Allow) C:\Program Files (x86)\Samsung Easy Color Manager\Samsung Easy Color Manager.exe
FirewallRules: [{155D12D1-89D1-4F13-A18E-7693EC79B3EB}] => (Allow) C:\Program Files (x86)\Samsung Easy Color Manager\Samsung Easy Color Manager.exe
FirewallRules: [UDP Query User{F45177C4-7CB2-40BE-9A24-256CA6DD6088}C:\program files (x86)\internet explorer\iexplore.exe] => (Allow) C:\program files (x86)\internet explorer\iexplore.exe
FirewallRules: [TCP Query User{3599D2DF-D4A6-4F40-9DF0-5FEA3580B495}C:\program files (x86)\internet explorer\iexplore.exe] => (Allow) C:\program files (x86)\internet explorer\iexplore.exe
FirewallRules: [{A3EF61C9-03CC-4388-8246-440375A4A85B}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{3567F475-C89C-4EF8-A742-8198C03CF879}] => (Allow) LPort=1900
FirewallRules: [{B1E1B0B0-EE0F-4D61-9CB4-30BD08056D39}] => (Allow) LPort=2869
FirewallRules: [{DBC56023-060E-4579-90C8-DE9DC6D950EA}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{C6574BDE-E6E7-4F00-8C02-8BBC1AD9DE9D}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [{56232E76-30A7-4F12-A8BA-66C638F7A61B}] => (Allow) svchost.exe
FirewallRules: [{DDC3382E-180A-406D-B848-D5B1F35D894C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{B8FE9A44-A015-4900-80F8-1DD8B59CBEDB}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{725C5214-F569-4384-98EF-FA88B158204D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{719A1323-3D8D-4951-A096-9261AB5E1308}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{5F5E1AED-B1CE-4780-A5FE-7C47708588A2}] => (Allow) D:\Steam\Steam.exe
FirewallRules: [{25D83CC3-BDC1-4A7C-9024-03A22476FAC3}] => (Allow) D:\Steam\Steam.exe
FirewallRules: [{B6F979D6-E939-4BAD-B891-49568EC4FC00}] => (Allow) D:\Steam\bin\steamwebhelper.exe
FirewallRules: [{7980F31B-9914-4D5C-8681-687CF1EE41CD}] => (Allow) D:\Steam\bin\steamwebhelper.exe
FirewallRules: [{2C2498CC-2D87-4B10-A538-BD53D9F3E8C2}] => (Allow) D:\Steam\steamapps\common\Magic Duels\MagicDuels.exe
FirewallRules: [{A7F78BBF-7543-497A-97FB-8F6BBBBFA4D7}] => (Allow) D:\Steam\steamapps\common\Magic Duels\MagicDuels.exe
FirewallRules: [{8FD7431B-4D14-4E2A-81AF-94164027F97F}] => (Allow) LPort=5454
FirewallRules: [{50B4E57F-7062-4CC3-A348-A0C641B6EA07}] => (Allow) C:\WINDOWS\system32\hasplms.exe
FirewallRules: [TCP Query User{4EB4834A-2CEF-46DD-92A9-53E7AA6593BB}C:\users\amy\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\amy\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{92F98120-B14B-4768-9DC6-4372473F19DD}C:\users\amy\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\amy\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{AB73FA9A-C6C3-4348-BCE7-94C93B344D4B}C:\users\amy\desktop\xmage all\java\jre1.8.0_102\bin\java.exe] => (Allow) C:\users\amy\desktop\xmage all\java\jre1.8.0_102\bin\java.exe
FirewallRules: [UDP Query User{9A0EFD49-EEEE-482B-BD28-D794B47A697C}C:\users\amy\desktop\xmage all\java\jre1.8.0_102\bin\java.exe] => (Allow) C:\users\amy\desktop\xmage all\java\jre1.8.0_102\bin\java.exe
FirewallRules: [{E3696EBA-15B2-4609-8404-39F401A7E563}] => (Allow) C:\Program Files (x86)\Fundy Designer\Fundy Designer.exe
FirewallRules: [{627BA37B-CB3D-425D-9A3A-9C5D548BCA3E}] => (Allow) C:\Program Files (x86)\Fundy Designer\Fundy Designer.exe
FirewallRules: [{21492FA2-A12F-4868-A97C-2E8485FB13D9}] => (Allow) C:\Program Files (x86)\Fundy Designer\Fundy Designer.exe
FirewallRules: [{88A4697F-E00B-4F12-B2AA-06A9CCFC35D7}] => (Allow) C:\Program Files (x86)\Fundy Designer\Fundy Designer.exe
FirewallRules: [{2B778A62-EFBE-4339-AF12-AD1F13A629E0}] => (Allow) C:\Program Files (x86)\Fundy Designer\Fundy Designer.exe
FirewallRules: [{1CB8DDA7-396A-42AF-A9AE-681237B59B02}] => (Allow) C:\Program Files (x86)\Fundy Designer\Fundy Designer.exe
FirewallRules: [{BA4965C7-04A0-426D-90E5-0A924AFC2B2B}] => (Block) %ProgramFiles% (x86)\Fundy Designer\Fundy Designer.exe
FirewallRules: [{2EFAC66C-6FFA-44E2-B1F9-D4F848F50488}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
DomainProfile\AuthorizedApplications: [C:\Program Files (x86)\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe] => Enabled:Logitech Harmony Remote Software 7
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe] => Enabled:Logitech Harmony Remote Software 7
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service


==================== Herstelpunten =========================


26-01-2017 20:45:51 Windows Update
27-02-2017 07:23:01 Windows Update


==================== Defecte Apparaatbeheer Apparaten =============




==================== Eventlog fouten: =========================


Applicatiefouten:
==================
Error: (03/04/2017 10:21:23 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Naam van toepassing met fout: Explorer.EXE, versie: 10.0.14393.479, tijdstempel: 0x58258a90
Naam van module met fout: ntdll.dll, versie: 10.0.14393.479, tijdstempel: 0x5825887f
Uitzonderingscode: 0xc0000005
Foutmarge: 0x000000000000766d
Id van proces met fout: 0x1510
Starttijd van toepassing met fout: 0x01d2952d30d85262
Pad naar toepassing met fout: C:\WINDOWS\Explorer.EXE
Pad naar module met fout: C:\WINDOWS\SYSTEM32\ntdll.dll
Rapport-id: a9815d35-a87f-4477-8240-076f364d8cce
Volledige pakketnaam met fout:
Relatieve toepassings-id van pakket met fout:


Error: (03/02/2017 11:13:03 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Fout in de Volume Shadow Copy-service: onverwachte fout bij het aanroepen van routine QueryFullProcessImageNameW. hr = 0x80070006, De ingang is ongeldig.
.




Bewerking:
Asynchrone bewerking uitvoeren


Context:
Huidige status: DoSnapshotSet


Error: (03/02/2017 11:12:30 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: De service Cryptografische services is mislukt tijdens het verwerken van aanroep OnIdentity() op het object System Writer.


Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.


System Error:
Toegang geweigerd.
.


Error: (03/02/2017 10:32:42 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: Amy-msi)
Description: Het pakket windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy+microsoft.windows.immersivecontrolpanel is beindigd omdat het onderbreken te lang duurde.


Error: (03/02/2017 09:45:33 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Amy-msi)
Description: Het activeren van de app Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI is mislukt door de fout -2147024891. Kijk in het logboek Microsoft-Windows-TWinUI/Operational voor aanvullende informatie.


Error: (03/02/2017 09:40:08 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Naam van toepassing met fout: OneDriveStandaloneUpdater.exe, versie: 17.3.6743.1212, tijdstempel: 0x584f7687
Naam van module met fout: unknown, versie: 0.0.0.0, tijdstempel: 0x00000000
Uitzonderingscode: 0xc0000005
Foutmarge: 0x00f0d130
Id van proces met fout: 0xecc
Starttijd van toepassing met fout: 0x01d29394b20430db
Pad naar toepassing met fout: C:\Users\Amy\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
Pad naar module met fout: unknown
Rapport-id: 88c16595-3420-4f21-8b3e-ac1f59bb0d52
Volledige pakketnaam met fout:
Relatieve toepassings-id van pakket met fout:


Error: (03/02/2017 09:38:24 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 4107) (User: )
Description: Het uitpakken van een basislijst uit het CAB-bestand voor automatische updates is mislukt op <http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> met de fout: De gegevens zijn ongeldig.
.


Error: (03/02/2017 09:38:24 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 4107) (User: )
Description: Het uitpakken van een basislijst uit het CAB-bestand voor automatische updates is mislukt op <http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> met de fout: De gegevens zijn ongeldig.
.


Error: (03/02/2017 09:38:24 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 4107) (User: )
Description: Het uitpakken van een basislijst uit het CAB-bestand voor automatische updates is mislukt op <http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> met de fout: De gegevens zijn ongeldig.
.


Error: (03/02/2017 09:38:24 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 4107) (User: )
Description: Het uitpakken van een basislijst uit het CAB-bestand voor automatische updates is mislukt op <http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> met de fout: De gegevens zijn ongeldig.
.




Systeemfouten:
=============
Error: (03/05/2017 02:15:23 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
en APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
aan de gebruiker NT AUTHORITY\SYSTEM SID (S-1-5-18) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services.


Error: (03/04/2017 11:42:04 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: De server {995C996E-D918-4A8C-A302-45719A6F4EA7} heeft zich niet binnen de vereiste termijn bij DCOM geregistreerd.


Error: (03/04/2017 11:42:04 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: De server {995C996E-D918-4A8C-A302-45719A6F4EA7} heeft zich niet binnen de vereiste termijn bij DCOM geregistreerd.


Error: (03/04/2017 10:20:46 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
en APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
aan de gebruiker NT AUTHORITY\SYSTEM SID (S-1-5-18) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services.


Error: (03/03/2017 12:53:51 PM) (Source: disk) (EventID: 11) (User: )
Description: Het stuurprogramma heeft een controllerfout gevonden in \Device\Harddisk1\DR2.


Error: (03/03/2017 12:34:31 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
en APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
aan de gebruiker NT AUTHORITY\SYSTEM SID (S-1-5-18) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services.


Error: (03/02/2017 10:51:58 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
en APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
aan de gebruiker NT AUTHORITY\SYSTEM SID (S-1-5-18) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services.


Error: (03/02/2017 10:37:56 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: De Avira Web Protection-service is afhankelijk van de Avira Real-Time Protection-service, die vanwege de volgende fout niet kan worden gestart:
Na het starten is de service blijven hangen.


Error: (03/02/2017 10:37:56 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: De Avira Mail Protection-service is afhankelijk van de Avira Real-Time Protection-service, die vanwege de volgende fout niet kan worden gestart:
Na het starten is de service blijven hangen.


Error: (03/02/2017 10:37:54 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: De Avira Real-Time Protection-service is bij het starten vastgelopen.




==================== Geheugen info ===========================


Processor: Intel(R) Core(TM) i3 CPU M 330 @ 2.13GHz
Percentage geheugen in gebruik: 71%
Totaal fysiek RAM-geheugen: 3886.03 MB
Beschikbaar fysiek RAM-geheugen: 1118.27 MB
Totaal Virtueel geheugen: 7854.03 MB
Beschikbaar Virtual geheugen: 3971.5 MB


==================== Schijven ================================


Drive c: (OS_Install) (Fixed) (Total:273.4 GB) (Free:35.1 GB) NTFS ==>[systeem met boot componenten (verkregen van schijf)]
Drive d: (Data) (Fixed) (Total:180.26 GB) (Free:143.83 GB) NTFS


==================== MBR & Partitietabel ==================


========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: DA0E4DC7)
Partition 1: (Not Active) - (Size=12 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=27)
Partition 3: (Not Active) - (Size=273.4 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=180.3 GB) - (Type=07 NTFS)


==================== Eind van Addition.txt ============================
 
Des installeer ten eerst Spybot - Search & Destroy 2 - dit tool presteert nauwelijks beter dan zijn voorganger.
Des installeer ook alle Java in jouw Windows - wat ik gevonden heb stamt uit 2013 - dus hopeloos antiek en een enorm beveiligingsrisico in jouw Windows.
Na het verwijderen hiervan dien je absoluut eerst jouw computer opnieuw opstarten.


Vertel ook hoe jij e-mailt - is dat via een programma in Windows of via webmail?



Waarschuwing: onderstaande bewerking is enkel voor deze computer bedoeld, het toepassen hiervan in een andere computer kan tot schade in Windows leiden.


We gaan
51a5c8edc4692-icon1337952077.png


Farbar Recovery Scan Tool (FRST.exe) opnieuw gebruiken.

Open een nieuw kladblok (of anders: notepad) bestand, via "Start\Alle programmas\Bureau-accessoires\Kladblok (of Notepad)".
Kopieer en plak de volgende (blauwe tekst in het code-venster) in het lege kladblokvenster.

Code:
[B][color=#0000FF]
start

CreateRestorePoint:
EmptyTemp:
CloseProcesses:

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restrictie <======= AANDACHT
HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restrictie <======= AANDACHT
BHO: Geen Naam -> {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} -> Geen bestand
CHR Plugin: (DivX Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll => Geen bestand
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll => Geen bestand
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll => Geen bestand
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.0.61118.0\npctrl.dll => Geen bestand
CHR Plugin: (Shockwave for Director) - C:\windows\system32\Adobe\Director\np32dsw.dll => Geen bestand
CHR Extension: (Media Hint) - C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\anepbdekljkmmimmhbniglnnan mmkoja [2014-04-12] [UpdateUrl: hxxps://mediahint.com/chromeupdates.xml] <==== AANDACHT
C:\Users\Amy\AppData\Local\housecall.guid.cache

cmd: ipconfig /flushdns
cmd: netsh winsock reset
[/COLOR][/B]

Sla nu dit kladblokbestand in de dezelfde locatie waar ook FRST.exe aanwezig is op als Fixlist.txt

Farbar Recovery Scan Tool (FRST.exe) met de fixlist.txt gebruiken
  • Windows Vista, Windows 7, Windows 8 en Windows 10: via rechtsklik op FRST.exe en kies voor "Als Administrator uitvoeren".
  • Als het programma wordt gestart, klik dan op Ja in de popup.
  • Druk op de Fix knop.
  • Na de fix wordt een logbestand - Fixlog.txt - in dezelfde locatie aangemaakt van waaruit FRST.exe is gestart.
  • Post de inhoud van dit logbestand in jouw volgende bericht.
 
Hoi Abraham,

Bedankt voor je antwoord. Op deze laptop gebruik ik enkel de mail via de browser. Op de pc maak ik gebruik van Outlook.
Ik heb de genoemde programma's verwijderd en de fix gedraaid. Hieronder het logje:

Fix resultaat van Farbar Recovery Scan Tool (x64) Versie: 05-03-2017
Gestart door Amy (06-03-2017 21:52:14) Run:1
Gestart vanaf C:\Users\Amy\Desktop
Geladen Profielen: Amy (Beschikbare Profielen: Amy & DefaultAppPool)
Boot Modus: Normal
==============================================

fixlist inhoud:
*****************
start

CreateRestorePoint:
EmptyTemp:
CloseProcesses:

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restrictie <======= AANDACHT
HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restrictie <======= AANDACHT
BHO: Geen Naam -> {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} -> Geen bestand
CHR Plugin: (DivX Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll => Geen bestand
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll => Geen bestand
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll => Geen bestand
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.0.61118.0\npctrl.dll => Geen bestand
CHR Plugin: (Shockwave for Director) - C:\windows\system32\Adobe\Director\np32dsw.dll => Geen bestand
CHR Extension: (Media Hint) - C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\anepbdekljkmmimmhbniglnnan mmkoja [2014-04-12] [UpdateUrl: hxxps://mediahint.com/chromeupdates.xml] <==== AANDACHT
C:\Users\Amy\AppData\Local\housecall.guid.cache

cmd: ipconfig /flushdns
cmd: netsh winsock reset
*****************

Herstelpunt is succesvol gemaakt.
Proces succesvol afgesloten.
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer => sleutel is succesvol verwijderd.
HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\SOFTWARE\Policies\Microsoft\Internet Explorer => sleutel is succesvol verwijderd.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170} => sleutel is succesvol verwijderd.
HKCR\CLSID\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170} => sleutel niet gevonden.
C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll => niet gevonden.
C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll => niet gevonden.
C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll => niet gevonden.
C:\Program Files (x86)\Microsoft Silverlight\5.0.61118.0\npctrl.dll => niet gevonden.
C:\windows\system32\Adobe\Director\np32dsw.dll => niet gevonden.
C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\anepbdekljkmmimmhbniglnnan mmkoja <==== AANDACHT => niet gevonden
C:\Users\Amy\AppData\Local\housecall.guid.cache => is succesvol verplaatst.

========= ipconfig /flushdns =========


Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========= Eind van CMD: =========


========= netsh winsock reset =========


Sucessfully reset the Winsock Catalog.
You must restart the computer in order to complete the reset.


========= Eind van CMD: =========


=========== EmptyTemp: ==========

BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 200238566 B
Java, Flash, Steam htmlcache => 44246661 B
Windows/system/drivers => 4778 B
Edge => 285059 B
Chrome => 695213144 B
Firefox => 408007236 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 39222 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 128 B
systemprofile32 => 128 B
LocalService => 103502 B
NetworkService => 52480 B
Amy => 3540243874 B
DefaultAppPool => 39222 B

RecycleBin => 0 B
EmptyTemp: => 4.6 GB tijdelijke gegevens verwijderd.

================================


Het systeem moest herstart worden.

==== Eind van Fixlog 21:56:07 ====
 
Malwarebytes MBAM is vernieuwd!


Download
51a46ae42d560-malwarebytes_anti_malware.png
MalwareBytes Anti-Malware.

Let op bij de installatie van MBAM: in het laatste installatievenster staan twee vinkjes bij de meldingen,
haal nu het bovenste vinkje weg (MBAM als volledige demo-versie gebruiken) en maak de installatie af.
Daarna kan je Malwarebytes MBAM als gratis versie telken opnieuw gebruiken!

  • Windows 2000 en Windows XP: dubbelklik op mbam-setup.exe.
  • Windows Vista, Windows 7, Windows 8: en Windows 10: via rechtsklik op mbam-setup.exe en kies voor "Als Administrator uitvoeren".
  • Klik in het menu van Malwarebytes ANTI-MALWARE op Instellingen" en daar op "Detectie en Bescherming" en zet vervolgens een vinkje bij "Scan naar rootkits".
  • Klik vervolgens op de knop Scan nu om een bedreigingsscan uit te voeren.
  • Er zal nu gecontroleerd worden op beschikbare updates, klik hier op "Nu bijwerken als er beschikbare updates zijn.
  • De scan wordt nu automatisch gestart,wanneer de scan gereed is en er bedreigingen zijn gedetecteerd krijgt u hier een overzicht van.

  • Wanneer er geen bedreigingen zijn gedetecteerd klikt u na de scan op Bekijk gedetailleerd logboek.
  • Klik vervolgens op de knop Exporteer en kies de optie "Tekstbestand (*.txt)".
  • Geef vervolgens een bestandsnaam op voor het opslaan van het logbestand, bijvoorbeeld MBAM Scanlog.
  • Kies bijvoorbeeld het bureaublad als opslaglocatie en klik vervolgens op de knop Opslaan.

  • Wanneer er wel bedreigingen zijn gedetecteerd klikt u na de scan op Acties toepassen.
  • Bij de melding om de computer opnieuw op te starten klikt u op Ja / Yes.
  • Open na de herstart MalwareBytes Anti-Malware en klik bovenaan op Historie en selecteer Programmalogboeken.
  • Klik op de nieuwste Scan Log.
  • Klik op "Exporteer" en kies de optie "Tekstbestand (*.txt)".
    5557b93ba94ab-Malwarebytes_Exporteer_ScanLog.png
  • Geef vervolgens een bestandsnaam op voor het opslaan van het logbestand, bijvoorbeeld MBAM Scanlog.
  • Kies bijvoorbeeld het bureaublad als opslaglocatie en klik vervolgens op de knop Opslaan.
    532aab157609a-MBAM-Scan.png

MBAM-Log posten:
  • Kopieer nu de inhoud van het zojuist opgeslagen log en plak dit in uw nieuwe antwoord erbij.
 
Malwarebytes
www.malwarebytes.com

-Logboekdetails-
Scandatum: 06-03-17
Scantijd: 22:41
Logboekbestand:
Beheerder: Ja

-Software-informatie-
Versie: 3.0.6.1469
Versie componenten: 1.0.75
Update pakketversie: 1.0.1442
Licentie: Proef

-Systeeminformatie-
Besturingssysteem: Windows 10
Processor: x64
Bestandssysteem: NTFS
Gebruiker: Amy-msi\Amy

-Scansamenvatting-
Scantype: Bedreigingsscan
Resultaat: Voltooid
Objecten gescand: 490100
Verstreken tijd: 14 min, 55 sec

-Scanopties-
Geheugen: Ingeschakeld
Opstarten: Ingeschakeld
Bestandssysteem: Ingeschakeld
Archieven: Ingeschakeld
Rootkits: Uitgeschakeld
Heuristiek: Ingeschakeld
POP: Uitgeschakeld
POA: Ingeschakeld

-Scandetails-
Proces: 0
(Geen kwaadaardige items gedetecteerd)

Module: 0
(Geen kwaadaardige items gedetecteerd)

Registersleutel: 2
PUP.Optional.SerachQU, HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\SOFTWARE\APPDATALOW\SOFTWARE\searchqutoolbar, In quarantaine, [17596], [242928],1.0.1442
PUP.Optional.Bandoo.AppFlsh, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1FC8F7F3-5FBE-4B4A-8AB2-D0F3F86CF360}, In quarantaine, [11261], [253595],1.0.1442

Registerwaarde: 6
PUP.Optional.EazelBar, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APPID\TOOLBAR.DLL|APPID, In quarantaine, [248], [316653],1.0.1442
PUP.Optional.EazelBar, HKLM\SOFTWARE\CLASSES\APPID\TOOLBAR.DLL|APPID, In quarantaine, [248], [316653],1.0.1442
PUP.Optional.EazelBar, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\TOOLBAR.DLL|APPID, In quarantaine, [248], [316653],1.0.1442
PUP.Optional.Bandoo.AppFlsh, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{1FC8F7F3-5FBE-4B4A-8AB2-D0F3F86CF360}|APPPATH, In quarantaine, [11261], [253595],1.0.1442
PUP.Optional.Bandoo.AppFlsh, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS|APPINIT_DLLS, In quarantaine, [11261], [-1],0.0.0
PUP.Optional.Bandoo.AppFlsh, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS|APPINIT_DLLS, In quarantaine, [11261], [-1],0.0.0

Registerdata: 0
(Geen kwaadaardige items gedetecteerd)

Gegevensstroom: 0
(Geen kwaadaardige items gedetecteerd)

Map: 3
PUP.Optional.MediaHint.ChrPRST, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\anepbdekljkmmimmhbniglnnanmmkoja\0.2.3_0\images, In quarantaine, [19990], [302272],1.0.1442
PUP.Optional.MediaHint.ChrPRST, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\anepbdekljkmmimmhbniglnnanmmkoja\0.2.3_0, In quarantaine, [19990], [302272],1.0.1442
PUP.Optional.MediaHint.ChrPRST, C:\USERS\AMY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\ANEPBDEKLJKMMIMMHBNIGLNNANMMKOJA, In quarantaine, [19990], [302272],1.0.1442

Bestand: 5
PUP.Optional.MediaHint.ChrPRST, C:\USERS\AMY\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\ANEPBDEKLJKMMIMMHBNIGLNNANMMKOJA\0.2.3_0\MANIFEST.JSON, In quarantaine, [19990], [302272],1.0.1442
PUP.Optional.MediaHint.ChrPRST, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\anepbdekljkmmimmhbniglnnanmmkoja\0.2.3_0\images\off_32.png, In quarantaine, [19990], [302272],1.0.1442
PUP.Optional.MediaHint.ChrPRST, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\anepbdekljkmmimmhbniglnnanmmkoja\0.2.3_0\images\on_32.png, In quarantaine, [19990], [302272],1.0.1442
PUP.Optional.MediaHint.ChrPRST, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\anepbdekljkmmimmhbniglnnanmmkoja\0.2.3_0\app.js, In quarantaine, [19990], [302272],1.0.1442
PUP.Optional.MediaHint.ChrPRST, C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\anepbdekljkmmimmhbniglnnanmmkoja\0.2.3_0\icon_128.png, In quarantaine, [19990], [302272],1.0.1442

Fysieke sector: 0
(Geen kwaadaardige items gedetecteerd)


(end)
 
Allereerst nu in Kladblok op de menubalk - Opmaak klikken en dan het vinkje weghalen bij Automatische Terugloop.


Graag de twee logs in n keer posten - gebruik de tools in de volgorde zoals aangegeven.

Stap 1
Download
51e281a62c183-Junkware_Removal_Tool_icon_Canned_1351185104.png.jpg
Junkware Removal Tool by Thisisu.
Downloadlokatie: Dit programma absoluut naar het bureaublad downloaden of anders naar het bureaublad verplaatsen!
Opmerkingen:
  • Alle openstaande programma's en webpagina's dienen afgesloten te zijn.
  • Het is raadzaam de actieve beveiligingssoftware te de-activeren, zodat mogelijke conflicten met JRT.exe uitgsloten worden.:
  • Hier en hier vindt je gegevens hoe antivirusprogramma's en spywarescanners te deaktiveren.
  • Dat tijdens de scan van JRT.exe tijdelijk de snelkoppelingen verdwijnen van het bureaublad, is normaal.
Junkware Removal Tool by Thisisu opstarten:
  • Windows 2000 en Windows XP: dubbelklik op JRT.exe.
  • Windows Vista, Windows 7, Windows 8 en Windows 10: via rechtsklik op JRT.exe en kies voor "Als Administrator uitvoeren".
  • JRT.exe zal daarna Windows gaan scannen.
  • Deze scan kan afhankelijk van de systeemspecificaties soms vrij lang duren, wees dus geduldig.
  • Indien de scan voltooid is, zal een logje (JRT.txt) op het bureaublad opgeslagen worden en automatisch openen.
  • Post de inhoud van dit log in je volgende bericht.

Stap 2
Download
52186926180a1-adwcleaner_nieuw.png
AdwCleaner by Xplode.
Downloadlokatie: Dit programma absoluut naar het bureaublad downloaden of anders naar het bureaublad verplaatsen!
Opmerkingen:
  • Alle openstaande programma's en webpagina's dienen afgesloten te zijn.
AdwCleaner opstarten:
  • Windows 2000 en Windows XP: dubbelklik op adwcleaner.exe.
  • Windows Vista, Windows 7, Windows 8 en Windows 10: via rechtsklik op adwcleaner.exe en kies voor "Als Administrator uitvoeren".
AdwCleaner is opgestart:
  • Klik op de knop Scan
  • Is de scan gereed, klik dan op de knop Verwijderen
  • Klik bij AdwCleaner Afsluiting van de programma's op OK
  • Klik bij AdwCleaner Herstarten noodzakelijk op OK
AdwCleaner logbestand:
  • Nadat de PC opnieuw is opgestart, opent een logfile.
  • Ingeval het log niet opent, is dit alsnog terug te vinden in C:\AdwCleaner\AdwCleaner[R0, of 1, of 2].txt
  • Post vervolgens de inhoud van dit log in je volgende bericht.
 
Hoi Abraham,

Hierbij de logjes

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.1 (02.11.2017)
Operating System: Windows 10 Home x64
Ran by Amy (Administrator) on di 07-03-2017 at 10:20:11,13
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 777

