Extra scanresultaten van Farbar Recovery Scan Tool (x64) Versie: 06-08-2017 Gestart door PC (06-08-2017 19:29:48) Gestart vanaf C:\Users\PC\Downloads Windows 10 Home Versie 1703 (X64) (2017-06-15 17:59:42) Boot Modus: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-2361614064-3764812395-1346761622-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-2361614064-3764812395-1346761622-503 - Limited - Disabled) Gast (S-1-5-21-2361614064-3764812395-1346761622-501 - Limited - Disabled) PC (S-1-5-21-2361614064-3764812395-1346761622-1001 - Administrator - Enabled) => C:\Users\PC ==================== Security Center ======================== (Als een item is opgenomen in de fixlist, zal het worden verwijderd.) AV: KPN Internet Veiligheidspakket 12.01 (Enabled - Up to date) {0F70A6C4-76E4-6A3B-2695-519F428B1C20} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: KPN Internet Veiligheidspakket 12.01 (Enabled - Up to date) {B4114720-50DE-65B5-1C25-6AED390C569D} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: KPN Internet Veiligheidspakket 12.01 (Enabled) {374B27E1-3C8B-6B63-0DCA-F8AABC585B5B} ==================== Geïnstalleerde programma's ====================== (Alleen de adware-programma's met 'verborgen' vlag zou kunnen worden toegevoegd aan de fixlist om ze zichtbaar te maken. De adware-programma's moeten handmatig gedeinstallerd worden.) Adobe Acrobat X Pro - Italiano, Español, Nederlands, Português (HKLM-x32\...\{AC76BA86-1040-7D70-7760-000000000005}) (Version: 10.1.16 - Adobe Systems) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 26.0.0.127 - Adobe Systems Incorporated) Adobe Creative Suite 6 Master Collection (HKLM-x32\...\{E8AD3069-9EB7-4BA8-8BFE-83F4E69355C0}) (Version: 6 - Adobe Systems Incorporated) Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated) Adobe Photoshop 7.0 (HKLM-x32\...\Adobe Photoshop 7.0) (Version: 7.0 - Adobe Systems, Inc.) Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.9.199 - Adobe Systems, Inc.) Adobe Widget Browser (HKLM-x32\...\com.adobe.WidgetBrowser) (Version: 2.0 Build 348 - Adobe Systems Incorporated.) Alien Skin Eye Candy 5 Impact (HKLM-x32\...\EyeCandy5Impact) (Version: - ) Alien Skin Eye Candy 5 Nature (HKLM-x32\...\EyeCandy5Nature) (Version: - ) Alien Skin Eye Candy 5 Textures (HKLM-x32\...\EyeCandy5Textures) (Version: - ) Alien Skin Eye Candy 6 (HKLM-x32\...\Eye Candy 6) (Version: - ) Alien Skin Eye Candy 7 (HKLM\...\Alien Skin Eye Candy 7) (Version: - Alien Skin) Alien Skin Xenofex 2.0 (HKLM-x32\...\Xenofex2) (Version: - ) Any DVD Shrink 1.3.8 (HKLM-x32\...\Any DVD Shrink_is1) (Version: - any-dvd-shrink.com) AVS Video Converter 9.0 (HKLM-x32\...\AVS4YOU Video Converter 7_is1) (Version: 9.0.1.566 - Online Media Technologies Ltd.) bl (HKLM-x32\...\{2A075BB4-E976-4278-BF3F-E5C6945D84C0}) (Version: 1.0.0 - Your Company Name) Hidden Boris Graffiti (HKLM-x32\...\{262BF2CD-601D-4F43-919C-4B00B1D1F338}) (Version: 5.20.200 - Boris FX, Inc.) CCleaner (HKLM\...\CCleaner) (Version: 5.32 - Piriform) Corel Paint Shop Pro Photo X2 (HKLM-x32\...\{64E72FB1-2343-4977-B4A8-262CD53D0BD3}) (Version: 12.001.0000 - Corel Corporation) Corel PaintShop Pro X5 (HKLM-x32\...\_{1563C6F2-E9B5-42DE-9EA6-207C9A8C2DFB}) (Version: 15.0.0.183 - Corel Corporation) Corel PaintShop Pro X5 (HKLM-x32\...\{15180A90-1FC0-47E4-A150-3AECEF07B3B6}) (Version: 15.3.0.8 - Corel Corporation) Hidden Corel PaintShop Pro X9 (HKLM-x32\...\_{998717E5-1031-4D28-A143-48ADAF062E5F}) (Version: 19.2.0.7 - Corel Corporation) Corel PaintShop Pro X9 (HKLM-x32\...\{93EE564E-9DA1-4655-8A90-4E816019B409}) (Version: 19.0.0.96 - Corel Corporation) Hidden Corel Update Manager (HKLM-x32\...\{EE61B6C5-F017-4505-85D3-6D40B1797D32}) (Version: 2.3.201 - Corel corporation) Hidden DAZ PostgreSQL CMS (HKLM-x32\...\DAZ PostgreSQL CMS 9.3.4.3) (Version: 9.3.4.3 - DAZ 3D) DAZ Studio 4.9 (64bit) (HKLM-x32\...\DAZ Studio 4.9 (64bit) 4.9.4.117) (Version: 4.9.4.117 - DAZ 3D) DHTML Editing Component (HKLM-x32\...\{2EA870FA-585F-4187-903D-CB9FFD21E2E0}) (Version: 6.02.0001 - Microsoft Corporation) Epson Event Manager (HKLM-x32\...\{8F01524C-0676-4CC1-B4AE-64753C723391}) (Version: 3.01.0005 - Seiko Epson Corporation) Epson Gebruikershandleiding XP-600 Series (HKLM-x32\...\XP-600 Series Useg) (Version: - ) Epson Netwerkhandleiding XP-600 Series (HKLM-x32\...\XP-600 Series Netg) (Version: - ) EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation) EPSON XP-600 Series Printer Uninstall (HKLM\...\EPSON XP-600 Series) (Version: - SEIKO EPSON Corporation) EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION) Eye Candy 4000 (HKLM-x32\...\Eye Candy 4000) (Version: - ) Facebook Gameroom 1.7.6419.39279 (HKLM-x32\...\{D4BD422A-BE4A-4318-B617-34FA42544193}) (Version: 1.7.6419.39279 - Facebook) FM Patcher 1.01 (HKLM-x32\...\FM Patcher_is1) (Version: - AFH Systems & The Plugin Site) GetSmile v1.952 (HKLM-x32\...\GetSmile0903_is1) (Version: 1.952 - Sofrayt LLC) Google Chrome (HKLM\...\{4FC9E77C-E167-397D-9177-17413300902A}) (Version: 60.0.3112.78 - Google, Inc.) Google Drive (HKLM-x32\...\{A1238426-ECDF-4639-BE2F-8D12A97AE23C}) (Version: 2.34.5075.1619 - Google, Inc.) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden Handleiding Epson Connect (HKLM-x32\...\Epson Connect Guide) (Version: - ) ICA (HKLM-x32\...\{1563C6F2-E9B5-42DE-9EA6-207C9A8C2DFB}) (Version: 15.0.0.183 - Corel Corporation) Hidden ICA (HKLM-x32\...\{998717E5-1031-4D28-A143-48ADAF062E5F}) (Version: 19.0.0.96 - Corel Corporation) Hidden ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!) IPM_PSP_COM (HKLM-x32\...\{154B0B16-ABCD-4A06-B0B7-8146B7A89B25}) (Version: 15.0.0.183 - Corel Corporation) Hidden IPM_PSP_COM (HKLM-x32\...\{9A86C6EE-2CCC-4A51-BCC8-AAF97C2F4615}) (Version: 19.0.0.96 - Corel Corporation) Hidden Jasc Animation Shop 3 (HKLM-x32\...\{7C4196CA-CA41-4F34-9C08-7724E7705D52}) (Version: 3.11 - Uw bedrijfsnaam) Java 8 Update 141 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180141F0}) (Version: 8.0.1410.15 - Oracle Corporation) Java 8 Update 141 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180141F0}) (Version: 8.0.1410.15 - Oracle Corporation) Java SE Development Kit 8 Update 131 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180131}) (Version: 8.0.1310.11 - Oracle Corporation) Java SE Development Kit 8 Update 131 (HKLM-x32\...\{32A3A4F4-B792-11D6-A78A-00B0D0180131}) (Version: 8.0.1310.11 - Oracle Corporation) KMSpico (HKLM\...\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1) (Version: - ) KPN Internet Veiligheidspakket (HKLM-x32\...\F-Secure Product 440) (Version: 12.01 - F-Secure Corporation) Magic Bullet Looks Studio (HKLM-x32\...\Magic Bullet Looks Studio) (Version: - ) Microsoft Office Professional Plus 2013 (HKLM-x32\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-2361614064-3764812395-1346761622-1001\...\OneDriveSetup.exe) (Version: 17.3.6943.0625 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Mozilla Firefox 54.0 (x86 nl) (HKLM-x32\...\Mozilla Firefox 54.0 (x86 nl)) (Version: 54.0 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 54.