Onderstreepte woorden en ads not by this site.

[Kempvis]

Beste,

allereerst m'n beste wensen.

Al enkele dagen zit ik met volgende problemen:

op elke site of forum dat ik bezoek heb ik ongewenste reclame in de vorm van onderlijnde woorden en reclamebalken boven, onder, of links en rechts op het scherm.

Zouden jullie mij kunnen helpen?

Heb alvast een hijackthis-logje gemaakt.

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 13:44:28, on 1/01/2014

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\xampp\apache\bin\httpd.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\PC Tools Utilities\Tools\Defrag\DMDefragSrv.exe

C:\Program Files\PC Tools Utilities\Tools\Repair\DMRepairSrv.exe

C:\xampp\FileZillaFTP\FileZillaServer.exe

C:\Program Files\Telenet Security Pack\fshoster32.exe

C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Anti-Virus\FSGK32.EXE

C:\WINDOWS\system32\gearsec.exe

C:\Program Files\Java\jre7\bin\jqs.exe

C:\xampp\mysql\bin\mysqld.exe

C:\xampp\apache\bin\httpd.exe

C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe

C:\WINDOWS\system32\HPZipm12.exe

c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe

C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\Pen_Tablet.exe

C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

C:\Program Files\PC Tools Utilities\Tools\Defrag\DMDefragSrvProxy.exe

C:\Program Files\PC Tools Utilities\Tools\Repair\DMRepairSrvProxy.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\WTablet\Pen_TabletUser.exe

C:\WINDOWS\system32\Pen_Tablet.exe

C:\windows\system\hpsysdrv.exe

C:\WINDOWS\system32\hphmon06.exe

C:\WINDOWS\ALCMTR.EXE

C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe

C:\WINDOWS\PixArt\PAC207\Monitor.exe

C:\WINDOWS\system32\ps2.exe

C:\Program Files\InterVideo\Common\Bin\WinRemote.exe

C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe

C:\Program Files\DivX\DivX Update\DivXUpdate.exe

C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Common\FSM32.EXE

C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe

C:\Program Files\Samsung\Kies\KiesTrayAgent.exe

C:\Program Files\Telenet Security Pack\fshoster32.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\Program Files\Shareaza\Shareaza.exe

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Akamai\netsession_win.exe

C:\Program Files\Samsung\Kies\Kies.exe

C:\Program Files\Samsung\Kies\KiesAirMessage.exe

C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Akamai\netsession_win.exe

C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Common\FSMA32.EXE

C:\WINDOWS\System32\svchost.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Anti-Virus\fssm32.exe

c:\program files\mozilla firefox\firefox.exe

C:\Program Files\Microsoft\BingBar\7.3.124.0\SeaPort.exe

C:\WINDOWS\system32\msiexec.exe

C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local;<local>

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll

O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll

O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll

O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\7.3.124.0\BingExt.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll

O3 - Toolbar: HP View - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\7.3.124.0\BingExt.dll

O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe

O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe

O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe

O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe

O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"

O4 - HKLM\..\Run: [Monitor] C:\WINDOWS\PixArt\PAC207\Monitor.exe

O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe

O4 - HKLM\..\Run: [WINREMOTE] "C:\Program Files\InterVideo\Common\Bin\WinRemote.exe"

O4 - HKLM\..\Run: [siteRanker] "C:\Program Files\SiteRanker\SiteRankTray.exe"

O4 - HKLM\..\Run: [Home Theater SchSvr] "C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe"

O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW

O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

O4 - HKLM\..\Run: [Aimersoft Helper Compact.exe] C:\Program Files\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe

O4 - HKLM\..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe

O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Common\FSM32.EXE" /splash

O4 - HKLM\..\Run: [AgentMonitor] C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe

O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files\Samsung\Kies\KiesTrayAgent.exe

O4 - HKLM\..\Run: [standby] "c:\Program Files\Common Files\Corel\Standby\Standby.exe" -START

O4 - HKLM\..\Run: [F-Secure Hoster (44163)] "C:\Program Files\Telenet Security Pack\fshoster32.exe" -app -hosterid:1

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [spyHunter Security Suite] "C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe"

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [Facebook Update] "C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver

O4 - HKCU\..\Run: [shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray

O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Akamai\netsession_win.exe"

O4 - HKCU\..\Run: [KiesPreload] C:\Program Files\Samsung\Kies\Kies.exe /preload

O4 - HKCU\..\Run: [KiesAirMessage] C:\Program Files\Samsung\Kies\KiesAirMessage.exe -startup

O4 - HKCU\..\Run: [] C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe"

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice')

O8 - Extra context menu item: Download with &Shareaza - res://C:\Program Files\Shareaza\RazaWebHook32.dll/3000

O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html

O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html

O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html

O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html

O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MI1933~1\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MI1933~1\Office12\ONBttnIE.dll

O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\Office12\REFIEBAR.DLL

O9 - Extra button: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm

O9 - Extra 'Tools' menuitem: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra button: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)

O9 - Extra 'Tools' menuitem: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)

O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab

O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - MSN Games - Free Online Games

O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - MSN Games - Free Online Games

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1354632107625

O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game.zylom.com/activex/zylomgamesplayer.cab

O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - MSN Games - Free Online Games

O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - MSN Games - Free Online Games

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O20 - Winlogon Notify: TPSvc - TPSvc.dll (file missing)

O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: Apache2.4 - Apache Software Foundation - C:\xampp\apache\bin\httpd.exe

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: Autodesk Content Service - Autodesk, Inc. - C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe

O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: Performance Toolkit Disk Defrag Service (DMDefragService) - PC Tools - C:\Program Files\PC Tools Utilities\Tools\Defrag\DMDefragSrv.exe

O23 - Service: Performance Toolkit Disk Repair Service (DMRepairService) - PC Tools - C:\Program Files\PC Tools Utilities\Tools\Repair\DMRepairSrv.exe

O23 - Service: FileZilla Server FTP server (FileZilla Server) - FileZilla Project - C:\xampp\FileZillaFTP\FileZillaServer.exe

O23 - Service: FLEXnet Licensing Service - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: Freemake Improver - Unknown owner - C:\Documents and Settings\All Users\Application Data\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe (file missing)

O23 - Service: F-Secure Dll Hoster (fshoster) - F-Secure Corporation - C:\Program Files\Telenet Security Pack\fshoster32.exe

O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Common\FSMA32.EXE

O23 - Service: F-Secure ORSP Client (FSORSPClient) - F-Secure Corporation - C:\Program Files\Telenet Security Pack\apps\CCF_Reputation\fsorsp.exe

O23 - Service: gearsec - GEAR Software - C:\WINDOWS\system32\gearsec.exe

O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: iSafeService - Unknown owner - C:\Program Files\iSafe\iSafeSvc.exe (file missing)

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

O23 - Service: mysql - Unknown owner - C:\xampp\mysql\bin\mysqld.exe

O23 - Service: PC Tools Startup and Shutdown Monitor service (PCToolsSSDMonitorSvc) - Unknown owner - C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe

O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe

O23 - Service: RealNetworks Downloader Resolver Service - Unknown owner - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe

O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

O23 - Service: SpyHunter 4 Service - Enigma Software Group USA, LLC. - C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE

O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

O23 - Service: TabletServicePen - Wacom Technology, Corp. - C:\WINDOWS\system32\Pen_Tablet.exe

O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

--

End of file - 18506 bytes

[kape]

Start Hijackthis op. Selecteer “Scan”. Selecteer alleen de items die hieronder zijn genoemd:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local;<local>

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolb...lerControl.cab

O20 - Winlogon Notify: TPSvc - TPSvc.dll (file missing)

Klik op 'Fix checked' om de items te verwijderen.

Let op : Windows Vista & 7 gebruikers dienen HijackThis als “administrator” uit te voeren via rechtermuisknop “als administrator uitvoeren". Indien dit via de snelkoppeling niet lukt voer je HijackThis als administrator uit in de volgende map : C:\Program Files\Trend Micro\HiJackThis of C:\Program Files (x86)\Trend Micro\HiJackThis.

Download RSIT van de onderstaande locaties en sla deze op het bureaublad op.

Hier staat een beschrijving hoe je kan kijken of je een 32- of 64-bitversie van Windows heeft.

• RSIT 32 bit (RSIT.exe)
  
• RSIT 64 bit (RSITx64.exe)
  

Dubbelklik op RSIT.exe om de tool te starten.

• Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  
• Vervolgens wordt de "Disclaimer of warranty" getoond, klik vervolgens op "Continue"
  
• Wanneer de tool gereed is wordt er een kladblok bestand genaamd "Log" geopend.
  
• Plaats de inhoud hiervan in het volgende bericht.
  

Bekijk ook de instructievideo.

[Kempvis]

Logfile of random's system information tool 1.09 (written by random/random)

Run by HP_Eigenaar at 2014-01-01 20:33:27

Microsoft Windows XP Home Edition Service Pack 3

System drive C: has 28 GB (12%) free of 231 GB

Total RAM: 1022 MB (22% free)

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 20:34:32, on 1/01/2014

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\xampp\apache\bin\httpd.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\PC Tools Utilities\Tools\Defrag\DMDefragSrv.exe

C:\Program Files\PC Tools Utilities\Tools\Repair\DMRepairSrv.exe

C:\xampp\FileZillaFTP\FileZillaServer.exe

C:\Program Files\Telenet Security Pack\fshoster32.exe

C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Anti-Virus\FSGK32.EXE

C:\WINDOWS\system32\gearsec.exe

C:\Program Files\Java\jre7\bin\jqs.exe

C:\xampp\mysql\bin\mysqld.exe

C:\xampp\apache\bin\httpd.exe

C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe

C:\WINDOWS\system32\HPZipm12.exe

c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe

C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\Pen_Tablet.exe

C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

C:\Program Files\PC Tools Utilities\Tools\Defrag\DMDefragSrvProxy.exe

C:\Program Files\PC Tools Utilities\Tools\Repair\DMRepairSrvProxy.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\Pen_Tablet.exe

C:\windows\system\hpsysdrv.exe

C:\WINDOWS\system32\hphmon06.exe

C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe

C:\WINDOWS\PixArt\PAC207\Monitor.exe

C:\WINDOWS\system32\ps2.exe

C:\Program Files\InterVideo\Common\Bin\WinRemote.exe

C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe

C:\Program Files\DivX\DivX Update\DivXUpdate.exe

C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Common\FSM32.EXE

C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe

C:\Program Files\Samsung\Kies\KiesTrayAgent.exe

C:\Program Files\Telenet Security Pack\fshoster32.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\Program Files\Shareaza\Shareaza.exe

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Akamai\netsession_win.exe

C:\Program Files\Samsung\Kies\Kies.exe

C:\Program Files\Samsung\Kies\KiesAirMessage.exe

C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Akamai\netsession_win.exe

C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Common\FSMA32.EXE

C:\WINDOWS\System32\svchost.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Anti-Virus\fssm32.exe

C:\Program Files\Microsoft\BingBar\7.3.124.0\SeaPort.exe

c:\program files\mozilla firefox\firefox.exe

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Mijn documenten\Downloads\RSIT.exe

C:\Program Files\trend micro\HP_Eigenaar.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll

O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll

O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll

O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\7.3.124.0\BingExt.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll

O3 - Toolbar: HP View - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\7.3.124.0\BingExt.dll

O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe

O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe

O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe

O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE

O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe

O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"

O4 - HKLM\..\Run: [Monitor] C:\WINDOWS\PixArt\PAC207\Monitor.exe

O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe

O4 - HKLM\..\Run: [WINREMOTE] "C:\Program Files\InterVideo\Common\Bin\WinRemote.exe"

O4 - HKLM\..\Run: [siteRanker] "C:\Program Files\SiteRanker\SiteRankTray.exe"

O4 - HKLM\..\Run: [Home Theater SchSvr] "C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe"

O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW

O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

O4 - HKLM\..\Run: [Aimersoft Helper Compact.exe] C:\Program Files\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe

O4 - HKLM\..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe

O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Common\FSM32.EXE" /splash

O4 - HKLM\..\Run: [AgentMonitor] C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe

O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files\Samsung\Kies\KiesTrayAgent.exe

O4 - HKLM\..\Run: [standby] "c:\Program Files\Common Files\Corel\Standby\Standby.exe" -START

O4 - HKLM\..\Run: [F-Secure Hoster (44163)] "C:\Program Files\Telenet Security Pack\fshoster32.exe" -app -hosterid:1

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [spyHunter Security Suite] "C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe"

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [Facebook Update] "C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver

O4 - HKCU\..\Run: [shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray

O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Akamai\netsession_win.exe"

O4 - HKCU\..\Run: [KiesPreload] C:\Program Files\Samsung\Kies\Kies.exe /preload

O4 - HKCU\..\Run: [KiesAirMessage] C:\Program Files\Samsung\Kies\KiesAirMessage.exe -startup

O4 - HKCU\..\Run: [] C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe"

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice')

O8 - Extra context menu item: Download with &Shareaza - res://C:\Program Files\Shareaza\RazaWebHook32.dll/3000

O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MI1933~1\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html

O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html

O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html

O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html

O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MI1933~1\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MI1933~1\Office12\ONBttnIE.dll

