trage pc

snowym · 25 november 2013

hallo, ik heb voor mijn laptop ook al een topic geopend en antwoord gekregen (naar tevredenheid, maar is geloof ik nog niet helemaal afgesloten).

Hierbij de log van onze trage pc

Logfile of random's system information tool 1.09 (written by random/random)

Run by Maaike at 2013-11-25 15:11:12

Microsoft Windows 7 Home Premium Service Pack 1

System drive C: has 51 GB (17%) free of 292 GB

Total RAM: 3070 MB (49% free)

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 15:11:26, on 25-11-2013

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v10.0 (10.00.9200.16736)

Boot mode: Normal

Running processes:

C:\Windows\system32\taskhost.exe

C:\Windows\system32\Dwm.exe

C:\Windows\system32\taskeng.exe

C:\Windows\Explorer.EXE

C:\Program Files\IObit\Smart Defrag 2\SmartDefrag.exe

C:\Program Files\ESET\ESET Smart Security\egui.exe

C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe

C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Program Files\VoipBuster.com\VoipBuster\voipbuster.exe

C:\Users\Maaike\AppData\Local\Google\Update\GoogleUpdate.exe

C:\Program Files\Samsung\Kies\Kies.exe

C:\Users\Maaike\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Windows\system32\SearchProtocolHost.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Users\Maaike\Downloads\RSIT.exe

C:\Program Files\trend micro\Maaike.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

R3 - URLSearchHook: (no name) - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - (no file)

O1 - Hosts: ::1 localhost

O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll

O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll

O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll

O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll

O3 - Toolbar: (no name) - !{2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)

O3 - Toolbar: (no name) - {3d86a75b-cb6b-4764-885d-ca6336f04ba2} - (no file)

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice

O4 - HKLM\..\Run: [Nvtmru] "C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

O4 - HKCU\..\Run: [] C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe Run

O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

O4 - HKCU\..\Run: [VoipBuster] "C:\Program Files\VoipBuster.com\VoipBuster\voipbuster.exe" -nosplash -minimized

O4 - HKCU\..\Run: [Google Update] "C:\Users\Maaike\AppData\Local\Google\Update\GoogleUpdate.exe" /c

O4 - HKCU\..\Run: [Advanced SystemCare 6] "C:\Program Files\IObit\Advanced SystemCare 6\ASCTray.exe" /AutoStart

O4 - HKCU\..\Run: [KiesPreload] C:\Program Files\Samsung\Kies\Kies.exe /preload

O4 - HKCU\..\Run: [KiesAirMessage] C:\Program Files\Samsung\Kies\KiesAirMessage.exe -startup

O4 - HKCU\..\RunOnce: [shockwave Updater] C:\Windows\system32\Adobe\Shockwave 11\SwHelper_1151601.exe -Update -1151601 -"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; GTB6.5; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET CLR 3.5.21022; Media Center PC 5.0; SLCC1; Tablet PC 2.0; InfoPath.2; OfficeLiveConnector.1.5; OfficeLivePatch.1.3; .NET4.0C)" -"http://www.fortis.nl/dnn_site/Home.aspx"

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-21-4223957993-2297506579-676778014-1000\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'Laurens')

O4 - HKUS\S-1-5-21-4223957993-2297506579-676778014-1000\..\RunOnce: [shockwave Updater] C:\Windows\system32\Adobe\Shockwave 11\SwHelper_1151601.exe -Update -1151601 -"Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET CLR 3.5.21022; Media Center PC 5.0; SLCC1; Tablet PC 2.0; InfoPath.2; OfficeLiveConnector.1.5; OfficeLivePatch.1.3; .NET4.0C; .NET4.0E)" -"http://213.206.194.50/ontwerpprogramma/start.asp?e=bad&r=6250&u=X--UNKNOWN&__utma=24805033.2013520392.1349107843.1349107843.1349107843.1&__utmb=24805033.1.10.1349107843&__utmc=24805033&__utmx=-&__utmz=24805033.1349107843.1.1.utmcsr=nijhofbaarn.nl|utmccn=(referral)|utmcmd=referral|utmcct=/info/advies/badkamer-ontwerpen&__utmv=-&__utmk=18768186" (User 'Laurens')

O4 - HKUS\S-1-5-21-4223957993-2297506579-676778014-1008\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')

O4 - HKUS\S-1-5-21-4223957993-2297506579-676778014-1008\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')

O8 - Extra context menu item: &AOL-werkbalk Zoeken - C:\ProgramData\AOL\ieToolbar\resources\nl-NL\local\search.html

O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200

O8 - Extra context menu item: Converteren naar Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Doel van koppeling converteren naar Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

O8 - Extra context menu item: Doel van koppeling toevoegen aan bestaande PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html

O8 - Extra context menu item: Toevoegen aan bestaande PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html

O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra button: Toon of verberg HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O16 - DPF: {493ACF15-5CD9-4474-82A6-91670C3DD66E} (LinkedIn ContactFinderControl) - https://www.linkedin.com/cab/LinkedInContactFinderControl.cab

O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} (GMNRev Class) - http://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

O16 - DPF: {E6F480FC-BD44-4CBA-B74A-89AF7842937D} (SysInfo Class) - http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.4.21.0.cab

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

O20 - AppInit_DLLs:

O20 - Winlogon Notify: !SASWinLogon - Invalid registry found

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe

O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: Freemake Improver - Freemake - C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe

O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe

O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe

O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: HiSuiteOuc.exe - Unknown owner - C:\ProgramData\HiSuiteOuc\HiSuiteOuc.exe

O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe

O23 - Service: HuaweiHiSuiteService.exe - Unknown owner - C:\ProgramData\HandSetService\HuaweiHiSuiteService.exe

O23 - Service: PIXMA Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE

O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: Microsoft Antimalware Service (MsMpSvc) - Unknown owner - c:\Program Files\Microsoft Security Client\MsMpEng.exe (file missing)

O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe

O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe

O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe

--

End of file - 13688 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4223957993-2297506579-676778014-1000Core.job

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4223957993-2297506579-676778014-1000UA.job

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4223957993-2297506579-676778014-1001Core.job

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4223957993-2297506579-676778014-1001UA.job

