Extra scanresultaten van Farbar Recovery Scan Tool (x64) Versie: 05-02-2017 Gestart door Nelleke (12-02-2017 20:40:39) Gestart vanaf C:\Users\Nelleke\Desktop Windows 10 Home Versie 1607 (X64) (2016-09-25 02:44:25) Boot Modus: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-2849121425-4159316806-1266491598-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-2849121425-4159316806-1266491598-503 - Limited - Disabled) Gast (S-1-5-21-2849121425-4159316806-1266491598-501 - Limited - Disabled) => C:\Users\Gast HomeGroupUser$ (S-1-5-21-2849121425-4159316806-1266491598-1004 - Limited - Enabled) Nelleke (S-1-5-21-2849121425-4159316806-1266491598-1001 - Administrator - Enabled) => C:\Users\Nelleke UpdatusUser (S-1-5-21-2849121425-4159316806-1266491598-1003 - Limited - Enabled) => C:\Users\UpdatusUser ==================== Security Center ======================== (Als een item is opgenomen in de fixlist, zal het worden verwijderd.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0} ==================== Geïnstalleerde programma's ====================== (Alleen de adware-programma's met 'verborgen' vlag zou kunnen worden toegevoegd aan de fixlist om ze zichtbaar te maken. De adware-programma's moeten handmatig gedeinstallerd worden.) µTorrent (HKLM-x32\...\uTorrent) (Version: 1.6 - ) Adobe Acrobat Reader DC - Nederlands (HKLM-x32\...\{AC76BA86-7AD7-1043-7B44-AC0F074E4100}) (Version: 15.023.20056 - Adobe Systems Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 15.0.0.356 - Adobe Systems Incorporated) Adobe Flash Player 24 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 24.0.0.194 - Adobe Systems Incorporated) Air Playit 2.0.0 (HKLM\...\Air Playit_is1) (Version: - Digiarty) AirPort (HKLM-x32\...\{AA68AAAE-41F0-40B5-8896-5947F5FD6889}) (Version: 5.6.1.2 - Apple Inc.) amuleC (HKLM-x32\...\{B2EFFD4E-D098-4845-9D56-DE75BEB35913}) (Version: 1.0.1 - amuleC) <==== AANDACHT Apple Application Support (32-bit) (HKLM-x32\...\{9BA1A894-B42F-4805-BC8C-349C905A3930}) (Version: 5.3.1 - Apple Inc.) Apple Application Support (64-bit) (HKLM\...\{7EAC8A42-9FAC-4F6B-AABF-C08C9F2E0F13}) (Version: 5.3.1 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{55BB2110-FB43-49B3-93F4-945A0CFB0A6C}) (Version: 10.0.1.3 - Apple Inc.) Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.) AVS Video Converter 9.0 (HKLM-x32\...\AVS4YOU Video Converter 7_is1) (Version: 9.0.1.566 - Online Media Technologies Ltd.) Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden Bejeweled 3 (HKLM-x32\...\Bejeweled 31.0) (Version: 1.0 - AllSmartGames) Blackhawk Striker 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.) Brother P-touch Address Book 1.1 (HKLM-x32\...\InstallShield_{B2023017-DEE4-44F7-8A71-CA6084BF534C}) (Version: 1.1.100 - Brother Industries, Ltd.) Brother P-touch Address Book 1.1 (x32 Version: 1.1.100 - Brother Industries, Ltd.) Hidden Brother P-touch Editor 5.0 (HKLM-x32\...\InstallShield_{DF9A6075-9308-4572-8932-A4316243C4D9}) (Version: 5.0.110 - Brother Industries, Ltd.) Brother P-touch Editor 5.0 (x32 Version: 5.0.110 - Brother Industries, Ltd.) Hidden Brother QL-Series Software User's Guide (HKLM-x32\...\InstallShield_{A242CAB2-870C-4AC9-8AFE-34379D9383CD}) (Version: 1.00.0000 - Brother Industries, Ltd.) Brother QL-Series Software User's Guide (x32 Version: 1.00.0000 - Brother Industries, Ltd.) Hidden Browserinvoegtoepassingen voor Microsoft Office op aanvraag (HKU\S-1-5-21-2849121425-4159316806-1266491598-1001\...\Browserinvoegtoepassingen voor Microsoft Office op aanvraag) (Version: 15.0.4433.1508 - Microsoft Corporation) BurnAware Professional 7.1 (HKLM-x32\...\BurnAware Professional_is1) (Version: - Burnaware) calibre 64bit (HKLM\...\{DD07C096-6D5C-4DC7-9604-C5B51C6B96D8}) (Version: 2.73.0 - Kovid Goyal) CCleaner (HKLM\...\CCleaner) (Version: 5.26 - Piriform) CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.6.5844 - CDBurnerXP) Check Point Deployment Shell (HKLM-x32\...\{1a3f91f0-9e94-45f2-923c-794cc156a027}) (Version: 8.00.0000 - Check Point) Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.) Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.) Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.) CollageIt 1.9.3 (HKLM-x32\...\{D9757258-30B2-496E-86F2-84920C5858E1}_is1) (Version: 1.9.3 - PearlMountain Technology Co., Ltd) Compatibiliteitspakket voor het 2007 Microsoft Office system (HKLM-x32\...\{90120000-0020-0413-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) CyberLink DVD Suite Deluxe (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 7.0.2823 - CyberLink Corp.) CyberLink MediaShow 6 (HKLM-x32\...\InstallShield_{8FCCB703-3FBF-49e7-A43F-A81E27D9B07E}) (Version: 6.0.7616 - CyberLink Corp.) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Defraggler (HKLM\...\Defraggler) (Version: 2.15 - Piriform) devolo dLAN Cockpit (HKLM-x32\...\dlancockpit) (Version: 1.0 - devolo AG) dLAN Cockpit (x32 Version: 1.19.07 - devolo AG) Hidden Dora's Carnival Adventure (x32 Version: 2.2.0.95 - WildTangent) Hidden Dropbox (HKU\S-1-5-21-2849121425-4159316806-1266491598-1001\...\Dropbox) (Version: 18.4.32 - Dropbox, Inc.) DVD Menu Pack for HP MediaSmart Video (HKLM-x32\...\InstallShield_{FB4BB287-37F9-4E27-9C4D-2D3882E08EFF}) (Version: 4.1.4030 - Hewlett-Packard) DVD Menu Pack for HP MediaSmart Video (x32 Version: 4.1.4030 - Hewlett-Packard) Hidden DVD Shrink Pro (HKLM-x32\...\DVD Shrink Pro_is1) (Version: - ) Escape Rosecliff Island (x32 Version: 2.2.0.95 - WildTangent) Hidden ESET Smart Security (HKLM\...\{55B549BB-9C46-4841-A4DE-F6594C47A05B}) (Version: 4.0.437.0 - ESET spol s r. o.) Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited) FATE (x32 Version: 2.2.0.95 - WildTangent) Hidden Final Drive Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden Folder Colorizer version 1.4.0 (HKLM\...\{A133E9CD-2879-4F30-87D4-1604AFD5C5CC}_is1) (Version: 1.4.0 - Softorino) GemistDownloader (HKLM-x32\...\GemistDownloader) (Version: 2.7.0.4 - Wietze Beukema (HelpdeskWeb.nl)) Google Earth Plug-in (HKLM-x32\...\{57BB4801-61C8-4E74-9672-2160728A461E}) (Version: 7.1.5.1557 - Google) Google Talk Plugin (HKLM-x32\...\{F9B579C2-D854-300A-BE62-A09EB9D722E4}) (Version: 5.41.3.0 - Google) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden HandBrake 0.9.6 (HKLM-x32\...\HandBrake) (Version: 0.9.6 - ) Hewlett-Packard ACLM.NET v1.2.1.1 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden HP Advisor (HKLM-x32\...\{40FB8D7C-6FF8-4AF2-BC8B-0B1DB32AF04B}) (Version: 3.4.12850.3526 - Hewlett-Packard) HP ENVY 5530 series Basissoftware van het apparaat (HKLM\...\{24F88BAE-96B6-4D18-BDCC-E1746EBD30C6}) (Version: 32.3.198.49673 - Hewlett-Packard Co.) HP ENVY 5530 series Help (HKLM-x32\...\{35A1FA23-AD44-4E6E-9CFD-AAC967677B13}) (Version: 30.0.0 - Hewlett Packard) HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.2.5 - WildTangent) HP MAINSTREAM KEYBOARD (HKLM-x32\...\{B40D7926-AE5F-41EA-8AC6-56C0E2F00E9D}) (Version: 1.4.3.0 - Hewlett-Packard) HP MediaSmart DVD (HKLM-x32\...\InstallShield_{DCCAD079-F92C-44DA-B258-624FC6517A5A}) (Version: 4.1.4229 - Hewlett-Packard) HP MediaSmart Music (HKLM-x32\...\InstallShield_{91A34181-9FAD-43AB-A35F-E7A8945B7E1C}) (Version: 4.1.4301 - Hewlett-Packard) HP MediaSmart Photo (HKLM-x32\...\InstallShield_{6DAF8CDC-9B04-413B-A0F2-BCC13CF8A5BF}) (Version: 4.1.4211 - Hewlett-Packard) HP MediaSmart SmartMenu (HKLM\...\{5B08AF35-B699-4A44-BB89-3E51E70611E8}) (Version: 3.1.1.12 - Hewlett-Packard) HP MediaSmart Video (HKLM-x32\...\InstallShield_{D12E3E7F-1B13-4933-A915-16C7DD37A095}) (Version: 4.1.4214 - Hewlett-Packard) HP Odometer (HKLM-x32\...\{B8AC1A89-FFD1-4F97-8051-E505A160F562}) (Version: 2.10.0000 - Hewlett-Packard) HP Photo Creations (HKU\S-1-5-21-2849121425-4159316806-1266491598-1001\...\HP Photo Creations) (Version: 1.0.0.21232 - HP) HP Product Detection (HKLM-x32\...\{A436F67F-687E-4736-BD2B-537121A804CF}) (Version: 11.14.0001 - HP) HP Setup (HKLM-x32\...\{72D90DB3-A16A-4545-B555-868471101833}) (Version: 8.1.4186.3400 - Hewlett-Packard) HP Support Assistant (HKLM-x32\...\{79C54A05-F146-4EA0-8A70-D4EFE6181E52}) (Version: 8.3.50.9 - Hewlett-Packard Company) HP Support Information (HKLM-x32\...\{B9A03B7B-E0FF-4FB3-BA83-762E58A1B0AA}) (Version: 10.1.0002 - Hewlett-Packard) HP Support Solutions Framework (HKLM-x32\...\{F283E29B-0B9B-492B-A4BF-5585D996E5AF}) (Version: 12.5.32.203 - Hewlett-Packard Company) HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard) HP Vision Hardware Diagnostics (HKLM\...