Extra scanresultaten van Farbar Recovery Scan Tool (x64) Versie: 01.01.2019 Gestart door Jannick (02-01-2019 17:57:36) Gestart vanaf C:\Users\Jannick\Desktop Windows 10 Home Versie 1803 17134.472 (X64) (2018-06-17 13:33:17) Boot Modus: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-41158804-3025990116-3228914385-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-41158804-3025990116-3228914385-503 - Limited - Disabled) defaultuser0 (S-1-5-21-41158804-3025990116-3228914385-1000 - Limited - Disabled) => C:\Users\defaultuser0 Gast (S-1-5-21-41158804-3025990116-3228914385-501 - Limited - Disabled) Jannick (S-1-5-21-41158804-3025990116-3228914385-1003 - Administrator - Enabled) => C:\Users\Jannick WDAGUtilityAccount (S-1-5-21-41158804-3025990116-3228914385-504 - Limited - Disabled) ==================== Security Center ======================== (Als een item is opgenomen in de fixlist, zal het worden verwijderd.) AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B} AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402} FW: Avast Antivirus (Enabled) {B693136B-F6EE-DD1C-A0EF-229B8B0B29C4} ==================== Geïnstalleerde programma's ====================== (Alleen de adware-programma's met 'verborgen' vlag kunnen worden toegevoegd aan de fixlist om ze zichtbaar te maken. De adware-programma's moeten handmatig gedeïnstalleerd worden.) 7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov) 7-Zip 18.05 (x64 edition) (HKLM\...\{23170F69-40C1-2702-1805-000001000000}) (Version: 18.05.00.0 - Igor Pavlov) Apple Application Support (32-bit) (HKLM-x32\...\{D4C80B0C-CF67-43A7-90C3-466853543B54}) (Version: 6.3 - Apple Inc.) Apple Application Support (64-bit) (HKLM\...\{B2A2E8AF-BC48-4191-B2C4-3846A19835CA}) (Version: 6.3 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{AA7D90D2-2387-4FA5-A3AF-96811BE49BFD}) (Version: 11.0.5.14 - Apple Inc.) ASUS Device Activation (HKLM-x32\...\{9C4B0706-9F9A-47BF-B417-0A111FC52B04}) (Version: 1.0.4.0 - ASUSTeK COMPUTER INC.) ASUS GIFTBOX (HKLM-x32\...\ASUS GIFTBOX) (Version: 7.5.24 - ASUSTek Computer Inc) ASUS HiPost (HKLM-x32\...\{04768366-F421-4BA5-8423-B84F644B5249}) (Version: 1.0.6 - ASUS) ASUS Input Configuration (HKLM-x32\...\{7DDF7571-64BD-4232-9729-20FF10CE6C62}) (Version: 1.0.3 - ASUS) ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.4.3 - ASUS) ASUS PTP Driver (HKLM-x32\...\{7618E419-9124-4E6C-9AF4-487A6DDEC1C5}) (Version: 11.0.12 - ASUS) ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 3.16.0002 - ASUS) ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 4.1.7 - ASUS) ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0049 - ASUS) AudioWizard (HKLM-x32\...\{57E770A2-2BAF-4CAA-BAA3-BD896E2254D3}) (Version: 1.0.3.4 - ICEpower a/s) Avast Driver Updater (HKLM-x32\...\{8804140C-3144-4075-9526-1C662E26CA17}) (Version: 2.5.5 - AVAST Software) Hidden Avast Driver Updater (HKLM-x32\...\Avast Driver Updater) (Version: 2.5.5 - AVAST Software) Avast Premier (HKLM-x32\...\Avast Antivirus) (Version: 18.8.2356 - AVAST Software) Avast Secure Browser (HKLM-x32\...\Avast Secure Browser) (Version: 70.0.917.103 - AVAST Software) Avast Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.4.154.333 - AVAST Software) Hidden Device Setup (HKLM-x32\...\{8D6B05E0-F457-408C-9D13-549334D8FAE1}) (Version: 2.2.5 - ASUSTek COMPUTER INC.) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 71.0.3578.98 - Google Inc.) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.23 - Google Inc.) Hidden iCloud (HKLM\...\{99868C9C-C141-4DDE-A2C7-9DDF00F68F17}) (Version: 7.2.0.67 - Apple Inc.) Intel(R) Chipset Device Software (HKLM-x32\...\{aaa7f0fb-02dc-4576-beef-7d24842c5fbe}) (Version: 10.1.1.32 - Intel(R) Corporation) Hidden Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.2.10900.330 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 21.20.16.4494 - Intel Corporation) Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1630.2 - Intel Corporation) Intel(R) Trusted Execution Engine (HKLM\...\{176E2755-0A17-42C6-88E2-192AB2131278}) (Version: 3.0.0.1104 - Intel Corporation) Malwarebytes versie 3.6.1.2711 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.6.1.2711 - Malwarebytes) Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{F2508213-9989-4E85-A078-72BE483917EF}) (Version: 3.5.88.0 - Microsoft Corporation) Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation) Microsoft Office 365 - nl-nl (HKLM\...\O365HomePremRetail - nl-nl) (Version: 16.0.11029.20108 - Microsoft Corporation) Microsoft Office 365 ProPlus - nl-nl (HKLM\...