O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\Office12\REFIEBAR.DLL

O9 - Extra button: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm

O9 - Extra 'Tools' menuitem: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra button: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)

O9 - Extra 'Tools' menuitem: Verbindingshelp - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)

O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - MSN Games - Free Online Games

O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - MSN Games - Free Online Games

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1354632107625

O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game.zylom.com/activex/zylomgamesplayer.cab

O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - MSN Games - Free Online Games

O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - MSN Games - Free Online Games

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: Apache2.4 - Apache Software Foundation - C:\xampp\apache\bin\httpd.exe

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: Autodesk Content Service - Autodesk, Inc. - C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe

O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: Performance Toolkit Disk Defrag Service (DMDefragService) - PC Tools - C:\Program Files\PC Tools Utilities\Tools\Defrag\DMDefragSrv.exe

O23 - Service: Performance Toolkit Disk Repair Service (DMRepairService) - PC Tools - C:\Program Files\PC Tools Utilities\Tools\Repair\DMRepairSrv.exe

O23 - Service: FileZilla Server FTP server (FileZilla Server) - FileZilla Project - C:\xampp\FileZillaFTP\FileZillaServer.exe

O23 - Service: FLEXnet Licensing Service - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: Freemake Improver - Unknown owner - C:\Documents and Settings\All Users\Application Data\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe (file missing)

O23 - Service: F-Secure Dll Hoster (fshoster) - F-Secure Corporation - C:\Program Files\Telenet Security Pack\fshoster32.exe

O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Common\FSMA32.EXE

O23 - Service: F-Secure ORSP Client (FSORSPClient) - F-Secure Corporation - C:\Program Files\Telenet Security Pack\apps\CCF_Reputation\fsorsp.exe

O23 - Service: gearsec - GEAR Software - C:\WINDOWS\system32\gearsec.exe

O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: iSafeService - Unknown owner - C:\Program Files\iSafe\iSafeSvc.exe (file missing)

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Common Files\LightScribe\LSSrvc.exe

O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

O23 - Service: mysql - Unknown owner - C:\xampp\mysql\bin\mysqld.exe

O23 - Service: PC Tools Startup and Shutdown Monitor service (PCToolsSSDMonitorSvc) - Unknown owner - C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe

O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe

O23 - Service: RealNetworks Downloader Resolver Service - Unknown owner - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe

O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

O23 - Service: SpyHunter 4 Service - Enigma Software Group USA, LLC. - C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE

O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

O23 - Service: TabletServicePen - Wacom Technology, Corp. - C:\WINDOWS\system32\Pen_Tablet.exe

O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

--

End of file - 17795 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job

C:\WINDOWS\tasks\AdobeAAMUpdater-1.0-UW-4B58D8528225-HP_Eigenaar.job

C:\WINDOWS\tasks\AppleSoftwareUpdate.job

C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-1594897154-2424950955-3957525660-1008Core.job

C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-1594897154-2424950955-3957525660-1008UA.job

C:\WINDOWS\tasks\Go for FilesUpdate.job

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job

C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

C:\WINDOWS\tasks\GS.Enabler-S-1180656229.job

C:\WINDOWS\tasks\PTSchedule.job

C:\WINDOWS\tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1594897154-2424950955-3957525660-1008.job

C:\WINDOWS\tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1594897154-2424950955-3957525660-1008.job

C:\WINDOWS\tasks\RMSchedule.job

C:\WINDOWS\tasks\Scheduled scanning task.job

C:\WINDOWS\tasks\SpyHunter4.job

C:\WINDOWS\tasks\User_Feed_Synchronization-{55BF4FC4-395B-4AF9-B426-EDE6B947CBBA}.job

C:\WINDOWS\tasks\User_Feed_Synchronization-{C9CA5CEC-FF30-4EF2-A59A-ADCED39BA68F}.job

C:\WINDOWS\tasks\User_Feed_Synchronization-{FD5599BF-4158-4FE7-8EF5-F7363B3295E5}.job

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Mozilla\Firefox\Profiles\ojh9xb0g.default-1373785269171

prefs.js - "browser.search.useDBForOrder" - true

prefs.js - "browser.startup.homepage" - "about:blank"

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

"siteranker@siteranker.com"=C:\Program Files\SiteRanker\firefox\

"{23fcfd51-4958-4f00-80a3-ae97e717ed8b}"=C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5

"{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}"=C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\

"{ABDE892B-13A8-4d1b-88E6-365A6E755758}"=C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]

"Description"=Adobe® Flash® Player 11.9.900.170 Plugin

"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]

"Description"=Adobe Shockwave Player

"Path"=C:\WINDOWS\system32\Adobe\Director\np32dsw_1202122.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=]

"Description"=iTunes Detector Plug-in

"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0]

"Description"=

"Path"=C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]

"Description"=DivX Plus Web Player

"Path"=C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]

"Description"=DivX VOD Helper Plug-in

"Path"=C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf]

"Description"=

"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]

"Description"=Google Earth in your browser

"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.45.2]

"Description"=Java™ Deployment Toolkit

"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2]

"Description"=Oracle® Next Generation Java™ Plug-In

"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]

"Description"=Ag Player Plugin

"Path"=C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416]

"Description"=WLPG Install MIME type

"Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]

"Description"=Windows Presentation Foundation plug-in for Mozilla browsers

"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=16.0.3.51]

"Description"=RealPlayer LiveConnect-Enabled Plug-In

"Path"=C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprndlchromebrowserrecordext;version=1.3.3]

"Description"=RealNetworks RealDownloader Chrome Background Extension Plug-In

"Path"=C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprndlhtml5videoshim;version=1.3.3]

"Description"=RealNetworks RealDownloader HTML5VideoShim Plug-In

"Path"=C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprndlpepperflashvideoshim;version=1.3.3]

"Description"=RealNetworks RealDownloader Peppe rFlash Video Shim Plug-In

"Path"=C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=6.0.11.3006]

"Description"=RealPlayer Version Plugin

"Path"=C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpplugin;version=16.0.3.51]

"Description"=RealPlayer Download Plugin

"Path"=C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]

"Description"=

"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@realnetworks.com/npdlplugin;version=1]

"Description"=RealDownloader Plugin

"Path"=C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]

"Description"=Google Update

"Path"=C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]

"Description"=Google Update

"Path"=C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.8]

"Description"=VLC Multimedia Plugin

"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]

"Description"=Handles PDFs in-place in Firefox

"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\

{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\

nsIQTScriptablePlugin.xpt

C:\Program Files\Mozilla Firefox\plugins\

NPOFF12.DLL

nppdf32.dll

nppl3260.dll

nppl3260.xpt

npqtplugin.dll

npqtplugin2.dll

npqtplugin3.dll

npqtplugin4.dll

npqtplugin5.dll

nprpplugin.dll

QuickTimePlugin.class

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Mozilla\Firefox\Profiles\ojh9xb0g.default-1373785269171\extensions\

isreaditlater@ideashower.com

mocseii@kmcbhodsft.edu

superstart@enjoyfreeware.org

support@lastpass.com

{0538E3E3-7E9B-4d49-8831-A227C80A7AD3}

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Mozilla\Firefox\Profiles\ojh9xb0g.default-1373785269171\searchplugins\

Google.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]

Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]

RealNetworks Download and Record Plugin for Internet Explorer - C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2013-08-14 542376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]

DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-12-12 194432]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]

Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]

Java Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-12-24 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Windows Live Aanmelden - Help - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]

Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2013-12-16 194128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]

Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll [2013-10-04 1001936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d2ce3e00-f94a-4740-988e-03dc2f38c34f}]

Bing Bar Helper - C:\Program Files\Microsoft\BingBar\7.3.124.0\BingExt.dll [2013-12-16 1432224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

Java Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-12-24 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - HP View - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll [2003-11-21 98304]

{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2013-12-16 194128]

{8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files\Microsoft\BingBar\7.3.124.0\BingExt.dll [2013-12-16 1432224]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"hpsysdrv"=c:\windows\system\hpsysdrv.exe [1998-05-07 52736]

"HPHUPD06"=c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe [2004-06-07 49152]

"HPHmon06"=C:\WINDOWS\system32\hphmon06.exe [2004-06-07 659456]

"Recguard"=C:\WINDOWS\SMINST\RECGUARD.EXE [2004-04-14 233472]

"LSBWatcher"=c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe [2004-10-14 253952]

"OpwareSE2"=C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe [2003-05-08 49152]

"Monitor"=C:\WINDOWS\PixArt\PAC207\Monitor.exe [2006-11-03 319488]

"PS2"=C:\WINDOWS\system32\ps2.exe [2004-10-25 90112]

"WINREMOTE"=C:\Program Files\InterVideo\Common\Bin\WinRemote.exe [2005-05-10 233472]

"SiteRanker"=C:\Program Files\SiteRanker\SiteRankTray.exe []

"Home Theater SchSvr"=C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe [2005-05-10 106496]

"DivXUpdate"=C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2011-07-29 1259376]

"APSDaemon"=C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-04-21 59720]

"Aimersoft Helper Compact.exe"=C:\Program Files\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe [2012-02-28 1667072]

"Autodesk Sync"=C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [2012-02-05 383424]

"F-Secure Manager"=C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Common\FSM32.EXE [2013-01-03 311432]

"AgentMonitor"=C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe [2013-06-20 391040]

"KiesTrayAgent"=C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [2012-12-20 310280]

"Standby"=c:\Program Files\Common Files\Corel\Standby\Standby.exe [2009-12-17 105632]

"F-Secure Hoster (44163)"=C:\Program Files\Telenet Security Pack\fshoster32.exe [2013-01-18 188400]

"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2013-11-02 152392]

"SpyHunter Security Suite"=C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe [2013-12-29 6430080]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2010-04-16 3872080]

"Facebook Update"=C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe [2012-07-11 138096]

"Shareaza"=C:\Program Files\Shareaza\Shareaza.exe [2012-06-03 4619776]

"Akamai NetSession Interface"=C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Akamai\netsession_win.exe [2013-06-05 4489472]

"KiesPreload"=C:\Program Files\Samsung\Kies\Kies.exe [2012-12-20 1476104]

"KiesAirMessage"=C:\Program Files\Samsung\Kies\KiesAirMessage.exe [2013-02-06 578560]

""=C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [2012-12-20 844296]

"AdobeBridge"= []

"TomTomHOME.exe"=C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [2013-03-22 248208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^HP Digital Imaging Monitor.lnk]

C:\PROGRA~1\HP\DIGITA~1\bin\hpqtra08.exe [2004-11-05 258048]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^LUMIX Simple Viewer.lnk]

C:\PROGRA~1\PANASO~1\LUMIXS~1\PHLEAU~1.EXE [2005-11-14 57344]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^HP_Eigenaar.UW-4B58D8528225^Menu Start^Programma's^Opstarten^OpenOffice.org 3.2 .lnk]

C:\PROGRA~1\OpenOffice.org 3\program\quickstart.exe [2009-12-15 384000]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]

C:\WINDOWS\system32\Ati2evxx.dll [2006-01-11 61440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]

"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2009-05-24 304128]

"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDriveTypeAutoRun"=221

""=

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

"C:\Program Files\LimeWire\LimeWire.exe"="C:\Program Files\LimeWire\LimeWire.exe:*:Enabled:LimeWire"

"C:\Program Files\2K Games\Firaxis Games\Sid Meier's Civilization 4 Complete\Civilization4.exe"="C:\Program Files\2K Games\Firaxis Games\Sid Meier's Civilization 4 Complete\Civilization4.exe:*:Enabled:Sid Meier's Civilization 4 Complete"

"C:\Program Files\2K Games\Firaxis Games\Sid Meier's Civilization 4 Complete\Warlords\Civ4Warlords.exe"="C:\Program Files\2K Games\Firaxis Games\Sid Meier's Civilization 4 Complete\Warlords\Civ4Warlords.exe:*:Enabled:Sid Meier's Civilization 4: Warlords"

"C:\Program Files\2K Games\Firaxis Games\Sid Meier's Civilization 4 Complete\Beyond the Sword\Civ4BeyondSword.exe"="C:\Program Files\2K Games\Firaxis Games\Sid Meier's Civilization 4 Complete\Beyond the Sword\Civ4BeyondSword.exe:*:Enabled:Sid Meier's Civilization 4: Beyond the Sword"

"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"

"C:\Program Files\DownVision\DownVision.exe"="C:\Program Files\DownVision\DownVision.exe:*:Disabled:DownVision"

"C:\Program Files\mIRC\mirc.exe"="C:\Program Files\mIRC\mirc.exe:*:Enabled:mIRC"

"C:\Program Files\MediaBox\MediaBox.exe"="C:\Program Files\MediaBox\MediaBox.exe:*:Enabled:MediaBox"

"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"

"C:\Program Files\Shareaza\Shareaza.exe"="C:\Program Files\Shareaza\Shareaza.exe:*:Enabled:Shareaza"

"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour-service"

"C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Akamai\netsession_win.exe"="C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Akamai\netsession_win.exe:*:Enabled:Akamai NetSession Client"

"C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Facebook\Video\Skype\FacebookVideoCalling.exe"="C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Facebook\Video\Skype\FacebookVideoCalling.exe:*:Enabled:Facebook Video Calling Plugin"

