Fix resultaat van Farbar Recovery Scan Tool (x64) Versie: 17.03.2019 Gestart door PC1 (28-03-2019 17:20:03) Run:1 Gestart vanaf C:\Users\PC1\Downloads Geladen Profielen: PC1 (Beschikbare Profielen: PC1 & DefaultAppPool) Boot Modus: Normal ============================================== fixlist inhoud: ***************** start CreateRestorePoint: HKU\S-1-5-21-1103111412-233727958-2618637648-1000\...\MountPoints2: {006dfb9f-355b-11e9-9c9a-94de8098e5ef} - "E:\Setup.exe" HKU\S-1-5-21-1103111412-233727958-2618637648-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.norton.com?prt=NGC&chn=1000690&geo=NL&ver=22.15.0.88&locale=nl_NL&guid=503C3917-D93F-4412-A299-656ACF045757&doi=2016-09-01&o=APN11915 SearchScopes: HKU\S-1-5-21-1103111412-233727958-2618637648-1000 -> DefaultScope {75b4241f-171e-44a3-bf44-23613b6e3e03} URL = SearchScopes: HKU\S-1-5-21-1103111412-233727958-2618637648-1000 -> {AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} URL = hxxps://nortonsafe.search.ask.com/web?q={searchTerms}&o=APN11913&l=dis&prt=NGC&chn=1000690&geo=NL&ver=22.17.0.183&locale=nl_NL&guid=503C3917-D93F-4412-A299-656ACF045757&doi=2016-09-01&gct=kwd&qsrc=2869 FF Extension: (Avast Online Security) - C:\Users\PC1\AppData\Roaming\Mozilla\Firefox\Profiles\80vtofzz.default\Extensions\wrc@avast.com.xpi [2019-01-31] FF Plugin HKU\S-1-5-21-1103111412-233727958-2618637648-1000: BearSharePlugin -> C:\Program Files (x86)\BearShare Applications\BearShare\npBearSharePlugin.dll [Geen bestand] CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Security\Engine\22.17.0.183\Exts\Chrome.crx CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx CHR HKU\S-1-5-21-1103111412-233727958-2618637648-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bbjllphbppobebmjpjcijfbakobcheof] - hxxps://clients2.google.com/service/update2/crx CHR HKU\S-1-5-21-1103111412-233727958-2618637648-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files (x86)\Norton Security\Engine\22.17.0.183\Exts\Chrome.crx CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx S3 GoogleChromeElevationService; "C:\Program Files (x86)\Google\Chrome\Application\73.0.3683.86\elevation_service.exe" [X] U3 aswbdisk; geen ImagePath U3 idsvc; geen ImagePath C:\ProgramData\tmp\*.* ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Geen bestand Task: {1BF79053-DCA4-4951-B121-BF5B56F4EAA5} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [2019-03-08] (AVAST Software) C:\Program Files\Common Files\AVAST Software EmptyTemp: end ***************** Herstelpunt is succesvol gemaakt. HKU\S-1-5-21-1103111412-233727958-2618637648-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{006dfb9f-355b-11e9-9c9a-94de8098e5ef} => is succesvol verwijderd HKLM\Software\Classes\CLSID\{006dfb9f-355b-11e9-9c9a-94de8098e5ef} => niet gevonden HKU\S-1-5-21-1103111412-233727958-2618637648-1000\Software\Microsoft\Internet Explorer\Main\\Start Page => waarde met succes hersteld "HKU\S-1-5-21-1103111412-233727958-2618637648-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => is succesvol verwijderd HKU\S-1-5-21-1103111412-233727958-2618637648-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} => is succesvol verwijderd HKLM\Software\Classes\CLSID\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} => niet gevonden C:\Users\PC1\AppData\Roaming\Mozilla\Firefox\Profiles\80vtofzz.default\Extensions\wrc@avast.com.xpi => is succesvol verplaatst HKU\S-1-5-21-1103111412-233727958-2618637648-1000\Software\MozillaPlugins\BearSharePlugin => is succesvol verwijderd "C:\Program Files (x86)\BearShare Applications\BearShare\npBearSharePlugin.dll" => niet gevonden HKLM\SOFTWARE\Google\Chrome\Extensions\cjabmdjcfcfdmffimndhafhblfmpjdpe => is succesvol verwijderd HKLM\SOFTWARE\Google\Chrome\Extensions\iikflkcanblccfahdhdonehdalibjnif => is succesvol verwijderd HKU\S-1-5-21-1103111412-233727958-2618637648-1000\SOFTWARE\Google\Chrome\Extensions\bbjllphbppobebmjpjcijfbakobcheof => is succesvol verwijderd HKU\S-1-5-21-1103111412-233727958-2618637648-1000\SOFTWARE\Google\Chrome\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh => is succesvol verwijderd HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\cjabmdjcfcfdmffimndhafhblfmpjdpe => is succesvol verwijderd HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\efaidnbmnnnibpcajpcglclefindmkaj => is succesvol verwijderd HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\iikflkcanblccfahdhdonehdalibjnif => is succesvol verwijderd HKLM\System\CurrentControlSet\Services\GoogleChromeElevationService => is succesvol verwijderd GoogleChromeElevationService => service is succesvol verwijderd HKLM\System\CurrentControlSet\Services\aswbdisk => is succesvol verwijderd aswbdisk => service is succesvol verwijderd HKLM\System\CurrentControlSet\Services\idsvc => is succesvol verwijderd idsvc => service is succesvol verwijderd =========== "C:\ProgramData\tmp\*.*" ========== C:\ProgramData\tmp\crashwatcher_fotoimporter.log => is succesvol verplaatst C:\ProgramData\tmp\crashwatcher_fotoschau.log => is succesvol verplaatst C:\ProgramData\tmp\crashwatcher_hps.log => is succesvol verplaatst C:\ProgramData\tmp\foto-importer.log => is succesvol verplaatst C:\ProgramData\tmp\rwstjg.tmp => is succesvol verplaatst ========= Einde -> "C:\ProgramData\tmp\*.*" ======== HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00asw => is succesvol verwijderd HKLM\Software\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => niet gevonden "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{1BF79053-DCA4-4951-B121-BF5B56F4EAA5}" => is succesvol verwijderd "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1BF79053-DCA4-4951-B121-BF5B56F4EAA5}" => is succesvol verwijderd C:\WINDOWS\System32\Tasks\Avast Software\Overseer => is succesvol verplaatst "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Avast Software\Overseer" => is succesvol verwijderd C:\Program Files\Common Files\AVAST Software => is succesvol verplaatst =========== EmptyTemp: ========== BITS transfer queue => 7888896 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 264048282 B Java, Flash, Steam htmlcache => 0 B Windows/system/drivers => 211889 B Edge => 231439597 B Chrome => 10164662 B Firefox => 0 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 0 B Users => 0 B ProgramData => 0 B Public => 0 B systemprofile => 0 B systemprofile32 => 0 B LocalService => 2708 B LocalService => 0 B NetworkService => 0 B NetworkService => 0 B PC1 => 53183128 B DefaultAppPool => 0 B RecycleBin => 26716967 B EmptyTemp: => 566.2 MB tijdelijke gegevens verwijderd. ================================ Het systeem moest herstart worden. ==== Einde van Fixlog 17:26:06 ====