Extra scanresultaten van Farbar Recovery Scan Tool (x64) Versie: 07-06-2017 01 Gestart door jonas (08-06-2017 20:11:27) Gestart vanaf D:\downloads\frst Windows 10 Home Versie 1703 (X64) (2017-04-18 05:19:03) Boot Modus: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-1444661948-3188908094-294470660-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-1444661948-3188908094-294470660-503 - Limited - Disabled) Gast (S-1-5-21-1444661948-3188908094-294470660-501 - Limited - Disabled) jonas (S-1-5-21-1444661948-3188908094-294470660-1001 - Administrator - Enabled) => C:\Users\jonas Lotje VdR (S-1-5-21-1444661948-3188908094-294470660-1014 - Limited - Enabled) => C:\Users\Lotje VdR ==================== Security Center ======================== (Als een item is opgenomen in de fixlist, zal het worden verwijderd.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Norton Security (Enabled - Up to date) {30744133-1E94-7B35-F4A3-82A5AEF1CBAA} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Norton Security (Enabled - Up to date) {8B15A0D7-38AE-74BB-CE13-B9D7D5768117} FW: Norton Security (Enabled) {084FC016-54FB-7A6D-DFFC-2B9050228CD1} ==================== Geïnstalleerde programma's ====================== (Alleen de adware-programma's met 'verborgen' vlag zou kunnen worden toegevoegd aan de fixlist om ze zichtbaar te maken. De adware-programma's moeten handmatig gedeinstallerd worden.) Adobe Flash Player 25 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 25.0.0.148 - Adobe Systems Incorporated) Audacity 2.1.3 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.3 - Audacity Team) Blend for Visual Studio 2012 (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden Blend for Visual Studio 2012 ENU resources (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden Blend for Visual Studio Add-in for Adobe FXG Import (x32 Version: 1.0.40218.0 - Microsoft Corporation) Hidden Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden Blend for Visual Studio SDK for Silverlight 5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden CyberLink Home Cinema 10 (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0 - CyberLink Corp.) CyberLink PhotoDirector 5 (Version: 5.0.5.6602 - CyberLink Corp.) Hidden CyberLink PowerDirector 12 (Version: 12.0.4118.0 - CyberLink Corp.) Hidden CyberLink PowerRecover (HKLM-x32\...\InstallShield_{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.7.0.4510 - CyberLink Corp.) CyberLink PowerRecover (Version: 5.7.0.4510 - CyberLink Corp.) Hidden D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Discord (HKU\S-1-5-21-1444661948-3188908094-294470660-1001\...\Discord) (Version: 0.0.297 - Hammer & Chisel, Inc.) Dolby Digital Plus Advanced Audio (HKLM\...\{B0BFC63F-EA07-419E-960B-3FB2ED5DD0B2}) (Version: 7.6.5.1 - Dolby Laboratories Inc) Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4521.29298 - PreEmptive Solutions) Hidden ELAN Touchpad 15.19.7.1_X64_WHQL (HKLM\...\Elantech) (Version: 15.19.7.1 - ELAN Microelectronic Corp.) Entity Framework Designer for Visual Studio 2012 - enu (HKLM-x32\...\{3F29268A-F53A-4387-9F2B-E9368A823178}) (Version: 11.1.30729.00 - Microsoft Corporation) FaceRig (HKLM\...\Steam App 274920) (Version: - Holotech Studios) FaceRig virtual audio driver version 1.0 (HKLM-x32\...\{D605CD1D-D626-4740-B657-86DC30723FCF}_is1) (Version: 1.0 - Adoriasoft LLC) FaceRig Virtual Video driver version 1.0.1.1000 (HKLM-x32\...\{7D6A1A0F-F57E-4C6B-9331-86CBC7D5C787}_is1) (Version: 1.0.1.1000 - Adoriasoft LLC) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 58.0.3029.110 - Google Inc.) Google Drive (HKLM-x32\...\{A1238426-ECDF-4639-BE2F-8D12A97AE23C}) (Version: 2.34.5075.1619 - Google, Inc.) Google Update Helper (x32 Version: 1.3.33.5 - Google Inc.) Hidden Hama Racing Wheel Thunder V5 (HKLM-x32\...\{AEC7CD2E-2BB5-40C3-9592-078F64677E6C}) (Version: 1.00.0000 - Ihr Firmenname) HD Tune 2.55 (HKLM-x32\...\HD Tune_is1) (Version: - EFD Software) IIS 8.0 Express (HKLM\...\{7BF61FA9-BDFB-4563-98AD-FCB0DA28CCC7}) (Version: 8.0.1557 - Microsoft Corporation) IIS Express Application Compatibility Database for x64 (HKLM\...\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb) (Version: - ) IIS Express Application Compatibility Database for x86 (HKLM\...\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb) (Version: - ) Intel(R) Chipset Device Software (x32 Version: 10.1.1.11 - Intel(R) Corporation) Hidden Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1162 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4352 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.6.0.1029 - Intel Corporation) Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1519.7 - Intel Corporation) Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{9A287643-10C5-4463-B9D1-B2404CE18CCF}) (Version: 17.1.1529.1620 - Intel Corporation) Intel® PROSet/Wireless Software (HKLM-x32\...\{e6f0207e-ac43-48a9-bfff-3d879b45694d}) (Version: 18.12.1 - Intel Corporation) Java 8 Update 131 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180131F0}) (Version: 8.0.1310.11 - Oracle Corporation) JavaScript Tooling (Version: 11.0.60315 - Microsoft Corporation) Hidden LEGO MINDSTORMS EV3 (HKLM-x32\...