Probleem bij het opstarten van Windows 7

kape · 22 maart 2013

Download AdwCleaner by Xplode naar je bureaublad.

Sluit alle openstaande vensters.

Vista en Windows 7 gebruikers: Rechtsklik op AdwCleaner en selecteer als Administrator uitvoeren...
Voor XP: Gewoon dubbelklikken op AdwCleaner.
Klik vervolgens op Verwijderen.
Klik bij AdwCleaner – Informatie op OK
Klik bij AdwCleaner – Herstarten Noodzakelijk op OK

Dat tijdens de actie de snelkoppelingen verdwijnen, is normaal. Nadat de PC opnieuw is opgestart, opent een logfile. Post de inhoud van dit log in je volgende bericht.

rsca1973 · 27 maart 2013

Hier het logje:

# AdwCleaner v2.115 - Verslag gemaakt op 27/03/2013 om 17:33:15

# Geactualiseerd op 17/03/2013 door Xplode

# Besturingssysteem : Windows 7 Home Premium Service Pack 1 (64 bits)

# Gebruiker : User - USER-PC

# Opstarten Modus : Normale modus

# Gelanceerd vanaf : H:\adwcleaner.exe

# Optie [Verwijderen]

***** [Diensten] *****

Gestopt & Verwijdert : VideoDownloadConverter_4zService

***** [Files / Mappen] *****

File Verwijdert : C:\END

Map Verwijdert : C:\Program Files (x86)\AVG Secure Search

Map Verwijdert : C:\Program Files (x86)\search results toolbar

Map Verwijdert : C:\Program Files (x86)\Searchqu Toolbar

Map Verwijdert : C:\Program Files (x86)\VideoDownloadConverter_4z

Map Verwijdert : C:\Program Files (x86)\Yontoo

Map Verwijdert : C:\ProgramData\APN

Map Verwijdert : C:\ProgramData\Ask

Map Verwijdert : C:\ProgramData\AVG Secure Search

Map Verwijdert : C:\ProgramData\Babylon

Map Verwijdert : C:\ProgramData\blekko toolbars

Map Verwijdert : C:\ProgramData\boost_interprocess

Map Verwijdert : C:\ProgramData\Partner

Map Verwijdert : C:\ProgramData\Tarma Installer

Map Verwijdert : C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\licjnkifamhpbaefhdpacpmihicfbomb

Verwijdert bij het opstarten : C:\Program Files (x86)\Common Files\AVG Secure Search

***** [Register] *****

Sleutel Verwijdert : HKCU\Software\APN PIP

Sleutel Verwijdert : HKCU\Software\AppDataLow\Software\ConduitSearchScopes

Sleutel Verwijdert : HKCU\Software\AppDataLow\Software\Crossrider

Sleutel Verwijdert : HKCU\Software\AppDataLow\Software\PriceGong

Sleutel Verwijdert : HKCU\Software\AppDataLow\Software\PricePeep

Sleutel Verwijdert : HKCU\Software\AppDataLow\Software\SmartBar

Sleutel Verwijdert : HKCU\Software\AVG Secure Search

Sleutel Verwijdert : HKCU\Software\BrowserMngr

Sleutel Verwijdert : HKCU\Software\Conduit

Sleutel Verwijdert : HKCU\Software\ilivid

Sleutel Verwijdert : HKCU\Software\IM

Sleutel Verwijdert : HKCU\Software\ImInstaller

Sleutel Verwijdert : HKCU\Software\InstallCore

Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{CCB69577-088B-4004-9ED8-FF5BCC83A039}

Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}

Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}

Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8736C681-37A0-40C6-A0F0-4C083409151C}

Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}

Sleutel Verwijdert : HKCU\Software\PIP

Sleutel Verwijdert : HKCU\Software\Savings Vault

Sleutel Verwijdert : HKCU\Software\Softonic

Sleutel Verwijdert : HKCU\Software\857d68fe53ee448

Sleutel Verwijdert : HKLM\Software\AVG Secure Search

Sleutel Verwijdert : HKLM\Software\AVG Security Toolbar

Sleutel Verwijdert : HKLM\Software\Babylon

Sleutel Verwijdert : HKLM\Software\BrowserMngr

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{1005247F-A178-490A-8DC3-6BAF09EA427B}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{38A066B0-DD5F-4226-AC4F-6A27C1BFB892}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\escort.DLL

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\esrv.EXE

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\PricePeep.DLL

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\YontooIEClient.DLL

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Applications\ilividsetup.exe

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\escort.escortIEPane

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\escort.escortIEPane.1

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Prod.cap

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Toolbar.CT3284024

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{03119103-0854-469D-807A-171568457991}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{2D3826A1-F3E8-45D6-94B5-C26D8EC0073B}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{3EE17DD1-E28B-4AED-A3B2-9C29CB2C19D6}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{886F93AD-3CBB-4424-8442-A7340243540F}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{AA289DBC-59B6-40A5-AC7D-C90DF850289C}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{CA723163-6FAD-43D4-8B93-0D8C52BD9974}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{F1F328EB-F5A5-432B-A54C-05F3EF5B0BD8}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{FB0E8A09-F08C-44CF-9E15-97ADAC016248}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{FE8DBB09-C3D3-4477-80CB-D38914B94BB8}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.DynamicBarButton

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.DynamicBarButton.1

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.FeedManager

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.FeedManager.1

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLMenu

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLMenu.1

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLPanel

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLPanel.1

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.MultipleButton

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.MultipleButton.1

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.PseudoTransparentPlugin

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.PseudoTransparentPlugin.1

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.Radio

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.Radio.1

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.RadioSettings

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.RadioSettings.1

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ScriptButton

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ScriptButton.1

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.SkinLauncher

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.SkinLauncher.1

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ThirdPartyInstaller

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ThirdPartyInstaller.1

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.UrlAlertButton

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.UrlAlertButton.1

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.XMLSessionPlugin

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.XMLSessionPlugin.1

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1

Sleutel Verwijdert : HKLM\Software\Conduit

Sleutel Verwijdert : HKLM\Software\DataMngr

Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASAPI32

Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASMANCS

Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Tracing\blekko_1311013_RASAPI32

Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Tracing\blekko_1311013_RASMANCS

Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Tracing\FunmoodsLatest_RASAPI32

Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Tracing\FunmoodsLatest_RASMANCS

Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Tracing\iLivid_RASAPI32

Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Tracing\iLivid_RASMANCS

Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetup_RASAPI32

Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetup_RASMANCS

Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASAPI32

Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASMANCS

Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32

Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS

Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASAPI32

Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASMANCS

Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1F6F39C1-00A8-4752-A94C-D0EA92D978B6}

Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5354D921-3F52-47C5-938D-77A2FB6DEFE7}

Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{71144427-1368-4D18-8DC9-2AE3CC4C4F83}

Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{99E1F6FD-2E94-4CF6-8344-1BA63CD3BD9B}

Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}

Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{CCB69577-088B-4004-9ED8-FF5BCC83A039}

Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}

Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{ED345812-2722-4DCA-9976-D01832DB44EE}

Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}

Sleutel Verwijdert : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin

Sleutel Verwijdert : HKLM\Software\PIP

Sleutel Verwijdert : HKLM\Software\SearchquMediabarTb

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{13119113-0854-469D-807A-171568457991}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{1F6F39C1-00A8-4752-A94C-D0EA92D978B6}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2A1260C1-2964-453F-B0BA-FA429472EB5F}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{33119133-0854-469D-807A-171568457991}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{363D5C92-10DC-4287-93E5-1832EECC48EC}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3B41BE90-F731-4137-AFF3-2CA951E7F0D9}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4128C64D-F0DD-4811-9405-D22294E8151F}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{5354D921-3F52-47C5-938D-77A2FB6DEFE7}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{66292684-B2C2-4C7C-B3D2-BF446E30744C}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{69407823-3494-4400-8D49-612549E8F4EE}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{6BFF4BCB-7A73-45A7-AC4C-389A34E1D1EF}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{71144427-1368-4D18-8DC9-2AE3CC4C4F83}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{8FCA5302-6D6D-4645-BF99-D43CF76CE474}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{99E1F6FD-2E94-4CF6-8344-1BA63CD3BD9B}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DD385519-22E7-4BE2-8A8D-35C66DF4858E}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{ED345812-2722-4DCA-9976-D01832DB44EE}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{17B10E59-09E1-4C39-A738-6774D7AB7778}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1AD2049E-E483-4425-8555-8E0775ACB631}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{23119123-0854-469D-807A-171568457991}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2D73F2D0-2FAB-458E-977D-2F9050E0ED60}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{3E9469AF-E866-4476-B767-810630F1F6E7}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{47700C35-9E3E-4DAD-934C-0CE28A87237C}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{716E443D-7CAA-44F1-866B-F45D00E712CC}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{72063D77-7590-4DA9-A7F8-F5ECAF3632C4}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7FC87AC5-FA93-476E-A32C-A941229DED0B}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\niapdbllcanepiiimjjndipklodoedlc

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ilivid

Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\PricePeep

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{17B10E59-09E1-4C39-A738-6774D7AB7778}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{1AD2049E-E483-4425-8555-8E0775ACB631}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{23119123-0854-469D-807A-171568457991}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{2D73F2D0-2FAB-458E-977D-2F9050E0ED60}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{3E9469AF-E866-4476-B767-810630F1F6E7}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{47700C35-9E3E-4DAD-934C-0CE28A87237C}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{716E443D-7CAA-44F1-866B-F45D00E712CC}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{72063D77-7590-4DA9-A7F8-F5ECAF3632C4}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{7FC87AC5-FA93-476E-A32C-A941229DED0B}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}

Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}

Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}

Waarde Verwijdert : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D7E97865-918F-41E4-9CD0-25AB1C574CE8}]

***** [browsers] *****

-\\ Internet Explorer v9.0.8112.16470

Vervangen : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://start.funmoods.com/?f=1&a=iron2&chnl=iron2&cd=2XzuyEtN2Y1L1QzuyC0CyCtByC0DyD0D0E0BtAtD0AtBzzzytN0D0Tzu0CtByEzytN1L2XzutBtFtCtFtCtFtAtCtB&cr=415855436 --> hxxp://www.google.com

-\\ Google Chrome v25.0.1364.172

*************************

AdwCleaner[s1].txt - [18131 octets] - [27/03/2013 17:33:15]

########## EOF - C:\AdwCleaner[s1].txt - [18192 octets] ##########

kape · 27 maart 2013

Oeps ... behoorlijke hoop rotzooi opgeruimd door AdwCleaner. Hoe is de situatie van de PC nu ?

rsca1973 · 29 maart 2013

De PC start in ieder geval vlugger op, dat is duidelijk merkbaar.

Maar de melding bij het opstarten krijg ik nog steeds.

kape · 29 maart 2013

Download zoek.exe naar het bureaublad.

Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe
(hier of hier) kan je lezen hoe je dat doet.
Dubbelklik op Zoek.exe om de tool te starten.
Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
Kopieer nu onderstaande code en plak die in het grote invulvenster:
Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkwaardig probleem.

 
startupall; 
filesrcm;

Klik op de knop "Options" en vink nu de onderstaande opties aan.
- Startup Information
- HijackThis Log
- Firefox Look
- Chrome Look
- Firefox Defaults
- Reset Chrome
- Empty Temp Folders
- Shortcut Fix
- IE Defaults
[*] Klik daarna op de knop "Run script".

[*] Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).

[*] Mocht na de herstart geen logje verschijnen, start zoek.exe dan opnieuw, de log verschijnt dan alsnog.

[*] Post nu de inhoud van het geopende logje in het volgende bericht.

rsca1973 · 1 april 2013

Zoek.exe Version 4.0.0.2 Updated 18-03-2013

Tool run by User on ma 01-04-2013 at 15:48:25,87.

Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64

Running in: Normal Mode No Internet Access Detected

==== FireFox Fix ======================

==== Files Recently Created / Modified ======================

====== C:\Windows ====

2013-03-27 16:33:24 CEBB5A5A9638E71791AD3D84729938B2 121 ----a-w- C:\Windows\DeleteOnReboot.bat

2013-03-22 16:42:23 F042EE4C8D66248D9B86DCF52ABAE416 256000 ----a-w- C:\Windows\PEV.exe

2013-03-22 16:42:23 9E05A9C264C8A908A8E79450FCBFF047 80412 ----a-w- C:\Windows\grep.exe

2013-03-22 16:42:23 5E832F4FAF5F481F2EAF3B3A48F603B8 68096 ----a-w- C:\Windows\zip.exe

2013-03-22 16:42:23 0297C72529807322B152F517FDB0A9FC 406528 ----a-w- C:\Windows\SWSC.exe

2013-03-22 16:42:23 0277C027A26428DB64EF4F64F52BB4FD 208896 ----a-w- C:\Windows\MBR.exe

2013-03-20 17:51:14 F007C4273BA24B52A56387E899311DB7 212480 ----a-w- C:\Windows\pcdlib32.dll

2013-03-20 17:51:14 1B2C7EFB196140F81412A308E7F507FA 21 ----a-w- C:\Windows\PS_setup.ini

2013-03-20 17:34:12 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Windows\homeDVD-Film4.INI

2013-03-20 17:29:57 99979A5454803900490180216A64CDD2 89 ----a-w- C:\Windows\magix.ini

2013-03-20 17:29:54 B2B6D555C8092A3AB7148032FC58AC27 1078 ----a-w- C:\Windows\mgxoschk.ini