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 52.2.0 - Mozilla) Mozilla Thunderbird 52.2.0 (x86 nl) (HKLM-x32\...\Mozilla Thunderbird 52.2.0 (x86 nl)) (Version: 52.2.0 - Mozilla) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) namesuppressed Softener (HKLM-x32\...\Softener_5QM) (Version: 1.21 - namesuppressed) NVIDIA 3D Vision stuurprogramma 342.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 342.01 - NVIDIA Corporation) NVIDIA Grafisch stuurprogramma 342.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 342.01 - NVIDIA Corporation) NVIDIA Update 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation) Outils de vérification linguistique 2013 de Microsoft Office - Français (HKLM-x32\...\{90150000-001F-040C-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden Paint Shop Pro 7 Try And Buy (HKLM-x32\...\{D6DE02C7-1F47-11D4-9515-00105AE4B89A}) (Version: 7.0.4.0000 - Jasc Software Inc) PDF Settings CS6 (HKLM-x32\...\{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}) (Version: 11.0 - Adobe Systems Incorporated) Hidden ph (HKLM-x32\...\{185F9795-9663-4F13-9EF9-307A282ADB5A}) (Version: 1.0.0 - Your Company Name) Hidden PhotoImpact X3 (HKLM-x32\...\{15803703-25FA-4C01-A062-3F4A59937E87}) (Version: 13.0 - Corel) Hidden PhotoImpact X3 (HKLM-x32\...\InstallShield_{15803703-25FA-4C01-A062-3F4A59937E87}) (Version: 13.0 - Corel) Pinnacle Studio 12 (HKLM-x32\...\{D041EB9E-890A-4098-8F94-51DA194AC72A}) (Version: 12.0.0.6163 - Pinnacle Systems) Pinnacle Studio 12 Ultimate Plugins (HKLM-x32\...\{D1860E6E-520E-4380-8433-E58E8F88B473}) (Version: 12.0.0.0 - Pinnacle Systems) Pinnacle videodriver (HKLM\...\{5EB90C06-964F-4195-B83E-BD7E55C88415}) (Version: 12.00.0017 - Pinnacle Systems) Plugin Commander Light 1.62 (HKLM-x32\...\Plugin Commander Light 1.62_is1) (Version: 1.60 - The Plugin Site) proDAD Vitascene 1.0 (HKLM-x32\...\proDAD-Vitascene-1.0) (Version: - ) PSP Thumbnail Handler (HKLM\...\{2086A549-ED96-4dc9-BBE3-0538AB29ABEC}) (Version: 2.10.49 - Bot Productions) PSPPContent (HKLM-x32\...\{1522E36C-3739-41E4-8CD3-A4AFEA70086A}) (Version: 15.3.0.8 - Corel Corporation) Hidden PSPPContent (HKLM-x32\...\{91773E30-F29C-4381-854A-95281DEB8DA1}) (Version: 19.0.0.96 - Corel Corporation) Hidden PSPPHelp (HKLM-x32\...\{153DD765-C8C6-4893-8CEF-D965351D82EC}) (Version: 15.0.0.183 - Corel Corporation) Hidden PSPPHelp (HKLM-x32\...\{9F087D85-EDDC-4DC4-B665-AFDD3734D987}) (Version: 19.0.0.96 - Corel Corporation) Hidden PSPPro64 (HKLM\...\{1551A29F-B1B0-43CA-90B5-E6E5186F683E}) (Version: 15.0.0.183 - Corel Corporation) Hidden PSPPro64 (HKLM\...\{9722764A-D7C1-483A-931C-9C0A95D5F4EB}) (Version: 19.0.0.96 - Corel Corporation) Hidden Samsung Kies (HKLM-x32\...\{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.4.16113.3 - Samsung Electronics Co., Ltd.) Hidden Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.4.16113.3 - Samsung Electronics Co., Ltd.) Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.61.0 - Samsung Electronics Co., Ltd.) Setup (HKLM-x32\...\{15002A1B-C1E7-4E91-A3EC-5502BF924A32}) (Version: 15.0.0.183 - Uw bedrijfsnaam) Hidden Setup (HKLM-x32\...\{9E0054AB-F957-4177-850E-3541960DBD53}) (Version: 19.0.0.96 - Uw bedrijfsnaam) Hidden Skype™ 7.38 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.38.101 - Skype Technologies S.A.) swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden Taalpakket voor Microsoft Visual Studio 2010 Tools for Office Runtime (x64) - NLD (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - NLD) (Version: 10.0.50903 - Microsoft Corporation) TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.81460 - TeamViewer) Total Commander (Remove or Repair) (HKLM-x32\...\Totalcmd) (Version: - ) Ulead GIF-X.Plugin 2.0 (HKLM-x32\...\Ulead GIF-X.Plugin 2.0) (Version: - ) Update for Skype for Business 2015 (KB3213574) 32-Bit Edition (HKLM-x32\...\{90150000-002A-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{2178D653-A054-4A65-9726-A90664E92D9F}) (Version: - Microsoft) Update for Skype for Business 2015 (KB3213574) 32-Bit Edition (HKLM-x32\...\{90150000-012B-0413-0000-0000000FF1CE}_Office15.PROPLUSR_{2178D653-A054-4A65-9726-A90664E92D9F}) (Version: - Microsoft) Update for Skype for Business 2015 (KB3213574) 32-Bit Edition (HKLM-x32\...\{91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{2178D653-A054-4A65-9726-A90664E92D9F}) (Version: - Microsoft) VLC media player (HKLM\...\VLC media player) (Version: 2.2.6 - VideoLAN) WinRAR (HKLM-x32\...\WinRAR archiver) (Version: - ) Xenofex 1.0 (HKLM-x32\...\Xenofex 1.0) (Version: - ) Xilisoft AVI to DVD Converter 6 (HKLM-x32\...\Xilisoft AVI to DVD Converter 6) (Version: 6.2.1.0321 - Xilisoft) ==================== Aangepaste CLSID (gefilterd): ========================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-03-21] (Google) ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-03-21] (Google) ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-03-21] (Google) ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\PC\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\amd64\FileSyncShell64.dll [2017-07-27] (MicrosoftCorporation) ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Users\PC\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\amd64\FileSyncShell64.dll [2017-07-27] (MicrosoftCorporation) ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Users\PC\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\amd64\FileSyncShell64.dll [2017-07-27] (MicrosoftCorporation) ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\PC\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\amd64\FileSyncShell64.dll [2017-07-27] (MicrosoftCorporation) ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\PC\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\amd64\FileSyncShell64.dll [2017-07-27] (MicrosoftCorporation) ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Users\PC\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\amd64\FileSyncShell64.dll [2017-07-27] (MicrosoftCorporation) ShellIconOverlayIdentifiers: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2017-02-23] (MicrosoftCorporation) ShellIconOverlayIdentifiers: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2017-02-23] (MicrosoftCorporation) ShellIconOverlayIdentifiers: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2017-02-23] (MicrosoftCorporation) ShellIconOverlayIdentifiers: [EnhancedStorageShell] -> {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D} => C:\Windows\System32\EhStorShell.dll [2017-03-18] (MicrosoftCorporation) ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\PC\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\amd64\FileSyncShell64.dll [2017-07-27] (MicrosoftCorporation) ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Users\PC\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\amd64\FileSyncShell64.dll [2017-07-27] (MicrosoftCorporation) ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Users\PC\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\amd64\FileSyncShell64.dll [2017-07-27] (MicrosoftCorporation) ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\PC\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\amd64\FileSyncShell64.dll [2017-07-27] (MicrosoftCorporation) ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\PC\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\amd64\FileSyncShell64.dll [2017-07-27] (MicrosoftCorporation) ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Users\PC\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\amd64\FileSyncShell64.dll [2017-07-27] (MicrosoftCorporation) ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802} => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\..