~ Verslag van ZHPDiag v2015.6.16.57 - Nicolas Coolman  (16-6-2015)
~ Gelanceerd door Emmy (23-6-2015 23:14:16)
~ Facebook : https://www.facebook.com/nicolascoolman1
~ Het adres van de webforum : http://www.forum.nicolascoolman.fr
~ Vertaald door de gebruiker
~ Staat van de versie : Bijgewerkte versie.
~  Lijst wit : Ingeschakeld door het programma
~ Tot misbruik van bevoegdheden : OK
~ Gebruikersaccountbeheer (UAC) : Activate by user


---\\ Internet-browsers
MSIE: Internet Explorer v11.0.9600.17801
MFIE: Mozilla Firefox 37.0.1 (Defaut)
GCIE: Google Chrome v43.0.2357.130

---\\ Windows productinformatie
~ Langage: Néerlandais
Windows Server License Manager Script : OK
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK
Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601)

---\\ Software om het systeem te beveiligen
Emsisoft Anti-Malware
G Data InternetSecurity 2012 v22.0.0.0
Kaspersky Internet Security v14.0.0.4651
Windows Defender W7 (Activate)

---\\ Systeem optimalisatie software
CCleaner v3.24

---\\ Delen van software PeerToPeer
µTorrent v3.0.0  =>P2P.µTorrent

---\\ Software die extra aandacht behoeft
Adobe Flash Player 13 Plugin
Adobe Reader XI

---\\ Informatie over het systeem
~ Processor: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3947 MB (45% free)
System Restore: Activé (Enable)
System drive C: has 223 GB (49%) free of 451 GB

---\\ Verbinding met het systeem-modus
~ Computer Name: EMMY-PC
~ User Name: Emmy
~ All Users Names: UpdatusUser, HomeGroupUser$, Gast, Emmy, Administrator, 
~ Unselected Option: None
Logged in as Administrator

---\\ Omgevingsvariabelen
~ System Unit : C:\
~ %AppZHP% : C:\Users\Emmy\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\Emmy\AppData\Roaming\
~ %Desktop% : C:\Users\Emmy\Desktop\
~ %Favorites% : C:\Users\Emmy\Favorites\
~ %LocalAppData% : C:\Users\Emmy\AppData\Local\
~ %StartMenu% : C:\Users\Emmy\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ Overzicht vaste en verwisselbare stations
C: Hard drive, Flash drive, Thumb drive (Free 223 Go of 451 Go)
D: CD-ROM drive (Not Inserted)



---\\ Staat van het Windows Beveiligingscentrum
~ Security Center: 49 Legitimates Filtered in 00mn 00s



---\\ Zoeken naar bepaalde algemene bestanden
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Windows Verkenner.) (.25-2-2011 - 7:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Windows Toepassing Opstarten.) (.14-7-2009 - 2:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.F0289B3A341429117696F0279DA977B6] - (.Microsoft Corporation - Internetuitbreidingen voor Win32.) (.21-4-2015 - 16:27:25.) -- C:\Windows\System32\wininet.dll [2352128]
[MD5.8CEBD9D0A0A879CDE9F36F4383B7CAEA] - (.Microsoft Corporation - Toepassing Windows-aanmelden.) (.17-7-2014 - 3:07:24.) -- C:\Windows\System32\Winlogon.exe [455168]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Software Licensing-bibliotheek.) (.21-11-2010 - 4:24:16.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.FA886682CFC5D36718D3E436AACF10B9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.30-5-2014 - 7:45:52.) -- C:\Windows\system32\Drivers\AFD.sys [497152]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14-7-2009 - 2:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14-7-2009 - 0:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.21-11-2010 - 4:23:47.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.21-11-2010 - 4:24:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.21-11-2010 - 4:23:47.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - i8042-poortstuurprogramma.) (.14-7-2009 - 0:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14-7-2009 - 1:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27-4-2011 - 3:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.21-11-2010 - 4:23:51.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.1A29A59A4C5BA6F8C85062A613B7E2B2] - (.Microsoft Corporation - NT-bestandssysteemstuurprogramma.) (.24-1-2014 - 3:37:55.) -- C:\Windows\system32\Drivers\ntfs.sys [1684928]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Stuurprogramma voor parallelle poort.) (.14-7-2009 - 1:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21-11-2010 - 4:24:33.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14-7-2009 - 1:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.70988118145F5F10EF24720B97F35F65] - (.Microsoft Corporation - TDI Translation Driver.) (.11-11-2014 - 2:46:26.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Volume Shadow Copy-stuurprogramma.) (.21-11-2010 - 4:23:47.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Generic Processes:  Scanned in 00mn 06s



