OTL Extras logfile created on: 30/12/2016 10:29:36 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Geert\Desktop
64bit- An unknown product  (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.11.14393.0)
Locale: 00000813 | Country: België | Language: NLB | Date Format: d/MM/yyyy
 
7,90 Gb Total Physical Memory | 5,32 Gb Available Physical Memory | 67,35% Memory free
9,15 Gb Paging File | 6,94 Gb Available in Paging File | 75,89% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 465,27 Gb Total Space | 291,56 Gb Free Space | 62,66% Space Free | Partition Type: NTFS
 
Computer Name: DESKTOP-7B10IMC | User Name: Geert | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== File Associations ==========[/color]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
 
[HKEY_USERS\.DEFAULT\SOFTWARE\Classes\<extension>]
.html [@ = UCHTML] -- "C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1"
 
[HKEY_USERS\S-1-5-18\SOFTWARE\Classes\<extension>]
.html [@ = UCHTML] -- "C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe" -- "%1"
 
[HKEY_USERS\S-1-5-21-3389979238-2971104495-3866065991-1001\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
[color=#E56717]========== Shell Spawning ==========[/color]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- Reg Error: Key error.
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS6\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Powershell] -- powershell.exe -noexit -command Set-Location '%V' (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
htmlfile [opennew] -- Reg Error: Key error.
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS6\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Powershell] -- powershell.exe -noexit -command Set-Location '%V' (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.
 
[color=#E56717]========== Security Center Settings ==========[/color]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = D4 53 22 C1 2F 52 D2 01  [binary data]
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade]
"UpgradeTime" =  [binary data]
"DontEnumerateCommonFilesUpgradeExe" = 1
 
[b]64bit:[/b] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade]
"UpgradeTime" = Reg Error: Unknown registry data type -- File not found
 
[color=#E56717]========== Firewall Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[color=#E56717]========== Authorized Applications List ==========[/color]
 
 
[color=#E56717]========== Vista Active Open Ports Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{945BD811-FB76-4F4E-B555-1B10336C779A}" = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe | 
 
