Scanresultaten van Farbar Recovery Scan Tool (FRST) (x64) Versie: 14-09-2017 01
Gestart door OEM PC (Beheerder) op OEMPC-PC (15-09-2017 14:59:29)
Gestart vanaf C:\Users\OEM PC\Downloads
Geladen Profielen: OEM PC (Beschikbare Profielen: OEM PC)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Taal: Nederlands (Nederland)
Internet Explorer Versie 10 (Standaardbrowser: Chrome)
Boot Modus: Normal
Handleiding voor Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processen (gefilterd) =================

(Als een item is opgenomen in de fixlist, het proces zal worden gesloten. Het bestand zal niet worden verplaatst.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(iOSinstaller.com) C:\Program Files (x86)\iOSinstaller\Updater.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\printfilterpipelinesvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(TODO: <公司名>) C:\Program Files (x86)\TRUST GAMING MOUSE DRIVER\TRUST GAMING MOUSE.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MpCmdRun.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MpCmdRun.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
() C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.96\deploy\LeagueClient.exe
() C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.96\deploy\LeagueClientUx.exe
() C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.96\deploy\LeagueClientUxRender.exe
() C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.96\deploy\LeagueClientUxRender.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(Farbar) C:\Users\OEM PC\Downloads\FRST64 (1).exe

==================== Register (gefilterd) ====================

(Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.)

HKLM\...\Run: [CmPCIaudio] => C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\CMICNFG3.dll,CMICtrlWnd
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1354712 2016-08-30] (Microsoft Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SE61T-UserTools] => C:\Program Files (x86)\TRUST GAMING MOUSE DRIVER\TRUST GAMING MOUSE.exe [1963008 2015-06-21] (TODO: <公司名>)
HKU\S-1-5-21-3188403328-567760530-1441858564-1000\...\Run: [HP ENVY 4500 series (NET)] => C:\Program Files\HP\HP ENVY 4500 series\Bin\ScanToPCActivationApp.exe [3487240 2014-07-21] (Hewlett-Packard Development Company, LP)
HKU\S-1-5-21-3188403328-567760530-1441858564-1000\...\MountPoints2: {6de495e1-9ac5-11d6-b824-806e6f6e6963} - D:\BALDUR.EXE
HKU\S-1-5-21-3188403328-567760530-1441858564-1000\...\MountPoints2: {87466255-a388-11e2-80f1-001e8c6c6921} - F:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3188403328-567760530-1441858564-1000\...\MountPoints2: {a6d3d6b8-a417-11e2-af26-001e8c6c6921} - F:\HTC_Sync_Manager_PC.exe
HKU\S-1-5-21-3188403328-567760530-1441858564-1000\...\MountPoints2: {fb331e40-d9dc-11e2-af49-806e6f6e6963} - E:\autorun.exe
HKU\S-1-5-21-3188403328-567760530-1441858564-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Mystify.scr [242688 2010-11-21] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Device Monitor 3.lnk [2013-04-14]
ShortcutTarget: Device Monitor 3.lnk -> C:\Program Files (x86)\PIXELA\Everio MediaBrowser 3\MBCameraMonitor.exe (PIXELA CORPORATION)
Startup: C:\Users\OEM PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Inktwaarschuwingen controleren - HP ENVY 4500 series.lnk [2017-03-31]
ShortcutTarget: Inktwaarschuwingen controleren - HP ENVY 4500 series.lnk -> C:\Program Files\HP\HP ENVY 4500 series\Bin\HPStatusBL.dll (Hewlett-Packard Development Company, LP)

==================== Internet (gefilterd) ====================

(Als een item is opgenomen in de fixlist, als het een registry item is wordt verwijderd of hersteld naar de standaard.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.254 195.121.1.34 195.121.1.66
Tcpip\..\Interfaces\{52EF4766-7A60-484F-82BF-1FCC763EF2EA}: [DhcpNameServer] 192.168.2.254 195.121.1.34 195.121.1.66
Tcpip\..\Interfaces\{CA6E2670-775D-45E1-9B4C-361476808905}: [DhcpNameServer] 192.168.2.254 195.121.1.34 195.121.1.66
Tcpip\..\Interfaces\{F0158CDE-BB75-4B90-898C-5FCAE9ADCC31}: [DhcpNameServer] 192.168.2.254 195.121.1.34 195.121.1.66

