Scanresultaten van Farbar Recovery Scan Tool (FRST) (x64) Versie: 22-01-2022
Gestart door theos (Beheerder) op DESKTOP-CDE5RUK (Dell Inc. OptiPlex 390) (25-01-2022 09:27:46)
Gestart vanaf C:\Users\theos\OneDrive\Bureaublad
Geladen Profielen: theos
Platform: Microsoft Windows 10 Pro Versie 21H2 19044.1469 (X64) Taal: Nederlands (Nederland)
Standaardbrowser: FF
Boot Modus: Normal

==================== Processen (gefilterd) =================

(Als een item is opgenomen in de fixlist, zal het proces worden gesloten. Het bestand zal niet worden verplaatst.)

(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Canon Inc. -> ) C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Canon Inc. -> CANON INC.) C:\Program Files (x86)\Canon\IJ Scan Utility\SETEVENT.exe
(Canon Inc. -> CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE
(Canon Inc. -> CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE
(CyberLink -> ) C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe <3>
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(Dropbox, Inc -> The Qt Company Ltd.) C:\Program Files (x86)\Dropbox\Client\140.4.1951\QtWebEngineProcess.exe <2>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.122\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.122\GoogleCrashHandler64.exe
(Logitech, Inc. -> ) C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
(Logitech, Inc. -> Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\Office16\OUTLOOK.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\Office16\WINWORD.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_3.2111.12605.0_x64__8wekyb3d8bbwe\Cortana.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_3.2111.12605.0_x64__8wekyb3d8bbwe\Win32Bridge.Server.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCopyAccelerator.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\NisSrv.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <9>
(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

==================== Register (gefilterd) ===================

(Als een item is opgenomen in de fixlist, zal het registeritem worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.)

HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [10585376 2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech, Inc. -> Logitech Inc.)
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1313408 2017-07-05] (Canon Inc. -> CANON INC.)
HKLM\...\Windows x64\Print Processors\Canon MG5700 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDCS.DLL [30208 2015-03-15] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG5700 series: C:\Windows\system32\CNMLMCS.DLL [406528 2015-03-15] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\97.0.4692.99\Installer\chrmstp.exe [2022-01-21] (Google LLC -> Google LLC)

==================== Geplande Taken (gefilterd) ============

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

Task: {04A0CDDF-2718-4D84-8BC5-35FD0153CD4E} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {23AC3B1F-7B68-4492-8877-C4FCBA815209} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [416432 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {463A8305-5B78-4BEC-A13F-FAEF795DE05B} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe [316632 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {60022CB5-C688-45DF-A608-175371A69B11} - System32\Tasks\EOSv3 Scheduler onLogOn => C:\Users\theos\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [18007968 2021-06-06] (ESET, spol. s r.o. -> ESET)
Task: {6F511D5E-F580-4C0D-B946-6B6CBF4969F2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155592 2021-01-10] (Google LLC -> Google LLC)
Task: {73B09430-B07D-4C47-B702-3AA82E53B156} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1308386178-264101679-3570317249-500 => C:\Users\theos\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe (Geen bestand)
Task: {83602EB6-CE7B-4AEC-996F-66193DC15E1B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [416432 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {8734C930-CBEF-4DAB-9640-04E453F81645} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-13] (Dropbox, Inc -> Dropbox, Inc.)
Task: {9210323C-97FC-4369-BBF8-DAFE69FAAA7E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {AF9AA975-B0B7-48CC-AFDC-8BC25788838B} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {CBFBCF41-9F67-4C0E-BAC2-8A3484505E59} - System32\Tasks\EOSv3 Scheduler onTime => C:\Users\theos\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [18007968 2021-06-06] (ESET, spol. s r.o. -> ESET)
Task: {CD960CCC-5BD2-472A-A2CB-6D146879310D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155592 2021-01-10] (Google LLC -> Google LLC)
Task: {D9D8D895-A5CA-41FE-B7F1-5764ABBBF2A1} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-13] (Dropbox, Inc -> Dropbox, Inc.)
Task: {E11D8F88-46B9-4D74-A6B6-FF9CB4CD961B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {EC338326-640A-4FFB-A57C-7025CDDD242E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {ED464E5D-36D3-49C9-A798-57D3C6D8738F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {FF6F67A4-27D3-45FB-9AF3-A13F971E3F2C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564424 2021-11-17] (Adobe Inc. -> Adobe Inc.)

(Als een item is opgenomen in de fixlist, wordt de taak (job) bestand verplaatst. Het bestand dat wordt uitgevoerd door de taak zal niet worden verplaatst.)

Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

==================== Internet (gefilterd) ====================

(Als een item is opgenomen in de fixlist en een registeritem is, wordt het verwijderd of hersteld naar de standaard.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{01d52ce3-f654-4807-919b-fc7379500629}: [DhcpNameServer] 192.168.1.1

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\theos\AppData\Local\Microsoft\Edge\User Data\Default [2022-01-25]
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\theos\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2022-01-25]
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]

FireFox:
========
FF DefaultProfile: t61l4l6g.default
FF ProfilePath: C:\Users\theos\AppData\Roaming\Mozilla\Firefox\Profiles\t61l4l6g.default [2021-01-05]
FF ProfilePath: C:\Users\theos\AppData\Roaming\Mozilla\Firefox\Profiles\azoj2efr.default-release-1620482901333 [2022-01-25]
FF DownloadDir: C:\Users\theos\Downloads
FF Homepage: Mozilla\Firefox\Profiles\azoj2efr.default-release-1620482901333 -> hxxps://www.facebook.com/
FF Notifications: Mozilla\Firefox\Profiles\azoj2efr.default-release-1620482901333 -> hxxps://www.instagram.com
FF Extension: (Emsisoft Browser Security) - C:\Users\theos\AppData\Roaming\Mozilla\Firefox\Profiles\azoj2efr.default-release-1620482901333\Extensions\{b21882eb-3211-44dc-964b-e6f35b33061f}.xpi [2021-06-06]
FF Extension: (Adblock Plus - gratis adblocker) - C:\Users\theos\AppData\Roaming\Mozilla\Firefox\Profiles\azoj2efr.default-release-1620482901333\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2021-11-24]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.12 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.14 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2021-12-24] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2019-07-02] (CANON INC.) [Bestand niet getekend]
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2020-03-17] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)

Chrome: 
=======
CHR Profile: C:\Users\theos\AppData\Local\Google\Chrome\User Data\Default [2022-01-23]
CHR Extension: (Betalingen via Chrome Web Store) - C:\Users\theos\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-31]

Opera: 
=======
OPR Profile: C:\Users\theos\AppData\Roaming\Opera Software\Opera Stable [2021-01-10]

==================== Services (gefilterd) ===================

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-17] (Adobe Inc. -> Adobe Inc.)
R2 CIJSRegister; C:\Program Files (x86)\Canon\IJ Scan Utility\SETEVENT.exe [144464 2015-02-19] (Canon Inc. -> CANON INC.)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-13] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-13] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [44328 2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [443344 2020-05-25] (Canon Inc. -> )
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7901368 2022-01-07] (Malwarebytes Inc -> Malwarebytes)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [386344 2010-08-19] (CyberLink -> )
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [6137040 2022-01-13] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [12757520 2020-12-14] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
S3 VBoxSDS; C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe [746736 2022-01-17] (Oracle Corporation -> Oracle Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\NisSrv.exe [2876152 2021-12-16] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MsMpEng.exe [128360 2021-12-16] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (gefilterd) ===================

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Bestand niet getekend]
S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Bestand niet getekend]
R3 MarvinBus; C:\Windows\System32\drivers\MarvinBus64.sys [261120 2005-09-23] (Microsoft Windows Hardware Compatibility Publisher -> Pinnacle Systems GmbH)
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [210352 2022-01-23] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [19912 2021-05-08] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [248992 2021-11-12] (Malwarebytes Inc -> Malwarebytes)
R3 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [239648 2022-01-17] (Oracle Corporation -> Oracle Corporation)
R1 VBoxNetLwf; C:\Windows\system32\DRIVERS\VBoxNetLwf.sys [249560 2022-01-17] (Oracle Corporation -> Oracle Corporation)
R1 VBoxSup; C:\Windows\system32\DRIVERS\VBoxSup.sys [1046416 2022-01-17] (Oracle Corporation -> Oracle Corporation)
S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [174744 2021-07-28] (Oracle Corporation -> Oracle Corporation)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [48536 2021-12-16] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [435432 2021-12-16] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [86248 2021-12-16] (Microsoft Windows -> Microsoft Corporation)
S3 WLRAWMp50x64; C:\Windows\System32\Drivers\WLRAWMp50x64.sys [35352 2013-10-31] (Logitech Inc -> Logitech, Inc.)
S3 WLRAWMp50x64; C:\Windows\SysWOW64\Drivers\WLRAWMp50x64.sys [35352 2013-10-31] (Logitech Inc -> Logitech, Inc.)
S3 WLRAWSp50x64; C:\Windows\System32\Drivers\WLRAWSp50x64.sys [34328 2013-10-31] (Logitech Inc -> Logitech, Inc.)
S3 WLRAWSp50x64; C:\Windows\SysWOW64\Drivers\WLRAWSp50x64.sys [34328 2013-10-31] (Logitech Inc -> Logitech, Inc.)

==================== NetSvcs (gefilterd) ===================

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)


==================== Een maand (aangemaakt) (gefilterd) =========

(Als een item is opgenomen in de fixlist, wordt de map of het bestand verplaatst.)

