Scanresultaten van Farbar Recovery Scan Tool (FRST) (x64) Versie: 05-07-2017
Gestart door User (Beheerder) op USER-PC (07-07-2017 10:58:14)
Gestart vanaf C:\Users\User\AppData\Local\Microsoft\Windows\INetCache\IE\BTBMZMKM
Geladen Profielen: User (Beschikbare Profielen: User)
Platform: Windows 8.1 (Update) (X64) Taal: Nederlands (Nederland)
Internet Explorer Versie 11 (Standaardbrowser: IE)
Boot Modus: Normal
Handleiding voor Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processen (gefilterd) =================

(Als een item is opgenomen in de fixlist, het proces zal worden gesloten. Het bestand zal niet worden verplaatst.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
(Wondershare) C:\Program Files (x86)\Wondershare\WAF\2.4.2.223\WsAppService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.18384_none_fa1d93c39b41b41a\TiWorker.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD12\PDVD12Serv.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe

==================== Register (gefilterd) ====================

(Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-11-21] (Intel Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1794904 2014-04-13] (NVIDIA Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2014-07-02] (Realtek Semiconductor)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [213832 2017-06-26] (AVAST Software)
HKLM-x32\...\Run: [CLMLServer_For_P2G8] => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [111576 2013-08-05] (CyberLink)
HKLM-x32\...\Run: [CLVirtualDrive] => C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe [490760 2014-03-12] (CyberLink Corp.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-03-15] (Oracle Corporation)
Winlogon\Notify\ScCertProp: wlnotify.dll [X]
HKLM\...\Policies\Explorer: [ConfirmFileDelete] 1
HKU\S-1-5-21-1323149097-3332460550-518001140-1001\...\Run: [TomTomHOME.exe] => C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [254840 2017-01-20] (TomTom)
HKU\S-1-5-21-1323149097-3332460550-518001140-1001\...\Policies\Explorer: [NoInternetOpenWith] 1
HKU\S-1-5-21-1323149097-3332460550-518001140-1001\...\MountPoints2: {9642fb85-9467-11e6-827e-806e6f6e6963} - "F:\Setup\Autorun.exe" 
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Verzenden naar OneNote.lnk [2016-11-28]
ShortcutTarget: Verzenden naar OneNote.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (gefilterd) ====================

(Als een item is opgenomen in de fixlist, als het een registry item is wordt verwijderd of hersteld naar de standaard.)

Tcpip\Parameters: [DhcpNameServer] 192.168.10.1
Tcpip\..\Interfaces\{39D5D522-B389-45B3-8AFD-599892CC9229}: [DhcpNameServer] 192.168.10.1
Tcpip\..\Interfaces\{DFEDA325-8940-447C-94D3-71B30DABEAF2}: [DhcpNameServer] 192.168.10.1

Internet Explorer:
==================
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-07-06] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2017-06-26] (AVAST Software)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-11-04] (Google Inc.)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-07-06] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2017-07-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\ssv.dll [2017-04-19] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-06-26] (AVAST Software)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-11-04] (Google Inc.)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-07-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-04-19] (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-11-04] (Google Inc.)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-07-06] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-07-06] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-07-06] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-07-06] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\TomTom\HOME\Profiles\e8yw6dft.default [2017-03-22]
FF Extension: (Belgium eID) - C:\Program Files (x86)\Mozilla Firefox\extensions\belgiumeid@eid.belgium.be [2017-03-22]
FF HKLM-x32\...\Firefox\Extensions: [belgiumeid@eid.belgium.be] - C:\Program Files (x86)\Mozilla Firefox\extensions\belgiumeid@eid.belgium.be
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-07-02] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-07-02] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-04-19] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files (x86)\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-04-19] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-07-06] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-07-06] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin HKU\S-1-5-21-1323149097-3332460550-518001140-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-10-26] (Unity Technologies ApS)

Chrome: 
=======
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default [2017-07-01]
CHR Extension: (Google Presentaties) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-11-04]
CHR Extension: (Google Documenten) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-11-04]
CHR Extension: (Google Drive) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-11-04]
CHR Extension: (Ledger Manager) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\beimhnaefocolcplfimocfiaiefpkgbf [2017-06-30]
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-11-04]
CHR Extension: (Avast SafePrice) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2017-06-30]
CHR Extension: (Google Spreadsheets) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-11-04]
CHR Extension: (Offline Documenten) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-12-18]
CHR Extension: (Avast Online Security) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-06-30]
CHR Extension: (Betalingen via Chrome Web Store) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-04-21]
CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-11-04]
CHR Extension: (Chrome Media Router) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-06-30]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx

==================== Services (gefilterd) ====================

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7430992 2017-06-26] (AVAST Software s.r.o.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [263312 2017-06-26] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [311592 2017-06-26] (AVAST Software)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [4411592 2017-06-23] (Microsoft Corporation)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-11-21] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [Bestand niet getekend]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2014-07-02] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2014-07-02] (Intel Corporation)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2013-03-06] ()
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)
R2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.4.2.223\WsAppService.exe [473312 2017-03-20] (Wondershare)
S2 WsDrvInst; C:\Program Files (x86)\Wondershare\dr.fone toolkit voor Android\Library\DriverInstaller\DriverInstall.exe [X]

===================== Drivers (gefilterd) ======================

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

S3 A38CCID; C:\windows\system32\DRIVERS\a38ccid.sys [77832 2016-11-28] (Advanced Card Systems Ltd.)
R1 aswbidsdriver; C:\windows\system32\drivers\aswbidsdrivera.sys [319984 2017-06-26] (AVAST Software s.r.o.)
R0 aswbidsh; C:\windows\system32\drivers\aswbidsha.sys [198944 2017-06-26] (AVAST Software s.r.o.)
R0 aswblog; C:\windows\system32\drivers\aswbloga.sys [343264 2017-06-26] (AVAST Software s.r.o.)
R0 aswbuniv; C:\windows\system32\drivers\aswbuniva.sys [57704 2017-06-26] (AVAST Software s.r.o.)
S3 aswHwid; C:\windows\system32\drivers\aswHwid.sys [46984 2017-06-26] (AVAST Software)
R1 aswKbd; C:\windows\system32\drivers\aswKbd.sys [41800 2017-06-26] (AVAST Software)
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [146664 2017-06-26] (AVAST Software)
R1 aswNetSec; C:\windows\system32\drivers\aswNetSec.sys [554528 2017-06-26] (AVAST Software)
R1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [110352 2017-06-26] (AVAST Software)
R0 aswRvrt; C:\windows\system32\drivers\aswRvrt.sys [84392 2017-06-26] (AVAST Software)
R1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [1015848 2017-06-26] (AVAST Software)
R1 aswSP; C:\windows\system32\drivers\aswSP.sys [585608 2017-06-26] (AVAST Software)
R2 aswStm; C:\windows\system32\drivers\aswStm.sys [198768 2017-06-26] (AVAST Software)
R0 aswVmm; C:\windows\system32\drivers\aswVmm.sys [361336 2017-06-30] (AVAST Software)
R1 CLVirtualDrive; C:\windows\system32\DRIVERS\CLVirtualDrive.sys [91712 2013-03-05] (CyberLink)
S3 cxbu0x64; C:\windows\system32\DRIVERS\cxbu0x64.sys [147576 2014-04-05] (HID Global Corporation)
S3 dg_ssudbus; C:\windows\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
R3 MEIx64; C:\windows\system32\DRIVERS\TeeDriverx64.sys [99288 2014-07-02] (Intel Corporation)
S3 NETwNe64; C:\windows\system32\DRIVERS\NETwew02.sys [4649440 2013-06-18] (Intel Corporation)
R3 RtlWlanu; C:\windows\system32\DRIVERS\rtwlanu.sys [2968280 2014-01-15] (Realtek Semiconductor Corporation                           )
S3 ssudmdm; C:\windows\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
S3 WdBoot; C:\windows\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)
S3 WdFilter; C:\windows\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)
S3 WdNisDrv; C:\windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)

==================== NetSvcs (gefilterd) ===================

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)


==================== Een Maand Aangemaakt bestanden en mappen ========

(Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)

