Scanresultaten van Farbar Recovery Scan Tool (FRST) (x64) Versie: 22-03-2020 Gestart door Joost (Beheerder) op JOOST (Sony Corporation SVE1513C1EW) (22-03-2020 13:40:17) Gestart vanaf C:\Users\Joost\Desktop Geladen Profielen: Joost (Beschikbare Profielen: Joost & Administrator) Platform: Windows 10 Home Versie 1903 18362.535 (X64) Taal: Nederlands (Nederland) Standaardbrowser: Chrome Boot Modus: Normal Handleiding voor Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processen (gefilterd) ================= (Als een item is opgenomen in de fixlist, zal het proces worden gesloten. Het bestand zal niet worden verplaatst.) (Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Atheros) [Bestand niet getekend] C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe (Canon Inc. -> CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe (Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe (Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Intel® Services Manager -> Intel Corporation) C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe (Intel® Upgrade Service -> Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11912.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.18362.471_none_5f12f35059003107\TiWorker.exe (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe (Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Popcorn Time) [Bestand niet getekend] C:\Program Files (x86)\Popcorn Time\Updater.exe (Realtek Semiconductor Corp -> Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Sony Corporation -> Sony Corporation) C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe (Sony Corporation -> Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient.exe (Sony Corporation -> Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgr.exe (Sony Corporation -> Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe (Sony Corporation -> Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\VESMgrSub.exe (Sony Corporation -> Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe (Sony Corporation -> Sony Corporation) C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe (Sony Corporation -> Sony Corporation) C:\Program Files\Sony\VAIO Care\VCAgent.exe (Sony Corporation -> Sony Corporation) C:\Program Files\Sony\VAIO Care\VCService.exe (Sony Corporation -> Sony Corporation) C:\Program Files\Sony\VAIO Care\VCSystemTray.exe (Sony Corporation -> Sony Corporation) C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe (Sony Corporation -> Sony Corporation) C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe (Sony Corporation -> Sony Corporation) C:\Program Files\Sony\VAIO Update\VUAgent.exe (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (TeamViewer GmbH -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TomTom International BV -> TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe (TomTom International BV -> TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe ==================== Register (gefilterd) =================== (Als een item is opgenomen in de fixlist, zal het registeritem worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.) HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1214608 2012-09-28] (Realtek Semiconductor Corp -> Realtek Semiconductor) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3954368 2015-09-21] (Synaptics Incorporated -> Synaptics Incorporated) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [ISBMgr.exe] => C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [68776 2012-08-18] (Sony Corporation -> Sony Corporation) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1160408 2017-03-28] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) HKLM-x32\...