Scanresultaten van Farbar Recovery Scan Tool (FRST) (x64) Versie:01-05-2016 Gestart door Coby (Beheerder) op COBY-PC (01-05-2016 18:34:13) Gestart vanaf C:\Users\Coby\Desktop Geladen Profielen: Coby (Beschikbare Profielen: Coby) Platform: Windows 10 Home Versie 1511 (X64) Taal: Nederlands (Nederland) Internet Explorer Versie 11 (Standaardbrowser: Edge) Boot Modus: Normal Handleiding voor Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processen (gefilterd) ================= (Als een item is opgenomen in de fixlist, het proces zal worden gesloten. Het bestand zal niet worden verplaatst.) (Tencent) C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCRTP.exe (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Nalpeiron Ltd.) C:\Windows\SysWOW64\ASTSRV.EXE (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (Nalpeiron Ltd.) C:\Windows\System32\nlsInterface.exe () C:\Windows\SysWOW64\PSIService.exe (arvato digital services llc) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe () C:\Program Files\24fb083b9dac707c1654a4c67889bf23\cbe22a87fdbd13aa610f47d6c8088444.exe (DotC United Inc) C:\Program Files (x86)\MPC Cleaner\MPCProtectService.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (zdengine) C:\Program Files (x86)\QuickSearch\zdengine.exe (VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe (Intel Corporation) C:\Windows\System32\igfxTray.exe (DotC United Inc) C:\Program Files (x86)\MPC Cleaner\MPCTray.exe () C:\Program Files\24fb083b9dac707c1654a4c67889bf23\559e55ba179b86a03e6ad73f4a40351d.exe () C:\Program Files\24fb083b9dac707c1654a4c67889bf23\cbe22a87fdbd13aa610f47d6c8088444.exe () C:\Program Files (x86)\CleanBrowser\app\bin\nw.exe () C:\Program Files (x86)\CleanBrowser\app\bin\nw.exe (Tencent) C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCTray.exe () C:\Program Files (x86)\CleanBrowser\app\bin\nw.exe () C:\Program Files (x86)\CleanBrowser\app\bin\nw.exe (DotC United Inc) C:\Program Files (x86)\MPC Cleaner\MPCTray64.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Corel, Inc.) C:\Program Files (x86)\Common Files\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe (Spotify Ltd) C:\Users\Coby\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (© 2015 Microsoft Corporation) C:\Users\Coby\AppData\Local\Microsoft\BingSvc\BingSvc.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.309\SSScheduler.exe (Tencent) C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QMUsbGuard.exe () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\LockAppHost.exe () C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe (Corel) C:\Program Files (x86)\Common Files\Corel\Standby\Standby.exe (Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe (Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Desktop.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe (Microsoft Corporation) C:\Windows\System32\browser_broker.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Farbar) C:\Users\Coby\Desktop\FRST64 (3).exe ==================== Register (gefilterd) =========================== (Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.) HKLM\...\Run: [Corel Photo Downloader] => C:\Program Files (x86)\Common Files\Corel\Corel PhotoDownloader\Corel Photo Downloader.exe [522752 2011-09-07] (Corel, Inc.) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [413696 2008-09-06] (Apple Inc.) HKLM-x32\...\Run: [Corel File Shell Monitor] => c:\Program Files (x86)\Corel\Corel PaintShop Photo Pro\X3\PSPClassic\CorelIOMonitor.exe HKLM-x32\...\Run: [Standby] => c:\Program Files (x86)\Common Files\Corel\Standby\Standby.exe [105632 2010-01-07] (Corel) HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation) HKLM-x32\...\Run: [Corel Photo Downloader] => "C:\Program Files (x86)\Common Files\Corel\Corel PhotoDownloader\Corel PhotoDownloader.exe" -startup HKLM-x32\...\Run: [apphide] => C:\Program Files (x86)\badu\uc.exe HKLM-x32\...\Run: [ QQPCTray] => C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCTRAY.EXE [362304 2016-04-29] (Tencent) HKLM\...\Winlogon: [Userinit] wscript C:\WINDOWS\run.vbs, HKU\S-1-5-21-503092519-2811942456-882599974-1000\...\Run: [Spotify Web Helper] => C:\Users\Coby\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2355312 2016-01-31] (Spotify Ltd) HKU\S-1-5-21-503092519-2811942456-882599974-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [51656320 2016-04-08] (Skype Technologies S.A.) HKU\S-1-5-21-503092519-2811942456-882599974-1000\...\Run: [BingSvc] => C:\Users\Coby\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2016-01-26] (© 2015 Microsoft Corporation) HKU\S-1-5-21-503092519-2811942456-882599974-1000\...\Run: [Yeaplayer] => C:\Program Files (x86)\Yeaplayer\Yeaplayermd.exe /autostart Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2016-04-02] ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.309\SSScheduler.exe (McAfee, Inc.) ==================== Internet (gefilterd) ==================== (Als een item is opgenomen in de fixlist, als het een registry item is wordt verwijderd of hersteld naar de standaard.) Winsock: Catalog9 01 C:\WINDOWS\system32\zdengine.dll Geen bestand Winsock: Catalog9 02 C:\WINDOWS\system32\zdengine.dll Geen bestand Winsock: Catalog9 03 C:\WINDOWS\system32\zdengine.dll Geen bestand Winsock: Catalog9 04 C:\WINDOWS\system32\zdengine.dll Geen bestand Winsock: Catalog9 16 C:\WINDOWS\system32\zdengine.dll Geen bestand Winsock: Catalog9-x64 01 C:\WINDOWS\system32\zdengine64.dll [354958 2016-04-29] (zdengine) Winsock: Catalog9-x64 02 C:\WINDOWS\system32\zdengine64.dll [354958 2016-04-29] (zdengine) Winsock: Catalog9-x64 03 C:\WINDOWS\system32\zdengine64.dll [354958 2016-04-29] (zdengine) Winsock: Catalog9-x64 04 C:\WINDOWS\system32\zdengine64.dll [354958 2016-04-29] (zdengine) Winsock: Catalog9-x64 16 C:\WINDOWS\system32\zdengine64.dll [354958 2016-04-29] (zdengine) Hosts: Er zijn meer dan één item in Hosts. Zie Hosts deel van Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.2.254 Tcpip\..\Interfaces\{12724dbd-2385-4a6d-9335-d236c0b1de8e}: [DhcpNameServer] 192.168.2.254 Internet Explorer: ================== HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://hao.qq.com/?unc=o400493_1&s=o400493_1 HKU\S-1-5-21-503092519-2811942456-882599974-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hao.qq.com/?unc=o400493_1&s=o400493_1 SearchScopes: HKU\S-1-5-21-503092519-2811942456-882599974-1000 -> {015DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3321538&octid=EB_ORIGINAL_CTID&ISID=M4B223ACB-55E3-45BC-B8B0-E518F4D969F9&SearchSource=58&CUI=&UM=8&UP=SP82B464F4-AFC8-4AF2-9949-68844B603535&D=042916&q={searchTerms}&SSPV= SearchScopes: HKU\S-1-5-21-503092519-2811942456-882599974-1000 -> {E1A1345E-9886-421C-8D65-0800B7F144F5} URL = hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3321538&octid=EB_ORIGINAL_CTID&ISID=M4B223ACB-55E3-45BC-B8B0-E518F4D969F9&SearchSource=58&CUI=&UM=8&UP=SP82B464F4-AFC8-4AF2-9949-68844B603535&D=042916&q={searchTerms}&SSPV= BHO: 电脑管家网页防火墙 -> {7C260B4B-F7A0-40B5-B403-BEFCDC6A4C3B} -> C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\TSWebMon64.dat [2016-04-29] (Tencent) BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-23] (Google Inc.) BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation) BHO-x32: Ó¦Óñ¦Ò»¼ü°²×°²å¼þ -> {50F4150A-48B2-417A-BE4C-C83F580FB904} -> C:\Program Files (x86)\Common Files\Tencent\QQPhoneManager\2.0.201.3192\npQQPhoneManagerExt.dll => Geen bestand BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation) BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-23] (Google Inc.) BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation) BHO-x32: MyEmoticons Class -> {DCC39ACE-709B-44EA-B062-5F6BE2774644} -> C:\Users\Coby\AppData\Roaming\MyEmoticons\myemoticons.dll [2012-04-23] (GreenTree Applications) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-23] (Google Inc.) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-23] (Google Inc.) Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation) FireFox: ======== FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin-x32: @qq.com/npAndroidAssistant -> C:\Program Files (x86)\Common Files\Tencent\QQPhoneManager\2.0.201.3192\npQQPhoneManagerExt.dll [Geen bestand] FF Plugin-x32: @qq.com/QQPCMgr -> C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\npQMExtensionsMozilla.dll [2016-04-29] (Tencent Technology (Shenzhen) Company Limited) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-01] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-01] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-503092519-2811942456-882599974-1000: @nsroblox.roblox.com/launcher -> C:\Users\Coby\AppData\Local\Roblox\Versions\version-4bc75dd7e05f4feb\\NPRobloxProxy.dll [2013-01-01] ( ROBLOX Corporation) FF Plugin HKU\S-1-5-21-503092519-2811942456-882599974-1000: @nsroblox.roblox.com/launcher64 -> C:\Users\Coby\AppData\Local\Roblox\Versions\version-4bc75dd7e05f4feb\\NPRobloxProxy64.dll [2013-01-01] ( ROBLOX Corporation) Chrome: ======= CHR HomePage: Default -> msn.com/?pc=__PARAM__&ocid=__PARAM__DHP&osmkt=nl-nl CHR StartupUrls: Default -> "hxxp://www.google.com/" CHR Profile: C:\Users\Coby\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Presentaties) - C:\Users\Coby\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-01-31] CHR Extension: (Google Documenten) - C:\Users\Coby\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-01-31] CHR Extension: (Google Drive) - C:\Users\Coby\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-26] CHR Extension: (YouTube) - C:\Users\Coby\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-26] CHR Extension: (Google Search) - C:\Users\Coby\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-26] CHR Extension: (Google Spreadsheets) - C:\Users\Coby\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-01-31] CHR Extension: (Offline Documenten) - C:\Users\Coby\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15] CHR Extension: (AdBlock) - C:\Users\Coby\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-04-17] CHR Extension: (Betalingen via Chrome Web Store) - C:\Users\Coby\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-02] CHR Extension: (MyEmoticons) - C:\Users\Coby\AppData\Local\Google\Chrome\User Data\Default\Extensions\oopofgccipckckifenoicncegojimpmf [2016-03-21] [UpdateUrl: hxxp://www.myemoticons.com/gc/update.xml] <==== AANDACHT CHR Extension: (Gmail) - C:\Users\Coby\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-01-26] CHR Extension: (Extutil) - C:\Users\Coby\AppData\Local\Temp\D8ADFCCA-EE7E-442C-9999-C4D14FEF360B [2016-04-29] CHR Extension: (Managera) - C:\Users\Coby\AppData\Local\Temp\39fdaae5-8e0e-493c-88ec-e05c3be06e42 [2016-04-29] CHR HKU\S-1-5-21-503092519-2811942456-882599974-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-01-08] CHR HKLM-x32\...\Chrome\Extension: [oopofgccipckckifenoicncegojimpmf] - C:\Users\Coby\AppData\Roaming\MyEmoticons\oopofgccipckckifenoicncegojimpmf.crx [2012-04-19] ==================== Services (gefilterd) ======================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) R2 ASTSRV; C:\WINDOWS\SysWOW64\ASTSRV.EXE [57344 2008-05-19] (Nalpeiron Ltd.) [Bestand niet getekend] R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-01-08] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-01-08] (Microsoft Corporation) R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [330136 2016-01-26] (Intel Corporation) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.309\McCHSvc.exe [293128 2016-03-11] (McAfee, Inc.) R2 MPCProtectService; C:\Program Files (x86)\MPC Cleaner\MPCProtectService.exe [350688 2016-04-29] (DotC United Inc) R2 nlsInterface; C:\WINDOWS\system32\nlsInterface.exe [72192 2009-04-03] (Nalpeiron Ltd.) [Bestand niet getekend] R2 ProtexisLicensing; C:\WINDOWS\SysWOW64\PSIService.exe [177704 2007-06-05] () R2 PSI_SVC_2; c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [277360 2014-04-30] (arvato digital services llc) R2 QQPCRTP; C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQPCRTP.exe [313936 2016-04-29] (Tencent) U2 QQRepair184f; C:\Program Files (x86)\Tencent\QQPCMGR\Plugins\QQRepair184f [140608 2016-05-01] () S2 QQRepairFixSVC; C:\Program Files (x86)\Tencent\QQPCMGR\Plugins\QQRepairFixSVC [140608 2016-05-01] () R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [6942480 2016-03-02] (TeamViewer GmbH) R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [36504 2015-06-22] (VIA Technologies, Inc.) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation) R2 zdengine; C:\Program Files (x86)\QuickSearch\zdengine.exe [1806206 2016-04-29] (zdengine) [Bestand niet getekend] R2 2120890f6e7f6ce115bf92c0e9bdae71; "C:\Program Files\24fb083b9dac707c1654a4c67889bf23\cbe22a87fdbd13aa610f47d6c8088444.exe" [X] S2 BugreportW; "C:\Program Files (x86)\hohobnd\cloguing.exe" {154DFF63-3402-4815-941A-AAD63AE8B428} [X] S2 Drvcoresrv; "C:\Program Files (x86)\Dravsynlether\Drvcoresrv.exe" {79740E79-A383-47A7-B513-3DF6563D007F} {A16B1AF7-982D-40C3-B5C1-633E1A6A6678} [X] S2 GoogleChromeUpService; geen ImagePath S2 GoogleChromeUpSvc; geen ImagePath S2 Nmclogservice; "C:\Program Files (x86)\Nimeckreelule\Nmclogservice.exe" {79740E79-A383-47A7-B513-3DF6563D007F} {A16B1AF7-982D-40C3-B5C1-633E1A6A6678} [X] S2 rijufoze; geen ImagePath S2 rocufyky; geen ImagePath S2 Update thirteen degrees; "C:\Program Files (x86)\thirteen degrees\updatethirteendegrees.exe" [X] S2 Util thirteen degrees; "C:\Program Files (x86)\thirteen degrees\bin\utilthirteendegrees.exe" [X] S2 xoquqysezbt; geen ImagePath S2 zigipyro; geen ImagePath ===================== Drivers (gefilterd) ========================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) R3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider) R3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider) R1 MPCKpt; C:\Windows\System32\DRIVERS\MPCKpt.sys [60136 2016-04-29] (DotC United Inc) R1 QMUdisk; C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QMUdisk64.sys [184952 2016-04-18] (Tencent) R2 QQSysMonX64; C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\QQSysMonX64.sys [154744 2016-04-29] (电脑管家) R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2015-10-30] (Realtek ) R1 softaal; C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\softaal64.sys [44664 2016-04-29] (Tencent) R1 SRepairDrv; \??\C:\Program Files (x86)\Tencent\QQPCMGR\Plugins\SRepairDrv [172664 2016-05-01] () R3 TAOAccelerator; C:\WINDOWS\system32\Drivers\TAOAccelerator64.sys [99480 2016-04-29] (Tencent) R2 TAOKernelDriver; C:\WINDOWS\system32\Drivers\TAOKernelEx64.sys [143992 2016-04-29] (Tencent Technology(Shenzhen) Company Limited) R3 TFsFlt; C:\Windows\System32\Drivers\TFsFltX64.sys [97400 2016-04-29] (电脑管家) R3 TS888x64; C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\TS888x64.sys [38520 2016-05-01] (Tencent) S1 TSDefenseBt; C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\TSDefenseBT64.sys [28984 2016-04-29] (Tencent) R2 tsnethlpx64; C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\TsNetHlpX64.sys [57976 2016-04-29] () R1 TSSysKit; C:\Program Files (x86)\Tencent\QQPCMgr\11.5.17490.219\TSSysKit64.sys [96888 2016-04-29] (电脑管家) R1 UCGuard; C:\Windows\System32\DRIVERS\ucguard.sys [80768 2016-04-13] (Huorong Borui (Beijing) Technology Co., Ltd.) S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation) R2 zdwfp; C:\WINDOWS\system32\Drivers\zdwfp64.sys [46352 2016-03-04] (zdengine) R1 {8aba2929-3d93-42fa-a897-27a387ab0426}Gw64; C:\Windows\System32\drivers\{8aba2929-3d93-42fa-a897-27a387ab0426}Gw64.sys [48744 2016-04-28] (StdLib) R1 f8fa4a50b59f81ab1b3f37368889c14e; system32\DRIVERS\f8fa4a50b59f81ab1b3f37368889c14e.sys [X] ==================== NetSvcs (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) ==================== Een Maand Aangemaakt bestanden en mappen ======== (Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.) 