"C:\Program Files\Mozilla Firefox\plugin-container.exe"="C:\Program Files\Mozilla Firefox\plugin-container.exe:*:Enabled:Plugin Container for Firefox"

"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

"C:\xampp\mysql\bin\mysqld.exe"="C:\xampp\mysql\bin\mysqld.exe:*:Enabled:mysqld"

"C:\xampp\apache\bin\httpd.exe"="C:\xampp\apache\bin\httpd.exe:*:Enabled:Apache HTTP Server"

"C:\xampp\MercuryMail\mercury.exe"="C:\xampp\MercuryMail\mercury.exe:*:Enabled:Mercury/32 Core Processing Module v4.62"

"C:\Program Files\Java\jdk1.7.0_25\bin\java.exe"="C:\Program Files\Java\jdk1.7.0_25\bin\java.exe:*:Enabled:Java Platform SE binary"

"C:\xampp\FileZillaFTP\FileZillaServer.exe"="C:\xampp\FileZillaFTP\FileZillaServer.exe:*:Enabled:FileZilla Server"

"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"

"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"

"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"

"C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe"="C:\Program Files\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe:*:Enabled:WebKit"

"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"

"C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe"="C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe:*:Disabled:Vtech local server"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

"%ProgramFiles%\iTunes\iTunes.exe"="%ProgramFiles%\iTunes\iTunes.exe:*:enabled:iTunes"

"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Your Image File Name Here without a path]

"Debugger="

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]

"midimapper"=midimap.dll

"msacm.imaadpcm"=imaadp32.acm

"msacm.msadpcm"=msadp32.acm

"msacm.msg711"=msg711.acm

"msacm.msgsm610"=msgsm32.acm

"msacm.trspch"=tssoft32.acm

"vidc.cvid"=iccvid.dll

"VIDC.I420"=lvcodec2.dll

"vidc.iv31"=ir32_32.dll

"vidc.iv32"=ir32_32.dll

"vidc.iv41"=ir41_32.ax

"VIDC.IYUV"=iyuv_32.dll

"vidc.mrle"=msrle32.dll

"vidc.msvc"=msvidc32.dll

"VIDC.UYVY"=msyuv.dll

"VIDC.YUY2"=msyuv.dll

"VIDC.YVU9"=tsbyuv.dll

"VIDC.YVYU"=msyuv.dll

"wavemapper"=msacm32.drv

"msacm.msg723"=msg723.acm

"vidc.M263"=msh263.drv

"vidc.M261"=msh261.drv

"msacm.msaudio1"=msaud32.acm

"msacm.sl_anet"=sl_anet.acm

"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax

"vidc.iv50"=ir50_32.dll

"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm

"MSVideo8"=VfWWDM32.dll

"vidc.LEAD"=LCODCCMP.DLL

"wave1"=wdmaud.drv

"midi1"=wdmaud.drv

"mixer1"=wdmaud.drv

"aux1"=wdmaud.drv

"wave"=wdmaud.drv

"midi"=wdmaud.drv

"mixer"=wdmaud.drv

"aux"=wdmaud.drv

"MSVideo"=vfwwdm32.dll

"wave2"=wdmaud.drv

"midi2"=wdmaud.drv

"mixer2"=wdmaud.drv

"aux2"=wdmaud.drv

"wave3"=wdmaud.drv

"midi3"=wdmaud.drv

"mixer3"=wdmaud.drv

"aux3"=wdmaud.drv

"msacm.siren"=sirenacm.dll

"vidc.DIVX"=DivX.dll

"vidc.yv12"=DivX.dll

"wave4"=wdmaud.drv

"midi4"=wdmaud.drv

"mixer4"=wdmaud.drv

"aux4"=wdmaud.drv

"VIDC.FFDS"=ff_vfw.dll

"wave5"=wdmaud.drv

"midi5"=wdmaud.drv

"mixer5"=wdmaud.drv

"aux5"=wdmaud.drv

"wave6"=wdmaud.drv

"mixer6"=wdmaud.drv

"wave7"=wdmaud.drv

"mixer7"=wdmaud.drv

"wave8"=wdmaud.drv

"mixer8"=wdmaud.drv

"wave9"=wdmaud.drv

"mixer9"=wdmaud.drv

"midi6"=wdmaud.drv

"aux6"=wdmaud.drv

======File associations======

.scr - open - C:\WINDOWS\system32\notepad.exe "%1"

.scr - install -

.scr - config -

======List of files/folders created in the last 3 months======

2014-01-01 20:33:27 ----D---- C:\rsit

2014-01-01 13:35:14 ----D---- C:\Program Files\Trend Micro

2014-01-01 10:17:32 ----D---- C:\AdwCleaner

2013-12-31 19:08:01 ----ASH---- C:\hiberfil.sys

2013-12-30 20:57:09 ----D---- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Nitreal Games

2013-12-30 18:55:50 ----D---- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Brabl

2013-12-30 09:41:01 ----D---- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\eCyber

2013-12-30 09:34:54 ----D---- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\iSafe

2013-12-29 12:49:20 ----D---- C:\sh4ldr

2013-12-29 12:45:04 ----D---- C:\WINDOWS\0028CB34D5D3460FB308A39A095A5E01.TMP

2013-12-28 14:08:36 ----D---- C:\Program Files\Enigma Software Group

2013-12-28 14:04:05 ----D---- C:\WINDOWS\220FB0354744483A9A0B41DF77061583.TMP

2013-12-27 12:31:01 ----D---- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\quickclick

2013-12-27 09:30:45 ----D---- C:\Documents and Settings\All Users\Application Data\9c6108190e12f042

2013-12-26 18:54:10 ----D---- C:\Program Files\GS.Enabler

2013-12-26 18:46:35 ----D---- C:\Documents and Settings\All Users\Application Data\InstallMate

2013-12-24 09:24:23 ----A---- C:\WINDOWS\system32\javaws.exe

2013-12-24 09:23:45 ----A---- C:\WINDOWS\system32\WindowsAccessBridge.dll

2013-12-24 09:23:45 ----A---- C:\WINDOWS\system32\javaw.exe

2013-12-24 09:23:44 ----A---- C:\WINDOWS\system32\java.exe

2013-12-22 11:35:58 ----D---- C:\Program Files\Mozilla Firefox

2013-12-13 00:40:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2898715$

2013-12-13 00:40:43 ----HDC---- C:\WINDOWS\$NtUninstallKB2904266$

2013-12-13 00:27:35 ----HDC---- C:\WINDOWS\$NtUninstallKB2893294$

2013-12-13 00:26:20 ----HDC---- C:\WINDOWS\$NtUninstallKB2893984$

2013-12-13 00:25:15 ----HDC---- C:\WINDOWS\$NtUninstallKB2892075$

2013-11-26 09:23:44 ----D---- C:\Program Files\iPod

2013-11-26 09:23:17 ----D---- C:\Program Files\iTunes

2013-11-26 09:23:17 ----D---- C:\Documents and Settings\All Users\Application Data\188F1432-103A-4ffb-80F1-36B633C5C9E1

2013-11-13 19:16:22 ----HDC---- C:\WINDOWS\$NtUninstallKB2868626$

2013-11-13 19:14:01 ----HDC---- C:\WINDOWS\$NtUninstallKB2900986$

2013-11-13 19:13:33 ----HDC---- C:\WINDOWS\$NtUninstallKB2862152$

2013-11-13 19:13:23 ----HDC---- C:\WINDOWS\$NtUninstallKB2876331$

2013-10-12 20:03:36 ----HDC---- C:\WINDOWS\$NtUninstallKB2847311$

2013-10-12 19:57:33 ----HDC---- C:\WINDOWS\$NtUninstallKB2862335$

2013-10-12 18:45:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2868038$

2013-10-12 18:33:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2883150$

2013-10-12 18:32:34 ----HDC---- C:\WINDOWS\$NtUninstallKB2862330$

======List of files/folders modified in the last 3 months======

2014-01-01 20:34:14 ----D---- C:\WINDOWS\system32\drivers\etc

2014-01-01 20:32:41 ----D---- C:\WINDOWS\Prefetch

2014-01-01 20:04:00 ----A---- C:\WINDOWS\SchedLgU.Txt

2014-01-01 18:29:09 ----D---- C:\WINDOWS\Temp

2014-01-01 13:43:31 ----D---- C:\WINDOWS\system32\CatRoot2

2014-01-01 13:35:16 ----SHD---- C:\WINDOWS\Installer

2014-01-01 13:35:15 ----HD---- C:\Config.Msi

2014-01-01 13:35:14 ----RD---- C:\Program Files

2014-01-01 11:09:17 ----D---- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\WTablet

2014-01-01 11:08:40 ----D---- C:\WINDOWS\system32

2014-01-01 11:03:55 ----SD---- C:\WINDOWS\Tasks

2014-01-01 00:08:07 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP

2013-12-31 11:00:41 ----D---- C:\Program Files\Unlocker

2013-12-31 09:16:34 ----D---- C:\Program Files\PC Tools Utilities

2013-12-30 08:48:56 ----D---- C:\WINDOWS\Debug

2013-12-29 22:37:38 ----D---- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Delta

2013-12-29 21:45:39 ----D---- C:\WINDOWS\system32\Lang

2013-12-29 15:47:15 ----D---- C:\WINDOWS

2013-12-29 12:52:22 ----D---- C:\WINDOWS\system32\drivers

2013-12-29 12:44:15 ----D---- C:\Program Files\Common Files\Wise Installation Wizard

2013-12-29 09:58:28 ----D---- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\SiteRanker

2013-12-27 19:51:00 ----D---- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\AlawarEntertainment

2013-12-27 09:29:36 ----HD---- C:\Documents and Settings

2013-12-25 09:05:40 ----RSD---- C:\WINDOWS\assembly

2013-12-25 09:05:40 ----D---- C:\WINDOWS\Microsoft.NET

2013-12-24 09:49:38 ----D---- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Autodesk

2013-12-24 09:48:45 ----D---- C:\Program Files\Common Files\Autodesk Shared

2013-12-24 08:46:32 ----D---- C:\Program Files\Mozilla Maintenance Service

2013-12-13 00:42:26 ----D---- C:\Documents and Settings\All Users\Application Data\Microsoft Help

2013-12-13 00:41:48 ----HD---- C:\WINDOWS\inf

2013-12-13 00:41:43 ----RSHD---- C:\WINDOWS\system32\dllcache

2013-12-13 00:41:40 ----D---- C:\Program Files\Internet Explorer

2013-12-13 00:41:05 ----A---- C:\WINDOWS\imsins.BAK

2013-12-13 00:38:25 ----D---- C:\WINDOWS\system32\MRT

2013-12-13 00:29:48 ----A---- C:\WINDOWS\system32\MRT.exe

2013-12-12 11:31:35 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe

2013-12-01 11:45:57 ----SD---- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Microsoft

2013-11-26 09:23:40 ----D---- C:\Program Files\Common Files\Apple

2013-11-18 15:26:54 ----D---- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Canon

2013-11-13 19:12:20 ----D---- C:\WINDOWS\ie8updates

2013-11-13 04:00:05 ----A---- C:\WINDOWS\system32\imagehlp.dll

2013-11-13 02:13:57 ----N---- C:\WINDOWS\system32\tzchange.exe

2013-11-09 10:07:53 ----D---- C:\Program Files\Java

2013-11-09 09:42:06 ----D---- C:\Program Files\Telenet Security Pack

2013-11-07 06:38:06 ----A---- C:\WINDOWS\system32\rpcrt4.dll

2013-11-06 02:36:43 ----A---- C:\WINDOWS\system32\xpsp4res.dll

2013-10-30 09:18:59 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI

2013-10-29 13:15:08 ----A---- C:\WINDOWS\system32\ieframe.dll

2013-10-29 08:45:07 ----N---- C:\WINDOWS\system32\occache.dll

2013-10-29 08:45:07 ----A---- C:\WINDOWS\system32\wininet.dll

2013-10-29 08:45:07 ----A---- C:\WINDOWS\system32\urlmon.dll

2013-10-29 08:45:07 ----A---- C:\WINDOWS\system32\url.dll

2013-10-29 08:45:07 ----A---- C:\WINDOWS\system32\mstime.dll

2013-10-29 08:45:07 ----A---- C:\WINDOWS\system32\mshtmled.dll

2013-10-29 08:45:07 ----A---- C:\WINDOWS\system32\mshtml.dll

2013-10-29 08:45:07 ----A---- C:\WINDOWS\system32\msfeedsbs.dll

2013-10-29 08:45:07 ----A---- C:\WINDOWS\system32\msfeeds.dll

2013-10-29 08:45:07 ----A---- C:\WINDOWS\system32\licmgr10.dll

2013-10-29 08:45:07 ----A---- C:\WINDOWS\system32\jsproxy.dll

2013-10-29 08:45:07 ----A---- C:\WINDOWS\system32\iertutil.dll

2013-10-29 08:45:07 ----A---- C:\WINDOWS\system32\iepeers.dll

2013-10-29 08:45:06 ----N---- C:\WINDOWS\system32\iedkcs32.dll

2013-10-29 08:45:06 ----A---- C:\WINDOWS\system32\corpol.dll

2013-10-29 01:48:58 ----N---- C:\WINDOWS\system32\ie4uinit.exe

2013-10-24 00:45:30 ----A---- C:\WINDOWS\system32\scrrun.dll

2013-10-13 17:12:51 ----D---- C:\Program Files\Microsoft Silverlight

2013-10-12 20:09:18 ----D---- C:\WINDOWS\WinSxS

2013-10-12 16:57:31 ----A---- C:\WINDOWS\system32\oakley.dll

2013-10-09 14:13:15 ----A---- C:\WINDOWS\system32\gdi32.dll

2013-10-07 12:00:04 ----A---- C:\WINDOWS\system32\crypt32.dll

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 fsbts;fsbts; C:\WINDOWS\system32\Drivers\fsbts.sys [2013-09-25 44240]

