Scanresultaten van Farbar Recovery Scan Tool (FRST) (x64) Versie: 21-08-2016 01
Gestart door Jan (Beheerder) op DESKTOP-KI1S5NV (26-08-2016 21:11:39)
Gestart vanaf C:\Users\Jan\Desktop
Geladen Profielen: Jan (Beschikbare Profielen: Jan)
Platform: Windows 10 Home Versie 1511 (X64) Taal: Nederlands (Nederland)
Internet Explorer Versie 11 (Standaardbrowser: "C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1")
Boot Modus: Safe Mode (minimal)
Handleiding voor Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processen (gefilterd) =================

(Als een item is opgenomen in de fixlist, het proces zal worden gesloten. Het bestand zal niet worden verplaatst.)

(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Windows\HelpPane.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Register (gefilterd) ===========================

(Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2654512 2015-10-03] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1710568 2015-10-03] (NVIDIA Corporation)
HKLM\...\Run: [SpaceSoundPro] => C:\Program Files\SpaceSoundPro\SpaceSoundPro.exe [4203520 2015-08-03] (Space Sound Pro)
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.2.5.541\ASUSWSLoader.exe [63272 2015-10-22] ()
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [23889496 2016-08-24] (Dropbox, Inc.)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe [624248 2007-05-10] (Adobe Systems Inc.)
HKLM-x32\...\Run: [Reader Application Helper] => C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe [899400 2014-10-24] (Sony Corporation)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [win_en_77] => C:\Program Files (x86)\win_en_77\win_en_77.exe [4293120 2016-08-25] ()
HKLM-x32\...\Run: [apphide] => C:\Program Files (x86)\sbqh\uc.exe [200752 2016-08-25] ( )
HKLM-x32\...\Run: [AdAnti] => C:\Program Files (x86)\AdAnti\AdAnti.exe [4291688 2016-08-15] ()
HKLM\...\RunOnce: [OTUTPRODUCT_B6RXV] => C:\Program Files (x86)\mpck\otutnetwork.exe [481792 2016-08-26] (Zu)
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKU\S-1-5-21-3609427630-1143254443-2860237718-1001\...\Run: [Epic Privacy Browser Installer] => C:\Users\Jan\AppData\Local\Epic Privacy Browser\Installer\EpicUpdate.exe [509096 2016-07-15] (Epic Privacy Browser)
HKU\S-1-5-21-3609427630-1143254443-2860237718-1001\...\Run: [Caster] => C:\Program Files\SpaceSoundPro\wizzcaster.exe [172032 2016-08-26] (YUU)
HKU\S-1-5-21-3609427630-1143254443-2860237718-1001\...\Run: [QGuan10in1] => C:\Users\Jan\AppData\Roaming\UPUpdata\service72564.exe [1831424 2016-08-26] ()
HKU\S-1-5-21-3609427630-1143254443-2860237718-1001\...\Run: [ComputerZ-Tray] => C:\Program Files (x86)\LuDaShi\ComputerZTray.exe [2976680 2016-08-24] ()
ShellExecuteHooks:  - {6710C780-E20E-4C49-A87D-321850ED3D7C} - C:\Users\Jan\AppData\Local\Microsoft\Windows\INetCookies\kisige.dll [364544 2016-08-25] ()
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.42.dll [2016-08-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.42.dll [2016-08-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.42.dll [2016-08-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.42.dll [2016-08-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.42.dll [2016-08-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.42.dll [2016-08-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.42.dll [2016-08-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.42.dll [2016-08-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.42.dll [2016-08-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.42.dll [2016-08-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.2.5.541\ASUSWSShellExt64.dll [2015-04-22] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.2.5.541\ASUSWSShellExt64.dll [2015-04-22] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.2.5.541\ASUSWSShellExt64.dll [2015-04-22] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [JzShlobj] -> {7B286609-DA97-47E1-AC6B-33B8B4732C95} => C:\Program Files\ZipTool\JZipExt.dll [2015-11-30] ()
ShellIconOverlayIdentifiers: [KzShlobj] -> {AAA0C5B8-933F-4200-93AD-B143D7FFF9F2} => C:\Program Files\¿ìѹ\X64\KZipShell.dll [2016-08-26] ()
ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.42.dll [2016-08-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.42.dll [2016-08-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.42.dll [2016-08-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.42.dll [2016-08-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.42.dll [2016-08-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.42.dll [2016-08-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.42.dll [2016-08-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.42.dll [2016-08-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.42.dll [2016-08-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt9] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.42.dll [2016-08-24] (Dropbox, Inc.)

==================== Internet (gefilterd) ====================

(Als een item is opgenomen in de fixlist, als het een registry item is wordt verwijderd of hersteld naar de standaard.)

AutoConfigURL: [S-1-5-21-3609427630-1143254443-2860237718-1001] => hxxp://nonblock.net/wpad.dat?eba0aa2c7fdcaf17a7abe82dcba6dc1215122578
Hosts: Er zijn meer dan één item in Hosts. Zie Hosts deel van Addition.txt
Tcpip\Parameters: [DhcpNameServer] 195.130.130.2 195.130.131.2
Tcpip\..\Interfaces\{5ca60d96-b6d2-47b0-9ec7-f0a010b745b5}: [NameServer] 188.120.239.115,8.8.8.8
Tcpip\..\Interfaces\{5ca60d96-b6d2-47b0-9ec7-f0a010b745b5}: [DhcpNameServer] 195.130.130.2 195.130.131.2
ManualProxies: 0hxxp://nonblock.net/wpad.dat?eba0aa2c7fdcaf17a7abe82dcba6dc1215122578

Internet Explorer:
==================
HKU\S-1-5-21-3609427630-1143254443-2860237718-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus15.msn.com/?pc=ASTE
HKU\S-1-5-21-3609427630-1143254443-2860237718-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus15.msn.com/?pc=ASTE
SearchScopes: HKU\S-1-5-21-3609427630-1143254443-2860237718-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3609427630-1143254443-2860237718-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO-x32: Adobe PDF Reader Link Helper -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22] (Adobe Systems Incorporated)
BHO-x32: ContributeBHO Class -> {074C1DC5-9320-4A9A-947D-C042949C6216} -> C:\Program Files (x86)\Adobe\/Adobe Contribute CS3/contributeieplugin.dll [2007-03-16] (Adobe Systems Incorporated.)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2015-09-03] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll [2007-05-10] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll [2007-05-10] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files (x86)\Adobe\/Adobe Contribute CS3/contributeieplugin.dll [2007-03-16] (Adobe Systems Incorporated.)

