Scanresultaten van Farbar Recovery Scan Tool (FRST) (x64) Versie: 14-05-2017
Gestart door serjo (Beheerder) op LAPTOP (16-05-2017 19:11:39)
Gestart vanaf C:\Users\serjo\Downloads\farbar
Geladen Profielen: serjo (Beschikbare Profielen: serjo & Teun & Gast)
Platform: Windows 8.1 Pro (Update) (X64) Taal: Nederlands (Nederland)
Internet Explorer Versie 11 (Standaardbrowser: IE)
Boot Modus: Normal
Handleiding voor Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processen (gefilterd) =================

(Als een item is opgenomen in de fixlist, het proces zal worden gesloten. Het bestand zal niet worden verplaatst.)

(HP) C:\Program Files (x86)\HP SimplePass\TrueSuiteService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(CrypKey (Canada) Ltd.) C:\Windows\System32\Crypserv.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
(Symantec Corporation) C:\Program Files\Norton Security\Engine\22.9.1.12\ns.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
() C:\Windows\System32\valWBFPolicyService.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
() C:\Program Files\Hewlett-Packard\HP LaunchBox\HPTaskBar1.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP LaunchBox\HPTaskBar2.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(OrdinarySoft) C:\Program Files\Start Menu X\StartMenuX.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
() C:\Program Files (x86)\HP SimplePass\IEWebSiteLogon.exe
(Symantec Corporation) C:\Program Files\Norton Security\Engine\22.9.1.12\ns.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Nikon Corporation) C:\Program Files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
Kon geen toegng krijgen tot proces -> OUTLOOK.EXE
(AuthenTec Inc.) C:\Program Files (x86)\HP SimplePass\TouchControl.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
(Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
Kon geen toegng krijgen tot proces -> SDUpdate.exe

==================== Register (gefilterd) ====================

(Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.)

HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1664000 2013-09-15] (IDT, Inc.)
HKLM\...\Run: [SetDefault] => C:\Program Files\Hewlett-Packard\HP LaunchBox\SetDefault.exe [44880 2011-12-20] (Hewlett-Packard Development Company, L.P.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2874168 2013-05-25] (Synaptics Incorporated)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-02-05] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [303928 2017-03-22] (Apple Inc.)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes)
HKLM-x32\...\Run: [Easybits Recovery] => C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [61112 2011-09-15] (EasyBits Software AS)
HKLM-x32\...\Run: [HPOSD] => C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [379960 2011-08-19] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [HPConnectionManager] => C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [103992 2011-09-13] (Hewlett-Packard Development Company L.P.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [67896 2017-05-09] (Apple Inc.)
HKLM-x32\...\Run: [HP Quick Launch] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [581024 2012-09-07] (Hewlett-Packard Development Company, L.P.)
HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1185112 2010-04-02] (CANON INC.)
HKLM-x32\...\Run: [Nikon Message Center 2] => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [570880 2013-12-27] (Nikon Corporation)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [HTC Sync Loader] => C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe [659456 2013-09-03] ()
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2086240 2015-04-28] (Wondershare)
HKLM-x32\...\Run: [beid] => "C:\Program Files (x86)\Belgium Identity Card\beid35gui.exe" /startup
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\WINDOWS\SYSTEM32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKU\S-1-5-21-1525629705-3174260069-1332774312-1001\...\Run: [StartMenuX] => C:\Program Files\Start Menu X\StartMenuX.exe [7673664 2013-11-20] (OrdinarySoft)
HKU\S-1-5-21-1525629705-3174260069-1332774312-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2017-05-09] (Apple Inc.)
HKU\S-1-5-21-1525629705-3174260069-1332774312-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [67896 2017-05-09] (Apple Inc.)
HKU\S-1-5-21-1525629705-3174260069-1332774312-1001\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1421736 2017-03-28] (Garmin Ltd. or its subsidiaries)
HKU\S-1-5-21-1525629705-3174260069-1332774312-1001\...\Run: [Google+ Auto Backup] => C:\Users\serjo\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe [3619096 2014-01-06] (Google Inc.)
HKU\S-1-5-21-1525629705-3174260069-1332774312-1001\...\Policies\system: [DisableChangePassword] 0
HKU\S-1-5-21-1525629705-3174260069-1332774312-1001\...\Policies\system: [DisableLockWorkstation] 0
HKU\S-1-5-21-1525629705-3174260069-1332774312-1001\...\MountPoints2: {454fa4c1-0736-11e2-bd34-806e6f6e6963} - "E:\SETUP.EXE" 
HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1421736 2017-03-28] (Garmin Ltd. or its subsidiaries)
HKU\S-1-5-18\...\RunOnce: [SpUninstallDeleteDir] => rmdir /s /q "\SearchProtect"
AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [166568 2014-05-20] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [146480 2014-05-20] (NVIDIA Corporation)
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll [52920 2012-09-25] (EasyBits Software Corp.)
ShellIconOverlayIdentifiers: [  OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files\Norton Security\Engine\22.9.1.12\buShell.dll [2017-03-16] (Symantec Corporation)
ShellIconOverlayIdentifiers: [  OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files\Norton Security\Engine\22.9.1.12\buShell.dll [2017-03-16] (Symantec Corporation)
ShellIconOverlayIdentifiers: [  OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files\Norton Security\Engine\22.9.1.12\buShell.dll [2017-03-16] (Symantec Corporation)
ShellIconOverlayIdentifiers-x32: [  OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files\Norton Security\Engine32\22.9.1.12\buShell.dll [2017-03-16] (Symantec Corporation)
ShellIconOverlayIdentifiers-x32: [  OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files\Norton Security\Engine32\22.9.1.12\buShell.dll [2017-03-16] (Symantec Corporation)
ShellIconOverlayIdentifiers-x32: [  OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files\Norton Security\Engine32\22.9.1.12\buShell.dll [2017-03-16] (Symantec Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk [2014-11-15]
ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Nikon Monitor.lnk [2014-05-09]
ShortcutTarget: Nikon Monitor.lnk -> C:\Program Files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe (Nikon Corporation)
GroupPolicy\User: Restrictie <======= AANDACHT

==================== Internet (gefilterd) ====================

(Als een item is opgenomen in de fixlist, als het een registry item is wordt verwijderd of hersteld naar de standaard.)

