Fix resultaat van Farbar Recovery Scan Tool (x64) Versie: 01.01.2019 Gestart door Jannick (02-01-2019 18:52:54) Run:1 Gestart vanaf C:\Users\Jannick\Desktop Geladen Profielen: defaultuser0 & Jannick (Beschikbare Profielen: defaultuser0 & Jannick) Boot Modus: Normal ============================================== fixlist inhoud: ***************** CreateRestorePoint: CloseProcesses: HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== AANDACHT SearchScopes: HKU\S-1-5-21-41158804-3025990116-3228914385-1003 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-41158804-3025990116-3228914385-1003 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = Startup: C:\Users\Jannick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Registration .LNK [2018-07-13] S3 SWDUMon; C:\WINDOWS\system32\DRIVERS\SWDUMon.sys [25608 2018-12-28] (SlimWare Utilities, Inc.) C:\Windows\Temp\DPTF\esif_assist_64.exe ContextMenuHandlers1: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll -> Geen bestand ContextMenuHandlers4: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll -> Geen bestand ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Geen bestand Task: {423FD249-4E70-459D-B83A-2FF8AA9C99E5} - \Microsoft\Windows\UNP\RunCampaignManager -> Geen bestand <==== AANDACHT FirewallRules: [{1F5EBEE9-2B27-40A7-B0D4-AA9B56C80A9D}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe Geen bestand FirewallRules: [{EAA190CF-2175-470E-8917-AD39A2EAF78C}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe Geen bestand FirewallRules: [{C4093708-BDFE-4C95-852E-8733B9096135}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe Geen bestand FirewallRules: [{E6E84590-9683-4EFC-A0D9-3BCBD4C4C59B}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe Geen bestand FirewallRules: [{883C2779-F119-480D-A398-3BFA087A5887}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe Geen bestand FirewallRules: [{6296AE25-1A1C-44A0-B7EA-E3BDDB1B6A4B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe Geen bestand FirewallRules: [{6BB80FE6-EE2C-42CA-A608-683E392101CF}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe Geen bestand FirewallRules: [{38799784-D45A-4D18-B6B4-F0C97F87B678}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe Geen bestand FirewallRules: [{72D61524-050A-4B1D-8EC2-86ABA87FF775}] => (Allow) C:\Program Files (x86)\Steam1\bin\cef\cef.win7\steamwebhelper.exe Geen bestand FirewallRules: [{CE02B9FB-DF0F-429D-BF24-A0C6487CB280}] => (Allow) C:\Program Files (x86)\Steam1\bin\cef\cef.win7\steamwebhelper.exe Geen bestand FirewallRules: [{CD9C6939-41E4-406B-B14D-D490794ABE30}] => (Allow) C:\Program Files (x86)\Common Files\Mcafee\MMSSHost\MMSSHost.exe Geen bestand FirewallRules: [{526325D8-DDFF-4CD0-A5F7-0D0E7250D676}] => (Allow) C:\Program Files\Common Files\McAfee\MMSSHost\MMSSHost.exe Geen bestand FirewallRules: [{B9A2610C-ECF4-4ED2-B6AE-5CDB457723BA}] => (Allow) C:\Users\Jannick\AppData\Roaming\uTorrent\uTorrent.exe Geen bestand FirewallRules: [{94CC8D48-16AF-4854-BF44-59C7A53FD3BE}] => (Allow) C:\Users\Jannick\AppData\Roaming\uTorrent\uTorrent.exe Geen bestand FirewallRules: [{898953C4-F483-47F6-B3AB-AB5FA9D52647}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Screen Recorder Pro 2\Apowersoft Screen Recorder Pro 2.exe Geen bestand FirewallRules: [{7BACE5D4-5BAA-46C6-89A3-1D1751550B96}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Screen Recorder Pro 2\Apowersoft Screen Recorder Pro 2.exe Geen bestand FirewallRules: [{E96F5DAD-ABDF-48D8-BCCA-615F9CB76E6A}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Screen Recorder Pro 2\Video Editor Plugin\Apowersoft Video Editor.exe Geen bestand FirewallRules: [{59928154-1BA5-44D9-956A-BFFABBF5DE03}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Screen Recorder Pro 2\Video Editor Plugin\Apowersoft Video Editor.exe Geen bestand FirewallRules: [TCP Query User{0D2D6561-5C64-4214-B846-762F3DA886EB}C:\program files (x86)\steam1\steamapps\common\anno 1404\tools\anno4web.exe] => (Allow) C:\program files (x86)\steam1\steamapps\common\anno 1404\tools\anno4web.exe Geen bestand FirewallRules: [UDP Query User{056BDD7E-44F3-460B-9AE7-A813FBF7E75C}C:\program files (x86)\steam1\steamapps\common\anno 1404\tools\anno4web.exe] => (Allow) C:\program files (x86)\steam1\steamapps\common\anno 1404\tools\anno4web.exe Geen bestand FirewallRules: [TCP Query User{67BA6CDD-CB2A-41F5-8D2A-7761D6324AE9}C:\program files (x86)\steam1\steamapps\common\outlast\binaries\win64\olgame.exe] => (Allow) C:\program files (x86)\steam1\steamapps\common\outlast\binaries\win64\olgame.exe Geen bestand FirewallRules: [UDP Query User{E2D7C2E9-0DA4-42F5-A4BB-34CBBB344673}C:\program files (x86)\steam1\steamapps\common\outlast\binaries\win64\olgame.exe] => (Allow) C:\program files (x86)\steam1\steamapps\common\outlast\binaries\win64\olgame.exe