Successfully deleted: C:\ProgramData\mntemp (File)
Successfully deleted: C:\Users\Amy\AppData\Local\{0001BE96-B8D1-4BED-9E1B-B10D063F5E47} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{001E1576-FDAE-403F-869C-3B8AC9E9F9E8} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{00240689-6595-4FFD-A151-27194E98FE2F} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{007F4BAE-6813-40B8-BAD5-63FE1FA8AC2F} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{00A509AF-CEBE-4028-ABC8-2670D603E05A} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{017A098F-8E6B-41DC-8EC5-50F251C97828} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{021A1D2C-4908-468D-9BBB-03AAFDF48742} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{023C32B1-DED4-409B-923E-93694ABB7A55} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{025692C7-EBBA-44A7-BA03-C745B4039D46} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{02786E59-8FF2-4412-8019-FFFAA1D98E31} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{0298C7D3-E248-4D72-B5B6-5BB201C7DE7A} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{02C4D62D-ACB8-4F32-A153-2D13BAA87D21} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{030C190E-AD7D-48F7-BDF6-7A280BD9EE39} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{032A2A08-DA5E-43C5-89F8-8918A79DC784} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{03D8B01D-0B6E-46A2-931C-12AC5380FDB0} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{041FCC29-7867-46E7-8F5E-F57633B79E80} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{04236EA1-754B-4B4A-B303-8E617F8A6028} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{04252660-345D-4CAB-B2D8-0E12B559C285} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{04C30D96-9C8A-41A8-BE5C-1C33522DC1C6} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{05283BD6-B0E5-48F6-B532-2E39D72D1400} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{05ED6A0B-1D50-4AE3-A9BB-D97D209FB106} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{06466DE8-B3A3-4A5C-B76E-A452C9045B93} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{064C8E3B-7309-4E0C-8CED-27240018A580} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{06B7E1CE-931C-45E2-B42A-D51CFF17DF25} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{06E56538-603A-4EF7-BA0E-9ED2B6C6D399} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{07137CDF-C90F-49D2-AA28-A3BE47235DB4} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{07203C8E-5A69-4CBD-987A-F88C557BA869} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{074ACA03-18CA-44C6-822F-31C518FB056A} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{075184D9-7C42-487F-A274-282E69A9657C} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{0762A5F7-4990-4D2D-B1D2-F980A6F5EB55} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{0799F241-DA1E-4AA7-9226-52AB17EC944F} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{07A6ED23-0519-4101-83E6-009A77E4FA15} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{07FC2317-D573-4C9E-B2A4-8A50DF7797D4} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{083D87B3-8B91-4B9D-8333-D6539F14E3AE} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{086E6BE2-7E6C-40FD-92FD-4319813CC92B} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{09671338-CEA8-4D99-A381-3FFF8B75A500} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{09ADF6B6-1124-4161-92ED-00FAEF791136} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{09C37057-D221-47DB-9EC7-85735E0488D2} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{09E7D774-9CB5-452E-B17B-15499BEEA909} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{0ACCD128-5EFB-48BB-A6EE-8CA4C8A5E352} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{0AD1C8BF-F599-46B6-94EE-3862B37F9083} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{0B07CE4F-1271-48D8-BF0D-4A12E023F931} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{0B092069-A6DF-4F3A-A677-B4B7AD641965} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{0B69A021-7C72-4100-849A-485808535677} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{0B723359-44C9-4642-A7D9-A76F42089540} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{0B954BB9-4B12-48DF-92A9-2A61475446B9} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{0D713702-4958-4115-A3B3-3E7F9904B185} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{0D9B6B76-0F33-4BBC-8182-57A425E545FC} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{0DD0DE16-9119-4B84-916E-ED2D7F75655D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{0ED4844C-2334-4FE7-891E-769829E55CA5} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{0F542F7E-B5F2-4041-917B-22376BED6164} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{10139AF0-A261-4254-AB53-FAB81CA64650} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{1021EB91-7D24-4543-8E7D-74641479D6D1} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{10470CB0-74BC-44D1-8115-4EC1752AE496} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{1055975F-445E-4413-A3C7-EC0F21D2D9AC} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{1094A779-4210-4AF5-8125-98E1D0EBC024} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{10B4BF1E-F26E-4056-8930-A5A3EE8188D3} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{10DB3644-05FF-4E19-A4B7-86972C39D682} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{1149B033-75E5-4EE0-B2F8-A842B66735BE} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{11C647F4-7245-4ECA-BCE7-BB8B23D30DD9} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{11CFBA0F-6FE3-425A-BE5C-A3F3E62A34BA} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{12174213-854A-438E-B808-AE226D8946B9} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{123A4868-E5A7-4667-A3BA-E5FFE1948BFC} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{123B0F78-7FE2-45A9-87FF-42F8E8AF8A07} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{1254ADFF-DD8A-419A-A0D5-5ABD1B407316} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{13823FBD-B8D0-4251-A418-CDD48FF55573} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{13827F69-545E-4C55-B624-0795DAAF3B5D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{13FEA891-8268-4CFB-B4AF-670781A48970} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{1454E361-6CC5-44E4-A9AB-250299D058BB} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{15A692EE-2CF3-4123-8F9E-8FC4A2603FC4} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{15A6F67B-D073-4016-8220-0AF73965B7D9} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{166F30B0-A088-4F66-9DFD-5031C676FD84} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{169A381E-C38A-4C13-9D30-D2F9A959314C} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{16DB05BC-F82D-4F17-9A84-CD478E4A17A3} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{179D1047-50D9-49D0-A4E6-01E9D291978B} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{17EEF4C1-5FE2-4DEB-9170-25B44B7FF414} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{180D079E-6311-4FF9-A574-845D9DE924D5} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{18BC98AB-B773-4CDE-A342-740A38B869A1} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{1948A98A-8CE5-44AB-885E-ACAC005F7B54} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{19882843-A839-4273-BE87-8CE80E468A5B} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{1A17E288-77CA-4ADC-BA23-57FC55AD2683} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{1A77C422-ABD6-49A5-8E25-85FAF2F62741} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{1B1A8FAF-782B-454A-868A-6E15A5435A38} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{1B581983-7687-4F19-A2AC-7E515522B6A9} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{1C26BEC4-1DBA-4CC3-9E73-C938F0204255} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{1C8AD8A4-A8ED-44BB-86F4-BF8BBFA4A853} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{1C938BE0-CD65-4CE1-B7A5-4613221717CE} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{1D101555-E6B7-4A90-B7FA-F522BB406433} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{1D23DE61-F4CF-4B0A-B2D9-FAFE6CAD947C} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{1D52BD1D-6B47-4F02-AC14-D478F20CDFB6} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{1D5B7061-7ED0-4F25-8171-3DA3883F60F8} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{1D8F59E0-AFB6-46B4-B718-A38B02FBA008} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{1DBF328F-6B75-41C2-8BC3-E6D1AB637B4F} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{1DD17218-9710-4115-B06D-56EA2A2C44BC} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{1DE0C419-8D0C-4987-AFB4-CF65E156CEE1} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{1E49E495-BE09-4D6F-966E-B800F4E08362} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{1E75C93A-F5F5-4FE6-AE2E-B757781DDB79} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{1F5C66D1-9007-438B-94B0-4476CD03B33E} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{20760C7D-3720-4A09-B8C2-F07C50813C2F} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{20981B77-DBF3-43B2-88FE-3E9FA707DAEF} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{211E4D17-6481-4122-92E6-AB5369EA3359} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{21A50DEA-893C-489C-8C8E-CBA11521EE8C} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{21E80378-8F7D-4EB7-A20F-7D6D57FC0664} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{2228FA83-6307-4895-BB4E-119709CFDE4D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{2287AB25-000B-4802-9036-54CE5B0269CE} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{22CED562-3E2C-41B8-84EE-AAEADB2C65ED} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{22D01FE1-836E-449C-ABF1-5CB2C07545BF} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{22D8EE16-4785-4C83-BE78-C11EBBF98876} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{23280AE2-02BD-40E1-BE7C-769C762B682A} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{23A43C87-A0F3-4294-8CF8-D2415A546B01} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{24569F6B-2143-423D-8771-954EC9F81D49} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{2493824F-327C-4A6A-B050-07C3E3B101C8} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{24A27797-B01A-4717-B45F-40469E434E67} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{255A0508-6AFD-4FB3-828E-01C55B4CD6EB} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{256E6E26-A94D-44FA-A862-EAE6E0150AA7} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{25797214-7243-4F50-AC9F-C2615EBF6B09} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{259D904C-92DE-4B95-971C-211FCDCE50B0} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{26694B58-935F-4926-A714-BCABF0500FBD} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{268228F4-2309-4515-905D-943A7D30A0E3} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{26EB3278-7417-44BB-8128-E3AC9460AC12} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{280A7E46-1CBE-4C92-95D8-BA94AE361584} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{2841C85E-EA8C-4243-82CD-59F20A5DAB66} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{28DDB95D-EC6E-4823-B832-02F6DD1838A0} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{2938CF8F-CA3F-48BD-B0E2-82E976731C2D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{29594EF6-7579-45C8-816D-EB6F0E677BB9} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{29C4507E-5F2F-41DB-B02A-08F5FCA67B7F} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{29CC7808-E6BF-4C06-B3A5-C7980BC525EC} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{29F9B193-58AA-45D2-AC7A-0C6089E6A052} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{2A149BAC-909E-4945-852C-EFC84CC45AFD} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{2AE03AE2-FA25-4035-A32B-CF13B27A474B} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{2AF7B7CF-16B0-42A1-878A-B1A50F8B4C50} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{2B4C94A1-54F5-4E26-AC1D-90865887DF16} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{2B562BB9-ED3A-41E1-9242-BD73DB8562D2} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{2C0350B2-4B69-4743-A70F-F9EABEA0A2A6} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{2C128D6C-202A-47B4-9172-B88AFE6C0CF7} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{2C25ACC2-5507-48B2-9DDB-80C8EC0B369A} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{2CCA35BB-DF70-4BA6-A520-291AE92B41BD} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{2CCDBA6F-6FF1-43AF-9BD3-69DE45627304} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{2CD5B25B-F021-4B96-8C9C-84E035B9F32F} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{2D464553-0A99-495D-98AC-960E8999C782} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{2DA00A35-AA9D-460E-ABC6-3DB89894EADA} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{2E1F0E3F-2E34-42BB-8D8A-5678EC8EECBF} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{2E8816E9-A337-4B10-9C9E-6F3311E5772E} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{2F467E5C-00E7-46E3-8E3B-AC01E369B167} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{2FA07EE1-F86D-4F48-866E-C104784B60E8} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{2FF36AED-E190-4F4F-BCD4-07801BEED6B9} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{305556E3-4873-42BB-9E5B-51EB91D1EDD0} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{305871B5-EF60-4C95-9914-091424F25358} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{3075FBE8-E10E-4FE1-B47D-61E86EE707C7} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{30C33637-7DB9-43D1-A227-2BB76975EEE9} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{316A3B2F-BE21-4823-9056-A89B44B8E464} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{31D41C78-2F3F-4003-8811-E19229A2C7C8} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{3256BDC1-8836-4B22-A339-823F90DC9292} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{3273A2C7-3FD1-469B-A627-7AFE3F9462CE} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{335FC6B9-3AAC-4A3F-AD6C-46ADE4A15ECE} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{33BEEF7F-29C1-4E88-B2E7-EE1C66410231} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{349E3A9F-1EF9-4354-9510-D9A0D6C852A3} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{34A777ED-8CC6-49D3-9016-B3AF23A3E597} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{34B58656-9888-4E1C-BAAE-2ACBB262E9B8} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{3518F9AF-832F-4907-A961-C3EBB8C20A82} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{354CC183-4216-47A8-8D1E-B84A27C6DF45} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{3557F2DF-233E-4CE5-B8D8-FE94867B2738} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{35640240-5B1A-4DFE-88D7-41BAFF6AB84D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{35AE8E1D-8DAD-4129-9E2C-E0288030304E} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{35FC62FC-66CF-4B13-8DC2-A71CA66E17E0} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{3664A663-66CB-4918-AE44-88BA5394FE1B} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{368D1E7C-5667-42C3-9838-87A4F63D5A19} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{3691681B-9FCB-49AD-8BBE-0E73D63800B5} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{3710C6D1-02B6-4E03-9B4E-7CE9F7B29325} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{371E3C36-67D2-447B-B26D-E723FF56DBBC} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{3723C86A-7CE7-4C08-A159-EAD903AA7315} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{37F982C5-83E5-4873-BA70-6D9E646343EE} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{3849E7ED-6B4E-497C-BD6F-BAB250C527C0} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{38A05F8E-301E-4F4C-810C-912ACA1A36FD} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{38AEFCF2-E1E8-4B3E-A508-E9742CCCBABE} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{38F6B943-780F-4F6C-BD9F-5932E98B8C13} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{3922353E-AAFB-47D9-90AC-A33FA55B7D3B} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{39A52E59-CC6A-4298-B6CC-8F09358C78E5} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{3A08C30F-9536-44BC-B2C7-E62242E44086} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{3AE76635-814E-49E1-BDEB-A9F1B770C85D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{3AFF1011-DF7C-47DE-9D49-0508986B733B} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{3B9DC498-8688-4B43-898E-48BDFBBBBEC0} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{3BBD1F7F-5140-454A-9ADE-2A50F8887049} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{3BCEC99F-9A55-41F8-AD99-629B34F29767} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{3C167BFB-77B4-4BD4-A8CA-34C9F8CAE909} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{3C903E8A-B4F3-47FB-B943-1DCB1368557B} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{3CB78FE7-A6C3-4F32-89A2-432ECAC5FAEF} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{3DEED959-255D-4440-BBF8-4194141CFE8D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{3E2CD0B7-9F06-43D1-8E8C-E1A16A21DBD6} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{3E423141-4778-4A82-9299-04AA7C978490} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{3EB5980B-B84A-461A-AEED-002AEBEC0256} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{3EDD8CA6-4DF9-4D3E-8655-67782B3A8CEF} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{3EE057D1-4E88-4438-A37D-72D86DAEED4A} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{3EF30F35-409D-4AD4-8152-024226B0A784} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{3F995532-D16D-4F84-961E-1264796B358A} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{4014D8C3-7212-4AA3-8105-9D06E2DC1D6E} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{40480C34-224A-4BAC-8CDE-602561E6B99D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{40BB1323-9946-43CC-A036-3E40D358CF46} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{410C8704-DDAB-4EB2-A3E7-44C201A1AAD3} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{4122ECAE-1B49-4755-B3FB-63961671869B} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{417673E6-A237-406C-B6AE-58A1D4327996} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{41BB7A6A-1057-46D9-A456-15BF45898637} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{41BF7E42-BAB3-452A-A6E8-7F9519F4C267} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{4206A954-14F6-44FB-9950-CA231F608582} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{42BFCA6E-1C1A-4BC9-831D-7830A17DA8BC} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{42C2134A-8151-4D54-A8EA-17493DCB09C0} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{42ED4536-31BE-45CE-8330-C8B289AA9351} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{42F22947-C7BD-4E61-9F68-6843AEEA7FEE} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{439F3971-7486-46A8-B3CB-10D233FB1884} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{449D95F1-B800-48F4-BA02-889D1BBC08B5} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{44D1168F-5BFE-489C-86A5-82F0B0DFE395} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{45287E5F-C8E5-4F69-A3E1-F7E6038B8E0D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{453CD292-9180-44CF-ACEB-2C3745DB41E0} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{45777165-03D9-405B-AE60-A8EE43C83572} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{46088A9A-DC5F-4AC7-AA39-9EDF58A5052A} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{465F9411-356D-411E-96A2-B6E9C362D084} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{46827B26-9341-4951-932F-4C3CA7C0CF3F} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{469E7B3E-55B2-49F0-B8B3-F9F154CC1A24} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{46DBB8B6-C22E-43EB-BE84-140D8ED4EC6E} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{46DE015F-0749-4F13-8B08-131BBA81C61F} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{470C4D67-3424-4411-90C6-E6A2AC5AFBD1} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{47398EE5-66EB-4B7E-A4BE-31C8699BDCBE} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{4776D025-1DE7-44CA-A17A-C7D42C19FD77} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{47932A36-2699-4E43-A00F-39EA0DC87E34} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{47C2A408-6431-453D-B392-C53E2B1E41E9} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{47C511DF-2CF6-4E85-9E8E-CABCB3AA9178} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{47E55BD3-B611-4E52-98BB-CC01F7A89505} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{4842F339-D1E6-4B9B-84CE-D6E9E86E25BE} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{4890B547-694D-4468-BD83-9012D7CE3C03} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{48AAD251-37D0-46E2-9253-22B0B5C6F892} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{48F7E966-3805-4830-8324-0C93AEE3FADD} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{494F1D5C-EB8B-4B28-AD98-9DD15619008D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{49B20A13-B5F4-4FCB-BA70-4435ACF06E9B} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{49BCEF92-D58F-4938-85C8-D032C65861E1} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{49D655A3-A4BD-4185-AFB7-0C5B3B603921} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{4A1103E4-150A-4BEA-8869-13F431A562C7} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{4A51013A-A7AF-4504-87AC-C48404F6F323} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{4AE22425-E745-4548-8DCD-59B8648C6FE2} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{4AFF1CF4-3E88-4861-9560-72C682808904} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{4B545F97-4DE2-4AF5-9026-1946F1073C88} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{4B999ACE-3DDF-40D1-B75A-E078FD23226C} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{4BFB133A-793C-448F-84D8-E501BE5F0468} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{4C1E99EC-1DBE-4C33-A6C9-7102754FF7BB} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{4C684D3E-FAF9-445E-ABED-1FB20C15DAE0} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{4CE68065-CCFC-449D-8B5B-9953FB39B576} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{4CF309E3-DFC9-44B8-862E-35378FAC68D6} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{4D18DCF7-2A68-4B2D-94E4-2080F3AA70AE} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{4D619EA3-DFE9-4E70-85BE-EBE4343B2B2A} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{4E26321F-0231-4802-9828-398CDC6EAD11} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{4E47EA2A-D291-4A3B-9D92-0FA7353272FB} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{4E5A24EA-6203-4BC4-85F8-A5A9E667A84F} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{4E9F9282-9655-4A25-A7C1-E4B882F7244F} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{4F5D7CF9-918D-4889-A8A7-A710E9A5E2D5} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{4F74320D-6E86-4CAF-AE45-0BF5543C0E1F} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{4F879D28-20F1-4197-9CAA-B75BE4E07CC5} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{4FAC72DA-FB51-46F1-8F62-68BD1A7F4421} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{4FCC4772-8FBF-40B9-8279-BC207BCB6ADF} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{512F6B8D-46E1-4A30-B639-B54CAB47F6E6} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{518F0C5F-99CF-4005-98B4-2E2841FCDE02} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{51F85B93-4F4F-4343-AFE8-D9D607F22029} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{522A40C2-9C83-4EBC-B3CF-28E7D279B304} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{52378817-6A06-4A78-9F5F-119D2EDA610B} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{524342D9-41D9-473A-B6C5-C50E18B43E51} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{524ACAB1-C3B0-4871-AFC9-C01E2F99CE22} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{52945383-726F-4F81-8A9D-9FD850FB8883} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{529B0732-8AD0-4018-BCD4-1993CDFFB141} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{52BAE1FB-D90A-4278-9C18-E2A5D588DBFB} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{52C6FE5C-1B71-4E77-9AC3-3CA0D15A57EA} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{52E818B3-4BB8-4C81-AD00-42E251D360AC} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{52FFA55E-7435-44F2-9889-F71F0C8B3DC4} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{530FF023-817A-46B4-BB6A-3AC276EEE9F7} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{533E1A5A-FF56-4B9F-88C2-0FA72D1E66E0} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{533E9127-4B5C-4D9E-A4DF-18398742241C} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{53DEB074-3FA7-42A1-BE68-C86B5F9F6109} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{5473C5EC-6DAD-49E2-BAC4-68DB63605622} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{555C5B50-4981-4F14-8F25-81AFBD749E82} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{5578C6C6-1F4C-46DF-BAAC-49AA8E273259} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{559CE0DF-28A6-4666-BF13-4BA7B681B901} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{5623DF82-326D-4248-9D62-9F7014D3DF21} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{56341171-14B3-4065-9D73-287C518726DB} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{56560B1B-BBB9-4572-9AA0-4C11873CA640} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{56DC8FD4-B09E-4294-801C-5E0C05AE67FF} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{56DD33A2-D77B-4983-A021-9F7516A12DD6} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{571196C6-2697-4733-8B98-810CE5464898} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{59854135-EB98-48D9-8831-66752D43AE87} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{59B3B268-3794-4D3B-8BC3-53BF88F2CC8B} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{59E61AB1-5CC4-4B41-A394-0082DCA2C122} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{59F56597-289F-4664-9E60-386D57BEBD82} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{5A31C02D-86FA-489C-BF6A-ECE316DC98B3} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{5A72AEE4-4C2B-4EB4-9C7F-CA68044B01EE} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{5AD55A9E-91E2-4638-92C1-6943547B5A8F} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{5B34635A-BB6F-4C9B-AC80-2054D96FE08A} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{5B725384-42C0-47F0-A140-B2B7DBD373BA} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{5BC19682-B4B3-4C31-810B-F6426DFE0016} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{5BE7C7A2-E9F2-4C03-B449-16E251AB2D7E} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{5BEB08B0-C2AE-4435-A54A-50438BC3F6B7} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{5BF079AB-ADC2-4B63-A86E-2075244ED80E} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{5C0AEBF6-D991-48E3-BD62-D00993A5C63A} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{5C752657-1CB8-428E-9E2D-74D30E1C2C01} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{5D337C15-780F-4919-A04E-3C5FB9715B9B} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{5DD9AD6D-AD18-49E4-81EB-948A5F977D12} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{5E8F1C6C-44E6-4F1D-87DF-02AD7D7D11A9} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{5EAD6A55-5894-4231-BB47-D1A42E504665} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{5F31627F-9C0A-4AB6-8C16-B9D3A05E3A09} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{5F39F4DE-C57D-4512-863F-04F4FB36417C} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{5F59F54F-4FF3-4B7F-95CD-D97CF79CB129} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{5FD2823C-855E-42A9-B344-B8DF75AEDCF1} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{608F2661-9737-4921-88D4-1CA610766677} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{60D3DCEA-E147-40DA-A991-8DA87F60F28D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{61600D1B-5964-43C0-A5F6-7EF14D7C0FCE} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{6189F195-F589-40AC-BAE3-5F24E2BD510A} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{621249A9-36B0-4BF3-A888-BC577AACF141} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{62BF6031-460D-4E16-9DE9-394CED7CD40E} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{6304BDC9-945B-4B6A-BAD6-F079D968C582} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{634646D6-D495-4AD1-B487-803545E6B3C0} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{6357E06B-51B7-49C9-88DA-194974AF4E4D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{635E431D-F579-4308-9532-FA7D5EE3F947} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{63D785B7-8ABC-4FBC-9934-ADE5B2BD828E} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{63E16F32-5035-4F89-B8DB-4CA336A985A8} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{63F7521B-934E-4DBE-9F1C-446AF01A6F10} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{63F9E670-CBDC-406F-8850-6CFEABF3FC48} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{645FB308-7C46-450D-9F87-C7C728FBDC7F} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{64C0D296-E0EB-44F4-9F7E-66CE06671BD4} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{65181054-8B6C-4CD1-9DEA-BE3AE0A7BF38} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{6592E4B2-8C71-4F64-8D63-BB9367EBD99D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{66800FF0-8F78-4C9A-9219-5B02969465AA} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{66CF00EA-40E8-4F51-80F1-121AB36416DE} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{66DA7339-711D-4A90-AA31-8DBA01B0CB9B} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{66F3BFA0-AA3C-49BF-BBB4-F83C91BF8FAC} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{6700F58D-3C6D-4759-AD59-EAD60AFFD19D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{6723C284-4066-4792-B4D3-7F67D42F338C} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{67FF87FA-94D8-49D9-9294-BD727B9ED4F4} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{682475A5-0772-4DF0-A662-744D432B8205} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{68B558A8-66EB-4B49-B8D5-FC7B76782C0D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{68BB6A64-DCEB-4C9F-ACEB-2C9FD14C1A21} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{690736FD-3EE6-4BFB-B43D-0F33A8688398} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{69179EAA-A115-452F-8E89-89B6E55EB14A} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{6A23BDC3-FF5A-4E70-ACF3-8C4840584D93} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{6A392ABC-0D1B-4383-A305-62B919407A5B} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{6A5D6C1A-1CB1-49ED-B74C-40CADA7B470B} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{6A7191CB-F0E4-4FF1-A395-AADF59179E01} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{6A8AB205-2550-487B-9B38-44C2361693BE} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{6AE55056-35EF-4044-B7CC-DBADC81E4345} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{6C0B1987-68D2-4186-89F0-AFB5E96B26C5} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{6C921A93-0923-4960-A9E8-E7136FF13FEE} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{6D68541B-B9C2-4361-B3F6-46F0792FC697} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{6DFAE9D8-00A5-4435-8434-4191BAD4E66E} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{6E157FE1-35E7-413B-ABFB-6C11B9E1830D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{6E75E262-BCB5-421D-8225-745583807A83} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{6ED850AB-8EC0-49C9-B6E3-EBD5C0579164} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{6F5430A0-E9B1-42C9-BC94-04C01FE67695} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{6F649832-E487-42E0-B156-A516D8376CE8} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{6F78CAE0-58B0-4314-A49F-5AEAE716F870} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{6FCE3D74-E555-44C2-94D1-9D117B71AACC} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{6FF79CA7-0F71-4F3D-A5DB-01031D686082} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{7037DA46-E918-40CD-892A-A3695D31C3C1} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{703861BA-B161-4820-8915-D78C3E267A1E} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{70A2CCA0-24D8-425F-B08C-57003B5E0793} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{70A9A016-B0AF-4462-BC62-EBFD9A9DD04C} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{7160851A-7549-4108-AA65-7EFC6F94FEA5} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{71C701C4-7971-48B1-9542-6DF004598FEC} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{71E6E3E7-0ED3-472B-90C4-7C397AD2BE8D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{71FF5ACC-DFAD-4BBD-9914-2EE371C0C8F9} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{727678B7-4E78-4A12-B454-07789A092486} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{72A4F2C9-51DA-4EE7-B102-36FA095DE529} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{72F16169-7C32-4BFF-B4C9-875D852A912A} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{72F3C658-8DCB-4329-AFD4-D2AE90BF2C66} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{7349DEDD-55EE-4FE0-80FC-DC93E0BC63DF} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{73A31631-5ED9-4ECF-A77A-E489DF030826} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{747FE6B1-F366-421F-AF99-84441A6F1D7E} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{74B9E282-4218-472B-B122-53C6AF43E018} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{76294A06-BA5C-4798-AA09-72529D1FCF6D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{76721BFC-2404-48FF-812B-4FB496FD1CB2} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{7710050F-C05B-4269-933B-EE2400221A64} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{77537A12-3FC1-4FD9-9CC8-2F6EFB9E082D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{77832099-C042-4806-9707-2A7CD8772282} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{77D5BE3C-6263-40DB-BC28-81B86AAF4E26} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{782D33E0-B70A-43AC-B513-526884AD4AD0} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{784F8EDB-0CAA-4AD9-A132-2825119D8C16} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{79377E26-6C59-422F-8E15-9BB9A7C0BBFC} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{79612069-7E49-4F0D-8AC1-6C0433B9EF91} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{798F35BD-957D-4786-BE25-5E517F648B44} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{7AE27B9D-EB61-4D53-BE7A-52A350604AFF} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{7AE35186-7C78-4644-A800-849923CF084F} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{7B1DC58C-C0A3-4C90-85F0-91AA218E35DB} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{7BC4019B-4F0A-4AC4-A258-BC8AA5663FFA} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{7BCD0DCA-46AA-412C-8498-CAA3F073DAB3} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{7C2CE49B-9442-489A-A14D-DEFE471C1BC5} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{7CB637D1-6240-4A6C-B000-416836AEF921} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{7D091293-2F30-4599-8E18-EE2E05B2F8CA} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{7D18B64D-02D0-4D80-9880-5B9516C98382} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{7D378CC9-1C78-4E5B-B50E-79041CA7DCD6} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{7D3CE08B-19AF-4869-B662-A6B61671EC34} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{7D812F71-117E-4B11-96B6-A55804904A24} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{7D926D21-BAB3-4E4F-B3BB-001136699376} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{7D94A551-AA5E-450B-A775-8C4FFB1D1961} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{7DD60B52-5773-456A-A26D-527520662E98} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{7DE427F0-32EC-48B4-971C-94D26D8BEDE7} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{7DE75F98-0A78-4C92-B540-74C0C0DA850A} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{7E1137BF-F81B-4537-AE66-939393C20D61} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{7F2635AA-0D42-4814-9AD8-11E6DF1E7253} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{7F893085-52B0-480E-ACEB-29F7A53CEDFC} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{8044BE93-91B7-447E-93E7-7BA9028DFBB7} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{81E93B91-70DE-4881-B418-2067B380B6A5} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{821FD3BB-E52A-4502-A0C3-7A3B649CA159} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{82A4294A-AFF9-477E-A2B0-73CEA64E22D4} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{82B7148D-3DB7-437E-AADB-E4840B286109} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{83397D95-6056-4437-9B4E-367907342A08} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{836D5BB3-16CB-48FE-AEB5-C3A703238B00} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{83D0419C-98EF-4B7C-91D6-59927FF5EF66} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{83DD5661-6699-4DA4-B583-CDDA343D2836} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{848245FA-594A-4600-84EA-65B6586A098C} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{84BAB00A-701D-4140-ACD4-B4BAF43F050B} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{84C6127D-D4F2-43C3-97E1-CCD22A0C8BE0} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{84CDE74A-1C79-41BD-9B6D-1D717A281201} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{85039552-3AAE-4E18-AFC0-CDDC9C1FFB9C} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{8537237B-770B-4A4A-981F-6F637D909B71} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{855E380C-DC72-4C86-A2C4-D077E390094E} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{8560F633-EC1D-493E-AD26-534C55E8367F} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{8586D648-1D83-4CEF-81F3-6E68D4B298C6} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{85A24192-C770-439D-9811-FB1C029D036C} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{86BCCD79-3C67-4BC7-AAA1-466AFD8A8A83} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{86D0509D-294A-447A-AAF8-1132DF41023F} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{874EE4D1-0609-4B36-A3D3-831758201D4A} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{8757A56F-A9D7-4C7C-9C2A-5F4CE0CBFF94} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{88396FFF-116C-43E9-883E-15532BE9E9B5} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{885954C5-3D70-4906-82FB-73551CC3A846} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{88606247-B390-4EE0-852C-1E6A640144B3} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{89BACED9-E53E-41EA-9E7E-2E4AE4C8704D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{8A4E197B-EB3A-41D3-B352-5C54F6483694} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{8AF3C1EC-B86F-4020-BCA0-5F28113B4550} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{8B222F55-DC66-4964-9867-9BCAF48B27BF} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{8B5D3467-D994-4F5B-95EC-5EB0E6673785} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{8BD514B4-7719-43D7-87C4-465254709C4F} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{8BDF3D3E-9624-4CCC-83B1-84B5588222DA} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{8BF31D91-C213-4538-92DE-8F02AF842B88} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{8BF76BB4-02B8-4794-9005-12E2FD9CA06B} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{8C0DB782-593E-4C9F-854B-FC7A23401418} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{8C6266A3-9690-4D5A-B4FD-FB829C48D147} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{8C62F092-A1E9-409C-9802-5106813299F2} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{8C86A0B8-3BE8-4C78-897F-A59BCF7F32A1} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{8CDA9D97-CB99-4E76-96E3-CF329CD0C7D6} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{8D09470E-E13D-477D-9596-E31084A477BE} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{8D983774-0B02-41BF-8EAA-A5F5D9DE5642} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{8E640B55-22DD-4023-80E9-B11E0B4A2226} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{8E96CB5D-5320-4FEA-891B-6D006CAFD040} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{8F47F1A2-409B-4818-9AE6-27EC05C0E6C8} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{9071863E-96CA-4848-AB3B-A29EA2C1C4F0} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{9120936A-1C93-4B34-9291-3EF2C36BE172} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{9144FFA8-EF6F-4DFE-86A0-BB5164DF2475} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{915229E2-FF25-46C9-A676-008DD95DAE2D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{9158DEB7-5AF9-49D5-B558-273750447D17} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{916E2505-B1CF-4E8A-B68D-3344B7D662C9} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{91DD4DDC-C756-4C8E-AFF0-4B554CB5C5CF} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{925EB7D3-8321-4A8B-9754-17066F088A19} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{92B54795-5445-4444-971A-BD9F0EB6C415} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{93657197-87BA-4F5F-B965-52F1D295B79F} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{938CD846-2958-4D88-8A5B-5D1896242873} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{93C0CCE0-2741-4B2A-A7FB-6C970F22B9E2} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{948A37FE-9E15-4C49-AC22-8666A7500C25} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{954A8B95-7DBF-4DCD-A70C-6233772EDCBA} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{959B8D79-1DA3-4161-A82C-DCA61D1C3371} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{959D4166-15AE-4321-AB4C-AB2A77F81250} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{95C135E8-DC16-4759-81D9-93F91499FEB3} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{96112E09-676C-45A9-B915-5E83315A4CE8} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{964D4AB7-C1AD-4DFD-AD5F-9C9AAAEBF2EF} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{96B56356-4122-4EB6-BB3A-9C7529541744} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{974465BE-7052-4CAC-A729-9E61F02F6AEF} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{9778831B-AECD-4334-912B-4FF15E6106DA} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{97D16E06-FCE7-4DD6-BE5B-D0541948AB58} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{97DEB4E1-1702-4578-8945-FECF7B5E5138} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{97FADC47-80E1-49A7-B7C6-4B72246678D3} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{9806C4E8-B6C9-4F71-B671-E0917D5583C0} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{991E63A7-9997-4206-9996-293C61CEAC2B} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{9A211ABD-B807-4315-B337-64E07B4B6632} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{9AF147E6-15BF-40E3-8940-B181CCD2CA78} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{9B2CE667-7670-400A-9DF7-A729C65AEEAA} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{9BED1D50-4EE4-4FBF-B8A2-C2CD2C923474} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{9C169643-2627-44F2-9AE8-2602D2874CD3} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{9C398EC8-9ED8-438C-BF28-BDDC81252C8B} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{9C3FA44D-A3CE-4E9F-88E5-0B4163BC151C} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{9C9FC320-2E20-43E6-9CD5-B53E5FD0132A} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{9CAB4D05-04B6-4B70-BA09-DC13B1BBE2A1} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{9CCD9E71-BBFD-4B74-BA45-3D134B453097} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{9D3BA1F8-FBCF-4159-9689-99ED808176A2} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{9D4160E3-534A-470C-BC14-689F6045F4E3} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{9DA922FE-3940-4D75-A259-1E5083B41563} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{9DC6A802-40DC-44BB-B187-85F0F37682BB} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{9E73EDA0-261A-4C97-9156-CF4B3013E636} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{9E78443A-F592-441C-A8D4-8D43881F36C5} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{9E86B265-C3AA-4057-8C49-E9B3D50BBB17} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{9ED84B56-BCC5-4A42-9714-D48097E213E2} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{9F083BB5-E185-4EF3-B209-BCFAF5BB9381} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{9F8F41EA-DEAB-4E5E-A975-A5EC83DED3D0} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{9FC4F5A0-8C63-4F0D-99F3-D6FC56B66BE6} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{A03B2A89-B2E8-4862-AB2D-91FB5A553F83} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{A142E0F9-7AF8-4DEE-AEA7-9CFC00944889} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{A1855E19-C93A-4B9C-B2D7-9DB88AED8799} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{A190CFD0-01C8-4770-A47B-4C3DCA487173} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{A1BC4DDC-0C46-4C73-AC1B-330EB6D72995} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{A1C8D657-7517-47ED-9143-3EBA53F5C931} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{A241F3E2-6A3F-427A-9463-8723082CF4A7} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{A3254BD7-3AEB-4BDA-877C-82E0E66F10E8} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{A33173A0-4356-4FE8-88E0-1BD7FF54A581} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{A415EA7F-CE0B-412F-B480-537E3E654B01} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{A4635F49-8250-4B66-B4A7-D5EE84EDD097} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{A49EBC9D-2048-4D51-9F9F-CF681D1BB07F} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{A500732B-8C45-4252-9B0F-CEF32887008C} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{A5842B34-D233-44DC-AC5D-54206A627396} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{A6054D1E-21C5-4C29-8829-5CB297EBA88A} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{A67A6F2D-6D01-46EE-BE8A-39FE4A74366B} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{A72F604C-98C5-4620-B776-A992F5F5ABF5} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{A76080D5-C738-4EDC-809C-9D6DC9B6F94F} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{A7F9BC7D-4B4E-40BC-ABCF-B4CABCBDFA8E} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{A87B6145-3E0F-4C9B-ABCB-A3C8BAC7AA05} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{A98A582A-35AC-452F-A78B-429E577517F7} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{A9D91454-B297-43D6-9411-3D2EC766A53E} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{AA1C8874-5097-4598-AF44-0152484CD2DF} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{AA4C63D4-5C0A-472D-B469-23224EB5C7DA} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{AA7B926A-C8D7-4520-857C-0455217B16B0} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{AAC8EC13-26E3-4050-B85B-289C241E95F3} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{AC29C19F-8C04-4DBC-9376-9ED2B329EE51} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{AC4946EE-85AA-4006-9D8A-C13581FC8E9C} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{ACCB9C74-E92D-4EC4-BB62-2CE0E64A24AB} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{ACD9F476-172B-441D-9E14-6385F020E5BF} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{AD041FBE-D09A-47C8-A4D5-4D2066D1013A} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{AD2679EC-3092-4A33-A6FF-2466BB22807B} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{ADA805F9-D7F7-4A62-AE55-1F06F0A4A621} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{ADD8CFC0-6947-41D3-92C1-7D7A0B9D1DAB} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{ADE8D1DE-5A3B-490F-933E-A0AAD3F9E505} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{AEEEE6DD-E102-4A68-9A16-238D1CAC6BEE} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{AEF77382-CA75-40D5-B200-DF9AF0B4CAF1} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{AF3F103B-4BF2-4F43-B9F7-D16019388CD4} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{B034CF4B-D308-46AA-9EC3-93E1ABC31AEC} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{B04129E3-D992-4CBC-8DE0-F90DBF2EA025} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{B0EDCC92-02E1-424F-B9F1-D67AA6F9F9C6} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{B11B1EBB-F856-4AF9-AABC-D0A4F0A62106} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{B12263B8-C6F2-494A-A89A-B5A02E2FB0EF} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{B1556F7D-CDC0-40E1-B3C3-B8F2A7E4246F} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{B17C11B8-A1C0-4558-A3E5-27D46DA833AE} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{B1E586CA-36F5-4E18-A7EC-DE17C85D8B4B} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{B1E7F35C-F250-460A-BB8F-BEBC2D0A6CAF} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{B23CB846-E301-4C74-9A5C-9939238F23A8} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{B25CBCBF-A34B-4529-BD0F-9F6D7B9198D6} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{B26FE4F3-02CB-4AF0-A742-49495B3AEC6D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{B37E94F2-E8D1-4748-8861-6CEC22FE887A} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{B3AE32F2-902B-4D02-8692-CF1767A60998} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{B3EAB27B-4029-4108-A20C-F5E80EFDD96E} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{B47A8369-F079-4F47-BC42-98FC3B0162CB} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{B49EAF3D-15F1-4787-9832-C18A50CCB207} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{B4F32479-DC15-41BF-B9F8-0F93520A0E74} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{B558D006-AD00-4F4A-B1C6-4E60A0B1399E} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{B56D339E-A2C2-4945-84E8-4DB47B79ADD1} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{B5A8D3DC-EF09-4C98-89A0-46F6E7F5324A} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{B69AC294-AF38-4CD9-996E-3BA052D9415A} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{B6B2DA96-1AC2-4B85-B1D9-B06554DD6847} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{B6E66687-2D40-4DCA-9048-057D6AF373F6} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{B7D2C532-ADDF-4C43-B903-A79DA4020921} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{B7F338DB-0897-4FB4-A5FD-90CA2C160040} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{B9482C78-340F-425B-8C83-8AC671EA366D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{B990E54A-CAA4-468A-8373-A37A4B3ABA38} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{BA908369-E6E3-4C57-8B0B-B7DDA64A61D0} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{BAB92665-2D87-47A7-B87B-9120A949AA93} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{BAE56E46-5BD4-48B9-811F-97771B571724} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{BAE98D84-B601-4645-AEB8-21666E668CE4} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{BAEF2792-C714-4D60-906F-F02A34F4426D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{BB551865-B0FE-4AE3-A6E2-6C7C89B0FFF8} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{BB95F177-1D90-4C5F-A001-2A12A20E9A6B} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{BB965094-35C5-4863-AE23-EF45A515E41F} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{BBC407BA-7196-4928-837F-127B2459221A} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{BBD785D6-D682-4BD8-9168-82E95EDD9669} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{BBF790EE-D294-4314-B6F6-F55EA10D039D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{BC1E827F-0C0B-47D5-8466-5420208F92DB} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{BC5CDD11-FF3C-4CE7-B21A-E7D2E4A026F4} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{BCB4870D-F84D-4E71-9836-7B5043D9E45D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{BCCA62A3-7CCD-415D-B3D6-B488A6FDF8B6} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{BCF0785D-549D-461D-AF38-DA0E901DC385} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{BD2F3C6E-67A6-4527-9739-5FBD96767F86} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{BDD1929D-2403-4CA9-9CFD-96EBBED8B589} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{BE77AD9E-EDAB-4B7B-A5F8-378BA51415E7} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{BEB70A5F-C88E-486D-9E8A-00DE0BECFFF8} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{BF12C0F0-C624-4E06-B16E-CE37751BD536} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{BF263194-BB66-4A58-809E-EF56C3A69FC2} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{BF3FE0F7-FF29-436D-A2CC-EBEF7EF65B3F} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{C07AC424-849F-4896-8CF0-9A5C3E3F84A5} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{C0D28045-7AAA-4E75-94CC-6263DA4F7C9E} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{C0EABD01-93D3-4956-907F-462330736416} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{C17C455B-439B-4A38-A301-1A9BB38680FF} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{C195D1B8-C437-4D78-80BC-3BC7BCDAB22E} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{C1E832EB-2B13-4FB7-93CE-6000F0192A65} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{C1F561AA-4961-4A21-8AC5-8CBE18E42E74} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{C230BBA3-5E12-4ED6-8C00-E716D108722F} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{C2832F0D-E862-41A0-96F6-73DFE5254A90} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{C2E33A64-3153-44EF-8A5A-4728D5043F01} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{C328B4B0-2212-48CE-9599-C5A6B0C33964} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{C349E274-0979-4A9C-B81E-0EB6AFD620BD} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{C3E2C0A4-943E-4C77-87AC-A9207C07BC54} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{C476E86F-E36B-4432-ABA7-BF829A1DCACE} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{C4AB1C7C-6DE9-4AFD-9467-AC60B1FEF471} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{C4DE4F91-B590-41E4-88ED-AB1B20E57F91} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{C564F07B-C69F-4174-939A-59B890F8B7F5} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{C5B3B873-18CE-4937-99ED-DF8E6BAB7FBC} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{C5CB8AB0-1AC0-471B-AC6A-93F43487D7DA} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{C656E724-9769-4441-88C7-6AF09A0F45FE} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{C6811751-520C-4B97-A7CD-DD0C0824592C} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{C6CF32E0-7BB0-4DD8-A80F-87292308F1C7} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{C6E5B91E-1D94-4359-AA75-0D7DA865116F} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{C72D2909-7279-46B8-AF30-4CCF08AB775F} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{C79087AF-038D-4069-BBCF-296809F2168B} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{C7A60C62-28D2-4D0C-AC7F-70ABC2852E60} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{C8671B15-07FF-4334-980F-377FFE72D8C1} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{C87CBFAE-91C4-4A33-83C8-87052AAD9916} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{C9072D79-6C6E-4215-8A81-E700415AD289} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{C909889D-F8B8-4C8E-A6F9-79605D605C53} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{C92FF3B6-AF4D-49B6-AE0B-305ABCFC601C} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{C93349A4-22EF-447C-9FAB-64753CCFA635} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{CA14FB98-F06C-4401-9305-504E4A8292FE} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{CA1E9DD1-A02A-4773-9695-B4EB2A5F6320} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{CAA25BB5-FC89-453D-A71D-A82128A7FFA4} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{CAD8B04C-28EF-4D1F-95C6-5E5CBE0B27B7} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{CBFF67FE-2928-44E0-B986-6F900822EB3E} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{CC233C2C-C80B-467C-93DC-E833069C09DA} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{CCAECEFB-3152-482D-8FBB-CEAB3C93AB8B} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{CCDC5FEF-48E6-48D8-B009-9B2B26704798} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{CDF9975C-EAEB-4F85-B6E6-CF8F28CB7EB5} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{CE035BF7-FD5A-463B-8D36-D5FF7E91ACB9} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{CE7FBB85-6936-4F38-AF71-FB78567D9A25} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{CEC4FF86-750E-409E-B8E2-52D916BEAD9A} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{CECD35B3-D4B5-4DBF-91B0-7DB6A7758F01} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{CF131923-471A-46C0-8FCC-83C00D58E9E3} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{CF7667B9-6441-410C-988A-F00F1E5F709A} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{CF889150-7710-4204-8C9E-476753054DD7} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{D0052811-2241-4951-B12B-128D4E7C21E0} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{D05E1914-A289-40D7-8D7B-FAC7F6378523} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{D17875D0-8471-4690-8CF4-4A85577BEBDE} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{D29E63BC-FA32-4B06-B095-90DA5BCC7C90} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{D2F0F251-44EF-407A-A7F6-21D7EC7D5373} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{D350FEAB-2EC2-4B99-83C4-6F6397FCCCED} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{D3E6B047-7B50-4F16-AB58-59400B00FC33} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{D40C09AC-7B73-4135-BB94-40E9AF5E2AB8} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{D4E7E728-4C7F-4371-A170-958B4A48E7AC} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{D55F9F35-7907-406E-83DC-D4529DEE9AF5} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{D564C238-684F-46BF-894D-A9616A0ACE2B} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{D5A2F33F-4512-4E67-A4BE-30BD589B6A4F} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{D5C0CCE6-8824-463A-9FA4-5D95B6ED6C3C} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{D60E9E6C-89EC-4680-B2A2-CF969DA8DD65} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{D6496F87-DD92-4243-AD9B-DC0A21F1F381} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{D685438D-1AEE-43AE-B061-D98E602655D2} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{D704C663-F51E-4676-8E95-1E2E7E85186F} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{D70F85C0-3D8A-4520-B189-4BFFA41F3A50} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{D768DD98-0B2C-4C58-A196-CE395DC88D5F} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{D7762C7A-F345-4654-AA49-D5E8EFFB0B96} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{D786A2DD-6EDB-4C88-A5C3-BFAA8D9B49E9} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{D79CCA81-F723-4D84-B65A-66DAF19EB3D4} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{D87F978A-3ED5-48D0-A36D-415EB8C62277} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{D8EAEC2C-98D3-4546-B61E-79F4DFFC81A2} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{D907716E-45F7-46C5-96EB-F42DD4B12FB2} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{D90BD578-63CB-4022-8933-865CCE4EEA4D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{D9AE206C-9866-446C-A6B3-DC793F298E29} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{D9DF4347-941F-422E-A02C-79D81997CBC5} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{DA0A8E8E-4FC9-4385-9DE9-0AF4C5BB8B1B} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{DA365DDD-68AF-44B6-99AA-F6344FA0FA3B} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{DA69AC34-516B-4378-B7E3-101CECCA4AF5} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{DABEB9C6-8853-444C-89C2-BEFDFD046891} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{DAC246D7-5B2B-42C7-9FF2-A16FFC34680A} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{DB398CA6-C3C3-4A2D-B25D-26C4413FAC47} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{DBA43E7B-1603-43AA-AADB-26CC94A2D07A} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{DBE98E8E-44EF-432C-A28B-1E56DC4C480A} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{DC185053-D0CA-4991-A0AE-3F5AA79CE050} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{DC31C0A1-D2F8-4E27-AC13-9D1CF7E05D29} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{DCD68ECF-0651-4752-8DE0-E0FE5138F430} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{DD190343-11AB-4F89-AD0D-24B7ED81ABC7} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{DD4D2636-91FF-497C-9684-3EFE62C5ACCB} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{DD7CC794-D821-4295-885A-46775B991D63} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{DD9C0AB1-B150-4F91-9D3A-D860D41B8A30} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{DEEA7596-03A4-4F2F-9563-1124215F8965} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{DEFB50FB-FC30-4738-B77F-FEF54024FB45} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{DF0686A4-6E74-4357-B2FF-005C4C4B7059} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{DF1B14B3-195E-46B5-A236-76BDF1A8C99B} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{DFDDE901-1EC1-473D-84ED-B48DB697D8D2} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{E0189348-7E11-47BB-A925-5CA661BE4E36} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{E08A354C-F2B2-4D1F-B5E2-EFEEF6FFF8FA} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{E09F3CF4-381D-4811-9804-EEF1982F34D5} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{E184B2B5-6833-4368-8552-670FFEE17BCD} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{E1987FE0-426E-4B6B-9D00-871B32A246E0} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{E2081E51-C7AC-4A51-8B87-22D6A45B8F54} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{E20D964B-7608-4478-B171-14E0A1FD117D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{E20F146D-F81E-4401-A6D2-D775F552C024} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{E2337EA5-62D4-456A-B7DA-42BE6A9D3903} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{E2CA3831-44DA-449A-8970-F194A3104386} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{E3F05CD9-9EBC-46C6-87EC-B9FF1A88D637} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{E4083068-67C3-46D6-ADA6-A2F3836BA876} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{E4096FCA-C226-408E-9FAE-C13C7CEE8F1D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{E40EDBD3-C297-479A-9E1C-33FB8E654816} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{E4892C86-DEAB-4AD2-AB81-4D874C01BE07} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{E4F91756-6ABE-4397-A570-798795FFBC4A} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{E4FA0468-BD1F-4A39-AEBB-AAB9237F6138} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{E51C9396-D995-41AD-9073-9391F6EDD7B4} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{E56183D6-2808-48A4-BBFF-4C5FC28EF2B6} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{E5926283-D12E-4F24-AAC8-7254CF5916ED} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{E6055204-DFB5-4E5E-9910-BC201404C45D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{E7991074-826F-44FF-81F1-F63B5F288A4D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{E7E03E90-E640-42E8-8DA5-507B2C6B498B} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{E8105A43-0D99-48BD-A044-04ABB1FA4FDE} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{E82E9E39-7A3F-4A39-813B-16FBCA813DBC} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{E90F8B2F-8BBF-4ADF-948D-CC052F3E4494} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{E945670B-461D-4064-B51C-79D5F54ADCA3} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{E94AF732-6581-4FCC-854D-93D7B8782D2D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{EAC04E16-B9D0-447D-B426-E26818616E0E} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{EB2A1E37-BF7F-4FA2-A036-1B3CCFA3D48D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{EB4859A9-AA07-4518-99AE-184377F1ED82} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{EB4DA4E0-2D72-4DEB-9F6F-479ED630F0E4} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{EBDAB5FA-BECF-41B3-B1F4-3B790F956012} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{EBFFF27C-C731-420A-8F37-E8FD28995FC4} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{EC4743B3-D6F1-41B9-B062-56A688EEAF8B} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{ED8AE7E0-3BAD-4972-A835-F0D2A1FC9010} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{ED8E6AA6-F5F3-4138-BA2D-59AFE5EDC233} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{EDE02E4B-DF9E-4FB5-8104-0C4FFF11EEEA} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{EDE32318-ACF0-4DE6-91F1-B81FD82E269C} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{EE4C60D8-B937-4232-B5FD-BAECC4D8FDC8} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{EE9EEC86-5EDE-48B8-8E85-B6E682096393} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{EEA057D8-EDA2-4749-8C8D-43F34305502D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{EEA804B1-B363-420D-8204-00ACA86CA637} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{EF0855DD-E84C-45AE-ADAF-00A0B60AEA4B} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{EFAD051D-03ED-428E-844D-DF272EF9DC94} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{F01EABA7-A5EA-4AEB-869B-F8F514DD5E42} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{F0CB6760-F420-478F-AD2E-ABE7941ACC00} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{F123CCC2-A43E-4239-878E-3FAD97DD6B45} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{F165BD1B-063C-45D5-9165-B1DE746A1790} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{F198401C-80DF-4C39-BAF5-6B6D2918C6BE} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{F2847ADE-CADE-467B-8C9B-5ADF4223784A} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{F2C7BB5F-9DF4-460C-B540-55EF70AE877F} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{F3329E1D-CC85-4D8D-974A-346EF893EBC7} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{F359F9AF-4EC2-4716-B735-4EE3D0DD04EE} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{F38ACF4A-B5F8-42F9-9A98-7CF8A1CC0DBB} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{F3C7AB61-EAF7-4EBF-B10F-D932AF21CA3B} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{F3E1E964-1D57-4821-984C-F175B1808298} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{F4393F76-1C13-40F5-9748-3C939824F43F} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{F44D7C7A-D0F2-4B72-8CA9-393071F8D11D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{F5321752-A53F-4F70-AB8F-679F554D0685} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{F5334DD0-1308-42D7-A999-00D1E2086D12} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{F58AB839-C3ED-436F-80A9-A5CF8E7B4FEE} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{F5C6B0A6-4767-4660-825B-1D5C25C48E67} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{F76CD80A-9690-425E-A52D-A8E7A82AD63F} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{F786CBC7-8C0B-4970-8D46-80C91B2ACA21} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{F7A29860-5246-4F2D-B9BF-C6C9D3306147} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{F7C0555A-EB83-41C6-8714-9DA0295F559A} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{F7EE2020-69A5-4990-A720-6F7FA012E1B6} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{F84BB703-7B94-426C-A99A-ADABDDE306F7} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{F89B664A-DD06-4850-80D5-B08395C4F423} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{F9457F46-DB67-4F1E-AE81-1D6F362574C9} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{F94A55D1-C16B-4C97-B837-0AF51D235E8D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{F9A7F919-3B7D-4094-B947-257E5DC96E3C} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{F9CC572A-001A-4F9B-A22B-3B14D8E7C7EA} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{FA161EED-7E80-44FD-8A6A-AB19670FAC64} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{FA329110-2293-445D-8F94-EE5C11D59E9B} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{FB26AC9D-8B26-4BA4-872F-0A228601B31F} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{FB89D43C-5282-4F87-843C-C704BC418028} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{FC27E63C-A0CF-4653-A71C-2B4DF1A6428B} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{FC8894AF-9331-4C18-A8CA-C3734D3BCEEF} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{FD0CD905-2AA4-42C5-AD05-4400507D84D8} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{FD4D3AB9-A30C-4DF4-B1A6-2D8B9689245D} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{FD5A94BE-CE43-46C5-8BD4-5250E2DF5AC2} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{FD60E15F-7BC6-4163-8F95-2228E7D1E7DB} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{FD850102-5765-47A9-A6B2-26F556B591CA} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{FE2414C6-A2C9-45D8-911F-3C84D734B043} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{FEC151B3-8FF5-432B-B78A-C01EBDD8FBFC} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{FF0A7B87-587F-4179-94AF-E4CD385124A6} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\{FF5998B8-7A33-40E5-B2BD-17557870A071} (Empty Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbfehkoinhhcknnbdgnnmjhiladcgbol (Folder)
Successfully deleted: C:\Users\Amy\AppData\Local\packageaware (Folder)
Successfully deleted: C:\Users\Amy\AppData\Roaming\Mozilla\Firefox\Profiles\f5xo4bih.default\extensions\trash (Folder)
Successfully deleted: C:\Users\Amy\AppData\Roaming\software informer (Folder)
Successfully deleted: C:\WINDOWS\wininit.ini (File)
Successfully deleted: C:\Program Files (x86)\myfree codec (Folder)
Successfully deleted: C:\Program Files (x86)\software informer (Folder)