====== C:\Users\User\AppData\Local\Temp ====

====== C:\Windows\SysWOW64 =====

2013-03-20 17:33:33 BA674E08FD014AA1289BF2AEEA4962A6 44544 ----a-w- C:\Windows\SysWOW64\msxml4a.dll

2013-03-20 17:32:25 FBDDDDA5D014E013255B1E2EB40F94B7 1581056 ----a-w- C:\Windows\SysWOW64\mplvw7.dll

2013-03-20 17:32:25 D7D21877A4AF9EFB296AD150D6B6FF66 1552384 ----a-w- C:\Windows\SysWOW64\mplvm6.dll

2013-03-20 17:32:25 D41CD97D3A7B3DAF632C9335710162A0 32768 ----a-w- C:\Windows\SysWOW64\DLLISO32.dll

2013-03-20 17:32:25 D137E90AE3ABAB5469BD0426C94B7A45 94208 ----a-w- C:\Windows\SysWOW64\lmpgvd.ax

2013-03-20 17:32:25 D0711FAB7B9ACC12DF5DBD5518AA8C0A 1650688 ----a-w- C:\Windows\SysWOW64\mplva6.dll

2013-03-20 17:32:25 BE5E9E3646D1EC21B9CD75895FE90B36 65536 ----a-w- C:\Windows\SysWOW64\DLLPTL32.dll

2013-03-20 17:32:25 BA44198C3C8C80D512A05A2E4D671F1A 77824 ----a-w- C:\Windows\SysWOW64\mplaw7.dll

2013-03-20 17:32:25 B542E1BBB193304986A2782E96919D3C 14182 ----a-w- C:\Windows\SysWOW64\DLLAV32.lib

2013-03-20 17:32:25 B4455EF6F773C790ECBAAD93F719C1FE 53248 ----a-w- C:\Windows\SysWOW64\DLLPRJ32.dll

2013-03-20 17:32:25 B2BCA1AAACFD7C7656F58ECF5C6569AC 57344 ----a-w- C:\Windows\SysWOW64\DLLTPO32.dll

2013-03-20 17:32:25 AB024EFED92D5A91DDCC9577FD5A3A9C 24576 ----a-w- C:\Windows\SysWOW64\TTIC32.dll

2013-03-20 17:32:25 8EF0C1253D47A158D3023F1292A5E293 40960 ----a-w- C:\Windows\SysWOW64\DLLRD32.dll

2013-03-20 17:32:25 82D1CAC671A80EB542B4428F072D7548 24576 ----a-w- C:\Windows\SysWOW64\DLLIX.dll

2013-03-20 17:32:25 7374D62E1194577F66A2D3E5933E8B0C 1122304 ----a-w- C:\Windows\SysWOW64\mplvpx.dll

2013-03-20 17:32:25 6BA06C518BC53E6EB1DA8A29C80AD008 106496 ----a-w- C:\Windows\SysWOW64\lmpgspl.ax

2013-03-20 17:32:25 69C3A42D62622DC14200D2F0531B7171 32768 ----a-w- C:\Windows\SysWOW64\DLLMSC32.dll

2013-03-20 17:32:25 5DBC00D36E9AEF825995251EC2E2A3C9 65536 ----a-w- C:\Windows\SysWOW64\mplam6.dll

2013-03-20 17:32:25 494F4E4DBC41C271716D317C3AE169F4 77824 ----a-w- C:\Windows\SysWOW64\mplaa6.dll

2013-03-20 17:32:25 454E2638189BEDC053AA39E702074CDF 46592 ----a-w- C:\Windows\SysWOW64\lmpgad.ax

2013-03-20 17:32:25 1DA32728F808D41F380193B6B21B14C2 24576 ----a-w- C:\Windows\SysWOW64\TTI32.dll

2013-03-20 17:32:25 1903B46D93ED6E1ED5A41954FA21870F 45056 ----a-w- C:\Windows\SysWOW64\DLLIMG32.dll

2013-03-20 17:32:25 143E8397FADA79F10389711B08A5BA43 19968 ----a-w- C:\Windows\SysWOW64\cpuinf32.dll

2013-03-20 17:32:25 0FED43839C4F350699E6480309BDB47D 65536 ----a-w- C:\Windows\SysWOW64\mplapx.dll

2013-03-20 17:32:24 9B108B6A630027763CD9EB28AB06992B 32768 ----a-w- C:\Windows\SysWOW64\DLLDIR32.dll

2013-03-20 17:32:24 435EBFA51632D4ACC7368F751597A86C 61440 ----a-w- C:\Windows\SysWOW64\DLLCDF32.dll

2013-03-20 17:32:24 3CF5D6F462D385BF3A26BA60A0459F67 114688 ----a-w- C:\Windows\SysWOW64\DLLCDA32.dll

2013-03-20 17:30:58 BC015FF7C2A900C1A3CD8DFD9FE968E6 1089536 ----a-w- C:\Windows\SysWOW64\ROBOEX32.DLL

2013-03-20 17:30:58 0ED2ACBFE9976D0719538F62C61A3746 85504 ----a-w- C:\Windows\SysWOW64\HtmlWH.dll

2013-03-20 17:30:58 08040E0BBF8CE1E9CFA7DC99AFFEBB7F 49152 ----a-w- C:\Windows\SysWOW64\INETWH32.dll

2013-03-20 17:29:54 99730BBEBCDF0DD4BA65309AB5D79178 184320 ----a-w- C:\Windows\SysWOW64\mgxoschk.dll

====== C:\Windows\SysWOW64\drivers =====

====== C:\Windows\Sysnative =====

2013-03-18 14:54:16 77163DFDA8C591CFB8DEE670C4D23428 131072 ----a-w- C:\Windows\Sysnative\Ikeext.etl

====== C:\Windows\Sysnative\drivers =====

2013-03-04 11:19:52 B16B626996C74B564005BA855C5DEE90 57856 ----a-w- C:\Windows\Sysnative\drivers\fssfltr.sys

====== C:\Windows\Tasks ======

2013-03-22 17:03:11 A0CF9D8F7DD3EE74FE4F93CB9E00B4C7 270 ---ha-w- C:\Windows\Tasks\User_Feed_Synchronization-{6F772914-F766-4FB0-9F91-4CFC24EEC0DB}.job

====== C:\Windows\Temp ======

======= C:\Program Files =====

2013-03-13 13:55:50 -------- d-----w- C:\Program Files\Microsoft Silverlight

======= C:\Program Files (x86) =====

2013-03-20 17:51:14 -------- d-----w- C:\Program Files (x86)\ArcSoft

2013-03-20 12:53:52 -------- d-----w- C:\Program Files (x86)\coverXP

2013-03-15 15:47:58 -------- d-----w- C:\Program Files (x86)\exPressit S.E. 2.1

2013-03-15 14:56:51 -------- d-----w- C:\Program Files (x86)\NCH Software

2013-03-13 13:55:50 -------- d-----w- C:\Program Files (x86)\Microsoft Silverlight

