Extra scanresultaten van Farbar Recovery Scan Tool (x64) Versie: 21-12-2016 Gestart door Robbescheuten (29-12-2016 10:07:47) Gestart vanaf C:\Users\Robbescheuten\Pictures\MP Navigator EX\Downloads 2016 Windows 8.1 (Update) (X64) (2015-01-04 09:38:48) Boot Modus: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-1037555006-1929405826-4030660218-500 - Administrator - Disabled) Gast (S-1-5-21-1037555006-1929405826-4030660218-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-1037555006-1929405826-4030660218-1005 - Limited - Enabled) Robbescheuten (S-1-5-21-1037555006-1929405826-4030660218-1001 - Administrator - Enabled) => C:\Users\Robbescheuten ==================== Security Center ======================== (Als een item is opgenomen in de fixlist, zal het worden verwijderd.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B} AV: ESET Smart Security 9.0.408.1 (Enabled - Up to date) {EC1D6F37-E411-475A-DF50-12FF7FE4AC70} AS: ESET Smart Security 9.0.408.1 (Enabled - Up to date) {577C8ED3-C22B-48D4-E5E0-298D0463E6CD} AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: ESET Persoonlijke firewall (Enabled) {D426EE12-AE7E-4602-F40F-BBCA8137EB0B} ==================== Geïnstalleerde programma's ====================== (Alleen de adware-programma's met 'verborgen' vlag zou kunnen worden toegevoegd aan de fixlist om ze zichtbaar te maken. De adware-programma's moeten handmatig gedeinstallerd worden.) 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) AAA Logo 2014 v4.11 FULL (HKLM-x32\...\AAA Logo 2014_is1) (Version: - SWGSoft) AbstractCurves (HKLM\...\AbstractCurves AbstractCurves 1) (Version: 1.179 - AbstractCurves Software) AbstractCurves x32 (HKLM-x32\...\AbstractCurves AbstractCurves x32 1) (Version: 1.190 - AbstractCurves Software) AbstractCurves x64 (HKLM\...\AbstractCurves AbstractCurves x64 1) (Version: 1.190 - AbstractCurves Software) Adobe Acrobat Reader DC - Nederlands (HKLM-x32\...\{AC76BA86-7AD7-1043-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated) Adobe Flash Player 24 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 24.0.0.186 - Adobe Systems Incorporated) Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.6.156 - Adobe Systems, Inc.) Ansel (Version: 375.70 - NVIDIA Corporation) Hidden Ashampoo Burning Studio 15 v.15.0.2 (HKLM-x32\...\{91B33C97-5B38-0A92-D04A-A0F26F3F87D4}_is1) (Version: 15.0.2 - Ashampoo GmbH & Co. KG) Ashampoo Photo Mailer v.1.0.8 (HKLM-x32\...\{91B33C97-9309-C89E-8FF9-DF4A2A3B8269}_is1) (Version: 1.0.8 - Ashampoo GmbH & Co. KG) Ashampoo Slideshow Studio HD 3 v.3.0.9 (HKLM-x32\...\{91B33C97-0CE8-6ABD-1CF4-0DAF2CCF492A}_is1) (Version: 3.0.9 - Ashampoo GmbH & Co. KG) ASUS GPU Tweak (HKLM-x32\...\InstallShield_{532F6E8A-AF97-41C3-915F-39F718EC07D1}) (Version: 2.5.8.3 - ASUSTek COMPUTER INC.) ASUS GPU Tweak (x32 Version: 2.5.8.3 - ASUSTek COMPUTER INC.) Hidden ASUS Product Register Program (HKLM-x32\...\{C87D79F6-F813-4812-B7A9-CCCAAB8B1188}) (Version: 1.0.025 - ASUSTek Computer Inc.) Athentech Perfectly Clear (HKLM-x32\...\_{5CF88B4A-5805-4F7C-B059-23C6C9D0604D}) (Version: 1.0.0.117 - Corel Corporation) Athentech Perfectly Clear (HKLM-x32\...\_{6CB22877-5117-4C04-84D4-78072AB836FC}) (Version: 1.0.0.122 - Corel Corporation) Athentech Perfectly Clear (Version: 1.0.0.117 - Corel Corporation) Hidden Athentech Perfectly Clear (Version: 1.0.0.122 - Corel Corporation) Hidden Athentech Perfectly Clear (x32 Version: 1.0.0.117 - Uw bedrijfsnaam) Hidden Athentech Perfectly Clear (x32 Version: 1.0.0.122 - Uw bedrijfsnaam) Hidden Aurora 3D Text & Logo Maker v13.0227 (HKLM-x32\...\{26CF4202-1AF6-49AB-A690-F82108FB79E7}) (Version: 1.0.0.0 - MrSoftware) Aurora 3D Text & Logo Maker version 13.01.04 (x32 Version: 13.01.04 - Aurora3D Software) Hidden Autodesk SketchBook Pro 7 (HKLM\...\{4448344E-76B2-45B7-826B-0D4110301533}) (Version: 7.21.0000 - Autodesk) Boxifier version 1.0.14.1 (HKU\S-1-5-21-1037555006-1929405826-4030660218-1001\...\{BEBDFAFD-18FB-4DDC-B5BE-ED47E13EB2E3}_is1) (Version: 1.0.14.1 - Kenubi) Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version: 4.5.0 - Canon Inc.) Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.1.1 - Canon Inc.) Canon MG6200 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG6200_series) (Version: - Canon Inc.) Canon MP Navigator EX 5.0 (HKLM-x32\...\MP Navigator EX 5.0) (Version: - ) CCleaner (HKLM\...\CCleaner) (Version: 5.25 - Piriform) Citrix Online Launcher (HKLM-x32\...\{A08A6B7D-1F21-4843-85A3-77B8D15FAE0E}) (Version: 1.0.244 - Citrix) Click'N Design 3D for AfterBurner(tm) (V5) (HKLM-x32\...\Click'N Design 3D for AfterBurner(tm) (V5)) (Version: v5.x.x - Stomp Inc.) Contents (x32 Version: 1.0.0.101 - Corel Corporation) Hidden Corel AfterShot 2 (HKLM-x32\...\InstallShield_{8CC5AE63-D868-4222-8B54-EFEEA62F3E9A}) (Version: 2.2.0.29 - Corel Corporation) Corel AfterShot 2 (x32 Version: 2.00.0000 - Corel Corporation) Hidden Corel AfterShot 2(64-bit) (HKLM-x32\...\InstallShield_{BAA5BA4A-6F64-4592-BF53-298FB063A73D}) (Version: 2.2.0.29 - Corel Corporation) Corel AfterShot HDR (HKLM\...\{E871EA56-F403-4B5C-A90C-9A133F31E3AE}) (Version: 1.00.0000 - Corel Corporation) Corel AfterShot HDR (HKLM-x32\...