Scanresultaten van Farbar Recovery Scan Tool (FRST) (x64) Versie: 15-02-2017 02 Gestart door Nelleke (Beheerder) op HPNELLEKE (16-02-2017 19:42:51) Gestart vanaf C:\Users\Nelleke\Desktop\FRST-OlderVersion Geladen Profielen: Nelleke (Beschikbare Profielen: Nelleke & UpdatusUser & Gast) Platform: Windows 10 Home Versie 1607 (X64) Taal: Nederlands (Nederland) Internet Explorer Versie 11 (Standaardbrowser: Edge) Boot Modus: Normal Handleiding voor Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processen (gefilterd) ================= (Als een item is opgenomen in de fixlist, het proces zal worden gesloten. Het bestand zal niet worden verplaatst.) (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.105.0_x64__kzf8qxf38zg5c\SkypeHost.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe (Microsoft Corporation) C:\Windows\System32\browser_broker.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Microsoft Corporation) C:\Windows\System32\InstallAgent.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe () C:\Program Files\WindowsApps\Microsoft.Getstarted_4.5.6.0_x64__8wekyb3d8bbwe\WhatsNew.Store.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Register (gefilterd) ==================== (Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.) HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-09-25] (Microsoft Corporation) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-12-13] (Realtek Semiconductor) ==================== Internet (gefilterd) ==================== (Als een item is opgenomen in de fixlist, als het een registry item is wordt verwijderd of hersteld naar de standaard.) Tcpip\Parameters: [DhcpNameServer] 10.0.1.1 Tcpip\..\Interfaces\{8025813e-5f50-4633-8e85-1fcc860c4350}: [DhcpNameServer] 10.0.1.1 Internet Explorer: ================== FireFox: ======== FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-12-29] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-12-29] (NVIDIA Corporation) Chrome: ======= CHR HomePage: Default -> hxxp://istart.webssearches.com/?type=hppp&ts=1421861775&from=exp&uid=ST31500341AS_9VS4JM6Y CHR StartupUrls: Default -> "hxxp://istart.webssearches.com/?type=hppp&ts=1421861775&from=exp&uid=ST31500341AS_9VS4JM6Y","hxxps://www.google.nl/" CHR Profile: C:\Users\Nelleke\AppData\Local\Google\Chrome\User Data\Default [2017-02-15] CHR Extension: (Google Presentaties) - C:\Users\Nelleke\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-02-14] CHR Extension: (Google Documenten) - C:\Users\Nelleke\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-02-14] CHR Extension: (Google Drive) - C:\Users\Nelleke\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-02-14] CHR Extension: (YouTube) - C:\Users\Nelleke\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-02-14] CHR Extension: (Google Spreadsheets) - C:\Users\Nelleke\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-02-14] CHR Extension: (Offline Documenten) - C:\Users\Nelleke\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-02-15] CHR Extension: (Betalingen via Chrome Web Store) - C:\Users\Nelleke\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-02-14] CHR Extension: (Gmail) - C:\Users\Nelleke\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-02-14] CHR Extension: (Chrome Media Router) - C:\Users\Nelleke\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-02-14] ==================== Services (gefilterd) ==================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-12-29] (NVIDIA Corporation) R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [289496 2013-12-13] (Realtek Semiconductor) R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation) ===================== Drivers (gefilterd) ====================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) S3 HPEWSFXBULK; C:\WINDOWS\system32\drivers\hpfx64bulk.sys [20504 2009-02-26] (Hewlett Packard) S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] () R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvhdcwu.inf_amd64_b4551921048bc87c\nvlddmkm.sys [14190520 2017-01-17] (NVIDIA Corporation) R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [589824 2016-07-16] (Realtek ) S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation) R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation) ==================== NetSvcs (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) ==================== Een Maand Aangemaakt bestanden en mappen ======== (Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.) 