Geen bestand EmptyTemp: ***************** Fout: (0) Mislukt om een herstelpunt te maken. Proces succesvol afgesloten. HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== AANDACHT => met succes hersteld "HKU\S-1-5-21-41158804-3025990116-3228914385-1003\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => is succesvol verwijderd HKU\S-1-5-21-41158804-3025990116-3228914385-1003\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => is succesvol verwijderd HKLM\Software\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => niet gevonden C:\Users\Jannick\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Registration .LNK => is succesvol verplaatst HKLM\System\CurrentControlSet\Services\SWDUMon => is succesvol verwijderd SWDUMon => dienst is succesvol verwijderd C:\Windows\Temp\DPTF\esif_assist_64.exe => is succesvol verplaatst HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinZip => is succesvol verwijderd HKLM\Software\Classes\CLSID\{E0D79304-84BE-11CE-9641-444553540000} => is succesvol verwijderd HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\WinZip => is succesvol verwijderd HKLM\Software\Classes\CLSID\{E0D79304-84BE-11CE-9641-444553540000} => niet gevonden HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => is succesvol verwijderd HKLM\Software\Classes\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => niet gevonden "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{423FD249-4E70-459D-B83A-2FF8AA9C99E5}" => is succesvol verwijderd "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{423FD249-4E70-459D-B83A-2FF8AA9C99E5}" => is succesvol verwijderd "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunCampaignManager" => niet gevonden "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{1F5EBEE9-2B27-40A7-B0D4-AA9B56C80A9D}" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{EAA190CF-2175-470E-8917-AD39A2EAF78C}" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C4093708-BDFE-4C95-852E-8733B9096135}" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E6E84590-9683-4EFC-A0D9-3BCBD4C4C59B}" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{883C2779-F119-480D-A398-3BFA087A5887}" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{6296AE25-1A1C-44A0-B7EA-E3BDDB1B6A4B}" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{6BB80FE6-EE2C-42CA-A608-683E392101CF}" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{38799784-D45A-4D18-B6B4-F0C97F87B678}" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{72D61524-050A-4B1D-8EC2-86ABA87FF775}" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CE02B9FB-DF0F-429D-BF24-A0C6487CB280}" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CD9C6939-41E4-406B-B14D-D490794ABE30}" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{526325D8-DDFF-4CD0-A5F7-0D0E7250D676}" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{B9A2610C-ECF4-4ED2-B6AE-5CDB457723BA}" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{94CC8D48-16AF-4854-BF44-59C7A53FD3BE}" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{898953C4-F483-47F6-B3AB-AB5FA9D52647}" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{7BACE5D4-5BAA-46C6-89A3-1D1751550B96}" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E96F5DAD-ABDF-48D8-BCCA-615F9CB76E6A}" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{59928154-1BA5-44D9-956A-BFFABBF5DE03}" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{0D2D6561-5C64-4214-B846-762F3DA886EB}C:\program files (x86)\steam1\steamapps\common\anno 1404\tools\anno4web.exe" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{056BDD7E-44F3-460B-9AE7-A813FBF7E75C}C:\program files (x86)\steam1\steamapps\common\anno 1404\tools\anno4web.exe" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{67BA6CDD-CB2A-41F5-8D2A-7761D6324AE9}C:\program files (x86)\steam1\steamapps\common\outlast\binaries\win64\olgame.exe" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{E2D7C2E9-0DA4-42F5-A4BB-34CBBB344673}C:\program files (x86)\steam1\steamapps\common\outlast\binaries\win64\olgame.exe" => is succesvol verwijderd =========== EmptyTemp: ========== BITS transfer queue => 10772480 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 29013230 B Java, Flash, Steam htmlcache => 235433724 B Windows/system/drivers => 1803209 B Edge => 9635341 B Chrome => 181445201 B Firefox => 0 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 0 B Users => 0 B ProgramData => 0 B Public => 0 B systemprofile => 0 B systemprofile32 => 0 B LocalService => 3261902 B LocalService => 0 B NetworkService => 0 B NetworkService => 0 B defaultuser0 => 8704 B Jannick => 23156704 B RecycleBin => 4066425527 B EmptyTemp: => 4.2 GB tijdelijke gegevens verwijderd. ================================ Het systeem moest herstart worden. ==== Eind van Fixlog 18:54:43 ====