Goedemiddag.
Onze laptop heeft totaal de snelheid verloren.
We gebruiken draadloos wifi, hebben genoeg ruimte op de schijven.
Programma's lopen regelmatig vast.
Scanresultaten van Farbar Recovery Scan Tool (FRST) (x64) Versie: 23-12-2017 01
Gestart door hzand (Beheerder) op LAPTOP (24-12-2017 11:19:51)
Gestart vanaf C:\Users\hzand\Desktop
Geladen Profielen: hzand (Beschikbare Profielen: hzand)
Platform: Windows 10 Home Versie 1709 16299.125 (X64) Taal: Nederlands (Nederland)
Internet Explorer Versie 11 (Standaardbrowser: Chrome)
Boot Modus: Normal
Handleiding voor Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials
==================== Processen (gefilterd) =================
(Als een item is opgenomen in de fixlist, het proces zal worden gesloten. Het bestand zal niet worden verplaatst.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.10.572.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Program Files\internet explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
==================== Register (gefilterd) ===========================
(Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.)
HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14040296 2015-08-28] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1794888 2015-06-29] (NVIDIA Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [246120 2017-12-22] (AVAST Software)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [235624 2015-01-09] (CANON INC.)
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1314432 2016-06-09] (CANON INC.)
HKU\S-1-5-21-2753020900-3500922324-953930212-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [10249048 2017-12-01] (Piriform Ltd)
HKU\S-1-5-21-2753020900-3500922324-953930212-1001\...\MountPoints2: {1c79c027-e739-11e7-8707-002454c032b8} - "F:\LaunchU3.exe"
==================== Internet (gefilterd) ====================
(Als een item is opgenomen in de fixlist, als het een registry item is wordt verwijderd of hersteld naar de standaard.)
Hosts: 0.0.0.0 serius.mwbsys.com
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{885688fd-ec89-420a-8ad4-2e6bf2530e61}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{a0ae96f8-39df-452b-8ffe-3f5bcd4c1279}: [DhcpNameServer] 192.168.0.1
Internet Explorer:
==================
HKU\S-1-5-21-2753020900-3500922324-953930212-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/productivityboss/s23950/index.html?n=783ACFDB&p2=^BYM^xdm018^S23950^nl&ptb=9E452EE8-7939-4043-910B-47D6EDC0CC8B&coid=309d9a2968f941c99bc3a692e55faaa5
SearchScopes: HKU\S-1-5-21-2753020900-3500922324-953930212-1001 -> {F6E70F4D-EBF8-4815-97E5-A5E67E4BA241} URL = hxxp://www.google.com/search?q={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2015-07-31] (Microsoft Corporation)
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2016-02-23] (CANON INC.)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL [2016-01-13] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2016-02-09] (Microsoft Corporation)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2016-02-23] (CANON INC.)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2016-01-13] (Microsoft Corporation)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2016-02-23] (CANON INC.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2016-02-23] (CANON INC.)
Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2016-02-09] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2016-02-09] (Microsoft Corporation)
FireFox:
========
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2015-10-29] (CANON INC.)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-02-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
Chrome:
=======
CHR Profile: C:\Users\hzand\AppData\Local\Google\Chrome\User Data\Default [2017-12-23]
CHR Extension: (Presentaties) - C:\Users\hzand\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
CHR Extension: (Documenten) - C:\Users\hzand\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Google Drive) - C:\Users\hzand\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-07-17]
CHR Extension: (YouTube) - C:\Users\hzand\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-07-17]
CHR Extension: (Avast SafePrice) - C:\Users\hzand\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2017-12-22]
CHR Extension: (Spreadsheets) - C:\Users\hzand\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (Offline Documenten) - C:\Users\hzand\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-07-17]
CHR Extension: (Avast Online Security) - C:\Users\hzand\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-12-14]
CHR Extension: (Betalingen via Chrome Web Store) - C:\Users\hzand\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
CHR Extension: (Gmail) - C:\Users\hzand\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-07-17]
CHR Extension: (Chrome Media Router) - C:\Users\hzand\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-12-16]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
==================== Services (gefilterd) ====================
(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7538536 2017-12-22] (AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [301168 2017-12-22] (AVAST Software)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [387144 2017-03-31] ()
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6234056 2017-11-01] (Malwarebytes)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.17123-0\NisSrv.exe [356176 2017-12-08] (Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.17123-0\MsMpEng.exe [105792 2017-12-08] (Microsoft Corporation)
S2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [X]
===================== Drivers (gefilterd) ======================
(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [185096 2017-12-22] (AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdrivera.sys [321512 2017-12-22] (AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsha.sys [199448 2017-12-22] (AVAST Software)
R0 aswblog; C:\WINDOWS\System32\drivers\aswbloga.sys [343768 2017-12-22] (AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniva.sys [57696 2017-12-22] (AVAST Software)
R1 aswHdsKe; C:\WINDOWS\System32\drivers\aswHdsKe.sys [149344 2017-12-22] (AVAST Software)
S3 aswHwid; C:\WINDOWS\System32\drivers\aswHwid.sys [46976 2017-12-22] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [146664 2017-12-22] (AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [110336 2017-12-22] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [84384 2017-12-22] (AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [1025176 2017-12-22] (AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [457400 2017-12-22] (AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [204456 2017-12-22] (AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [358672 2017-12-22] (AVAST Software)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [253880 2017-12-23] (Malwarebytes)
R1 MpKsl2454dc12; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D5B238B1-02B8-4949-9F05-E939879991DB}\MpKsl2454dc12.sys [58120 2017-12-13] (Microsoft Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [46072 2017-12-08] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [288848 2017-12-08] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [129616 2017-12-08] (Microsoft Corporation)
R3 ykinw8; C:\WINDOWS\System32\drivers\ykinx64.sys [288768 2017-09-29] (Marvell)
==================== NetSvcs (gefilterd) ===================
(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)
==================== Een Maand Aangemaakt bestanden en mappen ========
(Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)
2017-12-24 11:19 - 2017-12-24 11:20 - 000012483 _____ C:\Users\hzand\Desktop\FRST.txt
2017-12-24 10:23 - 2017-12-24 11:19 - 000000000 ____D C:\FRST
2017-12-24 10:22 - 2017-12-24 10:22 - 002392064 _____ (Farbar) C:\Users\hzand\Desktop\FRST64.exe
2017-12-24 10:20 - 2017-12-24 10:20 - 002392064 _____ (Farbar) C:\Users\hzand\Downloads\FRST64.exe.67qq3q4.partial
2017-12-24 10:18 - 2017-12-24 10:18 - 000000128 _____ C:\Users\hzand\Desktop\Nationaal Computer Forum.url
2017-12-24 10:12 - 2017-12-24 10:12 - 000000183 _____ C:\Users\hzand\Desktop\Helpmij.nl Forum.url
2017-12-22 18:05 - 2017-12-22 18:05 - 000061304 _____ () C:\WINDOWS\system32\Drivers\lpsport.sys
2017-12-22 17:46 - 2017-12-22 17:46 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2017-12-22 17:41 - 2017-12-22 17:41 - 000365680 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2017-12-19 19:24 - 2017-12-19 19:24 - 000000000 ___HD C:\$AV_ASW
2017-12-19 19:00 - 2017-12-19 19:00 - 000000072 ___SH C:\bootTel.dat
2017-12-19 18:54 - 2017-12-22 17:40 - 000149344 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHdsKe.sys
2017-12-13 17:25 - 2017-12-13 17:25 - 000000000 ____D C:\Users\hzand\AppData\Roaming\AVAST Software
2017-12-13 17:25 - 2017-12-13 17:25 - 000000000 ____D C:\Users\hzand\AppData\Local\CEF
2017-12-13 17:25 - 2017-12-13 17:25 - 000000000 ____D C:\ProgramData\SWCUTemp
2017-12-13 17:23 - 2017-12-22 17:42 - 000003994 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update
2017-12-13 17:23 - 2017-12-13 17:23 - 000061304 _____ () C:\WINDOWS\SMSS-PFROc236.tmp
2017-12-13 17:23 - 2017-12-13 17:23 - 000002013 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
2017-12-13 17:23 - 2017-12-13 17:23 - 000000000 ____D C:\WINDOWS\System32\Tasks\Avast Software
2017-12-13 17:23 - 2017-12-13 17:23 - 000000000 ____D C:\Program Files\Common Files\Avast Software
2017-12-13 17:22 - 2017-12-22 17:41 - 000457400 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2017-12-13 17:22 - 2017-12-22 17:41 - 000358672 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2017-12-13 17:22 - 2017-12-22 17:41 - 000204456 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2017-12-13 17:22 - 2017-12-22 17:41 - 000185096 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2017-12-13 17:22 - 2017-12-22 17:41 - 000146664 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2017-12-13 17:22 - 2017-12-22 17:41 - 000110336 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2017-12-13 17:22 - 2017-12-22 17:41 - 000084384 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2017-12-13 17:22 - 2017-12-22 17:41 - 000046976 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2017-12-13 17:22 - 2017-12-22 17:40 - 001025176 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2017-12-13 17:22 - 2017-12-22 17:40 - 000343768 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbloga.sys
2017-12-13 17:22 - 2017-12-22 17:40 - 000321512 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdrivera.sys
2017-12-13 17:22 - 2017-12-22 17:40 - 000199448 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsha.sys
2017-12-13 17:22 - 2017-12-22 17:40 - 000057696 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniva.sys
2017-12-13 17:18 - 2017-12-13 17:18 - 000000000 ____D C:\Program Files\AVAST Software
2017-12-13 17:17 - 2017-12-14 10:24 - 000000000 ____D C:\ProgramData\AVAST Software
2017-12-13 17:10 - 2017-12-19 19:24 - 000000000 ____D C:\Program Files\KMSpico
2017-12-13 17:10 - 2017-12-13 17:10 - 000003458 _____ C:\WINDOWS\System32\Tasks\AutoPico Daily Restart
2017-12-13 17:10 - 2017-12-13 17:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico
2017-12-13 17:10 - 2010-12-06 03:16 - 000090112 _____ (Vestris Inc.) C:\WINDOWS\system32\Vestris.ResourceLib.dll
2017-12-13 16:30 - 2017-12-13 16:30 - 000039189 _____ C:\Users\hzand\Downloads\All.Activation.Win.7-8-10.v15.iso.torrent
2017-12-13 16:14 - 2017-12-13 16:24 - 000000140 _____ C:\WINDOWS\Reimage.ini
2017-12-13 12:06 - 2017-12-23 18:53 - 000253880 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2017-12-12 19:24 - 2017-12-08 00:34 - 001925296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2017-12-12 19:24 - 2017-12-08 00:31 - 008590744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-12-12 19:24 - 2017-12-08 00:27 - 003903784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2017-12-12 19:24 - 2017-12-08 00:26 - 007385088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-12-12 19:24 - 2017-12-08 00:23 - 005905752 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2017-12-12 19:24 - 2017-12-08 00:21 - 007676296 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-12-12 19:24 - 2017-12-08 00:19 - 021352136 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-12-12 19:24 - 2017-12-07 23:55 - 001490328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2017-12-12 19:24 - 2017-12-07 23:39 - 006092664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2017-12-12 19:24 - 2017-12-07 23:34 - 003484840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2017-12-12 19:24 - 2017-12-07 23:32 - 020286120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-12-12 19:24 - 2017-12-07 23:23 - 006478528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-12-12 19:24 - 2017-12-07 23:22 - 025245696 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-12-12 19:24 - 2017-12-07 23:13 - 002905600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-12-12 19:24 - 2017-12-07 23:11 - 003669504 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-12-12 19:24 - 2017-12-07 23:10 - 018916352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-12-12 19:24 - 2017-12-07 23:10 - 006466048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-12-12 19:24 - 2017-12-07 23:08 - 019336192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-12-12 19:24 - 2017-12-07 23:06 - 023652864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-12-12 19:24 - 2017-12-07 23:05 - 006037504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-12-12 19:24 - 2017-12-07 23:04 - 003678208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-12-12 19:24 - 2017-12-07 23:02 - 007545344 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-12-12 19:24 - 2017-12-07 23:01 - 008097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-12-12 19:24 - 2017-12-07 23:01 - 004592640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-12-12 19:24 - 2017-12-07 23:00 - 004740608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-12-12 19:24 - 2017-12-07 23:00 - 002862080 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2017-12-12 19:24 - 2017-12-07 22:59 - 003121664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2017-12-12 19:24 - 2017-12-07 22:58 - 003211776 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2017-12-12 19:23 - 2017-12-08 07:52 - 000666112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DHolographicDisplay.dll
2017-12-12 19:23 - 2017-12-08 00:34 - 001634288 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2017-12-12 19:23 - 2017-12-08 00:34 - 000059800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bam.sys
2017-12-12 19:23 - 2017-12-08 00:31 - 000779440 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2017-12-12 19:23 - 2017-12-08 00:30 - 000166296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2017-12-12 19:23 - 2017-12-08 00:28 - 000710912 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2017-12-12 19:23 - 2017-12-08 00:28 - 000630752 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcrt.dll
2017-12-12 19:23 - 2017-12-08 00:27 - 004504456 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2017-12-12 19:23 - 2017-12-08 00:27 - 000184984 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2017-12-12 19:23 - 2017-12-08 00:26 - 002709200 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-12-12 19:23 - 2017-12-08 00:26 - 000525208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2017-12-12 19:23 - 2017-12-08 00:25 - 000374032 _____ (Microsoft Corporation) C:\WINDOWS\system32\vac.exe
2017-12-12 19:23 - 2017-12-08 00:24 - 000705944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2017-12-12 19:23 - 2017-12-08 00:24 - 000437144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2017-12-12 19:23 - 2017-12-08 00:24 - 000246168 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-12-12 19:23 - 2017-12-08 00:23 - 000677272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-12-12 19:23 - 2017-12-08 00:22 - 001003104 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2017-12-12 19:23 - 2017-12-08 00:22 - 000979352 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2017-12-12 19:23 - 2017-12-08 00:22 - 000137544 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2017-12-12 19:23 - 2017-12-08 00:22 - 000129432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvsocket.sys
2017-12-12 19:23 - 2017-12-08 00:20 - 001170000 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-12-12 19:23 - 2017-12-08 00:16 - 001776272 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2017-12-12 19:23 - 2017-12-08 00:16 - 000603920 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2017-12-12 19:23 - 2017-12-08 00:15 - 001426152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2017-12-12 19:23 - 2017-12-08 00:15 - 000721592 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2017-12-12 19:23 - 2017-12-08 00:14 - 000571288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2017-12-12 19:23 - 2017-12-08 00:12 - 000401304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2017-12-12 19:23 - 2017-12-08 00:10 - 000362904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2017-12-12 19:23 - 2017-12-07 23:58 - 000123512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2017-12-12 19:23 - 2017-12-07 23:57 - 000649304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2017-12-12 19:23 - 2017-12-07 23:56 - 001528904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2017-12-12 19:23 - 2017-12-07 23:55 - 000097144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll
2017-12-12 19:23 - 2017-12-07 23:37 - 001145104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2017-12-12 19:23 - 2017-12-07 23:36 - 000769096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcrt.dll
2017-12-12 19:23 - 2017-12-07 23:34 - 002192112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2017-12-12 19:23 - 2017-12-07 23:33 - 000747416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2017-12-12 19:23 - 2017-12-07 23:33 - 000592280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2017-12-12 19:23 - 2017-12-07 23:31 - 001522176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2017-12-12 19:23 - 2017-12-07 23:31 - 001246432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2017-12-12 19:23 - 2017-12-07 23:31 - 000982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2017-12-12 19:23 - 2017-12-07 23:13 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
2017-12-12 19:23 - 2017-12-07 23:12 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2017-12-12 19:23 - 2017-12-07 23:12 - 000202240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2017-12-12 19:23 - 2017-12-07 23:12 - 000101376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscript.ocx
2017-12-12 19:23 - 2017-12-07 23:10 - 001313792 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2017-12-12 19:23 - 2017-12-07 23:10 - 000536064 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2017-12-12 19:23 - 2017-12-07 23:10 - 000250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2017-12-12 19:23 - 2017-12-07 23:10 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itss.dll
2017-12-12 19:23 - 2017-12-07 23:10 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2017-12-12 19:23 - 2017-12-07 23:10 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2017-12-12 19:23 - 2017-12-07 23:09 - 001663488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\batmeter.dll
2017-12-12 19:23 - 2017-12-07 23:09 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll
2017-12-12 19:23 - 2017-12-07 23:09 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscript.exe
2017-12-12 19:23 - 2017-12-07 23:09 - 000143360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscript.exe
2017-12-12 19:23 - 2017-12-07 23:09 - 000136704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gamingtcui.dll
2017-12-12 19:23 - 2017-12-07 23:08 - 000514560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprtrmgr.dll
2017-12-12 19:23 - 2017-12-07 23:08 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TileDataRepository.dll
2017-12-12 19:23 - 2017-12-07 23:08 - 000369152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2017-12-12 19:23 - 2017-12-07 23:08 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrobj.dll
2017-12-12 19:23 - 2017-12-07 23:08 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2017-12-12 19:23 - 2017-12-07 23:07 - 000365568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-12-12 19:23 - 2017-12-07 23:07 - 000254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\PushToInstall.dll
2017-12-12 19:23 - 2017-12-07 23:07 - 000246272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2017-12-12 19:23 - 2017-12-07 23:07 - 000192512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys
2017-12-12 19:23 - 2017-12-07 23:07 - 000172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll
2017-12-12 19:23 - 2017-12-07 23:07 - 000164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2017-12-12 19:23 - 2017-12-07 23:07 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-12-12 19:23 - 2017-12-07 23:06 - 000676352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll
2017-12-12 19:23 - 2017-12-07 23:06 - 000559104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2017-12-12 19:23 - 2017-12-07 23:06 - 000174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcui.dll