\Run: [Intel AppUp(R) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [156000 2012-10-04] (Intel® Services Manager -> Intel Corporation) HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [449168 2012-03-26] (Canon Inc. -> CANON INC.) HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restrictie <==== AANDACHT HKU\S-1-5-21-1085769570-3512807385-3274156511-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22256824 2020-02-28] (Piriform Software Ltd -> Piriform Software Ltd) HKU\S-1-5-21-1085769570-3512807385-3274156511-1001\...\Run: [TomTomHOME.exe] => C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [254840 2019-02-11] (TomTom International BV -> TomTom) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\79.0.3945.130\Installer\chrmstp.exe [2020-01-23] (Google LLC -> Google LLC) HKLM\Software\...\Authentication\Credential Providers: [{ACFC407B-266C-8504-8DAE-F3E276336E4B}] -> C:\WINDOWS\system32\AthCredentialProvider.dll [2012-11-05] (Qualcomm Atheros -> Qualcomm Atheros Commnucations) [Bestand niet getekend] HKLM\Software\...\Authentication\Credential Provider Filters: [{ACFC407B-266C-8504-8DAE-F3E276336E4B}] -> C:\WINDOWS\system32\AthCredentialProvider.dll [2012-11-05] (Qualcomm Atheros -> Qualcomm Atheros Commnucations) [Bestand niet getekend] ==================== Geplande Taken (gefilterd) ============ (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) Task: {00379C33-6219-4310-8978-0DA56374F5B6} - System32\Tasks\Sony Corporation\VAIO Control Center\NetworkSetting\NetworkSetting Logon Start => C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkClient.exe [1687208 2012-09-06] (Sony Corporation -> Sony Corporation) Task: {0523B202-7B66-4D2A-BFE1-4453E7710EAA} - System32\Tasks\Sony Corporation\VAIO Control Center\VAIOControlCenterUser => C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe [492712 2012-10-31] (Sony Corporation -> Sony Corporation) Task: {094CD275-5C71-4753-B57E-5566CA859498} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316} Task: {0F6DBBD1-1FA5-490B-A482-1F43FCC689E6} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969} Task: {1003FB4B-D8A2-41D7-9235-98647EDB65D1} - System32\Tasks\Sony Corporation\VAIO Care\VAIO Care => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [804816 2019-12-06] (Sony Corporation -> Sony Corporation) Task: {1638AFE7-B4C2-444E-9E1A-24588D885BFA} - System32\Tasks\Sony Corporation\Xperia Link\Xperia Link Logon Start => C:\Program Files (x86)\Sony\Xperia Link\Xperia Link.exe [983208 2012-11-01] (Sony Corporation -> Sony Corporation) Task: {17034BDB-8989-4190-8430-290B1B9E8461} - System32\Tasks\Microsoft\Windows\rempl\shell-usoscan => C:\Program Files\rempl\remsh.exe Task: {1C1A1AB6-CDE0-47DC-B9D1-44BAE6F06FB5} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update Self Repair => C:\Program Files\Sony\VAIO Update\VUSR.exe [3152360 2019-11-08] (Sony Corporation -> Sony Corporation) Task: {29019F1F-16C2-491C-BDA4-F73D5605C3BF} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2017-02-04] (Google Inc -> Google Inc.) Task: {2DC8645E-8EB0-43CB-AF3F-331DF53E4450} - System32\Tasks\Sony Corporation\VAIO Care\ActiveStatusCollect => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [804816 2019-12-06] (Sony Corporation -> Sony Corporation) Task: {31CD9B14-85EE-4270-9947-72B4733F3357} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2017-02-04] (Google Inc -> Google Inc.) Task: {32FACD32-95DB-4476-B2B3-3CD33B769377} - System32\Tasks\easyxplore_run => C:\Users\Joost\AppData\Local\Programs\easyxplore\EasyXplore.exe Task: {3394A7E8-CBD4-44AF-96B8-F03F5E700377} - System32\Tasks\Sony