Extra scanresultaten van Farbar Recovery Scan Tool (x86) Versie: 14.03.2018 Gestart door Bert (01-04-2018 13:12:59) Gestart vanaf C:\Users\Bert\Desktop\FRST Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) (2008-08-26 08:07:27) Boot Modus: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-1928288486-2430286864-780397381-500 - Administrator - Disabled) Bert (S-1-5-21-1928288486-2430286864-780397381-1000 - Administrator - Enabled) => C:\Users\Bert Gast (S-1-5-21-1928288486-2430286864-780397381-501 - Limited - Enabled) ==================== Security Center ======================== (Als een item is opgenomen in de fixlist, zal het worden verwijderd.) AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Geïnstalleerde programma's ====================== (Alleen de adware-programma's met 'verborgen' vlag kunnen worden toegevoegd aan de fixlist om ze zichtbaar te maken. De adware-programma's moeten handmatig gedeïnstalleerd worden.) µTorrent (HKU\S-1-5-21-1928288486-2430286864-780397381-1000\...\uTorrent) (Version: 3.4.5.41865 - BitTorrent Inc.) Active@ UNDELETE 11 (HKLM\...\{442F1486-F0A7-4F93-A9F2-575E2738E426}_is1) (Version: 11 - LSoft Technologies Inc) Addictive Drums (HKLM\...\Addictive Drums) (Version: - ) Adobe Flash Player 28 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 28.0.0.161 - Adobe Systems Incorporated) Adobe Flash Professional CS5.5 (HKLM\...\{23E445D5-FD83-4C50-A211-EB26A2975317}) (Version: 11.5 - Adobe Systems Incorporated) Adobe Illustrator CS6 (HKLM\...\{4869414E-7AEA-4C8E-BE1C-8D40977FD517}) (Version: 16.0 - Adobe Systems Incorporated) Adobe Reader XI (11.0.08) - Nederlands (HKLM\...\{AC76BA86-7AD7-1043-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated) AMD Catalyst Install Manager (HKLM\...\{B9BA9CC8-B0A2-00C8-780E-B82A066E48C6}) (Version: 8.0.873.0 - Advanced Micro Devices, Inc.) Ample Guitar G II version 2.5.0 (HKLM\...\{C5C4DE66-ACC5-4431-892B-A581516DF4DD}_is1) (Version: 2.5.0 - Ample Sound Technology Co., Ltd.) Apple Application Support (HKLM\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.) Apple Software Update (HKLM\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.) ASIO4ALL (HKLM\...\ASIO4ALL) (Version: 2.14 - Michael Tippach) Atomic Alarm Clock 6.25 (HKLM\...\Atomic Alarm Clock_is1) (Version: - Drive Software Company) Audacity 2.1.1 (HKLM\...\Audacity®_is1) (Version: 2.1.1 - Audacity Team) Basissoftware voor HP Deskjet 2050 J510 series (HKLM\...\{9139BEA4-1225-4436-B9B2-11D6AFB1E2AD}) (Version: 22.50.231.0 - Hewlett-Packard Co.) Billiard Deluxe (HKLM\...\{9D3F2178-133A-4C27-B9B6-21A27CBF47A8}) (Version: 1.0 - ) Cakewalk.Pro.Audio.9.03-TcC (HKLM\...\Cakewalk.Pro.Audio.9.03-TcC) (Version: - ) Cantabile Performer 2.0 (HKLM\...\Cantabile Performer 2.0) (Version: - Topten Software) CCleaner (HKLM\...\CCleaner) (Version: 5.15 - Piriform) Compatibiliteitspakket voor het 2007 Microsoft Office system (HKLM\...\{90120000-0020-0413-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) CuteFTP 9 (HKLM\...\{89B9E358-75C6-4C6B-BD38-803FF156CC4B}) (Version: 9.0.5 - Globalscape) CyberLink DVD Suite Deluxe (HKLM\...\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 5.5.1019 - CyberLink Corp.) Dart Karaoke Studio CDG (HKLM\...\{D20E73F6-FF41-4318-B23A-FB38FBDB14A4}_is1) (Version: - Dartech) Diagnostisch hulpprogramma voor hardware (HKLM\...\PC-Doctor 5 for Windows) (Version: 5.00.4589.14 - PC-Doctor, Inc.) dr.fone toolkit voor iOS (Version 8.0.0) (HKLM\...\{A26F8BBD-EC10-4bdc-8AD8-F146825A8A63}_is1) (Version: 8.0.0.45 - Wondershare Software Co.,Ltd.) Duplicate Cleaner Pro 3.2.5 (HKLM\...\Duplicate Cleaner Pro) (Version: 3.2.5 - DigitalVolcano Software Ltd) FileASSASSIN (HKLM\...\FileASSASSIN) (Version: 1.06 - Malwarebytes) Free M4a to MP3 Converter 9.1 (HKLM\...\Free M4a to MP3 Converter_is1) (Version: - ManiacTools.com) Google Update Helper (HKLM\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden Hewlett-Packard Active Check (HKLM\...\{254C37AA-6B72-4300-84F6-98A82419187E}) (Version: 1.1.11.0 - Hewlett-Packard) Hidden Hewlett-Packard Asset Agent for Health Check (HKLM\...\{669D4A35-146B-4314-89F1-1AC3D7B88367}) (Version: 2.0.62.5 - HP) Hidden High-Logic FontCreator 6.0 (HKLM\...\FontCreator6_is1) (Version: - High-Logic B.V.) HP Active Support Library (HKLM\...\{11BB336F-0E58-4977-B866-F24FA334616B}) (Version: 2.3.0.2 - Hewlett-Packard) HP Customer Experience Enhancements (HKLM\...\{AFAD41A9-9687-48A3-848F-693C11451433}) (Version: 5.4.0.2360 - Hewlett-Packard) HP Deskjet 2050 J510 series Haelp (HKLM\...\{7A3DF2E2-CF13-44FB-A93E-F71D5381DB3F}) (Version: 140.0.61.61 - Hewlett Packard) HP Easy Setup - Frontend (HKLM\...\{9885A11E-60E4-417C-B58B-8B31B21C0B8A}) (Version: 5.4.0.2430 - Hewlett-Packard) HP On-Screen Cap/Num/Scroll Lock Indicator (HKLM\...\OsdMaestro) (Version: - Hewlett-Packard) HP Photo Creations (HKLM\...\HP Photo Creations) (Version: 1.0.0.3781 - HP Photo Creations Powered by RocketLife) HP Update (HKLM\...\{B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}) (Version: 5.002.006.003 - Hewlett-Packard) HPDiagnosticAlert (HKLM\...\{B6465A32-8BE9-4B38-ADC5-4B4BDDC10B0D}) (Version: 1.00.0001 - Microsoft) Hidden ImgBurn (HKLM\...\ImgBurn) (Version: 2.4.4.0 - LIGHTNING UK!) Intel(R) Matrix Storage Manager (HKLM\...