krijg java niet meer geinstaleerd

kape · 3 september 2013

Download Zoek.zip naar het bureaublad.

Wanneer Internet Explorer of een andere browser of virusscanner melding geeft dat dit bestand onveilig zou zijn kun je negeren, dit is namelijk een onterechte waarschuwing.
Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe (hier en hier) kan je lezen hoe je dat doet.
Klik met de rechtermuisknop op Zoek.zip en klik op de optie "Alles uitpakken".
Dubbelklik op Zoek.exe om de tool te starten.
Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
Kopieer nu onderstaande code en plak die in het grote invulvenster:
Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.

chromelook; 
firefoxlook; 
startupall; 
filesrcm;
[font=&amp]{30F9B915-B755-4826-820B-08FBA6BD249D};c[/font]
C:\Program Files (x86)\ConduitEngine:fs
{65ca59ee-9920-4d7f-8c41-bfa12403261a};c
C:\Program Files (x86)\Softonic_Netherlands;fs
{07BA1DA9-F501-4796-8728-74D1B91A6CD5}:c
C:\Program Files (x86)\PokerStars.EU;fs
{08B0E5C0-4FCB-11CF-AAA5-00401C608501};c
{3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF};c
C:\Program Files (x86)\PokerStars;fs
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43};c
C:\Program Files (x86)\Java;fs
C:\Program Files (x86)\Java;u
{C1AF5FA5-852C-4C90-812E-A7F75E011D87};c
C:\Program Files (x86)\Delta;fs
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{65ca59ee-9920-4d7f-8c41-bfa12403261a}];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}];r64
C:\Windows\SYSWOW64\javaws.exe;f
C:\Windows\SYSWOW64\javaw.exe;f
C:\Windows\SYSWOW64\java.exe;f
C:\Users\WimS58\AppData\Roaming\BabSolution;fs
C:\ProgramData\BrowserDefender;fs
C:\Users\WimS58\AppData\Roaming\Babylon;fs
C:\Program Files (x86)\49Uninstall Utility Chest.dll;f
C:\Program Files (x86)\49res.dll;f
C:\Program Files (x86)\Java;fs
C:\Program Files (x86)\Ask.com;fs

Klik op de knop "Options" en vink nu de onderstaande opties aan.
HijackThis Log
Firefox Defaults
Reset Chrome
IE Defaults
Auto Clean
Klik nu op de knop "Run script".
Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
Mocht na de herstart geen logje verschijnen, start zoek.exe dan opnieuw, de log verschijnt dan alsnog.
Post nu de inhoud van het geopende logje in het volgende bericht.

3 september 2013 aangepast door kape

wims58 · 3 september 2013

Zoek.exe Version 4.0.0.4 Updated 31-08-2013

Tool run by WimS58 on di 03-09-2013 at 16:50:00,60.

Microsoft® Windows Vista™ Home Premium 6.0.6002 Service Pack 2 x64

Running in: Normal Mode Internet Access Detected

Launched: C:\Users\WimS58\Documents\Downloads\zoek.exe [script inserted] [Checkboxes used]

==== System Restore Info ======================

3-9-2013 16:53:57 Zoek.exe System Restore Point Created Succesfully.

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-2815828994-977446599-2095655197-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D} deleted successfully

HKEY_USERS\S-1-5-21-2815828994-977446599-2095655197-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D} deleted successfully

HKEY_USERS\S-1-5-21-2815828994-977446599-2095655197-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{65ca59ee-9920-4d7f-8c41-bfa12403261a} deleted successfully

HKEY_USERS\S-1-5-21-2815828994-977446599-2095655197-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{65ca59ee-9920-4d7f-8c41-bfa12403261a} deleted successfully

HKEY_USERS\S-1-5-21-2815828994-977446599-2095655197-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} deleted successfully

HKEY_USERS\S-1-5-21-2815828994-977446599-2095655197-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} deleted successfully

HKEY_USERS\S-1-5-21-2815828994-977446599-2095655197-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} deleted successfully

HKEY_USERS\S-1-5-21-2815828994-977446599-2095655197-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} deleted successfully

HKEY_USERS\S-1-5-21-2815828994-977446599-2095655197-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} deleted successfully

HKEY_USERS\S-1-5-21-2815828994-977446599-2095655197-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} deleted successfully

HKEY_USERS\S-1-5-21-2815828994-977446599-2095655197-1000\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} deleted successfully

HKEY_USERS\S-1-5-21-2815828994-977446599-2095655197-1000\Software\Microsoft\Internet Explorer\SearchScopes\{84dc9f6c-c9a5-4c64-ab67-d6ef60f963c8} deleted successfully

