Scanresultaten van Farbar Recovery Scan Tool (FRST) (x86) Versie: 04.03.2018 Gestart door Herman (Beheerder) op HERMAN-PC (07-03-2018 09:01:00) Gestart vanaf C:\Users\Herman\Desktop Geladen Profielen: Herman & UpdatusUser (Beschikbare Profielen: Herman & UpdatusUser) Platform: Microsoft Windows 7 Professional Service Pack 1 (X86) Taal: Nederlands (Nederland) Internet Explorer Versie 11 (Standaardbrowser: FF) Boot Modus: Normal Handleiding voor Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processen (gefilterd) ================= (Als een item is opgenomen in de fixlist, het proces zal worden gesloten. Het bestand zal niet worden verplaatst.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe (RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\realplay.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE (Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe ==================== Register (gefilterd) =========================== (Als een item is opgenomen in de fixlist, zal het registeritem worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.) HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation) HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [947176 2012-09-12] (Microsoft Corporation) HKLM\...\Run: [RealTray] => C:\Program Files\Real\RealPlayer\RealPlay.exe [20480 2013-02-26] (RealNetworks, Inc.) HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKU\S-1-5-21-1719932567-3506215398-4039828936-1000\...\Run: [OfficeSyncProcess] => C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE [718720 2010-12-21] (Microsoft Corporation) HKU\S-1-5-21-1719932567-3506215398-4039828936-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [7347928 2017-02-08] (Piriform Ltd) HKU\S-1-5-21-1719932567-3506215398-4039828936-1000\...\Policies\system: [LogonHoursAction] 2 HKU\S-1-5-21-1719932567-3506215398-4039828936-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1 HKU\S-1-5-21-1719932567-3506215398-4039828936-1000\...\Policies\Explorer: [NolowDiskSpaceChecks] 1 HKU\S-1-5-21-1719932567-3506215398-4039828936-1000\...\MountPoints2: {4e522c00-3945-11e3-a9f2-00508dd7d7ac} - G:\NokiaPCIA_Autorun.exe Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ScanButton 3.0.lnk [2015-06-14] ShortcutTarget: ScanButton 3.0.lnk -> C:\Program Files\ScanButton 3.0\ScanButton.exe () GroupPolicyUsers\S-1-5-21-1719932567-3506215398-4039828936-1001\User: Restrictie <==== AANDACHT CHR HKLM\SOFTWARE\Policies\Google: Restrictie <==== AANDACHT ==================== Internet (gefilterd) ==================== (Als een item is opgenomen in de fixlist, zal een registeritem worden verwijderd of hersteld naar de standaard waarde.) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Tcpip\Parameters: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{0AA030CB-B696-4D1C-85E1-8AB6B8F6005A}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{0AA030CB-B696-4D1C-85E1-8AB6B8F6005A}: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{e29ac6c2-7037-11de-816d-806e6f6e6963}: [NameServer] 8.8.8.8 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com HKU\S-1-5-21-1719932567-3506215398-4039828936-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE SearchScopes: HKLM -> DefaultScope {BB82DE59-BC4C-4172-9AC4-73315F71CFFE} URL = SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-1719932567-3506215398-4039828936-1000 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE SearchScopes: HKU\S-1-5-21-1719932567-3506215398-4039828936-1000 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2017-02-22] (Skype Technologies) StartMenuInternet: IEXPLORE.EXE - iexplore.exe FireFox: ======== FF DefaultProfile: xra4e0s8.default-1484383517766-1516961131163 FF ProfilePath: C:\Users\Herman\AppData\Roaming\Mozilla\Firefox\Profiles\xra4e0s8.default-1484383517766-1516961131163 [2018-03-07] FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_28_0_0_161.dll [2018-02-06] () FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1212152.dll [2014-05-30] (Adobe Systems, Inc.) FF Plugin: @microsoft.com/GENUINE -> disabled [Geen bestand] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll [2014-02-13] ( Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-02-11] (Adobe Systems Inc.) Chrome: ======= CHR DefaultProfile: Default