Extra scanresultaten van Farbar Recovery Scan Tool (x64) Versie: 02.08.2018 Gestart door pc (09-08-2018 12:23:31) Gestart vanaf C:\Users\pc\Downloads Windows 10 Home Versie 1803 17134.165 (X64) (2018-05-25 20:27:24) Boot Modus: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-3338703276-2134401527-3366400934-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-3338703276-2134401527-3366400934-503 - Limited - Disabled) Gast (S-1-5-21-3338703276-2134401527-3366400934-501 - Limited - Disabled) pc (S-1-5-21-3338703276-2134401527-3366400934-1001 - Administrator - Enabled) => C:\Users\pc WDAGUtilityAccount (S-1-5-21-3338703276-2134401527-3366400934-504 - Limited - Disabled) ==================== Security Center ======================== (Als een item is opgenomen in de fixlist, zal het worden verwijderd.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: ESET Security (Enabled - Up to date) {EC1D6F37-E411-475A-DF50-12FF7FE4AC70} AS: ESET Security (Enabled - Up to date) {577C8ED3-C22B-48D4-E5E0-298D0463E6CD} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Geïnstalleerde programma's ====================== (Alleen de adware-programma's met 'verborgen' vlag kunnen worden toegevoegd aan de fixlist om ze zichtbaar te maken. De adware-programma's moeten handmatig gedeïnstalleerd worden.) 4K Video Downloader 4.1 (HKLM-x32\...\4K Video Downloader_is1) (Version: 4.1.1.2070 - Open Media LLC) 4K YouTube to MP3 3.3 (HKLM-x32\...\{2D9DE869-0554-4856-BF08-D80FE53CD08E}) (Version: 3.3.2.1767 - Open Media LLC) Adobe Acrobat Reader DC - Nederlands (HKLM-x32\...\{AC76BA86-7AD7-1043-7B44-AC0F074E4100}) (Version: 18.011.20055 - Adobe Systems Incorporated) Apple Application Support (32-bit) (HKLM-x32\...\{C56BA005-F02C-461B-ACA5-A0CE3E32578F}) (Version: 6.5 - Apple Inc.) Apple Application Support (64-bit) (HKLM\...\{C8087B7C-8496-45BE-92FB-91D31EB73969}) (Version: 6.5 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{64695C4A-C68F-46B5-A734-50EBF124A68E}) (Version: 11.3.3.4 - Apple Inc.) Apple Software Update (HKLM-x32\...\{A30EA700-5515-48F0-88B0-9E99DC356B88}) (Version: 2.6.0.1 - Apple Inc.) ArcSoft PhotoImpression 6 (HKLM-x32\...\{D56401D6-E356-4CA5-97A3-024D666F5E5C}) (Version: 6.1.7.129 - ArcSoft) Belgium e-ID middleware 4.1.16 (build 1723) (HKLM\...\{DB942AEA-93D6-4FE4-8862-180D35A71723}) (Version: 4.1.1723 - Belgian Government) Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.) Canon MG5100 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5100_series) (Version: - ) Classic Shell (HKLM\...\{D4B3454F-7529-4F5F-851D-2C36933F7D64}) (Version: 4.2.5 - IvoSoft) D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden ESET Security (HKLM\...\{BEFBE0CD-6723-4D98-8263-9A2C376BC6CD}) (Version: 11.1.54.0 - ESET, spol. s r.o.) Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1158 - Intel Corporation) Intel(R) Network Connections 20.2.3001.0 (HKLM\...\PROSetDX) (Version: 20.2.3001.0 - Intel) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 22.20.16.4836 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.5.0.1081 - Intel Corporation) Intel® Security Assist (HKLM-x32\...\{4B230374-6475-4A73-BA6E-41015E9C5013}) (Version: 1.0.0.532 - Intel Corporation) iTunes (HKLM\...\{0223607E-3E0D-474C-9635-AB70F45E2AD7}) (Version: 12.7.5.9 - Apple Inc.) Junk Mail filter update (HKLM-x32\...\{0BE9E708-5DC0-4963-9CFD-0AA519090E79}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Microsoft Office 2013 voor Thuisgebruik en Studenten - nl-nl (HKLM\...\HomeStudentRetail - nl-nl) (Version: 15.0.5049.1000 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-3338703276-2134401527-3366400934-1001\...\OneDriveSetup.exe) (Version: 18.111.0603.0006 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Movie Maker (HKLM-x32\...\{DC5E5027-65E8-41CB-815C-9AAB48BFB8E2}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Mozilla Firefox 45.0.1 (x86 nl) (HKLM-x32\...