Scanresultaten van Farbar Recovery Scan Tool (FRST) (x64) Versie: 25-07-2025 Gestart door theos (Beheerder) op DESKTOP-58V8LK1 (Dell Inc. Latitude E6420) (25-07-2025 15:48:28) Gestart vanaf C:\Users\theos\Desktop\FRST64.exe Geladen Profielen: theos Platform: Microsoft Windows 10 Pro N Versie 22H2 19045.6093 (X64) Taal: Nederlands (Nederland) Standaardbrowser: FF Boot Modus: Normal ==================== Processen (gefilterd) ================= (Als een item is opgenomen in de fixlist, zal het proces worden gesloten. Het bestand zal niet worden verplaatst.) (Alps Electric Co., LTD. -> Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe (C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE ->) (Canon Inc. -> CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE (C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe (C:\Program Files (x86)\Common Files\iMyFone\Components\Resident\LocalService.exe ->) () [Bestand niet getekend] C:\Program Files (x86)\Common Files\iMyFone\Components\Resident\MFResident.exe (C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe ->) (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe (C:\Program Files (x86)\hicloud\update_server\startUp.exe ->) (EZVIZ Inc. -> ) C:\Program Files (x86)\hicloud\update_server\SPUpDateServer.exe (C:\Program Files\DellTPad\Apoint.exe ->) (Alps Electric Co., LTD. -> Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe (C:\Program Files\DellTPad\Apoint.exe ->) (Alps Electric Co., LTD. -> Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe (C:\Program Files\DellTPad\HidMonitorSvc.exe ->) (Alps Electric Co., LTD. -> Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe (C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe (C:\Program Files\Mozilla Firefox\firefox.exe ->) (Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Firefox\crashhelper.exe (C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Canon Inc. -> CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe (Canon Inc. -> CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe <7> (explorer.exe ->) (Corel Corporation -> WinZip Computing) C:\Program Files\WinZip\WzPreloader.exe (explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <5> (explorer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (explorer.exe ->) (TomTom International B.V. -> TomTom) C:\Program Files (x86)\RLinkToolbox 3\RLinkToolbox.exe (EZVIZ Inc. -> ) C:\Program Files (x86)\hicloud\update_server\startUp.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <12> (nvvsvc.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (services.exe ->) (Alps Electric Co., LTD. -> Alps Electric Co., Ltd.) C:\Program Files\DellTPad\HidMonitorSvc.exe (services.exe ->) (Canon Inc. -> ) C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe (services.exe ->) (CyberLink -> ) C:\Program Files\CyberLink\Shared files\RichVideo64.exe (services.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe (services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe (services.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25050.5-0\MpDefenderCoreService.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25050.5-0\MsMpEng.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25050.5-0\NisSrv.exe (services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (services.exe ->) (Shenzhen iMyFone Technology Co., Ltd -> ) C:\Program Files (x86)\Common Files\iMyFone\Components\Resident\LocalService.exe (services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe (sihost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2502.2.0_x64__8wekyb3d8bbwe\CalculatorApp.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.6088_none_7e3cb1287c69f05e\TiWorker.exe ==================== Register (gefilterd) =================== (Als een item is opgenomen in de fixlist, zal het registeritem worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1795912 2015-07-23] (NVIDIA Corporation -> NVIDIA Corporation) HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [727896 2015-07-09] (Alps Electric Co., LTD. -> Alps Electric Co., Ltd.) HKLM\...\Run: [WinZip UN] => C:\Program Files\WinZip\WZUpdateNotifier.exe [3177592 2022-08-19] (Corel Corporation -> Corel Corporation) HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [9524616 2025-07-08] (Dropbox, Inc -> Dropbox, Inc.) HKLM-x32\...