FireFox:
========
FF ProfilePath: C:\Users\Jan\AppData\Roaming\Profiles\6tqd8mrq.default
FF NewTab: hxxp://www.trotux.com/?z=d186b23529c80d040ffd44fg4zfmco4get5m7mcw8o&from=epf1&uid=SAMSUNGXMZNLF128HCHP-00004_S2DNNXAGC34881&type=hp
FF DefaultSearchEngine: trotux
FF DefaultSearchEngine.US: data:text/plain,browser.search.defaultenginename.US=trotux
FF SelectedSearchEngine: trotux
FF Homepage: hxxp://www.trotux.com/?z=d186b23529c80d040ffd44fg4zfmco4get5m7mcw8o&from=epf1&uid=SAMSUNGXMZNLF128HCHP-00004_S2DNNXAGC34881&type=hp
FF Keyword.URL: hxxp://www.trotux.com/search/?z=d186b23529c80d040ffd44fg4zfmco4get5m7mcw8o&from=epf1&uid=SAMSUNGXMZNLF128HCHP-00004_S2DNNXAGC34881&type=sp&q=
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [Geen bestand]
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [Geen bestand]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-08-24] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-08-24] (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @sony.com/ReaderDesktop -> C:\Program Files (x86)\Sony\ReaderDesktop\npreaderdetectmoz.dll [2014-10-24] (Sony Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-01-21] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2014-11-15] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-06-30] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3609427630-1143254443-2860237718-1001: @updates.epicbrowser.com/Epic Privacy Browser Installer;version=3 -> C:\Users\Jan\AppData\Local\Epic Privacy Browser\Installer\1.3.27.13\npEpicUpdate3.dll [2016-07-15] (Epic Privacy Browser)
FF Plugin HKU\S-1-5-21-3609427630-1143254443-2860237718-1001: @updates.epicbrowser.com/Epic Privacy Browser Installer;version=9 -> C:\Users\Jan\AppData\Local\Epic Privacy Browser\Installer\1.3.27.13\npEpicUpdate3.dll [2016-07-15] (Epic Privacy Browser)
FF SearchPlugin: C:\Users\Jan\AppData\Roaming\Profiles\6tqd8mrq.default\searchplugins\s5f9dxqj.xml [2016-08-26]
FF Extension: (GsearchFinder) - C:\Users\Jan\AppData\Roaming\Profiles\6tqd8mrq.default\Extensions\@90B817C8-8A5C-413B-9DDD-B2C61ED6E79A.xpi [2016-08-25]

==================== Services (gefilterd) ========================

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

AANDACHT: => Kan niet handtekeningen verifiëren. Cryptografische Service is niet gestart.

S4 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.2.5.541\AsusWSWinService.exe [75264 2015-10-22] (ASUS Cloud Corporation)
S4 BExnCBak; C:\Program Files (x86)\WebShield\WebShield.exe [360448 2016-08-12] ()
S4 cplspcon; C:\Windows\system32\IntelCpHDCPSvc.exe [595560 2015-10-06] (Intel Corporation)
S4 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-07-15] (Dropbox, Inc.)
S4 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-07-15] (Dropbox, Inc.)
S4 dowidoly; C:\Program Files (x86)\A838CE99-1472197832-934F-81D8-74CD806C1D0D\jnsmACB5.tmp [244224 2016-08-26] ()
S4 esifsvc; C:\Windows\SysWOW64\esif_uf.exe [1392792 2015-10-02] (Intel Corporation)
S4 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [373312 2015-04-14] (WildTangent)
S4 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155376 2015-10-03] (NVIDIA Corporation)
S4 HpSvc; C:\Program Files (x86)\LuDaShi\lpi\HpSvc.dll [239016 2016-07-21] () <==== AANDACHT
S4 ibtsiva; C:\Program Files (x86)\Intel\Bluetooth\utilities\ibtsiva.exe [165104 2015-08-07] (Intel Corporation)
S4 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [353896 2015-10-06] (Intel Corporation)
S4 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel(R) Corporation)
S4 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation)
S4 Intel(R) WiDi SAM; C:\Program Files (x86)\Intel Corporation\Intel WiDi\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [19088 2015-06-16] (Intel Corporation)
S4 IntelUSBoverIP; C:\Program Files\Intel Corporation\USB over IP\bin\UoipService.exe [396992 2015-07-06] (Intel)
S4 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] ()
S4 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [207648 2015-09-19] (Intel Corporation)
S4 Kingsoft_WPS_UpdateService; C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.5178\wtoolex\wpsupdatesvr.exe [133480 2015-11-24] (Zhuhai Kingsoft Office Software Co.,Ltd)
S4 KuaizipUpdateChecker; C:\Program Files\¿ìѹ\X86\kuaizipUpdateChecker.dll [219072 2016-08-26] ()
S4 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2015-08-13] ()
S4 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872688 2015-10-03] (NVIDIA Corporation)
S4 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5568816 2015-10-03] (NVIDIA Corporation)
S4 rijufoze; C:\Program Files (x86)\A838CE99-1472197832-934F-81D8-74CD806C1D0D\hnsaC148.tmp [138240 2016-08-26] ()
S4 RsgBuilderCefaph.exe; C:\Program Files (x86)\Ckeduing\RsgBuilderCefaph.exe [367704 2016-08-25] ()
S4 SoEasyHelper; C:\ProgramData\SoeasyHelper\Helper.exe [182424 2016-08-26] (TODO: <Company name>)
S4 SoEasySvc; C:\Program Files (x86)\SoSoEasy\SoSoEasySvc.exe [182424 2016-08-26] (TODO: <Company name>)
S4 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5495056 2015-06-17] (TeamViewer GmbH)
S4 UCBrowserSvc; C:\Program Files (x86)\UCBrowser\Application\UCService.exe [909200 2016-08-23] ()
S4 vmicvss; C:\Windows\System32\ICSvc.dll [511488 2015-10-30] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2016-07-01] (Microsoft Corporation)
S4 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3831712 2015-08-13] (Intel® Corporation)
S4 zigipyro; C:\Users\Jan\AppData\Local\A838CE99-1472205459-934F-81D8-74CD806C1D0D\qnsf1857.tmp [158720 2015-12-26] ()
S2 ziphost; c:\program files\ziptool\ziphost.dll [114080 2015-11-30] () <==== AANDACHT
S4 mccspsvc; "C:\Program Files\Common Files\McAfee\CSP\1.6.1008.0\McCSPServiceHost.exe" [X]
S4 pugisemezbt; C:\Program Files (x86)\A838CE99-1472197832-934F-81D8-74CD806C1D0D\knsc93AC.tmpfs [X]

