Scanresultaten van Farbar Recovery Scan Tool (FRST) (x86) Versie: 21-06-2017 01 Gestart door Julien (Beheerder) op USER-PC (24-06-2017 15:31:53) Gestart vanaf C:\Users\Julien\Desktop Geladen Profielen: Julien (Beschikbare Profielen: Julien & DefaultAppPool) Platform: Microsoft Windows 10 Home Versie 1607 (X86) Taal: Nederlands (Nederland) Internet Explorer Versie 11 (Standaardbrowser: Edge) Boot Modus: Normal Handleiding voor Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processen (gefilterd) ================= (Als een item is opgenomen in de fixlist, het proces zal worden gesloten. Het bestand zal niet worden verplaatst.) (NCH Software) C:\Program Files\NCH Software\BroadCam\broadcam.exe (BlueStack Systems, Inc.) C:\Program Files\BlueStacks\HD-LogRotatorService.exe (BlueStack Systems, Inc.) C:\Program Files\BlueStacks\HD-UpdaterService.exe () C:\Program Files\HiSuite\HandSetService\HuaweiHiSuiteService.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\VS7DEBUG\MDM.EXE () C:\Program Files\Blaze Media Pro\NMSAccess32.exe (Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\22.9.4.8\nis.exe (Yahoo! Inc.) C:\Program Files\Yahoo!\YNanoClient\cpn0\YNanoService.exe (Google Inc.) C:\Program Files\Google\Update\1.3.33.5\GoogleCrashHandler.exe (Symantec Corporation) C:\Program Files\Norton Internet Security\Engine\22.9.4.8\nis.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (Belgian Government) C:\Program Files\Belgium Identity Card\beid35gui.exe (Applian Technologies, Inc.) C:\Program Files\Freecorder\FLVSrvc.exe (Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe () C:\Program Files\Anvsoft\Syncios\SynciosDeviceService.exe (TomTom) C:\Program Files\MyDrive Connect\MyDriveConnect.exe () C:\Program Files\Anvsoft\Syncios\androidnotifier.exe (Spotify Ltd) C:\Users\Julien\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe () C:\Program Files\Anvsoft\Syncios\adb.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.17042.14111.0_x86__8wekyb3d8bbwe\Music.UI.exe () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.18.614.0_x86__kzf8qxf38zg5c\SkypeHost.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe ==================== Register (gefilterd) ==================== (Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [6707744 2008-12-23] (Realtek Semiconductor) HKLM\...\Run: [Skytel] => C:\Program Files\Realtek\Audio\HDA\Skytel.exe [1833504 2008-12-23] (Realtek Semiconductor Corp.) HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation) HKLM\...\Run: [beid] => C:\Program Files\Belgium Identity Card\beid35gui.exe [2068480 2011-02-03] (Belgian Government) HKLM\...\Run: [Freecorder FLV Service] => C:\Program Files\Freecorder\FLVSrvc.exe [167936 2011-03-24] (Applian Technologies, Inc.) HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [41208 2012-12-19] (Adobe Systems Incorporated) HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [946352 2012-12-03] (Adobe Systems Incorporated) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated) HKLM\...\Run: [SwitchBoard] => C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM\...\Run: [AdobeCS5ServiceManager] => C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated) HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.) HKLM\...\Run: [NeroFilterCheck] => C:\Windows\system32\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh) HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [508800 2014-12-17] (Oracle Corporation) HKLM\...\Run: [HP Software Update] => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard) HKLM\...\Run: [Syncios device service] => C:\Program Files\Anvsoft\Syncios\SynciosDeviceService.exe [1594008 2017-03-21] () HKU\S-1-5-21-74069700-2675398159-843416849-1001\...\Run: [DAEMON Tools Ultra Agent] => C:\Program Files\DAEMON Tools Ultra\DTAgent.exe [3192056 2013-11-14] (Disc Soft Ltd) HKU\S-1-5-21-74069700-2675398159-843416849-1001\...\Run: [MyDriveConnect.exe] => C:\Program Files\MyDrive Connect\MyDriveConnect.exe [473464 2014-03-17] (TomTom) HKU\S-1-5-21-74069700-2675398159-843416849-1001\...\Run: [Spotify Web Helper] => C:\Users\Julien\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2022968 2015-05-23] (Spotify Ltd) HKU\S-1-5-21-74069700-2675398159-843416849-1001\...\MountPoints2: {02e8e4df-4a1c-11e7-9c5d-00270e182332} - "E:\HiSuiteDownLoader.exe" HKU\S-1-5-21-74069700-2675398159-843416849-1001\...\MountPoints2: {02e8e635-4a1c-11e7-9c5d-00270e182332} - "E:\HiSuiteDownLoader.exe" HKU\S-1-5-21-74069700-2675398159-843416849-1001\...