• Hulpvragenden in dit forumonderdeel worden enkel geholpen door daartoe bevoegde teamleden.
    Dit is belangrijk, zodat de hulpvragende goed geholpen kan worden zonder (goedbedoelde) aanvullende berichten van andere leden.
    Reageren op andermans discussie is daarom uitgeschakeld.
  • De afgelopen dagen zijn er meerdere fora waarop bestaande accounts worden overgenomen door spammers. De gebruikersnamen en wachtwoorden zijn via een hack of een lek via andere sites buitgemaakt. Via have i been pwned? kan je controleren of jouw gegeven ook zijn buitgemaakt. Wijzig bij twijfel jouw wachtwoord of schakel de twee-staps-verificatie in.

Au_,exe gevonden

Status
Niet open voor verdere reacties.

snarf54

Nieuw lid
Lid geworden
2 nov 2007
Berichten
10
Waarderingsscore
0
MWB vond dit bestand en is inmiddels verwijderd.
Bijgaand de 2 txt bestandden Farbar.

Verneem graag of het nu voldoende opgeruimd is. Avast vind het niet.

FRST
Scanresultaten van Farbar Recovery Scan Tool (FRST) (x64) Versie: 19-05-2021
Gestart door Gebruiker (Beheerder) op FRANS-GIGA (Gigabyte Technology Co., Ltd. H81M-S2H) (21-05-2021 12:44:48)
Gestart vanaf F:\Frans\Bureaublad
Geladen Profielen: Gebruiker
Platform: Windows 10 Home Versie 2004 19041.985 (X64) Taal: Nederlands (Nederland)
Standaardbrowser: "C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe" --single-argument %1
Boot Modus: Normal

==================== Processen (gefilterd) =================

(Als een item is opgenomen in de fixlist, zal het proces worden gesloten. Het bestand zal niet worden verplaatst.)

(Avast Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1065.0\AvastBrowserCrashHandler.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1065.0\AvastBrowserCrashHandler64.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswEngSrv.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswToolsSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastUI.exe <5>
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\wsc_proxy.exe
(Brother Industries, Ltd.) [Bestand niet getekend] C:\Program Files (x86)\Brother\iPrint&Scan\iPSNotifier.exe
(Brother Industries, Ltd.) [Bestand niet getekend] C:\Program Files (x86)\Brother\SoftwareUpdateNotification\SoftwareUpdateNotificationService.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe <3>
(Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(Dropbox, Inc -> The Qt Company Ltd.) C:\Program Files (x86)\Dropbox\Client\122.4.4867\QtWebEngineProcess.exe <2>
(FOXIT SOFTWARE INC. -> Foxit Software Inc.) C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReaderUpdateService.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.82\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.82\GoogleCrashHandler64.exe
(Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation - Software and Firmware Products -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Corporation) [Bestand niet getekend] C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <20>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2104.14-0\MsMpEng.exe
(Microsoft) [Bestand niet getekend] C:\Program Files (x86)\Brother\iPrint&Scan\USBAppControl.exe
(Microsoft) [Bestand niet getekend] C:\Program Files (x86)\Brother\iPrint&Scan\WorkflowAppControl.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(Proton Technologies AG -> ) C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPN.exe
(Proton Technologies AG -> ) C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPN.UpdateService.exe
(Proton Technologies AG -> ) C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPNService.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Siber Systems -> ) C:\Program Files\Siber Systems\GoodSync\GoodSync.exe
(Siber Systems -> ) C:\Program Files\Siber Systems\GoodSync\gs-server.exe
(Siber Systems -> ) C:\Program Files\Siber Systems\GoodSync\gsync.exe
(Siber Systems -> Siber Systems Inc.) C:\Program Files (x86)\Siber Systems\AI RoboForm\rf-chrome-nm-host.exe
(Siber Systems -> Siber Systems) C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe

==================== Register (gefilterd) ===================

(Als een item is opgenomen in de fixlist, zal het registeritem worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13671792 2014-03-14] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [122592 2021-05-21] (Avast Software s.r.o. -> AVAST Software)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [8172264 2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
HKLM-x32\...\Run: [C17A] => C:\WINDOWS\twain_32\Brimc17a\Common\TwDsUiLaunch.exe [103344 2019-12-25] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [146584 2017-11-07] (Brother Industries, Ltd. -> Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2976256 2018-01-19] (Brother Industries, Ltd.) [Bestand niet getekend]
HKLM-x32\...\Run: [BrotherSoftwareUpdateNotification] => C:\Program Files (x86)\Brother\SoftwareUpdateNotification\SoftwareUpdateNotificationService.exe [3581952 2017-04-05] (Brother Industries, Ltd.) [Bestand niet getekend]
HKU\S-1-5-21-2445662121-783166287-1001228566-1001\...\Run: [Google Update] => C:\Users\Gebruiker\AppData\Local\Google\Update\1.3.36.82\GoogleUpdateCore.exe [217432 2021-04-21] (Google LLC -> Google LLC)
HKU\S-1-5-21-2445662121-783166287-1001228566-1001\...\Run: [GoodSync] => C:\Program Files\Siber Systems\GoodSync\GoodSync.exe [14140160 2021-05-04] (Siber Systems -> )
HKU\S-1-5-21-2445662121-783166287-1001228566-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\Gebruiker\AppData\Local\Microsoft\Teams\Update.exe [1789768 2019-09-08] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-2445662121-783166287-1001228566-1001\...\Run: [ProtonVPN] => C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPN.exe [7529720 2021-01-29] (Proton Technologies AG -> )
HKU\S-1-5-21-2445662121-783166287-1001228566-1001\...\Run: [Lync] => C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe [23975768 2021-05-20] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2445662121-783166287-1001228566-1001\...\Run: [RoboForm] => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [148800 2021-05-15] (Siber Systems -> Siber Systems)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\90.0.4430.212\Installer\chrmstp.exe [2021-05-12] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{A8504530-742B-42BC-895D-2BAD6406F698}] -> C:\Program Files (x86)\AVAST Software\Browser\Application\90.1.9508.213\Installer\chrmstp.exe [2021-05-21] (Avast Software s.r.o. -> AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\iPSNotifier.lnk [2021-04-02]
ShortcutTarget: iPSNotifier.lnk -> C:\Program Files (x86)\Brother\iPrint&Scan\iPSNotifier.exe (Brother Industries, Ltd.) [Bestand niet getekend]
Startup: C:\Users\Gebruiker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Verzenden naar OneNote.lnk [2015-12-16]
ShortcutTarget: Verzenden naar OneNote.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
GroupPolicyScripts-x32: Restrictie <==== AANDACHT
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restrictie <==== AANDACHT

==================== Geplande Taken (gefilterd) ============

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

Task: {02A77EF3-B6CC-4204-8D85-28A1115BA58E} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2020-05-07] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {15094B36-7A78-4B07-9025-C4CCAA66DE7E} - System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [2230632 2021-05-11] (Avast Software s.r.o. -> AVAST Software)
Task: {1BBE86F7-0DDB-41C0-AC7D-EAF683F26EAC} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194200 2021-05-21] (Avast Software s.r.o. -> AVAST Software)
Task: {1D3C1788-D885-44C4-9D3B-B6B24EB40CA1} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [907240 2020-06-25] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {23906272-0A7A-4F3A-88D3-79601700B62F} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1126888 2020-06-25] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {24020A9A-5B0A-4987-A987-191CB9810C00} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [1790184 2021-05-21] (Avast Software s.r.o. -> Avast Software)
Task: {25069E48-EF1D-4486-A3B7-BF4D1F435B2C} - System32\Tasks\DropboxUpdateTaskMachineCore1d3ef8b9950b72c => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-05] (Dropbox, Inc -> Dropbox, Inc.)
Task: {3808DE9B-18DA-4762-8714-1E9546C9389A} - System32\Tasks\NvNotifier_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\GFExperience.Deployer\NvNotifier.exe
Task: {3882DCEC-A310-42F6-87E1-279A484D5DE7} - System32\Tasks\{41EA4051-3953-4373-A2FF-F278683B9830} => C:\Program Files (x86)\Panda Security\Panda Security Protection\JobLauncher.exe
Task: {3DD01854-49FB-4DF8-8B14-879763CDAED3} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1126888 2020-06-25] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {4D281C46-2381-4271-A5BA-C53BB6565F81} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-05] (Dropbox, Inc -> Dropbox, Inc.)
Task: {5685D7EF-E3C8-4F68-9F13-024B5AFA2A64} - System32\Tasks\Avast Secure Browser Heartbeat Task (Logon) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [2230632 2021-05-11] (Avast Software s.r.o. -> AVAST Software)
Task: {65A28ABE-851B-48A6-9B63-280F8EB48B8E} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23103392 2021-04-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {65DD0758-65B3-4F44-B55F-1C497FA4EA79} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3294184 2020-07-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {6A8A51EA-FE68-46D2-89AA-69B5E536A030} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2020-05-07] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {78C322ED-EB39-4153-9D4E-4531A19D93B3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2104.14-0\MpCmdRun.exe [595288 2021-05-15] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7A4C2199-034F-4D29-B286-D17A1F15DA3E} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23103392 2021-04-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {7A892BCD-0A77-449C-8047-DFA026CD0E24} - System32\Tasks\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [4808928 2021-05-21] (Avast Software s.r.o. -> AVAST Software)
Task: {7E1E338B-3CFC-4D0C-9DF4-8AAAAD5F83D1} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2445662121-783166287-1001228566-1001Core => C:\Users\Gebruiker\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-09-23] (Google Inc -> Google Inc.)
Task: {88C114AD-F636-4D6D-ADC1-79D6F10C9219} - geen bestandpad
Task: {92920AB8-21C0-4662-A18A-D7D4395C6030} - System32\Tasks\Run RoboForm TaskBar Icon => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [148800 2021-05-15] (Siber Systems -> Siber Systems)
Task: {9296D2CB-3BA8-4699-B3DA-B2F966DD4FD4} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2445662121-783166287-1001228566-1001Core1d257dc275567a7 => C:\Users\Gebruiker\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-09-23] (Google Inc -> Google Inc.)
Task: {A30B812F-0884-48CE-904F-8D28B0863405} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-02-16] (Google Inc -> Google Inc.)
Task: {A512940D-9CCF-4D5B-BB77-395A7AFF315A} - System32\Tasks\{5157FB5A-E863-4E9B-8142-74BB20A43A50} => C:\Program Files (x86)\Panda Security\Panda Security Protection\JobLauncher.exe
Task: {A56143E3-BE1D-4826-B1C9-3C8D515A127A} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2445662121-783166287-1001228566-1001UA1d257dc2757c947 => C:\Users\Gebruiker\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-09-23] (Google Inc -> Google Inc.)
Task: {AF5AB4EA-C802-4A6A-8F82-B1079412942E} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [114032 2021-05-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {B2D57A52-D3BE-4150-938A-74115AA10723} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [114032 2021-05-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {B7C8FC8E-5C4E-4B62-AD14-92C9C4821A4A} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-05] (Dropbox, Inc -> Dropbox, Inc.)
Task: {B865B32C-DD89-49A3-ADDE-6325C913D55C} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1126888 2020-06-25] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {B9703A01-97A4-4843-B22E-33A9BF2593B6} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [647656 2020-06-25] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {BA17CA1B-6DB6-4E2C-9896-9D1E848667BF} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [907240 2020-06-25] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {BA538EEB-BFB4-4415-8052-8656E7366A73} - \Microsoft\Windows\UNP\RunCampaignManager -> Geen bestand <==== AANDACHT
Task: {BE24938B-036A-4F5D-86A1-21862DFE6EEA} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2104.14-0\MpCmdRun.exe [595288 2021-05-15] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {BE2B4478-2631-455C-B3A3-DC1C52F60594} - System32\Tasks\Open URL by RoboForm => C:\WINDOWS\system32\rundll32.exe url.dll,FileProtocolHandler "RoboForm for Business"
Task: {C014503C-A29A-4A8B-9F7C-72B3C8080F5F} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194200 2021-05-21] (Avast Software s.r.o. -> AVAST Software)
Task: {C5EABFC2-7024-45A9-BDB2-C0403CD6E422} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2445662121-783166287-1001228566-1001UA => C:\Users\Gebruiker\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-09-23] (Google Inc -> Google Inc.)
Task: {DF469040-AF9C-408A-BFB1-47B608EABA0F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2104.14-0\MpCmdRun.exe [595288 2021-05-15] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {E18A7CA7-EE53-4E91-9939-78901B7EC3D4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2104.14-0\MpCmdRun.exe [595288 2021-05-15] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {EC3B2008-6547-4F57-87B3-2FFD670F27E0} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1126888 2020-06-25] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {F0E003E1-F2C2-4812-967D-A58D86DD98E4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-02-16] (Google Inc -> Google Inc.)
Task: {F7DFD77A-7E04-42D6-992B-4EC3C6971C27} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [1121152 2021-05-20] (Microsoft Corporation -> Microsoft Corporation)

