Scanresultaten van Farbar Recovery Scan Tool (FRST) (x64) Versie: 02-07-2017
Gestart door Gerda (Beheerder) op GERDA-PC_TOSH (03-07-2017 13:44:47)
Gestart vanaf F:\downloads
Geladen Profielen: Gerda (Beschikbare Profielen: Gerda)
Platform: Windows 10 Pro Versie 1607 (X64) Taal: Nederlands (Nederland)
Internet Explorer Versie 11 (Standaardbrowser: Edge)
Boot Modus: Normal
Handleiding voor Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processen (gefilterd) =================

(Als een item is opgenomen in de fixlist, het proces zal worden gesloten. Het bestand zal niet worden verplaatst.)

(IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Auslogics) C:\Program Files (x86)\Auslogics\BoostSpeed\BoostSpeed.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Corel Corporation Limited) D:\WORDPERFECT10\Programs\DAD10.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe

==================== Register (gefilterd) ====================

(Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.)

HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2017-04-28] (Microsoft Corporation)
HKLM-x32\...\Run: [QuickFinder Scheduler] => D:\WORDPERFECT10\Programs\QFSCHD100.EXE [77887 2001-10-02] (Novell, Inc., c/o Corel Corporation Limited)
HKU\S-1-5-21-689821697-2636345003-3369014256-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9364696 2017-03-03] (Piriform Ltd)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.exe.lnk [2017-04-09]
ShortcutTarget: Adobe Gamma Loader.exe.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CorelCENTRAL 10.lnk [2017-04-18]
ShortcutTarget: CorelCENTRAL 10.lnk -> C:\Windows\Installer\{A0B295C3-FD3C-11D4-A811-0090279106C3}\I_26dadCC.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Desktop Application Director 10.lnk [2017-04-18]
ShortcutTarget: Desktop Application Director 10.lnk -> D:\WORDPERFECT10\Programs\DAD10.exe (Corel Corporation Limited)
GroupPolicy: Restrictie <==== AANDACHT
CHR HKLM\SOFTWARE\Policies\Google: Restrictie <==== AANDACHT

==================== Internet (gefilterd) ====================

(Als een item is opgenomen in de fixlist, als het een registry item is wordt verwijderd of hersteld naar de standaard.)

Hosts: Er zijn meer dan één item in Hosts. Zie Hosts deel van Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.254
Tcpip\..\Interfaces\{407bd687-a24b-4bff-8b5a-1e34b08effb8}: [DhcpNameServer] 192.168.2.254

