Extra scanresultaten van Farbar Recovery Scan Tool (x64) Versie: 20-11-2025 Gestart door dell (30-11-2025 14:12:18) Gestart vanaf E:\Colors\Nodig frst Microsoft Windows 11 Pro Versie 25H2 26200.7171 (X64) (2024-11-24 06:43:01) Boot Modus: Normal ========================================================== ==================== Accounts: ============================= (Als een item is opgenomen in de fixlist, zal het worden verwijderd.) Administrator (S-1-5-21-3723417269-524966456-2744553021-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-3723417269-524966456-2744553021-503 - Limited - Disabled) dell (S-1-5-21-3723417269-524966456-2744553021-1001 - Administrator - Enabled) => C:\Users\dell Gast (S-1-5-21-3723417269-524966456-2744553021-501 - Limited - Disabled) WDAGUtilityAccount (S-1-5-21-3723417269-524966456-2744553021-504 - Limited - Disabled) ==================== Security Center ======================== (Als een item is opgenomen in de fixlist, zal het worden verwijderd.) AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Geïnstalleerde programma's ====================== (Alleen de adware-programma's met 'verborgen' vlag kunnen worden toegevoegd aan de fixlist om ze zichtbaar te maken. De adware-programma's moeten handmatig gedeïnstalleerd worden.) Aiarty Image Matting (HKU\S-1-5-21-3723417269-524966456-2744553021-1001\...\Aiarty Image Matting) (Version: 2.6 - Digiarty, Inc.) Alien Skin Eye Candy 5 Impact (HKLM-x32\...\EyeCandy5Impact) (Version: - ) Alien Skin Eye Candy 5 Nature (HKLM-x32\...\EyeCandy5Nature) (Version: - ) Alien Skin Eye Candy 5 Textures (HKLM-x32\...\EyeCandy5Textures) (Version: - ) Alien Skin Xenofex 2.0 (HKLM-x32\...\Xenofex2) (Version: - ) Corel Update Manager (HKLM-x32\...\{F29F38A1-49FE-45CB-941B-30517237E0FB}) (Version: 2.17.698 - Corel corporation) Hidden Eye Candy 4000 (HKLM-x32\...\Eye Candy 4000) (Version: - ) FM Patcher 1.01 (HKLM-x32\...\FM Patcher_is1) (Version: - AFH Systems & The Plugin Site) Gadwin PrintScreen (HKLM-x32\...\Gadwin PrintScreen) (Version: 4.7 - Gadwin Systems, Inc.) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 142.0.7444.176 - Google LLC) Image Resizer for Windows (64 bit) (HKLM\...\{2A1F3759-5792-469B-B895-7E29680F02F1}) (Version: 3.1.1.0 - Brice Lambson) Hidden Image Resizer for Windows (HKLM-x32\...\{92916BDF-74CB-479C-B69E-32EACB074FFE}) (Version: 3.1.1.0 - Brice Lambson) Hidden Image Resizer for Windows (HKLM-x32\...\{c624f5da-779e-4ccb-9ce1-34bc5ef0a6b9}) (Version: 3.1.1.0 - Brice Lambson) Jasc Animation Shop 3 (HKLM-x32\...\{7C4196CA-CA41-4F34-9C08-7724E7705D52}) (Version: 3.11 - Uw bedrijfsnaam) LibreOffice 25.2.3.2 (HKLM\...\{55CF6D12-B29A-4610-9E4A-1ACFE722B691}) (Version: 25.2.3.2 - The Document Foundation) Malwarebytes version 5.4.4.225 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.4.4.225 - Malwarebytes) Microsoft .NET Host - 6.0.36 (x64) (HKLM\...\{D6932D97-36F1-40B8-9CDC-CA8365B21000}) (Version: 48.144.23141 - Microsoft Corporation) Hidden Microsoft .NET Host - 8.0.22 (x64) (HKLM\...\{872CDB4B-5DDE-4297-BD19-C93B6C93E386}) (Version: 64.88.42551 - Microsoft Corporation) Hidden Microsoft .NET Host FX Resolver - 6.0.36 (x64) (HKLM\...\{A9E32B25-994B-4856-A12B-0EBED3050410}) (Version: 48.144.23141 - Microsoft Corporation) Hidden Microsoft .NET Host FX Resolver - 8.0.22 (x64) (HKLM\...\{7A046DD7-9D61-4C5D-8F5E-24EE192B1B6A}) (Version: 64.88.42551 - Microsoft Corporation) Hidden Microsoft .NET Runtime - 6.0.36 (x64) (HKLM\...\{C912E33F-956A-4921-9F55-CC11AE8F09AF}) (Version: 48.144.23141 - Microsoft Corporation) Hidden Microsoft .NET Runtime - 8.0.22 (x64) (HKLM\...