Fix resultaat van Farbar Recovery Scan Tool (x64) Versie: 11-05-2022 Gestart door Gerda (15-05-2022 20:02:06) Run:2 Gestart vanaf C:\Users\Gerda\Desktop Geladen Profielen: Gerda Boot Modus: Normal ============================================== fixlist inhoud: ***************** SystemRestore: On CreateRestorePoint: CloseProcesses: BootExecute: autocheck autochk /k:C * FF ProfilePath: C:\Users\Gerda\AppData\Roaming\Mozilla\Firefox\Profiles\xp33679r.default [niet gevonden] <==== AANDACHT AV: Kaspersky Security Cloud (Enabled - Up to date) {4F76F112-43EB-40E8-11D8-F7BD1853EA23} FW: Kaspersky Security Cloud (Disabled) {774D7037-0984-41B0-3A87-5E88E680AD58} CMD: net stop wuauserv CMD: net stop cryptSvc CMD: net stop bits CMD: ren %SystemRoot%\SoftwareDistribution SoftwareDistribution.old CMD: ren %SystemRoot%\System32\catroot2 Catroot2.old CMD: net start wuauserv CMD: net start cryptSvc CMD: net start bits CMD: lodctr.exe /R Folder: C:\WINDOWS\WinSxS\amd64_isymwrapper_b03f5f7f11d50a3a_10.0.19041.1_none_819702978fa44022 File: C:\WINDOWS\WinSxS\amd64_isymwrapper_b03f5f7f11d50a3a_10.0.19041.1_none_819702978fa44022\ISymWrapper.dll PowerShell: Start-Sleep -s 5 EmptyTemp: Hosts: ***************** SystemRestore: On => voltooid Herstelpunt is succesvol gemaakt. Proces succesvol afgesloten. HKLM\System\CurrentControlSet\Control\Session Manager\\"BootExecute"="autocheck autochk *" => waarde met succes hersteld C:\Users\Gerda\AppData\Roaming\Mozilla\Firefox\Profiles\xp33679r.default => pad is succesvol verwijderd "AV: Kaspersky Security Cloud (Enabled - Up to date) {4F76F112-43EB-40E8-11D8-F7BD1853EA23}" => is succesvol verwijderd "FW: Kaspersky Security Cloud (Disabled) {774D7037-0984-41B0-3A87-5E88E680AD58}" => is succesvol verwijderd ========= net stop wuauserv ========= De Windows Update-service wordt gestopt. De Windows Update-service is gestopt. ========= Einde van CMD: ========= ========= net stop cryptSvc ========= De Cryptographic Services-service wordt gestopt.. De Cryptographic Services-service is gestopt. ========= Einde van CMD: ========= ========= net stop bits ========= De Background Intelligent Transfer Service-service is niet gestart. Typ NET HELPMSG 3521 voor meer hulp. ========= Einde van CMD: ========= ========= ren %SystemRoot%\SoftwareDistribution SoftwareDistribution.old ========= ========= Einde van CMD: ========= ========= ren %SystemRoot%\System32\catroot2 Catroot2.old ========= ========= Einde van CMD: ========= ========= net start wuauserv ========= De Windows Update-service wordt gestart. De Windows Update-service is gestart. ========= Einde van CMD: ========= ========= net start cryptSvc ========= De Cryptographic Services-service wordt gestart. De Cryptographic Services-service is gestart. ========= Einde van CMD: ========= ========= net start bits ========= De Background Intelligent Transfer Service-service wordt gestart. De Background Intelligent Transfer Service-service is gestart. ========= Einde van CMD: ========= ========= lodctr.exe /R ========= Info: Successfully rebuilt performance counter setting from system backup store ========= Einde van CMD: ========= ========================= Folder: C:\WINDOWS\WinSxS\amd64_isymwrapper_b03f5f7f11d50a3a_10.0.19041.1_none_819702978fa44022 ======================== 2022-05-15 15:26 - 2022-05-15 15:26 - 000089600 ____A [B1FF738092FBE7350E5C6EA8718E97FC] (Microsoft Corporation) [Bestand niet getekend] C:\WINDOWS\WinSxS\amd64_isymwrapper_b03f5f7f11d50a3a_10.0.19041.1_none_819702978fa44022\ISymWrapper.dll ====== Einde van Folder: ====== ========================= File: C:\WINDOWS\WinSxS\amd64_isymwrapper_b03f5f7f11d50a3a_10.0.19041.1_none_819702978fa44022\ISymWrapper.dll ======================== C:\WINDOWS\WinSxS\amd64_isymwrapper_b03f5f7f11d50a3a_10.0.19041.1_none_819702978fa44022\ISymWrapper.dll Bestand niet getekend MD5: B1FF738092FBE7350E5C6EA8718E97FC datum aanmaken en wijzigen: 2022-05-15 15:26 - 2022-05-15 15:26 grootte: 000089600 Kenmerken: ----A Bedrijfsnaam: Microsoft Corporation Interne naam: ISymWrapper.dll Originele naam: ISymWrapper.dll Product: Microsoft® .NET Framework Beschrijving: Microsoft .NET Runtime Managed Symbol Wrappers bestand Versie: 2.0.50727.9149 (WinRelRS6.050727-9100) Product Versie: 2.0.50727.9149 Auteursrecht: © Microsoft Corporation. All rights reserved. VirusTotal: https://www.virustotal.com/gui/file/245b35cab3b619d6c796d675c808b984714ce591aa2ba76ea9ac1bbdb0bc88d7/detection/f-245b35cab3b619d6c796d675c808b984714ce591aa2ba76ea9ac1bbdb0bc88d7-1645567030 ====== Einde van File: ====== ========= Start-Sleep -s 5 ========= ========= Einde van Powershell: ========= C:\Windows\System32\Drivers\etc\hosts => is succesvol verplaatst Hosts met succes hersteld. =========== EmptyTemp: ========== BITS transfer queue => 0 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 8471076 B Java, Flash, Steam htmlcache => 0 B Windows/system/drivers => 927742 B Edge => 0 B Chrome => 0 B Firefox => 222598712 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 0 B ProgramData => 0 B Public => 0 B systemprofile => 2742829340 B systemprofile32 => 2742829361 B LocalService => 2742832415 B NetworkService => 2742860605 B Gerda => 3040960767 B RecycleBin => 9691232392 B EmptyTemp: => 22.3 GB tijdelijke gegevens verwijderd. ================================ Het systeem moest herstart worden. ==== Einde van Fixlog 20:04:33 ====