CHR HomePage: Default -> hxxp://www.google.com/ CHR StartupUrls: Default -> "hxxp://www.google.com/" CHR Profile: C:\Users\Herman\AppData\Local\Google\Chrome\User Data\Default [2018-02-19] CHR Extension: (Google Documenten) - C:\Users\Herman\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-04-07] CHR Extension: (Google Drive) - C:\Users\Herman\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-04-07] CHR Extension: (YouTube) - C:\Users\Herman\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-04-07] CHR Extension: (Google Spreadsheets) - C:\Users\Herman\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-04-07] CHR Extension: (Offline Documenten) - C:\Users\Herman\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-04-07] CHR Extension: (Skype) - C:\Users\Herman\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2017-04-07] CHR Extension: (Gmail) - C:\Users\Herman\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-04-07] CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx ==================== Services (gefilterd) ==================== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [20472 2012-09-12] (Microsoft Corporation) R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [287824 2012-09-12] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation) ===================== Drivers (gefilterd) ====================== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) R1 HWiNFO32; C:\Windows\system32\drivers\HWiNFO32.SYS [23840 2016-05-23] (REALiX(tm)) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [193552 2012-08-30] (Microsoft Corporation) R1 MpKslcd2355d6; C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{A917B217-75E7-4CB4-BDC7-582FC501413D}\MpKslcd2355d6.sys [49504 2018-03-07] (Microsoft Corporation) S3 QCMerced; C:\Windows\System32\DRIVERS\LVCM.sys [37888 2002-06-10] (Logitech Inc.) R0 SI3132; C:\Windows\System32\DRIVERS\SI3132.sys [80424 2007-10-03] (Silicon Image, Inc) R0 SiFilter; C:\Windows\System32\DRIVERS\SiWinAcc.sys [19240 2007-10-03] (Silicon Image, Inc) R0 SiRemFil; C:\Windows\System32\DRIVERS\SiRemFil.sys [15400 2007-10-03] (Silicon Image, Inc) S3 pccsmcfd; system32\DRIVERS\pccsmcfd.sys [X] ==================== NetSvcs (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) ==================== Een Maand Gemaakt bestanden en mappen ======== (Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.) 2018-03-07 09:01 - 2018-03-07 09:04 - 000009965 _____ C:\Users\Herman\Desktop\FRST.txt 2018-03-07 08:58 - 2018-03-07 08:58 - 000000000 ____D C:\Users\Herman\Desktop\FRST-OlderVersion 2018-03-06 09:38 - 2018-03-06 09:38 - 000107008 _____ C:\Users\Herman\Documents\Onkostennota.xls 2018-03-02 11:28 - 2018-03-02 11:28 - 000393707 _____ C:\Users\Herman\Downloads\Onlinefact_kassa_handleiding_nl.pdf 2018-03-02 11:26 - 2018-03-02 11:27 - 000713587 _____ C:\Users\Herman\Downloads\Onlinefact_handleiding_nl.pdf 2018-03-02 11:20 - 2018-03-02 15:29 - 000165934 _____ C:\Users\Herman\Documents\1.xlsx 2018-02-26 14:56 - 2018-02-26 14:56 - 195227217 _____ C:\Windows\MEMORY.DMP 2018-02-26 14:56 - 2018-02-26 14:56 - 000153496 _____ C:\Windows\Minidump\022618-28718-01.dmp 2018-02-26 14:47 - 2018-02-26 14:49 - 000025811 _____ C:\Users\Herman\Downloads\Addition.txt 2018-02-26 14:44 - 2018-02-26 14:49 - 000030481 _____ C:\Users\Herman\Downloads\FRST.txt 2018-02-26 14:44 - 2018-02-26 14:44 - 000000000 ____D C:\Users\Herman\Downloads\FRST-OlderVersion 2018-02-26 14:43 - 2018-03-07 09:01 - 000000000 ____D C:\FRST 2018-02-23 09:38 - 2018-03-01 12:56 - 000170346 _____ C:\Users\Herman\Documents\LADIMEE ACTUEEL FINANCIEEL PLAN 2018.xlsx 2018-02-20 11:46 - 2018-03-07 08:58 - 001763328 _____ (Farbar) C:\Users\Herman\Desktop\FRST.exe 2018-02-17 09:17 - 2018-02-17 09:18 - 000000000 ____D C:\Users\Herman\Documents\Kassa Systemen Ladimee 2018-02-14 09:32 - 2018-01-22 00:42 - 000117480 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe 2018-02-14 09:32 - 2018-01-22 00:20 - 000533504 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2018-02-14 09:32 - 2018-01-19 15:05 - 001893888 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe 2018-02-14 09:32 - 2018-01-19 15:05 - 001314304 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2018-02-14 09:32 - 2018-01-19 15:05 - 000594944 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2018-02-14 09:32 - 2018-01-19 15:05 - 000508416 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2018-02-14 09:32 - 2018-01-19 15:05 - 000337920 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll 2018-02-14 09:32 - 2018-01-19 15:05 - 000311808 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2018-02-14 09:32 - 2018-01-19 15:05 - 000212992 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2018-02-14 09:32 - 2018-01-19 15:05 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll 2018-02-14 09:21 - 2018-02-10 20:03 - 000347296 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2018-02-14 09:21 - 2018-02-10 07:20 - 020274176 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2018-02-14 09:21 - 2018-02-10 07:08 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2018-02-14 09:21 - 2018-02-10 07:07 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2018-02-14 09:21 - 2018-02-10 06:57 - 000499712 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2018-02-14 09:21 - 2018-02-10 06:57 - 000341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2018-02-14 09:21 - 2018-02-10 06:57 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2018-02-14 09:21 - 2018-02-10 06:57 - 000047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2018-02-14 09:21 - 2018-02-10 06:56 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2018-02-14 09:21 - 2018-02-10 06:54 - 002294272 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2018-02-14 09:21 - 2018-02-10 06:52 - 000047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2018-02-14 09:21 - 2018-02-10 06:51 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2018-02-14 09:21 - 2018-02-10 06:50 - 000476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2018-02-14 09:21 - 2018-02-10 06:49 - 000662528 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2018-02-14 09:21 - 2018-02-10 06:49 - 000620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2018-02-14 09:21 - 2018-02-10 06:49 - 000115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2018-02-14 09:21 - 2018-02-10 06:49 - 000104960 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2018-02-14 09:21 - 2018-02-10 06:45 - 000668160 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2018-02-14 09:21 - 2018-02-10 06:42 - 000416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2018-02-14 09:21 - 2018-02-10 06:39 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2018-02-14 09:21 - 2018-02-10 06:38 - 000091136 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2018-02-14 09:21 - 2018-02-10 06:38 - 000073216 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2018-02-14 09:21 - 2018-02-10 06:36 - 000168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2018-02-14 09:21 - 2018-02-10 06:35 - 004498944 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2018-02-14 09:21 - 2018-02-10 06:35 - 000279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2018-02-14 09:21 - 2018-02-10 06:35 - 000076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2018-02-14 09:21 - 2018-02-10 06:34 - 000130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2018-02-14 09:21 - 2018-02-10 06:33 - 013680640 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2018-02-14 09:21 - 2018-02-10 06:29 - 000230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2018-02-14 09:21 - 2018-02-10 06:27 - 002058752 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2018-02-14 09:21 - 2018-02-10 06:27 - 000694784 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2018-02-14 09:21 - 2018-02-10 06:27 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2018-02-14 09:21 - 2018-02-10 06:26 - 001155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2018-02-14 09:21 - 2018-02-10 06:14 - 002767872 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2018-02-14 09:21 - 2018-02-10 06:10 - 001314304 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2018-02-14 09:21 - 2018-02-10 06:08 - 000710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2018-02-14 09:21 - 2018-01-12 17:29 - 004014312 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2018-02-14 09:21 - 2018-01-12 17:29 - 003959016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2018-02-14 