Scanresultaten van Farbar Recovery Scan Tool (FRST) (x64) Versie: 11.03.2019 Gestart door Annie (Beheerder) op LAPTOP (13-03-2019 16:48:04) Gestart vanaf C:\Users\Annie\Desktop Geladen Profielen: Annie & (Beschikbare Profielen: Annie) Platform: Windows 10 Home Versie 1803 17134.590 (X64) Taal: Nederlands (Nederland) Standaardbrowser: Edge Boot Modus: Normal Handleiding voor Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processen (gefilterd) ================= (Als een item is opgenomen in de fixlist, zal het proces worden gesloten. Het bestand zal niet worden verplaatst.) (Steve Sinchak -> Advanced PC Media LLC) [Bestand niet getekend] C:\Program Files (x86)\Advanced PC Media LLC\Tweaks.com Boot to Desktop\Tweaks_Desktop_Service.exe (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RTKAUDIOSERVICE64.EXE () [Bestand niet getekend] C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe (Intel® Upgrade Service -> Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (McAfee, Inc. -> McAfee, Inc.) C:\Windows\System32\mfevtps.exe (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe (TOSHIBA CORPORATION -> TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe (TOSHIBA CORPORATION -> TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe (McAfee, Inc. -> McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe (Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.23\GoogleCrashHandler.exe (Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.23\GoogleCrashHandler64.exe (McAfee, Inc. -> McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mcshield.exe (Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Toshiba Europe Gmbh -> Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe (TOSHIBA CORPORATION -> TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Microsoft Windows -> Microsoft Corporation) C:\Program Files\rempl\sedsvc.exe Kon geen toegang krijgen tot proces -> MBAMService.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Microsoft Corporation -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1812.3-0\MsMpEng.exe (Microsoft Windows -> Microsoft Corporation) C:\Program Files\rempl\sedlauncher.exe (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Steve Sinchak -> Advanced PC Media LLC) [Bestand niet getekend] C:\Program Files (x86)\Advanced PC Media LLC\Tweaks.com Boot to Desktop\Tweaks_Desktop.exe (Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Microsoft Corporation) [Bestand niet getekend] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.40.70.0_x64__kzf8qxf38zg5c\SkypeApp.exe () [Bestand niet getekend] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.40.70.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe (TOSHIBA CORPORATION -> ) C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe (TOSHIBA CORPORATION -> TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoResident.exe (DTS, Inc. -> SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxpers.exe (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Microsoft Corporation -> © 2015 Microsoft Corporation) C:\Users\Annie\AppData\Local\Microsoft\BingSvc\BingSvc.exe (Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe () [Bestand niet getekend] C:\Program Files (x86)\SpywareGuard\sgmain.exe () [Bestand niet getekend] C:\Program Files (x86)\SpywareGuard\sgbhp.exe (Intel® Services Manager -> Intel Corporation) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (TOSHIBA CORPORATION -> TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11231.20192.0_x64__8wekyb3d8bbwe\HxTsr.exe (Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Register (gefilterd) =========================== (Als een item is opgenomen in de fixlist, zal het registeritem worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.) HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Windows -> Microsoft Corporation) HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe [2565544 2012-10-31] (TOSHIBA CORPORATION -> ) HKLM\...\Run: [TODDMain] => C:\Program Files (x86)\TOSHIBA\System Setting\TODDMain.exe [213136 2012-08-04] (TOSHIBA CORPORATION -> ) HKLM\...\Run: [TecoResident] => C:\Program Files\TOSHIBA\Teco\TecoResident.exe [169896 2012-08-14] (TOSHIBA CORPORATION -> TOSHIBA Corporation) HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [356776 2012-07-11] (TOSHIBA CORPORATION -> TOSHIBA Corporation) HKLM\...\Run: [SRS Premium Sound HD] => C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe [2172816 2012-10-22] (DTS, Inc. -> SRS Labs, Inc.) HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation -> Microsoft Corporation) HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14021336 2015-06-18] (Realtek Semiconductor Corp -> Realtek Semiconductor) HKLM-x32\...\Run: [Intel AppUp(R) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [156000 2012-12-18] (Intel® Services Manager -> Intel Corporation) HKLM-x32\...\Run: [TPUReg] => C:\Program Files (x86)\TOSHIBA\Password Utility\TosPU.exe [7152640 2012-12-05] (Pegatron Corporation) [Bestand niet getekend] HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [601424 2018-12-16] (Oracle America, Inc. -> Oracle Corporation) HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Windows -> Microsoft Corporation) HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03022019081149987\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Windows -> Microsoft Corporation) HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03022019081209783\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Windows -> Microsoft Corporation) HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03042019081025633\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Windows -> Microsoft Corporation) HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03062019084549915\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Windows -> Microsoft Corporation) HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03062019090827573\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Windows -> Microsoft Corporation) HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03082019091512395\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Windows -> Microsoft Corporation) HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03112019081917865\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Windows -> Microsoft Corporation) HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03112019082234673\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Windows -> Microsoft Corporation) HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Windows -> Microsoft Corporation) HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03022019081150221\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Windows -> Microsoft Corporation) HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03022019081209955\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Windows -> Microsoft Corporation) HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03042019081026040\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Windows -> Microsoft Corporation) HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03062019084550390\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Windows -> Microsoft Corporation) HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03062019090827995\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Windows -> Microsoft Corporation) HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03082019091513161\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Windows -> Microsoft Corporation) HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03112019081918084\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Windows -> Microsoft Corporation) HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03112019082234814\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518144 2018-04-12] (Microsoft Windows -> Microsoft Corporation) HKU\S-1-5-21-3912880405-153536985-1551083293-1001\...\Run: [BingSvc] => C:\Users\Annie\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-05] (Microsoft Corporation -> © 2015 Microsoft Corporation) HKU\S-1-5-21-3912880405-153536985-1551083293-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22458328 2019-02-27] (Piriform Software Ltd -> Piriform Software Ltd) HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03022019081150409\...