Gebruikersavatar
conny
Lid
Berichten: 32
Lid geworden op: 10 mar 2008 14:22
Locatie: antwerpen

hallo allen,

ik heb een pc beroepsmatig draaien maar de laatste weken draait deze precies op hele hoge toeren.
het betreft een HP EliteDesk 800 G5.
deze was fluisterstil tot een paar weken terug.
bij zware belasting, zoals bij het renderen, maakte hij in het verleden wel wat kabaal maar dat is normaal.
maar nu is dit dus continu.
ik vermoed dat er ergens iets niet pluis is op de achtergrond? iets dat veel geheugen en rekenkracht vraagt?
Gebruikersavatar
PeterJ
Moderator
Berichten: 3502
Lid geworden op: 22 okt 2007 23:22

Hallo,

We gaan eens kijken.

Download de Afbeelding Farbar Recovery Scan Tool 32 of 64 bit via één van de onderstaande links:
Farbar Recovery Scan Tool 32 bit (x86)
Farbar Recovery Scan Tool 64 bit (x64)

Verplaats het gedownloade bestand naar je bureaublad. Maak geen snelkoppeling.
Rechtsklik op FRST.exe dan wel FRST64.exe en klik op "Als administrator uitvoeren".
Als het programma is geopend klik Yes (Ja) bij de disclaimer.
Druk op de knop Scannen.
Na de scan worden 2 logbestanden gemaakt, "FRST.txt" en "Addition.txt" op dezelfde plaats vanwaar de 'tool' is gestart.
Voeg deze 2 logbestanden als bijlage toe aan je volgend bericht.
Member of UNITE (Unified Network of Instructors and Trusted Eliminators.)
Tevreden met de geboden hulp, overweeg een vrijblijvende donatie of plaats een bedankje. Hoe je dat doet lees je hier.
Gebruikersavatar
conny
Lid
Berichten: 32
Lid geworden op: 10 mar 2008 14:22
Locatie: antwerpen

==================== Register (gefilterd) ===================

(Als een item is opgenomen in de fixlist, zal het registeritem worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.)

HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [116960 2021-02-25] (Avast Software s.r.o. -> AVAST Software)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3942864 2016-10-13] (Logitech -> Logitech, Inc.)
HKLM-x32\...\Run: [Autodesk Desktop App] => C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe [664872 2020-03-04] (Autodesk, Inc. -> Autodesk, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [706680 2020-12-09] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-1857513966-911432345-2145300670-1001\...\Run: [HP Officejet Pro 8600 (NET)] => C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
HKU\S-1-5-21-1857513966-911432345-2145300670-1001\...\Run: [Backblaze] => C:\Program Files (x86)\Backblaze\bzbui.exe [1169248 2020-10-31] (Backblaze, Inc -> )
HKU\S-1-5-21-1857513966-911432345-2145300670-1001\...\Run: [Polar FlowSync] => C:\Program Files (x86)\Polar\Polar FlowSync\FlowSync.exe [1397248 2018-09-17] (Polar Electro Oy) [Bestand niet getekend]
HKU\S-1-5-21-1857513966-911432345-2145300670-1001\...\Run: [Spotify] => C:\Users\zcloo\AppData\Roaming\Spotify\Spotify.exe [23929928 2021-03-23] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-1857513966-911432345-2145300670-1001\...\Run: [Iperius Backup] => C:\Program Files (x86)\Iperius Backup\Iperius.exe [73688264 2019-12-13] (Enter Srl -> Enter Srl)
HKU\S-1-5-21-1857513966-911432345-2145300670-1001\...\Run: [Advanced SystemCare] => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe [3721168 2021-01-14] (IObit Information Technology -> IObit)
HKU\S-1-5-21-1857513966-911432345-2145300670-1001\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
HKLM\...\Print\Monitors\HP 5912 Status Monitor: C:\WINDOWS\system32\hpinksts5912LM.dll [331664 2012-06-18] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP Officejet Pro 8600): C:\WINDOWS\system32\HPDiscoPM5912.dll [741480 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\89.0.4389.90\Installer\chrmstp.exe [2021-03-17] (Google LLC -> Google LLC)
Lsa: [Notification Packages] DPPassFilter scecli
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\BUFFALO NAS Navigator2.lnk [2020-03-20]
ShortcutTarget: BUFFALO NAS Navigator2.lnk -> C:\Program Files (x86)\BUFFALO\NASNAVI\NasNavi.exe (Buffalo Inc. -> Buffalo Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NAS Scheduler.lnk [2020-03-20]
ShortcutTarget: NAS Scheduler.lnk -> C:\Program Files (x86)\BUFFALO\NASNAVI\nassche.exe (BUFFALO INC. -> BUFFALO INC.)
Startup: C:\Users\zcloo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Inktwaarschuwingen controleren - HP Officejet Pro 8600 (netwerk).lnk [2019-11-12]
ShortcutAndArgument: Inktwaarschuwingen controleren - HP Officejet Pro 8600 (netwerk).lnk -> C:\windows\system32\RunDll32.exe => "C:\Program Files\HP\HP Officejet Pro 8600\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN39CEWG1Q05KC;CONNECTION=NW;MONITOR=1;
Startup: C:\Users\zcloo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Verzenden naar OneNote.lnk [2019-11-12]
ShortcutTarget: Verzenden naar OneNote.lnk -> C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
GroupPolicy: Restrictie - Chrome <==== AANDACHT
Policies: C:\ProgramData\NTUSER.pol: Restrictie <==== AANDACHT
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restrictie <==== AANDACHT
HKLM\SOFTWARE\Policies\Google: Restrictie <==== AANDACHT
HKLM\SOFTWARE\Policies\Microsoft\Edge: Restrictie <==== AANDACHT

==================== Geplande Taken (gefilterd) ============

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

Task: {0B0930E1-8D4A-416C-9C2F-2EA4471D8173} - System32\Tasks\WinSysCleanUAC => C:\Program Files\WinSysClean X9 Free\WinSysClean.exe
Task: {0E2295EE-C016-4283-8A89-1F65645A230E} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [141136 2021-03-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {134B4E51-0AB8-4650-90FF-1CF4CB5F57EF} - System32\Tasks\HP\Consent Manager Launcher => sc start hptouchpointanalyticsservice
Task: {29E367A4-73F1-4EA1-869E-09180EAAB726} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.4-0\MpCmdRun.exe [566368 2021-03-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3144AF95-D173-4C9C-B14D-33374DFF4005} - System32\Tasks\ASC_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe [3262928 2021-01-14] (IObit Information Technology -> IObit)
Task: {43E3267B-FA0F-44F2-9D90-2C4C7224510A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.4-0\MpCmdRun.exe [566368 2021-03-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {43E4CBB8-CDF8-4C35-B6C5-8F10686140A9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155592 2020-11-17] (Google LLC -> Google LLC)
Task: {576557DB-68D2-4423-BBD8-1DDD2E7B0C6D} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [694256 2021-03-13] (Mozilla Corporation -> Mozilla Foundation)
Task: {583DEF06-D5F4-4334-B7D9-915DAC1C40B9} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [4682976 2021-02-25] (Avast Software s.r.o. -> AVAST Software)
Task: {63FFBB87-A551-4734-98D7-E3F9CBBE87E8} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-25] (Adobe Inc. -> Adobe Inc.)
Task: {6C0B4BE3-1EAC-43E6-A9B8-9DF6D8C9C1A7} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23079792 2021-03-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {701CCD3B-F8A2-4C41-B828-313091FEE694} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.4-0\MpCmdRun.exe [566368 2021-03-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7A3D1B14-E08E-4310-B631-112D38119927} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155592 2020-11-17] (Google LLC -> Google LLC)
Task: {7B65BB20-ED85-41C0-A4FB-1A11BB63DE35} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23079792 2021-03-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {7F9534E7-2095-4F8B-A861-D7621C932A2B} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [1791712 2021-02-24] (Avast Software s.r.o. -> Avast Software)
Task: {934689F1-0B8D-4655-917C-BDAB03170587} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [141136 2021-03-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {9F1B7C45-EF34-4B21-8B6B-7D3BBCAF5B04} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [5260176 2021-03-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {B1E8EE1E-59B7-42B7-8593-5C43D3A199C6} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1857513966-911432345-2145300670-500 => C:\Users\zcloo\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
Task: {C29DB495-2D54-4D51-B24C-E7BD8E22D689} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.4-0\MpCmdRun.exe [566368 2021-03-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D69188E7-A21F-4775-A558-30DF9FB30D8D} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [5260176 2021-03-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {EC9F67A3-D74D-43A7-A748-4F71B8FA64D1} - System32\Tasks\ASC_SkipUac_zcloo => C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe [9445592 2021-03-17] (IObit Information Technology -> IObit)

(Als een item is opgenomen in de fixlist, wordt de taak (job) bestand verplaatst. Het bestand dat wordt uitgevoerd door de taak zal niet worden verplaatst.)


==================== Internet (gefilterd) ====================

(Als een item is opgenomen in de fixlist en een registeritem is, wordt het verwijderd of hersteld naar de standaard.)