===================== Drivers (gefilterd) ==========================

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

R3 AsusSGDrv; C:\Windows\system32\DRIVERS\AsusSGDrv.sys [141304 2015-12-18] (ASUS Corporation)
S2 ComputerZLock; C:\Program Files (x86)\LuDaShi\ComputerZLock_x64.sys [44264 2016-05-19] (www.ludashi.com) <==== AANDACHT
S3 ComputerZ_x64; C:\Program Files (x86)\LuDaShi\ComputerZ_x64.sys [49152 2016-06-27] (ludashi.com) <==== AANDACHT
S3 dptf_acpi; C:\Windows\System32\drivers\dptf_acpi.sys [57304 2015-10-02] (Intel Corporation)
S3 dptf_cpu; C:\Windows\System32\drivers\dptf_cpu.sys [52200 2015-10-02] (Intel Corporation)
S3 esif_lf; C:\Windows\system32\DRIVERS\esif_lf.sys [260072 2015-10-02] (Intel Corporation)
R3 iaLPSS2_I2C; C:\Windows\System32\drivers\iaLPSS2_I2C.sys [185128 2015-06-16] (Intel Corporation)
S3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [259824 2015-08-07] (Intel Corporation)
S2 KuaiZipDrive; C:\Windows\system32\drivers\KuaiZipDrive.sys [92872 2016-08-26] (WinMount International Inc)
S3 NETwNb64; C:\Windows\System32\drivers\Netwbw02.sys [4103920 2015-08-23] (Intel Corporation)
S3 Netwtw02; C:\Windows\System32\drivers\Netwtw02.sys [7075568 2015-08-23] (Intel Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19760 2015-10-03] (NVIDIA Corporation)
S3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50472 2015-08-10] (NVIDIA Corporation)
S3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [887552 2015-07-15] (Realtek                                            )
S3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [753368 2015-06-15] (Realsil Semiconductor Corporation)
S1 UCGuard; C:\Windows\System32\DRIVERS\ucguard.sys [81792 2016-08-23] (Huorong Borui (Beijing) Technology Co., Ltd.) <==== AANDACHT
S3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [212056 2015-07-06] (Windows (R) Win 7 DDK provider)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
S1 ZipProtect; c:\program files\ziptool\ZipProtect64.sys [886512 2015-12-14] ()
U0 msahci; system32\drivers\msahci.sys [X]

==================== NetSvcs (gefilterd) ===================

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

NETSVCx32: HpSvc -> C:\Program Files (x86)\LuDaShi\lpi\HpSvc.dll ()

==================== Een Maand Aangemaakt bestanden en mappen ========

(Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)

