laptopje erg langzaam

kape · 1 april 2013

Download zoek.exe naar het bureaublad.

Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe
(hier of hier) kan je lezen hoe je dat doet.
Dubbelklik op Zoek.exe om de tool te starten.
Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
Kopieer nu onderstaande code en plak die in het grote invulvenster:
Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkwaardig probleem.

 
AVGIDSHX;s
AVGIDSShim;s

Klik op de knop "Options" en vink nu de onderstaande opties aan.
- Running processes
- Recently Created
- Startup Information
- Installed Programs
- Firefox Look
- Chrome Look
- System Specs
- Silent Runners
- Firefox Defaults
- Reset Chrome
- Reset IE proxy
- Empty Temp Folders
- Shortcut Fix
- IE Defaults
- Auto Clean
[*] Klik daarna op de knop "Run script".

[*] Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).

[*] Mocht na de herstart geen logje verschijnen, start zoek.exe dan opnieuw, de log verschijnt dan alsnog.

[*] Post nu de inhoud van het geopende logje in het volgende bericht.

denzel1990 · 13 april 2013

Zoek.exe Version 4.0.0.2 Updated 13-April-2013

Tool run by JeroenvanDuren on 11/04/2013 at 10:27:31.12.

Microsoft Windows XP Home Edition 5.1.2600 Service Pack 3 x86

Running in: Normal Mode Internet Access Detected

==== Running Processes ======================

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe -k DcomLaunch

svchost.exe

C:\WINDOWS\System32\svchost.exe -k netsvcs

svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\system32\svchost.exe -k netsvcs

C:\Program Files\Java\jre7\bin\jqs.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe

C:\WINDOWS\system32\svchost.exe -k imgsvc

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\ctfmon.exe

C:\WINDOWS\System32\svchost.exe -k HTTPFilter

C:\Program Files\Mozilla Firefox\firefox.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Program Files\uTorrent\uTorrent.exe

C:\Program Files\Mozilla Firefox\plugin-container.exe

C:\Documents and Settings\JeroenvanDuren\Application Data\Spotify\spotify.exe

C:\Documents and Settings\JeroenvanDuren\Mijn documenten\Downloads\zoek.exe

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== Installed Programs ======================

Adobe Flash Player 11 ActiveX

Adobe Flash Player 11 Plugin

Apple Software Update

Asus ACPI Driver

ASUSUpdate for Eee PC

Atheros Client Installation Program

Atheros Communications Inc.® AR81Family Gigabit/Fast Ethernet Driver

µTorrent

Auslogics BoostSpeed

Azurewave Wireless LAN Card

Beveiligingsupdate voor Windows Internet Explorer 7 (KB2183461)

Beveiligingsupdate voor Windows Internet Explorer 7 (KB2360131)

Beveiligingsupdate voor Windows Internet Explorer 7 (KB2416400)

Beveiligingsupdate voor Windows Internet Explorer 7 (KB2482017)

Beveiligingsupdate voor Windows Internet Explorer 7 (KB2497640)

Beveiligingsupdate voor Windows Internet Explorer 7 (KB2530548)

Beveiligingsupdate voor Windows Internet Explorer 7 (KB2544521)

Beveiligingsupdate voor Windows Internet Explorer 7 (KB2559049)

Beveiligingsupdate voor Windows Internet Explorer 7 (KB2586448)

Beveiligingsupdate voor Windows Internet Explorer 7 (KB2618444)

Beveiligingsupdate voor Windows Internet Explorer 7 (KB2647516)

Beveiligingsupdate voor Windows Internet Explorer 7 (KB2675157)

Beveiligingsupdate voor Windows Internet Explorer 7 (KB2699988)

Beveiligingsupdate voor Windows Internet Explorer 7 (KB2722913)

Beveiligingsupdate voor Windows Internet Explorer 7 (KB2744842)

Beveiligingsupdate voor Windows Internet Explorer 7 (KB2761465)

Beveiligingsupdate voor Windows Internet Explorer 7 (KB2792100)

Beveiligingsupdate voor Windows Internet Explorer 7 (KB2797052)

Beveiligingsupdate voor Windows Internet Explorer 7 (KB2799329)

Beveiligingsupdate voor Windows Internet Explorer 7 (KB2809289)

Beveiligingsupdate voor Windows Internet Explorer 7 (KB928090)

Beveiligingsupdate voor Windows Internet Explorer 7 (KB938127-v2)

Beveiligingsupdate voor Windows Internet Explorer 7 (KB956390)

Beveiligingsupdate voor Windows Internet Explorer 7 (KB958215)

Beveiligingsupdate voor Windows Internet Explorer 7 (KB960714)

Beveiligingsupdate voor Windows Internet Explorer 7 (KB961260)

Beveiligingsupdate voor Windows Internet Explorer 7 (KB963027)

Beveiligingsupdate voor Windows Internet Explorer 7 (KB972260)

Beveiligingsupdate voor Windows Internet Explorer 7 (KB974455)

Beveiligingsupdate voor Windows Internet Explorer 7 (KB976325)

Beveiligingsupdate voor Windows Internet Explorer 7 (KB978207)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2510531)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2618444)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2744842)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2809289)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2817183)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB982381)

Beveiligingsupdate voor Windows XP (KB2808735)

Beveiligingsupdate voor Windows XP (KB2813170)

Beveiligingsupdate voor Windows XP (KB2813345)

Beveiligingsupdate voor Windows XP (KB2820917)

Canon ScanGear Starter

CCleaner

Compatibiliteitspakket voor het 2007 Microsoft Office system

Data Sync

DivX Plus Web Player

Eee Docking 1.3.1.0

EeePC_1005HA Screen Saver

EeeSplendid

FontResizer

Google Update Helper

HiJackThis

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)

Hotfix voor Windows Internet Explorer 7 (KB947864)

Intel® Graphics Media Accelerator Driver

Java 7 Update 17

Java Auto Updater

Java 6 Update 29

Junk Mail filter update

K-Lite Codec Pack 6.5.0 (Basic)

Malwarebytes Anti-Malware versie 1.70.0.1100

Microsoft .NET Framework 1.1

Microsoft .NET Framework 1.1 Security Update (KB2698023)

Microsoft .NET Framework 1.1 Security Update (KB2742597)

Microsoft .NET Framework 1.1 Security Update (KB979906)