\LEGO_SW.{5B0CB826-E499-4E6B-94F0-75B6327ED934}) (Version: 1.0.0 - The LEGO Group) LEGO MINDSTORMS EV3 Home Content (x32 Version: 1.2.30 - The LEGO Group) Hidden LEGO MINDSTORMS EV3 Home Edition (x32 Version: 1.2.30 - The LEGO Group) Hidden LEGO MINDSTORMS EV3 Home Nederlandse ondersteuning (x32 Version: 1.2.30 - The LEGO Group) Hidden LEGO MINDSTORMS EV3 Uninstaller (x32 Version: 1.0.11 - The LEGO Group) Hidden LEGO MINDSTORMS NXT x64 Driver (HKLM\...\{A0831C28-A6FA-49A3-86AE-B5AE3C9EE19C}) (Version: 1.20.115.0 - LEGO) LMSOFT Web Creator Pro 6 (HKLM-x32\...\Web Creator Pro 6) (Version: - LMSOFT Inc.) LocalESPC (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden LocalESPCui for en-us (x32 Version: 8.59.25584 - Microsoft) Hidden LoiLo Game Recorder (HKLM\...\{89E4163C-BD19-45A9-BCEB-980741786799}_is1) (Version: 1.1.0.1 - LoiLo inc.) Malwarebytes versie 3.0.6.1469 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.6.1469 - Malwarebytes) Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{5CBFF3F3-2D40-34EE-BCA5-A95BC19E400D}) (Version: 4.5.50709 - Microsoft Corporation) Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{1948E039-EC79-4591-951D-9867A8C14C90}) (Version: 4.5.50709 - Microsoft Corporation) Microsoft ASP.NET MVC 3 (HKLM-x32\...\{D32EF103-4016-4C15-BCB0-700C0A7A2309}) (Version: 3.0.50813.0 - Microsoft Corporation) Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft ASP.NET Web Pages (HKLM-x32\...\{631471BE-DEAB-454B-A9AC-CE3EB42C28B3}) (Version: 1.0.20105.0 - Microsoft Corporation) Microsoft Help Viewer 2.0 (HKLM-x32\...\Microsoft Help Viewer 2.0) (Version: 2.0.50727 - Microsoft Corporation) Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-1444661948-3188908094-294470660-1001\...\OneDriveSetup.exe) (Version: 17.3.6816.0313 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50906.0 - Microsoft Corporation) Microsoft Silverlight 4 SDK (HKLM-x32\...\{189AEA94-DAFB-487A-8CEE-F9D3DDE0A748}) (Version: 4.0.60310.0 - Microsoft Corporation) Microsoft Silverlight 5 SDK (HKLM-x32\...\{E1FBB3D4-ADB0-4949-B101-855DA061C735}) (Version: 5.0.61118.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{9D573E71-1077-4C7E-B4DB-4E22A5D2B48B}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework (HKLM\...\{36E619BC-A234-4EC3-849B-779A7C865A45}) (Version: 11.0.2316.0 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework (HKLM-x32\...\{FBA6F90E-36EC-4FC9-9B25-3834E3BD46A8}) (Version: 11.0.2316.0 - Microsoft Corporation) Microsoft SQL Server 2012 Express LocalDB (HKLM\...\{13D558FE-A863-402C-B115-160007277033}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects (HKLM-x32\...\{DA1C1761-5F4F-4332-AB9D-29EDF3F8EA0A}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects (x64) (HKLM\...\{FA0A244E-F3C2-4589-B42A-3D522DE79A42}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Native Client (HKLM\...\{49D665A2-4C2A-476E-9AB8-FCC425F526FC}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Transact-SQL Compiler Service (HKLM\...\{BEB0F91E-F2EA-48A1-B938-7857ABF2A93D}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Transact-SQL ScriptDom (HKLM\...\{0E8670B8-3965-4930-ADA6-570348B67153}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 T-SQL Language Service (HKLM-x32\...\{6D6D43E5-218C-4B05-92D3-2240810F4760}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation) Microsoft SQL Server Data Tools - enu (11.1.20627.00) (HKLM-x32\...\{FA804794-2CCB-4301-954F-2C2894698876}) (Version: 11.1.20627.00 - Microsoft Corporation) Microsoft SQL Server Data Tools Build Utilities - enu (11.1.20627.00) (HKLM-x32\...\{790E9425-8570-493F-9AE7-81AFC9E46930}) (Version: 11.1.20627.00 - Microsoft Corporation) Microsoft SQL Server System CLR Types (HKLM-x32\...\{A47FD1BF-A815-4A76-BE65-53A15BD5D25D}) (Version: 10.50.1600.1 - Microsoft Corporation) Microsoft SQL Server System CLR Types (x64) (HKLM\...\{4701DEDE-1888-49E0-BAE5-857875924CA2}) (Version: 10.50.1600.1 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{E2082604-4BA5-44BB-BBFB-AF0F3CB8C6AB}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{F1949145-EB64-4DE7-9D81-E6D27937146C}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{4549ceb8-695a-42eb-a183-4820d542a15f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918 (HKLM-x32\...\{dab68466-3a7d-41a8-a5cf-415e3ff8ef71}) (Version: 14.0.23918.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM-x32\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Microsoft Visual Studio Professional 2012 (HKLM-x32\...\{c93c1c16-fd12-4b07-8926-2a4af46b6597}) (Version: 11.0.50727.26 - Microsoft Corporation) Microsoft Web Deploy 3.5 (HKLM\...\{3674F088-9B90-473A-AAC3-20A00D8D810C}) (Version: 3.1237.1762 - Microsoft Corporation) Microsoft Web Deploy dbSqlPackage Provider - enu (HKLM-x32\...\{E4C33F5B-1B2F-466E-957E-B274F08151A0}) (Version: 10.3.20225.0 - Microsoft Corporation) Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang) MIT App Inventor Tools 2.3.0 (HKLM-x32\...