API tools faq
paste
Advertisement
Guest User

FRST.txt

a guest
Nov 11th, 2015
336
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 41.58 KB | None | 0 0
raw download clone embed print report
  1. Scanresultaten van Farbar Recovery Scan Tool (FRST) (x64) Versie:07-11-2015
  2. Gestart door mPnR_ (Beheerder) op DELL-PC (11-11-2015 08:54:56)
  3. Gestart vanaf C:\Users\mPnR_\Desktop
  4. Geladen Profielen: mPnR_ (Beschikbare Profielen: dell & mPnR_)
  5. Platform: Windows 7 Ultimate Service Pack 1 (X64) Taal: Holenderski (Holandia)
  6. Internet Explorer Versie 9 (Standaardbrowser: Chrome)
  7. Boot Modus: Normal
  8. Handleiding voor Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  9.  
  10. ==================== Processen (gefilterd) =================
  11.  
  12. (Als een item is opgenomen in de fixlist, het proces zal worden gesloten. Het bestand zal niet worden verplaatst.)
  13.  
  14. (Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
  15. (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
  16. (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
  17. (LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
  18. (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
  19. (TeamViewer GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
  20. (VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
  21. (Tablet Driver) C:\Windows\System32\drivers\WTSrv.exe
  22. (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
  23. (VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
  24. () C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
  25. (Tablet Driver) C:\Windows\SysWOW64\WTClient.exe
  26. (Intel Corporation) C:\Windows\System32\hkcmd.exe
  27. (QFX Software Corporation) C:\Program Files (x86)\KeyScrambler\KeyScrambler.exe
  28. (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
  29. (QFX Software Corporation) C:\Program Files (x86)\KeyScrambler\x64\KeyScrambler.exe
  30. (Intel Corporation) C:\Windows\System32\igfxsrvc.exe
  31. (Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
  32. (Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieCtrl.exe
  33. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  34. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  35. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  36. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  37. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  38. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  39. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  40. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  41. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  42.  
  43.  
  44. ==================== Register (gefilterd) ===========================
  45.  
  46. (Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.)
  47.  
  48. HKLM-x32\...\Run: [KeyScrambler] => C:\Program Files (x86)\KeyScrambler\keyscrambler.exe [509216 2015-02-16] (QFX Software Corporation)
  49. HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597040 2015-10-06] (Oracle Corporation)
  50. HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5565448 2015-10-26] (LogMeIn Inc.)
  51. Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
  52. HKU\S-1-5-21-799834153-1171727689-305855866-1173\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd)
  53. HKU\S-1-5-21-799834153-1171727689-305855866-1173\...\Run: [SetMyHomePage] => C:\Users\mPnR_\AppData\Roaming\SetMyHomePage\setmyhomepage.exe
  54. HKU\S-1-5-21-799834153-1171727689-305855866-1173\...\Run: [CyberGhost] => "C:\Program Files\CyberGhost 5\CyberGhost.exe" /autostart /min
  55. HKU\S-1-5-21-799834153-1171727689-305855866-1173\...\Run: [icq] => C:\Users\mPnR_\AppData\Roaming\ICQM\icq.exe [36705800 2015-04-20] (ICQ)
  56. HKU\S-1-5-21-799834153-1171727689-305855866-1173\...\Run: [OKAYFREEDOM_Agent] => C:\Program Files (x86)\OkayFreedom\OkayFreedomClient.exe [6611464 2015-10-27] (Steganos Software GmbH)
  57. HKU\S-1-5-21-799834153-1171727689-305855866-1173\...\Policies\system: [LogonHoursAction] 2
  58. HKU\S-1-5-21-799834153-1171727689-305855866-1173\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
  59. HKU\S-1-5-21-799834153-1171727689-305855866-1173\...\MountPoints2: {899be3ee-b7f5-11e3-bec4-e1c3d053300c} - G:\LGAutoRun.exe
  60. HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2013-10-28] (Microsoft Corporation)
  61. ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mPnR_\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-05] (Dropbox, Inc.)
  62. ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mPnR_\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-05] (Dropbox, Inc.)
  63. ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mPnR_\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-05] (Dropbox, Inc.)
  64. ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mPnR_\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-05] (Dropbox, Inc.)
  65. ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mPnR_\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-05] (Dropbox, Inc.)
  66. ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mPnR_\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-05] (Dropbox, Inc.)
  67. ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mPnR_\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-05] (Dropbox, Inc.)
  68. ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mPnR_\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-08-05] (Dropbox, Inc.)
  69. ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => Geen bestand
  70. ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => Geen bestand
  71. ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mPnR_\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-05] (Dropbox, Inc.)
  72. ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mPnR_\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-05] (Dropbox, Inc.)
  73. ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mPnR_\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-05] (Dropbox, Inc.)
  74. ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mPnR_\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-05] (Dropbox, Inc.)
  75. ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mPnR_\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-05] (Dropbox, Inc.)
  76. ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mPnR_\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-05] (Dropbox, Inc.)
  77. ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mPnR_\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-05] (Dropbox, Inc.)
  78. ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mPnR_\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-05] (Dropbox, Inc.)
  79. ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mPnR_\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-05] (Dropbox, Inc.)
  80. ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mPnR_\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-05] (Dropbox, Inc.)
  81. ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mPnR_\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-05] (Dropbox, Inc.)
  82. ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mPnR_\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-05] (Dropbox, Inc.)
  83. ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mPnR_\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-05] (Dropbox, Inc.)
  84. ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mPnR_\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-05] (Dropbox, Inc.)
  85. ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mPnR_\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-05] (Dropbox, Inc.)
  86. ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\mPnR_\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-05] (Dropbox, Inc.)