Tcpip\Parameters: [DhcpNameServer] 195.130.130.4 195.130.131.4
Tcpip\..\Interfaces\{269AF76D-8A04-43E0-8BF7-09FB3B2F301A}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{3CC6DAFB-8611-4BF5-91A0-433653743741}: [DhcpNameServer] 195.130.130.4 195.130.131.4
Tcpip\..\Interfaces\{80CC384D-6F51-4811-849F-D3E77D36F90F}: [DhcpNameServer] 195.130.130.4 195.130.131.4

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com?pc=HPNTDF
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.bing.com?pc=HPNTDF
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 
HKU\S-1-5-21-1525629705-3174260069-1332774312-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.be/
URLSearchHook: HKLM-x32 - (Geen Naam) - {07364a98-eb02-4736-bc54-ebe437fccb87} - Geen bestand
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
SearchScopes: HKLM -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://uk.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM -> {CF546A9F-0012-40A2-B46D-7350201872E5} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://en.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/1553-111073-34115-4/4?mpre=hxxp://www.befr.ebay.be/sch/i.html?_nkw={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://uk.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKLM-x32 -> {CF546A9F-0012-40A2-B46D-7350201872E5} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://en.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKLM-x32 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/1553-111073-34115-4/4?mpre=hxxp://www.befr.ebay.be/sch/i.html?_nkw={searchTerms}
SearchScopes: HKU\S-1-5-21-1525629705-3174260069-1332774312-1001 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={sear
SearchScopes: HKU\S-1-5-21-1525629705-3174260069-1332774312-1001 -> {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = hxxps://nortonsafe.search.ask.com/web?q={searchTerms}&o=APN11913&l=dis&prt=NS&chn=1000&geo=BE&ver=22.9.1.12&locale=nl_BE&guid=17784AF5-C2F0-4863-89AA-9AADDB361662&doi=2016-09-01&gct=kwd&qsrc=2869
SearchScopes: HKU\S-1-5-21-1525629705-3174260069-1332774312-1001 -> {b7fca997-d0fb-4fe0-8afd-255e89cf9671} URL = hxxp://uk.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=chr-hp-psg&type=HPNTDF
SearchScopes: HKU\S-1-5-21-1525629705-3174260069-1332774312-1001 -> {CF546A9F-0012-40A2-B46D-7350201872E5} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk3-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-1525629705-3174260069-1332774312-1001 -> {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = hxxp://en.wikipedia.org/wiki/Special:Search?search={searchTerms}
SearchScopes: HKU\S-1-5-21-1525629705-3174260069-1332774312-1001 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL = hxxp://rover.ebay.com/rover/1/1553-111073-34115-4/4?mpre=hxxp://www.befr.ebay.be/sch/i.html?_nkw={searchTerms}
BHO: SnagIt Toolbar Loader -> {00C6482D-C502-44C8-8409-FCE54AD9C208} -> C:\Program Files (x86)\TechSmith\Snagit 9\DLLx64\SnagitBHO64.dll [2009-10-15] (TechSmith Corporation)
BHO: Norton Identity Safety -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files\Norton Security\Engine\22.9.1.12\coIEPlg.dll [2017-03-16] (Symantec Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2016-07-21] (HP Inc.)
BHO-x32: SnagIt Toolbar Loader -> {00C6482D-C502-44C8-8409-FCE54AD9C208} -> C:\Program Files (x86)\TechSmith\Snagit 9\SnagitBHO.dll [2009-10-15] (TechSmith Corporation)
BHO-x32: Geen Naam -> {07364a98-eb02-4736-bc54-ebe437fccb87} -> Geen bestand
BHO-x32: Norton Identity Safety -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files\Norton Security\Engine32\22.9.1.12\coIEPlg.dll [2017-03-16] (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> C:\Program Files (x86)\Norton 360\Engine\21.7.0.11\IPS\IPSBHO.DLL => Geen bestand
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\ssv.dll [2017-02-16] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-02-16] (Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2016-07-21] (HP Inc.)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Security\Engine\22.9.1.12\coIEPlg.dll [2017-03-16] (Symantec Corporation)
Toolbar: HKLM-x32 - Snagit - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files (x86)\TechSmith\Snagit 9\SnagitIEAddin.dll [2009-10-15] (TechSmith Corporation)
Toolbar: HKLM-x32 - Geen Naam - {07364a98-eb02-4736-bc54-ebe437fccb87} -  Geen bestand
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Security\Engine32\22.9.1.12\coIEPlg.dll [2017-03-16] (Symantec Corporation)
Toolbar: HKU\S-1-5-21-1525629705-3174260069-1332774312-1001 -> Geen Naam - {07364A98-EB02-4736-BC54-EBE437FCCB87} -  Geen bestand
Toolbar: HKU\S-1-5-21-1525629705-3174260069-1332774312-1001 -> Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Security\Engine\22.9.1.12\coIEPlg.dll [2017-03-16] (Symantec Corporation)
DPF: HKLM-x32 {02BCC737-B171-4746-94C9-0D8A0B2C0089} hxxp://office.microsoft.com/_layouts/ClientBin/ieawsdc32.cab
DPF: HKLM-x32 {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
DPF: HKLM-x32 {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
DPF: HKLM-x32 {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} hxxp://h20614.www2.hp.com/ediags/gmd/Install/Cab/hpdetect1263.cab
DPF: HKLM-x32 {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} hxxp://content.systemrequirementslab.com/bin/srldetect_intel_4.5.24.0.cab

