Extra scanresultaten van Farbar Recovery Scan Tool (x64) Versie: 19-04-2017 Gestart door jonas (20-04-2017 19:48:38) Gestart vanaf D:\downloads Windows 10 Home Versie 1703 (X64) (2017-04-18 05:19:03) Boot Modus: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-1444661948-3188908094-294470660-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-1444661948-3188908094-294470660-503 - Limited - Disabled) Gast (S-1-5-21-1444661948-3188908094-294470660-501 - Limited - Disabled) jonas (S-1-5-21-1444661948-3188908094-294470660-1001 - Administrator - Enabled) => C:\Users\jonas Lotje VdR (S-1-5-21-1444661948-3188908094-294470660-1014 - Limited - Enabled) => C:\Users\Lotje VdR ==================== Security Center ======================== (Als een item is opgenomen in de fixlist, zal het worden verwijderd.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Norton Security (Enabled - Up to date) {30744133-1E94-7B35-F4A3-82A5AEF1CBAA} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Norton Security (Enabled - Up to date) {8B15A0D7-38AE-74BB-CE13-B9D7D5768117} FW: Norton Security (Enabled) {084FC016-54FB-7A6D-DFFC-2B9050228CD1} ==================== Geïnstalleerde programma's ====================== (Alleen de adware-programma's met 'verborgen' vlag zou kunnen worden toegevoegd aan de fixlist om ze zichtbaar te maken. De adware-programma's moeten handmatig gedeinstallerd worden.) Adobe Flash Player 25 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 25.0.0.148 - Adobe Systems Incorporated) Blend for Visual Studio 2012 (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden Blend for Visual Studio 2012 ENU resources (x32 Version: 5.0.30709.0 - Microsoft Corporation) Hidden Blend for Visual Studio Add-in for Adobe FXG Import (x32 Version: 1.0.40218.0 - Microsoft Corporation) Hidden Blend for Visual Studio SDK for .NET 4.5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden Blend for Visual Studio SDK for Silverlight 5 (x32 Version: 3.0.40218.0 - Microsoft Corporation) Hidden CyberLink Home Cinema 10 (HKLM-x32\...\InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}) (Version: 10.0 - CyberLink Corp.) CyberLink PhotoDirector 5 (Version: 5.0.5.6602 - CyberLink Corp.) Hidden CyberLink PowerDirector 12 (Version: 12.0.4118.0 - CyberLink Corp.) Hidden CyberLink PowerRecover (HKLM-x32\...\InstallShield_{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.7.0.4510 - CyberLink Corp.) CyberLink PowerRecover (Version: 5.7.0.4510 - CyberLink Corp.) Hidden D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Dolby Digital Plus Advanced Audio (HKLM\...\{B0BFC63F-EA07-419E-960B-3FB2ED5DD0B2}) (Version: 7.6.5.1 - Dolby Laboratories Inc) Dotfuscator and Analytics Community Edition (x32 Version: 5.5.4521.29298 - PreEmptive Solutions) Hidden ELAN Touchpad 15.19.7.1_X64_WHQL (HKLM\...\Elantech) (Version: 15.19.7.1 - ELAN Microelectronic Corp.) Entity Framework Designer for Visual Studio 2012 - enu (HKLM-x32\...\{3F29268A-F53A-4387-9F2B-E9368A823178}) (Version: 11.1.30729.00 - Microsoft Corporation) FaceRig (HKLM\...\Steam App 274920) (Version: - Holotech Studios) FaceRig virtual audio driver version 1.0 (HKLM-x32\...\{D605CD1D-D626-4740-B657-86DC30723FCF}_is1) (Version: 1.0 - Adoriasoft LLC) FaceRig Virtual Video driver version 1.0.1.1000 (HKLM-x32\...\{7D6A1A0F-F57E-4C6B-9331-86CBC7D5C787}_is1) (Version: 1.0.1.1000 - Adoriasoft LLC) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 57.0.2987.133 - Google Inc.) Google Drive (HKLM-x32\...\{A1238426-ECDF-4639-BE2F-8D12A97AE23C}) (Version: 2.34.5075.1619 - Google, Inc.) Google Update Helper (x32 Version: 1.3.33.3 - Google Inc.) Hidden Hama Racing Wheel Thunder V5 (HKLM-x32\...\{AEC7CD2E-2BB5-40C3-9592-078F64677E6C}) (Version: 1.00.0000 - Ihr Firmenname) HD Tune 2.55 (HKLM-x32\...\HD Tune_is1) (Version: - EFD Software) IIS 8.0 Express (HKLM\...\{7BF61FA9-BDFB-4563-98AD-FCB0DA28CCC7}) (Version: 8.0.1557 - Microsoft Corporation) IIS Express Application Compatibility Database for x64 (HKLM\...\{9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb) (Version: - ) IIS Express Application Compatibility Database for x86 (HKLM\...\{fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb) (Version: - ) Intel(R) Chipset Device Software (x32 Version: 10.1.1.11 - Intel(R) Corporation) Hidden Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1162 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4352 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.6.0.1029 - Intel Corporation) Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1519.7 - Intel Corporation) Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{9A287643-10C5-4463-B9D1-B2404CE18CCF}) (Version: 17.1.1529.1620 - Intel Corporation) Intel® PROSet/Wireless Software (HKLM-x32\...\{e6f0207e-ac43-48a9-bfff-3d879b45694d}) (Version: 18.12.1 - Intel Corporation) Java 8 Update 121 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180121F0}) (Version: 8.0.1210.13 - Oracle Corporation) JavaScript Tooling (Version: 11.0.60315 - Microsoft Corporation) Hidden LEGO MINDSTORMS EV3 (HKLM-x32\...\LEGO_SW.{5B0CB826-E499-4E6B-94F0-75B6327ED934}) (Version: 1.0.0 - The LEGO Group) LEGO MINDSTORMS EV3 Home Content (x32 Version: 1.2.30 - The LEGO Group) Hidden LEGO MINDSTORMS EV3 Home Edition (x32 Version: 1.2.30 - The LEGO Group) Hidden LEGO MINDSTORMS EV3 Home Nederlandse ondersteuning (x32 Version: 1.2.30 - The LEGO Group) Hidden LEGO MINDSTORMS EV3 Uninstaller (x32 Version: 1.0.11 - The LEGO Group) Hidden LEGO MINDSTORMS NXT x64 Driver (HKLM\...