\MountPoints2: {0c5335be-3acd-11e7-9c5c-00270e182332} - "E:\HiSuiteDownLoader.exe" HKU\S-1-5-21-74069700-2675398159-843416849-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Bubbles.scr [795648 2016-07-16] (Microsoft Corporation) ShellIconOverlayIdentifiers: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files\Norton Internet Security\Engine\22.9.4.8\buShell.dll [2017-05-11] (Symantec Corporation) ShellIconOverlayIdentifiers: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files\Norton Internet Security\Engine\22.9.4.8\buShell.dll [2017-05-11] (Symantec Corporation) ShellIconOverlayIdentifiers: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files\Norton Internet Security\Engine\22.9.4.8\buShell.dll [2017-05-11] (Symantec Corporation) ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\Julien\AppData\Local\Microsoft\OneDrive\17.3.6917.0607\FileSyncShell.dll [2017-06-14] (Microsoft Corporation) ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\Julien\AppData\Local\Microsoft\OneDrive\17.3.6917.0607\FileSyncShell.dll [2017-06-14] (Microsoft Corporation) ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\Julien\AppData\Local\Microsoft\OneDrive\17.3.6917.0607\FileSyncShell.dll [2017-06-14] (Microsoft Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2010-10-02] ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.) Startup: C:\Users\Julien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2015-11-28] ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) Startup: C:\Users\Julien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Inktwaarschuwingen controleren - HP ENVY 4500 series.lnk [2017-06-22] ShortcutTarget: Inktwaarschuwingen controleren - HP ENVY 4500 series.lnk -> C:\Program Files\HP\HP ENVY 4500 series\Bin\HPStatusBL.dll (Hewlett-Packard Development Company, LP) Startup: C:\Users\Julien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Schermopname en Snel starten.lnk [2010-11-14] ShortcutTarget: OneNote 2007 Schermopname en Snel starten.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation) ==================== Internet (gefilterd) ==================== (Als een item is opgenomen in de fixlist, als het een registry item is wordt verwijderd of hersteld naar de standaard.) Hosts: Er zijn meer dan één item in Hosts. Zie Hosts deel van Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{8f306cad-e588-406d-bfd1-cdec4b742015}: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{efdd7284-d447-462c-ab5c-99d2a5d5af3c}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== HKU\S-1-5-21-74069700-2675398159-843416849-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/nl-be/?ocid=iehp URLSearchHook: HKLM - Yahoo! Axis for IE - {035FDC10-9F1D-430E-87DA-573FFBF5608D} - C:\Program Files\Yahoo!\YNanoClient\cpn0\YNanoClient_IE.dll Geen bestand SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\.DEFAULT -> {355382C1-4EEB-4E3C-A29E-AF09FF51C7E8} URL = hxxp://websearch.ask.com/redirect?client=ie&tb=BT5&o=15443&src=kw&q={searchTerms}&locale=nl_EU&apn_ptnrs=GX&apn_dtid=YYYYYYB3BE&apn_uid=BFC88AD1-F469-407F-BF15-5CF281E10E2A&apn_sauid=780949A3-C120-4BA5-AA07-370BA849D820 BHO: Norton Identity Safety -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files\Norton Internet Security\Engine\22.9.4.8\coIEPlg.dll [2017-05-26] (Symantec Corporation) Toolbar: HKLM - Yahoo! Axis for IE - {035FDC10-9F1D-430E-87DA-573FFBF5608D} - C:\Program Files\Yahoo!\YNanoClient\cpn0\YNanoClient_IE.dll Geen bestand Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\22.9.4.8\coIEPlg.dll [2017-05-26] (Symantec Corporation) DPF: {CAFEEFAC-0018-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Users\Julien\AppData\Roaming\Mozilla\Firefox\Profiles\8dg9bhp9.default-1434895071616 [2017-06-22] FF Extension: (Pin It button) - C:\Users\Julien\AppData\Roaming\Mozilla\Firefox\Profiles\8dg9bhp9.default-1434895071616\Extensions\jid1-YcMV6ngYmQRA2w@jetpack.xpi [2015-07-08] FF Extension: (Web Developer Button) - C:\Users\Julien\AppData\Roaming\Mozilla\Firefox\Profiles\8dg9bhp9.default-1434895071616\Extensions\{30ef946c-8361-4be4-9666-8c1a35784f7a} [2016-05-01] FF Extension: (Web Developer) - C:\Users\Julien\AppData\Roaming\Mozilla\Firefox\Profiles\8dg9bhp9.default-1434895071616\Extensions\{c45c406e-ab73-11d8-be73-000a95be3b12}.xpi [2017-04-22] FF Extension: (Belgium eID) - C:\Program Files\Mozilla Firefox\extensions\belgiumeid@eid.belgium.be [2016-11-25] [niet getekend] FF HKLM\...