(Als een item is opgenomen in de fixlist, wordt de taak (job) bestand verplaatst. Het bestand dat wordt uitgevoerd door de taak zal niet worden verplaatst.)

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore1d3ef8b9950b72c.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2445662121-783166287-1001228566-1001Core.job => C:\Users\Gebruiker\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2445662121-783166287-1001228566-1001UA.job => C:\Users\Gebruiker\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\{41EA4051-3953-4373-A2FF-F278683B9830}.job => C:\Program Files (x86)\Panda Security\Panda Security Protection\JobLauncher.exe
Task: C:\WINDOWS\Tasks\{5157FB5A-E863-4E9B-8142-74BB20A43A50}.job => C:\Program Files (x86)\Panda Security\Panda Security Protection\JobLauncher.exe

==================== Internet (gefilterd) ====================

(Als een item is opgenomen in de fixlist en een registeritem is, wordt het verwijderd of hersteld naar de standaard.)

Tcpip\Parameters: [DhcpNameServer] 192.168.8.1
Tcpip\..\Interfaces\{3e67542f-20ca-4b2c-85a7-95cfbb2eb18e}: [NameServer] 8.8.4.4,192.168.0.1,192.168.8.1
Tcpip\..\Interfaces\{3e67542f-20ca-4b2c-85a7-95cfbb2eb18e}: [DhcpNameServer] 192.168.8.1

Edge:
=======
DownloadDir: F:\Frans\Downloads
Edge Extension: (Geen Naam) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [niet gevonden]
Edge Extension: (Geen Naam) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [niet gevonden]
Edge Extension: (uBlock Origin) -> EdgeExtension_37833NikRollsuBlockOrigin_f8jsg5mm64m62 => C:\Program Files\WindowsApps\37833NikRolls.uBlockOrigin_1.15.24.0_neutral__f8jsg5mm64m62 [2019-08-28]
Edge Extension: (AdBlock — best ad blocker) -> EdgeExtension_BetaFishAdBlock_c1wakc4j0nefm => C:\Program Files\WindowsApps\BetaFish.AdBlock_2.13.0.0_neutral__c1wakc4j0nefm [2020-01-10]
Edge Extension: (RoboForm) -> EdgeExtension_SiberSystemsIncRoboFormEdge_7kk3kr9e0p1np => C:\Program Files\WindowsApps\SiberSystemsInc.RoboFormEdge_8.5.7.0_x86__7kk3kr9e0p1np [2019-12-29]
Edge Extension: (Geen Naam) -> hdokiejnpimakedhajhdlcegeplioahd_LastPassLastPassFreePasswordManager_qq0fmhteeht3j => C:\Program Files\WindowsApps\LastPass.LastPassFreePasswordManager_4.41.0.0_neutral__qq0fmhteeht3j [niet gevonden]
Edge Extension: (Geen Naam) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [niet gevonden]
Edge Extension: (Geen Naam) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [niet gevonden]
Edge DefaultProfile: Default
Edge Profile: C:\Users\Gebruiker\AppData\Local\Microsoft\Edge\User Data\Default [2021-05-21]
Edge DownloadDir: Default -> F:\Frans\Downloads
Edge Notifications: Default -> hxxps://calendar.google.com
Edge DefaultSearchURL: Default -> hxxps://www.google.nl/search?q={searchTerms}&ie={inputEncoding?}&oe={outputEncoding?}
Edge Session Restore: Default -> is ingeschakeld.
Edge Extension: (LastPass: Free Password Manager) - C:\Users\Gebruiker\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bbcinlkgjjkejfdpemiealijmmooekmp [2021-05-13]
Edge Extension: (RoboForm Password Manager) - C:\Users\Gebruiker\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ljfpcifpgbbchoddpjefaipoiigpdmag [2021-04-22]
Edge Extension: (AdBlock - de beste advertentieblokker) - C:\Users\Gebruiker\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ndcileolkflehcjpmjnfbnaibdcgglog [2021-05-10]
Edge Extension: (uBlock Origin) - C:\Users\Gebruiker\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\odfafepnkmbhccpbejgmiehpchacaeak [2021-05-13]

FireFox:
========
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [2021-04-26] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.cpdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [2021-04-26] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [2021-04-26] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [2021-04-26] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [2021-04-26] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel® Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel® Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2021-03-12] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-03-12] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1065.0\npAvastBrowserUpdate3.dll [2021-05-21] (Avast Software s.r.o. -> AVAST Software)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1065.0\npAvastBrowserUpdate3.dll [2021-05-21] (Avast Software s.r.o. -> AVAST Software)

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default [2021-05-21]
CHR StartupUrls: Default -> "hxxps://glrnl.sharepoint.com/Paginas/default.aspx"
CHR Extension: (Presentaties) - C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
CHR Extension: (Documenten) - C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Google Drive) - C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-21]
CHR Extension: (YouTube) - C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-02-16]
CHR Extension: (Adblock Plus - gratis adblocker) - C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2021-05-20]
CHR Extension: (Google Search) - C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-16]
CHR Extension: (Spreadsheets) - C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (AdBlock Premium) - C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\fndlhnanhedoklpdaacidomdnplcjcpj [2020-07-31]
CHR Extension: (Offline Documenten) - C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-05-20]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2021-05-20]
CHR Extension: (Betalingen via Chrome Web Store) - C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-06]
CHR Extension: (Gmail) - C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-23]
CHR Extension: (Chrome Media Router) - C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-05-10]
CHR Extension: (RoboForm Password Manager) - C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnlccmojcmeohlpggmfnbbiapkmbliob [2021-05-20]
CHR Profile: C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Guest Profile [2020-10-20]
CHR Profile: C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\System Profile [2020-10-20]
CHR HKLM\...\Chrome\Extension: [pnlccmojcmeohlpggmfnbbiapkmbliob] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Chrome\rf-chrome.crx [2015-09-04]
CHR HKLM-x32\...\Chrome\Extension: [pnlccmojcmeohlpggmfnbbiapkmbliob] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Chrome\rf-chrome.crx [2015-09-04]

==================== Services (gefilterd) ===================

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

S3 aswbIDSAgent; C:\Program Files\Avast Software\Avast\aswidsagent.exe [8150552 2021-05-21] (Avast Software s.r.o. -> AVAST Software)
S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194200 2021-05-21] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\Avast Software\Avast\AvastSvc.exe [622816 2021-05-21] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Tools; C:\Program Files\Avast Software\Avast\aswToolsSvc.exe [370400 2021-05-21] (Avast Software s.r.o. -> AVAST Software)
S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194200 2021-05-21] (Avast Software s.r.o. -> AVAST Software)
S3 AvastSecureBrowserElevationService; C:\Program Files (x86)\AVAST Software\Browser\Application\90.1.9508.213\elevation_service.exe [1396952 2021-05-11] (Avast Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\Avast Software\Avast\wsc_proxy.exe [56912 2021-05-21] (Avast Software s.r.o. -> AVAST Software)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8798600 2021-04-28] (Microsoft Corporation -> Microsoft Corporation)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-05] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-05] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [44272 2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
R2 FoxitReaderUpdateService; C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\FoxitReaderUpdateService.exe [2356800 2021-04-20] (FOXIT SOFTWARE INC. -> Foxit Software Inc.)
R2 GsRunner Gebruiker; C:\Program Files\Siber Systems\GoodSync\gsync.exe [8004864 2021-05-04] (Siber Systems -> )
R2 GsServer; C:\Program Files\Siber Systems\GoodSync\gs-server.exe [8253184 2021-05-04] (Siber Systems -> )
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Bestand niet getekend]
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7391408 2021-05-21] (Malwarebytes Inc -> Malwarebytes)
R3 ProtonVPN Service; C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPNService.exe [102648 2021-01-29] (Proton Technologies AG -> )
R3 ProtonVPN Update Service; C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPN.UpdateService.exe [62712 2021-01-29] (Proton Technologies AG -> )
R2 USBAppControl; C:\Program Files (x86)\Brother\iPrint&Scan\USBAppControl.exe [12288 2021-03-01] (Microsoft) [Bestand niet getekend]
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2104.14-0\NisSrv.exe [2599328 2021-05-15] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2104.14-0\MsMpEng.exe [128376 2021-05-15] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WorkflowAppControl; C:\Program Files (x86)\Brother\iPrint&Scan\WorkflowAppControl.exe [20480 2021-03-01] (Microsoft) [Bestand niet getekend]