---\\ Status van de verborgen bestanden (verborgen/totaal)
~ Mes images (My Pictures) : 2/8512
~ Mes musiques (My Musics) : 18/1275
~ Mes Videos (My Videos) : 2/395
~ Mes Favoris (My Favorites) : 1/22
~ Mes Documents (My Documents) : 1/2408
~ Mon Bureau (My Desktop) : 1/6
~ Menu demarrer (Programs) : 1/66
~ Hidden Files:  Scanned in 05mn 02s



---\\ Gestarte processen
[MD5.C9E2D38B73524AF3B281299BA04E5205] - (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avpui.exe   [1005352] [PID.3092]
[MD5.9F047EAEC4E5259CFA27A36EE604E9CA] - (.Spotify Ltd - SpotifyWebHelper.) -- C:\Users\Emmy\AppData\Roaming\Spotify\SpotifyWebHelper.exe   [2020920] [PID.3968]
[MD5.646A34526CC33BE4CA933C5680D80B48] - (.Nokia - Nokia Suite.) -- C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe   [1090912] [PID.3744]
[MD5.EC58C1A9A3281CE0C8FCC05BDBFECB37] - (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe   [43816] [PID.4200]
[MD5.105C276BB7B43501225C419B062096D0] - (.Apple Inc. - iCloud Photos.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe   [43816] [PID.4264]
[MD5.334725C0DB429BF71F43CCEFEA1376A4] - (.Apple Inc. - iCloud Drive.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe   [43816] [PID.4288]
[MD5.3F03AC51CE406AE04902BF239EE4F8F8] - (.Dropbox, Inc. - Dropbox.) -- C:\Users\Emmy\AppData\Roaming\Dropbox\bin\Dropbox.exe   [43374104] [PID.4360]
[MD5.C0B97E53A0E39A48EEA2DCD500EEA07A] - (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe   [283160] [PID.4468]
[MD5.75AD45ED633B866D90AEAA296C21F7E8] - (.Egis Technology Inc. - SuiteTray.) -- C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe   [340336] [PID.4476]
[MD5.E7EA57B35951D093A9647D8D5CE3340D] - (.Egis Technology Inc. - PMM Update Application.) -- C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe   [407920] [PID.4504]
[MD5.545676F48851A5C65A38CAE5B5518C95] - (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe   [43816] [PID.4512]
[MD5.EC124B84101FEC0A7D6745ED5DD91AD6] - (.NTI Corporation - Acer Backup Manager.) -- C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe   [297280] [PID.4624]
[MD5.2ADC102A6D92BFB1F092A1A165E24181] - (.Dritek System Inc. - Launch Manager.) -- C:\Program Files (x86)\Launch Manager\LManager.exe   [1081424] [PID.4640]
[MD5.F710D61C5F1067B5189667D58392DABC] - (.CyberLink Corp. - clear.fi Movie Resident Program.) -- C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe   [177448] [PID.4672]
[MD5.5B6E8E09BE6401A7E022F52FDFCB2FF8] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe   [254336] [PID.4760]
[MD5.0203706E97B7286EDDBC62B1D16025C3] - (.Dritek System Inc. - Launch Manager Worker.) -- C:\Program Files (x86)\Launch Manager\LMworker.exe   [334416] [PID.4772]
[MD5.3B5045DDD039FAB9782851BC486FD92B] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe   [152392] [PID.4800]
[MD5.DC1AA3868108B8FF57F6C8045FCD4603] - (.Egis Technology Inc. - EgisUpdate Release Application.) -- C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe   [201584] [PID.4888]
[MD5.4547360EB0D90804B3AD080CE1D1D814] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe   [813896] [PID.5336]
[MD5.8FB1A3AB319F21CC8DB34198CB4A88E7] - (.Emsisoft Ltd - Emsisoft Real-Time Protection.) -- C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2guard.exe   [4923832] [PID.6456]
[MD5.9252A687BD9F43A5F738C652B00CAF0A] - (.Apple Inc. - iCloud Photos Downloader.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreamsDownloader.exe   [43816] [PID.7396]
[MD5.E7B58CE9BD61BF575E2880088F4E5447] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe   [8218112] [PID.5916]
[MD5.FC5B75CA6A1DA31EDD4F8D53F5540B98] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe   [81088] [PID.1620]
[MD5.6B73E94F9FE82D45781B8C8A09483082] - (.Apple Inc. - YSLoader.exe.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe   [43336] [PID.1676]
[MD5.0D2F8F4055903A762AD46204E5A42E86] - (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe   [214512] [PID.1744]
[MD5.66257CB4E4FB69887CDDC71663741435] - (.Cisco Systems, Inc. - Cisco Systems VPN Client.) -- C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe   [1528616] [PID.1824]
[MD5.4AB2A58816CC6BE771F1D8C768B804C5] - (.Dritek System Inc. - Dritek WMI Service.) -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe   [352336] [PID.1980]
[MD5.424E19980318AE562FFE3948649AFD65] - (.Dritek System Inc. - Launch Manager utility process.) -- C:\Program Files (x86)\Launch Manager\LMutilps32.exe   [414800] [PID.2020]
[MD5.84E58FEA8B1A7537696A20C59CB9B0C9] - (.Acer Incorporated - Global Registration Service.) -- C:\Program Files (x86)\Acer\Registration\GREGsvc.exe   [29696] [PID.2040]
[MD5.93B73DED2BC688F140C6AE2FBAD45789] - (.Acer Incorporated - Updater Service.) -- C:\Program Files\Acer\Acer Updater\UpdaterService.exe   [255376] [PID.1136]
[MD5.6CC09D2F0BA4A09BABC3C41B8FD888F7] - (.NTI Corporation - Backup Manager Module.) -- C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe   [257344] [PID.1656]
[MD5.78F7BB9F4924BE164294C59B8C3FC096] - (.Nokia - ServiceLayer Module.) -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe   [737616] [PID.2524]
[MD5.B25F192EA1F84A316EB7C19EFCCCF33D] - (.Intel Corporation - IAStorDataSvc.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe   [13336] [PID.2584]
[MD5.50C7CE53EF461870410355F1F2E7D515] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe   [326168] [PID.4752]
[MD5.374EBDA379A8F38E0CFC2211611E7167] - (.Intel Corporation - User Notification Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe   [2656280] [PID.6376]
[MD5.BBFD6BC7E79989B69F0998D0FEF4E6B8] - (.Emsisoft Ltd - Emsisoft Protection Service.) -- C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe   [5155576] [PID.4744]
[MD5.506708142BC63DABA64F2D3AD1DCD5BF] - (.Google Inc. - Google Installer.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe   [116648] [PID.8188]
~ Processes Running:  Scanned in 01mn 08s



