Computer sluit niet af?

Shiruvan · 19 januari 2014

Goedendag,

Mijn computer sluit zich niet meer af. Ik moet het handmatig uitdoen wil ik het uitdoen of ik zet hem in z'n standbymodus.

Ik ben gaan opzoeken hoe ik dit probleem kan oplossen en kwam uit op deze discussie: http://www.pc-helpforum.be/f201/help-computer-doet-enorm-vreemd-53922/index4.html

Op basis van dat ben ik hetzelfde proces gaan doen wat 'kweezie wabbit' aangeeft om te doen. Ik werk op windows 7 64 bits.

AppError.txt

En de laatste kon ik niet via hier uploaden AppLog.evtx - Speedy Share - upload your files here

Silvan,

SysLog.txt

SysError.txt

kweezie wabbit · 20 januari 2014

Wat ik op basis van deze logs kan zeggen is dat er een probleem is met de bonjour service.

Maar ik vermoed dat er meer aan de hand is en dus gaan we het systematisch aanpakken.

We starten met een malware controle.

Download RSIT van de onderstaande locatie en sla deze op het bureaublad op.

RSIT 64 bit (RSITx64.exe)

Dubbelklik op RSIT.exe om de tool te starten.

Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
Vervolgens wordt de "Disclaimer of warranty" getoond, klik vervolgens op "Continue"
Wanneer de tool gereed is wordt er een kladblok bestand genaamd "Log" geopend.
Plaats de inhoud hiervan in het volgende bericht.

Bekijk ook de instructievideo.

Shiruvan · 30 januari 2014

Nou hier is ie dan!

Alvast bedankt voor je moeite..

Logfile of random's system information tool 1.09 (written by random/random)

Run by gebruiker at 2014-01-30 14:47:45

Microsoft Windows 7 Home Premium Service Pack 1

System drive C: has 19 GB (19%) free of 102 GB

Total RAM: 4076 MB (60% free)

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 14:47:53, on 30-1-2014

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v11.0 (11.00.9600.16428)

Boot mode: Normal

Running processes:

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe

C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

C:\Program Files (x86)\iMesh Applications\MediaBar\Datamngr\datamngrUI.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

C:\Program Files (x86)\AVG\AVG2012\avgtray.exe

C:\Program Files (x86)\Wireless Keyboard Driver\LedStatusApp.exe

H:\Sketchbook\SketchBookSnapshot.exe

C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe

C:\Program Files (x86)\Internet Explorer\IELowutil.exe

C:\Program Files (x86)\iTunes\iTunesHelper.exe

C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe

C:\Windows\SysWOW64\DllHost.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Program Files\trend micro\gebruiker.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://feed.snapdo.com/?publisher=Somoto&dpid=Somoto&co=NL&userid=9e8a70f6-47a4-5148-d7d4-918b27b223a4&searchtype=ds&q={searchTerms}&installDate=24/08/2013

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://feed.snapdo.com/?publisher=Somoto&dpid=Somoto&co=NL&userid=9e8a70f6-47a4-5148-d7d4-918b27b223a4&searchtype=ds&q={searchTerms}&installDate=24/08/2013

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Search

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.snapdo.com/?publisher=Somoto&dpid=Somoto&co=NL&userid=9e8a70f6-47a4-5148-d7d4-918b27b223a4&searchtype=ds&q={searchTerms}&installDate=24/08/2013

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.snapdo.com/?publisher=Somoto&dpid=Somoto&co=NL&userid=9e8a70f6-47a4-5148-d7d4-918b27b223a4&searchtype=ds&q={searchTerms}&installDate=24/08/2013

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

F2 - REG:system.ini: UserInit=userinit.exe,

O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - E:\Adobe CS4\/Adobe Contribute CS4/contributeieplugin.dll

O2 - BHO: CrossriderApp0000435 - {11111111-1111-1111-1111-110011041135} - C:\Program Files (x86)\Premiumplay Codec-C\Premiumplay Codec-C.dll