\O365ProPlusRetail - nl-nl) (Version: 16.0.11029.20108 - Microsoft Corporation) Microsoft OneDrive (HKU\.DEFAULT\...\OneDriveSetup.exe) (Version: 17.3.6743.1212 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-41158804-3025990116-3228914385-1003\...\OneDriveSetup.exe) (Version: 18.222.1104.0007 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24212 (HKLM-x32\...\{323dad84-0974-4d90-a1c1-e006c7fdbb7d}) (Version: 14.0.24212.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM-x32\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation) NVIDIA PhysX (HKLM-x32\...\{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}) (Version: 9.09.0814 - NVIDIA Corporation) Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.11029.20108 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.11029.20108 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0413-1000-0000000FF1CE}) (Version: 16.0.11029.20108 - Microsoft Corporation) Hidden OpenAL (HKLM-x32\...\OpenAL) (Version: - ) OpenShot Video Editor versie 2.4.1 (HKLM\...\{4BB0DCDC-BC24-49EC-8937-72956C33A470}_is1) (Version: 2.4.1 - OpenShot Studios, LLC) Qualcomm Atheros 11ac Wireless LAN&Bluetooth Installer (HKLM-x32\...\{3241744A-BA36-41F0-B4AA-EF3946D00632}) (Version: 11.0.0.10388 - Qualcomm Atheros) Rapture3D 2.4.9 Game (HKLM-x32\...\{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1) (Version: - Blue Ripple Sound) Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.10586.27055 - Realtek Semiconduct Corp.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.9.422.2016 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8514 - Realtek Semiconductor Corp.) Spotify (HKU\S-1-5-21-41158804-3025990116-3228914385-1003\...\Spotify) (Version: 1.0.95.289.g342899da - Spotify AB) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.59518 - TeamViewer) Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{9CBA860F-7437-4A75-941C-8EF559F2D145}) (Version: 2.52.0.0 - Microsoft Corporation) VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.4 - VideoLAN) Windows 10-upgradeassistent (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22175 - Microsoft Corporation) Windows Driver Package - ASUS (AsusHFilter) HIDClass (12/19/2016 1.0.0.2) (HKLM\...\EEDD19DDF3F0CA7CFA2F4C500D442DD1FEB434F6) (Version: 12/19/2016 1.0.0.2 - ASUS) Windows Driver Package - ASUS (AsusPTPDrv) HIDClass (07/01/2016 11.0.0.12) (HKLM\...\AE03E43494611410A2996E4747E2A8C0FE87F26D) (Version: 07/01/2016 11.0.0.12 - ASUS) WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 3.2.2 - ASUSTeK COMPUTER INC.) WinZip 23.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C2411D}) (Version: 23.0.13300 - Corel Corporation) WPS Office for ASUS (HKLM-x32\...\Kingsoft Office) (Version: 10.1.0.5644 - Kingsoft Corp.) ==================== Aangepaste CLSID (gefilterd): ========================== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) CustomCLSID: HKU\S-1-5-21-41158804-3025990116-3228914385-1003_Classes\CLSID\{CB2B673F-D441-4CD4-AFBE-DC4037CA4220}\InprocServer32 -> C:\Program Files\WinZip\adxloader64.WinZipExpressForOffice.dll () ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-11-18] (AVAST Software) ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov) ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-11-18] (AVAST Software) ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2017-12-08] (Apple Inc.) ContextMenuHandlers1: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll -> Geen bestand ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-11-18] (AVAST Software) ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-09-19] (Malwarebytes) ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov) ContextMenuHandlers4: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll -> Geen bestand ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Geen bestand ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_f507e86e308a4c50\igfxDTCM.dll [2017-07-31] (Intel Corporation) ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov) ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-11-18] (AVAST Software) ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-09-19] (Malwarebytes) ContextMenuHandlers6: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll -> Geen bestand ==================== Geplande Taken (gefilterd) ============= (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) Task: {0CCAE258-CC18-41B0-9036-135B6827F82C} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-08-01] () Task: {163ED27F-8029-4CB2-AB50-E2EFD844BDEC} - System32\Tasks\WinZip Update Notifier 2 => C:\Program Files\WinZip\WZUpdateNotifier.exe [2018-10-22] (Corel