Corporation\VAIO Care\VCOneClick => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [804816 2019-12-06] (Sony Corporation -> Sony Corporation) Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe Task: {478B9AF9-2E40-4604-9E7C-D6CD387FD124} - System32\Tasks\Sony Corporation\VAIO Care\VCRLog => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [804816 2019-12-06] (Sony Corporation -> Sony Corporation) Task: {4B16E2B9-93B0-4DCA-8EE6-F2B407264892} - System32\Tasks\Sony Corporation\BP Checker\CheckBPStatusCreate => C:\Program Files\Sony\BP Checker\BPChecker.exe [47672 2016-11-29] (Sony Corporation -> Sony Corporation) Task: {4E149529-9E3E-48B6-B4FC-8A5ABE180151} - System32\Tasks\Sony Corporation\VAIO Gesture Control\VCGULogonTask => C:\Program Files (x86)\Sony\VAIO Camera Gesture Utility\VCGU.exe [735400 2012-10-23] (Sony Corporation -> Sony Corporation) Task: {4FFCB393-6BF1-4DC3-AF82-1CA4626183D8} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [686384 2020-02-28] (Piriform Software Ltd -> Piriform Software Ltd) Task: {51F4E6AE-E235-4FE5-97BB-26E2B64233D4} - System32\Tasks\Synaptics TouchPad Enhancements => \Program Files\Synaptics\SynTP\SynTPEnh.exe [3954368 2015-09-21] (Synaptics Incorporated -> Synaptics Incorporated) Task: {5514576A-9C92-4455-BC2E-29F93C444246} - System32\Tasks\easyxplore_chk => C:\Users\Joost\AppData\Local\Programs\easyxplore\EasyXplore.exe Task: {5A3FB241-0B11-4EA5-BC66-0D9F1B406040} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\BthSQM => {C8367320-6F85-11E0-A1F0-0800200C9A66} C:\WINDOWS\System32\BthTelemetry.dll [32256 2019-03-19] (Microsoft Windows -> Microsoft Corporation) Task: {63789E6C-3644-4350-8DB2-ED73CBB5E6FE} - System32\Tasks\CLVDLauncher => C:\Program Files (x86)\CyberLink\Power2Go8\CLVDLauncher.exe [338544 2012-07-24] (CyberLink -> CyberLink Corp.) Task: {6D0B301C-F248-47B8-94DD-B38BEBC30CD4} - System32\Tasks\Sony Corporation\BP Checker\CheckBPStatusLogon => C:\Program Files\Sony\BP Checker\BPChecker.exe [47672 2016-11-29] (Sony Corporation -> Sony Corporation) Task: {6DA603B5-66B9-4F7B-8768-9A167C207980} - System32\Tasks\Sony Corporation\VAIO Control Center\Level4Daily => C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [538280 2012-09-06] (Sony Corporation -> Sony Corporation) Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task => {BF6C1E47-86EC-4194-9CE5-13C15DCB2001} Task: {716B74C9-CB02-4AAB-9C38-38CD2CD951BC} - System32\Tasks\Sony Corporation\VAIO Care\DeployCRMflag => C:\Program Files\Sony\VAIO Care\DeployCRMflag.exe [18272 2019-12-06] (Sony Corporation -> Sony Corporation) Task: {86E27BAE-AD3D-4CBF-8877-F55A92B4A364} - System32\Tasks\Sony Corporation\VAIO Care\VCCheckIolo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [804816 2019-12-06] (Sony Corporation -> Sony Corporation) Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task => {1B1F472E-3221-4826-97DB-2C2324D389AE} Task: {8B6759EE-1C08-4B8F-955C-774AB5A6544E} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDFE067B1} Task: {8E74CD92-346B-4644-AC5E-D26E8F7904C5} - System32\Tasks\Sony Corporation\VAIO Update\VAIO Update => C:\Program Files\Sony\VAIO Update\VAIOUpdt.exe [1210856 2019-11-08] (Sony Corporation -> Sony Corporation) Task: {A36D73BF-8DE1-4384-957F-DC2EA06B19A0} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [1660520 2020-03-08] (Avast Software s.r.o. -> Avast Software) Task: {A8068317-14B0-4C98-B021-B69341351E5A} - System32\Tasks\Sony Corporation\VAIO Control Center\Level4Month => C:\Program Files (x86)\Sony\VAIO Control Center\WBCBatteryCare.exe [538280 2012-09-06] (Sony Corporation -> Sony Corporation) Task: {AF9190EE-1838-40E1-8865-983B13EE554E} - System32\Tasks\easyxploreUpdateTaskUserS-1-5-21-1085769570-3512807385-3274156511-1001UA => C:\Users\Joost\AppData\Local\easyxplore\Update\easyxploreUpdate.exe Task: {B27BA8C7-04A1-41DA-9B38-16E81293EA0A} - System32\Tasks\Sony Corporation\VAIO Control Center\VAIOControlCenterSystem => C:\Program Files (x86)\Sony\VAIO Control Center\vim.exe [492712 2012-10-31] (Sony Corporation -> Sony Corporation) Task: {B35B1705-83D9-4285-AEC5-319F9BAB26FE} - System32\Tasks\Sony Corporation\VAIO Care\UploadPOT => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [804816 2019-12-06] (Sony Corporation -> Sony Corporation) Task: {C93270E2-41EB-43D7-BC22-57DA6271EA5C} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [18233016 2020-02-28] (Piriform Software Ltd -> Piriform Software Ltd) Task: {C9DCF59E-6B97-4C0C-8641-B8261089C8CA} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43DA-BFD7-FBEEA2180A1E} Task: {CDDF0B5C-9312-41A0-8B30-B5AFFF234E3F} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload => {EBF00FCB-0769-4B81-9BEC-6C05514111AA} Task: {CE2DE968-E342-40D7-9566-427D45E4A886} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371} Task: {DB21EF32-6BA9-4118-BBC1-BC4FF48961E5} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4F47-879B-29A80C355D61} Task: {E7AFC9A1-75D0-493E-9810-7194AE01C103} - System32\Tasks\Sony Corporation\VHDInformationCheck => C:\Program Files (x86)\Sony\VAIO Recovery\plugins\InformationCheck.exe [1865384 2012-11-08] (Sony Corporation -> Sony Corporation) Task: {ED16CFDE-D8C4-4320-A1DF-5C7DD4F962F9} - System32\Tasks\easyxploreUpdateTaskUserS-1-5-21-1085769570-3512807385-3274156511-1001Core => C:\Users\Joost\AppData\Local\easyxplore\Update\easyxploreUpdate.exe Task: {F4BDF5A2-CAF3-4E4C-B558-830A341E38BA} - System32\Tasks\Sony Corporation\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [976552 2012-08-14] (Sony Corporation -> Sony Corporation) Task: {FCC29501-207D-4535-B2EA-EEEF753F18E1} - System32\Tasks\Sony Corporation\VAIO Care\GetPOTInfo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [804816 2019-12-06] (Sony Corporation -> Sony Corporation) Task: {FFBEF06B-809B-4992-AFA5-5AEC5971CFA1} - System32\Tasks\Sony Corporation\VAIO Care\CheckSystemInfo => C:\Program Files\Sony\VAIO Care\VCSystemTray.exe [804816 2019-12-06] (Sony Corporation -> Sony Corporation) (Als een item is opgenomen in de fixlist, wordt de taak (job) bestand verplaatst. Het bestand dat wordt uitgevoerd door de taak zal niet worden verplaatst.) Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe ==================== Internet (gefilterd) ==================== (Als een item is opgenomen in de fixlist en een registeritem is, wordt het verwijderd of hersteld naar de standaard.) Tcpip\Parameters: [DhcpNameServer] 213.46.228.196 62.179.104.196 Tcpip\..\Interfaces\{1bace411-a9d1-4961-bc70-977f5333bd66}: [NameServer] 208.67.222.222 208.67.220.220 Tcpip\..\Interfaces\{26eb35ea-08bb-42a3-b7ff-a27c7936a5a6}: [NameServer] 208.67.222.222 208.67.220.220 Tcpip\..\Interfaces\{3B761B36-F421-4088-BDFE-2039720D2EEB}: [NameServer] 208.67.222.222 208.67.220.220 Tcpip\..\Interfaces\{3C00CC47-0EAE-4ACD-A032-9352F940A06A}: [DhcpNameServer] 109.201.137.37 109.201.137.38 Tcpip\..\Interfaces\{3c59943b-ae5e-4869-bd5f-e50ea82fb02d}: [NameServer] 208.67.222.222 208.67.220.220 Tcpip\..\Interfaces\{3c59943b-ae5e-4869-bd5f-e50ea82fb02d}: [DhcpNameServer] 127.0.0.1 Tcpip\..\Interfaces\{66FC308A-25FF-4C38-A0D5-0842A456C6B6}: [NameServer] 208.67.222.222 208.67.220.220 Tcpip\..\Interfaces\{a0f2afde-88c1-40b4-9080-5f84be5ae4e3}: [NameServer] 208.67.222.222,208.67.220.220 Tcpip\..