Scanresultaten van Farbar Recovery Scan Tool (FRST) (x64) Versie:04-10-2015
Gestart door Gijs (Beheerder) op PC-GIJS (31-01-2017 20:45:14)
Gestart vanaf C:\Users\Gijs\Downloads
Geladen Profielen: Gijs (Beschikbare Profielen: Gijs)
Platform: Windows 7 Professional Service Pack 1 (X64) Taal: Nederlands (Nederland)
Internet Explorer Versie 11 (Standaardbrowser: IE)
Boot Modus: Normal
Handleiding voor Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processen (gefilterd) =================

(Als een item is opgenomen in de fixlist, het proces zal worden gesloten. Het bestand zal niet worden verplaatst.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Dassault Systèmes) C:\Program Files\Dassault Systemes\DraftSight\bin\dsHttpApiService.exe
() C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe
() C:\Program Files (x86)\FreeStyle Libre\MAS.FreeStyleLibre.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\mdm.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
() C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
() C:\Program Files (x86)\FreeStyle Libre\MASLaunchClient.FreeStyleLibre.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil64_24_0_0_194_ActiveX.exe


==================== Register (gefilterd) ===========================

(Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.)

HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2780112 2017-01-20] (Malwarebytes)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2016-11-20] (AVAST Software)
HKLM-x32\...\Run: [FreeStyleLibreautorunexe] => C:\Program Files (x86)\FreeStyle Libre\MASLaunchClient.FreeStyleLibre.exe [81408 2016-01-19] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation)
HKU\S-1-5-21-2815762633-2277775970-95083782-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9292504 2016-12-21] (Piriform Ltd)
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2013-05-20] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-08-22] (AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk [2017-01-06]
ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
BootExecute: autocheck autochk * bootdeletebootdelete

==================== Internet (gefilterd) ====================

(Als een item is opgenomen in de fixlist, als het een registry item is wordt verwijderd of hersteld naar de standaard.)

Tcpip\Parameters: [DhcpNameServer] 84.116.46.21 84.116.46.20
Tcpip\..\Interfaces\{00E9AB66-7565-4811-8AE0-5F29246AF025}: [DhcpNameServer] 84.116.46.21 84.116.46.20

Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKU\S-1-5-21-2815762633-2277775970-95083782-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://nl.msn.com/?ocid=iehp
SearchScopes: HKLM -> {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL = 
SearchScopes: HKU\S-1-5-21-2815762633-2277775970-95083782-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2815762633-2277775970-95083782-1000 -> {2E00D31D-D171-423D-836D-1A4D7EA7F1A9} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2815762633-2277775970-95083782-1000 -> {B3B3A6AC-74EC-BD56-BCDB-EFA4799FB9DF} URL = hxxps://www.amazon.com/gp/bit/amazonserp/ref=bit_bds-p17_serp_ie_us_display?ie=UTF8&tagbase=bds-p17&tbrId=v1_abb-channel-17_2cbbab8c_1201_1403_20170119_NL_ie_ds_&tag=bds-p17-serp-us-ie-20&query={searchTerms}
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll [2014-01-24] (CANON INC.)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-11-20] (AVAST Software)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2014-01-24] (CANON INC.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\ssv.dll [2017-01-19] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-11-20] (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-01-19] (Oracle Corporation)
Toolbar: HKLM - Geen Naam - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  Geen bestand
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll [2014-01-24] (CANON INC.)
Toolbar: HKLM - Geen Naam - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  Geen bestand
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2014-01-24] (CANON INC.)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Gijs\AppData\Roaming\Mozilla\Firefox\Profiles\nxm7cia7.default
FF Plugin: @microsoft.com/GENUINE -> disabled [Geen bestand]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-01-19] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-01-19] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Geen bestand]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-12-17] (Adobe Systems Inc.)
FF user.js: detected! => C:\Users\Gijs\AppData\Roaming\Mozilla\Firefox\Profiles\nxm7cia7.default\user.js [2014-10-22]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: Avast SafePrice - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-08-22]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-05-20]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: Geen Naam - C:\Users\Gijs\AppData\Roaming\Mozilla\Firefox\Profiles\nxm7cia7.default\extensions\a9719e64-232b-4695-ae9c-a89cd7f2aa84@ca1279df-bc0d-44a8-97ef-19301c922b68.com [niet gevonden]