[color=#E56717]========== Vista Active Application Exception List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{033EA132-F940-4F80-AD48-51AE65C13618}" = dir=out | name=@{microsoft.zunevideo_10.16112.10221.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} | 
"{04D77D97-4A47-4922-89F2-E93DFFB51DD4}" = dir=out | name=@{microsoft.oneconnect_1.1607.6.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.oneconnect/oneconnect/appstorename} | 
"{08EC16F0-0D98-42C1-BE9B-B3B09B17B96B}" = dir=out | name=@{microsoft.lockapp_10.0.14393.0_neutral__cw5n1h2txyewy?ms-resource://microsoft.lockapp/resources/appdisplayname} | 
"{099DC698-F3CE-4FC7-91EB-D25520CECDE6}" = dir=in | name=@{microsoft.microsoftedge_38.14393.0.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | 
"{0A76BEA1-A200-4522-A719-46753C37F005}" = dir=in | name=@{microsoft.bingweather_4.18.37.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/applicationtitlewithbranding} | 
"{0F21353D-A57E-4068-BEF5-EA6A1721972C}" = dir=out | name=@{microsoft.windows.contentdeliverymanager_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.contentdeliverymanager/resources/appdisplayname} | 
"{146218DD-FCD2-4990-94C7-BE2FA15DA947}" = dir=in | name=@{microsoft.windows.cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/packagedisplayname} | 
"{16D5BD25-518F-4CA1-9EF2-CA31F58AEC5B}" = dir=out | name=@{microsoft.windows.photos_16.1118.10000.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windows.photos/resources/appstorename} | 
"{178B71DA-798D-45BD-9D23-944A9EFCA1A0}" = dir=out | name=@{microsoft.xboxidentityprovider_11.19.19003.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxidentityprovider/resources/displayname} | 
"{1B386A75-7D04-48EB-903A-80CE3D8809DB}" = dir=out | name=@{microsoft.bingweather_4.18.37.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/applicationtitlewithbranding} | 
"{1CCCFD9F-5B6A-44DD-9A40-A475561A8359}" = dir=out | name=@{microsoft.bingnews_4.18.41.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/applicationtitlewithbranding} | 
"{20E5E3EF-B9B7-4107-836F-E39ED3C29181}" = dir=out | name=minecraft: windows 10 edition | 
"{234B1F13-57C2-404D-8ED7-97CAE96088E5}" = dir=in | name=@{microsoft.oneconnect_1.1607.6.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.oneconnect/oneconnect/appstorename} | 
"{256F6842-D65A-466A-B2DA-51874E4A261A}" = dir=in | name=@{microsoft.windows.cloudexperiencehost_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | 
"{28611A92-C665-4ABE-BC37-E3968086BD12}" = dir=out | name=@{microsoft.windowsfeedbackhub_1.1610.3143.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsfeedbackhub/resources/appstorename} | 
"{2F763259-4F93-47C0-B376-0EF477CD87CD}" = dir=out | name=@{microsoft.zunemusic_10.16112.10211.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} | 
"{352DAEC7-3F3D-4C43-B728-A5FFE9405500}" = dir=out | name=@{microsoft.microsoftofficehub_17.7608.23501.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftofficehub/officehubintl/appmanifest_getoffice_displayname} | 
"{367BEC9A-2C6B-41A0-A94C-FFF5DD256B12}" = protocol=6 | dir=in | app=c:\users\geert\appdata\roaming\utorrent\utorrent.exe | 
"{37774737-27E8-40E8-BB4D-4244DAB3B836}" = dir=out | name=@{microsoft.windows.cortana_1.7.0.14393_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/packagedisplayname} | 
"{38D32E73-0831-4625-9C28-37B6A8443122}" = dir=out | name=@{microsoft.skypeapp_11.10.145.0_x64__kzf8qxf38zg5c?ms-resource://microsoft.skypeapp/resources/skypevideo_productname} | 
"{38EABE1B-E90D-4C56-8337-1E7A0D35923D}" = dir=out | name=@{microsoft.ppiprojection_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | 
"{3B1A1624-6B43-4FAF-B8E6-67A50388552F}" = dir=in | name=onenote | 
"{3D3DF441-69CC-488F-95A3-C2B71C88AB7A}" = dir=out | name=@{microsoft.windows.cloudexperiencehost_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | 
"{3E376B20-4F41-4391-9150-9E4D268B87EA}" = dir=in | name=@{microsoft.windowsfeedbackhub_1.1610.3143.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsfeedbackhub/resources/appstorename} | 
"{411B7814-ADF1-48CC-B2D8-B8030C67F836}" = protocol=17 | dir=in | app=c:\users\geert\appdata\roaming\utorrent\utorrent.exe | 
"{4605436D-BFAC-4180-9788-E4AA56836EF4}" = dir=out | name=netflix | 
"{461E1C01-3849-4628-950A-C48EF3E1AA0B}" = dir=out | name=@{microsoft.accountscontrol_10.0.14393.576_neutral__cw5n1h2txyewy?ms-resource://microsoft.accountscontrol/resources/displayname} | 
"{4EF77E77-45A4-4444-8B64-DEBF98E64E3C}" = dir=in | name=minecraft: windows 10 edition | 
"{52A32440-236A-4C3A-A279-9A9386ABD86D}" = dir=out | name=@{microsoft.windowsmaps_5.1611.3342.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsmaps/resources/appstorename} | 
"{5848A4E7-61B5-431E-99A3-44A9AB603B1A}" = dir=in | name=xbox | 
"{5A5691E1-B46E-4290-98EA-30A8BF3BC60F}" = dir=in | name=@{microsoft.zunemusic_10.16112.10211.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} | 
"{5B97DB26-18C5-49BD-8967-036C39F8D224}" = dir=out | name=@{microsoft.windows.parentalcontrols_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.parentalcontrols/resources/displayname} | 
"{5C21D43E-CA3B-4F60-BADC-2D343AC45A5F}" = dir=in | name=@{microsoft.windowsstore_11610.1001.23.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsstore/resources/storetitle} | 
"{5DF2BB6E-43A4-43E3-915A-BB33BBFCF5E1}" = dir=in | name=@{microsoft.zunevideo_10.16112.10221.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} | 
"{5EBB04E5-72B1-4880-ADB7-33719F251D6A}" = dir=out | name=@{microsoft.windows.cloudexperiencehost_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | 
"{5F5B8CD0-D47A-4E80-A9A5-BD6EC6B32740}" = dir=out | name=@{microsoft.windows.shellexperiencehost_10.0.14393.576_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.shellexperiencehost/resources/pkgdisplayname} | 
