Scanresultaten van Farbar Recovery Scan Tool (FRST) (x64) Versie: 17-07-2025 Gestart door Erikv (Beheerder) op EVO (24-07-2025 11:55:46) Gestart vanaf C:\Users\Erikv\OneDrive\Bureaublad\FRST64.exe Geladen Profielen: Erikv Platform: Microsoft Windows 11 Pro Versie 24H2 26100.4652 (X64) Taal: Nederlands (Nederland) Standaardbrowser: Chrome Boot Modus: Normal ==================== Processen (gefilterd) ================= (Als een item is opgenomen in de fixlist, zal het proces worden gesloten. Het bestand zal niet worden verplaatst.) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe (C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe (C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cncmd.exe (C:\Program Files\Mozilla Firefox\firefox.exe ->) (Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Firefox\crashhelper.exe (cmd.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe (DriverStore\FileRepository\u0415346.inf_amd64_65a03ee01ac1140e\B413472\atiesrxx.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0415346.inf_amd64_65a03ee01ac1140e\B413472\atieclxx.exe (explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <37> (explorer.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2504.62.0_x64__8wekyb3d8bbwe\Notepad\Notepad.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <10> (services.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0415346.inf_amd64_65a03ee01ac1140e\B413472\atiesrxx.exe (services.exe ->) (AOMEI International Network Limited -> AOMEI International Network Limited) C:\Program Files (x86)\AOMEI\AOMEI Backupper\7.5.0\ABService.exe (services.exe ->) (Avid Technology, Inc.) [Bestand niet getekend] C:\Program Files\Avid\Pro Tools\MMERefresh.exe (services.exe ->) (Canon Inc. -> ) C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe (services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\DriverStore\FileRepository\amdfendr.inf_amd64_5f2cd636dbc40dd2\amdfendrsr.exe (services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Ltd) C:\Windows\SysWOW64\Creative.UWPRPCService.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25060.7-0\MpDefenderCoreService.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25060.7-0\MsMpEng.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25060.7-0\NisSrv.exe (services.exe ->) (Musecy SM Ltd. -> Muse Group) C:\Program Files\MuseAuthService\MuseAuthService.exe (services.exe ->) (Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Wondershare\WAF\2.4.3.229\WsAppService.exe (svchost.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\CPUMetricsServer.exe (svchost.exe ->) (MAGIX Software GmbH -> MAGIX Software GmbH) C:\Program Files (x86)\MAGIX\Connect\connect.exe (svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.73.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\DataExchangeHost.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe (Wondershare Technology Co.,Ltd -> ) C:\Program Files (x86)\Wondershare\Video Converter Ultimate\WSVCUUpdateHelper.exe ==================== Register (gefilterd) =================== (Als een item is opgenomen in de fixlist, zal het registeritem worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.) HKLM\...\Run: [DigidesignMMERefresh] => C:\Program Files\Avid\Pro Tools\MMERefresh.exe [117760 2018-08-02] (Avid Technology, Inc.) [Bestand niet getekend] HKLM\...\Run: [] => [X] HKLM-x32\...\Run: [ProductUpdater] => C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe [189320 2022-09-16] (MIXBYTE, INC. -> ) HKLM-x32\...\Run: [IJNetworkScannerSelectorEX2] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX2\CNMNSST2.exe [279240 2016-12-09] (Canon Inc. -> CANON INC.) HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1313408 2017-07-05] (Canon Inc. -> CANON INC.) HKLM-x32\...\Run: [WSVCUUpdateHelper.exe] => C:\Program Files (x86)\Wondershare\Video Converter Ultimate\WSVCUUpdateHelper.exe [28896 2017-08-21] (Wondershare Technology Co.,Ltd -> ) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.) [Bestand niet getekend] HKU\S-1-5-19\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4968336 2025-07-22] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-20\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4968336 2025-07-22] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-772462493-3368024724-2760790539-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4968336 2025-07-22] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-772462493-3368024724-2760790539-1001\...\Run: [Opera GX Stable] => C:\Users\Erikv\AppData\Local\Programs\Opera GX\opera.exe [1996232 2025-07-18] (Opera Norway AS -> Opera Software) HKU\S-1-5-21-772462493-3368024724-2760790539-1001\...\Run: [Opera GX Browser Assistant] => C:\Users\Erikv\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe [3291288 2021-02-01] (Opera Software AS -> Opera Software) HKU\S-1-5-21-772462493-3368024724-2760790539-1001\...\Run: [AvastBrowserAutoLaunch_E3669531C5E8C3569D4B735CAC8645F0] => C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe [3171424 2024-11-06] (Avast Software s.r.o. -> Gen Digital Inc.) HKU\S-1-5-21-772462493-3368024724-2760790539-1001\...\Run: [QMxNetworkSync] => C:\Program Files\Common Files\MAGIX Services\Update Notifier\QMxNetworkSync.exe [1027600 2023-05-22] (MAGIX Software GmbH -> MAGIX) HKLM\...\Windows x64\Print Processors\Canon TS5100 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDDQ.DLL [482816 2017-03-23] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\...\Print\Monitors\Canon BJ Language Monitor TS5100 series: C:\WINDOWS\system32\CNMLMDQ.DLL [1302016 2017-03-23] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\...\Print\Monitors\PDF-XChange Lite Port Monitor: C:\WINDOWS\system32\pxcpmL.dll [915280 2024-11-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> PDF-XChange Co Ltd.) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\138.0.7204.159\Installer\chrmstp.exe [2025-07-23] (Google LLC -> Google LLC) HKLM\Software\Microsoft\Active Setup\Installed Components: [{A8504530-742B-42BC-895D-2BAD6406F698}] -> C:\Program Files\AVAST Software\Browser\Application\130.0.27176.93\Installer\chrmstp.exe [2024-11-12] (Avast Software s.r.o. -> Gen Digital Inc.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\VCI-380 Control Panel Autostart.lnk [2025-04-23] ShortcutTarget: VCI-380 Control Panel Autostart.lnk -> C:\Vestax\VCI-380\vci380audiocpl.exe () [Bestand niet getekend] ==================== Geplande Taken (gefilterd) ================= (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) Task: {7EE17373-E29A-4D8F-B6CC-E0EC2FB21909} - System32\Tasks\AMDInstallLauncher => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030864 2025-03-06] (Advanced Micro Devices -> Advanced Micro Devices, Inc.) Task: {1E7129A3-98AA-4CAF-8E92-98CCE965699F} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030864 2025-03-06] (Advanced Micro Devices -> Advanced Micro Devices, Inc.) Task: {D0F7814D-4519-444D-B990-C11F4DFBF8E2} - System32\Tasks\AMDRyzenMasterSDKTask => C:\Program Files\AMD\CNext\CNext\cpumetricsserver.exe [184016 2025-03-06] (Advanced Micro Devices -> Advanced Micro Devices, Inc.) Task: {B63B5F0C-DB0D-438F-A5CB-026B0E38578D} - System32\Tasks\ASC_PerformanceMonitor => "C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe" -> C:\Program Files (x86)\IObit\Advanced SystemCare\\/Task Task: {4B681091-0220-49CB-933D-AF1AB1D992D3} - System32\Tasks\ASC_SkipUac_Erikv => "C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe" -> C:\Program