\{C43A1A89-0CA5-43FD-BDC4-3B85DAD06A41}) (Version: 64.88.42551 - Microsoft Corporation) Hidden Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 142.0.3595.94 - Microsoft Corporation) Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 142.0.3595.94 - Microsoft Corporation) Hidden Microsoft OneDrive (HKU\S-1-5-21-3723417269-524966456-2744553021-1001\...\OneDriveSetup.exe) (Version: 25.206.1021.0003 - Microsoft Corporation) Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation) Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.29.30157 (HKLM-x32\...\{f9cb3860-8c4e-4a0d-bf66-b412efd1278e}) (Version: 14.29.30157.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.26.28720 (HKLM-x32\...\{86380aef-fd23-4fc3-8723-a98ccad8f2c6}) (Version: 14.26.28720.3 - Microsoft Corporation) Microsoft Visual C++ 2019 X64 Additional Runtime - 14.29.30157 (HKLM\...\{9D36D90A-C7A3-466D-BF9A-F6AA58E88148}) (Version: 14.29.30157 - Microsoft Corporation) Hidden Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.29.30157 (HKLM\...\{B5EF2F81-C53B-456B-B8CD-9E3ECA2B9CAA}) (Version: 14.29.30157 - Microsoft Corporation) Hidden Microsoft Visual C++ 2019 X86 Additional Runtime - 14.26.28720 (HKLM-x32\...\{2F69FB2B-2C48-491C-B249-22C1BDCE1117}) (Version: 14.26.28720 - Microsoft Corporation) Hidden Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.26.28720 (HKLM-x32\...\{31C9EB3A-5F0C-49E7-8E6C-D404E48F433D}) (Version: 14.26.28720 - Microsoft Corporation) Hidden Microsoft Windows Desktop Runtime - 6.0.36 (x64) (HKLM\...\{61D4736B-3325-4D4A-BD41-8BD206C6A86E}) (Version: 48.144.23186 - Microsoft Corporation) Hidden Microsoft Windows Desktop Runtime - 6.0.36 (x64) (HKLM-x32\...\{0532b8f2-12d7-43de-95fc-7b87006758a8}) (Version: 6.0.36.34217 - Microsoft Corporation) Microsoft Windows Desktop Runtime - 8.0.22 (x64) (HKLM\...\{4CCC1CCD-6FA3-4DD5-A06B-E94EA90094CF}) (Version: 64.88.42561 - Microsoft Corporation) Hidden Microsoft Windows Desktop Runtime - 8.0.22 (x64) (HKLM-x32\...\{a3899eef-6164-4d42-b8c3-95ae6a844821}) (Version: 8.0.22.35428 - Microsoft Corporation) Mozilla Firefox (x64 nl) (HKLM\...\Mozilla Firefox 143.0.4 (x64 nl)) (Version: 143.0.4 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 137.0.2 - Mozilla) Mozilla Thunderbird ESR (x64 nl) (HKLM\...\Mozilla Thunderbird 140.5.0 ESR (x64 nl)) (Version: 140.5.0 - Mozilla) Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 8.8.1 - Notepad++ Team) PSP Thumbnail Handler (HKLM\...\{2086A549-ED96-4dc9-BBE3-0538AB29ABEC}) (Version: 2.10.49 - Bot Productions) PSP Thumbnail Handler (HKLM-x32\...\{2086A549-ED96-4dc9-BBE3-0538AB29ABEC}) (Version: 2.10.49 - Bot Productions) Revo Uninstaller 2.6.2 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.6.2 - VS Revo Group, Ltd.) Setup (HKLM-x32\...\{856C0291-013D-4703-BB6F-D10AECC98A56}) (Version: 23.0.0.143 - Corel Corporation) Hidden Softtrack Adobe Blocker Firewall (HKLM-x32\...\{8C2414DC-910E-4DB2-AD23-1C22CA4FA971}) (Version: 6.0 - Softtrack) Hidden Softtrack Adobe Blocker Firewall (HKLM-x32\...\Softtrack Adobe Blocker Firewall 6.0) (Version: 6.0 - Softtrack) Speccy (HKLM\...\Speccy) (Version: 1.33 - Piriform) TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.59.5 - TeamViewer) WinRAR 6.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 6.21.0 - win.rar GmbH) Chrome apps: ============ Google Wachtwoordmanager (HKU\S-1-5-21-3723417269-524966456-2744553021-1001\...\a2e977a154f29e38929cdf9cce71c601) (Version: 1.0 - Google\Chrome) Packages: ========= @{MicrosoftWindows.55182690.Taskbar_1000.26100.3624.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-05-29] () @{MicrosoftWindows.55182690.Taskbar_1000.26100.3775.