\{A0831C28-A6FA-49A3-86AE-B5AE3C9EE19C}) (Version: 1.20.115.0 - LEGO) LMSOFT Web Creator Pro 6 (HKLM-x32\...\Web Creator Pro 6) (Version: - LMSOFT Inc.) LocalESPC (x32 Version: 8.59.25584 - Microsoft Corporation) Hidden LocalESPCui for en-us (x32 Version: 8.59.25584 - Microsoft) Hidden LoiLo Game Recorder (HKLM\...\{89E4163C-BD19-45A9-BCEB-980741786799}_is1) (Version: 1.1.0.1 - LoiLo inc.) Malwarebytes versie 3.0.6.1469 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.6.1469 - Malwarebytes) McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.500.3 - McAfee, Inc.) Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{5CBFF3F3-2D40-34EE-BCA5-A95BC19E400D}) (Version: 4.5.50709 - Microsoft Corporation) Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{1948E039-EC79-4591-951D-9867A8C14C90}) (Version: 4.5.50709 - Microsoft Corporation) Microsoft ASP.NET MVC 3 (HKLM-x32\...\{D32EF103-4016-4C15-BCB0-700C0A7A2309}) (Version: 3.0.50813.0 - Microsoft Corporation) Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft ASP.NET Web Pages (HKLM-x32\...\{631471BE-DEAB-454B-A9AC-CE3EB42C28B3}) (Version: 1.0.20105.0 - Microsoft Corporation) Microsoft Help Viewer 2.0 (HKLM-x32\...\Microsoft Help Viewer 2.0) (Version: 2.0.50727 - Microsoft Corporation) Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-1444661948-3188908094-294470660-1001\...\OneDriveSetup.exe) (Version: 17.3.6816.0313 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50906.0 - Microsoft Corporation) Microsoft Silverlight 4 SDK (HKLM-x32\...\{189AEA94-DAFB-487A-8CEE-F9D3DDE0A748}) (Version: 4.0.60310.0 - Microsoft Corporation) Microsoft Silverlight 5 SDK (HKLM-x32\...\{E1FBB3D4-ADB0-4949-B101-855DA061C735}) (Version: 5.0.61118.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft SQL Server 2012 Command Line Utilities (HKLM\...\{9D573E71-1077-4C7E-B4DB-4E22A5D2B48B}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework (HKLM\...\{36E619BC-A234-4EC3-849B-779A7C865A45}) (Version: 11.0.2316.0 - Microsoft Corporation) Microsoft SQL Server 2012 Data-Tier App Framework (HKLM-x32\...\{FBA6F90E-36EC-4FC9-9B25-3834E3BD46A8}) (Version: 11.0.2316.0 - Microsoft Corporation) Microsoft SQL Server 2012 Express LocalDB (HKLM\...\{13D558FE-A863-402C-B115-160007277033}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects (HKLM-x32\...\{DA1C1761-5F4F-4332-AB9D-29EDF3F8EA0A}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Management Objects (x64) (HKLM\...\{FA0A244E-F3C2-4589-B42A-3D522DE79A42}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Native Client (HKLM\...\{49D665A2-4C2A-476E-9AB8-FCC425F526FC}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Transact-SQL Compiler Service (HKLM\...\{BEB0F91E-F2EA-48A1-B938-7857ABF2A93D}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 Transact-SQL ScriptDom (HKLM\...\{0E8670B8-3965-4930-ADA6-570348B67153}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2012 T-SQL Language Service (HKLM-x32\...\{6D6D43E5-218C-4B05-92D3-2240810F4760}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation) Microsoft SQL Server Data Tools - enu (11.1.20627.00) (HKLM-x32\...\{FA804794-2CCB-4301-954F-2C2894698876}) (Version: 11.1.20627.00 - Microsoft Corporation) Microsoft SQL Server Data Tools Build Utilities - enu (11.1.20627.00) (HKLM-x32\...\{790E9425-8570-493F-9AE7-81AFC9E46930}) (Version: 11.1.20627.00 - Microsoft Corporation) Microsoft SQL Server System CLR Types (HKLM-x32\...\{A47FD1BF-A815-4A76-BE65-53A15BD5D25D}) (Version: 10.50.1600.1 - Microsoft Corporation) Microsoft SQL Server System CLR Types (x64) (HKLM\...\{4701DEDE-1888-49E0-BAE5-857875924CA2}) (Version: 10.50.1600.1 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{E2082604-4BA5-44BB-BBFB-AF0F3CB8C6AB}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{F1949145-EB64-4DE7-9D81-E6D27937146C}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{4549ceb8-695a-42eb-a183-4820d542a15f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918 (HKLM-x32\...\{dab68466-3a7d-41a8-a5cf-415e3ff8ef71}) (Version: 14.0.23918.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM-x32\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Microsoft Visual Studio Professional 2012 (HKLM-x32\...\{c93c1c16-fd12-4b07-8926-2a4af46b6597}) (Version: 11.0.50727.26 - Microsoft Corporation) Microsoft Web Deploy 3.5 (HKLM\...\{3674F088-9B90-473A-AAC3-20A00D8D810C}) (Version: 3.1237.1762 - Microsoft Corporation) Microsoft Web Deploy dbSqlPackage Provider - enu (HKLM-x32\...\{E4C33F5B-1B2F-466E-957E-B274F08151A0}) (Version: 10.3.20225.0 - Microsoft Corporation) Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang) MouseMote Server version 1.7 (HKLM-x32\...\{3FAA4DAA-92F3-4C0B-9392-5FA4D227F15D}_is1) (Version: 1.7 - MouseMote) Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Mozilla Firefox 52.0.2 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 52.0.2 (x86 en-US)) (Version: 52.0.2 - Mozilla) MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation) NI .NET Framework 4.0 (x32 Version: 4.01.49154 - National Instruments) Hidden NI EulaDepot (x32 Version: 3.20.363 - National Instruments) Hidden NI MDF Support (x32 Version: 3.20.363 - National Instruments) Hidden NI Security Update (KB 67L8LCQW) (64-bit) (Version: 1.0.29.0 - National Instruments) Hidden NI Security Update (KB 67L8LCQW) (x32 Version: 1.0.29.0 - National Instruments) Hidden NI Uninstaller (x32 Version: 3.20.363 - National Instruments) Hidden NI VC2008MSMs x64 (Version: 9.0.401 - National Instruments) Hidden NI VC2008MSMs x86 (x32 Version: 9.0.401 - National Instruments) Hidden Nightbot (HKLM-x32\...