Extra scanresultaten van Farbar Recovery Scan Tool (x64) Versie: 28-11-2020 Gestart door GEBRUIKER (28-11-2020 19:17:25) Gestart vanaf C:\Users\USERNAME\Downloads Windows 10 Home Versie 1909 18363.1198 (X64) (2019-11-05 20:09:04) Boot Modus: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-2596819617-1570109386-2302686581-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-2596819617-1570109386-2302686581-503 - Limited - Disabled) Gast (S-1-5-21-2596819617-1570109386-2302686581-501 - Limited - Disabled) GEBRUIKER (S-1-5-21-2596819617-1570109386-2302686581-1001 - Administrator - Enabled) => C:\Users\USERNAME WDAGUtilityAccount (S-1-5-21-2596819617-1570109386-2302686581-504 - Limited - Disabled) ==================== Security Center ======================== (Als een item is opgenomen in de fixlist, zal het worden verwijderd.) AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Geïnstalleerde programma's ====================== (Alleen de adware-programma's met 'verborgen' vlag kunnen worden toegevoegd aan de fixlist om ze zichtbaar te maken. De adware-programma's moeten handmatig gedeïnstalleerd worden.) Adobe Acrobat Reader DC - Nederlands (HKLM-x32\...\{AC76BA86-7AD7-1043-7B44-AC0F074E4100}) (Version: 20.013.20066 - Adobe Systems Incorporated) Adobe Digital Editions 4.5 (HKLM-x32\...\Adobe Digital Editions 4.5) (Version: 4.5.10 - Adobe Systems Incorporated) Agent Ransack (HKLM\...\{00AC04A9-EDF9-46CD-8E0B-886EC8E42C5C}) (Version: 8.5.2929.1 - Mythicsoft Ltd) Ashampoo Burning Studio FREE (HKLM-x32\...\{91B33C97-91F8-FFB3-581B-BC952C901685}_is1) (Version: 1.21.3 - Ashampoo GmbH & Co. KG) Belgium e-ID middleware 4.4.4 (build 3838) (HKLM\...\{DB942AEA-93D6-4FE4-8862-180D35A73838}) (Version: 4.4.3838 - Belgian Government) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Brother MFL-Pro Suite DCP-J4120DW (HKLM-x32\...\{7FC49664-DAA4-4E7C-ADD0-614ABB43691B}) (Version: 1.0.5.0 - Brother Industries, Ltd.) Dropbox (HKLM-x32\...\Dropbox) (Version: 110.4.458 - Dropbox, Inc.) Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.377.1 - Dropbox, Inc.) Hidden DYMO Label (HKLM-x32\...\{54D84731-D2F9-4E8C-B18E-E91838BE52BB}) (Version: 8.7.3.46663 - Newell Rubbermaid) e-Sword (HKLM-x32\...\{11F9C971-1BF6-449D-AEB2-4678CCCD26D1}) (Version: 12.01.0000 - Rick Meyers) FOTOcom versie 1.0 (HKLM-x32\...\{B37286DC-F9AA-4FBF-B3A7-A3B9571E16CD}_is1) (Version: 1.0 - VIA INDICE) Foto-Pro (HKLM-x32\...\Foto-Pro_V_is1) (Version: - ) Freemake Video Converter versie 4.1.11 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.11 - Mixbyte Inc.) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 87.0.4280.66 - Google LLC) Google Earth Pro (HKLM\...\{FB8010D4-05F4-420D-8DFC-2F911A6DD100}) (Version: 7.3.3.7786 - Google) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.36.31 - Google LLC) Hidden HP OfficeJet 3830 series Basissoftware van het apparaat (HKLM\...\{BCC5CEA0-E305-4AC2-BF43-85379AACC77B}) (Version: 40.11.1119.1786 - HP Inc.) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4624 - Intel Corporation) Java 8 Update 251 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180251F0}) (Version: 8.0.2510.8 - Oracle Corporation) Kingdom Hall Schedules (HKLM-x32\...\Kingdom Hall Schedules_is1) (Version: 15.8 - Majestic Software) Microsoft Digital Image 2006 Standard Edition (HKLM-x32\...\PictureItPrem_v11) (Version: 11.0.0422 - Microsoft Corporation) Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 87.0.664.47 - Microsoft Corporation) Microsoft Edge Update (HKLM-x32\...\Microsoft Edge Update) (Version: 1.3.139.59 - ) Microsoft Office 2013 voor Thuisgebruik en Studenten - nl-nl (HKLM\...\HomeStudentRetail - nl-nl) (Version: 15.0.5275.1000 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-2596819617-1570109386-2302686581-1001\...\OneDriveSetup.exe) (Version: 20.169.0823.0008 - Microsoft Corporation) Microsoft Teams (HKU\S-1-5-21-2596819617-1570109386-2302686581-1001\...\Teams) (Version: 1.3.00.30866 - Microsoft Corporation) Microsoft Update Health Tools (HKLM\...\{0BCA8FBE-0C1C-4C65-98A3-5D34AAF41737}) (Version: 2.70.0.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.23.27820 (HKLM-x32\...\{45231ab4-69fd-486a-859d-7a59fcd11013}) (Version: 14.23.27820.0 - Microsoft Corporation) Microsoft Visual C++ 2017 Redistributable (x64) - 14.16.27027 (HKLM-x32\...\{fd9b6070-d13e-45dc-819b-41806bf45b6b}) (Version: 14.16.27027.1 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) MuseScore 3 (HKLM\...\{24D638A8-2F41-4190-B716-F008843791DF}) (Version: 3.3.3.8992 - Werner Schweer and Others) Nikon Message Center 2 (HKLM-x32\...\{B014EE44-9197-4513-9613-71E6EB1B514E}) (Version: 2.1.1 - Nikon) Nikon Movie Editor (HKLM-x32\...\{5CAD3393-EEC0-44CE-9F93-BCAA365B77FB}) (Version: 2.9.2 - Nikon) Nuance PaperPort 12 (HKLM-x32\...\{2A770862-7142-4C77-8117-F933E4110A3F}) (Version: 12.1.0006 - Nuance Communications, Inc.) Nuance PDF Viewer Plus (HKLM-x32\...\{28656860-4728-433C-8AD4-D1A930437BC8}) (Version: 5.30.3290 - Nuance Communications, Inc) Office 15 Click-to-Run Extensibility Component (HKLM\...