Fix resultaat van Farbar Recovery Scan Tool (x64) Versie: 15-03-2017 Gestart door Sippo (16-03-2017 22:00:41) Run:2 Gestart vanaf C:\Users\Sippo\Desktop Geladen Profielen: Sippo (Beschikbare Profielen: Sippo & DefaultAppPool) Boot Modus: Normal ============================================== fixlist inhoud: ***************** start CreateRestorePoint: CloseProcesses: HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.startpageing123.com/?type=hp&ts=1489664067&z=de3e0df172e08e7feee1077gbzdb2tcq1q0z8e3qdm&from=che0812&uid=HitachiXHTS547550A9E384_J2160051H6AZPDH6AZPDX HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.startpageing123.com/?type=hp&ts=1489664067&z=de3e0df172e08e7feee1077gbzdb2tcq1q0z8e3qdm&from=che0812&uid=HitachiXHTS547550A9E384_J2160051H6AZPDH6AZPDX HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.startpageing123.com/search/?type=ds&ts=1489664067&z=de3e0df172e08e7feee1077gbzdb2tcq1q0z8e3qdm&from=che0812&uid=HitachiXHTS547550A9E384_J2160051H6AZPDH6AZPDX&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.startpageing123.com/search/?type=ds&ts=1489664067&z=de3e0df172e08e7feee1077gbzdb2tcq1q0z8e3qdm&from=che0812&uid=HitachiXHTS547550A9E384_J2160051H6AZPDH6AZPDX&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.startpageing123.com/?type=hp&ts=1489664067&z=de3e0df172e08e7feee1077gbzdb2tcq1q0z8e3qdm&from=che0812&uid=HitachiXHTS547550A9E384_J2160051H6AZPDH6AZPDX HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.startpageing123.com/?type=hp&ts=1489664067&z=de3e0df172e08e7feee1077gbzdb2tcq1q0z8e3qdm&from=che0812&uid=HitachiXHTS547550A9E384_J2160051H6AZPDH6AZPDX HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.startpageing123.com/search/?type=ds&ts=1489664067&z=de3e0df172e08e7feee1077gbzdb2tcq1q0z8e3qdm&from=che0812&uid=HitachiXHTS547550A9E384_J2160051H6AZPDH6AZPDX&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.startpageing123.com/search/?type=ds&ts=1489664067&z=de3e0df172e08e7feee1077gbzdb2tcq1q0z8e3qdm&from=che0812&uid=HitachiXHTS547550A9E384_J2160051H6AZPDH6AZPDX&q={searchTerms} HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617912&ResetID=131340695127494432&GUID=A68DA5DC-DA75-41A8-9AE8-E50911452EBC HKU\S-1-5-21-3808174966-3550055594-1478129862-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.startpageing123.com/?type=hp&ts=1489664067&z=de3e0df172e08e7feee1077gbzdb2tcq1q0z8e3qdm&from=che0812&uid=HitachiXHTS547550A9E384_J2160051H6AZPDH6AZPDX HKU\S-1-5-21-3808174966-3550055594-1478129862-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.startpageing123.com/?type=hp&ts=1489664067&z=de3e0df172e08e7feee1077gbzdb2tcq1q0z8e3qdm&from=che0812&uid=HitachiXHTS547550A9E384_J2160051H6AZPDH6AZPDX SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.startpageing123.com/search/?type=ds&ts=1489664067&z=de3e0df172e08e7feee1077gbzdb2tcq1q0z8e3qdm&from=che0812&uid=HitachiXHTS547550A9E384_J2160051H6AZPDH6AZPDX&q={searchTerms} SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.startpageing123.com/search/?type=ds&ts=1489664067&z=de3e0df172e08e7feee1077gbzdb2tcq1q0z8e3qdm&from=che0812&uid=HitachiXHTS547550A9E384_J2160051H6AZPDH6AZPDX&q={searchTerms} SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.startpageing123.com/search/?type=ds&ts=1489664067&z=de3e0df172e08e7feee1077gbzdb2tcq1q0z8e3qdm&from=che0812&uid=HitachiXHTS547550A9E384_J2160051H6AZPDH6AZPDX&q={searchTerms} SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.startpageing123.com/search/?type=ds&ts=1489664067&z=de3e0df172e08e7feee1077gbzdb2tcq1q0z8e3qdm&from=che0812&uid=HitachiXHTS547550A9E384_J2160051H6AZPDH6AZPDX&q={searchTerms} SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSERBM&pc=MSERT1 