\{D79A02E9-6713-4335-9668-AAC7474C0C0E}) (Version: 2.1.2.27173 - Hewlett-Packard) iCloud (HKLM\...\{309768A4-A2BB-4930-A5A2-8169678C9B4C}) (Version: 4.0.6.28 - Apple Inc.) ImgBurn (Remove Only) (HKLM-x32\...\ImgBurn) (Version: - ) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.5.0.1026 - Intel Corporation) iTunes (HKLM\...\{9D0D2A8B-7E7B-4D88-8D50-24286ED6A5EB}) (Version: 12.5.5.5 - Apple Inc.) Java 8 Update 111 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation) Jewel Quest - Heritage (x32 Version: 2.2.0.95 - WildTangent) Hidden Kobo (HKLM-x32\...\Kobo) (Version: 4.0.5579 - Rakuten Kobo Inc.) LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.2823 - CyberLink Corp.) LabelPrint (x32 Version: 2.5.2823 - CyberLink Corp.) Hidden LibreOffice 4.4.5.2 (HKLM-x32\...\{406EECCC-AF98-4F2C-A99F-FED788F7580C}) (Version: 4.4.5.2 - The Document Foundation) LightScribe Applications (HKLM-x32\...\{61F25370-7465-4404-BE28-4629BF808699}) (Version: 1.18.15.1 - LightScribe) LightScribe System Software (HKLM-x32\...\{E0E55FC1-C53D-4F8D-B14B-B59C312747C8}) (Version: 1.18.22.2 - LightScribe) LightScribe Template Labeler (HKLM-x32\...\{43523FEF-9D8E-4572-BB11-0E914D366E0A}) (Version: 1.18.15.1 - LightScribe) Malwarebytes Anti-Malware versie 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes) Microsoft Access database engine 2010 (English) (HKLM-x32\...\{90140000-00D1-0409-0000-0000000FF1CE}) (Version: 14.0.6029.1000 - Microsoft Corporation) Microsoft Office Excel Viewer (HKLM-x32\...\{95120000-003F-0413-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Klik-en-Klaar 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Starter 2010 - Nederlands (HKLM-x32\...\{90140011-0066-0413-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Photo Premium 10 (HKLM-x32\...\PictureItPrem_v10) (Version: 10.0.0706 - Microsoft Corporation) Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0413-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (HKLM\...\{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}) (Version: 8.0.51011 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation) MobileMe Control Panel (HKLM\...\{6DD01FF3-63CE-436B-96DB-61363EAA4EB8}) (Version: 3.1.8.0 - Apple Inc.) Movie Theme Pack for HP MediaSmart Video (HKLM-x32\...\InstallShield_{3023EBDA-BF1B-4831-B347-E5018555F26E}) (Version: 4.1.4030 - Hewlett-Packard) Movie Theme Pack for HP MediaSmart Video (x32 Version: 4.1.4030 - Hewlett-Packard) Hidden Mozilla Firefox 51.0.1 (x86 nl) (HKLM-x32\...\Mozilla Firefox 51.0.1 (x86 nl)) (Version: 51.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 51.0.1.6234 - Mozilla) Mozilla Thunderbird 45.5.1 (x86 nl) (HKLM-x32\...\Mozilla Thunderbird 45.5.1 (x86 nl)) (Version: 45.5.1 - Mozilla) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) MusicStation (HKLM-x32\...\{E74E7F63-E70F-43f2-873F-35FB66F263B2}) (Version: 2.0.2.114 - Hewlett-Packard) NVIDIA 3D Vision stuurprogramma 376.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 376.54 - NVIDIA Corporation) NVIDIA Grafisch stuurprogramma 376.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 376.54 - NVIDIA Corporation) NVIDIA HD Audio-stuurprogramma 1.3.34.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.17 - NVIDIA Corporation) NVIDIA PhysX (HKLM-x32\...\{8A809006-C25A-4A3A-9DAB-94659BCDB107}) (Version: 9.10.0224 - NVIDIA Corporation) NVIDIA Update 1.7.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.7.12 - NVIDIA Corporation) ONES (E) (HKLM-x32\...\ONES(E)) (Version: - ) OpenOffice 4.1.1 (HKLM-x32\...\{89FD914D-4472-4E4F-8638-69E857E82DC9}) (Version: 4.11.9775 - Apache Software Foundation) Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden PhotoNow! (HKLM-x32\...\InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}) (Version: 1.1.6904 - CyberLink Corp.) PhotoNow! (x32 Version: 1.1.6904 - CyberLink Corp.) Hidden Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.) Pixpedia Publisher 3.8.17 (HKLM-x32\...\pixpedia-en_is1) (Version: - 1STEIN Corp.) Plants vs. Zombies (x32 Version: 2.2.0.95 - WildTangent) Hidden PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation) Plex Media Server (HKLM-x32\...\{d685b3b4-91da-4364-9e7d-f365a614d42b}) (Version: 1.3.3.3148 - Plex, Inc.) Plex Media Server (x32 Version: 1.3.3148 - Plex, Inc.) Hidden Poker Superstars III (x32 Version: 2.2.0.95 - WildTangent) Hidden Polar Bowler (x32 Version: 2.2.0.95 - WildTangent) Hidden Polar Golfer (x32 Version: 2.2.0.95 - WildTangent) Hidden Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.4022 - CyberLink Corp.) Power2Go (x32 Version: 6.1.4022 - CyberLink Corp.) Hidden PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 8.0.2906 - CyberLink Corp.) PowerDirector (x32 Version: 8.0.2906 - CyberLink Corp.) Hidden PrintMaster (HKLM-x32\...\{8DD144C1-5EAD-4D55-80A1-ACAF893A4FFE}) (Version: - ) Productverbeteringsonderzoek voor HP ENVY 5530 series (HKLM\...\{F90EBFDE-7581-4062-AE57-29F2105C5FA2}) (Version: 32.3.198.49673 - Hewlett-Packard Co.) QuickTime 7 (HKLM-x32\...\{80CEEB1E-0A6C-45B9-A312-37A1D25FDEBC}) (Version: 7.78.80.95 - Apple Inc.) Reader for PC (HKLM-x32\...\{D279DFB7-97A3-439D-8BE9-95D8AFA68562}) (Version: 2.4.01.10241 - Sony Corporation) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7106 - Realtek Semiconductor Corp.) Recovery Manager (x32 Version: 5.5.2926 - CyberLink Corp.) Hidden Seagate DiscWizard (HKLM-x32\...\{8FB2A014-A0B0-42D8-8E18-9AFC6A6E2814}) (Version: 13.0.14387 - Seagate) Software Update Pro 5.42.0.36 (HKLM-x32\...\Software Update Pro) (Version: 5.42.0.36 - Glarysoft Ltd) Spotify (HKU\S-1-5-21-2849121425-4159316806-1266491598-1001\...\Spotify) (Version: 1.0.42.151.g19de0aa6 - Spotify AB) Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.) Stopping Plex (x32 Version: 1.3.3148 - Plex, Inc.) Hidden Sublight (HKLM-x32\...\{04b62368-e432-4d56-b958-e492abba5b59}) (Version: 5.0 - Sublight Labs) Sublight (x32 Version: 5.0 - Sublight Labs) Hidden System Requirements Lab for Intel (HKLM-x32\...\{C71067FC-288F-4E0B-88C6-44DFDA8311E2}) (Version: 4.5.9.0 - Husdawg, LLC) TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.47484 - TeamViewer) TorrentsTime Media Player (HKLM\...\TorrentsTime Media Player_is1) (Version: 1.1.9.5 - Torrents Time) Total Video2Dvd 3.12 (HKLM-x32\...\Total Video2Dvd 3.12_is1) (Version: - EffectMatrix, Inc.) TuneUp Utilities Language Pack (nl-NL) (x32 Version: 10.0.2020.11 - TuneUp Software) Hidden UPC Fiber Power Optimizer (x32 Version: 2.0.0.3 - UPC Broadband) Hidden Virtual Villagers - The Secret City (x32 Version: 2.2.0.95 - WildTangent) Hidden VLC media player 1.0.1 (HKLM-x32\...\VLC media player) (Version: 1.0.1 - VideoLAN Team) VSO ConvertXToDVD 6 (HKLM-x32\...\{8FC36FA6-C508-44FB-B137-1CB46D8258B2}_is1) (Version: 6.0.0.64 - VSO Software) Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.) WinAVI All-in-One Converter (HKLM-x32\...\WinAVI All-in-One Converter_is1) (Version: 1.7.0 - ) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation) Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (HKLM-x32\...\{C32CE55C-12BA-4951-8797-0967FDEF556F}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Resource Kit Tools - SubInAcl.exe (HKLM-x32\...\{D3EE034D-5B92-4A55-AA02-2E6D0A6A96EE}) (Version: 5.2.3790.1164 - Microsoft Corporation) WinRAR (HKLM\...\WinRAR archiver) (Version: - ) WinSnare (HKLM-x32\...\{54A54A73-D8CF-4EBF-BEA7-AD6507ACE4C5}) (Version: 4.1.0 - WinSnare) <==== AANDACHT Wireless LAN Driver and Utility (HKLM-x32\...\{9C049499-055C-4a0c-A916-1D8CA1FF45EB}) (Version: 1.00.0144 - Semiconductor Corp.) Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden ==================== Aangepaste CLSID (gefilterd): ========================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) CustomCLSID: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Nelleke\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001_Classes\CLSID\{225F8CFE-1B76-48E6-8E75-62CC471AFA28}\InprocServer32 -> C:\Users\Nelleke\AppData\Local\Microsoft\Internet Explorer\Downloaded Program Files\Microsoft Office 15\RoamingOfficeActiveX.64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001_Classes\CLSID\{CB492AF1-2CEF-4E58-BE47-471C77D0C8BA}\InprocServer32 -> C:\Users\Nelleke\AppData\Local\Google\Update\1.3.32.7\psuser_64.dll (Google Inc.) CustomCLSID: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Nelleke\AppData\Local\Google\Update\1.3.32.7\psuser_64.dll (Google Inc.) CustomCLSID: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Nelleke\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Nelleke\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Nelleke\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Nelleke\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Nelleke\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Nelleke\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Nelleke\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Nelleke\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Nelleke\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Nelleke\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Nelleke\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Nelleke\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll (Dropbox, Inc.) ==================== Geplande Taken (gefilterd) ============= (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) Task: {0055A145-F6CE-4163-A892-A2F4B54538BE} - geen bestandpad Task: {00843DF6-F0DC-4660-A152-9C0A0FE3F4C1} - System32\Tasks\HP-Online updateprogramma => c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2013-05-30] (Hewlett-Packard) Task: {0614E216-9586-4DC9-9417-9663E71FFA81} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe Task: {07398AE6-B8FE-48EC-8895-962CB89D9547} - \Uninstaller_SkipUac_Nelleke -> Geen bestand <==== AANDACHT Task: {09DD22EA-249F-4834-94E9-2F324E944E0D} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {0DB845DE-924F-4719-8C4D-A8243C1F802B} - \AdobeFlashPlayerUpdate -> Geen bestand <==== AANDACHT Task: {0E8551ED-005D-40C6-90E3-80D5843F8DBB} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe Task: {159C48E1-61FD-409A-AC0D-7A01AEEB54E9} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2849121425-4159316806-1266491598-1001UA => C:\Users\Nelleke\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: {16FCFC33-9336-4DFB-85D1-7905CFE8306F} - System32\Tasks\{C2846005-DA07-4ADD-BA5C-056CAD1B252F} => pcalua.exe -a "Z:\Age of Enigma - Het Geheim van de Zesde Geest AF\Uninstall.exe" -d "Z:\Age of Enigma - Het Geheim van de Zesde Geest AF" Task: {1DE7BEE9-1734-47BE-BBD9-BCDB30358D39} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-12-21] (Piriform Ltd) Task: {1E3DF011-902E-464B-94E4-3D4DC0D6D4E4} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2016-03-21] (Safer-Networking Ltd.) Task: {27C411B7-E322-486B-938E-48EF225CFC07} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe Task: {28AB028E-7F5B-4BA8-9FCA-298A3DFCAB5B} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.) Task: {2967B376-362E-48DF-931F-16EA8209E8BE} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2849121425-4159316806-1266491598-1001Core => C:\Users\Nelleke\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.) Task: {2A3EE747-00ED-48B6-AE77-8331128D65C5} - System32\Tasks\Clerfghtsterfiry Monitor => C:\Program Files (x86)\Plokoy\phadoy.exe [2017-02-01] (Glarysoft Ltd) Task: {2A4F76BB-EA95-4C9B-ACD2-0976C63EA840} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe Task: {2A980A0D-9CFD-42FF-B737-83A3F8E01D8A} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Geen bestand <==== AANDACHT Task: {2D5EA64E-9832-4E71-94E7-44FA1EAF4128} - System32\Tasks\HPOSIAPP64 => C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\ModLEDKey.exe [2009-02-28] () Task: {2F0B2903-9F5B-4E96-8394-51698C1980DD} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe Task: {367644D7-3F88-4F3F-BD2F-3861F4F6780E} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2849121425-4159316806-1266491598-1001UA => C:\Users\Nelleke\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.) Task: {3691FF85-D708-409B-BE7A-284ADA2BCFB2} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe Task: {37028455-91EC-4C4C-B520-6B8FE5883EA7} - \GenericSettingsHandler\Windows-Credentials\RetrySyncTask_for_S-1-5-21-2849121425-4159316806-1266491598-1001 -> Geen bestand <==== AANDACHT Task: {392AAB2B-15F7-48B1-B07E-0BE480D834F6} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe Task: {3F9BBEAC-0047-46CF-AA54-3B16E9EB271B} - System32\Tasks\Google Updater and Installer => C:\Users\Nelleke\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.) Task: {4174D0B1-D662-4442-BE05-E74FDA7AB687} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {47F3FCF8-A8EF-43E0-B469-19168CCC5083} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Geen bestand <==== AANDACHT Task: {48C2123E-7824-4F73-B222-9B8164C4FB4B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-12-21] (HP Inc.) Task: {4CB18856-1E7E-40E9-BADD-10EB4EA0AC5A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2017-01-09] (HP Inc.) Task: {4F70DADF-11B0-4BFE-963F-14F39D34A641} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Geen bestand <==== AANDACHT Task: {530ACFA1-1C5E-45A9-A564-41E22F4E5F66} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-12-21] (Piriform Ltd) Task: {54ED9E99-29BF-468E-B4CC-7EF83E2D076F} - System32\Tasks\{C83C8428-9652-463C-911D-9BFE2C5C55C7} => pcalua.exe -a C:\Users\Nelleke\Desktop\CCleaner-DukeN-NL.exe -d "C:\Program Files (x86)\Mozilla Firefox" Task: {55FC7618-B110-4B08-92FA-98BA6A49217E} - System32\Tasks\{A0A21A7C-2014-4690-92C7-C41D8D1649A4} => pcalua.exe -a C:\Users\Nelleke\AppData\Roaming\Spotify\Spotify.exe -c /uninstall Task: {61CDF5A4-A571-47ED-AB32-83153DCAF8B0} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Geen bestand <==== AANDACHT Task: {643BCCE6-2BCB-4AF2-9FE6-E403025B19D3} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2849121425-4159316806-1266491598-1001Core1d257e97802e4b4 => C:\Users\Nelleke\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.) Task: {65D1E75F-F314-496E-9986-B67D9C86D321} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-01-25] (Adobe Systems Incorporated) Task: {670EA5FE-87D9-4A29-8D0A-B02A77C284A4} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2016-12-07] (HP Inc.) Task: {6D119EB6-1214-4E77-B26A-69CAFF218432} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2016-12-07] (HP Inc.) Task: {6EFF488A-81A1-4559-993B-D1BAE570B74B} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Geen bestand <==== AANDACHT Task: {75095FB4-3FF6-4630-B83C-EB67201B3E25} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe Task: {757E3818-AD59-4E51-B7B8-2D52EA472578} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Geen bestand <==== AANDACHT Task: {757EBE08-6A89-4DFB-9A14-D3BD6CD15604} - System32\Tasks\HPCeeScheduleForNelleke => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2015-06-16] (Hewlett-Packard) Task: {75E207A5-0575-446A-974A-D178024369F1} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe Task: {7A37AE33-CF5A-4875-A829-131E9B97D0E7} - \AdobeFlashPlayerUpdate 2 -> Geen bestand <==== AANDACHT Task: {7B0DFFF0-6088-41CF-A75A-878BA845C91F} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe Task: {7C4BFC7F-C878-4F8F-8E30-0AE20769F315} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Geen bestand <==== AANDACHT Task: {81638279-150C-4957-8290-E69D918543B3} - System32\Tasks\HP Photo Creations Communicator => C:\Users\Nelleke\AppData\Roaming\HP Photo Creations\Communicator.exe [2016-08-10] () Task: {8465E2C1-36AD-4EA3-8ECA-5C561635B621} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe Task: {86B832DF-F710-44FF-80F6-4B146FE8E6B3} - \Driver Booster SkipUAC (Nelleke) -> Geen bestand <==== AANDACHT Task: {873B6F49-0DC4-40D4-B962-6004BBD956DA} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2017-01-13] (Microsoft Corporation) Task: {8BF15A80-08DE-4784-A6FA-081B33CCCAFA} - System32\Tasks\SoftwareUpdate Pro => C:\Program Files (x86)\Glarysoft\Software Update Pro\SoftwareUpdatePro.exe [2016-10-21] (Glarysoft Ltd) Task: {8D97AF2E-72FE-4C9E-BA3B-79922CF226D8} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2016-09-22] (Oracle Corporation) Task: {8FEA8D5C-CAD9-4489-8427-343454FD6ED6} - \ASC8_SkipUac_Nelleke -> Geen bestand <==== AANDACHT Task: {903908F9-17A8-48A7-B843-0D8C1355767B} - \ASC8_PerformanceMonitor -> Geen bestand <==== AANDACHT Task: {94EDFA21-C978-4C3B-A928-DC0E6A5C15FC} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated) Task: {9586CB7C-654B-4FF1-A6EE-E822B91915E4} - System32\Tasks\{F3810887-7551-40CF-AC60-5F98B1518D0B} => pcalua.exe -a "C:\Program Files (x86)\Xilisoft\DVD to iPad Converter 6\Uninstall.exe" Task: {97C31CFC-5318-4740-B21B-D3FEEA689420} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Geen bestand <==== AANDACHT Task: {9CAA7621-F92B-415D-8912-5FBF6324CA48} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2849121425-4159316806-1266491598-1001Core1d23709c1bc9325 => C:\Users\Nelleke\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-05] (Dropbox, Inc.) Task: {9D68AD1A-3850-45B6-BC03-009D74EB709E} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe Task: {A1D35F98-7D4F-4EC2-9239-00601DC46FCE} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe Task: {A2A4B24D-5036-4A3B-872A-938FF573CE0A} - System32\Tasks\{DFFF4C1E-8265-4E03-9B0A-B633FE77E9B2} => pcalua.exe -a "Z:\Natural Threat 2 Deluxe\support\vcredist_x86 2008.exe" -d "Z:\Natural Threat 2 Deluxe\support" Task: {A3E26A69-1D23-4211-978B-5BA6BB2B31B3} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [2016-12-15] (HP Inc.) Task: {A489B528-91C6-4184-A0AF-723508AC6495} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe Task: {A894259E-D7D0-41BB-AED3-1D8F66401E39} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe Task: {A960954D-BD9C-484B-8CEE-EE54BC3F4C86} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-04-30] (Google Inc.) Task: {A9B94DE1-8A7D-4481-8F52-6361D335F790} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.) Task: {AA037CE7-2A71-4AB7-90E0-63895116F280} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2849121425-4159316806-1266491598-1001UA1d257e97807a96d => C:\Users\Nelleke\AppData\Local\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.) Task: {AC0A849B-704F-48E0-B42C-227AE009012B} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Geen bestand <==== AANDACHT Task: {AD357952-C3E6-4AC1-A268-DB7A10E3AE3C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-12-07] (HP Inc.) Task: {ADFD7B42-2A67-458D-AB1B-9647FC552DF2} - System32\Tasks\HPCustParticipation HP ENVY 5530 series => C:\Program Files\HP\HP ENVY 5530 series\Bin\HPCustPartic.exe [2014-07-21] (Hewlett-Packard Development Company, LP) Task: {AF57E1F6-90CC-4043-B62F-A7F5C4B1146D} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Geen bestand <==== AANDACHT Task: {B10439E1-E185-4DB2-807B-DD6AC98B530E} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe Task: {B1BE279C-8468-4F85-807D-48150EFC98E0} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2849121425-4159316806-1266491598-1001Core => C:\Users\Nelleke\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: {B2049888-319C-4C1D-B54D-FB1B63C43641} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Geen bestand <==== AANDACHT Task: {B4AB4B20-E330-4970-BFCA-493F3A74C52A} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2016-03-21] (Safer-Networking Ltd.) Task: {B92A5C1F-2083-497F-B44F-60F380623673} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe Task: {B9ACA725-2001-480D-AA23-4F4F43430CCD} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe Task: {BBCDC643-2DB9-4271-957B-E9AD36287498} - System32\Tasks\HP AR Program Upload - 0e5e01b73d98456486a147c2f9b93b8a1b5e7c78a2564ce296a8b3864dad6cf3 => C:\Program Files\HP\HP ENVY 5530 series\bin\HPRewards.exe [2014-07-21] (TODO: ) Task: {C02B2E09-58D8-4267-9B1C-5B2946780324} - System32\Tasks\UCBrowserUpdaterCore => C:\Program Files (x86)\UCBrowser\Application\update_task.exe [2017-01-18] (UCWeb Inc) <==== AANDACHT Task: {C2CCED45-0B6E-439C-AFE0-645BFFE475CB} - System32\Tasks\{AC3BBC5E-322B-4161-B226-A5A57FEC1484} => pcalua.exe -a "C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerUninstaller.exe" -d "C:\Program Files (x86)\ESET\ESET Online Scanner" Task: {C4AC5C9A-03DF-4D48-B7DD-301D790564E5} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Geen bestand <==== AANDACHT Task: {C4D5D3CC-58F8-43D2-AC4F-FA91F4439F57} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe Task: {C5A166C6-F621-48E8-B082-317615ED1125} - System32\Tasks\{055777FA-FE9A-4986-BBAD-063170EBDC26} => pcalua.exe -a "C:\Program Files (x86)\IncrediMail\Bin\ImSetup.exe" -c /uninstallProduct /addon:incredimail Task: {C62D6BC3-5530-4AC8-9D45-399CC1F9A642} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-12-07] (HP Inc.) Task: {C7604710-5F3E-4FB2-84E4-88B59420EFF8} - System32\Tasks\UCBrowserSecureUpdater => C:\Program Files (x86)\UCBrowser\Security\uclauncher-x64.exe [2017-02-10] (UC Web Inc.) <==== AANDACHT Task: {C9B30D6B-40C2-4876-B78F-F6AE2926C58E} - System32\Tasks\Adobe-online actualiseringsprogramma => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated) Task: {CE6F3887-96C6-4FA2-9C1A-656C9C063286} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-11-07] (HP Inc.) Task: {D33F0FCA-F64A-4CFE-A301-788B584C3787} - System32\Tasks\{AB659144-326C-401A-9F4C-346DC21748F7} => pcalua.exe -a "Z:\Microsoft Picture It 10\Microsoft Picture It 10\Setup.exe" -d "Z:\Microsoft Picture It 10\Microsoft Picture It 10" Task: {D5386FD0-E836-404E-9798-79D957CCCE0C} - System32\Tasks\{BB624FBD-AEA8-440E-834D-376F3420D897} => pcalua.exe -a C:\Users\Nelleke\Desktop\zoek.pif -d C:\Users\Nelleke\Desktop Task: {DBAA2E66-EC86-4B48-BA25-FD748E8DA3D7} - System32\Tasks\{956B4BA9-5A05-4EA4-83F0-69B5C5CC03E8} => pcalua.exe -a C:\Users\Nelleke\Desktop\zoek.scr -d C:\Users\Nelleke\Desktop -c /S Task: {DE168CB4-D6E8-4540-9091-9CA9F72B7220} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-04-30] (Google Inc.) Task: {DE183084-958B-4A4D-BEDC-1CF448244A8D} - geen bestandpad Task: {E03A8393-A268-4762-86F6-2DA0A27BB774} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2849121425-4159316806-1266491598-1001UA1d23709c1ce99bd => C:\Users\Nelleke\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-05] (Dropbox, Inc.) Task: {E84E2054-0CA5-445F-B860-9EDA54E9B924} - System32\Tasks\{637F9D58-A577-4539-8B57-5602008DA350} => pcalua.exe -a "C:\Users\Nelleke\AppData\Roaming\HP Photo Creations\PhotoProduct.exe" -d "C:\Users\Nelleke\AppData\Roaming\HP Photo Creations" Task: {E8FA7856-F1C0-48C9-88EE-4613503C97E8} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {EB874E9E-9650-450F-B118-57145BC610EF} - System32\Tasks\Aniqipypharaph => /i hxxp://d2buh1bf1g584w.cloudfront.net/msi/rel.php?u=ST31500341AS_9VS4JM6Y&v=201721 /q Task: {EDCA17A5-6F3E-4E10-BAA3-EC2207B236AA} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [2014-12-01] (Apple Inc.) Task: {EE58174A-02FA-4FEB-A958-DFEDF249F426} - System32\Tasks\{B3CBEAC1-F9C1-4414-8C57-436B4EFBFBF8} => C:\Program Files\iTunes\iTunes.exe [2017-01-19] (Apple Inc.) Task: {F163A183-D097-47FF-B470-02DC886AD8A4} - System32\Tasks\hpUrlLauncher.exe_{EC173DC3-A57E-40F4-901A-92E855F456B3} => C:\Program Files\hp\HP ENVY 5530 series\Bin\utils\hpUrlLauncher.exe [2014-07-21] (Hewlett-Packard Development Company, LP) Task: {F7F7A6F2-71EA-463B-B477-C62014019E78} - System32\Tasks\UCBrowserUpdater => C:\Program Files (x86)\UCBrowser\Application\update_task.exe [2017-01-18] (UCWeb Inc) <==== AANDACHT Task: {F809B3DB-23B7-4759-B88C-17638039582F} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe Task: {FC168DBD-8327-4CC8-BEBE-28B294DC8806} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe (Als een item is opgenomen in de fixlist, de taak (job) bestand wordt verplaatst. Het bestand dat wordt uitgevoerd door de taak zal niet worden verplaatst.) Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-2849121425-4159316806-1266491598-1001Core1d23709c1bc9325.job => C:\Users\Nelleke\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-2849121425-4159316806-1266491598-1001UA1d23709c1ce99bd.job => C:\Users\Nelleke\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-2849121425-4159316806-1266491598-1001Core.job => C:\Users\Nelleke\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-2849121425-4159316806-1266491598-1001UA.job => C:\Users\Nelleke\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2849121425-4159316806-1266491598-1001Core.job => C:\Users\Nelleke\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2849121425-4159316806-1266491598-1001UA.job => C:\Users\Nelleke\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\HP Photo Creations Communicator.job => C:\Users\Nelleke\AppData\Roaming\HP Photo Creations\Communicator.exe Task: C:\WINDOWS\Tasks\HPCeeScheduleForNelleke.