Fix resultaat van Farbar Recovery Scan Tool (x64) Versie: 14-04-2021 Gestart door Andy (15-04-2021 11:31:42) Run:1 Gestart vanaf C:\Users\Andy\Desktop Geladen Profielen: Andy Boot Modus: Normal ============================================== fixlist inhoud: ***************** CreateRestorePoint: CloseProcesses: AppInit_DLLs:  acaptuser64.dll => Geen bestand GroupPolicy: Restrictie ? <==== AANDACHT Policies: C:\ProgramData\NTUSER.pol: Restrictie <==== AANDACHT HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restrictie <==== AANDACHT HKLM\SOFTWARE\Policies\Google: Restrictie <==== AANDACHT Task: {65BB380D-65CA-4F1C-82F5-AC2321EC767F} - \Browser Manager -> Geen bestand <==== AANDACHT FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll [Geen bestand] FF Plugin-x32: @winzip.com/Winzip Courier -> C:\Program Files (x86)\WinZip Courier\npwzwmc.dll [Geen bestand] S3 EuGdiDrv; \SystemRoot\system32\EuGdiDrv.sys [X] U3 idsvc; geen ImagePath C:\WINDOWS\system32\Drivers\asw38fde025dc466142.tmp C:\WINDOWS\system32\Drivers\asw2533c0029da667f8.tmp C:\Users\Andy\AppData\Roaming\unp30047649.tmp Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.21.169 - Google Inc.) Hidden HKU\S-1-5-21-626991123-2630253986-2610911255-1002\...\ChromeHTML: -> <==== AANDACHT ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> Geen bestand Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - Geen bestand Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - Geen bestand FirewallRules: [TCP Query User{DEF158BF-161A-479A-97AF-9A22F3C3FB78}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe => Geen bestand FirewallRules: [UDP Query User{3DC6B52B-CC6B-41C8-8866-4BF278F02715}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe => Geen bestand FirewallRules: [TCP Query User{A8ECE212-4E05-4B0D-A9BE-050624F933D2}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe => Geen bestand FirewallRules: [UDP Query User{6D5E7DCE-0A48-4EE1-A096-7A12C3B16555}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe => Geen bestand FirewallRules: [TCP Query User{64E9981B-55CF-4523-94BF-30247D3E6D7A}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe => Geen bestand FirewallRules: [UDP Query User{B2873411-AA13-4A7E-A7ED-47C32FFF5A60}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe => Geen bestand FirewallRules: [{A88F7DCF-1C53-46DA-B3CD-870E82DF514E}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\Streaming Audio Recorder.exe => Geen bestand FirewallRules: [{B9482C28-5E3D-4A55-92DE-AA698682B2A5}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\Streaming Audio Recorder.exe => Geen bestand FirewallRules: [{F8CB4E89-6DC9-4862-A85F-102EED8A7423}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\ApowersoftVideoHelper.dll => Geen bestand FirewallRules: [{A4964A3C-1431-46AC-B5F3-33207BB420E2}] => (Allow) C:\Program Files (x86)\Apowersoft\Streaming Audio Recorder\ApowersoftVideoHelper.dll => Geen bestand Hosts: EmptyTemp: Reboot: ***************** Herstelpunt is succesvol gemaakt. Proces succesvol afgesloten. " acaptuser64.dll" => Waarde gegevens is succesvol verwijderd C:\WINDOWS\system32\GroupPolicy\Machine => is succesvol verplaatst C:\WINDOWS\system32\GroupPolicy\GPT.ini => is succesvol verplaatst C:\WINDOWS\SysWOW64\GroupPolicy\GPT.ini => is succesvol verplaatst C:\ProgramData\NTUSER.pol => is succesvol verplaatst HKLM\SOFTWARE\Policies\Mozilla => is succesvol verwijderd HKLM\SOFTWARE\Policies\Google => is succesvol verwijderd "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{65BB380D-65CA-4F1C-82F5-AC2321EC767F}" => is succesvol verwijderd "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{65BB380D-65CA-4F1C-82F5-AC2321EC767F}" => is succesvol verwijderd "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Browser Manager" => is succesvol verwijderd HKLM\Software\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer => is succesvol verwijderd HKLM\Software\Wow6432Node\MozillaPlugins\@winzip.com/Winzip Courier => is succesvol verwijderd HKLM\System\CurrentControlSet\Services\EuGdiDrv => is succesvol verwijderd EuGdiDrv => service is succesvol verwijderd HKLM\System\CurrentControlSet\Services\idsvc => is succesvol verwijderd idsvc => service is succesvol verwijderd C:\WINDOWS\system32\Drivers\asw38fde025dc466142.tmp => is succesvol verplaatst C:\WINDOWS\system32\Drivers\asw2533c0029da667f8.tmp => is succesvol verplaatst C:\Users\Andy\AppData\Roaming\unp30047649.tmp => is succesvol verplaatst "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}\\SystemComponent" => is succesvol verwijderd HKU\S-1-5-21-626991123-2630253986-2610911255-1002_Classes\ChromeHTML => is succesvol verwijderd HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\Gadgets => is succesvol verwijderd HKLM\Software\Classes\PROTOCOLS\Handler\livecall => is succesvol verwijderd HKLM\Software\Classes\PROTOCOLS\Handler\msnim => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{DEF158BF-161A-479A-97AF-9A22F3C3FB78}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{3DC6B52B-CC6B-41C8-8866-4BF278F02715}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{A8ECE212-4E05-4B0D-A9BE-050624F933D2}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{6D5E7DCE-0A48-4EE1-A096-7A12C3B16555}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{64E9981B-55CF-4523-94BF-30247D3E6D7A}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{B2873411-AA13-4A7E-A7ED-47C32FFF5A60}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A88F7DCF-1C53-46DA-B3CD-870E82DF514E}" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{B9482C28-5E3D-4A55-92DE-AA698682B2A5}" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F8CB4E89-6DC9-4862-A85F-102EED8A7423}" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A4964A3C-1431-46AC-B5F3-33207BB420E2}" => is succesvol verwijderd C:\Windows\System32\Drivers\etc\hosts => is succesvol verplaatst Hosts met succes hersteld. =========== EmptyTemp: ========== BITS transfer queue => 10248192 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 235629898 B Java, Flash, Steam htmlcache => 238264186 B Windows/system/drivers => 2469661 B Edge => 45581 B Chrome => 420252202 B Firefox => 132327636 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 33058 B ProgramData => 33058 B Public => 33058 B systemprofile => 33058 B systemprofile32 => 33058 B LocalService => 54900 B NetworkService => 54900 B Andy => 74949808 B RecycleBin => 2721437967 B EmptyTemp: => 3.6 GB tijdelijke gegevens verwijderd. ================================ Het systeem moest herstart worden. ==== Einde van Fixlog 11:37:40 ====