Fix resultaat van Farbar Recovery Scan Tool (x64) Versie: 30-10-2016 Gestart door Ewoud (01-11-2016 13:53:10) Run:1 Gestart vanaf C:\Users\Ewoud\Desktop Geladen Profielen: Ewoud (Beschikbare Profielen: Ewoud) Boot Modus: Normal ============================================== fixlist inhoud: ***************** start CreateRestorePoint: CloseProcesses: CustomCLSID: HKU\S-1-5-21-1854223093-3483252176-3228169965-1001_Classes\CLSID\{590C4387-5EBD-4D46-8A84-CD0BA2EF2856}\InprocServer32 -> C:\Users\Ewoud\AppData\Local\Google\Update\1.3.30.3\psuser_64.dll => Geen bestand CustomCLSID: HKU\S-1-5-21-1854223093-3483252176-3228169965-1001_Classes\CLSID\{793EE463-1304-471C-ADF1-68C2FFB01247}\InprocServer32 -> C:\Users\Ewoud\AppData\Local\Google\Update\1.3.29.5\psuser_64.dll => Geen bestand Task: {107D3623-3D89-4182-9A40-E09C542B5B3E} - System32\Tasks\TweakBit\Driver Updater\Start Driver Updater automatic scanning => C:\Program Files (x86)\TweakBit\Driver Updater\DriverUpdater.exe [2016-08-04] (TweakBit) <==== AANDACHT Task: {25D63D03-C034-4668-85E2-8CEE90136627} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Geen bestand <==== AANDACHT Task: {26BF57D3-A206-4907-B87E-BEF55DF2EA1C} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Geen bestand <==== AANDACHT Task: {459CF6CC-C743-4B98-90BE-D78256D9EA17} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Geen bestand <==== AANDACHT Task: {45B75127-5F03-4DCD-8817-76D3155E576D} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Geen bestand <==== AANDACHT Task: {4C782825-CC54-40DD-9414-6DA1B27C9451} - \CCleanerSkipUAC -> Geen bestand <==== AANDACHT Task: {503E073B-73F8-4D76-9A31-25656E1F481F} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Geen bestand <==== AANDACHT Task: {76324690-2121-4E66-93DE-9441A65C116D} - System32\Tasks\TweakBit\Driver Updater\Start Driver Updater ?n logon => C:\Program Files (x86)\TweakBit\Driver Updater\DriverUpdater.exe [2016-08-04] (TweakBit) <==== AANDACHT Task: {77F291CB-3009-47C4-9B66-A872C31F7C65} - \WPD\SqmUpload_S-1-5-21-1854223093-3483252176-3228169965-1001 -> Geen bestand <==== AANDACHT Task: {7E58C22F-86B0-4A55-8D3C-54AB869DD30E} - System32\Tasks\PowerMonitor => C:\Users\Ewoud\AppData\Local\PowerMonitor\PowerMonitor.exe <==== AANDACHT Task: {836F1A66-9A41-4B0D-B445-1532A6AD4E17} - System32\Tasks\Ckasotyshanuch Controls => C:\Program Files (x86)\Prucutstky\crent.exe [2016-09-20] (CHENGDU YIWO Tech Development Co., Ltd) Task: {87AEDE56-AFAD-4483-908C-5889DFD87363} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Geen bestand <==== AANDACHT Task: {95458253-D0B6-4E56-9CB8-90E839AE8079} - System32\Tasks\fupdate => C:\Users\Ewoud\AppData\Local\fupdate\fupdate.exe <==== AANDACHT Task: {B08D9568-10E7-4787-BCDF-06B7AFC51445} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Geen bestand <==== AANDACHT Task: {B77A7002-FCD1-4625-956D-2FD12A062F6D} - \AutoPico Daily Restart -> Geen bestand <==== AANDACHT Task: {CE661521-5AD2-4DF4-8BEF-E4EF8BFDCF5C} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Geen bestand <==== AANDACHT Task: {F00216CA-4E66-40D9-9AFC-E1D42CF27AA6} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Geen bestand <==== AANDACHT Task: {FBAC9CD7-16B8-4AD1-BD9D-7F2F5F5007F3} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Geen bestand <==== AANDACHT Task: {FF57FAFB-0559-4E96-A157-58DFD8072DBC} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Geen bestand <==== AANDACHT ShortcutWithArgument: C:\Users\Ewoud\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mail.Ru.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> url,FileProtocolHandler "hxxp://www.mail.ru/cnt/20775012?gp=811008" IE trusted site: HKU\.DEFAULT\...\localhost -> localhost IE trusted site: HKU\S-1-5-21-1854223093-3483252176-3228169965-1001\...\hola.org -> hxxp://hola.org IE trusted site: HKU\S-1-5-21-1854223093-3483252176-3228169965-1001\...