Extra scanresultaten van Farbar Recovery Scan Tool (x64) Versie: 27-02-2017 01 Gestart door toshiba (28-02-2017 17:32:08) Gestart vanaf C:\Users\toshiba\Desktop Windows 10 Home Versie 1607 (X64) (2016-09-15 07:04:31) Boot Modus: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-1573529791-4049238610-3989334239-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-1573529791-4049238610-3989334239-503 - Limited - Disabled) Gast (S-1-5-21-1573529791-4049238610-3989334239-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-1573529791-4049238610-3989334239-1002 - Limited - Enabled) toshiba (S-1-5-21-1573529791-4049238610-3989334239-1000 - Administrator - Enabled) => C:\Users\toshiba ==================== Security Center ======================== (Als een item is opgenomen in de fixlist, zal het worden verwijderd.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Avast Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} ==================== Geïnstalleerde programma's ====================== (Alleen de adware-programma's met 'verborgen' vlag zou kunnen worden toegevoegd aan de fixlist om ze zichtbaar te maken. De adware-programma's moeten handmatig gedeinstallerd worden.) 1 Media Player version 2.2.0 (HKLM-x32\...\{6C566E3B-CBFB-4A3C-A8B6-88EA54DE7CA8}_is1) (Version: 2.2.0 - OneFloorApp Ltd.) ACSI Campsite Guide Europe 2013 (HKLM-x32\...\InstallShield_{0173531E-4829-4427-B467-26D64C50E693}) (Version: 1.00.0000 - Uw bedrijfsnaam) ACSI Campsite Guide Europe 2013 (x32 Version: 1.00.0000 - Uw bedrijfsnaam) Hidden Adobe Acrobat Reader DC - Nederlands (HKLM-x32\...\{AC76BA86-7AD7-1043-7B44-AC0F074E4100}) (Version: 15.023.20070 - Adobe Systems Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 23.0.0.257 - Adobe Systems Incorporated) Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.207 - Adobe Systems Incorporated) Amazon Assistant (HKLM-x32\...\{C8D184AC-D6E2-411E-838C-468CB0E91DBF}) (Version: 10.17.0216 - Amazon) <==== AANDACHT ANT Drivers Installer x64 (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden Apple Application Support (32-bit) (HKLM-x32\...\{D079CAAD-0C31-47A2-9AF5-A82F9CD9B221}) (Version: 5.2 - Apple Inc.) Apple Application Support (64-bit) (HKLM\...\{64E6007B-1DA9-42CD-BBE4-D5FA67A7C71D}) (Version: 5.2 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{55BB2110-FB43-49B3-93F4-945A0CFB0A6C}) (Version: 10.0.1.3 - Apple Inc.) Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.) Audacity 1.2.6 (HKLM-x32\...\Audacity_is1) (Version: - ) Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 12.3.2280 - AVAST Software) Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.) Brother MFL-Pro Suite DCP-J552DW (HKLM-x32\...\{7B4C83B6-17C1-4BFD-B86D-4D7AD4498CBB}) (Version: 1.0.4.0 - Brother Industries, Ltd.) CCleaner (HKLM\...\CCleaner) (Version: 5.23 - Piriform) Compatibiliteitspakket voor het 2007 Microsoft Office system (HKLM-x32\...\{90120000-0020-0413-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Computer Security 12.71.102.0 (release) (x32 Version: 12.71.102.0 - F-Secure Corporation) Hidden D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DiskRedactor (HKLM-x32\...\DiskRedactor_is1) (Version: 1.2 - CEZEO software Ltd.) DriveImage XML (Private Edition) (HKLM-x32\...\{F7E1CA14-B39D-452A-960B-39423DDDD933}) (Version: 2.44.000 - Runtime Software) Dropbox (HKU\S-1-5-21-1573529791-4049238610-3989334239-1000\...\Dropbox) (Version: 20.4.19 - Dropbox, Inc.) Duplicate Cleaner Free 3.2.6 (HKLM-x32\...\Duplicate Cleaner Free) (Version: 3.2.6 - DigitalVolcano Software Ltd) <==== AANDACHT Elevated Installer (x32 Version: 5.1.1.0 - Garmin Ltd or its subsidiaries) Hidden ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - ) Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Garmin City Navigator Europe NT 2013.10 Update (HKLM-x32\...\{EC28FA6E-E38D-4F72-80EF-1FBE66B05668}) (Version: 16.10.0.0 - Garmin Ltd or its subsidiaries) Garmin Communicator Plugin (HKLM-x32\...\{71DBFBF2-F7EB-4268-8485-9471D83C4E66}) (Version: 4.2.0 - Garmin Ltd or its subsidiaries) Garmin Communicator Plugin x64 (HKLM\...\{70A381F1-C161-4D61-A20C-BE12FC6777DF}) (Version: 4.2.0 - Garmin Ltd or its subsidiaries) Garmin Express (HKLM-x32\...\{9fbf4745-0038-4ed3-aee1-87af9b9ef8f1}) (Version: 5.1.1.0 - Garmin Ltd or its subsidiaries) Garmin Express (x32 Version: 5.1.1.0 - Garmin Ltd or its subsidiaries) Hidden Garmin Express Tray (x32 Version: 5.1.1.0 - Garmin Ltd or its subsidiaries) Hidden Garmin MapInstall (HKLM-x32\...\{0FBAFFD8-BCBA-4631-97E8-433DE7D1D753}) (Version: 4.0.1 - Garmin Ltd or its subsidiaries) Garmin POI Loader (HKLM-x32\...\{3213ED5E-7BBE-4613-BE69-8B1E4FE520DD}) (Version: 2.7.3 - Garmin Ltd or its subsidiaries) Garmin USB Drivers (HKLM-x32\...\{3D5D6CFC-3097-425A-8D8F-7EAF5D57641D}) (Version: 2.3.1.0 - Garmin Ltd or its subsidiaries) Garmin WebUpdater (HKLM-x32\...\{00FE2935-FB56-4410-AB5F-D6E70C1771D2}) (Version: 2.5.6 - Garmin Ltd or its subsidiaries) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 56.0.2924.87 - Google Inc.) Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.) Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden Google+ Auto Backup (HKLM-x32\...\{A50DE037-B5C0-4C8A-8049-B0C576B313D1}) (Version: 1.0.21.81 - Google) HD Tune 2.55 (HKLM-x32\...\HD Tune_is1) (Version: - EFD Software) HiJackThis (HKLM-x32\...\{45A66726-69BC-466B-A7A4-12FCBA4883D7}) (Version: 1.0.0 - Trend Micro) IncrediMail (x32 Version: 6.3.9.5274 - IncrediMail) Hidden IncrediMail 2.0 (HKLM-x32\...\IncrediMail) (Version: 6.3.9.5274 - IncrediMail Ltd.) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2353 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.2.1004 - Intel Corporation) IPCWebComponents 3.0.0.1 (HKLM-x32\...\{A8F5C6B2-203C-4600-89DC-131A4E238A0D}_is1) (Version: 3.0.0.1 - ) iTunes (HKLM\...\{81C96689-EA5B-4B7D-A04F-16326EC51BC2}) (Version: 12.5.4.42 - Apple Inc.) Java 8 Update 121 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180121F0}) (Version: 8.0.1210.13 - Oracle Corporation) Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - ) Malwarebytes Anti-Malware versie 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes) Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-0081-0413-0000-0000000FF1CE}) (Version: 14.0.6123.5001 - Microsoft Corporation) Microsoft Office Professional Plus 2007 (HKLM-x32\...\PROPLUS) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Primary Interoperability Assemblies 2005 (HKLM-x32\...\{2C303EE0-A595-3543-A71A-931C7AC40EDE}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{CA8A885F-E95B-3FC6-BB91-F4D9377C7686}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Movie Studio Platinum 12.0 (64-bit) (HKLM\...\{A743F12E-0A86-11E3-8F1A-F04DA23A5C58}) (Version: 12.0.1184 - Sony) Mozilla Firefox 51.0.1 (x86 nl) (HKLM-x32\...\Mozilla Firefox 51.0.1 (x86 nl)) (Version: 51.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 51.0.1.6234 - Mozilla) MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden MSVC90_x64 (Version: 1.0.1.2 - Nokia) Hidden MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) Hidden MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) Nero BackItUp 10 (HKLM-x32\...