Extra scanresultaten van Farbar Recovery Scan Tool (x64) Versie: 20-08-2017 Gestart door Klaas (06-09-2017 19:59:51) Gestart vanaf C:\Users\Klaas\Downloads Windows 10 Home Versie 1703 (X64) (2017-07-25 07:57:08) Boot Modus: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-2493349215-1570600307-3789144642-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-2493349215-1570600307-3789144642-503 - Limited - Disabled) Gast (S-1-5-21-2493349215-1570600307-3789144642-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-2493349215-1570600307-3789144642-1002 - Limited - Enabled) Klaas (S-1-5-21-2493349215-1570600307-3789144642-1000 - Administrator - Enabled) => C:\Users\Klaas ==================== Security Center ======================== (Als een item is opgenomen in de fixlist, zal het worden verwijderd.) AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Geïnstalleerde programma's ====================== (Alleen de adware-programma's met 'verborgen' vlag zou kunnen worden toegevoegd aan de fixlist om ze zichtbaar te maken. De adware-programma's moeten handmatig gedeinstallerd worden.) µTorrent (HKU\S-1-5-21-2493349215-1570600307-3789144642-1000\...\uTorrent) (Version: 3.4.4.40911 - BitTorrent Inc.) 8F0eb7 (HKLM\...\{d1e17d14-cabc-4f6f-9f46-c7ecf813645e}.sdb) (Version: - ) Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated) ActiveX-kontroll för fjärranslutningar för Windows Live Mesh (HKLM-x32\...\{376D59B1-42D9-4FA2-B6CC-E346B6BE14F5}) (Version: 15.4.5722.2 - Microsoft Corporation) Adobe Acrobat Reader DC - Nederlands (HKLM-x32\...\{AC76BA86-7AD7-1043-7B44-AC0F074E4100}) (Version: 17.012.20098 - Adobe Systems Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 2.5.0.16600 - Adobe Systems Inc.) Adobe Flash Player 26 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 26.0.0.151 - Adobe Systems Incorporated) Ashampoo Burning Studio (HKLM-x32\...\Ashampoo Burning Studio_is1) (Version: 9.23.0 - ashampoo GmbH & Co. KG) Ashampoo Photo Commander (HKLM-x32\...\Ashampoo Photo Commander_is1) (Version: 8.3.2 - ashampoo GmbH & Co. KG) Ashampoo Photo Optimizer (HKLM-x32\...\Ashampoo Photo Optimizer_is1) (Version: 3.12.0 - ashampoo GmbH & Co. KG) Ashampoo Snap (HKLM-x32\...\Ashampoo Snap_is1) (Version: 3.4.1 - ashampoo GmbH & Co. KG) Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.21 - Atheros Communications Inc.) AVG Security Toolbar (HKLM-x32\...\AVG Secure Search) (Version: 19.1.0.285 - AVG Technologies) CCleaner (HKLM\...\CCleaner) (Version: 5.28 - Piriform) Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.) Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.) Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.) Citrix Online Launcher (HKLM-x32\...\{09DA5EE2-7E46-4DC4-96F9-BFEE50D40659}) (Version: 1.0.408 - Citrix) Control ActiveX de Windows Live Mesh para conexiones remotas (HKLM-x32\...\{04668DF2-D32F-4555-9C7E-35523DCD6544}) (Version: 15.4.5722.2 - Microsoft Corporation) Contrôle ActiveX Windows Live Mesh pour connexions à distance (HKLM-x32\...\{55D003F4-9599-44BF-BA9E-95D060730DD3}) (Version: 15.4.5722.2 - Microsoft Corporation) Controlo ActiveX do Windows Live Mesh para Ligações Remotas (HKLM-x32\...\{E54EEB5D-41ED-40FE-B4A8-8565DB81469B}) (Version: 15.4.5722.2 - Microsoft Corporation) Corel Shell Extension - 64Bit (HKLM\...\{19DCDC0D-9D87-46DB-A4B0-08B35AA333A3}) (Version: 14.0 - Corel Corporation) Hidden CorelDRAW Essentials 4 - Content (HKLM-x32\...\{19AC095C-3520-4999-AA15-93B6D0248A50}) (Version: 4.0 - Corel Corporation) Hidden CorelDRAW Essentials 4 - Draw (HKLM-x32\...\{B9FA9F15-A1F3-4DB1-AD49-0B9351843FAA}) (Version: 4.0 - Corel Corporation) Hidden CorelDRAW Essentials 4 - Filters (HKLM-x32\...\{F16841F6-5F0F-4DBE-B318-63CEB916F21D}) (Version: 4.0 - Corel Corporation) Hidden CorelDRAW Essentials 4 - ICA (HKLM-x32\...\{C0237AA4-1BFB-46EA-860D-7B0EB365CA13}) (Version: 4.0 - Corel Corporation) Hidden CorelDRAW Essentials 4 - IPM - No VBA (HKLM-x32\...\{76E852ED-1B06-4BC8-9D6A-625DB95FB7E5}) (Version: 4.0 - Corel Corporation) Hidden CorelDRAW Essentials 4 - Lang BR (HKLM-x32\...\{ABD8B955-1C69-4AF3-949B-13CD587C175F}) (Version: 4.0 - Corel Corporation) Hidden CorelDRAW Essentials 4 - Lang DE (HKLM-x32\...\{0ED4216F-3540-4D6B-8199-1C8DDEA3924B}) (Version: 4.0 - Corel Corporation) Hidden CorelDRAW Essentials 4 - Lang EN (HKLM-x32\...\{34A9406E-1994-4C20-AC72-04CFA2B24545}) (Version: 4.0 - Corel Corporation) Hidden CorelDRAW Essentials 4 - Lang ES (HKLM-x32\...\{C682F3F0-00A6-4379-B083-4F3273624D7B}) (Version: 4.0 - Corel Corporation) Hidden CorelDRAW Essentials 4 - Lang FR (HKLM-x32\...\{BA9319FE-BCEF-4C99-8039-F464648D046E}) (Version: 4.0 - Corel Corporation) Hidden CorelDRAW Essentials 4 - Lang IT (HKLM-x32\...\{3576C335-958D-4D60-A812-F68F9A2796AF}) (Version: 4.0 - Corel Corporation) Hidden CorelDRAW Essentials 4 - Lang NL (HKLM-x32\...\{5500BB35-1C21-4328-9F16-F894B860FADE}) (Version: 4.0 - Uw bedrijfsnaam) Hidden CorelDRAW Essentials 4 - PHOTO-PAINT (HKLM-x32\...\{07B62101-7EBD-434A-94B1-B38063BE5516}) (Version: 4.0 - Corel Corporation) Hidden CorelDRAW Essentials 4 - Windows Shell Extension (HKLM-x32\...\_{CF0ADC18-6D8F-4353-8EAA-DF45456B7853}) (Version: - Corel Corporation) CorelDRAW Essentials 4 - Windows Shell Extension (HKLM-x32\...\{CF0ADC18-6D8F-4353-8EAA-DF45456B7853}) (Version: 1.1 - Corel Corporation) Hidden CorelDRAW Essentials 4 (HKLM-x32\...\_{C0237AA4-1BFB-46EA-860D-7B0EB365CA13}) (Version: - Corel Corporation) CorelDRAW Essentials 4 (HKLM-x32\...\{9043B9A0-9505-405B-8202-E7167A38A89C}) (Version: 4.0 - Corel Corporation) Hidden CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.3418 - CyberLink Corp.) CyberLink MediaShow (HKLM-x32\...\InstallShield_{80E158EA-7181-40FE-A701-301CE6BE64AB}) (Version: 5.0.1410a - CyberLink Corp.) CyberLink MediaShow Espresso (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 5.5.1412_24021a - CyberLink Corp.) CyberLink PhotoNow (HKLM-x32\...\InstallShield_{D36DD326-7280-11D8-97C8-000129760CBE}) (Version: 1.1.0.6904 - CyberLink Corp.) CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.1.3802 - CyberLink Corp.) CyberLink PowerDirector (HKLM-x32\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 8.0.3224a - CyberLink Corp.) CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.2225 - CyberLink Corp.) CyberLink PowerDVD Copy (HKLM-x32\...\InstallShield_{E3D04529-6EDB-11D8-A372-0050BAE317E1}) (Version: 1.5.1306 - CyberLink Corp.) CyberLink PowerProducer (HKLM-x32\...