2013-03-11 15:20:29 -------- d-----w- C:\Program Files (x86)\Microsoft Picture It! 7

2013-03-11 15:16:57 -------- d-----w- C:\Program Files (x86)\Microsoft Works

2013-03-11 15:15:28 -------- d-----w- C:\Program Files (x86)\Microsoft Works Suite 2003

2013-03-11 15:12:38 -------- d-----w- C:\Program Files (x86)\Microsoft AutoRoute

2013-03-07 13:32:54 -------- d-----w- C:\Program Files (x86)\MapsGalaxy_39

2013-03-07 11:42:44 -------- d-----w- C:\Program Files (x86)\MyPC Backup

2013-03-07 11:16:16 -------- d-----w- C:\Program Files (x86)\ALLYouTubeDownloader

2013-03-07 11:16:13 -------- d-----w- C:\Program Files (x86)\ALLMediaServer

2013-03-06 16:29:55 -------- d-----w- C:\Program Files (x86)\OnlineVault

2013-03-06 12:08:50 -------- d-----w- C:\Program Files (x86)\VideoLAN

2013-03-06 11:31:29 -------- d-----w- C:\Program Files (x86)\ALLConverter PRO

2013-03-06 11:31:20 -------- d-----w- C:\Program Files (x86)\ALLPlayer

2013-03-04 11:18:24 -------- d-----w- C:\Program Files (x86)\Microsoft SkyDrive

======= C: =====

2013-03-27 16:33:15 AFF0331828E1E4CE9902955324470C98 18228 ----a-w- C:\AdwCleaner[s1].txt

2013-03-11 12:16:02 5EE61AF78EF3CF7DE7812C8EDCE0A9D8 48 ----a-w- C:\RB.rdat

2013-03-11 12:16:02 58EECD332B68BB36DF1E8B1384A5CCFE 48 ----a-w- C:\License_Time.rdat

====== C:\Users\User\AppData\Roaming ======

2013-03-22 16:51:02 -------- d-----w- C:\users\Public\AppData\Local\temp

2013-03-22 16:51:02 -------- d-----w- C:\users\Default\AppData\Local\temp

2013-03-22 16:51:02 -------- d-----w- C:\users\Default User\AppData\Local\temp

2013-03-22 16:33:51 -------- d-----w- C:\users\User\AppData\Local\Avg2013

2013-03-20 17:58:59 -------- d-----w- C:\users\User\AppData\Roaming\ArcSoft

2013-03-17 16:50:21 0C0C468D7F3D99D99922D7734CD93209 171840 ----a-w- C:\users\User\AppData\Local\GDIPFONTCACHEV1.DAT

2013-03-15 14:56:47 -------- d-----w- C:\users\User\AppData\Roaming\NCH Software

2013-03-07 13:37:15 -------- d-----w- C:\users\User\AppData\Roaming\dvdcss

2013-03-07 13:30:29 -------- d-----w- C:\users\User\AppData\Locallow\VideoDownloadConverter_4z

2013-03-07 11:40:50 EB573F586D37812130A579BF85764DB0 20480000 ----a-w- C:\users\User\AppData\Locallow\store-pp.jbs

2013-03-07 11:16:13 -------- d-----w- C:\users\User\AppData\Local\ALLMediaServer

2013-03-06 12:10:46 -------- d-----w- C:\users\User\AppData\Roaming\vlc

2013-03-06 11:31:58 -------- d-----w- C:\users\User\AppData\Roaming\CRMixiDJTB

2013-03-06 11:31:30 -------- d-----w- C:\users\User\AppData\Local\ALLConverter

2013-03-06 11:31:20 -------- d-----w- C:\users\User\AppData\Local\ALLPlayer

2013-03-04 12:43:47 -------- d-----w- C:\users\User\AppData\Local\VisualBeeClient

2013-03-02 20:57:13 -------- d-----w- C:\users\User\AppData\Local\ManyCam

====== C:\Users\User ======

2013-03-15 16:18:03 -------- d-----w- C:\Users\Public\AppData

2013-03-15 14:57:27 -------- d-----w- C:\ProgramData\NCH Software

2013-03-11 12:16:01 -------- d-----w- C:\ProgramData\FileCure

2013-03-06 12:56:41 -------- d-----w- C:\ProgramData\Uniblue

2013-03-04 11:18:24 -------- d-----r- C:\Users\User\SkyDrive

2013-03-04 11:18:20 -------- d-----w- C:\ProgramData\Microsoft SkyDrive

====== C: exe-files ==

=== C: other files ==

2013-03-27 16:33:24 CEBB5A5A9638E71791AD3D84729938B2 121 ----a-w- C:\Windows\DeleteOnReboot.bat

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-21-1111017600-2235470025-3945737096-1000\Software\Microsoft\Windows\CurrentVersion\Run]

"OfficeSyncProcess"="C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE"

"Skype"="C:\Program Files (x86)\Skype\Phone\Skype.exe /minimized /regrun"

"ALLUpdate"="C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe sleep"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IAStorIcon"="C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe"

"LifeCam"="C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe"

"vProt"="C:\Program Files (x86)\AVG Secure Search\vprot.exe"

"LanguageShortcut"="C:\Program Files (x86)\CyberLink\PowerDVD\Language\Language.exe"

"LGODDFU"="C:\Program Files (x86)\lg_fwupdate\lgfw.exe blrun"

"Adobe Reader Speed Launcher"="C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"

"Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"OfficeSyncProcess"="C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE"

"Skype"="C:\Program Files (x86)\Skype\Phone\Skype.exe /minimized /regrun"

"ALLUpdate"="C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe sleep"

==== Startup Registry Enabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"RtHDVCpl"="C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s"

"BCSSync"="C:\Program Files\Microsoft Office\Office14\BCSSync.exe /DelayServices"

==== Startup Registry Disabled ======================

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run-]

"Adobe ARM"="\"C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe\""

"Adobe Reader Speed Launcher"="\"C:\\Program Files (x86)\\Adobe\\Reader 9.0\\Reader\\Reader_sl.exe\""

"HP Software Update"="C:\\Program Files (x86)\\HP\\HP Software Update\\HPWuSchd2.exe"

==== Startup Registry Disabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\BDRegion]

"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="BDRegion"

"hkey"="HKLM"

"command"="C:\\Program Files (x86)\\Cyberlink\\Shared Files\\brs.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\CLMLServer]

"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="CLMLServer"

"hkey"="HKLM"

"command"="\"C:\\Program Files (x86)\\CyberLink\\Power2Go\\CLMLSvc.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\hpqSRMon]