===================== Drivers (gefilterd) ===================

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

S3 aftap0901; C:\WINDOWS\System32\drivers\aftap0901.sys [48624 2017-11-16] (AnchorFree Inc -> The OpenVPN Project)
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20640 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [35664 2021-05-21] (Avast Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [216360 2021-05-21] (Avast Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [365536 2021-05-21] (Avast Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [250336 2021-05-21] (Avast Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [99296 2021-05-21] (Avast Software s.r.o. -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [17328 2021-05-21] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [41296 2021-05-21] (Avast Software s.r.o. -> AVAST Software)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [180944 2021-05-21] (Avast Software s.r.o. -> AVAST Software)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [522824 2021-05-21] (Avast Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [107792 2021-05-21] (Avast Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [82856 2021-05-21] (Avast Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [851144 2021-05-21] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [471352 2021-05-21] (Avast Software s.r.o. -> AVAST Software)
S2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [215336 2021-05-21] (Avast Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [326976 2021-05-21] (Avast Software s.r.o. -> AVAST Software)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Bestand niet getekend]
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [159600 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 gdrv; C:\Windows\gdrv.sys [25640 2015-08-31] (Giga-Byte Technology -> Windows (R) Server 2003 DDK provider)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2021-05-21] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2021-05-21] (Malwarebytes Inc -> Malwarebytes)
S3 ProtonVPNCallout; C:\Program Files (x86)\Proton Technologies\ProtonVPN\x64\Win10\ProtonVPN.CalloutDriver.sys [34176 2021-01-27] (Microsoft Windows Hardware Compatibility Publisher -> Proton Technologies AG)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 tapprotonvpn; C:\WINDOWS\System32\drivers\tapprotonvpn.sys [49024 2020-12-30] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49560 2021-05-15] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [421112 2021-05-15] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [73960 2021-05-15] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (gefilterd) ===================

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)


==================== Een maand (aangemaakt) (gefilterd) =========

(Als een item is opgenomen in de fixlist, wordt de map of het bestand verplaatst.)

2021-05-21 12:44 - 2021-05-21 12:45 - 000000000 ____D C:\FRST
2021-05-21 10:26 - 2021-05-21 10:26 - 000002574 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype voor Bedrijven.lnk
2021-05-21 10:26 - 2021-05-21 10:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office-hulpprogramma's
2021-05-21 09:43 - 2021-05-21 09:46 - 000000000 ____D C:\Users\Gebruiker\AppData\Local\AVAST Software
2021-05-21 09:43 - 2021-05-21 09:43 - 000003856 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser Heartbeat Task (Hourly)
2021-05-21 09:43 - 2021-05-21 09:43 - 000003614 _____ C:\WINDOWS\system32\Tasks\AvastUpdateTaskMachineUA
2021-05-21 09:43 - 2021-05-21 09:43 - 000003490 _____ C:\WINDOWS\system32\Tasks\AvastUpdateTaskMachineCore
2021-05-21 09:43 - 2021-05-21 09:43 - 000003272 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser Heartbeat Task (Logon)
2021-05-21 09:43 - 2021-05-21 09:43 - 000002628 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk
2021-05-21 09:43 - 2021-05-21 09:43 - 000002593 _____ C:\ProgramData\Bureaublad\Avast Secure Browser.lnk
2021-05-21 09:43 - 2021-05-21 09:43 - 000000000 ____D C:\Program Files (x86)\AVAST Software
2021-05-21 09:41 - 2021-05-21 09:41 - 000248992 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2021-05-21 09:41 - 2021-05-21 09:41 - 000199128 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2021-05-21 09:41 - 2021-05-21 09:41 - 000019912 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2021-05-21 09:41 - 2021-05-21 09:41 - 000002198 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
2021-05-21 09:41 - 2021-05-21 09:41 - 000002186 _____ C:\ProgramData\Bureaublad\Avast Free Antivirus.lnk
2021-05-21 09:41 - 2021-05-21 09:41 - 000002071 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2021-05-21 09:41 - 2021-05-21 09:41 - 000002059 _____ C:\ProgramData\Bureaublad\Malwarebytes.lnk
2021-05-21 09:41 - 2021-05-21 09:41 - 000000000 ____D C:\Users\Gebruiker\AppData\Roaming\Avast Software
2021-05-21 09:41 - 2021-05-21 09:41 - 000000000 ____D C:\Users\Gebruiker\AppData\Local\mbam
2021-05-21 09:41 - 2021-05-21 09:41 - 000000000 ____D C:\ProgramData\Malwarebytes
2021-05-21 09:40 - 2021-05-21 09:40 - 000003990 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update
2021-05-21 09:40 - 2021-05-21 09:40 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2021-05-21 09:40 - 2021-05-21 09:40 - 000000000 ____D C:\Program Files\Malwarebytes
2021-05-21 09:39 - 2021-05-21 09:39 - 000851144 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2021-05-21 09:39 - 2021-05-21 09:39 - 000522824 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNetHub.sys
2021-05-21 09:39 - 2021-05-21 09:39 - 000471352 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2021-05-21 09:39 - 2021-05-21 09:39 - 000365536 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2021-05-21 09:39 - 2021-05-21 09:39 - 000339680 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2021-05-21 09:39 - 2021-05-21 09:39 - 000326976 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2021-05-21 09:39 - 2021-05-21 09:39 - 000250336 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2021-05-21 09:39 - 2021-05-21 09:39 - 000216360 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2021-05-21 09:39 - 2021-05-21 09:39 - 000215336 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2021-05-21 09:39 - 2021-05-21 09:39 - 000180944 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2021-05-21 09:39 - 2021-05-21 09:39 - 000107792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2021-05-21 09:39 - 2021-05-21 09:39 - 000099296 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2021-05-21 09:39 - 2021-05-21 09:39 - 000082856 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2021-05-21 09:39 - 2021-05-21 09:39 - 000041296 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2021-05-21 09:39 - 2021-05-21 09:39 - 000035664 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArDisk.sys
2021-05-21 09:39 - 2021-05-21 09:39 - 000017328 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswElam.sys
2021-05-21 09:39 - 2021-05-21 09:39 - 000000000 ____D C:\Program Files\Common Files\Avast Software
2021-05-21 09:38 - 2021-05-21 09:38 - 000000000 ____D C:\Program Files\Avast Software
2021-05-21 09:37 - 2021-05-21 12:31 - 000000000 ____D C:\ProgramData\Avast Software
2021-05-14 08:38 - 2021-05-14 08:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2021-05-12 14:21 - 2021-05-12 14:21 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2021-05-12 14:21 - 2021-05-12 14:21 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2021-05-12 14:21 - 2021-05-12 14:21 - 001823816 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-05-12 14:21 - 2021-05-12 14:21 - 001687040 _____ C:\WINDOWS\system32\libcrypto.dll
2021-05-12 14:21 - 2021-05-12 14:21 - 001393504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-05-12 14:21 - 2021-05-12 14:21 - 001314120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-05-12 14:21 - 2021-05-12 14:21 - 001163776 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2021-05-12 14:21 - 2021-05-12 14:21 - 000700928 _____ C:\WINDOWS\system32\FsNVSDeviceSource.dll
2021-05-12 14:21 - 2021-05-12 14:21 - 000165888 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-05-12 14:21 - 2021-05-12 14:21 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2021-05-12 14:21 - 2021-05-12 14:21 - 000013312 _____ C:\WINDOWS\system32\agentactivationruntimestarter.exe
2021-05-12 14:21 - 2021-05-12 14:21 - 000011351 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-05-11 23:25 - 2021-05-11 23:25 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys
2021-05-11 23:25 - 2021-05-11 23:25 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys
2021-05-11 23:25 - 2021-05-11 23:25 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys
2021-05-11 23:25 - 2021-05-11 23:25 - 000044272 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2021-05-09 12:52 - 2021-05-09 12:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2021-05-04 08:54 - 2021-05-04 08:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GoodSync
2021-04-28 17:45 - 2021-04-28 17:45 - 001214500 _____ C:\WINDOWS\Minidump\042821-9656-01.dmp

==================== Een maand (gewijzigd) ==================

(Als een item is opgenomen in de fixlist, wordt de map of het bestand verplaatst.)