Microsoft .NET Framework 2.0 Service Pack 2

Microsoft .NET Framework 3.0 Service Pack 2

Microsoft .NET Framework 3.5 SP1

Microsoft .NET Framework 4 Client Profile

Microsoft .NET Framework 4 Client Profile NLD Language Pack

Microsoft .NET Framework 4 Extended

Microsoft .NET Framework 4 Extended NLD Language Pack

Microsoft Application Error Reporting

Microsoft Choice Guard

Microsoft Compression Client Pack 1.0 for Windows XP

Microsoft Internationalized Domain Names Mitigation APIs

Microsoft Kernel-Mode Driver Framework Feature Pack 1.7

Microsoft National Language Support Downlevel APIs

Microsoft Office 2007 Service Pack 3 (SP3)

Microsoft Office Excel MUI (Dutch) 2007

Microsoft Office File Validation Add-In

Microsoft Office Home and Student 2007

Microsoft Office Live Add-in 1.3

Microsoft Office OneNote MUI (Dutch) 2007

Microsoft Office PowerPoint MUI (Dutch) 2007

Microsoft Office PowerPoint Viewer 2007 (Dutch)

Microsoft Office Proof (Dutch) 2007

Microsoft Office Proof (English) 2007

Microsoft Office Proof (French) 2007

Microsoft Office Proof (German) 2007

Microsoft Office Proofing (Dutch) 2007

Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

Microsoft Office Shared MUI (Dutch) 2007

Microsoft Office Suite Activation Assistant

Microsoft Office Word MUI (Dutch) 2007

Microsoft Silverlight

Microsoft Software Update for Web Folders (Dutch) 12

Microsoft SQL Server 2005 Compact Edition [ENU]

Microsoft Sync Framework Runtime Native v1.0 (x86)

Microsoft Sync Framework Services Native v1.0 (x86)

Microsoft User-Mode Driver Framework Feature Pack 1.0

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319

Microsoft Works

Mozilla Firefox 19.0.2 (x86 nl)

MSVCRT

Realtek High Definition Audio Driver

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2736416)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2736428)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)

Security Update for Microsoft .NET Framework 4 Extended (KB2487367)

Security Update for Microsoft .NET Framework 4 Extended (KB2656351)

Security Update for Microsoft .NET Framework 4 Extended (KB2736428)

Security Update for Microsoft .NET Framework 4 Extended (KB2742595)

Security Update for Microsoft Office 2007 suites (KB2596615) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596672) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2687311) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2687441) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2687499) 32-Bit Edition

Security Update for Microsoft Office 2007 suites (KB2760416) 32-Bit Edition

Security Update for Microsoft Office Excel 2007 (KB2687307) 32-Bit Edition

Security Update for Microsoft Office InfoPath 2007 (KB2687440) 32-Bit Edition

Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition

Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition

Security Update for Microsoft Office Word 2007 (KB2760421) 32-Bit Edition

Segoe UI

Skype™ 5.10

Speccy

Spotify

Super Hybrid Engine

Synaptics Pointing Device Driver

Taalpakket voor Microsoft .NET Framework 4 Client Profile - NLD

Taalpakket voor Microsoft .NET Framework 4 Extended - NLD

Update for 2007 Microsoft Office System (KB967642)

Update for Microsoft .NET Framework 3.5 SP1 (KB963707)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217)

Update for Microsoft .NET Framework 4 Extended (KB2468871)

Update for Microsoft .NET Framework 4 Extended (KB2533523)

Update for Microsoft .NET Framework 4 Extended (KB2600217)

Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2596660) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2596848) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition

Update voor Windows Internet Explorer 7 (KB976749)

Update voor Windows Internet Explorer 7 (KB980182)

Update voor Windows Internet Explorer 8 (KB2598845)

Update voor Windows XP (KB2492386)

USB2.0 UVC Camera Device

VC80CRTRedist - 8.0.50727.4053

VLC media player 1.1.5

WebFldrs XP

Windows Genuine Advantage Validation Tool (KB892130)

Windows Internet Explorer 7

Windows Internet Explorer 8

Windows Live - Hulpprogramma voor uploaden

Windows Live aanmeldhulp

Windows Live Call

Windows Live Communications Platform

Windows Live Essentials

Windows Live Family Safety

Windows Live Mail

Windows Live Messenger

Windows Live Photo Gallery

Windows Live Sync

Windows Live Writer

Windows Media Format 11 runtime

Windows Media Player 11

WinRAR 4.11 (32-bit)

==== Deleting Services ======================

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AVGIDSHX deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\AVGIDSHX deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AVGIDSShim deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\AVGIDSShim deleted successfully

==== FireFox Fix ======================

Deleted from C:\Documents and Settings\JeroenvanDuren\Application Data\Mozilla\Firefox\Profiles\gfn9bfrh.default\prefs.js:

Added to C:\Documents and Settings\JeroenvanDuren\Application Data\Mozilla\Firefox\Profiles\gfn9bfrh.default\prefs.js:

user_pref("browser.startup.homepage", "http://www.google.com");

user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");

user_pref("browser.newtab.url", "http://www.google.com/");

user_pref("browser.search.defaultengine", "Google");

user_pref("browser.search.defaultenginename", "Google");

user_pref("browser.search.selectedEngine", "Google");

user_pref("browser.search.order.1", "Google");

user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");

user_pref("browser.search.suggest.enabled", true);

user_pref("browser.search.useDBForOrder", true);

==== Deleting Files \ Folders ======================

"C:\Documents and Settings\JeroenvanDuren\Application Data\Mozilla\Firefox\Profiles\gfn9bfrh.default\jetpack" deleted

==== System Specs ======================

Windows: Windows XP Home Edition Service Pack 3 (Build 2600)

Internet Explorer: 8.0.6001.18702

Memory (RAM): 1016 MB

CPU Info: Intel® Atom CPU N270 @ 1.60GHz

CPU Speed: 1566.0 MHz

Sound Card: Realtek HD Audio output |

Display Adapters: Mobile Intel® 945 Express Chipset Family | Mobile Intel® 945 Express Chipset Family | NetMeeting driver | RDPDD Chained DD

Monitors: 1x; Digitaal LCD-scherm (1024x768) | Digitaal LCD-scherm (1024x768) |

Screen Resolution: 1024 X 600 - 32 bit

Network: Network Present

Network Adapters: Atheros AR8132 PCI-E Fast Ethernet Controller - Pakketplanner-minipoort | Atheros AR9285 Wireless Network Adapter - Pakketplanner-minipoort

CD / DVD Drives: No optical drives found.