2022-01-25 09:27 - 2022-01-25 09:28 - 000000000 ____D C:\FRST
2022-01-23 10:35 - 2022-01-23 10:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox
2022-01-23 10:35 - 2022-01-17 04:12 - 001046416 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxSup.sys
2022-01-23 10:32 - 2022-01-23 10:32 - 000210352 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2022-01-23 09:41 - 2022-01-23 11:04 - 000000000 ____D C:\Program Files\Mozilla Firefox
2022-01-20 10:55 - 2022-01-20 10:55 - 000011905 _____ C:\Windows\system32\DrtmAuthTxt.wim
2022-01-20 10:50 - 2022-01-20 10:50 - 000000000 ___HD C:\$WinREAgent
2022-01-20 10:35 - 2022-01-20 10:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2022-01-19 01:17 - 2022-01-19 01:17 - 000047600 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-stable.sys
2022-01-19 01:17 - 2022-01-19 01:17 - 000047600 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-dev.sys
2022-01-19 01:17 - 2022-01-19 01:17 - 000047600 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-canary.sys
2022-01-19 01:17 - 2022-01-19 01:17 - 000044328 _____ (Dropbox, Inc.) C:\Windows\system32\DbxSvc.exe
2022-01-17 09:23 - 2022-01-17 09:23 - 000000000 ____D C:\Users\theos\AppData\Local\SolidDocuments
2022-01-17 04:12 - 2022-01-17 04:12 - 000249560 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxNetLwf.sys
2022-01-17 04:12 - 2022-01-17 04:12 - 000239648 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxNetAdp6.sys
2022-01-16 10:02 - 2022-01-16 10:03 - 000002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk
2022-01-16 10:02 - 2022-01-16 10:02 - 000000000 ____D C:\Program Files\Adobe
2022-01-16 10:01 - 2022-01-16 10:02 - 000000000 ____D C:\Program Files\Common Files\Adobe
2022-01-13 11:15 - 2022-01-13 11:15 - 000523776 _____ (curl, hxxps://curl.se/) C:\Windows\system32\curl.exe
2022-01-13 11:15 - 2022-01-13 11:15 - 000464384 _____ (curl, hxxps://curl.se/) C:\Windows\SysWOW64\curl.exe
2022-01-13 09:57 - 2022-01-13 09:57 - 000000000 ____D C:\Users\theos\AppData\Local\CEF
2022-01-12 10:05 - 2022-01-12 10:05 - 000000000 ____D C:\Users\theos\OneDrive\Documenten\Pinnacle Studio
2022-01-11 11:20 - 2022-01-11 11:20 - 000000000 ____D C:\Users\theos\OneDrive\Documenten\CyberLink
2022-01-11 09:20 - 2022-01-11 09:20 - 000000000 ____D C:\Users\theos\OneDrive\Documenten\Aangepaste Office-sjablonen

==================== Een maand (gewijzigd) ==================

(Als een item is opgenomen in de fixlist, wordt de map of het bestand verplaatst.)