\{c59fdb2c-3f60-4455-b0a8-c45b5aee5447}_is1) (Version: 0.0.4 - NightDev, LLC) Norton Security (HKLM-x32\...\NS) (Version: 22.9.1.12 - Symantec Corporation) OBS Studio (HKLM-x32\...\OBS Studio) (Version: 18.0.1 - OBS Project) OMSI 2 (HKLM\...\Steam App 252530) (Version: - MR-Software GbR) OpenAL (HKLM-x32\...\OpenAL) (Version: - ) paint.net (HKLM\...\{6AC1101E-7561-43C9-BEEA-4AB1D220D8FF}) (Version: 4.0.13 - dotPDN LLC) PreEmptive Analytics Visual Studio Components (x32 Version: 1.0.2180.1 - PreEmptive Solutions) Hidden Prerequisites for SSDT (HKLM-x32\...\{9169C939-ED01-446A-BD0C-29873BAF4E48}) (Version: 11.0.2100.60 - Microsoft Corporation) Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.10163.31215 - Realtek Semiconductor Corp.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.2.703.2015 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7622 - Realtek Semiconductor Corp.) Restream Chat (HKU\S-1-5-21-1444661948-3188908094-294470660-1001\...\5574fe55cba0ac1f) (Version: 2.2.1.35 - Restream.io) ROBLOX Player for jonas (HKU\S-1-5-21-1444661948-3188908094-294470660-1001\...\{373B1718-8CC5-4567-8EE2-9033AD08A680}) (Version: - ROBLOX Corporation) ROBLOX Studio for jonas (HKU\S-1-5-21-1444661948-3188908094-294470660-1001\...\{2922D6F1-2865-4EFA-97A9-94EEAB3AFA14}) (Version: - ROBLOX Corporation) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) Skype™ 7.33 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.33.105 - Skype Technologies S.A.) Speccy (HKLM\...\Speccy) (Version: 1.30 - Piriform) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Taalpakket voor Microsoft Visual Studio 2010 Tools for Office Runtime (x64) - NLD (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - NLD) (Version: 10.0.50903 - Microsoft Corporation) Teach2000 versie 8.53 (HKLM-x32\...\Teach2000.7 XP - The Troolean Edition_is1) (Version: 8.53 - basement.nl) TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.76421 - TeamViewer) TreeSize Free V3.4.5 (HKLM-x32\...\TreeSize Free_is1) (Version: 3.4.5 - JAM Software) Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation) VideoPad Video Editor (HKLM-x32\...\VideoPad) (Version: 5.01 - NCH Software) Visual Studio 2012 Update 5 (KB2707250) (HKLM-x32\...\{6d052d71-b953-48cd-8a75-3462b00efeb7}) (Version: 11.0.61219 - Microsoft Corporation) WCF Data Services 5.0 (for OData v3) Primary Components (x32 Version: 5.0.50628.0 - Microsoft Corporation) Hidden WCF Data Services Tools for Microsoft Visual Studio 2012 (x32 Version: 5.0.50710.0 - Microsoft Corporation) Hidden WCF RIA Services V1.0 SP2 (HKLM-x32\...\{3A523AF9-D32F-4C85-8388-0335731F3405}) (Version: 4.1.61829.0 - Microsoft Corporation) Windows 10-upgradeassistent (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.17384 - Microsoft Corporation) Windows 7 Upgrade Advisor (HKLM-x32\...\{0DC66F25-C58F-40d3-86BC-CA29C6D99BF8}) (Version: 2.0.5000.0 - Microsoft Corporation) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation) WinRAR 5.40 beta 1 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.1 - win.rar GmbH) Xiph.Org Open Codecs 0.85.17777 (HKLM-x32\...\Open Codecs) (Version: 0.85.17777 - Xiph.Org) ==================== Aangepaste CLSID (gefilterd): ========================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) CustomCLSID: HKU\S-1-5-21-1444661948-3188908094-294470660-1001_Classes\CLSID\{DEE03C2B-0C0C-41A9-9877-FD4B4D7B6EA3}\InprocServer32 -> C:\Users\jonas\AppData\Local\Roblox\Versions\version-88b966c853f84435\RobloxProxy64.dll (ROBLOX Corporation) ==================== Geplande Taken (gefilterd) ============= (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) Task: {03592605-C222-488B-8FE9-CC5D3DBE4638} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Geen bestand <==== AANDACHT Task: {04440224-6B59-4D10-809B-094A2E068274} - \PDVDServ12 Task -> Geen bestand <==== AANDACHT Task: {093B1A8B-421B-469D-9D46-F637278B2F3E} - \z_ Shutdown Pc at Midnight -> Geen bestand <==== AANDACHT Task: {0A9186E9-69FD-4288-9727-A3A87D010D19} - \Norton Security\Norton Security Error Processor -> Geen bestand <==== AANDACHT Task: {130C7A6C-045E-49C4-A8BE-3D2BB2256CC3} - \DolbySelectorTask -> Geen bestand <==== AANDACHT Task: {16455EDF-6E97-4229-9E68-2EB3578FCD2D} - System32\Tasks\HPCeeScheduleForjonas => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2016-01-22] (Hewlett-Packard) Task: {1A4E368E-F455-4B1A-8B98-6198374855A6} - System32\Tasks\Norton Security\Norton Security Autofix => C:\Program Files (x86)\Norton Security\Engine\22.9.1.12\SymErr.exe [2017-02-20] (Symantec Corporation) Task: {1D5E9B86-0348-4EDB-A7C9-8EEDBA62F775} - \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot -> Geen bestand <==== AANDACHT Task: {1F6A03CA-9253-4581-9FEB-742823C30CBF} - System32\Tasks\Microsoft\Windows\Subscription\EnableLicenseAcquisition => C:\WINDOWS\system32\ClipRenew.exe [2017-03-20] (Microsoft Corporation) Task: {3362361D-DEC2-46DE-BD0E-34AD8F87388E} - \Adobe Flash Player Updater -> Geen bestand <==== AANDACHT Task: {3FABBCD3-881D-4E23-81FB-2E2E15704D72} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Security\Upgrade.exe [2017-03-17] (Symantec Corporation) Task: {4520E8A9-AF06-4122-859B-E4B655B29B36} - \Microsoft\Windows\AppID\SmartScreenSpecific -> Geen bestand <==== AANDACHT Task: {4BA397EA-56EE-4FBB-AF7B-64930A622CBB} - \GoogleUpdateTaskMachineCore -> Geen bestand <==== AANDACHT Task: {5348F749-DC71-4906-A5A6-F33CEEB2792B} - \Microsoft\Windows\UpdateOrchestrator\Maintenance Install -> Geen bestand <==== AANDACHT Task: {54EAF051-F829-46FD-A85B-C4A0D305FDCE} - \Microsoft\Windows Live\SOXE\Extractor Definitions Update Task -> Geen bestand <==== AANDACHT Task: {5528B7F6-1AF3-41C7-92BD-8EF07A3802E3} - \Norton Security\Norton Security Error Analyzer -> Geen bestand <==== AANDACHT Task: {56B8BFB4-6F4A-467C-A1DD-4CF440100C1D} - \Microsoft\Windows\ErrorDetails\ErrorDetailsUpdate -> Geen bestand <==== AANDACHT Task: {64D227A1-CAF2-4F62-893C-CB71B7F5593F} - System32\Tasks\Microsoft\Windows\EDP\EDP Inaccessible Credentials Task Task: {693F02EA-12F7-4661-8730-A5DF1AFD642F} - System32\Tasks\Microsoft\Windows\BitLocker\BitLocker MDM policy Refresh Task: {6A65565B-29A0-463E-B965-3C5313FD6B2E} - \GoogleUpdateTaskMachineUA -> Geen bestand <==== AANDACHT Task: {6A8B3D19-D7A8-461D-A94A-3D39940DB408} - \AdobeAAMUpdater-1.0-MicrosoftAccount-jonas@vanderreysen.be -> Geen bestand <==== AANDACHT Task: {6BD9FDA3-C8EE-4C02-95CB-1B221BF24F79} - System32\Tasks\Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceProtectionStateChanged Task: {745A50F1-8369-4BFD-AAD1-4256144B44BC} - \Norton WSC Integration -> Geen bestand <==== AANDACHT Task: {7E48EB16-2459-437A-B3B5-DD91866302CC} - System32\Tasks\Microsoft\Windows\EDP\StorageCardEncryption Task Task: {94963374-8A5D-4458-AC80-91B09F3EC7F6} - \{4D195CFC-AC83-4754-89EF-24D7E0D66D64} -> Geen bestand <==== AANDACHT Task: {9572F02F-1548-40B5-80EC-31E356FBA5D8} - \Microsoft\Windows\ErrorDetails\EnableErrorDetailsUpdate -> Geen bestand <==== AANDACHT Task: {9BFBFF63-27D1-4C7C-ADFA-AE5B98B90F78} - System32\Tasks\Microsoft\Windows\BrokerInfrastructure\BgTaskRegistrationMaintenanceTask Task: {AA6DEABA-2875-4822-B890-2DC12EF9B887} - \Microsoft\Windows\UpdateOrchestrator\Policy Install -> Geen bestand <==== AANDACHT Task: {C0BE45C9-3235-4F88-B15E-1E789C5B2AB6} - \{CE35AB99-8F35-4E6C-8F4B-28182A0EE618} -> Geen bestand <==== AANDACHT Task: {C2BD876C-EC4F-4DF1-ABD7-7F5C0781E03F} - \Microsoft\XblGameSave\XblGameSaveTaskLogon -> Geen bestand <==== AANDACHT Task: {C6B2579B-4962-4D12-883D-BBD420573A6C} - \Microsoft\Windows\DeviceDirectoryClient\RegisterDevicePeriodic1 -> Geen bestand <==== AANDACHT Task: {C89EA235-E8FF-486A-9F73-5BCCA305F5AF} - System32\Tasks\Microsoft\Windows\Subscription\LicenseAcquisition => C:\WINDOWS\system32\ClipRenew.exe [2017-03-20] (Microsoft Corporation) Task: {C9ACBFD2-20AA-4A3F-BE1A-A3D5279BB1BB} - \Microsoft\Windows\Plug and Play\Plug and Play Cleanup -> Geen bestand <==== AANDACHT Task: {D602104A-920B-4B40-8F61-8F93B91A07D6} - \{9902941F-0AE6-4532-9058-CE6948BE2CE8} -> Geen bestand <==== AANDACHT Task: {DD0D18F6-F9A7-46C8-8D8D-6A93B35B913A} - \{32FE113F-C62D-4A46-9BCB-67066E19F80C} -> Geen bestand <==== AANDACHT Task: {E202628C-96AD-452B-AC1D-04B760859B13} - \{54B94B2D-DEBF-42A7-B83D-AD483BC81AD5} -> Geen bestand <==== AANDACHT Task: {E3752BF6-EB3A-4F6A-BC37-A33B56985F7A} - \{DE8767DA-8D3C-4E8E-B890-FD7F634B46AA} -> Geen bestand <==== AANDACHT Task: {FCE25E51-0E54-4643-B1C9-52A511751FA3} - \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display -> Geen bestand <==== AANDACHT Task: {FF758437-3B95-4223-804E-615466C04129} - \Z_ Chrome starten bij opstart -> Geen bestand <==== AANDACHT (Als een item is opgenomen in de fixlist, de taak (job) bestand wordt verplaatst. Het bestand dat wordt uitgevoerd door de taak zal niet worden verplaatst.) Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe Task: C:\WINDOWS\Tasks\HPCeeScheduleForjonas.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe ==================== Snelkoppelingen ============================= (De items kunnen worden opgenomen in de fixlist.txt om hersteld of verwijderd te worden.) Shortcut: C:\Users\jonas\Favorites\NCH Software Download Site.lnk -> hxxp://www.nchsoftware.com/index.htm ==================== Geladen Modules (gefilterd) ============== 2016-01-21 06:37 - 2014-04-14 20:59 - 00389896 _____ () C:\Program Files\CyberLink\Shared files\RichVideo64.exe 2017-04-06 12:34 - 2017-03-24 04:09 - 02271520 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll 2017-03-18 22:58 - 2017-03-18 22:58 - 00138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll 2017-03-18 22:59 - 2017-03-20 05:56 - 01731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2017-04-05 23:00 - 2017-04-05 23:00 - 10650112 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11701.1001.99.0_x64__8wekyb3d8bbwe\WinStore.Entertainment.Mobile.dll 2017-04-05 23:00 - 2017-04-05 23:00 - 02653184 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11701.1001.99.0_x64__8wekyb3d8bbwe\MS.Entertainment.Common.Mobile.dll 2017-04-05 23:00 - 2017-04-05 23:00 - 00761344 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11701.1001.99.0_x64__8wekyb3d8bbwe\WinStore.Vui.dll ==================== Alternate Data Streams (gefilterd) ========= (Als een item is opgenomen in de fixlist, alleen de ADS wordt verwijderd.) ==================== Veilige Modus (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. De "AlternateShell" waarde wordt hersteld.