Fix resultaat van Farbar Recovery Scan Tool (x64) Versie: 14-07-2022 Gestart door Leo (18-07-2022 17:27:21) Run:1 Gestart vanaf C:\Users\Leo\Desktop Geladen Profielen: Leo Boot Modus: Normal ============================================== fixlist inhoud: ***************** Start:: CreateRestorePoint: CloseProcesses: AlternateDataStreams: C:\Users\Leo\AppData\Local\Temp:com.affinity.photo.2 [240] AlternateDataStreams: C:\Users\Leo\AppData\Local\Temp:com.affinity.photo.3 [197] BHO: IEToEdge BHO -> {1FD49718-1D00-4B19-AF5F-070AF6D5D54C} -> Geen bestand BHO-x32: IEToEdge BHO -> {1FD49718-1D00-4B19-AF5F-070AF6D5D54C} -> Geen bestand FirewallRules: [{635B0665-12AE-4F4D-8364-0E3D8E047684}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\102.0.1245.44\msedgewebview2.exe => Geen bestand FirewallRules: [{7DB01FED-89E4-48E3-89FA-0485F298FD84}] => (Allow) C:\Program Files\ON1\ON1 Photo RAW 2022\ON1 Photo RAW 2022.exe => Geen bestand FirewallRules: [{99D06530-5699-4C56-8FFF-44A51807D42F}] => (Allow) C:\Program Files\ON1\ON1 Photo RAW 2022\ON1 Photo RAW 2022.exe => Geen bestand FirewallRules: [{1E29D760-F03F-42A6-B7B9-C7E70B66A387}] => (Allow) C:\Program Files\ON1\ON1 Photo RAW 2022\on1capture.exe => Geen bestand FirewallRules: [{6CF0D5E9-8FB6-455E-8986-D899F91E2F97}] => (Allow) C:\Program Files\ON1\ON1 Photo RAW 2022\on1capture.exe => Geen bestand FirewallRules: [{EB1720BB-EA74-4FCE-8FB8-710939EFED90}] => (Allow) C:\Program Files\ON1\ON1 Photo RAW 2022\on1sandbox.exe => Geen bestand FirewallRules: [{69EF9134-65A7-45A6-BD4D-BAB002DEECDF}] => (Allow) C:\Program Files\ON1\ON1 Photo RAW 2022\on1sandbox.exe => Geen bestand FirewallRules: [{95D23B53-112C-449C-8A4C-9808BE191744}] => (Allow) C:\Program Files\ON1\ON1 Photo RAW 2022\ON1 Photoshop Emulator.exe => Geen bestand FirewallRules: [{E25403F8-244C-4B32-9F76-0D4077163434}] => (Allow) C:\Program Files\ON1\ON1 Photo RAW 2022\ON1 Photoshop Emulator.exe => Geen bestand HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restrictie <==== AANDACHT HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restrictie <==== AANDACHT Task: {641F0F67-ADC2-4E72-86B6-B502D7B0BC38} - System32\Tasks\MicrosoftEdgeUpdateTaskMachineUA => C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe /ua /installsource scheduler (Geen bestand) Task: {B617031F-EEA5-4F93-81CE-17FC55A06D72} - System32\Tasks\MicrosoftEdgeUpdateTaskMachineCore => C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe /c (Geen bestand) FF HKLM\...\Firefox\Extensions: [light_plugin_7571494CE0B94E11BB762B659A4AD71F@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 21.3\FFExt\light_plugin_firefox\addon.xpi => niet gevonden FF HKLM-x32\...\Firefox\Extensions: [light_plugin_7571494CE0B94E11BB762B659A4AD71F@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 21.3\FFExt\light_plugin_firefox\addon.xpi => niet gevonden FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\kl_prefs_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.js [2022-02-24] <==== AANDACHT (Gericht op * .cfg bestand) FF ExtraCheck: C:\Program Files\mozilla firefox\kl_config_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.cfg [2022-02-24] <==== AANDACHT S2 edgeupdate; "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc [X] S3 edgeupdatem; "C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /medsvc [X] S3 MicrosoftEdgeElevationService; "C:\Program Files (x86)\Microsoft\Edge\Application\102.0.1245.44\elevation_service.exe" [X] S3 AscFileFilter; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscFileFilter.sys [X] S3 AscRegistryFilter; \??\C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscRegistryFilter.sys [X] S3 cpuz150; \??\C:\Windows\temp\cpuz150\cpuz150_x64.sys [X] S2 PDIHWCTL; \??