2016-05-01 18:34 - 2016-05-01 18:34 - 00021253 _____ C:\Users\Coby\Desktop\FRST.txt 2016-05-01 18:33 - 2016-05-01 18:34 - 00000000 ____D C:\FRST 2016-05-01 18:32 - 2016-05-01 18:33 - 02377216 _____ (Farbar) C:\Users\Coby\Desktop\FRST64 (3).exe 2016-05-01 17:29 - 2016-05-01 17:29 - 00000000 ___HD C:\OneDriveTemp 2016-05-01 17:28 - 2016-05-01 17:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC 2016-05-01 13:21 - 2016-05-01 17:28 - 00001805 _____ C:\Users\Public\Desktop\MPC Cleaner.lnk 2016-05-01 10:03 - 2016-05-01 10:03 - 01286574 _____ C:\Users\Coby\Downloads\calguisdouceur02062012.psp 2016-05-01 10:03 - 2016-05-01 10:03 - 01171853 _____ C:\Users\Coby\Downloads\calguisBella16102015.psp 2016-05-01 10:03 - 2016-05-01 10:03 - 01171853 _____ C:\Users\Coby\Downloads\calguisBella16102015 (1).psp 2016-05-01 10:03 - 2016-05-01 10:03 - 00840253 _____ C:\Users\Coby\Downloads\calguiselegance23109.psp 2016-05-01 10:03 - 2016-05-01 10:03 - 00804095 _____ C:\Users\Coby\Downloads\calguisdouceurprintaniere29012016.psp 2016-05-01 10:03 - 2016-05-01 10:03 - 00801670 _____ C:\Users\Coby\Downloads\calguisfashion29109.psp 2016-05-01 10:03 - 2016-05-01 10:03 - 00666583 _____ C:\Users\Coby\Downloads\cal_guis_14_07_2008_beauty_jartelle.psp 2016-05-01 10:03 - 2016-05-01 10:03 - 00622610 _____ C:\Users\Coby\Downloads\calguisbeautyRoses02032015.psp 2016-05-01 10:03 - 2016-05-01 10:03 - 00584314 _____ C:\Users\Coby\Downloads\calguisportrait50411.psp 2016-05-01 10:03 - 2016-05-01 10:03 - 00188525 _____ C:\Users\Coby\Downloads\April2016_Fonts2.zip 2016-04-30 13:09 - 2016-05-01 15:35 - 00038520 _____ (Tencent) C:\WINDOWS\SysWOW64\Drivers\TS888x64.sys 2016-04-30 10:59 - 2016-04-30 10:59 - 00001961 _____ C:\Users\Coby\Desktop\CCleaner.lnk 2016-04-30 10:59 - 2016-04-30 10:59 - 00000000 ____D C:\Program Files (x86)\CCleaner 2016-04-29 12:28 - 2016-05-01 13:20 - 00011336 _____ C:\WINDOWS\SysWOW64\zdengineOff.ini 2016-04-29 12:28 - 2016-05-01 13:20 - 00011336 _____ C:\WINDOWS\system32\zdengineOff.ini 2016-04-29 12:28 - 2016-03-04 16:13 - 00046352 _____ (zdengine) C:\WINDOWS\system32\Drivers\zdwfp64.sys 2016-04-29 12:27 - 2016-04-29 12:27 - 00354958 _____ (zdengine) C:\WINDOWS\system32\zdengine64.dll 2016-04-29 12:27 - 2016-04-29 12:27 - 00304126 _____ (zdengine) C:\WINDOWS\SysWOW64\zdengine.dll 2016-04-29 11:56 - 2016-04-29 13:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\腾讯软件 2016-04-29 11:00 - 2016-04-29 11:00 - 00002170 _____ C:\ProgramData\msiql.exe.lnk 2016-04-29 10:58 - 2016-04-29 10:58 - 00000000 ____D C:\Users\Coby\AppData\Roaming\MCorp 2016-04-29 10:52 - 2016-04-29 10:52 - 00000262 __RSH C:\Users\Coby\ntuser.pol 2016-04-29 10:38 - 2016-04-29 10:38 - 00000000 ____D C:\Users\Coby\AppData\Local\csdi_monetize_120160428 2016-04-29 10:38 - 2016-04-28 23:47 - 00305984 _____ ( ) C:\WINDOWS\systwin.exe 2016-04-29 10:07 - 2016-04-29 10:07 - 00000000 ____D C:\Program Files\Common Files\Tencent 2016-04-29 10:07 - 2016-04-29 10:04 - 00143992 _____ (Tencent Technology(Shenzhen) Company Limited) C:\WINDOWS\system32\Drivers\TAOKernelEx64.sys 2016-04-29 10:07 - 2016-04-29 10:04 - 00099480 _____ (Tencent) C:\WINDOWS\system32\Drivers\TAOAccelerator64.sys 2016-04-29 10:06 - 2016-05-01 15:34 - 00000000 ____D C:\ProgramData\TXQMPC 2016-04-29 10:06 - 2016-04-29 13:24 - 00000000 ____D C:\Users\Coby\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UC浏览器 2016-04-29 10:04 - 2016-04-29 13:24 - 00000000 ____D C:\Users\Coby\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\腾讯软件 2016-04-29 10:04 - 2016-04-29 10:04 - 00097400 _____ (电脑管家) C:\WINDOWS\system32\Drivers\TFsFltX64.sys 2016-04-29 10:03 - 2016-05-01 17:57 - 00000470 _____ C:\WINDOWS\Tasks\UCBrowserUpdater.job 2016-04-29 10:03 - 2016-04-29 10:03 - 00003486 _____ C:\WINDOWS\System32\Tasks\UCBrowserUpdater 2016-04-29 10:03 - 2016-04-29 10:03 - 00000000 ____D C:\Users\Coby\AppData\Local\UCBrowser 2016-04-29 10:03 - 2016-04-13 18:37 - 00080768 _____ (Huorong Borui (Beijing) Technology Co., Ltd.) C:\WINDOWS\system32\Drivers\ucguard.sys 2016-04-29 10:02 - 2016-04-29 13:24 - 00000000 ____D C:\Users\Coby\AppData\Roaming\Tencent 2016-04-29 10:02 - 2016-04-29 13:24 - 00000000 ____D C:\ProgramData\Windows Update 2016-04-29 10:02 - 2016-04-29 12:06 - 00000000 ____D C:\ProgramData\WindowsMsg 2016-04-29 10:02 - 2016-04-29 11:05 - 00000000 ____D C:\ProgramData\Tencent 2016-04-29 10:02 - 2016-04-29 10:02 - 02783744 _____ (TODO: ) C:\Users\Coby\AppData\Roaming\svrupg.exe 2016-04-29 10:02 - 2016-04-29 10:02 - 00413439 _____ C:\ProgramData\xdo.zip 2016-04-29 10:02 - 2016-04-29 10:02 - 00002303 _____ C:\ProgramData\webad.xml 2016-04-29 10:02 - 2016-04-29 10:02 - 00000000 ____D C:\Program Files (x86)\Tencent 2016-04-29 10:02 - 2016-04-26 17:07 - 01253376 _____ (eee) C:\ProgramData\apptj.exe 2016-04-29 10:02 - 2016-04-19 17:41 - 01266176 _____ C:\ProgramData\conhost.exe 2016-04-29 10:02 - 2016-04-19 12:39 - 00114176 _____ C:\ProgramData\hp.exe 2016-04-29 10:01 - 2016-05-01 17:28 - 00000000 ____D C:\Users\Coby\AppData\Local\app 2016-04-29 10:01 - 2016-04-29 13:24 - 00000000 ____D C:\Users\Coby\AppData\Local\Yeaplayer 2016-04-29 10:00 - 2016-04-29 13:24 - 00000000 ____D C:\Users\Coby\AppData\Roaming\UPUpdata 2016-04-29 10:00 - 2016-04-29 13:24 - 00000000 ____D C:\Users\Coby\AppData\Roaming\cpuminer 2016-04-29 10:00 - 2016-04-29 13:24 - 00000000 ____D C:\Users\Coby\AppData\Local\392C0E40-1461924002-11DD-AE45-3085A941414A 2016-04-29 10:00 - 2016-04-29 10:00 - 00000000 ____D C:\Users\Coby\AppData\Roaming\gplyra 2016-04-29 10:00 - 2016-04-29 10:00 - 00000000 ____D C:\Users\Coby\AppData\Local\tuto_monetize_120160428 2016-04-29 10:00 - 2016-04-28 20:04 - 00048744 _____ (StdLib) C:\WINDOWS\system32\Drivers\{8aba2929-3d93-42fa-a897-27a387ab0426}Gw64.sys 2016-04-29 09:59 - 2016-05-01 14:13 - 00000000 ____D C:\Program Files (x86)\CleanBrowser 2016-04-29 09:57 - 2016-05-01 17:30 - 00000000 ____D C:\Program Files (x86)\QuickSearch 2016-04-29 09:57 - 2016-04-29 09:57 - 00008950 _____ C:\WINDOWS\System32\Tasks\Dravsynlether Core 2016-04-29 09:57 - 2016-04-29 09:57 - 00002044 _____ C:\WINDOWS\System32\Tasks\ksv3026 2016-04-29 09:56 - 2016-04-29 13:24 - 00000000 ____D C:\Users\Coby\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\YSPackage 2016-04-29 09:56 - 2016-04-29 10:45 - 00000262 __RSH C:\ProgramData\ntuser.pol 2016-04-29 09:56 - 2016-04-29 09:56 - 00000000 ____D C:\Users\Public\Thunder Network 2016-04-29 09:56 - 2016-04-29 09:56 - 00000000 ____D C:\ProgramData\Thunder Network 2016-04-29 09:56 - 2016-04-29 09:55 - 00001039 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak 2016-04-29 09:54 - 2016-04-29 10:53 - 00000000 ____D C:\Program Files (x86)\MPC Cleaner 2016-04-29 09:54 - 2016-04-29 10:00 - 00060136 _____ (DotC United Inc) C:\WINDOWS\system32\Drivers\MPCKpt.sys 2016-04-29 09:54 - 2016-04-29 09:55 - 00000000 ____D C:\Users\Coby\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108 2016-04-29 09:54 - 2016-04-29 09:54 - 00008966 _____ C:\WINDOWS\System32\Tasks\Nimeckreelule Log 2016-04-29 09:54 - 2016-04-29 09:54 - 00000000 ____D C:\Users\Public\Documents\dmp 2016-04-29 09:53 - 2016-04-29 13:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaNetworkEn 2016-04-28 08:32 - 2016-04-28 08:33 - 00000000 ____D C:\Users\Coby\Documents\ani ,club en mc5 lessen 2016-04-26 14:24 - 2016-04-26 14:24 - 00000009 _____ C:\ProgramData\a.bat 2016-04-18 16:13 - 2016-04-18 16:13 - 00000000 ____D C:\Users\Coby\AppData\Local\Alien Skin 2016-04-18 16:13 - 2016-04-18 16:13 - 00000000 ____D C:\Users\Coby\.AS 2016-04-18 16:09 - 2016-04-18 16:09 - 00000000 ____D C:\ProgramData\Alien Skin 2016-04-13 12:31 - 2016-04-29 13:25 - 00000000 ____D C:\Users\Coby\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sqirlz Water Reflections 2016-04-13 12:31 - 2016-04-13 12:31 - 00000000 ____D C:\Program Files (x86)\Sqirlz Water Reflections 2016-04-12 20:08 - 2016-04-12 20:08 - 00000000 ____D C:\WINDOWS\PCHEALTH 2016-04-12 19:51 - 2016-04-02 05:14 - 03994624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2016-04-12 19:51 - 2016-03-29 12:20 - 07474016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2016-04-12 19:51 - 2016-03-29 12:20 - 02656952 _____ C:\WINDOWS\system32\CoreUIComponents.dll 2016-04-12 19:51 - 2016-03-29 12:18 - 02152280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2016-04-12 19:51 - 2016-03-29 11:56 - 01297752 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll 2016-04-12 19:51 - 2016-03-29 11:37 - 01862008 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll 2016-04-12 19:51 - 2016-03-29 11:11 - 00605440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2016-04-12 19:51 - 2016-03-29 10:41 - 00630632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2016-04-12 19:51 - 2016-03-29 10:06 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2016-04-12 19:51 - 2016-03-29 10:02 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll 2016-04-12 19:51 - 2016-03-29 10:01 - 00541304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2016-04-12 19:51 - 2016-03-29 09:58 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll 2016-04-12 19:51 - 2016-03-29 09:58 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2016-04-12 19:51 - 2016-03-29 09:46 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2016-04-12 19:51 - 2016-03-29 09:36 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll 2016-04-12 19:51 - 2016-03-29 09:20 - 00948736 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll 2016-04-12 19:51 - 2016-03-29 09:19 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll 2016-04-12 19:51 - 2016-03-29 09:15 - 01714688 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll 2016-04-12 19:51 - 2016-03-29 09:15 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2016-04-12 19:51 - 2016-03-29 09:14 - 00965632 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll 2016-04-12 19:51 - 2016-03-29 09:12 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll 2016-04-12 19:51 - 2016-03-29 09:12 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2016-04-12 19:51 - 2016-03-29 09:10 - 01388544 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2016-04-12 19:51 - 2016-03-29 09:07 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2016-04-12 19:51 - 2016-03-29 09:02 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll 2016-04-12 19:51 - 2016-03-29 09:02 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll 2016-04-12 19:51 - 2016-03-29 09:00 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll 2016-04-12 19:51 - 2016-03-29 08:42 - 03592704 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2016-04-12 19:51 - 2016-03-29 08:37 - 01444352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll 2016-04-12 19:51 - 2016-03-29 08:37 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll 2016-04-12 19:51 - 2016-03-29 08:37 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2016-04-12 19:51 - 2016-03-29 08:32 - 01731584 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2016-04-12 19:51 - 2016-03-29 08:31 - 02275328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2016-04-12 19:51 - 2016-03-29 08:31 - 01946112 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2016-04-12 19:51 - 2016-03-29 08:28 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll 2016-04-12 19:51 - 2016-03-29 08:27 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll 2016-04-12 19:51 - 2016-03-29 08:26 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2016-04-12 19:51 - 2016-03-29 08:19 - 02635776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll 2016-04-12 19:51 - 2016-03-29 08:05 - 01500672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2016-04-12 19:51 - 2016-03-29 08:05 - 01388032 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2016-04-12 19:51 - 2016-03-29 08:02 - 02229760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2016-04-12 19:51 - 2016-03-29 08:01 - 13018624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2016-04-12 19:51 - 2016-03-29 07:58 - 01799680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll 2016-04-12 19:51 - 2016-03-29 07:56 - 16985600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2016-04-12 19:51 - 2016-03-29 07:52 - 11545600 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2016-04-12 19:51 - 2016-03-29 07:51 - 22378496 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2016-04-12 19:51 - 2016-03-29 07:51 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2016-04-12 19:51 - 2016-03-29 07:49 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll 2016-04-12 19:51 - 2016-03-29 07:43 - 03428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2016-04-12 19:51 - 2016-03-29 07:41 - 24602112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2016-04-12 19:51 - 2016-03-29 07:41 - 12125184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2016-04-12 19:51 - 2016-03-29 07:39 - 13382656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2016-04-12 19:51 - 2016-03-29 07:38 - 18673664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2016-04-12 19:51 - 2016-03-29 07:38 - 02798080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2016-04-12 19:51 - 2016-03-29 07:37 - 19340800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2016-04-12 19:51 - 2016-03-29 07:27 - 07836160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2016-04-12 19:51 - 2016-03-29 07:27 - 05662208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2016-04-12 19:50 - 2016-04-02 06:13 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2016-04-12 19:50 - 2016-04-02 06:10 - 00770640 _____ (Microsoft Corporation) C:\WINDOWS\system32\iuilp.dll 2016-04-12 19:50 - 2016-04-02 06:10 - 00730344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll 2016-04-12 19:50 - 2016-04-02 06:10 - 00374008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe 2016-04-12 19:50 - 2016-04-02 05:30 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll 2016-04-12 19:50 - 2016-04-02 05:29 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll 2016-04-12 19:50 - 2016-04-02 05:29 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEDataLayerHelpers.dll 2016-04-12 19:50 - 2016-04-02 05:26 - 00630272 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll 2016-04-12 19:50 - 2016-04-02 05:25 - 00278528 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationObjFactory.dll 2016-04-12 19:50 - 2016-04-02 05:25 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NotificationObjFactory.dll 2016-04-12 19:50 - 2016-04-02 05:23 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll 2016-04-12 19:50 - 2016-04-02 05:23 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll 2016-04-12 19:50 - 2016-04-02 05:21 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll 2016-04-12 19:50 - 2016-04-02 05:19 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2016-04-12 19:50 - 2016-04-02 05:18 