"{60B4F9B5-DB21-4FE4-BEBD-E8AB6B43D513}" = dir=out | name=@{microsoft.windows.apprep.chxapp_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.apprep.chxapp/resources/displayname} | 
"{664D6207-2B23-4AE1-AD48-904E2D0FA12B}" = dir=out | name=@{microsoft.3dbuilder_12.0.3131.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.3dbuilder/resources/appstorename} | 
"{670517FD-FE84-48E6-821C-CF768EF12569}" = dir=in | name=@{microsoft.bingnews_4.18.41.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/applicationtitlewithbranding} | 
"{6911119E-125E-488A-9738-3737E9595016}" = dir=in | name=@{microsoft.microsoftofficehub_17.7608.23501.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftofficehub/officehubintl/appmanifest_getoffice_displayname} | 
"{6C6D4DB1-D36E-449A-874D-6B6B22A030D6}" = protocol=17 | dir=in | app=c:\users\geert\appdata\roaming\utorrent\utorrent.exe | 
"{6C96F443-BEAD-4DF9-A364-5F303D55D5BF}" = dir=out | name=@{microsoft.microsoftedge_38.14393.0.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | 
"{7263FB25-9794-4B6B-8CB7-5F400EA1CA4D}" = dir=out | name=@{microsoft.messaging_3.19.1001.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.messaging/resources/appstorename} | 
"{7761DCE8-AAB8-4743-92E0-1EA4584C8CE5}" = dir=out | name=onenote | 
"{804EF7B8-E4A1-41C6-B6A5-842D1BFCFE7D}" = dir=out | name=xbox | 
"{8414B9DF-3F0F-408B-B586-EC662B130309}" = dir=out | name=store purchase app | 
"{87F520BE-BD5B-4F93-967D-928DC4C9E8BD}" = dir=in | name=@{microsoft.ppiprojection_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | 
"{8CB9A893-25EB-4D77-9B71-B83D00F0C173}" = dir=out | name=@{microsoft.people_10.1.3160.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.people/resources/appstorename} | 
"{8F17ABEC-153F-4C56-8F2D-FFC5EEA5E0F5}" = dir=in | name=microsoft sticky notes | 
"{912CC841-4F68-4B5F-89DA-0DF0A997E332}" = protocol=6 | dir=in | app=c:\users\geert\appdata\roaming\utorrent\utorrent.exe | 
"{93448E00-3C96-41D7-9029-D3DB4B149AE4}" = dir=in | name=@{microsoft.windows.photos_16.1118.10000.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windows.photos/resources/appstorename} | 
"{9446EEF8-BB54-453A-A5AB-4CC9024DEDAC}" = dir=out | name=@{microsoft.ppiprojection_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | 
"{97D4C3F0-0811-4819-A7AD-E3926E73716B}" = dir=in | name=netflix | 
"{A30C1CD2-2707-4740-8280-412FFCA3DC82}" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe | 
"{A6810636-8F3A-4B33-853A-3D1667826C53}" = dir=out | name=twitter | 
"{AE98D6E4-C694-49CA-A565-11CBE5C721E0}" = protocol=17 | dir=out | app=c:\users\geert\appdata\roaming\utorrent\utorrent.exe | 
"{B2740E45-A116-49C9-ABE2-3430743689D8}" = dir=out | name=@{microsoft.aad.brokerplugin_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | 
"{B3D42067-55C8-4CE6-88FC-854394A6234E}" = dir=out | name=@{windows.contactsupport_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.contactsupport/resources/appdisplayname} | 
"{B5352D99-50EB-4460-BC59-D16F59345573}" = dir=in | name=@{microsoft.windowscommunicationsapps_17.7714.42037.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/hxoutlookintl/appmanifest_outlookdesktop_displayname} | 
"{C3B33893-94FA-469F-92CD-6CB431EE2E5D}" = dir=in | name=@{microsoft.skypeapp_11.10.145.0_x64__kzf8qxf38zg5c?ms-resource://microsoft.skypeapp/resources/skypevideo_productname} | 
"{C7CB5D82-459F-4386-BB82-149D827F33AC}" = dir=out | name=microsoft sticky notes | 
"{C8E61474-0DB5-4BD7-8451-35BFD5BAB517}" = dir=out | name=@{microsoft.windowsstore_11610.1001.23.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsstore/resources/storetitle} | 
"{CFDD7B25-6535-4981-8A66-251A6E62B585}" = dir=out | name=facebook | 
"{D02594E2-AF15-4D34-836B-D9285A4C6E5F}" = dir=in | name=@{microsoft.windows.cloudexperiencehost_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | 
"{D61A7863-E8BF-4680-8A51-6A0FAF2D63F3}" = dir=in | name=@{windows.contactsupport_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.contactsupport/resources/appdisplayname} | 
"{D6C473CC-5CF5-4095-B867-5329C8B15EE4}" = dir=out | name=@{microsoft.xboxgamecallableui_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.xboxgamecallableui/resources/pkgdisplayname} | 
"{DF2F093B-7F1C-4E67-BF94-348FEC193E57}" = dir=in | name=@{microsoft.aad.brokerplugin_1000.14393.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | 
"{E04B1597-A5E9-49CB-B6D2-344DCD186786}" = dir=in | name=@{microsoft.ppiprojection_10.0.14393.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.ppiprojection/resources/productname} | 
"{E253B0B6-F1A4-4716-B02D-6B0B0ACA03FA}" = dir=in | name=@{microsoft.messaging_3.19.1001.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.messaging/resources/appstorename} | 
"{EF6359A5-659B-4EBE-965D-8A59093B7165}" = protocol=6 | dir=out | app=c:\users\geert\appdata\roaming\utorrent\utorrent.exe | 
"{F3C75FE1-8CAD-4258-BEF7-4E58873DCE68}" = dir=out | name=@{microsoft.windowscommunicationsapps_17.7714.42037.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/hxoutlookintl/appmanifest_outlookdesktop_displayname} | 
"{F81516FF-0CE8-4408-8E8D-F02D348B9376}" = dir=out | name=microsoft solitaire collection | 
"{FA4B522E-66BA-4914-A566-0F1C74442E05}" = dir=out | name=@{microsoft.getstarted_4.2.29.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.getstarted/resources/appstorename} | 
"{FD1C6DF7-09B1-4955-8D7B-34568A04827A}" = dir=in | name=microsoft solitaire collection | 
"TCP Query User{B5C004E5-8620-4778-B51F-E626FB9A2A79}C:\users\geert\appdata\local\popcorn-time\popcorn-time.exe" = protocol=6 | dir=in | app=c:\users\geert\appdata\local\popcorn-time\popcorn-time.exe | 
"UDP Query User{63527A0C-EBE6-4270-A801-E24C87784BA0}C:\users\geert\appdata\local\popcorn-time\popcorn-time.exe" = protocol=17 | dir=in | app=c:\users\geert\appdata\local\popcorn-time\popcorn-time.exe | 
 
