optimizer pro verwijderen via hijack this hoe werkt dit?

Huibertchr · 31 januari 2013

De computer werkt heel traag. ik heb onlangs mijn computer gescans met PC Veilig van KPN. Die vond niets. Nu zag ik optimizer pro geinstalleerd. Ik kende het programma niet en heb er eerst op gegoogeld. Zag dat het foute boel was. Ik wil dit graag verwijderen en downloadde hiervoor Hijack this. Nu zoek ik ondersteuning via dit forum voor ik meer kwaad doe dan goed

kape · 1 februari 2013

1. Download HijackThis. (klik er op)

Klik op HijackThis.msi en de download start automatisch na 5 seconden.

Bestand HijackThis.msi opslaan. Daarna kiezen voor "uitvoeren".

Hijackthis wordt nu op je PC geïnstalleerd, een snelkoppeling wordt op je bureaublad geplaatst.

Als je geen netwerkverbinding meer hebt, kan je de download doen met een andere pc en het bestand met een usb stick overbrengen

Als je enkel nog in veilige modus kan werken, moet je de executable (HijackThis.exe) downloaden.

Sla deze op in een nieuwe map op de C schijf (bvb C:\\hijackthis) en start hijackthis dan vanaf deze map.

De logjes kan je dan ook in die map terugvinden.

2. Klik op de snelkoppeling om HijackThis te starten. (lees eerst de rode tekst hieronder!)

Klik ofwel op "Do a systemscan and save a logfile", ofwel eerst op "Scan" en dan op "Savelog".

Er opent een kladblokvenster, hou gelijktijdig de CTRL en A-toets ingedrukt, nu is alles geselecteerd. Hou gelijktijdig de CTRL en C-toets ingedrukt, nu is alles gekopieerd. Plak nu het HJT logje in je bericht door CTRL en V-toets.

Krijg je een melding ""For some reason your system denied writing to the Host file ....", klik dan gewoon door op de OK-toets.

Let op : Windows Vista & 7 gebruikers dienen HijackThis als “administrator” uit te voeren via rechtermuisknop “als administrator uitvoeren". Indien dit via de snelkoppeling niet lukt voer je HijackThis als administrator uit in de volgende map : C:\\Program Files\\Trend Micro\\HiJackThis of C:\\Program Files (x86)\\Trend Micro\\HiJackThis. (Bekijk hier de afbeelding ---> Klik hier)

3. Na het plaatsen van je logje wordt dit door een expert nagekeken en hij begeleidt jou verder door het ganse proces.

Tip!

Wil je in woord en beeld weten hoe je een logje met HijackThis maakt en plaatst op het forum, klik dan HIER.

Huibertchr · 1 februari 2013

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 17:45:36, on 1-2-2013

Platform: Windows Vista SP1 (WinNT 6.00.1905)

MSIE: Internet Explorer v7.00 (7.00.6001.18639)

Boot mode: Normal

Running processes:

C:\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe

C:\Windows\system32\taskeng.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Program Files\Windows Defender\MSASCui.exe

C:\Program Files\PC Veilig\Common\FSM32.EXE

C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe

C:\Windows\ehome\ehtray.exe

C:\Users\Huib\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe

C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe

C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

C:\Users\Huib\AppData\Roaming\Dropbox\bin\Dropbox.exe

C:\Program Files\Optimizer Pro\OptProReminder.exe

C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

C:\Program Files\Windows Media Player\wmpnscfg.exe

C:\Windows\ehome\ehmsas.exe

C:\Windows\system32\conime.exe

C:\Windows\system32\wuauclt.exe

C:\Users\Huib\AppData\Roaming\Spotify\spotify.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = This message is from the Microsoft Safety & Security Center

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = This message is from the Microsoft Safety & Security Center

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O1 - Hosts: ::1 localhost

O2 - BHO: SuggestMeYesBHO - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Program Files\AutocompletePro\AutocompletePro.dll

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.8.3.8\bh\BabylonToolbar.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Browse2save - {9C9793B1-1A7F-3863-3C35-F917936A57D5} - C:\ProgramData\Browse2save\51095c3a2e769.dll

O2 - BHO: LitmusBHO - {C6867EB7-8350-4856-877F-93CF8AE3DC9C} - C:\Program Files\PC Veilig\NRS\iescript\baselitmus.dll

O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: Softonic Helper Object - {E87806B5-E908-45FD-AF5E-957D83E58E68} - C:\Program Files\Softonic\softonic\1.5.11.5\bh\softonic.dll

O2 - BHO: Yontoo Layers - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files\Yontoo\YontooIEClient.dll

O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

O3 - Toolbar: Softonic Toolbar - {5018CFD2-804D-4C99-9F81-25EAEA2769DE} - C:\Program Files\Softonic\softonic\1.5.11.5\softonicTlbr.dll

O3 - Toolbar: (no name) - {D0F4A166-B8D4-48b8-9D63-80849FE137CB} - (no file)

O3 - Toolbar: Browsing Protection Toolbar - {265EEE8E-3228-44D3-AEA5-F7FDF5860049} - C:\Program Files\PC Veilig\NRS\iescript\baselitmus.dll

O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide

O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\PC Veilig\Common\FSM32.EXE" /splash

O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\PC Veilig\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

O4 - HKLM\..\Run: [HTC Sync Loader] "C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe" -startup

O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe

O4 - HKCU\..\Run: [spotify Web Helper] "C:\Users\Huib\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"

O4 - HKCU\..\Run: [iSUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler

O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Huib\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver

O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

O4 - HKCU\..\Run: [Optimizer Pro] C:\Program Files\Optimizer Pro\OptProLauncher.exe

