Extra scanresultaten van Farbar Recovery Scan Tool (x64) Versie: 23-12-2017 01 Gestart door RikenManon (20-12-2017 14:22:08) Gestart vanaf C:\Users\RikenManon\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8ZFOIPK9 Windows 7 Home Premium Service Pack 1 (X64) (2017-03-01 16:09:35) Boot Modus: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-141004943-2956378002-402243414-500 - Administrator - Disabled) Gast (S-1-5-21-141004943-2956378002-402243414-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-141004943-2956378002-402243414-1002 - Limited - Enabled) postgres (S-1-5-21-141004943-2956378002-402243414-1003 - Limited - Enabled) => C:\Users\postgres RikenManon (S-1-5-21-141004943-2956378002-402243414-1000 - Administrator - Enabled) => C:\Users\RikenManon ==================== Security Center ======================== (Als een item is opgenomen in de fixlist, zal het worden verwijderd.) AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Geïnstalleerde programma's ====================== (Alleen de adware-programma's met 'verborgen' vlag zou kunnen worden toegevoegd aan de fixlist om ze zichtbaar te maken. De adware-programma's moeten handmatig gedeinstallerd worden.) Acer Backup Manager (HKLM-x32\...\InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.99 - NTI Corporation) Acer Crystal Eye Webcam (HKLM-x32\...\{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 1.0.1904 - CyberLink Corp.) Hidden Acer Crystal Eye Webcam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 1.0.1904 - CyberLink Corp.) Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 6.00.3007 - Acer Incorporated) Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 5.00.3502 - Acer Incorporated) Acer Games (HKLM-x32\...\WildTangent acer Master Uninstall) (Version: 1.0.2.5 - WildTangent) Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.04.3502 - Acer Incorporated) Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0530.2011 - Acer Incorporated) Acer Updater (HKLM-x32\...\{EE171732-BEB4-4576-887D-CB62727F01CA}) (Version: 1.02.3500 - Acer Incorporated) Adobe Flash Player 10 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 10.3.181.34 - Adobe Systems Incorporated) Adobe Flash Player 11 Plugin (HKLM-x32\...\{F83DD803-2467-4D07-9D6F-87AF0434410A}) (Version: 11.9.900.170 - Adobe Systems Incorporated) Agatha Christie - Death on the Nile (HKLM-x32\...\WTA-9a9078d6-5ef1-492b-84d4-564b5a3764d9) (Version: 2.2.0.98 - WildTangent) Hidden Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.2.43 - Atheros Communications Inc.) Backup Manager V3 (HKLM-x32\...\{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}) (Version: 3.0.0.99 - NTI Corporation) Hidden Bejeweled 2 Deluxe (HKLM-x32\...\WTA-2c25678d-c702-44eb-abb8-93a60d7d8889) (Version: 2.2.0.95 - WildTangent) Hidden Brother MFL-Pro Suite DCP-J140W (HKLM-x32\...\{2FF959E3-FFE4-46C4-96DA-03F26BCFEFCC}) (Version: 1.1.5.0 - Brother Industries, Ltd.) CCleaner (HKLM\...\CCleaner) (Version: 5.35 - Piriform) Chuzzle Deluxe (HKLM-x32\...\WTA-a30042c8-c78e-4b4c-81dc-ead1ddb3a731) (Version: 2.2.0.95 - WildTangent) Hidden clear.fi (HKLM-x32\...\{14C4C3B6-F1F4-401F-8C86-03E8E19AAC8C}) (Version: 1.0.1517_36458 - CyberLink Corp.) Hidden clear.fi (HKLM-x32\...\{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 1.0.1720.00 - CyberLink Corp.) Hidden clear.fi (HKLM-x32\...\{B906C11A-D193-4143-9FA7-E2EE8A5A8F21}) (Version: 9.0.7709 - CyberLink Corp.) Hidden clear.fi (HKLM-x32\...\InstallShield_{2637C347-9DAD-11D6-9EA2-00055D0CA761}) (Version: 1.0.1720.00 - CyberLink Corp.) clear.fi Client (HKLM-x32\...\{43AAE145-83CF-4C96-9A5E-756CEFCE879F}) (Version: 1.00.3500 - Acer Incorporated) Crazy Chicken Kart 2 (HKLM-x32\...\WTA-31ef4de2-fb99-45c8-927d-5323aa1cff31) (Version: 2.2.0.97 - WildTangent) Hidden D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden FATE (HKLM-x32\...\WTA-372a5d50-86d9-489c-a235-8102d55ecff2) (Version: 2.2.0.97 - WildTangent) Hidden Final Drive: Nitro (HKLM-x32\...\WTA-16c04d1f-77fa-436a-85f6-b45a5c31d571) (Version: 2.2.0.95 - WildTangent) Hidden Fotogalerija Windows Live (HKLM-x32\...\{E59969EA-3B5B-4B24-8B94-43842A7FBFE9}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Free Download Manager (HKLM\...\{43781dff-e0df-49ce-a6d2-47da96a485e7}}_is1) (Version: 5.1.33.6855 - FreeDownloadManager.ORG) Galeria de Fotografias do Windows Live (HKLM-x32\...\{0EC0B576-90F9-43C3-8FAD-A4902DF4B8F4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galería fotográfica de Windows Live (HKLM-x32\...\{E85A4EFC-82F2-4CEE-8A8E-62FDAD353A66}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galeria fotogràfica del Windows Live (HKLM-x32\...\{4736B0ED-F6A1-48EC-A1B7-C053027648F1}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galeria fotografii usługi Windows Live (HKLM-x32\...\{CB3F59BB-7858-41A1-A7EA-4B8A6FC7D431}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galerie de photos Windows Live (HKLM-x32\...\{488F0347-C4A7-4374-91A7-30818BEDA710}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Galerie foto Windows Live (HKLM-x32\...\{CB66242D-12B1-4494-82D2-6F53A7E024A3}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Google Chrome (HKLM-x32\...