Scanresultaten van Farbar Recovery Scan Tool (FRST) (x86) Versie: 24.02.2018
Gestart door Freddy (Beheerder) op FREDDY-PC (27-02-2018 12:49:10)
Gestart vanaf C:\Users\Freddy\Desktop
Geladen Profielen: Freddy (Beschikbare Profielen: Freddy)
Platform: Microsoft Windows 7 Home Premium  Service Pack 1 (X86) Taal: Nederlands (Nederland)
Internet Explorer Versie 11 (Standaardbrowser: Chrome)
Boot Modus: Normal
Handleiding voor Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processen (gefilterd) =================

(Als een item is opgenomen in de fixlist, het proces zal worden gesloten. Het bestand zal niet worden verplaatst.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Nalpeiron Ltd.) C:\Windows\System32\ASTSRV.EXE
(Microsoft Corporation) C:\Program Files\IIS\Microsoft Web Deploy\MsDepSvc.exe
(arvato digital services llc) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Malwarebytes) D:\programma's\Anti-Malware\MBAMService.exe
(Malwarebytes) D:\programma's\Anti-Malware\mbamtray.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(IncrediMail, Ltd.) C:\Program Files\IncrediMail\Bin\IncMail.exe
(IncrediMail, Ltd.) C:\Program Files\IncrediMail\Bin\ImApp.exe

==================== Register (gefilterd) ===========================

(Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.)

HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1002984 2016-11-14] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [16553472 2018-01-26] (Realtek Semiconductor)
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKU\S-1-5-21-2722087631-2739211218-2328691201-1000\...\Run: [Google Update] => C:\Users\Freddy\AppData\Local\Google\Update\1.3.33.7\GoogleUpdateCore.exe [601680 2017-11-15] (Google Inc.)
HKU\S-1-5-21-2722087631-2739211218-2328691201-1000\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => C:\Program Files\Garmin\Express Tray\ExpressTray.exe [1421736 2017-03-28] (Garmin Ltd. or its subsidiaries)
Startup: C:\Users\Freddy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Schermopname en Snel starten.lnk [2012-05-22]
ShortcutTarget: OneNote 2007 Schermopname en Snel starten.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (gefilterd) ====================

(Als een item is opgenomen in de fixlist, als het een registry item is wordt verwijderd of hersteld naar de standaard.)

Winsock: Catalog5 01 C:\Windows\system32\mswsock.dll [231424 2016-05-11] (Microsoft Corporation) AANDACHT: LibraryPath moet worden "%SystemRoot%\system32\NLAapi.dll"
Tcpip\Parameters: [DhcpNameServer] 195.130.130.5 195.130.131.5
Tcpip\..\Interfaces\{1BF33513-2B71-48C2-8779-0A9F9E5B3044}: [DhcpNameServer] 195.130.130.5 195.130.131.5

Internet Explorer:
==================
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2722087631-2739211218-2328691201-1000 -> DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={1D90ED55-8516-483A-A3BE-4EFB4AF5CFCB}&mid=c35f534cbead47d3ae33d16e48f4d1ae-208908c81689afb2d6d2d02c13a48fc4c74c35d3&lang=en&ds=AVG&coid=avgtbavg&cmpid=0516tb&pr=fr&d=2014-11-06 06:57:17&v=4.3.5.160&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2722087631-2739211218-2328691201-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={1D90ED55-8516-483A-A3BE-4EFB4AF5CFCB}&mid=c35f534cbead47d3ae33d16e48f4d1ae-208908c81689afb2d6d2d02c13a48fc4c74c35d3&lang=en&ds=AVG&coid=avgtbavg&cmpid=0516tb&pr=fr&d=2014-11-06 06:57:17&v=4.3.5.160&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2722087631-2739211218-2328691201-1000 -> {CF50F78B-7B72-49E2-9893-84747A42CB90} URL = hxxp://www.google.com/search?q={searchTerms}
BHO: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files\AVG Web TuneUp\4.3.6.255\AVG Web TuneUp.dll => Geen bestand
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_67-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0067-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_67-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_67-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation)
Handler: skype4com - Geen CLSID Waarde - 