\Interfaces\{a0f2afde-88c1-40b4-9080-5f84be5ae4e3}: [DhcpNameServer] 213.46.228.196 62.179.104.196 Tcpip\..\Interfaces\{AE5C0275-9832-4FD6-BDE8-17231E2CAB84}: [NameServer] 208.67.222.222 208.67.220.220 Tcpip\..\Interfaces\{BE89495B-7D62-455A-9A70-70B573B83C09}: [NameServer] 208.67.222.222 208.67.220.220 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-1085769570-3512807385-3274156511-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://nl.search.yahoo.com/yhs/web?hspart=omr&hsimp=yhs-001&type=87bjiqs279bdfhjvqgikmoqs1f005119¶m1=y6bdVFVIsvuYsgEClQfz8KEXu5QggLXxTK%2B1RnitLlN0WhR%2F0kSZE3k0PejMR%2BoDLG1BCx03%2BgYlAkAbNVN5DydXxVxDqOjHOM6bSGhkPhnOyP4nskKu9%2FLm0X4nQVJbtbWp6qcvwcgIw7U1CtuxDIOCFh7FqybUuZoxdazEwpCJnjOC8dJotYNhpSVBn10X9YScOGPp3v2Xh2abumM4qHG4hriqAJHGOuIhKO9rMZAroMJKF%2F5NvYQ6PNucqK3A7n7ZfetqmYVnnz5gy%2F2Sh2IutXA2n3MO3XwxG7AsZBBG12kv7T7xgZvQdG7N9%2FI5TF%2BWwO7Gr42QglOSf8mH7oTO1TMGWsIqVftTdoeN3RHDHTLzAhH%2FxSEbXf3yROKNaBcSTHhlCFFjr7QjF88hGA%3D%3D HKU\S-1-5-21-1085769570-3512807385-3274156511-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://vaioportal.sony.eu SearchScopes: HKU\S-1-5-21-1085769570-3512807385-3274156511-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://nl.search.yahoo.com/yhs/search?hspart=omr&hsimp=yhs-001&type=87bjiqs279bdfhjvqgikmoqs1f005119¶m1=y6bdVFVIsvuYsgEClQfz8KEXu5QggLXxTK%2B1RnitLlN0WhR%2F0kSZE3k0PejMR%2BoDLG1BCx03%2BgYlAkAbNVN5D8mvY2hMpi2xJYmgyxhL7oOZIU%2FQjaZbKGA6jvdg2qkqvwuVYwT76UtibDiz3DzAqRoimcOk%2FuL3LlvYSrPmixYeKM5BGqAcoTLgI8JEZ9P1x38jxhAP6lEKHeikt21R6oaQK2tEFzmwnch9yVcol%2BNztrzZJuJHl8tuIUkdBlyVvr%2BtZzU1hZLLGLZ1w%2BDMzomS3Q56MmWrhzk7%2FrEPfzMRMhN%2BA8czZAzit27qBc%2FsL%2FVM%2F%2FyKS4JycPjAkJIpnqDMDrOsncdLCy6eJxi9%2BEDrrpFTrFQOQxSyGNooD6CpxzFLj680NA02%2FVTJwAUL6w%3D%3D&p={searchTerms} SearchScopes: HKU\S-1-5-21-1085769570-3512807385-3274156511-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://nl.search.yahoo.com/yhs/search?hspart=omr&hsimp=yhs-001&type=87bjiqs279bdfhjvqgikmoqs1f005119¶m1=y6bdVFVIsvuYsgEClQfz8KEXu5QggLXxTK%2B1RnitLlN0WhR%2F0kSZE3k0PejMR%2BoDLG1BCx03%2BgYlAkAbNVN5D8mvY2hMpi2xJYmgyxhL7oOZIU%2FQjaZbKGA6jvdg2qkqvwuVYwT76UtibDiz3DzAqRoimcOk%2FuL3LlvYSrPmixYeKM5BGqAcoTLgI8JEZ9P1x38jxhAP6lEKHeikt21R6oaQK2tEFzmwnch9yVcol%2BNztrzZJuJHl8tuIUkdBlyVvr%2BtZzU1hZLLGLZ1w%2BDMzomS3Q56MmWrhzk7%2FrEPfzMRMhN%2BA8czZAzit27qBc%2FsL%2FVM%2F%2FyKS4JycPjAkJIpnqDMDrOsncdLCy6eJxi9%2BEDrrpFTrFQOQxSyGNooD6CpxzFLj680NA02%2FVTJwAUL6w%3D%3D&p={searchTerms} SearchScopes: HKU\S-1-5-21-1085769570-3512807385-3274156511-1001 -> {0A33EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-1085769570-3512807385-3274156511-1001 -> {CE3549A5-5DE6-4EAE-A97A-2D7F1D66483D} URL = hxxp://rover.ebay.com/rover/1/1346-81661-16445-14/4?mpre=hxxp://shop.ebay.nl/?oemInLn=ieSrch-Q113&_nkw={searchTerms} BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2012-11-05] (Qualcomm Atheros -> Qualcomm Atheros Commnucations) [Bestand niet getekend] Edge: ====== Edge HomeButtonPage: HKU\S-1-5-21-1085769570-3512807385-3274156511-1001 -> hxxps://nl.search.yahoo.com/yhs/web?hspart=omr&hsimp=yhs-001&type=87bjiqs279bdfhjvqgikmoqs1f005119¶m1=y6bdVFVIsvuYsgEClQfz8KEXu5QggLXxTK%2B1RnitLlN0WhR%2F0kSZE3k0PejMR%2BoDLG1BCx03%2BgYlAkAbNVN5D6t4SsgeGjmElsJ7WnWQSS41FojLNSiDXF4AMazfL3y0OkKFsfF%2BySc5dNheo60TwpATcEdQxe2N2lUONBfgWM%2B%2BHAjhlwugNISAOzHHwVD1%2B4ibi4ieMlA%2FKtJnmRAvK4FlH5E1n1sR6%2FjcnwQENHNO80mLeXE7YjaPsE9F8OLcsD11sDRF8bmCOk4QtdwO0%2FzcYi98y6bfyuyhdXFQ5Ag4Zi%2B0N1fpaNJxO0FShIrjJitqq%2FADyFMizvpxy5Mf5G9xyB7F5UKl63sA5uxdOx8CscIXxFOHDBdRYr2L5SIjVNjJQ9OGZHf7R8wsV1gTsw%3D%3D FireFox: ======== FF ProfilePath: C:\Users\Joost\AppData\Roaming\TomTom\HOME\Profiles\jjevb9lm.default [2019-07-22] FF Extension: (Map