Scanresultaten van Farbar Recovery Scan Tool (FRST) (x64) Versie: 03-10-2017 01 Gestart door Eigenaar (Beheerder) op EIGENAAR-PC (05-10-2017 18:43:14) Gestart vanaf C:\ Geladen Profielen: UpdatusUser & Eigenaar (Beschikbare Profielen: UpdatusUser & Eigenaar) Platform: Windows 7 Home Premium Service Pack 1 (X64) Taal: Nederlands (Nederland) Internet Explorer Versie 11 (Standaardbrowser: IE) Boot Modus: Normal Handleiding voor Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processen (gefilterd) ================= (Als een item is opgenomen in de fixlist, het proces zal worden gesloten. Het bestand zal niet worden verplaatst.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (Microsoft Corporation) C:\Windows\System32\wisptis.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe (ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Virtual Touch\QuickGesture\x64\QuickGesture64.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Virtual Touch\QuickGesture\x86\QuickGesture.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\FaceLogon\sensorsrv.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe (ASUS) C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe (Company) C:\Program Files (x86)\Popcorn Time\Updater.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe (Cisco Systems, Inc.) C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\nmsrvc.exe (AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe (Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe (Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe (Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe (MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.EXE (ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe ==================== Register (gefilterd) =========================== (Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12480616 2012-04-24] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1158248 2012-03-09] (Realtek Semiconductor) HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2661672 2012-02-19] (ELAN Microelectronics Corp.) HKLM\...\Run: [BLEServicesCtrl] => C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe [178960 2012-03-15] (Intel Corporation) HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [361984 2011-03-17] (Alcor Micro Corp.) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [213824 2017-05-18] (AVAST Software) HKLM\...\Run: [Linksys Wireless Manager] => C:\Program Files (x86)\Linksys\Linksys Wireless Manager\LinksysWirelessManager.exe [1358384 2009-02-16] (Linksys, LLC) HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3331312 2012-02-24] (ASUSTek Computer Inc.) HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe [737104 2011-07-29] (ecareme) HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-03-26] (Intel Corporation) HKLM-x32\...\Run: [Wireless Console 3] => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2321072 2012-02-03] (ASUSTeK Computer Inc.) HKLM-x32\...\Run: [ACMON] => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [102568 2012-02-21] (ASUS) HKLM-x32\...\Run: [ASUS Screen Saver Protector] => C:\Windows\AsScrPro.exe [3058304 2012-06-27] (ASUS) HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\Cyberlink\PowerDVD10\PDVD10Serv.exe [87336 2011-03-30] (CyberLink Corp.) HKLM-x32\...\Run: [UpdatePSTShortCut] => C:\Program Files (x86)\Cyberlink\DVD Suite\MUITransfer\MUIStartMenu.exe [222504 2011-12-31] (CyberLink Corp.) HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2010-08-20] (CyberLink) HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [322208 2012-06-25] (ASUSTek Computer Inc.) HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [174752 2012-06-19] (ASUSTek Computer Inc.) HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.) HKLM-x32\...