Extra scanresultaten van Farbar Recovery Scan Tool (x64) Versie: 17-04-2017 01 Gestart door Ava (01-02-2020 21:45:38) Gestart vanaf C:\Users\Ava\Downloads Windows 10 Home Versie 1909 (X64) (2020-01-26 20:31:13) Boot Modus: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-2837410931-1932527551-3268655035-500 - Administrator - Disabled) Ava (S-1-5-21-2837410931-1932527551-3268655035-1001 - Administrator - Enabled) => C:\Users\Ava DefaultAccount (S-1-5-21-2837410931-1932527551-3268655035-503 - Limited - Disabled) Gast (S-1-5-21-2837410931-1932527551-3268655035-501 - Limited - Disabled) WDAGUtilityAccount (S-1-5-21-2837410931-1932527551-3268655035-504 - Limited - Disabled) ==================== Security Center ======================== (Als een item is opgenomen in de fixlist, zal het worden verwijderd.) AV: Norton Security (Enabled - Up to date) {A2708B76-6835-6565-CB96-694212954A75} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Norton Security (Enabled - Up to date) {19116A92-4E0F-6AEB-F126-5230691200C8} FW: Norton Security (Enabled) {9A4B0A53-225A-643D-E0C9-C077EC460D0E} ==================== Geïnstalleerde programma's ====================== (Alleen de adware-programma's met 'verborgen' vlag zou kunnen worden toegevoegd aan de fixlist om ze zichtbaar te maken. De adware-programma's moeten handmatig gedeinstallerd worden.) 10 Days To Save the World: The Adventures of Diana Salinger (HKLM-x32\...\BFG-10 Days To Save the World - The Adventures of Diana Salinger) (Version: - ) ActiveCheck component for HP Active Support Library (x32 Version: 3.0.0.3 - Hewlett-Packard) Hidden Adobe Acrobat Reader DC - Nederlands (HKLM-x32\...\{AC76BA86-7AD7-1043-7B44-AC0F074E4100}) (Version: 19.021.20061 - Adobe Systems Incorporated) Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.321 - Adobe) Adobe Shockwave Player 12.3 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.3.4.204 - Adobe Systems, Inc.) Agatha Christie - Peril at End House (x32 Version: 2.2.0.95 - WildTangent) Hidden Amanda Rose: The Game of Time (HKLM-x32\...\BFG-Amanda Rose - The Game of Time) (Version: - ) Amaranthine Voyage: The Burning Sky Survey (HKLM-x32\...\BFG-Amaranthine Voyage - The Burning Sky Survey) (Version: - ) AMD Catalyst Control Center (HKLM-x32\...\WUCCCApp) (Version: 1.00.0000 - AMD) AMD System Monitor (HKLM-x32\...\{C1C82DC9-1547-4038-8F0A-C069F0B7F2ED}) (Version: 1.0.5 - Advanced Micro Devices, Inc.) ATI Catalyst Install Manager (HKLM\...\{942836D4-5395-652B-F1E8-A7C5B039910C}) (Version: 3.0.820.0 - ATI Technologies, Inc.) AuthenTec TrueAPI (Version: 1.2.1.33 - AuthenTec, Inc.) Hidden Avalon Legends Solitaire 2 (HKLM-x32\...\BFG-Avalon Legends Solitaire 2) (Version: - ) AVG Web TuneUp (HKLM-x32\...\AVG Web TuneUp) (Version: 4.3.8.510 - AVG Technologies) Babylon (HKLM-x32\...\Babylon) (Version: - Babylon) Bejeweled 2 Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden Bejeweled 3 (x32 Version: 2.2.0.95 - WildTangent) Hidden Beyond: Star Descendant Collector's Edition (HKLM-x32\...\BFG-Beyond - Star Descendant Collectors Edition) (Version: - ) Beyond: The Fading Signal Collector's Edition (HKLM-x32\...\BFG-Beyond - The Fading Signal Collectors Edition) (Version: - ) Beyond: The Fading Signal Survey (HKLM-x32\...\BFG-Beyond - The Fading Signal Survey) (Version: - ) Big Fish: Game Manager (HKLM-x32\...\BFGC) (Version: 3.3.0.2 - ) Blackhawk Striker 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden Blasterball 3 (x32 Version: 2.2.0.95 - WildTangent) Hidden Bonfire Stories: Heartless (HKLM-x32\...\BFG-Bonfire Stories - Heartless) (Version: - ) Bonfire Stories: The Faceless Gravedigger Survey (HKLM-x32\...\BFG-Bonfire Stories - The Faceless Gravedigger Survey) (Version: - ) Bounce Symphony (x32 Version: 2.2.0.95 - WildTangent) Hidden Brazilian Adventure (HKLM-x32\...\BFG-Brazilian Adventure) (Version: - ) Bridge to Another World: Through the Looking Glass Collector's Edition (HKLM-x32\...\BFG-Bridge to Another World - Through the Looking Glass Collector's Edition) (Version: - ) Build-a-lot 2 (x32 Version: 2.2.0.95 - WildTangent) Hidden Cake Mania (x32 Version: 2.2.0.95 - WildTangent) Hidden Canon MP610 series (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP610_series) (Version: - ) Captain Cooks Casino (HKLM-x32\...\captaincooks) (Version: 16.11.3.5155 - ) Chase for Adventure 3: The Underworld Survey (HKLM-x32\...\BFG-Chase for Adventure 3 - The Underworld Survey) (Version: - ) Chimeras: Heavenfall Secrets (HKLM-x32\...\BFG-Chimeras - Heavenfall Secrets) (Version: - ) Chimeras: Heavenfall Secrets Collector's Edition (HKLM-x32\...\BFG-Chimeras - Heavenfall Secrets Collectors Edition) (Version: - ) Chimeras: Mortal Medicine Collector's Edition (HKLM-x32\...\BFG-Chimeras - Mortal Medicine Collectors Edition) (Version: - ) Chimeras: New Rebellion Collector's Edition (HKLM-x32\...\BFG-Chimeras - New Rebellion Collector's Edition) (Version: - ) Chronicles of Magic: Divided Kingdoms (HKLM-x32\...\BFG-Chronicles of Magic - Divided Kingdoms) (Version: - ) Chuzzle Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden Crossroad Mysteries: The Broken Deal (HKLM-x32\...\BFG-Crossroad Mysteries - The Broken Deal) (Version: - ) Cursed House 6 (HKLM-x32\...\BFG-Cursed House 6) (Version: - ) CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.5.1.3922 - CyberLink Corp.) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden Danse Macabre 9 - A Lover's Pledge Survey (HKLM-x32\...\BFG-Danse Macabre 9 - A Lovers Pledge Survey) (Version: - ) Danse Macabre: Crimson Cabaret Collector's Edition (HKLM-x32\...\BFG-Danse Macabre - Crimson Cabaret Collector's Edition) (Version: - ) Danse Macabre: Thin Ice (HKLM-x32\...\BFG-Danse Macabre - Thin Ice) (Version: - ) Dark Canvas: A Murder Exposed (HKLM-x32\...\BFG-Dark Canvas - A Murder Exposed) (Version: - ) Dark City: London (HKLM-x32\...\BFG-Dark City - London) (Version: - ) Dark City: Munich (HKLM-x32\...\BFG-Dark City - Munich) (Version: - ) Dark City: Munich Collector's Edition (HKLM-x32\...\BFG-Dark City - Munich Collectors Edition) (Version: - ) Dark Parables: The Match Girl's Lost Paradise (HKLM-x32\...\BFG-Dark Parables - The Match Girl's Lost Paradise) (Version: - ) Dark Parables: The Match Girl's Lost Paradise Collector's Edition (HKLM-x32\...\BFG-Dark Parables - The Match Girls Lost Paradise Collectors Edition) (Version: - ) Dark Parables: The Red Riding Hood Sisters Collector's Edition (HKLM-x32\...\BFG-Dark Parables - The Red Riding Hood Sisters Collector's Edition) (Version: - ) Dark Parables: The Swan Princess and The Dire Tree Collector's Edition (HKLM-x32\...\BFG-Dark Parables - The Swan Princess and The Dire Tree Collectors Edition) (Version: - ) Dark Realm: Emperor of Darkness Survey (HKLM-x32\...\BFG-Dark Realm - Emperor of Darkness Survey) (Version: - ) Dark Romance: A Performance to Die For Collector's Edition (HKLM-x32\...\BFG-Dark Romance - A Performance to Die For Collector's Edition) (Version: - ) Dark Romance: Curse of Bluebeard (HKLM-x32\...\BFG-Dark Romance - Curse of Bluebeard) (Version: - ) Dark Romance: Romeo and Juliet Collector's Edition (HKLM-x32\...\BFG-Dark Romance - Romeo and Juliet Collectors Edition) (Version: - ) Dark Tales: Edgar Allan Poe's Speaking with the Dead Survey (HKLM-x32\...\BFG-Dark Tales - Edgar Allan Poes Speaking with the Dead Survey) (Version: - ) Dark Tales: Edgar Allan Poe's The Oval Portrait (HKLM-x32\...\BFG-Dark Tales - Edgar Allan Poes The Oval Portrait) (Version: - ) Darkarta: A Broken Heart's Quest (HKLM-x32\...\BFG-Darkarta - A Broken Hearts Quest) (Version: - ) Darkheart: Flight of the Harpies (HKLM-x32\...\BFG-Darkheart - Flight of the Harpies) (Version: - ) Darkness and Flame: Missing Memories Survey (HKLM-x32\...\BFG-Darkness and Flame - Missing Memories Survey) (Version: - ) Darkness and Flame: The Dark Side (HKLM-x32\...\BFG-Darkness and Flame - The Dark Side) (Version: - ) Dawn of Hope: Frozen Soul (HKLM-x32\...\BFG-Dawn of Hope - Frozen Soul) (Version: - ) Dawn of Hope: The Frozen Soul Survey (HKLM-x32\...\BFG-Dawn of Hope - The Frozen Soul Survey) (Version: - ) Dead Link: Pages Torn (HKLM-x32\...\BFG-Dead Link - Pages Torn) (Version: - ) Demon Hunter 4: Riddles of Light (HKLM-x32\...\BFG-Demon Hunter 4 - Riddles of Light) (Version: - ) Demon Hunter V: Ascendance Collector's Edition (HKLM-x32\...\BFG-Demon Hunter V - Ascendance Collectors Edition) (Version: - ) Detectives United: Origins Collector's Edition (HKLM-x32\...\BFG-Detectives United - Origins Collectors Edition) (Version: - ) Diner Dash 2 Restaurant Rescue (x32 Version: 2.2.0.95 - WildTangent) Hidden Dora's World Adventure (x32 Version: 2.2.0.95 - WildTangent) Hidden Dreadful Tales: The Space Between Collector's Edition (HKLM-x32\...\BFG-Dreadful Tales - The Space Between Collectors Edition) (Version: - ) DriverUpdate (x32 Version: 2.7.0 - Slimware Utilities Holdings, Inc.) Hidden Dropbox (HKLM-x32\...\Dropbox) (Version: 89.4.278 - Dropbox, Inc.) Dropbox Update Helper (x32 Version: 1.3.295.1 - Dropbox, Inc.) Hidden Edge of Reality 3: Fatal Luck Survey (HKLM-x32\...\BFG-Edge of Reality 3 - Fatal Luck Survey) (Version: - ) Edge of Reality: Fatal Luck Collector's Edition (HKLM-x32\...\BFG-Edge of Reality - Fatal Luck Collectors Edition) (Version: - ) Edge of Reality: Hunter's Legacy Collector's Edition (HKLM-x32\...\BFG-Edge of Reality - Hunter's Legacy Collector's Edition) (Version: - ) Elven Legend 6: The Treacherous Trick Survey (HKLM-x32\...\BFG-Elven Legend 6 - The Treacherous Trick Survey) (Version: - ) Empress of the Deep 2: Song of the Blue Whale (HKLM-x32\...\BFG-Empress of the Deep 2 - Song of the Blue Whale) (Version: - ) Enchanted Kingdom: A Dark Seed Collector's Edition (HKLM-x32\...\BFG-Enchanted Kingdom - A Dark Seed Collectors Edition) (Version: - ) Enchanted Kingdom: A Stranger's Venom (HKLM-x32\...\BFG-Enchanted Kingdom - A Strangers Venom) (Version: - ) Enchanted Kingdom: A Stranger's Venom Survey (HKLM-x32\...\BFG-Enchanted Kingdom - A Strangers Venom Survey) (Version: - ) Enchanted Kingdom: The Fiend of Darkness Collector's Edition (HKLM-x32\...\BFG-Enchanted Kingdom - The Fiend of Darkness Collector's Edition) (Version: - ) Endless Fables: Dark Moor (HKLM-x32\...\BFG-Endless Fables - Dark Moor) (Version: - ) Endless Fables: Frozen Path (HKLM-x32\...\BFG-Endless Fables - Frozen Path) (Version: - ) Energy Star Digital Logo (HKLM-x32\...\{BD1A34C9-4764-4F79-AE1F-112F8C89D3D4}) (Version: 1.0.1 - Hewlett-Packard) Enigma Agency: The Case of Shadows (HKLM-x32\...\BFG-Enigma Agency - The Case of Shadows) (Version: - ) ESU for Microsoft Windows 7 (HKLM-x32\...\{3877C901-7B90-4727-A639-B6ED2DD59D43}) (Version: 1.0.0 - Hewlett-Packard) European Mystery: Flowers of Death (HKLM-x32\...\BFG-European Mystery - Flowers of Death) (Version: - ) Eventide 2: Sorcerer's Mirror (HKLM-x32\...\BFG-Eventide 2 - Sorcerers Mirror) (Version: - ) Farm Frenzy (x32 Version: 2.2.0.95 - WildTangent) Hidden FATE - The Traitor Soul (x32 Version: 2.2.0.95 - WildTangent) Hidden Fear for Sale: The 13 Keys Collector's Edition (HKLM-x32\...\BFG-Fear for Sale - The 13 Keys Collectors Edition) (Version: - ) Fear For Sale: The Curse of Whitefall (HKLM-x32\...\BFG-Fear For Sale - The Curse of Whitefall) (Version: - ) Fear For Sale: The Curse of Whitefall Collector's Edition (HKLM-x32\...\BFG-Fear For Sale - The Curse of Whitefall Collector's Edition) (Version: - ) Fear for Sale: The Dusk Wanderer (HKLM-x32\...\BFG-Fear for Sale - The Dusk Wanderer) (Version: - ) Fear for Sale: The Dusk Wanderer Collector's Edition (HKLM-x32\...\BFG-Fear for Sale - The Dusk Wanderer Collectors Edition) (Version: - ) Fear for Sale: The House on Black River (HKLM-x32\...\BFG-Fear for Sale - The House on Black River) (Version: - ) Fear for Sale: The House on Black River Collector's Edition (HKLM-x32\...\BFG-Fear for Sale - The House on Black River Collectors Edition) (Version: - ) Fear for Sale: Tiny Terrors Collector's Edition (HKLM-x32\...\BFG-Fear for Sale - Tiny Terrors Collector's Edition) (Version: - ) Final Drive Nitro (x32 Version: 2.2.0.95 - WildTangent) Hidden Fright Chasers: Soul Reaper Collector's Edition (HKLM-x32\...\BFG-Fright Chasers - Soul Reaper Collector's Edition) (Version: - ) Fright Chasers: Soul Reaper Survey (HKLM-x32\...\BFG-Fright Chasers - Soul Reaper Survey) (Version: - ) Ghost Files: The Face of Guilt (HKLM-x32\...\BFG-Ghost Files - The Face of Guilt) (Version: - ) Glary Utilities 5.136 (HKLM-x32\...\Glary Utilities 5) (Version: 5.136.0.162 - Glarysoft Ltd) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 79.0.3945.130 - Google LLC) Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.) Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.35.421 - Google LLC) Hidden Grim Facade: The Black Cube Collector's Edition (HKLM-x32\...