Trojanerfundmeldung - Win11 findet keine Malware - Meldung erscheint immer wieder

Avloew · 25.09.2026, 14:10

Hallo,
auf dem WIn11 Rechner erscheint regelmäßig wiederkehrend eine Warnung, dass ein Trojaner gefunden wurde und möchte über ein PopUp Fenster einen Scan durchführen. Mit Alt+F4 oder ähnlichem konnte das Fenster wieder geschlossen werden, gelegentlich auch nicht (Neustart erforderlich). Es erscheint immer wieder in verschiedenem Layout mit ähnlichem Inhalt. Alle Browser wurden zurückgesetzt ohne Erfolg. Einen Screenshot der Trojanermeldung konnte ich nicht hier einfügen.

Dem Rechner war bei der Erstinstallation die Muttersprache Niederländisch nicht abzugewöhnen. Ebenfalls wird der Rechner gewerblich genutzt. Es ist ein Kleinstunternehmen und hat hat keinerlei IT Support.

___________________________________________________________

Code:

ATTFilter

Scanresultaten van Farbar Recovery Scan Tool (FRST) (x64) Versie: 25-09-2026
Gestart door xxxx (Beheerder) op DESKTOP-7UO7M50 (DEFAULT STRING DEFAULT STRING) (25-09-2026 14:18:31)
Gestart vanaf C:\Users\xxxx\Desktop\FRST64.exe
Geladen Profielen: xxxx
Platform: Microsoft Windows 11 Pro Versie 25H2 26200.9457 (X64) Taal: Niederländisch (Niederlande) -> Deutsch (Deutschland)
Standaardbrowser: Chrome
Boot Modus: Normal

==================== Processen (gefilterd) =================

(Als een item is opgenomen in de fixlist, zal het proces worden gesloten. Het bestand zal niet worden verplaatst.)

(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MsMpEng.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\DefenderSessionHelper.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_bdd49bbe6b990549\igfxCUIServiceN.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_bdd49bbe6b990549\igfxEMN.exe
(explorer.exe ->) (Ghisler Software GmbH -> Ghisler Software GmbH) C:\Program Files\totalcmd\TOTALCMD64.EXE
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe
(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <9>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\153.0.4234.48\msedgewebview2.exe <5>
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_bdd49bbe6b990549\igfxCUIServiceN.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_5b51a286c5d2f192\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_65ac4d73bb85cb27\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d51901c26227fb29\WMIRegistrationService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncHelper.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\NisSrv.exe
(sihost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2609.44031.0_x64__8wekyb3d8bbwe\m365copilot_autostarter.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.380.2.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe

==================== Register (gefilterd) ===================

(Als een item is opgenomen in de fixlist, zal het registeritem worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.)

HKLM\...\Run: [KeePass 2 PreLoad] => C:\Program Files\KeePass Password Safe 2\KeePass.exe [3265880 2026-05-01] (Open Source Developer, Dominik Reichl -> Dominik Reichl)
HKU\S-1-5-21-720174342-3053994144-4245047485-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4756840 2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-720174342-3053994144-4245047485-1002\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4756840 2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-720174342-3053994144-4245047485-1002\...\Run: [Microsoft.Lists] => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\OneDrive.Sync.Service.exe [967528 2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-720174342-3053994144-4245047485-1002\...\Run: [PulseBrowserUpdaterTaskUser135.0.7049.101] => C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe [5576816 2026-07-03] (Alabama Technology USA, LLC -> Alabama Technology USA, LLC)
HKU\S-1-5-21-720174342-3053994144-4245047485-1002\...\Run: [MicrosoftEdgeAutoLaunch_E9668399593D9418202A6A14E62927B5] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [5418312 2026-09-18] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Windows x64\Print Processors\Canon TR4700 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDHL.DLL [543744 2021-07-11] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ FAX Language Monitor TR4700 series: C:\WINDOWS\system32\CNCALHL.DLL [266752 2021-03-24] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor TR4700 series: C:\WINDOWS\system32\CNMLMHL.DLL [989184 2021-07-11] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4924568 2026-08-11] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\153.0.8010.54\Installer\chrmstp.exe [8030872 2026-09-24] (Google LLC -> Google LLC)

==================== Geplande Taken (gefilterd) =================

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

Task: {2170D3AB-C679-4D99-976C-D1D45D171745} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem152.0.7933.0{54CF2A32-741E-4DB4-B904-C6E21A1A8877} => C:\Program Files (x86)\Google\GoogleUpdater\152.0.7933.0\updater.exe [7400088 2026-07-05] (Google LLC -> Google LLC)
Task: {DB9B7F29-C0F4-471A-B1F1-BCFA8F05454C} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ActionsServer\ActionsServer.exe [16470400 2026-09-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {A49B97C6-6FF2-4149-92FB-1612E0A16ED4} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28440976 2026-09-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {3074B11E-C6AC-44C2-A9D3-776CBF825715} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\opushutil.exe [69984 2026-09-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {05CD1DD8-E104-4E97-ACAB-FC62D4C491E6} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28440976 2026-09-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {FEEC8C07-4164-4C10-9F4F-569A1B1FE320} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [426352 2026-09-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {50D01334-1023-48F9-A745-229B25C2A917} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [426352 2026-09-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {089973E0-70BF-421C-B7BF-5BF193D7E1C1} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [1328920 2026-08-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {2003DE6A-DD7B-4940-968C-018A746C00DF} - System32\Tasks\Microsoft\Office\Office Startup Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ActionsServer\ActionsServer.exe [16470400 2026-09-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {C885B7DB-DB6B-45F6-8EA1-F8B919E23D1C} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe  (Geen bestand)
Task: {FBDF7F36-4B6A-4FD6-B138-7A7010D82603} - System32\Tasks\Microsoft\Windows\PI\SecureBootEncodeUEFI => %WINDIR%\system32\SecureBootEncodeUEFI.exe  (Geen bestand)
Task: {EEC49C91-BCB0-4E42-BEA6-CB620E01EB5F} - System32\Tasks\Microsoft\Windows\UNP\RunUpdateNotificationMgr => %windir%\System32\UNP\UpdateNotificationMgr.exe  (Geen bestand)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (Geen bestand)
Task: {8D1CA24F-2384-47B3-9D12-114ECEFEFBCC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpCmdRun.exe [1902880 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {641849F7-4FE6-46DC-9409-898C71F2792F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpCmdRun.exe [1902880 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {CB4EB528-A34E-465A-B942-B329373B42F6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpCmdRun.exe [1902880 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {299DB728-8F5C-42A4-9EEC-B858F2904DC9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpCmdRun.exe [1902880 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {6462339D-2DE6-45D0-BDC4-E85C09BA59D5} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-720174342-3053994144-4245047485-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [1079424 2026-09-25] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (de data item heeft 6 meer tekens).
Task: {569EC90A-5499-4FFF-AB15-0B72EB8A2BF3} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-720174342-3053994144-4245047485-1002 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [1079424 2026-09-25] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (de data item heeft 6 meer tekens).
Task: {61437EE8-036C-4937-851E-09B3C38EE610} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [44160 2026-09-25] (Mozilla Corporation -> Mozilla Foundation)
Task: {F46095EA-F1F7-404B-82D8-09FDC0EFD29C} - System32\Tasks\OneBUpdate => C:\Users\Avi\AppData\Local\OB\OneBUpdate\OneBUpdateService.exe [4251144 2026-08-17] (Work Product Inc. -> Work Product Inc.)
Task: {BE898A6F-E989-42A2-8DC5-D42CE1BF448B} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4409744 2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {039A580A-D7C3-41D8-8DD4-7B637584C717} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-720174342-3053994144-4245047485-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4409744 2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {52A7F5B2-66FB-4F94-979E-99DAADA3C91D} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-720174342-3053994144-4245047485-1002 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4409744 2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {09CAE655-FE75-4742-9376-AE36E9DD6787} - System32\Tasks\OneDrive Startup Task-S-1-5-21-720174342-3053994144-4245047485-1001 => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\OneDriveLauncher.exe [866192 2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {BF2D235B-27CE-4BC4-A2BB-875ED03C42FA} - System32\Tasks\OneDrive Startup Task-S-1-5-21-720174342-3053994144-4245047485-1002 => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\OneDriveLauncher.exe [866192 2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {1D1EA1DD-A1B7-46D4-88E5-A1952A48D68F} - System32\Tasks\PulseSoftware\PulseBrowserStartupS-1-5-21-720174342-3053994144-4245047485-1002 => C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe [4059248 2026-06-23] (Alabama Technology USA, LLC -> Alabama Technology USA, LLC)
Task: {04D8A3B2-85F7-4031-B04F-0552A058A4C6} - System32\Tasks\PulseSoftware\PulseBrowserUpdater\PulseBrowserUpdaterTaskUser135.0.7049.101{90B905BE-9FD9-4876-9D26-7A1AA0351B97} => C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe [5576816 2026-07-03] (Alabama Technology USA, LLC -> Alabama Technology USA, LLC)

(Als een item is opgenomen in de fixlist, wordt de taak (job) bestand verplaatst. Het bestand dat wordt uitgevoerd door de taak zal niet worden verplaatst.)


==================== Internet (gefilterd) ====================

(Als een item is opgenomen in de fixlist en een registeritem is, wordt het verwijderd of hersteld naar de standaard.)

Tcpip\Parameters: [DhcpNameServer] 192.168.10.1
Tcpip\..\Interfaces\{7786a279-fc7f-4bd0-b9c6-12cee5554e3c}: [DhcpNameServer] 192.168.10.1
Tcpip\..\Interfaces\{7786a279-fc7f-4bd0-b9c6-12cee5554e3c}: [DhcpDomain] fritz.box

FireFox:
========
FF TaskBarID: 35565CD3A3E82193 -> C:\Users\xxxx\AppData\Local\Mozilla Firefox
FF TaskBarID: 308046B0AF4A39CB -> C:\Program Files\Mozilla Firefox
FF DefaultProfile: i5ay6gwk.default-release -> 308046B0AF4A39CB
FF ProfilePath: C:\Users\xxxx\AppData\Roaming\Mozilla\Firefox\Profiles\nrwbdzd9.default [2026-04-15]
FF ProfilePath: C:\Users\xxxx\AppData\Roaming\Mozilla\Firefox\Profiles\i5ay6gwk.default-release [2026-04-22]
FF Homepage: Mozilla\Firefox\Profiles\i5ay6gwk.default-release -> www.google.de
FF Extension: (New Tab) - C:\Users\xxxx\AppData\Roaming\Mozilla\Firefox\Profiles\i5ay6gwk.default-release\Extensions\newtab@mozilla.org.xpi [2026-04-15]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation)

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\xxxx\AppData\Local\Microsoft\Edge\User Data\Default [2026-04-22]
Edge Extension: (Google Docs Offline) - C:\Users\xxxx\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-04-22]
Edge Extension: (Edge relevant text changes) - C:\Users\xxxx\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2026-04-22]
Edge Profile: C:\Users\xxxx\AppData\Local\Microsoft\Edge\User Data\Profile 1 [2026-04-22]
Edge Extension: (Google Docs Offline) - C:\Users\xxxx\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-04-15]
Edge Extension: (Edge relevant text changes) - C:\Users\xxxx\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2026-04-15]

Chrome: 
=======
CHR Profile: C:\Users\xxxx\AppData\Local\Google\Chrome\User Data\Default [2026-09-25]
CHR DownloadDir: C:\Users\xxxx\Desktop
CHR Extension: (Google Docs Offline) - C:\Users\xxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-09-25]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\xxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2026-04-15]

==================== Services (gefilterd) ===================

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13372816 2026-09-15] (Microsoft Corporation -> Microsoft Corporation)
R3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncHelper.exe [3800424 2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpDefenderCoreService.exe [2307776 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\26.168.0830.0006\OneDriveUpdaterService.exe [4098960 2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [914752 2026-09-09] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\NisSrv.exe [5311776 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MsMpEng.exe [291360 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (gefilterd) ===================

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [598016 2026-04-15] (Microsoft Corporation) [Bestand niet getekend]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [212992 2026-04-15] (Microsoft Corporation) [Bestand niet getekend]
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [114688 2026-04-15] (Microsoft Corporation) [Bestand niet getekend]
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [83008 2026-09-04] (Microsoft Windows -> Microsoft Corporation)
R3 rtcx21; C:\WINDOWS\System32\DriverStore\FileRepository\rtcx21x64.inf_amd64_feec7a9662e785f0\rtcx21x64.sys [539648 2024-03-28] (Microsoft Windows -> Realtek)
S4 WdAiNisDrv; C:\WINDOWS\System32\drivers\wd\WdAiNisDrv.sys [51264 2026-09-18] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21632 2026-09-18] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [664592 2026-09-18] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [137240 2026-09-18] (Microsoft Windows -> Microsoft Corporation)
R3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2026-04-15] (Microsoft Windows -> Microsoft Corporation)
R3 WSDScan; C:\WINDOWS\System32\DriverStore\FileRepository\sti.inf_amd64_8ce330c68e1a560b\WSDScan.sys [61440 2026-09-09] (Microsoft Windows -> Microsoft Corporation)

==================== SvcHost (gefilterd) ===================

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)


==================== Een maand (aangemaakt) (gefilterd) =========

(Als een item is opgenomen in de fixlist, wordt de map of het bestand verplaatst.)

2026-09-25 14:18 - 2026-09-25 14:19 - 000021348 _____ C:\Users\xxxx\Desktop\FRST.txt
2026-09-25 14:18 - 2026-09-25 14:19 - 000000000 ____D C:\FRST
2026-09-25 14:14 - 2026-09-25 14:15 - 002455552 _____ (Farbar) C:\Users\xxxx\Desktop\FRST64.exe
2026-09-25 14:11 - 2026-09-25 14:11 - 000004036 _____ C:\WINDOWS\system32\Tasks\PostponeDeviceSetupToast_S-1-5-21-720174342-3053994144-4245047485-1001_0
2026-09-25 14:10 - 2026-09-25 14:10 - 000000000 ____D C:\Users\xxxx\AppData\Local\WindowsOobeAppHost
2026-09-25 13:39 - 2026-09-25 13:39 - 000787094 _____ C:\WINDOWS\system32\perfh013.dat
2026-09-25 13:39 - 2026-09-25 13:39 - 000734214 _____ C:\WINDOWS\system32\perfh007.dat
2026-09-25 13:39 - 2026-09-25 13:39 - 000161738 _____ C:\WINDOWS\system32\perfc013.dat
2026-09-25 13:39 - 2026-09-25 13:39 - 000158294 _____ C:\WINDOWS\system32\perfc007.dat
2026-09-25 09:07 - 2026-09-25 09:07 - 000004706 _____ C:\Users\Avi\Downloads\invoice2026-09-25_09-07-11.pdf
2026-09-25 09:05 - 2026-09-25 09:05 - 000004699 _____ C:\Users\Avi\Downloads\invoice2026-09-25_09-05-53.pdf
2026-09-25 04:43 - 2026-09-25 12:55 - 000000000 ____D C:\Program Files\Mozilla Firefox
2026-09-23 16:35 - 2026-09-25 13:21 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-09-23 09:24 - 2026-09-23 09:24 - 000004683 _____ C:\Users\Avi\Downloads\invoice2026-09-23_09-24-34.pdf
2026-09-23 09:23 - 2026-09-23 09:23 - 000004704 _____ C:\Users\Avi\Downloads\invoice2026-09-23_09-23-20.pdf
2026-09-22 15:01 - 2026-09-22 15:01 - 000838005 _____ C:\Users\Avi\Downloads\invoice2026-09-22_15-01-48.pdf
2026-09-21 22:36 - 2026-09-21 22:36 - 000005464 _____ C:\Users\Avi\Downloads\invoice2026-09-21_22-36-39.pdf
2026-09-20 19:19 - 2026-09-20 19:19 - 000004696 _____ C:\Users\Avi\Downloads\invoice2026-09-20_19-19-35.pdf
2026-09-20 19:19 - 2026-09-20 19:19 - 000004696 _____ C:\Users\Avi\Downloads\invoice2026-09-20_19-19-15.pdf
2026-09-18 20:51 - 2026-09-18 20:51 - 000838020 _____ C:\Users\Avi\Downloads\invoice2026-09-18_20-51-51.pdf
2026-09-16 12:45 - 2026-09-16 12:45 - 000004691 _____ C:\Users\Avi\Downloads\invoice2026-09-16_12-45-43.pdf
2026-09-15 14:06 - 2026-09-15 14:06 - 000004784 _____ C:\Users\Avi\Downloads\invoice2026-09-15_14-06-24.pdf
2026-09-15 13:45 - 2026-09-15 13:45 - 000004686 _____ C:\Users\Avi\Downloads\invoice2026-09-15_13-45-09.pdf
2026-09-14 22:37 - 2026-09-14 09:48 - 000019437 _____ C:\Users\Avi\Downloads\Appia Contract GmbH  Rg.2026-103549 - Kopie.pdf
2026-09-14 22:37 - 2026-09-14 09:48 - 000019437 _____ C:\Users\Avi\Downloads\Appia Contract GmbH  Rg.2026-103549 - Kopie (2).pdf
2026-09-14 22:37 - 2026-09-13 22:02 - 000838055 _____ C:\Users\Avi\Downloads\invoice2026-09-13_22-02-54 - Kopie.pdf
2026-09-14 22:37 - 2026-09-13 22:02 - 000838055 _____ C:\Users\Avi\Downloads\invoice2026-09-13_22-02-54 - Kopie (2).pdf
2026-09-14 22:37 - 2026-09-13 22:02 - 000838055 _____ C:\Users\Avi\Downloads\invoice2026-09-13_22-02-30 - Kopie.pdf
2026-09-14 22:37 - 2026-09-13 22:02 - 000838055 _____ C:\Users\Avi\Downloads\invoice2026-09-13_22-02-30 - Kopie (2).pdf
2026-09-14 22:37 - 2026-09-04 16:23 - 000004784 _____ C:\Users\Avi\Downloads\invoice2026-09-04_16-23-50 - Kopie.pdf
2026-09-14 22:37 - 2026-09-04 16:23 - 000004784 _____ C:\Users\Avi\Downloads\invoice2026-09-04_16-23-50 - Kopie (2).pdf
2026-09-14 22:37 - 2026-08-19 15:39 - 000196299 _____ C:\Users\Avi\Downloads\RECHNUNG Nr. 10353826 19.08.26   KABEL Sugar and Glory  € 89,87 bez. 26.08.26.pdf
2026-09-14 22:37 - 2026-08-19 15:39 - 000196299 _____ C:\Users\Avi\Downloads\RECHNUNG Nr. 10353826 19.08.26   KABEL Sugar and Glory  € 89,87 bez. 26.08.26 - Kopie.pdf
2026-09-14 22:37 - 2026-07-27 15:40 - 000198118 _____ C:\Users\Avi\Downloads\RECHNUNG Nr#10348626, 16.07.26  , KABEL SERAX, BE  €  1194,00  bez. 27.07.26.pdf
2026-09-14 22:37 - 2026-07-27 15:40 - 000198118 _____ C:\Users\Avi\Downloads\RECHNUNG Nr#10348626, 16.07.26  , KABEL SERAX, BE  €  1194,00  bez. 27.07.26 - Kopie.pdf
2026-09-14 09:48 - 2026-09-14 09:48 - 000019437 _____ C:\Users\Avi\Downloads\Appia Contract GmbH  Rg.2026-103549.pdf
2026-09-13 22:02 - 2026-09-13 22:02 - 000838055 _____ C:\Users\Avi\Downloads\invoice2026-09-13_22-02-54.pdf
2026-09-13 22:02 - 2026-09-13 22:02 - 000838055 _____ C:\Users\Avi\Downloads\invoice2026-09-13_22-02-30.pdf
2026-09-12 18:24 - 2026-09-12 18:24 - 000000000 ____D C:\WINDOWS\Microsoft Antimalware
2026-09-12 17:17 - 2026-09-25 01:32 - 000002239 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-09-12 17:17 - 2026-09-25 01:32 - 000002198 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2026-09-12 17:17 - 2026-09-12 17:17 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleUserPEH
2026-09-12 17:16 - 2026-09-12 17:16 - 000000000 ____D C:\Program Files\Google
2026-09-12 17:15 - 2026-09-12 17:15 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleSystem
2026-09-12 17:14 - 2026-09-12 17:14 - 012411832 _____ (Google LLC) C:\Users\Avi\Downloads\ChromeSetup.exe
2026-09-12 17:06 - 2026-09-12 17:06 - 000000000 ____D C:\Users\Avi\AppData\Local\WindowsOobeAppHost
2026-09-12 16:30 - 2026-09-22 11:25 - 000000000 ____D C:\Users\Avi\AppData\Roaming\KeePass
2026-09-12 16:27 - 2026-09-12 16:27 - 000000963 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeePass 2.lnk
2026-09-12 16:27 - 2026-09-12 16:27 - 000000000 ____D C:\Program Files\KeePass Password Safe 2
2026-09-11 20:25 - 2026-09-11 20:25 - 000073754 _____ C:\Users\Avi\Downloads\DOF-2609117EALZ9Y9MXQB-0054032971.pdf
2026-09-11 15:04 - 2026-09-11 15:04 - 000066342 _____ C:\Users\Avi\Downloads\DHL-Paketmarke_PAKCE64NKHMX_Craig_Walker____.pdf
2026-09-11 13:09 - 2026-09-11 13:09 - 000222837 _____ C:\Users\Avi\Downloads\Gescannt_20260911-1255 Wohnen 13.07.25-07.04.26.pdf
2026-09-11 11:34 - 2026-08-31 21:23 - 000838039 _____ C:\Users\Avi\Downloads\invoice2026-08-31_21-23-38.pdf
2026-09-11 11:34 - 2026-08-31 15:04 - 000004785 _____ C:\Users\Avi\Downloads\invoice2026-08-31_15-04-45.pdf
2026-09-11 11:34 - 2026-08-10 11:40 - 000004636 _____ C:\Users\Avi\Downloads\invoice2026-08-10_11-40-25.pdf
2026-09-11 11:34 - 2026-08-05 11:49 - 000004730 _____ C:\Users\Avi\Downloads\invoice2026-08-05_11-49-35.pdf
2026-09-11 11:34 - 2026-07-31 11:53 - 000005203 _____ C:\Users\Avi\Downloads\invoice2026-07-31_11-53-36.pdf
2026-09-11 11:34 - 2026-07-20 10:21 - 000004693 _____ C:\Users\Avi\Downloads\invoice2026-07-20_10-21-04.pdf
2026-09-11 11:31 - 2026-09-11 11:31 - 001097791 _____ C:\Users\Avi\Downloads\Nachrichten _ eBay.html
2026-09-11 11:31 - 2026-09-11 11:31 - 000000000 ____D C:\Users\Avi\Downloads\Nachrichten _ eBay_files
2026-09-10 11:48 - 2026-09-22 11:21 - 000001607 _____ C:\WINDOWS\system32\config\VSMIDK
2026-09-09 12:27 - 2026-09-09 12:27 - 000004646 _____ C:\WINDOWS\system32\ResPriUHMImageList
2026-09-09 12:27 - 2026-09-09 12:27 - 000004646 _____ C:\WINDOWS\system32\ResPriLMImageList
2026-09-09 12:27 - 2026-09-09 12:27 - 000004646 _____ C:\WINDOWS\system32\ResPriImageList
2026-09-09 12:27 - 2026-09-09 12:27 - 000004646 _____ C:\WINDOWS\system32\ResPriHMImageList
2026-09-09 12:27 - 2026-09-09 12:27 - 000004555 _____ C:\WINDOWS\system32\ResPriImageListLowCost
2026-09-09 12:27 - 2026-09-09 12:27 - 000004555 _____ C:\WINDOWS\system32\ResPriHMImageListLowCost
2026-09-09 12:26 - 2026-09-09 12:26 - 000039215 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-09-09 12:26 - 2026-09-09 12:26 - 000039215 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-09-09 12:25 - 2026-09-09 12:25 - 000014689 _____ C:\WINDOWS\system32\ecoscore_config.json
2026-09-04 20:33 - 2026-09-04 20:33 - 000030655 _____ C:\Users\Avi\Downloads\2026-9-3-RG.pdf
2026-09-04 20:33 - 2026-09-04 20:33 - 000030655 _____ C:\Users\Avi\Downloads\2026-9-3-RG (1).pdf
2026-09-04 16:23 - 2026-09-04 16:23 - 000004784 _____ C:\Users\Avi\Downloads\invoice2026-09-04_16-23-50.pdf
2026-09-04 12:33 - 2026-09-04 12:52 - 2520774203 _____ C:\Users\Avi\Downloads\4_BEWEISVIDEO.MOV
2026-09-03 22:59 - 2026-09-03 22:59 - 000004022 _____ C:\Users\Avi\Downloads\packingslip2026-09-03_22-59-45.pdf
2026-09-03 22:57 - 2026-09-03 22:57 - 000004787 _____ C:\Users\Avi\Downloads\invoice2026-09-03_22-57-22.pdf
2026-09-03 21:58 - 2026-09-03 21:58 - 000002657 _____ C:\Users\Avi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pulse Browser.lnk
2026-09-03 21:57 - 2026-09-03 21:58 - 000000000 ____D C:\WINDOWS\system32\Tasks\PulseSoftware
2026-09-03 21:57 - 2026-09-03 21:58 - 000000000 ____D C:\Users\Avi\AppData\Local\PulseSoftware
2026-09-03 21:44 - 2026-09-03 21:44 - 005235880 _____ (BurdaForward GmbH) C:\Users\Avi\Downloads\VLC media player 3.0.22 RC2 Deutsch - CHIP Installer _eNoGT.exe
2026-09-03 20:46 - 2026-09-03 20:46 - 002443800 _____ C:\Users\Avi\Downloads\IMG_9335.pdf
2026-09-01 22:40 - 2026-09-01 22:40 - 000004429 _____ C:\Users\Avi\Downloads\packingslip2026-09-01_22-40-53.pdf
2026-09-01 22:22 - 2026-09-01 22:22 - 000005464 _____ C:\Users\Avi\Downloads\invoice2026-09-01_22-22-11.pdf
2026-09-01 12:28 - 2026-09-01 12:28 - 000003897 _____ C:\Users\Avi\Downloads\packingslip2026-09-01_12-28-35.pdf
2026-09-01 12:26 - 2026-09-01 12:26 - 000004692 _____ C:\Users\Avi\Downloads\invoice2026-09-01_12-26-50.pdf
2026-09-01 11:33 - 2026-09-01 11:33 - 000003954 _____ C:\Users\Avi\Downloads\packingslip2026-09-01_11-33-39.pdf
2026-09-01 11:31 - 2026-09-01 11:31 - 000004716 _____ C:\Users\Avi\Downloads\invoice2026-09-01_11-31-15.pdf
2026-08-31 21:27 - 2026-08-31 21:27 - 000837294 _____ C:\Users\Avi\Downloads\packingslip2026-08-31_21-27-17.pdf
2026-08-31 21:26 - 2026-08-31 21:26 - 000838039 _____ C:\Users\Avi\Downloads\invoice2026-08-31_21-26-42.pdf
2026-08-31 21:26 - 2026-08-31 21:26 - 000837294 _____ C:\Users\Avi\Downloads\packingslip2026-08-31_21-26-16.pdf
2026-08-31 12:56 - 2026-08-31 12:56 - 000000000 ____D C:\Users\Avi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView
2026-08-31 12:56 - 2026-08-31 12:56 - 000000000 ____D C:\Users\Avi\AppData\Roaming\IrfanView
2026-08-30 19:18 - 2026-08-30 19:18 - 000004716 _____ C:\Users\Avi\Downloads\invoice2026-08-30_19-18-28.pdf
2026-08-29 21:57 - 2026-08-29 21:57 - 000013175 _____ C:\Users\Avi\Downloads\loewinst_elster_29.08.2026_21.54.pfx
2026-08-28 13:05 - 2026-08-28 13:05 - 000154162 _____ C:\Users\Avi\Downloads\Verkaufsschild-VWTransporterT52ClangeVersion_-_10479630643258272470.pdf
2026-08-27 21:36 - 2026-09-05 20:44 - 000000000 ____D C:\Program Files\Mozilla Thunderbird
2026-08-27 21:30 - 2026-08-27 21:30 - 000000000 ____D C:\Users\Avi\Lampen_ab_21.04.26
2026-08-27 14:58 - 2026-08-27 14:58 - 000004930 _____ C:\Users\Avi\Downloads\packingslip2026-08-27_14-58-07.pdf
2026-08-27 14:13 - 2026-08-27 14:13 - 000006575 _____ C:\Users\Avi\Downloads\invoice2026-08-27_14-13-36.pdf
2026-08-26 15:31 - 2026-08-26 15:31 - 001808486 _____ C:\Users\Avi\Downloads\IMG_3526.jpeg
2026-08-26 15:30 - 2026-08-26 15:30 - 001845548 _____ C:\Users\Avi\Downloads\IMG_3538 (1).jpeg
2026-08-26 15:29 - 2026-08-26 15:29 - 001845548 _____ C:\Users\Avi\Downloads\IMG_3538.jpeg
2026-08-26 15:28 - 2026-08-26 15:28 - 001380003 _____ C:\Users\Avi\Downloads\IMG_3529.jpeg
2026-08-26 12:22 - 2026-09-25 12:55 - 000002125 _____ C:\Users\Avi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk

==================== Een maand (gewijzigd) ==================

(Als een item is opgenomen in de fixlist, wordt de map of het bestand verplaatst.)

