Trage opstart laptop

[blusopa]

Hallo, mijn labtop start traag op, ik heb Ccleaner, mailware bytes en ADWcleaner er al overheen gedraaid, maar geen succes.
Ik heb een Hijackthis log gemaakt, zie jij een oorzaak?
Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 8:28:29, on 2-10-2017
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.10240.17443)


Boot mode: Normal

Running processes:
C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe
C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fi.exe
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
C:\Users\Meeuwes\Desktop\HijackThis.exe
C:\WINDOWS\SysWOW64\NOTEPAD.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = www.google.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Outlook en Skype inloggen - Laatste nieuws - MSN Nederland
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll
O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~4\Office14\GROOVEEX.DLL
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~4\Office14\URLREDIR.DLL
O2 - BHO: Microsoft OneDrive for Business Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~4\Office16\GROOVEEX.DLL
O3 - Toolbar: Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [Chromium] "c:\users\meeuwes\appdata\local\chromium\application\chrome.exe" --auto-launch-at-startup --profile-directory="Default" --restore-last-session --restore-last-session
O4 - HKCU\..\Run: [OfficeSyncProcess] "C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE"
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
O4 - HKCU\..\Run: [HP ENVY 4500 series (NET)] "C:\Program Files\HP\HP ENVY 4500 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN4BL240W505X4:NW" -scfn "HP ENVY 4500 series (NET)" -AutoStart 1
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office16\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print\SmartPrintSetup.exe
O9 - Extra 'Tools' menuitem: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print\SmartPrintSetup.exe
O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Lync - klikken om te bellen - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync - klikken om te bellen - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - http://game.zylom.com/activex/zylomgamesplayer.cab
O18 - Protocol: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE16\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\ProgramData\Faxtip\Doublefax.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Bitdefender RedLine Service (bdredline) - Bitdefender - C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @mqutil.dll,-6102 (MSMQ) - Unknown owner - C:\WINDOWS\system32\mqsvc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\ngcsvc.dll,-100 (NgcSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Bitdefender Desktop Update Service (UPDATESRV) - Bitdefender - C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: Bitdefender Virus Shield (VSSERV) - Bitdefender - C:\Program Files\Bitdefender\Bitdefender Security\vsserv.exe
O23 - Service: Bitdefender Protected Service (vsservp) - Bitdefender - C:\Program Files\Bitdefender\Bitdefender Security\vsservp.exe
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12199 bytes

Groet Blusopa.

 

[Aarie25]

Beste Blusopa,

Ik heb jou topic naar de goede plek gezet, zodat Abraham jou verder kan helpen.

 

[Abraham54]

@aarie25 - bedankt.

Hallo Blusopa, Jouw geposte log middels HijackThis heb ik even doorgeken.
Want HijackThis is thans niet meer te gebruiken - mede ook omdat 64-bit comptabiliteit nog steeds niet geïntegreerd is.


Doe daarom nu het volgende: download

Farbar Recovery Scan Tool 32 of 64 bit van één van de onderstaande links
Farbar Recovery Scan Tool 32 bit (x86)
Farbar Recovery Scan Tool 64 bit (x64)
Downloadlokatie: Dit programma absoluut naar het bureaublad downloaden dan wel daar naar toe verplaatsen!
Opmerkingen: Alle openstaande programma's en webpagina's dienen afgesloten te zijn.

Antivirusprogramma en actieve malwarescanners dienen al voor je FRST.exe start gedeaktiveert zijn!
Hier en hier vindt je gegevens hoe antivirusprogramma's en spywarescanners te deaktiveren.

FRST opstarten:

• Windows 2000 en Windows XP: dubbelklik op FRST.exe.
• Windows Vista, Windows 7, Windows 8/8.1 en Windows 10: via rechtsklik op FRST.exe of FRST64.exe en kies voor "Als Administrator uitvoeren".

FRST start op:

• Wanneer het programma is geopend klik dan op de knop Yes bij de disclaimer.
• Druk vervolgens op de Scan knop.
• Aansluitend zal een logbestand - FRST.txt en Addition-txt aangemaakt worden en op het bureaublad opgeslagen worden.
• Post de inhoud van beide logbestanden in jouw volgende bericht.

.

In geval de inhoud van een van de logs of van beide logs te groot is om te posten, kijk dan hier: Hoe een bijlage toevoegen?

 

[Abraham54]

Hallo Blusopa, wil het jou lukken?

 

[blusopa]

Hallo Blusopa, wil het jou lukken?

Ik heb FRST gedraaid bij deze de twee logs.

==================== Bamital & volsnap ======================

(Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.)

C:\WINDOWS\system32\winlogon.exe => Bestand is getekend
C:\WINDOWS\system32\wininit.exe => Bestand is getekend
C:\WINDOWS\explorer.exe => Bestand is getekend
C:\WINDOWS\SysWOW64\explorer.exe => Bestand is getekend
C:\WINDOWS\system32\svchost.exe => Bestand is getekend
C:\WINDOWS\SysWOW64\svchost.exe => Bestand is getekend
C:\WINDOWS\system32\services.exe => Bestand is getekend
C:\WINDOWS\system32\User32.dll => Bestand is getekend
C:\WINDOWS\SysWOW64\User32.dll => Bestand is getekend
C:\WINDOWS\system32\userinit.exe => Bestand is getekend
C:\WINDOWS\SysWOW64\userinit.exe => Bestand is getekend
C:\WINDOWS\system32\rpcss.dll => Bestand is getekend
C:\WINDOWS\system32\dnsapi.dll => Bestand is getekend
C:\WINDOWS\SysWOW64\dnsapi.dll => Bestand is getekend
C:\WINDOWS\system32\Drivers\volsnap.sys => Bestand is getekend

LastRegBack: 2017-09-26 18:04

==================== Eind van FRST.txt ============================

Extra scanresultaten van Farbar Recovery Scan Tool (x64) Versie: 02-10-2017 01
Gestart door Meeuwes (03-10-2017 19:40:23)
Gestart vanaf C:\Users\Meeuwes\Desktop
Windows 10 Home (X64) (2015-08-08 08:15:12)
Boot Modus: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-623294757-697560527-870178117-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-623294757-697560527-870178117-503 - Limited - Disabled)
Gast (S-1-5-21-623294757-697560527-870178117-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-623294757-697560527-870178117-1009 - Limited - Enabled)
Meeuwes (S-1-5-21-623294757-697560527-870178117-1000 - Administrator - Enabled) => C:\Users\Meeuwes

==================== Security Center ========================

(Als een item is opgenomen in de fixlist, zal het worden verwijderd.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Bitdefender Antivirus (Enabled - Up to date) {3FB17364-4FCC-0FA7-6BBF-973897395371}
AS: Bitdefender Antispyware (Enabled - Up to date) {84D09280-69F6-0029-510F-AC4AECBE19CC}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Bitdefender Firewall (Enabled) {078AF241-05A3-0EFF-40E0-3E0D69EA140A}

==================== Geïnstalleerde programma's ======================

(Alleen de adware-programma's met 'verborgen' vlag zou kunnen worden toegevoegd aan de fixlist om ze zichtbaar te maken. De adware-programma's moeten handmatig gedeinstallerd worden.)