"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="hpqSRMon"

"hkey"="HKLM"

"command"="C:\\Program Files (x86)\\HP\\Digital Imaging\\bin\\hpqSRMon.exe "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\InstantBurn]

"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="InstantBurn"

"hkey"="HKLM"

"command"="C:\\PROGRA~2\\CYBERL~1\\INSTAN~1\\Win2K\\IBurn.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ooVoo.exe]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="ooVoo.exe"

"hkey"="HKCU"

"command"="C:\\Program Files (x86)\\ooVoo\\oovoo.exe /minimized"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\RemoteControl]

"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="RemoteControl"

"hkey"="HKLM"

"command"="\"C:\\Program Files (x86)\\CyberLink\\PowerDVD\\PDVDServ.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\YouCam Service]

"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="YouCam Service"

"hkey"="HKLM"

"command"="\"C:\\Program Files (x86)\\CyberLink\\YouCam\\YouCamService.exe\" /s"

==== Startup Folders ======================

2013-03-11 12:34:04 1274 ----a-w- C:\users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Schermopname en Snel starten.lnk

==== Task Scheduler Jobs ======================

C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [13-03-2013 15:49]

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [28-06-2012 09:12]

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [28-06-2012 09:12]

C:\Windows\tasks\User_Feed_Synchronization-{6F772914-F766-4FB0-9F91-4CFC24EEC0DB}.job --ah----- C:\Windows\system32\msfeedssync.exe [02-07-2012 22:22]

==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions

boipimhfjpakfgckhbljjengakjhkcbp - C:\Users\User\AppData\Roaming\CRMixiDJTB\mixiDJ.crx[05-02-2013 14:03]

kpepfkjapeclaafmhoelccknpfedainn - C:\Program Files (x86)\mixidj\mixidj\1.8.4.1\mixidj.crx[]

lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx[02-10-2012 13:14]

MixiDJ Toolbar - User - Default\Extensions\boipimhfjpakfgckhbljjengakjhkcbp

Skype Click to Call - User - Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl

==== Set IE to Default ======================

Old Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="Google"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]

"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}] not found

New Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]

"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="{searchTerms} - Bing"

==== Reset Google Chrome ======================

C:\users\User\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully

C:\users\User\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== shortcuts on Users Desktops ======================

C:\Users\User\Desktop\ALLPlayer V5.0.lnk - C:\Program Files (x86)\ALLPlayer\ALLPlayer.exe

C:\Users\User\Desktop\ALLPlayer.lnk - C:\Program Files (x86)\ALLPlayer\ALLPlayer.exe

C:\Users\User\Desktop\AVS Image Converter.lnk - C:\Program Files (x86)\AVS4YOU\AVSImageConverter\AVSImageConverter.exe

C:\Users\User\Desktop\AVS4YOU Software Navigator.lnk - C:\Program Files (x86)\AVS4YOU\AVSSoftwareNavigator\AVS4YOUSoftwareNavigator.exe

C:\Users\User\Desktop\exPressit Help (Dutch).lnk - C:\Program Files (x86)\exPressit S.E. 2.1\help\index_nl_NL.html

C:\Users\User\Desktop\exPressit S.E. 2.1.lnk - C:\Program Files (x86)\exPressit S.E. 2.1\exPressit S.E. 2.1.exe

C:\Users\User\Desktop\PhotoStudio 5.5.lnk - C:\Program Files (x86)\ArcSoft\PhotoStudio 5.5\PhotoStudio.exe

C:\Users\User\Desktop\zoek.exe - Snelkoppeling.lnk - H:\zoek.exe

==== shortcuts on All Users Desktop ======================

C:\Users\Public\Desktop\Adobe Reader 9.lnk - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe

C:\Users\Public\Desktop\ALL Media Server.lnk - C:\Program Files (x86)\ALLMediaServer\ALLMediaServer.exe

C:\Users\Public\Desktop\ALL YouTube Downloader.lnk - C:\Program Files (x86)\ALLYouTubeDownloader\ALLYouTubeDownloader.exe

C:\Users\Public\Desktop\ALLConverter PRO.lnk - C:\Program Files (x86)\ALLConverter PRO\ALLConverterPro.exe

C:\Users\Public\Desktop\MAGIX Film op CD & DVD 4.0.lnk - C:\MAGIX\Film_op_CD_DVD_4\homeDVD-Film4.exe

C:\Users\Public\Desktop\MAGIX Media Manager 2004 silver.lnk - C:\MAGIX\Media_Manager_2004\MediaManager.exe

C:\Users\Public\Desktop\ManyCam.lnk - C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe

C:\Users\Public\Desktop\VLC media player.lnk - C:\Program Files (x86)\VideoLAN\VLC\vlc.exe

==== shortcuts in Users Start Menu ======================

C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk - C:\Program Files (x86)\Microsoft SkyDrive\SkyDriveSetup.exe

C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk - C:\Program Files (x86)\Microsoft SkyDrive\SkyDriveSetup.exe

C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk - C:\Users\User\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe

C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVS4YOU\De-installeren.lnk - C:\Program Files (x86)\AVS4YOU\Uninstall.exe

C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Hi-Def Suite\LabelPrint\LabelPrint Online Help.lnk - C:\Program Files (x86)\CyberLink\LabelPrint\Language\Enu\LabelPrint.chm

C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Hi-Def Suite\LabelPrint\LabelPrint.lnk - C:\Program Files (x86)\CyberLink\LabelPrint\LabelPrint.exe

C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Hi-Def Suite\LabelPrint\OnLine Registration.lnk - C:\Program Files (x86)\CyberLink\LabelPrint\OLRSubmission\OLRSubmission.exe /LANG:ENU

C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Hi-Def Suite\LabelPrint\Readme.lnk - C:\Program Files (x86)\CyberLink\LabelPrint\Language\Enu\Readme.htm

C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Hi-Def Suite\LabelPrint\Uninstall LabelPrint.lnk - C:\Windows\System32\rundll32.exe C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{C59C179C-668D-49A9-B6EA-0121CCFC1243}\Setup.exe" -uninstall

C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Hi-Def Suite\PowerDVD\CyberLink PowerDVD.lnk - C:\Program Files (x86)\CyberLink\PowerDVD\PowerDVD.exe

C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Hi-Def Suite\PowerDVD\Online registration.lnk - C:\Program Files (x86)\CyberLink\PowerDVD\OLRSubmission\OLRSubmission.exe /LANG:Enu

C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Hi-Def Suite\PowerDVD\PowerDVD Help file.lnk - C:\Program Files (x86)\CyberLink\PowerDVD\Language\Enu\PowerDVD.CHM

C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Hi-Def Suite\PowerDVD\Read Me.lnk - C:\Program Files (x86)\CyberLink\PowerDVD\Language\Enu\Readme.htm