2021-05-21 12:42 - 2020-08-02 22:30 - 000004206 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{3FF2B033-C021-4EF0-BD4E-3B2E0F5EBCC1}
2021-05-21 12:35 - 2020-08-02 22:27 - 001771328 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-05-21 12:35 - 2019-12-07 17:12 - 000785960 _____ C:\WINDOWS\system32\perfh013.dat
2021-05-21 12:35 - 2019-12-07 17:12 - 000154088 _____ C:\WINDOWS\system32\perfc013.dat
2021-05-21 12:35 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2021-05-21 12:33 - 2016-08-03 06:55 - 000000000 ____D C:\ProgramData\NVIDIA
2021-05-21 12:31 - 2020-08-02 22:30 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-05-21 12:31 - 2020-08-02 22:23 - 000008192 ___SH C:\DumpStack.log.tmp
2021-05-21 12:31 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-05-21 12:31 - 2019-07-31 22:41 - 000000000 ____D C:\Users\Gebruiker\AppData\Local\GoodSync
2021-05-21 12:31 - 2017-05-17 21:05 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2021-05-21 12:31 - 2015-08-31 12:30 - 000000000 __SHD C:\Users\Gebruiker\IntelGraphicsProfiles
2021-05-21 12:30 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2021-05-21 11:47 - 2020-08-02 22:23 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-05-21 11:00 - 2016-02-12 20:21 - 000000000 ____D C:\Program Files\Panda Security URL Filtering
2021-05-21 11:00 - 2016-02-12 20:21 - 000000000 ____D C:\Program Files (x86)\pandasecuritytb
2021-05-21 10:26 - 2019-09-04 20:29 - 000002559 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk
2021-05-21 10:26 - 2019-09-04 20:29 - 000002552 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
2021-05-21 10:26 - 2019-09-04 20:29 - 000002510 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk
2021-05-21 10:26 - 2019-09-04 20:29 - 000002497 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2021-05-21 10:26 - 2019-09-04 20:29 - 000002497 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote.lnk
2021-05-21 10:26 - 2019-09-04 20:29 - 000002485 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2021-05-21 10:26 - 2019-09-04 20:29 - 000002471 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk
2021-05-21 10:26 - 2015-09-04 21:08 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2021-05-21 10:25 - 2020-08-02 22:23 - 000442760 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-05-21 10:25 - 2016-05-11 18:39 - 000000000 ____D C:\Users\Gebruiker\AppData\Roaming\WhatsApp
2021-05-21 10:25 - 2015-09-06 21:50 - 000000000 ____D C:\ProgramData\panda_url_filtering
2021-05-21 10:25 - 2015-09-06 21:49 - 000000000 ____D C:\Program Files (x86)\Panda Security
2021-05-21 10:24 - 2015-09-06 21:48 - 000000000 ____D C:\ProgramData\Panda Security
2021-05-21 10:23 - 2015-09-06 21:50 - 000000000 ____D C:\Users\Gebruiker\AppData\Roaming\Panda Security
2021-05-21 10:06 - 2019-12-07 11:03 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2021-05-21 09:45 - 2016-02-28 19:01 - 000000000 ____D C:\Users\Gebruiker\AppData\Local\CrashDumps
2021-05-21 09:41 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2021-05-21 09:30 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-05-21 09:30 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-05-21 09:14 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-05-20 21:10 - 2017-10-25 23:04 - 000000000 ____D C:\Users\Gebruiker\AppData\Local\Packages
2021-05-20 20:56 - 2018-03-30 17:03 - 000000000 ____D C:\Users\Gebruiker\AppData\Local\WhatsApp
2021-05-15 17:16 - 2020-08-02 22:30 - 000004534 _____ C:\WINDOWS\system32\Tasks\Open URL by RoboForm
2021-05-15 17:16 - 2020-08-02 22:30 - 000003798 _____ C:\WINDOWS\system32\Tasks\Run RoboForm TaskBar Icon
2021-05-15 17:16 - 2015-09-04 20:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RoboForm
2021-05-15 09:59 - 2020-03-06 22:20 - 000002486 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-05-15 09:59 - 2020-03-06 22:20 - 000002324 _____ C:\ProgramData\Bureaublad\Microsoft Edge.lnk
2021-05-15 09:59 - 2018-05-19 18:10 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-05-14 08:38 - 2015-09-04 21:39 - 000000000 ____D C:\Program Files (x86)\Dropbox
2021-05-13 21:14 - 2020-08-02 22:30 - 000003376 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2445662121-783166287-1001228566-1001
2021-05-13 21:14 - 2020-08-02 22:13 - 000002415 _____ C:\Users\Gebruiker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-05-13 21:14 - 2015-09-22 23:14 - 000000000 ___RD C:\Users\Gebruiker\OneDrive
2021-05-13 21:05 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-05-12 22:46 - 2018-05-19 18:08 - 000001040 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore1d3ef8b9950b72c.job
2021-05-12 22:46 - 2015-09-04 21:39 - 000001042 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job
2021-05-12 22:45 - 2020-08-02 22:13 - 000000000 ____D C:\Users\Gebruiker
2021-05-12 22:45 - 2019-12-07 17:13 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2021-05-12 22:45 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2021-05-12 22:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2021-05-12 22:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-05-12 22:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-05-12 22:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2021-05-12 22:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-05-12 22:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-05-12 22:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2021-05-12 22:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2021-05-12 22:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-05-12 22:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-05-12 22:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2021-05-12 22:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-05-12 22:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-05-12 22:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-05-12 22:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\DiagTrack
2021-05-12 22:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-05-12 14:23 - 2019-12-07 17:15 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll
2021-05-12 14:15 - 2015-08-31 12:37 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-05-12 14:13 - 2015-08-31 12:37 - 132732536 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-05-12 08:06 - 2016-02-16 22:37 - 000002359 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-05-09 12:52 - 2017-04-03 19:57 - 000000000 ____D C:\ProgramData\Foxit Software
2021-05-07 14:47 - 2016-01-30 12:53 - 000000000 ____D C:\ProgramData\GoodSync
2021-05-05 20:11 - 2020-08-02 22:30 - 000004102 _____ C:\WINDOWS\system32\Tasks\DropboxUpdateTaskMachineUA
2021-05-05 20:11 - 2020-08-02 22:30 - 000003902 _____ C:\WINDOWS\system32\Tasks\DropboxUpdateTaskMachineCore1d3ef8b9950b72c
2021-05-04 08:54 - 2020-09-27 21:38 - 000001993 _____ C:\ProgramData\Bureaublad\GoodSync Explorer.lnk
2021-05-04 08:54 - 2017-03-15 19:19 - 000001929 _____ C:\ProgramData\Bureaublad\GoodSync.lnk
2021-05-04 08:53 - 2016-01-30 12:52 - 000000000 ____D C:\Program Files\Siber Systems
2021-05-03 14:24 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2021-04-28 17:45 - 2020-08-13 20:30 - 000000000 ____D C:\WINDOWS\Minidump
2021-04-28 17:44 - 2019-09-08 06:39 - 1014982314 _____ C:\WINDOWS\MEMORY.DMP
2021-04-27 20:47 - 2015-09-25 22:29 - 000000000 ____D C:\Users\Gebruiker\AppData\Roaming\Garmin
2021-04-25 14:51 - 2020-08-02 22:30 - 000003674 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-04-25 14:51 - 2020-08-02 22:30 - 000003550 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-04-23 08:56 - 2016-05-11 18:39 - 000000000 ____D C:\Users\Gebruiker\AppData\Local\SquirrelTemp
2021-04-21 19:27 - 2020-08-02 22:30 - 000003874 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskUserS-1-5-21-2445662121-783166287-1001228566-1001UA1d257dc2757c947
2021-04-21 19:27 - 2020-08-02 22:30 - 000003606 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskUserS-1-5-21-2445662121-783166287-1001228566-1001Core1d257dc275567a7
2021-04-21 19:27 - 2020-08-02 22:30 - 000003576 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2021-04-21 19:27 - 2020-08-02 22:30 - 000003452 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2021-04-21 19:03 - 2021-01-22 11:29 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools

==================== Bestanden in de root van sommige mappen ========

2015-11-03 23:16 - 2017-07-11 20:43 - 000000600 _____ () C:\Users\Gebruiker\AppData\Local\PUTTY.RND

==================== SigCheck ============================

(Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.)

==================== Einde van FRST.txt ========================

ADDITION :
Extra scanresultaten van Farbar Recovery Scan Tool (x64) Versie: 19-05-2021
Gestart door Gebruiker (21-05-2021 12:45:55)
Gestart vanaf F:\Frans\Bureaublad
Windows 10 Home Versie 2004 19041.985 (X64) (2020-08-02 20:30:41)
Boot Modus: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-2445662121-783166287-1001228566-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2445662121-783166287-1001228566-503 - Limited - Disabled)
Gast (S-1-5-21-2445662121-783166287-1001228566-501 - Limited - Disabled)
Gebruiker (S-1-5-21-2445662121-783166287-1001228566-1001 - Administrator - Enabled) => C:\Users\Gebruiker
WDAGUtilityAccount (S-1-5-21-2445662121-783166287-1001228566-504 - Limited - Disabled)

==================== Security Center ========================

(Als een item is opgenomen in de fixlist, zal het worden verwijderd.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Disabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
AV: Malwarebytes (Disabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Panda Dome (Enabled - Up to date) {7425ED3D-720F-1F3F-3E50-4C1ACD76499D}

==================== Geïnstalleerde programma's ======================

(Alleen de adware-programma's met 'verborgen' vlag kunnen worden toegevoegd aan de fixlist om ze zichtbaar te maken. De adware-programma's moeten handmatig gedeïnstalleerd worden.)