\localhost -> localhost HKLM-x32\...\Run: [] => [X] HKU\S-1-5-21-1854223093-3483252176-3228169965-1001\...\Run: [jfodvgpuzi] => explorer "hxxp://granena.ru/?utm_source=uoua03n&utm_content=e739009bccd5f1e6d71a91bff5994529&utm_term=856F221B67DB66AF9DD86E2B8C541DB9&utm_d=20160920" <===== AANDACHT ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => Geen bestand GroupPolicy: Restrictie <======= AANDACHT GroupPolicy\User: Restrictie <======= AANDACHT HKU\S-1-5-21-1854223093-3483252176-3228169965-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://granena.ru/?utm_content=31b5cebd524a9af6c7a772dca81815e9&utm_source=startpm&utm_term=856F221B67DB66AF9DD86E2B8C541DB9&utm_d=20160920 SearchScopes: HKU\S-1-5-21-1854223093-3483252176-3228169965-1001 -> DefaultScope {A06ED961-D98F-4CF9-A89B-80AB11DB149C} URL = hxxp://go-search.ru/search?q={searchTerms} SearchScopes: HKU\S-1-5-21-1854223093-3483252176-3228169965-1001 -> {81DD5ED1-CE2C-4829-8E2D-144EDF846379} URL = SearchScopes: HKU\S-1-5-21-1854223093-3483252176-3228169965-1001 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={40735AA9-0143-44DB-A66D-92EA859C9DA4}&mid=44e0e8401c6d47cda1cc29e025799976-f05e9631311686bd005fdc93c7218b391a844c66&lang=nl&ds=AVG&coid=avgtbavg&cmpid=1015tb&pr=fr&d=2015-07-23 11:47:58&v=4.2.1.951&pid=wtu&sg=&sap=dsp&q={searchTerms} SearchScopes: HKU\S-1-5-21-1854223093-3483252176-3228169965-1001 -> {A06ED961-D98F-4CF9-A89B-80AB11DB149C} URL = hxxp://go-search.ru/search?q={searchTerms} SearchScopes: HKU\S-1-5-21-1854223093-3483252176-3228169965-1001 -> {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = hxxp://go.mail.ru/distib/ep/?q={SearchTerms}&product_id=%7BBEBFD161-3CD4-4F0C-A576-8A7849A35D46%7D&gp=811010 CHR HomePage: ChromeDefaultData -> mail.ru/cnt/11956636?rciguc__PARAM__ CHR Profile: C:\Users\Ewoud\AppData\Local\Google\Chrome\User Data\ChromeDefaultData [2016-11-01] <==== AANDACHT C:\Program Files (x86)\SPnP3 C:\Program Files (x86)\e2wy139j C:\Program Files (x86)\2qy9l68g C:\Users\Ewoud\AppData\Local\PowerMonitor C:\Program Files (x86)\Prucutstky C:\ProgramData\AVAST Software C:\Users\Ewoud\AppData\Local\fupdate C:\Program Files (x86)\TweakBit Hosts: EmptyTemp: end ***************** Herstelpunt is succesfol gemaakt. Proces succesvol afgesloten. "HKU\S-1-5-21-1854223093-3483252176-3228169965-1001_Classes\CLSID\{590C4387-5EBD-4D46-8A84-CD0BA2EF2856}" => sleutel is succesvol verwijderd. "HKU\S-1-5-21-1854223093-3483252176-3228169965-1001_Classes\CLSID\{793EE463-1304-471C-ADF1-68C2FFB01247}" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{107D3623-3D89-4182-9A40-E09C542B5B3E}" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{107D3623-3D89-4182-9A40-E09C542B5B3E}" => sleutel is succesvol verwijderd. C:\WINDOWS\System32\Tasks\TweakBit\Driver Updater\Start Driver Updater automatic scanning => is succesvol verplaatst. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\TweakBit\Driver Updater\Start Driver Updater automatic scanning" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{25D63D03-C034-4668-85E2-8CEE90136627}" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{25D63D03-C034-4668-85E2-8CEE90136627}" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{26BF57D3-A206-4907-B87E-BEF55DF2EA1C}" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{26BF57D3-A206-4907-B87E-BEF55DF2EA1C}" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{459CF6CC-C743-4B98-90BE-D78256D9EA17}" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{459CF6CC-C743-4B98-90BE-D78256D9EA17}" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{45B75127-5F03-4DCD-8817-76D3155E576D}" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{45B75127-5F03-4DCD-8817-76D3155E576D}" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4C782825-CC54-40DD-9414-6DA1B27C9451}" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4C782825-CC54-40DD-9414-6DA1B27C9451}" => sleutel is succesvol verwijderd. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CCleanerSkipUAC => sleutel niet gevonden. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{503E073B-73F8-4D76-9A31-25656E1F481F}" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{503E073B-73F8-4D76-9A31-25656E1F481F}" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{76324690-2121-4E66-93DE-9441A65C116D}" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{76324690-2121-4E66-93DE-9441A65C116D}" => sleutel is succesvol verwijderd. Kon niet verplaatsen "C:\WINDOWS\System32\Tasks\TweakBit\Driver Updater\Start Driver Updater ?n logon" => Gepland te verplaatsen bij herstart. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\TweakBit\Driver Updater\Start Driver Updater ?n logon => sleutel niet gevonden. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{77F291CB-3009-47C4-9B66-A872C31F7C65}" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{77F291CB-3009-47C4-9B66-A872C31F7C65}" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WPD\SqmUpload_S-1-5-21-1854223093-3483252176-3228169965-1001" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7E58C22F-86B0-4A55-8D3C-54AB869DD30E}" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7E58C22F-86B0-4A55-8D3C-54AB869DD30E}" => sleutel is succesvol verwijderd. C:\WINDOWS\System32\Tasks\PowerMonitor => is succesvol verplaatst. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PowerMonitor" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{836F1A66-9A41-4B0D-B445-1532A6AD4E17}" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{836F1A66-9A41-4B0D-B445-1532A6AD4E17}" => sleutel is succesvol verwijderd. C:\WINDOWS\System32\Tasks\Ckasotyshanuch Controls => is succesvol verplaatst. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Ckasotyshanuch Controls" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{87AEDE56-AFAD-4483-908C-5889DFD87363}" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{87AEDE56-AFAD-4483-908C-5889DFD87363}" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{95458253-D0B6-4E56-9CB8-90E839AE8079}" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{95458253-D0B6-4E56-9CB8-90E839AE8079}" => sleutel is succesvol verwijderd. C:\WINDOWS\System32\Tasks\fupdate => is succesvol verplaatst. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\fupdate" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B08D9568-10E7-4787-BCDF-06B7AFC51445}" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B08D9568-10E7-4787-BCDF-06B7AFC51445}" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\OfficeSoftwareProtectionPlatform\SvcRestartTask" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B77A7002-FCD1-4625-956D-2FD12A062F6D}" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B77A7002-FCD1-4625-956D-2FD12A062F6D}" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AutoPico Daily Restart" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CE661521-5AD2-4DF4-8BEF-E4EF8BFDCF5C}" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CE661521-5AD2-4DF4-8BEF-E4EF8BFDCF5C}" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F00216CA-4E66-40D9-9AFC-E1D42CF27AA6}" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F00216CA-4E66-40D9-9AFC-E1D42CF27AA6}" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FBAC9CD7-16B8-4AD1-BD9D-7F2F5F5007F3}" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FBAC9CD7-16B8-4AD1-BD9D-7F2F5F5007F3}" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{FF57FAFB-0559-4E96-A157-58DFD8072DBC}" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FF57FAFB-0559-4E96-A157-58DFD8072DBC}" => sleutel is succesvol verwijderd. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess" => sleutel is succesvol verwijderd. C:\Users\Ewoud\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Mail.Ru.lnk => snelkoppeling argument is succesvol verwijderd.. "HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\localhost" => sleutel is succesvol verwijderd. "HKU\S-1-5-21-1854223093-3483252176-3228169965-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\hola.org" => sleutel is succesvol verwijderd. "HKU\S-1-5-21-1854223093-3483252176-3228169965-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\localhost" => sleutel is succesvol verwijderd. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => waarde is succesvol verwijderd. HKU\S-1-5-21-1854223093-3483252176-3228169965-1001\Software\Microsoft\Windows\CurrentVersion\Run\\jfodvgpuzi => waarde is succesvol verwijderd. "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast" => sleutel is succesvol verwijderd. HKCR\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => sleutel niet gevonden. C:\WINDOWS\system32\GroupPolicy\Machine => is succesvol verplaatst. C:\WINDOWS\system32\GroupPolicy\GPT.ini => is succesvol verplaatst. C:\WINDOWS\SysWOW64\GroupPolicy\GPT.ini => is succesvol verplaatst. C:\WINDOWS\system32\GroupPolicy\User => is succesvol verplaatst. HKU\S-1-5-21-1854223093-3483252176-3228169965-1001\Software\Microsoft\Internet Explorer\Main\\Start Page => waarde met succes hersteld HKU\S-1-5-21-1854223093-3483252176-3228169965-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => waarde is succesvol verwijderd. "HKU\S-1-5-21-1854223093-3483252176-3228169965-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{81DD5ED1-CE2C-4829-8E2D-144EDF846379}" => sleutel is succesvol verwijderd. HKCR\CLSID\{81DD5ED1-CE2C-4829-8E2D-144EDF846379} => sleutel niet gevonden. "HKU\S-1-5-21-1854223093-3483252176-3228169965-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}" => sleutel is succesvol verwijderd. HKCR\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233} => sleutel niet gevonden. "HKU\S-1-5-21-1854223093-3483252176-3228169965-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{A06ED961-D98F-4CF9-A89B-80AB11DB149C}" => sleutel is succesvol verwijderd. HKCR\CLSID\{A06ED961-D98F-4CF9-A89B-80AB11DB149C} => sleutel niet gevonden. "HKU\S-1-5-21-1854223093-3483252176-3228169965-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{FFEBBF0A-C22C-4172-89FF-45215A135AC7}" => sleutel is succesvol verwijderd. HKCR\CLSID\{FFEBBF0A-C22C-4172-89FF-45215A135AC7} => sleutel niet gevonden. Chrome HomePage => is succesvol verwijderd. C:\Users\Ewoud\AppData\Local\Google\Chrome\User Data\ChromeDefaultData => is succesvol verplaatst. C:\Program Files (x86)\SPnP3 => is succesvol verplaatst. C:\Program Files (x86)\e2wy139j => is succesvol verplaatst. C:\Program Files (x86)\2qy9l68g => is succesvol verplaatst. "C:\Users\Ewoud\AppData\Local\PowerMonitor" => niet gevonden. C:\Program Files (x86)\Prucutstky => is succesvol verplaatst. C:\ProgramData\AVAST Software => is succesvol verplaatst. "C:\Users\Ewoud\AppData\Local\fupdate" => niet gevonden. C:\Program Files (x86)\TweakBit => is succesvol verplaatst. "C:\Windows\System32\Drivers\etc\hosts" => Kon niet verplaatsen. Kon niet herstellen Hosts. =========== EmptyTemp: ========== BITS transfer queue => 1418973 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 191592566 B Java, Flash, Steam htmlcache => 1626 B Windows/system/drivers => 93321825 B Edge => 41529479 B Chrome => 0 B Firefox => 0 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 0 B ProgramData => 0 B Public => 0 B systemprofile => 0 B systemprofile32 => 0 B LocalService => 92412 B NetworkService => 6778 B Ewoud => 4182707603 B RecycleBin => 58012112 B EmptyTemp: => 4.3 GB tijdelijke gegevens verwijderd. ================================ Resultaat van geplande bestanden te verplaatsen (Boot Modus: Normal) (Datum&Tijd: 01-11-2016 13:59:01) "C:\WINDOWS\System32\Tasks\TweakBit\Driver Updater\Start Driver Updater ?n logon" => Kon niet verplaatsen ==== Eind van Fixlog 13:59:03 ====