\Google Chrome) (Version: 62.0.3202.94 - Google Inc.) Google Toolbar for Internet Explorer (HKLM-x32\...\{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Version: 1.0.0 - Google Inc.) Hidden Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3501 - Acer Incorporated) Insaniquarium Deluxe (HKLM-x32\...\WTA-ccff9d1f-1fa6-41d3-a59e-4541d7c2346d) (Version: 2.2.0.97 - WildTangent) Hidden Intel PROSet Wireless (HKLM-x32\...\ProInst) (Version: - ) Hidden Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2372 - Intel Corporation) Intel(R) PROSet/Wireless WiFi Software (HKLM\...\{3C41721F-AF0F-4086-AA1C-4C7F29076228}) (Version: 14.01.1000 - Intel Corporation) Java 8 Update 151 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180151F0}) (Version: 8.0.1510.12 - Oracle Corporation) Jewel Match 3 (HKLM-x32\...\WTA-57ada7b2-3f1c-4b76-9e1a-27a761bdd874) (Version: 2.2.0.97 - WildTangent) Hidden Jewel Quest Solitaire (HKLM-x32\...\WTA-328fc2c9-ff41-4582-8ba2-c044c0b915be) (Version: 2.2.0.95 - WildTangent) Hidden John Deere Drive Green (HKLM-x32\...\WTA-9298376a-8fb3-4937-82b5-be74085eba00) (Version: 2.2.0.95 - WildTangent) Hidden Junk Mail filter update (HKLM-x32\...\{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden Mesh Runtime (HKLM-x32\...\{8C6D6116-B724-4810-8F2D-D047E6B7D68E}) (Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation) Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Klik-en-Klaar 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Starter 2010 - Nederlands (HKLM-x32\...\{90140011-0066-0413-0000-0000000FF1CE}) (Version: 14.0.5128.5002 - Microsoft Corporation) Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0413-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation) Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang) Mozilla Firefox 57.0.2 (x64 nl) (HKLM\...\Mozilla Firefox 57.0.2 (x64 nl)) (Version: 57.0.2 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 57.0 - Mozilla) Mystery of Mortlake Mansion (HKLM-x32\...\WTA-22cb0394-9203-40be-bb81-36fb6975249f) (Version: 2.2.0.98 - WildTangent) Hidden MyWinLocker (HKLM\...\{0B78ECB0-1A6B-4E6D-89D7-0E7CE77F0427}) (Version: 4.0.14.25 - Egis Technology Inc.) Hidden MyWinLocker 4 (HKLM-x32\...\{39F15B50-A977-4CA6-B1C3-6A8724CDA025}) (Version: 4.0.14.25 - Egis Technology Inc.) Hidden MyWinLocker Suite (HKLM-x32\...\{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.15 - Egis Technology Inc.) Hidden MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.15 - Egis Technology Inc.) newsXpresso (HKLM-x32\...\{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}) (Version: 1.0.0.40 - esobi Inc.) Hidden newsXpresso (HKLM-x32\...\InstallShield_{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}) (Version: 1.0.0.40 - esobi Inc.) Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation) Norton Security Scan (HKLM-x32\...\NSS) (Version: 4.6.2.17 - Symantec Corporation) Penguins! (HKLM-x32\...\WTA-94b57566-4fcf-4158-add9-3feb3c04c55c) (Version: 2.2.0.95 - WildTangent) Hidden Plants vs. Zombies - Game of the Year (HKLM-x32\...\WTA-6f6b363e-5283-4bd6-bc06-8661a0481bbf) (Version: 2.2.0.95 - WildTangent) Hidden Poczta usługi Windows Live (HKLM-x32\...\{64376910-1860-4CEF-8B34-AA5D205FC5F1}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Podstawowe programy Windows Live (HKLM-x32\...\{7A9D47BA-6D50-4087-866F-0800D8B89383}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Polar Bowler (HKLM-x32\...\WTA-99cdb8d5-74dc-4bfc-b0c5-387843793943) (Version: 2.2.0.97 - WildTangent) Hidden Pošta Windows Live (HKLM-x32\...\{7BA19818-F717-4DFB-BC11-FAF17B2B8AEE}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Raccolta foto di Windows Live (HKLM-x32\...\{ED16B700-D91F-44B0-867C-7EB5253CA38D}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6392 - Realtek Semiconductor Corp.) Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30127 - Realtek Semiconductor Corp.) Registry Reviver (HKLM\...\Registry Reviver) (Version: 4.19.0.6 - Corel Corporation) Reimage Repair (HKLM\...\Reimage Repair) (Version: 1.8.7.2 - Reimage) <==== AANDACHT Roblox Player for RikenManon (HKU\S-1-5-21-141004943-2956378002-402243414-1000\...\{373B1718-8CC5-4567-8EE2-9033AD08A680}) (Version: - Roblox Corporation) Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee) Shredder (HKLM\...\{1F557316-CFC0-41BD-AFF7-8BC49CE444D7}) (Version: 2.0.8.9 - Egis Technology Inc.) Hidden Shredder (HKLM-x32\...\{C2695E83-CF1D-43D1-84FE-B3BEC561012A}) (Version: 2.0.8.9 - Egis Technology Inc.) Hidden Skype Web Plugin (HKLM-x32\...\{EB96DF8B-65A7-4E72-BFB1-38DB36870D16}) (Version: 7.32.6.278 - Skype Technologies S.A.) Skype™ 7.39 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.39.102 - Skype Technologies S.A.) Slingo Deluxe (HKLM-x32\...\WTA-5c768135-4d6e-4a7b-9105-6d79cda94aed) (Version: 2.2.0.95 - WildTangent) Hidden Spotify (HKU\S-1-5-21-141004943-2956378002-402243414-1000\...\Spotify) (Version: 1.0.60.492.gbb40dab8 - Spotify AB) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.17.5 - Synaptics Incorporated) Torchlight (HKLM-x32\...\WTA-a656b1a7-c02f-454f-bfb4-5cc793f7a3a4) (Version: 2.2.0.97 - WildTangent) Hidden Unity Web Player (x64) (All users) (HKLM\...