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://nl.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_nrssi_17_25_ssg02&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dnl%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuzytD0EyC0B0AyB0E0AyE0FzytCyCzzyDtN0D0Tzu0StCzyzyzytN1L2XzutAtFtBzytFtAtFzztAtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyEtBzzyBtAzzyCtCtGyE0Ezz0CtG0E0A0E0AtGyCzzyEtAtGzyyEtC0AyD0AzzyB0DtDzzyC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzyyCyDtCyEtC0BzytGyB0DtB0EtGyEtAtCtDtG0A0B0E0AtG0ByCtC0FyE0ByCyB0C0A0DtB2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtAtCyBzz%26cr%3D1021551336%26a%3Dwbf_nrssi_17_25_ssg02%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://nl.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_nrssi_17_25_ssg02&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dnl%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuzytD0EyC0B0AyB0E0AyE0FzytCyCzzyDtN0D0Tzu0StCzyzyzytN1L2XzutAtFtBzytFtAtFzztAtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyEtBzzyBtAzzyCtCtGyE0Ezz0CtG0E0A0E0AtGyCzzyEtAtGzyyEtC0AyD0AzzyB0DtDzzyC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzyyCyDtCyEtC0BzytGyB0DtB0EtGyEtAtCtDtG0A0B0E0AtG0ByCtC0FyE0ByCyB0C0A0DtB2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtAtCyBzz%26cr%3D1021551336%26a%3Dwbf_nrssi_17_25_ssg02%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro
HKU\S-1-5-21-689821697-2636345003-3369014256-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.nl/
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://nl.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_nrssi_17_25_ssg02&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dnl%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuzytD0EyC0B0AyB0E0AyE0FzytCyCzzyDtN0D0Tzu0StCzyzyzytN1L2XzutAtFtBzytFtAtFzztAtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyEtBzzyBtAzzyCtCtGyE0Ezz0CtG0E0A0E0AtGyCzzyEtAtGzyyEtC0AyD0AzzyB0DtDzzyC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzyyCyDtCyEtC0BzytGyB0DtB0EtGyEtAtCtDtG0A0B0E0AtG0ByCtC0FyE0ByCyB0C0A0DtB2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtAtCyBzz%26cr%3D1021551336%26a%3Dwbf_nrssi_17_25_ssg02%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro&p={searchTerms}
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://nl.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_nrssi_17_25_ssg02&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dnl%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuzytD0EyC0B0AyB0E0AyE0FzytCyCzzyDtN0D0Tzu0StCzyzyzytN1L2XzutAtFtBzytFtAtFzztAtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyEtBzzyBtAzzyCtCtGyE0Ezz0CtG0E0A0E0AtGyCzzyEtAtGzyyEtC0AyD0AzzyB0DtDzzyC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzyyCyDtCyEtC0BzytGyB0DtB0EtGyEtAtCtDtG0A0B0E0AtG0ByCtC0FyE0ByCyB0C0A0DtB2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtAtCyBzz%26cr%3D1021551336%26a%3Dwbf_nrssi_17_25_ssg02%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro&p={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://nl.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_nrssi_17_25_ssg02&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dnl%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuzytD0EyC0B0AyB0E0AyE0FzytCyCzzyDtN0D0Tzu0StCzyzyzytN1L2XzutAtFtBzytFtAtFzztAtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyEtBzzyBtAzzyCtCtGyE0Ezz0CtG0E0A0E0AtGyCzzyEtAtGzyyEtC0AyD0AzzyB0DtDzzyC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzyyCyDtCyEtC0BzytGyB0DtB0EtGyEtAtCtDtG0A0B0E0AtG0ByCtC0FyE0ByCyB0C0A0DtB2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtAtCyBzz%26cr%3D1021551336%26a%3Dwbf_nrssi_17_25_ssg02%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro&p={searchTerms}
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://nl.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_nrssi_17_25_ssg02&param1=1&param2=f%3D4%26b%3DIE%26cc%3Dnl%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuzytD0EyC0B0AyB0E0AyE0FzytCyCzzyDtN0D0Tzu0StCzyzyzytN1L2XzutAtFtBzytFtAtFzztAtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2SyEtBzzyBtAzzyCtCtGyE0Ezz0CtG0E0A0E0AtGyCzzyEtAtGzyyEtC0AyD0AzzyB0DtDzzyC2QtN1M1F1B2Z1V1N2Y1L1Qzu2SzyyCyDtCyEtC0BzytGyB0DtB0EtGyEtAtCtDtG0A0B0E0AtG0ByCtC0FyE0ByCyB0C0A0DtB2QtN0A0LzuyEtN1B2Z1V1T1S1NzutCtAtCyBzz%26cr%3D1021551336%26a%3Dwbf_nrssi_17_25_ssg02%26os_ver%3D10.0%26os%3DWindows%2B10%2BPro&p={searchTerms}
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2015-12-23] (IObit)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> D:\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll Geen bestand
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll Geen bestand
Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll Geen bestand
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF DefaultProfile: uyjnm201.default
FF ProfilePath: C:\Users\Gerda\AppData\Roaming\Mozilla\Firefox\Profiles\uyjnm201.default [2017-07-03]
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\uyjnm201.default -> Yahoo! Powered
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\uyjnm201.default -> Yahoo! Powered
FF Homepage: Mozilla\Firefox\Profiles\uyjnm201.default -> www.google.nl
FF Keyword.URL: Mozilla\Firefox\Profiles\uyjnm201.default -> user_pref("keyword.URL", true);
FF SearchPlugin: C:\Users\Gerda\AppData\Roaming\Mozilla\Firefox\Profiles\uyjnm201.default\searchplugins\yahoo! powered.xml [2017-06-22]
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> D:\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> D:\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-01] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-01] (Google Inc.)
StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome: 
=======
CHR Profile: C:\Users\Gerda\AppData\Local\Google\Chrome\User Data\Default [2017-07-02]
CHR Extension: (Google Presentaties) - C:\Users\Gerda\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-04-03]
CHR Extension: (Google Documenten) - C:\Users\Gerda\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-04-03]
CHR Extension: (Google Drive) - C:\Users\Gerda\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-04-03]
CHR Extension: (YouTube) - C:\Users\Gerda\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-04-03]
CHR Extension: (Google Spreadsheets) - C:\Users\Gerda\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-04-03]
CHR Extension: (Offline Documenten) - C:\Users\Gerda\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-04-03]
CHR Extension: (Betalingen via Chrome Web Store) - C:\Users\Gerda\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-04-03]
CHR Extension: (Gmail) - C:\Users\Gerda\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-04-03]
CHR Extension: (Chrome Media Router) - C:\Users\Gerda\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-04-03]
CHR HKLM\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-689821697-2636345003-3369014256-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce] - hxxps://clients2.google.com/service/update2/crx