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-21-3266515138-1875802608-3271890376-1004\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'UpdatusUser')

O4 - Startup: Dropbox.lnk = Huib\AppData\Roaming\Dropbox\bin\Dropbox.exe

O4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200

O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

O9 - Extra button: HP Slim selecteren - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

O16 - DPF: {34DC6011-88B5-4EA9-BA7A-DC7B4F4437FE} (JordanUploader Class) - http://foto.hema.nl/ips-opdata/layout/hema/objects/jordan.cab

O20 - AppInit_DLLs: c:\docume~1\ settings\all users\application data\browser manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753} c:\progra~2\browse~1\23796~1.11\{16cdf~1\browse~1.dll c:\progra~1\browse~2\sprote~1.dll

O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll

O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: Browser Manager - Unknown owner - C:\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe

O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - Unknown owner - C:\Program Files\PC Veilig\Anti-Virus\fsgk32st.exe

O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\PC Veilig\FWES\Program\fsdfwd.exe

O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\PC Veilig\Common\FSMA32.EXE

O23 - Service: F-Secure ORSP Client (FSORSPClient) - F-Secure Corporation - C:\Program Files\PC Veilig\ORSP Client\fsorsp.exe

O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe

O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe

O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe

O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe

O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe

O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe

--

End of file - 11131 bytes

juisterr · 1 februari 2013

Start HijackThis op en kies voor 'Do a system scan only'

Selecteer alleen de items die hieronder zijn genoemd:

O2 - BHO: SuggestMeYesBHO - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Program Files\AutocompletePro\AutocompletePro.dll

O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.8.3.8\bh\BabylonToolbar.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: Browse2save - {9C9793B1-1A7F-3863-3C35-F917936A57D5} - C:\ProgramData\Browse2save\51095c3a2e769.dll

O2 - BHO: Yontoo Layers - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files\Yontoo\YontooIEClient.dll

O3 - Toolbar: (no name) - {D0F4A166-B8D4-48b8-9D63-80849FE137CB} - (no file)

Sluit alle vensters behalve HijackThis

Klik op 'Fix checked' om de items te verwijderen.

- - - Updated - - -

Hallo, we gaan de volgende tool inzetten. zoek.exe ®by smeenk

Download zoek.exe naar het bureaublad.

Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe
(hier of hier) kan je lezen hoe je dat doet.
Dubbelklik op Zoek.exe om de tool te starten.
Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
Kopieer nu onderstaande code en plak die in het grote invulvenster:
Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkwaardig probleem.
```
startupall;
filesrcm;
emptyclsid;
```
Vink nu de onderstaande opties aan.
- Firefox Look
- Firefox Defaults
- Standaard Search
- Auto Clean
- Running processes
- Empty All Temp
- IE Defaults
[*] Klik nu op de knop "Run script".

[*] Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).

[*] Mocht na de herstart geen logje verschijnen, start zoek.exe dan opnieuw, de log verschijnt dan alsnog.

[*] Post nu de inhoud van het geopende logje in het volgende bericht.

Huibertchr · 1 februari 2013

Zoek.exe Version 4.0.0.1 Updated 30-January-2013

Tool run by Huib on vr 01-02-2013 at 22:29:07,37.

Microsoft® Windows Vista™ Home Premium 6.0.6001 Service Pack 1 x86

Running in: Normal Mode Internet Access Detected

==== Running Processes ======================

C:\Windows\system32\csrss.exe

C:\Windows\system32\wininit.exe

C:\Windows\system32\csrss.exe

C:\Windows\system32\services.exe

C:\Windows\system32\lsass.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\winlogon.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\nvvsvc.exe

C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

C:\Windows\system32\svchost.exe -k rpcss

C:\Windows\System32\svchost.exe -k secsvcs

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\SLsvc.exe

C:\Windows\system32\svchost.exe -k LocalService

C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

C:\Windows\system32\nvvsvc.exe

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe

C:\Program Files\PC Veilig\Anti-Virus\fsgk32st.exe

C:\Program Files\PC Veilig\Common\FSMA32.EXE

C:\Windows\system32\svchost.exe -k hpdevmgmt

C:\Windows\System32\svchost.exe -k HPZ12

C:\Program Files\PC Veilig\Anti-Virus\FSGK32.EXE

C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe

C:\Windows\System32\svchost.exe -k HPZ12

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe

C:\Windows\system32\svchost.exe -k imgsvc

C:\Windows\System32\svchost.exe -k WerSvcGroup

C:\Windows\system32\SearchIndexer.exe

C:\Windows\system32\WUDFHost.exe

C:\Windows\system32\svchost.exe -k HPService

C:\Program Files\PC Veilig\Anti-Virus\fssm32.exe

C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe

C:\Windows\system32\taskeng.exe

C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

C:\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe

C:\Windows\system32\taskeng.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Program Files\Windows Defender\MSASCui.exe

C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe

C:\Windows\ehome\ehtray.exe

C:\Users\Huib\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe

C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe

C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

C:\Users\Huib\AppData\Roaming\Dropbox\bin\Dropbox.exe

C:\Program Files\Optimizer Pro\OptProReminder.exe

C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE

C:\Program Files\Windows Media Player\wmpnscfg.exe

C:\Program Files\Windows Media Player\wmpnetwk.exe

C:\Windows\ehome\ehmsas.exe

C:\Windows\system32\conime.exe

C:\Windows\system32\wuauclt.exe

C:\Users\Huib\AppData\Roaming\Spotify\spotify.exe

C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Program Files\PC Veilig\Common\FSLAUNCH.EXE

