Extra scanresultaten van Farbar Recovery Scan Tool (x64) Versie: 16-05.2019 Gestart door Tanya (17-05-2019 18:33:22) Gestart vanaf C:\Users\15-AY161NB\Downloads Windows 10 Home Versie 1803 17134.765 (X64) (2018-05-20 17:27:46) Boot Modus: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-2386364578-1501602066-979878461-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-2386364578-1501602066-979878461-503 - Limited - Disabled) Gast (S-1-5-21-2386364578-1501602066-979878461-501 - Limited - Disabled) Tanya (S-1-5-21-2386364578-1501602066-979878461-1001 - Administrator - Enabled) => C:\Users\15-AY161NB WDAGUtilityAccount (S-1-5-21-2386364578-1501602066-979878461-504 - Limited - Disabled) ==================== Security Center ======================== (Als een item is opgenomen in de fixlist, zal het worden verwijderd.) AV: Avast Antivirus (Disabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Avast Antivirus (Disabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402} ==================== Geïnstalleerde programma's ====================== (Alleen de adware-programma's met 'verborgen' vlag kunnen worden toegevoegd aan de fixlist om ze zichtbaar te maken. De adware-programma's moeten handmatig gedeïnstalleerd worden.) 4K Video Downloader 4.5 (HKLM\...\{180B9AE1-F87B-4107-8C68-4265E927D6A8}) (Version: 4.5.0.2482 - Open Media LLC) Adobe Acrobat X Pro - Italiano, Español, Nederlands, Português (HKLM-x32\...\{AC76BA86-1040-7D70-7760-000000000005}) (Version: 10.1.16 - Adobe Systems) Adobe Flash Player 31 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 31.0.0.153 - Adobe Systems Incorporated) AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.4 - Advanced Micro Devices, Inc.) AMD Settings (HKLM\...\WUCCCApp) (Version: 2016.0616.1141.19207 - Advanced Micro Devices, Inc.) Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 19.4.2374 - AVAST Software) Avast Secure Browser (HKLM-x32\...\Avast Secure Browser) (Version: 73.0.1258.86 - De auteurs van Avast Secure Browser) Avast Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.4.136.333 - AVAST Software) Hidden Belgium e-ID middleware 4.3.2 (build 3551) (HKLM\...\{DB942AEA-93D6-4FE4-8862-180D35A73551}) (Version: 4.3.3551 - Belgian Government) Build-a-lot (HKLM-x32\...\WTA-de2f055e-3497-42ff-a456-8fc020fd4c50) (Version: 3.0.2.59 - WildTangent) Hidden Catalyst Control Center Next Localization BR (HKLM\...\{B2DE8EF4-8807-C01B-9AAF-CC19A115B28B}) (Version: 2016.0616.1141.19207 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CHS (HKLM\...\{225C8848-FF69-5EB6-637C-10914022E432}) (Version: 2016.0616.1141.19207 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CHT (HKLM\...\{7E127692-E03E-26DA-AAF8-9B77301B16F0}) (Version: 2016.0616.1141.19207 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CS (HKLM\...\{B7709844-1256-C83D-5EC3-DDC5386D6B84}) (Version: 2016.0616.1141.19207 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization DA (HKLM\...\{5708A415-2DD5-A8A7-BCAA-3AF0C361D68E}) (Version: 2016.0616.1141.19207 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization DE (HKLM\...\{BCB0B355-0215-686D-3A58-67FD9918A3C7}) (Version: 2016.0616.1141.19207 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization EL (HKLM\...\{05D24EEA-0F66-2439-7A8C-EDDE38FC732E}) (Version: 2016.0616.1141.19207 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization ES (HKLM\...\{8AEDD5C1-F4B6-4C56-9CA8-3416655E7058}) (Version: 2016.0616.1141.19207 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization FI (HKLM\...\{DE774583-EAE1-55D5-840B-8CBC35D3B555}) (Version: 2016.0616.1141.19207 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization FR (HKLM\...\{A64575BA-462D-6014-D409-68CF3E317329}) (Version: 2016.0616.1141.19207 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization HU (HKLM\...\{E3C04980-6EBD-1F31-FCD6-314749C5B691}) (Version: 2016.0616.1141.19207 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization IT (HKLM\...\{FC13FEC5-C294-1C15-F238-FA5DD664B3B3}) (Version: 2016.0616.1141.19207 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization JA (HKLM\...\{342288B1-8F89-5EAA-5CDA-FBCCA9E3AD2D}) (Version: 2016.0616.1141.19207 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization KO (HKLM\...\{D162C2DA-6792-FB83-18D0-9C4C7D711B17}) (Version: 2016.0616.1141.19207 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization NL (HKLM\...\{58537C95-490C-5D9C-CDDB-036484B2CEFB}) (Version: 2016.0616.1141.19207 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization NO (HKLM\...\{0F28108D-CFAF-F88F-B66A-E195CA8EE7E9}) (Version: 2016.0616.1141.19207 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization PL (HKLM\...\{98EF8459-6404-7CEA-8215-78B729177E84}) (Version: 2016.0616.1141.19207 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization RU (HKLM\...