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll 2016-04-12 19:50 - 2016-04-02 05:15 - 01090048 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll 2016-04-12 19:50 - 2016-04-02 05:09 - 01832448 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll 2016-04-12 19:50 - 2016-04-02 05:08 - 02193408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll 2016-04-12 19:50 - 2016-04-02 05:07 - 03575296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll 2016-04-12 19:50 - 2016-04-02 05:07 - 02158592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2016-04-12 19:50 - 2016-04-02 05:03 - 04774912 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll 2016-04-12 19:50 - 2016-04-02 05:00 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll 2016-04-12 19:50 - 2016-03-29 12:23 - 00277856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys 2016-04-12 19:50 - 2016-03-29 12:22 - 01030416 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2016-04-12 19:50 - 2016-03-29 12:22 - 00874968 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2016-04-12 19:50 - 2016-03-29 12:20 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2016-04-12 19:50 - 2016-03-29 12:20 - 01141504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2016-04-12 19:50 - 2016-03-29 12:15 - 00100232 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmapi.dll 2016-04-12 19:50 - 2016-03-29 12:11 - 00686976 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll 2016-04-12 19:50 - 2016-03-29 12:05 - 01152864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2016-04-12 19:50 - 2016-03-29 12:02 - 00989536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi 2016-04-12 19:50 - 2016-03-29 12:02 - 00334736 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll 2016-04-12 19:50 - 2016-03-29 11:28 - 00696664 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll 2016-04-12 19:50 - 2016-03-29 11:28 - 00535080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll 2016-04-12 19:50 - 2016-03-29 11:28 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll 2016-04-12 19:50 - 2016-03-29 11:25 - 00258912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ufx01000.sys 2016-04-12 19:50 - 2016-03-29 11:25 - 00058400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll 2016-04-12 19:50 - 2016-03-29 11:19 - 00296488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll 2016-04-12 19:50 - 2016-03-29 11:18 - 00185184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys 2016-04-12 19:50 - 2016-03-29 11:17 - 00300104 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe 2016-04-12 19:50 - 2016-03-29 11:13 - 00986976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll 2016-04-12 19:50 - 2016-03-29 11:11 - 00074424 _____ (Microsoft Corporation) C:\WINDOWS\system32\easinvoker.exe 2016-04-12 19:50 - 2016-03-29 11:10 - 00110584 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvcli.dll 2016-04-12 19:50 - 2016-03-29 11:09 - 00078040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkscli.dll 2016-04-12 19:50 - 2016-03-29 11:08 - 00358752 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2016-04-12 19:50 - 2016-03-29 11:08 - 00261376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe 2016-04-12 19:50 - 2016-03-29 11:07 - 00081144 _____ (Microsoft Corporation) C:\WINDOWS\system32\netapi32.dll 2016-04-12 19:50 - 2016-03-29 10:44 - 00502104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll 2016-04-12 19:50 - 2016-03-29 10:44 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll 2016-04-12 19:50 - 2016-03-29 10:41 - 00051128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.dll 2016-04-12 19:50 - 2016-03-29 10:32 - 00253088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe 2016-04-12 19:50 - 2016-03-29 10:26 - 02403680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2016-04-12 19:50 - 2016-03-29 10:26 - 01089888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys 2016-04-12 19:50 - 2016-03-29 10:26 - 00073872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srvcli.dll 2016-04-12 19:50 - 2016-03-29 10:25 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wkscli.dll 2016-04-12 19:50 - 2016-03-29 10:24 - 00294752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2016-04-12 19:50 - 2016-03-29 10:23 - 00069744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netapi32.dll 2016-04-12 19:50 - 2016-03-29 10:21 - 00378208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS 2016-04-12 19:50 - 2016-03-29 10:17 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll 2016-04-12 19:50 - 2016-03-29 10:16 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xinputhid.sys 2016-04-12 19:50 - 2016-03-29 10:07 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll 2016-04-12 19:50 - 2016-03-29 10:07 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll 2016-04-12 19:50 - 2016-03-29 10:07 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll 2016-04-12 19:50 - 2016-03-29 10:07 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenterprisediagnostics.dll 2016-04-12 19:50 - 2016-03-29 10:07 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsdchngr.dll 2016-04-12 19:50 - 2016-03-29 10:06 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleacchooks.dll 2016-04-12 19:50 - 2016-03-29 10:00 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe 2016-04-12 19:50 - 2016-03-29 10:00 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveskybackup.dll 2016-04-12 19:50 - 2016-03-29 10:00 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll 2016-04-12 19:50 - 2016-03-29 09:59 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerShellext.exe 2016-04-12 19:50 - 2016-03-29 09:57 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe 2016-04-12 19:50 - 2016-03-29 09:57 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll 2016-04-12 19:50 - 2016-03-29 09:57 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll 2016-04-12 19:50 - 2016-03-29 09:57 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\browcli.dll 2016-04-12 19:50 - 2016-03-29 09:55 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll 2016-04-12 19:50 - 2016-03-29 09:55 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\serial.sys 2016-04-12 19:50 - 2016-03-29 09:55 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbauth.dll 2016-04-12 19:50 - 2016-03-29 09:54 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll 2016-04-12 19:50 - 2016-03-29 09:53 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\system32\FontProvider.dll 2016-04-12 19:50 - 2016-03-29 09:52 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerCookies.exe 2016-04-12 19:50 - 2016-03-29 09:51 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll 2016-04-12 19:50 - 2016-03-29 09:51 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll 2016-04-12 19:50 - 2016-03-29 09:50 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeHdCfgLib.dll 2016-04-12 19:50 - 2016-03-29 09:50 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll 2016-04-12 19:50 - 2016-03-29 09:50 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll 2016-04-12 19:50 - 2016-03-29 09:50 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\OnDemandConnRouteHelper.dll 2016-04-12 19:50 - 2016-03-29 09:50 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuautoappupdate.dll 2016-04-12 19:50 - 2016-03-29 09:49 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll 2016-04-12 19:50 - 2016-03-29 09:48 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Devices.dll 2016-04-12 19:50 - 2016-03-29 09:48 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll 2016-04-12 19:50 - 2016-03-29 09:46 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser.dll 2016-04-12 19:50 - 2016-03-29 09:44 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFWSD.dll 2016-04-12 19:50 - 2016-03-29 09:42 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll 2016-04-12 19:50 - 2016-03-29 09:39 - 00550912 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll 2016-04-12 19:50 - 2016-03-29 09:38 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll 2016-04-12 19:50 - 2016-03-29 09:37 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2016-04-12 19:50 - 2016-03-29 09:36 - 00530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys 2016-04-12 19:50 - 2016-03-29 09:35 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleacc.dll 2016-04-12 19:50 - 2016-03-29 09:35 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovhost.dll 2016-04-12 19:50 - 2016-03-29 09:34 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2016-04-12 19:50 - 2016-03-29 09:34 - 00641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2016-04-12 19:50 - 2016-03-29 09:34 - 00333824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys 2016-04-12 19:50 - 2016-03-29 09:34 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll 2016-04-12 19:50 - 2016-03-29 09:33 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll 2016-04-12 19:50 - 2016-03-29 09:32 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2016-04-12 19:50 - 2016-03-29 09:32 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe 2016-04-12 19:50 - 2016-03-29 09:30 - 00328192 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll 2016-04-12 19:50 - 2016-03-29 09:30 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msorcl32.dll 2016-04-12 19:50 - 2016-03-29 09:28 - 00460288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll 2016-04-12 19:50 - 2016-03-29 09:27 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll 2016-04-12 19:50 - 2016-03-29 09:26 - 00169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll 2016-04-12 19:50 - 2016-03-29 09:23 - 00694784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys 2016-04-12 19:50 - 2016-03-29 09:23 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll 2016-04-12 19:50 - 2016-03-29 09:23 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll 2016-04-12 19:50 - 2016-03-29 09:22 - 00438784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AccountsRt.dll 2016-04-12 19:50 - 2016-03-29 09:21 - 00330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll 2016-04-12 19:50 - 2016-03-29 09:20 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll 2016-04-12 19:50 - 2016-03-29 09:20 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.V2.dll 2016-04-12 19:50 - 2016-03-29 09:20 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsdchngr.dll 2016-04-12 19:50 - 2016-03-29 09:19 - 00556032 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll 2016-04-12 19:50 - 2016-03-29 09:19 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacchooks.dll 2016-04-12 19:50 - 2016-03-29 09:18 - 00676352 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDApi.dll 2016-04-12 19:50 - 2016-03-29 09:17 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll 2016-04-12 19:50 - 2016-03-29 09:17 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll 2016-04-12 19:50 - 2016-03-29 09:17 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll 2016-04-12 19:50 - 2016-03-29 09:16 - 00852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll 2016-04-12 19:50 - 2016-03-29 09:16 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll 2016-04-12 19:50 - 2016-03-29 09:14 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll 2016-04-12 19:50 - 2016-03-29 09:13 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll 2016-04-12 19:50 - 2016-03-29 09:12 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll 2016-04-12 19:50 - 2016-03-29 09:11 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll 2016-04-12 19:50 - 2016-03-29 09:11 - 00881664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll 2016-04-12 19:50 - 2016-03-29 09:11 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe 2016-04-12 19:50 - 2016-03-29 09:11 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll 2016-04-12 19:50 - 2016-03-29 09:11 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll 2016-04-12 19:50 - 2016-03-29 09:11 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\browcli.dll 2016-04-12 19:50 - 2016-03-29 09:10 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll 2016-04-12 19:50 - 2016-03-29 09:09 - 01239552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll 2016-04-12 19:50 - 2016-03-29 09:09 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll 2016-04-12 19:50 - 2016-03-29 09:09 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbauth.dll 2016-04-12 19:50 - 2016-03-29 09:08 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll 2016-04-12 19:50 - 2016-03-29 09:08 - 00841216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll 2016-04-12 19:50 - 2016-03-29 09:08 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxoci.dll 2016-04-12 19:50 - 2016-03-29 09:07 - 01902592 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll 2016-04-12 19:50 - 2016-03-29 09:06 - 01575936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll 2016-04-12 19:50 - 2016-03-29 09:06 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2016-04-12 19:50 - 2016-03-29 09:06 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerCookies.exe 2016-04-12 19:50 - 2016-03-29 09:05 - 01395712 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll 2016-04-12 19:50 - 2016-03-29 09:05 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OnDemandConnRouteHelper.dll 2016-04-12 19:50 - 2016-03-29 09:04 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Devices.dll 2016-04-12 19:50 - 2016-03-29 09:03 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys 2016-04-12 19:50 - 2016-03-29 09:02 - 01211904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll 2016-04-12 19:50 - 2016-03-29 09:00 - 00235008 _____ C:\WINDOWS\system32\MTF.dll 2016-04-12 19:50 - 2016-03-29 09:00 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll 2016-04-12 19:50 - 2016-03-29 09:00 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll 2016-04-12 19:50 - 2016-03-29 08:59 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll 2016-04-12 19:50 - 2016-03-29 08:59 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerDeviceEncryption.exe 2016-04-12 19:50 - 2016-03-29 08:59 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll 2016-04-12 19:50 - 2016-03-29 08:56 - 00821760 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll 2016-04-12 19:50 - 2016-03-29 08:56 - 00415232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll 2016-04-12 19:50 - 2016-03-29 08:55 - 01052160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll 2016-04-12 19:50 - 2016-03-29 08:53 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacc.dll 2016-04-12 19:50 - 2016-03-29 08:53 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll 2016-04-12 19:50 - 2016-03-29 08:52 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll 2016-04-12 19:50 - 2016-03-29 08:52 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\easwrt.dll 2016-04-12 19:50 - 2016-03-29 08:49 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll 2016-04-12 19:50 - 2016-03-29 08:48 - 00346624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll 2016-04-12 19:50 - 2016-03-29 08:44 - 00498176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll 2016-04-12 19:50 - 2016-03-29 08:43 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AccountsRt.dll 2016-04-12 19:50 - 2016-03-29 08:42 - 01410560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll 2016-04-12 19:50 - 2016-03-29 