  87. Startup: C:\Users\dell\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2014-01-06]
  88. ShortcutTarget: Dropbox.lnk -> C:\Users\mPnR_\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
  89. BootExecute: autocheck autochk * bootdelete
  90. GroupPolicyUsers\S-1-5-21-799834153-1171727689-305855866-1175\User: Restrictie <======= AANDACHT
  91. GroupPolicyScripts\User: Restrictie <======= AANDACHT
  92. CHR HKLM\SOFTWARE\Policies\Google: Restrictie <======= AANDACHT
  93.  
  94. ==================== Internet (gefilterd) ====================
  95.  
  96. (Als een item is opgenomen in de fixlist, als het een registry item is wordt verwijderd of hersteld naar de standaard.)
  97.  
  98. AutoConfigURL: [S-1-5-21-799834153-1171727689-305855866-1173] => hxxp://127.0.0.1:8445/okayfreedom.pac
  99. Hosts: 127.0.0.1 blackshades.ru
  100. Tcpip\Parameters: [DhcpNameServer] 192.168.2.254
  101. Tcpip\..\Interfaces\{C5E2AF81-5767-4968-A261-CF4DB35D9C3D}: [DhcpNameServer] 192.168.2.254
  102.  
  103. Internet Explorer:
  104. ==================
  105. HKU\S-1-5-21-799834153-1171727689-305855866-1173\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://nl.msn.com/?ocid=iehp
  106. SearchScopes: HKU\S-1-5-21-799834153-1171727689-305855866-1173 -> DefaultScope {4187F0FC-AF41-4E4B-AE67-84C8FD35A0AE} URL = hxxp://terra.im/search?sid=101&q={searchTerms}
  107. SearchScopes: HKU\S-1-5-21-799834153-1171727689-305855866-1173 -> {4187F0FC-AF41-4E4B-AE67-84C8FD35A0AE} URL = hxxp://terra.im/search?sid=101&q={searchTerms}
  108. BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_65\bin\ssv.dll [2015-10-23] (Oracle Corporation)
  109. BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-10-23] (Oracle Corporation)
  110. BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2006-10-26] (Microsoft Corporation)
  111.  
  112. FireFox:
  113. ========
  114. FF ProfilePath: C:\Users\mPnR_\AppData\Roaming\Mozilla\Firefox\Profiles\38xxqdut.default-1421196589489
  115. FF NetworkProxy: "socks", "194.50.177.187"
  116. FF NetworkProxy: "socks_port", 37847
  117. FF DefaultSearchEngine: terra.im
  118. FF SelectedSearchEngine: terra.im
  119. FF Homepage: hxxps://www.malwarebytes.org/restorebrowser/
  120. FF Homepage: hxxps://www.malwarebytes.org/restorebrowser/
  121. FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-29] ()
  122. FF Plugin: @java.com/DTPlugin,version=11.65.2 -> C:\Program Files\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll [2015-10-23] (Oracle Corporation)
  123. FF Plugin: @java.com/JavaPlugin,version=11.65.2 -> C:\Program Files\Java\jre1.8.0_65\bin\plugin2\npjp2.dll [2015-10-23] (Oracle Corporation)
  124. FF Plugin: @unity3d.com/UnityPlayer64,version=1.0 -> C:\Program Files\Unity\WebPlayer64\loader-x64\npUnity3D64.dll [2015-02-18] (Unity Technologies ApS)
  125. FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-29] ()
  126. FF Plugin-x32: @nexon.net/NxGame -> C:\ProgramData\NexonUS\NGM\npNxGameUS.dll [Geen bestand]
  127. FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll [Geen bestand]
  128. FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Geen bestand]
  129. FF Plugin-x32: @qq.com/npchrome -> C:\Program Files (x86)\Common Files\Tencent\Npchrome\npchrome.dll [Geen bestand]
  130. FF Plugin-x32: @qq.com/npqscall -> C:\Program Files (x86)\Common Files\Tencent\NPQSCALL\npqscall.dll [Geen bestand]
  131. FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-14] (Google Inc.)
  132. FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-14] (Google Inc.)
  133. FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
  134. FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
  135. FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-03-17] (Adobe Systems Inc.)
  136. FF Plugin HKU\S-1-5-21-799834153-1171727689-305855866-1173: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\mPnR_\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-07-07] (Unity Technologies ApS)
  137. FF Plugin ProgramFiles/Appdata: C:\Users\mPnR_\AppData\Roaming\mozilla\plugins\np-mswmp.dll [2009-09-25] (Microsoft Corporation)
  138. FF Extension: iMacros for Firefox - C:\Users\mPnR_\AppData\Roaming\Mozilla\Firefox\Profiles\38xxqdut.default-1421196589489\Extensions\{81BF1D23-5F17-408D-AC6B-BD6DF7CAF670} [2015-10-03]
  139. FF Extension: Live HTTP headers - C:\Users\mPnR_\AppData\Roaming\Mozilla\Firefox\Profiles\38xxqdut.default-1421196589489\Extensions\{8f8fe09b-0bd3-4470-bc1b-8cad42b8203a} [2015-08-09]
  140. FF Extension: Browser A.I - C:\Users\mPnR_\AppData\Roaming\Mozilla\Firefox\Profiles\38xxqdut.default-1421196589489\Extensions\browserai@jetpack.xpi [2015-07-01] [ niet getekend]
  141. FF Extension: anonymoX - C:\Users\mPnR_\AppData\Roaming\Mozilla\Firefox\Profiles\38xxqdut.default-1421196589489\Extensions\client@anonymox.net.xpi [2015-10-02]
  142. FF Extension: sozi - C:\Users\mPnR_\AppData\Roaming\Mozilla\Firefox\Profiles\38xxqdut.default-1421196589489\Extensions\sozi@jetpack.xpi [2015-02-19] [ niet getekend]
  143. FF Extension: TrackMeNot - C:\Users\mPnR_\AppData\Roaming\Mozilla\Firefox\Profiles\38xxqdut.default-1421196589489\Extensions\trackmenot@mrl.nyu.edu.xpi [2015-06-10]
  144. FF Extension: Vlc context menu - C:\Users\mPnR_\AppData\Roaming\Mozilla\Firefox\Profiles\38xxqdut.default-1421196589489\Extensions\vlcplaylist@helgatauscher.de.xpi [2015-08-30]
  145. FF Extension: Adblock Plus - C:\Users\mPnR_\AppData\Roaming\Mozilla\Firefox\Profiles\38xxqdut.default-1421196589489\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-10-02]
  146. FF Extension: OkayFreedom - C:\Users\mPnR_\AppData\Roaming\Mozilla\Firefox\Profiles\38xxqdut.default-1421196589489\Extensions\{DB981CCA-088E-4731-A4A2-2FE218703C0E}.xpi [2015-09-08]
  147. FF Extension: HackBar - C:\Users\mPnR_\AppData\Roaming\Mozilla\Firefox\Profiles\38xxqdut.default-1421196589489\Extensions\{F5DDF39C-9293-4d5e-9AA8-E04E6DD5E9B4}.xpi [2015-08-22]
  148. FF Extension: Hotspot Shield Extension - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\afproxy@anchorfree.com [2015-08-30] [ niet getekend]
  149. FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird => niet gevonden
  150.  
