info.txt logfile of random's system information tool 1.10 2016-09-21 14:35:14 ======MBR====== 0x0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000A84058CA000000000200EEFFFFFF01000000FFFFFFFF00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055AA ======Uninstall list====== -->"C:\Program Files (x86)\WildTangent Games\Game Explorer Categories - genres\Uninstall.exe" 64 Bit HP CIO Components Installer-->MsiExec.exe /I{FF21C3E6-97FD-474F-9518-8DCBE94C2854} Acer Explorer Agent-->Msiexec.exe /i {4D0F42CF-1693-43D9-BDC8-19141D023EE0} ACER=1 PRODUCTNAME="Acer Explorer Agent" REMOVEUSEC=1 BOOTSTRATOR=1 Acer Launch Manager-->MsiExec.exe /i {C18D55BD-1EC6-466D-B763-8EEDDDA9100E} BOOTSTRATOR=1 GPRODUCTNAME="Acer Launch Manager" BRANDNAME="Acer" ISDT=0 Acer Portal-->C:\Program Files (x86)\Acer\Acer Portal\uninstall.exe Acer Power Management-->MsiExec.exe /i {91F52DE4-B789-42B0-9311-A349F10E5479} PRODUCTNAME="Acer Power Management" BRANDNAME="Acer" NEWUPGRADE=0 BOOTSTRATOR=1 ISDT=0 Acer Recovery Management-->Msiexec.exe /i {07F2005A-8CAC-4A4B-83A2-DA98A722CA61} ACER=1 PRODUCTNAME="Acer Recovery Management" REMOVEUSEC=1 BOOTSTRATOR=1 ACERPRELOAD=1 Acer Remote Files-->C:\Program Files\Acer\Remote Files\AcerRemoteFileSetup.exe -uninstall Acer System Information-->MsiExec.exe /I{72199E33-4F2A-4B7F-8E25-95DDDD50A678} Acer User Experience Improvement Program App Monitor Plugin-->MsiExec.exe /i {978724F6-1863-4DD5-9E66-FB77F5AB5613} PRODUCTNAME="Acer User Experience Improvement Program App Monitor Plugin" BRANDNAME="Acer" BOOTSTRATOR=1 Acer User Experience Improvement Program Framework-->MsiExec.exe /i {12A718F2-2357-4D41-9E1F-18583A4745F7} PRODUCTNAME="Acer User Experience Improvement Program Framework" BRANDNAME="Acer" BOOTSTRATOR=1 Acer Video Player-->C:\Program Files (x86)\Acer\Acer Video Player\clearfiSetup.exe -uninstall Adobe Reader XI (11.0.17) MUI-->MsiExec.exe /I{AC76BA86-7AD7-FFFF-7B44-AB0000000001} Adobe Refresh Manager-->MsiExec.exe /I{AC76BA86-0804-1033-1959-001824191728} AVG Web TuneUp-->C:\Program Files (x86)\AVG Web TuneUp\UNINSTALL.exe /PROMPT /UNINSTALL CyberLink PhotoDirector 3-->"C:\Program Files (x86)\InstallShield Installation Information\{39337565-330E-4ab6-A9AE-AC81E0720B10}\Setup.exe" /z-uninstall CyberLink PhotoDirector 3-->"C:\Program Files (x86)\InstallShield Installation Information\{39337565-330E-4ab6-A9AE-AC81E0720B10}\Setup.exe" /z-uninstall CyberLink PowerDirector 10-->"C:\Program Files (x86)\InstallShield Installation Information\{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}\setup.exe" /z-uninstall CyberLink PowerDirector 10-->"C:\Program Files (x86)\InstallShield Installation Information\{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}\setup.exe" /z-uninstall CyberLink PowerDVD 12-->"C:\Program Files (x86)\InstallShield Installation Information\{B46BEA36-0B71-4A4E-AE41-87241643FA0A}\Setup.exe" /z-uninstall CyberLink PowerDVD 12-->"C:\Program Files (x86)\InstallShield Installation Information\{B46BEA36-0B71-4A4E-AE41-87241643FA0A}\Setup.exe" /z-uninstall DAEMON Tools Lite-->C:\Program Files\DAEMON Tools Lite\uninst.exe Definition Update for Microsoft Office 2013 (KB3115404) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{52EF08F9-F296-48DC-A906-E03225E51C9B}" "1043" "0" DokanSetup-->MsiExec.exe /I{E2676CB4-216C-4050-9C45-63A2B3349E0C} EaseUS Partition Master 11.5-->"C:\Program Files (x86)\EaseUS\EaseUS Partition Master 11.5\unins000.exe" GFACE Launcher-->MsiExec.exe /X{28D1723C-31C4-4A83-9799-DFFB3739026D} Google Chrome-->"C:\Program Files (x86)\Google\Chrome\Application\53.0.2785.116\Installer\setup.exe" --uninstall --multi-install --chrome --system-level Google Update Helper-->MsiExec.exe /I{60EC980A-BDA2-4CB6-A427-B07A5498B4CA} HP Customer Participation Program 14.0-->C:\Program Files (x86)\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat -forcereboot HP Imaging Device Functions 14.0-->C:\Program Files (x86)\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat HP Photosmart Wireless B110 All-In-One Driver Software 14.0 Rel. 6-->C:\Program Files (x86)\HP\Digital Imaging\{C63184F3-8343-408F-A948-DDB0AC969A99}\setup\hpzscr40.exe -datfile hposcr47.dat -onestop -forcereboot HP Solution Center 14.0-->C:\Program Files (x86)\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat -forcereboot HP Update-->MsiExec.exe /X{912D30CF-F39E-4B31-AD9A-123C6B794EE2} Identity Card-->MsiExec.exe /X{3D9CB654-99AD-4301-89C6-0D12A790767C} Intel(R) Driver Update Utility 2.4-->MsiExec.exe /X{B731F5C4-E304-4DFA-9C84-F67FF849B408} Intel(R) Processor Graphics-->"C:\Program Files (x86)\Intel\Intel(R) Processor Graphics\Uninstall\setup.exe" -uninstall Intel(R) Product Improvement Program-->MsiExec.exe /I{E954D7C1-36FA-4FE8-8927-97DBDEB5A15F} Intel(R) Serial IO-->"C:\ProgramData\Intel\Package Cache\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}\Setup.exe" -uninstall Intel(R) Serial IO-->MsiExec.exe /I{4BC363E0-C229-4F9E-8CE1-7F37FD35FB06} Intel® Driver Update Utility-->"C:\ProgramData\Package Cache\{1b09c4de-9cae-4122-b17c-65d395062b50}\Intel Driver Update Utility Installer.exe" /uninstall iRoot-->"C:\Program Files (x86)\iRoot\unins000.exe" Live Updater-->MsiExec.exe /X{EE26E302-876A-48D9-9058-3129E5B99999} Malwarebytes Anti-Malware versie 2.2.0.1024-->"C:\Program Files (x86)\Malwarebytes Anti-Malware\unins000.exe" MegaBackup-->"C:\ProgramData\Package Cache\{75244ce8-d3de-4ddf-bc6b-6e33fede64d1}\Installer.exe" /uninstall MegaBackup-->MsiExec.exe /I{403CC8F3-B54C-4510-8325-813CDFEAD562} Microsoft Access MUI (Dutch) 2013-->MsiExec.exe /X{90150000-0015-0413-1000-0000000FF1CE} Microsoft DCF MUI (Dutch) 2013-->MsiExec.exe /X{90150000-0090-0413-1000-0000000FF1CE} Microsoft Excel MUI (Dutch) 2013-->MsiExec.exe /X{90150000-0016-0413-1000-0000000FF1CE} Microsoft Groove MUI (Dutch) 2013-->MsiExec.exe /X{90150000-00BA-0413-1000-0000000FF1CE} Microsoft InfoPath MUI (Dutch) 2013-->MsiExec.exe /X{90150000-0044-0413-1000-0000000FF1CE} Microsoft Lync MUI (Dutch) 2013-->MsiExec.exe /X{90150000-012B-0413-1000-0000000FF1CE} Microsoft Office 32-bit Components 2013-->MsiExec.exe /X{90150000-00C1-0000-1000-0000000FF1CE} Microsoft Office Korrekturhilfen 2013 - Deutsch-->MsiExec.exe /X{90150000-001F-0407-1000-0000000FF1CE} Microsoft Office OSM MUI (Dutch) 2013-->MsiExec.exe /X{90150000-00E1-0413-1000-0000000FF1CE} Microsoft Office OSM UX MUI (Dutch) 2013-->MsiExec.exe /X{90150000-00E2-0413-1000-0000000FF1CE} Microsoft Office Professional Plus 2013-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL Microsoft Office Professional Plus 2013-->MsiExec.exe /X{90150000-0011-0000-1000-0000000FF1CE} Microsoft Office Proofing (Dutch) 2013-->MsiExec.exe /X{90150000-002C-0413-1000-0000000FF1CE} Microsoft Office Proofing Tools 2013 - English-->MsiExec.exe /X{90150000-001F-0409-1000-0000000FF1CE} Microsoft Office Proofing Tools 2013 - Nederlands-->MsiExec.exe /X{90150000-001F-0413-1000-0000000FF1CE} Microsoft Office Shared 32-bit MUI (Dutch) 2013-->MsiExec.exe /X{90150000-00C1-0413-1000-0000000FF1CE} Microsoft Office Shared MUI (Dutch) 2013-->MsiExec.exe /X{90150000-006E-0413-1000-0000000FF1CE} Microsoft OneNote MUI (Dutch) 2013-->MsiExec.exe /X{90150000-00A1-0413-1000-0000000FF1CE} Microsoft Outlook MUI (Dutch) 2013-->MsiExec.exe /X{90150000-001A-0413-1000-0000000FF1CE} Microsoft PowerPoint MUI (Dutch) 2013-->MsiExec.exe /X{90150000-0018-0413-1000-0000000FF1CE} Microsoft Publisher MUI (Dutch) 2013-->MsiExec.exe /X{90150000-0019-0413-1000-0000000FF1CE} Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c} Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17-->MsiExec.exe /X{8220EEFE-38CD-377E-8595-13398D740ACE} Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161-->MsiExec.exe /X{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4} Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475} Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148-->MsiExec.exe /X{1F1C2DFC-2D24-3E06-BCB8-725134ADF989} Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161-->MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F} Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219-->MsiExec.exe /X{1D8E6291-B0D5-35EC-8441-6616F567A0F7} Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219-->MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5} Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918-->"C:\ProgramData\Package Cache\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}\VC_redist.x86.exe" /uninstall Microsoft Visual C++ 2015 x86 Additional Runtime - 14.0.23918-->MsiExec.exe /X{BD9CFD69-EB91-354E-9C98-D439E6091932} Microsoft Visual C++ 2015 x86 Minimum Runtime - 14.0.23918-->MsiExec.exe /X{B5FC62F5-A367-37A5-9FD2-A6E137C0096F} Microsoft Visual Studio 2010 Tools for Office Runtime (x64)-->c:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)\install.exe Microsoft Visual Studio 2010 Tools for Office Runtime (x64)-->MsiExec.exe /X{9495AEB4-AB97-39DE-8C42-806EEF75ECA7} Microsoft Word MUI (Dutch) 2013-->MsiExec.exe /X{90150000-001B-0413-1000-0000000FF1CE} Nero BackItUp 12 Essentials OEM.a01-->MsiExec.exe /I{551AC8F2-FEA2-4B45-ACF7-C98681233CC9} Nero BackItUp Help (CHM)-->MsiExec.exe /X{EF0D1292-8FC1-41BE-9740-DBC134F66415} Nero BackItUp-->MsiExec.exe /X{DA2D3078-A58C-45E8-8EE0-18B8BE6B34F7} Nero ControlCenter Help (CHM)-->MsiExec.exe /X{C994C746-C6D0-4EBA-B09E-DF7B18381B69} Nero ControlCenter-->MsiExec.exe /X{ABC88553-8770-4B97-B43E-5A90647A5B63} Nero Core Components-->MsiExec.exe /X{BEBEE34D-84A2-4EDD-8BEA-96CC54371263} Nero Launcher-->MsiExec.exe /X{0E4630AF-0AB7-440E-A978-1A78FC4F43B9} Nero RescueAgent Help (CHM)-->MsiExec.exe /X{0B311221-05A5-4766-8D03-7A6446794156} Nero RescueAgent-->MsiExec.exe /X{A2D43081-CF7B-4637-A9F3-E2651AA5C4A8} Nero Update-->MsiExec.exe /X{65BB0407-4CC8-4DC7-952E-3EEFDF05602A} Outils de vérification linguistique 2013 de Microsoft Office - Français-->MsiExec.exe /X{90150000-001F-040C-1000-0000000FF1CE} Plex Media Server-->"C:\ProgramData\Package Cache\{95a48f45-ab01-45f1-877e-2e99428cfe59}\pms.exe" /uninstall Plex Media Server-->MsiExec.exe /I{6C038F54-63AD-45B6-82F0-DB016AACC332} Private Internet Access Support Files-->MsiExec.exe /I{7D72DAFF-DCB2-437B-BC22-4B2ABF21462B} Qualcomm Atheros WLAN and Bluetooth Client Installation Program-->"C:\Program Files (x86)\InstallShield Installation Information\{28006915-2739-4EBE-B5E8-49B25D32EB33}\setup.exe" -runfromtemp -l0x0409 -removeonly Realtek Card Reader-->"C:\Program Files (x86)\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\setup.exe" -runfromtemp -removeonly Realtek Ethernet Controller Driver-->C:\Program Files (x86)\InstallShield Installation Information\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}\setup.exe -runfromtemp -removeonly Realtek High Definition Audio Driver-->C:\Program Files\Realtek\Audio\HDA\RtlUpd64.exe -r -m -nrg2709 ROSE Online-->MsiExec.exe /I{FE68D630-0051-42DC-98D6-0D8BF5CB13C5} Samsung Kies-->"C:\Program Files (x86)\InstallShield Installation Information\{758C8301-2696-4855-AF45-534B1200980A}\setup.exe" -runfromtemp -l0x0409 -removeonly Samsung Kies-->MsiExec.exe /I{758C8301-2696-4855-AF45-534B1200980A} Samsung USB Driver for Mobile Phones-->C:\Program Files (x86)\Samsung\USB Drivers\Uninstall.exe Security Update for Microsoft Excel 2013 (KB3118284) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{7E358FFC-210E-469D-9949-CEC01F6531A9}" "1043" "0" Security Update for Microsoft Excel 2013 (KB3118284) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0016-0413-1000-0000000FF1CE}" "{7E358FFC-210E-469D-9949-CEC01F6531A9}" "1043" "0" Security Update for Microsoft Excel 2013 (KB3118284) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0018-0413-1000-0000000FF1CE}" "{7E358FFC-210E-469D-9949-CEC01F6531A9}" "1043" "0" Security Update for Microsoft Excel 2013 (KB3118284) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001B-0413-1000-0000000FF1CE}" "{7E358FFC-210E-469D-9949-CEC01F6531A9}" "1043" "0" Security Update for Microsoft Excel 2013 (KB3118284) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{7E358FFC-210E-469D-9949-CEC01F6531A9}" "1043" "0" Security Update for Microsoft Excel 2013 (KB3118284) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0413-1000-0000000FF1CE}" "{7E358FFC-210E-469D-9949-CEC01F6531A9}" "1043" "0" Security Update for Microsoft Office 2013 (KB2910941) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{43ECCB82-45DF-4800-8930-0689BF91F765}" "1043" "0" Security Update for Microsoft Office 2013 (KB3039798) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{05F0956E-88D3-4437-BE87-E2B0CA491BE8}" "1043" "0" Security Update for Microsoft Office 2013 (KB3039798) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{05F0956E-88D3-4437-BE87-E2B0CA491BE8}" "1043" "0" Security Update for Microsoft Office 2013 (KB3054816) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{D8AD4AD9-80FA-4D64-A847-B23948D49A6D}" "1043" "0" Security Update for Microsoft Office 2013 (KB3114340) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-006E-0413-1000-0000000FF1CE}" "{9C69E989-EDBC-498D-AD49-528DF1EB0AFE}" "1043" "0" Security Update for Microsoft Office 2013 (KB3118268) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{8271D45F-E64A-48DA-94FA-7ACC3E9691D5}" "1043" "0" Security Update for Microsoft Office 2013 (KB3118268) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-006E-0413-1000-0000000FF1CE}" "{8271D45F-E64A-48DA-94FA-7ACC3E9691D5}" "1043" "0" Security Update for Microsoft Office 2013 (KB3118268) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{8271D45F-E64A-48DA-94FA-7ACC3E9691D5}" "1043" "0" Security Update for Microsoft OneNote 2013 (KB3115256) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{6A2FD1CC-FEDE-49E0-B46E-C3AFC78BEB11}" "1043" "0" Security Update for Microsoft OneNote 2013 (KB3115256) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00A1-0413-1000-0000000FF1CE}" "{6A2FD1CC-FEDE-49E0-B46E-C3AFC78BEB11}" "1043" "0" Security Update for Microsoft OneNote 2013 (KB3115256) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{6A2FD1CC-FEDE-49E0-B46E-C3AFC78BEB11}" "1043" "0" Security Update for Microsoft Outlook 2013 (KB3118280) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{5D15411D-BD53-48AA-BF7C-7867108961CE}" "1043" "0" Security Update for Microsoft Outlook 2013 (KB3118280) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001A-0413-1000-0000000FF1CE}" "{5D15411D-BD53-48AA-BF7C-7867108961CE}" "1043" "0" Security Update for Microsoft PowerPoint 2013 (KB3115487) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{29A7156C-4CC2-41BB-A3F9-316A1D672ED0}" "1043" "0" Security Update for Microsoft PowerPoint 2013 (KB3115487) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0018-0413-1000-0000000FF1CE}" "{29A7156C-4CC2-41BB-A3F9-316A1D672ED0}" "1043" "0" Security Update for Microsoft PowerPoint 2013 (KB3115487) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{29A7156C-4CC2-41BB-A3F9-316A1D672ED0}" "1043" "0" Security Update for Microsoft Publisher 2013 (KB3085561) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{B868C869-9B43-469A-A22F-C2E79B706F14}" "1043" "0" Security Update for Microsoft Publisher 2013 (KB3085561) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0019-0413-1000-0000000FF1CE}" "{B868C869-9B43-469A-A22F-C2E79B706F14}" "1043" "0" Security Update for Microsoft Publisher 2013 (KB3085561) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{B868C869-9B43-469A-A22F-C2E79B706F14}" "1043" "0" Shop for HP Supplies-->C:\Program Files (x86)\HP\Digital Imaging\HPSSupply\hpzscr01.exe -datfile hpqbud16.dat Spotify-->"C:\Program Files (x86)\Spotify\Spotify.exe" /uninstall Stopping Plex-->MsiExec.exe /I{837B7322-3B78-4F10-9D00-5F15DE968660} Taalpakket voor Microsoft Visual Studio 2010 Tools for Office Runtime (x64) - NLD-->c:\Program Files\Common Files\Microsoft Shared\VSTO\10.0\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - NLD\install.exe TeamSpeak 3 Client-->"C:\Program Files (x86)\TeamSpeak 3 Client\uninstall.exe" TweakBit Driver Updater-->"C:\Program Files (x86)\TweakBit\Driver Updater\unins000.exe" /compability Update for Microsoft Access 2013 (KB3114948) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{152BECE7-1E3B-4D5F-9703-019175DB52DA}" "1043" "0" Update for Microsoft Access 2013 (KB3114948) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0015-0413-1000-0000000FF1CE}" "{152BECE7-1E3B-4D5F-9703-019175DB52DA}" "1043" "0" Update for Microsoft Access 2013 (KB3114948) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{152BECE7-1E3B-4D5F-9703-019175DB52DA}" "1043" "0" Update for Microsoft InfoPath 2013 (KB3114818) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{4ADEF96A-328D-485E-8C34-429BA4BD13DD}" "1043" "0" Update for Microsoft InfoPath 2013 (KB3114946) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{D335A27A-29AB-42DD-A36A-B986E722B769}" "1043" "0" Update for Microsoft InfoPath 2013 (KB3114946) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0044-0413-1000-0000000FF1CE}" "{D335A27A-29AB-42DD-A36A-B986E722B769}" "1043" "0" Update for Microsoft InfoPath 2013 (KB3114946) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-006E-0413-1000-0000000FF1CE}" "{D335A27A-29AB-42DD-A36A-B986E722B769}" "1043" "0" Update for Microsoft InfoPath 2013 (KB3114946) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{D335A27A-29AB-42DD-A36A-B986E722B769}" "1043" "0" Update for Microsoft Office 2013 (KB2760344) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{EF77B4A6-DFEC-4010-A87D-9B6BF87FABEC}" "1043" "0" Update for Microsoft Office 2013 (KB2760371) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{25DEA344-FF6F-41BD-B88F-5242BB8E80E1}" "1043" "0" Update for Microsoft Office 2013 (KB2883095) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{EADBF225-163E-406B-B11A-26ECCCAB5A0E}" "1043" "0" Update for Microsoft Office 2013 (KB2889863) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{82D6A9DF-894F-488F-A0C3-54A37A6E7B2A}" "1043" "0" Update for Microsoft Office 2013 (KB2899522) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{A4E88D96-814F-4183-8DB2-BA3EC2B7E434}" "1043" "0" Update for Microsoft Office 2013 (KB2975869) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{14A52226-59E1-428F-83CF-C0D8A467A303}" "1043" "0" Update for Microsoft Office 2013 (KB2975869) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-006E-0413-1000-0000000FF1CE}" "{14A52226-59E1-428F-83CF-C0D8A467A303}" "1043" "0" Update for Microsoft Office 2013 (KB3023049) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{8270C89E-011E-4117-B6BD-0BDE53471C03}" "1043" "0" Update for Microsoft Office 2013 (KB3023052) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{A472CEA9-44BA-4ADD-8AD1-589B2F0240EE}" "1043" "0" Update for Microsoft Office 2013 (KB3023052) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-006E-0413-1000-0000000FF1CE}" "{A472CEA9-44BA-4ADD-8AD1-589B2F0240EE}" "1043" "0" Update for Microsoft Office 2013 (KB3023068) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{5712B1B8-2345-4FCD-90A6-35B84E8556BE}" "1043" "0" Update for Microsoft Office 2013 (KB3023068) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0016-0413-1000-0000000FF1CE}" "{5712B1B8-2345-4FCD-90A6-35B84E8556BE}" "1043" "0" Update for Microsoft Office 2013 (KB3039701) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{8A6AEFA2-8003-4FD6-8EF7-DEAD1C07803C}" "1043" "0" Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1043" "0" Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0015-0413-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1043" "0" Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0016-0413-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1043" "0" Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0018-0413-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1043" "0" Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0019-0413-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1043" "0" Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001A-0413-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1043" "0" Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001B-0413-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1043" "0" Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-0407-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1043" "0" Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-0409-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1043" "0" Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-040C-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1043" "0" Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-0413-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1043" "0" Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-002C-0413-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1043" "0" Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0044-0413-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1043" "0" Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-006E-0413-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1043" "0" Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0090-0413-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1043" "0" Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00A1-0413-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1043" "0" Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00BA-0413-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1043" "0" Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1043" "0" Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0413-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1043" "0" Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00E1-0413-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1043" "0" Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00E2-0413-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1043" "0" Update for Microsoft Office 2013 (KB3039720) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-012B-0413-1000-0000000FF1CE}" "{C08DDD68-F534-45A4-B876-4B8C2C43A744}" "1043" "0" Update for Microsoft Office 2013 (KB3039756) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{4D8584A5-9213-46AF-8F6B-478D80404A6C}" "1043" "0" Update for Microsoft Office 2013 (KB3039766) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{881BA890-D29E-4212-ADDC-A92BE0FBA444}" "1043" "0" Update for Microsoft Office 2013 (KB3039778) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{59474240-80FF-4640-A723-777334B81D28}" "1043" "0" Update for Microsoft Office 2013 (KB3039795) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{8CF7EA10-9458-4340-9605-12FD4A65AC3E}" "1043" "0" Update for Microsoft Office 2013 (KB3039800) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{949A0DB9-8915-4B0F-902F-732EE7BA7A7E}" "1043" "0" Update for Microsoft Office 2013 (KB3054783) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{4F73DEDD-E1B8-43A4-B999-D18C134D22B5}" "1043" "0" Update for Microsoft Office 2013 (KB3054785) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{A4970C67-6BF6-470D-9A66-BD7488A56F2E}" "1043" "0" Update for Microsoft Office 2013 (KB3054785) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{A4970C67-6BF6-470D-9A66-BD7488A56F2E}" "1043" "0" Update for Microsoft Office 2013 (KB3054819) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0016-0413-1000-0000000FF1CE}" "{690E173C-7ED2-410B-BDF6-A17ED155EE64}" "1043" "0" Update for Microsoft Office 2013 (KB3054856) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{65B377E4-0004-4060-A2EE-EC38AD73EF92}" "1043" "0" Update for Microsoft Office 2013 (KB3055007) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{FE88633A-5693-4FF9-AA90-32C82C16EC76}" "1043" "0" Update for Microsoft Office 2013 (KB3085486) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{CEAED80A-B426-4C55-B834-7B460262785B}" "1043" "0" Update for Microsoft Office 2013 (KB3085565) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{1BF0B01D-9BFD-4512-A927-1988CDE2E21D}" "1043" "0" Update for Microsoft Office 2013 (KB3085570) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{5C435867-13A4-484E-BC09-28FE30FFC085}" "1043" "0" Update for Microsoft Office 2013 (KB3085570) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0016-0413-1000-0000000FF1CE}" "{5C435867-13A4-484E-BC09-28FE30FFC085}" "1043" "0" Update for Microsoft Office 2013 (KB3085577) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-0407-1000-0000000FF1CE}" "{7E3918B8-FDC5-4C90-B127-1E8BE91503A0}" "1043" "0" Update for Microsoft Office 2013 (KB3085577) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-0409-1000-0000000FF1CE}" "{647FCBF4-694B-4A86-9852-142B2CE0BCC2}" "1043" "0" Update for Microsoft Office 2013 (KB3085577) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-040C-1000-0000000FF1CE}" "{E8C8AF96-C14D-4771-9842-F285B004224B}" "1043" "0" Update for Microsoft Office 2013 (KB3085577) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001F-0413-1000-0000000FF1CE}" "{44472B78-D1F2-4630-9EF1-253BB08D1DD9}" "1043" "0" Update for Microsoft Office 2013 (KB3085587) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{B6525B60-E970-4DF3-B3C5-C90BC7DC87E0}" "1043" "0" Update for Microsoft Office 2013 (KB3101487) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{51348D5E-3736-4A29-98DD-6B97EE696382}" "1043" "0" Update for Microsoft Office 2013 (KB3101491) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{120A685D-F3D3-4862-840A-4F12464DE0CD}" "1043" "0" Update for Microsoft Office 2013 (KB3101503) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{3F7C3E4B-F30C-4900-8B9B-0ED47F94EC55}" "1043" "0" Update for Microsoft Office 2013 (KB3114488) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{1FC035BF-53D9-437B-B36E-996C7FB18E30}" "1043" "0" Update for Microsoft Office 2013 (KB3114499) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{06F187A1-55FA-4023-BDF5-197A54602E0E}" "1043" "0" Update for Microsoft Office 2013 (KB3114825) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{E2B4997B-3125-4251-899F-11B979F2D9CC}" "1043" "0" Update for Microsoft Office 2013 (KB3114835) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{3522CCE5-B70E-47A2-9C0F-A2D76FAABEC5}" "1043" "0" Update for Microsoft Office 2013 (KB3114835) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{3522CCE5-B70E-47A2-9C0F-A2D76FAABEC5}" "1043" "0" Update for Microsoft Office 2013 (KB3115257) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{DF3D426D-00BA-417B-896F-7528C15BD6B2}" "1043" "0" Update for Microsoft Office 2013 (KB3115257) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-006E-0413-1000-0000000FF1CE}" "{DF3D426D-00BA-417B-896F-7528C15BD6B2}" "1043" "0" Update for Microsoft Office 2013 (KB3115257) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{DF3D426D-00BA-417B-896F-7528C15BD6B2}" "1043" "0" Update for Microsoft Office 2013 (KB3115485) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{C444462E-4E18-466C-A7AA-7DFC12FCBBEB}" "1043" "0" Update for Microsoft OneDrive for Business (KB3115492) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{8A40517F-AFCE-48A4-9A0D-A42DF81066B7}" "1043" "0" Update for Microsoft OneDrive for Business (KB3115492) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00BA-0413-1000-0000000FF1CE}" "{8A40517F-AFCE-48A4-9A0D-A42DF81066B7}" "1043" "0" Update for Microsoft OneDrive for Business (KB3115492) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{8A40517F-AFCE-48A4-9A0D-A42DF81066B7}" "1043" "0" Update for Microsoft OneDrive for Business (KB3115492) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0413-1000-0000000FF1CE}" "{8A40517F-AFCE-48A4-9A0D-A42DF81066B7}" "1043" "0" Update for Microsoft Outlook Social Connector 2013 (KB3054854) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{0B5649CA-AD84-4970-9FCE-548A3EF323ED}" "1043" "0" Update for Microsoft Outlook Social Connector 2013 (KB3054854) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001A-0413-1000-0000000FF1CE}" "{0B5649CA-AD84-4970-9FCE-548A3EF323ED}" "1043" "0" Update for Microsoft Project 2013 (KB3115493) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{77CA26D5-B8C4-48A9-A525-EAE5D4C49BFD}" "1043" "0" Update for Microsoft Visio Viewer 2013 (KB2817301) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{8E5CD68A-CDF8-4930-88DF-B7778B1871A9}" "1043" "0" Update for Microsoft Visio Viewer 2013 (KB2817301) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-006E-0413-1000-0000000FF1CE}" "{8E5CD68A-CDF8-4930-88DF-B7778B1871A9}" "1043" "0" Update for Microsoft Word 2013 (KB2878319) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{BC51FE30-3A56-4802-8D9E-E9BC05B56B49}" "1043" "0" Update for Microsoft Word 2013 (KB3118276) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{0C6ABA1C-CF1E-4A9B-BF61-63774C0AAD95}" "1043" "0" Update for Microsoft Word 2013 (KB3118276) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001A-0413-1000-0000000FF1CE}" "{0C6ABA1C-CF1E-4A9B-BF61-63774C0AAD95}" "1043" "0" Update for Microsoft Word 2013 (KB3118276) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-001B-0413-1000-0000000FF1CE}" "{0C6ABA1C-CF1E-4A9B-BF61-63774C0AAD95}" "1043" "0" Update for Microsoft Word 2013 (KB3118276) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{0C6ABA1C-CF1E-4A9B-BF61-63774C0AAD95}" "1043" "0" Update for Microsoft Word 2013 (KB3118276) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-012B-0413-1000-0000000FF1CE}" "{0C6ABA1C-CF1E-4A9B-BF61-63774C0AAD95}" "1043" "0" Update for Skype for Business 2015 (KB3039776) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-012B-0413-1000-0000000FF1CE}" "{F0120021-C9E2-4B7A-9F74-CCC86E1A9A16}" "1043" "0" Update for Skype for Business 2015 (KB3118281) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-0011-0000-1000-0000000FF1CE}" "{E34F92E8-F338-4749-BE58-E77D605FE648}" "1043" "0" Update for Skype for Business 2015 (KB3118281) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-00C1-0000-1000-0000000FF1CE}" "{E34F92E8-F338-4749-BE58-E77D605FE648}" "1043" "0" Update for Skype for Business 2015 (KB3118281) 64-Bit Edition-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE15\Oarpmany.exe" /removereleaseinpatch "{90150000-012B-0413-1000-0000000FF1CE}" "{E34F92E8-F338-4749-BE58-E77D605FE648}" "1043" "0" Visual Studio 2012 x64 Redistributables-->MsiExec.exe /I{8C775E70-A791-4DA8-BCC3-6AB7136F4484} Visual Studio 2012 x86 Redistributables-->MsiExec.exe /I{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8} VLC media player-->C:\Program Files (x86)\VideoLAN\VLC\uninstall.exe Web Companion-->C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanionInstaller.exe --uninstall Windows Driver Package - AMD (amdkmpfd) System (08/10/2015 15.201.0.0000)-->C:\PROGRA~1\DIFX\D7D25AE11B0B0F4E\dpinst64.exe /u C:\WINDOWS\System32\DriverStore\FileRepository\amdkmpfd.inf_amd64_36f13f231567c74c\amdkmpfd.inf Windows Driver Package - Dritek System Inc. (Ps2Kb2Hid) HIDClass (08/04/2012 2.02.2000.0801)-->C:\PROGRA~1\DIFX\D7D25AE11B0B0F4E\dpinst64.exe /u C:\WINDOWS\System32\DriverStore\FileRepository\ps2kb2hid.inf_amd64_118ebb25ac67bba8\ps2kb2hid.inf Windows Driver Package - Intel (ICCWDT) System (09/20/2015 11.0.0.1007)-->C:\PROGRA~1\DIFX\D7D25AE11B0B0F4E\dpinst64.exe /u C:\WINDOWS\System32\DriverStore\FileRepository\iccwdt.inf_amd64_e92c13379aed32f4\iccwdt.inf Windows Driver Package - Intel (MEIx64) System (07/08/2016 11.5.0.1019)-->C:\PROGRA~1\DIFX\D7D25AE11B0B0F4E\dpinst64.exe /u C:\WINDOWS\System32\DriverStore\FileRepository\heci.inf_amd64_32b8094aefee1898\heci.inf Windows Driver Package - Intel Corporation (iwdbus) System (11/19/2015 4.5.71.0)-->C:\PROGRA~1\DIFX\D7D25AE11B0B0F4E\dpinst64.exe /u C:\WINDOWS\System32\DriverStore\FileRepository\iwdbus.inf_amd64_7ce448aa115e3d2e\iwdbus.inf Windows Driver Package - INTEL System (07/28/2016 10.1.1.34)-->C:\PROGRA~1\DIFX\D7D25AE11B0B0F4E\dpinst64.exe /u C:\WINDOWS\System32\DriverStore\FileRepository\lynxpointlpsystem.inf_amd64_aa94ab27004588ec\lynxpointlpsystem.inf Windows Driver Package - Intel USB (07/31/2013 9.4.0.1025)-->C:\PROGRA~1\DIFX\D7D25AE11B0B0F4E\dpinst64.exe /u C:\WINDOWS\System32\DriverStore\FileRepository\lxlpusb.inf_amd64_52bb1a2e48ba2f7e\lxlpusb.inf Windows Driver Package - Microsoft Battery (11/13/2015 1.2.0.2)-->C:\PROGRA~1\DIFX\D7D25AE11B0B0F4E\dpinst64.exe /u C:\WINDOWS\System32\DriverStore\FileRepository\surfaceacpibattery.inf_amd64_4c30eca9702fc377\surfaceacpibattery.inf Windows Driver Package - Qualcomm Atheros Communications (BtFilter) Bluetooth (07/07/2016 10.0.1.9)-->C:\PROGRA~1\DIFX\D7D25AE11B0B0F4E\dpinst64.exe /u C:\WINDOWS\System32\DriverStore\FileRepository\qca_btusb.inf_amd64_779014555e203bfc\qca_btusb.inf Windows Driver Package - Qualcomm Atheros Communications Inc. (athr) Net (07/06/2016 10.0.0.343)-->C:\PROGRA~1\DIFX\D7D25AE11B0B0F4E\dpinst64.exe /u C:\WINDOWS\System32\DriverStore\FileRepository\athw10x.inf_amd64_afb240ec71eac9c6\athw10x.inf Windows Driver Package - Realtek (rt640x64) Net (07/14/2016 10.010.0714.2016)-->C:\PROGRA~1\DIFX\D7D25AE11B0B0F4E\dpinst64.exe /u C:\WINDOWS\System32\DriverStore\FileRepository\rt640x64.inf_amd64_ed84d816de414c2d\rt640x64.inf Windows Driver Package - Realtek Semiconduct Corp. (RTSPER) MTD (07/18/2016 10.0.10586.21291)-->C:\PROGRA~1\DIFX\D7D25AE11B0B0F4E\dpinst64.exe /u C:\WINDOWS\System32\DriverStore\FileRepository\rtsper.inf_amd64_b5ab675d84b78dbe\rtsper.inf Windows Driver Package - Samsung (PTPFilter) HIDClass (04/21/2016 20.0.0.6)-->C:\PROGRA~1\DIFX\D7D25AE11B0B0F4E\dpinst64.exe /u C:\WINDOWS\System32\DriverStore\FileRepository\ptpfilter.inf_amd64_071d59d962327845\ptpfilter.inf Windows Driver Package - Screenovate Technologies Ltd. (WidockVhid) Screenovate (02/29/2016 5.0.0.501)-->C:\PROGRA~1\DIFX\D7D25AE11B0B0F4E\dpinst64.exe /u C:\WINDOWS\System32\DriverStore\FileRepository\widockvhid.inf_amd64_77e1e1501ab80d53\widockvhid.inf Windows Driver Package - Synaptics (SynRMIHID) HIDClass (02/24/2016 19.0.25.6)-->C:\PROGRA~1\DIFX\D7D25AE11B0B0F4E\dpinst64.exe /u C:\WINDOWS\System32\DriverStore\FileRepository\synrmihid.inf_amd64_cef762a0940368a7\synrmihid.inf Windows Driver Package - WheelMouse (whfltr2k) Mouse (04/24/2010 6.00.0.010)-->C:\PROGRA~1\DIFX\D7D25AE11B0B0F4E\dpinst64.exe /u C:\WINDOWS\System32\DriverStore\FileRepository\whmusb2k.inf_amd64_6a0f9c766ab7c308\whmusb2k.inf Windows Mobile Apparaatcentrum-->MsiExec.exe /X{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B} WinRAR 5.10 (32-bit)-->C:\Program Files (x86)\WinRAR\uninstall.exe WinRAR 5.10 (64-bit)-->C:\Program Files\WinRAR\uninstall.exe ======Hosts File====== 127.0.0.1 down.baidu2016.com 127.0.0.1 123.sogou.com 127.0.0.1 www.czzsyzgm.com 127.0.0.1 www.czzsyzxl.com 127.0.0.1 lmlicenses.wip4.adobe.com 127.0.0.1 lm.licenses.adobe.com 127.0.0.1 na1r.services.adobe.com 127.0.0.1 hlrcv.stage.adobe.com 127.0.0.1 practivate.adobe.com 127.0.0.1 activate.adobe.com ======System event log====== Computer Name: kuilman Event Code: 27 Message: Het opstarttype was 0x0. Record Number: 5 Source Name: Microsoft-Windows-Kernel-Boot Time Written: 20160813135143.820666-000 Event Type: Informatie User: NT AUTHORITY\SYSTEM Computer Name: kuilman Event Code: 153 Message: The Virtualization Based Security (policies: 0) is disabled with status STATUS_SUCCESS. Record Number: 4 Source Name: Microsoft-Windows-Kernel-Boot Time Written: 20160813135143.820558-000 Event Type: Informatie User: NT AUTHORITY\SYSTEM Computer Name: kuilman Event Code: 6005 Message: De Event Log-service is gestart. Record Number: 3 Source Name: EventLog Time Written: 20160813135308.651254-000 Event Type: Informatie User: Computer Name: kuilman Event Code: 6009 Message: Microsoft (R) Windows (R) 10.00. 