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NetSetupSvc => ""="Service" ==================== Bestandskoppeling (gefilterd) =============== (Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd.) ==================== Internet Explorer vertrouwde/beperkte toegang =============== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd.) IE trusted site: HKU\S-1-5-21-1444661948-3188908094-294470660-1001\...\amazon.com -> hxxps://amazon.com ==================== Hosts inhoud: ========================== (Als nodig Hosts: opdracht kan worden opgenomen in de fixlist om Hosts te resetten.) 2015-10-30 09:24 - 2017-02-07 18:30 - 00000782 ____A C:\WINDOWS\system32\Drivers\etc\hosts 127.0.0.1 localhost 0.0.0.1 mssplus.mcafee.com ==================== Andere gebieden ============================ (Momenteel is er geen automatische fix voor dit onderdeel.) HKU\S-1-5-21-1444661948-3188908094-294470660-1001\Control Panel\Desktop\\Wallpaper -> c:\users\jonas\appdata\local\packages\microsoft.windows.photos_8wekyb3d8bbwe\localstate\photosappbackground\{5c6c78ef-7801-496b-8d23-6e552d29780e}.png DNS Servers: 195.130.131.4 - 195.130.130.4 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is uitgeschakeld. ==================== MSCONFIG/TASK MANAGER Uitgeschakelde items == HKLM\...\StartupApproved\StartupFolder: => "McAfee Security Scan Plus.lnk" HKLM\...\StartupApproved\Run: => "GoPro Tray App" HKLM\...\StartupApproved\Run: => "Wondershare Helper Compact.exe" HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0" HKLM\...\StartupApproved\Run: => "Malwarebytes TrayApp" HKLM\...\StartupApproved\Run: => "EvtMgr6" HKLM\...\StartupApproved\Run32: => "CLMLServer_For_P2G8" HKLM\...\StartupApproved\Run32: => "CLVirtualDrive" HKLM\...\StartupApproved\Run32: => "PowerDVD12Agent" HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe" HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud" HKLM\...\StartupApproved\Run32: => "InstallValidator.exe.FA87EC44_C38F_4148_93A1_FF4A64A2B707" HKU\S-1-5-21-1444661948-3188908094-294470660-1001\...\StartupApproved\StartupFolder: => "MEGAsync.lnk" HKU\S-1-5-21-1444661948-3188908094-294470660-1001\...\StartupApproved\StartupFolder: => "Adobe Gamma.lnk" HKU\S-1-5-21-1444661948-3188908094-294470660-1001\...\StartupApproved\Run: => "GoogleDriveSync" HKU\S-1-5-21-1444661948-3188908094-294470660-1001\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-1444661948-3188908094-294470660-1001\...\StartupApproved\Run: => "Skype" HKU\S-1-5-21-1444661948-3188908094-294470660-1001\...\StartupApproved\Run: => "Steam" HKU\S-1-5-21-1444661948-3188908094-294470660-1001\...\StartupApproved\Run: => "Speech Recognition" HKU\S-1-5-21-1444661948-3188908094-294470660-1001\...\StartupApproved\Run: => "uTorrent" HKU\S-1-5-21-1444661948-3188908094-294470660-1001\...\StartupApproved\Run: => "Discord" HKU\S-1-5-21-1444661948-3188908094-294470660-1001\...\StartupApproved\Run: => "CCleaner Monitoring" HKU\S-1-5-21-1444661948-3188908094-294470660-1001\...\StartupApproved\Run: => "f.lux" ==================== Firewall regels (gefilterd) =============== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [{4F23BA9A-131B-4B5F-B7C5-F8300ADEEA18}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{AC0AD3A3-8C1A-4266-96BA-CB256D61E0F0}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe FirewallRules: [{465FB283-FF1D-47F1-B275-BC678CB23CFC}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe FirewallRules: [{A57E4B88-2D95-4143-8A3C-42F6FC861FF0}] => (Allow) C:\Users\jonas\AppData\Local\Apowersoft\Online Video Converter\Online Video Converter.exe FirewallRules: [{10205131-65E1-4906-8C56-0B003913621E}] => (Allow) C:\Users\jonas\AppData\Local\Apowersoft\Online Video Converter\Online Video Converter.exe FirewallRules: [{039F8A1F-1FC3-4974-A8FA-7EA738DE5885}] => (Allow) C:\Users\jonas\AppData\Local\Apowersoft\Apowersoft Online Launcher\Apowersoft Online Launcher.exe FirewallRules: [{755369DA-3B71-4B15-A3EF-DB9668A7E801}] => (Allow) C:\Users\jonas\AppData\Local\Apowersoft\Apowersoft Online Launcher\Apowersoft Online Launcher.exe FirewallRules: [{3918B23B-0770-4451-B316-07D6F7F05220}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Converter Studio\Video Converter Studio.exe FirewallRules: [{8B220DD2-CBFA-4A25-AC61-A081B992FE10}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Converter Studio\Video Converter Studio.exe FirewallRules: [TCP Query User{F468232A-782C-4386-AF14-03CFA72EB0FB}C:\Program Files (x86)\LEGO Software\LEGO MINDSTORMS EV3 Home Edition\MindstormsEV3.exe] => (Allow) C:\Program Files (x86)\LEGO Software\LEGO MINDSTORMS EV3 Home Edition\MindstormsEV3.exe FirewallRules: [UDP Query User{68E46633-8DC3-499C-A590-8A85F5FE92AD}C:\Program Files (x86)\LEGO Software\LEGO MINDSTORMS EV3 Home Edition\MindstormsEV3.exe] => (Allow) C:\Program Files (x86)\LEGO Software\LEGO MINDSTORMS EV3 Home Edition\MindstormsEV3.exe FirewallRules: [{FDFFC44C-14BE-41C7-B3D0-3A21A0AB2CD3}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{D3BA6DDC-EEFF-4BA7-B73F-E1B5B508CF0F}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{7F5672A6-3413-4E6E-89B2-DA005E1CB8E5}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{124E57CD-36DB-4B53-B87E-F948C5F59389}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{A2AF3CF1-4561-47A1-9D6A-82622F17D7BE}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{99A1A5F4-316C-4557-913B-E3EB0FC6EABA}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{E690101E-DE6E-4F06-9729-DE3008CB8F4F}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{2BFC610C-E6CF-419D-9C46-716A91711349}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{03EA2663-3392-40A6-BEC6-432F0DAC3CFE}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{78EB36C5-B779-4D3E-9973-16184D94B76B}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{891D1ABF-B80B-451C-AFFC-CCEED6354BD1}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{13508550-B38F-45C4-90BF-F375ACD64F4C}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{54716BA3-0B98-4911-9FE4-626E57293FC7}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{71A1852D-A7CC-4252-B072-1A156535A101}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{021E7810-CD48-4076-8CF8-B30373988D36}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{D6DCCE31-9021-4DEF-83BD-69B4EA56E062}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{F45C67F7-6F5F-4B55-B59F-B7EB905AA770}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{437836E5-5B3E-4624-9344-6E7E46554D9A}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{DFEDA992-4E86-4020-8D17-63BAC67BA4D4}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{15758F9D-9F7D-49F1-9243-B515F683FCC5}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{B8667DEF-4A38-4F21-BA1E-11A686DD221B}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{CB328C19-AF8F-4212-85DF-9FEE089F2ECD}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{D215ED8F-1AEB-493E-A218-B296E888343F}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{EB581540-0EF4-4768-8521-BFB5307B9DF9}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{BB430E81-FF62-445C-9B54-46327E88E328}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{F64F28E2-EC4C-45CC-B22A-A1967A9D73AA}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{14F3EBC0-F5F7-4C2B-BA7A-BF5EF6BB3144}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{14F4987B-F8D5-4ECF-A249-2A321C0E5002}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{FC070587-7B04-4887-A625-28E2AA62B26A}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{13F62FE0-215E-4A06-B4BF-910AEED39CFD}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{599AC892-3996-44AC-A811-26A37789D358}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{426FAC43-1EBC-40E3-91FB-99C0F0514D6E}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{3E201120-8387-49F2-90AC-BD643C78FC89}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{CD661D19-2165-4BFE-A56D-6145618C5242}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{2A2E8AC3-869D-4DD5-8F17-80C7F05673C0}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{2307F24C-9BE2-4114-A1B7-DCC4F6773622}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{5DA5A6F3-198C-4CE1-9557-BA202A70B188}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{5E614B94-C58F-4E52-A7F4-27E58A36F751}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{87AD145E-387C-464B-805F-14B71F84DBE3}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{B3805B0F-9589-4824-82B7-F961FDA1C50E}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{B8C2D385-3930-4EC9-A6C2-AB1ECD190884}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{84471805-E404-4289-9093-15BA36EFD083}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FaceRig\Bin\FaceRig.exe FirewallRules: [{8B345759-0B34-4C51-9A9B-1E9BB4FD681F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FaceRig\Bin\FaceRig.exe FirewallRules: [{D90D16B3-0654-46E3-9001-42CCB97D66F4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FaceRig\Bin\Launcher.exe FirewallRules: [{3EC35DE1-1DC9-4F48-A6FD-AD634447F2DB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FaceRig\Bin\Launcher.exe FirewallRules: [{72FE3FF0-CEBB-46D1-830E-1E4CA076C849}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{1E382B51-EEA3-4CD5-B3C4-435F2FBFEA54}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{2847CBB3-1B13-4192-93D2-824E70775F9C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\OMSI 2\Omsi.exe FirewallRules: [{9B9FDFED-F30A-497D-833C-F2B4F31806E0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\OMSI 2\Omsi.exe FirewallRules: [{1F75651D-4545-4CDE-A6FD-6C53F75FC06E}] => (Allow) D:\program files\Common7\IDE\devenv.exe FirewallRules: [{94329997-5B52-47CA-90A5-E51B8B700A98}] => (Allow) C:\Program Files (x86)\WiFiCreator\WiFiCreator.exe FirewallRules: [{20C471AD-EC85-4A31-B6FC-C8F026131954}] => (Allow) C:\Program Files (x86)\WiFiCreator\WiFiCreator.exe FirewallRules: [{305A5BE0-A0B5-4EF3-B352-6CD5581181D5}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{D32C9CC3-B68A-40F2-AE85-6D63EB0C5335}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{5C46B5E6-A7A3-40AF-BF9F-B6FF571E2232}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{C6B89430-695B-422B-94DC-66F35775BFFD}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{E004C1D5-8918-4825-A77E-B45343D436F7}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{CCBB4176-588D-44B4-81A0-1C315F540FD5}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{0D155F68-EFCF-4C7B-A881-72A6B37FB3E7}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{C7108314-3371-47AF-BF1C-CD722F9B1C71}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{403E706B-BAA7-42B6-9267-D61F7C339CA7}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{8AD93788-CA2E-469A-A1C2-5AB2BF6FCADC}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{D83D9D79-AC13-4EE6-9FFB-522CEAD4A37A}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{976BFA17-C7EC-456C-B4BB-36F07B75D846}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{D1295CCE-17A6-454E-95EB-C27C2A0FED6D}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{B99C3CC9-7099-4C81-B80B-3E705AC2A2F0}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{1D77E0D6-E5D3-4035-9C50-00348867960C}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{E1AC694C-445D-4E0E-871D-98C133F352E5}] => (Allow) C:\Users\jonas\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{424EAB2A-EEE0-4A0E-B668-3A03D4A6D8FD}] => (Allow) C:\Users\jonas\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{D2732DA0-C233-4F9B-94DE-C0246FB5192C}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe FirewallRules: [{63EEDF95-B135-4A2C-98BE-EA0791086BF9}] => (Allow) C:\Program Files\CyberLink\PowerDirector12\PDR10.EXE FirewallRules: [{9F7D0DBA-DE6A-4F75-9320-807742E719CD}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Movie\PowerDVD Cinema\PowerDVDCinema12.exe FirewallRules: [{C6840567-49BE-4AE4-B675-83EA239D203F}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{70B6F0C4-1AF9-4277-BF95-EA1831875615}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{9D66D901-B859-4520-83B1-F45875F411B4}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{2F7CFB09-100D-47B8-98AC-CB1BCD31FC2A}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{1E16CE65-EBD6-4D2F-8BFC-B427E4F93BB4}] => (Allow) C:\Program Files\FlightGear 2016.1.1\bin\fgfs.exe FirewallRules: [{FF21C6A4-BC8B-4E2D-B62C-A1BC5D1A6368}] => (Allow) C:\Program Files\FlightGear 2016.1.1\bin\terrasync.exe FirewallRules: [{A0A93F91-5823-4B97-9CF7-0BEA3CF1C9A1}] => (Allow) C:\Program Files\FlightGear 2016.1.1\bin\fgcom.exe FirewallRules: [{83A7576E-0BFD-4D1F-B2EC-8643836ACFA4}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{D54E65A2-5A36-4291-9B1F-668E19D11F04}] => (Allow) LPort=2869 FirewallRules: [{A019492B-30EB-4DD5-91F7-ABFBB73B6F91}] => (Allow) LPort=1900 FirewallRules: [{F4EC1BC6-BB84-49BA-AFD5-3A0700581775}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{4D4630CC-846B-4C7C-8BD6-0EEAD9F62B08}] => (Allow) C:\Program Files\FlightGear 2016.1.1\bin\fgfs.exe FirewallRules: [{FA93994A-4520-4AE3-B6E5-DAF96E6ABE61}] => (Allow) C:\Program Files\FlightGear 2016.1.1\bin\terrasync.exe FirewallRules: [{30A466AC-6261-4358-B920-D04548351BB2}] => (Allow) C:\Program Files\FlightGear 2016.1.1\bin\fgcom.exe FirewallRules: [{854067CB-BFB8-44C7-A6C5-E41E44DBFDDC}] => (Allow) D:\FlightGear 2016.1.1\bin\fgfs.exe FirewallRules: [{1E1C73B2-E277-4EF9-B1AA-25F6E0511C27}] => (Allow) D:\FlightGear 2016.1.1\bin\fgfs.exe FirewallRules: [{2A16E022-30EE-4BCB-BCA0-D30562B43690}] => (Allow) D:\FlightGear 2016.1.1\bin\metar.exe FirewallRules: [{5E318DD3-4A0A-4BE4-B6F3-CAEF8480422F}] => (Allow) D:\FlightGear 2016.1.1\bin\terrasync.exe FirewallRules: [{90F94D07-348D-4D9A-9713-114936653C12}] => (Allow) D:\FlightGear 2016.1.1\bin\terrasync.exe FirewallRules: [{61A1AD64-2305-455C-8EF2-0501E6E4804F}] => (Allow) D:\FlightGear 2016.1.1\bin\fgcom.exe FirewallRules: [{955B46F6-79B1-4206-9656-283F7CDECD72}] => (Allow) D:\FlightGear 2016.1.1\bin\fgcom.exe FirewallRules: [{6A9D3405-97CA-4881-9EFA-15B921B32D0C}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Screen Recorder Pro 2\Apowersoft Screen Recorder Pro 2.exe FirewallRules: [{474F86FD-A816-4A95-8A74-6604E4AB796B}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Screen Recorder Pro 2\Apowersoft Screen Recorder Pro 2.exe FirewallRules: [{61D71A72-79B2-4823-9079-BCF46C147BAB}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{C1D9CBB5-A7AF-4A64-B8DE-B1444399BD30}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{1B8E01B0-2A47-4F04-B699-BF2E415DE26C}] => (Allow) C:\Users\jonas\AppData\Local\Temp\MPCOnline\MPCDownload.exe FirewallRules: [{DC8E37AF-2D91-455D-A4FA-04AA454117ED}] => (Allow) C:\Users\jonas\AppData\Local\Temp\MPCOnline\MPCDownload.exe FirewallRules: [{14A65166-9878-4A9E-AB7E-A52B650EE4AD}] => (Allow) C:\Program Files\FlightGear 2016.2.1\bin\fgfs.exe FirewallRules: [{A6505623-373D-495F-A6EC-47BD46ABD208}] => (Allow) C:\Program Files\FlightGear 2016.2.1\bin\fgcom.exe FirewallRules: [{E9F8CBE0-DE88-4098-9EAC-08F23D52EAFA}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Free Screen Recorder\Apowersoft Free Screen Recorder.exe FirewallRules: [{EE960271-2C20-47BF-A897-267C16DAC2E2}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Free Screen Recorder\Apowersoft Free Screen Recorder.exe FirewallRules: [{0E61E590-6BB6-401A-90CA-B0D59F40DE48}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{2A800D11-E453-4DBE-844D-82EF7B834553}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{8AFA5BA9-584D-4844-BBC0-7EB369CAF736}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{77AC4836-D342-4E48-9AC5-72B0289CAFBC}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{429D7D35-3178-428A-B05F-B35EF176F34A}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe ==================== Herstelpunten ========================= AANDACHT: Systeemherstel is uitgeschakeld ==================== Defecte Apparaatbeheer Apparaten ============= ==================== Eventlog fouten: ========================= Applicatiefouten: ================== Error: (04/20/2017 05:08:41 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY) Description: Overgeslagen: de validatie van Eap method DLL path is mislukt. Fout: id van type=43, id van auteur=9, id van leverancier=0, type leverancier=0 Error: (04/20/2017 05:08:41 