Extra scanresultaten van Farbar Recovery Scan Tool (x64) Versie: 02.01.2018 Gestart door Anja (03-01-2018 13:41:09) Gestart vanaf C:\Users\Anja\Desktop Windows 8.1 (Update) (X64) (2015-06-18 21:17:58) Boot Modus: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-3923666968-2032427885-3240601155-500 - Administrator - Disabled) Anja (S-1-5-21-3923666968-2032427885-3240601155-1001 - Administrator - Enabled) => C:\Users\Anja Gast (S-1-5-21-3923666968-2032427885-3240601155-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-3923666968-2032427885-3240601155-1003 - Limited - Enabled) ==================== Security Center ======================== (Als een item is opgenomen in de fixlist, zal het worden verwijderd.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: KPN Veilig by F-Secure (Enabled - Up to date) {35BE5FA4-2DEA-00F8-DC55-FD8AF743F44F} AS: KPN Veilig by F-Secure (Enabled - Up to date) {8EDFBE40-0BD0-0F76-E6E5-C6F88CC4BEF2} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Geïnstalleerde programma's ====================== (Alleen de adware-programma's met 'verborgen' vlag zou kunnen worden toegevoegd aan de fixlist om ze zichtbaar te maken. De adware-programma's moeten handmatig gedeinstallerd worden.) 64 Bit HP CIO Components Installer (HKLM\...\{FF21C3E6-97FD-474F-9518-8DCBE94C2854}) (Version: 7.2.8 - Hewlett-Packard) Hidden 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) Adobe Acrobat Reader DC - Nederlands (HKLM-x32\...\{AC76BA86-7AD7-1043-7B44-AC0F074E4100}) (Version: 18.009.20050 - Adobe Systems Incorporated) Adobe Digital Editions 2.0 (HKLM-x32\...\Adobe Digital Editions 2.0) (Version: 2.0 - Adobe Systems Incorporated) ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.2.8 - ASUS) ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 3.0.7 - ASUS) ASUS Screen Saver (HKLM-x32\...\{0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}) (Version: 1.0.2 - ASUS) ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 2.2.14 - ASUS) ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 2.01.0021 - ASUS) ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 3.1.9 - ASUS) ASUSDVD (HKLM-x32\...\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.5712.52 - CyberLink Corp.) Hidden ASUSDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.5712.52 - CyberLink Corp.) AsusVibe2.0 (HKLM-x32\...\Asus Vibe2.0) (Version: 2.0.12.311 - ASUSTEK) ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0033 - ASUS) B110 (HKLM-x32\...\{CC2917EA-96EC-41D1-9756-760C32AF6F12}) (Version: 140.0.353.000 - Hewlett-Packard) Hidden Bing Bar (HKLM-x32\...\{3611CA6C-5FCA-4900-A329-6A118123CCFC}) (Version: 7.1.355.0 - Microsoft Corporation) BufferChm (HKLM-x32\...\{FA0FF682-CC70-4C57-93CD-E276F3E7537E}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden CCleaner (HKLM\...\CCleaner) (Version: 5.38 - Piriform) Computer Security 17.193.128.0 (release) (HKLM-x32\...\{658FDBCA-B7A1-43E4-A849-9F0812473331}) (Version: 17.193.128.0 - F-Secure Corporation) Hidden CutePDF Writer 3.1 (HKLM\...\CutePDF Writer Installation) (Version: 3.1 - Acro Software Inc.) D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden Design & Print (HKLM-x32\...\Design & Print 2.0.0) (Version: 2.0.0 - Avery Products Corp.) Design & Print (HKLM-x32\...\Design & Print 4.0.0) (Version: 4.0.0 - Avery Products Corp.) Destinations (HKLM-x32\...\{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}) (Version: 140.0.253.000 - Hewlett-Packard) Hidden DeviceDiscovery (HKLM-x32\...\{1458BB78-1DC5-4BC0-B9A3-2B644F5A8105}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden F-Secure CCF Reputation (HKLM-x32\...\{D864A15F-64B4-49B1-832C-21EDB46843B7}) (Version: 100.0.0.0 - F-Secure) Hidden F-Secure CCF Scanning Dummy 3.0.12 (release) (HKLM-x32\...\{99924D6C-E069-4C91-AB86-1722282FC858}) (Version: 3.0.12 - F-Secure Corporation) Hidden F-Secure Network CCF 1.04.266 (HKLM-x32\...\{A61B6381-E40A-4C8C-BB38-FD9E95F70E02}) (Version: 1.04.266 - F-Secure Corporation) Hidden F-Secure SafeSearch 10.0.0.0 (release) (HKLM-x32\...\{1C02D59F-EAF4-404C-95D9-2E7EF186FE44}) (Version: 10.0.0.0 - F-Secure Corporation) Hidden F-Secure Ultralight 1.0.5438.0 (release) (cc0c4f981bd2f23d1e5e325af11ed0a0ecf2a348) (HKLM-x32\...\{C75644E8-5FB5-4B8F-8FD2-08CC5D7ECD87}) (Version: 1.0.5438.0 - F-Secure Corporation) Hidden Google Chrome (HKLM-x32\...\Google Chrome) (Version: 63.0.3239.84 - Google Inc.) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden GPBaseService2 (HKLM-x32\...\{BB3447F6-9553-4AA9-960E-0DB5310C5779}) (Version: 140.0.297.000 - Hewlett-Packard) Hidden HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP) HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP) HP Photosmart Wireless B110 All-In-One Driver Software 14.0 Rel. 6 (HKLM\...