C:\Windows\tasks\HPCeeScheduleForMaaike.job

C:\Windows\tasks\Norton Security Scan for Laurens.job

C:\Windows\tasks\SLOW-PCfighter-Laurens-Startup.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]

HP Print Enhancer - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-10-22 328248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]

Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]

Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]

Java Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-10-08 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]

Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2013-10-05 194640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]

Adobe PDF Conversion Toolbar Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-08 351864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

Java Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-10-08 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]

SmartSelect Class - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-08 351864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]

HP Smart BHO Class - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-10-22 517688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-08 351864]

!{2318C2B1-4965-11d4-9B18-009027A5CD4F}

{3d86a75b-cb6b-4764-885d-ca6336f04ba2}

{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2013-10-05 194640]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2012-12-21 5074384]

"Nvtmru"=C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [2013-05-16 1012000]

"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2013-05-01 421888]

""= []

"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

""=C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [2013-11-06 845168]

"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1174016]

"VoipBuster"=C:\Program Files\VoipBuster.com\VoipBuster\voipbuster.exe [2013-10-24 19569472]

"Google Update"=C:\Users\Maaike\AppData\Local\Google\Update\GoogleUpdate.exe [2011-06-26 136176]

"Advanced SystemCare 6"=C:\Program Files\IObit\Advanced SystemCare 6\ASCTray.exe /AutoStart []

"KiesPreload"=C:\Program Files\Samsung\Kies\Kies.exe [2013-11-06 1564528]

"KiesAirMessage"=C:\Program Files\Samsung\Kies\KiesAirMessage.exe -startup []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"Shockwave Updater"=C:\Windows\system32\Adobe\Shockwave 11\SwHelper_1151601.exe [2009-07-31 468408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]

C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]

C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Advanced SystemCare 6]

C:\Program Files\IObit\Advanced SystemCare 6\ASCTray.exe /AutoStart []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]

C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-04-21 59720]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent]

C:\Users\Laurens\AppData\Roaming\BitTorrent\BitTorrent.exe [2013-09-20 1127000]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Browser Infrastructure Helper]

C:\Users\Laurens\AppData\Local\Smartbar\Application\SnapDo.exe startup []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonMyPrinter]

C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2009-07-21 1983816]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonSolutionMenu]

C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2007-05-15 644696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXMediaServer]

[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EA Core]

[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ehTray.exe]

C:\Windows\ehome\ehTray.exe [2010-11-20 144384]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]

C:\Users\Laurens\AppData\Local\Google\Update\GoogleUpdate.exe [2010-10-18 136176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]

C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]

C:\Program Files\iTunes\iTunesHelper.exe [2013-08-16 152392]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent]

C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [2013-11-06 311152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel]

C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2011-04-16 2736128]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

C:\Program Files\QuickTime\QTTask.exe [2013-05-01 421888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]

C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1174016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify]

C:\Users\Laurens\AppData\Roaming\Spotify\Spotify.exe [2013-03-08 4477336]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify Web Helper]

C:\Users\Laurens\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [2013-03-08 1103768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TomTomHOME.exe]

C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [2013-08-27 248208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VoipBuster]

C:\Program Files\VoipBuster.com\VoipBuster\voipbuster.exe [2013-10-24 19569472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]

C:\Program Files\Windows Media Player\WMPNSCFG.exe [2009-07-14 65024]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Laurens^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Schermopname en Snel starten.lnk]

C:\PROGRA~1\MICROS~2\Office12\ONENOTEM.EXE [2009-02-26 97680]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"AppInit_DLLs"=" "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]

"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= []

"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]

"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"ConsentPromptBehaviorAdmin"=5

"ConsentPromptBehaviorUser"=3

"EnableUIADesktopToggle"=0

"dontdisplaylastusername"=0

"legalnoticecaption"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

"legalnoticetext"=

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe]

"Debugger="tasklist.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe]

"Debugger="tasklist.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe]

"Debugger="tasklist.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe]

"Debugger="tasklist.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]

"vidc.mrle"=msrle32.dll

"vidc.msvc"=msvidc32.dll

"msacm.imaadpcm"=imaadp32.acm

"msacm.msg711"=msg711.acm

"msacm.msgsm610"=msgsm32.acm

"msacm.msadpcm"=msadp32.acm

"midimapper"=midimap.dll

"wavemapper"=msacm32.drv

"VIDC.UYVY"=msyuv.dll

"VIDC.YUY2"=msyuv.dll

"VIDC.YVYU"=msyuv.dll

"VIDC.IYUV"=iyuv_32.dll

"vidc.i420"=iyuv_32.dll

"VIDC.YVU9"=tsbyuv.dll

"msacm.l3acm"=C:\Windows\System32\l3codeca.acm

"vidc.cvid"=iccvid.dll

"msacm.l3codecp"=l3codecp.acm

"vidc.VP60"=C:\Windows\system32\vp6vfw.dll

"vidc.VP61"=C:\Windows\system32\vp6vfw.dll

"wave1"=wdmaud.drv

"midi1"=wdmaud.drv

"mixer1"=wdmaud.drv

"aux1"=wdmaud.drv

"wave2"=wdmaud.drv

"midi2"=wdmaud.drv

"mixer2"=wdmaud.drv

"aux2"=wdmaud.drv

"MSVideo8"=VfWWDM32.dll

"wave"=wdmaud.drv

"midi"=wdmaud.drv

"mixer"=wdmaud.drv

"aux"=wdmaud.drv

"wave3"=wdmaud.drv

"midi3"=wdmaud.drv

"mixer3"=wdmaud.drv

"wave4"=wdmaud.drv

"midi4"=wdmaud.drv

"mixer4"=wdmaud.drv

"wave5"=wdmaud.drv

"midi5"=wdmaud.drv

"mixer5"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-11-25 15:11:12 ----D---- C:\rsit