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Wincore Mediabar - {28387537-e3f9-4ed7-860c-11e69af4a8a0} - C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\ToolBar\wincoreimdtx.dll

O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll

O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files (x86)\BitComet\tools\BitCometBHO_1.5.4.11.dll

O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll

O2 - BHO: Aanmeldhulp voor Microsoft-account - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O2 - BHO: FlashGetBHO - {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} - C:\Users\gebruiker\AppData\Roaming\FlashGetBHO\FlashGetBHO3.dll

O2 - BHO: DataMngr - {BE7A24F5-69CB-4708-B77B-B1EDA6043B95} - C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\BROWSE~1.DLL

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll

O2 - BHO: Softonic Helper Object - {E87806B5-E908-45FD-AF5E-957D83E58E68} - C:\Program Files (x86)\Softonic\Softonic\1.8.8.11\bh\Softonic.dll

O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - E:\Adobe CS4\/Adobe Contribute CS4/contributeieplugin.dll

O3 - Toolbar: Wincore Mediabar - {28387537-e3f9-4ed7-860c-11e69af4a8a0} - C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\ToolBar\wincoreimdtx.dll

O3 - Toolbar: Softonic Toolbar - {5018CFD2-804D-4C99-9F81-25EAEA2769DE} - C:\Program Files (x86)\Softonic\Softonic\1.8.8.11\SoftonicTlbr.dll

O3 - Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - (no file)

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW

O4 - HKLM\..\Run: [DATAMNGR] C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\DATAMN~1.EXE

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [AVG_TRAY] "C:\Program Files (x86)\AVG\AVG2012\avgtray.exe"

O4 - HKLM\..\Run: [WIRELESS-KB-LED-STATUS] C:\Program Files (x86)\Wireless Keyboard Driver\LedStatusApp.exe

O4 - HKLM\..\Run: [NCUpdateHelper] C:\Program Files (x86)\NCWest\NCLauncher\NCUpdateHelper.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

O4 - Global Startup: SketchBook Snapshot.lnk = H:\Sketchbook\SketchBookSnapshot.exe

O8 - Extra context menu item: &D&ownload &met BitComet - res://C:\Program Files (x86)\BitComet\BitComet.exe/AddLink.htm

O8 - Extra context menu item: &D&ownload alles met BitComet - res://C:\Program Files (x86)\BitComet\BitComet.exe/AddAllLink.htm

O8 - Extra context menu item: Download all by FlashGet3 - C:\Users\gebruiker\AppData\Roaming\FlashGetBHO\GetAllUrl.htm

O8 - Extra context menu item: Download by FlashGet3 - C:\Users\gebruiker\AppData\Roaming\FlashGetBHO\GetUrl.htm

O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files (x86)\BitComet\tools\BitCometBHO_1.5.4.11.dll/206 (file missing)

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG2012\avgpp.dll

O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL

O20 - AppInit_DLLs: C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\datamngr.dll C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\IEBHO.dll

O23 - Service: Adobe Version Cue CS4 - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: Apache2.2 - Apache Software Foundation - c:\xampp\apache\bin\httpd.exe

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe

O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe

O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe

O23 - Service: BitComet Disk Boost Service (BITCOMET_HELPER_SERVICE) - BitComet - A free C++ BitTorrent/HTTP/FTP Download Client - C:\Program Files (x86)\BitComet\tools\BitCometService.exe

O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: Intel® Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: FLEXnet Licensing Service 64 - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe

O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)

O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)

O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: RealtekCU - Realtek - C:\Program Files (x86)\Sitecom\Wireless High-gain Network Adapter Utility\RtlService.exe

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

O23 - Service: TabletServiceWacom - Wacom Technology, Corp. - C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe

O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe

O23 - Service: TeamViewer 7 (TeamViewer7) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--

