Scanresultaten van Farbar Recovery Scan Tool (FRST) (x86) Versie: 21-06-2017 01
Gestart door Martijn (Beheerder) op LAPPIE (22-06-2017 13:43:12)
Gestart vanaf C:\Users\Martijn\Desktop
Geladen Profielen: Martijn (Beschikbare Profielen: Martijn)
Platform: Microsoft Windows 8.1 (Update) (X86) Taal: Nederlands (Nederland)
Internet Explorer Versie 11 (Standaardbrowser: IE)
Boot Modus: Normal
Handleiding voor Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processen (gefilterd) =================

(Als een item is opgenomen in de fixlist, het proces zal worden gesloten. Het bestand zal niet worden verplaatst.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ATK Package\ATK Hotkey\AsHidSrv.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel Corporation) C:\Windows\System32\DptfParticipantProcessorService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyCriticalService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmService.exe
(Intel(R) Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Intel Corporation) C:\Program Files\Intel\TXE Components\DAL\jhi_service.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUSTek Computer INC.) C:\ProgramData\AsTouchPanel\AsPatchTouchPanel.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ATK Package\ATK Media\DMedia.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(AsusTek) C:\Program Files\ASUS\ASUS Smart Gesture\AsTPCenter\x86\AsusTPLoader.exe
(ASUSTeK Computer Inc.) C:\Program Files\ASUS\ASUS Smart Gesture\AsTPCenter\x86\AsusSmartGestureDetector.exe
(AsusTek) C:\Program Files\ASUS\ASUS Smart Gesture\AsTPCenter\x86\AsusTPHelper.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmServiceHelper.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\AP\RtkNGUI.exe
Kon geen toegng krijgen tot proces -> iTunesHelper.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Reader_6.4.9926.18728_x86__8wekyb3d8bbwe\glcnd.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX86\officeclicktorun.exe
(Skype Technologies) C:\Program Files\Skype\Browser\SkypeBrowserHost.exe
(AsusTek) C:\Program Files\ASUS\ASUS Smart Gesture\AsTPCenter\x86\AsusTPCenter.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

==================== Register (gefilterd) ====================

(Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.)

HKLM\...\Run: [ASUSPRP] => C:\Program Files\ASUS\APRP\APRP.EXE [1080992 2014-04-11] (ASUSTek Computer Inc.)
HKLM\...\Run: [DptfPolicyLpmServiceHelper] => C:\Windows\system32\DptfPolicyLpmServiceHelper.exe [81360 2014-03-18] (Intel Corporation)
HKLM\...\Run: [RtkNGUI] => C:\Program Files\Realtek\Audio\AP\RtkNGUI.exe [4797440 2014-06-20] (Realtek Semiconductor)
HKLM\...\Run: [iTunesHelper] => D:\Itunes\iTunesHelper.exe [267064 2017-05-09] (Apple Inc.)
HKLM\...\Run: [AvastUI.exe] => D:\Avast\AvLaunch.exe [213824 2017-06-21] (AVAST Software)
HKU\S-1-5-21-3823556001-2242781966-1342885810-1001\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [27742168 2017-06-07] (Skype Technologies S.A.)
HKU\S-1-5-21-3823556001-2242781966-1342885810-1001\...\MountPoints2: {56b48eeb-e0b9-11e6-975c-6cfaa73ab781} - "E:\Autorun.exe" 
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => D:\Avast\ashShell.dll [2017-06-21] (AVAST Software)
BootExecute: autocheck autochk * aswBoot.exe /M:2b870c18c9 /dir:"D:\Avast"

==================== Internet (gefilterd) ====================

(Als een item is opgenomen in de fixlist, als het een registry item is wordt verwijderd of hersteld naar de standaard.)

Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{861064C5-53FB-451B-9C16-45E31B03C9A3}: [DhcpNameServer] 172.20.10.1

Internet Explorer:
==================
HKU\S-1-5-21-3823556001-2242781966-1342885810-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB
SearchScopes: HKU\S-1-5-21-3823556001-2242781966-1342885810-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3823556001-2242781966-1342885810-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> D:\Avast\aswWebRepIE.dll [2017-06-21] (AVAST Software)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2016-04-20] (Microsoft Corporation)

FireFox:
========
FF Plugin: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files\Intel\TXE Components\IPT\npIntelWebAPIIPT.dll [2013-07-12] (Intel Corporation)
FF Plugin: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files\Intel\TXE Components\IPT\npIntelWebAPIUpdater.dll [2013-07-12] (Intel Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-03-17] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> D:\VLC\npvlc.dll [2016-06-01] (VideoLAN)

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx

==================== Services (gefilterd) ====================

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

R2 AsHidService; C:\Program Files\ASUS\ATK Package\ATK Hotkey\AsHidSrv.exe [103224 2013-09-09] (ASUSTek Computer Inc.)
R2 ASLDRService; C:\Program Files\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe [115512 2014-03-26] (ASUSTek Computer Inc.)
S3 aswbIDSAgent; D:\Avast\aswidsagent.exe [5732136 2017-06-21] (AVAST Software s.r.o.)
R2 ATKGFNEXSrv; C:\Program Files\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [96896 2011-11-21] (ASUS)
S2 avast! Antivirus; D:\Avast\AvastSvc.exe [263304 2017-06-21] (AVAST Software)
S2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [1677016 2014-12-05] (Broadcom Corporation.)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX86\OfficeClickToRun.exe [2043120 2017-03-14] (Microsoft Corporation)
S3 cphs; C:\Windows\system32\IntelCpHeciSvc.exe [280680 2014-09-09] (Intel Corporation)
R2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [83408 2014-03-18] (Intel Corporation)
R2 DptfPolicyCriticalService; C:\Windows\system32\DptfPolicyCriticalService.exe [97232 2014-03-18] (Intel Corporation)
R2 DptfPolicyLpmService; C:\Windows\system32\DptfPolicyLpmService.exe [90576 2014-03-18] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [280680 2014-09-09] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [586752 2013-07-02] (Intel(R) Corporation) [Bestand niet getekend]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [637912 2013-07-02] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files\Intel\TXE Components\DAL\jhi_service.exe [168216 2014-01-15] (Intel Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [280872 2017-01-13] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103696 2017-01-13] (Microsoft Corporation)
S3 AvastVBoxSvc; "C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe" [X]