\Firefox\Extensions: [belgiumeid@eid.belgium.be] - C:\Program Files\Mozilla Firefox\extensions\belgiumeid@eid.belgium.be FF HKLM\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_22.5.2.15\coFFAddon FF Extension: (Norton Security Toolbar) - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_22.5.2.15\coFFAddon [2017-06-03] FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_26_0_0_131.dll [2017-06-17] () FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-26] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre1.8.0_31\bin\new_plugin\npjp2.dll [Geen bestand] FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-26] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation) FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation) FF Plugin: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2012-09-12] (Microsoft Corporation) FF Plugin: @threeships.nl/TSHelper;version=2.0.0.4 -> C:\Program Files\Common Files\ThreeShips Shared\Dll\\npTSHelper.dll [2014-03-20] (Three Ships) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-27] (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-27] (Google Inc.) FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll [2012-12-18] (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2011-12-15] (Sun Microsystems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL [2006-10-26] (Microsoft Corporation) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2012-12-18] (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2014-01-10] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2014-01-10] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2014-01-10] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2014-01-10] (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2014-01-10] (Apple Inc.) Chrome: ======= CHR DefaultProfile: Profile 1 CHR Profile: C:\Users\Julien\AppData\Local\Google\Chrome\User Data\Default [2017-06-09] CHR Extension: (Offline Documenten) - C:\Users\Julien\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16] CHR Extension: (Mailtrack voor Gmail en Inbox: e-mail tracken) - C:\Users\Julien\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndnaehgpjlnokgebbaldlmgkapkpjkkb [2017-06-08] CHR Extension: (Betalingen via Chrome Web Store) - C:\Users\Julien\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-09] CHR Extension: (Gmail) - C:\Users\Julien\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-25] CHR Extension: (Chrome Media Router) - C:\Users\Julien\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-05-12] CHR Profile: C:\Users\Julien\AppData\Local\Google\Chrome\User Data\Profile 1 [2017-06-24] CHR Extension: (Norton Security Toolbar) - C:\Users\Julien\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cjabmdjcfcfdmffimndhafhblfmpjdpe [2017-06-09] CHR Extension: (Norton Identity Safe) - C:\Users\Julien\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\iikflkcanblccfahdhdonehdalibjnif [2017-06-09] CHR Extension: (Betalingen via Chrome Web Store) - C:\Users\Julien\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-06-09] CHR Extension: (Chrome Media Router) - C:\Users\Julien\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-06-09] CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files\Norton Internet Security\Engine\22.9.4.8\Exts\Chrome.crx [2017-06-03] CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx ==================== Services (gefilterd) ==================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) R2 BroadCamService; C:\Program Files\NCH Software\BroadCam\broadcam.exe [2591304 2013-06-12] (NCH Software) S2 BstHdAndroidSvc; C:\Program Files\BlueStacks\HD-Service.exe [433784 2015-06-16] (BlueStack Systems, Inc.) R2 BstHdLogRotatorSvc; C:\Program Files\BlueStacks\HD-LogRotatorService.exe [413304 2015-06-16] (BlueStack Systems, Inc.) R2 BstHdUpdaterSvc; C:\Program Files\BlueStacks\HD-UpdaterService.exe [831096 2015-07-21] (BlueStack Systems, Inc.) S3 Disc Soft Bus Service; C:\Program Files\DAEMON Tools Ultra\DiscSoftBusService.exe [723192 2013-11-14] (Disc Soft Ltd) S2 HitmanProScheduler; C:\Program Files\HitmanPro\hmpsched.exe [113624 2017-06-20] (SurfRight B.V.) R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [Bestand niet getekend] R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-05-21] (Hewlett-Packard Co.) [Bestand niet getekend] R2 HuaweiHiSuiteService.exe; C:\Program Files\HiSuite\HandSetService\HuaweiHiSuiteService.exe [155848 2017-04-11] () [Bestand niet getekend] S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [Bestand niet getekend] R2 NIS; C:\Program Files\Norton Internet Security\Engine\22.9.4.8\NIS.exe [288520 2017-05-27] (Symantec Corporation) R2 NMSAccess; C:\Program Files\Blaze Media Pro\NMSAccess32.exe [71096 2009-01-12] () S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [Bestand niet getekend] S3 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Bestand niet getekend] S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [271488 2017-04-28] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [84920 2017-04-28] (Microsoft Corporation) R2 YNanoService; C:\Program Files\Yahoo!