09:21 - 2018-01-12 17:29 - 001309928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2018-02-14 09:21 - 2018-01-12 17:29 - 000250600 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys 2018-02-14 09:21 - 2018-01-12 17:29 - 000240872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2018-02-14 09:21 - 2018-01-12 17:29 - 000187624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS 2018-02-14 09:21 - 2018-01-12 17:29 - 000137960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2018-02-14 09:21 - 2018-01-12 17:29 - 000067304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2018-02-14 09:21 - 2018-01-12 17:27 - 001310528 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2018-02-14 09:21 - 2018-01-12 17:26 - 001062912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2018-02-14 09:21 - 2018-01-12 17:26 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2018-02-14 09:21 - 2018-01-12 17:26 - 000655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2018-02-14 09:21 - 2018-01-12 17:26 - 000644096 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2018-02-14 09:21 - 2018-01-12 17:26 - 000554496 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2018-02-14 09:21 - 2018-01-12 17:26 - 000400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2018-02-14 09:21 - 2018-01-12 17:26 - 000363520 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll 2018-02-14 09:21 - 2018-01-12 17:26 - 000261120 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2018-02-14 09:21 - 2018-01-12 17:26 - 000254464 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2018-02-14 09:21 - 2018-01-12 17:26 - 000223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2018-02-14 09:21 - 2018-01-12 17:26 - 000172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2018-02-14 09:21 - 2018-01-12 17:26 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2018-02-14 09:21 - 2018-01-12 17:26 - 000141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2018-02-14 09:21 - 2018-01-12 17:26 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2018-02-14 09:21 - 2018-01-12 17:26 - 000082432 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll 2018-02-14 09:21 - 2018-01-12 17:26 - 000065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2018-02-14 09:21 - 2018-01-12 17:26 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2018-02-14 09:21 - 2018-01-12 17:26 - 000050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2018-02-14 09:21 - 2018-01-12 17:26 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2018-02-14 09:21 - 2018-01-12 17:26 - 000043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2018-02-14 09:21 - 2018-01-12 17:26 - 000038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2018-02-14 09:21 - 2018-01-12 17:26 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2018-02-14 09:21 - 2018-01-12 17:26 - 000017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2018-02-14 09:21 - 2018-01-12 17:26 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2018-02-14 09:21 - 2018-01-12 17:16 - 003405824 _____ (Microsoft Corporation) C:\Windows\system32\xpsrchvw.exe 2018-02-14 09:21 - 2018-01-12 17:05 - 000055808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys 2018-02-14 09:21 - 2018-01-12 17:05 - 000025728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys 2018-02-14 09:21 - 2018-01-12 17:05 - 000024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidusb.sys 2018-02-14 09:21 - 2018-01-12 17:02 - 000097792 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2018-02-14 09:21 - 2018-01-12 17:02 - 000050688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2018-02-14 09:21 - 2018-01-12 17:02 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2018-02-14 09:21 - 2018-01-12 17:02 - 000029696 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2018-02-14 09:21 - 2018-01-12 17:02 - 000016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2018-02-14 09:21 - 2018-01-12 16:59 - 000262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2018-02-14 09:21 - 2018-01-12 16:57 - 000226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2018-02-14 09:21 - 2018-01-12 16:57 - 000124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2018-02-14 09:21 - 2018-01-12 16:57 - 