FireFox:
========
FF HKLM\...\Firefox\Extensions: [belgiumeid@eid.belgium.be] - C:\Program Files\Mozilla Firefox\extensions\belgiumeid@eid.belgium.be
FF Extension: (Belgium eID) - C:\Program Files\Mozilla Firefox\extensions\belgiumeid@eid.belgium.be [2017-04-25] [Verouderd]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_28_0_0_161.dll [2018-02-06] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll [2009-10-29] (Adobe Systems, Inc.)
FF Plugin: @microsoft.com/GENUINE -> disabled [Geen bestand]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=6.0.11.3088 -> C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll [2007-12-21] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.11.3006 -> C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll [2007-12-21] (RealNetworks, Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-02-11] (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2012-09-20] (Adobe Systems)
FF Plugin HKU\S-1-5-21-2722087631-2739211218-2328691201-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Freddy\AppData\Local\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-15] (Google Inc.)
FF Plugin HKU\S-1-5-21-2722087631-2739211218-2328691201-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Freddy\AppData\Local\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-15] (Google Inc.)

Chrome: 
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://google.be/
CHR StartupUrls: Default -> "hxxp://www.google.be/"
CHR NewTab: Default ->  Not-active:"chrome-extension://lhlflcpjmbmnhfehipheboagibdjgmog/page/app/index.html"
CHR Profile: C:\Users\Freddy\AppData\Local\Google\Chrome\User Data\Default [2018-02-27]
CHR Extension: (Presentaties) - C:\Users\Freddy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
CHR Extension: (Documenten) - C:\Users\Freddy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Google Drive) - C:\Users\Freddy\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-12-26]
CHR Extension: (YouTube) - C:\Users\Freddy\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (Tetris) - C:\Users\Freddy\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfpkpcnigdggonhlcmbekffepnaflofk [2013-05-18]
CHR Extension: (Search by Image (by Google)) - C:\Users\Freddy\AppData\Local\Google\Chrome\User Data\Default\Extensions\dajedkncpodkggklbegccjpmnglmnflm [2016-10-20]
CHR Extension: (Weerplaza) - C:\Users\Freddy\AppData\Local\Google\Chrome\User Data\Default\Extensions\djakjaebiehcbcjclfgifnhipfcobpaa [2017-06-07]
CHR Extension: (Google+) - C:\Users\Freddy\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlppkpafhbajpcmmoheippocdidnckmm [2015-12-10]
CHR Extension: (Weer) - C:\Users\Freddy\AppData\Local\Google\Chrome\User Data\Default\Extensions\fapbbpdnlcmiolkdfjnnjhabmcndadad [2015-01-11]
CHR Extension: (Edit Page) - C:\Users\Freddy\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbggnpgfdacbgdkodjmhlgoippiebhhh [2017-03-14]
CHR Extension: (Spreadsheets) - C:\Users\Freddy\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (Offline Documenten) - C:\Users\Freddy\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-12-27]
CHR Extension: (Geavanceerde startpagina) - C:\Users\Freddy\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhlflcpjmbmnhfehipheboagibdjgmog [2015-07-21]
CHR Extension: (Betalingen via Chrome Web Store) - C:\Users\Freddy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
CHR Extension: (Type Fu (hosted)) - C:\Users\Freddy\AppData\Local\Google\Chrome\User Data\Default\Extensions\okboeogmnhjpgbeaokfogelclpblaemo [2014-08-28]
CHR Extension: (20-20 3D Viewer for IKEA) - C:\Users\Freddy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfhldcakmgpmglboaclpfdedehjblalp [2014-12-16]
CHR Extension: (Gmail) - C:\Users\Freddy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR Extension: (Chrome Media Router) - C:\Users\Freddy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-02-07]
CHR HKLM\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx <niet gevonden>
CHR HKLM\...\Chrome\Extension: [okmhneofinpilciglijihehjpaegledb] - <geen Path/update_url>
StartMenuInternet: Google Chrome - C:\Users\Freddy\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (gefilterd) ====================