---\\ Google Chrome, start, zoeken, extensies (G0, G1, G2)
C:\Users\Emmy\AppData\Local\Google\Chrome\User Data\Default\Preferences

---\\ Google Chrome extensie map
~ Google Lines Browser: 11 Legitimates Filtered in 00mn 01s



---\\ Mozilla Firefox, Plugins, start, zoeken, extensies (P2, M0, M1, M2, M3)
C:\Users\Emmy\AppData\Roaming\Mozilla\Firefox\Profiles\rk2x3u5n.default-1350988910897\prefs.js
M2 - MFEP: Extension [Emmy - rk2x3u5n.default-1350988910897] collector@broceliand.fr.xpi
M2 - MFEP: Extension [Emmy - rk2x3u5n.default-1350988910897] jid0-GXjLLfbCoAx0LcltEdFrEkQdQPI@jetpack.xpi
M2 - MFEP: Extension [Emmy - rk2x3u5n.default-1350988910897] {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
~ Firefox Browser: 16 Legitimates Filtered in 00mn 01s



---\\ Internet Explorer, proxybeheer (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management:  Scanned in 00mn 00s



---\\ Analyse van lijnen F0, F1, F2, F3 - IniFiles, Autoloading programma's
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys:  Scanned in 00mn 00s



---\\ Hosts-bestand omleiding (O1)
~ Le fichier hôte est sain (The hosts file is clean) (1)
~ Hosts File:  Scanned in 00mn 00s



---\\ Internet Explorer werkbalken (O3)
O3 - Toolbar: (no name) - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} Orphan sleutel
~ Toolbar:  Scanned in 00mn 00s