===================== Drivers (gefilterd) ======================

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

R3 ar0543; C:\Windows\System32\drivers\ar0543.sys [53760 2014-08-22] (Intel Corporation)
R2 ASMMAP; C:\Program Files\ASUS\ATK Package\ATKGFNEX\ASMMAP.sys [13880 2009-07-03] (ASUS)
R3 AsusHID; C:\Windows\System32\drivers\AsusHID.sys [69912 2014-09-19] (ASUS Corporation)
R1 aswbidsdriver; C:\Windows\system32\drivers\aswbidsdriverx.sys [258288 2017-06-21] (AVAST Software s.r.o.)
R0 aswbidsh; C:\Windows\system32\drivers\aswbidshx.sys [148696 2017-06-21] (AVAST Software s.r.o.)
R0 aswblog; C:\Windows\system32\drivers\aswblogx.sys [268016 2017-06-21] (AVAST Software s.r.o.)
R0 aswbuniv; C:\Windows\system32\drivers\aswbunivx.sys [41664 2017-06-21] (AVAST Software s.r.o.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [34136 2017-06-21] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [107928 2017-06-21] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [90336 2017-06-21] (AVAST Software)
S0 aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [62152 2017-06-21] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [764576 2017-06-21] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [482608 2017-06-21] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [115152 2017-06-21] (AVAST Software)
R0 aswVmm; C:\Windows\system32\drivers\aswVmm.sys [279800 2017-06-21] (AVAST Software)
R1 ATKWMIACPIIO; C:\Program Files\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi.sys [17720 2013-07-03] (ASUSTek Computer Inc.)
R3 BcmGnssBus; C:\Windows\System32\drivers\BcmGnssBus.sys [98888 2014-03-05] (Broadcom Corporation)
R3 BCMSDH43XX; C:\Windows\system32\DRIVERS\bcmdhd63.sys [308992 2014-12-05] (Broadcom Corp)
R3 BthMini; C:\Windows\System32\Drivers\BTHMINI.sys [23552 2014-10-29] (Microsoft Corporation)
S3 btwampfl; C:\Windows\system32\DRIVERS\btwampfl.sys [145112 2014-12-05] (Broadcom Corporation.)
R3 BtwSerialBus; C:\Windows\system32\DRIVERS\BtwSerialBus.sys [132312 2014-12-05] (Broadcom Corporation.)
R3 camera; C:\Windows\system32\DRIVERS\camera.sys [462848 2014-08-22] (Intel Corporation)
R3 DptfDevDBPT; C:\Windows\system32\DRIVERS\DptfDevPower.sys [25552 2014-03-18] (Intel Corporation)
R3 DptfDevDisplay; C:\Windows\system32\DRIVERS\DptfDevDisplay.sys [28112 2014-03-18] (Intel Corporation)
R3 DptfDevGen; C:\Windows\system32\DRIVERS\DptfDevGen.sys [36304 2014-03-18] (Intel Corporation)
R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [80848 2014-03-18] (Intel Corporation)
R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [181712 2014-03-18] (Intel Corporation)
S3 FTDIBUS; C:\Windows\system32\drivers\ftdibus.sys [80752 2014-10-28] (FTDI Ltd.)
R3 GPIO; C:\Windows\System32\drivers\iaiogpioe.sys [23552 2014-03-18] (Intel Corporation)
R3 GpioVirtual; C:\Windows\System32\drivers\iaiogpiovirtual.sys [16896 2014-03-18] (Intel Corporation)
R3 HIDSwitch; C:\Windows\System32\drivers\AsHIDSwitch.sys [17720 2013-10-08] (ASUS)
R3 hm2056; C:\Windows\System32\drivers\hm2056.sys [43008 2014-08-22] (Intel Corporation)
R3 iaioi2c; C:\Windows\System32\drivers\iaioi2ce.sys [58368 2014-03-18] (Intel Corporation)
R3 iaiouart; C:\Windows\System32\drivers\iaiouart.sys [87552 2014-03-18] (Intel Corporation)
S0 iaStorA; C:\Windows\System32\drivers\iaStorA.sys [489832 2013-12-16] (Intel Corporation)
S3 intaud_WaveExtensible; C:\Windows\system32\drivers\intelaud.sys [32152 2014-08-02] (Intel Corporation)
R3 IntelSST; C:\Windows\system32\drivers\isstrtc.sys [260608 2014-04-28] (Intel(R) Corporation)
R3 INVN_MotionApps; C:\Windows\system32\DRIVERS\WUDFRd.sys [188416 2014-05-31] (Microsoft Corporation)
R3 iwdbus; C:\Windows\System32\drivers\iwdbus.sys [23448 2014-08-02] (Intel Corporation)
R0 MBI; C:\Windows\System32\drivers\MBI.sys [21456 2014-03-18] (Intel Corporation)
S3 NETwNs32; C:\Windows\system32\DRIVERS\Netwsn00.sys [10372096 2013-06-18] (Intel Corporation)
R3 PMIC; C:\Windows\System32\drivers\PMIC.sys [48128 2014-03-18] (Intel Corporation)
R3 rtii2sac; C:\Windows\system32\DRIVERS\rtii2sac.sys [186072 2014-06-20] (Realtek Semiconductor Corp.)
R3 RTLUE8023-W8-32; C:\Windows\system32\DRIVERS\rtu86w8.sys [84184 2014-01-06] (Realtek                                            )
R3 SensorsServiceDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [188416 2014-05-31] (Microsoft Corporation)
R3 TXEI; C:\Windows\System32\drivers\TXEI.sys [75792 2014-03-18] (Intel Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [38920 2017-02-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [231256 2017-01-13] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [85336 2017-01-13] (Microsoft Corporation)
R3 WUDFWpdMtp; C:\Windows\system32\DRIVERS\WUDFRd.sys [188416 2014-05-31] (Microsoft Corporation)
U0 msahci; system32\drivers\msahci.sys [X]
S2 VBoxAswDrv; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X]

==================== NetSvcs (gefilterd) ===================

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)