Ports: COM Ports NOT Present. LPT Port NOT Present.

Mouse: 5 Button Wheel Mouse Present

Hard Disks: C: 72.1GB | D: 72.1GB

Hard Disks - Free: C: 32.6GB | D: 72.0GB

Manufacturer *: American Megatrends Inc.

BIOS Info: AT/AT COMPATIBLE | 07/24/09 | A_M_I_ - 7000924

Time Zone: West-Europa (standaardtijd)

Motherboard *: ASUSTeK Computer INC. 1005HA

Sun Java version: 1.7.0_17

Country: Verenigd Koninkrijk

Language: ENG

==== Files Recently Created / Modified ======================

====== C:\WINDOWS ====

2013-03-29 21:27:13 F042EE4C8D66248D9B86DCF52ABAE416 256000 ----a-w- C:\WINDOWS\PEV.exe

2013-03-29 21:27:13 9E05A9C264C8A908A8E79450FCBFF047 80412 ----a-w- C:\WINDOWS\grep.exe

2013-03-29 21:27:13 5E832F4FAF5F481F2EAF3B3A48F603B8 68096 ----a-w- C:\WINDOWS\zip.exe

2013-03-29 21:27:13 0297C72529807322B152F517FDB0A9FC 406528 ----a-w- C:\WINDOWS\SWSC.exe

2013-03-29 21:27:13 0277C027A26428DB64EF4F64F52BB4FD 208896 ----a-w- C:\WINDOWS\MBR.exe

2013-03-29 19:17:32 A698AA267F5597C2C7F59D294E78A393 1374 ----a-w- C:\WINDOWS\imsins.BAK

====== C:\DOCUME~1\JEROEN~1\LOCALS~1\Temp ====

====== C:\WINDOWS\system32 =====

2013-04-10 20:05:15 B253322243140638CE19F628D278438D 184320 ----a-w- C:\WINDOWS\System32\SET35.tmp

2013-04-10 20:05:15 6CC90E5A54231908F7AF720DE188711F 630272 ----a-w- C:\WINDOWS\System32\SET30.tmp

2013-04-10 20:05:15 175DD046B1333A0FED3C37FEA9CDBA35 2004992 ----a-w- C:\WINDOWS\System32\SET34.tmp

2013-04-10 20:05:14 AB53F82857878CA1BE2CA0119C97773A 55296 ----a-w- C:\WINDOWS\System32\SET2F.tmp

2013-04-10 20:05:14 97B97DA5FBB71B2F379F7B26D6CA184B 105984 ----a-w- C:\WINDOWS\System32\SET2A.tmp

2013-04-10 20:05:11 66C483FD3EF382EA2B049B2831E23AA0 916480 ----a-w- C:\WINDOWS\System32\SET28.tmp

2013-04-10 20:05:11 31925230DC16721EC8C1F03123B11444 1212928 ----a-w- C:\WINDOWS\System32\SET29.tmp

2013-04-10 20:05:11 0419CEAD46E9E7D106C63A101B9A3B36 6012416 ----a-w- C:\WINDOWS\System32\SET2E.tmp

2013-04-10 20:05:10 8C63E848CFE5377F754AE41EC2278F22 11111424 ----a-w- C:\WINDOWS\System32\SET36.tmp

2013-03-28 21:43:06 CA9F4B5957EC8179FDC97376FDE53B94 186608 ----a-w- C:\WINDOWS\System32\FNTCACHE.DAT

2013-03-28 20:56:56 350C713C2D9B9F5549C50A8D3924E789 94112 ----a-w- C:\WINDOWS\System32\WindowsAccessBridge.dll

2013-03-28 11:37:45 229770FF9B87160AC3C22517BBFE6BF4 691592 ----a-w- C:\WINDOWS\System32\FlashPlayerApp.exe

====== C:\WINDOWS\system32\drivers =====

====== C:\WINDOWS\Tasks ======

2069-03-05 10:37:45 8B6D38199C15ACE96931D73BE380D847 902 ----a-w- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

2069-03-05 10:37:44 74B02DB465D844209351CF2E089C97EF 898 ----a-w- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job

2013-03-28 11:37:47 D2CD7B84975C58FBD08FBD6B44F51CB1 940 ----a-w- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job

====== C:\WINDOWS\Temp ======

======= C:\Program Files =====

2069-03-05 10:37:27 -------- d-----w- C:\Program Files\Google

2069-03-05 08:36:16 -------- d-----w- C:\Program Files\uTorrent

2013-03-29 20:45:48 -------- d-----w- C:\Program Files\Speccy

2013-03-29 09:48:01 -------- d-----w- C:\Program Files\Trend Micro

======= C: =====

2013-03-29 21:28:42 17D7055859D99A0D606CFAF17AE38638 211 ----a-w- C:\Boot.bak

2013-03-29 21:28:39 271E9B6A3AEC7BCA63D9231A4B3575C0 261936 --sha-r- C:\cmldr

2013-03-29 11:53:37 6246D53D2FB83F3CA224541196F9C25F 1569 ----a-w- C:\AdwCleaner[s1].txt

====== C:\Documents and Settings\JeroenvanDuren\Application Data ======

2069-03-05 09:22:04 34876946C055062B85AF132B2F99BAF1 34814 ----a-w- C:\Documents and Settings\JeroenvanDuren\Local Settings\Application Data\dt.dat

2069-03-05 08:35:07 -------- d-----w- C:\Documents and Settings\JeroenvanDuren\Application Data\uTorrent

2013-03-29 21:18:50 -------- d-----r- C:\Documents and Settings\JeroenvanDuren\Menu Start\Programma's\Systeembeheer

2013-03-28 22:11:57 7F1447EB499BCADD2BFE7A2CF4411775 38768 ----a-w- C:\Documents and Settings\JeroenvanDuren\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

2013-03-28 20:46:21 -------- d-----w- C:\Documents and Settings\JeroenvanDuren\Local Settings\Application Data\Mozilla

2013-03-28 20:46:21 -------- d-----w- C:\Documents and Settings\JeroenvanDuren\Application Data\Mozilla

2013-03-27 19:08:51 -------- d-----w- C:\Documents and Settings\All Users\Application Data\Battle.net

====== C:\Documents and Settings\JeroenvanDuren ======

2013-03-29 21:04:29 -------- d-sh--w- C:\Documents and Settings\NetworkService\IETldCache

2013-03-29 21:04:22 -------- d-sh--w- C:\Documents and Settings\JeroenvanDuren\IETldCache