\MIT App Inventor Tools) (Version: 2.3.0 - Massachusetts Institute of Technology) MouseMote Server version 1.7 (HKLM-x32\...\{3FAA4DAA-92F3-4C0B-9392-5FA4D227F15D}_is1) (Version: 1.7 - MouseMote) Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Mozilla Firefox 53.0.3 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 53.0.3 (x86 en-US)) (Version: 53.0.3 - Mozilla) MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation) NI .NET Framework 4.0 (x32 Version: 4.01.49154 - National Instruments) Hidden NI EulaDepot (x32 Version: 3.20.363 - National Instruments) Hidden NI MDF Support (x32 Version: 3.20.363 - National Instruments) Hidden NI Security Update (KB 67L8LCQW) (64-bit) (Version: 1.0.29.0 - National Instruments) Hidden NI Security Update (KB 67L8LCQW) (x32 Version: 1.0.29.0 - National Instruments) Hidden NI Uninstaller (x32 Version: 3.20.363 - National Instruments) Hidden NI VC2008MSMs x64 (Version: 9.0.401 - National Instruments) Hidden NI VC2008MSMs x86 (x32 Version: 9.0.401 - National Instruments) Hidden Nightbot (HKLM-x32\...\{c59fdb2c-3f60-4455-b0a8-c45b5aee5447}_is1) (Version: 0.0.4 - NightDev, LLC) Norton Security (HKLM-x32\...\NS) (Version: 22.9.3.13 - Symantec Corporation) OBS Studio (HKLM-x32\...\OBS Studio) (Version: 18.0.1 - OBS Project) OMSI 2 (HKLM\...\Steam App 252530) (Version: - MR-Software GbR) OpenAL (HKLM-x32\...\OpenAL) (Version: - ) paint.net (HKLM\...\{1F895C18-6A2F-4A9E-BBE9-246783070F37}) (Version: 4.0.16 - dotPDN LLC) PreEmptive Analytics Visual Studio Components (x32 Version: 1.0.2180.1 - PreEmptive Solutions) Hidden Prerequisites for SSDT (HKLM-x32\...\{9169C939-ED01-446A-BD0C-29873BAF4E48}) (Version: 11.0.2100.60 - Microsoft Corporation) Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.10163.31215 - Realtek Semiconductor Corp.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.2.703.2015 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7622 - Realtek Semiconductor Corp.) Restream Chat (HKU\S-1-5-21-1444661948-3188908094-294470660-1001\...\5574fe55cba0ac1f) (Version: 2.2.1.35 - Restream.io) ROBLOX Player for jonas (HKU\S-1-5-21-1444661948-3188908094-294470660-1001\...\{373B1718-8CC5-4567-8EE2-9033AD08A680}) (Version: - ROBLOX Corporation) ROBLOX Studio for jonas (HKU\S-1-5-21-1444661948-3188908094-294470660-1001\...\{2922D6F1-2865-4EFA-97A9-94EEAB3AFA14}) (Version: - ROBLOX Corporation) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) Skype™ 7.33 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.33.105 - Skype Technologies S.A.) Software Inc. (HKLM\...\Steam App 362620) (Version: - Coredumping) Speccy (HKLM\...\Speccy) (Version: 1.30 - Piriform) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Taalpakket voor Microsoft Visual Studio 2010 Tools for Office Runtime (x64) - NLD (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - NLD) (Version: 10.0.50903 - Microsoft Corporation) Teach2000 versie 8.53 (HKLM-x32\...\Teach2000.7 XP - The Troolean Edition_is1) (Version: 8.53 - basement.nl) TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.78313 - TeamViewer) TreeSize Free V3.4.5 (HKLM-x32\...\TreeSize Free_is1) (Version: 3.4.5 - JAM Software) Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation) VideoPad Video Editor (HKLM-x32\...\VideoPad) (Version: 5.01 - NCH Software) Visual Studio 2012 Update 5 (KB2707250) (HKLM-x32\...\{6d052d71-b953-48cd-8a75-3462b00efeb7}) (Version: 11.0.61219 - Microsoft Corporation) WCF Data Services 5.0 (for OData v3) Primary Components (x32 Version: 5.0.50628.0 - Microsoft Corporation) Hidden WCF Data Services Tools for Microsoft Visual Studio 2012 (x32 Version: 5.0.50710.0 - Microsoft Corporation) Hidden WCF RIA Services V1.0 SP2 (HKLM-x32\...\{3A523AF9-D32F-4C85-8388-0335731F3405}) (Version: 4.1.61829.0 - Microsoft Corporation) Windows 10-upgradeassistent (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.17384 - Microsoft Corporation) Windows 7 Upgrade Advisor (HKLM-x32\...\{0DC66F25-C58F-40d3-86BC-CA29C6D99BF8}) (Version: 2.0.5000.0 - Microsoft Corporation) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation) WinRAR 5.40 beta 1 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.1 - win.rar GmbH) Wondershare Filmora(Build 8.2.2) (HKLM\...\Wondershare Filmora_is1) (Version: - Wondershare Software) Wondershare Helper Compact 2.5.2 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.5.2 - Wondershare) Xiph.Org Open Codecs 0.85.17777 (HKLM-x32\...