\{1FC66628-AC13-265F-CA4D-F184ABEE841F}) (Version: 2016.0616.1141.19207 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization SV (HKLM\...\{F174DE7D-1217-BC51-65BE-A1F5358122B2}) (Version: 2016.0616.1141.19207 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization TH (HKLM\...\{28260783-581D-A874-5775-2A45CC3BB797}) (Version: 2016.0616.1141.19207 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization TR (HKLM\...\{5CF3CB2F-4523-2366-041B-9776CBD8EA15}) (Version: 2016.0616.1141.19207 - Advanced Micro Devices, Inc.) Hidden CCleaner (HKLM\...\CCleaner) (Version: 5.57 - Piriform) Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.) Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.) Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.) Cisco WebEx Meetings (HKU\S-1-5-21-2386364578-1501602066-979878461-1001\...\ActiveTouchMeetingClient) (Version: - Cisco WebEx LLC) Citrix Receiver 4.6 (HKLM-x32\...\CitrixOnlinePluginPackWeb) (Version: 14.6.0.12010 - Citrix Systems, Inc.) Crazy Chicken Soccer (HKLM-x32\...\WTA-420417c4-1cf8-436b-86e2-7c9bdd2f544b) (Version: 2.2.0.110 - WildTangent) Hidden CyberLink Power Media Player 14 (HKLM-x32\...\{32C8E300-BDB4-4398-92C2-E9B7D8A233DB}) (Version: 14.0.6.8827 - CyberLink Corp.) CyberLink PowerDirector 14 (HKLM-x32\...\{6BADCD73-E925-46F7-A295-FF2448632728}) (Version: 14.0.1.2918 - CyberLink Corp.) D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden DisableMSDefender (HKLM\...\{74FE39A0-FB76-47CD-84BA-91E2BBB17EF2}) (Version: 1.0.0 - Hewlett-Packard Company) Hidden DisplayLink Graphics Driver (HKLM\...\{C0E172C1-EB80-41FB-A3DA-AEA43B0875AD}) (Version: 8.4.3026.0 - DisplayLink Corp.) Dropbox 25 GB (HKLM-x32\...\{0867A88D-764F-366E-9E21-130DA8B472C3}) (Version: 3.1.18.0 - Dropbox, Inc.) Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.189.1 - Dropbox, Inc.) Hidden Energy Star (HKLM\...\{5CB22648-35F8-41BC-9C35-1E41FE6E12A5}) (Version: 1.1.1 - HP Inc.) GIMP 2.8.22 (HKLM\...\GIMP-2_is1) (Version: 2.8.22 - The GIMP Team) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 74.0.3729.157 - Google Inc.) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.11 - Google LLC) Hidden HP Audio Switch (HKLM\...\HPAudioSwitch) (Version: 1.0.96.0 - HP Inc.) HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.1 - HP Inc.) HP Dropbox Plugin (HKLM-x32\...\{714EA650-B1EC-4731-A7BF-50BB65C7C1A4}) (Version: 36.0.31.53050 - Hewlett-Packard Co.) HP ENVY 5540 series Basissoftware van het apparaat (HKLM\...\{997868D8-1710-4D31-BC45-FF2AE6A79A0F}) (Version: 36.0.72.54013 - Hewlett-Packard Co.) HP ENVY 5540 series Help (HKLM-x32\...\{0CD9B2A9-DDD3-4ECB-B282-FC19EA790D5F}) (Version: 35.0.0 - Hewlett Packard) HP ePrint SW (HKLM-x32\...\{b0ebf7ff-6b1a-4a92-9c85-6915be1962b9}) (Version: 5.1.19895 - HP Inc.) HP Google Drive Plugin (HKLM-x32\...\{30FEB472-BC59-4966-8B0C-F8C2045D413E}) (Version: 36.0.31.53050 - Hewlett-Packard Co.) HP JumpStart Bridge (HKLM-x32\...\{EB0912FF-C311-4E0F-A6B1-420FDD3C295E}) (Version: 1.3.0.407 - HP Inc.) HP JumpStart Launch (HKLM-x32\...\{B90CB0DE-2E60-41C4-9857-466EB98192BF}) (Version: 1.1.158.0 - HP Inc.) HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.9572 - HP) HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.8351.5556 - HP Inc.) HP Support Assistant (HKLM-x32\...\{7878B5ED-BD5A-49C9-B314-D3B0FA55795D}) (Version: 8.7.50.3 - HP Inc.) HP Support Solutions Framework (HKLM-x32\...\{782E1243-3CF9-463A-8020-BB1D459127D3}) (Version: 12.10.49.21 - HP Inc.) HP System Event Utility (HKLM-x32\...\{09D0DB68-90EA-4015-983E-A0BD777D5A02}) (Version: 1.4.10 - HP Inc.) HP Touchpoint Analytics Client (HKLM\...\{E5FB98E0-0784-44F0-8CEC-95CD4690C43F}) (Version: 4.0.2.1439 - HP Inc.) HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard) Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.2.10900.330 - Intel Corporation) Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.6.0.1025 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 21.20.16.4550 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 15.2.0.1020 - Intel Corporation) Java 8 Update 211 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180211F0}) (Version: 8.0.2110.12 - Oracle Corporation) Jewel Match 3 (HKLM-x32\...\WTA-007ee26f-7b31-4a9f-9ba1-10cda2656fb4) (Version: 2.2.0.97 - WildTangent) Hidden K-Lite Codec Pack 14.5.5 Basic (HKLM-x32\...\KLiteCodecPack_is1) (Version: 14.5.5 - KLCP) Kobo (HKLM-x32\...\Kobo) (Version: 4.6.8458 - Rakuten Kobo Inc.) Magic Heroes: Save Our Park (HKLM-x32\...\WTA-3c76bd44-8b4e-46db-8dd4-6c94cd8f8eb2) (Version: 3.0.2.59 - WildTangent) Hidden Microsoft Office 365 - nl-nl (HKLM\...\O365HomePremRetail - nl-nl) (Version: 16.0.11601.20204 - Microsoft Corporation) Microsoft Office Professional Plus 2016 - nl-nl (HKLM\...