Fix resultaat van Farbar Recovery Scan Tool (x64) Versie: 05-02-2022 Gestart door declercq (05-02-2022 15:06:04) Run:2 Gestart vanaf C:\Users\declercq\OneDrive\Bureaublad Geladen Profielen: declercq Boot Modus: Normal ============================================== fixlist inhoud: ***************** CloseProcesses: HKLM\...\Run: [SimplePass] => C:\Program Files\Hewlett-Packard\SimplePass\HPSmplPass.exe /hideui (Geen bestand) HKLM\...\Run: [OPBHOBroker] => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBroker.exe (Geen bestand) HKLM\...\Run: [OPBHOBrokerDesktop] => C:\Program Files\Hewlett-Packard\SimplePass\OPBHOBrokerDsktop.exe (Geen bestand) S2 Cachedrv server; "C:\Program Files\Hewlett-Packard\SimplePass\cachesrvr.exe" [X] S2 omniserv; C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe [X] S3 ObDrvMonPCRSrv; C:\Program Files (x86)\Outbyte\PC Repair\DrvMonX64.sys [186544 2021-06-30] (Outbyte Computing Pty Ltd -> Outbyte) 2022-01-27 16:27 - 2022-01-27 16:27 - 000000000 ____D C:\WINDOWS\system32\Tasks\Outbyte 2022-01-27 16:27 - 2022-01-27 16:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outbyte 2022-01-27 16:26 - 2022-01-27 16:26 - 000000000 ____D C:\ProgramData\Outbyte AV: Norton Security Online (Enabled - Up to date) {1122B19A-E671-38EC-8EAC-87048FD4528D} AV: Norton Security Online (Enabled - Up to date) {A2708B76-6835-6565-CB96-694212954A75} AV: Norton Security Online (Enabled - Up to date) {E3FDBD9F-8140-1400-F32B-8B58923F7C4D} AV: Norton Security Online (Enabled - Up to date) {9E3FD331-C4C2-7AC4-0537-131EEF1B1F8A} FW: Norton Security Online (Enabled) {9A4B0A53-225A-643D-E0C9-C077EC460D0E} FW: Norton Security Online (Enabled) {A6045214-8EAD-7B9C-2E68-BA2B11C858F1} FW: Norton Security Online (Enabled) {291930BF-AC1E-39B4-A5F3-2E31710715F6} FW: Norton Security Online (Enabled) {DBC63CBA-CB2F-1558-D874-226D6CEC3B36} ShortcutWithArgument: C:\Users\declercq\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.InternetExplorer.Default\-11824848430.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> -contentTile -formatVersion 0x00000003 -pinnedTimeLow 0x658099d3 -pinnedTimeHigh 0x01cfcd31 -securityFlags 0x00000000 -tileType 0x00000000 -url 0x0000001b hxxp://www.test-aankoop.be/ ShortcutWithArgument: C:\Users\declercq\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.InternetExplorer.Default\-16162627080.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> -contentTile -formatVersion 0x00000003 -pinnedTimeLow 0x63b6318c -pinnedTimeHigh 0x01cf9c6f -securityFlags 0x00000000 -tileType 0x00000004 -url 0x00000028 hxxp://www.azstvdeinze.be/homepage.aspx? ShortcutWithArgument: C:\Users\declercq\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.InternetExplorer.Default\-16628279520.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> -contentTile -formatVersion 0x00000003 -pinnedTimeLow 0xdade1019 -pinnedTimeHigh 0x01cf9c6d -securityFlags 0x00000000 -tileType 0x00000004 -url 0x00000021 hxxp://www.politiedeinzezulte.be/ ShortcutWithArgument: C:\Users\declercq\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.InternetExplorer.Default\-17113156970.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> -contentTile -formatVersion 0x00000003 -pinnedTimeLow 0x21b5de61 -pinnedTimeHigh 0x01cfbfd7 -securityFlags 0x00000000 -tileType 0x00000001 -url 0x00000032 hxxp://seniorennet.be/Magazine/rubriek/sennet-life ShortcutWithArgument: C:\Users\declercq\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.InternetExplorer.Default\-20577641640.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> -contentTile -formatVersion 0x00000003 -pinnedTimeLow 0x85e3466d -pinnedTimeHigh 0x01cf9f92 -securityFlags 0x00000000 -tileType 0x00000004 -url 0x00000026 hxxp://www.belgianrail.be/nl/Home.aspx ShortcutWithArgument: C:\Users\declercq\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.InternetExplorer.Default\-21216354960.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> -contentTile -formatVersion 0x00000003 -pinnedTimeLow 0x1a9f3b73 -pinnedTimeHigh 0x01cf9ba6 -securityFlags 0x00000000 -tileType 0x00000000 -url 0x00000029 hxxp://www.octaplus.be/nl/vraag-antwoord/ ShortcutWithArgument: C:\Users\declercq\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.InternetExplorer.Default\-3939477320.