Aangifte inkomstenbelasting 2012 (HKLM-x32\...\Aangifte inkomstenbelasting 2012) (Version: - Belastingdienst)
ABBYY FineReader 9.0 Sprint (HKLM-x32\...\{F9000000-0018-0000-0000-074957833700}) (Version: 9.01.513.58212 - ABBYY) Hidden
ABBYY FineReader 9.0 Sprint (HKLM-x32\...\ABBYY FineReader 9.0 Sprint) (Version: 9.01.513.58212 - ABBYY)
Acer Backup Manager (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.99 - NTI Corporation)
Acer Crystal Eye Webcam (HKLM-x32\...\{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 1.0.1904 - CyberLink Corp.) Hidden
Acer Crystal Eye Webcam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 1.0.1904 - CyberLink Corp.)
Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 6.00.3008 - Acer Incorporated)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3504 - Acer Incorporated)
Acer Games (HKLM-x32\...\WildTangent acer Master Uninstall) (Version: 1.0.2.5 - WildTangent)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0530.2011 - Acer Incorporated)
Adobe Acrobat Reader DC - Nederlands (HKLM-x32\...\{AC76BA86-7AD7-1043-7B44-AC0F074E4100}) (Version: 17.012.20098 - Adobe Systems Incorporated)
Adobe Community Help (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 3.5.23 - Adobe Systems Incorporated.)
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.3 - Adobe Systems Incorporated)
Adobe Flash Player 27 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 27.0.0.130 - Adobe Systems Incorporated)
Adobe Photoshop Elements 10 (HKLM-x32\...\Adobe Photoshop Elements 10) (Version: 10.0 - Adobe Systems Incorporated)
Advertising Center (HKLM-x32\...\{b2ec4a38-b545-4a00-8214-13fe0e915e6d}) (Version: 0.0.0.1 - Nero AG) Hidden
Agatha Christie - Death on the Nile (HKLM-x32\...\WTA-0666b674-d4b4-4d11-9e72-eac2ff769b08) (Version: 2.2.0.98 - WildTangent) Hidden
Audacity 1.2.6 (HKLM-x32\...\Audacity_is1) (Version: - )
Backup Manager V3 (HKLM-x32\...\{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.99 - NTI Corporation) Hidden
Bejeweled 2 Deluxe (HKLM-x32\...\WTA-8a76024c-be37-4bac-b70f-56aee4f02ee5) (Version: 2.2.0.95 - WildTangent) Hidden
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 21.0.18.898 - Bitdefender)
Bitdefender Internet Security (HKLM\...\Bitdefender) (Version: 22.0.8.118 - Bitdefender)
CCleaner (HKLM\...\CCleaner) (Version: 5.24 - Piriform)
CCleaner 5.06.5219 Business, Technician & Professional Edition (HKLM-x32\...\CCleaner 5.06.5219 Business, Technician & Professional Edition) (Version: 5.06.5219 Business, Technician & Professional Edition - CCleaner)
Chuzzle Deluxe (HKLM-x32\...\WTA-248b539d-72c7-43fc-808f-b18baf0672c0) (Version: 2.2.0.95 - WildTangent) Hidden
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
clear.fi (HKLM-x32\...\{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 1.0.2024.00 - CyberLink Corp.) Hidden
clear.fi (HKLM-x32\...\InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 1.0.2024.00 - CyberLink Corp.)
clear.fi Client (HKLM-x32\...\{43AAE145-83CF-4C96-9A5E-756CEFCE879F}) (Version: 1.00.3500 - Acer Incorporated)
Corel PaintShop Pro X8 (HKLM-x32\...\_{85C69B9B-F9BD-4A60-BD83-F2B7E081ED39}) (Version: 18.2.0.61 - Corel Corporation)
Corel PaintShop Pro X8 (HKLM-x32\...\{8239357B-E792-4EEB-9F8B-F2535730A315}) (Version: 18.0.0.124 - Corel Corporation) Hidden
Crazy Chicken Kart 2 (HKLM-x32\...\WTA-242ad961-ae3f-45d3-8df4-56dde55526ae) (Version: 2.2.0.97 - WildTangent) Hidden
CyberLink PowerDVD 9 (HKLM-x32\...\InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}) (Version: 9.0.1501 - CyberLink Corp.)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Defraggler (HKLM\...\Defraggler) (Version: 2.18 - Piriform)
Disk Cleaner (remove only) (HKLM-x32\...\DiskCleaner) (Version: - )
DolbyFiles (HKLM-x32\...\{b1adf008-e898-4fe2-8a1f-690d9a06acaf}) (Version: 2.0 - Nero AG) Hidden
Download Navigator (HKLM-x32\...\{E728441A-7820-4B1C-87C9-DE7BE37B2953}) (Version: 1.1.0 - SEIKO EPSON CORPORATION)
DVD Shrink 3.2 (HKLM-x32\...\DVD Shrink_is1) (Version: - DVD Shrink)
Elements 10 Organizer (HKLM-x32\...\{22D3A614-482C-444A-932C-9DA1B8ECDFD2}) (Version: 10.0 - Adobe Systems Incorporated) Hidden
Evernote v. 4.5.1 (HKLM-x32\...\{28921580-E4BB-11E0-9FD7-1CC1DEF07CBE}) (Version: 4.5.1.5451 - Evernote Corp.)
FATE (HKLM-x32\...\WTA-221e47f2-af62-4ac5-821a-154ac51a95e3) (Version: 2.2.0.97 - WildTangent) Hidden
FileZilla Client 3.7.4.1 (HKU\S-1-5-21-623294757-697560527-870178117-1000\...\FileZilla Client) (Version: 3.7.4.1 - Tim Kosse)
Final Drive: Nitro (HKLM-x32\...\WTA-f9336108-236e-4b12-918e-5ce2b4a8306a) (Version: 2.2.0.95 - WildTangent) Hidden
Fotogaléria (HKLM-x32\...\{5B87607E-E781-49C5-9891-80990E45BCA1}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotogalerie (HKLM-x32\...\{41BF4A3B-D60A-4E92-883F-C88C8C157261}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotogalerie (HKLM-x32\...\{F37D360D-9308-4BB1-8515-DC6B637B9486}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotogalerija (HKLM-x32\...\{5D5B5672-1A0F-4412-B6A0-3A16706DE82D}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotogalleri (HKLM-x32\...\{85E3592A-8C11-44F4-AABD-F82EF41167AD}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotogalleriet (HKLM-x32\...\{5FF3045E-4A36-4B98-9F7F-48B49F4469C7}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotoğraf Galerisi (HKLM-x32\...\{B743ABDD-E681-4B32-A33E-6E7F3F845AEA}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fotótár (HKLM-x32\...\{6F19A9AE-85C6-4EBB-BADC-CC1B8B9F3F91}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Free WAV to MP3 Converter (HKLM-x32\...\Free WAV to MP3 Converter) (Version: 1.0 - Polaris-Software.com)
Freemake Audio Converter versie 1.1.8 (HKLM-x32\...\Freemake Audio Converter_is1) (Version: 1.1.8 - Ellora Assets Corporation)
Galeria de Fotografias (HKLM-x32\...\{23079EF2-2617-4BFC-BDFF-E6AE8D79B734}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galería de fotos (HKLM-x32\...\{198CEF22-A27F-4DC7-9B66-2C22A4B1CA09}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galeria de Fotos (HKLM-x32\...\{9EE1AE8B-4872-41CA-8C9A-C33D899523E0}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galeria fotogràfica (HKLM-x32\...\{118AAEAF-65EF-41CA-B24B-14732C266C84}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galeria fotografii (HKLM-x32\...\{77655DF6-A143-4A25-A5F8-127C8CE63EDA}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galerie de photos (HKLM-x32\...\{439B34FF-F74E-4807-B5E2-4B758551DA6B}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galerie foto (HKLM-x32\...\{429BEB2D-4EB8-49E6-A135-823FCB2AAAC5}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galerija fotografija (HKLM-x32\...\{343C0612-37DC-4914-95A7-0845EE0C8F04}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Google Earth Pro (HKLM-x32\...\{ECF2E224-42F5-4E50-B58E-94CA70E85697}) (Version: 7.3.0.3832 - Google)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
GrabIt 1.7.2 Beta 6 (build 1008) (HKLM-x32\...\GrabIt_is1) (Version: - Ilan Shemes)
HP ENVY 4500 series Basissoftware van het apparaat (HKLM\...\{E7E2EB53-AA2D-4068-8242-28859DCB7C3A}) (Version: 32.3.198.49673 - Hewlett-Packard Co.)
HP ENVY 4500 series Help (HKLM-x32\...\{8E0DEA5E-822C-4993-8D47-9305D61E6188}) (Version: 30.0.0 - Hewlett Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
ICA (HKLM-x32\...\{85C69B9B-F9BD-4A60-BD83-F2B7E081ED39}) (Version: 18.0.0.124 - Corel Corporation) Hidden
ImagXpress (HKLM-x32\...\{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}) (Version: 7.0.74.0 - Nero AG) Hidden
Insaniquarium Deluxe (HKLM-x32\...\WTA-21c944df-8f1d-4296-860f-e60f6efbb8cf) (Version: 2.2.0.97 - WildTangent) Hidden
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2476 - Intel Corporation)
IPM_PSP_COM (HKLM-x32\...\{80A28CA4-189A-4EB2-9F76-7845A0A83D2A}) (Version: 18.0.0.124 - Corel Corporation) Hidden
IPM_PSP_COM64 (HKLM\...\{842A3E2E-15B2-4D49-A50F-05964CA93374}) (Version: 18.0.0.124 - Corel Corporation) Hidden
Jewel Match 3 (HKLM-x32\...\WTA-d2e680ce-5383-4b06-9ebe-8f4c632aedce) (Version: 2.2.0.97 - WildTangent) Hidden
Jewel Quest Solitaire (HKLM-x32\...\WTA-9505a9ce-4817-45fb-a16c-50700960c463) (Version: 2.2.0.95 - WildTangent) Hidden
John Deere Drive Green (HKLM-x32\...\WTA-5b52d470-c64b-403b-b2ad-9ccd7b7e958c) (Version: 2.2.0.95 - WildTangent) Hidden
Junk Mail filter update (HKLM-x32\...\{0BE9E708-5DC0-4963-9CFD-0AA519090E79}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
KB4023057 (HKLM\...\{264FDD69-C4DF-476F-B1B8-7DCEE4AF839B}) (Version: 2.4.0.0 - Microsoft Corporation)
KMSpico (HKLM\...\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1) (Version: - )
Launch Manager (HKLM-x32\...\LManager) (Version: 5.1.7 - Acer Inc.)
Malwarebytes Anti-Malware versie 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Menu Templates - Starter Kit (HKLM-x32\...\{b78120a0-cf84-4366-a393-4d0a59bc546c}) (Version: 9.4.2.0 - Nero AG) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Office Professional Plus 2016 (HKLM\...\Office16.PROPLUS) (Version: 16.0.4266.1001 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Movie Maker (HKLM-x32\...\{0A0C9DBA-5AB2-43F1-9932-A60DAA6EBEFC}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{0A32B8F3-011F-4E2C-A87D-55791BA1470D}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{0CD05078-D4F3-4006-8726-B01E10A89B28}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{21764A96-6748-4B83-89E7-7A5063BF156C}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{26E474C7-E63A-4EC2-A08C-909B996AA75D}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{312F7EE7-37D0-484D-B974-0CE1B8560C79}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{38F03569-A636-4CF3-BDDE-032C8C251304}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{3B5AAF87-531E-4163-BE79-8989FC249173}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{3D2CF65C-B544-4308-B996-700D3E5F6C4C}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{3DB68967-DC34-41B1-A420-C300716AA51C}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{57430A7B-EB42-41ED-88F8-ACB2DEDB8416}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{5B3D4718-9146-45CB-8989-C4E87B239B3A}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{5D3B997B-DF28-4BC1-82E6-E6C29A53AF6E}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{70C91B91-61E8-4D06-86D6-A9DCC291983A}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{9C82436F-F19C-42A4-B476-F87A28A95BF9}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{A27180D0-17BB-498B-89FF-A72656B85978}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{AC20CAEC-CC13-4877-A7DC-30BC97936645}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{B44E699A-94F8-406C-9A1B-C2574F5863CB}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{B653D7B1-41B5-4982-9A25-E91FF46D131A}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{C05F4139-CB6B-4272-A0BF-861FEB667F27}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DAE8CC57-EBF5-4D46-8572-9A0C769D6F16}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DC5E5027-65E8-41CB-815C-9AAB48BFB8E2}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DEA34BD6-47C4-4505-895D-139327473329}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{E668DD34-04FA-4A11-B07A-8CBA2119401B}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{F215DDB5-BE2A-4453-BABF-8790434F65D0}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{F78F19A8-F3F5-4407-B98B-F23ACC82DBF5}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{F7954B53-8522-450D-B262-B362B440FEC0}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{FDF7A21E-3AEF-46AB-AC22-2BDFF8C9B553}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Templates - Starter Kit (HKLM-x32\...\{e498385e-1c51-459a-b45f-1721e37aa1a0}) (Version: 9.4.2.0 - Nero AG) Hidden
Mozilla Firefox 56.0 (x64 nl) (HKLM\...\Mozilla Firefox 56.0 (x64 nl)) (Version: 56.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 56.0 - Mozilla)
MSVC80_x64_v2 (HKLM\...\{4D668D4F-FAA2-4726-834C-31F4614F312E}) (Version: 1.0.3.0 - Nokia) Hidden
MSVC80_x86_v2 (HKLM-x32\...\{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}) (Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x64 (HKLM\...\{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}) (Version: 1.0.1.2 - Nokia) Hidden
MSVC90_x86 (HKLM-x32\...\{AF111648-99A1-453E-81DD-80DBBF6DAD0D}) (Version: 1.0.1.2 - Nokia) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Mystery of Mortlake Mansion (HKLM-x32\...\WTA-b2990de1-0767-4e4a-8f79-d5fa2ef08b5f) (Version: 2.2.0.98 - WildTangent) Hidden
MyWinLocker (HKLM\...\{0B78ECB0-1A6B-4E6D-89D7-0E7CE77F0427}) (Version: 4.0.14.27 - Egis Technology Inc.) Hidden
MyWinLocker 4 (HKLM-x32\...\{39F15B50-A977-4CA6-B1C3-6A8724CDA025}) (Version: 4.0.14.27 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.19 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.19 - Egis Technology Inc.)
Nero 9 (HKLM-x32\...\{e372dac9-391f-4fa4-890f-0cfd6185af4f}) (Version: - Nero AG)
newsXpresso (HKLM-x32\...\{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}) (Version: 1.0.0.40 - esobi Inc.) Hidden
newsXpresso (HKLM-x32\...\InstallShield_{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}) (Version: 1.0.0.40 - esobi Inc.)
NTI Media Maker 9 (HKLM-x32\...\{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.9002 - NTI Corporation) Hidden
NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.9002 - NTI Corporation)
Online Games Manager v1.50 (HKLM-x32\...\Online Games Manager) (Version: 1.50.4 - Real Networks, Inc.)
Outils de vérification linguistique 2013 de Microsoft Office - Français (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Outils de vérification linguistique 2016 de Microsoft Office - Français (HKLM\...\{90160000-001F-040C-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
paint.net (HKLM\...\{01FAD28C-E917-42E3-B82C-2E923615C92F}) (Version: 4.0.18 - dotPDN LLC)
PC Connectivity Solution (HKLM-x32\...\{BA77F9D2-CD35-41EB-9BC9-769879DFF8A6}) (Version: 12.0.48.0 - Nokia)
PDF Settings CS6 (HKLM-x32\...\{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}) (Version: 11.0 - Adobe Systems Incorporated) Hidden
Penguins! (HKLM-x32\...\WTA-9ec7287c-6bcc-4fa9-b247-059bab4655c2) (Version: 2.2.0.95 - WildTangent) Hidden
Plants vs. Zombies - Game of the Year (HKLM-x32\...\WTA-2b03a6c7-4c6d-4493-9cee-faa9b78846bb) (Version: 2.2.0.95 - WildTangent) Hidden
Poczta usługi Windows Live (HKLM-x32\...\{45FF54A4-ECD4-455D-89A2-D209737AD726}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Podstawowe programy Windows Live (HKLM-x32\...\{8FFD72FC-4FFA-472D-9F76-AEC85F602F9D}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Polar Bowler (HKLM-x32\...\WTA-2b82f067-8a6e-457f-b246-cdedbcb81cd1) (Version: 2.2.0.97 - WildTangent) Hidden
Pošta Windows Live (HKLM-x32\...\{125D677D-7C65-4660-8E1C-68EF9F32F291}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Productverbeteringsonderzoek voor HP ENVY 4500 series (HKLM\...\{A0B1D150-9577-4F9C-9FC7-AD8557C6BDFC}) (Version: 32.3.198.49673 - Hewlett-Packard Co.)
PSE10 STI Installer (HKLM-x32\...\{11D08055-939C-432b-98C3-E072478A0CD7}) (Version: 10.0 - Adobe Systems Incorporated) Hidden
PSPPContent (HKLM-x32\...\{89E018D8-558F-4051-BB26-64DD9B90DF68}) (Version: 18.0.0.124 - Corel Corporation) Hidden
PSPPHelp (HKLM-x32\...\{88340123-2A5C-48D4-98C1-58C18D12F09C}) (Version: 18.0.0.124 - Corel Corporation) Hidden
PSPPro64 (HKLM\...\{88CFC59F-1491-4359-819F-87DFAFF9CCF4}) (Version: 18.0.0.124 - Corel Corporation) Hidden
Raccolta foto (HKLM-x32\...\{86A1CEAD-EF47-47BB-AE79-DA8C09E15382}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30127 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver and Utility (HKLM-x32\...\{9C049499-055C-4a0c-A916-1D8CA1FF45EB}) (Version: 1.00.0145 - )
Samsung AllShare (HKLM-x32\...\{DF47ACA3-7C78-4C08-8007-AC682563C9F1}) (Version: 2.1.0.12031_10 - Samsung Electronics Co., Ltd.) Hidden
Samsung AllShare (HKLM-x32\...\InstallShield_{DF47ACA3-7C78-4C08-8007-AC682563C9F1}) (Version: 2.1.0.12031_10 - Samsung Electronics Co., Ltd.)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version: - Microsoft)
Setup (HKLM-x32\...\{8BFA76B5-47DD-4C88-9C9B-7407019F0E13}) (Version: 18.0.0.124 - Uw bedrijfsnaam) Hidden
Shredder (HKLM\...\{1F557316-CFC0-41BD-AFF7-8BC49CE444D7}) (Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Shredder (HKLM-x32\...\{C2695E83-CF1D-43D1-84FE-B3BEC561012A}) (Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Slingo Deluxe (HKLM-x32\...\WTA-e10eb1c5-3eaf-4a1f-a7d6-6894a9d63586) (Version: 2.2.0.95 - WildTangent) Hidden
Sony PC Companion 2.10.181 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.181 - Sony)
SoundTrax (HKLM-x32\...\{c5a7cb6c-e76d-408f-ba0e-85605420fe9d}) (Version: 4.4.23.0 - Nero AG) Hidden
Spotnet (HKU\S-1-5-21-623294757-697560527-870178117-1000\...\Spotnet) (Version: 2.0.0.261 - Spotnet)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.1.3.6 - Synaptics Incorporated)
Taalpakket voor Microsoft Visual Studio 2010 Tools for Office Runtime (x64) - NLD (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - NLD) (Version: 10.0.50903 - Microsoft Corporation)
Taalprogramma's voor Microsoft Office 2016 - Nederlands (HKLM\...\{90160000-001F-0413-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Torchlight (HKLM-x32\...\WTA-17532a50-450c-40c2-b1b0-fb5b909f62d9) (Version: 2.2.0.97 - WildTangent) Hidden
UpdateAssistant (HKLM-x32\...\{DE45508F-369E-4476-8F19-088F4933340E}) (Version: 1.8.0.0 - Microsoft Corporation) Hidden
Valokuvavalikoima (HKLM-x32\...\{B315ABA6-8217-484E-9AC5-38806E265664}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Vinny27 - Adobe Photoshop CC 2014 (HKLM\...\{B194836D-1BD6-479C-8C48-61183D760947}) (Version: 15.0 - Vinny27)
Vinny27 - Adobe Photoshop CS6 64-bit (HKLM\...\{552A9E66-09E1-4BA1-ABF9-A51955142BA5}) (Version: 6.0 - Vinny27)
Virtual Villagers 4 - The Tree of Life (HKLM-x32\...\WTA-756b5932-ea12-4047-8a3e-35b1254f98dd) (Version: 2.2.0.97 - WildTangent) Hidden
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.4 - VideoLAN)
Wedding Dash (HKLM-x32\...\WTA-76dfafd8-66a3-4b3b-ae37-b20c35ab4f4f) (Version: 2.2.0.95 - WildTangent) Hidden
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3504 - Acer Incorporated)
WildTangent Games App (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-acer) (Version: 4.0.10.5 - WildTangent) Hidden
Windows 10-updateassistent (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22243 - Microsoft Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows-stuurprogrammapakket - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0) (HKLM\...\62BBD193ADFDBB228C7E1ADB56463F5732FF7F6F) (Version: 05/31/2012 7.1.2.0 - Nokia)
WinRAR 4.20 (64-bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
Zuma Deluxe (HKLM-x32\...\WTA-31d957c9-d1cd-402f-a840-a3528273c6c9) (Version: 2.2.0.95 - WildTangent) Hidden
Συλλογή φωτογραφιών (HKLM-x32\...\{2D5C287A-1D2D-46BA-8EF8-D2747575DB6E}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Основные компоненты Windows Live (HKLM-x32\...\{D177E45E-2BA3-42C1-8570-CCA2217B958C}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Почта Windows Live (HKLM-x32\...\{C325D201-108B-410F-98F7-F3F1B3CA555A}) (Version: 16.4.3528.0331 - Корпорация Майкрософт) Hidden
Фотоальбом (HKLM-x32\...\{B27EB36C-9860-42FD-AA90-23648E49F15C}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Фотогалерия (HKLM-x32\...\{3AAB928E-40E9-4DC5-A9CC-FB979E1B2C03}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Фотографии (общедоступная версия) (HKLM-x32\...\{7D6C9057-7F50-4CAB-A557-A68A7932B48E}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
גלריית התמונות (HKLM-x32\...\{F1BEEA80-1419-45EE-A4C7-41FD4450ED92}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
بريد Windows Live (HKLM-x32\...\{CDFECFAC-D979-48BA-BBF3-7B2F74A2252A}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
معرض الصور (HKLM-x32\...\{CF15F988-98D4-479F-9750-85A495BF8233}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
影像中心 (HKLM-x32\...\{D3F0882C-4948-4BAA-9720-47CC4D9AEF54}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

==================== Aangepaste CLSID (gefilterd): ==========================

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Geen bestand
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Geen bestand
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Geen bestand
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Geen bestand
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Geen bestand
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Geen bestand
ContextMenuHandlers1: [BDFVCtxMenuExt] -> {9E96C1F5-0EFA-4348-9460-15D6802C70AA} => C:\Program Files\Bitdefender\Bitdefender Security\bdfvsctx.dll [2017-09-03] (Bitdefender)
ContextMenuHandlers1: [PrivaZer] -> {7691BE2F-3D79-AADE-9C87-4D6EBCC76682} => -> Geen bestand
ContextMenuHandlers1: [ShellConverter] -> {30A4E07E-068A-4d91-8F05-691283A1336B} => C:\Program Files (x86)\Common Files\AVSMedia\ActiveX\AVSShellConverter64.dll [2012-12-25] (Online Media Technologies Ltd.)
ContextMenuHandlers2: [PrivaZer] -> {7691BE2F-3D79-AADE-9C87-4D6EBCC76682} => -> Geen bestand
ContextMenuHandlers3: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Geen bestand
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamext.dll [2016-03-10] (Malwarebytes)
ContextMenuHandlers3: [MWLIVShellExt] -> {B1B294FE-EC1E-4fef-AF68-D34CE3E38157} => C:\Program Files (x86)\EgisTec MyWinLocker\x64\MWLIVShellExt.dll [2011-06-21] (Egis Technology Inc. )
ContextMenuHandlers3: [PrivaZer] -> {7691BE2F-3D79-AADE-9C87-4D6EBCC76682} => -> Geen bestand
ContextMenuHandlers3: [ShredderContextMenu] -> {521065F1-DE6C-4E46-BBCB-89B0D0BE860D} => C:\Program Files (x86)\EgisTec Shredder\x64\ShredderContextMenu.dll [2011-03-29] (Egis Technology Inc.)
ContextMenuHandlers4: [BDFVCtxMenuExt] -> {9E96C1F5-0EFA-4348-9460-15D6802C70AA} => C:\Program Files\Bitdefender\Bitdefender Security\bdfvsctx.dll [2017-09-03] (Bitdefender)
ContextMenuHandlers4: [PrivaZer] -> {7691BE2F-3D79-AADE-9C87-4D6EBCC76682} => -> Geen bestand
ContextMenuHandlers5: [BDFVCtxMenuExt] -> {9E96C1F5-0EFA-4348-9460-15D6802C70AA} => C:\Program Files\Bitdefender\Bitdefender Security\bdfvsctx.dll [2017-09-03] (Bitdefender)
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> Geen bestand
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\WINDOWS\system32\igfxpph.dll [2012-11-26] (Intel Corporation)
ContextMenuHandlers6: [BDFVCtxMenuExt] -> {9E96C1F5-0EFA-4348-9460-15D6802C70AA} => C:\Program Files\Bitdefender\Bitdefender Security\bdfvsctx.dll [2017-09-03] (Bitdefender)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamext.dll [2016-03-10] (Malwarebytes)
ContextMenuHandlers6: [PrivaZer] -> {7691BE2F-3D79-AADE-9C87-4D6EBCC76682} => -> Geen bestand