R0 ohci1394;VIA OHCI Compliant IEEE 1394 Host Controller; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696]

R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2010-06-10 45648]

R0 sonyhcb;Sony Digital Imaging Base; C:\WINDOWS\system32\DRIVERS\sonyhcb.sys [2001-11-05 6097]

R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]

R1 F-Secure HIPS;F-Secure HIPS Driver; \??\C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\HIPS\drivers\fshs.sys []

R1 intelppm;Intel GV3-processorstuurprogramma; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40448]

R1 iSafeNetFilter;iSafeNetFilter; \??\C:\Program Files\iSafe\iSafeNetFilter.sys []

R1 kbdhid;Stuurprogramma voor toetsenbord-HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]

R1 sbaphd;sbaphd; C:\WINDOWS\system32\drivers\sbaphd.sys [2012-01-12 21240]

R1 SCDEmu;SCDEmu; C:\WINDOWS\system32\drivers\SCDEmu.sys [2013-01-27 113608]

R1 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2006-07-24 5632]

R2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys [2009-08-05 54752]

R2 sbapifs;sbapifs; C:\WINDOWS\system32\drivers\sbapifs.sys [2012-01-12 77816]

R3 Afc;PPdus ASPI Shell; C:\WINDOWS\system32\drivers\Afc.sys [2006-11-10 18688]

R3 Arp1394;1394 ARP-clientprotocol; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-13 60800]

R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2006-01-11 1421312]

R3 Cap7134;ASUS TV7134 WDM Video Capture; C:\WINDOWS\system32\DRIVERS\Cap7134.sys [2004-10-27 335360]

R3 E100B;Intel® PRO Network Connection Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2004-10-14 155648]

R3 esgiguard;esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys []

R3 F-Secure Gatekeeper;F-Secure Gatekeeper; \??\C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys []

R3 fsni;fsni; \??\C:\Program Files\Telenet Security Pack\apps\CCF_Scanning\fsnixp32.sys []

R3 fsnitdi;fsnitdi; \??\C:\Program Files\Telenet Security Pack\apps\CCF_Scanning\fsnitdi32.sys []

R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\SYSTEM32\DRIVERS\GEARAspiWDM.sys [2012-08-21 26840]

R3 HDAudBus;Microsoft UAA-busstuurprogramma voor High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]

R3 HidUsb;Microsoft HID Class-stuurprogramma; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]

R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2005-04-16 2564032]

R3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\LVUSBSta.sys [2007-05-11 41888]

R3 LVUVC;Logitech QuickCam Fusion(UVC); C:\WINDOWS\system32\DRIVERS\lvuvc.sys [2007-05-11 3580832]

R3 mouhid;Stuurprogramma voor muis-HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-09-06 12288]

R3 NIC1394;1394-stuurprogramma; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-13 61824]

R3 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2003-09-20 21248]

R3 PhTVTune;ASUS WDM TV Tuner; C:\WINDOWS\system32\DRIVERS\PhTVTune.sys [2004-10-24 24544]

R3 usbaudio;Stuurprogramma voor USB-audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2013-07-17 60160]

R3 usbccgp;Microsoft generiek hoofd-USB-stuurprogramma; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]

R3 USBSTOR;Stuurprogramma voor USB-massaopslag; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]

R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]

R3 wacommousefilter;Wacom Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\wacommousefilter.sys [2007-02-16 11312]

R3 wacomvhid;Wacom Virtual Hid Driver; C:\WINDOWS\system32\DRIVERS\wacomvhid.sys [2007-02-16 12848]

R3 WacomVKHid;Virtual Keyboard Driver; C:\WINDOWS\system32\DRIVERS\WacomVKHid.sys [2007-02-15 11440]

R3 WsAudio_DeviceS(1);WsAudio_DeviceS(1); C:\WINDOWS\system32\drivers\WsAudio_DeviceS(1).sys [2011-12-09 25704]

R3 WsAudio_DeviceS(2);WsAudio_DeviceS(2); C:\WINDOWS\system32\drivers\WsAudio_DeviceS(2).sys [2011-12-09 25704]

R3 WsAudio_DeviceS(3);WsAudio_DeviceS(3); C:\WINDOWS\system32\drivers\WsAudio_DeviceS(3).sys [2011-12-09 25704]

R3 WsAudio_DeviceS(4);WsAudio_DeviceS(4); C:\WINDOWS\system32\drivers\WsAudio_DeviceS(4).sys [2011-12-09 25704]

R3 WsAudio_DeviceS(5);WsAudio_DeviceS(5); C:\WINDOWS\system32\drivers\WsAudio_DeviceS(5).sys [2011-12-09 25704]

S1 SBRE;SBRE; \??\C:\WINDOWS\system32\drivers\SBREdrv.sys []

S3 CCDECODE;Closed Caption-decoder; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]

S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2013-01-31 83168]

S3 EsgScanner;EsgScanner; C:\WINDOWS\system32\DRIVERS\EsgScanner.sys [2012-06-22 19984]

S3 iSafeKrnl;iSafeKrnl; \??\C:\Program Files\iSafe\iSafeKrnl.sys []

S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink-conversieprogramma; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]

S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]

S3 NdisIP;Microsoft TV/Video-verbinding; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]

S3 PAC207;Microcular; C:\WINDOWS\system32\DRIVERS\PFC027.SYS [2007-06-12 508416]

S3 PcdrNdisuio;PCDRNDISUIO Usermode I/O Protocol; C:\WINDOWS\system32\DRIVERS\pcdrndisuio.sys [2005-01-19 12416]

S3 PCTDMDefrag;PCTDMDefrag; \??\C:\WINDOWS\system32\drivers\PCTDMDefrag.sys []

S3 PCTDSMon;PCTDSMon; \??\C:\WINDOWS\system32\drivers\PCTDSMon.sys []

S3 Ps2;PS2; C:\WINDOWS\system32\DRIVERS\PS2.sys [2001-06-04 14112]

S3 rtl8139;NT-stuurprogramma voor Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-04 20992]

S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]

S3 sonyhcs;Sony Digital Imaging Video; C:\WINDOWS\system32\DRIVERS\sonyhcs.sys [2001-11-05 299923]

S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2013-01-31 181344]

S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]

S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2012-12-13 45056]

S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]

S3 usbscan;Stuurprogramma voor USB-scanner; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]

S3 WN5401;Liteon Wireless LAN PCI 802.11 a/b/g adapter WN5401A; C:\WINDOWS\system32\DRIVERS\wn5401.sys [2005-01-07 449920]

S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]

S3 WSTCODEC;World Standard Teletext-codec; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]

S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apache2.4;Apache2.4; C:\xampp\apache\bin\httpd.exe [2013-02-23 22016]

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2013-09-07 55624]

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2006-01-11 405504]

R2 Autodesk Content Service;Autodesk Content Service; C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe [2012-01-31 19232]

R2 Bonjour Service;Bonjour-service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 390504]

R2 DMDefragService;Performance Toolkit Disk Defrag Service; C:\Program Files\PC Tools Utilities\Tools\Defrag\DMDefragSrv.exe [2010-08-26 1034208]

R2 DMRepairService;Performance Toolkit Disk Repair Service; C:\Program Files\PC Tools Utilities\Tools\Repair\DMRepairSrv.exe [2010-08-26 1021920]

R2 FileZilla Server;FileZilla Server FTP server; C:\xampp\FileZillaFTP\FileZillaServer.exe [2012-02-26 632320]

R2 fshoster;F-Secure Dll Hoster; C:\Program Files\Telenet Security Pack\fshoster32.exe [2013-01-18 188400]

R2 FSORSPClient;F-Secure ORSP Client; C:\Program Files\Telenet Security Pack\apps\CCF_Reputation\fsorsp.exe [2013-06-27 60352]

R2 gearsec;gearsec; C:\WINDOWS\system32\gearsec.exe [2005-11-30 58952]

R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2013-12-24 182696]

R2 mysql;mysql; C:\xampp\mysql\bin\mysqld --defaults-file=C:\xampp\mysql\bin\my.ini mysql []

R2 PCToolsSSDMonitorSvc;PC Tools Startup and Shutdown Monitor service; C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe [2011-01-28 632792]

R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2004-09-29 69632]

R2 PSI_SVC_2;Protexis Licensing V2; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [2010-03-10 189728]

R2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [2013-08-14 39056]

R2 SpyHunter 4 Service;SpyHunter 4 Service; C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE [2013-10-18 770432]

R2 TabletServicePen;TabletServicePen; C:\WINDOWS\system32\Pen_Tablet.exe [2007-09-07 1373480]

R2 TomTomHOMEService;TomTomHOMEService; C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe [2013-03-22 93072]

R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

R3 BBUpdate;BBUpdate; C:\Program Files\Microsoft\BingBar\7.3.124.0\SeaPort.exe [2013-12-16 247968]

R3 FSMA;FSMA; C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Common\FSMA32.EXE [2013-01-03 209032]

R3 iPod Service;iPod-service; C:\Program Files\iPod\bin\iPodService.exe [2013-11-02 553288]

S2 BBSvc;BingBar Service; C:\Program Files\Microsoft\BingBar\7.3.124.0\BBSvc.exe [2013-12-16 193696]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

S2 Freemake Improver;Freemake Improver; C:\Documents and Settings\All Users\Application Data\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe []

S2 iSafeService;iSafeService; C:\Program Files\iSafe\iSafeSvc.exe []

S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-02-07 161384]

S2 WSearch;Windows Search; C:\WINDOWS\system32\SearchIndexer.exe [2008-05-26 439808]

S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-12 257416]

S3 aspnet_state;ASP.NET-statusservice; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]

S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]

S3 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268288]

S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2012-10-18 1044816]

S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]

S3 fsssvc;De service Windows Live Family Safety; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2010-04-28 704872]

S3 gupdate;Google Updateservice (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-10-22 136176]

S3 gupdatem;Google Update-service (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-10-22 136176]

S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-17 194032]

S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]

S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]

S3 LightScribeService;LightScribeService Direct Disc Labeling Service; c:\Program Files\Common Files\LightScribe\LSSrvc.exe [2005-05-08 53248]

S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]

S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-12-22 119408]

S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]

S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

S3 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

S3 WinRM;Windows Remote Management (WS-Management); C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

S3 WMPNetworkSvc;Windows Media Player Network Sharing-service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-02 917504]

S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-07-20 756392]

S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

[kape]

Download Zoek.zip naar het bureaublad.

• Wanneer Internet Explorer of een andere browser of virusscanner melding geeft dat dit bestand onveilig zou zijn kun je negeren, dit is namelijk een onterechte waarschuwing.
  
• Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe (hier en hier) kan je lezen hoe je dat doet.
  
• Klik met de rechtermuisknop op Zoek.zip en klik op de optie "Alles uitpakken".
  
• Dubbelklik op Zoek.exe om de tool te starten.
  
• Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  
• Kopieer nu onderstaande code en plak die in het grote invulvenster:
  
• Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.
  

  C:\WINDOWS\0028CB34D5D3460FB308A39A095A5E01.TMP;f
 C:\WINDOWS\220FB0354744483A9A0B41DF77061583.TMP;f
 C:\Documents and Settings\All Users\Application Data\9c6108190e12f042;fs
 C:\Program Files\GS.Enabler;fs
 C:\Documents and Settings\All Users\Application Data\InstallMate;fs
 C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\quickclick;fs
 C:\Documents and Settings\All Users\Application Data\188F1432-103A-4ffb-80F1-36B633C5C9E1;fs
 C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Delta;fs
 emptyfolderscheck;delete 
startupall; 
filesrcm;

• Klik op de knop "Options" en vink nu de onderstaande opties aan.
  
• Do a Quick Scan
  
  
• IE Defaults
  
• Auto Clean
  
• De optie "Scan All Users" staat standaard aangevinkt.
  
• Klik nu op de knop "Run script".
  
• Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
  
• Mocht er geen logje verschijnen, start zoek.exe dan opnieuw en klik op de knop zoek-results.log, de log verschijnt dan alsnog.
  
• Post het geopende logje in het volgende bericht.
  

[Kempvis]

Zoek.exe v5.0.0.0 Updated 02-Januari-2014

Tool run by HP_Eigenaar on do 02/01/2014 at 19:18:24,23.