==================== Een Maand Gemaakt bestanden en mappen ========

(Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)

2017-06-22 13:43 - 2017-06-22 13:43 - 00014360 _____ C:\Users\Martijn\Desktop\FRST.txt
2017-06-22 13:43 - 2017-06-22 13:43 - 00000000 ____D C:\FRST
2017-06-22 13:42 - 2017-06-22 13:42 - 01778688 _____ (Farbar) C:\Users\Martijn\Desktop\FRST.exe
2017-06-21 07:21 - 2017-06-21 07:21 - 00002695 _____ C:\Users\Public\Desktop\Skype.lnk
2017-06-21 07:21 - 2017-06-21 07:21 - 00000000 ___RD C:\Program Files\Skype
2017-06-21 07:21 - 2017-06-21 07:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-06-21 07:21 - 2017-06-21 07:21 - 00000000 ____D C:\Program Files\Common Files\Skype
2017-06-21 06:10 - 2017-06-21 06:10 - 00000000 ____D C:\Users\Martijn\AppData\Roaming\AVAST Software
2017-06-21 06:10 - 2017-06-21 06:10 - 00000000 ____D C:\Users\Martijn\AppData\Local\CEF
2017-06-21 06:09 - 2017-06-21 06:09 - 00000555 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2017-06-21 06:09 - 2017-06-21 06:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2017-06-21 06:08 - 2017-06-21 06:09 - 00115152 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2017-06-21 06:08 - 2017-06-21 06:08 - 00921280 _____ (Microsoft Corporation) C:\Windows\ucrtbase.dll
2017-06-21 06:08 - 2017-06-21 06:08 - 00764576 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2017-06-21 06:08 - 2017-06-21 06:08 - 00482608 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2017-06-21 06:08 - 2017-06-21 06:08 - 00330768 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2017-06-21 06:08 - 2017-06-21 06:08 - 00279800 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2017-06-21 06:08 - 2017-06-21 06:08 - 00268016 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswblogx.sys
2017-06-21 06:08 - 2017-06-21 06:08 - 00258288 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsdriverx.sys
2017-06-21 06:08 - 2017-06-21 06:08 - 00148696 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidshx.sys
2017-06-21 06:08 - 2017-06-21 06:08 - 00107928 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2017-06-21 06:08 - 2017-06-21 06:08 - 00090336 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2017-06-21 06:08 - 2017-06-21 06:08 - 00062152 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2017-06-21 06:08 - 2017-06-21 06:08 - 00041664 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbunivx.sys
2017-06-21 06:08 - 2017-06-21 06:08 - 00034136 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2017-06-18 15:11 - 2017-05-15 03:11 - 20274688 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-06-18 15:11 - 2017-04-07 00:32 - 00590336 _____ (Microsoft Corporation) C:\Windows\system32\wpd_ci.dll
2017-06-18 15:10 - 2017-06-02 18:25 - 00272896 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2017-06-18 15:10 - 2017-06-02 18:24 - 00391680 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2017-06-18 15:10 - 2017-06-02 18:17 - 00699392 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2017-06-18 15:10 - 2017-06-02 18:02 - 02751488 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-06-18 15:10 - 2017-06-02 17:43 - 01920000 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-06-18 15:10 - 2017-06-02 17:43 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2017-06-18 15:10 - 2017-05-16 02:41 - 00098656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tm.sys