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-05-29] () @{MicrosoftWindows.55182690.Taskbar_1000.26100.3912.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-05-29] () @{MicrosoftWindows.58683691.InpApp_1000.26100.6725.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.58683691.InpApp/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.58683691.InpApp_cw5n1h2txyewy [2025-11-12] (Microsoft Windows) @{MicrosoftWindows.58683691.InpApp_1000.26100.6899.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.58683691.InpApp/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.58683691.InpApp_cw5n1h2txyewy [2025-11-12] (Microsoft Windows) @{MicrosoftWindows.58683691.InpApp_1000.26100.6901.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.58683691.InpApp/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.58683691.InpApp_cw5n1h2txyewy [2025-11-12] (Microsoft Windows) @{MicrosoftWindows.58683691.InpApp_1000.26100.7019.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.58683691.InpApp/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.58683691.InpApp_cw5n1h2txyewy [2025-11-12] (Microsoft Windows) @{MicrosoftWindows.59379618.InpApp_1000.26100.7019.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.59379618.InpApp/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy [2025-11-12] (Microsoft Windows) AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt [2025-11-29] (INTEL CORP) [Startup Task] Foto's (oudere versie) -> C:\Program Files\WindowsApps\Microsoft.PhotosLegacy_2024.11090.26001.0_x64__8wekyb3d8bbwe [2025-11-29] (Microsoft Corporation) Intel® Optane™ Memory and Storage Management -> C:\Program Files\WindowsApps\AppUp.IntelOptaneMemoryandStorageManagement_18.1.1042.0_x64__8j3eq9eme6ctt [2025-11-29] (INTEL CORP) Malwarebytes Anti-Malware -> C:\Program Files\Malwarebytes\Anti-Malware [2025-11-28] () Microsoft.LegacyPhotosMediaEngineAdd-on -> C:\Program Files\WindowsApps\Microsoft.LegacyPhotosMediaEngineAdd-on_2022.2206.0.0_x64__8wekyb3d8bbwe [2025-11-29] (Microsoft Corporation) Notepad++ -> C:\Program Files\Notepad++\contextMenu [2025-05-16] (Notepad++) Waves MaxxAudio Pro for Dell 2019 -> C:\Program Files\WindowsApps\WavesAudio.MaxxAudioProforDell2019_2.0.54.0_x64__fh4rh281wavaa [2025-11-29] (Waves Audio) WinAppRuntime.Main.1.5 -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Main.1.5_5001.373.1736.0_x64__8wekyb3d8bbwe [2025-11-29] (Microsoft Corp.) WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_8000.675.1142.0_x64__8wekyb3d8bbwe [2025-11-29] (Microsoft Corp.) Windows Feature Experience Pack -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.58683691.InpApp_cw5n1h2txyewy [2025-11-12] (Microsoft Windows) Windows Feature Experience Pack -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy [2025-11-12] (Microsoft Windows) WinRAR -> C:\Program Files\WinRAR [2024-10-31] (win.rar GmbH) ==================== Aangepaste CLSID (gefilterd): ============== (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) CustomCLSID: HKU\S-1-5-21-3723417269-524966456-2744553021-1001_Classes\CLSID\{47E6DCAF-41F8-441C-BD0E-A50D5FE6C4D1}\localserver32 -> C:\Users\dell\AppData\Local\Microsoft\OneDrive\25.206.1021.0003\OneDrive.Sync.Service.exe (Microsoft Corporation -> Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-3723417269-524966456-2744553021-1001_Classes\CLSID\{568D4515-60EB-4C3A-B758-A515D67FB6D1}\InprocServer32 -> C:\Program Files\Mozilla Thunderbird\notificationserver.dll (Mozilla Corporation -> Mozilla Foundation) CustomCLSID: HKU\S-1-5-21-3723417269-524966456-2744553021-1001_Classes\CLSID\{917E8742-AA3B-7318-FA12-10485FB322A2}\localserver32 -> C:\Users\dell\AppData\Local\Microsoft\OneDrive\25.206.1021.0003\OneDrive.Sync.Service.exe (Microsoft Corporation -> Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-3723417269-524966456-2744553021-1001_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC) ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2021-09-15] (Adobe Inc. -> ) ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2021-09-15] (Adobe Inc. -> ) ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2021-09-15] (Adobe Inc. -> ) ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2021-09-15] (Adobe Inc. -> ) ContextMenuHandlers1: [Image Resizer] -> {51B4D7E5-7568-4234-B4BB-47FB3C016A69} => C:\Program Files\Image Resizer for Windows\ShellExtensions.dll [2018-05-26] (Open Source Developer, Brice Lambson -> Brice Lambson) ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2025-11-28] (Malwarebytes Inc -> Malwarebytes) ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2021-09-15] (Adobe Inc. -> ) ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2025-11-28] (Malwarebytes Inc -> Malwarebytes) ==================== Codecs (gefilterd) ==================== (Als een item is opgenomen in de fixlist, zal het registeritem worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.) HKLM\...\Drivers32: [MidisrvTransferComplete] => 0 ==================== Snelkoppelingen & WMI ======================== (De items kunnen worden opgenomen in de fixlist.txt om hersteld of verwijderd te worden.) ShortcutWithArgument: C:\Users\dell\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_kajebgjangihfbkjfejcanhanjmmbcfd\Google Wachtwoordmanager.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=kajebgjangihfbkjfejcanhanjmmbcfd ShortcutWithArgument: C:\Users\dell\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-apps\Google Wachtwoordmanager.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=kajebgjangihfbkjfejcanhanjmmbcfd ShortcutWithArgument: C:\Users\dell\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Wachtwoordmanager.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=kajebgjangihfbkjfejcanhanjmmbcfd ShortcutWithArgument: C:\Users\dell\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\ff13ca23fee04978\Roos (Werk) - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 5" ShortcutWithArgument: C:\Users\dell\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\9501e18d7c2ab92e\LiesB54 (Werk) - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 2" ShortcutWithArgument: C:\Users\dell\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\53b77523eaecddc1\Microsoft Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation) -> --profile-directory="Profile 3" ShortcutWithArgument: C:\Users\dell\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\48499db33039e897\Corel (Werk) - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 4" ==================== Geladen Modules (gefilterd) ============= ==================== Alternate Data Streams (gefilterd) ======== ==================== Veilige Modus (gefilterd) ================== ==================== Bestandskoppeling (gefilterd) ================= ==================== Internet Explorer (gefilterd) ============= ==================== Hosts inhoud: ========================= (Indien nodig kan Hosts:-opdracht worden opgenomen in de fixlist om Hosts te resetten.) 