Microsoft Windows XP Home Edition 5.1.2600 Service Pack 3 x86

Running in: Normal Mode Internet Access Detected

Launched: C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Mijn documenten\Downloads\zoek\zoek.com [scan all users] [script inserted] [Checkboxes used]

===== Runcheck 19:27:35,25 =====

--- Create Environment Variables 19:27:37,82

--- Create System Restore Point 19:29:06,65

--- Checking Input 19:29:41,54

--- AU AppData Check 19:29:56,75

--- Remove From Windows Installer 19:30:18,78

--- Empty Folders Check 19:44:10,89

--- IE Startpage Check 19:48:39,90

--- Program Files DB Check 19:52:35,17

--- C:\Documents and Settings\Administrator\Application Data DB Check 19:57:00,92

--- C:\Documents and Settings\Default User\Application Data DB Check 19:57:00,92

--- C:\Documents and Settings\HP_Eigenaar\Application Data DB Check 19:57:00,92

--- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data DB Check 19:57:00,92

--- C:\Documents and Settings\LocalService\Application Data DB Check 19:57:00,92

--- C:\Documents and Settings\NetworkService\Application Data DB Check 19:57:00,92

--- C:\Documents and Settings\Sunshine\Application Data DB Check 19:57:00,92

--- C:\WINDOWS\system32\config\systemprofile\Application Data DB Check 19:57:00,92

--- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225 DB Check 20:03:19,21

--- C:\Documents and Settings\All Users\Application Data DB Check 20:06:52,79

--- C:\Documents and Settings\Administrator\Local Settings\Application Data DB Check 20:07:00,10

--- C:\Documents and Settings\ASPNET\Local Settings\Application Data DB Check 20:07:00,10

--- C:\Documents and Settings\Default User\Local Settings\Application Data DB Check 20:07:00,10

--- C:\Documents and Settings\Gast\Local Settings\Application Data DB Check 20:07:00,10

--- C:\Documents and Settings\HelpAssistant\Local Settings\Application Data DB Check 20:07:00,10

--- C:\Documents and Settings\HP_Eigenaar\Local Settings\Application Data DB Check 20:07:00,10

--- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data DB Check 20:07:00,10

--- C:\Documents and Settings\LocalService\Local Settings\Application Data DB Check 20:07:00,10

--- C:\Documents and Settings\NetworkService\Local Settings\Application Data DB Check 20:07:00,10

--- C:\Documents and Settings\Sunshine\Local Settings\Application Data DB Check 20:07:00,10

--- C:\Documents and Settings\SUPPORT_388945a0\Local Settings\Application Data DB Check 20:07:00,10

--- C:\Documents and Settings\SUPPORT_fddfa904\Local Settings\Application Data DB Check 20:07:00,10

--- C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data DB Check 20:07:00,10

--- C:\Documents and Settings\All Users\Menu Start\Programma's DB Check 20:13:43,32

--- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Menu Start\Programma's DB Check 20:14:02,07

--- Tasks DB Check 20:14:11,39

--- Tasks2 DB Check 20:14:18,96

--- Documents DB Check 20:15:07,46

--- Documents2 DB Check 20:15:33,00

--- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Mozilla\Firefox\Profiles\bk59edmh.default DB Check 20:16:08,10

--- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Mozilla\Firefox\Profiles\ojh9xb0g.default-1373785269171 DB Check 20:16:08,10

--- C:\Documents and Settings\Sunshine\Application Data\Mozilla\Firefox\Profiles\ymqmsrbx.default DB Check 20:16:08,10

--- C:\Documents and Settings\All Users\Bureaublad DB Check 20:16:32,06

--- Services DB Check 20:16:53,51

--- FF prefs.js DB Check 20:20:48,20

--- Del by CLSID 20:26:23,03

--- Delete Services 20:30:28,18

--- Firefox Fix 20:31:31,01

--- Registry Fix 20:32:24,51

--- Delete files\folders 20:32:25,29

--- Create Backups 20:32:25,87

--- Recently Created 20:37:55,59

--- StartUp Information 20:44:12,79

--- Firefox Extensions 20:45:46,90

--- Firefox Plugins 20:45:48,95

--- Chrome Look 21:00:38,92

--- Create Backups 21:04:00,87

--- Chrome Fix 21:08:26,39

--- IEdefaults 21:08:28,31

--- Del by CLSID 21:08:52,92

--- Del from Uninstall List 21:15:43,34

--- msconfig check 21:21:34,78

--- Deleting Registry Keys 21:21:59,32

--- Empty IE Cache 21:21:59,46

--- Empty FF Cache 21:24:45,01

--- Empty CHR Cache 21:24:54,89

--- Empty Flash Cache 21:25:02,64

--- Empty Java Cache 21:25:17,93

--- C:\zoek_backups Content 21:25:37,54

--- Empty Temp 21:25:45,28

Hoop dat dit alles is wat het logje moet laten zien,

want heb gisteren wel tot 3x toe moeten proberen om progje te laten draaien.

[kape]

Dit is de evolutie van het tooltje, maar niet het definitieve logje. Kijk eens in je C-partitie naar het bestand zoek-results ? Dat zou het nieuwe logje moeten zijn.

[Kempvis]

Beste kape,

kon het logje niet vinden.

Zelfs de zoekmachine niet.

Heb dan het zoektooltje opnieuw geïnstalleerd en opgestart en hier staat plots wel een logje.

Hoop dat je er iets mee kan.

Zoek.exe v5.0.0.0 Updated 02-Januari-2014

Tool run by HP_Eigenaar on do 02/01/2014 at 19:18:24,23.

Microsoft Windows XP Home Edition 5.1.2600 Service Pack 3 x86

Running in: Normal Mode Internet Access Detected

Launched: C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Mijn documenten\Downloads\zoek\zoek.com [scan all users] [script inserted] [Checkboxes used]

==== System Restore Info ======================

2/01/2014 19:29:29 Zoek.exe System Restore Point Created Succesfully.

==== Empty Folders Check ======================

C:\Program Files\Corel.VideoStudio.Pro deleted successfully

C:\Program Files\MSXML 4.0 deleted successfully

C:\Program Files\Symantec deleted successfully

C:\Program Files\Common Files\Symantec Shared deleted successfully

C:\Documents and Settings\All Users\Menu Start\Programma's\FLV Direct Player deleted successfully

C:\Documents and Settings\All Users\Application Data\AVAST Software deleted successfully

C:\Documents and Settings\All Users\Application Data\DriverScanner deleted successfully

C:\Documents and Settings\All Users\Application Data\firebird deleted successfully

C:\Documents and Settings\Administrator\Application Data\SampleView deleted successfully

C:\Documents and Settings\Administrator\Application Data\Symantec deleted successfully

C:\Documents and Settings\Default User\Application Data\SampleView deleted successfully

C:\Documents and Settings\Default User\Application Data\Symantec deleted successfully

C:\Documents and Settings\HP_Eigenaar\Application Data\AdobeUM deleted successfully

C:\Documents and Settings\HP_Eigenaar\Application Data\Publish Providers deleted successfully

C:\Documents and Settings\HP_Eigenaar\Application Data\SampleView deleted successfully

C:\Documents and Settings\HP_Eigenaar\Application Data\Symantec deleted successfully

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\AdobeUM deleted successfully

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\QuickScan deleted successfully

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\SampleView deleted successfully

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Symantec deleted successfully

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Windows Live Writer deleted successfully

C:\Documents and Settings\LocalService\Application Data\Apple Computer deleted successfully

C:\Documents and Settings\Sunshine\Application Data\Google deleted successfully

C:\Documents and Settings\Sunshine\Application Data\SampleView deleted successfully

C:\Documents and Settings\Sunshine\Application Data\Symantec deleted successfully

C:\Documents and Settings\HP_Eigenaar\Local Settings\Application Data\WMTools Downloaded Files deleted successfully

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\GameSpy deleted successfully

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\MediaGet2 deleted successfully

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\PackageAware deleted successfully

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Real deleted successfully

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\WMTools Downloaded Files deleted successfully

C:\Documents and Settings\LocalService\Local Settings\Application Data\Google deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-1594897154-2424950955-3957525660-1008\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} deleted successfully

HKEY_USERS\S-1-5-21-1594897154-2424950955-3957525660-1008\Software\Microsoft\Internet Explorer\SearchScopes\{C04B7D22-5AEC-4561-8F49-27F6269208F6} deleted successfully

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} deleted successfully

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\iSafeService deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\iSafeService deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\iSafeKrnl deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\iSafeKrnl deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\iSafeNetFilter deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\iSafeNetFilter deleted successfully

==== FireFox Fix ======================

ProfilePath: C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Mozilla\Firefox\Profiles\bk59edmh.default

prefs.js not found

user.js not found

---- FireFox user.js and prefs.js backups ----

ProfilePath: C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Mozilla\Firefox\Profiles\ojh9xb0g.default-1373785269171

user.js not found

---- Lines browser.startup.page removed from prefs.js ----

user_pref("browser.startup.page", 3);

---- Lines extensions.Z3UzkAXhu removed from prefs.js ----

user_pref("extensions.Z3UzkAXhu.epoch", "1388691018");

---- FireFox user.js and prefs.js backups ----

prefs_20140201_2031_.backup

ProfilePath: C:\Documents and Settings\Sunshine\Application Data\Mozilla\Firefox\Profiles\ymqmsrbx.default

prefs.js not found

user.js not found

---- FireFox user.js and prefs.js backups ----

==== Registry Fix Code ======================

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]

"bProtectTabs"=-

==== Deleting Files \ Folders ======================

C:\Documents and Settings\All Users\Application Data\9c6108190e12f042 deleted

C:\Program Files\GS.Enabler deleted

C:\Documents and Settings\All Users\Application Data\InstallMate deleted

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\quickclick deleted

C:\Documents and Settings\All Users\Application Data\188F1432-103A-4ffb-80F1-36B633C5C9E1 deleted

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Delta deleted

C:\found.000 deleted

C:\found.001 deleted

C:\Documents and Settings\HP_Eigenaar\Application Data\Uniblue deleted

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Microsoft\Internet Explorer\Quick Launch\YAC.lnk deleted

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Microsoft\Internet Explorer\Quick Launch\QuickStores.url deleted

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\AlawarEntertainment deleted

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\eCyber deleted

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\iSafe deleted

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\GoforFiles deleted

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Babylon deleted

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\BabylonToolbar deleted

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\iWin deleted

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Registry Mechanic deleted

C:\Documents and Settings\Sunshine\Application Data\Babylon deleted

C:\Documents and Settings\Sunshine\Application Data\BabylonToolbar deleted

C:\WINDOWS\system32\config\systemprofile\Application Data\iSafe deleted

C:\Documents and Settings\All Users\Application Data\YTD Video Downloader deleted

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\iLivid deleted

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\IAC deleted

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\cache deleted

C:\Documents and Settings\Sunshine\Local Settings\Application Data\Babylon deleted

C:\Documents and Settings\All Users\Menu Start\Programma's\YTD Video Downloader deleted

C:\Documents and Settings\All Users\Menu Start\Programma's\YAC deleted

C:\WINDOWS\002509_.tmp deleted

C:\WINDOWS\005014_.tmp deleted

C:\WINDOWS\wininit.ini deleted

C:\WINDOWS\tasks\Go for FilesUpdate.job deleted

C:\WINDOWS\System32\SET11A.tmp deleted

C:\WINDOWS\System32\SET11D.tmp deleted

C:\WINDOWS\System32\SET129.tmp deleted

C:\WINDOWS\System32\SET12B.tmp deleted

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Mijn documenten\Optimizer Pro deleted

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Mozilla\Firefox\Profiles\bk59edmh.default\searchplugins\search-safer.xml deleted

C:\Documents and Settings\All Users\Bureaublad\YAC.lnk deleted

C:\Documents and Settings\All Users\Bureaublad\YTD Video Downloader.lnk deleted

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Mijn documenten\Downloads\smas-+Notenkraker.part2.rar.exe deleted

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Mijn documenten\Downloads\1000vlammen\1000vlam-NL.part3.rar.exe deleted

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Mijn documenten\Downloads\torna-nl.rar.exe deleted

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Mijn documenten\Downloads\Amelikerst_NL.rar.exe deleted

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Mijn documenten\Downloads\1000vlam-NL.part3.rar.exe deleted

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Mijn documenten\Downloads\smas-+Notenkraker.part1.rar.exe deleted

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Mijn documenten\Downloads\1000vlammen\1000vlam-NL.part2.rar.exe deleted

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Mozilla\Firefox\Profiles\ojh9xb0g.default-1373785269171\extensions\mocseii@kmcbhodsft.edu deleted