\Mozilla Firefox 45.0.1 (x86 nl)) (Version: 45.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 45.0.1 - Mozilla) Norton Security Scan (HKLM-x32\...\NSS) (Version: 4.6.2.17 - Symantec Corporation) Office 15 Click-to-Run Extensibility Component (HKLM-x32\...\{90150000-008C-0000-0000-0000000FF1CE}) (Version: 15.0.5049.1000 - Microsoft Corporation) Hidden Office 15 Click-to-Run Licensing Component (HKLM\...\{90150000-008F-0000-1000-0000000FF1CE}) (Version: 15.0.5049.1000 - Microsoft Corporation) Hidden Office 15 Click-to-Run Localization Component (HKLM-x32\...\{90150000-008C-0413-0000-0000000FF1CE}) (Version: 15.0.5049.1000 - Microsoft Corporation) Hidden OVTScanner_X64 (HKLM-x32\...\{AE09704D-9051-4C25-B940-77F889F0C93F}) (Version: 1.00.0000 - Uw bedrijfsnaam) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7553 - Realtek Semiconductor Corp.) Software voor Intel® Chipset-apparaten (HKLM-x32\...\{c7f54569-0018-439c-809a-48046a4d4ebc}) (Version: 10.1.1.9 - Intel(R) Corporation) Hidden Spotify (HKU\S-1-5-21-3338703276-2134401527-3366400934-1001\...\Spotify) (Version: 1.0.86.337.ga8d5cef9 - Spotify AB) Stuurprogrammapakket voor Windows - Fedict SmartCard (08/08/2015 4.1.5) (HKLM\...\9F46F7AB1E3B1B5F5482EA8D97F401B04FBF7958) (Version: 08/08/2015 4.1.5 - Fedict) Taalpakket voor Microsoft Visual Studio 2010 Tools for Office Runtime (x64) - NLD (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - NLD) (Version: 10.0.50903 - Microsoft Corporation) Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1-2) (Version: 1.0.65.1 - LunarG, Inc.) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation) ==================== Aangepaste CLSID (gefilterd): ========================== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> Geen bestand ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> Geen bestand ContextMenuHandlers1: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET NOD32 Antivirus\shellExt.dll [2018-07-26] (ESET) ContextMenuHandlers2: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET NOD32 Antivirus\shellExt.dll [2018-07-26] (ESET) ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> Geen bestand ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> Geen bestand ContextMenuHandlers4: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> Geen bestand ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Geen bestand ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_250db833a1cd577e\igfxDTCM.dll [2018-02-28] (Intel Corporation) ContextMenuHandlers6: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET NOD32 Antivirus\shellExt.dll [2018-07-26] (ESET) ContextMenuHandlers6: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> Geen bestand ==================== Geplande Taken (gefilterd) ============= (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) Task: {01A5087A-94F6-4BD6-B71D-5806189DCF10} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_ERROR_HB => C:\Windows\system32\MRT.exe [2018-07-10] (Microsoft Corporation) Task: {1271BC29-F68D-421D-9A96-1FD5457F5622} - \Microsoft\Windows\UNP\RunCampaignManager -> Geen bestand <==== AANDACHT Task: {65B85F6F-35B3-4459-A179-28255D5B7B25} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\WINDOWS\System32\WinBioPlugIns\FaceFodUninstaller.exe [2018-04-12] () Task: {8874CF5D-F46B-49DC-A1BD-9602A0C7E6B9} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-03-21] (Adobe Systems Incorporated) Task: {893FA02F-9226-43FA-935D-79F1032110F8} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2017-12-12] (Microsoft Corporation) Task: {A9EBBAC2-4215-419E-A6F8-EA69213A0869} - System32\Tasks\S-1-5-21-3338703276-2134401527-3366400934-1001\DataSenseLiveTileTask => C:\WINDOWS\System32\DataUsageLiveTileTask.exe [2018-04-12] (Microsoft Corporation) Task: {DA0404D5-BBE1-4A2C-9456-BF7A4A5B7C0C} - System32\Tasks\Norton Security Scan for pc => C:\PROGRA~2\NORTON~2\Engine\462~1.17\Nss.exe Task: {E57BA228-C6EE-44DE-8635-1E1CAA4FB23C} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2017-12-12] (Microsoft Corporation) Task: {E82B1D74-F7A5-467D-941E-1C40F521C9A8} - System32\Tasks\Microsoft\Windows\Setup\Notifier => C:\WINDOWS\system32\Notifier.exe Task: {F3FC0174-9055-4C2E-BBBA-95104CD0F73F} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2018-01-08] (Apple Inc.) (Als een item is opgenomen in de fixlist, wordt de taak (job) bestand verplaatst. Het bestand dat wordt uitgevoerd door de taak zal niet worden verplaatst.) ==================== Snelkoppelingen & WMI ======================== (De items kunnen worden opgenomen in de fixlist.txt om hersteld of verwijderd te worden.) ==================== Geladen Modules (gefilterd) ============== 2018-01-05 01:14 - 2018-01-05 01:14 - 000088888 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2018-05-15 18:58 - 2018-05-15 18:58 - 001356088 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2016-03-03 22:02 - 2017-01-17 04:25 - 000117440 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll 2018-04-12 01:34 - 2018-04-12 01:34 - 000491744 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll 2018-04-12 01:34 - 2018-04-12 01:34 - 000472064 _____ () C:\Windows\ShellExperiences\TileControl.dll 2018-04-12 01:34 - 2018-04-12 01:34 - 002759168 _____ () C:\Windows\ShellComponents\TaskFlowUI.dll 2018-07-10 23:11 - 2018-07-06 08:55 - 002185728 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2018-07-17 15:46 - 2018-07-17 15:46 - 000086528 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.210.0_x64__kzf8qxf38zg5c\SkypeHost.exe 2018-07-17 15:46 - 2018-07-17 15:46 - 000195072 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.210.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll 2018-07-17 15:46 - 2018-07-17 15:46 - 022373888 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.210.0_x64__kzf8qxf38zg5c\SkyWrap.dll 2018-07-17 15:46 - 2018-07-17 15:46 - 002610176 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.210.0_x64__kzf8qxf38zg5c\skypert.dll 2018-07-17 15:46 - 2018-07-17 15:46 - 000653824 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.210.0_x64__kzf8qxf38zg5c\RtmMvrUap.dll 2018-06-26 17:28 - 2018-06-26 17:29 - 001922224 _____ () C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.10314.31700.0_x64__8wekyb3d8bbwe\Microsoft.Applications.Telemetry.Windows.dll 2018-07-17 15:45 - 2018-07-17 15:46 - 032597504 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.18061.11811.0_x64__8wekyb3d8bbwe\Music.UI.exe 2018-07-17 15:45 - 2018-07-17 15:46 - 000290816 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.18061.11811.0_x64__8wekyb3d8bbwe\SharedUI.dll 2018-07-17 15:45 - 2018-07-17 15:46 - 006373376 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.18061.11811.0_x64__8wekyb3d8bbwe\EntCommon.dll 2017-12-01 20:09 - 2017-12-01 20:09 - 000902656 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.18061.11811.0_x64__8wekyb3d8bbwe\Microsoft.Membership.MeControl.UI.Xaml.dll 2017-09-26 17:25 - 2017-09-26 17:25 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.18061.11811.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll 2018-07-17 15:45 - 2018-07-17 15:46 - 008903680 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.18061.11811.0_x64__8wekyb3d8bbwe\EntPlat.dll 2017-06-01 17:50 - 2017-06-01 17:50 - 000117920 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.18061.11811.0_x64__8wekyb3d8bbwe\GNSDK_FP.DLL 2018-07-27 08:49 - 2018-07-27 08:49 - 035195392 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18061.13911.0_x64__8wekyb3d8bbwe\Video.UI.exe 2018-07-27 08:49 - 2018-07-27 08:49 - 000290816 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18061.13911.0_x64__8wekyb3d8bbwe\SharedUI.dll 2018-07-27 08:49 - 2018-07-27 08:49 - 006373376 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18061.13911.0_x64__8wekyb3d8bbwe\EntCommon.dll 2017-09-26 17:25 - 2017-09-26 17:25 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18061.13911.