2017-02-16 18:47 - 2017-02-16 18:47 - 00000000 ___HD C:\OneDriveTemp 2017-02-15 17:51 - 2017-02-15 17:51 - 00000325 _____ C:\Users\Nelleke\Downloads\fixlist.txt 2017-02-15 13:11 - 2017-02-15 13:11 - 00000000 ____D C:\Users\Nelleke\AppData\Roaming\Macromedia 2017-02-15 12:57 - 2017-02-16 19:42 - 00000000 ____D C:\Users\Nelleke\Desktop\FRST-OlderVersion 2017-02-15 10:43 - 2017-02-15 10:30 - 00485032 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2017-02-15 10:41 - 2017-02-15 10:43 - 00000000 ____D C:\WINDOWS\system32\MRT 2017-02-15 10:40 - 2017-02-15 10:40 - 135657872 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2017-02-15 10:26 - 2017-02-15 10:26 - 00001388 _____ C:\Users\Nelleke\Desktop\Mozilla Firefox - Snelkoppeling.lnk 2017-02-15 10:25 - 2017-02-15 10:26 - 00000000 ____D C:\Users\Nelleke\AppData\Local\PackageStaging 2017-02-14 21:43 - 2017-02-15 13:02 - 00000000 ____D C:\Program Files (x86)\Google 2017-02-14 21:43 - 2017-02-14 21:44 - 00000000 ____D C:\Users\Nelleke\AppData\Local\Google 2017-02-14 21:43 - 2017-02-14 21:43 - 01129376 _____ (Google Inc.) C:\Users\Nelleke\Downloads\ChromeSetup (1).exe 2017-02-14 21:41 - 2017-02-15 17:57 - 00000000 ____D C:\Users\Nelleke\AppData\Local\CrashDumps 2017-02-14 21:38 - 2017-02-14 21:38 - 00003282 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2 2017-02-14 21:38 - 2017-02-14 21:38 - 00000000 ____D C:\Users\Nelleke\AppData\Local\MicrosoftEdge 2017-02-14 21:37 - 2017-02-14 21:38 - 00002395 _____ C:\Users\Nelleke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2017-02-14 21:37 - 2017-02-14 21:37 - 00000000 ____D C:\Users\Nelleke\AppData\Roaming\Skype 2017-02-14 21:37 - 2017-02-14 21:37 - 00000000 ____D C:\ProgramData\Microsoft OneDrive 2017-02-14 21:36 - 2017-02-14 21:37 - 00000000 ____D C:\Users\Nelleke\AppData\Local\Comms 2017-02-14 21:35 - 2017-02-14 21:35 - 00000000 ____D C:\Users\Nelleke\AppData\Local\Publishers 2017-02-14 21:34 - 2017-02-15 12:59 - 00000000 ____D C:\Users\Nelleke\AppData\Local\Packages 2017-02-14 21:34 - 2017-02-15 10:24 - 00000000 ____D C:\Users\Nelleke\AppData\Local\ConnectedDevicesPlatform 2017-02-14 21:34 - 2017-02-14 21:34 - 00000020 ___SH C:\Users\Nelleke\ntuser.ini 2017-02-14 21:34 - 2017-02-14 21:34 - 00000000 ____D C:\Users\Nelleke\AppData\Roaming\Adobe 2017-02-14 21:34 - 2017-02-14 21:34 - 00000000 ____D C:\Users\Nelleke\AppData\Local\VirtualStore 2017-02-14 21:34 - 2017-02-14 21:34 - 00000000 ____D C:\Users\Nelleke\AppData\Local\TileDataLayer 2017-02-14 21:15 - 2017-02-14 21:15 - 00000000 ____D C:\Program Files (x86)\VulkanRT 2017-02-14 21:15 - 2017-01-17 05:57 - 00222648 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll 2017-02-14 21:15 - 2017-01-17 05:57 - 00210360 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll 2017-02-14 21:15 - 2016-12-29 14:10 - 00001951 _____ C:\WINDOWS\NvContainerRecovery.bat 2017-02-14 21:15 - 2016-12-29 13:28 - 00133056 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe 2017-02-14 21:15 - 2016-09-09 19:25 - 00269600 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll 2017-02-14 21:15 - 2016-09-09 19:25 - 00261920 _____ C:\WINDOWS\system32\vulkan-1.dll 2017-02-14 21:15 - 2016-09-09 19:25 - 00110880 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe 2017-02-14 21:15 - 2016-09-09 19:24 - 00125216 _____ C:\WINDOWS\system32\vulkaninfo.exe 2017-02-14 21:09 - 2017-02-14 21:09 - 00000000 _SHDL C:\Users\Default\Sjablonen 2017-02-14 21:09 - 2017-02-14 21:09 - 00000000 _SHDL C:\Users\Default\Netwerkprinteromgeving 2017-02-14 21:09 - 2017-02-14 21:09 - 00000000 _SHDL C:\Users\Default\Mijn documenten 2017-02-14 21:09 - 2017-02-14 21:09 - 00000000 _SHDL C:\Users\Default\Menu Start 2017-02-14 21:09 - 2017-02-14 21:09 - 00000000 _SHDL C:\Users\Default\Documents\Mijn video's 2017-02-14 21:09 - 2017-02-14 21:09 - 00000000 _SHDL C:\Users\Default\Documents\Mijn muziek 2017-02-14 21:09 - 2017-02-14 21:09 - 00000000 _SHDL C:\Users\Default\Documents\Mijn afbeeldingen 2017-02-14 21:09 - 2017-02-14 21:09 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programma's 2017-02-14 21:09 - 2017-02-14 21:09 - 00000000 _SHDL C:\Users\Default\AppData\Local\Geschiedenis 2017-02-14 21:09 - 2017-02-14 21:09 - 00000000 _SHDL C:\Users\Default User\Documents\Mijn video's 2017-02-14 21:09 - 2017-02-14 21:09 - 00000000 _SHDL C:\Users\Default User\Documents\Mijn muziek 2017-02-14 21:09 - 2017-02-14 21:09 - 00000000 _SHDL C:\Users\Default User\Documents\Mijn afbeeldingen 2017-02-14 21:09 - 2017-02-14 21:09 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programma's 2017-02-14 21:09 - 2017-02-14 21:09 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Geschiedenis 2017-02-14 21:09 - 2017-02-14 21:09 - 00000000 _SHDL C:\Users\Default User 2017-02-14 21:09 - 2017-02-14 21:09 - 00000000 _SHDL C:\Users\All Users 2017-02-14 21:09 - 2017-02-14 21:09 - 00000000 _SHDL C:\ProgramData\Sjablonen 2017-02-14 21:09 - 2017-02-14 21:09 - 00000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programma's 2017-02-14 21:09 - 2017-02-14 21:09 - 00000000 _SHDL C:\ProgramData\Menu Start 