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe Task: C:\WINDOWS\Tasks\UCBrowserUpdater.job => C:\Program Files (x86)\UCBrowser\Application\update_task.exe <==== AANDACHT Task: C:\WINDOWS\Tasks\UCBrowserUpdaterCore.job => C:\Program Files (x86)\UCBrowser\Application\update_task.exe <==== AANDACHT ==================== Snelkoppelingen ============================= (De items kunnen worden opgenomen in de fixlist.txt om hersteld of verwijderd te worden.) Shortcut: C:\Users\Nelleke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GemistDownloader\HelpdeskWeb.nl.lnk -> hxxp://www.helpdeskweb.nl/home/?ref=s ==================== Geladen Modules (gefilterd) ============== 2016-09-01 17:12 - 2016-09-01 17:12 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2017-01-13 13:56 - 2017-01-13 13:56 - 01353528 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2010-07-19 19:57 - 2010-07-19 19:57 - 02231616 _____ () C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe 2017-02-01 17:37 - 2017-01-18 13:04 - 00930704 _____ () C:\Program Files (x86)\UCBrowser\Application\UCService.exe 2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll 2016-12-22 21:20 - 2016-12-09 11:29 - 02681200 _____ () C:\WINDOWS\System32\CoreUIComponents.dll 2016-12-22 21:20 - 2016-12-09 11:29 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll 2010-11-30 04:32 - 2009-02-28 04:13 - 00053248 _____ () C:\Program Files (x86)\Hewlett-Packard\HP MAINSTREAM KEYBOARD\ModLEDKey.exe 2016-12-22 21:20 - 2016-12-09 11:29 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll 2016-09-25 08:38 - 2016-09-25 08:38 - 00959168 _____ () C:\Users\Nelleke\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\ClientTelemetry.dll 2011-01-15 17:49 - 2010-03-15 11:28 - 00166400 _____ () C:\Program Files\WinRAR\rarext.dll 2016-09-25 03:52 - 2016-09-25 03:52 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll 2017-01-10 20:15 - 2016-12-21 08:09 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll 2017-01-10 20:15 - 2016-12-21 07:54 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2017-01-10 20:15 - 2016-12-21 07:48 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2017-01-10 20:15 - 2016-12-21 07:48 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll 2017-01-10 20:15 - 2016-12-21 07:48 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2017-01-10 20:15 - 2016-12-21 07:53 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll 2017-02-06 20:47 - 2017-02-06 20:47 - 00073728 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.105.0_x64__kzf8qxf38zg5c\SkypeHost.exe 2017-02-06 20:47 - 2017-02-06 20:47 - 00179712 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.105.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll 2017-02-06 20:47 - 2017-02-06 20:47 - 42895872 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.105.0_x64__kzf8qxf38zg5c\SkyWrap.dll 2017-02-06 20:47 - 2017-02-06 20:47 - 02215424 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.105.0_x64__kzf8qxf38zg5c\roottools.dll 2010-01-18 19:21 - 2010-01-18 19:21 - 00568888 _____ () C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe 2015-11-02 22:33 - 2012-02-28 15:06 - 10468672 _____ () C:\Program Files\Digiarty\Air_Playit\airplayit.exe 2016-09-25 03:02 - 2016-12-29 14:16 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2016-11-23 12:06 - 2016-11-23 12:06 - 00019456 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 2016-11-23 12:06 - 2016-11-23 12:06 - 20433408 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll 2016-06-07 16:23 - 2016-06-07 16:24 - 00680448 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.DesignCore.dll 2016-11-23 12:06 - 2016-11-23 12:06 - 01046528 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Microsoft.Sharing.dll 2016-11-23 12:06 - 2016-11-23 12:06 - 00353792 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\Photos.Inking.dll 2016-03-03 20:33 - 2016-03-03 20:33 - 00291328 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.1118.10000.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll 2016-10-03 09:13 - 2014-05-13 11:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2016-10-03 09:13 - 2014-05-13 11:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl 2016-10-03 09:13 - 2014-05-13 11:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl 2016-10-03 09:13 - 2012-08-23 09:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll 2016-10-03 09:13 - 2012-04-03 16:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll 2016-12-15 13:53 - 2016-12-15 13:53 - 00083440 _____ () C:\Program Files (x86)\Plex\Plex Media Server\zlib.dll 2016-12-15 13:53 - 2016-12-15 13:53 - 00203248 _____ () C:\Program Files (x86)\Plex\Plex Media Server\libidn.dll 2017-01-13 15:49 - 2016-02-25 18:35 - 03843584 _____ () C:\Program Files (x86)\TorrentsTime Media Player\bin\torrent.dll 2017-02-01 17:34 - 2017-02-01 17:38 - 00148480 _____ () c:\program files (x86)\plokoy\qialhophcll.dll 2010-11-30 04:21 - 2011-04-29 23:28 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll 2017-02-08 09:03 - 2017-02-08 10:52 - 00183808 _____ () c:\programdata\winsapsvc\winsap.dll 2017-02-08 09:03 - 2017-02-09 10:31 - 00116224 _____ () c:\program files (x86)\gub\gubzl.dll 2011-05-09 16:12 - 2009-12-09 20:20 - 00126976 _____ () C:\Program Files (x86)\11n USB Wireless LAN Utility\EnumDevLib.dll 2015-11-02 22:33 - 2011-07-18 18:11 - 00435560 _____ () C:\Program Files\Digiarty\Air_Playit\CI.DLL 2015-11-02 22:33 - 2012-02-08 17:09 - 00780096 _____ () C:\Program Files\Digiarty\Air_Playit\SERVERADMIN.DLL 2015-11-02 22:33 - 2011-12-31 10:51 - 01654592 _____ () C:\Program Files\Digiarty\Air_Playit\CONFIG.DLL 2015-11-02 22:33 - 2011-07-12 02:25 - 00572336 _____ () C:\Program Files\Digiarty\Air_Playit\sqlite3.dll 2017-02-08 09:04 - 2017-02-12 20:43 - 00760320 _____ () c:\program files (x86)\winarcher\archer.dll ==================== Alternate Data Streams (gefilterd) ========= (Als een item is opgenomen in de fixlist, alleen de ADS wordt verwijderd.) AlternateDataStreams: C:\WINDOWS\system32\drivers:ucdrv-x64.sys [25444] AlternateDataStreams: C:\WINDOWS\system32\drivers:x64 [371912] AlternateDataStreams: C:\WINDOWS\system32\drivers:x86 [1213218] AlternateDataStreams: C:\ProgramData\Temp:036B81D9 [170] AlternateDataStreams: C:\ProgramData\Temp:0F38F234 [103] AlternateDataStreams: C:\ProgramData\Temp:109734F6 [116] AlternateDataStreams: C:\ProgramData\Temp:3D36932D [100] AlternateDataStreams: C:\ProgramData\Temp:3D922890 [143] AlternateDataStreams: C:\ProgramData\Temp:4E79C4F8 [130] AlternateDataStreams: C:\ProgramData\Temp:5C321E34 [119] AlternateDataStreams: C:\ProgramData\Temp:5E9B629B [121] AlternateDataStreams: C:\ProgramData\Temp:6E65510A [266] AlternateDataStreams: C:\ProgramData\Temp:72C99D4E [119] AlternateDataStreams: C:\ProgramData\Temp:BB8B6B1E [123] AlternateDataStreams: C:\ProgramData\Temp:BD34FFC5 [258] ==================== Veilige Modus (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. De "AlternateShell" waarde wordt hersteld.) ==================== Bestandskoppeling (gefilterd) =============== (Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd.) ==================== Internet Explorer vertrouwde/beperkte toegang =============== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd.) IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com Er zijn 7914 Meer websites. IE trusted site: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001\...\amazon.com -> hxxps://amazon.com IE restricted site: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001\...\007guard.com -> install.007guard.com IE restricted site: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001\...\008i.com -> 008i.com IE restricted site: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001\...\008k.com -> www.008k.com IE restricted site: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001\...\00hq.com -> www.00hq.com IE restricted site: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001\...\010402.com -> 010402.com IE restricted site: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001\...\0190-dialers.com -> 0190-dialers.com IE restricted site: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001\...\01i.info -> 01i.info IE restricted site: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com IE restricted site: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com IE restricted site: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001\...\05p.com -> 05p.com IE restricted site: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com IE restricted site: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com IE restricted site: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com IE restricted site: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001\...\0calories.net -> 0calories.net IE restricted site: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001\...\0cj.net -> 0cj.net IE restricted site: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001\...