---\\ Toepassingen gestart door register & bestand (O4)
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe 
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe 
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe 
O4 - HKLM\..\Run: [IntelTBRunOnce] \b \nologo C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs (.not file.) 
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.) 
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Realtek HD Audio configuratie.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe 
O4 - HKLM\..\Run: [RtHDVBg] . (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe 
O4 - HKLM\..\Run: [Power Management] . (.Acer Incorporated - ePowerTray.) -- C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe 
O4 - HKCU\..\Run: [Spotify Web Helper] . (.Spotify Ltd - SpotifyWebHelper.) -- C:\Users\Emmy\AppData\Roaming\Spotify\SpotifyWebHelper.exe 
O4 - HKCU\..\Run: [WebDriveTray] . (.South River Technologies, LLC - WebDrive.) -- C:\Program Files\WebDrive\webdrive.exe 
O4 - HKCU\..\Run: [NokiaSuite.exe] . (.Nokia - Nokia Suite.) -- C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe 
O4 - HKCU\..\Run: [iCloudServices] . (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe 
O4 - HKCU\..\Run: [ApplePhotoStreams] . (.Apple Inc. - iCloud Photos.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe 
O4 - HKCU\..\Run: [iCloudDrive] . (.Apple Inc. - iCloud Drive.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe 
O4 - HKCU\..\Run: [Web Companion] C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe (.not file.) 
O4 - HKLM\..\Wow6432Node\Run: [IAStorIcon] . (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe 
O4 - HKLM\..\Wow6432Node\Run: [SuiteTray] . (.Egis Technology Inc. - SuiteTray.) -- C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe 
O4 - HKLM\..\Wow6432Node\Run: [EgisTecPMMUpdate] . (.Egis Technology Inc. - PMM Update Application.) -- C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe 
O4 - HKLM\..\Wow6432Node\Run: [EgisUpdate] . (.Egis Technology Inc. - EgisUpdate Release Application.) -- C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe 
O4 - HKLM\..\Wow6432Node\Run: [Norton Online Backup] . (.Symantec Corporation - Norton Online Backup Service.) -- C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe   =>.Symantec Corporation
O4 - HKLM\..\Wow6432Node\Run: [BackupManagerTray] . (.NTI Corporation - Acer Backup Manager.) -- C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe 
O4 - HKLM\..\Wow6432Node\Run: [LManager] . (.Dritek System Inc. - Launch Manager.) -- C:\Program Files (x86)\Launch Manager\LManager.exe 
O4 - HKLM\..\Wow6432Node\Run: [Dolby Advanced Audio v2] . (.Dolby Laboratories Inc. - Dolby Profile Selector.) -- C:\Dolby PCEE4\pcee4.exe 
O4 - HKLM\..\Wow6432Node\Run: [ArcadeMovieService] . (.CyberLink Corp. - clear.fi Movie Resident Program.) -- C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe 
O4 - HKLM\..\Wow6432Node\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe 
O4 - HKLM\..\Wow6432Node\Run: [BCSSync] . (.Microsoft Corporation - Microsoft Office 2010 component.) -- C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe   =>.Microsoft Corporation
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe   =>.Oracle Corporation
O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe 
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe   =>.Adobe Systems Incorporated
O4 - HKLM\..\Wow6432Node\Run: [emsisoft anti-malware] . (.Emsisoft Ltd - Emsisoft Real-Time Protection.) -- c:\program files (x86)\emsisoft anti-malware\a2guard.exe 
O4 - HKLM\..\Wow6432Node\RunOnce: [GrpConv] grpconv -o 
O4 - HKUS\.DEFAULT\..\RunOnce: [IsMyWinLockerReboot] . (.Microsoft Corporation - Windows® Installer.) -- C:\Windows\System32\msiexec.exe 
O4 - HKUS\S-1-5-18\..\RunOnce: [IsMyWinLockerReboot] . (.Microsoft Corporation - Windows® Installer.) -- C:\Windows\System32\msiexec.exe 
O4 - HKUS\S-1-5-21-2201282206-2562182534-352421686-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Windows-bureaubladgadgets.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-21-2201282206-2562182534-352421686-1000\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe   =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-2201282206-2562182534-352421686-1000\..\RunOnce: [ScrSav] . (.No owner - run_NB Application.) -- C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe 
~ Application:  Scanned in 00mn 08s



---\\ Knoppen op de werkbalk "belangrijkste instrumenten" Internet Explorer (O9)
O9 - Extra button: Virtual Keyboard [64Bits] - {0C4CC089-D306-440D-9772-464E226F6539} . (...) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\kbrd.ico
O9 - Extra button: Se&nd to OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} -- C:\Program Files (x86)\MICROS~2\Office14\ONBttnIE.dll (.not file.)
O9 - Extra button: OneNote Lin&ked Notes [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} -- C:\Program Files (x86)\MICROS~2\Office14\ONBTTN~1.dll (.not file.)
O9 - Extra button: URLs check [64Bits] - {CCF151D8-D089-449F-A5A4-D9909053F20F} . (...) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\logo.ico
~ IE Extra Buttons:  Scanned in 00mn 00s



---\\ Domeinadres van de DNS (O17) wijzigen
O17 - HKLM\System\CCS\Services\Tcpip\..\{8164A6C1-32C0-4114-BCB4-C959D63CA68A}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{8164A6C1-32C0-4114-BCB4-C959D63CA68A}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CS2\Services\Tcpip\..\{8164A6C1-32C0-4114-BCB4-C959D63CA68A}: DhcpNameServer = 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254
~ Domain:  Scanned in 00mn 00s



