JCskol

Ja nog steeds aanwezig op bureaublad.

Zoek.exe v5.0.0.0 Updated 23-December-2013 Tool run by Jan Cox on do 26-12-2013 at 13:51:04,56. Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64 Running in: Normal Mode Internet Access Detected Launched: E:\Jan Cox\Desktop\zoek.exe [scan all users] [script inserted] ==== System Restore Info ====================== 26-12-2013 13:53:52 Zoek.exe System Restore Point Created Succesfully. ==== Empty Folders Check ====================== C:\PROGRA~2\FoxTabVideoToMP3 deleted successfully C:\PROGRA~2\MarkAny deleted successfully C:\PROGRA~2\Samsung deleted successfully C:\PROGRA~2\COMMON~1\Symantec Shared deleted successfully C:\ProgramData\Babylon deleted successfully C:\ProgramData\Nokia deleted successfully C:\ProgramData\Oracle deleted successfully C:\ProgramData\Symantec deleted successfully C:\Users\Jan Cox\AppData\Roaming\Gusyf deleted successfully C:\Users\Jan Cox\AppData\Roaming\Lotid deleted successfully C:\Users\Jan Cox\AppData\Roaming\Outlook deleted successfully C:\Users\Jan Cox\AppData\Roaming\Samsung deleted successfully C:\Users\Jan Cox\AppData\Roaming\Windows Live Writer deleted successfully C:\Users\Jan Cox\AppData\Local\CrashDumps deleted successfully C:\Users\Jan Cox\AppData\Local\Samsung deleted successfully C:\Users\Jan Cox\AppData\Local\VirtualStore deleted successfully ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-956185951-1265831734-1300764519-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} deleted successfully HKEY_USERS\S-1-5-21-956185951-1265831734-1300764519-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1392b8d2-5c05-419f-a8f6-b9f15a596612} deleted successfully HKEY_USERS\S-1-5-21-956185951-1265831734-1300764519-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1392b8d2-5c05-419f-a8f6-b9f15a596612} deleted successfully HKEY_USERS\S-1-5-21-956185951-1265831734-1300764519-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92-1F8EE10042A0} deleted successfully HKEY_USERS\S-1-5-21-956185951-1265831734-1300764519-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0FB6A909-6086-458F-BD92-1F8EE10042A0} deleted successfully HKEY_USERS\S-1-5-21-956185951-1265831734-1300764519-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully HKEY_USERS\S-1-5-21-956185951-1265831734-1300764519-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC} deleted successfully HKEY_CLASSES_ROOT\CLSID\{BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} deleted successfully HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} deleted successfully HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{1392b8d2-5c05-419f-a8f6-b9f15a596612} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1392b8d2-5c05-419f-a8f6-b9f15a596612} deleted successfully HKEY_CLASSES_ROOT\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0} deleted successfully HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0} deleted successfully HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully ==== Deleting CLSID Registry Values ====================== HKEY_USERS\S-1-5-21-956185951-1265831734-1300764519-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\{00000000-6E41-4FD3-8538-502F5495E5FC} deleted successfully HKEY_USERS\S-1-5-21-956185951-1265831734-1300764519-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\{BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} deleted successfully HKEY_USERS\S-1-5-21-956185951-1265831734-1300764519-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{1392b8d2-5c05-419f-a8f6-b9f15a596612} deleted successfully HKEY_USERS\S-1-5-21-956185951-1265831734-1300764519-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\{1392b8d2-5c05-419f-a8f6-b9f15a596612} deleted successfully HKEY_USERS\S-1-5-21-956185951-1265831734-1300764519-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{1392b8d2-5c05-419f-a8f6-b9f15a596612} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully ==== Deleting Services ====================== ==== Registry Fix Code x64 ====================== Windows Registry Editor Version 5.00 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}] [-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}] [-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1392b8d2-5c05-419f-a8f6-b9f15a596612}] [-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "ApnUpdater"=- ""=- ==== Deleting Files \ Folders ====================== C:\Program Files (x86)\Ask.com deleted C:\Users\Jan Cox\AppData\Roaming\Complitly deleted "C:\Program Files (x86)\Freecorder\prxtbFree.dll" deleted ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== ====== C:\Users\JANCOX~1\AppData\Local\Temp ==== 2013-12-23 21:50:14 FE447D1CD38CECAC2331FA932078D9A0 271360 ----a-w- C:\Users\Jan Cox\AppData\Local\Temp\42585506-1013-4466-8924-544260C17A10\SmiProvider.dll 2013-12-23 21:50:14 FC00A05639494779002682A9B965EF9C 471040 ----a-w- C:\Users\Jan Cox\AppData\Local\Temp\42585506-1013-4466-8924-544260C17A10\WimProvider.dll 2013-12-23 21:50:14 E7CAED467F80B29F4E63BA493614DBB1 127488 ----a-w- C:\Users\Jan Cox\AppData\Local\Temp\42585506-1013-4466-8924-544260C17A10\OSProvider.dll 2013-12-23 21:50:14 8D3855B133E21143E8B4BFADB9FB14A3 302080 ----a-w- C:\Users\Jan Cox\AppData\Local\Temp\42585506-1013-4466-8924-544260C17A10\UnattendProvider.dll 2013-12-23 21:50:14 7B38D7916A7CD058C16A0A6CA5077901 271360 ----a-w- C:\Users\Jan Cox\AppData\Local\Temp\42585506-1013-4466-8924-544260C17A10\wdscore.dll 2013-12-23 21:50:14 739968678548BA15F6B9372E8760C012 444416 ----a-w- C:\Users\Jan Cox\AppData\Local\Temp\42585506-1013-4466-8924-544260C17A10\TransmogProvider.dll 2013-12-23 21:50:14 45FF4FA5CA5432BFCCDED4433FE2A85B 216576 ----a-w- C:\Users\Jan Cox\AppData\Local\Temp\42585506-1013-4466-8924-544260C17A10\MsiProvider.dll 2013-12-23 21:50:13 FC2DB5842190C6E78A40CD7DA483B27C 435712 ----a-w- C:\Users\Jan Cox\AppData\Local\Temp\42585506-1013-4466-8924-544260C17A10\DmiProvider.dll 2013-12-23 21:50:13 F2B0771A7CD27F20689E0AB787B7EB7C 289792 ----a-w- C:\Users\Jan Cox\AppData\Local\Temp\42585506-1013-4466-8924-544260C17A10\DismCore.dll 2013-12-23 21:50:13 EFCB002ABC3529D71B61E6FB6434566C 762368 ----a-w- C:\Users\Jan Cox\AppData\Local\Temp\42585506-1013-4466-8924-544260C17A10\CbsProvider.dll 2013-12-23 21:50:13 C9D74156913061BE6C51D8FC3ACF8E93 53760 ----a-w- C:\Users\Jan Cox\AppData\Local\Temp\42585506-1013-4466-8924-544260C17A10\FolderProvider.dll 2013-12-23 21:50:13 BBB9E4FA2561F6A6E5CCF25DA069AC1B 313344 ----a-w- C:\Users\Jan Cox\AppData\Local\Temp\42585506-1013-4466-8924-544260C17A10\IntlProvider.dll 2013-12-23 21:50:13 9A821D8D62F4C60232B856E98CBA7E4F 96768 ----a-w- C:\Users\Jan Cox\AppData\Local\Temp\42585506-1013-4466-8924-544260C17A10\DismHost.exe 2013-12-23 21:50:13 8CA117CB9338C0351236939717CB7084 186368 ----a-w- C:\Users\Jan