\{C63184F3-8343-408F-A948-DDB0AC969A99}) (Version: 14.0 - HP) HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP) HP Support Assistant (HKLM-x32\...\{56D27851-B9A6-430F-875A-E2D7A3802C7B}) (Version: 8.5.37.19 - HP Inc.) HP Support Solutions Framework (HKLM-x32\...\{4CBA8ECF-0519-4583-91ED-F098522245EB}) (Version: 12.8.47.1 - HP Inc.) HP Touchpoint Analytics Client (HKLM\...\{E5FB98E0-0784-44F0-8CEC-95CD4690C43F}) (Version: 4.0.2.1439 - HP Inc.) HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard) HPAppStudio (HKLM-x32\...\{565E7B0E-B76B-4EAD-9753-F1E72A5CF12E}) (Version: 140.0.95.000 - Hewlett-Packard) Hidden HPPhotoGadget (HKLM-x32\...\{CAE4213F-F797-439D-BD9E-79B71D115BE3}) (Version: 140.0.524.000 - Hewlett-Packard) Hidden HPProductAssistant (HKLM-x32\...\{150B6201-E9E6-4DFB-960E-CCBD53FBDDED}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden HPSSupply (HKLM-x32\...\{AC35A885-0F8F-4857-B7DA-6E8DFB43E6B3}) (Version: 140.0.297.000 - Hewlett-Packard) Hidden ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!) Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\FFD10ECE-F715-4a86-9BD8-F6F47DA5DA1C) (Version: 7.1.0.2105 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.6.0.1038 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3496 - Intel Corporation) Junk Mail filter update (HKLM-x32\...\{0BE9E708-5DC0-4963-9CFD-0AA519090E79}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden KPN Veilig (HKLM-x32\...\{ABA4F20E-E0C1-40E9-9B98-3D369F6E27BD}) (Version: 2.93.175.0 - F-Secure Corporation) Hidden KPN Veilig (HKLM-x32\...\F-Secure ServiceEnabler 4582601) (Version: 2.93.175.0 - F-Secure Corporation) MarketResearch (HKLM-x32\...\{D360FA88-17C8-4F14-B67F-13AAF9607B12}) (Version: 140.0.212.000 - Hewlett-Packard) Hidden MediaFACE 4.01 (HKLM-x32\...\{41979C2F-34B8-4F92-8111-B13C5864682D}) (Version: 4.01 - Fellowes) Hidden MediaFACE 4.01 (HKLM-x32\...\InstallShield_{41979C2F-34B8-4F92-8111-B13C5864682D}) (Version: 4.01 - Fellowes) MediaFACE 4.01 Image Library (HKLM-x32\...\{82AF77BC-423D-42DA-BE5B-FFCA04752181}) (Version: 4.01 - Fellowes) Hidden MediaFACE 4.01 Image Library (HKLM-x32\...\InstallShield_{82AF77BC-423D-42DA-BE5B-FFCA04752181}) (Version: 4.01 - Fellowes) Medieval CUE Splitter (HKLM-x32\...\{B96D2269-568B-4CBF-9332-12FAE8B158F7}) (Version: 1.2.0 - Medieval Software) Microsoft Office 2013 voor Thuisgebruik en Studenten - nl-nl (HKLM\...\HomeStudentRetail - nl-nl) (Version: 15.0.4989.1000 - Microsoft Corporation) Microsoft Office Proofing Tools 2013 - Nederlands (HKLM-x32\...\{90150000-001F-0413-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation) Microsoft SkyDrive (HKU\S-1-5-21-3923666968-2032427885-3240601155-1001\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Movie Maker (HKLM-x32\...\{DC5E5027-65E8-41CB-815C-9AAB48BFB8E2}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Nero 12 (HKLM-x32\...\{5019D24D-A627-4402-A393-A3AAAF13DE56}) (Version: 12.0.01600 - Nero AG) Nero 12 Content Pack (HKLM-x32\...\{B14F874A-79C7-4756-9826-69BAB8F60E6F}) (Version: 12.0.00100 - Nero AG) Network64 (HKLM\...\{6BFAB6C1-6D46-46DB-A538-A269907C9F2F}) (Version: 140.0.306.000 - Hewlett-Packard) Hidden Newzbin (HKLM-x32\...\{724C9FDB-1EE0-43A1-8E50-C6D193835650}) (Version: 1.1.2.0 - Newzbin Usenet Community) Office 15 Click-to-Run Extensibility Component (HKLM-x32\...\{90150000-008C-0000-0000-0000000FF1CE}) (Version: 15.0.4989.1000 - Microsoft Corporation) Hidden Office 15 Click-to-Run Licensing Component (HKLM\...\{90150000-008F-0000-1000-0000000FF1CE}) (Version: 15.0.4989.1000 - Microsoft Corporation) Hidden Office 15 Click-to-Run Localization Component (HKLM-x32\...\{90150000-008C-0413-0000-0000000FF1CE}) (Version: 15.0.4989.1000 - Microsoft Corporation) Hidden Online Safety 2.193.6279.13 (HKLM-x32\...\{978DBB21-6BBE-4F5F-B399-6BD9C3A04B9F}) (Version: 2.193.6279.13 - F-Secure Corporation) Hidden Prerequisite installer (HKLM-x32\...\{3AAB08A3-F129-4BD5-B409-AE674F93759D}) (Version: 12.0.0002 - Nero AG) Hidden PS_AIO_07_B110_SW_Min (HKLM-x32\...\{C0974FF0-282B-4730-A50C-B112FA263E17}) (Version: 140.0.365.000 - Hewlett-Packard) Hidden Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros) QuickPar 0.9 (HKLM-x32\...\QuickPar) (Version: 0.9 - Peter B. Clements) QuickTransfer (HKLM-x32\...\{E517094C-06B6-419F-8FFD-EF4F57972130}) (Version: 140.0.98.000 - Hewlett-Packard) Hidden Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.21236 - Realtek Semiconductor Corp.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.29.314.2014 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7224 - Realtek Semiconductor Corp.) SABnzbd 0.7.20 (HKLM-x32\...\SABnzbd) (Version: 0.7.20 - The SABnzbd Team) Scan (HKLM-x32\...