  151. Chrome:
  152. =======
  153. CHR HomePage: Default -> hxxp://public-box.ru/start
  154. CHR StartupUrls: Default -> "hxxp://public-box.ru/start"
  155. CHR Profile: C:\Users\mPnR_\AppData\Local\Google\Chrome\User Data\Default
  156. CHR Extension: (uBlock Origin) - C:\Users\mPnR_\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2015-11-10]
  157. CHR Extension: (Tampermonkey) - C:\Users\mPnR_\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2015-10-04]
  158. CHR Extension: (anonymoX) - C:\Users\mPnR_\AppData\Local\Google\Chrome\User Data\Default\Extensions\icpklikeghomkemdellmmkoifgfbakio [2015-10-02]
  159. CHR Extension: (LiveReload) - C:\Users\mPnR_\AppData\Local\Google\Chrome\User Data\Default\Extensions\jnihajbhpnppcggbcgedagnkighmdlei [2015-09-21]
  160. CHR Extension: (Betalingen via Chrome Web Store) - C:\Users\mPnR_\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-09-01]
  161.  
  162. ==================== Services (gefilterd) ========================
  163.  
  164. (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)
  165.  
  166. S3 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [433784 2015-06-16] (BlueStack Systems, Inc.)
  167. R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [413304 2015-06-16] (BlueStack Systems, Inc.)
  168. R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [831096 2015-07-21] (BlueStack Systems, Inc.)
  169. S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [Bestand niet getekend]
  170. R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-10-26] (LogMeIn, Inc.)
  171. S4 msvsmon90; C:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\Remote Debugger\x64\msvsmon.exe [4737024 2008-07-29] (Microsoft Corporation)
  172. S3 NBService; C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe [774144 2007-01-15] (Nero AG) [Bestand niet getekend]
  173. S3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [266240 2007-01-15] (Nero AG) [Bestand niet getekend]
  174. S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [5132656 2013-11-25] (INCA Internet Co., Ltd.)
  175. S2 OkayFreedom VPN Starter Service; C:\Program Files (x86)\OkayFreedom\OkayFreedomService.exe [347680 2015-10-27] (Steganos Software GmbH)
  176. S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
  177. R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [174600 2014-10-14] (Sandboxie Holdings, LLC)
  178. R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [5611280 2015-08-07] (TeamViewer GmbH)
  179. R2 VMwareHostd; C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe [12732608 2015-05-31] ()
  180. S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
  181. R2 WinTabService; C:\Windows\System32\Drivers\WTSRV.EXE [73728 2009-09-23] (Tablet Driver) [Bestand niet getekend]
  182. S3 aspnet_state; %SystemRoot%\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [X]
  183.  
  184. ===================== Drivers (gefilterd) ==========================
  185.  
  186. (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)
  187.  
  188. R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [145528 2015-06-16] (BlueStack Systems)
  189. R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-05-30] (Disc Soft Ltd)
  190. S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
  191. S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [43664 2015-07-17] ()
  192. R1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [44744 2014-01-03] (AnchorFree Inc.)
  193. S3 hxsyol; C:\Windows\system32\hxsy64.sys [86352 2015-03-23] ()
  194. R3 KeyScrambler; C:\Windows\System32\drivers\keyscrambler.sys [223696 2015-02-07] (QFX Software Corporation)
  195. S3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv.sys [49264 2014-07-28] (Visicom Media Inc.)
  196. S3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [35440 2014-05-13] (Visicom Media Inc.)
  197. R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
  198. R0 RzFilter; C:\Windows\System32\drivers\RzFilter.sys [74432 2013-12-11] (Razer, Inc.)
  199. R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [185352 2014-10-14] (Sandboxie Holdings, LLC)
  200. S3 tap0801; C:\Windows\System32\DRIVERS\tap0801.sys [30720 2005-04-13] (The OpenVPN Project) [Bestand niet getekend]
  201. R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-01-03] (Anchorfree Inc.)
  202. S3 tapSF0901; C:\Windows\System32\DRIVERS\tapSF0901.sys [39104 2014-07-11] (Spotflux, Inc.)
  203. U3 TrueSight; C:\Windows\SysWOW64\drivers\TrueSight.sys [29160 2014-08-01] ()
  204. R3 VBAudioVACMME; C:\Windows\System32\DRIVERS\vbaudio_cable64_win7.sys [41192 2013-07-11] (Windows (R) Win 7 DDK provider)