\Acrobat Elements\ContextMenu64.dll [2015-09-24] (AdobeSystemsInc.) ContextMenuHandlers1: [Corel PaintShop Pro X5] -> {D6D67107-2AFB-41D4-97E3-4F6ED2A21FF8} => c:\Program Files (x86)\Corel\Corel PaintShop Pro X5\PSPContextMenu64.dll [2012-07-20] (CorelSoftware,Inc.) ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-03-21] (Google) ContextMenuHandlers1: [ModernSharing] -> {e2bf9676-5f8f-435c-97eb-11607a5bedf7} => C:\Windows\system32\ntshrui.dll [2017-03-18] (MicrosoftCorporation) ContextMenuHandlers1: [Open With] -> {09799AFB-AD67-11d1-ABCD-00C04FC30936} => C:\Windows\system32\shell32.dll [2017-07-07] (MicrosoftCorporation) ContextMenuHandlers1: [Sharing] -> {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} => C:\Windows\system32\ntshrui.dll [2017-03-18] (MicrosoftCorporation) ContextMenuHandlers1: [ShellConverter] -> {30A4E07E-068A-4d91-8F05-691283A1336B} => C:\Program Files (x86)\Common Files\AVSMedia\ActiveX\AVSShellConverter64.dll [2013-05-27] (OnlineMediaTechnologiesLtd.) ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2005-06-07] () ContextMenuHandlers1: [WorkFolders] -> {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} => C:\Windows\System32\WorkfoldersShell.dll [2017-03-18] (MicrosoftCorporation) ContextMenuHandlers2: [Corel PaintShop Pro X5] -> {D6D67107-2AFB-41D4-97E3-4F6ED2A21FF8} => c:\Program Files (x86)\Corel\Corel PaintShop Pro X5\PSPContextMenu64.dll [2012-07-20] (CorelSoftware,Inc.) ContextMenuHandlers2: [EnhancedStorageShell] -> {2854F705-3548-414C-A113-93E27C808C85} => C:\Windows\System32\EhStorShell.dll [2017-03-18] (MicrosoftCorporation) ContextMenuHandlers2: [Sharing] -> {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} => C:\Windows\system32\ntshrui.dll [2017-03-18] (MicrosoftCorporation) ContextMenuHandlers3: [CopyAsPathMenu] -> {f3d06e7c-1e45-4a26-847e-f9fcdee59be0} => C:\Windows\system32\shell32.dll [2017-07-07] (MicrosoftCorporation) ContextMenuHandlers3: [F-Secure Shell Extension] -> {23814B80-52A2-11D0-BC1A-004095606CB9} => C:\Program Files (x86)\KPN\Internetveiligheidspakket\Common\fpshx.dll [2016-04-06] (F-SecureCorporation) ContextMenuHandlers3: [SendTo] -> {7BA4C740-9E81-11CF-99D3-00AA004AE837} => C:\Windows\system32\shell32.dll [2017-07-07] (MicrosoftCorporation) ContextMenuHandlers4: [Corel PaintShop Pro X5] -> {D6D67107-2AFB-41D4-97E3-4F6ED2A21FF8} => c:\Program Files (x86)\Corel\Corel PaintShop Pro X5\PSPContextMenu64.dll [2012-07-20] (CorelSoftware,Inc.) ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-03-21] (Google) ContextMenuHandlers4: [Sharing] -> {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} => C:\Windows\system32\ntshrui.dll [2017-03-18] (MicrosoftCorporation) ContextMenuHandlers4: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2005-06-07] () ContextMenuHandlers4: [WorkFolders] -> {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} => C:\Windows\System32\WorkfoldersShell.dll [2017-03-18] (MicrosoftCorporation) ContextMenuHandlers5: [New] -> {D969A300-E7FF-11d0-A93B-00A0C90F2719} => C:\Windows\system32\shell32.dll [2017-07-07] (MicrosoftCorporation) ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2016-11-14] (NVIDIACorporation) ContextMenuHandlers5: [Sharing] -> {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} => C:\Windows\system32\ntshrui.dll [2017-03-18] (MicrosoftCorporation) ContextMenuHandlers5: [WorkFolders] -> {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} => C:\Windows\System32\WorkfoldersShell.dll [2017-03-18] (MicrosoftCorporation) ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802} => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\..\Acrobat Elements\ContextMenu64.dll [2015-09-24] (AdobeSystemsInc.) ContextMenuHandlers6: [Library Location] -> {3dad6c5d-2167-4cae-9914-f99e41c12cfa} => C:\Windows\system32\shell32.dll [2017-07-07] (MicrosoftCorporation) ContextMenuHandlers6: [PintoStartScreen] -> {470C0EBD-5D73-4d58-9CED-E91E22E23282} => C:\Windows\System32\appresolver.dll [2017-04-14] (MicrosoftCorporation) ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2005-06-07] () ContextMenuHandlers1_S-1-5-21-2361614064-3764812395-1346761622-1001: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Users\PC\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\amd64\FileSyncShell64.dll [2017-07-27] (MicrosoftCorporation) ContextMenuHandlers4_S-1-5-21-2361614064-3764812395-1346761622-1001: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Users\PC\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\amd64\FileSyncShell64.dll [2017-07-27] (MicrosoftCorporation) ContextMenuHandlers5_S-1-5-21-2361614064-3764812395-1346761622-1001: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Users\PC\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\amd64\FileSyncShell64.dll [2017-07-27] (MicrosoftCorporation) ==================== Geplande Taken (gefilterd) ============= (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) Task: {0117C855-9266-4102-A889-079228EF9DEF} - System32\Tasks\Microsoft\Windows\Subscription\EnableLicenseAcquisition => C:\Windows\system32\ClipRenew.exe [2017-03-20] (MicrosoftCorporation) Task: {02DCE209-4F99-49B9-A642-C3AF70C8B414} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-21] (MicrosoftCorporation) Task: {05C35C43-30B0-478C-A045-7452BCE45E4E} - System32\Tasks\Microsoft\Windows\Defrag\ScheduledDefrag => C:\Windows\system32\defrag.exe [2017-03-18] (MicrosoftCorp.) Task: {07FA7014-2C65-4E73-A804-C63111CE66B4} - System32\Tasks\CorelUpdateHelperTask => C:\Program Files (x86)\Corel\CUH\v2\CUH.exe [2017-07-24] (CorelCorporation) Task: {0CC2C164-C391-4AE1-AC44-61014D23FC1F} - System32\Tasks\Microsoft\Windows\Storage Tiers Management\Storage Tiers Optimization => C:\Windows\system32\defrag.exe [2017-03-18] (MicrosoftCorp.) Task: {20748B4E-17D6-4994-ACEB-6672BAAAEF4C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-06-17] (GoogleInc.) Task: {240478A4-B7D2-43B1-AF21-626C77E72C1F} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics => C:\Windows\system32\disksnapshot.exe [2017-03-18] (MicrosoftCorporation) Task: {2532DB2F-A598-4946-BA1F-6EBE9D19C34C} - System32\Tasks\Microsoft\Windows\Location\WindowsActionDialog => C:\Windows\System32\WindowsActionDialog.exe [2017-03-18] (MicrosoftCorporation) Task: {33C04DDB-DE68-4033-8570-ADDDBFF99E1B} - System32\Tasks\Microsoft\Windows\NlaSvc\WiFiTask => C:\Windows\System32\WiFiTask.exe [2017-03-18] (MicrosoftCorporation) Task: {3AEEF4D4-C4A8-42A1-8A1E-80CA054C2E9C} - System32\Tasks\Microsoft\Windows\SystemRestore\SR => C:\Windows\system32\srtasks.exe [2017-03-18] (MicrosoftCorporation) Task: {3EA82649-A360-4898-A6FB-C273024D1364} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyMonitor => C:\Windows\System32\wpcmon.exe [2017-03-18] (MicrosoftCorporation) Task: {4051EB0B-2917-432F-B9F9-431C7E3C9181} - System32\Tasks\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask => C:\Windows\system32\RAServer.exe [2017-03-18] (MicrosoftCorporation) Task: {465F2593-4E6C-41ED-B9FB-1CDFF90DB5BC} - System32\Tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary => C:\Program Files\Windows Media Player\wmpnscfg.exe [2017-03-18] (MicrosoftCorporation) Task: {4A5D4628-E32A-4422-9B01-D37DD4C1CE75} - System32\Tasks\Microsoft\Windows\WwanSvc\NotificationTask => C:\Windows\System32\WiFiTask.exe [2017-03-18] (MicrosoftCorporation) Task: {4B6926D3-D490-4D93-82CE-D109F1D1BC80} - System32\Tasks\Microsoft\Windows\WindowsUpdate\sih => C:\Windows\System32\sihclient.exe [2017-07-07] (MicrosoftCorporation) Task: {52C4776E-11B1-402C-A230-0A0306A146C4} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\Consolidator => C:\Windows\System32\wsqmcons.exe [2017-03-18] (MicrosoftCorporation) Task: {53AA0D46-29B3-4E06-AD38-D2470004AC65} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Combined Scan Download Install => C:\Windows\system32\usoclient.exe [2017-03-18] (MicrosoftCorporation) Task: {5BC5A21F-4785-41A6-B4B1-62FB9B08FABD} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Device-Join => C:\Windows\System32\dsregcmd.exe [2017-03-18] (MicrosoftCorporation) Task: {5C326114-085E-444C-9B7A-D3E2E59C549E} - System32\Tasks\Microsoft\Windows\Device Information\Device => C:\Windows\system32\devicecensus.exe [2017-06-20] (MicrosoftCorporation) Task: {5D81326C-D6EC-49A0-AAB5-D8A874E06E83} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => C:\Windows\system32\MusNotification.exe [2017-06-20] (MicrosoftCorporation) Task: {5E69CB45-3936-4669-820A-B358310807E7} - System32\Tasks\User_Feed_Synchronization-{DAAFCCEC-B957-4777-8349-49A3576310D6} => C:\Windows\system32\msfeedssync.exe [2017-03-18] (MicrosoftCorporation) Task: {64836DEF-7BF2-4867-8C20-8A0B82A6BA2A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-07-19] (AdobeSystemsIncorporated) Task: {6772AC65-7600-4DF2-9BD5-F17292FAAE4B} - System32\Tasks\Microsoft\Windows\Speech\SpeechModelDownloadTask => C:\Windows\system32\speech_onecore\common\SpeechModelDownload.exe [2017-03-18] (MicrosoftCorporation) Task: {6D8BB38A-2E56-4DFE-AABB-C1B5E21326F9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-06-17] (GoogleInc.) Task: {70E0A093-79B7-461E-A9C7-B67CD7B1511E} - System32\Tasks\Microsoft\Windows\Feedback\Siuf\DmClientOnScenarioDownload => C:\Windows\system32\dmclient.exe [2017-03-18] (MicrosoftCorporation) Task: {71C6668A-DF24-4E2F-9206-FF62488CE5DA} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2361614064-3764812395-1346761622-1001 => C:\Users\PC\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe [2017-07-27] (MicrosoftCorporation) Task: {799AC654-A37D-49AA-B0F3-433D7D5EBBD9} - System32\Tasks\Microsoft\Windows\WCM\WiFiTask => C:\Windows\System32\WiFiTask.exe [2017-03-18] (MicrosoftCorporation) Task: {818136B6-9FFE-48F2-9233-F7B3F705FF1D} - System32\Tasks\CorelUpdateHelperTaskCore => C:\Program Files (x86)\Corel\CUH\v2\CUH.exe [2017-07-24] (CorelCorporation) Task: {829C695F-E874-432A-9A9F-7862D04236B9} - System32\Tasks\Microsoft\Windows\ApplicationData\DsSvcCleanup => C:\Windows\system32\dstokenclean.exe [2017-03-18] (MicrosoftCorporation) Task: {87488988-70F6-44C5-A1BD-E328BE17C205} - System32\Tasks\Microsoft\Windows\AppID\PolicyConverter => C:\Windows\system32\appidpolicyconverter.exe [2017-03-18] (MicrosoftCorporation) Task: {876E58D6-4FF1-4E63-A105-57A9D0341AEC} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Resume On Boot => C:\Windows\system32\usoclient.exe [2017-03-18] (MicrosoftCorporation) Task: {88209412-5377-4AA1-B01E-F5D5A6F39E21} - System32\Tasks\Microsoft\Windows\SpacePort\SpaceAgentTask => C:\Windows\system32\SpaceAgent.exe [2017-03-18] (MicrosoftCorporation) Task: {88E18EB0-E633-47C9-8FE5-84CEAB8F5EF7} - System32\Tasks\microsoft\windows\applicationdata\appuriverifierdaily => C:\Windows\system32\AppHostRegistrationVerifier.exe [2017-03-18] (MicrosoftCorporation) Task: {896ED842-4861-49E9-A2C1-0AE31689F876} - System32\Tasks\Microsoft\Windows\Clip\License Validation => C:\Windows\system32\ClipUp.exe [2017-03-18] (MicrosoftCorporation) Task: {8EE52AD7-9F81-40D3-AE0C-9F5DB09BC56F} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2017-03-18] (MicrosoftCorporation) Task: {932FBFFA-F876-4290-B598-1EA7CC2A3C25} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe [2014-12-04] (@ByELDI) Task: {936FF605-A684-4476-8E62-E051A903B3D3} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2017-03-18] (MicrosoftCorporation) Task: {938954E2-DAFB-4BCD-8740-6AC11EBFE13C} - System32\Tasks\Microsoft\Windows\AppID\VerifiedPublisherCertStoreCheck => C:\Windows\system32\appidcertstorecheck.exe [2017-03-18] (MicrosoftCorporation) Task: {97CDA326-F88D-4C27-9895-4CCA0464DC03} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Policy Install => C:\Windows\system32\usoclient.exe [2017-03-18] (MicrosoftCorporation) Task: {9CF304F4-4D08-4DBB-A568-102240A2160B} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\Windows\System32\MbaeParserTask.exe [2017-03-18] (MicrosoftCorporation) Task: {9D072CA8-51F5-4BD3-8AFC-B341688A2422} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Maintenance Install => C:\Windows\system32\usoclient.exe [2017-03-18] (MicrosoftCorporation) Task: {B0B01AAA-FF6C-4441-B75E-44A24B0B37CD} - System32\Tasks\Microsoft\Windows\DUSM\dusmtask => C:\Windows\System32\dusmtask.exe [2017-03-18] (MicrosoftCorporation) Task: {B4E5A735-7EBC-4AF6-BA56-816F89759860} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval => C:\Windows\system32\MusNotification.exe [2017-06-20] (MicrosoftCorporation) Task: {B5EA650A-8EE9-4BA5-BAA0-2A8ACE00500D} - System32\Tasks\Microsoft\Windows\SpacePort\SpaceManagerTask => C:\Windows\system32\spaceman.exe [2017-03-18] (MicrosoftCorporation) Task: {B62858BC-993B-49D8-8A1C-44C0C6F06C5E} - System32\Tasks\Microsoft\Windows\Subscription\LicenseAcquisition => C:\Windows\system32\ClipRenew.exe [2017-03-20] (MicrosoftCorporation) Task: {BCC432F2-7A57-4195-881F-9013CF46F613} - System32\Tasks\Microsoft\Windows\MUI\LPRemove => C:\Windows\system32\lpremove.exe [2017-03-18] (MicrosoftCorporation) Task: {BD69C6ED-AD55-467C-B787-533200C3B376} - System32\Tasks\Microsoft\XblGameSave\XblGameSaveTask => C:\Windows\System32\XblGameSaveTask.exe [2017-03-18] (MicrosoftCorporation) Task: {C05E2FFD-7D0D-4F6B-952B-A3318F829D19} - System32\Tasks\Microsoft\Windows\Management\Provisioning\Cellular => C:\Windows\system32\ProvTool.exe [2017-03-18] (MicrosoftCorporation) Task: {C162FF56-952F-4ABA-AE13-AA8CB0F4C087} - System32\Tasks\Microsoft\Windows\Plug and Play\Sysprep Generalize