Tcpip\Parameters: [DhcpNameServer] 195.130.131.4 195.130.130.4
Tcpip\..\Interfaces\{95f2510b-cfa2-4687-b441-0d7215634f55}: [DhcpNameServer] 195.130.131.4 195.130.130.4

Edge:
=======
Edge Profile: C:\Users\zcloo\AppData\Local\Microsoft\Edge\User Data\Default [2021-03-23]
Edge Extension: (Connective signing extension) - C:\Users\zcloo\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\kclpjmhngbacampgcdojmiedamjbgjjm [2020-11-17]

FireFox:
========
FF DefaultProfile: 0hpoapcs.default
FF ProfilePath: C:\Users\zcloo\AppData\Roaming\Mozilla\Firefox\Profiles\0hpoapcs.default [2021-03-19]
FF user.js: detected! => C:\Users\zcloo\AppData\Roaming\Mozilla\Firefox\Profiles\0hpoapcs.default\user.js [2021-03-19]
FF Extension: (Avast SafePrice | Prijsvergelijking, aanbiedingen, waardebonnen) - C:\Users\zcloo\AppData\Roaming\Mozilla\Firefox\Profiles\0hpoapcs.default\Extensions\sp@avast.com.xpi [2019-11-11]
FF Extension: (Avast Online Security) - C:\Users\zcloo\AppData\Roaming\Mozilla\Firefox\Profiles\0hpoapcs.default\Extensions\wrc@avast.com.xpi [2019-11-11]
FF ProfilePath: C:\Users\zcloo\AppData\Roaming\Mozilla\Firefox\Profiles\tkisjex7.default-release [2021-03-24]
FF user.js: detected! => C:\Users\zcloo\AppData\Roaming\Mozilla\Firefox\Profiles\tkisjex7.default-release\user.js [2021-03-19]
FF DownloadDir: C:\Users\zcloo\Desktop
FF Homepage: Mozilla\Firefox\Profiles\tkisjex7.default-release -> hxxps://www.google.be/
FF Notifications: Mozilla\Firefox\Profiles\tkisjex7.default-release -> hxxps://www.hln.be; hxxps://www.facebook.com; hxxps://web.whatsapp.com; hxxps://bitcoinmagazine.nl; hxxps://www.one2three.app
FF Extension: (eID België) - C:\Users\zcloo\AppData\Roaming\Mozilla\Firefox\Profiles\tkisjex7.default-release\Extensions\belgiumeid@eid.belgium.be.xpi [2021-03-04]
FF Extension: (Pinterest-bewaarknop) - C:\Users\zcloo\AppData\Roaming\Mozilla\Firefox\Profiles\tkisjex7.default-release\Extensions\jid1-YcMV6ngYmQRA2w@jetpack.xpi [2021-03-23]
FF Extension: (Avast SafePrice | Prijsvergelijking, aanbiedingen, waardebonnen) - C:\Users\zcloo\AppData\Roaming\Mozilla\Firefox\Profiles\tkisjex7.default-release\Extensions\sp@avast.com.xpi [2020-10-30]
FF Extension: (Avast Online Security) - C:\Users\zcloo\AppData\Roaming\Mozilla\Firefox\Profiles\tkisjex7.default-release\Extensions\wrc@avast.com.xpi [2021-02-17]
FF Extension: (open-in-pdf) - C:\Users\zcloo\AppData\Roaming\Mozilla\Firefox\Profiles\tkisjex7.default-release\Extensions\{2582ab30-4fca-475f-88d0-c1a9b9ed978f}.xpi [2020-05-18]
FF Extension: (Connective signing extension) - C:\Users\zcloo\AppData\Roaming\Mozilla\Firefox\Profiles\tkisjex7.default-release\Extensions\{4f643bc8-78f5-49c6-8efd-78ee30289f0b}.xpi [2020-11-17]
FF Extension: (Betrust Token signing) - C:\Users\zcloo\AppData\Roaming\Mozilla\Firefox\Profiles\tkisjex7.default-release\Extensions\{85ccaeee-385d-4c41-9cb3-a3846b3c4e56}.xpi [2020-08-06] [UpdateUrl:hxxps://pro.scribble.be/static/applet/moz_ff_ex_upd.json]
FF Extension: (Adblock Plus - gratis adblocker) - C:\Users\zcloo\AppData\Roaming\Mozilla\Firefox\Profiles\tkisjex7.default-release\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2021-01-29]
FF HKLM-x32\...\Firefox\Extensions: [dpmaxz_ng@jetpack] - c:\Program Files (x86)\HP\HP ProtectTools Security Manager\Bin\BrowserExt\dpchrome => niet gevonden
FF HKLM-x32\...\Firefox\Extensions: [brofox_host@bromium.com] - C:\Program Files\HP\Sure Click\4.1.9.1290\servers\FakeDir => niet gevonden
FF Plugin: @java.com/DTPlugin,version=11.281.2 -> C:\Program Files\Java\jre1.8.0_281\bin\dtplugin\npDeployJava1.dll [2021-01-25] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.281.2 -> C:\Program Files\Java\jre1.8.0_281\bin\plugin2\npjp2.dll [2021-01-25] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-03-05] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-03-05] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-03-06] (Adobe Inc. -> Adobe Systems Inc.)

Chrome:
=======
CHR Profile: C:\Users\zcloo\AppData\Local\Google\Chrome\User Data\Default [2021-03-19]
CHR Extension: (Presentaties) - C:\Users\zcloo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-11-17]
CHR Extension: (Documenten) - C:\Users\zcloo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-11-17]
CHR Extension: (Google Drive) - C:\Users\zcloo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-11-17]
CHR Extension: (YouTube) - C:\Users\zcloo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-11-17]
CHR Extension: (Spreadsheets) - C:\Users\zcloo\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-11-17]
CHR Extension: (Offline Documenten) - C:\Users\zcloo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-11-17]
CHR Extension: (Connective signing extension) - C:\Users\zcloo\AppData\Local\Google\Chrome\User Data\Default\Extensions\kclpjmhngbacampgcdojmiedamjbgjjm [2020-11-17]
CHR Extension: (Betrust Token signing) - C:\Users\zcloo\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfoloilgpgkfabbphpkcfckbagcepbnj [2020-11-17]
CHR Extension: (Betalingen via Chrome Web Store) - C:\Users\zcloo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-11-17]
CHR Extension: (Gmail) - C:\Users\zcloo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-11-17]
CHR Extension: (Chrome Media Router) - C:\Users\zcloo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-11-17]
CHR HKLM-x32\...\Chrome\Extension: [mfoloilgpgkfabbphpkcfckbagcepbnj]

==================== Services (gefilterd) ===================

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

R2 AdAppMgrSvc; C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [1046904 2020-03-04] (Autodesk, Inc. -> Autodesk Inc.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.)
R2 AdskLicensingService; C:\Program Files (x86)\Common Files\Autodesk Shared\AdskLicensing\Current\AdskLicensingService\AdskLicensingService.exe [16930616 2019-12-18] (Autodesk, Inc. -> Autodesk)
R2 AdvancedSystemCareService14; C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe [1291992 2021-03-10] (IObit Information Technology -> IObit)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [8044056 2021-03-03] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [621608 2021-02-25] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Tools; C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe [352480 2021-02-25] (Avast Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [56904 2021-02-25] (Avast Software s.r.o. -> AVAST Software)
R2 bzserv; C:\Program Files (x86)\Backblaze\bzserv.exe [606048 2020-10-31] (Backblaze, Inc -> )
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8988552 2021-03-05] (Microsoft Corporation -> Microsoft Corporation)
R2 CxAudioSvc; C:\WINDOWS\CxSvc\CxAudioSvc.exe [105968 2020-11-22] (Synaptics Incorporated -> Conexant Systems LLC.)
R2 CxUIUSvc; C:\WINDOWS\System32\CxUIUSvc64.exe [123248 2020-11-22] (Synaptics Incorporated -> Conexant Systems, Inc.)
R2 CxUtilSvc; C:\Windows\CxSvc\CxUtilSvc.exe [166400 2019-11-20] (Conexant Systems LLC.) [Bestand niet getekend]
R2 DeepMgmtService; C:\Program Files\HP Sure Sense\DeepMgmtService.exe [1075512 2019-09-10] (Deep Instinct Ltd -> )
R2 DpHost; c:\Program Files\HP\HP ProtectTools Security Manager\Bin\DpHostW.exe [529072 2019-02-16] (DigitalPersona, Inc. -> Crossmatch, Inc.)
R2 HPAppHelperCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_756eacbc307669cd\x64\AppHelperCap.exe [693768 2021-01-06] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_756eacbc307669cd\x64\NetworkCap.exe [692744 2021-01-06] (HP Inc. -> HP Inc.)
R3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1149480 2019-04-12] (HP Inc. -> HP)
R2 HPSysInfoCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_756eacbc307669cd\x64\SysInfoCap.exe [693768 2021-01-06] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\WINDOWS\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_09e6b7523107af45\x64\TouchpointAnalyticsClientService.exe [479488 2021-01-06] (HP Inc. -> HP Inc.)
R2 LanWlanSwitchingService; C:\Program Files (x86)\HP\HP Hotkey Support\LanWlanSwitchingService.exe [667688 2019-02-25] (HP Inc. -> HP)
R2 NasPmService; C:\Program Files (x86)\BUFFALO\NASNAVI\nassvc.exe [245760 2020-03-20] (BUFFALO INC.) [Bestand niet getekend]
S3 rkrtservice; C:\Program Files\RogueKiller\RogueKillerSvc.exe [13686592 2021-02-12] (Adlice -> )
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5352528 2021-03-11] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 ss_conn_launcher_service; C:\WINDOWS\System32\Samsung\EasySetup\ss_conn_launcher.exe [182128 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2019-12-17] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R2 ss_conn_service2; C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [933304 2019-12-17] (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [12720144 2020-11-18] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.4-0\NisSrv.exe [2483616 2021-03-16] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.4-0\MsMpEng.exe [128376 2021-03-16] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (gefilterd) ===================