Corporation) Task: {1CBF63A4-E937-49AE-B8EC-A728BE43B2B1} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-08-01] () Task: {1CCEEBBD-7527-4CE3-8798-22170DB6246C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-08-29] (Google Inc.) Task: {1E2096C2-EBCA-461C-AE73-E77B2AB23D10} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2018-11-18] (AVAST Software) Task: {26000F15-BB05-44B0-82ED-EA6503B436D0} - System32\Tasks\WinZip Update Notifier 1 => C:\Program Files\WinZip\WZUpdateNotifier.exe [2018-10-22] (Corel Corporation) Task: {309E3EF8-8C76-4B15-8BA2-267A6707F7A7} - System32\Tasks\WpsKtpcntrQingTask_Administrator => C:\Program Files (x86)\Kingsoft\WPS Office\10.1.0.5644\office6\ktpcntr.exe [2016-11-11] (Zhuhai Kingsoft Office Software Co.,Ltd) Task: {36A16EE4-1891-423E-91F9-5EFEFB39E521} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\TXE Components\iCLS\IntelPTTEKRecertification.exe [2016-05-23] (Intel(R) Corporation) Task: {398A5CFD-B02A-4507-A603-A9C4061658E3} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2018-10-28] (AVAST Software) Task: {423FD249-4E70-459D-B83A-2FF8AA9C99E5} - \Microsoft\Windows\UNP\RunCampaignManager -> Geen bestand <==== AANDACHT Task: {4498EB74-D9CE-47F7-A032-CFF4C55C23BC} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-12-14] (Microsoft Corporation) Task: {449A7A11-0753-4EBE-83C4-6968D376A2C9} - System32\Tasks\WinZip Update Notifier 3 => C:\Program Files\WinZip\WZUpdateNotifier.exe [2018-10-22] (Corel Corporation) Task: {4CB5B6DD-0A7B-4BF1-B791-8D47C1814874} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-08-29] (Google Inc.) Task: {4F979D92-D470-4D55-8DFD-62B23057D1D4} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2015-09-22] (ASUSTek Computer Inc.) Task: {526B461F-F78A-4DA3-BEE2-98A3AC71F919} - System32\Tasks\ASUSTek Computer Inc\ASUS GIFTBOX => C:\Program Files (x86)\ASUS\Giftbox\asusgiftbox.exe [2017-07-03] (ASUSTek Computer Inc) Task: {5E3495C2-FB18-42D3-BB04-DF0C074F4B77} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-12-07] (Microsoft Corporation) Task: {5EE08B53-5F87-4A5E-86DF-72BD5B745C05} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2016-07-07] (ASUSTek COMPUTER INC.) Task: {65B85F6F-35B3-4459-A179-28255D5B7B25} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\WINDOWS\System32\WinBioPlugIns\FaceFodUninstaller.exe [2018-04-12] () Task: {6CB6B475-BC30-4806-BC43-0A28A5B9F434} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\sdxhelper.exe [2018-12-14] (Microsoft Corporation) Task: {6D5B5731-7C0C-4D6A-B9C9-591995935016} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2018-12-07] (Microsoft Corporation) Task: {70679778-83AD-4187-887B-72336E74D82F} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [2018-08-16] (AVAST Software) Task: {7450DC85-81F0-43A7-BBA2-4B0405783574} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\sdxhelper.exe [2018-12-14] (Microsoft Corporation) Task: {8B4A19E8-6C5C-4767-B082-E2890016DE07} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2018-12-14] (Microsoft Corporation) Task: {95200A59-8C56-4688-870A-14776607030B} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2018-08-16] (Realtek Semiconductor) Task: {9B69A8F2-34CE-43BA-A6FA-A28704963EC0} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2018-12-03] (Microsoft Corporation) Task: {B66487EE-B552-4F08-AE48-6EAE0806CAFD} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2016-05-24] (ASUS) Task: {BCE6D5D5-67BB-478E-948B-7832823449A0} - System32\Tasks\RtHDVBg_ListenToDevice => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2018-08-16] (Realtek Semiconductor) Task: {BEAF974C-344E-4207-9ACE-C413FF42F27E} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-08-01] () Task: {C3ED6D20-06B2-4B51-8BE7-FB42E054A4F2} - System32\Tasks\ATK Package A22126881260 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2015-09-22] (ASUSTek Computer Inc.) Task: {D622D4F9-9781-4BDC-AC96-6896AEA16E73} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2018-12-14] (Microsoft Corporation) Task: {DF612D40-E29B-42C2-8ABA-D1B5CB303363} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [2018-08-16] (AVAST Software) Task: {E39B04FB-3166-494E-B519-06F60D7B1BBC} - System32\Tasks\WpsExternal_20161111081738 => C:\Program Files (x86)\Kingsoft\WPS Office\ksolaunch.exe [2016-11-11] (Zhuhai Kingsoft Office Software Co.,Ltd) Task: {EC4EDDE3-F553-4309-9965-2D52EAE2F22C} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2016-02-23] (ASUSTek Computer Inc.) Task: {F2224BD2-FB45-4C0E-A8B2-80A86F4B140B} - System32\Tasks\Avast Driver Updater Startup => C:\Program