\{06A1D88C-E102-4527-AF70-29FFD7AF215A}) (Version: 140.0.253.000 - Hewlett-Packard) Hidden Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP) Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation) Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.104 - Skype Technologies S.A.) SolutionCenter (HKLM-x32\...\{BC5DD87B-0143-4D14-AAE6-97109614DC6B}) (Version: 140.0.299.000 - Hewlett-Packard) Hidden Spotify (HKU\S-1-5-21-3923666968-2032427885-3240601155-1001\...\Spotify) (Version: 1.0.70.388.g8e1ed5af - Spotify AB) SpotLite (HKU\S-1-5-21-3923666968-2032427885-3240601155-1001\...\SpotLite) (Version: 00.01.99.02 - Quartermaster (Bond)) Spotnet (HKLM-x32\...\{12878924-210B-4A0C-8CA6-6C697756BA32}) (Version: 1.8.1.1 - Spotnet) Hidden Spotnet (HKLM-x32\...\{12947715-B6F0-4597-816F-5E13FB647921}_is1) (Version: 1.9.0.4 - Spotnet) Spotnet (HKLM-x32\...\Spotnet 1.8.1.1) (Version: 1.8.1.1 - Spotnet) Status (HKLM-x32\...\{5B025634-7D5B-4B8D-BE2A-7943C1CF2D5D}) (Version: 140.0.342.000 - Hewlett-Packard) Hidden Taalpakket voor Microsoft Visual Studio 2010 Tools for Office Runtime (x64) - NLD (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - NLD) (Version: 10.0.50903 - Microsoft Corporation) TomTom MyDrive Connect 4.1.6.3253 (HKLM-x32\...\MyDriveConnect) (Version: 4.1.6.3253 - TomTom) Toolbox (HKLM-x32\...\{292F0F52-B62D-4E71-921B-89A682402201}) (Version: 140.0.596.000 - Hewlett-Packard) Hidden TrayApp (HKLM-x32\...\{CD31E63D-47FD-491C-8117-CF201D0AFAB5}) (Version: 140.0.297.000 - Hewlett-Packard) Hidden Update Installer for WildTangent Games App (HKLM-x32\...\{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App) (Version: - WildTangent) Hidden Visual Studio C++ 10.0 Runtime (HKLM-x32\...\{4412F224-3849-4461-A3E9-DEEF8D252790}) (Version: 10.0.0 - TomTom International B.V.) VSO ConvertXToDVD (HKLM-x32\...\{CE1F93C0-4353-4C9D-84DA-AB4E7C63ED32}_is1) (Version: 5.3.0.15 - VSO Software) VSO ConvertXToDVD 6 (HKLM-x32\...\{8FC36FA6-C508-44FB-B137-1CB46D8258B2}_is1) (Version: 6.0.0.27 - VSO Software) WebReg (HKLM-x32\...\{8EE94FD8-5F52-4463-A340-185D16328158}) (Version: 140.0.297.017 - Hewlett-Packard) Hidden WebStorage (HKLM-x32\...\WebStorage) (Version: 2.2.12.577 - ASUS Cloud Corporation) Welcome App (Start-up experience) (HKLM-x32\...\{828175FA-7307-4DBF-95AD-9CEE086B6F45}) (Version: 12.0.13000 - Nero AG) Hidden WildTangent Games App (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-asus) (Version: 4.0.10.25 - WildTangent) Windows Driver Package - ASUS (ATP) Mouse (03/17/2014 1.0.0.207) (HKLM\...\AA2CC56D4BBEE037DC99871F5F6551133D2A0CC3) (Version: 03/17/2014 1.0.0.207 - ASUS) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation) WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.42.0 - ASUS) ==================== Aangepaste CLSID (gefilterd): ========================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) CustomCLSID: HKU\S-1-5-21-3923666968-2032427885-3240601155-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation) CustomCLSID: HKU\S-1-5-21-3923666968-2032427885-3240601155-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Anja\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-3923666968-2032427885-3240601155-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Anja\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-3923666968-2032427885-3240601155-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Anja\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-3923666968-2032427885-3240601155-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Anja\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\FileSyncApi64.dll (Microsoft Corporation) ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.2.12.577\ASUSWSShellExt64.dll [2015-04-22] (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.2.12.577\ASUSWSShellExt64.dll [2015-04-22] (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.2.12.577\ASUSWSShellExt64.dll [2015-04-22] (ASUS Cloud Corporation.) ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov) ContextMenuHandlers1-x32: [MediaFaceExtension] -> {6E3C607A-B99C-4FA8-98F5-1AC1ADF7F5B9} => C:\Program Files (x86)\Fellowes\MediaFACE 4.0\MFShlExt.dll [2003-08-18] (Fellowes, Inc.) ContextMenuHandlers2-x32: [ShellExt] -> {6E3C607A-B99C-4FA8-98F5-1AC1ADF7F5B9} => C:\Program Files (x86)\Fellowes\MediaFACE 4.0\MFShlExt.dll [2003-08-18] (Fellowes, Inc.) ContextMenuHandlers3: [BackupContextMenuExtension] -> {b1b96b20-da1d-4a3c-92c1-7229b32f2326} => C:\Windows\system32\mscoree.dll [2013-08-22] (Microsoft Corporation) ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov) ContextMenuHandlers4-x32: [MediaFaceExtension] -> {6E3C607A-B99C-4FA8-98F5-1AC1ADF7F5B9} => C:\Program Files (x86)\Fellowes\MediaFACE 4.0\MFShlExt.dll [2003-08-18] (Fellowes, Inc.) ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\Windows\system32\igfxDTCM.dll [2014-03-18] (Intel Corporation) ContextMenuHandlers5: [igfxOSP] -> {FA507C3F-30C6-4DCA-9EE5-2656072EEC14} => C:\Windows\system32\igfxOSP.dll [2014-03-18] (Intel Corporation) ==================== Geplande Taken (gefilterd) ============= (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) Task: {085F1C51-7B31-4E12-8305-A0B6398AD0F6} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2014-01-03] (ASUS) Task: {16A2C1C7-60CB-4780-98F6-4E2A0F88FF02} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2015-08-23] (AsusTek) Task: {17EA3074-45B4-45EE-9213-555927D35D43} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2017-09-05] (Microsoft Corporation) Task: {1BE709CE-FF7F-4FE9-A7BB-789052115512} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2017-12-14] (Microsoft Corporation) Task: {2B75C1BC-485E-41FE-9387-3DCFB851A465} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-09-20] (HP Inc.) Task: {2FC90492-C2AF-4B8B-BEAB-FF898C7A300D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2017-11-08] (HP Inc.) Task: {4199A830-1B50-4F27-9BBB-74C1026B8276} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-04-10] (Realtek Semiconductor) Task: {612274BB-51BD-48F5-A083-85A56088ACC7} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2014-03-11] () Task: {65C65500-BD3A-4847-B29B-5D839F29B975} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-21] (Google Inc.) Task: {6B6CF69F-42E0-4F24-8CB1-1D5E959B9AB4} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2017-06-22] (HP Inc.) Task: {78CBBECA-1C61-46D4-95EF-EBE8AFDF0F9F} - System32\Tasks\RtHDVBg => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-04-15] (Realtek Semiconductor) Task: {7A424FB8-0815-447D-BD69-76DB37ED3264} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86) [Argument = -check] Task: {7D660A41-4849-41AD-B934-2C24740F79B0} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2017-09-27] (HP Inc.) Task: {8284644F-93AD-4DD4-9B9F-09B11A362304} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2014-01-14] (ASUSTek Computer Inc.) Task: {8E5E4ED6-359E-4AFE-8F00-CD20B9F3D5BB} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2017-09-05] (Microsoft Corporation) Task: {959DD5A1-2D5A-4762-A032-4C15CF3DAB78} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86) [Argument = -critical] Task: {9BC6DA3E-6E80-4B52-B21E-8AE883EED9E2} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2013-10-07] (ASUS) Task: {9D7E8BD0-5D7D-4AFB-A852-DBC88804A0E3} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-12-13] (Piriform Ltd) Task: {A0F2BD0B-2C8B-4AB1-A85A-8BF36CA26EC4} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2017-12-13] (Piriform Ltd) Task: {A710DBA7-5A38-492A-BA23-1E8153D199D0} - System32\Tasks\AsusVibeSchedule => C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe [2013-11-04] () Task: {B97A2DF4-B240-4C02-9385-7764A7684A39} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2017-09-27] (HP Inc.) Task: {BB717FF6-AABF-4429-AA69-68F4B8DE2934} - System32\Tasks\P4GIntlCtrl => C:\Program Files\ASUS\P4G\IntlDPST.exe [2014-01-03] () Task: {BFE0B436-84E1-43E1-89FC-CCA873B12A16} - System32\Tasks\HPCeeScheduleForAnja => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2016-05-12] (HP Development Company, L.P.) Task: {C6715C42-AB0A-4200-83DA-92C35E2CEAEF} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2017-11-21] () Task: {CA78455C-48BA-425F-A8E6-EFFA31FE6D3F} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2014-03-27] (ASUSTek Computer Inc.) Task: {D6585722-121A-4673-9CA4-A8C068579A9A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-09-27] (Adobe Systems Incorporated) Task: {D6F4A061-CEFB-4F38-81EC-6E80ECDD3011} - System32\Tasks\Microsoft\Windows\Location\Notifications => C:\Windows\System32\LocationNotificationWindows.exe Task: {E029A3CC-8718-4CAA-AB38-F251F3864E15} - System32\Tasks\ASUS Splendid ColorU => C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe [2013-10-07] (ASUSTeK Computer Inc.) Task: {E66A7D14-5210-48F7-B3B5-8AECAD9FCBEA} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [2017-10-11] (HP Inc.) Task: {E86CDDB8-BE6B-42D5-9749-71285A602C68} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-21] (Google Inc.) (Als een item is opgenomen in de fixlist, de taak (job) bestand wordt verplaatst. Het bestand dat wordt uitgevoerd door de taak zal niet worden verplaatst.) Task: C:\Windows\Tasks\HPCeeScheduleForAnja.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe ==================== Snelkoppelingen & WMI ======================== (De items kunnen worden opgenomen in de fixlist.txt om hersteld of verwijderd te worden.) ShortcutWithArgument: C:\Users\Anja\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\a3a1d6b8109861c5\Google Hangouts.