\Run: [BingSvc] => C:\Users\Annie\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-05] (Microsoft Corporation -> © 2015 Microsoft Corporation) HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03022019081150409\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22458328 2019-02-27] (Piriform Software Ltd -> Piriform Software Ltd) HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03022019081210236\...\Run: [BingSvc] => C:\Users\Annie\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-05] (Microsoft Corporation -> © 2015 Microsoft Corporation) HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03022019081210236\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22458328 2019-02-27] (Piriform Software Ltd -> Piriform Software Ltd) HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03042019081026305\...\Run: [BingSvc] => C:\Users\Annie\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-05] (Microsoft Corporation -> © 2015 Microsoft Corporation) HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03042019081026305\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22458328 2019-02-27] (Piriform Software Ltd -> Piriform Software Ltd) HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03062019084550732\...\Run: [BingSvc] => C:\Users\Annie\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-05] (Microsoft Corporation -> © 2015 Microsoft Corporation) HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03062019084550732\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22458328 2019-02-27] (Piriform Software Ltd -> Piriform Software Ltd) HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03062019090828354\...\Run: [BingSvc] => C:\Users\Annie\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-05] (Microsoft Corporation -> © 2015 Microsoft Corporation) HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03062019090828354\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22458328 2019-02-27] (Piriform Software Ltd -> Piriform Software Ltd) HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03082019091514239\...\Run: [BingSvc] => C:\Users\Annie\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-05] (Microsoft Corporation -> © 2015 Microsoft Corporation) HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03082019091514239\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22458328 2019-02-27] (Piriform Software Ltd -> Piriform Software Ltd) HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03112019081918318\...\Run: [BingSvc] => C:\Users\Annie\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-05] (Microsoft Corporation -> © 2015 Microsoft Corporation) HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03112019081918318\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22458328 2019-02-27] (Piriform Software Ltd -> Piriform Software Ltd) HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03112019082235017\...\Run: [BingSvc] => C:\Users\Annie\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-05] (Microsoft Corporation -> © 2015 Microsoft Corporation) HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03112019082235017\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22458328 2019-02-27] (Piriform Software Ltd -> Piriform Software Ltd) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\72.0.3626.121\Installer\chrmstp.exe [2019-03-05] (Google LLC -> Google Inc.) ShellExecuteHooks-x32: SpywareGuard.Handler - {81559C35-8464-49F7-BB0E-07A383BEF910} - C:\Program Files (x86)\SpywareGuard\spywareguard.dll [126976 2003-08-02] () [Bestand niet getekend] Startup: C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SpywareGuard.lnk [2017-04-13] ShortcutTarget: SpywareGuard.lnk -> C:\Program Files (x86)\SpywareGuard\sgmain.exe () [Bestand niet getekend] ==================== Internet (gefilterd) ==================== (Als een item is opgenomen in de fixlist en een registeritem is, wordt het verwijderd of hersteld naar de standaard.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{1c04f718-364f-4f8e-8706-2719ac017ebd}: [NameServer] 8.8.8.8,8.8.4.4 Tcpip\..\Interfaces\{1c04f718-364f-4f8e-8706-2719ac017ebd}: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{dbbeb4b3-9aec-4f30-9f75-6fa7283ec9a9}: [NameServer] 8.8.8.8,8.8.4.4 Tcpip\..\Interfaces\{dbbeb4b3-9aec-4f30-9f75-6fa7283ec9a9}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restrictie <==== AANDACHT HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome HKU\S-1-5-21-3912880405-153536985-1551083293-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-3912880405-153536985-1551083293-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.facebook.com/ HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03022019081150409\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03022019081150409\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.facebook.com/ HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03022019081210236\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03022019081210236\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.facebook.com/ HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03042019081026305\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03042019081026305\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.facebook.com/ HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03062019084550732\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03062019084550732\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.facebook.com/ HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03062019090828354\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03062019090828354\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.facebook.com/ HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03082019091514239\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03082019091514239\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.facebook.com/ HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03112019081918318\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03112019081918318\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.facebook.com/ HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03112019082235017\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03112019082235017\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.facebook.com/ SearchScopes: HKLM-x32 -> DefaultScope waarde ontbreekt SearchScopes: HKU\S-1-5-21-3912880405-153536985-1551083293-1001 -> DefaultScope {702A5DA1-78AC-413A-A860-CF67BE100ECB} URL = SearchScopes: HKU\S-1-5-21-3912880405-153536985-1551083293-1001 -> {702A5DA1-78AC-413A-A860-CF67BE100ECB} URL = SearchScopes: HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03022019081150409 -> DefaultScope {702A5DA1-78AC-413A-A860-CF67BE100ECB} URL = SearchScopes: HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03022019081150409 -> {702A5DA1-78AC-413A-A860-CF67BE100ECB} URL = SearchScopes: HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03022019081210236 -> DefaultScope {702A5DA1-78AC-413A-A860-CF67BE100ECB} URL = SearchScopes: HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03022019081210236 -> {702A5DA1-78AC-413A-A860-CF67BE100ECB} URL = SearchScopes: HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03042019081026305 -> DefaultScope {702A5DA1-78AC-413A-A860-CF67BE100ECB} URL = SearchScopes: HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03042019081026305 -> {702A5DA1-78AC-413A-A860-CF67BE100ECB} URL = SearchScopes: HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03062019084550732 -> DefaultScope {702A5DA1-78AC-413A-A860-CF67BE100ECB} URL = SearchScopes: HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03062019084550732 -> {702A5DA1-78AC-413A-A860-CF67BE100ECB} URL = SearchScopes: HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03062019090828354 -> DefaultScope {702A5DA1-78AC-413A-A860-CF67BE100ECB} URL = SearchScopes: HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03062019090828354 -> {702A5DA1-78AC-413A-A860-CF67BE100ECB} URL = SearchScopes: HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03082019091514239 -> DefaultScope {702A5DA1-78AC-413A-A860-CF67BE100ECB} URL = SearchScopes: HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03082019091514239 -> {702A5DA1-78AC-413A-A860-CF67BE100ECB} URL = SearchScopes: HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03112019081918318 -> DefaultScope {702A5DA1-78AC-413A-A860-CF67BE100ECB} URL = SearchScopes: HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03112019081918318 -> {702A5DA1-78AC-413A-A860-CF67BE100ECB} URL = SearchScopes: HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03112019082235017 -> DefaultScope {702A5DA1-78AC-413A-A860-CF67BE100ECB} URL = SearchScopes: HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03112019082235017 -> {702A5DA1-78AC-413A-A860-CF67BE100ECB} URL = BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation -> Microsoft Corporation) BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-24] (Google Inc -> Google Inc.