End of file - 15582 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe

C:\PROGRA~2\AVG\AVG2012\avgrsa.exe /boot

C:\Program Files (x86)\AVG\AVG2012\avgcsrva.exe /pipeName=2f821736-7470-4426-986b-6f7d238ef90c /coreSdkOptions=286 /logConfFile="C:\ProgramData\AVG2012\temp\9c17e929-a23d-4c78-9e3c-9b7a945c3839-148-oopp.tmp" /loggerName=AVG.RS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG2012\" /registryPath="SYSTEM\CurrentControlSet\Services\Avg\Avg2012" /tempPath="C:\ProgramData\AVG2012\temp\"

%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16

wininit.exe

%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16

C:\Windows\system32\services.exe

C:\Windows\system32\lsass.exe

C:\Windows\system32\lsm.exe

winlogon.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

"C:\Windows\system32\nvvsvc.exe"

"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\servicing\TrustedInstaller.exe

"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"

C:\Windows\system32\nvvsvc.exe -session -first

/QuitInfo:0000000000000264;0000000000000268; /AddRef;

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"

"c:\xampp\apache\bin\httpd.exe" -k runservice

"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"

"C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe"

"C:\Program Files\Bonjour\mDNSResponder.exe"

"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe"

"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe"

"C:\Program Files\Microsoft LifeCam\MSCamS64.exe"

"C:\Program Files (x86)\Sitecom\Wireless High-gain Network Adapter Utility\RtlService.exe"

C:\Windows\system32\svchost.exe -k imgsvc

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted

"C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe"

"C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe"

"C:\Program Files (x86)\AVG\AVG2012\avgemca.exe"

"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"

"C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe"

WLIDSvcM.exe 2480

C:\xampp\apache\bin\httpd.exe -d C:/xampp/apache

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

"taskhost.exe"

"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray

"C:\Windows\system32\Dwm.exe"

C:\Windows\Explorer.EXE

"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

"C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW

"C:\Program Files (x86)\iMesh Applications\MediaBar\Datamngr\datamngrUI.exe"

"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

"C:\Program Files (x86)\AVG\AVG2012\avgtray.exe"

"C:\Program Files (x86)\Wireless Keyboard Driver\LedStatusApp.exe"

"H:\Sketchbook\SketchBookSnapshot.exe"

C:\Windows\system32\SearchIndexer.exe /Embedding

"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1

"C:\Program Files (x86)\Sitecom\Wireless High-gain Network Adapter Utility\RtWlan.exe" /H

/QuitInfo:000000000000074C;0000000000000750; /AddRef;

/QuitInfo:0000000000000740;0000000000000760;

"C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe"

/loadhooks /Parent:0000000000000698

"C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe" au

"C:\Program Files\Windows Media Player\wmpnetwk.exe"

C:\Windows\System32\svchost.exe -k LocalServicePeerNet

C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}

C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

C:\Windows\system32\sppsvc.exe

C:\Windows\system32\msfeedssync.exe sync

taskhost.exe $(Arg0)

"C:\Program Files (x86)\Internet Explorer\IELowutil.exe" -embedding

"C:\Windows\system32\wuauclt.exe"

"C:\Program Files (x86)\iTunes\iTunesHelper.exe"

"C:\Program Files\iPod\bin\iPodService.exe"

"C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe"

C:\Windows\system32\rundll32.exe /d srrstr.dll,ExecuteScheduledSPPCreation

C:\Windows\system32\schtasks.exe /delete /f /TN "Microsoft\Windows\Customer Experience Improvement Program\Uploader"

\??\C:\Windows\system32\conhost.exe "-542891103-1521382974-1175322284227819716-3362262712227732491940694563-281499069

taskhost.exe SYSTEM

taskeng.exe {A183CF70-2F88-4183-8BE2-27E26ABDED11}

"C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe" -task

C:\Windows\SysWOW64\DllHost.exe /Processid:{16D99191-6280-4B33-A2F5-04805A0FC582}

C:\Windows\system32\schtasks.exe /delete /f /TN "Microsoft\Windows\Customer Experience Improvement Program\Uploader"

\??\C:\Windows\system32\conhost.exe "-78161002-12822963511824569911-1447168372943442210635567236235936901739705979