2013-03-28 21:41:11 -------- d--h--r- C:\Documents and Settings\JeroenvanDuren\Onlangs geopend

====== C: exe-files ==

2069-03-05 10:37:42 F02A533F517EB38333CB12A9E8963773 136176 ----atw- C:\Program Files\Google\Update\GoogleUpdate.exe

2069-03-05 10:32:45 71BA5983A665FB4CCE507093B1FA143B 74761776 ----a-w- C:\Documents and Settings\JeroenvanDuren\Mijn documenten\Downloads\avast_free_antivirus_setup.exe

2069-03-05 08:36:16 CB4A9ABA55F2AA98265BA3D8AE029A6B 880496 ----a-w- C:\Program Files\uTorrent\uTorrent.exe

2069-03-05 08:34:42 CB4A9ABA55F2AA98265BA3D8AE029A6B 880496 ----a-w- C:\Documents and Settings\JeroenvanDuren\Mijn documenten\Downloads\uTorrent (1).exe

2013-04-11 08:04:15 E9D1BD6793C0DE2C6FB87CB64CB785A2 20190136 ----a-w- C:\Documents and Settings\JeroenvanDuren\Application Data\Spotify\Spotify_new.exe

2013-04-11 07:26:14 2BF1A08F7CB7752AF697EE228514497F 234872 -c----w- C:\WINDOWS\ie8updates\KB2817183-IE8\spuninst\spuninst.exe

2013-04-11 07:26:13 A669C1B40E5D23F5EBE7EF498631B7D1 174080 -c----w- C:\WINDOWS\ie8updates\KB2817183-IE8\ie4uinit.exe

2013-04-11 07:20:06 2BF1A08F7CB7752AF697EE228514497F 234872 -c----w- C:\WINDOWS\ie8updates\KB2510531-IE8\spuninst\spuninst.exe

=== C: other files ==

2013-04-11 08:10:13 F726DE38388D240FD2ECEA5BB58409DC 703265996 ----a-w- C:\Documents and Settings\JeroenvanDuren\Mijn documenten\Downloads\Windows XP Professional SP3 32-bit - Black Edition 2013.3.17.zip

2013-04-11 07:45:57 00A86FC133963F5155FE205A63B1C175 302169 ----a-w- C:\Documents and Settings\JeroenvanDuren\Application Data\Mozilla\Firefox\Profiles\gfn9bfrh.default\extensions\jid1-ZAdIEUB7XOzOJw@jetpack.xpi

==== Startup Registry Enabled ======================

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE"

[HKEY_USERS\S-1-5-21-1986488926-2133969174-3349548801-1006\Software\Microsoft\Windows\CurrentVersion\Run]

"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe"

"Pando Media Booster"="C:\Program Files\Pando Networks\Media Booster\PMB.exe"

"Google Update"="C:\Documents and Settings\JeroenvanDuren\Local Settings\Application Data\Google\Update\GoogleUpdate.exe /c"

"Eee Docking"="C:\Program Files\ASUS\Eee Docking\Eee Docking.exe"

"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe"

"Eee Docking (1)"="C:\Program Files\ASUS\Eee Docking\Eee Docking.exe"

"Google Update (1)"="C:\Documents and Settings\JeroenvanDuren\Local Settings\Application Data\Google\Update\GoogleUpdate.exe /c"

"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

"Spotify Web Helper"="C:\Documents and Settings\JeroenvanDuren\Application Data\Spotify\Data\SpotifyWebHelper.exe"

"Spotify"="C:\Documents and Settings\JeroenvanDuren\Application Data\Spotify\Spotify.exe /uri spotify:autostart"

"HP Photosmart 5520 series (NET)"="C:\Program Files\HP\HP Photosmart 5520 series\Bin\ScanToPCActivationApp.exe -deviceID CN2841737L05ST:NW -scfn HP Photosmart 5520 series (NET) -AutoStart 1"

"msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe /background"

[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"vProt"="C:\Program Files\AVG Secure Search\vprot.exe"

"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"

"RTHDCPL"="RTHDCPL.EXE"

"Persistence"="C:\WINDOWS\system32\igfxpers.exe"

"IgfxTray"="C:\WINDOWS\system32\igfxtray.exe"

"HotKeysCmds"="C:\WINDOWS\system32\hkcmd.exe"

"AsusTray"="C:\Program Files\EeePC\ACPI\AsTray.exe"

"AVG_TRAY"="C:\Program Files\AVG\AVG2012\avgtray.exe"

"AsusACPIServer"="C:\Program Files\EeePC\ACPI\AsAcpiSvr.exe"

"SynAsusAcpi"="C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe"

"AsusEPCMonitor"="C:\Program Files\EeePC\ACPI\AsEPCMon.exe"

"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

"SunJavaUpdateSched"="C:\Program Files\Common Files\Java\Java Update\jusched.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe"

"Pando Media Booster"="C:\Program Files\Pando Networks\Media Booster\PMB.exe"

"Google Update"="C:\Documents and Settings\JeroenvanDuren\Local Settings\Application Data\Google\Update\GoogleUpdate.exe /c"

"Eee Docking"="C:\Program Files\ASUS\Eee Docking\Eee Docking.exe"

"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe"

"Eee Docking (1)"="C:\Program Files\ASUS\Eee Docking\Eee Docking.exe"

"Google Update (1)"="C:\Documents and Settings\JeroenvanDuren\Local Settings\Application Data\Google\Update\GoogleUpdate.exe /c"

"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

"Spotify Web Helper"="C:\Documents and Settings\JeroenvanDuren\Application Data\Spotify\Data\SpotifyWebHelper.exe"

"Spotify"="C:\Documents and Settings\JeroenvanDuren\Application Data\Spotify\Spotify.exe /uri spotify:autostart"

"HP Photosmart 5520 series (NET)"="C:\Program Files\HP\HP Photosmart 5520 series\Bin\ScanToPCActivationApp.exe -deviceID CN2841737L05ST:NW -scfn HP Photosmart 5520 series (NET) -AutoStart 1"

"msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe /background"

==== Startup Registry Disabled ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\MsnMsgr]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="MsnMsgr"

"hkey"="HKCU"

"command"="\"C:\\Program Files\\Windows Live\\Messenger\\MsnMsgr.Exe\" /background"

==== Task Scheduler Jobs ======================

C:\WINDOWS\tasks\Adobe Flash Player Updater.job --a------ C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [11/04/2013 09:24]