\Open Codecs) (Version: 0.85.17777 - Xiph.Org) ==================== Aangepaste CLSID (gefilterd): ========================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) ==================== Geplande Taken (gefilterd) ============= (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) Task: {02711844-E041-4EEE-80EE-BFE5CF707DDA} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-07-13] (Google Inc.) Task: {16455EDF-6E97-4229-9E68-2EB3578FCD2D} - System32\Tasks\HPCeeScheduleForjonas => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2016-01-22] (Hewlett-Packard) Task: {484F658A-E32E-477A-B508-D53C79CF1C5A} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Security\Upgrade.exe [2017-05-11] (Symantec Corporation) Task: {7A57A8D8-7214-46A3-9804-FE1F433C76AC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-07-13] (Google Inc.) Task: {980DD91D-DB94-4AAA-A0BC-D44339992CA6} - System32\Tasks\Norton Security\Norton Security Error Processor => C:\Program Files (x86)\Norton Security\Engine\22.9.3.13\SymErr.exe [2017-05-11] (Symantec Corporation) Task: {A06AECE4-BD18-424C-A6AC-1A12D23417F7} - System32\Tasks\Norton Security\Norton Security Error Analyzer => C:\Program Files (x86)\Norton Security\Engine\22.9.3.13\SymErr.exe [2017-05-11] (Symantec Corporation) Task: {B1EF1864-1F20-4373-A229-FAB3C2C2E5D9} - System32\Tasks\Norton Security\Norton Security Autofix => C:\Program Files (x86)\Norton Security\Engine\22.9.3.13\SymErr.exe [2017-05-11] (Symantec Corporation) Task: {D40397AF-A918-43FB-829A-8D96534EA10C} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Security\Engine\22.9.3.13\WSCStub.exe [2017-05-11] (Symantec Corporation) (Als een item is opgenomen in de fixlist, de taak (job) bestand wordt verplaatst. Het bestand dat wordt uitgevoerd door de taak zal niet worden verplaatst.) Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe Task: C:\WINDOWS\Tasks\HPCeeScheduleForjonas.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe ==================== Snelkoppelingen ============================= (De items kunnen worden opgenomen in de fixlist.txt om hersteld of verwijderd te worden.) Shortcut: C:\Users\jonas\Favorites\NCH Software Download Site.lnk -> hxxp://www.nchsoftware.com/index.htm ==================== Geladen Modules (gefilterd) ============== 2016-01-21 06:37 - 2014-04-14 20:59 - 00389896 _____ () C:\Program Files\CyberLink\Shared files\RichVideo64.exe 2017-04-06 12:34 - 2017-03-24 04:09 - 02271520 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll 2017-03-18 22:58 - 2017-03-18 22:58 - 00138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll 2017-03-18 22:59 - 2017-03-20 05:56 - 01731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll ==================== Alternate Data Streams (gefilterd) ========= (Als een item is opgenomen in de fixlist, alleen de ADS wordt verwijderd.) ==================== Veilige Modus (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. De "AlternateShell" waarde wordt hersteld.) ==================== Bestandskoppeling (gefilterd) =============== (Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd.) ==================== Internet Explorer vertrouwde/beperkte toegang =============== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd.) IE trusted site: HKU\S-1-5-21-1444661948-3188908094-294470660-1001\...\amazon.com -> hxxps://amazon.com ==================== Hosts inhoud: =============================== (Als nodig Hosts: opdracht kan worden opgenomen in de fixlist om Hosts te resetten.) 2015-10-30 09:24 - 2017-04-23 18:37 - 00000736 _____ C:\WINDOWS\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Andere gebieden ============================ (Momenteel is er geen automatische fix voor dit onderdeel.) HKU\S-1-5-21-1444661948-3188908094-294470660-1001\Control Panel\Desktop\\Wallpaper -> c:\users\jonas\appdata\local\packages\microsoft.windows.photos_8wekyb3d8bbwe\localstate\photosappbackground\{5c6c78ef-7801-496b-8d23-6e552d29780e}.png DNS Servers: 195.130.130.4 - 195.130.131.4 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is uitgeschakeld. ==================== MSCONFIG/TASK MANAGER Uitgeschakelde items == HKLM\...\StartupApproved\Run: => "SecurityHealth" HKLM\...\StartupApproved\Run: => "GoPro Tray App" HKLM\...\StartupApproved\Run: => "Wondershare Helper Compact.exe" HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0" HKLM\...\StartupApproved\Run: => "Malwarebytes TrayApp" HKLM\...\StartupApproved\Run: => "EvtMgr6" HKLM\...\StartupApproved\Run32: => "CLMLServer_For_P2G8" HKLM\...\StartupApproved\Run32: => "CLVirtualDrive" HKLM\...\StartupApproved\Run32: => "PowerDVD12Agent" HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe" HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud" HKLM\...\StartupApproved\Run32: => "InstallValidator.exe.FA87EC44_C38F_4148_93A1_FF4A64A2B707" HKU\S-1-5-21-1444661948-3188908094-294470660-1001\...\StartupApproved\StartupFolder: => "MEGAsync.lnk" HKU\S-1-5-21-1444661948-3188908094-294470660-1001\...\StartupApproved\StartupFolder: => "Adobe Gamma.lnk" HKU\S-1-5-21-1444661948-3188908094-294470660-1001\...\StartupApproved\Run: => "GoogleDriveSync" HKU\S-1-5-21-1444661948-3188908094-294470660-1001\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-1444661948-3188908094-294470660-1001\...\StartupApproved\Run: => "Skype" HKU\S-1-5-21-1444661948-3188908094-294470660-1001\...\StartupApproved\Run: => "Steam" HKU\S-1-5-21-1444661948-3188908094-294470660-1001\...\StartupApproved\Run: => "Speech Recognition" HKU\S-1-5-21-1444661948-3188908094-294470660-1001\...\StartupApproved\Run: => "uTorrent" HKU\S-1-5-21-1444661948-3188908094-294470660-1001\...\StartupApproved\Run: => "Discord" HKU\S-1-5-21-1444661948-3188908094-294470660-1001\...\StartupApproved\Run: => "CCleaner Monitoring" HKU\S-1-5-21-1444661948-3188908094-294470660-1001\...