2017-12-12 19:23 - 2017-12-07 23:06 - 000164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscript.exe
2017-12-12 19:23 - 2017-12-07 23:05 - 001670656 _____ (Microsoft Corporation) C:\WINDOWS\system32\batmeter.dll
2017-12-12 19:23 - 2017-12-07 23:05 - 000664576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2017-12-12 19:23 - 2017-12-07 23:05 - 000559616 _____ (Microsoft Corporation) C:\WINDOWS\system32\iprtrmgr.dll
2017-12-12 19:23 - 2017-12-07 23:05 - 000539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll
2017-12-12 19:23 - 2017-12-07 23:05 - 000481792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll
2017-12-12 19:23 - 2017-12-07 23:05 - 000463360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2017-12-12 19:23 - 2017-12-07 23:05 - 000431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2017-12-12 19:23 - 2017-12-07 23:05 - 000363008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2017-12-12 19:23 - 2017-12-07 23:05 - 000334848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmsvc.dll
2017-12-12 19:23 - 2017-12-07 23:05 - 000306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2017-12-12 19:23 - 2017-12-07 23:05 - 000222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrobj.dll
2017-12-12 19:23 - 2017-12-07 23:05 - 000164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscript.exe
2017-12-12 19:23 - 2017-12-07 23:05 - 000019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll
2017-12-12 19:23 - 2017-12-07 23:04 - 001498112 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2017-12-12 19:23 - 2017-12-07 23:04 - 001321472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2017-12-12 19:23 - 2017-12-07 23:04 - 000568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2017-12-12 19:23 - 2017-12-07 23:03 - 002467840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2017-12-12 19:23 - 2017-12-07 23:03 - 001559552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-12-12 19:23 - 2017-12-07 23:03 - 001230848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2017-12-12 19:23 - 2017-12-07 23:03 - 000841728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2017-12-12 19:23 - 2017-12-07 23:03 - 000708096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
2017-12-12 19:23 - 2017-12-07 23:03 - 000708096 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2017-12-12 19:23 - 2017-12-07 23:03 - 000594944 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2017-12-12 19:23 - 2017-12-07 23:03 - 000403968 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2017-12-12 19:23 - 2017-12-07 23:03 - 000308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2017-12-12 19:23 - 2017-12-07 23:03 - 000085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\hascsp.dll
2017-12-12 19:23 - 2017-12-07 23:02 - 002864640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2017-12-12 19:23 - 2017-12-07 23:02 - 002117632 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2017-12-12 19:23 - 2017-12-07 23:02 - 000815616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-12-12 19:23 - 2017-12-07 23:02 - 000813056 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2017-12-12 19:23 - 2017-12-07 23:02 - 000496640 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2017-12-12 19:23 - 2017-12-07 23:01 - 001980928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
2017-12-12 19:23 - 2017-12-07 23:01 - 000601088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2017-12-12 19:23 - 2017-12-07 23:01 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll
2017-12-12 19:23 - 2017-12-07 23:00 - 001509888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2017-12-12 19:23 - 2017-12-07 22:59 - 002105856 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-12-12 19:23 - 2017-12-07 22:59 - 001666048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2017-12-12 19:23 - 2017-12-07 22:59 - 001058304 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2017-12-12 19:23 - 2017-12-07 22:59 - 000880640 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2017-12-12 19:23 - 2017-12-07 22:58 - 003478016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2017-12-12 19:23 - 2017-12-07 22:58 - 001547264 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-12-12 19:23 - 2017-12-07 22:58 - 001353728 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2017-12-12 19:23 - 2017-12-07 22:58 - 000812032 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2017-12-12 19:23 - 2017-12-07 22:57 - 001822208 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-12-12 19:23 - 2017-12-07 22:57 - 001487872 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-12-12 19:23 - 2017-12-07 22:56 - 002666496 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2017-12-12 19:23 - 2017-12-07 22:56 - 001739264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-12-12 19:23 - 2017-12-07 22:56 - 000685056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-12-12 19:23 - 2017-12-07 22:54 - 002510336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2017-12-12 19:23 - 2017-12-07 22:54 - 001570816 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2017-12-12 19:23 - 2017-12-07 22:54 - 001160704 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2017-12-10 16:02 - 2017-12-10 16:02 - 000059896 _____ C:\Users\hzand\OneDrive\Documenten\cc_20171210_160217.reg
2017-12-10 15:59 - 2017-12-10 15:59 - 000000000 ___HD C:\Users\hzand\MicrosoftEdgeBackups
2017-12-10 15:42 - 2017-12-10 15:42 - 000000450 _____ C:\Users\hzand\Desktop\Hotmail.url
2017-12-06 22:03 - 2017-12-06 22:03 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2017-12-06 22:00 - 2017-12-13 14:20 - 000000000 ___RD C:\Users\hzand\3D Objects
2017-12-06 21:59 - 2017-12-06 21:59 - 000000020 ___SH C:\Users\hzand\ntuser.ini
2017-12-06 21:57 - 2017-12-23 18:53 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-12-06 21:57 - 2017-12-13 17:17 - 000003938 _____ C:\WINDOWS\System32\Tasks\CCleaner Update
2017-12-06 21:57 - 2017-12-06 22:07 - 000003358 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2753020900-3500922324-953930212-1001
2017-12-06 21:57 - 2017-12-06 21:57 - 000003502 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2017-12-06 21:57 - 2017-12-06 21:57 - 000003278 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2017-12-06 21:57 - 2017-12-06 21:57 - 000002218 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2017-12-06 21:57 - 2017-12-06 21:57 - 000000000 ____D C:\WINDOWS\System32\Tasks\S-1-5-21-2753020900-3500922324-953930212-1001
2017-12-06 21:57 - 2017-12-06 21:57 - 000000000 ____D C:\WINDOWS\System32\Tasks\NCH Software
2017-12-06 21:55 - 2017-12-06 21:56 - 000007623 _____ C:\WINDOWS\diagwrn.xml
2017-12-06 21:55 - 2017-12-06 21:56 - 000007623 _____ C:\WINDOWS\diagerr.xml
2017-12-06 21:54 - 2017-12-23 18:58 - 002145508 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-12-06 21:43 - 2017-12-06 21:43 - 000000000 ____D C:\ProgramData\USOShared
2017-12-06 21:41 - 2017-12-06 21:41 - 000001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-12-06 21:38 - 2017-12-06 22:18 - 000000000 ____D C:\Users\hzand\AppData\Local\Packages
2017-12-06 21:37 - 2017-12-22 17:44 - 000000000 ____D C:\Users\hzand
2017-12-06 21:37 - 2017-12-06 21:37 - 000000000 _SHDL C:\Users\hzand\Sjablonen
2017-12-06 21:37 - 2017-12-06 21:37 - 000000000 _SHDL C:\Users\hzand\Netwerkprinteromgeving
2017-12-06 21:37 - 2017-12-06 21:37 - 000000000 _SHDL C:\Users\hzand\Mijn documenten
2017-12-06 21:37 - 2017-12-06 21:37 - 000000000 _SHDL C:\Users\hzand\Menu Start
2017-12-06 21:37 - 2017-12-06 21:37 - 000000000 _SHDL C:\Users\hzand\AppData\Roaming\Microsoft\Windows\Start Menu\Programma's
2017-12-06 21:37 - 2017-12-06 21:37 - 000000000 _SHDL C:\Users\hzand\AppData\Local\Geschiedenis
2017-12-06 21:35 - 2017-09-29 14:41 - 002241024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2017-12-06 21:32 - 2017-12-24 11:16 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-12-06 21:31 - 2017-12-13 14:19 - 000389792 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-12-06 21:27 - 2017-12-19 19:07 - 000000000 ____D C:\Windows.old
2017-12-06 21:24 - 2017-12-06 21:27 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2017-12-06 21:22 - 2017-12-06 21:24 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2017-12-06 21:21 - 2017-12-06 21:21 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2017-12-06 21:19 - 2017-12-06 21:19 - 013655552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2017-12-06 21:19 - 2017-12-06 21:19 - 012687360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 021754368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 017159680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 017084416 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 013703168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 012829696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 011923456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 007831248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 006791472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 006015200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 005615968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 004814848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 004772352 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 004648528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 004487968 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 004385280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 004249600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 003578368 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 003334144 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 003331520 _____ C:\WINDOWS\system32\Windows.Mirage.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 003186688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 003163648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 003010720 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 002972672 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 002890240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 002869760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 002859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 002783744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 002717392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 002633216 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 002596352 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 002573208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 002491112 _____ C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 002465848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 002446744 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 002412168 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 002395032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 002393600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 002339296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 002269080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 002208768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001990160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001970520 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001954048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001806336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001694224 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001664000 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001642520 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001636376 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001615720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001585376 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001558856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001554216 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001507736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001495040 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001488792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001474680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001470976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001463856 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001454568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001432816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001425408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001424896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001413760 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2017-12-06 21:18 - 2017-12-06 21:18 - 001377080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001323840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001289216 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001280000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001277848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 001261864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001259344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001208184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 001200536 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 001167360 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001148216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001124760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContentDeliveryManager.Utilities.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001090440 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2017-12-06 21:18 - 2017-12-06 21:18 - 001057824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001054720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001054280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001053592 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 001015008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001012120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Services.TargetedContent.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000975872 _____ C:\WINDOWS\system32\FaceProcessor.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 000925184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000924136 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 000902416 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000899584 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000891800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 000887296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000840440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Perception.Stub.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000830464 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9on12.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000823808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000791960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 000770048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000768512 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000754688 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000749976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000746904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Services.TargetedContent.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000739696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000726016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000713624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000703568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000703536 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000665088 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000661664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000660480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000654848 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000654048 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000640512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswstr10.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000618496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000615768 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 000614912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apphelp.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000612760 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000610712 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000597160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000591872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000590944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000588288 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000566272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000559512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000557056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9on12.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000556544 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000555416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2017-12-06 21:18 - 2017-12-06 21:18 - 000542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000534528 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000529408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000519152 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000506256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Perception.Stub.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000495000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000487424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcSpecfc.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000479912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64win.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000478208 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000474112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DictationManager.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000471960 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000464408 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000444928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000442880 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000436120 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000432640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000432640 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000428952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000424960 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000418712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000404888 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000398744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000394752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000374784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000373656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000372224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcLayers.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000362176 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioIso.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 000361984 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatializerApo.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000354304 _____ (Microsoft Corporation) C:\WINDOWS\system32\WwaApi.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000354200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000353848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000353688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000351232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DictationManager.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000336896 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicRuntimes.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 000326144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000319352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000315392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcLayers.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000293888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WwaApi.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExecModelClient.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000285080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatializerApo.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000269696 _____ C:\WINDOWS\system32\FaceProcessorCore.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 000264040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 000261632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000242176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExecModelClient.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreenps.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000238080 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManager.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000230296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 000204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000198888 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000187288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000175104 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_ContentDeliveryManager.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000168448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SIUF.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000160256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smartscreenps.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000149400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000147864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_CapabilityAccess.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptcatsvc.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\luafv.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmCx.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000097792 _____ C:\WINDOWS\system32\runexehelper.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 000095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceUpdateAgent.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000082840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\acppage.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\acppage.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CapabilityAccessManagerClient.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000060824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\urscx01000.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadjcsp.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuautoappupdate.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcSpecfc.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000048112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdrleakdiag.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 000045464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdrleakdiag.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcVSp1res.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcVSp1res.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjint40.dll