HKEY_USERS\S-1-5-21-2815828994-977446599-2095655197-1000\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} deleted successfully

HKEY_USERS\S-1-5-21-2815828994-977446599-2095655197-1000\Software\Microsoft\Internet Explorer\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420} deleted successfully

HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D} deleted successfully

HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{65ca59ee-9920-4d7f-8c41-bfa12403261a} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{65ca59ee-9920-4d7f-8c41-bfa12403261a} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extensions\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} deleted successfully

HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{08B0E5C0-4FCB-11CF-AAA5-00401C608501} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extensions\{3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} deleted successfully

HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} deleted successfully

HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-2815828994-977446599-2095655197-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{65ca59ee-9920-4d7f-8c41-bfa12403261a} deleted successfully

HKEY_LOCAL_MACHINE\software\Wow6432Node\microsoft\internet explorer\urlsearchhooks\{65ca59ee-9920-4d7f-8c41-bfa12403261a} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{65ca59ee-9920-4d7f-8c41-bfa12403261a} deleted successfully

==== Deleting Services ======================

==== FireFox Fix ======================

Deleted from C:\Users\WimS58\AppData\Roaming\Mozilla\Firefox\Profiles\ajlozxva.default\prefs.js:

user_pref("browser.startup.homepage", "http://ad.nl/");

user_pref("browser.search.useDBForOrder", "false");

Added to C:\Users\WimS58\AppData\Roaming\Mozilla\Firefox\Profiles\ajlozxva.default\prefs.js:

user_pref("browser.startup.homepage", "http://www.google.com");

user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");

user_pref("browser.newtab.url", "http://www.google.com/");

user_pref("browser.search.defaultengine", "Google");

user_pref("browser.search.defaultenginename", "Google");

user_pref("browser.search.selectedEngine", "Google");

user_pref("browser.search.order.1", "Google");

user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");

user_pref("browser.search.suggest.enabled", true);

user_pref("browser.search.useDBForOrder", true);

ProfilePath: C:\Users\WimS58\AppData\Roaming\Mozilla\Firefox\Profiles\ajlozxva.default

---- Lines delta removed from prefs.js ----

user_pref("extensions.delta.admin", false);

user_pref("extensions.delta.aflt", "babsst");

user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");

user_pref("extensions.delta.autoRvrt", "false");

user_pref("extensions.delta.dfltLng", "nl");

user_pref("extensions.delta.excTlbr", false);

user_pref("extensions.delta.ffxUnstlRst", true);

user_pref("extensions.delta.id", "2a3de73600000000000000248cd71858");

user_pref("extensions.delta.instlDay", "15934");

user_pref("extensions.delta.instlRef", "sst");

user_pref("extensions.delta.newTab", false);

user_pref("extensions.delta.prdct", "delta");

user_pref("extensions.delta.prtnrId", "delta");

user_pref("extensions.delta.rvrt", "false");

user_pref("extensions.delta.smplGrp", "none");

user_pref("extensions.delta.tlbrId", "base");

user_pref("extensions.delta.tlbrSrchUrl", "");

user_pref("extensions.delta.vrsn", "1.8.24.5");

user_pref("extensions.delta.vrsni", "1.8.24.5");

user_pref("extensions.delta.vrsnTs", "1.8.24.516:58:47");

user_pref("extensions.delta_i.babExt", "");

user_pref("extensions.delta_i.babTrack", "affID=123626&tt=150813_206&tsp=4977");

user_pref("extensions.delta_i.srcExt", "ss");

---- Lines delta modified from prefs.js ----

---- Lines delta removed from user.js ----

user_pref("extensions.delta.tlbrSrchUrl", "");

user_pref("extensions.delta.id", "2a3de73600000000000000248cd71858");

user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");

user_pref("extensions.delta.instlDay", "15934");

user_pref("extensions.delta.vrsn", "1.8.24.5");

user_pref("extensions.delta.vrsni", "1.8.24.5");

user_pref("extensions.delta.vrsnTs", "1.8.24.516:58:47");

user_pref("extensions.delta.prtnrId", "delta");

user_pref("extensions.delta.prdct", "delta");

user_pref("extensions.delta.aflt", "babsst");

user_pref("extensions.delta.smplGrp", "none");

user_pref("extensions.delta.tlbrId", "base");

user_pref("extensions.delta.instlRef", "sst");

user_pref("extensions.delta.dfltLng", "nl");

user_pref("extensions.delta.excTlbr", false);

user_pref("extensions.delta.ffxUnstlRst", true);

user_pref("extensions.delta.admin", false);

user_pref("extensions.delta_i.babTrack", "affID=123626&tt=150813_206&tsp=4977");

user_pref("extensions.delta_i.babExt", "");

user_pref("extensions.delta_i.srcExt", "ss");

user_pref("extensions.delta.autoRvrt", "false");

user_pref("extensions.delta.rvrt", "false");

user_pref("extensions.delta.newTab", false);