2017-02-14 21:09 - 2017-02-14 21:09 - 00000000 _SHDL C:\ProgramData\Favorieten 2017-02-14 21:09 - 2017-02-14 21:09 - 00000000 _SHDL C:\ProgramData\Documenten 2017-02-14 21:09 - 2017-02-14 21:09 - 00000000 _SHDL C:\ProgramData\Bureaublad 2017-02-14 21:08 - 2017-02-14 21:08 - 00016770 _____ C:\Users\Nelleke\Desktop\Verwijderde apps.html 2017-02-14 21:08 - 2017-02-14 21:08 - 00015452 _____ C:\Users\UpdatusUser\Desktop\Verwijderde apps.html 2017-02-14 21:08 - 2017-02-14 21:08 - 00015452 _____ C:\Users\Gast\Desktop\Verwijderde apps.html 2017-02-14 21:08 - 2017-02-14 21:08 - 00015452 _____ C:\Users\DefaultAppPool\Desktop\Verwijderde apps.html 2017-02-14 21:07 - 2017-02-15 19:29 - 01908562 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2017-02-14 20:59 - 2017-02-16 18:46 - 00000000 ____D C:\Users\Nelleke 2017-02-14 20:59 - 2017-02-14 21:08 - 00000000 ____D C:\Users\DefaultAppPool 2017-02-14 20:59 - 2017-02-14 21:07 - 00000000 ____D C:\Users\UpdatusUser 2017-02-14 20:59 - 2017-02-14 21:07 - 00000000 ____D C:\Users\Gast 2017-02-14 20:59 - 2017-02-14 20:59 - 00000000 _SHDL C:\Users\UpdatusUser\Sjablonen 2017-02-14 20:59 - 2017-02-14 20:59 - 00000000 _SHDL C:\Users\UpdatusUser\Netwerkprinteromgeving 2017-02-14 20:59 - 2017-02-14 20:59 - 00000000 _SHDL C:\Users\UpdatusUser\Mijn documenten 2017-02-14 20:59 - 2017-02-14 20:59 - 00000000 _SHDL C:\Users\UpdatusUser\Menu Start 2017-02-14 20:59 - 2017-02-14 20:59 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Mijn video's 2017-02-14 20:59 - 2017-02-14 20:59 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Mijn muziek 2017-02-14 20:59 - 2017-02-14 20:59 - 00000000 _SHDL C:\Users\UpdatusUser\Documents\Mijn afbeeldingen 2017-02-14 20:59 - 2017-02-14 20:59 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programma's 2017-02-14 20:59 - 2017-02-14 20:59 - 00000000 _SHDL C:\Users\UpdatusUser\AppData\Local\Geschiedenis 2017-02-14 20:59 - 2017-02-14 20:59 - 00000000 _SHDL C:\Users\Nelleke\Sjablonen 2017-02-14 20:59 - 2017-02-14 20:59 - 00000000 _SHDL C:\Users\Nelleke\Netwerkprinteromgeving 2017-02-14 20:59 - 2017-02-14 20:59 - 00000000 _SHDL C:\Users\Nelleke\Mijn documenten 2017-02-14 20:59 - 2017-02-14 20:59 - 00000000 _SHDL C:\Users\Nelleke\Menu Start 2017-02-14 20:59 - 2017-02-14 20:59 - 00000000 _SHDL C:\Users\Nelleke\Documents\Mijn video's 2017-02-14 20:59 - 2017-02-14 20:59 - 00000000 _SHDL C:\Users\Nelleke\Documents\Mijn muziek 2017-02-14 20:59 - 2017-02-14 20:59 - 00000000 _SHDL C:\Users\Nelleke\Documents\Mijn afbeeldingen 2017-02-14 20:59 - 2017-02-14 20:59 - 00000000 _SHDL C:\Users\Nelleke\AppData\Roaming\Microsoft\Windows\Start Menu\Programma's 2017-02-14 20:59 - 2017-02-14 20:59 - 00000000 _SHDL C:\Users\Nelleke\AppData\Local\Geschiedenis 2017-02-14 20:59 - 2017-02-14 20:59 - 00000000 _SHDL C:\Users\Gast\Sjablonen 2017-02-14 20:59 - 2017-02-14 20:59 - 00000000 _SHDL C:\Users\Gast\Netwerkprinteromgeving 2017-02-14 20:59 - 2017-02-14 20:59 - 00000000 _SHDL C:\Users\Gast\Mijn documenten 2017-02-14 20:59 - 2017-02-14 20:59 - 00000000 _SHDL C:\Users\Gast\Menu Start 2017-02-14 20:59 - 2017-02-14 20:59 - 00000000 _SHDL C:\Users\Gast\Documents\Mijn video's 2017-02-14 20:59 - 2017-02-14 20:59 - 00000000 _SHDL C:\Users\Gast\Documents\Mijn muziek 2017-02-14 20:59 - 2017-02-14 20:59 - 00000000 _SHDL C:\Users\Gast\Documents\Mijn afbeeldingen 2017-02-14 20:59 - 2017-02-14 20:59 - 00000000 _SHDL C:\Users\Gast\AppData\Roaming\Microsoft\Windows\Start Menu\Programma's 2017-02-14 20:59 - 2017-02-14 20:59 - 00000000 _SHDL C:\Users\Gast\AppData\Local\Geschiedenis 2017-02-14 20:59 - 2017-02-14 20:59 - 00000000 _SHDL C:\Users\DefaultAppPool\Sjablonen 2017-02-14 20:59 - 2017-02-14 20:59 - 00000000 _SHDL C:\Users\DefaultAppPool\Netwerkprinteromgeving 2017-02-14 20:59 - 2017-02-14 20:59 - 00000000 _SHDL C:\Users\DefaultAppPool\Mijn documenten 2017-02-14 20:59 - 2017-02-14 20:59 - 00000000 _SHDL C:\Users\DefaultAppPool\Menu Start 2017-02-14 20:59 - 2017-02-14 20:59 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Mijn video's 2017-02-14 20:59 - 2017-02-14 20:59 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Mijn muziek 2017-02-14 20:59 - 2017-02-14 20:59 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Mijn afbeeldingen 2017-02-14 20:59 - 2017-02-14 20:59 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programma's 2017-02-14 20:59 - 2017-02-14 20:59 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Geschiedenis 2017-02-14 20:53 - 2017-02-15 19:25 - 00000000 ____D C:\ProgramData\NVIDIA 2017-02-14 20:53 - 2017-02-14 21:16 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2017-02-14 20:53 - 2017-02-14 20:53 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM 2017-02-14 20:53 - 2017-02-14 20:53 - 00000000 ____D C:\WINDOWS\system32\SRSLabs 2017-02-14 