2026-09-25 14:19 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-09-25 14:13 - 2024-01-01 01:20 - 000000000 ____D C:\Users\xxxx\AppData\Local\Packages
2026-09-25 14:11 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-09-25 14:10 - 2026-04-15 12:08 - 000000000 __SHD C:\Users\xxxx\IntelGraphicsProfiles
2026-09-25 14:10 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-09-25 14:10 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-09-25 14:03 - 2026-04-15 12:19 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2026-09-25 13:39 - 2026-04-15 16:04 - 002666788 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-09-25 13:39 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2026-09-25 13:38 - 2026-04-15 15:58 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-09-25 12:55 - 2026-04-15 12:19 - 000001065 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-09-25 12:55 - 2026-04-15 12:19 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2026-09-25 09:04 - 2026-04-21 20:39 - 000000000 ____D C:\Users\Avi\AppData\Roaming\Microsoft\Outlook
2026-09-24 16:21 - 2026-04-21 12:10 - 000000000 ____D C:\Users\Avi\AppData\Local\Packages
2026-09-24 14:38 - 2026-04-21 18:31 - 000000000 ____D C:\Users\Avi\AppData\Roaming\Microsoft\Excel
2026-09-23 16:20 - 2026-04-21 23:11 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2026-09-23 16:20 - 2026-04-21 18:29 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2026-09-23 16:20 - 2026-04-21 18:29 - 000002039 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-09-23 16:20 - 2026-04-21 12:12 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-720174342-3053994144-4245047485-1002
2026-09-23 16:20 - 2026-04-21 12:12 - 000003546 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-720174342-3053994144-4245047485-1002
2026-09-23 16:20 - 2026-04-21 12:12 - 000000000 ___RD C:\Users\Avi\OneDrive
2026-09-23 16:20 - 2026-04-15 16:04 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-720174342-3053994144-4245047485-1001
2026-09-23 16:20 - 2026-04-15 16:04 - 000003546 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-720174342-3053994144-4245047485-1001
2026-09-22 11:21 - 2026-04-21 18:21 - 000000000 ____D C:\Program Files\Microsoft Office
2026-09-22 11:21 - 2026-04-21 12:10 - 000000000 __SHD C:\Users\Avi\IntelGraphicsProfiles
2026-09-22 11:21 - 2026-04-15 16:04 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-09-22 11:21 - 2026-04-15 16:03 - 000023506 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-09-22 11:21 - 2026-04-15 12:08 - 000000000 ____D C:\Intel
2026-09-22 11:21 - 2024-01-01 01:14 - 000012288 ___SH C:\DumpStack.log.tmp
2026-09-21 23:04 - 2024-04-01 09:21 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2026-09-20 17:28 - 2026-04-21 12:11 - 000000000 ____D C:\Users\Avi\AppData\Local\D3DSCache
2026-09-20 15:14 - 2024-01-01 01:14 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-09-20 03:53 - 2026-04-15 16:04 - 000003534 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-09-20 03:53 - 2026-04-15 16:04 - 000003462 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-09-18 12:36 - 2024-01-01 01:14 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-09-16 23:03 - 2026-04-21 12:10 - 000000000 ____D C:\Users\Avi
2026-09-16 19:38 - 2026-07-16 12:21 - 000000000 ____D C:\WINDOWS\Minidump
2026-09-16 19:38 - 2024-01-01 01:14 - 002412959 ____N C:\WINDOWS\Minidump\091626-15671-01.dmp
2026-09-15 13:43 - 2026-04-15 16:04 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2026-09-14 21:41 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\USOPrivate
2026-09-14 20:46 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-09-14 20:25 - 2026-04-15 16:01 - 003381760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-09-12 17:15 - 2026-04-15 12:22 - 000000000 ____D C:\Program Files (x86)\Google
2026-09-09 21:20 - 2026-04-15 15:58 - 000483528 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-09-09 21:19 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2026-09-09 21:19 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-09-09 21:19 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-09-09 21:19 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-09-09 21:19 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-09-09 21:19 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-09-09 21:18 - 2026-04-15 15:35 - 000000000 ____D C:\WINDOWS\system32\ruxim
2026-09-09 21:18 - 2026-04-15 15:35 - 000000000 ____D C:\WINDOWS\system32\NarratorMCAT
2026-09-09 21:18 - 2024-04-01 18:16 - 000000000 ____D C:\WINDOWS\InboxApps
2026-09-09 21:18 - 2024-04-01 18:16 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2026-09-09 21:18 - 2024-04-01 18:15 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-09-09 21:18 - 2024-04-01 18:15 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Provisioning
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\L2Schemas
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-09-09 21:18 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2026-09-09 12:22 - 2026-04-15 12:42 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-09-09 12:19 - 2026-04-15 12:42 - 230964456 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-09-08 15:46 - 2026-04-22 16:10 - 000000000 ____D C:\Users\Avi\AppData\Roaming\Microsoft\Word
2026-09-05 20:31 - 2026-04-21 12:42 - 000001055 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thunderbird.lnk
2026-09-03 21:58 - 2026-04-21 12:12 - 000000000 ____D C:\Users\Avi\AppData\Local\PlaceholderTileLogoFolder
2026-08-31 21:34 - 2024-01-01 01:21 - 000000000 ____D C:\ProgramData\Packages
2026-08-31 10:45 - 2026-04-21 12:45 - 000000000 ____D C:\Users\Avi\AppData\Local\Comms
2026-08-27 11:00 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\appcompat

==================== SigCheck ============================

(Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.)

==================== Einde van FRST.txt ========================

Code:

ATTFilter

Extra scanresultaten van Farbar Recovery Scan Tool (x64) Versie: 25-09-2026
Gestart door xxxx (25-09-2026 14:22:14)
Gestart vanaf C:\Users\xxxx\Desktop
Microsoft Windows 11 Pro Versie 25H2 26200.9457 (X64) (2026-04-15 14:04:23)
Boot Modus: Normal
==========================================================


==================== Accounts: =============================

(Als een item is opgenomen in de fixlist, zal het worden verwijderd.)

Administrator (S-1-5-21-720174342-3053994144-4245047485-500 - Administrators - Disabled)
Avi (S-1-5-21-720174342-3053994144-4245047485-1002 - Limited - Enabled) => C:\Users\Avi
DefaultAccount (S-1-5-21-720174342-3053994144-4245047485-503 - Limited - Disabled)
Gast (S-1-5-21-720174342-3053994144-4245047485-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-720174342-3053994144-4245047485-504 - Limited - Disabled)
xxxx (DisplayName: A** ***w)  (S-1-5-21-720174342-3053994144-4245047485-1001 - Administrators - Enabled) [MS Account] => C:\Users\xxxx

==================== Security Center ========================

(Als een item is opgenomen in de fixlist, zal het worden verwijderd.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Geïnstalleerde programma's ======================

(Alleen de adware-programma's met 'verborgen' vlag kunnen worden toegevoegd aan de fixlist om ze zichtbaar te maken. De adware-programma's moeten handmatig gedeïnstalleerd worden.)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 153.0.8010.54 - Google LLC)
KeePass Password Safe 2.61.1 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.61.1 - Dominik Reichl)
Microsoft 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 16.0.20326.20158 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 153.0.4234.48 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 153.0.4234.48 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 26.168.0830.0006 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{ACF2602E-BD31-4BE5-AC03-9C8FDB638ADA}) (Version: 4.75.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.50.35719 (HKLM\...\{AECD4ED0-8A3B-41E9-92D1-6BEE0374CCAF}) (Version: 14.50.35719 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.50.35719 (HKLM\...\{61B44572-8722-4DAF-8ACF-8E742D30BCC5}) (Version: 14.50.35719 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.50.35719 (HKLM-x32\...\{773AD50D-AAE6-4BA1-AD01-B5A38874C840}) (Version: 14.50.35719 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.50.35719 (HKLM-x32\...\{5A0DFA55-3851-45BC-8B20-95EA4BF5812D}) (Version: 14.50.35719 - Microsoft Corporation) Hidden
Microsoft Visual C++ v14 Redistributable (x64) - 14.50.35719 (HKLM-x32\...\{91ee571b-0e8a-4c65-9eaf-2e2f5fc60c00}) (Version: 14.50.35719.0 - Microsoft Corporation)
Microsoft Visual C++ v14 Redistributable (x86) - 14.50.35719 (HKLM-x32\...\{0e4ccf1b-d073-4cfe-8a24-e86185719b56}) (Version: 14.50.35719.0 - Microsoft Corporation)
Microsoft Windows Application Compatibility Fix Database (HKLM\...\{22221111-1111-1111-1111-111111111111}.sdb) (Version:  - )
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox) (Version: 156.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 149.0.2 - Mozilla)
Mozilla Thunderbird (x64 de) (HKLM\...\Mozilla Thunderbird 154.0 (x64 de)) (Version: 154.0 - Mozilla)
NimbusPDF (HKU\S-1-5-21-720174342-3053994144-4245047485-1002\...\NimbusPDF) (Version: 5.5.0.0 - NimbusPDF)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.20326.20072 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.20326.20100 - Microsoft Corporation) Hidden
OneBrowser (HKU\S-1-5-21-720174342-3053994144-4245047485-1002\...\OB) (Version: 137.0.7151.69 - OneBrowser) <==== AANDACHT
Pulse Browser (HKU\S-1-5-21-720174342-3053994144-4245047485-1002\...\PulseSoftware PulseBrowser) (Version: 149.0.7827.158 - Die Pulse Browser-Autoren)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 11.56 - Ghisler Software GmbH)
Update for x64-based Windows Systems (KB5001716) (HKLM\...\{DA80A019-4C3B-4DAA-ACA1-6937D7CAAF9E}) (Version: 8.94.0.0 - Microsoft Corporation)

Chrome apps:
============
Google Photos (HKU\S-1-5-21-720174342-3053994144-4245047485-1002\...\0eb83426972b3851e5119c68f5715bbd) (Version: 1.0 - Google\Chrome)

Packages:
=========
Intel® Grafik-Kontrollraum -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt [2026-04-15] (INTEL CORP) [Startup Task]
Local AI Manager for Microsoft 365 -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\AI [2026-09-25] ()
Microsoft Defender -> C:\Program Files\WindowsApps\Microsoft.6365217CE6EB4_102.2504.16004.0_x64__8wekyb3d8bbwe [2026-04-28] (Microsoft Corporation) [Startup Task]
Microsoft.Office.ActionsServer -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\ActionsServer [2026-09-25] ()
OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16 [2026-09-25] ()

==================== Aangepaste CLSID (gefilterd): ==============

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)

==================== Codecs (gefilterd) ====================

==================== Snelkoppelingen & WMI ========================

(De items kunnen worden opgenomen in de fixlist.txt om hersteld of verwijderd te worden.)

ShortcutWithArgument: C:\Users\xxxx\Desktop\Profiel 1 - Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation) -> --profile-directory="Default"

==================== Geladen Modules (gefilterd) =============

==================== Alternate Data Streams (gefilterd) ========

==================== Veilige Modus (gefilterd) ==================

==================== Bestandskoppeling (gefilterd) =================

==================== Internet Explorer (gefilterd) =============

BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2026-08-23] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts inhoud: =========================

(Indien nodig kan Hosts:-opdracht worden opgenomen in de fixlist om Hosts te resetten.)

2021-06-05 14:08 - 2021-06-05 14:08 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Network ===========================

(Momenteel is er geen automatische fix voor dit onderdeel.)

DNS Servers: 192.168.10.1
Windows Firewall is ingeschakeld.

Network Binding:
=============
Ethernet: Realtek PCIe GbE Family Controller -> rtcx21x64.sys
WLAN: Realtek 8822CE Wireless LAN 802.11ac PCI-E NIC -> rtwlane.sys
Bluetooth-Netzwerkverbindung: Bluetooth Device (Personal Area Network) -> bthpan.sys

==================== Andere gebieden ===========================

(Momenteel is er geen automatische fix voor dit onderdeel.)

HKU\S-1-5-21-720174342-3053994144-4245047485-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\xxxx\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalCache\Microsoft\IrisService\1109274652617376384\134213187077679456.jpg
HKU\S-1-5-21-720174342-3053994144-4245047485-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Avi\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalCache\Microsoft\IrisService\611387295679984388\134345744694638959.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)


==================== MSCONFIG/TASK MANAGER Uitgeschakelde items ==

==================== Firewall regels (gefilterd) ================

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

FirewallRules: [{D24F05E1-0EDE-41C1-9E28-013F4C1D6779}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{193B94B9-E5DD-4F88-8D72-BC11A32A013E}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{21B791F5-5022-45A1-8FDD-0B6A19393F1C}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{550BDC5D-C713-4E6E-BA1E-8DACACC617CE}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2609.44031.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{2474D3E1-B362-4053-A66B-B5D17E477839}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2609.44031.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F69DAE9C-F281-4585-ACE6-0CCFBCBC772C}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2609.44031.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{053B602D-3E90-4C98-A604-35B1E3C6A92A}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2609.44031.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{FBFD9987-0C01-4B02-B05A-4BA833568D56}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Herstelpunten =========================

18-09-2026 12:24:26 Windows Update
22-09-2026 11:22:27 Microsoft Visual C++ v14 Redistributable (x64) - 14.50.35719

==================== Defecte Apparaatbeheer Apparaten ============
Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI-Datensammlungs- und Signalverarbeitungscontroller
Description: PCI-Datensammlungs- und Signalverarbeitungscontroller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI-Gerät
Description: PCI-Gerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI-Gerät
Description: PCI-Gerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI-Gerät
Description: PCI-Gerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Basissystemgerät
Description: Basissystemgerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI-Gerät
Description: PCI-Gerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI-Gerät
Description: PCI-Gerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI-Gerät
Description: PCI-Gerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI-Gerät
Description: PCI-Gerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI-Gerät
Description: PCI-Gerät
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI-Kommunikationscontroller (einfach)
Description: PCI-Kommunikationscontroller (einfach)
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Eventlog fouten: ========================

Applicatiefouten:
==================
Error: (09/25/2026 12:55:16 PM) (Source: Firefox Default Browser Agent) (EventID: 5) (User: )
Description: Event-ID 5

Error: (09/25/2026 07:34:22 AM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005.  Prozess-ID (dezimal): 14184. Meldungs-ID: [0x2509].

Error: (09/25/2026 01:32:18 AM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005.  Prozess-ID (dezimal): 14264. Meldungs-ID: [0x2509].

Error: (09/24/2026 03:03:15 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005.  Prozess-ID (dezimal): 19680. Meldungs-ID: [0x2509].

Error: (09/24/2026 05:37:45 AM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005.  Prozess-ID (dezimal): 10932. Meldungs-ID: [0x2509].

Error: (09/23/2026 01:22:08 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Die Speicheroptimierung konnte Defragmentierung auf (D:) nicht abschließen. Grund: Das Dirty Bit wird auf diesem Volume festgelegt. (0x89000015)

Error: (09/23/2026 04:30:11 AM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005.  Prozess-ID (dezimal): 4384. Meldungs-ID: [0x2509].

Error: (09/22/2026 12:25:14 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005.  Prozess-ID (dezimal): 16372. Meldungs-ID: [0x2509].


Systeemfouten:
=============
Error: (09/25/2026 09:40:50 AM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3502) (User: NT-AUTORITÄT)
Description: Fehler beim Aufheben der Gerätetrennung (Entkoppelung).

Error: (09/25/2026 09:40:48 AM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3502) (User: NT-AUTORITÄT)
Description: Fehler beim Aufheben der Gerätetrennung (Entkoppelung).

Error: (09/25/2026 09:39:57 AM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3502) (User: NT-AUTORITÄT)
Description: Fehler beim Aufheben der Gerätetrennung (Entkoppelung).

Error: (09/25/2026 09:39:56 AM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3502) (User: NT-AUTORITÄT)
Description: Fehler beim Aufheben der Gerätetrennung (Entkoppelung).

Error: (09/25/2026 09:16:55 AM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3502) (User: NT-AUTORITÄT)
Description: Fehler beim Aufheben der Gerätetrennung (Entkoppelung).

Error: (09/25/2026 09:16:54 AM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3502) (User: NT-AUTORITÄT)
Description: Fehler beim Aufheben der Gerätetrennung (Entkoppelung).

Error: (09/25/2026 09:11:30 AM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3502) (User: NT-AUTORITÄT)
Description: Fehler beim Aufheben der Gerätetrennung (Entkoppelung).

Error: (09/25/2026 09:11:29 AM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3502) (User: NT-AUTORITÄT)
Description: Fehler beim Aufheben der Gerätetrennung (Entkoppelung).

Error: (09/13/2026 06:33:39 PM) (Source: disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (09/12/2026 09:39:39 PM) (Source: disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR4 gefunden.

Error: (09/12/2026 06:25:26 PM) (Source: disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.


Windows Defender:
================
TimeCreated : 9/25/2026 12:59:38 PM
Message     : Microsoft Defender Antivirus şςáи ђдš ьзέñ ŝтöρφėđ вęƒöřè ĉόмφℓέŧïòň.%ñ %τŞ¢аπ 
ĨĐ:%ъ{7D427987-C8AD-41E6-A69F-9400BAB4C8D9}%и %тЅ¢âл Ţỳре:%ъAntimalware%ⁿ %ţŞçăл 
Ραґämёťêřѕ:%ъSchnellüberprüfung%ⁿ  %τŲśêя:%вNT-AUTORITÄT\SYSTEM%й %τЅťθр Ѓεăŝŏŉ:%вŜçђеðυłèð ŝĉąň ẅаş 
ŝкìρрèđ ь℮ĉãùşë ŧĥ℮ ŀаѕт ѕû¢ĉ℮ѕšƒŭĺ ѕςáл щāš щīŧħіŉ ťћę ℓαŝτ 7 ðàÿş

TimeCreated : 9/24/2026 12:12:38 PM
Message     : Microsoft Defender Antivirus şςáи ђдš ьзέñ ŝтöρφėđ вęƒöřè ĉόмφℓέŧïòň.%ñ %τŞ¢аπ 
ĨĐ:%ъ{E14F956E-A965-4129-B7F5-71E4A3EB7370}%и %тЅ¢âл Ţỳре:%ъAntimalware%ⁿ %ţŞçăл 
Ραґämёťêřѕ:%ъSchnellüberprüfung%ⁿ  %τŲśêя:%вNT-AUTORITÄT\SYSTEM%й %τЅťθр Ѓεăŝŏŉ:%вŜçђеðυłèð ŝĉąň ẅаş 
ŝкìρрèđ ь℮ĉãùşë ŧĥ℮ ŀаѕт ѕû¢ĉ℮ѕšƒŭĺ ѕςáл щāš щīŧħіŉ ťћę ℓαŝτ 7 ðàÿş

TimeCreated : 9/23/2026 12:47:09 PM
Message     : Microsoft Defender Antivirus şςáи ђдš ьзέñ ŝтöρφėđ вęƒöřè ĉόмφℓέŧïòň.%ñ %τŞ¢аπ 
ĨĐ:%ъ{90AE9231-F37D-4B82-AB5D-C35893ABC707}%и %тЅ¢âл Ţỳре:%ъAntimalware%ⁿ %ţŞçăл 
Ραґämёťêřѕ:%ъSchnellüberprüfung%ⁿ  %τŲśêя:%вNT-AUTORITÄT\SYSTEM%й %τЅťθр Ѓεăŝŏŉ:%вŜçђеðυłèð ŝĉąň ẅаş 
ŝкìρрèđ ь℮ĉãùşë ŧĥ℮ ŀаѕт ѕû¢ĉ℮ѕšƒŭĺ ѕςáл щāš щīŧħіŉ ťћę ℓαŝτ 7 ðàÿş

TimeCreated : 9/22/2026 12:49:46 PM
Message     : Microsoft Defender Antivirus şςáи ђдš ьзέñ ŝтöρφėđ вęƒöřè ĉόмφℓέŧïòň.%ñ %τŞ¢аπ 
ĨĐ:%ъ{9FD57E14-6A8D-4490-94C0-0C927F228970}%и %тЅ¢âл Ţỳре:%ъAntimalware%ⁿ %ţŞçăл 
Ραґämёťêřѕ:%ъSchnellüberprüfung%ⁿ  %τŲśêя:%вNT-AUTORITÄT\SYSTEM%й %τЅťθр Ѓεăŝŏŉ:%вҐРĈ ĉоⁿŋёćťìθń гΰηďőωл

TimeCreated : 9/21/2026 12:25:49 PM
Message     : Microsoft Defender Antivirus şςáи ђдš ьзέñ ŝтöρφėđ вęƒöřè ĉόмφℓέŧïòň.%ñ %τŞ¢аπ 
ĨĐ:%ъ{C1D77AA7-A502-40C9-8DC8-A5441AA4826F}%и %тЅ¢âл Ţỳре:%ъAntimalware%ⁿ %ţŞçăл 
Ραґämёťêřѕ:%ъSchnellüberprüfung%ⁿ  %τŲśêя:%вNT-AUTORITÄT\SYSTEM%й %τЅťθр Ѓεăŝŏŉ:%вҐРĈ ĉоⁿŋёćťìθń гΰηďőωл

TimeCreated : 9/21/2026 12:16:05 PM
Message     : Microsoft Defender Antivirus şςáи ђдš ьзέñ ŝтöρφėđ вęƒöřè ĉόмφℓέŧïòň.%ñ %τŞ¢аπ 
ĨĐ:%ъ{01304154-4C09-4F48-87A6-B67A2DF1C59A}%и %тЅ¢âл Ţỳре:%ъAntimalware%ⁿ %ţŞçăл 
Ραґämёťêřѕ:%ъSchnellüberprüfung%ⁿ  %τŲśêя:%вNT-AUTORITÄT\SYSTEM%й %τЅťθр Ѓεăŝŏŉ:%вҐРĈ ĉоⁿŋёćťìθń гΰηďőωл

TimeCreated : 9/20/2026 12:22:12 PM
Message     : Microsoft Defender Antivirus şςáи ђдš ьзέñ ŝтöρφėđ вęƒöřè ĉόмφℓέŧïòň.%ñ %τŞ¢аπ 
ĨĐ:%ъ{CDCFAD25-D9E2-4A90-9CBA-0F7C72CDC71A}%и %тЅ¢âл Ţỳре:%ъAntimalware%ⁿ %ţŞçăл 
Ραґämёťêřѕ:%ъSchnellüberprüfung%ⁿ  %τŲśêя:%вNT-AUTORITÄT\SYSTEM%й %τЅťθр Ѓεăŝŏŉ:%вŜçђеðυłèð ŝĉąň ẅаş 
ŝкìρрèđ ь℮ĉãùşë ŧĥ℮ ŀаѕт ѕû¢ĉ℮ѕšƒŭĺ ѕςáл щāš щīŧħіŉ ťћę ℓαŝτ 7 ðàÿş

TimeCreated : 9/14/2026 2:19:46 PM
Message     : Microsoft Defender Antivirus şςáи ђдš ьзέñ ŝтöρφėđ вęƒöřè ĉόмφℓέŧïòň.%ñ %τŞ¢аπ 
ĨĐ:%ъ{1FBC6152-572E-432C-B25B-8C76BAAACAE3}%и %тЅ¢âл Ţỳре:%ъAntimalware%ⁿ %ţŞçăл 
Ραґämёťêřѕ:%ъSchnellüberprüfung%ⁿ  %τŲśêя:%вNT-AUTORITÄT\SYSTEM%й %τЅťθр Ѓεăŝŏŉ:%вŜčђέđüľёď ş¢àń ẅаѕ 
ѕкĭφρëð ъєċαџšέ ŧнë ĺáśţ šцċçëšѕƒųℓ śčάñ ŵãѕ ẃìŧĥϊй ťħё ℓαşт 7 ďάỳş


CodeIntegrity:
===============
Date: 2026-09-25 14:10:12
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\DefenderSessionHelper.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

________________________________

M-K-D-B · 25.09.2026, 18:23

Mein Name ist Matthias und ich werde dir bei der Analyse und Bereinigung deines Systems helfen.

Dein System ist mit Adware / PUP infiziert.

Schritt 1
Führe AdwCleaner gemäß der bebilderten Anleitung aus und poste abschließend die Logdatei.

Schritt 2
Führe Malwarebytes' AntiMalware (MBAM) gemäß der bebilderten Anleitung aus und poste abschließend die Logdatei.

Avloew · 26.09.2026, 19:21

herzlichen Dank für Ihre Hilfe

# -------------------------------
# Malwarebytes AdwCleaner 8.8.1.639
# -------------------------------
# Build: 05-13-2026
# Database: 2026-09-25.3 (Cloud)
# Support: https://help.malwarebytes.com/
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 09-26-2026
# Duration: 00:00:08
# OS: Windows 11 (Build 26200.9457)
# Scanned: 32081
# Detected: 0

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries found.

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.

***** [ Hosts File Entries ] *****

No malicious hosts file entries found.

***** [ Preinstalled Software ] *****

No Preinstalled Software found.

AdwCleaner[S00].txt - [1826 octets] - [26/09/2026 19:09:04]
AdwCleaner[C00].txt - [1940 octets] - [26/09/2026 19:10:07]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S01].txt ##########

Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Scan-Datum: 26.09.2026
Scan-Zeit: 19:51
Protokolldatei: e8d02fd8-b9d2-11f1-8514-202410080518.json

-Softwaredaten-
Version: 5.7.1.346
Komponentenversion: 165.0.5751
Version des Aktualisierungspakets: 1.0.115019
Lizenz: Testversion

-Systemdaten-
Betriebssystem: Windows 11 (Build 26200.9457)
CPU: x64
Dateisystem: NTFS
Benutzer: DESKTOP-7UO7M50\xxxx

-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Scan gestartet von: Manuell
Ergebnis: Abgeschlossen
Gescannte Objekte: 196.398
Erkannte Bedrohungen: 50
In die Quarantäne verschobene Bedrohungen: 50
Scandauer: 3 Min., 4 Sek.

-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Erkennung
PUM: Erkennung

-Scan-Details-
Prozess: 1
PUP.Optional.OBBrowser, C:\USERS\AVI\APPDATA\LOCAL\OB\ONEBUPDATE\ONEBUPDATESERVICE.EXE, In Quarantäne, 8453, 1419448, 1.0.115019, , ame, , A0E15DCD6918A1B367F0FBA6B5EAC069, A4C8A47853734C4796F6DEE296640B30B1140113ECE41E07CAEDAB8C351CF776

Modul: 6
PUP.Optional.PulseBrowser, C:\USERS\AVI\APPDATA\LOCAL\PULSESOFTWARE\PULSEBROWSER\APPLICATION\149.0.7827.158\PULSEBROWSER.DLL, In Quarantäne, 6967, 1371567, 1.0.115019, , ame, , ,
PUP.Optional.PulseBrowser, C:\USERS\AVI\APPDATA\LOCAL\PULSESOFTWARE\PULSEBROWSER\APPLICATION\149.0.7827.158\PULSEBROWSER.DLL, In Quarantäne, 6967, 1371567, 1.0.115019, , ame, , ,
PUP.Optional.PulseBrowser, C:\USERS\AVI\APPDATA\LOCAL\PULSESOFTWARE\PULSEBROWSER\APPLICATION\149.0.7827.158\PULSEBROWSER.DLL, In Quarantäne, 6967, 1371567, 1.0.115019, , ame, , ,
PUP.Optional.PulseBrowser, C:\USERS\AVI\APPDATA\LOCAL\PULSESOFTWARE\PULSEBROWSER\APPLICATION\149.0.7827.158\PULSEBROWSER.DLL, In Quarantäne, 6967, 1371567, 1.0.115019, , ame, , ,
PUP.Optional.PulseBrowser, C:\USERS\AVI\APPDATA\LOCAL\PULSESOFTWARE\PULSEBROWSER\APPLICATION\149.0.7827.158\PULSEBROWSER.DLL, In Quarantäne, 6967, 1371567, 1.0.115019, , ame, , ,
PUP.Optional.OBBrowser, C:\USERS\AVI\APPDATA\LOCAL\OB\ONEBUPDATE\ONEBUPDATESERVICE.EXE, In Quarantäne, 8453, 1419448, 1.0.115019, , ame, , A0E15DCD6918A1B367F0FBA6B5EAC069, A4C8A47853734C4796F6DEE296640B30B1140113ECE41E07CAEDAB8C351CF776

Registrierungsschlüssel: 9
PUP.Optional.PulseBrowser, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\PulseSoftware\PulseBrowserUpdater\PulseBrowserUpdaterTaskUser135.0.7049.101{90B905BE-9FD9-4876-9D26-7A1AA0351B97}, In Quarantäne, 6967, 1432078, 1.0.115019, , ame, , ,
PUP.Optional.PulseBrowser, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{04D8A3B2-85F7-4031-B04F-0552A058A4C6}, In Quarantäne, 6967, 1432078, 1.0.115019, , ame, , ,
PUP.Optional.PulseBrowser, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\LOGON\{04D8A3B2-85F7-4031-B04F-0552A058A4C6}, In Quarantäne, 6967, 1432078, 1.0.115019, , ame, , ,
PUP.Optional.PulseBrowser, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\PulseSoftware\PulseBrowserStartupS-1-5-21-720174342-3053994144-4245047485-1002, In Quarantäne, 6967, 1432078, 1.0.115019, , ame, , ,
PUP.Optional.PulseBrowser, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{1D1EA1DD-A1B7-46D4-88E5-A1952A48D68F}, In Quarantäne, 6967, 1432078, 1.0.115019, , ame, , ,
PUP.Optional.PulseBrowser, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\LOGON\{1D1EA1DD-A1B7-46D4-88E5-A1952A48D68F}, In Quarantäne, 6967, 1432078, 1.0.115019, , ame, , ,
PUP.Optional.OBBrowser, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\OneBUpdate, In Quarantäne, 8453, 1419448, 1.0.115019, , ame, , ,
PUP.Optional.OBBrowser, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{F46095EA-F1F7-404B-82D8-09FDC0EFD29C}, In Quarantäne, 8453, 1419448, 1.0.115019, , ame, , ,
PUP.Optional.OBBrowser, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{F46095EA-F1F7-404B-82D8-09FDC0EFD29C}, In Quarantäne, 8453, 1419448, 1.0.115019, , ame, , ,

Registrierungswert: 1
PUP.Optional.PulseBrowser, HKU\S-1-5-21-720174342-3053994144-4245047485-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|PulseBrowserUpdaterTaskUser135.0.7049.101, In Quarantäne, 6967, 1403720, 1.0.115019, , ame, , ,

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Daten-Stream: 0
(keine bösartigen Elemente erkannt)

Ordner: 5
PUP.Optional.OBBrowser.SDP, C:\USERS\AVI\APPDATA\LOCAL\OB, In Quarantäne, 8455, 1419451, 1.0.115019, , ame, , ,
PUP.Optional.PulseBrowser, C:\USERS\AVI\APPDATA\LOCAL\PULSESOFTWARE, In Quarantäne, 6967, 1432077, 1.0.115019, , ame, , ,
PUP.Optional.PulseBrowser, C:\WINDOWS\SYSTEM32\TASKS\PULSESOFTWARE, In Quarantäne, 6967, 1432078, 1.0.115019, , ame, , ,
PUP.Optional.PulseBrowser, C:\Windows\System32\Tasks\PulseSoftware\PulseBrowserUpdater, In Quarantäne, 6967, 1432078, 1.0.115019, , ame, , ,
PUP.Optional.BrowserHijack, C:\USERS\AVI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\LevelDB, In Quarantäne, 6854, 1380721, 1.0.115019, , ame, , ,