  205. R1 veracrypt; C:\Windows\System32\drivers\veracrypt.sys [192344 2015-03-14] (IDRIX)
  206. R0 vsock; C:\Windows\System32\drivers\vsock.sys [76480 2015-05-21] (VMware, Inc.)
  207. R2 vstor2-mntapi20-shared; C:\Windows\SysWow64\drivers\vstor2-mntapi20-shared.sys [33872 2013-08-28] (VMware, Inc.)
  208. S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
  209. S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
  210. S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
  211. S3 Tablet2k; "%SystemRoot%\System32\Drivers\Tablet2k.sys" [X]
  212. S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
  213. S3 VGPU; System32\drivers\rdvgkmd.sys [X]
  214. S3 WinRing0_1_2_0; \??\C:\Program Files (x86)\IObit\Game Booster 3\Driver\WinRing0x64.sys [X]
  215. S3 X6va013; \??\C:\Windows\SysWOW64\Drivers\X6va013 [X]
  216. S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
  217.  
  218. ==================== NetSvcs (gefilterd) ===================
  219.  
  220. (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)
  221.  
  222.  
  223. ==================== Een Maand Aangemaakt bestanden en mappen ========
  224.  
  225. (Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)
  226.  
  227. 2015-11-11 08:54 - 2015-11-11 08:55 - 00022097 _____ C:\Users\mPnR_\Desktop\FRST.txt
  228. 2015-11-11 08:54 - 2015-11-11 08:54 - 02198528 _____ (Farbar) C:\Users\mPnR_\Desktop\FRST64.exe
  229. 2015-11-11 08:53 - 2015-11-11 08:54 - 02198528 _____ (Farbar) C:\Users\mPnR_\Downloads\FRST64.exe
  230. 2015-11-10 23:04 - 2015-11-10 23:10 - 34121245 _____ (COMODO) C:\Users\mPnR_\Downloads\cav_installer.exe
  231. 2015-11-10 21:58 - 2015-11-10 21:58 - 00073228 _____ C:\Users\mPnR_\Downloads\Satoshi_GUI.zip
  232. 2015-11-10 21:54 - 2015-11-10 22:02 - 00000000 ____D C:\Users\mPnR_\Desktop\SatoBot
  233. 2015-11-10 21:54 - 2015-11-10 21:54 - 00113870 _____ C:\Users\mPnR_\Downloads\Satobot-Cracked-By-TheBlackCrack.zip
  234. 2015-11-10 21:40 - 2015-11-10 21:40 - 00000000 ____D C:\Users\mPnR_\AppData\Local\ninjapinner.com
  235. 2015-11-10 21:37 - 2015-11-10 21:37 - 26115010 _____ C:\Users\mPnR_\Downloads\ninjagram_exclusive_v2.zip
  236. 2015-11-10 21:35 - 2015-11-10 21:39 - 00000000 ____D C:\Users\mPnR_\Desktop\NinjaGram
  237. 2015-11-09 12:11 - 2015-11-09 12:11 - 00339849 _____ C:\Users\mPnR_\Downloads\WiFiKill-1.7.apk
  238. 2015-11-09 12:06 - 2015-11-09 12:06 - 00001129 _____ C:\Users\Public\Desktop\OkayFreedom.lnk
  239. 2015-11-09 12:06 - 2015-11-09 12:06 - 00000000 __SHD C:\Nsi.pending
  240. 2015-11-09 12:01 - 2015-11-09 12:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
  241. 2015-11-08 22:40 - 2015-11-08 22:41 - 48789392 _____ C:\Users\mPnR_\Desktop\InstaKnight.rar
  242. 2015-11-07 20:16 - 2015-11-07 20:28 - 38403754 _____ C:\Users\mPnR_\Downloads\3.000.000 Mail Pass.rar
  243. 2015-11-07 19:39 - 2015-11-07 19:39 - 02676182 _____ C:\Users\mPnR_\Downloads\porn2.txt
  244. 2015-11-04 19:05 - 2015-11-04 19:04 - 07370682 _____ C:\Users\mPnR_\Desktop\zbigni3w_720p.mp4
  245. 2015-11-04 19:02 - 2015-11-04 19:04 - 07370682 _____ C:\Users\mPnR_\Downloads\zbigni3w_720p.mp4
  246. 2015-11-02 23:39 - 2015-11-02 23:39 - 00033234 _____ C:\Users\mPnR_\Downloads\raw.php
  247. 2015-11-01 12:55 - 2015-11-01 12:55 - 00000000 ____D C:\Users\mPnR_\AppData\Roaming\Python
  248. 2015-11-01 06:07 - 2015-11-01 06:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
  249. 2015-11-01 06:07 - 2015-11-01 06:07 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
