Delta search

larspc · 15 september 2013

Hallo iedereen,

Kan iemand me helpen met het probleem genaamd 'delta search'? Ik heb deze al verscheidene keren proberen verwijderen maar hij blijft maar terugkeren in zowel google chrome als internet explorer. Ik heb het internet al afgezocht maar geen enkele methode werkt om dit definitief te verwijderen.

Alvast bedankt,

Lars

Maxstar · 15 september 2013

Hallo en welkom op het forum,

Download RSIT van de onderstaande locaties en sla deze op het bureablad op.

Hier staat een beschrijving hoe u kunt kijken of u een 32 of 64 bit versie van Windows heeft.

RSIT 32 bit (RSIT.exe)
RSIT 64 bit (RSITx64.exe)

Dubbelklik op RSIT.exe om de tool te starten.

Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
Vervolgens wordt de "Disclaimer of warranty" getoond, klik vervolgens op "Continue"
Wanneer de tool gereed is wordt er een kladblok bestand genaamd "Log" geopend.
Plaats de inhoud hiervan in het volgende bericht.

larspc · 15 september 2013

Al bedankt voor het snelle antwoord, dit is de Log file-inhoud:

Logfile of random's system information tool 1.09 (written by random/random)

Run by Gebruiker at 2013-09-15 10:34:26

Microsoft Windows 7 Home Premium Service Pack 1

System drive C: has 309 GB (81%) free of 382 GB

Total RAM: 8191 MB (78% free)

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 10:35:30, on 15/09/2013

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v10.0 (10.00.9200.16686)

Boot mode: Normal

Running processes:

C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe

C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe

C:\Users\Gebruiker\AppData\Local\FilesFrog Update Checker\update_checker.exe

C:\Windows\SysWOW64\rundll32.exe

C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

C:\Program Files (x86)\ASUS\AI Manager\AsShellApplication.exe

C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe

C:\Program Files (x86)\Common Files\Isabel\isa_kbc_certupdate.exe

C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe

C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe

C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe

C:\Windows\SysWOW64\schtasks.exe

C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe

C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe

C:\Program Files\trend micro\Gebruiker.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

R3 - URLSearchHook: UsProvider Class - {539F76FD-084E-4858-86D5-62F02F54AE86} - C:\Program Files (x86)\Minibar\Minibar.dll

O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll

O2 - BHO: Speed Analysis 2 - {18DBB6CE-3148-4FEC-B481-103CB3290427} - C:\Program Files (x86)\Speed Analysis 2\ScriptHost.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll

O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Zula Games - {A9337080-7CBF-4E3E-80C1-3867BEDD88E0} - C:\Program Files (x86)\Zula Games\ScriptHost.dll

O2 - BHO: MinibarBHO - {AA74D58F-ACD0-450D-A85E-6C04B171C044} - C:\Program Files (x86)\Minibar\Minibar.dll

O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL

O2 - BHO: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.22.0\bh\delta.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll

O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

O3 - Toolbar: Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files (x86)\Delta\delta\1.8.22.0\deltaTlbr.dll

O4 - HKLM\..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r

O4 - HKLM\..\Run: [RunAIShell] C:\Program Files (x86)\ASUS\AI Manager\AsShellApplication.exe

O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe

O4 - HKLM\..\Run: [switchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin

O4 - HKLM\..\Run: [isaKbcCertUpdate] C:\Program Files (x86)\Common Files\Isabel\isa_kbc_certupdate.exe

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

O4 - HKCU\..\Run: [AdobeBridge] "C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe" -stealth

O4 - HKCU\..\Run: [sDP] C:\Users\Gebruiker\AppData\Local\FilesFrog Update Checker\update_checker.exe /auto

O4 - HKCU\..\Run: [AppsHat] C:\Users\Gebruiker\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe

O4 - HKCU\..\Run: [NTRedirect] C:\Windows\SysWOW64\rundll32.exe "C:\Users\Gebruiker\AppData\Roaming\BabSolution\Shared\enhancedNT.dll",Run

O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

O9 - Extra button: Visit AppsHat.com - {AAA38851-3CFF-475F-B5E0-720D3645E4A5} - C:\Program Files (x86)\Minibar\Minibar.dll

O9 - Extra button: Toon of verberg HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O15 - Trusted Zone: http://cbc-pdf.cbc.be

