Scanresultaten van Farbar Recovery Scan Tool (FRST) (x64) Versie: 02-07-2017 Gestart door Johan (Beheerder) op GEBRUIKER-PC (03-07-2017 19:08:15) Gestart vanaf C:\Users\Johan\Downloads Geladen Profielen: Gebruiker & Johan (Beschikbare Profielen: Gebruiker & Johan) Platform: Windows 7 Home Premium Service Pack 1 (X64) Taal: Nederlands (Nederland) Internet Explorer Versie 11 (Standaardbrowser: IE) Boot Modus: Normal Handleiding voor Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processen (gefilterd) ================= (Als een item is opgenomen in de fixlist, het proces zal worden gesloten. Het bestand zal niet worden verplaatst.) (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Byte Technologies LLC) C:\Program Files\ByteFence\ByteFenceService.exe (Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe (Copyright (c) 2017 Plays.tv, LLC) C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe () C:\Program Files\ByteFence\rtop\bin\rtop_svc.exe () C:\Program Files\WinZip Smart Monitor\WinZip Smart Monitor Service.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe (HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe () C:\Program Files\ByteFence\rtop\bin\rtop_bg.exe (WinZip) C:\Program Files\WinZip System Utilities Suite\WinZip System Utilities Suite.exe () C:\Program Files\WinZip Driver Updater\DriverUpdater.exe () C:\Users\Johan\AppData\Roaming\Event Monitor\em.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (The Chromium Authors) C:\Users\Gebruiker\AppData\Local\chromium\Application\chrome.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\concentr.exe (The Chromium Authors) C:\Users\Gebruiker\AppData\Local\chromium\Application\chrome.exe (Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\redirector.exe (Corel Corporation) C:\Program Files\WinZip Smart Monitor\WinZipSmartMonitor.exe (The Chromium Authors) C:\Users\Gebruiker\AppData\Local\chromium\Application\chrome.exe (The Chromium Authors) C:\Users\Gebruiker\AppData\Local\chromium\Application\chrome.exe (The Chromium Authors) C:\Users\Gebruiker\AppData\Local\chromium\Application\chrome.exe (Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\Receiver\Receiver.exe (Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\SelfServicePlugin\SelfServicePlugin.exe (Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe (The Chromium Authors) C:\Users\Gebruiker\AppData\Local\chromium\Application\chrome.exe (Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\AuthManager\AuthManSvr.exe () C:\Program Files\WinZip System Utilities Suite\WinZip Smart Alerts Service.exe (Byte Technologies LLC) C:\Program Files\ByteFence\ByteFence.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe () C:\Program Files\ByteFence\rsLggr.exe (AMD) C:\Windows\System32\atieclxx.exe () C:\Program Files\ByteFence\rtop\bin\rtop_bg.exe (WinZip International LLC) C:\Program Files\WinZip Registry Optimizer\RegistryOptimizer.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\concentr.exe (Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\redirector.exe (Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\Receiver\Receiver.exe (Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\SelfServicePlugin\SelfServicePlugin.exe (Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Corel Corporation) C:\Program Files\WinZip Smart Monitor\WinZipSmartMonitor.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe (Farbar) C:\Users\Johan\Downloads\FRST64 (2).exe ==================== Register (gefilterd) ==================== (Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.) HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1340192 2016-01-29] (Microsoft Corporation) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [213824 2017-05-10] (AVAST Software) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation) HKLM-x32\...\Run: [ConnectionCenter] => C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [533616 2017-02-15] (Citrix Systems, Inc.) HKLM-x32\...\Run: [Redirector] => C:\Program Files (x86)\Citrix\ICA Client\redirector.exe [324720 2017-02-15] (Citrix Systems, Inc.