C:\Users\Huib\Downloads\zoek.exe

C:\Users\Huib\AppData\Local\Temp\RarSFX0\zoek.com

C:\Windows\system32\wbem\wmiprvse.exe

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} deleted successfully

HKEY_USERS\S-1-5-21-3266515138-1875802608-3271890376-1002\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} deleted successfully

HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} deleted successfully

HKEY_USERS\S-1-5-21-3266515138-1875802608-3271890376-1002\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} deleted successfully

HKEY_USERS\S-1-5-21-3266515138-1875802608-3271890376-1002\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B} deleted successfully

HKEY_USERS\S-1-5-21-3266515138-1875802608-3271890376-1002\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully

HKEY_USERS\S-1-5-21-3266515138-1875802608-3271890376-1002\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-3266515138-1875802608-3271890376-1002\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{2318C2B1-4965-11D4-9B18-009027A5CD4F} deleted successfully

==== Deleting Services ======================

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\browser manager deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\browser manager deleted successfully

==== FireFox Fix ======================

Deleted from C:\Users\Huib\AppData\Roaming\Mozilla\Firefox\Profiles\h0q2rmto.default\prefs.js:

Added to C:\Users\Huib\AppData\Roaming\Mozilla\Firefox\Profiles\h0q2rmto.default\prefs.js:

user_pref("browser.startup.homepage", "http://www.google.com");

user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");

user_pref("browser.newtab.url", "http://www.google.com/");

user_pref("browser.search.defaultengine", "Google");

user_pref("browser.search.defaultenginename", "Google");

user_pref("browser.search.selectedEngine", "Google");

user_pref("browser.search.order.1", "Google");

user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");

user_pref("browser.search.suggest.enabled", true);

user_pref("browser.search.useDBForOrder", true);

==== Registry Fix Code ======================

Windows Registry Editor Version 5.00

hijackthis

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"bProtector Start Page"=-

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]

"bProtectorDefaultScope"=-

==== Deleting Files \ Folders ======================

"C:\user.js" deleted

"C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml" deleted

"C:\Users\Huib\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data" deleted

"C:\Users\Huib\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences" deleted

"C:\Windows\tasks\AmiUpdXp.job" deleted

"C:\user.js" deleted

"C:\END" deleted

"C:\Users\Huib\AppData\Roaming\Mozilla\Firefox\Profiles\h0q2rmto.default\bProtector_extensions.rdf" deleted

"C:\Users\Huib\AppData\Roaming\Mozilla\Firefox\Profiles\h0q2rmto.default\bProtector_extensions.sqlite" deleted

"C:\Program Files\BrowseToSave\sprotector.dll" deleted

"C:\Program Files\Optimizer Pro\OptProReminder.exe" deleted

"C:\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.dll" deleted

"C:\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe" not deleted

"C:\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.settings" not deleted

"C:\Program Files\AutocompletePro" deleted

"C:\Program Files\Softonic" deleted

"C:\Program Files\BrowseToSave" not deleted

"C:\Program Files\BabylonToolbar" deleted

"C:\Program Files\BrowserCompanion" deleted

"C:\Program Files\DealPly" deleted

"C:\Program Files\Optimizer Pro" deleted

"C:\Program Files\Yontoo" deleted

"C:\Users\Huib\AppData\Roaming\Babylon" deleted

"C:\Users\Huib\AppData\Roaming\BabylonToolbar" deleted

"C:\Users\Huib\AppData\Roaming\Optimizer Pro" deleted

"C:\Windows\System32\searchplugins" deleted

"C:\Windows\System32\Extensions" not deleted

"C:\ProgramData\Browser Manager" not deleted

"C:\ProgramData\BetterSoft" deleted

"C:\ProgramData\RightClick" deleted

"C:\ProgramData\Browse2save" deleted

"C:\ProgramData\InstallMate" deleted

"C:\ProgramData\Tarma Installer" deleted

"C:\ProgramData\Premium" deleted

"C:\ProgramData\Babylon" deleted

"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Optimizer Pro" deleted

"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Browse2save" deleted

"C:\Users\Huib\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Browser Manager" deleted

"C:\Users\Huib\AppData\Local\APN" deleted

"C:\Users\Huib\AppData\Local\SwvUpdater" deleted

"C:\Users\Huib\AppData\LocalLow\BabylonToolbar" deleted

"C:\Users\Huib\AppData\LocalLow\Softonic" deleted

"C:\Users\Huib\AppData\Local\Google\Chrome\User Data\Default\Extensions\niapdbllcanepiiimjjndipklodoedlc" deleted

"C:\ProgramData\Browser Manager\2.3.796.11" not deleted

"C:\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}" not deleted

==== System Specs ======================

Windows: Windows Vista Home Premium Edition Service Pack 1 (Build 6001)

Internet Explorer: 7.0.6001.18000

Memory (RAM): 1919 MB

CPU Info: AMD Athlon 64 X2 Dual Core Processor 4000+

CPU Speed: 1940,5 MHz

Sound Card: Luidsprekers (High Definition A |

Apparaat voor digitale uitvoer |

Display Adapters: NVIDIA GeForce 8200 | NVIDIA GeForce 8200 | RDPDD Chained DD | RDP Encoder Mirror Driver

Monitors: 1x; Algemeen PnP-beeldscherm |

Screen Resolution: 1280 X 1024 - 32 bit

Network: Network Present

Network Adapters: NVIDIA nForce 10/100/1000 Mbps Ethernet | RT73 USB Wireless LAN Card

CD / DVD Drives: 1x (I: | ) I: ATAPI DVD A DH18A1P

Ports: COM1 LPT1

Mouse: 8 Button Wheel Mouse Present

Hard Disks: C: 290,1GB

Hard Disks - Free: C: 146,8GB

Manufacturer *: American Megatrends Inc.