Registry: 2

Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{3A4C54EC-0219-4DBC-B5B8-C988D5D3AFFB} (Registry Key)
Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6ED3F8CD-A3FC-4528-97FF-8D7AFA4140B9} (Registry Key)




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on di 07-03-2017 at 10:26:10,89
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


# AdwCleaner v6.044 - Logbestand aangemaakt 07/03/2017 op 10:34:04
# Bijgewerkt op 28/02/2017 door Malwarebytes
# Database : 2017-03-07.1 [Server]
# Besturingssysteem : Windows 10 Home (X64)
# Gebruikersnaam : Amy - AMY-MSI
# Gestart vanuit : C:\Users\Amy\Desktop\adwcleaner_6.044.exe
# Mode: Verwijderen
# Ondersteuning : https://www.malwarebytes.com/support



***** [ Services ] *****



***** [ Mappen ] *****

[-] Map verwijderd: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec
[-] Map verwijderd: C:\Users\Amy\AppData\Local\Geckofx


***** [ Bestanden ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Snelkoppelingen ] *****



***** [ Geplande Taken ] *****



***** [ Register ] *****

[-] Sleutel verwijderd: HKLM\SOFTWARE\Classes\Applications\iLividSetupV1[1].exe
[-] Sleutel verwijderd: HKLM\SOFTWARE\Classes\AppID\{7E8A36EA-2501-4ED3-A3C8-CFA9143FB169}
[-] Sleutel verwijderd: HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}
[-] Sleutel verwijderd: HKLM\SOFTWARE\Classes\Interface\{1C888195-0160-4883-91B7-294C0CE2F277}
[-] Sleutel verwijderd: HKLM\SOFTWARE\Classes\Interface\{99ACA0F7-D864-45CB-8C40-FD42A077E7CA}
[-] Sleutel verwijderd: HKLM\SOFTWARE\Classes\TypeLib\{6857AC4A-95B4-4E2C-B2D2-8A235FCCEF4A}
[-] Sleutel verwijderd: HKLM\SOFTWARE\Classes\TypeLib\{E69D4A59-73DE-4E38-9FB3-740EC4D9060D}
[-] Sleutel verwijderd: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
[-] Waarde verwijderd: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{21FA44EF-376D-4D53-9B0F-8A89D3229068}]
[-] Sleutel verwijderd: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\Software\Myfree Codec
[-] Sleutel verwijderd: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\Software\YahooPartnerToolbar
[-] Sleutel verwijderd: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
[-] Sleutel verwijderd: HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1097378128-3316138746-2142345461-1000\Software\StartNow Toolbar
[#] Sleutel verwijderd tijdens herstart: HKCU\Software\Myfree Codec
[#] Sleutel verwijderd tijdens herstart: HKCU\Software\YahooPartnerToolbar
[-] Sleutel verwijderd: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-18\Software\StartNow Toolbar
[-] Sleutel verwijderd: HKLM\SOFTWARE\Myfree Codec
[-] Sleutel verwijderd: HKLM\SOFTWARE\PIP
[#] Sleutel verwijderd tijdens herstart: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
[#] Sleutel verwijderd tijdens herstart: [x64] HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1097378128-3316138746-2142345461-1000\Software\StartNow Toolbar
[#] Sleutel verwijderd tijdens herstart: [x64] HKCU\Software\Myfree Codec
[#] Sleutel verwijderd tijdens herstart: [x64] HKCU\Software\YahooPartnerToolbar
[#] Sleutel verwijderd tijdens herstart: [x64] HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
[-] Sleutel verwijderd: HKLM\SOFTWARE\Classes\Installer\Features\2B1E51D87B2D71A44BB42DDD5E894160
[-] Sleutel verwijderd: HKLM\SOFTWARE\Classes\Installer\Products\2B1E51D87B2D71A44BB42DDD5E894160
[-] Sleutel verwijderd: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\2B1E51D87B2D71A44BB42DDD5E894160
[#] Sleutel verwijderd tijdens herstart: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\2B1E51D87B2D71A44BB42DDD5E894160
[#] Sleutel verwijderd tijdens herstart: [x64] HKLM\SOFTWARE\Classes\Installer\Features\2B1E51D87B2D71A44BB42DDD5E894160
[#] Sleutel verwijderd tijdens herstart: [x64] HKLM\SOFTWARE\Classes\Installer\Products\2B1E51D87B2D71A44BB42DDD5E894160
[-] Sleutel verwijderd: HKLM\SOFTWARE\Classes\AppID\Toolbar.DLL


***** [ Browsers ] *****

[-] [C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Verwijderd: r


*************************

:: "Tracing" sleutels verwijderd
:: Winsock instellingen gereset

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [4196 bytes] - [07/03/2017 10:34:04]
C:\AdwCleaner\AdwCleaner[S0].txt - [4240 bytes] - [07/03/2017 10:32:11]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [4342 bytes] ##########
 
Dan wil ik nu graag dat jij de Eset Online Scanner op de juiste wijze gaat gebruiken:

Zie daarvoor: Handleiding Eset Online scanner
Aansluitend graag het log ervan in jouw volgende antwoord posten.
 
C:\ProgramData\{C1D18E30-468F-478F-8837-B6CBA25F6547}\iLividSetupV1.res een variant van Win32/Toolbar.SearchSuite.Y potentieel ongewenste toepassing
C:\Users\All Users\{C1D18E30-468F-478F-8837-B6CBA25F6547}\iLividSetupV1.res een variant van Win32/Toolbar.SearchSuite.Y potentieel ongewenste toepassing
C:\Users\Amy\Cookies\Downloads\ccsetup527(1).exe Win32/Bundled.Toolbar.Google.D potentieel onveilige toepassing
C:\Users\Amy\Cookies\Downloads\ccsetup527.exe Win32/Bundled.Toolbar.Google.D potentieel onveilige toepassing
D:\Movies\ccsetup509.exe Win32/Bundled.Toolbar.Google.D potentieel onveilige toepassing
 
Alles verwijderd middels Eset?

En heb je nog meldingen ontvangen van Ziggo?
 
Nee ik heb nog niks verwijderd.
Vooralsnog blijft mijn internet het doen, dus ga ik er van uit dat er op dit moment geen spam verstuurd wordt.
Heb je iets gezien dat de oorzaak kan zijn van de spam mails?
 
Je hebt zelf alle oude Java verwijdert en vermoedelijk werd een en ander door malware daarin gedaan.
Want voor de rest adware en voor potentieel ongewenste programma's zijn verwijderd.

Waarschuwing: onderstaande bewerking is enkel voor deze computer bedoeld, het toepassen hiervan in een andere computer kan tot schade in Windows leiden.


We gaan
51a5c8edc4692-icon1337952077.png


Farbar Recovery Scan Tool (FRST.exe) opnieuw gebruiken.

Open een nieuw kladblok (of anders: notepad) bestand, via "Start\Alle programmas\Bureau-accessoires\Kladblok (of Notepad)".
Kopieer en plak de volgende (blauwe tekst in het code-venster) in het lege kladblokvenster.

Code:
[B][color=#0000FF]
start

CreateRestorePoint:
EmptyTemp:
CloseProcesses:

C:\ProgramData\{C1D18E30-468F-478F-8837-B6CBA25F6547}\iLividSetupV1
C:\Users\All Users\{C1D18E30-468F-478F-8837-B6CBA25F6547}\iLividSetupV1
C:\Users\Amy\Cookies\Downloads\ccsetup527(1).exe 
C:\Users\Amy\Cookies\Downloads\ccsetup527.exe

cmd: ipconfig /flushdns
cmd: netsh winsock reset
[/COLOR][/B]

Sla nu dit kladblokbestand in de dezelfde locatie waar ook FRST.exe aanwezig is op als Fixlist.txt

Farbar Recovery Scan Tool (FRST.exe) met de fixlist.txt gebruiken
  • Windows Vista, Windows 7, Windows 8 en Windows 10: via rechtsklik op FRST.exe en kies voor "Als Administrator uitvoeren".
  • Als het programma wordt gestart, klik dan op Ja in de popup.
  • Druk op de Fix knop.
  • Na de fix wordt een logbestand - Fixlog.txt - in dezelfde locatie aangemaakt van waaruit FRST.exe is gestart.
  • Post de inhoud van dit logbestand in jouw volgende bericht.
 
Hoi Abraham,

Dat is mooi. Ik zou voor de zekerheid nog graag mijn pc wil controleren, is dat een probleem en zou dat dan in dit topic kunnen?


Fix resultaat van Farbar Recovery Scan Tool (x64) Versie: 05-03-2017
Gestart door Amy (07-03-2017 22:41:40) Run:2
Gestart vanaf C:\Users\Amy\Desktop
Geladen Profielen: Amy (Beschikbare Profielen: Amy & DefaultAppPool)
Boot Modus: Normal
==============================================

fixlist inhoud:
*****************

start

CreateRestorePoint:
EmptyTemp:
CloseProcesses:

C:\ProgramData\{C1D18E30-468F-478F-8837-B6CBA25F6547}\iLividSetupV1
C:\Users\All Users\{C1D18E30-468F-478F-8837-B6CBA25F6547}\iLividSetupV1
C:\Users\Amy\Cookies\Downloads\ccsetup527(1).exe
C:\Users\Amy\Cookies\Downloads\ccsetup527.exe

cmd: ipconfig /flushdns
cmd: netsh winsock reset
*****************

Herstelpunt is succesvol gemaakt.
Proces succesvol afgesloten.
"C:\ProgramData\{C1D18E30-468F-478F-8837-B6CBA25F6547}\iLividSetupV1" => niet gevonden.
"C:\Users\All Users\{C1D18E30-468F-478F-8837-B6CBA25F6547}\iLividSetupV1" => niet gevonden.
C:\Users\Amy\Cookies\Downloads\ccsetup527(1).exe => is succesvol verplaatst.
C:\Users\Amy\Cookies\Downloads\ccsetup527.exe => is succesvol verplaatst.

========= ipconfig /flushdns =========


Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========= Eind van CMD: =========


========= netsh winsock reset =========


Sucessfully reset the Winsock Catalog.
You must restart the computer in order to complete the reset.


========= Eind van CMD: =========


=========== EmptyTemp: ==========

BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 12764195 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 10980 B
Edge => 0 B
Chrome => 0 B
Firefox => 379107849 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 128 B
systemprofile32 => 0 B
LocalService => 13874 B
NetworkService => 1280 B
Amy => 6180290 B
DefaultAppPool => 0 B

RecycleBin => 0 B
EmptyTemp: => 379.6 MB tijdelijke gegevens verwijderd.

================================


Het systeem moest herstart worden.

==== Eind van Fixlog 22:43:59 ====
 
Download
51e2903039553-TDSSKiller_Resized.png
TDSSKiller en (ver)plaats de download naar/op het bureaublad.

  • Dubbelklik op TDSSKiller.exe om de tool te starten. (Indien je TDSSKiller als ZIP bestand hebt gedownload dien je deze eerst uit te pakken).
  • Als er door TDSSkiller een update wordt gevonden klikt u op de knop "Load update"
  • Een nieuwe versie van TDSSkiller zal nu gedownload worden en sla deze op het bureaublad op.
  • Start nu TDSSkiller opnieuw.
  • Klik in het licentiescherm op "Accept" om door te gaan.
  • Vervolgens krijgt u het scherm te zien van het "Kaspersky Security Network Statement" klik hier eveneens op "Accep".
  • Klik op "Change parameters" en zorg dat de onderstaande opties allemaal aangevinkt zijn.

    5247f2ef6060f-TDSSKiller-parameters.jpg

  • Klik op de knop "Start Scan" en volg de instructies.

  • Gebruik nooit de "Delete" of "Quarantaine" optie bij een "Fail signature" melding.
  • Wanneer er een herstart nodig was, vind je de logfile in C:\TDSSKiller.[Version]_[Date]_[Time]_log.txt
  • Post de inhoud van dit logbestand in jouw volgende bericht.
 