C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink Hi-Def Suite\PowerDVD\Uninstall PowerDVD.lnk - C:\Windows\system32\RunDll32.exe C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\setup.exe" -uninstall

C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Graphics Related Programs\Graphics File Converter.lnk - C:\Program Files (x86)\NCH Software\Disketch\disketch.exe -extfind Pixillion

C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Graphics Related Programs\PhotoPad Editor.lnk - C:\Program Files (x86)\NCH Software\Disketch\disketch.exe -extfind PhotoPad

C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Graphics Related Programs\Video File Converter.lnk - C:\Program Files (x86)\NCH Software\Disketch\disketch.exe -extfind Prism

C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Accounting Software.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind ExpressAccounts

C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Classic FTP Software.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind ClassicFTP

C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Doxillion Document Converter.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind Doxillion

C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Express Burn CD, DVD or Blu-Ray.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe

C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Express Dictate Recorder.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind Express

C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Express Rip CD Ripper.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind Rip

C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Express Zip File Compression.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind ExpressZip

C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Graphics File Converter.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind Pixillion

C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Invoicing Software.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind ExpressInvoice

C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\MixPad MultiTrack Mixer.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind MixPad

C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Prism Video File Format Converter.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind Prism

C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\RecordPad Sound Recorder.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind RecordPad

C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\SoundTap Streaming Recorder.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind SoundTap

C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Switch Sound File Converter.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind Switch

C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Video Capture Software.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind Debut

C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\VideoPad Video Editor.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind VideoPad

C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\WavePad Sound Editor.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind WavePad

C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Schermopname en Snel starten.lnk - C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE /tsr

==== shortcuts in All Users Start Menu ======================

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader 9.lnk - C:\Windows\Installer\{AC76BA86-7AD7-FFFF-7B44-A91000000001}\SC_Reader.ico

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Disketch Disc Label Software.lnk - C:\Program Files (x86)\NCH Software\Disketch\disketch.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Express Burn.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft AutoRoute 2002.lnk - C:\Windows\Installer\{F7F2DC0A-C22E-49AD-AD37-797309A54E7B}\_81CFF245D823_4DBB_AB6F_B2DE5ADB4464.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Picture It Photo 7.0.lnk -

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Works-venster Taak starten.lnk - C:\Program Files (x86)\Microsoft Works\msworks.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk - C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk - C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk - C:\Program Files (x86)\Windows Live\Mail\wlmail.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ALLConverter PRO\ALLConverter PRO.lnk - C:\Program Files (x86)\ALLConverter PRO\ALLConverterPro.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ALLMediaServer\ALL Media Server.lnk - C:\Program Files (x86)\ALLMediaServer\ALLMediaServer.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ALLPlayer\ALL YouTube Downloader.lnk - C:\Program Files (x86)\ALLYouTubeDownloader\ALLYouTubeDownloader.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ALLPlayer\ALLPlayer Skin Creator.lnk - C:\Program Files (x86)\ALLPlayer\ALLSkinCreator.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ALLPlayer\ALLPlayer V5.0.lnk - C:\Program Files (x86)\ALLPlayer\ALLPlayer.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ALLPlayer\ALLPlayer V5.X op het Web.lnk - C:\Program Files (x86)\ALLPlayer\allplayerEng.url

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ALLPlayer\ALLPlayer.lnk - C:\Program Files (x86)\ALLPlayer\ALLPlayer.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcSoft PhotoStudio 5.5\ReadMe.lnk - C:\Program Files (x86)\ArcSoft\PhotoStudio 5.5\readme.txt

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\CD Audio Burn Recorder.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\CD Audio Rip Extractor.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind Rip

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Crescendo Music Notation.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind Crescendo

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Dictation Recorder.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind Express

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\DJ Mixing Software.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind Zulu

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Multitrack Mixer.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind MixPad

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Record to CD or Mp3 Wizard.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind Golden

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Sound File Converter.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind Switch

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Sound File Editor.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind WavePad

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Sound File Recorder.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind RecordPad

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Streaming Audio Recorder.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind SoundTap

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Streaming Audio Server.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind BroadWave

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Text-to-Speech Reader.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind Verbose

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audio Related Programs\Voice Changing Software.lnk - C:\Program Files (x86)\NCH Software\ExpressBurn\expressburn.exe -extfind Voxal

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU\Activering.lnk - C:\Program Files (x86)\AVS4YOU\Registration.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU\AVS Update Manager.lnk - C:\Program Files (x86)\AVS4YOU\AVSUpdateManager\AVSUpdateManager.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU\AVS4YOU Software Navigator.lnk - C:\Program Files (x86)\AVS4YOU\AVSSoftwareNavigator\AVS4YOUSoftwareNavigator.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU\Help.lnk - C:\Program Files (x86)\AVS4YOU\AVS4YOUHelp.chm

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU\Herstellen.lnk - C:\Program Files (x86)\Common Files\AVSMedia\ActiveX\Repairing.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU\Licentieovereenkomst.lnk - C:\Program Files (x86)\AVS4YOU\License Agreement.rtf

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU\Image\AVS Image Converter.lnk - C:\Program Files (x86)\AVS4YOU\AVSImageConverter\AVSImageConverter.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\coverXP\coverXP help.lnk - C:\Program Files (x86)\coverXP\coverXP.chm

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\coverXP\coverXP removal.lnk - C:\Program Files (x86)\coverXP\cxp-uninst.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\coverXP\coverXP.lnk - C:\Program Files (x86)\coverXP\coverxp.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Graphics Related Programs\Graphics File Converter.lnk - C:\Program Files (x86)\NCH Software\Disketch\disketch.exe -extfind Pixillion

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Graphics Related Programs\PhotoPad Editor.lnk - C:\Program Files (x86)\NCH Software\Disketch\disketch.exe -extfind PhotoPad

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Graphics Related Programs\Video File Converter.lnk - C:\Program Files (x86)\NCH Software\Disketch\disketch.exe -extfind Prism

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel\Intel® Rapid Storage Technology.lnk - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorUI.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX\MAGIX Film op CD & DVD 4.0\Bestellen.lnk - C:\MAGIX\Film_op_CD_DVD_4\order.rtf

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX\MAGIX Film op CD & DVD 4.0\Licentievoorwaarden.lnk - C:\MAGIX\Film_op_CD_DVD_4\license.txt

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX\MAGIX Film op CD & DVD 4.0\MAGIX burn profiler.lnk - C:\MAGIX\Film_op_CD_DVD_4\CDBurnProfiler.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX\MAGIX Film op CD & DVD 4.0\MAGIX Film op CD & DVD 4.0 de-installeren.lnk - C:\MAGIX\Film_op_CD_DVD_4\unwise.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX\MAGIX Film op CD & DVD 4.0\MAGIX Film op CD & DVD 4.0 Handleiding.lnk - C:\MAGIX\Film_op_CD_DVD_4\manual.pdf