\{90150000-008C-0000-1000-0000000FF1CE}) (Version: 15.0.5275.1000 - Microsoft Corporation) Hidden Office 15 Click-to-Run Licensing Component (HKLM\...\{90150000-007E-0000-1000-0000000FF1CE}) (Version: 15.0.5275.1000 - Microsoft Corporation) Hidden Office 15 Click-to-Run Localization Component (HKLM\...\{90150000-008C-0413-1000-0000000FF1CE}) (Version: 15.0.5275.1000 - Microsoft Corporation) Hidden Outils de vérification linguistique 2016 de Microsoft Office - Français (HKLM\...\{90160000-001F-040C-1000-0000000FF1CE}) (Version: 16.0.4849.1000 - Microsoft Corporation) Hidden PaperPort Image Printer 64-bit (HKLM\...\{715CAACC-579B-4831-A5F4-A83A8DE3EFE2}) (Version: 14.00.0000 - Nuance Communications, Inc.) PDFsam Basic (HKLM\...\{7C663C91-1147-4B5A-872D-A3BC3F7F860B}) (Version: 4.0.5.0 - Sober Lemur S.a.s. di Vacondio Andrea) Picture Control Utility 2 (HKLM\...\{D4893C47-704F-4B84-8486-9DE4974ACA6F}) (Version: 2.0.2 - Nikon) Pulse Secure (HKLM\...\{6D8DF24A-085C-4C75-9D40-55D26259529E}) (Version: 9.1.2525 - Pulse Secure, LLC) Hidden Pulse Secure 9.1 (HKLM-x32\...\Pulse Secure 9.1) (Version: 9.1.2525 - Pulse Secure, LLC) Pulse Secure Setup Client (HKU\S-1-5-21-2596819617-1570109386-2302686581-1001\...\Pulse_Setup_Client) (Version: 9.1.4.1955 - Pulse Secure, LLC) Pulse Secure Setup Client 64-bit Activex Control (HKLM\...\Pulse_Setup_Client Activex Control) (Version: 2.1.1.1 - Pulse Secure, LLC) Pulse Secure Setup Client Activex Control (HKLM-x32\...\Pulse_Setup_Client Activex Control) (Version: 2.1.1.1 - Pulse Secure, LLC) Scansoft PDF Professional (HKLM-x32\...\{068724F8-D8BE-4B43-8DDD-B9FE9E49FD76}) (Version: - ) Hidden SketchUp 2017 (HKLM\...\{E59BD84C-169B-4F3F-AC5D-85127CF67051}) (Version: 17.2.2555 - Trimble, Inc.) Skype voor Bedrijven Basic 2016 (HKLM\...\Office16.LYNCENTRY) (Version: 16.0.4849.1000 - Microsoft Corporation) Taalpakket voor Microsoft Visual Studio 2010 Tools for Office Runtime (x64) - NLD (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - NLD) (Version: 10.0.50903 - Microsoft Corporation) Taalprogramma's voor Microsoft Office 2016 - Nederlands (HKLM\...\{90160000-001F-0413-1000-0000000FF1CE}) (Version: 16.0.4849.1000 - Microsoft Corporation) Hidden ViewNX 2 (HKLM\...\{635BE602-BB9C-4C59-8CC5-93F9366E8A21}) (Version: 2.10.3 - Nikon) VLC media player (HKLM\...\VLC media player) (Version: 3.0.10 - VideoLAN) VSDC Free Audio Converter version 1.6.5.353 (HKLM-x32\...\VSDC Free Audio Converter_is1) (Version: 1.6.5.353 - Flash-Integro LLC) VSDC Free Video Editor version 6.3.9.49 (HKLM\...\VSDC Free Video Editor_is1) (Version: 6.3.9.49 - Flash-Integro LLC) Watchtower CAD 3.1 x64 bundle (HKLM-x32\...\{5fc92b24-21d4-4c76-b690-a66ef78d7aad}) (Version: 3.1.10 - Watchtower) Watchtower CAD 3.2 x64 (HKLM\...\{CB8DE6E5-28BC-4FC7-8669-A03C6635B588}) (Version: 3.2.010 - Watchtower) Watchtower Library - English (HKLM-x32\...\{1D72ED8E-EA0F-4AE3-BBC5-2EC55FA5649F}) (Version: 19.0 - Watchtower Bible and Tract Society of Pennsylvania, Inc.) Watchtower Library - Français (HKLM-x32\...\{D17C5B85-FEA3-493D-97EE-E27C2E09908C}) (Version: 19.0 - Watchtower Bible and Tract Society of Pennsylvania, Inc.) Watchtower Library - Nederlands (HKLM-x32\...\{C31D2EBF-BB00-4B57-AA7C-01E254D639F8}) (Version: 19.0 - Watchtower Bible and Tract Society of Pennsylvania, Inc.) Zoom (HKU\S-1-5-21-2596819617-1570109386-2302686581-1001\...\ZoomUMX) (Version: 5.3.1 (52879.0927) - Zoom Video Communications, Inc.) Packages: ========= Any PDF to JPG -> C:\Program Files\WindowsApps\AnywaySoftInc.AnyPDFtoJPG_1.1.7.0_x64__0qkrc2qacwvfm [2019-12-17] (AnywaySoft, Inc.) [MS Ad] Bubble Witch 3 Saga -> C:\Program Files\WindowsApps\king.com.BubbleWitch3Saga_6.13.6.0_x86__kgqvnymyfvs32 [2020-10-04] (king.com) Candy Crush Friends -> C:\Program Files\WindowsApps\king.com.CandyCrushFriends_1.48.2.0_x86__kgqvnymyfvs32 [2020-11-27] (king.com) Foto's-invoegtoepassing -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2017.39121.36610.0_x64__8wekyb3d8bbwe [2020-05-20] (Microsoft Corporation) HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_121.1.193.0_x64__v10z8vjag6ke6 [2020-11-05] (HP Inc.) iTunes -> C:\Program Files\WindowsApps\AppleInc.iTunes_12110.26.53016.0_x64__nzyj5cx40ttqa [2020-11-20] (Apple Inc.) [Startup Task] JW Library -> C:\Program Files\WindowsApps\WatchtowerBibleandTractSo.45909CDBADF3C_12.2.69.0_x64__5rz59y55nfz3e [2020-11-11] (Watchtower Bible and Tract Society of New York) Media-engine-invoegtoepassing voor Foto's -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2020-05-20] (Microsoft Corporation) Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-12-17] (Microsoft Corporation) [MS Ad] Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-12-17] (Microsoft Corporation) [MS Ad] Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.7.10142.0_x64__8wekyb3d8bbwe [2020-10-25] (Microsoft Studios) [MS Ad] Microsoft To Do -> C:\Program Files\WindowsApps\Microsoft.Todos_2.31.33111.0_x64__8wekyb3d8bbwe [2020-11-24] (Microsoft Corporation) [Startup Task] Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.146.916.0_x86__zpdnekdrzrea0 [2020-11-17] (Spotify AB) [Startup Task] WhatsApp Desktop -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2047.10.0_x64__cv1g1gvanyjgm [2020-11-21] (WhatsApp Inc.) ==================== Aangepaste CLSID (gefilterd): ============== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) CustomCLSID: HKU\S-1-5-21-2596819617-1570109386-2302686581-1001_Classes\CLSID\{000D0E00-0000-0000-C000-000000000046}\localserver32 -> C:\Program Files\Watchtower\Watchtower CAD 3.2\WTCAD.exe (Watchtower) [Bestand niet getekend] CustomCLSID: HKU\S-1-5-21-2596819617-1570109386-2302686581-1001_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6} -> [OneDrive - Personal] => {a52bba46-e9e1-435f-b3d9-28daa648c0f6}0 CustomCLSID: HKU\S-1-5-21-2596819617-1570109386-2302686581-1001_Classes\CLSID\{04271989-C4D2-5964-ED09-A7CA2E07A055} -> [Watchtower] => C:\Users\USERNAME\Watchtower [2020-03-16 16:33] CustomCLSID: HKU\S-1-5-21-2596819617-1570109386-2302686581-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\USERNAME\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20275.4\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-2596819617-1570109386-2302686581-1001_Classes\CLSID\{314AC707-0C11-4B4C-8CB1-564B3EE6BE5F}\localserver32 -> C:\Program Files\Watchtower\Watchtower CAD 3.2\WTCAD.exe (Watchtower) [Bestand niet getekend] CustomCLSID: HKU\S-1-5-21-2596819617-1570109386-2302686581-1001_Classes\CLSID\{CB965DF1-B8EA-49C7-BDAD-5457FDC1BF92}\InprocServer32 -> C:\Users\USERNAME\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20244.4\x64\Microsoft.Teams.AddinLoader.dll => Geen bestand ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-10-06] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-10-06] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-10-06] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-10-06] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-10-06] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-10-06] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-10-06] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-10-06] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-10-06] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-10-06] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-10-06] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-10-06] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-10-06] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-10-06] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-10-06] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-10-06] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-10-06] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-10-06] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-10-06] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-10-06] (Dropbox, Inc -> Dropbox, Inc.) ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-10-06] (Dropbox, Inc -> Dropbox, Inc.) ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-10-06] (Dropbox, Inc -> Dropbox, Inc.) ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-10-06] (Dropbox, Inc -> Dropbox, Inc.) ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Geen bestand ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\Windows\system32\igfxDTCM.dll [2017-03-17] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) ContextMenuHandlers2_S-1-5-21-2596819617-1570109386-2302686581-1001: [AgentRansack] -> {2AE9D6D8-E348-4853-B266-C78844D31B97} => C:\Program Files\Mythicsoft\Agent Ransack\ShellExt_2929.dll [2019-09-18] (Mythicsoft Ltd -> Mythicsoft Ltd) ContextMenuHandlers4_S-1-5-21-2596819617-1570109386-2302686581-1001: [AgentRansack] -> {2AE9D6D8-E348-4853-B266-C78844D31B97} => C:\Program Files\Mythicsoft\Agent Ransack\ShellExt_2929.dll [2019-09-18] (Mythicsoft Ltd -> Mythicsoft Ltd) ContextMenuHandlers5_S-1-5-21-2596819617-1570109386-2302686581-1001: [AgentRansack] -> {2AE9D6D8-E348-4853-B266-C78844D31B97} => C:\Program Files\Mythicsoft\Agent Ransack\ShellExt_2929.dll [2019-09-18] (Mythicsoft Ltd -> Mythicsoft Ltd) ContextMenuHandlers6_S-1-5-21-2596819617-1570109386-2302686581-1001: [AgentRansack] -> {2AE9D6D8-E348-4853-B266-C78844D31B97} => C:\Program Files\Mythicsoft\Agent Ransack\ShellExt_2929.dll [2019-09-18] (Mythicsoft Ltd -> Mythicsoft Ltd) ==================== Codecs (gefilterd) ==================== (Als een item is opgenomen in de fixlist, zal het registeritem worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.) HKLM\...\Drivers32: [vidc.i420] => C:\Windows\system32\lvcod64.dll [175392 2012-10-26] (Logitech, Inc. -> Logitech Inc.) HKLM\...\Drivers32: [msacm.voxacm160] => C:\Windows\system32\vct3216.acm [82944 2003-05-21] (Voxware, Inc.) [Bestand niet getekend] HKLM\...\Drivers32: [msacm.scg726] => C:\Windows\system32\scg726.acm [13239 2000-03-14] (SHARP Corporation) [Bestand niet getekend] HKLM\...