Chrome: 
=======
CHR HomePage: Default -> hxxp://astromenda.com/?f=1&a=ast_wnzp01_14_43_ie&cd=2XzuyEtN2Y1L1QzutDtDtBtByCzzyCyDyEzytD0CyDyEtCzztN0D0Tzu0StCtDtByCtN1L2XzutAtFyDtFtCtFyEtN1L1CzutCyEtBzytDyD1V1RtN1L1G1B1V1N2Y1L1Qzu2StCtAyBzy0AyCzy0AtGyEzztAyBtGtAtA0CyEtGzzzz0D0FtGtDtD0EyD0FtAzztDzy0Fzy0F2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0DtA0Azy0D0BzztAtG0DyB0EyBtGyEtCzzyBtGzy0FyEtDtG0C0F0CyE0AtDyCyEzy0Fzy0F2Q&cr=1153708475&ir=
CHR StartupUrls: Default -> "hxxp://www.google.com/","hxxp://www.msn.com/?pc=AV01"
CHR DefaultSearchKeyword: Default -> google.nl_
CHR Profile: C:\Users\Gijs\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Documenten) - C:\Users\Gijs\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-05-30]
CHR Extension: (Google Drive) - C:\Users\Gijs\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-05-30]
CHR Extension: (YouTube) - C:\Users\Gijs\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-05-30]
CHR Extension: (Google Search) - C:\Users\Gijs\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-05-30]
CHR Extension: (Offline Documenten) - C:\Users\Gijs\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-02-18]
CHR Extension: (Avast Online Security) - C:\Users\Gijs\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-07-23]
CHR Extension: (Betalingen via Chrome Web Store) - C:\Users\Gijs\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-17]
CHR Extension: (Gmail) - C:\Users\Gijs\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-05-30]
CHR Extension: (Chrome Media Router) - C:\Users\Gijs\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-01-22]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <niet gevonden>

==================== Services (gefilterd) ========================

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-08-22] (AVAST Software)
R2 DraftSight API Service; C:\Program Files\Dassault Systemes\DraftSight\bin\dsHttpApiService.exe [123392 2013-08-30] (Dassault Systèmes) [Bestand niet getekend]
R2 ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [626208 2009-08-10] ()
R2 FreeStyleLibre MAS Server; C:\Program Files (x86)\FreeStyle Libre\MAS.FreeStyleLibre.exe [285184 2016-01-19] () [Bestand niet getekend]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4355024 2017-01-20] (Malwarebytes)
R2 MDM; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [Bestand niet getekend]
R2 nSvcIp; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [206880 2009-08-10] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Drivers (gefilterd) ==========================

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

S3 aswHdsKe; C:\Windows\system32\drivers\aswHdsKe.sys [83312 2016-09-12] (AVAST Software)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-08-22] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-08-22] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-08-22] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-08-22] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-08-22] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969184 2016-11-20] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513632 2016-11-20] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-08-22] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [293352 2016-11-20] (AVAST Software)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77416 2017-01-20] ()
R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [176584 2017-01-30] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\system32\drivers\farflt.sys [110536 2017-01-31] (Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [43968 2017-01-31] (Malwarebytes)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [251848 2017-01-31] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [81696 2017-01-31] (Malwarebytes)
R0 nvamacpi; C:\Windows\System32\DRIVERS\NVAMACPI.sys [28192 2009-07-17] (NVIDIA Corporation)
R0 nvrd64; C:\Windows\System32\DRIVERS\nvrd64.sys [175648 2009-08-04] (NVIDIA Corporation)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2012-12-13] (Apple, Inc.) [Bestand niet getekend]
R3 WinDriver6; C:\Windows\System32\drivers\windrvr6.sys [254464 2014-05-04] (Jungo)

==================== NetSvcs (gefilterd) ===================

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)


==================== Een Maand Aangemaakt bestanden en mappen ========

(Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)