---- FireFox user.js and prefs.js backups ----

user_03-09-2013_1659_.backup

prefs_03-09-2013_1659_.backup

==== Registry Fix Code x64 ======================

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{65ca59ee-9920-4d7f-8c41-bfa12403261a}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

==== Deleting Files \ Folders ======================

"C:\Windows\SYSWOW64\javaws.exe" deleted

"C:\Windows\SYSWOW64\javaw.exe" deleted

"C:\Windows\SYSWOW64\java.exe" deleted

"C:\Program Files (x86)\49Uninstall Utility Chest.dll" deleted

"C:\Program Files (x86)\49res.dll" deleted

"C:\user.js" deleted

"C:\Program Files (x86)\Mozilla Firefox\user.js" deleted

"C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml" deleted

"C:\Users\WimS58\AppData\Local\funmoods-speeddial.crx" deleted

"C:\windows\SysNative\Tasks\EPUpdater" deleted

"C:\user.js" deleted

"C:\Users\WimS58\AppData\Roaming\Mozilla\Firefox\Profiles\ajlozxva.default\bProtector_extensions.sqlite" deleted

"C:\Program Files (x86)\Softonic_Netherlands" deleted

"C:\Program Files (x86)\PokerStars.EU" deleted

"C:\Program Files (x86)\PokerStars" deleted

"C:\Program Files (x86)\Java" deleted

"C:\Program Files (x86)\Delta" deleted

"C:\Users\WimS58\AppData\Roaming\BabSolution" deleted

"C:\ProgramData\BrowserDefender" deleted

"C:\Users\WimS58\AppData\Roaming\Babylon" deleted

"C:\Program Files (x86)\Java" deleted

"C:\Program Files (x86)\Ask.com" deleted

"C:\Program Files (x86)\Mozilla Firefox\extensions\ffxtlbr@babylon.com" deleted

"C:\Program Files (x86)\Softonic_Netherlands" deleted

"C:\Program Files (x86)\Delta" deleted

"C:\Program Files (x86)\DAEMON Tools Toolbar" deleted

"C:\Program Files (x86)\DealPly" deleted

"C:\Program Files (x86)\1ClickDownload" deleted

"C:\Program Files (x86)\Ask.com" deleted

"C:\Program Files (x86)\Conduit" deleted

"C:\Program Files (x86)\ConduitEngine" deleted

"C:\found.000" deleted

"C:\Users\WimS58\AppData\Roaming\LimeWirePlus" deleted

"C:\Users\WimS58\AppData\Roaming\ParetoLogic" deleted

"C:\Users\WimS58\AppData\Roaming\DriverCure" deleted

"C:\Users\WimS58\AppData\Roaming\BabSolution" deleted

"C:\Users\WimS58\AppData\Roaming\Babylon" deleted

"C:\Users\WimS58\AppData\Roaming\SearchProtect" deleted

"C:\Users\WimS58\AppData\Roaming\Registry Mechanic" deleted

"C:\Users\WimS58\AppData\Roaming\Systweak" deleted

"C:\Users\WimS58\AppData\Roaming\OpenCandy" deleted

"C:\ProgramData\Ask" deleted

"C:\ProgramData\APN" deleted

"C:\ProgramData\BrowserDefender" deleted

"C:\ProgramData\ParetoLogic" deleted

"C:\ProgramData\Babylon" deleted

"C:\ProgramData\Trymedia" deleted

"C:\Users\WimS58\AppData\Local\CRE" deleted

"C:\Users\WimS58\AppData\Local\APN" deleted

"C:\Users\WimS58\AppData\Local\PackageAware" deleted

"C:\Users\WimS58\AppData\Local\Conduit" deleted

"C:\Users\WimS58\AppData\LocalLow\IAC" deleted

"C:\Users\WimS58\AppData\LocalLow\Delta" deleted

"C:\Users\WimS58\AppData\LocalLow\PriceGong" deleted

"C:\Users\WimS58\AppData\LocalLow\Conduit" deleted

"C:\Users\WimS58\AppData\LocalLow\ConduitEngine" deleted

==== Files Recently Created / Modified ======================

====== C:\Windows ====

====== C:\Users\WimS58\AppData\Local\Temp ====

====== C:\Windows\SysWOW64 =====

2013-08-28 20:00:07 F5D37E543AC46F84A54945EB01F4A5AE 65536 --sha-w- C:\Windows\SysWOW64\???{e3858f49-0fe9-11e3-8917-00248cd71858}.TM.blf