"C:\WINDOWS\0028CB34D5D3460FB308A39A095A5E01.TMP\WiseCustomCalla21.exe" deleted

"C:\WINDOWS\220FB0354744483A9A0B41DF77061583.TMP\WiseCustomCall.dll" deleted

"C:\WINDOWS\220FB0354744483A9A0B41DF77061583.TMP\WiseCustomCalla.dll" deleted

"C:\WINDOWS\220FB0354744483A9A0B41DF77061583.TMP\WiseCustomCalla17.dll" deleted

"C:\WINDOWS\220FB0354744483A9A0B41DF77061583.TMP\WiseCustomCalla18.exe" deleted

"C:\WINDOWS\220FB0354744483A9A0B41DF77061583.TMP\WiseCustomCalla19.dll" deleted

"C:\WINDOWS\220FB0354744483A9A0B41DF77061583.TMP\WiseCustomCalla2.dll" deleted

"C:\WINDOWS\220FB0354744483A9A0B41DF77061583.TMP\WiseCustomCalla20.dll" deleted

"C:\WINDOWS\220FB0354744483A9A0B41DF77061583.TMP\WiseCustomCalla22.dll" deleted

"C:\WINDOWS\220FB0354744483A9A0B41DF77061583.TMP\WiseCustomCalla22.exe" deleted

"C:\WINDOWS\220FB0354744483A9A0B41DF77061583.TMP\WiseData.ini" deleted

"C:\Program Files\Shareaza\BugTrap.dll" deleted

"C:\Program Files\Shareaza\bzlib.dll" deleted

"C:\Program Files\Shareaza\GeoIP.dat" not deleted

"C:\Program Files\Shareaza\GeoIP.dll" deleted

"C:\Program Files\Shareaza\GFLImageServices.dll" deleted

"C:\Program Files\Shareaza\HashLib.dll" deleted

"C:\Program Files\Shareaza\ImageViewer.dll" deleted

"C:\Program Files\Shareaza\libgfl340.dll" deleted

"C:\Program Files\Shareaza\Preview.dll" deleted

"C:\Program Files\Shareaza\RegExp.dll" deleted

"C:\Program Files\Shareaza\Shareaza.exe" deleted

"C:\Program Files\Shareaza\sqlite3.dll" deleted

"C:\Program Files\Shareaza\VirusTotal.dll" deleted

"C:\Program Files\Shareaza\zlibwapi.dll" deleted

"C:\WINDOWS\0028CB34D5D3460FB308A39A095A5E01.TMP" deleted

"C:\WINDOWS\220FB0354744483A9A0B41DF77061583.TMP" deleted

"C:\Program Files\Shareaza" not deleted

==== Files Recently Created / Modified ======================

====== C:\WINDOWS ====

====== C:\DOCUME~1\HP_EIG~1.UW-\LOCALS~1\Temp ====

====== Java Cache =====

2013-12-24 08:28:56 C1BBA7F1278F193AB584FFF460DB5E2A 17878 ----a-w- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Sun\Java\Deployment\cache\6.0\12\eef218c-125d8f5f

2013-12-24 08:28:41 415FC9732A3F4D89A0E01251CD66E136 646 ----a-w- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Sun\Java\Deployment\cache\6.0\17\49a00451-3f34d9b0

2013-12-24 08:28:41 BABA9E7ABF9234A67511A2D5B7D786BF 99 ----a-w- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Sun\Java\Deployment\cache\6.0\17\49a00451-6.0.lap

2013-12-24 08:28:37 415FC9732A3F4D89A0E01251CD66E136 646 ----a-w- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Sun\Java\Deployment\cache\6.0\18\3cb32f52-4657d4f8

2013-12-24 08:28:42 34FA8033B50A3F99D3AB8209C72C0ABA 6860 ----a-w- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Sun\Java\Deployment\cache\6.0\43\1ca2666b-4b7a857b

====== C:\WINDOWS\system32 =====

2013-12-29 17:14:17 83CD5FBC3770FD9CC3BBBC552FCCD118 4096 ----a-w- C:\WINDOWS\System32\crash

2013-12-24 08:24:24 B01416804D89B5EC1D206E6DF542DFAB 145408 ----a-w- C:\WINDOWS\System32\javacpl.cpl

2013-12-24 08:24:23 9223A2810B73069F4A03A636052EF14A 264616 ----a-w- C:\WINDOWS\System32\javaws.exe

2013-12-24 08:23:45 DC1342498BEE7EF1646E9D63138B69CC 175016 ----a-w- C:\WINDOWS\System32\javaw.exe

2013-12-24 08:23:45 9BF46C7F21E75FA0BB03AA93368CC66C 94632 ----a-w- C:\WINDOWS\System32\WindowsAccessBridge.dll

2013-12-24 08:23:44 658633D255FEF154EA1CB8705B4468C5 174504 ----a-w- C:\WINDOWS\System32\java.exe

====== C:\WINDOWS\system32\drivers =====

====== C:\WINDOWS\Tasks ======

2013-12-29 15:02:25 23612A79EE2097B10FC8FCD88A9DFCB4 406 ----a-w- C:\WINDOWS\Tasks\SpyHunter4.job

2013-12-26 17:54:36 964F74F8379076A76D1E352B05B688B3 608 ---ha-w- C:\WINDOWS\Tasks\GS.Enabler-S-1180656229.job

====== C:\WINDOWS\Temp ======

======= C:\Program Files =====

2014-01-01 12:35:14 -------- d-----w- C:\Program Files\Trend Micro

2013-12-28 13:08:36 -------- d-----w- C:\Program Files\Enigma Software Group

======= C: =====

2013-12-31 23:09:56 94F5FD278D90EFFF3115FA2CB909216D 1382 ----a-w- C:\infect.fstmp

2013-12-31 23:09:56 0FBC1AE3774B318CCBE4CFF38F9D0EF3 1542 ----a-w- C:\error.fstmp

====== C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data ======

2013-12-30 19:57:09 -------- d-----w- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Nitreal Games

2013-12-30 17:55:50 -------- d-----w- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Brabl

2013-12-29 11:49:41 -------- d-----w- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Menu Start\Programma's\SpyHunter

2013-12-29 11:49:41 -------- d-----w- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Menu Start\Programma's\SpyHunter

2013-12-29 11:49:41 -------- d-----w- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Menu Start\Programma's\SpyHunter

2013-12-29 11:49:41 -------- d-----w- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Menu Start\Programma's\SpyHunter

2013-12-29 11:49:41 -------- d-----w- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Menu Start\Programma's\SpyHunter

2013-12-29 11:49:41 -------- d-----w- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Menu Start\Programma's\SpyHunter

2013-12-29 11:49:41 -------- d-----w- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Menu Start\Programma's\SpyHunter

2013-12-29 11:49:41 -------- d-----w- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Menu Start\Programma's\SpyHunter

2013-12-29 11:49:41 -------- d-----w- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Menu Start\Programma's\SpyHunter

2013-12-29 11:49:41 -------- d-----w- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Menu Start\Programma's\SpyHunter

2013-12-29 11:49:41 -------- d-----w- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Menu Start\Programma's\SpyHunter

2013-12-27 08:30:36 -------- d-----w- C:\Documents and Settings\SUPPORT_fddfa904\Local Settings\Application Data\Torch

2013-12-27 08:30:35 -------- d-----w- C:\Documents and Settings\SUPPORT_388945a0\Local Settings\Application Data\Torch

2013-12-27 08:30:34 -------- d-----w- C:\Documents and Settings\Sunshine\Local Settings\Application Data\Torch

2013-12-27 08:30:33 -------- d-----w- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Torch

2013-12-27 08:30:32 -------- d-----w- C:\Documents and Settings\HelpAssistant\Local Settings\Application Data\Torch

2013-12-27 08:30:31 -------- d-----w- C:\Documents and Settings\Gast\Local Settings\Application Data\Torch

2013-12-27 08:30:30 -------- d-----w- C:\Documents and Settings\ASPNET\Local Settings\Application Data\Torch

2013-12-27 08:30:29 -------- d-----w- C:\Documents and Settings\Administrator\Local Settings\Application Data\Torch

2013-12-27 08:30:18 -------- d-----w- C:\Documents and Settings\SUPPORT_fddfa904\Local Settings\Application Data\Comodo

2013-12-27 08:30:17 -------- d-----w- C:\Documents and Settings\SUPPORT_388945a0\Local Settings\Application Data\Comodo

2013-12-27 08:30:15 -------- d-----w- C:\Documents and Settings\Sunshine\Local Settings\Application Data\Comodo

2013-12-27 08:30:09 -------- d-----w- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Comodo

2013-12-27 08:30:03 -------- d-----w- C:\Documents and Settings\HelpAssistant\Local Settings\Application Data\Comodo

2013-12-27 08:29:59 -------- d-----w- C:\Documents and Settings\Gast\Local Settings\Application Data\Comodo

2013-12-27 08:29:53 -------- d-----w- C:\Documents and Settings\ASPNET\Local Settings\Application Data\Comodo

2013-12-27 08:29:46 -------- d-----w- C:\Documents and Settings\Administrator\Local Settings\Application Data\Comodo

2013-12-27 08:29:37 -------- d-----w- C:\Documents and Settings\SUPPORT_fddfa904\Local Settings\Application Data\Google

2013-12-27 08:29:26 -------- d-----w- C:\Documents and Settings\SUPPORT_388945a0\Local Settings\Application Data\Google

2013-12-27 08:28:45 -------- d-----w- C:\Documents and Settings\HelpAssistant\Local Settings\Application Data\Google

2013-12-27 08:28:31 -------- d-----w- C:\Documents and Settings\Gast\Local Settings\Application Data\Google

2013-12-27 08:28:17 -------- d-----w- C:\Documents and Settings\ASPNET\Local Settings\Application Data\Google

2013-12-27 08:27:49 -------- d-----w- C:\Documents and Settings\Administrator\Local Settings\Application Data\Google

====== C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225 ======

2013-12-30 17:55:44 -------- d-----w- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\.gstreamer-0.10

2013-12-30 17:55:24 -------- d-----w- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\.gnome2

2013-12-27 08:29:36 -------- d-----w- C:\Documents and Settings\SUPPORT_fddfa904\Local Settings

2013-12-27 08:29:25 -------- d-----w- C:\Documents and Settings\SUPPORT_388945a0\Local Settings

2013-12-27 08:28:44 -------- d-----w- C:\Documents and Settings\HelpAssistant\Local Settings

2013-12-27 08:28:31 -------- d-----w- C:\Documents and Settings\Gast\Local Settings

2013-12-27 08:28:17 -------- d-----w- C:\Documents and Settings\ASPNET\Local Settings

====== C: exe-files ==

2013-12-30 12:41:47 80DF8F3D7E03823445A4C4DA5B9D1DE8 659456 ----a-w- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Bureaublad\spelletjes\Feli-NL\CHTFJ003\Christmas Tales - Fellina's Journey Deluxe\christmas.exe

2013-12-29 11:50:03 36B98B8197E1BE8E7382D29C1A3628AA 110080 ----a-r- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Microsoft\Installer\{0028CB34-D5D3-460F-B308-A39A095A5E01}\IconD7F16134.exe

2013-12-29 11:50:03 36B98B8197E1BE8E7382D29C1A3628AA 110080 ----a-r- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Microsoft\Installer\{0028CB34-D5D3-460F-B308-A39A095A5E01}\IconCF33A0CE.exe

2013-12-29 11:50:02 36B98B8197E1BE8E7382D29C1A3628AA 110080 ----a-r- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Microsoft\Installer\{0028CB34-D5D3-460F-B308-A39A095A5E01}\IconF7A21AF7.exe

2013-12-27 18:48:52 2E28C0EBE976F4271E80C0F3381210CA 3787672 ----a-w- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Bureaublad\spelletjes\1000vlammen\1000vlam-NL\1000vlam-NL\ori\House1000SerpentFlame.exe

2013-12-27 18:48:51 79B7C1D827E51F7CCD9C0233954868AB 2185728 ----a-w- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Bureaublad\spelletjes\1000vlammen\1000vlam-NL\1000vlam-NL\House1000SerpentFlame.exe

=== C: other files ==

2013-12-31 14:32:45 685638B16B271C87A8B98F180AD70DCE 2830117 ----a-w- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Mozilla\Firefox\Profiles\ojh9xb0g.default-1373785269171\extensions\nasanightlaunch@example.com.xpi

2013-12-31 11:02:09 3FE51813290A0D7103B620E2813A8C0E 915554 ----a-w- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Mozilla\Firefox\Profiles\ojh9xb0g.default-1373785269171\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

2013-12-28 14:12:24 EFAC8CD8FE05BF0A7D173F92E481E65A 138614 ----a-w- C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Mozilla\Firefox\Profiles\ojh9xb0g.default-1373785269171\extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE"

[HKEY_USERS\S-1-5-21-1594897154-2424950955-3957525660-1008\Software\Microsoft\Windows\CurrentVersion\Run]

"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe"

"msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe /background"

"Facebook Update"="C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe /c /nocrashserver"

"Shareaza"="C:\Program Files\Shareaza\Shareaza.exe -tray"

"Akamai NetSession Interface"="C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Akamai\netsession_win.exe"

"KiesPreload"="C:\Program Files\Samsung\Kies\Kies.exe /preload"

"KiesAirMessage"="C:\Program Files\Samsung\Kies\KiesAirMessage.exe -startup"

@="C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe"

"TomTomHOME.exe"="C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"hpsysdrv"="c:\windows\system\hpsysdrv.exe"

"HPHUPD06"="c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe"

"HPHmon06"="C:\WINDOWS\system32\hphmon06.exe"

"Recguard"="C:\WINDOWS\SMINST\RECGUARD.EXE"

"LSBWatcher"="c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe"

"OpwareSE2"="C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"

"Monitor"="C:\WINDOWS\PixArt\PAC207\Monitor.exe"

"PS2"="C:\WINDOWS\system32\ps2.exe"

"WINREMOTE"="C:\Program Files\InterVideo\Common\Bin\WinRemote.exe"

"SiteRanker"="C:\Program Files\SiteRanker\SiteRankTray.exe"

"Home Theater SchSvr"="C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe"

"DivXUpdate"="C:\Program Files\DivX\DivX Update\DivXUpdate.exe /CHECKNOW"