2013-11-21 00:36:41 ----A---- C:\Windows\system32\jscript.dll

2013-11-21 00:36:37 ----A---- C:\Windows\system32\jscript9.dll

2013-11-21 00:36:36 ----A---- C:\Windows\system32\jsproxy.dll

2013-11-21 00:36:35 ----A---- C:\Windows\system32\ieui.dll

2013-11-21 00:36:35 ----A---- C:\Windows\system32\iesetup.dll

2013-11-21 00:36:33 ----A---- C:\Windows\system32\msfeeds.dll

2013-11-21 00:36:33 ----A---- C:\Windows\system32\ie4uinit.exe

2013-11-21 00:36:32 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe

2013-11-21 00:36:32 ----A---- C:\Windows\system32\iesysprep.dll

2013-11-21 00:36:32 ----A---- C:\Windows\system32\iernonce.dll

2013-11-21 00:36:31 ----A---- C:\Windows\system32\urlmon.dll

2013-11-21 00:36:29 ----A---- C:\Windows\system32\iertutil.dll

2013-11-21 00:36:26 ----A---- C:\Windows\system32\wininet.dll

2013-11-21 00:36:17 ----A---- C:\Windows\system32\ieframe.dll

2013-11-21 00:36:08 ----A---- C:\Windows\system32\mshtml.dll

2013-11-20 13:51:40 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll

2013-11-20 13:51:40 ----A---- C:\Windows\system32\authui.dll

2013-11-20 13:51:39 ----A---- C:\Windows\system32\credui.dll

2013-11-20 13:51:21 ----A---- C:\Windows\system32\schannel.dll

2013-11-20 13:51:20 ----A---- C:\Windows\system32\drivers\ksecpkg.sys

2013-11-20 13:51:20 ----A---- C:\Windows\system32\drivers\ksecdd.sys

2013-11-20 13:51:19 ----A---- C:\Windows\system32\drivers\cng.sys

2013-11-20 13:51:14 ----A---- C:\Windows\system32\sspicli.dll

2013-11-20 13:51:14 ----A---- C:\Windows\system32\ncrypt.dll

2013-11-20 13:51:14 ----A---- C:\Windows\system32\lsass.exe

2013-11-20 13:51:14 ----A---- C:\Windows\system32\lsasrv.dll

2013-11-20 13:51:13 ----A---- C:\Windows\system32\sspisrv.dll

2013-11-20 13:51:13 ----A---- C:\Windows\system32\secur32.dll

2013-11-20 13:50:59 ----A---- C:\Windows\system32\gdi32.dll

2013-11-20 13:50:55 ----A---- C:\Windows\system32\IKEEXT.DLL

2013-11-20 13:50:54 ----A---- C:\Windows\system32\FWPUCLNT.DLL

2013-11-20 13:50:53 ----A---- C:\Windows\system32\nshwfp.dll

2013-11-20 13:50:41 ----A---- C:\Windows\system32\crypt32.dll

2013-11-17 10:16:50 ----D---- C:\Users\Maaike\AppData\Roaming\Sokoban++

2013-11-17 10:13:26 ----D---- C:\ProgramData\Sokoban++

2013-11-17 10:13:26 ----D---- C:\Program Files\Sokoban++

2013-10-27 11:55:40 ----A---- C:\Windows\system32\comctl32.dll

2013-10-27 11:55:39 ----A---- C:\Windows\system32\drivers\usbscan.sys

2013-10-27 11:55:38 ----A---- C:\Windows\system32\drivers\hidparse.sys

2013-10-27 11:55:38 ----A---- C:\Windows\system32\drivers\hidclass.sys

2013-10-27 11:55:36 ----A---- C:\Windows\system32\drivers\tcpip.sys

2013-10-27 11:55:35 ----A---- C:\Windows\system32\mswsock.dll

2013-10-27 11:55:35 ----A---- C:\Windows\system32\drivers\afd.sys

2013-10-27 11:55:33 ----A---- C:\Windows\system32\drivers\usbser.sys

2013-10-27 11:55:31 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys

2013-10-27 11:55:26 ----A---- C:\Windows\system32\ntkrnlpa.exe

2013-10-27 11:55:24 ----A---- C:\Windows\system32\tdh.dll

2013-10-27 11:55:24 ----A---- C:\Windows\system32\ntoskrnl.exe

2013-10-27 11:55:23 ----A---- C:\Windows\system32\ntdll.dll

2013-10-27 11:55:22 ----A---- C:\Windows\system32\advapi32.dll

2013-10-27 11:55:19 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll

2013-10-27 11:55:10 ----A---- C:\Windows\system32\lpk.dll

2013-10-27 11:55:10 ----A---- C:\Windows\system32\dciman32.dll

2013-10-27 11:55:10 ----A---- C:\Windows\system32\atmfd.dll

2013-10-27 11:55:09 ----A---- C:\Windows\system32\fontsub.dll

2013-10-27 11:55:09 ----A---- C:\Windows\system32\atmlib.dll

2013-10-27 11:54:54 ----A---- C:\Windows\system32\scavengeui.dll

2013-10-27 11:54:39 ----A---- C:\Windows\system32\win32k.sys

2013-10-27 11:54:33 ----A---- C:\Windows\system32\WebClnt.dll

2013-10-27 11:54:33 ----A---- C:\Windows\system32\drivers\mrxdav.sys

2013-10-27 11:54:33 ----A---- C:\Windows\system32\davclnt.dll

2013-10-27 11:54:30 ----A---- C:\Windows\system32\drivers\usbcir.sys

2013-10-27 11:54:30 ----A---- C:\Windows\system32\drivers\USBAUDIO.sys

2013-10-27 11:54:29 ----A---- C:\Windows\system32\drivers\Wdf01000.sys

======List of files/folders modified in the last 1 month======

2013-11-25 15:11:26 ----D---- C:\Program Files\Trend Micro

2013-11-25 15:11:24 ----D---- C:\Windows\Prefetch

2013-11-25 15:11:02 ----D---- C:\Windows\Temp

2013-11-25 15:03:19 ----SHD---- C:\Windows\Installer

2013-11-25 15:03:19 ----HD---- C:\Config.Msi

2013-11-25 15:02:37 ----SHD---- C:\System Volume Information

2013-11-25 10:09:53 ----D---- C:\Windows\system32\config

2013-11-25 09:59:47 ----D---- C:\Program Files\Common Files\Akamai

2013-11-25 09:59:34 ----D---- C:\ProgramData\NVIDIA

2013-11-23 08:28:22 ----D---- C:\Windows\inf

2013-11-23 01:44:20 ----D---- C:\Windows\system32\catroot

2013-11-22 13:33:02 ----RSD---- C:\Windows\assembly

2013-11-22 13:33:02 ----D---- C:\Windows\Microsoft.NET

2013-11-22 10:38:10 ----D---- C:\Program Files\Samsung

2013-11-22 10:35:12 ----D---- C:\Windows\system32\DriverStore

2013-11-22 10:18:34 ----D---- C:\Windows\System32

2013-11-22 10:18:34 ----A---- C:\Windows\system32\PerfStringBackup.INI

2013-11-22 10:16:52 ----D---- C:\Users\Maaike\AppData\Roaming\Samsung

2013-11-21 13:20:09 ----D---- C:\Windows\rescache

2013-11-21 09:56:34 ----D---- C:\Windows\winsxs

2013-11-21 09:56:17 ----D---- C:\Windows\Panther

2013-11-21 09:55:46 ----D---- C:\Windows

2013-11-21 09:52:59 ----D---- C:\Windows\system32\nl-NL

2013-11-21 09:52:48 ----D---- C:\Windows\system32\drivers

2013-11-21 09:52:38 ----D---- C:\Program Files\Internet Explorer

2013-11-21 00:40:39 ----D---- C:\ProgramData\Microsoft Help