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: SpywareGuardDLBLOCK.CBrowserHelper -> {4A368E80-174F-4872-96B5-0B27DDD11DB2} -> C:\Program Files (x86)\SpywareGuard\dlprotect.dll [2003-08-02] () [Bestand niet getekend] BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\ssv.dll [2019-02-27] (Oracle America, Inc. -> Oracle Corporation) BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-24] (Google Inc -> Google Inc.) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\jp2ssv.dll [2019-02-27] (Oracle America, Inc. -> Oracle Corporation) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-24] (Google Inc -> Google Inc.) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-24] (Google Inc -> Google Inc.) Toolbar: HKU\S-1-5-21-3912880405-153536985-1551083293-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-24] (Google Inc -> Google Inc.) Toolbar: HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03022019081150409 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-24] (Google Inc -> Google Inc.) Toolbar: HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03022019081210236 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-24] (Google Inc -> Google Inc.) Toolbar: HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03042019081026305 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-24] (Google Inc -> Google Inc.) Toolbar: HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03062019084550732 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-24] (Google Inc -> Google Inc.) Toolbar: HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03062019090828354 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-24] (Google Inc -> Google Inc.) Toolbar: HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03082019091514239 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-24] (Google Inc -> Google Inc.) Toolbar: HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03112019081918318 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-24] (Google Inc -> Google Inc.) Toolbar: HKU\S-1-5-21-3912880405-153536985-1551083293-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03112019082235017 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-24] (Google Inc -> Google Inc.) Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Geen bestand FireFox: ======== FF DefaultProfile: qq1gk2f1.default-1399822041230 FF ProfilePath: C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\qq1gk2f1.default-1399822041230 [2019-03-13] FF Homepage: Mozilla\Firefox\Profiles\qq1gk2f1.default-1399822041230 -> hxxps://www.facebook.com/ FF Extension: (eID België) - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\qq1gk2f1.default-1399822041230\Extensions\belgiumeid@eid.belgium.be.xpi [2018-11-09] FF Extension: (Bing Search) - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\qq1gk2f1.default-1399822041230\Extensions\bingsearch.full@microsoft.com.xpi [2016-07-24] [Verouderd] FF Extension: (eID Chrome Extension) - C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\qq1gk2f1.default-1399822041230\Extensions\eid-chrome-extension@e-contract.be.xpi [2018-11-02] [UpdateUrl:hxxps://www.e-contract.be/eid-chrome/releases/eid-chrome-extension-updates.json] FF SearchPlugin: C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\qq1gk2f1.default-1399822041230\searchplugins\bing-.xml [2016-07-24] FF SearchPlugin: C:\Users\Annie\AppData\Roaming\Mozilla\Firefox\Profiles\qq1gk2f1.default-1399822041230\searchplugins\bingp.xml [2014-10-27] FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => niet gevonden FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_156.dll [2019-03-12] (Adobe Systems Incorporated -> ) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_156.dll [2019-03-12] (Adobe Systems Incorporated -> ) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-07] (Intel® Identity Protection Technology Software -> Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-07] (Intel® Identity Protection Technology Software -> Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.201.2 -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\dtplugin\npDeployJava1.dll [2019-02-27] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.201.2 -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\plugin2\npjp2.dll [2019-02-27] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @popularscreensavers.com/Plugin -> C:\Program Files (x86)\PopularScreensavers\NPp5Stub.dll [Geen bestand] FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-19] (Google Inc -> Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-19] (Google Inc -> Google Inc.) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\3\NP_wtapp.dll [Geen bestand] Chrome: ======= CHR DefaultProfile: Default CHR Profile: C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default [2019-03-08] CHR Extension: (Presentaties) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-01-20] CHR Extension: (Documenten) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-01-20] CHR Extension: (Google Drive) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-01-20] CHR Extension: (eID Chrome Extension) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkbdaodnaecdijpajecpncpdomgcoakc [2018-10-31] CHR Extension: (YouTube) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-01-20] CHR Extension: (Spreadsheets) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-01-20] CHR Extension: (Offline Documenten) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-10-31] CHR Extension: (Skype) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2018-01-20] CHR Extension: (Betalingen via Chrome Web Store) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-06-16] CHR Extension: (Gmail) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-01-20] CHR Extension: (Chrome Media Router) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-03-08] CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx ==================== Services (gefilterd) ==================== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) R2 GFNEXSrv; C:\Program Files (x86)\TOSHIBA\Password Utility\GFNEXSrv.exe [156672 2011-10-13] () [Bestand niet getekend] R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation -> Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation -> Intel Corporation) S2 KMService; C:\WINDOWS\SysWOW64\srvany.exe [8192 2016-04-06] () [Bestand niet getekend] R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6562472 2019-02-01] (Malwarebytes Corporation -> Malwarebytes) R2 McShield; C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe [237920 2012-08-03] (McAfee, Inc. -> McAfee, Inc.) R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [218320 2012-08-03] (McAfee, Inc. -> McAfee, Inc.) R2 mfevtp; C:\windows\system32\mfevtps.exe [177144 2012-08-03] (McAfee, Inc. -> McAfee, Inc.) R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [294616 2015-05-22] (Realtek Semiconductor Corp -> Realtek Semiconductor) R2 RtkBtManServ; C:\WINDOWS\RtkBtManServ.exe [713816 2018-09-25] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [278616 2017-05-04] (Synaptics Incorporated -> Synaptics