2017-07-06 22:30 - 2017-07-06 22:31 - 00035123 _____ C:\Users\User\Desktop\MTB.txt
2017-07-06 22:29 - 2017-07-06 22:29 - 00000000 ____D C:\ProgramData\SWCUTemp
2017-07-04 15:57 - 2017-04-21 23:53 - 00029376 _____ (Microsoft Corporation) C:\windows\SysWOW64\aspnet_counters.dll
2017-07-04 15:57 - 2017-04-21 23:53 - 00018600 _____ (Microsoft Corporation) C:\windows\SysWOW64\msvcr100_clr0400.dll
2017-07-04 15:57 - 2017-04-21 23:50 - 00030912 _____ (Microsoft Corporation) C:\windows\system32\aspnet_counters.dll
2017-07-04 15:57 - 2017-04-21 23:50 - 00018592 _____ (Microsoft Corporation) C:\windows\system32\msvcr100_clr0400.dll
2017-07-04 15:57 - 2017-04-11 20:27 - 00987840 _____ (Microsoft Corporation) C:\windows\SysWOW64\msvcr120_clr0400.dll
2017-07-04 15:57 - 2017-04-11 20:27 - 00485576 _____ (Microsoft Corporation) C:\windows\SysWOW64\msvcp120_clr0400.dll
2017-07-04 15:57 - 2017-03-15 20:15 - 00993632 _____ (Microsoft Corporation) C:\windows\system32\msvcr120_clr0400.dll
2017-07-04 15:57 - 2017-03-15 20:15 - 00690008 _____ (Microsoft Corporation) C:\windows\system32\msvcp120_clr0400.dll
2017-07-03 13:53 - 2017-07-03 13:53 - 00000197 _____ C:\Users\User\Desktop\BEZ RT 12,550 Euro +0,055 (+0,44%) BERENTZEN-GRUPPE Kursveränderung RT-Taxe Tradegate-Lang&Schwarz vs. Xetra-Schlusskurs 30.06.2017.url
2017-06-30 17:06 - 2017-06-30 17:06 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-apps
2017-06-30 16:44 - 2017-06-30 16:44 - 00001179 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ledger Wallet Ripple.lnk
2017-06-30 16:44 - 2017-06-30 16:44 - 00001167 _____ C:\Users\Public\Desktop\Ledger Wallet Ripple.lnk
2017-06-30 16:44 - 2017-06-30 16:44 - 00000000 ____D C:\Users\User\AppData\Local\Ledger Wallet Ripple
2017-06-30 16:44 - 2017-06-30 16:44 - 00000000 ____D C:\Program Files (x86)\Ledger Wallet Ripple
2017-06-28 11:55 - 2017-06-28 11:55 - 00657803 _____ C:\Users\User\Documents\IMG_20170628_0001.pdf
2017-06-26 19:31 - 2017-06-02 14:15 - 00337408 _____ (Microsoft Corporation) C:\windows\system32\SearchProtocolHost.exe
2017-06-26 19:31 - 2017-06-02 14:12 - 00468992 _____ (Microsoft Corporation) C:\windows\system32\mssph.dll
2017-06-26 19:31 - 2017-06-02 14:12 - 00248832 _____ (Microsoft Corporation) C:\windows\system32\mssphtb.dll
2017-06-26 19:31 - 2017-06-02 14:06 - 01001984 _____ (Microsoft Corporation) C:\windows\HelpPane.exe
2017-06-26 19:31 - 2017-06-02 14:01 - 00774144 _____ (Microsoft Corporation) C:\windows\system32\mssvp.dll
2017-06-26 19:31 - 2017-06-02 13:30 - 03635200 _____ (Microsoft Corporation) C:\windows\system32\tquery.dll
2017-06-26 19:31 - 2017-06-02 13:03 - 00903168 _____ (Microsoft Corporation) C:\windows\system32\SearchIndexer.exe
2017-06-26 19:31 - 2017-06-02 12:58 - 02551808 _____ (Microsoft Corporation) C:\windows\system32\mssrch.dll
2017-06-26 19:31 - 2017-06-02 12:25 - 00272896 _____ (Microsoft Corporation) C:\windows\SysWOW64\SearchProtocolHost.exe
2017-06-26 19:31 - 2017-06-02 12:24 - 00391680 _____ (Microsoft Corporation) C:\windows\SysWOW64\mssph.dll
2017-06-26 19:31 - 2017-06-02 12:17 - 00699392 _____ (Microsoft Corporation) C:\windows\SysWOW64\mssvp.dll
2017-06-26 19:31 - 2017-06-02 12:02 - 02751488 _____ (Microsoft Corporation) C:\windows\SysWOW64\tquery.dll
2017-06-26 19:31 - 2017-06-02 11:43 - 01920000 _____ (Microsoft Corporation) C:\windows\SysWOW64\mssrch.dll
2017-06-26 19:31 - 2017-06-02 11:43 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\SearchIndexer.exe
2017-06-26 19:31 - 2017-05-15 21:58 - 00121184 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tm.sys
2017-06-26 19:31 - 2017-05-14 22:44 - 04170240 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2017-06-26 19:31 - 2017-05-14 22:42 - 00107520 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdx.sys
2017-06-26 19:31 - 2017-05-14 22:26 - 00576512 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2017-06-26 19:31 - 2017-05-14 22:19 - 25738752 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2017-06-26 19:31 - 2017-05-14 22:19 - 01364040 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2017-06-26 19:31 - 2017-05-14 22:10 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2017-06-26 19:31 - 2017-05-14 21:55 - 05975040 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2017-06-26 19:31 - 2017-05-14 21:32 - 07077376 _____ (Microsoft Corporation) C:\windows\system32\glcndFilter.dll
2017-06-26 19:31 - 2017-05-14 21:31 - 01033216 _____ (Microsoft Corporation) C:\windows\system32\inetcomm.dll
2017-06-26 19:31 - 2017-05-14 21:22 - 00499200 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2017-06-26 19:31 - 2017-05-14 21:19 - 00806912 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2017-06-26 19:31 - 2017-05-14 21:11 - 20274688 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2017-06-26 19:31 - 2017-05-14 21:04 - 00315224 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\atmfd.dll
2017-06-26 19:31 - 2017-05-14 21:03 - 00373080 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
2017-06-26 19:31 - 2017-05-14 20:54 - 15252992 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2017-06-26 19:31 - 2017-05-14 20:52 - 03240960 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2017-06-26 19:31 - 2017-05-14 20:48 - 05274112 _____ (Microsoft Corporation) C:\windows\SysWOW64\glcndFilter.dll
2017-06-26 19:31 - 2017-05-14 20:46 - 00880640 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcomm.dll