Files (x86)\Avast Driver Updater\Avast Driver Updater.exe [2018-12-13] (AVAST Software) Task: {F3AA6A07-43E8-40D2-B0B1-3EF6FA993B3E} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2018-12-03] (Microsoft Corporation) (Als een item is opgenomen in de fixlist, wordt de taak (job) bestand verplaatst. Het bestand dat wordt uitgevoerd door de taak zal niet worden verplaatst.) Task: C:\WINDOWS\Tasks\Avast Driver Updater Startup.job => C:\Program Files (x86)\Avast Driver Updater\Avast Driver Updater.exe Task: C:\WINDOWS\Tasks\WpsExternal_20161111081738.job => C:\Program Files (x86)\Kingsoft\WPS Office\ksolaunch.exe Task: C:\WINDOWS\Tasks\WpsKtpcntrQingTask_Administrator.job => C:\Program Files (x86)\Kingsoft\WPS Office\10.1.0.5644\office6\ktpcntr.exeÃqing 10.1.0.5644 xxx server_url=hxxp:/kdl1.cache.wps.com/ksodl/wpscfg/client/____client____html____service____bubble.html ic_server_url=hxxp:/info.kingsoftstore.com/wpsv6internet/infos.ads ==================== Snelkoppelingen & WMI ======================== (De items kunnen worden opgenomen in de fixlist.txt om hersteld of verwijderd te worden.) ==================== Geladen Modules (gefilterd) ============== 2018-04-12 00:34 - 2018-04-12 00:34 - 000444416 _____ () c:\windows\system32\SSDM.dll 2017-12-08 01:48 - 2017-12-08 01:48 - 000088888 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2018-01-05 00:13 - 2018-01-05 00:13 - 001356088 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2018-04-12 00:34 - 2018-04-12 00:34 - 000491744 _____ () C:\Windows\System32\InputHost.dll 2018-04-12 00:34 - 2018-04-12 00:34 - 000472064 _____ () C:\Windows\ShellExperiences\TileControl.dll 2018-12-12 20:49 - 2018-11-09 03:17 - 002759680 _____ () C:\Windows\ShellComponents\TaskFlowUI.dll 2018-12-20 22:05 - 2018-12-14 07:50 - 002185728 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2018-10-04 17:31 - 2018-10-04 17:31 - 000009216 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.36.52.0_x64__kzf8qxf38zg5c\ImagePipelineNative.dll 2018-12-14 18:00 - 2018-12-14 18:00 - 000060416 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.36.52.0_x64__kzf8qxf38zg5c\ChakraBridge.dll 2018-12-14 18:00 - 2018-12-14 18:02 - 000019456 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.36.52.0_x64__kzf8qxf38zg5c\SkypeProxiesAndStubs.dll 2018-12-14 18:00 - 2018-12-14 18:01 - 010927616 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.36.52.0_x64__kzf8qxf38zg5c\LibWrapper.dll 2018-12-14 18:00 - 2018-12-14 18:02 - 002916864 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.36.52.0_x64__kzf8qxf38zg5c\skypert.dll 2018-12-14 18:00 - 2018-12-14 18:01 - 000688128 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.36.52.0_x64__kzf8qxf38zg5c\RtmMvrUap.dll 2018-12-14 18:00 - 2018-12-14 18:02 - 000182272 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.36.52.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe 2018-12-28 23:03 - 2018-11-15 11:01 - 002712432 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll 2018-12-28 23:03 - 2018-11-21 11:07 - 002842608 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll 2018-07-10 17:48 - 2018-07-10 18:47 - 001922224 _____ () C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.10314.31700.1000_x64__8wekyb3d8bbwe\Microsoft.Applications.Telemetry.Windows.dll 2018-12-18 00:34 - 2018-12-18 00:50 - 001436760 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11029.20108.0_x64__8wekyb3d8bbwe\Office.UI.Xaml.Word.dll 2018-10-09 14:32 - 2018-10-09 14:32 - 004389888 _____ () C:\Program Files\WindowsApps\Microsoft.OneConnect_5.1809.2571.0_x64__8wekyb3d8bbwe\OneConnect.dll 2018-11-06 18:46 - 2018-11-06 18:47 - 000070144 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11810.1001.12.0_x64__8wekyb3d8bbwe\WinStoreTasksWrapper.dll 2018-11-06 18:46 - 2018-11-06 18:47 - 000194048 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11810.1001.12.0_x64__8wekyb3d8bbwe\WinStore.Preview.dll 2018-11-18 17:25 - 2018-11-18 17:25 - 000596696 _____ () c:\program files\avast software\avast\streamback.dll 2017-07-03 10:51 - 2017-07-03 10:51 - 001937408 _____ () C:\Program Files (x86)\ASUS\Giftbox\ffmpeg.dll 2016-05-24 12:44 - 2016-05-24 12:44 - 000027648 _____ () C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll 2016-05-24 12:44 - 2016-05-24 12:44 - 000125440 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll 2016-05-24 12:44 - 2016-05-24 12:44 - 000029184 _____ () C:\Program Files (x86)\ASUS\Splendid\VideoEnhance.dll 2017-07-03 10:51 - 2017-07-03 10:51 - 003561984 _____ () C:\Program Files (x86)\ASUS\Giftbox\node.dll 2017-07-03 10:51 - 2017-07-03 10:51 - 000292352 _____ () \\?