2013-08-28 20:00:07 59071590099D21DD439896592338BF95 524288 --sha-w- C:\Windows\SysWOW64\???{e3858f49-0fe9-11e3-8917-00248cd71858}.TMContainer00000000000000000002.regtrans-ms

2013-08-28 20:00:07 3017E8C80042E0B84FAE1B12F15D34AF 524288 --sha-w- C:\Windows\SysWOW64\???{e3858f49-0fe9-11e3-8917-00248cd71858}.TMContainer00000000000000000001.regtrans-ms

2013-08-28 20:00:06 6275250093DE3AD387DF28A0E273EA55 262144 ----a-w- C:\Windows\SysWOW64\???

2013-08-28 10:52:41 351D111CD5C5479946EB724DBBB1275E 96168 -c--a-w- C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2013-08-28 08:26:28 C43A71C2845C88D7E5A8A26D3850BDFB 1548288 -c--a-w- C:\Windows\SysWOW64\WMVDECOD.DLL

2013-08-27 08:24:46 DCF9CB891215207A1E8D066E5F33ECA8 262144 ----a-w- C:\Windows\SysWOW64\18

2013-08-27 08:24:46 8366B50C70ADF7EE0BB20D45DC39A9BB 65536 --sha-w- C:\Windows\SysWOW64\18{db98b7fe-0eec-11e3-80d7-00248cd71858}.TM.blf

2013-08-27 08:24:46 59071590099D21DD439896592338BF95 524288 --sha-w- C:\Windows\SysWOW64\18{db98b7fe-0eec-11e3-80d7-00248cd71858}.TMContainer00000000000000000002.regtrans-ms

2013-08-27 08:24:46 3C2E630759B2EAB80D9B74511A895513 524288 --sha-w- C:\Windows\SysWOW64\18{db98b7fe-0eec-11e3-80d7-00248cd71858}.TMContainer00000000000000000001.regtrans-ms

2013-08-20 21:59:55 758B93B094961684844A6116718F47E8 29984 -c--a-w- C:\Windows\SysWOW64\uxtuneup.dll

====== C:\Windows\SysWOW64\drivers =====

====== C:\Windows\Sysnative =====

2013-08-28 08:26:28 EBF1CB95B164D774269BF2C526F0DDFA 1706496 -c--a-w- C:\Windows\Sysnative\WMVDECOD.DLL

2013-08-27 07:47:16 1AF2301A49B4C70A17C514B9DA438B22 453816 -c--a-w- C:\Windows\Sysnative\FNTCACHE.DAT

2013-08-20 21:59:51 B841703219F31950DC6F171354BD219C 37664 -c--a-w- C:\Windows\Sysnative\uxtuneup.dll

====== C:\Windows\Sysnative\drivers =====

2013-08-14 12:43:54 B2388462329ACD17AF50D8701E0C1B18 29184 -c--a-w- C:\Windows\Sysnative\drivers\tssecsrv.sys

2013-08-14 12:43:43 EA8623BDD511A1ACD18DA4883860ADDE 1417664 -c--a-w- C:\Windows\Sysnative\drivers\tcpip.sys

2013-08-14 12:43:42 24D7686A4A0323FB987654BD228C1F39 40448 -c--a-w- C:\Windows\Sysnative\drivers\tcpipreg.sys

2013-08-11 17:56:10 60CF1A914AB3FACF28863CA728C3C090 16944 -c--a-w- C:\Windows\Sysnative\drivers\GdPhyMem.sys

====== C:\Windows\Tasks ======

2013-08-24 08:03:41 5410896840B53F7E2C6A41EEA3C706AF 2770 -c--a-w- C:\Windows\Sysnative\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013

2013-08-15 09:48:06 116693114562F9372CA8E036441E7EB2 3690 -c--a-w- C:\Windows\Sysnative\Tasks\Adobe-online actualiseringsprogramma

2013-08-15 09:48:02 9917325EBD2FF98E53F7A1B037A76853 3674 -c--a-w- C:\Windows\Sysnative\Tasks\HP-Online updateprogramma

====== C:\Windows\Temp ======

======= C:\Program Files =====

2013-09-02 18:02:17 -------- dc----w- C:\Program Files\trend micro

======= C:\Program Files (x86) =====

2013-08-27 23:03:56 -------- dc----w- C:\Program Files (x86)\Trend Micro

2013-08-25 06:27:37 -------- dc----w- C:\Program Files (x86)\Online Games Manager