\YNanoClient\cpn0\YNanoService.exe [157016 2012-07-25] (Yahoo! Inc.) ===================== Drivers (gefilterd) ====================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) R1 BHDrvx86; C:\Program Files\Norton Internet Security\NortonData\22.5.2.15\Definitions\BASHDefs\20170623.001\BHDrvx86.sys [1359488 2017-05-18] (Symantec Corporation) R2 BstHdDrv; C:\Program Files\BlueStacks\HD-Hypervisor-x86.sys [131704 2015-06-16] (BlueStack Systems) R1 ccSet_NIS; C:\WINDOWS\system32\drivers\NIS\1609040.008\ccSetx86.sys [137880 2017-05-11] (Symantec Corporation) R3 debutfilter; C:\WINDOWS\System32\DRIVERS\debutfilterx86.sys [43344 2014-01-07] () S3 dtscsibus; C:\WINDOWS\System32\DRIVERS\dtscsibus.sys [24704 2014-02-24] (Disc Soft Ltd) R1 eeCtrl; C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [392352 2017-05-12] (Symantec Corporation) R3 EraserUtilRebootDrv; C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [124576 2017-05-12] (Symantec Corporation) S3 ew_usbccgpfilter; C:\WINDOWS\System32\drivers\ew_usbccgpfilter.sys [15360 2017-04-11] (Huawei Technologies Co., Ltd.) R0 gfibto; C:\WINDOWS\System32\drivers\gfibto.sys [13560 2013-02-23] (GFI Software) R1 IDSVix86; C:\Program Files\Norton Internet Security\NortonData\22.5.2.15\Definitions\IPSDefs\20170623.001\IDSvix86.sys [842880 2017-05-20] (Symantec Corporation) S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [62976 2016-07-16] () S3 qcfilter; C:\WINDOWS\System32\drivers\qcusbfilter.sys [39992 2017-03-15] (QUALCOMM Incorporated) S3 qcusbnet; C:\WINDOWS\System32\drivers\qcusbnet.sys [366136 2017-03-15] (QUALCOMM Incorporated) S3 qcusbser; C:\WINDOWS\system32\DRIVERS\qcusbser.sys [216632 2017-03-15] (QUALCOMM Incorporated) R3 rt640x86; C:\WINDOWS\System32\drivers\rt640x86.sys [494080 2016-07-16] (Realtek ) R1 SRTSP; C:\WINDOWS\System32\Drivers\NIS\1609040.008\SRTSP.SYS [624280 2017-05-11] (Symantec Corporation) R1 SRTSPX; C:\WINDOWS\system32\drivers\NIS\1609040.008\SRTSPX.SYS [41112 2017-05-11] (Symantec Corporation) R0 SymEFASI; C:\WINDOWS\System32\drivers\NIS\1609040.008\SYMEFASI.SYS [1344664 2017-05-11] (Symantec Corporation) S0 SymELAM; C:\WINDOWS\System32\drivers\NIS\1609040.008\SYMELAM.SYS [20512 2017-05-11] (Symantec Corporation) R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT.SYS [89296 2017-05-18] (Symantec Corporation) R1 SymIRON; C:\WINDOWS\system32\drivers\NIS\1609040.008\Ironx86.SYS [232600 2017-05-11] (Symantec Corporation) R1 SymNetS; C:\WINDOWS\System32\Drivers\NIS\1609040.008\SYMNETS.SYS [423632 2017-05-11] (Symantec Corporation) S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [37912 2016-07-16] (Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [244576 2016-07-16] (Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [100192 2016-07-16] (Microsoft Corporation) R3 WUDFWpdMtp; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [161280 2016-07-16] (Microsoft Corporation) U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [102272 2017-04-11] (Huawei Technologies Co., Ltd.) U3 idsvc; geen ImagePath ==================== NetSvcs (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) ==================== Een Maand Gemaakt bestanden en mappen ======== (Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.) 2017-06-24 15:31 - 2017-06-24 15:35 - 00023151 _____ C:\Users\Julien\Desktop\FRST.txt 2017-06-24 15:31 - 2017-06-24 15:31 - 00000000 ____D C:\FRST 2017-06-24 15:30 - 2017-06-24 15:30 - 01778688 _____ (Farbar) C:\Users\Julien\Desktop\FRST.exe 2017-06-20 15:32 - 2017-06-20 15:33 - 00000000 ____D C:\Program Files\HitmanPro 2017-06-20 15:30 - 2017-06-20 15:55 - 00000000 ____D C:\ProgramData\HitmanPro 2017-06-20 13:28 - 2017-06-20 13:28 - 00216454 _____ C:\Users\Julien\Downloads\Lied_nummer_31.amr 2017-06-20 13:14 - 2017-06-20 13:14 - 00770694 _____ C:\Users\Julien\Desktop\Lied_nummer_21.amr 2017-06-20 12:51 - 2017-06-20 12:51 - 00259366 _____ C:\Users\Julien\Desktop\Lied_nummer_11 (1).amr 2017-06-20 12:50 - 2017-06-20 12:50 - 00259366 _____ C:\Users\Julien\Desktop\Lied_nummer_11.amr 2017-06-19 21:06 - 2017-06-19 21:06 - 00176313 _____ C:\Users\Julien\Desktop\13401011001628.pdf 2017-06-17 17:12 - 2017-06-17 17:12 - 00115659 _____ C:\Users\Julien\Desktop\independent-1993 (1)-1.jpeg 2017-06-16 22:45 - 2017-06-16 22:45 - 00000000 ___SD C:\WINDOWS\UpdateAssistantV2 2017-06-14 13:23 - 2017-06-03 11:08 - 02643968 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll 2017-06-14 13:23 - 2017-06-03 11:04 - 00773120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe 2017-06-14 13:23 - 2017-06-03 11:03 - 01988096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll 2017-06-14 13:22 - 2017-06-03 12:15 - 00099672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys 2017-06-14 13:22 - 2017-06-03 12:03 - 00094560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys 2017-06-14 13:22 - 2017-06-03 11:58 - 00340832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2017-06-14 13:22 - 2017-06-03 11:55 - 00780640 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe 2017-06-14 13:22 - 2017-06-03 11:53 - 00454496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2017-06-14 13:22 - 2017-06-03 11:49 - 20967840 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2017-06-14 13:22 - 2017-06-03 11:48 - 01384704 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2017-06-14 13:22 - 2017-06-03 11:43 - 01964384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2017-06-14 13:22 - 2017-06-03 11:33 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll 2017-06-14 13:22 - 2017-06-03 11:31 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExSMime.dll 2017-06-14 13:22 - 2017-06-03 11:31 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll 2017-06-14 13:22 - 2017-06-03 11:30 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2017-06-14 13:22 - 2017-06-03 11:29 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe 2017-06-14 13:22 - 2017-06-03 11:26 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBrokerUI.dll 2017-06-14 13:22 - 2017-06-03 11:25 - 00417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2017-06-14 13:22 - 2017-06-03 11:25 - 00268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll 2017-06-14 13:22 - 2017-06-03 11:22 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpipcfg.dll 2017-06-14 13:22 - 2017-06-03 11:20 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2017-06-14 13:22 - 2017-06-03 11:06 - 03664384 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2017-06-14 13:22 - 2017-06-03 11:06 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2017-06-14 13:22 - 2017-06-03 11:05 - 01236480 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2017-06-14 13:22 - 2017-06-03 11:04 - 06042624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2017-06-14 13:22 - 2017-06-03 11:04 - 01889792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2017-06-14 13:22 - 2017-06-03 11:02 - 02997760 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2017-06-14 13:22 - 2017-03-04 08:22 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2017-06-14 13:22 - 2017-03-04 08:19 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2017-06-14 13:22 - 2016-09-07 06:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentActivation.dll 2017-06-14 13:21 - 2017-06-03 12:50 - 00315744 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll 2017-06-14 13:21 - 2017-06-03 12:50 - 00101216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll 2017-06-14 13:21 - 2017-06-03 12:13 - 05996384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2017-06-14 13:21 - 2017-06-03 12:13 - 01725136 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2017-06-14 13:21 - 2017-06-03 12:03 - 00950112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2017-06-14 13:21 - 2017-06-03 11:55 - 01896288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2017-06-14 13:21 - 2017-06-03 11:55 - 00342368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2017-06-14 13:21 - 2017-06-03 11:52 - 00607072 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll 2017-06-14 13:21 - 2017-06-03 11:52 - 00111968 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll 2017-06-14 13:21 - 2017-06-03 11:44 - 01409536 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll 2017-06-14 13:21 - 2017-06-03 11:44 - 00545944 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2017-06-14 13:21 - 2017-06-03 11:32 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll 2017-06-14 13:21 - 2017-06-03 11:31 - 00037376 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll 2017-06-14 13:21 - 2017-06-03 11:28 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\system32\edputil.dll 2017-06-14 13:21 - 2017-06-03 11:25 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll 2017-06-14 13:21 - 2017-06-03 11:25 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll 2017-06-14 13:21 - 2017-06-03 11:23 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2017-06-14 13:21 - 2017-06-03 11:22 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll 2017-06-14 13:21 - 2017-06-03 11:22 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcorehc.dll 2017-06-14 13:21 - 2017-06-03 11:22 - 00215552 _____ (Microsoft