Incorporated) R3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [118856 2015-12-01] (Toshiba Europe Gmbh -> Toshiba Europe GmbH) R2 TweaksDesktopBootService; C:\Program Files (x86)\Advanced PC Media LLC\Tweaks.com Boot to Desktop\Tweaks_Desktop_Service.exe [34640 2012-11-08] (Steve Sinchak -> Advanced PC Media LLC) [Bestand niet getekend] S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1812.3-0\NisSrv.exe [3880120 2019-01-09] (Microsoft Corporation -> Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1812.3-0\MsMpEng.exe [114208 2019-01-09] (Microsoft Corporation -> Microsoft Corporation) ===================== Drivers (gefilterd) ====================== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) S3 cfwids; C:\WINDOWS\System32\drivers\cfwids.sys [69672 2012-08-03] (McAfee, Inc. -> McAfee, Inc.) R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [153328 2019-01-08] (Malwarebytes Corporation -> Malwarebytes) R3 igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [5382856 2017-03-09] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) R3 IntcDAud; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [342528 2012-06-19] (Microsoft Windows Hardware Compatibility Publisher -> Intel(R) Corporation) S1 lpsport; C:\Windows\System32\Drivers\lpsport.sys [61304 2018-01-31] (AVG Technologies CZ, s.r.o. -> ) R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [198512 2019-03-02] (Malwarebytes Corporation -> Malwarebytes) S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [20936 2019-02-01] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes) R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [127136 2019-03-02] (Malwarebytes Corporation -> Malwarebytes) R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [72864 2019-03-10] (Malwarebytes Corporation -> Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [274416 2019-03-02] (Malwarebytes Corporation -> Malwarebytes) R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [114040 2019-03-02] (Malwarebytes Corporation -> Malwarebytes) R3 mfeapfk; C:\WINDOWS\System32\drivers\mfeapfk.sys [169320 2012-08-03] (McAfee, Inc. -> McAfee, Inc.) R3 mfeavfk; C:\WINDOWS\System32\drivers\mfeavfk.sys [300392 2012-08-03] (McAfee, Inc. -> McAfee, Inc.) S0 mfeelamk; C:\WINDOWS\System32\drivers\mfeelamk.sys [66736 2012-07-20] (Microsoft Windows Early Launch Anti-malware Publisher -> McAfee, Inc.) R3 mfefirek; C:\WINDOWS\System32\drivers\mfefirek.sys [513456 2012-08-03] (McAfee, Inc. -> McAfee, Inc.) R0 mfehidk; C:\WINDOWS\System32\drivers\mfehidk.sys [752672 2012-08-03] (McAfee, Inc. -> McAfee, Inc.) S3 mferkdet; C:\WINDOWS\System32\drivers\mferkdet.sys [106112 2012-08-03] (McAfee, Inc. -> McAfee, Inc.) R0 mfewfpk; C:\WINDOWS\System32\drivers\mfewfpk.sys [335784 2012-08-03] (McAfee, Inc. -> McAfee, Inc.) R2 PEGAGFN; C:\Program Files (x86)\TOSHIBA\Password Utility\PEGAGFN.sys [14344 2009-09-11] (PEGATRON CORPORATION -> PEGATRON) R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [604160 2018-04-12] (Microsoft Windows -> Realtek ) R3 RtkBtFilter; C:\WINDOWS\system32\DRIVERS\RtkBtfilter.sys [65792 2015-05-29] (Realtek Semiconductor Corp -> Realtek Microelectronics) S3 RtkBtFilter2; C:\WINDOWS\system32\DRIVERS\RtkBtfilter.sys [65792 2015-05-29] (Realtek Semiconductor Corp -> Realtek Microelectronics) R3 rtwlane_13; C:\WINDOWS\System32\drivers\rtwlane_13.sys [3717120 2018-04-12] (Microsoft Windows -> Realtek Semiconductor Corporation ) S3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [51392 2015-10-08] (Synaptics Incorporated -> Synaptics Incorporated) S1 staport; C:\Windows\System32\Drivers\staport.sys [45704 2018-01-31] (AVG Technologies CZ, s.r.o. -> ) R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project) R3 Thotkey; C:\WINDOWS\System32\drivers\Thotkey.sys [54424 2015-07-29] (TOSHIBA CORPORATION -> Toshiba Corporation) S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46680 2019-01-09] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) S0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [330936 2019-01-09] () [Bestand niet getekend] S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [62136 2019-01-09] () [Bestand niet getekend] ==================== NetSvcs (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) ==================== Een maand (aangemaakt) ======== (Als een item is opgenomen in de fixlist, wordt de map of het bestand verplaatst.) 2019-03-13 16:48 - 2019-03-13 16:55 - 000041613 _____ C:\Users\Annie\Desktop\FRST.txt 2019-03-12 14:50 - 2019-03-12 15:25 - 000000000 ____D C:\FRST 2019-03-12 14:47 - 2019-03-12 14:47 - 002434560 _____ (Farbar) C:\Users\Annie\Desktop\FRST64.exe 2019-03-08 14:38 - 2019-03-08 14:38 - 021159736 _____ (Piriform Software Ltd) C:\Users\Annie\Downloads\ccsetup554.exe 2019-03-02 22:39 - 2019-03-02 22:39 - 000000000 ____D C:\Users\Annie\AppData\Local\mbam 2019-03-02 21:09 - 2019-03-10 23:40 - 000072864 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2019-03-02 21:08 - 2019-03-02 21:08 - 000198512 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys 2019-03-02 21:08 - 2019-03-02 21:08 - 000127136 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys 2019-03-02 21:08 - 2019-03-02 21:08 - 000114040 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys 2019-03-02 21:05 - 2019-03-02 21:05 - 000000000 ____D C:\Users\Annie\AppData\Local\mbamtray 2019-03-02 21:04 - 2019-03-02 21:04 - 000274416 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys 2019-03-02 21:03 - 2019-03-02 21:03 - 000001923 _____ C:\Users\Public\Desktop\Malwarebytes.lnk 2019-03-02 21:03 - 2019-03-02 21:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes 2019-03-02 21:03 - 2019-02-01 11:20 - 000020936 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys 2019-03-02 21:03 - 2019-01-08 15:32 - 000153328 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys 2019-03-01 16:11 - 2019-03-01 16:11 - 000003634 _____ C:\WINDOWS\System32\Tasks\iolo System Checkup 2019-03-01 16:10 - 2019-03-01 16:10 - 000001760 _____ C:\Users\Public\Desktop\System Checkup.lnk 2019-03-01 16:10 - 2019-03-01 16:10 - 000000000 ____D C:\Users\Annie\AppData\Local\Phoenix360 2019-03-01 16:10 - 2019-03-01 16:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iolo 2019-03-01 16:10 - 2019-03-01 16:10 - 000000000 ____D C:\Program Files (x86)\Phoenix360 2019-03-01 16:08 - 2019-03-01 16:10 - 000000000 ____D C:\Users\Annie\AppData\Local\Downloaded Installations 2019-02-27 13:37 - 2019-02-27 13:37 - 000000000 ____D C:\Program Files\Malwarebytes 2019-02-27 13:33 - 2019-02-27 13:33 - 001962336 _____ (Oracle Corporation) C:\Users\Annie\Downloads\JavaSetup8u201.exe 2019-02-16 17:40 - 2015-06-17 19:47 - 002585816 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RltkAPO.dll 2019-02-16 17:40 - 2015-06-11 19:40 - 003157796 _____ C:\WINDOWS\system32\Drivers\rtkSSTsetting.dat 2019-02-16 17:40 - 2015-06-09 11:17 - 005708736 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICV2apo.dll 2019-02-16 17:40 - 2015-04-24 05:42 - 000858256 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDRA64.dll 2019-02-16 17:40 - 2015-04-24 05:42 - 000684176 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SECOMN64.dll 2019-02-16 17:40 - 2015-04-24 05:42 - 000435856 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEAPO64.dll 2019-02-16 17:40 - 2015-04-24 05:41 - 000555664 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SECOMN32.DLL 2019-02-16 17:40 - 2015-04-13 16:25 - 003262184 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE2.dll 2019-02-16 17:40 - 2015-02-04 00:38 - 001413776 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRRPTR64.dll 2019-02-16 17:40 - 2015-02-04 00:38 - 000454288 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRAPO64.dll 2019-02-16 17:40 - 2015-02-04 00:38 - 000369296 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM64.dll 2019-02-16 17:40 - 2015-02-04 00:38 - 000329360 _____ (Synopsys, Inc.) C:\WINDOWS\SysWOW64\SRCOM.dll 2019-02-16 17:40 - 2015-02-04 00:38 - 000329360 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM.dll 2019-02-16 17:40 - 2015-01-23 18:16 - 000213432 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tossaemaxapo64.dll 