7-Zip 15.14 (x64) (HKLM\...\7-Zip) (Version: 15.14 - Igor Pavlov)
Adblock Plus voor IE (32-bit en 64-bit) (HKLM\...\{EAB6B77C-0E46-48EF-8660-7ABA400F7FB4}) (Version: 1.5 - Eyeo GmbH)
AppLogLibSetup (HKLM-x32\...\{52FB0C8F-DF05-4C61-AEB6-18C55F8C385F}) (Version: 1.0.3.0 - Brother Industries Ltd.) Hidden
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 21.4.2464 - Avast Software)
Avast Secure Browser (HKLM-x32\...\Avast Secure Browser) (Version: 90.1.9508.213 - AVAST Software)
Avast Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.8.1065.0 - AVAST Software) Hidden
BrLauncher (HKLM-x32\...\{88FCD471-DBBF-4A75-8066-ACACE05DE3CF}) (Version: 2.0.14.0 - Brother Industries Ltd.) Hidden
BrLogRx (HKLM-x32\...\{190861E7-09C5-42D8-BB4B-0AFB234BCFC1}) (Version: 1.0.3.1 - Brother Industries Ltd.) Hidden
Brother iPrint&Scan (HKLM-x32\...\{42D72ABA-773E-467A-8A64-4765E990EB75}) (Version: 9.0.0.123 - Brother Industries, Ltd.) Hidden
Brother iPrint&Scan (HKLM-x32\...\{85f204b0-595c-4801-8648-a69062f9ce1b}) (Version: 9.0.0.123 - Brother Industries, Ltd.)
Brother Printer Driver (HKLM-x32\...\{815D4CF3-0244-4142-98F8-51E5C7442DB7}) (Version: 1.4.0.0 - Brother Industries Ltd.) Hidden
Brother Scanner Driver (HKLM-x32\...\{01A1E3D8-E030-4A0B-B91E-4E1E8E1E02D3}) (Version: 1.0.23.1 - Brother Industries Ltd.) Hidden
BrSupportTools (HKLM-x32\...\{D0F69DE9-EE0B-4A7A-8248-6D5EC97D171C}) (Version: 1.0.23.0 - Brother Industries Ltd.) Hidden
ControlCenter4 (HKLM-x32\...\{CAFE5834-5440-41B8-8C56-4DD946A1A5E1}) (Version: 4.6.21.1 - Brother Industries, Ltd.) Hidden
ControlCenter4 CSDK (HKLM-x32\...\{FD8A9511-BFC9-43B5-BB75-9CEC0EA03CF0}) (Version: 4.6.1.1 - Brother Industries, Ltd.) Hidden
Dropbox (HKLM-x32\...\Dropbox) (Version: 122.4.4867 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.459.1 - Dropbox, Inc.) Hidden
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 10.1.4.37651 - Foxit Software Inc.)
Garmin BaseCamp (HKLM-x32\...\{9b6e1420-2b69-4974-a25f-ba67399695fd}) (Version: 4.7.3.0 - Garmin Ltd or its subsidiaries)
Garmin BaseCamp (HKLM-x32\...\{F71A87C2-FEF5-450A-A601-DCC1A9E23DAF}) (Version: 4.7.3.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin USB Drivers (HKLM-x32\...\{3D5D6CFC-3097-425A-8D8F-7EAF5D57641D}) (Version: 2.3.1.0 - Garmin Ltd or its subsidiaries)
GoodSync (HKLM\...\{B26B00DA-2E5D-4CF2-83C5-911198C0F009}) (Version: 10.16.5.5 - Siber Systems Inc)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 90.0.4430.212 - Google LLC)
HowToGuide (HKLM-x32\...\{36580EEB-4EDF-4880-BBD4-097E2C645ECD}) (Version: 1.0.1.0 - Brother Industries Ltd.) Hidden
HttpToUsbBridge (HKLM-x32\...\{2316FF8E-7DEC-4EB9-A50D-64C304A25469}) (Version: 1.5.30.1 - Brother Industries Ltd.)
Intel Driver Update Utility (HKLM-x32\...\{fe92d390-13ee-4660-a2f8-39a066fdffe0}) (Version: 2.2.0.5 - Intel)
Intel(R) Driver Update Utility 2.2.0.5 (HKLM-x32\...\{C4FB3CF4-C845-4746-A9F5-476908266433}) (Version: 2.2.0.1 - Intel) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4835 - Intel Corporation)
Kobo (HKLM-x32\...\Kobo) (Version: 4.24.13786 - Rakuten Kobo Inc.)
Kruidvat fotoservice (HKLM-x32\...\Kruidvat fotoservice) (Version: 6.2.5 - CEWE Stiftung u Co. KGaA)
Malwarebytes version 4.3.3.116 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.3.3.116 - Malwarebytes)
Microsoft 365-apps voor bedrijven - nl-nl (HKLM\...\O365BusinessRetail - nl-nl) (Version: 16.0.13929.20386 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 90.0.818.62 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 90.0.818.62 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2445662121-783166287-1001228566-1001\...\OneDriveSetup.exe) (Version: 21.073.0411.0002 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft Sync Framework 2.0 Core Components (x64) ENU (HKLM\...\{8CCBEC22-D2DB-4DC9-A58A-E1A1F3A38C8A}) (Version: 2.0.1578.0 - Microsoft Corporation)
Microsoft Sync Framework 2.0 Provider Services (x64) ENU (HKLM\...\{03AC245F-4C64-425C-89CF-7783C1D3AB2C}) (Version: 2.0.1578.0 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-2445662121-783166287-1001228566-1001\...\Teams) (Version: 1.2.00.19260 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{A0E1B43D-5F4A-46AF-9925-ABA3423325DC}) (Version: 2.77.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.13.26020 (HKLM-x32\...\{7474cd6e-76cc-4257-837e-5b9261e526af}) (Version: 14.13.26020.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.13.26020 (HKLM-x32\...\{5c045b7f-e561-4794-91f8-c6cda0893107}) (Version: 14.13.26020.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
NetworkRepairTool (HKLM-x32\...\{96CEE8C3-B934-48A4-ADA6-91B7CE8A5002}) (Version: 1.2.17.0 - Brother Industries, Ltd.) Hidden
NVIDIA 3D Vision controllerstuurprogramma 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.20.4.15 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.20.4.15 - NVIDIA Corporation)
NVIDIA Grafisch stuurprogramma 456.71 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 456.71 - NVIDIA Corporation)
NVIDIA HD Audio-stuurprogramma 1.3.38.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.35 - NVIDIA Corporation)
NVIDIA PhysX Systeem Software 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.13929.20386 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.13929.20386 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.13929.20386 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0413-0000-0000000FF1CE}) (Version: 16.0.13929.20386 - Microsoft Corporation) Hidden
ProtonVPN (HKLM-x32\...\{FFAFEA09-E7DA-4710-A278-7F0506C96829}) (Version: 1.18.5 - Proton Technologies AG) Hidden
ProtonVPN (HKLM-x32\...\ProtonVPN 1.18.5) (Version: 1.18.5 - Proton Technologies AG)
ProtonVPNTap (HKLM-x32\...\{5DA710E2-1B81-4675-BFC5-76BAF63AE1F6}) (Version: 1.1.3 - Proton Technologies AG)
PuTTY release 0.65 (HKLM-x32\...\PuTTY_is1) (Version: 0.65 - Simon Tatham)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.29.314.2014 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7200 - Realtek Semiconductor Corp.)
RoboForm 9-1-4-4 (All Users) (HKLM-x32\...\AI RoboForm) (Version: 9-1-4-4 - Siber Systems)
ScannerUtilityInstaller (HKLM-x32\...\{D65C0754-7790-427F-AD73-D7C644260F57}) (Version: 1.19.9.1 - Brother) Hidden
SoftwareUpdateNotification (HKLM-x32\...\{34F12379-C924-41E6-921D-51C71217F58C}) (Version: 1.0.9.0 - Brother Industries, Ltd.) Hidden
Speccy (HKLM\...\Speccy) (Version: 1.29 - Piriform)
StatusMonitor (HKLM-x32\...\{D42470A0-E4C3-41C9-9A92-B1B23FD13F8C}) (Version: 1.21.6.0 - Brother Insutries Ltd.) Hidden
SyncToy 2.1 (x64) (HKLM\...\{88DAAF05-5A72-46D2-A7C5-C3759697E943}) (Version: 2.1.0 - Microsoft)
Taalpakket voor Microsoft Visual Studio 2010 Tools for Office Runtime (x64) - NLD (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - NLD) (Version: 10.0.50903 - Microsoft Corporation)
TCX Converter 2.0.32 (HKLM-x32\...\{9F74B6DE-B89C-4532-AFED-5AB0CCAAC1DF}_is1) (Version: - DDAAXX)
Teams Machine-Wide Installer (HKLM-x32\...\{39AF0813-FA7B-4860-ADBE-93B9B214B914}) (Version: 1.2.0.19260 - Microsoft Corporation)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{16AD6161-2E47-4BF1-AA77-0946EFE93E08}) (Version: 2.61.0.0 - Microsoft Corporation)
UsbRepairTool (HKLM-x32\...\{F8762A81-32B5-4144-9F3C-9274F515A651}) (Version: 1.4.0.0 - Brother Industries, Ltd.) Hidden
WhatsApp (HKU\S-1-5-21-2445662121-783166287-1001228566-1001\...\WhatsApp) (Version: 2.2119.6 - WhatsApp)
WhoCrashed 5.51 (HKLM\...\WhoCrashed_is1) (Version: - Resplendence Software Projects Sp.)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin)

Packages:
=========
AdBlock -> C:\Program Files\WindowsApps\BetaFish.AdBlock_2.13.0.0_neutral__c1wakc4j0nefm [2020-01-10] (BetaFish)
Candy Crush Saga -> C:\Program Files\WindowsApps\king.com.CandyCrushSaga_1.2020.2.0_x86__kgqvnymyfvs32 [2021-05-18] (king.com)
Foto's-invoegtoepassing -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2021.39122.10110.0_x64__8wekyb3d8bbwe [2021-03-12] (Microsoft Corporation)
LastPass: Free Password Manager -> C:\Program Files\WindowsApps\LastPass.LastPassFreePasswordManager_4.69.0.0_neutral__qq0fmhteeht3j [2021-04-10] (LastPass)
Media-engine-invoegtoepassing voor Foto's -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2020-04-04] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1808.3.0_x64__8wekyb3d8bbwe [2020-08-02] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-14] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-14] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.9.5060.0_x64__8wekyb3d8bbwe [2021-05-12] (Microsoft Studios) [MS Ad]
RoboForm Password Manager -> C:\Program Files\WindowsApps\SiberSystemsInc.RoboFormEdge_8.5.7.0_x86__7kk3kr9e0p1np [2019-12-29] (Siber Systems Inc)
Twitter -> C:\Program Files\WindowsApps\9E2F88E3.Twitter_6.1.4.1000_neutral__wgeqdkkx372wm [2018-09-09] (Twitter Inc.)
uBlock Origin -> C:\Program Files\WindowsApps\37833NikRolls.uBlockOrigin_1.15.24.0_neutral__f8jsg5mm64m62 [2019-08-28] (Nik Rolls)