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="6936.0.8583110\482306374" --disable-image-transport-surface --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,13,23,28 --gpu-vendor-id=0x10de --gpu-device-id=0x0ca3 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.1106 --ignored=" --type=renderer " /prefetch:822062411

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/AutomaticProfileReset/Disabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/DeferBackgroundExtensionCreation/RateLimited/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-1-Percent/group_04/UMA-Uniformity-Trial-10-Percent/group_09/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --extension-process --renderer-print-preview --disable-html-notifications --enable-software-compositing --channel="6936.2.679808831\958869656" /prefetch:673131151

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/AutomaticProfileReset/Disabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/DeferBackgroundExtensionCreation/RateLimited/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ManagedModeLaunch/Active/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-1-Percent/group_04/UMA-Uniformity-Trial-10-Percent/group_09/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --renderer-print-preview --disable-html-notifications --enable-software-compositing --channel="6936.5.763752454\93510518" /prefetch:673131151

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/AutomaticProfileReset/Disabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/DeferBackgroundExtensionCreation/RateLimited/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ManagedModeLaunch/Active/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-1-Percent/group_04/UMA-Uniformity-Trial-10-Percent/group_09/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --renderer-print-preview --disable-html-notifications --enable-software-compositing --channel="6936.8.438941211\1534021837" /prefetch:673131151

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/AutomaticProfileReset/Disabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/DeferBackgroundExtensionCreation/RateLimited/EmbeddedSearch/Group8 pct:10h stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ManagedModeLaunch/Active/OmniboxBundledExperimentV1/Standard/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-1-Percent/group_04/UMA-Uniformity-Trial-10-Percent/group_09/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --renderer-print-preview --disable-html-notifications --enable-software-compositing --channel="6936.10.113764521\429189062" /prefetch:673131151

"C:\Users\gebruiker\Desktop\RSITx64.exe"

taskeng.exe {70D51346-4E4B-48F5-A1AC-BC5C08A4C484}

C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\gebruiker\AppData\Roaming\Mozilla\Firefox\Profiles\m8kwkdti.default

prefs.js - "browser.search.useDBForOrder" - true

prefs.js - "browser.startup.homepage" - "http://google.nl"

prefs.js - "extensions.enabledItems" - "{9e8a70f6-47a4-5148-d7d4-918b27b223a4}:1.0, en-US@dictionaries.addons.mozilla.org:5.0.1, {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22, fbdislike@doweb.fr:1.2.3, {DB9127A2-3381-41ec-82B3-1B6ED4C6F29A}:1.1, {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24, {9AA46F4F-4DC7-4c06-97AF-5035170633FE}:20.1.0.4, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.17"

prefs.js - "keyword.URL" - "http://dts.search-results.com/sr?src=ffb&appid=1083&systemid=1&sr=0&q="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@ABNAMRO/BECON,version=1.00]

"Description"=ABN AMRO e.dentifier2 Plug-in 1.0 for Mozilla

"Path"=C:\Program Files (x86)\ABN AMRO e.dentifier2\Mozilla\npBECON.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]

"Description"=Adobe® Flash® Player 11.9.900.170 Plugin

"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=]

"Description"=iTunes Detector Plug-in

"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Apple.com/iTunes,version=1.0]

"Description"=

"Path"=C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]

"Description"=DivX Plus Web Player

"Path"=C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]

"Description"=DivX VOD Helper Plug-in

"Path"=C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.5.1]

"Description"=

"Path"=C:\Windows\SysWOW64\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1]

"Description"=Oracle® Next Generation Java™ Plug-In

"Path"=C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]

"Description"=

"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]

"Description"=Ag Player Plugin

"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]

"Description"=NVIDIA stereo images plugin for Mozilla browsers

"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]

"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers

"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@real.com/nppl3260;version=6.0.11.3088]

"Description"=RealMedia Plugin

"Path"=C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@real.com/nprpjplug;version=6.0.11.3006]

"Description"=RealPlayer Version Plugin

"Path"=C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]

"Description"=

"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]