2013-08-17 07:38:35 -------- dc----w- C:\Program Files (x86)\Mozilla Maintenance Service

2013-08-15 22:54:54 -------- dc----w- C:\Program Files (x86)\TuneUp Utilities 2013

2013-08-07 18:25:37 -------- dc----w- C:\Program Files (x86)\QuickTime

======= C: =====

====== C:\Users\WimS58\AppData\Roaming ======

2013-08-27 11:48:14 153ECE6C88307B6867A29CB66FA01FC5 137744 -c--a-w- C:\users\WimS58\AppData\Local\GDIPFONTCACHEV1.DAT

2013-08-15 09:31:29 -------- dc----w- C:\users\WimS58\AppData\Roaming\TuneUp Software

====== C:\Users\WimS58 ======

2013-09-02 18:01:05 662C39FC1E27131551D557862CEC47F0 935175 -c--a-w- C:\Users\WimS58\Downloads\RSITx64.exe

2013-08-31 10:53:15 6BE4A22726CD2C884F9B8D93CD560CC4 1974352 -c--a-w- C:\Users\WimS58\Desktop\VisualBoyAdvance.exe

2013-08-28 10:49:15 CB3D6925F815C86B1BF6CE41BA3EEDB2 903080 -c--a-w- C:\Users\WimS58\Downloads\jxpiinstall(9).exe

2013-08-25 06:26:17 D406A2083F3419F66D327A62C631343E 1765296 -c--a-w- C:\Users\WimS58\Downloads\Installer_BigCityAdventureTokyo_NL.exe

2013-08-24 19:42:19 507C7F50A1D3B50AB9C015180B626D33 31714216 -c--a-w- C:\Users\WimS58\Downloads\jre-7u25-windows-i586.exe

2013-08-24 18:36:34 CB3D6925F815C86B1BF6CE41BA3EEDB2 903080 -c--a-w- C:\Users\WimS58\Downloads\jxpiinstall(8).exe

2013-08-24 18:34:00 CB3D6925F815C86B1BF6CE41BA3EEDB2 903080 -c--a-w- C:\Users\WimS58\Downloads\jxpiinstall(7).exe

2013-08-23 19:41:00 CB3D6925F815C86B1BF6CE41BA3EEDB2 903080 -c--a-w- C:\Users\WimS58\Downloads\jxpiinstall(6).exe

2013-08-15 22:55:15 -------- dc----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2013

2013-08-15 22:52:40 -------- dcsh--w- C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}

2013-08-15 09:29:29 -------- dc----w- C:\ProgramData\TuneUp Software

2013-08-15 09:29:13 -------- dcsh--w- C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}

2013-08-08 14:02:49 94434C1B3AA1F85D9AFF437FD5F96D6A 98304 -c--a-w- C:\Users\WimS58\adreslijst greetz.xls

2013-08-07 18:25:46 -------- dc----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime

====== C: exe-files ==

=== C: other files ==

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]

"WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter"

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /detectMem"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]

"WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter"

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /detectMem"

[HKEY_USERS\S-1-5-21-2815828994-977446599-2095655197-1000\Software\Microsoft\Windows\CurrentVersion\Run]

"Akamai NetSession Interface"="C:\Users\WimS58\AppData\Local\Akamai\netsession_win.exe "

"swg"="C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

[HKEY_USERS\S-1-5-21-2815828994-977446599-2095655197-1001\Software\Microsoft\Windows\CurrentVersion\Run]

"WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter"

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /detectMem"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"GDFirewallTray"="C:\Program Files (x86)\G Data\TotalProtection\Firewall\GDFirewallTray.exe"

"G Data AntiVirus Tray"="C:\Program Files (x86)\G Data\TotalProtection\AVKTray\AVKTray.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"Akamai NetSession Interface"="C:\Users\WimS58\AppData\Local\Akamai\netsession_win.exe "

"swg"="C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

==== Startup Registry Disabled ======================

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run-]

"Steam"="\"C:\\Program Files (x86)\\Steam\\Steam.exe\" -silent"

"Spotify Web Helper"="\"C:\\Users\\WimS58\\AppData\\Roaming\\Spotify\\Data\\SpotifyWebHelper.exe\""

"swg"="\"C:\\Program Files (x86)\\Google\\GoogleToolbarNotifier\\GoogleToolbarNotifier.exe\""

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run-]

"HP Software Update"="\"C:\\Program Files (x86)\\HP\\HP Software Update\\HPWuSchd2.exe\""