==================== Services (gefilterd) ====================

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2945312 2016-01-15] (IObit)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347320 2017-04-28] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103712 2017-04-28] (Microsoft Corporation)
S2 AdvancedSystemCareService9; C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe [X]
S2 ByteFenceService; "C:\Program Files\ByteFence\ByteFenceService.exe" [X]
S2 rtop; "C:\Program Files\ByteFence\rtop\bin\rtop_svc.exe" [X]
S3 Sense; "%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe" [X]

===================== Drivers (gefilterd) ======================

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
R1 MpKslc3df5e15; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{82B6D6C7-384F-4B06-A7A9-BC00128572EC}\MpKslc3df5e15.sys [44928 2017-07-03] (Microsoft Corporation)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [589824 2016-07-16] (Realtek                                            )
S3 RTL8187B; C:\WINDOWS\System32\drivers\rtl8187B.sys [452096 2016-07-16] (Realtek Semiconductor Corporation                           )
S2 SecDrv; C:\WINDOWS\SysWOW64\drivers\SECDRV.SYS [12400 2017-06-29] (Macrovision Europe Ltd) [Bestand niet getekend]
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
R3 Thotkey; C:\WINDOWS\System32\drivers\Thotkey.sys [52816 2016-08-03] (Toshiba Client Solutions Co., Ltd.)
S3 usbrndis6; C:\WINDOWS\System32\drivers\usb80236.sys [23040 2016-07-16] (Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
U3 idsvc; geen ImagePath
U3 wpcsvc; geen ImagePath

==================== NetSvcs (gefilterd) ===================

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)


==================== Een Maand Aangemaakt bestanden en mappen ========

(Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)