---\\ Aanvullend Protocol (O18)
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) -- 
O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.dll  =>.Microsoft Corporation
~ Protocole Additionnel:  Scanned in 00mn 00s



---\\ AppInit_DLLs waarde en subsleutels Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon:  Scanned in 00mn 00s



---\\ AppInit_DLLs waarde en subsleutels Winlogon Notify (autorun) (O20)
O20 - AppInit_DLLs: . (.NVIDIA Corporation - NVIDIA Compatible NVIDIA shim initializatio.) - C:\Windows\System32\nvinitx.dll
~ AppInit DLL:  Scanned in 00mn 00s



---\\ Lijst van niet-Microsoft NT services die niet uitgeschakeld zijn (O23)
O23 - Service: WebDrive Service (WebDriveService) . (.South River Technologies, LLC - WebDrive.) - C:\Program Files\WebDrive\wdService.exe
~ Services: 19 Legitimates Filtered in 00mn 35s



---\\ Taken die zijn gepland in de automatische modus (O39)
[MD5.F21577F791B69D2A06A93DE5C2D0BBCB] [APT] [{73470C90-7E19-4FFF-9098-1031718E47ED}] (...) -- C:\Users\Emmy\Downloads\Setup.exe   [476658]
[MD5.00000000000000000000000000000000] [APT] [{7C7B3737-5FC7-412B-B209-0C26306896C2}] (...) -- C:\Users\Emmy\Desktop\zoek.com -d C:\Users\Emmy\Desktop (.not file.)   [0]
O39 - APT:  - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore   [1052]
O39 - APT:  - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA   [1056]
~ Scheduled Task: 18 Legitimates Filtered in 00mn 15s



---\\ Geïnstalleerde software (O42)
O42 - Logiciel: Aangifte inkomstenbelasting 2011 - (.Belastingdienst.) [HKLM][64Bits] -- Aangifte inkomstenbelasting 2011
O42 - Logiciel: Aangifte inkomstenbelasting 2012 - (.Belastingdienst.) [HKLM][64Bits] -- Aangifte inkomstenbelasting 2012
O42 - Logiciel: Aangifte inkomstenbelasting 2013 - (.Belastingdienst.) [HKLM][64Bits] -- Aangifte inkomstenbelasting 2013
O42 - Logiciel: Simio 4.64.7998 - (.Simio LLC.) [HKLM][64Bits] -- {70EDBAA2-86A1-4C3A-B0B4-08C2114D1B29}
O42 - Logiciel: Vensim PLE - (...) [HKLM][64Bits] -- Vensim PLE
O42 - Logiciel: Vensim Professional - (...) [HKLM][64Bits] -- Vensim Professional
O42 - Logiciel: WebDrive - (.South River Technologies.) [HKLM][64Bits] -- {F08E87FD-F62B-4BAC-A2D6-A94755653F30}
O42 - Logiciel: WebDrive Enterprise v9.14 (Configuration) - (.<no manufacturer>.) [HKLM][64Bits] -- {E0626FF7-42E6-4BA1-990B-2D5285967D22}
~ Logic: 30 Legitimates Filtered in 00mn 02s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\Amos]
[HKCU\Software\OpenSub]
[HKCU\Software\Simio]
[HKCU\Software\South River Technologies]
[HKCU\Software\Ventana]
[HKLM\Software\South River Technologies]
[HKLM\Software\WaIEn]
[HKLM\Software\Wow6432Node\Amos]
[HKLM\Software\Wow6432Node\TU Delft]
[HKLM\Software\Wow6432Node\Ventana]
[HKLM\Software\Wow6432Node\WaIEn]
~ Key Software: 369 Legitimates Filtered in 00mn 02s