\{68AB6930-5BFF-4FF6-923B-516A91984FE6}) (Version: 5.6.11500.16.100 - Nero AG) Nero BurnRights 10 (HKLM-x32\...\{943CFD7D-5336-47AF-9418-E02473A5A517}) (Version: 4.2.10500.1.102 - Nero AG) Nero Express 10 (HKLM-x32\...\{70550193-1C22-445C-8FA4-564E155DB1A7}) (Version: 10.2.12000.21.100 - Nero AG) Nero Info (HKLM-x32\...\{B791E0AB-87A9-41A4-8D98-D13C2E37D928}) (Version: 16.0.1003 - Nero AG) Nero InfoTool 10 (HKLM-x32\...\{F412B4AF-388C-4FF5-9B2F-33DB1C536953}) (Version: 7.2.10400.5.100 - Nero AG) Nero MediaHome Free (HKLM-x32\...\{96F31DB7-9239-4FBE-B75E-056AEAB192D9}) (Version: 16.0.00700 - Nero AG) Nero Multimedia Suite 10 Essentials (HKLM-x32\...\{0FF68F26-416C-4954-ACA5-6AD5F9DE99C1}) (Version: 10.5.14800 - Nero AG) Nero RescueAgent 10 (HKLM-x32\...\{E337E787-CF61-4B7B-B84F-509202A54023}) (Version: 3.2.10800.9.100 - Nero AG) Nero StartSmart 10 (HKLM-x32\...\{F61D489E-6C44-49AC-AD02-7DA8ACA73A65}) (Version: 10.2.11600.14.100 - Nero AG) OpenOffice 4.1.2 (HKLM-x32\...\{41E7B095-1618-49CF-972F-72B5D5235423}) (Version: 4.12.9782 - Apache Software Foundation) Opera Stable 43.0.2442.991 (HKLM-x32\...\Opera 43.0.2442.991) (Version: 43.0.2442.991 - Opera Software) OVT Scanner 16Bit (HKU\S-1-5-21-1573529791-4049238610-3989334239-1000\...\InstallShield_{B737F354-613C-41EF-86F0-289499D45AF1}) (Version: 1.1 - Author) OVT Scanner 16Bit (x32 Version: 1.1 - Author) Hidden PC Connectivity Solution (HKLM-x32\...\{6B722793-E77B-41F5-BAB3-6C9832274E75}) (Version: 12.0.76.0 - Nokia) Photo Notifier and Animation Creator (HKLM-x32\...\Photo Notifier and Animation Creator) (Version: 1.0.0.1009 - IncrediMail Ltd.) Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.) PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation) Prerequisite installer (x32 Version: 16.0.0000 - Nero AG) Hidden PrivaZer (HKLM-x32\...\PrivaZer) (Version: 2.44.0.0 - Goversoft LLC) QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.) Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.38.113.2011 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6307 - Realtek Semiconductor Corp.) Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30123 - Realtek Semiconductor Corp.) REALTEK Wireless LAN Driver and Utility (HKLM-x32\...\{9C049509-055C-4CFF-A116-1D12312225EB}) (Version: 1.00.0281 - REALTEK Semiconductor Corp.) Realtek WLAN Driver (HKLM-x32\...\{9D3D8C60-A55F-4fed-B2B9-173001290E16}) (Version: 2.00.0013 - REALTEK Semiconductor Corp.) Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group) Reynardware Incredimail Converter 0.53 (HKLM-x32\...\{CDD74C77-BCAC-4545-A52B-FC1F575B9900}_is1) (Version: - Reynardware) SafeZone Stable 1.51.2220.62 (x32 Version: 1.51.2220.62 - Avast Software) Hidden Speccy (HKLM\...\Speccy) (Version: 1.30 - Piriform) Stuurprogrammapakket voor Windows - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.) Stuurprogrammapakket voor Windows - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.11.1 - Synaptics Incorporated) TOSHIBA Assist (HKLM-x32\...\{C2A276E3-154E-44DC-AAF1-FFDD7FD30E35}) (Version: 4.02.02 - TOSHIBA CORPORATION) TOSHIBA Bulletin Board (HKLM-x32\...\InstallShield_{43DBC64B-3DD1-47E2-8788-D3C3B110C574}) (Version: 2.1.10.64 - TOSHIBA Corporation) TOSHIBA ConfigFree (HKLM-x32\...\{38C52F7D-A6CB-4CE7-A189-8AABE8774D8A}) (Version: 8.0.38 - TOSHIBA CORPORATION) TOSHIBA Disc Creator (HKLM\...\{5DA0E02F-970B-424B-BF41-513A5018E4C0}) (Version: 2.1.0.6 for x64 - TOSHIBA Corporation) TOSHIBA Face Recognition (HKLM-x32\...\InstallShield_{F67FA545-D8E5-4209-86B1-AEE045D1003F}) (Version: 3.1.8.64 - TOSHIBA Corporation) TOSHIBA Flash Cards Support Utility (HKLM-x32\...\InstallShield_{620BBA5E-F848-4D56-8BDA-584E44584C5E}) (Version: 1.63.0.12C - TOSHIBA CORPORATION) TOSHIBA Hardware Setup (HKLM-x32\...\InstallShield_{5279374D-87FE-4879-9385-F17278EBB9D3}) (Version: 1.63.1.34C - TOSHIBA CORPORATION) TOSHIBA HDD/SSD Alert (HKLM-x32\...\InstallShield_{D4322448-B6AF-4316-B859-D8A0E84DCB38}) (Version: 3.1.64.7 - TOSHIBA Corporation) Toshiba Manuals (HKLM-x32\...\{90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}) (Version: 10.02 - TOSHIBA) TOSHIBA Media Controller (HKLM-x32\...\{C7A4F26F-F9B0-41B2-8659-99181108CDE3}) (Version: 1.0.86.2 - TOSHIBA CORPORATION) TOSHIBA Media Controller Plug-in (HKLM-x32\...\{F26FDF57-483E-42C8-A9C9-EEE1EDB256E0}) (Version: 1.0.6.1 - TOSHIBA CORPORATION) TOSHIBA Online Product Information (HKLM-x32\...\{2290A680-4083-410A-ADCC-7092C67FC052}) (Version: 4.00.0008 - TOSHIBA) TOSHIBA Places Icon Utility (HKLM-x32\...\{461F6F0D-7173-4902-9604-AB1A29108AF2}) (Version: 1.0.2.4 - TOSHIBA) TOSHIBA Recovery Media Creator (HKLM-x32\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 2.1.3.10010 - TOSHIBA CORPORATION) TOSHIBA Recovery Media Creator Reminder (HKLM-x32\...\InstallShield_{773970F1-5EBA-4474-ADEE-1EA3B0A59492}) (Version: 1.00.0019 - TOSHIBA) TOSHIBA ReelTime (HKLM-x32\...\InstallShield_{24811C12-F4A9-4D0F-8494-A7B8FE46123C}) (Version: 1.7.17.64 - TOSHIBA Corporation) TOSHIBA Resolution+ Plug-in for Windows Media Player (HKLM-x32\...\{6CB76C9D-80C2-4CB3-A4CD-D96B239E3F94}) (Version: 1.1.0 - TOSHIBA Corporation) TOSHIBA Service Station (HKLM-x32\...\{AC6569FA-6919-442A-8552-073BE69E247A}) (Version: 2.1.52 - TOSHIBA) TOSHIBA Supervisor Password (HKLM-x32\...\InstallShield_{51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}) (Version: 1.63.51.2C - TOSHIBA CORPORATION) TOSHIBA TEMPRO (HKLM-x32\...\{F082CB11-4794-4259-99A1-D91BA762AD15}) (Version: 3.35 - Toshiba Europe GmbH) TOSHIBA Value Added Package (HKLM-x32\...\InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}) (Version: 1.5.4.64 - TOSHIBA Corporation) TOSHIBA Web Camera Application (HKLM-x32\...\InstallShield_{6F3C8901-EBD3-470D-87F8-AC210F6E5E02}) (Version: 2.0.0.19 - TOSHIBA Corporation) TOSHIBA Wireless LAN Indicator (HKLM-x32\...\{CDADE9BC-612C-42B8-B929-5C6A823E7FF9}) (Version: 1.0.3 - TOSHIBA CORPORATION) Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.0 beta 15 - Ghisler Software GmbH) Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update voor Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-0413-0000-0000000FF1CE}_PROPLUS_{5CF7002F-6F49-4482-9564-5614FBE560FA}) (Version: - Microsoft) Update voor Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-0413-0000-0000000FF1CE}_PROPLUS_{15D84E79-1ED7-42C5-B2FD-745C3FBDDDC5}) (Version: - Microsoft) Update voor Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-0413-0000-0000000FF1CE}_PROPLUS_{A66AE6A1-8D8C-4102-BC18-38CBDE40F809}) (Version: - Microsoft) Utility Common Driver (x32 Version: 1.0.52.2C - TOSHIBA) Hidden Visual Studio 2008 x64 Redistributables (HKLM-x32\...\{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}) (Version: 10.0.0.2 - AVG Technologies) Visual Studio 2010 x64 Redistributables (HKLM\...\{21B133D6-5979-47F0-BE1C-F6A6B304693F}) (Version: 13.0.0.1 - AVG Technologies) Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies) Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.) Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin) Windows Driver Package - OmniVision (APL531) Image (03/10/2010 1.0.0.1) (HKLM\...\8F1C6894C1D0640A061BB8FE72580D0A1DA558FB) (Version: 03/10/2010 1.0.0.1 - OmniVision) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation) Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (HKLM-x32\...