\ProPlusRetail - nl-nl) (Version: 16.0.11601.20204 - Microsoft Corporation) Microsoft OneDrive (HKU\.DEFAULT\...\OneDriveSetup.exe) (Version: 17.3.6743.1212 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-2386364578-1501602066-979878461-1001\...\OneDriveSetup.exe) (Version: 19.043.0304.0007 - Microsoft Corporation) Microsoft SQL Server 2014 Express LocalDB (HKLM\...\{AB8DE9BA-19E1-446A-BCFA-6B3DA9751E21}) (Version: 12.0.2000.8 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23506 (HKLM-x32\...\{23daf363-3020-4059-b3ae-dc4ad39fed19}) (Version: 14.0.23506.0 - Microsoft Corporation) Movie Maker (HKLM-x32\...\{38F03569-A636-4CF3-BDDE-032C8C251304}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Mozilla Firefox 58.0.2 (x86 nl) (HKLM-x32\...\Mozilla Firefox 58.0.2 (x86 nl)) (Version: 58.0.2 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 51.0.1 - Mozilla) NCapture for Internet Explorer (HKLM-x32\...\{B32CD9BC-7C16-4152-A579-2AA32730E24E}) (Version: 1.0.231.0 - QSR International Pty Ltd) OEM Application Profile (HKLM-x32\...\{B4B7FD8F-06FC-E277-4F29-8F75F8281D8F}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.) Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.11601.20204 - Microsoft Corporation) Hidden Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.11601.20204 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.11601.20204 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0413-0000-0000000FF1CE}) (Version: 16.0.11601.20204 - Microsoft Corporation) Hidden Online Plug-in (HKLM-x32\...\{9E362141-4BE9-47C3-BD36-638B77AC87AA}) (Version: 14.6.0.12010 - Citrix Systems, Inc.) Hidden paint.net (HKLM\...\{B998B716-4001-4919-BA90-BA14B51DFEB5}) (Version: 4.1.6 - dotPDN LLC) Polar Bowler 1st Frame (HKLM-x32\...\WTA-87b9e3e5-9304-480b-838f-7f15611af9de) (Version: 3.0.2.59 - WildTangent) Hidden Productverbeteringsonderzoek voor HP ENVY 5540 series (HKLM\...\{6761EEBE-B6C7-409F-A298-4D69509303EE}) (Version: 36.0.72.54013 - Hewlett-Packard Co.) Pulse Secure (HKLM\...\{EF3E08E0-4B9B-47A4-A318-4C2C816C1C47}) (Version: 5.2.869 - Pulse Secure, LLC) Hidden Pulse Secure 5.2 (HKLM-x32\...\Pulse Secure 5.2) (Version: 5.2.869 - Pulse Secure, LLC) Pulse Secure Setup Client (HKU\S-1-5-21-2386364578-1501602066-979878461-1001\...\Pulse_Setup_Client) (Version: 8.2.5.869 - Pulse Secure, LLC) Pulse Secure Setup Client 64-bit Activex Control (HKLM\...\Pulse_Setup_Client Activex Control) (Version: 2.1.1.1 - Pulse Secure, LLC) Pulse Secure Setup Client Activex Control (HKLM-x32\...\Pulse_Setup_Client Activex Control) (Version: 2.1.1.1 - Pulse Secure, LLC) PX Profile Update (HKLM-x32\...\{3AF11E92-263D-3753-B2C7-A7B99B123AB1}) (Version: 1.00.1. - AMD) Hidden QSR NCapture for Chrome (HKLM-x32\...\{EB78E6E7-6E0B-4EEE-A485-9361C3500096}) (Version: 1.0.182.0 - QSR International Pty Ltd) Ranch Rush 2 - Premium Edition (HKLM-x32\...\WTA-b781417e-12c4-4b62-b4e5-3ef389403495) (Version: 2.2.0.97 - WildTangent) Hidden REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 1.0.0.59 - REALTEK Semiconductor Corp.) Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.10586.31222 - Realtek Semiconduct Corp.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.10.714.2016 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7944 - Realtek Semiconductor Corp.) REALTEK Wireless LAN Driver (HKLM-x32\...\{A5107464-AA9B-4177-8129-5FF2F42DD322}) (Version: 1.0.0.83 - REALTEK Semiconductor Corp.) Runefall (HKLM-x32\...\WTA-29c71ada-3481-481f-8f72-2fd8f4819601) (Version: 3.0.2.126 - WildTangent) Hidden Self-service Plug-in (HKLM-x32\...\{27B93352-3746-4329-9D16-CE20A1E400C5}) (Version: 4.6.0.14932 - Citrix Systems, Inc.) Hidden Software voor Intel® Chipset-apparaten (HKLM-x32\...\{5f5c7829-a6ba-4fc6-9f47-d068f51ed99b}) (Version: 10.1.1.35 - Intel(R) Corporation) Hidden Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.3.31.31 - Synaptics Incorporated) Trinklit Supreme (HKLM-x32\...\WTA-501adbe7-2e73-48bd-b3f7-1d22767fb734) (Version: 2.2.0.98 - WildTangent) Hidden Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{C3ACFCEA-240F-4DCC-A0C3-DD55FEE6C3C2}) (Version: 2.58.0.0 - Microsoft Corporation) Update Installer for WildTangent Games App (HKLM-x32\...\{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App) (Version: - WildTangent) Hidden Vulkan Run Time Libraries 1.0.13.0 (HKLM\...\VulkanRT1.0.13.0) (Version: 1.0.13.0 - LunarG, Inc.) WhatsApp (HKU\S-1-5-21-2386364578-1501602066-979878461-1001\...\WhatsApp) (Version: 0.3.2848 - WhatsApp) WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.1.0.28 - WildTangent) WildTangent Games App for HP (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-hp) (Version: 4.1.1.14 - WildTangent) Hidden Windows Movie Maker 2016 (HKLM-x32\...