Files (x86)\IObit\Advanced SystemCare\\/SkipUac Task: {077DDE37-1A0D-4CEB-8DC4-C9B057EDF27C} - System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) => C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe [3171424 2024-11-06] (Avast Software s.r.o. -> Gen Digital Inc.) Task: {E8FC437C-772B-4D13-AD63-5C80A2C04DC9} - System32\Tasks\Avast Secure Browser Heartbeat Task (Logon) => C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe [3171424 2024-11-06] (Avast Software s.r.o. -> Gen Digital Inc.) Task: {D1171D87-96AA-4D82-BFF1-77CFDA2A8492} - System32\Tasks\AvastBrowserProtectS-1-5-21-772462493-3368024724-2760790539-1001 => C:\Program Files\AVAST Software\Browser\Application\AvastBrowserProtect.exe [1690008 2024-10-30] (Avast Software s.r.o. -> Gen Digital Inc.) Task: {ED5F51CA-CDF5-4260-9491-A30A6FCFC1A1} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [192664 2024-11-07] (Avast Software s.r.o. -> Gen Digital Inc.) Task: {DE6ED11A-A6D7-4A40-A1BB-C76F64A0ABE2} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [192664 2024-11-07] (Avast Software s.r.o. -> Gen Digital Inc.) Task: {8369E82B-5CEF-46CD-B616-B3F55504C0D1} - System32\Tasks\CLToast => C:\Program Files (x86)\CyberLink\Shared files\CLToast.exe [2322472 2023-04-06] (CyberLink Corp. -> ) Task: {A089EFD9-D2C2-46D1-8EB3-2D67454BCA4F} - System32\Tasks\CLToastRun => C:\Program Files (x86)\CyberLink\Shared files\CLToast.exe [2322472 2023-04-06] (CyberLink Corp. -> ) Task: {AA3E9827-F74F-4DF0-9A6E-724565D4F569} - System32\Tasks\Connect => C:\Program Files (x86)\MAGIX\Connect\connect.exe [324680 2017-05-10] (MAGIX Software GmbH -> MAGIX Software GmbH) Task: {3488587D-78B8-44B5-A947-4836436D2689} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\Windows\explorer.exe [3038464 2025-06-27] (Microsoft Windows -> Microsoft Corporation) Task: {A37E29AF-3F91-48BB-B2D7-BD0AABB8A045} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem132.0.6833.0{6C766A9B-0702-492D-AACF-1B72107A7E36} => C:\Program Files (x86)\Google\GoogleUpdater\132.0.6833.0\updater.exe [5591136 2024-11-11] (Google LLC -> Google LLC) Task: {05B1BE73-D52E-4A55-B0E1-05B3B53D9746} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem140.0.7273.0{13F7882F-DEB1-4140-8B0F-A84719F17D22} => C:\Program Files (x86)\Google\GoogleUpdater\140.0.7273.0\updater.exe [6836832 2025-07-02] (Google LLC -> Google LLC) Task: {59E9FD67-4089-4529-B4FB-898627880673} - System32\Tasks\iTop xmas Task (One-Time) => "C:\Program Files (x86)\iTop VPN\Pub\itopxmasdayp24.exe" -> C:\Program Files (x86)\iTop VPN\Pub\\/rpop Task: {D988D16F-026D-486B-9745-D9AB8BA98CB5} - System32\Tasks\Judy => C:\WINDOWS\system32\wscript.exe [229376 2025-06-27] (Microsoft Windows -> Microsoft Corporation) -> "C:\Users\Erikv\AppData\Local\SecureData Dynamics\DataHarbor.js" Task: {6696D728-CDE6-4376-94FB-B402A8B916E4} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2118144 2024-11-26] () [Bestand niet getekend] Task: {F6C482BE-0E51-473D-9C47-0508D3A522B0} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ActionsServer\ActionsServer.exe [15515976 2025-07-19] (Microsoft Corporation -> Microsoft Corporation) Task: {CF185D68-E9F6-4AC6-9936-4DE466A94CDB} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28583832 2025-07-10] (Microsoft Corporation -> Microsoft Corporation) Task: {F968C29C-D12F-41BA-9A0B-CEC6BD87B789} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\opushutil.exe [70000 2025-07-19] (Microsoft Corporation -> Microsoft Corporation) Task: {72307CF1-AB3C-4A87-AC4E-731884685D62} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28583832 2025-07-10] (Microsoft Corporation -> Microsoft Corporation) Task: {F526FE67-3A80-429D-944A-C8A4789EDCA1} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [311560 2025-07-19] (Microsoft Corporation -> Microsoft Corporation) Task: {44A3FB63-1CD8-4D3D-AEF3-60B66122171E} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [311560 2025-07-19] (Microsoft Corporation -> Microsoft Corporation) Task: {C66DC4F5-51F3-4BEB-B564-404DCC85A33A} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [229176 2025-07-02] (Microsoft Corporation -> Microsoft Corporation) Task: {0C12A7EC-01ED-4798-80E4-AD03911C3729} - System32\Tasks\Microsoft\Office\Office Startup Boost => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [311560 2025-07-19] (Microsoft Corporation -> Microsoft Corporation) Task: {91ABDB48-EFCC-4AFB-B185-5F84050AB3F4} - System32\Tasks\Microsoft\Office\Office Startup Boost Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [311560 2025-07-19] (Microsoft Corporation -> Microsoft Corporation) Task: {01A2F38A-D28E-43DD-8E3C-C397B5DEED25} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe [264704 2020-10-02] (Microsoft Corporation) [Bestand niet getekend] Task: {D5AE4A29-F43D-4D33-B88F-791270327339} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe [264704 2020-10-02] (Microsoft Corporation) [Bestand niet getekend] Task: {99BFFA62-8571-452A-A358-AEB076637263} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe [264704 2020-10-02] (Microsoft Corporation) [Bestand niet getekend] Task: {6015004C-A434-4661-9CC6-DF1369755140} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe [264704 2020-10-02] (Microsoft Corporation) [Bestand niet getekend] Task: {8E45255B-6463-42C4-AE2F-FB2B4E4F3E95} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe [264704 2020-10-02] (Microsoft Corporation) [Bestand niet getekend] Task: {2D23CE2A-C286-4A79-A028-46354622181E} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe [168448 2020-10-02] (Microsoft Corporation) [Bestand niet getekend] Task: {AA23609A-6BB0-4EDC-9CE3-97601B0C0093} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe [168448 2020-10-02] (Microsoft Corporation) [Bestand niet getekend] Task: {84D8296E-796C-4CD6-803F-6E8C3519DF12} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe [168448 2020-10-02] (Microsoft Corporation) [Bestand niet getekend] Task: {17758627-E664-46D4-8B4A-9906E92DA92E} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe [168448 2020-10-02] (Microsoft Corporation) [Bestand niet getekend] Task: {51E7C943-AB12-46E9-9964-78D1D947217B} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe [264704 2020-10-02] (Microsoft Corporation) [Bestand niet getekend] Task: {C64B4675-8380-40AD-AB9A-DAE2E1214308} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe [264704 2020-10-02] (Microsoft Corporation) [Bestand niet getekend] Task: {A567B4A2-78BE-4828-B6BD-534832447072} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe [264704 2020-10-02] (Microsoft Corporation) [Bestand niet getekend] Task: {2FFF8410-66E0-414D-AD87-FABD451355EF} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe [264704 2020-10-02] (Microsoft Corporation) [Bestand niet getekend] Task: {B501A34A-3761-45CE-B44F-53A5529BEAC0} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe [264704 2020-10-02] (Microsoft Corporation) [Bestand niet getekend] Task: {4CFF0B3D-97DA-41D6-9935-9944B26EEFC9} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe [168448 2020-10-02] (Microsoft Corporation) [Bestand niet getekend] Task: {2B82C822-FAC7-4852-A534-72E1ACA87A65} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe [168448 2020-10-02] (Microsoft Corporation) [Bestand niet getekend] Task: {B7C6B470-0B0A-4B45-88A5-0A9ABD184828} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe [168448 2020-10-02] (Microsoft Corporation) [Bestand niet getekend] Task: {005EEFC2-4218-43B7-969E-F46E8A47C28C} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe [78336 2020-10-02] (Microsoft Corporation) [Bestand niet getekend] Task: {CB1D13C6-9AE7-4362-961C-4663E37613CE} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe [264704 2020-10-02] (Microsoft Corporation) [Bestand niet getekend] Task: {CBFC0730-451F-49D1-BF00-DB9379E36F58} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe [264704 2020-10-02] (Microsoft Corporation) [Bestand niet getekend] Task: {BA58127B-CB61-4705-A53D-791969AA067E} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe [168448 2020-10-02] (Microsoft Corporation) [Bestand niet getekend] Task: {609E4B77-FC1D-48B0-80A1-16F4CC6C3852} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe [78336 2020-10-02] (Microsoft Corporation) [Bestand niet getekend] Task: {C58E88A8-D47E-49E2-A0FB-0F687269FCF3} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe [264704 2020-10-02] (Microsoft Corporation) [Bestand niet getekend] Task: {71FE23B3-6999-46D5-830E-7225EBA1D8DD} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25060.7-0\MpCmdRun.exe [1778224 2025-07-23] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {1AA989D1-94DE-47A7-B135-CB610A472281} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25060.7-0\MpCmdRun.exe [1778224 2025-07-23] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {6CF14706-EB14-4341-8676-369F60E0EDC0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25060.7-0\MpCmdRun.exe [1778224 2025-07-23] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {3062B60E-E42A-4062-B548-4DB0F40D991A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25060.7-0\MpCmdRun.exe [1778224 2025-07-23] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {29AD28BA-0A9A-4582-A5C0-CEA56B1358D6} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030864 2025-03-06] (Advanced Micro Devices -> Advanced Micro Devices, Inc.) Task: {612B4D82-7DD4-4AF1-81EB-26CE88C384BF} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34880 2025-07-09] (Mozilla Corporation -> Mozilla Foundation) Task: {2781FE17-E61F-42C8-B8D2-286285C52E77} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4232040 2025-07-22] (Microsoft Corporation -> Microsoft Corporation) Task: {8B8101FF-05CF-4A75-9844-09C6D95E596C} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-772462493-3368024724-2760790539-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4232040 2025-07-22] (Microsoft Corporation -> Microsoft Corporation) Task: {19A0AFF5-B381-43CD-9FAD-17DFFFA14B0B} - System32\Tasks\OneDrive Startup Task-S-1-5-21-772462493-3368024724-2760790539-1001 => C:\Program Files\Microsoft OneDrive\25.122.0624.0004\OneDriveLauncher.exe [685432 2025-07-22] (Microsoft Corporation -> Microsoft Corporation) Task: {788371A0-8374-47F1-9577-6886BC35B522} - System32\Tasks\Opera GX scheduled Autoupdate 1710504980 => C:\Users\Erikv\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe [6253000 2025-07-16] (Opera Norway AS -> Opera Software) Task: {DCEDB951-1B9E-445C-9E31-EE6532E2FE1B} - System32\Tasks\PrivaZer_SkipUAC => C:\Program Files (x86)\PrivaZer\PrivaZer.exe [35108952 2025-06-09] (Goversoft LLC -> Goversoft LLC) -> C:\Program Files (x86)\PrivaZer\\$(Arg0) Task: {2B48E034-351A-48D9-AD68-AEDE2315EB8C} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [60624 2025-03-06] (Advanced Micro Devices -> Advanced Micro Devices, Inc.) Task: {3282EB20-A7AF-4F6E-8D8D-C95FA30CB4CF} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [324304 2025-03-06] (Advanced Micro Devices -> Advanced Micro Devices, Inc.) Task: {BC0C3F60-0A5D-4FE2-8314-67403DA7FD25} - System32\Tasks\VivaldiUpdateCheck-674654b6318d065b => C:\Users\Erikv\AppData\Local\Vivaldi\Application\update_notifier.exe [3108488 2024-11-26] (Vivaldi Technologies AS -> Vivaldi Technologies AS) -> C:\Users\Erikv\AppData\Local\Vivaldi\Application\--from-scheduler (Als een item is opgenomen in de fixlist, wordt de taak (job) bestand verplaatst. Het bestand dat wordt uitgevoerd door de taak zal niet worden verplaatst.) Task: C:\WINDOWS\Tasks\Connect.job => C:\Program Files (x86)\MAGIX\Connect\connect.exe ==================== Internet (gefilterd) ==================== (Als een item is opgenomen in de fixlist en een registeritem is, wordt het verwijderd of hersteld naar de standaard.) Hosts: Er is meer dan één item in Hosts. Zie Hosts deel van Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.128.1 Tcpip\..\Interfaces\{8468bfbb-9281-4d67-8fa3-4cfa264787be}: [DhcpNameServer] 192.168.128.1 Tcpip\..\Interfaces\{8468bfbb-9281-4d67-8fa3-4cfa264787be}: [DhcpDomain] home Tcpip\..\Interfaces\{9BEDF113-8F7B-4863-99F9-AF88076629A8}: [DhcpNameServer] 8.8.8.8 8.8.4.4 Edge: ======= Edge Profile: C:\Users\Erikv\AppData\Local\Microsoft\Edge\User Data\Default [2025-07-22] Edge Session Restore: Default -> is ingeschakeld. Edge Extension: (Offline Documenten) - C:\Users\Erikv\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-04-23] Edge Extension: (Edge relevant text changes) - C:\Users\Erikv\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-31] FireFox: ======== FF DefaultProfile: q3tu29b5.default FF ProfilePath: C:\Users\Erikv\AppData\Roaming\Mozilla\Firefox\Profiles\q3tu29b5.default [2025-07-24] FF user.js: detected! => C:\Users\Erikv\AppData\Roaming\Mozilla\Firefox\Profiles\q3tu29b5.default\user.js [2025-07-22] FF DownloadDir: C:\Users\Erik\Desktop FF Session Restore: Mozilla\Firefox\Profiles\q3tu29b5.default -> is ingeschakeld. FF Notifications: Mozilla\Firefox\Profiles\q3tu29b5.default -> hxxps://www.apost.com; hxxps://web.whatsapp.com; hxxps://www.instagram.com; hxxps://mail.google.com; hxxps://www.techradar.com; hxxps://www.maisonsdumonde.com; hxxps://nl.pinterest.com; hxxps://tinder.com; hxxps://www.asiandating.com; hxxps://www.opensubtitles.org; hxxps://www.chess.com; hxxps://www.jeanscentre.nl; hxxps://vtm.be; hxxps://win-be-prizesonline.com; hxxps://www.torfs.be; hxxps://www.unigro.be; hxxps://app.tuta.com; hxxps://mail.tutanota.com; hxxps://www.decathlon.be; hxxps://www.thaicupid.com; hxxps://en1.savefrom.net FF Extension: (eidReader Plugin Extension) - C:\Users\Erikv\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\kcnofmiceklfkodhdhhjcfjhdepfobaf@unifiedpost.com.xpi [2017-09-19] [UpdateUrl:hxxps://example.com/updates.json] FF Extension: (SetupVPN - Lifetime Free VPN) - C:\Users\Erikv\AppData\Roaming\Mozilla\Firefox\Profiles\q3tu29b5.default\Extensions\@setupvpncom.xpi [2024-12-29] FF Extension: (English United States Dictionary) - C:\Users\Erikv\AppData\Roaming\Mozilla\Firefox\Profiles\q3tu29b5.default\Extensions\@unitedstatesenglishdictionary.xpi [2023-11-27] FF Extension: (Activist – Bold) - C:\Users\Erikv\AppData\Roaming\Mozilla\Firefox\Profiles\q3tu29b5.default\Extensions\activist-bold-colorway@mozilla.org.xpi [2023-03-16] FF Extension: (eID België) - C:\Users\Erikv\AppData\Roaming\Mozilla\Firefox\Profiles\q3tu29b5.default\Extensions\belgiumeid@eid.belgium.be.xpi [2021-03-10] FF Extension: (German Dictionary, extended for Austria) - C:\Users\Erikv\AppData\Roaming\Mozilla\Firefox\Profiles\q3tu29b5.default\Extensions\de-AT@dictionaries.addons.mozilla.org.xpi [2022-11-24] FF Extension: (German Dictionary (Switzerland)) - C:\Users\Erikv\AppData\Roaming\Mozilla\Firefox\Profiles\q3tu29b5.default\Extensions\de-CH@dictionaries.addons.mozilla.org.xpi [2022-11-24] FF Extension: (German Dictionary) - C:\Users\Erikv\AppData\Roaming\Mozilla\Firefox\Profiles\q3tu29b5.default\Extensions\de-DE@dictionaries.addons.mozilla.org.xpi [2022-11-24] FF Extension: (eID