\Run: [SPUpDateServerrun] => C:\Program Files (x86)\hicloud\update_server\startUp.exe [14832 2015-09-10] (EZVIZ Inc. -> ) HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1313408 2017-07-05] (Canon Inc. -> CANON INC.) HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [235624 2015-01-09] (Canon Inc. -> CANON INC.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [752208 2025-04-05] (Oracle America, Inc. -> Oracle Corporation) HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restrictie <==== AANDACHT HKU\S-1-5-21-825253966-1261402205-3366386536-1001\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [123172920 2025-03-28] (Skype Software Sarl -> Skype Technologies S.A.) HKU\S-1-5-21-825253966-1261402205-3366386536-1001\...\Run: [Microsoft Edge Update] => C:\Users\theos\AppData\Local\Microsoft\EdgeUpdate\1.3.195.61\MicrosoftEdgeUpdateCore.exe [268856 2025-05-23] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-825253966-1261402205-3366386536-1001\...\Run: [RLinkToolbox.exe] => C:\Program Files (x86)\RLinkToolbox 3\RLinkToolbox.exe [1055680 2021-03-02] (TomTom International B.V. -> TomTom) HKU\S-1-5-21-825253966-1261402205-3366386536-1001\...\Run: [MicrosoftEdgeAutoLaunch_52AFAC4A5418D174EAD92F9C07E4E7F1] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4113480 2025-07-16] (Microsoft Corporation -> Microsoft Corporation) HKLM\...\Windows x64\Print Processors\Canon MG5700 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDCS.DLL [30208 2015-03-15] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\...\Print\Monitors\Canon BJ Language Monitor MG5700 series: C:\WINDOWS\system32\CNMLMCS.DLL [406528 2015-03-15] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\...\Print\Monitors\Canon BJNP Port: C:\WINDOWS\system32\CNMN6PPM.DLL [375296 2015-03-17] (CANON INC.) [Bestand niet getekend] HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\138.0.7204.169\Installer\chrmstp.exe [2025-07-25] (Google LLC -> Google LLC) AppInit_DLLs: C:\Windows\system32\nvinitx.dll => Geen bestand Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Preloader.lnk [2023-03-28] ShortcutTarget: WinZip Preloader.lnk -> C:\Program Files\WinZip\WzPreloader.exe (Corel Corporation -> WinZip Computing) HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restrictie <==== AANDACHT ==================== Geplande Taken (gefilterd) ================= (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) Task: {6AD1B3EA-00E6-42EA-A137-B911D354BAA0} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1580992 2025-03-21] (Adobe Inc. -> Adobe Inc.) Task: {811B6A56-F7DB-42B0-8BD7-2B0937C8ADB2} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [569416 2016-02-23] (Apple Inc. -> Apple Inc.) Task: {1B66B5BC-94E6-4E48-BB70-06FB91429C26} - System32\Tasks\DropboxSystem\DropboxUpdater\DropboxUpdaterTaskSystem123.0.6299.129{132F73EE-13E1-4C00-9D2B-5A4836DA77A4} => C:\Program Files\Dropbox\DropboxUpdater\123.0.6299.129\updater.exe [5898104 2025-05-26] (Dropbox, Inc -> Dropbox, Inc.) Task: {5B24CAE8-4D34-48F7-BF47-0A1E2ECF5C08} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem140.0.7273.0{9E5DD31E-85C6-442E-A118-A872F13645C7} => C:\Program Files (x86)\Google\GoogleUpdater\140.0.7273.0\updater.exe [6836832 2025-07-02] (Google LLC -> Google LLC) Task: {24663324-45F8-4DA3-8A1F-BCEAB5CA8CE5} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe [316632 2015-07-31] (Microsoft Corporation -> Microsoft Corporation) Task: {E7418CE0-BE40-4D93-966D-19709F603871} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [416432 2015-07-31] (Microsoft Corporation -> Microsoft Corporation) Task: {2E020A6E-D754-496D-A15E-F98CD8D141AB} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [416432 2015-07-31] (Microsoft Corporation -> Microsoft Corporation) Task: {4258C034-4E55-468C-A1BA-226CACD72BBA} - System32\Tasks\Microsoft\Windows\Clip\ClipESUConsumer => C:\WINDOWS\system32\ClipESUConsumer.exe [283008 2025-07-05] (Microsoft Windows -> Microsoft Corporation) Task: {C609591A-4620-4AE9-84AD-4CB5DB959B75} - System32\Tasks\Microsoft\Windows\Clip\ClipEsuConsumerProcessPreOrder => C:\WINDOWS\system32\ClipESUConsumer.exe [283008 