\0scan.com -> www.0scan.com IE restricted site: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001\...\1-2005-search.com -> www.1-2005-search.com IE restricted site: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com IE restricted site: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001\...\1-domains-registrations.com -> www.1-domains-registrations.com IE restricted site: HKU\S-1-5-21-2849121425-4159316806-1266491598-1001\...\1-se.com -> 1-se.com Er zijn 11957 Meer websites. ==================== Andere gebieden ============================ (Momenteel is er geen automatische fix voor dit onderdeel.) HKU\S-1-5-21-2849121425-4159316806-1266491598-1001\Control Panel\Desktop\\Wallpaper -> DNS Servers: 10.0.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is ingeschakeld. ==================== MSCONFIG/TASK MANAGER Uitgeschakelde items == MSCONFIG\startupreg: HPAdvisorDock => C:\Program Files (x86)\Hewlett-Packard\HP Advisor\DOCK\HPAdvisorDock.exe MSCONFIG\startupreg: OneDrive => "C:\Users\Nelleke\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background MSCONFIG\startupreg: Spotify => "C:\Users\Nelleke\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Nelleke\AppData\Roaming\Spotify\SpotifyWebHelper.exe" HKLM\...\StartupApproved\Run32: => "Reader Application Helper" HKU\S-1-5-21-2849121425-4159316806-1266491598-1001\...\StartupApproved\Run: => "Dropbox Update" HKU\S-1-5-21-2849121425-4159316806-1266491598-1001\...\StartupApproved\Run: => "Spotify" HKU\S-1-5-21-2849121425-4159316806-1266491598-1001\...\StartupApproved\Run: => "Plex Media Server" ==================== Firewall regels (gefilterd) =============== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) FirewallRules: [vm-monitoring-nb-session] => LPort=139 FirewallRules: [MSMQ-In-TCP] => %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-Out-TCP] => %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-In-UDP] => %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-Out-UDP] => %systemroot%\system32\mqsvc.exe FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => LPort=808 FirewallRules: [{893E8371-3F22-4F3D-8191-7CAFB3DAED44}] => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPPSdr\HPDiagnosticCoreUI.exe FirewallRules: [{C3D2AFC5-08DA-4371-8444-B6F4B58067DB}] => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPPSdr\HPDiagnosticCoreUI.exe FirewallRules: [UDP Query User{2FE84479-54FB-4703-B295-288666885A58}C:\program files\calibre2\calibre.exe] => C:\program files\calibre2\calibre.exe FirewallRules: [TCP Query User{750830A8-C64E-4270-83E4-C10CF268DCCD}C:\program files\calibre2\calibre.exe] => C:\program files\calibre2\calibre.exe FirewallRules: [UDP Query User{A1C21A22-AF68-4160-8A5E-AD4EF830DA66}C:\program files (x86)\hewlett-packard\hp support solutions\modules\hpdevicedetection3.exe] => C:\program files (x86)\hewlett-packard\hp support solutions\modules\hpdevicedetection3.exe FirewallRules: [TCP Query User{2AAA6B04-E972-4EA1-97C3-9559C7F7F369}C:\program files (x86)\hewlett-packard\hp support solutions\modules\hpdevicedetection3.exe] => C:\program files (x86)\hewlett-packard\hp support solutions\modules\hpdevicedetection3.exe FirewallRules: [{768BC85C-3E8A-4A5F-9BF4-629D85CCA5EF}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{F38B9B4A-0A24-4D38-9199-C30CBC41FDF6}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{99B72362-32D3-4BB9-BBC9-69F8215CF0D9}] => C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{7F376390-6B57-49A6-99BD-4C8C1A17F2EC}] => C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [UDP Query User{047526E3-B1F7-4ABF-ADF1-C74CB85BB3F6}C:\users\nelleke\appdata\roaming\spotify\spotify.exe] => C:\users\nelleke\appdata\roaming\spotify\spotify.exe FirewallRules: [TCP Query User{1B96493C-00B1-4C52-AB84-2087B0B672B1}C:\users\nelleke\appdata\roaming\spotify\spotify.exe] => C:\users\nelleke\appdata\roaming\spotify\spotify.exe FirewallRules: [{BDDBC82F-DBDD-43BA-97F5-AFB334498E91}] => C:\Program Files (x86)\AirPort\APAgent.exe FirewallRules: [UDP Query User{1D26FCCC-32B3-4EDE-B5A3-4A772BFF1C7E}C:\program files (x86)\airport\aputil.exe] => C:\program files (x86)\airport\aputil.exe FirewallRules: [TCP Query User{04C1962F-DAAE-4528-9B79-D290191F6CCF}C:\program files (x86)\airport\aputil.exe] => C:\program files (x86)\airport\aputil.exe FirewallRules: [{988C005E-07E6-4A0E-B3F4-F53A82B104C1}] => LPort=5353 FirewallRules: [{094D8795-D8DE-4F03-A2B2-EF2BF7B37F3D}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{29EC1A2E-A14C-4BAB-9EF9-AB167B1F670D}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{6C017BF7-F6CE-43FC-B22E-DF9E2B18447F}] => C:\Users\Nelleke\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{E803D00B-C9E9-424F-8A09-1CE9FE026C02}] => C:\Users\Nelleke\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [UDP Query User{874E951E-BE15-487C-A068-683C7A1B7A90}C:\program files (x86)\libreoffice 4\program\soffice.bin] => C:\program files (x86)\libreoffice 4\program\soffice.bin FirewallRules: [TCP Query User{55673ED3-E05B-43FF-B4D7-8A04E3DE4E46}C:\program files (x86)\libreoffice 4\program\soffice.bin] => C:\program files (x86)\libreoffice 4\program\soffice.bin FirewallRules: [{E5F23814-12AB-4E8B-884A-5969CB60AC5F}] => C:\Program Files (x86)\uTorrent\utorrent.exe FirewallRules: [{E3A14074-4FE7-4C7E-8781-24C70B8C4212}] => C:\Program Files (x86)\uTorrent\utorrent.exe FirewallRules: [UDP Query User{23FFCE1A-5D2F-4911-A80C-A76E19B030B2}C:\users\nelleke\appdata\roaming\spotify\spotify.exe] => C:\users\nelleke\appdata\roaming\spotify\spotify.exe FirewallRules: [TCP Query User{224BE398-C336-4EE5-8946-7E041766CA09}C:\users\nelleke\appdata\roaming\spotify\spotify.exe] => C:\users\nelleke\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{469E8E1A-B64B-4552-92A1-DD58BCCB1146}\\localhost\c$\@gmt-2013.02.23-01.50.03\program files (x86)\itunes\itunes.exe] => \\localhost\c$\@gmt-2013.02.23-01.50.03\program files (x86)\itunes\itunes.exe FirewallRules: [TCP Query User{BA96E722-A23E-449E-AD59-00FA73DAB534}\\localhost\c$\@gmt-2013.02.23-01.50.03\program files (x86)\itunes\itunes.exe] => \\localhost\c$\@gmt-2013.02.23-01.50.03\program files (x86)\itunes\itunes.exe FirewallRules: [{7F85FFD0-83AD-48C6-9CED-53105E7884C7}] => C:\Users\Nelleke\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe FirewallRules: [{993B9D11-01A2-4E70-9673-2477979AB0B5}] => C:\Users\Nelleke\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe FirewallRules: [{224FBCC7-8800-41E7-85D7-027C41C81013}] => C:\Program Files (x86)\Bejeweled 3\Bejeweled3.exe FirewallRules: [{5FC1741D-F089-4AD6-BB61-148C1AE1BECD}] => C:\Program Files (x86)\Bejeweled 3\Bejeweled3.exe FirewallRules: [{663F340E-64B1-4F30-97AA-0FA52326DFBD}] => C:\Program Files (x86)\Bejeweled 3\Bejeweled3.exe FirewallRules: [{EC9177CA-0E97-461D-A006-06ECE0BC3318}] => C:\Program Files (x86)\Bejeweled 3\Bejeweled3.exe FirewallRules: [{AA835294-CD34-4330-8F38-E0EAA1EFCFAF}] => C:\Windows\system32\mstsc.exe FirewallRules: [{909452B0-D020-49F1-AFE0-0E860B6FDA54}] => C:\Windows\system32\mstsc.exe FirewallRules: [{02EABF85-0B45-441F-891C-195D58CE8774}] => C:\Windows\system32\mstsc.exe FirewallRules: [{13099ED2-5709-4179-9604-95504DE9B1F0}] => C:\Windows\system32\mstsc.exe FirewallRules: [{9DF5EB16-BAC2-4D96-93B6-FCD7B707646C}] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloud.exe FirewallRules: [{BB5C3B52-AE51-4D84-A4B3-F68345DBD1CD}] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloud.exe FirewallRules: [{1E7FC368-626B-406F-9504-965290254A51}] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloud.exe FirewallRules: [{DD1B3C8A-C339-45B7-B916-8D9B045C7C67}] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloud.exe FirewallRules: [{B843AD49-7801-4171-9232-757A93CE897C}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe FirewallRules: [{70902F34-96C0-4720-AF07-9367CE283F4F}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe FirewallRules: [{418D5F73-FC1F-4DDE-8997-906AEC4D7144}] => C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe FirewallRules: [{4E1DC311-9E04-4CA5-A77E-505E6EFD0A49}] => C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe FirewallRules: [{9300BDD2-8CFD-4E5D-9557-13872470A5C4}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe FirewallRules: [{FA35452B-1A1A-44DD-89F8-BB6A40D09725}] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe FirewallRules: [{51E82976-98F1-490E-BFC8-370D53B1C9E6}] => LPort=1900 FirewallRules: [{F3DE8CC5-F9C9-44AA-A36B-213B0E542040}] => LPort=2869 