  250. 2015-10-31 23:57 - 2015-10-31 23:57 - 00000000 ____D C:\Program Files\TAP-Windows
  251. 2015-10-31 23:56 - 2015-11-01 00:09 - 00000000 ____D C:\Program Files\CyberGhost 5
  252. 2015-10-31 23:56 - 2015-10-31 23:56 - 09744656 _____ (CyberGhost S.R.L. ) C:\Users\mPnR_\Downloads\CG_5.0.15.14_72.exe
  253. 2015-10-31 20:06 - 2015-10-31 20:06 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
  254. 2015-10-31 19:35 - 2015-10-31 19:35 - 06774262 _____ C:\Users\mPnR_\Downloads\Ermelo Snelkraak PhoneHouse aan De Enk.mp4
  255. 2015-10-31 18:39 - 2015-10-31 18:39 - 04492587 _____ C:\Users\mPnR_\Downloads\iTurbo - Cracked by Meth.zip
  256. 2015-10-31 16:45 - 2015-10-31 16:45 - 02111750 _____ C:\Users\mPnR_\Downloads\zkbcty.csv
  257. 2015-10-31 15:21 - 2015-10-31 15:21 - 06901675 _____ C:\Users\mPnR_\Downloads\Whatsapp Bulk Sender Cracked by TheProxy.rar
  258. 2015-10-31 11:03 - 2015-10-31 11:04 - 10912349 _____ C:\Users\mPnR_\Downloads\mpv-x86_64-20151029 (2).7z
  259. 2015-10-31 11:00 - 2015-10-31 11:00 - 07972434 _____ C:\Users\mPnR_\Downloads\win-builds-1.5.0.exe
  260. 2015-10-31 10:57 - 2015-10-31 10:57 - 00042926 _____ C:\Users\mPnR_\Downloads\mpv-install-master.zip
  261. 2015-10-31 10:56 - 2015-10-31 10:56 - 10912349 _____ C:\Users\mPnR_\Downloads\mpv-x86_64-20151029 (1).7z
  262. 2015-10-31 10:50 - 2015-10-31 10:50 - 00000000 ____D C:\Users\mPnR_\AppData\Roaming\mpv
  263. 2015-10-31 10:49 - 2015-10-31 10:50 - 10912349 _____ C:\Users\mPnR_\Downloads\mpv-x86_64-20151029.7z
  264. 2015-10-31 01:00 - 2015-10-31 01:00 - 00005697 _____ C:\Users\mPnR_\Downloads\androidpatternlock-master.zip
  265. 2015-10-29 17:05 - 2015-10-29 17:05 - 01618296 _____ C:\Users\mPnR_\Downloads\arcade-basic.1.0.6.zip
  266. 2015-10-28 23:32 - 2015-10-29 00:08 - 00000547 _____ C:\Users\mPnR_\Desktop\fire.txt
  267. 2015-10-24 20:11 - 2015-07-16 17:35 - 00014336 _____ C:\Users\mPnR_\Desktop\osu! console v1.1.exe
  268. 2015-10-24 20:10 - 2015-10-24 20:10 - 00006677 _____ C:\Users\mPnR_\Downloads\osu! console v1.1.rar
  269. 2015-10-23 18:33 - 2015-11-09 12:01 - 00000000 ____D C:\Program Files\Java
  270. 2015-10-23 18:33 - 2015-10-23 18:41 - 00000000 ____D C:\ProgramData\Oracle
  271. 2015-10-18 14:23 - 2015-10-18 14:23 - 13280448 _____ C:\Users\mPnR_\Downloads\Lange Ritchie - El Fdiha Videoclip -Gruwlijke Overval-.mp4
  272. 2015-10-18 14:19 - 2015-10-18 14:20 - 23525602 _____ C:\Users\mPnR_\Downloads\Ghaza ft Lange Ritch ft Pietju-Bell Sergio - Free Ghaza Stroke.mp4
  273. 2015-10-15 11:00 - 2015-10-15 11:00 - 00000940 _____ C:\Users\mPnR_\Downloads\-usersecure.php
  274. 2015-10-14 17:22 - 2015-10-31 20:05 - 00001114 _____ C:\Users\mPnR_\Desktop\CABAL Online (NA - Global).lnk
  275. 2015-10-14 17:04 - 2015-10-23 20:23 - 00000000 ____D C:\Program Files (x86)\CABAL Online (NA - Global)
  276. 2015-10-14 13:12 - 2015-10-14 16:23 - 2001415088 _____ C:\Users\mPnR_\Downloads\11132014_US_Setup.exe
  277. 2015-10-14 10:24 - 2015-10-14 10:26 - 00000000 ____D C:\Users\mPnR_\AppData\Roaming\PixelChampions
  278. 2015-10-14 10:23 - 2015-10-14 10:23 - 00101888 _____ C:\Users\mPnR_\Downloads\PixelChampions.exe
  279. 2015-10-13 14:02 - 2015-10-13 14:03 - 01911555 _____ C:\Users\mPnR_\Downloads\gophish-master.zip
  280.  
  281. ==================== Een Maand Gewijzigd bestanden en mappen ========
  282.  
  283. (Als een item is opgenomen in de fixlist, het bestand/map wordt verplaatst.)
  284.  