"Description"=Google Update

"Path"=C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]

"Description"=Google Update

"Path"=C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.0.4]

"Description"=VLC Multimedia Plugin

"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@wacom.com/wacom-plugin,version=1.1.0.5]

"Description"=WebTablet Plugin API

"Path"=C:\Program Files (x86)\TabletPlugins\npwacom.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]

"Description"=Handles PDFs in-place in Firefox

"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]

"Description"=Adobe® Flash® Player 11.9.900.170 Plugin

"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]

"Description"=DivX VOD Helper Plug-in

"Path"=C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]

"Description"=

"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]

"Description"=Ag Player Plugin

"Path"=C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\

{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

C:\Program Files (x86)\Mozilla Firefox\components\

nppl3260.xpt

nsIBitCometAgent.xpt

nsIQTScriptablePlugin.xpt

nsJSRealPlayerPlugin.xpt

C:\Program Files (x86)\Mozilla Firefox\plugins\

np-mswmp.dll

npBitCometAgent.dll

npdeployJava1.dll

nppdf32.dll

nppl3260.dll

npqtplugin.dll

npqtplugin2.dll

npqtplugin3.dll

npqtplugin4.dll

npqtplugin5.dll

nprpjplug.dll

QuickTimePlugin.class

WMP Firefox Plugin License.rtf

WMP Firefox Plugin RelNotes.txt

C:\Users\gebruiker\AppData\Roaming\Mozilla\Firefox\Profiles\m8kwkdti.default\extensions\

anttoolbar@ant.com

crossriderapp435@crossrider.com

en-US@dictionaries.addons.mozilla.org

{28387537-e3f9-4ed7-860c-11e69af4a8a0}

{DB9127A2-3381-41ec-82B3-1B6ED4C6F29A}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]

AVG Safe Search - C:\Program Files (x86)\AVG\AVG2012\avgssiea.dll [2011-11-11 1942368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BE7A24F5-69CB-4708-B77B-B1EDA6043B95}]

DataMngr - C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\x64\BROWSE~1.DLL [2012-03-04 118152]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{074C1DC5-9320-4A9A-947D-C042949C6216}]

ContributeBHO Class - E:\Adobe CS4\/Adobe Contribute CS4/contributeieplugin.dll [2008-09-10 136560]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110011041135}]

Premiumplay Codec-C - C:\Program Files (x86)\Premiumplay Codec-C\Premiumplay Codec-C.dll [2012-01-17 470528]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]

Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-04-04 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{28387537-e3f9-4ed7-860c-11e69af4a8a0}]

Wincore Mediabar - C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\ToolBar\wincoreimdtx.dll [2012-02-27 89008]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]

DivX Plus Web Player HTML5 <video> - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-12-12 194432]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{39F7E362-828A-4B5A-BCAF-5B79BFDFEA60}]

BitComet Helper - C:\Program Files (x86)\BitComet\tools\BitCometBHO_1.5.4.11.dll [2011-04-11 767280]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]

AVG Safe Search - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll [2011-11-11 1378144]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]

Java Plug-In SSV Helper - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll [2012-07-05 453544]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Aanmeldhulp voor Microsoft-account - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]

Skype Browser Helper - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-10-10 3834016]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0}]

FlashGetBHO - C:\Users\gebruiker\AppData\Roaming\FlashGetBHO\FlashGetBHO3.dll [2010-12-16 144944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BE7A24F5-69CB-4708-B77B-B1EDA6043B95}]

DataMngr - C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\BROWSE~1.DLL [2012-03-04 101256]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

Java Plug-In 2 SSV Helper - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll [2012-07-05 157616]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E87806B5-E908-45FD-AF5E-957D83E58E68}]

Softonic Helper Object - C:\Program Files (x86)\Softonic\Softonic\1.8.8.11\bh\Softonic.dll [2013-01-09 249752]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{ae07101b-46d4-4a98-af68-0333ea26e113}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]

{517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - Contribute Toolbar - E:\Adobe CS4\/Adobe Contribute CS4/contributeieplugin.dll [2008-09-10 136560]