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> -contentTile -formatVersion 0x00000003 -pinnedTimeLow 0x3707d67a -pinnedTimeHigh 0x01cfced2 -securityFlags 0x00000000 -tileType 0x00000004 -url 0x00000021 hxxp://www.skynet.be/nieuws-sport ShortcutWithArgument: C:\Users\declercq\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.InternetExplorer.Default\-8602389470.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> -contentTile -formatVersion 0x00000003 -pinnedTimeLow 0x92c82dff -pinnedTimeHigh 0x01cfdfa5 -securityFlags 0x00000000 -tileType 0x00000004 -url 0x0000001c hxxp://kfcmerelbekejeugd.be/ ShortcutWithArgument: C:\Users\declercq\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.InternetExplorer.Default\-886676790.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> -contentTile -formatVersion 0x00000003 -pinnedTimeLow 0x5999312d -pinnedTimeHigh 0x01cfdaee -securityFlags 0x00000000 -tileType 0x00000004 -url 0x0000001e hxxp://www.delijn.be/index.htm ShortcutWithArgument: C:\Users\declercq\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.InternetExplorer.Default\-9513911450.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> -contentTile -formatVersion 0x00000003 -pinnedTimeLow 0x0c58936a -pinnedTimeHigh 0x01cfa12f -securityFlags 0x00000000 -tileType 0x00000003 -url 0x00000014 hxxp://www.bing.com/ ShortcutWithArgument: C:\Users\declercq\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.InternetExplorer.Default\11962643900.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> -contentTile -formatVersion 0x00000003 -pinnedTimeLow 0xe3474622 -pinnedTimeHigh 0x01cf9c7f -securityFlags 0x00000000 -tileType 0x00000004 -url 0x00000019 hxxp://www.buienradar.be/ ShortcutWithArgument: C:\Users\declercq\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.InternetExplorer.Default\1360327450.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> -contentTile -formatVersion 0x00000003 -pinnedTimeLow 0x2d38c064 -pinnedTimeHigh 0x01cf9c6f -securityFlags 0x00000000 -tileType 0x00000000 -url 0x00000032 hxxp://www.deinze.be/fb111symd935bxib1bxib213.aspx ShortcutWithArgument: C:\Users\declercq\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.InternetExplorer.Default\15054717210.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> -contentTile -formatVersion 0x00000003 -pinnedTimeLow 0x0d605142 -pinnedTimeHigh 0x01cf98ed -securityFlags 0x00000000 -tileType 0x00000004 -url 0x00000032 hxxps://www.beobank.be/nl/BeobankOnline/Login.aspx ShortcutWithArgument: C:\Users\declercq\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.InternetExplorer.Default\19401889920.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> -contentTile -formatVersion 0x00000003 -pinnedTimeLow 0xf463c32b -pinnedTimeHigh 0x01cf98ed -securityFlags 0x00000000 -tileType 0x00000001 -url 0x00000031 hxxps://www.bnpparibasfortis.be/private/Start.asp ShortcutWithArgument: C:\Users\declercq\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.InternetExplorer.Default\2934525400.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> -contentTile -formatVersion 0x00000003 -pinnedTimeLow 0x14374cd1 -pinnedTimeHigh 0x01cfb8a0 -securityFlags 0x00000000 -tileType 0x00000004 -url 0x00000017 hxxp://www.noodweer.be/ ShortcutWithArgument: C:\Users\declercq\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.InternetExplorer.Default\4902269340.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> -contentTile -formatVersion 0x00000003 -pinnedTimeLow 0x6a0934e4 -pinnedTimeHigh 0x01cfbb13 -securityFlags 0x00000000 -tileType 0x00000001 -url 0x00000015 hxxp://www.radio2.be/ ShortcutWithArgument: C:\Users\declercq\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_pjkljhegncpnkpknbcohdijeoejaedia\Gmail.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=pjkljhegncpnkpknbcohdijeoejaedia ShortcutWithArgument: C:\Users\declercq\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_npfkoakaabdallkcdbpkkhfilkkngakh\Deezer.