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [35648 2021-02-25] (Avast Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [208024 2021-02-25] (Avast Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [357320 2021-02-25] (Avast Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [249304 2021-02-25] (Avast Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [98760 2021-02-25] (Avast Software s.r.o. -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [16832 2020-12-26] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [41272 2021-02-25] (Avast Software s.r.o. -> AVAST Software)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [175248 2021-02-25] (Avast Software s.r.o. -> AVAST Software)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [521336 2021-02-25] (Avast Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [107784 2021-02-25] (Avast Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [83360 2021-02-25] (Avast Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [850112 2021-02-25] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [465160 2021-03-18] (Avast Software s.r.o. -> AVAST Software)
R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [215328 2021-02-25] (Avast Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [326976 2021-02-25] (Avast Software s.r.o. -> AVAST Software)
R3 cpuz145; C:\WINDOWS\temp\cpuz145\cpuz145_x64.sys [49968 2021-03-19] (CPUID -> CPUID)
R0 DeepMgmtDriver; C:\WINDOWS\System32\drivers\DeepMgmtDriver.sys [66264 2019-09-10] (Deep Instinct Ltd -> )
R3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [159600 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 HPCustomCapDriver; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_1f5602eb8a12ac4c\x64\hpcustomcapdriver.sys [16432 2018-10-26] (Microsoft Windows Hardware Compatibility Publisher -> HP Inc.)
R3 iobit_monitor_server; C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\Monitor_win10_x64.sys [32520 2020-12-02] (IObit Information Technology -> IObit)
S3 Ser2pl; C:\WINDOWS\System32\drivers\ser2pl64.sys [248968 2019-01-23] (WDKTestCert charles-yeh,131345514351795974 -> Prolific Technology Inc.)
R3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [43376 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 tesrsdt; C:\WINDOWS\system32\drivers\tesrsdt.sys [812208 2021-01-24] (Tencent Technology(Shenzhen) Company Limited -> TENCENT)
S3 UniSafe; C:\WINDOWS\system32\drivers\UniSafe.sys [581912 2021-01-24] (Tencent Technology(Shenzhen) Company Limited -> TENCENT)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49560 2021-03-16] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [420072 2021-03-16] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [72952 2021-03-16] (Microsoft Windows -> Microsoft Corporation)
R3 WiMan; C:\WINDOWS\System32\DriverStore\FileRepository\wiman.inf_amd64_4b0336d95f188e47\WiMan\WiMan.sys [162136 2020-07-02] (Intel Wireless Driver -> )

==================== NetSvcs (gefilterd) ===================

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)


==================== Een maand (aangemaakt) (gefilterd) =========

(Als een item is opgenomen in de fixlist, wordt de map of het bestand verplaatst.)

2021-03-24 08:52 - 2021-03-24 08:52 - 000024560 _____ C:\Users\zcloo\Desktop\FRST.txt
2021-03-24 08:51 - 2021-03-24 08:52 - 000000000 ____D C:\FRST
2021-03-24 08:50 - 2021-03-24 08:50 - 002300928 _____ (Farbar) C:\Users\zcloo\Desktop\FRST64.exe
2021-03-23 20:50 - 2021-03-23 20:50 - 000384524 _____ C:\Users\zcloo\Desktop\UV Brugstraat 63 glvl alternatief badkamer.pdf
2021-03-23 20:01 - 2021-03-23 20:01 - 000385277 _____ C:\Users\zcloo\Desktop\UV Brugstraat 63 glvl.pdf
2021-03-19 19:51 - 2021-03-19 19:51 - 111599616 _____ C:\WINDOWS\system32\config\SOFTWARE.iobit
2021-03-19 19:51 - 2021-03-19 19:51 - 008089600 _____ C:\WINDOWS\system32\config\DRIVERS.iobit
2021-03-19 19:51 - 2021-03-19 19:51 - 002514944 _____ C:\WINDOWS\system32\config\DEFAULT.iobit
2021-03-19 19:51 - 2021-03-19 19:51 - 000073728 _____ C:\WINDOWS\system32\config\SAM.iobit
2021-03-19 19:51 - 2021-03-19 19:51 - 000040960 _____ C:\WINDOWS\system32\config\SECURITY.iobit
2021-03-19 19:49 - 2021-03-19 19:49 - 000003302 _____ C:\WINDOWS\system32\Tasks\ASC_PerformanceMonitor
2021-03-19 19:49 - 2021-03-19 19:49 - 000003092 _____ C:\WINDOWS\system32\Tasks\ASC_SkipUac_zcloo
2021-03-19 19:49 - 2021-03-19 19:49 - 000000000 ____D C:\Users\zcloo\AppData\LocalLow\IObit
2021-03-19 19:49 - 2021-03-19 19:49 - 000000000 ____D C:\ProgramData\ProductData
2021-03-19 19:49 - 2021-03-19 19:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare
2021-03-19 19:49 - 2021-03-19 19:49 - 000000000 ____D C:\ProgramData\{F86B0233-9A85-4589-8AAF-524CC4F8211B}
2021-03-19 19:49 - 2021-03-19 19:49 - 000000000 ____D C:\Program Files (x86)\IObit
2021-03-19 19:48 - 2021-03-19 19:50 - 000000000 ____D C:\ProgramData\IObit
2021-03-19 19:48 - 2021-03-19 19:49 - 000000000 ____D C:\Users\zcloo\AppData\Roaming\IObit
2021-03-19 19:46 - 2021-03-19 19:51 - 000000000 ____D C:\ProgramData\RogueKiller
2021-03-19 19:46 - 2021-03-19 19:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
2021-03-19 19:46 - 2021-03-19 19:46 - 000000000 ____D C:\Program Files\RogueKiller
2021-03-19 13:27 - 2021-03-19 13:27 - 000470169 _____ C:\Users\zcloo\Desktop\PRIJSOFFERTE OFF0237 Donath - Carriere xxxx xxxx.pdf
2021-03-17 11:41 - 2021-03-17 11:41 - 000955937 _____ C:\Users\zcloo\Documents\Scan.pdf
2021-03-17 10:04 - 2021-03-17 10:04 - 000062102 _____ C:\Users\zcloo\Desktop\WhatsApp Image 2021-03-15 at 13.06.51.jpeg
2021-03-13 17:10 - 2021-03-13 17:10 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-03-13 07:51 - 2021-03-13 17:10 - 000000000 ____D C:\Program Files\Mozilla Firefox
2021-03-11 18:54 - 2021-03-11 18:54 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2021-03-11 18:54 - 2021-03-11 18:54 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2021-03-11 18:54 - 2021-03-11 18:54 - 001822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-03-11 18:54 - 2021-03-11 18:54 - 001394024 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-03-11 18:54 - 2021-03-11 18:54 - 001314128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-03-11 18:54 - 2021-03-11 18:54 - 001163776 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2021-03-11 18:54 - 2021-03-11 18:54 - 000707016 _____ C:\WINDOWS\system32\TextShaping.dll
2021-03-11 18:54 - 2021-03-11 18:54 - 000611952 _____ C:\WINDOWS\SysWOW64\TextShaping.dll
2021-03-11 18:54 - 2021-03-11 18:54 - 000480256 _____ C:\WINDOWS\system32\AssignedAccessCsp.dll
2021-03-11 18:54 - 2021-03-11 18:54 - 000231248 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2021-03-11 18:54 - 2021-03-11 18:54 - 000091136 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-03-11 18:54 - 2021-03-11 18:54 - 000011359 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-03-04 15:51 - 2021-03-04 15:51 - 001954880 _____ C:\Users\zcloo\Desktop\BRE223-07 precad 16052014 - verzamelplan.pdf
2021-02-25 20:42 - 2021-02-25 20:42 - 008463216 _____ (Malwarebytes) C:\Users\zcloo\Desktop\adwcleaner_8.1.exe
2021-02-25 06:27 - 2021-02-25 06:27 - 000339680 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2021-02-25 06:27 - 2021-02-25 06:27 - 000215328 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2021-02-23 07:09 - 2021-02-23 07:09 - 000023199 _____ C:\Users\zcloo\Desktop\Kopie van Raming De Vrij - Sepelie AFR.xlsx

==================== Een maand (gewijzigd) ==================

(Als een item is opgenomen in de fixlist, wordt de map of het bestand verplaatst.)