Cox\AppData\Local\Temp\42585506-1013-4466-8924-544260C17A10\DismProv.dll 2013-12-23 21:50:13 6A4BD682396F29FD7DF5AB389509B950 183296 ----a-w- C:\Users\Jan Cox\AppData\Local\Temp\42585506-1013-4466-8924-544260C17A10\CompatProvider.dll 2013-12-23 21:50:13 5488E381238FF19687FDD7AB2F44CFCC 111616 ----a-w- C:\Users\Jan Cox\AppData\Local\Temp\42585506-1013-4466-8924-544260C17A10\DismCorePS.dll ====== Java Cache ===== 2013-12-14 14:21:13 A5A5B060100EA88CFCA9CD584BDFB1CB 954 ----a-w- C:\Users\Jan Cox\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\14\5a440ce-51015ffb 2013-12-14 14:21:26 A7DD1F29E531CC4D1089B72AC2F91F88 290622 ----a-w- C:\Users\Jan Cox\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15\4d6d490f-2a7b567f 2013-12-14 14:21:13 5648C128EB4E465BA7FF63E0AB4A6D80 828 ----a-w- C:\Users\Jan Cox\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20\329ed8d4-47ac678a 2013-12-14 14:21:13 B6DF07D8D682C841DD17468670A26276 9690 ----a-w- C:\Users\Jan Cox\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24\1d54c358-27db6285 2013-12-14 14:10:59 EB506C33A9C4A87AE509243E868DFAB0 4057 ----a-w- C:\Users\Jan Cox\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25\25b2b059-3bab0157 2013-12-14 14:10:59 4E5917E4FCE8307B9EBAF535CA1D010D 85954 ----a-w- C:\Users\Jan Cox\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\26\1c84571a-32868a4e 2013-12-14 14:11:03 58BD6897CD0FEA04FA771BB516FCFC9D 790 ----a-w- C:\Users\Jan Cox\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29\1e61985d-3a9da13b 2013-12-14 14:21:13 ECD54FC45895F7E3F9F783BB46908612 875 ----a-w- C:\Users\Jan Cox\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29\2cde3d5d-5b7df89f 2013-12-14 14:10:11 49FA97DAA63847509D5A972451D73620 1468 ----a-w- C:\Users\Jan Cox\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\3\7125cd43-7c6737d8 2013-12-14 14:21:14 962B22D209AE8358412FF3F14A7FF0D0 850 ----a-w- C:\Users\Jan Cox\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\37\614e0c65-536a0d02 2013-12-14 14:21:14 1F7EA670347142EC4E298F5547FFB9C5 943 ----a-w- C:\Users\Jan Cox\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\47\7631b6ef-12d909d4 2013-12-14 14:10:59 D9226140D3D2FF2D371149337FEA30EE 12749 ----a-w- C:\Users\Jan Cox\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53\34c01335-37f77997 2013-12-14 14:10:10 AECC5CCF33D7AE0E535F2E70CD06665C 54659 ----a-w- C:\Users\Jan Cox\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\56\2e9ab978-5019ff84 2013-12-14 14:11:00 17BFAB6CEDE3EF1E198431337808A804 1044 ----a-w- C:\Users\Jan Cox\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\56\4149fa78-45cb1e22 2013-12-14 14:10:10 BAA3EADAC3DAE150EE6510CED45F604F 35341 ----a-w- C:\Users\Jan Cox\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\59\1e3dfdfb-1be4ace2 2013-12-14 14:21:14 C154BC244A2989340401D19DEACF54B1 857 ----a-w- C:\Users\Jan Cox\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\3f7fad09-7ac1f916 ====== C:\Windows\SysWOW64 ===== ====== C:\Windows\SysWOW64\drivers ===== ====== C:\Windows\Sysnative ===== ====== C:\Windows\Sysnative\drivers ===== 2013-12-12 04:16:13 E0D3CD5841E5C7BE7B94BA946AF1E498 116736 ----a-w- C:\Windows\Sysnative\drivers\drmk.sys 2013-12-12 04:16:13 1E0B4CBBA91C6B041A14ECC2186F7E24 230400 ----a-w- C:\Windows\Sysnative\drivers\portcls.sys ====== C:\Windows\Tasks ====== ====== C:\Windows\Temp ====== ======= C:\Program Files ===== 2013-12-23 21:04:33 -------- d-----w- C:\Program Files\trend micro ======= C:\PROGRA~2 ===== ======= C: ===== ====== C:\Users\Jan Cox\AppData\Roaming ====== 2013-12-18 20:22:21 -------- d-----w- C:\Users\Jan Cox\AppData\Roaming\DriverCure ====== C:\Users\Jan Cox ====== 2013-12-23 21:35:20 -------- d-----w- C:\ProgramData\Windows Genuine Advantage ====== C: exe-files == 2013-12-23 21:50:13 9A821D8D62F4C60232B856E98CBA7E4F 96768 ----a-w- C:\Users\Jan Cox\AppData\Local\Temp\42585506-1013-4466-8924-544260C17A10\DismHost.exe 2013-12-23 21:04:33 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\Jan Cox.exe === C: other files == ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-21-956185951-1265831734-1300764519-1000\Software\Microsoft\Windows\CurrentVersion\Run] "E07NXLRD_47349969"="C:\Program Files (x86)\Microsoft Encarta\Encarta Winkler Prins Naslagbibliotheek 2007 DVD\EDICT.EXE -m" [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "BCU"="C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "E07NXLRD_47349969"="C:\Program Files (x86)\Microsoft Encarta\Encarta Winkler Prins Naslagbibliotheek 2007 DVD\EDICT.EXE -m" ==== Startup Registry Disabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Acronis Scheduler2 Service] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Acronis Scheduler2 Service" "hkey"="HKLM" "command"="\"C:\\Program Files (x86)\\Common Files\\Acronis\\Schedule2\\schedhlp.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Adobe ARM] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Adobe ARM" "hkey"="HKLM" "command"="\"C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ApnUpdater] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="ApnUpdater" "hkey"="HKLM" "command"="\"C:\\Program Files (x86)\\Ask.com\\Updater\\Updater.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\BCU] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="BCU" "hkey"="HKLM" "command"="\"C:\\Program Files (x86)\\DeviceVM\\Browser Configuration Utility\\BCU.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ConnectionCenter] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="ConnectionCenter" "hkey"="HKLM" "command"="\"C:\\Program Files (x86)\\Citrix\\ICA Client\\concentr.exe\" /startup" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\E07NXLRD_1108293] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="E07NXLRD_1108293" "hkey"="HKCU" "command"="\"C:\\Program Files (x86)\\Microsoft Encarta\\Encarta Winkler Prins Naslagbibliotheek 2007 DVD\\EDICT.EXE\" -m" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\E07NXLRD_22929463] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="E07NXLRD_22929463" "hkey"="HKCU" "command"="\"C:\\Program Files (x86)\\Microsoft Encarta\\Encarta Winkler Prins Naslagbibliotheek 2007 DVD\\EDICT.EXE\" -m" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Facebook Update] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Facebook Update" "hkey"="HKCU" "command"="\"C:\\Users\\Jan Cox\\AppData\\Local\\Facebook\\Update\\FacebookUpdate.exe\" /c /nocrashserver" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Freecorder FLV Service] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Freecorder FLV Service" "hkey"="HKLM" "command"="\"C:\\Program Files (x86)\\Freecorder\\FLVSrvc.exe\" /run" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\GrooveMonitor] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="GrooveMonitor" "hkey"="HKLM" "command"="\"C:\\Program Files (x86)\\Microsoft Office\\Office12\\GrooveMonitor.