O15 - Trusted Zone: CBC

O15 - Trusted Zone: http://www.cbccorporate.be

O15 - Trusted Zone: ?SOB - Úvodní stránka

O15 - Trusted Zone: http://www.csob.sk

O15 - Trusted Zone: http://col.isabel.be

O15 - Trusted Zone: http://www.isabel.be

O15 - Trusted Zone: http://www.beta.isabel.be

O15 - Trusted Zone: http://col.isabel.eu

O15 - Trusted Zone: http://www.isabel.eu

O15 - Trusted Zone: http://www.beta.isabel.eu

O15 - Trusted Zone: http://kbc-pdf.kbc.be

O15 - Trusted Zone: KBC

O15 - Trusted Zone: KBC Asset Management

O15 - Trusted Zone: http://www.kbcam.com

O15 - Trusted Zone: http://www.kbcbankingforbusiness.com

O15 - Trusted Zone: http://www.kbccorporates.com

O15 - Trusted Zone: http://www.kbcfi.com

O15 - Trusted Zone: http://www.kbcmerchantbanking.com

O15 - Trusted Zone: http://www.kh.hu

O15 - Trusted Zone: http://cbc-pdf.cbc.be (HKLM)

O15 - Trusted Zone: CBC (HKLM)

O15 - Trusted Zone: http://www.cbccorporate.be (HKLM)

O15 - Trusted Zone: ?SOB - Úvodní stránka (HKLM)

O15 - Trusted Zone: http://www.csob.sk (HKLM)

O15 - Trusted Zone: http://col.isabel.be (HKLM)

O15 - Trusted Zone: http://www.isabel.be (HKLM)

O15 - Trusted Zone: http://www.beta.isabel.be (HKLM)

O15 - Trusted Zone: http://col.isabel.eu (HKLM)

O15 - Trusted Zone: http://www.isabel.eu (HKLM)

O15 - Trusted Zone: http://www.beta.isabel.eu (HKLM)

O15 - Trusted Zone: http://kbc-pdf.kbc.be (HKLM)

O15 - Trusted Zone: KBC (HKLM)

O15 - Trusted Zone: KBC Asset Management (HKLM)

O15 - Trusted Zone: http://www.kbcam.com (HKLM)

O15 - Trusted Zone: http://www.kbcbankingforbusiness.com (HKLM)

O15 - Trusted Zone: http://www.kbccorporates.com (HKLM)

O15 - Trusted Zone: http://www.kbcfi.com (HKLM)

O15 - Trusted Zone: http://www.kbcmerchantbanking.com (HKLM)

O15 - Trusted Zone: http://www.kh.hu (HKLM)

O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

O20 - AppInit_DLLs: c:\progra~3\bitguard\261673~1.238\{c16c1~1\bitguard.dll

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)

O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe

O23 - Service: AMD Reservation Manager - Advanced Micro Devices - C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe

O23 - Service: BitGuard - Unknown owner - C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe

O23 - Service: Device Handle Service - ASUSTeK Computer Inc. - C:\Windows\SysWOW64\AsHookDevice.exe

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: FLEXnet Licensing Service 64 - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe

O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--

End of file - 13177 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe

%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16

wininit.exe

%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16

C:\Windows\system32\services.exe

C:\Windows\system32\lsass.exe

C:\Windows\system32\lsm.exe

winlogon.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k RPCSS

"C:\Program Files\Microsoft Security Client\MsMpEng.exe"

C:\Windows\system32\atiesrxx.exe

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k NetworkService

atieclxx

C:\Windows\System32\spoolsv.exe

taskeng.exe {2E92C770-4946-4383-996C-EF40DE2189D0}

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"

"C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe"

C:\Windows\SysWOW64\AsHookDevice.exe

"taskhost.exe"

taskeng.exe {B5775916-2923-41B1-BC4F-419324752B65}

"C:\Windows\system32\Dwm.exe"

C:\Windows\Explorer.EXE

C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt

C:\Windows\System32\svchost.exe -k HPZ12

"C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe" -b

C:\Windows\System32\svchost.exe -k HPZ12

C:\Windows\system32\svchost.exe -k imgsvc

"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"

"C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe" /launchService

WLIDSvcM.exe 2392

"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey

"C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe" -stealth

C:\Windows\system32\svchost.exe -k HPService

"C:\Program Files\Microsoft Security Client\NisSrv.exe"

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

"C:\Users\Gebruiker\AppData\Local\FilesFrog Update Checker\update_checker.exe" /auto

"C:\Windows\SysWOW64\rundll32.exe" "C:\Users\Gebruiker\AppData\Roaming\BabSolution\Shared\enhancedNT.dll",Run

"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe"

"C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe" -r

"C:\Program Files (x86)\ASUS\AI Manager\AsShellApplication.exe"

"C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe"

"C:\Program Files (x86)\Common Files\Isabel\isa_kbc_certupdate.exe"