\BFG-Grim Facade - The Black Cube Collectors Edition) (Version: - ) Grim Tales 16: Outcast Survey (HKLM-x32\...\BFG-Grim Tales 16 - Outcast Survey) (Version: - ) Grim Tales: Crimson Hollow (HKLM-x32\...\BFG-Grim Tales - Crimson Hollow) (Version: - ) Grim Tales: The Heir (HKLM-x32\...\BFG-Grim Tales - The Heir) (Version: - ) Grim Tales: The Hunger (HKLM-x32\...\BFG-Grim Tales - The Hunger) (Version: - ) Grim Tales: The Hunger Collector's Edition (HKLM-x32\...\BFG-Grim Tales - The Hunger Collectors Edition) (Version: - ) Grim Tales: The Time Traveler Survey (HKLM-x32\...\BFG-Grim Tales - The Time Traveler Survey) (Version: - ) Grim Tales: The White Lady Collector's Edition (HKLM-x32\...\BFG-Grim Tales - The White Lady Collectors Edition) (Version: - ) Grim Tales: Threads of Destiny (HKLM-x32\...\BFG-Grim Tales - Threads of Destiny) (Version: - ) Halloween Chronicles: Monsters Among Us Collector's Edition (HKLM-x32\...\BFG-Halloween Chronicles - Monsters Among Us Collector's Edition) (Version: - ) Haunted Hotel: Beyond the Page Collector's Edition (HKLM-x32\...\BFG-Haunted Hotel - Beyond the Page Collector's Edition) (Version: - ) Haunted Hotel: Lost Dreams (HKLM-x32\...\BFG-Haunted Hotel - Lost Dreams) (Version: - ) Haunted Legends: Faulty Creatures Survey (HKLM-x32\...\BFG-Haunted Legends - Faulty Creatures Survey) (Version: - ) Haunted Legends: The Black Hawk Collector's Edition (HKLM-x32\...\BFG-Haunted Legends - The Black Hawk Collectors Edition) (Version: - ) Haunted Legends: Twisted Fate Collector's Edition (HKLM-x32\...\BFG-Haunted Legends - Twisted Fate Collector's Edition) (Version: - ) Haunted Manor: Halloween's Uninvited Guest Collector's Edition (HKLM-x32\...\BFG-Haunted Manor - Halloween's Uninvited Guest Collector's Edition) (Version: - ) Haunted Manor: The Last Reunion Collector's Edition (HKLM-x32\...\BFG-Haunted Manor - The Last Reunion Collector's Edition) (Version: - ) Hidden Expedition Amazon (HKLM-x32\...\Denda Games Hidden Expedition Amazon) (Version: 1.0.0.0 - Denda Games) Hidden Expedition: The Altar of Lies Collector's Edition (HKLM-x32\...\BFG-Hidden Expedition - The Altar of Lies Collector's Edition) (Version: - ) Hidden Expedition: The Curse of Mithridates (HKLM-x32\...\BFG-Hidden Expedition - The Curse of Mithridates) (Version: - ) Hidden Expedition: The Pearl of Discord Survey (HKLM-x32\...\BFG-Hidden Expedition - The Pearl of Discord Survey) (Version: - ) Hiddenverse: Rise of Ariadna (HKLM-x32\...\BFG-Hiddenverse - Rise of Ariadna) (Version: - ) Holiday Adventures: Acapulco (HKLM-x32\...\BFG-Holiday Adventures - Acapulco) (Version: - ) HP 3D DriveGuard (HKLM\...\{138BA63B-6335-49F1-986A-8360A483C49A}) (Version: 4.1.5.1 - Hewlett-Packard Company) HP Connection Manager (HKLM-x32\...\{795AADBF-58C2-42D0-B779-E730702A247E}) (Version: 4.0.45.1 - Hewlett-Packard Company) HP Documentation (HKLM-x32\...\{C1C43BC8-2460-4E01-9628-332E04523BDC}) (Version: 1.2.0.0 - Hewlett-Packard) HP Dropbox Plugin (HKLM-x32\...\{B9AD4462-8F25-44B5-B426-ED0C40582B88}) (Version: 36.0.102.68541 - HP) HP DVB-T TV Tuner 8.0.64.43 (HKLM-x32\...\HP DVB-T TV Tuner) (Version: 8.0.64.43 - ) HP EmailSMTP Plugin (HKLM-x32\...\{5B99CA3E-D0FA-452E-B371-3E2B4789B2BA}) (Version: 43.0.0.0 - HP) HP ENVY Photo 6200 series Basissoftware van het apparaat (HKLM\...\{780AB66A-169C-4AF6-B2C6-18444B761861}) (Version: 44.3.2218.18109 - HP Inc.) HP ENVY Photo 6200 series Help (HKLM-x32\...\{DE98B02F-7243-4652-9324-6EA5008165A3}) (Version: 44.0.0 - HP) HP FTP Plugin (HKLM-x32\...\{C18A0453-4F87-454D-8BDF-6290E35A3E0D}) (Version: 43.0.0.0 - HP) HP Games (HKLM-x32\...\WildTangent hp Master Uninstall) (Version: 1.0.2.4 - WildTangent) HP Google Drive Plugin (HKLM-x32\...\{C8B2435D-7F8D-4DEA-8A69-4F6D7CFB5662}) (Version: 36.0.102.68541 - HP) HP On Screen Display (HKLM-x32\...\{9B9B8EE4-2EDB-41C2-AF2E-63E75D37CDDF}) (Version: 1.1.2 - Hewlett-Packard Company) HP OneDrive Plugin (HKLM-x32\...\{7363043F-3632-4F95-86AE-94F9D2E4999D}) (Version: 36.0.0.0 - HP) HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.9572 - HP) HP Power Manager (HKLM-x32\...\{872B1C80-38EC-4A31-A25C-980820593900}) (Version: 1.2.3 - Hewlett-Packard Company) HP Quick Launch (HKLM-x32\...\{285F722C-0E45-47DE-B38E-5B3B10FA4A7C}) (Version: 2.5.2 - Hewlett-Packard Company) HP Setup (HKLM-x32\...\{210A03F5-B2ED-4947-B27E-516F50CBB292}) (Version: 8.6.4530.3651 - Hewlett-Packard Company) HP Setup Manager (HKLM-x32\...\{AE856388-AFAD-4753-81DF-D96B19D0A17C}) (Version: 1.1.13253.3682 - Hewlett-Packard Company) HP SharePoint Plugin (HKLM-x32\...\{F5232224-B751-47CA-9E21-DD3773C6B913}) (Version: 43.0.0.0 - HP) HP SimplePass 2011 (HKLM-x32\...\{BCFAA37D-A6DB-43BF-A351-43F183E52D07}) (Version: 5.1.0.495 - Hewlett-Packard) HP Software Framework (HKLM-x32\...\{F10EED3C-A1D4-4F2E-AEA7-FA901C0A2396}) (Version: 4.1.13.1 - Hewlett-Packard Company) HPAsset component for HP Active Support Library (x32 Version: 3.0.2.2 - Hewlett-Packard) Hidden IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6329.0 - IDT) Immortal Love: Kiss of the Night (HKLM-x32\...\BFG-Immortal Love - Kiss of the Night) (Version: - ) Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Kingmaker: Rise to the Throne (HKLM-x32\...\BFG-Kingmaker - Rise to the Throne) (Version: - ) Kingmaker: Rise to the Throne Collector's Edition (HKLM-x32\...\BFG-Kingmaker - Rise to the Throne Collectors Edition) (Version: - ) Labyrinths of the World: When Worlds Collide Survey (HKLM-x32\...\BFG-Labyrinths of the World - When Worlds Collide Survey) (Version: - ) League of Light: Growing Threat Survey (HKLM-x32\...\BFG-League of Light - Growing Threat Survey) (Version: - ) League of Light: The Game Collector's Edition (HKLM-x32\...\BFG-League of Light - The Game Collector's Edition) (Version: - ) Legacy: Witch Island (HKLM-x32\...\BFG-Legacy - Witch Island) (Version: - ) Living Legends: Fallen Sky Collector's Edition (HKLM-x32\...\BFG-Living Legends - Fallen Sky Collectors Edition) (Version: - ) Lost Grimoires 2: Shard of Mystery Collector's Edition (HKLM-x32\...\BFG-Lost Grimoires 2 - Shard of Mystery Collectors Edition) (Version: - ) Lost Grimoires 3: The Forgotten Well (HKLM-x32\...\BFG-Lost Grimoires 3 - The Forgotten Well) (Version: - ) Lost Grimoires: Stolen Kingdom (HKLM-x32\...\BFG-Lost Grimoires - Stolen Kingdom) (Version: - ) Lost Lands: Dark Overlord (HKLM-x32\...\BFG-Lost Lands - Dark Overlord) (Version: - ) Lost Lands: Ice Spell (HKLM-x32\...\BFG-Lost Lands - Ice Spell) (Version: - ) Lost Lands: Mistakes of the Past (HKLM-x32\...\BFG-Lost Lands - Mistakes of the Past) (Version: - ) Lost Lands: Mistakes of the Past Collector's Edition (HKLM-x32\...\BFG-Lost Lands - Mistakes of the Past Collectors Edition) (Version: - ) Lost Lands: Mistakes of the Past Survey (HKLM-x32\...\BFG-Lost Lands - Mistakes of the Past Survey) (Version: - ) Lost Lands: The Four Horsemen (HKLM-x32\...\BFG-Lost Lands - The Four Horsemen) (Version: - ) Lost Lands: The Golden Curse (HKLM-x32\...\BFG-Lost Lands - The Golden Curse) (Version: - ) Lost Lands: The Wanderer (HKLM-x32\...\BFG-Lost Lands - The Wanderer) (Version: - ) Love Chronicles: Death's Embrace (HKLM-x32\...\BFG-Love Chronicles - Deaths Embrace) (Version: - ) Mah Jong Medley (x32 Version: 2.2.0.95 - WildTangent) Hidden Maze: Stolen Minds Collector's Edition (HKLM-x32\...\BFG-Maze - Stolen Minds Collector's Edition) (Version: - ) Maze: The Broken Tower (HKLM-x32\...\BFG-Maze - The Broken Tower) (Version: - ) McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.57 - McAfee, LLC.) Meadow Story Survey (HKLM-x32\...\BFG-Meadow Story Survey) (Version: - ) Medium Detective: Fright from the Past Survey (HKLM-x32\...\BFG-Medium Detective - Fright from the Past Survey) (Version: - ) Memoirs of Murder: Resorting to Revenge Survey (HKLM-x32\...\BFG-Memoirs of Murder - Resorting to Revenge Survey) (Version: - ) Memoirs of Murder: Welcome to Hidden Pines Collector's Edition (HKLM-x32\...\BFG-Memoirs of Murder - Welcome to Hidden Pines Collector's Edition) (Version: - ) Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Excel Viewer (HKLM-x32\...\{95120000-003F-0413-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Klik-en-Klaar 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Starter 2010 - Nederlands (HKLM-x32\...\{90140011-0066-0413-0000-0000000FF1CE}) (Version: 14.0.5128.5002 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-2837410931-1932527551-3268655035-1001\...\OneDriveSetup.exe) (Version: 19.222.1110.0006 - Microsoft Corporation) Microsoft PowerPoint Viewer (HKLM-x32\...\{95140000-00AF-0413-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation) Microsoft Works 7.0 (HKLM-x32\...\{A29D0501-02A2-48DD-BC1B-09B27406FE9B}) (Version: 07.02.0000 - Microsoft Corporation) Midnight Calling: Arabella (HKLM-x32\...\BFG-Midnight Calling - Arabella) (Version: - ) Midnight Calling: Arabella Collector's Edition (HKLM-x32\...\BFG-Midnight Calling - Arabella Collector's Edition) (Version: - ) Midnight Calling: Valeria Collector's Edition (HKLM-x32\...\BFG-Midnight Calling - Valeria Collector's Edition) (Version: - ) Midnight Castle (HKLM-x32\...\BFG-Midnight Castle) (Version: - ) MiniTool Partition Wizard Free 11 (HKLM\...\{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1) (Version: - MiniTool Software Limited) Modern Tales: Age of Invention (HKLM-x32\...\BFG-Modern Tales - Age of Invention) (Version: - ) Mozilla Firefox 72.0.2 (x64 nl) (HKLM\...\Mozilla Firefox 72.0.2 (x64 nl)) (Version: 72.0.2 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 72.0.2.7321 - Mozilla) Mystery Case Files: The Black Veil (HKLM-x32\...\BFG-Mystery Case Files - The Black Veil) (Version: - ) Mystery Case Files: The Countess Collector's Edition (HKLM-x32\...\BFG-Mystery Case Files - The Countess Collector's Edition) (Version: - ) Mystery Case Files: The Countess Survey (HKLM-x32\...\BFG-Mystery Case Files - The Countess Survey) (Version: - ) Mystery P.I. - Stolen in San Francisco (x32 Version: 2.2.0.95 - WildTangent) Hidden Mystery Tales: Eye of the Fire (HKLM-x32\...\BFG-Mystery Tales - Eye of the Fire) (Version: - ) Mystery Tales: Her Own Eyes (HKLM-x32\...\BFG-Mystery Tales - Her Own Eyes) (Version: - ) Mystery Tales: The Hangman Returns Survey (HKLM-x32\...\BFG-Mystery Tales - The Hangman Returns Survey) (Version: - ) Mystery Tales: The House of Others (HKLM-x32\...\BFG-Mystery Tales - The House of Others) (Version: - ) Mystery Tales: The Reel Horror Collector's Edition (HKLM-x32\...\BFG-Mystery Tales - The Reel Horror Collectors Edition) (Version: - ) Mystery Trackers: Darkwater Bay (HKLM-x32\...\BFG-Mystery Trackers - Darkwater Bay) (Version: - ) Mystery Trackers: Darkwater Bay Collector's Edition (HKLM-x32\...\BFG-Mystery Trackers - Darkwater Bay Collectors Edition) (Version: - ) Mystery Trackers: Queen of Hearts Collector's Edition (HKLM-x32\...\BFG-Mystery Trackers - Queen of Hearts Collectors Edition) (Version: - ) Myths of the World: Fire from the Deep Collector's Edition (HKLM-x32\...\BFG-Myths of the World - Fire from the Deep Collectors Edition) (Version: - ) Myths of the World: Fire of Olympus (HKLM-x32\...\BFG-Myths of the World - Fire of Olympus) (Version: - ) Myths of the World: Fire of Olympus Survey (HKLM-x32\...\BFG-Myths of the World - Fire of Olympus Survey) (Version: - ) Myths of the World: The Black Sun Collector's Edition (HKLM-x32\...\BFG-Myths of the World - The Black Sun Collectors Edition) (Version: - ) Namco All-Stars PAC-MAN (x32 Version: 2.2.0.95 - WildTangent) Hidden Nancy Drew: Labyrinth of Lies (HKLM-x32\...\BFG-Nancy Drew - Labyrinth of Lies) (Version: - ) Norton Security (HKLM-x32\...\NGC) (Version: 22.19.9.63 - Symantec Corporation) Ominous Objects: Trail of Time (HKLM-x32\...\BFG-Ominous Objects - Trail of Time) (Version: - ) Paranormal Files: Fellow Traveler (HKLM-x32\...\BFG-Paranormal Files - Fellow Traveler) (Version: - ) Paranormal Files: The Tall Man Collector's Edition (HKLM-x32\...\BFG-Paranormal Files - The Tall Man Collectors Edition) (Version: - ) Path of Sin: Greed Collector's Edition (HKLM-x32\...\BFG-Path of Sin - Greed Collector's Edition) (Version: - ) Penguins! (x32 Version: 2.2.0.95 - WildTangent) Hidden Persian Nights: Sands of Wonders (HKLM-x32\...\BFG-Persian Nights - Sands of Wonders) (Version: - ) Phantasmat: Behind the Mask (HKLM-x32\...\BFG-Phantasmat - Behind the Mask) (Version: - ) Phantasmat: Curse of the Mist Survey (HKLM-x32\...\BFG-Phantasmat - Curse of the Mist Survey) (Version: - ) Phantasmat: Death in Hardcover Collector's Edition (HKLM-x32\...\BFG-Phantasmat - Death in Hardcover Collector's Edition) (Version: - ) Phantasmat: Déjà Vu Collector's Edition (HKLM-x32\...\BFG-Phantasmat - Deja Vu Collector's Edition) (Version: - ) Plants vs. Zombies - Game of the Year (x32 Version: 2.2.0.95 - WildTangent) Hidden Plarium Play (HKU\S-1-5-21-2837410931-1932527551-3268655035-1001\...