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\HotKeysCmds] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="HotKeysCmds" "hkey"="HKLM" "command"="C:\\Windows\\system32\\hkcmd.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\HP Photosmart 5520 series (NET)] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="HP Photosmart 5520 series (NET)" "hkey"="HKCU" "command"="\"C:\\Program Files\\HP\\HP Photosmart 5520 series\\Bin\\ScanToPCActivationApp.exe\" -deviceID \"CN37R160F80602:NW\" -scfn \"HP Photosmart 5520 series (NET)\" -AutoStart 1" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\HP Software Update] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="HP Software Update" "hkey"="HKLM" "command"="C:\\Program Files (x86)\\HP\\HP Software Update\\HPWuSchd2.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\IgfxTray] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="IgfxTray" "hkey"="HKLM" "command"="C:\\Windows\\system32\\igfxtray.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\MSC] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="MSC" "hkey"="HKLM" "command"="\"C:\\Program Files\\Microsoft Security Client\\msseces.exe\" -hide -runkey" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\msnmsgr] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="msnmsgr" "hkey"="HKCU" "command"="\"C:\\Program Files (x86)\\Windows Live\\Messenger\\msnmsgr.exe\" /background" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\NUSB3MON] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="NUSB3MON" "hkey"="HKLM" "command"="\"C:\\Program Files (x86)\\Renesas Electronics\\USB 3.0 Host Controller Driver\\Application\\nusb3mon.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Persistence] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Persistence" "hkey"="HKLM" "command"="C:\\Windows\\system32\\igfxpers.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Redirector] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Redirector" "hkey"="HKLM" "command"="\"C:\\Program Files (x86)\\Citrix\\ICA Client\\redirector.exe\" /startup" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\RtHDVCpl] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="RtHDVCpl" "hkey"="HKLM" "command"="C:\\Program Files\\Realtek\\Audio\\HDA\\RAVCpl64.exe -s" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Sidebar] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Sidebar" "hkey"="HKCU" "command"="C:\\Program Files\\Windows Sidebar\\sidebar.exe /autoRun" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Spotify Web Helper] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Spotify Web Helper" "hkey"="HKCU" "command"="\"C:\\Program Files (x86)\\Spotify\\Data\\SpotifyWebHelper.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SunJavaUpdateSched] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="SunJavaUpdateSched" "hkey"="HKLM" "command"="\"C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\TrueImageMonitor.exe] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="TrueImageMonitor.exe" "hkey"="HKLM" "command"="C:\\Program Files (x86)\\Acronis\\TrueImageHome\\TrueImageMonitor.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk] "path"="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\HP Digital Imaging Monitor.lnk" "backup"="C:\\Windows\\pss\\HP Digital Imaging Monitor.lnk.CommonStartup" "backupExtension"=".CommonStartup" "command"="C:\\PROGRA~2\\HP\\DIGITA~1\\bin\\hpqtra08.exe " "item"="HP Digital Imaging Monitor" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^vpngui.exe.lnk] "path"="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\vpngui.exe.lnk" "backup"="C:\\Windows\\pss\\vpngui.exe.lnk.CommonStartup" "backupExtension"=".CommonStartup" "command"="C:\\Windows\\Installer\\{467D5E81-8349-4892-9E81-C3674ED8E451}\\Icon09DB8A851.exe -user_logon" "item"="vpngui.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Users^Jan Cox^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk] "path"="C:\\Users\\Jan Cox\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Dropbox.lnk" "backup"="C:\\Windows\\pss\\Dropbox.lnk.Startup" "backupExtension"=".Startup" "command"="C:\\Users\\JANCOX~1\\AppData\\Roaming\\Dropbox\\bin\\Dropbox.exe /systemstartup" "item"="Dropbox" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Users^Jan Cox^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Inktwaarschuwingen controleren - HP Photosmart 5520 series (netwerk).lnk] "path"="C:\\Users\\Jan Cox\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Inktwaarschuwingen controleren - HP Photosmart 5520 series (netwerk).lnk" "backup"="C:\\Windows\\pss\\Inktwaarschuwingen controleren - HP Photosmart 5520 series (netwerk).lnk.Startup" "backupExtension"=".Startup" "command"="C:\\Windows\\system32\\RunDll32.exe \"C:\\Program Files\\HP\\HP Photosmart 5520 series\\bin\\HPStatusBL.dll\",RunDLLEntry SERIALNUMBER=CN37R160F80602;CONNECTION=NW;MONITOR=1;" "item"="Inktwaarschuwingen controleren - HP Photosmart 5520 series (netwerk)" ==== Startup Folders ====================== 2013-12-24 14:44:23 1064 ----a-w- C:\Users\Jan Cox\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ==== Task Scheduler Jobs ====================== C:\Windows\tasks\Adobe Flash Player Updater.job --a------ [undetermined Task] C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-956185951-1265831734-1300764519-1000Core.job --a------ C:\Users\Jan Cox\AppData\Local\Facebook\Update\FacebookUpdate.exe [11-07-2012 21:44] C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-956185951-1265831734-1300764519-1000UA.job --a------ [undetermined Task] C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ [undetermined Task] C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ [undetermined Task] C:\Windows\tasks\SyncBack BU_PC_naar_ExtHDD.job --a------ [undetermined Task] ==== Other Scheduled Tasks ====================== "C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe] "C:\Windows\SysNative\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"] "C:\Windows\SysNative\tasks\CreateChoiceProcessTask" [C:\Windows\System32\browserchoice.exe] "C:\Windows\SysNative\tasks\FacebookUpdateTaskUserS-1-5-21-956185951-1265831734-1300764519-1000Core" [C:\Users\Jan Cox\AppData\Local\Facebook\Update\FacebookUpdate.exe] "C:\Windows\SysNative\tasks\FacebookUpdateTaskUserS-1-5-21-956185951-1265831734-1300764519-1000UA" [C:\Users\Jan Cox\AppData\Local\Facebook\Update\FacebookUpdate.