2016-08-26 21:11 - 2016-08-26 21:11 - 00020840 _____ C:\Users\Jan\Desktop\FRST.txt
2016-08-26 21:10 - 2016-08-26 21:11 - 00000000 ____D C:\FRST
2016-08-26 21:08 - 2016-08-26 21:08 - 00000214 _____ C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job
2016-08-26 21:08 - 2016-08-26 21:08 - 00000000 ____D C:\Windows\pss
2016-08-26 20:43 - 2016-08-26 20:39 - 02396160 _____ (Farbar) C:\Users\Jan\Desktop\FRST64.exe
2016-08-26 16:38 - 2016-08-26 16:39 - 00000000 ___HD C:\$SysReset
2016-08-26 10:32 - 2016-08-26 10:32 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Macromedia
2016-08-26 10:04 - 2016-08-26 10:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\净广大师
2016-08-26 10:04 - 2016-08-26 10:04 - 00001054 _____ C:\Users\Public\Desktop\净广大师.lnk
2016-08-26 10:04 - 2016-08-26 10:04 - 00000000 ____D C:\Users\Jan\AppData\Roaming\lockhomepage
2016-08-26 10:04 - 2016-08-26 10:04 - 00000000 ____D C:\Program Files (x86)\AdAnti
2016-08-26 10:03 - 2016-08-26 10:03 - 00092872 _____ (WinMount International Inc) C:\Windows\system32\Drivers\KuaiZipDrive.sys
2016-08-26 10:03 - 2016-08-26 10:03 - 00003550 _____ C:\Windows\System32\Tasks\KuaiZip_Update
2016-08-26 10:03 - 2016-08-26 10:03 - 00000884 _____ C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\¿ìѹ.lnk
2016-08-26 10:03 - 2016-08-26 10:03 - 00000860 _____ C:\Users\Jan\Desktop\¿ìѹ.lnk
2016-08-26 10:03 - 2016-08-26 10:03 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Softlink
2016-08-26 10:03 - 2016-08-26 10:03 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Ludashi
2016-08-26 10:03 - 2016-08-26 10:03 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Kuaizip
2016-08-26 10:03 - 2016-08-26 10:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\鲁大师
2016-08-26 10:03 - 2016-08-26 10:03 - 00000000 ____D C:\Program Files\¿ìѹ
2016-08-26 10:03 - 2016-08-26 10:03 - 00000000 ____D C:\Program Files (x86)\LDSGameCenter
2016-08-26 10:03 - 2016-08-19 09:46 - 06765520 _____ (上饶市康格信息技术有限公司 ) C:\Users\Jan\AppData\Roaming\AdAnti13.exe
2016-08-26 10:03 - 2016-08-01 06:51 - 01616896 _____ C:\Users\Jan\AppData\Roaming\kpzip.exe
2016-08-26 10:02 - 2016-08-26 20:39 - 00000484 _____ C:\Windows\Tasks\UCBrowserUpdater.job
2016-08-26 10:02 - 2016-08-26 10:04 - 00000000 ____D C:\Program Files (x86)\LuDaShi
2016-08-26 10:02 - 2016-08-26 10:02 - 00003498 _____ C:\Windows\System32\Tasks\UCBrowserUpdater
2016-08-26 10:02 - 2016-08-26 10:02 - 00001601 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UC浏览器.lnk
2016-08-26 10:02 - 2016-08-26 10:02 - 00001589 _____ C:\Users\Public\Desktop\UC浏览器.lnk
2016-08-26 10:02 - 2016-08-26 10:02 - 00000000 ____D C:\Users\Jan\AppData\Local\UCBrowser
2016-08-26 10:02 - 2016-08-26 10:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UC浏览器
2016-08-26 10:02 - 2016-08-26 10:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Compress
2016-08-26 10:02 - 2016-08-26 10:02 - 00000000 ____D C:\Program Files\ZipTool
2016-08-26 10:02 - 2016-08-26 10:02 - 00000000 ____D C:\Program Files (x86)\UCBrowser
2016-08-26 10:02 - 2016-08-23 09:58 - 00081792 _____ (Huorong Borui (Beijing) Technology Co., Ltd.) C:\Windows\system32\Drivers\ucguard.sys
2016-08-26 10:02 - 2016-02-18 10:10 - 05267952 _____ () C:\Users\Jan\AppData\Roaming\ziptool_wc-9015_setup.exe
2016-08-26 09:59 - 2016-08-21 08:21 - 00344064 _____ C:\Users\Jan\AppData\Roaming\RandomDelJiheReg.exe
2016-08-26 09:57 - 2016-08-26 09:57 - 00000000 ____D C:\Users\Jan\AppData\Local\A838CE99-1472205459-934F-81D8-74CD806C1D0D
2016-08-26 09:57 - 2016-08-24 08:58 - 01631744 _____ C:\Users\Jan\AppData\Roaming\ucdlr.exe
2016-08-26 09:55 - 2016-08-26 09:55 - 00000000 ____D C:\Program Files (x86)\sbqh
2016-08-26 09:54 - 2016-08-26 09:54 - 00003134 _____ C:\Windows\System32\Tasks\tasklist
2016-08-26 09:53 - 2016-08-26 09:55 - 00000000 ____D C:\Users\Jan\AppData\Roaming\UPUpdata
2016-08-26 09:52 - 2016-08-26 09:55 - 00000000 ____D C:\Program Files (x86)\mpck
2016-08-26 09:52 - 2016-08-26 09:53 - 00018336 _____ C:\Users\Jan\AppData\Roaming\InstallationConfiguration.xml
2016-08-26 09:52 - 2016-08-26 09:52 - 00138240 _____ C:\Users\Jan\AppData\Roaming\Installer.dat
2016-08-26 09:52 - 2016-08-26 09:52 - 00000000 ____D C:\Program Files (x86)\CleanBrowser
2016-08-26 09:50 - 2016-08-26 09:50 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASPackage
2016-08-26 09:50 - 2016-08-26 09:50 - 00000000 ____D C:\Users\Jan\AppData\Roaming\ASPackage
2016-08-26 09:50 - 2016-08-26 09:50 - 00000000 ____D C:\Program Files (x86)\WebShield
2016-08-26 09:50 - 2016-08-26 09:50 - 00000000 ____D C:\Program Files (x86)\A838CE99-1472197832-934F-81D8-74CD806C1D0D
2016-08-26 09:50 - 2016-08-26 09:49 - 00001006 _____ C:\Windows\system32\Drivers\etc\hp.bak
2016-08-26 09:49 - 2016-08-26 09:56 - 00000000 ____D C:\Program Files (x86)\Ckeduing
2016-08-26 09:49 - 2016-08-26 09:50 - 00000000 ____D C:\Program Files\SpaceSoundPro
2016-08-26 09:49 - 2016-08-26 09:49 - 00009012 _____ C:\Windows\System32\Tasks\Resage Builder
2016-08-26 09:49 - 2016-08-26 09:49 - 00003130 _____ C:\Windows\System32\Tasks\LuckyBrowse
2016-08-26 09:49 - 2016-08-26 09:49 - 00000915 _____ C:\Users\Jan\Desktop\SpaceSoundPro.lnk
2016-08-26 09:49 - 2016-08-26 09:49 - 00000000 ___HD C:\Program Files (x86)\y0n7700
2016-08-26 09:49 - 2016-08-26 09:49 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpaceSoundPro 1.0
2016-08-26 09:49 - 2016-08-26 09:49 - 00000000 ____D C:\Users\Jan\AppData\Local\win_en_77
2016-08-26 09:49 - 2016-08-26 09:49 - 00000000 ____D C:\ProgramData\SoeasyHelper
2016-08-26 09:49 - 2016-08-26 09:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-08-26 09:49 - 2016-08-26 09:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\LuckyBrowse
2016-08-26 09:49 - 2016-08-26 09:49 - 00000000 ____D C:\ProgramData\LuckyBrowse
2016-08-26 09:49 - 2016-08-26 09:49 - 00000000 ____D C:\ProgramData\AVAST Software
2016-08-26 09:49 - 2016-08-26 09:49 - 00000000 ____D C:\Program Files\Caster
2016-08-26 09:49 - 2016-08-26 09:49 - 00000000 ____D C:\Program Files (x86)\win_en_77
2016-08-26 09:49 - 2016-08-26 09:49 - 00000000 ____D C:\Program Files (x86)\SoSoEasy
2016-08-26 09:49 - 2016-08-26 09:49 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-08-26 09:49 - 2016-08-26 09:49 - 00000000 ____D C:\Program Files (x86)\LuckyBrowse
2016-08-26 09:47 - 2016-08-26 09:47 - 05582848 _____ C:\Users\Jan\Downloads\reilly_method_pdf.iso
2016-08-25 16:24 - 2016-08-25 16:24 - 14971293 _____ C:\Users\Jan\Downloads\Burne Hogarth  - Drawing Dynamic Hands.pdf
2016-08-25 16:10 - 2016-08-25 16:11 - 85769094 _____ C:\Users\Jan\Downloads\BRIDGMANS - Complete Guide to Drawing from Life.pdf
2016-08-25 15:31 - 2016-08-25 15:42 - 151703004 _____ C:\Users\Jan\Downloads\Keys_to_Drawing_Bert_Dodson.pdf
2016-08-25 07:36 - 2016-08-25 07:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2016-08-22 19:15 - 2016-08-22 19:20 - 00000000 ____D C:\Users\Jan\AppData\Local\ElevatedDiagnostics
2016-08-19 09:20 - 2016-08-19 09:20 - 00043828 _____ C:\Users\Jan\Downloads\BE55979611647144_2016-08-11_00133_020077.pdf
2016-08-17 20:43 - 2016-08-17 20:43 - 00000000 ____D C:\Users\Jan\AppData\Roaming\WinRAR
2016-08-17 20:42 - 2016-08-17 20:45 - 00000000 ____D C:\Program Files (x86)\WinRAR
2016-08-17 20:42 - 2016-08-17 20:42 - 02130384 _____ C:\Users\Jan\Downloads\wrar531nl.exe
2016-08-17 20:40 - 2016-08-17 20:40 - 00540160 _____ C:\Users\Jan\Downloads\Alla Prima  Everything I Know  Downloader.rar
2016-08-14 11:15 - 2016-08-14 11:15 - 00001389 _____ C:\Users\Jan\Downloads\URLLink (1).acsm