2017-01-31 20:45 - 2017-01-31 20:45 - 00014205 _____ C:\Users\Gijs\Downloads\FRST.txt
2017-01-31 20:44 - 2017-01-31 20:45 - 00000000 ____D C:\FRST
2017-01-31 20:43 - 2017-01-31 20:43 - 02193920 _____ (Farbar) C:\Users\Gijs\Downloads\FRST64.exe
2017-01-30 22:27 - 2017-01-31 20:27 - 00081696 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-01-30 22:18 - 2017-01-31 20:23 - 00110536 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-01-30 22:18 - 2017-01-31 20:23 - 00043968 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-01-30 22:18 - 2017-01-30 22:18 - 00176584 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2017-01-30 22:17 - 2017-01-31 20:23 - 00251848 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-01-30 22:17 - 2017-01-30 22:17 - 55566792 _____ (Malwarebytes ) C:\Users\Gijs\Downloads\mb3-setup-consumer-3.0.6.1469.exe
2017-01-30 22:17 - 2017-01-30 22:17 - 00001827 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-01-30 22:17 - 2017-01-30 22:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-01-30 22:17 - 2017-01-30 22:17 - 00000000 ____D C:\Program Files\Malwarebytes
2017-01-30 22:17 - 2017-01-20 07:47 - 00077416 _____ C:\Windows\system32\Drivers\mbae64.sys
2017-01-30 22:11 - 2017-01-30 22:11 - 00003116 _____ C:\Windows\System32\Tasks\{53A29DBE-E652-41F0-9E04-26357898AC50}
2017-01-30 22:10 - 2017-01-30 22:11 - 00007780 _____ C:\Users\Gijs\Desktop\hijackthis.log
2017-01-30 22:09 - 2017-01-30 22:10 - 00388608 _____ (Trend Micro Inc.) C:\Users\Gijs\Downloads\HijackThis.exe
2017-01-24 22:02 - 2017-01-24 22:02 - 01222144 _____ C:\Users\Gijs\Desktop\RSITx64.exe
2017-01-24 17:55 - 2017-01-31 20:22 - 00000504 _____ C:\Windows\setupact.log
2017-01-24 17:55 - 2017-01-24 17:55 - 00002612 _____ C:\Windows\PFRO.log
2017-01-24 17:55 - 2017-01-24 17:55 - 00000000 _____ C:\Windows\setuperr.log
2017-01-23 21:40 - 2017-01-23 21:44 - 00000000 ____D C:\Users\Gijs\Documents\Fiets marktplaats
2017-01-23 21:19 - 2017-01-23 21:19 - 00085152 _____ C:\Users\Gijs\Documents\cc_20170123_211935.reg
2017-01-23 20:36 - 2017-01-23 20:36 - 00000000 ____D C:\Users\Gijs\AppData\Local\Apps\2.0
2017-01-21 22:42 - 2017-01-21 22:42 - 00001223 _____ C:\AdwCleaner[R6].txt
2017-01-19 22:05 - 2017-01-21 23:57 - 00000000 ____D C:\Program Files (x86)\Amazon
2017-01-19 17:44 - 2017-01-22 21:31 - 00000000 ____D C:\Users\Gijs\Documents\Free Style Libre uitslagen
2017-01-06 23:24 - 2017-01-06 23:25 - 00000000 ____D C:\TEMP
2017-01-06 23:24 - 2017-01-06 23:24 - 00000000 ____D C:\Users\Gijs\AppData\Roaming\Corel
2017-01-06 23:20 - 2017-01-06 23:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CorelDRAW 8
2017-01-06 23:20 - 1998-01-14 14:39 - 00211456 ____N (Apple Computer, Inc.) C:\Windows\SysWOW64\qd3d_ir2.q3x
2017-01-06 23:20 - 1997-12-15 11:20 - 00410624 ____N (Corel Corporation) C:\Windows\SysWOW64\scint78.dll
2017-01-06 23:20 - 1997-12-15 11:20 - 00071680 ____N (Apple Computer, Inc.) C:\Windows\SysWOW64\3dviewer.dll
2017-01-06 23:20 - 1997-12-15 11:19 - 00909312 ____N (Apple Computer Inc.) C:\Windows\SysWOW64\qd3d.dll
2017-01-06 23:20 - 1997-07-30 19:21 - 00553984 ____N (Apple Computer, Inc.) C:\Windows\SysWOW64\rave.dll
2017-01-06 23:20 - 1997-06-03 08:31 - 00108032 ____N C:\Windows\SysWOW64\sh33w32.dll
2017-01-06 23:19 - 2017-01-06 23:19 - 00000000 ____D C:\Corel
2017-01-06 23:19 - 1997-01-23 03:26 - 00565760 ____N (Microsoft Corporation) C:\Windows\SysWOW64\msvcp50.dll
2017-01-06 21:45 - 2017-01-06 23:20 - 00000000 ____D C:\Windows\Corel
2017-01-06 21:40 - 2017-01-06 21:40 - 00000000 ____D C:\Windows\SysWOW64\Adobe
2017-01-06 21:40 - 2001-10-26 23:16 - 00016384 _____ C:\Windows\SysWOW64\FileOps.exe
2017-01-06 21:39 - 2017-01-06 21:41 - 00002571 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Illustrator 10.lnk

==================== Een Maand Gewijzigd bestanden en mappen ========

(Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)

