Scanresultaten van Farbar Recovery Scan Tool (FRST) (x86) Versie: 29.11.2018
Gestart door erw (Beheerder) op ERW-PC (29-11-2018 16:29:22)
Gestart vanaf C:\Users\erw\Downloads
Geladen Profielen: erw & UpdatusUser (Beschikbare Profielen: erw & UpdatusUser)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) Taal: Nederlands (Nederland)
Internet Explorer Versie 11 (Standaardbrowser: FF)
Boot Modus: Normal
Handleiding voor Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processen (gefilterd) =================

(Als een item is opgenomen in de fixlist, het proces zal worden gesloten. Het bestand zal niet worden verplaatst.)

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
() C:\Program Files\CyberLink\Shared files\RichVideo.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(SEC) C:\Program Files\Samsung\Samsung Recovery Solution 4\WCScheduler.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
() C:\Program Files\Unlocker\UnlockerAssistant.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(ScanSoft, Inc) C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
(Nikon Corporation) C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliType Pro\itype.exe
(ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
(ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ArcCon.ac
(Microsoft Corporation) C:\Program Files\Microsoft IntelliType Pro\dpupdchk.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Hewlett-Packard) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation) C:\Windows\System32\LogonUI.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe

==================== Register (gefilterd) ===========================

(Als een item is opgenomen in de fixlist, zal het registeritem worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.)

HKLM\...\Run: [UnlockerAssistant] => C:\Program Files\Unlocker\UnlockerAssistant.exe [17408 2010-07-04] ()
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1713448 2010-02-26] (Synaptics Incorporated)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [8120864 2009-12-14] (Realtek Semiconductor)
HKLM\...\Run: [Omnipage] => C:\Program Files\ScanSoft\OmniPageSE\opware32.exe [49152 2002-06-03] (ScanSoft, Inc)
HKLM\...\Run: [Nikon Transfer Monitor] => C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe [479232 2009-09-15] (Nikon Corporation)
HKLM\...\Run: [itype] => C:\Program Files\Microsoft IntelliType Pro\itype.exe [1505144 2009-11-11] (Microsoft Corporation)
HKLM\...\Run: [Easy-PrintToolBox] => C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE [409600 2004-01-14] (CANON INC.)
HKLM\...\Run: [ArcSoft Connection Service] => C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [242392 2018-11-16] (AVAST Software)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [601424 2018-10-06] (Oracle Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restrictie <==== AANDACHT
HKU\S-1-5-21-1918549753-1553974762-1166484144-1000\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2009-12-23] (Google Inc.)
HKU\S-1-5-21-1918549753-1553974762-1166484144-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner.exe [13797712 2018-08-24] (Piriform Ltd)
HKU\S-1-5-21-1918549753-1553974762-1166484144-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\windows\system32\Ribbons.scr [220672 2010-11-20] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk [2010-04-26]
ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2015-10-26]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\erw\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2 .lnk [2010-05-07]
ShortcutTarget: OpenOffice.org 3.2 .lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe (Geen bestand)

==================== Internet (gefilterd) ====================

(Als een item is opgenomen in de fixlist en een registeritem is, wordt het verwijderd of hersteld naar de standaard.)

Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704 2011-08-30] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 195.130.130.1 195.130.131.1
Tcpip\..\Interfaces\{3C7434C4-3352-4D0B-9C76-2BF48DFA5B52}: [DhcpNameServer] 195.130.130.1 195.130.131.1
Tcpip\..\Interfaces\{797A7AA7-7D4E-466A-9187-9163C475F4CA}: [DhcpNameServer] 195.130.130.1 195.130.131.1

Internet Explorer:
==================
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1918549753-1553974762-1166484144-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1918549753-1553974762-1166484144-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1918549753-1553974762-1166484144-1000 -> {52A6DDD8-D4A1-437E-8F96-011057523376} URL = hxxp://www.bing.com/search?FORM=WLETDF&PC=WLEM&q={searchTerms}&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-1918549753-1553974762-1166484144-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN_nlBE377BE377
SearchScopes: HKU\S-1-5-21-1918549753-1553974762-1166484144-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-05-21] (Hewlett-Packard Co.)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_191\bin\ssv.dll [2018-10-31] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-28] (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_191\bin\jp2ssv.dll [2018-10-31] (Oracle Corporation)
BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-05-21] (Hewlett-Packard Co.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-28] (Google Inc.)
Toolbar: HKU\S-1-5-21-1918549753-1553974762-1166484144-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-28] (Google Inc.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_25-windows-i586.cab
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2007-06-09] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF DefaultProfile: w3n3yvt7.default-1410427976095-1542473835660
FF ProfilePath: C:\Users\erw\AppData\Roaming\Mozilla\Firefox\Profiles\w3n3yvt7.default-1410427976095-1542473835660 [2018-11-29]
FF Homepage: Mozilla\Firefox\Profiles\w3n3yvt7.default-1410427976095-1542473835660 -> about:blank
FF HKU\S-1-5-21-1918549753-1553974762-1166484144-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: (HP Smart Web Printing) - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2015-05-06] [Verouderd] [niet getekend]
FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF32_31_0_0_153.dll [2018-11-20] ()
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2010-09-01] (Google)
FF Plugin: @java.com/DTPlugin,version=11.191.2 -> C:\Program Files\Java\jre1.8.0_191\bin\dtplugin\npDeployJava1.dll [2018-10-31] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.191.2 -> C:\Program Files\Java\jre1.8.0_191\bin\plugin2\npjp2.dll [2018-10-31] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [Geen bestand]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.3 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2008-11-13] (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-18] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-09-20] (Adobe Systems Inc.)
FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [Geen bestand]