BIOS Info: AT/AT COMPATIBLE | 03/29/09 | 032909 - 20090329

Time Zone: West-Europa (standaardtijd)

Motherboard *: ASUSTeK Computer INC. M4N78-AM

Sun Java version: 1.6.0_29

Country: Nederland

Language: NLD

==== Files Recently Created / Modified ======================

====== C:\Windows ====

2013-01-31 14:29:27 F9331C6C22A0D26B23657F88A15D9E28 61 ----a-w- C:\Windows\wininit.ini

====== C:\Users\Huib\AppData\Local\Temp ====

====== C:\Windows\system32 =====

====== C:\Windows\system32\drivers =====

====== C:\Windows\Tasks ======

2013-01-30 17:24:17 5F0B9668D4E1CFA8BA9CBBAFF52B130C 414 ---ha-w- C:\Windows\Tasks\schedule!3036567561.job

====== C:\Windows\Temp ======

======= C:\Program Files =====

2013-01-31 20:55:08 -------- d-----w- C:\Program Files\Trend Micro

2013-01-30 17:21:04 -------- d-----w- C:\Program Files\BrowseToSave

2013-01-30 16:54:19 -------- d-----w- C:\Program Files\Adobe Download Assistant

2013-01-30 16:50:21 -------- d-----w- C:\Program Files\WinRAR

2013-01-28 13:59:27 -------- d-----w- C:\Program Files\WinNc 5

======= C: =====

====== C:\Users\Huib\AppData\Roaming ======

2013-01-30 16:54:30 -------- d-----w- C:\users\Huib\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant

2013-01-30 16:50:47 -------- d-----w- C:\users\Huib\AppData\Roaming\WinRAR

2013-01-28 14:00:59 -------- d-----w- C:\users\Huib\AppData\Roaming\WinNc

====== C:\Users\Huib ======

2013-01-30 17:34:30 -------- d-----w- C:\ProgramData\TEMP

2013-01-30 17:03:12 -------- d-----w- C:\Users\Huib\Adobe Photoshop CS6

2013-01-28 15:22:23 -------- d-----w- C:\ProgramData\WindowsSearch

====== C: exe-files ==

2013-02-01 21:15:16 2DA92DAAE595B4AF7350E0ABF5214DEB 30836576 ----a-w- C:\Program Files\Google\Update\Install\{0DB255E9-94B8-4F32-B195-7F18E485D671}\24.0.1312.57_chrome_installer.exe

2013-02-01 21:15:15 2DA92DAAE595B4AF7350E0ABF5214DEB 30836576 ----a-w- C:\Program Files\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\24.0.1312.57\24.0.1312.57_chrome_installer.exe

2013-02-01 16:14:20 51CA9A27C82F68874BBA3E2A87F6B400 670048 ----a-w- C:\Program Files\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\24.0.1312.57\24.0.1312.57_24.0.1312.56_chrome_updater.exe

2013-01-30 17:35:59 CEDE02D7AF62449A2C38C49ABECC0CD3 4995416 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\Microsoft VC 2010 Redist (x86)\vcredist_x86.exe

2013-01-30 17:35:58 FD30ACC7A696C32F661B33668E73BF7B 4485976 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\Microsoft VC 2008 Redist (x86)\vcredist_x86.exe

2013-01-30 17:35:58 CE2922F83FB4B170AFFCE0EA448B107B 2707352 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\Microsoft VC 2005 Redist (x86)\vcredist_x86.exe

2013-01-30 17:35:57 CBE0B05C11D5D523C2AF997D737C137B 5673816 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\Microsoft VC 2010 Redist (x64)\vcredist_x64.exe

2013-01-30 17:35:56 3ABB5EFE9AD4D9728406A1A90A47575F 5225304 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\Microsoft VC 2008 Redist (x64)\vcredist_x64.exe

2013-01-30 17:35:55 AC99ADDB4F8DD81182C6AA5F3226ED54 2214048 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\Set-up.exe

2013-01-30 17:35:55 56EAF4E1237C974F6984EDC93972C123 3175832 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\Microsoft VC 2005 Redist (x64)\vcredist_x64.EXE

2013-01-30 17:24:11 A8D875D352C4933627DA339B54CA2EF4 306176 ----a-w- C:\Users\Huib\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\11J7W3XD\agent_setup[1].exe

2013-01-30 17:23:56 14459D091906300C613C5E8759BE4FF4 4039584 ----a-w- C:\Windows\Temp\RegistryOptimizer.exe

2013-01-30 17:23:41 0F4942FDB365C7487D573EBC0DAA9B6F 4171296 ----a-w- C:\Users\Huib\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LRLTH21F\optimizerpro15[1].exe

2013-01-30 17:23:30 6A0F411CA91A97A709B98E114F4052D5 76344 ----a-w- C:\Users\Huib\AppData\Local\Temp\ct3272810\statisticsStub.exe

2013-01-30 17:23:30 6A0F411CA91A97A709B98E114F4052D5 76344 ----a-w- C:\Users\Huib\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5UK2P0LI\statisticsstub[1].exe

2013-01-30 17:22:27 9EAB97885595799488D678A38BBFEC99 205888 ----a-w- C:\Users\Huib\AppData\Local\Temp\ct3272810\ctbe.exe

2013-01-30 17:22:27 9EAB97885595799488D678A38BBFEC99 205888 ----a-w- C:\Users\Huib\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LRLTH21F\checktbexist[1].exe

2013-01-30 17:20:46 38F61D046E575971ED83C4F71ACCD132 1531108 ----a-w- C:\Users\Huib\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5UK2P0LI\search_defender_166[1].exe