2019-02-16 17:40 - 2015-01-19 18:10 - 072113152 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat 2019-02-16 17:40 - 2014-12-11 08:10 - 001104040 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\slcnt64.dll 2019-02-16 17:40 - 2014-12-11 08:10 - 000943784 _____ (DTS, Inc.) C:\WINDOWS\system32\sl3apo64.dll 2019-02-16 17:40 - 2014-12-11 08:10 - 000734376 _____ (DTS, Inc.) C:\WINDOWS\system32\sltech64.dll 2019-02-16 17:40 - 2014-12-11 08:10 - 000250536 _____ (TODO: ) C:\WINDOWS\system32\slprp64.dll 2019-02-16 17:40 - 2014-10-24 10:12 - 005234952 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICAPOlfx.dll 2019-02-16 17:40 - 2014-10-24 10:12 - 000995120 _____ (Nahimic Inc) C:\WINDOWS\system32\NahimicAPONSControl.dll 2019-02-16 17:40 - 2014-08-14 19:16 - 005804772 _____ C:\WINDOWS\system32\Drivers\rtvienna.dat 2019-02-16 17:40 - 2014-04-10 12:19 - 002101848 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\WavesGUILib64.dll 2019-02-16 17:40 - 2014-02-27 20:02 - 002162992 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE.dll 2019-02-16 17:40 - 2013-10-11 11:31 - 000947760 _____ (Sony Corporation) C:\WINDOWS\system32\SFSS_APO.dll 2019-02-16 17:40 - 2013-06-25 12:47 - 000871856 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tossaeapo64.dll 2019-02-16 17:40 - 2013-06-25 12:47 - 000162224 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\toseaeapo64.dll 2019-02-16 17:40 - 2013-06-25 12:46 - 000582056 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosasfapo64.dll 2019-02-16 17:40 - 2013-04-03 14:13 - 000906800 _____ (Sony Corporation) C:\WINDOWS\system32\MISS_APO.dll 2019-02-16 17:40 - 2012-08-31 19:18 - 007164176 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEP64A.dll 2019-02-16 17:40 - 2012-08-31 19:17 - 000434960 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EED64A.dll 2019-02-16 17:40 - 2012-08-31 19:17 - 000141584 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEL64A.dll 2019-02-16 17:40 - 2012-08-31 19:17 - 000124176 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEA64A.dll 2019-02-16 17:40 - 2012-08-31 19:17 - 000075024 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEG64A.dll 2019-02-16 17:40 - 2011-09-02 14:21 - 000221024 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFNHK64.dll 2019-02-16 17:40 - 2011-09-02 14:21 - 000081248 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFCOM64.dll 2019-02-16 17:40 - 2011-09-02 14:21 - 000078688 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFAPO64.dll 2019-02-16 17:40 - 2010-07-22 16:48 - 000074064 _____ (Virage Logic Corporation / Sonic Focus) C:\WINDOWS\SysWOW64\SFCOM.dll 2019-02-16 17:40 - 2009-11-24 09:55 - 000518896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll 2019-02-16 17:40 - 2009-11-24 09:55 - 000211184 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSH64.dll 2019-02-16 17:40 - 2009-11-24 09:55 - 000198896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSHP64.dll 2019-02-16 17:40 - 2009-11-24 09:55 - 000155888 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll 2019-02-16 17:39 - 2015-06-10 13:20 - 003129672 _____ (Intel Corporation) C:\WINDOWS\system32\IntelSSTAPO.dll 2019-02-16 17:39 - 2015-06-10 13:20 - 000728392 _____ (Intel Corporation) C:\WINDOWS\system32\IntelSstCApoPropPage.dll 2019-02-16 17:39 - 2015-05-27 18:51 - 002461016 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOv211.dll 2019-02-16 17:39 - 2015-05-27 18:51 - 002393432 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOv201.dll 2019-02-16 17:39 - 2015-05-27 18:51 - 000944984 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOProp.dll 2019-02-16 17:39 - 2015-05-27 18:51 - 000349528 _____ (Dolby Laboratories) C:\WINDOWS\system32\HiFiDAX2API.dll 2019-02-16 17:39 - 2015-05-11 18:53 - 012996528 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO3064.dll 2019-02-16 17:39 - 2015-05-11 13:08 - 001374640 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO6064.dll 2019-02-16 17:39 - 2015-05-11 13:08 - 001192368 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO5064.dll 2019-02-16 17:39 - 2015-05-11 13:08 - 001145264 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO4064.dll 2019-02-16 17:39 - 2015-05-11 13:08 - 000980400 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO2064.dll 2019-02-16 17:39 - 2015-04-27 16:09 - 000328816 _____ (ICEpower a/s) C:\WINDOWS\system32\ICEsoundAPO64.dll 2019-02-16 17:39 - 2015-02-05 17:48 - 012834736 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO4064.dll 2019-02-16 17:39 - 2015-02-05 17:48 - 002789808 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO7064.dll 2019-02-16 17:39 - 2014-11-04 13:42 - 006242576 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64AF3.dll 2019-02-16 17:39 - 2014-11-04 13:42 - 001933584 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64AF3.dll 2019-02-16 17:39 - 2014-11-04 13:42 - 000336144 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64AF3.dll 2019-02-16 17:39 - 2014-11-04 13:42 - 000284944 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64F3.dll 2019-02-16 17:39 - 2014-09-24 11:31 - 007087448 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64A.dll 2019-02-16 17:39 - 2014-09-24 11:31 - 001939800 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64A.dll 2019-02-16 17:39 - 2014-09-24 11:31 - 000315736 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64A.dll 2019-02-16 17:39 - 2014-09-24 11:31 - 000261464 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64.dll 2019-02-16 17:39 - 2014-05-22 16:24 - 000096568 _____ C:\WINDOWS\system32\audioLibVc.dll 2019-02-16 17:39 - 2014-04-10 12:19 - 002041432 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioEQ64.dll 2019-02-16 17:39 - 2014-01-31 17:27 - 001313904 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxSpeechAPO64.dll 2019-02-16 17:39 - 2013-10-07 00:26 - 000501184 _____ (DTS) C:\WINDOWS\system32\DTSU2PLFX64.dll 2019-02-16 17:39 - 2013-10-07 00:26 - 000487360 _____ (DTS) C:\WINDOWS\system32\DTSU2PGFX64.dll 2019-02-16 17:39 - 2013-10-07 00:26 - 000415680 _____ (DTS) C:\WINDOWS\system32\DTSU2PREC64.dll 2019-02-16 17:39 - 2013-08-14 15:36 - 000662784 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVolumeSDAPO.dll 2019-02-16 17:39 - 2013-08-14 15:35 - 000663296 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO30.dll 2019-02-16 17:39 - 2013-07-23 15:39 - 014048512 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek64.dll 2019-02-16 17:39 - 2013-07-23 15:39 - 000922880 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPOShell64.dll 2019-02-16 17:39 - 2013-06-21 11:01 - 000109848 _____ C:\WINDOWS\system32\AcpiServiceVnA64.dll 2019-02-16 17:39 - 2011-08-23 17:00 - 000603984 _____ (Knowles Acoustics ) C:\WINDOWS\system32\KAAPORT64.dll 2019-02-16 17:39 - 2011-05-31 09:42 - 001756264 _____ (DTS) C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll 2019-02-16 17:39 - 2011-05-31 09:42 - 001568360 _____ (DTS) C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll 2019-02-16 17:39 - 2011-05-31 09:42 - 001486952 _____ (DTS) C:\WINDOWS\system32\DTSBoostDLL64.dll 2019-02-16 17:39 - 2011-05-31 09:42 - 000728680 _____ (DTS) C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll 2019-02-16 17:39 - 2011-05-31 09:42 - 000712296 _____ (DTS) C:\WINDOWS\system32\DTSSymmetryDLL64.dll 2019-02-16 17:39 - 2011-05-31 09:42 - 000693352 _____ (DTS) C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll 2019-02-16 17:39 - 2011-05-31 09:42 - 000491112 _____ (DTS) C:\WINDOWS\system32\DTSNeoPCDLL64.dll 2019-02-16 17:39 - 2011-05-31 09:42 - 000432744 _____ (DTS) C:\WINDOWS\system32\DTSLimiterDLL64.dll 2019-02-16 17:39 - 2011-05-31 09:42 - 000428648 _____ (DTS) C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll 2019-02-16 17:39 - 2011-05-31 09:42 - 000242792 _____ (DTS) C:\WINDOWS\system32\DTSLFXAPO64.dll 2019-02-16 17:39 - 2011-05-31 09:42 - 000242792 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPO64.dll 2019-02-16 17:39 - 2011-05-31 09:42 - 000241768 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPONS64.dll 2019-02-16 17:39 - 2010-09-27 09:34 - 000318808 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO20.dll 2019-02-13 