{28387537-e3f9-4ed7-860c-11e69af4a8a0} - Wincore Mediabar - C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\ToolBar\wincoreimdtx.dll [2012-02-27 89008]

{5018CFD2-804D-4C99-9F81-25EAEA2769DE} - Softonic Toolbar - C:\Program Files (x86)\Softonic\Softonic\1.8.8.11\SoftonicTlbr.dll [2013-01-09 324504]

{ae07101b-46d4-4a98-af68-0333ea26e113}

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"AdobeBridge"= []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS4ServiceManager]

C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe_ID0ENQBO]

C:\PROGRA~2\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE [2008-08-15 378224]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]

C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-04-21 59720]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]

C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-04-17 3671872]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Facebook Update]

C:\Users\gebruiker\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]

C:\Program Files (x86)\iTunes\iTunesHelper.exe [2013-11-02 152392]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LifeCam]

C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe [2010-12-13 135536]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Vid]

C:\Program Files (x86)\Logitech\Vid HD\Vid.exe -bootmode []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LWS]

C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe -hide []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]

C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe /background []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

C:\Program Files (x86)\QuickTime\QTTask.exe [2013-05-01 421888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]

C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-10-21 20549280]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]

C:\Program Files (x86)\Steam\Steam.exe -silent []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^AutoCAD Startup Accelerator.lnk]

C:\PROGRA~2\COMMON~1\AUTODE~1\ACSTAR~1.EXE [2006-03-05 11000]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Network Server.lnk]

C:\PROGRA~2\WIBUKEY\Server\WkSvMgr.exe [2009-12-03 5724472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^gebruiker^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk]

C:\Users\GEBRUI~1\AppData\Roaming\Dropbox\bin\Dropbox.exe [2014-01-03 30714328]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^gebruiker^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Facebook Messenger.lnk]

C:\Users\GEBRUI~1\AppData\Local\Facebook\MESSEN~1\214814~1.0\FACEBO~1.EXE []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^gebruiker^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.3 .lnk]

C:\PROGRA~2\OPENOF~1.ORG\program\QUICKS~1.EXE []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]

"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-03 843712]

"DivXUpdate"=C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2011-07-29 1259376]

"DATAMNGR"=C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\DATAMN~1.EXE [2012-03-04 1694640]

"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2012-01-17 252296]

"AVG_TRAY"=C:\Program Files (x86)\AVG\AVG2012\avgtray.exe [2012-01-24 2416480]

"WIRELESS-KB-LED-STATUS"=C:\Program Files (x86)\Wireless Keyboard Driver\LedStatusApp.exe [2010-04-30 846336]

"NCUpdateHelper"=C:\Program Files (x86)\NCWest\NCLauncher\NCUpdateHelper.exe [2013-08-07 528360]

"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2013-05-01 421888]

"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-04-21 59720]

"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2013-11-02 152392]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup

SketchBook Snapshot.lnk - H:\Sketchbook\SketchBookSnapshot.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"AppInit_DLLs"="C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\x64\datamngr.dll C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\x64\IEBHO.dll "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]

"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"ConsentPromptBehaviorAdmin"=5

"ConsentPromptBehaviorUser"=3

"EnableUIADesktopToggle"=0

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoActiveDesktop"=1

"NoActiveDesktopChanges"=0

"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

"C:\Program Files (x86)\FlashGet 3\FlashGet3.exe"="C:\Program Files (x86)\FlashGet 3\FlashGet3.exe:*:Enabled:Flashget3"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]