\{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}) (Version: - ) Interlok driver setup x32 (HKLM\...\{25613C10-27D2-410B-942B-D922D5C3A7BE}) (Version: 5.8.13 - PACE Anti-Piracy) IsoBuster 3.6 (HKLM\...\IsoBuster_is1) (Version: 3.6 - Smart Projects) Jasc Animation Shop 3 (HKLM\...\{7C4196CA-CA41-4F34-9C08-7724E7705D52}) (Version: 3.11 - Jasc Software Inc) Jasc Paint Shop Pro 9 (HKLM\...\{F843C6A3-224D-4615-94F8-3C461BD9AEA0}) (Version: 9.00.0000 - Jasc Software Inc) KaraFun Studio 1.10a (HKLM\...\KaraFun_is1) (Version: - ) KORG Legacy Collection - M1 (HKLM\...\{5918D632-2B35-4AF6-9314-03B9E842207B}) (Version: 1.7.0 - KORG Inc.) License Support (HKLM\...\{3165EA9B-36CC-499B-96FF-36FC30E10EF4}) (Version: 1.2.0.5555 - PACE Anti-Piracy, Inc.) Hidden License Support (HKLM\...\InstallShield_{3165EA9B-36CC-499B-96FF-36FC30E10EF4}) (Version: 1.2.0.5555 - PACE Anti-Piracy, Inc.) LightScribe System Software 1.10.16.1 (HKLM\...\{E6CFBFB5-9232-410C-B353-AF6E614B2681}) (Version: 1.10.16.1 - Uw bedrijfsnaam) LyricsTextScroller   (HKLM\...\LyricsTextScroller  ) (Version:   - LyricsTextScroller) Melodyne 3.2 (HKLM\...\{2E337869-756A-4E46-A936-0E67FE043A5E}) (Version: 3.2.0202 - Celemony Software GmbH) Hidden Melodyne 3.2 (HKLM\...\{A1F143D1-1F0D-44FB-A44B-71D4367D16DE}) (Version: 3.2.0202 - Celemony Software GmbH) Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation) Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation) Microsoft .NET Framework 4.5.2 (Nederlands) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1043) (Version: 4.5.51209 - Microsoft Corporation) Microsoft Office PowerPoint Viewer 2007 (Dutch) (HKLM\...\{95120000-00AF-0413-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50428.0 - Microsoft Corporation) Microsoft SQL Server Compact 3.5 Design Tools ENU (HKLM\...\{2E5C075E-11AB-4BDD-918C-7B9A68953FF8}) (Version: 3.5.5386.0 - Microsoft Corporation) Microsoft SQL Server Compact 3.5 ENU (HKLM\...\{BCC899FE-2DAA-460C-A5FB-60291E73D9C3}) (Version: 3.5.5386.0 - Microsoft Corporation) Microsoft Visual Basic 2008 Express Edition - ENU (HKLM\...\Microsoft Visual Basic 2008 Express Edition - ENU) (Version: - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86)) (Version: 10.0.50903 - Microsoft Corporation) Microsoft Windows SDK for Visual Studio 2008 Express Tools for .NET Framework (HKLM\...\{B4C0A315-07FB-39F9-85CD-8CE20C019350}) (Version: 3.5.21022 - Microsoft) Microsoft Windows SDK for Visual Studio 2008 Express Tools for Win32 (HKLM\...\{07FCBED5-94C3-4F94-B9D3-360FA27C7B06}) (Version: 6.1.5288.17011 - Microsoft Corporation) Microsoft Works (HKLM\...\{5158F1F5-FA1B-4D49-B546-55A5004B89BD}) (Version: 9.7.0621 - Microsoft Corporation) Movavi Screen Capture Studio 5 (HKLM\...\Movavi Screen Capture Studio 5) (Version: 5.0.0 - MOVAVI) Movavi Video Editor 4 (HKLM\...\{95B7C0F4-7434-4DFB-B900-201BFC00C00B}) (Version: 4.00.000 - MOVAVI) Movavi Video Editor 4.0.2 (HKLM\...\Movavi Video Editor 4.0.2) (Version: - ) Mozilla Firefox 52.7.3 ESR (x86 nl) (HKLM\...\Mozilla Firefox 52.7.3 ESR (x86 nl)) (Version: 52.7.3 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 52.7.3.6655 - Mozilla) MSVC80_x86_v2 (HKLM\...\{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}) (Version: 1.0.3.0 - Nokia) Hidden MSVC90_x86 (HKLM\...\{AF111648-99A1-453E-81DD-80DBBF6DAD0D}) (Version: 1.0.1.2 - Nokia) Hidden MSXML 4.0 SP2 (KB927978) (HKLM\...\{37477865-A3F1-4772-AD43-AAFC6BCFF99F}) (Version: 4.20.9841.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MuTechnologies MuVoice VST RTAS v1.3 (HKLM\...\MuTechnologies MuVoice VST RTAS_is1) (Version: - ) Native Instruments Controller Editor (HKLM\...\Native Instruments Controller Editor) (Version: - Native Instruments) Native Instruments Guitar Rig 4 (HKLM\...\Native Instruments Guitar Rig 4) (Version: - Native Instruments) Native Instruments GuitarRig Mobile IO Driver (HKLM\...\Native Instruments GuitarRig Mobile IO Driver) (Version: - Native Instruments) Native Instruments Rig Kontrol 3 Driver (HKLM\...\Native Instruments Rig Kontrol 3 Driver) (Version: - Native Instruments) Native Instruments Service Center (HKLM\...\Native Instruments Service Center) (Version: - Native Instruments) Native Instruments Session IO Driver (HKLM\...\Native Instruments Session IO Driver) (Version: - Native Instruments) PC Connectivity Solution (HKLM\...\{6D01D1B1-17BD-4F10-BB11-F08F0C47D42B}) (Version: 12.0.109.0 - Nokia) PC Wizard 2013.2.12 (HKLM\...\PC Wizard 2013_is1) (Version: - CPUID) PDF Settings CS5 (HKLM\...\{A78FE97A-C0C8-49CE-89D0-EDD524A17392}) (Version: 10.0 - Adobe Systems Incorporated) Hidden PDF Settings CS6 (HKLM\...\{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}) (Version: 11.0 - Adobe Systems Incorporated) Hidden PokerStars.eu (HKLM\...\PokerStars.eu) (Version: - PokerStars.eu) POP Peeper (HKLM\...\POP Peeper) (Version: - Esumsoft) Power2Go (HKLM\...\{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 5.6.3417 - CyberLink Corp.) PowerDirector (HKLM\...\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 6.5.2209 - CyberLink Corp.) Hidden PowerDirector (HKLM\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 6.5.2209 - CyberLink Corp.) Python 2.5 (HKLM\...\{0A2C5854-557E-48C8-835A-3B9F074BDCAA}) (Version: 2.5.150 - Martin v. Löwis) QuickTime 7 (HKLM\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.) Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5548 - Realtek Semiconductor Corp.) Recover Disc 2.0 (HKLM\...\{E217DFDD-C483-4736-821B-E3C10D21F67D}) (Version: 2.0 - SoftLogica) Recuva (HKLM\...\Recuva) (Version: 1.53 - Piriform) Remove Logo Now! 1.2 (HKLM\...\Remove Logo Now!_is1) (Version: 1.2 - SoftOrbits) SampleTron (HKLM\...\{81974750-D4B1-4690-B168-D31F9A599542}) (Version: 1.0.0 - IK Multimedia) Samsung Kies (HKLM\...\{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.5.3.13043_14 - Samsung Electronics Co., Ltd.) Hidden Samsung Kies (HKLM\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.5.3.13043_14 - Samsung Electronics Co., Ltd.) SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.23.0 - SAMSUNG Electronics Co., Ltd.) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) SONAR 7 Producer Edition (HKLM\...\SONAR7Producer_is1) (Version: 15.0 - Cakewalk Music Software) Sound Forge Pro 10.0 (HKLM\...\{3F9170C9-A7C2-408F-A4D8-EC77250040BF}) (Version: 10.0.368 - Sony) Speccy (HKLM\...\Speccy) (Version: 1.31 - Piriform) Spotify (HKU\S-1-5-21-1928288486-2430286864-780397381-1000\...\Spotify) (Version: 1.0.24.104.g92a22684 - Spotify AB) Spotnet (HKLM\...\{12947715-B6F0-4597-816F-5E13FB647921}_is1) (Version: 1.9.0.5 - Spotnet) SubSync (HKLM\...\ST6UNST #1) (Version: - ) Subtitle Workshop 2.51 (HKLM\...\SubtitleWorkshop) (Version: - ) Taalpakket voor Microsoft .NET Framework 3.5 SP1 - NL (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - nld) (Version: - Microsoft Corporation) Taalpakket voor Microsoft Visual Studio 2010 Tools for Office Runtime (x86) - NLD (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - NLD) (Version: 10.0.50903 - Microsoft Corporation) Trapcode Particular v2 (HKLM\...\Trapcode Particular v2) (Version: - ) VC Runtimes MSI (HKLM\...\{FF29527A-44CD-3422-945E-981A13584000}) (Version: 9.0.21022 - Microsoft) Hidden VirtualCloneDrive (HKLM\...\VirtualCloneDrive) (Version: 5.4.9.0 - Elaborate Bytes) Visual C++ Redistributables (HKLM\...\InstallShield_{F03117FA-9270-46B0-9666-0B4BC2CDEBF5}) (Version: 1.2.0.5555 - PACE Anti-Piracy, Inc.) Visual Studio 2012 x86 Redistributables (HKLM\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN) WhatsApp (HKU\S-1-5-21-1928288486-2430286864-780397381-1000\...\WhatsApp) (Version: 0.2.2245 - WhatsApp) Windows 7 Upgrade Advisor (HKLM\...\{0DC66F25-C58F-40d3-86BC-CA29C6D99BF8}) (Version: 2.0.5000.0 - Microsoft Corporation) Windows Installer Clean Up (HKLM\...\{121634B0-2F4B-11D3-ADA3-00C04F52DD52}) (Version: 3.00.00.0000 - Microsoft Corporation) WinPcap 4.1.2 (HKLM\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies) WinRAR 5.01 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH) WinZip 15.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240BE}) (Version: 15.0.9302 - WinZip Computing, S.L. ) Wondershare Filmora(Build 6.0.0) (HKLM\...\Wondershare Filmora_is1) (Version: - Wondershare Software) Wondershare Player(Build 1.0.2) (HKLM\...\Wondershare Player_is1) (Version: 1.0.2.1 - Wondershare) Wondershare TunesGo ( Version 9.2.0 ) (HKLM\...\{0B31C808-8274-460D-8846-C711D40544A0}_is1) (Version: 9.2.0 - Wondershare) Wondershare Video Converter Ultimate(Build 6.5.0.5) (HKLM\...\Wondershare Video Converter Ultimate_is1) (Version: 6.5.0.5 - Wondershare Software) WYSIWYG Web Builder 11 (HKLM\...\WYSIWYG_Web_Builder_11) (Version: - ) ==================== Aangepaste CLSID (gefilterd): ========================== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) ContextMenuHandlers1: [CuteFTP 9] -> {8f7261d0-d2b9-11d2-9909-00605205b24c} => C:\Program Files\Globalscape\CuteFTP\CuteShell.dll -> Geen bestand ContextMenuHandlers1: [CuteShellExt] -> {A09315EC-39D3-4ED3-B6A1-262DDC54A3C5} => C:\Program Files\Globalscape\CuteFTP\CuteShell.dll -> Geen bestand ContextMenuHandlers1: [VirtualCloneDrive] -> {B7056B8E-4F99-44f8-8CBD-282390FE5428} => C:\Program Files\Elaborate Bytes\VirtualCloneDrive\ElbyVCDShell.dll [2009-12-14] (Elaborate Bytes AG) ContextMenuHandlers1: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2013-12-01] (Alexander Roshal) ContextMenuHandlers1: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\WZSHLSTB.DLL [2010-10-29] (WinZip Computing, S.L.) ContextMenuHandlers1: [WondershareVideoConverterFileOpreation] -> {55D63393-DB17-4A2B-9052-15D85B4B1344} => C:\WINDOWS\System32\WSCM32.dll [2013-03-25] () ContextMenuHandlers1: [WSPlayerFileOpreation] -> {85BCF0D6-C4BE-4468-B227-FF4B4297E627} => C:\WINDOWS\System32\WPShellExt32.dll [2013-04-27] (Wondershare) ContextMenuHandlers2: [CuteFTP 9] -> {8f7261d0-d2b9-11d2-9909-00605205b24c} => C:\Program Files\Globalscape\CuteFTP\CuteShell.dll -> Geen bestand ContextMenuHandlers2: [CuteShellExt] -> {A09315EC-39D3-4ED3-B6A1-262DDC54A3C5} => C:\Program Files\Globalscape\CuteFTP\CuteShell.dll -> Geen bestand ContextMenuHandlers2: [VirtualCloneDrive] -> {B7056B8E-4F99-44f8-8CBD-282390FE5428} => C:\Program Files\Elaborate Bytes\VirtualCloneDrive\ElbyVCDShell.dll [2009-12-14] (Elaborate Bytes AG) ContextMenuHandlers3: [FAExt] -> {05672D66-9736-42F5-8BEB-FA1DD3CA51C4} => C:\Program Files\FileASSASSIN\FileASSASSINExt.dll [2007-03-31] (Malwarebytes) ContextMenuHandlers4: [CuteFTP 9] -> {8f7261d0-d2b9-11d2-9909-00605205b24c} => C:\Program Files\Globalscape\CuteFTP\CuteShell.dll -> Geen bestand