Hoi Abraham,

Er werd niets gevonden door TDSSKiller
 
Hoi Abraham,


23:22:52.0489 0x0b6c TDSS rootkit removing tool 3.1.0.12 Nov 7 2016 07:10:01
23:23:09.0662 0x0b6c ============================================================
23:23:09.0662 0x0b6c Current date / time: 2017/03/07 23:23:09.0662
23:23:09.0662 0x0b6c SystemInfo:
23:23:09.0677 0x0b6c
23:23:09.0677 0x0b6c OS Version: 10.0.14393 ServicePack: 0.0
23:23:09.0677 0x0b6c Product type: Workstation
23:23:09.0677 0x0b6c ComputerName: AMY-MSI
23:23:09.0677 0x0b6c UserName: Amy
23:23:09.0677 0x0b6c Windows directory: C:\WINDOWS
23:23:09.0677 0x0b6c System windows directory: C:\WINDOWS
23:23:09.0677 0x0b6c Running under WOW64
23:23:09.0677 0x0b6c Processor architecture: Intel x64
23:23:09.0677 0x0b6c Number of processors: 4
23:23:09.0677 0x0b6c Page size: 0x1000
23:23:09.0677 0x0b6c Boot type: Normal boot
23:23:09.0677 0x0b6c CodeIntegrityOptions = 0x00000001
23:23:09.0677 0x0b6c ============================================================
23:23:10.0255 0x0b6c KLMD registered as C:\WINDOWS\system32\drivers\55842787.sys
23:23:10.0255 0x0b6c KLMD ARK init status: drvProperties = 0xFFF00, osBuild = 14393.693, osProperties = 0x19
23:23:10.0880 0x0b6c System UUID: {88EFE4CD-05A8-41FB-2DA7-7DFCDFFDB11B}
23:23:12.0412 0x0b6c Drive \Device\Harddisk0\DR0 - Size: 0x7470C06000 ( 465.76 Gb ), SectorSize: 0x200, Cylinders: 0xED81, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
23:23:12.0427 0x0b6c ============================================================
23:23:12.0427 0x0b6c \Device\Harddisk0\DR0:
23:23:12.0427 0x0b6c MBR partitions:
23:23:12.0427 0x0b6c \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1832800, BlocksNum 0x222CB800
23:23:12.0427 0x0b6c \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x23AFE000, BlocksNum 0x16887800
23:23:12.0427 0x0b6c ============================================================
23:23:12.0458 0x0b6c C: <-> \Device\Harddisk0\DR0\Partition1
23:23:12.0505 0x0b6c D: <-> \Device\Harddisk0\DR0\Partition2
23:23:12.0505 0x0b6c ============================================================
23:23:12.0505 0x0b6c Initialize success
23:23:12.0505 0x0b6c ============================================================
23:23:27.0365 0x09b0 ============================================================
23:23:27.0365 0x09b0 Scan started
23:23:27.0365 0x09b0 Mode: Manual; SigCheck; TDLFS;
23:23:27.0365 0x09b0 ============================================================
23:23:27.0365 0x09b0 KSN ping started
23:23:28.0084 0x09b0 KSN ping finished: true
23:23:32.0833 0x09b0 ================ Scan system memory ========================
23:23:32.0833 0x09b0 System memory - ok
23:23:32.0833 0x09b0 ================ Scan services =============================
23:23:33.0036 0x09b0 [ A7901875F89D011C38CF52C98ACF5B29, 782141AB1DD7ACDE6EA08B5BAFDE8BADD05B81D38C18E097D6D9C46102056EB1 ] 1394ohci C:\WINDOWS\System32\drivers\1394ohci.sys
23:23:33.0364 0x09b0 1394ohci - ok
23:23:33.0411 0x09b0 [ EE1CCC54F75C24727A218F98FC5349DA, 0B0D26640BFA0F551B7087027E572D0BF2C5EAF50A4187C5A7D839180B7FF589 ] 3ware C:\WINDOWS\system32\drivers\3ware.sys
23:23:33.0458 0x09b0 3ware - ok
23:23:33.0708 0x09b0 [ ADC420616C501B45D26C0FD3EF1E54E4, 29FC41D40A35AC5476E2A673CE5B12684E0CFA12A1AEBEEBE5883FBA5CA68B67 ] ACDaemon C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
23:23:33.0739 0x09b0 ACDaemon - ok
23:23:33.0833 0x09b0 [ 73C73E1AA0D4D727A04AAAB120B7F56A, 5D311F11022994410DF5C67914D38B1F0D813EFD181EA234750286A272D67A1A ] ACPI C:\WINDOWS\system32\drivers\ACPI.sys
23:23:33.0880 0x09b0 ACPI - ok
23:23:33.0911 0x09b0 [ 0935496EF9624B46B935CB35ECE1F205, A22A2A29195505A65E8626D60B00C86C23E0CABC1EB8345EA5ED523516CC21C0 ] AcpiDev C:\WINDOWS\System32\drivers\AcpiDev.sys
23:23:33.0989 0x09b0 AcpiDev - ok
23:23:34.0036 0x09b0 [ D6794C31F4077B71433988787BAA926E, F16365C2F195AAE94D4740E6C3DF4C0CECEC6393CAD65425DCCD28CDBA6EC51A ] acpiex C:\WINDOWS\system32\Drivers\acpiex.sys
23:23:34.0067 0x09b0 acpiex - ok
23:23:34.0083 0x09b0 [ FE5F656D6B35089DA39112E74EC6A85A, 5D81EE63998232A5B36DE47FE15B9D04D5BD02234CA133A2462AECA8C60A22ED ] acpipagr C:\WINDOWS\System32\drivers\acpipagr.sys
23:23:34.0177 0x09b0 acpipagr - ok
23:23:34.0224 0x09b0 [ 2F242941E4DFF69B883D77A16F039557, 45C388365317C720654A659A9326B2BC0E9D84929C704654985597D5D620101C ] AcpiPmi C:\WINDOWS\System32\drivers\acpipmi.sys
23:23:34.0317 0x09b0 AcpiPmi - ok
23:23:34.0333 0x09b0 [ C247E35A21682DA8D0DC3AF9F025FCC5, 455415EE3166B3043AD8A4DD50B688DB74242267FB555642441251EFA823E971 ] acpitime C:\WINDOWS\System32\drivers\acpitime.sys
23:23:34.0380 0x09b0 acpitime - ok
23:23:34.0489 0x09b0 [ B79750091FC0842182FE49D263791294, 32FC260A74C9C45CD1E8998523642C285866378FCD9478FEFD15A0CC42EC0E0B ] AdobeFlashPlayerUpdateSvc C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
23:23:34.0536 0x09b0 AdobeFlashPlayerUpdateSvc - ok
23:23:34.0630 0x09b0 [ 49B9DB97AFC85DCCBDACDAB2E90085B7, 2A6C2A09F74EA15044F442CCFB54A0F24F105ADB915E5C78F02F59652DC29152 ] ADP80XX C:\WINDOWS\system32\drivers\ADP80XX.SYS
23:23:34.0692 0x09b0 ADP80XX - ok
23:23:34.0755 0x09b0 [ 323AA1953ED9C01E23F740FA891FE064, 4CED6E3D61749316CDE28965C913E7ED462539DAAD637A29484F62AF47AD650D ] AFD C:\WINDOWS\system32\drivers\afd.sys
23:23:34.0817 0x09b0 AFD - ok
23:23:34.0864 0x09b0 [ 23522E5D581F7722B1B5B86737CAE39C, FB81ABD304376A1E87B65F5E1B34477B628CEDB2091C5D754DE97464B6050C5B ] ahcache C:\WINDOWS\system32\DRIVERS\ahcache.sys
23:23:34.0974 0x09b0 ahcache - ok
23:23:35.0036 0x09b0 [ D0905D4A945D01D4B28DB9E1BD5985F7, CF389CBCD3B99D1BAE34A42F723F1005C32213A394F691978076D3DF1727715C ] AJRouter C:\WINDOWS\System32\AJRouter.dll
23:23:35.0146 0x09b0 AJRouter - ok
23:23:35.0161 0x09b0 [ 3190C577746303CA4C65114441192FE2, AEE970D59E9FB314B559CF0C41DD2CD3C9C9B5DD060A339368000F975F4CD389 ] aksdf C:\WINDOWS\system32\drivers\aksdf.sys
23:23:35.0192 0x09b0 aksdf - ok
23:23:35.0208 0x09b0 [ 2845A05E5AF65B5C7A143D637F08496D, 38DB4590EDD8CBE735ED0C072A03F4E619A3CDA7B8D908FD1CA8E90728F077EF ] aksfridge C:\WINDOWS\system32\drivers\aksfridge.sys
23:23:35.0239 0x09b0 aksfridge - ok
23:23:35.0286 0x09b0 [ 8FD51B3B35707A66080D7C8CB05E792D, FE52F3DC280D208FDDC75F6E3294B8D601E0D86F9BD3DB1ACC8FC296AC74C23B ] ALG C:\WINDOWS\System32\alg.exe
23:23:35.0396 0x09b0 ALG - ok
23:23:35.0427 0x09b0 [ DF21E05E41E5AC3F13F304D91457649A, 7F48F2AD1DBE89A261113C76D7C23AD7D87D5599BCC31F8A558A8A10B81BF521 ] AmdK8 C:\WINDOWS\System32\drivers\amdk8.sys
23:23:35.0505 0x09b0 AmdK8 - ok
23:23:35.0552 0x09b0 [ 45D0AA4BB90B821DF92E8F19ABED0C5E, EA87A6E98DB3C5A88A844C04C6934E870B7004E783AA5211722115382A211B90 ] AmdPPM C:\WINDOWS\System32\drivers\amdppm.sys
23:23:35.0599 0x09b0 AmdPPM - ok
23:23:35.0630 0x09b0 [ 74FFBC43B4B899C9A8CA06A892F2CE73, 8D599363C7F3D373F1859BAA4D06DD0F40BE78B56BE52B74DE6EA6EF99452004 ] amdsata C:\WINDOWS\system32\drivers\amdsata.sys
23:23:35.0646 0x09b0 amdsata - ok
23:23:35.0677 0x09b0 [ AAB0F1D8D7E54761ABAB13AF161F1680, CF847990EFFA2828F5B1DB1A68F08A6C2C918E9612EDFFCF95C36BCABBBEA272 ] amdsbs C:\WINDOWS\system32\drivers\amdsbs.sys
23:23:35.0708 0x09b0 amdsbs - ok
23:23:35.0739 0x09b0 [ F91BAAC4237C40352A807000F3B716F9, F7EFA08E5067C3D419C9D21EDB880BA08883A80DDF35F8B42EC3AB293FE5E03E ] amdxata C:\WINDOWS\system32\drivers\amdxata.sys
23:23:35.0755 0x09b0 amdxata - ok
23:23:35.0880 0x09b0 [ 42A60840C182E9CFCD4E5EF950303512, E7C3D9888529156D9FB03BC51B170AC027ABA6E7B1ED69FA29944546A202907A ] AntiVirMailService C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe
23:23:35.0942 0x09b0 AntiVirMailService - ok
23:23:35.0989 0x09b0 [ 58FD213E044D88825E411A1A0A6AEE64, 870591B7995874215C70218F460C1761564533D75BD4855ACB071F9425AAAB77 ] AntiVirSchedulerService C:\Program Files (x86)\Avira\Antivirus\sched.exe
23:23:36.0021 0x09b0 AntiVirSchedulerService - ok
23:23:36.0067 0x09b0 [ 58FD213E044D88825E411A1A0A6AEE64, 870591B7995874215C70218F460C1761564533D75BD4855ACB071F9425AAAB77 ] AntiVirService C:\Program Files (x86)\Avira\Antivirus\avguard.exe
23:23:36.0114 0x09b0 AntiVirService - ok
23:23:36.0192 0x09b0 [ 4C1B4579EF9D12C88132367333F8F794, 2193359E04F5313BFB7E5FE9AF6D7FBCFFF2CEBCC217F29817F9D450C91160DD ] AntiVirWebService C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe
23:23:36.0271 0x09b0 AntiVirWebService - ok
23:23:36.0396 0x09b0 [ 5B0F4FB165256DE463A51E3A3127969E, 6751ADFFE95FA671C584427A9624EEB79518DE08132FD7A83148700B75487316 ] AppHostSvc C:\WINDOWS\system32\inetsrv\apphostsvc.dll
23:23:36.0552 0x09b0 AppHostSvc - ok
23:23:36.0599 0x09b0 [ BC121C099C6C659126AD2102AFDFF8CF, 42B5EE293BDD7ADCE48173A01B30D8452564B9DA225EAF25E9292FE77C0FCF3E ] AppID C:\WINDOWS\system32\drivers\appid.sys
23:23:36.0630 0x09b0 AppID - ok
23:23:36.0677 0x09b0 [ 74A24CF946279111D7F203B36569EC02, FD67D36804744B4FE3E20BA891852575E6C2DA6515643B2F4B4210118B0FCCDA ] AppIDSvc C:\WINDOWS\System32\appidsvc.dll
23:23:36.0771 0x09b0 AppIDSvc - ok
23:23:36.0802 0x09b0 [ 73FAA5517CCD1332F00192A303CF2026, 75636222BFF381A3EECA010752DF7DC1603A395B91FF7FBF92127B5CA8EFFEE5 ] Appinfo C:\WINDOWS\System32\appinfo.dll
23:23:36.0896 0x09b0 Appinfo - ok
23:23:36.0927 0x09b0 [ 68190E2BADF23BD782344970E5B5DE9E, 95D30EC12C7FDF5822CED8BC2F17669A6687A2FB262B4F0D15C8DCFF4E9AB33D ] applockerfltr C:\WINDOWS\system32\drivers\applockerfltr.sys
23:23:37.0021 0x09b0 applockerfltr - ok
23:23:37.0083 0x09b0 [ A0746EF6C5AB7A17A67BC167167499C1, 1D2154D3AFC5219293EDD508C7726E7756FB72BF04F73861C575D1FE5C553411 ] AppReadiness C:\WINDOWS\system32\AppReadiness.dll
23:23:37.0192 0x09b0 AppReadiness - ok
23:23:37.0333 0x09b0 [ D70B1453ADA82A92E76EAE72D936A0F6, 439DBC5818025887343D4B5B509C7D2C97ED0FFA4641A5178EA5719C50E5013F ] AppXSvc C:\WINDOWS\system32\appxdeploymentserver.dll
23:23:37.0552 0x09b0 AppXSvc - ok
23:23:37.0599 0x09b0 [ E6AB1F0B4C3D4E0D2A88332D76FECD03, 0D3003EB979DA4546DCDD055011E24F13E34F683F02C9801CAC564D1809F11D2 ] arcsas C:\WINDOWS\system32\drivers\arcsas.sys
23:23:37.0614 0x09b0 arcsas - ok
23:23:37.0755 0x09b0 [ 5EE26734A882478AF6696092E2E0F352, 6CACFF521B3B839F73EBEB6EFBFDCCA8A8BC319DDB254BE3EFE29A39040B2C26 ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe
23:23:37.0786 0x09b0 aspnet_state - ok
23:23:37.0802 0x09b0 [ 61C5A480C43E7E8E49C42869F49D0D3E, E610F0E4315ABA1D90AD4A1D7A68ABA2ACBB7FCA89E9D1798470365D52592D55 ] AsyncMac C:\WINDOWS\System32\drivers\asyncmac.sys
23:23:37.0880 0x09b0 AsyncMac - ok
23:23:37.0911 0x09b0 [ A10F989A812B57B9695F6C305907C9C6, E2B292610079AA1A10696138DE8130905A8A834B75A8DED7EBF8B6732B77A0F4 ] atapi C:\WINDOWS\system32\drivers\atapi.sys
23:23:37.0943 0x09b0 atapi - ok
23:23:38.0146 0x09b0 [ D03E551165C72F2A4BBDDC566EAA819E, 8047E2D20724B464B481F06C3AC1FA5734E97F7EC0D86EFEECD76480C84B3959 ] athr C:\WINDOWS\System32\drivers\athwnx.sys
23:23:38.0458 0x09b0 athr - ok
23:23:38.0521 0x09b0 [ 2DC3D53FFA0D10EB8C911AE2DB7BF4CF, 8E0A4B5D610D487A216E70396A99ACC1BEA12C46A6681B1A39CD0FD01EDD406A ] AudioEndpointBuilder C:\WINDOWS\System32\AudioEndpointBuilder.dll
23:23:38.0646 0x09b0 AudioEndpointBuilder - ok
23:23:38.0708 0x09b0 [ 7B993290E7691C446C16A56A431669BA, 004551934E27E9FC1A939C9BD1DEB850A216CBED9B18CB3317920F5656D9F6BF ] Audiosrv C:\WINDOWS\System32\Audiosrv.dll
23:23:38.0817 0x09b0 Audiosrv - ok
23:23:38.0849 0x09b0 [ 11F3AAFB5D279AFBCBB0AD9FF76A24F8, 06C5FA1BD64EB54691629363DD0771394F81E4EB216E489D5169395736E80D99 ] avgntflt C:\WINDOWS\system32\DRIVERS\avgntflt.sys
23:23:38.0880 0x09b0 avgntflt - ok
23:23:38.0896 0x09b0 [ F8520E88246641E51108922944FB34A6, 326DCB8114439FB1F75E9DB6E5F7818654FAAC4CD957B80DEE17B850676A737F ] avipbb C:\WINDOWS\system32\DRIVERS\avipbb.sys
23:23:38.0927 0x09b0 avipbb - ok
23:23:39.0005 0x09b0 [ B4ECF135B4D7C6B8DB82A3812674CEE1, 5FE5D9C911223C66888A50C2347751C8DBFE014388357AB6403F4916FAFA384B ] Avira.ServiceHost C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
23:23:39.0036 0x09b0 Avira.ServiceHost - ok
23:23:39.0068 0x09b0 [ 2CBA09A7983B1D39531B768BCED08C20, B40968DFE1A648CCB9260033E1EA57B5D496274A335B000354156B0DB740EDE0 ] avkmgr C:\WINDOWS\system32\DRIVERS\avkmgr.sys
23:23:39.0083 0x09b0 avkmgr - ok
23:23:39.0130 0x09b0 [ 8D18C6406FF8DC39028177E1E5675182, 44985DEE74F235567FB849350256F342BCE26EF66439D761FA3F6EDA22882092 ] avnetflt C:\WINDOWS\system32\DRIVERS\avnetflt.sys
23:23:39.0146 0x09b0 avnetflt - ok
23:23:39.0177 0x09b0 [ D50D54178CA7BF63BD60ABEC8E7772CC, 19EFE0808C2660A22DD69158FEC30F8CB83167D832C3EBE12C99261C6FB79ADF ] avusbflt C:\WINDOWS\system32\Drivers\avusbflt.sys
23:23:39.0193 0x09b0 avusbflt - ok
23:23:39.0255 0x09b0 [ 6D90FDA2DC364B8EA1420F2F81585CC3, 10E6F23A213CFE49BE04BB7D366ADD4028D61D7114FEC67C30B5467DF6B36D4F ] AxInstSV C:\WINDOWS\System32\AxInstSV.dll
23:23:39.0333 0x09b0 AxInstSV - ok
23:23:39.0380 0x09b0 [ 61BAC67048CA5C1D08C48FCC8012B613, 71B2A466FC38DA1029B471FBD2541D8FE359751A7B212AE0F420DB3645916450 ] b06bdrv C:\WINDOWS\system32\drivers\bxvbda.sys
23:23:39.0427 0x09b0 b06bdrv - ok
23:23:39.0458 0x09b0 [ 68F72B05EBC6D1779C0D60A147C7CA0B, AA1C857BEE34865C6B901157FC22570D4CF45D950708BAD7AA333F120F2B474C ] BasicDisplay C:\WINDOWS\System32\drivers\BasicDisplay.sys
23:23:39.0536 0x09b0 BasicDisplay - ok
23:23:39.0568 0x09b0 [ 23156E7EDAF613D839E2839746B168D3, CAEF8F9C7D3A338BD747AC9D5BFBE730D77B911E87BCF532EBB75E1F80916AFA ] BasicRender C:\WINDOWS\System32\drivers\BasicRender.sys
23:23:39.0614 0x09b0 BasicRender - ok
23:23:39.0661 0x09b0 [ 3F5523DCEFE42B385659C5CB46A6B810, CA24A3DF002B19E7BDEDE9B5EB60623F299D0E78B2E4F58DCFC028D76DEFE52D ] bcmfn C:\WINDOWS\System32\drivers\bcmfn.sys
23:23:39.0708 0x09b0 bcmfn - ok
23:23:39.0739 0x09b0 [ 0B750A6A6D847E73CA48ADD7A0F5A393, 6A43020F23846EFB1AFA3C070465B0059E9DF60DEB16899E09559462DF30939F ] bcmfn2 C:\WINDOWS\System32\drivers\bcmfn2.sys
23:23:39.0786 0x09b0 bcmfn2 - ok
23:23:39.0833 0x09b0 [ 2B4D3AEAAD02954F8C191BC2D67949AD, 8237C9AD556CFAF7442FF60F78608104BC17CE3134C89D986D49C38CC60B1518 ] BDESVC C:\WINDOWS\System32\bdesvc.dll
23:23:39.0943 0x09b0 BDESVC - ok
23:23:39.0989 0x09b0 [ 0A508274355745EEF01C6BE3198D02C4, E2DB08AEE2368FA95FDB357BB31EA4EBF31679C3E72E109DB3D7CD1B5F7B828E ] Beep C:\WINDOWS\system32\drivers\Beep.sys
23:23:40.0099 0x09b0 Beep - ok
23:23:40.0161 0x09b0 [ 5125CBB61AC81168366BEB290399CB8E, B2A3095D45E2114DE2BD0E5A3AE20B3CE95EE517A35B9E1EAD05E231F38DBDCF ] BFE C:\WINDOWS\System32\bfe.dll
23:23:40.0302 0x09b0 BFE - ok
23:23:40.0349 0x09b0 BITCOMET_HELPER_SERVICE - ok
23:23:40.0427 0x09b0 [ D876C567AB767258036F05E4766189FD, DE8BA67325CB64495BD454B8F9DDCAE82636253844FC68B360C7E1CF5D51DD0E ] BITS C:\WINDOWS\System32\qmgr.dll
23:23:40.0583 0x09b0 BITS - ok
23:23:40.0630 0x09b0 [ 9CD2A4821DE379305CACB2E99AD8953A, 89D700DFC3C59ACBBADB48954A28C0EBF8D6A11A9E63837689DD891868E43188 ] bowser C:\WINDOWS\system32\DRIVERS\bowser.sys
23:23:40.0708 0x09b0 bowser - ok
23:23:40.0771 0x09b0 [ 2447BD15B41298622CC662249CD0F496, 013A326D2E3BF68D654BBABE2F1E5DF0FF0A153A4B95D570EE28F9BC0F5A78C3 ] BrokerInfrastructure C:\WINDOWS\System32\bisrv.dll
23:23:40.0911 0x09b0 BrokerInfrastructure - ok
23:23:40.0958 0x09b0 [ B3F32C630DD3F2F6A6091B89CFF13641, 7A9C53EF9AB9FF1DC392FD711B194A101DB36CA5BC799E817BEB446741089B76 ] Browser C:\WINDOWS\System32\browser.dll
23:23:41.0052 0x09b0 Browser - ok
23:23:41.0099 0x09b0 [ 722036C26D2C4E50EC2A2EC5FD678846, 999468038AE01F0FF6881F4B2A2CB67BC636641188E95F10729E08ADBC3CB3DE ] BthAvrcpTg C:\WINDOWS\System32\drivers\BthAvrcpTg.sys
23:23:41.0130 0x09b0 BthAvrcpTg - ok
23:23:41.0161 0x09b0 [ C2E31BE025D46D189E38DD1EDF07837A, 656528DCAAAF485EC57EE5C3021E96736634DE3B9C39CBCD2728E055ABD4C0A5 ] BthHFEnum C:\WINDOWS\System32\drivers\bthhfenum.sys
23:23:41.0208 0x09b0 BthHFEnum - ok
23:23:41.0224 0x09b0 [ F7CD605FC0B0B22F3F6F247595E3A655, 1CD9140DE5415DDBEACD8667E63E5C95FD64D693B56302A0474E693E578BEAB0 ] bthhfhid C:\WINDOWS\System32\drivers\BthHFHid.sys
23:23:41.0286 0x09b0 bthhfhid - ok
23:23:41.0333 0x09b0 [ B157D72BDA6A6DD6E9DC6BF338CD0CF8, B2AC26AE214151E5AD93DED78256BC0295DBF0133C854E7DEE4CD776D9C9A349 ] BthHFSrv C:\WINDOWS\System32\BthHFSrv.dll
23:23:41.0427 0x09b0 BthHFSrv - ok
23:23:41.0458 0x09b0 [ 535DC41A33630AE4C262406F9E981C03, 599332589AA28D04189E19B87A4AE6FEEB60B40A7BC6E3B11240DA363A981C29 ] BTHMODEM C:\WINDOWS\System32\drivers\bthmodem.sys
23:23:41.0505 0x09b0 BTHMODEM - ok
23:23:41.0583 0x09b0 [ 96932F631F5CB9F5D1C8F99A71568EF3, 5E4C8955A2EE9DC76B4EBC383653EB753D76D6B017E1A5DD553AC16094D7F12A ] bthserv C:\WINDOWS\system32\bthserv.dll
23:23:41.0677 0x09b0 bthserv - ok
23:23:41.0724 0x09b0 [ 23F9EF739F685E07482116425E7879AA, 0EBDF96A49A319C0BCF6F51FB6C8C392C017E1738B950C19C91FF43E14D73143 ] buttonconverter C:\WINDOWS\System32\drivers\buttonconverter.sys
23:23:41.0818 0x09b0 buttonconverter - ok
23:23:41.0864 0x09b0 [ 60EB6A4CE3E21887D302350631C16F26, 4270EFA22285C1A9336CF1220761E416950D2DA9C6A40D1D8452686CD5040DAB ] CapImg C:\WINDOWS\System32\drivers\capimg.sys
23:23:42.0068 0x09b0 CapImg - ok
23:23:42.0083 0x09b0 [ F8FB51B9EF6372610E9B31A1D86B62FC, 7461584A8B39AC549AD7BAFFA509D4CD81EEE542808BC8EFC285863A0AE6432D ] cdfs C:\WINDOWS\system32\DRIVERS\cdfs.sys
23:23:42.0161 0x09b0 cdfs - ok
23:23:42.0208 0x09b0 [ 2E6612376D257F74781F2EF1F869D8C3, 908B0DECB9F098F7F11B029A03C06C67FB52E5E8BEA42033A2B579D3B3686AB8 ] CDPSvc C:\WINDOWS\System32\CDPSvc.dll
23:23:42.0318 0x09b0 CDPSvc - ok
23:23:42.0380 0x09b0 [ A93C9B9EBE2FDE5A536000D72CC17F7F, 9793CFAE8BE8C6B5B39A1D276577965FBB2CE131325A410B7C68BD23492ADAAF ] CDPUserSvc C:\WINDOWS\System32\CDPUserSvc.dll
23:23:42.0458 0x09b0 CDPUserSvc - ok
23:23:42.0521 0x09b0 [ 613D0137C269187FA298A157E3D14A18, 84BC268525F14BB27202CE242BF94D9E83BC91B50A0335908574F31B29A2F04D ] cdrom C:\WINDOWS\System32\drivers\cdrom.sys
23:23:42.0583 0x09b0 cdrom - ok
23:23:42.0630 0x09b0 [ C1B5EE58E759C53F9939581709DC70BB, 85095ABC9459A766832373BC3839E573E9A73C967F8427D6B7CAB972551C3191 ] CertPropSvc C:\WINDOWS\System32\certprop.dll
23:23:42.0739 0x09b0 CertPropSvc - ok
23:23:42.0802 0x09b0 [ 0AED948DA8D5F08B3D6F12E4E2089736, 95E538E81DDBC83492C5F3820C82C78F050B4D74ACF12D7970EC84F93581AE29 ] cht4iscsi C:\WINDOWS\system32\drivers\cht4sx64.sys
23:23:42.0833 0x09b0 cht4iscsi - ok
23:23:42.0927 0x09b0 [ 0002A0FDE087C1657AB31CE73077539C, 4DD6210B67E9633AB3240371590869DC833A4C986C74FC12A5D4FFFFD361848A ] cht4vbd C:\WINDOWS\System32\drivers\cht4vx64.sys
23:23:43.0036 0x09b0 cht4vbd - ok
23:23:43.0099 0x09b0 [ 6B4F90A287D75CCD78694F6790C911B2, 73D7C31E9F475FA3FD568FCA9A953F968729AA114F63C06F38BF5198DAD67BD8 ] circlass C:\WINDOWS\System32\drivers\circlass.sys
23:23:43.0146 0x09b0 circlass - ok
23:23:43.0193 0x09b0 [ B72D26074E72A757D788FB1BEF8B2F2E, 36847C5315AFB9A5EC66AD3EF2A09C24C0FAF669FDF0831F78600F4609352CB4 ] CLFS C:\WINDOWS\system32\drivers\CLFS.sys
23:23:43.0224 0x09b0 CLFS - ok
23:23:43.0302 0x09b0 [ E133CFCBFABB3CB517BE9F42FEA5887C, DA699CDD5F3CC427354540C907BD24CCA7BAC3112C53918EB611CB4EEC7611DA ] ClipSVC C:\WINDOWS\System32\ClipSVC.dll
23:23:43.0349 0x09b0 ClipSVC - ok
23:23:43.0411 0x09b0 [ EEC3A4A98AE1A337E3CD1483AD6F2E15, 764DA329984A95E092F5C15116DA34FA7FC27216C0862365D4BF10ADC97EC5C5 ] clreg C:\WINDOWS\System32\drivers\registry.sys
23:23:43.0489 0x09b0 clreg - ok
23:23:43.0552 0x09b0 [ 429623E266EF067A44E8CF148E9DFB9B, A48AA85ACC52C7AD73DB2D6148B3F9FB5EAC33C8F8C5BB6D7D0A9D84B7C08E11 ] CmBatt C:\WINDOWS\System32\drivers\CmBatt.sys
23:23:43.0614 0x09b0 CmBatt - ok
23:23:43.0661 0x09b0 [ 90C07EB909C42316982E753BDAA7860D, 438581FD3468FAF01D35529672201A920E8821EC80E30E59A43645DA57738F21 ] CNG C:\WINDOWS\system32\Drivers\cng.sys
23:23:43.0708 0x09b0 CNG - ok
23:23:43.0739 0x09b0 [ 3DB10C59405931E2C72EFB82C1AF97D1, 100B5450A70988DB1C1F8A5FDBB3553AF1A0D47B42A5AC71460DB92E26010CE6 ] cnghwassist C:\WINDOWS\system32\DRIVERS\cnghwassist.sys
23:23:43.0755 0x09b0 cnghwassist - ok
23:23:43.0880 0x09b0 [ 34C935AF2A414572B412B3556586D783, 912981B88B0796576ECCD5EBE0C4728EC02D5D6A96B039447DCBA59B2583F25E ] CompositeBus C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_a140581a8f8b58b7\CompositeBus.sys
23:23:43.0927 0x09b0 CompositeBus - ok
23:23:43.0927 0x09b0 COMSysApp - ok
23:23:43.0958 0x09b0 [ 44EEEB2382F566999287E13F2067693C, 53A4A0C85EAD38030FF2078C67465E3710ECD03A08FF34E1E67B2E3E1CC70043 ] condrv C:\WINDOWS\system32\drivers\condrv.sys
23:23:43.0989 0x09b0 condrv - ok
23:23:44.0052 0x09b0 [ 5DE2049D5F57C1D142F36FA9CE443693, E6C2807C0B1EF90C11EB39634693B76EACE6CC675777776112835212A334F328 ] CoreMessagingRegistrar C:\WINDOWS\system32\coremessaging.dll
23:23:44.0114 0x09b0 CoreMessagingRegistrar - ok
23:23:44.0177 0x09b0 [ 5F06CAC4B09250CDDDD0180A08162924, A2EB0A57225E65FC264CFC9FAD858D8B54A015CDAE3DC904B1C4E9AAB40B1F06 ] CryptSvc C:\WINDOWS\system32\cryptsvc.dll
23:23:44.0271 0x09b0 CryptSvc - ok
23:23:44.0333 0x09b0 [ 6C9CF7CB91048B306341346924CC2E08, C8D681EF93E89710FFEFD230D7710A874AED38DB8C578F56EA0D412878578FDC ] ctxusbm C:\WINDOWS\system32\DRIVERS\ctxusbm.sys
23:23:44.0364 0x09b0 ctxusbm - ok
23:23:44.0396 0x09b0 [ 039B5A8CBD5C75D1C46DF15F7C74D136, A5C8A41F2D406D37E147939F2058373ED091BFCC00CA7E829F887638CD3A2F64 ] dam C:\WINDOWS\system32\drivers\dam.sys
23:23:44.0427 0x09b0 dam - ok
23:23:44.0505 0x09b0 [ 7BD259FC59CF9C2AE1B979564B374CC6, 299832FCE304A85080C80ABFE820A6093AC15A7C1E7C89D8C946708E955A2909 ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
23:23:44.0599 0x09b0 DcomLaunch - ok
23:23:44.0661 0x09b0 [ AE9F09F87755C18904656CB4F59F351D, B352A43B3B68B497D87B49C302AF3F37F36D56D49878AE3785C3D43597E5DC57 ] DcpSvc C:\WINDOWS\system32\dcpsvc.dll
23:23:44.0740 0x09b0 DcpSvc - ok
23:23:44.0802 0x09b0 [ ABBD3EE724117242E28D31F19FBCFF03, 68EA91A969DD80A5DE28B0A8EAEB308837183713559C2C2FAEF991858C971393 ] defragsvc C:\WINDOWS\System32\defragsvc.dll
23:23:44.0880 0x09b0 defragsvc - ok
23:23:44.0927 0x09b0 [ DD74F18227ACC837D9856E24282D446D, 6A760E44CD897952538CDFA8895FE11263D51AAA79CFF24C01F3862E919DA478 ] DeviceAssociationService C:\WINDOWS\system32\das.dll
23:23:45.0068 0x09b0 DeviceAssociationService - ok
23:23:45.0115 0x09b0 [ FEA494AC3A1BAE63C1F2AF267D49F1DB, 0722FEA2481740B53EF26B1CA59166C63C157A5C708AC93DF3FBB74A27266C9C ] DeviceInstall C:\WINDOWS\system32\umpnpmgr.dll
23:23:45.0193 0x09b0 DeviceInstall - ok
23:23:45.0240 0x09b0 [ CDF1B1B5C5951111791C236B2696C7F8, BF6C4BA545C8827B40DB69890DB4D2B2F9C583C5E3CFBDFD370B05891141458D ] DevQueryBroker C:\WINDOWS\system32\DevQueryBroker.dll
23:23:45.0333 0x09b0 DevQueryBroker - ok
23:23:45.0349 0x09b0 [ 0D1D392ED2597F295956D058D33BD7C3, 2F7FE5A06D880F9E2A46C9803DD249DC40C2898C04E946D14E7EECCCC9F2B24F ] Dfsc C:\WINDOWS\system32\Drivers\dfsc.sys
23:23:45.0458 0x09b0 Dfsc - ok
23:23:45.0505 0x09b0 [ F0D4400BA0F08610D9A551B15BF10B76, 83EB8FB272FC2DD2CC0659C2FB90AD0DAE88A88AB3951E03BCD933A25B601E10 ] Dhcp C:\WINDOWS\system32\dhcpcore.dll
23:23:45.0583 0x09b0 Dhcp - ok
23:23:45.0661 0x09b0 [ CA7FEDDFCF61EF15A09C54DA2C07C49F, 346EF7709BA9E6BD48592B86FA46F9D956C847EF91F4980EEAD98269D0F0EF67 ] diagnosticshub.standardcollector.service C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
23:23:45.0755 0x09b0 diagnosticshub.standardcollector.service - ok
23:23:45.0865 0x09b0 [ CAD14E0AD1F03397E9B1C8733D76BEF4, 0035EF35F6520B1DF0E599C8A06D4163C52576BCE0976BF729B44DECDC506627 ] DiagTrack C:\WINDOWS\system32\diagtrack.dll
23:23:46.0068 0x09b0 DiagTrack - ok
23:23:46.0115 0x09b0 [ 35B9D46560339A5A7F0CAC6ED702C817, F70480B01533B7029F90E2DE297E9E829660300DDE7A7D009B0AC2684E7691A7 ] disk C:\WINDOWS\system32\drivers\disk.sys
23:23:46.0146 0x09b0 disk - ok
23:23:46.0208 0x09b0 [ 09CF47A74BFB480B8262FCEE222004B6, F5CD0ACA04BCB95984595CC2E17BC9E92865091A0A3BCAD4B06438A1570E7696 ] DmEnrollmentSvc C:\WINDOWS\system32\Windows.Internal.Management.dll
23:23:46.0318 0x09b0 DmEnrollmentSvc - ok
23:23:46.0365 0x09b0 [ 815F45161A4571C2C44491564F3D5968, 32E7AE8414A178CE429C0CDFCF718E3C11C705FB3155EA5CA0EAD48AAE507B01 ] dmvsc C:\WINDOWS\System32\drivers\dmvsc.sys
23:23:46.0443 0x09b0 dmvsc - ok
23:23:46.0474 0x09b0 [ 6E5EE6E420FECD64DE463C5F01CBFE71, F173C56895E80AA03D70CD78B3AB659C2EEAACFF43BE3B6EF3939D6F4AD4F62D ] dmwappushservice C:\WINDOWS\system32\dmwappushsvc.dll
23:23:46.0599 0x09b0 dmwappushservice - ok
23:23:46.0646 0x09b0 [ 7F8A3ABF7750326E18CE953CCE262670, 5DBD159E8A455A42764FC73CF7DCAC849B5896848C5589B00BD36697804C0A3B ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
23:23:46.0724 0x09b0 Dnscache - ok
23:23:46.0786 0x09b0 [ 8F46B4C3F9BA19C26A26D0A11137B20B, BA0A66DBA98D77FD85A7CD2D4593F2B2A1A3B4D32BBECBCFFBEB5A54DCB0D8ED ] dot3svc C:\WINDOWS\System32\dot3svc.dll
23:23:46.0865 0x09b0 dot3svc - ok
23:23:46.0911 0x09b0 [ CA09EAEE92C6FDDC6B05057F11A0372D, 14DB5C186B69644AA93C445BF31CC9670204F95A47B77B6EACB19B4A316378AD ] DPS C:\WINDOWS\system32\dps.dll
23:23:47.0005 0x09b0 DPS - ok
23:23:47.0021 0x09b0 [ AE6BD4C879A8C849E53947C92DF3B3A0, 8C29774CB2D30D901C54AAC0C8ACE709351EE40E5C8FB9951B2A18B4A03F28B7 ] drmkaud C:\WINDOWS\system32\DRIVERS\drmkaud.sys
23:23:47.0036 0x09b0 drmkaud - ok
23:23:47.0083 0x09b0 [ 7433474BE77F065D2FA628671FE31A3E, 063ADDC68F48036749E6EC7B2F66284DB29F90F62E9468D16B4EF5A0FDC45E35 ] DsmSvc C:\WINDOWS\System32\DeviceSetupManager.dll
23:23:47.0193 0x09b0 DsmSvc - ok
23:23:47.0240 0x09b0 [ 5FCA45C24501DA7390065D3706A9FC3F, 093FD840F1502ECC6F05B9723CA523B3F15CF39A5D2B9106E1267739B3F2C52C ] DsSvc C:\WINDOWS\System32\DsSvc.dll
23:23:47.0302 0x09b0 DsSvc - ok
23:23:47.0427 0x09b0 [ 19F2B54EE8861D90579BD0E3AE5182F9, FDD4F091C61C8C20550C8F68375ABD7ED718A733F680F0F0367D4796C302BA14 ] DXGKrnl C:\WINDOWS\System32\drivers\dxgkrnl.sys
23:23:47.0599 0x09b0 DXGKrnl - ok
23:23:47.0708 0x09b0 [ 9FCE4EF7D5E274F862D9A2526B5F4779, 81D42D5475C2801C8E0C233A0BA827569D8A70590017C91C665C8B232D9BFAA9 ] EapHost C:\WINDOWS\System32\eapsvc.dll
23:23:47.0786 0x09b0 EapHost - ok
23:23:47.0943 0x09b0 [ 7EC6FC0266D74BD47ABB130A328B70EC, 3856790AF967AB03B1A89F97328DC4D5A6854ACDA6169681A9AFB03D7CF791F9 ] ebdrv C:\WINDOWS\system32\drivers\evbda.sys
23:23:48.0130 0x09b0 ebdrv - ok
23:23:48.0161 0x09b0 [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] EFS C:\WINDOWS\System32\lsass.exe
23:23:48.0193 0x09b0 EFS - ok
23:23:48.0240 0x09b0 [ 8D74B8B5D6F7C5BC4C525BAF2B083FF1, DA5656F745B3911F96871887FDFDC40F4D9C820622A0AA27EFE4BA93662833CA ] EhStorClass C:\WINDOWS\system32\drivers\EhStorClass.sys
23:23:48.0271 0x09b0 EhStorClass - ok
23:23:48.0302 0x09b0 [ 2A9817B5A9260D8F60D52E36BEF10443, AC1A0203221AFAF584C71317FA07AA1B6E61BE619E918B3B1E4AD57CCED1CF03 ] EhStorTcgDrv C:\WINDOWS\system32\drivers\EhStorTcgDrv.sys
23:23:48.0333 0x09b0 EhStorTcgDrv - ok
23:23:48.0380 0x09b0 [ 80A7999DE02CE678B865832E1CE78CD6, 2576EBB6E4D630A906DE724F125099E52A962B5B68B9F9BCA849A7B29D8C8689 ] embeddedmode C:\WINDOWS\System32\embeddedmodesvc.dll
23:23:48.0458 0x09b0 embeddedmode - ok
23:23:48.0505 0x09b0 [ 3CE2B6AECB9AF8BC159299EEC46A35CA, E933B28BB6E4D01FCCDF8FBBB134C244B28DA3ECBDFA13333F0D4C24B2551780 ] EntAppSvc C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
23:23:48.0568 0x09b0 EntAppSvc - ok
23:23:48.0583 0x09b0 [ 77B60DEC7DCB4233E4A69D3F52E5DB24, 3A5C905E37A93899051497C90E5BA8E1D003B56C6906CADFD2F1CDF52052D248 ] ErrDev C:\WINDOWS\System32\drivers\errdev.sys
23:23:48.0646 0x09b0 ErrDev - ok
23:23:48.0693 0x09b0 [ ACB81E9F20882D2D2BEC7FF626E090AE, AC0329CFFD4429303B9484A3BB3E9CAE4FC937B66A62A9194C39CCD5012328F1 ] ESProtectionDriver C:\WINDOWS\system32\drivers\mbae64.sys
23:23:48.0708 0x09b0 ESProtectionDriver - ok
23:23:48.0755 0x09b0 [ 917DFF97525B7D70C46D4DEDA240089F, D8239EBB5D40AA6BA42BFA542A5001206610498886369D5B31ED7A9ACC17B6B4 ] EST_BusEnum C:\WINDOWS\System32\drivers\GenBus.sys
23:23:48.0911 0x09b0 EST_BusEnum - ok
23:23:48.0943 0x09b0 [ 89D11159B361DD1EAC5DD4E9895C04A4, 96E0EE08E852CDF043908B743A651F995E65CAC5AC8E222907B98CB42D9F6602 ] EUCR C:\WINDOWS\System32\drivers\EUCR6SK.SYS
23:23:48.0990 0x09b0 EUCR - ok
23:23:49.0052 0x09b0 [ F89083AB8B9F51C0031C1CBD0A9A7E35, 9EE973A25134960E62D1A6A1E34AD9B3F7690E71C1AD31A23FA2081A73438754 ] EventSystem C:\WINDOWS\system32\es.dll
23:23:49.0146 0x09b0 EventSystem - ok
23:23:49.0224 0x09b0 [ FCD2C63754C2E739A8EEAD9BC63F9DDC, C57A72ABA4C0BD71F914B9C8FF965DCFF585A205498F19A4584A4BAF7674839D ] exfat C:\WINDOWS\system32\drivers\exfat.sys
23:23:49.0318 0x09b0 exfat - ok
23:23:49.0365 0x09b0 [ FA918EC296EB410FF02867D008D02421, 23D164A24CB0D212778FA9592A046B6BA1F3628003E04181744A1F891B5B3E5A ] fastfat C:\WINDOWS\system32\drivers\fastfat.sys
23:23:49.0396 0x09b0 fastfat - ok
23:23:49.0474 0x09b0 [ 77CE56471AF984800F318F3734D768C7, 72D540072374A56C2C497F0532A50705D3F0637F2C0C96B1D715F2EDFCA3AA2D ] Fax C:\WINDOWS\system32\fxssvc.exe
23:23:49.0630 0x09b0 Fax - ok
23:23:49.0646 0x09b0 [ 99598ECA5E41996E005D5B9D9FF1EFA2, 91345CD50EF02431B69093505C1C5F5DC6A1AA6BF192EE9392ED4D5626B60462 ] fdc C:\WINDOWS\System32\drivers\fdc.sys
23:23:49.0693 0x09b0 fdc - ok
23:23:49.0724 0x09b0 [ EF0DD43A4CBAB367BCA1AFBDC9971E4F, 73E161C45D63FDDE71EE2438137913724DC513860539D1E7F6BD861F5D1B33F3 ] fdPHost C:\WINDOWS\system32\fdPHost.dll
23:23:49.0818 0x09b0 fdPHost - ok
23:23:49.0865 0x09b0 [ 34DAC585994CD3B4E910DE11C584EF3D, A6C6A4CB5413EA61F1A54E2D3AD71A311CEA2C26218544D2D2D4A5CFEC52DE8C ] FDResPub C:\WINDOWS\system32\fdrespub.dll
23:23:49.0927 0x09b0 FDResPub - ok
23:23:49.0958 0x09b0 [ B68DA1FE3CA2311AFD38DD6905CA7F71, 4B395DFB1B47D2507CA4D9DC996A70D0A3BDB1A245CD6DA6C42B2A299AFCCF37 ] fhsvc C:\WINDOWS\system32\fhsvc.dll
23:23:50.0052 0x09b0 fhsvc - ok
23:23:50.0099 0x09b0 [ F44F666B0EACC3181544FFCF8CA0FFC7, 83F771CF9DAE1C504B30731EEC55355EA1253174252DA2192ADF1D228B3735C3 ] FileCrypt C:\WINDOWS\system32\drivers\filecrypt.sys
23:23:50.0177 0x09b0 FileCrypt - ok
23:23:50.0240 0x09b0 [ 78A210DDFDF2C9EC884631D2DAA573F0, 5D39C6EF4AC690A9749EEDBE2478FFF15A22877A2861EDA103C7BF1607B0C1BD ] FileInfo C:\WINDOWS\system32\drivers\fileinfo.sys
23:23:50.0271 0x09b0 FileInfo - ok
23:23:50.0286 0x09b0 [ 1A97DB5E701A186989F3795223C3BE39, F7982220D4DF7E104955E63CACE352394E2577DEF49506EA126127F820EB62DF ] Filetrace C:\WINDOWS\system32\drivers\filetrace.sys
23:23:50.0349 0x09b0 Filetrace - ok
23:23:50.0365 0x09b0 [ 46626665F0E5906E45619B4EFD6186B8, 37FDD3B8AD49FD29E54DA5567EA77F28A53498AE56348F7A2628E5E5549D638B ] flpydisk C:\WINDOWS\System32\drivers\flpydisk.sys
23:23:50.0427 0x09b0 flpydisk - ok
23:23:50.0474 0x09b0 [ FDA72ACA14D516D18C33AFCD0FD9260F, 6509612DEC82EA74614B5C9A7B432305A1A468C97B88BED9E141DF2929B621B1 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
23:23:50.0505 0x09b0 FltMgr - ok
23:23:50.0599 0x09b0 [ 49BF5C8182C3D2D6CD9F7EEDF1CFDB66, 0977EBE86B57FC370D27CA69D58122397D5D5369AF0C8DBCC492AE7AD55CBA2B ] FontCache C:\WINDOWS\system32\FntCache.dll
23:23:50.0786 0x09b0 FontCache - ok
23:23:50.0927 0x09b0 [ 59241194DBDF30A2B4029E402F377900, 47A92E9CD8494C403B377799D395670A393766647E24CD83B15338CE2AA50266 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
23:23:50.0943 0x09b0 FontCache3.0.0.0 - ok
23:23:51.0021 0x09b0 [ 8B52024D3A5C3A12F1C4D75D30A976C5, 982F1C783966C9A6D255AA7DBAB6D225EBE0050A36176B8DE85E8ADBFE17FDF1 ] FrameServer C:\WINDOWS\system32\FrameServer.dll
23:23:51.0193 0x09b0 FrameServer - ok
23:23:51.0240 0x09b0 [ D152CCBFC8251670BF0AAFE00D6BC782, 9DE82D8FC4E1DAF8FF23EE08C0B7CB5051A9224E64544D262CFA4996A41B04E1 ] FsDepends C:\WINDOWS\system32\drivers\FsDepends.sys
23:23:51.0286 0x09b0 FsDepends - ok
23:23:51.0333 0x09b0 [ 6C06701BF1DB05405804D7EB610991CE, 75DEB2204D9AC338ED7C4742BEFAFA0AFC7E42B2C1B54A57DF8A1AD097D9EC3E ] fssfltr C:\WINDOWS\system32\DRIVERS\fssfltr.sys
23:23:51.0365 0x09b0 fssfltr - ok
23:23:51.0380 0x09b0 [ 6D6BB5C7363CD35FA715E826F3D029EE, C214F791EB39E8B25CE57ED9D6C1D56EE1AF6021BCB380980BD42A6338A6C9F7 ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
23:23:51.0427 0x09b0 Fs_Rec - ok
23:23:51.0474 0x09b0 [ 8EEC4925C03E375C4EC496E45C44139A, 06C5C7BCC28D3E435675F0759A09CAB726E971DF4BFC1DC3DCF503EABCDCCCC6 ] fvevol C:\WINDOWS\system32\DRIVERS\fvevol.sys
23:23:51.0568 0x09b0 fvevol - ok
23:23:51.0677 0x09b0 [ EF78034773CE506323655A868C949144, DF195BEEE6704FBCC6D2D9E1BF6723E52ED502A1459F495B7D18481E6A79B5BC ] gencounter C:\WINDOWS\System32\drivers\vmgencounter.sys
23:23:51.0771 0x09b0 gencounter - ok
23:23:51.0818 0x09b0 [ B55FEBC6A00DAA1FE074F020B6907516, 67071FBAC2ABA47AB71358A5F08E92E034A55343878F00137E90B3B1F7362976 ] genericusbfn C:\WINDOWS\System32\drivers\genericusbfn.sys
23:23:51.0880 0x09b0 genericusbfn - ok
23:23:51.0911 0x09b0 [ DDD8A8CDDC7F13EF57D1DAAE71865936, 9D472A8689F72F24D40D5B94849690F53C67849FDF6162A94EF4FB330A3DA566 ] GPIOClx0101 C:\WINDOWS\system32\Drivers\msgpioclx.sys