\UnityWebPlayer) (Version: 4.6.6f2 - Unity Technologies ApS) Update Installer for WildTangent Games App (HKLM-x32\...\{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App) (Version: - WildTangent) Hidden Virtual Villagers 4 - The Tree of Life (HKLM-x32\...\WTA-75679186-035f-4929-9973-f200683245e3) (Version: 2.2.0.97 - WildTangent) Hidden Wedding Dash (HKLM-x32\...\WTA-ce4d586a-8508-454e-8c9a-fc27ed542a99) (Version: 2.2.0.95 - WildTangent) Hidden Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3503 - Acer Incorporated) WildTangent Games App (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-acer) (Version: 4.1.1.30 - WildTangent) Hidden WildTangent ShortcutProvider (HKLM-x32\...\{80831F60-19D7-43B3-A60C-5CAF8C478DF6}) (Version: 1.0.0.28 - WildTangent) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation) WinRAR 5.50 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH) Zuma Deluxe (HKLM-x32\...\WTA-09ff7f43-e80a-40c8-82bf-c57dc6d8106b) (Version: 2.2.0.95 - WildTangent) Hidden Συλλογή φωτογραφιών του Windows Live (HKLM-x32\...\{C00C2A91-6CB3-483F-80B3-2958E29468F1}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Основные компоненты Windows Live (HKLM-x32\...\{E83DC314-C926-4214-AD58-147691D6FE9F}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Почта Windows Live (HKLM-x32\...\{B63F0CE3-CCD0-490A-9A9C-E1A3B3A17137}) (Version: 15.4.3502.0922 - Корпорация Майкрософт) Hidden Фотоальбом Windows Live (HKLM-x32\...\{77F69CA1-E53D-4D77-8BA3-FA07606CC851}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Фотогалерия на Windows Live (HKLM-x32\...\{4444F27C-B1A8-464E-9486-4C37BAB39A09}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden גלריית התמונות של Windows Live (HKLM-x32\...\{CE929F09-3853-4180-BD90-30764BFF7136}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden بريد Windows Live (HKLM-x32\...\{0A4C4B29-5A9D-4910-A13C-B920D5758744}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden معرض صور Windows Live (HKLM-x32\...\{FBCA06D2-4642-4F33-B20A-A7AB3F0D2E69}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden ==================== Aangepaste CLSID (gefilterd): ========================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) CustomCLSID: HKU\S-1-5-21-141004943-2956378002-402243414-1000_Classes\CLSID\{41052F6E-3662-4584-BCD3-77BCCAAE8470}\InprocServer32 -> C:\Users\RikenManon\AppData\Local\SkypePlugin\7.32.6.278\GatewayActiveX-x64.dll (Skype Technologies S.A.) CustomCLSID: HKU\S-1-5-21-141004943-2956378002-402243414-1000_Classes\CLSID\{60813F68-E9F7-4B3C-80B4-A76A66211660}\localserver32 -> C:\Users\RikenManon\AppData\Local\SkypePlugin\7.32.6.278\GatewayVersion-x64.exe (Skype Technologies S.A.) CustomCLSID: HKU\S-1-5-21-141004943-2956378002-402243414-1000_Classes\CLSID\{CBF9CD8C-2714-4F36-B76A-43E6C7547BC2}\localserver32 -> C:\Users\RikenManon\AppData\Local\SkypePlugin\7.32.6.278\EdgeCalling.exe (Skype Technologies S.A.) ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Geen bestand ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2017-08-11] (Alexander Roshal) ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal) ContextMenuHandlers3: [MWLIVShellExt] -> {B1B294FE-EC1E-4fef-AF68-D34CE3E38157} => C:\Program Files (x86)\EgisTec MyWinLocker\x64\MWLIVShellExt.dll [2011-04-02] (Egis Technology Inc. ) ContextMenuHandlers3: [ShredderContextMenu] -> {521065F1-DE6C-4E46-BBCB-89B0D0BE860D} => C:\Program Files (x86)\EgisTec Shredder\x64\ShredderContextMenu.dll [2011-03-29] (Egis Technology Inc.) ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2011-04-15] (Intel Corporation) ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2017-08-11] (Alexander Roshal) ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal) ==================== Geplande Taken (gefilterd) ============= (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) Task: {119243E5-4FB8-455B-9AC3-2861854FF57D} - System32\Tasks\Start Registry Reviver Update => C:\Program Files\ReviverSoft\Registry Reviver\RegistryReviver.exe [2017-12-20] (Corel Corporation) Task: {1AD919A9-3ECA-45A1-9920-972DB8CDBF38} - System32\Tasks\clear.fi => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fi.exe [2011-05-20] (Acer Incorporated) Task: {2637824E-FEE5-4798-BC2E-670DBFAAFC6C} - System32\Tasks\{64C14C85-0A3D-4852-A7EB-2BFAA8C049C5} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxps://ui.skype.com/ui/0/7.36.0.101/nl/abandoninstall?source=lightinstaller&page=tsInstall Task: {2EE723E9-A347-444D-A87D-5CFC1EDB01BB} - System32\Tasks\Start WinZip Registry Optimizer Update => C:\Program Files\WinZip Registry Optimizer\RegistryOptimizer.exe Task: {48B37765-4FE2-40A7-A4A5-E72DBF1CEE63} - System32\Tasks\DMREngine => C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe [2011-05-20] (CyberLink) Task: {571C8B47-760A-466F-B00B-7AEE03137AF8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-11-12] (Adobe Systems Incorporated) Task: {699C5944-5D46-4DD8-9E7F-BFC81F352B5E} - System32\Tasks\{CFFCFDF8-F28F-4856-901B-32AE1E8969A1} => C:\Users\RikenManon\AppData\Roaming\Spotify\Spotify.exe [2017-08-01] (Spotify Ltd) Task: {6D53C97E-1F51-458B-9817-4EFF265D8DE8} - System32\Tasks\clear.fiAgent => C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe [2011-05-20] (CyberLink Corp.) Task: {75020196-98D0-4E5B-B4DD-B933306B4185} - System32\Tasks\Adobe Reader Speed Launcher => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe Task: {7790E332-E95D-4643-9411-2249D105AA9A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-09-20] (Piriform Ltd) Task: {7A1BE73C-DBFE-4433-813D-B62F541107E5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-03-01] (Google Inc.) Task: {83DCB473-1EC1-4D23-A51B-E8C7CA854780} - System32\Tasks\{1B019EE3-D8B6-4323-8750-0A159EEB1E9E} => C:\Windows\system32\pcalua.exe -a "C:\Users\RikenManon\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\C7E45GJO\JavaSetup8u131.exe" -d C:\Users\RikenManon\Desktop Task: {859F8CDE-C86C-47DE-8A4A-245D134E3CD6} - System32\Tasks\Games\UpdateCheck_S-1-5-21-141004943-2956378002-402243414-1000 Task: {88433E25-E1F0-40D4-85F8-D25901472738} - System32\Tasks\Start WinZip Registry Optimizer Schedule => C:\Program Files\WinZip Registry Optimizer\RegistryOptimizer.exe Task: {C00AD149-1BFA-4E5B-A451-BF6F5C2B3E44} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-03-01] (Google Inc.) Task: {C58ED19C-F0AB-4C8F-A0AC-9291BF1DCFF0} - System32\Tasks\Start Registry Reviver for RikenManon-PC@RikenManon(logon) => C:\Program Files\ReviverSoft\Registry Reviver\RegistryReviver.exe [2017-12-20] (Corel Corporation) Task: {D2C951A6-8A24-4990-8437-29B63BD6DB73} - System32\Tasks\FreeDownloadManagerNetworkMonitor => C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\winwfpmonitor.exe [2017-12-14] (FreeDownloadManager.org) Task: {DBF81064-DE92-43DE-BAFF-27F33095BE42} - System32\Tasks\{9443B6C5-957E-4667-BD87-BD0DF4CFE22B} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxps://ui.skype.com/ui/0/7.36.0.101/nl/abandoninstall?source=lightinstaller&page=tsInstall Task: {E74D8585-EA2F-466E-BB8C-8A7D3C7065E5} - System32\Tasks\Adobe ARM => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe Task: {EB7E70ED-F094-42E2-B052-8DEEB232E848} - System32\Tasks\Start Registry Reviver Schedule => C:\Program Files\ReviverSoft\Registry Reviver\RegistryReviver.exe [2017-12-20] (Corel Corporation) Task: {FEA4E385-9B11-45C7-BC83-FEA1102DD1A5} - System32\Tasks\ReimageUpdater => C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe [2017-09-11] (Reimage®) <==== AANDACHT (Als een item is opgenomen in de fixlist, de taak (job) bestand wordt verplaatst. Het bestand dat wordt uitgevoerd door de taak zal niet worden verplaatst.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\Start Registry Reviver for RikenManon-PC@RikenManon(logon).job => C:\Program Files\ReviverSoft\Registry Reviver\RegistryReviver.exe ==================== Snelkoppelingen & WMI ======================== (De items kunnen worden opgenomen in de fixlist.txt om hersteld of verwijderd te worden.) ShortcutWithArgument: C:\Users\RikenManon\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxps://launchpage.org/?uid=oTlCGKjchx1sXu9Wsr5ThKgHc5q8a4VxX8Qdzy9Fl5AGZem9BCdkO%2FKakl3e5oMXLw%3D%3D ShortcutWithArgument: C:\Users\RikenManon\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxps://launchpage.org/?uid=oTlCGKjchx1sXu9Wsr5ThKgHc5q8a4VxX8Qdzy9Fl5AGZem9BCdkO%2FKakl3e5oMXLw%3D%3D ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxps://launchpage.org/?uid=oTlCGKjchx1sXu9Wsr5ThKgHc5q8a4VxX8Qdzy9Fl5AGZem9BCdkO%2FKakl3e5oMXLw%3D%3D ==================== Geladen Modules (gefilterd) ============== 2011-05-02 13:41 - 2011-05-02 13:41 - 001501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll 2017-12-06 15:51 - 2017-12-14 13:27 - 000029184 _____ () C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\WinDivert.dll 2011-07-27 04:12 - 2011-04-15 03:16 - 000094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2016-08-16 08:07 - 2016-08-16 08:07 - 000492032 _____ () C:\Program Files\WinZip Smart Monitor\WinZipSmartMonitorService.exe 2017-12-06 15:51 - 2017-04-13 12:42 - 002158592 _____ () C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\avformat-57.dll 2017-12-06 15:51 - 2017-04-13 12:42 - 012242432 _____ () C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\avcodec-57.dll 2017-12-06 15:51 - 2017-04-13 12:42 - 000138752 _____ () C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\swresample-2.dll 2017-12-06 15:51 - 2017-04-13 12:42 - 000485376 _____ () C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\avutil-55.dll 2017-12-06 15:51 - 2017-04-13 12:42 - 001825792 _____ () C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\avfilter-6.dll 2017-12-06 15:51 - 2017-04-13 12:42 - 000662016 _____ () C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\swscale-4.dll 2017-12-06 15:51 - 2017-04-13 12:46 - 069740544 _____ () C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\libcef.dll 2017-12-06 15:51 - 2017-11-30 18:02 - 002521088 _____ () C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\libglesv2.dll 2017-12-06 15:51 - 2017-11-30 18:02 - 000015360 _____ () C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\libegl.dll 2017-09-19 21:34 - 2017-09-19 21:34 - 000054488 _____ () C:\Program Files\CCleaner\branding.dll 2017-09-07 17:12 - 2017-09-07 17:12 - 000077824 _____ () C:\Program Files\CCleaner\lang\lang-1043.dll 2016-08-16 08:07 - 2016-08-16 08:07 - 000436224 _____ () C:\Program Files\WinZip Smart Monitor\Plugins\5AE6ACFC-937D-43B9-B91E-954FA7AD3F06.1.0.0.4\5ae6acfc-937d-43b9-b91e-954fa7ad3f06.1.0.0.4.dll 2016-08-16 08:07 - 2016-08-16 08:07 - 000435712 _____ () C:\Program Files\WinZip Smart Monitor\Plugins\78EB6AEF-BCAB-4E11-9315-3B06CCAA1BDD.1.0.0.4\78EB6AEF-BCAB-4E11-9315-3B06CCAA1BDD.1.0.0.4.dll 2017-12-20 15:15 - 2017-12-20 15:15 - 000310272 _____ () C:\Users\RikenManon\AppData\Local\Temp\d63d-4cc6-1425-640a\lwjgl64.dll 2017-12-20 15:15 - 2017-12-20 15:15 - 000382464 _____ () C:\Users\RikenManon\AppData\Local\Temp\d63d-4cc6-1425-640a\OpenAL64.dll 2011-04-24 02:29 - 2011-04-24 02:29 - 000465640 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll 2011-04-24 02:29 - 2011-04-24 02:29 - 001081664 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll 2011-04-24 02:29 - 2011-04-24 02:29 - 000125760 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll 2011-05-20 11:13 - 2011-05-20 11:13 - 000206216 _____ () C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\CLNetMediaDMA.dll 2017-03-04 15:34 - 2009-02-27 16:38 - 000139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll 2017-07-24 15:57 - 2017-07-24 15:57 - 001991640 ____R () C:\Program Files (x86)\Skype\Phone\skypert.dll 2017-12-20 14:38 - 2017-12-20 14:38 - 006153728 _____ () C:\Program Files (x86)\Minecraft\game\launcher.dll 2017-12-20 14:38 - 2017-12-20 14:38 - 063805440 _____ () C:\Program Files (x86)\Minecraft\game\libcef.dll 2017-12-20 14:38 - 2017-12-20 14:38 - 001872896 _____ () C:\Program Files (x86)\Minecraft\game\libglesv2.dll 2017-12-20 14:38 - 2017-12-20 14:38 - 000078848 _____ () C:\Program Files (x86)\Minecraft\game\libegl.dll ==================== Alternate Data Streams (gefilterd) ========= (Als een item is opgenomen in de fixlist, alleen de ADS wordt verwijderd.) ==================== Veilige Modus (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. De "AlternateShell" waarde wordt hersteld.) ==================== Bestandskoppeling (gefilterd) =============== (Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd.) ==================== Internet Explorer vertrouwde/beperkte toegang =============== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd.) ==================== Hosts inhoud: =============================== (Als nodig Hosts: opdracht kan worden opgenomen in de fixlist om Hosts te resetten.) 2009-07-14 03:34 - 2009-06-10 22:00 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts ==================== Andere gebieden ============================ (Momenteel is er geen automatische fix voor dit onderdeel.) HKU\S-1-5-21-141004943-2956378002-402243414-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\RikenManon\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 89.101.251.228 - 89.101.251.229 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is ingeschakeld. ==================== MSCONFIG/TASK MANAGER Uitgeschakelde items == ==================== Firewall regels (gefilterd) =============== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) FirewallRules: [{E3DC41E5-CF74-473A-A200-BE5892485608}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{24C530AF-2B26-48EC-8B81-06A3A71945FD}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe FirewallRules: [{092EDD4B-DCAD-417C-B98D-3B2396A4AFC8}] => (Allow) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe FirewallRules: [{5AC0E6E3-A5E0-48DB-8A12-CC9824F8FDD9}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{D723B1C3-977C-4080-9FD4-7026AFCEDD8E}] => (Allow) LPort=2869 FirewallRules: [{7709A72D-8A32-4D08-A2C0-4ACACBDFC05D}] => (Allow) LPort=1900 FirewallRules: [{6771B26E-BCD1-456C-92E3-A75760DAD4D7}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe FirewallRules: [{0736AE24-4F68-41B3-920D-C57B46681B2E}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe FirewallRules: [{2BED48CF-AD72-4F30-9CD8-2252196D90F0}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fi.exe FirewallRules: [{734F9286-A05C-4F50-9AE9-66AA1B5EECF0}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe FirewallRules: [{7D34F932-5039-400B-8FD2-99D80AC75264}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\CLML\CLMLSvc.exe FirewallRules: [{9E7864CA-69B6-4AED-8B58-9275DCF76C53}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\DMREngine.exe FirewallRules: [{417BBE42-0D60-4828-928B-0FBCB4293871}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\DMREngine.exe FirewallRules: [{F808F109-09FA-43F3-B0EA-E822CE39276F}] => (Block) C:\Program Files (x86)\Acer\clear.fi\MVP\Kernel\DMR\DMREngine.exe FirewallRules: [{E91E2173-AF74-417D-9BE1-0C2F1797B5DD}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\Movie\TouchMovie.exe FirewallRules: [{2E6A1684-5811-49D7-ABDC-7C19592DBBB2}] => (Allow) C:\Program Files (x86)\Acer\clear.fi\Movie\TouchMovieService.exe FirewallRules: [{5C3C4573-6073-474E-93F4-EAC32E5E5409}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe FirewallRules: [{B89399F6-5690-42A3-9F6D-EE5C2FAC801A}] => (Allow) C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe FirewallRules: [{EE660866-2481-4F25-8E7A-31518B8AF08E}] => (Allow) C:\Program Files (x86)\Popcorn Time\Updater.exe FirewallRules: [{F2D7AD0F-6C7B-43AC-BB00-0DC20FBDF937}] => (Allow) C:\Program Files (x86)\Popcorn Time\Updater.exe FirewallRules: [TCP Query User{FEE55490-1853-4450-9C8D-23698B31AA83}C:\users\rikenmanon\appdata\local\skypeplugin\pluginhost.exe] => (Allow) C:\users\rikenmanon\appdata\local\skypeplugin\pluginhost.exe FirewallRules: [UDP Query User{BE4DAE80-7136-42F4-B22C-FCB95730719E}C:\users\rikenmanon\appdata\local\skypeplugin\pluginhost.exe] => (Allow) C:\users\rikenmanon\appdata\local\skypeplugin\pluginhost.exe FirewallRules: [TCP Query User{9B78F32C-6DA6-4157-AB4A-3F4404877B9B}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe FirewallRules: [UDP Query User{F651A97B-9FE6-4A9A-830D-E53B0CCB665D}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe FirewallRules: [TCP Query User{14592EBC-BCE7-4D61-8948-9251C4FD7DFD}C:\users\rikenmanon\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\rikenmanon\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{70ABC356-4705-460A-B97A-CFD8F1A5D3E8}C:\users\rikenmanon\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\rikenmanon\appdata\roaming\spotify\spotify.exe FirewallRules: [TCP Query User{23D84EDE-1CDB-4224-A86B-279892DDBBC6}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Block) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe FirewallRules: [UDP Query User{A32A719E-BC76-4965-8CE7-6CDD792AA01C}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Block) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe FirewallRules: [TCP Query User{7CB60A3C-26C0-4971-ABD5-0C7158AD9248}C:\users\rikenmanon\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\rikenmanon\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{687B4680-A6FA-4CEE-919C-CC13BF83C394}C:\users\rikenmanon\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\rikenmanon\appdata\roaming\spotify\spotify.exe FirewallRules: [{901ACDB3-C729-4470-942B-17748A39127F}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{56772E69-C7A9-4BB3-AE77-0B3E31FC3772}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{4F55232C-F9CE-48C8-920D-B41094DF3ABA}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{D657E5FF-E737-4C9D-B574-3A121C2541B2}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{17544FF2-D791-4540-8693-756E10292FEF}] => (Allow) C:\Games\World_of_Warships\WoWSLauncher.exe FirewallRules: [{F2309445-F11D-47B5-ACD4-78E6F9A89D85}] => (Allow) C:\Games\World_of_Warships\WoWSLauncher.exe FirewallRules: [{A4275406-9CA7-4D28-BA15-1B504CE55E5D}] => (Allow) C:\Games\World_of_Warships\worldofwarships.exe FirewallRules: [{3B21CA95-FA19-4CCF-8C11-127A68A7771C}] => (Allow) C:\Games\World_of_Warships\worldofwarships.exe FirewallRules: [{F302863F-8877-4D6E-9D10-946E1221B9BC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SKILL\DFUBG.exe FirewallRules: [{04687D6A-20FD-469A-A9C6-8096411177E7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SKILL\DFUBG.exe FirewallRules: [{6E218129-626C-4C35-9153-B58CE0520C63}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unturned\Unturned_BE.exe FirewallRules: [{C0E60A61-EBA0-478A-8232-438F2A9AC8F0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unturned\Unturned_BE.exe FirewallRules: [{CEC8D57E-21B0-4FBC-8B5C-337074F5B7EA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unturned\Unturned.exe FirewallRules: [{5EE05CE5-8B02-4246-9D46-3049BAB1FA59}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Unturned\Unturned.exe FirewallRules: [TCP Query User{C47A6B3C-3399-476F-BBED-31300DD69FE1}C:\users\rikenmanon\appdata\local\crossout\launcher.exe] => (Allow) C:\users\rikenmanon\appdata\local\crossout\launcher.exe FirewallRules: [UDP Query User{471A165F-80E3-423E-A870-17C0D6A04E65}C:\users\rikenmanon\appdata\local\crossout\launcher.exe] => (Allow) C:\users\rikenmanon\appdata\local\crossout\launcher.exe FirewallRules: [TCP Query User{8A0D4062-32C6-4A6F-93DA-082860F2DF2C}C:\program files\java\jre1.8.0_131\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_131\bin\javaw.exe FirewallRules: [UDP Query User{F2909329-7422-47C7-941E-66A450072029}C:\program files\java\jre1.8.0_131\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_131\bin\javaw.exe FirewallRules: [{532DACCD-0424-4177-BEDF-6DD82181904C}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\Resolve.exe FirewallRules: [{8142E7CE-BA20-4CE7-A061-3D44C7317504}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\bmdpaneld.exe FirewallRules: [{AE907EE1-A5C3-4E6C-BEFB-E3F3E2C1F8FB}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\JLCooperPanelDaemon.exe FirewallRules: [{DDEB9F4C-E814-4877-B060-29EB3277B5F8}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\EuphonixPanelDaemon.exe FirewallRules: [{4B14BB36-38BB-4654-AB2D-188178A7D293}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\TangentPanelDaemon.exe FirewallRules: [{5DB460B8-059F-45CB-95FB-8AADFE1FCE4E}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\ElementsPanelDaemon.exe FirewallRules: [{8A5EEFF6-2642-4413-A138-2D188E8C64D6}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\DPDecoder.exe FirewallRules: [{3FBDD5A3-1E64-44DC-863D-97D20B94C95E}] => (Allow) C:\ProgramData\Blackmagic Design\DaVinci Resolve\Support\QtDecoder\QTDecoder.exe FirewallRules: [TCP Query User{2559A8F2-6A01-43ED-BCC9-DF5E28460102}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe FirewallRules: [UDP Query User{7D6303B4-FC79-439B-A72B-FDF12527951C}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe FirewallRules: [TCP Query User{2376D5EB-C572-4F87-8EA2-53536AD51733}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe FirewallRules: [UDP Query User{FD2FC948-0AA6-4409-B57E-76F91DC22FA3}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe FirewallRules: [TCP Query User{FDAE1E99-E067-4840-8D3C-9A8867BCA58C}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe FirewallRules: [UDP Query User{A68C2C01-B70F-4238-A0E8-94706018539B}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe FirewallRules: [TCP Query User{9B0A261C-1F53-481F-B90A-77FDD0623E1E}C:\users\rikenmanon\appdata\local\popcorn time community\nw.exe] => (Allow) C:\users\rikenmanon\appdata\local\popcorn time community\nw.exe FirewallRules: [UDP Query User{0FC932E7-2B82-4D72-A1F5-04FF43BCB993}C:\users\rikenmanon\appdata\local\popcorn time community\nw.exe] => (Allow) C:\users\rikenmanon\appdata\local\popcorn time community\nw.exe FirewallRules: [{120502D5-3541-41F6-A80B-4BB6168B9D67}] => (Allow) C:\Program Files (x86)\Stea\Steam.exe FirewallRules: [{D06B397D-91D3-4446-96BA-E2DCA085C37D}] => (Allow) C:\Program Files (x86)\Stea\Steam.exe FirewallRules: [{81C99098-7A3E-4A85-A866-8F18DE77939F}] => (Allow) C:\Program Files (x86)\Stea\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{3A1E4272-FB01-4CF0-83FE-3643E580CE33}] => (Allow) C:\Program Files (x86)\Stea\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{D55EC876-1010-4A5C-8F78-81C6A4D8DA02}] => (Allow) C:\Program Files (x86)\Stea\steamapps\common\Black Squad\binaries\win32\BlackSquadGame.exe FirewallRules: [{9DCAEE41-79BE-4B57-8B7F-59D9F8D0BC01}] => (Allow) C:\Program Files (x86)\Stea\steamapps\common\Black Squad\binaries\win32\BlackSquadGame.exe FirewallRules: [{F87A08B6-95D1-44CA-9FA6-ECBE588E99B9}] => (Allow) C:\Program Files (x86)\Stea\steamapps\common\raceroom racing experience\Game\RRRE.exe FirewallRules: [{C79BDC88-4355-4590-81CE-B29DD984134E}] => (Allow) C:\Program Files (x86)\Stea\steamapps\common\raceroom racing experience\Game\RRRE.exe FirewallRules: [TCP Query User{D66CBDE8-34BB-4035-B6BF-A08787F4CF31}C:\games\counter strike global offensive warzone\csgo.exe] => (Allow) C:\games\counter strike global offensive warzone\csgo.exe FirewallRules: [UDP Query User{23B12FE8-5E48-40CB-A80E-0DB7843543A0}C:\games\counter strike global offensive warzone\csgo.exe] => (Allow) C:\games\counter strike global offensive warzone\csgo.exe FirewallRules: [{7437167D-36EB-4777-ACA0-74FC4419DC8B}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{CC18A087-4CBB-4E67-9FA0-FD1EE1A3AC5C}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{ABAE4D70-94B9-4FAA-96EB-5CF44069ED2E}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{A15E0049-8F23-462F-8B92-7EA26BA7F9F4}] => (Allow) C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\fdm.exe FirewallRules: [{3E82868A-EFF2-4AD0-A500-E500AF0038E3}] => (Allow) C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\fdm.exe ==================== Herstelpunten ========================= 06-12-2017 15:48:14 Windows Update 06-12-2017 15:54:10 Windows Update 18-12-2017 18:54:24 Windows Update 20-12-2017 14:23:54 Windows Update 20-12-2017 14:36:46 Installed Minecraft 20-12-2017 14:53:30 Removed Adobe Acrobat Reader DC - Nederlands. 20-12-2017 14:56:36 Registry Reviver (20/12/2017 14:56) ==================== Defecte Apparaatbeheer Apparaten ============= ==================== Eventlog fouten: ========================= Applicatiefouten: ================== Error: (12/20/2017 02:20:23 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Gebeurtenisfilter met query SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 kan niet opnieuw worden geactiveerd in naamruimte //./root/CIMV2 vanwege fout 0x80041003. Mogelijk worden er geen gebeurtenissen via dit filter doorgegeven totdat het probleem is verholpen. Error: (12/20/2017 02:26:32 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT AUTHORITY) Description: Het verwijderen van de tekenreeksen van prestatiemeteritems voor de WmiApRpl-service (WmiApRpl) is mislukt. De foutcode is de eerste DWORD in de sectie Gegevens. Error: (12/20/2017 02:26:32 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY) Description: De prestatietekenreeksen in de waarde van de registersleutel Performance worden beschadigd bij het verwerken van de Performance extension counter provider. De waarde van BaseIndex in de registersleutel Performance is de eerste DWORD in de gegevenssectie, de waarde van LastCounter de tweede DWORD en de waarde van LastHelp de derde DWORD. Error: (12/20/2017 02:26:32 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY) Description: De prestatietekenreeksen in de waarde van de registersleutel Performance worden beschadigd bij het verwerken van de Performance extension counter provider. De waarde van BaseIndex in de