==================== Aangepaste CLSID (gefilterd): ==============

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

CustomCLSID: HKU\S-1-5-21-2445662121-783166287-1001228566-1001_Classes\CLSID\{004B49B7-11B9-5058-AA22-08DD0A3ADC4B}\InprocServer32 -> {1F52C4EC-9468-D082-BA54-23EE85889A47} => Geen bestand
CustomCLSID: HKU\S-1-5-21-2445662121-783166287-1001228566-1001_Classes\CLSID\{004B49B7-11B9-5058-FF22-08DD093ADC4B}\InprocServer32 -> {18AC1D84-9468-D082-D28D-DDE985889A47} => Geen bestand
CustomCLSID: HKU\S-1-5-21-2445662121-783166287-1001228566-1001_Classes\CLSID\{144DF3B2-2402-47AE-9583-5A045929A8D4}\InprocServer32 -> C:\Users\Gebruiker\AppData\Local\Google\Update\1.3.33.5\psuser_64.dll => Geen bestand
CustomCLSID: HKU\S-1-5-21-2445662121-783166287-1001228566-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\Gebruiker\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.19163.4\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2445662121-783166287-1001228566-1001_Classes\CLSID\{46406D82-6EC0-47CC-8A75-1F33C6DEDBBE}\InprocServer32 -> C:\Users\Gebruiker\AppData\Local\Google\Update\1.3.35.442\psuser_64.dll => Geen bestand
CustomCLSID: HKU\S-1-5-21-2445662121-783166287-1001228566-1001_Classes\CLSID\{540C17A8-04F2-4B66-95D7-B2FEF9A19B54}\InprocServer32 -> C:\Users\Gebruiker\AppData\Local\Google\Update\1.3.35.422\psuser_64.dll => Geen bestand
CustomCLSID: HKU\S-1-5-21-2445662121-783166287-1001228566-1001_Classes\CLSID\{590C4387-5EBD-4D46-8A84-CD0BA2EF2856}\InprocServer32 -> C:\Users\Gebruiker\AppData\Local\Google\Update\1.3.30.3\psuser_64.dll => Geen bestand
CustomCLSID: HKU\S-1-5-21-2445662121-783166287-1001228566-1001_Classes\CLSID\{59B55F04-DE14-4BB8-92FF-C4A22EF2E5F4}\InprocServer32 -> C:\Users\Gebruiker\AppData\Local\Google\Update\1.3.31.5\psuser_64.dll => Geen bestand
CustomCLSID: HKU\S-1-5-21-2445662121-783166287-1001228566-1001_Classes\CLSID\{62634D95-960B-4834-8E71-A70408AD8FD9}\InprocServer32 -> C:\Users\Gebruiker\AppData\Local\Google\Update\1.3.34.7\psuser_64.dll => Geen bestand
CustomCLSID: HKU\S-1-5-21-2445662121-783166287-1001228566-1001_Classes\CLSID\{6D264B70-DA18-401D-910C-B202D89670C6}\InprocServer32 -> C:\Users\Gebruiker\AppData\Local\Google\Update\1.3.36.32\psuser_64.dll => Geen bestand
CustomCLSID: HKU\S-1-5-21-2445662121-783166287-1001228566-1001_Classes\CLSID\{793EE463-1304-471C-ADF1-68C2FFB01247}\InprocServer32 -> C:\Users\Gebruiker\AppData\Local\Google\Update\1.3.29.6\psuser_64.dll => Geen bestand
CustomCLSID: HKU\S-1-5-21-2445662121-783166287-1001228566-1001_Classes\CLSID\{84EB3779-151B-4C71-AEF0-A0FEE9481401}\InprocServer32 -> C:\Users\Gebruiker\AppData\Local\Google\Update\1.3.35.342\psuser_64.dll => Geen bestand
CustomCLSID: HKU\S-1-5-21-2445662121-783166287-1001228566-1001_Classes\CLSID\{85D8EE2F-794F-41F0-BB03-49D56A23BEF4}\InprocServer32 -> C:\Users\Gebruiker\AppData\Local\Google\Update\1.3.36.82\psuser_64.dll (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-2445662121-783166287-1001228566-1001_Classes\CLSID\{86508D42-E5D7-4D10-9C6F-D427AEEB85B5}\InprocServer32 -> C:\Users\Gebruiker\AppData\Local\Google\Update\1.3.34.11\psuser_64.dll => Geen bestand
CustomCLSID: HKU\S-1-5-21-2445662121-783166287-1001228566-1001_Classes\CLSID\{8C46158B-D978-483C-A312-16EE5013BE04}\InprocServer32 -> C:\Users\Gebruiker\AppData\Local\Google\Update\1.3.33.3\psuser_64.dll => Geen bestand
CustomCLSID: HKU\S-1-5-21-2445662121-783166287-1001228566-1001_Classes\CLSID\{91A41FCC-BC02-42D8-A36E-0D27FF9BFFC8}\InprocServer32 -> C:\Users\Gebruiker\AppData\Local\Google\Update\1.3.33.7\psuser_64.dll => Geen bestand
CustomCLSID: HKU\S-1-5-21-2445662121-783166287-1001228566-1001_Classes\CLSID\{A804CF1A-91E5-4F0C-9E8C-DB39E74056DD}\InprocServer32 -> C:\Users\Gebruiker\AppData\Local\Google\Update\1.3.33.23\psuser_64.dll => Geen bestand
CustomCLSID: HKU\S-1-5-21-2445662121-783166287-1001228566-1001_Classes\CLSID\{CA8FA699-91CD-412F-9D13-9B1222F4370E}\InprocServer32 -> C:\Users\Gebruiker\AppData\Local\Google\Update\1.3.36.82\psuser_64.dll (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-2445662121-783166287-1001228566-1001_Classes\CLSID\{CA919489-0396-4164-A6E7-94CDED45A707}\InprocServer32 -> C:\Users\Gebruiker\AppData\Local\Google\Update\1.3.36.52\psuser_64.dll => Geen bestand
CustomCLSID: HKU\S-1-5-21-2445662121-783166287-1001228566-1001_Classes\CLSID\{CB492AF1-2CEF-4E58-BE47-471C77D0C8BA}\InprocServer32 -> C:\Users\Gebruiker\AppData\Local\Google\Update\1.3.32.7\psuser_64.dll => Geen bestand
CustomCLSID: HKU\S-1-5-21-2445662121-783166287-1001228566-1001_Classes\CLSID\{CB965DF1-B8EA-49C7-BDAD-5457FDC1BF92}\InprocServer32 -> C:\Users\Gebruiker\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.19163.4\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2445662121-783166287-1001228566-1001_Classes\CLSID\{CC182BE1-84CE-4A57-B85C-FD4BBDF78CB2}\InprocServer32 -> C:\Users\Gebruiker\AppData\Local\Google\Update\1.3.29.1\psuser_64.dll => Geen bestand
CustomCLSID: HKU\S-1-5-21-2445662121-783166287-1001228566-1001_Classes\CLSID\{D1EDC4F5-7F4D-4B12-906A-614ECF66DDAF}\InprocServer32 -> C:\Users\Gebruiker\AppData\Local\Google\Update\1.3.28.15\psuser_64.dll => Geen bestand
CustomCLSID: HKU\S-1-5-21-2445662121-783166287-1001228566-1001_Classes\CLSID\{DD0822AA-3A0A-4BDC-B749-4B00B9115850}\InprocServer32 -> {546E91D8-9468-D082-8E01-1FA585889A47} => Geen bestand
CustomCLSID: HKU\S-1-5-21-2445662121-783166287-1001228566-1001_Classes\CLSID\{DD0822FF-3A09-4BDC-B749-4B00B9115850}\InprocServer32 -> {5A939AA5-9468-D082-F30A-E2AB85889A47} => Geen bestand
CustomCLSID: HKU\S-1-5-21-2445662121-783166287-1001228566-1001_Classes\CLSID\{DEDF773D-E27B-485E-8E7D-85C5B0EB5A67}\InprocServer32 -> C:\Users\Gebruiker\AppData\Local\Google\Update\1.3.36.72\psuser_64.dll => Geen bestand
CustomCLSID: HKU\S-1-5-21-2445662121-783166287-1001228566-1001_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1A} -> [Dropbox] => F:\Frans\Documenten\Dropbox [2015-09-04 21:43]
CustomCLSID: HKU\S-1-5-21-2445662121-783166287-1001228566-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Gebruiker\AppData\Local\Google\Update\1.3.36.82\psuser_64.dll (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-2445662121-783166287-1001228566-1001_Classes\CLSID\{E9E7529D-7F09-410B-AF2A-CC154473B19C}\InprocServer32 -> C:\Users\Gebruiker\AppData\Local\Google\Update\1.3.35.452\psuser_64.dll => Geen bestand
CustomCLSID: HKU\S-1-5-21-2445662121-783166287-1001228566-1001_Classes\CLSID\{EA724FD3-844D-43A9-A8C9-A5BC35FC20E4}\InprocServer32 -> C:\Users\Gebruiker\AppData\Local\Google\Update\1.3.33.17\psuser_64.dll => Geen bestand
CustomCLSID: HKU\S-1-5-21-2445662121-783166287-1001228566-1001_Classes\CLSID\{EF076C91-DC9E-43E3-84ED-3D219E065A4F}\InprocServer32 -> C:\Users\Gebruiker\AppData\Local\Google\Update\1.3.35.302\psuser_64.dll => Geen bestand
ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2021-05-21] (Avast Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2021-05-21] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2015-12-31] (Igor Pavlov) [Bestand niet getekend]
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2021-05-21] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2021-05-21] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2021-05-21] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2015-12-31] (Igor Pavlov) [Bestand niet getekend]
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Geen bestand
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2017-10-20] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2020-10-01] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2015-12-31] (Igor Pavlov) [Bestand niet getekend]
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2021-05-21] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2021-05-21] (Malwarebytes Corporation -> Malwarebytes)

==================== Codecs (gefilterd) ====================

==================== Snelkoppelingen & WMI ========================

==================== Geladen Modules (gefilterd) =============

2020-04-01 22:27 - 2018-05-02 15:25 - 000091648 _____ () [Bestand niet getekend] C:\WINDOWS\system32\BrNetSti.dll
2020-04-01 22:27 - 2005-04-22 13:36 - 000143360 _____ () [Bestand niet getekend] C:\WINDOWS\system32\BrSNMP64.dll
2016-04-08 19:30 - 2015-12-31 16:15 - 000077312 _____ (Igor Pavlov) [Bestand niet getekend] C:\Program Files\7-Zip\7-zip.dll

==================== Alternate Data Streams (gefilterd) ========

==================== Veilige Modus (gefilterd) ==================

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. De waarde van "AlternateShell" wordt hersteld.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Bestandskoppeling (gefilterd) =================

==================== Internet Explorer (gefilterd) ==========

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-2445662121-783166287-1001228566-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\S-1-5-21-2445662121-783166287-1001228566-1001 -> DefaultScope {CA2F8E4B-52B3-4B34-9F74-63FFBC14A0B4} URL = hxxp://www.google.nl/search?hl=nl&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2445662121-783166287-1001228566-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2445662121-783166287-1001228566-1001 -> {CA2F8E4B-52B3-4B34-9F74-63FFBC14A0B4} URL = hxxp://www.google.nl/search?hl=nl&q={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2021-03-12] (Microsoft Corporation -> Microsoft Corporation)
BHO: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll [2021-05-15] (Siber Systems -> Siber Systems Inc.)
BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2015-09-22] (Eyeo GmbH -> Eyeo GmbH)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2021-03-12] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll [2021-05-15] (Siber Systems -> Siber Systems Inc.)
BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2015-09-22] (Eyeo GmbH -> Eyeo GmbH)
Toolbar: HKLM - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll [2021-05-15] (Siber Systems -> Siber Systems Inc.)
Toolbar: HKLM-x32 - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll [2021-05-15] (Siber Systems -> Siber Systems Inc.)
Toolbar: HKU\S-1-5-21-2445662121-783166287-1001228566-1001 -> &RoboForm Toolbar - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll [2021-05-15] (Siber Systems -> Siber Systems Inc.)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2021-05-12] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2021-05-12] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2021-05-12] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2021-05-12] (Microsoft Corporation -> Microsoft Corporation)

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd.)