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX\MAGIX Film op CD & DVD 4.0\MAGIX Film op CD & DVD 4.0 Help.lnk - C:\MAGIX\Film_op_CD_DVD_4\homeDVD-Film4.hlp

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX\MAGIX Film op CD & DVD 4.0\MAGIX Film op CD & DVD 4.0.lnk - C:\MAGIX\Film_op_CD_DVD_4\homeDVD-Film4.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX\MAGIX Film op CD & DVD 4.0\MAGIX Online Print Service.lnk - C:\MAGIX\Film_op_CD_DVD_4\MAGIX Print Service\cewestart.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX\MAGIX Film op CD & DVD 4.0\MAGIX Online Services.lnk - C:\Program Files (x86)\Common Files\MAGIX Shared\Online Services Info\index_0413.htm

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX\MAGIX Film op CD & DVD 4.0\Online registratie.lnk - C:\MAGIX\Film_op_CD_DVD_4\explore.exe http://www.magix.com/user/register/product_registration/login_screen.php3?VARPROGRAM=Filme_auf_CD_DVD_4&VARCHARGE=4.0.4.0&VARREGISTER=onlineregister&VARLAND=NL

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX\MAGIX Film op CD & DVD 4.0\Registratie.lnk - C:\MAGIX\Film_op_CD_DVD_4\register.rtf

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX\MAGIX Film op CD & DVD 4.0\Support.lnk - C:\MAGIX\Film_op_CD_DVD_4\support.rtf

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX\MAGIX Media Manager 2004 silver\Bestellen.lnk - C:\MAGIX\Media_Manager_2004\order.rtf

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX\MAGIX Media Manager 2004 silver\Licentievoorwaarden.lnk - C:\MAGIX\Media_Manager_2004\license.txt

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX\MAGIX Media Manager 2004 silver\MAGIX burn profiler.lnk - C:\MAGIX\Media_Manager_2004\CDBurnProfiler.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX\MAGIX Media Manager 2004 silver\MAGIX Media Manager 2004 silver de-installeren.lnk - C:\MAGIX\Media_Manager_2004\unwise.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX\MAGIX Media Manager 2004 silver\MAGIX Media Manager 2004 silver Help.lnk - C:\MAGIX\Media_Manager_2004\MediaManager.hlp

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX\MAGIX Media Manager 2004 silver\MAGIX Media Manager 2004 silver.lnk - C:\MAGIX\Media_Manager_2004\MediaManager.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX\MAGIX Media Manager 2004 silver\MAGIX Viewer.lnk - C:\MAGIX\Media_Manager_2004\MAGIXviewer.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX\MAGIX Media Manager 2004 silver\MP3 Encoder Upgrade.lnk - C:\MAGIX\Media_Manager_2004\mp3encoder_upgrade.rtf

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX\MAGIX Media Manager 2004 silver\Online registratie.lnk - C:\MAGIX\Media_Manager_2004\explore.exe http://www.magix.com/user/register/product_registration/login_screen.php3?VARPROGRAM=MediaManager_2004_silver&VARCHARGE=2.0.7.0&VARREGISTER=onlineregister&VARLAND=NL

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX\MAGIX Media Manager 2004 silver\Registratie.lnk - C:\MAGIX\Media_Manager_2004\register.rtf

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX\MAGIX Media Manager 2004 silver\Support.lnk - C:\MAGIX\Media_Manager_2004\support.rtf

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ManyCam\ManyCam.lnk - C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ManyCam\Uninstall ManyCam.lnk - C:\Program Files (x86)\ManyCam\uninstall.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ManyCam\User Guide.lnk - C:\Program Files (x86)\ManyCam\Help\UserGuide.pdf

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight\Microsoft Silverlight.lnk - C:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\Silverlight.Configuration.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Works\Introductie.lnk - C:\Program Files (x86)\Microsoft Works\wkpdfsnf.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Works\Microsoft Works Agenda.lnk - C:\Program Files (x86)\Common Files\Microsoft Shared\Works Shared\wkscal.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Works\Microsoft Works Database.lnk - C:\Windows\Installer\{A29D0501-02A2-48DD-BC1B-09B27406FE9B}\_7B6CD8B0F227_49A6_8B86_24D68584BC4A.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Works\Microsoft Works Portfolio.lnk - C:\Program Files (x86)\Microsoft Works\wkssb.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Works\Microsoft Works Spreadsheet.lnk - C:\Program Files (x86)\Microsoft Works\wksss.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Works\Microsoft Works Tekstverwerker.lnk - C:\Program Files (x86)\Microsoft Works\wkswp.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Works\Microsoft Works-venster Taak starten.lnk - C:\Program Files (x86)\Microsoft Works\msworks.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Works\Windows Adresboek.lnk - C:\Program Files (x86)\Windows Mail\wab.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Accounting Software.lnk - C:\Program Files (x86)\NCH Software\Disketch\disketch.exe -extfind ExpressAccounts

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Classic FTP Software.lnk - C:\Program Files (x86)\NCH Software\Disketch\disketch.exe -extfind ClassicFTP

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Doxillion Document Converter.lnk - C:\Program Files (x86)\NCH Software\Disketch\disketch.exe -extfind Doxillion

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Express Burn CD, DVD or Blu-Ray.lnk - C:\Program Files (x86)\NCH Software\Disketch\disketch.exe -extfind ExpressBurn

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Express Dictate Recorder.lnk - C:\Program Files (x86)\NCH Software\Disketch\disketch.exe -extfind Express

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Express Rip CD Ripper.lnk - C:\Program Files (x86)\NCH Software\Disketch\disketch.exe -extfind Rip

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Express Zip File Compression.lnk - C:\Program Files (x86)\NCH Software\Disketch\disketch.exe -extfind ExpressZip

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Graphics File Converter.lnk - C:\Program Files (x86)\NCH Software\Disketch\disketch.exe -extfind Pixillion

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Invoicing Software.lnk - C:\Program Files (x86)\NCH Software\Disketch\disketch.exe -extfind ExpressInvoice

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\MixPad MultiTrack Mixer.lnk - C:\Program Files (x86)\NCH Software\Disketch\disketch.exe -extfind MixPad

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Prism Video File Format Converter.lnk - C:\Program Files (x86)\NCH Software\Disketch\disketch.exe -extfind Prism

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\RecordPad Sound Recorder.lnk - C:\Program Files (x86)\NCH Software\Disketch\disketch.exe -extfind RecordPad