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll 2018-07-27 08:49 - 2018-07-27 08:49 - 008903168 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18061.13911.0_x64__8wekyb3d8bbwe\EntPlat.dll 2018-05-22 22:09 - 2018-05-22 22:09 - 000088888 _____ () C:\Program Files\iTunes\zlib1.dll 2018-05-22 22:08 - 2018-05-22 22:08 - 001356088 _____ () C:\Program Files\iTunes\libxml2.dll 2018-07-27 08:49 - 2018-07-27 08:49 - 000478720 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.18420.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 2018-07-27 08:49 - 2018-07-27 08:49 - 068154880 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.18420.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll 2017-10-04 09:13 - 2017-10-04 09:14 - 002523136 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.18420.0_x64__8wekyb3d8bbwe\UnityEngineDelegates.dll 2018-07-18 21:35 - 2018-07-18 21:35 - 000010752 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.18420.0_x64__8wekyb3d8bbwe\RenderingPlugin.dll 2018-04-26 19:34 - 2018-04-26 19:35 - 000009216 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.18420.0_x64__8wekyb3d8bbwe\ImagePipelineNative.dll 2018-07-18 21:35 - 2018-07-18 21:35 - 004139008 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.18420.0_x64__8wekyb3d8bbwe\MediaEngineCSWrapper.dll 2018-07-18 21:35 - 2018-07-18 21:35 - 000035840 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.18420.0_x64__8wekyb3d8bbwe\WinMLWrapper.UWP.dll 2018-04-05 17:31 - 2018-04-05 17:32 - 002283008 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.18420.0_x64__8wekyb3d8bbwe\TrackingDLLUWP.dll 2018-07-27 08:49 - 2018-07-27 08:49 - 014919168 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.18420.0_x64__8wekyb3d8bbwe\PhotosApp.Windows.dll 2018-07-18 21:35 - 2018-07-18 21:35 - 003982848 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.18420.0_x64__8wekyb3d8bbwe\MediaEngine.dll 2018-07-27 08:49 - 2018-07-27 08:49 - 002938880 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.18420.0_x64__8wekyb3d8bbwe\AppCore.Windows.dll 2018-05-31 17:36 - 2018-05-31 17:38 - 000872448 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.18420.0_x64__8wekyb3d8bbwe\RuntimeConfiguration.dll 2018-07-18 21:35 - 2018-07-18 21:35 - 001396224 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.18420.0_x64__8wekyb3d8bbwe\Microsoft.RichMedia.Ink.Controls.dll 2018-07-27 08:49 - 2018-07-27 08:49 - 004584960 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.18420.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll 2018-07-27 08:49 - 2018-07-27 08:49 - 000162816 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18051.18420.0_x64__8wekyb3d8bbwe\SKU.dll 2015-07-11 00:37 - 2015-07-11 00:37 - 001243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll ==================== Alternate Data Streams (gefilterd) ========= (Als een item is opgenomen in de fixlist, wordt alleen de ADS verwijderd.) AlternateDataStreams: C:\Users\pc\Desktop\contractchaud.jpeg:3or4kl4x13tuuug3Byamue2s4b [83] AlternateDataStreams: C:\Users\pc\Desktop\contractchaud.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\pc\Desktop\document1.jpeg:3or4kl4x13tuuug3Byamue2s4b [83] AlternateDataStreams: C:\Users\pc\Desktop\document1.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\pc\Desktop\document2.jpeg:3or4kl4x13tuuug3Byamue2s4b [83] AlternateDataStreams: C:\Users\pc\Desktop\document2.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\pc\Desktop\grth.jpeg:3or4kl4x13tuuug3Byamue2s4b [85] AlternateDataStreams: C:\Users\pc\Desktop\grth.