registersleutel Performance is de eerste DWORD in de gegevenssectie, de waarde van LastCounter de tweede DWORD en de waarde van LastHelp de derde DWORD. Error: (12/20/2017 02:20:21 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Gebeurtenisfilter met query SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 kan niet opnieuw worden geactiveerd in naamruimte //./root/CIMV2 vanwege fout 0x80041003. Mogelijk worden er geen gebeurtenissen via dit filter doorgegeven totdat het probleem is verholpen. Error: (12/20/2017 02:20:19 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Gebeurtenisfilter met query SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 kan niet opnieuw worden geactiveerd in naamruimte //./root/CIMV2 vanwege fout 0x80041003. Mogelijk worden er geen gebeurtenissen via dit filter doorgegeven totdat het probleem is verholpen. Error: (12/20/2017 02:20:21 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Gebeurtenisfilter met query SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 kan niet opnieuw worden geactiveerd in naamruimte //./root/CIMV2 vanwege fout 0x80041003. Mogelijk worden er geen gebeurtenissen via dit filter doorgegeven totdat het probleem is verholpen. Error: (12/20/2017 02:20:32 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Gebeurtenisfilter met query SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 kan niet opnieuw worden geactiveerd in naamruimte //./root/CIMV2 vanwege fout 0x80041003. Mogelijk worden er geen gebeurtenissen via dit filter doorgegeven totdat het probleem is verholpen. Error: (12/20/2017 02:20:29 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Gebeurtenisfilter met query SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 kan niet opnieuw worden geactiveerd in naamruimte //./root/CIMV2 vanwege fout 0x80041003. Mogelijk worden er geen gebeurtenissen via dit filter doorgegeven totdat het probleem is verholpen. Error: (12/20/2017 02:20:19 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Gebeurtenisfilter met query SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 kan niet opnieuw worden geactiveerd in naamruimte //./root/CIMV2 vanwege fout 0x80041003. Mogelijk worden er geen gebeurtenissen via dit filter doorgegeven totdat het probleem is verholpen. Systeemfouten: ============= Error: (12/20/2017 02:21:17 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: De Peer Networking Grouping-service is afhankelijk van de Peer Name Resolution Protocol-service, die vanwege de volgende fout niet kan worden gestart: %%-2140993535 Error: (12/20/2017 02:21:17 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: De Peer Name Resolution Protocol-service is gestopt met de volgende foutcode: %%-2140993535. Error: (12/20/2017 02:21:17 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: De Peer Networking Grouping-service is afhankelijk van de Peer Name Resolution Protocol-service, die vanwege de volgende fout niet kan worden gestart: %%-2140993535 Error: (12/20/2017 02:21:17 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: De Peer Name Resolution Protocol-service is gestopt met de volgende foutcode: %%-2140993535. Error: (12/20/2017 02:21:17 PM) (Source: PNRPSvc) (EventID: 102) (User: ) Description: De wolk Peer Name Resolution Protocol is niet gestart omdat het maken van de standaardidentiteit is mislukt met foutcode: 0x80630801. Error: (12/20/2017 02:21:17 PM) (Source: PNRPSvc) (EventID: 102) (User: ) Description: De wolk Peer Name Resolution Protocol is niet gestart omdat het maken van de standaardidentiteit is mislukt met foutcode: 0x80630801. Error: (12/20/2017 02:21:06 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: De Peer Name Resolution Protocol-service is gestopt met de volgende foutcode: %%-2140993535. Error: (12/20/2017 02:21:06 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: De Peer Networking Grouping-service is afhankelijk van de Peer Name Resolution Protocol-service, die vanwege de volgende fout niet kan worden gestart: %%-2140993535 Error: (12/20/2017 02:21:06 PM) (Source: PNRPSvc) (EventID: 102) (User: ) Description: De wolk Peer Name Resolution Protocol is niet gestart omdat het maken van de standaardidentiteit is mislukt met foutcode: 0x80630801. Error: (12/20/2017 02:20:14 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: De Update service-service kan vanwege de volgende fout niet worden gestart: Het systeem kan het opgegeven bestand niet vinden. ==================== Geheugen info =========================== Processor: Intel(R) Pentium(R) CPU P6200 @ 2.13GHz Percentage geheugen in gebruik: 77% Totaal fysiek RAM-geheugen: 3764.86 MB Beschikbaar fysiek RAM-geheugen: 830.94 MB Totaal Virtueel geheugen: 7527.9 MB Beschikbaar Virtual geheugen: 3996.98 MB ==================== Schijven ================================ Drive c: (Acer) (Fixed) (Total:450.66 GB) (Free:388.07 GB) NTFS ==================== MBR & Partitietabel ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 161B94AE) Partition 1: (Not Active) - (Size=15 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=450.7 GB) - (Type=07 NTFS) ==================== Eind van Addition.txt ============================