FireFox:
========
FF ProfilePath: C:\Users\serjo\AppData\Roaming\Mozilla\Firefox\Profiles\9n54sye2.default [2017-05-15]
FF Homepage: Mozilla\Firefox\Profiles\9n54sye2.default -> hxxp://search.norton.com/?prt=NSBU&chn=1000&geo=BE&ver=22&locale=nl_BE&doi=2016-10-22&guid=17784AF5-C2F0-4863-89AA-9AADDB361662
FF Extension: (Belgium eID) - C:\Users\serjo\AppData\Roaming\Mozilla\Firefox\Profiles\9n54sye2.default\Extensions\belgiumeid@eid.belgium.be.xpi [2017-02-05]
FF ProfilePath: C:\Users\serjo\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\zlaoqzn5.default [2015-03-04]
FF Extension: (CSS Stylesheet Editor) - C:\Users\serjo\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\zlaoqzn5.default\Extensions\csseditor@bluegriffon.com.xpi [2013-10-13] [ niet getekend]
FF Extension: (EyeDropper) - C:\Users\serjo\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\zlaoqzn5.default\Extensions\eyedropper@bluegriffon.com.xpi [2013-10-13] [ niet getekend]
FF Extension: (FontSquirrel Manager) - C:\Users\serjo\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\zlaoqzn5.default\Extensions\fs@bluegriffon.com.xpi [2013-10-13] [ niet getekend]
FF Extension: (Fullscreen) - C:\Users\serjo\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\zlaoqzn5.default\Extensions\fullscreen@bluegriffon.com.xpi [2013-10-13] [ niet getekend]
FF Extension: (Google Font Directory Manager) - C:\Users\serjo\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\zlaoqzn5.default\Extensions\gfd@bluegriffon.com.xpi [2013-10-13] [ niet getekend]
FF Extension: (Czech (CZ) Language Pack) - C:\Users\serjo\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\zlaoqzn5.default\Extensions\langpack-cs@bluegriffon.org.xpi [2013-10-13] [ niet getekend]
FF Extension: (Deutsch (DE) Language Pack) - C:\Users\serjo\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\zlaoqzn5.default\Extensions\langpack-de@bluegriffon.org.xpi [2013-10-13] [ niet getekend]
FF Extension: (English (US) Language Pack) - C:\Users\serjo\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\zlaoqzn5.default\Extensions\langpack-en-US@bluegriffon.org.xpi [2013-10-13] [ niet getekend]
FF Extension: (Español (España) Language Pack) - C:\Users\serjo\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\zlaoqzn5.default\Extensions\langpack-es-ES@bluegriffon.org.xpi [2013-10-13] [ niet getekend]
FF Extension: (Suomenkielinen (FI) Language Pack) - C:\Users\serjo\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\zlaoqzn5.default\Extensions\langpack-fi@bluegriffon.org.xpi [2013-10-13] [ niet getekend]
FF Extension: (Français Language Pack) - C:\Users\serjo\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\zlaoqzn5.default\Extensions\langpack-fr@bluegriffon.org.xpi [2013-10-13] [ niet getekend]
FF Extension: (Galego (España) Language Pack) - C:\Users\serjo\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\zlaoqzn5.default\Extensions\langpack-gl@bluegriffon.org.xpi [2013-10-13] [ niet getekend]
FF Extension: (Hebrew (IL) Language Pack) - C:\Users\serjo\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\zlaoqzn5.default\Extensions\langpack-he@bluegriffon.org.xpi [2013-10-13] [ niet getekend]
FF Extension: (Magyar (HU) Language Pack) - C:\Users\serjo\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\zlaoqzn5.default\Extensions\langpack-hu@bluegriffon.org.xpi [2013-10-13] [ niet getekend]
FF Extension: (Italiano (IT) Language Pack) - C:\Users\serjo\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\zlaoqzn5.default\Extensions\langpack-it@bluegriffon.org.xpi [2013-10-13] [ niet getekend]
FF Extension: (Japanese Language Pack) - C:\Users\serjo\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\zlaoqzn5.default\Extensions\langpack-ja@bluegriffon.org.xpi [2013-10-13] [ niet getekend]
FF Extension: (Korean (KR) Language Pack) - C:\Users\serjo\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\zlaoqzn5.default\Extensions\langpack-ko@bluegriffon.org.xpi [2013-10-13] [ niet getekend]
FF Extension: (Nederlands (NL) Language Pack) - C:\Users\serjo\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\zlaoqzn5.default\Extensions\langpack-nl@bluegriffon.org.xpi [2013-10-13] [ niet getekend]
FF Extension: (Polski Language Pack) - C:\Users\serjo\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\zlaoqzn5.default\Extensions\langpack-pl@bluegriffon.org.xpi [2013-10-13] [ niet getekend]
FF Extension: (Slovenski jezik Language Pack) - C:\Users\serjo\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\zlaoqzn5.default\Extensions\langpack-sl@bluegriffon.org.xpi [2013-10-13] [ niet getekend]
FF Extension: (српски (sr) Language Pack) - C:\Users\serjo\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\zlaoqzn5.default\Extensions\langpack-sr@bluegriffon.org.xpi [2013-10-13] [ niet getekend]
FF Extension: (Svenska (SE) Language Pack) - C:\Users\serjo\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\zlaoqzn5.default\Extensions\langpack-sv-SE@bluegriffon.org.xpi [2013-10-13] [ niet getekend]
FF Extension: (Chinese Simplified (zh-CN) Language Pack) - C:\Users\serjo\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\zlaoqzn5.default\Extensions\langpack-zh-CN@bluegriffon.org.xpi [2013-10-13] [ niet getekend]
FF Extension: (Traditional Chinese (zh-TW) Language Pack) - C:\Users\serjo\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\zlaoqzn5.default\Extensions\langpack-zh-TW@bluegriffon.org.xpi [2013-10-13] [ niet getekend]
FF Extension: (MathML) - C:\Users\serjo\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\zlaoqzn5.default\Extensions\mathml@bluegriffon.com.xpi [2013-10-13] [ niet getekend]
FF Extension: (Opquast Accessibility First Step) - C:\Users\serjo\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\zlaoqzn5.default\Extensions\op1@bluegriffon.com.xpi [2013-10-13] [ niet getekend]
FF Extension: (Snippets) - C:\Users\serjo\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\zlaoqzn5.default\Extensions\snippets@bluegriffon.com.xpi [2013-10-13] [ niet getekend]
FF Extension: (SVG-edit) - C:\Users\serjo\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\zlaoqzn5.default\Extensions\svg-edit@googlegroups.com.xpi [2013-10-13] [ niet getekend]
FF Extension: (Table Layouts) - C:\Users\serjo\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\zlaoqzn5.default\Extensions\tablelayout@bluegriffon.com.xpi [2013-10-13] [ niet getekend]
FF Extension: (One-click Templates) - C:\Users\serjo\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\zlaoqzn5.default\Extensions\templatesManager@bluegriffon.com.xpi [2013-10-13] [ niet getekend]
FF Extension: (Thumbnailer) - C:\Users\serjo\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\zlaoqzn5.default\Extensions\thumbnailer@bluegriffon.com.xpi [2013-10-13] [ niet getekend]
FF Extension: (Tip of the Day) - C:\Users\serjo\AppData\Roaming\Disruptive Innovations SARL\BlueGriffon\Profiles\zlaoqzn5.default\Extensions\tipoftheday@bluegriffon.com.xpi [2013-10-13] [ niet getekend]
FF Extension: (Belgium eID) - C:\Program Files (x86)\Mozilla Firefox\extensions\belgiumeid@eid.belgium.be [2016-12-05] [ niet getekend]
FF Extension: (TrueSuite Website Logon) - C:\Program Files (x86)\Mozilla Firefox\distribution\bundles\websitelogon@truesuite.com [2016-12-05] [ niet getekend]
FF HKLM\...\Firefox\Extensions: [{8A0D66E3-1C08-49A6-8F6C-7E024029D199}] - C:\ProgramData\Norton\{78CA3BF0-9C3B-40e1-B46D-38C877EF059A}\NSM_3.6.3.24\coFFAddon => niet gevonden
FF HKLM\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NS_22.9.0.71\coFFAddon
FF Extension: (Norton Security Toolbar) - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NS_22.9.0.71\coFFAddon [2017-04-17]
FF HKLM-x32\...\Firefox\Extensions: [belgiumeid@eid.belgium.be] - C:\Program Files\Mozilla Firefox\extensions\belgiumeid@eid.belgium.be => niet gevonden
FF HKLM-x32\...\Firefox\Extensions: [{8A0D66E3-1C08-49A6-8F6C-7E024029D199}] - C:\ProgramData\Norton\{78CA3BF0-9C3B-40e1-B46D-38C877EF059A}\NSM_3.6.3.24\coFFAddon => niet gevonden
FF HKLM-x32\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NS_22.9.0.71\coFFAddon
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_25_0_0_171.dll [2017-05-09] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50906.0\npctrl.dll [2017-03-09] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_25_0_0_171.dll [2017-05-09] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll [2011-11-07] (Adobe Systems, Inc.)
FF Plugin-x32: @authentec.com/ffwloplugin -> C:\Program Files (x86)\HP SimplePass\npffwloplugin.dll [2013-06-07] ( HP)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-07-13] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-07-13] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-02-16] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-02-16] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50906.0\npctrl.dll [2017-03-09] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll [2017-03-25] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1525629705-3174260069-1332774312-1001: vasco.com/VascoCardReaderPlugin -> C:\Users\serjo\AppData\Roaming\VASCO\VascoCardReaderPlugin\3.2.3.4\npVascoCardReaderPlugin.dll [2014-10-27] (VASCO Data Security)
FF Plugin HKU\S-1-5-21-1525629705-3174260069-1332774312-1001: vasco.com/VascoCardReaderPlugin64 -> C:\Users\serjo\AppData\Roaming\VASCO\VascoCardReaderPlugin\3.2.3.4\npVascoCardReaderPlugin64.dll [2014-10-27] (VASCO Data Security)