2017-06-18 15:10 - 2017-05-15 03:35 - 03468800 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-06-18 15:10 - 2017-05-15 03:33 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2017-06-18 15:10 - 2017-05-15 02:00 - 00128568 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2017-06-18 15:10 - 2017-05-12 23:51 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2017-06-18 15:10 - 2017-05-12 23:50 - 00124928 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2017-06-18 15:10 - 2017-05-12 23:49 - 03074560 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-06-18 15:10 - 2017-05-12 23:48 - 00334336 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2017-06-18 15:10 - 2017-05-12 23:48 - 00081920 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2017-06-18 15:10 - 2017-05-12 23:47 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2017-06-18 15:10 - 2017-05-12 23:43 - 02174464 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2017-06-18 15:10 - 2017-05-12 07:32 - 19788672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-06-18 15:10 - 2017-04-06 23:39 - 00068608 _____ (Microsoft Corporation) C:\Windows\system32\wpdbusenum.dll
2017-06-18 15:09 - 2017-05-15 03:22 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-06-18 15:09 - 2017-05-15 03:10 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-06-18 15:09 - 2017-05-15 02:48 - 05274112 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll
2017-06-18 15:09 - 2017-05-15 02:46 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2017-06-18 15:09 - 2017-05-15 02:44 - 04549120 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-06-18 15:09 - 2017-05-15 02:40 - 00693248 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-06-18 15:09 - 2017-05-15 02:30 - 13664768 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-06-18 15:09 - 2017-05-15 02:15 - 02767872 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-06-18 15:09 - 2017-05-15 02:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-06-18 15:09 - 2017-05-15 02:01 - 05763928 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-06-18 15:09 - 2017-05-15 02:01 - 01472056 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-06-18 15:09 - 2017-05-11 02:16 - 00083288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2017-06-18 15:09 - 2017-05-06 23:58 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2017-06-18 15:09 - 2017-05-06 23:58 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2017-06-18 15:09 - 2017-04-07 00:16 - 01118208 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-06-18 15:09 - 2017-04-07 00:15 - 00358912 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-06-18 15:09 - 2017-04-02 16:03 - 01681240 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2017-06-18 15:09 - 2017-02-11 02:07 - 00229888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-06-18 15:09 - 2017-02-01 22:58 - 00328192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-06-18 15:09 - 2017-02-01 22:58 - 00153088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-06-18 15:08 - 2017-06-02 18:19 - 00900096 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
2017-06-18 15:08 - 2017-05-15 06:15 - 01119736 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2017-06-18 15:08 - 2017-05-15 03:04 - 00315224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2017-06-18 15:08 - 2017-05-15 02:16 - 05268992 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2017-06-18 15:08 - 2017-05-15 02:11 - 01314816 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-06-18 15:08 - 2017-05-13 01:05 - 00035840 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2017-06-18 15:08 - 2017-05-13 00:13 - 01559552 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2017-06-18 15:08 - 2017-05-13 00:10 - 01088000 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2017-06-18 15:08 - 2017-04-07 00:08 - 01211904 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2017-06-18 15:08 - 2017-04-02 22:21 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2017-05-23 04:00 - 2017-05-23 04:00 - 00001352 _____ C:\Users\Public\Desktop\iTunes.lnk
2017-05-23 04:00 - 2017-05-23 04:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2017-05-23 03:59 - 2017-05-23 03:59 - 00000000 ____D C:\Program Files\iPod
2017-05-23 03:58 - 2017-05-23 03:58 - 00000000 ____D C:\Program Files\Apple Software Update
2017-05-23 03:57 - 2017-05-23 03:57 - 00000000 ____D C:\Program Files\Bonjour