  285. 2015-11-11 08:55 - 2015-04-05 17:26 - 00000000 ____D C:\FRST
  286. 2015-11-11 08:22 - 2014-07-21 22:35 - 00001056 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
  287. 2015-11-11 07:56 - 2013-06-09 17:22 - 01128903 _____ C:\Windows\WindowsUpdate.log
  288. 2015-11-10 23:30 - 2014-09-25 18:16 - 00000000 ____D C:\Users\mPnR_\AppData\Roaming\.purple
  289. 2015-11-10 22:56 - 2015-07-19 17:40 - 00000000 ____D C:\ProgramData\NinjaGram
  290. 2015-11-10 21:39 - 2015-07-19 17:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NinjaGram
  291. 2015-11-10 21:28 - 2015-09-23 19:47 - 00000000 ____D C:\Users\mPnR_\Desktop\InstaKnight
  292. 2015-11-10 21:22 - 2014-07-21 22:35 - 00001052 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
  293. 2015-11-09 17:04 - 2015-02-19 15:26 - 00000000 ____D C:\Program Files (x86)\Steam
  294. 2015-11-09 17:04 - 2014-05-09 20:29 - 00000000 ____D C:\Users\mPnR_\AppData\Local\LogMeIn Hamachi
  295. 2015-11-09 17:04 - 2014-02-17 01:16 - 00000000 ____D C:\Users\mPnR_\AppData\Roaming\TeamViewer
  296. 2015-11-09 17:04 - 2014-01-14 07:29 - 00000000 ____D C:\Users\mPnR_\AppData\Local\CrashDumps
  297. 2015-11-09 17:04 - 2014-01-12 15:11 - 00000000 ____D C:\Users\mPnR_\AppData\Roaming\Notepad++
  298. 2015-11-09 12:21 - 2015-01-17 16:53 - 00000000 ___RD C:\Dropbox
  299. 2015-11-09 12:06 - 2015-09-04 19:53 - 00000000 ____D C:\Program Files (x86)\OkayFreedom
  300. 2015-11-09 12:06 - 2015-02-21 23:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OkayFreedom
  301. 2015-11-09 12:05 - 2015-02-21 23:59 - 00000000 ____D C:\Users\mPnR_\AppData\Roaming\Steganos VPN
  302. 2015-11-09 12:03 - 2015-04-05 18:35 - 00005984 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  303. 2015-11-09 12:03 - 2015-04-05 18:35 - 00005984 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  304. 2015-11-09 12:02 - 2013-09-28 19:55 - 00744182 _____ C:\Windows\system32\perfh015.dat
  305. 2015-11-09 12:02 - 2013-09-28 19:55 - 00160106 _____ C:\Windows\system32\perfc015.dat
  306. 2015-11-09 12:02 - 2009-07-14 10:16 - 00748136 _____ C:\Windows\system32\perfh013.dat
  307. 2015-11-09 12:02 - 2009-07-14 10:16 - 00156906 _____ C:\Windows\system32\perfc013.dat
  308. 2015-11-09 12:02 - 2009-07-14 06:13 - 02628426 _____ C:\Windows\system32\PerfStringBackup.INI
  309. 2015-11-09 12:01 - 2015-10-09 15:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
  310. 2015-11-09 11:58 - 2015-07-22 14:52 - 00000000 ____D C:\ProgramData\VMware
  311. 2015-11-09 11:58 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
  312. 2015-11-09 11:57 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\Speech
  313. 2015-11-09 01:01 - 2014-01-12 19:58 - 00000000 ____D C:\Users\mPnR_\AppData\Roaming\TS3Client
  314. 2015-11-08 20:05 - 2015-07-22 15:00 - 00000000 ____D C:\Users\mPnR_\AppData\Roaming\VMware
  315. 2015-11-08 20:05 - 2015-07-22 15:00 - 00000000 ____D C:\Users\mPnR_\AppData\Local\VMware
  316. 2015-11-07 23:30 - 2015-08-11 08:22 - 00001088 _____ C:\Users\mPnR_\Desktop\Crunchyroll.txt
  317. 2015-11-04 19:05 - 2014-05-27 11:05 - 00000000 ____D C:\Users\mPnR_\Desktop\CPA
  318. 2015-11-04 17:28 - 2014-04-14 10:59 - 00002046 ____H C:\Users\mPnR_\Documents\Default.rdp
  319. 2015-11-04 17:18 - 2009-07-14 06:32 - 00000000 ____D C:\Windows\system32\FxsTmp
  320. 2015-10-31 23:02 - 2014-08-31 13:19 - 00000000 ____D C:\Users\mPnR_\PycharmProjects
  321. 2015-10-31 20:06 - 2015-10-06 10:49 - 00001433 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
  322. 2015-10-31 20:06 - 2015-10-06 10:49 - 00001399 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
  323. 2015-10-31 20:06 - 2015-05-28 19:19 - 00001001 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
  324. 2015-10-31 20:06 - 2015-03-15 01:43 - 00001041 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinSCP.lnk
  325. 2015-10-31 20:06 - 2014-10-20 22:56 - 00001913 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LOL Recorder.lnk
  326. 2015-10-31 20:06 - 2014-09-06 19:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
  327. 2015-10-31 20:06 - 2014-08-26 11:55 - 00000692 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pidgin.lnk
  328. 2015-10-31 20:06 - 2014-08-13 19:15 - 00002075 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop Lightroom 5.5 64-bits.lnk
  329. 2015-10-31 20:06 - 2014-07-21 18:32 - 00002040 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wireshark.lnk
  330. 2015-10-31 20:06 - 2014-05-31 00:56 - 00000815 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6 (64 Bit).lnk
  331. 2015-10-31 20:06 - 2014-05-31 00:54 - 00000770 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6.lnk
  332. 2015-10-31 20:06 - 2014-05-31 00:53 - 00000789 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6 (64bit).lnk
  333. 2015-10-31 20:06 - 2014-05-31 00:53 - 00000744 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6.lnk