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=nckgahadagoaajjgafhacjanaoiihapd ShortcutWithArgument: C:\Users\Anja\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Anja - Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 1" ==================== Geladen Modules (gefilterd) ============== 2017-01-10 00:36 - 2016-01-22 17:57 - 000089008 _____ () C:\Windows\System32\cpwmon64.dll 2015-06-23 17:40 - 2017-01-17 03:25 - 000117440 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll 2017-12-06 09:18 - 2017-12-06 09:18 - 000328160 _____ () C:\Program Files (x86)\KPN Veilig\apps\Ultralight\ulcore\1511165593\daas2_x64.dll 2017-12-06 09:18 - 2017-12-06 09:18 - 000319968 _____ () C:\Program Files (x86)\KPN Veilig\apps\Ultralight\ulcore\1511165593\senddump_fshoster_plugin64.dll 2014-01-03 17:26 - 2014-01-03 17:26 - 000031360 _____ () C:\Program Files\ASUS\P4G\DevMng.dll 2014-01-03 17:26 - 2014-01-03 17:26 - 000028672 _____ () C:\Program Files\ASUS\P4G\plctrl.dll 2014-04-30 03:31 - 2014-03-18 04:10 - 000080312 _____ () C:\Windows\system32\igfxexps.dll 2015-12-11 00:22 - 2015-12-11 00:22 - 000042696 _____ () C:\ProgramData\Search Too Know\SearchTooKnowDesktopSearch.exe 2015-06-20 20:52 - 2015-06-20 20:52 - 000104960 _____ () C:\Program Files (x86)\SABnzbd\SABnzbd.exe 2017-12-14 19:14 - 2017-12-06 05:24 - 004063064 _____ () C:\Program Files (x86)\Google\Chrome\Application\63.0.3239.84\libglesv2.dll 2017-12-14 19:14 - 2017-12-06 05:24 - 000099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\63.0.3239.84\libegl.dll 2014-06-14 05:59 - 2013-10-23 13:44 - 001242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll 2013-09-09 18:23 - 2013-09-09 18:23 - 000162816 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll 2013-10-08 20:41 - 2013-10-08 20:41 - 000037968 _____ () C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll 2014-09-11 16:06 - 2014-09-11 16:06 - 000878592 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\platforms\qwindows.dll 2014-09-11 16:05 - 2014-09-11 16:05 - 000036352 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\bearer\qgenericbearer.dll 2014-09-11 16:06 - 2014-09-11 16:06 - 000038912 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\bearer\qnativerwifibearer.dll 2014-09-11 16:14 - 2014-09-11 16:14 - 000032256 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qdds.dll 2014-09-11 16:05 - 2014-09-11 16:05 - 000021504 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qgif.dll 2014-09-11 16:14 - 2014-09-11 16:14 - 000027648 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qicns.dll 2014-09-11 16:05 - 2014-09-11 16:05 - 000021504 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qico.dll 2014-09-11 16:14 - 2014-09-11 16:14 - 000381952 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qjp2.dll 2014-09-11 16:05 - 2014-09-11 16:05 - 000204800 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qjpeg.dll 2014-09-11 16:14 - 2014-09-11 16:14 - 000218112 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qmng.dll 2014-09-11 16:08 - 2014-09-11 16:08 - 000015872 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qsvg.dll 2014-09-11 16:14 - 2014-09-11 16:14 - 000015360 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qtga.dll 2014-09-11 16:15 - 2014-09-11 16:15 - 000307712 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qtiff.dll 2014-09-11 16:15 - 2014-09-11 16:15 - 000014848 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qwbmp.dll 2014-09-11 16:15 - 2014-09-11 16:15 - 000252928 _____ () C:\Program Files (x86)\MyDrive Connect\Plugins\imageformats\qwebp.dll 2015-06-20 20:52 - 2015-06-20 20:52 - 000053248 _____ () C:\Program Files (x86)\SABnzbd\lib\_socket.pyd 2015-06-20 20:52 - 2015-06-20 20:52 - 000671744 _____ () C:\Program Files (x86)\SABnzbd\lib\_ssl.pyd 2015-06-20 20:52 - 2015-06-20 20:52 - 000294912 _____ () C:\Program Files (x86)\SABnzbd\lib\_hashlib.pyd 2015-06-20 20:52 - 2015-06-20 20:52 - 000102400 _____ () C:\Program Files (x86)\SABnzbd\lib\win32api.pyd 2015-06-20 20:52 - 2015-06-20 20:52 - 000118784 _____ () C:\Program Files (x86)\SABnzbd\lib\pywintypes25.dll 2015-06-20 20:52 - 2015-06-20 20:52 - 000013824 _____ () C:\Program Files (x86)\SABnzbd\lib\win32event.pyd 2015-06-20 20:52 - 2015-06-20 20:52 - 000036864 _____ () C:\Program Files (x86)\SABnzbd\lib\win32service.pyd 2015-06-20 20:52 - 2015-06-20 20:52 - 000057344 _____ () C:\Program Files (x86)\SABnzbd\lib\OpenSSL.crypto.pyd 2015-06-20 20:52 - 2015-06-20 20:52 - 000007168 _____ () C:\Program Files (x86)\SABnzbd\lib\OpenSSL.rand.pyd 2015-06-20 20:52 - 2015-06-20 