Corporation) C:\WINDOWS\system32\HNetCfgClient.dll 2017-06-14 13:21 - 2017-06-03 11:20 - 00668672 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll 2017-06-14 13:21 - 2017-06-03 11:16 - 00884224 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe 2017-06-14 13:21 - 2017-06-03 11:16 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll 2017-06-14 13:21 - 2017-06-03 11:15 - 19414016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2017-06-14 13:21 - 2017-06-03 11:15 - 18364928 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2017-06-14 13:21 - 2017-06-03 11:08 - 12187648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2017-06-14 13:21 - 2017-06-03 11:05 - 01120768 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2017-06-14 13:21 - 2017-06-03 11:05 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\hnetcfg.dll 2017-06-14 13:21 - 2017-06-03 11:05 - 00183296 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll 2017-06-14 13:21 - 2017-06-03 11:04 - 02006528 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll 2017-06-14 13:21 - 2017-06-03 11:04 - 01526272 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll 2017-06-14 13:21 - 2017-06-03 11:04 - 00941568 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll 2017-06-14 13:21 - 2017-06-02 09:35 - 00080078 _____ C:\WINDOWS\system32\normidna.nls 2017-06-14 13:21 - 2017-05-25 08:56 - 00034144 _____ (Microsoft Corporation) C:\WINDOWS\system32\OOBEUpdater.exe 2017-06-14 13:20 - 2017-06-03 12:50 - 01336160 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2017-06-14 13:20 - 2017-06-03 12:50 - 00996192 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2017-06-14 13:20 - 2017-06-03 12:50 - 00514400 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2017-06-14 13:20 - 2017-06-03 12:50 - 00455000 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2017-06-14 13:20 - 2017-06-03 12:50 - 00284000 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2017-06-14 13:20 - 2017-06-03 12:50 - 00254816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll 2017-06-14 13:20 - 2017-06-03 12:50 - 00192856 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2017-06-14 13:20 - 2017-06-03 12:50 - 00113504 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2017-06-14 13:20 - 2017-06-03 12:50 - 00083296 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2017-06-14 13:20 - 2017-06-03 12:50 - 00030560 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2017-06-14 13:20 - 2017-06-03 12:22 - 00231776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys 2017-06-14 13:20 - 2017-06-03 11:58 - 00154976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys 2017-06-14 13:20 - 2017-06-03 11:54 - 00290656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS 2017-06-14 13:20 - 2017-06-03 11:52 - 01021784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll 2017-06-14 13:20 - 2017-06-03 11:39 - 05686272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2017-06-14 13:20 - 2017-06-03 11:32 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys 2017-06-14 13:20 - 2017-06-03 11:19 - 01164288 _____ (Microsoft Corporation) C:\WINDOWS\system32\certutil.exe 2017-06-14 13:20 - 2017-06-03 11:12 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdProxy.dll 2017-06-13 14:52 - 2017-06-13 14:52 - 00000000 ____D C:\ProgramData\Emsisoft 2017-06-13 14:47 - 2017-06-13 18:32 - 00000000 ____D C:\EEK 2017-06-09 15:21 - 2017-06-09 22:02 - 00001384 _____ C:\Users\Julien\Desktop\Norton Installation Files.lnk 2017-06-09 13:34 - 2009-06-10 23:39 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20170609-133400.backup 2017-06-09 12:59 - 2017-06-09 12:59 - 11007936 _____ (SurfRight B.V.) C:\Users\Julien\Downloads\hitmanpro.exe 2017-06-09 12:58 - 2017-06-09 12:58 - 00000000 ____D C:\Users\Julien\Downloads\SpybotPortable 2017-06-09 12:55 - 2017-06-09 12:56 - 119710544 _____ (PortableApps.com) C:\Users\Julien\Downloads\SpybotPortable_2.5.paf.exe 2017-06-07 19:33 - 2017-06-09 13:53 - 00000000 ____D C:\Users\Julien\Downloads\Mysterious.Skin.2004.DVDRipMorsan 2017-06-07 19:26 - 2017-06-07 19:26 - 00037254 _____ C:\Users\Julien\Downloads\Mysterious.Skin.2004.DVDRipMorsan_archive (1).torrent 2017-06-07 19:25 - 2017-06-07 19:25 - 00037254 _____ C:\Users\Julien\Downloads\Mysterious.Skin.2004.DVDRipMorsan_archive.torrent 2017-06-06 18:38 - 2017-06-06 18:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HiSuite 2017-06-06 18:38 - 2017-04-11 04:17 - 00249856 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\hw_quusbnet.sys 2017-06-06 18:38 - 2017-04-11 04:17 - 00199680 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\hw_quusbmdm.sys 2017-06-06 