2017-06-26 19:31 - 2017-05-14 20:44 - 04549120 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2017-06-26 19:31 - 2017-05-14 20:38 - 07796736 _____ (Microsoft Corporation) C:\windows\system32\Windows.Data.Pdf.dll
2017-06-26 19:31 - 2017-05-14 20:37 - 01544704 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2017-06-26 19:31 - 2017-05-14 20:30 - 13664768 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2017-06-26 19:31 - 2017-05-14 20:16 - 05268992 _____ (Microsoft Corporation) C:\windows\SysWOW64\Windows.Data.Pdf.dll
2017-06-26 19:31 - 2017-05-14 20:15 - 02767872 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2017-06-26 19:31 - 2017-05-14 20:13 - 00136904 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2017-06-26 19:31 - 2017-05-14 20:11 - 01314816 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2017-06-26 19:31 - 2017-05-14 20:06 - 07441240 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2017-06-26 19:31 - 2017-05-14 20:06 - 01737600 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2017-06-26 19:31 - 2017-05-14 20:06 - 01502000 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll
2017-06-26 19:31 - 2017-05-12 18:16 - 01084928 _____ (Microsoft Corporation) C:\windows\SysWOW64\gdi32.dll
2017-06-26 19:31 - 2017-05-12 18:13 - 01559552 _____ (Microsoft Corporation) C:\windows\SysWOW64\DWrite.dll
2017-06-26 19:31 - 2017-05-12 04:58 - 01985536 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll
2017-06-26 19:31 - 2017-05-12 04:48 - 01377792 _____ (Microsoft Corporation) C:\windows\system32\FntCache.dll
2017-06-26 19:31 - 2017-05-12 04:18 - 03714560 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2017-06-26 19:31 - 2017-05-12 04:07 - 00409088 _____ (Microsoft Corporation) C:\windows\system32\WUSettingsProvider.dll
2017-06-26 19:31 - 2017-05-12 04:04 - 00897024 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2017-06-26 19:31 - 2017-05-12 04:00 - 02240512 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2017-06-26 19:31 - 2017-05-12 01:36 - 22361848 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2017-06-26 19:31 - 2017-05-12 01:32 - 19788672 _____ (Microsoft Corporation) C:\windows\SysWOW64\shell32.dll
2017-06-26 19:31 - 2017-05-10 20:19 - 00101720 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mountmgr.sys
2017-06-26 19:31 - 2017-05-06 18:05 - 01094656 _____ (Microsoft Corporation) C:\windows\system32\localspl.dll
2017-06-26 19:31 - 2017-05-06 18:04 - 00865792 _____ (Microsoft Corporation) C:\windows\system32\win32spl.dll
2017-06-26 19:31 - 2017-04-06 19:37 - 00445440 _____ (Microsoft Corporation) C:\windows\system32\certcli.dll
2017-06-26 19:31 - 2017-04-06 19:16 - 00615936 _____ (Microsoft Corporation) C:\windows\system32\wpd_ci.dll
2017-06-26 19:31 - 2017-04-06 18:50 - 01436672 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2017-06-26 19:31 - 2017-04-06 18:46 - 00434688 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2017-06-26 19:31 - 2017-04-06 18:46 - 00324096 _____ (Microsoft Corporation) C:\windows\SysWOW64\certcli.dll
2017-06-26 19:31 - 2017-04-06 18:35 - 01362432 _____ (Microsoft Corporation) C:\windows\system32\gpsvc.dll
2017-06-26 19:31 - 2017-04-06 18:15 - 00358912 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2017-06-26 19:31 - 2017-04-06 17:44 - 00087040 _____ (Microsoft Corporation) C:\windows\system32\wpdbusenum.dll
2017-06-26 19:31 - 2017-04-02 16:49 - 00186880 _____ (Microsoft Corporation) C:\windows\system32\dpapisrv.dll
2017-06-26 19:31 - 2017-04-02 15:40 - 02013016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ntfs.sys
2017-06-26 19:30 - 2017-05-14 21:10 - 00663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2017-06-26 19:30 - 2017-05-14 20:40 - 00693248 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2017-06-26 19:30 - 2017-05-14 20:27 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2017-06-26 19:30 - 2017-05-14 20:11 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2017-06-26 19:30 - 2017-05-12 19:05 - 00035840 _____ (Adobe Systems) C:\windows\SysWOW64\atmlib.dll
2017-06-26 19:30 - 2017-05-12 17:51 - 00029696 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe
2017-06-26 19:30 - 2017-05-12 17:50 - 00124928 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll
2017-06-26 19:30 - 2017-05-12 17:48 - 00081920 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll
2017-06-26 19:30 - 2017-05-12 17:47 - 00726528 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll
2017-06-26 19:30 - 2017-05-12 06:10 - 00044032 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
2017-06-26 19:30 - 2017-05-12 04:11 - 00035840 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2017-06-26 19:30 - 2017-05-12 04:10 - 00140288 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2017-06-26 19:30 - 2017-05-12 04:06 - 00095744 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2017-06-26 18:59 - 2017-06-26 18:59 - 00400464 _____ (AVAST Software) C:\windows\system32\aswBoot.exe
2017-06-26 18:56 - 2017-06-26 18:56 - 00000000 _____ C:\windows\SysWOW64\last.dump
2017-06-23 21:09 - 2017-06-26 18:02 - 00000000 ____D C:\Users\User\AppData\Local\Spotify
2017-06-23 21:08 - 2017-06-26 17:58 - 00000000 ____D C:\Users\User\AppData\Roaming\Spotify
2017-06-22 22:15 - 2017-06-22 22:15 - 00000221 _____ C:\Users\User\Desktop\Orange Cloud Galerij.url