"APSDaemon"="C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

"Aimersoft Helper Compact.exe"="C:\Program Files\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe"

"Autodesk Sync"="C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe"

"F-Secure Manager"="C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Common\FSM32.EXE /splash"

"AgentMonitor"="C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe"

"KiesTrayAgent"="C:\Program Files\Samsung\Kies\KiesTrayAgent.exe"

"Standby"="c:\Program Files\Common Files\Corel\Standby\Standby.exe -START"

"F-Secure Hoster (44163)"="C:\Program Files\Telenet Security Pack\fshoster32.exe -app -hosterid:1"

"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe"

"SpyHunter Security Suite"="C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe"

"msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe /background"

"Facebook Update"="C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe /c /nocrashserver"

"Shareaza"="C:\Program Files\Shareaza\Shareaza.exe -tray"

"Akamai NetSession Interface"="C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Akamai\netsession_win.exe"

"KiesPreload"="C:\Program Files\Samsung\Kies\Kies.exe /preload"

"KiesAirMessage"="C:\Program Files\Samsung\Kies\KiesAirMessage.exe -startup"

@="C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe"

"TomTomHOME.exe"="C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe"

==== Startup Registry Disabled ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^HP Digital Imaging Monitor.lnk]

"backup"="C:\\WINDOWS\\pss\\HP Digital Imaging Monitor.lnkCommon Startup"

"command"="C:\\PROGRA~1\\HP\\DIGITA~1\\bin\\hpqtra08.exe "

"item"="HP Digital Imaging Monitor"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^LUMIX Simple Viewer.lnk]

"backup"="C:\\WINDOWS\\pss\\LUMIX Simple Viewer.lnkCommon Startup"

"command"="C:\\PROGRA~1\\PANASO~1\\LUMIXS~1\\PHLEAU~1.EXE "

"item"="LUMIX Simple Viewer"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Documents and Settings^HP_Eigenaar.UW-4B58D8528225^Menu Start^Programma's^Opstarten^OpenOffice.org 3.2 .lnk]

"backup"="C:\\WINDOWS\\pss\\OpenOffice.org 3.2 .lnkStartup"

"command"="C:\\PROGRA~1\\OpenOffice.org 3\\program\\quickstart.exe "

"item"="OpenOffice.org 3.2 "

==== Startup Folders ======================

2010-02-12 19:11:01 881 ----a-r- C:\Documents and Settings\HP_Eigenaar\Menu Start\Programma's\Opstarten\OpenOffice.org 3.2 .lnk

==== Task Scheduler Jobs ======================

C:\WINDOWS\tasks\Adobe Flash Player Updater.job --a------ C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [12/12/2013 11:31]

C:\WINDOWS\tasks\AdobeAAMUpdater-1.0-UW-4B58D8528225-HP_Eigenaar.job --a------ C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [06/03/2010 02:44]

C:\WINDOWS\tasks\AppleSoftwareUpdate.job --a------ C:\Program Files\AppleC:oftware Update\SoftwareUpdate.exe []

C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-1594897154-2424950955-3957525660-1008Core.job --a------ C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe [11/07/2012 22:54]

C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-1594897154-2424950955-3957525660-1008UA.job --a------ C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe [11/07/2012 22:54]

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [22/10/2010 18:39]

C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [22/10/2010 18:39]

C:\WINDOWS\tasks\GS.Enabler-S-1180656229.job --ah----- C:\documents and settings\all users\application data\quickset\gs.enabler\GS.Enabler.exe []

C:\WINDOWS\tasks\PTSchedule.job --a------ C:\Program Files\PC Tools Utilities\pt.exe [26/08/2010 15:44]

C:\WINDOWS\tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1594897154-2424950955-3957525660-1008.job --a------ C:\Program Files\Real\RealUpgrade\realupgrade.exe [14/08/2013 16:13]

C:\WINDOWS\tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1594897154-2424950955-3957525660-1008.job --a------ C:\Program Files\Real\RealUpgrade\realupgrade.exe [14/08/2013 16:13]

C:\WINDOWS\tasks\RMSchedule.job --a------ C:\Program Files\Registry Mechanic\RegMech.exe []

C:\WINDOWS\tasks\Scheduled scanning task.job --a------ C:\PROGRA1\TELENE1\apps\COMPUT1\ANTI-V1\fsav.exe []

C:\WINDOWS\tasks\SpyHunter4.job --a------ C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe [29/12/2013 13:12]

C:\WINDOWS\tasks\User_Feed_Synchronization-{55BF4FC4-395B-4AF9-B426-EDE6B947CBBA}.job --ah----- C:\WINDOWS\system32\msfeedssync.exe [08/03/2009 04:31]

C:\WINDOWS\tasks\User_Feed_Synchronization-{C9CA5CEC-FF30-4EF2-A59A-ADCED39BA68F}.job --ah----- C:\WINDOWS\system32\msfeedssync.exe [08/03/2009 04:31]

C:\WINDOWS\tasks\User_Feed_Synchronization-{FD5599BF-4158-4FE7-8EF5-F7363B3295E5}.job --ah----- C:\WINDOWS\system32\msfeedssync.exe [08/03/2009 04:31]

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]

"{ABDE892B-13A8-4d1b-88E6-365A6E755758}"="C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext" [01/09/2013 07:48]

==== Firefox Extensions ======================

ProfilePath: C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Mozilla\Firefox\Profiles\bk59edmh.default

- DivX Plus Web Player HTML5 lt;videogt; - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5

- ChatZilla - %ProfilePath%\extensions\{59c81df5-4b7a-477b-912d-4e0fdf64e5f2}

- Who stole my pictures? - %ProfilePath%\extensions\images@wink.su.xpi

- TinEye Reverse Image Search - %ProfilePath%\extensions\tineye@ideeinc.com.xpi

- ImTranslator - %ProfilePath%\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi

ProfilePath: C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Mozilla\Firefox\Profiles\ojh9xb0g.default-1373785269171

- Pocket - %ProfilePath%\extensions\isreaditlater@ideashower.com

- Super Start - %ProfilePath%\extensions\superstart@enjoyfreeware.org

- LastPass - %ProfilePath%\extensions\support@lastpass.com

- Forecastfox - %ProfilePath%\extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3}

- YouTube Video and Audio Downloader - %ProfilePath%\extensions\feca4b87-3be4-43da-a1b1-137c24220968@jetpack.xpi

- NASA Night Launch - %ProfilePath%\extensions\nasanightlaunch@example.com.xpi

- Turn Off the Lights - %ProfilePath%\extensions\stefanvandamme@stefanvd.net.xpi

- Download YouTube Videos as MP4 - %ProfilePath%\extensions\{b9bfaf1c-a63f-47cd-8b9a-29526ced9060}.xpi

- Memonic Web Clipper - %ProfilePath%\extensions\{D0AD45D6-8518-11DF-8AD2-3F67DFD72085}.xpi

- Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

- BetterPrivacy - %ProfilePath%\extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi

- DownThemAll - %ProfilePath%\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi

AppDir: C:\Program Files\Mozilla Firefox

- Undetermined - %AppDir%\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Mozilla\Firefox\Profiles\bk59edmh.default

9D4A0B314CB9CF134CA27E1E0217E51E - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll - iTunes Application Detector

21FF3F07336CE4F8DF6AF1746BC26AAB - C:\Program Files\Mozilla Firefox\plugins\nppdf32.dll - Adobe Acrobat

282178FE8002CF83D3F3A07B424B9878 - C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll - QuickTime Plug-in 7.7.4

A0FD0C7A677B81C4F02E5D7FE8E082F4 - C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll - QuickTime Plug-in 7.7.4

A0C0DFFE27C01E0C2EDA3BEB56C54986 - C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll - QuickTime Plug-in 7.7.4

BAF947D9341451E36BE26D24DF256237 - C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll - QuickTime Plug-in 7.7.4

07583A7028A33F67254AF5CC45B8121F - C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll - QuickTime Plug-in 7.7.4

0B31B0F8FA99CFD009C8FBEA9E20C9DE - C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Facebook\Video\Skype\npFacebookVideoCalling.dll - Facebook Video Calling Plugin

A66A630E101E7B5CF0946F34935660CC - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll - DivX Plus Web Player

9F8210675BD2ACC283959BB33F0307DF - C:\WINDOWS\system32\Adobe\Director\np32dsw.dll - Shockwave for Director / Shockwave for Director

CCC24FAA47C47E66BE61BF22603C5E3A - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll - Java Platform SE 6 U30

5B92CB0A3EEE50F6B9AE036B4F9B0F0C - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll - Google Earth Plugin

B938C1AE3ADCE166190895685B0BEB0D - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll - DivX VOD Helper Plug-in

1C8124B6A03A620EB0CBCA615666D2AE - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll - Windows Live® Photo Gallery

260488E2BC07C276D1EDD54CCA086809 - C:\Program Files\VideoLAN\VLC\npvlc.dll - VLC Web Plugin

AB87EEFFD18F2BAAFC274E7075EA6C67 - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll - Windows Presentation Foundation / Windows Presentation Foundation

901DF887DBDF87FA3C659239F68F3228 - C:\Program Files\Windows Media Player\npdrmv2.dll - Microsoft® DRM

F89E6BBD6A080D8C714DFB6F30678288 - C:\Program Files\Windows Media Player\npwmsdrm.dll - Microsoft® DRM

0F9DEA5814D22F83FED5F427E263DED0 - C:\Program Files\Windows Media Player\npdsplay.dll - Windows Media Player Plug-in Dynamic Link Library

89CFC74DC27D34419BFADDDF5D8835DF - C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll - RealPlayer Version Plugin

699C563EB0B7428838CA3A796500E2E8 - C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll - RealPlayer G2 LiveConnect-Enabled Plug-In (32-bit)

07583A7028A33F67254AF5CC45B8121F - C:\Program Files\QuickTime\Plugins\npqtplugin.dll - QuickTime Plug-in 7.7.4

BAF947D9341451E36BE26D24DF256237 - C:\Program Files\QuickTime\Plugins\npqtplugin2.dll - QuickTime Plug-in 7.7.4

A0C0DFFE27C01E0C2EDA3BEB56C54986 - C:\Program Files\QuickTime\Plugins\npqtplugin3.dll - QuickTime Plug-in 7.7.4

A0FD0C7A677B81C4F02E5D7FE8E082F4 - C:\Program Files\QuickTime\Plugins\npqtplugin4.dll - QuickTime Plug-in 7.7.4

282178FE8002CF83D3F3A07B424B9878 - C:\Program Files\QuickTime\Plugins\npqtplugin5.dll - QuickTime Plug-in 7.7.4

Profilepath: C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Application Data\Mozilla\Firefox\Profiles\ojh9xb0g.default-1373785269171

6768C724599214E4F9ADD9F8FF5097EB - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll - Java Platform SE 7 U45

F1CD6E22E5AE5CEEB7712E546A5FC853 - C:\Program Files\Java\jre7\bin\dtplugin\npdeployJava1.dll - Java Deployment Toolkit 7.0.450.18

F891089A6AB9E12FEDEBCC5EC0F40D66 - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll - Shockwave Flash

C36444D7301A8C881FC7296B092609C7 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll - Google Update

5B92CB0A3EEE50F6B9AE036B4F9B0F0C - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll - Google Earth Plugin

9D4A0B314CB9CF134CA27E1E0217E51E - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll - iTunes Application Detector

BE501CBC29B2025A263D80D399F1797A - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll - Silverlight Plug-In

3A9E1940B4459CC97FDCBB24FCB69004 - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll - RealPlayer G2 LiveConnect-Enabled Plug-In (32-bit)

0FCEAA7D12B7B0BA825E5C770B1DCA48 - C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll - RealPlayer Download Plugin

BE126CB7049E89ED6F3038016668B502 - C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll - RealNetworks RealDownloader Chrome Background Extension Plug-In (32-bit)

EAC427FEF96A13058C1ACD17C38966CF - C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll - RealNetworks RealDownloader PepperFlashVideoShim Plug-In (32-bit)

96B3689320E9B16EDF38B7A5001C35F0 - C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll - RealNetworks RealDownloader HTML5VideoShim Plug-In (32-bit)

F8CB60A5ACA5D73807ECBD9942A8BCB7 - C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll - RealDownloader Plugin

260488E2BC07C276D1EDD54CCA086809 - C:\Program Files\VideoLAN\VLC\npvlc.dll - VLC Web Plugin

282178FE8002CF83D3F3A07B424B9878 - C:\Program Files\QuickTime\Plugins\npqtplugin5.dll - QuickTime Plug-in 7.7.4

A0FD0C7A677B81C4F02E5D7FE8E082F4 - C:\Program Files\QuickTime\Plugins\npqtplugin4.dll - QuickTime Plug-in 7.7.4

A0C0DFFE27C01E0C2EDA3BEB56C54986 - C:\Program Files\QuickTime\Plugins\npqtplugin3.dll - QuickTime Plug-in 7.7.4

BAF947D9341451E36BE26D24DF256237 - C:\Program Files\QuickTime\Plugins\npqtplugin2.dll - QuickTime Plug-in 7.7.4