\{3CC29C1A-B5FE-457B-8F22-32A2videowin}}_is1) (Version: - videowinsoft.com) Zoom (HKU\S-1-5-21-2386364578-1501602066-979878461-1001\...\ZoomUMX) (Version: 4.1 - Zoom Video Communications, Inc.) Packages: ========= Amazon -> C:\Program Files\WindowsApps\Amazon.com.Amazon_2018.519.2811.0_x64__343d40qqvtj1t [2018-06-28] (Amazon.com) Candy Crush Soda Saga -> C:\Program Files\WindowsApps\king.com.CandyCrushSodaSaga_1.139.500.0_x86__kgqvnymyfvs32 [2019-05-16] (king.com) Facebook -> C:\Program Files\WindowsApps\Facebook.Facebook_186.2191.46880.0_x86__8xx8rvfyw5nnt [2019-02-27] (Facebook Inc) Foto's-invoegtoepassing -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2017.39121.36610.0_x64__8wekyb3d8bbwe [2018-09-14] (Microsoft Corporation) HP JumpStart -> C:\Program Files\WindowsApps\AD2F1837.HPJumpStart_1.2.228.0_x64__v10z8vjag6ke6 [2016-12-26] (HP Inc.) HP LOUNGE -> C:\Program Files\WindowsApps\UniversalMusicMobile.HPLOUNGE_2.1.1.0_x64__3ms5eyejfeart [2017-04-01] (Universal Music Mobile) HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_95.1.531.0_x64__v10z8vjag6ke6 [2019-03-20] (HP Inc.) Microsoft Telefoon -> C:\Program Files\WindowsApps\Microsoft.CommsPhone_3.43.20002.1000_x64__8wekyb3d8bbwe [2018-09-10] (Microsoft Corporation) Microsoft Telefoonassistent -> C:\Program Files\WindowsApps\Microsoft.WindowsPhone_10.1802.311.0_x64__8wekyb3d8bbwe [2018-02-13] (Microsoft Corporation) Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.93.375.0_x64__mcm4njqhnhss8 [2019-02-20] (Netflix, Inc.) Simple Mahjong -> C:\Program Files\WindowsApps\26720RandomSaladGamesLLC.SimpleMahjong_5.3.35.0_x64__kx24dqmazqk8j [2018-11-06] (Random Salad Games LLC) Twitter -> C:\Program Files\WindowsApps\9E2F88E3.Twitter_6.1.4.1000_neutral__wgeqdkkx372wm [2018-09-10] (Twitter Inc.) ==================== Aangepaste CLSID (gefilterd): ========================== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) CustomCLSID: HKU\S-1-5-21-2386364578-1501602066-979878461-1001_Classes\CLSID\{C591CFEA-E432-495d-A0BE-58E4CCD87B17}\Shell\Open\Command -> C:\Program Files\Synaptics\SynTP\SynTPCpl.dll (Synaptics Incorporated -> Synaptics Incorporated) ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-04-24] (AVAST Software s.r.o. -> AVAST Software) ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802} => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\..\Acrobat Elements\ContextMenu64.dll [2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Inc.) ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-04-24] (AVAST Software s.r.o. -> AVAST Software) ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-04-24] (AVAST Software s.r.o. -> AVAST Software) ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2016-06-16] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Geen bestand ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\119748.inf_amd64_8e3972f5c88264c0\igfxDTCM.dll [2016-12-06] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802} => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\..\Acrobat Elements\ContextMenu64.dll [2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Inc.) ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-04-24] (AVAST Software s.r.o. -> AVAST Software) ==================== Snelkoppelingen & WMI ======================== (De items kunnen worden opgenomen in de fixlist.txt om hersteld of verwijderd te worden.) ==================== Geladen Modules (gefilterd) ============== 2015-09-24 17:42 - 2015-09-24 17:42 - 000019968 _____ () [Bestand niet getekend] C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Locale\nl_NL\acrotray.nld 2015-06-25 16:53 - 2015-06-25 16:53 - 000011776 _____ () [Bestand niet getekend] C:\Program Files\AMD\CNext\CNext\libEGL.dll 2015-06-25 16:51 - 2015-06-25 16:51 - 002013696 _____ () [Bestand niet getekend] C:\Program Files\AMD\CNext\CNext\libGLESv2.dll 2015-06-25 17:34 - 2015-06-25 17:34 - 000014336 _____ () [Bestand niet getekend] C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll 2015-06-25 17:37 - 2015-06-25 17:37 - 000739840 _____ () [Bestand niet getekend] C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll 2015-06-25 17:38 - 2015-06-25 17:38 - 000071168 _____ () [Bestand niet getekend] C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll 2015-06-25 17:35 - 2015-06-25 17:35 - 000014336 _____ () [Bestand niet getekend] C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll 2016-06-16 11:41 - 2016-06-16 11:41 - 000138752 _____ () [Bestand niet getekend] C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe 2019-05-16 11:17 - 2019-05-16 11:17 - 000156672 _____ () [Bestand niet getekend] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\BRIDGECommon\c0e6be2841a8deae2c994fd6237b0379\BRIDGECommon.ni.dll 2019-05-16 11:18 - 2019-05-16 11:18 - 000116736 _____ () [Bestand niet getekend] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\BridgeExtension\1069ac97cc0b575541261395a2769623\BridgeExtension.ni.dll 2019-05-16 11:19 - 2019-05-16 11:19 - 000329728 _____ () [Bestand niet getekend] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\CleanStartController\003b51db8280be922069666326239675\CleanStartController.ni.dll 2015-09-24 17:42 - 2015-09-24 17:42 - 000336384 _____ (Adobe Systems Inc.) [Bestand niet getekend] C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Locale\nl_NL\Acrobat Elements\ContextMenu64.nld 2016-06-16 11:39 - 2016-06-16 11:39 - 000004608 _____ (Advanced Micro Devices, Inc.) [Bestand niet getekend] C:\Program Files\AMD\CNext\CNext\atiamnld.dll 2019-05-16 11:18 - 2019-05-16 11:18 - 000131072 _____ (HP Inc.) [Bestand niet getekend] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\CommonPortable\28f726f3d2d415ceddc0dcf1c12bba93\CommonPortable.ni.dll 2019-05-16 11:19 - 2019-05-16 11:19 - 000157184 _____ (HP Inc.) [Bestand niet getekend] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\HPJumpStartBridge\c7e7512242475972f00cadbed6570125\HPJumpStartBridge.ni.exe 2016-08-25 12:36 - 2016-08-25 12:36 - 001318912 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Bestand niet getekend] C:\Program Files (x86)\Common Files\Pulse Secure\JUNS\LIBEAY32.dll 2016-08-25 12:36 - 2016-08-25 12:36 - 000241664 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Bestand niet getekend] C:\Program Files (x86)\Common Files\Pulse Secure\JUNS\SSLEAY32.dll 2016-08-25 12:36 - 2016-08-25 12:36 - 001318912 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Bestand niet getekend] C:\Program Files (x86)\Common Files\Pulse Secure\TNC Client Plugin\LIBEAY32.dll 2015-06-25 17:20 - 2015-06-25 17:20 - 000049664 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files\AMD\CNext\CNext\imageformats\qdds.dll 2015-06-25 17:15 - 2015-06-25 17:15 - 000029696 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files\AMD\CNext\CNext\imageformats\qgif.dll 2015-06-25 17:20 - 2015-06-25 17:20 - 000037376 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files\AMD\CNext\CNext\imageformats\qicns.dll 2015-06-25 17:15 - 2015-06-25 17:15 - 000030208 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files\AMD\CNext\CNext\imageformats\qico.dll 2015-06-25 17:20 - 2015-06-25 17:20 - 000459776 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files\AMD\CNext\CNext\imageformats\qjp2.dll 2015-06-25 17:15 - 2015-06-25 17:15 - 000236544 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files\AMD\CNext\CNext\imageformats\qjpeg.dll 2015-06-25 17:20 - 2015-06-25 17:20 - 000275456 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files\AMD\CNext\CNext\imageformats\qmng.dll 2015-06-25 17:17 - 2015-06-25 17:17 - 000023552 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files\AMD\CNext\CNext\imageformats\qsvg.dll 2015-06-25 17:20 - 2015-06-25 17:20 - 000022528 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files\AMD\CNext\CNext\imageformats\qtga.dll 2015-06-25 17:20 - 2015-06-25 17:20 - 000351744 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files\AMD\CNext\CNext\imageformats\qtiff.dll 2015-06-25 17:20 - 2015-06-25 17:20 - 000021504 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files\AMD\CNext\CNext\imageformats\qwbmp.dll 2015-06-25 17:21 - 2015-06-25 17:21 - 000374784 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files\AMD\CNext\CNext\imageformats\qwebp.dll 2015-06-25 17:14 - 2015-06-25 17:14 - 001212416 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files\AMD\CNext\CNext\platforms\qwindows.dll 2015-06-25 05:13 - 2015-06-25 05:13 - 000912384 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files\AMD\CNext\CNext\Qt5Charts.dll 2015-07-02 12:58 - 2015-07-02 12:58 - 005496320 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files\AMD\CNext\CNext\Qt5Core.dll 2015-06-25 17:03 - 2015-06-25 17:03 - 005804544 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files\AMD\CNext\CNext\Qt5Gui.dll 2015-06-25 17:00 - 2015-06-25 17:00 - 001061376 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files\AMD\CNext\CNext\Qt5Network.dll 2015-06-25 17:23 - 2015-06-25 17:23 - 003187712 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files\AMD\CNext\CNext\Qt5Qml.dll 2015-06-25 17:28 - 2015-06-25 17:28 - 002924544 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files\AMD\CNext\CNext\Qt5Quick.dll 2015-06-25 17:16 - 2015-06-25 17:16 - 000310784 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files\AMD\CNext\CNext\Qt5Svg.dll 2015-06-25 17:08 - 2015-06-25 17:08 - 005444608 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files\AMD\CNext\CNext\Qt5Widgets.dll 2015-06-25 17:58 - 2015-06-25 17:58 - 000277504 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files\AMD\CNext\CNext\Qt5WinExtras.dll 2015-06-25 16:59 - 2015-06-25 16:59 - 000193024 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files\AMD\CNext\CNext\Qt5Xml.dll ==================== Alternate Data Streams (gefilterd) ========= (Als een item is opgenomen in de fixlist, wordt alleen de ADS verwijderd.) ==================== Veilige Modus (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. De waarde van "AlternateShell" wordt hersteld.