2017-12-06 16:41 - 2017-12-10 16:01 - 000000000 ___DC C:\WINDOWS\Panther
2017-12-02 19:53 - 2017-12-02 19:53 - 000000000 ____D C:\Users\hzand\AppData\Local\ProductivityBossTooltab
2017-12-02 19:50 - 2017-12-02 19:50 - 000000000 ____D C:\Users\hzand\AppData\Local\Fun Custom CreationsTooltab
2017-12-02 19:42 - 2017-12-02 19:42 - 000000000 ____D C:\Users\hzand\AppData\Local\EasyPhotoEditTooltab
2017-12-02 19:37 - 2017-12-06 21:39 - 000000000 ____D C:\Users\hzand\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\InPixio
2017-12-02 19:37 - 2017-12-02 19:37 - 000000000 ____D C:\Users\hzand\AppData\Roaming\Avanquest Software
2017-12-02 19:37 - 2017-12-02 19:37 - 000000000 ____D C:\Users\hzand\AppData\Local\InPixio
2017-11-27 17:09 - 2017-12-06 21:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-11-27 17:09 - 2017-11-27 17:09 - 000001906 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-11-27 17:09 - 2017-11-27 17:09 - 000000000 ____D C:\WINDOWS\system32\Drivers\etc\BACKUP
2017-11-27 17:09 - 2017-11-27 17:09 - 000000000 ____D C:\ProgramData\MB2Migration
2017-11-27 17:09 - 2017-11-27 17:09 - 000000000 ____D C:\Program Files\Malwarebytes
2017-11-27 14:36 - 2017-11-27 14:36 - 000011264 ___SH C:\Users\hzand\OneDrive\Documenten\Thumbs.db
2017-11-27 14:27 - 2017-11-27 14:27 - 000000000 ____D C:\WINDOWS\Microsoft Antimalware
==================== Een Maand Gewijzigd bestanden en mappen ========
(Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)
2017-12-23 18:58 - 2017-09-30 15:32 - 000981302 _____ C:\WINDOWS\system32\perfh013.dat
2017-12-23 18:58 - 2017-09-30 15:32 - 000211406 _____ C:\WINDOWS\system32\perfc013.dat
2017-12-23 16:30 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\DeliveryOptimization
2017-12-23 16:29 - 2017-09-29 14:46 - 000000000 ___HD C:\Program Files\WindowsApps
2017-12-23 16:29 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-12-21 09:40 - 2017-07-17 20:21 - 000002355 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-12-19 19:05 - 2017-08-16 11:09 - 000000000 ____D C:\ProgramData\CanonIJPLM
2017-12-16 10:11 - 2017-09-29 14:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-12-14 10:08 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\rescache
2017-12-14 10:02 - 2017-09-29 14:44 - 000000000 ____D C:\WINDOWS\INF
2017-12-13 17:17 - 2017-07-13 20:28 - 000000897 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-12-13 17:08 - 2017-07-12 16:30 - 000000000 ____D C:\ProgramData\Spotnet
2017-12-13 14:20 - 2016-04-27 07:37 - 000000000 __RHD C:\Users\Public\AccountPictures
2017-12-13 14:17 - 2017-09-29 09:45 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2017-12-13 14:16 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\TextInput
2017-12-13 14:16 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2017-12-13 14:16 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\oobe
2017-12-13 14:16 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\appraiser
2017-12-13 14:16 - 2017-09-29 09:45 - 000000000 ____D C:\WINDOWS\system32\Dism
2017-12-13 12:05 - 2017-11-17 20:10 - 000077432 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-12-12 20:34 - 2017-08-28 18:46 - 000001283 _____ C:\Users\hzand\Desktop\Internet Explorer.lnk
2017-12-12 19:32 - 2017-07-12 18:02 - 000000000 ____D C:\WINDOWS\system32\MRT
2017-12-12 19:29 - 2017-10-10 19:02 - 133326408 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe
2017-12-12 19:29 - 2017-07-12 18:02 - 133326408 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-12-12 17:18 - 2017-09-16 15:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Backup and Sync from Google
2017-12-10 19:00 - 2017-07-25 17:55 - 000000000 ____D C:\Users\hzand\OneDrive\Documenten\Zuid Engeland
2017-12-10 17:10 - 2017-08-03 17:44 - 000000000 ____D C:\Users\hzand\AppData\Local\Albelli Fotoboeken
2017-12-08 18:07 - 2017-07-12 12:56 - 000000000 ___RD C:\Users\hzand\OneDrive
2017-12-07 09:35 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\appcompat
2017-12-06 22:17 - 2017-09-29 14:46 - 000000000 ___RD C:\WINDOWS\PrintDialog
2017-12-06 22:07 - 2017-07-12 12:56 - 000002419 _____ C:\Users\hzand\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-12-06 22:01 - 2017-07-12 15:09 - 000000000 ____D C:\Users\hzand\AppData\Local\ConnectedDevicesPlatform
2017-12-06 22:01 - 2017-07-12 12:52 - 000000000 ____D C:\Users\hzand\AppData\Local\TileDataLayer
2017-12-06 22:00 - 2017-10-05 19:27 - 000002386 _____ C:\Users\hzand\Desktop\Google Chrome.lnk
2017-12-06 21:58 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files\windows nt
2017-12-06 21:57 - 2017-09-29 09:45 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2017-12-06 21:55 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\Registration
2017-12-06 21:54 - 2017-09-29 14:46 - 000000000 __RSD C:\WINDOWS\media
2017-12-06 21:54 - 2017-07-12 14:56 - 000023076 _____ C:\WINDOWS\system32\emptyregdb.dat
2017-12-06 21:49 - 2017-07-12 14:43 - 000000000 ____D C:\ProgramData\NVIDIA
2017-12-06 21:47 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2017-12-06 21:46 - 2017-08-14 20:04 - 000000000 ____D C:\Users\hzand\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-12-06 21:43 - 2017-09-29 14:46 - 000000000 ____D C:\ProgramData\USOPrivate
2017-12-06 21:41 - 2017-09-29 14:46 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-12-06 21:39 - 2017-07-12 16:30 - 000000000 ____D C:\Users\hzand\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotnet
2017-12-06 21:36 - 2017-09-29 09:45 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2017-12-06 21:36 - 2017-07-12 14:44 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2017-12-06 21:34 - 2017-07-12 14:42 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2017-12-06 21:31 - 2017-09-29 14:46 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2017-12-06 21:27 - 2017-09-29 14:49 - 000000000 ____D C:\WINDOWS\Setup
2017-12-06 21:27 - 2017-09-29 14:46 - 000000000 __RHD C:\Users\Public\Libraries
2017-12-06 21:27 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2017-12-06 21:27 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\spool
2017-12-06 21:27 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\NDF
2017-12-06 21:27 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2017-12-06 21:27 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\Help
2017-12-06 21:27 - 2017-09-29 14:46 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-12-06 21:27 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2017-12-06 21:27 - 2017-09-06 19:24 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016-hulpprogramma's
2017-12-06 21:27 - 2017-08-16 11:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gebruikersregistratie voor Canon MG3600 series
2017-12-06 21:27 - 2017-08-16 11:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG3600 series Manual
2017-12-06 21:27 - 2017-08-16 11:29 - 000000000 ____D C:\WINDOWS\system32\STRING
2017-12-06 21:27 - 2017-08-15 19:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2017-12-06 21:27 - 2017-08-14 20:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-12-06 21:27 - 2017-07-13 20:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-12-06 21:27 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2017-12-06 21:27 - 2016-04-27 07:18 - 000000000 ____D C:\WINDOWS\ShellNew
2017-12-06 21:24 - 2017-08-16 11:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2017-12-06 21:24 - 2017-07-12 14:44 - 000000000 ____D C:\WINDOWS\system32\SRSLabs
2017-12-06 21:24 - 2017-07-12 14:44 - 000000000 ____D C:\Program Files\Realtek
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\zu-ZA
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\yo-NG
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\xh-ZA
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\wo-SN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\uz-Latn-UZ
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\tn-ZA
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\tk-TM
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\ti-ET
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\tg-Cyrl-TJ
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\sw-KE
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-RS
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-BA
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\si-LK
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\sd-Arab-PK
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\rw-RW
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\quc-Latn-GT
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\prs-AF
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-Arab-PK
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\nso-ZA
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\mn-MN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\ky-KG
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\ku-Arab-IQ
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\ig-NG
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\ha-Latn-NG
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\chr-CHER-US
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES-valencia
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\bs-Latn-BA
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-BD
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\az-Latn-AZ
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\zu-ZA
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\yo-NG
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\xh-ZA
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\wo-SN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\uz-Latn-UZ
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\ur-PK
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\ug-CN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\tt-RU
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\tn-ZA
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\tk-TM
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\ti-ET
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\tg-Cyrl-TJ
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\te-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\ta-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\sw-KE
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-RS
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-BA
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\sq-AL
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\si-LK
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\sd-Arab-PK
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\rw-RW
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\quc-Latn-GT
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\prs-AF
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\pa-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\pa-Arab-PK
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\or-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\nso-ZA
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\nn-NO
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\ne-NP
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\mr-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\mn-MN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\ml-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\lo-LA
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\lb-LU
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\ky-KG
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\ku-Arab-IQ
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\kok-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\kn-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\km-KH
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\kk-KZ
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\ka-GE
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\is-IS
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\ig-NG
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\id-ID
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\hy-AM
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\ha-Latn-NG
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\gu-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\gd-GB
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\ga-IE
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\fil-PH
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\fa-IR
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\cy-GB
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\chr-CHER-US
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\ca-ES-valencia
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\bs-Latn-BA
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\bn-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\bn-BD
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\be-BY
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\az-Latn-AZ
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\as-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\am-ET
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\af-ZA
2017-12-06 21:20 - 2017-09-29 14:46 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2017-12-06 21:20 - 2017-09-29 14:46 - 000000000 ___SD C:\WINDOWS\system32\F12
2017-12-06 21:20 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2017-12-06 21:20 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2017-12-06 21:20 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-12-06 21:20 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\ShellExperiences
2017-12-06 21:20 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\Provisioning
2017-12-06 21:20 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files\Windows Defender
2017-12-06 21:20 - 2017-09-29 14:46 - 000000000 ____D C:\PerfLogs
2017-12-05 20:09 - 2017-10-22 10:48 - 000000000 ____D C:\Users\hzand\OneDrive\Documenten\Drostenhuis
2017-12-03 23:38 - 2017-09-29 14:49 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-12-03 23:38 - 2017-09-29 14:49 - 000177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-11-27 17:48 - 2017-09-06 19:19 - 000000000 ____D C:\Users\hzand\AppData\Local\Microsoft Help
2017-11-27 17:09 - 2017-07-17 21:18 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-11-27 14:53 - 2017-07-12 16:30 - 000002199 _____ C:\Users\hzand\Desktop\Spotnet.lnk
2017-11-27 14:52 - 2017-07-12 16:29 - 000000000 ____D C:\Users\hzand\AppData\Local\Spotnet
==================== Bamital & volsnap ======================
(Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.)
C:\WINDOWS\system32\winlogon.exe => Bestand is getekend
C:\WINDOWS\system32\wininit.exe => Bestand is getekend
C:\WINDOWS\explorer.exe => Bestand is getekend
C:\WINDOWS\SysWOW64\explorer.exe => Bestand is getekend
C:\WINDOWS\system32\svchost.exe => Bestand is getekend
C:\WINDOWS\SysWOW64\svchost.exe => Bestand is getekend
C:\WINDOWS\system32\services.exe => Bestand is getekend
C:\WINDOWS\system32\User32.dll => Bestand is getekend
C:\WINDOWS\SysWOW64\User32.dll => Bestand is getekend
C:\WINDOWS\system32\userinit.exe => Bestand is getekend
C:\WINDOWS\SysWOW64\userinit.exe => Bestand is getekend
C:\WINDOWS\system32\rpcss.dll => Bestand is getekend
C:\WINDOWS\system32\dnsapi.dll => Bestand is getekend
C:\WINDOWS\SysWOW64\dnsapi.dll => Bestand is getekend
C:\WINDOWS\system32\Drivers\volsnap.sys => Bestand is getekend
LastRegBack: 2017-12-20 13:46
==================== Eind van FRST.txt ============================
Extra scanresultaten van Farbar Recovery Scan Tool (x64) Versie: 23-12-2017 01
Gestart door hzand (24-12-2017 11:21:15)
Gestart vanaf C:\Users\hzand\Desktop
Windows 10 Home Versie 1709 16299.125 (X64) (2017-12-06 20:59:24)
Boot Modus: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-2753020900-3500922324-953930212-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2753020900-3500922324-953930212-503 - Limited - Disabled)
Gast (S-1-5-21-2753020900-3500922324-953930212-501 - Limited - Disabled)
hzand (S-1-5-21-2753020900-3500922324-953930212-1001 - Administrator - Enabled) => C:\Users\hzand
WDAGUtilityAccount (S-1-5-21-2753020900-3500922324-953930212-504 - Limited - Disabled)
==================== Security Center ========================
(Als een item is opgenomen in de fixlist, zal het worden verwijderd.)
AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
==================== Geïnstalleerde programma's ======================
(Alleen de adware-programma's met 'verborgen' vlag zou kunnen worden toegevoegd aan de fixlist om ze zichtbaar te maken. De adware-programma's moeten handmatig gedeinstallerd worden.)
Albelli Fotoboeken (HKU\S-1-5-21-2753020900-3500922324-953930212-1001\...\{B7961CCE-CF36-4858-BC1A-D06D3D25ECE5}_is1) (Version: 13.0.1.2436 - albelli NL)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 17.9.2322 - AVAST Software)
Backup and Sync from Google (HKLM-x32\...\{908DB568-E5FA-40C7-A2AA-AB340190858B}) (Version: 3.38.7642.3857 - Google, Inc.)
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.7.0.0 - Canon Inc.)
Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version: 1.5.4.4 - Canon Inc.)
Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.7.0 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: 1.1.20.13 - Canon Inc.)
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: 5.3.1 - Canon Inc.)
Canon MG3600 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG3600_series) (Version: 1.00 - Canon Inc.)
Canon MG3600 series On-screen Manual (HKLM-x32\...\Canon MG3600 series On-screen Manual) (Version: 7.8.0 - Canon Inc.)
Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 3.5.2 - Canon Inc.)
Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 3.5.2 - Canon Inc.)
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.3.0 - Canon Inc.)
Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.7.1 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.38 - Piriform)
EasyPhotoEdit Internet Explorer Homepage and New Tab (HKU\S-1-5-21-2753020900-3500922324-953930212-1001\...\EasyPhotoEditTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== AANDACHT
Fun Custom Creations Internet Explorer Homepage and New Tab (HKU\S-1-5-21-2753020900-3500922324-953930212-1001\...\Fun Custom CreationsTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== AANDACHT
Gebruikersregistratie voor Canon MG3600 series (HKLM-x32\...\Gebruikersregistratie voor Canon MG3600 series) (Version: - â€Canon Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 64.0.3282.39 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden
InPixio Photo Clip 7 Demo (HKU\S-1-5-21-2753020900-3500922324-953930212-1001\...\{84AC98D2-ED9C-417b-BB6B-598FBCBE253C}) (Version: 7.00 - InPixio)
KMSpico (HKLM\...\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1) (Version: - )
Malwarebytes versie 3.3.1.2183 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.3.1.2183 - Malwarebytes)
Microsoft Office Professional Plus 2016 (HKLM-x32\...\Office16.PROPLUS) (Version: 16.0.4266.1001 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2753020900-3500922324-953930212-1001\...\OneDriveSetup.exe) (Version: 17.3.7131.1115 - Microsoft Corporation)
NVIDIA Update 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)
Outils de vérification linguistique 2016 de Microsoft Office - Français (HKLM-x32\...\{90160000-001F-040C-0000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
PhotoPad Image Editor (HKLM-x32\...\PhotoPad) (Version: 3.12 - NCH Software)
ProductivityBoss Internet Explorer Homepage and New Tab (HKU\S-1-5-21-2753020900-3500922324-953930212-1001\...\ProductivityBossTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== AANDACHT
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7543 - Realtek Semiconductor Corp.)
