Fix resultaat van Farbar Recovery Scan Tool (x64) Versie: 16.05.2018 01 Gestart door Admin (22-05-2018 20:59:14) Run:1 Gestart vanaf C:\Users\Admin\Desktop Geladen Profielen: Admin (Beschikbare Profielen: Admin) Boot Modus: Normal ============================================== fixlist inhoud: ***************** CreateRestorePoint: R2 AdvancedSystemCareService11; C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe [1057552 2018-03-21] (IObit) S4 IMFMBRProtect; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win10_amd64\IMFMBRProtect.sys [X] S4 IMFSafeBox; \??\C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win10_amd64\IMFSafeBox.sys [X] S4 IUFileFilter; \??\C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IUFileFilter.sys [X] 2018-05-21 18:51 - 2018-05-21 18:51 - 000000000 ____D C:\WINDOWS\LastGood.Tmp 2018-05-21 11:35 - 2018-05-21 11:35 - 099848192 _____ C:\WINDOWS\system32\config\SOFTWARE.iobit 2018-05-21 11:35 - 2018-05-21 11:35 - 000573440 _____ C:\WINDOWS\system32\config\DEFAULT.iobit 2018-05-21 11:35 - 2018-05-21 11:35 - 000065536 _____ C:\WINDOWS\system32\config\SAM.iobit 2018-05-21 11:35 - 2018-05-21 11:35 - 000028672 _____ C:\WINDOWS\system32\config\SECURITY.iobit 2018-05-22 19:34 - 2016-02-02 20:34 - 000000000 ____D C:\Program Files (x86)\IObit 2018-05-22 19:32 - 2016-02-02 20:34 - 000000000 ____D C:\Users\Admin\AppData\Roaming\IObit 2018-05-21 11:31 - 2016-02-02 20:34 - 000000000 ____D C:\Users\Admin\AppData\LocalLow\IObit 2018-05-21 11:31 - 2016-02-02 20:34 - 000000000 ____D C:\ProgramData\IObit ContextMenuHandlers1: [Atheros] -> {B8952421-0E55-400B-94A6-FA858FC0A39F} => -> Geen bestand Task: {257AD6A5-FCA7-473E-9A4F-FC6657F2BA74} - \Optimize Start Menu Cache Files-S-1-5-21-2980793151-4220202154-4047133139-1001 -> Geen bestand <==== AANDACHT Task: {5D2C8CF8-B3DB-4847-9E21-FDFF745A9A7B} - \WPD\SqmUpload_S-1-5-21-2980793151-4220202154-4047133139-1001 -> Geen bestand <==== AANDACHT Task: {6C298423-47E4-42B7-AEC7-F532158BD4AC} - \Microsoft\Windows\UNP\RunCampaignManager -> Geen bestand <==== AANDACHT Task: {8F1AFB11-1B2A-4C47-907D-892F94C12A8A} - System32\Tasks\ASC11_SkipUac_Admin => C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe [2018-03-30] (IObit) Task: {C49C59E6-08B6-4452-A20C-0468DF779E9A} - System32\Tasks\Driver Booster SkipUAC (Admin) => C:\Program Files (x86)\IObit\Driver Booster\5.3.0\DriverBooster.exe Task: {EDBA53CB-44DF-4C0D-9D64-7294B7239FC9} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Geen bestand <==== AANDACHT Task: {F85B0769-E896-41DF-98B4-DF8FCF127042} - \Microsoft\Windows\Setup\EOONotify -> Geen bestand <==== AANDACHT AlternateDataStreams: C:\ProgramData\TEMP:DBC416F8 [138] HKLM\...\StartupApproved\Run32: => "IObit Malware Fighter" FirewallRules: [{6B3A11EB-53C8-4EC8-A8F1-A369838DC6BE}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe FirewallRules: [{995617D1-4573-462F-99EF-12F0F77CCAF9}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe EmptyTemp: ***************** Herstelpunt is succesvol gemaakt. AdvancedSystemCareService11 => Kon service niet stoppen. "HKLM\System\CurrentControlSet\Services\AdvancedSystemCareService11" => is succesvol verwijderd AdvancedSystemCareService11 => dienst is succesvol verwijderd "HKLM\System\CurrentControlSet\Services\IMFMBRProtect" => is succesvol verwijderd IMFMBRProtect => dienst is succesvol verwijderd "HKLM\System\CurrentControlSet\Services\IMFSafeBox" => is succesvol verwijderd IMFSafeBox => dienst is succesvol verwijderd "HKLM\System\CurrentControlSet\Services\IUFileFilter" => is succesvol verwijderd IUFileFilter => dienst is succesvol verwijderd C:\WINDOWS\LastGood.Tmp => is succesvol verplaatst C:\WINDOWS\system32\config\SOFTWARE.iobit => is succesvol verplaatst C:\WINDOWS\system32\config\DEFAULT.iobit => is succesvol verplaatst C:\WINDOWS\system32\config\SAM.iobit => is succesvol verplaatst C:\WINDOWS\system32\config\SECURITY.iobit => is succesvol verplaatst "C:\Program Files (x86)\IObit" map verplaatsing: Kon niet verplaatsen "C:\Program Files (x86)\IObit" => Gepland om te verplaatsen bij herstart. C:\Users\Admin\AppData\Roaming\IObit => is succesvol verplaatst C:\Users\Admin\AppData\LocalLow\IObit => is succesvol verplaatst "C:\ProgramData\IObit" map verplaatsing: Kon niet