Drivers => C:\Windows\System32\drvinst.exe [2017-03-18] (MicrosoftCorporation) Task: {C42799B6-75B2-42CF-8197-3BE332E05553} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Schedule Scan => C:\Windows\system32\usoclient.exe [2017-03-18] (MicrosoftCorporation) Task: {C7E76CE8-60B8-4E18-805F-4FA31752852C} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display => C:\Windows\system32\MusNotification.exe [2017-06-20] (MicrosoftCorporation) Task: {C97B639A-C1BF-4E0C-ACFD-CF5B27B65B3C} - System32\Tasks\Microsoft\Windows\Windows Error Reporting\QueueReporting => C:\Windows\system32\wermgr.exe [2017-03-18] (MicrosoftCorporation) Task: {CB0722DA-00C9-45B2-A53F-2662ABD100BF} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-06-30] (PiriformLtd) Task: {CDC553D2-B5AD-4AF3-BB6D-5AA47466C1F9} - System32\Tasks\Microsoft\Windows\Management\Provisioning\Logon => C:\Windows\system32\ProvTool.exe [2017-03-18] (MicrosoftCorporation) Task: {CF5C3235-3A1D-42BA-9235-46512A335E05} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-21] (MicrosoftCorporation) Task: {CF648C7F-FC5D-412B-A6CD-9859D2FE21E9} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot => C:\Windows\system32\MusNotification.exe [2017-06-20] (MicrosoftCorporation) Task: {CFE9501D-B60F-45DB-B48F-19C572F7F30E} - System32\Tasks\microsoft\windows\applicationdata\appuriverifierinstall => C:\Windows\system32\AppHostRegistrationVerifier.exe [2017-03-18] (MicrosoftCorporation) Task: {D2C50CE0-7E9B-4F0D-A2A4-95AC59829444} - System32\Tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask => C:\Windows\system32\BthUdTask.exe [2017-03-18] (MicrosoftCorporation) Task: {D5EBF28C-A33D-4CBA-8355-0F457EE12498} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => C:\Windows\system32\compattelrunner.exe [2017-06-20] (MicrosoftCorporation) Task: {DE280E27-41E3-43DD-8D0C-7D14FBD3A6ED} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Refresh Settings => C:\Windows\system32\usoclient.exe [2017-03-18] (MicrosoftCorporation) Task: {DED852DC-6CE4-4177-986F-3B728A1133EF} - System32\Tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver => C:\Windows\system32\DFDWiz.exe [2017-03-20] (MicrosoftCorporation) Task: {E11183CC-FCAC-479E-B422-6A72654C14EA} - System32\Tasks\Microsoft\Windows\Location\Notifications => C:\Windows\System32\LocationNotificationWindows.exe [2017-03-18] (MicrosoftCorporation) Task: {E1F00579-557F-469D-A730-74C2E3C9AE61} - System32\Tasks\F-Secure\Software Updater\F-Secure Software Updater Automatic Installation => C:\Program Files (x86)\KPN\Internetveiligheidspakket\FSOFTUPD\fssua.exe [2017-06-17] (F-SecureCorporation) <==== AANDACHT Task: {EC11A6F7-343D-49E9-A974-A3716157F2C1} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => C:\Windows\system32\compattelrunner.exe [2017-06-20] (MicrosoftCorporation) Task: {F28E094E-B7A2-43AF-AC20-E40A768DA489} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe Task: {F88E01C2-99E3-4AF6-BFAA-7ACC8EF521D4} - System32\Tasks\Microsoft\Windows\Feedback\Siuf\DmClient => C:\Windows\system32\dmclient.exe [2017-03-18] (MicrosoftCorporation) Task: {F9015704-44A7-4962-B811-A4C0206CF851} - System32\Tasks\Microsoft\Windows\WindowsUpdate\sihboot => C:\Windows\System32\sihclient.exe [2017-07-07] (MicrosoftCorporation) (Als een item is opgenomen in de fixlist, de taak (job) bestand wordt verplaatst. Het bestand dat wordt uitgevoerd door de taak zal niet worden verplaatst.) ==================== Snelkoppelingen & WMI ======================== (De items kunnen worden opgenomen in de fixlist.txt om hersteld of verwijderd te worden.) Shortcut: C:\Users\PC\Downloads\bewaren\wd software\Extras\Adobe Reader Download.lnk -> hxxp://get.adobe.com/reader Shortcut: C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DAZ 3D\DAZStudio4\Online Documentation.lnk -> hxxp:docs.daz3d.com\doku.php\public\software\dazstudi ==================== Geladen Modules (gefilterd) ============== 2007-06-05 13:20 - 2007-06-05 13:20 - 000177704 _____ () C:\Windows\SysWOW64\PSIService.exe 2017-07-22 19:12 - 2017-07-22 19:12 - 000016896 _____ () C:\Program Files\KMSpico\WinDivert.dll 2017-07-19 23:10 - 2014-07-17 15:35 - 000225448 _____ () C:\Program Files\KMSpico\driver\tap-windows-9.21.0.exe 2017-06-15 20:06 - 2016-11-14 13:15 - 000135224 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2017-03-18 22:58 - 2017-03-18 22:58 - 000138000 _____ () C:\Windows\SYSTEM32\inputhost.dll 2017-06-17 16:56 - 2005-06-07 12:26 - 000043008 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll 2017-03-18 22:59 - 2017-03-20 05:56 - 001731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2017-06-30 13:22 - 2017-06-30 13:22 - 000077824 _____ () C:\Program Files\CCleaner\lang\lang-1043.dll 2017-06-17 15:02 - 2016-04-06 11:55 - 000328672 _____ () c:\program files (x86)\kpn\internetveiligheidspakket\daas2\daas2_x64.dll 2017-07-18 09:43 - 2017-07-18 10:32 - 000074752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkypeHost.exe 2017-07-18 09:43 - 2017-07-18 10:32 - 000203264 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll 2017-07-18 09:43 - 2017-07-18 10:33 - 043573248 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkyWrap.dll 2017-07-18 09:43 - 2017-07-18 10:32 - 002435584 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\skypert.dll 2017-07-29 14:02 - 2017-07-25 09:42 - 003824472 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.78\libglesv2.dll 2017-07-29 14:02 - 2017-07-25 09:42 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.78\libegl.dll 2017-06-17 15:02 - 2016-04-06 11:55 - 000254944 _____ () c:\program files (x86)\kpn\internetveiligheidspakket\daas2\daas2.dll 2017-06-17 15:02 - 2017-06-17 15:17 - 000213984 _____ () C:\Program Files (x86)\KPN\Internetveiligheidspakket\Spam Control\fsas.dll 2017-07-22 22:44 - 2017-07-22 22:44 - 000011264 _____ () C:\Windows\TEMP\nseAF6B.tmp\System.dll 2017-07-22 22:54 - 2017-07-22 22:54 - 000011264 _____ () C:\Windows\TEMP\nscB0C7.tmp\System.dll 2017-07-25 22:02 - 2017-07-25 22:02 - 000011264 _____ () C:\Windows\TEMP\nse7D33.tmp\System.dll 2017-07-25 22:02 - 2017-07-25 22:02 - 000011264 _____ () C:\Windows\TEMP\nsa7EE9.tmp\System.dll 2017-07-25 22:12 - 2017-07-25 22:12 - 000011264 _____ () C:\Windows\TEMP\nsv9F56.tmp\System.dll 2017-07-25 22:12 - 2017-07-25 22:12 - 000011264 _____ () C:\Windows\TEMP\nslA188.tmp\System.dll 2017-07-26 22:12 - 2017-07-26 22:12 - 000011264 _____ () C:\Windows\TEMP\nsyFC11.tmp\System.dll 2017-07-26 22:22 - 2017-07-26 22:22 - 000011264 _____ () C:\Windows\TEMP\nsi2681.tmp\System.dll 2017-07-26 22:22 - 2017-07-26 22:22 - 000011264 _____ () C:\Windows\TEMP\nsi276B.tmp\System.dll 2017-07-30 13:12 - 2017-07-30 13:12 - 000011264 _____ () C:\Windows\TEMP\nsz7E0A.tmp\System.dll 2017-07-30 13:21 - 2017-07-30 13:21 - 000011264 _____ () C:\Windows\TEMP\nsdECA.tmp\System.dll 2017-08-02 11:00 - 2017-08-02 11:00 - 000011264 _____ () C:\Windows\TEMP\nshF286.tmp\System.dll 2017-08-02 11:00 - 2017-08-02 11:00 - 000011264 _____ () C:\Windows\TEMP\nsnF4C8.tmp\System.dll 2017-08-02 11:10 - 2017-08-02 11:10 - 000011264 _____ () C:\Windows\TEMP\nsd142C.tmp\System.dll 2017-08-02 11:10 - 2017-08-02 11:10 - 000011264 _____ () C:\Windows\TEMP\nsi1583.tmp\System.dll 2017-06-17 16:25 - 2007-06-02 02:00 - 000057344 _____ () C:\Program Files (x86)\GetSmile\getsmile.dll 2017-08-05 13:55 - 2017-08-05 13:55 - 000098816 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\win32api.