23:23:51.0943 0x09b0 GPIOClx0101 - ok
23:23:52.0005 0x09b0 [ 713A176494CEC107E663CAD6C2B27F77, 76871D8CFBA8FCD8CFF96208AE84C658EBEC60270D978898B90EE9451AA1BCE1 ] gpsvc C:\WINDOWS\System32\gpsvc.dll
23:23:52.0130 0x09b0 gpsvc - ok
23:23:52.0162 0x09b0 [ 7ACD8F69B5D6EC97E6D2C006E19BED88, FC69214C9308EA64B88EF4C3C95800586DDBB44C8540846B79A161BAD8203B6E ] GpuEnergyDrv C:\WINDOWS\system32\drivers\gpuenergydrv.sys
23:23:52.0255 0x09b0 GpuEnergyDrv - ok
23:23:52.0349 0x09b0 [ 0C03FB91E17987EED93F60007B08DAA0, BF4549F45FA1B291339E5053738B95BA50F021225F294F7B1ED9DACBD09BA426 ] gupdate C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
23:23:52.0365 0x09b0 gupdate - ok
23:23:52.0380 0x09b0 [ 0C03FB91E17987EED93F60007B08DAA0, BF4549F45FA1B291339E5053738B95BA50F021225F294F7B1ED9DACBD09BA426 ] gupdatem C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
23:23:52.0396 0x09b0 gupdatem - ok
23:23:52.0443 0x09b0 [ C1B577B2169900F4CF7190C39F085794, 73E104B96A48F4C80D8C37254ECB0891D15C0D2F0C251B57C168F90D60316447 ] gusvc C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
23:23:52.0490 0x09b0 gusvc - ok
23:23:52.0521 0x09b0 [ 3921C845A24C62CA1F44EEF4826263E9, 4CB2CAB0B96F097B3BFC28EA12AA7C28131AEC114BF0920BC80789CDD6BF4019 ] hardlock C:\WINDOWS\system32\drivers\hardlock.sys
23:23:52.0552 0x09b0 hardlock - ok
23:23:52.0583 0x09b0 [ 10E3515FE5DBA6656FA62C29342EC4A1, 2051F10F74ED712B1766EB61E87FADE25AB3D0970BABFD320600D1B0D6377F26 ] HDAudBus C:\WINDOWS\System32\drivers\HDAudBus.sys
23:23:52.0646 0x09b0 HDAudBus - ok
23:23:52.0693 0x09b0 [ B6AC71AAA2B10848F57FC49D55A651AF, 4FAD833654E86F9FAF972AC8AF87FD4A9A765B26B96F096BBD63506B5D521A91 ] HECIx64 C:\WINDOWS\System32\drivers\HECIx64.sys
23:23:52.0708 0x09b0 HECIx64 - ok
23:23:52.0755 0x09b0 [ B90D284B97CD4CA9DE7430AAAD887A56, 2F14F985C39B7801ED64590979CF2114924E9547F5B11D2B37A74DBFFDD9E7C5 ] HidBatt C:\WINDOWS\System32\drivers\HidBatt.sys
23:23:52.0771 0x09b0 HidBatt - ok
23:23:52.0833 0x09b0 [ B2FE11643CC6ACDEE6C247DD36018FDB, 5796613C7DBF8B2A9E860E006FF1A245B6BE7D10E3F6685AD142B48E5C237B8C ] HidBth C:\WINDOWS\System32\drivers\hidbth.sys
23:23:52.0880 0x09b0 HidBth - ok
23:23:52.0912 0x09b0 [ D24355488A2D4D2323518EC1AC7A6D9E, ED2176A2093726087EDDA25B86E9CDD4BA35F4E748E3A6DE0B15C4C97646B5C7 ] hidi2c C:\WINDOWS\System32\drivers\hidi2c.sys
23:23:52.0943 0x09b0 hidi2c - ok
23:23:52.0990 0x09b0 [ 0AF9ABBA4F3F55C6C803890D64BC3C29, D3DE6FA308F8E7CD4F16387F46AE4B2F7EC9BBA07BF87652B660A0D645710571 ] hidinterrupt C:\WINDOWS\System32\drivers\hidinterrupt.sys
23:23:53.0005 0x09b0 hidinterrupt - ok
23:23:53.0021 0x09b0 [ CDBCF8E9AB06D88A1E1191D32F320C5D, F76963AB7CF2BAB3A220013879AECD3976BFD851CFB66B5A69A9EA2541048861 ] HidIr C:\WINDOWS\System32\drivers\hidir.sys
23:23:53.0083 0x09b0 HidIr - ok
23:23:53.0146 0x09b0 [ C900FE0DD6A1E2220084B8F1C427790C, 802194EBEDA1A50EDA300078B0888AAC1F17A42E67147B7B3B9C50AD8D4E5C89 ] hidserv C:\WINDOWS\system32\hidserv.dll
23:23:53.0271 0x09b0 hidserv - ok
23:23:53.0333 0x09b0 [ D8536CB438CC4CCDAE047B768EED22B2, 4F666BFA3554F9ACA6B9D436BFA64474D5F30FB3E78F4E66068CCDF283D9867F ] HidUsb C:\WINDOWS\System32\drivers\hidusb.sys
23:23:53.0412 0x09b0 HidUsb - ok
23:23:53.0490 0x09b0 [ 61B1AAF851790A53158D74AB0CAD6550, 2B6BFF96D011823E0FCD81F991EC614FA282714067E6A1C7A6AD98388514D1A5 ] HitmanProScheduler C:\Program Files\HitmanPro\hmpsched.exe
23:23:53.0521 0x09b0 HitmanProScheduler - ok
23:23:53.0583 0x09b0 [ 0AC1BD5A28FAA371EF34859FE703E515, 1DD1C33AF8D6EBE7C36FCD051F066E4039D2B47ABAECF7C68BC3933D567930B2 ] HomeGroupListener C:\WINDOWS\system32\ListSvc.dll
23:23:53.0708 0x09b0 HomeGroupListener - ok
23:23:53.0771 0x09b0 [ 86161A89F16851728802590EC7C92608, 3A3B05BB4E115410D27063B30C0EF3F18295F542050F329F1E466C81A9E23A46 ] HomeGroupProvider C:\WINDOWS\system32\provsvc.dll
23:23:53.0896 0x09b0 HomeGroupProvider - ok
23:23:53.0912 0x09b0 [ F5CA18197B4646E04DB9EB2D6642CC4D, 5BA3342DDF1BCB67E4156169FE9A33E7BC2641C729E9F1A80C0E80953C6AB114 ] HpSAMD C:\WINDOWS\system32\drivers\HpSAMD.sys
23:23:53.0943 0x09b0 HpSAMD - ok
23:23:54.0021 0x09b0 [ A10C7C1E69FC90620C7BF2E51302A01F, D725AEAE38255CED73F4922A10F226215528706580B06D01C228488F93AC0397 ] HTTP C:\WINDOWS\system32\drivers\HTTP.sys
23:23:54.0099 0x09b0 HTTP - ok
23:23:54.0162 0x09b0 [ 0C84C250F80EAEC2C9768464CC1A9626, 212E1003B78F9B98FEB084FD1FDB59B26A9DE4C9120F24D4361FBBF0F3C035E7 ] HvHost C:\WINDOWS\System32\hvhostsvc.dll
23:23:54.0255 0x09b0 HvHost - ok
23:23:54.0287 0x09b0 [ 74FC79C52395B10FFD0B55CF22CF88FC, 94D977DA2092EE8C2A598AC48758A84BB22CB6378BD114C2D3B4172A07A9CACC ] hvservice C:\WINDOWS\system32\drivers\hvservice.sys
23:23:54.0318 0x09b0 hvservice - ok
23:23:54.0365 0x09b0 [ 771EDDA9830A3079F996F34D681FB6E5, F452AD656872A1C8B2D6DCE232CE01EBD456C46F4934A7601E78470F2A2CBF38 ] hwpolicy C:\WINDOWS\system32\drivers\hwpolicy.sys
23:23:54.0396 0x09b0 hwpolicy - ok
23:23:54.0427 0x09b0 [ 3B9F315E7FA72CC25228EB097DD9C694, B26F1E494428EF197A0C97645C05BB3CA093827A005D35C987F1D6778BC4E52C ] hyperkbd C:\WINDOWS\System32\drivers\hyperkbd.sys
23:23:54.0490 0x09b0 hyperkbd - ok
23:23:54.0521 0x09b0 [ B54B30992620C97230013A74461C8517, CAF09BDCDD6DE2A39CB8AE2C65E6F8FE12D8E93D84BBEF6C6A98F872BF54A4E3 ] i8042prt C:\WINDOWS\System32\drivers\i8042prt.sys
23:23:54.0630 0x09b0 i8042prt - ok
23:23:54.0646 0x09b0 [ C6B8743B213F06AA60943D8366FE968F, 758954F70B810063914B243115B2C753B2BCE40190F95C30ACBA0BF04EBD5B33 ] iagpio C:\WINDOWS\System32\drivers\iagpio.sys
23:23:54.0724 0x09b0 iagpio - ok
23:23:54.0771 0x09b0 [ 9A2A2F3C69B9A30B6E78536F6D258BAD, 5E28E132A7300E6F5E0C6439D6BA00F1AEF66D729FF671FDA91274A25A921463 ] iai2c C:\WINDOWS\System32\drivers\iai2c.sys
23:23:54.0833 0x09b0 iai2c - ok
23:23:54.0849 0x09b0 [ 5A0E850F8CD17791A3E6A3CF81D0CA28, 10A965A49D53360DD250E0758B6BB142872298A21C732EB026ACB93492C5C6CF ] iaLPSS2i_GPIO2 C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys
23:23:54.0912 0x09b0 iaLPSS2i_GPIO2 - ok
23:23:54.0927 0x09b0 [ 7508F1096803385D6376BFD0BD473AC4, 1F32EC23CDC94DCB9710E6663B5C3BD83568545DDC2C741CFC13550A4E4DD2BE ] iaLPSS2i_I2C C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys
23:23:54.0974 0x09b0 iaLPSS2i_I2C - ok
23:23:54.0990 0x09b0 [ 16A10CCEDCF5AC4CAAE43DC9FC40392F, F77696AE55B992154A3B35F7660BD73E0AB35A6ECEEC1931C0D35748CFA605C0 ] iaLPSSi_GPIO C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys
23:23:55.0021 0x09b0 iaLPSSi_GPIO - ok
23:23:55.0052 0x09b0 [ EB82A11613326691508D9ED9A4FE29E7, 8445E41BAB21964C7F014742795E462BDDC6C37A261990B3D6BF4E637A719547 ] iaLPSSi_I2C C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys
23:23:55.0115 0x09b0 iaLPSSi_I2C - ok
23:23:55.0146 0x09b0 [ 97E553D03219D3D51705C7235D9EAEBD, 5D4578C8804AF32D1DC0868E34D6538138DC15F9568CA7E21051B1C82C0D8D55 ] iaStorAV C:\WINDOWS\system32\drivers\iaStorAV.sys
23:23:55.0208 0x09b0 iaStorAV - ok
23:23:55.0240 0x09b0 [ 8350FE3BCDE3428BC040877BB7E9EAEB, 77F9456351CA640C6B7862907C0580627E761EC807B551976A95657EB4D6CC20 ] iaStorV C:\WINDOWS\system32\drivers\iaStorV.sys
23:23:55.0287 0x09b0 iaStorV - ok
23:23:55.0318 0x09b0 [ 3BA03F7C7700DDF4C383DDE9252F5817, 3E90F69D0010E7764349D9AE865D577E431FEBC67DA554B400BC808DD286E203 ] ibbus C:\WINDOWS\System32\drivers\ibbus.sys
23:23:55.0365 0x09b0 ibbus - ok
23:23:55.0443 0x09b0 [ 937AC47F7356554DA05D9722C356EB55, 9EABC9F19B4E1193B669D2674967F5C6F03FAD348EDF0615E3F78554FF9A83CC ] icssvc C:\WINDOWS\System32\tetheringservice.dll
23:23:55.0552 0x09b0 icssvc - ok
23:23:55.0677 0x09b0 [ 1CF03C69B49ACB70C722DF92755C0C8C, C227850C133F29BB9DED91A26A22AE077FD69629CEF35B67D305F016C4BDAA81 ] IDriverT C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
23:23:55.0787 0x09b0 IDriverT - detected UnsignedFile.Multi.Generic ( 1 )
23:23:56.0396 0x09b0 Detect skipped due to KSN trusted
23:23:56.0396 0x09b0 IDriverT - ok
23:23:56.0912 0x09b0 [ E6D200304A8D739597678807820ABB43, 05194D2625F48C5065318C28B242A03A1C3BDC441087DAFF777203506CE4CF6E ] igfx C:\WINDOWS\system32\DRIVERS\igdkmd64.sys
23:23:57.0896 0x09b0 igfx - ok
23:23:57.0990 0x09b0 [ F2934208C0E50C0B971A7981AB90BED2, B936BFBBD71E731CC2CDB8B47D262F2EF09726FF921C2DA0841910CA2401423D ] IKEEXT C:\WINDOWS\System32\ikeext.dll
23:23:58.0084 0x09b0 IKEEXT - ok
23:23:58.0130 0x09b0 [ 36FDF367A1DABFF903E2214023D71368, 60468692C1D048428AF25ED87DE23DAE756C7BA2B6CF6AF5EFD2E53C80F5FC68 ] Impcd C:\WINDOWS\System32\drivers\Impcd.sys
23:23:58.0208 0x09b0 Impcd - ok
23:23:58.0224 0x09b0 [ 2A01C96DF5802D3434634E55C91232D8, A3ABEF36E2FD2CF5C371ADBF92566A09669A1D990ABE4677370F57F2EEAF8121 ] IndirectKmd C:\WINDOWS\System32\drivers\IndirectKmd.sys
23:23:58.0302 0x09b0 IndirectKmd - ok
23:23:58.0380 0x09b0 [ B16FC828CE7A76A8F1CE682E6EAD2627, 4E0810B030933FBA8E6CDFD7AF343D314565DA939C613E2E27FA0E24C26F00A3 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RTKVHD64.sys
23:23:58.0474 0x09b0 IntcAzAudAddService - ok
23:23:58.0505 0x09b0 [ 408B401CD7CDB075C7470B0FF7BA8D0B, A3BC4ED47094D6A78732012D9020E0C31583E6132E3C0FD1FD64C80AFCC4738F ] IntcDAud C:\WINDOWS\system32\DRIVERS\IntcDAud.sys
23:23:58.0583 0x09b0 IntcDAud - ok
23:23:58.0630 0x09b0 [ 9F7E87F6595D065A8A200A291043045E, 6944F72F73EADC6C9B7691F2C1C6DF1898F22C88EFA78EC0BA8CB5FFD9CE057B ] intelide C:\WINDOWS\system32\drivers\intelide.sys
23:23:58.0662 0x09b0 intelide - ok
23:23:58.0677 0x09b0 [ A6BD2E20AE1BC5CB2776C87C28E4F4CA, BD8BE67CED9A4982D785CE9ECBEFE868C3A2E37DF7F9592B9F9049B807A1554B ] intelpep C:\WINDOWS\system32\drivers\intelpep.sys
23:23:58.0724 0x09b0 intelpep - ok
23:23:58.0787 0x09b0 [ 2A48DA39542636DB0FA3BA915385D1B3, 6CA0916F5F4B1E81AE6A6233276320599BFA7C129267177703E3BB6468FB4683 ] intelppm C:\WINDOWS\System32\drivers\intelppm.sys
23:23:58.0865 0x09b0 intelppm - ok
23:23:58.0896 0x09b0 [ DB32758F3A7F6CCE81A5430080A2EA65, 36A26BAA884E96804F8EA0B12BB3E81BBE6D4EE704809904091445F36CAB5A29 ] iorate C:\WINDOWS\system32\drivers\iorate.sys
23:23:58.0927 0x09b0 iorate - ok
23:23:58.0974 0x09b0 [ FE85D0A86CA7A5A99CF8CD04DE7F80AE, 544C01FC01EE728EB5667158207E5F4418FE77A88BA318192A834722DB766F4E ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
23:23:59.0021 0x09b0 IpFilterDriver - ok
23:23:59.0084 0x09b0 [ EF1BB0EF8A12C32DD88C409706B8145E, 7AEDE717C258C29592CC8AEC40F61617E5382646E5141E1C0941882ACE5C5758 ] iphlpsvc C:\WINDOWS\System32\iphlpsvc.dll
23:23:59.0209 0x09b0 iphlpsvc - ok
23:23:59.0240 0x09b0 [ 450DBDD716C7911F83E05F78EE18BFA2, 43C0DA172F632131898F315A53DEDD1AE99FB0620AB32B3A5B99FEC498C9AAE5 ] IPMIDRV C:\WINDOWS\System32\drivers\IPMIDrv.sys
23:23:59.0255 0x09b0 IPMIDRV - ok
23:23:59.0287 0x09b0 [ F1DAECC3B3D6399875D4F10529D6A77C, 6533D2F858816BE6570C998510919FCA2904EC6EF806F61C1FD325E88133111B ] IPNAT C:\WINDOWS\system32\drivers\ipnat.sys
23:23:59.0349 0x09b0 IPNAT - ok
23:23:59.0380 0x09b0 [ 7475A2903BB704B446AA6309E34D3362, C94643A1626A9716015EBA7041A1224098501EB7DAA704CBFCAD3DC6F3CFC6AF ] irda C:\WINDOWS\system32\drivers\irda.sys
23:23:59.0427 0x09b0 irda - ok
23:23:59.0459 0x09b0 [ 9725E7F0C64CE9916A5CDABE8D6E13C3, 04AF9E48FEF208A2850DF28352E8FDCBF4018982C72C0F67EE12C048C4070116 ] IRENUM C:\WINDOWS\system32\drivers\irenum.sys
23:23:59.0505 0x09b0 IRENUM - ok
23:23:59.0537 0x09b0 [ 8C604213A2E73088BFFE6CD2E6F1AE53, B4C4FEE4D398A29F72EC27D5668071D7E68CD943FFFC38624DD5DF5BEBDF46D3 ] irmon C:\WINDOWS\System32\irmon.dll
23:23:59.0630 0x09b0 irmon - ok
23:23:59.0662 0x09b0 [ 58040898883A96160D41739C80328BBF, 7F85C91C905811416E266A263DDEFCDCB0B45376AAE51B551AB636C16577DB9F ] isapnp C:\WINDOWS\system32\drivers\isapnp.sys
23:23:59.0677 0x09b0 isapnp - ok
23:23:59.0709 0x09b0 [ C9FD02D62E09337B67B0C61EC8CA38CC, DC77E935ECC8474BE9018F0937CB11C137073582B20A0EE107CE247FD9E1F9C1 ] iScsiPrt C:\WINDOWS\System32\drivers\msiscsi.sys
23:23:59.0740 0x09b0 iScsiPrt - ok
23:23:59.0818 0x09b0 [ 210808437570BDDEE71A43535E3A2D30, EF5DE6EE4FF58F44CDE4D4E7F298ABBC9086EC05CC3AE4903060DA878115AC1E ] kbdclass C:\WINDOWS\System32\drivers\kbdclass.sys
23:23:59.0834 0x09b0 kbdclass - ok
23:23:59.0880 0x09b0 [ 0B779E9FC426CA2268D28181FA6C222F, 83292023A688C3044D096F22242EB954B7F7511BE8341D45FF0AFBD9CB9BCB4E ] kbdhid C:\WINDOWS\System32\drivers\kbdhid.sys
23:23:59.0943 0x09b0 kbdhid - ok
23:23:59.0959 0x09b0 [ 813BA3EB2CE038F2A5382DDD75CAD60B, 99FA444027CAC247B54317730D54AB0C4C000AE076B97E47470FDA9834594312 ] kdnic C:\WINDOWS\System32\drivers\kdnic.sys
23:24:00.0021 0x09b0 kdnic - ok
23:24:00.0052 0x09b0 [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] KeyIso C:\WINDOWS\system32\lsass.exe
23:24:00.0068 0x09b0 KeyIso - ok
23:24:00.0115 0x09b0 [ 705C0F8BCCEF6E7CB704CCB454192D7E, FC608C708E2C3BF7A66E57B95E19E71E5F5C87EF359D8BC1A817500B45DF9338 ] KSecDD C:\WINDOWS\system32\Drivers\ksecdd.sys
23:24:00.0146 0x09b0 KSecDD - ok
23:24:00.0193 0x09b0 [ 55AD13E2BAFC5AB53A10F8C271F5D242, 058BEF14DCB95574BCAB985F04737BA89483937E8D8A74F7B4CEAFB7400C2397 ] KSecPkg C:\WINDOWS\system32\Drivers\ksecpkg.sys
23:24:00.0240 0x09b0 KSecPkg - ok
23:24:00.0287 0x09b0 [ 4ED115CD1A1099705F56B5E0FFF97CC6, 9CC49DF2CD6AAAE405BA661D13EFC1E05111D1DE3D1E50C39C425AF1F075610B ] ksthunk C:\WINDOWS\system32\drivers\ksthunk.sys
23:24:00.0334 0x09b0 ksthunk - ok
23:24:00.0412 0x09b0 [ 8125BDF7ADC261F75EF0CAD92456E350, 184797AA1D58C4FF743BA60D48590B88B781EE7779205E45E0679DEC79F3E185 ] KtmRm C:\WINDOWS\system32\msdtckrm.dll
23:24:00.0521 0x09b0 KtmRm - ok
23:24:00.0568 0x09b0 [ 8CCAB08815B50AD78B823DB3F96C8604, 265E6D582EB7207B5CC577D61CB7BC3646F613047F168CD69BB776C37780EBF5 ] LanmanServer C:\WINDOWS\system32\srvsvc.dll
23:24:00.0646 0x09b0 LanmanServer - ok
23:24:00.0693 0x09b0 [ 33DBBCF71F68EA97D9FD34E4C9AB5AC6, 104F04A1560E75EB224A3825707CE51E8798ABD764F5CC3B854FFFC93A39AF60 ] LanmanWorkstation C:\WINDOWS\System32\wkssvc.dll
23:24:00.0787 0x09b0 LanmanWorkstation - ok
23:24:00.0834 0x09b0 [ F8EBAA1FE6D3BF84752931DE1BFA0E2A, 2F3C512712BA709BBBBD779D9E792DBE324876C402CDCEF0345B8B7ABE1D232A ] lfsvc C:\WINDOWS\System32\lfsvc.dll
23:24:00.0943 0x09b0 lfsvc - ok
23:24:00.0990 0x09b0 [ 5A23E4BE0CCF49663C4CF7EB74C20278, 9DF91014B13B7CED1C3D409F90858FD03EFC5C4347C98901B4DF0AFF2B77845D ] LicenseManager C:\WINDOWS\system32\LicenseManagerSvc.dll
23:24:01.0084 0x09b0 LicenseManager - ok
23:24:01.0099 0x09b0 [ 5933A6673F00D8255C52957E40C2D601, 0AA1281F8B3F97E360592D1B35EE7D3D614F1AB46007F9884CFFB1C5E647575E ] lltdio C:\WINDOWS\system32\drivers\lltdio.sys
23:24:01.0162 0x09b0 lltdio - ok
23:24:01.0240 0x09b0 [ 88A3C935725FA6EA1A228DCC26CF9C6F, 9B1F70644EEFA1EE7CE151A8A970430087339B7A6345F2E0252370929D4AFAC6 ] lltdsvc C:\WINDOWS\System32\lltdsvc.dll
23:24:01.0334 0x09b0 lltdsvc - ok
23:24:01.0365 0x09b0 [ 3F858E28AEE6545FA1B64134DFD5C2CE, FFD7B4FB0A7B61BC6B76A172134673842F2CF00E96FA3ED4A8273DC525B6BB92 ] lmhosts C:\WINDOWS\System32\lmhsvc.dll
23:24:01.0412 0x09b0 lmhosts - ok
23:24:01.0474 0x09b0 [ 7485FBCEF9136F530953575E2977859D, 5A6A67EE407C6ECE637C2B2AC21259BB86D032E47CE59F77AAF48D687B74CFCB ] LMS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
23:24:01.0505 0x09b0 LMS - ok
23:24:01.0552 0x09b0 [ 8E1B0946948CCC0BC1FA3CB70374A795, 0B894C129A35E223FF9594725AC90916CBD597FAD2211A18FC2AE03EA8679597 ] LSI_SAS C:\WINDOWS\system32\drivers\lsi_sas.sys
23:24:01.0584 0x09b0 LSI_SAS - ok
23:24:01.0599 0x09b0 [ 4F68163FC04C973500DC4DA0946917B0, DF060C29109EB3978CEDFE781999B0C4C1E8C0FDB133428058D8400C53315EEC ] LSI_SAS2i C:\WINDOWS\system32\drivers\lsi_sas2i.sys
23:24:01.0630 0x09b0 LSI_SAS2i - ok
23:24:01.0630 0x09b0 [ E5AC5F2815938651CDCC27F425474673, 3AF0598982153C36A766506FA088F7B84333CC96FEBB050402547AFC613AF9F7 ] LSI_SAS3i C:\WINDOWS\system32\drivers\lsi_sas3i.sys
23:24:01.0662 0x09b0 LSI_SAS3i - ok
23:24:01.0677 0x09b0 [ CCF6EC9FB9B8F18E05B4253E81013E48, EBE8D77FEE8B99BD8C29702404774D554673C96DF3FDF3DCEA9C99E22C2709FC ] LSI_SSS C:\WINDOWS\system32\drivers\lsi_sss.sys
23:24:01.0709 0x09b0 LSI_SSS - ok
23:24:01.0787 0x09b0 [ D5EFC0BAEC21EDE6FE03D377D403B421, 41BE71AF7C896FD4C51EF7E3871AAB769164DFB8050DA43E48C7A100711414B4 ] LSM C:\WINDOWS\System32\lsm.dll
23:24:01.0927 0x09b0 LSM - ok
23:24:01.0974 0x09b0 [ C9579D32219E5B936AC3A48D470117EC, E61A77191B6BA25D29B1221FEBBE826BBC11F825C0E35A72B4CEFFF8B7FE59A8 ] luafv C:\WINDOWS\system32\drivers\luafv.sys
23:24:02.0037 0x09b0 luafv - ok
23:24:02.0084 0x09b0 [ CAAF0CD70FEE7C5110B1E62804E41B17, 48482A6C8D2296C4DC613304637C8DBB7DD1DB39326F27650EBCA6FD2793BCFD ] MapsBroker C:\WINDOWS\System32\moshost.dll
23:24:02.0146 0x09b0 MapsBroker - ok
23:24:02.0193 0x09b0 [ 024DA28053D57E9E32BEE52600576BBB, 8EC636DAB90A835DEBA2EC6176F4547EEF557415FF77C6378EF423569702731E ] MarvinBus C:\WINDOWS\System32\drivers\MarvinBus64.sys
23:24:02.0349 0x09b0 MarvinBus - ok
23:24:02.0412 0x09b0 [ 835E1D6B5835EF70FC3BDF93ED42243A, 0025D232ED0FF9A572F8004094CFE21F62070DB832398345425554334E036DA6 ] MBAMChameleon C:\WINDOWS\system32\drivers\MBAMChameleon.sys
23:24:02.0443 0x09b0 MBAMChameleon - ok
23:24:02.0490 0x09b0 [ E8E0D53AA910D8BC60A403E77DBA9B8C, D86EE7F845DB20230A036C26383A6F4314F80489A1D15C2A969A0C3C63706B7D ] MBAMFarflt C:\WINDOWS\system32\drivers\farflt.sys
23:24:02.0505 0x09b0 MBAMFarflt - ok
23:24:02.0552 0x09b0 [ 88BD122C3A35DE63D75D382DF75554CE, ABDF59543CAD186A6ED4E66257205D9CF5047732A5DA74A96A28B468B41BC396 ] MBAMProtection C:\WINDOWS\system32\drivers\mbam.sys
23:24:02.0568 0x09b0 MBAMProtection - ok
23:24:02.0802 0x09b0 [ 804E3246E3E73D4A936F2F4BCDC53A2D, BF1F9B4AC292238FA6EE541E325B220F311977F9D87D5BC7F90AD058FBF0B35A ] MBAMService C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe
23:24:02.0959 0x09b0 MBAMService - ok
23:24:03.0052 0x09b0 [ F8E8B0977741F114407494174522B71A, 6A3FE40D4649D89ABED007FFF13C38F021284265EC692C6190FF0EF8BDECF99C ] MBAMSwissArmy C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys
23:24:03.0084 0x09b0 MBAMSwissArmy - ok
23:24:03.0131 0x09b0 [ 71C365620D484750948664AA4A579AB3, A60DBF3BD252ABC63BAD3571F3DF88BAD45FB76336FC52B88FAE0665C3D40D44 ] MBAMWebProtection C:\WINDOWS\system32\drivers\mwac.sys
23:24:03.0162 0x09b0 MBAMWebProtection - ok
23:24:03.0209 0x09b0 [ C3CDCCF07486BD2616A7B82946E07AC0, 1EF95DAB2DA856BC7D7573B2EB2D9006DF337F827F0B56A161D0C97F45DB755E ] megasas C:\WINDOWS\system32\drivers\megasas.sys
23:24:03.0224 0x09b0 megasas - ok
23:24:03.0287 0x09b0 [ 2CF0CB2A0ED68C5455371E84C16F9627, 1C9166B52140145F1968E83E52BFF041250811B23C770FE181A18A4BA060CA81 ] megasas2i C:\WINDOWS\system32\drivers\MegaSas2i.sys
23:24:03.0334 0x09b0 megasas2i - ok
23:24:03.0365 0x09b0 [ FADB2FE017E69EECE0E1BA78661C2E8C, BE99B49031D8B4B670B6F6B6E829E54406779CF6F1D8AFE8AB79A73E6764AB2F ] megasr C:\WINDOWS\system32\drivers\megasr.sys
23:24:03.0427 0x09b0 megasr - ok
23:24:03.0474 0x09b0 [ 55A417C3E41F2A98666CF929EC19108E, A38C262B2863C87E4151525BF26D6AC16E7982D370E2C6998EB15C88C4BC8254 ] MessagingService C:\WINDOWS\System32\MessagingService.dll
23:24:03.0537 0x09b0 MessagingService - ok
23:24:03.0631 0x09b0 [ 71C6748EE8DE938532057EF10B4B7E44, 455175332156939B3CDA4511A2A6C213ABBFDB85EEECA98B6AB014C994F532C4 ] Micro Star SCM C:\Program Files (x86)\System Control Manager\MSIService.exe
23:24:03.0693 0x09b0 Micro Star SCM - detected UnsignedFile.Multi.Generic ( 1 )
23:24:04.0271 0x09b0 Detect skipped due to KSN trusted
23:24:04.0271 0x09b0 Micro Star SCM - ok
23:24:04.0427 0x09b0 Microsoft SharePoint Workspace Audit Service - ok
23:24:04.0490 0x09b0 [ FD60818B66B2E8A5415EA840E99A9D8F, 5D2F22909354534B821D958FBEF6A40EB4F642F53C7B509D00949096EF716F36 ] mlx4_bus C:\WINDOWS\System32\drivers\mlx4_bus.sys
23:24:04.0552 0x09b0 mlx4_bus - ok
23:24:04.0599 0x09b0 [ 68F6977F1CFBAAC770D940A8C0326FA1, 90EE1E7DAC680EAA5AD50E9B0B9FD8FCE8DD6A02D5EF941B5AA5084CBD40BB80 ] MMCSS C:\WINDOWS\system32\drivers\mmcss.sys
23:24:04.0677 0x09b0 MMCSS - ok
23:24:04.0724 0x09b0 [ 0D50B3F3AB32D416786B58D4553859CE, 9DA4D7A30982E8B31C45BDB721AEF5240EAD9DA6839CF34FDDBCF123BF104F2C ] Modem C:\WINDOWS\system32\drivers\modem.sys
23:24:04.0802 0x09b0 Modem - ok
23:24:04.0818 0x09b0 [ 9CCCB7FC3EDADEBA461D78615A6011A6, C120B58F25E8CCFD971EB78645C0682F367AD56DC15F2D8C1980CE75B04719DF ] monitor C:\WINDOWS\System32\drivers\monitor.sys
23:24:04.0881 0x09b0 monitor - ok
23:24:04.0912 0x09b0 [ 27A07B2FB2E3057DA8DAEA4F25D843C7, 09D2B39E6B9AAEC879E5871DD6BCFF2AEF0B894F3B44649665A685F8B3CA6F27 ] mouclass C:\WINDOWS\System32\drivers\mouclass.sys
23:24:04.0943 0x09b0 mouclass - ok
23:24:04.0959 0x09b0 [ 7BD6E7F7C9001AB21B8362CFFEE80B25, C470C3363EEF3A60409A5934988BFB9B72AE7C2BB63CC2C2D006D7EB1C797F6A ] mouhid C:\WINDOWS\System32\drivers\mouhid.sys
23:24:05.0021 0x09b0 mouhid - ok
23:24:05.0068 0x09b0 [ F5BDAEE4B7D369D4C74668DCFBA3FF10, 100F39288E56AFE0D39D1CC235BDC9F3727C873CD3114E092DA7A08810BD3EB2 ] mountmgr C:\WINDOWS\system32\drivers\mountmgr.sys
23:24:05.0099 0x09b0 mountmgr - ok
23:24:05.0162 0x09b0 [ 6F607DE20B98EA056E60319915ADD541, 522E326441EBFE726345ACD36E8DA2BB26849B3350A16463345D1E137CBEE3DF ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
23:24:05.0177 0x09b0 MozillaMaintenance - ok
23:24:05.0209 0x09b0 [ 30844BD376F9D01E62C820BEF446F1F8, 910D672EDB544A20AEB4450B4D89830F46EDD28CE0021156176315C5D068A1B4 ] mpsdrv C:\WINDOWS\system32\drivers\mpsdrv.sys
23:24:05.0271 0x09b0 mpsdrv - ok
23:24:05.0334 0x09b0 [ 779CFDB17EA07A6D26FEBBAC95B65772, 74D9542E8DCCD07396A45A45D2F500AA6F9DCC1DB785A6153EB3067E42F576A4 ] MpsSvc C:\WINDOWS\system32\mpssvc.dll
23:24:05.0427 0x09b0 MpsSvc - ok
23:24:05.0474 0x09b0 [ 4FC62380457DE25B69011D3542E954AC, D212DDD2446618A6215CF9FC370FA2634F027BC92D1D4999E019BEF8A86AA6EB ] MQAC C:\WINDOWS\system32\drivers\mqac.sys
23:24:05.0584 0x09b0 MQAC - ok
23:24:05.0631 0x09b0 [ 25D32BE04FE0A23FDF57FD5382757672, 64E39E3E21D9173FB1116B989D80C244C49DA827698A05AF5CC5CD1C6AE155DE ] MRxDAV C:\WINDOWS\system32\drivers\mrxdav.sys
23:24:05.0709 0x09b0 MRxDAV - ok
23:24:05.0756 0x09b0 [ E671EDAB0726E05ECEF4058B4CD73C4D, 9F4C50E635CE2204E3291C8D3D7F658A969E80722B8B6F0304228D9B434C20EA ] mrxsmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
23:24:05.0802 0x09b0 mrxsmb - ok
23:24:05.0849 0x09b0 [ D4D12BC29DE0F09280868FDCA65B3474, A6FE89ABD52087FEE52FDF31DDF4CB627ED400E94FDA86BEBF1D4763F1E42518 ] mrxsmb10 C:\WINDOWS\system32\DRIVERS\mrxsmb10.sys
23:24:05.0927 0x09b0 mrxsmb10 - ok
23:24:05.0974 0x09b0 [ 93A77008A8932FC84A173C4E97E52874, B7510CF7998C538D68BD2ECDC512A0BFC7CB7362F598EE4110F728427AFF0F5A ] mrxsmb20 C:\WINDOWS\system32\DRIVERS\mrxsmb20.sys
23:24:06.0006 0x09b0 mrxsmb20 - ok
23:24:06.0068 0x09b0 [ 74C9D21523DAE0C18F413C196DF0058A, 3DB4B8CA368D9DD82FAE2C2BC828A21142C8D29780A7C8667188C447519FF702 ] MsBridge C:\WINDOWS\system32\drivers\bridge.sys
23:24:06.0115 0x09b0 MsBridge - ok
23:24:06.0177 0x09b0 [ 308F08347923DEEDE7BC03EC7D485841, 72DB45CA11FE635DF9F8273C38CBEFB8DF5362ADA0CBF6D2B1E570365DC700C0 ] MSDTC C:\WINDOWS\System32\msdtc.exe
23:24:06.0256 0x09b0 MSDTC - ok
23:24:06.0287 0x09b0 [ F01B849D9D4A8CEAF32D4FDBD0B83C92, D2473AC4C6E6C03DEF13EA73EC78FB878BDC95C047651BF79A16C9DEA82AD046 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
23:24:06.0365 0x09b0 Msfs - ok
23:24:06.0412 0x09b0 [ 22ECD8F5D1DFADF2011BBB1700CB871D, 8F9EFF51137394EFA5471B8A29C541710063B65806B075B4925A84D5B6BC3BBB ] msgpiowin32 C:\WINDOWS\System32\drivers\msgpiowin32.sys
23:24:06.0443 0x09b0 msgpiowin32 - ok
23:24:06.0459 0x09b0 [ FD870F6968A145E4D2BA8A8842686B03, 34B8F601F3B5E42B4D0A41E2AF7DB4EB4E5B627DA8DA9A2A2D46B153AF23AEB1 ] mshidkmdf C:\WINDOWS\System32\drivers\mshidkmdf.sys
23:24:06.0552 0x09b0 mshidkmdf - ok
23:24:06.0568 0x09b0 [ 30364757963A028CE5DF0FBAAC270173, C72588A6A52FF8E418A15D2C407A4DB7EA768585423720145F8253D5CA519DC2 ] mshidumdf C:\WINDOWS\System32\drivers\mshidumdf.sys
23:24:06.0631 0x09b0 mshidumdf - ok
23:24:06.0646 0x09b0 [ 6BB0FEDDAE7135FA37FFAFF4D9E0E876, B41A3C0FFDFC493D6325ED493445AFCED04EC9DFF2B38125616FC5419AD1ACC4 ] msisadrv C:\WINDOWS\system32\drivers\msisadrv.sys
23:24:06.0677 0x09b0 msisadrv - ok
23:24:06.0724 0x09b0 [ 07E3E54734B14F43A4A95A849C0A0DE2, 314AA02EA84D267B32DBAEBEA6C1AC1A266DED1E8D35A17B41D1D2AC75E8049E ] MSiSCSI C:\WINDOWS\system32\iscsiexe.dll
23:24:06.0818 0x09b0 MSiSCSI - ok
23:24:06.0818 0x09b0 msiserver - ok
23:24:06.0834 0x09b0 [ 13D614E6B51ECF36746C48CE829FA7F6, CAD63C0A4F7110093F84C58252C5803F14E3FC46584B79DA17EC86D49FEAEA64 ] MSKSSRV C:\WINDOWS\system32\DRIVERS\MSKSSRV.sys
23:24:06.0896 0x09b0 MSKSSRV - ok
23:24:06.0912 0x09b0 [ 642CDE46351D5D2D90311E77072AB46D, B2D3033E607BA2F6E6B9CFB1CBF154CD0CE910EA473C56343EC81B9B94044CCA ] MsLldp C:\WINDOWS\system32\drivers\mslldp.sys
23:24:06.0990 0x09b0 MsLldp - ok
23:24:07.0037 0x09b0 [ F3EF38D07A4ADCDF922EEEAF0FED7D4D, B9D436BFA29AA0A7B00889D96C4F8BC33C1809E19B7A71A69AB2E534E9794BF0 ] MSMQ C:\WINDOWS\system32\mqsvc.exe
23:24:07.0099 0x09b0 MSMQ - ok
23:24:07.0115 0x09b0 [ F2302A5CE63CA7673200FAFCEEEDB6AF, B8C44FC2DC0332183DE325CDBF511101F3307225295EDD428CE575A8DE15C223 ] MSPCLOCK C:\WINDOWS\system32\DRIVERS\MSPCLOCK.sys
23:24:07.0177 0x09b0 MSPCLOCK - ok
23:24:07.0209 0x09b0 [ 6114512EA26E835BA522C63635429DB5, 0F91CE41B4555316A79AEF3047C152D538CC9C7C329987C9FD0E3D961AFC87C8 ] MSPQM C:\WINDOWS\system32\DRIVERS\MSPQM.sys
23:24:07.0271 0x09b0 MSPQM - ok
23:24:07.0302 0x09b0 [ AA538E16E644D00E3BA5349BBA9598EC, 64A68B06883FE7ED34E04AB119BA819753F1222923EDD4E802C35D402B89D075 ] MsRPC C:\WINDOWS\system32\drivers\MsRPC.sys
23:24:07.0334 0x09b0 MsRPC - ok
23:24:07.0365 0x09b0 [ 0543BEFD41EC4D25C7F7CF36409CEC7D, 631622CFEC49952C0470531B23FFFFF483DC0EFFEF7A97B1179A600392C05DDD ] mssmbios C:\WINDOWS\System32\drivers\mssmbios.sys
23:24:07.0396 0x09b0 mssmbios - ok
23:24:07.0396 0x09b0 [ C1569E4DB8EFE3617847BF041A3C842F, 99ADE5E7F50E04CAEC737F7F90741CCA8EE628996BA5EB6C6BC62184884429B6 ] MSTEE C:\WINDOWS\system32\DRIVERS\MSTEE.sys
23:24:07.0459 0x09b0 MSTEE - ok
23:24:07.0506 0x09b0 [ 130B16970154BA9876B09E5C4BAC63BE, BE3AF8FC5A26AB9C9DBA9C015C2E1FD3C4CD9CB423A2BBDABA91428BF8620553 ] MTConfig C:\WINDOWS\System32\drivers\MTConfig.sys
23:24:07.0552 0x09b0 MTConfig - ok
23:24:07.0584 0x09b0 [ 15D987C8F6CCD4AC94E070C5986762CB, 452FB0C48B86C7F8F53794CC2DDBF2B900B03A0383B2DE8F6A830F8CB0AFBAD8 ] Mup C:\WINDOWS\system32\Drivers\mup.sys
23:24:07.0615 0x09b0 Mup - ok
23:24:07.0646 0x09b0 [ 3D2C5B4995CA0751D32DEA0DE9FDFE44, A26958785FD9E05E2CA97078C9BB277CD44222BF5F7D9E8DC2F3F6AAAFFC6483 ] mvumis C:\WINDOWS\system32\drivers\mvumis.sys
23:24:07.0662 0x09b0 mvumis - ok
23:24:07.0724 0x09b0 [ DB31EBB04C871F422C36A0962DA7D38B, B1BC2344744F537FB2C7D07B415F860195B7795E185253F05C0817A3764FEC10 ] NativeWifiP C:\WINDOWS\system32\DRIVERS\nwifi.sys
23:24:07.0834 0x09b0 NativeWifiP - ok
23:24:07.0896 0x09b0 [ C3D9870E680D9D843B18F4626C3858FE, 43596CAC9FB488F810FBA954C52BC4D13F7D32028C40ACFE33DFD7EE36A65C17 ] NcaSvc C:\WINDOWS\System32\ncasvc.dll
23:24:08.0006 0x09b0 NcaSvc - ok
23:24:08.0037 0x09b0 [ 04CE2C0F0759EACD886BA4B658B60D5D, E34D0976FC5936C8629800D826DB127072D1DFC3D350EFACA3AA1B8119551762 ] NcbService C:\WINDOWS\System32\ncbservice.dll
23:24:08.0146 0x09b0 NcbService - ok
23:24:08.0193 0x09b0 [ E6094065008FE423377294050E7CEA2D, 86E200227256407530E2C28243DEFBC3CB6E9497644404D9AD79DA242286DF7B ] NcdAutoSetup C:\WINDOWS\System32\NcdAutoSetup.dll
23:24:08.0318 0x09b0 NcdAutoSetup - ok
23:24:08.0365 0x09b0 [ 629CB21AC49C8867E0F29DF1C16DB7B4, 20663E68C69D0A1A2FE99A0C2A9DEFABF49786A1DC8F7F4E1699458AF57D7E79 ] ndfltr C:\WINDOWS\System32\drivers\ndfltr.sys
23:24:08.0396 0x09b0 ndfltr - ok
23:24:08.0459 0x09b0 [ D5564FC81350458ED570528C4E3B1CCF, DD3C5012492EF9BCE3BE635BBB3AA40B3C5F5FDBD795A76B327D9C994102AC2B ] NDIS C:\WINDOWS\system32\drivers\ndis.sys
23:24:08.0537 0x09b0 NDIS - ok
23:24:08.0584 0x09b0 [ 6DD605338FAAF6BA17662AA874E0D162, 636607829F5D7C3B7A4683C0A2DD594360D72F2AA3F8710153BE32575AE34A15 ] NdisCap C:\WINDOWS\system32\drivers\ndiscap.sys
23:24:08.0646 0x09b0 NdisCap - ok
23:24:08.0677 0x09b0 [ E34196F285F8B8879E1FF36C31F7179E, 77A4F24F995D4C0689C43F9956E08DCEC62517E4F8B1B9EAA1852B5293DB5B9A ] NdisImPlatform C:\WINDOWS\system32\drivers\NdisImPlatform.sys
23:24:08.0740 0x09b0 NdisImPlatform - ok
23:24:08.0756 0x09b0 [ 1FAD2398673F30CEC616B89C46B7DCBA, 70302049E6AE2BC6B3A7A9DE54D3F940AD6A9771CC2EBCCEC65994E67A25ECB5 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
23:24:08.0818 0x09b0 NdisTapi - ok
23:24:08.0865 0x09b0 [ AEB8ECBE66CC46854066CB1F5623E179, 2F650A85A9DAE38887610C0B876621035616CEDB65D4BBBD7F1405616D218AAF ] Ndisuio C:\WINDOWS\system32\drivers\ndisuio.sys
23:24:08.0927 0x09b0 Ndisuio - ok
23:24:08.0943 0x09b0 [ 7340104C2BF2F126714F7CDE85E63610, 45B64EC6F3A4C43F7D74806789067658C6EF0D44D36B841F4D26E1EBC95AF66C ] NdisVirtualBus C:\WINDOWS\System32\drivers\NdisVirtualBus.sys
23:24:09.0006 0x09b0 NdisVirtualBus - ok
23:24:09.0037 0x09b0 [ 07ADC1F8DCBEB8104D75129B11584B8C, CB51A294D9FD4E210DBEEF05A1E60A96CE52D6D138EF62A54E1F608F90FED300 ] NdisWan C:\WINDOWS\System32\drivers\ndiswan.sys
23:24:09.0099 0x09b0 NdisWan - ok
23:24:09.0099 0x09b0 [ 07ADC1F8DCBEB8104D75129B11584B8C, CB51A294D9FD4E210DBEEF05A1E60A96CE52D6D138EF62A54E1F608F90FED300 ] ndiswanlegacy C:\WINDOWS\system32\DRIVERS\ndiswan.sys
23:24:09.0146 0x09b0 ndiswanlegacy - ok
23:24:09.0178 0x09b0 [ 78A12E3DF035B5D054986949B19BE43C, AD9B34F89B9F27D473BD5FCE6694A40FCCB808B61ABEDD6F70F1AF6C7E73ABF8 ] ndproxy C:\WINDOWS\system32\DRIVERS\NDProxy.sys
23:24:09.0240 0x09b0 ndproxy - ok
23:24:09.0271 0x09b0 [ 04C8859355C1DC9C0FA198D1894D71C2, E7C67E73009341B5D402470C686781B3C7BBE2531CE26665E08E711B990B1A77 ] Ndu C:\WINDOWS\system32\drivers\Ndu.sys
23:24:09.0334 0x09b0 Ndu - ok
23:24:09.0365 0x09b0 [ 6C76780A01FC2B885BD6E957B5C36B02, DB7834F03A765F65C773E772D8051AFADB22CA4B5074180AA397857A0C47A068 ] NetAdapterCx C:\WINDOWS\system32\drivers\NetAdapterCx.sys
23:24:09.0459 0x09b0 NetAdapterCx - ok
23:24:09.0568 0x09b0 [ 5D1513BD6430307C9DB86C6E351372ED, D2AB709CF7CFA5B857B084AFC821914A975B7DDDCE154229981F19448973BD6D ] NetBIOS C:\WINDOWS\system32\drivers\netbios.sys
23:24:09.0584 0x09b0 NetBIOS - ok
23:24:09.0615 0x09b0 [ 6FEBB0A847FFD5F057B9AC8889F1B9A7, 558BCC64C59079E6569F61CCE1219A124B3313FC4E6CB5CBCC94124D202FF19D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
23:24:09.0693 0x09b0 NetBT - ok
23:24:09.0709 0x09b0 [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] Netlogon C:\WINDOWS\system32\lsass.exe
23:24:09.0724 0x09b0 Netlogon - ok
23:24:09.0787 0x09b0 [ D3BF2DA9216A4CF22A97820A50A67EFF, D00CBE0A7ECFB449D9B48967A01EE56141404EBE229893D5A1710781AD5F2551 ] Netman C:\WINDOWS\System32\netman.dll
23:24:09.0849 0x09b0 Netman - ok
23:24:09.0927 0x09b0 [ EFA857E2B0CC7C9DFEF48A2187B910F7, 424475568CD70237F056838388A5F7BDCD1B09349085498644C75940B12E8EAF ] NetMsmqActivator C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
23:24:09.0943 0x09b0 NetMsmqActivator - ok
23:24:09.0959 0x09b0 [ EFA857E2B0CC7C9DFEF48A2187B910F7, 424475568CD70237F056838388A5F7BDCD1B09349085498644C75940B12E8EAF ] NetPipeActivator C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
23:24:09.0974 0x09b0 NetPipeActivator - ok
23:24:10.0052 0x09b0 [ F2645D51DD8AABC8BC72358409410437, 8CB97628923D6CEA6EFAD7E666BE92C154060BD108C28D46287A520A14B18ADA ] netprofm C:\WINDOWS\System32\netprofmsvc.dll
23:24:10.0193 0x09b0 netprofm - ok
23:24:10.0256 0x09b0 [ D65F295A049473E6A39EA9A0EA76CA32, 274FC0BA044EB2D14093AB0E561F7FACEE06A3F433C81343C8B926FA2F9BD251 ] NetSetupSvc C:\WINDOWS\System32\NetSetupSvc.dll
23:24:10.0365 0x09b0 NetSetupSvc - ok
23:24:10.0381 0x09b0 [ EFA857E2B0CC7C9DFEF48A2187B910F7, 424475568CD70237F056838388A5F7BDCD1B09349085498644C75940B12E8EAF ] NetTcpActivator C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
23:24:10.0412 0x09b0 NetTcpActivator - ok
23:24:10.0412 0x09b0 [ EFA857E2B0CC7C9DFEF48A2187B910F7, 424475568CD70237F056838388A5F7BDCD1B09349085498644C75940B12E8EAF ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
23:24:10.0443 0x09b0 NetTcpPortSharing - ok
23:24:10.0568 0x09b0 [ 2D446F342467128EA389CF44EC79C2BA, A1FECDF58768B020318F32601DFDBE2A2F9F02BB249BF345911A40D75AF7417D ] NEWDRIVER C:\windows\SysWow64\WinVDEdrv6.sys
23:24:10.0599 0x09b0 NEWDRIVER - ok
23:24:10.0693 0x09b0 [ B996DE26A2E16053C9485F5905B05320, 30EB2CEB466A4F05A44F7CBFCDFD8CC3C27B5FCF1269C1B9410C48AB362D2A75 ] NgcCtnrSvc C:\WINDOWS\System32\NgcCtnrSvc.dll
23:24:10.0818 0x09b0 NgcCtnrSvc - ok
23:24:10.0912 0x09b0 [ 54C31C2B815E2E26BB8158022F837C9C, CED660D1A58F635C6452F82FCB2EF8ACEEB7785E31617B2ADFD9EE69A2BDF2B8 ] NgcSvc C:\WINDOWS\system32\ngcsvc.dll
23:24:11.0037 0x09b0 NgcSvc - ok