SearchScopes: HKU\S-1-5-21-3808174966-3550055594-1478129862-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.startpageing123.com/search/?type=ds&ts=1489664067&z=de3e0df172e08e7feee1077gbzdb2tcq1q0z8e3qdm&from=che0812&uid=HitachiXHTS547550A9E384_J2160051H6AZPDH6AZPDX&q={searchTerms} SearchScopes: HKU\S-1-5-21-3808174966-3550055594-1478129862-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.startpageing123.com/search/?type=ds&ts=1489664067&z=de3e0df172e08e7feee1077gbzdb2tcq1q0z8e3qdm&from=che0812&uid=HitachiXHTS547550A9E384_J2160051H6AZPDH6AZPDX&q={searchTerms} StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.startpageing123.com/?type=sc&ts=1489664067&z=de3e0df172e08e7feee1077gbzdb2tcq1q0z8e3qdm&from=che0812&uid=HitachiXHTS547550A9E384_J2160051H6AZPDH6AZPDX Edge HomeButtonPage: HKU\S-1-5-21-3808174966-3550055594-1478129862-1000 -> hxxp://www.startpageing123.com/?type=hp&ts=1489664067&z=de3e0df172e08e7feee1077gbzdb2tcq1q0z8e3qdm&from=che0812&uid=HitachiXHTS547550A9E384_J2160051H6AZPDH6AZPDX FF Homepage: Mozilla\Firefox\Profiles\huirt2q0.default-1448099985112 -> hxxp://www.startpageing123.com/?type=hp&ts=1489664067&z=de3e0df172e08e7feee1077gbzdb2tcq1q0z8e3qdm&from=che0812&uid=HitachiXHTS547550A9E384_J2160051H6AZPDH6AZPDX FF SearchPlugin: C:\Users\Sippo\AppData\Roaming\Mozilla\Firefox\Profiles\huirt2q0.default-1448099985112\searchplugins\startpageing123.xml [2017-03-16] FF Extension: (SimilarWeb) - C:\Users\Sippo\AppData\Roaming\Firefox\Firefox\Profiles\huirt2q0.default-1448099985112\Extensions\@DA3566E2-F709-11E5-8E87-A604BC8E7F8B.xpi [2017-03-16] [ niet getekend] FF Extension: (FF Adr) - C:\Users\Sippo\AppData\Roaming\Firefox\Firefox\Profiles\huirt2q0.default-1448099985112\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi [2017-03-16] [ niet getekend] FF SearchPlugin: C:\Users\Sippo\AppData\Roaming\Firefox\Firefox\Profiles\huirt2q0.default-1448099985112\searchplugins\startsearch.xml [2017-03-16] StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe hxxp://www.startpageing123.com/?type=sc&ts=1489664067&z=de3e0df172e08e7feee1077gbzdb2tcq1q0z8e3qdm&from=che0812&uid=HitachiXHTS547550A9E384_J2160051H6AZPDH6AZPDX CHR HomePage: ChromeDefaultData -> hxxp://www.startpageing123.com/?type=hp&ts=1489664067&z=de3e0df172e08e7feee1077gbzdb2tcq1q0z8e3qdm&from=che0812&uid=HitachiXHTS547550A9E384_J2160051H6AZPDH6AZPDX CHR StartupUrls: ChromeDefaultData -> "hxxp://www.startpageing123.com/?type=hp&ts=1489664067&z=de3e0df172e08e7feee1077gbzdb2tcq1q0z8e3qdm&from=che0812&uid=HitachiXHTS547550A9E384_J2160051H6AZPDH6AZPDX" CHR DefaultSearchURL: ChromeDefaultData -> hxxp://www.startpageing123.com/search/?type=ds&ts=1489664067&z=de3e0df172e08e7feee1077gbzdb2tcq1q0z8e3qdm&from=che0812&uid=HitachiXHTS547550A9E384_J2160051H6AZPDH6AZPDX&q={searchTerms} CHR DefaultSearchKeyword: ChromeDefaultData -> startpageing123 CHR Profile: C:\Users\Sippo\AppData\Local\Google\Chrome\User Data\ChromeDefaultData [2017-03-16] <==== AANDACHT StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe hxxp://www.startpageing123.com/?type=sc&ts=1489664067&z=de3e0df172e08e7feee1077gbzdb2tcq1q0z8e3qdm&from=che0812&uid=HitachiXHTS547550A9E384_J2160051H6AZPDH6AZPDX