status indicator) - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [2019-06-05] [Verouderd] [niet getekend] FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-09-29] (Intel® Identity Protection Technology Software -> Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-09-29] (Intel® Identity Protection Technology Software -> Intel Corporation) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2017-03-28] (Adobe Systems, Incorporated -> Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-1085769570-3512807385-3274156511-1001: @easyxplor.com/easyxplore Update;version=9 -> C:\Users\Joost\AppData\Local\easyxplore\Update\1.3.99.0\npeasyxploreUpdate3.dll [Geen bestand] Chrome: ======= CHR Profile: C:\Users\Joost\AppData\Local\Google\Chrome\User Data\Default [2020-03-22] CHR HomePage: Default -> hxxp://www.google.nl/ CHR StartupUrls: Default -> "hxxps://www.google.com/","hxxps://nl.search.yahoo.com/yhs/web?hspart=omr&hsimp=yhs-001&type=87bjiqs279bdfhjvqgikmoqs1f005119¶m1=y6bdVFVIsvuYsgEClQfz8KEXu5QggLXxTK%2B1RnitLlN0WhR%2F0kSZE3k0PejMR%2BoDLG1BCx03%2BgYlAkAbNVN5D9VOjqfbnq6eP%2BFNwgymVbwGJUvbxqypQoslztOECUvopaUpZTVMV%2F6kPohy%2FfPgJBkIxVuYRHJ3hnpNaDx8UWog7erziEKZijcXrT3LsZZVxSA1PzFuvxgxWyawFJ%2F7z%2B22BDeJUgBfB2tls4HlCzdf%2BbPaOXGyGiSwwD8wJ1Wu8KonmYzZYrVTFeqV1Ypic147gI87q42jsFEWci7DqrXUtSfexf9KztuvUMSVqLsMULFZrWsx6shVt0uYDvKfnoa1NFVcCDh49uyVwwkzcjZqkWZQUFGyblYz00eexptUTiDbXO41isaQ2L2xBCWZkeHbbC2xv3e27uUYRxxuuUY%3D" CHR Extension: (Presentaties) - C:\Users\Joost\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-14] CHR Extension: (Documenten) - C:\Users\Joost\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-14] CHR Extension: (Google Drive) - C:\Users\Joost\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-02-04] CHR Extension: (YouTube) - C:\Users\Joost\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-02-04] CHR Extension: (Spreadsheets) - C:\Users\Joost\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-14] CHR Extension: (Offline Documenten) - C:\Users\Joost\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-03-08] CHR Extension: (Advertenties blocker voor YouTube ™) - C:\Users\Joost\AppData\Local\Google\Chrome\User Data\Default\Extensions\hflefjhkfeiaignkclmphmokmmbhbhik [2018-12-02] CHR Extension: (Betalingen via Chrome Web Store) - C:\Users\Joost\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-04] CHR Extension: (Gmail) - C:\Users\Joost\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-30] CHR Extension: (Chrome Media Router) - C:\Users\Joost\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-12-21] ==================== Services (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) R2 AMD External Events Utility; C:\WINDOWS\system32\atiesrxx.exe [255472 2015-12-16] (Microsoft Windows Hardware Compatibility Publisher -> AMD) R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2445968 2012-09-29] (Realtek Semiconductor Corp -> Realsil Microelectronics Inc.) R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128896 2012-09-29] (Intel Corporation -> Intel Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-09-29] (Intel Corporation -> Intel Corporation) S3 NetworkSupport; C:\Program Files (x86)\Sony\VAIO Control Center\NetworkSetting\NetworkSupport.exe [623784 2012-10-17] (Sony Corporation -> Sony Corporation) R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [255168 2015-09-21] (Synaptics Incorporated -> Synaptics Incorporated) R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [11795800 2019-04-15] (TeamViewer GmbH -> TeamViewer GmbH) R2 Update service; C:\Program Files (x86)\Popcorn Time\Updater.exe [339968 2017-10-17] (Popcorn