2025-07-05] (Microsoft Windows -> Microsoft Corporation) Task: {28185BD2-C516-44E3-8C31-3B6CD2509897} - System32\Tasks\Microsoft\Windows\Clip\ClipEsuConsumerProcessRefund => C:\WINDOWS\system32\ClipESUConsumer.exe [283008 2025-07-05] (Microsoft Windows -> Microsoft Corporation) Task: {8974C4FD-19D6-41DB-887B-939E565F7275} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25050.5-0\MpCmdRun.exe [1757568 2025-06-21] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {809E1A3E-9C96-4C9B-A650-E43670531031} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25050.5-0\MpCmdRun.exe [1757568 2025-06-21] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {E8EB1A66-E34F-410F-8E3A-9F573EC2F5FC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25050.5-0\MpCmdRun.exe [1757568 2025-06-21] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {8E441249-F189-4C7C-8DA8-1AAE12C393B1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25050.5-0\MpCmdRun.exe [1757568 2025-06-21] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {FAC965EA-4783-43FC-9B6B-819E62DBC014} - System32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-825253966-1261402205-3366386536-1001Core{35585F5C-AE30-45B4-B02C-37A7E2E7F3FC} => C:\Users\theos\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [206256 2023-01-11] (Microsoft Corporation -> Microsoft Corporation) Task: {5876EF0B-62C3-4895-A92B-E14A1571FD95} - System32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-825253966-1261402205-3366386536-1001UA{9D957F38-B287-41F9-8FEB-2C4E2AC88F8A} => C:\Users\theos\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [206256 2023-01-11] (Microsoft Corporation -> Microsoft Corporation) Task: {375B0CD5-D087-405D-81E2-B374A368B588} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [694912 2025-07-25] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (de data item heeft 6 meer tekens). Task: {28F1F65E-F4D3-470D-9C0B-56CE9B5337A4} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-825253966-1261402205-3366386536-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [694912 2025-07-25] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (de data item heeft 6 meer tekens). Task: {A498E74D-A981-473B-AE60-F09D5199E5FD} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34944 2025-07-25] (Mozilla Corporation -> Mozilla Foundation) Task: {8FB39B9E-422B-4B50-B7D3-5CB8CFE2AE5C} - System32\Tasks\npcapwatchdog => C:\Program Files\Npcap\CheckStatus.bat [862 2019-04-30] () [Bestand niet getekend] Task: {E4E6217C-6A81-488A-AB45-B806C311FAED} - System32\Tasks\OneDrive Startup Task-S-1-5-21-825253966-1261402205-3366386536-1001 => C:\Users\theos\AppData\Local\Microsoft\OneDrive\25.122.0624.0004\OneDriveLauncher.exe [685432 2025-07-21] (Microsoft Corporation -> Microsoft Corporation) Task: {836E8A57-0624-42E4-8F9A-0F352D4E454A} - System32\Tasks\WinZip - Deduplicator - Afbeeldingen - theos => C:\Program Files\WinZip\WzBGTToolsManager64.exe [332368 2022-08-19] (Corel Corporation -> WinZip Computing) Task: {F75102F4-32D5-4834-93A9-A1EE1827C7AA} - System32\Tasks\WinZip - Deduplicator - Documenten - theos => C:\Program Files\WinZip\WzBGTToolsManager64.exe [332368 2022-08-19] (Corel Corporation -> WinZip Computing) Task: {2EB23B93-98E1-44BB-B75B-9595C4254C8A} - System32\Tasks\WinZip - Deduplicator - Downloads - theos => C:\Program Files\WinZip\WzBGTToolsManager64.exe [332368 2022-08-19] (Corel Corporation -> WinZip Computing) Task: {7442DED6-69FA-4768-96C4-824755C74D8C} - System32\Tasks\WinZip Update Notifier 1 => C:\Program Files\WinZip\WZUpdateNotifier.exe [3177592 2022-08-19] (Corel Corporation -> Corel Corporation) Task: {A50869E1-EE0D-45ED-A6CE-C4BBE6BC00F0} - System32\Tasks\WinZip Update Notifier 2 => C:\Program Files\WinZip\WZUpdateNotifier.exe [3177592 2022-08-19] (Corel Corporation -> Corel Corporation) Task: {3F3A4F50-7703-404E-B01C-EC1B9309D580} - System32\Tasks\WinZip Update Notifier 3 => C:\Program Files\WinZip\WZUpdateNotifier.exe [3177592 2022-08-19] (Corel Corporation -> Corel Corporation) Task: {3A41BFFF-628D-4901-915B-977D85144A3E} - System32\Tasks\WinZip Updater - theos => C:\Program Files\WinZip\WzUpdater.exe [441936 2022-08-19] (Corel Corporation -> ) (Als een item is opgenomen in de fixlist, wordt de taak (job) bestand verplaatst. Het bestand dat wordt uitgevoerd door de taak zal niet worden verplaatst.) ==================== Internet (gefilterd) ==================== (Als een item is opgenomen in de fixlist en een registeritem is, wordt het verwijderd of hersteld naar de standaard.