13:58 - 2019-02-06 04:00 - 007520112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2019-02-13 13:58 - 2019-02-06 04:00 - 006572416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2019-02-13 13:58 - 2019-02-06 03:41 - 025853952 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2019-02-13 13:58 - 2019-02-06 03:33 - 022714880 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2019-02-13 13:57 - 2019-02-06 08:54 - 004527584 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe 2019-02-13 13:57 - 2019-02-06 08:53 - 001634704 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll 2019-02-13 13:57 - 2019-02-06 08:35 - 000058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll 2019-02-13 13:57 - 2019-02-06 08:32 - 003648512 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2019-02-13 13:57 - 2019-02-06 08:30 - 004052992 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2019-02-13 13:57 - 2019-02-06 08:30 - 001662464 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2019-02-13 13:57 - 2019-02-06 08:30 - 001364992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll 2019-02-13 13:57 - 2019-02-06 08:11 - 001454648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll 2019-02-13 13:57 - 2019-02-06 07:57 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll 2019-02-13 13:57 - 2019-02-06 07:52 - 004053504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2019-02-13 13:57 - 2019-02-06 07:52 - 002891776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2019-02-13 13:57 - 2019-02-06 07:52 - 001470976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2019-02-13 13:57 - 2019-02-06 04:01 - 001989040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll 2019-02-13 13:57 - 2019-02-06 04:01 - 001221432 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2019-02-13 13:57 - 2019-02-06 04:01 - 001029944 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2019-02-13 13:57 - 2019-02-06 04:01 - 000720480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll 2019-02-13 13:57 - 2019-02-06 04:01 - 000566568 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe 2019-02-13 13:57 - 2019-02-06 04:01 - 000134968 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll 2019-02-13 13:57 - 2019-02-06 04:01 - 000076088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys 2019-02-13 13:57 - 2019-02-06 04:01 - 000033576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NtlmShared.dll 2019-02-13 13:57 - 2019-02-06 04:00 - 009084432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2019-02-13 13:57 - 2019-02-06 04:00 - 002719760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2019-02-13 13:57 - 2019-02-06 04:00 - 002465792 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll 2019-02-13 13:57 - 2019-02-06 04:00 - 002421264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2019-02-13 13:57 - 2019-02-06 04:00 - 001257904 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2019-02-13 13:57 - 2019-02-06 04:00 - 001140680 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2019-02-13 13:57 - 2019-02-06 04:00 - 001130568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll 2019-02-13 13:57 - 2019-02-06 04:00 - 001098272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll 2019-02-13 13:57 - 2019-02-06 04:00 - 000945680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys 2019-02-13 13:57 - 2019-02-06 04:00 - 000899728 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll 2019-02-13 13:57 - 2019-02-06 04:00 - 000466960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS 2019-02-13 13:57 - 2019-02-06 04:00 - 000376120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys 2019-02-13 13:57 - 2019-02-06 04:00 - 000043536 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe 2019-02-13 13:57 - 2019-02-06 04:00 - 000038792 _____ (Microsoft Corporation) C:\WINDOWS\system32\NtlmShared.dll 2019-02-13 13:57 - 2019-02-06 03:59 - 001922064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys 2019-02-13 13:57 - 2019-02-06 03:59 - 001457248 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2019-02-13 13:57 - 2019-02-06 03:59 - 000983128 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2019-02-13 13:57 - 2019-02-06 03:59 - 000144288 _____ (Microsoft Corporation) C:\WINDOWS\system32\smss.exe 2019-02-13 13:57 - 2019-02-06 03:52 - 022014464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2019-02-13 13:57 - 2019-02-06 03:45 - 019404288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2019-02-13 13:57 - 2019-02-06 03:42 - 003711488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2019-02-13 13:57 - 2019-02-06 03:41 - 005307392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2019-02-13 13:57 - 2019-02-06 03:40 - 005792256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2019-02-13 13:57 - 2019-02-06 03:40 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\npmproxy.dll 2019-02-13 13:57 - 2019-02-06 03:38 - 000608768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll 2019-02-13 13:57 - 2019-02-06 03:38 - 000561152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2019-02-13 13:57 - 2019-02-06 03:37 - 004515840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2019-02-13 13:57 - 2019-02-06 03:37 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll 2019-02-13 13:57 - 2019-02-06 03:29 - 004865536 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2019-02-13 13:57 - 2019-02-06 03:28 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys 2019-02-13 13:57 - 2019-02-06 03:28 - 000039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll 2019-02-13 13:57 - 2019-02-06 03:27 - 000894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll 2019-02-13 13:57 - 2019-02-06 03:27 - 000808448 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll 2019-02-13 13:57 - 2019-02-06 03:27 - 000358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\exfat.sys 2019-02-13 13:57 - 2019-02-06 03:27 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys 2019-02-13 13:57 - 2019-02-06 03:26 - 007599616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2019-02-13 13:57 - 2019-02-06 03:26 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2019-02-13 13:57 - 2019-02-06 03:26 - 000324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\udfs.sys 2019-02-13 13:57 - 2019-02-06 03:26 - 000174592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll 2019-02-13 13:57 - 2019-02-06 03:25 - 000736256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2019-02-13 13:57 - 2019-02-06 03:25 - 000507392 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll 2019-02-13 13:57 - 2019-02-06 03:24 - 004937728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2019-02-13 13:57 - 2019-02-06 03:24 - 000466432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2019-02-13 13:57 - 2019-02-06 03:23 - 000393216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll 2019-02-13 13:57 - 2019-02-06 03:22 - 000960512 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2019-02-13 13:57 - 2019-02-06 03:22 - 000885760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll 2019-02-13 13:57 - 2019-02-06 03:21 - 000093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cdfs.sys 2019-02-13 13:57 - 2019-01-12 09:56 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll 2019-02-13 13:57 - 2019-01-12 03:28 - 000352768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll 2019-02-13 13:57 - 2019-01-09 19:08 - 000309560 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2019-02-13 13:57 - 2019-01-09 18:57 - 000720536 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll 2019-02-13 13:57 - 2019-01-09 18:42 - 004716032 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll 2019-02-13 13:57 - 2019-01-09 18:41 - 012730368 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2019-02-13 13:57 - 2019-01-09 18:40 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll 2019-02-13 13:57 - 2019-01-09 18:36 - 001054720 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe 2019-02-13 13:57 - 2019-01-09 18:35 - 002919936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll 2019-02-13 13:57 - 2019-01-09 11:14 - 000607744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll 2019-02-13 13:57 - 2019-01-09 10:55 - 011919872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2019-02-13 13:57 - 2019-01-09 10:55 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itss.dll 2019-02-13 13:57 - 2019-01-09 09:55 - 001285432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys 2019-02-13 13:57 - 2019-01-09 09:48 - 000527368 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll 2019-02-13 13:57 - 2019-01-09 06:59 - 000611848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2019-02-13 13:57 - 2019-01-09 06:44 - 000078688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll 2019-02-13 13:57 - 2019-01-09 06:43 - 006043496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2019-02-13 13:57 - 2019-01-09 06:43 - 004789944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2019-02-13 13:57 - 2019-01-09 06:43 - 002253480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2019-02-13 13:57 - 2019-01-09 06:43 - 001981280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2019-02-13 13:57 - 2019-01-09 06:43 - 001620264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2019-02-13 13:57 - 2019-01-09 06:43 - 000607376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll 2019-02-13 13:57 - 2019-01-09 06:43 - 000581592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll 2019-02-13 13:57 - 2019-01-09 06:43 - 000287640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll 2019-02-13 13:57 - 2019-01-09 06:43 - 000129088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll 2019-02-13 13:57 - 2019-01-09 06:43 - 000127744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rmclient.dll 2019-02-13 13:57 - 2019-01-09 06:43 - 000071456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\svchost.exe 2019-02-13 13:57 - 2019-01-09 06:42 - 001035232 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe 2019-02-13 13:57 - 2019-01-09 06:42 - 000092704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bindflt.sys 2019-02-13 13:57 - 2019-01-09 06:40 - 002765336 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2019-02-13 13:57 - 2019-01-09 06:40 - 001063224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi 2019-02-13 13:57 - 2019-01-09 06:40 - 000432952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys 2019-02-13 13:57 - 2019-01-09 06:40 - 000226104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys 2019-02-13 13:57 - 2019-01-09 06:40 - 000090872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll 2019-02-13 13:57 - 2019-01-09 06:39 - 007436016 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2019-02-13 13:57 - 2019-01-09 06:39 - 004404720 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2019-02-13 13:57 - 2019-01-09 06:39 - 002571632 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2019-02-13 13:57 - 2019-01-09 06:39 - 001943128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2019-02-13 13:57 - 2019-01-09 06:39 - 000789696 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll 2019-02-13 13:57 - 2019-01-09 06:39 - 000713264 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll 2019-02-13 13:57 - 2019-01-09 06:39 - 000349656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll 2019-02-13 13:57 - 2019-01-09 06:39 - 000269624 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll 2019-02-13 13:57 - 2019-01-09 06:39 - 000260800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll 2019-02-13 13:57 - 2019-01-09 06:39 - 000175416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spacedump.sys 2019-02-13 13:57 - 2019-01-09 06:39 - 000164192 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmclient.dll 2019-02-13 13:57 - 2019-01-09 06:39 - 000085472 _____ (Microsoft Corporation) C:\WINDOWS\system32\svchost.exe 2019-02-13 13:57 - 2019-01-09 06:33 - 016597504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2019-02-13 13:57 - 2019-01-09 06:32 - 013878272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2019-02-13 13:57 - 2019-01-09 06:29 - 008188928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2019-02-13 13:57 - 2019-01-09 06:29 - 002500096 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe 2019-02-13 13:57 - 2019-01-09 06:27 - 004710912 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll 2019-02-13 13:57 - 2019-01-09 06:27 - 004384256 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll 2019-02-13 13:57 - 2019-01-09 06:27 - 001587712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll 2019-02-13 13:57 - 2019-01-09 06:26 - 006661632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2019-02-13 13:57 - 2019-01-09 06:26 - 003396608 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2019-02-13 13:57 - 2019-01-09 06:26 - 002966016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll 2019-02-13 13:57 - 2019-01-09 06:25 - 000161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\spacebridge.dll 2019-02-13 13:57 - 2019-01-09 06:24 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll 2019-02-13 13:57 - 2019-01-09 06:24 - 000174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_CapabilityAccess.dll 2019-02-13 13:57 - 2019-01-09 06:24 - 000157184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spacebridge.dll 2019-02-13 13:57 - 2019-01-09 06:23 - 002368000 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll 2019-02-13 13:57 - 2019-01-09 06:23 - 001708544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSPhotography.dll 2019-02-13 13:57 - 2019-01-09 06:23 - 001189888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll 2019-02-13 13:57 - 2019-01-09 06:23 - 000898560 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2019-02-13 13:57 - 2019-01-09 06:23 - 000145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll 2019-02-13 13:57 - 2019-01-09 06:23 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll 2019-02-13 13:57 - 2019-01-09 06:23 - 000067072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CapabilityAccessManagerClient.dll 2019-02-13 13:57 - 2019-01-09 06:22 - 001551360 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll 2019-02-13 13:57 - 2019-01-09 06:22 - 001395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll 2019-02-13 13:57 - 2019-01-09 06:22 - 000624640 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll 2019-02-13 13:57 - 2019-01-09 06:22 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicSvc.dll 2019-02-13 13:57 - 2019-01-09 06:22 - 000333824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll 2019-02-13 13:57 - 2019-01-09 06:22 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll 2019-02-13 13:57 - 2019-01-09 06:22 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.NetworkOperators.HotspotAuthentication.dll 2019-02-13 13:57 - 2019-01-09 06:22 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srpapi.dll 2019-02-13 13:57 - 2019-01-09 06:21 - 002173440 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2019-02-13 13:57 - 2019-01-09 06:21 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreenps.dll 2019-02-13 13:57 - 2019-01-09 06:21 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.NetworkOperators.HotspotAuthentication.dll 2019-02-13 13:57 - 2019-01-09 06:20 - 001000448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll 2019-02-13 13:57 - 2019-01-09 06:20 - 000916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll 2019-02-13 13:57 - 2019-01-09 06:20 - 000607232 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll 2019-02-13 13:57 - 2019-01-09 06:20 - 000135680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smartscreenps.dll 2019-02-13 13:57 - 2019-01-09 06:19 - 000678400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll 2019-02-13 13:57 - 2019-01-09 06:19 - 000507392 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll 2019-02-13 13:57 - 2019-01-09 06:19 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll 2019-02-13 13:57 - 2019-01-09 05:34 - 000806320 _____ C:\WINDOWS\SysWOW64\locale.nls 2019-02-13 13:57 - 2019-01-09 05:34 - 000806320 _____ C:\WINDOWS\system32\locale.nls 2019-02-13 13:57 - 2019-01-08 10:08 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll 2019-02-13 13:57 - 2019-01-08 04:06 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll 2019-02-13 13:57 - 2019-01-08 04:06 - 000313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x40.dll 2019-02-13 13:56 - 2019-02-06 03:26 - 000154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2019-02-13 13:56 - 2019-02-06 02:04 - 000001314 _____ C:\WINDOWS\system32\tcbres.wim 2019-02-13 13:56 - 2019-01-09 18:41 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll 2019-02-13 13:56 - 2019-01-09 06:23 - 001361408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSPhotography.dll 2019-02-13 13:56 - 2019-01-09 06:19 - 000316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\GlobCollationHost.dll 2019-02-13 13:56 - 2019-01-09 06:18 - 000195584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GlobCollationHost.dll 2019-02-13 13:56 - 2019-01-08 04:06 - 000000072 _____ C:\WINDOWS\system32\edgehtmlpluginpolicy.bin ==================== Een maand (gewijzigd) ======== (Als een item is opgenomen in de fixlist, wordt de map of het bestand verplaatst.) 