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

R2 astcc; C:\Windows\system32\astsrv.exe [57344 2008-05-19] (Nalpeiron Ltd.) [Bestand niet getekend]
S2 ASTSRV; C:\Windows\system32\ASTSRV.EXE [57344 2008-05-19] (Nalpeiron Ltd.) [Bestand niet getekend]
S3 Garmin Device Interaction Service; C:\Program Files\Garmin\Device Interaction Service\GarminService.exe [1099280 2017-03-28] (Garmin Ltd. or its subsidiaries)
S3 HPSupportSolutionsFrameworkService; C:\Program Files\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [332144 2017-11-21] (HP Inc.)
R2 MBAMService; D:\programma's\Anti-Malware\mbamservice.exe [4563920 2017-11-01] (Malwarebytes)
R2 MsDepSvc; C:\Program Files\IIS\Microsoft Web Deploy\MsDepSvc.exe [80472 2012-09-06] (Microsoft Corporation)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [103696 2016-11-14] (Microsoft Corporation)
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [280864 2016-11-14] (Microsoft Corporation)
S3 nlsX86cc; C:\Windows\system32\nlssrv32.exe [66560 2011-09-22] (Nalpeiron Ltd.) [Bestand niet getekend]
R2 PSI_SVC_2; C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [277360 2014-04-30] (arvato digital services llc)
S3 StarWindServiceAE; C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software) [Bestand niet getekend]
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [10351856 2016-12-15] (TeamViewer GmbH)
S2 SDUpdateService; "C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe" [X]

===================== Drivers (gefilterd) ======================

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

R3 AmUStor; C:\Windows\System32\drivers\AmUStor.SYS [75200 2018-01-26] (Alcorlink Corp.)
R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [42784 2014-11-06] (AVG Technologies)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae.sys [59896 2017-11-29] ()
R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO32.SYS [23840 2015-09-16] (REALiX(tm))
S3 KMWDFILTERx86; C:\Windows\System32\DRIVERS\KMWDFILTER.sys [25088 2009-04-29] (Windows (R) Codename Longhorn DDK provider)
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [168376 2018-02-15] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [91576 2018-02-27] (Malwarebytes)
R3 MBAMProtection; C:\Windows\System32\DRIVERS\mbam.sys [40376 2018-02-27] (Malwarebytes)
R0 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [221112 2018-02-15] (Malwarebytes)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [252808 2016-08-25] (Microsoft Corporation)
S3 prwntdrv; C:\Windows\system32\prwntdrv.sys [15456 2014-10-23] () [Bestand niet getekend]
R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [17160 2015-03-05] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [13064 2015-03-05] ()
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [477240 2012-10-28] (Duplex Secure Ltd.)
U3 a5557btf; geen ImagePath

==================== NetSvcs (gefilterd) ===================

(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)


==================== Een Maand Gemaakt bestanden en mappen ========

(Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)