\InstallShield_{B7A0CE06-068E-11D6-97FD-0050BACBF861}) (Version: 5.0.2.2429 - CyberLink Corp.) CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.1.3428 - CyberLink Corp.) D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden Defraggler (HKLM\...\Defraggler) (Version: 2.19 - Piriform) File Opener Packages (HKU\S-1-5-21-2493349215-1570600307-3789144642-1000\...\File Opener Packages) (Version: - ) <==== AANDACHT Formant ActiveX programu Windows Live Mesh odpowiedzialny za obsługę połączeń zdalnych (HKLM-x32\...\{B04A0E2F-1E4C-4E61-B18E-3B2BD6779CA7}) (Version: 15.4.5722.2 - Microsoft Corporation) Fotogalerija Windows Live (HKLM-x32\...\{E59969EA-3B5B-4B24-8B94-43842A7FBFE9}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galeria de Fotografias do Windows Live (HKLM-x32\...\{0EC0B576-90F9-43C3-8FAD-A4902DF4B8F4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galería fotográfica de Windows Live (HKLM-x32\...\{E85A4EFC-82F2-4CEE-8A8E-62FDAD353A66}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galeria fotografii usługi Windows Live (HKLM-x32\...\{CB3F59BB-7858-41A1-A7EA-4B8A6FC7D431}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galerie de photos Windows Live (HKLM-x32\...\{488F0347-C4A7-4374-91A7-30818BEDA710}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Google Chrome (HKLM-x32\...\Google Chrome) (Version: 60.0.3112.113 - Google Inc.) Google Toolbar for Internet Explorer (HKLM-x32\...\{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Version: 1.0.0 - Google Inc.) Hidden Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden GoToMeeting 8.10.0.7495 (HKU\S-1-5-21-2493349215-1570600307-3789144642-1000\...\GoToMeeting) (Version: 8.10.0.7495 - LogMeIn, Inc.) Haali Media Splitter (HKLM-x32\...\HaaliMkx) (Version: - ) Hema Fotoalbum (HKU\S-1-5-21-2493349215-1570600307-3789144642-1000\...\{83EF9202-135C-4AFC-A083-DE9D09C6BC46}_is1) (Version: - Hema) HP Deskjet 2050 J510 series Basissoftware van het apparaat (HKLM\...\{E98E313E-7909-47FA-A6B4-7EFC20C772EE}) (Version: 28.0.1313.0 - Hewlett-Packard Co.) Intel(R) Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2189 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation) Java 8 Update 131 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180131F0}) (Version: 8.0.1310.11 - Oracle Corporation) Java 8 Update 144 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180144F0}) (Version: 8.0.1440.1 - Oracle Corporation) Junk Mail filter update (HKLM-x32\...\{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Kobo (HKLM-x32\...\Kobo) (Version: 3.15.0 - Rakuten Kobo Inc.) Kontrolnik Windows Live Mesh ActiveX za oddaljene povezave (HKLM-x32\...\{CA227A9D-09BE-4BFB-9764-48FED2DA5454}) (Version: 15.4.5722.2 - Microsoft Corporation) Kruidvat fotoservice (HKLM-x32\...\Kruidvat fotoservice) (Version: 5.0.4 - CEWE COLOR AG u Co. OHG) Launch Manager (HKLM-x32\...\{D0846526-66DD-4DC9-A02C-98F9A2806812}) (Version: 1.5.1.2 - Wistron Corp.) Medion Home Cinema (HKLM-x32\...\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 8.0.2213 - CyberLink Corp.) Hidden Medion Home Cinema (HKLM-x32\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 8.0.2213 - CyberLink Corp.) Mesh Runtime (HKLM-x32\...\{8C6D6116-B724-4810-8F2D-D047E6B7D68E}) (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft Money 2000 Deluxe (HKLM-x32\...\MSMONEYV80) (Version: - ) Microsoft Office 365 - nl-nl (HKLM\...\O365HomePremRetail - nl-nl) (Version: 15.0.4953.1001 - Microsoft Corporation) Microsoft Office Klik-en-Klaar 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Professional Plus 2013 - nl-nl (HKLM\...\ProPlusRetail - nl-nl) (Version: 15.0.4953.1001 - Microsoft Corporation) Microsoft Office Starter 2010 - Nederlands (HKLM-x32\...\{90140011-0066-0413-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-2493349215-1570600307-3789144642-1000\...\OneDriveSetup.exe) (Version: 17.3.6943.0625 - Microsoft Corporation) Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0413-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Mozilla Firefox 55.0.3 (x86 nl) (HKLM-x32\...\Mozilla Firefox 55.0.3 (x86 nl)) (Version: 55.0.3 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 53.0.3.6347 - Mozilla) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) Office 15 Click-to-Run Extensibility Component (HKLM-x32\...\{90150000-008C-0000-0000-0000000FF1CE}) (Version: 15.0.4953.1001 - Microsoft Corporation) Hidden Office 15 Click-to-Run Licensing Component (HKLM\...\{90150000-008F-0000-1000-0000000FF1CE}) (Version: 15.0.4953.1001 - Microsoft Corporation) Hidden Office 15 Click-to-Run Localization Component (HKLM-x32\...\{90150000-008C-0413-0000-0000000FF1CE}) (Version: 15.0.4953.1001 - Microsoft Corporation) Hidden PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation) Poczta usługi Windows Live (HKLM-x32\...\{64376910-1860-4CEF-8B34-AA5D205FC5F1}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Podstawowe programy Windows Live (HKLM-x32\...\{7A9D47BA-6D50-4087-866F-0800D8B89383}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Pošta Windows Live (HKLM-x32\...\{7BA19818-F717-4DFB-BC11-FAF17B2B8AEE}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Raccolta foto di Windows Live (HKLM-x32\...\{ED16B700-D91F-44B0-867C-7EB5253CA38D}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6237 - Realtek Semiconductor Corp.) Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30121 - Realtek Semiconductor Corp.) REALTEK Wireless LAN Driver (HKLM-x32\...\{9D3D8C60-A55F-4fed-B2B9-173F09590E16}) (Version: 1.00.0148 - REALTEK Semiconductor Corp.) Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.26.0 - Renesas Electronics Corporation) Hidden Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.26.0 - Renesas Electronics Corporation) Spotify (HKU\S-1-5-21-2493349215-1570600307-3789144642-1000\...\Spotify) (Version: 0.8.8.450.gd9413516 - Spotify AB) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.19.1 - Synaptics Incorporated) Taalpakket voor Microsoft Visual Studio 2010 Tools for Office Runtime (x64) - NLD (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - NLD) (Version: 10.0.50903 - Microsoft Corporation) TP-LINK Archer T1U Driver (HKLM-x32\...\{8CC3E202-13F1-42AD-BA12-11ED4D61D3FB}) (Version: 1.3.1 - TP-LINK) TP-LINK Wireless Configuration Utility (HKLM-x32\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 1.3.1 - TP-LINK) Uzak Bağlantılar İçin Windows Live Mesh ActiveX Denetimi (HKLM-x32\...\{241E7104-937A-4366-AD57-8FDDDB003939}) (Version: 15.4.5722.2 - Microsoft Corporation) Visual Studio 2010 x64 Redistributables (HKLM\...