2017-07-03 13:44 - 2017-07-03 13:44 - 00000000 ____D C:\FRST
2017-07-02 11:00 - 2017-07-02 11:00 - 00001039 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk
2017-07-02 11:00 - 2017-07-02 11:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2017-07-02 11:00 - 2017-07-02 11:00 - 00000000 ____D C:\Program Files\VS Revo Group
2017-07-01 17:07 - 2017-07-01 17:07 - 00001791 _____ C:\Users\Gerda\Desktop\MovieMaker.lnk
2017-07-01 16:57 - 2017-07-01 16:57 - 00001447 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2017-07-01 16:57 - 2017-07-01 16:57 - 00001378 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2017-07-01 16:57 - 2017-07-01 16:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Movie Maker
2017-07-01 16:57 - 2017-07-01 16:57 - 00000000 ____D C:\Program Files (x86)\Windows Movie Maker
2017-07-01 16:57 - 2017-07-01 16:57 - 00000000 ____D C:\Program Files (x86)\Windows Live
2017-07-01 16:09 - 2017-07-01 16:09 - 00003390 _____ C:\WINDOWS\System32\Tasks\DllKitPRO
2017-07-01 16:09 - 2017-07-01 16:09 - 00000000 ____D C:\Users\Gerda\AppData\Local\{003ACA6A-C058-424D-B955-A82DE5375C64}
2017-07-01 15:26 - 2017-07-01 16:08 - 00904176 _____ C:\Users\Gerda\Downloads\dllkit-setup.exe
2017-07-01 13:30 - 2017-07-01 13:30 - 00000000 ____D C:\WINDOWS\nl
2017-07-01 13:30 - 2017-07-01 13:30 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2017-07-01 13:29 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_42.dll
2017-07-01 13:29 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_42.dll
2017-07-01 13:29 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_32.dll
2017-07-01 13:29 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_32.dll
2017-07-01 13:22 - 2017-07-01 13:22 - 00000000 ____D C:\Users\Gerda\Tracing
2017-07-01 13:13 - 2017-07-01 16:37 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2017-07-01 13:12 - 2017-07-01 13:12 - 00000000 ____D C:\Program Files\Windows Live
2017-07-01 13:10 - 2017-07-01 13:10 - 00002415 _____ C:\Users\Gerda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-07-01 13:10 - 2017-07-01 13:10 - 00002290 _____ C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-07-01 13:10 - 2017-07-01 13:10 - 00002290 _____ C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-07-01 13:10 - 2017-07-01 13:10 - 00000000 ____D C:\Program Files (x86)\Microsoft OneDrive
2017-07-01 13:09 - 2017-07-01 13:33 - 00000000 ____D C:\Users\Gerda\AppData\Local\Windows Live
2017-06-30 14:14 - 2017-06-30 14:14 - 00000000 ____D C:\Users\Gerda\AppData\Roaming\WMM
2017-06-30 14:14 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll
2017-06-30 14:14 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll
2017-06-30 14:14 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll
2017-06-30 14:14 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll
2017-06-30 14:14 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll
2017-06-30 14:14 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll
2017-06-30 14:14 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll
2017-06-30 14:14 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_43.dll
2017-06-30 09:23 - 2017-06-30 09:23 - 00000000 ____D C:\Users\Gerda\AppData\Local\VideoEditor
2017-06-30 09:23 - 2017-06-30 09:23 - 00000000 ____D C:\Users\Gerda\AppData\Local\Movavi
2017-06-30 09:21 - 2017-06-30 09:21 - 00004865 _____ C:\ProgramData\czchsjpj.srw
2017-06-30 09:21 - 2017-06-30 09:21 - 00000016 _____ C:\ProgramData\mntemp
2017-06-30 09:21 - 2017-06-30 09:21 - 00000000 ____D C:\ProgramData\Movavi Video Editor 12
2017-06-29 22:10 - 2017-06-30 00:08 - 00000000 ____D C:\Users\Gerda\.openshot_qt
2017-06-29 21:29 - 2017-07-01 13:12 - 00002259 _____ C:\WINDOWS\epplauncher.mif
2017-06-29 21:28 - 2017-06-29 21:29 - 15082688 _____ (Microsoft Corporation) C:\Users\Gerda\Downloads\MSEInstall(1).exe
2017-06-29 21:27 - 2017-06-29 21:27 - 12256600 _____ (Microsoft Corporation) C:\Users\Gerda\Downloads\MSEInstall.exe
2017-06-25 17:59 - 2017-07-01 16:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ByteFence Anti-Malware
2017-06-25 17:59 - 2017-06-25 17:59 - 00003550 _____ C:\WINDOWS\System32\Tasks\ByteFence Scan
2017-06-22 21:55 - 2017-06-22 21:55 - 00000000 ____D C:\ProgramData\ByteFence
2017-06-22 20:33 - 2017-06-30 16:52 - 00000000 ____D C:\Users\Gerda\AppData\Roaming\vlc
2017-06-22 20:33 - 2017-06-22 20:33 - 00003444 _____ C:\WINDOWS\System32\Tasks\ByteFence
2017-06-22 20:32 - 2017-06-22 20:32 - 00000540 _____ C:\Users\Public\Desktop\VLC media player.lnk
2017-06-22 20:32 - 2017-06-22 20:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2017-06-22 20:31 - 2017-06-22 20:31 - 00000348 __RSH C:\ProgramData\ntuser.pol
2017-06-22 20:30 - 2017-06-29 15:49 - 00000000 ____D C:\Program Files\ByteFence
2017-06-22 20:29 - 2017-06-22 20:29 - 31367109 _____ C:\Users\Gerda\Downloads\vlc-setup-win10.exe