\StartupApproved\Run: => "f.lux" HKU\S-1-5-21-1444661948-3188908094-294470660-1001\...\StartupApproved\Run: => "257976BCD6ABB66B0873DE70C111740A0043EF2D._service_run" HKU\S-1-5-21-1444661948-3188908094-294470660-1001\...\StartupApproved\Run: => "BuildNotification" ==================== Firewall regels (gefilterd) =============== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) FirewallRules: [{AC0AD3A3-8C1A-4266-96BA-CB256D61E0F0}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe FirewallRules: [{465FB283-FF1D-47F1-B275-BC678CB23CFC}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe FirewallRules: [{A57E4B88-2D95-4143-8A3C-42F6FC861FF0}] => (Allow) C:\Users\jonas\AppData\Local\Apowersoft\Online Video Converter\Online Video Converter.exe FirewallRules: [{10205131-65E1-4906-8C56-0B003913621E}] => (Allow) C:\Users\jonas\AppData\Local\Apowersoft\Online Video Converter\Online Video Converter.exe FirewallRules: [{039F8A1F-1FC3-4974-A8FA-7EA738DE5885}] => (Allow) C:\Users\jonas\AppData\Local\Apowersoft\Apowersoft Online Launcher\Apowersoft Online Launcher.exe FirewallRules: [{755369DA-3B71-4B15-A3EF-DB9668A7E801}] => (Allow) C:\Users\jonas\AppData\Local\Apowersoft\Apowersoft Online Launcher\Apowersoft Online Launcher.exe FirewallRules: [{3918B23B-0770-4451-B316-07D6F7F05220}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Converter Studio\Video Converter Studio.exe FirewallRules: [{8B220DD2-CBFA-4A25-AC61-A081B992FE10}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Converter Studio\Video Converter Studio.exe FirewallRules: [TCP Query User{F468232A-782C-4386-AF14-03CFA72EB0FB}C:\Program Files (x86)\LEGO Software\LEGO MINDSTORMS EV3 Home Edition\MindstormsEV3.exe] => (Allow) C:\Program Files (x86)\LEGO Software\LEGO MINDSTORMS EV3 Home Edition\MindstormsEV3.exe FirewallRules: [UDP Query User{68E46633-8DC3-499C-A590-8A85F5FE92AD}C:\Program Files (x86)\LEGO Software\LEGO MINDSTORMS EV3 Home Edition\MindstormsEV3.exe] => (Allow) C:\Program Files (x86)\LEGO Software\LEGO MINDSTORMS EV3 Home Edition\MindstormsEV3.exe FirewallRules: [{FDFFC44C-14BE-41C7-B3D0-3A21A0AB2CD3}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{D3BA6DDC-EEFF-4BA7-B73F-E1B5B508CF0F}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{7F5672A6-3413-4E6E-89B2-DA005E1CB8E5}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{124E57CD-36DB-4B53-B87E-F948C5F59389}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{A2AF3CF1-4561-47A1-9D6A-82622F17D7BE}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{99A1A5F4-316C-4557-913B-E3EB0FC6EABA}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{E690101E-DE6E-4F06-9729-DE3008CB8F4F}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{2BFC610C-E6CF-419D-9C46-716A91711349}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{03EA2663-3392-40A6-BEC6-432F0DAC3CFE}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{78EB36C5-B779-4D3E-9973-16184D94B76B}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{891D1ABF-B80B-451C-AFFC-CCEED6354BD1}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{13508550-B38F-45C4-90BF-F375ACD64F4C}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{54716BA3-0B98-4911-9FE4-626E57293FC7}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{71A1852D-A7CC-4252-B072-1A156535A101}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{021E7810-CD48-4076-8CF8-B30373988D36}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{D6DCCE31-9021-4DEF-83BD-69B4EA56E062}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{F45C67F7-6F5F-4B55-B59F-B7EB905AA770}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{437836E5-5B3E-4624-9344-6E7E46554D9A}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{DFEDA992-4E86-4020-8D17-63BAC67BA4D4}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{15758F9D-9F7D-49F1-9243-B515F683FCC5}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{B8667DEF-4A38-4F21-BA1E-11A686DD221B}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{CB328C19-AF8F-4212-85DF-9FEE089F2ECD}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{D215ED8F-1AEB-493E-A218-B296E888343F}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{EB581540-0EF4-4768-8521-BFB5307B9DF9}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{BB430E81-FF62-445C-9B54-46327E88E328}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{F64F28E2-EC4C-45CC-B22A-A1967A9D73AA}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{14F3EBC0-F5F7-4C2B-BA7A-BF5EF6BB3144}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{14F4987B-F8D5-4ECF-A249-2A321C0E5002}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{FC070587-7B04-4887-A625-28E2AA62B26A}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{13F62FE0-215E-4A06-B4BF-910AEED39CFD}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{599AC892-3996-44AC-A811-26A37789D358}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{426FAC43-1EBC-40E3-91FB-99C0F0514D6E}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{3E201120-8387-49F2-90AC-BD643C78FC89}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{CD661D19-2165-4BFE-A56D-6145