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY) Description: Overgeslagen: de validatie van Eap method DLL path is mislukt. Fout: id van type=25, id van auteur=9, id van leverancier=0, type leverancier=0 Error: (04/20/2017 05:08:41 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY) Description: Overgeslagen: de validatie van Eap method DLL path is mislukt. Fout: id van type=17, id van auteur=9, id van leverancier=0, type leverancier=0 Error: (04/20/2017 05:08:41 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY) Description: Overgeslagen: de validatie van Eap method DLL path is mislukt. Fout: id van type=43, id van auteur=9, id van leverancier=0, type leverancier=0 Error: (04/20/2017 05:08:41 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY) Description: Overgeslagen: de validatie van Eap method DLL path is mislukt. Fout: id van type=25, id van auteur=9, id van leverancier=0, type leverancier=0 Error: (04/20/2017 05:08:41 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY) Description: Overgeslagen: de validatie van Eap method DLL path is mislukt. Fout: id van type=17, id van auteur=9, id van leverancier=0, type leverancier=0 Error: (04/20/2017 07:23:53 AM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY) Description: Overgeslagen: de validatie van Eap method DLL path is mislukt. Fout: id van type=43, id van auteur=9, id van leverancier=0, type leverancier=0 Error: (04/20/2017 07:23:53 AM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY) Description: Overgeslagen: de validatie van Eap method DLL path is mislukt. Fout: id van type=25, id van auteur=9, id van leverancier=0, type leverancier=0 Error: (04/20/2017 07:23:53 AM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY) Description: Overgeslagen: de validatie van Eap method DLL path is mislukt. Fout: id van type=17, id van auteur=9, id van leverancier=0, type leverancier=0 Error: (04/20/2017 07:23:53 AM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT AUTHORITY) Description: Overgeslagen: de validatie van Eap method DLL path is mislukt. Fout: id van type=43, id van auteur=9, id van leverancier=0, type leverancier=0 Systeemfouten: ============= Error: (04/20/2017 07:45:14 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} en APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} aan de gebruiker NT AUTHORITY\SYSTEM SID (S-1-5-18) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (04/20/2017 06:14:29 PM) (Source: TPM) (EventID: 12) (User: ) Description: Het apparaatstuurprogramma voor TPM (Trusted Platform Module) heeft een fout aangetroffen in de TPM-hardware, waardoor sommige toepassingen die gebruikmaken van TPM-services, mogelijk niet correct werken. Start uw computer opnieuw op, zodat de TPM-hardware opnieuw wordt ingesteld. Neem contact op met de computerfabrikant voor aanvullende ondersteuning met betrekking tot dit hardwareprobleem. Error: (04/20/2017 05:09:00 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} en APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} aan de gebruiker NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (04/20/2017 05:09:00 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} en APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} aan de gebruiker NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (04/20/2017 05:08:30 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: De CldFlt-service kan vanwege de volgende fout niet worden gestart: De aanvraag wordt niet ondersteund. Error: (04/20/2017 07:24:13 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} en APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} aan de gebruiker NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (04/20/2017 07:24:13 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} en APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} aan de gebruiker NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (04/20/2017 07:23:49 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: De CldFlt-service kan vanwege de volgende fout niet worden gestart: De aanvraag wordt niet ondersteund. Error: (04/19/2017 08:56:52 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} en APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} aan de gebruiker NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (04/19/2017 08:56:52 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} en APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} aan de gebruiker NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. ==================== Geheugen info =========================== Processor: Intel(R) Core(TM) i5-6267U CPU @ 2.90GHz Percentage geheugen in gebruik: 56% Totaal fysiek RAM-geheugen: 6025.35 MB Beschikbaar fysiek RAM-geheugen: 2613.13 MB Totaal Virtueel geheugen: 7689.35 MB Beschikbaar Virtual geheugen: 4193.53 MB ==================== Schijven ================================ Drive c: (Boot) (Fixed) (Total:117.15 GB) (Free:13.89 GB) NTFS Drive d: (Data) (Fixed) (Total:871.51 GB) (Free:620.1 GB) NTFS Drive e: (Recover) (Fixed) (Total:60 GB) (Free:36.92 GB) NTFS ==================== MBR & Partitietabel ================== ======================================================== Disk: 0 (Size: 931.5 GB) (Disk ID: 411D467F) Partition: GPT. ======================================================== Disk: 1 (Size: 119.2 GB) (Disk ID: 411D4644) Partition: GPT. ==================== Eind van Addition.txt ============================