2021-03-24 08:53 - 2019-11-11 17:05 - 000000000 ____D C:\Program Files\Microsoft Office
2021-03-24 08:52 - 2020-07-16 11:25 - 000000000 ____D C:\Users\zcloo\AppData\Roaming\Spotify
2021-03-24 08:51 - 2019-11-11 15:25 - 000000000 ____D C:\ProgramData\Mozilla
2021-03-24 08:50 - 2020-07-16 11:26 - 000000000 ____D C:\Users\zcloo\AppData\Local\Spotify
2021-03-24 08:50 - 2019-11-11 16:57 - 000000000 ____D C:\ProgramData\Autodesk
2021-03-24 08:50 - 2019-11-11 15:25 - 000000000 ____D C:\Users\zcloo\AppData\LocalLow\Mozilla
2021-03-24 08:49 - 2019-11-11 14:53 - 000000000 __SHD C:\Users\zcloo\IntelGraphicsProfiles
2021-03-23 21:29 - 2019-11-11 17:23 - 000000000 ____D C:\Users\zcloo\Documents\Outlook-bestanden
2021-03-23 21:26 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-03-23 21:00 - 2020-12-01 15:38 - 000000000 ____D C:\Users\zcloo\Desktop\nog te betalen en up te loaden naar yuki
2021-03-23 20:36 - 2020-12-08 08:27 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-03-23 19:46 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-03-23 16:52 - 2019-11-11 14:53 - 000000000 ____D C:\Users\zcloo\AppData\Local\Packages
2021-03-22 10:29 - 2020-12-08 08:28 - 000000000 ____D C:\Users\zcloo
2021-03-22 10:29 - 2019-11-12 12:22 - 000004433 _____ C:\Users\zcloo\.ganttproject
2021-03-21 20:24 - 2020-11-21 09:58 - 000000000 ____D C:\Users\zcloo\AppData\Roaming\Ledger Live
2021-03-20 17:47 - 2019-11-12 12:21 - 000354303 _____ C:\Users\zcloo\Desktop\planning.gan
2021-03-20 17:00 - 2020-06-08 15:13 - 000002439 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-03-20 17:00 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-03-19 20:04 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-03-19 19:56 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2021-03-19 19:55 - 2020-12-07 12:35 - 000000000 ___DC C:\WINDOWS\Panther
2021-03-19 19:55 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ModemLogs
2021-03-19 19:55 - 2019-11-11 14:54 - 000000000 ____D C:\Users\zcloo\AppData\Local\CrashDumps
2021-03-18 18:27 - 2019-11-11 15:59 - 000465160 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2021-03-18 10:00 - 2020-11-21 09:58 - 000000000 ____D C:\Program Files\Ledger Live
2021-03-17 08:25 - 2020-11-17 19:53 - 000002275 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-03-16 10:26 - 2018-11-08 04:34 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-03-14 06:39 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2021-03-13 17:10 - 2020-01-07 06:41 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-03-13 17:10 - 2019-11-11 15:25 - 000001013 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-03-12 19:08 - 2020-05-22 14:41 - 000002144 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2021-03-12 06:38 - 2020-03-25 10:03 - 000000000 ____D C:\ProgramData\boost_interprocess
2021-03-12 06:36 - 2020-12-08 08:32 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-03-12 06:36 - 2020-12-08 08:27 - 000008192 ___SH C:\DumpStack.log.tmp
2021-03-12 06:36 - 2020-09-08 08:21 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2021-03-12 06:36 - 2019-11-11 15:58 - 000000000 ____D C:\ProgramData\AVAST Software
2021-03-12 06:36 - 2019-09-10 17:17 - 000000000 ___HD C:\Intel
2021-03-11 21:28 - 2019-12-07 10:03 - 000262144 _____ C:\WINDOWS\system32\config\BBI
2021-03-11 21:27 - 2020-12-08 08:27 - 000621408 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-03-11 21:27 - 2019-12-07 16:17 - 000000000 ___SD C:\WINDOWS\system32\AppV
2021-03-11 21:27 - 2019-12-07 16:17 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2021-03-11 21:27 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-03-11 21:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-03-11 21:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-03-11 21:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-03-11 21:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-03-11 21:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-03-11 21:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2021-03-11 21:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-03-11 21:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-03-11 21:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-03-11 21:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-03-11 21:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-03-11 21:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-03-11 06:35 - 2020-12-07 12:31 - 000000000 ___HD C:\$WinREAgent
2021-03-10 15:53 - 2020-12-08 08:32 - 000004264 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update
2021-03-10 15:05 - 2019-11-11 18:17 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-03-10 15:03 - 2019-11-11 18:17 - 131005360 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-03-09 15:43 - 2020-03-20 20:20 - 000000000 ____D C:\Users\zcloo\AppData\Local\NasNavigator2
2021-03-04 06:55 - 2021-01-12 06:30 - 000003580 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d6cd341b167685
2021-03-04 06:55 - 2020-12-08 08:32 - 000003674 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-03-02 17:18 - 2020-06-26 13:12 - 000052434 _____ C:\Users\zcloo\ganttproject.log.1
2021-02-25 06:27 - 2020-10-19 08:12 - 000175248 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2021-02-25 06:27 - 2020-04-16 07:19 - 000521336 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNetHub.sys
2021-02-25 06:27 - 2019-12-07 10:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2021-02-25 06:27 - 2019-11-11 15:59 - 000850112 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2021-02-25 06:27 - 2019-11-11 15:59 - 000465656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys.161608846340601
2021-02-25 06:27 - 2019-11-11 15:59 - 000357320 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2021-02-25 06:27 - 2019-11-11 15:59 - 000326976 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2021-02-25 06:27 - 2019-11-11 15:59 - 000249304 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2021-02-25 06:27 - 2019-11-11 15:59 - 000208024 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2021-02-25 06:27 - 2019-11-11 15:59 - 000107784 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2021-02-25 06:27 - 2019-11-11 15:59 - 000098760 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2021-02-25 06:27 - 2019-11-11 15:59 - 000083360 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2021-02-25 06:27 - 2019-11-11 15:59 - 000041272 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2021-02-25 06:27 - 2019-11-11 15:59 - 000035648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArDisk.sys
2021-02-24 11:27 - 2020-12-08 08:32 - 000003504 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2021-02-24 11:27 - 2020-12-08 08:32 - 000003482 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2021-02-24 11:27 - 2020-12-08 08:32 - 000003378 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-02-24 11:27 - 2020-12-08 08:32 - 000003280 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2021-02-24 11:27 - 2020-12-08 08:32 - 000002852 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1857513966-911432345-2145300670-500
2021-02-24 11:27 - 2020-12-08 08:32 - 000002156 _____ C:\WINDOWS\system32\Tasks\WinSysCleanUAC
2021-02-24 11:27 - 2020-12-08 08:32 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2021-02-22 11:37 - 2020-09-30 17:58 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools

==================== Bestanden in de root van sommige mappen ========

2020-06-15 10:09 - 2021-01-26 09:43 - 000002744 _____ () C:\Users\zcloo\AppData\Roaming\FSLog.log

==================== SigCheck ============================

(Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.)

==================== Einde van FRST.txt ========================
Gebruikersavatar
conny
Lid
Berichten: 32
Lid geworden op: 10 mar 2008 14:22
Locatie: antwerpen

Extra scanresultaten van Farbar Recovery Scan Tool (x64) Versie: 21-03-2021
Gestart door zcloo (24-03-2021 08:53:43)
Gestart vanaf C:\Users\zcloo\Desktop
Windows 10 Pro Versie 2004 19041.867 (X64) (2020-12-08 07:32:50)
Boot Modus: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-1857513966-911432345-2145300670-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1857513966-911432345-2145300670-503 - Limited - Disabled)
Gast (S-1-5-21-1857513966-911432345-2145300670-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-1857513966-911432345-2145300670-504 - Limited - Disabled)
zcloo (S-1-5-21-1857513966-911432345-2145300670-1001 - Administrator - Enabled) => C:\Users\zcloo

==================== Security Center ========================

(Als een item is opgenomen in de fixlist, zal het worden verwijderd.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {5078598A-1FA2-C888-AA5F-A9C66537DB12}

==================== Geïnstalleerde programma's ======================

(Alleen de adware-programma's met 'verborgen' vlag kunnen worden toegevoegd aan de fixlist om ze zichtbaar te maken. De adware-programma's moeten handmatig gedeïnstalleerd worden.)