23:24:11.0084 0x09b0 [ 9B9F520C72EE33EAEC857124BB800243, DFA9386B272F4D86F3E4BE861A2FC4617261E1AA40576DDA610FC24AB4961A63 ] NlaSvc C:\WINDOWS\System32\nlasvc.dll
23:24:11.0162 0x09b0 NlaSvc - ok
23:24:11.0193 0x09b0 [ 009F4F1EC78A294A55C154430BA63C6F, 4466BBC8E835E469A43BAD598E62A919AB87B29118C80A86C920C0603B1AB5F5 ] nlsX86cc C:\windows\SysWOW64\nlssrv32.exe
23:24:11.0224 0x09b0 nlsX86cc - ok
23:24:11.0240 0x09b0 [ DE7FCC77F4A503AF4CA6A47D49B3713D, 4BFAA99393F635CD05D91A64DE73EDB5639412C129E049F0FE34F88517A10FC6 ] NPF C:\WINDOWS\system32\drivers\npf.sys
23:24:11.0271 0x09b0 NPF - ok
23:24:11.0303 0x09b0 [ 001CBD7A2CD45C4EB39C01C3C677EF73, F4AAF4D60DB1232921C7811A62287B55C7C098B7A1FF9A40D88AF58A5ABECBA2 ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
23:24:11.0365 0x09b0 Npfs - ok
23:24:11.0381 0x09b0 [ 90F5DC9802AAA00CD0B6E2AD9E7FFADC, 71C0777829299DECA6ACD42F38802DBE3C29A42CFBD8A396F39DFA44D1F55B6C ] npsvctrig C:\WINDOWS\System32\drivers\npsvctrig.sys
23:24:11.0459 0x09b0 npsvctrig - ok
23:24:11.0506 0x09b0 [ 1993C85962692EF7024501E7FE92D466, F5BCAA8308495EBF8BB061C2015E07C202A779668D171364D7E312975BC18B10 ] nsi C:\WINDOWS\system32\nsisvc.dll
23:24:11.0584 0x09b0 nsi - ok
23:24:11.0599 0x09b0 [ 0C6218321A09A7B51BA7FFAFBA4CCB21, 330B3FA793A78410B28DFC8250BBF24442E3BB80434A7938BB96F02337614E0D ] nsiproxy C:\WINDOWS\system32\drivers\nsiproxy.sys
23:24:11.0646 0x09b0 nsiproxy - ok
23:24:11.0771 0x09b0 [ DB69C6DA8B3DDFDC547D455CA23A8250, AE495CEB18924C8B21F7F150FF17CD00880F2E222D7B5155661798E0535D63C4 ] NTFS C:\WINDOWS\system32\drivers\NTFS.sys
23:24:11.0896 0x09b0 NTFS - ok
23:24:11.0943 0x09b0 [ 6E6DD6F9DD2A034CF85E94047DBDB992, 63D0A0756F551B7668D1CBAB24B29FD462C706E8A81690BC248D6C92061FE215 ] Null C:\WINDOWS\system32\drivers\Null.sys
23:24:11.0974 0x09b0 Null - ok
23:24:12.0006 0x09b0 [ D4FA3EA39C6E919103DAA24FAB48B329, C173B3AAA5AE428F31466F0FAC57A30EB638D1378B1024686EFE1F9B9C7E837B ] NUS_Bus C:\WINDOWS\System32\drivers\NUS_Bus.sys
23:24:12.0084 0x09b0 NUS_Bus - ok
23:24:12.0131 0x09b0 [ D261DF41F0840F734856A2B4F5E072C7, 2E703556D0C919375D0B7770513456844B13362190643D5524663EC8546E0FF5 ] nvraid C:\WINDOWS\system32\drivers\nvraid.sys
23:24:12.0162 0x09b0 nvraid - ok
23:24:12.0193 0x09b0 [ 23B702B555EB0436B9DAA0BC63DA65CE, D454F80D9657CFEC852F022C12D7B2C1A2D7D247ECC591EDB07B9369DFD8C99E ] nvstor C:\WINDOWS\system32\drivers\nvstor.sys
23:24:12.0224 0x09b0 nvstor - ok
23:24:12.0287 0x09b0 [ 17997DC2441F7E29CDFC6458E0392764, 636CCE2DA1EF8195B33F8D6D5C8CC151D58EBF08DC9AD8ACCCE7ABD41A69639F ] OneSyncSvc C:\WINDOWS\System32\APHostService.dll
23:24:12.0381 0x09b0 OneSyncSvc - ok
23:24:12.0490 0x09b0 [ 9D10F99A6712E28F8ACD5641E3A7EA6B, 70964A0ED9011EA94044E15FA77EDD9CF535CC79ED8E03A3721FF007E69595CC ] ose C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
23:24:12.0506 0x09b0 ose - ok
23:24:12.0771 0x09b0 [ 61BFFB5F57AD12F83AB64B7181829B34, 1DD0DD35E4158F95765EE6639F217DF03A0A19E624E020DBA609268C08A13846 ] osppsvc C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
23:24:13.0006 0x09b0 osppsvc - ok
23:24:13.0099 0x09b0 [ 4578ECA1FCEF4E7C787D84F78625143B, F5FE84D6D7412A4C037772593C434253D590E476B0B7498987A1697BED86A510 ] p2pimsvc C:\WINDOWS\system32\pnrpsvc.dll
23:24:13.0193 0x09b0 p2pimsvc - ok
23:24:13.0256 0x09b0 [ 2BBCED66D7AFC968BDBB0E4D8524DF0A, 762D916390F9DE69B3EA1D31244224F910645F8E5CEF4C505B76B215BFDFCD9A ] p2psvc C:\WINDOWS\system32\p2psvc.dll
23:24:13.0365 0x09b0 p2psvc - ok
23:24:13.0396 0x09b0 [ 6B81BF7853D161DB8AC62CD8B9C2DE6B, B2DC06D135FD2501217DDA7349556EB873309E02188D4C3901807BA24FAB30C7 ] Parport C:\WINDOWS\System32\drivers\parport.sys
23:24:13.0474 0x09b0 Parport - ok
23:24:13.0521 0x09b0 [ CDBD029BAEC8D09F6FBD404632D9AF28, 71F4401150CD4C9C6BBF2DA854CF07EA2F8C9BBE900833858F49134DDAF14414 ] partmgr C:\WINDOWS\system32\drivers\partmgr.sys
23:24:13.0553 0x09b0 partmgr - ok
23:24:13.0584 0x09b0 [ 8A0F8A9580D9F2FC512A35D5709088A9, 3385B3FC4120C249ADB20190F4B2FF63A4358D4BE36C507B6300BCAD069F722A ] pavboot C:\WINDOWS\system32\drivers\pavboot64.sys
23:24:13.0599 0x09b0 pavboot - ok
23:24:13.0678 0x09b0 [ CDD8EDF4C35BE6D6137112F5CC7A70DA, 80EECA6BC2E668E5652A5CA9B119CCCE2A2E421F0EED1FD0EAC20C42E77C02ED ] PcaSvc C:\WINDOWS\System32\pcasvc.dll
23:24:13.0724 0x09b0 PcaSvc - ok
23:24:13.0771 0x09b0 [ 29AF16726F4DD84376ECA85AB6AFF2C6, BEF9EA10637065365ED343C4EBA51191B9BEADD8F1F3362D3EFE75F40BE9A027 ] pci C:\WINDOWS\system32\drivers\pci.sys
23:24:13.0818 0x09b0 pci - ok
23:24:13.0865 0x09b0 [ 214DCC87E3898F738075D1341252A552, E721FBBC3510DDB848A8CAEA3B6031EE988F42252DBC3BF7BDB6ABD9A0D9FABD ] pciide C:\WINDOWS\system32\drivers\pciide.sys
23:24:13.0881 0x09b0 pciide - ok
23:24:13.0896 0x09b0 [ AED76A3333B3A31536E430020E0226FC, EC255B79B0908E3C142D92E35B79D90A3F2594BA012CA2B1B04A6A8745153430 ] pcmcia C:\WINDOWS\system32\drivers\pcmcia.sys
23:24:13.0928 0x09b0 pcmcia - ok
23:24:13.0943 0x09b0 [ E63FB38B6E75B39467492FBAD2CD512A, DB406C92BA2460C833A49B98EB5BD58348E868F643A0123B0C9B5315FFC6A124 ] pcw C:\WINDOWS\system32\drivers\pcw.sys
23:24:13.0974 0x09b0 pcw - ok
23:24:14.0021 0x09b0 [ 9EA203A07EFA6D74F07F32EF0DAB5CA6, D851F1CC748B4CD0E263931668FFF2FE20D5778267F4FF2237D565CFC171B5AF ] pdc C:\WINDOWS\system32\drivers\pdc.sys
23:24:14.0053 0x09b0 pdc - ok
23:24:14.0115 0x09b0 [ 1509A77F840AA9E72CF8247D0CF2FBDE, 2D47AD4D8F5C2D871E603FB6D72D25EFD0E63FA3A542DAADAB9D82ED074C0E0B ] PEAUTH C:\WINDOWS\system32\drivers\peauth.sys
23:24:14.0209 0x09b0 PEAUTH - ok
23:24:14.0240 0x09b0 [ 540116170E2135FCD5DDE77702166B67, CBEC51C2D47532F1781B3255040F303263420B204C2F8BB2B5D1EC342F57B285 ] percsas2i C:\WINDOWS\system32\drivers\percsas2i.sys
23:24:14.0271 0x09b0 percsas2i - ok
23:24:14.0287 0x09b0 [ 8356F87553BF49C703CF382033815898, 245EB941566D848F134629690BF271B1CBEAB6440771D3D8D7AED3756835354E ] percsas3i C:\WINDOWS\system32\drivers\percsas3i.sys
23:24:14.0303 0x09b0 percsas3i - ok
23:24:14.0365 0x09b0 [ CB5343FF52A702A9ACFAAE6BE972FE09, EAA5362D91D05D382DF4EBBAA3FD575456F23CAD531CC6F1270F8254892DBF02 ] PerfHost C:\WINDOWS\SysWow64\perfhost.exe
23:24:14.0443 0x09b0 PerfHost - ok
23:24:14.0506 0x09b0 [ D0D57322ABC7473E54472D8374169CC5, BD14A13D6908C8669E56EF9401FD8A3D7C618E8B6556B36E634864E733BCA4B2 ] PhoneSvc C:\WINDOWS\System32\PhoneService.dll
23:24:14.0615 0x09b0 PhoneSvc - ok
23:24:14.0662 0x09b0 [ B4AB2C0177715FFAED88A1223212043A, 1920792ADC78DD51EF98B6A9634D686EAED0848FB7EF74A0DCD3AEBA5AF41EC6 ] PimIndexMaintenanceSvc C:\WINDOWS\System32\PimIndexMaintenance.dll
23:24:14.0771 0x09b0 PimIndexMaintenanceSvc - ok
23:24:14.0881 0x09b0 [ F931F21E4287FE3ECCF09B54A232BBA2, CEB7AB3236E5F30214027092B7B695ED35F7A1E007DF4046797D1E4DFEF49EC8 ] pla C:\WINDOWS\system32\pla.dll
23:24:15.0131 0x09b0 pla - ok
23:24:15.0178 0x09b0 [ FEA494AC3A1BAE63C1F2AF267D49F1DB, 0722FEA2481740B53EF26B1CA59166C63C157A5C708AC93DF3FBB74A27266C9C ] PlugPlay C:\WINDOWS\system32\umpnpmgr.dll
23:24:15.0209 0x09b0 PlugPlay - ok
23:24:15.0256 0x09b0 [ 56D7A89423325121C4A9BD5C326414F3, 649048C23D1973C3504E26B35362AC99DFE9BF31FFE73F45B43306A212AEA34C ] PNRPAutoReg C:\WINDOWS\system32\pnrpauto.dll
23:24:15.0303 0x09b0 PNRPAutoReg - ok
23:24:15.0349 0x09b0 [ 4578ECA1FCEF4E7C787D84F78625143B, F5FE84D6D7412A4C037772593C434253D590E476B0B7498987A1697BED86A510 ] PNRPsvc C:\WINDOWS\system32\pnrpsvc.dll
23:24:15.0396 0x09b0 PNRPsvc - ok
23:24:15.0459 0x09b0 [ F70CAC34B455D05EAA04B2F8FB58E1CB, 295BFFB3DA03C5CE5462C11D3240024B68AC06E8DEA9062A739BE2CCEE19EB5D ] PolicyAgent C:\WINDOWS\System32\ipsecsvc.dll
23:24:15.0521 0x09b0 PolicyAgent - ok
23:24:15.0553 0x09b0 [ 60C8376B48BA96F07AEA536527433D44, EB988C119C3E71169B91ED2A744C71933DD35447DC4A8249E80EC24E9E7077D4 ] Power C:\WINDOWS\system32\umpo.dll
23:24:15.0646 0x09b0 Power - ok
23:24:15.0678 0x09b0 [ 5645B9D9788CCA2C88B9534996ED2D6D, 4988942DF163DB5B9B1A08CE6B628D2C47C2E2EAA30AEAE4EFE21C8CF4C8DC5D ] PptpMiniport C:\WINDOWS\System32\drivers\raspptp.sys
23:24:15.0740 0x09b0 PptpMiniport - ok
23:24:15.0943 0x09b0 [ 7196D3C2E2E3129814C8DAB91F9A7D1E, 6763E4BF8E846B597E78778E520F5BADC95608BAA4EA0AC84971384B5D976DD7 ] PrintNotify C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll
23:24:16.0225 0x09b0 PrintNotify - ok
23:24:16.0271 0x09b0 [ 372913E12677A8CBBBABDD8311894F9D, A5233D95A0D22D2A9DB214E7CB79A99D389B67189FF6A87D0AD4610A333A637F ] Processor C:\WINDOWS\System32\drivers\processr.sys
23:24:16.0334 0x09b0 Processor - ok
23:24:16.0381 0x09b0 [ 1F115AF75EFBAC28479B4F94A3F8D4A3, BE8D8C50D985F6AF9DDC0F13BDBE2D55D600E1F5E344982536538B14EC484AA6 ] ProfSvc C:\WINDOWS\system32\profsvc.dll
23:24:16.0490 0x09b0 ProfSvc - ok
23:24:16.0521 0x09b0 [ FC98407B85A31161851FDE245517574F, 2CCD706CF243934FCDA32B24CE0C385EA2E67F206E0306FA584496F583A20CD1 ] Psched C:\WINDOWS\system32\drivers\pacer.sys
23:24:16.0553 0x09b0 Psched - ok
23:24:16.0615 0x09b0 [ 7A68710BAC9B6809314B86C0CB1CBC4A, C02D97993D1F6FE6EFBA5B1366B3A4FE8CE1136A95F3A2DA07BA59554C163501 ] QWAVE C:\WINDOWS\system32\qwave.dll
23:24:16.0740 0x09b0 QWAVE - ok
23:24:16.0787 0x09b0 [ 819602BBBFDB0BD46DEA3715BF0DD452, D4007FF1E5296316B53436CA3598D6B1CF4F60AB77D5B02F3E595081EDD5D879 ] QWAVEdrv C:\WINDOWS\system32\drivers\qwavedrv.sys
23:24:16.0849 0x09b0 QWAVEdrv - ok
23:24:16.0881 0x09b0 [ CDF47037A0939F56D11F699629C276AD, A63F2A3FE80FB8084E3870E907505694B79EE1D9E56E292C01D481FEFD2534B0 ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
23:24:16.0943 0x09b0 RasAcd - ok
23:24:16.0975 0x09b0 [ 28C2EA278070EE12701D0EDF8CB0EC36, F10288C1C6835840026DB30285345EF892DE989F43C948E7F4760B8895FF675F ] RasAgileVpn C:\WINDOWS\System32\drivers\AgileVpn.sys
23:24:17.0068 0x09b0 RasAgileVpn - ok
23:24:17.0131 0x09b0 [ 7B82197BF35CC3BE59AEF8B706AB8A16, AB0216164A548A48CD21F5F035E57E867584A96890B9887EC08F8DABDD89F990 ] RasAuto C:\WINDOWS\System32\rasauto.dll
23:24:17.0209 0x09b0 RasAuto - ok
23:24:17.0240 0x09b0 [ 17E565710172ED71B8531D8822E1C5D1, 0CA39ABD9E544DDAD9D9D7D1FC50444274C31E18F9BF73069051D9F62833698F ] Rasl2tp C:\WINDOWS\System32\drivers\rasl2tp.sys
23:24:17.0303 0x09b0 Rasl2tp - ok
23:24:17.0350 0x09b0 [ F79BFB5588B777C71734C1D1EC129D07, 9B9D70EC8978AAC19B2B94694EE1B9957C13DFDDFCBE8AA82C5F0D0EA04CDBDF ] RasMan C:\WINDOWS\System32\rasmans.dll
23:24:17.0475 0x09b0 RasMan - ok
23:24:17.0506 0x09b0 [ 9387DF155233D45D4E010F4F2FB52A57, CABC25DA4E512809AED0085767BDD94BF3C1DA792BFF8A009B5465D9110E7060 ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
23:24:17.0553 0x09b0 RasPppoe - ok
23:24:17.0584 0x09b0 [ F0F4EEDEEBEE7A4244FAFB96A16B5712, F64717E601BD5EB674003009507B8CDD6F69F00E8670D6895EC64786166A0E8D ] RasSstp C:\WINDOWS\System32\drivers\rassstp.sys
23:24:17.0646 0x09b0 RasSstp - ok
23:24:17.0693 0x09b0 [ AF6963414B820B7C45578ED3300438A7, C00F60FD72608E6983D32642768AECE891DD816FADFA7B872BA88091C16B95D7 ] rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
23:24:17.0740 0x09b0 rdbss - ok
23:24:17.0756 0x09b0 [ 79A415E6FA915EFC00297DAB16EC2635, 47BB49F6D756214193D38A4AB182B541AAC180381C3111FF7F9B0AD4C44D8733 ] rdpbus C:\WINDOWS\System32\drivers\rdpbus.sys
23:24:17.0834 0x09b0 rdpbus - ok
23:24:17.0865 0x09b0 [ 7135785C21CA79D270D11037C43D3F19, 654A3C65CF891ED8C82A740D10CF607FC7D709185E664DE03288CEB5B25F03A6 ] RDPDR C:\WINDOWS\system32\drivers\rdpdr.sys
23:24:17.0928 0x09b0 RDPDR - ok
23:24:17.0975 0x09b0 [ 97A61A3CB2B5CB4FC32B3224EF333448, E4F2E8BCEE3639BE57BBC8A8E67FDE42C3A5158F1204684B0ECD216F4AA044A3 ] RdpVideoMiniport C:\WINDOWS\system32\drivers\rdpvideominiport.sys
23:24:17.0990 0x09b0 RdpVideoMiniport - ok
23:24:18.0006 0x09b0 [ 69BB204AE07EE84ECFAB1BF13C4BD04B, 1CA832CBF4AE4821EEA2A19F9519C2D1D00406B8CCE2A86FE3B33A5F293DB218 ] rdyboost C:\WINDOWS\system32\drivers\rdyboost.sys
23:24:18.0053 0x09b0 rdyboost - ok
23:24:18.0100 0x09b0 [ 940D6F5A2B0A61EE4170DF84F6C95C20, F8EE846DC8015EDFE7CB5BEEDC977EAA9C586BAC2216DE69D8ECCBDBC7408649 ] ReFSv1 C:\WINDOWS\system32\drivers\ReFSv1.sys
23:24:18.0162 0x09b0 ReFSv1 - ok
23:24:18.0209 0x09b0 [ 13F6B64235C60167052364BF7D99E4CA, BC12EE00775F7456FB922FBD684BF3F0CFABA5BEBB6E162C23B41DED5C20A978 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
23:24:18.0318 0x09b0 RemoteAccess - ok
23:24:18.0396 0x09b0 [ 3183B161B1F05333F6C325577FEF3596, D6A89B2A021377B6F371E5B9EFC36FF018822B28F0ED41F8CD2F00C5C8605707 ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
23:24:18.0459 0x09b0 RemoteRegistry - ok
23:24:18.0553 0x09b0 [ 0660F4A14F9D2A2F59B26B1D74F1A6D0, A9443B6B7ED1ECA22AC960A2C6A2BE18C0BA58CD7BCF60E7AA617CD3662D122D ] RetailDemo C:\WINDOWS\system32\RDXService.dll
23:24:18.0678 0x09b0 RetailDemo - ok
23:24:18.0709 0x09b0 [ 5DAA644F17780FC4E3F4820A46D38FEC, 32C27FFA0A4608B164F4E709CD0D998AB73CA9713BE3E47F9DBC7B3D1B6C7453 ] RmSvc C:\WINDOWS\System32\RMapi.dll
23:24:18.0771 0x09b0 RmSvc - ok
23:24:18.0943 0x09b0 [ 83A6C2CAFE236652D1559640594A0EA8, 52360F17C9C70C9CEA3316560B40C4D89FD705ED7E6B6088C99FC54D4CC35EB5 ] rpcapd C:\Program Files (x86)\WinPcap\rpcapd.exe
23:24:18.0959 0x09b0 rpcapd - ok
23:24:19.0021 0x09b0 [ 672724C8B21B7DC56646045DE4D5B860, 79986E80A92C949C543959F1E35647A9788DAB2892AC20B6DEA5C0BBC0CEDE9E ] RpcEptMapper C:\WINDOWS\System32\RpcEpMap.dll
23:24:19.0084 0x09b0 RpcEptMapper - ok
23:24:19.0115 0x09b0 [ 109C1D609951E886D3643B15C1EDD1C2, 347D8E7C50EC7F96217C7421D9BC8A42C9DF50B94169CB58DCF857A63C33C2EA ] RpcLocator C:\WINDOWS\system32\locator.exe
23:24:19.0178 0x09b0 RpcLocator - ok
23:24:19.0240 0x09b0 [ 7BD259FC59CF9C2AE1B979564B374CC6, 299832FCE304A85080C80ABFE820A6093AC15A7C1E7C89D8C946708E955A2909 ] RpcSs C:\WINDOWS\system32\rpcss.dll
23:24:19.0334 0x09b0 RpcSs - ok
23:24:19.0381 0x09b0 [ 5FF28F097C9699097B473F8FC7C1AA7D, 695560F1DBD85073F3D6CB1FF16F16504CA044EA62E940E463A16BBA8B86E2FA ] rspndr C:\WINDOWS\system32\drivers\rspndr.sys
23:24:19.0412 0x09b0 rspndr - ok
23:24:19.0475 0x09b0 [ F9265C902BB9146C6BFF97BDF35C04DE, DC70B404A701CE5F60421F664F745CA84722ED86FAFC87F2A8A71BFD25CD6151 ] rt640x64 C:\WINDOWS\System32\drivers\rt640x64.sys
23:24:19.0553 0x09b0 rt640x64 - ok
23:24:19.0584 0x09b0 [ B5DAEE69BACA64D2BB004568E22D8756, C0072CF6B438ED756435A182D55AC55F3AD356ACBD483DE06A94893D3CA8CCC5 ] s3cap C:\WINDOWS\System32\drivers\vms3cap.sys
23:24:19.0646 0x09b0 s3cap - ok
23:24:19.0678 0x09b0 [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] SamSs C:\WINDOWS\system32\lsass.exe
23:24:19.0693 0x09b0 SamSs - ok
23:24:19.0709 0x09b0 [ 5E73FB63E2DBC75FE0C17DEB0010CE0E, 9DAC47486262397D03BC01F7438CAB62CF33BD7B5283F5B9548C770A3D6D0ADC ] sbp2port C:\WINDOWS\system32\drivers\sbp2port.sys
23:24:19.0740 0x09b0 sbp2port - ok
23:24:19.0803 0x09b0 [ 3CD0130FFDEAEACF0905B482F3934EA3, 1EC355B63135FD2563093EBB206741C0C4CCE0551A662F6DC86C875146A88B06 ] SCardSvr C:\WINDOWS\System32\SCardSvr.dll
23:24:19.0881 0x09b0 SCardSvr - ok
23:24:19.0912 0x09b0 [ E25632DF954CE70928946BB36F829CF4, A0017814796AC42F159F73A3441A5BDD54F113EDD537EE16194BCE0E759651F3 ] SCDEmu C:\WINDOWS\system32\drivers\SCDEmu.sys
23:24:19.0943 0x09b0 SCDEmu - ok
23:24:19.0990 0x09b0 [ 5E8ECCE130A72107B6DFDBE26185A7FB, 811E2CE485BC14161FF629069BCCF53B2B8C6F8B1E1A6B3A3C86DBE4F85A5577 ] ScDeviceEnum C:\WINDOWS\System32\ScDeviceEnum.dll
23:24:20.0053 0x09b0 ScDeviceEnum - ok
23:24:20.0084 0x09b0 [ 3D9A82B03C92D1FEC42CB171D6F57778, DC027F02F5EB5F1D10DB6F405FB0C15D4D5C922445F5F3C916624113278AF072 ] scfilter C:\WINDOWS\system32\DRIVERS\scfilter.sys
23:24:20.0131 0x09b0 scfilter - ok
23:24:20.0209 0x09b0 [ D4DB6B318A0A0C74A90260725A228C0B, 57BA2EF9D880488C785C806ABF9EE753A48E589129442D72F815CD6EFFA07B22 ] Schedule C:\WINDOWS\system32\schedsvc.dll
23:24:20.0287 0x09b0 Schedule - ok
23:24:20.0334 0x09b0 [ 9055ADDFBA4C8B914C914CE693B55C0A, DB213AC36E14D856B81D2AFE46815402537A2ABEEA15032A9FF436F953129441 ] scmbus C:\WINDOWS\system32\drivers\scmbus.sys
23:24:20.0365 0x09b0 scmbus - ok
23:24:20.0381 0x09b0 [ B6F2363584E62960846F7C3F00124A4F, 252189FF9D623CF69BF415FF7C7FE74B0BBF756B632420578BFAFF6595616CF7 ] scmdisk0101 C:\WINDOWS\System32\drivers\scmdisk0101.sys
23:24:20.0443 0x09b0 scmdisk0101 - ok
23:24:20.0475 0x09b0 [ C1B5EE58E759C53F9939581709DC70BB, 85095ABC9459A766832373BC3839E573E9A73C967F8427D6B7CAB972551C3191 ] SCPolicySvc C:\WINDOWS\System32\certprop.dll
23:24:20.0521 0x09b0 SCPolicySvc - ok
23:24:20.0553 0x09b0 [ 7C3D10BEC8B0DBA00A78C78EB10B3AE2, A671C9CB97977613576D70607E106C7A29B9EA9E875C7C5AF293EE5903D7AD0A ] sdbus C:\WINDOWS\System32\drivers\sdbus.sys
23:24:20.0584 0x09b0 sdbus - ok
23:24:20.0662 0x09b0 [ F3714DBAA42C15F78FFCDFE4273214EB, 2D018970B92C5F0744FAE10A2FC298F3DCEA5C2EDEB760F4F0651337B9878ABF ] SDRSVC C:\WINDOWS\System32\SDRSVC.dll
23:24:20.0818 0x09b0 SDRSVC - ok
23:24:20.0865 0x09b0 [ 120DFCB71D6C502613A9E2D50E16850C, 2C294010AD1C9C380CD5221A37720544178B7358C8C8553AF44055E4CEE5DAF5 ] sdstor C:\WINDOWS\System32\drivers\sdstor.sys
23:24:20.0881 0x09b0 sdstor - ok
23:24:20.0928 0x09b0 [ EFD644DD091E1D94555FC3BBC95EA66D, FBDDA6680BEC378CCF12A32D9186020E884DA15A1E789D1531B1E687FC7B54B1 ] seclogon C:\WINDOWS\system32\seclogon.dll
23:24:21.0021 0x09b0 seclogon - ok
23:24:21.0053 0x09b0 [ F48535714BED7DD784853889B4594B26, 9B4AB7E7293E79A8F6CC46C84F23E62AD3BD6E958FCE078CDBB125A69FAC7E50 ] SENS C:\WINDOWS\System32\sens.dll
23:24:21.0131 0x09b0 SENS - ok
23:24:21.0209 0x09b0 [ 2B4E090D06C60853C5C00CF255F9E02A, 4D4DBA7B04519622612BD4A4F28318CA2F5646C84CAFF8C5ACC9BF4C6031894E ] SensorDataService C:\WINDOWS\System32\SensorDataService.exe
23:24:21.0334 0x09b0 SensorDataService - ok
23:24:21.0396 0x09b0 [ C09A42163878A082C3F0D0A3DFE95714, 8033DC38D0EDED3758DA6BF8C1955BE5FFE48863C079C589660B37D0E461300F ] SensorService C:\WINDOWS\system32\SensorService.dll
23:24:21.0506 0x09b0 SensorService - ok
23:24:21.0553 0x09b0 [ E6F00415DADCEEC860E7AB42BFD19A65, 274CAF22F93D43B6DB6953730E3DF8DA94776B24EEE74B80AB4CD780BC1366A9 ] SensrSvc C:\WINDOWS\system32\sensrsvc.dll
23:24:21.0662 0x09b0 SensrSvc - ok
23:24:21.0678 0x09b0 [ 401D706DDC0A7AF18C3DD228ADF74551, 27C0B38D7C2E3F6FF06201124E63483931F6071954B2B99EC0143C464238C0B7 ] SerCx C:\WINDOWS\system32\drivers\SerCx.sys
23:24:21.0693 0x09b0 SerCx - ok
23:24:21.0740 0x09b0 [ 7084D11083F0CDCA8B5C76F9846ABF5D, F639920882B0E784D8CFAF0D4C0F0C411937B6831E5DD99B0ABFBFE06BA4742F ] SerCx2 C:\WINDOWS\system32\drivers\SerCx2.sys
23:24:21.0771 0x09b0 SerCx2 - ok
23:24:21.0787 0x09b0 [ 3FF478A8ED32A83C36581425F6282B6C, 787646A17098EA7CF36064D0A950C1D470D4A280C8C5AC40023D566E53860EAE ] Serenum C:\WINDOWS\System32\drivers\serenum.sys
23:24:21.0834 0x09b0 Serenum - ok
23:24:21.0865 0x09b0 [ 92509187AA171A80521528B36F753E1D, FE0DA272B8A155ECC161E99586C4AE7EE17B1C84BC330DA1566C83B8E03FA825 ] Serial C:\WINDOWS\System32\drivers\serial.sys
23:24:21.0912 0x09b0 Serial - ok
23:24:21.0943 0x09b0 [ 433D38FF6D08B993847EA2A10EB8CB52, 29BA75DB6D1AC761BBDFB5AC8874FC7D763E1CD10D290E369063B34CE951270F ] sermouse C:\WINDOWS\System32\drivers\sermouse.sys
23:24:21.0975 0x09b0 sermouse - ok
23:24:22.0037 0x09b0 [ 82CF273F0E8F243789683DEB40757569, 5433D93A41C4BF04494E6158931C6AC3154888F7CD3A417253EC02FF7EA6D00E ] SessionEnv C:\WINDOWS\system32\sessenv.dll
23:24:22.0115 0x09b0 SessionEnv - ok
23:24:22.0162 0x09b0 [ 697D3EE0740AEAB62B66ABCA1C83D13B, FCF54A0071ED04AD3FC8551C67FE5FD49089DC0510F753052CAC5972A65C9E3D ] sfloppy C:\WINDOWS\System32\drivers\sfloppy.sys
23:24:22.0209 0x09b0 sfloppy - ok
23:24:22.0271 0x09b0 [ 832E933AA8DB9FD4733B96D8B6484D3F, 3A8E3D7ECA192EEE154CB568073B7211FDA06078EFC3BC7E961563A1BFDD0CAA ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
23:24:22.0396 0x09b0 SharedAccess - ok
23:24:22.0475 0x09b0 [ 482E6BE8A07832E824080D352075ACA1, 4123A76C8E805AF4FE229C53E9C174095C0937913BA81A63FE9B45C44AA5B15F ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
23:24:22.0553 0x09b0 ShellHWDetection - ok
23:24:22.0631 0x09b0 [ CF3BDF9EAD8D3EF671E9339B44B185BA, C17EC6D5B00F49D9C8B5B6C262A85F34ED71C58450659F006B3632AA84F68E23 ] shpamsvc C:\WINDOWS\system32\Windows.SharedPC.AccountManager.dll
23:24:22.0725 0x09b0 shpamsvc - ok
23:24:22.0740 0x09b0 [ A34CE1830E45DA98932295FDE4B7908A, FC553ECF4D64B4B10B7FDE5352707785517A18D487A80665BAFC7261E3F35CDC ] SiSRaid2 C:\WINDOWS\system32\drivers\SiSRaid2.sys
23:24:22.0772 0x09b0 SiSRaid2 - ok
23:24:22.0787 0x09b0 [ A7B5C670770E908DA5FEF5BF1136E933, 8D3BB6FF65E631C34BE8EA766481B2FDB2E1E916A4FD67F86705A8975A136E6C ] SiSRaid4 C:\WINDOWS\system32\drivers\sisraid4.sys
23:24:22.0818 0x09b0 SiSRaid4 - ok
23:24:22.0850 0x09b0 [ 6749AD471D1D44CBD1F30257C861F77B, D5A554F35E380948F13BFE0673B49F8FD8AE5A438BF3645857522E2560A58685 ] SkypeUpdate C:\Program Files (x86)\Skype\Updater\Updater.exe
23:24:22.0881 0x09b0 SkypeUpdate - ok
23:24:22.0896 0x09b0 [ D233EAE2A9D48485321816486ED635EF, 03AB49BE9CF15EB7EDC50C400E673B4DF0E5BFDA9A7811E157F2AF2F3CF38D49 ] smphost C:\WINDOWS\System32\smphost.dll
23:24:22.0990 0x09b0 smphost - ok
23:24:23.0053 0x09b0 [ 0B217141AC1283655402CDB356577735, 6EFA4CA46CFC8B7156CE7E5CA89B7F7073E16D66C2FC13F4DB95FEB78CCF698F ] SmsRouter C:\WINDOWS\system32\SmsRouterSvc.dll
23:24:23.0146 0x09b0 SmsRouter - ok
23:24:23.0193 0x09b0 [ 6F4CE07D420FB657B5936F71101ABD41, CEC52984C56E578E0FFE12BE1B8148335F788B7D1751F2D0E79B944A41113C20 ] SNMPTRAP C:\WINDOWS\System32\snmptrap.exe
23:24:23.0256 0x09b0 SNMPTRAP - ok
23:24:23.0318 0x09b0 [ C994DF90427103CCB80F893FFD2B1CE8, 7E4B08095C77E68D337A3425EEA38F8FEC4D103CA7661E34FD96BF518DFB4BCB ] spaceport C:\WINDOWS\system32\drivers\spaceport.sys
23:24:23.0365 0x09b0 spaceport - ok
23:24:23.0412 0x09b0 [ E03264C4C25B568F92ED1656AD541E64, D42942BFFBC7213D204FAF84F4FE015FC23A6ACB29B5E752834EDBC17A3AC20D ] SpbCx C:\WINDOWS\system32\drivers\SpbCx.sys
23:24:23.0428 0x09b0 SpbCx - ok
23:24:23.0506 0x09b0 [ 79DCE27E8C4CF6701BFE49EC2446BBF6, F51CBB7A45C3C878F41653FD5FBDC93CC302712B7725DAAB4D3475A1F4771E3D ] Spooler C:\WINDOWS\System32\spoolsv.exe
23:24:23.0615 0x09b0 Spooler - ok
23:24:23.0850 0x09b0 [ 23529A00195CE71252FEBF647E56E27D, 8ADF7A1C96DAE005E9A974D90BE8954F88D49B6848252B88513C49E0A3BD9774 ] sppsvc C:\WINDOWS\system32\sppsvc.exe
23:24:24.0147 0x09b0 sppsvc - ok
23:24:24.0193 0x09b0 [ E83830BB74AE8CBECEA0ECD94DE436F9, 4A34569A34260324EBD629039E1BF45A3527FC75B22D9A3DB6360A6EB365483A ] srv C:\WINDOWS\system32\DRIVERS\srv.sys
23:24:24.0256 0x09b0 srv - ok
23:24:24.0318 0x09b0 [ 55CA5329D1ADEB8F8034045930147AE4, D4F31BC82700D166564C7F9CDCEA3ABAB4A37B55137C34572768DF46FDA9320A ] srv2 C:\WINDOWS\system32\DRIVERS\srv2.sys
23:24:24.0428 0x09b0 srv2 - ok
23:24:24.0459 0x09b0 [ F13EE0DB1FB1D6946AC3228D7EFCFC8F, 109A809F0338FAB0F4045FA5EE33C6F0A994A9F586B2FBD8920A6AABA0E0EF66 ] srvnet C:\WINDOWS\system32\DRIVERS\srvnet.sys
23:24:24.0522 0x09b0 srvnet - ok
23:24:24.0568 0x09b0 [ 44758105AB3EA34E815D4B6CA1153311, 7F223A20D2538C123BAC6F75BE0E126876A116F09502FD980C05B8916E26E1B7 ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
23:24:24.0709 0x09b0 SSDPSRV - ok
23:24:24.0756 0x09b0 [ B97C7EC07218A8002323718202BF5E77, 39D3254383E3F49FD3E2DFF8212F4B5744D8D5E0A6BB320516C5EE525AD211EB ] SstpSvc C:\WINDOWS\system32\sstpsvc.dll
23:24:24.0834 0x09b0 SstpSvc - ok
23:24:25.0022 0x09b0 [ 4E330AD1EED4A5D582EE415FD55953A2, 2C02E1F45F74D250110BA5117AA942495CB2EBAC7F2CCECC284B4FB8F47B13E1 ] StateRepository C:\WINDOWS\system32\windows.staterepository.dll
23:24:25.0381 0x09b0 StateRepository - ok
23:24:25.0443 0x09b0 [ 591249EA969797C2A24629AF7C71A6F8, 61F28FB495657916514DE2A7FFD4AD833A1B2BBA5591616BE0C9CCD7DAFA40B7 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
23:24:25.0506 0x09b0 Steam Client Service - ok
23:24:25.0537 0x09b0 [ 29D26E1347AE1BBD4201014E19880B2C, 9E2153AD96CE4F189EEE43BB02515532C619FB1CA02D8F6DEF517AC3347AAA14 ] stexstor C:\WINDOWS\system32\drivers\stexstor.sys
23:24:25.0568 0x09b0 stexstor - ok
23:24:25.0631 0x09b0 [ 91CB95B35481155BFE29C217CD237F27, CA66957DF1441D991453BEF02D768D44E5D9A484BC23C8874E8A7AC20904CB06 ] stisvc C:\WINDOWS\System32\wiaservc.dll
23:24:25.0756 0x09b0 stisvc - ok
23:24:25.0787 0x09b0 [ 53EB8CE34B55A1EE63424C8DB7388BFC, 5AB59117BA8A2844EB8693CCC19B217AE039B28C87519F96E1C845FE9BF456C2 ] storahci C:\WINDOWS\system32\drivers\storahci.sys
23:24:25.0818 0x09b0 storahci - ok
23:24:25.0865 0x09b0 [ C5E0ACE4771F5575D9D5B457ABF3AD03, 365880BC5AC313F25C313EFB7758301F98D9B2BF4C5FC9499F98C2B7F8407D96 ] storflt C:\WINDOWS\system32\drivers\vmstorfl.sys
23:24:25.0881 0x09b0 storflt - ok
23:24:25.0912 0x09b0 [ B66D8C75C9BC59D637177AB3B1C569A6, 76252A631F03EEBF5FDC7693F6B0A5E73838CDBE3157114CC96B8BBE88B476BF ] stornvme C:\WINDOWS\system32\drivers\stornvme.sys
23:24:25.0928 0x09b0 stornvme - ok
23:24:25.0943 0x09b0 [ BEBF85EB4D90E6996047DA027D0ED26E, DF109CF0F07CDD1B9B702C2A076D4DD5366DAAD971CC9359AF0358E79981706F ] storqosflt C:\WINDOWS\system32\drivers\storqosflt.sys
23:24:26.0022 0x09b0 storqosflt - ok
23:24:26.0084 0x09b0 [ B91FBE7CB4633FEB32AFBD0B48576396, 9EFDD92E8096CE5555F8DC3C870864E5515469603C2373B99B3607234633CA66 ] StorSvc C:\WINDOWS\system32\storsvc.dll
23:24:26.0209 0x09b0 StorSvc - ok
23:24:26.0225 0x09b0 [ 8E73037A6F8938475692FFCC26EBF385, F78C5CD1A3CD17AA831EEC82426B14006B4DDBC9085A4814E04E8C37FD6B05F7 ] storufs C:\WINDOWS\system32\drivers\storufs.sys
23:24:26.0256 0x09b0 storufs - ok
23:24:26.0303 0x09b0 [ 9D9DED47DA10E845EFF2DD57C94C809B, 520D0CE7A867051B80C8141E351FE5A5BCE3C99776093F234DB77D3407B1F104 ] storvsc C:\WINDOWS\system32\drivers\storvsc.sys
23:24:26.0318 0x09b0 storvsc - ok
23:24:26.0381 0x09b0 [ 224C92E442B1B8C20C274332F1ACF00D, CDE5DCFB7A21089464A6E2ABB29BBE08B184C3433C218756AA5902A8F67C0B2C ] svsvc C:\WINDOWS\system32\svsvc.dll
23:24:26.0459 0x09b0 svsvc - ok
23:24:26.0475 0x09b0 [ 505E0C40B5D0ADDCBB414640F59BD2E0, DF4B5E65FE6FF2224F298A2A2FAC9B648C082DFF8463148633647580A9FAD34D ] swenum C:\WINDOWS\System32\drivers\swenum.sys
23:24:26.0506 0x09b0 swenum - ok
23:24:26.0568 0x09b0 [ F577910A133A592234EBAAD3F3AFA258, 36F514740EE2D2B2F7ABFFFA13D575233EC4CE774EB58BF889C09930FEF1F443 ] SwitchBoard C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
23:24:26.0662 0x09b0 SwitchBoard - detected UnsignedFile.Multi.Generic ( 1 )
23:24:27.0412 0x09b0 Detect skipped due to KSN trusted
23:24:27.0412 0x09b0 SwitchBoard - ok
23:24:27.0522 0x09b0 [ 2EE27411B5904C63D723BEA391819F58, C88C11D460E90398E16011B8A2CED5EE5626084F24790EA6115532F8F70060C6 ] swprv C:\WINDOWS\System32\swprv.dll
23:24:27.0615 0x09b0 swprv - ok
23:24:27.0662 0x09b0 [ 32F46FB0F290D16DAA452B289C985795, 73F88AAAA6026DB4C27F1D054145216DCC3F1960946FB2A7A90518DD1D5737CB ] Synth3dVsc C:\WINDOWS\System32\drivers\Synth3dVsc.sys
23:24:27.0740 0x09b0 Synth3dVsc - ok
23:24:27.0819 0x09b0 [ FED48B19D6F55D7A3AB498D85729D1BA, FA5E0E02BC2E2DE108C55991E3B063CC947072228B53539F42F922661510DE7C ] SysMain C:\WINDOWS\system32\sysmain.dll
23:24:27.0928 0x09b0 SysMain - ok
23:24:27.0959 0x09b0 [ D9FEA79BF6AF136F8E656AE045C2FEC8, E6F08A93348E035185F0F1C6B6277E636F4F25D1136E3ACCA63488DAEEC7114B ] SystemEventsBroker C:\WINDOWS\System32\SystemEventsBrokerServer.dll
23:24:28.0053 0x09b0 SystemEventsBroker - ok
23:24:28.0131 0x09b0 [ 86E7FD5C8DBEC1EB51C4368561402B75, 86EE61414CD5854E39E33F67BF5DA4377B569B3ED4D18882C470BC6784891DA1 ] TabletInputService C:\WINDOWS\System32\TabSvc.dll
23:24:28.0209 0x09b0 TabletInputService - ok
23:24:28.0240 0x09b0 [ F33FDC72298DF4BF9813A55D21F4EB31, 34AADF5115CA1B275FEF4238B420FE424F0E1D0FFD1606B24A0D594D7305CF1F ] taphss C:\WINDOWS\system32\DRIVERS\taphss.sys
23:24:28.0256 0x09b0 taphss - ok
23:24:28.0303 0x09b0 [ 83C57F165F0216E5CE40D7E4E00DC76D, F3740283A5DB8EF69A6A2AC52D6506FBA5423C6548AAF3A272A13F9F582A2792 ] taphss6 C:\WINDOWS\system32\DRIVERS\taphss6.sys
23:24:28.0319 0x09b0 taphss6 - ok
23:24:28.0397 0x09b0 [ 3929C8FC134AC672C4F3F85160956257, CD3195CA58BA6F55EA0DDA2BE6AB58280AD1CA488D7AAA1539DD05FB99374F36 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
23:24:28.0459 0x09b0 TapiSrv - ok
23:24:28.0584 0x09b0 [ 4F25E481124059CC593B4C68BC485640, 2814D2BA4E83D3B0F7569E6C6EE0C763D9801BC505D8ED84675D19C8573834DB ] Tcpip C:\WINDOWS\system32\drivers\tcpip.sys
23:24:28.0725 0x09b0 Tcpip - ok
23:24:28.0850 0x09b0 [ 4F25E481124059CC593B4C68BC485640, 2814D2BA4E83D3B0F7569E6C6EE0C763D9801BC505D8ED84675D19C8573834DB ] Tcpip6 C:\WINDOWS\system32\drivers\tcpip.sys
23:24:28.0959 0x09b0 Tcpip6 - ok
23:24:29.0006 0x09b0 [ 8DBB1BE20C36E6D19BCC89EEA00B953C, 8B97A7E53E1D77363AFF6A5AAEAD89EBAE28DCB8D82753C804FD7CD5646500AF ] tcpipreg C:\WINDOWS\system32\drivers\tcpipreg.sys
23:24:29.0084 0x09b0 tcpipreg - ok
23:24:29.0147 0x09b0 [ 9D2DD64A0B51C56285512DC9454340F6, ABB90CE6A55269F71AFB08E04969CF9A4EFD93F7A7189AF920EEE3E005214DDD ] tdx C:\WINDOWS\system32\DRIVERS\tdx.sys
23:24:29.0162 0x09b0 tdx - ok
23:24:29.0178 0x09b0 [ 06130AFFECEB94525FC2352936576B70, 10EBE2C8FDC087D29E2FFB328F0F7905A5374AB8CC9FAE8699E7676DBC8CBF91 ] terminpt C:\WINDOWS\System32\drivers\terminpt.sys
23:24:29.0209 0x09b0 terminpt - ok
23:24:29.0287 0x09b0 [ FB68E5F02316C42BE7282DA492351C6F, AC31D841FEA58B776127E138DB20F8D48E26FD8C00CE2FA9695EA14EBF159A0A ] TermService C:\WINDOWS\System32\termsrv.dll
23:24:29.0459 0x09b0 TermService - ok
23:24:29.0506 0x09b0 [ 2AF438EC0D361A7BBB70E604A686602C, 4BE6A0461EB2CB94288614434A1CEC81C2ED46241721FD5BBD8ABE0680F7C804 ] Themes C:\WINDOWS\system32\themeservice.dll
23:24:29.0569 0x09b0 Themes - ok
23:24:29.0615 0x09b0 [ 1482B8ED5CACA87992A882B853B83CEE, 613247F0E362A109090E8563D977DECC50C64D45D6962905FA84A2D59329045C ] TieringEngineService C:\WINDOWS\system32\TieringEngineService.exe
23:24:29.0662 0x09b0 TieringEngineService - ok
23:24:29.0725 0x09b0 [ 3B3C607C3C62DFBEF61938DA2CAB94DF, E5EEA7F45A7BBFDF6F0003CD77E39958C451DD1B4B401876B5619A3C20F5C370 ] tiledatamodelsvc C:\WINDOWS\system32\tileobjserver.dll
23:24:29.0865 0x09b0 tiledatamodelsvc - ok
23:24:29.0912 0x09b0 [ C1F8CBE2D4843E0CCC3EFEA2EC60D4AB, 9D07527D982066922318C77AECE99280DE55034C375ACE145E827A6BEB5C3B70 ] TimeBrokerSvc C:\WINDOWS\System32\TimeBrokerServer.dll
23:24:29.0959 0x09b0 TimeBrokerSvc - ok
23:24:30.0006 0x09b0 [ 46171262D0E806779DEEDFCAB2F830CC, 7F4A4658B8BA217D99E5B5C0E01600C20DC96ECBCA32A5BA7FBE17D2A7B8BFD8 ] TPM C:\WINDOWS\System32\drivers\tpm.sys
23:24:30.0037 0x09b0 TPM - ok
23:24:30.0069 0x09b0 [ 3B91F35089240F6187AD681A5EC28BDE, 3D035CB73BC8E7831DCD0FB7D9DAD91CE51D3D0F9D9C8B866A0009BD508B6702 ] TrkWks C:\WINDOWS\System32\trkwks.dll
23:24:30.0131 0x09b0 TrkWks - ok
23:24:30.0209 0x09b0 [ 09440FA30C020B4443391FAFCF4876E3, 208C7725F70C75D8C96CCAF5B22F83B8B1C66D8C9FFF48465B1C9F4A77425569 ] TrustedInstaller C:\WINDOWS\servicing\TrustedInstaller.exe
23:24:30.0303 0x09b0 TrustedInstaller - ok
23:24:30.0334 0x09b0 [ A6F4025664C9D4BC2A9EDAB4092706D7, 89808A1679C0E716F86F06EE7701DCC289200894F0FA1F120DA2AC3A45FDB312 ] tsusbflt C:\WINDOWS\system32\drivers\TsUsbFlt.sys
23:24:30.0412 0x09b0 tsusbflt - ok
23:24:30.0428 0x09b0 [ 37A96AD493E110C0BF1EE0AC0F9E7DBD, F2A6894A4AEE18DF2B92222CDB0801A13AEEB7212071F0431430788339B30E23 ] TsUsbGD C:\WINDOWS\System32\drivers\TsUsbGD.sys
23:24:30.0475 0x09b0 TsUsbGD - ok
23:24:30.0506 0x09b0 [ 79E264287F17D56D768440B0270466DE, ABF9DC95C5E939B30BFD9BF9EDFDB3BD78A9DFCB055B945965303B6A60E6D7A7 ] tunnel C:\WINDOWS\System32\drivers\tunnel.sys
23:24:30.0584 0x09b0 tunnel - ok
23:24:30.0631 0x09b0 [ F723552F65D44FE693DB1A383825B3A8, EF8C343C4EB5EEA4EC830378EF576CCD6CD4EEDEDD486C0F29697044E8C71F45 ] tzautoupdate C:\WINDOWS\system32\tzautoupdate.dll
23:24:30.0678 0x09b0 tzautoupdate - ok
23:24:30.0709 0x09b0 [ AA65954F512BA097DD190790876DD991, C1BB2B8F54F064D01190327B5E7949EBBDA21D6FC6F94D9FCD20F685C2F855FA ] UASPStor C:\WINDOWS\System32\drivers\uaspstor.sys
23:24:30.0740 0x09b0 UASPStor - ok
23:24:30.0756 0x09b0 [ AB6268022C3A5B529075A39C33904DA6, 2717F1704640201F2681711543EA39A74C3E89C7DB232EC5DD89FD8AA6F07846 ] UcmCx0101 C:\WINDOWS\system32\Drivers\UcmCx.sys
23:24:30.0834 0x09b0 UcmCx0101 - ok
23:24:30.0866 0x09b0 [ 7ED2EDA43D21C7A5F589A7960E265C52, 7DB8A595236FBB8A264D7AB155201357212855050ABB5B1036EF32F1223FDCC2 ] UcmTcpciCx0101 C:\WINDOWS\system32\Drivers\UcmTcpciCx.sys
23:24:30.0897 0x09b0 UcmTcpciCx0101 - ok
23:24:30.0928 0x09b0 [ 169351463039B45F5CDED9768879F712, 990C8C4AEF9ED7FF6BCEAE67F7BDAA037777B142B8D96A74F8715C941A5C63C6 ] UcmUcsi C:\WINDOWS\System32\drivers\UcmUcsi.sys
23:24:30.0959 0x09b0 UcmUcsi - ok
23:24:31.0006 0x09b0 [ 08A9E3AD29B215484FBB68CDC175DF3A, 3EFFF99C3BC4A1454E3D2B5177AE587ED3041AB4CE2A95BA7E28A2124E38E1E5 ] Ucx01000 C:\WINDOWS\system32\drivers\ucx01000.sys
23:24:31.0037 0x09b0 Ucx01000 - ok
23:24:31.0053 0x09b0 [ DA70AEE267491AA56BC63AA0C0C96CA2, 0A0AADB27607F9292BB3CE000CFDDB19BD4CA09EAAD926C4925CB43B17817AD9 ] UdeCx C:\WINDOWS\system32\drivers\udecx.sys