Time) [Bestand niet getekend] S3 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [964608 2012-09-28] (Sony Corporation) [Bestand niet getekend] R3 VUAgent; C:\Program Files\Sony\VAIO Update\vuagent.exe [1744872 2019-11-08] (Sony Corporation -> Sony Corporation) S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\NisSrv.exe [3206472 2019-12-04] (Microsoft Windows Publisher -> Microsoft Corporation) S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\MsMpEng.exe [103376 2019-12-04] (Microsoft Windows Publisher -> Microsoft Corporation) R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2012-11-05] (Atheros) [Bestand niet getekend] ===================== Drivers (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) R3 amdkmdag; C:\WINDOWS\system32\DRIVERS\atikmdag.sys [21648880 2015-12-16] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) R3 amdkmdap; C:\WINDOWS\system32\DRIVERS\atikmpag.sys [674288 2015-12-16] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) R3 athr; C:\WINDOWS\System32\drivers\athw8x.sys [4233728 2019-03-19] (Microsoft Windows -> Qualcomm Atheros Communications, Inc.) R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [102912 2015-05-28] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices) R3 BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [610336 2016-07-13] (Microsoft Windows Hardware Compatibility Publisher -> Qualcomm Atheros) R1 CLVirtualDrive; C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink -> CyberLink) R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [662528 2019-03-19] (Microsoft Windows -> Realtek ) R3 SFEP; C:\WINDOWS\System32\drivers\SFEP.sys [14336 2012-07-11] (Microsoft Windows Hardware Compatibility Publisher -> Sony Corporation) R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [51392 2015-09-21] (Synaptics Incorporated -> Synaptics Incorporated) R3 SOWS; C:\WINDOWS\System32\drivers\sows.sys [24280 2012-06-11] (WDKTestCert kaneda,129651282666891607 -> Sony Corporation) R1 VBoxUSBMon; C:\WINDOWS\system32\DRIVERS\VBoxUSBMon.sys [127432 2017-01-29] (Duodian Online Technology Co. Ltd. -> BigNox Corporation) S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [45664 2019-12-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [355760 2019-12-04] (Microsoft Windows -> Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [54192 2019-12-04] (Microsoft Windows -> Microsoft Corporation) ==================== NetSvcs (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) ==================== Een maand (aangemaakt) =================== (Als een item is opgenomen in de fixlist, wordt de map of het bestand verplaatst.) 2020-03-22 13:40 - 2020-03-22 13:42 - 000031299 _____ C:\Users\Joost\Desktop\FRST.txt 2020-03-22 13:38 - 2020-03-22 13:38 - 000000000 ____D C:\Users\Joost\Desktop\Nieuwe map 2020-03-22 13:14 - 2020-03-22 13:17 - 000021623 _____ C:\Users\Joost\Desktop\Fixlog.txt 2020-03-22 13:14 - 2020-03-22 13:14 - 000000000 ____D C:\Users\Joost\Desktop\FRST-OlderVersion 2020-03-22 13:12 - 2020-03-22 13:12 - 000008043 _____ C:\Users\Joost\Downloads\fixlist.txt 2020-03-22 13:08 - 2020-03-22 13:13 - 000009241 _____ C:\Users\Joost\Desktop\mb-clean-results.txt 2020-03-22 13:08 - 2020-03-22 13:08 - 000858912 _____ (Malwarebytes) C:\Users\Joost\Downloads\mb-clean-3.1.0.1035.exe 2020-03-22 09:43 - 2020-03-22 09:43 - 001957784 _____ (Malwarebytes) C:\Users\Joost\Downloads\MBSetup.exe 2020-03-22 06:59 - 2020-03-22 13:41 - 000000000 ____D C:\FRST 2020-03-21 17:46 - 2020-03-22 13:14 - 002279936 _____ (Farbar) C:\Users\Joost\Desktop\FRST64.exe 2020-03-21 17:14 - 2020-03-21 17:17 - 000537348 _____ C:\WINDOWS\Minidump\032120-44843-01.dmp 