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=npfkoakaabdallkcdbpkkhfilkkngakh ShortcutWithArgument: C:\Users\declercq\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_mgndgikekgjfcpckkfioiadnlibdjbkf\Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=mgndgikekgjfcpckkfioiadnlibdjbkf ShortcutWithArgument: C:\Users\declercq\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_lladnkjpkgllkjcnajoldahfjjoggjjh\http___www.hln.be_.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=lladnkjpkgllkjcnajoldahfjjoggjjh ShortcutWithArgument: C:\Users\declercq\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_apdfllckaahabafndbhieahigkjlhalf\Google Drive.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=apdfllckaahabafndbhieahigkjlhalf ShortcutWithArgument: C:\Users\declercq\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_aohghmighlieiainnegkcijnfilokake\Documenten.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=aohghmighlieiainnegkcijnfilokake ShortcutWithArgument: C:\Users\declercq\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_aapocclcgogkmnckokdopfmhonfmgoek\Presentaties.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=aapocclcgogkmnckokdopfmhonfmgoek ShortcutWithArgument: C:\Users\declercq\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fotocadeau nl.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) -> --profile-directory=Default --app-id=fncimkllpojcnggffipbpbkeijcdaifm ShortcutWithArgument: C:\Users\declercq\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\https___deinze.parkindigo.be_Account_Login_ReturnUrl=%2FDeinze%2FEid%2FStartEid%3FResponseAction%3DValidateEidNew.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) -> --profile-directory=Default --app-id=cfeahbjpjbinnhakkkfdmcfpdkppeemh CMD: winmgmt /resetrepository Reboot: ***************** Proces succesvol afgesloten. "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SimplePass" => is succesvol verwijderd "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\OPBHOBroker" => is succesvol verwijderd "HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\OPBHOBrokerDesktop" => is succesvol verwijderd HKLM\System\CurrentControlSet\Services\Cachedrv server => is succesvol verwijderd Cachedrv server => service is succesvol verwijderd HKLM\System\CurrentControlSet\Services\omniserv => is succesvol verwijderd omniserv => service is succesvol verwijderd HKLM\System\CurrentControlSet\Services\ObDrvMonPCRSrv => is succesvol verwijderd ObDrvMonPCRSrv => service is succesvol verwijderd "C:\WINDOWS\system32\Tasks\Outbyte" map verplaatsing: Kon niet verplaatsen "C:\WINDOWS\system32\Tasks\Outbyte" => Gepland om te verplaatsen bij herstart. "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outbyte" map verplaatsing: Kon niet verplaatsen "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outbyte" => Gepland om te verplaatsen bij herstart. C:\ProgramData\Outbyte => is succesvol verplaatst "AV: Norton Security Online (Enabled - Up to date) {1122B19A-E671-38EC-8EAC-87048FD4528D}" => is succesvol verwijderd "AV: Norton Security Online (Enabled - Up to date) {A2708B76-6835-6565-CB96-694212954A75}" => is succesvol verwijderd "AV: Norton Security Online (Enabled - Up to date) {E3FDBD9F-8140-1400-F32B-8B58923F7C4D}" => is succesvol verwijderd "AV: Norton Security Online (Enabled - Up to date) {9E3FD331-C4C2-7AC4-0537-131EEF1B1F8A}" => is succesvol verwijderd "FW: Norton Security Online (Enabled) {9A4B0A53-225A-643D-E0C9-C077EC460D0E}" => is succesvol verwijderd "FW: Norton Security Online (Enabled) {A6045214-8EAD-7B9C-2E68-BA2B11C858F1}" => is succesvol verwijderd "FW: Norton Security Online (Enabled) {291930BF-AC1E-39B4-A5F3-2E31710715F6}" => is succesvol verwijderd "FW: Norton Security Online (Enabled) {DBC63CBA-CB2F-1558-D874-226D6CEC3B36}" => is succesvol verwijderd C:\Users\declercq\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.InternetExplorer.Default\-11824848430.lnk => snelkoppeling argument is succesvol verwijderd C:\Users\declercq\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.InternetExplorer.Default\-16162627080.lnk => snelkoppeling argument is succesvol verwijderd C:\Users\declercq\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.InternetExplorer.Default\-16628279520.lnk => snelkoppeling argument