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{3a4e43a8-a724-4c81-97f2-ac320f6b0743}: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{3a4e43a8-a724-4c81-97f2-ac320f6b0743}: [DhcpDomain] lan Tcpip\..\Interfaces\{3a4e43a8-a724-4c81-97f2-ac320f6b0743}\14E4E49454: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{3a4e43a8-a724-4c81-97f2-ac320f6b0743}\14E4E49454: [DhcpDomain] lan Tcpip\..\Interfaces\{3a4e43a8-a724-4c81-97f2-ac320f6b0743}\C496E6B637973702140502355647570702D202730353: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{3a4e43a8-a724-4c81-97f2-ac320f6b0743}\C496E6B637973702140502355647570702D202730353: [DhcpDomain] lan Tcpip\..\Interfaces\{3a4e43a8-a724-4c81-97f2-ac320f6b0743}\C496E6B63797370254874756E6465627023556475707: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{3a4e43a8-a724-4c81-97f2-ac320f6b0743}\C496E6B63797370254874756E6465627023556475707: [DhcpDomain] lan Tcpip\..\Interfaces\{5ab755e1-5e20-475d-997c-5919f170a191}: [DhcpNameServer] 192.168.1.1 Edge: ======= Edge Profile: C:\Users\theos\AppData\Local\Microsoft\Edge\User Data\Default [2025-07-25] Edge Notifications: Default -> hxxps://www.messenger.com Edge Extension: (Offline Documenten) - C:\Users\theos\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-06-11] Edge Extension: (Edge relevant text changes) - C:\Users\theos\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-25] FireFox: ======== FF DefaultProfile: 0438eodd.default FF ProfilePath: C:\Users\theos\AppData\Roaming\Mozilla\Firefox\Profiles\0438eodd.default [2021-02-12] FF ProfilePath: C:\Users\theos\AppData\Roaming\Mozilla\Firefox\Profiles\wvfaz9hr.default-release [2025-07-25] FF Homepage: Mozilla\Firefox\Profiles\wvfaz9hr.default-release -> hxxps://www.facebook.com/ FF Notifications: Mozilla\Firefox\Profiles\wvfaz9hr.default-release -> hxxps://www.humo.be; hxxps://nl.metrotime.be; hxxps://cpp9hum071bc738kuc4g.baseauthenticity.co.in; hxxps://47swi13izsi4vx.baseauthenticity.co.in; hxxps://qlodp1dkr5387j.baseauthenticity.co.in; hxxps://cvvpop6071bc73aigcvg.stabilizeconnection.co.in; hxxps://r22y4uro2by1wz.stabilizeconnection.co.in; hxxps://yn9by8s7pkdpd5.stabilizeconnection.co.in FF Extension: (Map Route Pro & Search) - C:\Users\theos\AppData\Roaming\Mozilla\Firefox\Profiles\wvfaz9hr.default-release\Extensions\addon@maproutepro.com.xpi [2025-07-15] FF Extension: (eID Belgiƫ) - C:\Users\theos\AppData\Roaming\Mozilla\Firefox\Profiles\wvfaz9hr.default-release\Extensions\belgiumeid@eid.belgium.be.xpi [2021-03-04] FF Extension: (eID Extension) - C:\Users\theos\AppData\Roaming\Mozilla\Firefox\Profiles\wvfaz9hr.default-release\Extensions\eid-chrome-extension@e-contract.be.xpi [2021-12-12] [UpdateUrl:hxxps://www.e-contract.be/eid-chrome/releases/eid-chrome-extension-updates.json] FF Extension: (Connective signing extension) - C:\Users\theos\AppData\Roaming\Mozilla\Firefox\Profiles\wvfaz9hr.default-release\Extensions\{4f643bc8-78f5-49c6-8efd-78ee30289f0b}.xpi [2021-06-16] FF Plugin: @java.com/DTPlugin,version=11.451.0 -> C:\Program Files\Java\jre1.8.0_451\bin\dtplugin\npDeployJava1.dll [2025-04-05] (Oracle America, Inc. -> Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.451.0 -> C:\Program Files\Java\jre1.8.0_451\bin\plugin2\npjp2.dll [2025-04-05] (Oracle America, Inc. -> Oracle Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=3.0.12 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN) FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2025-07-15] (Adobe Inc. -> Adobe Systems Inc.) FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2019-07-02] (CANON INC.) [Bestand niet getekend] FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2020-03-17] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation) FF Plugin HKU\S-1-5-21-825253966-1261402205-3366386536-1001: connective.be/BrowserPlugin -> C:\Users\theos\AppData\Local\Connective\SigningFirefoxPlugin\npapi-plugin.dll [2021-07-05] (Connective n.v.) [Bestand niet