Revo Uninstaller 2.0.3 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.3 - VS Revo Group, Ltd.)
Spotnet (HKU\S-1-5-21-2753020900-3500922324-953930212-1001\...\Spotnet) (Version: 2.0.0.265 - Spotnet)
Taalprogramma's voor Microsoft Office 2016 - Nederlands (HKLM-x32\...\{90160000-001F-0413-0000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Update for Skype for Business 2016 (KB3114846) 32-Bit Edition (HKLM-x32\...\{90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{F51FCE9D-80C7-43F0-8DE6-F1173EEAE292}) (Version: - Microsoft)
Update for Skype for Business 2016 (KB3114846) 32-Bit Edition (HKLM-x32\...\{90160000-012B-0413-0000-0000000FF1CE}_Office16.PROPLUS_{F51FCE9D-80C7-43F0-8DE6-F1173EEAE292}) (Version: - Microsoft)
Windows 10-updateassistent (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22243 - Microsoft Corporation)
WinRAR 5.40 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
==================== Aangepaste CLSID (gefilterd): ==========================
(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-11-20] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-11-20] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-11-20] (Google)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-12-22] (AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-12-22] (AVAST Software)
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-11-20] (Google)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-16] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-16] (Alexander Roshal)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-12-22] (AVAST Software)
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-11-20] (Google)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2016-11-14] (NVIDIA Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-12-22] (AVAST Software)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-16] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-16] (Alexander Roshal)
==================== Geplande Taken (gefilterd) =============
(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)
Task: {1E0853C9-10C8-4C79-8BE0-9A8565CF0BBC} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2017-12-01] (Piriform Ltd)
Task: {25405B4F-2EE3-41D3-85AA-F054AF549F19} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe
Task: {2F063D09-963A-473C-A13A-376933CCABEA} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2017-12-13] (AVAST Software)
Task: {3A62BEB0-8189-4CD6-A7E6-012BA16433F0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-07-17] (Google Inc.)
Task: {53791A3A-0F28-403F-BE7C-8FD6C8DDCEB0} - System32\Tasks\S-1-5-21-2753020900-3500922324-953930212-1001\DataSenseLiveTileTask => C:\WINDOWS\System32\DataUsageLiveTileTask.exe [2017-09-29] (Microsoft Corporation)
Task: {6371CD91-8C38-4EFB-B395-A02A80D7B8AD} - System32\Tasks\NCH Software\PhotoPadDowngrade => C:\Program Files (x86)\NCH Software\PhotoPad\photopad.exe [2017-08-11] (NCH Software)
Task: {67E5F48D-02F7-4FD9-8CE7-968B2306CBB9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-07-17] (Google Inc.)
Task: {7B97B6E6-79BB-49E8-A918-DB080EDCC410} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe [2015-12-02] (@ByELDI)
Task: {91080CE2-30C4-4138-9957-CB788410EA98} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-12-22] (AVAST Software)
Task: {AD80731E-3822-4FCF-B145-50423F703E28} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
Task: {B195110D-8B53-4A6F-A0E4-D02BD54C1D46} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
Task: {F20E6BD7-3088-4750-8E0B-A67385B39F61} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-12-01] (Piriform Ltd)
(Als een item is opgenomen in de fixlist, de taak (job) bestand wordt verplaatst. Het bestand dat wordt uitgevoerd door de taak zal niet worden verplaatst.)
==================== Snelkoppelingen & WMI ========================
(De items kunnen worden opgenomen in de fixlist.txt om hersteld of verwijderd te worden.)
Shortcut: C:\Users\hzand\Favorites\NCH Software Download Site.lnk -> hxxp://www.nchsoftware.com/index.htm
==================== Geladen Modules (gefilterd) ==============
2017-09-29 14:41 - 2017-09-29 14:41 - 000184432 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2017-07-12 14:43 - 2016-11-14 12:15 - 000135224 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2017-11-27 17:09 - 2017-12-13 12:05 - 002301384 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2017-08-16 11:09 - 2017-03-31 11:11 - 000387144 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
2017-12-06 21:18 - 2017-12-06 21:18 - 011044864 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001804288 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-12-12 19:11 - 2017-12-12 19:12 - 000086528 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.10.572.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-12-12 19:11 - 2017-12-12 19:12 - 000195072 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.10.572.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-12-12 19:11 - 2017-12-12 19:12 - 024735744 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.10.572.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-12-12 19:11 - 2017-12-12 19:12 - 002551808 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.10.572.0_x64__kzf8qxf38zg5c\skypert.dll
2017-12-12 19:11 - 2017-12-12 19:12 - 000671744 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.10.572.0_x64__kzf8qxf38zg5c\RtmMvrUap.dll
2017-09-29 14:41 - 2017-09-29 14:41 - 000047616 _____ () C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUITelemetry.dll
2017-09-29 14:41 - 2017-09-29 14:41 - 004173824 _____ () C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUIDataModel.dll
2017-09-29 14:41 - 2017-09-29 14:41 - 003634176 _____ () C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUIViewModels.dll
2017-12-22 17:40 - 2017-12-22 17:40 - 000206152 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-12-22 17:40 - 2017-12-22 17:40 - 000058016 _____ () C:\Program Files\AVAST Software\Avast\module_lifetime.dll
2017-12-22 17:40 - 2017-12-22 17:40 - 000057504 _____ () C:\Program Files\AVAST Software\Avast\dll_loader.dll
2017-12-13 17:21 - 2017-12-13 17:21 - 067109376 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2017-12-22 17:40 - 2017-12-22 17:40 - 000289272 _____ () C:\Program Files\AVAST Software\Avast\tasks_core.dll
2017-12-22 17:40 - 2017-12-22 17:40 - 000282560 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll
==================== Alternate Data Streams (gefilterd) =========
(Als een item is opgenomen in de fixlist, alleen de ADS wordt verwijderd.)
==================== Veilige Modus (gefilterd) ===================
(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. De "AlternateShell" waarde wordt hersteld.)
==================== Bestandskoppeling (gefilterd) ===============
(Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd.)
==================== Internet Explorer vertrouwde/beperkte toegang ===============
(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd.)
==================== Hosts inhoud: ===============================
(Als nodig Hosts: opdracht kan worden opgenomen in de fixlist om Hosts te resetten.)
2015-10-30 08:24 - 2017-11-27 17:25 - 000000851 _____ C:\WINDOWS\system32\Drivers\etc\hosts
0.0.0.0 serius.mwbsys.com
==================== Andere gebieden ============================
(Momenteel is er geen automatische fix voor dit onderdeel.)
HKU\S-1-5-21-2753020900-3500922324-953930212-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\hzand\Desktop\IMG-20171210-WA0003.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Windows Firewall is ingeschakeld.
==================== MSCONFIG/TASK MANAGER Uitgeschakelde items ==
HKLM\...\StartupApproved\Run: => "RtHDVCpl"
HKLM\...\StartupApproved\Run: => "NvBackend"
HKLM\...\StartupApproved\Run: => "WinZip PreLoader"
HKLM\...\StartupApproved\Run: => "WinZip UN"
HKLM\...\StartupApproved\Run32: => "IJNetworkScannerSelectorEX"
HKLM\...\StartupApproved\Run32: => "CanonQuickMenu"
HKU\S-1-5-21-2753020900-3500922324-953930212-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2753020900-3500922324-953930212-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
==================== Firewall regels (gefilterd) ===============
(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)
FirewallRules: [{0A3D4003-092F-4890-A71E-525BCE41A627}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office16\UcMapi.exe
FirewallRules: [{38F1828D-5031-45ED-970B-29E41890BFB3}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office16\UcMapi.exe
FirewallRules: [{75B27B9B-303A-4B8E-AA7D-6658BE0658FC}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office16\lync.exe
FirewallRules: [{AE138527-4102-49AC-895F-0D264785441F}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office16\lync.exe
FirewallRules: [{4863625A-7DFF-424C-9B5D-C93C3C1D4EB2}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Herstelpunten =========================
16-12-2017 10:09:24 Windows Update
23-12-2017 13:58:36 Gepland controlepunt
==================== Defecte Apparaatbeheer Apparaten =============
==================== Eventlog fouten: =========================
Applicatiefouten:
==================
Error: (12/23/2017 09:39:09 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: LAPTOP)
Description: Het pakket Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe+App is beëindigd omdat het onderbreken te lang duurde.
Error: (12/22/2017 05:49:19 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: Kan DLL voor uitbreidbare items rdyboost niet laden. De eerste vier bytes (DWORD) in de sectie Gegevens bevatten de Windows-foutcode.
Error: (12/22/2017 05:49:12 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: De openprocedure voor de BITS-service in DLL-bestand C:\Windows\System32\bitsperf.dll is mislukt. Prestatiemetergegevens voor deze service zijn niet beschikbaar. De eerste vier bytes (DWORD) in de sectie Gegevens bevatten de foutcode.
Error: (12/21/2017 07:23:27 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: LAPTOP)
Description: Het pakket microsoft.windowscommunicationsapps_17.8730.21155.0_x64__8wekyb3d8bbwe+microsoft.windowslive.mail is beëindigd omdat het onderbreken te lang duurde.
Error: (12/21/2017 07:22:41 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: LAPTOP)
Description: Het pakket microsoft.windowscommunicationsapps_17.8730.21155.0_x64__8wekyb3d8bbwe+microsoft.windowslive.mail is beëindigd omdat het onderbreken te lang duurde.
Error: (12/21/2017 07:22:00 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: LAPTOP)
Description: Het pakket microsoft.windowscommunicationsapps_17.8730.21155.0_x64__8wekyb3d8bbwe+microsoft.windowslive.mail is beëindigd omdat het onderbreken te lang duurde.
Error: (12/21/2017 09:36:19 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: LAPTOP)
Description: Het pakket Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe+App is beëindigd omdat het onderbreken te lang duurde.
Error: (12/20/2017 07:21:51 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: LAPTOP)
Description: Het pakket Microsoft.Windows.ShellExperienceHost_10.0.16299.15_neutral_neutral_cw5n1h2txyewy+App is beëindigd omdat het onderbreken te lang duurde.
Error: (12/19/2017 07:27:38 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Het programma iexplore.exe, versie 11.0.16299.98 reageert niet meer op Windows en is afgesloten. Als u wilt zien of er meer informatie over het probleem beschikbaar is, raadpleegt u de probleemgeschiedenis in het onderdeel Beveiliging en onderhoud van het Configuratiescherm.
Proces-id: 2228
Starttijd: 01d378f6a3b170bb
Eindtijd: 27
Toepassingspad: C:\Program Files (x86)\Internet Explorer\iexplore.exe
Rapport-id: d549d535-6b18-4035-8666-80439779a1bf
Volledige pakketnaam met fout:
Relatieve toepassings-id van pakket met fout:
Error: (12/18/2017 06:34:17 PM) (Source: ESENT) (EventID: 455) (User: )
Description: taskhostw (6124,R,0) WebCacheLocal: Fout -1032 (0xfffffbf8) is opgetreden tijdens het openen van logboekbestand C:\Users\hzand\AppData\Local\Microsoft\Windows\WebCache\V01.log.
Systeemfouten:
=============
Error: (12/24/2017 10:56:47 AM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 4
Error: (12/23/2017 11:19:03 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 5
Error: (12/23/2017 08:18:44 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 4
Error: (12/23/2017 08:03:13 PM) (Source: DCOM) (EventID: 10016) (User: LAPTOP)
Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
en APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
aan de gebruiker LAPTOP\hzand SID (S-1-5-21-2753020900-3500922324-953930212-1001) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services.
Error: (12/23/2017 07:00:56 PM) (Source: DCOM) (EventID: 10016) (User: LAPTOP)
Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
en APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
aan de gebruiker LAPTOP\hzand SID (S-1-5-21-2753020900-3500922324-953930212-1001) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services.
Error: (12/23/2017 06:59:33 PM) (Source: DCOM) (EventID: 10016) (User: LAPTOP)
Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
en APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
aan de gebruiker LAPTOP\hzand SID (S-1-5-21-2753020900-3500922324-953930212-1001) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services.
Error: (12/23/2017 06:53:52 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: De Service KMSELDI-service kan vanwege de volgende fout niet worden gestart:
Het systeem kan het opgegeven bestand niet vinden.
Error: (12/23/2017 06:53:43 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: De vorige afsluiting van het systeem om 18:00:58 op ‎23-‎12-‎2017 is onverwacht gebeurd.
Error: (12/23/2017 05:49:14 PM) (Source: DCOM) (EventID: 10016) (User: LAPTOP)
Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
en APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
aan de gebruiker LAPTOP\hzand SID (S-1-5-21-2753020900-3500922324-953930212-1001) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services.
Error: (12/23/2017 05:11:02 PM) (Source: DCOM) (EventID: 10016) (User: LAPTOP)
Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
en APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
aan de gebruiker LAPTOP\hzand SID (S-1-5-21-2753020900-3500922324-953930212-1001) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services.
==================== Geheugen info ===========================
Processor: Intel(R) Core(TM) i3 CPU M 350 @ 2.27GHz
Percentage geheugen in gebruik: 54%
Totaal fysiek RAM-geheugen: 3956.55 MB
Beschikbaar fysiek RAM-geheugen: 1793.2 MB
Totaal Virtueel geheugen: 4660.55 MB
Beschikbaar Virtual geheugen: 2563.34 MB
==================== Schijven ================================
Drive c: () (Fixed) (Total:197.58 GB) (Free:161.38 GB) NTFS
Drive d: () (Fixed) (Total:166.8 GB) (Free:155.2 GB) NTFS
==================== MBR & Partitietabel ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 3A5205A3)
Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=166.8 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=197.6 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=819 MB) - (Type=27)
==================== Eind van Addition.txt ============================
Onze laptop heeft totaal de snelheid verloren.
We gebruiken draadloos wifi, hebben genoeg ruimte op de schijven.
Programma's lopen regelmatig vast.
Scanresultaten van Farbar Recovery Scan Tool (FRST) (x64) Versie: 23-12-2017 01
Gestart door hzand (Beheerder) op LAPTOP (24-12-2017 11:19:51)
Gestart vanaf C:\Users\hzand\Desktop
Geladen Profielen: hzand (Beschikbare Profielen: hzand)
Platform: Windows 10 Home Versie 1709 16299.125 (X64) Taal: Nederlands (Nederland)
Internet Explorer Versie 11 (Standaardbrowser: Chrome)
Boot Modus: Normal
Handleiding voor Farbar Recovery Scan Tool: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials
==================== Processen (gefilterd) =================
(Als een item is opgenomen in de fixlist, het proces zal worden gesloten. Het bestand zal niet worden verplaatst.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.10.572.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Program Files\internet explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
==================== Register (gefilterd) ===========================
(Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.)
HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14040296 2015-08-28] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1794888 2015-06-29] (NVIDIA Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [246120 2017-12-22] (AVAST Software)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [235624 2015-01-09] (CANON INC.)
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1314432 2016-06-09] (CANON INC.)
HKU\S-1-5-21-2753020900-3500922324-953930212-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [10249048 2017-12-01] (Piriform Ltd)
HKU\S-1-5-21-2753020900-3500922324-953930212-1001\...\MountPoints2: {1c79c027-e739-11e7-8707-002454c032b8} - "F:\LaunchU3.exe"
==================== Internet (gefilterd) ====================
(Als een item is opgenomen in de fixlist, als het een registry item is wordt verwijderd of hersteld naar de standaard.)
Hosts: 0.0.0.0 serius.mwbsys.com
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{885688fd-ec89-420a-8ad4-2e6bf2530e61}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{a0ae96f8-39df-452b-8ffe-3f5bcd4c1279}: [DhcpNameServer] 192.168.0.1
Internet Explorer:
==================
HKU\S-1-5-21-2753020900-3500922324-953930212-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp.myway.com/productivityboss/s23950/index.html?n=783ACFDB&p2=^BYM^xdm018^S23950^nl&ptb=9E452EE8-7939-4043-910B-47D6EDC0CC8B&coid=309d9a2968f941c99bc3a692e55faaa5
SearchScopes: HKU\S-1-5-21-2753020900-3500922324-953930212-1001 -> {F6E70F4D-EBF8-4815-97E5-A5E67E4BA241} URL = hxxp://www.google.com/search?q={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2015-07-31] (Microsoft Corporation)
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2016-02-23] (CANON INC.)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL [2016-01-13] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2016-02-09] (Microsoft Corporation)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2016-02-23] (CANON INC.)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2016-01-13] (Microsoft Corporation)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2016-02-23] (CANON INC.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2016-02-23] (CANON INC.)
Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2016-02-09] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2016-02-09] (Microsoft Corporation)
FireFox:
========
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2015-10-29] (CANON INC.)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-02-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
Chrome:
=======
CHR Profile: C:\Users\hzand\AppData\Local\Google\Chrome\User Data\Default [2017-12-23]
CHR Extension: (Presentaties) - C:\Users\hzand\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
CHR Extension: (Documenten) - C:\Users\hzand\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Google Drive) - C:\Users\hzand\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-07-17]
CHR Extension: (YouTube) - C:\Users\hzand\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-07-17]
CHR Extension: (Avast SafePrice) - C:\Users\hzand\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2017-12-22]
CHR Extension: (Spreadsheets) - C:\Users\hzand\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (Offline Documenten) - C:\Users\hzand\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-07-17]
CHR Extension: (Avast Online Security) - C:\Users\hzand\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-12-14]
CHR Extension: (Betalingen via Chrome Web Store) - C:\Users\hzand\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
CHR Extension: (Gmail) - C:\Users\hzand\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-07-17]
CHR Extension: (Chrome Media Router) - C:\Users\hzand\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-12-16]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
==================== Services (gefilterd) ====================
(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7538536 2017-12-22] (AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [301168 2017-12-22] (AVAST Software)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [387144 2017-03-31] ()
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6234056 2017-11-01] (Malwarebytes)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.17123-0\NisSrv.exe [356176 2017-12-08] (Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.17123-0\MsMpEng.exe [105792 2017-12-08] (Microsoft Corporation)
S2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [X]
===================== Drivers (gefilterd) ======================
(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [185096 2017-12-22] (AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdrivera.sys [321512 2017-12-22] (AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsha.sys [199448 2017-12-22] (AVAST Software)
R0 aswblog; C:\WINDOWS\System32\drivers\aswbloga.sys [343768 2017-12-22] (AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniva.sys [57696 2017-12-22] (AVAST Software)
R1 aswHdsKe; C:\WINDOWS\System32\drivers\aswHdsKe.sys [149344 2017-12-22] (AVAST Software)
S3 aswHwid; C:\WINDOWS\System32\drivers\aswHwid.sys [46976 2017-12-22] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [146664 2017-12-22] (AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [110336 2017-12-22] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [84384 2017-12-22] (AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [1025176 2017-12-22] (AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [457400 2017-12-22] (AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [204456 2017-12-22] (AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [358672 2017-12-22] (AVAST Software)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [253880 2017-12-23] (Malwarebytes)
R1 MpKsl2454dc12; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{D5B238B1-02B8-4949-9F05-E939879991DB}\MpKsl2454dc12.sys [58120 2017-12-13] (Microsoft Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [46072 2017-12-08] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [288848 2017-12-08] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [129616 2017-12-08] (Microsoft Corporation)
R3 ykinw8; C:\WINDOWS\System32\drivers\ykinx64.sys [288768 2017-09-29] (Marvell)
==================== NetSvcs (gefilterd) ===================
(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)
==================== Een Maand Aangemaakt bestanden en mappen ========
(Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)
2017-12-24 11:19 - 2017-12-24 11:20 - 000012483 _____ C:\Users\hzand\Desktop\FRST.txt
2017-12-24 10:23 - 2017-12-24 11:19 - 000000000 ____D C:\FRST
2017-12-24 10:22 - 2017-12-24 10:22 - 002392064 _____ (Farbar) C:\Users\hzand\Desktop\FRST64.exe
2017-12-24 10:20 - 2017-12-24 10:20 - 002392064 _____ (Farbar) C:\Users\hzand\Downloads\FRST64.exe.67qq3q4.partial
2017-12-24 10:18 - 2017-12-24 10:18 - 000000128 _____ C:\Users\hzand\Desktop\Nationaal Computer Forum.url
2017-12-24 10:12 - 2017-12-24 10:12 - 000000183 _____ C:\Users\hzand\Desktop\Helpmij.nl Forum.url
2017-12-22 18:05 - 2017-12-22 18:05 - 000061304 _____ () C:\WINDOWS\system32\Drivers\lpsport.sys
2017-12-22 17:46 - 2017-12-22 17:46 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2017-12-22 17:41 - 2017-12-22 17:41 - 000365680 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2017-12-19 19:24 - 2017-12-19 19:24 - 000000000 ___HD C:\$AV_ASW
2017-12-19 19:00 - 2017-12-19 19:00 - 000000072 ___SH C:\bootTel.dat
2017-12-19 18:54 - 2017-12-22 17:40 - 000149344 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHdsKe.sys
2017-12-13 17:25 - 2017-12-13 17:25 - 000000000 ____D C:\Users\hzand\AppData\Roaming\AVAST Software
2017-12-13 17:25 - 2017-12-13 17:25 - 000000000 ____D C:\Users\hzand\AppData\Local\CEF
2017-12-13 17:25 - 2017-12-13 17:25 - 000000000 ____D C:\ProgramData\SWCUTemp
2017-12-13 17:23 - 2017-12-22 17:42 - 000003994 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update
2017-12-13 17:23 - 2017-12-13 17:23 - 000061304 _____ () C:\WINDOWS\SMSS-PFROc236.tmp
2017-12-13 17:23 - 2017-12-13 17:23 - 000002013 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
2017-12-13 17:23 - 2017-12-13 17:23 - 000000000 ____D C:\WINDOWS\System32\Tasks\Avast Software
2017-12-13 17:23 - 2017-12-13 17:23 - 000000000 ____D C:\Program Files\Common Files\Avast Software
2017-12-13 17:22 - 2017-12-22 17:41 - 000457400 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2017-12-13 17:22 - 2017-12-22 17:41 - 000358672 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2017-12-13 17:22 - 2017-12-22 17:41 - 000204456 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2017-12-13 17:22 - 2017-12-22 17:41 - 000185096 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2017-12-13 17:22 - 2017-12-22 17:41 - 000146664 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2017-12-13 17:22 - 2017-12-22 17:41 - 000110336 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2017-12-13 17:22 - 2017-12-22 17:41 - 000084384 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2017-12-13 17:22 - 2017-12-22 17:41 - 000046976 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2017-12-13 17:22 - 2017-12-22 17:40 - 001025176 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2017-12-13 17:22 - 2017-12-22 17:40 - 000343768 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbloga.sys
2017-12-13 17:22 - 2017-12-22 17:40 - 000321512 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdrivera.sys
2017-12-13 17:22 - 2017-12-22 17:40 - 000199448 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsha.sys
2017-12-13 17:22 - 2017-12-22 17:40 - 000057696 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniva.sys
2017-12-13 17:18 - 2017-12-13 17:18 - 000000000 ____D C:\Program Files\AVAST Software
2017-12-13 17:17 - 2017-12-14 10:24 - 000000000 ____D C:\ProgramData\AVAST Software
2017-12-13 17:10 - 2017-12-19 19:24 - 000000000 ____D C:\Program Files\KMSpico
2017-12-13 17:10 - 2017-12-13 17:10 - 000003458 _____ C:\WINDOWS\System32\Tasks\AutoPico Daily Restart
2017-12-13 17:10 - 2017-12-13 17:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico
2017-12-13 17:10 - 2010-12-06 03:16 - 000090112 _____ (Vestris Inc.) C:\WINDOWS\system32\Vestris.ResourceLib.dll
2017-12-13 16:30 - 2017-12-13 16:30 - 000039189 _____ C:\Users\hzand\Downloads\All.Activation.Win.7-8-10.v15.iso.torrent
2017-12-13 16:14 - 2017-12-13 16:24 - 000000140 _____ C:\WINDOWS\Reimage.ini
2017-12-13 12:06 - 2017-12-23 18:53 - 000253880 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2017-12-12 19:24 - 2017-12-08 00:34 - 001925296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2017-12-12 19:24 - 2017-12-08 00:31 - 008590744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-12-12 19:24 - 2017-12-08 00:27 - 003903784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2017-12-12 19:24 - 2017-12-08 00:26 - 007385088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-12-12 19:24 - 2017-12-08 00:23 - 005905752 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2017-12-12 19:24 - 2017-12-08 00:21 - 007676296 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-12-12 19:24 - 2017-12-08 00:19 - 021352136 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-12-12 19:24 - 2017-12-07 23:55 - 001490328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2017-12-12 19:24 - 2017-12-07 23:39 - 006092664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2017-12-12 19:24 - 2017-12-07 23:34 - 003484840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2017-12-12 19:24 - 2017-12-07 23:32 - 020286120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-12-12 19:24 - 2017-12-07 23:23 - 006478528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-12-12 19:24 - 2017-12-07 23:22 - 025245696 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-12-12 19:24 - 2017-12-07 23:13 - 002905600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-12-12 19:24 - 2017-12-07 23:11 - 003669504 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-12-12 19:24 - 2017-12-07 23:10 - 018916352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-12-12 19:24 - 2017-12-07 23:10 - 006466048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-12-12 19:24 - 2017-12-07 23:08 - 019336192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-12-12 19:24 - 2017-12-07 23:06 - 023652864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-12-12 19:24 - 2017-12-07 23:05 - 006037504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-12-12 19:24 - 2017-12-07 23:04 - 003678208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-12-12 19:24 - 2017-12-07 23:02 - 007545344 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-12-12 19:24 - 2017-12-07 23:01 - 008097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-12-12 19:24 - 2017-12-07 23:01 - 004592640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-12-12 19:24 - 2017-12-07 23:00 - 004740608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-12-12 19:24 - 2017-12-07 23:00 - 002862080 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2017-12-12 19:24 - 2017-12-07 22:59 - 003121664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Profiles.Gatt.dll
2017-12-12 19:24 - 2017-12-07 22:58 - 003211776 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2017-12-12 19:23 - 2017-12-08 07:52 - 000666112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DHolographicDisplay.dll
2017-12-12 19:23 - 2017-12-08 00:34 - 001634288 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2017-12-12 19:23 - 2017-12-08 00:34 - 000059800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bam.sys
2017-12-12 19:23 - 2017-12-08 00:31 - 000779440 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2017-12-12 19:23 - 2017-12-08 00:30 - 000166296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2017-12-12 19:23 - 2017-12-08 00:28 - 000710912 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2017-12-12 19:23 - 2017-12-08 00:28 - 000630752 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcrt.dll
2017-12-12 19:23 - 2017-12-08 00:27 - 004504456 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2017-12-12 19:23 - 2017-12-08 00:27 - 000184984 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2017-12-12 19:23 - 2017-12-08 00:26 - 002709200 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-12-12 19:23 - 2017-12-08 00:26 - 000525208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2017-12-12 19:23 - 2017-12-08 00:25 - 000374032 _____ (Microsoft Corporation) C:\WINDOWS\system32\vac.exe
2017-12-12 19:23 - 2017-12-08 00:24 - 000705944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2017-12-12 19:23 - 2017-12-08 00:24 - 000437144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2017-12-12 19:23 - 2017-12-08 00:24 - 000246168 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2017-12-12 19:23 - 2017-12-08 00:23 - 000677272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-12-12 19:23 - 2017-12-08 00:22 - 001003104 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2017-12-12 19:23 - 2017-12-08 00:22 - 000979352 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2017-12-12 19:23 - 2017-12-08 00:22 - 000137544 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2017-12-12 19:23 - 2017-12-08 00:22 - 000129432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvsocket.sys
2017-12-12 19:23 - 2017-12-08 00:20 - 001170000 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-12-12 19:23 - 2017-12-08 00:16 - 001776272 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2017-12-12 19:23 - 2017-12-08 00:16 - 000603920 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2017-12-12 19:23 - 2017-12-08 00:15 - 001426152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2017-12-12 19:23 - 2017-12-08 00:15 - 000721592 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2017-12-12 19:23 - 2017-12-08 00:14 - 000571288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2017-12-12 19:23 - 2017-12-08 00:12 - 000401304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2017-12-12 19:23 - 2017-12-08 00:10 - 000362904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2017-12-12 19:23 - 2017-12-07 23:58 - 000123512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2017-12-12 19:23 - 2017-12-07 23:57 - 000649304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2017-12-12 19:23 - 2017-12-07 23:56 - 001528904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2017-12-12 19:23 - 2017-12-07 23:55 - 000097144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll
2017-12-12 19:23 - 2017-12-07 23:37 - 001145104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2017-12-12 19:23 - 2017-12-07 23:36 - 000769096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcrt.dll
2017-12-12 19:23 - 2017-12-07 23:34 - 002192112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2017-12-12 19:23 - 2017-12-07 23:33 - 000747416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2017-12-12 19:23 - 2017-12-07 23:33 - 000592280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2017-12-12 19:23 - 2017-12-07 23:31 - 001522176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2017-12-12 19:23 - 2017-12-07 23:31 - 001246432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2017-12-12 19:23 - 2017-12-07 23:31 - 000982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2017-12-12 19:23 - 2017-12-07 23:13 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
2017-12-12 19:23 - 2017-12-07 23:12 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2017-12-12 19:23 - 2017-12-07 23:12 - 000202240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2017-12-12 19:23 - 2017-12-07 23:12 - 000101376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscript.ocx
2017-12-12 19:23 - 2017-12-07 23:10 - 001313792 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2017-12-12 19:23 - 2017-12-07 23:10 - 000536064 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2017-12-12 19:23 - 2017-12-07 23:10 - 000250368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2017-12-12 19:23 - 2017-12-07 23:10 - 000150528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itss.dll
2017-12-12 19:23 - 2017-12-07 23:10 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2017-12-12 19:23 - 2017-12-07 23:10 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2017-12-12 19:23 - 2017-12-07 23:09 - 001663488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\batmeter.dll
2017-12-12 19:23 - 2017-12-07 23:09 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll
2017-12-12 19:23 - 2017-12-07 23:09 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscript.exe
2017-12-12 19:23 - 2017-12-07 23:09 - 000143360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscript.exe
2017-12-12 19:23 - 2017-12-07 23:09 - 000136704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gamingtcui.dll
2017-12-12 19:23 - 2017-12-07 23:08 - 000514560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprtrmgr.dll
2017-12-12 19:23 - 2017-12-07 23:08 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TileDataRepository.dll
2017-12-12 19:23 - 2017-12-07 23:08 - 000369152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2017-12-12 19:23 - 2017-12-07 23:08 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrobj.dll
2017-12-12 19:23 - 2017-12-07 23:08 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2017-12-12 19:23 - 2017-12-07 23:07 - 000365568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-12-12 19:23 - 2017-12-07 23:07 - 000254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\PushToInstall.dll
2017-12-12 19:23 - 2017-12-07 23:07 - 000246272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2017-12-12 19:23 - 2017-12-07 23:07 - 000192512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys
2017-12-12 19:23 - 2017-12-07 23:07 - 000172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll
2017-12-12 19:23 - 2017-12-07 23:07 - 000164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2017-12-12 19:23 - 2017-12-07 23:07 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-12-12 19:23 - 2017-12-07 23:06 - 000676352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll
2017-12-12 19:23 - 2017-12-07 23:06 - 000559104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2017-12-12 19:23 - 2017-12-07 23:06 - 000174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcui.dll
2017-12-12 19:23 - 2017-12-07 23:06 - 000164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscript.exe
2017-12-12 19:23 - 2017-12-07 23:05 - 001670656 _____ (Microsoft Corporation) C:\WINDOWS\system32\batmeter.dll
2017-12-12 19:23 - 2017-12-07 23:05 - 000664576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2017-12-12 19:23 - 2017-12-07 23:05 - 000559616 _____ (Microsoft Corporation) C:\WINDOWS\system32\iprtrmgr.dll
2017-12-12 19:23 - 2017-12-07 23:05 - 000539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll
2017-12-12 19:23 - 2017-12-07 23:05 - 000481792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll
2017-12-12 19:23 - 2017-12-07 23:05 - 000463360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2017-12-12 19:23 - 2017-12-07 23:05 - 000431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2017-12-12 19:23 - 2017-12-07 23:05 - 000363008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2017-12-12 19:23 - 2017-12-07 23:05 - 000334848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmsvc.dll
2017-12-12 19:23 - 2017-12-07 23:05 - 000306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2017-12-12 19:23 - 2017-12-07 23:05 - 000222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrobj.dll
2017-12-12 19:23 - 2017-12-07 23:05 - 000164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscript.exe
2017-12-12 19:23 - 2017-12-07 23:05 - 000019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll
2017-12-12 19:23 - 2017-12-07 23:04 - 001498112 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2017-12-12 19:23 - 2017-12-07 23:04 - 001321472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2017-12-12 19:23 - 2017-12-07 23:04 - 000568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2017-12-12 19:23 - 2017-12-07 23:03 - 002467840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2017-12-12 19:23 - 2017-12-07 23:03 - 001559552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-12-12 19:23 - 2017-12-07 23:03 - 001230848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2017-12-12 19:23 - 2017-12-07 23:03 - 000841728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2017-12-12 19:23 - 2017-12-07 23:03 - 000708096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
2017-12-12 19:23 - 2017-12-07 23:03 - 000708096 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2017-12-12 19:23 - 2017-12-07 23:03 - 000594944 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2017-12-12 19:23 - 2017-12-07 23:03 - 000403968 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2017-12-12 19:23 - 2017-12-07 23:03 - 000308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2017-12-12 19:23 - 2017-12-07 23:03 - 000085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\hascsp.dll
2017-12-12 19:23 - 2017-12-07 23:02 - 002864640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2017-12-12 19:23 - 2017-12-07 23:02 - 002117632 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2017-12-12 19:23 - 2017-12-07 23:02 - 000815616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-12-12 19:23 - 2017-12-07 23:02 - 000813056 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2017-12-12 19:23 - 2017-12-07 23:02 - 000496640 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2017-12-12 19:23 - 2017-12-07 23:01 - 001980928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
2017-12-12 19:23 - 2017-12-07 23:01 - 000601088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2017-12-12 19:23 - 2017-12-07 23:01 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll
2017-12-12 19:23 - 2017-12-07 23:00 - 001509888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2017-12-12 19:23 - 2017-12-07 22:59 - 002105856 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-12-12 19:23 - 2017-12-07 22:59 - 001666048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2017-12-12 19:23 - 2017-12-07 22:59 - 001058304 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2017-12-12 19:23 - 2017-12-07 22:59 - 000880640 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2017-12-12 19:23 - 2017-12-07 22:58 - 003478016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2017-12-12 19:23 - 2017-12-07 22:58 - 001547264 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-12-12 19:23 - 2017-12-07 22:58 - 001353728 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2017-12-12 19:23 - 2017-12-07 22:58 - 000812032 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2017-12-12 19:23 - 2017-12-07 22:57 - 001822208 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-12-12 19:23 - 2017-12-07 22:57 - 001487872 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-12-12 19:23 - 2017-12-07 22:56 - 002666496 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2017-12-12 19:23 - 2017-12-07 22:56 - 001739264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2017-12-12 19:23 - 2017-12-07 22:56 - 000685056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-12-12 19:23 - 2017-12-07 22:54 - 002510336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2017-12-12 19:23 - 2017-12-07 22:54 - 001570816 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2017-12-12 19:23 - 2017-12-07 22:54 - 001160704 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2017-12-10 16:02 - 2017-12-10 16:02 - 000059896 _____ C:\Users\hzand\OneDrive\Documenten\cc_20171210_160217.reg
2017-12-10 15:59 - 2017-12-10 15:59 - 000000000 ___HD C:\Users\hzand\MicrosoftEdgeBackups
2017-12-10 15:42 - 2017-12-10 15:42 - 000000450 _____ C:\Users\hzand\Desktop\Hotmail.url
2017-12-06 22:03 - 2017-12-06 22:03 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2017-12-06 22:00 - 2017-12-13 14:20 - 000000000 ___RD C:\Users\hzand\3D Objects
2017-12-06 21:59 - 2017-12-06 21:59 - 000000020 ___SH C:\Users\hzand\ntuser.ini
2017-12-06 21:57 - 2017-12-23 18:53 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-12-06 21:57 - 2017-12-13 17:17 - 000003938 _____ C:\WINDOWS\System32\Tasks\CCleaner Update
2017-12-06 21:57 - 2017-12-06 22:07 - 000003358 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2753020900-3500922324-953930212-1001
2017-12-06 21:57 - 2017-12-06 21:57 - 000003502 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2017-12-06 21:57 - 2017-12-06 21:57 - 000003278 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2017-12-06 21:57 - 2017-12-06 21:57 - 000002218 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2017-12-06 21:57 - 2017-12-06 21:57 - 000000000 ____D C:\WINDOWS\System32\Tasks\S-1-5-21-2753020900-3500922324-953930212-1001
2017-12-06 21:57 - 2017-12-06 21:57 - 000000000 ____D C:\WINDOWS\System32\Tasks\NCH Software
2017-12-06 21:55 - 2017-12-06 21:56 - 000007623 _____ C:\WINDOWS\diagwrn.xml
2017-12-06 21:55 - 2017-12-06 21:56 - 000007623 _____ C:\WINDOWS\diagerr.xml
2017-12-06 21:54 - 2017-12-23 18:58 - 002145508 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-12-06 21:43 - 2017-12-06 21:43 - 000000000 ____D C:\ProgramData\USOShared
2017-12-06 21:41 - 2017-12-06 21:41 - 000001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-12-06 21:38 - 2017-12-06 22:18 - 000000000 ____D C:\Users\hzand\AppData\Local\Packages
2017-12-06 21:37 - 2017-12-22 17:44 - 000000000 ____D C:\Users\hzand
2017-12-06 21:37 - 2017-12-06 21:37 - 000000000 _SHDL C:\Users\hzand\Sjablonen
2017-12-06 21:37 - 2017-12-06 21:37 - 000000000 _SHDL C:\Users\hzand\Netwerkprinteromgeving
2017-12-06 21:37 - 2017-12-06 21:37 - 000000000 _SHDL C:\Users\hzand\Mijn documenten
2017-12-06 21:37 - 2017-12-06 21:37 - 000000000 _SHDL C:\Users\hzand\Menu Start
2017-12-06 21:37 - 2017-12-06 21:37 - 000000000 _SHDL C:\Users\hzand\AppData\Roaming\Microsoft\Windows\Start Menu\Programma's
2017-12-06 21:37 - 2017-12-06 21:37 - 000000000 _SHDL C:\Users\hzand\AppData\Local\Geschiedenis
2017-12-06 21:35 - 2017-09-29 14:41 - 002241024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2017-12-06 21:32 - 2017-12-24 11:16 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-12-06 21:31 - 2017-12-13 14:19 - 000389792 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-12-06 21:27 - 2017-12-19 19:07 - 000000000 ____D C:\Windows.old
2017-12-06 21:24 - 2017-12-06 21:27 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2017-12-06 21:22 - 2017-12-06 21:24 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2017-12-06 21:21 - 2017-12-06 21:21 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2017-12-06 21:19 - 2017-12-06 21:19 - 013655552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2017-12-06 21:19 - 2017-12-06 21:19 - 012687360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 021754368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 017159680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 017084416 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 013703168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 012829696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 011923456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 007831248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 006791472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 006015200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 005615968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 004814848 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 004772352 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 004648528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 004487968 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 004385280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 004249600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 003578368 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 003334144 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 003331520 _____ C:\WINDOWS\system32\Windows.Mirage.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 003186688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 003163648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 003010720 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 002972672 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 002890240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 002869760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 002859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 002783744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 002717392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 002633216 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 002596352 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 002573208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 002491112 _____ C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 002465848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 002446744 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 002412168 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 002395032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 002393600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 002339296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 002269080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 002208768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001990160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001970520 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001954048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001806336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001694224 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001664000 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001642520 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001636376 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001615720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001585376 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001558856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001554216 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001507736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001495040 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001488792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001474680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001470976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001463856 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001454568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001432816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001425408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001424896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001413760 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2017-12-06 21:18 - 2017-12-06 21:18 - 001377080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001323840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001289216 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001280000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001277848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 001261864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001259344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001208184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 001200536 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 001167360 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001148216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001124760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContentDeliveryManager.Utilities.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001090440 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2017-12-06 21:18 - 2017-12-06 21:18 - 001057824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001054720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001054280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001053592 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 001015008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001012120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Services.TargetedContent.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000975872 _____ C:\WINDOWS\system32\FaceProcessor.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 000925184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000924136 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 000902416 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000899584 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000891800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 000887296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000840440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Perception.Stub.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000830464 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9on12.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000823808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000791960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 000770048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000768512 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000754688 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000749976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000746904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Services.TargetedContent.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000739696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000726016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000713624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000703568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000703536 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000665088 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000661664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000660480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000654848 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000654048 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000640512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswstr10.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000618496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000615768 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 000614912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apphelp.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000612760 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000610712 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000597160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000591872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000590944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000588288 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000566272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000559512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000557056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9on12.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000556544 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000555416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2017-12-06 21:18 - 2017-12-06 21:18 - 000542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000534528 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000529408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000519152 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000506256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Perception.Stub.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000495000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000487424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcSpecfc.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000479912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64win.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000478208 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000474112 _____ (Microsoft Corporation) C:\WINDOWS\system32\DictationManager.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000471960 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000464408 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000444928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000442880 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000436120 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000432640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000432640 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000428952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000424960 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000418712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000404888 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000398744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000394752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000374784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000373656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000372224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcLayers.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000362176 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioIso.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 000361984 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatializerApo.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000354304 _____ (Microsoft Corporation) C:\WINDOWS\system32\WwaApi.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000354200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000353848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000353688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000351232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DictationManager.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000336896 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicRuntimes.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 000326144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000319352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000315392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcLayers.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000293888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WwaApi.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExecModelClient.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000285080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatializerApo.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000269696 _____ C:\WINDOWS\system32\FaceProcessorCore.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 000264040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 000261632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000242176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExecModelClient.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreenps.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000238080 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManager.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000230296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 000204288 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000198888 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000187288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000175104 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_ContentDeliveryManager.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000168448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SIUF.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000160256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smartscreenps.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000149400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000147864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_CapabilityAccess.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptcatsvc.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\luafv.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmCx.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000097792 _____ C:\WINDOWS\system32\runexehelper.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 000095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceUpdateAgent.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000082840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\acppage.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\acppage.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CapabilityAccessManagerClient.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000060824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\urscx01000.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadjcsp.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuautoappupdate.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcSpecfc.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000048112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdrleakdiag.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 000045464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdrleakdiag.exe