==================== Geplande Taken (gefilterd) =============

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

Task: {03F67B27-A796-4900-A2A9-1FE7E118DDA3} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {0F9104E0-DA83-4FE8-8B3B-E7D034D4BBA4} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
Task: {17945457-025B-4019-962F-56BA900A5615} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe [2015-11-01] (@ByELDI)
Task: {1C9E6B43-0C21-4F0C-B48E-4D2BBED05487} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {20FB227C-A1DB-4C61-9DD2-76B463845C9A} - System32\Tasks\Bitdefender AgentTask_AD394AE64E874073B10A89FEEC305A3C => C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe [2017-09-03] (Bitdefender)
Task: {3F6E048D-6404-433B-8F5F-CFF4D89BF89E} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => %windir%\system32\rundll32.exe generaltel.dll,RunTelemetryW
Task: {43A153BB-DE57-4532-920E-A8D6A20DBB28} - System32\Tasks\clear.fiAgent => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe [2011-08-25] (CyberLink Corp.)
Task: {48F84AE6-DD16-4BD0-86BB-E29BFC39557C} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {4CFA190E-C241-4708-8631-93C38E2A2CDA} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-07-19] (Adobe Systems Incorporated)
Task: {529D73A2-7907-4BEB-9D45-E3D9AB7790F8} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\UpdateAssistant => C:\WINDOWS\UpdateAssistant\UpdateAssistant.exe [2017-09-20] (Microsoft Corporation)
Task: {580497D9-1A16-40E5-9466-4DF5FC1B094F} - System32\Tasks\clear.fi => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fi.exe [2011-08-25] (Acer Incorporated)
Task: {66B46246-0A01-4040-A305-BD48A592BC34} - System32\Tasks\WinSysCleanUAC => C:\Program Files\WinSysClean X7 Free\WinSysClean.exe
Task: {69A9911C-79AE-4175-88C2-2AE0AE4BEB18} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [2017-06-21] (Bitdefender)
Task: {6F638C80-5398-48BA-AE35-42AA87A03E68} - System32\Tasks\DMREngine => C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe [2011-08-25] (CyberLink)
Task: {7B075017-B9E6-480C-B6E7-0DBD7B0D2D4E} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
Task: {86063057-714F-49BA-890D-35D6CA58F967} - System32\Tasks\PMMUpdate => C:\Program Files\EgisTec IPS\PMMUpdate.exe [2011-03-29] (Egis Technology Inc.)
Task: {924999AA-04EE-483D-9981-2CF8189D663D} - System32\Tasks\AdobeAAMUpdater-1.0-BLUSOPA-Meeuwes => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-03-22] (Adobe Systems Incorporated)
Task: {95AF4400-ECCA-4E45-BB39-9D790CEE88EC} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2015-07-31] (Microsoft Corporation)
Task: {96151EBD-7246-44D4-8146-A8851B265374} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-09-12] (Adobe Systems Incorporated)
Task: {96888C8A-D6EE-4CF3-8490-B2071BD07F72} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {97D0FEAF-61B5-4038-9095-1ADFCED8FB9B} - System32\Tasks\Adobe Reader and Acrobat Manager => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-07-19] (Adobe Systems Incorporated)
Task: {996A4C28-874C-401D-BF58-CA7612E8179A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-11-15] (Piriform Ltd)
Task: {A077D184-191A-456B-A590-932AB90F1CC7} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe
Task: {B7923AFF-F1B6-4C53-85D7-191AABC14559} - System32\Tasks\EgisUpdate => C:\Program Files\EgisTec IPS\EgisUpdate.exe [2011-03-29] (Egis Technology Inc.)
Task: {B821C95A-0E32-47CE-93B6-8AC669D1429A} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\UpdateAssistantCalendarRun => C:\WINDOWS\UpdateAssistant\UpdateAssistant.exe [2017-09-20] (Microsoft Corporation)
Task: {C27B36EC-8020-40DA-8A72-6449D3CBE856} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {C573CE49-B905-4CE0-B004-058AA2AF030F} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {C92A2EF7-040B-45C9-8108-CB66303C9B28} - System32\Tasks\HPCustParticipation HP ENVY 4500 series => C:\Program Files\HP\HP ENVY 4500 series\Bin\HPCustPartic.exe [2014-07-21] (Hewlett-Packard Development Company, LP)
Task: {E69068F1-972B-4160-8890-8DBCC03A92A2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {E78A8338-9F3A-4752-BD99-59AFA43E3029} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {ED590C6A-5555-469A-845C-88AEA92C5149} - System32\Tasks\AdobeAAMUpdater-1.0-Meeuwes-PC-Meeuwes => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-03-22] (Adobe Systems Incorporated)
Task: {F07FE969-AFC3-42E2-8F7C-839C315B91A0} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECK

(Als een item is opgenomen in de fixlist, de taak (job) bestand wordt verplaatst. Het bestand dat wordt uitgevoerd door de taak zal niet worden verplaatst.)

Task: C:\WINDOWS\Tasks\{65EDB3BA-0851-C22D-5EC6-6F04E7D872D8}.job => C:\Users\Meeuwes\AppData\Roaming\{43737~1\HELPER~1.EXE <==== AANDACHT

==================== Snelkoppelingen & WMI ========================

(De items kunnen worden opgenomen in de fixlist.txt om hersteld of verwijderd te worden.)


Shortcut: C:\Users\Meeuwes\AppData\Roaming\Microsoft\Windows\Network Shortcuts\Mijn websites bij MSN\target.lnk -> hxxp://www.msnusers.co

==================== Geladen Modules (gefilterd) ==============

2015-08-08 10:16 - 2015-08-08 10:16 - 000032768 _____ () C:\WINDOWS\SYSTEM32\licensemanagerapi.dll
2017-08-10 14:02 - 2013-09-03 14:29 - 000111832 _____ () C:\Program Files\Bitdefender\Bitdefender Security\bdmetrics.dll
2017-08-10 14:02 - 2017-02-07 12:34 - 001008448 _____ () C:\Program Files\Bitdefender\Bitdefender Security\otengines_001_001\ashttpbr.mdl
2017-08-10 14:02 - 2017-02-07 12:34 - 000541952 _____ () C:\Program Files\Bitdefender\Bitdefender Security\otengines_001_001\ashttpdsp.mdl
2017-08-10 14:02 - 2017-02-07 12:34 - 003243920 _____ () C:\Program Files\Bitdefender\Bitdefender Security\otengines_001_001\ashttpph.mdl
2017-08-10 14:02 - 2017-02-07 12:34 - 001544568 _____ () C:\Program Files\Bitdefender\Bitdefender Security\otengines_001_001\ashttprbl.mdl
2016-11-10 16:19 - 2016-10-25 09:15 - 000404480 _____ () C:\WINDOWS\System32\diagtrack_wininternal.dll
2017-09-25 10:54 - 2017-06-03 15:39 - 002495776 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2010-01-02 16:42 - 2010-01-02 16:42 - 000098304 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2013-09-05 01:17 - 2013-09-05 01:17 - 004300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2009-01-22 01:45 - 2009-01-22 01:45 - 001401856 _____ () C:\Program Files (x86)\EgisTec MyWinLocker\x64\LIBEAY32.dll
2015-10-04 18:05 - 2015-09-17 07:48 - 000429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 000143360 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\XamlTileRendering.dll
2017-09-25 10:59 - 2017-04-28 01:44 - 006569472 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-12-16 11:55 - 2016-11-19 08:06 - 000471040 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-09-25 10:52 - 2017-04-28 01:42 - 001808384 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-10-04 18:06 - 2015-09-17 07:43 - 002274816 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2014-01-05 12:00 - 2016-07-22 09:26 - 000114664 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\zlib1.dll
2016-11-18 00:19 - 2016-07-22 09:24 - 000108008 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_filesystem-vc120-mt-1_56.dll
2016-11-18 00:19 - 2016-07-22 09:24 - 000024040 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_system-vc120-mt-1_56.dll
2016-11-18 00:19 - 2016-07-22 09:24 - 000048104 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_date_time-vc120-mt-1_56.dll
2011-04-24 03:29 - 2011-04-24 03:29 - 000465640 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll
2011-04-24 03:29 - 2011-04-24 03:29 - 001081664 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll
2011-04-24 03:29 - 2011-04-24 03:29 - 000125760 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll
2013-03-26 16:29 - 2009-12-09 22:20 - 000126976 _____ () C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\EnumDevLib.dll
2011-08-25 04:03 - 2011-08-25 04:03 - 000206216 ____N () C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\CLNetMediaDMA.dll

==================== Alternate Data Streams (gefilterd) =========

(Als een item is opgenomen in de fixlist, alleen de ADS wordt verwijderd.)

AlternateDataStreams: C:\Users\Meeuwes\Downloads\bitdefender_windows_c11dd7dd-09e0-4d1c-9fbc-a89324107761.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\DeepBurner1.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\DVDFab10013.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\DVDFab9312.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\Firefox Setup Stub 52.0.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\Firefox Setup Stub 53.0.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\hppiw.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\kompozer-0.8b3.nl.win32.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\mb3-setup-consumer-3.1.2.1733-1.0.160-1.0.2251(1).exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\mb3-setup-consumer-3.1.2.1733-1.0.160-1.0.2251.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\mbam-setup-FileHippo.19901-2.2.1.1043.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\nvu-0.90-win32-nl-NL-installer.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\QtlMovie-Win64-1.11.1.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\rcsetup153.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\SkypeSetup.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\Spotnet.last.setup.release(1).exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\Spotnet.last.setup.release.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\tweaking.com_windows_repair_aio_setup.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\video-converter-studio.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\WDCFree.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\winx-dvd-ripper.exe:BDU [0]

==================== Veilige Modus (gefilterd) ===================

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. De "AlternateShell" waarde wordt hersteld.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppXSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BFE => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BITS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ClipSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MpsSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\msiserver => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SharedAccess => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TweakingRemoveSafeBoot => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vss => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WSService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AppXSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BITS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ClipSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\msiserver => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SamSs => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srv => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srv2 => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srvnet => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TweakingRemoveSafeBoot => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vss => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WSService => ""="Service"

==================== Bestandskoppeling (gefilterd) ===============

(Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd.)


==================== Internet Explorer vertrouwde/beperkte toegang ===============

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd.)

IE trusted site: HKU\S-1-5-21-623294757-697560527-870178117-1000\...\localhost -> localhost

==================== Hosts inhoud: ==========================

(Als nodig Hosts: opdracht kan worden opgenomen in de fixlist om Hosts te resetten.)

2009-07-14 04:34 - 2017-10-03 19:10 - 000002810 _____ C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1 activate.adobe.com
127.0.0.1 www.nero.com
127.0.0.1 127.0.0.1 www.nero.com/esl/index.html
127.0.0.1 127.0.0.1 www.nero.com/esl/support.html
127.0.0.1 127.0.0.1 www.nero.com/esl/support-customer-service-product-registration.html
127.0.0.1 127.0.0.1 www.nero.com/esl/store-volume-licensing.html
127.0.0.1 127.0.0.1 www.nero.com/eng/store-upgrade-center.html?NeroSID=392cba06859c3dcd87b47525e97a3b80
127.0.0.1 www.nero.com/eng/index.html
127.0.0.1 www.nero.com
127.0.0.1 www.nero.com/enu/support-nero8.html
127.0.0.1 secure.nero.com/us/secure.asp
127.0.0.1 activation@nero.com
127.0.0.1 registernero.com
127.0.0.1 www.registernero.com
127.0.0.1 nero.com
127.0.0.1 www.nero.com/eng/privacy.html
127.0.0.1 legal@nero.com
127.0.0.1 support.nero.com
127.0.0.1 validation.sls.microsoft.com
127.0.0.1 practivate.adobe.com
127.0.0.1 lmlicenses.wip4.adobe.com
127.0.0.1 lm.licenses.adobe.com
127.0.0.1 na1r.services.adobe.com
127.0.0.1 hlrcv.stage.adobe.com
127.0.0.1 activate.adobe.com
127.0.0.1 lmlicenses.wip4.adobe.com
127.0.0.1 lm.licenses.adobe.com
127.0.0.1 activate.adobe.com
127.0.0.1 lmlicenses.wip4.adobe.com
127.0.0.1 lm.licenses.adobe.com

==================== Andere gebieden ============================

(Momenteel is er geen automatische fix voor dit onderdeel.)

HKU\S-1-5-21-623294757-697560527-870178117-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Meeuwes\AppData\Roaming\Microsoft\Windows Photo Viewer\Achtergrond van Windows Photo Viewer.jpg
DNS Servers: 192.168.192.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Windows Firewall is ingeschakeld.

==================== MSCONFIG/TASK MANAGER Uitgeschakelde items ==

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AllShareAgent => C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe
MSCONFIG\startupreg: BackupManagerTray => "C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" -h -k
MSCONFIG\startupreg: BCSSync => "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: fst_en_2 =>
MSCONFIG\startupreg: msnmsgr => "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
MSCONFIG\startupreg: OfficeSyncProcess => "C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE"
MSCONFIG\startupreg: PDVD9LanguageShortcut => "C:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe"
MSCONFIG\startupreg: RemoteControl9 => "C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe"
MSCONFIG\startupreg: RTHDVCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
MSCONFIG\startupreg: SuiteTray => "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"
MSCONFIG\startupreg: SynTPEnh => %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
HKLM\...\StartupApproved\Run: => "IgfxTray"
HKLM\...\StartupApproved\Run: => "HotKeysCmds"
HKLM\...\StartupApproved\Run: => "Persistence"
HKLM\...\StartupApproved\Run: => "SynTPEnh"
HKLM\...\StartupApproved\Run: => "RTHDVCPL"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "Power Management"
HKLM\...\StartupApproved\Run: => "BCSSync"
HKLM\...\StartupApproved\Run: => "Corel Update Helper"
HKLM\...\StartupApproved\Run32: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run32: => "LManager"
HKLM\...\StartupApproved\Run32: => "SynTPEnh"
HKLM\...\StartupApproved\Run32: => "ProductUpdater"
HKLM\...\StartupApproved\Run32: => "HP Software Update"
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\StartupApproved\Run: => "Windows Start-Up Application"
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\StartupApproved\Run: => "Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64"
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\StartupApproved\Run: => "Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\StartupApproved\Run: => "Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64"
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\StartupApproved\Run: => "Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64"
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\StartupApproved\Run: => "Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64"
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\StartupApproved\Run: => "CCleaner"
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\StartupApproved\Run: => "Chromium"
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\StartupApproved\Run: => "OfficeSyncProcess"
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\StartupApproved\Run: => "Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64"
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\StartupApproved\Run: => "Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\StartupApproved\Run: => "HP ENVY 4500 series (NET)"