\{21B133D6-5979-47F0-BE1C-F6A6B304693F}) (Version: 13.0.0.1 - AVG Technologies) Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies) Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) VMware Horizon Client (HKLM\...\{936DD031-2978-4374-842C-D18E92F9DFB5}) (Version: 3.2.0.24246 - VMware, Inc.) Windows 10 Update and Privacy Settings (HKLM\...\{4DFCD818-036A-4229-A67D-CF17DC461D92}) (Version: 1.0.14.0 - Microsoft Corporation) Windows 10-updateassistent (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22243 - Microsoft Corporation) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation) Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (HKLM-x32\...\{C32CE55C-12BA-4951-8797-0967FDEF556F}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{C63A1E60-B6A4-440B-89A5-1FC6E4AC1C94}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX-kontroll for eksterne tilkoblinger (HKLM-x32\...\{09B7C7EB-3140-4B5E-842F-9C79A7137139}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX-objekt til fjernforbindelser (HKLM-x32\...\{57220148-3B2B-412A-A2E0-82B9DF423696}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX-vezérlő távoli kapcsolatokhoz (HKLM-x32\...\{6E29C4F7-C2C2-4B18-A15C-E09B92065F15}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Meshin etäyhteyksien ActiveX-komponentti (HKLM-x32\...\{4CF6F287-5121-483C-A5A2-07BDE19D8B4E}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Media Encoder 9 Series (HKLM-x32\...\Windows Media Encoder 9) (Version: - ) Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp) X10 Hardware(TM) (HKLM-x32\...\X10Hardware) (Version: - ) Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις (HKLM-x32\...\{F665F3B8-01B4-46A9-8E47-FF8DC2208C9F}) (Version: 15.4.5722.2 - Microsoft Corporation) Συλλογή φωτογραφιών του Windows Live (HKLM-x32\...\{C00C2A91-6CB3-483F-80B3-2958E29468F1}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden ==================== Aangepaste CLSID (gefilterd): ========================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) CustomCLSID: HKU\S-1-5-21-2493349215-1570600307-3789144642-1000_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32 -> C:\Users\Klaas\AppData\Local\Citrix\GoToMeeting\5174\G2MOutlookAddin64.dll => Geen bestand ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Geen bestand ContextMenuHandlers1: [DefragglerShellExtension] -> {4380C993-0C43-4E02-9A7A-0D40B6EA7590} => C:\Program Files\Defraggler\DefragglerShell64.dll [2015-03-11] (Piriform Ltd) ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> Geen bestand ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\WINDOWS\system32\igfxpph.dll [2012-11-27] (Intel Corporation) ContextMenuHandlers6: [DefragglerShellExtension] -> {4380C993-0C43-4E02-9A7A-0D40B6EA7590} => C:\Program Files\Defraggler\DefragglerShell64.dll [2015-03-11] (Piriform Ltd) ==================== Geplande Taken (gefilterd) ============= (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) Task: {007330CB-667D-4392-8B4D-21FF7196190E} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe Task: {02A7DB9C-38D1-4FB9-A10D-D048C565E402} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Geen bestand <==== AANDACHT Task: {0D9AEA78-7304-437C-BE83-54A41589DB99} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe Task: {0EBF8538-DC84-44D1-BAB8-4F152BE2FBC0} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2017-04-11] (Microsoft Corporation) Task: {0F79254F-6E5E-4C09-85E7-E57286133C85} - System32\Tasks\ROC_REG_JAN_DELETE => C:\ProgramData\AVG January 2013 Campaign\ROC.exe [2013-01-17] () Task: {16F1F9DF-27E4-46BA-88D6-1F3E3DD1C8F1} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2017-03-14] (Microsoft Corporation) Task: {17EB8003-C8F2-4C1B-9B67-F7CC3B8EE52C} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Geen bestand <==== AANDACHT Task: {2F3A715E-0A3D-4C35-B42A-F1C4F611D26F} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe Task: {33E36FB6-3EE6-4DBC-AF5D-D0E4E0BFFD62} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {3F63A96F-C6F6-4FFE-8BEC-50568928C685} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2017-08-10] (Microsoft Corporation) Task: {44347A6B-5084-4430-B0BB-539C270F47FA} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe Task: {493D6D56-C0B8-42FA-AFD2-05DBBBA3B970} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Geen bestand <==== AANDACHT Task: {5B8D8874-C845-4B6A-89D3-6C3599FFA338} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe Task: {62518416-4514-47CD-8B7E-DBBFB588F3D4} - System32\Tasks\G2MUpdateTask-S-1-5-21-2493349215-1570600307-3789144642-1000 => C:\Users\Klaas\AppData\Local\GoToMeeting\7495\g2mupdate.exe [2017-09-02] (LogMeIn, Inc.) Task: {62621F10-CF06-4343-BA31-1B3F67509DCE} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe Task: {63624944-25C0-4853-82A1-8249C3FDB05A} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe Task: {6431B7AA-140F-4576-8689-85ACFAB7F277} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe Task: {66E1A4E5-7995-48B4-A16F-74E7305F6B12} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {6A100086-D43C-4DAB-97E5-75ABE7A5BBFA} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2017-04-11] (Microsoft Corporation) Task: {6B9FC834-1491-428F-ADF2-FE5AD5CA650F} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Geen bestand <==== AANDACHT Task: {6D7253A4-FAA0-4CE7-A6E8-25DF4E8BE0C7} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {73C9FC9E-699A-48D2-B69A-65C4768FA620} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2017-03-14] (Microsoft Corporation) Task: {74ED495B-24BE-4997-8004-8C3D097949C7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.) Task: {7A8D6DF5-B8C8-47BB-93E5-6161217A82A1} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Geen bestand <==== AANDACHT Task: {7CF089DD-24E3-4298-B35F-A9CCAFB1130C} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe Task: {7F310786-BDD2-4DFD-8767-6965D0F372B4} - System32\Tasks\S-1-5-21-2493349215-1570600307-3789144642-1000\DataSenseLiveTileTask => C:\WINDOWS\System32\DataUsageLiveTileTask.exe [2017-03-18] (Microsoft Corporation) Task: {853D299D-0B9E-4C54-BA0F-0776D7071E99} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Geen bestand <==== AANDACHT Task: {89F655FE-9C13-4405-8F86-D76D15E9F1D3} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe Task: {8A9D082C-74FF-4012-ADBC-EF4847B9E507} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-03-03] (Piriform Ltd) Task: {8DBC0F2F-CC86-4549-8ED0-82A9FD209AA8} - System32\Tasks\G2MUploadTask-S-1-5-21-2493349215-1570600307-3789144642-1000 => C:\Users\Klaas\AppData\Local\GoToMeeting\7495\g2mupload.exe [2017-09-02] (LogMeIn, Inc.) Task: {920E23B8-3598-4CB4-B59F-508F4069887A} - System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe Task: {98F5AD43-03C5-4F9B-9655-0F284DA6D86B} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Geen bestand <==== AANDACHT Task: {9A975FCE-BE86-4F1E-A48B-B3E16FA49BAF} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe Task: {9C7F8C77-7317-40CD-BBDE-0D4FFCCC34CB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.) Task: {A2A8074C-3B4C-4FC6-B056-3DDF26DE99E1} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-08-11] (Adobe Systems Incorporated) Task: {A7E7450E-0A0E-4E85-8AD0-0AA23C18361F} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Geen bestand <==== AANDACHT Task: {AF9CBB55-8AA3-4A93-8A11-CA216FC10006} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe Task: {B2213D8C-27A7-4ED0-8527-D0737E9629E9} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Geen bestand <==== AANDACHT Task: {B794A915-1861-4D19-B90A-5908FFDF711F} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe Task: {BB1C630E-AF93-4022-A4C0-D0EBDD3643DB} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe Task: {C1E3CFD2-D965-40CF-9BC9-5437063CA887} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {C3B5C6FE-7804-4151-B40E-94EDB45841CE} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Geen bestand <==== AANDACHT Task: {CE16ABF0-A1C9-4D3C-AD67-8ACA78FE01CB} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe Task: {D095ACA2-D094-4B44-85A2-BD0AD530C396} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe Task: {DD272B36-4E05-4097-BF86-576744BFD8BC} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Geen bestand <==== AANDACHT Task: {DDC3382C-93B2-47AD-94A9-14E4AD50CABC} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe Task: {E6FD3E41-72BA-4588-BBC3-E29CD459D92B} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe Task: {EFE7C9D6-6018-446E-AE81-12210147845C} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Geen bestand <==== AANDACHT Task: {F7714AD1-99F2-4F0D-A57F-61C7EC68F153} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2017-07-11] (Microsoft Corporation) Task: {F7971128-F025-45AB-9BD7-49685E1ED9A8} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-07-20] (Adobe Systems Incorporated) (Als een item is opgenomen in de fixlist, de taak (job) bestand wordt verplaatst. Het bestand dat wordt uitgevoerd door de taak zal niet worden verplaatst.) Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe Task: C:\WINDOWS\Tasks\G2MUpdateTask-S-1-5-21-2493349215-1570600307-3789144642-1000.job => C:\Users\Klaas\AppData\Local\GoToMeeting\7495\g2mupdate.exe Task: C:\WINDOWS\Tasks\G2MUploadTask-S-1-5-21-2493349215-1570600307-3789144642-1000.job => C:\Users\Klaas\AppData\Local\GoToMeeting\7495\g2mupload.exe Task: C:\WINDOWS\Tasks\ROC_REG_JAN_DELETE.job => C:\ProgramData\AVG January 2013 Campaign\ROC.exe ==================== Snelkoppelingen & WMI ======================== (De items kunnen worden opgenomen in de fixlist.txt om hersteld of verwijderd te worden.) ShortcutWithArgument: C:\Users\Public\Desktop\ALDI Foto Service.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.aldifoto.nl ShortcutWithArgument: C:\Users\Public\Desktop\ALDI Talk.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.medionmobile.nl ShortcutWithArgument: C:\Users\Public\Desktop\eBay.nl.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://rover.ebay.com/rover/1/1346-72745-17534-0/4 ShortcutWithArgument: C:\Users\Public\Desktop\Hartelijk welkom bij ALDI.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.aldi.nl ShortcutWithArgument: C:\Users\Public\Desktop\Welkom bij MEDION.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://www.medion.com/nl ==================== Geladen Modules (gefilterd) ============== 2014-11-20 10:35 - 2014-11-20 10:35 - 000225976 _____ () C:\Program Files\Common Files\VMware\DeviceRedirectionCommon\ftnlsv.exe 2014-03-19 10:16 - 2017-01-17 04:25 - 000117440 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll 2014-11-20 11:24 - 2014-11-20 11:24 - 003649720 _____ () C:\Program Files (x86)\VMware\ScannerRedirection\ftscanmgr.exe 2017-03-18 22:58 - 2017-03-18 22:58 - 000138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll 2017-03-18 22:59 - 2017-03-20 05:56 - 001731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2012-11-27 00:54 - 2012-11-27 00:54 - 000094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2017-08-30 10:11 - 2014-12-09 16:43 - 000844800 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe 2013-01-23 10:00 - 2015-12-10 17:37 - 002573712 _____ () C:\Program Files (x86)\AVG Secure Search\vprot.exe 2017-08-29 07:30 - 2017-08-23 10:48 - 003824472 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.113\libglesv2.dll 2017-08-29 07:30 - 2017-08-23 10:48 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.113\libegl.dll 2014-11-20 10:30 - 2014-11-20 10:30 - 001147064 _____ () C:\Program Files (x86)\Common Files\VMware\DeviceRedirectionCommon\ftnlapi.dll 2017-08-30 10:11 - 2014-12-29 14:48 - 001411072 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\nicLan.dll 2017-08-30 10:11 - 2014-12-09 16:42 - 000195072 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\DC_WFF.dll 2017-08-30 10:11 - 2014-12-09 16:42 - 000194560 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\WJRa.dll 2017-08-30 10:11 - 2014-12-09 16:42 - 001206576 _____ () C:\Program Files (x86)\TP-LINK\TP-LINK Wireless Configuration Utility\RaWLAPI.dll 2009-11-02 23:20 - 2009-11-02 23:20 - 000619816 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll 2009-11-02 23:23 - 2009-11-02 23:23 - 000013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll 2015-12-10 17:37 - 2015-12-10 17:37 - 000528272 _____ () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\19.1.0\log4cplusU.dll 2017-06-21 12:06 - 2017-06-21 12:06 - 000325824 _____ () C:\Program Files\Microsoft Office 15\Root\Office15\AppVIsvStream32.dll ==================== Alternate Data Streams (gefilterd) ========= (Als een item is opgenomen in de fixlist, alleen de ADS wordt verwijderd.) AlternateDataStreams: C:\Users\Klaas\Documents\Boodschappen.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Boodschappen.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\cijferlijst deel 1.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\cijferlijst deel 1.