Datei: 28
PUP.Optional.OBBrowser.SDP, C:\USERS\AVI\APPDATA\LOCAL\OB\APPLICATION\OneBrowser.exe, In Quarantäne, 8455, 1419451, 1.0.115019, , ame, , 98C6370611A3F131FD7D7A56B6D4E33E, FEC95BA8075AAFC0CE71C25A566A472821EDD8B8E7CC32960A881992CE7AE957
PUP.Optional.OBBrowser.SDP, C:\USERS\AVI\APPDATA\ROAMING\Microsoft\Windows\Start Menu\Programs\OneBrowser.lnk, In Quarantäne, 8455, 1419451, 1.0.115019, , ame, , 81BF40C13824302626FEC28E9A3D51CF, C0D777B3D896E6FD7228DD4D29FD308E26F0FC0C2B23F48D8AFFEEEA8F15BC43
PUP.Optional.PulseBrowser, C:\Windows\System32\Tasks\PulseSoftware\PulseBrowserUpdater\PulseBrowserUpdaterTaskUser135.0.7049.101{90B905BE-9FD9-4876-9D26-7A1AA0351B97}, In Quarantäne, 6967, 1432078, 1.0.115019, , ame, , 9C6B1DF0AE9410F23FF76E4178C4E03C, F13B77976154DE41FE9B600F6BE5FCBEF140FF89211F34CB78DC4D50F21858C1
PUP.Optional.PulseBrowser, C:\Windows\System32\Tasks\PulseSoftware\PulseBrowserStartupS-1-5-21-720174342-3053994144-4245047485-1002, In Quarantäne, 6967, 1432078, 1.0.115019, , ame, , DB7275CAB46BEA321B548EDFF4BB9AD0, 24942535B7E7EEFEF9EB04EE207FA11E8B8C660C2016EC5D9DFE835A1F28C2F6
PUP.Optional.PulseBrowser, C:\USERS\AVI\APPDATA\LOCAL\PULSESOFTWARE\PULSEBROWSER\USER DATA\DEFAULT\EXTENSIONS\DDOMLCJNBFAKINIHJHDNABIODNIKOMHM\2.6_0\BACKGROUND.JS, In Quarantäne, 6967, 1371635, 1.0.115019, , ame, , D0FE1CE44BDD1E5F7F1E882F9466A656, 84A409A1A6D56405E0F32E26B0C464FE27AD0AA75A39E896201503E6B0B944B3
PUP.Optional.PulseBrowser, C:\USERS\AVI\APPDATA\LOCAL\PULSESOFTWARE\PULSEBROWSER\APPLICATION\149.0.7827.158\PULSEBROWSER.DLL, In Quarantäne, 6967, 1371567, 1.0.115019, , ame, , 2B3B95604DA61141F83EB7B3E76C9EB2, F746FA4EE566B12F025A5BE40B4CAB64E31978A3C076822C491CF33418B3D538
PUP.Optional.OBBrowser, C:\USERS\AVI\APPDATA\LOCAL\OB\ONEBUPDATE\ONEBUPDATESERVICE.EXE, In Quarantäne, 8453, 1419448, 1.0.115019, , ame, , A0E15DCD6918A1B367F0FBA6B5EAC069, A4C8A47853734C4796F6DEE296640B30B1140113ECE41E07CAEDAB8C351CF776
PUP.Optional.OBBrowser, C:\WINDOWS\SYSTEM32\TASKS\OneBUpdate, In Quarantäne, 8453, 1419448, 1.0.115019, , ame, , 770C689D34E639280A0DC5F5797963B5, D96C5A675F86C63B4F9469F3A6612339FA74CE0C327AA4BC51CDA66177654EEE
PUP.Optional.PulseBrowser, C:\USERS\AVI\APPDATA\LOCAL\PULSESOFTWARE\PULSEBROWSERUPDATER\135.0.7049.101\UPDATER.EXE, In Quarantäne, 6967, 1403720, 1.0.115019, , ame, , EBA3BC65E15CEF7AA7F21C7309B2FB63, A8EC63229A801901D83120E5E108CBF01D70C21D05C4E5288F54FF80591944C6
PUP.Optional.PulseBrowser, C:\$RECYCLE.BIN\S-1-5-21-720174342-3053994144-4245047485-1002\$RR5VOD2.EXE, In Quarantäne, 6967, 1390524, 1.0.115019, , ame, , D65C7B544A97B0C3F2773B5FCC57D30E, 540080FEA97D88ED902C5E4F9A026B4FCD32AB263706C520E00728F1A29578B8
PUP.Optional.PulseBrowser, C:\$RECYCLE.BIN\S-1-5-21-720174342-3053994144-4245047485-1002\$RWL7R5V.EXE, In Quarantäne, 6967, 1390524, 1.0.115019, , ame, , D65C7B544A97B0C3F2773B5FCC57D30E, 540080FEA97D88ED902C5E4F9A026B4FCD32AB263706C520E00728F1A29578B8
PUP.Optional.OBBrowser, C:\USERS\AVI\APPDATA\LOCAL\OB\APPLICATION\ONEBROWSER.EXE, In Quarantäne, 8453, 1419448, 1.0.115019, , ame, , 98C6370611A3F131FD7D7A56B6D4E33E, FEC95BA8075AAFC0CE71C25A566A472821EDD8B8E7CC32960A881992CE7AE957
PUP.Optional.PulseBrowser, C:\$RECYCLE.BIN\S-1-5-21-720174342-3053994144-4245047485-1002\$RWVDV59.EXE, In Quarantäne, 6967, 1390524, 1.0.115019, , ame, , D65C7B544A97B0C3F2773B5FCC57D30E, 540080FEA97D88ED902C5E4F9A026B4FCD32AB263706C520E00728F1A29578B8
PUP.Optional.OBBrowser, C:\USERS\AVI\APPDATA\LOCAL\OB\APPLICATION\CHROME_PROXY.EXE, In Quarantäne, 8453, 1419448, 1.0.115019, , ame, , 1C2AF17F94182A30E54A0AB085245672, 66F52182E935EC861D03104230297C67C8733524DCF92B91C863E6CE12B71796
Trojan.MediaArena, C:\USERS\AVI\DOWNLOADS\PDFCONVERTSETUP_309461.EXE, In Quarantäne, 7474, 1432049, 1.0.115019, , ame, , D78D5FB1E60BD5348AE87FF7017A5D58, 77598F237F58AF01518E5B6DF77537DE9B79208794BBE0645685FD681765D772
Trojan.MediaArena, C:\USERS\AVI\DOWNLOADS\PDFCONVERTSETUP_887428.EXE, In Quarantäne, 7474, 1432049, 1.0.115019, , ame, , D78D5FB1E60BD5348AE87FF7017A5D58, 77598F237F58AF01518E5B6DF77537DE9B79208794BBE0645685FD681765D772
PUP.Optional.BrowserHijack, C:\USERS\AVI\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, Ersetzt, 6854, 1380721, 1.0.115019, , ame, , ,
PUP.Optional.BrowserHijack, C:\Users\Avi\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000005.ldb, In Quarantäne, 6854, 1380721, 1.0.115019, , ame, , 2F910D963FAE17EA25AF6945FE459F35, F66FA3CB79F115D05AB031F9757E94AF9F201A0B6465B92F4C79009C5A9343C6
PUP.Optional.BrowserHijack, C:\Users\Avi\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000021.ldb, In Quarantäne, 6854, 1380721, 1.0.115019, , ame, , C8496B495F60DEEF7F5FFE6A24922CEC, 88C2A99595294F95BAFFB71CF85F0C093AE5F92041F2D3C8B888E0CF691440D3
PUP.Optional.BrowserHijack, C:\Users\Avi\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000023.log, In Quarantäne, 6854, 1380721, 1.0.115019, , ame, , ,
PUP.Optional.BrowserHijack, C:\Users\Avi\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000024.ldb, In Quarantäne, 6854, 1380721, 1.0.115019, , ame, , 7C92E83BB7F2B1B5A157116BF6C0C9EE, 04EAB7E24D29B59154C8972E0DB38FD6A5CE18299E5E18986DF527EE01B171FB
PUP.Optional.BrowserHijack, C:\Users\Avi\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\CURRENT, In Quarantäne, 6854, 1380721, 1.0.115019, , ame, , 46295CAC801E5D4857D09837238A6394, 0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
PUP.Optional.BrowserHijack, C:\Users\Avi\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOCK, In Quarantäne, 6854, 1380721, 1.0.115019, , ame, , ,
PUP.Optional.BrowserHijack, C:\Users\Avi\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG, In Quarantäne, 6854, 1380721, 1.0.115019, , ame, , ,
PUP.Optional.BrowserHijack, C:\Users\Avi\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG.old, In Quarantäne, 6854, 1380721, 1.0.115019, , ame, , A791AE6BDB37DCF6BFB8E3FB51079068, 88913723AEBF8FB1AE4EE9A68E8196DC86C88D1B8C22C35E1D4EF3B2116B1AF1
PUP.Optional.BrowserHijack, C:\Users\Avi\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\MANIFEST-000001, In Quarantäne, 6854, 1380721, 1.0.115019, , ame, , ,
Trojan.MediaArena, C:\USERS\AVI\DOWNLOADS\PDFCONVERTSETUP_406654.EXE, In Quarantäne, 7474, 1432049, 1.0.115019, , ame, , D78D5FB1E60BD5348AE87FF7017A5D58, 77598F237F58AF01518E5B6DF77537DE9B79208794BBE0645685FD681765D772
PUP.Optional.BundleInstaller, C:\USERS\AVI\DOWNLOADS\VLC MEDIA PLAYER 3.0.22 RC2 DEUTSCH - CHIP INSTALLER _ENOGT.EXE, In Quarantäne, 71, 1367328, 1.0.115019, , ame, , 49AEEF9FCA98082A8E5722F530C0B3D0, 7D831037EA0ED99D5839082277FDEC869FDD4160EED0B1776192E7C7F42A37BB

Physischer Sektor: 0
(keine bösartigen Elemente erkannt)

WMI: 0
(keine bösartigen Elemente erkannt)

(end)

M-K-D-B · 26.09.2026, 20:44

Gut gemacht.

Wir führen noch zwei Suchläufe mit FRST zur Kontrolle aus. Damit können wir noch Überreste der Adware/PUP aufspühren.

Schritt 1: FRST-Scan

Starte FRST erneut und klicke auf Untersuchen.
FRST erstellt nun zwei Logdateien (FRST.txt und Addition.txt).
Poste mir beide Logdateien mit deiner nächsten Antwort.

Schritt 2. FRST-Spezialsuche

Starte FRST.
Markiere den gesamten Inhalt der folgenden Code-Box mit der Maus und kopiere ihn (gleichzeitiges Drücken der beiden Tasten "STRG" + "C"):
Code:
ATTFilter
```
SearchAll: Pulse Browser;PulseBrowser;PulseSoftware;OneBrowser;OneBUpdate
         
```
Füge den Inhalt bei FRST oben in das Suchfeld ein (gleichzeitiges Drücken der beiden Tasten "STRG" + "V").
Klicke auf den Button Datei-Suche.
FRST beginnt mit dem Suchlauf. Das kann einige Zeit dauern, bitte gedulde dich!
Am Ende wird eine Textdatei Search.txt erstellt.
Poste mir deren Inhalt mit deiner nächsten Antwort.

Avloew · 27.09.2026, 16:39

Scanresultaten van Farbar Recovery Scan Tool (FRST) (x64) Versie: 26-09-2026
Gestart door xxxx (Beheerder) op DESKTOP-7UO7M50 (DEFAULT STRING DEFAULT STRING) (27-09-2026 16:36:00)
Gestart vanaf C:\Users\xxxx\Desktop\FRST64.exe
Geladen Profielen: xxxx & Avi
Platform: Microsoft Windows 11 Pro Versie 25H2 26200.9457 (X64) Taal: Niederländisch (Niederlande) -> Deutsch (Deutschland)
Standaardbrowser: Chrome
Boot Modus: Normal

==================== Processen (gefilterd) =================

(Als een item is opgenomen in de fixlist, zal het proces worden gesloten. Het bestand zal niet worden verplaatst.)

(C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\154.0.4258.37\identity_helper.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe <2>
(C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2636.100.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\153.0.4234.48\msedgewebview2.exe
(C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.21100.40.0_x64__cw5n1h2txyewy\WidgetBoard.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\153.0.4234.48\msedgewebview2.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_bdd49bbe6b990549\igfxCUIServiceN.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_bdd49bbe6b990549\igfxEMN.exe <2>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\26.168.0830.0006\OneDrive.Sync.Service.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe <2>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <4>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\153.0.4234.48\msedgewebview2.exe <21>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\26.168.0830.0006\OneDrive.Sync.Service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_bdd49bbe6b990549\igfxCUIServiceN.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_5b51a286c5d2f192\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_65ac4d73bb85cb27\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d51901c26227fb29\WMIRegistrationService.exe
(services.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncHelper.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(sihost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2636.100.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe
(sihost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.6365217CE6EB4_102.2504.16004.0_x64__8wekyb3d8bbwe\MicrosoftSecurityApp\MicrosoftSecurityApp.exe
(sihost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2609.52011.0_x64__8wekyb3d8bbwe\m365copilot_autostarter.exe <2>
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileCoAuth.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.380.2.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AppActions.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\amd64\MoUsoCoreWorker.exe
(winlogon.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\LogonUI.exe

==================== Register (gefilterd) ===================

(Als een item is opgenomen in de fixlist, zal het registeritem worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.)

HKLM\...\Run: [KeePass 2 PreLoad] => C:\Program Files\KeePass Password Safe 2\KeePass.exe [3265880 2026-05-01] (Open Source Developer, Dominik Reichl -> Dominik Reichl)
HKLM\...\RunOnce: [msedge_cleanup_{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}] => C:\Program Files (x86)\Microsoft\Edge\Application\154.0.4258.37\Installer\setup.exe [5957960 2026-09-26] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-720174342-3053994144-4245047485-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4756840 2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-720174342-3053994144-4245047485-1002\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4756840 2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-720174342-3053994144-4245047485-1002\...\Run: [Microsoft.Lists] => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\OneDrive.Sync.Service.exe [967528 2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-720174342-3053994144-4245047485-1002\...\Run: [MicrosoftEdgeAutoLaunch_E9668399593D9418202A6A14E62927B5] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [5403976 2026-09-24] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Windows x64\Print Processors\Canon TR4700 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDHL.DLL [543744 2021-07-11] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ FAX Language Monitor TR4700 series: C:\WINDOWS\system32\CNCALHL.DLL [266752 2021-03-24] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor TR4700 series: C:\WINDOWS\system32\CNMLMHL.DLL [989184 2021-07-11] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4924568 2026-08-11] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\153.0.8010.54\Installer\chrmstp.exe [8030872 2026-09-24] (Google LLC -> Google LLC)

==================== Geplande Taken (gefilterd) =================

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

Task: {A1818583-6748-466E-BF36-382A278B24A4} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem156.0.8067.0{6084B7CD-BBAF-4303-9388-A243A5554625} => C:\Program Files (x86)\Google\GoogleUpdater\156.0.8067.0\updater.exe [9992344 2026-09-21] (Google LLC -> Google LLC)
Task: {DB9B7F29-C0F4-471A-B1F1-BCFA8F05454C} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ActionsServer\ActionsServer.exe [16470400 2026-09-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {A49B97C6-6FF2-4149-92FB-1612E0A16ED4} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28440976 2026-09-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {3074B11E-C6AC-44C2-A9D3-776CBF825715} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\opushutil.exe [69984 2026-09-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {05CD1DD8-E104-4E97-ACAB-FC62D4C491E6} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28440976 2026-09-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {FEEC8C07-4164-4C10-9F4F-569A1B1FE320} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [426352 2026-09-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {50D01334-1023-48F9-A745-229B25C2A917} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [426352 2026-09-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {089973E0-70BF-421C-B7BF-5BF193D7E1C1} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [1328920 2026-08-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {2003DE6A-DD7B-4940-968C-018A746C00DF} - System32\Tasks\Microsoft\Office\Office Startup Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ActionsServer\ActionsServer.exe [16470400 2026-09-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {C885B7DB-DB6B-45F6-8EA1-F8B919E23D1C} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (Geen bestand)
Task: {FBDF7F36-4B6A-4FD6-B138-7A7010D82603} - System32\Tasks\Microsoft\Windows\PI\SecureBootEncodeUEFI => %WINDIR%\system32\SecureBootEncodeUEFI.exe (Geen bestand)
Task: {EEC49C91-BCB0-4E42-BEA6-CB620E01EB5F} - System32\Tasks\Microsoft\Windows\UNP\RunUpdateNotificationMgr => %windir%\System32\UNP\UpdateNotificationMgr.exe (Geen bestand)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (Geen bestand)
Task: {6462339D-2DE6-45D0-BDC4-E85C09BA59D5} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-720174342-3053994144-4245047485-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [1079424 2026-09-25] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (de data item heeft 6 meer tekens).
Task: {569EC90A-5499-4FFF-AB15-0B72EB8A2BF3} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-720174342-3053994144-4245047485-1002 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [1079424 2026-09-25] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (de data item heeft 6 meer tekens).
Task: {61437EE8-036C-4937-851E-09B3C38EE610} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [44160 2026-09-25] (Mozilla Corporation -> Mozilla Foundation)
Task: {BE898A6F-E989-42A2-8DC5-D42CE1BF448B} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4409744 2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {039A580A-D7C3-41D8-8DD4-7B637584C717} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-720174342-3053994144-4245047485-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4409744 2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {52A7F5B2-66FB-4F94-979E-99DAADA3C91D} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-720174342-3053994144-4245047485-1002 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4409744 2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {09CAE655-FE75-4742-9376-AE36E9DD6787} - System32\Tasks\OneDrive Startup Task-S-1-5-21-720174342-3053994144-4245047485-1001 => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\OneDriveLauncher.exe [866192 2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {BF2D235B-27CE-4BC4-A2BB-875ED03C42FA} - System32\Tasks\OneDrive Startup Task-S-1-5-21-720174342-3053994144-4245047485-1002 => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\OneDriveLauncher.exe [866192 2026-09-23] (Microsoft Corporation -> Microsoft Corporation)

(Als een item is opgenomen in de fixlist, wordt de taak (job) bestand verplaatst. Het bestand dat wordt uitgevoerd door de taak zal niet worden verplaatst.)

==================== Internet (gefilterd) ====================

(Als een item is opgenomen in de fixlist en een registeritem is, wordt het verwijderd of hersteld naar de standaard.)

Tcpip\Parameters: [DhcpNameServer] 192.168.10.1
Tcpip\..\Interfaces\{7786a279-fc7f-4bd0-b9c6-12cee5554e3c}: [DhcpNameServer] 192.168.10.1
Tcpip\..\Interfaces\{7786a279-fc7f-4bd0-b9c6-12cee5554e3c}: [DhcpDomain] fritz.box

FireFox:
========
FF TaskBarID: 35565CD3A3E82193 -> C:\Users\xxxx\AppData\Local\Mozilla Firefox
FF TaskBarID: 308046B0AF4A39CB -> C:\Program Files\Mozilla Firefox
FF DefaultProfile: i5ay6gwk.default-release -> 308046B0AF4A39CB
FF ProfilePath: C:\Users\xxxx\AppData\Roaming\Mozilla\Firefox\Profiles\nrwbdzd9.default [2026-04-15]
FF ProfilePath: C:\Users\xxxx\AppData\Roaming\Mozilla\Firefox\Profiles\i5ay6gwk.default-release [2026-04-22]
FF Homepage: Mozilla\Firefox\Profiles\i5ay6gwk.default-release -> Google
FF Extension: (New Tab) - C:\Users\xxxx\AppData\Roaming\Mozilla\Firefox\Profiles\i5ay6gwk.default-release\Extensions\newtab@mozilla.org.xpi [2026-04-15]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation)

Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\xxxx\AppData\Local\Microsoft\Edge\User Data\Default [2026-04-22]
Edge Extension: (Google Docs Offline) - C:\Users\xxxx\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-04-22]
Edge Extension: (Edge relevant text changes) - C:\Users\xxxx\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2026-04-22]
Edge Profile: C:\Users\xxxx\AppData\Local\Microsoft\Edge\User Data\Profile 1 [2026-04-22]
Edge Extension: (Google Docs Offline) - C:\Users\xxxx\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-04-15]
Edge Extension: (Edge relevant text changes) - C:\Users\xxxx\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2026-04-15]

Chrome:
=======
CHR Profile: C:\Users\xxxx\AppData\Local\Google\Chrome\User Data\Default [2026-09-27]
CHR DownloadDir: C:\Users\xxxx\Desktop
CHR Extension: (Google Docs Offline) - C:\Users\xxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-09-25]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\xxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2026-04-15]

==================== Services (gefilterd) ===================

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13372816 2026-09-15] (Microsoft Corporation -> Microsoft Corporation)
R3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncHelper.exe [3800424 2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [11667696 2026-09-26] (Malwarebytes Inc -> Malwarebytes)
S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [4291576 2026-09-26] (Malwarebytes Inc -> Malwarebytes)
S3 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpDefenderCoreService.exe [2307776 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\26.168.0830.0006\OneDriveUpdaterService.exe [4098960 2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [914752 2026-09-09] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\NisSrv.exe [5311776 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MsMpEng.exe [291360 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (gefilterd) ===================

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [598016 2026-04-15] (Microsoft Corporation) [Bestand niet getekend]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [212992 2026-04-15] (Microsoft Corporation) [Bestand niet getekend]
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [114688 2026-04-15] (Microsoft Corporation) [Bestand niet getekend]
R1 ESProtectionDriver; \??\C:\WINDOWS\system32\drivers\mbae.sys [159296 2026-09-26] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [83008 2026-09-04] (Microsoft Windows -> Microsoft Corporation)
R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [235624 2026-09-26] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [22120 2026-09-26] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\System32\Drivers\farflt11.sys [217192 2026-09-26] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\System32\Drivers\mbam.sys [133224 2026-09-27] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [245864 2026-09-26] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMWebProtection; \??\C:\WINDOWS\system32\DRIVERS\mwac.sys [190096 2026-09-27] (Malwarebytes Inc -> )
R3 rtcx21; C:\WINDOWS\System32\DriverStore\FileRepository\rtcx21x64.inf_amd64_feec7a9662e785f0\rtcx21x64.sys [539648 2024-03-28] (Microsoft Windows -> Realtek)
S4 WdAiNisDrv; C:\WINDOWS\System32\drivers\wd\WdAiNisDrv.sys [51264 2026-09-18] (Microsoft Windows -> Microsoft Corporation)
S3 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21632 2026-09-18] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [664592 2026-09-18] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [137240 2026-09-18] (Microsoft Windows -> Microsoft Corporation)
R3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2026-04-15] (Microsoft Windows -> Microsoft Corporation)
R3 WSDScan; C:\WINDOWS\System32\DriverStore\FileRepository\sti.inf_amd64_8ce330c68e1a560b\WSDScan.sys [61440 2026-09-09] (Microsoft Windows -> Microsoft Corporation)

==================== SvcHost (gefilterd) ===================

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

==================== Een maand (aangemaakt) (gefilterd) =========

(Als een item is opgenomen in de fixlist, wordt de map of het bestand verplaatst.)

2026-09-27 16:36 - 2026-09-27 16:37 - 000021695 _____ C:\Users\xxxx\Desktop\FRST.txt
2026-09-27 16:34 - 2026-09-27 16:34 - 000000000 ____D C:\Users\xxxx\Desktop\FRST-OlderVersion
2026-09-27 16:15 - 2026-09-27 16:15 - 000787094 _____ C:\WINDOWS\system32\perfh013.dat
2026-09-27 16:15 - 2026-09-27 16:15 - 000734214 _____ C:\WINDOWS\system32\perfh007.dat
2026-09-27 16:15 - 2026-09-27 16:15 - 000161738 _____ C:\WINDOWS\system32\perfc013.dat
2026-09-27 16:15 - 2026-09-27 16:15 - 000158294 _____ C:\WINDOWS\system32\perfc007.dat
2026-09-27 16:11 - 2026-09-27 16:11 - 000000000 ____D C:\Users\Avi\AppData\LocalLow\IGDump
2026-09-27 16:10 - 2026-09-27 16:10 - 000190096 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2026-09-26 21:10 - 2026-09-26 21:10 - 000004690 _____ C:\Users\Avi\Downloads\invoice2026-09-26_21-10-32.pdf
2026-09-26 21:08 - 2026-09-26 21:08 - 000004633 _____ C:\Users\Avi\Downloads\invoice2026-09-26_21-07-59.pdf
2026-09-26 20:32 - 2026-09-26 20:32 - 000000000 ____D C:\Users\Avi\AppData\Local\Sentry
2026-09-26 20:13 - 2026-09-26 20:13 - 000001538 _____ C:\Users\xxxx\Desktop\AdwCleaner[S01].txt
2026-09-26 20:05 - 2026-09-26 20:05 - 000012096 _____ C:\Users\xxxx\Desktop\Malwarebytes Bedrohungsscan-Bericht 2026-09-26 195132.txt
2026-09-26 19:44 - 2026-09-27 16:16 - 000000000 ____D C:\Users\Avi\AppData\Local\Malwarebytes
2026-09-26 19:33 - 2026-09-27 16:16 - 000000000 ____D C:\Users\xxxx\AppData\Local\Malwarebytes
2026-09-26 19:33 - 2026-09-26 19:33 - 000002093 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2026-09-26 19:33 - 2026-09-26 19:33 - 000002081 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2026-09-26 19:33 - 2026-09-26 19:33 - 000000000 ____D C:\Users\xxxx\AppData\Local\Sentry
2026-09-26 19:32 - 2026-09-26 19:32 - 000000000 ____D C:\ProgramData\Malwarebytes
2026-09-26 19:32 - 2026-09-26 19:32 - 000000000 ____D C:\Program Files\Malwarebytes
2026-09-26 19:28 - 2026-09-26 19:28 - 002886560 _____ (Malwarebytes) C:\Users\xxxx\Desktop\MBSetup-7.7.exe
2026-09-26 18:58 - 2026-09-26 19:10 - 000000000 ____D C:\AdwCleaner
2026-09-26 18:54 - 2026-09-26 20:08 - 009630992 _____ (Malwarebytes) C:\Users\xxxx\Desktop\adwcleaner.exe
2026-09-25 22:35 - 2026-09-25 22:35 - 000218208 _____ C:\Users\Avi\Downloads\receipt_b74897a7-6a5b-48a0-a5ea-a76cf0ecedd5.pdf
2026-09-25 14:29 - 2026-09-25 14:24 - 000034343 _____ C:\Users\Avi\Documents\Addition.txt
2026-09-25 14:29 - 2026-09-25 14:22 - 000041512 _____ C:\Users\Avi\Documents\FRST.txt
2026-09-25 14:18 - 2026-09-27 16:36 - 000000000 ____D C:\FRST
2026-09-25 14:14 - 2026-09-27 16:34 - 002455552 _____ (Farbar) C:\Users\xxxx\Desktop\FRST64.exe
2026-09-25 14:11 - 2026-09-25 14:11 - 000004036 _____ C:\WINDOWS\system32\Tasks\PostponeDeviceSetupToast_S-1-5-21-720174342-3053994144-4245047485-1001_0
2026-09-25 14:10 - 2026-09-25 14:10 - 000000000 ____D C:\Users\xxxx\AppData\Local\WindowsOobeAppHost
2026-09-25 09:07 - 2026-09-25 09:07 - 000004706 _____ C:\Users\Avi\Downloads\invoice2026-09-25_09-07-11.pdf
2026-09-25 09:05 - 2026-09-25 09:05 - 000004699 _____ C:\Users\Avi\Downloads\invoice2026-09-25_09-05-53.pdf
2026-09-25 04:43 - 2026-09-26 19:59 - 000000000 ____D C:\Program Files\Mozilla Firefox
2026-09-23 16:35 - 2026-09-27 16:25 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-09-23 09:24 - 2026-09-23 09:24 - 000004683 _____ C:\Users\Avi\Downloads\invoice2026-09-23_09-24-34.pdf
2026-09-23 09:23 - 2026-09-23 09:23 - 000004704 _____ C:\Users\Avi\Downloads\invoice2026-09-23_09-23-20.pdf
2026-09-22 15:01 - 2026-09-22 15:01 - 000838005 _____ C:\Users\Avi\Downloads\invoice2026-09-22_15-01-48.pdf
2026-09-21 22:36 - 2026-09-21 22:36 - 000005464 _____ C:\Users\Avi\Downloads\invoice2026-09-21_22-36-39.pdf
2026-09-20 19:19 - 2026-09-20 19:19 - 000004696 _____ C:\Users\Avi\Downloads\invoice2026-09-20_19-19-35.pdf
2026-09-20 19:19 - 2026-09-20 19:19 - 000004696 _____ C:\Users\Avi\Downloads\invoice2026-09-20_19-19-15.pdf
2026-09-18 20:51 - 2026-09-18 20:51 - 000838020 _____ C:\Users\Avi\Downloads\invoice2026-09-18_20-51-51.pdf
2026-09-16 12:45 - 2026-09-16 12:45 - 000004691 _____ C:\Users\Avi\Downloads\invoice2026-09-16_12-45-43.pdf
2026-09-15 14:06 - 2026-09-15 14:06 - 000004784 _____ C:\Users\Avi\Downloads\invoice2026-09-15_14-06-24.pdf
2026-09-15 13:45 - 2026-09-15 13:45 - 000004686 _____ C:\Users\Avi\Downloads\invoice2026-09-15_13-45-09.pdf
2026-09-14 22:37 - 2026-09-14 09:48 - 000019437 _____ C:\Users\Avi\Downloads\Appia Contract GmbH Rg.2026-103549 - Kopie.pdf
2026-09-14 22:37 - 2026-09-14 09:48 - 000019437 _____ C:\Users\Avi\Downloads\Appia Contract GmbH Rg.2026-103549 - Kopie (2).pdf
2026-09-14 22:37 - 2026-09-13 22:02 - 000838055 _____ C:\Users\Avi\Downloads\invoice2026-09-13_22-02-54 - Kopie.pdf
2026-09-14 22:37 - 2026-09-13 22:02 - 000838055 _____ C:\Users\Avi\Downloads\invoice2026-09-13_22-02-54 - Kopie (2).pdf
2026-09-14 22:37 - 2026-09-13 22:02 - 000838055 _____ C:\Users\Avi\Downloads\invoice2026-09-13_22-02-30 - Kopie.pdf
2026-09-14 22:37 - 2026-09-13 22:02 - 000838055 _____ C:\Users\Avi\Downloads\invoice2026-09-13_22-02-30 - Kopie (2).pdf
2026-09-14 22:37 - 2026-09-04 16:23 - 000004784 _____ C:\Users\Avi\Downloads\invoice2026-09-04_16-23-50 - Kopie.pdf
2026-09-14 22:37 - 2026-09-04 16:23 - 000004784 _____ C:\Users\Avi\Downloads\invoice2026-09-04_16-23-50 - Kopie (2).pdf
2026-09-14 22:37 - 2026-08-19 15:39 - 000196299 _____ C:\Users\Avi\Downloads\RECHNUNG Nr. 10353826 19.08.26 KABEL Sugar and Glory € 89,87 bez. 26.08.26.pdf
2026-09-14 22:37 - 2026-08-19 15:39 - 000196299 _____ C:\Users\Avi\Downloads\RECHNUNG Nr. 10353826 19.08.26 KABEL Sugar and Glory € 89,87 bez. 26.08.26 - Kopie.pdf
2026-09-14 22:37 - 2026-07-27 15:40 - 000198118 _____ C:\Users\Avi\Downloads\RECHNUNG Nr#10348626, 16.07.26 , KABEL SERAX, BE € 1194,00 bez. 27.07.26.pdf
2026-09-14 22:37 - 2026-07-27 15:40 - 000198118 _____ C:\Users\Avi\Downloads\RECHNUNG Nr#10348626, 16.07.26 , KABEL SERAX, BE € 1194,00 bez. 27.07.26 - Kopie.pdf
2026-09-14 09:48 - 2026-09-14 09:48 - 000019437 _____ C:\Users\Avi\Downloads\Appia Contract GmbH Rg.2026-103549.pdf
2026-09-13 22:02 - 2026-09-13 22:02 - 000838055 _____ C:\Users\Avi\Downloads\invoice2026-09-13_22-02-54.pdf
2026-09-13 22:02 - 2026-09-13 22:02 - 000838055 _____ C:\Users\Avi\Downloads\invoice2026-09-13_22-02-30.pdf
2026-09-12 18:24 - 2026-09-12 18:24 - 000000000 ____D C:\WINDOWS\Microsoft Antimalware
2026-09-12 17:17 - 2026-09-25 01:32 - 000002239 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-09-12 17:17 - 2026-09-25 01:32 - 000002198 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2026-09-12 17:17 - 2026-09-12 17:17 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleUserPEH
2026-09-12 17:16 - 2026-09-12 17:16 - 000000000 ____D C:\Program Files\Google
2026-09-12 17:15 - 2026-09-12 17:15 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleSystem
2026-09-12 17:14 - 2026-09-12 17:14 - 012411832 _____ (Google LLC) C:\Users\Avi\Downloads\ChromeSetup.exe
2026-09-12 17:06 - 2026-09-12 17:06 - 000000000 ____D C:\Users\Avi\AppData\Local\WindowsOobeAppHost
2026-09-12 16:30 - 2026-09-22 11:25 - 000000000 ____D C:\Users\Avi\AppData\Roaming\KeePass
2026-09-12 16:27 - 2026-09-12 16:27 - 000000963 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeePass 2.lnk
2026-09-12 16:27 - 2026-09-12 16:27 - 000000000 ____D C:\Program Files\KeePass Password Safe 2
2026-09-11 20:25 - 2026-09-11 20:25 - 000073754 _____ C:\Users\Avi\Downloads\DOF-2609117EALZ9Y9MXQB-0054032971.pdf
2026-09-11 15:04 - 2026-09-11 15:04 - 000066342 _____ C:\Users\Avi\Downloads\DHL-Paketmarke_PAKCE64NKHMX_Craig_Walker____.pdf
2026-09-11 13:09 - 2026-09-11 13:09 - 000222837 _____ C:\Users\Avi\Downloads\Gescannt_20260911-1255 Wohnen 13.07.25-07.04.26.pdf
2026-09-11 11:34 - 2026-08-31 21:23 - 000838039 _____ C:\Users\Avi\Downloads\invoice2026-08-31_21-23-38.pdf
2026-09-11 11:34 - 2026-08-31 15:04 - 000004785 _____ C:\Users\Avi\Downloads\invoice2026-08-31_15-04-45.pdf
2026-09-11 11:34 - 2026-08-10 11:40 - 000004636 _____ C:\Users\Avi\Downloads\invoice2026-08-10_11-40-25.pdf
2026-09-11 11:34 - 2026-08-05 11:49 - 000004730 _____ C:\Users\Avi\Downloads\invoice2026-08-05_11-49-35.pdf
2026-09-11 11:34 - 2026-07-31 11:53 - 000005203 _____ C:\Users\Avi\Downloads\invoice2026-07-31_11-53-36.pdf
2026-09-11 11:34 - 2026-07-20 10:21 - 000004693 _____ C:\Users\Avi\Downloads\invoice2026-07-20_10-21-04.pdf
2026-09-11 11:31 - 2026-09-11 11:31 - 001097791 _____ C:\Users\Avi\Downloads\Nachrichten _ eBay.html
2026-09-11 11:31 - 2026-09-11 11:31 - 000000000 ____D C:\Users\Avi\Downloads\Nachrichten _ eBay_files
2026-09-10 11:48 - 2026-09-26 20:28 - 000001607 _____ C:\WINDOWS\system32\config\VSMIDK
2026-09-09 12:27 - 2026-09-09 12:27 - 000004646 _____ C:\WINDOWS\system32\ResPriUHMImageList
2026-09-09 12:27 - 2026-09-09 12:27 - 000004646 _____ C:\WINDOWS\system32\ResPriLMImageList
2026-09-09 12:27 - 2026-09-09 12:27 - 000004646 _____ C:\WINDOWS\system32\ResPriImageList
2026-09-09 12:27 - 2026-09-09 12:27 - 000004646 _____ C:\WINDOWS\system32\ResPriHMImageList
2026-09-09 12:27 - 2026-09-09 12:27 - 000004555 _____ C:\WINDOWS\system32\ResPriImageListLowCost
2026-09-09 12:27 - 2026-09-09 12:27 - 000004555 _____ C:\WINDOWS\system32\ResPriHMImageListLowCost
2026-09-09 12:26 - 2026-09-09 12:26 - 000039215 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-09-09 12:26 - 2026-09-09 12:26 - 000039215 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-09-09 12:25 - 2026-09-09 12:25 - 000014689 _____ C:\WINDOWS\system32\ecoscore_config.json
2026-09-04 20:33 - 2026-09-04 20:33 - 000030655 _____ C:\Users\Avi\Downloads\2026-9-3-RG.pdf
2026-09-04 20:33 - 2026-09-04 20:33 - 000030655 _____ C:\Users\Avi\Downloads\2026-9-3-RG (1).pdf
2026-09-04 16:23 - 2026-09-04 16:23 - 000004784 _____ C:\Users\Avi\Downloads\invoice2026-09-04_16-23-50.pdf
2026-09-04 12:33 - 2026-09-04 12:52 - 2520774203 _____ C:\Users\Avi\Downloads\4_BEWEISVIDEO.MOV
2026-09-03 22:59 - 2026-09-03 22:59 - 000004022 _____ C:\Users\Avi\Downloads\packingslip2026-09-03_22-59-45.pdf
2026-09-03 22:57 - 2026-09-03 22:57 - 000004787 _____ C:\Users\Avi\Downloads\invoice2026-09-03_22-57-22.pdf
2026-09-03 21:58 - 2026-09-03 21:58 - 000002657 _____ C:\Users\Avi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pulse Browser.lnk
2026-09-03 20:46 - 2026-09-03 20:46 - 002443800 _____ C:\Users\Avi\Downloads\IMG_9335.pdf
2026-09-01 22:40 - 2026-09-01 22:40 - 000004429 _____ C:\Users\Avi\Downloads\packingslip2026-09-01_22-40-53.pdf
2026-09-01 22:22 - 2026-09-01 22:22 - 000005464 _____ C:\Users\Avi\Downloads\invoice2026-09-01_22-22-11.pdf
2026-09-01 12:28 - 2026-09-01 12:28 - 000003897 _____ C:\Users\Avi\Downloads\packingslip2026-09-01_12-28-35.pdf
2026-09-01 12:26 - 2026-09-01 12:26 - 000004692 _____ C:\Users\Avi\Downloads\invoice2026-09-01_12-26-50.pdf
2026-09-01 11:33 - 2026-09-01 11:33 - 000003954 _____ C:\Users\Avi\Downloads\packingslip2026-09-01_11-33-39.pdf
2026-09-01 11:31 - 2026-09-01 11:31 - 000004716 _____ C:\Users\Avi\Downloads\invoice2026-09-01_11-31-15.pdf
2026-08-31 21:27 - 2026-08-31 21:27 - 000837294 _____ C:\Users\Avi\Downloads\packingslip2026-08-31_21-27-17.pdf
2026-08-31 21:26 - 2026-08-31 21:26 - 000838039 _____ C:\Users\Avi\Downloads\invoice2026-08-31_21-26-42.pdf
2026-08-31 21:26 - 2026-08-31 21:26 - 000837294 _____ C:\Users\Avi\Downloads\packingslip2026-08-31_21-26-16.pdf
2026-08-31 12:56 - 2026-08-31 12:56 - 000000000 ____D C:\Users\Avi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView
2026-08-31 12:56 - 2026-08-31 12:56 - 000000000 ____D C:\Users\Avi\AppData\Roaming\IrfanView
2026-08-30 19:18 - 2026-08-30 19:18 - 000004716 _____ C:\Users\Avi\Downloads\invoice2026-08-30_19-18-28.pdf
2026-08-29 21:57 - 2026-08-29 21:57 - 000013175 _____ C:\Users\Avi\Downloads\loewinst_elster_29.08.2026_21.54.pfx
2026-08-28 13:05 - 2026-08-28 13:05 - 000154162 _____ C:\Users\Avi\Downloads\Verkaufsschild-VWTransporterT52ClangeVersion_-_10479630643258272470.pdf