getekend] Chrome: ======= CHR DefaultProfile: Default CHR Profile: C:\Users\theos\AppData\Local\Google\Chrome\User Data\Default [2025-07-07] CHR Notifications: Default -> hxxps://www.facebook.com; hxxps://www.hln.be CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\theos\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2025-07-07] CHR Extension: (Offline Documenten) - C:\Users\theos\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-07-07] CHR Extension: (Connective signing extension) - C:\Users\theos\AppData\Local\Google\Chrome\User Data\Default\Extensions\kclpjmhngbacampgcdojmiedamjbgjjm [2024-10-29] CHR Extension: (Betalingen via Chrome Web Store) - C:\Users\theos\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-13] CHR Profile: C:\Users\theos\AppData\Local\Google\Chrome\User Data\Guest Profile [2024-07-15] CHR Profile: C:\Users\theos\AppData\Local\Google\Chrome\User Data\System Profile [2024-12-02] CHR HKU\S-1-5-21-825253966-1261402205-3366386536-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] ==================== Services (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [174520 2025-03-21] (Adobe Inc. -> Adobe Inc.) R2 ApHidMonitorService; C:\Program Files\DellTPad\HidMonitorSvc.exe [87384 2015-07-09] (Alps Electric Co., LTD. -> Alps Electric Co., Ltd.) S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [5898104 2025-05-26] (Dropbox, Inc -> Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [5898104 2025-05-26] (Dropbox, Inc -> Dropbox, Inc.) R2 DbxSvc; C:\WINDOWS\System32\DbxSvc.exe [58984 2025-04-29] (Dropbox, Inc -> Dropbox, Inc.) S3 DropboxElevationService; C:\Program Files (x86)\Dropbox\Client\228.4.5567\DropboxElevationService.exe [1659280 2025-07-08] (Dropbox, Inc -> Dropbox, Inc.) S2 DropboxUpdaterInternalService123.0.6299.129; C:\Program Files\Dropbox\DropboxUpdater\123.0.6299.129\updater.exe [5898104 2025-05-26] (Dropbox, Inc -> Dropbox, Inc.) S2 DropboxUpdaterService123.0.6299.129; C:\Program Files\Dropbox\DropboxUpdater\123.0.6299.129\updater.exe [5898104 2025-05-26] (Dropbox, Inc -> Dropbox, Inc.) R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [243720 2025-07-25] (HP Inc. -> HP Inc.) R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [460488 2024-04-03] (Canon Inc. -> ) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9577376 2025-06-17] (Malwarebytes Inc -> Malwarebytes) S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [2788304 2025-01-11] (Malwarebytes Inc. -> Malwarebytes) R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25050.5-0\MpDefenderCoreService.exe [2071592 2025-06-21] (Microsoft Windows Publisher -> Microsoft Corporation) R2 MFLocalService; C:\Program Files (x86)\Common Files\iMyFone\Components\Resident\LocalService.exe [56128 2022-06-30] (Shenzhen iMyFone Technology Co., Ltd -> ) R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [386344 2010-08-19] (CyberLink -> ) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [917440 2025-06-05] (Microsoft Windows Publisher -> Microsoft Corporation) R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [14614960 2022-02-15] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) S3 VBoxSDS; C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe [805224 2023-01-11] (Oracle Corporation -> Oracle and/or its affiliates) R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25050.5-0\NisSrv.exe [4513624 2025-06-21] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25050.5-0\MsMpEng.exe [278328 2025-06-21] (Microsoft Windows Publisher -> Microsoft Corporation) ===================== Drivers (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) S3 ampa; C:\WINDOWS\system32\ampa.sys [38320 2017-02-28] (CHENGDU AOMEI Tech Co., Ltd. -> ) S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [76800 2019-12-07] (Microsoft Corporation) [Bestand niet getekend] S3 ddmdrv; C:\WINDOWS\system32\ddmdrv.sys [35760 2016-12-27] (CHENGDU AOMEI Tech Co., Ltd. -> ) S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.) R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [330112 2025-06-21] (Microsoft Windows -> Microsoft Corporation) R3 MarvinBus; C:\WINDOWS\System32\drivers\MarvinBus64.sys [261120 2005-09-23] (Microsoft Windows Hardware Compatibility Publisher -> Pinnacle Systems GmbH) R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [234072 2025-07-15] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes) S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [22120 2025-03-18] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [242752 2025-06-17] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes) S3 npcap; C:\WINDOWS\system32\DRIVERS\npcap.sys [69952 2020-02-03] (Insecure.Com LLC -> Insecure.Com LLC.) R2 NPF; C:\Program Files (x86)\Ezviz Studio\npf64.sys [36600 2022-09-03] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.) S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.) R0 stdcfltn; C:\WINDOWS\System32\DRIVERS\stdcfltn.sys [30352 2016-10-07] (STMICROELECTRONICS S.R.L. -> ST Microelectronics) R3 VBoxNetAdp; C:\WINDOWS\System32\drivers\VBoxNetAdp6.sys [254616 2023-01-11] (Oracle Corporation -> Oracle and/or its affiliates) R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [265488 2023-01-11] (Oracle Corporation -> Oracle and/or its affiliates) R1 VBoxSup; C:\WINDOWS\system32\DRIVERS\VBoxSup.sys [1061392 2023-01-11] (Oracle Corporation -> Oracle and/or its affiliates) S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [20032 2025-06-21] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [612768 2025-06-21] (Microsoft Windows -> Microsoft Corporation) R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [100744 2025-06-21] (Microsoft Windows -> Microsoft Corporation) ==================== NetSvcs (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) ==================== Een maand (aangemaakt) (gefilterd) ========= (Als een item is opgenomen in de fixlist, wordt de map of het bestand verplaatst.) 2025-07-25 15:46 - 2025-07-25 15:48 - 000060831 _____ C:\Users\theos\Desktop\Addition.txt 2025-07-25 15:44 - 2025-07-25 15:49 - 000029074 _____ C:\Users\theos\Desktop\FRST.txt 2025-07-25 15:44 - 2025-07-25 15:48 - 000000000 ____D C:\FRST 2025-07-25 15:43 - 2025-07-25 15:43 - 002409472 _____ (Farbar) C:\Users\theos\Desktop\FRST64.exe 2025-07-25 15:25 - 2025-07-25 15:42 - 000000000 ____D C:\Program Files\Mozilla Firefox 2025-07-14 12:59 - 2025-07-14 12:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 2025-07-05 08:40 - 2025-07-05 08:40 - 000023172 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json 2025-07-05 08:40 - 2025-07-05 08:40 - 000023172 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json ==================== Een maand (gewijzigd) ================== (Als een item is opgenomen in de fixlist, wordt de map of het bestand verplaatst.) 2025-07-25 15:48 - 2019-12-07 11:12 - 000000000 ____D C:\WINDOWS\INF 2025-07-25 15:47 - 2023-05-15 09:41 - 000000000 ____D C:\Users\theos\AppData\Local\Malwarebytes 2025-07-25 15:45 - 2022-02-11 15:51 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38 2025-07-25 15:43 - 2021-02-12 16:02 - 000000000 ____D C:\Users\theos\AppData\Roaming\Dropbox 2025-07-25 15:43 - 2021-02-12 16:01 - 000000000 ____D C:\Users\theos\AppData\Local\Dropbox 2025-07-25 15:42 - 2024-01-07 18:43 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla 2025-07-25 15:42 - 2024-01-07 18:31 - 000000000 ____D C:\WINDOWS\SystemTemp 2025-07-25 15:42 - 2021-02-12 13:21 - 000001069 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2025-07-25 15:42 - 2021-02-12 13:21 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2025-07-25 15:42 - 2021-02-12 12:30 - 000000000 ___RD C:\Users\theos\OneDrive 2025-07-25 15:36 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2025-07-25 15:32 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp 2025-07-25 15:30 - 2021-02-14 11:25 - 000000000 ____D C:\Users\theos\AppData\Roaming\Microsoft\Excel 2025-07-25 15:30 - 2021-02-14 11:17 - 000000000 ____D C:\Users\theos\AppData\Roaming\Microsoft\Word 2025-07-25 15:29 - 2024-01-07 18:43 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task 2025-07-25 15:29 - 2022-10-17 09:52 - 000002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk 2025-07-25 15:29 - 2022-10-17 09:52 - 000002061 _____ C:\Users\Public\Desktop\Adobe Acrobat.lnk 2025-07-25 15:24 - 2023-10-04 17:30 - 000000000 ____D C:\Program Files\RUXIM 2025-07-25 15:23 - 2023-08-14 14:08 - 000000000 ____D C:\Program Files\HPPrintScanDoctor 