\Drivers32: [msacm.alf2cd] => C:\Windows\system32\alf2cd.acm [38912 2003-05-21] (NCT Company) [Bestand niet getekend] HKLM\...\Drivers32: [msacm.ac3acm] => C:\Windows\system32\AC3ACM.acm [81920 2004-02-04] (fccHandler) [Bestand niet getekend] HKLM\...\Drivers32: [msacm.lame] => C:\Windows\system32\lame.ax [245760 2005-08-01] () [Bestand niet getekend] HKLM\...\Drivers32: [vidc.dvsd] => C:\Windows\system32\mcdvd_32.dll [261632 2003-05-21] (MainConcept) [Bestand niet getekend] HKLM\...\Drivers32: [vidc.mpg4] => C:\Windows\system32\mpg4c32.dll [413760 2002-08-19] (Microsoft Corporation) [Bestand niet getekend] HKLM\...\Drivers32: [vidc.mp42] => C:\Windows\system32\mpg4c32.dll [413760 2002-08-19] (Microsoft Corporation) [Bestand niet getekend] HKLM\...\Drivers32: [vidc.mp43] => C:\Windows\system32\mpg4c32.dll [413760 2002-08-19] (Microsoft Corporation) [Bestand niet getekend] HKLM\...\Drivers32: [vidc.xvid] => C:\Windows\system32\xvidvfw.dll [139264 2004-07-03] () [Bestand niet getekend] HKLM\...\Drivers32: [vidc.DIVX] => C:\Windows\system32\DivX.dll [638976 2003-05-22] (DivXNetworks, Inc.) [Bestand niet getekend] HKLM\...\Drivers32: [vidc.VP60] => C:\Windows\system32\vp6vfw.dll [438272 2004-12-10] (On2.com) [Bestand niet getekend] HKLM\...\Drivers32: [vidc.VP61] => C:\Windows\system32\vp6vfw.dll [438272 2004-12-10] (On2.com) [Bestand niet getekend] HKLM\...\Drivers32: [vidc.VP62] => C:\Windows\system32\vp6vfw.dll [438272 2004-12-10] (On2.com) [Bestand niet getekend] HKLM\...\Drivers32: [vidc.LAGS] => C:\Windows\system32\lagarith.dll [216064 2011-12-07] () [Bestand niet getekend] HKLM\...\Drivers32: [vidc.i420] => C:\Windows\SysWOW64\lvcodec2.dll [305000 2012-10-26] (Logitech, Inc. -> Logitech Inc.) HKLM\...\Drivers32: [msacm.msaudio1] => C:\Windows\SysWOW64\msaud32.acm [282896 2000-08-08] (Microsoft Corporation) [Bestand niet getekend] HKLM\...\Drivers32: [msacm.sl_anet] => C:\Windows\SysWOW64\sl_anet.acm [86016 2000-05-27] (Sipro Lab Telecom Inc.) [Bestand niet getekend] ==================== Snelkoppelingen & WMI ======================== ==================== Geladen Modules (gefilterd) ============= 2020-04-23 20:14 - 2009-02-27 15:38 - 000139264 ____R () [Bestand niet getekend] C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll 2020-04-23 20:14 - 2017-11-07 18:55 - 000137728 _____ () [Bestand niet getekend] C:\Program Files (x86)\ControlCenter4\BrCcAssoc.dll 2020-04-23 20:14 - 2017-08-18 10:23 - 000087552 _____ () [Bestand niet getekend] C:\Program Files (x86)\ControlCenter4\BrCcDlgRc.dll 2020-04-23 20:14 - 2017-08-18 10:23 - 017974784 _____ () [Bestand niet getekend] C:\Program Files (x86)\ControlCenter4\BrCcGrImg.dll 2020-04-23 20:14 - 2017-11-07 19:04 - 000092672 _____ () [Bestand niet getekend] C:\Program Files (x86)\ControlCenter4\BrCcLDut.dll 2020-04-23 20:17 - 2017-11-07 18:55 - 000440832 _____ () [Bestand niet getekend] C:\Program Files (x86)\ControlCenter4\Track.dll 2019-11-06 14:24 - 2005-04-22 05:36 - 000143360 _____ () [Bestand niet getekend] C:\Windows\system32\BrSNMP64.dll 2005-09-07 12:03 - 2005-09-07 12:03 - 000036864 _____ (Black Ice Software, Inc.) [Bestand niet getekend] C:\Program Files (x86)\Nuance\PaperPort\blicectr.dll 2020-04-23 20:14 - 2013-06-12 18:06 - 000385024 ____R (Brother Industries, Ltd.) [Bestand niet getekend] C:\Program Files (x86)\Browny02\BrMonitor.dll 2020-04-23 20:14 - 2010-09-29 16:07 - 000180224 _____ (Brother Industries, Ltd.) [Bestand niet getekend] C:\Program Files (x86)\Browny02\BroSNMP.dll 2020-04-23 20:14 - 2011-02-28 10:32 - 000208896 _____ (Brother Industries, Ltd.) [Bestand niet getekend] C:\Program Files (x86)\Browny02\Brother\BrFirmUpdateCheck.dll 2020-04-23 20:14 - 2013-10-10 20:55 - 002040320 _____ (Brother Industries, Ltd.) [Bestand niet getekend] C:\Program Files (x86)\Browny02\Brother\BrStMonWRes.dll 2019-11-06 14:24 - 2013-03-08 07:44 - 000087040 _____ (Brother Industries, Ltd.) [Bestand niet getekend] C:\Windows\system32\BrNetSti.dll 2018-08-02 06:24 - 2018-08-02 06:24 - 000505344 _____ (DYMO Corporation) [Bestand niet getekend] [Bestand is in gebruik] C:\Program Files (x86)\DYMO\DYMO Label Software\PrintingSupportLibrary.dll ==================== Alternate Data Streams (gefilterd) ======== (Als een item is opgenomen in de fixlist, wordt alleen de ADS verwijderd.) AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxlctlfudivq`qsp`28hfm [0] ==================== Veilige Modus (gefilterd) ================== ==================== Bestandskoppeling (gefilterd) ================= (Als een item is opgenomen in de fixlist, zal het registeritem worden teruggezet naar de standaardwaarden of verwijderd.) HKLM\...