2019-03-13 16:52 - 2018-04-12 00:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2019-03-13 16:47 - 2013-07-29 16:14 - 000000000 ____D C:\Users\Annie\Documents\Outlook-bestanden 2019-03-13 16:45 - 2018-06-08 19:29 - 000004180 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{30188534-6620-48A0-9873-3EC53AB473E6} 2019-03-13 12:57 - 2018-03-14 16:26 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd 2019-03-13 12:24 - 2018-06-08 18:39 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2019-03-12 17:50 - 2018-06-08 19:29 - 000004680 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player NPAPI Notifier 2019-03-12 17:49 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed 2019-03-12 17:49 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\system32\Macromed 2019-03-12 15:32 - 2017-09-01 17:42 - 000000000 ____D C:\Users\Annie\AppData\LocalLow\Mozilla 2019-03-12 15:28 - 2017-09-01 17:40 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox 2019-03-12 15:28 - 2013-08-13 11:22 - 000001182 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2019-03-12 15:28 - 2013-08-13 11:22 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2019-03-11 23:59 - 2013-08-20 21:49 - 000000000 ____D C:\Users\Annie\Documents\Diverse 2019-03-11 19:05 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\AppReadiness 2019-03-09 09:53 - 2018-04-12 00:38 - 000000000 ___HD C:\Program Files\WindowsApps 2019-03-08 14:45 - 2018-04-12 00:36 - 000000000 ____D C:\WINDOWS\INF 2019-03-08 14:40 - 2018-06-08 19:29 - 000003936 _____ C:\WINDOWS\System32\Tasks\CCleaner Update 2019-03-08 14:40 - 2018-01-20 15:17 - 000000874 _____ C:\Users\Public\Desktop\CCleaner.lnk 2019-03-08 14:40 - 2018-01-20 15:17 - 000000000 ____D C:\Program Files\CCleaner 2019-03-05 09:29 - 2018-06-16 14:03 - 000002332 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2019-03-05 09:29 - 2018-06-16 14:03 - 000002291 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2019-03-04 18:25 - 2013-08-31 22:05 - 000000000 ____D C:\Users\Annie\AppData\Local\ElevatedDiagnostics 2019-03-02 21:07 - 2013-08-12 22:32 - 000000000 ____D C:\ProgramData\Malwarebytes 2019-03-02 21:03 - 2018-04-12 00:38 - 000000000 ___HD C:\WINDOWS\ELAMBKUP 2019-03-02 11:04 - 2018-11-16 18:12 - 000000000 ____D C:\Program Files\rempl 2019-03-01 16:10 - 2013-01-29 18:59 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2019-03-01 10:57 - 2018-06-08 19:29 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2019-03-01 10:55 - 2018-04-11 22:04 - 000786432 _____ C:\WINDOWS\system32\config\BBI 2019-02-27 13:37 - 2014-04-28 22:22 - 000000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware 2019-02-27 13:36 - 2018-11-02 10:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2019-02-27 13:36 - 2018-11-02 10:39 - 000000000 ____D C:\Program Files (x86)\Java 2019-02-27 13:34 - 2018-11-02 10:40 - 000099192 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll 2019-02-19 12:11 - 2013-04-27 10:59 - 000000000 ____D C:\Program Files (x86)\WildTangent Games 2019-02-19 12:10 - 2013-04-27 10:59 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2019-02-19 12:10 - 2013-04-27 10:59 - 000000000 ____D C:\ProgramData\WildTangent 2019-02-16 23:23 - 2018-06-08 19:03 - 001767124 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2019-02-16 23:23 - 2018-04-12 17:01 - 000785364 _____ C:\WINDOWS\system32\perfh013.dat 2019-02-16 23:23 - 2018-04-12 17:01 - 000153682 _____ C:\WINDOWS\system32\perfc013.dat 2019-02-16 18:00 - 2019-01-19 16:59 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM 2019-02-16 17:57 - 2013-04-27 10:38 - 000000000 ___HD C:\Program Files (x86)\Temp 2019-02-16 17:44 - 2016-03-13 09:30 - 000000000 ____D C:\WINDOWS\system32\DAX2 2019-02-14 00:04 - 2018-06-08 18:39 - 000420376 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2019-02-14 00:01 - 2018-04-12 00:38 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12 2019-02-14 00:01 - 2018-04-12 00:38 - 000000000 ___SD C:\WINDOWS\system32\F12 2019-02-14 00:01 - 2018-04-12 00:38 - 000000000 ___RD C:\Program Files\Windows Defender 2019-02-14 00:01 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\TextInput 2019-02-14 00:01 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\ShellExperiences 2019-02-14 00:01 - 2018-04-12 00:38 - 000000000 ____D C:\WINDOWS\bcastdvr 2019-02-13 14:10 - 2018-04-12 00:30 - 000000000 ____D C:\WINDOWS\CbsTemp 2019-02-13 13:55 - 2013-08-03 09:48 - 000000000 ____D C:\WINDOWS\system32\MRT 2019-02-13 13:51 - 2013-07-30 17:58 - 129330784 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe ==================== Bestanden in de root van sommige mappen ======= 2013-08-01 10:33 - 2013-08-01 10:33 - 000038432 _____ () C:\Users\Annie\AppData\Roaming\Door lijstscheidingstekens gescheiden waarden (Windows).ADR 2013-08-01 10:32 - 2013-08-26 16:45 - 000021728 _____ () C:\Users\Annie\AppData\Roaming\Door lijstscheidingstekens gescheiden waarden (Windows).EML 2017-11-11 17:22 - 2017-11-11 17:22 - 000140800 _____ () C:\Users\Annie\AppData\Local\installer.dat Sommige bestanden in TEMP: ==================== 2012-07-08 23:40 - 2012-07-08 23:40 - 001299920 _____ (Microsoft Corporation) C:\Users\ADMINI~1\AppData\Local\Temp\PresentationCore.dll 2012-07-08 23:40 - 2012-07-08 23:40 - 002040296 _____ (Microsoft Corporation) C:\Users\ADMINI~1\AppData\Local\Temp\PresentationFramework.dll 2012-07-08 23:40 - 2012-07-08 23:40 - 000232904 _____ (Microsoft Corporation) C:\Users\ADMINI~1\AppData\Local\Temp\ReachFramework.dll 2012-07-08 23:40 - 2012-07-08 23:40 - 000031200 _____ (Microsoft Corporation) C:\Users\ADMINI~1\AppData\Local\Temp\UIAutomationProvider.dll 2012-07-08 23:40 - 2012-07-08 23:40 - 000039376 _____ (Microsoft Corporation) C:\Users\ADMINI~1\AppData\Local\Temp\UIAutomationTypes.dll 2012-07-08 23:40 - 2012-07-08 23:40 - 000650168 _____ (Microsoft Corporation) C:\Users\ADMINI~1\AppData\Local\Temp\WindowsBase.dll 2012-07-08 23:40 - 2012-07-08 23:40 - 000035816 _____ (Microsoft Corporation) C:\Users\ADMINI~1\AppData\Local\Temp\WindowsFormsIntegration.dll ==================== Bamital & volsnap ====================== (Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.) C:\WINDOWS\system32\winlogon.exe => Bestand is getekend C:\WINDOWS\system32\wininit.exe => Bestand is getekend C:\WINDOWS\explorer.exe => Bestand is getekend C:\WINDOWS\SysWOW64\explorer.exe => Bestand is getekend C:\WINDOWS\system32\svchost.exe => Bestand is getekend C:\WINDOWS\SysWOW64\svchost.exe => Bestand is getekend C:\WINDOWS\system32\services.exe => Bestand is getekend C:\WINDOWS\system32\User32.dll => Bestand is getekend C:\WINDOWS\SysWOW64\User32.dll => Bestand is getekend C:\WINDOWS\system32\userinit.exe => Bestand is getekend C:\WINDOWS\SysWOW64\userinit.exe => Bestand is getekend C:\WINDOWS\system32\rpcss.dll => Bestand is getekend C:\WINDOWS\system32\dnsapi.dll => Bestand is getekend C:\WINDOWS\SysWOW64\dnsapi.dll => Bestand is getekend C:\WINDOWS\system32\dllhost.exe => Bestand is getekend C:\WINDOWS\SysWOW64\dllhost.exe => Bestand is getekend C:\WINDOWS\system32\Drivers\volsnap.sys => Bestand is getekend LastRegBack: 2018-06-08 18:39 ==================== Einde van FRST.txt ============================