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\HPCustParticipation HP Photosmart 5520 series" ["C:\Program Files\HP\HP Photosmart 5520 series\Bin\HPCustPartic.exe"] "C:\Windows\SysNative\tasks\Launch HTC Sync Loader" [C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe] "C:\Windows\SysNative\tasks\Scheduled Update for Ask Toolbar" [C:\Program Files (x86)\Ask.com\UpdateTask.exe] "C:\Windows\SysNative\tasks\SidebarExecute" [C:\Program Files\Windows Sidebar\sidebar.exe] "C:\Windows\SysNative\tasks\SyncBack BU_PC_naar_ExtHDD" [C:\Program Files (x86)\2BrightSparks\SyncBack\SyncBack.exe] "C:\Windows\SysNative\tasks\User_Feed_Synchronization-{EE86F141-EC3D-4746-90C5-8FA16EE0E1EE}" [C:\Windows\system32\msfeedssync.exe] "C:\Windows\SysNative\tasks\ASUS\ASUS SIX Engine" [C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe] ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions] "smartwebprinting@hp.com"="C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3" [05-10-2011 19:47] [HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions] "smartwebprinting@hp.com"="C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3" [05-10-2011 19:47] ==== C:\zoek_backup content ====================== C:\zoek_backup (files=25 folders=6 4277675 bytes) ==== EOF on do 26-12-2013 at 13:56:51,62 ======================

KB2847077 melding 80004001 KB2891804 melding 800F0826 KB2834140 melding 800F0826[ KB2862152 melding 80004001Q UOTE=kweezie wabbit;437554]Ga naar configuratiescherm - Systeem en beveiliging - Windows Update Klik aan de linkerkant op de link update geschiedenis bekijken. Dubbelklik op de mislukte updates en klik dan op de link ondersteuning bij deze fout. Volg verder de instructies op de schermen. Lukt het daarna om de updates te installeren?

Bovenstaande is geen oplossing voor mij, kan nog steeds niet updaten.

Logfile of random's system information tool 1.09 (written by random/random) Run by Jan Cox at 2013-12-23 22:04:33 Microsoft Windows 7 Home Premium Service Pack 1 System drive C: has 106 GB (71%) free of 150 GB Total RAM: 4061 MB (56% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 22:04:39, on 23-12-2013 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v9.00 (9.00.8112.16526) Boot mode: Normal Running processes: C:\Program Files (x86)\Microsoft Encarta\Encarta Winkler Prins Naslagbibliotheek 2007 DVD\EDICT.EXE C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe C:\Users\Jan Cox\AppData\Roaming\Dropbox\bin\Dropbox.exe C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe C:\Program Files (x86)\Freecorder\FLVSrvc.exe C:\Program Files (x86)\Ask.com\Updater\Updater.exe C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe C:\Program Files (x86)\Citrix\ICA Client\concentr.exe C:\Program Files (x86)\Citrix\ICA Client\redirector.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\Citrix\Receiver\Receiver.exe C:\Program Files (x86)\Citrix\SelfServicePlugin\SelfServicePlugin.exe C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Program Files\trend micro\Jan Cox.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer! R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer! R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll R3 - URLSearchHook: SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll R3 - URLSearchHook: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files (x86)\Freecorder\prxtbFree.dll F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll O2 - BHO: Complitly - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Users\Jan Cox\AppData\Roaming\Complitly\Complitly.dll O2 - BHO: Freecorder - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files (x86)\Freecorder\prxtbFree.dll O2 - BHO: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll O2 - BHO: Aanmeldhulp voor Microsoft-account - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O3 - Toolbar: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files (x86)\Freecorder\prxtbFree.dll O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll O3 - Toolbar: Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [bCU] "C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe" O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [Freecorder FLV Service] "C:\Program Files (x86)\Freecorder\FLVSrvc.exe" /run O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [ConnectionCenter] "C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup O4 - HKLM\..\Run: [Redirector] "C:\Program Files (x86)\Citrix\ICA Client\redirector.exe" /startup O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKCU\..\Run: [E07NXLRD_22929463] "C:\Program Files (x86)\Microsoft Encarta\Encarta Winkler Prins Naslagbibliotheek 2007 DVD\EDICT.EXE" -m O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Jan Cox\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver O4 - HKCU\..\Run: [spotify Web Helper] "C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe" O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [HP Photosmart 5520 series (NET)] "C:\Program Files\HP\HP Photosmart 5520 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN37R160F80602:NW" -scfn "HP Photosmart 5520 series (NET)" -AutoStart 1 O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - Startup: Dropbox.lnk = Jan Cox\AppData\Roaming\Dropbox\bin\Dropbox.exe O4 - Startup: Inktwaarschuwingen controleren - HP Photosmart 5520 series (netwerk).lnk = ? O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: vpngui.exe.lnk = ? O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MIF5BA~1\Office12\EXCEL.EXE/3000 O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print 2.0\smartprintsetup.exe O9 - Extra 'Tools' menuitem: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print 2.0\smartprintsetup.exe O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MIF5BA~1\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MIF5BA~1\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MIF5BA~1\Office12\REFIEBAR.DLL O9 - Extra button: Encarta Winkler Prins Zoekbalk - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files (x86)\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL O9 - Extra button: Toon of verberg HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://oas.support.microsoft.com/ActiveX/MSDcode.cab O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.6.0.cab O16 - DPF: {9E858349-A287-4D37-8C27-034330E160F9} (MijnAlbum Album Upload Software Control Control) - http://www.mijnalbum.nl/v3/skinsrc/core/system/aus8.0.14/ImageUploader8.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - MSN Games - Free Online Games O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - MSN Games - Free Online Games O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O18 - Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter hijack: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: Acronis Nonstop Backup service (afcdpsrv) - Acronis - C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: Browser Configuration Utility Service (BCUService) - DeviceVM, Inc. - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 17047 bytes ======Listing Processes====== \SystemRoot\System32\smss.