==================== Een Maand Gewijzigd bestanden en mappen ========

(Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)

2017-07-07 10:58 - 2017-03-01 11:28 - 00000000 ____D C:\FRST
2017-07-07 10:58 - 2016-10-18 08:40 - 00003950 _____ C:\windows\System32\Tasks\User_Feed_Synchronization-{AAC27791-2814-47CB-8689-B09AFCF2AACF}
2017-07-06 14:45 - 2013-08-22 16:45 - 00000006 ____H C:\windows\Tasks\SA.DAT
2017-07-06 13:04 - 2013-08-22 17:36 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-07-06 13:03 - 2014-04-29 12:45 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2017-07-04 18:02 - 2014-04-28 15:56 - 00442498 _____ C:\windows\system32\perfh014.dat
2017-07-04 18:02 - 2014-04-28 15:56 - 00077590 _____ C:\windows\system32\perfc014.dat
2017-07-04 18:02 - 2014-04-28 13:47 - 00807398 _____ C:\windows\system32\perfh013.dat
2017-07-04 18:02 - 2014-04-28 13:47 - 00162838 _____ C:\windows\system32\perfc013.dat
2017-07-04 18:02 - 2014-04-28 13:38 - 00755986 _____ C:\windows\system32\perfh007.dat
2017-07-04 18:02 - 2014-04-28 13:38 - 00159576 _____ C:\windows\system32\perfc007.dat
2017-07-04 17:59 - 2013-08-22 15:36 - 00000000 ____D C:\windows\Inf
2017-07-04 16:01 - 2013-08-22 17:20 - 00000000 ____D C:\windows\CbsTemp
2017-07-01 20:06 - 2016-10-21 14:46 - 00000179 _____ C:\Users\User\Desktop\HLN.be, Nieuws, sport en showbizz, 24-24, 7-7, meer dan 350 nieuwsupdates per dag.url
2017-07-01 20:06 - 2016-10-21 14:45 - 00000375 _____ C:\Users\User\Desktop\Het Nieuwsblad.url
2017-07-01 16:59 - 2013-08-22 15:25 - 00262144 ___SH C:\windows\system32\config\BBI
2017-06-30 19:00 - 2016-11-04 16:52 - 00361336 _____ (AVAST Software) C:\windows\system32\Drivers\aswvmm.sys
2017-06-30 17:59 - 2016-10-17 15:00 - 00003598 _____ C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1323149097-3332460550-518001140-1001
2017-06-30 16:58 - 2016-11-04 16:57 - 00002311 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-06-30 16:58 - 2016-11-04 16:57 - 00002299 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-06-30 16:56 - 2016-11-04 18:13 - 00000000 ____D C:\Users\User\AppData\Local\Google
2017-06-29 17:53 - 2013-08-22 17:36 - 00000000 ____D C:\windows\rescache
2017-06-27 17:28 - 2016-11-13 18:09 - 00003168 _____ C:\windows\System32\Tasks\OneDrive Standalone Update Task v2
2017-06-27 17:28 - 2016-10-21 15:04 - 00003176 _____ C:\windows\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-1323149097-3332460550-518001140-1001
2017-06-27 17:28 - 2016-10-21 15:04 - 00002319 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive voor Bedrijven.lnk
2017-06-26 22:21 - 2017-03-27 11:56 - 00489264 _____ C:\windows\system32\FNTCACHE.DAT
2017-06-26 22:19 - 2013-08-22 17:36 - 00000000 ___RD C:\windows\ToastData
2017-06-26 19:43 - 2016-10-17 14:54 - 00000000 ____D C:\Users\User\AppData\Local\Packages
2017-06-26 19:43 - 2013-08-22 17:36 - 00000000 ___HD C:\Program Files\WindowsApps
2017-06-26 19:43 - 2013-08-22 17:36 - 00000000 ____D C:\windows\AppReadiness
2017-06-26 19:42 - 2016-10-23 21:03 - 00000000 ____D C:\windows\system32\MRT