"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-6a94f475-8231-4cf8-bed2-88cfbb932414 -SystemEventPortName:HostProcess-8c60cc99-ab19-4a78-8ba7-16fbe8aa0152 -IoCancelEventPortName:HostProcess-a78ded5e-58f9-4592-ad30-1281367038ac -NonStateChangingEventPortName:HostProcess-501f2761-2bae-4035-a01a-3f98e59bc21f -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:a097bdf9-4b14-4399-b584-43196adf6b26 -DeviceGroupId:

C:\Windows\system32\SearchIndexer.exe /Embedding

"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe" -CtxID "#Hewlett-Packard#HP Photosmart B110 series#1339163070" -Startup

"C:\Program Files\Windows Media Player\wmpnetwk.exe"

"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe" -Embedding

"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-a5895919-9c3f-408f-93ba-3ca5722a5840 -SystemEventPortName:HostProcess-77491f78-7a7f-46c6-888f-ac8ed687c1bc -IoCancelEventPortName:HostProcess-a6ebf9bc-c2cf-4683-93ce-428e306b36ec -NonStateChangingEventPortName:HostProcess-1df2c019-8e59-4857-a2e5-867846f46f79 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:598fdac5-a12c-4793-8085-7fa16ffceb50 -DeviceGroupId:WpdFsGroup

C:\Windows\System32\svchost.exe -k LocalServicePeerNet

"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe" -Embedding

C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe

"C:\Windows\system32\schtasks.exe" /create /tn "BitGuard" /ru "SYSTEM" /sc minute /mo 1 /tr "C:\Windows\system32\sc.exe start BitGuard" /st 00:00:00

"C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe" /PROTECT

\??\C:\Windows\system32\conhost.exe "1289440098276926230-267271934797633993-2104358240968320036-151306407-2142753399

"C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe"

C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}

"C:\Windows\system32\wuauclt.exe"

"C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe" -auto -critical

C:\Windows\system32\sppsvc.exe

"C:\Users\Gebruiker\Desktop\RSITx64 (1).exe"

C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

C:\Windows\tasks\PC Performer_DEFAULT.job

C:\Windows\tasks\PC Performer_UPDATES.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]

Java Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-06-17 553376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-22 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]

Office Document Cache Handler - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL [2010-12-21 689040]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

Java Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-06-17 211360]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]

HP Print Enhancer - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-10-22 328248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DBB6CE-3148-4FEC-B481-103CB3290427}]

Speed Analysis 2 - C:\Program Files (x86)\Speed Analysis 2\ScriptHost.dll [2013-05-30 382272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]

Java Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-04-04 462752]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-22 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A9337080-7CBF-4E3E-80C1-3867BEDD88E0}]

Zula Games - C:\Program Files (x86)\Zula Games\ScriptHost.dll [2013-07-01 382272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA74D58F-ACD0-450D-A85E-6C04B171C044}]

MinibarBHO - C:\Program Files (x86)\Minibar\Minibar.dll [2013-02-26 331264]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]

Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-12-21 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}]

delta Helper Object - C:\Program Files (x86)\Delta\delta\1.8.22.0\bh\delta.dll [2013-07-23 311536]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

Java Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-04-04 171424]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]

HP Smart BHO Class - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-10-22 517688]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]

{82E1477C-B154-48D3-9891-33D83C26BCD3} - Delta Toolbar - C:\Program Files (x86)\Delta\delta\1.8.22.0\deltaTlbr.dll [2013-07-23 300952]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2013-01-27 1281512]

"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"AdobeBridge"=C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe [2010-03-09 11989960]

"SDP"=C:\Users\Gebruiker\AppData\Local\FilesFrog Update Checker\update_checker.exe [2013-01-31 201808]

"AppsHat"=C:\Users\Gebruiker\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe []

"NTRedirect"=C:\Windows\SysWOW64\rundll32.exe [2009-07-14 44544]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]

"HDAudDeck"=C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2010-10-22 2489456]

"RunAIShell"=C:\Program Files (x86)\ASUS\AI Manager\AsShellApplication.exe [2009-12-23 232064]

"HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2011-05-10 49208]

"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

"AdobeCS5ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992]

"IsaKbcCertUpdate"=C:\Program Files (x86)\Common Files\Isabel\isa_kbc_certupdate.exe [2012-10-15 1085528]

"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-05-11 958576]

"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-03-12 253816]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup

HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]

"SecurityProviders"=credssp.dll, schannel.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"ConsentPromptBehaviorAdmin"=0

"ConsentPromptBehaviorUser"=3

"EnableLUA"=0

"EnableUIADesktopToggle"=0

"PromptOnSecureDesktop"=0

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDriveTypeAutoRun"=145

"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]