2020-03-21 16:54 - 2020-03-21 16:56 - 002279936 _____ (Farbar) C:\Users\Joost\Downloads\FRST64.exe 2020-03-21 16:07 - 2020-03-21 16:07 - 002279936 _____ (Farbar) C:\Users\Joost\Downloads\Niet bevestigd 688169.crdownload 2020-03-13 16:36 - 2020-03-21 17:14 - 560857045 _____ C:\WINDOWS\MEMORY.DMP 2020-03-13 16:36 - 2020-03-13 16:49 - 000601748 _____ C:\WINDOWS\Minidump\031320-51000-01.dmp 2020-03-08 14:45 - 2020-03-08 15:02 - 000000000 ____D C:\Users\Joost\AppData\LocalLow\IGDump 2020-03-08 14:39 - 2020-03-08 14:39 - 000000000 ____D C:\Users\Joost\AppData\Local\cache 2020-03-08 11:43 - 2020-03-08 11:43 - 022195736 _____ (Piriform Software Ltd) C:\Users\Joost\Downloads\ccsetup564.exe 2020-03-08 11:14 - 2020-03-08 11:14 - 000747545 _____ C:\Users\Joost\Downloads\Algemene voorwaarden kinderopvang (1) 2020-03-08 11:14 - 2020-03-08 11:14 - 000747545 _____ C:\Users\Joost\Downloads\Algemene voorwaarden kinderopvang ==================== Een maand (gewijzigd) ================== (Als een item is opgenomen in de fixlist, wordt de map of het bestand verplaatst.) 2020-03-22 13:42 - 2017-02-04 18:14 - 000002321 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2020-03-22 13:42 - 2017-02-04 18:14 - 000002280 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2020-03-22 13:38 - 2019-03-19 05:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2020-03-22 13:30 - 2019-08-30 18:49 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2020-03-22 13:19 - 2019-08-30 19:27 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2020-03-22 13:19 - 2019-05-29 14:31 - 000000000 ____D C:\Program Files (x86)\TeamViewer 2020-03-22 13:18 - 2019-03-19 05:37 - 000786432 _____ C:\WINDOWS\system32\config\BBI 2020-03-22 12:36 - 2019-08-30 19:11 - 001681094 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2020-03-22 12:36 - 2019-03-19 13:33 - 000749772 _____ C:\WINDOWS\system32\perfh013.dat 2020-03-22 12:36 - 2019-03-19 13:33 - 000146608 _____ C:\WINDOWS\system32\perfc013.dat 2020-03-22 12:32 - 2019-08-30 18:58 - 000000000 ____D C:\Users\Joost 2020-03-22 09:42 - 2018-02-08 21:29 - 000000000 ____D C:\Users\Joost\AppData\Local\Packages 2020-03-22 09:33 - 2019-03-19 05:52 - 000000000 ___HD C:\WINDOWS\ELAMBKUP 2020-03-21 17:14 - 2019-09-30 17:29 - 000000000 ____D C:\WINDOWS\Minidump 2020-03-21 15:35 - 2019-08-30 19:27 - 000003578 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA 2020-03-21 15:35 - 2019-08-30 19:27 - 000003454 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore 2020-03-17 12:52 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\LiveKernelReports 2020-03-16 07:38 - 2019-03-19 05:50 - 000000000 ____D C:\WINDOWS\INF 2020-03-08 13:48 - 2015-10-15 21:16 - 000000000 ____D C:\Users\Joost\AppData\Local\VirtualStore 2020-03-08 13:25 - 2019-03-19 05:37 - 000000000 ____D C:\WINDOWS\CbsTemp 2020-03-08 13:19 - 2015-10-16 18:39 - 000000000 ____D C:\WINDOWS\system32\MRT 2020-03-08 13:05 - 2015-10-16 18:39 - 120407888 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2020-03-08 11:47 - 2019-08-30 19:27 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update 2020-03-08 11:46 - 2019-08-30 18:58 - 000000000 ____D C:\Users\Administrator 2020-03-08 11:46 - 2017-01-07 13:26 - 000000863 _____ C:\Users\Public\Desktop\CCleaner.lnk ==================== Bestanden in de root van sommige mappen ======== 2019-12-22 10:45 - 2019-12-22 10:45 - 000286556 _____ () C:\Users\Joost\AppData\Roaming\anh_1N1I1F1S1T1I0M1F1Q2Y1I1P1B0C1F1Q1P.txt ==================== SigCheck ============================ (Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.) ==================== Einde van FRST.txt ========================