ContextMenuHandlers4: [CuteShellExt] -> {A09315EC-39D3-4ED3-B6A1-262DDC54A3C5} => C:\Program Files\Globalscape\CuteFTP\CuteShell.dll -> Geen bestand ContextMenuHandlers4: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell.dll [2016-06-06] (Piriform Ltd) ContextMenuHandlers4: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\WZSHLSTB.DLL [2010-10-29] (WinZip Computing, S.L.) ContextMenuHandlers6: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell.dll [2016-06-06] (Piriform Ltd) ContextMenuHandlers6: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2013-12-01] (Alexander Roshal) ContextMenuHandlers6: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\WZSHLSTB.DLL [2010-10-29] (WinZip Computing, S.L.) FolderExtensions: [ShellFolder for CD Burning] -> {fbeb8a05-beee-4442-804e-409d6c4515e9} => C:\Users\Bert\AppData\Local\Omics\MediaGLInterval.dll -> Geen bestand ==================== Geplande Taken (gefilterd) ============= (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) Task: {23F0C2EF-6B47-4979-926E-6E1F83AAF090} - System32\Tasks\{F50CEDF6-7AE2-46DA-803A-7D6CC7B89C39} => C:\Users\Bert\AppData\Roaming\eiaoOe.exe [1617-11-26] (Microsoft Corporation) <==== AANDACHT Task: {388B647F-DCE1-4F18-B242-31A553D7EAD0} - System32\Tasks\{0C2C98D0-B75C-4D70-B677-ADEAE6E3A934} => C:\Users\Bert\vEVgXIoUKWO.exe [1617-11-26] (Microsoft Corporation) Task: {51A7EAF5-7F51-4105-8D3C-C9704FB5E561} - System32\Tasks\{B7C427C8-BF30-40CC-867E-8BE4F928A199} => C:\Windows\system32\pcalua.exe -a "M:\vsti plugins\Admiral.exe" -d "M:\vsti plugins" Task: {531CFD1B-7A21-4C85-A26D-E2410D61AB84} - System32\Tasks\{C6E7BC42-EA6D-4AA9-A91A-7D4F3F6630AE} => C:\Windows\system32\pcalua.exe -a "C:\Users\Bert\Desktop\NCH Switch Sound File Converter v4.17 Keygen.exe" -d C:\Users\Bert\Desktop Task: {56E3C35E-838D-4047-AD5C-75848224B714} - System32\Tasks\{456E952E-144D-4752-9B93-2FDCF4EE213E} => C:\Windows\system32\pcalua.exe -a "C:\Program Files\DART Karaoke Studio CDG\karbuild.exe" -d "C:\Program Files\DART Karaoke Studio CDG" Task: {76C68DD4-C100-4837-B046-C0C10365B1B5} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\VistaSP1CEIP => Command(1): C:\Windows\servicing\vsp1ceip.exe [2008-01-19] (Microsoft Corporation) Task: {7FA2767F-2A8C-4447-AAA0-D2DF1963C391} - System32\Tasks\RecoveryCD => C:\Program Files\Hewlett-Packard\SDP\RemEngine.exe [2007-09-05] () Task: {88C01A23-D407-4F50-ADCF-5C76D2096952} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe Task: {89585B01-1357-466F-868C-CC18689D6BCE} - System32\Tasks\{1EECE3E9-D2B8-4F4C-999B-8EF952FC584C} => C:\Windows\system32\pcalua.exe -a C:\Users\Bert\Downloads\NeoSetup.exe -d C:\Users\Bert\Downloads Task: {9D637D03-A30C-4985-B95C-9004E99EFEAB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-11-25] (Google Inc.) Task: {A5043CF5-760B-42A1-A5AE-AF8B5801FCEA} - System32\Tasks\{CAE129A8-1F59-4122-9648-04530505F2E4} => C:\Windows\system32\pcalua.exe -a "N:\vsti plugins\Lennardigital.Sylenth1.Halloween.Special.VSTi.v2.2\Lennardigital.Sylenth1.Halloween.Special.VSTi.v2.2.HALLOWEEN-peace-out\setup.exe" -d "N:\vsti plugins\Lennardigital.Sylenth1.Halloween.Special.VSTi.v2.2\Lennardigital.Sylenth1.Halloween.Special.VSTi.v2.2.HALLOWEEN-peace-out" Task: {A728AE6B-5AB8-4223-AD3E-E6341441A01C} - System32\Tasks\Microsoft\Windows\PLA\System\ConvertLogEntries => %windir%\system32\rundll32.exe %windir%\system32\pla.dll,PlaConvertLogEntries <==== AANDACHT Task: {AC725A6A-E233-4FF9-A626-57C23B5454FB} - System32\Tasks\AdobeAAMUpdater-1.0-PC_van_Bert-Bert => C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-04-04] (Adobe Systems Incorporated) Task: {AF154FA7-D103-4AA8-9503-09268EDA0443} - System32\Tasks\{A62993A3-9643-48FB-8073-F04418DF68B4} => C:\Windows\system32\pcalua.exe -a "C:\Program Files\Dart Karaoke\unins000.exe" Task: {B74356F8-466F-4422-96D0-13D6F0CFE47E} - System32\Tasks\849df5cb61850c07d009495969b24e01 => sc start 849df5cb61850c07d009495969b24e01 <==== AANDACHT Task: {BEFB3C9B-6C07-4674-A904-3718A7BB1210} - System32\Tasks\{CE5E373C-AB27-4A65-9134-B42F8DB9BC27} => C:\Windows\system32\pcalua.exe -a C:\PROGRA~1\ALCATech\BPM-ST~1\UNWISE.EXE -c C:\PROGRA~1\ALCATech\BPM-ST~1\INSTALL.LOG Task: {BFB59BD5-85FC-45E1-9CE3-544AB33A98C0} - System32\Tasks\Registration => C:\Program Files\Hewlett-Packard\SDP\RemEngine.exe [2007-09-05] () Task: {CEB84593-5D20-40AE-8C68-9BD473173B5A} - \NCH Software\switchShakeIcon -> Geen bestand <==== AANDACHT Task: {F2B43229-3BA8-4429-97D9-F39D0A801479} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-02-12] (Piriform Ltd) Task: {F660EC69-445F-487D-B081-68E84BF77A0A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-11-25] (Google Inc.) Task: {F6B09208-CF95-4BC8-82C8-76EF486C7AEF} - System32\Tasks\JavaUpdateAdministrator => C:\Windows\system32\jusched.exe Task: {FA7795FD-DD8D-4034-BDDF-7A8A8175F311} - System32\Tasks\PC-Doctor\Scheduled Maintanence => C:\Program Files\PC-Doctor 5 for Windows\RunProfiler.exe [2007-06-25] (PC-Doctor, Inc.) Task: {FACCF109-E598-4465-9E28-3648F1EFC6DC} - System32\Tasks\{3EF3BF60-5FE8-4913-9BDD-9753DE190B5E} => C:\Windows\system32\pcalua.exe -a "N:\vsti plugins\Lennardigital.Sylenth1.Halloween.Special.VSTi.v2.2\Lennardigital.Sylenth1.Halloween.Special.VSTi.v2.2.HALLOWEEN-peace-out\setup.exe" -d "N:\vsti plugins\Lennardigital.Sylenth1.Halloween.Special.VSTi.v2.2\Lennardigital.Sylenth1.Halloween.Special.VSTi.v2.2.HALLOWEEN-peace-out" Task: {FC307625-3F9E-484E-80AC-ED1582046768} - System32\Tasks\JavaUpdateBert => C:\Windows\system32\jusched.exe (Als een item is opgenomen in de fixlist, de taak (job) bestand wordt verplaatst. Het bestand dat wordt uitgevoerd door de taak zal niet worden verplaatst.) Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS\AutoKMS.exe ==================== Snelkoppelingen & WMI ======================== (De items kunnen worden opgenomen in de fixlist.txt om hersteld of verwijderd te worden.) Shortcut: C:\Users\Bert\Documents\Downloads\Favorites\NCH Software Download Site.lnk -> hxxp://www.nch.com.au/index.htm ==================== Geladen Modules (gefilterd) ============== 2013-09-05 00:14 - 2013-09-05 00:14 - 004300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2016-03-22 10:26 - 2014-01-14 14:13 - 001156096 _____ () C:\Program Files\Atomic Alarm Clock\Clock.dll 2016-03-27 14:37 - 2013-03-25 10:57 - 000153088 _____ () C:\WINDOWS\System32\WSCM32.dll 2012-04-06 03:09 - 2012-04-06 03:09 - 000037376 _____ () C:\Windows\system32\atitmpxx.dll 2014-08-28 22:23 - 2014-08-28 22:23 - 000142416 _____ () C:\Program Files\POP Peeper\zip.dll 2014-07-07 04:19 - 2014-07-07 04:19 - 000354896 _____ () C:\Program Files\POP Peeper\sqlite3.dll 2017-08-08 22:02 - 2012-03-07 02:37 - 000020288 _____ () C:\Program Files\CCleaner\branding.dll 2016-02-12 23:13 - 2016-02-12 23:13 - 000065536 _____ () C:\Program Files\CCleaner\lang\lang-1043.dll 2016-03-22 10:26 - 2013-04-24 19:20 - 002007040 _____ () C:\Program Files\Atomic Alarm Clock\timeserv.exe ==================== Alternate Data Streams (gefilterd) ========= (Als een item is opgenomen in de fixlist, alleen de ADS wordt verwijderd.) AlternateDataStreams: C:\ProgramData\Spotnet:spn.k [428] AlternateDataStreams: C:\ProgramData\TEMP:5D10C173 [123] AlternateDataStreams: C:\Users\Bert\AppData\Local\Temporary Internet Files:A1HvpYaYiPTGVOnPxcPx1 [2552] AlternateDataStreams: C:\Users\Bert\AppData\Local\V5vTWf0ryF:gv7wURmO6pxlkhWKI9TPmleV [2082] ==================== Veilige Modus (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. De "AlternateShell" waarde wordt hersteld.) ==================== Bestandskoppeling (gefilterd) =============== (Als een item is opgenomen in de fixlist, zal het registeritem worden teruggezet naar de standaardwaarden of verwijderd.) ==================== Internet Explorer vertrouwde/beperkte toegang =============== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd.) IE trusted site: HKU\S-1-5-21-1928288486-2430286864-780397381-1000\...\com -> hxxp://*.Wondershare.com ==================== Hosts Inhoud: ========================== (Als nodig Hosts: opdracht kan worden opgenomen in de fixlist om Hosts te resetten.) 2018-02-04 14:02 - 2018-03-11 01:34 - 000000130 ____R C:\Windows\system32\Drivers\etc\hosts 0.0.0.0 keystone.mwbsys.com 0.0.0.0 telemetry.malwarebytes.com ==================== Andere gebieden ============================ (Momenteel is er geen automatische fix voor dit onderdeel.) HKU\S-1-5-21-1928288486-2430286864-780397381-1000\Control Panel\Desktop\\Wallpaper -> DNS Servers: 8.8.8.8 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 1) (EnableLUA: 1) Windows Firewall is ingeschakeld. ==================== MSCONFIG/TASK MANAGER Uitgeschakelde items == MSCONFIG\startupreg: KiesPreload => C:\Program Files\Samsung\Kies\Kies.exe /preload MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Bert\AppData\Roaming\Spotify\SpotifyWebHelper.exe" MSCONFIG\startupreg: THIS IS WIIIGET! => C:\Program Files\Miped\QWiget\THIS IS WIIIGET!.exe MSCONFIG\startupreg: VirtualCloneDrive => "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s MSCONFIG\startupreg: Wondershare Helper Compact.exe => C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe ==================== Firewall regels (gefilterd) =============== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) FirewallRules: [WinCollab-DFSR-In-TCP] => (Allow) %SystemRoot%\system32\dfsr.exe FirewallRules: [WinCollab-DFSR-Out-TCP] => (Allow) %SystemRoot%\system32\dfsr.exe FirewallRules: [WinCollab-In-TCP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe FirewallRules: [WinCollab-Out-TCP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe FirewallRules: [WinCollab-In-UDP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe FirewallRules: [WinCollab-Out-UDP] => (Allow) %ProgramFiles%\Windows Collaboration\WinCollab.exe FirewallRules: [{BA15F781-B72E-4BA6-84C6-11A951C9C78A}] => (Allow) c:\Program Files\Cyberlink\PowerDirector\PDR.EXE FirewallRules: [{9787A252-A713-44B4-8AB0-33744221B751}] => (Allow) C:\Program Files\uTorrent\utorrent.exe FirewallRules: [{F37A052A-A622-415B-8C50-54E655B81A41}] => (Allow) C:\Program Files\uTorrent\utorrent.exe FirewallRules: [{780AD3B6-914C-4774-B384-67738146B859}] => (Allow) LPort=80 FirewallRules: [{889691F4-B0C2-4AA5-9CFB-842BDA59396E}] => (Allow) LPort=80 FirewallRules: [{EC555093-D58A-47A9-87F1-46B663056436}] => (Allow) LPort=80 FirewallRules: [TCP Query User{7F14FFDC-7A2C-4D3E-ADDC-D4DC18BDE192}C:\users\bert\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\bert\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{E7ABF307-924D-4DC5-AC87-74406038AD01}C:\users\bert\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\bert\appdata\roaming\spotify\spotify.exe