"vidc.mrle"=msrle32.dll

"vidc.msvc"=msvidc32.dll

"msacm.imaadpcm"=imaadp32.acm

"msacm.msg711"=msg711.acm

"msacm.msgsm610"=msgsm32.acm

"msacm.msadpcm"=msadp32.acm

"midimapper"=midimap.dll

"wavemapper"=msacm32.drv

"vidc.uyvy"=msyuv.dll

"vidc.yuy2"=msyuv.dll

"vidc.yvyu"=msyuv.dll

"vidc.iyuv"=iyuv_32.dll

"vidc.i420"=iyuv_32.dll

"vidc.yvu9"=tsbyuv.dll

"msacm.l3acm"=C:\Windows\System32\l3codeca.acm

"wave"=wdmaud.drv

"midi"=wdmaud.drv

"mixer"=wdmaud.drv

"aux"=wdmaud.drv

"wave1"=wdmaud.drv

"midi1"=wdmaud.drv

"mixer1"=wdmaud.drv

"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

.scr - open - C:\Windows\system32\notepad.exe "%1"

.scr - install -

.scr - config -

======List of files/folders created in the last 3 months======

2013-09-15 10:34:26 ----D---- C:\rsit

2013-09-15 10:34:26 ----D---- C:\Program Files\trend micro

2013-09-15 09:10:36 ----D---- C:\ProgramData\BitGuard

2013-09-12 13:59:43 ----A---- C:\Windows\SYSWOW64\ieui.dll

2013-09-12 13:59:42 ----A---- C:\Windows\system32\ieui.dll

2013-09-12 13:59:41 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe

2013-09-12 13:59:41 ----A---- C:\Windows\SYSWOW64\iesysprep.dll

2013-09-12 13:59:41 ----A---- C:\Windows\SYSWOW64\iesetup.dll

2013-09-12 13:59:41 ----A---- C:\Windows\SYSWOW64\iernonce.dll

2013-09-12 13:59:41 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe

2013-09-12 13:59:41 ----A---- C:\Windows\system32\iesysprep.dll

2013-09-12 13:59:41 ----A---- C:\Windows\system32\iesetup.dll

2013-09-12 13:59:41 ----A---- C:\Windows\system32\iernonce.dll

2013-09-12 13:59:41 ----A---- C:\Windows\system32\ie4uinit.exe

2013-09-12 13:59:40 ----A---- C:\Windows\SYSWOW64\iertutil.dll

2013-09-12 13:59:40 ----A---- C:\Windows\system32\iertutil.dll

2013-09-12 13:59:39 ----A---- C:\Windows\SYSWOW64\msfeeds.dll

2013-09-12 13:59:39 ----A---- C:\Windows\system32\msfeeds.dll

2013-09-12 13:59:38 ----A---- C:\Windows\SYSWOW64\jscript.dll

2013-09-12 13:59:38 ----A---- C:\Windows\system32\jscript9.dll

2013-09-12 13:59:38 ----A---- C:\Windows\system32\jscript.dll

2013-09-12 13:59:37 ----A---- C:\Windows\SYSWOW64\urlmon.dll

2013-09-12 13:59:37 ----A---- C:\Windows\SYSWOW64\jscript9.dll

2013-09-12 13:59:37 ----A---- C:\Windows\system32\urlmon.dll

2013-09-12 13:59:35 ----A---- C:\Windows\SYSWOW64\wininet.dll

2013-09-12 13:59:35 ----A---- C:\Windows\SYSWOW64\jsproxy.dll

2013-09-12 13:59:35 ----A---- C:\Windows\system32\wininet.dll

2013-09-12 13:59:35 ----A---- C:\Windows\system32\jsproxy.dll

2013-09-12 13:59:34 ----A---- C:\Windows\SYSWOW64\ieframe.dll

2013-09-12 13:59:34 ----A---- C:\Windows\system32\ieframe.dll

2013-09-12 13:59:32 ----A---- C:\Windows\system32\mshtml.dll

2013-09-12 13:59:30 ----A---- C:\Windows\SYSWOW64\mshtml.dll

2013-09-12 12:31:57 ----A---- C:\Windows\system32\drivers\ataport.sys

2013-09-12 12:23:07 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe

2013-09-12 12:23:06 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe

2013-09-12 12:23:06 ----A---- C:\Windows\SYSWOW64\ntdll.dll

2013-09-12 12:23:06 ----A---- C:\Windows\system32\ntoskrnl.exe

2013-09-12 12:23:06 ----A---- C:\Windows\system32\ntdll.dll

2013-09-12 12:23:06 ----A---- C:\Windows\system32\KernelBase.dll

2013-09-12 12:23:05 ----A---- C:\Windows\SYSWOW64\KernelBase.dll

2013-09-12 12:23:05 ----A---- C:\Windows\SYSWOW64\kernel32.dll

2013-09-12 12:23:05 ----A---- C:\Windows\system32\wow64win.dll

2013-09-12 12:23:05 ----A---- C:\Windows\system32\wow64cpu.dll

2013-09-12 12:23:05 ----A---- C:\Windows\system32\wow64.dll

2013-09-12 12:23:05 ----A---- C:\Windows\system32\winsrv.dll

2013-09-12 12:23:05 ----A---- C:\Windows\system32\smss.exe

2013-09-12 12:23:05 ----A---- C:\Windows\system32\kernel32.dll

2013-09-12 12:23:05 ----A---- C:\Windows\system32\csrsrv.dll

2013-09-12 12:23:05 ----A---- C:\Windows\system32\conhost.exe

2013-09-12 12:23:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-12 12:23:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll

2013-09-12 12:23:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll

2013-09-12 12:23:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-12 12:23:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-12 12:23:04 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll

2013-09-12 12:23:04 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2013-09-12 12:23:04 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2013-09-12 12:23:04 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2013-09-12 12:23:04 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-12 12:23:04 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2013-09-12 12:23:04 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2013-09-12 12:23:04 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2013-09-12 12:23:04 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2013-09-12 12:23:04 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2013-09-12 12:23:04 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2013-09-12 12:23:04 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2013-09-12 12:23:04 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2013-09-12 12:23:04 ----A---- C:\Windows\SYSWOW64\wow32.dll

2013-09-12 12:23:04 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll

2013-09-12 12:23:04 ----A---- C:\Windows\system32\ntvdm64.dll

2013-09-12 12:23:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll

2013-09-12 12:23:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-12 12:23:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-12 12:23:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll

2013-09-12 12:23:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll

2013-09-12 12:23:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-12 12:23:03 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-12 12:23:03 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2013-09-12 12:23:03 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2013-09-12 12:23:03 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2013-09-12 12:23:03 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2013-09-12 12:23:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll

2013-09-12 12:23:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-12 12:23:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll

2013-09-12 12:23:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll

2013-09-12 12:23:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll

2013-09-12 12:23:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-12 12:23:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll

2013-09-12 12:23:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll

2013-09-12 12:23:02 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll

2013-09-12 12:23:02 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2013-09-12 12:23:02 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2013-09-12 12:23:02 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2013-09-12 12:23:02 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2013-09-12 12:23:02 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2013-09-12 12:23:02 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2013-09-12 12:23:02 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2013-09-12 12:23:02 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2013-09-12 12:23:02 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2013-09-12 12:23:02 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2013-09-12 12:23:01 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll

2013-09-12 12:23:01 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll

2013-09-12 12:23:01 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll

2013-09-12 12:23:01 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2013-09-12 12:23:01 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll

2013-09-12 12:23:01 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll

2013-09-12 12:23:01 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2013-09-12 12:23:01 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2013-09-12 12:23:01 ----A---- C:\Windows\SYSWOW64\setup16.exe