\{2d6e3866-c8da-43f4-a997-807dbabcac57}) (Version: 2.1.0.0 - Plarium) Plarium Play (x32 Version: 2.1.1.0 - Plarium) Hidden Poker Superstars III (x32 Version: 2.2.0.95 - WildTangent) Hidden Polar Bowler (x32 Version: 2.2.0.95 - WildTangent) Hidden Polar Golfer (x32 Version: 2.2.0.95 - WildTangent) Hidden Productverbeteringsonderzoek voor HP ENVY Photo 6200 series (HKLM\...\{68B0DC6A-5C8F-4334-8D71-CF2B9D89DD01}) (Version: 44.3.2218.18109 - HP Inc.) Punished Talents: Dark Knowledge Collector's Edition (HKLM-x32\...\BFG-Punished Talents - Dark Knowledge Collector's Edition) (Version: - ) PuppetShow: Bloody Rosie Collector's Edition (HKLM-x32\...\BFG-PuppetShow - Bloody Rosie Collectors Edition) (Version: - ) PuppetShow: Poetic Justice Survey (HKLM-x32\...\BFG-PuppetShow - Poetic Justice Survey) (Version: - ) PuppetShow: The Curse of Ophelia Survey (HKLM-x32\...\BFG-PuppetShow - The Curse of Ophelia Survey) (Version: - ) Queen's Quest 5: Symphony of Death Survey (HKLM-x32\...\BFG-Queens Quest 5 - Symphony of Death Survey) (Version: - ) Queen's Quest III: End of Dawn (HKLM-x32\...\BFG-Queens Quest III - End of Dawn) (Version: - ) Queen's Quest IV: Sacred Truce (HKLM-x32\...\BFG-Queens Quest IV - Sacred Truce) (Version: - ) Queen's Quest IV: Sacred Truce Collector's Edition (HKLM-x32\...\BFG-Queens Quest IV - Sacred Truce Collectors Edition) (Version: - ) Ralink RT5390 802.11b/g/n WiFi Adapter (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309B0}) (Version: 3.02.02.0 - Ralink) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.41.216.2011 - Realtek) Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.1.7600.80 - Realtek Semiconductor Corp.) Recovery Manager (x32 Version: 2.0.0 - Hewlett-Packard) Hidden Redemption Cemetery 9: Night Terrors Survey (HKLM-x32\...\BFG-Redemption Cemetery 9 - Night Terrors Survey) (Version: - ) Redemption Cemetery: Day of the Almost Dead Collector's Edition (HKLM-x32\...\BFG-Redemption Cemetery - Day of the Almost Dead Collector's Edition) (Version: - ) Redemption Cemetery: The Cursed Mark Survey (HKLM-x32\...\BFG-Redemption Cemetery - The Cursed Mark Survey) (Version: - ) Reflections of Life: Equilibrium (HKLM-x32\...\BFG-Reflections of Life - Equilibrium) (Version: - ) Reflections of Life: In Screams and Sorrow (HKLM-x32\...\BFG-Reflections of Life - In Screams and Sorrow) (Version: - ) Reflections of Life: In Screams and Sorrow Collector's Edition (HKLM-x32\...\BFG-Reflections of Life - In Screams and Sorrow Collectors Edition) (Version: - ) Rite of Passage: Deck of Fates (HKLM-x32\...\BFG-Rite of Passage - Deck of Fates) (Version: - ) Rite of Passage: Hackamore Bluff (HKLM-x32\...\BFG-Rite of Passage - Hackamore Bluff) (Version: - ) Rite of Passage: Hackamore Bluff Collector's Edition (HKLM-x32\...\BFG-Rite of Passage - Hackamore Bluff Collectors Edition) (Version: - ) Royal Detective: Borrowed Life Collector's Edition (HKLM-x32\...\BFG-Royal Detective - Borrowed Life Collector's Edition) (Version: - ) Saga of the Nine Worlds: The Hunt Collector's Edition (HKLM-x32\...\BFG-Saga of the Nine Worlds - The Hunt Collectors Edition) (Version: - ) Sea Legends: Phantasmal Light Collector's Edition (HKLM-x32\...\BFG-Sea Legends - Phantasmal Light Collector's Edition) (Version: - ) Secret City: London Calling Collector's Edition (HKLM-x32\...\BFG-Secret City - London Calling Collector's Edition) (Version: - ) Secret City: The Sunken Kingdom Survey (HKLM-x32\...\BFG-Secret City - The Sunken Kingdom Survey) (Version: - ) Secrets of Great Queens: Regicide Collector's Edition (HKLM-x32\...\BFG-Secrets of Great Queens - Regicide Collectors Edition) (Version: - ) Skype™ 6.11 (HKLM-x32\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.) Slingo Supreme (x32 Version: 2.2.0.95 - WildTangent) Hidden Snow White Solitaire: Legacy of Dwarves (HKLM-x32\...\BFG-Snow White Solitaire - Legacy of Dwarves) (Version: - ) Spirit Legends: The Forest Wraith Collector's Edition (HKLM-x32\...\BFG-Spirit Legends - The Forest Wraith Collector's Edition) (Version: - ) Spirit of Revenge: Unrecognized Master (HKLM-x32\...\BFG-Spirit of Revenge - Unrecognized Master) (Version: - ) Spirit Seasons: Little Ghost Story (HKLM-x32\...\BFG-Spirit Seasons - Little Ghost Story) (Version: - ) Spirits of Mystery: Illusions (HKLM-x32\...\BFG-Spirits of Mystery - Illusions) (Version: - ) Spirits of Mystery: The Last Fire Queen (HKLM-x32\...\BFG-Spirits of Mystery - The Last Fire Queen) (Version: - ) Spirits of Mystery: Whisper of the Past Collector's Edition (HKLM-x32\...\BFG-Spirits of Mystery - Whisper of the Past Collectors Edition) (Version: - ) Stranded Dreamscapes: Deadly Moonlight (HKLM-x32\...\BFG-Stranded Dreamscapes - Deadly Moonlight) (Version: - ) Stranded Dreamscapes: The Doppelganger (HKLM-x32\...\BFG-Stranded Dreamscapes - The Doppelganger) (Version: - ) swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden Synaptics TouchPad Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.12.98 - Synaptics Incorporated) Tales of Lagoona 3: Frauds, Forgeries, and Fishsticks (HKLM-x32\...\BFG-Tales of Lagoona 3 - Frauds, Forgeries, and Fishsticks) (Version: - ) Tales of Terror: Art of Horror Collector's Edition (HKLM-x32\...\BFG-Tales of Terror - Art of Horror Collector's Edition) (Version: - ) Tales of Terror: Art of Horror Survey (HKLM-x32\...\BFG-Tales of Terror - Art of Horror Survey) (Version: - ) Tales of Terror: The Fog of Madness Collector's Edition (HKLM-x32\...\BFG-Tales of Terror - The Fog of Madness Collectors Edition) (Version: - ) The Andersen Accounts: The Price of a Life Survey (HKLM-x32\...\BFG-The Andersen Accounts - The Price of a Life Survey) (Version: - ) The Christmas Spirit: Mother Goose's Untold Tales Survey (HKLM-x32\...\BFG-The Christmas Spirit - Mother Gooses Untold Tales Survey) (Version: - ) The Forgotten Fairy Tales: Canvases of Time (HKLM-x32\...\BFG-The Forgotten Fairy Tales - Canvases of Time) (Version: - ) The Keeper of Antiques: Shadows From the Past Collector's Edition (HKLM-x32\...\BFG-The Keeper of Antiques - Shadows From the Past Collectors Edition) (Version: - ) The Legacy: Prisoner Survey (HKLM-x32\...\BFG-The Legacy - Prisoner Survey) (Version: - ) The Legacy: The Tree of Might (HKLM-x32\...\BFG-The Legacy - The Tree of Might) (Version: - ) The Legacy: The Tree of Might Collector's Edition (HKLM-x32\...\BFG-The Legacy - The Tree of Might Collectors Edition) (Version: - ) The Myth Seekers: The Sunken City Survey (HKLM-x32\...\BFG-The Myth Seekers - The Sunken City Survey) (Version: - ) The Secret Order 8: Return to the Buried Kingdom Survey (HKLM-x32\...\BFG-The Secret Order 8 - Return to the Buried Kingdom Survey) (Version: - ) The Secret Order: Bloodline Collector's Edition (HKLM-x32\...\BFG-The Secret Order - Bloodline Collector's Edition) (Version: - ) The Stone Queen: Mosaic Magic (HKLM-x32\...\BFG-The Stone Queen - Mosaic Magic) (Version: - ) The Unseen Fears: Body Thief (HKLM-x32\...\BFG-The Unseen Fears - Body Thief) (Version: - ) The Unseen Fears: Body Thief Collector's Edition (HKLM-x32\...\BFG-The Unseen Fears - Body Thief Collector's Edition) (Version: - ) The Unseen Fears: Outlive Survey (HKLM-x32\...\BFG-The Unseen Fears - Outlive Survey) (Version: - ) Unsolved Mystery Club®: Ancient Astronauts® Collector's Edition (HKLM-x32\...\BFG-Unsolved Mystery Club - Ancient Astronauts Collector's Edition) (Version: - ) Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden Vacation Adventures: Park Ranger 3 (HKLM-x32\...\BFG-Vacation Adventures - Park Ranger 3) (Version: - ) Validity WBF DDK (HKLM\...\{79174AF2-6CB1-42F5-981E-66DCA49391D0}) (Version: 4.3.205.0 - Validity Sensors, Inc.) Vermillion Watch: Fleshbound (HKLM-x32\...\BFG-Vermillion Watch - Fleshbound) (Version: - ) Vermillion Watch: London Howling (HKLM-x32\...\BFG-Vermillion Watch - London Howling) (Version: - ) Viking Chronicles: Tale of the Lost Queen Survey (HKLM-x32\...\BFG-Viking Chronicles - Tale of the Lost Queen Survey) (Version: - ) Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.95 - WildTangent) Hidden Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies) Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) Whispered Secrets: Enfant Terrible Collector's Edition (HKLM-x32\...\BFG-Whispered Secrets - Enfant Terrible Collectors Edition) (Version: - ) Whispered Secrets: Enfant Terrible Survey (HKLM-x32\...\BFG-Whispered Secrets - Enfant Terrible Survey) (Version: - ) Whispered Secrets: Golden Silence (HKLM-x32\...\BFG-Whispered Secrets - Golden Silence) (Version: - ) Whispered Secrets: Song of Sorrow Collector's Edition (HKLM-x32\...\BFG-Whispered Secrets - Song of Sorrow Collectors Edition) (Version: - ) WildTangent Games App (HP Games) (x32 Version: 4.0.5.2 - WildTangent) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3508.1109 - Microsoft Corporation) Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (HKLM-x32\...\{C32CE55C-12BA-4951-8797-0967FDEF556F}) (Version: 15.4.5722.2 - Microsoft Corporation) Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation) Witches Legacy 12 - Secret Enemy Survey (HKLM-x32\...\BFG-Witches Legacy 12 - Secret Enemy Survey) (Version: - ) Witches' Legacy: Hunter and the Hunted Collector's Edition (HKLM-x32\...\BFG-Witches Legacy - Hunter and the Hunted Collectors Edition) (Version: - ) Witches' Legacy: Secret Enemy (HKLM-x32\...\BFG-Witches' Legacy - Secret Enemy) (Version: - ) Witches' Legacy: Secret Enemy Collector's Edition (HKLM-x32\...\BFG-Witches Legacy - Secret Enemy Collectors Edition) (Version: - ) Witches' Legacy: The City That Isn't There Collector's Edition (HKLM-x32\...\BFG-Witches Legacy - The City That Isnt There Collectors Edition) (Version: - ) WMV9/VC-1 Video Playback (Version: 1.00.0000 - ATI Technologies Inc.) Hidden Yuletide Legends: Frozen Hearts (HKLM-x32\...\BFG-Yuletide Legends - Frozen Hearts) (Version: - ) Yuletide Legends: The Brothers Claus Collector's Edition (HKLM-x32\...\BFG-Yuletide Legends - The Brothers Claus Collectors Edition) (Version: - ) Yuletide Legends: Who Framed Santa Claus (HKLM-x32\...\BFG-Yuletide Legends - Who Framed Santa Claus) (Version: - ) Zuma Deluxe (x32 Version: 2.2.0.95 - WildTangent) Hidden ==================== Aangepaste CLSID (gefilterd): ========================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) CustomCLSID: HKU\S-1-5-21-2837410931-1932527551-3268655035-1001_Classes\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\InprocServer32 -> C:\Users\Ava\AppData\Local\Microsoft\OneDrive\19.222.1110.0006\amd64\FileCoAuthLib64.dll (Microsoft Corporation) ==================== Geplande Taken (gefilterd) ============= (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) Task: {00120970-38B5-440F-BC3D-C0CD09B35C57} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => %SystemRoot%\ehome\ehPrivJob.exe Task: {02ACAF77-5BD5-4C73-8A4C-F21540BF38E0} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => %SystemRoot%\ehome\ehPrivJob.exe Task: {083F3813-82BC-4622-A1B0-070C619B7D11} - System32\Tasks\Microsoft\Windows\Diagnosis\RecommendedTroubleshootingScanner => C:\WINDOWS\system32\mitigationscanner.exe [2019-03-19] (Microsoft Corporation) Task: {0A4F2A9C-72DD-4D5A-A7B1-4A0E917D58A6} - System32\Tasks\Microsoft\Windows\BrokerInfrastructure\BgTaskRegistrationMaintenanceTask Task: {0D882962-F2EB-434C-8BA8-52B5C9AB86DB} - System32\Tasks\Microsoft\Windows\End Of Support\Notify1 => %windir%\system32\sipnotify.exe Task: {0EBDC8AE-55A1-4326-AFA5-C32C90C4FBB6} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => %SystemRoot%\ehome\mcupdate.exe Task: {105D676A-D551-4274-81E7-97AC52E4FD87} - System32\Tasks\Microsoft\Windows\Speech\HeadsetButtonPress => C:\WINDOWS\system32\speech_onecore\common\SpeechRuntime.exe [2020-01-09] (Microsoft Corporation) Task: {12B77A7C-1DDB-48D8-9A89-E91548474357} - System32\Tasks\Microsoft\Windows\USB\Usb-Notifications Task: {13B7C4EB-34C9-43A1-86FF-B08FF665F7A8} - System32\Tasks\HPCustParticipation HP ENVY Photo 6200 series => C:\Program Files\HP\HP ENVY Photo 6200 series\Bin\HPCustPartic.exe [2018-04-19] (HP Inc.) Task: {19096475-8815-4B4E-8CE9-35C68EECE6B5} - System32\Tasks\Microsoft\Windows\Subscription\EnableLicenseAcquisition => C:\WINDOWS\system32\ClipRenew.exe [2019-03-19] (Microsoft Corporation) Task: {191384C9-85A1-4EB2-81D4-48F5A0C6ACB7} - System32\Tasks\Microsoft\Windows\UNP\RunUpdateNotificationMgr => C:\WINDOWS\System32\UNP\UpdateNotificationMgr.exe [2020-01-09] (Microsoft Corporation) Task: {21A05EAD-3D72-49E3-BE98-FAE516BE9A3B} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => %SystemRoot%\ehome\mcupdate.exe Task: {2415C725-F6E2-45EE-A478-0AAB8A7D5790} - System32\Tasks\Java Platform SE Auto Updater => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe Task: {28B254B6-354A-46C7-B79A-5FAEEE567C70} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => %SystemRoot%\ehome\ehPrivJob.exe Task: {2A22EB55-B855-40F2-A4C7-B53AFD11843F} - System32\Tasks\HPCeeScheduleForAVA-HP$ => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13] (Hewlett-Packard) Task: {315508E6-B3FB-4FA4-AD63-21AE384BEB4A} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => %SystemRoot%\ehome\ehPrivJob.exe Task: {33C0419C-B8A7-4713-9754-5514C5307422} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2011-02-23] (Hewlett-Packard Company) Task: {3503F643-B9F2-4B98-8082-1E70CE5A882F} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => %SystemRoot%\ehome\ehPrivJob.exe Task: {362EE706-83AA-4341-9A1B-CBA403CA13F3} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2020-01-22] (Adobe) Task: {364CD3F5-A877-44D7-A002-818BA3BFE417} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => %SystemRoot%\ehome\ehPrivJob.exe Task: {37246C32-BF69-4E38-86F2-74C8275D20DF} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => %SystemRoot%\ehome\ehPrivJob.exe Task: {37B1902B-E32C-4A1D-A2E5-AF30343B9237} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => %SystemRoot%\ehome\ehPrivJob.exe Task: {3B6D9A66-4946-4A8E-A79F-FE54FE3E096E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-12-30] (Google Inc.) Task: {3B9198B0-32EF-4A64-A210-6374C6CC76AB} - System32\Tasks\Norton Security\Norton Security Error Processor => C:\Program Files\Norton Security\Engine\22.19.9.63\SymErr.exe [2019-11-16] (Symantec Corporation) Task: {3D8E83D8-967E-44AC-8896-42CDEC763404} - System32\Tasks\Microsoft\Windows\InstallService\ScanForUpdatesAsUser Task: {3E7650E7-DBA3-4B90-8D84-4232AE8A029F} - System32\Tasks\Microsoft\Windows\ExploitGuard\ExploitGuard MDM policy Refresh Task: {3EBAF09A-814C-4FB9-9F00-8BB931BFE845} - System32\Tasks\Microsoft\Windows\Chkdsk\SyspartRepair => C:\WINDOWS\system32\bcdboot.exe [2019-03-19] (Microsoft Corporation) Task: {40378C7B-CE71-41E6-9B6F-EDE9D47789DE} - System32\Tasks\Microsoft\Windows\BitLocker\BitLocker MDM policy Refresh Task: {416FBFEF-09C2-4D51-9358-72205B2F5ED3} - System32\Tasks\Microsoft\Windows\BitLocker\BitLocker Encrypt All Drives Task: {46CAE052-D8A3-4854-BA8E-C83CD0404F39} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => %SystemRoot%\ehome\ehPrivJob.exe Task: {47B89A79-53D2-485E-AD87-148165B28519} - System32\Tasks\Microsoft\Windows\PushToInstall\Registration => Sc.exe start pushtoinstall registration Task: {48F207D2-23BE-4F26-A115-B05B486F6CA6} - System32\Tasks\Microsoft\Windows\InstallService\WakeUpAndScanForUpdates Task: {4A61BCE1-02FC-4F8D-AD7D-06CC80F2C130} - System32\Tasks\Microsoft\Windows\EDP\StorageCardEncryption Task Task: {4BB750FA-226C-4E88-AF0D-8D38FAF82041} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => %SystemRoot%\ehome\ehrec.exe Task: {4D4ED294-3946-4651-87BF-22BEF10CFD0D} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => %SystemRoot%\ehome\ehPrivJob.exe Task: {4DDF305C-E963-45BE-A8F0-DB2A76C9E03C} - System32\Tasks\Microsoft\Windows\EDP\EDP Inaccessible Credentials Task Task: {5158363F-961B-4753-925B-F0AA416F3629} - System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe Task: {52C599FC-CBD2-4420-9E15-E62AA3E4E47A} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2018-04-22] (Dropbox, Inc.) Task: {55412461-F053-4583-A6BF-19F36DAAD46D} - System32\Tasks\Microsoft\Windows\InstallService\ScanForUpdates Task: {5738BE34-7CDB-4ED2-89A9-447D9A40581D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPSAObjUtilTask => C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\UtilTask.exe [2018-07-03] (Microsoft) Task: {5FA46B85-E2E1-48D9-8565-AE57A641D986} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Security\Upgrade.exe [2019-11-16] (Symantec Corporation) Task: {613A083C-17CD-47F4-AC35-96FC308E59CF} - System32\Tasks\Microsoft\Windows\Workplace Join\Device-Sync Task: {62CCB6F7-428B-490F-A340-D1349BDA6668} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => %SystemRoot%\ehome\ehPrivJob.exe Task: {64E2A564-88FD-4FE9-B058-BC02D3072312} - System32\Tasks\Microsoft\Windows\DirectX\DirectXDatabaseUpdater => C:\WINDOWS\system32\directxdatabaseupdater.exe [2020-01-09] (Microsoft Corporation) Task: {666A3C19-1003-45DE-BDFE-04D463FDBF28} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => %SystemRoot%\ehome\mcupdate.exe Task: {66FB0DD2-0EEB-4917-99DF-1670C8C491AB} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => %SystemRoot%\ehome\mcupdate.exe Task: {68560DFD-FC67-4EF8-BAA4-7F72211F3FD5} - System32\Tasks\Microsoft\Windows\DirectX\DXGIAdapterCache => C:\WINDOWS\system32\dxgiadaptercache.exe [2020-01-09] (Microsoft Corporation) Task: {6C40F877-0AC4-40B8-BF18-89CE1BFA5DEF} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_321_Plugin.exe [2020-01-22] (Adobe) Task: {6DB912DC-90D6-498B-8131-BC807893A538} - System32\Tasks\Norton Security\Norton Security Error Analyzer => C:\Program Files\Norton Security\Engine\22.19.9.63\SymErr.exe [2019-11-16] (Symantec Corporation) Task: {6F52B1BB-9560-482C-BF47-9C8D23A79060} - \Microsoft\Windows\Setup\EOSNotify -> Geen bestand <==== AANDACHT Task: {6FFA775B-E7BB-4DE0-A8F8-EA6FA07E6B25} - System32\Tasks\Microsoft\Windows\LanguageComponentsInstaller\ReconcileLanguageResources Task: {706959E6-235F-45DA-86D6-B7DEBD4C8C27} - System32\Tasks\GU5SkipUAC => C:\Program Files (x86)\Glary Utilities 5\Integrator.exe [2020-01-19] (Glarysoft Ltd) Task: {73CB9900-BD4D-4C69-9F68-6746AE3BB44B} - System32\Tasks\Microsoft\Windows\InstallService\SmartRetry Task: {7553D878-4D3A-4DA5-B716-BA663914B373} - System32\Tasks\Microsoft\Windows\Flighting\FeatureConfig\ReconcileFeatures Task: {7BDA74D3-8903-4107-BCEF-54BFBAF2E321} - System32\Tasks\Microsoft\Windows\End Of Support\Notify2 => %windir%\system32\sipnotify.exe Task: {7C8034B4-286F-4E86-AD41-4140C28A9604} - System32\Tasks\Microsoft\Windows\WaaSMedic\PerformRemediation Task: {845345D4-FC8A-4583-B057-608856701E9D} - System32\Tasks\Microsoft\Windows\SMB\UninstallSMB1ServerTask => powershell.exe -ExecutionPolicy Unrestricted -NonInteractive -NoProfile -WindowStyle Hidden "& %windir%\system32\WindowsPowerShell\v1.0\Modules\SmbShare\DisableUnusedSmb1.ps1 -Scenario Server" Task: {84705464-887E-4FE3-9E8B-C77BA0B716F7} - System32\Tasks\Microsoft\Windows\Subscription\LicenseAcquisition => C:\WINDOWS\system32\ClipRenew.exe [2019-03-19] (Microsoft Corporation) Task: {899C75A3-75CF-4CC3-940C-A75C1B7A5600} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2011-02-23] (Hewlett-Packard Company) Task: {8CE419DE-4815-423C-8287-51CEF62C7937} - System32\Tasks\Microsoft\Windows\WlanSvc\CDSSync Task: {90C28B5C-2A50-48E1-9579-EEE75F1B1F2E} - System32\Tasks\Microsoft\Windows\StateRepository\MaintenanceTasks => Rundll32.exe %windir%\system32\Windows.StateRepositoryClient.dll,StateRepositoryDoMaintenanceTasks Task: {9E42E54A-6BB4-4F7E-892C-2C5183F55B20} - System32\Tasks\Microsoft\Windows\Printing\EduPrintProv => C:\WINDOWS\system32\eduprintprov.exe [2019-03-19] (Microsoft Corporation) Task: {9E546ADC-B330-4FEC-A480-8DF0919355AB} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => %SystemRoot%\ehome\mcupdate.exe Task: {AC833DF3-61F9-4916-B4EF-8EB4E217BC0E} - System32\Tasks\HPCeeScheduleForAva => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13] (Hewlett-Packard) Task: {B1162D45-C91A-4F16-80C5-B3783E005DF7} - System32\Tasks\Microsoft\Windows\SMB\UninstallSMB1ClientTask => powershell.exe -ExecutionPolicy Unrestricted -NonInteractive -NoProfile -WindowStyle Hidden "& %windir%\system32\WindowsPowerShell\v1.0\Modules\SmbShare\DisableUnusedSmb1.ps1 -Scenario Client" Task: {B52A9C11-8334-4CFF-827C-903B6E260C0B} - System32\Tasks\Hewlett-Packard\HP Assistant\HPSA Upgrade => C:\ProgramData\Hewlett-Packard\HPSAUpgrade3\HpSAUpgrade.exe Task: {B8F0DEC7-8392-4F57-9990-74FCB934033F} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\WINDOWS\System32\WinBioPlugIns\FaceFodUninstaller.exe [2019-03-19] () Task: {BD24D094-1C25-4DC2-83D1-79049F3DE3A3} - \Microsoft\Windows\Setup\EOSNotify2 -> Geen bestand <==== AANDACHT Task: {BD59B98F-9D38-4445-BA91-6B4F319D2FBB} - System32\Tasks\Norton WSC Integration => C:\Program Files\Norton Security\Engine\22.19.9.63\WSCStub.exe [2019-11-16] (Symantec Corporation) Task: {C04B292D-BB4E-46A2-ACA4-30CE798531AF} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-12-30] (Google Inc.) Task: {C0698955-2811-49C2-AE8E-1E89CF8FE44A} - System32\Tasks\Norton Security\Norton Security Autofix => C:\Program Files\Norton Security\Engine\22.19.9.63\SymErr.exe [2019-11-16] (Symantec Corporation) Task: {C07F12F8-2377-4BE1-ACD7-155AE0EAF88B} - System32\Tasks\Microsoft\Windows\Flighting\OneSettings\RefreshCache Task: {C3295CC7-EF24-4250-A94B-DBFC71A7B0DC} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => %SystemRoot%\ehome\mcupdate.exe Task: {CD4975A9-BB80-4A7A-B611-D0A5A1367070} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => %SystemRoot%\ehome\ehrec.exe Task: {CEB6BEC4-A910-405D-9CA0-D1FF1CF2D11F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2019-09-10] (Adobe Systems) Task: {D38D2AF2-4B68-4D29-9022-2CA984A613B1} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => %windir%\ehome\MCUpdate.exe Task: {D6D3DD2C-A84C-46AB-A5E5-5B6C32C2F72D} - System32\Tasks\MirageAgent => C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe [2011-03-22] (CyberLink) Task: {D8A50F3C-4BF2-46E9-B708-B51207C90FF2} - System32\Tasks\Microsoft\Windows\PushToInstall\LoginCheck => Sc.exe start pushtoinstall login Task: {D93D4F4F-9D70-43B8-BAC7-9090A54F99E2} - System32\Tasks\Adobe Reader and Acrobat Manager => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2019-09-10] (Adobe Systems) Task: {DF8ABE54-47C9-4567-8DD0-36F92A2CC529} - System32\Tasks\Microsoft\Windows\InstallService\WakeUpAndContinueUpdates Task: {E4AEB720-7F18-419F-A20E-6E0B5C4ED968} - System32\Tasks\Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceProtectionStateChanged Task: {ED10F948-6D7C-4555-9BFF-8A30AE237107} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => %SystemRoot%\ehome\ehPrivJob.exe Task: {EE525133-0491-435B-928F-6702EFEEAFAA} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => %SystemRoot%\ehome\ehPrivJob.exe Task: {EFE8035F-2565-4934-A9A2-D3DA26CCE0E8} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => %SystemRoot%\ehome\mcupdate.exe Task: {F1724519-D80B-4511-BA27-8CD17DB266E2} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2018-04-22] (Dropbox, Inc.) Task: {F945EE35-837F-40EB-88D5-BB45B8A6E620} - System32\Tasks\ServicePlan => C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [2011-01-31] () Task: {FEDCB6EB-6DAB-44A4-99BD-092350841B5F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Ghost Resign Task => c:\program files (x86)\hewlett-packard\hp health check\activecheck\product_line\HPResignFileLoader.exe [2019-01-23] (Microsoft) (Als een item is opgenomen in de fixlist, de taak (job) bestand wordt verplaatst. Het bestand dat wordt uitgevoerd door de taak zal niet worden verplaatst.) Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\HPCeeScheduleForAVA-HP$.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe Task: C:\WINDOWS\Tasks\HPCeeScheduleForAva.