==================== Een maand (gewijzigd) ==================

(Als een item is opgenomen in de fixlist, wordt de map of het bestand verplaatst.)

2026-09-27 16:25 - 2026-04-21 12:11 - 000000000 ____D C:\Users\Avi\AppData\Local\D3DSCache
2026-09-27 16:25 - 2026-04-15 15:58 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-09-27 16:24 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-09-27 16:15 - 2026-04-15 16:04 - 002666788 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-09-27 16:15 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-09-27 16:15 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2026-09-27 16:12 - 2026-04-21 12:12 - 000000000 ___RD C:\Users\Avi\OneDrive
2026-09-27 16:12 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-09-27 16:12 - 2024-01-01 01:59 - 000000000 ___RD C:\Users\xxxx\OneDrive
2026-09-27 16:11 - 2026-04-15 12:08 - 000000000 __SHD C:\Users\xxxx\IntelGraphicsProfiles
2026-09-27 16:10 - 2026-04-21 12:10 - 000000000 __SHD C:\Users\Avi\IntelGraphicsProfiles
2026-09-27 16:10 - 2026-04-15 16:04 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-09-27 16:10 - 2026-04-15 16:03 - 000023944 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-09-27 16:10 - 2026-04-15 12:08 - 000000000 ____D C:\Intel
2026-09-27 16:10 - 2024-01-01 01:14 - 000012288 ___SH C:\DumpStack.log.tmp
2026-09-27 16:09 - 2024-04-01 09:21 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2026-09-27 02:12 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-09-27 01:38 - 2024-01-01 01:14 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-09-26 22:16 - 2026-04-21 18:31 - 000000000 ____D C:\Users\Avi\AppData\Roaming\Microsoft\Excel
2026-09-26 21:47 - 2024-01-01 01:21 - 000000000 ____D C:\Users\xxxx\AppData\Local\D3DSCache
2026-09-26 21:04 - 2026-04-21 20:39 - 000000000 ____D C:\Users\Avi\AppData\Roaming\Microsoft\Outlook
2026-09-26 19:59 - 2026-04-21 23:11 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2026-09-26 19:59 - 2026-04-15 12:19 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2026-09-26 19:33 - 2026-04-21 12:10 - 000000000 ____D C:\Users\Avi\AppData\Local\Packages
2026-09-26 19:33 - 2024-04-01 09:26 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2026-09-26 19:33 - 2024-01-01 01:21 - 000000000 ____D C:\ProgramData\Packages
2026-09-26 19:33 - 2024-01-01 01:20 - 000000000 ____D C:\Users\xxxx\AppData\Local\Packages
2026-09-25 22:51 - 2026-04-22 16:10 - 000000000 ____D C:\Users\Avi\AppData\Roaming\Microsoft\Word
2026-09-25 22:49 - 2026-04-15 12:19 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2026-09-25 12:55 - 2026-08-26 12:22 - 000002125 _____ C:\Users\Avi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-09-25 12:55 - 2026-04-15 12:19 - 000001065 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-09-23 16:20 - 2026-04-21 18:29 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2026-09-23 16:20 - 2026-04-21 18:29 - 000002039 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-09-23 16:20 - 2026-04-21 12:12 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-720174342-3053994144-4245047485-1002
2026-09-23 16:20 - 2026-04-21 12:12 - 000003546 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-720174342-3053994144-4245047485-1002
2026-09-23 16:20 - 2026-04-15 16:04 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-720174342-3053994144-4245047485-1001
2026-09-23 16:20 - 2026-04-15 16:04 - 000003546 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-720174342-3053994144-4245047485-1001
2026-09-22 11:21 - 2026-04-21 18:21 - 000000000 ____D C:\Program Files\Microsoft Office
2026-09-20 03:53 - 2026-04-15 16:04 - 000003534 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-09-20 03:53 - 2026-04-15 16:04 - 000003462 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-09-18 12:36 - 2024-01-01 01:14 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-09-16 23:03 - 2026-04-21 12:10 - 000000000 ____D C:\Users\Avi
2026-09-16 19:38 - 2026-07-16 12:21 - 000000000 ____D C:\WINDOWS\Minidump
2026-09-16 19:38 - 2024-01-01 01:14 - 002412959 ____N C:\WINDOWS\Minidump\091626-15671-01.dmp
2026-09-15 13:43 - 2026-04-15 16:04 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2026-09-14 21:41 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\USOPrivate
2026-09-14 20:46 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-09-14 20:25 - 2026-04-15 16:01 - 003381760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-09-12 17:15 - 2026-04-15 12:22 - 000000000 ____D C:\Program Files (x86)\Google
2026-09-09 21:20 - 2026-04-15 15:58 - 000483528 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-09-09 21:19 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2026-09-09 21:19 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-09-09 21:19 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-09-09 21:19 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-09-09 21:19 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-09-09 21:19 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-09-09 21:18 - 2026-04-15 15:35 - 000000000 ____D C:\WINDOWS\system32\ruxim
2026-09-09 21:18 - 2026-04-15 15:35 - 000000000 ____D C:\WINDOWS\system32\NarratorMCAT
2026-09-09 21:18 - 2024-04-01 18:16 - 000000000 ____D C:\WINDOWS\InboxApps
2026-09-09 21:18 - 2024-04-01 18:16 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2026-09-09 21:18 - 2024-04-01 18:15 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-09-09 21:18 - 2024-04-01 18:15 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Provisioning
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\L2Schemas
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-09-09 21:18 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2026-09-09 12:22 - 2026-04-15 12:42 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-09-09 12:19 - 2026-04-15 12:42 - 230964456 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-09-05 20:44 - 2026-08-27 21:36 - 000000000 ____D C:\Program Files\Mozilla Thunderbird
2026-09-05 20:31 - 2026-04-21 12:42 - 000001055 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thunderbird.lnk
2026-09-03 21:58 - 2026-04-21 12:12 - 000000000 ____D C:\Users\Avi\AppData\Local\PlaceholderTileLogoFolder
2026-08-31 10:45 - 2026-04-21 12:45 - 000000000 ____D C:\Users\Avi\AppData\Local\Comms

==================== SigCheck ============================

(Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.)

==================== Einde van FRST.txt ========================

Extra scanresultaten van Farbar Recovery Scan Tool (x64) Versie: 26-09-2026
Gestart door xxxx (27-09-2026 16:39:22)
Gestart vanaf C:\Users\xxxx\Desktop
Microsoft Windows 11 Pro Versie 25H2 26200.9457 (X64) (2026-04-15 14:04:23)
Boot Modus: Normal
==========================================================

==================== Accounts: =============================

(Als een item is opgenomen in de fixlist, zal het worden verwijderd.)

Administrator (S-1-5-21-720174342-3053994144-4245047485-500 - Administrators - Disabled)
Avi (S-1-5-21-720174342-3053994144-4245047485-1002 - Limited - Enabled) => C:\Users\Avi
DefaultAccount (S-1-5-21-720174342-3053994144-4245047485-503 - Limited - Disabled)
Gast (S-1-5-21-720174342-3053994144-4245047485-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-720174342-3053994144-4245047485-504 - Limited - Disabled)
xxxx (DisplayName: A** ***w) (S-1-5-21-720174342-3053994144-4245047485-1001 - Administrators - Enabled) [MS Account] => C:\Users\xxxx

==================== Security Center ========================

(Als een item is opgenomen in de fixlist, zal het worden verwijderd.)

AV: Malwarebytes (Enabled - Up to date) {A537353A-1D6A-F6B5-9153-CE1CF80FBE66}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Geïnstalleerde programma's ======================

(Alleen de adware-programma's met 'verborgen' vlag kunnen worden toegevoegd aan de fixlist om ze zichtbaar te maken. De adware-programma's moeten handmatig gedeïnstalleerd worden.)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 153.0.8010.54 - Google LLC)
KeePass Password Safe 2.61.1 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.61.1 - Dominik Reichl)
Malwarebytes version 5.7.1.346 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.7.1.346 - Malwarebytes)
Microsoft 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 16.0.20326.20158 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 154.0.4258.37 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 153.0.4234.48 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 26.168.0830.0006 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{ACF2602E-BD31-4BE5-AC03-9C8FDB638ADA}) (Version: 4.75.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.50.35719 (HKLM\...\{AECD4ED0-8A3B-41E9-92D1-6BEE0374CCAF}) (Version: 14.50.35719 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.50.35719 (HKLM\...\{61B44572-8722-4DAF-8ACF-8E742D30BCC5}) (Version: 14.50.35719 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.50.35719 (HKLM-x32\...\{773AD50D-AAE6-4BA1-AD01-B5A38874C840}) (Version: 14.50.35719 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.50.35719 (HKLM-x32\...\{5A0DFA55-3851-45BC-8B20-95EA4BF5812D}) (Version: 14.50.35719 - Microsoft Corporation) Hidden
Microsoft Visual C++ v14 Redistributable (x64) - 14.50.35719 (HKLM-x32\...\{91ee571b-0e8a-4c65-9eaf-2e2f5fc60c00}) (Version: 14.50.35719.0 - Microsoft Corporation)
Microsoft Visual C++ v14 Redistributable (x86) - 14.50.35719 (HKLM-x32\...\{0e4ccf1b-d073-4cfe-8a24-e86185719b56}) (Version: 14.50.35719.0 - Microsoft Corporation)
Microsoft Windows Application Compatibility Fix Database (HKLM\...\{22221111-1111-1111-1111-111111111111}.sdb) (Version: - )
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox) (Version: 156.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 149.0.2 - Mozilla)
Mozilla Thunderbird (x64 de) (HKLM\...\Mozilla Thunderbird 154.0 (x64 de)) (Version: 154.0 - Mozilla)
NimbusPDF (HKU\S-1-5-21-720174342-3053994144-4245047485-1002\...\NimbusPDF) (Version: 5.5.0.0 - NimbusPDF)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.20326.20072 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.20326.20100 - Microsoft Corporation) Hidden
Pulse Browser (HKU\S-1-5-21-720174342-3053994144-4245047485-1002\...\PulseSoftware PulseBrowser) (Version: 149.0.7827.158 - Die Pulse Browser-Autoren)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 11.56 - Ghisler Software GmbH)
Update for x64-based Windows Systems (KB5001716) (HKLM\...\{DA80A019-4C3B-4DAA-ACA1-6937D7CAAF9E}) (Version: 8.94.0.0 - Microsoft Corporation)

Chrome apps:
============
Google Photos (HKU\S-1-5-21-720174342-3053994144-4245047485-1002\...\0eb83426972b3851e5119c68f5715bbd) (Version: 1.0 - Google\Chrome)

Packages:
=========
Intel® Grafik-Kontrollraum -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt [2026-04-15] (INTEL CORP) [Startup Task]
Local AI Manager for Microsoft 365 -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\AI [2026-09-25] ()
Malwarebytes Anti-Malware -> C:\Program Files\Malwarebytes\Anti-Malware [2026-09-26] ()
Microsoft Defender -> C:\Program Files\WindowsApps\Microsoft.6365217CE6EB4_102.2504.16004.0_x64__8wekyb3d8bbwe [2026-04-28] (Microsoft Corporation) [Startup Task]
Microsoft.Office.ActionsServer -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\ActionsServer [2026-09-25] ()
OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16 [2026-09-25] ()

==================== Aangepaste CLSID (gefilterd): ==============

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

CustomCLSID: HKU\S-1-5-21-720174342-3053994144-4245047485-1002_Classes\CLSID\{0EC63402-A762-59E6-8094-42CCD06D5224}\localserver32 -> "C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe" --server --service=update-internal => Geen bestand
CustomCLSID: HKU\S-1-5-21-720174342-3053994144-4245047485-1002_Classes\CLSID\{12834C7A-80F3-4459-AD52-7D8DE4248D61}\InprocServer32 -> C:\Program Files\Mozilla Thunderbird\notificationserver.dll (Mozilla Corporation -> Mozilla Foundation)
CustomCLSID: HKU\S-1-5-21-720174342-3053994144-4245047485-1002_Classes\CLSID\{4DAC24AB-B340-4B7E-AD01-1504A7F59EEA}\localserver32 -> "C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe" --server --service=update => Geen bestand
CustomCLSID: HKU\S-1-5-21-720174342-3053994144-4245047485-1002_Classes\CLSID\{75828ED1-7BE8-45D0-8950-AA85CBF74510}\localserver32 -> "C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe" --server --service=update => Geen bestand
CustomCLSID: HKU\S-1-5-21-720174342-3053994144-4245047485-1002_Classes\CLSID\{7D1C7D75-8411-5A64-8662-FC1D7EEC17B2}\localserver32 -> "C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe" --server --service=update => Geen bestand
CustomCLSID: HKU\S-1-5-21-720174342-3053994144-4245047485-1002_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-09-26] (Malwarebytes Inc -> Malwarebytes)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-09-26] (Malwarebytes Inc -> Malwarebytes)

==================== Codecs (gefilterd) ====================

==================== Snelkoppelingen & WMI ========================

(De items kunnen worden opgenomen in de fixlist.txt om hersteld of verwijderd te worden.)

ShortcutWithArgument: C:\Users\xxxx\Desktop\Profiel 1 - Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation) -> --profile-directory="Default"

==================== Geladen Modules (gefilterd) =============

==================== Alternate Data Streams (gefilterd) ========

(Als een item is opgenomen in de fixlist, wordt alleen de ADS verwijderd.)

AlternateDataStreams: C:\Users\xxxx\Desktop\adwcleaner.exe:MBAM.Zone.Identifier [282]

==================== Veilige Modus (gefilterd) ==================

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. De waarde van "AlternateShell" wordt hersteld.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Bestandskoppeling (gefilterd) =================

==================== Internet Explorer (gefilterd) =============

BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2026-08-23] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts inhoud: =========================

(Indien nodig kan Hosts:-opdracht worden opgenomen in de fixlist om Hosts te resetten.)

2021-06-05 14:08 - 2021-06-05 14:08 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Network ===========================

(Momenteel is er geen automatische fix voor dit onderdeel.)

DNS Servers: 192.168.10.1
Windows Firewall is ingeschakeld.

Network Binding:
=============
Ethernet: Realtek PCIe GbE Family Controller -> rtcx21x64.sys
WLAN: Realtek 8822CE Wireless LAN 802.11ac PCI-E NIC -> rtwlane.sys
Bluetooth-Netzwerkverbindung: Bluetooth Device (Personal Area Network) -> bthpan.sys

==================== Andere gebieden ===========================

(Momenteel is er geen automatische fix voor dit onderdeel.)

HKU\S-1-5-21-720174342-3053994144-4245047485-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\DesktopSpotlight\Assets\Images\image_2.jpg
HKU\S-1-5-21-720174342-3053994144-4245047485-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Avi\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalCache\Microsoft\IrisService\611387295679984388\134345744706057523.j pg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)

==================== MSCONFIG/TASK MANAGER Uitgeschakelde items ==

==================== Firewall regels (gefilterd) ================

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

FirewallRules: [{D24F05E1-0EDE-41C1-9E28-013F4C1D6779}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{193B94B9-E5DD-4F88-8D72-BC11A32A013E}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{21B791F5-5022-45A1-8FDD-0B6A19393F1C}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{FBFD9987-0C01-4B02-B05A-4BA833568D56}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{B6CF29AD-4E31-4EFF-909A-B6BA1540F7CC}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2609.52011.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{363FFBF1-E9F4-47D3-BA39-D06F11927940}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2609.52011.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{389EE7DE-C91A-41E5-89BE-DE48641AE85B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2609.52011.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{6E3E58BF-F6C0-4144-A296-21F55E9EA1C0}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2609.52011.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Herstelpunten =========================

18-09-2026 12:24:26 Windows Update
22-09-2026 11:22:27 Microsoft Visual C++ v14 Redistributable (x64) - 14.50.35719
25-09-2026 17:52:45 Windows Update

==================== Defecte Apparaatbeheer Apparaten ============
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI-Datensammlungs- und Signalverarbeitungscontroller
Description: PCI-Datensammlungs- und Signalverarbeitungscontroller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI-Gerät
Description: PCI-Gerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI-Gerät
Description: PCI-Gerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI-Gerät
Description: PCI-Gerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Basissystemgerät
Description: Basissystemgerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI-Gerät
Description: PCI-Gerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI-Gerät
Description: PCI-Gerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI-Gerät
Description: PCI-Gerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI-Gerät
Description: PCI-Gerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI-Gerät
Description: PCI-Gerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI-Kommunikationscontroller (einfach)
Description: PCI-Kommunikationscontroller (einfach)
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

==================== Eventlog fouten: ========================

Applicatiefouten:
==================
Error: (09/27/2026 04:14:06 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005. Prozess-ID (dezimal): 15468. Meldungs-ID: [0x2509].

Error: (09/26/2026 08:35:37 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005. Prozess-ID (dezimal): 15964. Meldungs-ID: [0x2509].

Error: (09/26/2026 05:03:54 AM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005. Prozess-ID (dezimal): 1108. Meldungs-ID: [0x2509].

Error: (09/25/2026 02:32:46 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005. Prozess-ID (dezimal): 6704. Meldungs-ID: [0x2509].

Error: (09/25/2026 12:55:16 PM) (Source: Firefox Default Browser Agent) (EventID: 5) (User: )
Description: Event-ID 5

Error: (09/25/2026 07:34:22 AM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005. Prozess-ID (dezimal): 14184. Meldungs-ID: [0x2509].

Error: (09/25/2026 01:32:18 AM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005. Prozess-ID (dezimal): 14264. Meldungs-ID: [0x2509].

Error: (09/24/2026 03:03:15 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005. Prozess-ID (dezimal): 19680. Meldungs-ID: [0x2509].

Systeemfouten:
=============
Error: (09/27/2026 04:12:44 PM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3502) (User: NT-AUTORITÄT)
Description: Fehler beim Aufheben der Gerätetrennung (Entkoppelung).

Error: (09/27/2026 04:12:44 PM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3502) (User: NT-AUTORITÄT)
Description: Fehler beim Aufheben der Gerätetrennung (Entkoppelung).

Error: (09/27/2026 04:12:43 PM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3502) (User: NT-AUTORITÄT)
Description: Fehler beim Aufheben der Gerätetrennung (Entkoppelung).

Error: (09/27/2026 04:10:36 PM) (Source: Microsoft-Windows-Ntfs) (EventID: 98) (User: NT-AUTORITÄT)
Description: D:\Device\HarddiskVolume53

Error: (09/27/2026 04:09:40 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-7UO7M50)
Description: Der Server "{9BA05972-F6A8-11CF-A442-00A0C90A8F39}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (09/27/2026 02:12:23 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073d02 fehlgeschlagen: 9PC1H9VN18CM-Microsoft.StartExperiencesApp

Error: (09/26/2026 10:30:28 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-7UO7M50)
Description: Der Server "{021E4F06-9DCC-49AD-88CF-ECC2DA314C8A}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (09/26/2026 10:30:28 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-7UO7M50)
Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (09/13/2026 06:33:39 PM) (Source: disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (09/12/2026 09:39:39 PM) (Source: disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR4 gefunden.

Error: (09/12/2026 06:25:26 PM) (Source: disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Windows Defender:
================
TimeCreated : 9/26/2026 2:16:32 PM
Message : Microsoft Defender Antivirus şςáи ђдš ьзέñ ŝтöρφėđ вęƒöřè ĉόмφℓέŧïòň.%ñ %τŞ¢аπ
ĨĐ:%ъ{6B722CE3-48BA-4FFD-B60C-9ABC1BFF52DB}%и %тЅ¢âл Ţỳре:%ъAntimalware%ⁿ %ţŞçăл
Ραґämёťêřѕ:%ъSchnellüberprüfung%ⁿ %τŲśêя:%вNT-AUTORITÄT\SYSTEM%й %τЅťθр Ѓεăŝŏŉ:%вŜçђеðυłèð ŝĉąň ẅаş
ŝкìρрèđ ь℮ĉãùşë ŧĥ℮ ŀаѕт ѕû¢ĉ℮ѕšƒŭĺ ѕςáл щāš щīŧħіŉ ťћę ℓαŝτ 7 ðàÿş

TimeCreated : 9/25/2026 12:59:38 PM
Message : Microsoft Defender Antivirus şςáи ђдš ьзέñ ŝтöρφėđ вęƒöřè ĉόмφℓέŧïòň.%ñ %τŞ¢аπ
ĨĐ:%ъ{7D427987-C8AD-41E6-A69F-9400BAB4C8D9}%и %тЅ¢âл Ţỳре:%ъAntimalware%ⁿ %ţŞçăл
Ραґämёťêřѕ:%ъSchnellüberprüfung%ⁿ %τŲśêя:%вNT-AUTORITÄT\SYSTEM%й %τЅťθр Ѓεăŝŏŉ:%вŜçђеðυłèð ŝĉąň ẅаş
ŝкìρрèđ ь℮ĉãùşë ŧĥ℮ ŀаѕт ѕû¢ĉ℮ѕšƒŭĺ ѕςáл щāš щīŧħіŉ ťћę ℓαŝτ 7 ðàÿş

TimeCreated : 9/24/2026 12:12:38 PM
Message : Microsoft Defender Antivirus şςáи ђдš ьзέñ ŝтöρφėđ вęƒöřè ĉόмφℓέŧïòň.%ñ %τŞ¢аπ
ĨĐ:%ъ{E14F956E-A965-4129-B7F5-71E4A3EB7370}%и %тЅ¢âл Ţỳре:%ъAntimalware%ⁿ %ţŞçăл
Ραґämёťêřѕ:%ъSchnellüberprüfung%ⁿ %τŲśêя:%вNT-AUTORITÄT\SYSTEM%й %τЅťθр Ѓεăŝŏŉ:%вŜçђеðυłèð ŝĉąň ẅаş
ŝкìρрèđ ь℮ĉãùşë ŧĥ℮ ŀаѕт ѕû¢ĉ℮ѕšƒŭĺ ѕςáл щāš щīŧħіŉ ťћę ℓαŝτ 7 ðàÿş

TimeCreated : 9/23/2026 12:47:09 PM
Message : Microsoft Defender Antivirus şςáи ђдš ьзέñ ŝтöρφėđ вęƒöřè ĉόмφℓέŧïòň.%ñ %τŞ¢аπ
ĨĐ:%ъ{90AE9231-F37D-4B82-AB5D-C35893ABC707}%и %тЅ¢âл Ţỳре:%ъAntimalware%ⁿ %ţŞçăл
Ραґämёťêřѕ:%ъSchnellüberprüfung%ⁿ %τŲśêя:%вNT-AUTORITÄT\SYSTEM%й %τЅťθр Ѓεăŝŏŉ:%вŜçђеðυłèð ŝĉąň ẅаş
ŝкìρрèđ ь℮ĉãùşë ŧĥ℮ ŀаѕт ѕû¢ĉ℮ѕšƒŭĺ ѕςáл щāš щīŧħіŉ ťћę ℓαŝτ 7 ðàÿş

TimeCreated : 9/22/2026 12:49:46 PM
Message : Microsoft Defender Antivirus şςáи ђдš ьзέñ ŝтöρφėđ вęƒöřè ĉόмφℓέŧïòň.%ñ %τŞ¢аπ
ĨĐ:%ъ{9FD57E14-6A8D-4490-94C0-0C927F228970}%и %тЅ¢âл Ţỳре:%ъAntimalware%ⁿ %ţŞçăл
Ραґämёťêřѕ:%ъSchnellüberprüfung%ⁿ %τŲśêя:%вNT-AUTORITÄT\SYSTEM%й %τЅťθр Ѓεăŝŏŉ:%вҐРĈ ĉоⁿŋёćťìθń гΰηďőωл

TimeCreated : 9/21/2026 12:25:49 PM
Message : Microsoft Defender Antivirus şςáи ђдš ьзέñ ŝтöρφėđ вęƒöřè ĉόмφℓέŧïòň.%ñ %τŞ¢аπ
ĨĐ:%ъ{C1D77AA7-A502-40C9-8DC8-A5441AA4826F}%и %тЅ¢âл Ţỳре:%ъAntimalware%ⁿ %ţŞçăл
Ραґämёťêřѕ:%ъSchnellüberprüfung%ⁿ %τŲśêя:%вNT-AUTORITÄT\SYSTEM%й %τЅťθр Ѓεăŝŏŉ:%вҐРĈ ĉоⁿŋёćťìθń гΰηďőωл

TimeCreated : 9/21/2026 12:16:05 PM
Message : Microsoft Defender Antivirus şςáи ђдš ьзέñ ŝтöρφėđ вęƒöřè ĉόмφℓέŧïòň.%ñ %τŞ¢аπ
ĨĐ:%ъ{01304154-4C09-4F48-87A6-B67A2DF1C59A}%и %тЅ¢âл Ţỳре:%ъAntimalware%ⁿ %ţŞçăл
Ραґämёťêřѕ:%ъSchnellüberprüfung%ⁿ %τŲśêя:%вNT-AUTORITÄT\SYSTEM%й %τЅťθр Ѓεăŝŏŉ:%вҐРĈ ĉоⁿŋёćťìθń гΰηďőωл

TimeCreated : 9/20/2026 12:22:12 PM
Message : Microsoft Defender Antivirus şςáи ђдš ьзέñ ŝтöρφėđ вęƒöřè ĉόмφℓέŧïòň.%ñ %τŞ¢аπ
ĨĐ:%ъ{CDCFAD25-D9E2-4A90-9CBA-0F7C72CDC71A}%и %тЅ¢âл Ţỳре:%ъAntimalware%ⁿ %ţŞçăл
Ραґämёťêřѕ:%ъSchnellüberprüfung%ⁿ %τŲśêя:%вNT-AUTORITÄT\SYSTEM%й %τЅťθр Ѓεăŝŏŉ:%вŜçђеðυłèð ŝĉąň ẅаş
ŝкìρрèđ ь℮ĉãùşë ŧĥ℮ ŀаѕт ѕû¢ĉ℮ѕšƒŭĺ ѕςáл щāš щīŧħіŉ ťћę ℓαŝτ 7 ðàÿş

CodeIntegrity:
===============
Date: 2026-09-27 16:29:34
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.