2017-06-22 20:27 - 2017-06-22 20:28 - 01531152 _____ (Murotopuf ) C:\Users\Gerda\Downloads\vlcsetup-win10_4093062802.exe
2017-06-22 18:35 - 2017-06-29 12:34 - 00012400 _____ (Macrovision Europe Ltd) C:\WINDOWS\SysWOW64\Drivers\SECDRV.SYS
2017-06-17 22:15 - 2017-06-17 22:15 - 00000000 ___SD C:\WINDOWS\UpdateAssistantV2
2017-06-14 19:18 - 2017-06-03 11:55 - 00780640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2017-06-14 19:18 - 2017-06-03 11:39 - 05686272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2017-06-14 19:18 - 2017-06-03 11:23 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-06-14 19:18 - 2017-06-03 11:22 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcorehc.dll
2017-06-14 19:18 - 2017-06-03 11:19 - 01164288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certutil.exe
2017-06-14 19:18 - 2017-06-03 11:16 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2017-06-14 19:18 - 2017-06-03 11:12 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdProxy.dll
2017-06-14 19:18 - 2017-06-03 11:08 - 02643968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2017-06-14 19:18 - 2017-06-03 11:04 - 00773120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2017-06-14 19:18 - 2017-06-03 11:03 - 01988096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2017-06-14 19:18 - 2017-06-03 11:02 - 02997760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-06-14 19:17 - 2017-06-03 12:50 - 00315744 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2017-06-14 19:17 - 2017-06-03 12:50 - 00192856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
2017-06-14 19:17 - 2017-06-03 12:11 - 01706488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2017-06-14 19:17 - 2017-06-03 12:06 - 02048496 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2017-06-14 19:17 - 2017-06-03 11:58 - 00340832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2017-06-14 19:17 - 2017-06-03 11:52 - 01021784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
2017-06-14 19:17 - 2017-06-03 11:52 - 00607072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2017-06-14 19:17 - 2017-06-03 11:52 - 00111968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2017-06-14 19:17 - 2017-06-03 11:49 - 20967840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-06-14 19:17 - 2017-06-03 11:44 - 01412640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2017-06-14 19:17 - 2017-06-03 11:44 - 00545944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2017-06-14 19:17 - 2017-06-03 11:33 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2017-06-14 19:17 - 2017-06-03 11:32 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2017-06-14 19:17 - 2017-06-03 11:31 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExSMime.dll
2017-06-14 19:17 - 2017-06-03 11:31 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2017-06-14 19:17 - 2017-06-03 11:28 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
2017-06-14 19:17 - 2017-06-03 11:28 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edputil.dll
2017-06-14 19:17 - 2017-06-03 11:26 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2017-06-14 19:17 - 2017-06-03 11:26 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthBrokerUI.dll
2017-06-14 19:17 - 2017-06-03 11:22 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2017-06-14 19:17 - 2017-06-03 11:22 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcpipcfg.dll
2017-06-14 19:17 - 2017-06-03 11:20 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2017-06-14 19:17 - 2017-06-03 11:15 - 19414016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-06-14 19:17 - 2017-06-03 11:15 - 18364928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-06-14 19:17 - 2017-06-03 11:15 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-06-14 19:17 - 2017-06-03 11:08 - 12187648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-06-14 19:17 - 2017-06-03 11:08 - 01221120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2017-06-14 19:17 - 2017-06-03 11:06 - 03664384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-06-14 19:17 - 2017-06-03 11:05 - 01883648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2017-06-14 19:17 - 2017-06-03 11:05 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hnetcfg.dll
2017-06-14 19:17 - 2017-06-03 11:04 - 06042624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-06-14 19:17 - 2017-06-03 11:04 - 02006528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2017-06-14 19:17 - 2017-06-03 10:40 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2017-06-14 19:17 - 2017-03-04 08:22 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2017-06-14 19:17 - 2017-03-04 08:19 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2017-06-14 19:17 - 2017-03-04 08:16 - 00368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2017-06-14 19:17 - 2016-09-07 06:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentActivation.dll