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219
"{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1" = Malwarebytes versie 3.0.4.1269
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware
"CCleaner" = CCleaner
"Elantech" = ELAN Touchpad driver X64 15.7.9.2_WHQL
"WinRAR archiver" = WinRAR 5.40 (64-bit)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0579179A-9E50-34B0-9957-A02A288A2F10}" = Google Chrome
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{099218A5-A723-43DC-8DB5-6173656A1E94}" = Dropbox Update Helper
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}" = Google Update Helper
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{AC76BA86-0804-1033-1959-001824205020}" = Adobe Refresh Manager
"{AC76BA86-1040-7D70-7760-000000000005}" = Adobe Acrobat X Pro - Italiano, Español, Nederlands, Português
"{AC76BA86-7AD7-1043-7B44-AC0F074E4100}" = Adobe Acrobat Reader DC - Nederlands
"{AF37176A-78CA-545B-34EF-8B6A21514DD1}" = Adobe Help Manager
"{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}" = PDF Settings CS6
"{E8AD3069-9EB7-4BA8-8BFE-83F4E69355C0}" = Adobe Creative Suite 6 Master Collection
"{EFBE6DD5-B224-96E5-72B9-68D328CB12A6}" = Adobe Widget Browser
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{FE23D063-934D-4829-A0D8-00634CE79B4A}" = Adobe AIR
"Adobe AIR" = Adobe AIR
"Adobe Flash Player NPAPI" = Adobe Flash Player 24 NPAPI
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Help Manager
"com.adobe.WidgetBrowser" = Adobe Widget Browser
"Dropbox" = Dropbox
"Mozilla Firefox 50.1.0 (x86 en-US)" = Mozilla Firefox 50.1.0 (x86 en-US)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"XnView_is1" = XnView 2.39
 