\{BF2C2583-1B2B-4F3F-B40E-10A0445B983E}) (Version: 1.00.0000 - Corel Corporation) Corel AfterShot Pro 2 - ICA x64 (Version: 2.0 - Corel Corporation) Hidden Corel AfterShot Pro 2 - IPM Content x64 (Version: 2.2 - Corel Corporation) Hidden Corel AfterShot Pro 2 - IPM x64 (Version: 2.2 - Corel Corporation) Hidden Corel AfterShot Pro 2 x64 (Version: 2 - Corel Corporation) Hidden Corel AfterShot Pro 2(64-bit) (HKLM\...\_{962CEAB7-FF29-4F8F-A818-E6D60990A0A0}) (Version: 2.2.1.64 - Corel Corporation) Corel FastFlick (HKLM-x32\...\_{10EC8494-8A92-49D8-9677-2483EB01F7F1}) (Version: 1.0.0.101 - Corel Corporation) Corel KPT Collection (HKLM-x32\...\_{B16DC136-9583-4C54-BE27-F001BBC546B1}) (Version: 1.0.0.109 - Corel Corporation) Corel KPT Collection (x32 Version: 1.0.0.109 - Uw bedrijfsnaam) Hidden Corel PaintShop Pro X7 (HKLM-x32\...\_{176F50D6-6857-49CE-B731-65F757EE3F0D}) (Version: 17.3.0.30 - Corel Corporation) Corel PaintShop Pro X7 (x32 Version: 17.0.0.199 - Corel Corporation) Hidden Corel PaintShop Pro X8 (HKLM-x32\...\_{85C69B9B-F9BD-4A60-BD83-F2B7E081ED39}) (Version: 18.2.0.61 - Corel Corporation) Corel PaintShop Pro X8 (x32 Version: 18.0.0.124 - Corel Corporation) Hidden Creative Content (x32 Version: 1.0.0.114 - Corel Corporation) Hidden Creative Content (x32 Version: 1.0.0.114 - Uw bedrijfsnaam) Hidden Dropbox (HKU\S-1-5-21-1037555006-1929405826-4030660218-1001\...\Dropbox) (Version: 16.4.30 - Dropbox, Inc.) Easy Poster Printer (HKLM-x32\...\{CE1A7AF3-B7F5-4BF9-88AE-AC2412A8797E}) (Version: 6.5.0 - GD Software) ESET Smart Security (HKLM\...\{02CD05E3-0F91-49BB-8182-127FDCEC8952}) (Version: 9.0.381.1 - ESET, spol. s r.o.) FaceFilter v3.02 Standard (HKLM-x32\...\{6020758E-57A9-41E3-AF20-8EE311EA6156}) (Version: 3.02.1506.1 - Reallusion Inc.) Firebird SQL Server - MAGIX Edition (HKLM-x32\...\{39AB2E37-1A55-4292-A5D3-971E9F70D0F8}) (Version: 2.1.32.0 - MAGIX AG) GPUTweakStreaming (HKLM-x32\...\InstallShield_{D2A41AA7-4313-43D5-AA39-7E3FBBE0556D}) (Version: 1.0.3.5 - ASUS) GPUTweakStreaming (x32 Version: 1.0.3.5 - ASUS) Hidden ICA (x32 Version: 1.0.0.101 - Corel Corporation) Hidden ICA (x32 Version: 17.0.0.199 - Corel Corporation) Hidden ICA (x32 Version: 18.0.0.124 - Corel Corporation) Hidden Inpaint 6.2 (HKLM\...\{2AEDC172-479F-47AE-8A48-A0524D4AED5B}_is1) (Version: - Teorex) Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.0.1204 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.1.0.1058 - Intel Corporation) IPM_PSP_COM (x32 Version: 17.0.0.199 - Corel Corporation) Hidden IPM_PSP_COM (x32 Version: 18.0.0.124 - Corel Corporation) Hidden IPM_PSP_COM64 (Version: 17.0.0.199 - Corel Corporation) Hidden IPM_PSP_COM64 (Version: 18.0.0.124 - Corel Corporation) Hidden IPM_VS_Pro (x32 Version: 1.0 - Corel Corporation) Hidden Java 8 Update 111 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation) Logitech Unifying-software 2.50 (HKLM\...\Logitech Unifying) (Version: 2.50.25 - Logitech) MAGIX Foto Manager 9 (HKLM-x32\...\MAGIX Foto Manager 9 NL) (Version: 7.0.4.135 - MAGIX AG) MAGIX Photo Graphic Designer 6 Update (x32 Version: 6.1.3.15477 - MAGIX AG) Hidden MAGIX Photo & Graphic Designer 6 (HKLM-x32\...\MAGIX_MSI_Foto_Grafik_Designer_6) (Version: 6.1.2.13891 - MAGIX AG) MAGIX Photo & Graphic Designer 6 (x32 Version: 6.1.2.13891 - MAGIX AG) Hidden MAGIX Screenshare (HKLM-x32\...\{512C1CEF-69F6-43C0-B0DD-650F9A02C12E}) (Version: 4.3.6.1987 - MAGIX AG) MAGIX Speed burnR (MSI) (HKLM-x32\...\MX.{489B0BAA-ACBF-4808-8968-52BF1B676143}) (Version: 7.0.1.29 - MAGIX Software GmbH) MAGIX Speed burnR (MSI) (Version: 7.0.1.29 - MAGIX Software GmbH) Hidden MAGIX Video deluxe 2015 (HKLM\...\MX.{DA7B58E7-740A-4411-AC11-7D9BA50804E2}) (Version: 14.0.0.153 - MAGIX Software GmbH) MAGIX Video deluxe 2015 (Version: 14.0.0.153 - MAGIX Software GmbH) Hidden MAGIX Video deluxe 2015 Update (Version: 14.0.0.166 - MAGIX Software GmbH) Hidden MAGIX Video deluxe 2015 Update (Version: 14.0.0.183 - MAGIX Software GmbH) Hidden MAGIX Video Sound Cleaning Lab 2014 (HKLM-x32\...\MX.{5722E63A-7799-4A62-88AE-80D98F59B7A2}) (Version: 20.0.0.18 - MAGIX Software GmbH) MAGIX Video Sound Cleaning Lab 2014 (Version: 20.0.0.18 - MAGIX Software GmbH) Hidden Malwarebytes versie 3.0.5.1299 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.5.1299 - Malwarebytes) Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft Office 365 - nl-nl (HKLM\...\O365HomePremRetail - nl-nl) (Version: 16.0.7466.2038 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-1037555006-1929405826-4030660218-1001\...\OneDriveSetup.exe) (Version: 17.3.6720.1207 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{2DFD8316-9EF1-3210-908C-4CB61961C1AC}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{527BBE2F-1FED-3D8B-91CB-4DB0F838E69E}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{90ffcee5-8608-4e94-8c18-a4feb4f83fb8}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) MPC-HC 1.7.10 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.10 - MPC-HC Team) MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation) NewBlue PremiumEffects (HKLM-x32\...