C:\WINDOWS\tasks\AppleSoftwareUpdate.job --a------ C:\Program Files\AppleC:oftware Update\SoftwareUpdate.exe []

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [05/03/2069 12:37]

C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [05/03/2069 12:37]

==== Firefox Extensions ======================

ProfilePath: C:\Documents and Settings\JeroenvanDuren\Application Data\Mozilla\Firefox\Profiles\gfn9bfrh.default

- DoNotTrackMe - %ProfilePath%\extensions\donottrackplus@abine.com

- DuckDuckGo Plus - %ProfilePath%\extensions\jid1-ZAdIEUB7XOzOJw@jetpack.xpi

- Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

AppDir: C:\Program Files\Mozilla Firefox

- Default - %AppDir%\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Documents and Settings\JeroenvanDuren\Application Data\Mozilla\Firefox\Profiles\gfn9bfrh.default

F7E72D3A281F922BACEC1A71A826D4C2 - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_7_700_169.dll - Shockwave Flash

05C4A7136F3012BB47107333B5D351D3 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll - Java Platform SE 7 U17

D4BD9F86123C87ECA570418B69326F99 - C:\WINDOWS\system32\npDeployJava1.dll - Java Deployment Toolkit 7.0.170.2

A5C14075B571AF1C9592595BE724D9D2 - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll - Silverlight Plug-In

1C8124B6A03A620EB0CBCA615666D2AE - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll - Windows Live® Photo Gallery

EDBA797E78300759A09AF77C77F5D9E7 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll - DivX Web Player

7ABA2EAB736F7E9EB0E03ACAA42CCB51 - C:\Program Files\Microsoft\Office Live\npOLW.dll - Microsoft Office Live Plug-in for Firefox / Microsoft Office Live Plug-in for Firefox

AB87EEFFD18F2BAAFC274E7075EA6C67 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll - Windows Presentation Foundation / Windows Presentation Foundation

901DF887DBDF87FA3C659239F68F3228 - C:\Program Files\Windows Media Player\npdrmv2.dll - Microsoft® DRM

0F9DEA5814D22F83FED5F427E263DED0 - C:\Program Files\Windows Media Player\npdsplay.dll - Windows Media Player Plug-in Dynamic Link Library

F89E6BBD6A080D8C714DFB6F30678288 - C:\Program Files\Windows Media Player\npwmsdrm.dll - Microsoft® DRM

2AA3703D87E1327A2290C9D416D89A28 - C:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrlui.dll - Microsoft® Silverlight

3EA079023D32054BFD73D08E77C72609 - C:\WINDOWS\system32\npptools.dll - Besturingssysteem Microsoft® Windows®

==== Set IE to Default ======================

Old Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="http://google.nl/"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]

No DefaultScope Set For HKCU

New Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="http://google.nl/"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]

"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?FORM=ASUBDF&PC=MAAU&q={searchTerms}&src=IE-SearchBox"

{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

{E457BA7A-CA69-4E49-99D5-AC050CAB0149} Google Url="http://www.google.co.uk/search?hl=en&q={searchTerms}&meta=&rlz=1I7NNVC_nlNL491"

==== Reset Google Chrome ======================

Nothing found to reset

==== shortcuts on Users Desktops ======================

C:\Documents and Settings\JeroenvanDuren\Bureaublad\Auslogics BoostSpeed.lnk - C:\Program Files\Auslogics\Auslogics BoostSpeed\BoostSpeed.exe

C:\Documents and Settings\JeroenvanDuren\Bureaublad\HiJackThis.lnk - C:\Documents and Settings\JeroenvanDuren\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

==== shortcuts on All Users Desktop ======================

C:\Documents and Settings\All Users\Bureaublad\Internet.lnk - C:\Program Files\Mozilla Firefox\firefox.exe

C:\Documents and Settings\All Users\Bureaublad\Malwarebytes Anti-Malware.lnk - C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe

C:\Documents and Settings\All Users\Bureaublad\Speccy.lnk - C:\Program Files\Speccy\Speccy.exe

==== shortcuts in Users Start Menu ======================

C:\Documents and Settings\JeroenvanDuren\Menu Start\Programma's\Internet Explorer.lnk - C:\Program Files\Internet Explorer\iexplore.exe

C:\Documents and Settings\JeroenvanDuren\Menu Start\Programma's\Bureau-accessoires\Systeembeheer\Internet Explorer (zonder invoegtoepassingen).lnk - C:\Program Files\Internet Explorer\iexplore.exe -extoff

C:\Documents and Settings\JeroenvanDuren\Menu Start\Programma's\HiJackThis\HiJackThis.lnk - C:\Documents and Settings\JeroenvanDuren\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

==== shortcuts in All Users Start Menu ======================

C:\Documents and Settings\All Users\Menu Start\Programma's\Auslogics\BoostSpeed\Auslogics BoostSpeed on the Web.lnk - C:\Program Files\Auslogics\Auslogics BoostSpeed\boostspeed.url

C:\Documents and Settings\All Users\Menu Start\Programma's\Auslogics\BoostSpeed\Auslogics BoostSpeed.lnk - C:\Program Files\Auslogics\Auslogics BoostSpeed\BoostSpeed.exe

C:\Documents and Settings\All Users\Menu Start\Programma's\Auslogics\BoostSpeed\Auslogics Rescue Center.lnk - C:\Program Files\Auslogics\Auslogics BoostSpeed\RescueCenter.exe

C:\Documents and Settings\All Users\Menu Start\Programma's\Auslogics\BoostSpeed\Uninstall Auslogics BoostSpeed.lnk - C:\Program Files\Auslogics\Auslogics BoostSpeed\unins000.exe

C:\Documents and Settings\All Users\Menu Start\Programma's\Auslogics\BoostSpeed\Utilities\Auslogics Console Defragmentation.lnk - C:\WINDOWS\system32\cmd.exe /K "C:\Program Files\Auslogics\Auslogics BoostSpeed\cdefrag.exe"

C:\Documents and Settings\All Users\Menu Start\Programma's\Auslogics\BoostSpeed\Utilities\Auslogics Disk Cleaner.lnk - C:\Program Files\Auslogics\Auslogics BoostSpeed\DiskCleaner.exe

C:\Documents and Settings\All Users\Menu Start\Programma's\Auslogics\BoostSpeed\Utilities\Auslogics Disk Defrag.lnk - C:\Program Files\Auslogics\Auslogics BoostSpeed\DiskDefrag.exe