Adobe Acrobat Reader DC - Nederlands (HKLM-x32\...\{AC76BA86-7AD7-1043-7B44-AC0F074E4100}) (Version: 21.001.20145 - Adobe Systems Incorporated)
Advanced SystemCare (HKLM-x32\...\Advanced SystemCare_is1) (Version: 14.3.0 - IObit)
AutoCAD LT 2021 - English (HKLM\...\{28B89EEF-4109-0409-2102-CF3F3A09B77D}) (Version: 24.0.47.0 - Autodesk) Hidden
Autodesk AutoCAD LT 2021 - English (HKLM\...\AutoCAD LT 2021 - English) (Version: 24.0.47.0 - Autodesk)
Autodesk Desktop App (HKLM-x32\...\Autodesk Desktop App) (Version: 8.0.0.46 - Autodesk)
Autodesk Genuine Service (HKLM-x32\...\{54A00624-3EF9-49A2-92A9-7244EADD0212}) (Version: 3.2.18 - Autodesk)
Autodesk Material Library 2020 (HKLM-x32\...\{B9312A51-41B5-479D-9F72-E7448A2D89AF}) (Version: 18.11.1.0 - Autodesk)
Autodesk Material Library 2021 (HKLM-x32\...\{6774FD60-7D4B-4D57-BE56-2702A07C9701}) (Version: 19.1.22.0 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2020 (HKLM-x32\...\{0E976988-E753-4C81-BD96-434CE305B176}) (Version: 18.11.1.0 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2021 (HKLM-x32\...\{6EFAD582-86C1-4AB2-97C5-2070D0B90E08}) (Version: 19.1.22.0 - Autodesk)
Autodesk Save to Web and Mobile (HKLM\...\{A9005AC0-4AD8-4E84-B1F7-EE38BB6BCC2D}) (Version: 3.0.26 - Autodesk)
Autodesk Single Sign On Component (HKLM\...\{951BB060-1350-4C93-BD83-D966C51D4005}) (Version: 11.2.0.1802 - Autodesk)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 21.1.2449 - Avast Software)
Backblaze (HKLM-x32\...\Backblaze) (Version: - Backblaze, Inc)
Belgium e-ID middleware 4.4.4 (build 3838) (HKLM\...\{DB942AEA-93D6-4FE4-8862-180D35A73838}) (Version: 4.4.3838 - Belgian Government)
Betrust Token Signing (HKLM\...\{F199FE71-8FBA-4081-AA30-0554CD358C55}) (Version: 1.0.98.0 - Betrust)
BUFFALO NAS Navigator2 (HKLM-x32\...\UN060501) (Version: 3.0 - Buffalo Inc.)
Connective Signing Plugins (HKLM-x32\...\{F0440DC9-339E-4B34-827D-E10C7F130DE5}) (Version: 2.0.6.351 - Connective)
Dynamic Application Loader Host Interface Service (HKLM\...\{8E0B4F1A-C618-42E2-BEC9-B6421A856435}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Fotosizer 3.12.0 (HKLM\...\Fotosizer) (Version: 3.12.0.576 - Fotosizer.com)
GanttProject (HKLM-x32\...\GanttProject) (Version: - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 89.0.4389.90 - Google LLC)
HP Client Security Manager (HKLM\...\HPProtectTools) (Version: 9.4.0.2770 - HP Inc.)
HP Hotkey Support (HKLM-x32\...\{3E6BF5AA-9A15-425F-8AAC-AFEB644A8652}) (Version: 6.2.51.1 - HP Inc.)
HP Notifications (HKLM-x32\...\{F8D76372-EF18-4EF7-BFC1-98EBF7F60C75}) (Version: 1.1.17.1 - HP)
HP Officejet Pro 8600 Basissoftware van het apparaat (HKLM\...\{814160db-5035-4897-91ec-8aa0a9a5fa50}) (Version: 28.0.1316.0 - Hewlett-Packard Co.)
HP Sure Recover (HKLM\...\{EBF9A3F5-C495-4A8D-91BF-7C23C67F72D0}) (Version: 2.0.9.1 - HP Inc.)
HP Sure Run (HKLM\...\{E84148C6-6E8D-40C5-832D-68EB369ACDE1}) (Version: 2.0.5.1 - HP Inc.)
HP Sure Sense Installer (HKLM-x32\...\{F0B71F3C-CE3A-4F23-8079-845C12A37E8F}) (Version: 1.2.21.0 - HP Inc.)
Intel(R) Chipset Device Software (HKLM-x32\...\{ffddf9dd-c47f-453a-92f5-ac6c98af8b5b}) (Version: 10.1.17968.8131 - Intel(R) Corporation)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 1915.12.0.1259 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 25.20.100.6793 - Intel Corporation)
Iperius Backup versie 6.3.4.0 (HKLM-x32\...\Iperius Backup_is1) (Version: 6.3.4.0 - Enter Srl)
Java 8 Update 281 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180281F0}) (Version: 8.0.2810.9 - Oracle Corporation)
Ledger Live 2.24.0 (HKLM\...\c62032b2-0bca-5abc-b458-fd67cfc9e49b) (Version: 2.24.0 - Ledger Live Team)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 89.0.774.57 - Microsoft Corporation)
Microsoft Office 2016 voor Thuisgebruik en Zelfstandigen - nl-nl (HKLM\...\HomeBusinessRetail - nl-nl) (Version: 16.0.13801.20360 - Microsoft Corporation)
Microsoft Publisher 2016 - nl-nl (HKLM\...\PublisherRetail - nl-nl) (Version: 16.0.13801.20360 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{99FAF70F-9B61-4AB0-9EC0-B31F98FFDC4A}) (Version: 2.75.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.26.28720 (HKLM-x32\...\{7d607fb4-7e28-4c7a-a92f-3fcdaf555faf}) (Version: 14.26.28720.3 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.24.28127 (HKLM-x32\...\{e31cb1a4-76b5-46a5-a084-3fa419e82201}) (Version: 14.24.28127.4 - Microsoft Corporation)
Mozilla Firefox 86.0.1 (x64 nl) (HKLM\...\Mozilla Firefox 86.0.1 (x64 nl)) (Version: 86.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 71.0 - Mozilla)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.13801.20274 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.13801.20294 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0413-1000-0000000FF1CE}) (Version: 16.0.13801.20274 - Microsoft Corporation) Hidden
Polar FlowSync versie 3.0.0.1337 (HKLM-x32\...\{A1538F5C-7B65-4DB6-9FFB-FFC0DF2E85D8}_is1) (Version: 3.0.0.1337 - Polar Electro Oy)
RogueKiller version 14.8.5.0 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 14.8.5.0 - Adlice Software)
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.7.23.0 - Samsung Electronics Co., Ltd.)
SketchUp 2020 (HKLM-x32\...\{522800F1-9FCE-44F2-8D2E-2CEC5B25A9C2}) (Version: 20.2.172 - Trimble, Inc.)
SketchUp 2021 (HKLM-x32\...\{09480c81-5458-4d69-ab73-ee488fe8c297}) (Version: 21.0.391 - Trimble, Inc.)
SketchUpPro (HKLM\...\{5778f9a3-781e-16f1-a6bf-08fd59dfa77b}) (Version: 20.2.172.37 - SketchUp) Hidden
SketchUpPro (HKLM\...\{d355be80-c8d8-9076-14e8-5ae3c8f487b0}) (Version: 21.0.391.128 - SketchUp) Hidden
Spotify (HKU\S-1-5-21-1857513966-911432345-2145300670-1001\...\Spotify) (Version: 1.1.55.498.gf9a83c60 - Spotify AB)
TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.12.4 - TeamViewer)
Telegram Desktop versie 2.5.1 (HKU\S-1-5-21-1857513966-911432345-2145300670-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 2.5.1 - Telegram FZ-LLC)
Trimble Connect (HKLM\...\{4D3CBADE-E103-4114-9044-25DEA1410146}) (Version: 1.11.0.295 - Trimble Solutions Corporation)
Trimble Solutions ImportSDK, BSQ Import Plugin 1.6 (x86 build) (HKLM-x32\...\{8C3EA90B-CFEC-41F8-8053-084A78084EAC}) (Version: 1.6 - Trimble Solutions Corporation)
Trimble Solutions ImportSDK, DGN plugin 1.39 (x64 build) (HKLM\...\{1256F9EB-56A4-4A2A-A766-836ED45DFE59}) (Version: 1.39 - Trimble Solutions Corporation)
Trimble Solutions ImportSDK, DWG plugin 1.53 (x64 build) (HKLM\...\{68D33DB1-3FB5-40BF-923B-F7E4C2C398A8}) (Version: 1.53 - Trimble Solutions Corporation)
Trimble Solutions ImportSDK, IFC plugin 5.57 (x64 build) (HKLM\...\{6AB889E6-8593-46A1-AFFB-ABBC380FE503}) (Version: 5.57 - Trimble Solutions Corporation)
Trimble Solutions ImportSDK, LandXML plugin 1.21 (x86 build) (HKLM-x32\...\{6BE5FC0D-FBB0-4161-A7A2-5157A45825F0}) (Version: 1.21 - Trimble Solutions Corporation)
Trimble Solutions ImportSDK, NWD plugin 1.14 (x64 build) (HKLM\...\{D9146A83-35ED-4734-9B33-930E4887E2CB}) (Version: 1.14 - Trimble Solutions Corporation)
Trimble Solutions ImportSDK, Revit Plugin 1.33 (x64 build) (HKLM\...\{FABCD5F6-B9F9-4C98-972A-D239B6F7ABC1}) (Version: 1.33 - Trimble Solutions Corporation)
Trimble Solutions ImportSDK, SketchUp Plugin 1.69 (x64 build) (HKLM\...\{C36E343B-329D-4598-91A3-50AC6A57821D}) (Version: 1.69 - Trimble Solutions Corporation)
Trimble Solutions ImportSDK, STEP/IGES plugin 3.20 (x64 build) (HKLM\...\{926B0EF5-5A48-4A72-A10D-FC6DC7D6BE44}) (Version: 3.20 - Trimble Solutions Corporation)
Zoom (HKU\S-1-5-21-1857513966-911432345-2145300670-1001\...\ZoomUMX) (Version: 5.4.9 (59931.0110) - Zoom Video Communications, Inc.)

Packages:
=========
Audio Controls -> C:\Program Files\WindowsApps\22094SynapticsIncorporate.AudioControls_1.3.97.0_x64__qt57b6kdvhcfw [2020-07-05] (Synaptics Hong Kong Limited, Taiwan Branch (H.K.))
HP Business Slim Keyboard -> C:\Program Files\WindowsApps\AD2F1837.HPBusinessSlimKeyboard_1.0.1.0_x86__v10z8vjag6ke6 [2019-11-11] (HP Inc.) [Startup Task]
HP JumpStarts -> C:\Program Files\WindowsApps\AD2F1837.HPJumpStarts_1.9.1548.0_x64__v10z8vjag6ke6 [2020-12-19] (HP Inc.)
HP PC Hardware Diagnostics Windows -> C:\Program Files\WindowsApps\AD2F1837.HPPCHardwareDiagnosticsWindows_1.6.8.0_x64__v10z8vjag6ke6 [2021-01-29] (HP Inc.)
HP Privacy Settings -> C:\Program Files\WindowsApps\AD2F1837.HPPrivacySettings_1.0.39.0_x64__v10z8vjag6ke6 [2020-10-01] (HP Inc.)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_122.3.838.0_x64__v10z8vjag6ke6 [2021-03-02] (HP Inc.)
Intel(R) Management and Security Status -> C:\Program Files\WindowsApps\AppUp.IntelManagementandSecurityStatus_2038.0.99.0_x64__8j3eq9eme6ctt [2020-12-03] (INTEL CORP) [Startup Task]
Intel® Graphics besturingscentrum -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.3282.0_x64__8j3eq9eme6ctt [2021-01-03] (INTEL CORP) [Startup Task]
Intel® Graphics Control Panel -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsControlPanel_3.3.0.0_x64__8j3eq9eme6ctt [2020-02-17] (INTEL CORP)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-11-11] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-11-11] (Microsoft Corporation) [MS Ad]

==================== Aangepaste CLSID (gefilterd): ==============

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

CustomCLSID: HKU\S-1-5-21-1857513966-911432345-2145300670-1001_Classes\CLSID\{345D3165-3889-4694-AB75-A91A27B217E8}\localserver32 -> C:\Program Files\Autodesk\AutoCAD LT 2021\acadlt.exe (Autodesk, Inc. -> Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1857513966-911432345-2145300670-1001_Classes\CLSID\{74F5CC00-49A9-11CF-A2F9-444553540000}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD LT 2021\en-US\acadltficn.dll (Autodesk, Inc. -> Autodesk, Inc.)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Geen bestand
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Geen bestand
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Geen bestand
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Geen bestand
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Geen bestand
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Geen bestand
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Geen bestand
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2021-02-25] (Avast Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\system32\AcSignIcon.dll [2020-01-22] (Autodesk, Inc. -> Autodesk, Inc.)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Geen bestand
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Geen bestand
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Geen bestand
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Geen bestand
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Geen bestand
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Geen bestand
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Geen bestand
ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2021-02-25] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2020-01-22] (Autodesk, Inc. -> Autodesk)
ContextMenuHandlers1: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll [2020-12-24] (IObit Information Technology -> IObit)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2021-02-25] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [Fotosizer] -> {5A3797DB-AC5E-40CC-8F16-7245D2CED25D} => C:\Program Files\Fotosizer\FSShellExtension.dll [2020-08-31] (Fotosizer.com) [Bestand niet getekend]
ContextMenuHandlers2: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll [2020-12-24] (IObit Information Technology -> IObit)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2021-02-25] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers4: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll [2020-12-24] (IObit Information Technology -> IObit)
ContextMenuHandlers4: [Fotosizer] -> {5A3797DB-AC5E-40CC-8F16-7245D2CED25D} => C:\Program Files\Fotosizer\FSShellExtension.dll [2020-08-31] (Fotosizer.com) [Bestand niet getekend]
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2021-02-25] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [Fotosizer] -> {5A3797DB-AC5E-40CC-8F16-7245D2CED25D} => C:\Program Files\Fotosizer\FSShellExtension.dll [2020-08-31] (Fotosizer.com) [Bestand niet getekend]

==================== Codecs (gefilterd) ====================

==================== Snelkoppelingen & WMI ========================

(De items kunnen worden opgenomen in de fixlist.txt om hersteld of verwijderd te worden.)