Date: 2026-09-27 16:25:03
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SecurityHealthService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbamsi64.dll that did not meet the Windows signing level requirements.

==================== Geheugen info ===========================

BIOS: American Megatrends International, LLC. M6JSPSODIMM_16GB_SDZ_V002 06/21/2024
Moederbord: DEFAULT STRING DEFAULT STRING
Processor: Intel(R) Celeron(R) N5095 @ 2.00GHz
Percentage geheugen in gebruik: 74%
Totaal fysiek RAM-geheugen: 7971.34 MB
Beschikbaar fysiek RAM-geheugen: 2048.78 MB
Totaal Virtueel geheugen: 12323.34 MB
Beschikbaar Virtueel geheugen: 5827.19 MB

==================== Schijven ================================

Disk 0 - Drive c: () (Fixed) (Total:1906.75 GB) (Free:1795.93 GB) (Model: SSD 2TB) NTFS
Disk 1 - Drive d: () (Fixed) (Total:931.51 GB) (Free:631.91 GB) (Model: TOSHIBA External USB 3.0 USB Device) NTFS

Disk 0 - \\?\Volume{82f629ed-f630-4d1a-ad0c-08fc93d918a0}\ () (Fixed) (Total:887 MB) (Free:114.8 MB) NTFS
Disk 0 - \\?\Volume{f29678c0-7372-4cd8-9544-4a43a8838c66}\ () (Fixed) (Total:96 MB) (Free:61.39 MB) FAT32

==================== MBR & Partitietabel ====================

============================================================
Disk: 0 (Size: 1907.73 GB) (Disk ID: 8D0EADF1)

Partitions:
===========
Partition Style : GPT
Partition Count : 4
Disk ID : {8C0EAE55-4DFF-41EE-8F51-96504D368531}
Usable Offset : 0.02 MB
Usable Length : 1907.73 GB
Max Partitions : 128

Partition 1
Type : EFI System Partition
Size : 100 MB
Offset : 1 MB
Type GUID : {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}
Partition GUID : {F29678C0-7372-4CD8-9544-4A43A8838C66}
GPT Name : EFI system partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 2
Type : Microsoft Reserved (MSR)
Size : 16 MB
Offset : 101 MB
Type GUID : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}
Partition GUID : {C3F2E73A-1399-4BAA-A546-6E262FDE09D8}
GPT Name : Microsoft reserved partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 3
Type : Basic Data Partition
Size : 1906.75 GB
Offset : 117 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {833C1F85-D68D-43C5-B56A-7FD4E5F9FB33}
GPT Name : Basic data partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : No
Platform Required: No
------------------------------------------------------------
Partition 4
Type : Windows Recovery
Size : 887 MB
Offset : 1952625 MB
Type GUID : {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}
Partition GUID : {82F629ED-F630-4D1A-AD0C-08FC93D918A0}
Attributes : 0x8000000000000001
Attribute Flags : Platform Required, No Default Drive Letter
Hidden : Yes
Platform Required: Yes
------------------------------------------------------------

============================================================
Disk: 1 (Size: 931.51 GB) (Disk ID: 0009088E)

Partitions:
===========
Partition Style : MBR
Partition Count : 4
Disk Signature : 0x0009088E

Partition 1
Type : MBR 0x07 (NTFS / exFAT / HPFS)
Size : 931.51 GB
Offset : 1 MB
Partition GUID : {0009088E-0000-0000-0000-100000000000}
Bootable : No
Recognized : Yes
Hidden Sectors : 2048
------------------------------------------------------------
Partition Entries : 4
Actual Partitions : 1

============================================================

==================== Einde van Addition.txt =======================

Avloew · 27.09.2026, 16:58

Farbar Recovery Scan Tool (x64) Versie: 26-09-2026
Gestart door xxxx (27-09-2026 16:50:54)
Gestart vanaf C:\Users\xxxx\Desktop
Boot Modus: Normal

================== Bestanden Zoeken: "SearchAll: pulse Browser;pulsebrowser;PulseBrowser;OneBrowserOneBUpdate" =============

Bestand:
========
C:\Users\Avi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pulse Browser.lnk
[2026-09-03 21:58][2026-09-03 21:58] 000002657 _____ () 837DA6430EB43A0AFA99C5E987AF85BF [Bestand niet getekend]

C:\Users\Avi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Pulse Browser.lnk
[2026-09-03 21:58][2026-09-03 21:58] 000002622 _____ () 9B112397F724CF0B773A0FA11640FAA6 [Bestand niet getekend]

Map:
========

Register:
========

===================== Zoekresultaten voor "pulse Browser" ==========

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Clients\StartMenuInternet\PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY]
""="Pulse Browser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Clients\StartMenuInternet\PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY\Capabilities]
"ApplicationDescription"="Pulse Browser ist ein Webbrowser, der Webseiten und Apps in Sekundenschnelle lädt und dabei äußerst stabil und nutzerfreundlich ist. Dank des integrierten Malware- und Phishing-Schutzes kannst du bedenkenlos im Internet surfen."

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Clients\StartMenuInternet\PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY\Capabilities]
"ApplicationName"="Pulse Browser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\PulseSoftware PulseBrowser]
"DisplayName"="Pulse Browser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\PulseSoftware PulseBrowser]
"Publisher"="Die Pulse Browser-Autoren"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\PulseSoftware\Update\Clients\{2F4E88B4-E690-4E1F-AA9E-B7A4617F881D}]
"name"="Pulse Browser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\Avi\AppData\Local\Temp\PulseSoftware13920_156724054\bin\updater.exe.FriendlyAppName"="Pulse Browser Updater"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSHTML.EO2XSBJJ7FWZDTAFJVSS2YAESY\Application]
"ApplicationName"="Pulse Browser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSHTML.EO2XSBJJ7FWZDTAFJVSS2YAESY\Application]
"ApplicationCompany"="Die Pulse Browser-Autoren"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSPDF.EO2XSBJJ7FWZDTAFJVSS2YAESY\Application]
"ApplicationName"="Pulse Browser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSPDF.EO2XSBJJ7FWZDTAFJVSS2YAESY\Application]
"ApplicationCompany"="Die Pulse Browser-Autoren"

===================== Zoekresultaten voor "pulsebrowser" ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PulseSoftware\PulseBrowserUpdater]

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Clients\StartMenuInternet\PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY]

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Clients\StartMenuInternet\PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY]
""="Pulse Browser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Clients\StartMenuInternet\PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY\Capabilities]
"ApplicationDescription"="Pulse Browser ist ein Webbrowser, der Webseiten und Apps in Sekundenschnelle lädt und dabei äußerst stabil und nutzerfreundlich ist. Dank des integrierten Malware- und Phishing-Schutzes kannst du bedenkenlos im Internet surfen."

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Clients\StartMenuInternet\PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY\Capabilities]
"ApplicationIcon"="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe,0"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Clients\StartMenuInternet\PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY\Capabilities]
"ApplicationName"="Pulse Browser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Clients\StartMenuInternet\PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY\Capabilities\Startmenu]
"StartMenuInternet"="PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Clients\StartMenuInternet\PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY\Capabilities\URLAssociations]
"PulseBrowser"="PLSHTML.EO2XSBJJ7FWZDTAFJVSS2YAESY"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Clients\StartMenuInternet\PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY\DefaultIcon]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe,0"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Clients\StartMenuInternet\PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY\InstallInfo]
"ReinstallCommand"=""C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --make-default-browser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Clients\StartMenuInternet\PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY\InstallInfo]
"HideIconsCommand"=""C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --hide-icons"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Clients\StartMenuInternet\PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY\InstallInfo]
"ShowIconsCommand"=""C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --show-icons"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Clients\StartMenuInternet\PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY\shell\open\command]
""=""C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe""

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\App Paths\pulsebrowser.exe]

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\App Paths\pulsebrowser.exe]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\App Paths\pulsebrowser.exe]
"Path"="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\DefaultAccount\Cloud\{5affa69d-005d-4fac-9dbb-f8b693ef75d3}$windows.data.apps.appleveltileinfo$appleveltilelist\windows.data.apps.appleveltileinfo$w~pulsebrowser.eo2xsbjj7fwzdtafjvss2yaesy]

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\DefaultAccount\Cloud\{5affa69d-005d-4fac-9dbb-f8b693ef75d3}$windows.data.apps.appmetadata$appmetadatalist\windows.data.apps.appmetadata$pulsesoftware pulsebrowser]

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\DefaultAccount\Current\{5affa69d-005d-4fac-9dbb-f8b693ef75d3}$windows.data.apps.appleveltileinfo$appleveltilelist\windows.data.apps.appleveltileinfo$w~pulsebrowser.eo2xsbjj7fwzdtafjvss2yaesy]

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\DefaultAccount\Current\{5affa69d-005d-4fac-9dbb-f8b693ef75d3}$windows.data.apps.appmetadata$appmetadatalist\windows.data.apps.appmetadata$pulsesoftware pulsebrowser]

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppBadgeUpdated]
"PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY"="2"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\Start\TileProperties\W~PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY]

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\PulseSoftware PulseBrowser]

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\PulseSoftware PulseBrowser]
"DisplayName"="Pulse Browser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\PulseSoftware PulseBrowser]
"UninstallString"=""C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\149.0.7827.158\Installer\setup.exe" --uninstall"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\PulseSoftware PulseBrowser]
"InstallLocation"="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\PulseSoftware PulseBrowser]
"DisplayIcon"="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe,0"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\PulseSoftware PulseBrowser]
"Publisher"="Die Pulse Browser-Autoren"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe"="0x534143500100000000000000070000002800000070F03D00C7573E00010000 00000000000000000A0021000050CBB5E0DACCDC01000000000000000002000000280000000000000000000000000000002000000000000000000000001F00000000000000010000000100 0000"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\PulseSoftware\PulseBrowser]

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\PulseSoftware\Update]
"UninstallCmdLine"=""C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe" --wake"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\PulseSoftware\Update]
"LastInstallerSuccessLaunchCmdLine"=""C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --from-installer"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\PulseSoftware\Update\Clients\{2F4E88B4-E690-4E1F-AA9E-B7A4617F881D}\Commands\on-os-upgrade]
"CommandLine"=""C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\149.0.7827.158\Installer\setup.exe" --on-os-upgrade --verbose-logging --os-upgrade-versions=%1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\PulseSoftware\Update\Clients\{30546620-7888-4826-95be-9631ae2eea6e}]
"name"="PulseBrowserUpdater"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\PulseSoftware\Update\Clients\{8EFCD3AA-AA03-4E1A-B316-9D654EEC019D}]
"name"="PulseBrowserUpdater"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\PulseSoftware\Update\ClientState\{2F4E88B4-E690-4E1F-AA9E-B7A4617F881D}]
"UninstallString"="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\149.0.7827.158\Installer\setup.exe"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\PulseSoftware\Update\ClientState\{2F4E88B4-E690-4E1F-AA9E-B7A4617F881D}]
"DowngradeCleanupCommand"=""C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\149.0.7827.158\Installer\setup.exe" --cleanup-for-downgrade-version=$1 --cleanup-for-downgrade-operation=$2"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\PulseSoftware\Update\ClientState\{2F4E88B4-E690-4E1F-AA9E-B7A4617F881D}]
"LastInstallerSuccessLaunchCmdLine"=""C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --from-installer"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\PulseSoftware\Update\ClientState\{30546620-7888-4826-95be-9631ae2eea6e}]
"name"="PulseBrowserUpdater"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\RegisteredApplications]
"PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY"="Software\Clients\StartMenuInternet\PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY\Capabilities"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\CLSID\{0EC63402-A762-59E6-8094-42CCD06D5224}\LocalServer32]
""=""C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe" --server --service=update-internal"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\CLSID\{4DAC24AB-B340-4B7E-AD01-1504A7F59EEA}\LocalServer32]
""=""C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe" --server --service=update"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\CLSID\{75828ED1-7BE8-45D0-8950-AA85CBF74510}\LocalServer32]
""=""C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe" --server --service=update"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\CLSID\{7D1C7D75-8411-5A64-8662-FC1D7EEC17B2}\LocalServer32]
""=""C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe" --server --service=update"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe.FriendlyAppName"="PulseBrowser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe.ApplicationCompany"="Alabama Technology USA, LLC"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSHTML.EO2XSBJJ7FWZDTAFJVSS2YAESY]
""="PulseBrowser HTML Document"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSHTML.EO2XSBJJ7FWZDTAFJVSS2YAESY]
"AppUserModelId"="PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSHTML.EO2XSBJJ7FWZDTAFJVSS2YAESY\Application]
"AppUserModelId"="PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSHTML.EO2XSBJJ7FWZDTAFJVSS2YAESY\Application]
"ApplicationIcon"="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe,0"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSHTML.EO2XSBJJ7FWZDTAFJVSS2YAESY\DefaultIcon]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe,10"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSHTML.EO2XSBJJ7FWZDTAFJVSS2YAESY\shell\open\command]
""=""C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --single-argument %1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSPDF.EO2XSBJJ7FWZDTAFJVSS2YAESY]
""="PulseBrowser PDF Document"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSPDF.EO2XSBJJ7FWZDTAFJVSS2YAESY]
"AppUserModelId"="PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSPDF.EO2XSBJJ7FWZDTAFJVSS2YAESY\Application]
"AppUserModelId"="PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSPDF.EO2XSBJJ7FWZDTAFJVSS2YAESY\Application]
"ApplicationIcon"="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe,0"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSPDF.EO2XSBJJ7FWZDTAFJVSS2YAESY\DefaultIcon]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe,11"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSPDF.EO2XSBJJ7FWZDTAFJVSS2YAESY\shell\open\command]
""=""C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --single-argument %1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PulseBrowser]

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PulseBrowser]
""="URL:PulseBrowser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PulseBrowser\shell\open\command]
""=""C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --single-argument %1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{027234BD-61BB-4F5C-9386-7FE804171C8C}\1.0]
""="PulseBrowserUpdater TypeLib for IGoogleUpdate3Web"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{027234BD-61BB-4F5C-9386-7FE804171C8C}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{027234BD-61BB-4F5C-9386-7FE804171C8C}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{1163C9E6-6391-46E2-96AB-2BCB8907D669}\1.0]
""="PulseBrowserUpdater TypeLib for IPolicyStatus2User"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{1163C9E6-6391-46E2-96AB-2BCB8907D669}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{1163C9E6-6391-46E2-96AB-2BCB8907D669}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{13D172EB-2BFB-4D72-AF10-7D33337B7FC6}\1.0]
""="PulseBrowserUpdater TypeLib for IPolicyStatusValueUser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{13D172EB-2BFB-4D72-AF10-7D33337B7FC6}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{13D172EB-2BFB-4D72-AF10-7D33337B7FC6}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{1816D37D-0C7D-5CD7-8212-DFB46B3947A7}\1.0]
""="PulseBrowserUpdater TypeLib for IUpdateStateUser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{1816D37D-0C7D-5CD7-8212-DFB46B3947A7}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{1816D37D-0C7D-5CD7-8212-DFB46B3947A7}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{19309C09-C93C-45DA-8C02-9A8B8198A5E0}\1.0]
""="PulseBrowserUpdater TypeLib for IPolicyStatusUser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{19309C09-C93C-45DA-8C02-9A8B8198A5E0}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{19309C09-C93C-45DA-8C02-9A8B8198A5E0}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{1E8CAE0D-DBFB-5F8D-8C4C-631A96B2AE9E}\1.0]
""="PulseBrowserUpdater TypeLib for IUpdaterInternalUser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{1E8CAE0D-DBFB-5F8D-8C4C-631A96B2AE9E}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\2"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{1E8CAE0D-DBFB-5F8D-8C4C-631A96B2AE9E}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\2"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{2C320333-21CF-4FC8-BF8F-4287DB3795B7}\1.0]
""="PulseBrowserUpdater TypeLib for IAppWebUser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{2C320333-21CF-4FC8-BF8F-4287DB3795B7}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{2C320333-21CF-4FC8-BF8F-4287DB3795B7}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{2C6218B9-088D-4D25-A4F8-570558124142}\1.0]
""="PulseBrowserUpdater TypeLib for IAppWeb"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{2C6218B9-088D-4D25-A4F8-570558124142}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{2C6218B9-088D-4D25-A4F8-570558124142}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{3057E1F8-2498-4C19-99B5-F7F207DA4DC7}\1.0]
""="PulseBrowserUpdater TypeLib for IAppVersionWeb"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{3057E1F8-2498-4C19-99B5-F7F207DA4DC7}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{3057E1F8-2498-4C19-99B5-F7F207DA4DC7}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{3B0D60EF-13AB-518C-90C1-E927736125C6}\1.0]
""="PulseBrowserUpdater TypeLib for IUpdaterCallbackUser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{3B0D60EF-13AB-518C-90C1-E927736125C6}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{3B0D60EF-13AB-518C-90C1-E927736125C6}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{3C0435E1-B19F-4B7A-8481-D7EBAEBFAF47}\1.0]
""="PulseBrowserUpdater TypeLib for IPolicyStatus4User"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{3C0435E1-B19F-4B7A-8481-D7EBAEBFAF47}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{3C0435E1-B19F-4B7A-8481-D7EBAEBFAF47}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{47C8886A-A4B5-4F6C-865A-41A207074DFA}\1.0]
""="PulseBrowserUpdater TypeLib for IPolicyStatusValue"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{47C8886A-A4B5-4F6C-865A-41A207074DFA}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{47C8886A-A4B5-4F6C-865A-41A207074DFA}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{5C674FC1-80E3-48D2-987B-79D9D286065B}\1.0]
""="PulseBrowserUpdater TypeLib for IPolicyStatus3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{5C674FC1-80E3-48D2-987B-79D9D286065B}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{5C674FC1-80E3-48D2-987B-79D9D286065B}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{7BF946C6-0665-585B-A730-290CE250C539}\1.0]
""="PulseBrowserUpdater TypeLib for IUpdaterObserverUser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{7BF946C6-0665-585B-A730-290CE250C539}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{7BF946C6-0665-585B-A730-290CE250C539}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{7D908375-C9D0-44C5-BB98-206F3C24A74C}\1.0]
""="PulseBrowserUpdater TypeLib for IPolicyStatus"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{7D908375-C9D0-44C5-BB98-206F3C24A74C}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{7D908375-C9D0-44C5-BB98-206F3C24A74C}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{847BB70C-47D0-46C2-8C97-9000A1F9AD99}\1.0]
""="PulseBrowserUpdater TypeLib for IPolicyStatus3User"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{847BB70C-47D0-46C2-8C97-9000A1F9AD99}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{847BB70C-47D0-46C2-8C97-9000A1F9AD99}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{87DBF75E-F590-4802-93FD-F8D07800E2E9}\1.0]
""="PulseBrowserUpdater TypeLib for IAppCommandWeb"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{87DBF75E-F590-4802-93FD-F8D07800E2E9}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{87DBF75E-F590-4802-93FD-F8D07800E2E9}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{9D31EA63-2E06-4D41-98C7-CB1F307DB597}\1.0]
""="PulseBrowserUpdater TypeLib for IPolicyStatus2"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{9D31EA63-2E06-4D41-98C7-CB1F307DB597}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{9D31EA63-2E06-4D41-98C7-CB1F307DB597}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{A4971B62-FB05-52B3-AB49-2E63B3614613}\1.0]
""="PulseBrowserUpdater TypeLib for IUpdater2User"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{A4971B62-FB05-52B3-AB49-2E63B3614613}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{A4971B62-FB05-52B3-AB49-2E63B3614613}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{A9EAD16E-5D14-5C33-BF6D-B580FCDB1932}\1.0]
""="PulseBrowserUpdater TypeLib for ICompleteStatusUser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{A9EAD16E-5D14-5C33-BF6D-B580FCDB1932}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{A9EAD16E-5D14-5C33-BF6D-B580FCDB1932}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{AE097E2A-7F4B-4248-8698-D6E515E9C638}\1.0]
""="PulseBrowserUpdater TypeLib for ICurrentStateUser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{AE097E2A-7F4B-4248-8698-D6E515E9C638}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{AE097E2A-7F4B-4248-8698-D6E515E9C638}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{BE5D3E90-A66C-4A0A-9B7B-1A6B9BF3971E}\1.0]
""="PulseBrowserUpdater TypeLib for ICurrentState"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{BE5D3E90-A66C-4A0A-9B7B-1A6B9BF3971E}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{BE5D3E90-A66C-4A0A-9B7B-1A6B9BF3971E}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{C461FEE4-6003-5401-A5DA-7A19F496ADEA}\1.0]
""="PulseBrowserUpdater TypeLib for IUpdaterAppStatesCallbackUser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{C461FEE4-6003-5401-A5DA-7A19F496ADEA}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{C461FEE4-6003-5401-A5DA-7A19F496ADEA}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{D734C877-21F4-496E-B857-3E5B2E72E4CC}\1.0]
""="PulseBrowserUpdater TypeLib for IAppBundleWeb"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{D734C877-21F4-496E-B857-3E5B2E72E4CC}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{D734C877-21F4-496E-B857-3E5B2E72E4CC}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{E2C00808-83C7-4CE4-8075-7E185A90AE04}\1.0]
""="PulseBrowserUpdater TypeLib for IGoogleUpdate3WebUser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{E2C00808-83C7-4CE4-8075-7E185A90AE04}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{E2C00808-83C7-4CE4-8075-7E185A90AE04}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{EA08425E-054B-4564-B0A0-8BAAB76F38E9}\1.0]
""="PulseBrowserUpdater TypeLib for IAppBundleWebUser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{EA08425E-054B-4564-B0A0-8BAAB76F38E9}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{EA08425E-054B-4564-B0A0-8BAAB76F38E9}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{F0A39C88-1BBD-53D5-BB8F-406D8B83F113}\1.0]
""="PulseBrowserUpdater TypeLib for IUpdaterAppStateUser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{F0A39C88-1BBD-53D5-BB8F-406D8B83F113}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{F0A39C88-1BBD-53D5-BB8F-406D8B83F113}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{F4874A57-8C88-4B1D-AAB8-4B06CF98FB29}\1.0]
""="PulseBrowserUpdater TypeLib for IAppVersionWebUser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{F4874A57-8C88-4B1D-AAB8-4B06CF98FB29}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{F4874A57-8C88-4B1D-AAB8-4B06CF98FB29}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{F4F9F399-D63B-5AC7-89F4-7DB385E0BCB8}\1.0]
""="PulseBrowserUpdater TypeLib for IUpdaterInternalCallbackUser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{F4F9F399-D63B-5AC7-89F4-7DB385E0BCB8}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\2"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{F4F9F399-D63B-5AC7-89F4-7DB385E0BCB8}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\2"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{F8D4B43D-7D22-47FE-B6AD-BAC5ED8A1659}\1.0]
""="PulseBrowserUpdater TypeLib for IAppCommandWebUser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{F8D4B43D-7D22-47FE-B6AD-BAC5ED8A1659}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{F8D4B43D-7D22-47FE-B6AD-BAC5ED8A1659}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{FCFC0CEE-EE7D-5BE8-8DDD-CE4D9ACF9790}\1.0]
""="PulseBrowserUpdater TypeLib for IUpdaterUser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{FCFC0CEE-EE7D-5BE8-8DDD-CE4D9ACF9790}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{FCFC0CEE-EE7D-5BE8-8DDD-CE4D9ACF9790}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\1"

===================== Zoekresultaten voor "PulseBrowser" ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PulseSoftware\PulseBrowserUpdater]

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Clients\StartMenuInternet\PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY]

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Clients\StartMenuInternet\PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY]
""="Pulse Browser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Clients\StartMenuInternet\PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY\Capabilities]
"ApplicationDescription"="Pulse Browser ist ein Webbrowser, der Webseiten und Apps in Sekundenschnelle lädt und dabei äußerst stabil und nutzerfreundlich ist. Dank des integrierten Malware- und Phishing-Schutzes kannst du bedenkenlos im Internet surfen."

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Clients\StartMenuInternet\PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY\Capabilities]
"ApplicationIcon"="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe,0"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Clients\StartMenuInternet\PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY\Capabilities]
"ApplicationName"="Pulse Browser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Clients\StartMenuInternet\PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY\Capabilities\Startmenu]
"StartMenuInternet"="PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Clients\StartMenuInternet\PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY\Capabilities\URLAssociations]
"PulseBrowser"="PLSHTML.EO2XSBJJ7FWZDTAFJVSS2YAESY"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Clients\StartMenuInternet\PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY\DefaultIcon]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe,0"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Clients\StartMenuInternet\PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY\InstallInfo]
"ReinstallCommand"=""C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --make-default-browser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Clients\StartMenuInternet\PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY\InstallInfo]
"HideIconsCommand"=""C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --hide-icons"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Clients\StartMenuInternet\PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY\InstallInfo]
"ShowIconsCommand"=""C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --show-icons"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Clients\StartMenuInternet\PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY\shell\open\command]
""=""C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe""

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\App Paths\pulsebrowser.exe]

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\App Paths\pulsebrowser.exe]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\App Paths\pulsebrowser.exe]
"Path"="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\DefaultAccount\Cloud\{5affa69d-005d-4fac-9dbb-f8b693ef75d3}$windows.data.apps.appleveltileinfo$appleveltilelist\windows.data.apps.appleveltileinfo$w~pulsebrowser.eo2xsbjj7fwzdtafjvss2yaesy]

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\DefaultAccount\Cloud\{5affa69d-005d-4fac-9dbb-f8b693ef75d3}$windows.data.apps.appmetadata$appmetadatalist\windows.data.apps.appmetadata$pulsesoftware pulsebrowser]

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\DefaultAccount\Current\{5affa69d-005d-4fac-9dbb-f8b693ef75d3}$windows.data.apps.appleveltileinfo$appleveltilelist\windows.data.apps.appleveltileinfo$w~pulsebrowser.eo2xsbjj7fwzdtafjvss2yaesy]

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\CloudStore\Store\DefaultAccount\Current\{5affa69d-005d-4fac-9dbb-f8b693ef75d3}$windows.data.apps.appmetadata$appmetadatalist\windows.data.apps.appmetadata$pulsesoftware pulsebrowser]

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\Explorer\FeatureUsage\AppBadgeUpdated]
"PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY"="2"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\Start\TileProperties\W~PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY]

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\PulseSoftware PulseBrowser]

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\PulseSoftware PulseBrowser]
"DisplayName"="Pulse Browser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\PulseSoftware PulseBrowser]
"UninstallString"=""C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\149.0.7827.158\Installer\setup.exe" --uninstall"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\PulseSoftware PulseBrowser]
"InstallLocation"="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\PulseSoftware PulseBrowser]
"DisplayIcon"="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe,0"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\PulseSoftware PulseBrowser]
"Publisher"="Die Pulse Browser-Autoren"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]
"C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe"="0x534143500100000000000000070000002800000070F03D00C7573E00010000 00000000000000000A0021000050CBB5E0DACCDC01000000000000000002000000280000000000000000000000000000002000000000000000000000001F00000000000000010000000100 0000"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\PulseSoftware\PulseBrowser]

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\PulseSoftware\Update]
"UninstallCmdLine"=""C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe" --wake"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\PulseSoftware\Update]
"LastInstallerSuccessLaunchCmdLine"=""C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --from-installer"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\PulseSoftware\Update\Clients\{2F4E88B4-E690-4E1F-AA9E-B7A4617F881D}\Commands\on-os-upgrade]
"CommandLine"=""C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\149.0.7827.158\Installer\setup.exe" --on-os-upgrade --verbose-logging --os-upgrade-versions=%1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\PulseSoftware\Update\Clients\{30546620-7888-4826-95be-9631ae2eea6e}]
"name"="PulseBrowserUpdater"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\PulseSoftware\Update\Clients\{8EFCD3AA-AA03-4E1A-B316-9D654EEC019D}]
"name"="PulseBrowserUpdater"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\PulseSoftware\Update\ClientState\{2F4E88B4-E690-4E1F-AA9E-B7A4617F881D}]
"UninstallString"="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\149.0.7827.158\Installer\setup.exe"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\PulseSoftware\Update\ClientState\{2F4E88B4-E690-4E1F-AA9E-B7A4617F881D}]
"DowngradeCleanupCommand"=""C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\149.0.7827.158\Installer\setup.exe" --cleanup-for-downgrade-version=$1 --cleanup-for-downgrade-operation=$2"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\PulseSoftware\Update\ClientState\{2F4E88B4-E690-4E1F-AA9E-B7A4617F881D}]
"LastInstallerSuccessLaunchCmdLine"=""C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --from-installer"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\PulseSoftware\Update\ClientState\{30546620-7888-4826-95be-9631ae2eea6e}]
"name"="PulseBrowserUpdater"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\RegisteredApplications]
"PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY"="Software\Clients\StartMenuInternet\PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY\Capabilities"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\CLSID\{0EC63402-A762-59E6-8094-42CCD06D5224}\LocalServer32]
""=""C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe" --server --service=update-internal"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\CLSID\{4DAC24AB-B340-4B7E-AD01-1504A7F59EEA}\LocalServer32]
""=""C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe" --server --service=update"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\CLSID\{75828ED1-7BE8-45D0-8950-AA85CBF74510}\LocalServer32]
""=""C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe" --server --service=update"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\CLSID\{7D1C7D75-8411-5A64-8662-FC1D7EEC17B2}\LocalServer32]
""=""C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe" --server --service=update"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe.FriendlyAppName"="PulseBrowser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe.ApplicationCompany"="Alabama Technology USA, LLC"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSHTML.EO2XSBJJ7FWZDTAFJVSS2YAESY]
""="PulseBrowser HTML Document"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSHTML.EO2XSBJJ7FWZDTAFJVSS2YAESY]
"AppUserModelId"="PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSHTML.EO2XSBJJ7FWZDTAFJVSS2YAESY\Application]
"AppUserModelId"="PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSHTML.EO2XSBJJ7FWZDTAFJVSS2YAESY\Application]
"ApplicationIcon"="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe,0"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSHTML.EO2XSBJJ7FWZDTAFJVSS2YAESY\DefaultIcon]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe,10"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSHTML.EO2XSBJJ7FWZDTAFJVSS2YAESY\shell\open\command]
""=""C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --single-argument %1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSPDF.EO2XSBJJ7FWZDTAFJVSS2YAESY]
""="PulseBrowser PDF Document"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSPDF.EO2XSBJJ7FWZDTAFJVSS2YAESY]
"AppUserModelId"="PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSPDF.EO2XSBJJ7FWZDTAFJVSS2YAESY\Application]
"AppUserModelId"="PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSPDF.EO2XSBJJ7FWZDTAFJVSS2YAESY\Application]
"ApplicationIcon"="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe,0"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSPDF.EO2XSBJJ7FWZDTAFJVSS2YAESY\DefaultIcon]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe,11"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSPDF.EO2XSBJJ7FWZDTAFJVSS2YAESY\shell\open\command]
""=""C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --single-argument %1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PulseBrowser]