2016-08-14 11:14 - 2016-08-14 11:14 - 00001389 _____ C:\Users\Jan\Downloads\URLLink.acsm
2016-08-13 15:46 - 2016-08-14 20:10 - 00000000 ____D C:\Users\Jan\Documents\Tijdelijk
2016-08-10 09:09 - 2016-08-03 12:36 - 00099680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pdc.sys
2016-08-10 09:09 - 2016-08-03 12:30 - 00026408 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-08-10 09:09 - 2016-08-03 12:23 - 00693600 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupEngine.dll
2016-08-10 09:09 - 2016-08-03 12:23 - 00115040 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupApi.dll
2016-08-10 09:09 - 2016-08-03 12:22 - 00808288 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2016-08-10 09:09 - 2016-08-03 12:22 - 00465248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2016-08-10 09:09 - 2016-08-03 12:22 - 00331616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys
2016-08-10 09:09 - 2016-08-03 12:21 - 03675512 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-08-10 09:09 - 2016-08-03 12:21 - 00566112 _____ (Microsoft Corporation) C:\Windows\system32\SettingSyncHost.exe
2016-08-10 09:09 - 2016-08-03 12:20 - 01540224 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2016-08-10 09:09 - 2016-08-03 12:20 - 00692136 _____ (Microsoft Corporation) C:\Windows\system32\sppwinob.dll
2016-08-10 09:09 - 2016-08-03 12:19 - 00604928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-08-10 09:09 - 2016-08-03 12:19 - 00161632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-08-10 09:09 - 2016-08-03 12:13 - 01988448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-08-10 09:09 - 2016-08-03 12:13 - 00576864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys
2016-08-10 09:09 - 2016-08-03 12:13 - 00393056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-08-10 09:09 - 2016-08-03 11:51 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2016-08-10 09:09 - 2016-08-03 11:44 - 00189952 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2016-08-10 09:09 - 2016-08-03 11:44 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\wshbth.dll
2016-08-10 09:09 - 2016-08-03 11:44 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\musdialoghandlers.dll
2016-08-10 09:09 - 2016-08-03 11:43 - 16985088 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll
2016-08-10 09:09 - 2016-08-03 11:41 - 00128512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthpan.sys
2016-08-10 09:09 - 2016-08-03 11:41 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthenum.sys
2016-08-10 09:09 - 2016-08-03 11:40 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rfcomm.sys
2016-08-10 09:09 - 2016-08-03 11:40 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2016-08-10 09:09 - 2016-08-03 11:40 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\TpmTasks.dll
2016-08-10 09:09 - 2016-08-03 11:39 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-08-10 09:09 - 2016-08-03 11:39 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll
2016-08-10 09:09 - 2016-08-03 11:38 - 00379392 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2016-08-10 09:09 - 2016-08-03 11:36 - 00211456 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupSvc.dll
2016-08-10 09:09 - 2016-08-03 11:36 - 00198144 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2016-08-10 09:09 - 2016-08-03 11:35 - 00200192 _____ (Microsoft Corporation) C:\Windows\system32\WUDFPlatform.dll
2016-08-10 09:09 - 2016-08-03 11:31 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\wevtutil.exe
2016-08-10 09:09 - 2016-08-03 11:30 - 00515072 _____ (Microsoft Corporation) C:\Windows\system32\OneDriveSettingSyncProvider.dll
2016-08-10 09:09 - 2016-08-03 11:29 - 14252544 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-08-10 09:09 - 2016-08-03 11:29 - 01500160 _____ (Microsoft Corporation) C:\Windows\system32\RecoveryDrive.exe
2016-08-10 09:09 - 2016-08-03 11:29 - 01387520 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2016-08-10 09:09 - 2016-08-03 11:29 - 00954368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2016-08-10 09:09 - 2016-08-03 11:29 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS
2016-08-10 09:09 - 2016-08-03 11:28 - 01213440 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2016-08-10 09:09 - 2016-08-03 11:28 - 00848896 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-08-10 09:09 - 2016-08-03 11:27 - 07536640 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2016-08-10 09:09 - 2016-08-03 11:27 - 01717760 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2016-08-10 09:09 - 2016-08-03 11:18 - 06974464 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2016-08-10 09:09 - 2016-08-03 11:18 - 01388032 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-08-10 09:09 - 2016-08-03 11:16 - 05123072 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll
2016-08-10 09:09 - 2016-08-03 11:16 - 03589120 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2016-08-10 09:09 - 2016-08-03 11:16 - 01732096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-08-10 09:09 - 2016-08-03 11:14 - 01997824 _____ (Microsoft Corporation) C:\Windows\system32\ActiveSyncProvider.dll
2016-08-10 09:09 - 2016-08-03 11:13 - 03025920 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-08-10 09:09 - 2016-08-03 11:13 - 02280960 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-08-10 09:09 - 2016-08-03 11:11 - 04171264 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2016-08-10 09:09 - 2016-08-03 07:52 - 00034088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wldp.dll
2016-08-10 09:09 - 2016-08-03 07:34 - 00501592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupEngine.dll
2016-08-10 09:09 - 2016-08-03 07:34 - 00084832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupApi.dll
2016-08-10 09:09 - 2016-08-03 07:33 - 00051128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsNativeApi.dll
2016-08-10 09:09 - 2016-08-03 07:31 - 02921368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-08-10 09:09 - 2016-08-03 07:31 - 00957608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-08-10 09:09 - 2016-08-03 07:31 - 00703840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
2016-08-10 09:09 - 2016-08-03 06:57 - 00091648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdlrecover.exe
2016-08-10 09:09 - 2016-08-03 06:48 - 00051712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshbth.dll
2016-08-10 09:09 - 2016-08-03 06:47 - 13018112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2016-08-10 09:09 - 2016-08-03 06:44 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepositoryClient.dll
2016-08-10 09:09 - 2016-08-03 06:44 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepositoryBroker.dll
2016-08-10 09:09 - 2016-08-03 06:42 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BluetoothApis.dll
2016-08-10 09:09 - 2016-08-03 06:37 - 00219136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VEEventDispatcher.dll
2016-08-10 09:09 - 2016-08-03 06:35 - 00178688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wevtutil.exe
2016-08-10 09:09 - 2016-08-03 06:34 - 00792064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-08-10 09:09 - 2016-08-03 06:32 - 12585984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-08-10 09:09 - 2016-08-03 06:32 - 00434688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LogonController.dll