20:53 - 2017-02-14 20:53 - 00000000 ____D C:\Program Files\Realtek 2017-02-14 20:53 - 2016-12-29 14:16 - 06384576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2017-02-14 20:53 - 2016-12-29 14:16 - 02475968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2017-02-14 20:53 - 2016-12-29 14:16 - 01762752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2017-02-14 20:53 - 2016-12-29 14:16 - 00546752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2017-02-14 20:53 - 2016-12-29 14:16 - 00392128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2017-02-14 20:53 - 2016-12-29 14:16 - 00083512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2017-02-14 20:53 - 2016-12-29 14:16 - 00069568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2017-02-14 20:53 - 2016-12-22 00:59 - 07651057 _____ C:\WINDOWS\system32\nvcoproc.bin 2017-02-14 20:52 - 2017-02-14 21:16 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2017-02-14 20:52 - 2017-02-14 21:15 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2017-02-14 20:52 - 2017-02-14 20:52 - 00000000 ____D C:\Program Files\Common Files\logishrd 2017-02-14 20:49 - 2016-07-16 12:41 - 02716672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2017-02-14 20:48 - 2017-02-14 20:48 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2017-02-14 20:47 - 2017-02-14 20:47 - 00000000 ____D C:\ProgramData\USOShared 2017-02-14 20:46 - 2017-02-16 19:25 - 00000000 ____D C:\WINDOWS\system32\SleepStudy 2017-02-14 20:46 - 2017-02-15 19:25 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2017-02-14 20:46 - 2017-02-15 19:24 - 00194312 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2017-02-14 20:43 - 2017-02-15 12:04 - 00000000 ____D C:\Windows.old 2017-02-14 20:43 - 2017-02-14 21:09 - 00000000 ___DC C:\WINDOWS\Panther 2017-02-14 20:43 - 2017-02-14 20:43 - 00000000 ____D C:\WINDOWS\InfusedApps 2017-02-14 20:42 - 2017-02-14 20:46 - 00000000 ____D C:\WINDOWS\ServiceProfiles 2017-02-14 20:42 - 2017-02-14 20:42 - 00008192 _____ C:\WINDOWS\system32\config\userdiff 2017-02-14 20:38 - 2017-02-14 20:38 - 00000000 ____D C:\WINDOWS\Setup 2017-02-14 20:34 - 2017-02-14 20:34 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer 2017-02-14 20:34 - 2017-02-14 20:34 - 00000000 ____D C:\WINDOWS\OCR 2017-02-14 20:34 - 2017-02-14 20:34 - 00000000 ____D C:\Program Files\Reference Assemblies 2017-02-14 20:34 - 2017-02-14 20:34 - 00000000 ____D C:\Program Files\MSBuild 2017-02-14 20:34 - 2017-02-14 20:34 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies 2017-02-14 20:34 - 2017-02-14 20:34 - 00000000 ____D C:\Program Files (x86)\MSBuild 2017-02-14 20:33 - 2017-02-15 19:29 - 00848184 _____ C:\WINDOWS\system32\perfh013.dat 2017-02-14 20:33 - 2017-02-15 19:29 - 00169118 _____ C:\WINDOWS\system32\perfc013.dat 2017-02-14 20:33 - 2017-02-14 20:33 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm 2017-02-14 20:33 - 2017-02-14 20:33 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN 2017-02-14 20:33 - 2017-02-14 20:33 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep 2017-02-14 20:33 - 2017-02-14 20:33 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr 2017-02-14 20:33 - 2017-02-14 20:33 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts 2017-02-14 20:33 - 2017-02-14 20:33 - 00000000 ____D C:\WINDOWS\SysWOW64\nl 2017-02-14 20:33 - 2017-02-14 20:33 - 00000000 ____D C:\WINDOWS\SysWOW64\0409 2017-02-14 20:33 - 2017-02-14 20:33 - 00000000 ____D C:\WINDOWS\system32\winrm 2017-02-14 20:33 - 2017-02-14 20:33 - 00000000 ____D C:\WINDOWS\system32\WCN 2017-02-14 20:33 - 2017-02-14 20:33 - 00000000 ____D C:\WINDOWS\system32\slmgr 2017-02-14 20:33 - 2017-02-14 20:33 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts 2017-02-14 20:33 - 2017-02-14 20:33 - 00000000 ____D C:\WINDOWS\system32\nl 2017-02-14 20:33 - 2017-02-14 20:33 - 00000000 ____D C:\WINDOWS\system32\0409 2017-02-14 20:33 - 2017-02-14 20:33 - 00000000 ____D C:\WINDOWS\DigitalLocker 2017-02-14 20:33 - 2017-02-14 20:32 - 00347466 _____ C:\WINDOWS\system32\perfi013.dat 2017-02-14 20:33 - 2017-02-14 20:32 - 00045376 _____ C:\WINDOWS\system32\perfd013.dat 2017-02-14 20:28 - 2016-12-23 00:13 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2017-02-14 20:28 - 2016-12-23 00:13 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2017-02-14 20:27 - 2017-02-14 20:23 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll 2017-02-14 20:27 - 2017-02-14 20:23 - 00000741 _____ C:\WINDOWS\SysWOW64\NOISE.DAT 2017-02-14 20:26 - 2017-02-16 19:00 - 00000000 ___HD C:\Program Files\WindowsApps 2017-02-14 20:26 - 2017-02-16 18:51 - 00000000 ____D C:\WINDOWS\AppReadiness 2017-02-14 20:26 - 2017-02-15 19:21 - 00000000 ___SD C:\WINDOWS\SysWOW64\F12 2017-02-14 20:26 - 2017-02-15 19:21 - 00000000 ____D