2013-11-21 00:36:58 ----D---- C:\Windows\system32\catroot2

2013-11-21 00:26:53 ----D---- C:\Windows\system32\MRT

2013-11-21 00:26:51 ----D---- C:\Windows\debug

2013-11-21 00:26:45 ----A---- C:\Windows\system32\MRT.exe

2013-11-20 13:39:23 ----D---- C:\Windows\SoftwareDistribution

2013-11-17 10:13:26 ----HD---- C:\ProgramData

2013-11-17 10:13:26 ----D---- C:\Program Files

2013-11-02 13:38:33 ----D---- C:\Windows\system32\NDF

2013-10-29 08:49:30 ----D---- C:\Program Files\CCleaner

2013-10-28 01:59:53 ----D---- C:\Program Files\Microsoft Silverlight

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2012-12-21 47568]

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2013-01-20 195296]

R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [2008-11-20 43872]

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]

R0 SmartDefragDriver;SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [2010-11-26 15672]

R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2012-12-21 122240]

R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2012-12-21 46056]

R1 Tosrfcom;Bluetooth RFCOMM; C:\Windows\System32\Drivers\tosrfcom.sys [2009-07-28 69480]

R2 eamon;eamon; C:\Windows\system32\DRIVERS\eamon.sys [2009-04-09 113960]

R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2012-12-21 150080]

R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys [2011-08-04 103112]

R3 Epfwndis;Eset Personal Firewall; C:\Windows\system32\DRIVERS\Epfwndis.sys [2009-04-09 33096]

R3 FsUsbExDisk;FsUsbExDisk; \??\C:\Windows\system32\FsUsbExDisk.SYS [2013-07-18 37344]

R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 26840]

R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2009-08-04 2744800]

R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\Windows\System32\Drivers\RootMdm.sys [2009-07-14 8192]

R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2009-03-01 139776]

R3 tosporte;Bluetooth COM Port; C:\Windows\system32\DRIVERS\tosporte.sys [2009-06-17 46984]

S1 SASDIFSV;SASDIFSV; C:\Windows\system32\drivers\SASDIFSV.sys []

S1 SAS***IL;SAS***IL; C:\Windows\system32\drivers\SAS***IL.sys []

S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]

S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]

S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]

S3 androidusb;SAMSUNG Android Composite ADB Interface Driver; C:\Windows\System32\Drivers\ssadadb.sys [2013-06-21 32064]

S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]

S3 dgderdrv;dgderdrv; C:\Windows\System32\drivers\dgderdrv.sys []

S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 131072]

S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-20 16384]

S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 36864]

S3 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2012-12-21 171680]

S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-09-23 39272]

S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmb.sys [2011-11-01 18176]

S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbo.sys [2011-11-01 23168]

S3 PAC7302;CANYON USB PC CAMERA; C:\Windows\system32\DRIVERS\PAC7302.SYS [2007-11-08 458752]

S3 PalmUSBD;PalmUSBD; C:\Windows\system32\drivers\PalmUSBD.sys []

S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]

S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]

S3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2009-09-23 47360]

S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]

S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys []

S3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2008-08-06 124928]

S3 SASENUM;SASENUM; C:\Windows\system32\drivers\SASENUM.sys []

S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]

S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\ssadbus.sys [2013-06-21 136904]

S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\Windows\system32\DRIVERS\ssadmdfl.sys [2013-06-21 17864]

S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\Windows\system32\DRIVERS\ssadmdm.sys [2013-06-21 153672]

S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\Windows\system32\DRIVERS\ssadserd.sys [2013-06-21 130248]

S3 tosrfbd;Bluetooth RFBUS; C:\Windows\system32\DRIVERS\tosrfbd.sys [2009-08-28 169064]

S3 tosrfbnp;Bluetooth RFBNEP; C:\Windows\System32\Drivers\tosrfbnp.sys [2009-06-19 42472]

S3 Tosrfhid;Bluetooth RFHID; C:\Windows\system32\DRIVERS\Tosrfhid.sys [2009-06-19 79872]

S3 tosrfnds;Bluetooth Personal Area Network; C:\Windows\system32\DRIVERS\tosrfnds.sys [2009-07-24 21608]

S3 TosRfSnd;Bluetooth Audio; C:\Windows\system32\drivers\tosrfsnd.sys [2009-08-05 61168]

S3 Tosrfusb;Bluetooth USB Controller; C:\Windows\system32\DRIVERS\tosrfusb.sys [2009-08-05 49400]

S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 49664]

S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2011-11-01 8192]

S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2012-12-13 45056]

S3 usbscan;Stuurprogramma voor USB-scanner; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 36352]

S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 28160]

S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2011-11-01 8192]

S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]

S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-12-18 65192]

R2 Akamai;Akamai NetSession Interface; C:\Windows\System32\svchost.exe [2009-07-14 20992]

R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\Windows\system32\svchost.exe [2009-07-14 20992]

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2012-12-21 57008]

R2 Bonjour Service;Bonjour-service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 390504]