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\cijferlijst deel 2.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\cijferlijst deel 2.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Contract SC Lemele seizoen 2014-2015 Blad 1.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Contract SC Lemele seizoen 2014-2015 Blad 1.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Contract SC Lemele seizoen 2014-2015 Blad 2.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Contract SC Lemele seizoen 2014-2015 Blad 2.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Contract SC Lemele seizoen 2014-2015 Blad 3.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Contract SC Lemele seizoen 2014-2015 Blad 3.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Contract SC Lemele seizoen 2014-2015 Blad 4.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Contract SC Lemele seizoen 2014-2015 Blad 4.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Energielabel achterzijde.jpeg.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Energielabel achterzijde.jpeg.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Energielabel voorzijde.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Energielabel voorzijde.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Factuur laptop Ivar achterzijde.jpeg.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Factuur laptop Ivar achterzijde.jpeg.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Factuur laptop Ivar voorzijde.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Factuur laptop Ivar voorzijde.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Factuur laptop Ivar voorzijde.jpeg.png:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Factuur laptop Ivar voorzijde.jpeg.png:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Factuur Ron Stenvert.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Factuur Ron Stenvert.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Factuur Ron Stenvert_Ivar.jpeg.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Factuur Ron Stenvert_Ivar.jpeg.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Factuur Ron Stenvert_Ivar.jpeg.jpeg.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Factuur Ron Stenvert_Ivar.jpeg.jpeg.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Factuur Ron Stenvert_Karin.jpeg.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Factuur Ron Stenvert_Karin.jpeg.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Factuur Temmen & Koop.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Factuur Temmen & Koop.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Geranium cafe Jeugd van Vroeger.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Geranium cafe Jeugd van Vroeger.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Geranium cafe.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Geranium cafe.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Geranium cafe_09-06-2016.jpeg.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Geranium cafe_09-06-2016.jpeg.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Geranium cafe_15-09-2016.jpeg.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Geranium cafe_15-09-2016.jpeg.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Gerard de Wagt.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Gerard de Wagt.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\ING margerente.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\ING margerente.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Ivar scooterongeluk 23-09-2016.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Ivar scooterongeluk 23-09-2016.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Ivar scooterongeluk 23-09-2016_achterzijde.jpeg.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Ivar scooterongeluk 23-09-2016_achterzijde.jpeg.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Ivar scooterongeluk contactgegevens Concordia.jpeg.jpeg.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Ivar scooterongeluk contactgegevens Concordia.jpeg.jpeg.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Ivar werken winterperiode Slagharen 2016.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Ivar werken winterperiode Slagharen 2016.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\kaartjes tamboer.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\kaartjes tamboer.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Koopovereenkomst blad 1.jpeg.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Koopovereenkomst blad 1.jpeg.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Koopovereenkomst blad 2.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Koopovereenkomst blad 2.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Kopie paspoort Joyce.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Kopie paspoort Joyce.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Leerovereenkomst 3.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Leerovereenkomst 3.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Leerovereenkomst 3.jpeg.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Leerovereenkomst 3.jpeg.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Leerovereenkomst deel 1.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Leerovereenkomst deel 1.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Leerovereenkomst deel 2.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Leerovereenkomst deel 2.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Leerovereenkomst deel 3.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Leerovereenkomst deel 3.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Nota Voetencentrum Nijenhuis.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Nota Voetencentrum Nijenhuis.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Pakbon VDO Dayton.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Pakbon VDO Dayton.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Paspoort Joyce.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Paspoort Joyce.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\profilering calo 1.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\profilering calo 1.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\profilering calo 2.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\profilering calo 2.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\profilering calo 3.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\profilering calo 3.