C:\WINDOWS\SysWOW64\setup 2017-02-14 20:26 - 2017-02-15 19:21 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe 2017-02-14 20:26 - 2017-02-15 19:20 - 00000000 ___SD C:\WINDOWS\system32\F12 2017-02-14 20:26 - 2017-02-15 19:20 - 00000000 ___SD C:\WINDOWS\system32\dsc 2017-02-14 20:26 - 2017-02-15 19:20 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs 2017-02-14 20:26 - 2017-02-15 19:20 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2017-02-14 20:26 - 2017-02-15 19:20 - 00000000 ___RD C:\Program Files\Windows Defender 2017-02-14 20:26 - 2017-02-15 19:20 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism 2017-02-14 20:26 - 2017-02-15 19:20 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2017-02-14 20:26 - 2017-02-15 19:20 - 00000000 ____D C:\WINDOWS\system32\Sysprep 2017-02-14 20:26 - 2017-02-15 19:20 - 00000000 ____D C:\WINDOWS\system32\setup 2017-02-14 20:26 - 2017-02-15 19:20 - 00000000 ____D C:\WINDOWS\system32\oobe 2017-02-14 20:26 - 2017-02-15 19:20 - 00000000 ____D C:\WINDOWS\system32\migwiz 2017-02-14 20:26 - 2017-02-15 19:20 - 00000000 ____D C:\WINDOWS\system32\Dism 2017-02-14 20:26 - 2017-02-15 19:20 - 00000000 ____D C:\WINDOWS\system32\appraiser 2017-02-14 20:26 - 2017-02-15 19:20 - 00000000 ____D C:\WINDOWS\ShellExperiences 2017-02-14 20:26 - 2017-02-15 19:20 - 00000000 ____D C:\WINDOWS\Provisioning 2017-02-14 20:26 - 2017-02-15 19:20 - 00000000 ____D C:\WINDOWS\bcastdvr 2017-02-14 20:26 - 2017-02-15 19:20 - 00000000 ____D C:\Program Files\Windows Photo Viewer 2017-02-14 20:26 - 2017-02-15 19:20 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2017-02-14 20:26 - 2017-02-15 19:20 - 00000000 ____D C:\Program Files (x86)\Windows Defender 2017-02-14 20:26 - 2017-02-15 19:19 - 00015425 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml 2017-02-14 20:26 - 2017-02-15 12:50 - 00000000 ____D C:\WINDOWS\LiveKernelReports 2017-02-14 20:26 - 2017-02-15 10:26 - 00000000 ____D C:\WINDOWS\appcompat 2017-02-14 20:26 - 2017-02-14 21:12 - 00000000 ____D C:\WINDOWS\rescache 2017-02-14 20:26 - 2017-02-14 21:08 - 00000000 __RHD C:\Users\Public\Libraries 2017-02-14 20:26 - 2017-02-14 21:08 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase 2017-02-14 20:26 - 2017-02-14 21:04 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2017-02-14 20:26 - 2017-02-14 21:00 - 00000000 ____D C:\WINDOWS\system32\FxsTmp 2017-02-14 20:26 - 2017-02-14 20:54 - 00000000 ___RD C:\WINDOWS\PrintDialog 2017-02-14 20:26 - 2017-02-14 20:54 - 00000000 ___RD C:\WINDOWS\MiracastView 2017-02-14 20:26 - 2017-02-14 20:53 - 00000000 ____D C:\WINDOWS\Help 2017-02-14 20:26 - 2017-02-14 20:47 - 00000000 ____D C:\ProgramData\USOPrivate 2017-02-14 20:26 - 2017-02-14 20:43 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template 2017-02-14 20:26 - 2017-02-14 20:34 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI 2017-02-14 20:26 - 2017-02-14 20:34 - 00000000 ____D C:\WINDOWS\SystemApps 2017-02-14 20:26 - 2017-02-14 20:34 - 00000000 ____D C:\WINDOWS\system32\MUI 2017-02-14 20:26 - 2017-02-14 20:33 - 00000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs 2017-02-14 20:26 - 2017-02-14 20:33 - 00000000 ____D C:\WINDOWS\SysWOW64\Com 2017-02-14 20:26 - 2017-02-14 20:33 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform 2017-02-14 20:26 - 2017-02-14 20:33 - 00000000 ____D C:\WINDOWS\system32\Com 2017-02-14 20:26 - 2017-02-14 20:33 - 00000000 ____D C:\WINDOWS\PolicyDefinitions 2017-02-14 20:26 - 2017-02-14 20:33 - 00000000 ____D C:\WINDOWS\IME 2017-02-14 20:26 - 2017-02-14 20:33 - 00000000 ____D C:\Program Files\Common Files\System 2017-02-14 20:26 - 2017-02-14 20:33 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2017-02-14 20:26 - 2017-02-14 20:27 - 00000000 ___SD C:\WINDOWS\SysWOW64\Nui 2017-02-14 20:26 - 2017-02-14 20:27 - 00000000 ____D C:\WINDOWS\SysWOW64\WinMetadata 2017-02-14 20:26 - 2017-02-14 20:27 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz 2017-02-14 20:26 - 2017-02-14 20:27 - 00000000 ____D C:\WINDOWS\SysWOW64\MailContactsCalendarSync 2017-02-14 20:26 - 2017-02-14 20:27 - 00000000 ____D C:\WINDOWS\SysWOW64\icsxml 2017-02-14 20:26 - 2017-02-14 20:27 - 00000000 ____D C:\WINDOWS\SysWOW64\downlevel 2017-02-14 20:26 - 2017-02-14 20:27 - 00000000 ____D C:\WINDOWS\SysWOW64\Bthprops 2017-02-14 20:26 - 2017-02-14 20:27 - 00000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 __SHD C:\Program Files\Windows Sidebar 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 __SHD C:\Program Files (x86)\Windows Sidebar 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 __RSD C:\WINDOWS\Media 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ___SD C:\WINDOWS\SysWOW64\Configuration 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ___SD C:\WINDOWS\system32\Nui 