\NewBlue PremiumEffects) (Version: 1.0 - NewBlue) NVIDIA 3D Vision controllerstuurprogramma 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation) NVIDIA 3D Vision stuurprogramma 375.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 375.70 - NVIDIA Corporation) NVIDIA GeForce Experience 3.0.7.34 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.0.7.34 - NVIDIA Corporation) NVIDIA Grafisch stuurprogramma 375.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 375.70 - NVIDIA Corporation) NVIDIA HD Audio-stuurprogramma 1.3.34.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.17 - NVIDIA Corporation) NVIDIA Miracast virtuele audio 375.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio) (Version: 375.70 - NVIDIA Corporation) NVIDIA PhysX Systeem Software 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation) NvNodejs (Version: 3.0.7.34 - NVIDIA Corporation) Hidden NvTelemetry (Version: 1.0.0.0 - NVIDIA Corporation) Hidden Office 16 Click-to-Run Extensibility Component (Version: 16.0.7466.2038 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (Version: 16.0.7466.2038 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (Version: 16.0.7466.2038 - Microsoft Corporation) Hidden Photo Calendar Studio (HKLM-x32\...\Photo Calendar Studio_is1) (Version: 2.0 - MOJOSOFT) PhotoScissors 1.2 (HKLM\...\{664FCCAE-8187-4EC5-B191-758C040C999C}_is1) (Version: - teorex) PortraitPro Studio 12.2 (HKLM\...\PortraitProStudio12_is1) (Version: 12.2 - Anthropics Technology Ltd.) PortraitPro Studio 12.5 (HKLM-x32\...\PortraitProStudio12_is1) (Version: 12.5 - Anthropics Technology Ltd.) PSPPContent (x32 Version: 17.0.0.199 - Corel Corporation) Hidden PSPPContent (x32 Version: 18.0.0.124 - Corel Corporation) Hidden PSPPHelp (x32 Version: 17.0.0.199 - Corel Corporation) Hidden PSPPHelp (x32 Version: 18.0.0.124 - Corel Corporation) Hidden PSPPro64 (Version: 17.0.0.199 - Corel Corporation) Hidden PSPPro64 (Version: 18.0.0.124 - Corel Corporation) Hidden Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.31.423.2014 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7255 - Realtek Semiconductor Corp.) Revo Uninstaller Pro 3.1.2 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.1.2 - VS Revo Group, Ltd.) Setup (x32 Version: 1.0.0.101 - Corel Corporation) Hidden Setup (x32 Version: 17.0.0.199 - Uw bedrijfsnaam) Hidden Setup (x32 Version: 18.0.0.124 - Uw bedrijfsnaam) Hidden Share (x32 Version: 1.0.0.101 - Corel Corporation) Hidden SHIELD Streaming (Version: 7.1.0320 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 3.0.7.34 - NVIDIA Corporation) Hidden Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation) Skype™ 7.2 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.2.103 - Skype Technologies S.A.) Software voor Intel® Chipset-apparaten (x32 Version: 10.0.17 - Intel(R) Corporation) Hidden Sothink Logo Maker Professional (HKLM-x32\...\{574FFDC9-AB09-4C4A-B7BE-C6066502181A}_is1) (Version: 4.4 - SourceTec Software Co., LTD) Sqirlz Water Reflections (HKLM-x32\...\Sqirlz Water Reflections) (Version: 2.6 - xiberpix) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden Taalpakket voor Microsoft Visual Studio 2010 Tools for Office Runtime (x64) - NLD (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - NLD) (Version: 10.0.50903 - Microsoft Corporation) Ultimate Creative Collection (X7) (HKLM-x32\...\_{3378B396-212B-4739-A8D0-71CD52F4568E}) (Version: 1.0.0.116 - Corel Corporation) Ultimate Creative Collection (X7) (x32 Version: 1.0.0.116 - Uw bedrijfsnaam) Hidden Ultimate Creative Collection (X8) (HKLM-x32\...\_{556CA4DC-9EFC-4763-B78D-D40A92059AC6}) (Version: 1.0.0.121 - Corel Corporation) Ultimate Creative Collection (X8) (x32 Version: 1.0.0.121 - Uw bedrijfsnaam) Hidden Vasco da Gama 8 HDPro (HKLM-x32\...\{22036364-3B1E-4B6D-A109-93328906F7C7}) (Version: 8.00.0000 - MotionStudios) Vinny27 - Adobe Photoshop CC 2014 (HKLM\...\{B194836D-1BD6-479C-8C48-61183D760947}) (Version: 15.0 - Vinny27) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN) VSClassic (x32 Version: 1.0.0.101 - Corel Corporation) Hidden VSPro (x32 Version: 1.0.0.101 - Corel Corporation) Hidden Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.) Xara 3D Maker 7 (HKLM-x32\...\MAGIX_MSI_Xara3D7) (Version: 7.0.0.415 - Xara Group Ltd) Xara 3D Maker 7 (x32 Version: 7.0.0.415 - Xara Group Ltd) Hidden ==================== Aangepaste CLSID (gefilterd): ========================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) CustomCLSID: HKU\S-1-5-21-1037555006-1929405826-4030660218-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1037555006-1929405826-4030660218-1001_Classes\CLSID\{071B6D59-C72C-4A2A-9495-F4CD09887CCC}\InprocServer32 -> C:\Users\Robbescheuten\AppData\Roaming\Boxifier\Boxifier64.dll () CustomCLSID: HKU\S-1-5-21-1037555006-1929405826-4030660218-1001_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\Robbescheuten\AppData\Local\Microsoft\OneDrive\17.3.6720.1207_1\amd64\FileCoAuthLib64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1037555006-1929405826-4030660218-1001_Classes\CLSID\{7AFFDBC9-2571-4B76-B1BD-B992F6014B1B}\InprocServer32 -> C:\Users\Robbescheuten\AppData\Roaming\Boxifier\Boxifier64.dll () CustomCLSID: HKU\S-1-5-21-1037555006-1929405826-4030660218-1001_Classes\CLSID\{7AFFDBCA-2571-4B76-B1BD-B992F6014B1B}\InprocServer32 -> C:\Users\Robbescheuten\AppData\Roaming\Boxifier\Boxifier64.dll () CustomCLSID: HKU\S-1-5-21-1037555006-1929405826-4030660218-1001_Classes\CLSID\{7AFFDBCB-2571-4B76-B1BD-B992F6014B1B}\InprocServer32 -> C:\Users\Robbescheuten\AppData\Roaming\Boxifier\Boxifier64.dll () CustomCLSID: HKU\S-1-5-21-1037555006-1929405826-4030660218-1001_Classes\CLSID\{7AFFDBCC-2571-4B76-B1BD-B992F6014B1B}\InprocServer32 -> C:\Users\Robbescheuten\AppData\Roaming\Boxifier\Boxifier64.dll () CustomCLSID: HKU\S-1-5-21-1037555006-1929405826-4030660218-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1037555006-1929405826-4030660218-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1037555006-1929405826-4030660218-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1037555006-1929405826-4030660218-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1037555006-1929405826-4030660218-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1037555006-1929405826-4030660218-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1037555006-1929405826-4030660218-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1037555006-1929405826-4030660218-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1037555006-1929405826-4030660218-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1037555006-1929405826-4030660218-1001_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1037555006-1929405826-4030660218-1001_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-1037555006-1929405826-4030660218-1001_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\DropboxExt64.3.0.dll (Dropbox, Inc.) ==================== Geplande Taken (gefilterd) ============= (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) Task: {1A2DA12A-2ACB-4CD3-876F-D524427DCCC2} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1037555006-1929405826-4030660218-1001UA => C:\Users\Robbescheuten\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-05] (Dropbox, Inc.) Task: {209CEAD3-B6FE-4FDF-8995-B503CD6103DE} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-10-30] (Microsoft Corporation) Task: {3DD5024B-CD90-4528-BFA9-08B66CC21313} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-09-30] (NVIDIA Corporation) Task: {464F7B99-A70A-4BEF-995F-523923E457B0} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated) Task: {61BABA3E-4DB1-4216-8D62-FF40842C34FF} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1037555006-1929405826-4030660218-1001Core => C:\Users\Robbescheuten\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-05] (Dropbox, Inc.) Task: {66A1D71D-06D9-4515-B248-4B523E1F06C4} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-09-30] (NVIDIA Corporation) Task: {6F66C5A8-2225-4F1E-8C56-326FF3710EC6} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-12-27] (Adobe Systems Incorporated) Task: {742280E4-1D9D-440E-8C7C-4897C1C1B1B4} - System32\Tasks\START SKYDRIVE => C:\WINDOWS\System32\SkyDrive.exe [2014-11-08] (Microsoft Corporation) Task: {7DA030A7-C63D-4518-B7D4-22644162F39E} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-09-30] (NVIDIA Corporation) Task: {9660FA52-6289-4432-B349-BE0C3B2AF627} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-10-30] (Microsoft Corporation) Task: {B6715D69-DE9C-41A4-86BA-34B8ACDE9B0C} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2016-09-30] (NVIDIA Corporation) Task: {C738024E-3353-408C-ABF9-BA8256983EA0} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2013-08-27] (ASUSTek Computer Inc.) Task: {E2619960-29F2-4193-8464-813B0110AF06} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-12-06] (Piriform Ltd) Task: {E9DC2729-DD46-4394-B135-8ECFD11D5155} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2016-09-30] (NVIDIA Corporation) Task: {FB4BDEED-08BA-4FE9-851B-35CB10516F02} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-09-30] (NVIDIA Corporation) Task: {FEC3DCD6-13AE-486B-A5ED-59336869A11B} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2016-11-02] (Microsoft Corporation) (Als een item is opgenomen in de fixlist, de taak (job) bestand wordt verplaatst. Het bestand dat wordt uitgevoerd door de taak zal niet worden verplaatst.) Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-1037555006-1929405826-4030660218-1001Core.job => C:\Users\Robbescheuten\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-1037555006-1929405826-4030660218-1001UA.job => C:\Users\Robbescheuten\AppData\Local\Dropbox\Update\DropboxUpdate.exe ==================== Snelkoppelingen ============================= (De items kunnen worden opgenomen in de fixlist.txt om hersteld of verwijderd te worden.) ==================== Geladen Modules (gefilterd) ============== 2015-01-04 10:30 - 2014-01-28 04:16 - 00936728 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe 2012-01-17 11:24 - 2012-01-17 11:24 - 00055296 _____ () C:\Windows\SysWOW64\ASGT.exe 2016-10-12 09:06 - 2016-09-30 05:22 - 04490808 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\Poco.dll 2016-10-12 09:06 - 2016-09-30 05:22 - 01148984 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll 2016-10-12 09:06 - 2016-09-30 05:22 - 00419896 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\_nvspserviceplugin64.dll 2016-12-28 10:17 - 2016-12-14 12:55 - 02259232 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll 2016-12-28 10:17 - 2016-12-14 12:55 - 02813904 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\arwlib.dll 2016-12-28 10:17 - 2016-12-14 12:55 - 02247632 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll 2015-01-04 10:30 - 2016-10-25 21:17 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2015-02-22 22:32 - 2014-11-18 01:14 - 00401104 _____ () C:\Users\Robbescheuten\AppData\Roaming\Boxifier\Boxifier64.dll 2016-12-27 14:10 - 2016-12-27 14:10 - 01678560 _____ () C:\Users\Robbescheuten\AppData\Local\Microsoft\OneDrive\17.3.6720.1207_1\amd64\ClientTelemetry.dll 2016-10-12 08:47 - 2016-11-22 21:32 - 00221888 _____ () C:\Program Files\Microsoft Office\root\Office16\JitV.dll 2015-01-04 10:30 - 2016-12-29 10:03 - 00029184 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\PEbiosinterface32.dll 2015-01-04 10:30 - 2014-01-28 04:16 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\ATKEX.dll 2016-10-12 09:06 - 2016-09-30 05:22 - 00020536 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll 2015-12-12 18:48 - 2016-11-11 21:36 - 00035792 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\_multiprocessing.pyd 2015-12-12 18:48 - 2016-11-11 21:36 - 00100296 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\_ctypes.pyd 2015-12-12 18:48 - 2016-11-11 21:36 - 00018888 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\select.pyd 2015-12-12 18:48 - 2016-12-21 19:26 - 00019760 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\tornado.speedups.pyd 2015-12-12 18:48 - 2016-11-11 21:36 - 00694224 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\unicodedata.pyd 2016-12-27 14:08 - 2016-12-21 19:26 - 00020816 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._constant_time.pyd 2015-12-12 18:48 - 2016-11-11 21:37 - 00123856 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\_cffi_backend.pyd 2016-12-27 14:08 - 2016-12-21 19:26 - 01682760 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._openssl.pyd 2016-12-27 14:08 - 2016-12-21 19:26 - 00020808 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._padding.pyd 2016-12-27 14:08 - 2016-11-11 21:36 - 00145864 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\pyexpat.pyd 2016-12-27 14:08 - 2016-11-11 21:37 - 00019408 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\faulthandler.pyd 2016-12-27 14:08 - 2016-11-11 21:36 - 00116688 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\pywintypes27.dll 2015-12-12 18:48 - 2016-11-11 21:38 - 00105928 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\win32api.pyd 2016-08-05 12:46 - 2016-12-21 19:26 - 00021312 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\winffi.crt.compiled._winffi_crt.pyd 2016-12-27 14:08 - 2016-12-21 19:26 - 00052024 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\psutil._psutil_windows.pyd 2016-12-27 14:08 - 2016-12-21 19:26 - 00038696 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\fastpath.pyd 2016-12-27 14:08 - 2016-11-11 21:36 - 00392144 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\pythoncom27.dll 2016-12-27 14:08 - 2016-11-11 21:38 - 00020936 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\mmapfile.pyd 2015-12-12 18:48 - 2016-11-11 21:38 - 00024528 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\win32event.pyd 2015-12-12 18:48 - 2016-11-11 21:39 - 00116176 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\win32security.pyd 2015-12-12 18:48 - 2016-12-21 19:26 - 00381752 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\win32com.shell.shell.pyd 2015-12-12 18:48 - 2016-11-11 21:38 - 00124880 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\win32file.pyd 2016-08-05 12:46 - 2016-12-21 19:26 - 00025424 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\winffi.kernel32.compiled._winffi_kernel32.pyd 2015-12-12 18:48 - 2016-11-11 21:38 - 00024016 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\win32clipboard.pyd 2015-12-12 18:48 - 2016-11-11 21:38 - 00175560 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\win32gui.pyd 2015-12-12 18:48 - 2016-11-11 21:38 - 00030160 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\win32pipe.pyd 2015-12-12 18:48 - 2016-11-11 21:39 - 00043472 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\win32process.pyd 2015-12-12 18:48 - 2016-11-11 21:39 - 00048592 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\win32service.pyd 2015-12-12 18:48 - 2016-11-11 21:38 - 00057808 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\win32evtlog.pyd 2015-12-12 18:48 - 2016-11-11 21:39 - 00024016 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\win32profile.pyd 2016-12-27 14:08 - 2016-12-21 19:26 - 00246592 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\breakpad.client.windows.handler.pyd 2016-12-27 14:08 - 