Fix resultaat van Farbar Recovery Scan Tool (x64) Versie: 03.05.2018 Gestart door Milan (04-05-2018 17:17:29) Run:1 Gestart vanaf C:\Users\Milan\Desktop\pc opkuis Geladen Profielen: Milan (Beschikbare Profielen: defaultuser0 & Milan) Boot Modus: Normal ============================================== fixlist inhoud: ***************** CreateRestorePoint: HKLM-x32\...\Run: [] => [X] HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== AANDACHT HKU\S-1-5-21-917116123-3600031174-3772831410-1001\...\Run: [Chromium] => c:\users\milan\appdata\local\chromium\application\chrome.exe [829440 2017-02-15] (The Chromium Authors) HKU\S-1-5-21-917116123-3600031174-3772831410-1001\...\Run: [GoogleChromeAutoLaunch_CB85782E66E64E3D4C966D34381FDB94] => C:\Users\Milan\AppData\Local\chromium\Application\chrome.exe [829440 2017-02-15] (The Chromium Authors) BHO: Geen Naam -> {13D67BB7-DB5F-48AA-884D-7A5D94168509} -> Geen bestand BHO-x32: Geen Naam -> {13D67BB7-DB5F-48AA-884D-7A5D94168509} -> Geen bestand CHR Extension: (Ask Web Search) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgfehfbnofiffladdncogfobimealokp [2018-04-19] 2018-04-30 22:04 - 2018-02-20 16:22 - 000003732 _____ C:\WINDOWS\System32\Tasks\Chromium sisin 2018-04-30 22:04 - 2018-02-20 16:22 - 000001020 _____ C:\WINDOWS\Tasks\Chromium sisin.job C:\ProgramData\{5A339F50-D071-1596-56B7-8BD4CCF5001A}\nima.txt Task: {00987E09-F1EA-4601-8A40-B9B8FE5F15FE} - System32\Tasks\Chromium sisin => C:\WINDOWS\system32\wscript.exe "C:\ProgramData\{5A339F50-D071-1596-56B7-8BD4CCF5001A}\nima.txt" "68747470733a2f2f6b6174756e61712e636f6d" "433a5c50726f6772616d446174615c7b35413333394635302d443037312d313539362d353642372d3842443443434635303031417d5c746f6469726f" "433a5c50726f6772616d446174615c7b35413333394635302d443037312d313539362d (de data item heeft 84 meer tekens). <==== AANDACHT Task: C:\WINDOWS\Tasks\Chromium sisin.job => Wscript.exe C:\ProgramData\{5A339F50-D071-1596-56B7-8BD4CCF5001A}\nima.txt <==== AANDACHT ShortcutWithArgument: C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WOW\WorldofWarships.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --app=hxxp://go.playmmogames.com/aff_c?offer_id=772&aff_id=1034&aff_sub=100 --app-window-size=1920,1080 ShortcutWithArgument: C:\Users\Milan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\WorldofWarships.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --app=hxxp://go.playmmogames.com/aff_c?offer_id=772&aff_id=1034&aff_sub=100 --app-window-size=1920,1080 AlternateDataStreams: C:\Users\Public\AppData:CSM [480] EmptyTemp: ***************** Herstelpunt is succesvol gemaakt. "HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\" => is succesvol verwijderd HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== AANDACHT => met succes hersteld "HKU\S-1-5-21-917116123-3600031174-3772831410-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Chromium" => is succesvol verwijderd "HKU\S-1-5-21-917116123-3600031174-3772831410-1001\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_CB85782E66E64E3D4C966D34381FDB94" => niet gevonden "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{13D67BB7-DB5F-48AA-884D-7A5D94168509}" => is succesvol verwijderd HKLM\Software\Classes\CLSID\{13D67BB7-DB5F-48AA-884D-7A5D94168509} => niet gevonden "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{13D67BB7-DB5F-48AA-884D-7A5D94168509}" => is succesvol verwijderd HKLM\Software\Wow6432Node\Classes\CLSID\{13D67BB7-DB5F-48AA-884D-7A5D94168509} => niet gevonden CHR Extension: (Ask Web Search) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgfehfbnofiffladdncogfobimealokp [2018-04-19] => Fout: Geen automatische fix gevonden voor dit item. C:\WINDOWS\System32\Tasks\Chromium sisin => is succesvol verplaatst C:\WINDOWS\Tasks\Chromium sisin.job => is succesvol verplaatst "C:\ProgramData\{5A339F50-D071-1596-56B7-8BD4CCF5001A}\nima.txt" => niet gevonden "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{00987E09-F1EA-4601-8A40-B9B8FE5F15FE}" => is succesvol verwijderd "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{00987E09-F1EA-4601-8A40-B9B8FE5F15FE}" => is succesvol verwijderd "C:\WINDOWS\System32\Tasks\Chromium sisin" => niet gevonden "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Chromium sisin" => is succesvol verwijderd "C:\WINDOWS\Tasks\Chromium sisin.job" => niet gevonden C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WOW\WorldofWarships.lnk => snelkoppeling argument is succesvol verwijderd C:\Users\Milan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\WorldofWarships.lnk => snelkoppeling argument is succesvol verwijderd C:\Users\Public\AppData => ":CSM" ADS is succesvol verwijderd =========== EmptyTemp: ========== BITS transfer queue => 9199616 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 54037493 B Java, Flash, Steam htmlcache => 35991680 B Windows/system/drivers => 3938490 B Edge => 11360151 B Chrome => 66745497 B Firefox => 0 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 0 B Users => 0 B ProgramData => 0 B Public => 0 B systemprofile => 0 B systemprofile32 => 0 B LocalService => 32748 B NetworkService => 137076984 B defaultuser0 => 7168 B Milan => 152367857 B RecycleBin => 50123329134 B EmptyTemp: => 47.1 GB tijdelijke gegevens verwijderd. ================================ Het systeem moest herstart worden. ==== Eind van Fixlog 17:19:44 ====