\C:\Windows\system32\drivers\pdihwctl.sys [X] C:\Program Files (x86)\IObit EmptyTemp: Reboot: End:: ***************** Herstelpunt is succesvol gemaakt. Proces succesvol afgesloten. C:\Users\Leo\AppData\Local\Temp => ":com.affinity.photo.2" ADS is succesvol verwijderd C:\Users\Leo\AppData\Local\Temp => ":com.affinity.photo.3" ADS is succesvol verwijderd HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C} => is succesvol verwijderd HKLM\Software\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C} => is succesvol verwijderd HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C} => is succesvol verwijderd HKLM\Software\Wow6432Node\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C} => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{635B0665-12AE-4F4D-8364-0E3D8E047684}" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{7DB01FED-89E4-48E3-89FA-0485F298FD84}" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{99D06530-5699-4C56-8FFF-44A51807D42F}" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{1E29D760-F03F-42A6-B7B9-C7E70B66A387}" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{6CF0D5E9-8FB6-455E-8986-D899F91E2F97}" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{EB1720BB-EA74-4FCE-8FB8-710939EFED90}" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{69EF9134-65A7-45A6-BD4D-BAB002DEECDF}" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{95D23B53-112C-449C-8A4C-9808BE191744}" => is succesvol verwijderd "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E25403F8-244C-4B32-9F76-0D4077163434}" => is succesvol verwijderd HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiSpyware"="0" => waarde met succes hersteld HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiVirus"="0" => waarde met succes hersteld "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{641F0F67-ADC2-4E72-86B6-B502D7B0BC38}" => is succesvol verwijderd "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{641F0F67-ADC2-4E72-86B6-B502D7B0BC38}" => is succesvol verwijderd C:\Windows\System32\Tasks\MicrosoftEdgeUpdateTaskMachineUA => is succesvol verplaatst "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\MicrosoftEdgeUpdateTaskMachineUA" => is succesvol verwijderd "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{B617031F-EEA5-4F93-81CE-17FC55A06D72}" => is succesvol verwijderd "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B617031F-EEA5-4F93-81CE-17FC55A06D72}" => is succesvol verwijderd C:\Windows\System32\Tasks\MicrosoftEdgeUpdateTaskMachineCore => is succesvol verplaatst "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\MicrosoftEdgeUpdateTaskMachineCore" => is succesvol verwijderd "HKLM\Software\Mozilla\Firefox\Extensions\\light_plugin_7571494CE0B94E11BB762B659A4AD71F@kaspersky.com" => is succesvol verwijderd "HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\light_plugin_7571494CE0B94E11BB762B659A4AD71F@kaspersky.com" => is succesvol verwijderd C:\Program Files\mozilla firefox\defaults\pref\kl_prefs_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.js => is succesvol verplaatst C:\Program Files\mozilla firefox\kl_config_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.cfg => is succesvol verplaatst HKLM\System\CurrentControlSet\Services\edgeupdate => is succesvol verwijderd edgeupdate => service is succesvol verwijderd HKLM\System\CurrentControlSet\Services\edgeupdatem => is succesvol verwijderd edgeupdatem => service is succesvol verwijderd HKLM\System\CurrentControlSet\Services\MicrosoftEdgeElevationService => is succesvol verwijderd MicrosoftEdgeElevationService => service is succesvol verwijderd HKLM\System\CurrentControlSet\Services\AscFileFilter => is succesvol verwijderd AscFileFilter => service is succesvol verwijderd HKLM\System\CurrentControlSet\Services\AscRegistryFilter => is succesvol verwijderd AscRegistryFilter => service is succesvol verwijderd HKLM\System\CurrentControlSet\Services\cpuz150 => is succesvol verwijderd cpuz150 => service is succesvol verwijderd HKLM\System\CurrentControlSet\Services\PDIHWCTL => is succesvol verwijderd PDIHWCTL => service is succesvol verwijderd "C:\Program Files (x86)\IObit" => niet gevonden =========== EmptyTemp: ========== BITS transfer queue => 0 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 14724416 B Java, Discord, Steam htmlcache => 0 B Windows/system/drivers => 10303467 B Edge => 0 B Chrome => 295957 B Firefox => 72439691 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 0 B ProgramData => 0 B Public => 0 B systemprofile => 0 B systemprofile32 => 0 B LocalService => 7094 B NetworkService => 10160 B Leo => 27465489 B RecycleBin => 29900328 B EmptyTemp: => 148 MB tijdelijke gegevens verwijderd. ================================ Het systeem moest herstart worden. ==== Einde van Fixlog 17:27:32 ====