\Run: [nmctxth] => C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\nmctxth.exe [642856 2008-12-12] (Cisco Systems, Inc.) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restrictie <==== AANDACHT HKU\S-1-5-21-232980774-1606696947-1911411212-1001\...\MountPoints2: {78815ed3-a424-11e7-b950-685d43741570} - E:\TP-LINK_Gigabit_Ethernet_USB_Adapter.exe AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [260928 2012-04-24] (NVIDIA Corporation) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AsusVibeLauncher.lnk [2012-02-24] ShortcutTarget: AsusVibeLauncher.lnk -> C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe (ASUSTeK Computer Inc.) Startup: C:\Users\Eigenaar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Schermopname en Snel starten.lnk [2017-08-26] ShortcutTarget: OneNote 2010 Schermopname en Snel starten.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation) GroupPolicy: Restrictie <==== AANDACHT CHR HKLM\SOFTWARE\Policies\Google: Restrictie <==== AANDACHT ==================== Internet (gefilterd) ==================== (Als een item is opgenomen in de fixlist, als het een registry item is wordt verwijderd of hersteld naar de standaard.) ProxyEnable: [.DEFAULT] => Proxy is ingeschakeld. ProxyServer: [.DEFAULT] => http=127.0.0.1:49727;https=127.0.0.1:49727 Hosts: Er zijn meer dan één item in Hosts. Zie Hosts deel van Addition.txt Tcpip\..\Interfaces\{0BC5DCC5-EED2-4F3F-B992-9DBE497A1FA6}: [DhcpNameServer] 172.20.10.1 Internet Explorer: ================== HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=AV01 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-232980774-1606696947-1911411212-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmPNQVEgaIidPexSlXJqrU0wKu7uS--qqrKS5Csnh9drWNkYpjREmrQodi7NxE9yi8wzlu_u4xanzBHMyafI99zbuqnA5hok9-ycnOOUVJ6A308FlAHj4o0uQjb2xkFx4jlJJZ9EW36cP_ksxGo1FuJ5EJw,,&q={searchTerms} HKU\S-1-5-21-232980774-1606696947-1911411212-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmPNQVEgaIidPexSlXJqrU0wKu7uS--qqrKS5Csnh9drWNkYpjREmrQodi7NxE9yi8wzlu_u4xanzBHMyafI99zbuqnA1lTm2xzS1C4eOtqxwGTBko4c3or6h9nNXqrB9zjfQUZZTwfDf0Eker17_r5gd_Q,, HKU\S-1-5-21-232980774-1606696947-1911411212-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com HKU\S-1-5-21-232980774-1606696947-1911411212-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 HKU\S-1-5-21-232980774-1606696947-1911411212-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=AV01 SearchScopes: HKLM -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP06&src=IE-SearchBox SearchScopes: HKLM-x32 -> DefaultScope {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?pc=cosp&ptag=A12318C5BE3&form=CONBDF&conlogo=CT3210127&q={searchTerms} SearchScopes: HKLM-x32 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmPNQVEgaIidPexSlXJqrU0wKu7uS--qqrKS5Csnh9drWNkYpjREmrQodi7NxE9yi8wzlu_u4xanzBHMyafI99zbuqnA5hok9-ycnOOUVJ6A308FlAHj4o0uQjb2xkFx4jlJJZ9EW36cP_ksxGo1FuJ5EJw,,&q={searchTerms} SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP06&src=IE-SearchBox SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?pc=cosp&ptag=A12318C5BE3&form=CONBDF&conlogo=CT3210127&q={searchTerms} SearchScopes: HKU\S-1-5-21-232980774-1606696947-1911411212-1000 -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmPNQVEgaIidPexSlXJqrU0wKu7uS--qqrKS5Csnh9drWNkYpjREmrQodi7NxE9yi8wzlu_u4xanzBHMyafI99zbuqnA5hok9-ycnOOUVJ6A308FlAHj4o0uQjb2xkFx4jlJJZ9EW36cP_ksxGo1FuJ5EJw,,&q={searchTerms} SearchScopes: HKU\S-1-5-21-232980774-1606696947-1911411212-1000 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmPNQVEgaIidPexSlXJqrU0wKu7uS--qqrKS5Csnh9drWNkYpjREmrQodi7NxE9yi8wzlu_u4xanzBHMyafI99zbuqnA5hok9-ycnOOUVJ6A308FlAHj4o0uQjb2xkFx4jlJJZ9EW36cP_ksxGo1FuJ5EJw,,&q={searchTerms} SearchScopes: HKU\S-1-5-21-232980774-1606696947-1911411212-1001 -> DefaultScope {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?pc=cosp&ptag=A12318C5BE3&form=CONBDF&conlogo=CT3210127&q={searchTerms} SearchScopes: HKU\S-1-5-21-232980774-1606696947-1911411212-1001 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.snapdo.com/?p=mKO_AwFzXIpYRbPGr6JN_C9Okvk3V9BHMT-IkVs3ZQQWmPNQVEgaIidPexSlXJqrU0wKu7uS--qqrKS5Csnh9drWNkYpjREmrQodi7NxE9yi8wzlu_u4xanzBHMyafI99zbuqnA5hok9-ycnOOUVJ6A308FlAHj4o0uQjb2xkFx4jlJJZ9EW36cP_ksxGo1FuJ5EJw,,&q={searchTerms} SearchScopes: HKU\S-1-5-21-232980774-1606696947-1911411212-1001 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://search.conduit.com/Results.aspx?gd=&ctid=CT3320133&octid=EB_ORIGINAL_CTID&ISID=M061D126E-B6D8-4D61-86A3-B5505D8EC362&SearchSource=58&CUI=&UM=5&UP=SPF4DC5985-8ECF-4B75-A1B4-265D048D2344&q={searchTerms}&SSPV= SearchScopes: HKU\S-1-5-21-232980774-1606696947-1911411212-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-232980774-1606696947-1911411212-1001 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?pc=cosp&ptag=A12318C5BE3&form=CONBDF&conlogo=CT3210127&q={searchTerms} SearchScopes: HKU\S-1-5-21-232980774-1606696947-1911411212-1001 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = BHO: Bing Bar Helper -> {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll [2014-03-11] (Microsoft Corporation.) BHO: Geen Naam -> {31ad400d-1b06-4e33-a59a-90c2c140cba0} -> Geen bestand BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2017-04-08] (AVAST Software) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29] (Microsoft Corp.) BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-05-06] (Google Inc.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO-x32: ThreeShips IE Helper -> {17FDB9F8-DCC4-4F6A-AE07-B16018A48469} -> C:\Program Files (x86)\Common Files\Threeships Shared\DLL\ThreeShipsIEHelper.dll [2012-04-16] (ThreeShips enterprises b.v.) BHO-x32: Bing Bar Helper -> {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} -> C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11] (Microsoft Corporation.) BHO-x32: Geen Naam -> {31ad400d-1b06-4e33-a59a-90c2c140cba0} -> Geen bestand BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-04-08] (AVAST Software) BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29] (Microsoft Corp.) BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-05-06] (Google Inc.) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) Toolbar: HKLM - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll [2014-03-11] (Microsoft Corporation.) Toolbar: HKLM - Geen Naam - {ae07101b-46d4-4a98-af68-0333ea26e113} - Geen bestand Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-05-06] (Google Inc.) Toolbar: HKLM-x32 - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11] (Microsoft Corporation.) Toolbar: HKLM-x32 - Geen Naam - {ae07101b-46d4-4a98-af68-0333ea26e113} - Geen bestand Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-05-06] (Google Inc.) Toolbar: HKU\S-1-5-21-232980774-1606696947-1911411212-1001 -> Geen Naam - {A13C2648-91D4-4BF3-BC6D-0079707C4389} - Geen bestand Toolbar: HKU\S-1-5-21-232980774-1606696947-1911411212-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-05-06] (Google Inc.) DPF: HKLM-x32 {233C1507-6A77-46A4-9443-F871F945D258} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab Handler: pure-go - {4746C79A-2042-4332-8650-48966E44ABA8} - C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\amd64\puresp4.dll [2009-02-13] (Cisco Systems, Inc.) Handler-x32: pure-go - {4746C79A-2042-4332-8650-48966E44ABA8} - C:\Program Files (x86)\Common Files\Pure Networks Shared\Platform\puresp4.dll [2009-02-13] (Cisco Systems, Inc.) FireFox: ======== FF Plugin: @microsoft.com/GENUINE -> disabled [Geen bestand] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32.dll [Geen bestand] FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1229199.dll [2017-03-31] (Adobe Systems, Inc.) FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2013-12-23] (Google, Inc.) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-01-06] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-01-06] (Intel Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Geen bestand] FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-14] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-14] (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2012-04-24] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2012-04-24] (NVIDIA Corporation) FF Plugin-x32: @threeships.nl/TSHelper;version=2.0.0.3 -> C:\Program Files (x86)\Common Files\ThreeShips Shared\Dll\\npTSHelper.dll [2013-06-06] (Three Ships) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-01] (Adobe Systems Inc.) Chrome: ======= CHR DefaultProfile: Default CHR HomePage: Default -> hxxp://search.conduit.com/?gd=&ctid=CT3320133&octid=EB_ORIGINAL_CTID&ISID=M061D126E-B6D8-4D61-86A3-B5505D8EC362&SearchSource=55&CUI=&UM=5&UP=SPF4DC5985-8ECF-4B75-A1B4-265D048D2344&SSPV= CHR StartupUrls: Default -> "hxxp://www.google.com/" CHR DefaultSearchKeyword: Default -> google.nl_ CHR Profile: C:\Users\Eigenaar\AppData\Local\Google\Chrome\User Data\Default [2017-10-03] CHR Extension: (Avast SafePrice) - C:\Users\Eigenaar\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2017-09-04] CHR Extension: (Betalingen via Chrome Web Store) - C:\Users\Eigenaar\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-29] CHR Extension: (Norton Security Toolbar) - C:\Users\Eigenaar\AppData\Local\Google\Chrome\User Data\Default\Extensions\nppllibpnmahfaklnpggkibhkapjkeob [2017-07-24] CHR Extension: (Chrome Media Router) - C:\Users\Eigenaar\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-24] CHR HKLM\...\Chrome\Extension: [nppllibpnmahfaklnpggkibhkapjkeob] - C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.11.42\Exts\Chrome.crx CHR HKLM-x32\...\Chrome\Extension: [boipimhfjpakfgckhbljjengakjhkcbp] - C:\Users\Eigenaar\AppData\Roaming\BabSolution\CR\mixiDj.crx CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx CHR HKLM-x32\...\Chrome\Extension: [kpepfkjapeclaafmhoelccknpfedainn] - C:\Program Files (x86)\mixidj\mixidj\1.8.18.8\mixidj.crx CHR HKLM-x32\...\Chrome\Extension: [nppllibpnmahfaklnpggkibhkapjkeob] - hxxp://clients2.google.com/service/update2/crx ==================== Services (gefilterd) ==================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\InstantOn for NB\InsOnSrv.exe [277120 2012-04-13] (ASUS) R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7346208 2017-05-18] (AVAST Software s.r.o.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [263304 2017-05-18] (AVAST Software) R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [310496 2017-05-18] (AVAST Software) R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1840128 2011-05-24] (MAGIX AG) [Bestand niet getekend] S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [Bestand niet getekend] R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-02-21] () R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-21] (Intel Corporation) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2012-03-29] () R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-04-17] () R2 Update service; C:\Program Files (x86)\Popcorn Time\Updater.exe [335360 2014-12-17] (Company) [Bestand niet getekend] S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) S2 WinRST; C:\Program Files (x86)\WinRST\WinRST.exe [59904 2014-03-18] () [Bestand niet getekend] R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2669840 2012-03-29] (Intel® Corporation) S3 AvastVBoxSvc; "C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe" [X] S2 PirritDesktop; C:\Users\Eigenaar\AppData\Local\PirritSuggestor\PirritService.exe [X] ===================== Drivers (gefilterd) ====================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) R3 AiCharger; C:\Windows\SysWOW64\DRIVERS\AiCharger.sys [17152 2012-02-29] (ASUSTek Computer Inc.) R3 AsusVBus; C:\Windows\System32\DRIVERS\AsusVBus.sys [35968 2012-04-12] (Windows (R) Win 7 DDK provider) R3 AsusVTouch; C:\Windows\System32\DRIVERS\AsusVTouch.sys [16512 2012-04-12] (Windows (R) Win 7 DDK provider) R1 aswbidsdriver; C:\Windows\system32\drivers\aswbidsdrivera.sys [311808 2017-05-18] (AVAST Software s.r.o.) R0 aswbidsh; C:\Windows\system32\drivers\aswbidsha.sys [190256 2017-05-18] (AVAST Software s.r.o.) R0 aswblog; C:\Windows\system32\drivers\aswbloga.sys [334576 2017-05-18] (AVAST Software s.r.o.) R0 aswbuniv; C:\Windows\system32\drivers\aswbuniva.sys [49016 2017-05-18] (AVAST Software s.r.o.) S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [38296 2017-05-18] (AVAST Software) R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [32600 2017-05-18] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [128648 2017-05-18] (AVAST Software) R3 aswNetNd6; C:\Windows\System32\DRIVERS\aswNetNd6.sys [29432 2017-04-08] (AVAST Software) R1 aswNetSec; C:\Windows\system32\drivers\aswNetSec.sys [507928 2017-05-18] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [101152 2017-05-18] (AVAST Software) R0 aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [75704 2017-05-18] (AVAST Software) R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1007160 2017-05-18] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [569192 2017-05-18] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [167592 2017-07-11] (AVAST Software) R0 aswVmm; C:\Windows\system32\drivers\aswVmm.sys [339696 2017-05-18] (AVAST Software) R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( ) S3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [129224 2013-11-29] (Qualcomm Atheros Co., Ltd.) R1 nvkflt; C:\Windows\System32\DRIVERS\nvkflt.sys [249152 2012-04-24] (NVIDIA Corporation) S3 RTLU3E8023-W7-64; C:\Windows\System32\DRIVERS\rtu30x64w7.sys [127192 2015-03-18] (Realtek ) R3 RtlWlanu; C:\Windows\System32\DRIVERS\rtwlanu.sys [5088000 2016-09-06] (Realtek Semiconductor Corporation ) S3 WUSB54GCv3; C:\Windows\System32\DRIVERS\WUSB54GCv3.sys [797184 2008-12-04] (Ralink Technology Corp.) S3 RegFltrX64; \??\C:\Users\Eigenaar\AppData\Local\ApplicationQuickThumbnail\RegFltrX64.sys [X] S2 VBoxAswDrv; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X] ==================== NetSvcs (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) ==================== Een Maand Aangemaakt bestanden en mappen ======== (Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.) 2017-10-05 18:43 - 2017-10-05 18:43 - 000027984 _____ C:\FRST.txt 2017-10-05 16:38 - 2017-10-05 16:38 - 000000000 ____D C:\ProgramData\SWCUTemp 2017-10-05 16:26 - 2017-10-05 16:26 - 000000766 _____ C:\Users\Eigenaar\Desktop\FRST64.lnk 2017-10-05 16:24 - 2017-10-04 15:04 - 002399744 _____ (Farbar) C:\FRST64.exe 2017-10-04 15:06 - 2017-10-05 18:43 - 000000000 ____D C:\FRST 2017-10-04 15:06 - 2017-10-04 15:04 - 002399744 _____ (Farbar) C:\Users\Eigenaar\Downloads\FRST64.exe 2017-10-03 20:33 - 2017-10-03 20:33 - 000000000 ____D C:\autoruns 2017-10-03 20:28 - 2017-10-03 20:28 - 000043346 _____ C:\Users\Eigenaar\Documents\MTB.txt 2017-10-03 16:05 - 2017-10-03 16:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Linksys Wireless Manager 2017-10-03 16:05 - 2017-10-03 16:05 - 000000000 ____D C:\Program Files (x86)\Linksys 2017-10-03 16:04 - 2017-10-03 16:04 - 000000000 ____D C:\ProgramData\Pure Networks 2017-10-03 16:04 - 2008-12-12 18:05 - 000033072 _____ (Cisco Systems, Inc.) C:\Windows\system32\Drivers\purendis.sys 2017-10-03 16:04 - 2008-12-12 18:05 - 000031536 _____ (Cisco Systems, Inc.) C:\Windows\system32\Drivers\pnarp.sys 2017-10-03 15:59 - 2008-12-04 15:17 - 000797184 _____ (Ralink Technology Corp.) C:\Windows\system32\Drivers\WUSB54GCv3.sys 2017-10-03 15:59 - 2008-12-04 15:17 - 000305664 _____ (Ralink Technology, Inc.) C:\Windows\system32\RaCoInstx.dll 2017-10-03 15:59 - 2008-12-04 15:17 - 000015312 _____ C:\Windows\system32\RaCoInst.dat 2017-10-03 15:58 - 2017-10-03 15:58 - 000003044 _____ C:\Windows\System32\Tasks\{82EE703C-75F3-4F73-B6D7-138CCB37A205} 2017-10-03 10:24 - 2017-10-03 10:25 - 000000000 ____D C:\Users\Public\D-Link 2017-10-03 10:24 - 2017-10-03 10:24 - 000002019 _____ C:\Users\Public\Desktop\Wireless Connection Manager.lnk 2017-10-03 10:24 - 2017-10-03 10:24 - 000000000 ____D C:\Windows\pcidevice 2017-10-03 10:24 - 2017-10-03 10:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\D-Link 2017-10-03 10:24 - 2017-10-03 10:24 - 000000000 ____D C:\Program Files (x86)\D-Link 2017-10-03 10:24 - 2016-09-06 11:49 - 005088000 _____ (Realtek Semiconductor Corporation ) C:\Windows\system32\Drivers\rtwlanu.sys 2017-10-03 10:24 - 2015-10-05 11:09 - 000006864 _____ C:\Windows\PBL.sys 2017-10-03 10:24 - 2015-10-05 11:09 - 000004681 _____ C:\Windows\PBR.sys 2017-10-01 14:14 - 2017-10-01 14:14 - 000000000 ____D C:\Users\Eigenaar\AppData\Local\MetaGeek,_LLC 2017-10-01 14:13 - 2017-10-01 14:13 - 000002489 _____ C:\Users\Public\Desktop\inSSIDer Home.lnk 2017-10-01 14:13 - 2017-10-01 14:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MetaGeek 2017-10-01 14:13 - 2017-10-01 14:13 - 000000000 ____D C:\Program Files (x86)\MetaGeek 2017-09-28 10:27 - 2015-03-18 05:02 - 000127192 _____ (Realtek ) C:\Windows\system32\Drivers\rtu30x64w7.sys 2017-09-28 10:27 - 2015-03-18 05:02 - 000074456 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll 2017-09-22 08:40 - 2017-09-22 08:40 - 000001011 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat.com.lnk 2017-09-22 08:40 - 2017-09-22 08:40 - 000000999 _____ C:\Users\Public\Desktop\Acrobat.com.lnk ==================== Een Maand Gewijzigd bestanden en mappen ======== (Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.) 2017-10-05 17:05 - 2011-02-19 06:40 - 000745998 _____ C:\Windows\system32\perfh013.dat 2017-10-05 17:05 - 2011-02-19 06:40 - 000153918 _____ C:\Windows\system32\perfc013.dat 2017-10-05 17:05 - 2009-07-14 07:13 - 001670888 _____ C:\Windows\system32\PerfStringBackup.INI 2017-10-05 17:05 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf 2017-10-05 16:52 - 2009-07-14 06:45 - 000018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2017-10-05 16:52 - 2009-07-14 06:45 - 000018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2017-10-05 16:46 - 2017-04-08 10:20 - 000004172 _____ C:\Windows\System32\Tasks\Avast Emergency Update 2017-10-05 16:39 - 2012-09-08 12:05 - 000000387 _____ C:\Users\Eigenaar\AppData\Roaming\sp_data.sys 2017-10-05 16:37 - 2012-06-27 02:17 - 000000000 ____D C:\ProgramData\NVIDIA 2017-10-05 16:37 - 2012-06-27 02:12 - 000000828 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job 2017-10-05 16:37 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2017-10-04 10:30 - 2012-06-27 02:12 - 000000830 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job 2017-10-03 16:18 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\system32\NDF 2017-10-03 10:24 - 2012-06-27 02:10 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2017-09-29 15:50 - 2013-05-03 15:36 - 000000000 ____D C:\Users\Eigenaar\AppData\Local\ElevatedDiagnostics 2017-09-29 14:25 - 2009-07-14 07:09 - 000000000 ____D C:\Windows\System32\Tasks\WPD 2017-09-28 11:04 - 2012-09-16 23:15 - 000000000 ____D C:\Windows\System32\Tasks\Games 2017-09-22 09:56 - 2017-08-29 17:08 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2017-09-22 08:40 - 