2013-09-12 12:23:01 ----A---- C:\Windows\SYSWOW64\instnm.exe

2013-09-12 12:23:00 ----A---- C:\Windows\SYSWOW64\user.exe

2013-09-12 12:23:00 ----A---- C:\Windows\SYSWOW64\apisetschema.dll

2013-09-12 12:23:00 ----A---- C:\Windows\system32\apisetschema.dll

2013-09-12 12:22:56 ----A---- C:\Windows\system32\win32k.sys

2013-09-12 12:22:51 ----A---- C:\Windows\system32\shell32.dll

2013-09-12 12:22:50 ----A---- C:\Windows\SYSWOW64\shell32.dll

2013-09-12 12:22:50 ----A---- C:\Windows\SYSWOW64\shdocvw.dll

2013-09-12 12:22:50 ----A---- C:\Windows\system32\shdocvw.dll

2013-09-03 19:59:14 ----D---- C:\Program Files (x86)\Google

2013-08-14 13:23:40 ----D---- C:\Windows\system32\MRT

2013-08-14 08:13:03 ----A---- C:\Windows\SYSWOW64\wintrust.dll

2013-08-14 08:13:03 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll

2013-08-14 08:13:03 ----A---- C:\Windows\SYSWOW64\cryptnet.dll

2013-08-14 08:13:03 ----A---- C:\Windows\SYSWOW64\crypt32.dll

2013-08-14 08:13:03 ----A---- C:\Windows\system32\wintrust.dll

2013-08-14 08:13:03 ----A---- C:\Windows\system32\cryptsvc.dll

2013-08-14 08:13:03 ----A---- C:\Windows\system32\cryptnet.dll

2013-08-14 08:13:03 ----A---- C:\Windows\system32\crypt32.dll

2013-08-14 08:12:14 ----A---- C:\Windows\SYSWOW64\tzres.dll

2013-08-14 08:12:14 ----A---- C:\Windows\system32\tzres.dll

2013-08-14 08:12:09 ----A---- C:\Windows\SYSWOW64\WMVDECOD.DLL

2013-08-14 08:12:09 ----A---- C:\Windows\system32\WMVDECOD.DLL

2013-08-14 08:12:08 ----A---- C:\Windows\SYSWOW64\rpcrt4.dll

2013-08-14 08:12:08 ----A---- C:\Windows\system32\rpcrt4.dll

2013-08-14 08:12:02 ----A---- C:\Windows\system32\drivers\tssecsrv.sys

2013-08-14 08:12:01 ----A---- C:\Windows\system32\drivers\tcpip.sys

2013-08-03 21:42:39 ----D---- C:\Users\Gebruiker\AppData\Roaming\PerformerSoft

2013-08-03 21:42:14 ----D---- C:\ProgramData\Tarma Installer

2013-08-03 21:42:13 ----D---- C:\Users\Gebruiker\AppData\Roaming\zulagames

2013-08-03 21:42:08 ----D---- C:\Program Files (x86)\Zula Games

2013-08-03 21:41:52 ----D---- C:\Program Files (x86)\Video Performer

2013-08-03 21:41:49 ----D---- C:\Program Files (x86)\Delta

2013-08-03 21:41:45 ----D---- C:\Users\Gebruiker\AppData\Roaming\Delta

2013-08-03 21:41:38 ----D---- C:\ProgramData\BrowserDefender

2013-08-03 21:41:21 ----D---- C:\Users\Gebruiker\AppData\Roaming\BabSolution

2013-08-03 21:40:44 ----D---- C:\Users\Gebruiker\AppData\Roaming\Mozilla

2013-08-03 21:40:43 ----D---- C:\Users\Gebruiker\AppData\Roaming\SpeedAnalysis2

2013-08-03 21:40:40 ----D---- C:\Program Files (x86)\Speed Analysis 2

2013-08-03 21:40:26 ----D---- C:\Users\Gebruiker\AppData\Roaming\Babylon

2013-08-03 21:40:26 ----D---- C:\ProgramData\IBUpdaterService

2013-08-03 21:40:26 ----D---- C:\ProgramData\Babylon

2013-08-03 21:40:24 ----D---- C:\Users\Gebruiker\AppData\Roaming\File Scout

2013-08-03 21:39:11 ----AD---- C:\ProgramData\TEMP

2013-08-03 21:34:55 ----D---- C:\Program Files (x86)\Minibar

2013-07-12 16:39:44 ----A---- C:\Windows\SYSWOW64\qedit.dll

2013-07-12 16:39:44 ----A---- C:\Windows\system32\qedit.dll