000098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2018-02-14 09:21 - 2018-01-12 16:57 - 000036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2018-02-14 09:21 - 2018-01-12 16:56 - 000069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2018-02-14 09:21 - 2018-01-12 16:56 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2018-02-14 09:21 - 2018-01-12 16:56 - 000015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2018-02-14 09:21 - 2018-01-11 17:22 - 000805376 _____ (Microsoft Corporation) C:\Windows\system32\cdosys.dll 2018-02-14 09:21 - 2018-01-11 17:01 - 002403328 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2018-02-14 09:21 - 2018-01-05 17:14 - 000309480 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll 2018-02-14 09:21 - 2018-01-05 17:11 - 000111104 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll 2018-02-14 09:21 - 2018-01-05 17:11 - 000071168 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll 2018-02-14 09:21 - 2018-01-05 17:11 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll 2018-02-14 09:21 - 2018-01-05 17:11 - 000010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll 2018-02-14 09:21 - 2018-01-05 16:50 - 000034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll 2018-02-14 09:21 - 2017-12-05 18:08 - 001176576 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll 2018-02-14 09:21 - 2017-12-05 18:08 - 000179200 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll 2018-02-14 09:21 - 2017-12-05 18:08 - 000145920 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll 2018-02-14 09:21 - 2017-12-05 18:08 - 000135168 _____ (Microsoft Corporation) C:\Windows\system32\WinSCard.dll 2018-02-14 09:21 - 2017-12-05 18:08 - 000106496 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll 2018-02-14 09:21 - 2017-12-05 18:08 - 000072704 _____ (Microsoft Corporation) C:\Windows\system32\TabSvc.dll 2018-02-14 09:21 - 2017-12-05 16:54 - 000334848 _____ (Microsoft Corporation) C:\Windows\system32\wisptis.exe 2018-02-11 08:12 - 2018-02-10 10:58 - 000035376 _____ C:\Users\Herman\Documents\Prijzen schilderijen.xlsx 2018-02-06 11:46 - 2018-02-22 16:20 - 000172188 _____ C:\Users\Herman\Documents\LADIMEE NIEUW FINANCIEEL PLAN 2018.xlsx ==================== Een Maand Gewijzigd bestanden en mappen ======== (Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.) 2018-03-07 08:51 - 2016-11-19 07:58 - 000000000 ____D C:\Users\Herman\AppData\LocalLow\Mozilla 2018-03-07 08:42 - 2009-07-14 05:34 - 000031312 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2018-03-07 08:42 - 2009-07-14 05:34 - 000031312 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2018-03-07 08:28 - 2013-02-26 18:06 - 000000000 ____D C:\Users\Herman\Documents\Outlook-bestanden 2018-03-07 08:26 - 2009-07-14 05:53 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2018-03-06 09:36 - 2018-01-16 11:12 - 000390420 _____ C:\Users\Herman\Documents\Stocklijst - TEST 2018.xlsx 2018-03-06 09:36 - 2018-01-09 08:22 - 001124352 _____ C:\Users\Herman\Documents\VK-prijsberekening Ladimee 2018.xls 2018-03-05 12:00 - 2018-01-09 08:20 - 000053762 _____ C:\Users\Herman\Documents\Kasboek 2018.xlsx 2018-03-05 10:39 - 2016-03-03 11:07 - 000046592 _____ C:\Users\Herman\Documents\Prijzen kaartjes.xls 2018-03-03 12:56 - 2013-02-26 16:44 - 000000000 ____D C:\Users\UpdatusUser 2018-03-03 08:13 - 2009-07-14 03:37 - 000000000 ____D C:\Windows\inf 2018-03-02 09:48 - 2013-02-26 19:20 - 000000000 ____D C:\BENELUX BRIEF FACT. PARAAF LOGO 2018-03-02 09:22 - 2013-02-26 19:20 - 000000000 ____D C:\WAEYEN HERMAN ZAKELIJK DIVERSEN 2018-03-02 09:20 - 2013-02-26 19:20 - 000000000 ____D C:\WAEYEN HERMAN PRIVE 2018-02-28 12:10 - 2013-02-26 19:24 - 000000000 ____D C:\LADÎMÉE DIVERSEN 2018-02-28 11:07 - 2013-02-26 19:22 - 000000000 ____D C:\LADIMEE WINKEL JULIE ZAKELIJK 2018-02-28 11:06 - 2013-02-26 19:24 - 000000000 ____D C:\LADIMEE PROMOTIE, WEBSITE & WEBWINKEL 2018-02-26 14:56 - 2013-04-05 08:19 - 000000000 ____D C:\Windows\Minidump 2018-02-26 13:48 - 2015-09-11 14:17 - 000000000 ____D C:\LADÎMEE NIEUWJAAR & KERSTSHOWS 2018-02-26 13:25 - 2018-02-02 16:08 - 000000000 ____D C:\Users\Herman\Documents\Zenito Sociaal Statuut 2018-02-26 11:40 - 2013-02-26 16:38 - 000002491 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Safari.lnk 