Chrome: 
=======
CHR DefaultProfile: Default
CHR StartupUrls: Default -> "hxxp://www.google.com"
CHR Profile: C:\Users\erw\AppData\Local\Google\Chrome\User Data\Default [2018-11-29]
CHR Extension: (Adobe Acrobat) - C:\Users\erw\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2018-06-21]
CHR Extension: (Betalingen via Chrome Web Store) - C:\Users\erw\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-08-17]
CHR Extension: (Chrome Media Router) - C:\Users\erw\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-11-29]
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-1918549753-1553974762-1166484144-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

==================== Services (gefilterd) ====================

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

R2 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6799632 2018-11-16] (AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [324000 2018-11-16] (AVAST Software)
R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [Bestand niet getekend]
R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-05-21] (Hewlett-Packard Co.) [Bestand niet getekend]
R2 HPSLPSVC; C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL [694784 2009-09-20] (Hewlett-Packard Co.) [Bestand niet getekend]
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Bestand niet getekend]
R3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [5073376 2018-09-19] (Malwarebytes)
R2 Net Driver HPZ12; C:\windows\system32\HPZinw12.dll [44544 2008-12-03] (Hewlett-Packard) [Bestand niet getekend]
R2 Pml Driver HPZ12; C:\windows\system32\HPZipm12.dll [53760 2008-12-03] (Hewlett-Packard) [Bestand niet getekend]
R2 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [247152 2009-07-07] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-14] (Microsoft Corporation)

===================== Drivers (gefilterd) ======================

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

R1 aswArPot; C:\windows\System32\drivers\aswArPot.sys [167480 2018-11-16] (AVAST Software)
R1 aswbidsdriver; C:\windows\System32\drivers\aswbidsdriverx.sys [188976 2018-11-16] (AVAST Software)
R0 aswbidsh; C:\windows\System32\drivers\aswbidshx.sys [165384 2018-11-16] (AVAST Software)
R0 aswblog; C:\windows\System32\drivers\aswblogx.sys [284256 2018-11-16] (AVAST Software)
R0 aswbuniv; C:\windows\System32\drivers\aswbunivx.sys [57904 2018-11-16] (AVAST Software)
R1 aswHdsKe; C:\windows\System32\drivers\aswHdsKe.sys [183176 2018-11-26] (AVAST Software)
S3 aswHwid; C:\windows\System32\drivers\aswHwid.sys [42736 2018-11-16] (AVAST Software)
R1 aswKbd; C:\windows\System32\drivers\aswKbd.sys [40688 2018-11-16] (AVAST Software)
R2 aswMonFlt; C:\windows\System32\drivers\aswMonFlt.sys [135200 2018-11-16] (AVAST Software)
R1 aswRdr; C:\windows\System32\drivers\aswRdr2.sys [100984 2018-11-16] (AVAST Software)
R0 aswRvrt; C:\windows\System32\drivers\aswRvrt.sys [72800 2018-11-16] (AVAST Software)
R1 aswSnx; C:\windows\System32\drivers\aswSnx.sys [784560 2018-11-16] (AVAST Software)
R1 aswSP; C:\windows\System32\drivers\aswSP.sys [397992 2018-11-16] (AVAST Software)
R2 aswStm; C:\windows\System32\drivers\aswStm.sys [156936 2018-11-16] (AVAST Software)
R0 aswVmm; C:\windows\System32\drivers\aswVmm.sys [310200 2018-11-16] (AVAST Software)
R1 ESProtectionDriver; C:\windows\system32\drivers\mbae.sys [129248 2018-09-11] (Malwarebytes)
S3 hidkmdf; C:\windows\System32\DRIVERS\hidkmdf.sys [12056 2015-04-28] (Windows (R) Win 7 DDK provider)
R2 MBAMChameleon; C:\windows\System32\Drivers\MbamChameleon.sys [175024 2018-11-29] (Malwarebytes)
R3 MBAMFarflt; C:\windows\System32\DRIVERS\farflt.sys [101688 2018-11-29] (Malwarebytes)
R3 MBAMProtection; C:\windows\System32\DRIVERS\mbam.sys [51696 2018-11-29] (Malwarebytes)
R3 MBAMSwissArmy; C:\windows\System32\Drivers\mbamswissarmy.sys [229472 2018-11-29] (Malwarebytes)
R3 MBAMWebProtection; C:\windows\System32\DRIVERS\mwac.sys [81600 2018-11-29] (Malwarebytes)
R3 yukonw7; C:\windows\System32\DRIVERS\yk62x86.sys [315392 2009-09-28] ()
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () [Bestand niet getekend]
S3 WacHidRouter; system32\DRIVERS\wachidrouter.sys [X]
S3 wacomrouterfilter; system32\DRIVERS\wacomrouterfilter.sys [X]