2013-01-30 17:20:34 2A4C2A46965EBF6CBB5029813136F583 256906 ----a-w- C:\Users\Huib\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8FQGZELW\51095c3a43a4b[1].exe

2013-01-30 17:19:28 4B020D473BDDB614BF03A31ADE53B1C4 150440 ----a-w- C:\Users\Huib\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8FQGZELW\wsconduit__166[1].exe

2013-01-30 17:18:40 C946F7A63E5620F67D166341254AE24A 311736 ----a-w- C:\Users\Huib\Downloads\Abilene-Flf Font.exe

2013-01-30 16:53:51 A51D90F2F9394F5EA0A3ACAE3BD2B219 163840 ----a-w- C:\Program Files\Adobe Download Assistant\7z.exe

2013-01-30 16:53:51 3CF4395D4A66A9A937CF8ED89F2DBB49 142336 ----a-w- C:\Program Files\Adobe Download Assistant\Adobe Download Assistant.exe

2013-01-30 16:53:34 D4BA9C18EE86012ECD73C3DA99BDB166 2563424 ----a-w- C:\Users\Huib\Downloads\AdobeDownloadAssistant (1).exe

2013-01-30 16:50:21 C5318421E90DC0A94E90231AF1FE0791 123904 ----a-w- C:\Program Files\WinRAR\Uninstall.exe

2013-01-30 16:50:21 9A31F7D5248712D6725234C6B16CEC18 270336 ----a-w- C:\Program Files\WinRAR\UnRAR.exe

2013-01-30 16:50:21 9213C294BBFCAA9AA063367A1647452B 1159168 ----a-w- C:\Program Files\WinRAR\WinRAR.exe

2013-01-30 16:50:21 8BABC98395F0D8FC0968982237B1BC8F 404992 ----a-w- C:\Program Files\WinRAR\Rar.exe

2013-01-30 16:49:09 E1ED6342BAFFB7F0BE44B5EBA8F8A7F3 1517376 ----a-w- C:\Users\Huib\Downloads\wrar420.exe

2013-01-28 13:59:28 F2326FCAEBD11D23E41B69EA4843665E 13697536 ----a-w- C:\Program Files\WinNc 5\WinNc.exe

2013-01-28 13:59:27 06D7148FBB36BE681F39E1CE4F196AFE 1177453 ----a-w- C:\Program Files\WinNc 5\unins000.exe

2013-01-28 13:57:49 44FF2FA661E3868A6AC1C0ED23576F71 13538437 ----a-w- C:\Users\Huib\Downloads\setup (1).exe

=== C: other files ==

2013-01-30 17:36:00 8A8D943C793FE03B7FC5D7B7119A966C 1164448 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\resources\AdobePIM.dll

2013-01-30 17:36:00 67833490C932595C1D43E4FF6AF8032A 399800 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\resources\updaterinventory.dll

2013-01-30 17:35:27 BD6258EBA42AFA1209C917B48A315431 533048 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\SwitchBoard2.0All\Assets2_1.zip

2013-01-30 17:35:27 8537AC1F594ABAFE7CBAE8F3259053AF 1836234 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeXMPPanelsAll\Assets2_1.zip

2013-01-30 17:35:26 5644A0A288D5FAC4CCD9F0E19AB82403 5960893 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeWinSoftLinguisticsPluginAll_x64\Assets2_1.zip

2013-01-30 17:35:25 EE20E4A69E16D56FC7F25511EA22A1CB 5888993 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeWinSoftLinguisticsPluginAll\Assets2_1.zip

2013-01-30 17:35:25 E40745FDE28B7FD9DF678274390BB560 2935 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeVideoProfilesCS4_0-mul\Assets2_1.zip

2013-01-30 17:35:24 FCB66E8DAB5148DCE310442844B2194D 164341 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobePhotoshop13-Core\Assets2_1.zip

2013-01-30 17:35:24 F41B16F843839A3A312202CB05A1F9DD 450647 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeSuiteSharedConfiguration3-mul\Assets2_1.zip

2013-01-30 17:35:24 D6D0CD80A2EAC3B5325DEAA2D2A02154 4096938 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobePhotoshop13-Support\Assets2_1.zip

2013-01-30 17:35:24 ADAFCCA8605AAA4E4ADF96F485DE67D4 914018 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobePhotoshop13-Driver\Assets2_1.zip

2013-01-30 17:35:24 5D1F7A1749BC7FB0749C82991AB1C1B7 164341 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobePhotoshop13-Core_x64\Assets2_1.zip

2013-01-30 17:35:24 320A3CCB50F56C77B9E15E6444A51AF1 1635908 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeTypeSupport11_x64-mul\Assets2_1.zip

2013-01-30 17:35:24 0F3466299E7666B36E86263E7BF65855 1635908 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeTypeSupport11-mul\Assets2_1.zip

2013-01-30 17:35:14 C2416AEDA13E24A5EBFC26342ED8737B 68084999 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobePDFL10.9_x64-mul\Assets2_1.zip

2013-01-30 17:35:07 6B71AAFD5290D3FB4AE7B4B151AA9DC8 68084999 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobePDFL10.9-mul\Assets2_1.zip

2013-01-30 17:35:05 13E750447FFE8EB5C9F5672A2B71869B 31503010 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeLinguistics_4_0_All_x64\Assets2_1.zip

2013-01-30 17:35:01 BE45C99A1F71A3C1E6F973645EB5B092 31370709 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeLinguistics_4_0_All\Assets2_1.zip

2013-01-30 17:34:58 4312FF70625B9B927EDD67994398E33C 54262007 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeHunspellPlugin_4_0_All_x64\Assets2_1.zip