2016-12-21 19:26 - 00026456 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\dropbox.infinite.win.compiled._driverinstallation.pyd 2016-08-05 12:46 - 2016-11-11 21:37 - 00241104 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\_jpegtran.pyd 2016-12-27 14:08 - 2016-12-21 19:26 - 00020280 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\cpuid.compiled._cpuid.pyd 2015-12-12 18:48 - 2016-11-11 21:39 - 00028616 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\win32ts.pyd 2015-12-12 18:48 - 2016-12-21 19:26 - 00023376 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\winscreenshot.compiled._CaptureScreenshot.pyd 2016-02-19 18:18 - 2016-12-21 19:26 - 00020800 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\winffi.iphlpapi._winffi_iphlpapi.pyd 2016-02-19 18:18 - 2016-12-21 19:26 - 00019776 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\winffi.winerror._winffi_winerror.pyd 2016-02-19 18:18 - 2016-12-21 19:26 - 00020800 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\winffi.wininet._winffi_wininet.pyd 2015-12-12 18:48 - 2016-11-11 21:39 - 00350152 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\winxpgui.pyd 2016-02-19 18:18 - 2016-12-21 19:26 - 00022352 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\winverifysignature.compiled._VerifySignature.pyd 2016-12-27 14:08 - 2016-12-21 19:26 - 00024392 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\librsyncffi.compiled._librsyncffi.pyd 2016-12-27 14:08 - 2016-11-11 21:35 - 00036296 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\librsync.dll 2016-12-27 14:08 - 2016-12-21 19:26 - 00084280 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\dropbox_sqlite_ext.DLL 2016-12-27 14:08 - 2016-12-21 19:26 - 01826096 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\PyQt5.QtCore.pyd 2015-12-12 18:48 - 2016-11-11 21:37 - 00083912 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\sip.pyd 2016-12-27 14:08 - 2016-12-21 19:26 - 00531248 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\PyQt5.QtNetwork.pyd 2016-12-27 14:08 - 2016-12-21 19:26 - 03928880 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\PyQt5.QtWidgets.pyd 2016-12-27 14:08 - 2016-12-21 19:26 - 01972528 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\PyQt5.QtGui.pyd 2016-12-27 14:08 - 2016-12-21 19:26 - 00133424 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKit.pyd 2016-12-27 14:08 - 2016-12-21 19:26 - 00224056 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKitWidgets.pyd 2016-12-27 14:08 - 2016-12-21 19:26 - 00207672 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\PyQt5.QtPrintSupport.pyd 2016-08-05 12:46 - 2016-12-21 19:26 - 00020288 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\winffi.user32._winffi_user32.pyd 2016-12-27 14:08 - 2016-11-11 21:42 - 00017864 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\libEGL.dll 2016-12-27 14:08 - 2016-11-11 21:42 - 01631184 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\libGLESv2.dll 2016-12-27 14:08 - 2016-12-21 19:26 - 00042808 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\PyQt5.QtWebChannel.pyd 2016-12-27 14:08 - 2016-12-21 19:26 - 00171320 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngineWidgets.pyd 2016-12-27 14:08 - 2016-12-21 19:26 - 00357680 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\PyQt5.QtQml.pyd 2015-12-12 18:48 - 2016-11-11 21:39 - 00060880 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\win32print.pyd 2016-08-05 12:46 - 2016-12-21 19:26 - 00024904 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\winffi.winhttp.compiled._winffi_winhttp.pyd 2016-12-27 14:08 - 2016-12-21 19:26 - 00546096 _____ () C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\PyQt5.QtQuick.pyd 2016-10-12 09:06 - 2016-09-30 05:22 - 60819000 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll 2014-03-20 11:43 - 2014-03-20 11:43 - 01241560 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll ==================== Alternate Data Streams (gefilterd) ========= (Als een item is opgenomen in de fixlist, alleen de ADS wordt verwijderd.) ==================== Veilige Modus (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. De "AlternateShell" waarde wordt hersteld.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" ==================== Bestandskoppeling (gefilterd) =============== (Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd.) ==================== Internet Explorer vertrouwde/beperkte toegang =============== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd.) ==================== Hosts inhoud: =============================== (Als nodig Hosts: opdracht kan worden opgenomen in de fixlist om Hosts te resetten.) 2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Andere gebieden ============================ (Momenteel is er geen automatische fix voor dit onderdeel.) HKU\S-1-5-21-1037555006-1929405826-4030660218-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Robbescheuten\Pictures\bureaublad achtergronden\abstract-smoke-1920x1080.jpg DNS Servers: 192.168.0.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is ingeschakeld. ==================== MSCONFIG/TASK MANAGER Uitgeschakelde items == HKLM\...