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\SoundTap Streaming Recorder.lnk - C:\Program Files (x86)\NCH Software\Disketch\disketch.exe -extfind SoundTap

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Switch Sound File Converter.lnk - C:\Program Files (x86)\NCH Software\Disketch\disketch.exe -extfind Switch

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Video Capture Software.lnk - C:\Program Files (x86)\NCH Software\Disketch\disketch.exe -extfind Debut

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\VideoPad Video Editor.lnk - C:\Program Files (x86)\NCH Software\Disketch\disketch.exe -extfind VideoPad

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\WavePad Sound Editor.lnk - C:\Program Files (x86)\NCH Software\Disketch\disketch.exe -extfind WavePad

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Documentation.lnk - C:\Program Files (x86)\VideoLAN\VLC\Documentation.url

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Release Notes.lnk - C:\Program Files (x86)\VideoLAN\VLC\NEWS.txt

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Reset VLC media player preferences and cache files.lnk - C:\Program Files (x86)\VideoLAN\VLC\vlc.exe --reset-config --reset-plugins-cache vlc://quit

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VideoLAN Website.lnk - C:\Program Files (x86)\VideoLAN\VLC\VideoLAN Website.url

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player skinned.lnk - C:\Program Files (x86)\VideoLAN\VLC\vlc.exe -Iskins

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player.lnk - C:\Program Files (x86)\VideoLAN\VLC\vlc.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live\Windows Live Family Safety.lnk - C:\Windows\Installer\{5F611ADA-B98C-4DBB-ADDE-414F08457ECF}\fssicon.ico

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live\Windows Live Writer.lnk - C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriter.exe

==== shortcuts in Quick Launch ======================

C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\ALL Media Server.lnk - C:\Program Files (x86)\ALLMediaServer\ALLMediaServer.exe

C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\ALLConverter PRO.lnk - C:\Program Files (x86)\ALLConverter PRO\ALLConverterPro.exe

C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\ManyCam.lnk - C:\Program Files (x86)\ManyCam\Bin\ManyCam.exe

==== shortcuts After Repair ======================

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX\MAGIX Film op CD & DVD 4.0\Online registratie.lnk - C:\MAGIX\Film_op_CD_DVD_4\explore.exe

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX\MAGIX Media Manager 2004 silver\Online registratie.lnk - C:\MAGIX\Media_Manager_2004\explore.exe

==== HijackThis Entries ======================

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Toolbar BHO - {1e91a655-bb4b-4693-a05e-2edebc4c9d89} - C:\PROGRA~2\MAPSGA~2\bar\1.bin\39bar.dll

O2 - BHO: mixidj Helper Object - {4D6A9BBF-402C-4301-B1EF-28D04F71D761} - C:\Program Files (x86)\mixidj\mixidj\1.8.4.1\bh\mixidj.dll (file missing)

O2 - BHO: ALLYouTubeDownloader - {61DB16C5-B733-43F4-872E-B20DC9E72740} - C:\PROGRA~2\ALLYOU~1\ALLYOU~1.DLL

O2 - BHO: Search Assistant BHO - {71c1d63a-c944-428a-a5bd-ba513190e5d2} - C:\Program Files (x86)\MapsGalaxy_39\bar\1.bin\39SrcAs.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~2\Office14\GROOVEEX.DLL

O2 - BHO: Aanmeldhulp voor Microsoft-account - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office14\URLREDIR.DLL

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

O2 - BHO: IplexToALLPlayer - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\PROGRA~2\ALLPLA~1\Iplex\IPLEXT~1.DLL

O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

O4 - HKLM\..\Run: [iAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

O4 - HKLM\..\Run: [LifeCam] "C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe"

O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG Secure Search\vprot.exe"

O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files (x86)\CyberLink\PowerDVD\Language\Language.exe"

O4 - HKLM\..\Run: [LGODDFU] "C:\Program Files (x86)\lg_fwupdate\lgfw.exe" blrun

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKCU\..\Run: [OfficeSyncProcess] "C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE"

O4 - HKCU\..\Run: [skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun

O4 - HKCU\..\Run: [ALLUpdate] "C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe" "sleep"

O4 - Startup: OneNote 2010 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE

O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O9 - Extra button: Toon of verberg HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

O9 - Extra button: (no name) - Cmdmapping - (no file) (HKCU)

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL

O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Intel® Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe

O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: vToolbarUpdater14.2.0 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.2.0\ToolbarUpdater.exe

O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully

C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\serviceprofiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\users\User\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

After Reboot

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied

C:\Users\User\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found

kape · 1 april 2013

Start Hijackthis op. Selecteer “Scan”. Selecteer alleen de items die hieronder zijn genoemd:

O2 - BHO: Toolbar BHO - {1e91a655-bb4b-4693-a05e-2edebc4c9d89} - C:\PROGRA~2\MAPSGA~2\bar\1.bin\39bar.dll

O2 - BHO: mixidj Helper Object - {4D6A9BBF-402C-4301-B1EF-28D04F71D761} - C:\Program Files (x86)\mixidj\mixidj\1.8.4.1\bh\mixidj.dll (file missing)

O2 - BHO: ALLYouTubeDownloader - {61DB16C5-B733-43F4-872E-B20DC9E72740} - C:\PROGRA~2\ALLYOU~1\ALLYOU~1.DLL

O2 - BHO: Search Assistant BHO - {71c1d63a-c944-428a-a5bd-ba513190e5d2} - C:\Program Files (x86)\MapsGalaxy_39\bar\1.bin\39SrcAs.dll

O2 - BHO: IplexToALLPlayer - {DF925EF3-7A87-44E4-9CAF-8D7B280BF616} - C:\PROGRA~2\ALLPLA~1\Iplex\IPLEXT~1.DLL

O4 - HKCU\..\Run: [ALLUpdate] "C:\Program Files (x86)\ALLPlayer\ALLUpdate.exe" "sleep"

O9 - Extra button: (no name) - Cmdmapping - (no file) (HKCU)

Klik op 'Fix checked' om de items te verwijderen.

Let op : Windows Vista & 7 gebruikers dienen HijackThis als “administrator” uit te voeren via rechtermuisknop “als administrator uitvoeren". Indien dit via de snelkoppeling niet lukt voer je HijackThis als administrator uit in de volgende map : C:\\Program Files\\Trend Micro\\HiJackThis of C:\\Program Files (x86)\\Trend Micro\\HiJackThis.

Hang een nieuw logje van HijackThis in je volgende bericht en laat even weten hoe het nu met de melding staat ?

rsca1973 · 2 april 2013

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 20:19:03, on 1-4-2013

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v9.00 (9.00.8112.16470)

Boot mode: Normal

Running processes:

C:\Program Files (x86)\Skype\Phone\Skype.exe

C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

C:\Users\User\Downloads\HijackThis.exe