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ___SD C:\WINDOWS\system32\Configuration 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ___RD C:\WINDOWS\Offline Web Pages 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ___HD C:\WINDOWS\ELAMBKUP 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\Web 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\Vss 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\tracing 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\TAPI 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\SysWOW64\SMI 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\SysWOW64\ras 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\SysWOW64\NDF 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\SysWOW64\MsDtc 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\SysWOW64\Ipmi 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\SysWOW64\InputMethod 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\SysWOW64\IME 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicyUsers 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\SysWOW64\FxsTmp 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\SysWOW64\AppLocker 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\SystemResources 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\system32\WinMetadata 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\system32\winevt 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\system32\spool 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\system32\SecureBootUpdates 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\system32\ras 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\system32\ProximityToast 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\system32\PointOfService 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\system32\NDF 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\system32\MsDtc 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\system32\MailContactsCalendarSync 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\system32\Macromed 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\system32\Ipmi 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\system32\InputMethod 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\system32\inetsrv 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\system32\IME 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\system32\icsxml 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\system32\ias 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\system32\GroupPolicyUsers 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\system32\GroupPolicy 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\system32\downlevel 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\system32\DDFs 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\system32\config\Journal 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\system32\Bthprops 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\system32\AppLocker 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\system32\AdvancedInstallers 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\System 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\SKB 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\security 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\schemas 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\SchCache 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\Resources 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\Registration 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\PLA 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\Performance 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\ModemLogs 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\L2Schemas 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\InputMethod 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\Globalization 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\GameBarPresenceWriter 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\Cursors 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\Branding 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\addins 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\ProgramData\Comms 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\Program Files\Windows Portable Devices 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\Program Files\Windows NT 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\Program Files\Windows Multimedia Platform 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\Program Files\Common Files\Services 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\Program Files (x86)\Windows Portable Devices 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\Program Files (x86)\Windows NT 2017-02-14 