IE trusted site: HKU\S-1-5-21-2445662121-783166287-1001228566-1001\...\sharepoint.com -> hxxps://hfbr-files.sharepoint.com

==================== Hosts inhoud: =========================

(Indien nodig kan Hosts:-opdracht worden opgenomen in de fixlist om Hosts te resetten.)

2015-07-10 13:04 - 2015-07-10 13:02 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Andere gebieden ===========================

(Momenteel is er geen automatische fix voor dit onderdeel.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR
HKU\S-1-5-21-2445662121-783166287-1001228566-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img1.jpg
DNS Servers: 8.8.4.4 - 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall is ingeschakeld.

==================== MSCONFIG/TASK MANAGER Uitgeschakelde items ==

(Als een item is opgenomen in de fixlist, zal het worden verwijderd.)

HKLM\...\StartupApproved\Run32: => "PSUAMain"
HKLM\...\StartupApproved\Run32: => "ControlCenter4"
HKU\S-1-5-21-2445662121-783166287-1001228566-1001\...\StartupApproved\StartupFolder: => "Verzenden naar OneNote.lnk"
HKU\S-1-5-21-2445662121-783166287-1001228566-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2445662121-783166287-1001228566-1001\...\StartupApproved\Run: => "com.squirrel.Teams.Teams"
HKU\S-1-5-21-2445662121-783166287-1001228566-1001\...\StartupApproved\Run: => "Lync"

==================== Firewall regels (gefilterd) ================

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

FirewallRules: [{732B157F-E944-4905-9120-F8B269E83A83}] => (Allow) LPort=54925
FirewallRules: [UDP Query User{8DF5E724-CAD2-45CC-8C06-3B96414D2575}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [TCP Query User{561017BD-01E8-4F2B-9F1D-2417A12FAFB9}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{9BF49C19-EBBF-4A2B-B849-D929A07B9C8C}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{2263E910-0E93-432B-86D7-8F60A65F3B4D}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{15F6BA00-E84D-4258-B6F9-BAC31F875A71}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{5FBC8FD7-C0E2-401F-B965-854A33464616}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{2A77C384-2309-4B2E-876C-BF445F66B1E0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{887FB506-612E-4239-8A19-96DEB9B2B069}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{78CA98DC-9144-44C9-84FC-1F353498C9DF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{410E7FD3-024A-4B0C-8C74-C4283499166B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{B48D832D-2C5A-43EF-B789-8E5F24448304}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{7245B6AD-C23E-49D8-9368-BF052703EB86}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{9D734061-9CF1-4432-9C99-EDC8AB458F5C}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{D00D53B6-3CB4-4C7C-8E8D-4FBE10215DB6}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{C3742118-34E8-4A06-B21E-4BB3221BB76A}] => (Allow) LPort=54950
FirewallRules: [{68908DAC-985F-4C0B-8F27-12BBD29F2FC0}] => (Allow) LPort=54955
FirewallRules: [{6ED4A010-7F7E-4E11-9872-4A0CA2D495C8}] => (Allow) C:\Program Files\Siber Systems\GoodSync\gs-server.exe (Siber Systems -> )
FirewallRules: [{FB8F638B-B0D3-4B09-A083-481CB55FC920}] => (Allow) C:\Program Files\Siber Systems\GoodSync\goodsync.exe (Siber Systems -> )
FirewallRules: [{FD4A64A1-C5B8-4C8A-AF75-9E6D28D36A3B}] => (Allow) C:\Program Files\Siber Systems\GoodSync\gsexplorer.exe (Siber Systems -> )
FirewallRules: [{5E3F462E-73BD-477D-81F7-A96C5C3B2400}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{C303AA52-6D19-454D-B142-4D6E059FA502}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{7A4020DD-AD0A-4954-ACF7-BAFDEE3E57C3}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{8416BB8C-61E5-458A-A76B-BC6EB29E4BDE}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{751283D3-0CCA-4D92-9F70-06D6B85D914F}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FirewallRules: [{59A0E98A-69C8-4589-BBB7-6B82130EC4E2}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\90.0.818.62\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{199C59C7-E929-4A14-A19F-04CBBFAEBA70}] => (Allow) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe (Avast Software s.r.o. -> AVAST Software)

==================== Herstelpunten =========================

12-05-2021 13:23:52 Gepland controlepunt
21-05-2021 08:52:48 Installatieprogramma voor Windows-modules

==================== Defecte Apparaatbeheer Apparaten ============


==================== Eventlog fouten: ========================

Applicatiefouten:
==================
Error: (05/21/2021 12:31:16 PM) (Source: WorkflowAppControl) (EventID: 32767) (User: )
Description: Start Broadcast Receiver Server...

Error: (05/21/2021 12:31:16 PM) (Source: WorkflowAppControl) (EventID: 32767) (User: )
Description: Start Server...

Error: (05/21/2021 12:31:16 PM) (Source: WorkflowAppControl) (EventID: 32767) (User: )
Description: Wait Workflow Commands request from device.

Error: (05/21/2021 12:31:16 PM) (Source: WorkflowAppControl) (EventID: 32767) (User: )
Description: Start Server...

Error: (05/21/2021 12:31:16 PM) (Source: WorkflowAppControl) (EventID: 32767) (User: )
Description: Host.AddressList[1]: 192.168.8.103

Error: (05/21/2021 12:31:16 PM) (Source: WorkflowAppControl) (EventID: 32767) (User: )
Description: Host.AddressList[0]: ::1

Error: (05/21/2021 12:31:16 PM) (Source: WorkflowAppControl) (EventID: 32767) (User: )
Description: Host.AddressList.Length: 2

Error: (05/21/2021 12:31:16 PM) (Source: USBAppControl) (EventID: 32767) (User: )
Description: Wait Workflow Commands request from device.


Systeemfouten:
=============
Error: (05/21/2021 12:32:32 PM) (Source: DCOM) (EventID: 10010) (User: FRANS-GIGA)
Description: De server {F2189AE3-E432-427F-93B6-38D1C6F5E8D4} heeft zich niet binnen de vereiste termijn bij DCOM geregistreerd.

Error: (05/21/2021 11:00:04 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: De panda_url_filtering Service-service is onverwacht beëindigd. Dit is nu 1 keer gebeurd.

Error: (05/21/2021 10:37:48 AM) (Source: DCOM) (EventID: 10010) (User: FRANS-GIGA)
Description: De server {F2189AE3-E432-427F-93B6-38D1C6F5E8D4} heeft zich niet binnen de vereiste termijn bij DCOM geregistreerd.

Error: (05/18/2021 08:55:39 PM) (Source: DCOM) (EventID: 10010) (User: FRANS-GIGA)
Description: De server microsoft.windowscommunicationsapps_16005.13426.20920.0_x64__8wekyb3d8bbwe!microsoft.windowslive.calendar.AppXwkn9j84yh1kvnt49k5r8h6y1ecsv09hs.mca heeft zich niet binnen de vereiste termijn bij DCOM geregistreerd.

Error: (05/13/2021 09:06:34 PM) (Source: DCOM) (EventID: 10010) (User: FRANS-GIGA)
Description: De server {F2189AE3-E432-427F-93B6-38D1C6F5E8D4} heeft zich niet binnen de vereiste termijn bij DCOM geregistreerd.

Error: (05/12/2021 10:45:09 PM) (Source: DCOM) (EventID: 10010) (User: FRANS-GIGA)
Description: De server {9BA05972-F6A8-11CF-A442-00A0C90A8F39} heeft zich niet binnen de vereiste termijn bij DCOM geregistreerd.

Error: (05/12/2021 01:17:35 PM) (Source: volsnap) (EventID: 36) (User: )
Description: Bij de schaduwkopieën van volume C: zijn afgebroken omdat de schaduwkopieopslag niet kan worden uitgebreid vanwege een door de gebruiker opgelegde limiet.

Error: (05/09/2021 12:52:35 PM) (Source: Service Control Manager) (EventID: 7030) (User: )
Description: De Foxit Reader Update Service-service staat aangeduid als een interactieve service. Het systeem is echter zodanig geconfigureerd dat interactieve services niet zijn toegestaan. Deze service werkt mogelijk niet juist.