"Adobe ARM"="\"C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe\""

"APSDaemon"="\"C:\\Program Files (x86)\\Common Files\\Apple\\Apple Application Support\\APSDaemon.exe\""

"Corel File Shell Monitor"="\"C:\\Program Files (x86)\\Corel\\Corel MediaOne\\CorelIOMonitor.exe\""

"SunJavaUpdateSched"="\"C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe\""

==== Startup Registry Disabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg]

"command"="C:\\Program Files (x86)\\Samsung\\Kies\\External\\FirmwareUpdate\\KiesPDLR.exe"

"hkey"="HKCU"

"item"=""

"key"="Software\\Microsoft\\Windows\\CurrentVersion\\Run"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\iTunesHelper]

"command"="\"C:\\Program Files (x86)\\iTunes\\iTunesHelper.exe\""

"hkey"="HKLM"

"item"="iTunesHelper"

"key"="Software\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\KiesPreload]

"command"="C:\\Program Files (x86)\\Samsung\\Kies\\Kies.exe /preload"

"hkey"="HKCU"

"item"="KiesPreload"

"key"="Software\\Microsoft\\Windows\\CurrentVersion\\Run"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\KiesTrayAgent]

"command"="\"C:\\Program Files (x86)\\Samsung\\Kies\\KiesTrayAgent.exe\""

"hkey"="HKLM"

"item"="KiesTrayAgent"

"key"="Software\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\QuickTime Task]

"command"="\"C:\\Program Files (x86)\\QuickTime\\QTTask.exe\" -atboottime"

"hkey"="HKLM"

"item"="QuickTime Task"

"key"="Software\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Utility Chest Search Scope Monitor]

"command"="\"C:\\PROGRA~2\\UTILIT~2\\bar\\1.bin\\49srchmn.exe\" /m=2 /w /h"

"hkey"="HKLM"

"item"="Utility Chest Search Scope Monitor"

"key"="Software\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\UtilityChest_49 Browser Plugin Loader]

"command"="C:\\PROGRA~2\\UTILIT~2\\bar\\1.bin\\49brmon.exe"

"hkey"="HKLM"

"item"="UtilityChest_49 Browser Plugin Loader"

"key"="Software\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run-]

"RTHDVCPL"="C:\\Program Files\\Realtek\\Audio\\HDA\\RAVCpl64.exe -s"

==== Startup Folders ======================

2013-08-24 08:08:07 2002 -c--a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk

==== Task Scheduler Jobs ======================

C:\Windows\tasks\Adobe Flash Player Updater.job --a--c--- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [21-08-2013 16:31]

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a--c--- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [06-08-2009 15:33]

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a--c--- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [06-08-2009 15:33]

C:\Windows\tasks\HP Photo Creations Communicator.job --a--c--- C:\ProgramData\HP Photo Creations\Communicator.exe [28-01-2013 10:54]

==== Firefox Extensions ======================

ProfilePath: C:\Users\WimS58\AppData\Roaming\Mozilla\Firefox\Profiles\ajlozxva.default

- DoNotTrackMe - %ProfilePath%\extensions\donottrackplus@abine.com

- <--Block site--> - %ProfilePath%\extensions\{dd3d7613-0246-469d-bc65-2a3cc1668adc}

- Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

AppDir: C:\Program Files (x86)\Mozilla Firefox

- Undetermined - %AppDir%\extensions\staged

==== Firefox Plugins ======================

Profilepath: C:\Users\WimS58\AppData\Roaming\Mozilla\Firefox\Profiles\ajlozxva.default

D7324EB1EDCB8990F8522DE0311359E9 - C:\Windows\SysWOW64\npDeployJava1.dll - Java Deployment Toolkit 7.0.250.17

0C8597DBC74AAF5179471BA013E3C6B4 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll - Shockwave Flash

AE7B288233C212C62CD544BF768C45E6 - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1203133.dll - Shockwave for Director / Shockwave for Director

472DAEA6EEE84240DEA132C95C57EB68 - C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll - RocketLife Secure Plug-In Layer

C7CEC8A86E977C56023FE849A960C804 - C:\ProgramData\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll - Zylom Plugin

AB87EEFFD18F2BAAFC274E7075EA6C67 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll - Windows Presentation Foundation / Windows Presentation Foundation

DFCAB29E8FD38F95650CC1E203E8D318 - C:\Windows\SysWOW64\npmproxy.dll - Microsoft® Windows® Operating System

==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions

jddgoigfhpjafhnbgndmoeaokikjfomp - C:\Users\WimS58\AppData\Local\CRE\jddgoigfhpjafhnbgndmoeaokikjfomp.crx[]

jplinpmadfkdgipabgcdchbdikologlh - C:\Program Files (x86)\1ClickDownload\1click12.crx[]

HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions

fdloijijlkoblmigdofommgnheckmaki - No path found[]

jddgoigfhpjafhnbgndmoeaokikjfomp - C:\Users\WimS58\AppData\Local\CRE\jddgoigfhpjafhnbgndmoeaokikjfomp.crx[]

Ask Toolbar - WimS58 - Default\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo

==== Chrome Fix ======================

C:\Users\WimS58\AppData\Local\Google\Chrome\User Data\Default\Extensions\jddgoigfhpjafhnbgndmoeaokikjfomp deleted successfully

C:\Users\WimS58\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_fdloijijlkoblmigdofommgnheckmaki_0.localstorage deleted successfully

C:\Users\WimS58\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo deleted successfully

==== Set IE to Default ======================

Old Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="http://www.msn.com/"

"Backup.Old.Start Page"="http://www.msn.com/"

"Search Bar"="http://www.google.com/ie"

"Search Page"="http://www.google.com"

"Default_Search_URL"="http://www.google.com/ie"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]

@="http://www.google.com/search?q=%s"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]

"SearchAssistant"="http://www.google.com/ie"

"Default_Search_URL"="http://www.google.com/ie"

New Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"

"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"

"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"

"Start Page"="http://www.msn.com/"

"Backup.Old.Start Page"="http://www.msn.com/"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]

"(Default)"="http://search.msn.com/results.asp?q=%s"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]

"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"

"SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

"DefaultScope"="{6C96C2A3-20DC-8FB5-3A23-7EC89EB1E29C}"

{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"

{6C96C2A3-20DC-8FB5-3A23-7EC89EB1E29C} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7ADRA_nlNL336"

==== Reset Google Chrome ======================

C:\users\WimS58\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-2815828994-977446599-2095655197-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully

HKEY_USERS\S-1-5-21-2815828994-977446599-2095655197-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully

HKEY_USERS\S-1-5-21-2815828994-977446599-2095655197-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DBC80044-A445-435B-BC74-9C25C1C588A9} deleted successfully

HKEY_USERS\S-1-5-21-2815828994-977446599-2095655197-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DBC80044-A445-435B-BC74-9C25C1C588A9} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully

HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{DBC80044-A445-435B-BC74-9C25C1C588A9} deleted successfully

HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{DBC80044-A445-435B-BC74-9C25C1C588A9} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-2815828994-977446599-2095655197-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{32099AAC-C132-4136-9E9A-4E364A424E17} deleted successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\jddgoigfhpjafhnbgndmoeaokikjfomp deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\jplinpmadfkdgipabgcdchbdikologlh deleted successfully

HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions\fdloijijlkoblmigdofommgnheckmaki deleted successfully

HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions\jddgoigfhpjafhnbgndmoeaokikjfomp deleted successfully

==== HijackThis Entries ======================

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Bing

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

O1 - Hosts: ::1 localhost

O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

O4 - HKLM\..\Run: [GDFirewallTray] "C:\Program Files (x86)\G Data\TotalProtection\Firewall\GDFirewallTray.exe"

O4 - HKLM\..\Run: [G Data AntiVirus Tray] "C:\Program Files (x86)\G Data\TotalProtection\AVKTray\AVKTray.exe"

O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\WimS58\AppData\Local\Akamai\netsession_win.exe"

O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-21-2815828994-977446599-2095655197-1001\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'UpdatusUser')

O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200

O9 - Extra button: PokerStars.eu - {07BA1DA9-F501-4796-8728-74D1B91A6CD5} - C:\Program Files (x86)\PokerStars.EU\PokerStarsUpdate.exe (file missing)

O9 - Extra button: Toon of verberg HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O16 - DPF: {0067DBFC-A752-458C-AE6E-B9C7E63D4824} (Apparaatdetectie) - http://www.logitech.com/devicedetector/plugins/LogitechDeviceDetection32.cab

O16 - DPF: {0E8D0700-75DF-11D3-8B4A-0008C7450C4A} (DjVuCtl Class) - http://www.caminova.net/en/downloads/getmodule.aspx?lang=en

O16 - DPF: {34DC6011-88B5-4EA9-BA7A-DC7B4F4437FE} (JordanUploader Class) - http://foto.hema.nl/ips-opdata/layout/hema/objects/jordan.cab

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

O16 - DPF: {D83C1BD1-DCBB-11D4-9425-0050BF33FA6E} (CycloScopeLite Control) - http://www.cyclomedia.nl/download/components/CycloScopeLite.cab