Extension) - C:\Users\Erikv\AppData\Roaming\Mozilla\Firefox\Profiles\q3tu29b5.default\Extensions\eid-chrome-extension@e-contract.be.xpi [2021-12-12] [UpdateUrl:hxxps://www.e-contract.be/eid-chrome/releases/eid-chrome-extension-updates.json] FF Extension: (AdBlock - blokkeer reclame op het internet) - C:\Users\Erikv\AppData\Roaming\Mozilla\Firefox\Profiles\q3tu29b5.default\Extensions\jid1-NIfFY2CA8fy1tg@jetpack.xpi [2025-07-14] FF Extension: (Language: Deutsch (German)) - C:\Users\Erikv\AppData\Roaming\Mozilla\Firefox\Profiles\q3tu29b5.default\Extensions\langpack-de@firefox.mozilla.org.xpi [2025-07-09] FF Extension: (Language: English (GB)) - C:\Users\Erikv\AppData\Roaming\Mozilla\Firefox\Profiles\q3tu29b5.default\Extensions\langpack-en-GB@firefox.mozilla.org.xpi [2025-07-09] FF Extension: (Language: English (US)) - C:\Users\Erikv\AppData\Roaming\Mozilla\Firefox\Profiles\q3tu29b5.default\Extensions\langpack-en-US@firefox.mozilla.org.xpi [2025-07-09] FF Extension: (British English Dictionary (Marco Pinto)) - C:\Users\Erikv\AppData\Roaming\Mozilla\Firefox\Profiles\q3tu29b5.default\Extensions\marcoagpinto@mail.telepac.pt.xpi [2025-07-01] FF Extension: (Google™ Translator) - C:\Users\Erikv\AppData\Roaming\Mozilla\Firefox\Profiles\q3tu29b5.default\Extensions\{059cddf1-f66c-4b63-a79a-c35ac7e6ac65}.xpi [2021-01-13] FF Extension: (Connective signing extension) - C:\Users\Erikv\AppData\Roaming\Mozilla\Firefox\Profiles\q3tu29b5.default\Extensions\{4f643bc8-78f5-49c6-8efd-78ee30289f0b}.xpi [2021-11-26] FF Extension: (Flash and Video Download) - C:\Users\Erikv\AppData\Roaming\Mozilla\Firefox\Profiles\q3tu29b5.default\Extensions\{adeadebb-fedc-4180-a7f4-cfdd87496551}.xpi [2020-08-14] FF Extension: (Easy Youtube Video Downloader Express) - C:\Users\Erikv\AppData\Roaming\Mozilla\Firefox\Profiles\q3tu29b5.default\Extensions\{b9acf540-acba-11e1-8ccb-001fd0e08bd4}.xpi [2024-05-04] FF Extension: (Zoom Extension) - C:\Users\Erikv\AppData\Roaming\Mozilla\Firefox\Profiles\q3tu29b5.default\Extensions\{bf855ead-d7c3-4c7b-9f88-9a7e75c0efdf}.xpi [2025-04-04] FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2025-07-19] (Microsoft Corporation -> Microsoft Corporation) FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2024-11-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> PDF-XChange Co Ltd.) FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2024-11-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> PDF-XChange Co Ltd.) FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2024-11-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> PDF-XChange Co Ltd.) FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2019-07-02] (CANON INC.) [Bestand niet getekend] FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2025-07-19] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2024-11-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> PDF-XChange Co Ltd.) FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2024-11-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> PDF-XChange Co Ltd.) FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2024-11-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> PDF-XChange Co Ltd.) FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1697.6\npAvastBrowserUpdate3.dll [Geen bestand] FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1697.6\npAvastBrowserUpdate3.dll [Geen bestand] FF Plugin-x32: @videolan.org/vlc,version=3.0.18 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=3.0.20 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=3.0.21 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN) FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2024-11-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> PDF-XChange Co Ltd.) FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2024-11-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> PDF-XChange Co Ltd.) FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2024-11-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> PDF-XChange Co Ltd.) FF Plugin HKU\S-1-5-21-772462493-3368024724-2760790539-1001: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2024-11-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> PDF-XChange Co Ltd.) FF Plugin HKU\S-1-5-21-772462493-3368024724-2760790539-1001: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2024-11-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> PDF-XChange Co Ltd.) FF Plugin HKU\S-1-5-21-772462493-3368024724-2760790539-1001: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2024-11-12] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> PDF-XChange Co Ltd.) FF Plugin HKU\S-1-5-21-772462493-3368024724-2760790539-1001: connective.be/BrowserPlugin -> C:\Users\Erikv\AppData\Local\Connective\SigningFirefoxPlugin\npapi-plugin.dll [2021-07-05] (Connective n.v.) [Bestand niet getekend] Chrome: ======= CHR DefaultProfile: Default CHR Profile: C:\Users\Erikv\AppData\Local\Google\Chrome\User Data\Default [2025-07-24] CHR DownloadDir: C:\Users\vanop\Desktop CHR Notifications: Default -> hxxps://am1.badoo.com; hxxps://badoo.com; hxxps://board.nzb-wiseguys.com; hxxps://bxiza.belaininge.club; hxxps://ketogeen.com; hxxps://learn.zoner.com; hxxps://lichess.org; hxxps://mail.google.com; hxxps://mail.protonmail.com; hxxps://meet.google.com; hxxps://nl.geekmarkt.com; hxxps://nl.pinterest.com; hxxps://pornogids.net; hxxps://repair.easeus.com; hxxps://serch22.biz; hxxps://stockboxx.top; hxxps://thepiratebay.org; hxxps://tinder.com; hxxps://trustcontent.casa; hxxps://twitter.com; hxxps://upornia.com; hxxps://videoconverter.wondershare.com; hxxps://vtm.be; hxxps://web.skype.com; hxxps://www.2dehands.be; hxxps://www.chess.com; hxxps://www.conrad.be; hxxps://www.decathlon.be; hxxps://www.delhaize.be; hxxps://www.demorgen.be; hxxps://www.digitaltrends.com; hxxps://www.facebook.com; hxxps://www.fc-moto.de; hxxps://www.g2a.com; hxxps://www.goplay.be; hxxps://www.herenmodedewaele.be; hxxps://www.hln.be; hxxps://www.ibood.com; hxxps://www.instagram.com; hxxps://www.isitiptv.com; hxxps://www.iskysoft.com; hxxps://www.ketologie.com; hxxps://www.knack.be; hxxps://www.laredoute.be; hxxps://www.lightinthebox.com; hxxps://www.loberon.be; hxxps://www.maisonsdumonde.com; hxxps://www.medpets.be; hxxps://www.netflix.com; hxxps://www.perverttube.com; hxxps://www.reddit.com; hxxps://www.takeaway.com; hxxps://www.tomshardware.com; hxxps://www.vlaamsbelang.org; hxxps://www.vrt.be; hxxps://www.vtmgo.be; hxxps://www.vtwonen.be; hxxps://www.youtube.com; hxxps://www2.notifonline.com; hxxps://xmovies24.cc CHR Session Restore: Default -> is ingeschakeld. CHR Extension: (Checker Plus for Google Calendar™) - C:\Users\Erikv\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkhggnncdpfibdhinjiegagmopldibha [2025-07-17] CHR Extension: (Connective signing extension) - C:\Users\Erikv\AppData\Local\Google\Chrome\User Data\Default\Extensions\kclpjmhngbacampgcdojmiedamjbgjjm [2025-02-10] CHR Extension: (Gratis VPN voor Chrome - VPN Proxy VeePN) - C:\Users\Erikv\AppData\Local\Google\Chrome\User Data\Default\Extensions\majdfhpaihoncoakbjgbdhglocklcgno [2025-07-05] CHR Extension: (Betalingen via Chrome Web Store) - C:\Users\Erikv\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-02-10] CHR Profile: C:\Users\Erikv\AppData\Local\Google\Chrome\User Data\Guest Profile [2025-07-23] CHR Profile: C:\Users\Erikv\AppData\Local\Google\Chrome\User Data\Profile 1 [2025-07-23] CHR Extension: (Slides) - C:\Users\Erikv\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2025-02-10] CHR