C:\Documents and Settings\All Users\Menu Start\Programma's\Auslogics\BoostSpeed\Utilities\Auslogics Disk Doctor.lnk - C:\Program Files\Auslogics\Auslogics BoostSpeed\DiskDoctor.exe

C:\Documents and Settings\All Users\Menu Start\Programma's\Auslogics\BoostSpeed\Utilities\Auslogics Disk Explorer.lnk - C:\Program Files\Auslogics\Auslogics BoostSpeed\DiskExplorer.exe

C:\Documents and Settings\All Users\Menu Start\Programma's\Auslogics\BoostSpeed\Utilities\Auslogics Disk Wiper.lnk - C:\Program Files\Auslogics\Auslogics BoostSpeed\DiskWiper.exe

C:\Documents and Settings\All Users\Menu Start\Programma's\Auslogics\BoostSpeed\Utilities\Auslogics Duplicate File Finder.lnk - C:\Program Files\Auslogics\Auslogics BoostSpeed\DuplicateFileFinder.exe

C:\Documents and Settings\All Users\Menu Start\Programma's\Auslogics\BoostSpeed\Utilities\Auslogics File Recovery.lnk - C:\Program Files\Auslogics\Auslogics BoostSpeed\FileRecovery.exe

C:\Documents and Settings\All Users\Menu Start\Programma's\Auslogics\BoostSpeed\Utilities\Auslogics File Shredder.lnk - C:\Program Files\Auslogics\Auslogics BoostSpeed\FileShredder.exe

C:\Documents and Settings\All Users\Menu Start\Programma's\Auslogics\BoostSpeed\Utilities\Auslogics Internet Optimizer.lnk - C:\Program Files\Auslogics\Auslogics BoostSpeed\InternetOptimizer.exe

C:\Documents and Settings\All Users\Menu Start\Programma's\Auslogics\BoostSpeed\Utilities\Auslogics Registry Cleaner.lnk - C:\Program Files\Auslogics\Auslogics BoostSpeed\RegCleaner.exe

C:\Documents and Settings\All Users\Menu Start\Programma's\Auslogics\BoostSpeed\Utilities\Auslogics Registry Defrag.lnk - C:\Program Files\Auslogics\Auslogics BoostSpeed\RegistryDefrag.exe

C:\Documents and Settings\All Users\Menu Start\Programma's\Auslogics\BoostSpeed\Utilities\Auslogics Rescue Center.lnk - C:\Program Files\Auslogics\Auslogics BoostSpeed\RescueCenter.exe

C:\Documents and Settings\All Users\Menu Start\Programma's\Auslogics\BoostSpeed\Utilities\Auslogics Service Manager.lnk - C:\Program Files\Auslogics\Auslogics BoostSpeed\ServiceManager.exe

C:\Documents and Settings\All Users\Menu Start\Programma's\Auslogics\BoostSpeed\Utilities\Auslogics Startup Manager.lnk - C:\Program Files\Auslogics\Auslogics BoostSpeed\StartupManager.exe

C:\Documents and Settings\All Users\Menu Start\Programma's\Auslogics\BoostSpeed\Utilities\Auslogics System Information.lnk - C:\Program Files\Auslogics\Auslogics BoostSpeed\SystemInformation.exe

C:\Documents and Settings\All Users\Menu Start\Programma's\Auslogics\BoostSpeed\Utilities\Auslogics Task Manager.lnk - C:\Program Files\Auslogics\Auslogics BoostSpeed\TaskManager.exe

C:\Documents and Settings\All Users\Menu Start\Programma's\Auslogics\BoostSpeed\Utilities\Auslogics Track Eraser.lnk - C:\Program Files\Auslogics\Auslogics BoostSpeed\TrackEraser.exe

C:\Documents and Settings\All Users\Menu Start\Programma's\Auslogics\BoostSpeed\Utilities\Auslogics Tweak Manager.lnk - C:\Program Files\Auslogics\Auslogics BoostSpeed\TweakManager.exe

C:\Documents and Settings\All Users\Menu Start\Programma's\Auslogics\BoostSpeed\Utilities\Auslogics Uninstall Manager.lnk - C:\Program Files\Auslogics\Auslogics BoostSpeed\UninstallManager.exe

C:\Documents and Settings\All Users\Menu Start\Programma's\Malwarebytes' Anti-Malware\Malwarebytes Anti-Malware Help.lnk - C:\Program Files\Malwarebytes' Anti-Malware\mbam.chm

C:\Documents and Settings\All Users\Menu Start\Programma's\Malwarebytes' Anti-Malware\Malwarebytes Anti-Malware.lnk - C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe

C:\Documents and Settings\All Users\Menu Start\Programma's\Malwarebytes' Anti-Malware\Verwijder Malwarebytes Anti-Malware.lnk - C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe

C:\Documents and Settings\All Users\Menu Start\Programma's\Malwarebytes' Anti-Malware\Tools\Malwarebytes Anti-Malware Chameleon.lnk - C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\chameleon.chm

C:\Documents and Settings\All Users\Menu Start\Programma's\Microsoft Office\Microsoft Office Word 2007.lnk - C:\WINDOWS\Installer\{91120000-002F-0000-0000-0000000FF1CE}\wordicon.exe

C:\Documents and Settings\All Users\Menu Start\Programma's\Skype\Skype.lnk - C:\WINDOWS\Installer\{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}\SkypeIcon.exe

==== shortcuts in Quick Launch ======================

C:\Documents and Settings\JeroenvanDuren\Application Data\Microsoft\Internet Explorer\Quick Launch\De Internet Explorer-browser starten.lnk - C:\Program Files\Internet Explorer\iexplore.exe

==== Reset IE Proxy ======================

Value(s) before fix:

"ProxyEnable"=dword:00000000

Value(s) after fix:

"ProxyEnable"=dword:00000000

==== Silent Runners ======================

"Silent Runners.vbs", revision 69, Silent Runners - Adware? Disinfect, don't reformat!