2022-05-07 06:24 - 2024-11-20 19:57 - 000000829 _____ C:\WINDOWS\system32\drivers\etc\hosts ==================== Network =========================== (Momenteel is er geen automatische fix voor dit onderdeel.) DNS Servers: 84.116.46.22 - 84.116.46.23 Windows Firewall is ingeschakeld. Network Binding: ============= Ethernet: Realtek PCIe GbE Family Controller -> rt640x64.sys ==================== Andere gebieden =========================== (Momenteel is er geen automatische fix voor dit onderdeel.) HKU\S-1-5-21-3723417269-524966456-2744553021-1001\Control Panel\Desktop\\Wallpaper -> E:\PSP plaatjes 2\Screensavers\WinterWallpaperJanuary2AIbyLoriM12-24.jpg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 5) (TamperProtectionSource: 2) HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0) ==================== MSCONFIG/TASK MANAGER Uitgeschakelde items == (Als een item is opgenomen in de fixlist, zal het worden verwijderd.) HKLM\...\StartupApproved\Run: => "AdobeGCInvoker-1.0" HKLM\...\StartupApproved\Run32: => "Adobe CCXProcess" HKU\S-1-5-21-3723417269-524966456-2744553021-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_70097D053DE55DAC7494318E9E120B85" HKU\S-1-5-21-3723417269-524966456-2744553021-1001\...\StartupApproved\Run: => "OneDrive" ==================== Firewall regels (gefilterd) ================ (Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) FirewallRules: [{62EEF273-D964-4C5F-80A0-70134BCCA483}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) FirewallRules: [{5FF324D9-C726-4B0D-9D28-A50AE53C7D13}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) FirewallRules: [{09BCBB24-1CD0-4387-B26B-E95FEEC5D914}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) FirewallRules: [{B76F48A6-1362-4FE2-A91A-CCCF461D2813}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) FirewallRules: [{08A91D9E-4952-40C1-90C6-EAE49BA74FAB}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{6CD74913-6C2F-4413-A3FA-3041A7BD0C93}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{E0349B7A-C599-4D3D-9540-EDFB31E572BC}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) ==================== Herstelpunten ========================= 30-11-2025 07:46:29 Revo Uninstaller's restore point - Corel PaintShop Pro 2020 30-11-2025 07:49:07 Revo Uninstaller's restore point - Corel PaintShop Pro 2021 30-11-2025 07:51:53 Revo Uninstaller's restore point - Corel PaintShop Pro 2022 30-11-2025 07:54:14 Revo Uninstaller's restore point - Corel Paint Shop Pro Photo X2 30-11-2025 07:55:16 Revo Uninstaller's restore point - Corel PaintShop Pro 2023 30-11-2025 08:38:49 Revo Uninstaller's restore point - Corel PaintShop Pro 2022 30-11-2025 12:13:55 Revo Uninstaller's restore point - Corel PaintShop Pro 2019 30-11-2025 12:16:17 Revo Uninstaller's restore point - Corel PaintShop Pro 2020 30-11-2025 12:18:48 Revo Uninstaller's restore point - Corel PaintShop Pro 2021 30-11-2025 14:04:33 Revo Uninstaller's restore point - Corel PaintShop Pro 2020 30-11-2025 14:06:47 Revo Uninstaller's restore point - Corel PaintShop Pro 2020 ==================== Defecte Apparaatbeheer Apparaten ============ ==================== Eventlog fouten: ======================== Applicatiefouten: ================== Error: (11/30/2025 02:01:23 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Kan activeringscontext voor E:\Colors\2018-ult\psp2020_ult\psp2020_ult\Setup.exe niet maken. Fout in manifest of beleidsbestand op regel . Een onderdeelversie die nodig is voor de toepassing, conflicteert met een andere onderdeelversie die reeds actief is. Conflicterende onderdelen zijn: Onderdeel 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7019_none_3e06ffa0e335b8a8.manifest. Onderdeel 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7019_none_85b43677f7b1e1ae.manifest. Error: (11/30/2025 01:38:33 PM) (Source: VSS) (EventID: 