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" ==================== Bestandskoppeling (gefilterd) =============== (Als een item is opgenomen in de fixlist, zal het registeritem worden teruggezet naar de standaardwaarden of verwijderd.) ==================== Internet Explorer vertrouwde/beperkte toegang =============== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd.) ==================== Hosts inhoud: =============================== (Indien nodig kan Hosts:-opdracht worden opgenomen in de fixlist om Hosts te resetten.) 2015-10-30 09:24 - 2019-01-04 12:37 - 000000894 _____ C:\WINDOWS\system32\drivers\etc\hosts 2018-04-24 00:13 - 2018-04-24 00:16 - 000000445 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics ==================== Andere gebieden ============================ (Momenteel is er geen automatische fix voor dit onderdeel.) HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path: C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;%SYSTEMROOT%\System32\OpenSSH\ HKU\S-1-5-21-2386364578-1501602066-979878461-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\windows\img0.jpg DNS Servers: 195.130.131.4 - 195.130.130.4 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin) Windows Firewall is uitgeschakeld. ==================== MSCONFIG/TASK MANAGER Uitgeschakelde items == Als een item is opgenomen in de fixlist, zal het worden verwijderd. HKLM\...\StartupApproved\Run32: => "ConnectionCenter" HKLM\...\StartupApproved\Run32: => "Redirector" HKU\S-1-5-21-2386364578-1501602066-979878461-1001\...\StartupApproved\StartupFolder: => "Inktwaarschuwingen controleren - HP ENVY 5540 series.lnk" HKU\S-1-5-21-2386364578-1501602066-979878461-1001\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-2386364578-1501602066-979878461-1001\...\StartupApproved\Run: => "HP ENVY 5540 series (NET)" HKU\S-1-5-21-2386364578-1501602066-979878461-1001\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_4A4FEE58AEDC540DF80591FB03D5CE1A" HKU\S-1-5-21-2386364578-1501602066-979878461-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning" ==================== Firewall regels (gefilterd) =============== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) FirewallRules: [{D491481E-97A8-4771-B559-81D9E86B1A6F}] => (Allow) C:\Program Files\HP\HP ENVY 5540 series\Bin\HPNetworkCommunicatorCom.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP) FirewallRules: [{142702FE-5599-4782-8D0D-692478800A79}] => (Allow) LPort=5357 FirewallRules: [{B42F1C61-B340-47A3-B2F5-38A17FD57469}] => (Allow) C:\Program Files\HP\HP ENVY 5540 series\Bin\DeviceSetup.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP) FirewallRules: [{28FAB218-5D74-4D00-9B9D-9D198F659379}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{5E347083-6566-4680-8F3C-F4BD71CD137B}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{CFB57155-12EA-43A9-83F5-41FDA88EDCFF}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{B2CEFE24-B501-4722-A11A-0D2236E368B2}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{3287D25C-DACF-46C7-9C8D-3CE46BEEF15A}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{992FFA86-F50F-4D5F-872D-4CDE6E345A01}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD.exe (CyberLink Corp. -> CyberLink Corp.) FirewallRules: [{AEB9A6D0-67CE-4506-90DF-74B113790176}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\Movie\PowerDVDMovie.exe (CyberLink Corp. -> CyberLink Corp.) FirewallRules: [{352FA889-5594-43FF-9EC4-61A7FA77E1D2}] => (Allow) C:\Users\15-AY161NB\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.) FirewallRules: [{A0030B5B-99B5-4A05-AF69-2D05342A3739}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd) FirewallRules: [{2C169BC9-6BB9-4876-97AB-1BA1C1AEE762}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd) FirewallRules: [{04084C5A-F6BA-4405-AEE7-601EE95DD271}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{AF6550D4-03BA-4DC8-A58F-3C099858C37D}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{DD750AAD-3FA6-4BB1-94C4-F09FDBA59E2C}] => (Allow) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe (AVAST Software s.r.o. -> AVAST Software) FirewallRules: [{E993DDF2-E863-4333-9636-0EA26F3416F9}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) ==================== Herstelpunten ========================= 