Shortcut: C:\Users\zcloo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Re-Volt\RVTT - Re-Volt Tip Top.lnk -> hxxp://www.rvtt.com

==================== Geladen Modules (gefilterd) =============

2020-04-14 14:01 - 2018-09-17 02:26 - 001348096 _____ () [Bestand niet getekend] C:\Program Files (x86)\Polar\Polar FlowSync\polar20.dll
2020-04-14 14:01 - 2018-05-29 00:27 - 000071168 _____ () [Bestand niet getekend] C:\Program Files (x86)\Polar\Polar FlowSync\zlib.dll
2019-09-04 15:18 - 2020-03-20 20:17 - 000196608 ____N (BUFFALO INC.) [Bestand niet getekend] C:\Program Files (x86)\BUFFALO\NASNAVI\nasdmn.dll
2019-09-04 15:18 - 2020-03-20 20:17 - 000323584 ____N (BUFFALO INC.) [Bestand niet getekend] C:\Program Files (x86)\BUFFALO\NASNAVI\nasexo.dll
2019-09-04 15:18 - 2020-03-20 20:17 - 000274432 ____N (BUFFALO INC.) [Bestand niet getekend] C:\Program Files (x86)\BUFFALO\NASNAVI\nasfcn.dll
2019-09-04 15:18 - 2020-03-20 20:17 - 000258048 ____N (BUFFALO INC.) [Bestand niet getekend] C:\Program Files (x86)\BUFFALO\NASNAVI\nasfsy.dll
2019-02-16 02:12 - 2019-02-16 02:12 - 000382464 _____ (Crossmatch, Inc.) [Bestand niet getekend] c:\Program Files\HP\HP ProtectTools Security Manager\Bin\DPCPFelica.dll
2019-02-16 02:13 - 2019-02-16 02:13 - 000338432 _____ (Crossmatch, Inc.) [Bestand niet getekend] c:\Program Files\HP\HP ProtectTools Security Manager\Bin\DPDevice2.dll
2019-02-16 02:11 - 2019-02-16 02:11 - 000456192 _____ (Crossmatch, Inc.) [Bestand niet getekend] c:\Program Files\HP\HP ProtectTools Security Manager\Bin\DPDevice5.dll
2020-08-31 22:14 - 2020-08-31 22:14 - 000458240 _____ (Fotosizer.com) [Bestand niet getekend] C:\Program Files\Fotosizer\FSShellExtension.dll
2020-04-14 14:01 - 2018-09-17 02:27 - 000381440 _____ (Polar Electro Oy) [Bestand niet getekend] C:\Program Files (x86)\Polar\Polar FlowSync\wslib.dll
2019-02-16 02:01 - 2019-02-16 02:01 - 000348672 _____ (RFIDeas) [Bestand niet getekend] c:\Program Files\HP\HP ProtectTools Security Manager\Bin\pcProxAPI.dll
2020-04-14 14:01 - 2015-04-30 01:20 - 025338368 _____ (The ICU Project) [Bestand niet getekend] C:\Program Files (x86)\Polar\Polar FlowSync\icudt54.dll
2020-04-14 14:01 - 2015-04-30 01:20 - 002056704 _____ (The ICU Project) [Bestand niet getekend] C:\Program Files (x86)\Polar\Polar FlowSync\icuin54.dll
2020-04-14 14:01 - 2015-04-30 01:20 - 001425408 _____ (The ICU Project) [Bestand niet getekend] C:\Program Files (x86)\Polar\Polar FlowSync\icuuc54.dll
2020-04-14 14:01 - 2015-10-12 11:20 - 000991232 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files (x86)\Polar\Polar FlowSync\platforms\qwindows.dll
2020-04-14 14:01 - 2018-05-29 07:46 - 004621312 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files (x86)\Polar\Polar FlowSync\Qt5Core.dll
2020-04-14 14:01 - 2015-10-12 11:15 - 004860928 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files (x86)\Polar\Polar FlowSync\Qt5Gui.dll
2020-04-14 14:01 - 2015-10-12 11:32 - 000563712 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files (x86)\Polar\Polar FlowSync\Qt5Multimedia.dll
2020-04-14 14:01 - 2015-10-12 11:34 - 000082432 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files (x86)\Polar\Polar FlowSync\Qt5MultimediaWidgets.dll
2020-04-14 14:01 - 2015-10-12 11:14 - 000845312 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files (x86)\Polar\Polar FlowSync\Qt5Network.dll
2020-04-14 14:01 - 2015-10-12 11:19 - 000272896 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files (x86)\Polar\Polar FlowSync\Qt5OpenGL.dll
2020-04-14 14:01 - 2015-10-12 11:34 - 000166400 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files (x86)\Polar\Polar FlowSync\Qt5Positioning.dll
2020-04-14 14:01 - 2015-10-12 11:19 - 000267264 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files (x86)\Polar\Polar FlowSync\Qt5PrintSupport.dll
2020-04-14 14:01 - 2015-10-12 11:24 - 002588672 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files (x86)\Polar\Polar FlowSync\Qt5Qml.dll
2020-04-14 14:01 - 2015-10-12 11:26 - 002430976 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files (x86)\Polar\Polar FlowSync\Qt5Quick.dll
2020-04-14 14:01 - 2015-10-12 15:03 - 001144832 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files (x86)\Polar\Polar FlowSync\Qt5Script.dll
2020-04-14 14:01 - 2015-10-12 11:31 - 000148480 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files (x86)\Polar\Polar FlowSync\Qt5Sensors.dll
2020-04-14 14:01 - 2015-10-12 11:13 - 000154112 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files (x86)\Polar\Polar FlowSync\Qt5Sql.dll
2020-04-14 14:01 - 2015-10-12 11:39 - 000080384 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files (x86)\Polar\Polar FlowSync\Qt5WebChannel.dll
2020-04-14 14:01 - 2015-10-12 12:55 - 017406464 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files (x86)\Polar\Polar FlowSync\Qt5WebKit.dll
2020-04-14 14:01 - 2015-10-12 13:10 - 000198656 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files (x86)\Polar\Polar FlowSync\Qt5WebKitWidgets.dll
2020-04-14 14:01 - 2015-10-12 11:17 - 004420096 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files (x86)\Polar\Polar FlowSync\Qt5Widgets.dll
2020-04-14 14:01 - 2015-10-12 11:13 - 000150016 _____ (The Qt Company Ltd) [Bestand niet getekend] C:\Program Files (x86)\Polar\Polar FlowSync\Qt5Xml.dll

==================== Alternate Data Streams (gefilterd) ========

(Als een item is opgenomen in de fixlist, wordt alleen de ADS verwijderd.)

AlternateDataStreams: C:\WINDOWS\System32:tdsrset_i.gfc [1455]

==================== Veilige Modus (gefilterd) ==================

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. De waarde van "AlternateShell" wordt hersteld.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"

==================== Bestandskoppeling (gefilterd) =================

(Als een item is opgenomen in de fixlist, zal het registeritem worden teruggezet naar de standaardwaarden of verwijderd.)

HKU\S-1-5-21-1857513966-911432345-2145300670-1001\Software\Classes\.scr: AutoCADLTScriptFile =>

==================== Internet Explorer (gefilterd) ==========

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-1857513966-911432345-2145300670-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-1857513966-911432345-2145300670-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_281\bin\ssv.dll [2021-01-25] (Oracle America, Inc. -> Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_281\bin\jp2ssv.dll [2021-01-25] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2021-03-05] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-03-05] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-03-05] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-03-05] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-03-05] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-03-05] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-03-05] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-03-05] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-03-05] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts inhoud: =========================

(Indien nodig kan Hosts:-opdracht worden opgenomen in de fixlist om Hosts te resetten.)

2018-09-15 08:31 - 2018-09-15 08:31 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Andere gebieden ===========================

(Momenteel is er geen automatische fix voor dit onderdeel.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-1857513966-911432345-2145300670-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\zcloo\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\buroblad.png
DNS Servers: 195.130.131.4 - 195.130.130.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall is ingeschakeld.

==================== MSCONFIG/TASK MANAGER Uitgeschakelde items ==

(Als een item is opgenomen in de fixlist, zal het worden verwijderd.)

HKU\S-1-5-21-1857513966-911432345-2145300670-1001\...\StartupApproved\StartupFolder: => "Inktwaarschuwingen controleren - HP Officejet Pro 8600 (netwerk).lnk"
HKU\S-1-5-21-1857513966-911432345-2145300670-1001\...\StartupApproved\StartupFolder: => "Verzenden naar OneNote.lnk"
HKU\S-1-5-21-1857513966-911432345-2145300670-1001\...\StartupApproved\StartupFolder: => "GenuineService.lnk"
HKU\S-1-5-21-1857513966-911432345-2145300670-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"