08:42 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll 2016-04-12 19:50 - 2016-03-29 08:41 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll 2016-04-12 19:50 - 2016-03-29 08:40 - 00787456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll 2016-04-12 19:50 - 2016-03-29 08:39 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSDApi.dll 2016-04-12 19:50 - 2016-03-29 08:39 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll 2016-04-12 19:50 - 2016-03-29 08:39 - 00350720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll 2016-04-12 19:50 - 2016-03-29 08:38 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll 2016-04-12 19:50 - 2016-03-29 08:36 - 03351040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2016-04-12 19:50 - 2016-03-29 08:36 - 00649728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll 2016-04-12 19:50 - 2016-03-29 08:35 - 00354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll 2016-04-12 19:50 - 2016-03-29 08:34 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll 2016-04-12 19:50 - 2016-03-29 08:34 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll 2016-04-12 19:50 - 2016-03-29 08:34 - 00682496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll 2016-04-12 19:50 - 2016-03-29 08:34 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll 2016-04-12 19:50 - 2016-03-29 08:32 - 01588224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll 2016-04-12 19:50 - 2016-03-29 08:32 - 01098240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll 2016-04-12 19:50 - 2016-03-29 08:32 - 00854528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll 2016-04-12 19:50 - 2016-03-29 08:32 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll 2016-04-12 19:50 - 2016-03-29 08:32 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll 2016-04-12 19:50 - 2016-03-29 08:32 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll 2016-04-12 19:50 - 2016-03-29 08:32 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcsps.dll 2016-04-12 19:50 - 2016-03-29 08:31 - 01117184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll 2016-04-12 19:50 - 2016-03-29 08:31 - 00705536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2016-04-12 19:50 - 2016-03-29 08:30 - 01139712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll 2016-04-12 19:50 - 2016-03-29 08:29 - 00555520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncController.dll 2016-04-12 19:50 - 2016-03-29 08:29 - 00256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\accountaccessor.dll 2016-04-12 19:50 - 2016-03-29 08:28 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll 2016-04-12 19:50 - 2016-03-29 08:27 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll 2016-04-12 19:50 - 2016-03-29 08:27 - 00162816 _____ C:\WINDOWS\SysWOW64\MTF.dll 2016-04-12 19:50 - 2016-03-29 08:27 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll 2016-04-12 19:50 - 2016-03-29 08:27 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll 2016-04-12 19:50 - 2016-03-29 08:23 - 00777728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll 2016-04-12 19:50 - 2016-03-29 08:22 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll 2016-04-12 19:50 - 2016-03-29 08:17 - 00765952 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll 2016-04-12 19:50 - 2016-03-29 08:14 - 01072128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll 2016-04-12 19:50 - 2016-03-29 08:13 - 00592384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll 2016-04-12 19:50 - 2016-03-29 08:10 - 03671040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2016-04-12 19:50 - 2016-03-29 08:06 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll 2016-04-12 19:50 - 2016-03-29 08:05 - 07199232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll 2016-04-12 19:50 - 2016-03-29 08:05 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2016-04-12 19:50 - 2016-03-29 08:05 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncController.dll 2016-04-12 19:50 - 2016-03-29 08:05 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll 2016-04-12 19:50 - 2016-03-29 08:04 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll 2016-04-12 19:50 - 2016-03-29 08:04 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll 2016-04-12 19:50 - 2016-03-29 08:01 - 00957952 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL 2016-04-12 19:50 - 2016-03-29 08:00 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll 2016-04-12 19:50 - 2016-03-29 07:45 - 03078144 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll 2016-04-12 19:50 - 2016-03-29 07:45 - 00338432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncbservice.dll 2016-04-12 19:50 - 2016-03-29 07:43 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll 2016-04-12 19:50 - 2016-03-29 07:36 - 02722816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll 2016-04-12 19:50 - 2016-03-29 07:35 - 00821248 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll 2016-04-12 19:50 - 2016-03-29 07:28 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecpl.dll 2016-04-12 19:50 - 2016-03-29 07:27 - 00794112 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL 2016-04-12 19:50 - 2016-03-29 07:26 - 00958976 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll 2016-04-12 19:50 - 2016-03-29 07:26 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL 2016-04-12 19:50 - 2016-03-29 07:25 - 00712704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll 2016-04-12 19:50 - 2016-03-29 07:25 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL 2016-04-12 19:50 - 2016-03-29 07:21 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\basesrv.dll 2016-04-12 19:38 - 2009-04-03 11:46 - 00072192 _____ (Nalpeiron Ltd.) C:\WINDOWS\system32\nlsInterface.exe 2016-04-12 19:38 - 2008-05-19 12:13 - 00057344 _____ (Nalpeiron Ltd.) C:\WINDOWS\SysWOW64\ASTSRV.EXE 2016-04-05 08:46 - 2016-04-05 08:48 - 00000000 ____D C:\Users\Coby\AppData\Local\IM 2016-04-05 08:46 - 2016-04-05 08:47 - 00000000 ____D C:\ProgramData\IM 2016-04-05 08:46 - 2016-04-05 08:46 - 00000000 ____D C:\ProgramData\IncrediMail 2016-04-02 14:13 - 2016-04-02 14:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus ==================== Een Maand Gewijzigd bestanden en mappen ======== (Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.) 2016-05-01 18:29 - 2016-01-26 21:32 - 00000000 ____D C:\Users\Coby\AppData\Roaming\Skype 2016-05-01 18:11 - 2016-01-26 21:01 - 00001080 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job 2016-05-01 17:37 - 2016-01-26 21:03 - 00002208 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2016-05-01 17:35 - 2016-01-26 21:03 - 00002226 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-05-01 17:29 - 2016-01-26 21:01 - 00001076 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job 2016-05-01 17:29 - 2015-08-19 15:15 - 00000000 ___RD C:\Users\Coby\OneDrive 2016-05-01 17:28 - 2015-08-19 15:03 - 00000000 __SHD C:\Users\Coby\IntelGraphicsProfiles 2016-05-01 15:34 - 2016-03-26 11:47 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2016-05-01 15:32 - 2015-10-30 08:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI 2016-05-01 14:18 - 2016-03-26 11:31 - 00000000 ____D C:\Users\Coby 2016-05-01 11:20 - 2015-10-30 09:21 - 00000000 ____D C:\WINDOWS\INF 2016-05-01 10:17 - 2016-01-28 09:33 - 00000000 ____D C:\ProgramData\Package Cache 2016-05-01 09:58 - 2016-01-26 20:50 - 00004178 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{9CAABE65-007B-4E5E-8A53-FF7BF71E05F5} 2016-05-01 09:49 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\AppReadiness 2016-05-01 09:43 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps 2016-04-30 11:03 - 2016-03-27 13:14 - 