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-3157429923-292206502-2485843891-1000\...\Run: [EPSON SX440 Series] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIHBE.EXE [232448 2011-01-20] (SEIKO EPSON CORPORATION) HKU\S-1-5-21-3157429923-292206502-2485843891-1000\...\Run: [Chromium] => c:\users\gebruiker\appdata\local\chromium\application\chrome.exe [1068544 2016-03-18] (The Chromium Authors) HKU\S-1-5-21-3157429923-292206502-2485843891-1000\...\Policies\system: [LogonHoursAction] 2 HKU\S-1-5-21-3157429923-292206502-2485843891-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1 HKU\S-1-5-21-3157429923-292206502-2485843891-1001\...\Run: [EPSON SX440 Series] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIHBE.EXE [232448 2011-01-20] (SEIKO EPSON CORPORATION) HKU\S-1-5-21-3157429923-292206502-2485843891-1001\...\Policies\system: [LogonHoursAction] 2 HKU\S-1-5-21-3157429923-292206502-2485843891-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1 GroupPolicy\User: Restrictie <==== AANDACHT GroupPolicyUsers\S-1-5-21-3157429923-292206502-2485843891-1001\User: Restrictie <==== AANDACHT ==================== Internet (gefilterd) ==================== (Als een item is opgenomen in de fixlist, als het een registry item is wordt verwijderd of hersteld naar de standaard.) Hosts: Er zijn meer dan één item in Hosts. Zie Hosts deel van Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.192.1 Tcpip\..\Interfaces\{315FA1DD-AD03-4236-9955-261FAD8C70BE}: [DhcpNameServer] 89.101.251.229 89.101.251.228 Tcpip\..\Interfaces\{3B72707B-1A95-4A8D-B639-CDB0EA41DE37}: [DhcpNameServer] 192.168.192.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://nl.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_frmr_17_13¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dnl%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzutDtDtC0EtD0ByCyDtCzzyEtCyE0CzyyBtN0D0Tzu0StCzytCtAtN1L2XzutAtFtBzytFtAtFyDtBtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StD0FzytAyD0BtDtCtGtB0E0D0FtG0ByDyEtBtGtByCyC0FtGzztC0AtDyDyEtD0Czz0CtByE2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyD0FyC0DtB0DyEyEtGtAyEzzyEtGyE0FtC0BtGzzyByD0BtGtAtBtCtDtB0AtD0E0E0AtAyD2QtN0A0LzutB%26cr%3D14935247%26a%3Dwbf_frmr_17_13%26os_ver%3D6.1%26os%3DWindows%2B7%2BHome%2BPremium HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://nl.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_frmr_17_13¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dnl%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzutDtDtC0EtD0ByCyDtCzzyEtCyE0CzyyBtN0D0Tzu0StCzytCtAtN1L2XzutAtFtBzytFtAtFyDtBtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StD0FzytAyD0BtDtCtGtB0E0D0FtG0ByDyEtBtGtByCyC0FtGzztC0AtDyDyEtD0Czz0CtByE2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyD0FyC0DtB0DyEyEtGtAyEzzyEtGyE0FtC0BtGzzyByD0BtGtAtBtCtDtB0AtD0E0E0AtAyD2QtN0A0LzutB%26cr%3D14935247%26a%3Dwbf_frmr_17_13%26os_ver%3D6.1%26os%3DWindows%2B7%2BHome%2BPremium HKU\S-1-5-21-3157429923-292206502-2485843891-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.nl/ HKU\S-1-5-21-3157429923-292206502-2485843891-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.nl/ HKU\S-1-5-21-3157429923-292206502-2485843891-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/nl-nl/?ocid=iehp SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://nl.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_frmr_17_13¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dnl%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzutDtDtC0EtD0ByCyDtCzzyEtCyE0CzyyBtN0D0Tzu0StCzytCtAtN1L2XzutAtFtBzytFtAtFyDtBtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StD0FzytAyD0BtDtCtGtB0E0D0FtG0ByDyEtBtGtByCyC0FtGzztC0AtDyDyEtD0Czz0CtByE2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyD0FyC0DtB0DyEyEtGtAyEzzyEtGyE0FtC0BtGzzyByD0BtGtAtBtCtDtB0AtD0E0E0AtAyD2QtN0A0LzutB%26cr%3D14935247%26a%3Dwbf_frmr_17_13%26os_ver%3D6.1%26os%3DWindows%2B7%2BHome%2BPremium&p={searchTerms} SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://nl.