2017-06-14 19:04 - 2017-06-03 11:14 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2017-06-14 19:04 - 2017-06-03 10:52 - 03403264 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2017-06-14 19:04 - 2017-06-03 10:50 - 02538496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2017-06-14 19:04 - 2017-06-03 10:49 - 00903680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2017-06-14 19:02 - 2017-06-03 12:11 - 00128864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys
2017-06-14 19:02 - 2017-06-03 11:59 - 00118112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2017-06-14 19:02 - 2017-06-03 11:53 - 00404824 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-06-14 19:02 - 2017-06-03 11:50 - 00857440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-06-14 19:02 - 2017-06-03 11:49 - 00509280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2017-06-14 19:02 - 2017-06-03 11:45 - 22220864 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-06-14 19:02 - 2017-06-03 11:44 - 01600624 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-06-14 19:02 - 2017-06-03 11:39 - 02532192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2017-06-14 19:02 - 2017-06-03 11:16 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2017-06-14 19:02 - 2017-06-03 11:15 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2017-06-14 19:02 - 2017-06-03 11:14 - 00238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2017-06-14 19:02 - 2017-06-03 11:14 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2017-06-14 19:02 - 2017-06-03 11:11 - 00353792 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2017-06-14 19:02 - 2017-06-03 11:10 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2017-06-14 19:02 - 2017-06-03 11:10 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBrokerUI.dll
2017-06-14 19:02 - 2017-06-03 11:08 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-06-14 19:02 - 2017-06-03 11:07 - 00552960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2017-06-14 19:02 - 2017-06-03 11:03 - 00932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2017-06-14 19:02 - 2017-06-03 10:53 - 08125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-06-14 19:02 - 2017-06-03 10:52 - 02510848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2017-06-14 19:02 - 2017-06-03 10:50 - 04744704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-06-14 19:02 - 2017-06-03 10:49 - 03615744 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-06-14 19:02 - 2017-06-03 10:49 - 02691072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-06-14 19:02 - 2017-06-03 10:49 - 02318848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-06-14 19:02 - 2017-06-03 10:49 - 01513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-06-14 19:02 - 2017-06-03 10:48 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-06-14 19:02 - 2017-06-03 10:46 - 01121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-06-14 19:01 - 2017-06-03 12:14 - 00136024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll
2017-06-14 19:01 - 2017-06-03 12:08 - 07783256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-06-14 19:01 - 2017-06-03 11:59 - 01181024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2017-06-14 19:01 - 2017-06-03 11:48 - 00857952 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2017-06-14 19:01 - 2017-06-03 11:48 - 00148832 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2017-06-14 19:01 - 2017-06-03 11:09 - 00489472 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2017-06-14 19:01 - 2017-06-03 11:09 - 00441344 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcorehc.dll
2017-06-14 19:01 - 2017-06-03 11:09 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
2017-06-14 19:01 - 2017-06-03 11:07 - 00456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2017-06-14 19:01 - 2017-06-03 10:54 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2017-06-14 19:01 - 2017-06-03 10:51 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2017-06-14 19:01 - 2017-06-03 10:48 - 01131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2017-06-14 19:01 - 2017-06-03 10:48 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2017-06-14 19:01 - 2017-05-25 07:56 - 00038752 _____ (Microsoft Corporation) C:\WINDOWS\system32\OOBEUpdater.exe
2017-06-14 19:01 - 2017-03-04 08:16 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpninprc.dll