  334. 2015-10-31 20:06 - 2014-05-31 00:49 - 00001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS6.lnk
  335. 2015-10-31 20:06 - 2014-05-31 00:49 - 00000864 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS6.lnk
  336. 2015-10-31 20:06 - 2014-04-04 18:43 - 00000712 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
  337. 2015-10-31 20:06 - 2014-01-12 04:38 - 00001159 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
  338. 2015-10-31 20:06 - 2013-08-26 01:56 - 00000997 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk
  339. 2015-10-31 20:06 - 2013-06-09 17:23 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
  340. 2015-10-31 20:06 - 2013-06-09 17:23 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
  341. 2015-10-31 20:06 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
  342. 2015-10-31 20:06 - 2009-07-14 06:01 - 00001218 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk
  343. 2015-10-31 20:06 - 2009-07-14 05:57 - 00001523 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
  344. 2015-10-31 20:06 - 2009-07-14 05:57 - 00001304 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
  345. 2015-10-31 20:06 - 2009-07-14 05:57 - 00001246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk
  346. 2015-10-31 20:06 - 2009-07-14 05:54 - 00001210 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
  347. 2015-10-31 20:06 - 2009-07-14 05:49 - 00001246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk
  348. 2015-10-31 20:05 - 2015-06-29 21:20 - 00002062 _____ C:\Users\mPnR_\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OldSchool RuneScape.lnk
  349. 2015-10-31 20:05 - 2015-04-20 13:57 - 00001659 _____ C:\Users\mPnR_\AppData\Roaming\Microsoft\Windows\Start Menu\ICQ.lnk
  350. 2015-10-31 20:05 - 2015-03-25 18:51 - 00002136 _____ C:\Users\mPnR_\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gunz UniverseGamers.lnk
  351. 2015-10-31 20:05 - 2015-01-15 21:19 - 00000901 _____ C:\Users\mPnR_\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileHippo App Manager.lnk
  352. 2015-10-31 20:05 - 2014-12-11 15:15 - 00000945 _____ C:\Users\mPnR_\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\osu!.lnk
  353. 2015-10-31 20:05 - 2014-11-17 22:04 - 00001138 _____ C:\Users\mPnR_\AppData\Roaming\Microsoft\Windows\Start Menu\CABAL Online (NA - Global).lnk
  354. 2015-10-31 20:05 - 2014-05-30 23:14 - 00000000 ___RD C:\Users\mPnR_\Desktop\b
  355. 2015-10-31 20:05 - 2014-05-27 16:31 - 00001790 _____ C:\Users\mPnR_\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
  356. 2015-10-31 20:05 - 2014-01-12 13:26 - 00000000 ____D C:\Users\mPnR_\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
  357. 2015-10-31 20:05 - 2014-01-12 04:35 - 00001451 _____ C:\Users\mPnR_\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
  358. 2015-10-31 20:05 - 2014-01-12 04:35 - 00001417 _____ C:\Users\mPnR_\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
  359. 2015-10-31 18:58 - 2014-04-18 16:18 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
  360. 2015-10-31 15:32 - 2013-09-22 20:35 - 00006102 _____ C:\Windows\Sandboxie.ini
  361. 2015-10-30 06:40 - 2015-10-11 17:36 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
  362. 2015-10-29 21:39 - 2014-08-03 16:53 - 00000000 ____D C:\AdwCleaner
  363. 2015-10-26 15:33 - 2014-08-16 01:24 - 00000000 ____D C:\Program Files\Sublime Text 2
  364. 2015-10-26 11:15 - 2013-10-04 09:53 - 00034720 ____H (LogMeIn, Inc.) C:\Windows\system32\hamachi.sys
  365. 2015-10-24 21:15 - 2014-12-11 15:13 - 00000000 ____D C:\Users\mPnR_\AppData\Local\osu!
  366. 2015-10-23 18:34 - 2015-09-07 15:51 - 00000000 ____D C:\Users\mPnR_\.oracle_jre_usage
  367. 2015-10-23 18:33 - 2015-10-09 15:41 - 00110176 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
  368. 2015-10-19 22:12 - 2014-12-13 18:57 - 00000000 ____D C:\Users\mPnR_\AppData\Roaming\Skype
  369. 2015-10-17 22:21 - 2014-12-14 10:58 - 00000410 __RSH C:\ProgramData\ntuser.pol
  370.  
  371. ==================== Bestanden in de root van sommige mappen =======
  372.  
  373. 2014-01-17 20:01 - 2014-01-17 20:01 - 0111816 _____ (Sandboxie Holdings, LLC) C:\Program Files (x86)\License.exe
  374. 2013-02-24 15:28 - 2013-02-24 15:28 - 0007095 _____ () C:\Program Files (x86)\LICENSE.TXT
  375. 2010-11-01 16:52 - 2010-11-01 16:52 - 0000002 _____ () C:\Program Files (x86)\Manifest0.txt
  376. 2010-11-23 18:15 - 2010-11-23 18:15 - 0000364 _____ () C:\Program Files (x86)\Manifest1.txt
  377. 2010-11-23 22:19 - 2010-11-23 22:19 - 0000092 _____ () C:\Program Files (x86)\Manifest2.txt
  378. 2015-02-07 18:38 - 2015-02-07 18:38 - 0000961 _____ () C:\Program Files (x86)\QuickLaunch.lnk
  379. 2014-01-17 20:01 - 2014-01-17 20:01 - 0015048 _____ (Sandboxie Holdings, LLC) C:\Program Files (x86)\SandboxieBITS.exe
  380. 2014-01-17 20:01 - 2014-01-17 20:01 - 0016584 _____ (Sandboxie Holdings, LLC) C:\Program Files (x86)\SandboxieCrypto.exe
  381. 2014-01-17 20:01 - 2014-01-17 20:01 - 0020680 _____ (Sandboxie Holdings, LLC) C:\Program Files (x86)\SandboxieDcomLaunch.exe