==================== NetSvcs (gefilterd) ===================

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)


==================== Een Maand Gemaakt bestanden en mappen ========

(Als een item is opgenomen in de fixlist, word de map of het bestand verplaatst.)

2018-11-29 16:29 - 2018-11-29 16:30 - 000018757 _____ C:\Users\erw\Downloads\FRST.txt
2018-11-29 16:29 - 2018-11-29 16:29 - 000000000 ____D C:\FRST
2018-11-29 16:28 - 2018-11-29 16:28 - 001776128 _____ (Farbar) C:\Users\erw\Downloads\FRST.exe
2018-11-29 16:10 - 2018-11-29 16:10 - 021805158 _____ C:\Users\erw\Documents\fl.psd
2018-11-29 16:10 - 2018-11-29 16:10 - 001600569 _____ C:\Users\erw\Documents\fla.psd
2018-11-29 15:53 - 2018-11-29 16:10 - 002310313 _____ C:\Users\erw\Documents\flashing lights-- werkt niet.psd
2018-11-29 13:02 - 2018-11-29 14:58 - 002693432 _____ C:\Users\erw\Documents\flashing lights.psd
2018-11-29 11:33 - 2018-11-29 11:33 - 000229472 _____ (Malwarebytes) C:\windows\system32\Drivers\mbamswissarmy.sys
2018-11-29 11:33 - 2018-11-29 11:33 - 000175024 _____ (Malwarebytes) C:\windows\system32\Drivers\MbamChameleon.sys
2018-11-29 11:33 - 2018-11-29 11:33 - 000101688 _____ (Malwarebytes) C:\windows\system32\Drivers\farflt.sys
2018-11-29 11:33 - 2018-11-29 11:33 - 000081600 _____ (Malwarebytes) C:\windows\system32\Drivers\mwac.sys
2018-11-29 11:33 - 2018-11-29 11:33 - 000051696 _____ (Malwarebytes) C:\windows\system32\Drivers\mbam.sys
2018-11-29 11:33 - 2018-11-29 11:33 - 000000000 ____D C:\Users\erw\AppData\Local\mbamtray
2018-11-29 11:33 - 2018-11-29 11:33 - 000000000 ____D C:\Users\erw\AppData\Local\mbam
2018-11-29 11:32 - 2018-11-29 11:32 - 000001984 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2018-11-29 11:32 - 2018-11-29 11:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2018-11-29 01:13 - 2018-11-29 01:13 - 001569383 _____ C:\Users\erw\Documents\blac and red 5.psd
2018-11-27 21:19 - 2018-11-27 21:46 - 001613754 _____ C:\Users\erw\Documents\blac and red 0.psd
2018-11-27 19:55 - 2018-11-27 19:55 - 001958960 _____ C:\Users\erw\Documents\coordinate frames and contraction.psd
2018-11-27 15:00 - 2018-11-27 15:00 - 000056276 _____ C:\Users\erw\Documents\zzzzzzzzzzzzzz captain john edwards voor pa.odt
2018-11-25 21:58 - 2018-11-25 22:00 - 000000000 ____D C:\Users\erw\Documents\Scheut + Anderlecht
2018-11-20 09:03 - 2018-11-20 09:03 - 000067856 _____ C:\Users\erw\Documents\Pascal-2018-11-17.ods
2018-11-17 17:56 - 2018-11-17 17:57 - 000000000 ____D C:\Program Files\Mozilla Firefox
2018-11-17 17:55 - 2018-11-17 17:55 - 000320104 _____ (Mozilla) C:\Users\erw\Downloads\Firefox Installer.exe
2018-11-16 18:41 - 2018-11-16 18:41 - 000047720 _____ () C:\windows\system32\Drivers\staport.sys
2018-11-16 18:40 - 2018-11-16 18:40 - 000323288 _____ (AVAST Software) C:\windows\system32\aswBoot.exe
2018-11-16 11:26 - 2018-11-16 11:26 - 000018869 _____ C:\Users\erw\Documents\Rekeninguittreksels_BE71979777490569_2018-11-16_112614.pdf
2018-11-16 11:26 - 2018-11-16 11:26 - 000009532 _____ C:\Users\erw\Documents\Rekeninguittreksels_BE86979423836350_2018-11-16_112623.pdf
2018-11-16 11:26 - 2018-11-16 11:26 - 000009275 _____ C:\Users\erw\Documents\Rekeninguittreksels_BE70973017158425_2018-11-16_112629.pdf
2018-11-14 19:41 - 2018-11-14 19:41 - 007394898 _____ C:\Users\erw\Documents\Quand on doit remercier Dieu même si on._. - Epoch Times Paris1.mp4
2018-11-14 19:26 - 2018-11-14 19:26 - 000007836 _____ C:\Users\erw\Documents\734967091118-285220000.pdf
2018-11-14 11:06 - 2018-11-11 02:14 - 004054248 _____ (Microsoft Corporation) C:\windows\system32\ntkrnlpa.exe
2018-11-14 11:06 - 2018-11-11 02:14 - 003960040 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2018-11-14 11:06 - 2018-11-11 02:14 - 000136424 _____ (Microsoft Corporation) C:\windows\system32\halacpi.dll
2018-11-14 11:06 - 2018-11-11 02:13 - 000189672 _____ (Microsoft Corporation) C:\windows\system32\halmacpi.dll
2018-11-14 11:06 - 2018-11-11 02:13 - 000189672 _____ (Microsoft Corporation) C:\windows\system32\hal.dll
2018-11-14 11:06 - 2018-11-11 02:13 - 000137960 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2018-11-14 11:06 - 2018-11-11 02:13 - 000067304 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2018-11-14 11:06 - 2018-11-11 02:12 - 001310528 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2018-11-14 11:06 - 2018-11-11 02:11 - 000400896 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2018-11-14 11:06 - 2018-11-11 02:11 - 000172032 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2018-11-14 11:06 - 2018-11-11 02:11 - 000171008 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll
2018-11-14 11:06 - 2018-11-11 02:11 - 000099840 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2018-11-14 11:06 - 2018-11-11 02:11 - 000070144 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2018-11-14 11:06 - 2018-11-11 02:11 - 000050176 _____ (Microsoft Corporation) C:\windows\system32\setbcdlocale.dll
2018-11-14 11:06 - 2018-11-11 02:11 - 000043008 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2018-11-14 11:06 - 2018-11-11 02:10 - 001425920 _____ (Microsoft Corporation) C:\windows\system32\ole32.dll
2018-11-14 11:06 - 2018-11-11 02:10 - 001063424 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2018-11-14 11:06 - 2018-11-11 02:10 - 000872448 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll
2018-11-14 11:06 - 2018-11-11 02:10 - 000655360 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2018-11-14 11:06 - 2018-11-11 02:10 - 000554496 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2018-11-14 11:06 - 2018-11-11 02:10 - 000380928 _____ (Microsoft Corporation) C:\windows\system32\rpcss.dll
2018-11-14 11:06 - 2018-11-11 02:10 - 000294400 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll
2018-11-14 11:06 - 2018-11-11 02:10 - 000261120 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2018-11-14 11:06 - 2018-11-11 02:10 - 000254464 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2018-11-14 11:06 - 2018-11-11 02:10 - 000223232 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2018-11-14 11:06 - 2018-11-11 02:10 - 000146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2018-11-14 11:06 - 2018-11-11 02:10 - 000141312 _____ (Microsoft Corporation) C:\windows\system32\rpchttp.dll
2018-11-14 11:06 - 2018-11-11 02:10 - 000060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll
2018-11-14 11:06 - 2018-11-11 02:10 - 000038912 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2018-11-14 11:06 - 2018-11-11 02:10 - 000026112 _____ (Microsoft Corporation) C:\windows\system32\oleres.dll
2018-11-14 11:06 - 2018-11-11 02:10 - 000022016 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2018-11-14 11:06 - 2018-11-11 02:10 - 000017408 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2018-11-14 11:06 - 2018-11-11 02:09 - 000690688 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2018-11-14 11:06 - 2018-11-11 02:09 - 000644096 _____ (Microsoft Corporation) C:\windows\system32\advapi32.dll
2018-11-14 11:06 - 2018-11-11 02:09 - 000082432 _____ (Microsoft Corporation) C:\windows\system32\bcrypt.dll
2018-11-14 11:06 - 2018-11-11 02:09 - 000050688 _____ (Microsoft Corporation) C:\windows\system32\appidapi.dll
2018-11-14 11:06 - 2018-11-11 02:09 - 000007168 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2018-11-14 11:06 - 2018-11-11 02:09 - 000005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2018-11-14 11:06 - 2018-11-11 02:09 - 000004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2018-11-14 11:06 - 2018-11-11 02:09 - 000004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2018-11-14 11:06 - 2018-11-11 02:09 - 000004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2018-11-14 11:06 - 2018-11-11 02:09 - 000004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2018-11-14 11:06 - 2018-11-11 02:09 - 000004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2018-11-14 11:06 - 2018-11-11 02:09 - 000004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2018-11-14 11:06 - 2018-11-11 02:09 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2018-11-14 11:06 - 2018-11-11 02:09 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2018-11-14 11:06 - 2018-11-11 02:09 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2018-11-14 11:06 - 2018-11-11 02:09 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2018-11-14 11:06 - 2018-11-11 02:09 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2018-11-14 11:06 - 2018-11-11 02:09 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2018-11-14 11:06 - 2018-11-11 02:09 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2018-11-14 11:06 - 2018-11-11 02:09 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2018-11-14 11:06 - 2018-11-11 02:09 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2018-11-14 11:06 - 2018-11-11 02:09 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2018-11-14 11:06 - 2018-11-11 02:09 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2018-11-14 11:06 - 2018-11-11 02:09 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2018-11-14 11:06 - 2018-11-11 02:09 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2018-11-14 11:06 - 2018-11-11 02:09 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2018-11-14 11:06 - 2018-11-11 02:09 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2018-11-14 11:06 - 2018-11-11 02:09 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2018-11-14 11:06 - 2018-11-11 02:09 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2018-11-14 11:06 - 2018-11-11 01:47 - 000007168 _____ (Microsoft Corporation) C:\windows\system32\comcat.dll