\C:\Program Files (x86)\ASUS\Giftbox\node_modules\appcloud-native-utils\anu.node 2018-03-07 11:09 - 2018-03-07 11:09 - 067126928 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2018-01-05 00:14 - 2018-01-05 00:14 - 001042232 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2018-01-05 00:14 - 2018-01-05 00:14 - 000189752 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxslt.dll 2017-12-08 01:49 - 2017-12-08 01:49 - 000076088 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2017-07-03 10:51 - 2017-07-03 10:51 - 002177536 _____ () C:\Program Files (x86)\ASUS\Giftbox\libglesv2.dll 2017-07-03 10:51 - 2017-07-03 10:51 - 000079360 _____ () C:\Program Files (x86)\ASUS\Giftbox\libegl.dll 2013-04-27 10:24 - 2013-04-27 10:24 - 000071680 _____ () C:\Program Files (x86)\ASUS\ASUS Live Update\checkmetro.dll ==================== Alternate Data Streams (gefilterd) ========= (Als een item is opgenomen in de fixlist, wordt alleen de ADS verwijderd.) ==================== Veilige Modus (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. De waarde van "AlternateShell" wordt hersteld.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" ==================== Bestandskoppeling (gefilterd) =============== (Als een item is opgenomen in de fixlist, zal het registeritem worden teruggezet naar de standaardwaarden of verwijderd.) ==================== Internet Explorer vertrouwde/beperkte toegang =============== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd.) IE trusted site: HKU\S-1-5-21-41158804-3025990116-3228914385-1003\...\sharepoint.com -> hxxps://surfspotnl-files.sharepoint.com ==================== Hosts inhoud: =============================== (Indien nodig kan Hosts:-opdracht worden opgenomen in de fixlist om Hosts te resetten.) 2016-07-16 12:47 - 2018-12-04 10:06 - 000000830 _____ C:\WINDOWS\system32\Drivers\etc\hosts ==================== Andere gebieden ============================ (Momenteel is er geen automatische fix voor dit onderdeel.) HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path: C:\Program Files (x86)\Intel\TXE Components\iCLS\;C:\Program Files\Intel\TXE Components\iCLS\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\TXE Components\DAL\;C:\Program Files (x86)\Intel\TXE Components\DAL\;C:\Program Files\Intel\TXE Components\IPT\;C:\Program Files (x86)\Intel\TXE Components\IPT\;%SYSTEMROOT%\System32\OpenSSH\ HKU\S-1-5-21-41158804-3025990116-3228914385-1000\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg HKU\S-1-5-21-41158804-3025990116-3228914385-1003\Control Panel\Desktop\\Wallpaper -> C:\Users\Jannick\Pictures\rainy-night-artistic-painting.jpg DNS Servers: 192.168.2.254 - 195.121.1.34 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin) Windows Firewall is ingeschakeld. ==================== MSCONFIG/TASK MANAGER Uitgeschakelde items == Als een item is opgenomen in de fixlist, zal het worden verwijderd. HKU\S-1-5-21-41158804-3025990116-3228914385-1003\...\StartupApproved\Run: => "Steam" HKU\S-1-5-21-41158804-3025990116-3228914385-1003\...\StartupApproved\Run: => "iCloudServices" ==================== Firewall regels (gefilterd) =============== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) FirewallRules: [{2982336A-4987-4D43-961F-BDB54715FDD2}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) FirewallRules: [{1F5EBEE9-2B27-40A7-B0D4-AA9B56C80A9D}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe Geen bestand FirewallRules: [{EAA190CF-2175-470E-8917-AD39A2EAF78C}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe Geen bestand FirewallRules: [{C4093708-BDFE-4C95-852E-8733B9096135}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe Geen bestand FirewallRules: [{E6E84590-9683-4EFC-A0D9-3BCBD4C4C59B}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe Geen bestand FirewallRules: [{883C2779-F119-480D-A398-3BFA087A5887}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe Geen bestand FirewallRules: [{6296AE25-1A1C-44A0-B7EA-E3BDDB1B6A4B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe Geen bestand FirewallRules: [UDP Query User{905D73C1-93F4-4CD5-9F0E-F7FBC0D66487}C:\users\jannick\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\jannick\appdata\roaming\spotify\spotify.exe (Spotify Ltd) FirewallRules: [TCP Query User{AA26ACD2-49BC-45AE-A51C-17CB3815EA2E}C:\users\jannick\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\jannick\appdata\roaming\spotify\spotify.exe (Spotify Ltd) FirewallRules: [{6BB80FE6-EE2C-42CA-A608-683E392101CF}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe Geen bestand