2016-08-10 09:09 - 2016-08-03 06:31 - 06743040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2016-08-10 09:09 - 2016-08-03 06:31 - 00705536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-08-10 09:09 - 2016-08-03 06:25 - 04078080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll
2016-08-10 09:09 - 2016-08-03 06:19 - 02180096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepository.dll
2016-08-10 09:08 - 2016-08-03 13:14 - 01505984 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-08-10 09:08 - 2016-08-03 13:14 - 00092352 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-08-10 09:08 - 2016-08-03 13:14 - 00050368 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-08-10 09:08 - 2016-08-03 12:36 - 07469408 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-08-10 09:08 - 2016-08-03 12:36 - 00037744 _____ (Microsoft Corporation) C:\Windows\system32\wldp.dll
2016-08-10 09:08 - 2016-08-03 12:22 - 01322760 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-08-10 09:08 - 2016-08-03 12:22 - 00058408 _____ (Microsoft Corporation) C:\Windows\system32\SensorsNativeApi.dll
2016-08-10 09:08 - 2016-08-03 12:21 - 22561256 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-08-10 09:08 - 2016-08-03 12:21 - 00303216 _____ (Microsoft Corporation) C:\Windows\system32\LockAppHost.exe
2016-08-10 09:08 - 2016-08-03 12:11 - 00422744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdbss.sys
2016-08-10 09:08 - 2016-08-03 11:51 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\tdlrecover.exe
2016-08-10 09:08 - 2016-08-03 11:46 - 22384128 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2016-08-10 09:08 - 2016-08-03 11:41 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryClient.dll
2016-08-10 09:08 - 2016-08-03 11:41 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryBroker.dll
2016-08-10 09:08 - 2016-08-03 11:40 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\VEDataLayerHelpers.dll
2016-08-10 09:08 - 2016-08-03 11:40 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\bthserv.dll
2016-08-10 09:08 - 2016-08-03 11:38 - 00412160 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2016-08-10 09:08 - 2016-08-03 11:37 - 00110080 _____ (Microsoft Corporation) C:\Windows\system32\IdCtrls.dll
2016-08-10 09:08 - 2016-08-03 11:36 - 00221696 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-08-10 09:08 - 2016-08-03 11:35 - 00764928 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2016-08-10 09:08 - 2016-08-03 11:34 - 00383488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-08-10 09:08 - 2016-08-03 11:33 - 00339968 _____ (Microsoft Corporation) C:\Windows\system32\SensorService.dll
2016-08-10 09:08 - 2016-08-03 11:33 - 00285184 _____ (Microsoft Corporation) C:\Windows\system32\VEEventDispatcher.dll
2016-08-10 09:08 - 2016-08-03 11:31 - 00506880 _____ (Microsoft Corporation) C:\Windows\system32\tileobjserver.dll
2016-08-10 09:08 - 2016-08-03 11:31 - 00359936 _____ (Microsoft Corporation) C:\Windows\system32\SensorsApi.dll
2016-08-10 09:08 - 2016-08-03 11:30 - 24613888 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-08-10 09:08 - 2016-08-03 11:30 - 00970752 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-08-10 09:08 - 2016-08-03 11:29 - 02127360 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-08-10 09:08 - 2016-08-03 11:29 - 00784384 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-08-10 09:08 - 2016-08-03 11:28 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll
2016-08-10 09:08 - 2016-08-03 11:27 - 01752576 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-08-10 09:08 - 2016-08-03 11:27 - 00381952 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2016-08-10 09:08 - 2016-08-03 11:20 - 13390336 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-08-10 09:08 - 2016-08-03 11:18 - 02067968 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.dll
2016-08-10 09:08 - 2016-08-03 11:17 - 02175488 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2016-08-10 09:08 - 2016-08-03 11:16 - 02635776 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
2016-08-10 09:08 - 2016-08-03 11:15 - 07833088 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2016-08-10 09:08 - 2016-08-03 11:14 - 04895232 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-08-10 09:08 - 2016-08-03 11:12 - 02746368 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepository.dll
2016-08-10 09:08 - 2016-08-03 07:30 - 21123320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2016-08-10 09:08 - 2016-08-03 07:30 - 00465760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SettingSyncHost.exe
2016-08-10 09:08 - 2016-08-03 07:30 - 00255168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppHost.exe
2016-08-10 09:08 - 2016-08-03 06:40 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IdCtrls.dll
2016-08-10 09:08 - 2016-08-03 06:39 - 19351040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-08-10 09:08 - 2016-08-03 06:37 - 00335872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-08-10 09:08 - 2016-08-03 06:35 - 00286208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SensorsApi.dll
2016-08-10 09:08 - 2016-08-03 06:34 - 00400896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneDriveSettingSyncProvider.dll
2016-08-10 09:08 - 2016-08-03 06:33 - 18677760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2016-08-10 09:08 - 2016-08-03 06:33 - 02050048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-08-10 09:08 - 2016-08-03 06:33 - 00687616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-08-10 09:08 - 2016-08-03 06:32 - 01526272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-08-10 09:08 - 2016-08-03 06:32 - 01467392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2016-08-10 09:08 - 2016-08-03 06:29 - 12133376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-08-10 09:08 - 2016-08-03 06:28 - 03663360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-08-10 09:08 - 2016-08-03 06:25 - 05323776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2016-08-10 09:08 - 2016-08-03 06:23 - 05660672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2016-08-10 09:08 - 2016-08-03 06:23 - 01799680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Logon.dll
2016-08-10 09:08 - 2016-08-03 06:22 - 02501120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-08-10 09:08 - 2016-08-03 06:22 - 01502208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-08-10 09:08 - 2016-08-03 06:21 - 01708032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActiveSyncProvider.dll
2016-08-10 09:01 - 2016-08-10 09:01 - 00042904 _____ C:\Users\Jan\Downloads\BE55979611647144_2016-08-08_00130_024959.pdf
2016-08-10 09:00 - 2016-08-10 09:00 - 00060485 _____ C:\Users\Jan\Downloads\BE55979611647144_2016-07-20_00119_013631.pdf
2016-08-10 09:00 - 2016-08-10 09:00 - 00058688 _____ C:\Users\Jan\Downloads\BE55979611647144_2016-07-12_00113_022591.pdf
2016-08-10 08:59 - 2016-08-10 08:59 - 00059774 _____ C:\Users\Jan\Downloads\BE55979611647144_2016-06-27_00105_015979.pdf
2016-08-08 11:55 - 2016-08-08 11:55 - 26249464 _____ (Belgian Government) C:\Users\Jan\Downloads\Belgium-eID-QuickInstaller-4.1.18-signed.exe
2016-08-08 08:24 - 2016-08-26 09:50 - 00000000 ____D C:\Users\Jan\Documents\Filosofie
2016-08-04 07:46 - 2016-08-13 09:13 - 00003334 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task
2016-08-04 07:46 - 2016-08-04 07:46 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Skype
2016-07-29 15:54 - 2016-07-29 15:54 - 00061970 _____ C:\Users\Jan\Downloads\bpost-label.pdf
2016-07-29 15:54 - 2016-07-29 15:54 - 00028142 _____ C:\Users\Jan\Downloads\bpost-proof.pdf

