Scanresultaten van Farbar Recovery Scan Tool (FRST) (x64) Versie: 02-06-2021 Gestart door theos (Beheerder) op DESKTOP-CDE5RUK (Dell Inc. OptiPlex 390) (04-06-2021 09:31:06) Gestart vanaf C:\Users\theos\OneDrive\Bureaublad Geladen Profielen: theos Platform: Windows 10 Pro Versie 21H1 19043.1023 (X64) Taal: Nederlands (Nederland) Standaardbrowser: FF Boot Modus: Normal ==================== Processen (gefilterd) ================= (Als een item is opgenomen in de fixlist, zal het proces worden gesloten. Het bestand zal niet worden verplaatst.) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (Canon Inc. -> ) C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe (Canon Inc. -> CANON INC.) C:\Program Files (x86)\Canon\IJ Scan Utility\SETEVENT.exe (Canon Inc. -> CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE (Canon Inc. -> CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE (CyberLink -> ) C:\Program Files\CyberLink\Shared files\RichVideo64.exe (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe <3> (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe (Dropbox, Inc -> The Qt Company Ltd.) C:\Program Files (x86)\Dropbox\Client\123.4.4832\QtWebEngineProcess.exe <3> (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.82\GoogleCrashHandler.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.82\GoogleCrashHandler64.exe (Logitech, Inc. -> ) C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe (Logitech, Inc. -> Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\Office16\OUTLOOK.EXE (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\Office16\WINWORD.EXE (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12104.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2> (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SecurityHealthHost.exe <2> (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2104.14-0\MsMpEng.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <7> (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe ==================== Register (gefilterd) =================== (Als een item is opgenomen in de fixlist, zal het registeritem worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.) HKLM\...\Run: [WindowsDefender] => "%ProgramFiles%\Windows Defender\MSASCuiL.exe" HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [8172320 2021-05-22] (Dropbox, Inc -> Dropbox, Inc.) HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech, Inc. -> Logitech Inc.) HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1313408 2017-07-05] (Canon Inc. -> CANON INC.) HKLM\...\Windows x64\Print Processors\Canon MG5700 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDCS.DLL [30208 2015-03-15] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\...\Print\Monitors\Canon BJ Language Monitor MG5700 series: C:\Windows\system32\CNMLMCS.DLL [406528 2015-03-15] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\91.0.4472.77\Installer\chrmstp.exe [2021-05-27] (Google LLC -> Google LLC) ==================== Geplande Taken (gefilterd) ============ (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) Task: {23AC3B1F-7B68-4492-8877-C4FCBA815209} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [416432 2015-07-31] (Microsoft Corporation -> Microsoft Corporation) Task: {26484DF6-EE41-4D9B-B9F6-B80C29718529} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [696304 2021-05-07] (Mozilla Corporation -> Mozilla Foundation) Task: {463A8305-5B78-4BEC-A13F-FAEF795DE05B} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe [316632 2015-07-31] (Microsoft Corporation -> Microsoft Corporation) Task: {6F511D5E-F580-4C0D-B946-6B6CBF4969F2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155592 2021-01-10] (Google LLC -> Google LLC) Task: {73B09430-B07D-4C47-B702-3AA82E53B156} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1308386178-264101679-3570317249-500 => C:\Users\theos\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe Task: {83602EB6-CE7B-4AEC-996F-66193DC15E1B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [416432 