2018-02-26 11:40 - 2013-02-26 16:38 - 000002479 _____ C:\Users\Public\Desktop\Safari.lnk 2018-02-26 09:57 - 2015-11-08 07:56 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2018-02-25 11:49 - 2013-02-26 19:21 - 000000000 ____D C:\BENELUX STERN WILLIAM & MARCEL KUMPS 2018-02-22 13:08 - 2015-12-13 08:38 - 000000000 ____D C:\Various Files 2018-02-21 18:16 - 2017-03-18 09:06 - 000007168 ___SH C:\Users\Herman\Downloads\Thumbs.db 2018-02-21 09:31 - 2014-08-25 10:01 - 000000000 ____D C:\BENELUX CONSULT VARIOUS 2018-02-20 13:20 - 2010-11-21 00:57 - 000697072 _____ C:\Windows\system32\perfh013.dat 2018-02-20 13:20 - 2010-11-21 00:57 - 000143522 _____ C:\Windows\system32\perfc013.dat 2018-02-20 13:20 - 2010-11-20 22:01 - 001626876 _____ C:\Windows\system32\PerfStringBackup.INI 2018-02-15 14:33 - 2009-07-14 03:37 - 000000000 ____D C:\Windows\rescache 2018-02-15 11:01 - 2009-07-14 05:33 - 000426664 _____ C:\Windows\system32\FNTCACHE.DAT 2018-02-14 23:48 - 2016-12-29 09:43 - 000000000 ____D C:\Windows\system32\appraiser 2018-02-14 18:09 - 2013-08-15 14:17 - 000000000 ____D C:\Windows\system32\MRT 2018-02-14 18:04 - 2017-10-11 08:48 - 127229528 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe 2018-02-14 18:04 - 2013-02-26 17:14 - 127229528 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe 2018-02-12 09:11 - 2017-08-17 09:16 - 000000000 ____D C:\Program Files\Mozilla Firefox 2018-02-12 09:11 - 2013-12-02 10:50 - 000000000 ____D C:\Program Files\Mozilla Maintenance Service 2018-02-11 08:52 - 2017-11-09 11:42 - 005844480 _____ C:\Users\Herman\Documents\factuur Philippe Van Cauwelaert.xls 2018-02-09 09:03 - 2009-07-14 05:53 - 000032622 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2018-02-06 11:42 - 2013-02-26 16:16 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2018-02-06 11:42 - 2013-02-26 16:16 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2018-02-06 11:42 - 2013-02-26 16:16 - 000000000 ____D C:\Windows\system32\Macromed 2018-02-05 17:21 - 2018-02-04 09:22 - 000011445 _____ C:\Users\Herman\Documents\Medicatie 2018.xlsx ==================== Bestanden in de root van sommige mappen ======= 2015-05-06 06:23 - 2015-07-18 17:38 - 000000079 _____ () C:\Program Files\prefs.js 2013-05-17 13:03 - 2013-05-17 13:04 - 001237920 _____ (Viber Media Inc) C:\Program Files\ViberSetup.exe 2015-07-04 16:03 - 2015-07-29 07:28 - 000000020 _____ () C:\Users\Herman\AppData\Roaming\appdataFr2.bin 2015-11-25 08:17 - 2015-11-25 08:17 - 000021202 _____ () C:\Users\Herman\AppData\Roaming\ICSW_0D1F2W1G1I1F1T1Q0A1B2Z1C1F1V0P0P0CtJ1V0N1F1C2Z1F1GtAyCtD.txt 2015-11-25 08:17 - 2015-11-25 08:17 - 000035232 _____ () C:\Users\Herman\AppData\Roaming\ICSW_0D1F2W1G1I1F1T1Q0A1B2Z1C1F1V0P0P0CtJ1V0O1E1P1C1T1V0I0C.txt 2015-11-25 08:20 - 2015-11-25 08:20 - 000017796 _____ () C:\Users\Herman\AppData\Roaming\ICSW_0D1F2W1G1I1F1T1Q0A1B2Z1C1F1V0P0P0CtJ1V0R1P1T1R1M0I2Z.txt 2015-11-25 08:17 - 2015-11-25 08:17 - 000021360 _____ () C:\Users\Herman\AppData\Roaming\ICSW_0D1F2W1G1I1F1T1Q0A1B2Z1C1F1V0P0P0CtJ1V0S1M1T1C1P1V1L2Z.txt 2014-01-30 16:33 - 2014-01-30 18:25 - 000002247 _____ () C:\Users\Herman\AppData\Roaming\LiveSupport.exe_log.txt 2014-01-30 16:33 - 2014-01-30 18:26 - 000000086 _____ () C:\Users\Herman\AppData\Roaming\regsvr32.exe_log.txt 2016-02-20 16:24 - 2016-02-20 16:24 - 000004608 _____ () C:\Users\Herman\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2015-06-29 14:59 - 2015-06-29 14:59 - 000000000 _____ () C:\Users\Herman\AppData\Local\Temp.dat ==================== Bamital & volsnap ====================== (Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.) C:\Windows\explorer.exe => Bestand is getekend C:\Windows\system32\winlogon.exe => Bestand is getekend C:\Windows\system32\wininit.exe => Bestand is getekend C:\Windows\system32\svchost.exe => Bestand is getekend C:\Windows\system32\services.exe => Bestand is getekend C:\Windows\system32\User32.dll => Bestand is getekend C:\Windows\system32\userinit.exe => Bestand is getekend C:\Windows\system32\rpcss.dll => Bestand is getekend C:\Windows\system32\dnsapi.dll => Bestand is getekend C:\Windows\system32\Drivers\volsnap.sys => Bestand is getekend LastRegBack: 2018-02-28 14:06 ==================== Eind van FRST.txt ============================