2017-12-06 21:18 - 2017-12-06 21:18 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
2017-12-06 21:18 - 2017-12-06 21:18 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcVSp1res.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcVSp1res.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 000008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjint40.dll
2017-12-06 16:41 - 2017-12-10 16:01 - 000000000 ___DC C:\WINDOWS\Panther
2017-12-02 19:53 - 2017-12-02 19:53 - 000000000 ____D C:\Users\hzand\AppData\Local\ProductivityBossTooltab
2017-12-02 19:50 - 2017-12-02 19:50 - 000000000 ____D C:\Users\hzand\AppData\Local\Fun Custom CreationsTooltab
2017-12-02 19:42 - 2017-12-02 19:42 - 000000000 ____D C:\Users\hzand\AppData\Local\EasyPhotoEditTooltab
2017-12-02 19:37 - 2017-12-06 21:39 - 000000000 ____D C:\Users\hzand\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\InPixio
2017-12-02 19:37 - 2017-12-02 19:37 - 000000000 ____D C:\Users\hzand\AppData\Roaming\Avanquest Software
2017-12-02 19:37 - 2017-12-02 19:37 - 000000000 ____D C:\Users\hzand\AppData\Local\InPixio
2017-11-27 17:09 - 2017-12-06 21:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-11-27 17:09 - 2017-11-27 17:09 - 000001906 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-11-27 17:09 - 2017-11-27 17:09 - 000000000 ____D C:\WINDOWS\system32\Drivers\etc\BACKUP
2017-11-27 17:09 - 2017-11-27 17:09 - 000000000 ____D C:\ProgramData\MB2Migration
2017-11-27 17:09 - 2017-11-27 17:09 - 000000000 ____D C:\Program Files\Malwarebytes
2017-11-27 14:36 - 2017-11-27 14:36 - 000011264 ___SH C:\Users\hzand\OneDrive\Documenten\Thumbs.db
2017-11-27 14:27 - 2017-11-27 14:27 - 000000000 ____D C:\WINDOWS\Microsoft Antimalware
==================== Een Maand Gewijzigd bestanden en mappen ========
(Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)
2017-12-23 18:58 - 2017-09-30 15:32 - 000981302 _____ C:\WINDOWS\system32\perfh013.dat
2017-12-23 18:58 - 2017-09-30 15:32 - 000211406 _____ C:\WINDOWS\system32\perfc013.dat
2017-12-23 16:30 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\DeliveryOptimization
2017-12-23 16:29 - 2017-09-29 14:46 - 000000000 ___HD C:\Program Files\WindowsApps
2017-12-23 16:29 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-12-21 09:40 - 2017-07-17 20:21 - 000002355 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-12-19 19:05 - 2017-08-16 11:09 - 000000000 ____D C:\ProgramData\CanonIJPLM
2017-12-16 10:11 - 2017-09-29 14:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-12-14 10:08 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\rescache
2017-12-14 10:02 - 2017-09-29 14:44 - 000000000 ____D C:\WINDOWS\INF
2017-12-13 17:17 - 2017-07-13 20:28 - 000000897 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-12-13 17:08 - 2017-07-12 16:30 - 000000000 ____D C:\ProgramData\Spotnet
2017-12-13 14:20 - 2016-04-27 07:37 - 000000000 __RHD C:\Users\Public\AccountPictures
2017-12-13 14:17 - 2017-09-29 09:45 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2017-12-13 14:16 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\TextInput
2017-12-13 14:16 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2017-12-13 14:16 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\oobe
2017-12-13 14:16 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\appraiser
2017-12-13 14:16 - 2017-09-29 09:45 - 000000000 ____D C:\WINDOWS\system32\Dism
2017-12-13 12:05 - 2017-11-17 20:10 - 000077432 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-12-12 20:34 - 2017-08-28 18:46 - 000001283 _____ C:\Users\hzand\Desktop\Internet Explorer.lnk
2017-12-12 19:32 - 2017-07-12 18:02 - 000000000 ____D C:\WINDOWS\system32\MRT
2017-12-12 19:29 - 2017-10-10 19:02 - 133326408 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe
2017-12-12 19:29 - 2017-07-12 18:02 - 133326408 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-12-12 17:18 - 2017-09-16 15:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Backup and Sync from Google
2017-12-10 19:00 - 2017-07-25 17:55 - 000000000 ____D C:\Users\hzand\OneDrive\Documenten\Zuid Engeland
2017-12-10 17:10 - 2017-08-03 17:44 - 000000000 ____D C:\Users\hzand\AppData\Local\Albelli Fotoboeken
2017-12-08 18:07 - 2017-07-12 12:56 - 000000000 ___RD C:\Users\hzand\OneDrive
2017-12-07 09:35 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\appcompat
2017-12-06 22:17 - 2017-09-29 14:46 - 000000000 ___RD C:\WINDOWS\PrintDialog
2017-12-06 22:07 - 2017-07-12 12:56 - 000002419 _____ C:\Users\hzand\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-12-06 22:01 - 2017-07-12 15:09 - 000000000 ____D C:\Users\hzand\AppData\Local\ConnectedDevicesPlatform
2017-12-06 22:01 - 2017-07-12 12:52 - 000000000 ____D C:\Users\hzand\AppData\Local\TileDataLayer
2017-12-06 22:00 - 2017-10-05 19:27 - 000002386 _____ C:\Users\hzand\Desktop\Google Chrome.lnk
2017-12-06 21:58 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files\windows nt
2017-12-06 21:57 - 2017-09-29 09:45 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2017-12-06 21:55 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\Registration
2017-12-06 21:54 - 2017-09-29 14:46 - 000000000 __RSD C:\WINDOWS\media
2017-12-06 21:54 - 2017-07-12 14:56 - 000023076 _____ C:\WINDOWS\system32\emptyregdb.dat
2017-12-06 21:49 - 2017-07-12 14:43 - 000000000 ____D C:\ProgramData\NVIDIA
2017-12-06 21:47 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2017-12-06 21:46 - 2017-08-14 20:04 - 000000000 ____D C:\Users\hzand\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-12-06 21:43 - 2017-09-29 14:46 - 000000000 ____D C:\ProgramData\USOPrivate
2017-12-06 21:41 - 2017-09-29 14:46 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-12-06 21:39 - 2017-07-12 16:30 - 000000000 ____D C:\Users\hzand\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotnet
2017-12-06 21:36 - 2017-09-29 09:45 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2017-12-06 21:36 - 2017-07-12 14:44 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2017-12-06 21:34 - 2017-07-12 14:42 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2017-12-06 21:31 - 2017-09-29 14:46 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2017-12-06 21:27 - 2017-09-29 14:49 - 000000000 ____D C:\WINDOWS\Setup
2017-12-06 21:27 - 2017-09-29 14:46 - 000000000 __RHD C:\Users\Public\Libraries
2017-12-06 21:27 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2017-12-06 21:27 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\spool
2017-12-06 21:27 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\NDF
2017-12-06 21:27 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2017-12-06 21:27 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\Help
2017-12-06 21:27 - 2017-09-29 14:46 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-12-06 21:27 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2017-12-06 21:27 - 2017-09-06 19:24 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016-hulpprogramma's
2017-12-06 21:27 - 2017-08-16 11:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gebruikersregistratie voor Canon MG3600 series
2017-12-06 21:27 - 2017-08-16 11:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG3600 series Manual
2017-12-06 21:27 - 2017-08-16 11:29 - 000000000 ____D C:\WINDOWS\system32\STRING
2017-12-06 21:27 - 2017-08-15 19:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2017-12-06 21:27 - 2017-08-14 20:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-12-06 21:27 - 2017-07-13 20:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-12-06 21:27 - 2017-03-18 22:03 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2017-12-06 21:27 - 2016-04-27 07:18 - 000000000 ____D C:\WINDOWS\ShellNew
2017-12-06 21:24 - 2017-08-16 11:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2017-12-06 21:24 - 2017-07-12 14:44 - 000000000 ____D C:\WINDOWS\system32\SRSLabs
2017-12-06 21:24 - 2017-07-12 14:44 - 000000000 ____D C:\Program Files\Realtek
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\zu-ZA
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\yo-NG
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\xh-ZA
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\wo-SN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\uz-Latn-UZ
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\tn-ZA
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\tk-TM
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\ti-ET
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\tg-Cyrl-TJ
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\sw-KE
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-RS
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-BA
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\si-LK
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\sd-Arab-PK
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\rw-RW
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\quc-Latn-GT
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\prs-AF
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-Arab-PK
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\nso-ZA
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\mn-MN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\ky-KG
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\ku-Arab-IQ
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\ig-NG
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\ha-Latn-NG
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\chr-CHER-US
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES-valencia
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\bs-Latn-BA
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-BD
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\az-Latn-AZ
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\zu-ZA
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\yo-NG
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\xh-ZA
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\wo-SN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\uz-Latn-UZ
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\ur-PK
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\ug-CN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\tt-RU
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\tn-ZA
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\tk-TM
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\ti-ET
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\tg-Cyrl-TJ
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\te-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\ta-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\sw-KE
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-RS
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-BA
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\sq-AL
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\si-LK
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\sd-Arab-PK
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\rw-RW
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\quc-Latn-GT
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\prs-AF
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\pa-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\pa-Arab-PK
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\or-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\nso-ZA
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\nn-NO
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\ne-NP
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\mr-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\mn-MN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\ml-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\lo-LA
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\lb-LU
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\ky-KG
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\ku-Arab-IQ
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\kok-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\kn-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\km-KH
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\kk-KZ
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\ka-GE
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\is-IS
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\ig-NG
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\id-ID
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\hy-AM
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\ha-Latn-NG
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\gu-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\gd-GB
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\ga-IE
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\fil-PH
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\fa-IR
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\cy-GB
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\chr-CHER-US
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\ca-ES-valencia
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\bs-Latn-BA
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\bn-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\bn-BD
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\be-BY
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\az-Latn-AZ
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\as-IN
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\am-ET
2017-12-06 21:20 - 2017-09-30 15:33 - 000000000 ____D C:\WINDOWS\system32\af-ZA
2017-12-06 21:20 - 2017-09-29 14:46 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2017-12-06 21:20 - 2017-09-29 14:46 - 000000000 ___SD C:\WINDOWS\system32\F12
2017-12-06 21:20 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2017-12-06 21:20 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2017-12-06 21:20 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-12-06 21:20 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\ShellExperiences
2017-12-06 21:20 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\Provisioning
2017-12-06 21:20 - 2017-09-29 14:46 - 000000000 ____D C:\Program Files\Windows Defender
2017-12-06 21:20 - 2017-09-29 14:46 - 000000000 ____D C:\PerfLogs
2017-12-05 20:09 - 2017-10-22 10:48 - 000000000 ____D C:\Users\hzand\OneDrive\Documenten\Drostenhuis
2017-12-03 23:38 - 2017-09-29 14:49 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-12-03 23:38 - 2017-09-29 14:49 - 000177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-11-27 17:48 - 2017-09-06 19:19 - 000000000 ____D C:\Users\hzand\AppData\Local\Microsoft Help
2017-11-27 17:09 - 2017-07-17 21:18 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-11-27 14:53 - 2017-07-12 16:30 - 000002199 _____ C:\Users\hzand\Desktop\Spotnet.lnk
2017-11-27 14:52 - 2017-07-12 16:29 - 000000000 ____D C:\Users\hzand\AppData\Local\Spotnet
==================== Bamital & volsnap ======================
(Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.)
C:\WINDOWS\system32\winlogon.exe => Bestand is getekend
C:\WINDOWS\system32\wininit.exe => Bestand is getekend
C:\WINDOWS\explorer.exe => Bestand is getekend
C:\WINDOWS\SysWOW64\explorer.exe => Bestand is getekend
C:\WINDOWS\system32\svchost.exe => Bestand is getekend
C:\WINDOWS\SysWOW64\svchost.exe => Bestand is getekend
C:\WINDOWS\system32\services.exe => Bestand is getekend
C:\WINDOWS\system32\User32.dll => Bestand is getekend
C:\WINDOWS\SysWOW64\User32.dll => Bestand is getekend
C:\WINDOWS\system32\userinit.exe => Bestand is getekend
C:\WINDOWS\SysWOW64\userinit.exe => Bestand is getekend
C:\WINDOWS\system32\rpcss.dll => Bestand is getekend
C:\WINDOWS\system32\dnsapi.dll => Bestand is getekend
C:\WINDOWS\SysWOW64\dnsapi.dll => Bestand is getekend
C:\WINDOWS\system32\Drivers\volsnap.sys => Bestand is getekend
LastRegBack: 2017-12-20 13:46
==================== Eind van FRST.txt ============================
Extra scanresultaten van Farbar Recovery Scan Tool (x64) Versie: 23-12-2017 01
Gestart door hzand (24-12-2017 11:21:15)
Gestart vanaf C:\Users\hzand\Desktop
Windows 10 Home Versie 1709 16299.125 (X64) (2017-12-06 20:59:24)
Boot Modus: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-2753020900-3500922324-953930212-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2753020900-3500922324-953930212-503 - Limited - Disabled)
Gast (S-1-5-21-2753020900-3500922324-953930212-501 - Limited - Disabled)
hzand (S-1-5-21-2753020900-3500922324-953930212-1001 - Administrator - Enabled) => C:\Users\hzand
WDAGUtilityAccount (S-1-5-21-2753020900-3500922324-953930212-504 - Limited - Disabled)
==================== Security Center ========================
(Als een item is opgenomen in de fixlist, zal het worden verwijderd.)
AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
==================== Geïnstalleerde programma's ======================
(Alleen de adware-programma's met 'verborgen' vlag zou kunnen worden toegevoegd aan de fixlist om ze zichtbaar te maken. De adware-programma's moeten handmatig gedeinstallerd worden.)
Albelli Fotoboeken (HKU\S-1-5-21-2753020900-3500922324-953930212-1001\...\{B7961CCE-CF36-4858-BC1A-D06D3D25ECE5}_is1) (Version: 13.0.1.2436 - albelli NL)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 17.9.2322 - AVAST Software)
Backup and Sync from Google (HKLM-x32\...\{908DB568-E5FA-40C7-A2AA-AB340190858B}) (Version: 3.38.7642.3857 - Google, Inc.)
Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.7.0.0 - Canon Inc.)
Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version: 1.5.4.4 - Canon Inc.)
Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.7.0 - Canon Inc.)
Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: 1.1.20.13 - Canon Inc.)
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: 5.3.1 - Canon Inc.)
Canon MG3600 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG3600_series) (Version: 1.00 - Canon Inc.)
Canon MG3600 series On-screen Manual (HKLM-x32\...\Canon MG3600 series On-screen Manual) (Version: 7.8.0 - Canon Inc.)
Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 3.5.2 - Canon Inc.)
Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 3.5.2 - Canon Inc.)
Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.3.0 - Canon Inc.)
Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.7.1 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.38 - Piriform)
EasyPhotoEdit Internet Explorer Homepage and New Tab (HKU\S-1-5-21-2753020900-3500922324-953930212-1001\...\EasyPhotoEditTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== AANDACHT
Fun Custom Creations Internet Explorer Homepage and New Tab (HKU\S-1-5-21-2753020900-3500922324-953930212-1001\...\Fun Custom CreationsTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== AANDACHT
Gebruikersregistratie voor Canon MG3600 series (HKLM-x32\...\Gebruikersregistratie voor Canon MG3600 series) (Version: - â€Canon Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 64.0.3282.39 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden
InPixio Photo Clip 7 Demo (HKU\S-1-5-21-2753020900-3500922324-953930212-1001\...\{84AC98D2-ED9C-417b-BB6B-598FBCBE253C}) (Version: 7.00 - InPixio)
KMSpico (HKLM\...\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1) (Version: - )
Malwarebytes versie 3.3.1.2183 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.3.1.2183 - Malwarebytes)
Microsoft Office Professional Plus 2016 (HKLM-x32\...\Office16.PROPLUS) (Version: 16.0.4266.1001 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2753020900-3500922324-953930212-1001\...\OneDriveSetup.exe) (Version: 17.3.7131.1115 - Microsoft Corporation)
NVIDIA Update 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)
Outils de vérification linguistique 2016 de Microsoft Office - Français (HKLM-x32\...\{90160000-001F-040C-0000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
PhotoPad Image Editor (HKLM-x32\...\PhotoPad) (Version: 3.12 - NCH Software)
ProductivityBoss Internet Explorer Homepage and New Tab (HKU\S-1-5-21-2753020900-3500922324-953930212-1001\...\ProductivityBossTooltab Uninstall Internet Explorer) (Version: - Mindspark Interactive Network, Inc.) <==== AANDACHT
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7543 - Realtek Semiconductor Corp.)