FirewallRules: [{38EC691B-7639-4100-96EE-65FCF65EF60B}] => C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{B4B47D6D-A96A-46EA-819D-EDBD9E5E2CCC}] => LPort=53 FirewallRules: [{95354416-5681-4355-BC20-E244A1C6D07B}] => C:\Program Files (x86)\11n USB Wireless LAN Utility\RTLDHCP.exe FirewallRules: [{656922E6-FE51-4158-96DB-C7546B113BC1}] => C:\Program Files (x86)\11n USB Wireless LAN Utility\RTLDHCP.exe FirewallRules: [{12C40733-2E10-438B-A006-37B4F529D7DA}] => LPort=53 FirewallRules: [{F05B6247-0AF7-43D8-B086-0FD012376BCD}] => LPort=1542 FirewallRules: [{D893DF61-459B-41F7-A9B2-06816007BCDB}] => LPort=1542 FirewallRules: [{D705F034-B459-4102-B1DE-2E076CC39E6F}] => C:\Program Files (x86)\11n USB Wireless LAN Utility\RtWLan.exe FirewallRules: [{B1177246-A6FC-42AF-8E35-D6A94C5ABD46}] => C:\Program Files (x86)\11n USB Wireless LAN Utility\RtWLan.exe FirewallRules: [{4F943EB1-9B64-4DEB-B7B1-9812D459A108}] => C:\Program Files (x86)\Hewlett-Packard\MediaSmart\Video\HPMediaSmartVideo.exe FirewallRules: [{9AB9425D-39E5-4C05-BABD-30A659AA9328}] => C:\Program Files (x86)\Hewlett-Packard\MediaSmart\Photo\HPMediaSmartPhoto.exe FirewallRules: [{41A81C3C-54F9-4173-BF61-72EE8EBB4065}] => C:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPDVDSmart.exe FirewallRules: [{3634E58E-5061-4272-A9BE-12C6DD8916CB}] => c:\Program Files (x86)\CyberLink\PowerDirector\PDR8.EXE FirewallRules: [TCP Query User{94F857E9-F58B-48AF-9104-5DD68E6EE990}C:\program files\digiarty\air_playit\airps.exe] => C:\program files\digiarty\air_playit\airps.exe FirewallRules: [UDP Query User{13D09D6A-9A6F-43F3-94CF-8CDEE1EB2747}C:\program files\digiarty\air_playit\airps.exe] => C:\program files\digiarty\air_playit\airps.exe FirewallRules: [{8592475E-F479-4F2E-B68D-05685F2CBE86}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{3882A46F-FF14-4541-9AE2-3DDEF5F28743}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{017F51BB-9EDF-4594-8DCA-3ABE34A08EBB}] => C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{E59D509C-647B-4C0D-A95A-00450CB40F17}] => C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{904542B5-205F-4643-AF0E-703D8B56FD16}] => C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{5CCDA8A8-81EF-4AC5-90B7-862E147D3F2A}] => C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{A36ED57B-03E2-4DB0-973C-EBCEC30714A2}] => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPDeviceDetection3.exe FirewallRules: [TCP Query User{D7AC68B3-113B-4CF0-8D60-3A0B2812FC69}C:\program files (x86)\hewlett-packard\touchsmart\music\hptouchsmartmusic.exe] => C:\program files (x86)\hewlett-packard\touchsmart\music\hptouchsmartmusic.exe FirewallRules: [UDP Query User{ED17CFF5-98AA-4CF4-8F37-AB3751C7398B}C:\program files (x86)\hewlett-packard\touchsmart\music\hptouchsmartmusic.exe] => C:\program files (x86)\hewlett-packard\touchsmart\music\hptouchsmartmusic.exe FirewallRules: [{62C59CEB-D4FF-4C0E-AA8F-9B27AF17F0DD}] => C:\Program Files\HP\HP ENVY 5530 series\Bin\DeviceSetup.exe FirewallRules: [{0AFB3947-6C8D-47D3-B9F0-A2EED088F0B0}] => LPort=5357 FirewallRules: [{2C9E6980-8EB2-423A-BD2E-E31895F76559}] => C:\Program Files\HP\HP ENVY 5530 series\Bin\HPNetworkCommunicatorCom.exe FirewallRules: [TCP Query User{DFE33FB9-9F30-4E68-91CD-38DBAB3A44CC}C:\program files (x86)\glarysoft\software update pro\softwareupdatepro.exe] => C:\program files (x86)\glarysoft\software update pro\softwareupdatepro.exe FirewallRules: [UDP Query User{8E9C850F-60BC-45DE-ADDA-9B35E6A6C023}C:\program files (x86)\glarysoft\software update pro\softwareupdatepro.exe] => C:\program files (x86)\glarysoft\software update pro\softwareupdatepro.exe FirewallRules: [TCP Query User{8BC87C5E-6063-42A9-8EE3-C4E1240CEA8A}C:\program files (x86)\glarysoft\software update pro\softwareupdatepro.exe] => C:\program files (x86)\glarysoft\software update pro\softwareupdatepro.exe FirewallRules: [UDP Query User{16976FEE-DA71-4F70-AFED-BD7C721A8BF9}C:\program files (x86)\glarysoft\software update pro\softwareupdatepro.exe] => C:\program files (x86)\glarysoft\software update pro\softwareupdatepro.exe FirewallRules: [TCP Query User{74265355-50A8-4A72-8D88-780B4658FC65}C:\program files (x86)\utorrent\utorrent.exe] => C:\program files (x86)\utorrent\utorrent.exe FirewallRules: [UDP Query User{7839F126-4057-4FD5-A33D-8F1859DC9E54}C:\program files (x86)\utorrent\utorrent.exe] => C:\program files (x86)\utorrent\utorrent.exe FirewallRules: [TCP Query User{91F0B6E0-D495-4DFD-9A31-3A0C2CBAE1DB}C:\program files\digiarty\air_playit\airps.exe] => C:\program files\digiarty\air_playit\airps.exe FirewallRules: [UDP Query User{787EC8FA-C2F8-4642-A21A-9C588E761848}C:\program files\digiarty\air_playit\airps.exe] => C:\program files\digiarty\air_playit\airps.exe FirewallRules: [{6FF60B68-D638-45B5-A639-08104D992429}] => C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe FirewallRules: [{6F5025A0-942A-43A1-AD58-6D6BA49CCAAE}] => C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe FirewallRules: [{5CCDCA82-F869-4276-9EE1-7BBF34A19F4B}] => C:\Program Files (x86)\TorrentsTime Media Player\bin\chromecast\node.exe FirewallRules: [{02F7C828-E75C-4BB9-9B21-A40FE5464F8A}] => C:\Program Files (x86)\TorrentsTime Media Player\bin\chromecast\node.exe FirewallRules: [{01EA4A2A-FC34-4E19-9950-ACA80DB61C0C}] => C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe FirewallRules: [{A7D4F480-8457-45E2-BFA4-4F5FBAC15FC7}] => C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe FirewallRules: [{B485B429-305B-449B-ADE3-BCEFBBDB8E5C}] => C:\Program Files (x86)\Plex\Plex Media Server\Plex DLNA Server.exe FirewallRules: [{F10379D0-4458-4F49-8625-4B62C063EC9B}] => C:\Program Files\iTunes\iTunes.exe FirewallRules: [TCP Query User{2B10BB53-E219-4EB0-BEC8-84A097C07988}C:\users\nelleke\appdata\local\temp\is-4s47n.tmp\download\minithunderplatform.exe] => C:\users\nelleke\appdata\local\temp\is-4s47n.tmp\download\minithunderplatform.exe FirewallRules: [UDP Query User{40150506-8FEE-4C26-A8A3-3954625CF608}C:\users\nelleke\appdata\local\temp\is-4s47n.tmp\download\minithunderplatform.exe] => C:\users\nelleke\appdata\local\temp\is-4s47n.tmp\download\minithunderplatform.exe FirewallRules: [{DD19AD32-1281-4554-815A-863F11425898}] => C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe FirewallRules: [{A6650233-E357-4A3F-928E-BB7D827FCDCF}] => C:\Program Files (x86)\UCBrowser\Application\UCBrowser.exe StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service ==================== Herstelpunten ========================= 01-02-2017 16:03:45 Gepland controlepunt 02-02-2017 16:38:00 Removed Brother P-touch Update Software. 08-02-2017 21:45:29 Removed WinSnare 12-02-2017 19:53:44 Windows Update ==================== Defecte Apparaatbeheer Apparaten ============= ==================== Eventlog fouten: ========================= Applicatiefouten: ================== Error: (02/12/2017 08:12:03 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: HPNELLEKE) Description: Het pakket Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe+MicrosoftEdge is beëindigd omdat het onderbreken te lang duurde. Error: (02/12/2017 08:11:44 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Naam van toepassing met fout: microsoftedgecp.exe, versie: 11.0.14393.82, tijdstempel: 0x57a55786 Naam van module met fout: unknown, versie: 0.0.0.0, tijdstempel: 0x00000000 Uitzonderingscode: 0xc0000604 Foutmarge: 0x0000000000000000 Id van proces met fout: 0x33f0 Starttijd van toepassing met fout: 0x01d28563c8115d53 Pad naar toepassing met fout: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe Pad naar module met fout: unknown Rapport-id: 08ee4935-1167-4dc2-a867-a4f21e01c3e5 Volledige pakketnaam met fout: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe Relatieve toepassings-id van pakket met fout: MicrosoftEdge Error: (02/12/2017 08:11:20 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Naam van toepassing met fout: microsoftedgecp.exe, versie: 11.0.14393.82, tijdstempel: 0x57a55786 Naam van module met fout: unknown, versie: 0.0.0.0, tijdstempel: 0x00000000 Uitzonderingscode: 0xc0000604 Foutmarge: 0x0000000000000000 Id van proces met fout: 0x33f0 Starttijd van toepassing met fout: 0x01d28563c8115d53 Pad naar toepassing met fout: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe Pad naar module met fout: unknown Rapport-id: 1453a5c7-41e4-4c0e-a60a-f5e10526ca45 Volledige pakketnaam met fout: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe Relatieve toepassings-id