==================== Een Maand Gewijzigd bestanden en mappen ========

(Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)

2017-06-22 13:42 - 2015-09-05 03:40 - 00000000 ____D C:\Users\Martijn\AppData\Roaming\Skype
2017-06-22 13:34 - 2013-08-22 16:17 - 00000000 ____D C:\Windows\system32\NDF
2017-06-21 13:03 - 2013-08-22 16:17 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-06-21 13:02 - 2015-03-17 02:26 - 00000000 ____D C:\Program Files\Microsoft Office 15
2017-06-21 07:21 - 2015-09-05 03:39 - 00000000 ____D C:\ProgramData\Skype
2017-06-21 07:13 - 2015-03-11 03:12 - 00000000 ___DO C:\Users\Martijn\OneDrive
2017-06-21 07:13 - 2014-04-11 11:29 - 00808252 _____ C:\Windows\system32\perfh013.dat
2017-06-21 07:13 - 2014-04-11 11:29 - 00163020 _____ C:\Windows\system32\perfc013.dat
2017-06-21 07:13 - 2014-03-18 15:56 - 01823174 _____ C:\Windows\system32\PerfStringBackup.INI
2017-06-21 07:13 - 2013-08-22 14:21 - 00000000 ____D C:\Windows\inf
2017-06-21 07:01 - 2015-03-11 03:13 - 00001503 _____ C:\Users\Martijn\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AsusSmartGestureDetector.lnk
2017-06-21 06:27 - 2014-12-05 15:58 - 00000000 ____D C:\ProgramData\Package Cache
2017-06-21 05:37 - 2015-03-11 03:17 - 00000000 ____D C:\ProgramData\AVAST Software
2017-06-20 10:22 - 2013-08-22 15:23 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-06-20 10:22 - 2013-08-22 15:22 - 00367888 _____ C:\Windows\system32\FNTCACHE.DAT
2017-06-19 10:35 - 2013-08-22 14:13 - 00524288 ___SH C:\Windows\system32\config\BBI
2017-06-19 10:34 - 2013-08-22 16:17 - 00000000 ___RD C:\Windows\ToastData
2017-06-19 06:14 - 2013-08-22 16:05 - 00000000 ____D C:\Windows\CbsTemp
2017-06-19 04:59 - 2013-08-22 16:17 - 00000000 ____D C:\Windows\AppReadiness
2017-06-18 15:55 - 2015-03-11 03:07 - 00000000 ____D C:\Users\Martijn\AppData\Local\Packages
2017-06-18 15:55 - 2013-08-22 16:17 - 00000000 ___HD C:\Program Files\WindowsApps
2017-06-03 10:31 - 2017-03-10 18:09 - 00835576 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2017-06-03 10:31 - 2017-03-10 18:09 - 00177656 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2017-05-31 02:52 - 2015-03-15 08:49 - 129479984 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-05-23 04:18 - 2014-04-11 02:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2017-05-23 04:18 - 2014-04-11 02:54 - 00000000 ____D C:\Program Files\ASUS
2017-05-23 03:58 - 2015-05-31 23:32 - 00002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2017-05-23 03:54 - 2015-03-11 03:19 - 00000000 ____D C:\Program Files\Google
2017-05-23 03:50 - 2015-03-11 03:19 - 00000000 ____D C:\Users\Martijn\AppData\Local\Google
2017-05-23 03:42 - 2013-08-22 16:17 - 00000000 ____D C:\Windows\PolicyDefinitions

==================== Bestanden in de root van sommige mappen =======

2014-12-05 16:04 - 2014-03-26 09:11 - 0000137 _____ () C:\ProgramData\RefreshReg.vbs
2014-04-11 02:54 - 2014-03-27 04:50 - 0000124 _____ () C:\ProgramData\SetStretch.cmd
2014-04-11 02:54 - 2009-07-22 18:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe
2014-04-11 02:54 - 2012-09-07 19:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS

Bestanden om te verplaatsen of verwijderen:
====================
C:\ProgramData\RefreshReg.vbs


Sommige bestanden in TEMP:
====================
2015-03-15 05:06 - 2012-10-01 18:22 - 0150648 ____R (Microsoft Corporation) C:\Users\Martijn\AppData\Local\Temp\ose00000.exe
2015-03-15 05:22 - 2012-10-01 18:22 - 0150648 ____R (Microsoft Corporation) C:\Users\Martijn\AppData\Local\Temp\ose00001.exe
2017-06-21 06:21 - 2017-06-21 06:26 - 14456872 _____ (Microsoft Corporation) C:\Users\Martijn\AppData\Local\Temp\vc_redist.x86.exe

==================== Bamital & volsnap ======================

(Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.)

C:\Windows\explorer.exe => Bestand is getekend
C:\Windows\system32\winlogon.exe => Bestand is getekend
C:\Windows\system32\wininit.exe => Bestand is getekend
C:\Windows\system32\svchost.exe => Bestand is getekend
C:\Windows\system32\services.exe => Bestand is getekend
C:\Windows\system32\User32.dll => Bestand is getekend
C:\Windows\system32\userinit.exe => Bestand is getekend
C:\Windows\system32\rpcss.dll => Bestand is getekend
C:\Windows\system32\dnsapi.dll => Bestand is getekend
C:\Windows\system32\Drivers\volsnap.sys => Bestand is getekend

LastRegBack: 2017-06-19 04:51

==================== Eind van FRST.txt ============================