2013-01-30 17:34:50 5FB482798CC2BB92D3B7EA29C06A1DC2 54202750 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeHunspellPlugin_4_0_All\Assets2_1.zip

2013-01-30 17:34:33 76A3B70A5AEE1AC5ACDE8B511C042DC1 116652625 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeFontsRequired_x64-mul\Assets2_1.zip

2013-01-30 17:34:18 5710C01AA5AD56FA89DA34FFEB5B4C27 116652625 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeFontsRequired-mul\Assets2_1.zip

2013-01-30 17:34:06 B0CAC517D053DC9EE8473B15B4901E7A 104336188 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeFontsRecommended_x64-mul\Assets2_1.zip

2013-01-30 17:33:54 8368BB261806B7220A9FF0ECA84593F9 732430 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeExtensionManager6.0All\Assets2_1.zip

2013-01-30 17:33:54 6C6D71838FE21B9604243B2E6EA9E6BF 104336188 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeFontsRecommended-mul\Assets2_1.zip

2013-01-30 17:33:53 B77A3938669C6EF32BB244AFF3B5C735 11514225 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeExtendScriptToolkit3.8.0-mul\Assets2_1.zip

2013-01-30 17:33:53 906E7E05ECD5072F10886F8528D6DEAD 2491352 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeDynamiclinkSupport6All\Assets2_1.zip

2013-01-30 17:33:47 460812C895346A04E0D1BFA0BD90AC8D 42949460 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeDynamicLinkMediaServer1All\Assets2_1.zip

2013-01-30 17:33:46 BF5347C700698F6FCF6493762D9BEF00 796503 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeColorPhotoshop4_0-mul\Assets2_1.zip

2013-01-30 17:33:46 2E2864850DB9CE8833C89346B4264D27 4735902 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeCSXSInfrastructure3-mul\Assets2_1.zip

2013-01-30 17:33:46 19AFDCB94AADBC3DB8DD3344EAB54220 1180581 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeCSXSExtensions3-mul\Assets2_1.zip

2013-01-30 17:33:45 7E28D07ECBDC139CDC638D6B1EEFFA88 2820833 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeColorJA_Recommended4_0-mul\Assets2_1.zip

2013-01-30 17:33:45 5EF96BF203E497BEE79C9967A1CB0347 2390610 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeColorNA_Recommended4_0-mul\Assets2_1.zip

2013-01-30 17:33:45 1D40E749D3F50473A16321D186B1C2D6 2390610 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeColorNA_ExtraSettings4_0-mul\Assets2_1.zip

2013-01-30 17:33:44 DCB9153FD8F17B8D1334511CDD7A9B6D 2024004 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeColorEU_ExtraSettings4_0-mul\Assets2_1.zip

2013-01-30 17:33:44 B0E72CCE55F1EE320A66B61175CC5AF6 2024004 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeColorEU_Recommended4_0-mul\Assets2_1.zip

2013-01-30 17:33:44 3B2F5CAD86A7F542037A01B431278736 2820833 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeColorJA_ExtraSettings4_0-mul\Assets2_1.zip

2013-01-30 17:33:44 230C0226379FDAECD711B44974A05D65 7963 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeColorCommonSetRGB4_0-mul\Assets2_1.zip

2013-01-30 17:33:43 4549659429D381A2BB1DB4B45450BC59 11905041 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeColorCommonSetCMYK4_0-mul\Assets2_1.zip

2013-01-30 17:33:42 59EB6A9088D0D0A14692EC7FA01AA24D 2725923 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeCMaps4-mul\Assets2_1.zip

2013-01-30 17:33:42 2249A352342C48A6871E0A16B7C1C0B7 2725923 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeCMaps4_x64-mul\Assets2_1.zip

2013-01-30 17:33:42 0F73BA86C8BA90E2AC41344F7FCDA8F1 2101761 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeBridge5-mul-x64\Assets2_1.zip

2013-01-30 17:33:41 E5ADEAFAB3498C120861FFF946133C6E 777958 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobePhotoshop13-sv_SE_x64\Assets1_1.zip

2013-01-30 17:33:41 E5ADEAFAB3498C120861FFF946133C6E 777958 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobePhotoshop13-sv_SE\Assets1_1.zip

2013-01-30 17:33:41 B1249065A41BD5F9BF7B85996A45B7E4 797614 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobePhotoshop13-pt_BR_x64\Assets1_1.zip

2013-01-30 17:33:41 B1249065A41BD5F9BF7B85996A45B7E4 797614 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobePhotoshop13-pt_BR\Assets1_1.zip

2013-01-30 17:33:41 ACD61DD6BAA4679C75DB54998D4CCC05 776250 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobePhotoshop13-nb_NO_x64\Assets1_1.zip

2013-01-30 17:33:41 ACD1A7A597F64519503500858F76D0BD 15605 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\SwitchBoard2.0All\Assets1_1.zip

2013-01-30 17:33:41 30FE5B038A81FC89A95FD839F57993CB 790622 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobePhotoshop13-nl_NL_x64\Assets1_1.zip

2013-01-30 17:33:41 30FE5B038A81FC89A95FD839F57993CB 790622 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobePhotoshop13-nl_NL\Assets1_1.zip

2013-01-30 17:33:41 10E84DFD829C02A461E4EB065CC8C22C 1989226 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeBridge5-mul\Assets2_1.zip

2013-01-30 17:33:40 B7545A96A1FB3DCF9D5755F124ACFCB8 777224 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobePhotoshop13-da_DK_x64\Assets1_1.zip

2013-01-30 17:33:40 B7545A96A1FB3DCF9D5755F124ACFCB8 777224 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobePhotoshop13-da_DK\Assets1_1.zip

