Scanresultaten van Farbar Recovery Scan Tool (FRST) (x64) Versie: 22.01.2024 Gestart door theos (Beheerder) op DESKTOP-CDE5RUK (Dell Inc. OptiPlex 390) (23-01-2024 10:28:24) Gestart vanaf C:\Users\theos\OneDrive\Bureaublad\FRST64.exe Geladen Profielen: theos Platform: Microsoft Windows 10 Pro Versie 22H2 19045.3930 (X64) Taal: Nederlands (Nederland) Standaardbrowser: FF Boot Modus: Normal ==================== Processen (gefilterd) ================= (Als een item is opgenomen in de fixlist, zal het proces worden gesloten. Het bestand zal niet worden verplaatst.) (atiesrxx.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe (C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\1.3.817.1\DropboxCrashHandler.exe (C:\Program Files (x86)\hicloud\update_server\startUp.exe ->) (EZVIZ Inc. -> ) C:\Program Files (x86)\hicloud\update_server\SPUpDateServer.exe (C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe ->) (Logitech, Inc. -> ) C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe (C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe <7> (explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <5> (explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\Office16\OUTLOOK.EXE (explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\Office16\WINWORD.EXE (explorer.exe ->) (Skype Software Sarl -> Skype Technologies S.A.) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.110.3218.0_x64__kzf8qxf38zg5c\Skype\Skype.exe <5> (explorer.exe ->) (杭州萤石软件有限公司 -> EZVIZ Inc.) C:\Program Files (x86)\Ezviz Studio\EzvizStudio.exe (EZVIZ Inc. -> ) C:\Program Files (x86)\hicloud\update_server\startUp.exe (Logitech, Inc. -> Logitech Inc.) C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <18> (services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (services.exe ->) (CyberLink -> ) C:\Program Files\CyberLink\Shared files\RichVideo64.exe (services.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe (services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\AppHelperCap.exe (services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\DiagsCap.exe (services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\NetworkCap.exe (services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\SysInfoCap.exe (services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe (services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MsMpEng.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\NisSrv.exe (services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (svchost.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe (svchost.exe ->) (Microsoft Corporation -> Microsoft) C:\Program Files\WindowsApps\Microsoft.ZuneMusic_11.2310.8.0_x64__8wekyb3d8bbwe\Microsoft.Media.Player.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe ==================== Register (gefilterd) =================== (Als een item is opgenomen in de fixlist, zal het registeritem worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.) HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [11551456 2024-01-08] (Dropbox, Inc -> Dropbox, Inc.) HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech, Inc. -> Logitech Inc.) HKLM-x32\...\Run: [SPUpDateServerrun] => C:\Program Files (x86)\hicloud\update_server\startUp.exe [14832 2015-09-10] (EZVIZ Inc. -> ) HKU\S-1-5-21-1308386178-264101679-3570317249-1001\...\Run: [MicrosoftEdgeAutoLaunch_52AFAC4A5418D174EAD92F9C07E4E7F1] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3854376 2024-01-17] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> HKLM\...\Windows x64\Print Processors\Canon MG5700 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDCS.DLL [30208 2015-03-15] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\...\Print\Monitors\Canon BJ Language Monitor MG5700 series: C:\Windows\system32\CNMLMCS.DLL [406528 2015-03-15] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\120.0.6099.225\Installer\chrmstp.exe [2024-01-19] (Google LLC -> Google LLC) ==================== Geplande Taken (gefilterd) ================= (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) Task: {234A299E-A739-4D9F-AA89-969AE5CABF7F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1566200 2023-09-21] (Adobe Inc. -> Adobe Inc.) Task: {D9D8D895-A5CA-41FE-B7F1-5764ABBBF2A1} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-13] (Dropbox, Inc -> Dropbox, Inc.) Task: {8734C930-CBEF-4DAB-9640-04E453F81645} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-13] (Dropbox, Inc -> Dropbox, Inc.) Task: {23018E91-20E2-4E58-811A-5D81B6F7FD17} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem122.0.6253.0{F130433F-169F-47E5-8306-939D06C11535} => C:\Program Files (x86)\Google\GoogleUpdater\122.0.6253.0\updater.exe [4652320 2024-01-17] (Google LLC -> Google LLC) <==== AANDACHT Task: {12FD40F1-D2B5-443D-ADE6-CA9CDFF47C2E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [138328 2024-01-04] (HP Inc. -> HP Inc.) Task: {3AAB9FAC-4205-4C68-9295-3B96759D14C5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPPrinterLowInk => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPPrinterLowInk\HPPrinterLowInk.exe [231472 2024-01-04] (HP Inc. -> HP Inc.) Task: {AD245D7D-84D0-4FAF-BAFA-15C912929556} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1161264 2024-01-04] (HP Inc. -> HP Inc.) Task: {994D313E-E65A-4D57-B74B-46A8651F91AD} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_TH2AE5P08V => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1161264 2024-01-04] (HP Inc. -> HP Inc.) Task: {6F06D29E-CE99-4271-8205-89332652EA0C} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [1907712 2022-03-16] () [Bestand niet getekend] Task: {463A8305-5B78-4BEC-A13F-FAEF795DE05B} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe [316632 2015-07-31] (Microsoft Corporation -> Microsoft Corporation) Task: {23AC3B1F-7B68-4492-8877-C4FCBA815209} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [416432 2015-07-31] (Microsoft Corporation -> Microsoft Corporation) Task: {83602EB6-CE7B-4AEC-996F-66193DC15E1B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [416432 2015-07-31] (Microsoft Corporation -> Microsoft Corporation) Task: {B532A30E-1A6E-4B38-9A5F-2AADC1017BBF} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-08] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {957AC8C4-D70C-4543-97A3-1D1326BDD9A7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-08] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {B7EC9B64-0FAD-4BE9-895A-4C1C8C77D88E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-08] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {84B364A1-ADC7-4AD7-B35D-30935769D438} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-08] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {987D82C9-2FF3-4B46-B38F-867FF914982D} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [674720 2024-01-11] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate Task: {25B080A7-053E-4337-97BE-37C0BF5B0C3A} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [35232 2024-01-11] (Mozilla Corporation -> Mozilla Foundation) Task: {73B09430-B07D-4C47-B702-3AA82E53B156} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1308386178-264101679-3570317249-500 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe (Geen bestand) (Als een item is opgenomen in de fixlist, wordt de taak (job) bestand verplaatst. Het bestand dat wordt uitgevoerd door de taak zal niet worden verplaatst.) Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe ==================== Internet (gefilterd) ==================== (Als een item is opgenomen in de fixlist en een registeritem is, wordt het verwijderd of hersteld naar de standaard.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{01d52ce3-f654-4807-919b-fc7379500629}: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{01d52ce3-f654-4807-919b-fc7379500629}: [DhcpDomain] lan Edge: ======= Edge DefaultProfile: Default Edge Profile: C:\Users\theos\AppData\Local\Microsoft\Edge\User Data\Default [2024-01-23] Edge Extension: (Offline Documenten) - C:\Users\theos\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-01-23] Edge Extension: (Malwarebytes Browser Guard) - C:\Users\theos\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2024-01-18] Edge Extension: (Edge relevant text changes) - C:\Users\theos\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-09-14] Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee] FireFox: ======== FF DefaultProfile: t61l4l6g.default FF ProfilePath: C:\Users\theos\AppData\Roaming\Mozilla\Firefox\Profiles\t61l4l6g.default [2022-01-25] FF ProfilePath: C:\Users\theos\AppData\Roaming\Mozilla\Firefox\Profiles\azoj2efr.default-release-1620482901333 [2024-01-23] FF DownloadDir: C:\Users\theos\Downloads FF Homepage: Mozilla\Firefox\Profiles\azoj2efr.default-release-1620482901333 -> hxxps://www.facebook.com/ FF Notifications: Mozilla\Firefox\Profiles\azoj2efr.default-release-1620482901333 -> hxxps://www.instagram.com; hxxps://colourise.com; hxxps://nl.findhealthinfonow.com FF Extension: (Emsisoft Browser Security) - C:\Users\theos\AppData\Roaming\Mozilla\Firefox\Profiles\azoj2efr.default-release-1620482901333\Extensions\{b21882eb-3211-44dc-964b-e6f35b33061f}.xpi [2023-08-17] FF Extension: (Adblock Plus - gratis adblocker) - C:\Users\theos\AppData\Roaming\Mozilla\Firefox\Profiles\azoj2efr.default-release-1620482901333\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2024-01-18] FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN) FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN) FF Plugin: @videolan.org/vlc,version=3.0.12 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN) FF Plugin: @videolan.org/vlc,version=3.0.14 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN) FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN) FF Plugin: @videolan.org/vlc,version=3.0.18 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN) FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2024-01-13] (Adobe Inc. -> Adobe Systems Inc.) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2020-03-17] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation) Chrome: ======= CHR Profile: C:\Users\theos\AppData\Local\Google\Chrome\User Data\Default [2024-01-23] CHR Extension: (Betalingen via Chrome Web Store) - C:\Users\theos\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-31] Opera: ======= OPR Profile: C:\Users\theos\AppData\Roaming\Opera Software\Opera Stable [2022-01-25] ==================== Services (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [173040 2023-09-21] (Adobe Inc. -> Adobe Inc.) S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-13] (Dropbox, Inc -> Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-13] (Dropbox, Inc -> Dropbox, Inc.) R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [46824 2024-01-08] (Dropbox, Inc -> Dropbox, Inc.) S2 GoogleUpdaterInternalService122.0.6253.0; C:\Program Files (x86)\Google\GoogleUpdater\122.0.6253.0\updater.exe [4652320 2024-01-17] (Google LLC -> Google LLC) <==== AANDACHT S2 GoogleUpdaterService122.0.6253.0; C:\Program Files (x86)\Google\GoogleUpdater\122.0.6253.0\updater.exe [4652320 2024-01-17] (Google LLC -> Google LLC) <==== AANDACHT R2 HPAppHelperCap; C:\Program Files\HP\HP Enabling Services\AppHelperCap.exe [888880 2024-01-04] (HP Inc. -> HP Inc.) R2 HPDiagsCap; C:\Program Files\HP\HP Enabling Services\DiagsCap.exe [887848 2024-01-04] (HP Inc. -> HP Inc.) R2 HPNetworkCap; C:\Program Files\HP\HP Enabling Services\NetworkCap.exe [884784 2024-01-04] (HP Inc. -> HP Inc.) R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [230360 2024-01-18] (HP Inc. -> HP Inc.) R2 HPSysInfoCap; C:\Program Files\HP\HP Enabling Services\SysInfoCap.exe [886832 2024-01-04] (HP Inc. -> HP Inc.) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9405400 2024-01-08] (Malwarebytes Inc. -> Malwarebytes) R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [386344 2010-08-19] (CyberLink -> ) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [534472 2023-12-02] (Microsoft Windows Publisher -> Microsoft Corporation) R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [12757520 2020-12-14] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) S3 VBoxSDS; C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe [805224 2023-01-11] (Oracle Corporation -> Oracle and/or its affiliates) R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\NisSrv.exe [3174840 2023-12-08] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MsMpEng.exe [133592 2023-12-08] (Microsoft Windows Publisher -> Microsoft Corporation) ===================== Drivers (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Bestand niet getekend] S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Bestand niet getekend] R3 MarvinBus; C:\Windows\System32\drivers\MarvinBus64.sys [261120 2005-09-23] (Microsoft Windows Hardware Compatibility Publisher -> Pinnacle Systems GmbH) R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [222784 2024-01-18] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes) S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [21480 2022-04-26] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes) R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [239576 