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\pc\Desktop\gtr'grth.jpeg:3or4kl4x13tuuug3Byamue2s4b [85] AlternateDataStreams: C:\Users\pc\Desktop\gtr'grth.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\pc\Desktop\GZGJelline.jpeg:3or4kl4x13tuuug3Byamue2s4b [85] AlternateDataStreams: C:\Users\pc\Desktop\GZGJelline.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\pc\Desktop\identiteits.jpeg:3or4kl4x13tuuug3Byamue2s4b [83] AlternateDataStreams: C:\Users\pc\Desktop\identiteits.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\pc\Desktop\identiteitskaart.jpeg:3or4kl4x13tuuug3Byamue2s4b [83] AlternateDataStreams: C:\Users\pc\Desktop\identiteitskaart.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\pc\Desktop\oiuoçoçè!à.jpeg:3or4kl4x13tuuug3Byamue2s4b [85] AlternateDataStreams: C:\Users\pc\Desktop\oiuoçoçè!à.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\pc\Desktop\trein1.png:3or4kl4x13tuuug3Byamue2s4b [85] AlternateDataStreams: C:\Users\pc\Desktop\trein1.png:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\pc\Desktop\trein2.png:3or4kl4x13tuuug3Byamue2s4b [85] AlternateDataStreams: C:\Users\pc\Desktop\trein2.png:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\pc\Desktop\trein3.png:3or4kl4x13tuuug3Byamue2s4b [85] AlternateDataStreams: C:\Users\pc\Desktop\trein3.png:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\pc\Desktop\trein4.png:3or4kl4x13tuuug3Byamue2s4b [85] AlternateDataStreams: C:\Users\pc\Desktop\trein4.png:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\pc\Desktop\xx.jpeg:3or4kl4x13tuuug3Byamue2s4b [85] AlternateDataStreams: C:\Users\pc\Desktop\xx.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\pc\Downloads\g.jpeg:3or4kl4x13tuuug3Byamue2s4b [85] AlternateDataStreams: C:\Users\pc\Downloads\g.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\pc\Downloads\h.jpeg:3or4kl4x13tuuug3Byamue2s4b [85] AlternateDataStreams: C:\Users\pc\Downloads\h.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] ==================== Veilige Modus (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. De waarde van "AlternateShell" wordt hersteld.) ==================== Bestandskoppeling (gefilterd) =============== (Als een item is opgenomen in de fixlist, zal het registeritem worden teruggezet naar de standaardwaarden of verwijderd.) ==================== Internet Explorer vertrouwde/beperkte toegang =============== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd.) ==================== Hosts inhoud: =============================== (Indien nodig kan Hosts:-opdracht worden opgenomen in de fixlist om Hosts te resetten.) 2015-07-10 13:04 - 2015-07-10 13:02 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts ==================== Andere gebieden ============================ (Momenteel is er geen automatische fix voor dit onderdeel.) HKU\S-1-5-21-3338703276-2134401527-3366400934-1001\Control Panel\Desktop\\Wallpaper -> D:\Users\Ma\extrafoto\11-16-2011_044a.jpg DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin) Windows Firewall is ingeschakeld. ==================== MSCONFIG/TASK MANAGER Uitgeschakelde items == HKU\S-1-5-21-3338703276-2134401527-3366400934-1001\...\StartupApproved\Run: => "OneDrive" ==================== Firewall regels (gefilterd) =============== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) FirewallRules: [{9B8DB7BF-BF7D-45E8-B12E-5697B66D851B}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe FirewallRules: [UDP Query User{EEDE7EE2-29D8-428B-9901-8F5E947E2545}C:\users\pc\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\pc\appdata\roaming\spotify\spotify.exe FirewallRules: [TCP Query User{5B960756-D682-4534-9F49-02C27E62321F}C:\users\pc\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\pc\appdata\roaming\spotify\spotify.exe FirewallRules: [{D303ABE2-D30D-4514-80AA-B4EFA3D2CD8E}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe FirewallRules: [{17BA03C8-A245-4573-A4A7-D9DBDCF53F70}] => (Allow) LPort=1900 FirewallRules: [{E17CF8EE-0E72-415E-88C8-65995550B651}] => (Allow) LPort=2869 FirewallRules: [{20918A9C-DE6C-498D-9E11-DBB4BA035206}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{F955423A-4197-43DF-BB40-3B48A4A36DCE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{83EDCAF1-87DF-4DAE-8BD8-3CDF77B63845}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{E319D729-8846-4357-B324-9AF99AC8649D}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{9FCD18E7-2BAE-45C7-9F42-9C8A97B9F338}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{922C4B27-5012-44EF-88F4-E2C16ED26842}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{3291DA24-E7AF-4E70-A687-3983560ECDC4}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [TCP Query User{25DB4FB4-80DF-4B31-B671-BA5C23D726F3}C:\users\pc\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\pc\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{C7D624C1-374B-4BED-8516-7198A9868B5C}C:\users\pc\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\pc\appdata\roaming\spotify\spotify.exe FirewallRules: [{C86E7E6B-738E-466C-9183-7DFDA332384B}] => (Allow) C:\Program Files\iTunes\iTunes.exe ==================== Herstelpunten ========================= 20-07-2018 13:17:35 Gepland controlepunt 30-07-2018 09:44:58 Gepland controlepunt 08-08-2018 21:10:17 Gepland controlepunt ==================== Defecte Apparaatbeheer Apparaten ============= Name: Standaard PS/2-toetsenbord Description: Standaard PS/2-toetsenbord Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318} Manufacturer: (standaardtoetsenbord) Service: i8042prt Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: Microsoft-muis (PS/2) Description: Microsoft-muis (PS/2) Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: i8042prt Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Eventlog fouten: ========================= Applicatiefouten: ================== Error: (08/09/2018 11:22:13 AM) (Source: Microsoft-Windows-SpellChecker) (EventID: 33) (User: DESKTOP-HUFACUI) Description: brave hendrikbrave hendrik-2147467263 Error: (08/09/2018 10:19:18 AM) (Source: Microsoft-Windows-SpellChecker) (EventID: 33) (User: DESKTOP-HUFACUI) Description: brave hendrikbrave hendrik-2147467263 Error: (08/08/2018 02:28:18 PM) (Source: Microsoft-Windows-SpellChecker) (EventID: 33) (User: DESKTOP-HUFACUI) Description: brave hendrikbrave hendrik-2147467263 Error: (08/08/2018 02:04:28 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Naam van toepassing met fout: IEXPLORE.EXE, versie: 11.0.17134.1, tijdstempel: 0x6639744d Naam van module met fout: KERNELBASE.dll, versie: 10.0.17134.165, tijdstempel: 0xfa43f4b2 Uitzonderingscode: 0x8007000e Foutmarge: 0x0010ddc2 Id van proces met fout: 0x43b0 Starttijd van toepassing met fout: 0x01d42f0eb6c9769e Pad naar toepassing met fout: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Pad naar module met fout: C:\WINDOWS\System32\KERNELBASE.dll Rapport-id: 30b6efd8-562a-475d-8592-d6f68298249b Volledige pakketnaam met fout: Relatieve toepassings-id van pakket met fout: Error: (08/08/2018 10:22:51 AM) (Source: Microsoft-Windows-SpellChecker) (EventID: 33) (User: DESKTOP-HUFACUI) Description: brave hendrikbrave hendrik-2147467263 Error: (08/08/2018 03:27:20 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Naam van toepassing met fout: IEXPLORE.EXE, versie: 11.0.17134.1, tijdstempel: 0x6639744d Naam van module met fout: KERNELBASE.dll, versie: 10.0.17134.165, tijdstempel: 0xfa43f4b2 Uitzonderingscode: 0x8007000e Foutmarge: 0x0010ddc2 Id van proces met fout: 0x3e78 Starttijd van toepassing met fout: 0x01d42e9ef8c95de7 Pad naar toepassing met fout: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Pad naar module met fout: C:\WINDOWS\System32\KERNELBASE.dll Rapport-id: 0b5ad3b5-6ae7-4292-900a-548b2221af2a Volledige pakketnaam met fout: Relatieve toepassings-id van pakket met fout: Error: (08/08/2018 12:35:36 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Naam van toepassing met fout: IEXPLORE.EXE, versie: 11.0.17134.1, tijdstempel: 0x6639744d Naam van module met fout: igd11dxva32.dll, versie: 23.20.16.4973, tijdstempel: 0x5a96aae9 Uitzonderingscode: 0xc0000005 Foutmarge: 0x0002b7e1 Id van proces met fout: 0x22f8 Starttijd van toepassing met fout: 0x01d42e96bb80ffd3 Pad naar toepassing met fout: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE Pad naar module met fout: C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_250db833a1cd577e\igd11dxva32.dll Rapport-id: 47ffd340-5500-43ee-968d-86520984e9b0 Volledige pakketnaam met fout: Relatieve toepassings-id van pakket met fout: Error: (08/07/2018 11:56:52 PM) (Source: Microsoft-Windows-SpellChecker) (EventID: 33) (User: DESKTOP-HUFACUI) Description: brave hendrikbrave hendrik-2147467263 Systeemfouten: ============= Error: (08/09/2018 10:47:28 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Starten niet verleend aan Lokaal voor de COM-servertoepassing met CLSID Windows.SecurityCenter.WscBrokerManager en APPID Niet beschikbaar aan de gebruiker NT AUTHORITY\SYSTEM SID (S-1-5-18) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (08/09/2018 10:45:44 AM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-HUFACUI) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} en APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} aan de gebruiker DESKTOP-HUFACUI\pc SID (S-1-5-21-3338703276-2134401527-3366400934-1001) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (08/09/2018 10:45:21 AM) (Source: Application Popup) (EventID: 875) (User: ) Description: eeCtrl64.sys Error: (08/09/2018 10:45:21 AM) (Source: Application Popup) (EventID: 56) (User: ) Description: ACPI5 Error: (08/09/2018 10:44:55 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: De Intel(R) Security Assist-service is onverwacht beëindigd. Dit is nu 1 keer gebeurd. Error: (08/09/2018 10:44:55 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: De Intel(R) Dynamic Application Loader Host Interface Service-service is onverwacht beëindigd. Dit is nu 1 keer gebeurd. Error: (08/09/2018 10:44:55 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: De ArcSoft Connect Daemon-service is onverwacht beëindigd. Dit is nu 1 keer gebeurd. Error: (08/09/2018 10:44:55 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: De iPod-service-service is onverwacht beëindigd. Dit is nu 1 keer gebeurd. ==================== Geheugen info =========================== Processor: Intel(R) Core(TM) i5-6600 CPU @ 3.30GHz Percentage geheugen in gebruik: 18% Totaal fysiek RAM-geheugen: 16248.57 MB Beschikbaar fysiek RAM-geheugen: 13256.52 MB Totaal Virtueel geheugen: 18680.57 MB Beschikbaar Virtueel geheugen: 15884.41 MB ==================== Schijven ================================ Drive c: () (Fixed) (Total:231.89 GB) (Free:175.62 GB) NTFS Drive d: (NieuwVolume) (Fixed) (Total:1862.89 GB) (Free:1750.98 GB) NTFS \\?\Volume{28771d39-33c5-40e5-8a9d-52600fb0d9eb}\ (Herstel) (Fixed) (Total:0.44 GB) (Free:0.13 GB) NTFS \\?\Volume{da978376-c176-4d18-af61-268d1e19aa36}\ () (Fixed) (Total:0.44 GB) (Free:0.06 GB) NTFS \\?\Volume{19b9c381-e94e-459d-a7b3-61b3773e2508}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32 ==================== MBR & Partitietabel ================== ======================================================== Disk: 0 (Protective MBR) (Size: 232.9 GB) (Disk ID: 00000000) Partition: GPT. ======================================================== Disk: 1 (Protective MBR) (Size: 1863 GB) (Disk ID: 00000000) Partition: GPT. ==================== Eind van Addition.txt ============================