Windows Defender:
================
Date: 2021-05-21 12:26:22
Description:
Microsoft Defender Antivirus heeft malware of andere mogelijke ongewenste software gedetecteerd.
Zie het volgende voor meer informatie:
Naam: Program:Win32/Wacapew.C!ml
Ernst: Laag
Categorie: Mogelijk ongewenste software
Pad: file:_F:\Frans\Downloads\FRST64.exe; webfile:_F:\Frans\Downloads\FRST64.exe|https://download.bleepingcomputer.c...exe|pid:16200,ProcessStart:132660663795635481
Detectieoorsprong: Internet
Detectietype: Snel pad
Detectiebron: Downloads en bijlagen
Gebruiker: FRANS-GIGA\Gebruiker
Procesnaam: Unknown
Versie van beveiligingsinformatie: AV: 1.339.1151.0, AS: 1.339.1151.0, NIS: 1.339.1151.0
Engineversie: AM: 1.1.18100.6, NIS: 1.1.18100.6

Date: 2021-05-21 10:59:39
Description:
Microsoft Defender Antivirus heeft malware of andere mogelijke ongewenste software gedetecteerd.
Zie het volgende voor meer informatie:
Naam: PUA:Win32/NetFilter
Ernst: Laag
Categorie: Mogelijk ongewenste software
Pad: file:_C:\Program Files (x86)\pandasecuritytb\uninstall.exe; file:_C:\Program Files\Panda Security URL Filtering\Panda_URL_Filteringb.exe; file:_C:\Program Files\Panda Security URL Filtering\uninstall.exe; process:_pid:4284,ProcessStart:132660591570270045; regkey:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Panda Security URL Filtering; regkey:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\pandasecuritytb; service:_panda_url_filtering; uninstall:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Panda Security URL Filtering; uninstall:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\pandasecuritytb
Detectieoorsprong: Lokale computer
Detectietype: Snel pad
Detectiebron: Systeem
Gebruiker: NT AUTHORITY\SYSTEM
Procesnaam: C:\Program Files\Panda Security URL Filtering\Panda_URL_Filteringb.exe
Versie van beveiligingsinformatie: AV: 1.339.1151.0, AS: 1.339.1151.0, NIS: 1.339.1151.0
Engineversie: AM: 1.1.18100.6, NIS: 1.1.18100.6

Date: 2021-05-21 10:36:35
Description:
Scan van Microsoft Defender Antivirus is gestopt voordat deze was voltooid.
Scan-id: {A594EDAC-60F8-4B2A-87D9-7A4E17E9E1EA}
Type scan: Antimalware
Scanparameters: Snelle scan
Gebruiker: NT AUTHORITY\SYSTEM

Date: 2021-05-21 09:52:42
Description:
Microsoft Defender Antivirus heeft malware of andere mogelijke ongewenste software gedetecteerd.
Zie het volgende voor meer informatie:
Naam: App:ImgBurn_BundleInstaller
Ernst: Laag
Categorie: Mogelijk ongewenste software
Pad: file:_F:\Frans\Documenten\Dropbox\Software Harry\Imageburn boot\SetupImgBurn_2.5.5.0.exe
Detectieoorsprong: Lokale computer
Detectietype: Concreet
Detectiebron: Gebruiker
Gebruiker: FRANS-GIGA\Gebruiker
Procesnaam: Unknown
Versie van beveiligingsinformatie: AV: 1.339.1151.0, AS: 1.339.1151.0, NIS: 1.339.1151.0
Engineversie: AM: 1.1.18100.6, NIS: 1.1.18100.6

Date: 2021-05-21 09:52:41
Description:
Microsoft Defender Antivirus heeft malware of andere mogelijke ongewenste software gedetecteerd.
Zie het volgende voor meer informatie:
Naam: PUA:Win32/NetFilter
Ernst: Laag
Categorie: Mogelijk ongewenste software
Pad: bho:_HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4}; bho:_HKLM\SOFTWARE\Wow6432Node\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4}; clsid:_HKLM\SOFTWARE\CLASSES\CLSID\{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4}; clsid:_HKLM\SOFTWARE\CLASSES\Wow6432Node\CLSID\{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4}; clsid:_HKLM\SOFTWARE\Wow6432Node\CLASSES\CLSID\{B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4}; driver:_panda_url_filteringd; file:_C:\Program Files (x86)\pandasecuritytb\ffHelper.exe; file:_C:\Program Files (x86)\pandasecuritytb\ieUtils.exe; file:_C:\Program Files (x86)\pandasecuritytb\pandasecurityDx.dll; file:_C:\Program Files (x86)\pandasecuritytb\pandasecurityDx64.dll; file:_C:\Program Files (x86)\pandasecuritytb\pandasecuritytb.dll; file:_C:\Program Files (x86)\pandasecuritytb\pandasecuritytb64.dll; file:_C:\Program Files (x86)\pandasecuritytb\ToolbarCleaner.exe; file:_C:\Program Files (x86)\panda
Detectieoorsprong: Lokale computer
Detectietype: Concreet
Detectiebron: Gebruiker
Gebruiker: FRANS-GIGA\Gebruiker
Procesnaam: C:\Program Files\Panda Security URL Filtering\Panda_URL_Filteringb.exe
Versie van beveiligingsinformatie: AV: 1.339.1151.0, AS: 1.339.1151.0, NIS: 1.339.1151.0
Engineversie: AM: 1.1.18100.6, NIS: 1.1.18100.6

Date: 2021-05-07 08:41:03
Description:
Microsoft Defender Antivirus heeft een fout ontdekt tijdens het bijwerken van beveiligingsinformatie.
Nieuwe versie van beveiligingsinformatie: 1.339.83.0
Vorige versie van beveiligingsinformatie: 1.337.684.0
Updatebron: Gebruiker
Type beveiligingsinformatie: AntiSpyware
Updatetype: Delta
Gebruiker: NT AUTHORITY\SYSTEM
Huidige engineversie: 1.1.18100.6
Vorige engineversie: 1.1.18100.5
Foutcode: 0x80070666
Foutbeschrijving: Er is al een andere versie van dit product geïnstalleerd. Kan de installatie van deze versie niet voltooien. Gebruik het onderdeel Programma's van het Configuratiescherm om de bestaande versie van dit product te configureren of te verwijderen.

Date: 2021-05-07 08:41:03
Description:
Microsoft Defender Antivirus heeft een fout ontdekt tijdens het bijwerken van beveiligingsinformatie.
Nieuwe versie van beveiligingsinformatie: 1.339.83.0
Vorige versie van beveiligingsinformatie: 1.337.684.0
Updatebron: Gebruiker
Type beveiligingsinformatie: AntiVirus
Updatetype: Delta
Gebruiker: NT AUTHORITY\SYSTEM
Huidige engineversie: 1.1.18100.6
Vorige engineversie: 1.1.18100.5
Foutcode: 0x80070666
Foutbeschrijving: Er is al een andere versie van dit product geïnstalleerd. Kan de installatie van deze versie niet voltooien. Gebruik het onderdeel Programma's van het Configuratiescherm om de bestaande versie van dit product te configureren of te verwijderen.

Date: 2021-05-07 08:41:03
Description:
Microsoft Defender Antivirus heeft een fout aangetroffen bij het bijwerken van de engine.
Nieuwe engineversie: 1.1.18100.6
Vorige engineversie: 1.1.18100.5
Gebruiker: NT AUTHORITY\SYSTEM
Foutcode: 0x80070666
Foutbeschrijving: Er is al een andere versie van dit product geïnstalleerd. Kan de installatie van deze versie niet voltooien. Gebruik het onderdeel Programma's van het Configuratiescherm om de bestaande versie van dit product te configureren of te verwijderen.

Date: 2021-05-06 22:17:07
Description:
Microsoft Defender Antivirus heeft een fout ontdekt tijdens het bijwerken van beveiligingsinformatie.
Nieuwe versie van beveiligingsinformatie: 1.339.83.0
Vorige versie van beveiligingsinformatie: 1.337.684.0
Updatebron: Gebruiker
Type beveiligingsinformatie: AntiSpyware
Updatetype: Delta
Gebruiker: NT AUTHORITY\SYSTEM
Huidige engineversie: 1.1.18100.6
Vorige engineversie: 1.1.18100.5
Foutcode: 0x80070666
Foutbeschrijving: Er is al een andere versie van dit product geïnstalleerd. Kan de installatie van deze versie niet voltooien. Gebruik het onderdeel Programma's van het Configuratiescherm om de bestaande versie van dit product te configureren of te verwijderen.

Date: 2021-05-06 22:17:07
Description:
Microsoft Defender Antivirus heeft een fout ontdekt tijdens het bijwerken van beveiligingsinformatie.
Nieuwe versie van beveiligingsinformatie: 1.339.83.0
Vorige versie van beveiligingsinformatie: 1.337.684.0
Updatebron: Gebruiker
Type beveiligingsinformatie: AntiVirus
Updatetype: Delta
Gebruiker: NT AUTHORITY\SYSTEM
Huidige engineversie: 1.1.18100.6
Vorige engineversie: 1.1.18100.5
Foutcode: 0x80070666
Foutbeschrijving: Er is al een andere versie van dit product geïnstalleerd. Kan de installatie van deze versie niet voltooien. Gebruik het onderdeel Programma's van het Configuratiescherm om de bestaande versie van dit product te configureren of te verwijderen.

CodeIntegrity:
===============
Date: 2021-05-21 12:42:12
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume2\Program Files\Avast Software\Avast\aswAMSI.dll that did not meet the Microsoft signing level requirements.

Date: 2021-05-21 12:42:11
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Avast Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2021-05-21 12:41:50
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\SecurityHealthService.exe) attempted to load \Device\HarddiskVolume2\Program Files\Avast Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.


==================== Geheugen info ===========================

BIOS: American Megatrends Inc. F2 08/11/2015
Moederbord: Gigabyte Technology Co., Ltd. H81M-S2H
Processor: Intel(R) Core(TM) i5-4460 CPU @ 3.20GHz
Percentage geheugen in gebruik: 63%
Totaal fysiek RAM-geheugen: 8090.28 MB
Beschikbaar fysiek RAM-geheugen: 2925.47 MB
Totaal Virtueel geheugen: 17818.28 MB
Beschikbaar Virtueel geheugen: 11444.29 MB

==================== Schijven ================================

Drive c: () (Fixed) (Total:464.76 GB) (Free:392.31 GB) NTFS
Drive f: (Data) (Fixed) (Total:1863.01 GB) (Free:1639.95 GB) NTFS

\\?\Volume{ee84f6c9-0000-0000-0000-100000000000}\ (Door systeem gereserveerd) (Fixed) (Total:0.49 GB) (Free:0.45 GB) NTFS
\\?\Volume{ee84f6c9-0000-0000-0000-d04f74000000}\ () (Fixed) (Total:0.51 GB) (Free:0.08 GB) NTFS

==================== MBR & Partitietabel ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: EE84F6C9)
Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=464.8 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=524 MB) - (Type=27)

==========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 1863 GB) (Disk ID: 8448FC08)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

==================== Einde van Addition.txt =======================
 
Volgens de log zou Avast uit staan en Panda aan staan.

AV: Windows Defender (Disabled)
AV: Avast Antivirus (Disabled)
AV: Malwarebytes (Disabled)
AS: Windows Defender (Disabled)
AS: Panda Dome (Enabled)

Ik zou zelf Panda en Avast verwijderen en Windows Defender gebruiken.
Komt tegenwoordig zeer goed uit de test en is heel licht.

Om te kijken of de rommel wel is scan eens met de volgende scanner.
Laat even weten of hij iets vindt.
 
Status
Niet open voor verdere reacties.
Steun Ons

Nieuwste berichten

Terug
Bovenaan