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 wininit.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\lsm.exe winlogon.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k RPCSS "C:\Program Files\Microsoft Security Client\MsMpEng.exe" C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k GPSvcGroup C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork "C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe" "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" "C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe" "C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe" "C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe" C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe" "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe" C:\Windows\System32\svchost.exe -k HPZ12 C:\Windows\System32\svchost.exe -k HPZ12 C:\Windows\system32\svchost.exe -k imgsvc "C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE" WLIDSvcM.exe 2120 C:\Windows\system32\svchost.exe -k HPService "C:\Program Files\Microsoft Security Client\NisSrv.exe" C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted "C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-ea13ae3a-2aef-412e-9293-451e87da10e0 -SystemEventPortName:HostProcess-fa0cdb43-b041-4ffe-a32b-30e79f90259d -IoCancelEventPortName:HostProcess-0baa4cea-c3ad-4d40-b7fb-9cce8990db4f -NonStateChangingEventPortName:HostProcess-55613737-29ba-45fc-82ca-44ab7bc3f1b5 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:193e0830-0441-46fd-a837-2ab44ac117ba -DeviceGroupId:WpdFsGroup "C:\Windows\system32\Dwm.exe" C:\Windows\Explorer.EXE "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s "C:\Windows\System32\igfxtray.exe" "C:\Windows\System32\hkcmd.exe" "C:\Windows\System32\igfxpers.exe" "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey "C:\Program Files (x86)\Microsoft Encarta\Encarta Winkler Prins Naslagbibliotheek 2007 DVD\EDICT.EXE" -m "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray "C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe" "C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun "C:\Program Files\HP\HP Photosmart 5520 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN37R160F80602:NW" -scfn "HP Photosmart 5520 series (NET)" -AutoStart 1 "C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe" "C:\Users\Jan Cox\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup "C:\Windows\system32\RunDll32.exe" "C:\Program Files\HP\HP Photosmart 5520 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN37R160F80602;CONNECTION=NW;MONITOR=1; "C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe" "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" "C:\Program Files (x86)\Freecorder\FLVSrvc.exe" /run "C:\Program Files (x86)\Ask.com\Updater\Updater.exe" "C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe" "C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup "C:\Program Files (x86)\Citrix\ICA Client\redirector.exe" /startup "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" "C:\Program Files\HP\HP Photosmart 5520 series\Bin\HPNetworkCommunicatorCom.exe" -Embedding C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation "taskhost.exe" taskeng.exe {0FAEB0A2-4B0D-475E-92B7-3710AD1C1E14} "C:\Program Files (x86)\Citrix\Receiver\Receiver.exe" -autoupdate -startplugins C:\Windows\system32\SearchIndexer.exe /Embedding "C:\Program Files\Windows Media Player\wmpnetwk.exe" C:\Windows\system32\wbem\unsecapp.exe -Embedding C:\Windows\sysWOW64\wbem\wmiprvse.exe -Embedding C:\Windows\System32\svchost.exe -k LocalServicePeerNet "C:\Program Files\HP\HP Photosmart 5520 series\Bin\HPNetworkCommunicator.exe" "C:\Program Files (x86)\Citrix\SelfServicePlugin\SelfServicePlugin.exe" "C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe" -Embedding C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7} "C:\Windows\system32\wuauclt.exe" "C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.exe" C:\Windows\system32\svchost.exe -k defragsvc "C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE" "C:\Program Files (x86)\Internet Explorer\iexplore.exe" Windows 7 Melding op bureaublad "C:\Program Files (x86)\Internet Explorer\iexplore.exe" SCODEF:4280 CREDAT:145409 "C:\Windows\system32\SearchFilterHost.exe" 0 512 516 524 65536 520 "C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe32_ Global\UsGthrCtrlFltPipeMssGthrPipe32 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "E:\Jan Cox\Downloads\RSITx64.exe" C:\Windows\system32\wbem\wmiprvse.exe ======Scheduled tasks folder====== C:\Windows\tasks\Adobe Flash Player Updater.job C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-956185951-1265831734-1300764519-1000Core.job C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-956185951-1265831734-1300764519-1000UA.job C:\Windows\tasks\GoogleUpdateTaskMachineCore.job C:\Windows\tasks\GoogleUpdateTaskMachineUA.job C:\Windows\tasks\ParetoLogic Registration3.job C:\Windows\tasks\ParetoLogic Update Version3 Startup Task.job C:\Windows\tasks\ParetoLogic Update Version3.job C:\Windows\tasks\RegCure Pro.job C:\Windows\tasks\SyncBack BU_PC_naar_ExtHDD.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}] Complitly - C:\Users\Jan Cox\AppData\Roaming\Complitly\64\Complitly64.dll [2011-10-16 167416] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}] Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2013-12-14 256080] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}] HP Print Enhancer - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-10-22 328248] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}] Complitly - C:\Users\Jan Cox\AppData\Roaming\Complitly\Complitly.dll [2011-10-16 139768] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1392b8d2-5c05-419f-a8f6-b9f15a596612}] Freecorder Toolbar - C:\Program Files (x86)\Freecorder\prxtbFree.dll [2011-05-09 176936] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1dad3af3-ef2f-4f64-ac4b-11789189fcb6}] Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll [2013-07-23 1451680] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}] Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-10-08 462760] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Aanmeldhulp voor Microsoft-account - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}] Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2013-12-14 194128] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}] Ask Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2012-12-10 1520840] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-10-08 171944] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}] HP Smart BHO Class - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-10-22 