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_frmr_17_13¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dnl%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzutDtDtC0EtD0ByCyDtCzzyEtCyE0CzyyBtN0D0Tzu0StCzytCtAtN1L2XzutAtFtBzytFtAtFyDtBtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StD0FzytAyD0BtDtCtGtB0E0D0FtG0ByDyEtBtGtByCyC0FtGzztC0AtDyDyEtD0Czz0CtByE2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyD0FyC0DtB0DyEyEtGtAyEzzyEtGyE0FtC0BtGzzyByD0BtGtAtBtCtDtB0AtD0E0E0AtAyD2QtN0A0LzutB%26cr%3D14935247%26a%3Dwbf_frmr_17_13%26os_ver%3D6.1%26os%3DWindows%2B7%2BHome%2BPremium&p={searchTerms} SearchScopes: HKLM -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://nl.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_frmr_17_13¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dnl%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzutDtDtC0EtD0ByCyDtCzzyEtCyE0CzyyBtN0D0Tzu0StCzytCtAtN1L2XzutAtFtBzytFtAtFyDtBtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StD0FzytAyD0BtDtCtGtB0E0D0FtG0ByDyEtBtGtByCyC0FtGzztC0AtDyDyEtD0Czz0CtByE2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyD0FyC0DtB0DyEyEtGtAyEzzyEtGyE0FtC0BtGzzyByD0BtGtAtBtCtDtB0AtD0E0E0AtAyD2QtN0A0LzutB%26cr%3D14935247%26a%3Dwbf_frmr_17_13%26os_ver%3D6.1%26os%3DWindows%2B7%2BHome%2BPremium&p={searchTerms} SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://nl.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_frmr_17_13¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dnl%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzutDtDtC0EtD0ByCyDtCzzyEtCyE0CzyyBtN0D0Tzu0StCzytCtAtN1L2XzutAtFtBzytFtAtFyDtBtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StD0FzytAyD0BtDtCtGtB0E0D0FtG0ByDyEtBtGtByCyC0FtGzztC0AtDyDyEtD0Czz0CtByE2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyD0FyC0DtB0DyEyEtGtAyEzzyEtGyE0FtC0BtGzzyByD0BtGtAtBtCtDtB0AtD0E0E0AtAyD2QtN0A0LzutB%26cr%3D14935247%26a%3Dwbf_frmr_17_13%26os_ver%3D6.1%26os%3DWindows%2B7%2BHome%2BPremium&p={searchTerms} SearchScopes: HKLM-x32 -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE SearchScopes: HKU\S-1-5-21-3157429923-292206502-2485843891-1000 -> DefaultScope {DC617B40-97F8-4174-97F4-FFE629996AD7} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE SearchScopes: HKU\S-1-5-21-3157429923-292206502-2485843891-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-3157429923-292206502-2485843891-1000 -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE SearchScopes: HKU\S-1-5-21-3157429923-292206502-2485843891-1000 -> {53C92183-AD54-4CD0-9C07-01C802BED270} URL = hxxp://www.google.nl/search?hl=nl&q={searchTerms} SearchScopes: HKU\S-1-5-21-3157429923-292206502-2485843891-1000 -> {DC617B40-97F8-4174-97F4-FFE629996AD7} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE SearchScopes: HKU\S-1-5-21-3157429923-292206502-2485843891-1001 -> DefaultScope {F6AED24D-916E-490D-8E26-D568EDD6FE64} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE SearchScopes: HKU\S-1-5-21-3157429923-292206502-2485843891-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-3157429923-292206502-2485843891-1001 -> {F6AED24D-916E-490D-8E26-D568EDD6FE64} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2016-12-13] (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_121\bin\ssv.dll [2017-03-08] (Oracle Corporation) BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-05-03] (Google Inc.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2016-11-01] (Microsoft Corporation) BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2017-01-31] (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-03-08] (Oracle Corporation) BHO-x32: Geen Naam -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> Geen bestand BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\OCHelper.dll [2016-12-13] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\ssv.dll [2017-03-08] (Oracle Corporation) BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-05-03] (Google Inc.) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\URLREDIR.DLL [2016-11-01] (Microsoft Corporation) BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\GROOVEEX.DLL [2017-01-31] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-03-08] (Oracle Corporation) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-05-03] (Google Inc.) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-05-03] (Google Inc.) Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2016-04-20] (Microsoft Corporation) Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\MSOSB.DLL [2016-04-20] (Microsoft Corporation) Filter-x32: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2017-02-15] (Citrix Systems, Inc.) Filter-x32: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2017-02-15] (Citrix Systems, Inc.) Filter-x32: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2017-02-15] (Citrix Systems, Inc.) Filter-x32: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2017-02-15] (Citrix Systems, Inc.) Filter-x32: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2017-02-15] (Citrix Systems, Inc.) Filter-x32: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2017-02-15] (Citrix Systems, Inc.) Filter-x32: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2017-02-15] (Citrix Systems, Inc.) Filter-x32: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2017-02-15] (Citrix Systems, Inc.) Filter-x32: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2017-02-15] (Citrix Systems, Inc.) Filter-x32: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2017-02-15] (Citrix Systems, Inc.) Filter-x32: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2017-02-15] (Citrix Systems, Inc.) Filter-x32: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2017-02-15] (Citrix Systems, Inc.) Filter-x32: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2017-02-15] (Citrix Systems, Inc.) Filter-x32: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2017-02-15] (Citrix Systems, Inc.) Filter-x32: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2017-02-15] (Citrix Systems, Inc.) Filter-x32: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2017-02-15] (Citrix Systems, Inc.) FireFox: ======== FF HKLM-x32\...\Firefox\Extensions: [{C7AE725D-FA5C-4027-BB4C-787EF9F8248A}] - C:\Program Files (x86)\PremierOpinion\firefox => niet gevonden FF Plugin: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-03-08] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-03-08] (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE -> disabled [Geen bestand] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2015-10-08] (Microsoft Corporation) FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1216156.dll [2015-01-09] (Adobe Systems, Inc.) FF Plugin-x32: @Citrix.com/npican -> C:\Program Files (x86)\Citrix\ICA Client\npicaN.dll [2017-02-15] (Citrix Systems, Inc.) FF Plugin-x32: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-03-08] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-03-08] (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Geen bestand] FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-07-12] (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\NPSPWRAP.DLL [2015-10-08] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.3\npGoogleUpdate3.dll [Geen bestand] FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.3\npGoogleUpdate3.dll [Geen bestand] FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-3157429923-292206502-2485843891-1000: @adobe.com/Acrobat,version=5.1 -> C:\Program Files (x86)\Adobe\Acrobat 5.0\Reader\Browser\nppdf32.dll [2002-08-12] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-3157429923-292206502-2485843891-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Gebruiker\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-03-11] (Unity Technologies ApS) FF Plugin HKU\S-1-5-21-3157429923-292206502-2485843891-1001: @adobe.com/Acrobat,version=5.1 -> C:\Program Files (x86)\Adobe\Acrobat 5.0\Reader\Browser\nppdf32.dll [2002-08-12] (Adobe Systems Inc.) Chrome: ======= CHR Profile: C:\Users\Johan\AppData\Local\Google\Chrome\User Data\Default [2017-07-03] CHR Extension: (Google Presentaties) - C:\Users\Johan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-10-08] CHR Extension: (Google Documenten) - C:\Users\Johan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-10-08] CHR Extension: (Google