Extension: (Docs) - C:\Users\Erikv\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2025-02-10] CHR Extension: (Google Drive) - C:\Users\Erikv\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2025-02-10] CHR Extension: (YouTube) - C:\Users\Erikv\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2025-02-10] CHR Extension: (Avira Password Manager) - C:\Users\Erikv\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\caljgklbbfbcjjanaijlacgncafpegll [2025-02-10] CHR Extension: (Avira Safe Shopping) - C:\Users\Erikv\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ccbpbkebodcjkknkfkpmfeciinhidaeh [2025-02-10] CHR Extension: (Tampermonkey) - C:\Users\Erikv\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2025-02-10] CHR Extension: (Sheets) - C:\Users\Erikv\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2025-02-10] CHR Extension: (Google Docs Offline) - C:\Users\Erikv\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-02-10] CHR Extension: (Betalingen via Chrome Web Store) - C:\Users\Erikv\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-02-10] CHR Extension: (Gmail) - C:\Users\Erikv\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2025-02-10] CHR Extension: (Chrome Media Router) - C:\Users\Erikv\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2025-02-10] CHR Profile: C:\Users\Erikv\AppData\Local\Google\Chrome\User Data\Profile 2 [2025-07-23] CHR Extension: (Betalingen via Chrome Web Store) - C:\Users\Erikv\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-02-20] CHR Profile: C:\Users\Erikv\AppData\Local\Google\Chrome\User Data\System Profile [2025-07-23] Opera: ======= OPR DefaultProfile: Default StartMenuInternet: (HKU\S-1-5-21-772462493-3368024724-2760790539-1001) Opera GXStable - "C:\Users\Erikv\AppData\Local\Programs\Opera GX\opera.exe" Vivaldi: ======= VIV DefaultProfile: Default VIV Profile: C:\Users\Erikv\AppData\Local\Vivaldi\User Data\Default [2025-07-23] VIV DownloadDir: C:\Users\Erikv\OneDrive\Bureaublad VIV DefaultSearchKeyword: Default -> g VIV DefaultSuggestURL: Default -> hxxps://www.google.com/complete/search?client=chrome&q={searchTerms} ==================== Services (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) R2 Backupper Service; C:\Program Files (x86)\AOMEI\AOMEI Backupper\7.5.0\ABService.exe [1092864 2025-05-15] (AOMEI International Network Limited -> AOMEI International Network Limited) S3 battlenet_helpersvc; C:\ProgramData\Battle.net_components\battlenet_helpersvc\AgentHelper.exe [3319424 2025-04-09] (Blizzard Entertainment, Inc. -> Blizzard Entertainment) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13045088 2025-07-10] (Microsoft Corporation -> Microsoft Corporation) R2 DigiRefresh; C:\Program Files\Avid\Pro Tools\MMERefresh.exe [117760 2018-08-02] (Avid Technology, Inc.) [Bestand niet getekend] S3 digiSPTIService64; C:\Program Files\Avid\Pro Tools\digisptiservice64.exe [197632 2018-08-02] (Avid Technology, Inc.) [Bestand niet getekend] S3 ehRecvr; C:\WINDOWS\ehome\ehRecvr.exe [696832 2020-10-02] (Microsoft Corporation) [Bestand niet getekend] S3 ehSched; C:\WINDOWS\ehome\ehsched.exe [176128 2020-10-02] (Microsoft Corporation) [Bestand niet getekend] S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\25.122.0624.0004\FileSyncHelper.exe [3633544 2025-07-22] (Microsoft Corporation -> Microsoft Corporation) S3 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [53056 2011-06-16] (Ellora Assets Corp. -> Freemake) S3 FreemakeUtilsService; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [53056 2011-06-16] (Ellora Assets Corp. -> Freemake) R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [460488 2024-04-03] (Canon Inc. -> ) S3 MacriumService; C:\Program Files\Macrium\Common\MacriumService.exe [13237688 2023-11-21] (PARAMOUNT SOFTWARE UK LIMITED -> Paramount Software UK Ltd) R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25060.7-0\MpDefenderCoreService.exe [2042672 2025-07-23] (Microsoft Windows Publisher -> Microsoft Corporation) S3 MicrosoftEdgeElevationService1dbb68f7091ef86; C:\Program Files (x86)\Microsoft\Edge\Application\138.0.3351.95\elevation_service.exe [2348600 2025-07-16] (Microsoft Corporation -> Microsoft Corporation) R2 MuseAuthService; C:\Program Files\MuseAuthService\MuseAuthService.exe [10467928 2025-06-06] (Musecy SM Ltd. -> Muse Group) S3 MuseHub Updater Service; C:\Program Files\WindowsApps\Muse.MuseHub_2.2.1.13_x64__rb9pth70m6nz6\Muse.Updater.exe [6224984 2025-06-06] (Musecy SM Ltd. -> Muse.Updater) S3 NativePushService; C:\Users\Erikv\AppData\Local\Wondershare\Wondershare NativePush\WsNativePushService.exe [594320 2023-05-06] (Wondershare Technology Group Co.,Ltd -> Wondershare) S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\25.122.0624.0004\OneDriveUpdaterService.exe [3885952 2025-07-22] (Microsoft Corporation -> Microsoft Corporation) S3 PrivateInternetAccessService; C:\Program Files\Private Internet Access\pia-service.exe [1369312 2023-09-19] (Private Internet Access, Inc. -> ) S3 PrivateInternetAccessWireguard; C:\Program Files\Private Internet Access\pia-wgservice.exe [4455000 2023-09-19] (Private Internet Access, Inc. -> ) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [917472 2025-05-29] (Microsoft Windows Publisher -> Microsoft Corporation) R2 UWPService; C:\WINDOWS\SysWOW64\Creative.UWPRPCService.exe [357296 2021-03-01] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Ltd) R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25060.7-0\NisSrv.exe [4546688 2025-07-23] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25060.7-0\MsMpEng.exe [282464 2025-07-23] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.4.3.229\WsAppService.exe [493280 2017-08-04] (Wondershare Technology Co.,Ltd -> Wondershare) S3 WsDrvInst; C:\Program Files (x86)\Wondershare\UniConverter\Transfer\DriverInstall.exe [112560 2020-06-12] (Wondershare Technology Co.,Ltd -> Wondershare) ===================== Drivers (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) R0 ambakdrv; C:\WINDOWS\System32\ambakdrv.sys [51120 2024-04-29] (CHENGDU AOMEI Tech Co., Ltd. -> ) R3 amdfendrmgr; C:\WINDOWS\System32\DriverStore\FileRepository\amdfendr.inf_amd64_5f2cd636dbc40dd2\amdfendrmgr.sys [25672 2024-04-23] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) R3 amdgpio3; C:\WINDOWS\System32\drivers\amdgpio3.sys [33592 2024-09-11] (ASMedia Technology Inc. -> Advanced Micro Devices, Inc) R2 AMDRyzenMasterDriverV20; C:\WINDOWS\system32\AMDRyzenMasterDriver.sys [48328 2025-03-06] (Advanced Micro Devices Inc. -> Advanced Micro Devices) R3 AMDSAFD; C:\WINDOWS\System32\DriverStore\FileRepository\amdsafd.inf_amd64_960126269e89c62e\amdsafd.sys [113880 2024-05-10] (Advanced Micro Devices -> Advanced Micro Devices) R3 amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0415346.inf_amd64_65a03ee01ac1140e\B413472\amdkmdag.sys [106595752 2025-05-08] (Advanced Micro Devices -> Advanced Micro Devices, Inc.) R3 AMDXE; C:\WINDOWS\System32\drivers\amdxe.sys [61888 2023-05-24] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) R2 ammntdrv; C:\WINDOWS\system32\ammntdrv.sys [172928 2025-06-13] (AOMEI International Network Limited -> ) R2 amwrtdrv; C:\WINDOWS\system32\amwrtdrv.sys [32176 2025-06-13] (AOMEI International Network Limited -> ) S1 BHDrvx64; C:\ProgramData\Symantec\Symantec Endpoint Protection\14.3.12154.10000.105\Data\Definitions\BASHDefs\20250206.011\BHDrvx64.sys [1708584 2025-01-02] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [573440 