FirewallRules: [{43AC6ACA-EFA7-4CC9-8F10-DB96327C3684}] => (Allow) C:\Program Files\KaraFun\KaraFun.exe FirewallRules: [{42CE8FA8-D07D-4C5A-BA75-5A4C6FF214A4}] => (Allow) C:\Program Files\KaraFun\KaraFun.exe FirewallRules: [{CCE48516-174E-480C-95CE-24AC07A02B61}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe FirewallRules: [TCP Query User{ACDDBE68-62DC-4F04-BB7E-61E99772235C}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe FirewallRules: [UDP Query User{770D2948-E9CA-4991-A2F8-A2F02D6AC447}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe FirewallRules: [{5F0CC3E1-1D2D-4F8A-9E4A-005164205F60}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{9F6142AF-B749-413C-A9AB-387C8A4C5288}] => (Allow) C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\USBSetup.exe FirewallRules: [{7B56883F-B312-4E33-BBD4-0A7F1B1724AD}] => (Allow) C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\USBSetup.exe FirewallRules: [TCP Query User{65D772DA-ECBE-493A-B76A-F03026B4B179}C:\program files\wondershare\video converter ultimate\urlreqservice.exe] => (Allow) C:\program files\wondershare\video converter ultimate\urlreqservice.exe FirewallRules: [UDP Query User{C1FFA31D-0A1B-4033-9F10-33CE2BFEC5AE}C:\program files\wondershare\video converter ultimate\urlreqservice.exe] => (Allow) C:\program files\wondershare\video converter ultimate\urlreqservice.exe FirewallRules: [{D290D73B-4AFC-42B2-8715-91994A420AED}] => (Allow) C:\Users\Bert\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{DF4E9FD6-820F-44E5-A576-F9C32C007367}] => (Allow) C:\Users\Bert\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{AAA54CBE-045F-4DBF-B7C9-08F712165B74}] => (Allow) C:\Windows\system32\rundll32.exe FirewallRules: [{8C18D74D-337B-4807-B8D0-A8AEA96773BA}] => (Allow) C:\Program Files\PokerStars.EU\PokerStarsUpdate.exe FirewallRules: [{31E262F0-03EA-4898-9DAD-C3D831E09EF0}] => (Allow) C:\Program Files\PokerStars.EU\PokerStarsUpdate.exe FirewallRules: [TCP Query User{7426425B-C7C9-40CF-92EE-3627ED2D69AD}C:\users\bert\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\bert\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{109E8092-92F6-4FAF-BBE3-AD6178DD4782}C:\users\bert\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\bert\appdata\roaming\spotify\spotify.exe FirewallRules: [{032D04C6-4925-4839-8408-AA3B33F3B171}] => (Allow) C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe FirewallRules: [TCP Query User{438CF03D-AE32-45AB-B3F6-957214895783}C:\program files\wondershare\video converter ultimate\urlreqservice.exe] => (Block) C:\program files\wondershare\video converter ultimate\urlreqservice.exe FirewallRules: [UDP Query User{DC4E195B-034B-4A6D-90F3-C1B61D9D2DE6}C:\program files\wondershare\video converter ultimate\urlreqservice.exe] => (Block) C:\program files\wondershare\video converter ultimate\urlreqservice.exe FirewallRules: [TCP Query User{2F7BF4A2-F2FD-432B-800D-1BFC576FAB35}C:\program files\adobe\adobe flash cs5.5\flash.exe] => (Allow) C:\program files\adobe\adobe flash cs5.5\flash.exe FirewallRules: [UDP Query User{5BB6FB95-A1E8-48E8-8CD4-A30874B050EE}C:\program files\adobe\adobe flash cs5.5\flash.exe] => (Allow) C:\program files\adobe\adobe flash cs5.5\flash.exe FirewallRules: [TCP Query User{CDDD6EFC-7B88-4184-BBF9-5C33842F5E84}C:\program files\adobe\adobe after effects cs4\support files\afterfx.exe] => (Block) C:\program files\adobe\adobe after effects cs4\support files\afterfx.exe FirewallRules: [UDP Query User{04BE37C1-DF25-4B03-A8C4-41A6FB54D787}C:\program files\adobe\adobe after effects cs4\support files\afterfx.exe] => (Block) C:\program files\adobe\adobe after effects cs4\support files\afterfx.exe FirewallRules: [TCP Query User{419D6248-8E96-4440-A62E-8E81D609B1A9}C:\program files\utorrent\utorrent.exe] => (Allow) C:\program files\utorrent\utorrent.exe FirewallRules: [UDP Query User{61557D85-1E11-49E4-A119-8FA6FF3BEC78}C:\program files\utorrent\utorrent.exe] => (Allow) C:\program files\utorrent\utorrent.exe FirewallRules: [TCP Query User{11912B0A-994F-4825-B3E5-39D45CCE8983}C:\users\bert\desktop\driup\sdi_r1803.exe] => (Block) C:\users\bert\desktop\driup\sdi_r1803.exe FirewallRules: [UDP Query User{9994AB10-AC5E-45CA-8D79-C5C24CC02A31}C:\users\bert\desktop\driup\sdi_r1803.exe] => (Block) C:\users\bert\desktop\driup\sdi_r1803.exe FirewallRules: [TCP Query User{3AB63637-0EC5-4A9C-AE71-247B1F158695}C:\users\bert\documents\downloads\sdi_rus\sdi_r1803.exe] => (Allow) C:\users\bert\documents\downloads\sdi_rus\sdi_r1803.exe FirewallRules: [UDP Query User{1BA2289F-E7A0-4061-BB5F-30F625FE865B}C:\users\bert\documents\downloads\sdi_rus\sdi_r1803.exe] => (Allow) C:\users\bert\documents\downloads\sdi_rus\sdi_r1803.exe ==================== Herstelpunten ========================= 28-02-2018 13:05:37 DirectX 9.0 is geïnstalleerd. 