8193) (User: ) Description: Fout in de Volume Shadow Copy-service: onverwachte fout bij het aanroepen van routine QueryFullProcessImageNameW. hr = 0x80070006, De ingang is ongeldig.. Bewerking: Asynchrone bewerking uitvoeren Context: Huidige status: DoSnapshotSet Error: (11/30/2025 01:38:25 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: De service Cryptografische services is mislukt tijdens het verwerken van aanroep OnIdentity() op het object System Writer. Details: AddWin32ServiceFiles: Unable to back up image of service Corel License Validation Service V2, Powered by arvato since QueryServiceConfig API failed System Error: Het systeem kan het opgegeven bestand niet vinden.. Error: (11/30/2025 01:38:25 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: De service Cryptografische services is mislukt tijdens het verwerken van aanroep OnIdentity() op het object System Writer. Details: AddWin32ServiceFiles: Unable to back up image of service ProtexisLicensing since QueryServiceConfig API failed System Error: Het systeem kan het opgegeven bestand niet vinden.. Error: (11/30/2025 01:33:17 PM) (Source: VSS) (EventID: 8193) (User: ) Description: Fout in de Volume Shadow Copy-service: onverwachte fout bij het aanroepen van routine QueryFullProcessImageNameW. hr = 0x80070006, De ingang is ongeldig.. Bewerking: Asynchrone bewerking uitvoeren Context: Huidige status: DoSnapshotSet Error: (11/30/2025 12:21:30 PM) (Source: MsiInstaller) (EventID: 11721) (User: DESKTOP-FRU6767) Description: Product: Corel Update Manager -- Error 1721. There is a problem with this Windows Installer package. A program required for this install to complete could not be run. Contact your support personnel or package vendor. Action: ScheduleCUH_UnInstall.4CC1E308_B8F0_4503_B0E6_1D9DBE2E1620, location: c:\Program Files (x86)\Corel\CUH\v2\, command: c:\Program Files (x86)\Corel\CUH\v2\CUH.exe -schedule -remove Error: (11/30/2025 12:21:28 PM) (Source: MsiInstaller) (EventID: 11721) (User: DESKTOP-FRU6767) Description: Product: Corel Update Manager -- Error 1721. There is a problem with this Windows Installer package. A program required for this install to complete could not be run. Contact your support personnel or package vendor. Action: ScheduleCUH_UnInstall.4CC1E308_B8F0_4503_B0E6_1D9DBE2E1620, location: c:\Program Files (x86)\Corel\CUH\v2\, command: c:\Program Files (x86)\Corel\CUH\v2\CUH.exe -schedule -remove Error: (11/30/2025 10:41:09 AM) (Source: SideBySide) (EventID: 78) (User: ) Description: Kan activeringscontext voor E:\Colors\2018-ult\psp2019_ult\Setup.exe niet maken. Fout in manifest of beleidsbestand op regel . Een onderdeelversie die nodig is voor de toepassing, conflicteert met een andere onderdeelversie die reeds actief is. Conflicterende onderdelen zijn: Onderdeel 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7019_none_3e06ffa0e335b8a8.manifest. Onderdeel 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.7019_none_85b43677f7b1e1ae.manifest. Systeemfouten: ============= Error: (11/30/2025 01:50:59 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1801) (User: NT AUTHORITY) Description: Secure Boot CA/keys need to be updated. This device signature information is included here. DeviceAttributes: FirmwareManufacturer:Dell Inc.;FirmwareVersion:1.35.0;OEMManufacturerName:Dell Inc.;OEMModelSKU:0930;OSArchitecture:amd64; BucketId: c1d92b10d4ae21346d621ef561a684079fbebe35dc6ffba8b0def6e2f57ca456 BucketConfidenceLevel: UpdateType: 0 HResult: 0 Error: (11/30/2025 01:38:32 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: De Windows-beveiligingsservice-service is