---\\ 'Inhoud van mappen programma's, ProgramFiles, ProgramData, AppData (O43)
O43 - CFD: 8-5-2013 - 18:11:14 - [] ----D C:\Program Files (x86)\AMOS 5
O43 - CFD: 10-2-2012 - 15:18:12 - [] ----D C:\Program Files (x86)\Belastingdienst
O43 - CFD: 25-1-2013 - 18:09:58 - [] ----D C:\Program Files (x86)\Simio
O43 - CFD: 3-4-2013 - 14:35:41 - [] ----D C:\Program Files (x86)\Vensim
O43 - CFD: 11-6-2013 - 11:12:40 - [] ----D C:\ProgramData\Reprise
O43 - CFD: 25-1-2013 - 18:09:58 - [] ----D C:\ProgramData\Simio
O43 - CFD: 24-5-2013 - 15:45:16 - [] --H-D C:\ProgramData\WebDrive
O43 - CFD: 8-5-2013 - 18:11:16 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Amos 5
O43 - CFD: 10-2-2012 - 15:18:13 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Belastingdienst
O43 - CFD: 24-5-2013 - 15:41:58 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Connectivity
O43 - CFD: 25-1-2013 - 18:09:08 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Engineering
O43 - CFD: 3-4-2015 - 18:36:28 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
O43 - CFD: 21-11-2010 - 9:16:41 - [0] R-H-D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 19-5-2012 - 17:15:39 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Trial LogoSmartz
O43 - CFD: 3-4-2013 - 14:35:39 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vensim
O43 - CFD: 24-3-2014 - 20:15:54 - [] ----D C:\Users\Emmy\AppData\Roaming\Belastingdienst
O43 - CFD: 3-4-2013 - 18:29:14 - [] ----D C:\Users\Emmy\AppData\Roaming\Vensim
O43 - CFD: 3-4-2015 - 20:35:04 - [] ----D C:\Users\Emmy\AppData\Local\12086A24-BEC1-4198-8334-038D68E07DB6.aplzod
O43 - CFD: 20-6-2013 - 11:14:20 - [] ----D C:\Users\Emmy\AppData\Local\Amos
O43 - CFD: 25-9-2012 - 16:57:21 - [] ----D C:\Users\Emmy\AppData\Local\Simio_LLC
O43 - CFD: 10-1-2014 - 18:40:19 - [] ----D C:\Users\Emmy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup
O43 - CFD: 14-5-2015 - 22:09:54 - [] ----D C:\Users\Emmy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WaIEn
~ Program Folder: 283 Legitimates Filtered in 00mn 02s



---\\ Meest recente bestanden gewijzigd of gemaakt op Windows en System32 (O44)
O44 - LFC:[MD5.CC7AA7B42CF418FC3D926913490048F8] - 14-6-2015 - 15:45:56 ---A- . (...) -- C:\Windows\zoek-delete.exe   [24064]
O44 - LFC:[MD5.1710D535CE8E6BB340FA61B0807A9355] - 14-6-2015 - 16:38:04 ---A- . (...) -- C:\zoek-results.log   [13419]
O44 - LFC:[MD5.4BEE34017B1AE3A8588196F50C150A81] - 23-6-2015 - 22:20:22 --HA- . (...) -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0   [24608]
O44 - LFC:[MD5.4BEE34017B1AE3A8588196F50C150A81] - 23-6-2015 - 22:20:23 --HA- . (...) -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0   [24608]
~ Files: 9 Legitimates Filtered in 00mn 13s



---\\ Laatste bestanden die zijn gemaakt in Windows Prefetcher (O45)
O45 - LFCP:[MD5.6AF4D77647D0143EE9EAF886D5F5FCB4] - 28-1-2015 - 22:03:13 ---A- - C:\Windows\Prefetch\UTORRENT.EXE-6E5D8F04.pf  =>P2P.µTorrent
~ Prefetcher: 1 Legitimates Filtered in 00mn 00s



---\\ Activiteiten en functies bij het opstarten van Windows Verkenner (O46)
O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook [64Bits] - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
~ ShellExecuteHooks:  Scanned in 00mn 00s



---\\ Opsomming van het register sleutels PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ MWPS: 16 Legitimates Filtered in 00mn 00s



---\\ Overzicht van de drivers (SDL) (O58)
O58 - SDL:23-3-2010 - 13:29:46 ---A- . (...) -- C:\Windows\System32\Drivers\CVPNDRVA.sys   [304784]
O58 - SDL:14-7-2009 - 2:47:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys   [530496]
O58 - SDL:10-6-2009 - 21:31:59 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys   [31232]
O58 - SDL:14-7-2009 - 2:45:55 ---A- . (.Promise Technology - Promise  SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys   [24656]
O58 - SDL:10-6-2014 - 20:50:24 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\Drivers\usbaapl64.sys   [54784]
~ Drivers: 90 Legitimates Filtered in 01mn 15s



---\\ Lijst van cleaning tools (CLAB) (O63)
O63 - Logiciel: ZHPDiag 2015 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1  =>.Nicolas Coolman
O63 - Logiciel: HiJackThis - (.Trend Micro.) [HKLM] -- {45A66726-69BC-466B-A7A4-12FCBA4883D7}
O63 - Logiciel: RSIT - (.random/random.)
~ ADS:  Scanned in 00mn 00s



---\\ Overzicht met LEGACY services (LALS) (O64)
O64 - Services: CurCS - 25-5-2010 - C:\Program Files\WebDrive\wdfsd.sys (WebDriveFSD) .(...) - LEGACY_WEBDRIVEFSD
~ Legacy: 94 Legitimates Filtered in 00mn 01s