09-03-2018 22:36:23 Installed ConEmu 180206.x86 10-03-2018 02:03:19 Removed MixMeister CD-R Drivers 10-03-2018 02:14:50 Installatie van apparaatstuurprogramma: Realtek Semiconductor Corp. Besturing voor geluid, video en spelletjes 10-03-2018 11:52:33 Installed ConEmu 180206.x86 10-03-2018 12:30:44 Installed drivers 10-03-2018 12:31:59 Installatie van apparaatstuurprogramma: Intel Opslagcontrollers 10-03-2018 12:32:38 Installatie van apparaatstuurprogramma: Logitech Human Interface-apparaten (HID) 10-03-2018 13:03:37 drivers 10-03-2018 13:30:15 Installed drivers 10-03-2018 13:31:14 Installatie van apparaatstuurprogramma: Logicool Human Interface-apparaten (HID) 10-03-2018 13:35:17 Installatie van apparaatstuurprogramma: Alcorlink Corp. Universal Serial Bus-controllers 10-03-2018 13:36:31 Installatie van apparaatstuurprogramma: Intel Systeemapparaten 10-03-2018 13:37:45 Installatie van apparaatstuurprogramma: Intel Universal Serial Bus-controllers 10-03-2018 13:40:08 Installatie van apparaatstuurprogramma: Intel Systeemapparaten 10-03-2018 13:41:08 Installatie van apparaatstuurprogramma: Intel Systeemapparaten 10-03-2018 13:42:37 Installatie van apparaatstuurprogramma: Intel Systeemapparaten 10-03-2018 13:44:07 Installatie van apparaatstuurprogramma: Realtek Netwerkadapters 10-03-2018 13:45:37 Installatie van apparaatstuurprogramma: Intel Corporation Opslagcontrollers 10-03-2018 13:46:26 Installatie van apparaatstuurprogramma: Point Grey Research 10-03-2018 13:47:40 Installatie van apparaatstuurprogramma: Advanced Micro Devices Besturing voor geluid, video en spelletjes 10-03-2018 13:52:14 Installatie van apparaatstuurprogramma: Realtek Semiconductor Corp. Besturing voor geluid, video en spelletjes 10-03-2018 14:01:42 Installatie van apparaatstuurprogramma: Advanced Micro Devices, Inc. Beeldschermadapters 10-03-2018 18:01:36 Removed ConEmu 180206.x86 10-03-2018 18:03:13 Removed ConEmu 180206.x86 10-03-2018 23:07:03 Installed drivers 13-03-2018 20:52:45 Herstelbewerking 13-03-2018 21:21:37 Herstelbewerking 23-03-2018 12:12:42 Installed drivers 23-03-2018 12:17:19 Installed drivers 23-03-2018 12:17:49 Installatie van apparaatstuurprogramma: Alcorlink Corp. Universal Serial Bus-controllers 23-03-2018 12:19:19 Installatie van apparaatstuurprogramma: Intel Systeemapparaten 23-03-2018 12:19:50 Installatie van apparaatstuurprogramma: Intel Systeemapparaten 23-03-2018 12:20:14 Installatie van apparaatstuurprogramma: Intel Systeemapparaten 23-03-2018 12:20:50 Installatie van apparaatstuurprogramma: Intel Universal Serial Bus-controllers 23-03-2018 12:22:43 Installatie van apparaatstuurprogramma: Intel Systeemapparaten 23-03-2018 12:23:48 Installatie van apparaatstuurprogramma: Realtek Netwerkadapters 23-03-2018 12:25:02 Installatie van apparaatstuurprogramma: Intel Corporation Opslagcontrollers 23-03-2018 12:26:54 Installatie van apparaatstuurprogramma: Logitech Human Interface-apparaten (HID) 23-03-2018 12:28:01 Installatie van apparaatstuurprogramma: Point Grey Research 23-03-2018 12:28:21 Installatie van apparaatstuurprogramma: Advanced Micro Devices Besturing voor geluid, video en spelletjes 23-03-2018 12:31:01 Installatie van apparaatstuurprogramma: Realtek Semiconductor Corp. Besturing voor geluid, video en spelletjes 23-03-2018 12:35:56 Installatie van apparaatstuurprogramma: Advanced Micro Devices, Inc. Beeldschermadapters 31-03-2018 12:04:02 Herstelbewerking 31-03-2018 15:02:31 Herstelbewerking ==================== Defecte Apparaatbeheer Apparaten ============= Name: ELBY CLONEDRIVE SCSI CdRom Device Description: Cd-rom-station Class Guid: {4d36e965-e325-11ce-bfc1-08002be10318} Manufacturer: (Standaard cd-rom-stations) Service: cdrom Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Eventlog fouten: ========================= Applicatiefouten: ================== Error: (04/01/2018 12:04:05 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Toepassing met fout rundll32.exe, versie 6.0.6000.16386, tijdstempel 0x4549b0e1, module met fout kernel32.dll, versie 6.0.6002.19623, tijdstempel 0x56ec36ff, uitzonderingscode 0x0eedfade, foutmarge 0x0003fdb6, proces-id 0x15a8, starttijd van toepassing 0x01d3c9a0c2cddc0a. Error: (04/01/2018 11:32:36 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Toepassing met fout rundll32.exe, versie 6.0.6000.16386, tijdstempel 0x4549b0e1, module met fout kernel32.dll, versie 6.0.6002.19623, tijdstempel 0x56ec36ff, uitzonderingscode 0x0eedfade, foutmarge 0x0003fdb6, proces-id 0x628, starttijd van toepassing 0x01d3c99c5cb2ee5a. Error: (04/01/2018 10:40:12 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Toepassing met fout rundll32.exe, versie 6.0.6000.16386, tijdstempel 0x4549b0e1, module met fout kernel32.dll, versie 6.0.6002.19623, tijdstempel 0x56ec36ff, uitzonderingscode 0x0eedfade, foutmarge 0x0003fdb6, proces-id 0x1540, starttijd van toepassing 0x01d3c9950aaf5e86. Error: (03/31/2018 06:27:50 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Toepassing met fout rundll32.exe, versie 6.0.6000.16386, tijdstempel 0x4549b0e1, module met fout kernel32.dll, versie 6.0.6002.19623, tijdstempel 0x56ec36ff, uitzonderingscode 0x0eedfade, foutmarge 0x0003fdb6, proces-id 0xf5c, starttijd van toepassing 0x01d3c90d349059fe. Error: (03/31/2018 04:48:06 PM) (Source: Windows Search Service) (EventID: 3013) (User: ) Description: De vermelding in de hash-toewijzing kan niet worden bijgewerkt. Context: toepassing , catalogus SystemIndex Details: Een apparaat dat op het systeem is aangesloten, werkt niet. (0x8007001f) Error: (03/31/2018 04:48:06 PM) (Source: Windows Search Service) (EventID: 3013) (User: ) Description: De vermelding in de hash-toewijzing kan niet worden bijgewerkt. Context: toepassing , catalogus