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PulseBrowser]
""="URL:PulseBrowser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PulseBrowser\shell\open\command]
""=""C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowser\Application\pulsebrowser.exe" --single-argument %1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{027234BD-61BB-4F5C-9386-7FE804171C8C}\1.0]
""="PulseBrowserUpdater TypeLib for IGoogleUpdate3Web"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{027234BD-61BB-4F5C-9386-7FE804171C8C}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{027234BD-61BB-4F5C-9386-7FE804171C8C}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{1163C9E6-6391-46E2-96AB-2BCB8907D669}\1.0]
""="PulseBrowserUpdater TypeLib for IPolicyStatus2User"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{1163C9E6-6391-46E2-96AB-2BCB8907D669}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{1163C9E6-6391-46E2-96AB-2BCB8907D669}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{13D172EB-2BFB-4D72-AF10-7D33337B7FC6}\1.0]
""="PulseBrowserUpdater TypeLib for IPolicyStatusValueUser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{13D172EB-2BFB-4D72-AF10-7D33337B7FC6}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{13D172EB-2BFB-4D72-AF10-7D33337B7FC6}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{1816D37D-0C7D-5CD7-8212-DFB46B3947A7}\1.0]
""="PulseBrowserUpdater TypeLib for IUpdateStateUser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{1816D37D-0C7D-5CD7-8212-DFB46B3947A7}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{1816D37D-0C7D-5CD7-8212-DFB46B3947A7}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{19309C09-C93C-45DA-8C02-9A8B8198A5E0}\1.0]
""="PulseBrowserUpdater TypeLib for IPolicyStatusUser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{19309C09-C93C-45DA-8C02-9A8B8198A5E0}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{19309C09-C93C-45DA-8C02-9A8B8198A5E0}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{1E8CAE0D-DBFB-5F8D-8C4C-631A96B2AE9E}\1.0]
""="PulseBrowserUpdater TypeLib for IUpdaterInternalUser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{1E8CAE0D-DBFB-5F8D-8C4C-631A96B2AE9E}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\2"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{1E8CAE0D-DBFB-5F8D-8C4C-631A96B2AE9E}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\2"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{2C320333-21CF-4FC8-BF8F-4287DB3795B7}\1.0]
""="PulseBrowserUpdater TypeLib for IAppWebUser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{2C320333-21CF-4FC8-BF8F-4287DB3795B7}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{2C320333-21CF-4FC8-BF8F-4287DB3795B7}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{2C6218B9-088D-4D25-A4F8-570558124142}\1.0]
""="PulseBrowserUpdater TypeLib for IAppWeb"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{2C6218B9-088D-4D25-A4F8-570558124142}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{2C6218B9-088D-4D25-A4F8-570558124142}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{3057E1F8-2498-4C19-99B5-F7F207DA4DC7}\1.0]
""="PulseBrowserUpdater TypeLib for IAppVersionWeb"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{3057E1F8-2498-4C19-99B5-F7F207DA4DC7}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{3057E1F8-2498-4C19-99B5-F7F207DA4DC7}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{3B0D60EF-13AB-518C-90C1-E927736125C6}\1.0]
""="PulseBrowserUpdater TypeLib for IUpdaterCallbackUser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{3B0D60EF-13AB-518C-90C1-E927736125C6}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{3B0D60EF-13AB-518C-90C1-E927736125C6}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{3C0435E1-B19F-4B7A-8481-D7EBAEBFAF47}\1.0]
""="PulseBrowserUpdater TypeLib for IPolicyStatus4User"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{3C0435E1-B19F-4B7A-8481-D7EBAEBFAF47}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{3C0435E1-B19F-4B7A-8481-D7EBAEBFAF47}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{47C8886A-A4B5-4F6C-865A-41A207074DFA}\1.0]
""="PulseBrowserUpdater TypeLib for IPolicyStatusValue"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{47C8886A-A4B5-4F6C-865A-41A207074DFA}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{47C8886A-A4B5-4F6C-865A-41A207074DFA}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{5C674FC1-80E3-48D2-987B-79D9D286065B}\1.0]
""="PulseBrowserUpdater TypeLib for IPolicyStatus3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{5C674FC1-80E3-48D2-987B-79D9D286065B}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{5C674FC1-80E3-48D2-987B-79D9D286065B}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{7BF946C6-0665-585B-A730-290CE250C539}\1.0]
""="PulseBrowserUpdater TypeLib for IUpdaterObserverUser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{7BF946C6-0665-585B-A730-290CE250C539}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{7BF946C6-0665-585B-A730-290CE250C539}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{7D908375-C9D0-44C5-BB98-206F3C24A74C}\1.0]
""="PulseBrowserUpdater TypeLib for IPolicyStatus"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{7D908375-C9D0-44C5-BB98-206F3C24A74C}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{7D908375-C9D0-44C5-BB98-206F3C24A74C}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{847BB70C-47D0-46C2-8C97-9000A1F9AD99}\1.0]
""="PulseBrowserUpdater TypeLib for IPolicyStatus3User"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{847BB70C-47D0-46C2-8C97-9000A1F9AD99}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{847BB70C-47D0-46C2-8C97-9000A1F9AD99}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{87DBF75E-F590-4802-93FD-F8D07800E2E9}\1.0]
""="PulseBrowserUpdater TypeLib for IAppCommandWeb"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{87DBF75E-F590-4802-93FD-F8D07800E2E9}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{87DBF75E-F590-4802-93FD-F8D07800E2E9}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{9D31EA63-2E06-4D41-98C7-CB1F307DB597}\1.0]
""="PulseBrowserUpdater TypeLib for IPolicyStatus2"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{9D31EA63-2E06-4D41-98C7-CB1F307DB597}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{9D31EA63-2E06-4D41-98C7-CB1F307DB597}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{A4971B62-FB05-52B3-AB49-2E63B3614613}\1.0]
""="PulseBrowserUpdater TypeLib for IUpdater2User"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{A4971B62-FB05-52B3-AB49-2E63B3614613}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{A4971B62-FB05-52B3-AB49-2E63B3614613}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{A9EAD16E-5D14-5C33-BF6D-B580FCDB1932}\1.0]
""="PulseBrowserUpdater TypeLib for ICompleteStatusUser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{A9EAD16E-5D14-5C33-BF6D-B580FCDB1932}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{A9EAD16E-5D14-5C33-BF6D-B580FCDB1932}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{AE097E2A-7F4B-4248-8698-D6E515E9C638}\1.0]
""="PulseBrowserUpdater TypeLib for ICurrentStateUser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{AE097E2A-7F4B-4248-8698-D6E515E9C638}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{AE097E2A-7F4B-4248-8698-D6E515E9C638}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{BE5D3E90-A66C-4A0A-9B7B-1A6B9BF3971E}\1.0]
""="PulseBrowserUpdater TypeLib for ICurrentState"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{BE5D3E90-A66C-4A0A-9B7B-1A6B9BF3971E}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{BE5D3E90-A66C-4A0A-9B7B-1A6B9BF3971E}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{C461FEE4-6003-5401-A5DA-7A19F496ADEA}\1.0]
""="PulseBrowserUpdater TypeLib for IUpdaterAppStatesCallbackUser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{C461FEE4-6003-5401-A5DA-7A19F496ADEA}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{C461FEE4-6003-5401-A5DA-7A19F496ADEA}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{D734C877-21F4-496E-B857-3E5B2E72E4CC}\1.0]
""="PulseBrowserUpdater TypeLib for IAppBundleWeb"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{D734C877-21F4-496E-B857-3E5B2E72E4CC}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{D734C877-21F4-496E-B857-3E5B2E72E4CC}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{E2C00808-83C7-4CE4-8075-7E185A90AE04}\1.0]
""="PulseBrowserUpdater TypeLib for IGoogleUpdate3WebUser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{E2C00808-83C7-4CE4-8075-7E185A90AE04}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{E2C00808-83C7-4CE4-8075-7E185A90AE04}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{EA08425E-054B-4564-B0A0-8BAAB76F38E9}\1.0]
""="PulseBrowserUpdater TypeLib for IAppBundleWebUser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{EA08425E-054B-4564-B0A0-8BAAB76F38E9}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{EA08425E-054B-4564-B0A0-8BAAB76F38E9}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{F0A39C88-1BBD-53D5-BB8F-406D8B83F113}\1.0]
""="PulseBrowserUpdater TypeLib for IUpdaterAppStateUser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{F0A39C88-1BBD-53D5-BB8F-406D8B83F113}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{F0A39C88-1BBD-53D5-BB8F-406D8B83F113}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{F4874A57-8C88-4B1D-AAB8-4B06CF98FB29}\1.0]
""="PulseBrowserUpdater TypeLib for IAppVersionWebUser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{F4874A57-8C88-4B1D-AAB8-4B06CF98FB29}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{F4874A57-8C88-4B1D-AAB8-4B06CF98FB29}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{F4F9F399-D63B-5AC7-89F4-7DB385E0BCB8}\1.0]
""="PulseBrowserUpdater TypeLib for IUpdaterInternalCallbackUser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{F4F9F399-D63B-5AC7-89F4-7DB385E0BCB8}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\2"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{F4F9F399-D63B-5AC7-89F4-7DB385E0BCB8}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\2"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{F8D4B43D-7D22-47FE-B6AD-BAC5ED8A1659}\1.0]
""="PulseBrowserUpdater TypeLib for IAppCommandWebUser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{F8D4B43D-7D22-47FE-B6AD-BAC5ED8A1659}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{F8D4B43D-7D22-47FE-B6AD-BAC5ED8A1659}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\3"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{FCFC0CEE-EE7D-5BE8-8DDD-CE4D9ACF9790}\1.0]
""="PulseBrowserUpdater TypeLib for IUpdaterUser"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{FCFC0CEE-EE7D-5BE8-8DDD-CE4D9ACF9790}\1.0\0\win32]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\1"

[HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{FCFC0CEE-EE7D-5BE8-8DDD-CE4D9ACF9790}\1.0\0\win64]
""="C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe\1"

===================== Zoekresultaten voor "OneBrowserOneBUpdate" ==========

====== Einde van Zoeken ======

M-K-D-B · 27.09.2026, 20:07

Vielen Dank für die neuen Logdateien.

Wir führen eine weitere Reparatur mit FRST durch und entfernen noch ein paar Reste.

Reparatur mit FRST
HINWEIS AN ALLE MITLESER:
Dieses FRST-Skript ist ausschließlich für diesen Nutzer gedacht und sollte niemals 1:1 für ein anderes System verwendet werden!

Speichere deine Arbeiten und schließe alle offenen Programme, damit keine Daten verloren gehen.

Markiere den gesamten Inhalt der folgenden Code-Box mit der Maus und kopiere ihn (gleichzeitiges Drücken der beiden Tasten "STRG" + "C"):

Code:

ATTFilter

Start::
Task: {C885B7DB-DB6B-45F6-8EA1-F8B919E23D1C} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (Geen bestand)
Task: {FBDF7F36-4B6A-4FD6-B138-7A7010D82603} - System32\Tasks\Microsoft\Windows\PI\SecureBootEncodeUEFI => %WINDIR%\system32\SecureBootEncodeUEFI.exe (Geen bestand)
Task: {EEC49C91-BCB0-4E42-BEA6-CB620E01EB5F} - System32\Tasks\Microsoft\Windows\UNP\RunUpdateNotificationMgr => %windir%\System32\UNP\UpdateNotificationMgr.exe (Geen bestand)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (Geen bestand)
CustomCLSID: HKU\S-1-5-21-720174342-3053994144-4245047485-1002_Classes\CLSID\{0EC63402-A762-59E6-8094-42CCD06D5224}\localserver32 -> "C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe" --server --service=update-internal => Geen bestand
CustomCLSID: HKU\S-1-5-21-720174342-3053994144-4245047485-1002_Classes\CLSID\{4DAC24AB-B340-4B7E-AD01-1504A7F59EEA}\localserver32 -> "C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe" --server --service=update => Geen bestand
CustomCLSID: HKU\S-1-5-21-720174342-3053994144-4245047485-1002_Classes\CLSID\{75828ED1-7BE8-45D0-8950-AA85CBF74510}\localserver32 -> "C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe" --server --service=update => Geen bestand
CustomCLSID: HKU\S-1-5-21-720174342-3053994144-4245047485-1002_Classes\CLSID\{7D1C7D75-8411-5A64-8662-FC1D7EEC17B2}\localserver32 -> "C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe" --server --service=update => Geen bestand
C:\Users\Avi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pulse Browser.lnk
C:\Users\Avi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Pulse Browser.lnk
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Clients\StartMenuInternet\PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\PulseSoftware PulseBrowser
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\PulseSoftware
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSHTML.EO2XSBJJ7FWZDTAFJVSS2YAESY
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSPDF.EO2XSBJJ7FWZDTAFJVSS2YAESY
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PulseSoftware
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Clients\StartMenuInternet\PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\App Paths\pulsebrowser.exe
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\PulseSoftware PulseBrowser
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\PulseSoftware
DeleteValue: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\RegisteredApplications|PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\CLSID\{0EC63402-A762-59E6-8094-42CCD06D5224}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\CLSID\{4DAC24AB-B340-4B7E-AD01-1504A7F59EEA}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\CLSID\{75828ED1-7BE8-45D0-8950-AA85CBF74510}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\CLSID\{7D1C7D75-8411-5A64-8662-FC1D7EEC17B2}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSHTML.EO2XSBJJ7FWZDTAFJVSS2YAESY
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSPDF.EO2XSBJJ7FWZDTAFJVSS2YAESY
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PulseBrowser
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{027234BD-61BB-4F5C-9386-7FE804171C8C}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{1163C9E6-6391-46E2-96AB-2BCB8907D669}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{13D172EB-2BFB-4D72-AF10-7D33337B7FC6}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{1816D37D-0C7D-5CD7-8212-DFB46B3947A7}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{19309C09-C93C-45DA-8C02-9A8B8198A5E0}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{1E8CAE0D-DBFB-5F8D-8C4C-631A96B2AE9E}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{2C320333-21CF-4FC8-BF8F-4287DB3795B7}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{3057E1F8-2498-4C19-99B5-F7F207DA4DC7}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{3B0D60EF-13AB-518C-90C1-E927736125C6}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{3C0435E1-B19F-4B7A-8481-D7EBAEBFAF47}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{47C8886A-A4B5-4F6C-865A-41A207074DFA}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{5C674FC1-80E3-48D2-987B-79D9D286065B}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{7BF946C6-0665-585B-A730-290CE250C539}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{7D908375-C9D0-44C5-BB98-206F3C24A74C}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{847BB70C-47D0-46C2-8C97-9000A1F9AD99}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{87DBF75E-F590-4802-93FD-F8D07800E2E9}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{9D31EA63-2E06-4D41-98C7-CB1F307DB597}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{A4971B62-FB05-52B3-AB49-2E63B3614613}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{A9EAD16E-5D14-5C33-BF6D-B580FCDB1932}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{AE097E2A-7F4B-4248-8698-D6E515E9C638}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{BE5D3E90-A66C-4A0A-9B7B-1A6B9BF3971E}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{C461FEE4-6003-5401-A5DA-7A19F496ADEA}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{D734C877-21F4-496E-B857-3E5B2E72E4CC}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{E2C00808-83C7-4CE4-8075-7E185A90AE04}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{EA08425E-054B-4564-B0A0-8BAAB76F38E9}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{F0A39C88-1BBD-53D5-BB8F-406D8B83F113}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{F4874A57-8C88-4B1D-AAB8-4B06CF98FB29}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{F4F9F399-D63B-5AC7-89F4-7DB385E0BCB8}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{F8D4B43D-7D22-47FE-B6AD-BAC5ED8A1659}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{FCFC0CEE-EE7D-5BE8-8DDD-CE4D9ACF9790}
Reboot:
End::

Starte nun FRST und klicke direkt auf den Button Reparieren.
Wichtig: Du brauchst den Inhalt der Code-Box nirgends einfügen, da sich FRST den Code aus der Zwischenablage holt!
Das Tool führt die gewünschten Schritte aus und erstellt die Datei fixlog.txt im selben Verzeichnis, in dem sich FRST befindet.
Zum Abschluss wird das System neu gestartet.
Poste mir den Inhalt der Datei fixlog.txt mit deiner nächsten Antwort.

Avloew · 28.09.2026, 13:42

Fix resultaat van Farbar Recovery Scan Tool (x64) Versie: 26-09-2026
Gestart door xxxx (28-09-2026 14:35:28) Run:1
Gestart vanaf C:\Users\xxxx\Desktop
Geladen Profielen: xxxx & Avi
Boot Modus: Normal
==============================================

fixlist inhoud:
*****************
Start::
Task: {C885B7DB-DB6B-45F6-8EA1-F8B919E23D1C} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (Geen bestand)
Task: {FBDF7F36-4B6A-4FD6-B138-7A7010D82603} - System32\Tasks\Microsoft\Windows\PI\SecureBootEncodeUEFI => %WINDIR%\system32\SecureBootEncodeUEFI.exe (Geen bestand)
Task: {EEC49C91-BCB0-4E42-BEA6-CB620E01EB5F} - System32\Tasks\Microsoft\Windows\UNP\RunUpdateNotificationMgr => %windir%\System32\UNP\UpdateNotificationMgr.exe (Geen bestand)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (Geen bestand)
CustomCLSID: HKU\S-1-5-21-720174342-3053994144-4245047485-1002_Classes\CLSID\{0EC63402-A762-59E6-8094-42CCD06D5224}\localserver32 -> "C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe" --server --service=update-internal => Geen bestand
CustomCLSID: HKU\S-1-5-21-720174342-3053994144-4245047485-1002_Classes\CLSID\{4DAC24AB-B340-4B7E-AD01-1504A7F59EEA}\localserver32 -> "C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe" --server --service=update => Geen bestand
CustomCLSID: HKU\S-1-5-21-720174342-3053994144-4245047485-1002_Classes\CLSID\{75828ED1-7BE8-45D0-8950-AA85CBF74510}\localserver32 -> "C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe" --server --service=update => Geen bestand
CustomCLSID: HKU\S-1-5-21-720174342-3053994144-4245047485-1002_Classes\CLSID\{7D1C7D75-8411-5A64-8662-FC1D7EEC17B2}\localserver32 -> "C:\Users\Avi\AppData\Local\PulseSoftware\PulseBrowserUpdater\135.0.7049.101\updater.exe" --server --service=update => Geen bestand
C:\Users\Avi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pulse Browser.lnk
C:\Users\Avi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Pulse Browser.lnk
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Clients\StartMenuInternet\PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\PulseSoftware PulseBrowser
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\PulseSoftware
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSHTML.EO2XSBJJ7FWZDTAFJVSS2YAESY
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSPDF.EO2XSBJJ7FWZDTAFJVSS2YAESY
DeleteKey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PulseSoftware
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Clients\StartMenuInternet\PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\App Paths\pulsebrowser.exe
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\PulseSoftware PulseBrowser
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\PulseSoftware
DeleteValue: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\RegisteredApplications|PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\CLSID\{0EC63402-A762-59E6-8094-42CCD06D5224}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\CLSID\{4DAC24AB-B340-4B7E-AD01-1504A7F59EEA}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\CLSID\{75828ED1-7BE8-45D0-8950-AA85CBF74510}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\CLSID\{7D1C7D75-8411-5A64-8662-FC1D7EEC17B2}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSHTML.EO2XSBJJ7FWZDTAFJVSS2YAESY
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSPDF.EO2XSBJJ7FWZDTAFJVSS2YAESY
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PulseBrowser
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{027234BD-61BB-4F5C-9386-7FE804171C8C}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{1163C9E6-6391-46E2-96AB-2BCB8907D669}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{13D172EB-2BFB-4D72-AF10-7D33337B7FC6}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{1816D37D-0C7D-5CD7-8212-DFB46B3947A7}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{19309C09-C93C-45DA-8C02-9A8B8198A5E0}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{1E8CAE0D-DBFB-5F8D-8C4C-631A96B2AE9E}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{2C320333-21CF-4FC8-BF8F-4287DB3795B7}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{3057E1F8-2498-4C19-99B5-F7F207DA4DC7}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{3B0D60EF-13AB-518C-90C1-E927736125C6}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{3C0435E1-B19F-4B7A-8481-D7EBAEBFAF47}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{47C8886A-A4B5-4F6C-865A-41A207074DFA}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{5C674FC1-80E3-48D2-987B-79D9D286065B}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{7BF946C6-0665-585B-A730-290CE250C539}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{7D908375-C9D0-44C5-BB98-206F3C24A74C}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{847BB70C-47D0-46C2-8C97-9000A1F9AD99}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{87DBF75E-F590-4802-93FD-F8D07800E2E9}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{9D31EA63-2E06-4D41-98C7-CB1F307DB597}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{A4971B62-FB05-52B3-AB49-2E63B3614613}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{A9EAD16E-5D14-5C33-BF6D-B580FCDB1932}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{AE097E2A-7F4B-4248-8698-D6E515E9C638}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{BE5D3E90-A66C-4A0A-9B7B-1A6B9BF3971E}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{C461FEE4-6003-5401-A5DA-7A19F496ADEA}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{D734C877-21F4-496E-B857-3E5B2E72E4CC}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{E2C00808-83C7-4CE4-8075-7E185A90AE04}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{EA08425E-054B-4564-B0A0-8BAAB76F38E9}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{F0A39C88-1BBD-53D5-BB8F-406D8B83F113}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{F4874A57-8C88-4B1D-AAB8-4B06CF98FB29}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{F4F9F399-D63B-5AC7-89F4-7DB385E0BCB8}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{F8D4B43D-7D22-47FE-B6AD-BAC5ED8A1659}
DeleteKey: HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{FCFC0CEE-EE7D-5BE8-8DDD-CE4D9ACF9790}
Reboot:
End::
*****************

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C885B7DB-DB6B-45F6-8EA1-F8B919E23D1C}" => is succesvol verwijderd
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C885B7DB-DB6B-45F6-8EA1-F8B919E23D1C}" => is succesvol verwijderd
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Location\Notifications => is succesvol verplaatst
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Location\Notifications" => is succesvol verwijderd
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FBDF7F36-4B6A-4FD6-B138-7A7010D82603}" => is succesvol verwijderd
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FBDF7F36-4B6A-4FD6-B138-7A7010D82603}" => is succesvol verwijderd
C:\WINDOWS\System32\Tasks\Microsoft\Windows\PI\SecureBootEncodeUEFI => is succesvol verplaatst
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\PI\SecureBootEncodeUEFI" => is succesvol verwijderd
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{EEC49C91-BCB0-4E42-BEA6-CB620E01EB5F}" => is succesvol verwijderd
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EEC49C91-BCB0-4E42-BEA6-CB620E01EB5F}" => is succesvol verwijderd
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UNP\RunUpdateNotificationMgr => is succesvol verplaatst
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunUpdateNotificationMgr" => is succesvol verwijderd
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => is succesvol verwijderd
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => is succesvol verwijderd
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => is succesvol verplaatst
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker" => is succesvol verwijderd
HKU\S-1-5-21-720174342-3053994144-4245047485-1002_Classes\CLSID\{0EC63402-A762-59E6-8094-42CCD06D5224} => is succesvol verwijderd
HKU\S-1-5-21-720174342-3053994144-4245047485-1002_Classes\CLSID\{4DAC24AB-B340-4B7E-AD01-1504A7F59EEA} => is succesvol verwijderd
HKU\S-1-5-21-720174342-3053994144-4245047485-1002_Classes\CLSID\{75828ED1-7BE8-45D0-8950-AA85CBF74510} => is succesvol verwijderd
HKU\S-1-5-21-720174342-3053994144-4245047485-1002_Classes\CLSID\{7D1C7D75-8411-5A64-8662-FC1D7EEC17B2} => is succesvol verwijderd
C:\Users\Avi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pulse Browser.lnk => is succesvol verplaatst
C:\Users\Avi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Pulse Browser.lnk => is succesvol verplaatst
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Clients\StartMenuInternet\PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\PulseSoftware PulseBrowser => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\PulseSoftware => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSHTML.EO2XSBJJ7FWZDTAFJVSS2YAESY => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSPDF.EO2XSBJJ7FWZDTAFJVSS2YAESY => is succesvol verwijderd
"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PulseSoftware" => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Clients\StartMenuInternet\PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY => niet gevonden
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\App Paths\pulsebrowser.exe => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Microsoft\Windows\CurrentVersion\Uninstall\PulseSoftware PulseBrowser => niet gevonden
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\PulseSoftware => niet gevonden
"HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\RegisteredApplications\\PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY" => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\CLSID\{0EC63402-A762-59E6-8094-42CCD06D5224} => niet gevonden
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\CLSID\{4DAC24AB-B340-4B7E-AD01-1504A7F59EEA} => niet gevonden
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\CLSID\{75828ED1-7BE8-45D0-8950-AA85CBF74510} => niet gevonden
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\CLSID\{7D1C7D75-8411-5A64-8662-FC1D7EEC17B2} => niet gevonden
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSHTML.EO2XSBJJ7FWZDTAFJVSS2YAESY => niet gevonden
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PLSPDF.EO2XSBJJ7FWZDTAFJVSS2YAESY => niet gevonden
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\PulseBrowser => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{027234BD-61BB-4F5C-9386-7FE804171C8C} => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{1163C9E6-6391-46E2-96AB-2BCB8907D669} => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{13D172EB-2BFB-4D72-AF10-7D33337B7FC6} => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{1816D37D-0C7D-5CD7-8212-DFB46B3947A7} => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{19309C09-C93C-45DA-8C02-9A8B8198A5E0} => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{1E8CAE0D-DBFB-5F8D-8C4C-631A96B2AE9E} => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{2C320333-21CF-4FC8-BF8F-4287DB3795B7} => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{3057E1F8-2498-4C19-99B5-F7F207DA4DC7} => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{3B0D60EF-13AB-518C-90C1-E927736125C6} => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{3C0435E1-B19F-4B7A-8481-D7EBAEBFAF47} => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{47C8886A-A4B5-4F6C-865A-41A207074DFA} => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{5C674FC1-80E3-48D2-987B-79D9D286065B} => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{7BF946C6-0665-585B-A730-290CE250C539} => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{7D908375-C9D0-44C5-BB98-206F3C24A74C} => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{847BB70C-47D0-46C2-8C97-9000A1F9AD99} => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{87DBF75E-F590-4802-93FD-F8D07800E2E9} => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{9D31EA63-2E06-4D41-98C7-CB1F307DB597} => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{A4971B62-FB05-52B3-AB49-2E63B3614613} => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{A9EAD16E-5D14-5C33-BF6D-B580FCDB1932} => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{AE097E2A-7F4B-4248-8698-D6E515E9C638} => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{BE5D3E90-A66C-4A0A-9B7B-1A6B9BF3971E} => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{C461FEE4-6003-5401-A5DA-7A19F496ADEA} => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{D734C877-21F4-496E-B857-3E5B2E72E4CC} => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{E2C00808-83C7-4CE4-8075-7E185A90AE04} => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{EA08425E-054B-4564-B0A0-8BAAB76F38E9} => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{F0A39C88-1BBD-53D5-BB8F-406D8B83F113} => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{F4874A57-8C88-4B1D-AAB8-4B06CF98FB29} => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{F4F9F399-D63B-5AC7-89F4-7DB385E0BCB8} => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{F8D4B43D-7D22-47FE-B6AD-BAC5ED8A1659} => is succesvol verwijderd
HKEY_USERS\S-1-5-21-720174342-3053994144-4245047485-1002\Software\Classes\TypeLib\{FCFC0CEE-EE7D-5BE8-8DDD-CE4D9ACF9790} => is succesvol verwijderd

Het systeem moest herstart worden.

==== Einde van Fixlog 14:35:29 ====

M-K-D-B · 28.09.2026, 14:12

Gut gemacht.

Erscheint immer noch eine Popup bzw. eine Meldung so wie du es im ersten Post beschrieben hast?

Neuer FRST-Scan

Starte FRST erneut und klicke auf Untersuchen.
FRST erstellt nun zwei Logdateien (FRST.txt und Addition.txt).
Poste mir beide Logdateien mit deiner nächsten Antwort.

Avloew · 29.09.2026, 11:52

Hallo Matthias,
erstmal vielen Dank für alles. Leider ist schon wieder im Browser ein Fenster/Tab erschienen mit einer Warnung. Ich schicke im Anschluss nochmal FRST.txt und Addition.txt.
Falls die Meldung benötigt wird bitte ich um einen Hinweis wie man ein Bild schicken kann.

Extra scanresultaten van Farbar Recovery Scan Tool (x64) Versie: 26-09-2026
Gestart door xxxx (29-09-2026 12:32:33)
Gestart vanaf C:\Users\xxxx\Desktop
Microsoft Windows 11 Pro Versie 25H2 26200.9457 (X64) (2026-04-15 14:04:23)
Boot Modus: Normal
==========================================================

==================== Accounts: =============================

(Als een item is opgenomen in de fixlist, zal het worden verwijderd.)

Administrator (S-1-5-21-720174342-3053994144-4245047485-500 - Administrators - Disabled)
Avi (S-1-5-21-720174342-3053994144-4245047485-1002 - Limited - Enabled) => C:\Users\Avi
DefaultAccount (S-1-5-21-720174342-3053994144-4245047485-503 - Limited - Disabled)
Gast (S-1-5-21-720174342-3053994144-4245047485-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-720174342-3053994144-4245047485-504 - Limited - Disabled)
xxxx (DisplayName: A** ***w) (S-1-5-21-720174342-3053994144-4245047485-1001 - Administrators - Enabled) [MS Account] => C:\Users\xxxx

==================== Security Center ========================

(Als een item is opgenomen in de fixlist, zal het worden verwijderd.)

AV: Malwarebytes (Enabled - Up to date) {A537353A-1D6A-F6B5-9153-CE1CF80FBE66}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Geïnstalleerde programma's ======================

(Alleen de adware-programma's met 'verborgen' vlag kunnen worden toegevoegd aan de fixlist om ze zichtbaar te maken. De adware-programma's moeten handmatig gedeïnstalleerd worden.)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 153.0.8010.54 - Google LLC)
KeePass Password Safe 2.61.1 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.61.1 - Dominik Reichl)
Malwarebytes version 5.7.1.346 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.7.1.346 - Malwarebytes)
Microsoft 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 16.0.20326.20158 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 154.0.4258.37 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 154.0.4258.37 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 26.168.0830.0006 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{ACF2602E-BD31-4BE5-AC03-9C8FDB638ADA}) (Version: 4.75.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.50.35719 (HKLM\...\{AECD4ED0-8A3B-41E9-92D1-6BEE0374CCAF}) (Version: 14.50.35719 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.50.35719 (HKLM\...\{61B44572-8722-4DAF-8ACF-8E742D30BCC5}) (Version: 14.50.35719 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.50.35719 (HKLM-x32\...\{773AD50D-AAE6-4BA1-AD01-B5A38874C840}) (Version: 14.50.35719 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.50.35719 (HKLM-x32\...\{5A0DFA55-3851-45BC-8B20-95EA4BF5812D}) (Version: 14.50.35719 - Microsoft Corporation) Hidden
Microsoft Visual C++ v14 Redistributable (x64) - 14.50.35719 (HKLM-x32\...\{91ee571b-0e8a-4c65-9eaf-2e2f5fc60c00}) (Version: 14.50.35719.0 - Microsoft Corporation)
Microsoft Visual C++ v14 Redistributable (x86) - 14.50.35719 (HKLM-x32\...\{0e4ccf1b-d073-4cfe-8a24-e86185719b56}) (Version: 14.50.35719.0 - Microsoft Corporation)
Microsoft Windows Application Compatibility Fix Database (HKLM\...\{22221111-1111-1111-1111-111111111111}.sdb) (Version: - )
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox) (Version: 156.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 149.0.2 - Mozilla)
Mozilla Thunderbird (x64 de) (HKLM\...\Mozilla Thunderbird 154.0 (x64 de)) (Version: 154.0 - Mozilla)
NimbusPDF (HKU\S-1-5-21-720174342-3053994144-4245047485-1002\...\NimbusPDF) (Version: 5.5.0.0 - NimbusPDF)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.20326.20072 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.20326.20100 - Microsoft Corporation) Hidden
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 11.56 - Ghisler Software GmbH)
Update for x64-based Windows Systems (KB5001716) (HKLM\...\{DA80A019-4C3B-4DAA-ACA1-6937D7CAAF9E}) (Version: 8.94.0.0 - Microsoft Corporation)

Chrome apps:
============
Google Photos (HKU\S-1-5-21-720174342-3053994144-4245047485-1002\...\0eb83426972b3851e5119c68f5715bbd) (Version: 1.0 - Google\Chrome)

Packages:
=========
Intel® Grafik-Kontrollraum -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt [2026-04-15] (INTEL CORP) [Startup Task]
Local AI Manager for Microsoft 365 -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\AI [2026-09-25] ()
Malwarebytes Anti-Malware -> C:\Program Files\Malwarebytes\Anti-Malware [2026-09-26] ()
Microsoft Defender -> C:\Program Files\WindowsApps\Microsoft.6365217CE6EB4_102.2504.16004.0_x64__8wekyb3d8bbwe [2026-04-28] (Microsoft Corporation) [Startup Task]
Microsoft.Office.ActionsServer -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\ActionsServer [2026-09-25] ()
OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16 [2026-09-25] ()

==================== Aangepaste CLSID (gefilterd): ==============

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

CustomCLSID: HKU\S-1-5-21-720174342-3053994144-4245047485-1002_Classes\CLSID\{12834C7A-80F3-4459-AD52-7D8DE4248D61}\InprocServer32 -> C:\Program Files\Mozilla Thunderbird\notificationserver.dll (Mozilla Corporation -> Mozilla Foundation)
CustomCLSID: HKU\S-1-5-21-720174342-3053994144-4245047485-1002_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-09-26] (Malwarebytes Inc -> Malwarebytes)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncShell64.dll [2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-09-26] (Malwarebytes Inc -> Malwarebytes)

==================== Codecs (gefilterd) ====================

==================== Snelkoppelingen & WMI ========================

(De items kunnen worden opgenomen in de fixlist.txt om hersteld of verwijderd te worden.)