20:26 - 2017-02-14 20:26 - 00000000 ____D C:\Program Files (x86)\Windows Multimedia Platform 2017-02-14 20:26 - 2017-02-14 20:23 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll 2017-02-14 20:26 - 2017-02-14 20:23 - 00215943 _____ C:\WINDOWS\SysWOW64\dssec.dat 2017-02-14 20:26 - 2017-02-14 20:23 - 00215943 _____ C:\WINDOWS\system32\dssec.dat 2017-02-14 20:26 - 2017-02-14 20:23 - 00017463 _____ C:\WINDOWS\system32\Drivers\etc\services 2017-02-14 20:26 - 2017-02-14 20:23 - 00004096 _____ C:\WINDOWS\system32\config\VSMIDK 2017-02-14 20:26 - 2017-02-14 20:23 - 00003683 _____ C:\WINDOWS\system32\Drivers\etc\lmhosts.sam 2017-02-14 20:26 - 2017-02-14 20:23 - 00001358 _____ C:\WINDOWS\system32\Drivers\etc\protocol 2017-02-14 20:26 - 2017-02-14 20:23 - 00000858 _____ C:\WINDOWS\system32\DefaultQuestions.json 2017-02-14 20:26 - 2017-02-14 20:23 - 00000741 _____ C:\WINDOWS\system32\NOISE.DAT 2017-02-14 20:26 - 2017-02-14 20:23 - 00000407 _____ C:\WINDOWS\system32\Drivers\etc\networks 2017-02-14 20:26 - 2017-02-14 20:23 - 00000219 _____ C:\WINDOWS\system.ini 2017-02-14 20:26 - 2017-02-14 20:23 - 00000092 _____ C:\WINDOWS\win.ini 2017-02-14 20:24 - 2017-02-16 19:06 - 00000000 ____D C:\WINDOWS\INF 2017-02-14 20:11 - 2017-02-15 10:40 - 00000000 ____D C:\WINDOWS\CbsTemp 2017-02-14 20:03 - 2017-02-15 19:23 - 00524288 _____ C:\WINDOWS\system32\config\BBI 2017-02-14 20:03 - 2017-02-15 19:20 - 00000000 ____D C:\WINDOWS\servicing 2017-02-14 20:03 - 2017-02-14 20:47 - 00032768 _____ C:\WINDOWS\system32\config\ELAM 2017-02-14 20:03 - 2017-02-14 20:41 - 00000000 ____D C:\$WINDOWS.~BT 2017-02-14 20:03 - 2017-02-14 20:26 - 00000000 ____D C:\WINDOWS\system32\SMI 2017-02-14 19:03 - 2017-02-14 19:03 - 04015056 _____ C:\Users\Nelleke\Desktop\adwcleaner_6.043.exe 2017-02-14 16:44 - 2017-02-14 16:44 - 00599720 _____ (www.patchmypc.net) C:\Users\Nelleke\Desktop\PatchMyPC.exe 2017-02-13 20:12 - 2017-02-13 20:12 - 01663040 _____ (Malwarebytes) C:\Users\Nelleke\Desktop\JRT.exe 2017-02-13 20:11 - 2017-02-13 20:11 - 01663040 _____ (Malwarebytes) C:\Users\Nelleke\Downloads\JRT.exe 2017-02-13 09:45 - 2017-02-13 09:45 - 02702848 _____ C:\Users\Nelleke\Downloads\ZHPCleaner.exe 2017-02-12 20:37 - 2017-02-12 20:37 - 02421248 _____ (Farbar) C:\Users\Nelleke\Downloads\FRST64 (1).exe 2017-02-08 20:36 - 2017-02-08 20:36 - 08813488 _____ (Piriform Ltd) C:\Users\Nelleke\Downloads\ccsetup526 (1).exe 2017-02-08 20:35 - 2017-02-08 20:35 - 08813488 _____ (Piriform Ltd) C:\Users\Nelleke\Downloads\ccsetup526.exe 2017-02-08 17:49 - 2017-02-08 17:49 - 00087349 _____ C:\Users\Nelleke\Downloads\Definitieveberekeningtoeslagen (1).pdf 2017-02-08 17:49 - 2017-02-08 17:49 - 00087349 _____ C:\Users\Nelleke\Desktop\Definitieveberekeningtoeslagen (1).pdf 2017-02-08 17:49 - 2017-02-08 17:49 - 00087143 _____ C:\Users\Nelleke\Desktop\Voorschotbeschikkingtoeslagen (1).pdf 2017-02-08 17:48 - 2017-02-08 17:48 - 00087143 _____ C:\Users\Nelleke\Downloads\Voorschotbeschikkingtoeslagen (1).pdf 2017-02-08 17:48 - 2017-02-08 17:48 - 00084953 _____ C:\Users\Nelleke\Downloads\Voorlopigeaanslag2017.pdf 2017-02-08 17:47 - 2017-02-08 17:47 - 00090638 _____ C:\Users\Nelleke\Downloads\Aangiftebriefinkomstenbelasting2016.pdf 2017-02-08 17:47 - 2017-02-08 17:47 - 00090638 _____ C:\Users\Nelleke\Desktop\Aangiftebriefinkomstenbelasting2016.pdf 2017-02-07 08:07 - 2017-02-07 08:07 - 01222144 _____ C:\Users\Nelleke\Desktop\RSITx64.exe 2017-02-06 21:20 - 2017-02-06 21:20 - 04015056 _____ C:\Users\Nelleke\Downloads\adwcleaner_6.043.exe 2017-02-06 21:10 - 2017-02-16 19:42 - 00000000 ____D C:\FRST 2017-02-06 21:09 - 2017-02-06 21:09 - 02421248 _____ (Farbar) C:\Users\Nelleke\Downloads\FRST64.exe 2017-02-06 21:07 - 2017-02-06 21:07 - 01129376 _____ (Google Inc.) C:\Users\Nelleke\Downloads\ChromeSetup.exe 2017-02-02 16:49 - 2017-02-02 16:49 - 00000000 ____D C:\Users\Nelleke\Documents\Mis etiquetas 2017-02-01 21:44 - 2017-02-01 21:44 - 00000000 ____D C:\Users\Nelleke\Documents\ProcAlyzer Dumps 2017-01-30 20:03 - 2017-02-01 21:40 - 00000877 _____ C:\Users\Nelleke\Desktop\WALKMAN - Snelkoppeling.lnk 2017-01-25 16:43 - 2017-01-25 16:43 - 00025600 _____ C:\Users\Nelleke\Desktop\maart april 2017.xls 2017-01-17 05:56 - 2017-01-17 05:56 - 34717624 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll 2017-01-17 05:56 - 2017-01-17 05:56 - 28209080 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll 2017-01-17 05:56 - 2017-01-17 05:56 - 14190520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys 2017-01-17 05:56 - 2017-01-17 05:56 - 00951224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2017-01-17 05:56 - 2017-01-17 05:56 - 00904760 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2017-01-17 05:55 - 2017-01-17 05:55 - 02961336 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2017-01-17 