2018-11-14 11:06 - 2018-11-11 01:46 - 000097792 _____ (Microsoft Corporation) C:\windows\system32\appidpolicyconverter.exe
2018-11-14 11:06 - 2018-11-11 01:46 - 000050688 _____ (Microsoft Corporation) C:\windows\system32\Drivers\appid.sys
2018-11-14 11:06 - 2018-11-11 01:46 - 000029696 _____ (Microsoft Corporation) C:\windows\system32\appidsvc.dll
2018-11-14 11:06 - 2018-11-11 01:46 - 000016896 _____ (Microsoft Corporation) C:\windows\system32\appidcertstorecheck.exe
2018-11-14 11:06 - 2018-11-11 01:45 - 000050688 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe
2018-11-14 11:06 - 2018-11-11 01:43 - 000271360 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe
2018-11-14 11:06 - 2018-11-11 01:43 - 000262656 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2018-11-14 11:06 - 2018-11-11 01:43 - 000107520 _____ (Microsoft Corporation) C:\windows\system32\Drivers\videoprt.sys
2018-11-14 11:06 - 2018-11-11 01:41 - 000226304 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys
2018-11-14 11:06 - 2018-11-11 01:41 - 000098816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2018-11-14 11:06 - 2018-11-11 01:40 - 000126464 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2018-11-14 11:06 - 2018-11-11 01:40 - 000069632 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2018-11-14 11:06 - 2018-11-11 01:40 - 000055296 _____ (Microsoft Corporation) C:\windows\system32\Drivers\amdk8.sys
2018-11-14 11:06 - 2018-11-11 01:40 - 000053760 _____ (Microsoft Corporation) C:\windows\system32\Drivers\intelppm.sys
2018-11-14 11:06 - 2018-11-11 01:40 - 000053248 _____ (Microsoft Corporation) C:\windows\system32\Drivers\viac7.sys
2018-11-14 11:06 - 2018-11-11 01:40 - 000052736 _____ (Microsoft Corporation) C:\windows\system32\Drivers\amdppm.sys
2018-11-14 11:06 - 2018-11-11 01:40 - 000052224 _____ (Microsoft Corporation) C:\windows\system32\Drivers\processr.sys
2018-11-14 11:06 - 2018-11-11 01:40 - 000036352 _____ (Microsoft Corporation) C:\windows\system32\cryptbase.dll
2018-11-14 11:06 - 2018-11-11 01:40 - 000022016 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2018-11-14 11:06 - 2018-11-11 01:40 - 000015872 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2018-11-14 11:06 - 2018-11-11 01:40 - 000006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2018-11-14 11:06 - 2018-11-11 01:40 - 000004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2018-11-14 11:06 - 2018-11-11 01:40 - 000003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2018-11-14 11:06 - 2018-11-11 01:40 - 000003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2018-11-14 11:06 - 2018-10-27 04:27 - 000173568 _____ (Microsoft Corporation) C:\windows\system32\scrobj.dll
2018-11-14 11:06 - 2018-10-27 04:27 - 000164352 _____ (Microsoft Corporation) C:\windows\system32\scrrun.dll
2018-11-14 11:06 - 2018-10-27 04:27 - 000121856 _____ (Microsoft Corporation) C:\windows\system32\wshom.ocx
2018-11-14 11:06 - 2018-10-27 04:04 - 000141824 _____ (Microsoft Corporation) C:\windows\system32\wscript.exe
2018-11-14 11:06 - 2018-10-27 04:04 - 000126976 _____ (Microsoft Corporation) C:\windows\system32\cscript.exe
2018-11-14 11:06 - 2018-10-27 04:04 - 000025088 _____ (Microsoft Corporation) C:\windows\system32\wshcon.dll
2018-11-14 11:06 - 2018-10-27 04:04 - 000015360 _____ (Microsoft Corporation) C:\windows\system32\dispex.dll
2018-11-14 11:06 - 2018-10-27 04:00 - 002404864 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2018-11-14 11:06 - 2018-10-18 19:51 - 000348760 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2018-11-14 11:06 - 2018-10-18 03:17 - 020281344 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2018-11-14 11:06 - 2018-10-12 21:36 - 002724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2018-11-14 11:06 - 2018-10-12 21:35 - 000004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2018-11-14 11:06 - 2018-10-12 21:26 - 000498176 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2018-11-14 11:06 - 2018-10-12 21:25 - 000341504 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2018-11-14 11:06 - 2018-10-12 21:25 - 000062464 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2018-11-14 11:06 - 2018-10-12 21:25 - 000047616 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2018-11-14 11:06 - 2018-10-12 21:24 - 