ShortcutWithArgument: C:\Users\xxxx\Desktop\Profiel 1 - Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation) -> --profile-directory="Default"

==================== Geladen Modules (gefilterd) =============

==================== Alternate Data Streams (gefilterd) ========

(Als een item is opgenomen in de fixlist, wordt alleen de ADS verwijderd.)

AlternateDataStreams: C:\Users\xxxx\Desktop\adwcleaner.exe:MBAM.Zone.Identifier [282]

==================== Veilige Modus (gefilterd) ==================

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. De waarde van "AlternateShell" wordt hersteld.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Bestandskoppeling (gefilterd) =================

==================== Internet Explorer (gefilterd) =============

BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2026-08-23] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts inhoud: =========================

(Indien nodig kan Hosts:-opdracht worden opgenomen in de fixlist om Hosts te resetten.)

2021-06-05 14:08 - 2021-06-05 14:08 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Network ===========================

(Momenteel is er geen automatische fix voor dit onderdeel.)

DNS Servers: 192.168.10.1
Windows Firewall is ingeschakeld.

Network Binding:
=============
Ethernet: Realtek PCIe GbE Family Controller -> rtcx21x64.sys
WLAN: Realtek 8822CE Wireless LAN 802.11ac PCI-E NIC -> rtwlane.sys
Bluetooth-Netzwerkverbindung: Bluetooth Device (Personal Area Network) -> bthpan.sys

==================== Andere gebieden ===========================

(Momenteel is er geen automatische fix voor dit onderdeel.)

HKU\S-1-5-21-720174342-3053994144-4245047485-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\DesktopSpotlight\Assets\Images\image_2.jpg
HKU\S-1-5-21-720174342-3053994144-4245047485-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Avi\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalCache\Microsoft\IrisService\1162948012618874853\134350948440936115. jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)

==================== MSCONFIG/TASK MANAGER Uitgeschakelde items ==

==================== Firewall regels (gefilterd) ================

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

FirewallRules: [{D24F05E1-0EDE-41C1-9E28-013F4C1D6779}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{193B94B9-E5DD-4F88-8D72-BC11A32A013E}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{21B791F5-5022-45A1-8FDD-0B6A19393F1C}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{FBFD9987-0C01-4B02-B05A-4BA833568D56}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{B6CF29AD-4E31-4EFF-909A-B6BA1540F7CC}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2609.52011.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{363FFBF1-E9F4-47D3-BA39-D06F11927940}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2609.52011.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{389EE7DE-C91A-41E5-89BE-DE48641AE85B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2609.52011.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{6E3E58BF-F6C0-4144-A296-21F55E9EA1C0}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2609.52011.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Herstelpunten =========================

22-09-2026 11:22:27 Microsoft Visual C++ v14 Redistributable (x64) - 14.50.35719
25-09-2026 17:52:45 Windows Update
29-09-2026 10:57:05 Windows Update

==================== Defecte Apparaatbeheer Apparaten ============
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI-Datensammlungs- und Signalverarbeitungscontroller
Description: PCI-Datensammlungs- und Signalverarbeitungscontroller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI-Gerät
Description: PCI-Gerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI-Gerät
Description: PCI-Gerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI-Gerät
Description: PCI-Gerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Basissystemgerät
Description: Basissystemgerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI-Gerät
Description: PCI-Gerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI-Gerät
Description: PCI-Gerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI-Gerät
Description: PCI-Gerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: SM-Bus-Controller
Description: SM-Bus-Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI-Gerät
Description: PCI-Gerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI-Gerät
Description: PCI-Gerät
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI-Kommunikationscontroller (einfach)
Description: PCI-Kommunikationscontroller (einfach)
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

==================== Eventlog fouten: ========================

Applicatiefouten:
==================
Error: (09/29/2026 10:54:31 AM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005. Prozess-ID (dezimal): 10724. Meldungs-ID: [0x2509].

Error: (09/28/2026 02:23:38 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005. Prozess-ID (dezimal): 2952. Meldungs-ID: [0x2509].

Error: (09/28/2026 11:43:47 AM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005. Prozess-ID (dezimal): 15824. Meldungs-ID: [0x2509].

Error: (09/28/2026 10:43:58 AM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005. Prozess-ID (dezimal): 12132. Meldungs-ID: [0x2509].

Error: (09/27/2026 05:14:05 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005. Prozess-ID (dezimal): 14680. Meldungs-ID: [0x2509].

Error: (09/27/2026 04:14:06 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005. Prozess-ID (dezimal): 15468. Meldungs-ID: [0x2509].

Error: (09/26/2026 08:35:37 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005. Prozess-ID (dezimal): 15964. Meldungs-ID: [0x2509].

Error: (09/26/2026 05:03:54 AM) (Source: .NET Runtime) (EventID: 1022) (User: )
Description: .NET Runtime version 4.0.30319.0 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005. Prozess-ID (dezimal): 1108. Meldungs-ID: [0x2509].

Systeemfouten:
=============
Error: (09/29/2026 11:45:53 AM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3502) (User: NT-AUTORITÄT)
Description: Fehler beim Aufheben der Gerätetrennung (Entkoppelung).

Error: (09/29/2026 11:45:51 AM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3502) (User: NT-AUTORITÄT)
Description: Fehler beim Aufheben der Gerätetrennung (Entkoppelung).

Error: (09/29/2026 11:43:45 AM) (Source: Microsoft-Windows-Ntfs) (EventID: 98) (User: NT-AUTORITÄT)
Description: D:\Device\HarddiskVolume53

Error: (09/29/2026 11:42:29 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-7UO7M50)
Description: Der Server "{9BA05972-F6A8-11CF-A442-00A0C90A8F39}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (09/29/2026 10:53:46 AM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3502) (User: NT-AUTORITÄT)
Description: Fehler beim Aufheben der Gerätetrennung (Entkoppelung).

Error: (09/29/2026 10:53:44 AM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3502) (User: NT-AUTORITÄT)
Description: Fehler beim Aufheben der Gerätetrennung (Entkoppelung).

Error: (09/29/2026 10:51:38 AM) (Source: Microsoft-Windows-Ntfs) (EventID: 98) (User: NT-AUTORITÄT)
Description: D:\Device\HarddiskVolume53

Error: (09/28/2026 10:32:46 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-7UO7M50)
Description: Der Server "{9BA05972-F6A8-11CF-A442-00A0C90A8F39}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (09/13/2026 06:33:39 PM) (Source: disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (09/12/2026 09:39:39 PM) (Source: disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk2\DR4 gefunden.

Error: (09/12/2026 06:25:26 PM) (Source: disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Windows Defender:
================
TimeCreated : 9/26/2026 2:16:32 PM
Message : Microsoft Defender Antivirus şςáи ђдš ьзέñ ŝтöρφėđ вęƒöřè ĉόмφℓέŧïòň.%ñ %τŞ¢аπ
ĨĐ:%ъ{6B722CE3-48BA-4FFD-B60C-9ABC1BFF52DB}%и %тЅ¢âл Ţỳре:%ъAntimalware%ⁿ %ţŞçăл
Ραґämёťêřѕ:%ъSchnellüberprüfung%ⁿ %τŲśêя:%вNT-AUTORITÄT\SYSTEM%й %τЅťθр Ѓεăŝŏŉ:%вŜçђеðυłèð ŝĉąň ẅаş
ŝкìρрèđ ь℮ĉãùşë ŧĥ℮ ŀаѕт ѕû¢ĉ℮ѕšƒŭĺ ѕςáл щāš щīŧħіŉ ťћę ℓαŝτ 7 ðàÿş

TimeCreated : 9/25/2026 12:59:38 PM
Message : Microsoft Defender Antivirus şςáи ђдš ьзέñ ŝтöρφėđ вęƒöřè ĉόмφℓέŧïòň.%ñ %τŞ¢аπ
ĨĐ:%ъ{7D427987-C8AD-41E6-A69F-9400BAB4C8D9}%и %тЅ¢âл Ţỳре:%ъAntimalware%ⁿ %ţŞçăл
Ραґämёťêřѕ:%ъSchnellüberprüfung%ⁿ %τŲśêя:%вNT-AUTORITÄT\SYSTEM%й %τЅťθр Ѓεăŝŏŉ:%вŜçђеðυłèð ŝĉąň ẅаş
ŝкìρрèđ ь℮ĉãùşë ŧĥ℮ ŀаѕт ѕû¢ĉ℮ѕšƒŭĺ ѕςáл щāš щīŧħіŉ ťћę ℓαŝτ 7 ðàÿş

TimeCreated : 9/24/2026 12:12:38 PM
Message : Microsoft Defender Antivirus şςáи ђдš ьзέñ ŝтöρφėđ вęƒöřè ĉόмφℓέŧïòň.%ñ %τŞ¢аπ
ĨĐ:%ъ{E14F956E-A965-4129-B7F5-71E4A3EB7370}%и %тЅ¢âл Ţỳре:%ъAntimalware%ⁿ %ţŞçăл
Ραґämёťêřѕ:%ъSchnellüberprüfung%ⁿ %τŲśêя:%вNT-AUTORITÄT\SYSTEM%й %τЅťθр Ѓεăŝŏŉ:%вŜçђеðυłèð ŝĉąň ẅаş
ŝкìρрèđ ь℮ĉãùşë ŧĥ℮ ŀаѕт ѕû¢ĉ℮ѕšƒŭĺ ѕςáл щāš щīŧħіŉ ťћę ℓαŝτ 7 ðàÿş

TimeCreated : 9/23/2026 12:47:09 PM
Message : Microsoft Defender Antivirus şςáи ђдš ьзέñ ŝтöρφėđ вęƒöřè ĉόмφℓέŧïòň.%ñ %τŞ¢аπ
ĨĐ:%ъ{90AE9231-F37D-4B82-AB5D-C35893ABC707}%и %тЅ¢âл Ţỳре:%ъAntimalware%ⁿ %ţŞçăл
Ραґämёťêřѕ:%ъSchnellüberprüfung%ⁿ %τŲśêя:%вNT-AUTORITÄT\SYSTEM%й %τЅťθр Ѓεăŝŏŉ:%вŜçђеðυłèð ŝĉąň ẅаş
ŝкìρрèđ ь℮ĉãùşë ŧĥ℮ ŀаѕт ѕû¢ĉ℮ѕšƒŭĺ ѕςáл щāš щīŧħіŉ ťћę ℓαŝτ 7 ðàÿş

TimeCreated : 9/22/2026 12:49:46 PM
Message : Microsoft Defender Antivirus şςáи ђдš ьзέñ ŝтöρφėđ вęƒöřè ĉόмφℓέŧïòň.%ñ %τŞ¢аπ
ĨĐ:%ъ{9FD57E14-6A8D-4490-94C0-0C927F228970}%и %тЅ¢âл Ţỳре:%ъAntimalware%ⁿ %ţŞçăл
Ραґämёťêřѕ:%ъSchnellüberprüfung%ⁿ %τŲśêя:%вNT-AUTORITÄT\SYSTEM%й %τЅťθр Ѓεăŝŏŉ:%вҐРĈ ĉоⁿŋёćťìθń гΰηďőωл

TimeCreated : 9/21/2026 12:25:49 PM
Message : Microsoft Defender Antivirus şςáи ђдš ьзέñ ŝтöρφėđ вęƒöřè ĉόмφℓέŧïòň.%ñ %τŞ¢аπ
ĨĐ:%ъ{C1D77AA7-A502-40C9-8DC8-A5441AA4826F}%и %тЅ¢âл Ţỳре:%ъAntimalware%ⁿ %ţŞçăл
Ραґämёťêřѕ:%ъSchnellüberprüfung%ⁿ %τŲśêя:%вNT-AUTORITÄT\SYSTEM%й %τЅťθр Ѓεăŝŏŉ:%вҐРĈ ĉоⁿŋёćťìθń гΰηďőωл

TimeCreated : 9/21/2026 12:16:05 PM
Message : Microsoft Defender Antivirus şςáи ђдš ьзέñ ŝтöρφėđ вęƒöřè ĉόмφℓέŧïòň.%ñ %τŞ¢аπ
ĨĐ:%ъ{01304154-4C09-4F48-87A6-B67A2DF1C59A}%и %тЅ¢âл Ţỳре:%ъAntimalware%ⁿ %ţŞçăл
Ραґämёťêřѕ:%ъSchnellüberprüfung%ⁿ %τŲśêя:%вNT-AUTORITÄT\SYSTEM%й %τЅťθр Ѓεăŝŏŉ:%вҐРĈ ĉоⁿŋёćťìθń гΰηďőωл

TimeCreated : 9/20/2026 12:22:12 PM
Message : Microsoft Defender Antivirus şςáи ђдš ьзέñ ŝтöρφėđ вęƒöřè ĉόмφℓέŧïòň.%ñ %τŞ¢аπ
ĨĐ:%ъ{CDCFAD25-D9E2-4A90-9CBA-0F7C72CDC71A}%и %тЅ¢âл Ţỳре:%ъAntimalware%ⁿ %ţŞçăл
Ραґämёťêřѕ:%ъSchnellüberprüfung%ⁿ %τŲśêя:%вNT-AUTORITÄT\SYSTEM%й %τЅťθр Ѓεăŝŏŉ:%вŜçђеðυłèð ŝĉąň ẅаş
ŝкìρрèđ ь℮ĉãùşë ŧĥ℮ ŀаѕт ѕû¢ĉ℮ѕšƒŭĺ ѕςáл щāš щīŧħіŉ ťћę ℓαŝτ 7 ðàÿş

CodeIntegrity:
===============
Date: 2026-09-29 12:19:42
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SecurityHealthService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbamsi64.dll that did not meet the Windows signing level requirements.

==================== Geheugen info ===========================

BIOS: American Megatrends International, LLC. M6JSPSODIMM_16GB_SDZ_V002 06/21/2024
Moederbord: DEFAULT STRING DEFAULT STRING
Processor: Intel(R) Celeron(R) N5095 @ 2.00GHz
Percentage geheugen in gebruik: 64%
Totaal fysiek RAM-geheugen: 7971.34 MB
Beschikbaar fysiek RAM-geheugen: 2801.95 MB
Totaal Virtueel geheugen: 12323.34 MB
Beschikbaar Virtueel geheugen: 6183.61 MB

==================== Schijven ================================

Disk 0 - Drive c: () (Fixed) (Total:1906.75 GB) (Free:1797 GB) (Model: SSD 2TB) NTFS
Disk 1 - Drive d: () (Fixed) (Total:931.51 GB) (Free:631.91 GB) (Model: TOSHIBA External USB 3.0 USB Device) NTFS

Disk 0 - \\?\Volume{82f629ed-f630-4d1a-ad0c-08fc93d918a0}\ () (Fixed) (Total:887 MB) (Free:114.8 MB) NTFS
Disk 0 - \\?\Volume{f29678c0-7372-4cd8-9544-4a43a8838c66}\ () (Fixed) (Total:96 MB) (Free:61.39 MB) FAT32

==================== MBR & Partitietabel ====================

============================================================
Disk: 0 (Size: 1907.73 GB) (Disk ID: 8D0EADF1)

Partitions:
===========
Partition Style : GPT
Partition Count : 4
Disk ID : {8C0EAE55-4DFF-41EE-8F51-96504D368531}
Usable Offset : 0.02 MB
Usable Length : 1907.73 GB
Max Partitions : 128

Partition 1
Type : EFI System Partition
Size : 100 MB
Offset : 1 MB
Type GUID : {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}
Partition GUID : {F29678C0-7372-4CD8-9544-4A43A8838C66}
GPT Name : EFI system partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 2
Type : Microsoft Reserved (MSR)
Size : 16 MB
Offset : 101 MB
Type GUID : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}
Partition GUID : {C3F2E73A-1399-4BAA-A546-6E262FDE09D8}
GPT Name : Microsoft reserved partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 3
Type : Basic Data Partition
Size : 1906.75 GB
Offset : 117 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {833C1F85-D68D-43C5-B56A-7FD4E5F9FB33}
GPT Name : Basic data partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : No
Platform Required: No
------------------------------------------------------------
Partition 4
Type : Windows Recovery
Size : 887 MB
Offset : 1952625 MB
Type GUID : {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}
Partition GUID : {82F629ED-F630-4D1A-AD0C-08FC93D918A0}
Attributes : 0x8000000000000001
Attribute Flags : Platform Required, No Default Drive Letter
Hidden : Yes
Platform Required: Yes
------------------------------------------------------------

============================================================
Disk: 1 (Size: 931.51 GB) (Disk ID: 0009088E)

Partitions:
===========
Partition Style : MBR
Partition Count : 4
Disk Signature : 0x0009088E

Partition 1
Type : MBR 0x07 (NTFS / exFAT / HPFS)
Size : 931.51 GB
Offset : 1 MB
Partition GUID : {0009088E-0000-0000-0000-100000000000}
Bootable : No
Recognized : Yes
Hidden Sectors : 2048
------------------------------------------------------------
Partition Entries : 4
Actual Partitions : 1

============================================================

==================== Einde van Addition.txt

M-K-D-B · 29.09.2026, 16:22

Servus,

vielen Dank für die neue Addition.txt.
Poste bitte noch die neue FRST.txt Logdatei.

Bilder kannst du kostenlos hier hochladen und mir den Link zukommen lassen: ImgBB

Zudem bitte ESET als Zweitmeinung ausführen:
Führe ESET Online Scanner (EOS) gemäß der bebilderten Anleitung aus und poste abschließend die Logdatei.

Avloew · 30.09.2026, 12:04

Scanresultaten van Farbar Recovery Scan Tool (FRST) (x64) Versie: 26-09-2026
Gestart door xxxx (Beheerder) op DESKTOP-7UO7M50 (DEFAULT STRING DEFAULT STRING) (29-09-2026 12:29:11)
Gestart vanaf C:\Users\xxxx\Desktop\FRST64.exe
Geladen Profielen: xxxx & Avi
Platform: Microsoft Windows 11 Pro Versie 25H2 26200.9457 (X64) Taal: Niederländisch (Niederlande) -> Deutsch (Deutschland)
Standaardbrowser: Chrome
Boot Modus: Normal

==================== Processen (gefilterd) =================

(Als een item is opgenomen in de fixlist, zal het proces worden gesloten. Het bestand zal niet worden verplaatst.)

(C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\154.0.4258.37\identity_helper.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe <2>
(C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2637.100.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\154.0.4258.37\msedgewebview2.exe
(C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_526.21100.40.0_x64__cw5n1h2txyewy\WidgetBoard.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\154.0.4258.37\msedgewebview2.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_bdd49bbe6b990549\igfxCUIServiceN.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_bdd49bbe6b990549\igfxEMN.exe <2>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\26.168.0830.0006\OneDrive.Sync.Service.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe <2>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <4>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\154.0.4258.37\msedgewebview2.exe <20>
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_bdd49bbe6b990549\igfxCUIServiceN.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_5b51a286c5d2f192\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_65ac4d73bb85cb27\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d51901c26227fb29\WMIRegistrationService.exe
(services.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncHelper.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(sihost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2637.100.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe
(sihost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.6365217CE6EB4_102.2504.16004.0_x64__8wekyb3d8bbwe\MicrosoftSecurityApp\MicrosoftSecurityApp.exe
(sihost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2609.52011.0_x64__8wekyb3d8bbwe\m365copilot_autostarter.exe <2>
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.WindowsStore_22608.1401.4.0_x64__8wekyb3d8bbwe\StoreDesktopExtension.exe <2>
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileCoAuth.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.380.2.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AppActions.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\amd64\MoUsoCoreWorker.exe
(winlogon.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\LogonUI.exe

==================== Register (gefilterd) ===================

(Als een item is opgenomen in de fixlist, zal het registeritem worden teruggezet naar de standaardwaarden of verwijderd. Het bestand zal niet worden verplaatst.)

HKLM\...\Run: [KeePass 2 PreLoad] => C:\Program Files\KeePass Password Safe 2\KeePass.exe [3265880 2026-05-01] (Open Source Developer, Dominik Reichl -> Dominik Reichl)
HKU\S-1-5-21-720174342-3053994144-4245047485-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4756840 2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-720174342-3053994144-4245047485-1002\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4756840 2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-720174342-3053994144-4245047485-1002\...\Run: [Microsoft.Lists] => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\OneDrive.Sync.Service.exe [967528 2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-720174342-3053994144-4245047485-1002\...\Run: [MicrosoftEdgeAutoLaunch_E9668399593D9418202A6A14E62927B5] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [5403976 2026-09-24] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Windows x64\Print Processors\Canon TR4700 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDHL.DLL [543744 2021-07-11] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ FAX Language Monitor TR4700 series: C:\WINDOWS\system32\CNCALHL.DLL [266752 2021-03-24] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor TR4700 series: C:\WINDOWS\system32\CNMLMHL.DLL [989184 2021-07-11] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4924568 2026-08-11] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\153.0.8010.54\Installer\chrmstp.exe [8030872 2026-09-24] (Google LLC -> Google LLC)

==================== Geplande Taken (gefilterd) =================

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

Task: {A1818583-6748-466E-BF36-382A278B24A4} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem156.0.8067.0{6084B7CD-BBAF-4303-9388-A243A5554625} => C:\Program Files (x86)\Google\GoogleUpdater\156.0.8067.0\updater.exe [9992344 2026-09-21] (Google LLC -> Google LLC)
Task: {DB9B7F29-C0F4-471A-B1F1-BCFA8F05454C} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ActionsServer\ActionsServer.exe [16470400 2026-09-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {A49B97C6-6FF2-4149-92FB-1612E0A16ED4} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28440976 2026-09-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {3074B11E-C6AC-44C2-A9D3-776CBF825715} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\opushutil.exe [69984 2026-09-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {05CD1DD8-E104-4E97-ACAB-FC62D4C491E6} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28440976 2026-09-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {FEEC8C07-4164-4C10-9F4F-569A1B1FE320} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [426352 2026-09-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {50D01334-1023-48F9-A745-229B25C2A917} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [426352 2026-09-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {089973E0-70BF-421C-B7BF-5BF193D7E1C1} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [1328920 2026-08-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {2003DE6A-DD7B-4940-968C-018A746C00DF} - System32\Tasks\Microsoft\Office\Office Startup Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ActionsServer\ActionsServer.exe [16470400 2026-09-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {6462339D-2DE6-45D0-BDC4-E85C09BA59D5} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-720174342-3053994144-4245047485-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [1079424 2026-09-25] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (de data item heeft 6 meer tekens).
Task: {569EC90A-5499-4FFF-AB15-0B72EB8A2BF3} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-720174342-3053994144-4245047485-1002 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [1079424 2026-09-25] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (de data item heeft 6 meer tekens).
Task: {61437EE8-036C-4937-851E-09B3C38EE610} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [44160 2026-09-25] (Mozilla Corporation -> Mozilla Foundation)
Task: {BE898A6F-E989-42A2-8DC5-D42CE1BF448B} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4409744 2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {039A580A-D7C3-41D8-8DD4-7B637584C717} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-720174342-3053994144-4245047485-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4409744 2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {52A7F5B2-66FB-4F94-979E-99DAADA3C91D} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-720174342-3053994144-4245047485-1002 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4409744 2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {09CAE655-FE75-4742-9376-AE36E9DD6787} - System32\Tasks\OneDrive Startup Task-S-1-5-21-720174342-3053994144-4245047485-1001 => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\OneDriveLauncher.exe [866192 2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {BF2D235B-27CE-4BC4-A2BB-875ED03C42FA} - System32\Tasks\OneDrive Startup Task-S-1-5-21-720174342-3053994144-4245047485-1002 => C:\Program Files\Microsoft OneDrive\26.168.0830.0006\OneDriveLauncher.exe [866192 2026-09-23] (Microsoft Corporation -> Microsoft Corporation)

(Als een item is opgenomen in de fixlist, wordt de taak (job) bestand verplaatst. Het bestand dat wordt uitgevoerd door de taak zal niet worden verplaatst.)

==================== Internet (gefilterd) ====================

(Als een item is opgenomen in de fixlist en een registeritem is, wordt het verwijderd of hersteld naar de standaard.)

Tcpip\Parameters: [DhcpNameServer] 192.168.10.1
Tcpip\..\Interfaces\{7786a279-fc7f-4bd0-b9c6-12cee5554e3c}: [DhcpNameServer] 192.168.10.1
Tcpip\..\Interfaces\{7786a279-fc7f-4bd0-b9c6-12cee5554e3c}: [DhcpDomain] fritz.box

FireFox:
========
FF TaskBarID: 35565CD3A3E82193 -> C:\Users\xxxx\AppData\Local\Mozilla Firefox
FF TaskBarID: 308046B0AF4A39CB -> C:\Program Files\Mozilla Firefox
FF DefaultProfile: i5ay6gwk.default-release -> 308046B0AF4A39CB
FF ProfilePath: C:\Users\xxxx\AppData\Roaming\Mozilla\Firefox\Profiles\nrwbdzd9.default [2026-04-15]
FF ProfilePath: C:\Users\xxxx\AppData\Roaming\Mozilla\Firefox\Profiles\i5ay6gwk.default-release [2026-04-22]
FF Homepage: Mozilla\Firefox\Profiles\i5ay6gwk.default-release -> Google
FF Extension: (New Tab) - C:\Users\xxxx\AppData\Roaming\Mozilla\Firefox\Profiles\i5ay6gwk.default-release\Extensions\newtab@mozilla.org.xpi [2026-04-15]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2026-08-23] (Microsoft Corporation -> Microsoft Corporation)

Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\xxxx\AppData\Local\Microsoft\Edge\User Data\Default [2026-04-22]
Edge Extension: (Google Docs Offline) - C:\Users\xxxx\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-04-22]
Edge Extension: (Edge relevant text changes) - C:\Users\xxxx\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2026-04-22]
Edge Profile: C:\Users\xxxx\AppData\Local\Microsoft\Edge\User Data\Profile 1 [2026-04-22]
Edge Extension: (Google Docs Offline) - C:\Users\xxxx\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-04-15]
Edge Extension: (Edge relevant text changes) - C:\Users\xxxx\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2026-04-15]

Chrome:
=======
CHR Profile: C:\Users\xxxx\AppData\Local\Google\Chrome\User Data\Default [2026-09-29]
CHR DownloadDir: C:\Users\xxxx\Desktop
CHR Extension: (Google Docs Offline) - C:\Users\xxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-09-25]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\xxxx\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2026-04-15]

==================== Services (gefilterd) ===================

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13372816 2026-09-15] (Microsoft Corporation -> Microsoft Corporation)
R3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\26.168.0830.0006\FileSyncHelper.exe [3800424 2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [11667696 2026-09-26] (Malwarebytes Inc -> Malwarebytes)
S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [4291576 2026-09-26] (Malwarebytes Inc -> Malwarebytes)
S3 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MpDefenderCoreService.exe [2307776 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\26.168.0830.0006\OneDriveUpdaterService.exe [4098960 2026-09-23] (Microsoft Corporation -> Microsoft Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [914752 2026-09-09] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\NisSrv.exe [5311776 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\MsMpEng.exe [291360 2026-09-18] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (gefilterd) ===================

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [598016 2026-04-15] (Microsoft Corporation) [Bestand niet getekend]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [212992 2026-04-15] (Microsoft Corporation) [Bestand niet getekend]
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [114688 2026-04-15] (Microsoft Corporation) [Bestand niet getekend]
R1 ESProtectionDriver; \??\C:\WINDOWS\system32\drivers\mbae.sys [159296 2026-09-26] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [83008 2026-09-04] (Microsoft Windows -> Microsoft Corporation)
R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [235624 2026-09-26] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [22120 2026-09-26] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\System32\Drivers\farflt11.sys [217192 2026-09-26] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\System32\Drivers\mbam.sys [133224 2026-09-29] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [245864 2026-09-26] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMWebProtection; \??\C:\WINDOWS\system32\DRIVERS\mwac.sys [190096 2026-09-29] (Malwarebytes Inc -> )
R3 rtcx21; C:\WINDOWS\System32\DriverStore\FileRepository\rtcx21x64.inf_amd64_feec7a9662e785f0\rtcx21x64.sys [539648 2024-03-28] (Microsoft Windows -> Realtek)
S4 WdAiNisDrv; C:\WINDOWS\System32\drivers\wd\WdAiNisDrv.sys [51264 2026-09-18] (Microsoft Windows -> Microsoft Corporation)
S3 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21632 2026-09-18] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [664592 2026-09-18] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [137240 2026-09-18] (Microsoft Windows -> Microsoft Corporation)
S3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2026-04-15] (Microsoft Windows -> Microsoft Corporation)
S3 WSDScan; C:\WINDOWS\System32\DriverStore\FileRepository\sti.inf_amd64_8ce330c68e1a560b\WSDScan.sys [61440 2026-09-09] (Microsoft Windows -> Microsoft Corporation)

==================== SvcHost (gefilterd) ===================

(Als een item is opgenomen in de fixlist, wordt het uit het register verwijderd. Het bestand zal niet worden verplaatst tenzij apart vermeld.)

==================== Een maand (aangemaakt) (gefilterd) =========

(Als een item is opgenomen in de fixlist, wordt de map of het bestand verplaatst.)