20:52 - 000037888 _____ () C:\Program Files (x86)\SABnzbd\lib\OpenSSL.SSL.pyd 2015-06-20 20:52 - 2015-06-20 20:52 - 000086016 _____ () C:\Program Files (x86)\SABnzbd\lib\_ctypes.pyd 2015-06-20 20:52 - 2015-06-20 20:52 - 000049152 _____ () C:\Program Files (x86)\SABnzbd\lib\_sqlite3.pyd 2015-06-20 20:52 - 2015-06-20 20:52 - 000546205 _____ () C:\Program Files (x86)\SABnzbd\lib\sqlite3.dll 2015-06-20 20:52 - 2015-06-20 20:52 - 000008192 _____ () C:\Program Files (x86)\SABnzbd\lib\select.pyd 2015-06-20 20:52 - 2015-06-20 20:52 - 000009728 _____ () C:\Program Files (x86)\SABnzbd\lib\_yenc.pyd 2015-06-20 20:52 - 2015-06-20 20:52 - 000012288 _____ () C:\Program Files (x86)\SABnzbd\lib\Cheetah._namemapper.pyd 2015-06-20 20:52 - 2015-06-20 20:52 - 000135168 _____ () C:\Program Files (x86)\SABnzbd\lib\pyexpat.pyd 2015-06-20 20:52 - 2015-06-20 20:52 - 000040960 _____ () C:\Program Files (x86)\SABnzbd\lib\win32process.pyd 2015-06-20 20:52 - 2015-06-20 20:52 - 000110592 _____ () C:\Program Files (x86)\SABnzbd\lib\win32file.pyd 2015-06-20 20:52 - 2015-06-20 20:52 - 000014848 _____ () C:\Program Files (x86)\SABnzbd\lib\win32evtlog.pyd 2015-06-20 20:52 - 2015-06-20 20:52 - 000024576 _____ () C:\Program Files (x86)\SABnzbd\lib\servicemanager.pyd 2015-06-20 20:52 - 2015-06-20 20:52 - 000019968 _____ () C:\Program Files (x86)\SABnzbd\lib\win32pipe.pyd 2015-06-20 20:52 - 2015-06-20 20:52 - 000155648 _____ () C:\Program Files (x86)\SABnzbd\lib\win32gui.pyd 2015-06-20 20:52 - 2015-06-20 20:52 - 000176128 _____ () C:\Program Files (x86)\SABnzbd\lib\winxpgui.pyd 2014-03-31 20:35 - 2014-03-31 20:35 - 000278208 _____ () C:\Program Files (x86)\Windows Live\Writer\nl\WindowsLive.Writer.Localization.resources.dll ==================== Alternate Data Streams (gefilterd) ========= (Als een item is opgenomen in de fixlist, alleen de ADS wordt verwijderd.) AlternateDataStreams: C:\ProgramData\Spotnet:spn.k [428] ==================== Veilige Modus (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. De "AlternateShell" waarde wordt hersteld.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""="" ==================== Bestandskoppeling (gefilterd) =============== (Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd.) ==================== Internet Explorer vertrouwde/beperkte toegang =============== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd.) ==================== Hosts inhoud: =============================== (Als nodig Hosts: opdracht kan worden opgenomen in de fixlist om Hosts te resetten.) 2013-08-22 14:25 - 2013-08-22 14:25 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts ==================== Andere gebieden ============================ (Momenteel is er geen automatische fix voor dit onderdeel.) HKU\S-1-5-21-3923666968-2032427885-3240601155-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Anja\AppData\Roaming\Microsoft\Windows Photo Viewer\Achtergrond van Windows Photo Viewer.jpg DNS Servers: 195.121.1.34 - 195.121.1.66 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin) Windows Firewall is ingeschakeld. ==================== MSCONFIG/TASK MANAGER Uitgeschakelde items == ==================== Firewall regels (gefilterd) =============== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) FirewallRules: [{01A02B91-C698-402C-A809-F1F537D5D283}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE FirewallRules: [{D6D0B595-2D73-4B2F-84F6-25783C2B46C3}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{60DD7CAA-446E-43EB-8D2A-DF051ED361B3}] => (Allow) LPort=2869 FirewallRules: [{D46BE9CD-B713-4F2D-AAB6-F16184816BDA}] => (Allow) LPort=1900 FirewallRules: [TCP Query User{C892EC98-4BC7-4317-9EDE-5A58F2AF6B75}C:\users\anja\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\anja\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{E128C505-269A-403E-AD8D-2AF3C4D16E16}C:\users\anja\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\anja\appdata\roaming\spotify\spotify.exe FirewallRules: [TCP Query User{F583B522-05AC-4596-BF24-2C9AA592B385}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [UDP Query User{6AEA2C56-2741-4429-B93E-89D3E00FEF0B}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [{BBBF98C0-4AB0-4BD4-9350-2B79B335CDFB}] => (Allow) C:\Program Files (x86)\Nero\KM\KwikMedia.exe FirewallRules: [{3B22DC80-F454-49B5-BC84-7CB569631DA7}] => (Allow) C:\Program Files (x86)\Nero\KM\KwikMedia.exe FirewallRules: [TCP Query User{E1F0F9DD-CA88-455A-9051-BBC8811F10EC}C:\users\anja\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\anja\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{FC09921B-DD68-4EFB-97E2-24F8256D8CF2}C:\users\anja\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\anja\appdata\roaming\spotify\spotify.exe