==================== Een Maand Gewijzigd bestanden en mappen ========

(Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)

2016-08-26 21:10 - 2015-11-24 13:49 - 00000000 ____D C:\Windows\Log
2016-08-26 21:08 - 2016-07-15 10:05 - 00000000 ____D C:\Users\Jan\AppData\Local\ASUS GIFTBOX
2016-08-26 21:08 - 2015-11-24 06:49 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-08-26 21:08 - 2015-10-30 08:28 - 00262144 ___SH C:\Windows\system32\config\BBI
2016-08-26 21:06 - 2016-07-15 10:05 - 00000165 _____ C:\Users\Jan\AppData\Roaming\sp_data.sys
2016-08-26 21:06 - 2015-11-24 07:08 - 00001050 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
2016-08-26 20:40 - 2015-11-24 07:08 - 00001054 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
2016-08-26 20:39 - 2015-11-24 07:07 - 00000424 _____ C:\Windows\Tasks\WpsUpdateTask_Administrator.job
2016-08-26 20:39 - 2015-11-24 07:07 - 00000424 _____ C:\Windows\Tasks\WpsNotifyTask_Administrator.job
2016-08-26 16:39 - 2016-03-25 00:37 - 00003544 _____ C:\Windows\System32\Tasks\ASUS Live Update1
2016-08-26 16:39 - 2016-03-25 00:37 - 00003534 _____ C:\Windows\System32\Tasks\ASUS Live Update2
2016-08-26 10:05 - 2016-07-15 11:00 - 00000000 ____D C:\ProgramData\FLEXnet
2016-08-26 10:01 - 2016-07-15 10:18 - 00000000 ___RD C:\Users\Jan\Dropbox
2016-08-26 10:01 - 2016-07-15 10:05 - 00000000 __SHD C:\Users\Jan\IntelGraphicsProfiles
2016-08-26 10:01 - 2016-07-15 10:04 - 00000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-08-26 10:00 - 2016-07-15 10:05 - 00000000 ____D C:\Users\Jan
2016-08-26 09:57 - 2015-10-30 09:21 - 00000000 ____D C:\Windows\INF
2016-08-26 09:49 - 2016-07-15 10:11 - 00001432 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-08-26 09:45 - 2016-07-21 16:00 - 00000000 ____D C:\Users\Jan\Documents\Kunsttheorie
2016-08-26 07:29 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\AppReadiness
2016-08-25 16:34 - 2015-11-24 14:32 - 00820294 _____ C:\Windows\system32\perfh013.dat
2016-08-25 16:34 - 2015-11-24 14:32 - 00159892 _____ C:\Windows\system32\perfc013.dat
2016-08-25 16:34 - 2015-11-24 06:55 - 01847504 _____ C:\Windows\system32\PerfStringBackup.INI
2016-08-25 14:33 - 2015-10-30 09:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-08-25 07:37 - 2015-11-24 07:08 - 00000000 ____D C:\Program Files (x86)\Dropbox
2016-08-21 19:20 - 2016-07-15 10:05 - 00000000 ____D C:\Users\Jan\AppData\Roaming\WebStorage
2016-08-21 10:34 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\system32\NDF
2016-08-13 09:13 - 2016-07-15 10:07 - 00002383 _____ C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-08-13 09:13 - 2016-07-15 10:07 - 00000000 ___RD C:\Users\Jan\OneDrive
2016-08-12 09:40 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\rescache
2016-08-11 09:13 - 2016-07-24 21:07 - 00000000 ____D C:\Users\Jan\Documents\Telenet
2016-08-10 16:18 - 2016-03-25 00:24 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-08-10 16:18 - 2015-11-24 06:46 - 02150696 _____ C:\Windows\system32\FNTCACHE.DAT
2016-08-10 16:17 - 2015-10-30 20:19 - 00000000 ____D C:\Program Files\Windows Journal
2016-08-10 16:17 - 2015-10-30 20:11 - 00000000 ____D C:\Windows\OCR
2016-08-10 16:17 - 2015-10-30 09:24 - 00000000 ___RD C:\Windows\ImmersiveControlPanel
2016-08-10 16:17 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\system32\SecureBootUpdates
2016-08-10 16:17 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\system32\appraiser
2016-08-10 16:10 - 2016-07-15 13:59 - 00000000 ____D C:\Windows\system32\MRT
2016-08-10 16:10 - 2015-10-30 09:11 - 00000000 ____D C:\Windows\CbsTemp
2016-08-10 16:08 - 2016-07-15 13:59 - 147640136 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-08-10 09:02 - 2016-07-17 20:20 - 00000000 ____D C:\Users\Jan\Documents\Eneco
2016-08-08 18:46 - 2016-07-15 10:05 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Adobe
2016-08-08 10:46 - 2015-10-30 09:24 - 00000000 ____D C:\Windows\LiveKernelReports
2016-08-03 22:13 - 2016-07-17 09:22 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-08-01 08:46 - 2016-07-20 20:34 - 00000000 ____D C:\Users\Jan\AppData\Roaming\XnViewMP
2016-07-29 12:35 - 2016-07-15 10:05 - 00000000 ____D C:\Users\Jan\AppData\Local\Packages
2016-07-27 21:25 - 2016-07-15 14:02 - 00504488 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