2018-02-27 12:49 - 2018-02-27 12:49 - 000014788 _____ C:\Users\Freddy\Desktop\FRST.txt
2018-02-27 11:20 - 2018-02-27 11:20 - 000000000 ____D C:\ProgramData\Spybot - Search & Destroy
2018-02-27 11:13 - 2018-02-27 11:26 - 000026060 _____ C:\Users\Freddy\Desktop\Fixlog.txt
2018-02-27 11:05 - 2018-02-27 11:04 - 001763328 _____ (Farbar) C:\Users\Freddy\Desktop\FRST.exe
2018-02-27 10:36 - 2018-02-27 10:59 - 000000000 ____D C:\AVG_Remover
2018-02-26 21:39 - 2018-02-27 12:49 - 000000000 ____D C:\FRST
2018-02-26 16:58 - 2018-02-26 16:58 - 000000717 _____ C:\Users\Freddy\Desktop\TreeSize Free.lnk
2018-02-26 16:58 - 2018-02-26 16:58 - 000000000 ____D C:\Users\Freddy\AppData\Roaming\JAM Software
2018-02-21 22:59 - 2018-02-21 22:59 - 000000000 ____D C:\Users\Freddy\AppData\Roaming\DivX
2018-02-20 23:29 - 2018-02-20 23:29 - 002428706 _____ C:\Users\Freddy\Desktop\Image1.psp
2018-02-17 09:08 - 2018-02-17 09:08 - 000001867 _____ C:\Users\Public\Desktop\Defraggler.lnk
2018-02-17 09:08 - 2018-02-17 09:08 - 000000000 ____D C:\Program Files\Defraggler
2018-02-17 08:57 - 2018-02-27 11:21 - 000091576 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2018-02-16 17:50 - 2018-02-16 18:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileViewPro
2018-02-16 17:50 - 2018-02-16 18:00 - 000000000 ____D C:\Program Files\FileViewPro
2018-02-16 17:49 - 2018-02-16 17:49 - 000000000 ____D C:\Spacekace
2018-02-15 20:38 - 2018-02-15 21:21 - 000000000 ____D C:\AdwCleaner
2018-02-15 20:13 - 2018-02-27 11:21 - 000040376 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2018-02-15 20:13 - 2018-02-15 20:13 - 000221112 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2018-02-15 20:13 - 2018-02-15 20:13 - 000168376 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2018-02-15 20:12 - 2018-02-15 20:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2018-02-15 20:12 - 2018-02-15 20:12 - 000000000 ____D C:\ProgramData\Malwarebytes
2018-02-15 20:12 - 2017-11-29 09:11 - 000059896 _____ C:\Windows\system32\Drivers\mbae.sys
2018-02-15 18:01 - 2018-02-15 18:01 - 000000024 _____ C:\Users\Freddy\Desktop\magda.txt
2018-02-14 13:06 - 2018-01-22 00:42 - 000117480 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2018-02-14 13:06 - 2018-01-22 00:20 - 000533504 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2018-02-14 13:06 - 2018-01-19 15:05 - 001893888 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2018-02-14 13:06 - 2018-01-19 15:05 - 001314304 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2018-02-14 13:06 - 2018-01-19 15:05 - 000594944 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2018-02-14 13:06 - 2018-01-19 15:05 - 000508416 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2018-02-14 13:06 - 2018-01-19 15:05 - 000337920 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2018-02-14 13:06 - 2018-01-19 15:05 - 000311808 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2018-02-14 13:06 - 2018-01-19 15:05 - 000212992 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2018-02-14 13:06 - 2018-01-19 15:05 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2018-02-14 13:05 - 2018-02-10 20:03 - 000347296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2018-02-14 13:05 - 2018-02-10 07:20 - 020274176 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2018-02-14 13:05 - 2018-02-10 07:08 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2018-02-14 13:05 - 2018-02-10 07:07 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2018-02-14 13:05 - 2018-02-10 06:57 - 000499712 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2018-02-14 13:05 - 2018-02-10 06:57 - 000341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2018-02-14 13:05 - 2018-02-10 06:57 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2018-02-14 13:05 - 2018-02-10 06:57 - 000047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2018-02-14 13:05 - 2018-02-10 06:56 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2018-02-14 13:05 - 2018-02-10 06:54 - 002294272 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2018-02-14 13:05 - 2018-02-10 06:52 - 000047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2018-02-14 13:05 - 2018-02-10 06:51 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2018-02-14 13:05 - 2018-02-10 06:50 - 000476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2018-02-14 13:05 - 2018-02-10 06:49 - 000662528 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2018-02-14 13:05 - 2018-02-10 06:49 - 000620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2018-02-14 13:05 - 2018-02-10 06:49 - 000115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2018-02-14 13:05 - 2018-02-10 06:49 - 000104960 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2018-02-14 13:05 - 2018-02-10 06:45 - 000668160 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2018-02-14 13:05 - 2018-02-10 06:42 - 000416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2018-02-14 13:05 - 2018-02-10 06:39 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2018-02-14 13:05 - 2018-02-10 06:38 - 000091136 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2018-02-14 13:05 - 2018-02-10 06:38 - 000073216 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2018-02-14 13:05 - 2018-02-10 06:36 - 000168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2018-02-14 13:05 - 2018-02-10 06:35 - 004498944 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2018-02-14 13:05 - 2018-02-10 06:35 - 000279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2018-02-14 13:05 - 2018-02-10 06:35 - 000076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2018-02-14 13:05 - 2018-02-10 06:34 - 000130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2018-02-14 13:05 - 2018-02-10 06:33 - 013680640 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2018-02-14 13:05 - 2018-02-10 06:29 - 000230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2018-02-14 13:05 - 2018-02-10 06:27 - 002058752 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2018-02-14 13:05 - 2018-02-10 06:27 - 000694784 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2018-02-14 13:05 - 2018-02-10 06:27 