[color=#E56717]========== HKEY_USERS Uninstall List ==========[/color]
 
[HKEY_USERS\S-1-5-21-3389979238-2971104495-3866065991-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{C16DFB31-4A09-474E-AF61-02AFB3008763}_is1" = Albelli.be Fotoboeken
"OneDriveSetup.exe" = Microsoft OneDrive
"uTorrent" = µTorrent
 
[color=#E56717]========== Last 20 Event Log Errors ==========[/color]
 
[ Application Events ]
Error - 28/12/2016 8:21:15 | Computer Name = DESKTOP-7B10IMC | Source = DbxSvc | ID = 131392
Description = Failed to connect to the driver: (-2147024894) Het systeem kan het
 opgegeven bestand niet vinden. 
 
Error - 28/12/2016 14:03:54 | Computer Name = DESKTOP-7B10IMC | Source = Application Hang | ID = 1002
Description = Het programma explorer.exe, versie 10.0.14393.479 reageert niet meer
 op Windows en is afgesloten. Als u wilt zien of er meer informatie over het probleem
 beschikbaar is, raadpleegt u de probleemgeschiedenis in het onderdeel Beveiliging
 en onderhoud van het Configuratiescherm.    Proces-id: d34    Starttijd: 01d26104e405a8db

Eindtijd:
 4294967295    Toepassingspad: C:\Windows\explorer.exe    Rapport-id: fad5db0f-cd27-11e6-bd36-88532e90fffa

Volledige
 pakketnaam met fout:     Relatieve toepassings-id van pakket met fout:   
 
Error - 28/12/2016 14:03:54 | Computer Name = DESKTOP-7B10IMC | Source = Microsoft-Windows-Immersive-Shell | ID = 5973
Description = Het activeren van de app Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!App
 is mislukt door de fout -2144927141. Kijk in het logboek Microsoft-Windows-TWinUI/Operational
 voor aanvullende informatie.
 
Error - 28/12/2016 14:05:54 | Computer Name = DESKTOP-7B10IMC | Source = Microsoft-Windows-Immersive-Shell | ID = 5973
Description = Het activeren van de app Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!App
 is mislukt door de fout -2144927142. Kijk in het logboek Microsoft-Windows-TWinUI/Operational
 voor aanvullende informatie.
 
Error - 28/12/2016 14:05:54 | Computer Name = DESKTOP-7B10IMC | Source = Microsoft-Windows-Immersive-Shell | ID = 5973
Description = Het activeren van de app Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!App
 is mislukt door de fout -2144927142. Kijk in het logboek Microsoft-Windows-TWinUI/Operational
 voor aanvullende informatie.
 
Error - 28/12/2016 14:08:25 | Computer Name = DESKTOP-7B10IMC | Source = DbxSvc | ID = 131392
Description = Failed to connect to the driver: (-2147024894) Het systeem kan het
 opgegeven bestand niet vinden. 
 
Error - 28/12/2016 14:11:57 | Computer Name = DESKTOP-7B10IMC | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = De service Cryptografische services is mislukt tijdens het verwerken
 van aanroep OnIdentity() op het object System Writer.  Details: AddLegacyDriverFiles:
 Unable to back up image of binary Microsoft Link-Layer Discovery Protocol.  System
 Error: Toegang geweigerd.  .
 