"vidc.mrle"=msrle32.dll

"vidc.msvc"=msvidc32.dll

"msacm.imaadpcm"=imaadp32.acm

"msacm.msg711"=msg711.acm

"msacm.msgsm610"=msgsm32.acm

"msacm.msadpcm"=msadp32.acm

"midimapper"=midimap.dll

"wavemapper"=msacm32.drv

"VIDC.UYVY"=msyuv.dll

"VIDC.YUY2"=msyuv.dll

"VIDC.YVYU"=msyuv.dll

"VIDC.IYUV"=iyuv_32.dll

"vidc.i420"=lvcod64.dll

"VIDC.YVU9"=tsbyuv.dll

"msacm.l3acm"=C:\Windows\System32\l3codeca.acm

"wave"=wdmaud.drv

"midi"=wdmaud.drv

"mixer"=wdmaud.drv

"aux"=wdmaud.drv

"wave1"=wdmaud.drv

"midi1"=wdmaud.drv

"mixer1"=wdmaud.drv

"aux1"=wdmaud.drv

"wave2"=wdmaud.drv

"midi2"=wdmaud.drv

"mixer2"=wdmaud.drv

"aux2"=wdmaud.drv

"wave3"=wdmaud.drv

"midi3"=wdmaud.drv

"mixer3"=wdmaud.drv

"aux3"=wdmaud.drv

"wave4"=wdmaud.drv

"midi4"=wdmaud.drv

"mixer4"=wdmaud.drv

"aux4"=wdmaud.drv

"wave5"=wdmaud.drv

"midi5"=wdmaud.drv

"mixer5"=wdmaud.drv

"aux5"=wdmaud.drv

"MSVideo"=vfwwdm32.dll

"MSVideo8"=VfWWDM32.dll

"wave6"=wdmaud.drv

"midi6"=wdmaud.drv

"mixer6"=wdmaud.drv

"aux6"=wdmaud.drv

"wave7"=wdmaud.drv

"midi7"=wdmaud.drv

"mixer7"=wdmaud.drv

"aux7"=wdmaud.drv

"wave8"=wdmaud.drv

"midi8"=wdmaud.drv

"mixer8"=wdmaud.drv

"aux8"=wdmaud.drv

"wave9"=wdmaud.drv

"mixer9"=wdmaud.drv

"midi9"=wdmaud.drv

"aux9"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

.js - open - "E:\Adobe CS4\Adobe Dreamweaver CS4\Dreamweaver.exe","%1"

.scr - open - "C:\Windows\system32\NOTEPAD.EXE" "%1"

.scr - install -

.scr - config -

======List of files/folders created in the last 3 months======

2014-01-30 14:47:45 ----D---- C:\rsit

2014-01-30 14:47:45 ----D---- C:\Program Files\trend micro

2014-01-19 15:38:20 ----D---- C:\ProgramData\SketchUp

2014-01-19 15:38:19 ----D---- C:\Program Files (x86)\SketchUp

2014-01-18 09:26:06 ----D---- C:\390ffebac1995ed20aa2

2014-01-01 15:58:39 ----A---- C:\Users\gebruiker\AppData\Roaming\pcouffin.sys

2014-01-01 15:58:39 ----A---- C:\Users\gebruiker\AppData\Roaming\inst.exe

2014-01-01 15:58:38 ----D---- C:\Users\gebruiker\AppData\Roaming\Vso

2014-01-01 15:58:19 ----D---- C:\ProgramData\VSO

2014-01-01 15:58:19 ----D---- C:\Program Files (x86)\VSO

2013-12-18 22:49:37 ----A---- C:\Windows\system32\drivers\GEARAspiWDM.sys

2013-12-18 22:48:51 ----D---- C:\Program Files\iPod

2013-12-18 22:48:50 ----D---- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2013-12-18 22:48:50 ----D---- C:\Program Files\iTunes