2017-06-14 19:00 - 2017-06-03 12:14 - 00379232 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2017-06-14 19:00 - 2017-06-03 12:09 - 02213760 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-06-14 19:00 - 2017-06-03 11:51 - 02187104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-06-14 19:00 - 2017-06-03 11:51 - 00402272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2017-06-14 19:00 - 2017-06-03 11:49 - 00624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-06-14 19:00 - 2017-06-03 11:40 - 01566552 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2017-06-14 19:00 - 2017-06-03 11:40 - 00628552 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2017-06-14 19:00 - 2017-06-03 11:18 - 22569984 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-06-14 19:00 - 2017-06-03 11:16 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2017-06-14 19:00 - 2017-06-03 11:14 - 00045056 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2017-06-14 19:00 - 2017-06-03 11:08 - 00691200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-06-14 19:00 - 2017-06-03 11:07 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\HNetCfgClient.dll
2017-06-14 19:00 - 2017-06-03 11:00 - 23677440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-06-14 19:00 - 2017-06-03 10:56 - 13091840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-06-14 19:00 - 2017-06-03 10:52 - 00975872 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe
2017-06-14 19:00 - 2017-06-03 10:49 - 00351744 _____ (Microsoft Corporation) C:\WINDOWS\system32\hnetcfg.dll
2017-06-14 19:00 - 2017-06-03 10:48 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-06-14 19:00 - 2017-06-03 08:08 - 00080078 _____ C:\WINDOWS\system32\normidna.nls
2017-06-14 18:59 - 2017-06-03 12:14 - 01564512 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2017-06-14 18:59 - 2017-06-03 12:14 - 00629088 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2017-06-14 18:59 - 2017-06-03 12:14 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2017-06-14 18:59 - 2017-06-03 12:14 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2017-06-14 18:59 - 2017-06-03 12:14 - 00096608 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2017-06-14 18:59 - 2017-06-03 12:14 - 00034648 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2017-06-14 18:59 - 2017-06-03 12:01 - 02681200 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2017-06-14 18:59 - 2017-06-03 11:48 - 01112416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2017-06-14 18:59 - 2017-06-03 11:22 - 07217152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-06-14 18:59 - 2017-06-03 11:10 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\edputil.dll
2017-06-14 18:59 - 2017-06-03 11:06 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2017-06-14 18:59 - 2017-06-03 11:01 - 00856064 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
2017-06-14 18:59 - 2017-06-03 10:52 - 00886784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2017-06-14 18:59 - 2017-06-03 10:51 - 01418240 _____ (Microsoft Corporation) C:\WINDOWS\system32\certutil.exe
2017-06-14 18:59 - 2017-06-03 10:49 - 02475520 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2017-06-14 18:59 - 2017-06-03 10:49 - 01845248 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2017-06-14 18:58 - 2017-06-03 12:14 - 01214816 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-06-14 18:58 - 2017-06-03 12:14 - 00544096 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2017-06-14 18:58 - 2017-06-03 12:14 - 00334176 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2017-06-14 18:58 - 2017-06-03 12:14 - 00233824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2017-06-14 18:58 - 2017-06-03 11:59 - 00764392 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-06-14 18:58 - 2017-06-03 11:48 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2017-06-14 18:58 - 2017-06-03 11:48 - 00989024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2017-06-14 18:58 - 2017-06-03 11:39 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2017-06-14 18:58 - 2017-06-03 11:08 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2017-06-14 18:58 - 2017-06-03 10:58 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdProxy.dll
2017-06-14 18:57 - 2017-06-03 12:16 - 00279904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2017-06-14 18:57 - 2017-06-03 11:54 - 00187232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2017-06-14 18:57 - 2017-06-03 11:50 - 00381792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2017-06-14 18:57 - 2017-06-03 11:15 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
2017-06-05 23:23 - 2017-04-18 18:13 - 00000801 _____ C:\Users\Gerda\Desktop\Card File.lnk
2017-06-04 12:47 - 2017-06-04 12:47 - 00018995 _____ C:\Users\Gerda\Downloads\NL52INGB0005057731_31-03-2017_03-06-2017.csv
2017-06-04 12:47 - 2017-06-04 12:47 - 00009722 _____ C:\Users\Gerda\Downloads\NL79INGB0005412071_31-03-2017_03-06-2017.csv
2017-06-04 12:46 - 2017-06-04 12:46 - 00021204 _____ C:\Users\Gerda\Downloads\NL84INGB0004555471_31-03-2017_03-06-2017.csv
2017-06-04 12:46 - 2017-06-04 12:46 - 00007168 _____ C:\Users\Gerda\Downloads\NL20INGB0005073924_31-03-2017_03-06-2017.csv