2013-07-12 16:34:52 ----A---- C:\Windows\SYSWOW64\DWrite.dll

2013-07-12 16:34:52 ----A---- C:\Windows\system32\DWrite.dll

2013-06-17 18:10:22 ----A---- C:\Windows\system32\deployJava1.dll

2013-06-17 18:10:21 ----A---- C:\Windows\system32\npDeployJava1.dll

2013-06-17 18:10:21 ----A---- C:\Windows\system32\javaws.exe

2013-06-17 18:10:17 ----A---- C:\Windows\system32\WindowsAccessBridge-64.dll

2013-06-17 18:10:17 ----A---- C:\Windows\system32\javaw.exe

2013-06-17 18:10:17 ----A---- C:\Windows\system32\java.exe

2013-06-17 18:10:08 ----D---- C:\Program Files\Java

2013-06-17 18:09:47 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll

2013-06-17 18:09:47 ----A---- C:\Windows\SYSWOW64\javaw.exe

2013-06-17 18:09:47 ----A---- C:\Windows\SYSWOW64\java.exe

2013-06-17 16:46:16 ----D---- C:\Users\Gebruiker\AppData\Roaming\Malwarebytes

2013-06-17 16:45:51 ----D---- C:\ProgramData\Malwarebytes

2013-06-17 16:36:11 ----SHD---- C:\$RECYCLE.BIN

2013-06-17 16:33:30 ----A---- C:\ComboFix.txt

2013-06-17 16:23:52 ----A---- C:\Windows\zip.exe

2013-06-17 16:23:52 ----A---- C:\Windows\SWREG.exe

2013-06-17 16:23:52 ----A---- C:\Windows\sed.exe

2013-06-17 16:23:52 ----A---- C:\Windows\PEV.exe

2013-06-17 16:23:52 ----A---- C:\Windows\NIRCMD.exe

2013-06-17 16:23:52 ----A---- C:\Windows\MBR.exe

2013-06-17 16:23:52 ----A---- C:\Windows\grep.exe

2013-06-17 16:23:51 ----A---- C:\Windows\SWSC.exe

2013-06-17 16:21:47 ----D---- C:\Qoobox

2013-06-17 16:21:31 ----D---- C:\Windows\erdnt

2013-06-17 16:17:50 ----A---- C:\AdwCleaner[s1].txt

======List of files/folders modified in the last 3 months======

2013-09-15 10:34:38 ----D---- C:\Windows\Prefetch

2013-09-15 10:34:26 ----RD---- C:\Program Files

2013-09-15 10:33:21 ----D---- C:\Windows\Temp

2013-09-15 09:20:40 ----D---- C:\Windows\system32\config

2013-09-15 09:10:42 ----D---- C:\Windows\system32\Tasks

2013-09-15 09:10:36 ----D---- C:\ProgramData

2013-09-14 09:28:34 ----D---- C:\Windows\rescache

2013-09-13 15:29:44 ----D---- C:\Windows\system32\catroot2

2013-09-12 21:50:10 ----D---- C:\Windows\Microsoft.NET

2013-09-12 21:49:51 ----RSD---- C:\Windows\assembly

2013-09-12 17:58:28 ----D---- C:\Windows\winsxs

2013-09-12 17:56:03 ----D---- C:\Program Files (x86)\Internet Explorer

2013-09-12 17:56:03 ----AD---- C:\Windows\SysWOW64

2013-09-12 17:56:02 ----D---- C:\Windows\System32

2013-09-12 17:56:02 ----D---- C:\Program Files\Internet Explorer

2013-09-12 17:56:01 ----D---- C:\Windows\AppPatch

2013-09-12 17:56:00 ----D---- C:\Windows\SYSWOW64\nl-NL

2013-09-12 17:56:00 ----D---- C:\Windows\system32\nl-NL

2013-09-12 17:55:58 ----D---- C:\Windows\system32\DriverStore

2013-09-12 17:55:58 ----D---- C:\Windows\system32\drivers

2013-09-12 13:59:57 ----D---- C:\Windows\system32\catroot

2013-09-12 13:59:29 ----SHD---- C:\Windows\Installer

2013-09-12 13:59:28 ----D---- C:\ProgramData\Microsoft Help

2013-09-12 13:54:44 ----SHD---- C:\System Volume Information

2013-09-12 09:05:42 ----A---- C:\Windows\system32\MRT.exe

2013-09-04 11:50:17 ----RD---- C:\Program Files (x86)