\.scr: WTCAD.Script.3.2.P.x64 => "notepad.exe" "%1" <==== AANDACHT ==================== Internet Explorer (gefilterd) ========== BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2019-04-16] (Microsoft Corporation -> Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_251\bin\ssv.dll [2020-04-16] (Oracle America, Inc. -> Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_251\bin\jp2ssv.dll [2020-04-16] (Oracle America, Inc. -> Oracle Corporation) BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\OCHelper.dll [2020-03-22] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: PlusIEEventHelper Class -> {551A852F-39A6-44A7-9C13-AFBEC9185A9D} -> C:\Program Files (x86)\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll [2009-02-06] (Zeon Corporation) [Bestand niet getekend] BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\GROOVEEX.DLL [2020-10-12] (Microsoft Corporation -> Microsoft Corporation) DPF: HKLM-x32 {8E375A63-C616-46F1-AC77-59DF78F3A826} hxxps://pulsesecure.net/dana-cached/sc/PulseSetupClient.cab Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2019-04-16] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2019-04-16] (Microsoft Corporation -> Microsoft Corporation) Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2019-11-06] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\MSOSB.DLL [2019-11-06] (Microsoft Corporation -> Microsoft Corporation) Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2019-04-16] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2019-04-16] (Microsoft Corporation -> Microsoft Corporation) (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd.) IE trusted site: HKU\S-1-5-21-2596819617-1570109386-2302686581-1001\...\sharepoint.com -> hxxps://jwsite-files.sharepoint.com ==================== Hosts inhoud: ========================= (Indien nodig kan Hosts:-opdracht worden opgenomen in de fixlist om Hosts te resetten.) 2019-03-19 05:49 - 2020-11-27 22:31 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts ==================== Andere gebieden =========================== (Momenteel is er geen automatische fix voor dit onderdeel.) HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\ HKU\S-1-5-21-2596819617-1570109386-2302686581-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\USERNAME\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper DNS Servers: 195.130.130.5 - 195.130.131.5 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off) Windows Firewall is ingeschakeld. Network Binding: ============= Ethernet: Juniper Network Service -> jnprns (enabled) Wi-Fi: Juniper Network Service -> jnprns (enabled) ==================== MSCONFIG/TASK MANAGER Uitgeschakelde items == (Als een item is opgenomen in de fixlist, zal het worden verwijderd.) HKLM\...\StartupApproved\Run32: => "Dropbox" HKLM\...\StartupApproved\Run32: => "NeroFilterCheck" HKU\S-1-5-21-2596819617-1570109386-2302686581-1001\...\StartupApproved\StartupFolder: => "Verzenden naar OneNote.lnk" HKU\S-1-5-21-2596819617-1570109386-2302686581-1001\...\StartupApproved\Run: => "com.squirrel.Teams.Teams" HKU\S-1-5-21-2596819617-1570109386-2302686581-1001\...\StartupApproved\Run: => "HP OfficeJet 3830 series (NET)" ==================== Firewall regels (gefilterd) ================ (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) FirewallRules: [{C17CF711-8B58-4F1A-B72F-3B112347FA80}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{C33314B5-F34A-4901-AC14-558961731D82}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{D05DD650-C8C7-40EA-A8C1-1275A5C04355}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{5B1971E7-4AF3-4253-B731-2925D3D1CD15}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{9AE9F0C2-23BC-4212-8DA4-6D521DB76349}] => (Allow) C:\Program Files\FlashIntegro\VideoEditor\VideoEditor.exe (Vector -> Flash-Integro LLC) FirewallRules: [{54FC4008-C673-4F8F-8492-C37028184FE1}] => (Allow) C:\Program Files\FlashIntegro\VideoEditor\VideoEditor.exe (Vector -> Flash-Integro LLC) FirewallRules: [{0D5C3BC7-1D23-4508-83F7-B09E1DB331A4}] => (Allow) C:\Program Files\FlashIntegro\VideoEditor\Activation.exe (Vector -> Flash-Integro LLC) FirewallRules: [{495E300C-C038-42AB-9293-341975AF429B}] => (Allow) C:\Program Files\FlashIntegro\VideoEditor\Activation.exe (Vector -> Flash-Integro LLC) FirewallRules: [{4925799F-A116-4BFC-A853-7B73F602C643}] => (Allow) C:\Program Files\FlashIntegro\VideoEditor\Updater.exe (Vector -> Flash-Integro LLC) FirewallRules: [{4BA84C45-0439-4EE9-8007-43B2B0A796EF}] => (Allow) C:\Program Files\FlashIntegro\VideoEditor\Updater.exe (Vector -> Flash-Integro LLC) FirewallRules: [{37609F9C-7B85-44AD-8B9F-3B22116EE3F7}] => (Allow) C:\Program Files (x86)\FlashIntegro\AudioConverter\AudioConverter.exe (Vector Ltd. -> Flash-Integro LLC) FirewallRules: [{BC1F3409-9350-487F-8356-6DA83CFF9C39}] => (Allow) C:\Program Files (x86)\FlashIntegro\AudioConverter\AudioConverter.exe (Vector Ltd. -> Flash-Integro LLC) FirewallRules: [{97072369-BB89-4CB1-BFB9-9674A86ACA10}] => (Allow) C:\Program Files (x86)\FlashIntegro\AudioConverter\Updater.exe (Vector Ltd. -> Flash-Integro LLC) FirewallRules: [{9122F776-3265-4AC6-81CC-B482B371083D}] => (Allow) C:\Program Files (x86)\FlashIntegro\AudioConverter\Updater.exe (Vector Ltd. -> Flash-Integro LLC) FirewallRules: [TCP Query User{DD7ADF96-15E7-4438-8324-1BBE519C07BA}J:\wd_windows_tools\wddiscovery\wddiscovery.exe] => (Allow) J:\wd_windows_tools\wddiscovery\wddiscovery.exe => Geen bestand FirewallRules: [UDP Query User{3B12299D-C990-401C-B33D-CB90553AD783}J:\wd_windows_tools\wddiscovery\wddiscovery.exe] => (Allow) J:\wd_windows_tools\wddiscovery\wddiscovery.exe => Geen bestand FirewallRules: [TCP Query User{1F3B64E0-7015-42B6-B499-5160CAD8B161}C:\program files (x86)\western digital\wd discovery software\wd discovery.exe] => (Allow) C:\program files (x86)\western digital\wd discovery software\wd discovery.exe => Geen bestand FirewallRules: [UDP Query User{AE1AB82A-C33F-41B5-A712-E0FD40F9E166}C:\program files (x86)\western digital\wd discovery software\wd discovery.exe] => (Allow) C:\program files (x86)\western digital\wd discovery software\wd discovery.exe => Geen bestand FirewallRules: [{8F2D1B27-DB65-4DDF-92C2-343AFD1DE72C}] => (Allow) C:\Users\USERNAME\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.) FirewallRules: [{B127EFFC-2765-4B84-8757-C9B7D7A1952B}] => (Allow) C:\Users\USERNAME\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.) FirewallRules: [{5C111EE5-5A23-480A-A11F-190EC7F2EDB0}] => (Allow) C:\Program Files\HP\HP OfficeJet 3830 series\bin\FaxApplications.exe (Hewlett Packard -> HP Inc.) FirewallRules: [{D7352694-A56F-43E0-A0BB-E64576B47A47}] => (Allow) C:\Program Files\HP\HP OfficeJet 3830 series\bin\DigitalWizards.exe (Hewlett Packard -> HP Inc.) FirewallRules: [{49C24B54-9D87-4154-B0CE-F3BD68EDB0DD}] => (Allow) C:\Program Files\HP\HP OfficeJet 3830 series\bin\SendAFax.exe (Hewlett Packard -> HP Inc.) FirewallRules: [{6E2D8518-EB04-477C-B8BC-B432B4E2F1A8}] => (Allow) C:\Program Files\HP\HP OfficeJet 3830 series\bin\FaxPrinterUtility.exe (Hewlett Packard -> HP Inc.) FirewallRules: [{3E9F1742-E53F-42DD-BF42-EDDB74A4BCDA}] => (Allow) C:\Program Files\HP\HP OfficeJet 3830 series\Bin\DeviceSetup.exe (Hewlett Packard -> HP Inc.) FirewallRules: [{E8BDCFB5-7029-4D7A-8413-54BFFE3D3BF9}] => (Allow) LPort=5357 FirewallRules: [{E76FCDE3-F54D-4375-8A75-40AA74239FA1}] => (Allow) C:\Program Files\HP\HP OfficeJet 3830 series\Bin\HPNetworkCommunicatorCom.exe (Hewlett Packard -> HP Inc.) FirewallRules: [{070B17AA-F231-4328-BCD9-C7534619C3A8}] => (Allow) C:\Users\USERNAME\AppData\Local\Temp\7zS2447\HPDiagnosticCoreUI.exe => Geen bestand FirewallRules: [{395B7519-4B29-493D-987D-71D16903E28E}] => (Allow) C:\Users\USERNAME\AppData\Local\Temp\7zS2447\HPDiagnosticCoreUI.exe => Geen bestand FirewallRules: [TCP Query User{D50194D6-6DEE-47E6-9F91-5FD72D0B2BC8}C:\users\USERNAME\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\USERNAME\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [UDP Query User{5F3FFA92-86C2-439A-85EA-3CDBFBB93621}C:\users\USERNAME\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\USERNAME\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{D3BC3014-8E5C-45CF-BD14-F910C5C5C373}] => (Block) C:\users\USERNAME\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{B989D44B-6763-4C18-9A18-F0FD8F46D080}] => (Block) C:\users\USERNAME\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{5EC7EF7C-18DD-4F57-BC52-8BB3372ADAF3}] => (Allow) C:\Users\USERNAME\AppData\Local\Temp\7zS21CA\HPDiagnosticCoreUI.exe => Geen bestand FirewallRules: [{F078CA30-3FF0-44BF-8EB5-8C3D4EBB0DED}] => (Allow) C:\Users\USERNAME\AppData\Local\Temp\7zS21CA\HPDiagnosticCoreUI.exe => Geen bestand FirewallRules: [{0BDA39C4-481E-4A56-9C09-E2D14666F942}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{98509A60-82E9-4750-A2A4-2954F324AE9D}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{B57B6477-ACB1-4CB0-84BC-BBCB0F9C73B0}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{9C6BE365-70B3-4494-B237-5162A7CA2C5B}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [TCP Query User{E510F99D-72E6-4C14-86EE-2B0E7979C38A}C:\program files\microsoft office\office16\lync.exe] => (Allow) C:\program files\microsoft office\office16\lync.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [UDP Query User{1D1C9B97-DB80-4365-8254-FE44FB8610EA}C:\program files\microsoft office\office16\lync.exe] => (Allow) C:\program files\microsoft office\office16\lync.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{6FDEF3C8-1AFF-4DB0-B30C-E5CDC3E4A423}] => (Allow) LPort=54925 FirewallRules: [TCP Query User{888484BC-6D9C-41D3-8C9B-B51AB7921913}C:\medion\wlan hdd tool_v1.0.0.6.exe] => (Allow) C:\medion\wlan hdd tool_v1.0.0.6.exe (MEDION) [Bestand niet getekend] FirewallRules: [UDP Query User{6407FF1C-D5C1-457A-9A88-0ABD6C07A2C2}C:\medion\wlan hdd tool_v1.0.0.6.exe] => (Allow) C:\medion\wlan hdd tool_v1.0.0.6.exe (MEDION) [Bestand niet getekend] FirewallRules: [{D128F6E5-63B7-4EDF-83DB-33B4A437BDBA}] => (Block) C:\medion\wlan hdd tool_v1.0.0.6.exe (MEDION) [Bestand niet getekend] FirewallRules: [{6EF41257-3BD1-4F6A-A7A6-EC4317813B84}] => (Block) C:\medion\wlan hdd tool_v1.0.0.6.exe (MEDION) [Bestand niet getekend] FirewallRules: [{852C1135-6503-416C-A444-A4D8671289CC}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.146.916.