Output limited to non-default values, except where indicated by "{++}"

Startup items buried in registry:

---------------------------------

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ {++}

ctfmon.exe = C:\WINDOWS\system32\ctfmon.exe [MS]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\

{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\(Default) = (no title provided)

-> {HKLM…CLSID} = Java Plug-In SSV Helper

\InProcServer32\(Default) = C:\Program Files\Java\jre7\bin\ssv.dll [Oracle Corporation]

{9030D464-4C02-4ABF-8ECC-5164760863C6}\(Default) = (no title provided)

-> {HKLM…CLSID} = Windows Live Aanmelden - Help

\InProcServer32\(Default) = C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [MS]

{DBC80044-A445-435b-BC74-9C25C1C588A9}\(Default) = (no title provided)

-> {HKLM…CLSID} = Java Plug-In 2 SSV Helper

\InProcServer32\(Default) = C:\Program Files\Java\jre7\bin\jp2ssv.dll [Oracle Corporation]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\

{88895560-9AA2-1069-930E-00AA0030EBC8} = HyperTerminal-pictogramuitbreiding

-> {HKLM…CLSID} = HyperTerminal Icon Ext

\InProcServer32\(Default) = C:\WINDOWS\system32\hticons.dll [Hilgraeve, Inc.]

{2F603045-309F-11CF-9774-0020AFD0CFF6} = Synaptics Control Panel

-> {HKLM…CLSID} = (no title provided)

\InProcServer32\(Default) = C:\Program Files\Synaptics\SynTP\SynTPCpl.dll [synaptics Incorporated]

{993BE281-6695-4BA5-8A2A-7AACBFAAB69E} = Microsoft Office Metadata Handler

-> {HKLM…CLSID} = Microsoft Office Metadata Handler

\InProcServer32\(Default) = C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll [MS]

{C41662BB-1FA0-4CE0-8DC5-9B7F8279FF97} = Microsoft Office Thumbnail Handler

-> {HKLM…CLSID} = Microsoft Office Thumbnail Handler

\InProcServer32\(Default) = C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\msoshext.dll [MS]

{0563DB41-F538-4B37-A92D-4659049B7766} = WLMD Message Handler

-> {HKLM…CLSID} = CLSID_WLMCMimeFilter

\InProcServer32\(Default) = C:\Program Files\Windows Live\Mail\mailcomm.dll [MS]

{5858A72C-C2B4-4dd7-B2BF-B76DB1BD9F6C} = Microsoft Office OneNote Namespace Extension for Windows Desktop Search

-> {HKLM…CLSID} = Microsoft Office OneNote Namespace Extension for Windows Desktop Search

\InProcServer32\(Default) = C:\PROGRA~1\MICROS~3\Office12\ONFILTER.DLL [MS]

{42042206-2D85-11D3-8CFF-005004838597} = Microsoft Office HTML Icon Handler

-> {HKLM…CLSID} = (no title provided)

\InProcServer32\(Default) = C:\Program Files\Microsoft Office\Office12\msohevi.dll [MS]

{00F33137-EE26-412F-8D71-F84E4C2C6625} = (no title provided)

-> {HKLM…CLSID} = Windows Live Photo Gallery Viewer Autoplay Shim

\InProcServer32\(Default) = C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll [MS]

{00F346CB-35A4-465B-8B8F-65A29DBAB1F6} = Windows Live Photo Gallery Viewer Drop Target Shim

-> {HKLM…CLSID} = Windows Live Photo Gallery Viewer Shim

\InProcServer32\(Default) = C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll [MS]

{00F3712A-CA79-45B4-9E4D-D7891E7F8B9D} = Windows Live Photo Gallery Editor Drop Target Shim

-> {HKLM…CLSID} = Windows Live Photo Gallery Editor Shim

\InProcServer32\(Default) = C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll [MS]

{00F30F90-3E96-453B-AFCD-D71989ECC2C7} = Windows Live Photo Gallery Autoplay Drop Target Shim

-> {HKLM…CLSID} = Windows Live Photo Gallery Viewer Autoplay Shim

\InProcServer32\(Default) = C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll [MS]

{B41DB860-8EE4-11D2-9906-E49FADC173CA} = WinRAR shell extension

-> {HKLM…CLSID} = WinRAR

\InProcServer32\(Default) = C:\Program Files\WinRAR\rarext.dll [Alexander Roshal]

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\

<<!>> igfxcui\DLLName = igfxdev.dll [intel Corporation]

HKLM\SOFTWARE\Classes\PROTOCOLS\Filter\

<<!>> text/xml\CLSID = {807563E5-5146-11D5-A672-00B0D022E945}

-> {HKLM…CLSID} = Microsoft Office InfoPath XML Mime Filter

\InProcServer32\(Default) = C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL [MS]

HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\

<<!>> livecall\CLSID = {828030A1-22C1-4009-854F-8E305202313F}

-> {HKLM…CLSID} = (no title provided)

\InProcServer32\(Default) = C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL [MS]

<<!>> ms-help\CLSID = {314111c7-a502-11d2-bbca-00c04f8ec294}

-> {HKLM…CLSID} = HxProtocol Class

\InProcServer32\(Default) = C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll [MS]

<<!>> ms-itss\CLSID = {0A9007C0-4076-11D3-8789-0000F8105754}

-> {HKLM…CLSID} = Microsoft Infotech Storage Protocol for IE 4.0

\InProcServer32\(Default) = C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [MS]

<<!>> msnim\CLSID = {828030A1-22C1-4009-854F-8E305202313F}

-> {HKLM…CLSID} = (no title provided)

\InProcServer32\(Default) = C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL [MS]

<<!>> skype4com\CLSID = {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D}

-> {HKLM…CLSID} = IEProtocolHandler Class

\InProcServer32\(Default) = C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL [skype Technologies]

<<!>> wlmailhtml\CLSID = {03C514A3-1EFB-4856-9F99-10D7BE1653C0}

-> {HKLM…CLSID} = Windows Live Mail HTML Asynchronous Pluggable Protocol Handler

\InProcServer32\(Default) = C:\Program Files\Windows Live\Mail\mailcomm.dll [MS]

HKLM\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\

WinRAR\(Default) = {B41DB860-8EE4-11D2-9906-E49FADC173CA}

-> {HKLM…CLSID} = WinRAR

\InProcServer32\(Default) = C:\Program Files\WinRAR\rarext.dll [Alexander Roshal]

HKLM\SOFTWARE\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\

MBAMShlExt\(Default) = {57CE581A-0CB6-4266-9CA0-19364C90A0B3}

-> {HKLM…CLSID} = MBAMShlExt Class

\InProcServer32\(Default) = C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll [Malwarebytes Corporation]

HKLM\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\

WinRAR\(Default) = {B41DB860-8EE4-11D2-9906-E49FADC173CA}

-> {HKLM…CLSID} = WinRAR

\InProcServer32\(Default) = C:\Program Files\WinRAR\rarext.dll [Alexander Roshal]