517688] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2013-12-14 256080] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar] {1392b8d2-5c05-419f-a8f6-b9f15a596612} - Freecorder Toolbar - C:\Program Files (x86)\Freecorder\prxtbFree.dll [2011-05-09 176936] {D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2012-12-10 1520840] {eec0f710-38b5-4aba-99bf-ec87564a4e13} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll [2013-07-23 1451680] {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2013-12-14 194128] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-07-06 11057768] "IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-02-11 162328] "HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-02-11 386584] "Persistence"=C:\Windows\system32\igfxpers.exe [2011-02-11 417304] "MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2013-10-23 1266912] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "E07NXLRD_22929463"=C:\Program Files (x86)\Microsoft Encarta\Encarta Winkler Prins Naslagbibliotheek 2007 DVD\EDICT.EXE [2006-06-14 351000] "msnmsgr"=C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [2012-09-12 4272640] "Facebook Update"=C:\Users\Jan Cox\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-07-11 138096] "Spotify Web Helper"=C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe [2013-04-26 1104280] "Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584] "HP Photosmart 5520 series (NET)"=C:\Program Files\HP\HP Photosmart 5520 series\Bin\ScanToPCActivationApp.exe [2012-10-17 2573416] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service] C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [2009-09-12 357384] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe] C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [2009-09-12 5048488] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "BCU"=C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe [2010-03-05 411864] "NUSB3MON"=C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2010-04-27 113288] "GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040] "Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576] "Freecorder FLV Service"=C:\Program Files (x86)\Freecorder\FLVSrvc.exe [2011-03-24 167936] "ApnUpdater"=C:\Program Files (x86)\Ask.com\Updater\Updater.exe [2012-12-10 1573576] "HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2011-10-28 49208] ""= [] "ConnectionCenter"=C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [2013-09-16 395656] "Redirector"=C:\Program Files (x86)\Citrix\ICA Client\redirector.exe [2013-09-16 153992] "SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe vpngui.exe.lnk - C:\Windows\Installer\{467D5E81-8349-4892-9E81-C3674ED8E451}\Icon09DB8A851.exe C:\Users\Jan Cox\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup Dropbox.lnk - C:\Users\Jan Cox\AppData\Roaming\Dropbox\bin\Dropbox.exe Inktwaarschuwingen controleren - HP Photosmart 5520 series (netwerk).lnk - C:\Windows\system32\RunDll32.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui] C:\Windows\system32\igfxdev.dll [2011-02-11 272896] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=0 "ConsentPromptBehaviorUser"=3 "EnableLUA"=0 "EnableUIADesktopToggle"=0 "PromptOnSecureDesktop"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=145 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoActiveDesktop"=1 "NoActiveDesktopChanges"=1 "ForceActiveDesktopOn"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "vidc.uyvy"=msyuv.dll "vidc.yuy2"=msyuv.dll "vidc.yvyu"=msyuv.dll "vidc.iyuv"=iyuv_32.dll "vidc.i420"=iyuv_32.dll "vidc.yvu9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 month====== 2013-12-23 22:04:33 ----D---- C:\rsit 2013-12-23 22:04:33 ----D---- C:\Program Files\trend micro 2013-12-18 22:02:27 ----D---- C:\Windows\system32\catroot2 2013-12-18 22:00:02 ----D---- C:\Windows\SoftwareDistribution 2013-12-18 21:54:22 ----D---- C:\Windows\SoftwareDistribution.old 2013-12-18 21:22:21 ----D---- C:\Users\Jan Cox\AppData\Roaming\ParetoLogic 2013-12-18 21:22:21 ----D---- C:\Users\Jan Cox\AppData\Roaming\DriverCure 2013-12-18 21:22:04 ----D---- C:\ProgramData\ParetoLogic 2013-12-18 21:22:04 ----D---- C:\Program Files (x86)\ParetoLogic 2013-12-12 11:32:40 ----D---- C:\Windows\Migration 2013-12-12 07:51:30 ----A---- C:\Windows\SYSWOW64\mshtmled.dll 2013-12-12 07:51:30 ----A---- C:\Windows\system32\mshtmled.dll 2013-12-12 07:51:29 ----A---- C:\Windows\SYSWOW64\vbscript.dll 2013-12-12 07:51:29 ----A---- C:\Windows\SYSWOW64\ieui.dll 2013-12-12 07:51:28 ----A---- C:\Windows\SYSWOW64\wininet.dll 2013-12-12 07:51:28 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe 2013-12-12 07:51:28 ----A---- C:\Windows\system32\wininet.dll 2013-12-12 07:51:28 ----A---- C:\Windows\system32\ieUnatt.exe 2013-12-12 07:51:28 ----A---- C:\Windows\system32\ieui.dll 2013-12-12 07:51:27 ----A---- C:\Windows\SYSWOW64\url.dll 2013-12-12 07:51:27 ----A---- C:\Windows\SYSWOW64\msfeeds.dll 2013-12-12 07:51:27 ----A---- C:\Windows\system32\url.dll 2013-12-12 07:51:27 ----A---- C:\Windows\system32\msfeeds.dll 2013-12-12 07:51:27 ----A---- C:\Windows\system32\jsproxy.dll 2013-12-12 07:51:26 ----A---- C:\Windows\SYSWOW64\urlmon.dll 2013-12-12 07:51:26 ----A---- C:\Windows\SYSWOW64\iertutil.dll 2013-12-12 07:51:26 ----A---- C:\Windows\system32\urlmon.dll 2013-12-12 07:51:26 ----A---- C:\Windows\system32\iertutil.dll 2013-12-12 07:51:25 ----A---- C:\Windows\SYSWOW64\jsproxy.dll 2013-12-12 07:51:25 ----A---- C:\Windows\SYSWOW64\jscript9.dll 2013-12-12 07:51:25 ----A---- C:\Windows\SYSWOW64\jscript.dll 2013-12-12 07:51:25 ----A---- C:\Windows\system32\vbscript.dll 2013-12-12 07:51:25 ----A---- C:\Windows\system32\jscript9.dll 2013-12-12 07:51:25 ----A---- C:\Windows\system32\jscript.dll 2013-12-12 07:51:24 ----A---- C:\Windows\SYSWOW64\mshtml.dll 2013-12-12 07:51:23 ----A---- C:\Windows\system32\mshtml.dll 2013-12-12 07:51:22 ----A---- C:\Windows\SYSWOW64\ieframe.dll 2013-12-12 07:51:22 ----A---- C:\Windows\system32\ieframe.dll 2013-12-12 05:16:19 ----A---- C:\Windows\system32\win32k.sys 2013-12-12 05:16:18 ----A---- C:\Windows\SYSWOW64\imagehlp.dll 2013-12-12 05:16:18 ----A---- C:\Windows\system32\imagehlp.dll 2013-12-12 05:16:15 ----A---- C:\Windows\SYSWOW64\tzres.dll 2013-12-12 05:16:15 ----A---- C:\Windows\system32\tzres.dll 2013-12-12 05:16:13 ----A---- C:\Windows\system32\drivers\portcls.sys 2013-12-12 05:16:13 ----A---- C:\Windows\system32\drivers\drmk.sys 2013-12-12 05:16:12 ----A---- C:\Windows\SYSWOW64\wscript.exe 2013-12-12 05:16:12 ----A---- C:\Windows\SYSWOW64\scrrun.dll 2013-12-12 05:16:12 ----A---- C:\Windows\SYSWOW64\cscript.exe 2013-12-12 05:16:12 ----A---- C:\Windows\system32\wscript.exe 2013-12-12 05:16:12 ----A---- C:\Windows\system32\scrrun.dll 2013-12-12 05:16:12 ----A---- C:\Windows\system32\cscript.exe ======List of files/folders modified in the last 1 month====== 2013-12-23 22:04:39 ----D---- C:\Windows\Prefetch 2013-12-23 22:04:33 ----RD---- C:\Program Files 2013-12-23 22:04:03 ----D---- C:\Windows\Temp 2013-12-23 22:01:11 ----SHD---- C:\System Volume Information 2013-12-23 19:19:12 ----D---- C:\Windows\system32\config 2013-12-23 18:45:46 ----D---- C:\Windows\winsxs 2013-12-23 18:32:16 ----D---- C:\Users\Jan Cox\AppData\Roaming\Dropbox 2013-12-23 18:30:34 ----D---- C:\Windows\SysWOW64 2013-12-23 18:30:33 ----D---- C:\Windows\System32 2013-12-19 00:39:48 ----D---- C:\Windows\rescache 2013-12-18 22:49:29 ----D---- C:\Windows\inf 2013-12-18 22:49:29 ----D---- C:\Windows 2013-12-18 22:39:28 ----D---- C:\Windows\Panther 2013-12-18 22:39:28 ----D---- C:\Windows\Logs 2013-12-18 22:39:28 ----D---- C:\Windows\debug 2013-12-18 22:38:14 ----D---- C:\Program Files\CCleaner 2013-12-18 22:14:34 ----D---- C:\Program Files\Windows Media Player 2013-12-18 22:14:34 ----D---- C:\Program Files (x86)\Windows Media Player 2013-12-18 21:22:24 ----D---- C:\Windows\Tasks 2013-12-18 21:22:24 ----D---- C:\Windows\system32\Tasks 2013-12-18 21:22:08 ----D---- C:\Program Files (x86)\Common Files 2013-12-18 21:22:04 ----RD---- C:\Program Files (x86) 2013-12-18 21:22:04 ----HD---- C:\ProgramData 2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\zh-TW 2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\zh-HK 2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\zh-CN 2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\tr-TR 2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\sv-SE 2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\ru-RU 2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\pt-PT 2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\pt-BR 2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\pl-PL 2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\nl-NL 2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\nb-NO 2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\ko-KR 2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\ja-JP 2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\it-IT 2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\hu-HU 2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\fr-FR 2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\fi-FI 2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\es-ES 2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\en-US 2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\el-GR 2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\de-DE 2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\da-DK 2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\cs-CZ 2013-12-18 21:12:53 ----D---- C:\Windows\system32\zh-TW 2013-12-18 21:12:53 ----D---- C:\Windows\system32\zh-HK 2013-12-18 21:12:53 ----D---- C:\Windows\system32\zh-CN 2013-12-18 21:12:53 ----D---- C:\Windows\system32\tr-TR 2013-12-18 21:12:53 ----D---- C:\Windows\system32\sv-SE 2013-12-18 21:12:53 ----D---- C:\Windows\system32\ru-RU 2013-12-18 21:12:53 ----D---- C:\Windows\system32\pt-PT 2013-12-18 21:12:53 ----D---- C:\Windows\system32\pt-BR 2013-12-18 21:12:53 ----D---- C:\Windows\system32\pl-PL 2013-12-18 21:12:53 ----D---- C:\Windows\system32\nl-NL 2013-12-18 21:12:53 ----D---- C:\Windows\system32\nb-NO 2013-12-18 21:12:53 ----D---- C:\Windows\system32\ko-KR 2013-12-18 21:12:53 ----D---- C:\Windows\system32\ja-JP 2013-12-18 21:12:53 ----D---- C:\Windows\system32\it-IT 2013-12-18 21:12:53 ----D---- C:\Windows\system32\hu-HU 2013-12-18 21:12:53 ----D---- C:\Windows\system32\fr-FR 2013-12-18 21:12:53 ----D---- C:\Windows\system32\fi-FI 2013-12-18 21:12:53 ----D---- C:\Windows\system32\es-ES 2013-12-18 21:12:53 ----D---- C:\Windows\system32\el-GR 2013-12-18 21:12:53 ----D---- C:\Windows\system32\de-DE 2013-12-18 21:12:53 ----D---- C:\Windows\system32\da-DK 2013-12-18 21:12:53 ----D---- C:\Windows\system32\cs-CZ 2013-12-18 21:12:52 ----D---- C:\Windows\system32\en-US 2013-12-15 11:23:35 ----SHD---- C:\Config.Msi 2013-12-15 11:18:52 ----SHD---- C:\Windows\Installer 2013-12-15 11:18:47 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI 2013-12-15 11:18:39 ----A---- C:\Windows\system32\PerfStringBackup.INI 2013-12-13 16:48:56 ----D---- C:\Windows\system32\NDF 2013-12-12 12:48:48 ----D---- C:\Windows\system32\catroot 2013-12-12 12:34:29 ----D---- C:\Windows\SYSWOW64\migration 2013-12-12 12:34:29 ----D---- C:\Program Files\Internet Explorer 2013-12-12 12:34:29 ----D---- C:\Program Files (x86)\Internet Explorer 2013-12-12 12:34:28 ----D---- C:\Windows\system32\migration 2013-12-12 12:34:28 ----D---- C:\Windows\PolicyDefinitions 2013-12-12 11:48:12 ----D---- C:\Windows\Microsoft.NET 2013-12-12 11:36:17 ----RSD---- C:\Windows\assembly 2013-12-12 11:32:40 ----SD---- C:\ProgramData\Microsoft 2013-12-12 11:24:29 ----D---- C:\Windows\system32\MRT 2013-12-12 11:22:32 ----A---- C:\Windows\system32\MRT.exe 2013-12-12 08:00:07 ----D---- C:\Windows\system32\DriverStore 2013-12-12 08:00:07 ----D---- C:\Windows\system32\drivers 2013-12-12 07:52:49 ----D---- C:\ProgramData\Microsoft Help 2013-12-11 08:20:24 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe 2013-11-29 17:00:28 ----D---- C:\Users\Jan Cox\AppData\Roaming\Belastingdienst 2013-11-28 22:15:45 ----D---- C:\Program Files (x86)\Auslogics 2013-11-28 22:13:39 ----D---- C:\Windows\Minidump 2013-11-25 22:06:25 ----D---- C:\Windows\SYSWOW64\Adobe ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2013-09-27 248240] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888] R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2011-06-15 254496] R0 tdrpman251;Acronis Try&Decide and Restore Points filter (build 251); C:\Windows\system32\DRIVERS\tdrpm251.sys [2011-06-15 1455648] R0 timounter;Acronis Backup Archive Explorer; C:\Windows\system32\DRIVERS\timntr.sys [2011-06-15 929312] R1 AsIO;AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [2009-08-04 13440] R1 ctxusbm;Citrix USB Monitor Driver; C:\Windows\system32\DRIVERS\ctxusbm.sys [2013-08-19 95152] R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904] R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2013-09-27 134944] R3 afcdp;afcdp; C:\Windows\system32\DRIVERS\afcdp.sys [2011-06-15 250400] R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2009-10-09 1394176] R3 CVPNDRVA;Cisco Systems Inc. IPSec Driver; \??