==================== Firewall regels (gefilterd) ===============

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

FirewallRules: [{25AF1FCA-F2C1-45D1-A005-2D9201C19FED}] => (Allow) C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe
FirewallRules: [{AEE846E4-F6C9-4AB7-BB50-5AF30B222A8E}] => (Allow) C:\Program Files (x86)\Samsung\AllShare\AllShare.exe
FirewallRules: [{C18131F9-7FE2-49EF-8419-9CE264D60E8A}] => (Allow) C:\Program Files (x86)\Samsung\AllShare\AllShareDMS\AllShareDMS.exe
FirewallRules: [{F66EA9E4-4DD7-4737-BC83-AEB681EA1F5E}] => (Allow) LPort=7900
FirewallRules: [{49049B39-7BBD-4A7F-8312-DDC90080D4DA}] => (Allow) LPort=24234
FirewallRules: [{3190C3EF-BFC1-4FE6-88AE-621D04D237A6}] => (Allow) LPort=7679
FirewallRules: [{14DCDF5A-D645-4402-9987-BBF64CE643A7}] => (Allow) LPort=7676
FirewallRules: [{87A7FBF3-437D-466D-918D-B4DA60006AC2}] => (Allow) LPort=8643
FirewallRules: [{BF6BB9DC-77CF-4ABF-8CE1-0812C2874CAB}] => (Allow) LPort=8743
FirewallRules: [{5028EEC7-4860-4DC0-A05D-F813410E6D62}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{AD2BF78D-467C-41DD-A0EE-D05C22FEC819}] => (Allow) LPort=1900
FirewallRules: [{4FE93552-BE73-4A1F-A18C-7200FB766403}] => (Allow) LPort=2869
FirewallRules: [{5616DFA6-AA91-47F3-8E98-E650D7AAE76A}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [UDP Query User{C8FADFBF-FD5D-4A09-9DD3-A62A9B7D9A8E}C:\program files (x86)\internet explorer\iexplore.exe] => (Allow) C:\program files (x86)\internet explorer\iexplore.exe
FirewallRules: [TCP Query User{BF422E00-5615-408D-BCD4-5396A1F94054}C:\program files (x86)\internet explorer\iexplore.exe] => (Allow) C:\program files (x86)\internet explorer\iexplore.exe
FirewallRules: [{51DEDEA5-20C8-4972-8208-9CDD86BECA69}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{F6CF7163-775D-4DC8-9EB2-5F8769A2E81C}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{FFB1F778-C49E-449E-BECD-88BF7F6EB4C4}] => (Allow) LPort=1900
FirewallRules: [{7B55F5D7-6F26-4AC8-82DA-31E56D5529DA}] => (Allow) LPort=20102
FirewallRules: [{1B8A87F5-6352-414B-AE89-99907235E63A}] => (Allow) LPort=7878
FirewallRules: [{B14FD9D2-868E-4749-B915-1BB5D1158AA3}] => (Allow) C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe
FirewallRules: [{AEA736A4-18CC-4F46-90E1-7E294269BE41}] => (Allow) C:\Program Files (x86)\Samsung\AllShare\AllShare.exe
FirewallRules: [{A11BFF4C-5521-4518-835D-DBF6A8FC9B1A}] => (Allow) C:\Program Files (x86)\Samsung\AllShare\AllShareSlideShowService.exe
FirewallRules: [{E986EB72-049F-467B-9A98-7065AE99A017}] => (Allow) D:\Network\EpsonNetSetup\ENEasyApp.exe
FirewallRules: [{46AA0E64-6691-4C62-AF81-4FB264B9DFEA}] => (Allow) D:\Network\EpsonNetSetup\ENEasyApp.exe
FirewallRules: [{E7E56764-D1C4-4C55-B7AF-55D1E4763443}] => (Allow) LPort=53
FirewallRules: [{85131490-5D84-47A5-B91D-385B0176A71C}] => (Allow) LPort=1542
FirewallRules: [{9D624A25-4671-477C-93B1-850491C2857D}] => (Allow) LPort=1542
FirewallRules: [{FAEE1151-E016-4137-85EC-DD47918EA467}] => (Allow) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtWLan.exe
FirewallRules: [{B230C2F7-86DC-4868-ACF1-4ADBE7F87D26}] => (Allow) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtWLan.exe
FirewallRules: [UDP Query User{4CEE8B83-D7B4-4DF2-AFE7-20DFF9CCE47E}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [TCP Query User{FCC73AAA-641F-4309-B917-A7C459F781E4}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [{576ECE7F-70C3-48B0-825F-5075A22D78AA}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD9\PowerDVD9.EXE
FirewallRules: [{ADEEDA6C-297F-4447-84AD-658A9FCEE196}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD9\PowerDVD Cinema\PowerDVDCinema.exe
FirewallRules: [{8D4037C3-CBAB-420D-B70A-19DB6E40FD3C}] => (Block) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\DMREngine.exe
FirewallRules: [{4E728163-DD6C-4496-8A96-D6380C325649}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\DMREngine.exe
FirewallRules: [{BC43B7ED-A45B-4EB9-B14B-71C81E24BB28}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\DMREngine.exe
FirewallRules: [{28295FD0-6028-454C-90A5-A5CF290A26AE}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\CLML\CLMLSvc.exe
FirewallRules: [{91432707-32F1-4156-BF61-D540085E1D8C}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
FirewallRules: [{A1BB06A9-9729-4F21-B54D-CA9031580BE6}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fi.exe
FirewallRules: [{FE371952-05A7-4666-B2C4-B01F407D577C}] => (Allow) LPort=80
FirewallRules: [{7B0D3E3F-5B2A-4BB3-B987-B33DCFBA715A}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Converter Studio\Video Converter Studio.exe
FirewallRules: [{F4F0D937-7043-4CF2-8A95-A753A3192DE9}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Converter Studio\Video Converter Studio.exe
FirewallRules: [{D7D2243D-5F53-4FD3-B41A-59ABEB0389E3}] => (Allow) C:\Program Files\HP\HP ENVY 4500 series\Bin\DeviceSetup.exe
FirewallRules: [{CB82C3CF-695A-4D5E-9105-6DDD476DE4ED}] => (Allow) LPort=5357
FirewallRules: [{D0648AD4-3741-4700-AB52-C0559C9A942E}] => (Allow) C:\Program Files\HP\HP ENVY 4500 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{C7FC66A9-7A68-400E-BC8C-42C8237EEF20}] => (Allow) %systemroot%\system32\alg.exe
FirewallRules: [{D6AC6288-1419-4672-B9B4-E470FBC0E9A6}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{852B7F74-3CB8-460B-9622-B884CB034BF8}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe

==================== Herstelpunten =========================

01-10-2017 21:10:12 End of disinfection
02-10-2017 08:55:27 paint.net 4.0.18

==================== Defecte Apparaatbeheer Apparaten =============

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Eventlog fouten: =========================

Applicatiefouten:
==================
Error: (10/03/2017 07:34:12 PM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (10/03/2017 07:17:41 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Het programma SearchUI.exe, versie 10.0.10240.17394 reageert niet meer op Windows en is afgesloten. Als u wilt zien of er meer informatie over het probleem beschikbaar is, raadpleegt u de probleemgeschiedenis in het onderdeel Beveiliging en onderhoud van het Configuratiescherm.

Proces-id: 161c

Starttijd: 01d33c6aeac3f52c

Eindtijd: 4294967295

Toepassingspad: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe

Rapport-id: c031d25e-a85e-11e7-9c98-386077f7eaca

Volledige pakketnaam met fout: Microsoft.Windows.Cortana_1.4.8.176_neutral_neutral_cw5n1h2txyewy

Relatieve toepassings-id van pakket met fout: CortanaUI

Error: (10/03/2017 07:17:37 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: BLUSOPA)
Description: Het pakket Microsoft.Windows.Cortana_1.4.8.176_neutral_neutral_cw5n1h2txyewy+CortanaUI is beëindigd omdat het onderbreken te lang duurde.

Error: (10/03/2017 07:11:24 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: BLUSOPA)
Description: Het activeren van de app Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI is mislukt door de fout -2144927142. Kijk in het logboek Microsoft-Windows-TWinUI/Operational voor aanvullende informatie.

Error: (10/03/2017 07:11:12 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Het programma SearchUI.exe, versie 10.0.10240.17394 reageert niet meer op Windows en is afgesloten. Als u wilt zien of er meer informatie over het probleem beschikbaar is, raadpleegt u de probleemgeschiedenis in het onderdeel Beveiliging en onderhoud van het Configuratiescherm.

Proces-id: 170c

Starttijd: 01d33c6a48702f02

Eindtijd: 4294967295

Toepassingspad: C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe

Rapport-id: cd800ab1-a85d-11e7-9c98-386077f7eaca

Volledige pakketnaam met fout: Microsoft.Windows.Cortana_1.4.8.176_neutral_neutral_cw5n1h2txyewy

Relatieve toepassings-id van pakket met fout: CortanaUI

Error: (10/03/2017 07:07:22 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1500) (User: IIS APPPOOL)
Description: U kunt niet worden aangemeld omdat uw profiel niet kan worden geladen. Controleer of u met het netwerk bent verbonden en of het netwerk correct werkt.

DETAIL - Toegang geweigerd.

Error: (10/03/2017 07:07:15 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1511) (User: IIS APPPOOL)
Description: Kan het lokale profiel niet vinden. U wordt aangemeld met een tijdelijk profiel. Wijzigingen die u in dit profiel aanbrengt gaan verloren wanneer u zich afmeldt.

Error: (10/03/2017 07:07:15 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1515) (User: IIS APPPOOL)
Description: Er is een back-up gemaakt van dit gebruikersprofiel. Dit back-upprofiel wordt automatisch gebruikt als deze gebruiker zich weer aanmeldt.

Error: (10/03/2017 07:07:15 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1500) (User: IIS APPPOOL)
Description: U kunt niet worden aangemeld omdat uw profiel niet kan worden geladen. Controleer of u met het netwerk bent verbonden en of het netwerk correct werkt.

DETAIL - Toegang geweigerd.

Error: (10/03/2017 07:07:13 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1511) (User: IIS APPPOOL)
Description: Kan het lokale profiel niet vinden. U wordt aangemeld met een tijdelijk profiel. Wijzigingen die u in dit profiel aanbrengt gaan verloren wanneer u zich afmeldt.


Systeemfouten:
=============
Error: (10/03/2017 07:36:00 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: De volgende melding van een onherstelbare fout is gegenereerd en verzonden naar het externe eindpunt. Dit kan resulteren in het beëindigen van de verbinding. De door het TLS-protocol gedefinieerde code van de onherstelbare fout 10. De foutstatus van Windows SChannel is 10.

Error: (10/03/2017 07:36:00 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: De volgende melding van een onherstelbare fout is gegenereerd en verzonden naar het externe eindpunt. Dit kan resulteren in het beëindigen van de verbinding. De door het TLS-protocol gedefinieerde code van de onherstelbare fout 10. De foutstatus van Windows SChannel is 10.

Error: (10/03/2017 07:35:00 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: De volgende melding van een onherstelbare fout is gegenereerd en verzonden naar het externe eindpunt. Dit kan resulteren in het beëindigen van de verbinding. De door het TLS-protocol gedefinieerde code van de onherstelbare fout 10. De foutstatus van Windows SChannel is 10.

Error: (10/03/2017 07:35:00 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: De volgende melding van een onherstelbare fout is gegenereerd en verzonden naar het externe eindpunt. Dit kan resulteren in het beëindigen van de verbinding. De door het TLS-protocol gedefinieerde code van de onherstelbare fout 10. De foutstatus van Windows SChannel is 10.

Error: (10/03/2017 07:34:28 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: De volgende melding van een onherstelbare fout is gegenereerd en verzonden naar het externe eindpunt. Dit kan resulteren in het beëindigen van de verbinding. De door het TLS-protocol gedefinieerde code van de onherstelbare fout 10. De foutstatus van Windows SChannel is 10.

Error: (10/03/2017 07:34:28 PM) (Source: Schannel) (EventID: 4120) (User: NT AUTHORITY)
Description: De volgende melding van een onherstelbare fout is gegenereerd en verzonden naar het externe eindpunt. Dit kan resulteren in het beëindigen van de verbinding. De door het TLS-protocol gedefinieerde code van de onherstelbare fout 10. De foutstatus van Windows SChannel is 10.

Error: (10/03/2017 07:21:44 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
en APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
aan de gebruiker NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services.

Error: (10/03/2017 07:13:04 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: De HP Network Devices Support-service is bij het starten vastgelopen.

Error: (10/03/2017 07:10:58 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: De Delivery Optimization-service is bij het starten vastgelopen.

Error: (10/03/2017 07:10:07 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: De server {B548B6A5-B4C1-4DE2-8DB2-B60C1E80387E} heeft zich niet binnen de vereiste termijn bij DCOM geregistreerd.


CodeIntegrity:
===================================
Date: 2017-10-03 19:12:07.890
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\vsservp.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2017-10-02 16:38:02.229
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\vsservp.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2017-10-02 08:25:03.293
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\vsservp.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2017-10-01 23:22:21.053
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\vsservp.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2017-10-01 23:03:22.041
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\vsservp.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2017-10-01 22:27:34.371
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\vsservp.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2017-10-01 20:53:15.426
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\vsservp.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2017-10-01 20:07:55.650
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\vsservp.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2017-10-01 17:23:37.454
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\vsservp.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2017-10-01 16:31:02.648
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\vsservp.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Geheugen info ===========================

Processor: Intel(R) Core(TM) i3 CPU M 380 @ 2.53GHz
Percentage geheugen in gebruik: 42%
Totaal fysiek RAM-geheugen: 5812.86 MB
Beschikbaar fysiek RAM-geheugen: 3322.92 MB
Totaal Virtueel geheugen: 11700.86 MB
Beschikbaar Virtual geheugen: 9243.61 MB

==================== Schijven ================================

Drive c: (Acer) (Fixed) (Total:451.71 GB) (Free:204.1 GB) NTFS

==================== MBR & Partitietabel ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: A72E68A4)
Partition 1: (Not Active) - (Size=13.5 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=451.7 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=466 MB) - (Type=27)

==================== Eind van Addition.txt ============================

gr Blusopa

 

[Aarie25]

Beste Blusopa,

Ik zie dat jij Bitdefender gebruikt, mag ik vragen welke versie dit is?
Waarschijnlijk de 2017 versie?
Ik gebruik nu zelf al enkele maanden de 2018 versie, die draait stukken beter in Windows 10.
Mocht je die ook willen, dan kun je deze versie verwijderen en dan hier inloggen en dan installeren kiezen,
Je krijgt dan gelijk de nieuwste versie.
Login Bitdefender

 

[Abraham54]

Hoi Blusopa - het frst-log is incompleet.
Graag dit log nogmaals en als geheel in jouw volgende antwoord posten.
Het tweede log Additions is prima gelukt.

 

[blusopa]

Ik krijg de logs niet meer voor elkaar, als ik een scan maak geeft hij aan dat hij de logs in user/desktop wil plaatsen en daarna geeft het programma aan kan de map user/naam/desktop niet vinden

 

[blusopa]

PS ik gebruik Bitfender 2018

 

[blusopa]

Het is eindelijk gelukt, Bitdefender hield het tegen, bij deze de twee logs.

==================== Bamital & volsnap ======================

(Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.)

C:\WINDOWS\system32\winlogon.exe => Bestand is getekend
C:\WINDOWS\system32\wininit.exe => Bestand is getekend
C:\WINDOWS\explorer.exe => Bestand is getekend
C:\WINDOWS\SysWOW64\explorer.exe => Bestand is getekend
C:\WINDOWS\system32\svchost.exe => Bestand is getekend
C:\WINDOWS\SysWOW64\svchost.exe => Bestand is getekend
C:\WINDOWS\system32\services.exe => Bestand is getekend
C:\WINDOWS\system32\User32.dll => Bestand is getekend
C:\WINDOWS\SysWOW64\User32.dll => Bestand is getekend
C:\WINDOWS\system32\userinit.exe => Bestand is getekend
C:\WINDOWS\SysWOW64\userinit.exe => Bestand is getekend
C:\WINDOWS\system32\rpcss.dll => Bestand is getekend
C:\WINDOWS\system32\dnsapi.dll => Bestand is getekend
C:\WINDOWS\SysWOW64\dnsapi.dll => Bestand is getekend
C:\WINDOWS\system32\Drivers\volsnap.sys => Bestand is getekend

LastRegBack: 2017-09-26 18:04

==================== Eind van FRST.txt ============================

==================== Geheugen info ===========================

Processor: Intel(R) Core(TM) i3 CPU M 380 @ 2.53GHz
Percentage geheugen in gebruik: 48%
Totaal fysiek RAM-geheugen: 5812.86 MB
Beschikbaar fysiek RAM-geheugen: 2992.18 MB
Totaal Virtueel geheugen: 11700.86 MB
Beschikbaar Virtual geheugen: 8940.13 MB

==================== Schijven ================================

Drive c: (Acer) (Fixed) (Total:451.71 GB) (Free:202.56 GB) NTFS

==================== MBR & Partitietabel ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: A72E68A4)
Partition 1: (Not Active) - (Size=13.5 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=451.7 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=466 MB) - (Type=27)

==================== Eind van Addition.txt ============================

Groet Blusopa.

 

[Abraham54]

Bitdefender heeft er iets tegen als ook het Windows register wordt gescand.
Bovendien staat onderstaande ook in de handleiding:

Antivirusprogramma en actieve malwarescanners dienen al voor je FRST.exe start gedeaktiveert zijn!

Het geposte log bevat alleen het eindonderdeel van het FRST-log - daar kan ik niks mee.

Dus eerst Bitdefender deaktiveren en dan nogmaals de scan doen!

 

[blusopa]

Alles gedeactiveerd in Bitdefender.
Scanresultaten van Farbar Recovery Scan Tool (FRST) (x64) Versie: 02-10-2017 01
Gestart door Meeuwes (Beheerder) op BLUSOPA (03-10-2017 22:36:07)
Gestart vanaf C:\Users\Meeuwes\Desktop\PC opschonen
Geladen Profielen: Meeuwes (Beschikbare Profielen: Meeuwes)
Platform: Windows 10 Home (X64) Taal: Nederlands (Nederland)
Internet Explorer Versie 11 (Standaardbrowser: FF)
Boot Modus: Normal
Handleiding voor Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials

==================== Processen (gefilterd) =================

(Als een item is opgenomen in de fixlist, het proces zal worden gesloten. Het bestand zal niet worden verplaatst.)

(Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\vsserv.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Online Games Manager\ogmservice.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Realtek) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe
(Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\vsservp.exe
(Realtek Semiconductor Corp.) C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtWLan.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(CyberLink Corp.) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe
(CyberLink) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\DMREngine.exe
(Bitdefender) C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdwtxag.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\PmmUpdate.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\EgisUpdate.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Register (gefilterd) ===========================

(Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13885696 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [Power Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1831016 2011-08-02] (Acer Incorporated)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-03-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1103440 2011-07-01] (Dritek System Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\Run: [Chromium] => c:\users\meeuwes\appdata\local\chromium\application\chrome.exe [1068544 2016-03-18] (The Chromium Authors)
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\Run: [OfficeSyncProcess] => C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE [912480 2015-09-02] (Microsoft Corporation)
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9105112 2016-11-15] (Piriform Ltd)
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\Run: [HP ENVY 4500 series (NET)] => C:\Program Files\HP\HP ENVY 4500 series\Bin\ScanToPCActivationApp.exe [3487240 2014-07-21] (Hewlett-Packard Development Company, LP)
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\RunOnce: [Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\RunOnce: [Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64"
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\RunOnce: [Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64"
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\RunOnce: [Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64"
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\RunOnce: [Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64"
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\RunOnce: [Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64"
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\RunOnce: [Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-623294757-697560527-870178117-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\WLXPGSS.SCR [322248 2014-03-31] (Microsoft Corporation)
AppInit_DLLs: C:\ProgramData\Faxtip\Xxx--Tech.dll => Geen bestand
AppInit_DLLs-x32: C:\ProgramData\Faxtip\Doublefax.dll => Geen bestand
GroupPolicy: Restrictie <==== AANDACHT

==================== Internet (gefilterd) ====================

(Als een item is opgenomen in de fixlist, als het een registry item is wordt verwijderd of hersteld naar de standaard.)

Hosts: Er zijn meer dan één item in Hosts. Zie Hosts deel van Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.192.1
Tcpip\..\Interfaces\{7f10c261-4f38-474f-8f8f-01c2a30d0e41}: [DhcpNameServer] 192.168.192.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2017-10-03] (Bitdefender)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll [2017-10-03] (Bitdefender)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2017-08-24] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2017-07-11] (Microsoft Corporation)
Toolbar: HKLM - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2017-10-03] (Bitdefender)
Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll [2017-10-03] (Bitdefender)
Toolbar: HKU\S-1-5-21-623294757-697560527-870178117-1000 -> Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2017-10-03] (Bitdefender)
DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
DPF: HKLM-x32 {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} hxxp://game.zylom.com/activex/zylomgamesplayer.cab
Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2017-08-15] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2017-08-15] (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2017-08-15] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2017-08-15] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2017-08-15] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF DefaultProfile: dzkhl65i.default-1489771135180-1504694969006
FF ProfilePath: C:\Users\Meeuwes\AppData\Roaming\TomTom\HOME\Profiles\gash3l4a.default [2017-04-06]
FF Extension: (Geen Naam) - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [niet gevonden]
FF ProfilePath: C:\Users\Meeuwes\AppData\Roaming\Nvu\Profiles\zzz69ady.default [2017-04-06]
FF Extension: (Nvu (default), adapted from Orbit 3+1) - C:\Users\Meeuwes\AppData\Roaming\Nvu\Profiles\zzz69ady.default\Extensions\{a83f4e60-3032-462d-b2ba-88bd86c15592} [2016-12-13] [ niet getekend]
FF ProfilePath: C:\Users\Meeuwes\AppData\Roaming\Mozilla\Firefox\Profiles\dzkhl65i.default-1489771135180-1504694969006 [2017-10-03]
FF ProfilePath: C:\Users\Meeuwes\AppData\Roaming\kompozer.net\KompoZer\Profiles\cgya6vmh.default [2017-04-06]
FF ProfilePath: C:\Users\Meeuwes\AppData\Roaming\KompoZer\Profiles\ns85nfil.default [2017-04-06]
FF Extension: (Activity Stream) - C:\Program Files\Mozilla Firefox\browser\features\activity-stream@mozilla.org.xpi [2017-09-27] [ niet getekend]
FF HKLM\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff
FF Extension: (Bitdefender Wallet) - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff [2017-07-14]
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext
FF Extension: (Bitdefender Antispam Toolbar) - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext [2017-07-14] [ niet getekend]
FF HKLM-x32\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_27_0_0_130.dll [2017-09-12] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~3\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_130.dll [2017-09-12] ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-01] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2017-08-01] (Adobe Systems Inc.)

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Meeuwes\AppData\Local\Google\Chrome\User Data\Default [2017-10-01]
CHR Extension: (Geen Naam) - C:\Users\Meeuwes\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-10-15]
CHR Extension: (Geen Naam) - C:\Users\Meeuwes\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-15]
CHR Extension: (Geen Naam) - C:\Users\Meeuwes\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-15]
CHR Extension: (Avast Online Security) - C:\Users\Meeuwes\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-10-15]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Meeuwes\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-10-15]
CHR HKLM-x32\...\Chrome\Extension: [gannpgaobkkhmpomoijebaigcapoeebl] - hxxps://clients2.google.com/service/update2/crx

==================== Services (gefilterd) ====================

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

S2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2257016 2017-08-23] (Adobe Systems, Incorporated)
R2 bdredline; C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe [2090152 2017-09-03] (Bitdefender)
S2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [391656 2016-07-22] (Digital Wave Ltd.)
R2 HPSLPSVC; C:\Users\Meeuwes\AppData\Local\Temp\7zS06AF\hpslpsvc64.dll [1039360 2015-09-21] (Hewlett-Packard Co.) [Bestand niet getekend] <==== AANDACHT
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256832 2011-04-24] (NTI Corporation)
R2 ogmservice; C:\Program Files (x86)\Online Games Manager\ogmservice.exe [582544 2016-07-13] (RealNetworks, Inc.)
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1269824 2017-06-21] (Bitdefender)
R2 Realtek11nSU; C:\Program Files (x86)\Realtek\11n USB Wireless LAN Utility\RtlService.exe [40960 2009-12-07] (Realtek) [Bestand niet getekend]
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [269400 2017-01-20] (Synaptics Incorporated)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe [218416 2017-10-03] (Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender Security\vsserv.exe [1280816 2017-10-03] (Bitdefender)
R2 vsservp; C:\Program Files\Bitdefender\Bitdefender Security\vsservp.exe [524872 2016-08-25] (Bitdefender)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2016-10-25] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2017-06-03] (Microsoft Corporation)

===================== Drivers (gefilterd) ======================

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

S3 Apowersoft_AudioDevice; C:\WINDOWS\System32\drivers\Apowersoft_AudioDevice.sys [31920 2013-06-02] (Wondershare)
R1 atc; C:\WINDOWS\System32\DRIVERS\atc.sys [1019880 2017-10-03] (BitDefender S.R.L. Bucharest, ROMANIA)
R0 avc3; C:\WINDOWS\System32\DRIVERS\avc3.sys [1763744 2017-10-03] (BitDefender)
S0 bdelam; C:\WINDOWS\System32\drivers\bdelam.sys [23672 2016-03-14] (Bitdefender)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [133088 2017-06-06] (BitDefender LLC)
R0 bdprivmon; C:\WINDOWS\System32\DRIVERS\bdprivmon.sys [47856 2017-05-11] (© Bitdefender SRL)
R1 BDVEDISK; C:\WINDOWS\system32\DRIVERS\bdvedisk.sys [87912 2015-12-04] (BitDefender)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2017-01-20] (Samsung Electronics Co., Ltd.)
R0 gzflt; C:\WINDOWS\System32\DRIVERS\gzflt.sys [187688 2017-05-11] (BitDefender LLC)
R0 Ignis; C:\WINDOWS\system32\DRIVERS\ignis.sys [362664 2017-10-03] (Bitdefender)
R2 npf; C:\WINDOWS\system32\drivers\npf.sys [36600 2015-10-12] (Riverbed Technology, Inc.)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2017-01-20] (Samsung Electronics Co., Ltd.)
R0 trufos; C:\WINDOWS\System32\DRIVERS\trufos.sys [439576 2017-04-11] (BitDefender S.R.L.)
S3 UdeCx; C:\WINDOWS\System32\drivers\udecx.sys [44032 2015-07-10] ()
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
U3 idsvc; geen ImagePath
S3 SmbDrvI; \SystemRoot\system32\DRIVERS\Smb_driver_Intel.sys [X]
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
U3 wpcsvc; geen ImagePath

==================== NetSvcs (gefilterd) ===================

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)


==================== Een Maand Aangemaakt bestanden en mappen ========

(Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)