05-05-2019 22:34:15 Gepland controlepunt 13-05-2019 22:26:39 Gepland controlepunt 16-05-2019 23:18:59 Windows Update ==================== Defecte Apparaatbeheer Apparaten ============= Name: HID Non-User Input Data Filter Description: HID Non-User Input Data Filter Class Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da} Manufacturer: Microsoft Service: Problem: : The software for this device has been blocked from starting because it is known to have problems with Windows. Contact the hardware vendor for a new driver. (Code 48) Resolution: Download the latest drivers from the manufacturer, uninstall the current driver, and then install the latest drivers. Name: HID Non-User Input Data Filter Description: HID Non-User Input Data Filter Class Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da} Manufacturer: Microsoft Service: Problem: : The software for this device has been blocked from starting because it is known to have problems with Windows. Contact the hardware vendor for a new driver. (Code 48) Resolution: Download the latest drivers from the manufacturer, uninstall the current driver, and then install the latest drivers. ==================== Eventlog fouten: ========================= Applicatiefouten: ================== Error: (05/17/2019 12:10:15 AM) (Source: ATIeRecord) (EventID: 16387) (User: ) Description: ATI EEU Service event error Error: (05/15/2019 09:12:28 PM) (Source: ATIeRecord) (EventID: 16388) (User: ) Description: ATI EEU Client event error Error: (05/15/2019 09:09:07 PM) (Source: ATIeRecord) (EventID: 16387) (User: ) Description: ATI EEU Service event error Error: (05/15/2019 11:36:02 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Naam van toepassing met fout: RadeonSettings.exe, versie: 10.1.1.1633, tijdstempel: 0x5762c835 Naam van module met fout: Qt5Qml.dll, versie: 5.5.0.0, tijdstempel: 0x558c716c Uitzonderingscode: 0xc0000005 Foutmarge: 0x0000000000146e1e Id van proces met fout: 0x28d4 Starttijd van toepassing met fout: 0x01d50aee7b942738 Pad naar toepassing met fout: C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe Pad naar module met fout: C:\Program Files\AMD\CNext\CNext\Qt5Qml.dll Rapport-id: 3abd26d7-7734-42fb-bd1a-4e342c0162ed Volledige pakketnaam met fout: Relatieve toepassings-id van pakket met fout: Error: (05/14/2019 11:25:19 PM) (Source: ATIeRecord) (EventID: 16387) (User: ) Description: ATI EEU Service event error Error: (05/14/2019 08:23:34 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Naam van toepassing met fout: RadeonSettings.exe, versie: 10.1.1.1633, tijdstempel: 0x5762c835 Naam van module met fout: Qt5Core.dll, versie: 5.5.0.0, tijdstempel: 0x558c6b3a Uitzonderingscode: 0xc0000005 Foutmarge: 0x00000000001b539f Id van proces met fout: 0x1320 Starttijd van toepassing met fout: 0x01d50a74a5c60d48 Pad naar toepassing met fout: C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe Pad naar module met fout: C:\Program Files\AMD\CNext\CNext\Qt5Core.dll Rapport-id: 17a45415-f18c-4fff-9c5a-a3031d40676a Volledige pakketnaam met fout: Relatieve toepassings-id van pakket met fout: Error: (05/14/2019 04:00:35 PM) (Source: ATIeRecord) (EventID: 16387) (User: ) Description: ATI EEU Service event error Error: (05/14/2019 07:55:13 AM) (Source: ATIeRecord) (EventID: 16387) (User: ) Description: ATI EEU Service event error Systeemfouten: ============= Error: (05/17/2019 06:26:37 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} en APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} aan de gebruiker NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (05/17/2019 06:25:39 PM) (Source: DCOM) (EventID: 10016) (User: LAPTOP-U8IO812Q) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} en APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} aan de gebruiker LAPTOP-U8IO812Q\Tanya SID (S-1-5-21-2386364578-1501602066-979878461-1001) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (05/17/2019 06:24:07 PM) (Source: DCOM) (EventID: 10016) (User: LAPTOP-U8IO812Q) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} en APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} aan de gebruiker LAPTOP-U8IO812Q\Tanya SID (S-1-5-21-2386364578-1501602066-979878461-1001) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (05/17/2019 02:20:46 AM) (Source: DCOM) (EventID: 10016) (User: LAPTOP-U8IO812Q) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} en APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} aan de gebruiker LAPTOP-U8IO812Q\Tanya SID (S-1-5-21-2386364578-1501602066-979878461-1001) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (05/17/2019 01:20:46 AM) (Source: DCOM) (EventID: 10016) (User: LAPTOP-U8IO812Q) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} en APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} aan