2022-01-25 09:23 - 2021-01-10 11:08 - 000000000 ____D C:\Program Files (x86)\Google
2022-01-25 09:18 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-01-25 09:11 - 2021-01-05 09:37 - 000000000 ____D C:\Users\theos\AppData\LocalLow\Mozilla
2022-01-25 09:10 - 2021-01-05 09:37 - 000000000 ____D C:\ProgramData\Mozilla
2022-01-25 09:09 - 2021-01-12 14:27 - 000000000 ____D C:\Users\theos\AppData\Local\Dropbox
2022-01-24 10:45 - 2021-06-06 09:42 - 000000000 ____D C:\KPRM
2022-01-24 09:20 - 2021-06-05 14:41 - 000003858 _____ C:\Windows\system32\Tasks\EOSv3 Scheduler onLogOn
2022-01-24 09:20 - 2021-06-05 14:41 - 000003416 _____ C:\Windows\system32\Tasks\EOSv3 Scheduler onTime
2022-01-24 09:20 - 2021-06-05 12:29 - 000001378 _____ C:\Users\theos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk
2022-01-23 11:09 - 2021-02-02 09:08 - 000000000 ____D C:\Users\theos\.VirtualBox
2022-01-23 11:08 - 2021-02-02 09:08 - 000000000 ____D C:\ProgramData\VirtualBox
2022-01-23 11:04 - 2021-10-09 13:38 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla
2022-01-23 11:04 - 2021-01-05 09:37 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-01-23 11:04 - 2021-01-05 09:37 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2022-01-23 10:36 - 2021-01-05 09:31 - 001771768 _____ C:\Windows\system32\PerfStringBackup.INI
2022-01-23 10:36 - 2019-12-07 16:14 - 000786070 _____ C:\Windows\system32\perfh013.dat
2022-01-23 10:36 - 2019-12-07 16:14 - 000154198 _____ C:\Windows\system32\perfc013.dat
2022-01-23 10:36 - 2019-12-07 10:13 - 000000000 ____D C:\Windows\INF
2022-01-23 10:32 - 2021-01-10 10:24 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2022-01-23 10:32 - 2021-01-05 09:24 - 000008192 ___SH C:\DumpStack.log.tmp
2022-01-23 10:32 - 2020-11-19 00:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2022-01-23 10:31 - 2019-12-07 10:03 - 000786432 _____ C:\Windows\system32\config\BBI
2022-01-23 09:43 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\AppReadiness
2022-01-23 09:41 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-01-22 09:04 - 2021-01-10 11:08 - 000003578 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2022-01-22 09:04 - 2021-01-10 11:08 - 000003454 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2022-01-21 09:12 - 2021-01-10 11:08 - 000002267 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-01-20 11:22 - 2021-01-16 13:14 - 000000000 ____D C:\Users\theos\AppData\Roaming\Garmin
2022-01-20 11:10 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\bcastdvr
2022-01-20 10:56 - 2019-12-07 10:03 - 000000000 ____D C:\Windows\CbsTemp
2022-01-20 10:35 - 2021-01-12 14:27 - 000000000 ____D C:\Program Files (x86)\Dropbox
2022-01-19 10:47 - 2021-01-05 09:32 - 000000000 ____D C:\Users\theos\AppData\Local\Packages
2022-01-19 09:46 - 2021-10-02 14:22 - 000003674 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-01-19 09:46 - 2021-10-02 14:22 - 000003550 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-01-17 09:23 - 2021-01-05 09:32 - 000000000 ____D C:\Users\theos\AppData\Roaming\Adobe
2022-01-17 04:12 - 2021-02-02 09:08 - 000188184 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSBMon.sys
2022-01-16 10:03 - 2021-01-18 09:43 - 000004562 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task
2022-01-16 10:01 - 2021-01-18 09:42 - 000000000 ____D C:\ProgramData\Adobe
2022-01-15 14:38 - 2020-11-18 23:45 - 000000000 ____D C:\Windows\system32\SleepStudy
2022-01-14 09:44 - 2021-01-16 13:14 - 000000000 ____D C:\Users\theos\AppData\Roaming\audacity
2022-01-13 11:21 - 2020-11-18 23:45 - 000589752 _____ C:\Windows\system32\FNTCACHE.DAT
2022-01-13 11:20 - 2019-12-07 16:17 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2022-01-13 11:20 - 2019-12-07 10:14 - 000000000 ___SD C:\Windows\system32\DiagSvcs
2022-01-13 11:20 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\Dism
2022-01-13 11:20 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SystemResources
2022-01-13 11:20 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\setup
2022-01-13 11:20 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\oobe
2022-01-13 11:20 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\Dism
2022-01-13 11:09 - 2021-01-11 09:36 - 000000000 ____D C:\Windows\system32\MRT
2022-01-13 11:07 - 2021-01-11 09:36 - 145765912 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2022-01-13 10:49 - 2021-01-16 09:56 - 000218112 _____ C:\Users\theos\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2022-01-13 09:57 - 2021-01-18 09:41 - 000000000 ____D C:\Users\theos\AppData\Local\Adobe
2022-01-13 09:47 - 2021-01-13 15:54 - 000000000 ____D C:\ProgramData\CanonIJPLM
2022-01-07 09:49 - 2021-05-08 09:07 - 000002033 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2022-01-07 09:49 - 2021-01-13 13:33 - 000000000 ____D C:\Program Files\Malwarebytes
2022-01-07 09:49 - 2021-01-13 13:30 - 000000000 ____D C:\ProgramData\Malwarebytes
2022-01-06 10:41 - 2021-01-19 13:57 - 000000000 ____D C:\Users\theos\AppData\Local\CrashDumps
2022-01-05 10:17 - 2021-01-05 09:38 - 000001120 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk
2022-01-05 10:17 - 2021-01-05 09:38 - 000000000 ____D C:\Program Files\paint.net
2021-12-29 10:35 - 2021-01-16 13:25 - 000000000 ____D C:\Users\theos\AppData\Local\Deployment
2021-12-28 10:09 - 2021-01-05 09:30 - 000000000 ____D C:\Users\theos
2021-12-26 15:28 - 2021-01-16 13:30 - 000000000 ____D C:\Users\theos\AppData\Roaming\vlc

==================== Bestanden in de root van sommige mappen ========

2021-01-16 09:56 - 2022-01-13 10:49 - 000218112 _____ () C:\Users\theos\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

==================== SigCheck ============================

(Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.)

==================== Einde van FRST.txt ========================