2017-10-03 21:20 - 2017-10-03 21:20 - 000016148 _____ C:\WINDOWS\system32\BLUSOPA_Meeuwes_HistoryPrediction.bin
2017-10-03 20:55 - 2017-10-03 21:14 - 000000000 ___HD C:\$WINDOWS.~BT
2017-10-03 19:34 - 2017-10-03 21:14 - 000000000 ____D C:\Windows10Upgrade
2017-10-03 19:34 - 2017-10-03 19:45 - 000000801 _____ C:\Users\Meeuwes\Desktop\Windows 10-updateassistent.lnk
2017-10-03 19:34 - 2017-10-03 19:34 - 000000813 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows 10-updateassistent.lnk
2017-10-03 19:19 - 2017-10-03 22:36 - 000000000 ____D C:\FRST
2017-10-02 09:03 - 2017-10-03 22:36 - 000000000 ___RD C:\Users\Meeuwes\Desktop\PC opschonen
2017-10-02 08:48 - 2017-10-02 08:48 - 000030241 _____ C:\ProgramData\agent.update.1506926901.bdinstall.bin
2017-10-01 22:45 - 2017-10-01 22:46 - 008250832 _____ (Malwarebytes) C:\Users\Meeuwes\Downloads\adwcleaner_7.0.3.1.exe
2017-10-01 22:44 - 2017-10-01 22:49 - 000000000 ____D C:\AdwCleaner
2017-10-01 21:10 - 2017-10-01 21:12 - 000000641 _____ C:\DelFix.txt
2017-10-01 20:44 - 2017-10-02 16:53 - 000000000 ____D C:\WINDOWS\pss
2017-10-01 16:54 - 2017-10-01 16:55 - 000000000 ____D C:\Program Files\Mozilla Firefox
2017-10-01 16:54 - 2017-10-01 16:54 - 000000969 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-10-01 16:54 - 2017-10-01 16:54 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-10-01 16:21 - 2017-10-01 16:21 - 000000000 ____D C:\WINDOWS\UpdateAssistant
2017-09-25 11:00 - 2017-06-03 15:03 - 022327272 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-09-25 11:00 - 2017-06-03 14:15 - 020862488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-09-25 11:00 - 2017-06-03 12:56 - 024588800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-09-25 11:00 - 2017-06-03 12:47 - 006791680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-09-25 11:00 - 2017-06-03 12:33 - 016708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-09-25 11:00 - 2017-06-03 12:27 - 005163520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2017-09-25 11:00 - 2017-06-03 12:02 - 002559488 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2017-09-25 11:00 - 2017-06-03 11:57 - 002746368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2017-09-25 11:00 - 2017-06-03 11:51 - 021857792 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-09-25 11:00 - 2017-06-03 11:40 - 007502848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2017-09-25 11:00 - 2017-06-03 11:37 - 006713856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2017-09-25 11:00 - 2017-04-28 02:59 - 003782656 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-09-25 11:00 - 2017-04-28 02:53 - 006305792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2017-09-25 10:59 - 2017-06-03 15:41 - 008011616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-09-25 10:59 - 2017-06-03 14:43 - 001813408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2017-09-25 10:59 - 2017-06-03 13:15 - 003793408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2017-09-25 10:59 - 2017-06-03 13:03 - 002418688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2017-09-25 10:59 - 2017-06-03 12:47 - 012519424 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-09-25 10:59 - 2017-06-03 12:41 - 002839040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2017-09-25 10:59 - 2017-06-03 12:33 - 019331072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-09-25 10:59 - 2017-06-03 12:22 - 002198016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2017-09-25 10:59 - 2017-06-03 12:05 - 003523072 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2017-09-25 10:59 - 2017-06-03 12:04 - 002402816 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2017-09-25 10:59 - 2017-06-03 11:56 - 001981952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2017-09-25 10:59 - 2017-06-03 11:54 - 001964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2017-09-25 10:59 - 2017-06-03 11:42 - 007509504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-09-25 10:59 - 2017-06-03 11:41 - 004785152 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-09-25 10:59 - 2017-06-03 11:40 - 011277312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-09-25 10:59 - 2017-06-03 11:38 - 018798592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-09-25 10:59 - 2017-04-28 05:55 - 006488304 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-09-25 10:59 - 2017-04-28 05:43 - 002602688 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2017-09-25 10:59 - 2017-04-28 05:03 - 005118024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2017-09-25 10:59 - 2017-04-28 01:34 - 001422336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll
2017-09-25 10:56 - 2017-06-03 14:57 - 002153296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2017-09-25 10:56 - 2017-06-03 12:55 - 001823232 _____ C:\WINDOWS\SysWOW64\InputService.dll
2017-09-25 10:56 - 2017-06-03 12:24 - 004398080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2017-09-25 10:56 - 2017-06-03 12:04 - 001671680 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2017-09-25 10:56 - 2017-06-03 11:40 - 005456384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-09-25 10:56 - 2017-04-28 05:48 - 001823752 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2017-09-25 10:56 - 2017-04-28 05:17 - 003652768 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-09-25 10:56 - 2017-04-28 02:57 - 000875008 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2017-09-25 10:55 - 2017-06-03 15:40 - 002816024 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2017-09-25 10:55 - 2017-06-03 15:37 - 000335248 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2017-09-25 10:55 - 2017-06-03 15:35 - 000388896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2017-09-25 10:55 - 2017-06-03 15:34 - 001979744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-09-25 10:55 - 2017-06-03 15:32 - 001584576 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2017-09-25 10:55 - 2017-06-03 15:02 - 000724168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2017-09-25 10:55 - 2017-06-03 14:58 - 001361448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2017-09-25 10:55 - 2017-06-03 14:51 - 000264968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2017-09-25 10:55 - 2017-06-03 14:35 - 000613120 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2017-09-25 10:55 - 2017-06-03 14:21 - 000116064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2017-09-25 10:55 - 2017-06-03 14:19 - 000984448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2017-09-25 10:55 - 2017-06-03 14:16 - 000700256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2017-09-25 10:55 - 2017-06-03 14:14 - 000565656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2017-09-25 10:55 - 2017-06-03 13:52 - 000316256 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2017-09-25 10:55 - 2017-06-03 13:51 - 000545400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2017-09-25 10:55 - 2017-06-03 13:36 - 000901264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2017-09-25 10:55 - 2017-06-03 13:22 - 000995840 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe
2017-09-25 10:55 - 2017-06-03 13:07 - 000893440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2017-09-25 10:55 - 2017-06-03 13:07 - 000814592 _____ (Microsoft Corporation) C:\WINDOWS\system32\provcore.dll
2017-09-25 10:55 - 2017-06-03 13:03 - 000345088 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappcfg.dll
2017-09-25 10:55 - 2017-06-03 12:49 - 000846848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NaturalLanguage6.dll
2017-09-25 10:55 - 2017-06-03 12:43 - 001602560 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-09-25 10:55 - 2017-06-03 12:41 - 000671232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2017-09-25 10:55 - 2017-06-03 12:41 - 000584704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\provcore.dll
2017-09-25 10:55 - 2017-06-03 12:36 - 001918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2017-09-25 10:55 - 2017-06-03 12:23 - 001383424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-09-25 10:55 - 2017-06-03 12:20 - 001385472 _____ (Microsoft Corporation) C:\WINDOWS\system32\certutil.exe
2017-09-25 10:55 - 2017-06-03 12:16 - 000842752 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2017-09-25 10:55 - 2017-06-03 12:14 - 000470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2017-09-25 10:55 - 2017-06-03 12:03 - 003581952 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-09-25 10:55 - 2017-06-03 12:03 - 001382400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-09-25 10:55 - 2017-06-03 11:42 - 003581440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-09-25 10:55 - 2017-04-28 05:58 - 001316032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2017-09-25 10:55 - 2017-04-28 05:54 - 001951872 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-09-25 10:55 - 2017-04-28 05:54 - 001101792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2017-09-25 10:55 - 2017-04-28 05:53 - 000786624 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2017-09-25 10:55 - 2017-04-28 05:06 - 000955520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2017-09-25 10:55 - 2017-04-28 05:01 - 001531888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2017-09-25 10:55 - 2017-04-28 05:01 - 000602768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2017-09-25 10:55 - 2017-04-28 04:56 - 001523184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2017-09-25 10:55 - 2017-04-28 04:22 - 002905864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2017-09-25 10:55 - 2017-04-28 03:59 - 002226688 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2017-09-25 10:55 - 2017-04-28 03:32 - 000672768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2017-09-25 10:55 - 2017-04-28 03:32 - 000411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2017-09-25 10:55 - 2017-04-28 02:55 - 003494400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-09-25 10:55 - 2017-04-28 02:38 - 001415168 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-09-25 10:55 - 2017-04-28 02:32 - 000449536 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2017-09-25 10:55 - 2017-04-28 02:27 - 013027840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-09-25 10:55 - 2017-04-28 02:27 - 002962432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-09-25 10:55 - 2017-04-28 02:12 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2017-09-25 10:55 - 2017-04-28 01:45 - 002050048 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll
2017-09-25 10:54 - 2017-06-03 15:44 - 000605472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-09-25 10:54 - 2017-06-03 15:44 - 000123744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys
2017-09-25 10:54 - 2017-06-03 15:43 - 003467784 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2017-09-25 10:54 - 2017-06-03 15:39 - 002495776 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2017-09-25 10:54 - 2017-06-03 15:36 - 002156400 _____ (Microsoft Corporation) C:\WINDOWS\system32\hevcdecoder.dll
2017-09-25 10:54 - 2017-06-03 15:29 - 000243760 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2017-09-25 10:54 - 2017-06-03 15:04 - 000801632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-09-25 10:54 - 2017-06-03 15:03 - 000252768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2017-09-25 10:54 - 2017-06-03 15:01 - 006525424 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2017-09-25 10:54 - 2017-06-03 15:00 - 001134800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2017-09-25 10:54 - 2017-06-03 15:00 - 000658568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2017-09-25 10:54 - 2017-06-03 14:50 - 001895576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hevcdecoder.dll
2017-09-25 10:54 - 2017-06-03 14:37 - 000224712 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2017-09-25 10:54 - 2017-06-03 13:53 - 000185952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2017-09-25 10:54 - 2017-06-03 13:16 - 001123840 _____ (Microsoft Corporation) C:\WINDOWS\system32\NaturalLanguage6.dll
2017-09-25 10:54 - 2017-06-03 12:15 - 001119744 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2017-09-25 10:54 - 2017-06-03 12:11 - 007055872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2017-09-25 10:54 - 2017-06-03 12:08 - 001140736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certutil.exe
2017-09-25 10:54 - 2017-06-03 12:04 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
2017-09-25 10:54 - 2017-06-03 12:01 - 000902656 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2017-09-25 10:54 - 2017-06-03 11:55 - 000123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2017-09-25 10:54 - 2017-06-03 11:55 - 000121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2017-09-25 10:54 - 2017-06-03 11:53 - 000712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2017-09-25 10:54 - 2017-06-03 11:49 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2017-09-25 10:54 - 2017-06-03 11:38 - 000939008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2017-09-25 10:54 - 2017-04-28 05:17 - 000026464 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe
2017-09-25 10:54 - 2017-04-28 05:02 - 000823336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2017-09-25 10:54 - 2017-04-28 02:54 - 002120192 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2017-09-25 10:54 - 2017-04-28 02:53 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2017-09-25 10:54 - 2017-04-28 02:26 - 002042880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2017-09-25 10:53 - 2017-06-03 15:44 - 002463704 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2017-09-25 10:53 - 2017-06-03 15:43 - 000652864 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2017-09-25 10:53 - 2017-06-03 15:42 - 001538176 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-09-25 10:53 - 2017-06-03 15:41 - 000552288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2017-09-25 10:53 - 2017-06-03 15:33 - 000807832 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-09-25 10:53 - 2017-06-03 14:54 - 000439648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2017-09-25 10:53 - 2017-06-03 14:52 - 001766488 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2017-09-25 10:53 - 2017-06-03 14:35 - 000379224 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2017-09-25 10:53 - 2017-06-03 13:44 - 000290304 _____ (Microsoft Corporation) C:\WINDOWS\system32\oemlicense.dll
2017-09-25 10:53 - 2017-06-03 13:31 - 000446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2017-09-25 10:53 - 2017-06-03 13:28 - 000260096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpr.exe
2017-09-25 10:53 - 2017-06-03 13:23 - 002446336 _____ C:\WINDOWS\system32\InputService.dll
2017-09-25 10:53 - 2017-06-03 13:21 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2017-09-25 10:53 - 2017-06-03 13:09 - 000209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oemlicense.dll
2017-09-25 10:53 - 2017-06-03 13:03 - 000326656 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapp3hst.dll
2017-09-25 10:53 - 2017-06-03 13:03 - 000279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\eapphost.dll
2017-09-25 10:53 - 2017-06-03 12:53 - 000338944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2017-09-25 10:53 - 2017-06-03 12:44 - 001686528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2017-09-25 10:53 - 2017-06-03 12:43 - 000573952 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2017-09-25 10:53 - 2017-06-03 12:42 - 000775680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2017-09-25 10:53 - 2017-06-03 12:40 - 002253824 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2017-09-25 10:53 - 2017-06-03 12:39 - 000799232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpccpl.dll
2017-09-25 10:53 - 2017-06-03 12:39 - 000215040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapphost.dll
2017-09-25 10:53 - 2017-06-03 12:38 - 000243712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapp3hst.dll
2017-09-25 10:53 - 2017-06-03 12:38 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappgnui.dll
2017-09-25 10:53 - 2017-06-03 12:24 - 001492992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2017-09-25 10:53 - 2017-06-03 12:23 - 000501760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2017-09-25 10:53 - 2017-06-03 12:23 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2017-09-25 10:53 - 2017-06-03 12:22 - 000819712 _____ (Microsoft Corporation) C:\WINDOWS\system32\licensingdiag.exe
2017-09-25 10:53 - 2017-06-03 12:22 - 000679936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2017-09-25 10:53 - 2017-06-03 12:09 - 006101504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2017-09-25 10:53 - 2017-06-03 12:09 - 000954368 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2017-09-25 10:53 - 2017-06-03 12:04 - 004168704 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbon.dll
2017-09-25 10:53 - 2017-06-03 12:00 - 005079552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2017-09-25 10:53 - 2017-06-03 11:56 - 003443200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbon.dll
2017-09-25 10:53 - 2017-06-03 11:54 - 000897024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmiEngine.dll
2017-09-25 10:53 - 2017-06-03 11:54 - 000061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\vss_ps.dll
2017-09-25 10:53 - 2017-06-03 11:51 - 000297984 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsku.dll
2017-09-25 10:53 - 2017-06-03 11:50 - 001061888 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2017-09-25 10:53 - 2017-06-03 11:41 - 000237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.ps.dll
2017-09-25 10:53 - 2017-06-03 11:35 - 000716288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll
2017-09-25 10:53 - 2017-04-28 04:43 - 000231264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionQueue.dll
2017-09-25 10:53 - 2017-04-28 03:59 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-09-25 10:53 - 2017-04-28 02:55 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2017-09-25 10:53 - 2017-04-28 02:54 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2017-09-25 10:53 - 2017-04-28 02:54 - 000088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2017-09-25 10:53 - 2017-04-28 02:52 - 000088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2017-09-25 10:53 - 2017-04-28 02:31 - 000196096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2017-09-25 10:53 - 2017-04-28 02:25 - 000073728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2017-09-25 10:53 - 2017-04-28 02:05 - 000915456 _____ (Microsoft Corporation) C:\WINDOWS\system32\configurationclient.dll
2017-09-25 10:52 - 2017-06-03 13:47 - 000483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2017-09-25 10:52 - 2017-06-03 13:24 - 002902528 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2017-09-25 10:52 - 2017-06-03 13:23 - 000596992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp_win.dll
2017-09-25 10:52 - 2017-06-03 13:23 - 000553472 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe
2017-09-25 10:52 - 2017-06-03 13:18 - 000031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll
2017-09-25 10:52 - 2017-06-03 13:17 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2017-09-25 10:52 - 2017-06-03 13:17 - 000183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSSync.dll
2017-09-25 10:52 - 2017-06-03 13:16 - 000963072 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2017-09-25 10:52 - 2017-06-03 13:12 - 000371712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2017-09-25 10:52 - 2017-06-03 13:11 - 004847616 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2017-09-25 10:52 - 2017-06-03 13:03 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\eappgnui.dll
2017-09-25 10:52 - 2017-06-03 13:02 - 000322560 _____ (Microsoft Corporation) C:\WINDOWS\system32\unimdm.tsp
2017-09-25 10:52 - 2017-06-03 13:02 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassvcs.dll
2017-09-25 10:52 - 2017-06-03 13:00 - 000328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2017-09-25 10:52 - 2017-06-03 12:55 - 002599424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2017-09-25 10:52 - 2017-06-03 12:55 - 000420352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GamePanel.exe
2017-09-25 10:52 - 2017-06-03 12:54 - 000451584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp_win.dll
2017-09-25 10:52 - 2017-06-03 12:50 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll
2017-09-25 10:52 - 2017-06-03 12:49 - 000247808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2017-09-25 10:52 - 2017-06-03 12:49 - 000153088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSSync.dll
2017-09-25 10:52 - 2017-06-03 12:48 - 000806912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2017-09-25 10:52 - 2017-06-03 12:44 - 003873280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2017-09-25 10:52 - 2017-06-03 12:39 - 000279552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eappcfg.dll
2017-09-25 10:52 - 2017-06-03 12:38 - 000281600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\unimdm.tsp
2017-09-25 10:52 - 2017-06-03 12:33 - 005448704 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2017-09-25 10:52 - 2017-06-03 12:28 - 000110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
2017-09-25 10:52 - 2017-06-03 12:24 - 007569408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2017-09-25 10:52 - 2017-06-03 12:21 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2017-09-25 10:52 - 2017-06-03 12:20 - 000249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
2017-09-25 10:52 - 2017-06-03 12:18 - 000054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\certenc.dll
2017-09-25 10:52 - 2017-06-03 12:14 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IdCtrls.dll
2017-09-25 10:52 - 2017-06-03 12:13 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\WPTaskScheduler.dll
2017-09-25 10:52 - 2017-06-03 12:09 - 000617472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\licensingdiag.exe
2017-09-25 10:52 - 2017-06-03 12:09 - 000158720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
2017-09-25 10:52 - 2017-06-03 12:08 - 004453888 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-09-25 10:52 - 2017-06-03 12:08 - 000161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
2017-09-25 10:52 - 2017-06-03 12:06 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certenc.dll
2017-09-25 10:52 - 2017-06-03 12:05 - 000045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2017-09-25 10:52 - 2017-06-03 12:04 - 000832512 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2017-09-25 10:52 - 2017-06-03 12:03 - 000584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll
2017-09-25 10:52 - 2017-06-03 12:02 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-09-25 10:52 - 2017-06-03 11:59 - 003692032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-09-25 10:52 - 2017-06-03 11:56 - 000037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2017-09-25 10:52 - 2017-06-03 11:54 - 000584704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll
2017-09-25 10:52 - 2017-06-03 11:51 - 001844736 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2017-09-25 10:52 - 2017-06-03 11:51 - 000162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReInfo.dll
2017-09-25 10:52 - 2017-06-03 11:49 - 000565760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-09-25 10:52 - 2017-06-03 11:46 - 000251392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winsku.dll
2017-09-25 10:52 - 2017-06-03 11:41 - 000185856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll
2017-09-25 10:52 - 2017-06-03 11:31 - 000136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgcore.dll
2017-09-25 10:52 - 2017-06-03 11:29 - 000117760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgcore.dll
2017-09-25 10:52 - 2017-06-03 11:17 - 000512000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2017-09-25 10:52 - 2017-06-03 08:49 - 000448576 _____ C:\WINDOWS\system32\ApnDatabase.xml
2017-09-25 10:52 - 2017-04-28 03:18 - 000325120 _____ (Microsoft Corporation) C:\WINDOWS\system32\DaOtpCredentialProvider.dll
2017-09-25 10:52 - 2017-04-28 02:55 - 000771072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-09-25 10:52 - 2017-04-28 02:54 - 000262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2017-09-25 10:52 - 2017-04-28 02:54 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-09-25 10:52 - 2017-04-28 02:53 - 000374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2017-09-25 10:52 - 2017-04-28 02:53 - 000145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2017-09-25 10:52 - 2017-04-28 02:29 - 000601600 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
2017-09-25 10:52 - 2017-04-28 02:27 - 000574464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2017-09-25 10:52 - 2017-04-28 02:27 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2017-09-25 10:52 - 2017-04-28 02:26 - 000328192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2017-09-25 10:52 - 2017-04-28 02:26 - 000230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2017-09-25 10:52 - 2017-04-28 02:02 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdProxy.dll
2017-09-25 10:52 - 2017-04-28 01:49 - 000672768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-09-25 10:52 - 2017-04-28 01:40 - 000295936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-09-25 10:52 - 2017-04-28 01:40 - 000252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2017-09-25 10:52 - 2017-04-28 01:40 - 000128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2017-09-25 10:52 - 2017-04-28 01:40 - 000082944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2017-09-25 10:17 - 2017-06-30 11:45 - 001571520 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2017-09-25 10:17 - 2017-06-30 11:45 - 001221824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-09-25 10:17 - 2017-06-30 11:45 - 000636096 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2017-09-25 10:17 - 2017-06-30 11:45 - 000551104 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2017-09-25 10:17 - 2017-06-30 11:45 - 000341184 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2017-09-25 10:17 - 2017-06-30 11:45 - 000143040 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2017-09-25 10:17 - 2017-06-30 11:45 - 000103616 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2017-09-25 10:17 - 2017-06-30 11:45 - 000041664 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2017-09-25 10:17 - 2017-06-30 09:34 - 000335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2017-09-25 10:17 - 2017-06-30 09:34 - 000225632 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2017-09-24 17:08 - 2017-09-26 16:47 - 000000000 ____D C:\Program Files\rempl
2017-09-24 17:07 - 2017-07-06 10:58 - 000366592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-09-24 17:07 - 2017-07-06 10:57 - 002244096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-09-24 17:07 - 2017-06-17 09:13 - 000048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2017-09-24 17:07 - 2017-04-28 04:05 - 000151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2017-09-24 17:07 - 2017-04-28 04:05 - 000055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2017-09-24 17:07 - 2017-04-28 03:32 - 000243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2017-09-24 17:07 - 2017-04-28 03:29 - 000354816 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-09-24 17:07 - 2017-04-28 03:29 - 000334848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2017-09-11 09:50 - 2017-10-03 21:15 - 000024595 _____ C:\bdlog.txt
2017-09-08 09:39 - 2017-09-08 09:39 - 000000416 _____ C:\Users\Meeuwes\Desktop\Deze pc - Snelkoppeling.lnk
2017-09-08 09:32 - 2017-10-01 22:41 - 000178688 ___SH C:\Users\Meeuwes\Downloads\Thumbs.db
2017-09-08 08:54 - 2017-09-08 08:54 - 000024576 ___SH C:\Users\Meeuwes\Thumbs.db
2017-09-06 12:46 - 2017-09-06 12:46 - 000002251 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth Pro.lnk
2017-09-03 21:19 - 2017-09-03 21:19 - 003646344 _____ (WiseCleaner.com ) C:\Users\Meeuwes\Downloads\WDCFree(4).exe
2017-09-03 14:23 - 2017-09-15 16:12 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox

==================== Een Maand Gewijzigd bestanden en mappen ========

(Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)