FirewallRules: [{38799784-D45A-4D18-B6B4-F0C97F87B678}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe Geen bestand FirewallRules: [{B181FC74-6B2B-43A3-8C9F-5D26C2088844}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH) FirewallRules: [{8354D7DE-F9E7-4178-8ADB-B3D4A7529C8D}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH) FirewallRules: [{330795B2-535F-4A6E-81A3-514B70F3AFF1}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH) FirewallRules: [{90839865-C252-423B-9462-8FF039173977}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH) FirewallRules: [{870DF4E2-8952-43C8-A9E4-31E1DFAF83D8}] => (Allow) C:\Program Files (x86)\Steam1\Steam.exe (Valve Corporation) FirewallRules: [{8E2B4468-DE43-4557-B747-D6E5E41F694A}] => (Allow) C:\Program Files (x86)\Steam1\Steam.exe (Valve Corporation) FirewallRules: [{72D61524-050A-4B1D-8EC2-86ABA87FF775}] => (Allow) C:\Program Files (x86)\Steam1\bin\cef\cef.win7\steamwebhelper.exe Geen bestand FirewallRules: [{CE02B9FB-DF0F-429D-BF24-A0C6487CB280}] => (Allow) C:\Program Files (x86)\Steam1\bin\cef\cef.win7\steamwebhelper.exe Geen bestand FirewallRules: [{CD9C6939-41E4-406B-B14D-D490794ABE30}] => (Allow) C:\Program Files (x86)\Common Files\Mcafee\MMSSHost\MMSSHost.exe Geen bestand FirewallRules: [{526325D8-DDFF-4CD0-A5F7-0D0E7250D676}] => (Allow) C:\Program Files\Common Files\McAfee\MMSSHost\MMSSHost.exe Geen bestand FirewallRules: [{B9A2610C-ECF4-4ED2-B6AE-5CDB457723BA}] => (Allow) C:\Users\Jannick\AppData\Roaming\uTorrent\uTorrent.exe Geen bestand FirewallRules: [{94CC8D48-16AF-4854-BF44-59C7A53FD3BE}] => (Allow) C:\Users\Jannick\AppData\Roaming\uTorrent\uTorrent.exe Geen bestand FirewallRules: [TCP Query User{EC39FE10-7B12-4893-BBB1-9CD505DFB446}C:\program files\openshot video editor\launch.exe] => (Allow) C:\program files\openshot video editor\launch.exe () FirewallRules: [UDP Query User{AE63D677-604F-45E9-AF81-4627EB41B4D2}C:\program files\openshot video editor\launch.exe] => (Allow) C:\program files\openshot video editor\launch.exe () FirewallRules: [{898953C4-F483-47F6-B3AB-AB5FA9D52647}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Screen Recorder Pro 2\Apowersoft Screen Recorder Pro 2.exe Geen bestand FirewallRules: [{7BACE5D4-5BAA-46C6-89A3-1D1751550B96}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Screen Recorder Pro 2\Apowersoft Screen Recorder Pro 2.exe Geen bestand FirewallRules: [{38CD725D-688E-4F3C-9775-C6B71E535704}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation) FirewallRules: [{B3F65DF4-6F90-4315-97F4-8F37E21D3B99}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation) FirewallRules: [{E96F5DAD-ABDF-48D8-BCCA-615F9CB76E6A}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Screen Recorder Pro 2\Video Editor Plugin\Apowersoft Video Editor.exe Geen bestand FirewallRules: [{59928154-1BA5-44D9-956A-BFFABBF5DE03}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Screen Recorder Pro 2\Video Editor Plugin\Apowersoft Video Editor.exe Geen bestand FirewallRules: [{015B33AA-A30B-46BB-9E54-EE7794FEA2BE}] => (Allow) C:\Program Files (x86)\Steam1\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corporation) FirewallRules: [{A6877F90-CD80-4BFC-B1FB-03C86119C63F}] => (Allow) C:\Program Files (x86)\Steam1\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corporation) FirewallRules: [{9024F697-A313-4C7C-B002-45825EFF0A65}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation) FirewallRules: [{E3C71C56-DDD8-471D-9D08-E9A63E586934}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation) FirewallRules: [{101E75C9-AB31-401B-8EA0-FF26FB3F0C0B}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation) FirewallRules: [TCP Query User{0D2D6561-5C64-4214-B846-762F3DA886EB}C:\program files (x86)\steam1\steamapps\common\anno 1404\tools\anno4web.exe] => (Allow) C:\program files (x86)\steam1\steamapps\common\anno 1404\tools\anno4web.exe Geen bestand FirewallRules: [UDP Query User{056BDD7E-44F3-460B-9AE7-A813FBF7E75C}C:\program files (x86)\steam1\steamapps\common\anno 1404\tools\anno4web.exe] => (Allow) C:\program files (x86)\steam1\steamapps\common\anno 1404\tools\anno4web.exe Geen bestand FirewallRules: [TCP Query User{67BA6CDD-CB2A-41F5-8D2A-7761D6324AE9}C:\program files (x86)\steam1\steamapps\common\outlast\binaries\win64\olgame.exe] => (Allow) C:\program files (x86)\steam1\steamapps\common\outlast\binaries\win64\olgame.exe Geen bestand FirewallRules: [UDP Query User{E2D7C2E9-0DA4-42F5-A4BB-34CBBB344673}C:\program files (x86)\steam1\steamapps\common\outlast\binaries\win64\olgame.exe] => (Allow) C:\program files (x86)\steam1\steamapps\common\outlast\binaries\win64\olgame.exe Geen bestand FirewallRules: [{1E3C265B-4847-4BD4-814A-0327EB307A97}] => (Allow) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe (AVAST Software) FirewallRules: [{43593E93-E3E9-4287-B24B-60A7FED8D34C}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) FirewallRules: [{541A2BE5-1707-4575-AB4A-76EFB64FFA63}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe (AVAST Software) FirewallRules: [{DB29D76F-A62E-4913-9CD2-DF93A63F2D7B}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe (AVAST Software) ==================== Herstelpunten ========================= AANDACHT: Systeemherstel is uitgeschakeld ==================== Defecte Apparaatbeheer Apparaten ============= ==================== Eventlog fouten: ========================= Applicatiefouten: ================== Error: (01/02/2019 04:32:09 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Naam van toepassing met fout: svchost.exe_WpnUserService, versie: 10.0.17134.1, tijdstempel: 0xa38b9ab2 Naam van module met fout: NotificationController.dll, versie: 10.0.17134.165, tijdstempel: 0xe0385185 Uitzonderingscode: 0xc0000005 Foutmarge: 0x000000000007a24d Id van proces met fout: 0x25e8 Starttijd van toepassing met fout: 0x01d4a2ada312244f Pad naar toepassing met fout: C:\WINDOWS\system32\svchost.exe Pad naar module met fout: C:\Windows\System32\NotificationController.dll Rapport-id: 46c1a37d-4c94-431d-bf17-8e708cab4186 Volledige pakketnaam met fout: Relatieve toepassings-id van pakket met fout: Error: (01/02/2019 04:12:39 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Naam van toepassing met fout: svchost.exe_WpnUserService, versie: 10.0.17134.1, tijdstempel: 0xa38b9ab2 Naam van module met fout: NotificationController.dll, versie: 10.0.17134.165, tijdstempel: 0xe0385185 Uitzonderingscode: 0xc0000005 Foutmarge: 0x000000000007a24d Id van proces met fout: 0x2bd4 Starttijd van toepassing met fout: 0x01d49ef84d7ceac4 Pad naar toepassing met fout: C:\WINDOWS\system32\svchost.exe Pad naar module met fout: C:\Windows\System32\NotificationController.dll Rapport-id: 378de590-530b-4558-b18d-5eaa0e670b57 Volledige pakketnaam met fout: Relatieve toepassings-id van pakket met fout: Error: (01/02/2019 03:59:12 PM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: ) Description: Event-ID 0 Error: (12/28/2018 05:43:38 PM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: ) Description: Event-ID 0 Error: (12/27/2018 05:34:37 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Naam van toepassing met fout: svchost.exe_WpnUserService, versie: 10.0.17134.1, tijdstempel: 0xa38b9ab2 Naam van module met fout: NotificationController.dll, versie: 10.0.17134.165, tijdstempel: 0xe0385185 Uitzonderingscode: 0xc0000005 Foutmarge: 0x000000000007a24d Id van proces met fout: 0xed8 Starttijd van toepassing met fout: 0x01d49c48b233d7e3 Pad naar toepassing met fout: C:\WINDOWS\system32\svchost.exe Pad naar module met fout: C:\Windows\System32\NotificationController.dll Rapport-id: 1391e929-7620-4d8c-b8c2-b58eaf9d9e36 Volledige pakketnaam met fout: Relatieve toepassings-id van pakket met fout: Error: (12/27/2018 04:38:19 PM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: ) Description: Event-ID 0 Error: (12/25/2018 12:57:26 PM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: ) Description: Event-ID 0 Error: (12/24/2018 05:22:05 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Naam van toepassing met fout: svchost.exe_WpnUserService, versie: 10.0.17134.1, tijdstempel: 0xa38b9ab2 Naam van module met fout: NotificationController.dll, versie: 10.0.17134.165, tijdstempel: 0xe0385185 Uitzonderingscode: 0xc0000005 Foutmarge: 0x000000000007c686 Id van proces met fout: 0x3574 Starttijd van toepassing met fout: 0x01d49b9fd304b55a Pad naar toepassing met fout: C:\WINDOWS\system32\svchost.exe Pad naar module met fout: C:\Windows\System32\NotificationController.dll Rapport-id: 1810d8f3-06f0-4f9c-92eb-a7a525cd4a9f Volledige pakketnaam met fout: Relatieve toepassings-id van pakket met fout: Systeemfouten: ============= Error: (01/02/2019 05:55:46 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-6IA11JD) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} en APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} aan de gebruiker DESKTOP-6IA11JD\Jannick SID (S-1-5-21-41158804-3025990116-3228914385-1003) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (01/02/2019 04:32:13 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: De Windows Push Notifications User Service_fcc1f-service is onverwacht gestopt. Dit is 2 keer gebeurd. De