\C:\Windows\system32\Drivers\CVPNDRVA.sys [2010-03-23 304784] R3 DNE;Deterministic Network Enhancer Miniport; C:\Windows\system32\DRIVERS\dne64x.sys [2008-11-16 157968] R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-02-11 10628640] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-07-06 2419176] R3 IntcHdmiAddService;Intel® High Definition Audio HDMI; C:\Windows\system32\drivers\IntcHdmi.sys [2010-01-07 144896] R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2013-04-04 25928] R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2009-07-16 15416] R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2010-04-27 83080] R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2010-04-27 184968] R3 StillCam;Stuurprogramma voor seriële digitale fotocamera; C:\Windows\system32\drivers\serscan.sys [2009-07-14 12288] S3 CVirtA;Cisco Systems VPN Adapter for 64-bit Windows; C:\Windows\system32\DRIVERS\CVirtA64.sys [2010-02-08 14992] S3 dgderdrv;dgderdrv; C:\Windows\System32\drivers\dgderdrv.sys [] S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2012-07-28 57280] S3 HTCAND64;HTC Device Driver; C:\Windows\System32\Drivers\ANDROIDUSB.sys [2009-11-01 33736] S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [] S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352] S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456] S3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240] S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2012-08-23 57856] S3 usb_rndisx;USB RNDIS-adapter; C:\Windows\system32\drivers\usb8023x.sys [2013-02-12 19968] S3 usbscan;Stuurprogramma voor USB-scanner; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984] S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984] S3 WSDPrintDevice;WSD-ondersteuning voor afdrukken via UMB; C:\Windows\system32\DRIVERS\WSDPrint.sys [2009-07-14 23040] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AcrSch2Svc;Acronis Scheduler2 Service; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [2009-09-12 891432] R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-10 65640] R2 afcdpsrv;Acronis Nonstop Backup service; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [2011-06-15 2326920] R2 BCUService;Browser Configuration Utility Service; C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe [2010-03-05 235752] R2 CVPND;Cisco Systems, Inc. VPN Service; C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe [2010-03-23 1528616] R2 hpqddsvc;HP CUE DeviceDiscovery-service; C:\Windows\system32\svchost.exe [2009-07-14 27136] R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2009-07-14 27136] R2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-04-04 418376] R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2013-04-04 701512] R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-10-23 23808] R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136] R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136] R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480] R3 BBUpdate;BBUpdate; C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.exe [2013-07-23 240288] R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 27136] R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2013-10-23 348376] S2 BBSvc;BingBar Service; C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BBSvc.exe [2013-07-23 193696] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088] S2 gupdate;Google Updateservice (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-10-13 136176] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11 257416] S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2012-09-12 1512448] S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-10-13 136176] S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-31 194032] S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-11-12 1255736] S4 aspnet_state;ASP.NET-statusservice; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808] S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

cannot open file C:\Program Files (x86)\Asus\EPU-4 Engine\Resource\gear.prg. Deze melding komt telkens terug na opstarten PC. Hoe krijg ik de melding definitief verwijderd.

De volgende windowsupdate worden niet geinstalleerd: Krijg fotmelding en na enkele keren opnieuw opstarten kan ik weer verder. Bij afluiten gaat hij de updates weer laden en bij het opnieuw opstarten start het verhaal weer van vooraf aan. Wie kan me een oplossing geven. KB2834140: Update voor Windows 7 voor x64-systemen Downloadgrootte: 811 kB U moet de computer mogelijk opnieuw opstarten om deze update van kracht te laten worden. Type update: Aanbevolen Installeer deze update om problemen in Windows op te lossen. Zie voor een complete lijst met problemen die in deze update zijn opgenomen het bijbehorende Microsoft Knowledge Base-artikel voor meer informatie. Wanneer u deze update hebt geïnstalleerd, moet u de computer mogelijk opnieuw opstarten. Meer informatie: "0x00000050" Stop error after you install update 2670838 on a computer that is running Windows 7 SP1 or Windows Server 2008 R2 SP1 Help en ondersteuning: Microsoft Support KB2847077: Update voor Windows 7 voor x64-systemen Downloadgrootte: 15,5 MB U moet de computer mogelijk opnieuw opstarten om deze update van kracht te laten worden. Type update: Aanbevolen Installeer deze update om problemen in Windows op te lossen. Zie voor een complete lijst met problemen die in deze update zijn opgenomen het bijbehorende Microsoft Knowledge Base-artikel voor meer informatie. Wanneer u deze update hebt geïnstalleerd, moet u de computer mogelijk opnieuw opstarten. Meer informatie: Windows Media Player freezes when you use AutoPlay for an audio CD in Windows 7 Help en ondersteuning: Microsoft Support KB2862152: Beveiligingsupdate voor Windows 7 voor x64-systemen Downloadgrootte: 1,0 MB U moet de computer mogelijk opnieuw opstarten om deze update van kracht te laten worden. Type update: belangrijk Er is een beveiligingsprobleem vastgesteld bij een softwareproduct van Microsoft dat invloed kan hebben op uw systeem. Installeer deze update van Microsoft om uw systeem hiertegen te beveiligen. Zie voor een complete lijst met problemen die in deze update zijn opgenomen het bijbehorende Microsoft Knowledge Base-artikel. Nadat u deze update hebt geïnstalleerd, moet u de computer wellicht opnieuw opstarten. Meer informatie: Microsoft security advisory: Vulnerability in DirectAccess and IPsec could allow security feature bypass Help en ondersteuning: Microsoft Support KB2891804: Update voor Windows 7 voor x64-systemen Downloadgrootte: 235 kB U moet de computer mogelijk opnieuw opstarten om deze update van kracht te laten worden. Type update: Aanbevolen Installeer deze update om problemen in Windows op te lossen. Zie voor een complete lijst met problemen die in deze update zijn opgenomen het bijbehorende Microsoft Knowledge Base-artikel voor meer informatie. Wanneer u deze update hebt geïnstalleerd, moet u de computer mogelijk opnieuw opstarten. Meer informatie: Files or folders are removed unexpectedly when you perform a cut-and-paste operation on a Windows FTP client that is connected to an FTP site Help en ondersteuning: Microsoft Support