Internet Explorer:
==================
HKU\S-1-5-21-3188403328-567760530-1441858564-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=NL&userid=89bd0ca2-12f1-426f-8050-eeb12c09aa37&searchtype=ds&q={searchTerms}&installDate=13/04/2013
HKU\S-1-5-21-3188403328-567760530-1441858564-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.nl/?gws_rd=ssl
HKU\S-1-5-21-3188403328-567760530-1441858564-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://nl.msn.com/?ocid=iehp
SearchScopes: HKLM-x32 -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=NL&userid=89bd0ca2-12f1-426f-8050-eeb12c09aa37&searchtype=ds&q={searchTerms}&installDate=13/04/2013
SearchScopes: HKLM-x32 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snap.do/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=NL&userid=89bd0ca2-12f1-426f-8050-eeb12c09aa37&searchtype=ds&q={searchTerms}&installDate=13/04/2013
SearchScopes: HKU\S-1-5-21-3188403328-567760530-1441858564-1000 -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=NL&userid=89bd0ca2-12f1-426f-8050-eeb12c09aa37&searchtype=ds&q={searchTerms}&installDate=13/04/2013
SearchScopes: HKU\S-1-5-21-3188403328-567760530-1441858564-1000 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=NL&userid=89bd0ca2-12f1-426f-8050-eeb12c09aa37&searchtype=ds&q={searchTerms}&installDate=13/04/2013
BHO: Snap.DoEngine -> {31ad400d-1b06-4e33-a59a-90c2c140cba0} -> C:\Windows\system32\mscoree.dll [2010-11-21] (Microsoft Corporation)
BHO-x32: Snap.DoEngine -> {31ad400d-1b06-4e33-a59a-90c2c140cba0} -> C:\Windows\system32\mscoree.dll [2010-11-21] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2016-11-25] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-11-25] (Oracle Corporation)
Toolbar: HKLM - Snap.Do - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\system32\mscoree.dll [2010-11-21] (Microsoft Corporation)
Toolbar: HKLM-x32 - Snap.Do - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\system32\mscoree.dll [2010-11-21] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: hlz0ospj.default
FF ProfilePath: C:\Users\OEM PC\AppData\Roaming\Mozilla\Firefox\Profiles\hlz0ospj.default [2016-11-26]
FF Homepage: Mozilla\Firefox\Profiles\hlz0ospj.default -> hxxps://www.google.nl/
FF Plugin: @microsoft.com/GENUINE -> disabled [Geen bestand]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll [2013-09-13] ( Microsoft Corporation)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-11-25] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-11-25] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Geen bestand]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll [2013-09-13] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-27] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-27] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2017-08-18] (Adobe Systems Inc.)

Chrome: 
=======
CHR DefaultProfile: Default
CHR StartupUrls: Default -> "hxxp://www.google.nl/"
CHR Profile: C:\Users\OEM PC\AppData\Local\Google\Chrome\User Data\Default [2017-09-15]
CHR Extension: (Adblock Plus) - C:\Users\OEM PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-07-12]
CHR Extension: (Adblock voor Youtube™) - C:\Users\OEM PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedhionkhpnakcndndgjdbohmhepckk [2017-07-17]
CHR Extension: (Betalingen via Chrome Web Store) - C:\Users\OEM PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-26]
CHR Extension: (Chrome Media Router) - C:\Users\OEM PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-13]

==================== Services (gefilterd) ====================

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

S2 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
R2 iOSinstallerUpdater; C:\Program Files (x86)\iOSinstaller\updater.exe [165376 2015-04-08] (iOSinstaller.com) [Bestand niet getekend]
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [120888 2016-08-30] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-08-30] (Microsoft Corporation)
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1450824 2017-09-10] (Overwolf LTD)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] () [Bestand niet getekend]
S2 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software) [Bestand niet getekend]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Drivers (gefilterd) ======================

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

R3 cmuda3; C:\Windows\System32\drivers\cmudax3.sys [1155072 2009-12-01] (C-Media Inc)
S3 HTCAND64; C:\Windows\System32\Drivers\ANDROIDUSB.sys [33736 2009-11-02] (HTC, Corporation) [Bestand niet getekend]
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()
R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
R3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [748648 2010-08-12] (Realtek Semiconductor Corporation )
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2013-06-20] (Duplex Secure Ltd.)
R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x64.sys [395264 2009-09-28] ()
U3 apnd2zpx; C:\Windows\System32\Drivers\apnd2zpx.sys [0 ] (Advanced Micro Devices) <==== AANDACHT (nul byte bestand/map)
S1 MpKsl075f82f9; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{8C4CB789-7975-4FA7-AD37-3DBCD04B1469}\MpKsl075f82f9.sys [X]

==================== NetSvcs (gefilterd) ===================

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)


==================== Een Maand Aangemaakt bestanden en mappen ========

(Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)