is succesvol verwijderd C:\Users\declercq\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.InternetExplorer.Default\-17113156970.lnk => snelkoppeling argument is succesvol verwijderd C:\Users\declercq\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.InternetExplorer.Default\-20577641640.lnk => snelkoppeling argument is succesvol verwijderd C:\Users\declercq\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.InternetExplorer.Default\-21216354960.lnk => snelkoppeling argument is succesvol verwijderd C:\Users\declercq\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.InternetExplorer.Default\-3939477320.lnk => snelkoppeling argument is succesvol verwijderd C:\Users\declercq\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.InternetExplorer.Default\-8602389470.lnk => snelkoppeling argument is succesvol verwijderd C:\Users\declercq\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.InternetExplorer.Default\-886676790.lnk => snelkoppeling argument is succesvol verwijderd C:\Users\declercq\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.InternetExplorer.Default\-9513911450.lnk => snelkoppeling argument is succesvol verwijderd C:\Users\declercq\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.InternetExplorer.Default\11962643900.lnk => snelkoppeling argument is succesvol verwijderd C:\Users\declercq\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.InternetExplorer.Default\1360327450.lnk => snelkoppeling argument is succesvol verwijderd C:\Users\declercq\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.InternetExplorer.Default\15054717210.lnk => snelkoppeling argument is succesvol verwijderd C:\Users\declercq\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.InternetExplorer.Default\19401889920.lnk => snelkoppeling argument is succesvol verwijderd C:\Users\declercq\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.InternetExplorer.Default\2934525400.lnk => snelkoppeling argument is succesvol verwijderd C:\Users\declercq\AppData\Local\Microsoft\Windows\Application Shortcuts\Microsoft.InternetExplorer.Default\4902269340.lnk => snelkoppeling argument is succesvol verwijderd C:\Users\declercq\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_pjkljhegncpnkpknbcohdijeoejaedia\Gmail.lnk => snelkoppeling argument is succesvol verwijderd C:\Users\declercq\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_npfkoakaabdallkcdbpkkhfilkkngakh\Deezer.lnk => snelkoppeling argument is succesvol verwijderd C:\Users\declercq\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_mgndgikekgjfcpckkfioiadnlibdjbkf\Chrome.lnk => snelkoppeling argument is succesvol verwijderd C:\Users\declercq\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_lladnkjpkgllkjcnajoldahfjjoggjjh\http___www.hln.be_.lnk => snelkoppeling argument is succesvol verwijderd C:\Users\declercq\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_apdfllckaahabafndbhieahigkjlhalf\Google Drive.lnk => snelkoppeling argument is succesvol verwijderd C:\Users\declercq\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_aohghmighlieiainnegkcijnfilokake\Documenten.lnk => snelkoppeling argument is succesvol verwijderd C:\Users\declercq\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_aapocclcgogkmnckokdopfmhonfmgoek\Presentaties.lnk => snelkoppeling argument is succesvol verwijderd C:\Users\declercq\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fotocadeau nl.lnk => snelkoppeling argument is succesvol verwijderd C:\Users\declercq\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\https___deinze.parkindigo.be_Account_Login_ReturnUrl=%2FDeinze%2FEid%2FStartEid%3FResponseAction%3DValidateEidNew.lnk => snelkoppeling argument is succesvol verwijderd ========= winmgmt /resetrepository ========= WMI repository reset failed Error code: 0x80070005 Facility: Win32 Description: Toegang geweigerd. ========= Einde van CMD: ========= Resultaat van geplande bestanden te verplaatsen (Boot Modus: Normal) (Datum&Tijd: 05-02-2022 15:09:42) C:\WINDOWS\system32\Tasks\Outbyte => Kon niet verplaatsen C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outbyte => is succesvol verplaatst ==== Einde van Fixlog 15:09:48 ====