==================== Een Maand Gewijzigd bestanden en mappen ========

(Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)

2017-07-03 13:22 - 2017-04-01 15:29 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-07-02 19:30 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-07-02 12:09 - 2017-04-19 10:35 - 00000000 ____D C:\Users\Gerda\AppData\Local\CrashDumps
2017-07-02 12:07 - 2017-03-31 21:47 - 00000000 ____D C:\Users\Gerda\AppData\LocalLow\Mozilla
2017-07-02 11:56 - 2017-04-01 15:41 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-07-02 11:55 - 2016-07-16 08:04 - 00524288 _____ C:\WINDOWS\system32\config\BBI
2017-07-02 11:41 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\registration
2017-07-02 11:10 - 2017-05-29 16:38 - 00000000 ____D C:\Users\Gerda\AppData\Roaming\TeamViewer
2017-07-02 11:10 - 2017-05-02 15:35 - 00000000 ____D C:\Users\Gerda\AppData\Roaming\FileZilla
2017-07-02 11:09 - 2016-07-16 13:45 - 00000000 ____D C:\WINDOWS\INF
2017-07-01 17:15 - 2017-04-01 15:34 - 00000000 ____D C:\Users\Gerda
2017-07-01 16:43 - 2017-03-31 21:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-07-01 16:09 - 2017-04-02 20:31 - 00002492 _____ C:\WINDOWS\System32\Tasks\Uninstaller_SkipUac_Gerda
2017-07-01 16:09 - 2017-04-02 20:31 - 00000306 _____ C:\WINDOWS\Tasks\Uninstaller_SkipUac_Gerda.job
2017-07-01 14:59 - 2017-04-01 15:44 - 02384912 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-07-01 14:59 - 2016-07-17 00:15 - 00989164 _____ C:\WINDOWS\system32\perfh013.dat
2017-07-01 14:59 - 2016-07-17 00:15 - 00227200 _____ C:\WINDOWS\system32\perfc013.dat
2017-07-01 14:45 - 2017-04-18 18:04 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2017-07-01 13:12 - 2016-07-16 13:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2017-07-01 13:10 - 2017-04-01 16:17 - 00000000 ___RD C:\Users\Gerda\OneDrive
2017-07-01 13:04 - 2016-07-16 13:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-06-30 09:12 - 2017-03-31 21:47 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-06-29 12:59 - 2017-04-18 18:04 - 00000000 ____D C:\temp
2017-06-29 12:19 - 2017-04-03 19:04 - 00002292 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-06-29 12:19 - 2017-04-03 19:04 - 00002280 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-06-28 10:04 - 2017-04-02 20:31 - 00000000 ____D C:\ProgramData\ProductData
2017-06-22 20:31 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2017-06-22 20:31 - 2009-07-14 05:20 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
2017-06-20 21:52 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\rescache
2017-06-20 19:42 - 2017-04-01 16:07 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-06-20 19:40 - 2017-04-01 15:29 - 00409688 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-06-17 22:15 - 2016-07-16 13:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-06-17 22:15 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\appraiser
2017-06-17 22:15 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-06-17 21:42 - 2017-04-01 12:09 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-06-17 21:38 - 2017-04-01 12:09 - 133627792 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-06-14 23:32 - 2016-07-16 13:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-06-04 13:32 - 2016-07-16 13:47 - 00000000 ____D C:\WINDOWS\system32\FxsTmp
2017-06-03 08:36 - 2016-07-16 13:49 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-06-03 08:36 - 2016-07-16 13:49 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

==================== Bestanden in de root van sommige mappen =======

2017-04-18 18:10 - 2017-04-18 18:10 - 0012358 _____ () C:\Users\Gerda\AppData\Roaming\PFP100JCM.{PB
2017-04-18 18:10 - 2017-04-18 18:10 - 0061678 _____ () C:\Users\Gerda\AppData\Roaming\PFP100JPR.{PB
2017-06-30 09:21 - 2017-06-30 09:21 - 0004865 _____ () C:\ProgramData\czchsjpj.srw
2017-06-30 09:21 - 2017-06-30 09:21 - 0000016 _____ () C:\ProgramData\mntemp

==================== Bamital & volsnap ======================

(Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.)

C:\WINDOWS\system32\winlogon.exe => Bestand is getekend
C:\WINDOWS\system32\wininit.exe => Bestand is getekend
C:\WINDOWS\explorer.exe => Bestand is getekend
C:\WINDOWS\SysWOW64\explorer.exe => Bestand is getekend
C:\WINDOWS\system32\svchost.exe => Bestand is getekend
C:\WINDOWS\SysWOW64\svchost.exe => Bestand is getekend
C:\WINDOWS\system32\services.exe => Bestand is getekend
C:\WINDOWS\system32\User32.dll => Bestand is getekend
C:\WINDOWS\SysWOW64\User32.dll => Bestand is getekend
C:\WINDOWS\system32\userinit.exe => Bestand is getekend
C:\WINDOWS\SysWOW64\userinit.exe => Bestand is getekend
C:\WINDOWS\system32\rpcss.dll => Bestand is getekend
C:\WINDOWS\system32\dnsapi.dll => Bestand is getekend
C:\WINDOWS\SysWOW64\dnsapi.dll => Bestand is getekend
C:\WINDOWS\system32\Drivers\volsnap.sys => Bestand is getekend

LastRegBack: 2017-07-01 13:43

==================== Eind van FRST.txt ============================