van pakket met fout: MicrosoftEdge Error: (02/12/2017 07:54:27 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: De service Cryptografische services is mislukt tijdens het verwerken van aanroep OnIdentity() op het object System Writer. Details: AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol. System Error: Toegang geweigerd. . Error: (02/12/2017 07:52:49 PM) (Source: Perflib) (EventID: 1008) (User: ) Description: De openprocedure voor de BITS-service in DLL-bestand C:\Windows\System32\bitsperf.dll is mislukt. Prestatiemetergegevens voor deze service zijn niet beschikbaar. De eerste vier bytes (DWORD) in de sectie Gegevens bevatten de foutcode. Error: (02/12/2017 07:51:42 PM) (Source: MsiInstaller) (EventID: 1002) (User: HPNELLEKE) Description: Onverwachte of ontbrekende waarde (naam: PackageName, waarde: ) in sleutel HKLM\Software\Classes\Installer\Products\B97CF7F995034624490593BE63E82352\SourceList Error: (02/12/2017 07:50:41 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Naam van toepassing met fout: EReporter.exe, versie: 3.2.47.1, tijdstempel: 0x53d97094 Naam van module met fout: KERNELBASE.dll, versie: 10.0.14393.479, tijdstempel: 0x58256d37 Uitzonderingscode: 0xc06d007e Foutmarge: 0x000da832 Id van proces met fout: 0x1174 Starttijd van toepassing met fout: 0x01d28560e86114a1 Pad naar toepassing met fout: C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe Pad naar module met fout: C:\WINDOWS\System32\KERNELBASE.dll Rapport-id: cb449889-455a-48f3-8284-839f949cb68c Volledige pakketnaam met fout: Relatieve toepassings-id van pakket met fout: Error: (02/12/2017 07:48:48 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Naam van toepassing met fout: iCloudServices.exe, versie: 3.2.23.1, tijdstempel: 0x53d97094 Naam van module met fout: KERNELBASE.dll, versie: 10.0.14393.479, tijdstempel: 0x58256d37 Uitzonderingscode: 0xc06d007e Foutmarge: 0x000da832 Id van proces met fout: 0x393c Starttijd van toepassing met fout: 0x01d28560a5771a8a Pad naar toepassing met fout: C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe Pad naar module met fout: C:\WINDOWS\System32\KERNELBASE.dll Rapport-id: 713c82f5-f699-463b-9add-60b15779c817 Volledige pakketnaam met fout: Relatieve toepassings-id van pakket met fout: Error: (02/12/2017 07:48:45 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Naam van toepassing met fout: ApplePhotoStreams.exe, versie: 7.16.5.1, tijdstempel: 0x53d97094 Naam van module met fout: KERNELBASE.dll, versie: 10.0.14393.479, tijdstempel: 0x58256d37 Uitzonderingscode: 0xc06d007e Foutmarge: 0x000da832 Id van proces met fout: 0x1c94 Starttijd van toepassing met fout: 0x01d28560a322b84b Pad naar toepassing met fout: C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe Pad naar module met fout: C:\WINDOWS\System32\KERNELBASE.dll Rapport-id: 4e45855b-ba38-4c68-9de6-a6c5ea7835cf Volledige pakketnaam met fout: Relatieve toepassings-id van pakket met fout: Error: (02/12/2017 07:48:45 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Naam van toepassing met fout: iCloudDrive.exe, versie: 1.2.34.1, tijdstempel: 0x53d97094 Naam van module met fout: KERNELBASE.dll, versie: 10.0.14393.479, tijdstempel: 0x58256d37 Uitzonderingscode: 0xc06d007e Foutmarge: 0x000da832 Id van proces met fout: 0x18dc Starttijd van toepassing met fout: 0x01d28560a2e83613 Pad naar toepassing met fout: C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe Pad naar module met fout: C:\WINDOWS\System32\KERNELBASE.dll Rapport-id: 7a78c83c-4736-4764-9dab-fbe8babf343f Volledige pakketnaam met fout: Relatieve toepassings-id van pakket met fout: Systeemfouten: ============= Error: (02/12/2017 07:48:23 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {8D8F4F83-3594-4F07-8369-FC3C3CAE4919} en APPID {F72671A9-012C-4725-9D2F-2A4D32D65169} aan de gebruiker NT AUTHORITY\SYSTEM SID (S-1-5-18) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (02/10/2017 08:12:44 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {8D8F4F83-3594-4F07-8369-FC3C3CAE4919} en APPID {F72671A9-012C-4725-9D2F-2A4D32D65169} aan de gebruiker NT AUTHORITY\SYSTEM SID (S-1-5-18) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (02/09/2017 08:36:01 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: De WinSnare-service is onverwacht gestopt. Dit is 1 keer gebeurd. De volgende herstelbewerking zal over 21600000 milliseconden worden uitgevoerd: Service opnieuw starten. Error: (02/09/2017 08:16:17 AM) (Source: Service Control Manager) (EventID: 7030) (User: ) Description: De ed2k idle service-service staat aangeduid als een interactieve service. Het systeem is echter zodanig geconfigureerd dat interactieve services niet zijn toegestaan. Deze service werkt mogelijk niet juist. Error: (02/09/2017 08:08:31 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {8D8F4F83-3594-4F07-8369-FC3C3CAE4919} en APPID {F72671A9-012C-4725-9D2F-2A4D32D65169} aan de gebruiker NT AUTHORITY\SYSTEM SID (S-1-5-18) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (02/08/2017 09:41:21 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: De WinSnare-service is onverwacht beëindigd. Dit is nu 1 keer gebeurd. Error: (02/08/2017 03:56:08 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {8D8F4F83-3594-4F07-8369-FC3C3CAE4919} en APPID {F72671A9-012C-4725-9D2F-2A4D32D65169} aan de gebruiker NT AUTHORITY\SYSTEM SID (S-1-5-18) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (02/08/2017 09:25:49 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: De GubZL-service is onverwacht beëindigd. Dit is nu 1 keer gebeurd. Error: (02/08/2017 09:21:19 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: De WinSnare-service is onverwacht gestopt. Dit is 1 keer gebeurd. De volgende herstelbewerking zal over 21600000 milliseconden worden uitgevoerd: Service opnieuw starten. Error: (02/08/2017 09:03:42 AM) (Source: Service Control Manager) (EventID: 7030) (User: ) Description: De iThemes5-service staat aangeduid als een interactieve service. Het systeem is echter zodanig geconfigureerd dat interactieve services niet zijn toegestaan. Deze service werkt mogelijk niet juist. CodeIntegrity: =================================== Date: 2017-02-01 18:13:05.644 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\winhttp.dll because the set of per-page image hashes could not be found on the system. Date: 2017-02-01 18:13:05.627 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\winhttp.dll because the set of per-page image hashes could not be found on the system. Date: 2017-02-01 18:12:29.951 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\winhttp.dll because the set of per-page image hashes could not be found on the system. Date: 2017-02-01 18:12:29.935 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\winhttp.dll because the set of per-page image hashes could not be found on the system. Date: 2016-10-12 21:35:23.155 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-10-12 21:35:23.139 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-10-05 07:51:04.878 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-10-05 07:51:04.877 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-10-05 07:51:04.874 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-10-05 07:51:04.467 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. ==================== Geheugen info =========================== Processor: Intel(R) Core(TM) i7 CPU 870 @ 2.93GHz Percentage geheugen in gebruik: 49% Totaal fysiek RAM-geheugen: 6103.07 MB Beschikbaar fysiek RAM-geheugen: 3073.11 MB Totaal Virtueel geheugen: 6487.07 MB Beschikbaar Virtual geheugen: 2916.41 MB ==================== Schijven ================================ Drive c: (OS) (Fixed) (Total:1383.62 GB) (Free:572.36 GB) NTFS Drive d: (HP_RECOVERY) (Fixed) (Total:13.1 GB) (Free:12.62 GB) NTFS Drive e: (QL_Series) (CDROM) (Total:0.42 GB) (Free:0 GB) CDFS Drive z: (nieuwe schijf) (Fixed) (Total:2794.39 GB) (Free:791.87 GB) NTFS ==================== MBR & Partitietabel ================== ======================================================== Disk: 0 (Size: 1397.3 GB) (Disk ID: 7FFC50F4) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=1383.6 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=450 MB) - (Type=27) Partition 4: (Not Active) - (Size=13.1 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (Size: 2794.5 GB) (Disk ID: F428654E) Partition: GPT. ==================== Eind van Addition.txt ============================