R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2012-12-21 1333424]

R2 Freemake Improver;Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [2012-12-28 101376]

R2 FsUsbExService;FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [2013-07-18 233472]

R2 HiSuiteOuc.exe;HiSuiteOuc.exe; C:\ProgramData\HiSuiteOuc\HiSuiteOuc.exe [2013-07-11 116032]

R2 HP Health Check Service;HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2008-10-09 94208]

R2 hpqddsvc;HP CUE DeviceDiscovery-service; C:\Windows\system32\svchost.exe [2009-07-14 20992]

R2 HuaweiHiSuiteService.exe;HuaweiHiSuiteService.exe; C:\ProgramData\HandSetService\HuaweiHiSuiteService.exe [2013-05-02 158208]

R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2011-04-16 73728]

R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-05-15 935208]

R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]

R2 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

R2 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-06-21 640288]

R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-05-16 1826592]

R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]

R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-06-21 413472]

R2 TomTomHOMEService;TomTomHOMEService; C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe [2013-08-27 93072]

R2 W3SVC;@%windir%\system32\inetsrv\iisres.dll,-30003; C:\Windows\system32\svchost.exe [2009-07-14 20992]

R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 20992]

R3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\Windows\system32\svchost.exe [2009-07-14 20992]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

S2 ezSharedSvc;Easybits Shared Services for Windows; C:\Windows\system32\svchost.exe [2009-07-14 20992]

S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-12-26 135664]

S2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe []

S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-10 257416]

S3 aspnet_state;ASP.NET-statusservice; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]

S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-04-17 651720]

S3 GameConsoleService;GameConsoleService; C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe [2009-11-13 238328]

S3 gupdatem;Google Update-service (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-12-26 135664]

S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-18 194032]

S3 IJPLMSVC;PIXMA Extended Survey Program; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [2007-04-13 97432]

S3 iPod Service;iPod-service; C:\Program Files\iPod\bin\iPodService.exe [2013-08-16 553288]

S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]

S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]

S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2012-01-04 718888]

S3 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service; C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [2009-07-30 144752]

S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-05-20 1343400]

S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

kape · 25 november 2013

Download Zoek.zip naar het bureaublad.

Wanneer Internet Explorer of een andere browser of virusscanner melding geeft dat dit bestand onveilig zou zijn kun je negeren, dit is namelijk een onterechte waarschuwing.
Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe (hier en hier) kan je lezen hoe je dat doet.
Klik met de rechtermuisknop op Zoek.zip en klik op de optie "Alles uitpakken".
Dubbelklik op Zoek.exe om de tool te starten.
Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
Kopieer nu onderstaande code en plak die in het grote invulvenster:
Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.

chromelook; 
 {03EB0E9C-7A91-4381-A220-9B52B641CDB1};c
 {2318C2B1-4965-11d4-9B18-009027A5CD4F};c
 {3d86a75b-cb6b-4764-885d-ca6336f04ba2};c
 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run];r
 ""=-;r
 [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Browser Infrastructure Helper];r
 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows];r
 "AppInit_DLLs"=-;r
 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon];r
 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks];r
 "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=-;r
 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe];r
 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe];r
 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe];r
 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe];r
 firefoxlook; 
emptyfolderscheck;delete 
startupall; 
filesrcm;

Klik op de knop "Options" en vink nu de onderstaande opties aan.
Firefox Defaults
Reset Chrome
IE Defaults
Auto Clean
Klik nu op de knop "Run script".
Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
Mocht na de herstart geen logje verschijnen, start zoek.exe dan opnieuw, de log verschijnt dan alsnog.
Post nu de inhoud van het geopende logje in het volgende bericht.

snowym · 25 november 2013

Ik weet niet of de opties aanstonden. Ik denk vergeten. Mar dit is in ieder geval de log die ik kreeg.

Zoek.exe Version 4.0.0.5 Updated 24-November-2013

Tool run by Maaike on ma 25-11-2013 at 17:04:14,55.

Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x86

Running in: Normal Mode Internet Access Detected

Launched: C:\Users\Maaike\Downloads\zoek\zoek.exe [script inserted]

==== System Restore Info ======================

25-11-2013 17:07:15 Zoek.exe System Restore Point Created Succesfully.

==== Empty Folders Check ======================

C:\Program Files\AGEIA Technologies deleted successfully

C:\Program Files\Codemasters deleted successfully

C:\Program Files\EA GAMES deleted successfully

C:\Program Files\Fighters deleted successfully

C:\Program Files\InstallJammer Registry deleted successfully

C:\Program Files\Mindscape deleted successfully

C:\Program Files\Sony Ericsson deleted successfully

C:\Program Files\uTorrent deleted successfully

C:\Program Files\Common Files\SWF Studio deleted successfully

C:\Program Files\Common Files\Symantec Shared deleted successfully

C:\ProgramData\NokiaAccount deleted successfully

C:\ProgramData\Oracle deleted successfully

C:\ProgramData\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A} deleted successfully

C:\Users\Laurens\AppData\Roaming\.# deleted successfully

C:\Users\Laurens\AppData\Roaming\Daemam deleted successfully

C:\Users\Laurens\AppData\Roaming\Password Manager deleted successfully

C:\Users\Laurens\AppData\Roaming\Vso deleted successfully

C:\Users\Laurens\AppData\Roaming\WinRAR deleted successfully

C:\Users\Maaike\AppData\Roaming\ICAClient deleted successfully

C:\Users\Laurens\AppData\Local\Axialis deleted successfully

C:\Users\Laurens\AppData\Local\Canon Easy-PhotoPrint EX deleted successfully

C:\Users\Laurens\AppData\Local\GHISLER deleted successfully

C:\Users\Laurens\AppData\Local\WMTools Downloaded Files deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-4223957993-2297506579-676778014-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2318C2B1-4965-11d4-9B18-009027A5CD4F} deleted successfully

HKEY_USERS\S-1-5-21-4223957993-2297506579-676778014-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2318C2B1-4965-11d4-9B18-009027A5CD4F} deleted successfully

HKEY_USERS\S-1-5-21-4223957993-2297506579-676778014-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2318C2B1-4965-11d4-9B18-009027A5CD4F} deleted successfully