2015-07-31] (Microsoft Corporation -> Microsoft Corporation) Task: {8734C930-CBEF-4DAB-9640-04E453F81645} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2021-01-12] (Dropbox, Inc -> Dropbox, Inc.) Task: {CD960CCC-5BD2-472A-A2CB-6D146879310D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155592 2021-01-10] (Google LLC -> Google LLC) Task: {D9A7F6FF-FF86-4163-A493-CB8CF12EE3E2} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-25] (Adobe Inc. -> Adobe Inc.) Task: {D9D8D895-A5CA-41FE-B7F1-5764ABBBF2A1} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2021-01-12] (Dropbox, Inc -> Dropbox, Inc.) Task: {DE22AFC7-40A5-44C8-A614-5C1ED6694CFC} - System32\Tasks\NCH Software\DebutDowngrade => C:\Program Files (x86)\NCH Software\Debut\debut.exe [3624520 2020-12-23] (NCH Software, Inc. -> NCH Software) (Als een item is opgenomen in de fixlist, wordt de taak (job) bestand verplaatst. Het bestand dat wordt uitgevoerd door de taak zal niet worden verplaatst.) Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe ==================== Internet (gefilterd) ==================== (Als een item is opgenomen in de fixlist en een registeritem is, wordt het verwijderd of hersteld naar de standaard.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{01d52ce3-f654-4807-919b-fc7379500629}: [DhcpNameServer] 192.168.1.1 Edge: ======= Edge Extension: (Geen Naam) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [niet gevonden] Edge Extension: (Geen Naam) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [niet gevonden] Edge Extension: (Geen Naam) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [niet gevonden] Edge Extension: (Geen Naam) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [niet gevonden] Edge Profile: C:\Users\theos\AppData\Local\Microsoft\Edge\User Data\Default [2021-06-04] Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee] FireFox: ======== FF DefaultProfile: t61l4l6g.default FF ProfilePath: C:\Users\theos\AppData\Roaming\Mozilla\Firefox\Profiles\t61l4l6g.default [2021-01-05] FF ProfilePath: C:\Users\theos\AppData\Roaming\Mozilla\Firefox\Profiles\azoj2efr.default-release-1620482901333 [2021-06-04] FF Homepage: Mozilla\Firefox\Profiles\azoj2efr.default-release-1620482901333 -> hxxps://www.facebook.com/ FF Notifications: Mozilla\Firefox\Profiles\azoj2efr.default-release-1620482901333 -> hxxps://ytmp3.cc FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-05-10] (VideoLAN -> VideoLAN) FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-05-10] (VideoLAN -> VideoLAN) FF Plugin: @videolan.org/vlc,version=3.0.12 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-05-10] (VideoLAN -> VideoLAN) FF Plugin: @videolan.org/vlc,version=3.0.14 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-05-10] (VideoLAN -> VideoLAN) FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2019-07-02] (CANON INC.) [Bestand niet getekend] FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2020-03-17] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-04-27] (Adobe Inc. -> Adobe Systems Inc.) Chrome: ======= CHR Profile: C:\Users\theos\AppData\Local\Google\Chrome\User Data\Default [2021-06-04] CHR Extension: (Betalingen via Chrome Web Store) - C:\Users\theos\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-31] CHR Extension: (Chrome Media Router) - C:\Users\theos\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-05-27] CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee] Opera: ======= OPR Profile: C:\Users\theos\AppData\Roaming\Opera Software\Opera Stable [2021-01-10] ==================== Services (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.) R2 CIJSRegister; C:\Program Files (x86)\Canon\IJ Scan Utility\SETEVENT.exe [144464 2015-02-19] (Canon Inc. -> CANON INC.) S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2021-01-12] (Dropbox, Inc -> Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2021-01-12] (Dropbox, Inc -> Dropbox, Inc.) R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [44328 2021-05-22] (Dropbox, Inc -> Dropbox, Inc.) R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [443344 2020-05-25] (Canon Inc. -> ) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7391408 2021-05-08] (Malwarebytes Inc -> Malwarebytes) R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [386344 2010-08-19] (CyberLink -> ) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5393304 2021-05-30] (Microsoft Windows Publisher -> Microsoft Corporation) R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [12757520 2020-12-14] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) S3 VBoxSDS; C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe [746688 2021-04-28] (Oracle Corporation -> Oracle Corporation) S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2104.14-0\NisSrv.exe [2599328 2021-05-23] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2104.14-0\MsMpEng.exe [128376 2021-05-23] (Microsoft Windows Publisher -> Microsoft Corporation) ===================== Drivers (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Bestand niet getekend] R3 MarvinBus; C:\Windows\System32\drivers\MarvinBus64.sys [261120 2005-09-23] (Microsoft Windows Hardware Compatibility Publisher -> Pinnacle Systems GmbH) R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [220752 2021-05-30] (Malwarebytes Inc -> Malwarebytes) S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [19912 2021-05-08] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes) R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [248992 2021-05-08] (Malwarebytes Inc -> Malwarebytes) R3 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [239616 2021-04-28] (Oracle Corporation -> Oracle Corporation) R1 VBoxNetLwf; C:\Windows\system32\DRIVERS\VBoxNetLwf.sys [249536 2021-04-28] (Oracle Corporation -> Oracle Corporation) S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [174968 2021-01-07] (Oracle Corporation -> Oracle Corporation) S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [49560 2021-05-23] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [421112 2021-05-23] (Microsoft Windows -> Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [73960 2021-05-23] (Microsoft Windows -> Microsoft Corporation) S3 WLRAWMp50x64; C:\Windows\System32\Drivers\WLRAWMp50x64.sys [35352 2013-10-31] (Logitech Inc -> Logitech, Inc.) S3 WLRAWMp50x64; C:\Windows\SysWOW64\Drivers\WLRAWMp50x64.sys [35352 2013-10-31] (Logitech Inc -> Logitech, Inc.) S3 WLRAWSp50x64; C:\Windows\System32\Drivers\WLRAWSp50x64.sys [34328 2013-10-31] (Logitech Inc -> Logitech, Inc.) S3 WLRAWSp50x64; C:\Windows\SysWOW64\Drivers\WLRAWSp50x64.sys [34328 2013-10-31] (Logitech Inc -> Logitech, Inc.) ==================== NetSvcs (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) ==================== Een maand (aangemaakt) (gefilterd) ========= (Als een item is opgenomen in de fixlist, wordt de map of het bestand verplaatst.) 2021-06-04 09:30 - 2021-06-04 09:31 - 000000000 ____D C:\FRST 2021-05-30 16:23 - 2021-05-30 16:23 - 002755584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2021-05-30 16:23 - 2021-05-30 16:23 - 002755584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2021-05-30 16:23 - 2021-05-30 16:23 - 001864192 _____ (The ICU Project) C:\Windows\SysWOW64\icu.dll 2021-05-30 16:23 - 2021-05-30 16:23 - 001314120 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi 2021-05-30 16:23 - 2021-05-30 16:23 - 000568832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2021-05-30 16:23 - 2021-05-30 16:23 - 000468440 _____ C:\Windows\SysWOW64\WindowManagementAPI.dll 2021-05-30 16:23 - 2021-05-30 16:23 - 000451072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2021-05-30 16:23 - 2021-05-30 16:23 - 000011327 _____ C:\Windows\system32\DrtmAuthTxt.wim 2021-05-30 16:22 - 2021-05-30 16:22 - 002260480 _____ (The ICU Project) C:\Windows\system32\icu.dll 2021-05-30 16:22 - 2021-05-30 16:22 - 001823792 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2021-05-30 16:22 - 2021-05-30 16:22 - 001393496 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2021-05-30 