2017-09-15 14:59 - 2017-09-15 15:00 - 000013922 _____ C:\Users\OEM PC\Downloads\FRST.txt
2017-09-15 14:59 - 2017-09-15 14:59 - 000000000 ____D C:\FRST
2017-09-15 14:58 - 2017-09-15 14:58 - 000000000 ____D C:\Users\OEM PC\Downloads\Nieuwe map
2017-09-15 14:55 - 2017-09-15 14:55 - 002398208 _____ (Farbar) C:\Users\OEM PC\Downloads\FRST64 (1).exe
2017-09-15 14:53 - 2017-09-15 14:54 - 002398208 _____ (Farbar) C:\Users\OEM PC\Downloads\FRST64.exe
2017-09-13 18:29 - 2017-09-13 18:29 - 000001081 _____ C:\Users\Public\Desktop\Overwolf.lnk
2017-09-13 18:29 - 2017-09-13 18:29 - 000000000 ____D C:\Users\OEM PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Overwolf
2017-09-13 18:22 - 2017-09-13 18:28 - 001643028 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2017-09-13 18:14 - 2017-09-13 18:14 - 000004304 _____ C:\Windows\System32\Tasks\Overwolf Updater Task
2017-09-13 18:11 - 2017-09-13 18:32 - 000000000 ____D C:\ProgramData\Overwolf
2017-09-13 18:11 - 2017-09-13 18:13 - 000000000 ____D C:\Program Files (x86)\Overwolf
2017-09-13 18:10 - 2017-09-15 14:14 - 000000000 ____D C:\Users\OEM PC\AppData\Local\Overwolf

==================== Een Maand Gewijzigd bestanden en mappen ========

(Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)

2017-09-15 15:00 - 2011-04-12 15:00 - 000745522 _____ C:\Windows\system32\perfh013.dat
2017-09-15 15:00 - 2011-04-12 15:00 - 000153474 _____ C:\Windows\system32\perfc013.dat
2017-09-15 15:00 - 2009-07-14 07:13 - 001669976 _____ C:\Windows\system32\PerfStringBackup.INI
2017-09-15 14:51 - 2016-11-26 18:55 - 000000360 _____ C:\Windows\Tasks\DriverToolkit Autorun.job
2017-09-15 14:51 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-09-15 14:50 - 2009-07-14 07:08 - 000032620 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-09-15 14:20 - 2009-07-14 06:45 - 000022720 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-09-15 14:20 - 2009-07-14 06:45 - 000022720 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-09-15 14:18 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf
2017-09-13 17:20 - 2013-04-10 14:25 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-09-13 17:20 - 2013-04-10 14:25 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-09-13 17:20 - 2013-04-10 14:25 - 000004422 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-09-13 17:19 - 2013-04-10 14:25 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2017-09-13 17:19 - 2013-04-10 14:25 - 000000000 ____D C:\Windows\system32\Macromed

==================== Bestanden in de root van sommige mappen =======

2016-11-25 20:53 - 2017-05-10 00:00 - 000007607 _____ () C:\Users\OEM PC\AppData\Local\Resmon.ResmonCfg
2013-04-15 22:05 - 2013-04-15 22:05 - 000000057 _____ () C:\ProgramData\Ament.ini

Sommige bestanden in TEMP:
====================
2013-01-18 08:14 - 2013-01-18 08:14 - 000383264 _____ (NVIDIA Corporation) C:\Users\OEM PC\AppData\Local\Temp\nvSCPAPISvr.exe
2013-01-18 08:15 - 2013-01-18 08:15 - 000709920 _____ (NVIDIA Corporation) C:\Users\OEM PC\AppData\Local\Temp\nvStInst.exe
2017-09-13 18:10 - 2017-09-13 18:10 - 000065280 _____ () C:\Users\OEM PC\AppData\Local\Temp\utils.dll

==================== Bamital & volsnap ======================

(Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.)

C:\Windows\system32\winlogon.exe => Bestand is getekend
C:\Windows\system32\wininit.exe => Bestand is getekend
C:\Windows\SysWOW64\wininit.exe => Bestand is getekend
C:\Windows\explorer.exe => Bestand is getekend
C:\Windows\SysWOW64\explorer.exe => Bestand is getekend
C:\Windows\system32\svchost.exe => Bestand is getekend
C:\Windows\SysWOW64\svchost.exe => Bestand is getekend
C:\Windows\system32\services.exe => Bestand is getekend
C:\Windows\system32\User32.dll => Bestand is getekend
C:\Windows\SysWOW64\User32.dll => Bestand is getekend
C:\Windows\system32\userinit.exe => Bestand is getekend
C:\Windows\SysWOW64\userinit.exe => Bestand is getekend
C:\Windows\system32\rpcss.dll => Bestand is getekend
C:\Windows\system32\dnsapi.dll => Bestand is getekend
C:\Windows\SysWOW64\dnsapi.dll => Bestand is getekend
C:\Windows\system32\Drivers\volsnap.sys => Bestand is getekend

LastRegBack: 2016-11-25 10:18

==================== Eind van FRST.txt ============================