HKEY_USERS\S-1-5-21-4223957993-2297506579-676778014-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2318C2B1-4965-11d4-9B18-009027A5CD4F} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2318C2B1-4965-11d4-9B18-009027A5CD4F} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{2318C2B1-4965-11d4-9B18-009027A5CD4F} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3d86a75b-cb6b-4764-885d-ca6336f04ba2} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-4223957993-2297506579-676778014-1001\Software\Microsoft\Internet Explorer\URLSearchHooks\{03EB0E9C-7A91-4381-A220-9B52B641CDB1} deleted successfully

HKEY_USERS\S-1-5-21-4223957993-2297506579-676778014-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{2318C2B1-4965-11d4-9B18-009027A5CD4F} deleted successfully

HKEY_USERS\S-1-5-21-4223957993-2297506579-676778014-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{2318C2B1-4965-11d4-9B18-009027A5CD4F} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{2318C2B1-4965-11d4-9B18-009027A5CD4F} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{3d86a75b-cb6b-4764-885d-ca6336f04ba2} deleted successfully

==== Registry Fix Code ======================

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

""=-

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Browser Infrastructure Helper]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"AppInit_DLLs"=-

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SASWinLogon]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]

"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=-

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe]

==== Files Recently Created / Modified ======================

====== C:\Windows ====

====== C:\Users\Maaike\AppData\Local\Temp ====

2013-11-22 09:16:56 30B918A55C13CD05DA8687AFB376DAF4 121818 ----a-w- C:\Users\Maaike\AppData\Local\Temp\fa7a0db6-55dd-425d-8377-c8ea0aeb24dd\CliSecureRT.dll

====== Java Cache =====

2013-11-08 21:33:15 AC914F9161D490277A90BF07A613FD13 14553 ----a-w- C:\Users\Maaike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12\180504c-7769a34b

2013-11-08 21:33:14 9F4E3F2D1D8BD32291414C08D76BA72C 14525 ----a-w- C:\Users\Maaike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\13\4764080d-2ac3236b

2013-11-08 21:33:14 BC12C34573A586A1D2D103D3FF0AE7A8 14514 ----a-w- C:\Users\Maaike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20\2cdf3554-4ee17851

2013-11-08 21:33:14 93B3B6CC759A0A9F2ACB2BCBFE1D4F53 13802 ----a-w- C:\Users\Maaike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\26\4ea5199a-5ca34e16

2013-11-08 21:33:15 8E65AF98369A1A075C38EFD73F0BA8CE 13823 ----a-w- C:\Users\Maaike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\28\3dfebc9c-28c1d8aa

2013-11-08 21:33:15 BE3DE1A1B58A6E5495A97A82FC079E3A 13395 ----a-w- C:\Users\Maaike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\28\7a06eb9c-1e24e3a4

2013-11-08 21:33:13 E246FD01C64D0DB99EE2AFB65FABC70E 6963 ----a-w- C:\Users\Maaike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29\4019d45d-4ae993eb

2013-11-08 21:33:02 B897BAAA85E75CE826B1697AE01AFEF2 79 ----a-w- C:\Users\Maaike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\32\683abca0-6.0.lap

2013-11-08 21:33:15 A4695FC5202D0C0660731BBBB8128B79 12919 ----a-w- C:\Users\Maaike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\37\5fbf98a5-6c49add3

2013-11-08 21:33:14 EEB55BCCB8991F3A42ECB92A9943AF36 13665 ----a-w- C:\Users\Maaike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42\b052aea-40d5d88f

2013-11-08 21:33:16 AE154F271958E47D88364E2AA8D78C3A 14026 ----a-w- C:\Users\Maaike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\44\66e729ac-1788e4d1

2013-11-08 21:33:15 FB1031B32C7DEC7A78C92B81A965CD2F 13023 ----a-w- C:\Users\Maaike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\49\1c260f71-798a318c

2013-11-08 21:33:03 B6C1074A7C5C9431279119B789D8F29C 4675 ----a-w- C:\Users\Maaike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5\6a83cb85-61bf02e1

2013-11-08 21:33:14 087B28B8963D46B0AB51A5B07A35D6F2 15921 ----a-w- C:\Users\Maaike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50\697ba4b2-3da0d458

2013-11-08 21:33:13 0F57DD35EEFE1844D096E4F0C8E96213 13591 ----a-w- C:\Users\Maaike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\25864374-3676d1a4

2013-11-08 21:33:15 76825D29DC6E7273FE39F6D8C0220103 14193 ----a-w- C:\Users\Maaike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\58a26d74-21fb534a

2013-11-08 21:33:16 110C7458F70E629FE3701ECBC4FB6D20 13152 ----a-w- C:\Users\Maaike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53\4ed5b775-1a4781dd

2013-11-08 21:33:13 80F04F5F30BA8B43487437BAE5882684 11762 ----a-w- C:\Users\Maaike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53\621bc435-38887126

2013-11-08 21:33:14 520A6D075981C68B3A78C52F67E94041 12747 ----a-w- C:\Users\Maaike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54\36a5f036-2d29aa7a

2013-11-08 21:33:13 794387A2FE210434E58044D15AEB9457 14694 ----a-w- C:\Users\Maaike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\60\3fe483c-16917ed5

2013-11-08 21:33:15 84BC33FCA27A8E0F9B3FCE9CD0A05A73 14594 ----a-w- C:\Users\Maaike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\61\235c33bd-5a311cf2

2013-11-08 21:33:13 F64F3093727424627917E3E8B5C49784 4909 ----a-w- C:\Users\Maaike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62\6d9d31fe-6ea985b8

2013-11-08 21:33:16 0149F0DEE15E8F3F98FE63B99AAC8CAB 14158 ----a-w- C:\Users\Maaike\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\8\4532c708-4fade79b

====== C:\Windows\system32 =====

2013-11-20 23:36:41 FED1803F2F9C4BDBA8267EA2DE47CFE2 2706432 ----a-w- C:\Windows\System32\mshtml.tlb

2013-11-20 23:36:41 6AD683FF326836EB6AE63B1F144A4F9D 690688 ----a-w- C:\Windows\System32\jscript.dll