2017-10-03 22:35 - 2016-11-20 00:11 - 000000000 ____D C:\Users\Meeuwes\AppData\LocalLow\Mozilla
2017-10-03 22:33 - 2012-11-27 18:54 - 000000000 ____D C:\Users\Meeuwes\Documents\Outlook-bestanden
2017-10-03 22:20 - 2016-10-14 18:26 - 000000000 ____D C:\Program Files\Bitdefender Agent
2017-10-03 21:57 - 2015-08-08 10:15 - 000000000 ____D C:\Users\Meeuwes\AppData\Local\Packages
2017-10-03 21:38 - 2015-07-10 13:04 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-10-03 21:33 - 2012-05-10 12:12 - 000000000 ____D C:\ProgramData\clear.fi
2017-10-03 21:18 - 2013-04-14 13:14 - 000000375 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics
2017-10-03 21:17 - 2015-07-10 14:21 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-10-03 21:16 - 2015-07-10 11:05 - 000524288 ___SH C:\WINDOWS\system32\config\BBI
2017-10-03 21:14 - 2016-10-28 12:02 - 000000000 ___HD C:\$GetCurrent
2017-10-03 21:14 - 2015-08-08 08:38 - 000001908 _____ C:\WINDOWS\diagwrn.xml
2017-10-03 21:14 - 2015-08-08 08:38 - 000001908 _____ C:\WINDOWS\diagerr.xml
2017-10-03 21:12 - 2016-11-05 14:38 - 000000000 ____D C:\WINDOWS\Panther
2017-10-03 20:54 - 2016-08-07 15:21 - 000000036 _____ C:\WINDOWS\progress.ini
2017-10-03 20:23 - 2015-07-10 13:02 - 000000000 ____D C:\WINDOWS\INF
2017-10-03 20:15 - 2017-01-31 16:12 - 000161280 ___SH C:\Users\Meeuwes\Documents\Thumbs.db
2017-10-03 20:07 - 2015-07-10 13:04 - 000000000 ___HD C:\Program Files\WindowsApps
2017-10-03 19:51 - 2015-08-08 09:33 - 002134484 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-10-03 19:51 - 2015-07-10 18:09 - 000928098 _____ C:\WINDOWS\system32\perfh013.dat
2017-10-03 19:51 - 2015-07-10 18:09 - 000203716 _____ C:\WINDOWS\system32\perfc013.dat
2017-10-03 19:35 - 2014-03-30 09:20 - 000004188 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{E8A96ADF-8E00-454F-A83B-547BB266779D}
2017-10-03 19:34 - 2016-04-25 16:46 - 000000000 ____D C:\Users\Meeuwes\AppData\Local\Adobe
2017-10-03 19:32 - 2017-08-10 14:02 - 000362664 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\ignis.sys
2017-10-03 19:31 - 2017-08-10 14:02 - 001019880 _____ (BitDefender S.R.L. Bucharest, ROMANIA) C:\WINDOWS\system32\Drivers\atc.sys
2017-10-03 19:29 - 2017-08-10 14:02 - 001763744 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avc3.sys
2017-10-02 09:03 - 2012-05-11 10:31 - 000000000 ____D C:\Users\Meeuwes\Desktop\Foto program
2017-10-02 08:57 - 2016-12-06 14:15 - 000001084 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk
2017-10-02 08:57 - 2016-12-06 14:15 - 000000000 ____D C:\Program Files\paint.net
2017-10-02 08:21 - 2013-11-21 19:49 - 000000000 ____D C:\Users\Meeuwes\AppData\Local\CrashDumps
2017-10-01 22:22 - 2014-10-13 17:18 - 000000000 ____D C:\WINDOWS\ca
2017-10-01 21:21 - 2017-07-28 09:21 - 000192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-10-01 21:12 - 2016-10-24 08:24 - 000003644 _____ C:\WINDOWS\System32\Tasks\CreateExplorerShellUnelevatedTask
2017-10-01 20:31 - 2016-12-18 10:48 - 000000000 ___HD C:\$SysReset
2017-10-01 17:39 - 2014-08-08 09:56 - 000070656 _____ C:\Users\Meeuwes\Documents\Aflossing Dennis.xlsx
2017-10-01 17:29 - 2016-09-30 12:06 - 000000000 ____D C:\Users\Meeuwes\Documents\Adobe documenten
2017-10-01 17:24 - 2017-05-01 09:17 - 000000000 ____D C:\Users\Meeuwes\Desktop\Tools
2017-10-01 17:05 - 2012-11-27 18:54 - 010806604 _____ C:\Users\Meeuwes\Documents\Energie-2.xlsx
2017-10-01 17:04 - 2013-12-11 12:24 - 009724176 _____ C:\Users\Meeuwes\Documents\Opbrengst zonne panelen.xlsx
2017-10-01 16:06 - 2015-08-08 10:15 - 000000000 __RHD C:\Users\Public\AccountPictures
2017-10-01 16:02 - 2017-08-12 10:49 - 004973016 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-10-01 16:01 - 2012-10-16 16:50 - 000000000 ____D C:\Program Files\Microsoft Silverlight
2017-10-01 16:01 - 2012-10-16 16:50 - 000000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2017-09-26 19:56 - 2015-07-10 13:04 - 000000000 ___SD C:\WINDOWS\system32\F12
2017-09-26 19:56 - 2015-07-10 13:04 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-09-26 19:56 - 2015-07-10 13:04 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2017-09-26 19:56 - 2015-07-10 13:04 - 000000000 ____D C:\WINDOWS\system32\oobe
2017-09-26 19:56 - 2015-07-10 13:04 - 000000000 ____D C:\WINDOWS\system32\appraiser
2017-09-26 19:56 - 2015-07-10 13:04 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2017-09-26 19:56 - 2015-07-10 13:04 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2017-09-26 19:56 - 2015-07-10 13:04 - 000000000 ____D C:\Program Files\Windows Defender
2017-09-26 19:56 - 2015-07-10 13:04 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-09-26 19:56 - 2015-07-10 13:04 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2017-09-26 19:56 - 2015-07-10 11:05 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2017-09-26 19:56 - 2015-07-10 11:05 - 000000000 ____D C:\WINDOWS\system32\Dism
2017-09-26 18:08 - 2015-07-10 12:55 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-09-26 17:57 - 2013-08-15 08:00 - 000000000 ____D C:\WINDOWS\system32\MRT
2017-09-26 17:53 - 2012-05-13 14:33 - 138202976 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-09-26 17:43 - 2009-07-14 04:34 - 000000593 _____ C:\WINDOWS\win.ini
2017-09-26 17:20 - 2012-10-16 16:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-09-17 20:17 - 2012-05-11 10:50 - 000000000 ____D C:\ProgramData\Spotnet
2017-09-17 19:26 - 2012-05-11 10:57 - 000000000 ____D C:\Spotnet
2017-09-14 13:16 - 2016-12-06 14:14 - 000000000 ____D C:\Users\Meeuwes\AppData\Local\paint.net
2017-09-12 18:07 - 2015-07-10 13:04 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-09-12 18:07 - 2015-07-10 13:04 - 000000000 ____D C:\WINDOWS\system32\Macromed
2017-09-09 09:58 - 2015-08-08 09:34 - 000000000 ____D C:\Users\Meeuwes
2017-09-07 16:41 - 2015-11-17 17:17 - 000043289 _____ C:\Users\Meeuwes\Documents\adressenboek.xlsx
2017-09-06 12:46 - 2013-02-13 23:58 - 000000000 ____D C:\Program Files (x86)\Google
2017-09-05 12:45 - 2015-01-18 12:46 - 000007628 _____ C:\Users\Meeuwes\AppData\Local\Resmon.ResmonCfg
2017-09-03 21:13 - 2015-11-08 12:27 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

==================== Bestanden in de root van sommige mappen =======

2012-09-23 09:15 - 2014-04-27 20:03 - 000000165 _____ () C:\Users\Meeuwes\AppData\Roaming\default.pls
2014-05-21 12:09 - 2016-03-16 20:14 - 000000234 _____ () C:\Users\Meeuwes\AppData\Roaming\default.rss
2014-10-21 16:50 - 2014-10-21 16:50 - 000000000 _____ () C:\Users\Meeuwes\AppData\Roaming\downloads.m3u
2013-08-02 11:05 - 2013-08-02 11:18 - 000000238 _____ () C:\Users\Meeuwes\AppData\Roaming\fixpermissions.bat
2005-04-08 04:16 - 2014-05-21 08:37 - 000000816 ____H () C:\Users\Meeuwes\AppData\Roaming\Meeuweslog.dat
2013-12-19 10:12 - 2014-08-17 12:17 - 000000189 _____ () C:\Users\Meeuwes\AppData\Roaming\WB.CFG
2015-02-03 17:19 - 2015-02-03 17:19 - 183677480 _____ () C:\Users\Meeuwes\AppData\Local\ACCCx2_9_0_465.zip.aamdownload
2015-02-03 17:19 - 2015-02-03 17:19 - 000002110 _____ () C:\Users\Meeuwes\AppData\Local\ACCCx2_9_0_465.zip.aamdownload.aamd
2015-03-12 22:54 - 2015-03-12 22:54 - 184702896 _____ () C:\Users\Meeuwes\AppData\Local\ACCCx2_9_1_474.zip.aamdownload
2015-03-12 22:54 - 2015-03-12 22:54 - 000002216 _____ () C:\Users\Meeuwes\AppData\Local\ACCCx2_9_1_474.zip.aamdownload.aamd
2015-01-18 12:46 - 2017-09-05 12:45 - 000007628 _____ () C:\Users\Meeuwes\AppData\Local\Resmon.ResmonCfg
2016-10-14 18:26 - 2016-10-14 18:26 - 000046746 _____ () C:\ProgramData\agent.1476462389.bdinstall.bin
2016-10-16 10:49 - 2016-10-16 10:49 - 000026913 _____ () C:\ProgramData\agent.1476607777.bdinstall.bin
2016-10-16 11:00 - 2016-10-16 11:00 - 000026891 _____ () C:\ProgramData\agent.1476608449.bdinstall.bin
2016-10-30 20:12 - 2016-10-30 20:12 - 000020044 _____ () C:\ProgramData\agent.1477851163.bdinstall.bin
2016-11-01 15:37 - 2016-11-01 15:37 - 000028765 _____ () C:\ProgramData\agent.1478007436.bdinstall.bin
2017-10-02 08:48 - 2017-10-02 08:48 - 000030241 _____ () C:\ProgramData\agent.update.1506926901.bdinstall.bin
2017-03-23 20:44 - 2017-03-23 20:44 - 000000057 _____ () C:\ProgramData\Ament.ini
2012-01-14 12:18 - 2012-01-14 12:20 - 000015222 _____ () C:\ProgramData\ArcadeDeluxe5.log
2017-08-10 14:10 - 2017-08-10 14:10 - 000475189 _____ () C:\ProgramData\cl.1502366314.bdinstall.bin
2016-11-18 00:10 - 2016-11-18 00:10 - 000004096 _____ () C:\ProgramData\czchsjpj.srw
2015-08-08 09:30 - 2015-08-08 09:30 - 000000000 ____H () C:\ProgramData\DP45977C.lfl
2016-11-18 00:10 - 2016-11-18 00:10 - 000000016 _____ () C:\ProgramData\mntemp
2013-03-26 20:19 - 2013-03-26 20:20 - 000000033 _____ () C:\ProgramData\PS.log

Bestanden om te verplaatsen of verwijderen:
====================
C:\Windows\Tasks\{65EDB3BA-0851-C22D-5EC6-6F04E7D872D8}.job


Sommige bestanden in TEMP:
====================
2017-10-02 08:40 - 2017-10-02 08:40 - 007235320 _____ () C:\Users\Meeuwes\AppData\Local\Temp\paint.net.4.0.18.install.exe

==================== Bamital & volsnap ======================

(Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.)

C:\WINDOWS\system32\winlogon.exe => Bestand is getekend
C:\WINDOWS\system32\wininit.exe => Bestand is getekend
C:\WINDOWS\explorer.exe => Bestand is getekend
C:\WINDOWS\SysWOW64\explorer.exe => Bestand is getekend
C:\WINDOWS\system32\svchost.exe => Bestand is getekend
C:\WINDOWS\SysWOW64\svchost.exe => Bestand is getekend
C:\WINDOWS\system32\services.exe => Bestand is getekend
C:\WINDOWS\system32\User32.dll => Bestand is getekend
C:\WINDOWS\SysWOW64\User32.dll => Bestand is getekend
C:\WINDOWS\system32\userinit.exe => Bestand is getekend
C:\WINDOWS\SysWOW64\userinit.exe => Bestand is getekend
C:\WINDOWS\system32\rpcss.dll => Bestand is getekend
C:\WINDOWS\system32\dnsapi.dll => Bestand is getekend
C:\WINDOWS\SysWOW64\dnsapi.dll => Bestand is getekend
C:\WINDOWS\system32\Drivers\volsnap.sys => Bestand is getekend

LastRegBack: 2017-09-26 18:04

==================== Eind van FRST.txt ============================
Dan moet dit een goed log bestand zijn. Ik leer steeds meer.

gr Blusopa.

 

[Abraham54]

Zo te lezen schijnt jouw gebruikersaccount corrupt geraakt te zijn.


Waarschuwing: onderstaande bewerking is enkel voor deze computer bedoeld, het toepassen hiervan in een andere computer kan tot schade in Windows leiden.


We gaan

Farbar Recovery Scan Tool (FRST.exe) opnieuw gebruiken.

Open een nieuw kladblok (of anders: notepad) bestand, via "Start\Alle programma’s\Bureau-accessoires\Kladblok (of Notepad)".
Kopieer en plak de tekst in het code-venster in het lege kladblokvenster.

start

CreateRestorePoint:
EmptyTemp:
CloseProcesses:

HKU\S-1-5-21-623294757-697560527-870178117-1000\...\RunOnce: [Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\RunOnce: [Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64"
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\RunOnce: [Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64"
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\RunOnce: [Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64"
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\RunOnce: [Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64"
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\RunOnce: [Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64"
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\RunOnce: [Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"
GroupPolicy: Restrictie <==== AANDACHT
R2 HPSLPSVC; C:\Users\Meeuwes\AppData\Local\Temp\7zS06AF\hpslpsvc64.dll [1039360 2015-09-21] (Hewlett-Packard Co.) [Bestand niet getekend] <==== AANDACHT
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Geen bestand
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Geen bestand
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Geen bestand
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Geen bestand
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Geen bestand
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Geen bestand
ContextMenuHandlers1: [PrivaZer] -> {7691BE2F-3D79-AADE-9C87-4D6EBCC76682} => -> Geen bestand
ContextMenuHandlers2: [PrivaZer] -> {7691BE2F-3D79-AADE-9C87-4D6EBCC76682} => -> Geen bestand
ContextMenuHandlers3: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Geen bestand
ContextMenuHandlers3: [PrivaZer] -> {7691BE2F-3D79-AADE-9C87-4D6EBCC76682} => -> Geen bestand
ContextMenuHandlers4: [PrivaZer] -> {7691BE2F-3D79-AADE-9C87-4D6EBCC76682} => -> Geen bestand
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> Geen bestand
ContextMenuHandlers6: [PrivaZer] -> {7691BE2F-3D79-AADE-9C87-4D6EBCC76682} => -> Geen bestand
AlternateDataStreams: C:\Users\Meeuwes\Downloads\bitdefender_windows_c11dd7dd-09e0-4d1c-9fbc-a89324107761.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\DeepBurner1.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\DVDFab10013.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\DVDFab9312.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\Firefox Setup Stub 52.0.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\Firefox Setup Stub 53.0.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\hppiw.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\kompozer-0.8b3.nl.win32.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\mb3-setup-consumer-3.1.2.1733-1.0.160-1.0.2251(1).exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\mb3-setup-consumer-3.1.2.1733-1.0.160-1.0.2251.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\mbam-setup-FileHippo.19901-2.2.1.1043.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\nvu-0.90-win32-nl-NL-installer.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\QtlMovie-Win64-1.11.1.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\rcsetup153.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\SkypeSetup.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\Spotnet.last.setup.release(1).exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\Spotnet.last.setup.release.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\tweaking.com_windows_repair_aio_setup.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\video-converter-studio.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\WDCFree.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\winx-dvd-ripper.exe:BDU [0]

cmd: ipconfig /flushdns
cmd: netsh winsock reset
end

Sla nu dit kladblokbestand in de dezelfde locatie waar ook FRST.exe aanwezig is op als Fixlist.txt

Farbar Recovery Scan Tool (FRST.exe) met de fixlist.txt gebruiken

• Windows Vista, Windows 7, Windows 8 en Windows 10: via rechtsklik op FRST.exe en kies voor "Als Administrator uitvoeren".
• Als het programma wordt gestart, klik dan op Ja in de popup.
• Druk op de Fix knop.
• Na de fix wordt een logbestand - Fixlog.txt - in dezelfde locatie aangemaakt van waaruit FRST.exe is gestart.
• Post de inhoud van dit logbestand in jouw volgende bericht.

 

[Aarie25]

PS ik gebruik Bitfender 2018

Oke mooi.