2013-09-03 19:59:17 ----D---- C:\Windows\Tasks

2013-09-01 10:53:33 ----D---- C:\Users\Gebruiker\AppData\Roaming\Dropbox

2013-08-27 14:08:07 ----D---- C:\Windows\inf

2013-08-27 14:08:07 ----A---- C:\Windows\system32\PerfStringBackup.INI

2013-08-26 19:54:18 ----D---- C:\Users\Gebruiker\AppData\Roaming\vlc

2013-08-15 17:59:48 ----SD---- C:\Users\Gebruiker\AppData\Roaming\Microsoft

2013-08-07 22:14:27 ----D---- C:\Windows\system32\FxsTmp

2013-08-04 11:59:45 ----D---- C:\Windows\system32\NDF

2013-07-13 13:22:27 ----D---- C:\Program Files\Windows Defender

2013-07-13 13:22:27 ----D---- C:\Program Files (x86)\Windows Defender

2013-07-13 13:22:25 ----D---- C:\Program Files\Windows Journal

2013-07-12 16:19:03 ----D---- C:\Program Files\Microsoft Silverlight

2013-07-12 16:19:02 ----D---- C:\Program Files (x86)\Microsoft Silverlight

2013-06-22 14:06:16 ----D---- C:\Windows\system32\wdi

2013-06-19 14:58:24 ----A---- C:\Windows\system32\roboot64.exe

2013-06-17 18:12:13 ----D---- C:\Program Files (x86)\Common Files

2013-06-17 18:11:13 ----D---- C:\ProgramData\Adobe

2013-06-17 18:11:11 ----D---- C:\Program Files (x86)\Adobe

2013-06-17 18:10:27 ----D---- C:\Windows\SYSWOW64\Adobe

2013-06-17 18:09:47 ----D---- C:\Program Files (x86)\Java

2013-06-17 16:37:52 ----AD---- C:\Windows

2013-06-17 16:31:49 ----A---- C:\Windows\system.ini

2013-06-17 16:31:45 ----D---- C:\Windows\system32\drivers\etc

2013-06-17 16:28:23 ----D---- C:\Windows\SYSWOW64\drivers

2013-06-17 15:53:20 ----D---- C:\ProgramData\Trend Micro

2013-06-17 15:47:01 ----D---- C:\Users\Gebruiker\AppData\Roaming\Systweak

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\drivers\AtiPcie.sys [2009-05-05 16440]

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2013-01-20 230320]

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]

R1 AsIO;AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [2010-08-24 13440]

R1 AsUpIO;AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [2009-07-06 13368]

R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]

R2 ASInsHelp;ASInsHelp; \??\C:\Windows\SysWow64\drivers\AsInsHelp64.sys [2008-01-04 11832]

R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2013-01-20 130008]

R3 amdiox64;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]

R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-01-26 9085952]

R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-01-26 299520]

R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2010-11-17 115216]

R3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]

R3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-21 19968]

R3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]

R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\drivers\ASACPI.sys [2009-07-16 15416]

R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]

R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2009-12-22 38456]

R3 usbscan;Stuurprogramma voor USB-scanner; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]

R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2010-10-01 1349232]

R3 WinUsb;WinUsb-stuurprogramma; C:\Windows\system32\DRIVERS\WinUSB.sys [2010-11-21 41984]

S3 ahcix64s;ahcix64s; C:\Windows\system32\drivers\ahcix64s.sys [2009-11-10 234040]

S3 asmthub3;ASMedia USB3 Hub Service; C:\Windows\system32\drivers\asmthub3.sys [2011-02-24 126952]

S3 asmtxhci;ASMEDIA XHCI Service; C:\Windows\system32\drivers\asmtxhci.sys [2011-02-24 389608]

S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]

S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []

S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-09-23 48488]

S3 mv91xx;mv91xx; C:\Windows\system32\drivers\mv91xx.sys [2010-07-02 293416]

S3 netr28x;Ralink 802.11n Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr28x.sys [2009-05-20 702976]

S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\drivers\nusb3hub.sys [2010-12-10 80384]

S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\drivers\nusb3xhc.sys [2010-12-10 181248]

S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]

S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]

S3 WSDPrintDevice;WSD-ondersteuning voor afdrukken via UMB; C:\Windows\system32\DRIVERS\WSDPrint.sys [2009-07-14 23040]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-11 65640]

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-01-26 203776]

R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2011-01-26 354304]

R2 AMD Reservation Manager;AMD Reservation Manager; C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [2010-06-17 194496]

R2 BitGuard;BitGuard; C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe [2013-09-13 3029472]

R2 Device Handle Service;Device Handle Service; C:\Windows\SysWOW64\AsHookDevice.exe [2009-12-23 203392]

R2 hpqddsvc;HP CUE DeviceDiscovery-service; C:\Windows\system32\svchost.exe [2009-07-14 27136]

R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2009-07-14 27136]

R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-01-27 22056]

R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]

R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]

R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-22 2286976]

R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 27136]

R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2013-01-27 379360]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-03 116648]

S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2012-11-16 1436424]

S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2010-09-23 1493352]

S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-03 116648]

S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]

S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]

S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-02-23 1255736]

S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]

-----------------EOF-----------------

- - - Updated - - -

Al bedankt voor het snelle antwoord, dit is de Log file-inhoud:

Logfile of random's system information tool 1.09 (written by random/random)

Run by Gebruiker at 2013-09-15 10:34:26

Microsoft Windows 7 Home Premium Service Pack 1

System drive C: has 309 GB (81%) free of 382 GB

Total RAM: 8191 MB (78% free)

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 10:35:30, on 15/09/2013

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v10.0 (10.00.9200.16686)

Boot mode: Normal

Running processes:

C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe

C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe

C:\Users\Gebruiker\AppData\Local\FilesFrog Update Checker\update_checker.exe

C:\Windows\SysWOW64\rundll32.exe

C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

C:\Program Files (x86)\ASUS\AI Manager\AsShellApplication.exe

C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe

C:\Program Files (x86)\Common Files\Isabel\isa_kbc_certupdate.exe

C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe

C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe

C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe

C:\Windows\SysWOW64\schtasks.exe

C:\ProgramData\BitGuard\2.6.1673.238\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BitGuard.exe

C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe

C:\Program Files\trend micro\Gebruiker.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141