618C5242}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{2A2E8AC3-869D-4DD5-8F17-80C7F05673C0}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{2307F24C-9BE2-4114-A1B7-DCC4F6773622}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{5DA5A6F3-198C-4CE1-9557-BA202A70B188}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{5E614B94-C58F-4E52-A7F4-27E58A36F751}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{87AD145E-387C-464B-805F-14B71F84DBE3}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{B3805B0F-9589-4824-82B7-F961FDA1C50E}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{B8C2D385-3930-4EC9-A6C2-AB1ECD190884}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{84471805-E404-4289-9093-15BA36EFD083}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FaceRig\Bin\FaceRig.exe FirewallRules: [{8B345759-0B34-4C51-9A9B-1E9BB4FD681F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FaceRig\Bin\FaceRig.exe FirewallRules: [{D90D16B3-0654-46E3-9001-42CCB97D66F4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FaceRig\Bin\Launcher.exe FirewallRules: [{3EC35DE1-1DC9-4F48-A6FD-AD634447F2DB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FaceRig\Bin\Launcher.exe FirewallRules: [{72FE3FF0-CEBB-46D1-830E-1E4CA076C849}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{1E382B51-EEA3-4CD5-B3C4-435F2FBFEA54}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{2847CBB3-1B13-4192-93D2-824E70775F9C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\OMSI 2\Omsi.exe FirewallRules: [{9B9FDFED-F30A-497D-833C-F2B4F31806E0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\OMSI 2\Omsi.exe FirewallRules: [{1F75651D-4545-4CDE-A6FD-6C53F75FC06E}] => (Allow) D:\program files\Common7\IDE\devenv.exe FirewallRules: [{94329997-5B52-47CA-90A5-E51B8B700A98}] => (Allow) C:\Program Files (x86)\WiFiCreator\WiFiCreator.exe FirewallRules: [{20C471AD-EC85-4A31-B6FC-C8F026131954}] => (Allow) C:\Program Files (x86)\WiFiCreator\WiFiCreator.exe FirewallRules: [{976BFA17-C7EC-456C-B4BB-36F07B75D846}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{D1295CCE-17A6-454E-95EB-C27C2A0FED6D}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{B99C3CC9-7099-4C81-B80B-3E705AC2A2F0}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{1D77E0D6-E5D3-4035-9C50-00348867960C}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{E1AC694C-445D-4E0E-871D-98C133F352E5}] => (Allow) C:\Users\jonas\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{424EAB2A-EEE0-4A0E-B668-3A03D4A6D8FD}] => (Allow) C:\Users\jonas\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{D2732DA0-C233-4F9B-94DE-C0246FB5192C}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe FirewallRules: [{63EEDF95-B135-4A2C-98BE-EA0791086BF9}] => (Allow) C:\Program Files\CyberLink\PowerDirector12\PDR10.EXE FirewallRules: [{9F7D0DBA-DE6A-4F75-9320-807742E719CD}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Movie\PowerDVD Cinema\PowerDVDCinema12.exe FirewallRules: [{C6840567-49BE-4AE4-B675-83EA239D203F}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{70B6F0C4-1AF9-4277-BF95-EA1831875615}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{9D66D901-B859-4520-83B1-F45875F411B4}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{2F7CFB09-100D-47B8-98AC-CB1BCD31FC2A}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{1E16CE65-EBD6-4D2F-8BFC-B427E4F93BB4}] => (Allow) C:\Program Files\FlightGear 2016.1.1\bin\fgfs.exe FirewallRules: [{FF21C6A4-BC8B-4E2D-B62C-A1BC5D1A6368}] => (Allow) C:\Program Files\FlightGear 2016.1.1\bin\terrasync.exe FirewallRules: [{A0A93F91-5823-4B97-9CF7-0BEA3CF1C9A1}] => (Allow) C:\Program Files\FlightGear 2016.1.1\bin\fgcom.exe FirewallRules: [{83A7576E-0BFD-4D1F-B2EC-8643836ACFA4}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{D54E65A2-5A36-4291-9B1F-668E19D11F04}] => (Allow) LPort=2869 FirewallRules: [{A019492B-30EB-4DD5-91F7-ABFBB73B6F91}] => (Allow) LPort=1900 FirewallRules: [{F4EC1BC6-BB84-49BA-AFD5-3A0700581775}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{4D4630CC-846B-4C7C-8BD6-0EEAD9F62B08}] => (Allow) C:\Program Files\FlightGear 2016.1.1\bin\fgfs.exe FirewallRules: [{FA93994A-4520-4AE3-B6E5-DAF96E6ABE61}] => (Allow) C:\Program Files\FlightGear 2016.1.1\bin\terrasync.exe FirewallRules: [{30A466AC-6261-4358-B920-D04548351BB2}] => (Allow) C:\Program Files\FlightGear 2016.1.1\bin\fgcom.exe FirewallRules: [{854067CB-BFB8-44C7-A6C5-E41E44DBFDDC}] => (Allow) D:\FlightGear 2016.1.1\bin\fgfs.exe FirewallRules: [{1E1C73B2-E277-4EF9-B1AA-25F6E0511C27}] => (Allow) D:\FlightGear 2016.1.1\bin\fgfs.exe FirewallRules: [{2A16E022-30EE-4BCB-BCA0-D30562B43690}] => (Allow) D:\FlightGear 2016.1.1\bin\metar.exe FirewallRules: [{5E318DD3-4A0A-4BE4-B6F3-CAEF8480422F}] => (Allow) D:\FlightGear 2016.1.1\bin\terrasync.exe FirewallRules: [{90F94D07-348D-4D9A-9713-114936653C12}] => (Allow) D:\FlightGear 2016.1.1\bin\terrasync.exe FirewallRules: [{61A1AD64-2305-455C-8EF2-0501E6E4804F}] => (Allow) D:\FlightGear 2016.1.1\bin\fgcom.exe FirewallRules: [{955B46F6-79B1-4206-9656-283F7CDECD72}] => (Allow) D:\FlightGear 2016.1.1\bin\fgcom.exe