Error - 29/12/2016 8:00:54 | Computer Name = DESKTOP-7B10IMC | Source = .NET Runtime | ID = 1026
Description = 
 
Error - 29/12/2016 8:00:54 | Computer Name = DESKTOP-7B10IMC | Source = Application Error | ID = 1000
Description = Naam van toepassing met fout: DaS_21.exe, versie: 2.1.0.4, tijdstempel:
 0x540c90b2  Naam van module met fout: KERNELBASE.dll, versie: 10.0.14393.479, tijdstempel:
 0x582588e6  Uitzonderingscode: 0xe0434352  Foutmarge: 0x0000000000017788  Id van proces
 met fout: 0x1448  Starttijd van toepassing met fout: 0x01d261cb353df8da  Pad naar toepassing
 met fout: C:\Users\Geert\AppData\Local\Temp\DaS_21.exe  Pad naar module met fout:
 C:\Windows\System32\KERNELBASE.dll  Rapport-id: d7bbba76-e311-41c3-b473-2f80793b3920
Volledige
 pakketnaam met fout:   Relatieve toepassings-id van pakket met fout: 
 
Error - 29/12/2016 8:12:46 | Computer Name = DESKTOP-7B10IMC | Source = DbxSvc | ID = 131392
Description = Failed to connect to the driver: (-2147024894) Het systeem kan het
 opgegeven bestand niet vinden. 
 
Error - 30/12/2016 5:04:26 | Computer Name = DESKTOP-7B10IMC | Source = DbxSvc | ID = 131392
Description = Failed to connect to the driver: (-2147024894) Het systeem kan het
 opgegeven bestand niet vinden. 
 
[ System Events ]
Error - 30/12/2016 5:00:15 | Computer Name = DESKTOP-7B10IMC | Source = Service Control Manager | ID = 7030
Description = De PEVSystemStart-service staat aangeduid als een interactieve service.
 Het systeem is echter zodanig geconfigureerd dat interactieve services niet zijn
 toegestaan. Deze service werkt mogelijk niet juist.
 
Error - 30/12/2016 5:00:16 | Computer Name = DESKTOP-7B10IMC | Source = Service Control Manager | ID = 7030
Description = De PEVSystemStart-service staat aangeduid als een interactieve service.
 Het systeem is echter zodanig geconfigureerd dat interactieve services niet zijn
 toegestaan. Deze service werkt mogelijk niet juist.
 
Error - 30/12/2016 5:00:16 | Computer Name = DESKTOP-7B10IMC | Source = Service Control Manager | ID = 7030
Description = De PEVSystemStart-service staat aangeduid als een interactieve service.
 Het systeem is echter zodanig geconfigureerd dat interactieve services niet zijn
 toegestaan. Deze service werkt mogelijk niet juist.
 
Error - 30/12/2016 5:00:17 | Computer Name = DESKTOP-7B10IMC | Source = Service Control Manager | ID = 7030
Description = De PEVSystemStart-service staat aangeduid als een interactieve service.
 Het systeem is echter zodanig geconfigureerd dat interactieve services niet zijn
 toegestaan. Deze service werkt mogelijk niet juist.
 
Error - 30/12/2016 5:00:17 | Computer Name = DESKTOP-7B10IMC | Source = Service Control Manager | ID = 7030
Description = De PEVSystemStart-service staat aangeduid als een interactieve service.
 Het systeem is echter zodanig geconfigureerd dat interactieve services niet zijn
 toegestaan. Deze service werkt mogelijk niet juist.
 
Error - 30/12/2016 5:00:18 | Computer Name = DESKTOP-7B10IMC | Source = Service Control Manager | ID = 7030
Description = De PEVSystemStart-service staat aangeduid als een interactieve service.
 Het systeem is echter zodanig geconfigureerd dat interactieve services niet zijn
 toegestaan. Deze service werkt mogelijk niet juist.
 
Error - 30/12/2016 5:00:19 | Computer Name = DESKTOP-7B10IMC | Source = Service Control Manager | ID = 7030
Description = De PEVSystemStart-service staat aangeduid als een interactieve service.
 Het systeem is echter zodanig geconfigureerd dat interactieve services niet zijn
 toegestaan. Deze service werkt mogelijk niet juist.
 
Error - 30/12/2016 5:04:28 | Computer Name = DESKTOP-7B10IMC | Source = DCOM | ID = 10016
Description = 
 
Error - 30/12/2016 5:04:29 | Computer Name = DESKTOP-7B10IMC | Source = DCOM | ID = 10016
Description = 
 
Error - 30/12/2016 5:04:29 | Computer Name = DESKTOP-7B10IMC | Source = DCOM | ID = 10016
Description = 
 
 
< End of report >