2013-01-30 17:33:40 ACD61DD6BAA4679C75DB54998D4CCC05 776250 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobePhotoshop13-nb_NO\Assets1_1.zip

2013-01-30 17:33:40 A3EDBCDD5149B1639831D5E38F5400A2 792413 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobePhotoshop13-es_ES_x64\Assets1_1.zip

2013-01-30 17:33:40 A3EDBCDD5149B1639831D5E38F5400A2 792413 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobePhotoshop13-es_ES\Assets1_1.zip

2013-01-30 17:33:40 7AF3240DAF0BCC9B72614D0A435CE212 806371 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobePhotoshop13-de_DE_x64\Assets1_1.zip

2013-01-30 17:33:40 7AF3240DAF0BCC9B72614D0A435CE212 806371 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobePhotoshop13-de_DE\Assets1_1.zip

2013-01-30 17:33:40 7602CD45AD06DC831435A1AFE3198BE1 792790 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobePhotoshop13-es_MX_x64\Assets1_1.zip

2013-01-30 17:33:40 7602CD45AD06DC831435A1AFE3198BE1 792790 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobePhotoshop13-es_MX\Assets1_1.zip

2013-01-30 17:33:40 694D14C02C04DE9A31DA0A5EEFF81A79 30420 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobePhotoshop13-Driver\Assets1_1.zip

2013-01-30 17:33:40 497AD563CD8B301FB830F104CC7D4575 795489 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobePhotoshop13-fi_FI_x64\Assets1_1.zip

2013-01-30 17:33:40 497AD563CD8B301FB830F104CC7D4575 795489 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobePhotoshop13-fi_FI\Assets1_1.zip

2013-01-30 17:33:40 4358B09F377301CFE94B3C1B05D88851 803264 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobePhotoshop13-fr_FR_x64\Assets1_1.zip

2013-01-30 17:33:40 4358B09F377301CFE94B3C1B05D88851 803264 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobePhotoshop13-fr_FR\Assets1_1.zip

2013-01-30 17:33:40 40D3C2BC875279BB7FE8280202E70263 785307 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobePhotoshop13-it_IT_x64\Assets1_1.zip

2013-01-30 17:33:40 40D3C2BC875279BB7FE8280202E70263 785307 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobePhotoshop13-it_IT\Assets1_1.zip

2013-01-30 17:33:40 1100B8542B768E03291774FD9C5F2279 803877 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobePhotoshop13-fr_CA_x64\Assets1_1.zip

2013-01-30 17:33:40 1100B8542B768E03291774FD9C5F2279 803877 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobePhotoshop13-fr_CA\Assets1_1.zip

2013-01-30 17:33:14 86D39E1C76D3CDDC0B73BE9D58E5F25A 251139014 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobePhotoshop13-Core_x64\Assets1_1.zip

2013-01-30 17:32:50 A04070F8F171C3772D7DF99F3BB451EA 404 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeLinguistics_4_0_All\Assets1_1.zip

2013-01-30 17:32:50 5D5F9418E8460D6C85EA6AA622288AC6 224545931 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobePhotoshop13-Core\Assets1_1.zip

2013-01-30 17:32:50 07E235E070E1246FD6195C21F14DCC5F 2311886 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeMiniBridge2-mul\Assets1_1.zip

2013-01-30 17:32:49 A729B02201E16B214D91DE91E6A27035 8159571 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeExtensionManager6.0All\Assets1_1.zip

2013-01-30 17:32:49 65F7A2AF3B8A26B454DE841B9AB01142 2772 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeExtendScriptToolkit3.8.0-mul\Assets1_1.zip

2013-01-30 17:32:40 0250FA0CC56F979A2726378007410FE1 96461169 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeCameraRawProfile7.0All\Assets1_1.zip

2013-01-30 17:32:37 52A6C68603E5D8B703C7BA6B07E5A9B7 17981682 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeCameraRaw7.0All-x64\Assets1_1.zip

2013-01-30 17:32:35 697E7EBEDCBAD66CF66B5B0383E29235 17208900 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeCameraRaw7.0All\Assets1_1.zip

2013-01-30 17:32:20 3793FEADF807195443822BCD8978DF18 126414840 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeBridge5-mul-x64\Assets1_1.zip

2013-01-30 17:32:09 B487A9A88FE748000176026C64E9449E 92033284 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeBridge5-mul\Assets1_1.zip

2013-01-30 17:32:08 0E328D12EF6BC56F112C4FFC232DCC3C 14502881 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeAPE3.3_x64-mul\Assets1_1.zip

2013-01-30 17:32:06 CBCDB1D0C24E097D95DE4513366E9245 13250295 ----a-w- C:\Users\Huib\Adobe Photoshop CS6\Adobe CS6\payloads\AdobeAPE3.3-mul\Assets1_1.zip

2013-01-30 17:24:33 F53193E7D60D26D824DDA39886275064 22361 ----a-w- C:\Users\Huib\Desktop\Abilene-Flf.zip

2013-01-30 17:24:33 F53193E7D60D26D824DDA39886275064 22361 ----a-w- C:\Users\Huib\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\11J7W3XD\Abilene-Flf[1].zip

2013-01-30 17:09:49 7923FA8B0BC4385FB4D5D54B3A73A06A 467651 ----a-w- C:\Users\Huib\Downloads\orange_juice.zip

2013-01-30 16:53:51 04AD4B80880B32C94BE8D0886482C774 914432 ----a-w- C:\Program Files\Adobe Download Assistant\7z.dll

2013-01-30 16:50:21 DE02C4D04088B69E64ECC30A3D9E22E5 77312 ----a-w- C:\Program Files\WinRAR\Formats\UNACEV2.DLL