2024-12-17] (Microsoft Corporation) [Bestand niet getekend] S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [204800 2024-12-17] (Microsoft Corporation) [Bestand niet getekend] S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [110592 2024-12-17] (Microsoft Corporation) [Bestand niet getekend] R1 ccSettings_{3034D1AD-B6C5-45F5-9DB0-DD610B7E7A72}; C:\WINDOWS\System32\Drivers\SEP\0E032F7A\2710.105\x64\ccSetx64.sys [190464 2025-01-27] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) R3 e1rexpress; C:\WINDOWS\System32\DriverStore\FileRepository\e1r.inf_amd64_f194c3dae417bc27\e1r.sys [610384 2024-12-24] (Intel Corporation -> Intel Corporation) R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [527976 2025-02-07] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [159848 2025-02-07] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) R3 GKUPRO2D; C:\WINDOWS\System32\drivers\GKUPRO2D.sys [146320 2020-05-22] (Microsoft Windows Hardware Compatibility Publisher -> Gemalto) S3 GUMHFilters; C:\Program Files (x86)\Glarysoft\Malware Hunter\Native\winxp_x64\GUMHFilter.sys [35384 2023-07-03] (Microsoft Windows Hardware Compatibility Publisher -> Glarysoft Ltd) R1 IDSVia64; C:\ProgramData\Symantec\Symantec Endpoint Protection\14.3.12154.10000.105\Data\Definitions\IPSDefs\20250206.094\IDSvia64.sys [1565712 2025-02-06] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) R3 iriuna0; C:\WINDOWS\system32\drivers\iriuna0.sys [46976 2021-04-06] (Iriun Oy -> Windows (R) Win 7 DDK provider) R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [330112 2025-06-13] (Microsoft Windows -> Microsoft Corporation) R3 MBfilt; C:\WINDOWS\system32\drivers\MBfilt64.sys [43456 2019-05-06] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Ltd.) R0 mrcbt; C:\WINDOWS\System32\drivers\mrcbt.sys [119040 2023-11-23] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) R0 mrigflt; C:\WINDOWS\System32\drivers\mrigflt.sys [75672 2023-11-23] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) S3 PSKMAD; C:\WINDOWS\System32\DRIVERS\PSKMAD.sys [50320 2015-01-29] (Panda Security S.L. -> Panda Security, S.L.) R0 pwdrvio; C:\WINDOWS\System32\pwdrvio.sys [37336 2021-03-09] (MiniTool Solution Ltd -> ) S3 pwdspio; C:\WINDOWS\system32\pwdspio.sys [12504 2019-11-08] (MiniTool Solution Ltd -> ) R1 SRTSP; C:\ProgramData\Symantec\Symantec Endpoint Protection\14.3.12154.10000.105\Data\SymPlatform\SRTSP64.SYS [997496 2025-01-27] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) R1 SRTSPX; C:\WINDOWS\System32\Drivers\SEP\0E032F7A\2710.105\x64\SRTSPX64.SYS [43640 2025-01-27] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) S3 SyDvCtrl; C:\WINDOWS\system32\Drivers\SEP\0E032F7A\2710.105\x64\sydvctrl.sys [30208 2025-01-27] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) R0 SymEFASI; C:\WINDOWS\System32\drivers\symefasi\0705030.037\symefasi64.sys [2169312 2025-02-07] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) S4 SymELAM; C:\WINDOWS\system32\Drivers\SEP\0E032F7A\2710.105\x64\SymELAM.sys [27136 2025-01-27] (Microsoft Windows Early Launch Anti-malware Publisher -> Broadcom) R3 SymEvent; C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS [100832 2025-02-07] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) R1 SymIRON; C:\WINDOWS\System32\Drivers\SEP\0E032F7A\2710.105\x64\Ironx64.SYS [298512 2025-01-27] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) R1 SYMNETS; C:\WINDOWS\System32\Drivers\SEP\0E032F7A\2710.105\x64\symnets.sys [484456 2025-01-27] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) R1 SysPlant; C:\WINDOWS\System32\Drivers\SEP\0E032F7A\2710.105\x64\sysplant.sys [230024 2025-01-27] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) R3 tap-pia-0901; C:\WINDOWS\System32\drivers\tap-pia-0901.sys [39944 2022-04-04] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project) R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [41000 2024-12-13] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project) R1 Teefer2; C:\WINDOWS\system32\DRIVERS\Teefer.sys [106600 2025-01-27] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) S3 vci380v161; C:\WINDOWS\System32\drivers\vci380v161_x64.sys [246064 2012-10-31] (Vestax Corporation -> ) S3 vci380v161ks; C:\WINDOWS\System32\drivers\vci380v161ks_x64.sys [54064 2012-10-31] (Vestax Corporation -> ) S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [20888 2025-07-23] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [623008 2025-07-23] (Microsoft Windows -> Microsoft Corporation) R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [101792 2025-07-23] (Microsoft Windows -> Microsoft Corporation) R0 WinSetupMon; C:\WINDOWS\System32\DRIVERS\WinSetupMon.sys [169408 2024-12-06] (Microsoft Windows -> Microsoft Corporation) S3 WireGuard; C:\WINDOWS\System32\drivers\wireguard.sys [489368 2024-12-23] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC) S3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2024-12-17] (Microsoft Windows -> Microsoft Corporation) S3 WSDScan; C:\WINDOWS\System32\DriverStore\FileRepository\sti.inf_amd64_971c769b103df369\WSDScan.sys [61440 2024-12-17] (Microsoft Windows -> Microsoft Corporation) ==================== NetSvcs (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) ==================== Een maand (aangemaakt) (gefilterd) ========= (Als een item is opgenomen in de fixlist, wordt de map of het bestand verplaatst.) 2025-07-24 11:55 - 2025-07-24 11:56 - 000051901 _____ C:\Users\Erikv\OneDrive\Bureaublad\FRST.txt 2025-07-24 11:53 - 2025-07-24 11:53 - 000003094 _____ C:\WINDOWS\system32\Tasks\AMDInstallLauncher 2025-07-24 11:53 - 2025-07-24 11:53 - 000003086 _____ C:\WINDOWS\system32\Tasks\AMDLinkUpdate 2025-07-23 13:00 - 2025-07-23 13:00 - 000000008 _____ C:\ProgramData\ntuser.pol 2025-07-23 12:54 - 2025-07-23 12:58 - 000017273 _____ C:\Users\Erikv\OneDrive\Bureaublad\Fixlog.txt 2025-07-23 12:49 - 2025-07-23 12:49 - 000792370 _____ C:\WINDOWS\system32\perfh013.dat 2025-07-23 12:49 - 2025-07-23 12:49 - 000164008 _____ C:\WINDOWS\system32\perfc013.dat 2025-07-22 19:14 - 2025-07-22 19:14 - 000003068 _____ C:\WINDOWS\system32\Tasks\ASC_SkipUac_Erikv 2025-07-22 15:19 - 2025-07-24 11:56 - 000000000 ____D C:\FRST 2025-07-22 15:17 - 2025-07-22 15:17 - 002409472 _____ (Farbar) C:\Users\Erikv\OneDrive\Bureaublad\FRST64.exe 2025-07-22 14:15 - 2025-07-24 11:52 - 000012288 ___SH C:\DumpStack.log.tmp 2025-07-22 14:14 - 2015-01-29 18:21 - 000050320 _____ (Panda Security, S.L.) C:\WINDOWS\system32\Drivers\PSKMAD.sys 2025-07-22 14:13 - 2025-07-22 14:15 - 001268068 ____N C:\WINDOWS\Minidump\072225-8015-01.dmp 2025-07-22 14:07 - 2025-07-22 14:13 - 001342146 ____N C:\WINDOWS\Minidump\072225-8531-01.dmp 2025-07-22 14:02 - 2025-07-22 14:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Security 2025-07-22 14:02 - 2025-07-22 14:02 - 000000000 ____D C:\Program Files (x86)\Panda Security 2025-07-22 13:21 - 2025-07-22 13:21 - 000000000 ____D C:\AdwCleaner 2025-07-22 13:18 - 2025-07-22 13:18 - 000081272 _____ C:\Users\Erikv\OneDrive\Bureaublad\dds_DDS.txt 2025-07-22 13:18 - 2025-07-22 13:18 - 000007089 _____ C:\Users\Erikv\OneDrive\Bureaublad\dds_Attach.txt 2025-07-22 13:10 - 2025-01-09 15:18 - 000011768 _____ (Callback Technologies, Inc. - www.callback.com) C:\WINDOWS\system32\cbregistryevtmsg.dll 2025-07-22 13:10 - 2025-01-09 15:18 - 000011768 _____ (Callback Technologies, Inc. - www.callback.com) C:\WINDOWS\system32\cbprocessevtmsg.dll 2025-07-22 13:10 - 2025-01-09 15:18 - 000011768 _____ (Callback Technologies, Inc. - www.callback.com) C:\WINDOWS\system32\cbfilterevtmsg.dll 2025-07-22 12:43 - 2025-07-22 12:48 - 000011120 _____ C:\WINDOWS\system32\rtp.db 2025-07-22 12:41 - 2025-07-22 12:41 - 006353752 _____ (F-Secure Corporation) C:\Users\Erikv\OneDrive\Bureaublad\F-SecureOnlineScanner (1).exe 2025-07-22 12:20 - 2025-07-22 12:20 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task 2025-07-22 12:20 - 2025-07-22 12:20 - 000002139 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2025-07-22 12:20 - 2025-07-22 12:20 - 000000090 _____ C:\logUploaderSettings_temp.ini 2025-07-22 12:20 - 2025-07-22 12:20 - 000000090 _____ C:\logUploaderSettings.ini 2025-07-19 13:05 - 2025-07-19 13:05 - 000122570 _____ C:\Users\Erikv\OneDrive\Bureaublad\Aanvraag terugbetaling pedicure en preventieve voetverzorging_311.pdf 2025-07-19 11:34 - 2025-07-19 11:34 - 000000000 ____D C:\Program Files\Common Files\DESIGNER 2025-07-18 09:11 - 2025-07-18 09:11 - 000004206 _____ C:\WINDOWS\system32\Tasks\Opera GX scheduled Autoupdate 1710504980 2025-07-18 09:11 - 2025-07-18 09:11 - 000001420 _____ C:\Users\Erikv\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera GX-browser.lnk 2025-07-16 19:42 - 2025-07-16 19:42 - 000000138 _____ C:\Users\Erikv\OneDrive\Bureaublad\treinen naar Brussel.txt 2025-07-16 18:35 - 2025-07-16 19:58 - 000000000 ____D C:\Users\Erikv\OneDrive\Bureaublad\muziek om te MIXEN 2025-07-16 15:28 - 2025-07-16 15:28 - 039964280 _____ C:\Users\Erikv\OneDrive\Bureaublad\steun voor vaste stok.mp4 2025-07-16 15:15 - 2025-07-19 12:54 - 000000000 ____D C:\Users\Erikv\OneDrive\Bureaublad\mijn zilveren thee kan 2025-07-12 20:56 - 2025-03-15 08:35 - 000000000 ____D C:\Users\Erikv\OneDrive\Bureaublad\De Bassist Nederland No 71 - Januari-Februari-Maart 2025 2025-07-12 18:13 - 2025-07-12 18:13 - 000321658 _____ C:\Users\Erikv\OneDrive\Bureaublad\Voorstel van vereenvoudigde aangifte 2024.pdf 2025-07-11 19:04 - 2025-07-11 19:07 - 000000000 ____D C:\Users\Erikv\OneDrive\Bureaublad\trucs 2025-07-10 18:17 - 2025-07-23 15:00 - 000000000 ____D C:\WINDOWS\CbsTemp 2025-07-10 13:25 - 2025-07-11 12:58 - 000000000 ____D C:\Program Files (x86)\dotnet 2025-07-10 13:25 - 2025-07-10 13:25 - 000000000 ____D C:\Users\Erikv\.android 2025-07-10 13:25 - 2025-07-10 13:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Iriun Webcam 2025-07-10 13:25 - 2025-07-10 13:25 - 000000000 ____D C:\Program Files (x86)\Iriun Webcam 2025-07-10 13:25 - 2021-04-06 21:13 - 000046976 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\Drivers\iriuna0.sys 2025-07-10 13:24 - 2025-07-10 13:24 - 004002792 _____ (Iriun ) C:\Users\Erikv\OneDrive\Bureaublad\IriunWebcam-2.8.10.exe 2025-07-09 12:32 - 2025-07-09 12:32 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla 2025-07-02 20:20 - 2025-07-02 20:20 - 000130515 _____ C:\Users\Erikv\OneDrive\Bureaublad\Veelgestelde vragen KETO.pdf 2025-06-28 20:01 - 2025-06-28 20:01 - 000000000 ____D C:\WINDOWS\system32\ruxim 2025-06-27 11:36 - 2025-06-27 11:36 - 000073956 _____ C:\WINDOWS\SysWOW64\ctac.json 2025-06-27 11:36 - 2025-06-27 11:36 - 000073956 _____ C:\WINDOWS\system32\ctac.json 2025-06-27 11:36 - 2025-06-27 11:36 - 000033519 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json 2025-06-27 11:36 - 2025-06-27 11:36 - 000033519 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json 2025-06-25 14:14 - 2025-06-25 14:16 - 000000000 ____D C:\WINDOWS\system32\Tasks\WiseCleaner ==================== Een maand (gewijzigd) ================== (Als een item is opgenomen in de fixlist, wordt de map of het bestand verplaatst.) 2025-07-24 11:52 - 2025-06-13 14:31 - 000000208 _____ C:\WINDOWS\SysWOW64\AbBakConfig.dat 2025-07-24 11:52 - 2025-06-13 14:30 - 000000432 _____ C:\WINDOWS\SysWOW64\winsevr.dat 2025-07-24 11:52 - 2024-12-17 22:14 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2025-07-24 11:52 - 2024-12-17 22:13 - 000016644 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2 2025-07-24 11:52 - 2024-12-17 22:11 - 000001607 _____ C:\WINDOWS\system32\config\VSMIDK 2025-07-24 11:52 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps 2025-07-24 11:52 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ServiceState 2025-07-24 11:52 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness 2025-07-24 11:52 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2025-07-24 11:52 - 2023-11-23 21:09 - 000000000 ____D C:\ProgramData\boost_interprocess 2025-07-23 19:42 - 2024-04-01 09:21 - 000786432 _____ C:\WINDOWS\system32\config\BBI 2025-07-23 19:42 - 2023-07-07 13:16 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin 2025-07-23 19:32 - 2025-04-06 18:45 - 000000000 ____D C:\Users\Erikv\AppData\Local\Aiseesoft Studio 2025-07-23 19:20 - 2024-12-28 20:39 - 000000000 ____D C:\Users\Erikv\AppData\Local\AMD_Common 2025-07-23 18:55 - 2023-07-07 19:16 - 000000000 ____D C:\ProgramData\Spotnet 2025-07-23 18:20 - 2023-07-07 13:30 - 000000000 ____D C:\Users\Erikv\AppData\Local\D3DSCache 2025-07-23 15:55 - 2023-07-08 11:47 - 000000000 ____D C:\Users\Erikv\AppData\Local\QuickPar 2025-07-23 14:00 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp 2025-07-23 13:41 - 2024-12-17 22:11 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2025-07-23 13:10 - 2023-07-07 13:19 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd 2025-07-23 12:55 - 2025-02-07 09:11 - 000000000 ____D C:\WINDOWS\system32\Tasks\Symantec Endpoint Protection 2025-07-23 12:55 - 2023-07-07 14:11 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy 2025-07-23 12:49 - 2024-12-17 22:14 - 001784086 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2025-07-23 12:49 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF 2025-07-23 12:45 - 2025-02-09 10:02 - 000002274 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2025-07-22 19:26 - 2024-12-13 18:03 - 000000000 ____D C:\ProgramData\IObit 2025-07-22 19:26 - 2024-11-29 14:23 - 000000000 ____D C:\Users\Erikv\AppData\Roaming\IObit 2025-07-22 19:23 - 2024-04-01 09:26 - 000000000 ____D C:\PerfLogs 2025-07-22 19:23 - 2023-09-01 13:23 - 000000000 ____D C:\Users\Erikv\AppData\Roaming\Microsoft\Office 2025-07-22 19:17 - 2024-11-29 14:23 - 000001008 _____ C:\ProgramData\pdinst.ini 2025-07-22 19:15 - 2024-12-17 22:14 - 000003278 _____ C:\WINDOWS\system32\Tasks\ASC_PerformanceMonitor 2025-07-22 19:15 - 2024-11-29 14:23 - 000000000 ____D C:\ProgramData\ProductData3 2025-07-22 16:12 - 2025-06-08 16:14 - 000000000 ____D C:\Users\Erikv\OneDrive\Bureaublad\House 2025-07-22 14:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\registration 2025-07-22 14:21 - 2024-12-17 15:52 - 000000000 ____D C:\Users\Erikv 2025-07-22 14:15 - 2024-12-29 19:16 - 000000000 ____D C:\WINDOWS\Minidump 2025-07-22 14:07 - 2024-12-29 19:17 - 002205833 ____N C:\WINDOWS\Minidump\072225-9359-01.dmp 2025-07-22 14:07 - 2023-09-02 12:36 - 000000000 ____D C:\Program Files\Microsoft OneDrive 2025-07-22 12:48 - 2024-04-01 09:26 - 000000000 ___HD C:\WINDOWS\ELAMBKUP 2025-07-22 12:47 - 2025-05-09 16:01 - 000000000 ___HD C:\Users\Erikv\AppData\Roaming\IsClosed 2025-07-22 12:35 - 2023-08-11 13:33 - 000000000 ____D C:\Users\Erikv\AppData\Local\CrashDumps 2025-07-22 12:28 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps.tmp 2025-07-22 12:20 - 2025-02-06 08:14 - 000003546 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-772462493-3368024724-2760790539-1001 2025-07-22 12:20 - 2024-12-17 22:14 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-772462493-3368024724-2760790539-1001 2025-07-21 