00000000 ____D C:\WINDOWS\Minidump 2016-04-30 10:59 - 2016-01-31 16:50 - 00000000 ____D C:\Users\Coby\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CCleaner 2016-04-30 10:46 - 2016-01-31 19:36 - 00000000 ____D C:\Users\Coby\AppData\Local\Corel 2016-04-30 10:46 - 2016-01-31 16:31 - 00002828 ___SH C:\ProgramData\KGyGaAvL.sys 2016-04-30 10:46 - 2013-07-15 10:32 - 00000000 ____D C:\Users\Coby\Documents\My PSP Files 2016-04-29 13:24 - 2016-03-11 11:00 - 00000000 ____D C:\ProgramData\Protexis 2016-04-29 13:24 - 2016-02-27 12:02 - 00000000 ____D C:\ProgramData\InstallShield 2016-04-29 13:24 - 2016-02-15 12:30 - 00000000 ____D C:\ProgramData\McAfee Security Scan 2016-04-29 13:24 - 2016-01-31 17:38 - 00000000 ____D C:\ProgramData\Hewlett-Packard 2016-04-29 13:24 - 2016-01-31 17:05 - 00000000 ____D C:\ProgramData\Ulead Systems 2016-04-29 13:24 - 2016-01-31 16:30 - 00000000 ____D C:\ProgramData\Apple Computer 2016-04-29 13:24 - 2016-01-31 13:18 - 00000000 ____D C:\Program Files (x86)\Alien Skin 2016-04-29 13:24 - 2016-01-26 21:31 - 00000000 ___RD C:\Program Files (x86)\Skype 2016-04-29 13:24 - 2016-01-26 21:31 - 00000000 ____D C:\ProgramData\Skype 2016-04-29 13:24 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Windows Defender 2016-04-29 13:24 - 2015-10-30 09:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2016-04-29 13:23 - 2016-01-26 19:43 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy 2016-04-29 13:23 - 2015-10-30 09:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog 2016-04-29 13:23 - 2015-10-30 08:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep 2016-04-29 13:17 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\registration 2016-04-29 12:06 - 2016-03-26 11:24 - 00374368 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2016-04-29 11:24 - 2016-01-26 20:20 - 01847504 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2016-04-29 11:24 - 2015-10-30 20:05 - 00817616 _____ C:\WINDOWS\system32\perfh013.dat 2016-04-29 11:24 - 2015-10-30 20:05 - 00159266 _____ C:\WINDOWS\system32\perfc013.dat 2016-04-29 10:42 - 2016-03-11 11:00 - 00000000 ____D C:\Users\Coby\Documents\Corel PaintShop Pro 2016-04-29 10:42 - 2016-03-11 11:00 - 00000000 ____D C:\Users\Coby\AppData\Local\Corel PaintShop Pro 2016-04-29 10:42 - 2016-01-27 11:52 - 00000000 ____D C:\ProgramData\Corel 2016-04-28 20:38 - 2016-01-27 11:52 - 00000000 ____D C:\Program Files (x86)\Corel 2016-04-26 20:36 - 2016-01-26 20:22 - 00002387 _____ C:\Users\Coby\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2016-04-26 14:04 - 2016-02-21 11:08 - 00108104 _____ C:\Users\Coby\AppData\Local\GDIPFONTCACHEV1.DAT 2016-04-25 14:14 - 2016-01-31 11:44 - 00001890 ___SH C:\WINDOWS\SysWOW64\KGyGaAvL.sys 2016-04-24 09:21 - 2013-07-14 17:59 - 00000000 ___RD C:\Users\Coby\Desktop\PSP 2016-04-22 09:57 - 2016-01-26 22:46 - 00453288 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2016-04-15 12:03 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\rescache 2016-04-13 08:55 - 2016-01-26 20:18 - 00000000 ____D C:\Users\Coby\AppData\Local\Packages 2016-04-12 21:42 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2016-04-12 21:42 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\system32\appraiser 2016-04-12 21:42 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\PolicyDefinitions 2016-04-12 21:42 - 2015-10-30 09:24 - 00000000 ____D C:\WINDOWS\bcastdvr 2016-04-12 20:12 - 2015-10-30 09:11 - 00000000 ____D C:\WINDOWS\CbsTemp 2016-04-12 20:11 - 2016-01-26 22:37 - 00000000 ____D C:\WINDOWS\system32\MRT 2016-04-12 20:08 - 2016-01-26 22:37 - 135176864 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2016-04-08 08:03 - 2016-01-26 21:15 - 00000000 ____D C:\Program Files (x86)\TeamViewer 2016-04-06 20:32 - 2015-10-30 09:26 - 00829944 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2016-04-06 20:32 - 2015-10-30 09:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2016-04-02 14:13 - 2016-02-27 12:30 - 00000000 ____D C:\Program Files\McAfee Security Scan 2016-04-02 14:13 - 2016-02-15 12:30 - 00002016 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk ==================== Bestanden in de root van sommige mappen ======= 2016-04-29 10:02 - 2016-04-29 10:02 - 2783744 _____ (TODO: ) C:\Users\Coby\AppData\Roaming\svrupg.exe 2016-01-31 19:37 - 2016-02-12 15:33 - 0007680 _____ () C:\Users\Coby\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2016-01-31 16:31 - 2016-01-31 21:14 - 0000088 __RSH () C:\ProgramData\1AE1823278.sys 2016-04-26 14:24 - 2016-04-26 14:24 - 0000009 _____ () C:\ProgramData\a.bat 2010-08-28 22:43 - 2010-08-28 22:43 - 0577335 _____ () C:\ProgramData\adb.exe 2010-08-28 22:43 - 2010-08-28 22:43 - 0096256 _____ (Google, inc) C:\ProgramData\AdbWinApi.dll 2010-08-28 22:43 - 2010-08-28 22:43 - 0060928 _____ (Google, inc) C:\ProgramData\AdbWinUsbApi.dll 2016-04-29 10:02 - 2016-04-26 17:07 - 1253376 _____ (eee) C:\ProgramData\apptj.exe 2016-04-29 10:02 - 2016-04-19 17:41 - 1266176 _____ () C:\ProgramData\conhost.exe 2010-08-28 22:43 - 2010-08-28 22:43 - 0356009 _____ () C:\ProgramData\fastboot.exe 2016-04-29 10:02 - 2016-04-19 12:39 - 0114176 _____ () C:\ProgramData\hp.exe 2016-01-31 16:31 - 2016-04-30 10:46 - 0002828 ___SH () C:\ProgramData\KGyGaAvL.sys 2016-04-29 11:00 - 2016-04-29 11:00 - 0002170 _____ () C:\ProgramData\msiql.exe.lnk 2016-04-29 10:02 - 2016-04-29 10:02 - 0002303 _____ () C:\ProgramData\webad.xml 2016-04-29 10:02 - 2016-04-29 10:02 - 0413439 _____ () C:\ProgramData\xdo.zip Bestanden om te verplaatsen of verwijderen: ==================== C:\ProgramData\a.bat C:\ProgramData\adb.exe C:\ProgramData\AdbWinApi.dll C:\ProgramData\AdbWinUsbApi.dll C:\ProgramData\apptj.exe C:\ProgramData\conhost.exe C:\ProgramData\fastboot.exe C:\ProgramData\hp.exe Sommige bestanden in TEMP: ==================== C:\Users\Coby\AppData\Local\Temp\23333.exe C:\Users\Coby\AppData\Local\Temp\2BYBAAUMEM.exe C:\Users\Coby\AppData\Local\Temp\6HFTIRZRR3.exe C:\Users\Coby\AppData\Local\Temp\72RUA7KUNR.exe C:\Users\Coby\AppData\Local\Temp\BFFB.tmp.exe C:\Users\Coby\AppData\Local\Temp\Browser_V5.6.11815.13_r_4736_(Build1604131623).exe C:\Users\Coby\AppData\Local\Temp\CAD2.tmp.exe C:\Users\Coby\AppData\Local\Temp\EFUFNYJ7SR.exe C:\Users\Coby\AppData\Local\Temp\FE3E.tmp.exe C:\Users\Coby\AppData\Local\Temp\fsdBE3.exe C:\Users\Coby\AppData\Local\Temp\G32Z9WCPZV.exe C:\Users\Coby\AppData\Local\Temp\ICReinstall_FE3E.tmp.exe C:\Users\Coby\AppData\Local\Temp\KB23NNRG7R.exe C:\Users\Coby\AppData\Local\Temp\project.exe C:\Users\Coby\AppData\Local\Temp\qqpcmgr_v11.5.17490.219_123112058_Silence.exe C:\Users\Coby\AppData\Local\Temp\qqpcmgr_v11.5.17490.219_72623_Silence.exe ==================== Bamital & volsnap ================= (Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.) C:\WINDOWS\system32\winlogon.exe => Bestand is getekend C:\WINDOWS\system32\wininit.exe => Bestand is getekend C:\WINDOWS\explorer.exe => Bestand is getekend C:\WINDOWS\SysWOW64\explorer.exe => Bestand is getekend C:\WINDOWS\system32\svchost.exe => Bestand is getekend C:\WINDOWS\SysWOW64\svchost.exe => Bestand is getekend C:\WINDOWS\system32\services.exe => Bestand is getekend C:\WINDOWS\system32\User32.dll => Bestand is getekend C:\WINDOWS\SysWOW64\User32.dll => Bestand is getekend C:\WINDOWS\system32\userinit.exe => Bestand is getekend C:\WINDOWS\SysWOW64\userinit.exe => Bestand is getekend C:\WINDOWS\system32\rpcss.dll => Bestand is getekend C:\WINDOWS\system32\dnsapi.dll => Bestand is getekend C:\WINDOWS\SysWOW64\dnsapi.dll => Bestand is getekend C:\WINDOWS\system32\Drivers\volsnap.sys => Bestand is getekend LastRegBack: 2016-04-29 12:17 ==================== Eind van FRST.txt ============================