2023-12-24] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes) R2 NPF; C:\Program Files (x86)\Ezviz Studio\npf64.sys [36600 2022-09-03] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.) R3 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [254616 2023-01-11] (Oracle Corporation -> Oracle and/or its affiliates) R1 VBoxNetLwf; C:\Windows\system32\DRIVERS\VBoxNetLwf.sys [265488 2023-01-11] (Oracle Corporation -> Oracle and/or its affiliates) R1 VBoxSup; C:\Windows\system32\DRIVERS\VBoxSup.sys [1061392 2023-01-11] (Oracle Corporation -> Oracle and/or its affiliates) S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [189152 2023-01-11] (Oracle Corporation -> Oracle and/or its affiliates) S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [55856 2023-12-08] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [594304 2023-12-08] (Microsoft Windows -> Microsoft Corporation) R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [105856 2023-12-08] (Microsoft Windows -> Microsoft Corporation) S3 WLRAWMp50x64; C:\Windows\System32\Drivers\WLRAWMp50x64.sys [35352 2013-10-31] (Logitech Inc -> Logitech, Inc.) S3 WLRAWMp50x64; C:\Windows\SysWOW64\Drivers\WLRAWMp50x64.sys [35352 2013-10-31] (Logitech Inc -> Logitech, Inc.) S3 WLRAWSp50x64; C:\Windows\System32\Drivers\WLRAWSp50x64.sys [34328 2013-10-31] (Logitech Inc -> Logitech, Inc.) S3 WLRAWSp50x64; C:\Windows\SysWOW64\Drivers\WLRAWSp50x64.sys [34328 2013-10-31] (Logitech Inc -> Logitech, Inc.) ==================== NetSvcs (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) ==================== Een maand (aangemaakt) (gefilterd) ========= (Als een item is opgenomen in de fixlist, wordt de map of het bestand verplaatst.) 2024-01-23 10:28 - 2024-01-23 10:29 - 000020853 _____ C:\Users\theos\OneDrive\Bureaublad\FRST.txt 2024-01-23 10:28 - 2024-01-23 10:28 - 002389504 _____ (Farbar) C:\Users\theos\OneDrive\Bureaublad\FRST64.exe 2024-01-23 10:28 - 2024-01-23 10:28 - 000000000 ____D C:\Users\theos\OneDrive\Bureaublad\FRST-OlderVersion 2024-01-19 10:26 - 2024-01-19 10:26 - 000000000 ____D C:\Windows\system32\Tasks\GoogleSystem 2024-01-18 13:42 - 2024-01-23 10:28 - 000000000 ____D C:\FRST 2024-01-12 10:47 - 2024-01-12 10:47 - 000000000 ___HD C:\$WinREAgent 2024-01-11 14:55 - 2024-01-18 14:06 - 000000000 ____D C:\ProgramData\WinZip 2024-01-11 09:40 - 2024-01-11 09:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 2024-01-11 09:19 - 2024-01-12 11:23 - 000000000 ____D C:\Program Files\Mozilla Firefox 2024-01-08 23:47 - 2024-01-08 23:47 - 000046824 _____ (Dropbox, Inc.) C:\Windows\system32\DbxSvc.exe 2024-01-01 10:00 - 2024-01-01 10:00 - 000002033 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Suite.lnk 2024-01-01 10:00 - 2024-01-01 10:00 - 000000000 ____D C:\Users\theos\NCH Software Suite 2024-01-01 10:00 - 2024-01-01 10:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite 2023-12-24 11:06 - 2023-12-24 11:06 - 000000000 ___RD C:\Users\theos\OneDrive\Documenten\Scanned Documents 2023-12-24 11:06 - 2023-12-24 11:06 - 000000000 ____D C:\Users\theos\OneDrive\Documenten\Fax ==================== Een maand (gewijzigd) ================== (Als een item is opgenomen in de fixlist, wordt de map of het bestand verplaatst.) 2024-01-23 10:20 - 2021-01-13 08:50 - 000000000 ____D C:\Users\theos\AppData\Roaming\Microsoft\Excel 2024-01-23 10:16 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2024-01-23 10:12 - 2021-01-12 11:53 - 000000000 ____D C:\Users\theos\AppData\Roaming\Microsoft\Word 2024-01-23 10:08 - 2022-02-11 09:57 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38 2024-01-23 10:06 - 2023-08-17 09:25 - 000000000 ____D C:\Windows\system32\Tasks\Hewlett-Packard 2024-01-23 10:06 - 2023-05-13 12:40 - 000000000 ____D C:\Users\theos\AppData\Local\Malwarebytes 2024-01-23 10:06 - 2021-01-12 14:28 - 000000000 ____D C:\Users\theos\AppData\Roaming\Dropbox 2024-01-23 10:06 - 2021-01-12 14:27 - 000000000 ____D C:\Users\theos\AppData\Local\Dropbox 2024-01-20 10:44 - 2021-01-16 13:30 - 000000000 ____D C:\Users\theos\AppData\Roaming\vlc 2024-01-20 10:44 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\AppReadiness 2024-01-20 10:25 - 2021-01-05 09:30 - 000000000 ___SD C:\Users\theos\AppData\Roaming\Microsoft\Credentials 2024-01-19 11:36 - 2021-12-15 10:45 - 000000000 ____D C:\Windows\SystemTemp 2024-01-19 10:32 - 2021-01-10 11:08 - 000002227 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2024-01-19 10:29 - 2021-01-10 