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\profilering calo 4.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\profilering calo 4.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Propedeuse Joyce.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Propedeuse Joyce.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Recept Cannelloni.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Recept Cannelloni.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Recept Lummy Boer.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Recept Lummy Boer.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Rekening Thalen.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Rekening Thalen.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Reserveringsformulier Zonne 2015.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Reserveringsformulier Zonne 2015.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Reserveringsformulier Zonne 2015.jpeg.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Reserveringsformulier Zonne 2015.jpeg.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Ria Sok.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Ria Sok.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Training ITIL Service Transition.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Training ITIL Service Transition.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Training ITIL Service Transition.jpeg.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Training ITIL Service Transition.jpeg.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Verlengingbrief hypo nr 1.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Verlengingbrief hypo nr 1.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Verlengingbrief hypo nr 2.jpeg.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Verlengingbrief hypo nr 2.jpeg.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Verlengingbrief hypo nr 3.jpeg..jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Verlengingbrief hypo nr 3.jpeg..jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Verlengingbrief hypo nr 4.jpeg..jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Verlengingbrief hypo nr 4.jpeg..jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Verlengingbrief hypo nr 5.jpeg..jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Verlengingbrief hypo nr 5.jpeg..jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Verlengingbrief hypo nr 6.jpeg..jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Verlengingbrief hypo nr 6.jpeg..jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\Klaas\Documents\Vrijwaring Killerbee Scooter.jpeg:3or4kl4x13tuuug3Byamue2s4b [97] AlternateDataStreams: C:\Users\Klaas\Documents\Vrijwaring Killerbee Scooter.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] ==================== Veilige Modus (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. De "AlternateShell" waarde wordt hersteld.) ==================== Bestandskoppeling (gefilterd) =============== (Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd.) ==================== Internet Explorer vertrouwde/beperkte toegang =============== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd.) ==================== Hosts inhoud: =============================== (Als nodig Hosts: opdracht kan worden opgenomen in de fixlist om Hosts te resetten.) 2009-07-14 04:34 - 2017-06-05 12:02 - 000000848 _____ C:\WINDOWS\system32\Drivers\etc\hosts ==================== Andere gebieden ============================ (Momenteel is er geen automatische fix voor dit onderdeel.) HKU\S-1-5-21-2493349215-1570600307-3789144642-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Klaas\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper DNS Servers: 192.168.2.254 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin) Windows Firewall is ingeschakeld. ==================== MSCONFIG/TASK MANAGER Uitgeschakelde items == MSCONFIG\Services: RichVideo => 2 MSCONFIG\Services: vToolbarUpdater19.1.0 => 2 HKLM\...\StartupApproved\Run: => "WindowsDefender" HKLM\...\StartupApproved\Run32: => "HotkeyApp" HKLM\...\StartupApproved\Run32: => "LMgrVolOSD" HKLM\...\StartupApproved\Run32: => "Wbutton" HKU\S-1-5-21-2493349215-1570600307-3789144642-1000\...\StartupApproved\Run: => "Sidebar" HKU\S-1-5-21-2493349215-1570600307-3789144642-1000\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-2493349215-1570600307-3789144642-1000\...\StartupApproved\Run: => "CCleaner Monitoring" HKU\S-1-5-21-2493349215-1570600307-3789144642-1000\...\StartupApproved\Run: => "GarminExpressTrayApp" ==================== Firewall regels (gefilterd) =============== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) FirewallRules: [{CDF1C51D-3C10-4A85-A75C-99CB44D0FE91}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe FirewallRules: [{FC73927E-B7CA-4589-AA0A-D74F53367DDF}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe FirewallRules: [{FA459CC3-DD61-4A0E-94F2-E967EF31806F}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe FirewallRules: [{18D1E0A3-EECA-49DE-9620-50134DCB975B}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe FirewallRules: [{800A5B25-F109-4FAF-BAAD-D90093D1A93B}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{78636A43-C4D7-4807-A633-643F62B62816}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{3B5D9961-5039-4679-AF8C-E8D47C7882C1}] => (Allow) C:\Users\Klaas\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{C41CD9C6-2EF8-452F-8767-F2B462A48087}] => (Allow) C:\Users\Klaas\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [UDP Query User{83D30A2B-6CCF-4070-B72D-5FB980B9025B}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [TCP Query User{95597BC9-EF6D-4E6F-9C2C-F5A02C829E1C}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [{E36F5E15-A05F-4969-9820-D083781B90C3}] => (Allow) C:\Program Files (x86)\VMware\VMware Horizon View Client\vmware-view.exe FirewallRules: [{F178F733-B39F-4BFD-B5AA-5D0BD090BE56}] => (Allow) C:\Program Files (x86)\VMware\VMware Horizon View Client\vmware-view.exe FirewallRules: [{DDD9F1AF-143A-4762-9F04-EA6E00F80520}] => (Allow) C:\Program Files (x86)\VMware\VMware Horizon View Client\vmware-view.exe FirewallRules: [{C320609B-87AE-4657-8549-412BE09E72ED}] => (Allow) C:\Program Files (x86)\VMware\VMware Horizon View Client\vmware-view.exe FirewallRules: [{412FA8D8-8AC5-43F0-B392-0EAD3B4DA4E0}] => (Allow) C:\Program Files (x86)\VMware\VMware Horizon View Client\vmware-view.exe FirewallRules: [{04E189A1-1A6B-4D0F-8C30-7B41A29F17EE}] => (Allow) C:\Program Files (x86)\VMware\VMware Horizon View Client\vmware-view.exe FirewallRules: [{A34C537F-DE0E-431E-B2A7-C583A85A51FC}] => (Allow) C:\Program Files (x86)\VMware\VMware Horizon View Client\vmware-remotemks.exe FirewallRules: [{AFF470FB-84D8-4CAC-97E2-CD18A349A341}] => (Allow) C:\Program Files (x86)\VMware\VMware Horizon View Client\vmware-remotemks.exe FirewallRules: [{EF9A7BA6-5862-44E5-9CA1-EE79287B1EBD}] => (Allow) C:\Program Files (x86)\VMware\VMware Horizon View Client\vmware-remotemks.exe FirewallRules: [{93FCDAC7-15BE-4A36-9D98-F3086BAB58AE}] => (Allow) C:\Program Files (x86)\VMware\VMware Horizon View Client\vmware-remotemks.exe FirewallRules: [{224519ED-ED2D-4116-9B15-7A4D8751AE92}] => (Allow) C:\Program Files (x86)\VMware\VMware Horizon View Client\vmware-remotemks.exe FirewallRules: [{56E83B61-CC3E-422E-A711-BFB4021343A9}] => (Allow) C:\Program Files (x86)\VMware\VMware Horizon View Client\vmware-remotemks.exe FirewallRules: [{9BC8D9F5-1F98-416C-85B3-5BCF059CF9DF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{C9C366BB-7C2B-4255-B624-E10A0CCCEC90}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{A6991C81-3563-446B-AE41-D2ABF1722DB4}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe FirewallRules: [UDP Query User{7A07203C-7B86-4E71-A19A-F6C67F606CAB}C:\users\klaas\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\klaas\appdata\roaming\spotify\spotify.exe FirewallRules: [TCP Query User{31E9E1F8-743E-4A5A-9200-97FCFE78E716}C:\users\klaas\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\klaas\appdata\roaming\spotify\spotify.exe FirewallRules: [{0DA3A2E1-BC39-4C61-B9A1-F7ADABC7BD20}] => (Allow) C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\USBSetup.exe FirewallRules: [{3E8CFA13-042D-499B-AE59-0128C038DD36}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe FirewallRules: [{BFB92C75-8301-4DF2-BCEA-EBAE46CCE371}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDirector\PDR8.EXE FirewallRules: [{13149270-227A-4615-A9BC-2EBDBF0A4D43}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe FirewallRules: [{EA63862D-702F-4CD1-BD0D-5E0A9C6E9EF5}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe FirewallRules: [{0945B96D-BAF5-4BAC-99E7-CFB7A32A2E97}] => (Allow) LPort=1900 FirewallRules: [{3B619D04-5C1F-4DB4-9302-0216D4945162}] => (Allow) LPort=2869 FirewallRules: [{7C22EBDB-02C9-4762-BD52-F6CC2771544C}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{AD46DA94-CF3F-4721-AC86-420BF4C7C798}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Herstelpunten ========================= 04-09-2017 08:36:02 Windows Back-up ==================== Defecte Apparaatbeheer Apparaten ============= ==================== Eventlog fouten: ========================= Applicatiefouten: ================== Error: (09/06/2017 08:47:29 AM) (Source: SideBySide) (EventID: 35) (User: ) Description: Kan activeringscontext voor 'C:\Program Files\Microsoft Office 15\root\office15\lync.exe.Manifest' niet maken. Fout in manifest of beleidsbestand 'C:\Program Files\Microsoft Office 15\root\office15\UccApi.DLL op regel 1. Onderdeel-id in manifest komt niet overeen met de id van het gevraagde onderdeel. Verwijzing is UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0". Definitie is UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0". Gebruik sxstrace.exe voor gedetailleerde diagnose. Error: (09/05/2017 03:28:33 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Naam van toepassing met fout: wlmail.exe, versie: 15.4.3502.922, tijdstempel: 0x4c9b06aa Naam van module met fout: MAILCOMM.dll, versie: 15.4.3502.922, tijdstempel: 0x4c9b06ad Uitzonderingscode: 0xc0000005 Foutmarge: 0x0001b346 Id van proces met fout: 0x%9 Starttijd van toepassing met fout: 0xwlmail.exe0 Pad naar toepassing met fout: wlmail.exe1 Pad naar module met fout: wlmail.exe2 Rapport-id: wlmail.exe3 Volledige pakketnaam met fout: wlmail.exe4 Relatieve toepassings-id van pakket met fout: wlmail.exe5 Error: (09/05/2017 07:58:07 AM) (Source: SideBySide) (EventID: 35) (User: ) Description: Kan activeringscontext voor 'C:\Program Files\Microsoft Office 15\root\office15\lync.exe.Manifest' niet maken. Fout in manifest of beleidsbestand 'C:\Program Files\Microsoft Office 15\root\office15\UccApi.DLL op regel 1. Onderdeel-id in manifest komt niet overeen met de id van het gevraagde onderdeel. Verwijzing is UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0". Definitie is UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0". Gebruik sxstrace.exe voor gedetailleerde diagnose. Error: (09/04/2017 08:59:52 AM) (Source: SideBySide) (EventID: 35) (User: ) Description: Kan activeringscontext voor 'C:\Program Files\Microsoft Office 15\root\office15\lync.exe.Manifest' niet maken. Fout in manifest of beleidsbestand 'C:\Program Files\Microsoft Office 15\root\office15\UccApi.DLL op regel 1. Onderdeel-id in manifest komt niet overeen met de id van het gevraagde onderdeel. Verwijzing is UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0". Definitie is UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0". Gebruik sxstrace.exe voor gedetailleerde diagnose. Error: (09/03/2017 11:01:28 AM) (Source: SideBySide) (EventID: 35) (User: ) Description: Kan activeringscontext voor 'C:\Program Files\Microsoft Office 15\root\office15\lync.exe.Manifest' niet maken. Fout in manifest of beleidsbestand 'C:\Program Files\Microsoft Office 15\root\office15\UccApi.DLL op regel 1. Onderdeel-id in manifest komt niet overeen met de id van het gevraagde onderdeel. Verwijzing is UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0". Definitie is UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0". Gebruik sxstrace.exe voor gedetailleerde diagnose. Error: (09/02/2017 03:21:20 AM) (Source: SideBySide) (EventID: 35) (User: ) Description: Kan activeringscontext voor 'C:\Program Files\Microsoft Office 15\root\office15\lync.exe.Manifest' niet maken. Fout in manifest of beleidsbestand 'C:\Program Files\Microsoft Office 15\root\office15\UccApi.DLL op regel 1. Onderdeel-id in manifest komt niet overeen met de id van het gevraagde onderdeel. Verwijzing is UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0". Definitie is UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0". Gebruik sxstrace.exe voor gedetailleerde diagnose. Error: (09/01/2017 03:45:53 AM) (Source: SideBySide) (EventID: 35) (User: ) Description: Kan activeringscontext voor 'C:\Program Files\Microsoft Office 