---\\ Startmenu Internet (SMI) (O68)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
~ Keys:  Scanned in 00mn 00s



---\\ Zoek "infecties in internetbrowsers (SBI) (O69)
O69 - SBI: prefs.js [Emmy - rk2x3u5n.default-1350988910897] user_pref("weboftrust.search.ask.display", "Ask.com Web Search");
O69 - SBI: SearchScopes [HKCU] {012E1000-F331-11DB-8314-0800200C9A66} - (Google) - http://www.google.com
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {30C03312-7964-4677-8F81-FC0845ADE690} - (Google) - http://www.google.nl
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - http://www.google.com
~ Keys:  Scanned in 00mn 00s



---\\ Bepaalde zoekopdracht in de hoofdmap van het systeem (SPRF) (O84)
[MD5.D56605A4F5CE2DBEBA1540304827B394] [SPRF][14-6-2015] (.No owner - AdwCleaner.) -- C:\Users\Emmy\Desktop\AdwCleaner.exe   [2231296]
~ Files: 6 Legitimates Filtered in 01mn 36s



---\\ Lijst van uitzonderingen in de firewall (FirewallRules) (O87)
O87 - FAEL: "{3231DE8F-4BDF-46D4-B73E-E9E951545C61}" | In - None - P6 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe  =>P2P.BitTorrent
O87 - FAEL: "{4E7AFCA3-7B0B-495C-A203-B6B37DB8FA36}" | In - None - P17 - TRUE | .(.BitTorrent, Inc. - µTorrent.) -- C:\Program Files (x86)\uTorrent\uTorrent.exe  =>P2P.BitTorrent
~ Firewall: 2 Legitimates Filtered in 00mn 04s



---\\ Overzicht van de productcodes van software (PUC) (O90)
O90 - PUC: "25BD30E1BC5D83343A835E62DDD4D41B" . (.Bing Bar.) -- C:\Windows\Installer\{1E03DB52-D5CB-4338-A338-E526DD4D4DB1}\icon_installer_ico  =>Toolbar.Bing
~ Update Products: 1 Legitimates Filtered in 00mn 02s



---\\ Microsoft Installer-bestanden (WIS) (NTFS) (O93)
[MD5.909C62B400C788C1B8BD7C0A7E2AE90D] [WIS][23-10-2012] (.ReSoft Ltd. - Snap.Do.) -- C:\Windows\Installer\61d6d4.msi   [7712768]  =>Hijacker.SmartBar
[MD5.030EF57D730EC0A96C633715399B37B9] [WIS][2-3-2011] (.Microsoft Corporation - Bing Bar.) -- C:\Windows\Installer\edea.msi   [4424192]  =>Toolbar.Bing
~ WIS: 2 Legitimates Filtered in 00mn 24s



---\\ Algemene toestand van niet-Microsoft services (GSR) (SR = Running, SS = gestopt)
SS - | Demand 2-3-2011 183560 |  (BBSvc) . (.Microsoft Corporation..) - C:\Program Files (x86)\Microsoft\BingBar\BBSvc.exe  =>Toolbar.Bing
SS - | Demand 28-9-2010 172912 |  (EgisTec Ticket Service) . (.Egis Technology Inc..) - C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe
SS - | Demand 28-6-2011 655624 |  (FLEXnet Licensing Service) . (.Acresso Software Inc..) - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
SS - | Auto 14-4-2014 116648 |  (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 14-4-2014 116648 |  (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 8-2-2011 136120 |  (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
SS - | Demand 26-4-2015 148080 |  (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
SS - | Auto 30-3-2011 2009704 |  (nvUpdatusService) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
SS - | Auto 11-12-2014 315496 |  (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
SS - | Demand 8-10-2010 150016 |  (TurboBoost) . (.Intel(R) Corporation.) - C:\Program Files\Intel\TurboBoost\TurboBoost.exe
SR - | Auto 26-5-2015 5155576 |  (a2AntiMalware) . (.Emsisoft Ltd.) - C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe
SR - | Auto 19-12-2014 81088 |  (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SR - | Auto 12-6-2014 43336 |  (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SR - | Auto 15-2-2014 214512 |  (AVP) . (.Kaspersky Lab ZAO.) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 14.0.0\avp.exe
SR - | Auto 30-8-2011 462184 |  (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
SR - | Auto 23-3-2010 1528616 |  (CVPND) . (.Cisco Systems, Inc..) - C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe
SR - | Auto 14-3-2011 352336 |  (DsiWMIService) . (.Dritek System Inc..) - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
SR - | Auto 10-5-2011 872552 |  (ePowerSvc) . (.Acer Incorporated.) - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
SR - | Auto 26-5-2011 29696 |  (GREGService) . (.Acer Incorporated.) - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
SR - | Auto 14-9-2010 13336 |  (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
SR - | Demand 1-8-2014 641352 |  (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
SR - | Auto 5-4-2012 255376 |  (Live Updater Service) . (.Acer Incorporated.) - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
SR - | Auto 1-2-2011 326168 |  (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
SR - | Auto 1-6-2010 2804568 |  (NOBU) . (.Symantec Corporation.) - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe  =>.Symantec Corporation
SR - | Auto 9-3-2011 257344 |  (NTI IScheduleSvc) . (.NTI Corporation.) - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
SR - | Auto 25-2-2011 249648 |  (SeaPort) . (.Microsoft Corporation.) - C:\Program Files (x86)\Microsoft\BingBar\SeaPort.exe  =>Toolbar.Bing
SR - | Demand 18-4-2013 737616 |  (ServiceLayer) . (.Nokia.) - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
SR - | Auto 1-2-2011 2656280 |  (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
SR - | Auto 25-5-2010 2156120 |  (WebDriveService) . (.South River Technologies, LLC.) - C:\Program Files\WebDrive\wdService.exe
SR - | Auto 14-7-2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto 22-7-1658 0 |  (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe  =>.Microsoft Corporation
SR - | Auto 14-7-2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Services:  Scanned in 00mn 38s