\{C32CE55C-12BA-4951-8797-0967FDEF556F}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{C63A1E60-B6A4-440B-89A5-1FC6E4AC1C94}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows-stuurprogrammapakket - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0) (HKLM\...\62BBD193ADFDBB228C7E1ADB56463F5732FF7F6F) (Version: 05/31/2012 7.1.2.0 - Nokia) ==================== Aangepaste CLSID (gefilterd): ========================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) CustomCLSID: HKU\S-1-5-21-1573529791-4049238610-3989334239-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\toshiba\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1573529791-4049238610-3989334239-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\toshiba\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1573529791-4049238610-3989334239-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\toshiba\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1573529791-4049238610-3989334239-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\toshiba\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1573529791-4049238610-3989334239-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\toshiba\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1573529791-4049238610-3989334239-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\toshiba\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1573529791-4049238610-3989334239-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\toshiba\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1573529791-4049238610-3989334239-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\toshiba\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1573529791-4049238610-3989334239-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\toshiba\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1573529791-4049238610-3989334239-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\toshiba\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1573529791-4049238610-3989334239-1000_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\toshiba\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1573529791-4049238610-3989334239-1000_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\toshiba\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1573529791-4049238610-3989334239-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\toshiba\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll (Dropbox, Inc.) ==================== Geplande Taken (gefilterd) ============= (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) Task: {004D4CBF-8A31-4590-AFF8-8603624DF3A8} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => %SystemRoot%\ehome\ehPrivJob.exe Task: {0345B280-291C-4CEC-8B29-91E503D87C09} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => %SystemRoot%\ehome\mcupdate.exe Task: {0D5E3C8A-B778-4357-A33F-9F32081F4B7A} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => %SystemRoot%\ehome\mcupdate.exe Task: {10623D92-0B6F-4E8F-BFE7-470C6668E0F8} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => %SystemRoot%\ehome\ehPrivJob.exe Task: {1595A3FB-2E8E-4425-A192-54973DA6E3B9} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => %SystemRoot%\ehome\ehPrivJob.exe Task: {1D471984-033B-456F-AF15-8A0C3FE78994} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => %SystemRoot%\ehome\ehrec.exe Task: {1EB12AD6-274A-43FC-8F54-82726C7439BC} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2017-02-26] (Microsoft Corporation) Task: {29EAB048-940C-4948-8704-1CC1458D38BA} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => %SystemRoot%\ehome\ehPrivJob.exe Task: {2B59B89D-C79C-43B3-9330-1FE438A4DE8D} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-09-28] (Piriform Ltd) Task: {2F2C2620-3FBF-4DCD-B32F-5C119FFF5B91} - System32\Tasks\{B51E00B5-7893-4DF9-B7BB-9BDC74D02F46} => pcalua.exe -a C:\Users\toshiba\Desktop\zoek\zoek.scr -d C:\Users\toshiba\Desktop\zoek -c /S Task: {38452CA4-6E28-4401-95B4-4EC1FF922B43} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => %SystemRoot%\ehome\ehPrivJob.exe Task: {3DFB3344-6B49-4FAF-AC3A-DD9C5FE75FA3} - System32\Tasks\{E7E6B778-371F-4870-AAFD-1E1F4D14DF82} => pcalua.exe -a C:\Users\toshiba\Documents\zoek\zoek.com -d C:\Users\toshiba\Documents\zoek Task: {5040B60F-161A-4980-81C9-855989ED721E} - System32\Tasks\{3D559E10-AD91-4AE0-90BA-634B9AC21196} => pcalua.exe -a C:\Users\toshiba\Documents\zoek\zoek.scr -d C:\Users\toshiba\Documents\zoek -c /S Task: {61DF915A-19B5-4F00-B753-97164C0E8285} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated) Task: {62F1B445-2AA2-4348-A87C-A152164503D2} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => %SystemRoot%\ehome\mcupdate.exe Task: {67ADBF69-8B86-42F1-8632-948DB469D7E5} - System32\Tasks\Opera scheduled Autoupdate 1475094850 => C:\Program Files (x86)\Opera\launcher.exe [2017-02-20] (Opera Software) Task: {68885AEF-6E92-4379-8575-C4BB1ECDC1A0} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2017-01-05] (AVAST Software) Task: {6B746737-7C79-493A-9DC8-0EBBC98F1DFF} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe Task: {6E34CEE4-1237-43CD-8C88-E4E8DE7CF813} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => %SystemRoot%\ehome\ehPrivJob.exe Task: {6E6C95A2-52CA-411B-BE26-91A48F9CE7CD} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => %SystemRoot%\ehome\mcupdate.exe Task: {73034AC4-0932-4EC0-82D8-67B5145F2FF4} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => %SystemRoot%\ehome\ehPrivJob.exe Task: {85079643-598E-41CA-BC8D-941F7564C76D} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => %SystemRoot%\ehome\mcupdate.exe Task: {868053A0-C51D-42FC-A0E4-6685416DFF47} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [2017-01-16] () Task: {879947AF-105B-416E-8288-6411DCE06BCE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.) Task: {8823B892-4662-43EE-A9ED-44896465B801} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-01] (Google Inc.) Task: {8EFED0EE-8873-40E3-AC1F-EBB99FC116A2} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1573529791-4049238610-3989334239-1000Core => C:\Users\toshiba\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-17] (Dropbox, Inc.) Task: {96EB2C4D-8A0B-4184-9EB6-BC263147D7CC} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => %SystemRoot%\ehome\ehPrivJob.exe Task: {99FBC243-0460-47F9-946C-5E4B281ADF57} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => %SystemRoot%\ehome\ehPrivJob.exe Task: {A559F9DE-98FA-4FB7-8EAB-BD12FACB0199} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => %windir%\ehome\MCUpdate.exe Task: {A6DA9D01-FE04-4F59-9E65-8E6C4DF55173} - System32\Tasks\SidebarExecute => C:\Program Files\Windows Sidebar\sidebar.exe Task: {AD1A3D14-A9CF-40F1-8A0F-41EF1952C45E} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => %SystemRoot%\ehome\ehrec.exe Task: {B4CFA1CF-15A4-4DBD-8EDF-4ECD82A2E5AE} - System32\Tasks\PrivaZer_SkipUAC => C:\Program Files (x86)\PrivaZer\PrivaZer.exe [2016-01-23] (Goversoft LLC) Task: {B8A709E6-1C19-4EDA-9F04-748C06A94F7D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-11-30] (Adobe Systems Incorporated) Task: {BB387033-ECD0-4257-A686-88E17D3D7578} - System32\Tasks\{0FDC6D38-495E-4F70-A3BC-68A294412B05} => pcalua.exe -a "C:\Program Files (x86)\ZHPDiag\ZHPhep.exe" -d "C:\Program Files (x86)\ZHPDiag" Task: {BE5DB818-C878-45A6-AC39-D3CCE5577E8F} - System32\Tasks\{577E63D8-67E0-414B-BBC0-1546E9D5FA7D} => pcalua.exe -a C:\Windows\OVTUNS.exe -c USB\VID_9420&PID_A550 OVT Scanner 16-bit Task: {C10BF7B6-1AA2-4D06-88C9-44F22C8F8845} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => %SystemRoot%\ehome\mcupdate.exe Task: {C2A14EC6-0B4D-4841-9E12-B5BC35DA12F0} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [2014-07-21] (Nero AG) Task: {D10D6C80-13DD-4047-89B4-B6B00FDE56F7} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1573529791-4049238610-3989334239-1000UA => C:\Users\toshiba\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-17] (Dropbox, Inc.) Task: {D6674872-03AD-4783-A7E1-614A3F218413} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => %SystemRoot%\ehome\ehPrivJob.exe Task: {D69B4B50-132C-4C23-9C34-8735F1B0B761} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => %SystemRoot%\ehome\ehPrivJob.exe Task: {DEE8F09D-5C50-453B-877F-E2001C0E65C5} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => %SystemRoot%\ehome\ehPrivJob.exe Task: {E0E32DE9-5E62-4592-916F-D9BD0226C864} - System32\Tasks\SafeZone scheduled Autoupdate 1458729955 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-09-06] (Avast Software) Task: {F0BA9190-E823-4EDD-94B8-C4E6DB1CA99D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.) Task: {F5362114-9AEA-460E-9919-178EC517E3BC} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => %SystemRoot%\ehome\ehPrivJob.exe Task: {FA837A74-6605-4CBB-8240-DB3580F90CF4} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2017-01-30] (AVAST Software) Task: {FEA5B20E-955A-4D01-B3AA-E64F213A0E83} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => %SystemRoot%\ehome\mcupdate.exe (Als een item is opgenomen in de fixlist, de taak (job) bestand wordt verplaatst. Het bestand dat wordt uitgevoerd door de taak zal niet worden verplaatst.) Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-1573529791-4049238610-3989334239-1000Core.job => C:\Users\toshiba\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-1573529791-4049238610-3989334239-1000UA.job => C:\Users\toshiba\AppData\Local\Dropbox\Update\DropboxUpdate.exe ==================== Snelkoppelingen ============================= (De items kunnen worden opgenomen in de fixlist.txt om hersteld of verwijderd te worden.) ==================== Geladen Modules (gefilterd) ============== 2016-09-01 17:12 - 2016-09-01 17:12 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2016-11-17 01:28 - 2016-11-17 01:28 - 01353528 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2016-05-25 13:02 - 2014-12-12 16:24 - 00044760 _____ () C:\Windows\runSW.exe 2015-02-01 17:23 - 2005-04-22 05:36 - 00143360 ____R () C:\WINDOWS\system32\BrSNMP64.dll 2017-02-17 11:24 - 2017-02-17 11:24 - 00100528 _____ () C:\Program Files (x86)\Amazon\Amazon Assistant\amazonAssistantService.exe 2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll 2016-12-17 13:19 - 2016-12-09 11:29 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll 2016-12-17 13:19 - 2016-12-09 11:29 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll 2016-01-23 13:56 - 2016-01-23 13:56 - 03525431 _____ () C:\Program Files (x86)\PrivaZer\PrivaMenu5.dll 2016-04-26 09:39 - 2016-04-26 09:39 - 00959176 _____ () C:\Users\toshiba\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64\ClientTelemetry.dll 2016-09-15 08:08 - 2016-09-15 08:08 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll 2017-01-11 16:35 - 2016-12-21 08:09 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll 2017-01-11 16:35 - 2016-12-21 07:54 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2017-01-11 16:35 - 2016-12-21 07:48 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2017-01-11 16:35 - 2016-12-21 07:48 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll 2017-01-11 16:35 - 2016-12-21 07:48 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2017-01-11 16:35 - 2016-12-21 07:53 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll 2015-06-01 21:00 - 2015-06-01 21:00 - 00102912 _____ () C:\Windows\System32\IccLibDll_x64.dll 2015-06-29 14:17 - 2015-06-29 14:17 - 00011264 _____ () C:\Program Files (x86)\TomTom\MySportsConnect\QtWebProcess.exe 2017-02-26 12:58 - 2017-02-26 12:59 - 00073728 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.110.0_x64__kzf8qxf38zg5c\SkypeHost.exe 2017-02-26 12:58 - 2017-02-26 12:59 - 00179712 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.110.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll 2017-02-26 12:58 - 2017-02-26 12:59 - 42895360 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.110.0_x64__kzf8qxf38zg5c\SkyWrap.dll 2017-02-06 20:36 - 2017-02-06 20:36 - 02215424 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.110.0_x64__kzf8qxf38zg5c\roottools.dll 2017-02-28 06:54 - 2017-02-28 06:54 - 00019456 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.214.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 2017-02-28 06:54 - 2017-02-28 06:54 - 21149696 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.214.10010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll 2017-02-28 06:54 - 2017-02-28 06:54 - 05380096 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.214.10010.0_x64__8wekyb3d8bbwe\MediaEngine.dll 2016-06-04 06:47 - 2016-06-04 06:47 - 00680448 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.214.10010.0_x64__8wekyb3d8bbwe\Microsoft.DesignCore.dll 2017-02-28 06:54 - 2017-02-28 06:54 - 00387584 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.214.10010.0_x64__8wekyb3d8bbwe\Microsoft.RichMedia.Ink.Controls.dll 2017-02-28 06:54 - 2017-02-28 06:54 - 01047552 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.214.10010.0_x64__8wekyb3d8bbwe\Microsoft.Sharing.dll 2016-03-04 10:41 - 2016-03-04 10:42 - 00291328 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.214.10010.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll 2017-02-28 06:54 - 2017-02-28 06:54 - 00024064 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_17.214.10010.0_x64__8wekyb3d8bbwe\Lumia.ViewerPluginProxy.dll 2017-01-05 13:31 - 2017-01-05 13:31 - 00169064 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll 2017-01-05 13:31 - 2017-01-05 13:32 - 00482928 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll 2017-02-28 13:49 - 2017-02-28 13:49 - 05990096 _____ () C:\Program Files\AVAST Software\Avast\defs\17022800\algo.dll 2016-05-25 13:02 - 2013-02-27 16:17 - 00221184 _____ () C:\Program Files (x86)\Realtek\USB Wireless LAN Utility\EnumDevLib.dll 2017-01-05 13:34 - 2017-01-05 13:34 - 48936448 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2015-02-01 17:22 - 2009-02-27 16:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll 2009-02-26 13:46 - 2009-02-26 13:46 - 00064344 _____ () C:\Program Files (x86)\Microsoft Office\Office12\ADDINS\ColleagueImport.dll 2011-06-22 11:46 - 2011-06-22 11:46 - 00434016 _____ () C:\Program Files (x86)\Microsoft Office\Office12\ADDINS\UmOutlookAddin.dll 2015-11-11 03:41 - 2015-11-11 03:41 - 00756376 _____ () C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\MSPTLS.DLL 2017-02-22 09:21 - 2017-02-22 09:21 - 00135680 _____ () C:\Program Files (x86)\TomTom\MySportsConnect\quazip5.dll 2015-06-29 11:44 - 2015-06-29 11:44 - 00010240 _____ () C:\Program Files (x86)\TomTom\MySportsConnect\QtQuick.2\qtquick2plugin.dll 2015-06-29 11:45 - 2015-06-29 11:45 - 00686592 _____ () C:\Program Files (x86)\TomTom\MySportsConnect\QtQuick\Controls\qtquickcontrolsplugin.dll 2015-06-29 11:44 - 2015-06-29 11:44 - 00010240 _____ () C:\Program Files (x86)\TomTom\MySportsConnect\QtQuick\Window.2\windowplugin.dll 2015-06-29 11:47 - 2015-06-29 11:47 - 00055808 _____ () C:\Program Files (x86)\TomTom\MySportsConnect\QtQuick\Layouts\qquicklayoutsplugin.dll 2015-06-29 11:47 - 2015-06-29 11:47 - 00166912 _____ () C:\Program Files (x86)\TomTom\MySportsConnect\QtQuick\Dialogs\dialogplugin.dll 2014-09-23 11:36 - 2014-09-23 11:36 - 15220736 _____ () C:\Program Files (x86)\TomTom\MySportsConnect\opengl32sw.dll 2015-06-29 14:17 - 2015-06-29 14:17 - 00023040 _____ () C:\Program Files (x86)\TomTom\MySportsConnect\QtWebKit\qmlwebkitplugin.dll 2015-06-29 14:17 - 2015-06-29 14:17 - 00032768 _____ () C:\Program Files (x86)\TomTom\MySportsConnect\QtWebKit\experimental\qmlwebkitexperimentalplugin.dll 2017-02-26 21:57 - 2017-02-21 19:58 - 00802112 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\dropbox_watchdog.dll 2017-02-26 21:57 - 2017-01-25 22:03 - 00035792 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\_multiprocessing.pyd 2017-02-26 21:57 - 2017-01-25 22:03 - 00100296 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\_ctypes.pyd 2017-02-26 21:57 - 2017-01-25 22:03 - 00018888 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\select.pyd 2017-02-26 21:57 - 2017-02-21 20:01 - 00019776 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\tornado.speedups.pyd 2017-02-26 21:57 - 2017-01-25 22:03 - 00694224 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\unicodedata.pyd 2017-02-26 21:57 - 2017-02-21 20:01 - 00020824 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._constant_time.pyd 2017-02-26 21:57 - 2017-01-25 22:04 - 00123856 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\_cffi_backend.pyd 2017-02-26 21:57 - 2017-02-21 20:01 - 01682768 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._openssl.pyd 2017-02-26 21:57 - 2017-02-21 20:01 - 00020816 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._padding.pyd 2017-02-26 21:57 - 2017-01-25 22:03 - 00145864 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\pyexpat.pyd 2017-02-26 21:57 - 2017-01-25 22:04 - 00019408 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\faulthandler.pyd 2017-02-26 21:57 - 2017-01-25 22:03 - 00116688 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\pywintypes27.dll 2017-02-26 21:57 - 2017-01-25 22:06 - 00105928 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\win32api.pyd 2017-02-26 21:57 - 2017-02-21 20:01 - 00022864 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\winffi.crt.compiled._winffi_crt.pyd 2017-02-26 21:57 - 2017-02-21 20:01 - 00038712 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\fastpath.pyd 2017-02-26 21:57 - 2017-02-21 20:01 - 00052544 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\psutil._psutil_windows.pyd 2017-02-26 21:57 - 2017-01-25 22:06 - 00024528 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\win32event.pyd 2017-02-26 21:57 - 2017-01-25 22:03 - 00392144 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\pythoncom27.dll 2017-02-26 21:57 - 2017-01-25 22:06 - 00020936 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\mmapfile.pyd 2017-02-26 21:57 - 2017-01-25 22:06 - 00116176 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\win32security.pyd 2017-02-26 21:57 - 2017-02-21 20:01 - 00381760 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\win32com.shell.shell.pyd 2017-02-26 21:57 - 2017-01-25 22:06 - 00124880 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\win32file.pyd 2017-02-26 21:57 - 2017-02-21 20:01 - 00026456 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\winffi.kernel32.compiled._winffi_kernel32.pyd 2017-02-26 21:57 - 2017-01-25 22:06 - 00024016 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\win32clipboard.pyd 2017-02-26 21:57 - 2017-01-25 22:06 - 00175560 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\win32gui.pyd 2017-02-26 21:57 - 2017-01-25 22:06 - 00030160 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\win32pipe.pyd 2017-02-26 21:57 - 2017-01-25 22:06 - 00043472 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\win32process.pyd 2017-02-26 21:57 - 2017-01-25 22:06 - 00048592 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\win32service.pyd 2017-02-26 21:57 - 2017-01-25 22:06 - 00057808 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\win32evtlog.pyd 2017-02-26 21:57 - 2017-01-25 22:06 - 00024016 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\win32profile.pyd 2017-02-26 21:57 - 2017-02-21 20:01 - 00246608 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\breakpad.client.windows.handler.pyd 2017-02-26 21:57 - 2017-02-21 20:01 - 00027488 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\dropbox.infinite.win.compiled._driverinstallation.pyd 2017-02-26 21:57 - 2017-01-25 22:05 - 00241104 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\_jpegtran.pyd 2017-02-26 21:57 - 2017-02-21 20:01 - 00022336 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\cpuid.compiled._cpuid.pyd 2017-02-26 21:57 - 2017-01-25 22:06 - 00028616 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\win32ts.pyd 2017-02-26 21:57 - 2017-02-21 20:01 - 01826104 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\PyQt5.QtCore.pyd 2017-02-26 21:57 - 2017-01-25 22:04 - 00083912 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\sip.pyd 2017-02-26 21:57 - 2017-02-21 20:01 - 01972536 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\PyQt5.QtGui.pyd 2017-02-26 21:57 - 2017-02-21 20:01 - 03928896 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\PyQt5.QtWidgets.pyd 2017-02-26 21:57 - 2017-02-21 20:01 - 00531264 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\PyQt5.QtNetwork.pyd 2017-02-26 21:57 - 2017-02-21 20:01 - 00053072 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\winrpcserver.compiled._RPCServer.pyd 2017-02-26 21:57 - 2017-02-21 20:01 - 00025432 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\winscreenshot.compiled._CaptureScreenshot.pyd 2017-02-26 21:57 - 2017-02-21 20:01 - 00133432 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKit.pyd 2017-02-26 21:57 - 2017-02-21 20:01 - 00224064 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKitWidgets.pyd 2017-02-26 21:57 - 2017-02-21 20:01 - 00207680 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\PyQt5.QtPrintSupport.pyd 2017-02-26 21:57 - 2017-02-21 20:01 - 00022864 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\winffi.user32.compiled._winffi_user32.pyd 2017-02-26 21:57 - 2017-02-21 20:01 - 00069968 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\windisplaytoast.compiled._DisplayToast.pyd 2017-02-26 21:57 - 2017-02-21 20:01 - 00022872 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\winffi.iphlpapi.compiled._winffi_iphlpapi.pyd 