2026-09-29 12:29 - 2026-09-29 12:30 - 000020805 _____ C:\Users\xxxx\Desktop\FRST.txt
2026-09-29 11:48 - 2026-09-29 11:48 - 000787094 _____ C:\WINDOWS\system32\perfh013.dat
2026-09-29 11:48 - 2026-09-29 11:48 - 000734214 _____ C:\WINDOWS\system32\perfh007.dat
2026-09-29 11:48 - 2026-09-29 11:48 - 000161738 _____ C:\WINDOWS\system32\perfc013.dat
2026-09-29 11:48 - 2026-09-29 11:48 - 000158294 _____ C:\WINDOWS\system32\perfc007.dat
2026-09-29 11:44 - 2026-09-29 11:44 - 000190096 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2026-09-27 16:34 - 2026-09-27 16:34 - 000000000 ____D C:\Users\xxxx\Desktop\FRST-OlderVersion
2026-09-26 21:10 - 2026-09-26 21:10 - 000004690 _____ C:\Users\Avi\Downloads\invoice2026-09-26_21-10-32.pdf
2026-09-26 21:08 - 2026-09-26 21:08 - 000004633 _____ C:\Users\Avi\Downloads\invoice2026-09-26_21-07-59.pdf
2026-09-26 20:32 - 2026-09-26 20:32 - 000000000 ____D C:\Users\Avi\AppData\Local\Sentry
2026-09-26 19:44 - 2026-09-29 11:49 - 000000000 ____D C:\Users\Avi\AppData\Local\Malwarebytes
2026-09-26 19:33 - 2026-09-29 11:50 - 000000000 ____D C:\Users\xxxx\AppData\Local\Malwarebytes
2026-09-26 19:33 - 2026-09-26 19:33 - 000002093 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2026-09-26 19:33 - 2026-09-26 19:33 - 000002081 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2026-09-26 19:33 - 2026-09-26 19:33 - 000000000 ____D C:\Users\xxxx\AppData\Local\Sentry
2026-09-26 19:32 - 2026-09-26 19:32 - 000000000 ____D C:\ProgramData\Malwarebytes
2026-09-26 19:32 - 2026-09-26 19:32 - 000000000 ____D C:\Program Files\Malwarebytes
2026-09-26 19:28 - 2026-09-26 19:28 - 002886560 _____ (Malwarebytes) C:\Users\xxxx\Desktop\MBSetup-7.7.exe
2026-09-26 18:58 - 2026-09-26 19:10 - 000000000 ____D C:\AdwCleaner
2026-09-26 18:54 - 2026-09-26 20:08 - 009630992 _____ (Malwarebytes) C:\Users\xxxx\Desktop\adwcleaner.exe
2026-09-25 22:35 - 2026-09-25 22:35 - 000218208 _____ C:\Users\Avi\Downloads\receipt_b74897a7-6a5b-48a0-a5ea-a76cf0ecedd5.pdf
2026-09-25 14:29 - 2026-09-25 14:24 - 000034343 _____ C:\Users\Avi\Documents\Addition.txt
2026-09-25 14:29 - 2026-09-25 14:22 - 000041512 _____ C:\Users\Avi\Documents\FRST.txt
2026-09-25 14:18 - 2026-09-29 12:29 - 000000000 ____D C:\FRST
2026-09-25 14:14 - 2026-09-27 16:34 - 002455552 _____ (Farbar) C:\Users\xxxx\Desktop\FRST64.exe
2026-09-25 14:10 - 2026-09-25 14:10 - 000000000 ____D C:\Users\xxxx\AppData\Local\WindowsOobeAppHost
2026-09-25 09:07 - 2026-09-25 09:07 - 000004706 _____ C:\Users\Avi\Downloads\invoice2026-09-25_09-07-11.pdf
2026-09-25 09:05 - 2026-09-25 09:05 - 000004699 _____ C:\Users\Avi\Downloads\invoice2026-09-25_09-05-53.pdf
2026-09-25 04:43 - 2026-09-26 19:59 - 000000000 ____D C:\Program Files\Mozilla Firefox
2026-09-23 16:35 - 2026-09-28 16:46 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-09-23 09:24 - 2026-09-23 09:24 - 000004683 _____ C:\Users\Avi\Downloads\invoice2026-09-23_09-24-34.pdf
2026-09-23 09:23 - 2026-09-23 09:23 - 000004704 _____ C:\Users\Avi\Downloads\invoice2026-09-23_09-23-20.pdf
2026-09-22 15:01 - 2026-09-22 15:01 - 000838005 _____ C:\Users\Avi\Downloads\invoice2026-09-22_15-01-48.pdf
2026-09-21 22:36 - 2026-09-21 22:36 - 000005464 _____ C:\Users\Avi\Downloads\invoice2026-09-21_22-36-39.pdf
2026-09-20 19:19 - 2026-09-20 19:19 - 000004696 _____ C:\Users\Avi\Downloads\invoice2026-09-20_19-19-35.pdf
2026-09-20 19:19 - 2026-09-20 19:19 - 000004696 _____ C:\Users\Avi\Downloads\invoice2026-09-20_19-19-15.pdf
2026-09-18 20:51 - 2026-09-18 20:51 - 000838020 _____ C:\Users\Avi\Downloads\invoice2026-09-18_20-51-51.pdf
2026-09-16 12:45 - 2026-09-16 12:45 - 000004691 _____ C:\Users\Avi\Downloads\invoice2026-09-16_12-45-43.pdf
2026-09-15 14:06 - 2026-09-15 14:06 - 000004784 _____ C:\Users\Avi\Downloads\invoice2026-09-15_14-06-24.pdf
2026-09-15 13:45 - 2026-09-15 13:45 - 000004686 _____ C:\Users\Avi\Downloads\invoice2026-09-15_13-45-09.pdf
2026-09-14 22:37 - 2026-09-14 09:48 - 000019437 _____ C:\Users\Avi\Downloads\Appia Contract GmbH Rg.2026-103549 - Kopie.pdf
2026-09-14 22:37 - 2026-09-14 09:48 - 000019437 _____ C:\Users\Avi\Downloads\Appia Contract GmbH Rg.2026-103549 - Kopie (2).pdf
2026-09-14 22:37 - 2026-09-13 22:02 - 000838055 _____ C:\Users\Avi\Downloads\invoice2026-09-13_22-02-54 - Kopie.pdf
2026-09-14 22:37 - 2026-09-13 22:02 - 000838055 _____ C:\Users\Avi\Downloads\invoice2026-09-13_22-02-54 - Kopie (2).pdf
2026-09-14 22:37 - 2026-09-13 22:02 - 000838055 _____ C:\Users\Avi\Downloads\invoice2026-09-13_22-02-30 - Kopie.pdf
2026-09-14 22:37 - 2026-09-13 22:02 - 000838055 _____ C:\Users\Avi\Downloads\invoice2026-09-13_22-02-30 - Kopie (2).pdf
2026-09-14 22:37 - 2026-09-04 16:23 - 000004784 _____ C:\Users\Avi\Downloads\invoice2026-09-04_16-23-50 - Kopie.pdf
2026-09-14 22:37 - 2026-09-04 16:23 - 000004784 _____ C:\Users\Avi\Downloads\invoice2026-09-04_16-23-50 - Kopie (2).pdf
2026-09-14 22:37 - 2026-08-19 15:39 - 000196299 _____ C:\Users\Avi\Downloads\RECHNUNG Nr. 10353826 19.08.26 KABEL Sugar and Glory € 89,87 bez. 26.08.26.pdf
2026-09-14 22:37 - 2026-08-19 15:39 - 000196299 _____ C:\Users\Avi\Downloads\RECHNUNG Nr. 10353826 19.08.26 KABEL Sugar and Glory € 89,87 bez. 26.08.26 - Kopie.pdf
2026-09-14 22:37 - 2026-07-27 15:40 - 000198118 _____ C:\Users\Avi\Downloads\RECHNUNG Nr#10348626, 16.07.26 , KABEL SERAX, BE € 1194,00 bez. 27.07.26.pdf
2026-09-14 22:37 - 2026-07-27 15:40 - 000198118 _____ C:\Users\Avi\Downloads\RECHNUNG Nr#10348626, 16.07.26 , KABEL SERAX, BE € 1194,00 bez. 27.07.26 - Kopie.pdf
2026-09-14 09:48 - 2026-09-14 09:48 - 000019437 _____ C:\Users\Avi\Downloads\Appia Contract GmbH Rg.2026-103549.pdf
2026-09-13 22:02 - 2026-09-13 22:02 - 000838055 _____ C:\Users\Avi\Downloads\invoice2026-09-13_22-02-54.pdf
2026-09-13 22:02 - 2026-09-13 22:02 - 000838055 _____ C:\Users\Avi\Downloads\invoice2026-09-13_22-02-30.pdf
2026-09-12 18:24 - 2026-09-12 18:24 - 000000000 ____D C:\WINDOWS\Microsoft Antimalware
2026-09-12 17:17 - 2026-09-25 01:32 - 000002239 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-09-12 17:17 - 2026-09-25 01:32 - 000002198 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2026-09-12 17:17 - 2026-09-12 17:17 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleUserPEH
2026-09-12 17:16 - 2026-09-12 17:16 - 000000000 ____D C:\Program Files\Google
2026-09-12 17:15 - 2026-09-12 17:15 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleSystem
2026-09-12 17:14 - 2026-09-12 17:14 - 012411832 _____ (Google LLC) C:\Users\Avi\Downloads\ChromeSetup.exe
2026-09-12 17:06 - 2026-09-12 17:06 - 000000000 ____D C:\Users\Avi\AppData\Local\WindowsOobeAppHost
2026-09-12 16:30 - 2026-09-22 11:25 - 000000000 ____D C:\Users\Avi\AppData\Roaming\KeePass
2026-09-12 16:27 - 2026-09-12 16:27 - 000000963 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeePass 2.lnk
2026-09-12 16:27 - 2026-09-12 16:27 - 000000000 ____D C:\Program Files\KeePass Password Safe 2
2026-09-11 20:25 - 2026-09-11 20:25 - 000073754 _____ C:\Users\Avi\Downloads\DOF-2609117EALZ9Y9MXQB-0054032971.pdf
2026-09-11 15:04 - 2026-09-11 15:04 - 000066342 _____ C:\Users\Avi\Downloads\DHL-Paketmarke_PAKCE64NKHMX_Craig_Walker____.pdf
2026-09-11 13:09 - 2026-09-11 13:09 - 000222837 _____ C:\Users\Avi\Downloads\Gescannt_20260911-1255 Wohnen 13.07.25-07.04.26.pdf
2026-09-11 11:34 - 2026-08-31 21:23 - 000838039 _____ C:\Users\Avi\Downloads\invoice2026-08-31_21-23-38.pdf
2026-09-11 11:34 - 2026-08-31 15:04 - 000004785 _____ C:\Users\Avi\Downloads\invoice2026-08-31_15-04-45.pdf
2026-09-11 11:34 - 2026-08-10 11:40 - 000004636 _____ C:\Users\Avi\Downloads\invoice2026-08-10_11-40-25.pdf
2026-09-11 11:34 - 2026-08-05 11:49 - 000004730 _____ C:\Users\Avi\Downloads\invoice2026-08-05_11-49-35.pdf
2026-09-11 11:34 - 2026-07-31 11:53 - 000005203 _____ C:\Users\Avi\Downloads\invoice2026-07-31_11-53-36.pdf
2026-09-11 11:34 - 2026-07-20 10:21 - 000004693 _____ C:\Users\Avi\Downloads\invoice2026-07-20_10-21-04.pdf
2026-09-11 11:31 - 2026-09-11 11:31 - 001097791 _____ C:\Users\Avi\Downloads\Nachrichten _ eBay.html
2026-09-11 11:31 - 2026-09-11 11:31 - 000000000 ____D C:\Users\Avi\Downloads\Nachrichten _ eBay_files
2026-09-10 11:48 - 2026-09-26 20:28 - 000001607 _____ C:\WINDOWS\system32\config\VSMIDK
2026-09-09 12:27 - 2026-09-09 12:27 - 000004646 _____ C:\WINDOWS\system32\ResPriUHMImageList
2026-09-09 12:27 - 2026-09-09 12:27 - 000004646 _____ C:\WINDOWS\system32\ResPriLMImageList
2026-09-09 12:27 - 2026-09-09 12:27 - 000004646 _____ C:\WINDOWS\system32\ResPriImageList
2026-09-09 12:27 - 2026-09-09 12:27 - 000004646 _____ C:\WINDOWS\system32\ResPriHMImageList
2026-09-09 12:27 - 2026-09-09 12:27 - 000004555 _____ C:\WINDOWS\system32\ResPriImageListLowCost
2026-09-09 12:27 - 2026-09-09 12:27 - 000004555 _____ C:\WINDOWS\system32\ResPriHMImageListLowCost
2026-09-09 12:26 - 2026-09-09 12:26 - 000039215 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-09-09 12:26 - 2026-09-09 12:26 - 000039215 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-09-09 12:25 - 2026-09-09 12:25 - 000014689 _____ C:\WINDOWS\system32\ecoscore_config.json
2026-09-04 20:33 - 2026-09-04 20:33 - 000030655 _____ C:\Users\Avi\Downloads\2026-9-3-RG.pdf
2026-09-04 20:33 - 2026-09-04 20:33 - 000030655 _____ C:\Users\Avi\Downloads\2026-9-3-RG (1).pdf
2026-09-04 16:23 - 2026-09-04 16:23 - 000004784 _____ C:\Users\Avi\Downloads\invoice2026-09-04_16-23-50.pdf
2026-09-04 12:33 - 2026-09-04 12:52 - 2520774203 _____ C:\Users\Avi\Downloads\4_BEWEISVIDEO.MOV
2026-09-03 22:59 - 2026-09-03 22:59 - 000004022 _____ C:\Users\Avi\Downloads\packingslip2026-09-03_22-59-45.pdf
2026-09-03 22:57 - 2026-09-03 22:57 - 000004787 _____ C:\Users\Avi\Downloads\invoice2026-09-03_22-57-22.pdf
2026-09-03 20:46 - 2026-09-03 20:46 - 002443800 _____ C:\Users\Avi\Downloads\IMG_9335.pdf
2026-09-01 22:40 - 2026-09-01 22:40 - 000004429 _____ C:\Users\Avi\Downloads\packingslip2026-09-01_22-40-53.pdf
2026-09-01 22:22 - 2026-09-01 22:22 - 000005464 _____ C:\Users\Avi\Downloads\invoice2026-09-01_22-22-11.pdf
2026-09-01 12:28 - 2026-09-01 12:28 - 000003897 _____ C:\Users\Avi\Downloads\packingslip2026-09-01_12-28-35.pdf
2026-09-01 12:26 - 2026-09-01 12:26 - 000004692 _____ C:\Users\Avi\Downloads\invoice2026-09-01_12-26-50.pdf
2026-09-01 11:33 - 2026-09-01 11:33 - 000003954 _____ C:\Users\Avi\Downloads\packingslip2026-09-01_11-33-39.pdf
2026-09-01 11:31 - 2026-09-01 11:31 - 000004716 _____ C:\Users\Avi\Downloads\invoice2026-09-01_11-31-15.pdf
2026-08-31 21:27 - 2026-08-31 21:27 - 000837294 _____ C:\Users\Avi\Downloads\packingslip2026-08-31_21-27-17.pdf
2026-08-31 21:26 - 2026-08-31 21:26 - 000838039 _____ C:\Users\Avi\Downloads\invoice2026-08-31_21-26-42.pdf
2026-08-31 21:26 - 2026-08-31 21:26 - 000837294 _____ C:\Users\Avi\Downloads\packingslip2026-08-31_21-26-16.pdf
2026-08-31 12:56 - 2026-08-31 12:56 - 000000000 ____D C:\Users\Avi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView
2026-08-31 12:56 - 2026-08-31 12:56 - 000000000 ____D C:\Users\Avi\AppData\Roaming\IrfanView
2026-08-30 19:18 - 2026-08-30 19:18 - 000004716 _____ C:\Users\Avi\Downloads\invoice2026-08-30_19-18-28.pdf

==================== Een maand (gewijzigd) ==================

(Als een item is opgenomen in de fixlist, wordt de map of het bestand verplaatst.)

2026-09-29 11:48 - 2026-04-21 12:11 - 000000000 ____D C:\Users\Avi\AppData\Local\D3DSCache
2026-09-29 11:48 - 2026-04-15 16:04 - 002666788 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-09-29 11:48 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-09-29 11:48 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2026-09-29 11:45 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-09-29 11:45 - 2024-01-01 01:59 - 000000000 ___RD C:\Users\xxxx\OneDrive
2026-09-29 11:44 - 2026-04-21 12:12 - 000000000 ___RD C:\Users\Avi\OneDrive
2026-09-29 11:44 - 2026-04-15 16:03 - 000024820 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-09-29 11:44 - 2026-04-15 12:08 - 000000000 __SHD C:\Users\xxxx\IntelGraphicsProfiles
2026-09-29 11:44 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-09-29 11:43 - 2026-04-21 12:10 - 000000000 __SHD C:\Users\Avi\IntelGraphicsProfiles
2026-09-29 11:43 - 2026-04-15 16:04 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-09-29 11:43 - 2026-04-15 12:08 - 000000000 ____D C:\Intel
2026-09-29 11:43 - 2024-01-01 01:14 - 000012288 ___SH C:\DumpStack.log.tmp
2026-09-29 11:42 - 2024-04-01 09:21 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2026-09-29 11:07 - 2026-04-15 15:58 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-09-28 22:25 - 2026-04-21 20:39 - 000000000 ____D C:\Users\Avi\AppData\Roaming\Microsoft\Outlook
2026-09-28 21:56 - 2026-04-15 12:19 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2026-09-28 14:21 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-09-27 22:44 - 2026-04-21 18:31 - 000000000 ____D C:\Users\Avi\AppData\Roaming\Microsoft\Excel
2026-09-27 01:38 - 2024-01-01 01:14 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-09-26 21:47 - 2024-01-01 01:21 - 000000000 ____D C:\Users\xxxx\AppData\Local\D3DSCache
2026-09-26 19:59 - 2026-04-21 23:11 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2026-09-26 19:59 - 2026-04-15 12:19 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2026-09-26 19:33 - 2026-04-21 12:10 - 000000000 ____D C:\Users\Avi\AppData\Local\Packages
2026-09-26 19:33 - 2024-04-01 09:26 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2026-09-26 19:33 - 2024-01-01 01:21 - 000000000 ____D C:\ProgramData\Packages
2026-09-26 19:33 - 2024-01-01 01:20 - 000000000 ____D C:\Users\xxxx\AppData\Local\Packages
2026-09-25 22:51 - 2026-04-22 16:10 - 000000000 ____D C:\Users\Avi\AppData\Roaming\Microsoft\Word
2026-09-25 12:55 - 2026-08-26 12:22 - 000002125 _____ C:\Users\Avi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-09-25 12:55 - 2026-04-15 12:19 - 000001065 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-09-23 16:20 - 2026-04-21 18:29 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2026-09-23 16:20 - 2026-04-21 18:29 - 000002039 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-09-23 16:20 - 2026-04-21 12:12 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-720174342-3053994144-4245047485-1002
2026-09-23 16:20 - 2026-04-21 12:12 - 000003546 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-720174342-3053994144-4245047485-1002
2026-09-23 16:20 - 2026-04-15 16:04 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-720174342-3053994144-4245047485-1001
2026-09-23 16:20 - 2026-04-15 16:04 - 000003546 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-720174342-3053994144-4245047485-1001
2026-09-22 11:21 - 2026-04-21 18:21 - 000000000 ____D C:\Program Files\Microsoft Office
2026-09-20 03:53 - 2026-04-15 16:04 - 000003534 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-09-20 03:53 - 2026-04-15 16:04 - 000003462 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-09-18 12:36 - 2024-01-01 01:14 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-09-16 23:03 - 2026-04-21 12:10 - 000000000 ____D C:\Users\Avi
2026-09-16 19:38 - 2026-07-16 12:21 - 000000000 ____D C:\WINDOWS\Minidump
2026-09-16 19:38 - 2024-01-01 01:14 - 002412959 ____N C:\WINDOWS\Minidump\091626-15671-01.dmp
2026-09-15 13:43 - 2026-04-15 16:04 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2026-09-14 21:41 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\USOPrivate
2026-09-14 20:46 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-09-14 20:25 - 2026-04-15 16:01 - 003381760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-09-12 17:15 - 2026-04-15 12:22 - 000000000 ____D C:\Program Files (x86)\Google
2026-09-09 21:20 - 2026-04-15 15:58 - 000483528 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-09-09 21:19 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2026-09-09 21:19 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-09-09 21:19 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-09-09 21:19 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-09-09 21:19 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-09-09 21:19 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-09-09 21:18 - 2026-04-15 15:35 - 000000000 ____D C:\WINDOWS\system32\ruxim
2026-09-09 21:18 - 2026-04-15 15:35 - 000000000 ____D C:\WINDOWS\system32\NarratorMCAT
2026-09-09 21:18 - 2024-04-01 18:16 - 000000000 ____D C:\WINDOWS\InboxApps
2026-09-09 21:18 - 2024-04-01 18:16 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2026-09-09 21:18 - 2024-04-01 18:15 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-09-09 21:18 - 2024-04-01 18:15 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Provisioning
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\L2Schemas
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-09-09 21:18 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-09-09 21:18 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2026-09-09 12:22 - 2026-04-15 12:42 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-09-09 12:19 - 2026-04-15 12:42 - 230964456 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-09-05 20:44 - 2026-08-27 21:36 - 000000000 ____D C:\Program Files\Mozilla Thunderbird
2026-09-05 20:31 - 2026-04-21 12:42 - 000001055 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thunderbird.lnk
2026-09-03 21:58 - 2026-04-21 12:12 - 000000000 ____D C:\Users\Avi\AppData\Local\PlaceholderTileLogoFolder
2026-08-31 10:45 - 2026-04-21 12:45 - 000000000 ____D C:\Users\Avi\AppData\Local\Comms

==================== SigCheck ============================

(Er is geen automatische fix voor bestanden die de verificatie niet doorkomen.)

==================== Einde van FRST.txt ========================

30-09-2026 12:56:50
Geprüfte Dateien: 850152
Erkannte Dateien: 35
Gesäuberte Dateien: 97
Scandauer gesamt 01:52:30
Scanstatus: Abgeschlossen
D:\All Users\IObit\ASCDownloader\ASCSetup.exe a variant of Win32/IObit.AG potentially unwanted application,a variant of Win32/IObit.AN potentially unwanted application,a variant of Win32/IObit.AH potentially unwanted application,a variant of Win32/IObit.M potentially unwanted application,a variant of Win32/IObit.AD potentially unwanted application,Win32/IObit.D potentially unwanted application,a variant of Win32/IObit.D potentially unwanted application cleaned by deleting

D:\Avi Loewinstein Fast\aviloewinstein\desktop\MovaviSlideshowMakerDistribSetupC.exe a variant of Win32/Yandex.Y potentially unwanted application cleaned by deleting

D:\Avi Loewinstein Fast\aviloewinstein\Documents\Downloads\ashampoo_photo_commander_8_8.4.0_8416.exe a variant of Win32/Toolbar.Conduit.AU potentially unwanted application cleaned by deleting

D:\Avi Loewinstein Fast\aviloewinstein\Documents\Downloads\ashampoo_slideshow_studio_elements_2.0.1_8613.exe a variant of Win32/Toolbar.Conduit.AU potentially unwanted application cleaned by deleting

D:\Avi Loewinstein Fast\aviloewinstein\Documents\Downloads\ashampoo_snap_5_e5.1.2_sm(1).exe a variant of Win32/Toolbar.Conduit.AU potentially unwanted application,Win32/Toolbar.Conduit.AS potentially unwanted application cleaned by deleting

D:\Avi Loewinstein Fast\aviloewinstein\Documents\Downloads\ashampoo_snap_5_e5.1.2_sm.exe a variant of Win32/Toolbar.Conduit.AU potentially unwanted application,Win32/Toolbar.Conduit.AS potentially unwanted application cleaned by deleting

D:\Avi Loewinstein Fast\aviloewinstein\Documents\Downloads\avira_free_antivirus_de(1).exe a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application,a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application cleaned by deleting

D:\Avi Loewinstein Fast\aviloewinstein\Documents\Downloads\avira_free_antivirus_de(2).exe a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application,a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application cleaned by deleting

D:\Avi Loewinstein Fast\aviloewinstein\Documents\Downloads\avira_free_antivirus_de(3).exe a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application,a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application cleaned by deleting

D:\Avi Loewinstein Fast\aviloewinstein\Documents\Downloads\avira_free_antivirus_de(4).exe a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application,a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application cleaned by deleting

D:\Avi Loewinstein Fast\aviloewinstein\Documents\Downloads\avira_free_antivirus_de(5).exe a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application,a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application cleaned by deleting

D:\Avi Loewinstein Fast\aviloewinstein\Documents\Downloads\avira_free_antivirus_de(6).exe.part a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application,a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application cleaned by deleting

D:\Avi Loewinstein Fast\aviloewinstein\Documents\Downloads\avira_free_antivirus_de(7).exe a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application,a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application cleaned by deleting

D:\Avi Loewinstein Fast\aviloewinstein\Documents\Downloads\avira_free_antivirus_de.exe a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application,a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application cleaned by deleting

D:\Avi Loewinstein Fast\aviloewinstein\Documents\Downloads\FoxitReader502.0718_enu_Setup.exe a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application,a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application cleaned by deleting

D:\Avi Loewinstein Fast\aviloewinstein\Documents\Downloads\FoxitReader514.0104_enu_Setup.exe a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application,a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application cleaned by deleting

D:\Avi Loewinstein Fast\aviloewinstein\Documents\Downloads\SweetImSetup.exe a variant of Win32/SweetIM.L potentially unwanted application cleaned by deleting

D:\Avi Loewinstein Fast\aviloewinstein\Documents\APNSetup.exe a variant of Win32/Bundled.Toolbar.Ask.E potentially unsafe application cleaned by deleting

D:\Avi Loewinstein Fast\aviloewinstein\Downloads\SoftonicDownloader_fuer_watermark-image.exe a variant of Win32/SoftonicDownloader.G potentially unwanted application cleaned by deleting

D:\Avi Loewinstein.PC4\Documents\Downloads\ashampoo_photo_commander_8_8.4.0_8416.exe a variant of Win32/Toolbar.Conduit.AU potentially unwanted application cleaned by deleting

D:\Avi Loewinstein.PC4\Documents\Downloads\ashampoo_slideshow_studio_elements_2.0.1_8613.exe a variant of Win32/Toolbar.Conduit.AU potentially unwanted application cleaned by deleting

D:\Avi Loewinstein.PC4\Documents\Downloads\ashampoo_snap_5_e5.1.2_sm(1).exe a variant of Win32/Toolbar.Conduit.AU potentially unwanted application,Win32/Toolbar.Conduit.AS potentially unwanted application cleaned by deleting

D:\Avi Loewinstein.PC4\Documents\Downloads\ashampoo_snap_5_e5.1.2_sm.exe a variant of Win32/Toolbar.Conduit.AU potentially unwanted application,Win32/Toolbar.Conduit.AS potentially unwanted application cleaned by deleting

D:\Avi Loewinstein.PC4\Documents\Downloads\avira_free_antivirus_de(1).exe a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application,a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application cleaned by deleting

D:\Avi Loewinstein.PC4\Documents\Downloads\avira_free_antivirus_de(2).exe a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application,a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application cleaned by deleting

D:\Avi Loewinstein.PC4\Documents\Downloads\avira_free_antivirus_de(3).exe a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application,a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application cleaned by deleting

D:\Avi Loewinstein.PC4\Documents\Downloads\avira_free_antivirus_de(4).exe a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application,a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application cleaned by deleting

D:\Avi Loewinstein.PC4\Documents\Downloads\avira_free_antivirus_de(5).exe a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application,a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application cleaned by deleting

D:\Avi Loewinstein.PC4\Documents\Downloads\avira_free_antivirus_de(6).exe.part a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application,a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application cleaned by deleting

D:\Avi Loewinstein.PC4\Documents\Downloads\avira_free_antivirus_de(7).exe a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application,a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application cleaned by deleting

D:\Avi Loewinstein.PC4\Documents\Downloads\avira_free_antivirus_de.exe a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application,a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application cleaned by deleting

D:\Avi Loewinstein.PC4\Documents\Downloads\FoxitReader502.0718_enu_Setup.exe a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application,a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application cleaned by deleting

D:\Avi Loewinstein.PC4\Documents\Downloads\FoxitReader514.0104_enu_Setup.exe a variant of Win32/Bundled.Toolbar.Ask potentially unsafe application,a variant of Win32/Bundled.Toolbar.Ask.G potentially unsafe application cleaned by deleting

D:\Avi Loewinstein.PC4\Documents\Downloads\SweetImSetup.exe a variant of Win32/SweetIM.L potentially unwanted application cleaned by deleting

D:\Avi Loewinstein.PC4\Documents\APNSetup.exe a variant of Win32/Bundled.Toolbar.Ask.E potentially unsafe application cleaned by deleting

M-K-D-B · 30.09.2026, 13:38

Vielen Dank für die Logs.

ESET hat nur ein paar Installer entdeckt, die PUP und Adware beinhalten.

Poste mir bitte wie in meinem letzten Post beschrieben einen Link zu den Bildern (Warnungen). Ich würde gerne ein paar von diesen Fake-Warnungen sehen.

Zitat:

Zitat von M-K-D-B

Bilder kannst du kostenlos hier hochladen und mir den Link zukommen lassen: ImgBB

Wann erscheinen diese Meldungen denn genau? Welche Programme sind dabei geöffnet?

Führe bitte nochmal einen Scan mit MBAM aus:
Führe Malwarebytes' AntiMalware (MBAM) gemäß der bebilderten Anleitung aus und poste abschließend die Logdatei.

Avloew · 02.10.2026, 22:38

die Meldungen erscheinen unregelmäßig, ich habe keine Angaben welche Programme speziell dabei geöffnet sind.

ich dachte ich hätte gestern schon rechtzeitig geantwortet: es gibt ein Problem mit der Übertragung der Bilder. Gäbe es eine Alternative Diese zu übertragen??

Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Scan-Datum: 02.10.2026
Scan-Zeit: 23:24
Protokolldatei: b32942be-bea7-11f1-877e-202410080518.json

-Softwaredaten-
Version: 5.7.2.358
Komponentenversion: 166.0.5763
Version des Aktualisierungspakets: 1.0.115265
Lizenz: Testversion

-Systemdaten-
Betriebssystem: Windows 11 (Build 26200.9457)
CPU: x64
Dateisystem: NTFS
Benutzer: DESKTOP-7UO7M50\xxxx

-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Scan gestartet von: Manuell
Ergebnis: Abgeschlossen
Gescannte Objekte: 197.853
Erkannte Bedrohungen: 3
In die Quarantäne verschobene Bedrohungen: 3
Scandauer: 1 Min., 49 Sek.

-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Erkennung
PUM: Erkennung

-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)

Modul: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 2
PUP.Optional.PulseBrowser.E, HKU\S-1-5-21-720174342-3053994144-4245047485-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\CLOUDSTORE\STORE\DEFAULTACCOUNT\CLOUD\{5affa69d-005d-4fac-9dbb-f8b693ef75d3}$windows.data.apps.appleveltileinfo$appleveltilelist\windows.data.apps.appleveltileinfo$w~pulsebrowser.eo2xsbjj7fwzdtafjvss2yaesy, In Quarantäne, 9534, 1445981, 1.0.115265, , ame, , ,
PUP.Optional.PulseBrowser.E, HKU\S-1-5-21-720174342-3053994144-4245047485-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\START\TILEPROPERTIES\W~PulseBrowser.EO2XSBJJ7FWZDTAFJVSS2YAESY, In Quarantäne, 9534, 1445983, 1.0.115265, , ame, , ,

Registrierungswert: 1
PUP.Optional.PulseBrowser.E, HKU\S-1-5-21-720174342-3053994144-4245047485-1002\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\FEATUREUSAGE\APPBADGEUPDATED|PULSEBROWSER.EO2XSBJJ7FWZDTAFJVSS2YAESY, In Quarantäne, 9534, 1445982, 1.0.115265, , ame, , ,

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Daten-Stream: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Datei: 0
(keine bösartigen Elemente erkannt)

Physischer Sektor: 0
(keine bösartigen Elemente erkannt)

WMI: 0
(keine bösartigen Elemente erkannt)

(end)

M-K-D-B · 03.10.2026, 08:12

Du kannst Bilder beispielsweise auch hier hochladen.

03.10.2026, 08:12	#15
M-K-D-B /// TB-Ausbilder	Trojanerfundmeldung - Win11 findet keine Malware - Meldung erscheint immer wieder Du kannst Bilder beispielsweise auch hier hochladen. __________________ --- Malware Removal Helper since 2012 --- TrojanerBoard \| BleepingComputer \| Malwarebytes

Trojanerfundmeldung - Win11 findet keine Malware - Meldung erscheint immer wieder

Log-Analyse und Auswertung: Trojanerfundmeldung - Win11 findet keine Malware - Meldung erscheint immer wieder