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2018-02-14 13:05 - 2018-02-10 06:26 - 001155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2018-02-14 13:05 - 2018-02-10 06:14 - 002767872 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2018-02-14 13:05 - 2018-02-10 06:10 - 001314304 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2018-02-14 13:05 - 2018-02-10 06:08 - 000710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2018-02-14 13:05 - 2018-01-12 17:29 - 004014312 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2018-02-14 13:05 - 2018-01-12 17:29 - 003959016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2018-02-14 13:05 - 2018-01-12 17:29 - 001309928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2018-02-14 13:05 - 2018-01-12 17:29 - 000250600 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2018-02-14 13:05 - 2018-01-12 17:29 - 000240872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2018-02-14 13:05 - 2018-01-12 17:29 - 000187624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2018-02-14 13:05 - 2018-01-12 17:29 - 000137960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2018-02-14 13:05 - 2018-01-12 17:29 - 000067304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2018-02-14 13:05 - 2018-01-12 17:27 - 001310528 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2018-02-14 13:05 - 2018-01-12 17:26 - 001062912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2018-02-14 13:05 - 2018-01-12 17:26 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2018-02-14 13:05 - 2018-01-12 17:26 - 000655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2018-02-14 13:05 - 2018-01-12 17:26 - 000644096 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2018-02-14 13:05 - 2018-01-12 17:26 - 000554496 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2018-02-14 13:05 - 2018-01-12 17:26 - 000400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2018-02-14 13:05 - 2018-01-12 17:26 - 000363520 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2018-02-14 13:05 - 2018-01-12 17:26 - 000261120 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2018-02-14 13:05 - 2018-01-12 17:26 - 000254464 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2018-02-14 13:05 - 2018-01-12 17:26 - 000223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2018-02-14 13:05 - 2018-01-12 17:26 - 000172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2018-02-14 13:05 - 2018-01-12 17:26 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2018-02-14 13:05 - 2018-01-12 17:26 - 000141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2018-02-14 13:05 - 2018-01-12 17:26 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2018-02-14 13:05 - 2018-01-12 17:26 - 000082432 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2018-02-14 13:05 - 2018-01-12 17:26 - 000065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2018-02-14 13:05 - 2018-01-12 17:26 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2018-02-14 13:05 - 2018-01-12 17:26 - 000050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2018-02-14 13:05 - 2018-01-12 17:26 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2018-02-14 13:05 - 2018-01-12 17:26 - 000043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2018-02-14 13:05 - 2018-01-12 17:26 - 000038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2018-02-14 13:05 - 2018-01-12 17:26 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2018-02-14 13:05 - 2018-01-12 17:26 - 000017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2018-02-14 13:05 - 2018-01-12 17:26 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2018-02-14 13:05 - 2018-01-12 17:16 - 003405824 _____ (Microsoft Corporation) C:\Windows\system32\xpsrchvw.exe
2018-02-14 13:05 - 2018-01-12 17:05 - 000055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2018-02-14 13:05 - 2018-01-12 17:05 - 000025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2018-02-14 13:05 - 2018-01-12 17:05 - 000024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys
2018-02-14 13:05 - 2018-01-12 17:02 - 000097792 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2018-02-14 13:05 - 2018-01-12 17:02 - 000050688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2018-02-14 13:05 - 2018-01-12 17:02 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2018-02-14 13:05 - 2018-01-12 17:02 - 000029696 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2018-02-14 13:05 - 2018-01-12 17:02 - 000016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2018-02-14 13:05 - 2018-01-12 16:59 - 000262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2018-02-14 13:05 - 2018-01-12 16:57 - 000226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2018-02-14 13:05 - 2018-01-12 16:57 - 000124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2018-02-14 13:05 - 2018-01-12 16:57 - 000098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2018-02-14 13:05 - 2018-01-12 16:57 - 000036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2018-02-14 13:05 - 2018-01-12 16:56 - 000069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2018-02-14 13:05 - 2018-01-12 16:56 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2018-02-14 13:05 - 2018-01-12 16:56 - 000015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2018-02-14 13:05 - 2018-01-11 17:22 - 000805376 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll
2018-02-14 13:05 - 2018-01-11 17:01 - 002403328 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2018-02-14 13:05 - 2018-01-05 17:14 - 000309480 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2018-02-14 13:05 - 2018-01-05 17:11 - 000111104 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2018-02-14 13:05 - 2018-01-05 17:11 - 000071168 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2018-02-14 13:05 - 2018-01-05 17:11 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2018-02-14 13:05 - 2018-01-05 17:11 - 000010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2018-02-14 13:05 - 2018-01-05 16:50 - 000034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2018-02-06 21:30 - 2018-02-06 21:30 - 000000000 ____D C:\Users\Freddy\AppData\Roaming\Windows Live Writer