==================== Bestanden in de root van sommige mappen =======

2016-08-26 10:03 - 2016-08-19 09:46 - 6765520 _____ (上饶市康格信息技术有限公司                                               ) C:\Users\Jan\AppData\Roaming\AdAnti13.exe
2016-08-26 09:52 - 2016-08-26 09:53 - 0018336 _____ () C:\Users\Jan\AppData\Roaming\InstallationConfiguration.xml
2016-08-26 09:52 - 2016-08-26 09:52 - 0138240 _____ () C:\Users\Jan\AppData\Roaming\Installer.dat
2016-08-26 10:03 - 2016-08-01 06:51 - 1616896 _____ () C:\Users\Jan\AppData\Roaming\kpzip.exe
2016-08-26 09:59 - 2016-08-21 08:21 - 0344064 _____ () C:\Users\Jan\AppData\Roaming\RandomDelJiheReg.exe
2016-07-15 10:05 - 2016-08-26 21:06 - 0000165 _____ () C:\Users\Jan\AppData\Roaming\sp_data.sys
2016-08-26 09:57 - 2016-08-24 08:58 - 1631744 _____ () C:\Users\Jan\AppData\Roaming\ucdlr.exe
2016-08-26 10:02 - 2016-02-18 10:10 - 5267952 _____ () C:\Users\Jan\AppData\Roaming\ziptool_wc-9015_setup.exe
2016-03-25 00:35 - 2016-03-25 00:35 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Sommige bestanden in TEMP:
====================
C:\Users\Jan\AppData\Local\Temp\5XA3X5NZC5.exe
C:\Users\Jan\AppData\Local\Temp\7589.tmp.exe
C:\Users\Jan\AppData\Local\Temp\AvEeWy6gmF.exe
C:\Users\Jan\AppData\Local\Temp\B33B.tmp.exe
C:\Users\Jan\AppData\Local\Temp\fkqlwqyBHr.exe
C:\Users\Jan\AppData\Local\Temp\FoxitUpdater.exe
C:\Users\Jan\AppData\Local\Temp\fsd1FB8.exe
C:\Users\Jan\AppData\Local\Temp\J1Yqay9ZG6.exe
C:\Users\Jan\AppData\Local\Temp\LOOfFUCLDO.exe
C:\Users\Jan\AppData\Local\Temp\ludashisetup.exe
C:\Users\Jan\AppData\Local\Temp\McCSPInstall.dll
C:\Users\Jan\AppData\Local\Temp\mccspuninstall.exe
C:\Users\Jan\AppData\Local\Temp\nsd6417.tmp.exe
C:\Users\Jan\AppData\Local\Temp\P59H5N1E0D.exe
C:\Users\Jan\AppData\Local\Temp\S1pfycne0q.exe
C:\Users\Jan\AppData\Local\Temp\sdf5FCF.exe
C:\Users\Jan\AppData\Local\Temp\sdf6E75.exe
C:\Users\Jan\AppData\Local\Temp\setup.exe
C:\Users\Jan\AppData\Local\Temp\ZYT605C8O9.exe


==================== Bamital & volsnap =================

(Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.)

C:\Windows\system32\winlogon.exe
[2016-07-15 13:58] - [2016-04-23 06:18] - 0585728 ____A (Microsoft Corporation) 5C156EC4E44E30331BCC865A3B61D839

C:\Windows\system32\wininit.exe
[2016-07-15 13:59] - [2016-04-23 07:06] - 0291360 ____A (Microsoft Corporation) C1C81AAF533552B3C4D9F11A5FF97700

C:\Windows\explorer.exe
[2016-07-15 13:59] - [2016-07-01 06:33] - 4515256 ____A (Microsoft Corporation) E396258CFD8F84E8F2C24930E6D88C67

C:\Windows\SysWOW64\explorer.exe
[2016-07-15 13:58] - [2016-07-01 06:19] - 4074160 ____A (Microsoft Corporation) B6113983ED77D6FE99BDEE461E7BE004

C:\Windows\system32\svchost.exe => MD5 is legitim
C:\Windows\SysWOW64\svchost.exe => MD5 is legitim
C:\Windows\system32\services.exe => MD5 is legitim
C:\Windows\system32\User32.dll
[2016-07-15 13:59] - [2016-04-23 07:00] - 1399224 ____A (Microsoft Corporation) F5F7CE3E32536F1A37FB3972F27A814F

C:\Windows\SysWOW64\User32.dll
[2016-07-15 13:58] - [2016-04-23 07:00] - 1337240 ____A (Microsoft Corporation) E7BD4D15CDC5A1E162256CFADCA92344

C:\Windows\system32\userinit.exe => MD5 is legitim
C:\Windows\SysWOW64\userinit.exe => MD5 is legitim
C:\Windows\system32\rpcss.dll => MD5 is legitim
C:\Windows\system32\dnsapi.dll
[2016-07-15 13:58] - [2016-03-29 12:11] - 0686976 ____A (Microsoft Corporation) 9A3E17CDB177913C2A111C80F3D0DBB4

C:\Windows\SysWOW64\dnsapi.dll
[2016-07-15 13:59] - [2016-03-29 11:28] - 0535080 ____A (Microsoft Corporation) 6A7ACABAE92C837F5C1330188EAE36AE

C:\Windows\system32\Drivers\volsnap.sys => MD5 is legitim


LastRegBack: 2016-08-13 09:36

==================== Eind van FRST.txt ============================