Chrome: 
=======
CHR DefaultProfile: Default
CHR NewTab: Default ->  Not-active:"chrome-extension://gfoabcdjalmeenbjjngidappmppchblc/homePageRedirect.html", Not-active:"chrome-extension://clemcknnbdahjkkfgcbigljhgfajdcag/uno.html"
CHR DefaultSearchURL: Default -> hxxps://nortonsafe.search.ask.com/web?q={searchTerms}&o=APN11908
CHR DefaultSearchKeyword: Default -> NortonSafe
CHR DefaultSuggestURL: Default -> hxxps://ss-sym.search.ask.com/ss?q={searchTerms}&li=ff
CHR Profile: C:\Users\serjo\AppData\Local\Google\Chrome\User Data\Default [2017-05-09]
CHR Extension: (Google Slides) - C:\Users\serjo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-29]
CHR Extension: (Google Docs) - C:\Users\serjo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-29]
CHR Extension: (Google Drive) - C:\Users\serjo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-02-26]
CHR Extension: (YouTube) - C:\Users\serjo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-02-26]
CHR Extension: (Norton Security Toolbar) - C:\Users\serjo\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjabmdjcfcfdmffimndhafhblfmpjdpe [2017-02-28]
CHR Extension: (Pinterest Tab) - C:\Users\serjo\AppData\Local\Google\Chrome\User Data\Default\Extensions\clemcknnbdahjkkfgcbigljhgfajdcag [2017-02-26]
CHR Extension: (Google Search) - C:\Users\serjo\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-29]
CHR Extension: (Google Sheets) - C:\Users\serjo\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-29]
CHR Extension: (Norton Home Page for Chrome) - C:\Users\serjo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gfoabcdjalmeenbjjngidappmppchblc [2017-05-09]
CHR Extension: (Google Docs Offline) - C:\Users\serjo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-02-26]
CHR Extension: (Norton Safe) - C:\Users\serjo\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbmobhkkblcgdifigjglcjneplefbkmh [2017-05-09]
CHR Extension: (Instant Translate: Select and Translate) - C:\Users\serjo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihmgiclibbndffejedjimfjmfoabpcke [2017-05-09]
CHR Extension: (Norton Identity Safe) - C:\Users\serjo\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2015-04-29]
CHR Extension: (Page Ruler) - C:\Users\serjo\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlpkojjdgbllmedoapgfodplfhcbnbpn [2017-02-26]
CHR Extension: (Website Logon) - C:\Users\serjo\AppData\Local\Google\Chrome\User Data\Default\Extensions\kanflfepiobnpjbljmngfgegijhdpljm [2015-04-29]
CHR Extension: (Chrome Web Store Payments) - C:\Users\serjo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-12]
CHR Extension: (Gmail) - C:\Users\serjo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-29]
CHR Extension: (Chrome Media Router) - C:\Users\serjo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-04-14]
CHR Profile: C:\Users\serjo\AppData\Local\Google\Chrome\User Data\Guest Profile [2017-02-26]
CHR Profile: C:\Users\serjo\AppData\Local\Google\Chrome\User Data\System Profile [2017-02-26]
CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files\Norton Security\Engine\22.9.1.12\Exts\Chrome.crx [2017-03-23]
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files\Norton Security\Engine\22.9.1.12\Exts\Chrome.crx [2017-03-23]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [kanflfepiobnpjbljmngfgegijhdpljm] - C:\Program Files (x86)\HP SimplePass\tschrome.crx [2013-04-01]
CHR HKLM-x32\...\Chrome\Extension: [napjheenlliimoedooldaalpjfidlidp] - <geen Path/update_url>

==================== Services (gefilterd) ====================

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [68096 2014-11-15] () [Bestand niet getekend]
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2017-03-17] (Apple Inc.)
S2 BcmBtRSupport; C:\WINDOWS\system32\BtwRSupportService.exe [2252504 2013-09-04] (Broadcom Corporation.)
R2 Crypkey License; C:\WINDOWS\SYSTEM32\crypserv.exe [122880 2008-05-08] (CrypKey (Canada) Ltd.) [Bestand niet getekend]
R2 FPLService; C:\Program Files (x86)\HP SimplePass\TrueSuiteService.exe [1641768 2013-06-07] (HP)
S2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [350576 2017-03-25] (WildTangent)
S2 Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [1099280 2017-03-28] (Garmin Ltd. or its subsidiaries)
R2 HPAuto; C:\Program Files\Hewlett-Packard\HP Auto\HPAuto.exe [682040 2011-02-16] (Hewlett-Packard)
S2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [33640 2017-04-07] (HP Inc.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Bestand niet getekend]
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [116104 2010-04-05] ()
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2013-07-13] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2013-07-13] (Intel Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes)
R2 MDM; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [Bestand niet getekend]
R2 NS; C:\Program Files\Norton Security\Engine\22.9.1.12\NS.exe [326160 2017-03-16] (Symantec Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-02-05] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16941856 2014-02-05] (NVIDIA Corporation)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] () [Bestand niet getekend]
S2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
S2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
S2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5702416 2015-09-11] (TeamViewer GmbH)
S3 TrueService; C:\Program Files\Common Files\AuthenTec\TrueService.exe [401856 2013-01-08] (AuthenTec, Inc.)
R2 valWBFPolicyService; C:\WINDOWS\system32\valWBFPolicyService.exe [28160 2012-09-06] () [Bestand niet getekend]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)
S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [X]
S2 HPSLPSVC; C:\Users\serjo\AppData\Local\Temp\7zS2226\hpslpsvc64.dll [X] <==== AANDACHT