14393 Multiprocessor Free. Record Number: 2 Source Name: EventLog Time Written: 20160813135308.651254-000 Event Type: Informatie User: Computer Name: kuilman Event Code: 12 Message: Het besturingssysteem is gestart op systeemtijd ‎2016‎-‎08‎-‎13T13:51:43.491135200Z. Record Number: 1 Source Name: Microsoft-Windows-Kernel-General Time Written: 20160813135143.820511-000 Event Type: Informatie User: NT AUTHORITY\SYSTEM =====Application event log===== Computer Name: kuilman Event Code: 4097 Message: De automatische update van het basiscertificaat (onderwerp: ) is voltooid. Sha1-vingerafdruk: <3E2BF7F2031B96F38CE6C4D8A85D3E2D58476A0F>. Record Number: 5 Source Name: Microsoft-Windows-CAPI2 Time Written: 20160813135326.198397-000 Event Type: Informatie User: Computer Name: kuilman Event Code: 4097 Message: De automatische update van het basiscertificaat (onderwerp: ) is voltooid. Sha1-vingerafdruk: . Record Number: 4 Source Name: Microsoft-Windows-CAPI2 Time Written: 20160813135322.901476-000 Event Type: Informatie User: Computer Name: kuilman Event Code: 5615 Message: De Windows Management Instrumentation-service is gestart Record Number: 3 Source Name: Microsoft-Windows-WMI Time Written: 20160813135316.418173-000 Event Type: Informatie User: NT AUTHORITY\SYSTEM Computer Name: kuilman Event Code: 1531 Message: De User Profile-service is gestart. Record Number: 2 Source Name: Microsoft-Windows-User Profiles Service Time Written: 20160813135309.891201-000 Event Type: Informatie User: NT AUTHORITY\SYSTEM Computer Name: KUILMAN Event Code: 4625 Message: Het EventSystem-subsysteem onderdrukt gedurende 86400 seconden dubbele vermeldingen in het gebeurtenislogboek. De time-out voor onderdrukking kan worden ingesteld met de REG_DWORD-waarde SuppressDuplicateDuration in de volgende registersleutel: HKLM\Software\Microsoft\EventSystem\EventLog. Record Number: 1 Source Name: Microsoft-Windows-EventSystem Time Written: 20160813135309.104413-000 Event Type: Informatie User: =====Security event log===== Computer Name: kuilman Event Code: 4688 Message: Er is een nieuw proces gemaakt. Onderwerp maker: Beveiligings-id: S-1-5-18 Accountnaam: - Accountdomein: - Aanmeldings-id: 0x3E7 Doelonderwerp: Beveiligings-id: S-1-0-0 Accountnaam: - Accountdomein: - Aanmeldings-id: 0x0 Procesgegevens: Id van nieuw proces: 0x1a8 Naam van nieuw proces: C:\Windows\System32\smss.exe Type tokenverhoging: %%1936 Verplicht label: S-1-16-16384 Proces-id van maker: 0x14c Procesnaam van maker: C:\Windows\System32\smss.exe Opdrachtregel proces: Type tokenverhoging geeft aan welk type token aan het nieuwe proces is toegewezen overeenkomstig het beleid van Gebruikersaccountbeheer. Type 1 is een volledig token waarvoor geen bevoegdheden zijn verwijderd of groepen zijn uitgeschakeld. Een volledig token wordt alleen gebruikt als Gebruikersaccountbeheer is uitgeschakeld of als de gebruiker is aangemeld met de ingebouwde administratoraccount of een serviceaccount. Type 2 is een verhoogd token waarvoor geen bevoegdheden zijn verwijderd of groepen zijn uitgeschakeld. Een verhoogd token wordt gebruikt wanneer Gebruikersaccountbeheer is ingeschakeld en de gebruiker ervoor kiest het programma te starten met: Als administrator uitvoeren. Een verhoogd token wordt ook gebruikt wanneer een toepassing alleen met administratorbevoegdheid of maximale bevoegdheid kan worden uitgevoerd en de gebruiker lid is van de groep Administrators. Type 3 is een beperkt token waarvoor administratorbevoegdheden zijn verwijderd en administratorgroepen zijn uitgeschakeld. Het beperkte token wordt gebruikt wanneer Gebruikersaccountbeheer is ingeschakeld, de toepassing geen administratorbevoegdheid vereist en de gebruiker het programma niet start met: Als administrator uitvoeren. Record Number: 5 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20160813135221.322320-000 Event Type: Controle geslaagd User: Computer Name: kuilman Event Code: 4688 Message: Er is een nieuw proces gemaakt. Onderwerp maker: Beveiligings-id: S-1-5-18 Accountnaam: - Accountdomein: - Aanmeldings-id: 0x3E7 Doelonderwerp: Beveiligings-id: S-1-0-0 Accountnaam: - Accountdomein: - Aanmeldings-id: 0x0 Procesgegevens: Id van nieuw proces: 0x194 Naam van nieuw proces: C:\Windows\System32\setupcl.exe Type tokenverhoging: %%1936 Verplicht label: S-1-16-16384 Proces-id van maker: 0x14c Procesnaam van maker: C:\Windows\System32\smss.exe Opdrachtregel proces: Type tokenverhoging geeft aan welk type token aan het nieuwe proces is toegewezen overeenkomstig het beleid van Gebruikersaccountbeheer. Type 1 is een volledig token waarvoor geen bevoegdheden zijn verwijderd of groepen zijn uitgeschakeld. Een volledig token wordt alleen gebruikt als Gebruikersaccountbeheer is uitgeschakeld of als de gebruiker is aangemeld met de ingebouwde administratoraccount of een serviceaccount. Type 2 is een verhoogd token waarvoor geen bevoegdheden zijn verwijderd of groepen zijn uitgeschakeld. Een verhoogd token wordt gebruikt wanneer Gebruikersaccountbeheer is ingeschakeld en de gebruiker