16:22 - 2021-05-30 16:22 - 000657464 _____ C:\Windows\system32\WindowManagementAPI.dll 2021-05-30 16:22 - 2021-05-30 16:22 - 000563712 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv 2021-05-30 16:22 - 2021-05-30 16:22 - 000423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv 2021-05-30 16:22 - 2021-05-30 16:22 - 000287232 _____ C:\Windows\system32\CoreMas.dll 2021-05-30 16:22 - 2021-05-30 16:22 - 000272384 _____ C:\Windows\system32\TpmTool.exe 2021-05-30 16:22 - 2021-05-30 16:22 - 000223744 _____ C:\Windows\SysWOW64\TpmTool.exe 2021-05-30 16:22 - 2021-05-30 16:22 - 000097280 _____ C:\Windows\system32\Drivers\cimfs.sys 2021-05-30 08:36 - 2021-05-30 08:36 - 000220752 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys 2021-05-27 07:37 - 2021-05-27 07:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 2021-05-22 15:52 - 2021-05-22 15:52 - 000047600 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-stable.sys 2021-05-22 15:52 - 2021-05-22 15:52 - 000047600 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-dev.sys 2021-05-22 15:52 - 2021-05-22 15:52 - 000047600 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-canary.sys 2021-05-22 15:52 - 2021-05-22 15:52 - 000044328 _____ (Dropbox, Inc.) C:\Windows\system32\DbxSvc.exe 2021-05-12 14:51 - 2021-05-12 14:51 - 000000000 ____D C:\Users\theos\.gnutls 2021-05-08 10:07 - 2021-05-30 08:36 - 000002033 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk 2021-05-08 10:07 - 2021-05-30 08:36 - 000002021 _____ C:\ProgramData\Bureaublad\Malwarebytes.lnk 2021-05-08 10:07 - 2021-05-08 10:07 - 000248992 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys 2021-05-08 10:07 - 2021-05-08 10:06 - 000199128 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys 2021-05-08 10:07 - 2021-05-08 10:06 - 000019912 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamElam.sys 2021-05-07 13:40 - 2021-05-07 13:45 - 000000000 ____D C:\AdwCleaner 2021-05-07 10:03 - 2021-05-07 10:03 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla 2021-05-07 07:47 - 2021-06-04 09:06 - 000000000 ____D C:\Program Files\Mozilla Firefox 2021-05-06 08:01 - 2021-05-06 08:01 - 000000000 ____D C:\Users\theos\OneDrive\Documenten\Mijn Garmin ==================== Een maand (gewijzigd) ================== (Als een item is opgenomen in de fixlist, wordt de map of het bestand verplaatst.) 2021-06-04 09:17 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2021-06-04 08:56 - 2020-11-19 00:45 - 000000000 ____D C:\Windows\system32\SleepStudy 2021-06-04 08:41 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps 2021-06-04 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\AppReadiness 2021-06-04 08:10 - 2021-01-19 10:27 - 000000000 ____D C:\Users\theos\AppData\LocalLow\IGDump 2021-06-04 08:04 - 2021-01-05 10:37 - 000000000 ____D C:\ProgramData\Mozilla 2021-06-04 08:03 - 2021-01-05 10:37 - 000000000 ____D C:\Users\theos\AppData\LocalLow\Mozilla 2021-06-03 15:55 - 2021-01-16 14:14 - 000000000 ____D C:\Users\theos\AppData\Roaming\Garmin 2021-06-03 15:27 - 2021-01-16 14:30 - 000000000 ____D C:\Users\theos\AppData\Roaming\vlc 2021-06-02 15:45 - 2021-01-16 14:25 - 000000000 ____D C:\Users\theos\AppData\Local\Deployment 2021-06-01 08:37 - 2021-01-13 16:54 - 000000000 ____D C:\ProgramData\CanonIJPLM 2021-06-01 08:15 - 2021-01-13 09:49 - 000000000 ___RD C:\Users\theos\Dropbox 2021-05-31 15:08 - 2021-01-06 12:05 - 000000000 ____D C:\Windows\system32\Tasks\NCH Software 2021-05-31 11:00 - 2021-01-16 14:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin 2021-05-31 11:00 - 2021-01-16 14:15 - 000000000 ____D C:\Program Files (x86)\Garmin 2021-05-31 11:00 - 2021-01-06 14:41 - 000000000 ____D C:\ProgramData\Package Cache 2021-05-31 10:15 - 2019-12-07 11:13 - 000000000 ____D C:\Windows\INF 2021-05-31 10:11 - 2021-01-16 10:56 - 000078336 _____ C:\Users\theos\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2021-05-31 08:20 - 2021-01-05 10:31 - 001771768 _____ C:\Windows\system32\PerfStringBackup.INI 2021-05-31 