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{3ACFA769-0E5A-4F6E-A7EB-D0772A678383}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.146.916.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{15229BE1-A73D-4FB9-8E96-35D97F7A7388}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.146.916.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{50DB3C6F-368F-477A-AA02-299F7EA3A013}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.146.916.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{118F5083-9A66-4842-B16C-06426203937F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.146.916.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{175E22D7-CFB5-407E-9D6B-429A521CA9BB}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.146.916.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{BC45A7DD-F613-429F-BE90-6CE2CDE74B06}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.146.916.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{D729259F-FCF9-44EB-854D-283D71E9F0B7}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.146.916.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{D32C8419-4362-4284-B7F3-6950980DF138}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.) FirewallRules: [{6784161B-7194-4340-8DFD-30CE7605C42B}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) FirewallRules: [{F5FCB91C-0721-4F89-8C4B-05066E133327}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.66.77.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{CBD5579B-1E7C-4B23-AEE5-835E2DB52B26}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.66.77.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{225A5074-1240-4F9C-BFB0-861788E223F1}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.66.77.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{6296DCD6-EA9F-4F99-A897-48C457A0331C}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.66.77.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{9A636D3E-A6EE-4467-8A7F-C2E7B7B37F15}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12110.26.53016.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{41DF612C-5A00-42F2-9279-9064D6FFFD39}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12110.26.53016.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{1AA0AF5B-B02E-419F-B96D-CB31C36CA052}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12110.26.53016.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{5D554C55-A599-4A50-AA99-312037C42711}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12110.26.53016.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{C45ABED4-FF77-4456-96B4-701C7E46F727}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12110.26.53016.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{850BE71C-21C1-4069-A3C3-28AFBAB057F0}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12110.26.53016.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{17A3788F-DDDC-47F0-A74F-6CAE02A824AA}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12110.26.53016.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{AF56B3F3-3F2B-44C0-B5CD-E3853509E3A7}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12110.26.53016.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.) ==================== Herstelpunten ========================= 22-11-2020 12:27:28 Gepland controlepunt ==================== Defecte Apparaatbeheer Apparaten ============ ==================== Eventlog fouten: ======================== Applicatiefouten: ================== Error: (11/28/2020 06:44:04 PM) (Source: SecurityCenter) (EventID: 17) (User: ) Description: Security Center kan oproeper niet valideren met fout %1. Error: (11/28/2020 09:26:56 AM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: ) Description: Event-ID 0 Error: (11/27/2020 08:03:02 AM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: ) Description: Event-ID 0 Error: (11/26/2020 01:13:49 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Naam van toepassing met fout: svchost.exe_stisvc, versie: 10.0.18362.1, tijdstempel: 0x32d6c210 Naam van module met fout: HPScanTRDrv_OJ3830.dll_unloaded, versie: 36.0.35.53164, tijdstempel: 0x54be84fa Uitzonderingscode: 0xc0000005 Foutmarge: 0x000000000004d3a7 Id van proces met fout: 0xfc8 Starttijd van toepassing met fout: 0x01d6c3ed964f350c Pad naar toepassing met fout: C:\Windows\system32\svchost.exe Pad naar module met fout: HPScanTRDrv_OJ3830.dll Rapport-id: 7741f9b9-b1b7-4ce3-8a58-b0a231739cbf Volledige pakketnaam met fout: Relatieve toepassings-id van pakket met fout: Error: (11/26/2020 01:05:50 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 4968 Error: (11/26/2020 01:05:50 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 4968 Error: (11/26/2020 01:05:50 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (11/26/2020 01:05:49 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 3734 Systeemfouten: ============= Error: (11/28/2020 07:14:03 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: De BsUDF-service kan vanwege de volgende fout niet worden gestart: Het laden van