\StartupApproved\Run: => "Corel Update Helper" HKU\S-1-5-21-1037555006-1929405826-4030660218-1001\...\StartupApproved\Run: => "Boxifier" ==================== Firewall regels (gefilterd) =============== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) FirewallRules: [vm-monitoring-nb-session] => LPort=139 FirewallRules: [{53DF21FB-5AEB-457F-B7B3-A1C1C02C86A7}] => C:\Program Files\MAGIX\Video deluxe 2015\Videodeluxe.exe FirewallRules: [{AB6973C0-0BEF-4537-983C-EE1BE2ED3C0A}] => C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{E00E19AB-D6BD-440D-9883-6C286F8508BB}] => C:\Users\Robbescheuten\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{1F88C8E3-5E6D-4C32-80EE-F1E62FBCE0FD}] => C:\Program Files\Microsoft Office\root\Office16\outlook.exe FirewallRules: [{7CB801A5-C67C-4A5E-ACC2-003EA955EB4A}] => C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe FirewallRules: [{B31E2FEA-7B3F-4071-B02D-5B0F43B2194D}] => C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe FirewallRules: [{ED7876B2-BFC4-41E9-9F24-F1818729435E}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe FirewallRules: [{D771825F-7D80-45BB-904A-FBF3AD0A600D}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{20B72CA3-2D3E-4D64-8740-9CB4A738D482}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe ==================== Herstelpunten ========================= 27-12-2016 13:01:17 zoek.exe restore point 27-12-2016 14:03:35 Herstelbewerking 28-12-2016 10:51:37 Revo Uninstaller Pro's restore point - 28-12-2016 22:04:40 Restore Point Created by FRST ==================== Defecte Apparaatbeheer Apparaten ============= ==================== Eventlog fouten: ========================= Applicatiefouten: ================== Error: (12/28/2016 10:51:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: COMPUTER) Description: Het activeren van de app Microsoft.BingFoodAndDrink_8wekyb3d8bbwe!AppexFoodAndDrink is mislukt door de fout -2144927148. Kijk in het logboek Microsoft-Windows-TWinUI/Operational voor aanvullende informatie. Error: (12/28/2016 10:06:37 PM) (Source: ESENT) (EventID: 623) (User: ) Description: SearchIndexer (4360) Windows: De versieopslag voor deze sessie (0) heeft de maximale grootte van 128 MB bereikt. Waarschijnlijk is een langdurige transactie er de oorzaak van dat de versieopslag niet kan worden opgeruimd en dat deze steeds groter wordt. Updates worden geweigerd totdat de langdurige transactie volledig is doorgevoerd of is teruggedraaid. Mogelijke langdurige transactie: Id van sessie: 0x000000D7BFE20F00 Context van sessie: 0x00000000 Thread-id van sessiecontext: 0x0000000000001164 Opruiming: 1 Sessiespoor: 45861@22:06:37 57573@22:06:34 Error: (12/28/2016 08:42:27 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: COMPUTER) Description: Het activeren van de app Microsoft.BingFoodAndDrink_8wekyb3d8bbwe!AppexFoodAndDrink is mislukt door de fout -2144927148. Kijk in het logboek Microsoft-Windows-TWinUI/Operational voor aanvullende informatie. Error: (12/28/2016 06:53:45 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: COMPUTER) Description: Het activeren van de app Microsoft.BingFoodAndDrink_8wekyb3d8bbwe!AppexFoodAndDrink is mislukt door de fout -2144927148. Kijk in het logboek Microsoft-Windows-TWinUI/Operational voor aanvullende informatie. Error: (12/28/2016 04:45:36 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: COMPUTER) Description: Het activeren van de app Microsoft.BingFoodAndDrink_8wekyb3d8bbwe!AppexFoodAndDrink is mislukt door de fout -2144927148. Kijk in het logboek Microsoft-Windows-TWinUI/Operational voor aanvullende informatie. Error: (12/28/2016 04:23:05 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: COMPUTER) Description: Het activeren van de app Microsoft.BingFoodAndDrink_8wekyb3d8bbwe!AppexFoodAndDrink is mislukt door de fout -2144927148. Kijk in het logboek Microsoft-Windows-TWinUI/Operational voor aanvullende informatie. Error: (12/28/2016 01:12:03 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: COMPUTER) Description: Het activeren van de app Microsoft.BingFoodAndDrink_8wekyb3d8bbwe!AppexFoodAndDrink is mislukt door de fout -2144927148. Kijk in het logboek Microsoft-Windows-TWinUI/Operational voor aanvullende informatie. Error: (12/28/2016 10:53:58 AM) (Source: ESENT) (EventID: 623) (User: ) Description: SearchIndexer (3672) Windows: De versieopslag voor deze sessie (0) heeft de maximale grootte van 128 MB bereikt. Waarschijnlijk is een langdurige transactie er de oorzaak van dat de versieopslag niet kan worden opgeruimd en dat deze steeds groter wordt. Updates worden geweigerd totdat de langdurige transactie volledig is doorgevoerd of is teruggedraaid. Mogelijke langdurige transactie: Id van sessie: 0x000000F593D10F00 Context van sessie: 0x00000000 Thread-id van sessiecontext: 0x0000000000000EAC Opruiming: 1 Sessiespoor: 45861@10:53:58 57573@10:53:55 Error: (12/28/2016 10:44:07 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: COMPUTER) Description: Het activeren van de app Microsoft.BingFoodAndDrink_8wekyb3d8bbwe!AppexFoodAndDrink