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: G Data AntiVirus Proxy (AVKProxy) - G Data Software AG - C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe

O23 - Service: G Data Scheduler (AVKService) - G Data Software AG - C:\Program Files (x86)\G Data\TotalProtection\AVK\AVKService.exe

O23 - Service: G Data Bestandssysteembewaker (AVKWCtl) - G Data Software AG - C:\Program Files (x86)\G DATA\TotalProtection\AVK\AVKWCtlX64.exe

O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing)

O23 - Service: FLEXnet Licensing Service 64 - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe

O23 - Service: G Data Backup Service (GDBackupSvc) - G Data Software AG - C:\Program Files (x86)\G Data\TotalProtection\AVKBackup\AVKBackupService.exe

O23 - Service: G Data Personal Firewall (GDFwSvc) - G Data Software AG - C:\Program Files (x86)\G DATA\TotalProtection\Firewall\GDFwSvcx64.exe

O23 - Service: G Data Scanner (GDScan) - G Data Software AG - C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe

O23 - Service: G Data Tuner Service (GDTunerSvc) - G Data Software AG - C:\Program Files (x86)\G Data\TotalProtection\AVKTuner\AVKTunerService.exe

O23 - Service: Google Updateservice (gupdate1ca169a770432c5) (gupdate1ca169a770432c5) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe

O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)

O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

O23 - Service: Online Games Manager (ogmservice) - RealNetworks, Inc. - C:\Program Files (x86)\Online Games Manager\ogmservice.exe

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe

O23 - Service: G Data Datasafeservice (TSNxGService) - G Data Software - C:\Program Files (x86)\G Data\TotalProtection\TSNxG\TSNxGService.exe

O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\WimS58\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully

C:\Users\WimS58\AppData\Local\Temp\acro_rd_dir\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\WimS58\AppData\Local\Temp\Low\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\WimS58\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\serviceprofiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\serviceprofiles\LocalService\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\serviceprofiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\WimS58\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

C:\users\WimS58\AppData\Local\Mozilla\Firefox\Profiles\ajlozxva.default\Cache emptied successfully

==== Empty Chrome Cache ======================

C:\users\WimS58\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied

C:\Users\WimS58\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\WimS58\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found

==== EOF on di 03-09-2013 at 17:15:06,02 ======================

kape · 3 september 2013

Dubbelklik op Zoek.exe om de tool te starten.

Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
Kopieer nu onderstaande code en plak die in het grote invulvenster:
Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.

chromelook; 
firefoxlook; 
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Utility Chest Search Scope Monitor];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\UtilityChest_49 Browser Plugin Loader];r64
C:\Users\WimS58\Downloads\jxpiinstall(9).exe;f
C:\Users\WimS58\Downloads\jre-7u25-windows-i586.exe;f
C:\Users\WimS58\Downloads\jxpiinstall(8).exe;f
C:\Users\WimS58\Downloads\jxpiinstall(7).exe;f
C:\Users\WimS58\Downloads\jxpiinstall(6).exe;f
C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F};fs
C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936};fs

Klik op de knop "Options" en vink nu de onderstaande opties aan.
Auto Clean
Klik nu op de knop "Run script".
Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
Mocht na de herstart geen logje verschijnen, start zoek.exe dan opnieuw, de log verschijnt dan alsnog.
Post nu de inhoud van het geopende logje in het volgende bericht.

wims58 · 3 september 2013

Zoek.exe Version 4.0.0.4 Updated 31-08-2013

Tool run by WimS58 on di 03-09-2013 at 18:54:44,73.

Microsoft® Windows Vista™ Home Premium 6.0.6002 Service Pack 2 x64

Running in: Normal Mode Internet Access Detected

Launched: C:\Users\WimS58\Documents\Downloads\zoek.exe [script inserted] [Checkboxes used]

==== Older Logs ======================

C:\zoek-results03-09-2013-1715.log 42476 bytes

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== Registry Fix Code x64 ======================

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Utility Chest Search Scope Monitor]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\UtilityChest_49 Browser Plugin Loader]

==== Deleting Files \ Folders ======================

"C:\Users\WimS58\Downloads\jxpiinstall(9).exe" deleted

"C:\Users\WimS58\Downloads\jre-7u25-windows-i586.exe" deleted

"C:\Users\WimS58\Downloads\jxpiinstall(8).exe" deleted

"C:\Users\WimS58\Downloads\jxpiinstall(7).exe" deleted

"C:\Users\WimS58\Downloads\jxpiinstall(6).exe" deleted

"C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}" deleted

"C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}" deleted