05:55 - 2017-01-17 05:55 - 02594744 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2017-01-17 05:55 - 2017-01-17 05:55 - 01964600 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6437654.dll 2017-01-17 05:55 - 2017-01-17 05:55 - 01598392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6437654.dll 2017-01-17 05:55 - 2017-01-17 05:55 - 01047096 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2017-01-17 05:55 - 2017-01-17 05:55 - 00985144 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2017-01-17 05:55 - 2017-01-17 05:55 - 00054728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll 2017-01-17 05:54 - 2017-01-17 05:54 - 40134200 _____ C:\WINDOWS\system32\nvcompiler.dll 2017-01-17 05:54 - 2017-01-17 05:54 - 35233336 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll 2017-01-17 05:53 - 2017-01-17 05:53 - 11017016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll 2017-01-17 05:52 - 2017-01-17 05:52 - 10907368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll 2017-01-17 05:52 - 2017-01-17 05:52 - 10453152 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2017-01-17 05:52 - 2017-01-17 05:52 - 09246832 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll 2017-01-17 05:52 - 2017-01-17 05:52 - 09000336 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll 2017-01-17 05:52 - 2017-01-17 05:52 - 08847016 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2017-01-17 05:52 - 2017-01-17 05:52 - 03509152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2017-01-17 05:52 - 2017-01-17 05:52 - 00698544 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll 2017-01-17 05:52 - 2017-01-17 05:52 - 00586784 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll 2017-01-17 00:59 - 2017-01-17 00:59 - 00000669 _____ C:\WINDOWS\SysWOW64\nv-vk32.json 2017-01-17 00:59 - 2017-01-17 00:59 - 00000669 _____ C:\WINDOWS\system32\nv-vk64.json ==================== Een Maand Gewijzigd bestanden en mappen ======== (Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.) 2017-02-16 18:47 - 2014-02-27 17:04 - 00000000 ___RD C:\Users\Nelleke\OneDrive 2017-02-15 20:57 - 2015-09-10 06:35 - 00000000 __RHD C:\Users\Public\AccountPictures 2017-02-15 14:25 - 2016-04-04 16:49 - 00000000 ____D C:\Users\Nelleke\Desktop\airplay 2017-02-14 20:19 - 2016-07-16 07:04 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe 2017-02-14 20:17 - 2016-07-16 07:04 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe 2017-02-14 19:11 - 2015-07-19 17:01 - 00000000 ____D C:\AdwCleaner 2017-02-14 19:01 - 2016-11-16 18:03 - 00000000 ____D C:\Users\Nelleke\AppData\LocalLow\Mozilla 2017-02-13 08:47 - 2011-01-15 17:16 - 00000000 ____D C:\Users\Nelleke\AppData\LocalLow\Temp 2017-02-08 17:48 - 2017-01-12 08:58 - 00084953 _____ C:\Users\Nelleke\Desktop\Voorlopigeaanslag2017.pdf 2017-02-01 19:49 - 2013-12-03 19:51 - 00000000 ___RD C:\Users\Nelleke\Desktop\Output convertdvd 2017-02-01 19:43 - 2016-10-08 13:33 - 00000000 ___RD C:\Users\Nelleke\Desktop\oude foto's 2017-02-01 19:43 - 2016-09-24 19:34 - 00000000 ____D C:\Users\Nelleke\Desktop\nieuw kaart auto 2017-02-01 19:43 - 2016-09-24 19:33 - 00000000 ____D C:\Users\Nelleke\Desktop\nieuw branden 2017-02-01 19:43 - 2015-08-04 09:32 - 00000000 ____D C:\Users\Nelleke\Desktop\Nijntje 2017-02-01 19:40 - 2014-01-21 18:52 - 00000000 ____D C:\Users\Nelleke\Pa 2017-01-17 05:55 - 2016-08-26 23:32 - 01604152 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll 2017-01-17 05:55 - 2016-08-26 23:32 - 00221640 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys 2017-01-17 05:52 - 2016-08-26 23:29 - 03972960 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2017-01-17 00:59 - 2016-08-02 23:08 - 00042296 _____ C:\WINDOWS\system32\nvinfo.pb ==================== Bamital & volsnap ====================== (Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.) C:\WINDOWS\system32\winlogon.exe => Bestand is getekend C:\WINDOWS\system32\wininit.exe => Bestand is getekend C:\WINDOWS\explorer.exe => Bestand is getekend C:\WINDOWS\SysWOW64\explorer.exe => Bestand is getekend C:\WINDOWS\system32\svchost.exe => Bestand is getekend C:\WINDOWS\SysWOW64\svchost.exe => Bestand is getekend C:\WINDOWS\system32\services.exe => Bestand is getekend C:\WINDOWS\system32\User32.dll => Bestand is getekend C:\WINDOWS\SysWOW64\User32.dll => Bestand is getekend C:\WINDOWS\system32\userinit.exe => Bestand is getekend C:\WINDOWS\SysWOW64\userinit.exe => Bestand is getekend C:\WINDOWS\system32\rpcss.dll => Bestand is getekend C:\WINDOWS\system32\dnsapi.dll => Bestand is getekend C:\WINDOWS\SysWOW64\dnsapi.dll => Bestand is getekend C:\WINDOWS\system32\Drivers\volsnap.sys => Bestand is getekend LastRegBack: 2017-02-14 20:45 ==================== Eind van FRST.txt ============================