StartMenuInternet: (HKLM) OperaStable - C:\Program Files (x86)\Opera\Launcher.exe hxxp://www.startpageing123.com/?type=sc&ts=1489664067&z=de3e0df172e08e7feee1077gbzdb2tcq1q0z8e3qdm&from=che0812&uid=HitachiXHTS547550A9E384_J2160051H6AZPDH6AZPDX R2 WinSAPSvc; C:\Users\Sippo\AppData\Roaming\WinSAPSvc\WinSAP.dll [184832 2017-03-16] (Windows) [Bestand niet getekend] R2 WinSnare; C:\Users\Sippo\AppData\Roaming\WinSnare\WinSnare.dll [776704 2017-03-16] (InterSect Alliance Pty Ltd) [Bestand niet getekend] <==== AANDACHT S2 ed2kidle; "C:\Program Files (x86)\amulell\ed2k.exe" -downloadwhenidle [X] S2 FirefoxU; "C:\Program Files (x86)\Firefox\bin\FirefoxUpdate.exe" [X] 2017-03-16 12:32 - 2017-03-16 15:04 - 00000000 ____D C:\Program Files (x86)\amulell 2017-03-16 12:32 - 2017-03-16 12:32 - 00000000 ____D C:\Users\Sippo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\amuleC 2017-03-16 12:32 - 2017-03-16 12:32 - 00000000 ____D C:\Users\Sippo\AppData\Roaming\aMule 2017-03-16 12:31 - 2017-03-16 12:32 - 00003674 _____ C:\WINDOWS\System32\Tasks\Milimili 2017-03-16 12:31 - 2017-03-16 12:32 - 00000000 ____D C:\Program Files (x86)\WinSnare(4.3.2) 2017-03-16 12:31 - 2017-03-16 12:32 - 00000000 ____D C:\Program Files (x86)\BikaQRss 2017-03-16 12:31 - 2017-03-16 12:31 - 00003328 _____ C:\WINDOWS\System32\Tasks\BikaQ_FetchAndUpgrade_CanBeDel 2017-03-16 12:31 - 2017-03-16 12:31 - 00000000 ____D C:\Users\Sippo\AppData\Roaming\WinSnare 2017-03-16 12:31 - 2017-03-16 12:31 - 00000000 ____D C:\Users\Sippo\AppData\Roaming\WinSAPSvc 2017-03-16 12:31 - 2017-03-16 12:31 - 00000000 ____D C:\Users\Sippo\AppData\Roaming\Kyubey 2017-03-16 12:31 - 2017-03-16 12:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BikaQ 2017-03-16 12:28 - 2017-03-16 12:31 - 00000000 ____D C:\Program Files (x86)\MK 2017-03-10 06:27 - 2017-03-16 12:27 - 00000000 ____D C:\Program Files (x86)\Chopik 2017-03-10 06:27 - 2017-03-10 08:04 - 00000000 ____D C:\Users\Sippo\AppData\Roaming\Lamkpruzi C:\Program Files (x86)\BikaQRss Task: {5E520392-73FD-40ED-A20A-41FA3D82C194} - System32\Tasks\BikaQ_FetchAndUpgrade_CanBeDel => C:\Program Files (x86)\BikaQRss\BikaQ.exe [2017-02-23] (IEC) <==== AANDACHT Task: {ADAA6D01-EEF6-469C-A55A-03CF9F6724FA} - System32\Tasks\{68370195-F2A7-4DC1-8FC0-4078D884704C} => pcalua.exe -a "C:\Program Files\Reimage\Reimage Repair\uninst.exe" ShortcutWithArgument: C:\Users\Sippo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.startpageing123.com/?type=sc&ts=1489664067&z=de3e0df172e08e7feee1077gbzdb2tcq1q0z8e3qdm&from=che0812&uid=HitachiXHTS547550A9E384_J2160051H6AZPDH6AZPDX ShortcutWithArgument: C:\Users\Sippo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Hipmy\Application\chrome.exe (Google Inc.) -> hxxp://www.startpageing123.com/?type=sc&ts=1489664067&z=de3e0df172e08e7feee1077gbzdb2tcq1q0z8e3qdm&from=che0812&uid=HitachiXHTS547550A9E384_J2160051H6AZPDH6AZPDX ShortcutWithArgument: C:\Users\Sippo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://www.startpageing123.com/?type=sc&ts=1489664067&z=de3e0df172e08e7feee1077gbzdb2tcq1q0z8e3qdm&from=che0812&uid=HitachiXHTS547550A9E384_J2160051H6AZPDH6AZPDX ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Hipmy\Application\chrome.exe (Google Inc.) -> hxxp://www.startpageing123.com/?type=sc&ts=1489664067&z=de3e0df172e08e7feee1077gbzdb2tcq1q0z8e3qdm&from=che0812&uid=HitachiXHTS547550A9E384_J2160051H6AZPDH6AZPDX 