het stuurprogramma wordt geblokkeerd Error: (11/28/2020 07:14:03 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: \SystemRoot\SysWow64\Drivers\BsUDF.SYS Error: (11/28/2020 07:14:00 PM) (Source: Application Popup) (EventID: 1060) (User: ) Description: \SystemRoot\SysWow64\DRIVERS\bsstor.sys Error: (11/28/2020 04:16:18 PM) (Source: WudfUsbccidDriver) (EventID: 1) (User: NT AUTHORITY) Description: Event-ID 1 Error: (11/28/2020 03:05:24 PM) (Source: WudfUsbccidDriver) (EventID: 1) (User: NT AUTHORITY) Description: Event-ID 1 Error: (11/27/2020 06:38:12 PM) (Source: WudfUsbccidDriver) (EventID: 1) (User: NT AUTHORITY) Description: Event-ID 1 Error: (11/27/2020 01:06:02 PM) (Source: WudfUsbccidDriver) (EventID: 1) (User: NT AUTHORITY) Description: Event-ID 1 Error: (11/27/2020 07:57:00 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: De BsUDF-service kan vanwege de volgende fout niet worden gestart: Het laden van het stuurprogramma wordt geblokkeerd Windows Defender: =================================== Date: 2020-11-28 18:40:12.953 Description: Scan van Windows Defender Antivirus is gestopt voordat deze was voltooid. Scan-id: {F000C887-89BC-42E0-AFC3-7F0D15AD39C6} Type scan: Antimalware Scanparameters: Volledige scan Gebruiker: NT AUTHORITY\SYSTEM Date: 2020-11-28 14:00:03.433 Description: Scan van Windows Defender Antivirus is gestopt voordat deze was voltooid. Scan-id: {42ECB554-4080-4E7B-BC70-2A6C6BDCD238} Type scan: Antimalware Scanparameters: Volledige scan Gebruiker: DESKTOP-USER\GEBRUIKER Date: 2020-11-28 14:00:02.399 Description: Scan van Windows Defender Antivirus is gestopt voordat deze was voltooid. Scan-id: {F7792476-71B9-4A3F-9E25-5C2EFC64D790} Type scan: Antimalware Scanparameters: Aangepaste scan Gebruiker: DESKTOP-USER\GEBRUIKER Date: 2020-11-28 14:00:02.369 Description: Scan van Windows Defender Antivirus is gestopt voordat deze was voltooid. Scan-id: {5F36C1AC-5470-43A2-A148-1948B55843D4} Type scan: Antimalware Scanparameters: Aangepaste scan Gebruiker: DESKTOP-USER\GEBRUIKER Date: 2020-11-28 13:11:42.092 Description: Scan van Windows Defender Antivirus is gestopt voordat deze was voltooid. Scan-id: {514FCF55-D0E3-4B52-BB7D-3642AB624B7A} Type scan: Antimalware Scanparameters: Volledige scan Gebruiker: DESKTOP-USER\GEBRUIKER CodeIntegrity: =================================== Date: 2020-11-28 19:16:31.301 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Windows signing level requirements. Date: 2020-11-28 19:16:31.299 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Windows signing level requirements. Date: 2020-11-28 19:16:12.019 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Windows signing level requirements. Date: 2020-11-28 19:16:12.016 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Windows signing level requirements. Date: 2020-11-28 19:16:11.471 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Windows signing level requirements. Date: 2020-11-28 19:16:11.470 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Windows signing level requirements. Date: 2020-11-28 19:16:11.291 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Windows signing level requirements. Date: 2020-11-28 19:16:11.289 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Windows signing level requirements. ==================== Geheugen info =========================== BIOS: American Megatrends Inc. F4 07/12/2013 Moederbord: Gigabyte Technology Co., Ltd. B85M-HD3 Processor: Intel(R) Core(TM) i5-4430 CPU @ 3.00GHz Percentage geheugen in gebruik: 38% Totaal fysiek RAM-geheugen: 12166.64 MB Beschikbaar fysiek RAM-geheugen: 7459.06 MB Totaal Virtueel geheugen: 14022.64 MB Beschikbaar Virtueel geheugen: 9336.8 MB ==================== Schijven ================================ Drive c: () (Fixed) (Total:930.95 GB) (Free:172.07 GB) NTFS Drive d: (Data) (Fixed) (Total:931.51 GB) (Free:267.56 GB) NTFS Drive e: (LDC_FOTOS) (Removable) (Total:29.5 GB) (Free:16.62 GB) FAT32 Drive j: (USER_HDD) (Fixed) (Total:931.51 GB) (Free:94.94 GB) NTFS \\?\Volume{fc0b29d9-0000-0000-0000-100000000000}\ (Door systeem gereserveerd) (Fixed) (Total:0.57 GB) (Free:0.13 GB) NTFS ==================== MBR & Partitietabel ==================== ========================================================== Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: FC0B29D9) Partition 1: (Active) - (Size=579 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=930.9 GB) - (Type=07 NTFS) ========================================================== Disk: 1 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 890C3E75) Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS) ========================================================== Disk: 2 (Size: 931.5 GB) (Disk ID: A66FF638) Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS) ========================================================== Disk: 3 (Size: 29.5 GB) (Disk ID: 1EE7676C) Partition 1: (Not Active) - (Size=29.5 GB) - (Type=0C) ==================== Einde van Addition.txt =======================