onverwacht gestopt. Dit is 2 keer gebeurd. De volgende herstelbewerking zal over 60000 milliseconden worden uitgevoerd: Service opnieuw starten. Error: (11/30/2025 01:38:32 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: De Windows Search-service is onverwacht gestopt. Dit is 2 keer gebeurd. De volgende herstelbewerking zal over 30000 milliseconden worden uitgevoerd: Service opnieuw starten. Error: (11/30/2025 01:38:32 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: De TeamViewer-service is onverwacht gestopt. Dit is 2 keer gebeurd. De volgende herstelbewerking zal over 2000 milliseconden worden uitgevoerd: Service opnieuw starten. Error: (11/30/2025 01:38:32 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: De Realtek Audio Universal Service-service is onverwacht gestopt. Dit is 1 keer gebeurd. De volgende herstelbewerking zal over 0 milliseconden worden uitgevoerd: Service opnieuw starten. Error: (11/30/2025 01:33:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: De Corel License Validation Service V2, Powered by arvato-service is onverwacht beëindigd. Dit is nu 1 keer gebeurd. Error: (11/30/2025 01:33:16 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: De Windows-beveiligingsservice-service is onverwacht gestopt. Dit is 1 keer gebeurd. De volgende herstelbewerking zal over 60000 milliseconden worden uitgevoerd: Service opnieuw starten. Error: (11/30/2025 01:33:16 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: De Windows Search-service is onverwacht gestopt. Dit is 1 keer gebeurd. De volgende herstelbewerking zal over 30000 milliseconden worden uitgevoerd: Service opnieuw starten. Windows Defender: ================ Date: 2025-11-28 08:16:22 Description: Microsoft Defender Antivirus ŝςǻи ћąś вěëŋ šτόρрēđ вёƒōŗз çǿmρļėťίòⁿ.%π %ţЅςдŋ ĨÐ:%ь{46E4DA7C-80CD-4BC2-9E8D-6CA53ED74605}%ń %тŠςάņ Ţуρê:%вAntimalware%ⁿ %тЅсαŋ Ρăřàмĕтěřş:%ъSnelle scan%π %τÜşεř:%ьNT AUTHORITY\SYSTEM%й %ťŠŧоφ Яэåšбή:%ьΓΡÇ ¢øńñè¢ťїőň яύηďőщη Date: 2025-11-22 08:06:00 Description: Microsoft Defender Antivirus ŝςǻи ћąś вěëŋ šτόρрēđ вёƒōŗз çǿmρļėťίòⁿ.%π %ţЅςдŋ ĨÐ:%ь{049DCC74-4CCB-48C6-A07E-30642A4BDA88}%ń %тŠςάņ Ţуρê:%вAntimalware%ⁿ %тЅсαŋ Ρăřàмĕтěřş:%ъSnelle scan%π %τÜşεř:%ьNT AUTHORITY\SYSTEM%й %ťŠŧоφ Яэåšбή:%ьΓΡÇ ¢øńñè¢ťїőň яύηďőщη Date: 2025-11-20 17:03:57 Description: Microsoft Defender Antivirus heeft malware of andere mogelijke ongewenste software gedetecteerd. Zie het volgende voor meer informatie: https://go.microsoft.com/fwlink/?linkid=37020&name=HackTool:Win32/Keygen!rfn&threatid=2147692398&enterprise=0 Naam: HackTool:Win32/Keygen!rfn Ernst: Hoog Categorie: Hulpprogramma Pad: file:_E:\Colors\Corel PaintShop Pro 2023 Ultimate 25.2.0.58 (x64) Multilingual\Keygen\xfpsp2023.exe; process:_pid:9796,ProcessStart:134081280700215020 Detectieoorsprong: Lokale computer Detectietype: Snel pad Detectiebron: Systeem Gebruiker: NT AUTHORITY\SYSTEM Procesnaam: E:\Colors\Corel PaintShop Pro 2023 Ultimate 25.2.0.58 (x64) Multilingual\Keygen\xfpsp2023.exe Versie van beveiligingsinformatie: AV: 1.441.361.0, AS: 1.441.361.0, NIS: 0.0.0.0 Engineversie: AM: 1.1.25100.9002, NIS: 0.0.0.0 Date: 2025-11-20 14:32:59 Description: Microsoft Defender Antivirus heeft malware of andere mogelijke ongewenste software gedetecteerd. Zie het volgende voor meer informatie: https://go.microsoft.com/fwlink/?linkid=37020&name=HackTool:Win32/Keygen!rfn&threatid=2147692398&enterprise=0 Naam: HackTool:Win32/Keygen!rfn Ernst: Hoog Categorie: Hulpprogramma Pad: file:_E:\Colors\Corel PaintShop Pro 2023 Ultimate 25.2.0.58 (x64) Multilingual\Keygen\xfpsp2023.exe Detectieoorsprong: Lokale computer Detectietype: Snel pad Detectiebron: Realtime-beveiliging Gebruiker: DESKTOP-FRU6767\dell Procesnaam: C:\Windows\explorer.exe Versie van beveiligingsinformatie: AV: 1.441.353.0, AS: 1.441.353.0, NIS: 1.441.353.0 Engineversie: AM: 1.1.25100.9002, NIS: 1.1.25100.9002 Date: 2025-11-12 08:12:33 Description: Microsoft Defender Antivirus ŝςǻи ћąś вěëŋ šτόρрēđ вёƒōŗз çǿmρļėťίòⁿ.