2025-07-25 15:22 - 2024-01-07 18:43 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP 2025-07-25 15:21 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps 2025-07-25 15:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness 2025-07-25 15:17 - 2021-02-14 15:38 - 000000000 ____D C:\Users\theos\AppData\Local\CrashDumps 2025-07-25 15:17 - 2021-02-13 14:06 - 000002267 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2025-07-25 15:17 - 2021-02-13 14:06 - 000002226 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2025-07-21 22:47 - 2024-01-07 18:37 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2025-07-21 21:58 - 2025-02-10 10:28 - 000003570 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-825253966-1261402205-3366386536-1001 2025-07-21 21:58 - 2024-01-07 18:43 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-825253966-1261402205-3366386536-1001 2025-07-21 21:58 - 2024-01-07 18:43 - 000003378 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-825253966-1261402205-3366386536-1001 2025-07-21 21:58 - 2024-01-07 18:38 - 000002381 _____ C:\Users\theos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2025-07-21 21:56 - 2023-10-12 17:13 - 000002448 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk 2025-07-21 21:55 - 2021-02-12 12:31 - 000000000 ___RD C:\Users\theos\OneDrive\Documenten\Afbeeldingen 2025-07-16 08:25 - 2021-02-14 15:05 - 000000000 ____D C:\Users\theos\AppData\Roaming\vlc 2025-07-15 13:57 - 2024-01-07 18:47 - 001771332 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2025-07-15 13:57 - 2019-12-07 17:12 - 000787220 _____ C:\WINDOWS\system32\perfh013.dat 2025-07-15 13:57 - 2019-12-07 17:12 - 000154312 _____ C:\WINDOWS\system32\perfc013.dat 2025-07-15 11:09 - 2024-01-07 18:43 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2025-07-15 11:09 - 2024-01-07 18:37 - 000543944 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2025-07-15 11:09 - 2022-03-08 16:46 - 000000000 ____D C:\Program Files\TeamViewer 2025-07-15 11:09 - 2021-02-12 12:22 - 000008192 ___SH C:\DumpStack.log.tmp 2025-07-15 11:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup 2025-07-15 11:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources 2025-07-15 11:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup 2025-07-15 11:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates 2025-07-15 11:08 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr 2025-07-15 11:08 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI 2025-07-15 11:05 - 2024-01-07 18:37 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2025-07-14 12:59 - 2021-02-12 16:01 - 000000000 ____D C:\Program Files (x86)\Dropbox 2025-07-05 09:52 - 2021-02-12 12:29 - 000000000 ____D C:\Users\theos\AppData\Local\Packages 2025-07-05 09:52 - 2020-11-19 01:34 - 000000000 ____D C:\ProgramData\Packages 2025-07-05 09:51 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\PrintDialog 2025-07-05 09:51 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2025-07-05 09:51 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism 2025-07-05 09:51 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences 2025-07-05 09:51 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe 2025-07-05 09:51 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz 2025-07-05 09:51 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism 2025-07-05 09:51 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellExperiences 2025-07-05 09:51 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellComponents 2025-07-05 09:51 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\servicing 2025-07-05 09:50 - 2021-07-23 14:33 - 000000000 ____D C:\ProgramData\CanonIJPLM 2025-07-05 08:54 - 2021-02-12 16:04 - 000000000 ___RD C:\Users\theos\Dropbox ==================== Bestanden in de root van sommige mappen ======== 2021-03-08 14:25 - 2022-05-14 14:12 - 000008665 _____ () C:\Users\theos\AppData\Roaming\.BEID_0.log 2021-03-03 10:30 - 2025-04-08 13:26 - 000022016 _____ () C:\Users\theos\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini ==================== SigCheck ============================ (Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.) ==================== Einde van FRST.txt ========================