18:38 - 2017-04-11 04:17 - 00113792 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\hw_cdcacm.sys 2017-06-06 18:38 - 2017-04-11 04:17 - 00102272 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\hw_usbdev.sys 2017-06-06 18:37 - 2017-06-06 18:38 - 00000000 ____D C:\Program Files\HiSuite 2017-06-04 16:47 - 2017-06-04 16:47 - 00019025 _____ C:\Users\Julien\Downloads\original_msg.txt 2017-06-03 20:16 - 2017-06-03 20:16 - 00000000 ____D C:\Users\Julien\AppData\Local\NPE 2017-06-01 20:44 - 2017-06-01 20:44 - 00000000 ____D C:\Users\Julien\Documents\HiSuite 2017-06-01 20:44 - 2017-04-11 04:17 - 01837296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFUpdate_01009.dll 2017-06-01 20:44 - 2017-04-11 04:17 - 01461992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdfCoInstaller01009.dll 2017-06-01 20:44 - 2017-04-11 04:17 - 00851176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winusbcoinstaller2.dll 2017-06-01 20:44 - 2017-04-11 04:17 - 00015360 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\ew_usbccgpfilter.sys 2017-06-01 20:43 - 2017-06-06 18:37 - 00000000 ____D C:\Users\Julien\AppData\Local\Hisuite 2017-06-01 20:35 - 2017-06-01 20:36 - 24541892 _____ C:\Users\Julien\Downloads\HiSuite_5.0.1.300_OVE.zip 2017-05-27 15:00 - 2017-05-27 15:00 - 00008733 _____ C:\Users\Julien\Downloads\oxfam-attest-2016.pdf ==================== Een Maand Gewijzigd bestanden en mappen ======== (Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.) 2017-06-24 12:42 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\AppReadiness 2017-06-24 12:20 - 2016-09-28 22:31 - 00000000 ____D C:\WINDOWS\system32\SleepStudy 2017-06-23 20:54 - 2015-03-28 15:07 - 00000000 ____D C:\Program Files\BlueStacks 2017-06-23 15:09 - 2010-06-12 17:33 - 00000000 ____D C:\Users\Julien\AppData\Roaming\vlc 2017-06-23 07:27 - 2016-07-16 10:29 - 00000000 ___HD C:\Program Files\WindowsApps 2017-06-22 23:17 - 2016-11-25 23:51 - 00000000 ____D C:\Users\Julien\AppData\LocalLow\Mozilla 2017-06-22 23:15 - 2016-11-25 17:55 - 00000000 ____D C:\Program Files\Mozilla Firefox 2017-06-22 09:21 - 2011-03-29 19:14 - 00000000 ____D C:\Program Files\Belgium Identity Card 2017-06-21 20:51 - 2015-10-04 16:58 - 00002238 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2017-06-21 14:12 - 2016-09-28 22:51 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2017-06-21 14:11 - 2016-07-16 04:22 - 00786432 _____ C:\WINDOWS\system32\config\BBI 2017-06-21 01:12 - 2016-09-28 22:36 - 00000000 ____D C:\Users\Julien 2017-06-20 16:06 - 2016-09-28 22:35 - 02134036 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2017-06-20 16:06 - 2016-07-16 19:20 - 00790562 _____ C:\WINDOWS\system32\perfh013.dat 2017-06-20 16:06 - 2016-07-16 19:20 - 00187506 _____ C:\WINDOWS\system32\perfc013.dat 2017-06-20 15:54 - 2013-12-24 23:23 - 00013340 _____ C:\WINDOWS\system32\.crusader 2017-06-20 15:54 - 2013-02-24 18:19 - 00000000 ____D C:\Program Files\Yahoo! 2017-06-20 15:40 - 2017-03-31 13:55 - 00000000 ____D C:\Users\Julien\Desktop\a6ina3 2017-06-20 15:36 - 2016-07-04 18:38 - 00000000 ____D C:\neww 2017-06-20 15:33 - 2013-11-03 20:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro 2017-06-20 15:25 - 2011-08-15 17:58 - 00000000 ____D C:\ProgramData\Soulseek 2017-06-20 04:24 - 2014-06-08 22:24 - 00000000 ____D C:\Program Files\MyDrive Connect 2017-06-17 11:38 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\rescache 2017-06-17 10:27 - 2016-07-16 10:28 - 00000000 ____D C:\WINDOWS\INF 2017-06-17 10:25 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\system32\Macromed 2017-06-17 10:20 - 2016-02-14 18:55 - 00000000 __RHD C:\Users\Public\AccountPictures 2017-06-17 10:18 - 2016-09-28 22:31 - 03918968 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2017-06-17 10:18 - 2016-07-16 04:22 - 00032768 _____ C:\WINDOWS\system32\config\ELAM 2017-06-17 10:17 - 2011-01-31 13:11 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2017-06-16 22:45 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\system32\appraiser 2017-06-16 22:45 - 2016-07-16 10:29 - 00000000 ____D C:\WINDOWS\ShellExperiences 2017-06-16 12:45 - 2016-05-13 13:55 - 00000000 ____D C:\Users\Julien\Desktop\musica 2017-06-15 13:18 - 2017-03-05 16:55 - 00000000 ____D C:\Users\Julien\Desktop\yuyuyu 2017-06-14 18:04 - 2017-02-28 14:49 - 00000000 ____D C:\Users\Julien\Desktop\plakken en airplane 2017-06-14 16:25 - 2016-02-22 19:30 - 00000000 ____D C:\Users\Julien\Desktop\VOLKAN AFFICHE 2017-06-14 13:42 - 2013-08-15 03:52 - 00000000 ____D C:\WINDOWS\system32\MRT 2017-06-14 13:38 - 2010-05-22 16:10 - 130903960 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2017-06-14 13:37 - 2011-01-31 13:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2017-06-14 13:34 - 2016-07-16 10:19 - 00000000 ____D C:\WINDOWS\CbsTemp 2017-06-14 12:45 - 2016-02-14 19:02 - 00002419 _____ C:\Users\Julien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2017-06-14 12:45 - 2016-02-14 19:02 - 00000000 ___RD C:\Users\Julien\OneDrive 2017-06-13 15:18 - 2011-06-23 13:50 - 00000000 ____D C:\Program Files\Freecorder 2017-06-12 15:09 - 2017-03-20 18:03 - 06712144 _____ C:\Users\Julien\Desktop\chet michaels.psd 2017-06-12 15:09 - 2010-05-25 18:37 - 00000000 ____D C:\Users\Julien\AppData\Roaming\Adobe 2017-06-12 15:09 - 2010-05-21 11:42 - 00000000 ____D C:\ProgramData\Adobe 2017-06-09 22:33 - 2010-05-25 18:48 - 00000000 ____D C:\Users\Julien\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Norton 2017-06-09 22:33 - 2010-05-25 18:48 - 00000000 ____D C:\ProgramData\Norton 2017-06-09 16:46 - 2010-05-28 20:54 - 00000000 ____D C:\Users\Julien\AppData\Roaming\BitTorrent 2017-06-09 13:36 - 2013-02-24 18:20 - 00000000 ____D C:\ProgramData\Yahoo! 2017-06-08 15:43 - 2016-10-05 22:39 - 00000000 ____D C:\Users\Julien\Desktop\dutch 2017-06-07 22:15 - 2014-03-01 13:59 - 00000000 ____D C:\Users\Julien\Documents\oefening lucrèce 2017-06-07 20:03 - 2010-06-26 17:00 - 00000000 ____D C:\Users\Julien\AppData\Local\CrashDumps 2017-06-03 20:26 - 2015-07-22 03:22 - 00000000 ____D C:\Program Files\Common Files\AV 2017-06-03 19:53 - 2016-07-27 22:53 - 00002421 _____ C:\Users\Public\Desktop\Norton Internet Security.lnk 2017-06-03 19:53 - 2015-08-12 04:39 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security 2017-06-03 19:53 - 2010-06-06 13:34 - 00000000 ____D C:\WINDOWS\system32\Drivers\NIS 2017-06-03 08:36 - 2016-07-16 10:31 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe 2017-06-03 08:36 - 2016-07-16 10:31 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl 2017-06-02 08:11 - 2010-06-06 13:34 - 00000000 ____D C:\Program Files\NortonInstaller 2017-05-28 15:30 - 2017-05-17 12:34 - 00000000 ____D C:\Users\Julien\Desktop\oberzetten zo 2017-05-27 15:53 - 2016-04-26 13:28 - 00000000 ____D C:\Users\Julien\Desktop\airplanefood ==================== Bestanden in de root van sommige mappen ======= 2014-07-06 12:18 - 2017-03-31 14:05 - 0000132 _____ () C:\Users\Julien\AppData\Roaming\Adobe BMP Format CS5 Prefs 2016-11-15 19:24 - 2016-11-15 19:32 - 0000132 _____ () C:\Users\Julien\AppData\Roaming\Adobe GIF Format CS5 Prefs 2015-12-05 16:17 - 2015-12-05 16:17 - 0000132 _____ () C:\Users\Julien\AppData\Roaming\Adobe PNG Format CS5 Prefs 2014-01-07 20:56 - 2014-01-07 20:56 - 0000046 _____ () C:\Users\Julien\AppData\Roaming\Camdata.ini 2014-01-07 20:56 - 2014-01-07 20:56 - 0000408 _____ () C:\Users\Julien\AppData\Roaming\CamLayout.ini 2014-01-07 20:56 - 2014-01-07 20:56 - 0000408 _____ () C:\Users\Julien\AppData\Roaming\CamShapes.ini 2014-01-07 20:56 - 2014-01-07 20:56 - 0004535 _____ () C:\Users\Julien\AppData\Roaming\CamStudio.cfg 2013-10-02 16:47 - 2013-10-03 13:42 - 0000004 _____ () C:\Users\Julien\AppData\Roaming\settings.ini 2014-01-07 20:54 - 2014-01-07 20:54 - 0000096 _____ () C:\Users\Julien\AppData\Roaming\version2.xml 2011-04-04 12:47 - 2011-04-04 12:47 - 0225280 ____T (MultiMedia Soft) C:\Users\Julien\AppData\Roaming\Microsoft\AdjMmsVista.dll 2014-01-05 20:39 - 2014-09-12 14:25 - 0001456 _____ () C:\Users\Julien\AppData\Local\Adobe Save for Web 12.0 Prefs 2012-01-24 17:40 - 2016-01-17 23:56 - 0013824 _____ () C:\Users\Julien\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2015-05-29 11:20 - 2015-05-29 11:20 - 0007612 _____ () C:\Users\Julien\AppData\Local\Resmon.ResmonCfg 2015-06-09 11:24 - 2015-06-09 11:24 - 0000057 _____ () C:\ProgramData\Ament.ini 2010-06-16 22:34 - 2010-11-20 20:54 - 0002823 _____ () C:\ProgramData\hpzinstall.log Bestanden om te verplaatsen of verwijderen: ==================== C:\Users\Julien\AppData\Roaming\settings.ini ==================== Bamital & volsnap ====================== (Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.) C:\WINDOWS\explorer.exe => Bestand is getekend C:\WINDOWS\system32\winlogon.exe => Bestand is getekend C:\WINDOWS\system32\wininit.exe => Bestand is getekend C:\WINDOWS\system32\svchost.exe => Bestand is getekend C:\WINDOWS\system32\services.exe => Bestand is getekend C:\WINDOWS\system32\User32.dll => Bestand is getekend C:\WINDOWS\system32\userinit.exe => Bestand is getekend C:\WINDOWS\system32\rpcss.dll => Bestand is getekend C:\WINDOWS\system32\dnsapi.dll => Bestand is getekend C:\WINDOWS\system32\Drivers\volsnap.sys => Bestand is getekend LastRegBack: 2017-06-17 10:36 ==================== Eind van FRST.txt ============================