FirewallRules: [TCP Query User{053185BC-AEC3-4290-8BCF-860FAFDB1070}C:\program files (x86)\asus\asus smart gesture\astpcenter\x64\asussgplusbtserver64.exe] => (Allow) C:\program files (x86)\asus\asus smart gesture\astpcenter\x64\asussgplusbtserver64.exe FirewallRules: [UDP Query User{AE6C1F83-F37C-4B27-9C0D-0B12F9DF2E2F}C:\program files (x86)\asus\asus smart gesture\astpcenter\x64\asussgplusbtserver64.exe] => (Allow) C:\program files (x86)\asus\asus smart gesture\astpcenter\x64\asussgplusbtserver64.exe FirewallRules: [TCP Query User{54B24C9F-3C8E-435F-AAA8-A668E49CEF9F}C:\program files (x86)\asus\asus smart gesture\astpcenter\x64\asussgplusbtserver64.exe] => (Allow) C:\program files (x86)\asus\asus smart gesture\astpcenter\x64\asussgplusbtserver64.exe FirewallRules: [UDP Query User{D1CBAB58-3D53-41AE-924D-BB55B2388E6A}C:\program files (x86)\asus\asus smart gesture\astpcenter\x64\asussgplusbtserver64.exe] => (Allow) C:\program files (x86)\asus\asus smart gesture\astpcenter\x64\asussgplusbtserver64.exe FirewallRules: [TCP Query User{10377BF5-3573-4004-8BCE-0418BDB381D1}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [UDP Query User{3DC556FD-80D6-4EC7-A71F-25C4B1A9C3C3}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [{9B879860-18B2-4C3A-A5D1-DECFC638F329}] => (Allow) C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe FirewallRules: [{24C5E710-FBC6-4920-88E5-61DE2A63364D}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Herstelpunten ========================= 19-11-2017 23:01:50 Windows Update 29-11-2017 20:27:54 Windows Update 06-12-2017 09:18:36 F-Secure Ultralight updated 14-12-2017 22:30:24 Windows Update 30-12-2017 18:26:12 Restore Point Created by FRST ==================== Defecte Apparaatbeheer Apparaten ============= Name: Photosmart B110 series Description: Photosmart B110 series Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318} Manufacturer: HP Service: Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Eventlog fouten: ========================= Applicatiefouten: ================== Error: (01/03/2018 01:15:51 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: LAPTOP-ANJA) Description: Het activeren van de app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 is mislukt door de fout -2147009284. Kijk in het logboek Microsoft-Windows-TWinUI/Operational voor aanvullende informatie. Error: (01/03/2018 01:15:51 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: LAPTOP-ANJA) Description: Het activeren van de app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 is mislukt door de fout -2147009284. Kijk in het logboek Microsoft-Windows-TWinUI/Operational voor aanvullende informatie. Error: (01/03/2018 01:15:46 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: LAPTOP-ANJA) Description: Het activeren van de app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 is mislukt door de fout -2147009284. Kijk in het logboek Microsoft-Windows-TWinUI/Operational voor aanvullende informatie. Error: (01/03/2018 01:15:46 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: LAPTOP-ANJA) Description: Het activeren van de app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 is mislukt door de fout -2147009284. Kijk in het logboek Microsoft-Windows-TWinUI/Operational voor aanvullende informatie. Error: (01/03/2018 01:15:46 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: LAPTOP-ANJA) Description: Het activeren van de app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 is mislukt door de fout -2147009284. Kijk in het logboek Microsoft-Windows-TWinUI/Operational voor aanvullende informatie. Error: (01/03/2018 01:15:46 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: LAPTOP-ANJA) Description: Het activeren van de app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 is mislukt door de fout -2147009284. Kijk in het logboek Microsoft-Windows-TWinUI/Operational voor aanvullende informatie. Error: (01/03/2018 01:15:46 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: LAPTOP-ANJA) Description: Het activeren van de app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 is mislukt door de fout -2147009284. Kijk in het logboek Microsoft-Windows-TWinUI/Operational voor aanvullende informatie. Error: (01/03/2018 01:15:46 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: LAPTOP-ANJA) Description: Het activeren van de app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 is mislukt door de fout -2147009284. Kijk in het logboek Microsoft-Windows-TWinUI/Operational voor aanvullende informatie. Error: (01/03/2018 12:59:47 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: LAPTOP-ANJA) Description: Het activeren van de app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 is mislukt door