000064000 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2018-11-14 11:06 - 2018-10-12 21:22 - 002295808 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2018-11-14 11:06 - 2018-10-12 21:20 - 000047104 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2018-11-14 11:06 - 2018-10-12 21:20 - 000030720 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2018-11-14 11:06 - 2018-10-12 21:18 - 000476160 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2018-11-14 11:06 - 2018-10-12 21:17 - 000662016 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2018-11-14 11:06 - 2018-10-12 21:17 - 000620032 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2018-11-14 11:06 - 2018-10-12 21:17 - 000115712 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2018-11-14 11:06 - 2018-10-12 21:17 - 000104960 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2018-11-14 11:06 - 2018-10-12 21:13 - 000668160 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2018-11-14 11:06 - 2018-10-12 21:11 - 000416256 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2018-11-14 11:06 - 2018-10-12 21:07 - 000091136 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll
2018-11-14 11:06 - 2018-10-12 21:07 - 000073216 _____ (Microsoft Corporation) C:\windows\system32\tdc.ocx
2018-11-14 11:06 - 2018-10-12 21:07 - 000060416 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2018-11-14 11:06 - 2018-10-12 21:05 - 000168960 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2018-11-14 11:06 - 2018-10-12 21:04 - 000076288 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2018-11-14 11:06 - 2018-10-12 21:03 - 004494848 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2018-11-14 11:06 - 2018-10-12 21:03 - 000279040 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2018-11-14 11:06 - 2018-10-12 21:02 - 000130048 _____ (Microsoft Corporation) C:\windows\system32\occache.dll
2018-11-14 11:06 - 2018-10-12 20:59 - 013680640 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2018-11-14 11:06 - 2018-10-12 20:57 - 000230400 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2018-11-14 11:06 - 2018-10-12 20:56 - 000696320 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2018-11-14 11:06 - 2018-10-12 20:56 - 000692224 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2018-11-14 11:06 - 2018-10-12 20:55 - 002059776 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2018-11-14 11:06 - 2018-10-12 20:55 - 001155072 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2018-11-14 11:06 - 2018-10-12 20:42 - 004386816 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2018-11-14 11:06 - 2018-10-12 20:38 - 001330176 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2018-11-14 11:06 - 2018-10-12 20:36 - 000710144 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2018-11-14 11:06 - 2018-10-06 16:47 - 000162536 _____ (Microsoft Corporation) C:\windows\system32\Drivers\msrpc.sys
2018-11-14 11:06 - 2018-10-06 14:42 - 001988096 _____ (Microsoft Corporation) C:\windows\system32\d3d10warp.dll
2018-11-14 11:06 - 2018-09-23 03:37 - 001549312 _____ (Microsoft Corporation) C:\windows\system32\tquery.dll
2018-11-14 11:06 - 2018-09-23 03:37 - 001400320 _____ (Microsoft Corporation) C:\windows\system32\mssrch.dll
2018-11-14 11:06 - 2018-09-23 03:37 - 000666624 _____ (Microsoft Corporation) C:\windows\system32\mssvp.dll
2018-11-14 11:06 - 2018-09-23 03:37 - 000337408 _____ (Microsoft Corporation) C:\windows\system32\mssph.dll
2018-11-14 11:06 - 2018-09-23 03:37 - 000197120 _____ (Microsoft Corporation) C:\windows\system32\mssphtb.dll
2018-11-14 11:06 - 2018-09-23 03:37 - 000104448 _____ (Microsoft Corporation) C:\windows\system32\mssitlb.dll
2018-11-14 11:06 - 2018-09-23 03:37 - 000059392 _____ (Microsoft Corporation) C:\windows\system32\msscntrs.dll
2018-11-14 11:06 - 2018-09-23 03:37 - 000034816 _____ (Microsoft Corporation) C:\windows\system32\mssprxy.dll
2018-11-14 11:06 - 2018-09-23 03:22 - 000427520 _____ (Microsoft Corporation) C:\windows\system32\SearchIndexer.exe
2018-11-14 11:06 - 2018-09-23 03:22 - 000164352 _____ (Microsoft Corporation) C:\windows\system32\SearchProtocolHost.exe
2018-11-14 11:06 - 2018-09-23 03:21 - 000086528 _____ (Microsoft Corporation) C:\windows\system32\SearchFilterHost.exe
2018-11-14 11:06 - 2018-09-23 03:21 - 000009728 _____ (Microsoft Corporation) C:\windows\system32\msshooks.dll
2018-11-14 11:06 - 2018-08-28 04:48 - 000419608 _____ C:\windows\system32\locale.nls
2018-10-31 13:02 - 2018-10-31 13:02 - 000000000 ____D C:\Program Files\Common Files\Java
2018-10-31 13:00 - 2018-10-31 13:00 - 000000000 ____D C:\Program Files\Common Files\Oracle