2017-03-16 12:31 - 2017-03-16 02:46 - 00113152 _____ () C:\Users\Sippo\AppData\Roaming\Kyubey\Kyubey.exe Reboot: end ***************** Herstelpunt is succesvol gemaakt. Proces succesvol afgesloten. HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => waarde met succes hersteld HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => waarde met succes hersteld HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => waarde met succes hersteld HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => waarde met succes hersteld HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => waarde met succes hersteld HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => waarde met succes hersteld HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => waarde met succes hersteld HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => waarde met succes hersteld HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page => waarde is succesvol verwijderd. HKU\S-1-5-21-3808174966-3550055594-1478129862-1000\Software\Microsoft\Internet Explorer\Main\\Start Page => waarde met succes hersteld HKU\S-1-5-21-3808174966-3550055594-1478129862-1000\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => waarde met succes hersteld HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => waarde met succes hersteld HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => sleutel is succesvol verwijderd. HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => sleutel niet gevonden. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => waarde met succes hersteld HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => sleutel is succesvol verwijderd. HKCR\Wow6432Node\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => sleutel niet gevonden. HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{E9410C70-B6AE-41FF-AB71-32F4B279EA5F} => sleutel is succesvol verwijderd. HKCR\Wow6432Node\CLSID\{E9410C70-B6AE-41FF-AB71-32F4B279EA5F} => sleutel niet gevonden. HKU\S-1-5-21-3808174966-3550055594-1478129862-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => waarde is succesvol verwijderd. HKU\S-1-5-21-3808174966-3550055594-1478129862-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => sleutel is succesvol verwijderd. HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => sleutel niet gevonden. HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => waarde met succes hersteld HKU\S-1-5-21-3808174966-3550055594-1478129862-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Main\\HomeButtonPage => waarde is succesvol verwijderd. Firefox "homepage" is succesvol verwijderd. C:\Users\Sippo\AppData\Roaming\Mozilla\Firefox\Profiles\huirt2q0.default-1448099985112\searchplugins\startpageing123.xml => is succesvol verplaatst. C:\Users\Sippo\AppData\Roaming\Firefox\Firefox\Profiles\huirt2q0.default-1448099985112\Extensions\@DA3566E2-F709-11E5-8E87-A604BC8E7F8B.xpi => is succesvol verplaatst. C:\Users\Sippo\AppData\Roaming\Firefox\Firefox\Profiles\huirt2q0.default-1448099985112\Extensions\@H99KV4DO-UCCF-9PFO-9ZLK-8RRP4FVOKD9O.xpi => is succesvol verplaatst. C:\Users\Sippo\AppData\Roaming\Firefox\Firefox\Profiles\huirt2q0.default-1448099985112\searchplugins\startsearch.xml => is succesvol verplaatst. HKLM\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command\\Default => waarde met succes hersteld Chrome HomePage => is succesvol