2017-02-26 21:57 - 2017-02-21 20:01 - 00021848 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\winffi.winerror.compiled._winffi_winerror.pyd 2017-02-26 21:57 - 2017-02-21 20:01 - 00022872 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\winffi.wininet.compiled._winffi_wininet.pyd 2017-02-26 21:57 - 2017-01-25 22:06 - 00350152 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\winxpgui.pyd 2017-02-26 21:57 - 2017-02-21 20:01 - 00103232 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\PyQt5.QtWinExtras.pyd 2017-02-26 21:57 - 2017-02-21 20:01 - 00023896 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\winverifysignature.compiled._VerifySignature.pyd 2017-02-26 21:57 - 2017-02-21 20:01 - 00025936 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\librsyncffi.compiled._librsyncffi.pyd 2017-02-26 21:57 - 2017-01-25 22:01 - 00036296 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\librsync.dll 2017-02-26 21:57 - 2017-02-21 20:01 - 00033112 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\enterprise_data.compiled._enterprise_data.pyd 2017-02-26 21:57 - 2017-01-27 03:02 - 00293392 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\EnterpriseDataAdapter.dll 2017-02-26 21:57 - 2017-02-21 20:01 - 00084288 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\dropbox_sqlite_ext.DLL 2017-02-26 21:57 - 2017-01-25 22:11 - 00017864 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\libEGL.dll 2017-02-26 21:57 - 2017-01-25 22:11 - 01631184 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\libGLESv2.dll 2017-02-26 21:57 - 2017-02-21 20:01 - 00042816 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\PyQt5.QtWebChannel.pyd 2017-02-26 21:57 - 2017-02-21 20:01 - 00171336 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngineWidgets.pyd 2017-02-26 21:57 - 2017-02-21 20:01 - 00357688 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\PyQt5.QtQml.pyd 2017-02-26 21:57 - 2017-01-25 22:06 - 00060880 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\win32print.pyd 2017-02-26 21:57 - 2017-02-21 20:01 - 00026456 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\winffi.winhttp.compiled._winffi_winhttp.pyd 2017-02-26 21:57 - 2017-02-21 20:01 - 00546104 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\PyQt5.QtQuick.pyd 2017-02-26 21:57 - 2017-01-25 22:13 - 00697304 _____ () C:\Users\toshiba\AppData\Roaming\Dropbox\bin\QtQuick\Controls\qtquickcontrolsplugin.dll 2014-06-23 13:46 - 2014-06-23 13:46 - 00033128 _____ () C:\Program Files (x86)\IncrediMail\Bin\IMHttpComm.dll 2014-06-23 13:46 - 2014-06-23 13:46 - 00268712 _____ () C:\Program Files (x86)\IncrediMail\Bin\ImLookExU.dll 2014-06-23 13:46 - 2014-06-23 13:46 - 00072104 _____ () C:\Program Files (x86)\IncrediMail\Bin\wlessfp1.dll 2014-06-23 13:46 - 2014-06-23 13:46 - 00080296 _____ () C:\Program Files (x86)\IncrediMail\bin\ImAppRU.dll 2014-06-23 13:46 - 2014-06-23 13:46 - 00133544 _____ () C:\Program Files (x86)\IncrediMail\Bin\ImComUtlU.dll 2014-06-23 13:46 - 2014-06-23 13:46 - 00108888 _____ () C:\Program Files (x86)\IncrediMail\Bin\pmc.dll ==================== Alternate Data Streams (gefilterd) ========= (Als een item is opgenomen in de fixlist, alleen de ADS wordt verwijderd.) ==================== Veilige Modus (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. De "AlternateShell" waarde wordt hersteld.) ==================== Bestandskoppeling (gefilterd) =============== (Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd.) ==================== Internet Explorer vertrouwde/beperkte toegang =============== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd.) IE trusted site: HKU\.DEFAULT\...\amazon.com -> hxxps://amazon.com IE trusted site: HKU\S-1-5-21-1573529791-4049238610-3989334239-1000\...\amazon.com -> hxxps://amazon.com ==================== Hosts inhoud: =============================== (Als nodig Hosts: opdracht kan worden opgenomen in de fixlist om Hosts te resetten.) 2009-07-14 03:34 - 2012-02-02 19:39 - 00000027 ____A C:\WINDOWS\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Andere gebieden ============================ (Momenteel is er geen automatische fix voor dit onderdeel.) HKU\S-1-5-21-1573529791-4049238610-3989334239-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\toshiba\AppData\Roaming\Microsoft\Windows Live Photo Gallery\Bureaubladachtergrond van Windows Live Photo Gallery.jpg DNS Servers: 213.109.127.1 - 89.188.26.77 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is ingeschakeld. ==================== MSCONFIG/TASK MANAGER Uitgeschakelde items == MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Toshiba Places Icon Utility.lnk => C:\Windows\pss\Toshiba Places Icon Utility.lnk.CommonStartup MSCONFIG\startupfolder: C:^Users^toshiba^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup MSCONFIG\startupfolder: C:^Users^toshiba^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.4.1.lnk => C:\Windows\pss\OpenOffice.org 3.4.1.lnk.Startup MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: Adobe Speed Launcher => 1423307272 MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR MSCONFIG\startupreg: Dropbox Update => "C:\Users\toshiba\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c MSCONFIG\startupreg: GarminExpressTrayApp => "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe" MSCONFIG\startupreg: HotKeysCmds => C:\Windows\system32\hkcmd.exe MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe" MSCONFIG\startupreg: NBAgent => "c:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s MSCONFIG\startupreg: swg => "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" MSCONFIG\startupreg: TOPI.EXE => C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe /STAR MSCONFIG\startupreg: Toshiba Registration => C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe MSCONFIG\startupreg: Toshiba TEMPRO => C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe MSCONFIG\startupreg: ToshibaServiceStation => C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe /hide:60 MSCONFIG\startupreg: TosNC => %ProgramFiles%\Toshiba\BulletinBoard\TosNcCore.exe MSCONFIG\startupreg: TosReelTimeMonitor => %ProgramFiles%\TOSHIBA\ReelTime\TosReelTimeMonitor.exe MSCONFIG\startupreg: TosSENotify => C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe MSCONFIG\startupreg: TosVolRegulator => C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe HKLM\...\StartupApproved\Run: => "iTunesHelper" HKLM\...\StartupApproved\Run: => "TCrdMain" HKLM\...\StartupApproved\Run32: => "BrHelp" HKU\S-1-5-21-1573529791-4049238610-3989334239-1000\...\StartupApproved\StartupFolder: => "Dropbox.lnk" HKU\S-1-5-21-1573529791-4049238610-3989334239-1000\...\StartupApproved\Run: => "CCleaner Monitoring" HKU\S-1-5-21-1573529791-4049238610-3989334239-1000\...\StartupApproved\Run: => "GarminExpressTrayApp" HKU\S-1-5-21-1573529791-4049238610-3989334239-1000\...