2017-06-26 19:39 - 2014-04-24 18:12 - 133627792 ____C (Microsoft Corporation) C:\windows\system32\MRT.exe
2017-06-26 19:08 - 2016-11-04 17:01 - 00003890 _____ C:\windows\System32\Tasks\SafeZone scheduled Autoupdate 1478271679
2017-06-26 19:08 - 2016-11-04 17:01 - 00001063 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2017-06-26 19:00 - 2017-03-19 12:05 - 00003914 _____ C:\windows\System32\Tasks\Avast Emergency Update
2017-06-26 18:59 - 2016-11-04 16:52 - 00585608 _____ (AVAST Software) C:\windows\system32\Drivers\aswSP.sys
2017-06-26 18:59 - 2016-11-04 16:52 - 00198768 _____ (AVAST Software) C:\windows\system32\Drivers\aswStm.sys
2017-06-26 18:59 - 2016-11-04 16:52 - 00146664 _____ (AVAST Software) C:\windows\system32\Drivers\aswMonFlt.sys
2017-06-26 18:59 - 2016-11-04 16:52 - 00110352 _____ (AVAST Software) C:\windows\system32\Drivers\aswRdr2.sys
2017-06-26 18:59 - 2016-11-04 16:52 - 00084392 _____ (AVAST Software) C:\windows\system32\Drivers\aswRvrt.sys
2017-06-26 18:59 - 2016-11-04 16:52 - 00046984 _____ (AVAST Software) C:\windows\system32\Drivers\aswHwid.sys
2017-06-26 18:58 - 2016-11-04 16:55 - 00041800 _____ (AVAST Software) C:\windows\system32\Drivers\aswKbd.sys
2017-06-26 18:58 - 2016-11-04 16:52 - 01015848 _____ (AVAST Software) C:\windows\system32\Drivers\aswSnx.sys
2017-06-26 18:57 - 2017-03-19 12:05 - 00343264 _____ (AVAST Software s.r.o.) C:\windows\system32\Drivers\aswbloga.sys
2017-06-26 18:57 - 2017-03-19 12:05 - 00319984 _____ (AVAST Software s.r.o.) C:\windows\system32\Drivers\aswbidsdrivera.sys
2017-06-26 18:57 - 2017-03-19 12:05 - 00198944 _____ (AVAST Software s.r.o.) C:\windows\system32\Drivers\aswbidsha.sys
2017-06-26 18:57 - 2017-03-19 12:05 - 00057704 _____ (AVAST Software s.r.o.) C:\windows\system32\Drivers\aswbuniva.sys
2017-06-26 18:57 - 2016-11-04 16:52 - 00554528 _____ (AVAST Software) C:\windows\system32\Drivers\aswNetSec.sys
2017-06-26 18:55 - 2016-11-04 16:54 - 00001942 _____ C:\Users\Public\Desktop\Avast Internet Security.lnk
2017-06-26 18:38 - 2013-08-22 17:36 - 00000000 __RSD C:\windows\Media
2017-06-26 18:38 - 2013-08-22 17:36 - 00000000 ____D C:\windows\PolicyDefinitions
2017-06-26 18:38 - 2013-08-22 17:36 - 00000000 ____D C:\Program Files\Windows Defender
2017-06-26 18:37 - 2016-11-04 16:53 - 00000000 ____D C:\windows\System32\Tasks\AVAST Software
2017-06-26 18:37 - 2013-08-22 17:36 - 00000000 ____D C:\windows\SysWOW64\Macromed
2017-06-26 18:37 - 2013-08-22 17:36 - 00000000 ____D C:\windows\system32\Macromed
2017-06-26 18:37 - 2013-08-22 15:36 - 00000000 ____D C:\windows\system32\Sysprep
2017-06-26 18:24 - 2013-08-22 17:36 - 00000000 ____D C:\windows\registration
2017-06-14 17:41 - 2013-08-22 17:36 - 00000000 ____D C:\windows\system32\NDF
2017-06-14 13:02 - 2017-04-12 21:04 - 00401408 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2017-06-14 13:02 - 2017-04-12 21:04 - 00285184 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys
2017-06-14 13:02 - 2017-04-12 21:04 - 00201728 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys

==================== Bestanden in de root van sommige mappen =======

2016-11-04 17:01 - 2016-11-04 17:01 - 7065600 _____ () C:\Program Files (x86)\GUT889C.tmp
2016-10-17 14:02 - 2016-10-17 14:02 - 1065984 _____ () C:\Users\User\AppData\Local\file__0.localstorage
2014-07-02 17:00 - 2014-07-02 17:00 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Sommige bestanden in TEMP:
====================
2017-06-28 19:53 - 2017-06-28 19:53 - 0000000 ____D () C:\Users\User\AppData\Local\Temp\AppLauncher.exe
2017-04-19 08:12 - 2017-04-19 08:12 - 0739904 _____ (Oracle Corporation) C:\Users\User\AppData\Local\Temp\jre-8u131-windows-au.exe

==================== Bamital & volsnap ======================

(Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.)

C:\windows\system32\winlogon.exe => Bestand is getekend
C:\windows\system32\wininit.exe => Bestand is getekend
C:\windows\explorer.exe => Bestand is getekend
C:\windows\SysWOW64\explorer.exe => Bestand is getekend
C:\windows\system32\svchost.exe => Bestand is getekend
C:\windows\SysWOW64\svchost.exe => Bestand is getekend
C:\windows\system32\services.exe => Bestand is getekend
C:\windows\system32\User32.dll => Bestand is getekend
C:\windows\SysWOW64\User32.dll => Bestand is getekend
C:\windows\system32\userinit.exe => Bestand is getekend
C:\windows\SysWOW64\userinit.exe => Bestand is getekend
C:\windows\system32\rpcss.dll => Bestand is getekend
C:\windows\system32\dnsapi.dll => Bestand is getekend
C:\windows\SysWOW64\dnsapi.dll => Bestand is getekend
C:\windows\system32\Drivers\volsnap.sys => Bestand is getekend

LastRegBack: 2017-07-01 11:36

==================== Eind van FRST.txt ============================