===================== Drivers (gefilterd) ======================

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

R3 bcbtums; C:\WINDOWS\system32\drivers\bcbtums.sys [170712 2013-09-04] (Broadcom Corporation.)
R1 BHDrvx64; C:\Program Files\Norton Security\NortonData\22.9.0.71\Definitions\BASHDefs\20170515.001\BHDrvx64.sys [1831064 2017-04-06] (Symantec Corporation)
S3 BTWDPAN; C:\WINDOWS\System32\DRIVERS\btwdpan.sys [89640 2011-05-21] (Broadcom Corporation.)
R1 ccSet_NS; C:\WINDOWS\system32\drivers\NSx64\1609010.00C\ccSetx64.sys [174240 2017-02-20] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [507032 2017-05-10] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [156824 2017-05-10] (Symantec Corporation)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [77440 2017-05-09] ()
U3 Ialpopt; geen ImagePath
R1 IDSVia64; C:\Program Files\Norton Security\NortonData\22.9.0.71\Definitions\IPSDefs\20170515.001\IDSvia64.sys [1054872 2017-05-08] (Symantec Corporation)
R2 MBAMChameleon; C:\WINDOWS\system32\drivers\MBAMChameleon.sys [187320 2017-05-16] (Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\system32\drivers\farflt.sys [113592 2017-05-16] (Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\drivers\mbam.sys [43968 2017-05-16] (Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [251832 2017-05-16] (Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\drivers\mwac.sys [93624 2017-05-16] (Malwarebytes)
R1 NetworkX; C:\WINDOWS\system32\ckldrv.sys [28664 2008-03-17] ()
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
S3 RSP2STOR; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [259688 2011-10-27] (Realtek Semiconductor Corp.)
S3 RSUSBCCID; C:\WINDOWS\system32\DRIVERS\RtsUCcid.sys [50176 2014-01-22] (Realtek Semiconductor Corp.)
S3 RSUSBCCID; C:\Windows\SysWOW64\DRIVERS\RtsUCcid.sys [50176 2014-01-22] (Realtek Semiconductor Corp.)
S3 RSUSBSTOR; C:\Windows\SysWOW64\Drivers\RtsUStor.sys [222720 2014-01-22] (Realtek Semiconductor Corp.)
S3 SmbDrv; C:\WINDOWS\system32\DRIVERS\Smb_driver.sys [20016 2011-10-14] (Synaptics Incorporated)
R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [43832 2013-05-25] (Synaptics Incorporated)
R1 SRTSP; C:\WINDOWS\System32\Drivers\NSx64\1609010.00C\SRTSP64.SYS [770200 2017-03-16] (Symantec Corporation)
R1 SRTSPX; C:\WINDOWS\system32\drivers\NSx64\1609010.00C\SRTSPX64.SYS [49312 2017-03-16] (Symantec Corporation)
R0 SymEFASI; C:\WINDOWS\System32\drivers\NSx64\1609010.00C\SYMEFASI64.SYS [1716896 2017-02-20] (Symantec Corporation)
S0 SymELAM; C:\WINDOWS\System32\drivers\NSx64\1609010.00C\SymELAM.sys [24616 2017-02-20] (Symantec Corporation)
R3 SymEvent; C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS [102608 2017-03-07] (Symantec Corporation)
R1 SymIRON; C:\WINDOWS\system32\drivers\NSx64\1609010.00C\Ironx64.SYS [291480 2017-02-20] (Symantec Corporation)
R1 SymNetS; C:\WINDOWS\System32\Drivers\NSx64\1609010.00C\SYMNETS.SYS [567512 2017-02-20] (Symantec Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\system32\DRIVERS\WirelessButtonDriver64.sys [31840 2016-03-21] (HP)
U3 idsvc; geen ImagePath
S3 NAVENG; \??\C:\Program Files\Norton Security\NortonData\22.9.0.71\Definitions\SDSDefs\20170307.007\NAVENG.SYS [X]
S3 NAVEX15; \??\C:\Program Files\Norton Security\NortonData\22.9.0.71\Definitions\SDSDefs\20170307.007\NAVEX15.SYS [X]

==================== NetSvcs (gefilterd) ===================

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)


==================== Een Maand Aangemaakt bestanden en mappen ========

(Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)