==================== Firewall regels (gefilterd) ================

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

FirewallRules: [{6ECB0E69-05C4-42F4-8B75-4F2EE2E719B0}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{B1181B4A-C0E0-469C-9EA2-767128BD0551}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{5DC68442-5057-4722-8181-A537163F4B8C}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{48CB9849-0579-4056-A998-DD4963149817}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [UDP Query User{9837A16E-71ED-44C7-B674-100188CFCEF8}C:\users\zcloo\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\zcloo\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{59A42BFE-6B9E-4EF3-85C4-53F2E36F6A6C}C:\users\zcloo\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\zcloo\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{0600D5F2-6FE0-4330-A022-BFD87E7F25C5}] => (Allow) C:\Program Files (x86)\Iperius Backup\IperiusService.exe (Enter Srl -> Enter Srl)
FirewallRules: [{49102493-4468-431C-8ED8-9DA90C769D29}] => (Allow) C:\Program Files (x86)\Iperius Backup\IperiusService.exe (Enter Srl -> Enter Srl)
FirewallRules: [{A0899558-BE5F-4CDF-B62D-632F32AF2437}] => (Allow) C:\Program Files (x86)\Iperius Backup\Iperius.exe (Enter Srl -> Enter Srl)
FirewallRules: [{71DE50C0-1334-4716-86CC-E768454A9EDD}] => (Allow) C:\Program Files (x86)\Iperius Backup\Iperius.exe (Enter Srl -> Enter Srl)
FirewallRules: [UDP Query User{8FF6CF1C-2D8A-4CAD-8412-B261DDA52A26}C:\users\zcloo\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\zcloo\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{1EEBC9D4-D3BF-4A44-8B77-CE1F04228052}C:\users\zcloo\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\zcloo\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{A7D477EE-F82F-4198-AA5B-DF50297E3E12}] => (Allow) LPort=5354
FirewallRules: [{91DEC0CE-6A99-4DAE-8446-B74994C8ACEB}] => (Allow) LPort=5354
FirewallRules: [{3997A96C-5190-463D-B1F8-21189B29D444}] => (Allow) LPort=5354
FirewallRules: [{F2825BAF-83CF-4AEE-96F2-F1707C2AC710}] => (Allow) LPort=5354
FirewallRules: [{B3CAF073-E1E1-48DA-8CC8-67684F7B7E95}] => (Allow) LPort=5354
FirewallRules: [{2D135113-C95A-42D1-8273-01E278C71671}] => (Allow) LPort=5354
FirewallRules: [{9A16113D-2466-45CC-86BB-4B498C5D5384}] => (Allow) LPort=5354
FirewallRules: [{90E9935D-D5D3-4EA9-9722-B22B90758C81}] => (Allow) LPort=5354
FirewallRules: [{965842BA-1A27-475F-B8C9-DFDE736C20C6}] => (Allow) C:\Program Files (x86)\BUFFALO\NASNAVI\NasNavi.exe (Buffalo Inc. -> Buffalo Inc.)
FirewallRules: [{2420C464-1BF9-47A6-8DC9-2F6A34E7E0A9}] => (Allow) C:\Program Files (x86)\BUFFALO\NASNAVI\NasNavi.exe (Buffalo Inc. -> Buffalo Inc.)
FirewallRules: [{E4FB07A8-61EB-4DCC-9705-731144ED3A46}] => (Allow) C:\Program Files (x86)\BUFFALO\NASNAVI\NasNavi.exe (Buffalo Inc. -> Buffalo Inc.)
FirewallRules: [{3ED89777-EDEF-4806-861C-4A6BB79CB7C8}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{F6597A9B-7119-4F68-B375-E9E984D84DC4}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{F7C7F031-BBFB-4596-9C93-0C4DC965D153}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8600\bin\FaxApplications.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{39CE973C-E373-4398-AF2D-7D760F37A427}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8600\bin\DigitalWizards.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{3DAA7B09-3B6A-4965-9209-AB4E09EC624B}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8600\bin\SendAFax.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{07F2C236-C6ED-44EB-BE04-B6F808DB2335}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8600\Bin\DeviceSetup.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{FBBF547F-7F29-428C-BCC7-0229B8AFCD71}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8600\Bin\HPNetworkCommunicator.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{AEF65C09-9D5B-4CB3-A2DB-9C76CA844B18}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8600\Bin\HPNetworkCommunicatorCom.exe (Hewlett Packard -> Hewlett-Packard Co.)
FirewallRules: [{37549E2E-C688-4928-9535-1191919AC290}] => (Allow) LPort=80
FirewallRules: [TCP Query User{28724D9F-2C66-4A37-995F-9724CBBDE771}C:\program files\trimble\trimble connect\trimbleconnect.exe] => (Allow) C:\program files\trimble\trimble connect\trimbleconnect.exe (Trimble Solutions Corporation -> Trimble)
FirewallRules: [UDP Query User{271A0D43-AFA8-4836-A44E-4721A06DCFF7}C:\program files\trimble\trimble connect\trimbleconnect.exe] => (Allow) C:\program files\trimble\trimble connect\trimbleconnect.exe (Trimble Solutions Corporation -> Trimble)
FirewallRules: [{BB58B928-7BDF-4089-B433-A3756EE2DE0B}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{AB4F4A5F-BE2A-425E-B4B7-9CBF16D184FF}] => (Allow) C:\Users\zcloo\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{B9355415-DFB5-43AC-A6DC-737A1B12CF42}] => (Allow) C:\Program Files\txgameassistant\appmarket\DL\syzs_dl_svr.exe (Tencent Technology(Shenzhen) Company Limited -> )
FirewallRules: [{97B48E81-7EF2-4F87-8585-0729E851AC26}] => (Allow) C:\Program Files\txgameassistant\appmarket\DL\syzs_dl_svr.exe (Tencent Technology(Shenzhen) Company Limited -> )
FirewallRules: [{5D47BDDF-FA00-4D78-8A94-EE221A9DFB71}] => (Allow) C:\Program Files\txgameassistant\appmarket\DL\syzs_dl_svr.exe (Tencent Technology(Shenzhen) Company Limited -> )
FirewallRules: [{6020905D-7F52-4CD5-83C0-C66B840E01FA}] => (Allow) C:\Program Files\txgameassistant\appmarket\DL\syzs_dl_svr.exe (Tencent Technology(Shenzhen) Company Limited -> )
FirewallRules: [{E45719FC-14A0-4FF9-9974-B81EB13B4079}] => (Allow) C:\Program Files\txgameassistant\appmarket\DL\syzs_dl_svr.exe (Tencent Technology(Shenzhen) Company Limited -> )
FirewallRules: [{591DA5CC-C020-4ACC-B75B-F89271B1A3DE}] => (Allow) C:\Program Files\txgameassistant\appmarket\DL\syzs_dl_svr.exe (Tencent Technology(Shenzhen) Company Limited -> )
FirewallRules: [{D43FF1B4-B89C-4719-ACE4-FFBED503B412}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Herstelpunten =========================

19-03-2021 20:03:15 Installatieprogramma voor Windows-modules
19-03-2021 20:03:42 Installatieprogramma voor Windows-modules

==================== Defecte Apparaatbeheer Apparaten ============


==================== Eventlog fouten: ========================

Applicatiefouten:
==================
Error: (03/14/2021 06:33:33 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Naam van toepassing met fout: OLicenseHeartbeat.exe, versie: 16.0.13801.20182, tijdstempel: 0x602dd932
Naam van module met fout: KERNELBASE.dll, versie: 10.0.19041.804, tijdstempel: 0x0e9c5eae
Uitzonderingscode: 0xc06d007e
Foutmarge: 0x000000000002d759
Id van proces met fout: 0xe98
Starttijd van toepassing met fout: 0x01d71893927ad8af
Pad naar toepassing met fout: C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe
Pad naar module met fout: C:\WINDOWS\System32\KERNELBASE.dll
Rapport-id: 3d8e51fc-9274-4f3b-b685-627252ca43ee
Volledige pakketnaam met fout:
Relatieve toepassings-id van pakket met fout:

Error: (03/13/2021 06:27:40 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Naam van toepassing met fout: OLicenseHeartbeat.exe, versie: 16.0.13801.20182, tijdstempel: 0x602dd932
Naam van module met fout: KERNELBASE.dll, versie: 10.0.19041.804, tijdstempel: 0x0e9c5eae
Uitzonderingscode: 0xc06d007e
Foutmarge: 0x000000000002d759
Id van proces met fout: 0x940
Starttijd van toepassing met fout: 0x01d717c995a9c267
Pad naar toepassing met fout: C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe
Pad naar module met fout: C:\WINDOWS\System32\KERNELBASE.dll
Rapport-id: e250d411-e04f-49ae-943f-61c3b9dbbf55
Volledige pakketnaam met fout:
Relatieve toepassings-id van pakket met fout:

Error: (03/12/2021 06:39:04 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Naam van toepassing met fout: OLicenseHeartbeat.exe, versie: 16.0.13801.20182, tijdstempel: 0x602dd932
Naam van module met fout: KERNELBASE.dll, versie: 10.0.19041.804, tijdstempel: 0x0e9c5eae
Uitzonderingscode: 0xc06d007e
Foutmarge: 0x000000000002d759
Id van proces met fout: 0x3790
Starttijd van toepassing met fout: 0x01d717020334b9c5
Pad naar toepassing met fout: C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe
Pad naar module met fout: C:\WINDOWS\System32\KERNELBASE.dll
Rapport-id: 0f14b5d9-3bb8-4618-92aa-3cafe523e027
Volledige pakketnaam met fout:
Relatieve toepassings-id van pakket met fout:

Error: (03/11/2021 06:34:27 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Naam van toepassing met fout: OLicenseHeartbeat.exe, versie: 16.0.13801.20182, tijdstempel: 0x602dd932
Naam van module met fout: KERNELBASE.dll, versie: 10.0.19041.804, tijdstempel: 0x0e9c5eae
Uitzonderingscode: 0xc06d007e
Foutmarge: 0x000000000002d759
Id van proces met fout: 0xfa4
Starttijd van toepassing met fout: 0x01d716383403543c
Pad naar toepassing met fout: C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe
Pad naar module met fout: C:\WINDOWS\System32\KERNELBASE.dll
Rapport-id: 60243997-c52a-4d53-b898-2881c1c7ed83
Volledige pakketnaam met fout:
Relatieve toepassings-id van pakket met fout:

Error: (03/10/2021 09:25:03 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Het programma OUTLOOK.EXE, versie 16.0.13801.20266 reageert niet meer op Windows en is afgesloten. Als u wilt zien of er meer informatie over het probleem beschikbaar is, raadpleegt u de probleemgeschiedenis in het onderdeel Beveiliging en onderhoud van het Configuratiescherm.