de fout -2147009284. Kijk in het logboek Microsoft-Windows-TWinUI/Operational voor aanvullende informatie. Error: (01/03/2018 12:59:27 PM) (Source: MsiInstaller) (EventID: 1002) (User: NT AUTHORITY) Description: Onverwachte of ontbrekende waarde (naam: PackageCode, waarde: GUID) in sleutel HKLM\Software\Classes\Installer\Products\B476F94747628E7478C965620AB6A219 Systeemfouten: ============= Error: (01/03/2018 01:15:46 PM) (Source: DCOM) (EventID: 10001) (User: LAPTOP-ANJA) Description: Kan DCOM Server Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.4 niet starten als Niet beschikbaar/Niet beschikbaar. Foutmelding "15612" is opgetreden bij het uitvoeren van de opdracht "BackgroundTransferHost.exe" -ServerName:BackgroundTransferHost.4 Error: (01/03/2018 01:15:46 PM) (Source: DCOM) (EventID: 10001) (User: LAPTOP-ANJA) Description: Kan DCOM Server Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mca niet starten als Niet beschikbaar/Niet beschikbaar. Foutmelding "15612" is opgetreden bij het uitvoeren van de opdracht "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server Error: (01/03/2018 01:15:41 PM) (Source: DCOM) (EventID: 10001) (User: LAPTOP-ANJA) Description: Kan DCOM Server Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mca niet starten als Niet beschikbaar/Niet beschikbaar. Foutmelding "15612" is opgetreden bij het uitvoeren van de opdracht "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server Error: (01/03/2018 01:15:41 PM) (Source: DCOM) (EventID: 10001) (User: LAPTOP-ANJA) Description: Kan DCOM Server Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mca niet starten als Niet beschikbaar/Niet beschikbaar. Foutmelding "15612" is opgetreden bij het uitvoeren van de opdracht "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server Error: (01/03/2018 01:15:41 PM) (Source: DCOM) (EventID: 10001) (User: LAPTOP-ANJA) Description: Kan DCOM Server Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mca niet starten als Niet beschikbaar/Niet beschikbaar. Foutmelding "15612" is opgetreden bij het uitvoeren van de opdracht "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server Error: (01/03/2018 01:15:41 PM) (Source: DCOM) (EventID: 10001) (User: LAPTOP-ANJA) Description: Kan DCOM Server Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mca niet starten als Niet beschikbaar/Niet beschikbaar. Foutmelding "15612" is opgetreden bij het uitvoeren van de opdracht "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server Error: (01/03/2018 01:15:41 PM) (Source: DCOM) (EventID: 10001) (User: LAPTOP-ANJA) Description: Kan DCOM Server Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mca niet starten als Niet beschikbaar/Niet beschikbaar. Foutmelding "15612" is opgetreden bij het uitvoeren van de opdracht "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server Error: (01/03/2018 01:15:41 PM) (Source: DCOM) (EventID: 10001) (User: LAPTOP-ANJA) Description: Kan DCOM Server Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.4 niet starten als Niet beschikbaar/Niet beschikbaar. Foutmelding "15612" is opgetreden bij het uitvoeren van de opdracht "BackgroundTransferHost.exe" -ServerName:BackgroundTransferHost.4 Error: (01/03/2018 12:59:42 PM) (Source: DCOM) (EventID: 10001) (User: LAPTOP-ANJA) Description: Kan DCOM Server Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mca niet starten als Niet beschikbaar/Niet beschikbaar. Foutmelding "15612" is opgetreden bij het uitvoeren van de opdracht "C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server Error: (01/03/2018 12:53:40 PM) (Source: DCOM) (EventID: 10001) (User: LAPTOP-ANJA) Description: Kan DCOM Server Windows.Networking.BackgroundTransfer.Internal.NetworkChangeTask.ClassId.4 niet starten als Niet beschikbaar/Niet beschikbaar. Foutmelding "15612" is opgetreden bij het uitvoeren van de opdracht "BackgroundTransferHost.exe" -ServerName:BackgroundTransferHost.4 ==================== Geheugen info =========================== Processor: Intel(R) Core(TM) i3-4010U CPU @ 1.70GHz Percentage geheugen in gebruik: 37% Totaal fysiek RAM-geheugen: 6027.79 MB Beschikbaar fysiek RAM-geheugen: 3770.67 MB Totaal Virtueel geheugen: 7115.79 MB Beschikbaar Virtual geheugen: 4246.59 MB ==================== Schijven ================================ Drive c: (OS) (Fixed) (Total:186.3 GB) (Free:37.91 GB) NTFS ==>[systeem met boot componenten (verkregen van schijf)] Drive d: (Data) (Fixed) (Total:258.35 GB) (Free:21.15 GB) NTFS ==================== MBR & Partitietabel ================== ======================================================== Disk: 0 (Size: 465.8 GB) (Disk ID: C8CE1D8C) Partition: GPT. ==================== Eind van Addition.txt ============================