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 000110080 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\pywintypes27.dll 2017-08-05 13:55 - 2017-08-05 13:55 - 000364544 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\pythoncom27.dll 2017-08-05 13:55 - 2017-08-05 13:55 - 000320512 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\win32com.shell.shell.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 000914432 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\_hashlib.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 001176576 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\wx._core_.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 000806400 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\wx._gdi_.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 000816128 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\wx._windows_.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 001067008 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\wx._controls_.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 000733184 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\wx._misc_.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 000682496 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\pysqlite2._sqlite.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 000088064 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\_ctypes.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 000686080 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\unicodedata.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 000119808 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\win32file.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 000108544 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\win32security.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 000007168 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\hashobjs_ext.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 000017920 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\thumbnails_ext.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 000088064 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\usb_ext.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 000012800 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\common.time34.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 000018432 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\win32event.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 000167936 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\win32gui.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 000046080 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\_socket.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 001303552 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\_ssl.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 000128512 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\_elementtree.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 000127488 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\pyexpat.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 000038912 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\win32inet.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 000036864 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\_psutil_windows.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 000524248 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\windows._lib_cacheinvalidation.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 000011264 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\win32crypt.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 000123392 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\wx._wizard.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 000077312 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\wx._html2.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 000027648 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\_multiprocessing.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 000020480 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\_yappi.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 000035840 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\win32process.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 000078848 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\wx._animate.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 000024064 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\win32pipe.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 000010240 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\select.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 000025600 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\win32pdh.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 000017408 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\win32profile.pyd 2017-08-05 13:55 - 2017-08-05 13:55 - 000022528 ____R () C:\Users\PC\AppData\Local\Temp\_MEI132322\win32ts.pyd 2017-07-29 21:48 - 2017-07-29 21:48 - 001162752 _____ () C:\Users\PC\AppData\Local\Facebook\Games\CefSharp.Core.dll 2017-07-29 21:48 - 2017-07-29 21:48 - 067197440 _____ () C:\Users\PC\AppData\Local\Facebook\Games\libcef.dll 2017-06-26 13:04 - 2007-08-02 21:07 - 000034064 _____ () C:\Program Files (x86)\Common Files\Ulead Systems\AutoDetector\DetMethod.dll 2015-09-24 17:42 - 2015-09-24 17:42 - 000019968 _____ () C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Locale\nl_NL\acrotray.nld 2017-07-29 21:48 - 2017-07-29 21:48 - 000752640 _____ () C:\Users\PC\AppData\Local\Facebook\Games\CefSharp.BrowserSubprocess.Core.dll 2017-07-29 21:48 - 2017-07-29 21:48 - 001886208 _____ () C:\Users\PC\AppData\Local\Facebook\Games\libglesv2.dll 2017-07-29 21:48 - 2017-07-29 21:48 - 000078848 _____ () C:\Users\PC\AppData\Local\Facebook\Games\libegl.dll 2017-06-17 15:03 - 2016-04-06 11:56 - 000553952 _____ () c:\program files (x86)\kpn\internetveiligheidspakket\fsoftupd\sqlite3s.dll 2017-06-17 15:02 - 2016-04-06 11:53 - 000074720 _____ () C:\Program Files (x86)\KPN\Internetveiligheidspakket\Anti-Virus\FSAVHRES.eng 2017-08-05 19:17 - 2017-08-05 19:17 - 000011264 _____ () C:\Windows\TEMP\nswEBE5.tmp\System.dll 2017-08-05 19:27 - 2017-08-05 19:27 - 000011264 _____ () C:\Windows\TEMP\nsi2921.tmp\System.dll 2015-10-13 15:07 - 2015-10-13 15:07 - 001032360 _____ () C:\Program Files (x86)\Microsoft Office\Office15\ADDINS\UmOutlookAddin.dll 2017-06-20 11:28 - 2017-06-20 11:28 - 001997792 ____R () C:\Program Files (x86)\Skype\Phone\skypert.dll 2013-07-30 15:28 - 2013-07-30 15:28 - 000031048 _____ () C:\Program Files (x86)\Corel\Corel PaintShop Pro X5\WWH4API.dll 2013-07-30 15:29 - 2013-07-30 15:29 - 000420168 _____ () C:\Program Files (x86)\Corel\Corel PaintShop Pro X5\sqlite3.dll 2011-12-27 14:56 - 2011-12-27 14:56 - 000431392 _____ () C:\Program Files (x86)\Corel\Corel PaintShop Pro X5\PsiClient.dll 2013-07-30 15:28 - 2013-07-30 15:28 - 006449480 _____ () C:\Program Files (x86)\Corel\Corel PaintShop Pro X5\uipp.dll ==================== Alternate Data Streams (gefilterd) ========= (Als een item is opgenomen in de fixlist, alleen de ADS wordt verwijderd.) AlternateDataStreams: C:\Windows:AstInfo [0] AlternateDataStreams: C:\Windows:nlsPreferences [0] AlternateDataStreams: C:\ProgramData\TEMP:264B2CC4 [324] ==================== Veilige Modus (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. De "AlternateShell" waarde wordt hersteld.) ==================== Bestandskoppeling (gefilterd) =============== (Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd.) ==================== Internet Explorer vertrouwde/beperkte toegang =============== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd.) IE restricted site: HKU\S-1-5-21-2361614064-3764812395-1346761622-1001\...\skype.com -> hxxps://apps.skype.com ==================== Hosts inhoud: =============================== (Als nodig Hosts: opdracht kan worden opgenomen in de fixlist om Hosts te resetten.) 2017-03-18 23:03 - 2017-03-18 23:01 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts ==================== Andere gebieden ============================ (Momenteel is er geen automatische fix voor dit onderdeel.) HKU\S-1-5-21-2361614064-3764812395-1346761622-1001\Control Panel\Desktop\\Wallpaper -> G:\a02_Tubes\bloemen\bloem met ornament\bloem (93).png DNS Servers: 192.168.1.254 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off) Windows Firewall is uitgeschakeld. ==================== MSCONFIG/TASK MANAGER Uitgeschakelde items == HKU\S-1-5-21-2361614064-3764812395-1346761622-1001\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-2361614064-3764812395-1346761622-1001\...\StartupApproved\Run: => "Skype" ==================== Firewall regels (gefilterd) =============== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) FirewallRules: [{E3E1D939-AA7A-4D40-B8E7-7B551DE9E581}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{AD43BBF1-4222-4AEE-9942-236B7488D5BF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{5D385660-C40D-4F25-88A5-DE2B25D020E9}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{DBB2433B-D727-4D9B-9315-C016A4572303}] => (Allow) C:\Program Files (x86)\Adobe\Adobe Flash Builder 4.6\FlashBuilder.exe FirewallRules: [{7D79C9F8-64A1-4810-8A02-0E56C8774D34}] => (Allow) C:\Program Files (x86)\Adobe\Adobe Flash Builder 4.6\FlashBuilder.exe FirewallRules: [{47E0AF4E-060B-4E84-9B19-9A47B1A9FA05}] => (Allow) LPort=7935 FirewallRules: [{F53E5ABE-F9F9-48CA-A939-C91103C9D61A}] => (Allow) C:\Program Files (x86)\Pinnacle\Studio 12\Programs\RM.exe FirewallRules: [{4A8C3E4C-1F32-48CA-8D8E-42CBD8729A4C}] => (Allow) C:\Program Files (x86)\Pinnacle\Studio 12\Programs\RM.exe FirewallRules: [{633D933F-92DF-4613-81A3-73840330F276}] => (Allow) C:\Program Files (x86)\Pinnacle\Studio 12\Programs\Studio.exe FirewallRules: [{E294CB81-2CBA-4122-AFD3-0941DAF8127F}] => (Allow) C:\Program Files (x86)\Pinnacle\Studio 12\Programs\Studio.exe FirewallRules: [{0796E33C-5256-46CB-B3FC-389F9527690B}] => (Allow) C:\Program Files (x86)\Pinnacle\Studio 12\Programs\umi.exe FirewallRules: [{80A89340-0683-4B47-A44C-8003813143AE}] => (Allow) C:\Program Files (x86)\Pinnacle\Studio 12\Programs\umi.exe FirewallRules: [{FB76B481-9AF6-448E-91D4-C1E29561CBA1}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe FirewallRules: [{4A810134-37EF-4A35-8617-1E4171A0BC7A}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe FirewallRules: [{6D62DF91-A1F3-4AA6-A6CD-CB854683A5E2}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{E44E23AA-98AF-47E4-B4DF-07D57A73E066}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{DF0CFF49-F34B-4C48-8991-7966737FA3AF}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{57AD6B33-1009-41C4-83D4-AC671F104EEF}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{1898108C-D466-4130-AB85-9A0395C7756E}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe ==================== Herstelpunten ========================= 23-07-2017 14:08:37 F-Secure Software Updater 27-07-2017 14:07:27 F-Secure Software Updater 29-07-2017 14:02:16 F-Secure Software Updater 06-08-2017 17:23:29 Gepland controlepunt ==================== Defecte Apparaatbeheer Apparaten ============= Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Eventlog fouten: ========================= Applicatiefouten: ================== Error: (08/06/2017 04:03:13 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Naam van toepassing met fout: Corel PaintShop Pro.exe, versie: 19.0.0.2, tijdstempel: 0x58afc9c5 Naam van module met fout: MSVCR110.dll, versie: 11.0.51106.1, tijdstempel: 0x5098858e Uitzonderingscode: 0xc0000409 Foutmarge: 0x000a326c Id van proces met fout: 0x1098 Starttijd van toepassing met fout: 0x01d30ebca75efa70 Pad naar toepassing met fout: C:\Program Files (x86)\Corel\Corel PaintShop Pro X9\Corel PaintShop Pro.exe Pad naar module met fout: C:\Windows\System32\MSVCR110.dll Rapport-id: f7fb0803-4005-4df9-9017-7dedb62c25f3 Volledige pakketnaam met fout: Relatieve toepassings-id van pakket met fout: Error: (08/06/2017 03:07:32 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Het programma Taskmgr.exe, versie 10.0.15063.0 reageert niet meer op Windows en is afgesloten. Als u wilt zien of er meer informatie over het probleem beschikbaar is, raadpleegt u de probleemgeschiedenis in het onderdeel Beveiliging en onderhoud van het Configuratiescherm. Proces-id: 1a0c Starttijd: 01d30eb4e2ec4e1f Eindtijd: 56 Toepassingspad: C:\Windows\System32\Taskmgr.exe Rapport-id: cdfe045a-b375-4ad3-b01e-c4827c04b9fd Volledige pakketnaam met fout: Relatieve toepassings-id van pakket met fout: Error: (08/06/2017 03:06:04 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Naam van toepassing met fout: getsmile.exe, versie: 1.9.5.2, tijdstempel: 0x4661c342 Naam van module met fout: combase.dll, versie: 10.0.15063.447, tijdstempel: 0x8543d53c Uitzonderingscode: 0xc0000005 Foutmarge: 0x000edb4d Id van proces met fout: 0x2bc Starttijd van toepassing met fout: 0x01d30e8bca9fa14e Pad naar toepassing met fout: C:\Program Files (x86)\GetSmile\getsmile.exe Pad naar module met fout: C:\Windows\System32\combase.dll Rapport-id: 88dfa52a-8e33-4a9f-935f-0782f9dd37bb Volledige pakketnaam met fout: Relatieve toepassings-id van pakket met fout: Error: (08/06/2017 01:58:38 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: DESKTOP-IEA1QSJ) Description: Het pakket Microsoft.Windows.ShellExperienceHost_10.0.15063.332_neutral_neutral_cw5n1h2txyewy+App is beëindigd omdat het onderbreken te lang duurde. Error: (08/06/2017 01:55:36 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Naam van toepassing met fout: Corel PaintShop Pro.exe, versie: 19.0.0.2, tijdstempel: 0x58afc9c5 Naam van module met fout: MSVCR110.dll, versie: 