2017-05-16 19:11 - 2017-05-16 19:11 - 00000000 ____D C:\FRST
2017-05-16 19:08 - 2017-05-16 19:11 - 00000000 ____D C:\Users\serjo\Downloads\farbar
2017-05-16 19:08 - 2017-05-16 19:08 - 00000000 ____D C:\Users\serjo\Downloads\Nieuwe map
2017-05-16 19:04 - 2017-05-16 19:05 - 00000000 ____D C:\Users\serjo\Documents\malwarerapport
2017-05-16 18:37 - 2017-05-16 18:38 - 00093624 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-05-16 18:37 - 2017-05-16 18:37 - 00187320 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2017-05-16 18:37 - 2017-05-16 18:37 - 00113592 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2017-05-16 18:37 - 2017-05-16 18:37 - 00043968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-05-16 18:36 - 2017-05-16 18:36 - 00251832 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-05-16 18:36 - 2017-05-16 18:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-05-16 18:36 - 2017-05-16 18:36 - 00000000 ____D C:\Program Files\Malwarebytes
2017-05-16 18:36 - 2017-05-09 16:37 - 00077440 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-05-16 18:24 - 2017-05-16 18:24 - 00000000 ____D C:\Users\serjo\Downloads\mawarebytes
2017-05-16 00:34 - 2017-05-16 00:34 - 00000218 _____ C:\Users\serjo\AppData\Local\recently-used.xbel
2017-05-16 00:27 - 2017-05-16 00:27 - 00000000 ____D C:\WINDOWS\F94A63D79A61403B8F6F90B1BF77211A.TMP
2017-05-16 00:21 - 2017-05-16 00:21 - 00002753 _____ C:\Users\serjo\Desktop\Microsoft Office Outlook 2007.lnk
2017-05-15 23:34 - 2017-05-15 23:34 - 00011686 _____ C:\Users\serjo\Documents\malwarebytes scanrapport.txt
2017-05-15 23:07 - 2017-05-15 23:08 - 00000000 ____D C:\Users\serjo\Documents\hijackthis
2017-05-15 22:33 - 2017-05-15 22:33 - 00000000 ____D C:\WINDOWS\System32\Tasks\Apple
2017-05-15 22:33 - 2017-05-15 22:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2017-05-15 22:29 - 2017-05-15 22:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2017-05-15 22:27 - 2017-05-15 22:29 - 00000000 ____D C:\Program Files\iTunes
2017-05-15 22:27 - 2017-05-15 22:27 - 00000000 ____D C:\Program Files\iPod
2017-05-15 22:22 - 2017-05-15 22:22 - 00002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2017-05-15 19:59 - 2017-05-15 19:59 - 00262850 _____ C:\Users\serjo\Documents\adressen mei 2017.CSV
2017-05-15 19:32 - 2017-05-15 19:32 - 00001557 _____ C:\Users\serjo\Documents\adressen email.CSV
2017-05-15 19:18 - 2017-05-15 19:18 - 00238080 _____ C:\Users\serjo\Documents\contactpersonen outlook mei 2017.xls
2017-05-15 19:18 - 2017-05-15 19:18 - 00038446 _____ C:\Users\serjo\AppData\Roaming\Microsoft Excel 97-2003.ADR
2017-05-15 19:18 - 2017-05-15 19:18 - 00000028 _____ C:\WINDOWS\ODBC.INI
2017-05-14 10:01 - 2017-05-14 10:03 - 00000213 _____ C:\Users\serjo\Desktop\TELENET.url
2017-05-12 22:10 - 2017-05-12 22:10 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio
2017-05-12 19:10 - 2017-04-29 00:44 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-05-12 19:10 - 2017-04-29 00:44 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-05-12 07:54 - 2017-03-30 15:15 - 00875712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll
2017-05-12 07:54 - 2017-03-30 15:15 - 00869568 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll
2017-05-12 07:54 - 2017-03-30 15:15 - 00678592 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp120_clr0400.dll
2017-05-12 07:54 - 2017-03-30 15:15 - 00536768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp120_clr0400.dll
2017-05-10 16:54 - 2017-05-10 16:54 - 03249479 _____ C:\Users\serjo\Documents\fotografieren_von_drechselobjekten.pdf
2017-05-10 04:55 - 2017-04-28 23:15 - 07444824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-05-10 04:55 - 2017-04-26 16:06 - 04169216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2017-05-10 04:55 - 2017-04-16 12:23 - 02176584 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2017-05-10 04:55 - 2017-04-16 12:23 - 01662096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2017-05-10 04:55 - 2017-04-16 12:23 - 01063464 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2017-05-10 04:55 - 2017-04-16 12:18 - 01135288 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-05-10 04:55 - 2017-04-16 12:18 - 00803192 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2017-05-10 04:55 - 2017-04-16 11:07 - 01566032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2017-05-10 04:55 - 2017-04-16 11:07 - 01213792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2017-05-10 04:55 - 2017-04-16 11:07 - 00548032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2017-05-10 04:55 - 2017-04-16 11:05 - 00612096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2017-05-10 04:55 - 2017-04-16 10:54 - 00576512 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2017-05-10 04:55 - 2017-04-16 10:54 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2017-05-10 04:55 - 2017-04-16 10:51 - 02899456 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-05-10 04:55 - 2017-04-16 10:37 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2017-05-10 04:55 - 2017-04-16 10:36 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2017-05-10 04:55 - 2017-04-16 10:35 - 25741312 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-05-10 04:55 - 2017-04-16 10:18 - 05977600 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-05-10 04:55 - 2017-04-16 10:16 - 00862720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2017-05-10 04:55 - 2017-04-16 10:10 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2017-05-10 04:55 - 2017-04-16 10:03 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2017-05-10 04:55 - 2017-04-16 10:02 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2017-05-10 04:55 - 2017-04-16 10:01 - 00499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2017-05-10 04:55 - 2017-04-16 10:00 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2017-05-10 04:55 - 2017-04-16 10:00 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2017-05-10 04:55 - 2017-04-16 09:53 - 02290176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2017-05-10 04:55 - 2017-04-16 09:52 - 01033216 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2017-05-10 04:55 - 2017-04-16 09:49 - 20278272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-05-10 04:55 - 2017-04-16 09:47 - 00663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2017-05-10 04:55 - 2017-04-16 09:43 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2017-05-10 04:55 - 2017-04-16 09:40 - 00806912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2017-05-10 04:55 - 2017-04-16 09:40 - 00725504 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-05-10 04:55 - 2017-04-16 09:40 - 00378880 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2017-05-10 04:55 - 2017-04-16 09:37 - 02132992 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2017-05-10 04:55 - 2017-04-16 09:29 - 00073216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2017-05-10 04:55 - 2017-04-16 09:24 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2017-05-10 04:55 - 2017-04-16 09:23 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2017-05-10 04:55 - 2017-04-16 09:22 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2017-05-10 04:55 - 2017-04-16 09:22 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2017-05-10 04:55 - 2017-04-16 09:17 - 00880640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2017-05-10 04:55 - 2017-04-16 09:12 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2017-05-10 04:55 - 2017-04-16 09:10 - 15250944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-05-10 04:55 - 2017-04-16 09:10 - 00693248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2017-05-10 04:55 - 2017-04-16 09:10 - 00330752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2017-05-10 04:55 - 2017-04-16 09:08 - 04548608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-05-10 04:55 - 2017-04-16 09:08 - 02057216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2017-05-10 04:55 - 2017-04-16 09:04 - 03241472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-05-10 04:55 - 2017-04-16 09:02 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2017-05-10 04:55 - 2017-04-16 08:53 - 13661184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-05-10 04:55 - 2017-04-16 08:50 - 01544704 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-05-10 04:55 - 2017-04-16 08:40 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2017-05-10 04:55 - 2017-04-16 08:37 - 02767872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-05-10 04:55 - 2017-04-16 08:34 - 01314816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-05-10 04:55 - 2017-04-16 08:34 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2017-05-10 04:55 - 2017-04-10 00:00 - 01548640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-05-10 04:55 - 2017-04-10 00:00 - 00388448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2017-05-10 04:55 - 2017-04-08 01:20 - 01375960 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2017-05-10 04:55 - 2017-04-07 15:56 - 01094656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2017-05-10 04:55 - 2017-04-02 18:41 - 00684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2017-05-10 04:55 - 2017-04-02 18:41 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2017-05-10 04:55 - 2017-04-01 01:16 - 01968408 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2017-05-10 04:55 - 2017-03-31 23:59 - 01612504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2017-05-10 04:55 - 2017-03-13 18:38 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmitomi.dll
2017-05-10 04:55 - 2017-03-13 18:29 - 02609664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2017-05-10 04:55 - 2017-03-13 18:25 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmWmiPl.dll
2017-05-10 04:55 - 2017-03-13 18:13 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmitomi.dll
2017-05-10 04:55 - 2017-03-13 18:07 - 02170880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2017-05-10 04:55 - 2017-03-13 18:06 - 00236032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmWmiPl.dll
2017-05-10 04:55 - 2017-03-11 21:34 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2017-05-10 04:55 - 2017-03-11 21:32 - 00401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2017-05-10 04:55 - 2017-03-11 21:32 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2017-05-10 04:55 - 2017-03-11 20:49 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2017-05-10 04:55 - 2017-03-11 19:58 - 01437696 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-05-10 04:55 - 2017-03-11 19:54 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2017-05-10 04:55 - 2017-03-11 01:38 - 02017624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2017-05-10 04:55 - 2017-03-11 01:38 - 00275800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2017-05-10 04:55 - 2017-03-09 22:52 - 00293376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wisp.dll
2017-05-10 04:55 - 2017-03-09 21:17 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wisp.dll
2017-05-10 04:55 - 2017-03-08 04:44 - 00448285 _____ C:\WINDOWS\system32\ApnDatabase.xml
2017-05-09 18:20 - 2017-05-09 18:20 - 64796673 _____ C:\Users\serjo\Documents\387_fietsgids-west-vlaanderen.pdf
2017-05-05 08:50 - 2017-05-05 08:50 - 00000126 _____ C:\Users\serjo\Desktop\Andrew Hall, Woodturner - Hallwoodhats.Com.url
2017-05-03 15:29 - 2017-05-12 15:57 - 00000000 ____D C:\Users\serjo\Documents\Maria
2017-04-25 15:50 - 2017-04-25 15:50 - 00000114 _____ C:\Users\serjo\Desktop\Outdoorhotel und Restaurant in der Eifel bei Gerolstein.url
2017-04-24 16:39 - 2017-04-24 17:03 - 00000000 ____D C:\Users\serjo\Documents\mats londen
2017-04-22 17:41 - 2017-04-22 17:41 - 00013680 _____ C:\Users\serjo\Documents\brilletje.cdr

==================== Een Maand Gewijzigd bestanden en mappen ========

(Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)