==================== Een Maand Gewijzigd bestanden en mappen ========

(Als een item is opgenomen in de fixlist, word de map of het bestand verplaatst.)

2018-11-29 16:19 - 2009-07-14 05:34 - 000023552 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-11-29 16:19 - 2009-07-14 05:34 - 000023552 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-11-29 16:15 - 2016-11-19 15:39 - 000000000 ____D C:\Users\erw\AppData\LocalLow\Mozilla
2018-11-29 11:31 - 2009-07-14 03:37 - 000000000 ____D C:\windows\inf
2018-11-29 10:46 - 2018-03-26 21:00 - 000000000 ____D C:\Users\erw\Documents\zzz-ONHOLD
2018-11-29 10:46 - 2009-12-23 20:57 - 000765454 _____ C:\windows\system32\perfh013.dat
2018-11-29 10:46 - 2009-12-23 20:57 - 000161204 _____ C:\windows\system32\perfc013.dat
2018-11-29 10:46 - 2009-07-26 21:06 - 001713532 _____ C:\windows\system32\PerfStringBackup.INI
2018-11-29 10:18 - 2018-06-22 14:15 - 000000000 ____D C:\Users\erw\AppData\Local\AVAST Software
2018-11-29 10:14 - 2018-04-17 13:39 - 000000006 ____H C:\windows\Tasks\SA.DAT
2018-11-28 10:10 - 2018-06-21 09:21 - 000002150 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-11-28 10:10 - 2018-06-21 09:21 - 000002109 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-11-27 22:03 - 2013-08-15 12:56 - 000000000 ____D C:\windows\system32\MRT
2018-11-27 22:03 - 2010-05-01 22:34 - 134758520 ____C (Microsoft Corporation) C:\windows\system32\MRT.exe
2018-11-26 17:11 - 2018-04-17 13:58 - 000183176 _____ (AVAST Software) C:\windows\system32\Drivers\aswHdsKe.sys
2018-11-20 19:37 - 2012-04-02 10:10 - 000842240 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe
2018-11-20 19:37 - 2011-05-19 08:48 - 000175104 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl
2018-11-20 19:37 - 2009-12-23 03:21 - 000000000 ____D C:\windows\system32\Macromed
2018-11-19 14:37 - 2010-04-26 14:12 - 000000000 ____D C:\Users\erw\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink DVD Suite
2018-11-19 14:34 - 2012-09-07 13:48 - 000000000 ____D C:\Program Files\Mozilla Maintenance Service
2018-11-17 23:07 - 2009-07-14 03:37 - 000000000 ____D C:\windows\rescache
2018-11-17 18:00 - 2010-04-26 15:03 - 000000000 ____D C:\Users\erw\AppData\Local\Google
2018-11-17 17:57 - 2017-12-11 15:47 - 000000000 ____D C:\Users\erw\Desktop\Oude Firefox-gegevens
2018-11-17 17:17 - 2016-11-19 09:32 - 000000000 ____D C:\Program Files\Mozilla Firefox-old
2018-11-17 17:15 - 2018-10-24 12:29 - 000000000 ____D C:\Users\erw\Documents\zzzzzz TBD
2018-11-16 18:40 - 2018-10-20 15:57 - 000040688 _____ (AVAST Software) C:\windows\system32\Drivers\aswKbd.sys
2018-11-16 18:40 - 2018-04-17 13:58 - 000784560 _____ (AVAST Software) C:\windows\system32\Drivers\aswSnx.sys
2018-11-16 18:40 - 2018-04-17 13:58 - 000397992 _____ (AVAST Software) C:\windows\system32\Drivers\aswSP.sys
2018-11-16 18:40 - 2018-04-17 13:58 - 000310200 _____ (AVAST Software) C:\windows\system32\Drivers\aswVmm.sys
2018-11-16 18:40 - 2018-04-17 13:58 - 000284256 _____ (AVAST Software) C:\windows\system32\Drivers\aswblogx.sys