verplaatsen "C:\ProgramData\IObit" => Gepland om te verplaatsen bij herstart. "HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\Atheros" => is succesvol verwijderd HKLM\Software\Classes\CLSID\{B8952421-0E55-400B-94A6-FA858FC0A39F} => niet gevonden "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{257AD6A5-FCA7-473E-9A4F-FC6657F2BA74}" => is succesvol verwijderd "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{257AD6A5-FCA7-473E-9A4F-FC6657F2BA74}" => is succesvol verwijderd "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Optimize Start Menu Cache Files-S-1-5-21-2980793151-4220202154-4047133139-1001" => is succesvol verwijderd "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5D2C8CF8-B3DB-4847-9E21-FDFF745A9A7B}" => is succesvol verwijderd "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5D2C8CF8-B3DB-4847-9E21-FDFF745A9A7B}" => is succesvol verwijderd "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WPD\SqmUpload_S-1-5-21-2980793151-4220202154-4047133139-1001" => is succesvol verwijderd "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6C298423-47E4-42B7-AEC7-F532158BD4AC}" => is succesvol verwijderd "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6C298423-47E4-42B7-AEC7-F532158BD4AC}" => is succesvol verwijderd HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunCampaignManager => niet gevonden "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8F1AFB11-1B2A-4C47-907D-892F94C12A8A}" => is succesvol verwijderd "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8F1AFB11-1B2A-4C47-907D-892F94C12A8A}" => is succesvol verwijderd C:\WINDOWS\System32\Tasks\ASC11_SkipUac_Admin => is succesvol verplaatst "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ASC11_SkipUac_Admin" => is succesvol verwijderd "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C49C59E6-08B6-4452-A20C-0468DF779E9A}" => is succesvol verwijderd "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C49C59E6-08B6-4452-A20C-0468DF779E9A}" => is succesvol verwijderd C:\WINDOWS\System32\Tasks\Driver Booster SkipUAC (Admin) => is succesvol verplaatst "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Driver Booster SkipUAC (Admin)" => is succesvol verwijderd "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{EDBA53CB-44DF-4C0D-9D64-7294B7239FC9}" => is succesvol verwijderd "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EDBA53CB-44DF-4C0D-9D64-7294B7239FC9}" => is succesvol verwijderd "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\OfficeSoftwareProtectionPlatform\SvcRestartTask" => is succesvol verwijderd "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F85B0769-E896-41DF-98B4-DF8FCF127042}" => is succesvol verwijderd "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F85B0769-E896-41DF-98B4-DF8FCF127042}" => is succesvol verwijderd "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\EOONotify" => is succesvol verwijderd C:\ProgramData\TEMP => ":DBC416F8" ADS is succesvol verwijderd "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32\\IObit Malware Fighter" => is succesvol verwijderd "HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\IObit Malware Fighter" => niet gevonden "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{6B3A11EB-53C8-4EC8-A8F1-A369838DC6BE}" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{995617D1-4573-462F-99EF-12F0F77CCAF9}" => is succesvol verwijderd =========== EmptyTemp: ========== BITS transfer queue => 6053888 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 24953048 B Java, Flash, Steam htmlcache => 1245 B Windows/system/drivers => 233137 B Edge => 3584 B Chrome => 66727759 B Firefox => 17056593 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 0 B Users => 0 B ProgramData => 0 B Public => 0 B systemprofile => 0 B systemprofile32 => 0 B LocalService => 904 B LocalService => 0 B NetworkService => 0 B NetworkService => 0 B Admin => 6999907 B RecycleBin => 0 B EmptyTemp: => 116.4 MB tijdelijke gegevens verwijderd. ================================ Resultaat van geplande bestanden te verplaatsen (Boot Modus: Normal) (Datum&Tijd: 22-05-2018 21:05:19) C:\Program Files (x86)\IObit => is succesvol verplaatst C:\ProgramData\IObit => is succesvol verplaatst ==== Eind van Fixlog 21:05:19 ====