SystemIndex Details: Een apparaat dat op het systeem is aangesloten, werkt niet. (0x8007001f) Error: (03/31/2018 04:48:02 PM) (Source: Windows Search Service) (EventID: 3013) (User: ) Description: De vermelding in de hash-toewijzing kan niet worden bijgewerkt. Context: toepassing , catalogus SystemIndex Details: Een apparaat dat op het systeem is aangesloten, werkt niet. (0x8007001f) Error: (03/31/2018 04:48:02 PM) (Source: Windows Search Service) (EventID: 3013) (User: ) Description: De vermelding in de hash-toewijzing kan niet worden bijgewerkt. Context: toepassing , catalogus SystemIndex Details: Een apparaat dat op het systeem is aangesloten, werkt niet. (0x8007001f) Systeemfouten: ============= Error: (04/01/2018 11:23:27 AM) (Source: Microsoft-Windows-TaskScheduler) (EventID: 412) (User: NT AUTHORITY) Description: Event-ID 412 Error: (04/01/2018 10:31:03 AM) (Source: Microsoft-Windows-TaskScheduler) (EventID: 412) (User: NT AUTHORITY) Description: Event-ID 412 Error: (03/31/2018 06:18:43 PM) (Source: Microsoft-Windows-TaskScheduler) (EventID: 412) (User: NT AUTHORITY) Description: Event-ID 412 Error: (03/31/2018 04:19:53 PM) (Source: Microsoft-Windows-TaskScheduler) (EventID: 412) (User: NT AUTHORITY) Description: Event-ID 412 Error: (03/31/2018 04:04:14 PM) (Source: Microsoft-Windows-TaskScheduler) (EventID: 412) (User: NT AUTHORITY) Description: Event-ID 412 Error: (03/31/2018 03:46:38 PM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: De Windows Update-service is bij het starten vastgelopen. Error: (03/31/2018 03:39:17 PM) (Source: Microsoft-Windows-TaskScheduler) (EventID: 412) (User: NT AUTHORITY) Description: Event-ID 412 Error: (03/31/2018 02:52:44 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: De ---service kan vanwege de volgende fout niet worden gestart: De service heeft de start- of stuuropdracht niet op juiste wijze beantwoord. CodeIntegrity: =================================== Date: 2018-03-07 21:29:36.585 Description: De integriteit van de kopie voor het bestand \Device\HarddiskVolume1\WINDOWS\System32\drivers\mwac.sys kan niet worden geverifieerd omdat de reeks kopie-hashes per pagina niet is gevonden op het systeem. Date: 2018-03-07 21:29:36.366 Description: De integriteit van de kopie voor het bestand \Device\HarddiskVolume1\WINDOWS\System32\drivers\mwac.sys kan niet worden geverifieerd omdat de reeks kopie-hashes per pagina niet is gevonden op het systeem. Date: 2018-03-07 21:29:36.148 Description: De integriteit van de kopie voor het bestand \Device\HarddiskVolume1\WINDOWS\System32\drivers\mwac.sys kan niet worden geverifieerd omdat de reeks kopie-hashes per pagina niet is gevonden op het systeem. Date: 2018-03-07 21:29:35.883 Description: De integriteit van de kopie voor het bestand \Device\HarddiskVolume1\WINDOWS\System32\drivers\mwac.sys kan niet worden geverifieerd omdat de reeks kopie-hashes per pagina niet is gevonden op het systeem. Date: 2018-03-07 21:29:35.149 Description: De integriteit van de kopie voor het bestand \Device\HarddiskVolume1\WINDOWS\System32\drivers\SETACA7.tmp kan niet worden geverifieerd omdat de reeks kopie-hashes per pagina niet is gevonden op het systeem. Date: 2018-03-07 21:29:34.884 Description: De integriteit van de kopie voor het bestand \Device\HarddiskVolume1\WINDOWS\System32\drivers\SETACA7.tmp kan niet worden geverifieerd omdat de reeks kopie-hashes per pagina niet is gevonden op het systeem. Date: 2018-03-07 21:29:34.666 Description: De integriteit van de kopie voor het bestand \Device\HarddiskVolume1\WINDOWS\System32\drivers\SETACA7.tmp kan niet worden geverifieerd omdat de reeks kopie-hashes per pagina niet is gevonden op het systeem. Date: 2018-03-07 21:29:34.463 Description: De integriteit van de kopie voor het bestand \Device\HarddiskVolume1\WINDOWS\System32\drivers\SETACA7.tmp kan niet worden geverifieerd omdat de reeks kopie-hashes per pagina niet is gevonden op het systeem. ==================== Geheugen info =========================== Processor: Intel(R) Core(TM)2 Duo CPU E4500 @ 2.20GHz Percentage geheugen in gebruik: 67% Totaal fysiek RAM-geheugen: 3070.58 MB Beschikbaar fysiek RAM-geheugen: 1009.75 MB Totaal Virtueel geheugen: 6351.43 MB Beschikbaar Virtual geheugen: 3682.29 MB ==================== Schijven ================================ Drive c: (COMPAQ) (Fixed) (Total:458.5 GB) (Free:84.52 GB) NTFS ==>[schijf met boot componenten (verkregen van BCD)] Drive d: (FACTORY_IMAGE) (Fixed) (Total:7.26 GB) (Free:0.95 GB) NTFS ==>[systeem met boot componenten (verkregen van schijf)] Drive l: (PHILIPS USB) (Removable) (Total:29.93 GB) (Free:24.21 GB) FAT32 Drive n: (USB ROOD) (Removable) (Total:3.73 GB) (Free:2.28 GB) FAT32 ==================== MBR & Partitietabel ================== ======================================================== Disk: 0 (Size: 465.8 GB) (Disk ID: F44B9C1A) Partition 1: (Active) - (Size=458.5 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=7.3 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (Size: 29.9 GB) (Disk ID: 69686373) No partition Table on disk 1. ======================================================== Disk: 2 (MBR Code: Windows XP) (Size: 3.7 GB) (Disk ID: C3072E18) Partition 1: (Not Active) - (Size=3.7 GB) - (Type=0B) ==================== Eind van Addition.txt ============================