de gebruiker LAPTOP-U8IO812Q\Tanya SID (S-1-5-21-2386364578-1501602066-979878461-1001) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (05/17/2019 12:27:17 AM) (Source: DCOM) (EventID: 10016) (User: LAPTOP-U8IO812Q) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} en APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} aan de gebruiker LAPTOP-U8IO812Q\Tanya SID (S-1-5-21-2386364578-1501602066-979878461-1001) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (05/17/2019 12:21:00 AM) (Source: DCOM) (EventID: 10016) (User: LAPTOP-U8IO812Q) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} en APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} aan de gebruiker LAPTOP-U8IO812Q\Tanya SID (S-1-5-21-2386364578-1501602066-979878461-1001) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (05/17/2019 12:16:35 AM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: De Delivery Optimization-service is bij het starten vastgelopen. Windows Defender: =================================== Date: 2018-11-26 10:35:12.180 Description: Windows Defender Antivirus heeft een fout aangetroffen bij het bijwerken van handtekeningen. Nieuwe handtekeningversie: Vorige handtekeningversie: 1.263.48.0 Bron update: Microsoft Centrum voor beveiliging tegen malware Type handtekening: AntiVirus Type update: Volledig Gebruiker: NT AUTHORITY\NETWORK SERVICE Huidige engineversie: Vorige engineversie: 1.1.14600.4 Foutcode: 0x80072ee7 Foutbeschrijving: De naam of het adres van de server kan niet worden omgezet Date: 2018-11-26 10:35:12.180 Description: Windows Defender Antivirus heeft een fout aangetroffen bij het bijwerken van handtekeningen. Nieuwe handtekeningversie: Vorige handtekeningversie: 1.263.48.0 Bron update: Microsoft Centrum voor beveiliging tegen malware Type handtekening: AntiSpyware Type update: Volledig Gebruiker: NT AUTHORITY\NETWORK SERVICE Huidige engineversie: Vorige engineversie: 1.1.14600.4 Foutcode: 0x80072ee7 Foutbeschrijving: De naam of het adres van de server kan niet worden omgezet Date: 2018-11-26 10:35:12.180 Description: Windows Defender Antivirus heeft een fout aangetroffen bij het bijwerken van handtekeningen. Nieuwe handtekeningversie: Vorige handtekeningversie: 1.263.48.0 Bron update: Microsoft Centrum voor beveiliging tegen malware Type handtekening: AntiVirus Type update: Volledig Gebruiker: NT AUTHORITY\NETWORK SERVICE Huidige engineversie: Vorige engineversie: 1.1.14600.4 Foutcode: 0x80072ee7 Foutbeschrijving: De naam of het adres van de server kan niet worden omgezet Date: 2018-11-26 10:35:11.797 Description: Windows Defender Antivirus heeft een fout aangetroffen bij het bijwerken van handtekeningen. Nieuwe handtekeningversie: Vorige handtekeningversie: 1.263.48.0 Bron update: Microsoft-updateserver Type handtekening: AntiVirus Type update: Volledig Gebruiker: NT AUTHORITY\SYSTEM Huidige engineversie: Vorige engineversie: 1.1.14600.4 Foutcode: 0x80240438 Foutbeschrijving: Er is tijdens het zoeken naar updates een onverwacht probleem opgetreden. Raadpleeg Help en ondersteuning voor meer informatie over het installeren van updates en het oplossen van problemen. CodeIntegrity: =================================== Date: 2018-12-04 10:57:49.366 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\ashShA64.dll that did not meet the Microsoft signing level requirements. Date: 2018-11-05 18:20:25.595 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\ashShA64.dll that did not meet the Microsoft signing level requirements. ==================== Geheugen info =========================== BIOS: Insyde F.18 09/26/2016 Motherboard: HP 81EE Processor: Intel(R) Core(TM) i5-7200U CPU @ 2.50GHz Percentage geheugen in gebruik: 54% Totaal fysiek RAM-geheugen: 8109.13 MB Beschikbaar fysiek RAM-geheugen: 3718.42 MB Totaal Virtueel geheugen: 9389.13 MB Beschikbaar Virtueel geheugen: 4955.53 MB ==================== Schijven ================================ Drive c: (Windows) (Fixed) (Total:915.58 GB) (Free:815.77 GB) NTFS Drive d: (RECOVERY) (Fixed) (Total:14.7 GB) (Free:1.74 GB) NTFS ==>[systeem met boot componenten (verkregen van schijf)] Drive f: (Elements) (Fixed) (Total:1397.23 GB) (Free:1381.59 GB) NTFS \\?\Volume{19026b7c-9dfc-4b2b-8c29-e2abf1b0998a}\ (Windows RE tools) (Fixed) (Total:0.96 GB) (Free:0.45 GB) NTFS \\?\Volume{efda2064-f597-447c-aad2-c8153436347a}\ () (Fixed) (Total:0.25 GB) (Free:0.19 GB) FAT32 ==================== MBR & Partitietabel ================== ======================================================== Disk: 0 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000) Partition: GPT. ======================================================== Disk: 1 (Size: 1397.2 GB) (Disk ID: 16F2A91F) Partition: GPT. ==================== Einde van Addition.txt ============================