11.0.51106.1, tijdstempel: 0x5098858e Uitzonderingscode: 0xc0000409 Foutmarge: 0x000a326c Id van proces met fout: 0x2f4c Starttijd van toepassing met fout: 0x01d30eaac7b40c65 Pad naar toepassing met fout: C:\Program Files (x86)\Corel\Corel PaintShop Pro X9\Corel PaintShop Pro.exe Pad naar module met fout: C:\Windows\System32\MSVCR110.dll Rapport-id: 6beb3a90-dae6-4947-a666-e7c9c712b07d Volledige pakketnaam met fout: Relatieve toepassings-id van pakket met fout: Error: (08/06/2017 10:34:14 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: DESKTOP-IEA1QSJ) Description: Het pakket Microsoft.Windows.ShellExperienceHost_10.0.15063.332_neutral_neutral_cw5n1h2txyewy+App is beëindigd omdat het onderbreken te lang duurde. Error: (08/06/2017 09:39:05 AM) (Source: FSecure-FSecure Application-F-Secure Anti-Virus) (EventID: 318) (User: NT AUTHORITY) Description: Scanning of \DEVICE\HARDDISKVOLUME5\FILTERS\SOFTENER\UNINSTALL.EXE was aborted due to exceeded scanning time limit. The file may be in use or reading it was too slow (e.g. network connection was under stress). Error: (08/06/2017 09:36:47 AM) (Source: FSecure-FSecure Application-F-Secure Anti-Virus) (EventID: 301) (User: NT AUTHORITY) Description: An error occurred while scanning \DEVICE\HARDDISKVOLUME2\WINDOWS\SYSTEM32\DRIVERS\ETC\HOSTS. Error: (08/05/2017 02:12:06 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Naam van toepassing met fout: Photoshop.exe, versie: 13.0.0.0, tijdstempel: 0x4f61beba Naam van module met fout: KERNELBASE.dll, versie: 10.0.15063.483, tijdstempel: 0xc3955624 Uitzonderingscode: 0xc06d007e Foutmarge: 0x000eb802 Id van proces met fout: 0x1944 Starttijd van toepassing met fout: 0x01d30de40db701cf Pad naar toepassing met fout: C:\Program Files (x86)\Adobe\Adobe Photoshop CS6\Photoshop.exe Pad naar module met fout: C:\Windows\System32\KERNELBASE.dll Rapport-id: 217a49dd-1031-4b71-8ee8-8445dd96d3f2 Volledige pakketnaam met fout: Relatieve toepassings-id van pakket met fout: Error: (08/05/2017 02:11:33 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Naam van toepassing met fout: Photoshop.exe, versie: 13.0.0.0, tijdstempel: 0x4f61beba Naam van module met fout: KERNELBASE.dll, versie: 10.0.15063.483, tijdstempel: 0xc3955624 Uitzonderingscode: 0xc06d007e Foutmarge: 0x000eb802 Id van proces met fout: 0x91c Starttijd van toepassing met fout: 0x01d30de3f9a15e9d Pad naar toepassing met fout: C:\Program Files (x86)\Adobe\Adobe Photoshop CS6\Photoshop.exe Pad naar module met fout: C:\Windows\System32\KERNELBASE.dll Rapport-id: a91ad0ac-d92c-44fc-a643-54235bced607 Volledige pakketnaam met fout: Relatieve toepassings-id van pakket met fout: Systeemfouten: ============= Error: (08/06/2017 07:25:25 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} en APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} aan de gebruiker NT AUTHORITY\SYSTEM SID (S-1-5-18) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (08/06/2017 03:06:55 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} en APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} aan de gebruiker NT AUTHORITY\SYSTEM SID (S-1-5-18) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (08/06/2017 01:15:54 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} en APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} aan de gebruiker NT AUTHORITY\SYSTEM SID (S-1-5-18) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (08/06/2017 09:36:48 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} en APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} aan de gebruiker NT AUTHORITY\SYSTEM SID (S-1-5-18) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (08/06/2017 12:22:29 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} en APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} aan de gebruiker NT AUTHORITY\SYSTEM SID (S-1-5-18) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (08/05/2017 06:25:05 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} en APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} aan de gebruiker NT AUTHORITY\SYSTEM SID (S-1-5-18) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (08/04/2017 10:58:53 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-IEA1QSJ) Description: De server Windows.Media.Capture.Internal.AppCaptureShell heeft zich niet binnen de vereiste termijn bij DCOM geregistreerd. Error: (08/03/2017 01:51:39 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-IEA1QSJ) Description: De server Windows.Media.Capture.Internal.AppCaptureShell heeft zich niet binnen de vereiste termijn bij DCOM geregistreerd. Error: (08/01/2017 11:56:08 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-IEA1QSJ) Description: De server Windows.Media.Capture.Internal.AppCaptureShell heeft zich niet binnen de vereiste termijn bij DCOM geregistreerd. Error: (08/01/2017 10:57:26 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} en APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} aan de gebruiker NT AUTHORITY\SYSTEM SID (S-1-5-18) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. CodeIntegrity: =================================== Date: 2017-06-17 15:04:53.263 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\KPN\Internetveiligheidspakket\HIPS\fshook64.dll that did not meet the Microsoft signing level requirements. ==================== Geheugen info =========================== Processor: Intel(R) Core(TM)2 Duo CPU E7400 @ 2.80GHz Percentage geheugen in gebruik: 63% Totaal fysiek RAM-geheugen: 4094.49 MB Beschikbaar fysiek RAM-geheugen: 1476.07 MB Totaal Virtueel geheugen: 6068.03 MB Beschikbaar Virtual geheugen: 1254.43 MB ==================== Schijven ================================ Drive c: () (Fixed) (Total:223.08 GB) (Free:43.68 GB) NTFS Drive d: (Mijn Prive) (Fixed) (Total:172.35 GB) (Free:157.85 GB) NTFS Drive e: (My Passport) (Fixed) (Total:931.48 GB) (Free:278.53 GB) NTFS Drive g: (PSP) (Fixed) (Total:48.83 GB) (Free:27.48 GB) NTFS Drive h: (120GB) (Fixed) (Total:111.79 GB) (Free:89.63 GB) NTFS Drive i: (Corel Club) (Fixed) (Total:97.66 GB) (Free:63.96 GB) NTFS Drive o: (Foto's) (Fixed) (Total:146.92 GB) (Free:51.21 GB) NTFS ==================== MBR & Partitietabel ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 99EE99EE) Partition 1: (Not Active) - (Size=172.3 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=146.9 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=48.8 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=97.7 GB) - (Type=OF Extended) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 223.6 GB) (Disk ID: 1F379A67) Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=223.1 GB) - (Type=07 NTFS) ======================================================== Disk: 6 (MBR Code: Windows XP) (Size: 931.5 GB) (Disk ID: 0EF62FD8) Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS) ======================================================== Disk: 7 (Size: 111.8 GB) (Disk ID: 43C0593F) Partition 1: (Active) - (Size=111.8 GB) - (Type=07 NTFS) ==================== Eind van Addition.txt ============================