is mislukt door de fout -2144927148. Kijk in het logboek Microsoft-Windows-TWinUI/Operational voor aanvullende informatie. Error: (12/28/2016 10:18:30 AM) (Source: SideBySide) (EventID: 59) (User: ) Description: Kan activeringscontext voor 'c:\program files (x86)\click'n design 3d (v5)\SmartUI2.ocx' niet maken. Fout in manifest of beleidsbestand 'c:\program files (x86)\click'n design 3d (v5)\SmartUI2.ocx' op regel 21. Ongeldige XML-syntaxis. Systeemfouten: ============= Error: (12/29/2016 10:03:55 AM) (Source: DCOM) (EventID: 10010) (User: COMPUTER) Description: De server {1B1F472E-3221-4826-97DB-2C2324D389AE} heeft zich niet binnen de vereiste termijn bij DCOM geregistreerd. Error: (12/29/2016 10:03:00 AM) (Source: Win32k) (EventID: 253) (User: ) Description: Een aanwijsapparaat heeft geen verplichte coördinateneigenschap. Error: (12/29/2016 10:03:01 AM) (Source: EventLog) (EventID: 6008) (User: ) Description: De vorige afsluiting van het systeem om 00:06:02 op ‎29-‎12-‎2016 is onverwacht gebeurd. Error: (12/29/2016 10:02:57 AM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT AUTHORITY) Description: 32212256844789266493276960 Error: (12/28/2016 10:06:02 PM) (Source: Win32k) (EventID: 253) (User: ) Description: Een aanwijsapparaat heeft geen verplichte coördinateneigenschap. Error: (12/28/2016 10:05:27 PM) (Source: Service Control Manager) (EventID: 7032) (User: ) Description: Servicebesturingsbeheer heeft na het onverwachte afsluiten van de Windows Search-service geprobeerd een herstelactie (Service opnieuw starten) uit te voeren, maar deze actie is met de volgende fout mislukt: De service is al gestart. Error: (12/28/2016 10:04:57 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: De NVIDIA Wireless Controller Service-service is onverwacht beëindigd. Dit is nu 1 keer gebeurd. Error: (12/28/2016 10:04:57 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: De Corel License Validation Service V2 x64, Powered by arvato-service is onverwacht beëindigd. Dit is nu 1 keer gebeurd. Error: (12/28/2016 10:04:57 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: De NVIDIA Display Container LS-service is onverwacht gestopt. Dit is 1 keer gebeurd. De volgende herstelbewerking zal over 1000 milliseconden worden uitgevoerd: Service opnieuw starten. Error: (12/28/2016 10:04:57 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: De Windows Search-service is onverwacht gestopt. Dit is 1 keer gebeurd. De volgende herstelbewerking zal over 30000 milliseconden worden uitgevoerd: Service opnieuw starten. CodeIntegrity: =================================== Date: 2016-03-28 00:22:31.002 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\hmpalert.dll because the set of per-page image hashes could not be found on the system. Date: 2016-03-28 00:05:51.402 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\hmpalert.dll because the set of per-page image hashes could not be found on the system. Date: 2016-03-28 00:03:47.740 Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume1\Windows\System32\hmpalert.dll that did not meet the Windows signing level requirements. Date: 2016-03-27 23:58:53.151 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\hmpalert.dll because the set of per-page image hashes could not be found on the system. Date: 2016-03-27 23:55:27.024 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\hmpalert.dll because the set of per-page image hashes could not be found on the system. Date: 2016-03-27 23:51:00.520 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\hmpalert.dll because the set of per-page image hashes could not be found on the system. Date: 2016-03-27 23:50:53.768 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\hmpalert.dll because the set of per-page image hashes could not be found on the system. Date: 2016-03-27 22:40:29.175 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\hmpalert.dll because the set of per-page image hashes could not be found on the system. Date: 2016-03-27 18:53:26.888 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\hmpalert.dll because the set of per-page image hashes could not be found on the system. Date: 2016-03-27 18:47:13.436 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\hmpalert.dll because the set of per-page image hashes could not be found on the system. ==================== Geheugen info =========================== Processor: Intel(R) Core(TM) i7-4790 CPU @ 3.60GHz Percentage geheugen in gebruik: 31% Totaal fysiek RAM-geheugen: 8134.78 MB Beschikbaar fysiek RAM-geheugen: 5564.1 MB Totaal Virtueel geheugen: 9414.78 MB Beschikbaar Virtual geheugen: 7005.87 MB ==================== Schijven ================================ Drive c: () (Fixed) (Total:232.88 GB) (Free:105.55 GB) NTFS ==>[schijf met boot componenten (verkregen van BCD)] ==================== MBR & Partitietabel ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 916D17E7) Partition 1: (Active) - (Size=232.9 GB) - (Type=07 NTFS) Attempted reading MBR returned 0 bytes. Could not read MBR for disk 1. ==================== Eind van Addition.txt ============================