23:24:31.0115 0x09b0 UdeCx - ok
23:24:31.0147 0x09b0 [ FBC5ECF6D5A868D0B116C2DBB02B8168, 945AA76C60ABAD6075B5C8F9172C018F75BCF393A1CB8B329F5E68E664627775 ] udfs C:\WINDOWS\system32\DRIVERS\udfs.sys
23:24:31.0209 0x09b0 udfs - ok
23:24:31.0240 0x09b0 [ B918E40FAA9CD118CCA4AD388B748C98, 4B539B7B656F02C5E5BAEE52A677757B05CC11C5500D619850A564C28FAB8115 ] UEFI C:\WINDOWS\System32\drivers\UEFI.sys
23:24:31.0256 0x09b0 UEFI - ok
23:24:31.0287 0x09b0 [ 0FD75222C1AD2687AB365BEBEA400DD4, AD10DBCA59EB7D34FD8F963CE267F36774A9BC613F8D637903B12AC88C328E8A ] Ufx01000 C:\WINDOWS\system32\drivers\ufx01000.sys
23:24:31.0319 0x09b0 Ufx01000 - ok
23:24:31.0365 0x09b0 [ C1A78C53E01C641AE41BFA65797819F5, 0B9FE1BD724B3315199A1B1DA2F03255E4FE744DA3CE6CD0F77699A8E42E9359 ] UfxChipidea C:\WINDOWS\System32\drivers\UfxChipidea.sys
23:24:31.0397 0x09b0 UfxChipidea - ok
23:24:31.0412 0x09b0 [ 767307212110EBEFB93EC9A5BE9E85B9, 368797400FE54802CE74F34B773CE2AF09EB8DEA6C035B55419A52F0B5A6FAD0 ] ufxsynopsys C:\WINDOWS\System32\drivers\ufxsynopsys.sys
23:24:31.0444 0x09b0 ufxsynopsys - ok
23:24:31.0506 0x09b0 [ 8578F83EC5175920F2D8586FFF9DCE47, 049A16AC87F93E761150C8286633FFCA62EE85F5645DDE77D36BD0EB6481FF83 ] UI0Detect C:\WINDOWS\system32\UI0Detect.exe
23:24:31.0569 0x09b0 UI0Detect - ok
23:24:31.0600 0x09b0 [ DC460AAA18CA2342FBBFB2DF9B044472, 14D45E059C596AE97506D26705F248CA1C2269160B31A60341060E8A93146CBD ] umbus C:\WINDOWS\System32\drivers\umbus.sys
23:24:31.0647 0x09b0 umbus - ok
23:24:31.0678 0x09b0 [ C3CF0377917ECE6D65D7623E1E61568F, 4909695E04CBC86BFCFFBC15F332C367521054B7B4D3C141C7CA6B2E40E090B9 ] UmPass C:\WINDOWS\System32\drivers\umpass.sys
23:24:31.0725 0x09b0 UmPass - ok
23:24:31.0772 0x09b0 [ 640CF093C1CF16D5FD317616CA348F31, BEC34D1AACA83BF5A84CE01F6A668E3CA5A33C56A446DC42EFFF7C43D22E1AE6 ] UmRdpService C:\WINDOWS\System32\umrdp.dll
23:24:31.0850 0x09b0 UmRdpService - ok
23:24:31.0928 0x09b0 [ B8272BB8D4982C496FDC704809C38E02, F93855D932FB1DBBCC86E82C0FE0DC9ECF93BBD629D2CA9D0BE7E075E114B7FF ] UnistoreSvc C:\WINDOWS\System32\unistore.dll
23:24:32.0084 0x09b0 UnistoreSvc - ok
23:24:32.0256 0x09b0 [ 765F2DD351BA064F657751D8D75E58C0, 954834FF6F05E065C2BE6CEC22136A0399026BFF9D91BE859E8E047C3ED8267F ] UNS C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
23:24:32.0350 0x09b0 UNS - ok
23:24:32.0428 0x09b0 [ 6CDA3536F6BAB7896A57EAB7DC07F379, 8FBE6457ECD1ABB518D9800EBA8A017774FFAA8EABD2EDC0825181A12FE9AEF6 ] upnphost C:\WINDOWS\System32\upnphost.dll
23:24:32.0490 0x09b0 upnphost - ok
23:24:32.0537 0x09b0 [ 6B46FC140C9AF68E6E7697D66D59CB4D, F018B4784D65F1A8140A6EA69C35D6A7ECE01738694052FD54AFD2B81A8F2FF8 ] UrsChipidea C:\WINDOWS\System32\drivers\urschipidea.sys
23:24:32.0553 0x09b0 UrsChipidea - ok
23:24:32.0584 0x09b0 [ B4402E7F0923F660270442CE76877ABE, 1C2DD26EAB71F75EA576E8DAABAF71FD7DC3DF807CF025617C774CEF33C0B718 ] UrsCx01000 C:\WINDOWS\system32\drivers\urscx01000.sys
23:24:32.0615 0x09b0 UrsCx01000 - ok
23:24:32.0631 0x09b0 [ 9DD431F1B94789CFB527E5D19261F124, 8F5A249A97C5B14B282E3147DD21951D2AD34B651E762814C12F4C26D74EC70C ] UrsSynopsys C:\WINDOWS\System32\drivers\urssynopsys.sys
23:24:32.0662 0x09b0 UrsSynopsys - ok
23:24:32.0678 0x09b0 [ C87E32B90F085970D9637FBAD45EF6FE, C180EACD2EE479277DA5DBF39E43B428BD7945141B2451CB3946B0C1E495E76F ] usbccgp C:\WINDOWS\System32\drivers\usbccgp.sys
23:24:32.0709 0x09b0 usbccgp - ok
23:24:32.0756 0x09b0 [ 0B663856474AC41924D9E9112203858F, 9E09F2A6279B48CAC09F8C7AA1F1BE02864D540C2ED1460CBA9FABCF0A546A1E ] usbcir C:\WINDOWS\System32\drivers\usbcir.sys
23:24:32.0787 0x09b0 usbcir - ok
23:24:32.0850 0x09b0 [ F83D2250256203AC5DA5E8601C1AFDD7, AC0D90E2DB3051798B9D287CF3D0E92FED4000822E65A82775A29CF896B76F04 ] usbehci C:\WINDOWS\System32\drivers\usbehci.sys
23:24:32.0865 0x09b0 usbehci - ok
23:24:32.0897 0x09b0 [ 7FFD26742321919590ED77FCA556D65F, F7FAB63C36F8519F5A7B9091C507F3CB580C390322FAF9155CCE7F66C965B968 ] usbhub C:\WINDOWS\System32\drivers\usbhub.sys
23:24:32.0944 0x09b0 usbhub - ok
23:24:32.0990 0x09b0 [ 7A749B2863B5561BE34B39E8E249AD8F, E5B67DFAF5407007FD0CC408D6B4BA19DF59584819FC715E9F9E0FBF3EA00AAB ] USBHUB3 C:\WINDOWS\System32\drivers\UsbHub3.sys
23:24:33.0037 0x09b0 USBHUB3 - ok
23:24:33.0069 0x09b0 [ D2109F1F4FEBF1DAC415CDC5DE876479, C8A871EBD0E5EF004BA622A73DAC36C03608CD317FDCD0A6A98608DF4CC10D55 ] usbohci C:\WINDOWS\System32\drivers\usbohci.sys
23:24:33.0131 0x09b0 usbohci - ok
23:24:33.0162 0x09b0 [ 29C9572F2D061CFC3C0BD48A3163E343, 2527DCC9E6D421F5DC40051C787A5270EB077746785465C9AA2A2AEEF47307D5 ] usbprint C:\WINDOWS\System32\drivers\usbprint.sys
23:24:33.0209 0x09b0 usbprint - ok
23:24:33.0225 0x09b0 [ 429477D6DEF3321FF7D3EF23CAAADA00, BB7D2AFE99736AAFFA8B0B2DABF7D6A6D5CB9563B1DE6A7E86CE7DC9D27F31C0 ] usbser C:\WINDOWS\System32\drivers\usbser.sys
23:24:33.0272 0x09b0 usbser - ok
23:24:33.0319 0x09b0 [ 0CC16F7B91C57AE9A4E44425A295FDAA, 7CEE11955E5742DA390601F565412C14A7481B8747C495CCD246696C56B426DC ] USBSTOR C:\WINDOWS\System32\drivers\USBSTOR.SYS
23:24:33.0334 0x09b0 USBSTOR - ok
23:24:33.0381 0x09b0 [ C917D09064CDBD18F75ADC9B2C48F847, A7F6223346CCD7E84186CD0C0715014F8E3A4398298925A43290224678620D23 ] usbuhci C:\WINDOWS\System32\drivers\usbuhci.sys
23:24:33.0412 0x09b0 usbuhci - ok
23:24:33.0444 0x09b0 [ 95BCCEFBC40D06484CF16144FE79B8A5, 8ABA73C5FFEDD319FB96B807AD08716698E557522478DF1A2C5D662675636AE0 ] USBXHCI C:\WINDOWS\System32\drivers\USBXHCI.SYS
23:24:33.0475 0x09b0 USBXHCI - ok
23:24:33.0584 0x09b0 [ 4CC81AB9D380A6264FF4C0C1512CF965, 76C33053D1C9155B0F3F8392FF982AD4EABEE2BBBEE89EA41DBFE8E436973EB0 ] UserDataSvc C:\WINDOWS\System32\userdataservice.dll
23:24:33.0725 0x09b0 UserDataSvc - ok
23:24:33.0803 0x09b0 [ AA24C61D88E36BA1144072227922173D, 2EBBC827E740F72EA2E75745E585378189BC0DEE91CACD7FA31BDBC5EFCF8733 ] UserManager C:\WINDOWS\System32\usermgr.dll
23:24:33.0944 0x09b0 UserManager - ok
23:24:34.0022 0x09b0 [ EBF9E40845362DBE2AD0DB3077269488, A6363006350D097F95B03A2F44E1D3FBD3BC40048BE57C715CD7CBC22D1EE70B ] UsoSvc C:\WINDOWS\system32\usocore.dll
23:24:34.0115 0x09b0 UsoSvc - ok
23:24:34.0131 0x09b0 [ 6F8E95716C1A27FF2FE96D30B147F1C1, 9403E9FE8B13EE294CFBBD96649BBD54CF723CF5872E3E03DA4380379D677983 ] VaultSvc C:\WINDOWS\system32\lsass.exe
23:24:34.0162 0x09b0 VaultSvc - ok
23:24:34.0162 0x09b0 [ 0CBDE344FB48E42D78E29469F202ADBC, A1C3FBA5409DD3BBEAF1D3CE2583D6C8A621C0E4F534155EC540AFD67BC9E8CA ] vdrvroot C:\WINDOWS\system32\drivers\vdrvroot.sys
23:24:34.0194 0x09b0 vdrvroot - ok
23:24:34.0256 0x09b0 [ 0783EDE1FA94649ED7F3CEF6A734041A, 1A13A613EF6B67459031C7994FFC6F32F73E02E0F123A171618E4F011C635684 ] vds C:\WINDOWS\System32\vds.exe
23:24:34.0365 0x09b0 vds - ok
23:24:34.0381 0x09b0 [ 723195568C8755CAD57F7933C5F2C5C2, 5C403799F67223605F825BC16D217C1EF5E1A0DDF00AC6380FE8976339B67D9B ] VerifierExt C:\WINDOWS\system32\drivers\VerifierExt.sys
23:24:34.0412 0x09b0 VerifierExt - ok
23:24:34.0490 0x09b0 [ 3BB8D153A9A514EC9FFCB586251A1925, 5E4B46511F9791699826DC63B35528544347166BDE9981FB93F1F7F2A09599C7 ] vhdmp C:\WINDOWS\System32\drivers\vhdmp.sys
23:24:34.0537 0x09b0 vhdmp - ok
23:24:34.0584 0x09b0 [ 7929228F0E8B0C2FA0495A17A4FC27F6, 1F1667B10A96B1D85ED165F62A5C0EF28C37F828B8280EA08BFCC1BAC03F2C90 ] vhf C:\WINDOWS\System32\drivers\vhf.sys
23:24:34.0616 0x09b0 vhf - ok
23:24:34.0631 0x09b0 [ AEE432ED868831B1F068E373598F6D93, BAE91F47B0CB94B826CA010B490AD924D7B715911DF3FCE62F9165F3B571105C ] vmbus C:\WINDOWS\system32\drivers\vmbus.sys
23:24:34.0662 0x09b0 vmbus - ok
23:24:34.0678 0x09b0 [ 9444B23FC694B5F90F21B0FC7F10D8DD, 86F92856F5C985DD8E5993B51E85E1F47EF8C9B2FB37468998C94266963BB4BD ] VMBusHID C:\WINDOWS\System32\drivers\VMBusHID.sys
23:24:34.0741 0x09b0 VMBusHID - ok
23:24:34.0756 0x09b0 [ 4D0287F566B36536DD812A54C015FC4A, 01D6508CA59CF04A47902B1F7C202FD14A81240E0B447588D919DD1072B040CF ] vmgid C:\WINDOWS\System32\drivers\vmgid.sys
23:24:34.0803 0x09b0 vmgid - ok
23:24:34.0865 0x09b0 [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmicguestinterface C:\WINDOWS\System32\icsvc.dll
23:24:34.0990 0x09b0 vmicguestinterface - ok
23:24:35.0006 0x09b0 [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmicheartbeat C:\WINDOWS\System32\icsvc.dll
23:24:35.0053 0x09b0 vmicheartbeat - ok
23:24:35.0069 0x09b0 [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmickvpexchange C:\WINDOWS\System32\icsvc.dll
23:24:35.0115 0x09b0 vmickvpexchange - ok
23:24:35.0147 0x09b0 [ 0F621B52259D88A719AA20C6D04E3D72, 80B0528CCDE6E1B6F092787E1C0769C649698B196602859A5855134F0ECCBAE5 ] vmicrdv C:\WINDOWS\System32\icsvcext.dll
23:24:35.0240 0x09b0 vmicrdv - ok
23:24:35.0287 0x09b0 [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmicshutdown C:\WINDOWS\System32\icsvc.dll
23:24:35.0319 0x09b0 vmicshutdown - ok
23:24:35.0334 0x09b0 [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmictimesync C:\WINDOWS\System32\icsvc.dll
23:24:35.0381 0x09b0 vmictimesync - ok
23:24:35.0397 0x09b0 [ 704609D80666FCB1DAE91260CF2CBB20, 0764DA123DA3FE8543B9205DDF17B0621E6A0F0DF95E8C3D177FD3FAED516119 ] vmicvmsession C:\WINDOWS\System32\icsvc.dll
23:24:35.0444 0x09b0 vmicvmsession - ok
23:24:35.0475 0x09b0 [ 0F621B52259D88A719AA20C6D04E3D72, 80B0528CCDE6E1B6F092787E1C0769C649698B196602859A5855134F0ECCBAE5 ] vmicvss C:\WINDOWS\System32\icsvcext.dll
23:24:35.0506 0x09b0 vmicvss - ok
23:24:35.0553 0x09b0 [ 29075915F9BDC3437F8BED71C067D399, 2C7718080C11DFDD4C9A2085537F78F5633369B4A27D9C64168F0249594A4AA2 ] volmgr C:\WINDOWS\system32\drivers\volmgr.sys
23:24:35.0584 0x09b0 volmgr - ok
23:24:35.0616 0x09b0 [ 6BDB6CE6D2D9E3D3F28F1C97E12B62E2, 5E77D7AF858D7B90FF395F39B86D6F96413D1DDEA28BC9FB40C5524A4DF6DAD0 ] volmgrx C:\WINDOWS\system32\drivers\volmgrx.sys
23:24:35.0662 0x09b0 volmgrx - ok
23:24:35.0678 0x09b0 [ BF2546583BB75F01DDA60A7921DFB230, 579BD0BC55F4F03CD8D1FCDAC3975A1649C688820F2F7FC1AD354132D9E3BEE9 ] volsnap C:\WINDOWS\system32\drivers\volsnap.sys
23:24:35.0709 0x09b0 volsnap - ok
23:24:35.0725 0x09b0 [ AC2E20A74D09D24485BE8396CE04F07B, 23FCE8BEE01B89E5CDCA536D75DBA6DCE3E92E13178A66836CEB7829310A89D1 ] volume C:\WINDOWS\system32\drivers\volume.sys
23:24:35.0756 0x09b0 volume - ok
23:24:35.0787 0x09b0 [ 92F6E3E6D3F1795263EB34B37F74AEF7, 33AB1ECCA1216AF1995E1DB4F11E48156FF62391D7C176C8A4CC1037B9CB3A27 ] vpci C:\WINDOWS\System32\drivers\vpci.sys
23:24:35.0803 0x09b0 vpci - ok
23:24:35.0850 0x09b0 [ FD9BCB8920973CEAD4D49DC7A6D8A618, 34AB4A485FB40DF737600006D8323BE927FB0BDA2BC170F4C123BE775EAE7CC8 ] vsmraid C:\WINDOWS\system32\drivers\vsmraid.sys
23:24:35.0881 0x09b0 vsmraid - ok
23:24:35.0991 0x09b0 [ 01FFD5AF533F2CFDF26DDDC9313731C1, BFF0F2E57CD2358AC8F519F6F5692A46D97EC4E9B763D47101CEF31712FD4738 ] VSS C:\WINDOWS\system32\vssvc.exe
23:24:36.0100 0x09b0 VSS - ok
23:24:36.0116 0x09b0 [ 0C111F220798CCE80484026E06822379, B98A5E44D3ABA67E6DE99E18BF3C2C606923E6269E262665C721F672ACBBED2A ] VSTXRAID C:\WINDOWS\system32\drivers\vstxraid.sys
23:24:36.0162 0x09b0 VSTXRAID - ok
23:24:36.0209 0x09b0 [ 607639716E9DB1CEF4E18B5B229293B4, 1D997177093F907EFE8A04AD10443BB9C355C0D7657DBD449E7EE7FCABC3ECBC ] vwifibus C:\WINDOWS\System32\drivers\vwifibus.sys
23:24:36.0272 0x09b0 vwifibus - ok
23:24:36.0303 0x09b0 [ B1ED64E628763148BF84FBE23F2AD711, 6182A39675E6049BC3DD353694720795A8E3D0331509AA8ABA4883D5C569AD5E ] vwififlt C:\WINDOWS\system32\drivers\vwififlt.sys
23:24:36.0334 0x09b0 vwififlt - ok
23:24:36.0350 0x09b0 [ 59920894C38A827091A06AF559834E47, 8B40FE0B1BA3B2A79BFF70803D039DB921F85C978724722E5E5AFF188FA75471 ] vwifimp C:\WINDOWS\System32\drivers\vwifimp.sys
23:24:36.0381 0x09b0 vwifimp - ok
23:24:36.0444 0x09b0 [ 76C1CC611352499326001F25A3ED15F8, 228BFA8A01BB1B3868576D509A2EA6F3D37FEDC8F12D4DC4E0A84CE926C6D1B1 ] W32Time C:\WINDOWS\system32\w32time.dll
23:24:36.0569 0x09b0 W32Time - ok
23:24:36.0741 0x09b0 [ 4053FB949F48647A327BC18DFEEA4374, 52511C35854A673ADCD9084FEF9BC6A339BCA0290374B81140A371D67B13A8FB ] w3logsvc C:\WINDOWS\system32\inetsrv\w3logsvc.dll
23:24:36.0803 0x09b0 w3logsvc - ok
23:24:36.0866 0x09b0 [ 85461F6AD65CCE84A7BC6D9F2A5861B3, 0C9A662F1BADF429B1DF62E91F4626DE996F84945D3A42D26A0FA09EC15CC9D7 ] W3SVC C:\WINDOWS\system32\inetsrv\iisw3adm.dll
23:24:36.0928 0x09b0 W3SVC - ok
23:24:36.0944 0x09b0 [ 55D00B785A7587F4263D125817871283, B92400B229099C1E243F2B149881A1423A2E9C8CA2D77D868B9B923BFDEC7FF2 ] WacomPen C:\WINDOWS\System32\drivers\wacompen.sys
23:24:36.0975 0x09b0 WacomPen - ok
23:24:37.0037 0x09b0 [ 1483BE4D0135C378CB61D3CD73AB3E03, B7309C9E4F370860C507BF52D17234CDF4A7FAE95D2D822714E07EF5DEC0249B ] WalletService C:\WINDOWS\system32\WalletService.dll
23:24:37.0147 0x09b0 WalletService - ok
23:24:37.0178 0x09b0 [ CEF3D306C09BEC1A800E9B4A06F859F6, 75D21F97E9F94FA97024F945AF512FEC94F88DD8073F3FAD92A6E0A9FDC586DB ] wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
23:24:37.0209 0x09b0 wanarp - ok
23:24:37.0225 0x09b0 [ CEF3D306C09BEC1A800E9B4A06F859F6, 75D21F97E9F94FA97024F945AF512FEC94F88DD8073F3FAD92A6E0A9FDC586DB ] wanarpv6 C:\WINDOWS\system32\DRIVERS\wanarp.sys
23:24:37.0256 0x09b0 wanarpv6 - ok
23:24:37.0303 0x09b0 [ 85461F6AD65CCE84A7BC6D9F2A5861B3, 0C9A662F1BADF429B1DF62E91F4626DE996F84945D3A42D26A0FA09EC15CC9D7 ] WAS C:\WINDOWS\system32\inetsrv\iisw3adm.dll
23:24:37.0350 0x09b0 WAS - ok
23:24:37.0444 0x09b0 [ 30B8286F8FE1AE90A583100D45E02247, 3C86A4A5E21F9A1267EA231B20914E0A162BA4C25FE8917AD3AB6D504DA5BE0C ] wbengine C:\WINDOWS\system32\wbengine.exe
23:24:37.0631 0x09b0 wbengine - ok
23:24:37.0709 0x09b0 [ 8C521D161445C3E1F38A494E7649E70D, F00990B2FE1FB52C74A2057E6480C5EBF2BDBC32955CC03C6B63360F20A49A18 ] WbioSrvc C:\WINDOWS\System32\wbiosrvc.dll
23:24:37.0850 0x09b0 WbioSrvc - ok
23:24:37.0881 0x09b0 [ E330144B97D493AA886000DCAAA8DAF5, ED86F46F5A76FD8F06CA98BD61B174ADB9AD4B065394356872708DF8B614E4F9 ] wcifs C:\WINDOWS\system32\drivers\wcifs.sys
23:24:37.0912 0x09b0 wcifs - ok
23:24:37.0975 0x09b0 [ 32960EA9CF836D7DD77767DCB68CE230, 679446A4FAB0331C181D2716CAEA225267C6164BB9867E360C5B3D6AB1083195 ] Wcmsvc C:\WINDOWS\System32\wcmsvc.dll
23:24:38.0069 0x09b0 Wcmsvc - ok
23:24:38.0116 0x09b0 [ D50645235A507B0546B1B5CF7D0B8849, 19F5FE10C953B8EE8EEDA9A9F7F2E97AA193BB085E7FC364066686089ADD1C9F ] wcncsvc C:\WINDOWS\System32\wcncsvc.dll
23:24:38.0194 0x09b0 wcncsvc - ok
23:24:38.0209 0x09b0 [ AEA1093B751339267D8C8C1EF3D669CF, 8F3325E7FB16BD856A0593C36F2E3E018909038C52CD5F92E116E0C1366F31CB ] wcnfs C:\WINDOWS\system32\drivers\wcnfs.sys
23:24:38.0272 0x09b0 wcnfs - ok
23:24:38.0303 0x09b0 [ D520B1B849B6D4D707AB31722B952C2D, 149BABB7BD63C1F212ADD9306C84FFB2A5CE6DC435BD3213EAB787E9B222C61F ] WdBoot C:\WINDOWS\system32\drivers\WdBoot.sys
23:24:38.0334 0x09b0 WdBoot - ok
23:24:38.0366 0x09b0 [ A556768CC1FA4F36022BEE2F0EDE2566, 3A4BC9DE614F43CD94FA354A565C66B2E1E36C0608D84C6288010B97B9D811AA ] WDC_SAM C:\WINDOWS\System32\drivers\wdcsam64.sys
23:24:38.0397 0x09b0 WDC_SAM - ok
23:24:38.0475 0x09b0 [ 5030C76047D756263093A47B82970868, E772F15973F6DE36851DD230F1F4190746CD81CA1E7284DC074711C4BF45CAF0 ] Wdf01000 C:\WINDOWS\system32\drivers\Wdf01000.sys
23:24:38.0522 0x09b0 Wdf01000 - ok
23:24:38.0569 0x09b0 [ 29FF9199EDEB4F5470BB134D1A2563D2, 94713F98A6EA6042203D5DD0DE6758F5F0F331F7D4BB05E91EF20CEEEBD6780F ] WdFilter C:\WINDOWS\system32\drivers\WdFilter.sys
23:24:38.0600 0x09b0 WdFilter - ok
23:24:38.0647 0x09b0 [ E7A7E8803E66B7CCED95D327A4DBC135, 401ECD953D4014A95C9022822D9ACEC1A68C917281DBA2365503A473FC6D9507 ] WdiServiceHost C:\WINDOWS\system32\wdi.dll
23:24:38.0709 0x09b0 WdiServiceHost - ok
23:24:38.0725 0x09b0 [ E7A7E8803E66B7CCED95D327A4DBC135, 401ECD953D4014A95C9022822D9ACEC1A68C917281DBA2365503A473FC6D9507 ] WdiSystemHost C:\WINDOWS\system32\wdi.dll
23:24:38.0756 0x09b0 WdiSystemHost - ok
23:24:38.0819 0x09b0 [ 8CB606A3057355FD5A9DBDD1A0AC94EF, 6DD0B4A2270633086EBB569A00B87430EE6EF173525E341404B15845B57BE86D ] wdiwifi C:\WINDOWS\system32\DRIVERS\wdiwifi.sys
23:24:38.0912 0x09b0 wdiwifi - ok
23:24:38.0959 0x09b0 [ 17CF416CFF408190F5A4CBD79AB12E55, E376C8865C7EA633AE20D2CF940E4C7584AC783BAAF7941780FB6C4C84802F33 ] WdNisDrv C:\WINDOWS\system32\Drivers\WdNisDrv.sys
23:24:38.0991 0x09b0 WdNisDrv - ok
23:24:39.0022 0x09b0 WdNisSvc - ok
23:24:39.0084 0x09b0 [ 3570C4E14F85CE0B537D126727ACA91C, A474C9E6B6E4E5945C63367C1D3D24D4782C4A4FEB00FAE15DFED099D8283078 ] WebClient C:\WINDOWS\System32\webclnt.dll
23:24:39.0147 0x09b0 WebClient - ok
23:24:39.0162 0x09b0 [ 1785F9C96A0BDEC1F6E0C79EF412F342, D6D4EDA69457BEDDA69C2F60FC4C2FAC97D46CD8E9C1804CCD68F169383583E3 ] Wecsvc C:\WINDOWS\system32\wecsvc.dll
23:24:39.0287 0x09b0 Wecsvc - ok
23:24:39.0303 0x09b0 [ B9175D63527B05131F2FA504CF0265F2, 1E43A17788F1B6A29E2889C81E0BE100D64BD3A9DEE7C154D9581F01D2D7D05F ] WEPHOSTSVC C:\WINDOWS\system32\wephostsvc.dll
23:24:39.0366 0x09b0 WEPHOSTSVC - ok
23:24:39.0413 0x09b0 [ 5C58EC0C9D4DE04DCDE56F6DCEA62080, 8ED386EDF4C39C339CE0BB2AC7E199C38705E5A6B3F56A4987B9A8ABD19BB59F ] wercplsupport C:\WINDOWS\System32\wercplsupport.dll
23:24:39.0506 0x09b0 wercplsupport - ok
23:24:39.0569 0x09b0 [ F899B355CC95AF26AB36E84E8A0DD685, C400F2F80FFF6473FEF066943C4A2AFF0FFE988A4F755757A2E5005C2A10DAD8 ] WerSvc C:\WINDOWS\System32\WerSvc.dll
23:24:39.0647 0x09b0 WerSvc - ok
23:24:39.0678 0x09b0 [ E1785942AC51FEE6826CDF02075C5AA9, 56FE7017684086F4F9C3A2C0D3AC00369BA0938BA3987EEBEE9A75B8E3CA0AE1 ] WFPLWFS C:\WINDOWS\system32\drivers\wfplwfs.sys
23:24:39.0694 0x09b0 WFPLWFS - ok
23:24:39.0741 0x09b0 [ B154618505A6A9026EFA6AB8C4123BF1, 713648D71AA027B4472E7E75B942630DBE7383687984B02A5E99C9E4192C95EB ] WiaRpc C:\WINDOWS\System32\wiarpc.dll
23:24:39.0803 0x09b0 WiaRpc - ok
23:24:39.0850 0x09b0 [ 0CF79A0EACFFBB75A50A469A27696D02, E112BF7B5A8D0B0AD2EA0E7B9FD4E8CFEC9371C8E94A60248292D688AFE715C4 ] WIMMount C:\WINDOWS\system32\drivers\wimmount.sys
23:24:39.0866 0x09b0 WIMMount - ok
23:24:39.0881 0x09b0 WinDefend - ok
23:24:39.0913 0x09b0 [ 0DE131733317EB4BE67028366B0CAAC6, AC7DADBF03A3752B4D33CA19F03DBCEDD6F56893C2DA25C98B0AB07063D990E3 ] WindowsTrustedRT C:\WINDOWS\system32\drivers\WindowsTrustedRT.sys
23:24:39.0944 0x09b0 WindowsTrustedRT - ok
23:24:39.0975 0x09b0 [ 92EB5D38BDF10C790450F3E46BF93A0E, 0FC027398DBD43EDC1F7D703C0B6DB20294DF34E67C9288442039B1A5663CE1B ] WindowsTrustedRTProxy C:\WINDOWS\system32\drivers\WindowsTrustedRTProxy.sys
23:24:40.0006 0x09b0 WindowsTrustedRTProxy - ok
23:24:40.0053 0x09b0 [ C2A3B07F0118D61086C99BDCBAB6A6A3, 04D646BEF1C6F427503C594F0ECBB33140C3991A3A7AFB66B2C9581E358F9FD2 ] WinHttpAutoProxySvc C:\WINDOWS\system32\winhttp.dll
23:24:40.0147 0x09b0 WinHttpAutoProxySvc - ok
23:24:40.0178 0x09b0 [ 66C365B542195C1F6E2FF4A7D8F3827C, FB43A64453283D1B236AFF73F010B8F6106B971047313B9B4EBE925C4DD325A2 ] WinI2C-DDC C:\WINDOWS\system32\drivers\DDCDrv.sys
23:24:40.0194 0x09b0 WinI2C-DDC - ok
23:24:40.0241 0x09b0 [ F95DE20312ACCA7761446DE152BD1F7C, F6C5ACA500C2182437F4A7402BD81C3A2B77C0BBD78BA31FB574DC1997FCBFE6 ] WinMad C:\WINDOWS\System32\drivers\winmad.sys
23:24:40.0272 0x09b0 WinMad - ok
23:24:40.0366 0x09b0 [ CD49CA8E3280ACEEC5ECF431A59F5EFD, 75F48EFC6DEE9E06B490703EE47602AFDEA51505285B02D2CF884601E71857CC ] Winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
23:24:40.0475 0x09b0 Winmgmt - ok
23:24:40.0616 0x09b0 [ B8C0D620219ECAA23A2AC841EAF454D1, FB527C4D36929D7FAE2A837727C557B7823A72069EBCAB7D16C49E8B21E8D952 ] WinRM C:\WINDOWS\system32\WsmSvc.dll
23:24:40.0866 0x09b0 WinRM - ok
23:24:40.0928 0x09b0 [ 4EFB346BFDAEEB29316AA52BBB9852B1, 4BC5554F44BD9549D0A929D77BD410FA3EB502A7D0170303D369268672505494 ] WINUSB C:\WINDOWS\System32\drivers\WinUSB.SYS
23:24:40.0975 0x09b0 WINUSB - ok
23:24:41.0006 0x09b0 [ 8B9AFF5F08E66A6F1F1063DEC9457FB6, 98F2AF6988D125521FD34CAA48B9652922F0C8ECFAE9B0C1DF4B3CE6B9CF500F ] WinVerbs C:\WINDOWS\System32\drivers\winverbs.sys
23:24:41.0037 0x09b0 WinVerbs - ok
23:24:41.0100 0x09b0 [ ECD999D8412A3473C26B118F89DB9908, 5FB9B93E4B5482CCFF01D805DFA386FD8D3441BC81E7BD5DF89EE3078FD724F3 ] wisvc C:\WINDOWS\system32\flightsettings.dll
23:24:41.0225 0x09b0 wisvc - ok
23:24:41.0334 0x09b0 [ 7671078AEF4C0203B053A9642C401FF7, BBFADA89CD31F20ADDBFAFAD2E492C72D82BF2F8B823BB6773F04D229B62534C ] WlanSvc C:\WINDOWS\System32\wlansvc.dll
23:24:41.0522 0x09b0 WlanSvc - ok
23:24:41.0631 0x09b0 [ E15711970C5BE05E8D70B294D0AFF621, 30670CFC4DA57B4A3E0E895E4111100D847BB8041A258A303524CD96DC566482 ] wlidsvc C:\WINDOWS\system32\wlidsvc.dll
23:24:41.0803 0x09b0 wlidsvc - ok
23:24:41.0850 0x09b0 [ 6F4F4F5A007D1710BD76FB311DA97C07, FC0FEA4364F6BA4E31DBC82735D09D429CA3BE9AFCFF5D5E1263D8B27FC2CE3E ] WmiAcpi C:\WINDOWS\System32\drivers\wmiacpi.sys
23:24:41.0897 0x09b0 WmiAcpi - ok
23:24:41.0928 0x09b0 [ 3CDDFF6CAD962C5EF1C52FD667C358B6, F6F09145E9461EB17172988D26749FCF36920A1A683459334D04A6D072B31A92 ] wmiApSrv C:\WINDOWS\system32\wbem\WmiApSrv.exe
23:24:42.0006 0x09b0 wmiApSrv - ok
23:24:42.0053 0x09b0 WMPNetworkSvc - ok
23:24:42.0100 0x09b0 [ 43C8D087B31C592163B33A4BDA540E40, 3A6C4E5E56931B29321DCC723585F2F0E804EF4DCDEAB2A8687F30FC3AE70E43 ] Wof C:\WINDOWS\system32\drivers\Wof.sys
23:24:42.0131 0x09b0 Wof - ok
23:24:42.0241 0x09b0 [ 909CB4BBF7B08E78C363000E09E79A6F, 217205D1B5EE03274AFF9405AED6D2A5665CBA4C3876E84B53DA44920CDF9CB1 ] workfolderssvc C:\WINDOWS\system32\workfolderssvc.dll
23:24:42.0444 0x09b0 workfolderssvc - ok
23:24:42.0491 0x09b0 [ F02930EB91596042F2221397D60AFCE5, 10E2AB0993B67CBAA9E11C68280608965064EC9F7E0C570F5B453FACADB8AB5D ] WPDBusEnum C:\WINDOWS\system32\wpdbusenum.dll
23:24:42.0600 0x09b0 WPDBusEnum - ok
23:24:42.0631 0x09b0 [ 75A9284F01FE7CB1A7D5EAE5C1EB4F33, 390EF23AEA06D8711555F7979FF8BE0620B53C1A551638C4EC6FB7C6678965B3 ] WpdUpFltr C:\WINDOWS\system32\drivers\WpdUpFltr.sys
23:24:42.0663 0x09b0 WpdUpFltr - ok
23:24:42.0709 0x09b0 [ 60E2EB3E7B7F15C25E02462159F90707, D8344B529EEC0D4922CAC3E6897CC9F191ACF1376017BE38ED6BF6019F1ED181 ] WpnService C:\WINDOWS\system32\WpnService.dll
23:24:42.0819 0x09b0 WpnService - ok
23:24:42.0866 0x09b0 [ C7C91FB86A3C6CD7619725A88ED1884C, 132C43C518F37BF303D768BD5FB0AB835F693C43FE693937D804A34E940D770F ] WpnUserService C:\WINDOWS\System32\WpnUserService.dll
23:24:42.0928 0x09b0 WpnUserService - ok
23:24:42.0991 0x09b0 [ 36D7B73ADC3E10607ED6EC874AFB5D1E, 1737B3E4D2CA76BB27903BF460E4960E6A0BC32D35069AC7C5E4B07F625F3282 ] ws2ifsl C:\WINDOWS\system32\drivers\ws2ifsl.sys
23:24:43.0084 0x09b0 ws2ifsl - ok
23:24:43.0131 0x09b0 [ 9A0E0B836413EB0BC885532D2A5389D6, AFEE4A0578D5581E4D72999A33C0DEA6253BD891F611AFF9AFDE4160A60105F3 ] wscsvc C:\WINDOWS\System32\wscsvc.dll
23:24:43.0225 0x09b0 wscsvc - ok
23:24:43.0256 0x09b0 [ 696EC2EAA2A42A137CCBB9A84D6917C0, 424089F4F373962AF8357C5D4D43F35948989BE3F58EAD3690F565F4C1BBC66F ] WSDPrintDevice C:\WINDOWS\System32\drivers\WSDPrint.sys
23:24:43.0303 0x09b0 WSDPrintDevice - ok
23:24:43.0303 0x09b0 WSearch - ok
23:24:43.0444 0x09b0 [ DDB7E452A99E0E5244105C6D2CF4BC9E, 1364B03AFFD20D339A2EBA303575BCCBC2D122D89810B1E3593CC55F93F9B79A ] wuauserv C:\WINDOWS\system32\wuaueng.dll
23:24:43.0647 0x09b0 wuauserv - ok
23:24:43.0678 0x09b0 [ AED7FE551E8672B824A56324076183EB, FFE543AAEFDEFFE6B20C244DB141A9425BDA88ED36F4870F0B70FEC433BDF0C1 ] WudfPf C:\WINDOWS\system32\drivers\WudfPf.sys
23:24:43.0725 0x09b0 WudfPf - ok
23:24:43.0772 0x09b0 [ CEFAB17FD7DFCFA515626C306262E89D, 9D2B728DDD478580987E2DB7AA4DA81D77F3362F536AC1CADED20EB6ECEBB55D ] WUDFRd C:\WINDOWS\system32\drivers\WudfRd.sys
23:24:43.0834 0x09b0 WUDFRd - ok
23:24:43.0866 0x09b0 [ 47F6450F28BAA32B2AB0D6BE00996249, C8A47D6ADF89AD613AB685C6224B9099DCEFDCD8ABCF703542AFDC356404116E ] wudfsvc C:\WINDOWS\System32\WUDFSvc.dll
23:24:43.0959 0x09b0 wudfsvc - ok
23:24:43.0991 0x09b0 [ CEFAB17FD7DFCFA515626C306262E89D, 9D2B728DDD478580987E2DB7AA4DA81D77F3362F536AC1CADED20EB6ECEBB55D ] WUDFWpdFs C:\WINDOWS\system32\DRIVERS\WUDFRd.sys
23:24:44.0038 0x09b0 WUDFWpdFs - ok
23:24:44.0116 0x09b0 [ E231728BC515A4B85543AF74A1FEDFCB, 5D250D7D789B5BB56BFA2E7A109BCEB3686B7636C54D89F4E9804101D145C955 ] WwanSvc C:\WINDOWS\System32\wwansvc.dll
23:24:44.0319 0x09b0 WwanSvc - ok
23:24:44.0381 0x09b0 [ F39D6915451D9226AC9A5E7AE70E2ABA, E05D678DC0423A4D0EB8B3BB5A942721BB4F3B0BED22748252DBD6053FE956F1 ] XblAuthManager C:\WINDOWS\System32\XblAuthManager.dll
23:24:44.0522 0x09b0 XblAuthManager - ok
23:24:44.0616 0x09b0 [ 765FF96467A26C4C03281ECA426EC2D9, 2526B03C518D72F429C29BA4D4F11707AF277BF71520A1A92238A932950AE161 ] XblGameSave C:\WINDOWS\System32\XblGameSave.dll
23:24:44.0756 0x09b0 XblGameSave - ok
23:24:44.0803 0x09b0 [ 9627BBAA50878F6833A6A7843EE3B1D9, 637566BB56501C4D11E3B6E6AC1C602D880C9D357CCE3DF1DF74EE672744F2B7 ] xboxgip C:\WINDOWS\System32\drivers\xboxgip.sys
23:24:44.0881 0x09b0 xboxgip - ok
23:24:44.0991 0x09b0 [ 335E6F2BE58523B295945C840C185B00, 94ED7E2CB212A3D55B8A2CB90CD1D02A6AF92DC0DDD487CB5B7CAC9883343460 ] XboxNetApiSvc C:\WINDOWS\system32\XboxNetApiSvc.dll
23:24:45.0100 0x09b0 XboxNetApiSvc - ok
23:24:45.0147 0x09b0 [ 63088A3361D9A308F328F11E9099DD87, E03FDB932FC57F199C8F8A8EADA338BDF7D2F9C6CB8FAB679A92B48B1E5AFE8A ] xinputhid C:\WINDOWS\System32\drivers\xinputhid.sys
23:24:45.0194 0x09b0 xinputhid - ok
23:24:45.0256 0x09b0 [ 02AD537599A11FAAF05AB85973778866, D6679EEB584934395507033334B3AD3E41D792C7C705943B32880E5E39EBD5F6 ] xrdd.exe C:\Program Files (x86)\X-Rite\Devices\Services\xrdd.exe
23:24:45.0272 0x09b0 xrdd.exe - ok
23:24:45.0272 0x09b0 ================ Scan global ===============================
23:24:45.0319 0x09b0 [ 0C710DB449712EE13ACE733695DB7780, BBC7875B38D318CE4E88979D083AC72E8993254A466A8A6882DDE9E0C3B687A3 ] C:\WINDOWS\system32\basesrv.dll
23:24:45.0397 0x09b0 [ 4C08BF958476A137C78B62B22B5F90A4, 11DDD033896C96F8F7F1A1EDD0F4E0F07AFBB3202DC8A2E5E3ADB51C4D0700D4 ] C:\WINDOWS\system32\winsrv.dll
23:24:45.0460 0x09b0 [ 1EE06E957B0B2CA52D26DA7861E160EF, 4B743A1C7010138F5F6684BBCF7CAD6FD05F49920BDD3FDB776347AA6B44AB94 ] C:\WINDOWS\system32\sxssrv.dll
23:24:45.0538 0x09b0 [ 3C69CC28665854F1AAB4B4005005FA31, 2750F5ECCD448C07E3402AA64EA625D27C6BC1D000A3FFE57C03D62428BB46C4 ] C:\WINDOWS\system32\services.exe
23:24:45.0553 0x09b0 [ Global ] - ok
23:24:45.0553 0x09b0 ================ Scan MBR ==================================
23:24:45.0569 0x09b0 [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
23:24:46.0272 0x09b0 \Device\Harddisk0\DR0 - ok
23:24:46.0272 0x09b0 ================ Scan VBR ==================================
23:24:46.0288 0x09b0 [ 430D9C9DC706DAE41C983686891E7BAB ] \Device\Harddisk0\DR0\Partition1
23:24:46.0288 0x09b0 \Device\Harddisk0\DR0\Partition1 - ok
23:24:46.0303 0x09b0 [ C6DE02232585CC4CB1345739D8EE0B94 ] \Device\Harddisk0\DR0\Partition2
23:24:46.0303 0x09b0 \Device\Harddisk0\DR0\Partition2 - ok
23:24:46.0303 0x09b0 ================ Scan generic autorun ======================
23:24:46.0350 0x09b0 [ 6A59AE2735639095CD93E58B0893914C, A1BFC257313185BD4BE63275C1B58877151C31DE3173EADE685199E9D28A23D9 ] C:\WINDOWS\system32\igfxtray.exe
23:24:46.0366 0x09b0 IgfxTray - ok
23:24:46.0397 0x09b0 [ 4341A0AE66759EDC080D92DAA0D9B341, A17D7A56627ECBE7D23E634A9E726BA2E3682A7EB75659AE68A426FF2954C717 ] C:\WINDOWS\system32\hkcmd.exe
23:24:46.0428 0x09b0 HotKeysCmds - ok
23:24:46.0491 0x09b0 [ 5451A9DA41DA19CDD467616492D4096F, 54CBA128702FFF112AE8BA4B187D00CC3ABAB68D3EB1B915193E50523D4DA73F ] C:\WINDOWS\system32\igfxpers.exe
23:24:46.0522 0x09b0 Persistence - ok
23:24:46.0897 0x09b0 [ FE6D867E7F7E200D0169224E978F6252, FB2C4A93CDAF010CE9571719D7D6B95FC69428DB2EFFB6BF0D7094EE5A19E907 ] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
23:24:47.0256 0x09b0 RtHDVCpl - ok
23:24:47.0413 0x09b0 [ 9C2BD233D74170067DB660F0AFC1CB5B, 55992BEB4EF41242F967E4E4DC5FF2FF339CB2FCB5305CDA3B9DE46E1E449605 ] C:\Program Files\Realtek\Audio\HDA\Skytel.exe
23:24:47.0506 0x09b0 Skytel - ok
23:24:47.0663 0x09b0 [ A6A21A7D544675E98C040DA18904CF50, AACB578C297C7AC9FEBDAB4AD20235E5CFF6E3F260E76E6AE18D43DC57D69672 ] C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe
23:24:47.0788 0x09b0 Malwarebytes TrayApp - ok
23:24:47.0913 0x09b0 [ D6C8E2B6D599CB54C4B490B741B775B7, 958BE4B82839B65A3BBDDB22570C395421F80E06D02417E15D5FA027BFF8AEF2 ] C:\Program Files (x86)\System Control Manager\MGSysCtrl.exe
23:24:48.0053 0x09b0 MGSysCtrl - detected UnsignedFile.Multi.Generic ( 1 )
23:24:48.0725 0x09b0 Detect skipped due to KSN trusted
23:24:48.0725 0x09b0 MGSysCtrl - ok
23:24:48.0881 0x09b0 [ 187F4C75A89E3F412322C94526320074, D78FA7EF93C8C7B4326A5B6DB04A92ADD091DF00658FA8731D07C5D3BE29ED04 ] C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe
23:24:48.0897 0x09b0 BCSSync - ok
23:24:48.0960 0x09b0 [ A7810B302294793DE88542AAE177D1B1, F0EE3684DBEB0AAAD912DC04D060976D1EAE92489E192BAE900FA0F417AD20A7 ] C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
23:24:48.0991 0x09b0 ArcSoft Connection Service - ok
23:24:49.0038 0x09b0 [ 1D0C3B6D865D4E6EA2037569F7A23BCE, 58CEB120CE7B04DC57F54A5A3FE33E1745C5D6937A0F7162F826BBC42993C4E6 ] C:\Program Files (x86)\Citrix\ICA Client\concentr.exe
23:24:49.0085 0x09b0 ConnectionCenter - ok
23:24:49.0116 0x09b0 [ 99BF4EE7FA78BBB559F19FA677A06E1C, FA663299C8DF8E87FA4DF0ECE0345A1480E8B50FFBCFE4220FFF161065A1DEB7 ] C:\Program Files (x86)\Citrix\ICA Client\redirector.exe
23:24:49.0131 0x09b0 Redirector - ok
23:24:49.0163 0x09b0 [ A64AA1C8BDE6E351683041E846CA7384, 6946B557315BCA617809A38A1499A70074C596B8BAF1C9E709C9DA2DFC468D4E ] C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe
23:24:49.0194 0x09b0 Avira SystrayStartTrigger - ok
23:24:49.0256 0x09b0 [ 1E0029B9936F42C86138EADB5C27439E, 0A57C0DF2E2995C45FB92D1229FFAA1493748F39F01FB53F9559C5AFB5C1CA13 ] C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
23:24:49.0303 0x09b0 avgnt - ok
23:24:49.0756 0x09b0 [ 1496120E3867FD75AE5D4EAD6E618E7A, 8D8A2FD43D33A3F7A177783921BB7E50FECBAEF1E09CD42BCDC851375F3294D1 ] C:\Windows\SysWOW64\OneDriveSetup.exe
23:24:50.0163 0x09b0 OneDriveSetup - ok
23:24:50.0725 0x09b0 [ 1496120E3867FD75AE5D4EAD6E618E7A, 8D8A2FD43D33A3F7A177783921BB7E50FECBAEF1E09CD42BCDC851375F3294D1 ] C:\Windows\SysWOW64\OneDriveSetup.exe
23:24:51.0006 0x09b0 OneDriveSetup - ok
23:24:51.0319 0x09b0 [ AAE92457F50F4DD74E2D502ADB9549EE, 70C8FBE410FE388D6B85334215EBE3393C16E8F8B19F5A8BA50DB6DF23196D50 ] C:\Users\Amy\AppData\Local\Microsoft\OneDrive\OneDrive.exe
23:24:51.0397 0x09b0 OneDrive - ok
23:24:51.0585 0x09b0 [ FF74D2A2E3A3615A765B5181DB18551D, C38F06705B4E3264ABA10317BF3DE6D022E9B9D5B3016B08121512E84880963C ] D:\Steam\steam.exe
23:24:51.0741 0x09b0 Steam - ok
23:24:51.0913 0x09b0 [ 11B4662A4DD118132E2648837920AF86, 7643E9CF00C0393ED4A1D294DABA84DCEB6BE696E5B520D413284BAB16CE1CD5 ] C:\Users\Amy\AppData\Roaming\Spotify\SpotifyWebHelper.exe
23:24:52.0006 0x09b0 Spotify Web Helper - ok
23:24:52.0022 0x09b0 Skype - ok
23:24:52.0381 0x09b0 [ 3F6B014280D8A98ACC323BB28CA5BCA7, 724FE1E949D57E982B50CC6FBBA8BCB524C42592A39ED60D37042CC2C2E73CAB ] C:\Program Files\CCleaner\CCleaner64.exe
23:24:52.0803 0x09b0 CCleaner Monitoring - ok
23:24:53.0256 0x09b0 [ 1496120E3867FD75AE5D4EAD6E618E7A, 8D8A2FD43D33A3F7A177783921BB7E50FECBAEF1E09CD42BCDC851375F3294D1 ] C:\Windows\SysWOW64\OneDriveSetup.exe
23:24:53.0538 0x09b0 OneDriveSetup - ok
23:24:53.0678 0x09b0 [ 2781E6EF593909A8B73FE1AD397F778A, E892D6C57F8903E20129E75A9B877690229280FD8106B5C7F96173175EA1AC4E ] C:\Program Files (x86)\Windows Mail\wab.exe
23:24:53.0772 0x09b0 WAB Migrate - ok
23:24:53.0772 0x09b0 Waiting for KSN requests completion. In queue: 252
23:24:54.0475 0x0e34 Object required for P2P: [ 3F6B014280D8A98ACC323BB28CA5BCA7 ] C:\Program Files\CCleaner\CCleaner64.exe
23:24:54.0788 0x09b0 Waiting for KSN requests completion. In queue: 2
23:24:55.0007 0x0e34 Object send P2P result: true
23:24:55.0835 0x09b0 AV detected via SS2: Avira Antivirus, C:\Program Files (x86)\Avira\Antivirus\WindowsSecurityCenter.exe ( 15.0.25.151 ), 0x41000 ( enabled : updated )
23:24:55.0866 0x09b0 AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.10.14393.187 ), 0x60100 ( disabled : updated )
23:24:55.0913 0x09b0 AV detected via SS2: Malwarebytes, C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe ( 3.0.0.138 ), 0x61000 ( enabled : updated )
23:24:55.0975 0x09b0 Win FW state via NFP2: enabled ( trusted )
23:24:56.0522 0x09b0 ============================================================
23:24:56.0522 0x09b0 Scan finished
23:24:56.0522 0x09b0 ============================================================
23:24:56.0522 0x21ec Detected object count: 0
23:24:56.0522 0x21ec Actual detected object count: 0
23:25:11.0726 0x2010 Deinitialize success
 