15\root\office15\lync.exe.Manifest' niet maken. Fout in manifest of beleidsbestand 'C:\Program Files\Microsoft Office 15\root\office15\UccApi.DLL op regel 1. Onderdeel-id in manifest komt niet overeen met de id van het gevraagde onderdeel. Verwijzing is UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0". Definitie is UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0". Gebruik sxstrace.exe voor gedetailleerde diagnose. Error: (08/31/2017 05:46:24 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Naam van toepassing met fout: dwm.exe, versie: 10.0.15063.0, tijdstempel: 0x982d0cc7 Naam van module met fout: igd10umd64.dll, versie: 8.15.10.2900, tijdstempel: 0x50b4062e Uitzonderingscode: 0xc0000005 Foutmarge: 0x000000000003578e Id van proces met fout: 0x19c4 Starttijd van toepassing met fout: 0x01d3224dca7431b0 Pad naar toepassing met fout: C:\WINDOWS\system32\dwm.exe Pad naar module met fout: C:\WINDOWS\system32\igd10umd64.dll Rapport-id: c56a5c66-a121-4dd5-95ea-6e9dd71604c4 Volledige pakketnaam met fout: Relatieve toepassings-id van pakket met fout: Error: (08/31/2017 11:03:01 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: Klaas-PC) Description: Het pakket Microsoft.Windows.ShellExperienceHost_10.0.15063.332_neutral_neutral_cw5n1h2txyewy+App is beëindigd omdat het onderbreken te lang duurde. Error: (08/31/2017 08:42:14 AM) (Source: SideBySide) (EventID: 35) (User: ) Description: Kan activeringscontext voor 'C:\Program Files\Microsoft Office 15\root\office15\lync.exe.Manifest' niet maken. Fout in manifest of beleidsbestand 'C:\Program Files\Microsoft Office 15\root\office15\UccApi.DLL op regel 1. Onderdeel-id in manifest komt niet overeen met de id van het gevraagde onderdeel. Verwijzing is UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0". Definitie is UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0". Gebruik sxstrace.exe voor gedetailleerde diagnose. Systeemfouten: ============= Error: (09/05/2017 05:35:54 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: De NetTcpActivator-service is afhankelijk van de NetTcpPortSharing-service, die vanwege de volgende fout niet kan worden gestart: Kan de service niet starten omdat deze is uitgeschakeld of omdat het geen ingeschakelde apparaten met zich heeft verbonden. Error: (09/05/2017 05:35:25 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: De CldFlt-service kan vanwege de volgende fout niet worden gestart: De aanvraag wordt niet ondersteund. Error: (09/05/2017 05:34:48 PM) (Source: volmgr) (EventID: 46) (User: ) Description: Crashdumpinitialisatie is mislukt! Error: (09/05/2017 05:35:20 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: De vorige afsluiting van het systeem om 17:32:50 op ‎5-‎9-‎2017 is onverwacht gebeurd. Error: (09/04/2017 08:42:14 AM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: De Security Center-service is bij het starten vastgelopen. Error: (09/04/2017 08:40:09 AM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: De Intel(R) Management & Security Application User Notification Service-service is bij het starten vastgelopen. Error: (09/04/2017 08:32:51 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: De ftscanmgr-service kan vanwege de volgende fout niet worden gestart: De service heeft de start- of stuuropdracht niet op juiste wijze beantwoord. Error: (09/04/2017 08:32:50 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Time-out (30000 seconden) tijdens het wachten op het verbinden van deze service: ftscanmgr. Error: (09/04/2017 08:32:19 AM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: De NetTcpActivator-service is afhankelijk van de NetTcpPortSharing-service, die vanwege de volgende fout niet kan worden gestart: Kan de service niet starten omdat deze is uitgeschakeld of omdat het geen ingeschakelde apparaten met zich heeft verbonden. Error: (09/04/2017 08:31:58 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: De CldFlt-service kan vanwege de volgende fout niet worden gestart: De aanvraag wordt niet ondersteund. CodeIntegrity: =================================== Date: 2017-08-10 18:11:07.196 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements. Date: 2017-08-10 18:11:07.153 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements. Date: 2017-08-10 18:11:07.108 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements. Date: 2017-08-10 18:11:06.926 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements. Date: 2017-08-10 18:11:06.862 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements. Date: 2017-08-10 18:11:06.791 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\MSDATASRC\7.0.3300.0__b03f5f7f11d50a3a\MSDATASRC.dll that did not meet the Microsoft signing level requirements. Date: 2017-08-10 18:11:04.950 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements. Date: 2017-08-10 18:11:04.172 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\stdole\7.0.3300.0__b03f5f7f11d50a3a\stdole.dll that did not meet the Microsoft signing level requirements. Date: 2017-08-10 12:05:44.819 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\Microsoft.StdFormat\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.StdFormat.dll that did not meet the Microsoft signing level requirements. Date: 2017-08-10 12:05:44.786 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements. ==================== Geheugen info =========================== Processor: Intel(R) Core(TM) i3 CPU M 380 @ 2.53GHz Percentage geheugen in gebruik: 67% Totaal fysiek RAM-geheugen: 3893.48 MB Beschikbaar fysiek RAM-geheugen: 1263.76 MB Totaal Virtueel geheugen: 7861.48 MB Beschikbaar Virtual geheugen: 5375.3 MB ==================== Schijven ================================ Drive c: (Boot) (Fixed) (Total:546.25 GB) (Free:460 GB) NTFS Drive d: (Recover) (Fixed) (Total:48.83 GB) (Free:6.89 GB) NTFS Drive f: (DRIVE-N-GO) (Fixed) (Total:465.53 GB) (Free:280.86 GB) FAT32 ==================== MBR & Partitietabel ================== ======================================================== Disk: 0 (Size: 596.2 GB) (Disk ID: 2BD2C32A) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=546.2 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=48.8 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=1023 MB) - (Type=12) ======================================================== Disk: 1 (MBR Code: Windows XP) (Size: 465.8 GB) (Disk ID: 9888D2C0) Partition 1: (Active) - (Size=465.8 GB) - (Type=0C) ==================== Eind van Addition.txt ============================