==================== Een Maand Gewijzigd bestanden en mappen ========

(Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)

2018-02-27 11:29 - 2009-07-14 05:34 - 000015008 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-02-27 11:29 - 2009-07-14 05:34 - 000015008 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-02-27 11:23 - 2018-01-26 05:12 - 000793050 _____ C:\Windows\ntbtlog.txt
2018-02-27 11:21 - 2013-05-14 14:40 - 000000008 __RSH C:\Users\Freddy\ntuser.pol
2018-02-27 11:21 - 2010-01-09 20:45 - 000000000 ____D C:\Users\Freddy
2018-02-27 11:20 - 2009-07-14 05:53 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-02-27 11:14 - 2009-07-14 03:37 - 000000000 ___HD C:\Windows\system32\GroupPolicy
2018-02-27 10:19 - 2012-05-17 13:21 - 000000000 ____D C:\Program Files\Java
2018-02-27 10:12 - 2015-07-01 07:46 - 000000000 ____D C:\Program Files\Common Files\AV
2018-02-27 10:12 - 2013-06-08 17:10 - 000000000 ____D C:\ProgramData\MFAData
2018-02-27 10:04 - 2016-12-26 16:47 - 000000000 ____D C:\Users\Freddy\AppData\Local\AvgSetupLog
2018-02-27 10:04 - 2015-11-16 11:03 - 000000000 ____D C:\ProgramData\Avg
2018-02-27 09:56 - 2014-07-09 09:24 - 000000000 ____D C:\Users\Freddy\AppData\Local\Adobe
2018-02-26 18:37 - 2012-09-06 18:24 - 000000000 ____D C:\Users\Freddy\AppData\Roaming\Garmin
2018-02-25 23:12 - 2018-01-27 23:13 - 000000000 ___HD C:\Users\Freddy\Desktop\Corel Automatisch behouden
2018-02-25 17:25 - 2017-11-05 10:55 - 000000000 ____D C:\Users\Freddy\AppData\Local\CrashDumps
2018-02-25 09:34 - 2017-01-16 20:27 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2018-02-21 09:25 - 2013-03-25 20:21 - 000000000 ____D C:\Users\Freddy\Desktop\opkuis
2018-02-18 10:00 - 2017-12-17 16:21 - 000000000 ____D C:\Program Files\Recuva
2018-02-17 13:28 - 2012-05-25 22:00 - 000000000 ____D C:\Users\Freddy\AppData\Roaming\FileZilla
2018-02-17 09:30 - 2012-10-01 20:58 - 000000000 ____D C:\Program Files\Adobe
2018-02-16 23:03 - 2010-01-09 20:47 - 001748286 _____ C:\Windows\system32\PerfStringBackup.INI
2018-02-16 23:03 - 2009-07-14 09:27 - 000766254 _____ C:\Windows\system32\perfh013.dat
2018-02-16 23:03 - 2009-07-14 09:27 - 000162080 _____ C:\Windows\system32\perfc013.dat
2018-02-16 23:02 - 2009-07-14 03:37 - 000000000 ____D C:\Windows\inf
2018-02-16 21:30 - 2014-11-06 07:01 - 000000000 ____D C:\ProgramData\ProductData
2018-02-16 08:49 - 2009-07-14 03:37 - 000000000 ____D C:\Windows\rescache
2018-02-15 21:45 - 2010-01-09 22:02 - 000000000 ___HD C:\Program Files\InstallShield Installation Information
2018-02-15 12:36 - 2009-07-14 05:33 - 000428656 _____ C:\Windows\system32\FNTCACHE.DAT
2018-02-15 12:33 - 2017-03-16 06:52 - 000000000 ____D C:\Windows\system32\appraiser
2018-02-14 22:42 - 2017-03-08 23:08 - 000000000 ____D C:\Windows\system32\MRT
2018-02-14 22:37 - 2017-10-11 23:34 - 127229528 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
2018-02-14 22:37 - 2010-01-09 22:16 - 127229528 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2018-02-14 22:35 - 2009-07-14 03:04 - 000000659 _____ C:\Windows\win.ini
2018-02-14 13:39 - 2012-05-17 14:17 - 000002431 _____ C:\Users\Freddy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-02-13 02:07 - 2012-09-06 17:35 - 000000000 ____D C:\Garmin
2018-02-06 20:12 - 2012-05-18 15:35 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2018-02-06 20:12 - 2012-05-18 15:35 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2018-02-06 20:12 - 2010-01-09 21:16 - 000000000 ____D C:\Windows\system32\Macromed
2018-01-29 17:06 - 2012-08-20 22:57 - 000044032 _____ C:\Users\Freddy\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