  382. 2014-01-17 20:01 - 2014-01-17 20:01 - 0030408 _____ (Sandboxie Holdings, LLC) C:\Program Files (x86)\SandboxieRpcSs.exe
  383. 2014-01-17 20:01 - 2014-01-17 20:01 - 0017096 _____ (Sandboxie Holdings, LLC) C:\Program Files (x86)\SandboxieWUAU.exe
  384. 2014-01-17 20:01 - 2014-01-17 20:01 - 0759496 _____ (Sandboxie Holdings, LLC) C:\Program Files (x86)\SbieCtrl.exe
  385. 2014-01-17 20:01 - 2014-01-17 20:01 - 0465096 _____ (Sandboxie Holdings, LLC) C:\Program Files (x86)\SbieDll.dll
  386. 2014-01-17 20:01 - 2014-01-17 20:01 - 0202600 _____ (Sandboxie Holdings, LLC) C:\Program Files (x86)\SbieDrv.sys
  387. 2014-01-17 20:01 - 2014-01-17 20:01 - 0017096 _____ (Sandboxie Holdings, LLC) C:\Program Files (x86)\SbieIni.exe
  388. 2014-01-17 20:01 - 2014-01-17 20:01 - 2841288 _____ (Sandboxie Holdings, LLC) C:\Program Files (x86)\SbieMsg.dll
  389. 2014-01-17 20:01 - 2014-01-17 20:01 - 0187592 _____ (Sandboxie Holdings, LLC) C:\Program Files (x86)\SbieSvc.exe
  390. 2014-01-17 20:01 - 2014-01-17 20:01 - 0130760 _____ (Sandboxie Holdings, LLC) C:\Program Files (x86)\Start.exe
  391. 2013-11-27 08:01 - 2013-11-27 08:01 - 0169280 _____ () C:\Program Files (x86)\Templates.ini
  392. 2014-07-26 18:00 - 2014-07-26 18:00 - 0000132 _____ () C:\Users\mPnR_\AppData\Roaming\Adobe GIF Format CS6 Prefs
  393. 2014-01-21 17:51 - 2015-09-25 19:50 - 0000132 _____ () C:\Users\mPnR_\AppData\Roaming\Adobe PNG Format CS6 Prefs
  394. 2014-03-03 15:06 - 2014-03-03 15:40 - 0000132 _____ () C:\Users\mPnR_\AppData\Roaming\Adobe Targa Format CS6 Prefs
  395. 2014-06-23 00:09 - 2014-06-23 00:09 - 0099043 _____ () C:\Users\mPnR_\AppData\Roaming\icarus-dxdiag.xml
  396. 2014-12-07 13:55 - 2014-12-07 13:55 - 0006183 _____ () C:\Users\mPnR_\AppData\Roaming\MmzNb.torrent
  397. 2014-12-07 13:56 - 2014-12-07 13:56 - 0006183 _____ () C:\Users\mPnR_\AppData\Roaming\Pmn.torrent
  398. 2015-04-28 21:44 - 2015-04-28 21:44 - 4464145 _____ () C:\Users\mPnR_\AppData\Roaming\scan.exe
  399. 2015-04-28 21:49 - 2015-08-17 10:22 - 0007107 _____ () C:\Users\mPnR_\AppData\Roaming\sshds.txt
  400. 2014-08-30 08:19 - 2014-08-30 08:20 - 0016384 ___SH () C:\Users\mPnR_\AppData\Roaming\Thumbs.db
  401. 2015-03-15 02:21 - 2015-05-31 11:55 - 0000600 _____ () C:\Users\mPnR_\AppData\Roaming\winscp.rnd
  402. 2014-12-07 14:10 - 2014-12-07 14:10 - 0006183 _____ () C:\Users\mPnR_\AppData\Roaming\WTfTI.torrent
  403. 2015-08-04 03:14 - 2015-08-04 03:14 - 0000152 _____ () C:\Users\mPnR_\AppData\Local\abajfvg.reg
  404. 2014-08-04 10:43 - 2014-08-04 10:54 - 0001456 _____ () C:\Users\mPnR_\AppData\Local\Adobe Save for Web 13.0 Prefs
  405. 2014-11-23 02:59 - 2014-11-23 02:59 - 0024968 _____ () C:\Users\mPnR_\AppData\Local\debuggee.mdmp
  406. 2015-10-04 12:07 - 2015-10-04 12:07 - 0000093 _____ () C:\Users\mPnR_\AppData\Local\fusioncache.dat
  407. 2015-09-14 16:19 - 2015-09-14 16:19 - 0000167 _____ () C:\Users\mPnR_\AppData\Local\ofbtbkyhh.reg
  408. 2014-10-17 16:06 - 2015-09-06 19:17 - 0000600 _____ () C:\Users\mPnR_\AppData\Local\PUTTY.RND
  409. 2015-10-03 14:24 - 2015-10-03 14:24 - 0000218 _____ () C:\Users\mPnR_\AppData\Local\recently-used.xbel
  410. 2014-02-10 20:12 - 2015-08-23 18:06 - 0007624 _____ () C:\Users\mPnR_\AppData\Local\Resmon.ResmonCfg
  411. 2014-07-05 23:19 - 2014-07-05 23:19 - 0000003 _____ () C:\Users\mPnR_\AppData\Local\updater.log
  412. 2014-07-05 23:20 - 2014-07-05 23:20 - 0000436 _____ () C:\Users\mPnR_\AppData\Local\UserProducts.xml
  413. 2015-06-06 21:18 - 2015-06-06 21:18 - 1752377 _____ () C:\ProgramData\Tibia_dat.bak
  414.  
  415. ==================== Bamital & volsnap =================
  416.  
  417. (Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.)
  418.  
  419. C:\Windows\system32\winlogon.exe => Bestand is getekend
  420. C:\Windows\system32\wininit.exe => Bestand is getekend
  421. C:\Windows\SysWOW64\wininit.exe => Bestand is getekend
  422. C:\Windows\explorer.exe => Bestand is getekend
  423. C:\Windows\SysWOW64\explorer.exe => Bestand is getekend
  424. C:\Windows\system32\svchost.exe => Bestand is getekend
  425. C:\Windows\SysWOW64\svchost.exe => Bestand is getekend
  426. C:\Windows\system32\services.exe => Bestand is getekend
  427. C:\Windows\system32\User32.dll => Bestand is getekend
  428. C:\Windows\SysWOW64\User32.dll => Bestand is getekend
  429. C:\Windows\system32\userinit.exe => Bestand is getekend
  430. C:\Windows\SysWOW64\userinit.exe => Bestand is getekend
  431. C:\Windows\system32\rpcss.dll => Bestand is getekend
  432. C:\Windows\system32\dnsapi.dll => Bestand is getekend
  433. C:\Windows\SysWOW64\dnsapi.dll => Bestand is getekend
  434. C:\Windows\system32\Drivers\volsnap.sys => Bestand is getekend
  435.  
  436.  
  437. LastRegBack: 2015-11-10 00:45
  438.  
  439. ==================== Eind van FRST.txt ============================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!