2017-05-16 19:03 - 2013-01-08 13:02 - 00000000 ____D C:\Users\serjo\AppData\LocalLow\AuthenTec
2017-05-16 18:57 - 2014-03-05 19:37 - 00000000 ____D C:\Program Files (x86)\HP SimplePass
2017-05-16 18:41 - 2013-01-21 16:09 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1525629705-3174260069-1332774312-1001
2017-05-16 18:36 - 2013-10-16 12:21 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-05-16 18:36 - 2013-09-30 06:15 - 00338530 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-05-16 18:36 - 2013-09-30 05:59 - 00013936 _____ C:\WINDOWS\system32\perfh013.dat
2017-05-16 18:36 - 2013-09-30 05:59 - 00004630 _____ C:\WINDOWS\system32\perfc013.dat
2017-05-16 18:36 - 2013-08-22 15:36 - 00000000 ____D C:\WINDOWS\Inf
2017-05-16 18:35 - 2014-04-30 09:05 - 00000000 __RDO C:\Users\serjo\OneDrive
2017-05-16 18:32 - 2017-02-19 17:40 - 00000501 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics
2017-05-16 18:29 - 2013-08-22 16:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-05-16 08:49 - 2016-03-13 20:33 - 00000000 ____D C:\WINDOWS\System32\Tasks\Remediation
2017-05-16 00:38 - 2017-04-15 09:43 - 00000272 _____ C:\Users\serjo\Desktop\Cha Urushi Box by Studio KUKU - OEN Shop.url
2017-05-16 00:29 - 2014-03-03 20:53 - 00000000 ____D C:\Program Files (x86)\Stellar Phoenix Outlook PST Repair
2017-05-16 00:27 - 2013-10-16 12:48 - 00000000 ____D C:\WINDOWS\037F8C0EE8E1408FABB4FC4ABF947E1B.TMP
2017-05-15 23:35 - 2014-11-04 16:55 - 00000000 ____D C:\ProgramData\Ashampoo
2017-05-15 23:35 - 2013-11-26 16:11 - 00000000 ____D C:\Program Files (x86)\Serif__WebPlus
2017-05-15 23:35 - 2013-09-10 14:06 - 00000000 ____D C:\ProgramData\APN
2017-05-15 23:11 - 2013-08-20 14:16 - 00000000 ____D C:\Users\serjo\Desktop\opkuis
2017-05-15 22:27 - 2013-04-12 10:32 - 00000000 ____D C:\Program Files\Common Files\Apple
2017-05-15 19:59 - 2014-02-11 13:24 - 00038463 _____ C:\Users\serjo\AppData\Roaming\Door lijstscheidingstekens gescheiden waarden (Windows).ADR
2017-05-15 18:23 - 2013-01-08 15:03 - 00137192 _____ C:\Users\serjo\AppData\Local\GDIPFONTCACHEV1.DAT
2017-05-15 18:03 - 2016-07-24 11:25 - 00000346 _____ C:\WINDOWS\Tasks\HPCeeScheduleForserjo.job
2017-05-15 15:43 - 2013-01-09 21:06 - 00000000 ____D C:\Users\serjo\AppData\Local\CrashDumps
2017-05-14 09:59 - 2016-07-24 11:25 - 00003160 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForserjo
2017-05-12 23:21 - 2013-08-22 16:44 - 00518488 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-05-12 22:11 - 2014-05-19 18:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2017-05-12 22:10 - 2014-05-19 18:17 - 00000000 ____D C:\Program Files (x86)\Microsoft Works
2017-05-12 22:10 - 2013-11-05 00:10 - 00000000 ____D C:\Program Files (x86)\MSBuild
2017-05-12 22:10 - 2013-09-30 06:02 - 00000000 ____D C:\WINDOWS\ShellNew
2017-05-12 22:06 - 2009-07-14 04:34 - 00000478 _____ C:\WINDOWS\win.ini
2017-05-12 21:31 - 2014-03-03 20:53 - 00000445 _____ C:\CKINFO.TXT
2017-05-12 21:29 - 2014-03-03 20:53 - 10020920 _____ (Stellar Information Technology Pvt Ltd. ) C:\spopr.exe
2017-05-12 20:49 - 2013-08-22 15:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2017-05-12 19:08 - 2013-08-22 15:25 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM
2017-05-12 18:52 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2017-05-12 15:32 - 2013-04-02 13:26 - 00000000 ____D C:\Users\serjo\Desktop\fotovoltaïsche cellen
2017-05-12 14:16 - 2017-02-26 12:56 - 00002269 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-05-12 08:11 - 2016-05-06 16:33 - 00000229 _____ C:\Users\serjo\Desktop\■ SAPOREカッティングボード（小物） - Hiromatsu online shop.url
2017-05-12 08:09 - 2013-08-03 08:46 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-05-12 08:01 - 2013-01-10 19:21 - 156335152 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-05-12 08:01 - 2012-07-26 09:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-05-11 20:55 - 2014-01-31 13:54 - 00000020 ____H C:\ProgramData\PKP_DLev.DAT
2017-05-11 18:26 - 2015-01-21 11:52 - 00000000 ____D C:\Users\serjo\Documents\Corel User Files
2017-05-09 20:28 - 2015-08-10 10:17 - 00004398 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2017-05-09 20:27 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-05-09 20:27 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\Macromed
2017-05-09 08:18 - 2016-12-05 23:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-05-07 08:23 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\NDF
2017-05-06 14:45 - 2013-11-16 14:59 - 00000020 ____H C:\ProgramData\PKP_DLdu.DAT
2017-05-05 20:43 - 2016-12-22 14:14 - 00000000 ____D C:\Users\serjo\Documents\adressen
2017-05-04 18:06 - 2017-04-12 20:08 - 00000000 ____D C:\Users\serjo\Documents\1 PPP 70 JAAR LTSH
2017-05-04 17:54 - 2017-01-13 18:59 - 00006656 _____ C:\Users\serjo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2017-05-04 14:32 - 2015-01-05 09:48 - 00004476 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2017-04-29 15:52 - 2013-03-03 08:59 - 00000000 ____D C:\Users\serjo\Documents\HOUTDRAAIEN
2017-04-29 00:10 - 2017-02-26 12:55 - 00003488 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2017-04-29 00:10 - 2017-02-26 12:55 - 00003360 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2017-04-27 18:23 - 2013-10-10 12:01 - 00000000 ____D C:\Users\serjo\AppData\Roaming\FileZilla
2017-04-27 18:00 - 2013-11-16 15:02 - 00000020 ____H C:\ProgramData\PKP_DLdw.DAT
2017-04-25 17:50 - 2013-11-05 16:50 - 00000000 ____D C:\ProgramData\CanonIJPLM
2017-04-23 10:23 - 2015-06-02 16:19 - 00000000 ____D C:\Users\serjo\Documents\vitos
2017-04-22 19:45 - 2013-01-23 16:08 - 00691200 ___SH C:\Users\serjo\Desktop\Thumbs.db
2017-04-17 21:11 - 2017-04-06 09:48 - 00000000 ____D C:\Users\serjo\AppData\Roaming\Audacity
2017-04-17 20:04 - 2014-01-31 13:54 - 00000020 ____H C:\ProgramData\PKP_DLet.DAT
2017-04-17 18:03 - 2013-03-14 09:46 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2017-04-17 18:03 - 2013-03-14 09:46 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2017-04-17 18:03 - 2012-07-26 10:12 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2017-04-17 17:53 - 2013-08-22 17:36 - 00000000 ___RD C:\WINDOWS\ToastData
2017-04-17 17:53 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Defender
2017-04-17 17:53 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files (x86)\Windows Defender