08:20 - 2019-12-07 17:14 - 000786070 _____ C:\Windows\system32\perfh013.dat 2021-05-31 08:20 - 2019-12-07 17:14 - 000154198 _____ C:\Windows\system32\perfc013.dat 2021-05-30 16:30 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel 2021-05-30 16:28 - 2021-01-10 11:24 - 000000000 ____D C:\Program Files (x86)\TeamViewer 2021-05-30 16:28 - 2021-01-05 10:24 - 000008192 ___SH C:\DumpStack.log.tmp 2021-05-30 16:28 - 2020-11-19 01:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2021-05-30 16:28 - 2020-11-19 00:45 - 000542920 _____ C:\Windows\system32\FNTCACHE.DAT 2021-05-30 16:27 - 2019-12-07 11:03 - 000786432 _____ C:\Windows\system32\config\BBI 2021-05-30 16:26 - 2021-01-05 10:30 - 000000000 ____D C:\Users\theos 2021-05-30 16:26 - 2019-12-07 17:17 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection 2021-05-30 16:26 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\PrintDialog 2021-05-30 16:26 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\lv-LV 2021-05-30 16:26 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\et-EE 2021-05-30 16:26 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\Dism 2021-05-30 16:26 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SystemResources 2021-05-30 16:26 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\oobe 2021-05-30 16:26 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\lv-LV 2021-05-30 16:26 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\et-EE 2021-05-30 16:26 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\Dism 2021-05-30 16:26 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\PolicyDefinitions 2021-05-30 16:26 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\bcastdvr 2021-05-30 16:26 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\CbsTemp 2021-05-30 14:31 - 2021-02-02 10:08 - 000000000 ____D C:\Users\theos\.VirtualBox 2021-05-30 14:26 - 2021-02-02 10:08 - 000000000 ____D C:\ProgramData\VirtualBox 2021-05-29 07:29 - 2021-04-03 11:04 - 000002408 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk 2021-05-27 14:54 - 2021-01-16 14:49 - 000002226 _____ C:\ProgramData\Bureaublad\Google Chrome.lnk 2021-05-27 14:54 - 2021-01-10 12:08 - 000002267 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2021-05-27 07:37 - 2021-01-12 15:27 - 000000000 ____D C:\Program Files (x86)\Dropbox 2021-05-23 09:29 - 2020-11-19 01:45 - 000000000 ____D C:\Windows\system32\Drivers\wd 2021-05-21 08:35 - 2021-01-19 14:57 - 000000000 ____D C:\Users\theos\AppData\Local\CrashDumps 2021-05-12 14:52 - 2021-01-16 14:30 - 000000916 _____ C:\ProgramData\Bureaublad\VLC media player.lnk 2021-05-12 11:46 - 2021-01-11 10:36 - 000000000 ____D C:\Windows\system32\MRT 2021-05-12 11:43 - 2021-01-11 10:36 - 132732536 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe 2021-05-11 14:47 - 2021-01-18 10:43 - 000002096 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2021-05-08 16:32 - 2021-01-12 15:27 - 000001044 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job 2021-05-08 16:32 - 2021-01-12 15:27 - 000001040 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job 2021-05-08 16:32 - 2021-01-05 10:37 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2021-05-08 10:07 - 2019-12-07 11:14 - 000000000 ___HD C:\Windows\ELAMBKUP 2021-05-08 10:06 - 2021-01-13 14:30 - 000000000 ____D C:\ProgramData\Malwarebytes 2021-05-07 10:03 - 2021-01-05 10:37 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2021-05-05 07:17 - 2021-01-12 15:27 - 000004104 _____ C:\Windows\system32\Tasks\DropboxUpdateTaskMachineUA 2021-05-05 07:17 - 2021-01-12 15:27 - 000003872 _____ C:\Windows\system32\Tasks\DropboxUpdateTaskMachineCore ==================== Bestanden in de root van sommige mappen ======== 2021-01-16 10:56 - 2021-05-31 10:11 - 000078336 _____ () C:\Users\theos\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini ==================== SigCheck ============================ (Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.) ==================== Einde van FRST.txt ========================