volgende herstelbewerking zal over 10000 milliseconden worden uitgevoerd: Service opnieuw starten. Error: (01/02/2019 04:12:44 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: De Windows Push Notifications User Service_fcc1f-service is onverwacht gestopt. Dit is 1 keer gebeurd. De volgende herstelbewerking zal over 10000 milliseconden worden uitgevoerd: Service opnieuw starten. Error: (01/02/2019 03:59:04 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} en APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} aan de gebruiker NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (01/02/2019 03:56:36 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-6IA11JD) Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {8BC3F05E-D86B-11D0-A075-00C04FB68820} en APPID {8BC3F05E-D86B-11D0-A075-00C04FB68820} aan de gebruiker DESKTOP-6IA11JD\Jannick SID (S-1-5-21-41158804-3025990116-3228914385-1003) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Microsoft.Windows.ContentDeliveryManager_10.0.17134.1_neutral_neutral_cw5n1h2txyewy SID (S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (01/02/2019 03:56:20 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: In de machtigingsinstellingen standaard voor deze computer wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {0358B920-0AC7-461F-98F4-58E32CD89148} en APPID {3EB3C877-1F16-487C-9050-104DBCD66683} aan de gebruiker NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (01/02/2019 03:56:20 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: In de machtigingsinstellingen standaard voor deze computer wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID {0358B920-0AC7-461F-98F4-58E32CD89148} en APPID {3EB3C877-1F16-487C-9050-104DBCD66683} aan de gebruiker NT AUTHORITY\LOCAL SERVICE SID (S-1-5-19) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services. Error: (12/28/2018 10:57:19 PM) (Source: Service Control Manager) (EventID: 7032) (User: ) Description: Servicebesturingsbeheer heeft na het onverwachte afsluiten van de Windows Push Notifications User Service_fcc1f-service geprobeerd een herstelactie (Service opnieuw starten) uit te voeren, maar deze actie is met de volgende fout mislukt: De service is al gestart. CodeIntegrity: =================================== Date: 2018-12-28 22:55:39.262 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll that did not meet the Microsoft signing level requirements. Date: 2018-12-27 22:16:24.872 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll that did not meet the Microsoft signing level requirements. Date: 2018-11-29 16:53:13.993 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll that did not meet the Microsoft signing level requirements. Date: 2018-10-29 17:39:26.120 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\Apple\INTERNET SERVICES\SHELLSTREAMS64.DLL that did not meet the Microsoft signing level requirements. Date: 2018-10-14 15:49:25.728 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll that did not meet the Microsoft signing level requirements. Date: 2018-08-19 20:49:12.270 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll that did not meet the Microsoft signing level requirements. Date: 2018-08-18 20:04:53.364 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll that did not meet the Microsoft signing level requirements. Date: 2018-07-26 13:48:58.813 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume3\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll that did not meet the Microsoft signing level requirements. ==================== Geheugen info =========================== Processor: Intel(R) Pentium(R) CPU N4200 @ 1.10GHz Percentage geheugen in gebruik: 73% Totaal fysiek RAM-geheugen: 3959.59 MB Beschikbaar fysiek RAM-geheugen: 1036.39 MB Totaal Virtueel geheugen: 7031.59 MB Beschikbaar Virtueel geheugen: 3123.29 MB ==================== Schijven ================================ Drive c: (OS) (Fixed) (Total:117.36 GB) (Free:29.23 GB) NTFS ==>[systeem met boot componenten (verkregen van schijf)] \\?\Volume{adea5a18-f29c-4a1c-8bd1-bf2307bc25a7}\ () (Fixed) (Total:0.83 GB) (Free:0.45 GB) NTFS \\?\Volume{685f1e59-05f1-4ba9-bb00-6702fe4f572b}\ (RECOVERY) (Fixed) (Total:0.78 GB) (Free:0.44 GB) NTFS \\?\Volume{3e8d5ee3-60d5-49fb-9f58-baa7aba7c96f}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32 ==================== MBR & Partitietabel ================== ======================================================== Disk: 0 (Size: 119.2 GB) (Disk ID: 32F7F4C1) Partition: GPT. ==================== Eind van Addition.txt ============================