07583A7028A33F67254AF5CC45B8121F - C:\Program Files\QuickTime\Plugins\npqtplugin.dll - QuickTime Plug-in 7.7.4

66640A55AEFF3819C94E0A8D40D7E0AD - C:\WINDOWS\system32\Adobe\Director\np32dsw_1202122.dll - Shockwave for Director / Shockwave for Director

0B31B0F8FA99CFD009C8FBEA9E20C9DE - C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Facebook\Video\Skype\npFacebookVideoCalling.dll - Facebook Video Calling Plugin

21FF3F07336CE4F8DF6AF1746BC26AAB - C:\Program Files\Adobe\Reader 11.0\Reader\browser\nppdf32.dll - Adobe Acrobat

E0BCE90537E4A41AF36D5BDD5963A09D - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll - Adobe Acrobat

A66A630E101E7B5CF0946F34935660CC - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll - DivX Plus Web Player

9F8210675BD2ACC283959BB33F0307DF - C:\WINDOWS\system32\Adobe\Director\np32dsw.dll - Shockwave for Director / Shockwave for Director

B938C1AE3ADCE166190895685B0BEB0D - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll - DivX VOD Helper Plug-in

1C8124B6A03A620EB0CBCA615666D2AE - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll - Windows Live® Photo Gallery

AB87EEFFD18F2BAAFC274E7075EA6C67 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll - Windows Presentation Foundation / Windows Presentation Foundation

901DF887DBDF87FA3C659239F68F3228 - C:\Program Files\Windows Media Player\npdrmv2.dll - Microsoft® DRM

0F9DEA5814D22F83FED5F427E263DED0 - C:\Program Files\Windows Media Player\npdsplay.dll - Windows Media Player Plug-in Dynamic Link Library

F89E6BBD6A080D8C714DFB6F30678288 - C:\Program Files\Windows Media Player\npwmsdrm.dll - Microsoft® DRM

699C563EB0B7428838CA3A796500E2E8 - C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll - RealPlayer G2 LiveConnect-Enabled Plug-In (32-bit)

89CFC74DC27D34419BFADDDF5D8835DF - C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll - RealPlayer Version Plugin

B27CCB1168B1960AEC6E9D3E0E0F0D2A - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrlui.dll - Microsoft® Silverlight

==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions

idhngdhcfkoamngbedgpaokgjbnpdiji - C:\Documents and Settings\All Users\Application Data\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx[14/08/2013 14:24]

nneajnkjbffgblleaoojgaacokifdkhm - C:\Program Files\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx[12/12/2011 14:13]

greeaotsAver - Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif

greeaotsAver - Administrator\Local Settings\Application Data\Torch\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif

greeaotsAver - Administrator\Local Settings\Application Data\COMODO\Dragon\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif

greeaotsAver - ASPNET\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif

greeaotsAver - ASPNET\Local Settings\Application Data\Torch\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif

greeaotsAver - ASPNET\Local Settings\Application Data\COMODO\Dragon\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif

greeaotsAver - Gast\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif

greeaotsAver - Gast\Local Settings\Application Data\Torch\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif

greeaotsAver - Gast\Local Settings\Application Data\COMODO\Dragon\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif

greeaotsAver - HelpAssistant\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif

greeaotsAver - HelpAssistant\Local Settings\Application Data\Torch\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif

greeaotsAver - HelpAssistant\Local Settings\Application Data\COMODO\Dragon\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif

Cirque du Soleil - HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\bambdhnebihakocbdlomklpnieneajmo

YouTube - HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo

Google Search - HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf

New Tab - HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\dnpmlnedpdikbgdghljdepnljfpkhccn

greeaotsAver - HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif

RealDownloader - HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji

DivX Plus Web Player HTML5 \u003Cvideo\u003E - HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm

Bitdefender QuickScan - HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie

Gmail - HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

greeaotsAver - HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Torch\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif

greeaotsAver - HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\COMODO\Dragon\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif

greeaotsAver - Sunshine\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif

greeaotsAver - Sunshine\Local Settings\Application Data\Torch\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif

greeaotsAver - Sunshine\Local Settings\Application Data\COMODO\Dragon\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif

greeaotsAver - SUPPORT_388945a0\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif

greeaotsAver - SUPPORT_388945a0\Local Settings\Application Data\Torch\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif

greeaotsAver - SUPPORT_388945a0\Local Settings\Application Data\COMODO\Dragon\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif

greeaotsAver - SUPPORT_fddfa904\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif

greeaotsAver - SUPPORT_fddfa904\Local Settings\Application Data\Torch\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif

greeaotsAver - SUPPORT_fddfa904\Local Settings\Application Data\COMODO\Dragon\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif

==== Chrome Fix ======================

C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif deleted successfully

C:\Documents and Settings\Administrator\Local Settings\Application Data\Torch\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif deleted successfully

C:\Documents and Settings\Administrator\Local Settings\Application Data\COMODO\Dragon\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif deleted successfully

C:\Documents and Settings\ASPNET\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif deleted successfully

C:\Documents and Settings\ASPNET\Local Settings\Application Data\Torch\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif deleted successfully

C:\Documents and Settings\ASPNET\Local Settings\Application Data\COMODO\Dragon\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif deleted successfully

C:\Documents and Settings\Gast\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif deleted successfully

C:\Documents and Settings\Gast\Local Settings\Application Data\Torch\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif deleted successfully

C:\Documents and Settings\Gast\Local Settings\Application Data\COMODO\Dragon\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif deleted successfully

C:\Documents and Settings\HelpAssistant\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif deleted successfully

C:\Documents and Settings\HelpAssistant\Local Settings\Application Data\Torch\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif deleted successfully

C:\Documents and Settings\HelpAssistant\Local Settings\Application Data\COMODO\Dragon\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif deleted successfully

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif deleted successfully

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Torch\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif deleted successfully

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\COMODO\Dragon\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif deleted successfully

C:\Documents and Settings\Sunshine\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif deleted successfully

C:\Documents and Settings\Sunshine\Local Settings\Application Data\Torch\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif deleted successfully

C:\Documents and Settings\Sunshine\Local Settings\Application Data\COMODO\Dragon\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif deleted successfully

C:\Documents and Settings\SUPPORT_388945a0\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif deleted successfully

C:\Documents and Settings\SUPPORT_388945a0\Local Settings\Application Data\Torch\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif deleted successfully

C:\Documents and Settings\SUPPORT_388945a0\Local Settings\Application Data\COMODO\Dragon\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif deleted successfully

C:\Documents and Settings\SUPPORT_fddfa904\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif deleted successfully

C:\Documents and Settings\SUPPORT_fddfa904\Local Settings\Application Data\Torch\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif deleted successfully

C:\Documents and Settings\SUPPORT_fddfa904\Local Settings\Application Data\COMODO\Dragon\User Data\Default\Extensions\egfeenfkbpfonphoimnlpdinfbbiinif deleted successfully

==== Set IE to Default ======================

Old Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="http://www.google.com/"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]

"SearchAssistant"="http://www.google.com"

"CustomizeSearch"="http://www.google.com"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]

"Tabs"="http://www.google.com"

New Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="http://www.google.com/"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]

"SearchAssistant"="http://go.microsoft.com/fwlink/?LinkId=54896"

"CustomizeSearch"="http://go.microsoft.com/fwlink/?LinkId=54896"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]

"(Default)"="http://search.msn.com/results.asp?q=%s"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]

"Tabs"="res://ieframe.dll/tabswelcome.htm"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

"DefaultScope"="{0191A6B0-1154-4C22-9182-23A95BBE92D9}"

{0191A6B0-1154-4C22-9182-23A95BBE92D9} Google Url="http://www.google.com/search?q={searchTerms}"

{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} Crawler Search Url="http://www.crawler.com/search/dispatcher.aspx?tp=bs&qkw={searchTerms}&tbid=60002"

{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\siteranker@siteranker.com deleted successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\024ec2db-4ec3-4a25-9262-084ce48884d9 deleted successfully

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\48cc6b8d-76fa-4f37-8775-62ec0bab5a80 deleted successfully

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\6c78a3ef-9b3f-4007-8da7-f90bef083a1e deleted successfully

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\7ef8ddf2-a132-45d3-b6b4-a6e3450d3931 deleted successfully

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\a4991ef1-769a-4a9f-8ff5-f0c2bab45b2b deleted successfully

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\bb57ec74-ed33-407e-b762-a7c4f342dbbe deleted successfully

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\bd7b1524-d32e-41e3-aa2c-b003371471cf deleted successfully

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\dfac1f1d-55b1-412f-a992-a2f9746a276f deleted successfully

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\iSafe deleted successfully

==== Empty IE Cache ======================

C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

C:\Documents and Settings\HP_Eigenaar\Local Settings\Temp\Temporary Internet Files\Content.IE5 emptied successfully

C:\Documents and Settings\HP_Eigenaar\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5 emptied successfully

C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

C:\Documents and Settings\NetworkService\Local Settings\Temp\Temporary Internet Files\Content.IE5 emptied successfully

C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

C:\Documents and Settings\Sunshine\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

C:\WINDOWS\system32\config\systemprofile\Local Settings\Temp\Temporary Internet Files\Content.IE5 emptied successfully

C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

C:\WINDOWS\system32\config\systemprofile\Local Settings\Temp\Temporary Internet Files\Content.IE5 emptied successfully

C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Mozilla\Firefox\Profiles\bk59edmh.default\Cache emptied successfully

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Mozilla\Firefox\Profiles\ojh9xb0g.default-1373785269171\Cache emptied successfully

C:\Documents and Settings\Sunshine\Local Settings\Application Data\Mozilla\Firefox\Profiles\ymqmsrbx.default\Cache emptied successfully

==== Empty Chrome Cache ======================

C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Local Settings\Application Data\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=3399 folders=269 193178527 bytes)

Mvg,

Peter

[kape]

Dit is prima ... hiermee is al een berg rotzooi van de PC gehaald.

Download AdwCleaner by Xplode naar het bureaublad.

AdwCleaner uitvoeren

• Sluit alle openstaande vensters.
  
• Dubbelklik op AdwCleaner.exe om de tool te starten.
  
• Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  
• Klik vervolgens op de knop Scan.
  
• Wanneer de scan gereed is Klikt u vervolgens op de knop Clean.
  
• Als dit gereed is wordt er gevraagd om de computer opnieuw op te starten, klik hier op OK.
  
• Nadat de computer opnieuw is opgestart wordt het logbestand automatisch geopend.
  
• Plaats dit logbestand in het volgende bericht.
  

[Kempvis]

Klopt kape,

die rotzooi is helemaal verdwenen .

# AdwCleaner v3.016 - Report created 04/01/2014 at 18:24:45

# Updated 23/12/2013 by Xplode

# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)

# Username : HP_Eigenaar - UW-4B58D8528225

# Running from : C:\Documents and Settings\HP_Eigenaar.UW-4B58D8528225\Mijn documenten\Downloads\adwcleaner(1).exe

# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}

Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094

Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702

-\\ Mozilla Firefox v26.0 (nl)

*************************

AdwCleaner[R0].txt - [16121 octets] - [01/01/2014 10:51:01]

AdwCleaner[R1].txt - [1235 octets] - [04/01/2014 18:17:42]

AdwCleaner[s0].txt - [16356 octets] - [01/01/2014 11:02:14]

AdwCleaner[s1].txt - [1162 octets] - [04/01/2014 18:24:45]

########## EOF - C:\AdwCleaner\AdwCleaner[s1].txt - [1222 octets] ##########

mvg,

Peter

[kape]

Mooi zo ... dan mag je de gebruikte tools en nog wat restjes opruimen:

Download Delfix by Xplode naar het bureaublad.

Dubbelklik op Delfix.exe om de tool te starten.

Zet nu vinkjes voor de volgende items:

• Remove disinfection tools
  
• Purge System Restore
  
• Reset system settings
  

Klik nu op "Run" en wacht geduldig tot de tool gereed is.

Wanneer de tool gereed is wordt er een logbestand aangemaakt. Dit hoeft u echter niet te plaatsen.

Download CCleaner. (Als je het nog niet hebt)

Installeer het (als je niet wilt dat Google Chrome op je PC als standaard-webbrowser wordt geïnstalleerd, moet je de 2 vinkjes wegdoen !!!) en start CCleaner op.

Klik in de linkse kolom op “Cleaner”. Klik achtereenvolgens op ‘Analyseren’ en na de analyse op 'Schoonmaken'. Klik vervolgens in de linkse kolom op “Register” en klik op ‘Scan naar problemen”. Als er fouten gevonden worden klik je op ”Herstel geselecteerde problemen” en ”OK”. Dan krijg je de vraag om een back-up te maken. Klik op “JA”. Kies dan “Herstel alle geselecteerde fouten”.

Soms is 1 analyse niet voldoende. Deze procedure mag je herhalen tot de analyse geen fouten meer aangeeft.

Sluit hierna CCleaner terug af.

Wil je dit uitgebreid in beeld bekijken, klik dan hier voor de handleiding.

Indien dit allemaal probleemloos verlopen is en je binnen dit topic verder geen vragen of problemen meer hebt, mag je dit onderwerp afsluiten door een klik op de knop "Markeer als opgelost", die je links onderaan kan terugvinden … zo blijft het voor iedereen overzichtelijk.