Proces-id: 2a7c

Starttijd: 01d7159b279dc017

Eindtijd: 22

Toepassingspad: C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.EXE

Rapport-id: 914c401f-6c40-4c9e-a53c-9c2f2eb9edf0

Volledige pakketnaam met fout:

Relatieve toepassings-id van pakket met fout:

Type vastlopen: Cross-thread

Error: (03/10/2021 06:47:24 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Naam van toepassing met fout: OLicenseHeartbeat.exe, versie: 16.0.13801.20182, tijdstempel: 0x602dd932
Naam van module met fout: KERNELBASE.dll, versie: 10.0.19041.804, tijdstempel: 0x0e9c5eae
Uitzonderingscode: 0xc06d007e
Foutmarge: 0x000000000002d759
Id van proces met fout: 0x8e4
Starttijd van toepassing met fout: 0x01d71570d8baede5
Pad naar toepassing met fout: C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe
Pad naar module met fout: C:\WINDOWS\System32\KERNELBASE.dll
Rapport-id: 1fcd1457-5972-427c-bea3-00ac54552abb
Volledige pakketnaam met fout:
Relatieve toepassings-id van pakket met fout:

Error: (03/09/2021 03:43:39 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Naam van toepassing met fout: NasNavi.exe, versie: 3.0.0.0, tijdstempel: 0x5df1a4e3
Naam van module met fout: NasNavi.exe, versie: 3.0.0.0, tijdstempel: 0x5df1a4e3
Uitzonderingscode: 0xc0000005
Foutmarge: 0x00034083
Id van proces met fout: 0x3b50
Starttijd van toepassing met fout: 0x01d714f296b8a6c1
Pad naar toepassing met fout: C:\Program Files (x86)\BUFFALO\NASNAVI\NasNavi.exe
Pad naar module met fout: C:\Program Files (x86)\BUFFALO\NASNAVI\NasNavi.exe
Rapport-id: 52b5af3c-f80c-4013-8144-f66a013f65c7
Volledige pakketnaam met fout:
Relatieve toepassings-id van pakket met fout:

Error: (03/09/2021 06:40:31 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Naam van toepassing met fout: OLicenseHeartbeat.exe, versie: 16.0.13801.20182, tijdstempel: 0x602dd932
Naam van module met fout: KERNELBASE.dll, versie: 10.0.19041.804, tijdstempel: 0x0e9c5eae
Uitzonderingscode: 0xc06d007e
Foutmarge: 0x000000000002d759
Id van proces met fout: 0x3424
Starttijd van toepassing met fout: 0x01d714a6b7929b41
Pad naar toepassing met fout: C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe
Pad naar module met fout: C:\WINDOWS\System32\KERNELBASE.dll
Rapport-id: 9a3dc6cd-e320-48b3-8335-24ad1fd5b86a
Volledige pakketnaam met fout:
Relatieve toepassings-id van pakket met fout:


Systeemfouten:
=============
Error: (03/19/2021 08:01:10 PM) (Source: volsnap) (EventID: 36) (User: )
Description: Bij de schaduwkopieën van volume C: zijn afgebroken omdat de schaduwkopieopslag niet kan worden uitgebreid vanwege een door de gebruiker opgelegde limiet.

Error: (03/19/2021 07:14:52 AM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: De server {995C996E-D918-4A8C-A302-45719A6F4EA7} heeft zich niet binnen de vereiste termijn bij DCOM geregistreerd.

Error: (03/18/2021 09:33:39 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: De server {995C996E-D918-4A8C-A302-45719A6F4EA7} heeft zich niet binnen de vereiste termijn bij DCOM geregistreerd.

Error: (03/18/2021 09:33:39 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: De server {995C996E-D918-4A8C-A302-45719A6F4EA7} heeft zich niet binnen de vereiste termijn bij DCOM geregistreerd.

Error: (03/11/2021 09:28:35 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: De service Delivery Optimization is niet juist afgesloten na de ontvangst van een besturingselement voor afsluiten.

Error: (03/10/2021 09:43:37 AM) (Source: Schannel) (EventID: 4103) (User: NT AUTHORITY)
Description: Er is een onherstelbare fout opgetreden bij het maken van een TLS-referentie voor client. De interne foutstatus is 10013.

Error: (03/09/2021 03:42:37 PM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY)
Description: DCOM heeft de foutmelding 1115 gekregen bij het starten van de wuauserv-service met de argumenten Niet beschikbaar om de server
{E60687F7-01A1-40AA-86AC-DB1CBF673334} te starten

Error: (03/09/2021 03:42:37 PM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY)
Description: DCOM heeft de foutmelding 1115 gekregen bij het starten van de wuauserv-service met de argumenten Niet beschikbaar om de server
{E60687F7-01A1-40AA-86AC-DB1CBF673334} te starten


Windows Defender:
================
Date: 2021-03-11 12:58:04
Description:
Scan van Microsoft Defender Antivirus is gestopt voordat deze was voltooid.
Scan-id: {0B8EFB77-92A9-4B3D-8E65-C3E90579DAEF}
Type scan: Antimalware
Scanparameters: Snelle scan
Gebruiker: NT AUTHORITY\SYSTEM

Date: 2021-03-10 12:39:15
Description:
Scan van Microsoft Defender Antivirus is gestopt voordat deze was voltooid.
Scan-id: {7658A932-6BA2-4E6D-9D08-1678A68184CC}
Type scan: Antimalware
Scanparameters: Snelle scan
Gebruiker: NT AUTHORITY\SYSTEM

Date: 2021-03-09 11:38:40
Description:
Scan van Microsoft Defender Antivirus is gestopt voordat deze was voltooid.
Scan-id: {2F657ED9-C954-4914-835C-564C1E8E0880}
Type scan: Antimalware
Scanparameters: Snelle scan
Gebruiker: NT AUTHORITY\SYSTEM

Date: 2021-03-08 11:53:56
Description:
Scan van Microsoft Defender Antivirus is gestopt voordat deze was voltooid.
Scan-id: {F67698CA-A87F-418C-836F-38B9EA9ADD31}
Type scan: Antimalware
Scanparameters: Snelle scan
Gebruiker: NT AUTHORITY\SYSTEM

Date: 2021-03-08 08:19:46
Description:
Scan van Microsoft Defender Antivirus is gestopt voordat deze was voltooid.
Scan-id: {E76EDC9C-EFD4-469E-867C-BC4B8753D9BE}
Type scan: Antimalware
Scanparameters: Snelle scan
Gebruiker: NT AUTHORITY\SYSTEM

CodeIntegrity:
===============
Date: 2021-03-24 08:50:27
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2021-03-24 08:50:23
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.


==================== Geheugen info ===========================

BIOS: HP R21 Ver. 02.02.00 07/26/2019
Moederbord: HP 8594
Processor: Intel(R) Core(TM) i7-9700 CPU @ 3.00GHz
Percentage geheugen in gebruik: 49%
Totaal fysiek RAM-geheugen: 16158.29 MB
Beschikbaar fysiek RAM-geheugen: 8210.85 MB
Totaal Virtueel geheugen: 20066.97 MB
Beschikbaar Virtueel geheugen: 9364.93 MB

==================== Schijven ================================

Drive c: (Windows ) (Fixed) (Total:475.69 GB) (Free:30.38 GB) (Protected) NTFS

\\?\Volume{c73afe0b-bbd5-4c8b-be1c-a8cbef219536}\ (Windows RE Tools) (Fixed) (Total:0.97 GB) (Free:0.5 GB) NTFS
\\?\Volume{25f14e91-45a6-464a-8bbb-9195cf3b0348}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.15 GB) FAT32

==================== MBR & Partitietabel ====================

==========================================================
Disk: 0 (Size: 476.9 GB) (Disk ID: E2EF68CA)

Partition: GPT.

==================== Einde van Addition.txt =======================
Gebruikersavatar
PeterJ
Moderator
Berichten: 3502
Lid geworden op: 22 okt 2007 23:22

Lees de instructies goed. Logbestanden aub als bijlage posten, niet de logtekst in je bericht plakken.
Het tekst van FRST.txt is niet compleet, post het bestand FRST.txt als bijlage.
Member of UNITE (Unified Network of Instructors and Trusted Eliminators.)
Tevreden met de geboden hulp, overweeg een vrijblijvende donatie of plaats een bedankje. Hoe je dat doet lees je hier.
Gebruikersavatar
conny
Lid
Berichten: 32
Lid geworden op: 10 mar 2008 14:22
Locatie: antwerpen

aub
Je hebt niet voldoende permissies om de bijlagen van dit bericht te bekijken.
Gebruikersavatar
PeterJ
Moderator
Berichten: 3502
Lid geworden op: 22 okt 2007 23:22

Stap 1:
De-installeer Advanced SystemCare en herstart daarna de computer.

Stap 2:
Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.

Download de bijlage fixlist.txt naar de map, waar ook FRST64.exe aanwezig is.
Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met FRST.
Rechtsklik op Afbeelding FRST64.exe en klik op "Als administrator uitvoeren".
Druk op de knop Fixen.
Na de fix wordt een logbestand gemaakt (Fixlog.txt) op dezelfde plaats vanwaar de 'tool' is gestart.
Voeg dit logbestand als bijlage toe aan je volgend bericht.
Je hebt niet voldoende permissies om de bijlagen van dit bericht te bekijken.
Member of UNITE (Unified Network of Instructors and Trusted Eliminators.)
Tevreden met de geboden hulp, overweeg een vrijblijvende donatie of plaats een bedankje. Hoe je dat doet lees je hier.
Gebruikersavatar
conny
Lid
Berichten: 32
Lid geworden op: 10 mar 2008 14:22
Locatie: antwerpen

aub
Je hebt niet voldoende permissies om de bijlagen van dit bericht te bekijken.
Gebruikersavatar
PeterJ
Moderator
Berichten: 3502
Lid geworden op: 22 okt 2007 23:22

Prima. Is er inmiddels verbetering merkbaar ?
Member of UNITE (Unified Network of Instructors and Trusted Eliminators.)
Tevreden met de geboden hulp, overweeg een vrijblijvende donatie of plaats een bedankje. Hoe je dat doet lees je hier.
Gebruikersavatar
conny
Lid
Berichten: 32
Lid geworden op: 10 mar 2008 14:22
Locatie: antwerpen

het gaat inderdaad terug zoals voorheen.
dus dat ene programma deed mijn pc overuren draaien?
Gebruikersavatar
PeterJ
Moderator
Berichten: 3502
Lid geworden op: 22 okt 2007 23:22

Zou kunnen. Zogenaamde System Optimizers beloven meer dan ze waarmaken en zijn meestal overbodig.
Er is ook 6.6GB aan tijdelijke bestanden opgeruimd.
Member of UNITE (Unified Network of Instructors and Trusted Eliminators.)
Tevreden met de geboden hulp, overweeg een vrijblijvende donatie of plaats een bedankje. Hoe je dat doet lees je hier.

Terug naar “Virus- en malwarebestrijding logfile-sectie”