Revo Uninstaller 2.0.3 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.3 - VS Revo Group, Ltd.)
Spotnet (HKU\S-1-5-21-2753020900-3500922324-953930212-1001\...\Spotnet) (Version: 2.0.0.265 - Spotnet)
Taalprogramma's voor Microsoft Office 2016 - Nederlands (HKLM-x32\...\{90160000-001F-0413-0000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Update for Skype for Business 2016 (KB3114846) 32-Bit Edition (HKLM-x32\...\{90160000-0011-0000-0000-0000000FF1CE}_Office16.PROPLUS_{F51FCE9D-80C7-43F0-8DE6-F1173EEAE292}) (Version: - Microsoft)
Update for Skype for Business 2016 (KB3114846) 32-Bit Edition (HKLM-x32\...\{90160000-012B-0413-0000-0000000FF1CE}_Office16.PROPLUS_{F51FCE9D-80C7-43F0-8DE6-F1173EEAE292}) (Version: - Microsoft)
Windows 10-updateassistent (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22243 - Microsoft Corporation)
WinRAR 5.40 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
==================== Aangepaste CLSID (gefilterd): ==========================
(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-11-20] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-11-20] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-11-20] (Google)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-12-22] (AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-12-22] (AVAST Software)
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-11-20] (Google)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-16] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-16] (Alexander Roshal)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-12-22] (AVAST Software)
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-11-20] (Google)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2016-11-14] (NVIDIA Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-12-22] (AVAST Software)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-16] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-16] (Alexander Roshal)
==================== Geplande Taken (gefilterd) =============
(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)
Task: {1E0853C9-10C8-4C79-8BE0-9A8565CF0BBC} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2017-12-01] (Piriform Ltd)
Task: {25405B4F-2EE3-41D3-85AA-F054AF549F19} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe
Task: {2F063D09-963A-473C-A13A-376933CCABEA} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2017-12-13] (AVAST Software)
Task: {3A62BEB0-8189-4CD6-A7E6-012BA16433F0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-07-17] (Google Inc.)
Task: {53791A3A-0F28-403F-BE7C-8FD6C8DDCEB0} - System32\Tasks\S-1-5-21-2753020900-3500922324-953930212-1001\DataSenseLiveTileTask => C:\WINDOWS\System32\DataUsageLiveTileTask.exe [2017-09-29] (Microsoft Corporation)
Task: {6371CD91-8C38-4EFB-B395-A02A80D7B8AD} - System32\Tasks\NCH Software\PhotoPadDowngrade => C:\Program Files (x86)\NCH Software\PhotoPad\photopad.exe [2017-08-11] (NCH Software)
Task: {67E5F48D-02F7-4FD9-8CE7-968B2306CBB9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-07-17] (Google Inc.)
Task: {7B97B6E6-79BB-49E8-A918-DB080EDCC410} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe [2015-12-02] (@ByELDI)
Task: {91080CE2-30C4-4138-9957-CB788410EA98} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-12-22] (AVAST Software)
Task: {AD80731E-3822-4FCF-B145-50423F703E28} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
Task: {B195110D-8B53-4A6F-A0E4-D02BD54C1D46} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
Task: {F20E6BD7-3088-4750-8E0B-A67385B39F61} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-12-01] (Piriform Ltd)
(Als een item is opgenomen in de fixlist, de taak (job) bestand wordt verplaatst. Het bestand dat wordt uitgevoerd door de taak zal niet worden verplaatst.)
==================== Snelkoppelingen & WMI ========================
(De items kunnen worden opgenomen in de fixlist.txt om hersteld of verwijderd te worden.)
Shortcut: C:\Users\hzand\Favorites\NCH Software Download Site.lnk -> hxxp://www.nchsoftware.com/index.htm
==================== Geladen Modules (gefilterd) ==============
2017-09-29 14:41 - 2017-09-29 14:41 - 000184432 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2017-07-12 14:43 - 2016-11-14 12:15 - 000135224 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2017-11-27 17:09 - 2017-12-13 12:05 - 002301384 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2017-08-16 11:09 - 2017-03-31 11:11 - 000387144 _____ () C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE
2017-12-06 21:18 - 2017-12-06 21:18 - 011044864 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-12-06 21:18 - 2017-12-06 21:18 - 001804288 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-12-12 19:11 - 2017-12-12 19:12 - 000086528 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.10.572.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-12-12 19:11 - 2017-12-12 19:12 - 000195072 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.10.572.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-12-12 19:11 - 2017-12-12 19:12 - 024735744 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.10.572.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-12-12 19:11 - 2017-12-12 19:12 - 002551808 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.10.572.0_x64__kzf8qxf38zg5c\skypert.dll
2017-12-12 19:11 - 2017-12-12 19:12 - 000671744 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.10.572.0_x64__kzf8qxf38zg5c\RtmMvrUap.dll
2017-09-29 14:41 - 2017-09-29 14:41 - 000047616 _____ () C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUITelemetry.dll
2017-09-29 14:41 - 2017-09-29 14:41 - 004173824 _____ () C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUIDataModel.dll
2017-09-29 14:41 - 2017-09-29 14:41 - 003634176 _____ () C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUIViewModels.dll
2017-12-22 17:40 - 2017-12-22 17:40 - 000206152 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-12-22 17:40 - 2017-12-22 17:40 - 000058016 _____ () C:\Program Files\AVAST Software\Avast\module_lifetime.dll
2017-12-22 17:40 - 2017-12-22 17:40 - 000057504 _____ () C:\Program Files\AVAST Software\Avast\dll_loader.dll
2017-12-13 17:21 - 2017-12-13 17:21 - 067109376 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2017-12-22 17:40 - 2017-12-22 17:40 - 000289272 _____ () C:\Program Files\AVAST Software\Avast\tasks_core.dll
2017-12-22 17:40 - 2017-12-22 17:40 - 000282560 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll
==================== Alternate Data Streams (gefilterd) =========
(Als een item is opgenomen in de fixlist, alleen de ADS wordt verwijderd.)
==================== Veilige Modus (gefilterd) ===================
(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. De "AlternateShell" waarde wordt hersteld.)
==================== Bestandskoppeling (gefilterd) ===============
(Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd.)
==================== Internet Explorer vertrouwde/beperkte toegang ===============
(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd.)
==================== Hosts inhoud: ===============================
(Als nodig Hosts: opdracht kan worden opgenomen in de fixlist om Hosts te resetten.)
2015-10-30 08:24 - 2017-11-27 17:25 - 000000851 _____ C:\WINDOWS\system32\Drivers\etc\hosts
0.0.0.0 serius.mwbsys.com
==================== Andere gebieden ============================
(Momenteel is er geen automatische fix voor dit onderdeel.)
HKU\S-1-5-21-2753020900-3500922324-953930212-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\hzand\Desktop\IMG-20171210-WA0003.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Windows Firewall is ingeschakeld.
==================== MSCONFIG/TASK MANAGER Uitgeschakelde items ==
HKLM\...\StartupApproved\Run: => "RtHDVCpl"
HKLM\...\StartupApproved\Run: => "NvBackend"
HKLM\...\StartupApproved\Run: => "WinZip PreLoader"
HKLM\...\StartupApproved\Run: => "WinZip UN"
HKLM\...\StartupApproved\Run32: => "IJNetworkScannerSelectorEX"
HKLM\...\StartupApproved\Run32: => "CanonQuickMenu"
HKU\S-1-5-21-2753020900-3500922324-953930212-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2753020900-3500922324-953930212-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
==================== Firewall regels (gefilterd) ===============
(Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)
FirewallRules: [{0A3D4003-092F-4890-A71E-525BCE41A627}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office16\UcMapi.exe
FirewallRules: [{38F1828D-5031-45ED-970B-29E41890BFB3}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office16\UcMapi.exe
FirewallRules: [{75B27B9B-303A-4B8E-AA7D-6658BE0658FC}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office16\lync.exe
FirewallRules: [{AE138527-4102-49AC-895F-0D264785441F}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office16\lync.exe
FirewallRules: [{4863625A-7DFF-424C-9B5D-C93C3C1D4EB2}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Herstelpunten =========================
16-12-2017 10:09:24 Windows Update
23-12-2017 13:58:36 Gepland controlepunt
==================== Defecte Apparaatbeheer Apparaten =============
==================== Eventlog fouten: =========================
Applicatiefouten:
==================
Error: (12/23/2017 09:39:09 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: LAPTOP)
Description: Het pakket Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe+App is beëindigd omdat het onderbreken te lang duurde.
Error: (12/22/2017 05:49:19 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: Kan DLL voor uitbreidbare items rdyboost niet laden. De eerste vier bytes (DWORD) in de sectie Gegevens bevatten de Windows-foutcode.
Error: (12/22/2017 05:49:12 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: De openprocedure voor de BITS-service in DLL-bestand C:\Windows\System32\bitsperf.dll is mislukt. Prestatiemetergegevens voor deze service zijn niet beschikbaar. De eerste vier bytes (DWORD) in de sectie Gegevens bevatten de foutcode.
Error: (12/21/2017 07:23:27 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: LAPTOP)
Description: Het pakket microsoft.windowscommunicationsapps_17.8730.21155.0_x64__8wekyb3d8bbwe+microsoft.windowslive.mail is beëindigd omdat het onderbreken te lang duurde.
Error: (12/21/2017 07:22:41 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: LAPTOP)
Description: Het pakket microsoft.windowscommunicationsapps_17.8730.21155.0_x64__8wekyb3d8bbwe+microsoft.windowslive.mail is beëindigd omdat het onderbreken te lang duurde.
Error: (12/21/2017 07:22:00 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: LAPTOP)
Description: Het pakket microsoft.windowscommunicationsapps_17.8730.21155.0_x64__8wekyb3d8bbwe+microsoft.windowslive.mail is beëindigd omdat het onderbreken te lang duurde.
Error: (12/21/2017 09:36:19 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: LAPTOP)
Description: Het pakket Microsoft.Windows.Photos_2017.39101.16720.0_x64__8wekyb3d8bbwe+App is beëindigd omdat het onderbreken te lang duurde.
Error: (12/20/2017 07:21:51 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: LAPTOP)
Description: Het pakket Microsoft.Windows.ShellExperienceHost_10.0.16299.15_neutral_neutral_cw5n1h2txyewy+App is beëindigd omdat het onderbreken te lang duurde.
Error: (12/19/2017 07:27:38 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Het programma iexplore.exe, versie 11.0.16299.98 reageert niet meer op Windows en is afgesloten. Als u wilt zien of er meer informatie over het probleem beschikbaar is, raadpleegt u de probleemgeschiedenis in het onderdeel Beveiliging en onderhoud van het Configuratiescherm.
Proces-id: 2228
Starttijd: 01d378f6a3b170bb
Eindtijd: 27
Toepassingspad: C:\Program Files (x86)\Internet Explorer\iexplore.exe
Rapport-id: d549d535-6b18-4035-8666-80439779a1bf
Volledige pakketnaam met fout:
Relatieve toepassings-id van pakket met fout:
Error: (12/18/2017 06:34:17 PM) (Source: ESENT) (EventID: 455) (User: )
Description: taskhostw (6124,R,0) WebCacheLocal: Fout -1032 (0xfffffbf8) is opgetreden tijdens het openen van logboekbestand C:\Users\hzand\AppData\Local\Microsoft\Windows\WebCache\V01.log.
Systeemfouten:
=============
Error: (12/24/2017 10:56:47 AM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 4
Error: (12/23/2017 11:19:03 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 5
Error: (12/23/2017 08:18:44 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 4
Error: (12/23/2017 08:03:13 PM) (Source: DCOM) (EventID: 10016) (User: LAPTOP)
Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
en APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
aan de gebruiker LAPTOP\hzand SID (S-1-5-21-2753020900-3500922324-953930212-1001) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services.
Error: (12/23/2017 07:00:56 PM) (Source: DCOM) (EventID: 10016) (User: LAPTOP)
Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
en APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
aan de gebruiker LAPTOP\hzand SID (S-1-5-21-2753020900-3500922324-953930212-1001) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services.
Error: (12/23/2017 06:59:33 PM) (Source: DCOM) (EventID: 10016) (User: LAPTOP)
Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
en APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
aan de gebruiker LAPTOP\hzand SID (S-1-5-21-2753020900-3500922324-953930212-1001) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services.
Error: (12/23/2017 06:53:52 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: De Service KMSELDI-service kan vanwege de volgende fout niet worden gestart:
Het systeem kan het opgegeven bestand niet vinden.
Error: (12/23/2017 06:53:43 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: De vorige afsluiting van het systeem om 18:00:58 op ‎23-‎12-‎2017 is onverwacht gebeurd.
Error: (12/23/2017 05:49:14 PM) (Source: DCOM) (EventID: 10016) (User: LAPTOP)
Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
en APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
aan de gebruiker LAPTOP\hzand SID (S-1-5-21-2753020900-3500922324-953930212-1001) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services.
Error: (12/23/2017 05:11:02 PM) (Source: DCOM) (EventID: 10016) (User: LAPTOP)
Description: In de machtigingsinstellingen toepassingsspecifiek wordt de machtiging Activeren niet verleend aan Lokaal voor de COM-servertoepassing met CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
en APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
aan de gebruiker LAPTOP\hzand SID (S-1-5-21-2753020900-3500922324-953930212-1001) met het adres LocalHost (via LRPC) die wordt uitgevoerd in de toepassingscontainer Niet beschikbaar SID (Niet beschikbaar). Deze beveiligingsmachtiging kan worden gewijzigd met het beheerprogramma van Component Services.
==================== Geheugen info ===========================
Processor: Intel(R) Core(TM) i3 CPU M 350 @ 2.27GHz
Percentage geheugen in gebruik: 54%
Totaal fysiek RAM-geheugen: 3956.55 MB
Beschikbaar fysiek RAM-geheugen: 1793.2 MB
Totaal Virtueel geheugen: 4660.55 MB
Beschikbaar Virtual geheugen: 2563.34 MB
==================== Schijven ================================
Drive c: () (Fixed) (Total:197.58 GB) (Free:161.38 GB) NTFS
Drive d: () (Fixed) (Total:166.8 GB) (Free:155.2 GB) NTFS
==================== MBR & Partitietabel ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 3A5205A3)
Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=166.8 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=197.6 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=819 MB) - (Type=27)
==================== Eind van Addition.txt ============================