\StartupApproved\Run: => "OneDrive" ==================== Firewall regels (gefilterd) =============== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808 FirewallRules: [{834ED62F-F09E-4B2E-B001-A29A8D57AEE1}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{8D949F46-D104-4E5C-B55B-DA993BF9A4C8}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{E85FA887-B49F-4A18-AB4A-0A1351AAB5D3}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{AE88064C-ED2B-4820-BAE5-C029CA55DA84}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{8FCA48C5-8402-4D55-A6B0-1B35BF39F4CB}] => (Allow) C:\Program Files (x86)\Realtek\USB Wireless LAN Utility\RTLDHCP.exe FirewallRules: [{DDA56A87-4CA9-4241-A759-5F5DC0D7B1F8}] => (Allow) C:\Program Files (x86)\Realtek\USB Wireless LAN Utility\RTLDHCP.exe FirewallRules: [{796D12AA-1D13-48ED-8F6E-8A0E424E6D0E}] => (Allow) C:\Program Files (x86)\Realtek\USB Wireless LAN Utility\RTLDHCP.exe FirewallRules: [{EE653EDB-1A38-4089-8BBA-15AD11334E71}] => (Allow) C:\Program Files (x86)\Realtek\USB Wireless LAN Utility\RTLDHCP.exe FirewallRules: [{F489533B-A6F8-44FF-91B3-90A44AA55D47}] => (Allow) LPort=53 FirewallRules: [{FC7350B6-4376-411D-A996-9A591450FA03}] => (Allow) C:\Program Files (x86)\Realtek\USB Wireless LAN Utility\RTLDHCP.exe FirewallRules: [{2CD5540C-6560-492C-89B3-BA579AD213D5}] => (Allow) C:\Program Files (x86)\Realtek\USB Wireless LAN Utility\RTLDHCP.exe FirewallRules: [{A04C87CF-80A3-4C43-BABC-08FA847C5195}] => (Allow) C:\PROGRA~2\REALTEK\USBWIR~1\Rtldhcp.exe FirewallRules: [{9F70184E-FBCB-4AF7-AB0B-338207AA2780}] => (Allow) LPort=53 FirewallRules: [{F3AFBBC9-1915-41F6-86EA-0AD04C88C5DC}] => (Allow) LPort=1542 FirewallRules: [{D5A205C1-5C30-47C2-BCF4-1759349EB9B9}] => (Allow) LPort=1542 FirewallRules: [{FA522790-AEB0-4EB3-A99C-D5779589CD00}] => (Allow) C:\PROGRA~2\REALTEK\USBWIR~1\RtWlan.exe FirewallRules: [{6BAEFB5C-5881-4716-8C53-B31BC555C0CA}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe FirewallRules: [{E9D21FBD-DB3A-4EBC-BE51-F09C4DC160E4}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe FirewallRules: [UDP Query User{A252C231-9F61-4804-90A6-D5D6D6AD0567}C:\users\toshiba\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\toshiba\appdata\roaming\dropbox\bin\dropbox.exe FirewallRules: [TCP Query User{F4A3BA2D-0DA7-4E6F-8EAB-5D0ECCE80745}C:\users\toshiba\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\toshiba\appdata\roaming\dropbox\bin\dropbox.exe FirewallRules: [{DBC21A27-A6FA-4D10-8ED5-5678D22FE54D}] => (Allow) LPort=54925 FirewallRules: [{CED7ED16-0F20-4578-A2F5-974B2480A088}] => (Allow) C:\Program Files (x86)\Nero\Nero 10\KM\NMDllHost.exe FirewallRules: [{E6F8B9FF-C513-43F4-83CF-2919FCB0E8D0}] => (Allow) C:\Program Files (x86)\Nero\Nero 10\Nero Blu-ray Player\Blu-rayPlayer.exe FirewallRules: [{58D9BDC4-3463-422A-B184-17E972216BC5}] => (Allow) C:\Program Files (x86)\Nero\Nero 10\Nero Blu-ray Player\Blu-rayPlayer.exe FirewallRules: [UDP Query User{C43F2127-3612-4560-9191-F929F61787DA}C:\program files (x86)\internet explorer\iexplore.exe] => (Allow) C:\program files (x86)\internet explorer\iexplore.exe FirewallRules: [TCP Query User{150B7A0D-F930-48A0-AE4E-313BB63E65B8}C:\program files (x86)\internet explorer\iexplore.exe] => (Allow) C:\program files (x86)\internet explorer\iexplore.exe FirewallRules: [{10BD91DE-1D86-42D1-9D80-EB70A9F6DFB1}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe FirewallRules: [{FA56135D-980D-4D30-9B32-D650F763AF29}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe FirewallRules: [{1C6314E1-4245-4451-ABA4-D6F77C69CDF8}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe FirewallRules: [{48D83AF5-AD81-4F0F-9B8F-90B9149A9BF6}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe FirewallRules: [{4646DBBA-0F7C-4694-BF63-BC97341BD06B}] => (Allow) C:\Users\toshiba\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{02C1E5EF-AAFD-451C-87D6-FDB71BBDCFB3}] => (Allow) C:\Users\toshiba\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{4F4604FA-7977-4F2D-A316-E22D499C6458}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe FirewallRules: [{99E416C6-3295-4776-9A2C-EA2DFDDD4567}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe FirewallRules: [{F02D82AE-8E94-4E02-B91D-1BBCDE752B50}] => (Allow) LPort=1900 FirewallRules: [{D3567145-BE67-4B47-8D15-9EEFD4B44831}] => (Allow) LPort=2869 FirewallRules: [{67424DC7-8D26-43AC-A5C2-0F511338E435}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{C51A8340-1E8F-4AC5-89C9-97C7AE8B0245}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{939950A6-89F4-433B-B6D9-1F1886EABDE1}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{47656B9F-1ACE-4D5B-8134-42A593AC34B6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{BCDE2104-9245-4F75-9F50-BE8056532CC2}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{90C3E764-312F-4C99-A208-8055B9DF53E8}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe FirewallRules: [{D3736E26-874A-4323-BDC2-9B682128AD23}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe FirewallRules: [{464A3EF5-883D-490B-9A51-BD23AA57FE22}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe FirewallRules: [{BDE35F0E-7C10-46A1-AAAF-B37FDAD5E8FB}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe FirewallRules: [{862F4500-405A-4BE6-A761-F4A16F4E9294}] => (Allow) C:\Program Files\iTunes\iTunes.exe FirewallRules: [{999CEA06-AC25-479F-80CB-01BF173E07C4}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{F796A2FE-7CD1-4D97-ACD1-78667AAA33D1}] => (Allow) C:\Program Files (x86)\Opera\43.0.2442.806_0\opera.exe FirewallRules: [{2C1EC5BB-BD3F-42B6-A55F-5F7615E5C3DC}] => (Allow) C:\Program Files (x86)\Opera\43.0.2442.991\opera.exe FirewallRules: [{8B4A78D6-3A89-4269-841A-E931C05A48D7}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe FirewallRules: [{3C0336E8-1DF7-43CA-9230-EC66261A492D}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe FirewallRules: [{91744996-2F0E-4708-B3AC-35CB0D59B406}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe FirewallRules: [{28AFC841-DBC4-4D6D-B6BE-291C1D3B28A2}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe ==================== Herstelpunten ========================= 16-02-2017 18:19:42 Windows Back-up 26-02-2017 09:53:28 Windows Back-up ==================== Defecte Apparaatbeheer Apparaten ============= ==================== Eventlog fouten: ========================= Applicatiefouten: ================== Error: (02/28/2017 04:58:14 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Naam van toepassing met fout: IncMail.exe, versie: 6.3.9.5274, tijdstempel: 0x51eb9497 Naam van module met fout: ntdll.dll, versie: 10.0.14393.479, tijdstempel: 0x58256ca0 Uitzonderingscode: 0xc0000374 Foutmarge: 0x000d9d11 Id van proces met fout: 0x2724 Starttijd van toepassing met fout: 0x01d291db7143548a Pad naar toepassing met fout: C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe Pad naar module met fout: C:\WINDOWS\SYSTEM32\ntdll.dll Rapport-id: c5cab92c-7b4e-46b4-8681-dee8895427ea Volledige pakketnaam met fout: Relatieve toepassings-id van pakket met fout: Error: (02/28/2017 02:20:23 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Naam van toepassing met fout: WLXPGSS.SCR, versie: 15.4.3508.1109, tijdstempel: 0x4cda70d4 Naam van module met fout: WLXPipeTran.dll, versie: 15.4.3508.1109, tijdstempel: 0x4cda7175 Uitzonderingscode: 0xc0000005 Foutmarge: 0x0000c15b Id van proces met fout: 0x2a9c Starttijd van toepassing met fout: 0x01d291c3d9c33dad Pad naar toepassing met fout: C:\Windows\WLXPGSS.SCR Pad naar module met fout: C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPipeTran.dll Rapport-id: 36acb4cf-9feb-4e41-8327-86a8188fb44e Volledige pakketnaam met fout: Relatieve toepassings-id van pakket met fout: Error: (02/28/2017 01:17:13 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Naam van toepassing met fout: IncMail.exe, versie: 6.3.9.5274, tijdstempel: 0x51eb9497 Naam van module met fout: ntdll.dll, versie: 10.0.14393.479, tijdstempel: 0x58256ca0 Uitzonderingscode: 0xc0000374 Foutmarge: 0x000d9d11 Id van proces met fout: 0x2468 Starttijd van toepassing met fout: 0x01d291934014126f Pad naar toepassing met fout: C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe Pad naar module met fout: C:\WINDOWS\SYSTEM32\ntdll.dll Rapport-id: cb6b63eb-6214-4c84-879b-20d963f4e026 Volledige pakketnaam met fout: Relatieve toepassings-id van pakket met fout: Error: (02/28/2017 09:12:14 AM) (Source: ESENT) (EventID: 489) (User: ) Description: SettingSyncHost (2636) Een poging het bestand C:\Users\toshiba\AppData\Local\Microsoft\Windows\SettingSync\remotemetastore\v1\meta.edb te openen voor alleen-lezen is mislukt. Systeemfout 32 (0x00000020): Het proces heeft geen toegang tot het bestand omdat het door een ander proces wordt gebruikt. . Tijdens het openen van het bestand treedt fout -1032 (0xfffffbf8) op. Error: (02/28/2017 09:11:44 AM) (Source: ESENT) (EventID: 489) (User: ) Description: SettingSyncHost (2636) Een poging het bestand C:\Users\toshiba\AppData\Local\Microsoft\Windows\SettingSync\metastore\meta.edb te openen voor alleen-lezen is mislukt. Systeemfout 32 (0x00000020): Het proces heeft geen toegang tot het bestand omdat het door een ander proces wordt gebruikt. . Tijdens het openen van het bestand treedt fout -1032 (0xfffffbf8) op. Error: (02/26/2017 10:20:43 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Naam van toepassing met fout: Microsoft.Photos.exe, versie: 1.0.1611.18000, tijdstempel: 0x582f93e9 Naam van module met fout: PhotosApp.Windows.dll, versie: 16.1118.10000.0, tijdstempel: 0x582f92b6 Uitzonderingscode: 0x80000003 Foutmarge: 0x0000000000077537 Id van proces met fout: 0x21c8 Starttijd van toepassing met fout: 0x01d2906e7922906b Pad naar toepassing met fout: C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe Pad naar module met fout: C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\PhotosApp.Windows.dll Rapport-id: fea4de4b-e82b-4aec-9044-5783a4b9b91a Volledige pakketnaam met fout: Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe Relatieve toepassings-id van pakket met fout: App Error: (02/26/2017 09:16:24 PM) (Source: Windows Backup) (EventID: 4103) (User: ) Description: De back-up is niet voltooid vanwege een fout bij schrijven naar de back-uplocatie F:\. De fout is: De back-uplocatie is niet gevonden of is niet geldig. Controleer de back-upinstellingen en de back-uplocatie. (0x81000006). Error: (02/26/2017 03:23:08 PM) (Source: MsiInstaller) (EventID: 11706) (User: TOSHIBA-TOSH) Description: Product: Nero Express 10 -- Error 1706.No valid source could be found for product Nero Express 10. The Windows Installer cannot continue. Error: (02/26/2017 03:00:48 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Naam van toepassing met fout: WLXPGSS.SCR, versie: 15.4.3508.1109, tijdstempel: 0x4cda70d4 Naam van module met fout: WLXPipeTran.dll, versie: 15.4.3508.1109, tijdstempel: 0x4cda7175 Uitzonderingscode: 0xc0000005 Foutmarge: 0x0000c15b Id van proces met fout: 0x16cc Starttijd van toepassing met fout: 0x01d290337e30d5ba Pad naar toepassing met fout: C:\Windows\WLXPGSS.SCR Pad naar module met fout: C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPipeTran.dll Rapport-id: 2d1b0ca1-4f01-4751-a6a1-b2b86ab32b9d Volledige pakketnaam met fout: Relatieve toepassings-id van pakket met fout: Error: (02/26/2017 12:43:54 PM) (Source: Windows Backup) (EventID: 4104) (User: ) Description: De back-up is niet voltooid. De fout is: Er is een fout opgetreden in Windows Back-up bij het schrijven van gegevens naar het doel voor de back-up. (0x80780166). Systeemfouten: ============= Error: (02/28/2017 01:17:15 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {3185A766-B338-11E4-A71E-12E3F512A338} en APPID {7006698D-2974-4091-A424-85DD0B909E23} aan de gebruiker NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (02/26/2017 11:58:30 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {8D8F4F83-3594-4F07-8369-FC3C3CAE4919} en APPID {F72671A9-012C-4725-9D2F-2A4D32D65169} aan de gebruiker NT AUTHORITY\SYSTEM SID (S-1-5-18) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (02/26/2017 09:44:04 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: De Realtek DHCP Service-service is onverwacht beëindigd. Dit is nu 1 keer gebeurd. Error: (02/26/2017 09:44:04 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: De Garmin Device Interaction Service-service kan vanwege de volgende fout niet worden gestart: De service heeft de start- of stuuropdracht niet op juiste wijze beantwoord. Error: (02/26/2017 09:44:04 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Time-out (30000 seconden) tijdens het wachten op het verbinden van deze service: Garmin Device Interaction Service. Error: (02/26/2017 09:43:34 AM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: De NetTcpActivator-service is afhankelijk van de NetTcpPortSharing-service, die vanwege de volgende fout niet kan worden gestart: Kan de service niet starten omdat deze is uitgeschakeld of omdat het geen ingeschakelde apparaten met zich heeft verbonden. Error: (02/16/2017 08:51:20 PM) (Source: DCOM) (EventID: 10010) (User: TOSHIBA-TOSH) Description: De server {0002DF02-0000-0000-C000-000000000046} heeft zich niet binnen de vereiste termijn bij DCOM geregistreerd. Error: (02/16/2017 06:26:36 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: De Bonjour-service-service is onverwacht beëindigd. Dit is nu 1 keer gebeurd. Error: (02/16/2017 04:58:37 PM) (Source: Service Control Manager) (EventID: 7011) (User: ) Description: Time-out (30000 seconden) tijdens het wachten op een reactie op een transactie van deze service: WSearch. Error: (02/16/2017 04:58:07 PM) (Source: Service Control Manager) (EventID: 7011) (User: ) Description: Time-out (30000 seconden) tijdens het wachten op een reactie op een transactie van deze service: WSearch. ==================== Geheugen info =========================== Processor: Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz Percentage geheugen in gebruik: 67% Totaal fysiek RAM-geheugen: 4003.76 MB Beschikbaar fysiek RAM-geheugen: 1294.95 MB Totaal Virtueel geheugen: 8099.76 MB Beschikbaar Virtual geheugen: 4200.29 MB ==================== Schijven ================================ Drive c: (WINDOWS) (Fixed) (Total:232.44 GB) (Free:60.62 GB) NTFS Drive d: (Data) (Fixed) (Total:232.49 GB) (Free:130.29 GB) NTFS ==================== MBR & Partitietabel ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 51129AEE) Partition 1: (Active) - (Size=400 MB) - (Type=27) Partition 2: (Not Active) - (Size=232.4 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=450 MB) - (Type=27) Partition 4: (Not Active) - (Size=232.5 GB) - (Type=07 NTFS) ==================== Eind van Addition.txt ============================