2012-02-24 04:28 - 000000000 ____D C:\Program Files (x86)\Adobe 2017-09-22 08:39 - 2014-09-02 22:42 - 000000000 ____D C:\Users\Eigenaar\AppData\Local\Adobe ==================== Bestanden in de root van sommige mappen ======= 2012-09-08 12:05 - 2017-10-05 16:39 - 000000387 _____ () C:\Users\Eigenaar\AppData\Roaming\sp_data.sys 2012-02-24 04:42 - 2010-10-06 19:45 - 000131984 _____ () C:\ProgramData\FullRemove.exe 2012-06-27 02:29 - 2012-06-27 02:34 - 000000110 _____ () C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log 2012-06-27 02:34 - 2012-06-27 02:34 - 000000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log 2012-06-27 02:33 - 2012-06-27 02:33 - 000000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log 2012-06-27 02:26 - 2012-06-27 02:28 - 000000110 _____ () C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log 2012-06-27 02:28 - 2012-06-27 02:29 - 000000108 _____ () C:\ProgramData\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}.log 2012-06-27 02:25 - 2012-06-27 02:26 - 000000110 _____ () C:\ProgramData\{E3739848-5329-48E3-8D28-5BBD6E8BE384}.log Bestanden om te verplaatsen of verwijderen: ==================== C:\Users\Eigenaar\avast_internet_security_setup.exe Sommige bestanden in TEMP: ==================== 2014-02-10 19:58 - 2014-02-10 19:58 - 000467456 _____ (Realtek Semiconductor Corp.) C:\Users\Eigenaar\AppData\Local\Temp\COMAP.EXE 2014-09-28 17:59 - 2014-09-28 17:59 - 000041984 _____ () C:\Users\Eigenaar\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp999eb8.dll 2014-04-08 15:06 - 2014-04-08 15:06 - 000156063 _____ (Conduit) C:\Users\Eigenaar\AppData\Local\Temp\nsd14B2.exe 2014-04-08 15:06 - 2014-04-08 15:06 - 000156063 _____ (Conduit) C:\Users\Eigenaar\AppData\Local\Temp\nsiF03D.exe 2014-04-08 15:06 - 2014-04-08 15:06 - 000156063 _____ (Conduit) C:\Users\Eigenaar\AppData\Local\Temp\nsj1213.exe 2014-04-08 15:06 - 2014-04-08 15:06 - 000156063 _____ (Conduit) C:\Users\Eigenaar\AppData\Local\Temp\nstEDBD.exe 2013-07-01 18:51 - 2013-07-01 18:51 - 000796144 _____ () C:\Users\Eigenaar\AppData\Local\Temp\setup.exe 2014-08-12 09:20 - 2014-08-12 09:20 - 011149344 _____ () C:\Users\Eigenaar\AppData\Local\Temp\ShoppinH2.exe 2014-08-06 11:08 - 2014-08-06 11:08 - 006837632 _____ (Client Connect LTD) C:\Users\Eigenaar\AppData\Local\Temp\SPSetup.exe 2015-08-14 00:03 - 2015-08-14 00:03 - 029074296 _____ (Popcorn Official) C:\Users\Eigenaar\AppData\Local\Temp\update.exe 2014-10-06 10:04 - 2014-10-06 10:04 - 000000000 _____ () C:\Users\Eigenaar\AppData\Local\Temp\ygdslnye.dll 2016-10-10 16:00 - 2016-10-10 16:00 - 037421560 _____ () C:\Users\Eigenaar\AppData\Local\Temp\{C1DEA7B7-3E80-42D7-987D-4D63A2AE5716}-GoogleEarth-Win-Bundle-7.1.7.2606.exe ==================== Bamital & volsnap ====================== (Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.) C:\Windows\system32\winlogon.exe => Bestand is getekend C:\Windows\system32\wininit.exe => Bestand is getekend C:\Windows\SysWOW64\wininit.exe => Bestand is getekend C:\Windows\explorer.exe => Bestand is getekend C:\Windows\SysWOW64\explorer.exe => Bestand is getekend C:\Windows\system32\svchost.exe => Bestand is getekend C:\Windows\SysWOW64\svchost.exe => Bestand is getekend C:\Windows\system32\services.exe => Bestand is getekend C:\Windows\system32\User32.dll => Bestand is getekend C:\Windows\SysWOW64\User32.dll => Bestand is getekend C:\Windows\system32\userinit.exe => Bestand is getekend C:\Windows\SysWOW64\userinit.exe => Bestand is getekend C:\Windows\system32\rpcss.dll => Bestand is getekend C:\Windows\system32\dnsapi.dll => Bestand is getekend C:\Windows\SysWOW64\dnsapi.dll => Bestand is getekend C:\Windows\system32\Drivers\volsnap.sys => Bestand is getekend LastRegBack: 2017-06-25 14:57 ==================== Eind van FRST.txt ============================