2018-11-16 18:40 - 2018-04-17 13:58 - 000188976 _____ (AVAST Software) C:\windows\system32\Drivers\aswbidsdriverx.sys
2018-11-16 18:40 - 2018-04-17 13:58 - 000167480 _____ (AVAST Software) C:\windows\system32\Drivers\aswArPot.sys
2018-11-16 18:40 - 2018-04-17 13:58 - 000165384 _____ (AVAST Software) C:\windows\system32\Drivers\aswbidshx.sys
2018-11-16 18:40 - 2018-04-17 13:58 - 000156936 _____ (AVAST Software) C:\windows\system32\Drivers\aswStm.sys
2018-11-16 18:40 - 2018-04-17 13:58 - 000135200 _____ (AVAST Software) C:\windows\system32\Drivers\aswMonFlt.sys
2018-11-16 18:40 - 2018-04-17 13:58 - 000100984 _____ (AVAST Software) C:\windows\system32\Drivers\aswRdr2.sys
2018-11-16 18:40 - 2018-04-17 13:58 - 000072800 _____ (AVAST Software) C:\windows\system32\Drivers\aswRvrt.sys
2018-11-16 18:40 - 2018-04-17 13:58 - 000057904 _____ (AVAST Software) C:\windows\system32\Drivers\aswbunivx.sys
2018-11-16 18:40 - 2018-04-17 13:58 - 000042736 _____ (AVAST Software) C:\windows\system32\Drivers\aswHwid.sys
2018-11-16 10:56 - 2018-03-01 20:02 - 000001228 _____ C:\Users\Public\Desktop\Skype.lnk
2018-11-16 10:56 - 2018-03-01 20:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2018-11-16 10:46 - 2014-03-07 11:35 - 000000000 ____D C:\Users\UpdatusUser
2018-11-16 10:21 - 2009-07-14 05:33 - 000368960 _____ C:\windows\system32\FNTCACHE.DAT
2018-11-14 16:49 - 2018-09-14 08:25 - 000000000 ____D C:\Users\erw\Documents\z--canvas FGebhard
2018-11-14 15:01 - 2017-03-14 19:56 - 000000000 ____D C:\Users\erw\Documents\Huawei-foto's
2018-11-14 11:02 - 2015-07-07 16:21 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2018-10-31 13:04 - 2010-05-07 13:00 - 000000000 ____D C:\Program Files\Java
2018-10-31 13:02 - 2018-04-17 14:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2018-10-31 12:59 - 2018-04-17 14:58 - 000096632 _____ (Oracle Corporation) C:\windows\system32\WindowsAccessBridge.dll

==================== Bestanden in de root van sommige mappen =======

2015-10-19 17:17 - 2015-10-19 17:17 - 000000102 _____ () C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
2017-05-27 16:27 - 2017-05-27 16:48 - 000004608 _____ () C:\Users\erw\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2010-11-06 10:20 - 2010-11-06 10:20 - 000000017 _____ () C:\Users\erw\AppData\Local\resmon.resmoncfg

==================== Bamital & volsnap ======================

(Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.)

C:\windows\explorer.exe => Bestand is getekend
C:\windows\system32\winlogon.exe => Bestand is getekend
C:\windows\system32\wininit.exe => Bestand is getekend
C:\windows\system32\svchost.exe => Bestand is getekend
C:\windows\system32\services.exe => Bestand is getekend
C:\windows\system32\User32.dll => Bestand is getekend
C:\windows\system32\userinit.exe => Bestand is getekend
C:\windows\system32\rpcss.dll => Bestand is getekend
C:\windows\system32\dnsapi.dll => Bestand is getekend
C:\windows\system32\Drivers\volsnap.sys => Bestand is getekend

LastRegBack: 2018-11-26 20:29

==================== Eind van FRST.txt ============================