verwijderd. Chrome StartupUrls => is succesvol verwijderd. Chrome DefaultSearchURL => is succesvol verwijderd. Chrome DefaultSearchKeyword => is succesvol verwijderd. C:\Users\Sippo\AppData\Local\Google\Chrome\User Data\ChromeDefaultData => is succesvol verplaatst. HKLM\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command\\Default => waarde met succes hersteld HKLM\SOFTWARE\Clients\StartMenuInternet\OperaStable\shell\open\command\\Default => waarde met succes hersteld HKLM\System\CurrentControlSet\Services\WinSAPSvc => sleutel is succesvol verwijderd. WinSAPSvc => dienst is succesvol verwijderd. WinSnare => Kon service niet stoppen. HKLM\System\CurrentControlSet\Services\WinSnare => sleutel is succesvol verwijderd. WinSnare => dienst is succesvol verwijderd. HKLM\System\CurrentControlSet\Services\ed2kidle => sleutel is succesvol verwijderd. ed2kidle => dienst is succesvol verwijderd. HKLM\System\CurrentControlSet\Services\FirefoxU => sleutel is succesvol verwijderd. FirefoxU => dienst is succesvol verwijderd. "C:\Program Files (x86)\amulell" => niet gevonden. "C:\Users\Sippo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\amuleC" => niet gevonden. "C:\Users\Sippo\AppData\Roaming\aMule" => niet gevonden. C:\WINDOWS\System32\Tasks\Milimili => is succesvol verplaatst. "C:\Program Files (x86)\WinSnare(4.3.2)" => niet gevonden. C:\Program Files (x86)\BikaQRss => is succesvol verplaatst. "C:\WINDOWS\System32\Tasks\BikaQ_FetchAndUpgrade_CanBeDel" => niet gevonden. C:\Users\Sippo\AppData\Roaming\WinSnare => is succesvol verplaatst. C:\Users\Sippo\AppData\Roaming\WinSAPSvc => is succesvol verplaatst. C:\Users\Sippo\AppData\Roaming\Kyubey => is succesvol verplaatst. "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BikaQ" => niet gevonden. C:\Program Files (x86)\MK => is succesvol verplaatst. C:\Program Files (x86)\Chopik => is succesvol verplaatst. C:\Users\Sippo\AppData\Roaming\Lamkpruzi => is succesvol verplaatst. "C:\Program Files (x86)\BikaQRss" => niet gevonden. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5E520392-73FD-40ED-A20A-41FA3D82C194} => sleutel niet gevonden. C:\WINDOWS\System32\Tasks\BikaQ_FetchAndUpgrade_CanBeDel => niet gevonden. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BikaQ_FetchAndUpgrade_CanBeDel => sleutel niet gevonden. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{ADAA6D01-EEF6-469C-A55A-03CF9F6724FA} => sleutel is succesvol verwijderd. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ADAA6D01-EEF6-469C-A55A-03CF9F6724FA} => sleutel is succesvol verwijderd. C:\WINDOWS\System32\Tasks\{68370195-F2A7-4DC1-8FC0-4078D884704C} => is succesvol verplaatst. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{68370195-F2A7-4DC1-8FC0-4078D884704C} => sleutel is succesvol verwijderd. C:\Users\Sippo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Internet Explorer.lnk => snelkoppeling argument is succesvol verwijderd.. C:\Users\Sippo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk => snelkoppeling argument is succesvol verwijderd.. C:\Users\Sippo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk => snelkoppeling argument is succesvol verwijderd.. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk => snelkoppeling argument is succesvol verwijderd.. "C:\Users\Sippo\AppData\Roaming\Kyubey\Kyubey.exe" => niet gevonden. Het systeem moest herstart worden. ==== Eind van Fixlog 22:05:11 ====