---\\ Onderzoek gelijktijdige op de Master Boot Record (MBR) (O80)
Run by Emmy at 23-6-2015 23:34:16
~ OS 64 not supported by MBR tool
~ MBR: 0 Legitimates Filtered in 00mn 00s



---\\ Onderzoek de Master Boot Record op Infecties (MBRCheck) (O80)
Written by ad13, http://ad13.geekstog
Run by Emmy at 23-6-2015 23:34:19
********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ MBR:  Scanned in 00mn 02s



---\\ Extra scan (O88)
Database Version : 13008 - (16-6-2015)
Clés trouvées (Keys found) : 9
Valeurs trouvées (Values found) : 0
Dossiers trouvés  (Folders found) : 0
Fichiers trouvés  (Files found) : 2

[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{21111111-1111-1111-1111-110011501160}]   =>PUP.SpecialSavings
[HKLM\Software\Wow6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}]   =>Toolbar.Ask
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1E03DB52-D5CB-4338-A338-E526DD4D4DB1}]   =>Toolbar.Bing
[HKLM\Software\Classes\Installer\Features\25BD30E1BC5D83343A835E62DDD4D41B]   =>Toolbar.Bing
[HKLM\Software\Classes\Installer\Products\25BD30E1BC5D83343A835E62DDD4D41B]   =>Toolbar.Bing
[HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\25BD30E1BC5D83343A835E62DDD4D41B]   =>Toolbar.Bing
[HKLM\Software\Wow6432Node\Classes\Installer\Features\25BD30E1BC5D83343A835E62DDD4D41B]   =>Toolbar.Bing
[HKLM\Software\Wow6432Node\Classes\Installer\Products\25BD30E1BC5D83343A835E62DDD4D41B]   =>Toolbar.Bing
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110011501160}]   =>PUP.CrossRider
C:\Windows\Installer\61d6d4.msi   =>Hijacker.SmartBar^
C:\Windows\Installer\edea.msi   =>Toolbar.Bing^
~ Additionnel Scan: 474467 Items scanned in 04mn 50s



---\\ Additional information about modules
~ http://www.nicolascoolman.fr/r5-internet-explorer-proxy-management-iepm/  =>.Internet Explorer, proxybeheer (R5)
~ http://www.nicolascoolman.fr/o3-internet-explorer-toolbars/  =>.Internet Explorer werkbalken (O3)
~ http://www.nicolascoolman.fr/o4-applications-demarrees-par-le-registre/  =>.Toepassingen gestart door register &amp; bestand (O4)
~ AMI: 3 Legitimates Filtered in 00mn 00s



---\\ Samenvatting van detecties gevonden op uw werkstation
http://www.nicolascoolman.fr/hijacker-smartbar  =>Hijacker.SmartBar
http://www.nicolascoolman.fr/pup-specialsavings  =>PUP.SpecialSavings
http://www.nicolascoolman.fr/toolbar-ask  =>Toolbar.Ask
http://www.nicolascoolman.fr/pup-crossrider  =>PUP.CrossRider
~ MSI: 4 link(s) detected in 00mn 00s



~ 988 Legitimates filtered by white list
End of the scan (543 lines in 24mn 55s)(0.6)