2017-01-31 20:38 - 2016-11-12 18:29 - 00000000 ____D C:\Users\Gijs\Documents\Excel
2017-01-31 20:38 - 2009-07-14 05:45 - 00026384 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-01-31 20:38 - 2009-07-14 05:45 - 00026384 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-01-31 20:31 - 2013-05-20 14:06 - 00003950 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{114DE0CA-A0B5-49F6-95B5-8040E38FDF28}
2017-01-31 20:27 - 2009-07-14 10:16 - 00745764 _____ C:\Windows\system32\perfh013.dat
2017-01-31 20:27 - 2009-07-14 10:16 - 00153716 _____ C:\Windows\system32\perfc013.dat
2017-01-31 20:27 - 2009-07-14 06:13 - 01670960 _____ C:\Windows\system32\PerfStringBackup.INI
2017-01-31 20:26 - 2013-05-20 13:56 - 02026448 _____ C:\Windows\WindowsUpdate.log
2017-01-31 20:22 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-01-30 22:17 - 2013-11-23 21:02 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-01-30 22:15 - 2013-11-28 22:14 - 00000000 ____D C:\Program Files\trend micro
2017-01-30 22:06 - 2013-10-19 16:57 - 00000940 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2017-01-24 17:55 - 2014-12-06 23:32 - 00000000 ____D C:\Program Files\Google
2017-01-24 17:55 - 2013-05-30 20:02 - 00000000 ____D C:\Program Files (x86)\Google
2017-01-23 20:31 - 2014-12-06 23:31 - 00000000 ____D C:\ProgramData\Google
2017-01-23 20:31 - 2013-05-30 20:02 - 00000000 ____D C:\Users\Gijs\AppData\Local\Google
2017-01-20 22:24 - 2013-11-22 21:31 - 00000782 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-01-19 22:04 - 2014-12-06 23:06 - 00000000 ____D C:\ProgramData\Oracle
2017-01-19 22:03 - 2016-09-15 13:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-01-19 22:03 - 2013-10-15 15:13 - 00000000 ____D C:\Program Files (x86)\Java
2017-01-19 22:02 - 2016-09-15 13:51 - 00097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2017-01-16 21:28 - 2013-05-20 23:20 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2017-01-16 17:32 - 2014-12-24 17:33 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-01-10 22:06 - 2013-10-19 16:57 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-01-10 22:06 - 2013-10-19 16:57 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-01-10 22:06 - 2013-10-19 16:57 - 00003878 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-01-10 22:06 - 2013-10-19 16:56 - 00000000 ____D C:\Windows\system32\Macromed
2017-01-10 22:06 - 2013-08-28 12:51 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2017-01-07 19:07 - 2013-05-20 18:49 - 00109688 _____ C:\Users\Gijs\AppData\Local\GDIPFONTCACHEV1.DAT
2017-01-06 23:22 - 2009-07-14 05:45 - 00411600 _____ C:\Windows\system32\FNTCACHE.DAT
2017-01-06 21:41 - 2013-05-20 16:47 - 00000000 ____D C:\Users\Gijs\AppData\Roaming\Adobe
2017-01-06 21:41 - 2013-05-20 14:01 - 00000000 ____D C:\Users\Gijs\AppData\Local\VirtualStore
2017-01-06 21:39 - 2013-05-20 23:20 - 00000000 ____D C:\Program Files (x86)\Adobe
2017-01-06 21:39 - 2013-05-20 18:47 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

==================== Bestanden in de root van sommige mappen =======

2014-11-12 20:57 - 2014-11-12 20:57 - 0000000 _____ () C:\Program Files (x86)\GUT15C2.tmp
2014-04-13 16:52 - 2014-04-13 16:53 - 0004608 _____ () C:\Users\Gijs\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-05-20 19:46 - 2013-05-20 19:47 - 0009346 _____ () C:\Users\Gijs\AppData\Local\HWVendorDetection.log
2015-10-21 18:43 - 2015-10-21 18:43 - 0000017 _____ () C:\Users\Gijs\AppData\Local\resmon.resmoncfg

==================== Bamital & volsnap =================

(Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.)

C:\Windows\system32\winlogon.exe => Bestand is getekend
C:\Windows\system32\wininit.exe => Bestand is getekend
C:\Windows\SysWOW64\wininit.exe => Bestand is getekend
C:\Windows\explorer.exe => Bestand is getekend
C:\Windows\SysWOW64\explorer.exe => Bestand is getekend
C:\Windows\system32\svchost.exe => Bestand is getekend
C:\Windows\SysWOW64\svchost.exe => Bestand is getekend
C:\Windows\system32\services.exe => Bestand is getekend
C:\Windows\system32\User32.dll => Bestand is getekend
C:\Windows\SysWOW64\User32.dll => Bestand is getekend
C:\Windows\system32\userinit.exe => Bestand is getekend
C:\Windows\SysWOW64\userinit.exe => Bestand is getekend
C:\Windows\system32\rpcss.dll => Bestand is getekend
C:\Windows\system32\dnsapi.dll => Bestand is getekend
C:\Windows\SysWOW64\dnsapi.dll => Bestand is getekend
C:\Windows\system32\Drivers\volsnap.sys => Bestand is getekend


LastRegBack: 2016-02-28 11:21

==================== Eind van FRST.txt ============================