==================== Bestanden in de root van sommige mappen =======

2016-06-13 11:11 - 2016-06-13 11:11 - 002663550 _____ () C:\Program Files\RoadbookMaker_01.bmp
2016-06-13 11:11 - 2016-06-13 11:11 - 002663550 _____ () C:\Program Files\RoadbookMaker_02.bmp
2013-03-10 20:57 - 2013-03-10 20:57 - 000000136 _____ () C:\Users\Freddy\AppData\Roaming\.ptbt0
2014-04-20 18:23 - 2017-03-21 20:24 - 000087608 _____ () C:\Users\Freddy\AppData\Roaming\inst.exe
2014-04-20 18:23 - 2017-03-21 20:24 - 000007887 _____ () C:\Users\Freddy\AppData\Roaming\pcouffin.cat
2014-04-20 18:23 - 2017-03-21 20:24 - 000001144 _____ () C:\Users\Freddy\AppData\Roaming\pcouffin.inf
2014-04-20 18:23 - 2017-03-21 20:24 - 000000055 _____ () C:\Users\Freddy\AppData\Roaming\pcouffin.log
2014-04-20 18:23 - 2017-03-21 20:24 - 000047360 _____ (VSO Software) C:\Users\Freddy\AppData\Roaming\pcouffin.sys
2016-09-07 08:41 - 2016-09-07 08:43 - 000000467 _____ () C:\Users\Freddy\AppData\Roaming\RTWtool.dat
2012-05-17 20:48 - 2012-05-17 20:48 - 000033134 _____ () C:\Users\Freddy\AppData\Roaming\UserTile.png
2014-09-16 15:22 - 2014-09-16 15:23 - 000000034 _____ () C:\Users\Freddy\AppData\Roaming\Microsoft\{785BCC09-7768-6AAB-C12C-9B3E8520FF52}
2012-11-22 20:19 - 2012-11-22 20:30 - 000947565 _____ () C:\Users\Freddy\AppData\Local\census.cache
2012-08-20 22:57 - 2018-01-29 17:06 - 000044032 _____ () C:\Users\Freddy\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2012-11-22 20:10 - 2012-11-22 20:10 - 000000036 _____ () C:\Users\Freddy\AppData\Local\housecall.guid.cache
2013-03-12 16:14 - 2013-03-12 16:14 - 000002839 _____ () C:\Users\Freddy\AppData\Local\recently-used.xbel
2015-07-24 12:36 - 2015-07-24 12:36 - 000000017 _____ () C:\Users\Freddy\AppData\Local\resmon.resmoncfg

==================== Bamital & volsnap ======================

(Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.)

C:\Windows\explorer.exe => Bestand is getekend
C:\Windows\system32\winlogon.exe => Bestand is getekend
C:\Windows\system32\wininit.exe => Bestand is getekend
C:\Windows\system32\svchost.exe => Bestand is getekend
C:\Windows\system32\services.exe => Bestand is getekend
C:\Windows\system32\User32.dll => Bestand is getekend
C:\Windows\system32\userinit.exe => Bestand is getekend
C:\Windows\system32\rpcss.dll => Bestand is getekend
C:\Windows\system32\dnsapi.dll => Bestand is getekend
C:\Windows\system32\Drivers\volsnap.sys => Bestand is getekend

LastRegBack: 2018-02-27 12:35

==================== Eind van FRST.txt ============================