ervoor kiest het programma te starten met: Als administrator uitvoeren. Een verhoogd token wordt ook gebruikt wanneer een toepassing alleen met administratorbevoegdheid of maximale bevoegdheid kan worden uitgevoerd en de gebruiker lid is van de groep Administrators. Type 3 is een beperkt token waarvoor administratorbevoegdheden zijn verwijderd en administratorgroepen zijn uitgeschakeld. Het beperkte token wordt gebruikt wanneer Gebruikersaccountbeheer is ingeschakeld, de toepassing geen administratorbevoegdheid vereist en de gebruiker het programma niet start met: Als administrator uitvoeren. Record Number: 4 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20160813135209.671560-000 Event Type: Controle geslaagd User: Computer Name: kuilman Event Code: 4688 Message: Er is een nieuw proces gemaakt. Onderwerp maker: Beveiligings-id: S-1-5-18 Accountnaam: - Accountdomein: - Aanmeldings-id: 0x3E7 Doelonderwerp: Beveiligings-id: S-1-0-0 Accountnaam: - Accountdomein: - Aanmeldings-id: 0x0 Procesgegevens: Id van nieuw proces: 0x158 Naam van nieuw proces: C:\Windows\System32\autochk.exe Type tokenverhoging: %%1936 Verplicht label: S-1-16-16384 Proces-id van maker: 0x14c Procesnaam van maker: C:\Windows\System32\smss.exe Opdrachtregel proces: Type tokenverhoging geeft aan welk type token aan het nieuwe proces is toegewezen overeenkomstig het beleid van Gebruikersaccountbeheer. Type 1 is een volledig token waarvoor geen bevoegdheden zijn verwijderd of groepen zijn uitgeschakeld. Een volledig token wordt alleen gebruikt als Gebruikersaccountbeheer is uitgeschakeld of als de gebruiker is aangemeld met de ingebouwde administratoraccount of een serviceaccount. Type 2 is een verhoogd token waarvoor geen bevoegdheden zijn verwijderd of groepen zijn uitgeschakeld. Een verhoogd token wordt gebruikt wanneer Gebruikersaccountbeheer is ingeschakeld en de gebruiker ervoor kiest het programma te starten met: Als administrator uitvoeren. Een verhoogd token wordt ook gebruikt wanneer een toepassing alleen met administratorbevoegdheid of maximale bevoegdheid kan worden uitgevoerd en de gebruiker lid is van de groep Administrators. Type 3 is een beperkt token waarvoor administratorbevoegdheden zijn verwijderd en administratorgroepen zijn uitgeschakeld. Het beperkte token wordt gebruikt wanneer Gebruikersaccountbeheer is ingeschakeld, de toepassing geen administratorbevoegdheid vereist en de gebruiker het programma niet start met: Als administrator uitvoeren. Record Number: 3 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20160813135205.588895-000 Event Type: Controle geslaagd User: Computer Name: kuilman Event Code: 4688 Message: Er is een nieuw proces gemaakt. Onderwerp maker: Beveiligings-id: S-1-5-18 Accountnaam: - Accountdomein: - Aanmeldings-id: 0x3E7 Doelonderwerp: Beveiligings-id: S-1-0-0 Accountnaam: - Accountdomein: - Aanmeldings-id: 0x0 Procesgegevens: Id van nieuw proces: 0x14c Naam van nieuw proces: C:\Windows\System32\smss.exe Type tokenverhoging: %%1936 Verplicht label: S-1-16-16384 Proces-id van maker: 0x4 Procesnaam van maker: Opdrachtregel proces: Type tokenverhoging geeft aan welk type token aan het nieuwe proces is toegewezen overeenkomstig het beleid van Gebruikersaccountbeheer. Type 1 is een volledig token waarvoor geen bevoegdheden zijn verwijderd of groepen zijn uitgeschakeld. Een volledig token wordt alleen gebruikt als Gebruikersaccountbeheer is uitgeschakeld of als de gebruiker is aangemeld met de ingebouwde administratoraccount of een serviceaccount. Type 2 is een verhoogd token waarvoor geen bevoegdheden zijn verwijderd of groepen zijn uitgeschakeld. Een verhoogd token wordt gebruikt wanneer Gebruikersaccountbeheer is ingeschakeld en de gebruiker ervoor kiest het programma te starten met: Als administrator uitvoeren. Een verhoogd token wordt ook gebruikt wanneer een toepassing alleen met administratorbevoegdheid of maximale bevoegdheid kan worden uitgevoerd en de gebruiker lid is van de groep Administrators. Type 3 is een beperkt token waarvoor administratorbevoegdheden zijn verwijderd en administratorgroepen zijn uitgeschakeld. Het beperkte token wordt gebruikt wanneer Gebruikersaccountbeheer is ingeschakeld, de toepassing geen administratorbevoegdheid vereist en de gebruiker het programma niet start met: Als administrator uitvoeren. Record Number: 2 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20160813135205.456034-000 Event Type: Controle geslaagd User: Computer Name: kuilman Event Code: 4826 Message: Boot Configuration Data geladen. Onderwerp: Beveiligings-id: S-1-5-18 Accountnaam: - Accountdomein: - Aanmeldings-id: 0x3E7 Algemene instellingen: Laadopties: - Geavanceerde opties: Nee Configuratietoegangsbeleid: Standaard Systeemgebeurtenislogboek: Nee Kernel-foutopsporing: Nee VSM-starttype: Uit Instellingen voor handtekening: Testondertekening: Nee Flight-ondertekening: Nee Integriteitscontroles uitschakelen: Nee HyperVisor-instellingen: HyperVisor-laadopties: - HyperVisor-starttype: Uit HyperVisor-foutopsporing: Nee Record Number: 1 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20160813135205.403496-000 Event Type: Controle geslaagd User: ======Environment variables====== "ComSpec"=%SystemRoot%\system32\cmd.exe "OS"=Windows_NT "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC "PROCESSOR_ARCHITECTURE"=AMD64 "TEMP"=%SystemRoot%\TEMP "TMP"=%SystemRoot%\TEMP "USERNAME"=SYSTEM "windir"=%SystemRoot% "NUMBER_OF_PROCESSORS"=4 "PROCESSOR_LEVEL"=6 "PROCESSOR_IDENTIFIER"=Intel64 Family 6 Model 69 Stepping 1, GenuineIntel "PROCESSOR_REVISION"=4501 "FP_NO_HOST_CHECK"=NO "Path"=C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\Acer\Remote Files\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\ "PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\ -----------------EOF-----------------