2013-11-20 23:36:37 D42525513055C0A65FD4BEFAFACEB134 2877952 ----a-w- C:\Windows\System32\jscript9.dll

2013-11-20 23:36:36 98B05ADD60BAA432E708BAFEBE5B1D70 39424 ----a-w- C:\Windows\System32\jsproxy.dll

2013-11-20 23:36:35 FEB2F07A980A9844AD1B5E886C9B5338 391168 ----a-w- C:\Windows\System32\ieui.dll

2013-11-20 23:36:35 E841206E319069920C394A5E3842568F 61440 ----a-w- C:\Windows\System32\iesetup.dll

2013-11-20 23:36:33 AD6639EF2BD655C7E630B6BCF7203463 493056 ----a-w- C:\Windows\System32\msfeeds.dll

2013-11-20 23:36:33 22A7CC05BE272D9500B312489E6950EB 42496 ----a-w- C:\Windows\System32\ie4uinit.exe

2013-11-20 23:36:32 8D98D99DC6D4033591354156CEB25153 109056 ----a-w- C:\Windows\System32\iesysprep.dll

2013-11-20 23:36:32 8317DD8D4095FE4076E9F6EC3A747940 71680 ----a-w- C:\Windows\System32\RegisterIEPKEYs.exe

2013-11-20 23:36:32 70F131E94E1B4496469A563C85279192 33280 ----a-w- C:\Windows\System32\iernonce.dll

2013-11-20 23:36:31 A5897063A4B6796EFB7B34CEC5BC739F 1138176 ----a-w- C:\Windows\System32\urlmon.dll

2013-11-20 23:36:29 DA5374911037841F81072A4DCBB02D93 2049024 ----a-w- C:\Windows\System32\iertutil.dll

2013-11-20 23:36:26 5FD4335DCD343D0FEA9FA6B18ED408D9 1767936 ----a-w- C:\Windows\System32\wininet.dll

2013-11-20 23:36:17 1191434BB424F18C2609AB5C955DD14E 13761024 ----a-w- C:\Windows\System32\ieframe.dll

2013-11-20 23:36:08 02A04841906A8892AD6CC7BDBCB5F61D 14355968 ----a-w- C:\Windows\System32\mshtml.dll

2013-11-20 12:51:40 EE7CB55F77465CDAC4C80F587FF7C278 1796096 ----a-w- C:\Windows\System32\authui.dll

2013-11-20 12:51:40 4BCC63ED1C3D15B2635A8AE2B854B3EB 152576 ----a-w- C:\Windows\System32\SmartcardCredentialProvider.dll

2013-11-20 12:51:39 E9BB0CD09DA17C71FD1B9954D75AEEF7 168960 ----a-w- C:\Windows\System32\credui.dll

2013-11-20 12:51:21 AA6F6457116B559B76BC6A012CB4C293 247808 ----a-w- C:\Windows\System32\schannel.dll

2013-11-20 12:51:14 EF6950D7B24AAF4E477065F5455DD4F8 1038848 ----a-w- C:\Windows\System32\lsasrv.dll

2013-11-20 12:51:14 BD6B9BC84D004C6BEE89CF7BDB95E1FC 99840 ----a-w- C:\Windows\System32\sspicli.dll

2013-11-20 12:51:14 AD7FB087A238883D1618F29F7BBBD584 220160 ----a-w- C:\Windows\System32\ncrypt.dll

2013-11-20 12:51:14 803B370865D907EA21DC0C2B6A8936B5 22016 ----a-w- C:\Windows\System32\lsass.exe

2013-11-20 12:51:13 D89077E2E1C88A29C57F21FAD28DAC45 15872 ----a-w- C:\Windows\System32\sspisrv.dll

2013-11-20 12:51:13 372948BB5E41CE42341C4398DE572E56 22016 ----a-w- C:\Windows\System32\secur32.dll

2013-11-20 12:50:59 5A775CAE7CCCAC581C05B8D2C92C0DF1 305152 ----a-w- C:\Windows\System32\gdi32.dll

2013-11-20 12:50:55 B9C54120F46392100478F58F374E5709 679424 ----a-w- C:\Windows\System32\IKEEXT.DLL

2013-11-20 12:50:54 F0D0E883EBBDC7615DC9EDEA0FFB2817 216576 ----a-w- C:\Windows\System32\FWPUCLNT.DLL

2013-11-20 12:50:53 CE2A48CD0D2B39FB77FA4797C6434E71 656896 ----a-w- C:\Windows\System32\nshwfp.dll

2013-11-20 12:50:41 CC09E0C9A2D89C6E71D093DC8BD121B7 1168384 ----a-w- C:\Windows\System32\crypt32.dll

====== C:\Windows\system32\drivers =====

2013-11-20 12:51:20 F286830298323272260332D6ABC905C1 67520 ----a-w- C:\Windows\System32\drivers\ksecdd.sys

2013-11-20 12:51:20 D7C760D57B1656DD748B9E4AB6CB5A51 136640 ----a-w- C:\Windows\System32\drivers\ksecpkg.sys

2013-11-20 12:51:19 85449EEBE8F8EBD6481EFBF0F352B4EB 369848 ----a-w- C:\Windows\System32\drivers\cng.sys

2013-10-27 10:55:39 FC6B21DB4B5B398AB93DBE59CBF11036 36352 ----a-w- C:\Windows\System32\drivers\usbscan.sys

2013-10-27 10:55:38 F1B27299F547D452EDAEF01FC187CB91 25728 ----a-w- C:\Windows\System32\drivers\hidparse.sys

2013-10-27 10:55:38 50ABE682EBE752EAF62B18790D6D491C 55808 ----a-w- C:\Windows\System32\drivers\hidclass.sys

2013-10-27 10:55:36 CA59F7C570AF70BC174F477CFE2D9EE3 1294272 ----a-w- C:\Windows\System32\drivers\tcpip.sys

2013-10-27 10:55:35 F81BB7E487EDCEAB630A7EE66CF23913 338944 ----a-w- C:\Windows\System32\drivers\afd.sys

2013-10-27 10:55:33 007C0C8D5B01D82ACEB70431D15083F6 28160 ----a-w- C:\Windows\System32\drivers\usbser.sys