16:28 - 2025-06-11 12:47 - 000000000 ____D C:\Users\Erikv\OneDrive\Bureaublad\map cullinair 2025-07-21 16:26 - 2023-09-01 13:23 - 000000000 ____D C:\Users\Erikv\AppData\Roaming\Microsoft\Word 2025-07-19 11:34 - 2024-12-02 11:33 - 000000000 ____D C:\Program Files\Microsoft Office 2025-07-18 14:14 - 2023-09-07 14:34 - 000000000 ____D C:\Users\Erikv\AppData\Roaming\dvdcss 2025-07-18 10:50 - 2023-07-07 13:16 - 000002453 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk 2025-07-14 12:19 - 2025-05-06 12:39 - 000000000 ____D C:\Program Files\MusicLab 2025-07-14 12:18 - 2025-05-06 12:39 - 000000000 ____D C:\Program Files\Steinberg 2025-07-12 18:03 - 2023-08-15 13:37 - 000000000 ____D C:\ProgramData\CanonIJPLM 2025-07-11 18:23 - 2024-12-22 16:52 - 000000000 ____D C:\Program Files (x86)\OSTotoSoft 2025-07-11 18:21 - 2025-06-11 15:00 - 000000000 ____D C:\Users\Erikv\Heaven 2025-07-11 18:20 - 2025-06-10 12:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blackmagic Design 2025-07-11 18:20 - 2025-06-10 12:49 - 000000000 ____D C:\Program Files (x86)\Blackmagic Design 2025-07-11 18:19 - 2025-06-10 12:51 - 000000000 ____D C:\Program Files\Blackmagic Design 2025-07-11 18:18 - 2023-05-29 08:30 - 000000000 ____D C:\AMD 2025-07-11 18:17 - 2025-06-09 15:40 - 000000000 ____D C:\Users\Erikv\AppData\Local\PrivaZer 2025-07-11 18:16 - 2025-06-07 12:38 - 000001184 _____ C:\Users\Erikv\.lmmsrc.xml 2025-07-11 18:12 - 2025-05-05 11:51 - 000000000 ____D C:\Users\Erikv\AppData\Roaming\NCH Software 2025-07-11 18:12 - 2025-04-26 18:45 - 000000000 ____D C:\ProgramData\NCH Software 2025-07-11 18:12 - 2025-04-26 18:45 - 000000000 ____D C:\Program Files (x86)\NCH Software 2025-07-11 18:12 - 2024-12-17 22:14 - 000000000 ____D C:\WINDOWS\system32\Tasks\NCH Software 2025-07-11 18:11 - 2025-06-06 14:22 - 000000000 ____D C:\Users\Erikv\OneDrive\Documenten\DJUCED 2025-07-11 18:01 - 2025-05-05 15:24 - 000000000 ___RD C:\Users\Erikv\OneDrive\Documenten\MAGIX 2025-07-11 17:57 - 2025-05-09 15:23 - 000000000 ____D C:\ProgramData\Steinberg 2025-07-11 17:01 - 2025-04-24 13:02 - 000000000 ____D C:\Users\Erikv\AppData\Roaming\DJ.Studio 2025-07-11 17:00 - 2025-05-05 15:24 - 000000000 ____D C:\ProgramData\MAGIX 2025-07-11 17:00 - 2025-05-05 15:24 - 000000000 ____D C:\Program Files (x86)\MAGIX 2025-07-11 16:59 - 2025-05-05 15:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX 2025-07-11 16:55 - 2025-05-08 17:33 - 000000000 ____D C:\Users\Public\Pro Tools 2025-07-11 16:34 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\LiveKernelReports 2025-07-11 12:58 - 2023-11-24 21:03 - 000000000 ____D C:\Program Files\dotnet 2025-07-11 12:58 - 2023-09-21 15:49 - 000000000 ____D C:\ProgramData\Package Cache 2025-07-10 20:06 - 2025-06-10 12:07 - 001708760 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2025-07-10 20:04 - 2024-04-01 18:15 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView 2025-07-10 20:04 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2025-07-10 20:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS 2025-07-10 20:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup 2025-07-10 20:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism 2025-07-10 20:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources 2025-07-10 20:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup 2025-07-10 20:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates 2025-07-10 20:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz 2025-07-10 20:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism 2025-07-10 20:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr 2025-07-10 18:17 - 2023-08-09 15:28 - 000000000 ____H C:\$WINRE_BACKUP_PARTITION.MARKER 2025-07-10 12:55 - 2024-12-11 10:38 - 000000000 ____D C:\Program Files\Mozilla Firefox 2025-07-10 12:55 - 2023-07-07 13:41 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2025-07-09 14:41 - 2023-07-07 13:30 - 000000000 ____D C:\Users\Erikv\AppData\Local\Packages 2025-07-09 13:00 - 2024-12-17 22:14 - 003384320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2025-07-09 12:32 - 2023-07-07 13:41 - 000001074 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2025-07-07 12:28 - 2024-03-20 11:37 - 000000000 ____D C:\Users\Erikv\AppData\Roaming\Microsoft\Excel 2025-06-28 20:02 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata 2025-06-28 20:02 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe 2025-06-28 20:02 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield 2025-06-28 20:01 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata 2025-06-28 20:01 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe 2025-06-28 20:01 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser 2025-06-28 20:01 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences 2025-06-28 20:01 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents 2025-06-28 20:01 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Provisioning 2025-06-28 20:01 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions 2025-06-28 20:01 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing ==================== Bestanden in de root van sommige mappen ======== 2023-11-23 17:30 - 2023-11-23 17:30 - 000685392 _____ (Mozilla Foundation) C:\ProgramData\freebl3.dll 2023-11-23 17:30 - 2023-11-23 17:30 - 000608080 _____ (Mozilla Foundation) C:\ProgramData\mozglue.dll 2023-11-23 17:30 - 2023-11-23 17:30 - 000450024 _____ (Microsoft Corporation) C:\ProgramData\msvcp140.dll 2023-11-23 17:30 - 2023-11-23 17:30 - 002046288 _____ (Mozilla Foundation) C:\ProgramData\nss3.dll 2023-11-23 17:30 - 2023-11-23 17:30 - 000257872 _____ (Mozilla Foundation) C:\ProgramData\softokn3.dll 2023-11-23 17:30 - 2023-11-23 17:30 - 000080880 _____ (Microsoft Corporation) C:\ProgramData\vcruntime140.dll 2024-01-31 20:53 - 2024-01-31 20:53 - 000077366 _____ () C:\Users\Erikv\SDR-scan ,wo jan 31 2024 19-52-41.DAT 2023-11-18 21:54 - 2023-11-18 21:54 - 072974704 _____ () C:\Users\Erikv\SDR-scan ,za nov 18 2023 20-54-32.DAT 2025-05-09 16:01 - 2024-11-13 03:12 - 000000098 _____ () C:\Users\Public\N.vbs 2024-04-10 17:00 - 2025-07-11 16:35 - 000023631 _____ () C:\Users\Erikv\AppData\Roaming\.BEID_0.log 2023-11-23 21:09 - 2023-11-23 21:09 - 000000012 _____ () C:\Users\Erikv\AppData\Roaming\2457fe3357cbf1220231e8917326f70f 2024-08-24 13:26 - 2024-09-28 16:10 - 000099384 _____ () C:\Users\Erikv\AppData\Roaming\inst.exe 2024-08-24 13:26 - 2024-09-28 16:10 - 000007859 _____ () C:\Users\Erikv\AppData\Roaming\pcouffin.cat 2024-08-24 13:26 - 2024-09-28 16:10 - 000001167 _____ () C:\Users\Erikv\AppData\Roaming\pcouffin.inf 2024-08-24 13:26 - 2024-09-28 16:10 - 000000055 _____ () C:\Users\Erikv\AppData\Roaming\pcouffin.log 2024-08-24 13:26 - 2024-09-28 16:10 - 000082816 _____ (VSO Software) C:\Users\Erikv\AppData\Roaming\pcouffin.sys 2025-04-24 17:04 - 2025-04-24 17:04 - 000000012 ___SH () C:\Users\Erikv\AppData\Roaming\windata1.xfd 2025-06-11 15:00 - 2025-06-11 15:00 - 001065984 _____ () C:\Users\Erikv\AppData\Local\file__0.localstorage 2024-09-28 15:54 - 2024-09-28 15:54 - 000000039 _____ () C:\Users\Erikv\AppData\Local\kritadisplayrc 2024-09-28 15:54 - 2024-09-28 15:54 - 000014168 _____ () C:\Users\Erikv\AppData\Local\kritarc 2025-01-04 16:59 - 2025-01-04 16:59 - 000000218 _____ () C:\Users\Erikv\AppData\Local\recently-used.xbel ==================== SigCheck ============================ (Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.) ==================== Einde van FRST.txt ========================