FirewallRules: [{6A9D3405-97CA-4881-9EFA-15B921B32D0C}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Screen Recorder Pro 2\Apowersoft Screen Recorder Pro 2.exe FirewallRules: [{474F86FD-A816-4A95-8A74-6604E4AB796B}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Screen Recorder Pro 2\Apowersoft Screen Recorder Pro 2.exe FirewallRules: [{61D71A72-79B2-4823-9079-BCF46C147BAB}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{C1D9CBB5-A7AF-4A64-B8DE-B1444399BD30}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{1B8E01B0-2A47-4F04-B699-BF2E415DE26C}] => (Allow) C:\Users\jonas\AppData\Local\Temp\MPCOnline\MPCDownload.exe FirewallRules: [{DC8E37AF-2D91-455D-A4FA-04AA454117ED}] => (Allow) C:\Users\jonas\AppData\Local\Temp\MPCOnline\MPCDownload.exe FirewallRules: [{14A65166-9878-4A9E-AB7E-A52B650EE4AD}] => (Allow) C:\Program Files\FlightGear 2016.2.1\bin\fgfs.exe FirewallRules: [{A6505623-373D-495F-A6EC-47BD46ABD208}] => (Allow) C:\Program Files\FlightGear 2016.2.1\bin\fgcom.exe FirewallRules: [{E9F8CBE0-DE88-4098-9EAC-08F23D52EAFA}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Free Screen Recorder\Apowersoft Free Screen Recorder.exe FirewallRules: [{EE960271-2C20-47BF-A897-267C16DAC2E2}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Free Screen Recorder\Apowersoft Free Screen Recorder.exe FirewallRules: [{6ABE52AC-6DE3-4B5A-9679-A20646A828A2}] => (Allow) C:\Program Files\FlightGear 2017.1.3\bin\fgfs.exe FirewallRules: [{A892449D-0FE1-4154-91F7-F155283E87A8}] => (Allow) C:\Program Files\FlightGear 2017.1.3\bin\fgcom.exe FirewallRules: [{35768A9F-E3C5-4CC7-A2CB-B8CDE58F4CDE}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{A86DD274-10B1-4D17-9A6E-CF862EFE3EC6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Software Inc\Software Inc.exe FirewallRules: [{908FC7C3-4D6E-47FF-855C-B818CB5BDD6D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Software Inc\Software Inc.exe FirewallRules: [{65C7B44E-F1C5-4F82-98C7-F343CC90C984}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{3A41D214-4C8B-47B3-AD88-CEAF670DA300}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{A30780FD-0CC5-4E95-ACC0-62063A47A6E9}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{2F0FFCDC-9E30-4700-A224-DA537D0A4C48}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe ==================== Herstelpunten ========================= AANDACHT: Systeemherstel is uitgeschakeld ==================== Defecte Apparaatbeheer Apparaten ============= ==================== Eventlog fouten: ========================= Applicatiefouten: ================== Error: (06/08/2017 07:18:53 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: DEESISDEFLAPTOP) Description: Het pakket Microsoft.MinecraftUWP_1.1.55.0_x64__8wekyb3d8bbwe+App is beëindigd omdat het onderbreken te lang duurde. Error: (06/08/2017 04:54:48 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: Kan activeringscontext voor 'C:\Program Files\CyberLink\PhotoDirector5\Kernel\CES\CES_CacheAgent.exe.Manifest' niet maken. Kan afhankelijke assembly PDR.X,type="win32",version="1.0.0.0" niet vinden. Gebruik sxstrace.exe voor een gedetailleerde diagnose. Error: (06/08/2017 04:54:48 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: Kan activeringscontext voor 'C:\Program Files\CyberLink\PhotoDirector5\Kernel\CES\CES_AudioCacheAgent.exe.Manifest' niet maken. Kan afhankelijke assembly PDR.X,type="win32",version="1.0.0.0" niet vinden. Gebruik sxstrace.exe voor een gedetailleerde diagnose. Error: (06/08/2017 04:54:25 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Kan activeringscontext voor C:\Program Files (x86)\Audacity\audacity.exe niet maken. Fout in manifest of beleidsbestand op regel . Een onderdeelversie die nodig is voor de toepassing, conflicteert met een andere onderdeelversie die reeds actief is. Conflicterende onderdelen zijn: Onderdeel 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.15063.0_none_108e4f62dfe5d999.manifest. Onderdeel 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.15063.0_none_583b8639f462029f.manifest. Error: (06/08/2017 04:54:02 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: Kan activeringscontext voor 'D:\program files\VC\redist\1033\vcredist_arm.exe' niet maken. Kan afhankelijke assembly Microsoft.Windows.Common-Controls,language="*",processorArchitecture="arm",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" niet vinden. Gebruik sxstrace.exe voor een gedetailleerde diagnose. Error: (06/08/2017 04:53:11 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Kan activeringscontext voor C:\Program Files (x86)\Audacity\audacity.exe niet maken. Fout in manifest of beleidsbestand op regel . Een onderdeelversie die nodig is voor de toepassing, conflicteert met een andere onderdeelversie die reeds actief is. Conflicterende onderdelen zijn: Onderdeel 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.15063.0_none_108e4f62dfe5d999.manifest. Onderdeel 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.15063.0_none_583b8639f462029f.manifest. Error: (06/07/2017 02:33:46 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: Kan activeringscontext voor 'C:\Program Files\CyberLink\PhotoDirector5\Kernel\CES\CES_CacheAgent.exe.Manifest' niet maken. Kan afhankelijke assembly PDR.X,type="win32",version="1.0.0.0" niet vinden. Gebruik sxstrace.exe voor een gedetailleerde diagnose. Error: (06/07/2017 02:33:46 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: Kan activeringscontext voor 'C:\Program Files\CyberLink\PhotoDirector5\Kernel\CES\CES_AudioCacheAgent.exe.Manifest' niet maken. Kan afhankelijke assembly PDR.X,type="win32",version="1.0.0.0" niet vinden. Gebruik sxstrace.exe voor een gedetailleerde diagnose. Error: (06/07/2017 02:32:52 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: Kan activeringscontext voor 'D:\program files\VC\redist\1033\vcredist_arm.exe' niet maken. Kan afhankelijke assembly Microsoft.Windows.Common-Controls,language="*",processorArchitecture="arm",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" niet vinden. Gebruik sxstrace.exe voor een gedetailleerde diagnose. Error: (06/07/2017 02:32:06 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Kan activeringscontext voor C:\Program Files (x86)\Audacity\audacity.exe niet maken. Fout in manifest of beleidsbestand op regel . Een onderdeelversie die nodig is voor de toepassing, conflicteert met een andere onderdeelversie die reeds actief is. Conflicterende onderdelen zijn: Onderdeel 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.15063.0_none_108e4f62dfe5d999.manifest. Onderdeel 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.15063.0_none_583b8639f462029f.manifest. Systeemfouten: ============= Error: (06/08/2017 08:09:46 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} en APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} aan de gebruiker NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (06/08/2017 08:09:46 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} en APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} aan de gebruiker NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (06/08/2017 08:09:46 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} en APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} aan de gebruiker NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (06/08/2017 08:09:46 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} en APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} aan de gebruiker NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (06/08/2017 08:08:53 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: De CldFlt-service kan vanwege de volgende fout niet worden gestart: De aanvraag wordt niet ondersteund. Error: (06/08/2017 08:08:53 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: De vorige afsluiting van het systeem om 20:04:27 op ‎8-‎6-‎2017 is onverwacht gebeurd. Error: (06/08/2017 07:27:42 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} en APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} aan de gebruiker NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (06/08/2017 07:27:42 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} en APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} aan de gebruiker NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (06/08/2017 07:27:42 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} en APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} aan de gebruiker NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (06/08/2017 07:27:42 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} en APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} aan de gebruiker NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. CodeIntegrity: =================================== Date: 2017-04-23 19:55:35.728 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows.old\WINDOWS\WinSxS\amd64_microsoft-windows-fodhelper-ux_31bf3856ad364e35_10.0.14393.0_none_6063d58c87020b06\fodhelper.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2017-04-23 19:55:35.724 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows.old\WINDOWS\WinSxS\amd64_microsoft-windows-fodhelper-ux_31bf3856ad364e35_10.0.14393.0_none_6063d58c87020b06\fodhelper.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. ==================== Geheugen info =========================== Processor: Intel(R) Core(TM) i5-6267U CPU @ 2.90GHz Percentage geheugen in gebruik: 46% Totaal fysiek RAM-geheugen: 6025.35 MB Beschikbaar fysiek RAM-geheugen: 3239.54 MB Totaal Virtueel geheugen: 6985.35 MB Beschikbaar Virtual geheugen: 4376.32 MB ==================== Schijven ================================ Drive c: (Boot) (Fixed) (Total:117.15 GB) (Free:24.1 GB) NTFS Drive d: (Data) (Fixed) (Total:871.51 GB) (Free:582.9 GB) NTFS Drive e: (Recover) (Fixed) (Total:60 GB) (Free:36.92 GB) NTFS ==================== MBR & Partitietabel ================== ======================================================== Disk: 0 (Size: 931.5 GB) (Disk ID: 411D467F) Partition: GPT. ======================================================== Disk: 1 (Size: 119.2 GB) (Disk ID: 411D4644) Partition: GPT. ==================== Eind van Addition.txt ============================