2013-01-30 16:50:21 B2764E34DD2D5DAB113C2AF3F7315FA9 167936 ----a-w- C:\Program Files\WinRAR\RarExt.dll

2013-01-30 16:50:21 1CF011C4C0AEB50A46CE6D04EC47ADF2 175616 ----a-w- C:\Program Files\WinRAR\Formats\7zxa.dll

2013-01-30 16:50:21 1850DAAA7E7A2E543C4A299B58AC9162 196096 ----a-w- C:\Program Files\WinRAR\RarExt64.dll

2013-01-28 13:59:54 B19932A4188709B969367F144ADEADDA 21504 ----a-w- C:\Program Files\WinNc 5\wnaspi32.dll

2013-01-28 13:59:51 A31D2213BF9C2745283F99AAB617BA57 228352 ----a-w- C:\Program Files\WinNc 5\Vorbis.dll

2013-01-28 13:59:51 6584A511BAA80B8B58A5E1900D0AAD34 175616 ----a-w- C:\Program Files\WinNc 5\swscale-0.dll

2013-01-28 13:59:51 0087F6F680BEFDA997B357BD55BE991C 165376 ----a-w- C:\Program Files\WinNc 5\unrar.dll

2013-01-28 13:59:49 97CC769674502CB1F912603CEB5F830A 144896 ----a-w- C:\Program Files\WinNc 5\MpgLib.DLL

2013-01-28 13:59:49 362C0F67CE58B7E58F5D86EE9FF23268 22528 ----a-w- C:\Program Files\WinNc 5\myutil.dll

2013-01-28 13:59:47 9339058ECDDF4D671D28129E922EBEF4 491520 ----a-w- C:\Program Files\WinNc 5\lame_enc.dll

2013-01-28 13:59:45 4FC074C3C6CF290BB2C11E5C31C97B27 352256 ----a-w- C:\Program Files\WinNc 5\ijl15.dll

2013-01-28 13:59:44 EE9C297D21029442E643807C32275C3F 270336 ----a-w- C:\Program Files\WinNc 5\DelZip179.dll

2013-01-28 13:59:44 E2CB9BF0CC04BB2E94EB625C7E3156A4 52736 ----a-w- C:\Program Files\WinNc 5\DiscId.dll

2013-01-28 13:59:43 E9010CAD5E0FA2E5179CB373C5D37C56 59392 ----a-w- C:\Program Files\WinNc 5\avutil-49.dll

2013-01-28 13:59:43 3D4FD7A30386FD0463DA16E78C832F66 155648 ----a-w- C:\Program Files\WinNc 5\CDRip3.dll

2013-01-28 13:59:42 E013FF1ED8BB6E5D6AB2C4A1354FE797 738816 ----a-w- C:\Program Files\WinNc 5\avformat-52.dll

2013-01-28 13:59:41 EF311C6D47DB3ED20C9BF49A5B58B766 54784 ----a-w- C:\Program Files\WinNc 5\avfilter-0.dll

2013-01-28 13:59:40 40B8058C02074ECC71B90FA061D8AB7D 10752 ----a-w- C:\Program Files\WinNc 5\avdevice-52.dll

2013-01-28 13:59:36 13153DEB84DE7C02B9D9AAD56E03204D 8179712 ----a-w- C:\Program Files\WinNc 5\avcodec-52.dll

2013-01-28 13:59:35 20B2C339361E82A6707533BAC481FCE4 69632 ----a-w- C:\Program Files\WinNc 5\7-zip.dll

2013-01-28 13:59:34 CA41D56630191E61565A343C59695CA1 726016 ----a-w- C:\Program Files\WinNc 5\7z.dll

2013-01-28 13:42:39 1755023407FDE00D9916505A557569D5 113904 ----a-w- C:\Program Files\PC Veilig\FSAUA\content\aquawin32\1359699236\bdcore.dll

2013-01-28 13:29:09 3D174A437CF47851517C4F7C0B90F910 3555032 ----a-w- C:\Program Files\PC Veilig\FSAUA\content\hydrawin\1359740161\fsecr32.dll

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]

"WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter"

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /detectMem"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]

"WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter"

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /detectMem"

[HKEY_USERS\S-1-5-21-3266515138-1875802608-3271890376-1002\Software\Microsoft\Windows\CurrentVersion\Run]

"ehTray.exe"="C:\Windows\ehome\ehTray.exe"

"Spotify Web Helper"="C:\Users\Huib\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"

"ISUSPM"="C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe -scheduler"

"Facebook Update"="C:\Users\Huib\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver"

"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe"

"Optimizer Pro"="C:\Program Files\Optimizer Pro\OptProLauncher.exe"

[HKEY_USERS\S-1-5-21-3266515138-1875802608-3271890376-1004\Software\Microsoft\Windows\CurrentVersion\Run]

"WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter"

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /detectMem"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"F-Secure Manager"="C:\Program Files\PC Veilig\Common\FSM32.EXE /splash"

"F-Secure TNB"="C:\Program Files\PC Veilig\FSGUI\TNBUtil.exe /CHECKALL /WAITFORSW"

"Adobe ARM"="C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

"APSDaemon"="C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

"HTC Sync Loader"="C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe -startup"

"Windows Defender"="%ProgramFiles%\Windows Defender\MSASCui.exe -hide"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"ehTray.exe"="C:\Windows\ehome\ehTray.exe"

"Spotify Web Helper"="C:\Users\Huib\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"

"ISUSPM"="C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe -scheduler"

"Facebook Update"="C:\Users\Huib\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver"

"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe"

"Optimizer Pro"="C:\Program Files\Optimizer Pro\OptProLauncher.exe"

==== Startup Registry Disabled ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Browser companion helper]