HKLM\SOFTWARE\Classes\Directory\shellex\DragDropHandlers\

WinRAR\(Default) = {B41DB860-8EE4-11D2-9906-E49FADC173CA}

-> {HKLM…CLSID} = WinRAR

\InProcServer32\(Default) = C:\Program Files\WinRAR\rarext.dll [Alexander Roshal]

HKLM\SOFTWARE\Classes\Directory\Background\shellex\ContextMenuHandlers\

igfxcui\(Default) = {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4}

-> {HKLM…CLSID} = GraphicsShellExt Class

\InProcServer32\(Default) = C:\WINDOWS\system32\igfxpph.dll [intel Corporation]

HKLM\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\

MBAMShlExt\(Default) = {57CE581A-0CB6-4266-9CA0-19364C90A0B3}

-> {HKLM…CLSID} = MBAMShlExt Class

\InProcServer32\(Default) = C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll [Malwarebytes Corporation]

WinRAR\(Default) = {B41DB860-8EE4-11D2-9906-E49FADC173CA}

-> {HKLM…CLSID} = WinRAR

\InProcServer32\(Default) = C:\Program Files\WinRAR\rarext.dll [Alexander Roshal]

HKLM\SOFTWARE\Classes\Folder\shellex\DragDropHandlers\

WinRAR\(Default) = {B41DB860-8EE4-11D2-9906-E49FADC173CA}

-> {HKLM…CLSID} = WinRAR

\InProcServer32\(Default) = C:\Program Files\WinRAR\rarext.dll [Alexander Roshal]

Group Policies {GPedit.msc branch and setting}:

-----------------------------------------------

Note: detected settings may not have any effect.

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\

NoDrives = (REG_DWORD) dword:0x00000000

{unrecognized setting}

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\

NoDrives = (REG_DWORD) dword:0x00000000

{unrecognized setting}

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\

disableregistrytools = (REG_DWORD) dword:0x00000000

{User Configuration|Administrative Templates|System|

Prevent access to registry editing tools}

HKCU\Software\Policies\Microsoft\Windows\System\

disablecmd = (REG_DWORD) dword:0x00000000

{User Configuration|Administrative Templates|System|

Disable the command prompt}

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\

DisableStatusMessages = (REG_DWORD) dword:0x00000001

{unrecognized setting}

VerboseStatus = (REG_DWORD) dword:0x00000000

{unrecognized setting}

DisableRegistryTools = (REG_DWORD) dword:0x00000000

{unrecognized setting}

Active Desktop and Wallpaper:

-----------------------------

Active Desktop may be disabled at this entry:

HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState

Displayed if Active Desktop enabled and wallpaper not set by Group Policy:

HKCU\Software\Microsoft\Internet Explorer\Desktop\General\

Wallpaper = C:\WINDOWS\Web\Wallpaper\Eee PC Seashell_2.bmp

Displayed if Active Desktop disabled and wallpaper not set by Group Policy:

HKCU\Control Panel\Desktop\

Wallpaper = C:\WINDOWS\Web\Wallpaper\Eee PC Seashell_2.bmp

Enabled Screen Saver:

---------------------

HKCU\Control Panel\Desktop\

SCRNSAVE.EXE = C:\WINDOWS\system32\ssstars.scr [MS]

Windows Portable Device AutoPlay Handlers

-----------------------------------------

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\

MSLivePhotoAcqHWEventHandler\

Provider = @%ProgramFiles%\Windows Live\Photo Gallery\regres.dll,-10

ProgID = Microsoft.LivePhotoAcqHWEventHandler

HKLM\SOFTWARE\Classes\Microsoft.LivePhotoAcqHWEventHandler\CLSID\(Default) = {3BD0ACD1-71CA-4475-92CC-E0AA0AAF843F}

-> {HKLM…CLSID} = (no title provided)

\LocalServer32\(Default) = C:\Program Files\Windows Live\Photo Gallery\WLXPhotoAcquireWizard.exe [MS]

MSLivePhotoAcquireDropHandler\

Provider = @%ProgramFiles%\Windows Live\Photo Gallery\regres.dll,-10

InvokeProgID = Microsoft.LivePhotoAcqDTShim.1

InvokeVerb = open

HKLM\SOFTWARE\Classes\Microsoft.LivePhotoAcqDTShim.1\shell\open\DropTarget\CLSID = {00F33137-EE26-412F-8D71-F84E4C2C6625}

-> {HKLM…CLSID} = Windows Live Photo Gallery Viewer Autoplay Shim

\InProcServer32\(Default) = C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll [MS]

MSLiveShowPicturesOnArrival\

Provider = @%ProgramFiles%\Windows Live\Photo Gallery\regres.dll,-10

InvokeProgID = Microsoft.Photos.LiveAutoplayShim.1

InvokeVerb = open

HKLM\SOFTWARE\Classes\Microsoft.Photos.LiveAutoplayShim.1\shell\open\DropTarget\CLSID = {00F30F90-3E96-453B-AFCD-D71989ECC2C7}

-> {HKLM…CLSID} = Windows Live Photo Gallery Viewer Autoplay Shim

\InProcServer32\(Default) = C:\Program Files\Windows Live\Photo Gallery\PhotoViewerShim.dll [MS]

MSLiveVideoCameraArrivalCaptureWizard\

Provider = @%ProgramFiles%\Windows Live\Photo Gallery\regres.dll,-10

ProgID = WLXAutoPlayMgr.WLXHWEventHandler

InitCmdLine = WLXVideoAcquireWizard

HKLM\SOFTWARE\Classes\WLXAutoPlayMgr.WLXHWEventHandler\CLSID\(Default) = {9B5C97F6-B3A5-4A6D-8B03-993EC7291A22}

-> {HKLM…CLSID} = WLXWEventHandler Class

\LocalServer32\(Default) = "C:\Program Files\Windows Live\Photo Gallery\WLXVideoCameraAutoPlayManager.exe" [MS]

MSWPDShellNamespaceHandler\

Provider = @%SystemRoot%\System32\WPDShextRes.dll,-501

CLSID = {A55803CC-4D53-404c-8557-FD63DBA95D24}

InitCmdLine =

-> {HKLM…CLSID} = WPDShextAutoplay

\LocalServer32\(Default) = C:\WINDOWS\system32\WPDShextAutoplay.exe [MS]

VLCPlayCDAudioOnArrival\