%π %ţЅςдŋ ĨÐ:%ь{A6417646-FE20-4AF9-AEFC-A6AF4A90D2A4}%ń %тŠςάņ Ţуρê:%вAntimalware%ⁿ %тЅсαŋ Ρăřàмĕтěřş:%ъSnelle scan%π %τÜşεř:%ьNT AUTHORITY\SYSTEM%й %ťŠŧоφ Яэåšбή:%ьŔΡČ çōŋňэčţïοñ гυлďσẅη Event[0] Date: 2025-09-18 07:51:44 Description: Microsoft Defender Antivirus heeft een fout ontdekt tijdens het bijwerken van beveiligingsinformatie. Nieuwe versie van beveiligingsinformatie: Vorige versie van beveiligingsinformatie: 1.435.549.0 Updatebron: Microsoft-updateserver Type beveiligingsinformatie: AntiVirus Updatetype: Volledig Gebruiker: NT AUTHORITY\SYSTEM Huidige engineversie: Vorige engineversie: 1.1.25070.4 Foutcode: 0x80240022 Foutbeschrijving: Er kan niet naar definitie-updates worden gezocht. CodeIntegrity: =============== Date: 2025-11-23 07:59:54 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume8\Windows\System32\win32u.dll because the set of per-page image hashes could not be found on the system. Date: 2025-07-23 17:38:42 Description: Code Integrity determined that a process (\Device\HarddiskVolume8\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume8\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_dab41b49c861231e\igd10iumd64.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2025-07-23 17:35:43 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume8\Program Files\Safe Online\epp\Endpoint Protection SDK\amsi\x64\avamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. ==================== Geheugen info =========================== BIOS: Dell Inc. 1.35.0 09/04/2025 Moederbord: Dell Inc. 07WP95 Processor: Intel(R) Core(TM) i5-9500 CPU @ 3.00GHz Percentage geheugen in gebruik: 38% Totaal fysiek RAM-geheugen: 16193.07 MB Beschikbaar fysiek RAM-geheugen: 9939.87 MB Totaal Virtueel geheugen: 17217.07 MB Beschikbaar Virtueel geheugen: 12396.65 MB ==================== Schijven ================================ Drive c: () (Fixed) (Total:476.07 GB) (Free:346.71 GB) (Model: Lexar SSD NM620 512GB) NTFS Drive e: (Lokale schijf) (Fixed) (Total:466.01 GB) (Free:273.32 GB) (Model: ST1000VX000-1CU162) NTFS Drive f: (Lokale schijf ) (Fixed) (Total:464.91 GB) (Free:245.42 GB) (Model: ST1000VX000-1CU162) NTFS Drive g: (Seagate Basic) (Fixed) (Total:931.51 GB) (Free:296.79 GB) (Model: Seagate Basic SCSI Disk Device) NTFS \\?\Volume{79cb61b2-8aed-4c46-8fb7-976cfaef89cb}\ () (Fixed) (Total:0.49 GB) (Free:0.03 GB) NTFS \\?\Volume{8fcc42ed-b87c-4857-be58-92fda633bf5e}\ () (Fixed) (Total:0.75 GB) (Free:0.14 GB) NTFS \\?\Volume{ddb33e79-a4b6-4e69-b863-c7ef91c251d0}\ () (Fixed) (Total:0.09 GB) (Free:0.04 GB) FAT32 \\?\Volume{5667852e-337d-41bf-a9ae-f282911d1693}\ () (Fixed) (Total:0.09 GB) (Free:0.06 GB) FAT32 ==================== MBR & Partitietabel ==================== ========================================================== Disk: 0 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000) Partition: GPT. ========================================================== Disk: 1 (Protective MBR) (Size: 476.9 GB) (Disk ID: 00000000) Partition: GPT. ========================================================== Disk: 2 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 010481A9) Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS) ==================== Einde van Addition.txt =======================