==================== Bestanden in de root van sommige mappen =======

2014-02-11 13:24 - 2017-05-15 19:59 - 0038463 _____ () C:\Users\serjo\AppData\Roaming\Door lijstscheidingstekens gescheiden waarden (Windows).ADR
2014-02-11 13:16 - 2014-02-11 13:16 - 0038434 _____ () C:\Users\serjo\AppData\Roaming\Door tabs gescheiden waarden (Windows).ADR
2013-11-16 14:59 - 2014-05-09 20:21 - 0000268 ___RH () C:\Users\serjo\AppData\Roaming\Drums
2013-11-16 15:02 - 2014-05-09 20:23 - 0000268 ___RH () C:\Users\serjo\AppData\Roaming\Echo
2014-01-31 13:54 - 2014-01-31 13:54 - 0000268 ___RH () C:\Users\serjo\AppData\Roaming\Enhance Tuning
2014-01-31 13:55 - 2014-01-31 13:55 - 0000268 ___RH () C:\Users\serjo\AppData\Roaming\Equalizer
2014-01-31 13:54 - 2014-01-31 13:54 - 0000268 ___RH () C:\Users\serjo\AppData\Roaming\Error Handlers
2014-01-31 15:13 - 2014-01-31 15:13 - 0000268 ___RH () C:\Users\serjo\AppData\Roaming\Limiter
2014-01-31 15:13 - 2014-01-31 15:13 - 0000268 ___RH () C:\Users\serjo\AppData\Roaming\Logs
2017-05-15 19:18 - 2017-05-15 19:18 - 0038446 _____ () C:\Users\serjo\AppData\Roaming\Microsoft Excel 97-2003.ADR
2013-01-23 14:53 - 2013-01-23 14:53 - 0026177 _____ () C:\Users\serjo\AppData\Roaming\UserTile.png
2017-01-13 18:59 - 2017-05-04 17:54 - 0006656 _____ () C:\Users\serjo\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-01-14 12:50 - 2016-01-14 12:50 - 0004096 ____H () C:\Users\serjo\AppData\Local\keyfile3.drm
2017-05-16 00:34 - 2017-05-16 00:34 - 0000218 _____ () C:\Users\serjo\AppData\Local\recently-used.xbel
2014-05-09 20:21 - 2014-05-09 20:21 - 0000268 ___RH () C:\ProgramData\Electric Clav
2014-05-09 20:23 - 2014-05-09 20:23 - 0000268 ___RH () C:\ProgramData\Enhance Timing
2014-05-09 20:21 - 2014-05-09 20:21 - 0000012 ___RH () C:\ProgramData\Examples
2014-01-31 13:54 - 2014-01-31 13:54 - 0000268 ___RH () C:\ProgramData\Extensions
2014-01-31 13:55 - 2014-01-31 13:55 - 0000268 ___RH () C:\ProgramData\External Build System
2014-01-31 13:54 - 2014-01-31 13:54 - 0000268 ___RH () C:\ProgramData\File Templates
2014-05-09 20:23 - 2014-05-09 20:23 - 0000012 ___RH () C:\ProgramData\Filesystems
2014-01-31 13:54 - 2014-01-31 13:54 - 0000012 ___RH () C:\ProgramData\Fonts
2014-01-31 13:55 - 2014-01-31 13:55 - 0000012 ___RH () C:\ProgramData\Frameworks
2014-01-31 13:54 - 2014-01-31 13:54 - 0000012 ___RH () C:\ProgramData\Funk Animals
2014-01-31 15:13 - 2014-01-31 15:13 - 0000268 ___RH () C:\ProgramData\MIDI Devices
2014-01-31 15:13 - 2014-01-31 15:13 - 0000268 ___RH () C:\ProgramData\MIDI Drivers
2014-01-31 15:09 - 2014-05-09 20:11 - 0000020 ____H () C:\ProgramData\PKP_DLbx.DAT
2014-01-31 15:13 - 2014-01-31 15:13 - 0000020 ____H () C:\ProgramData\PKP_DLck.DAT
2013-11-16 14:59 - 2017-05-06 14:45 - 0000020 ____H () C:\ProgramData\PKP_DLdu.DAT
2013-11-16 15:02 - 2017-04-27 18:00 - 0000020 ____H () C:\ProgramData\PKP_DLdw.DAT
2014-01-31 13:55 - 2014-01-31 13:55 - 0000020 ____H () C:\ProgramData\PKP_DLes.DAT
2014-01-31 13:54 - 2017-04-17 20:04 - 0000020 ____H () C:\ProgramData\PKP_DLet.DAT
2014-01-31 13:54 - 2017-05-11 20:55 - 0000020 ____H () C:\ProgramData\PKP_DLev.DAT
2014-01-31 15:13 - 2014-01-31 15:13 - 0000012 ___RH () C:\ProgramData\String Comparison
2014-01-31 15:13 - 2014-01-31 15:13 - 0000012 ___RH () C:\ProgramData\Strings

Sommige bestanden in TEMP:
====================
2014-03-09 14:00 - 2013-06-04 10:30 - 0050432 ____R () C:\Users\serjo\AppData\Local\Temp\Extract.exe
2014-05-19 18:11 - 2006-11-13 17:22 - 0145184 ____R (Microsoft Corporation) C:\Users\serjo\AppData\Local\Temp\ose00000.exe

==================== Bamital & volsnap ======================

(Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.)

C:\WINDOWS\system32\winlogon.exe => Bestand is getekend
C:\WINDOWS\system32\wininit.exe => Bestand is getekend
C:\WINDOWS\explorer.exe => Bestand is getekend
C:\WINDOWS\SysWOW64\explorer.exe => Bestand is getekend
C:\WINDOWS\system32\svchost.exe => Bestand is getekend
C:\WINDOWS\SysWOW64\svchost.exe => Bestand is getekend
C:\WINDOWS\system32\services.exe => Bestand is getekend
C:\WINDOWS\system32\User32.dll => Bestand is getekend
C:\WINDOWS\SysWOW64\User32.dll => Bestand is getekend
C:\WINDOWS\system32\userinit.exe => Bestand is getekend
C:\WINDOWS\SysWOW64\userinit.exe => Bestand is getekend
C:\WINDOWS\system32\rpcss.dll => Bestand is getekend
C:\WINDOWS\system32\dnsapi.dll => Bestand is getekend
C:\WINDOWS\SysWOW64\dnsapi.dll => Bestand is getekend
C:\WINDOWS\system32\Drivers\volsnap.sys => Bestand is getekend

LastRegBack: 2013-11-15 11:05

==================== Eind van FRST.txt ============================