2013-10-27 10:55:31 71BC35067CABC02C9453AEAA42B2E43E 729024 ----a-w- C:\Windows\System32\drivers\dxgkrnl.sys

2013-10-27 10:54:33 21F4B24ACFC79A483515BD986DD9043F 115712 ----a-w- C:\Windows\System32\drivers\mrxdav.sys

2013-10-27 10:54:30 A1977C315BF5691DA99235AA4A6907AF 80896 ----a-w- C:\Windows\System32\drivers\USBAUDIO.sys

2013-10-27 10:54:30 2352AB5F9F8F097BF9D41D5A4718A041 86016 ----a-w- C:\Windows\System32\drivers\usbcir.sys

2013-10-27 10:54:29 25944D2CC49E0A6C581D02A74B7D6645 527064 ----a-w- C:\Windows\System32\drivers\Wdf01000.sys

====== C:\Windows\Tasks ======

====== C:\Windows\Temp ======

======= C:\Program Files =====

2013-11-17 09:13:26 -------- d-----w- C:\Program Files\Sokoban++

======= C: =====

====== C:\Users\Maaike\AppData\Roaming ======

2013-11-18 15:02:36 -------- d-----w- C:\Users\Laurens\AppData\Roaming\Sokoban++

2013-11-17 09:16:50 -------- d-----w- C:\Users\Maaike\AppData\Roaming\Sokoban++

====== C:\Users\Maaike ======

2013-11-25 14:05:43 69CA82A7482A00D8EE063D2B97FC4338 781383 ----a-w- C:\Users\Maaike\Downloads\RSIT.exe

2013-11-17 09:13:26 -------- d-----w- C:\ProgramData\Sokoban++

2013-11-17 09:13:26 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sokoban++

2013-11-17 09:12:19 B02C4DB359840BA85189D24FEB1F497A 138844 ----a-w- C:\Users\Maaike\Downloads\langDutch.exe

2013-11-17 09:12:05 AFC48569864096D8E757F6FAE5C42B57 855968 ----a-w- C:\Users\Maaike\Downloads\sokopp163.exe

====== C: exe-files ==

2013-11-23 12:24:45 95CDB8947991800A8004C70AF71CDF96 2802360 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\NVIDIA\Updatus\Packages\000055ad\dao.17339445.exe

2013-11-23 12:24:45 95CDB8947991800A8004C70AF71CDF96 2802360 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\NVIDIA\Updatus\Packages\000055ad\dao.17339445.exe

2013-11-22 12:22:34 DA9FFBFA0DE2179C2F055CBC9CFD93A4 2800800 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\NVIDIA\Updatus\Packages\000055a8\dao.17338421.exe

2013-11-22 12:22:34 DA9FFBFA0DE2179C2F055CBC9CFD93A4 2800800 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\NVIDIA\Updatus\Packages\000055a8\dao.17338421.exe

2013-11-20 12:20:07 22D113751DA9E4EAE7789603328FB60A 2675600 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\NVIDIA\Updatus\Packages\00005586\dao.17321011.exe

2013-11-20 12:20:07 22D113751DA9E4EAE7789603328FB60A 2675600 ----a-w- C:\Documents and Settings\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\NVIDIA\Updatus\Packages\00005586\dao.17321011.exe

=== C: other files ==

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-21-4223957993-2297506579-676778014-1000\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun"

"Google Update"="C:\Users\Laurens\AppData\Local\Google\Update\GoogleUpdate.exe /c"

"Mobile Partner"="C:\Program Files\HiSuite\HiSuite.exe -s"

"TomTomHOME.exe"="C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe"

[HKEY_USERS\S-1-5-21-4223957993-2297506579-676778014-1001\Software\Microsoft\Windows\CurrentVersion\Run]

@="C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe Run"

"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun"

"VoipBuster"="C:\Program Files\VoipBuster.com\VoipBuster\voipbuster.exe -nosplash -minimized"

"Google Update"="C:\Users\Maaike\AppData\Local\Google\Update\GoogleUpdate.exe /c"

"Advanced SystemCare 6"="C:\Program Files\IObit\Advanced SystemCare 6\ASCTray.exe /AutoStart"

"KiesPreload"="C:\Program Files\Samsung\Kies\Kies.exe /preload"

"KiesAirMessage"="C:\Program Files\Samsung\Kies\KiesAirMessage.exe -startup"

[HKEY_USERS\S-1-5-21-4223957993-2297506579-676778014-1008\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_USERS\S-1-5-21-4223957993-2297506579-676778014-1000\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"Shockwave Updater"="C:\Windows\system32\Adobe\Shockwave 11\SwHelper_1151601.exe -Update -1151601 -Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET CLR 3.5.21022; Media Center PC 5.0; SLCC1; Tablet PC 2.0; InfoPath.2; OfficeLiveConnector.1.5; OfficeLivePatch.1.3; .NET4.0C; .NET4.0E) -http://213.206.194.50/ontwerpprogramma/start.asp?e=bad&r=6250&u=X--UNKNOWN&__utma=24805033.2013520392.1349107843.1349107843.1349107843.1&__utmb=24805033.1.10.1349107843&__utmc=24805033&__utmx=-&__utmz=24805033.1349107843.1.1.utmcsr=nijhofbaarn.nl|utmccn=(referral)|utmcmd=referral|utmcct=/info/advies/badkamer-ontwerpen&__utmv=-&__utmk=18768186"

[HKEY_USERS\S-1-5-21-4223957993-2297506579-676778014-1001\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"Shockwave Updater"="C:\Windows\system32\Adobe\Shockwave 11\SwHelper_1151601.exe -Update -1151601 -Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; GTB6.5; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET CLR 3.5.21022; Media Center PC 5.0; SLCC1; Tablet PC 2.0; InfoPath.2; OfficeLiveConnector.1.5; OfficeLivePatch.1.3; .NET4.0C) -http://www.fortis.nl/dnn_site/Home.aspx"

[HKEY_USERS\S-1-5-21-4223957993-2297506579-676778014-1008\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"egui"="C:\Program Files\ESET\ESET Smart Security\egui.exe /hide /waitservice"

"Nvtmru"="C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"

"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe -atboottime"

"SunJavaUpdateSched"="C:\Program Files\Common Files\Java\Java Update\jusched.exe"