11:08 - 000000000 ____D C:\Program Files (x86)\Google 2024-01-19 10:26 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps 2024-01-18 14:08 - 2021-01-19 09:27 - 000000000 ____D C:\Users\theos\AppData\LocalLow\IGDump 2024-01-18 14:07 - 2021-01-05 09:31 - 001771768 _____ C:\Windows\system32\PerfStringBackup.INI 2024-01-18 14:07 - 2019-12-07 16:14 - 000786070 _____ C:\Windows\system32\perfh013.dat 2024-01-18 14:07 - 2019-12-07 16:14 - 000154198 _____ C:\Windows\system32\perfc013.dat 2024-01-18 14:07 - 2019-12-07 10:13 - 000000000 ____D C:\Windows\INF 2024-01-18 14:02 - 2021-01-10 10:24 - 000000000 ____D C:\Program Files (x86)\TeamViewer 2024-01-18 14:02 - 2021-01-05 09:24 - 000008192 ___SH C:\DumpStack.log.tmp 2024-01-18 14:02 - 2020-11-19 00:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2024-01-18 14:01 - 2019-12-07 10:03 - 000786432 _____ C:\Windows\system32\config\BBI 2024-01-18 13:37 - 2023-08-22 10:20 - 000000000 ____D C:\Program Files\HP 2024-01-18 13:36 - 2023-08-14 10:52 - 000000000 ____D C:\Windows\system32\Tasks\HP 2024-01-18 13:36 - 2023-08-14 10:52 - 000000000 ____D C:\Program Files\HPPrintScanDoctor 2024-01-16 15:33 - 2021-01-16 13:14 - 000000000 ____D C:\Users\theos\AppData\Roaming\audacity 2024-01-16 14:22 - 2022-10-14 08:23 - 000002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk 2024-01-16 14:22 - 2021-01-18 09:43 - 000004562 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task 2024-01-15 10:11 - 2021-01-05 09:32 - 000000000 ____D C:\Users\theos\AppData\Local\Packages 2024-01-15 10:05 - 2021-01-19 13:57 - 000000000 ____D C:\Users\theos\AppData\Local\CrashDumps 2024-01-12 12:27 - 2020-11-18 23:45 - 000622264 _____ C:\Windows\system32\FNTCACHE.DAT 2024-01-12 12:25 - 2019-12-07 10:14 - 000000000 ___SD C:\Windows\system32\DiagSvcs 2024-01-12 12:25 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\setup 2024-01-12 12:25 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SystemResources 2024-01-12 12:25 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\setup 2024-01-12 12:25 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\ShellExperiences 2024-01-12 12:25 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\bcastdvr 2024-01-12 12:25 - 2019-12-07 10:03 - 000000000 ____D C:\Windows\CbsTemp 2024-01-12 12:16 - 2021-01-11 09:36 - 000000000 ____D C:\Windows\system32\MRT 2024-01-12 12:13 - 2021-01-11 09:36 - 189718008 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe 2024-01-12 11:23 - 2021-01-05 09:37 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2024-01-12 10:57 - 2023-06-08 08:32 - 000000000 ____D C:\Program Files (x86)\Ezviz Studio 2024-01-12 10:47 - 2021-01-05 11:41 - 000918944 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2024-01-11 14:02 - 2021-01-05 09:37 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2024-01-11 09:41 - 2021-01-12 14:27 - 000000000 ____D C:\Program Files (x86)\Dropbox 2024-01-11 09:19 - 2023-09-21 09:20 - 000000000 ____D C:\Users\theos\shipin7_update_temp 2024-01-08 10:07 - 2021-01-06 11:05 - 000000000 ____D C:\Windows\system32\Tasks\NCH Software 2024-01-07 13:56 - 2021-02-02 09:08 - 000000000 ____D C:\Users\theos\.VirtualBox 2024-01-07 13:56 - 2021-02-02 09:08 - 000000000 ____D C:\ProgramData\VirtualBox 2024-01-06 11:04 - 2021-01-16 09:56 - 000185344 _____ C:\Users\theos\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2024-01-06 10:29 - 2021-01-18 09:43 - 000000000 ____D C:\Users\theos\AppData\LocalLow\Adobe 2024-01-03 14:52 - 2021-01-13 08:49 - 000000000 ___RD C:\Users\theos\Dropbox 2024-01-01 10:00 - 2022-07-01 06:44 - 000001273 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Debut Video-opnamesoftware.lnk 2024-01-01 10:00 - 2021-01-05 09:30 - 000000000 ____D C:\Users\theos 2023-12-24 11:16 - 2023-08-14 11:54 - 000000000 _____ C:\Users\theos\OneDrive\Documenten\HPSmartPrintingPort 2023-12-24 11:14 - 2019-12-07 16:15 - 000000000 ____D C:\Windows\system32\FxsTmp 2023-12-24 09:31 - 2022-10-01 12:56 - 000239576 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys ==================== Bestanden in de root van sommige mappen ======== 2021-01-16 09:56 - 2024-01-06 11:04 - 000185344 _____ () C:\Users\theos\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini ==================== SigCheck ============================ (Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.) ==================== Einde van FRST.txt ========================