Prima.

Download
52186926180a1-adwcleaner_nieuw.png
AdwCleaner by Xplode.
Downloadlokatie: Dit programma absoluut naar het bureaublad downloaden of anders naar het bureaublad verplaatsen!
Opmerkingen:
  • Alle openstaande programma's en webpagina's dienen afgesloten te zijn.
AdwCleaner opstarten:
  • Windows 2000 en Windows XP: dubbelklik op adwcleaner.exe.
  • Windows Vista, Windows 7, Windows 8 en Windows 10: via rechtsklik op adwcleaner.exe en kies voor "Als Administrator uitvoeren".
AdwCleaner is opgestart:
  • Klik op de knop Scan
  • Is de scan gereed, klik dan op de knop Verwijderen
  • Klik bij AdwCleaner Afsluiting van de programma's op OK
  • Klik bij AdwCleaner Herstarten noodzakelijk op OK
AdwCleaner logbestand:
  • Nadat de PC opnieuw is opgestart, opent een logfile.
  • Ingeval het log niet opent, is dit alsnog terug te vinden in C:\AdwCleaner\AdwCleaner[R0, of 1, of 2].txt
  • Post vervolgens de inhoud van dit log in je volgende bericht.
 
Hoi Abraham,

Ik heb een paar dagen geen tijd gehad om te posten, maar had al wel gescand.

# AdwCleaner v6.044 - Logbestand aangemaakt 07/03/2017 op 10:34:04
# Bijgewerkt op 28/02/2017 door Malwarebytes
# Database : 2017-03-07.1 [Server]
# Besturingssysteem : Windows 10 Home (X64)
# Gebruikersnaam : Amy - AMY-MSI
# Gestart vanuit : C:\Users\Amy\Desktop\adwcleaner_6.044.exe
# Mode: Verwijderen
# Ondersteuning : https://www.malwarebytes.com/support



***** [ Services ] *****



***** [ Mappen ] *****

[-] Map verwijderd: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec
[-] Map verwijderd: C:\Users\Amy\AppData\Local\Geckofx


***** [ Bestanden ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Snelkoppelingen ] *****



***** [ Geplande Taken ] *****



***** [ Register ] *****

[-] Sleutel verwijderd: HKLM\SOFTWARE\Classes\Applications\iLividSetupV1[1].exe
[-] Sleutel verwijderd: HKLM\SOFTWARE\Classes\AppID\{7E8A36EA-2501-4ED3-A3C8-CFA9143FB169}
[-] Sleutel verwijderd: HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}
[-] Sleutel verwijderd: HKLM\SOFTWARE\Classes\Interface\{1C888195-0160-4883-91B7-294C0CE2F277}
[-] Sleutel verwijderd: HKLM\SOFTWARE\Classes\Interface\{99ACA0F7-D864-45CB-8C40-FD42A077E7CA}
[-] Sleutel verwijderd: HKLM\SOFTWARE\Classes\TypeLib\{6857AC4A-95B4-4E2C-B2D2-8A235FCCEF4A}
[-] Sleutel verwijderd: HKLM\SOFTWARE\Classes\TypeLib\{E69D4A59-73DE-4E38-9FB3-740EC4D9060D}
[-] Sleutel verwijderd: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
[-] Waarde verwijderd: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{21FA44EF-376D-4D53-9B0F-8A89D3229068}]
[-] Sleutel verwijderd: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\Software\Myfree Codec
[-] Sleutel verwijderd: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\Software\YahooPartnerToolbar
[-] Sleutel verwijderd: HKU\S-1-5-21-1097378128-3316138746-2142345461-1000\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
[-] Sleutel verwijderd: HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1097378128-3316138746-2142345461-1000\Software\StartNow Toolbar
[#] Sleutel verwijderd tijdens herstart: HKCU\Software\Myfree Codec
[#] Sleutel verwijderd tijdens herstart: HKCU\Software\YahooPartnerToolbar
[-] Sleutel verwijderd: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-18\Software\StartNow Toolbar
[-] Sleutel verwijderd: HKLM\SOFTWARE\Myfree Codec
[-] Sleutel verwijderd: HKLM\SOFTWARE\PIP
[#] Sleutel verwijderd tijdens herstart: HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
[#] Sleutel verwijderd tijdens herstart: [x64] HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1097378128-3316138746-2142345461-1000\Software\StartNow Toolbar
[#] Sleutel verwijderd tijdens herstart: [x64] HKCU\Software\Myfree Codec
[#] Sleutel verwijderd tijdens herstart: [x64] HKCU\Software\YahooPartnerToolbar
[#] Sleutel verwijderd tijdens herstart: [x64] HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
[-] Sleutel verwijderd: HKLM\SOFTWARE\Classes\Installer\Features\2B1E51D87B2D71A44BB42DDD5E894160
[-] Sleutel verwijderd: HKLM\SOFTWARE\Classes\Installer\Products\2B1E51D87B2D71A44BB42DDD5E894160
[-] Sleutel verwijderd: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\2B1E51D87B2D71A44BB42DDD5E894160
[#] Sleutel verwijderd tijdens herstart: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\2B1E51D87B2D71A44BB42DDD5E894160
[#] Sleutel verwijderd tijdens herstart: [x64] HKLM\SOFTWARE\Classes\Installer\Features\2B1E51D87B2D71A44BB42DDD5E894160
[#] Sleutel verwijderd tijdens herstart: [x64] HKLM\SOFTWARE\Classes\Installer\Products\2B1E51D87B2D71A44BB42DDD5E894160
[-] Sleutel verwijderd: HKLM\SOFTWARE\Classes\AppID\Toolbar.DLL


***** [ Browsers ] *****

[-] [C:\Users\Amy\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Verwijderd: r


*************************

:: "Tracing" sleutels verwijderd
:: Winsock instellingen gereset

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [4196 bytes] - [07/03/2017 10:34:04]
C:\AdwCleaner\AdwCleaner[S0].txt - [4240 bytes] - [07/03/2017 10:32:11]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [4342 bytes] ##########
 
Download
51f51523a23a0-OTL_Canned_Nieuw.png
OTL.exe

Downloadlokatie: Dit programma absoluut naar het bureaublad downloaden of anders naar het bureaublad verplaatsen!
Sluit voordat OTL.exe gaat scannen, eerst alle andere openstaande vensters!

OTL.exe gebruiken:
    • Windows 2000 en Windows XP: dubbelklik op OTL.exe.
    • Windows Vista, Windows 7, Windows 8 en Windows 10: via rechtsklik op OTL.exe en kies voor "Als Administrator uitvoeren".

  • Zet een vinkje bij Scan All Users, LOP Check en bij PURITY Check.
  • Kopieer onderstaande in de Code-kader staande tekst en plak deze in het kader onder
    4f9111a6d2a6c-OTL-2.png


    Code:
    services.*
    explorer.exe
    svchost.exe
    netsvcs
    msconfig
    PRC - Processes
    %systemroot%\*. /mp /s
    %systemroot%\system32\*.dll /lockedfiles
    %systemroot%\Tasks\*.job /lockedfiles
    %systemroot%\system32\drivers\*.sys /lockedfiles
    %systemroot%\System32\config\*.sav
    %systemroot%\system32\drivers\*.sys /90
    %PROGRAMFILES%\*
    CREATERESTOREPOINT
  • Klik vervolgens op de knop
    50cd93c69be5b-OTL_-_Run_Scan_knop.jpg
    .
  • Verander verder geen andere instellingen in OTL, alleen tenzij ik hiervoor specifiek instructies geef.
  • De scan zal niet heel erg lang duren.
    • Er zullen twee Kladblok-vensters geopend worden wanneer de scan klaar is: OTL.Txt en Extras.txt.
    • Kopieer vervolgens de inhoud van zowel OTL.txt alsmede Extras.txt en plak die gegevens in je volgende bericht.
In geval de inhoud van een van de logs of van beide logs te groot is om te posten, kijk dan hier: Hoe een bijlage toevoegen?
 
Status
Niet open voor verdere reacties.
Steun Ons

Nieuwste berichten

Terug
Bovenaan