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe ==================== Snelkoppelingen ============================= (De items kunnen worden opgenomen in de fixlist.txt om hersteld of verwijderd te worden.) ==================== Geladen Modules (gefilterd) ============== 2019-03-19 05:43 - 2019-03-19 05:43 - 00054960 _____ () C:\WINDOWS\System32\UMPDC.dll 2019-03-19 05:45 - 2019-03-19 05:45 - 00602920 _____ () C:\WINDOWS\SYSTEM32\WINBIOPLUGINS\FACEBOOTSTRAPADAPTER.DLL 2015-11-04 16:43 - 2015-11-04 16:43 - 00214528 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll 2014-02-11 06:08 - 2014-02-11 06:08 - 00817152 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll 2014-02-11 06:08 - 2014-02-11 06:08 - 03650560 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll 2015-11-04 16:43 - 2015-11-04 16:43 - 00127488 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll 2019-03-19 05:59 - 2019-03-19 13:35 - 00094720 _____ () C:\Windows\System32\VirtualMonitorManager.dll 2019-03-19 05:43 - 2019-03-19 05:43 - 00494592 _____ () C:\Windows\ShellExperiences\TileControl.dll 2020-01-09 22:24 - 2020-01-09 22:24 - 02880000 _____ () C:\Windows\ShellComponents\TaskFlowUI.dll 2020-01-09 22:24 - 2020-01-09 22:24 - 01841152 _____ () C:\WINDOWS\system32\TextInputMethodFormatter.dll 2020-01-09 22:24 - 2020-01-09 22:24 - 00944144 _____ () C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe 2020-01-09 22:24 - 2020-01-09 22:24 - 01796608 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2020-01-09 22:24 - 2020-01-09 22:24 - 00258560 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.CppWinRT.dll 2020-01-26 23:56 - 2020-01-26 23:56 - 15746048 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.19122.138.0_x64__8wekyb3d8bbwe\YourPhone.exe 2020-01-26 23:56 - 2020-01-26 23:56 - 01067520 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.19122.138.0_x64__8wekyb3d8bbwe\YourPhone.AppCore.dll 2020-01-26 23:56 - 2020-01-26 23:56 - 00390656 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.19122.138.0_x64__8wekyb3d8bbwe\AppConfig.dll 2020-01-26 23:56 - 2020-01-26 23:56 - 01000448 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.19122.138.0_x64__8wekyb3d8bbwe\RuntimeConfiguration.dll 2020-01-26 23:56 - 2020-01-26 23:56 - 04255744 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.19122.138.0_x64__8wekyb3d8bbwe\YourPhone.AppCore.WinRT.dll 2020-01-26 23:56 - 2020-01-26 23:56 - 03486208 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.19122.138.0_x64__8wekyb3d8bbwe\YourPhone.DataStore.dll 2020-01-26 23:56 - 2020-01-26 23:56 - 04423680 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.19122.138.0_x64__8wekyb3d8bbwe\PhoneCommunicationAppService.dll 2020-01-27 22:41 - 2020-01-07 14:31 - 00700896 _____ () C:\Program Files\MiniTool Partition Wizard 11\updatechecker.exe 2020-01-27 22:41 - 2019-11-14 14:22 - 00024032 _____ () C:\Program Files\MiniTool Partition Wizard 11\idriver.dll 2020-01-27 22:41 - 2019-08-09 12:55 - 01179104 _____ () C:\Program Files\MiniTool Partition Wizard 11\PowerDataRecoveryCore.dll 2020-01-27 22:41 - 2019-12-17 21:27 - 04357088 _____ () C:\Program Files\MiniTool Partition Wizard 11\ikernel.dll 2020-01-27 22:41 - 2019-08-09 12:55 - 00026592 _____ () C:\Program Files\MiniTool Partition Wizard 11\efs.dll 2020-01-27 22:41 - 2019-12-03 12:46 - 00368096 _____ () C:\Program Files\MiniTool Partition Wizard 11\RawObject.dll 2015-11-04 16:43 - 2015-11-04 16:43 - 00102400 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll 2020-01-28 02:32 - 2020-01-28 02:33 - 26124288 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.20011.10711.0_x64__8wekyb3d8bbwe\Video.UI.exe 2020-01-28 02:32 - 2020-01-28 02:32 - 00289280 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.20011.10711.0_x64__8wekyb3d8bbwe\SharedUI.dll 2020-01-26 23:39 - 2020-01-26 23:39 - 00902656 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.20011.10711.0_x64__8wekyb3d8bbwe\Microsoft.Membership.MeControl.UI.Xaml.dll 2020-01-26 23:39 - 2020-01-26 23:39 - 04202208 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.20011.10711.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll 2020-01-28 02:32 - 2020-01-28 02:32 - 05702656 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.20011.10711.0_x64__8wekyb3d8bbwe\EntCommon.dll 2020-01-31 00:31 - 2020-01-31 00:31 - 00273408 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_12001.1001.5.0_x64__8wekyb3d8bbwe\WinStore.Preview.dll 2019-03-19 13:36 - 2019-03-19 13:36 - 02538056 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_12001.1001.5.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll 2019-03-19 13:36 - 2019-03-19 13:36 - 01757696 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_12001.1001.5.0_x64__8wekyb3d8bbwe\Microsoft.Membership.MeControl.dll 2020-01-29 01:51 - 2020-01-29 01:51 - 01474336 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12430.20136.0_x64__8wekyb3d8bbwe\Office.UI.Xaml.Word.dll 2020-01-22 00:44 - 2020-01-16 03:32 - 06980592 _____ () C:\Program Files (x86)\Google\Chrome\Application\79.0.3945.130\libglesv2.dll 2020-01-22 00:44 - 2020-01-16 03:32 - 00318448 _____ () C:\Program Files (x86)\Google\Chrome\Application\79.0.3945.130\libegl.dll ==================== Alternate Data Streams (gefilterd) ========= (Als een item is opgenomen in de fixlist, alleen de ADS wordt verwijderd.) AlternateDataStreams: C:\ProgramData\Temp:0045521A [468] AlternateDataStreams: C:\ProgramData\Temp:00A3C892 [225] AlternateDataStreams: C:\ProgramData\Temp:0168CC60 [233] AlternateDataStreams: C:\ProgramData\Temp:021496FB [468] AlternateDataStreams: C:\ProgramData\Temp:024B9CC7 [500] AlternateDataStreams: C:\ProgramData\Temp:02C70A1F [223] AlternateDataStreams: C:\ProgramData\Temp:02F30776 [228] AlternateDataStreams: C:\ProgramData\Temp:0309CFDE [234] AlternateDataStreams: C:\ProgramData\Temp:0363A082 [250] AlternateDataStreams: C:\ProgramData\Temp:036B81D9 [127] AlternateDataStreams: C:\ProgramData\Temp:03DF8432 [248] AlternateDataStreams: C:\ProgramData\Temp:0452501D [237] AlternateDataStreams: C:\ProgramData\Temp:046E04CC [241] AlternateDataStreams: C:\ProgramData\Temp:04CE8640 [227] AlternateDataStreams: C:\ProgramData\Temp:04EAB86F [221] AlternateDataStreams: C:\ProgramData\Temp:053DE68F [232] AlternateDataStreams: C:\ProgramData\Temp:0696EC8E [232] AlternateDataStreams: C:\ProgramData\Temp:07B4F012 [243] AlternateDataStreams: C:\ProgramData\Temp:07F57DB1 [231] AlternateDataStreams: C:\ProgramData\Temp:08061BEB [380] AlternateDataStreams: C:\ProgramData\Temp:085CA4BC [464] AlternateDataStreams: C:\ProgramData\Temp:08DB8D99 [221] AlternateDataStreams: C:\ProgramData\Temp:098D44FC [238] AlternateDataStreams: C:\ProgramData\Temp:09D92173 [496] AlternateDataStreams: C:\ProgramData\Temp:0A00A0D7 [492] AlternateDataStreams: C:\ProgramData\Temp:0B3D61FC [229] AlternateDataStreams: C:\ProgramData\Temp:0B40CAA8 [231] AlternateDataStreams: C:\ProgramData\Temp:0B448EBB [222] AlternateDataStreams: C:\ProgramData\Temp:0BFBB93D [229] AlternateDataStreams: C:\ProgramData\Temp:0C7AD4C1 [165] AlternateDataStreams: C:\ProgramData\Temp:0C82E997 [249] AlternateDataStreams: C:\ProgramData\Temp:0CCCEDA1 [488] AlternateDataStreams: C:\ProgramData\Temp:0E881552 [236] AlternateDataStreams: C:\ProgramData\Temp:0EC7A545 [428] AlternateDataStreams: C:\ProgramData\Temp:0EFDD299 [286] AlternateDataStreams: C:\ProgramData\Temp:0F251C7D [232] AlternateDataStreams: C:\ProgramData\Temp:1001BB1C [250] AlternateDataStreams: C:\ProgramData\Temp:10B998B3 [171] AlternateDataStreams: C:\ProgramData\Temp:10CB85CA [225] AlternateDataStreams: C:\ProgramData\Temp:1239BE94 [236] AlternateDataStreams: C:\ProgramData\Temp:123A86B5 [236] AlternateDataStreams: C:\ProgramData\Temp:12AD19E8 [226] AlternateDataStreams: C:\ProgramData\Temp:13019F4B [442] AlternateDataStreams: C:\ProgramData\Temp:149CCF18 [240] AlternateDataStreams: C:\ProgramData\Temp:14B3C0A8 [227] AlternateDataStreams: C:\ProgramData\Temp:14D4993F [229] AlternateDataStreams: C:\ProgramData\Temp:15423999 [490] AlternateDataStreams: C:\ProgramData\Temp:16777CF9 [234] AlternateDataStreams: C:\ProgramData\Temp:178BD71C [228] AlternateDataStreams: C:\ProgramData\Temp:18E4BF6C [221] AlternateDataStreams: C:\ProgramData\Temp:19803016 [236] AlternateDataStreams: C:\ProgramData\Temp:1A259A13 [268] AlternateDataStreams: C:\ProgramData\Temp:1B0EC3D1 [496] AlternateDataStreams: C:\ProgramData\Temp:1B12930F [221] AlternateDataStreams: C:\ProgramData\Temp:1B506EA3 [232] AlternateDataStreams: C:\ProgramData\Temp:1B7E2B93 [226] AlternateDataStreams: C:\ProgramData\Temp:1BD320E3 [226] AlternateDataStreams: C:\ProgramData\Temp:1DEE6B65 [225] AlternateDataStreams: C:\ProgramData\Temp:1E156672 [236] AlternateDataStreams: C:\ProgramData\Temp:209A6BA4 [227] AlternateDataStreams: C:\ProgramData\Temp:20C7F96D [242] AlternateDataStreams: C:\ProgramData\Temp:20E1FC41 [244] AlternateDataStreams: C:\ProgramData\Temp:2235B18C [456] AlternateDataStreams: C:\ProgramData\Temp:23A11713 [231] AlternateDataStreams: C:\ProgramData\Temp:2433F876 [246] AlternateDataStreams: C:\ProgramData\Temp:244E4E3A [234] AlternateDataStreams: C:\ProgramData\Temp:248E94F7 [236] AlternateDataStreams: C:\ProgramData\Temp:253AAF35 [490] AlternateDataStreams: C:\ProgramData\Temp:257103A0 [225] AlternateDataStreams: C:\ProgramData\Temp:260A9C65 [249] AlternateDataStreams: C:\ProgramData\Temp:264EFAFC [119] AlternateDataStreams: C:\ProgramData\Temp:2658F5EB [230] AlternateDataStreams: C:\ProgramData\Temp:267F7C0D [224] AlternateDataStreams: C:\ProgramData\Temp:26D061B8 [236] AlternateDataStreams: C:\ProgramData\Temp:27212462 [478] AlternateDataStreams: C:\ProgramData\Temp:27294EB3 [474] AlternateDataStreams: C:\ProgramData\Temp:27440AF0 [223] AlternateDataStreams: C:\ProgramData\Temp:275B4FB4 [233] AlternateDataStreams: C:\ProgramData\Temp:27FE4EC8 [244] AlternateDataStreams: C:\ProgramData\Temp:28561FD4 [243] AlternateDataStreams: C:\ProgramData\Temp:2979C892 [118] AlternateDataStreams: C:\ProgramData\Temp:29EA7E22 [378] AlternateDataStreams: C:\ProgramData\Temp:2A71E882 [235] AlternateDataStreams: C:\ProgramData\Temp:2AC4B958 [448] AlternateDataStreams: C:\ProgramData\Temp:2BA04E4F [187] AlternateDataStreams: C:\ProgramData\Temp:2BFBA0B7 [504] AlternateDataStreams: C:\ProgramData\Temp:2CA5442E [224] AlternateDataStreams: C:\ProgramData\Temp:2CB9631F [140] AlternateDataStreams: C:\ProgramData\Temp:2D2A0FC2 [114] AlternateDataStreams: C:\ProgramData\Temp:2D515C82 [247] AlternateDataStreams: C:\ProgramData\Temp:2D865613 [500] AlternateDataStreams: C:\ProgramData\Temp:2DC8330D [500] AlternateDataStreams: C:\ProgramData\Temp:2DE4F6AE [229] AlternateDataStreams: C:\ProgramData\Temp:2DF54B62 [231] AlternateDataStreams: C:\ProgramData\Temp:2E1B8BE7 [239] AlternateDataStreams: C:\ProgramData\Temp:2E5508DE [444] AlternateDataStreams: C:\ProgramData\Temp:2E76909D [450] AlternateDataStreams: C:\ProgramData\Temp:2F360FB3 [250] AlternateDataStreams: C:\ProgramData\Temp:2F4AFD3E [460] AlternateDataStreams: C:\ProgramData\Temp:2F9BD5B3 [235] AlternateDataStreams: C:\ProgramData\Temp:302ECBD6 [123] AlternateDataStreams: C:\ProgramData\Temp:31106FCB [188] AlternateDataStreams: C:\ProgramData\Temp:313F7672 [248] AlternateDataStreams: C:\ProgramData\Temp:3153EA7B [233] AlternateDataStreams: C:\ProgramData\Temp:331C7ACE [232] AlternateDataStreams: C:\ProgramData\Temp:33B5D2C9 [237] AlternateDataStreams: C:\ProgramData\Temp:3480F458 [484] AlternateDataStreams: C:\ProgramData\Temp:35501BA4 [236] AlternateDataStreams: C:\ProgramData\Temp:35E015DE [239] AlternateDataStreams: C:\ProgramData\Temp:360099BE [251] AlternateDataStreams: C:\ProgramData\Temp:36056826 [240] AlternateDataStreams: C:\ProgramData\Temp:36AAD0E5 [223] AlternateDataStreams: C:\ProgramData\Temp:37BE1DE6 [233] AlternateDataStreams: C:\ProgramData\Temp:38181B01 [235] AlternateDataStreams: C:\ProgramData\Temp:38D94131 [232] AlternateDataStreams: C:\ProgramData\Temp:38FFD0A7 [482] AlternateDataStreams: C:\ProgramData\Temp:391535F9 [230] AlternateDataStreams: C:\ProgramData\Temp:391A88DE [232] AlternateDataStreams: C:\ProgramData\Temp:39743F39 [504] AlternateDataStreams: C:\ProgramData\Temp:397E8289 [231] AlternateDataStreams: C:\ProgramData\Temp:39DC8D60 [242] AlternateDataStreams: C:\ProgramData\Temp:3A0C7C36 [241] AlternateDataStreams: C:\ProgramData\Temp:3AAC11D3 [161] AlternateDataStreams: C:\ProgramData\Temp:3ADE134E [229] AlternateDataStreams: C:\ProgramData\Temp:3AF751AA [250] AlternateDataStreams: C:\ProgramData\Temp:3B812EE0 [358] AlternateDataStreams: C:\ProgramData\Temp:3BF25D32 [230] AlternateDataStreams: C:\ProgramData\Temp:3C18D47C [237] AlternateDataStreams: C:\ProgramData\Temp:3C6D7222 [239] AlternateDataStreams: C:\ProgramData\Temp:3CAE2A70 [236] AlternateDataStreams: C:\ProgramData\Temp:3CC2D8AB [504] AlternateDataStreams: C:\ProgramData\Temp:3D3A4EBA [414] AlternateDataStreams: C:\ProgramData\Temp:3D4B733E [239] AlternateDataStreams: C:\ProgramData\Temp:3DB6F365 [193] AlternateDataStreams: C:\ProgramData\Temp:3E0674EA [484] AlternateDataStreams: C:\ProgramData\Temp:3E06C78F [212] AlternateDataStreams: C:\ProgramData\Temp:3E1DC700 [476] AlternateDataStreams: C:\ProgramData\Temp:3E1EE95E [224] AlternateDataStreams: C:\ProgramData\Temp:3E998CD0 [238] AlternateDataStreams: C:\ProgramData\Temp:3ED4B025 [236] AlternateDataStreams: C:\ProgramData\Temp:3FB26DBA [251] AlternateDataStreams: C:\ProgramData\Temp:3FE64CFC [245] AlternateDataStreams: C:\ProgramData\Temp:404908B5 [223] AlternateDataStreams: C:\ProgramData\Temp:40D8DB7B [286] AlternateDataStreams: C:\ProgramData\Temp:40DC731E [500] AlternateDataStreams: C:\ProgramData\Temp:410A2E9A [226] AlternateDataStreams: C:\ProgramData\Temp:4157BB05 [286] AlternateDataStreams: C:\ProgramData\Temp:4173FD6E [378] AlternateDataStreams: C:\ProgramData\Temp:4194E7CD [191] AlternateDataStreams: C:\ProgramData\Temp:426DA7EE [241] AlternateDataStreams: C:\ProgramData\Temp:437B1C75 [276] AlternateDataStreams: C:\ProgramData\Temp:43D2A298 [223] AlternateDataStreams: C:\ProgramData\Temp:44F015DC [246] AlternateDataStreams: C:\ProgramData\Temp:452BEA53 [140] AlternateDataStreams: C:\ProgramData\Temp:45351004 [239] AlternateDataStreams: C:\ProgramData\Temp:4548E058 [222] AlternateDataStreams: C:\ProgramData\Temp:4577F5B4 [250] AlternateDataStreams: C:\ProgramData\Temp:45FB345B [237] AlternateDataStreams: C:\ProgramData\Temp:4618ABB0 [460] AlternateDataStreams: C:\ProgramData\Temp:46CDAE37 [227] AlternateDataStreams: C:\ProgramData\Temp:46EF121E [227] AlternateDataStreams: C:\ProgramData\Temp:470574B5 [484] AlternateDataStreams: C:\ProgramData\Temp:4762F1D2 [228] AlternateDataStreams: C:\ProgramData\Temp:486E537D [163] AlternateDataStreams: C:\ProgramData\Temp:48BA9C79 [125] AlternateDataStreams: C:\ProgramData\Temp:490B67EC [225] AlternateDataStreams: C:\ProgramData\Temp:4A0B72CF [236] AlternateDataStreams: C:\ProgramData\Temp:4A30EDCC [250] AlternateDataStreams: C:\ProgramData\Temp:4A471456 [484] AlternateDataStreams: C:\ProgramData\Temp:4A5AD4AD [226] AlternateDataStreams: C:\ProgramData\Temp:4A5CFD3B [233] AlternateDataStreams: C:\ProgramData\Temp:4A8761B8 [181] AlternateDataStreams: C:\ProgramData\Temp:4B7C28B1 [0] AlternateDataStreams: C:\ProgramData\Temp:4B8122EA [242] AlternateDataStreams: C:\ProgramData\Temp:4C1C1292 [233] AlternateDataStreams: C:\ProgramData\Temp:4C1E0078 [232] AlternateDataStreams: C:\ProgramData\Temp:4C235DA4 [247] AlternateDataStreams: C:\ProgramData\Temp:4CB60832 [252] AlternateDataStreams: C:\ProgramData\Temp:4CCE214B [366] AlternateDataStreams: C:\ProgramData\Temp:4D6B6072 [468] AlternateDataStreams: C:\ProgramData\Temp:4D729D61 [141] AlternateDataStreams: C:\ProgramData\Temp:4FE30352 [195] AlternateDataStreams: C:\ProgramData\Temp:4FE3FB06 [476] AlternateDataStreams: C:\ProgramData\Temp:5065B53D [224] AlternateDataStreams: C:\ProgramData\Temp:506698B2 [231] AlternateDataStreams: C:\ProgramData\Temp:50F1B6DB [476] AlternateDataStreams: C:\ProgramData\Temp:5118AE69 [486] AlternateDataStreams: C:\ProgramData\Temp:5167543E [224] AlternateDataStreams: C:\ProgramData\Temp:518EB735 [249] AlternateDataStreams: C:\ProgramData\Temp:51C1CF43 [238] AlternateDataStreams: C:\ProgramData\Temp:52C0777E [330] AlternateDataStreams: C:\ProgramData\Temp:53F09A92 [247] AlternateDataStreams: C:\ProgramData\Temp:5412DFA4 [235] AlternateDataStreams: C:\ProgramData\Temp:5430D891 [229] AlternateDataStreams: C:\ProgramData\Temp:55374FBA [230] AlternateDataStreams: C:\ProgramData\Temp:5545792B [226] AlternateDataStreams: C:\ProgramData\Temp:55E82CAF [227] AlternateDataStreams: C:\ProgramData\Temp:5628D5EE [246] AlternateDataStreams: C:\ProgramData\Temp:565D4B03 [492] AlternateDataStreams: C:\ProgramData\Temp:5662D042 [231] AlternateDataStreams: C:\ProgramData\Temp:566A8CA3 [120] AlternateDataStreams: C:\ProgramData\Temp:566B9179 [251] AlternateDataStreams: C:\ProgramData\Temp:567A198B [249] AlternateDataStreams: C:\ProgramData\Temp:56C6CA71 [143] AlternateDataStreams: C:\ProgramData\Temp:570ED58C [225] AlternateDataStreams: C:\ProgramData\Temp:574F975B [444] AlternateDataStreams: C:\ProgramData\Temp:57A9E66B [450] AlternateDataStreams: C:\ProgramData\Temp:57B68D62 [239] AlternateDataStreams: C:\ProgramData\Temp:5805C8C5 [448] AlternateDataStreams: C:\ProgramData\Temp:58158478 [228] AlternateDataStreams: C:\ProgramData\Temp:58306E4C [236] AlternateDataStreams: C:\ProgramData\Temp:58447932 [227] AlternateDataStreams: C:\ProgramData\Temp:58515F92 [233] AlternateDataStreams: C:\ProgramData\Temp:58AC077F [231] AlternateDataStreams: C:\ProgramData\Temp:59465B40 [244] AlternateDataStreams: C:\ProgramData\Temp:594B56B9 [246] AlternateDataStreams: C:\ProgramData\Temp:595D8C55 [251] AlternateDataStreams: C:\ProgramData\Temp:5986FE1C [238] AlternateDataStreams: C:\ProgramData\Temp:598BD055 [224] AlternateDataStreams: C:\ProgramData\Temp:59CA329D [223] AlternateDataStreams: C:\ProgramData\Temp:5A750E35 [128] AlternateDataStreams: C:\ProgramData\Temp:5AF17798 [248] AlternateDataStreams: C:\ProgramData\Temp:5AF9A8C5 [246] AlternateDataStreams: C:\ProgramData\Temp:5B3CBF6B [246] AlternateDataStreams: C:\ProgramData\Temp:5BC46BB5 [231] AlternateDataStreams: C:\ProgramData\Temp:5C188F78 [238] AlternateDataStreams: C:\ProgramData\Temp:5C494C86 [225] AlternateDataStreams: C:\ProgramData\Temp:5CA968FD [242] AlternateDataStreams: C:\ProgramData\Temp:5CBA5665 [224] AlternateDataStreams: C:\ProgramData\Temp:5CD028A5 [225] AlternateDataStreams: C:\ProgramData\Temp:5CE06804 [222] AlternateDataStreams: C:\ProgramData\Temp:5DC2A13A [128] AlternateDataStreams: C:\ProgramData\Temp:5E11B614 [237] AlternateDataStreams: C:\ProgramData\Temp:5E4AE23A [450] AlternateDataStreams: C:\ProgramData\Temp:5EF1AD34 [211] AlternateDataStreams: C:\ProgramData\Temp:5EFEB6A1 [244] AlternateDataStreams: C:\ProgramData\Temp:5F2F600A [231] AlternateDataStreams: C:\ProgramData\Temp:5F423DFF [450] AlternateDataStreams: C:\ProgramData\Temp:5F6F915F [231] AlternateDataStreams: C:\ProgramData\Temp:600E6480 [242] AlternateDataStreams: C:\ProgramData\Temp:6017A808 [412] AlternateDataStreams: C:\ProgramData\Temp:6086BF70 [474] AlternateDataStreams: C:\ProgramData\Temp:611D656D [236] AlternateDataStreams: C:\ProgramData\Temp:618ADFF9 [232] AlternateDataStreams: C:\ProgramData\Temp:623E564B [243] AlternateDataStreams: C:\ProgramData\Temp:6248278E [225] AlternateDataStreams: C:\ProgramData\Temp:629A9591 [222] AlternateDataStreams: C:\ProgramData\Temp:635B49F9 [179] AlternateDataStreams: C:\ProgramData\Temp:63931674 [229] AlternateDataStreams: C:\ProgramData\Temp:63BA523E [476] AlternateDataStreams: C:\ProgramData\Temp:64B8197A [242] AlternateDataStreams: C:\ProgramData\Temp:65137F0D [213] AlternateDataStreams: C:\ProgramData\Temp:65949863 [240] AlternateDataStreams: C:\ProgramData\Temp:660BDAE1 [456] AlternateDataStreams: C:\ProgramData\Temp:6654511C [241] AlternateDataStreams: C:\ProgramData\Temp:667D4A95 [468] AlternateDataStreams: C:\ProgramData\Temp:6684C48E [223] AlternateDataStreams: C:\ProgramData\Temp:66B9B85E [248] AlternateDataStreams: C:\ProgramData\Temp:675703C8 [243] AlternateDataStreams: C:\ProgramData\Temp:675F9A63 [245] AlternateDataStreams: C:\ProgramData\Temp:67CF910D [228] AlternateDataStreams: C:\ProgramData\Temp:683689D1 [236] AlternateDataStreams: C:\ProgramData\Temp:693EF85C [474] AlternateDataStreams: C:\ProgramData\Temp:699EFEED [500] AlternateDataStreams: C:\ProgramData\Temp:6A4EAA86 [226] AlternateDataStreams: C:\ProgramData\Temp:6A51015A [486] AlternateDataStreams: C:\ProgramData\Temp:6B3CCB25 [472] AlternateDataStreams: C:\ProgramData\Temp:6BB32FFE [118] AlternateDataStreams: C:\ProgramData\Temp:6BE79E11 [246] AlternateDataStreams: C:\ProgramData\Temp:6CB8F7A9 [223] AlternateDataStreams: C:\ProgramData\Temp:6CC4F178 [240] AlternateDataStreams: C:\ProgramData\Temp:6EE8565A [136] AlternateDataStreams: C:\ProgramData\Temp:701DD958 [252] AlternateDataStreams: C:\ProgramData\Temp:7025BD32 [230] AlternateDataStreams: C:\ProgramData\Temp:709E81D4 [227] AlternateDataStreams: C:\ProgramData\Temp:716584DD [230] AlternateDataStreams: C:\ProgramData\Temp:71F9F0FF [504] AlternateDataStreams: C:\ProgramData\Temp:722FCB15 [222] AlternateDataStreams: C:\ProgramData\Temp:72449E7D [135] AlternateDataStreams: C:\ProgramData\Temp:72DDC498 [231] AlternateDataStreams: C:\ProgramData\Temp:72F3E48F [175] AlternateDataStreams: C:\ProgramData\Temp:73923C06 [244] AlternateDataStreams: C:\ProgramData\Temp:73C1C1FA [229] AlternateDataStreams: C:\ProgramData\Temp:74615EBC [241] AlternateDataStreams: C:\ProgramData\Temp:7485F466 [225] AlternateDataStreams: C:\ProgramData\Temp:7548F76E [247] AlternateDataStreams: C:\ProgramData\Temp:766E39CB [144] AlternateDataStreams: C:\ProgramData\Temp:7687A3E3 [168] AlternateDataStreams: C:\ProgramData\Temp:771214B3 [246] AlternateDataStreams: C:\ProgramData\Temp:7934407E [244] AlternateDataStreams: C:\ProgramData\Temp:793DB8F5 [466] AlternateDataStreams: C:\ProgramData\Temp:797333F6 [252] AlternateDataStreams: C:\ProgramData\Temp:7A4AAF34 [177] AlternateDataStreams: C:\ProgramData\Temp:7A5BA354 [228] AlternateDataStreams: C:\ProgramData\Temp:7C038E24 [125] AlternateDataStreams: C:\ProgramData\Temp:7E532047 [246] AlternateDataStreams: C:\ProgramData\Temp:7E82FF15 [242] AlternateDataStreams: C:\ProgramData\Temp:7ED81BEB [225] AlternateDataStreams: C:\ProgramData\Temp:7F52B4C6 [247] AlternateDataStreams: C:\ProgramData\Temp:7FD8AECC [227] AlternateDataStreams: C:\ProgramData\Temp:80547BBA [278] AlternateDataStreams: C:\ProgramData\Temp:8118F1F5 [470] AlternateDataStreams: C:\ProgramData\Temp:81E1F110 [288] AlternateDataStreams: C:\ProgramData\Temp:8204AA35 [213] AlternateDataStreams: C:\ProgramData\Temp:82F1B716 [245] AlternateDataStreams: C:\ProgramData\Temp:830725A7 [232] AlternateDataStreams: C:\ProgramData\Temp:83D68821 [191] AlternateDataStreams: C:\ProgramData\Temp:840897E8 [464] AlternateDataStreams: C:\ProgramData\Temp:841E05D6 [225] AlternateDataStreams: C:\ProgramData\Temp:84D41ADD [243] AlternateDataStreams: C:\ProgramData\Temp:84EBFAE9 [221] AlternateDataStreams: C:\ProgramData\Temp:865E594E [236] AlternateDataStreams: C:\ProgramData\Temp:87295ABA [502] AlternateDataStreams: C:\ProgramData\Temp:8732B03A [506] AlternateDataStreams: C:\ProgramData\Temp:87A7F6F8 [488] AlternateDataStreams: C:\ProgramData\Temp:8C232F4D [227] AlternateDataStreams: C:\ProgramData\Temp:8CB98D2B [227] AlternateDataStreams: C:\ProgramData\Temp:8CBBA350 [247] AlternateDataStreams: C:\ProgramData\Temp:8D335A79 [243] AlternateDataStreams: C:\ProgramData\Temp:8E761650 [241] AlternateDataStreams: C:\ProgramData\Temp:8ED1CC33 [245] AlternateDataStreams: C:\ProgramData\Temp:8F1B55BE [458] AlternateDataStreams: C:\ProgramData\Temp:900EBAFA [234] AlternateDataStreams: C:\ProgramData\Temp:908856C4 [233] AlternateDataStreams: C:\ProgramData\Temp:90C320E1 [110] AlternateDataStreams: C:\ProgramData\Temp:91211B32 [238] AlternateDataStreams: C:\ProgramData\Temp:91742C9B [239] AlternateDataStreams: C:\ProgramData\Temp:919D5A07 [231] AlternateDataStreams: C:\ProgramData\Temp:91B663FA [478] AlternateDataStreams: C:\ProgramData\Temp:91D94DDC [237] AlternateDataStreams: C:\ProgramData\Temp:91DFA401 [234] AlternateDataStreams: C:\ProgramData\Temp:921D6014 [185] AlternateDataStreams: C:\ProgramData\Temp:92D11EF5 [149] AlternateDataStreams: C:\ProgramData\Temp:93404B2F [237] AlternateDataStreams: C:\ProgramData\Temp:9360454E [460] AlternateDataStreams: C:\ProgramData\Temp:947DD06F [221] AlternateDataStreams: C:\ProgramData\Temp:94984666 [248] AlternateDataStreams: C:\ProgramData\Temp:94A31742 [250] AlternateDataStreams: C:\ProgramData\Temp:94D2A842 [232] AlternateDataStreams: C:\ProgramData\Temp:95078CDB [228] AlternateDataStreams: C:\ProgramData\Temp:95079543 [206] AlternateDataStreams: C:\ProgramData\Temp:952245B1 [250] AlternateDataStreams: C:\ProgramData\Temp:95D92E12 [228] AlternateDataStreams: C:\ProgramData\Temp:968F624D [146] AlternateDataStreams: C:\ProgramData\Temp:9758CFB3 [227] AlternateDataStreams: C:\ProgramData\Temp:9768CF89 [232] AlternateDataStreams: C:\ProgramData\Temp:97741F56 [250] AlternateDataStreams: C:\ProgramData\Temp:98BD93BF [138] AlternateDataStreams: C:\ProgramData\Temp:993BD021 [462] AlternateDataStreams: C:\ProgramData\Temp:997AA414 [170] AlternateDataStreams: C:\ProgramData\Temp:99E02F7F [238] AlternateDataStreams: C:\ProgramData\Temp:9A88B65D [248] AlternateDataStreams: C:\ProgramData\Temp:9AC8424E [247] AlternateDataStreams: C:\ProgramData\Temp:9B0BBEDB [185] AlternateDataStreams: C:\ProgramData\Temp:9BB8C675 [210] AlternateDataStreams: C:\ProgramData\Temp:9BCE3C0A [241] AlternateDataStreams: C:\ProgramData\Temp:9BEBF770 [246] AlternateDataStreams: C:\ProgramData\Temp:9C417C9E [230] AlternateDataStreams: C:\ProgramData\Temp:9C435C94 [500] AlternateDataStreams: C:\ProgramData\Temp:9CF85C28 [230] AlternateDataStreams: C:\ProgramData\Temp:9D2AC855 [225] AlternateDataStreams: C:\ProgramData\Temp:9DB55C3C [233] AlternateDataStreams: C:\ProgramData\Temp:9E3DDF7D [233] AlternateDataStreams: C:\ProgramData\Temp:9E410D29 [223] AlternateDataStreams: C:\ProgramData\Temp:9E4F05ED [215] AlternateDataStreams: C:\ProgramData\Temp:9E76E7F3 [234] AlternateDataStreams: C:\ProgramData\Temp:9EA1C810 [248] AlternateDataStreams: C:\ProgramData\Temp:9EDA68BD [232] AlternateDataStreams: C:\ProgramData\Temp:A0B6A461 [237] AlternateDataStreams: C:\ProgramData\Temp:A1DF1DF6 [247] AlternateDataStreams: C:\ProgramData\Temp:A1F2E121 [222] AlternateDataStreams: C:\ProgramData\Temp:A2CE35BE [472] AlternateDataStreams: C:\ProgramData\Temp:A2FF62A6 [226] AlternateDataStreams: C:\ProgramData\Temp:A349622D [162] AlternateDataStreams: C:\ProgramData\Temp:A3CDD1FD [0] AlternateDataStreams: C:\ProgramData\Temp:A40784A1 [241] AlternateDataStreams: C:\ProgramData\Temp:A5207E86 [129] AlternateDataStreams: C:\ProgramData\Temp:A56D6987 [211] AlternateDataStreams: C:\ProgramData\Temp:A5746FD8 [236] AlternateDataStreams: C:\ProgramData\Temp:A5CF529A [248] AlternateDataStreams: C:\ProgramData\Temp:A5E88AB5 [186] AlternateDataStreams: C:\ProgramData\Temp:A6E01F67 [470] AlternateDataStreams: C:\ProgramData\Temp:A73595DE [231] AlternateDataStreams: C:\ProgramData\Temp:A83C47D3 [170] AlternateDataStreams: C:\ProgramData\Temp:A934B126 [233] AlternateDataStreams: C:\ProgramData\Temp:A9E00757 [243] AlternateDataStreams: C:\ProgramData\Temp:AA2946C5 [168] AlternateDataStreams: C:\ProgramData\Temp:AA2BDEF1 [224] AlternateDataStreams: C:\ProgramData\Temp:AB70CBEE [241] AlternateDataStreams: C:\ProgramData\Temp:AC8BE4E0 [225] AlternateDataStreams: C:\ProgramData\Temp:ACD280B8 [227] AlternateDataStreams: C:\ProgramData\Temp:AD450465 [221] AlternateDataStreams: C:\ProgramData\Temp:AE0B1F48 [177] AlternateDataStreams: C:\ProgramData\Temp:AE7C31B7 [249] AlternateDataStreams: C:\ProgramData\Temp:AEC85652 [235] AlternateDataStreams: C:\ProgramData\Temp:AED4A2B7 [235] AlternateDataStreams: C:\ProgramData\Temp:AFF744C2 [336] AlternateDataStreams: C:\ProgramData\Temp:B01EC114 [231] AlternateDataStreams: C:\ProgramData\Temp:B0FD1EC3 [228] AlternateDataStreams: C:\ProgramData\Temp:B26C5307 [246] AlternateDataStreams: C:\ProgramData\Temp:B2AD2D2C [224] AlternateDataStreams: C:\ProgramData\Temp:B2F1058C [127] AlternateDataStreams: C:\ProgramData\Temp:B2F435C0 [245] AlternateDataStreams: C:\ProgramData\Temp:B30990EA [245] AlternateDataStreams: C:\ProgramData\Temp:B3196E8D [222] AlternateDataStreams: C:\ProgramData\Temp:B3378097 [233] AlternateDataStreams: C:\ProgramData\Temp:B37B4664 [222] AlternateDataStreams: C:\ProgramData\Temp:B3A139F8 [225] AlternateDataStreams: C:\ProgramData\Temp:B4941957 [225] AlternateDataStreams: C:\ProgramData\Temp:B4D9E828 [182] AlternateDataStreams: C:\ProgramData\Temp:B4DFBFB7 [244] AlternateDataStreams: C:\ProgramData\Temp:B55BA1CB [187] AlternateDataStreams: C:\ProgramData\Temp:B567AC6D [480] AlternateDataStreams: C:\ProgramData\Temp:B5FD4AA1 [251] AlternateDataStreams: C:\ProgramData\Temp:B6B0F849 [372] AlternateDataStreams: C:\ProgramData\Temp:B72EBA77 [179] AlternateDataStreams: C:\ProgramData\Temp:B78B7166 [187] AlternateDataStreams: C:\ProgramData\Temp:B863466F [248] AlternateDataStreams: C:\ProgramData\Temp:B8791731 [231] AlternateDataStreams: C:\ProgramData\Temp:B9A5D589 [234] AlternateDataStreams: C:\ProgramData\Temp:BB5EE597 [242] AlternateDataStreams: C:\ProgramData\Temp:BB982EDF [490] AlternateDataStreams: C:\ProgramData\Temp:BBC9C1EB [228] AlternateDataStreams: C:\ProgramData\Temp:BC2C8070 [236] AlternateDataStreams: C:\ProgramData\Temp:BC8E9899 [246] AlternateDataStreams: C:\ProgramData\Temp:BD0A043E [208] AlternateDataStreams: C:\ProgramData\Temp:BD932D90 [251] AlternateDataStreams: C:\ProgramData\Temp:BDFD4719 [490] AlternateDataStreams: C:\ProgramData\Temp:BE26820A [227] AlternateDataStreams: C:\ProgramData\Temp:BE6B2FE3 [185] AlternateDataStreams: C:\ProgramData\Temp:BE6B5FC3 [232] AlternateDataStreams: C:\ProgramData\Temp:BFBEA5C2 [224] AlternateDataStreams: C:\ProgramData\Temp:C00AB302 [238] AlternateDataStreams: C:\ProgramData\Temp:C00C7190 [246] AlternateDataStreams: C:\ProgramData\Temp:C01516AD [230] AlternateDataStreams: C:\ProgramData\Temp:C07A6A6B [189] AlternateDataStreams: C:\ProgramData\Temp:C0A086B3 [225] AlternateDataStreams: C:\ProgramData\Temp:C0C1FD6D [248] AlternateDataStreams: C:\ProgramData\Temp:C0D23A2F [119] AlternateDataStreams: C:\ProgramData\Temp:C11BB4F1 [500] AlternateDataStreams: C:\ProgramData\Temp:C1D3D9A3 [246] AlternateDataStreams: C:\ProgramData\Temp:C25E505B [242] AlternateDataStreams: C:\ProgramData\Temp:C28642D1 [223] AlternateDataStreams: C:\ProgramData\Temp:C3014350 [234] AlternateDataStreams: C:\ProgramData\Temp:C368C9EA [236] AlternateDataStreams: C:\ProgramData\Temp:C4186238 [384] AlternateDataStreams: C:\ProgramData\Temp:C4EA8260 [187] AlternateDataStreams: C:\ProgramData\Temp:C5D38708 [239] AlternateDataStreams: C:\ProgramData\Temp:C605E0E1 [482] AlternateDataStreams: C:\ProgramData\Temp:C6275D37 [250] AlternateDataStreams: C:\ProgramData\Temp:C7684F3C [233] AlternateDataStreams: C:\ProgramData\Temp:C7A2F0B9 [244] AlternateDataStreams: C:\ProgramData\Temp:CA148EF4 [245] AlternateDataStreams: C:\ProgramData\Temp:CA1F23E7 [244] AlternateDataStreams: C:\ProgramData\Temp:CA23EF97 [240] AlternateDataStreams: C:\ProgramData\Temp:CA3999F8 [360] AlternateDataStreams: C:\ProgramData\Temp:CB3F19A5 [239] AlternateDataStreams: C:\ProgramData\Temp:CBAF0C30 [209] AlternateDataStreams: C:\ProgramData\Temp:CC3A8861 [245] AlternateDataStreams: C:\ProgramData\Temp:CC8B36B2 [236] AlternateDataStreams: C:\ProgramData\Temp:CCD8056E [222] AlternateDataStreams: C:\ProgramData\Temp:CCEBA76D [236] AlternateDataStreams: C:\ProgramData\Temp:CCEC8F8D [250] AlternateDataStreams: C:\ProgramData\Temp:CD95F383 [238] AlternateDataStreams: C:\ProgramData\Temp:CE506F23 [236] AlternateDataStreams: C:\ProgramData\Temp:CE8D1BEE [176] AlternateDataStreams: C:\ProgramData\Temp:CFBF7F81 [250] AlternateDataStreams: C:\ProgramData\Temp:CFE660B9 [242] AlternateDataStreams: C:\ProgramData\Temp:CFF478CD [231] AlternateDataStreams: C:\ProgramData\Temp:D03C606E [247] AlternateDataStreams: C:\ProgramData\Temp:D29191BC [196] AlternateDataStreams: C:\ProgramData\Temp:D3181BB4 [229] AlternateDataStreams: C:\ProgramData\Temp:D3A7EBF2 [173] AlternateDataStreams: C:\ProgramData\Temp:D442BE9A [232] AlternateDataStreams: C:\ProgramData\Temp:D4505E11 [480] AlternateDataStreams: C:\ProgramData\Temp:D57DCBA2 [222] AlternateDataStreams: C:\ProgramData\Temp:D5BF78B4 [213] AlternateDataStreams: C:\ProgramData\Temp:D5C946C5 [221] AlternateDataStreams: C:\ProgramData\Temp:D5E3E8C4 [464] AlternateDataStreams: C:\ProgramData\Temp:D611055E [238] AlternateDataStreams: C:\ProgramData\Temp:D6A43EB0 [230] AlternateDataStreams: C:\ProgramData\Temp:D8D50413 [245] AlternateDataStreams: C:\ProgramData\Temp:D91E182A [243] AlternateDataStreams: C:\ProgramData\Temp:D93E540A [235] AlternateDataStreams: C:\ProgramData\Temp:D9BA4596 [131] AlternateDataStreams: C:\ProgramData\Temp:DA55B48C [494] AlternateDataStreams: C:\ProgramData\Temp:DA5888A7 [188] AlternateDataStreams: C:\ProgramData\Temp:DADACE5D [226] AlternateDataStreams: C:\ProgramData\Temp:DB417990 [247] AlternateDataStreams: C:\ProgramData\Temp:DC08E1E8 [242] AlternateDataStreams: C:\ProgramData\Temp:DC4A6A16 [240] AlternateDataStreams: C:\ProgramData\Temp:DC8E5CD4 [240] AlternateDataStreams: C:\ProgramData\Temp:DC938322 [241] AlternateDataStreams: C:\ProgramData\Temp:DD305D1E [231] AlternateDataStreams: C:\ProgramData\Temp:DDD108EB [248] AlternateDataStreams: C:\ProgramData\Temp:DE274A16 [223] AlternateDataStreams: C:\ProgramData\Temp:DE41C411 [164] AlternateDataStreams: C:\ProgramData\Temp:DEE1BE5F [234] AlternateDataStreams: C:\ProgramData\Temp:DF070D09 [478] AlternateDataStreams: C:\ProgramData\Temp:DF5ABA3D [228] AlternateDataStreams: C:\ProgramData\Temp:DFB12512 [482] AlternateDataStreams: C:\ProgramData\Temp:DFBD2257 [462] AlternateDataStreams: C:\ProgramData\Temp:E0051112 [452] AlternateDataStreams: C:\ProgramData\Temp:E0140213 [237] AlternateDataStreams: C:\ProgramData\Temp:E02FEB2B [141] AlternateDataStreams: C:\ProgramData\Temp:E100B680 [348] AlternateDataStreams: C:\ProgramData\Temp:E14FA16F [232] AlternateDataStreams: C:\ProgramData\Temp:E265ED33 [244] AlternateDataStreams: C:\ProgramData\Temp:E271A26A [224] AlternateDataStreams: C:\ProgramData\Temp:E2E09709 [247] AlternateDataStreams: C:\ProgramData\Temp:E32966C0 [197] AlternateDataStreams: C:\ProgramData\Temp:E32D2701 [230] AlternateDataStreams: C:\ProgramData\Temp:E3DA2548 [230] AlternateDataStreams: C:\ProgramData\Temp:E4D1253F [247] AlternateDataStreams: C:\ProgramData\Temp:E4EE99EF [212] AlternateDataStreams: C:\ProgramData\Temp:E5496666 [412] AlternateDataStreams: C:\ProgramData\Temp:E5F88E5F [174] AlternateDataStreams: C:\ProgramData\Temp:E6708F08 [220] AlternateDataStreams: C:\ProgramData\Temp:E670B637 [236] AlternateDataStreams: C:\ProgramData\Temp:E6E684D5 [227] AlternateDataStreams: C:\ProgramData\Temp:E6ECD578 [234] AlternateDataStreams: C:\ProgramData\Temp:E73594F0 [424] AlternateDataStreams: C:\ProgramData\Temp:E7E78B84 [231] AlternateDataStreams: C:\ProgramData\Temp:E805916C [162] AlternateDataStreams: C:\ProgramData\Temp:E85B256B [251] AlternateDataStreams: C:\ProgramData\Temp:E8AEB2BF [240] AlternateDataStreams: C:\ProgramData\Temp:E94FA418 [226] AlternateDataStreams: C:\ProgramData\Temp:E9FE7347 [247] AlternateDataStreams: C:\ProgramData\Temp:EA2D3047 [225] AlternateDataStreams: C:\ProgramData\Temp:EA8E5358 [494] AlternateDataStreams: C:\ProgramData\Temp:EA99F8C6 [179] AlternateDataStreams: C:\ProgramData\Temp:EB1EABB1 [228] AlternateDataStreams: C:\ProgramData\Temp:EB4FEEF5 [223] AlternateDataStreams: C:\ProgramData\Temp:EC2546D2 [340] AlternateDataStreams: C:\ProgramData\Temp:EC970DB6 [456] AlternateDataStreams: C:\ProgramData\Temp:ED92736E [221] AlternateDataStreams: C:\ProgramData\Temp:EE33E1C1 [172] AlternateDataStreams: C:\ProgramData\Temp:EEABFCCE [232] AlternateDataStreams: C:\ProgramData\Temp:EEED3F26 [195] AlternateDataStreams: C:\ProgramData\Temp:EF0C5444 [424] AlternateDataStreams: C:\ProgramData\Temp:EF69BA58 [241] AlternateDataStreams: C:\ProgramData\Temp:EF73125F [234] AlternateDataStreams: C:\ProgramData\Temp:F034C40F [186] AlternateDataStreams: C:\ProgramData\Temp:F039D9FE [248] AlternateDataStreams: C:\ProgramData\Temp:F074840B [232] AlternateDataStreams: C:\ProgramData\Temp:F08ADFA2 [243] AlternateDataStreams: C:\ProgramData\Temp:F1373816 [232] AlternateDataStreams: C:\ProgramData\Temp:F2B7D26F [230] AlternateDataStreams: C:\ProgramData\Temp:F2BE18CF [378] AlternateDataStreams: C:\ProgramData\Temp:F33FDE24 [234] AlternateDataStreams: C:\ProgramData\Temp:F3727A78 [241] AlternateDataStreams: C:\ProgramData\Temp:F41B5978 [237] AlternateDataStreams: C:\ProgramData\Temp:F5016336 [241] AlternateDataStreams: C:\ProgramData\Temp:F512B2D9 [251] AlternateDataStreams: C:\ProgramData\Temp:F55F0EF6 [140] AlternateDataStreams: C:\ProgramData\Temp:F6A712DD [240] AlternateDataStreams: C:\ProgramData\Temp:F822765E [227] AlternateDataStreams: C:\ProgramData\Temp:F83CC70C [235] AlternateDataStreams: C:\ProgramData\Temp:F89F2593 [221] AlternateDataStreams: C:\ProgramData\Temp:F97CB382 [458] AlternateDataStreams: C:\ProgramData\Temp:F9AB910D [500] AlternateDataStreams: C:\ProgramData\Temp:F9DCD5D7 [248] AlternateDataStreams: C:\ProgramData\Temp:FA045AC8 [144] AlternateDataStreams: C:\ProgramData\Temp:FAA653E5 [225] AlternateDataStreams: C:\ProgramData\Temp:FB9F9239 [247] AlternateDataStreams: C:\ProgramData\Temp:FC367019 [237] AlternateDataStreams: C:\ProgramData\Temp:FCEC5955 [500] AlternateDataStreams: C:\ProgramData\Temp:FD33BA64 [231] AlternateDataStreams: C:\ProgramData\Temp:FD8BCF62 [248] AlternateDataStreams: C:\ProgramData\Temp:FDA54680 [224] AlternateDataStreams: C:\ProgramData\Temp:FE1665C7 [228] AlternateDataStreams: C:\ProgramData\Temp:FE61B3F6 [249] AlternateDataStreams: C:\ProgramData\Temp:FEE00EB9 [233] AlternateDataStreams: C:\ProgramData\Temp:FF869361 [242] AlternateDataStreams: C:\ProgramData\Temp:FFA396CD [224] AlternateDataStreams: C:\ProgramData\Temp:FFAD192E [247] ==================== Veilige Modus (gefilterd) =================== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. De "AlternateShell" waarde wordt hersteld.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioEndpointBuilder => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioSrv => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CBDHSvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudAddService.Sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudBus.Sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\usbaudio.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96C-E325-11CE-BFC1-08002BE10318} => ""="Media" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96C-E325-11CE-BFC1-08002BE10318} => "SafeBootDrivers"="1" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AudioEndpointBuilder => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AudioSrv => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CBDHSvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\HdAudAddService.Sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\HdAudBus.Sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NetSetupSvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SerCx2.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\usbaudio.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WinQuic => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E96C-E325-11CE-BFC1-08002BE10318} => ""="Media" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E96C-E325-11CE-BFC1-08002BE10318} => "SafeBootDrivers"="1" ==================== Bestandskoppeling (gefilterd) =============== (Als een item is opgenomen in de fixlist, het registry item zal worden teruggezet naar de standaardwaarden of verwijderd.) ==================== Internet Explorer vertrouwde/beperkte toegang =============== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd.) ==================== Hosts inhoud: =============================== (Als nodig Hosts: opdracht kan worden opgenomen in de fixlist om Hosts te resetten.) 