 

[blusopa]

Abraham, bij deze de log

Fix resultaat van Farbar Recovery Scan Tool (x64) Versie: 03-10-2017 01
Gestart door Meeuwes (04-10-2017 12:15:30) Run:1
Gestart vanaf C:\Users\Meeuwes\Desktop\PC opschonen
Geladen Profielen: Meeuwes (Beschikbare Profielen: Meeuwes)
Boot Modus: Normal
==============================================

fixlist inhoud:
*****************
start

CreateRestorePoint:
EmptyTemp:
CloseProcesses:

HKU\S-1-5-21-623294757-697560527-870178117-1000\...\RunOnce: [Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\RunOnce: [Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64"
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\RunOnce: [Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64"
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\RunOnce: [Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64"
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\RunOnce: [Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64"
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\RunOnce: [Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64"
HKU\S-1-5-21-623294757-697560527-870178117-1000\...\RunOnce: [Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"
GroupPolicy: Restrictie <==== AANDACHT
R2 HPSLPSVC; C:\Users\Meeuwes\AppData\Local\Temp\7zS06AF\hpslpsvc64.dll [1039360 2015-09-21] (Hewlett-Packard Co.) [Bestand niet getekend] <==== AANDACHT
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Geen bestand
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Geen bestand
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Geen bestand
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Geen bestand
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Geen bestand
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Geen bestand
ContextMenuHandlers1: [PrivaZer] -> {7691BE2F-3D79-AADE-9C87-4D6EBCC76682} => -> Geen bestand
ContextMenuHandlers2: [PrivaZer] -> {7691BE2F-3D79-AADE-9C87-4D6EBCC76682} => -> Geen bestand
ContextMenuHandlers3: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Geen bestand
ContextMenuHandlers3: [PrivaZer] -> {7691BE2F-3D79-AADE-9C87-4D6EBCC76682} => -> Geen bestand
ContextMenuHandlers4: [PrivaZer] -> {7691BE2F-3D79-AADE-9C87-4D6EBCC76682} => -> Geen bestand
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> Geen bestand
ContextMenuHandlers6: [PrivaZer] -> {7691BE2F-3D79-AADE-9C87-4D6EBCC76682} => -> Geen bestand
AlternateDataStreams: C:\Users\Meeuwes\Downloads\bitdefender_windows_c11dd7dd-09e0-4d1c-9fbc-a89324107761.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\DeepBurner1.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\DVDFab10013.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\DVDFab9312.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\Firefox Setup Stub 52.0.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\Firefox Setup Stub 53.0.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\hppiw.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\kompozer-0.8b3.nl.win32.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\mb3-setup-consumer-3.1.2.1733-1.0.160-1.0.2251(1).exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\mb3-setup-consumer-3.1.2.1733-1.0.160-1.0.2251.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\mbam-setup-FileHippo.19901-2.2.1.1043.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\nvu-0.90-win32-nl-NL-installer.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\QtlMovie-Win64-1.11.1.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\rcsetup153.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\SkypeSetup.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\Spotnet.last.setup.release(1).exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\Spotnet.last.setup.release.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\tweaking.com_windows_repair_aio_setup.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\video-converter-studio.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\WDCFree.exe:BDU [0]
AlternateDataStreams: C:\Users\Meeuwes\Downloads\winx-dvd-ripper.exe:BDU [0]

cmd: ipconfig /flushdns
cmd: netsh winsock reset
end
*****************

Herstelpunt is succesvol gemaakt.
Proces succesvol afgesloten.
HKU\S-1-5-21-623294757-697560527-870178117-1000\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64 => waarde is succesvol verwijderd
HKU\S-1-5-21-623294757-697560527-870178117-1000\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64 => waarde is succesvol verwijderd
HKU\S-1-5-21-623294757-697560527-870178117-1000\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64 => waarde is succesvol verwijderd
HKU\S-1-5-21-623294757-697560527-870178117-1000\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.5951.0827\amd64 => waarde is succesvol verwijderd
HKU\S-1-5-21-623294757-697560527-870178117-1000\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\amd64 => waarde is succesvol verwijderd
HKU\S-1-5-21-623294757-697560527-870178117-1000\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64 => waarde is succesvol verwijderd
HKU\S-1-5-21-623294757-697560527-870178117-1000\Software\Microsoft\Windows\CurrentVersion\RunOnce\\Uninstall C:\Users\Meeuwes\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64 => waarde is succesvol verwijderd
C:\WINDOWS\system32\GroupPolicy\Machine => is succesvol verplaatst
C:\WINDOWS\system32\GroupPolicy\GPT.ini => is succesvol verplaatst
C:\WINDOWS\SysWOW64\GroupPolicy\GPT.ini => is succesvol verplaatst
HPSLPSVC => Kon service niet stoppen.
HKLM\System\CurrentControlSet\Services\HPSLPSVC => sleutel is succesvol verwijderd
HPSLPSVC => dienst is succesvol verwijderd
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive1 => sleutel is succesvol verwijderd
HKLM\Software\Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524} => sleutel niet gevonden.
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive2 => sleutel is succesvol verwijderd
HKLM\Software\Classes\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282} => sleutel niet gevonden.
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive3 => sleutel is succesvol verwijderd
HKLM\Software\Classes\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30} => sleutel niet gevonden.
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive4 => sleutel is succesvol verwijderd
HKLM\Software\Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A} => sleutel niet gevonden.
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive5 => sleutel is succesvol verwijderd
HKLM\Software\Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => sleutel niet gevonden.
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast => sleutel is succesvol verwijderd
HKLM\Software\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => sleutel niet gevonden.
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\PrivaZer => sleutel is succesvol verwijderd
HKLM\Software\Classes\CLSID\{7691BE2F-3D79-AADE-9C87-4D6EBCC76682} => sleutel niet gevonden.
HKLM\Software\Classes\Drive\ShellEx\ContextMenuHandlers\PrivaZer => sleutel is succesvol verwijderd
HKLM\Software\Classes\CLSID\{7691BE2F-3D79-AADE-9C87-4D6EBCC76682} => sleutel niet gevonden.
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\00avast => sleutel is succesvol verwijderd
HKLM\Software\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => sleutel niet gevonden.
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\PrivaZer => sleutel is succesvol verwijderd
HKLM\Software\Classes\CLSID\{7691BE2F-3D79-AADE-9C87-4D6EBCC76682} => sleutel niet gevonden.
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\PrivaZer => sleutel is succesvol verwijderd
HKLM\Software\Classes\CLSID\{7691BE2F-3D79-AADE-9C87-4D6EBCC76682} => sleutel niet gevonden.
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\Gadgets => sleutel is succesvol verwijderd
HKLM\Software\Classes\CLSID\{6B9228DA-9C15-419e-856C-19E768A13BDC} => sleutel niet gevonden.
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\PrivaZer => sleutel is succesvol verwijderd
HKLM\Software\Classes\CLSID\{7691BE2F-3D79-AADE-9C87-4D6EBCC76682} => sleutel niet gevonden.
C:\Users\Meeuwes\Downloads\bitdefender_windows_c11dd7dd-09e0-4d1c-9fbc-a89324107761.exe => ":BDU" ADS is succesvol verwijderd.
C:\Users\Meeuwes\Downloads\DeepBurner1.exe => ":BDU" ADS is succesvol verwijderd.
C:\Users\Meeuwes\Downloads\DVDFab10013.exe => ":BDU" ADS is succesvol verwijderd.
C:\Users\Meeuwes\Downloads\DVDFab9312.exe => ":BDU" ADS is succesvol verwijderd.
C:\Users\Meeuwes\Downloads\Firefox Setup Stub 52.0.exe => ":BDU" ADS is succesvol verwijderd.
C:\Users\Meeuwes\Downloads\Firefox Setup Stub 53.0.exe => ":BDU" ADS is succesvol verwijderd.
C:\Users\Meeuwes\Downloads\hppiw.exe => ":BDU" ADS is succesvol verwijderd.
C:\Users\Meeuwes\Downloads\kompozer-0.8b3.nl.win32.exe => ":BDU" ADS is succesvol verwijderd.
C:\Users\Meeuwes\Downloads\mb3-setup-consumer-3.1.2.1733-1.0.160-1.0.2251(1).exe => ":BDU" ADS is succesvol verwijderd.
C:\Users\Meeuwes\Downloads\mb3-setup-consumer-3.1.2.1733-1.0.160-1.0.2251.exe => ":BDU" ADS is succesvol verwijderd.
C:\Users\Meeuwes\Downloads\mbam-setup-FileHippo.19901-2.2.1.1043.exe => ":BDU" ADS is succesvol verwijderd.
C:\Users\Meeuwes\Downloads\nvu-0.90-win32-nl-NL-installer.exe => ":BDU" ADS is succesvol verwijderd.
C:\Users\Meeuwes\Downloads\QtlMovie-Win64-1.11.1.exe => ":BDU" ADS is succesvol verwijderd.
C:\Users\Meeuwes\Downloads\rcsetup153.exe => ":BDU" ADS is succesvol verwijderd.
C:\Users\Meeuwes\Downloads\SkypeSetup.exe => ":BDU" ADS is succesvol verwijderd.
C:\Users\Meeuwes\Downloads\Spotnet.last.setup.release(1).exe => ":BDU" ADS is succesvol verwijderd.
C:\Users\Meeuwes\Downloads\Spotnet.last.setup.release.exe => ":BDU" ADS is succesvol verwijderd.
C:\Users\Meeuwes\Downloads\tweaking.com_windows_repair_aio_setup.exe => ":BDU" ADS is succesvol verwijderd.
C:\Users\Meeuwes\Downloads\video-converter-studio.exe => ":BDU" ADS is succesvol verwijderd.
C:\Users\Meeuwes\Downloads\WDCFree.exe => ":BDU" ADS is succesvol verwijderd.
C:\Users\Meeuwes\Downloads\winx-dvd-ripper.exe => ":BDU" ADS is succesvol verwijderd.

========= ipconfig /flushdns =========


Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========= Eind van CMD: =========


========= netsh winsock reset =========


Sucessfully reset the Winsock Catalog.
You must restart the computer in order to complete the reset.


========= Eind van CMD: =========


=========== EmptyTemp: ==========

BITS transfer queue => 32768 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 30299292 B
Java, Flash, Steam htmlcache => 570 B
Windows/system/drivers => 16622882 B
Edge => 1316135 B
Chrome => 0 B
Firefox => 163825689 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 128 B
systemprofile32 => 128 B
LocalService => 21114 B
NetworkService => 2056192 B
Meeuwes => 33237367 B
DefaultAppPool => 0 B

RecycleBin => 97333503 B
EmptyTemp: => 328.8 MB tijdelijke gegevens verwijderd.

================================


Het systeem moest herstart worden.

==== Eind van Fixlog 12:19:57 ====

Groet Blusopa.

 

[Abraham54]

Attentie: nieuwe MBAM-versie.

Download

MalwareBytes Anti-Malware.

• Windows 2000 en Windows XP: dubbelklik op mbam-setup.exe.
• Windows Vista, Windows 7, Windows 8: en Windows 10: via rechtsklik op mbam-setup.exe en kies voor "Als Administrator uitvoeren".

• Klik in het menu van Malwarebytes ANTI-MALWARE op Instellingen" en daar op "Detectie en Bescherming" en zet vervolgens een vinkje bij "Scan naar rootkits".

• Klik vervolgens op de knop Scan nu om een bedreigingsscan uit te voeren.
• Er zal nu gecontroleerd worden op beschikbare updates, klik hier op "Nu bijwerken als er beschikbare updates zijn.
• De scan wordt nu automatisch gestart,wanneer de scan gereed is en er bedreigingen zijn gedetecteerd krijgt u hier een overzicht van.

• Wanneer er geen bedreigingen zijn gedetecteerd klikt u na de scan op Bekijk gedetailleerd logboek.
• Klik vervolgens op de knop Exporteer en kies de optie "Tekstbestand (*.txt)".
• Geef vervolgens een bestandsnaam op voor het opslaan van het logbestand, bijvoorbeeld MBAM Scanlog.
• Kies bijvoorbeeld het bureaublad als opslaglocatie en klik vervolgens op de knop Opslaan.

• Wanneer er wel bedreigingen zijn gedetecteerd klikt u na de scan op Acties toepassen.
• Bij de melding om de computer opnieuw op te starten klikt u op Ja / Yes.
• Open na de herstart MalwareBytes Anti-Malware en klik bovenaan op Historie en selecteer Programmalogboeken.
• Klik op de nieuwste Scan Log.
• Klik op "Exporteer" en kies de optie "Tekstbestand (*.txt)".
  
  
• Geef vervolgens een bestandsnaam op voor het opslaan van het logbestand, bijvoorbeeld MBAM Scanlog.
• Kies bijvoorbeeld het bureaublad als opslaglocatie en klik vervolgens op de knop Opslaan.
  
  

MBAM-Log posten:

• Kopieer nu de inhoud van het zojuist opgeslagen log en plak dit in uw nieuwe antwoord erbij.

Indien jij MBAM meteen als gratis versie wil gebruiken in plaatst van de veertien dagen durende demo met al zijn toeters en bellen te gebruiken, kijk dan hier

 

[blusopa]

Hallo Abraham54, bij deze het log.
Malwarebytes
www.malwarebytes.com

-Logboekdetails-
Scandatum: 04-10-17
Scantijd: 22:36
Logbestand: ad5446d2-a943-11e7-9610-386077f7eaca.json
Beheerder: Ja

-Software-informatie-
Versie: 3.2.2.2029
Versie componenten: 1.0.207
Update pakketversie: 1.0.2950
Licentie: Gratis

-Systeeminformatie-
Besturingssysteem: Windows 10 (Build 10240.17443)
Processor: x64
Bestandssysteem: NTFS
Gebruiker: BLUSOPA\Meeuwes

-Scansamenvatting-
Scantype: Bedreigingsscan
Resultaat: Voltooid
Objecten gescand: 393121
Dreigingen herkend: 0
(Geen kwaadaardige items gedetecteerd)
Dreigingen in quarantaine: 0
(Geen kwaadaardige items gedetecteerd)
Verstreken tijd: 32 min, 54 sec

-Scanopties-
Geheugen: Ingeschakeld
Opstarten: Ingeschakeld
Bestandssysteem: Ingeschakeld
Archieven: Ingeschakeld
Rootkits: Ingeschakeld
Heuristiek: Ingeschakeld
POP: Detectie
POA: Detectie

-Scandetails-
Proces: 0
(Geen kwaadaardige items gedetecteerd)

Module: 0
(Geen kwaadaardige items gedetecteerd)

Registersleutel: 0
(Geen kwaadaardige items gedetecteerd)

Registerwaarde: 0
(Geen kwaadaardige items gedetecteerd)

Registerdata: 0
(Geen kwaadaardige items gedetecteerd)

Gegevensstroom: 0
(Geen kwaadaardige items gedetecteerd)

Map: 0
(Geen kwaadaardige items gedetecteerd)

Bestand: 0
(Geen kwaadaardige items gedetecteerd)

Fysieke sector: 0
(Geen kwaadaardige items gedetecteerd)


(end)

Groet Blusopa.

 

[Abraham54]

Dat ziet er allemaal god uit.

We gaan dan nu ook naar de hardwarekant in jouw computer kijken.


Post enkel de link, die je via onderstaand tool verkrijgt.

Download

Speccy van Piriform

Bij de installatie van "Speccy" wordt gevraagd om de Google Chrome webbrowser mee te installeren.
Indien je dit niet wenst, verwijder dan de vinkjes.

Speccy van Piriform opstarten:

• Windows 2000 en Windows XP: start "Speccy" middels dubbelklikken.
• Windows Vista, Windows 7, Windows 8/8.1 en Windows 10: start "Speccy" middels rechtsklik en dan kiezen voor Als Administrator uitvoeren.

Speccy van Piriform gebruiken:

• nadat de analyse van Windows klaar is, plaatst "Speccy" de uitkomst daarvan in een nieuw venster.
• Klik nu in de menubalk op Bestand (File) en kies voor Publiceren (Publish Snapshot)
• Bevestig het publiceren door JA (Yes) te klikken.

• 
  
  
  • Nu zal een pop-upvenster openen met daarin de vraag voor wel of niet publiceren.
  • Bevestig dat eerste dus.
  • Kopieer nu de link in het nieuw geopende webvenster en plak die link in jouw volgende bericht.

 

[blusopa]

http://speccy.piriform.com/results/IKgEbICKa2Q0ZJ7Wjyd7xbu

Als ik oulook open en wil een bericht openen krijg ik het volgende te zien:
Door het beleid van Uw organisatie kunnen we deze bewerking niet voor U voltooien, neem kontakt op met de helpdesk.

Heeft dit met mijn problemen te maken?

gr Blusopa

 

[Abraham54]

Het heeft niets met de traagheid of zo te maken - zo te lezen zijn er weer groepsbeleidproblemen in jouw Windows ontstaan.

Je hebt FRST nog aan boord.
Deaktiveer eerst Bitdefender.
Start frst.exe opniew via rechtsklik "Als administrator uitvoeren"'.
Zet in het venster een vinkje bij Additions en klik op Scan.

Post aansluitend weer beide logs.

Apropos: het Speccy log vermeld geen bijzonderheden - alles ziet er goed uit.