Drive) - C:\Users\Johan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-04-15] CHR Extension: (YouTube) - C:\Users\Johan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-08] CHR Extension: (Google Search) - C:\Users\Johan\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-04-15] CHR Extension: (Adobe Acrobat) - C:\Users\Johan\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-03-15] CHR Extension: (Google Spreadsheets) - C:\Users\Johan\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-10-08] CHR Extension: (Offline Documenten) - C:\Users\Johan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-04-24] CHR Extension: (Betalingen via Chrome Web Store) - C:\Users\Johan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-17] CHR Extension: (Gmail) - C:\Users\Johan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-10-08] CHR Extension: (Chrome Media Router) - C:\Users\Johan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-04-12] CHR HKLM\...\Chrome\Extension: [bmlggjgglgmlgbendppbpmkpakefkmkd] - CHR HKLM\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - CHR HKU\S-1-5-21-3157429923-292206502-2485843891-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bmlggjgglgmlgbendppbpmkpakefkmkd] - CHR HKU\S-1-5-21-3157429923-292206502-2485843891-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [bmlggjgglgmlgbendppbpmkpakefkmkd] - CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - ==================== Services (gefilterd) ==================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) S3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7346208 2017-05-10] (AVAST Software s.r.o.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [263304 2017-05-10] (AVAST Software) R2 ByteFenceService; C:\Program Files\ByteFence\ByteFenceService.exe [144864 2017-03-22] (Byte Technologies LLC) R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [3042032 2017-01-17] (Microsoft Corporation) S3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1031704 2016-06-03] (HP) R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [33640 2017-04-07] (HP Inc.) R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2016-01-29] (Microsoft Corporation) R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [374344 2016-01-29] (Microsoft Corporation) R2 PlaysService; C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe [55000 2017-02-16] (Copyright (c) 2017 Plays.tv, LLC) R2 rtop; C:\Program Files\ByteFence\rtop\bin\rtop_svc.exe [304456 2017-03-28] () S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) R3 WinZip Smart Alerts Service; C:\Program Files\WinZip System Utilities Suite\WinZip Smart Alerts Service.exe [2163200 2016-08-19] () R2 WinZip Smart Monitor Service; C:\Program Files\WinZip Smart Monitor\WinZip Smart Monitor Service.exe [495616 2017-05-19] () ===================== Drivers (gefilterd) ====================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) S3 aswbidsdriver; C:\Windows\system32\drivers\aswbidsdrivera.sys [311808 2017-05-10] (AVAST Software s.r.o.) S3 aswbidsh; C:\Windows\system32\drivers\aswbidsha.sys [190256 2017-05-10] (AVAST Software s.r.o.) S3 aswblog; C:\Windows\system32\drivers\aswbloga.sys [334576 2017-05-10] (AVAST Software s.r.o.) S3 aswbuniv; C:\Windows\system32\drivers\aswbuniva.sys [49016 2017-05-10] (AVAST Software s.r.o.) S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [38296 2017-05-10] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [128648 2017-05-10] (AVAST Software) S3 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [101152 2017-05-10] (AVAST Software) R0 aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [75704 2017-05-10] (AVAST Software) S3 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1007160 2017-05-10] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [569192 2017-05-10] (AVAST Software) S3 aswStm; C:\Windows\system32\drivers\aswStm.sys [158880 2017-05-15] (AVAST Software) S3 aswVmm; C:\Windows\system32\drivers\aswVmm.sys [339696 2017-05-10] (AVAST Software) S3 AtiHDAudioService; C:\Windows\System32\drivers\AtihdW76.sys [96256 2015-07-15] (Advanced Micro Devices) [Bestand