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Andere gebieden ============================ (Momenteel is er geen automatische fix voor dit onderdeel.) HKU\S-1-5-21-2837410931-1932527551-3268655035-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Ava\AppData\Roaming\Microsoft\Windows Live Photo Gallery\Bureaubladachtergrond van Windows Live Photo Gallery.jpg DNS Servers: 84.116.46.23 - 84.116.46.22 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is ingeschakeld. ==================== MSCONFIG/TASK MANAGER Uitgeschakelde items == MSCONFIG\startupreg: GUDelayStartup => "C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe" -delayrun MSCONFIG\startupreg: Magic Desktop for HP notification => "C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe" MSCONFIG\startupreg: PSUAMain => "C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe" /LaunchSysTray MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized HKLM\...\StartupApproved\Run: => "SysTrayApp" HKLM\...\StartupApproved\Run32: => "Dropbox" HKLM\...\StartupApproved\Run32: => "vProt" HKU\S-1-5-21-2837410931-1932527551-3268655035-1001\...\StartupApproved\Run: => "OneDrive" ==================== Firewall regels (gefilterd) =============== (Als een item is opgenomen in de fixlist, wordt uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.) FirewallRules: [Microsoft-Windows-DeviceManagement-CertificateInstall-TCP-Out] => (Allow) %SystemRoot%\system32\dmcertinst.exe FirewallRules: [Microsoft-Windows-DeviceManagement-deviceenroller-TCP-Out] => (Allow) %SystemRoot%\system32\deviceenroller.exe FirewallRules: [Microsoft-Windows-DeviceManagement-OmaDmClient-TCP-Out] => (Allow) %SystemRoot%\system32\omadmclient.exe FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) %systemroot%\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe FirewallRules: [{F4E21FB4-1806-408B-BD96-EE27DAB23723}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe FirewallRules: [{8FCF72FC-879A-472B-A246-DE16A4BA616F}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{723754F1-36AA-4E31-8D3F-F59525E6A032}] => (Allow) C:\Program Files\HP\HP ENVY Photo 6200 series\Bin\HPNetworkCommunicatorCom.exe FirewallRules: [{21F4A197-0E65-4EDA-B05E-E1872491AD7D}] => (Allow) LPort=5357 FirewallRules: [{57431E61-876C-455B-A528-F3578E43A5F4}] => (Allow) C:\Program Files\HP\HP ENVY Photo 6200 series\Bin\DeviceSetup.exe FirewallRules: [UDP Query User{B4F9A309-DC28-43DD-911C-68DAB3195BA3}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [TCP Query User{AB436EB0-0183-45A9-A0D7-65DCB24D7D50}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [{D0A50D3C-395C-4EDD-AB4E-95E91F7BBF51}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{01A4EC58-A03D-41E0-BB75-597923EF7305}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{347018E1-9E46-4665-AF02-6FD287A94BDE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{D7217824-41CA-4C5E-BAAC-049012B9EBC1}] => (Allow) C:\Windows\system32\ezSharedSvcHost.exe FirewallRules: [{707A229D-8C99-4FE5-AC45-3F5F5F2B6A6C}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe FirewallRules: [{7D8C2826-8E9F-4734-9834-F912BA8A72AB}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe FirewallRules: [{D7FFF18F-AF1C-4BD6-B894-3986F31D0FB5}] => (Allow) LPort=1900 FirewallRules: [{BED9AFF5-8BE6-4FD4-844C-74776052C043}] => (Allow) LPort=2869 FirewallRules: [{42C11726-D576-4573-8AAB-F103C4B6BCD2}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{1232B194-6BB8-47CC-A184-A1D1B0591C90}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559.0_x86__zpdnekdrzrea0\Spotify.exe FirewallRules: [{E7D76C5E-57DB-43E0-BD39-91E5834D5083}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559.0_x86__zpdnekdrzrea0\Spotify.exe FirewallRules: [{94A5B6E8-8F4A-4E19-B9A1-E5ECDF559EDC}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559.0_x86__zpdnekdrzrea0\Spotify.exe FirewallRules: [{478FA94A-1C89-4705-B584-1B8EDDE6DE48}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559.0_x86__zpdnekdrzrea0\Spotify.exe FirewallRules: [{69DF023F-673A-460D-AD0E-D18C63C99BD2}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559.0_x86__zpdnekdrzrea0\Spotify.exe FirewallRules: [{970DC9C2-66F2-4ABE-9826-7E48C5FB7186}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559.0_x86__zpdnekdrzrea0\Spotify.exe FirewallRules: [{3B2C0B8D-3161-4BA4-84F7-E251F186E86C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559.0_x86__zpdnekdrzrea0\Spotify.exe FirewallRules: [{5DAB7841-588F-408E-B0B0-715CC6DF3C0D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.125.559.0_x86__zpdnekdrzrea0\Spotify.exe ==================== Herstelpunten ========================= 31-01-2020 23:00:20 Windows Update ==================== Defecte Apparaatbeheer Apparaten ============= ==================== Eventlog fouten: ========================= Applicatiefouten: ================== Error: (02/01/2020 01:33:10 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Het programma dwm.exe, versie 10.0.18362.387 reageert niet meer op Windows en is afgesloten. Als u wilt zien of er meer informatie over het probleem beschikbaar is, raadpleegt u de probleemgeschiedenis in het onderdeel Beveiliging en onderhoud van het Configuratiescherm. Proces-id: 288 Starttijd: 01d5d886dca35457 Eindtijd: 152 Toepassingspad: C:\Windows\System32\dwm.exe Rapport-id: e09f0828-2caa-4f01-aaf4-3ec4557d8e61 Volledige pakketnaam met fout: Relatieve toepassings-id van pakket met fout: Type vastlopen: Unknown Error: (01/31/2020 11:36:24 PM) (Source: STacSV) (EventID: 32767) (User: NT AUTHORITY) Description: Connection to the Storage interface failed Error: (01/31/2020 11:04:43 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Naam van toepassing met fout: sttray64.exe, versie: 1.0.6329.0, tijdstempel: 0x4d79e045 Naam van module met fout: sttray64.exe, versie: 1.0.6329.0, tijdstempel: 0x4d79e045 Uitzonderingscode: 0xc000041d Foutmarge: 0x000000000000d7ca Id van proces met fout: 0x21b0 Starttijd van toepassing met fout: 0x01d5d8826ee1147d Pad naar toepassing met fout: C:\Program Files\IDT\WDM\sttray64.exe Pad naar module met fout: C:\Program Files\IDT\WDM\sttray64.exe Rapport-id: 6a1836de-9b9e-4604-86b6-98e4bd380f5e Volledige pakketnaam met fout: Relatieve toepassings-id van pakket met fout: Error: (01/31/2020 11:04:41 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Naam van toepassing met fout: sttray64.exe, versie: 1.0.6329.0, tijdstempel: 0x4d79e045 Naam van module met fout: sttray64.exe, versie: 1.0.6329.0, tijdstempel: 0x4d79e045 Uitzonderingscode: 0xc0000005 Foutmarge: 0x000000000000d7ca Id van proces met fout: 0x21b0 Starttijd van toepassing met fout: 0x01d5d8826ee1147d Pad naar toepassing met fout: C:\Program Files\IDT\WDM\sttray64.exe Pad naar module met fout: C:\Program Files\IDT\WDM\sttray64.exe Rapport-id: 7e8f924f-3d94-4c44-91e7-5bf01a6e2d5d Volledige pakketnaam met fout: Relatieve toepassings-id van pakket met fout: Error: (01/31/2020 11:04:09 PM) (Source: STacSV) (EventID: 32767) (User: NT AUTHORITY) Description: Connection to the Storage interface failed Error: (01/31/2020 11:01:54 PM) (Source: VSS) (EventID: 8193) (User: ) Description: Fout in de Volume Shadow Copy-service: onverwachte fout bij het aanroepen van routine CoCreateInstance. hr = 0x8007045b, Systeem wordt afgesloten. . Error: (01/31/2020 11:01:54 PM) (Source: VSS) (EventID: 13) (User: ) Description: Informatie voor de Volume Shadow Copy-service: de COM-server met CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} en de naam CEventSystem kan niet worden gestart. [0x8007045b, Systeem wordt afgesloten. ] Error: (01/31/2020 11:00:23 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: De service Cryptografische services is mislukt tijdens het verwerken van aanroep OnIdentity() op het object System Writer. Details: AddLegacyDriverFiles: Unable to back up image of binary Microsoft Link-Layer Discovery Protocol. System Error: Toegang geweigerd. . Error: (01/31/2020 10:57:48 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: NT AUTHORITY) Description: Windows kan het DLL-bestand voor uitbreidbare items "C:\WINDOWS\system32\sysmain.dll" niet laden (Win32-foutcode 126). Error: (01/31/2020 10:57:33 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Naam van toepassing met fout: sttray64.exe, versie: 1.0.6329.0, tijdstempel: 0x4d79e045 Naam van module met fout: sttray64.exe, versie: 1.0.6329.0, tijdstempel: 0x4d79e045 Uitzonderingscode: 0xc000041d Foutmarge: 0x000000000000d7ca Id van proces met fout: 0x1894 Starttijd van toepassing met fout: 0x01d5d8816e4456ef Pad naar toepassing met fout: C:\Program Files\IDT\WDM\sttray64.exe Pad naar module met fout: C:\Program Files\IDT\WDM\sttray64.exe Rapport-id: b875a3ef-ff04-4764-9f75-b2fbca44c832 Volledige pakketnaam met fout: Relatieve toepassings-id van pakket met fout: Systeemfouten: ============= Error: (02/01/2020 03:03:47 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: ) Description: 4 Error: (02/01/2020 02:35:47 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: ) Description: 4 Error: (02/01/2020 12:29:35 AM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: ) Description: 4 Error: (02/01/2020 12:01:06 AM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: ) Description: 4 Error: (01/31/2020 11:34:54 PM) (Source: Microsoft-Windows-HAL) (EventID: 13) (User: NT AUTHORITY) Description: De bewakingstimer van het systeem is ingeschakeld. Error: (01/31/2020 11:02:39 PM) (Source: Microsoft-Windows-HAL) (EventID: 13) (User: NT AUTHORITY) Description: De bewakingstimer van het systeem is ingeschakeld. Error: (01/31/2020 10:55:11 PM) (Source: Microsoft-Windows-HAL) (EventID: 13) (User: NT AUTHORITY) Description: De bewakingstimer van het systeem is ingeschakeld. Error: (01/31/2020 06:13:36 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: ) Description: 4 Error: (01/31/2020 04:54:55 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: ) Description: 4 Error: (01/31/2020 04:03:04 PM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: ) Description: 4 CodeIntegrity: =================================== Date: 2020-01-31 22:58:49.836 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Norton Security\Engine\22.19.9.63\WSCStub.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2020-01-31 22:58:49.822 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Norton Security\Engine\22.19.9.63\WSCStub.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2020-01-31 22:58:49.803 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Norton Security\Engine\22.19.9.63\WSCStub.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2020-01-31 22:58:49.787 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Norton Security\Engine\22.19.9.63\WSCStub.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2020-01-29 18:33:34.466 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Norton Security\Engine\22.19.9.63\WSCStub.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2020-01-29 18:33:34.449 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Norton Security\Engine\22.19.9.63\WSCStub.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2020-01-29 18:33:34.430 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Norton Security\Engine\22.19.9.63\WSCStub.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2020-01-29 18:33:34.415 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Norton Security\Engine\22.19.9.63\WSCStub.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. ==================== Geheugen info =========================== Processor: AMD A6-3410MX APU with Radeon(tm) HD Graphics Percentage geheugen in gebruik: 83% Totaal fysiek RAM-geheugen: 3562.9 MB Beschikbaar fysiek RAM-geheugen: 593.67 MB Totaal Virtueel geheugen: 7146.9 MB Beschikbaar Virtual geheugen: 3127.68 MB ==================== Schijven ================================ Drive c: () (Fixed) (Total:225.23 GB) (Free:133.73 GB) NTFS ==>[systeem met boot componenten (verkregen van schijf)] Drive f: (SYSTEM) (Fixed) (Total:0.23 GB) (Free:0.19 GB) NTFS ==>[systeem met boot componenten (verkregen van schijf)] Drive g: (Elements) (Fixed) (Total:931.28 GB) (Free:252.07 GB) FAT32 ==================== MBR & Partitietabel ================== ======================================================== Disk: 0 (MBR Code: Windows XP) (Size: 232.9 GB) (Disk ID: 782BDB28) Partition 1: (Active) - (Size=235 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=225.2 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=312 MB) - (Type=07 NTFS) ======================================================== Disk: 1 (Size: 931.5 GB) (Disk ID: E8900690) Partition 1: (Not Active) - (Size=931.5 GB) - (Type=0C) ==================== Eind van Addition.txt ============================