niet getekend] R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [289120 2015-11-13] (Microsoft Corporation) R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133816 2015-11-13] (Microsoft Corporation) S3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [926824 2012-10-25] (Realtek Semiconductor Corporation ) U3 aswbdisk; geen ImagePath U5 Tosrfcom; C:\Windows\SysWOW64\Drivers\Tosrfcom.sys [62799 2004-10-04] (TOSHIBA Corporation) ==================== NetSvcs (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) ==================== Een Maand Aangemaakt bestanden en mappen ======== (Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.) 2017-07-03 19:08 - 2017-07-03 19:09 - 00029201 _____ C:\Users\Johan\Downloads\FRST.txt 2017-07-03 19:08 - 2017-07-03 19:08 - 00000000 ____D C:\FRST 2017-07-03 19:07 - 2017-07-03 19:07 - 02435584 _____ (Farbar) C:\Users\Johan\Downloads\Niet bevestigd 502242.crdownload 2017-07-03 19:07 - 2017-07-03 19:07 - 02435584 _____ (Farbar) C:\Users\Johan\Downloads\FRST64 (2).exe 2017-07-03 19:07 - 2017-07-03 19:07 - 02435584 _____ (Farbar) C:\Users\Johan\Downloads\FRST64 (1).exe 2017-07-03 17:57 - 2017-07-03 19:06 - 00003036 _____ C:\Windows\System32\Tasks\SecureDriverUpdater_UPDATES 2017-07-03 17:57 - 2017-07-03 19:06 - 00000286 _____ C:\Windows\Tasks\SecureDriverUpdater_UPDATES.job 2017-07-03 17:54 - 2017-07-03 17:54 - 00000000 ____D C:\Users\Gebruiker\AppData\Roaming\sdu 2017-07-03 17:09 - 2017-07-03 17:09 - 00000849 _____ C:\Users\Johan\Downloads\launch (11).ica 2017-07-03 16:48 - 2017-07-03 19:04 - 00003178 _____ C:\Windows\System32\Tasks\SecureDriverUpdaterRunAtStartup 2017-07-03 16:48 - 2017-07-03 16:48 - 00001067 _____ C:\Users\Public\Desktop\Secure Driver Updater.lnk 2017-07-03 16:48 - 2017-07-03 16:48 - 00000000 ____D C:\Users\Johan\AppData\Roaming\sdu 2017-07-03 16:48 - 2017-07-03 16:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secure Driver Updater 2017-07-03 16:46 - 2017-07-03 16:48 - 00000000 ____D C:\Program Files (x86)\Secure Driver Updater 2017-07-03 16:30 - 2017-07-03 17:54 - 00003004 _____ C:\Windows\System32\Tasks\RunAtStartup 2017-07-03 16:16 - 2017-05-10 11:27 - 00400456 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2017-07-03 16:09 - 2017-07-03 16:09 - 00191888 _____ C:\Users\Johan\Downloads\Registraties_Joep van Wijk.pdf 2017-06-15 11:46 - 2017-06-15 11:47 - 00000849 _____ C:\Users\Johan\Downloads\launch (10).ica ==================== Een Maand Gewijzigd bestanden en mappen ======== (Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.) 2017-07-04 02:03 - 2017-05-21 14:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2017-07-04 02:03 - 2017-05-21 14:25 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2017-07-04 02:03 - 2017-05-16 16:22 - 00000000 ____D C:\Users\Johan\AppData\Local\Microsoft Help 2017-07-04 02:03 - 2017-03-28 15:07 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software 2017-07-04 02:03 - 2017-03-28 15:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software 2017-07-04 02:03 - 2017-03-19 17:31 - 00000000 ____D C:\Users\Gebruiker\AppData\Roaming\ICAClient 2017-07-04 02:03 - 2017-03-15 19:03 - 00000000 ____D C:\Users\Johan\AppData\Roaming\ICAClient 2017-07-04 02:03 - 2016-10-12 15:22 - 00000000 ____D C:\Users\Gebruiker\AppData\Local\HP_Development_Company,_L 2017-07-04 02:03 - 2016-09-24 17:25 - 00000000 ____D C:\Program Files\WinZip System Utilities Suite 2017-07-04 02:03 - 2016-09-05 12:29 - 00000000 ____D C:\Windows\System32\Tasks\Hewlett-Packard 2017-07-04 02:03 - 2016-09-05 12:02 - 00000000 ____D C:\Program Files\WinZip Smart Monitor 2017-07-04 02:03 - 2016-08-04 18:53 - 00000000 ____D C:\Users\Johan\AppData\Roaming\Raptr 2017-07-04 02:03 - 2015-10-08 19:21 - 00000000 ___SD C:\Windows\system32\GWX 2017-07-04 02:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF 2017-07-04 02:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration 2017-07-04 02:02 - 2017-05-21 14:26 - 00000000 ____D C:\Users\Gebruiker\AppData\Roaming\Mozilla 2017-07-04 02:02 - 2017-05-21 14:26 - 00000000 ____D C:\Users\Gebruiker\AppData\Local\Mozilla 2017-07-03 19:03 - 2017-03-28 15:01 - 00000296 _____ C:\Windows\Tasks\Start WinZip Driver Updater for Gebruiker-PC@Gebruiker(logon).job 2017-07-03 19:03 - 2017-01-27 14:23 - 00000352 _____ C:\Windows\Tasks\Start WinZip Registry Optimizer for Gebruiker-PC@Johan(logon).job 2017-07-03 19:03 - 2016-09-24 17:26 - 00000346 _____ C:\Windows\Tasks\Start WinZip System Utilities Suite for Gebruiker-PC@Gebruiker(logon).job 2017-07-03 17:56 - 2009-07-14 06:45 - 00021712 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2017-07-03 17:56 - 2009-07-14 06:45 - 00021712 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2017-07-03 17:55 - 2017-03-28 14:56 - 00000000 ____D C:\Program Files\ByteFence 2017-07-03 17:54 - 2017-03-28 14:57 - 00000000 ____D C:\Users\Gebruiker\AppData\Roaming\Event Monitor 2017-07-03 17:30 - 2016-10-12 15:22 - 00000348 _____ C:\Windows\Tasks\HPCeeScheduleForGebruiker.job 2017-07-03 17:26 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2017-07-03 17:23 - 2017-03-15 19:02 - 00000000 ____D C:\Users\Johan\AppData\Local\Citrix 2017-07-03 17:20 - 2015-02-09 10:48 - 00002203 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2017-07-03 17:20 - 2015-02-09 10:47 - 00002215 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2017-07-03 16:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf 2017-07-03 16:36 - 2017-03-30 08:27 - 00000000 ____D C:\Users\Johan\AppData\Roaming\Event Monitor 2017-07-03 16:20 - 2017-03-28 15:07 - 00001882 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk 2017-07-03 16:18 - 2017-03-28 15:07 - 00003914 _____ C:\Windows\System32\Tasks\Avast Emergency Update 2017-07-03 16:18 - 2016-01-11 20:46 - 00004422 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2017-07-03 16:17 - 2016-01-11 20:46 - 00803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2017-07-03 16:17 - 2016-01-11 20:46 - 00144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2017-07-03 16:17 - 2016-01-11 20:46 - 00000000 ____D C:\Windows\SysWOW64\Macromed 2017-07-03 16:17 - 2016-01-11 20:46 - 00000000 ____D C:\Windows\system32\Macromed 2017-07-03 16:12 - 2015-02-06 17:10 - 00000000 ____D C:\Users\Gebruiker 2017-07-03 16:05 - 2015-10-08 19:28 - 00000000 ____D C:\Users\Johan 2017-06-09 09:00 - 2017-05-21 14:27 - 00000000 ____D C:\Users\Gebruiker\AppData\LocalLow\Mozilla 2017-06-09 09:00 - 2016-11-07 17:19 - 00000318 _____ C:\Windows\Tasks\Start WinZip System Utilities Suite with delay for Gebruiker-PC@Gebruiker.job 2017-06-09 08:57 - 2016-11-07 17:19 - 00002678 _____ C:\Windows\System32\Tasks\Start WinZip System Utilities Suite with delay for Gebruiker-PC@Gebruiker 2017-06-06 17:30 - 2016-10-12 15:22 - 00003210 _____ C:\Windows\System32\Tasks\HPCeeScheduleForGebruiker Sommige bestanden in TEMP: ==================== 2017-05-16 21:42 - 2017-05-16 21:42 - 0000000 _____ () C:\Users\Gebruiker\AppData\Local\Temp\5AE6ACFC-937D-43B9-B91E-954FA7AD3F06.1.0.0.4.dll 2017-07-03 16:11 - 2017-07-03 16:13 - 121582864 _____ (Microsoft Corporation) C:\Users\Johan\AppData\Local\Temp\mpam-b2ee17f8.exe ==================== Bamital & volsnap ====================== (Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.) C:\Windows\system32\winlogon.exe => Bestand is getekend C:\Windows\system32\wininit.exe => Bestand is getekend C:\Windows\SysWOW64\wininit.exe => Bestand is getekend C:\Windows\explorer.exe => Bestand is getekend C:\Windows\SysWOW64\explorer.exe => Bestand is getekend C:\Windows\system32\svchost.exe => Bestand is getekend C:\Windows\SysWOW64\svchost.exe => Bestand is getekend C:\Windows\system32\services.exe => Bestand is getekend C:\Windows\system32\User32.dll => Bestand is getekend C:\Windows\SysWOW64\User32.dll => Bestand is getekend C:\Windows\system32\userinit.exe => Bestand is getekend C:\Windows\SysWOW64\userinit.exe => Bestand is getekend C:\Windows\system32\rpcss.dll => Bestand is getekend C:\Windows\system32\dnsapi.dll => Bestand is getekend C:\Windows\SysWOW64\dnsapi.dll => Bestand is getekend C:\Windows\system32\Drivers\volsnap.sys => Bestand is getekend LastRegBack: 2016-07-08 17:53 ==================== Eind van FRST.txt ============================