2013-12-18 22:43:27 ----D---- C:\Program Files (x86)\QuickTime

2013-12-12 03:04:08 ----A---- C:\Windows\system32\wmploc.DLL

2013-12-12 03:04:07 ----A---- C:\Windows\SYSWOW64\wmploc.DLL

2013-12-12 03:04:07 ----A---- C:\Windows\SYSWOW64\wmp.dll

2013-12-12 03:04:06 ----A---- C:\Windows\system32\wmp.dll

2013-12-12 03:02:47 ----A---- C:\Windows\system32\ieetwcollectorres.dll

2013-12-12 03:02:46 ----A---- C:\Windows\SYSWOW64\jsproxy.dll

2013-12-12 03:02:46 ----A---- C:\Windows\SYSWOW64\ieui.dll

2013-12-12 03:02:46 ----A---- C:\Windows\system32\jsproxy.dll

2013-12-12 03:02:46 ----A---- C:\Windows\system32\ieUnatt.exe

2013-12-12 03:02:46 ----A---- C:\Windows\system32\ieui.dll

2013-12-12 03:02:46 ----A---- C:\Windows\system32\iesetup.dll

2013-12-12 03:02:46 ----A---- C:\Windows\system32\iernonce.dll

2013-12-12 03:02:46 ----A---- C:\Windows\system32\ieetwproxystub.dll

2013-12-12 03:02:46 ----A---- C:\Windows\system32\ieetwcollector.exe

2013-12-12 03:02:46 ----A---- C:\Windows\system32\ie4uinit.exe

2013-12-12 03:02:45 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll

2013-12-12 03:02:45 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll

2013-12-12 03:02:45 ----A---- C:\Windows\system32\mshtml.dll

2013-12-12 03:02:45 ----A---- C:\Windows\system32\jscript9diag.dll

2013-12-12 03:02:45 ----A---- C:\Windows\system32\iertutil.dll

2013-12-12 03:02:45 ----A---- C:\Windows\system32\ieapfltr.dll

2013-12-12 03:02:44 ----A---- C:\Windows\SYSWOW64\wininet.dll

2013-12-12 03:02:44 ----A---- C:\Windows\SYSWOW64\urlmon.dll

2013-12-12 03:02:44 ----A---- C:\Windows\SYSWOW64\iertutil.dll

2013-12-12 03:02:44 ----A---- C:\Windows\system32\wininet.dll

2013-12-12 03:02:44 ----A---- C:\Windows\system32\urlmon.dll

2013-12-12 03:02:43 ----A---- C:\Windows\SYSWOW64\ieframe.dll

2013-12-12 03:02:43 ----A---- C:\Windows\system32\ieframe.dll

2013-12-12 03:02:42 ----A---- C:\Windows\SYSWOW64\mshtml.dll

2013-12-12 03:02:42 ----A---- C:\Windows\SYSWOW64\jscript9.dll

2013-12-12 03:02:42 ----A---- C:\Windows\system32\jscript9.dll

2013-12-11 05:19:02 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll

2013-12-11 05:19:02 ----A---- C:\Windows\SYSWOW64\msieftp.dll

2013-12-11 05:19:02 ----A---- C:\Windows\system32\WMPhoto.dll

2013-12-11 05:19:02 ----A---- C:\Windows\system32\win32k.sys

2013-12-11 05:19:02 ----A---- C:\Windows\system32\msieftp.dll

2013-12-11 05:19:01 ----A---- C:\Windows\SYSWOW64\imagehlp.dll

2013-12-11 05:19:01 ----A---- C:\Windows\system32\imagehlp.dll

2013-12-11 05:19:00 ----A---- C:\Windows\SYSWOW64\tzres.dll

2013-12-11 05:19:00 ----A---- C:\Windows\system32\tzres.dll

2013-12-11 05:18:59 ----A---- C:\Windows\system32\drivers\portcls.sys

2013-12-11 05:18:59 ----A---- C:\Windows\system32\drivers\drmk.sys

2013-12-11 05:18:58 ----A---- C:\Windows\SYSWOW64\wscript.exe

2013-12-11 05:18:58 ----A---- C:\Windows\SYSWOW64\scrrun.dll

2013-12-11 05:18:58 ----A---- C:\Windows\SYSWOW64\cscript.exe

2013-12-11 05:18:58 ----A---- C:\Windows\system32\wscript.exe

2013-12-11 05:18:58 ----A---- C:\Windows\system32\scrrun.dll

2013-12-11 05:18:58 ----A---- C:\Windows\system32\cscript.exe

2013-12-11 03:06:29 ----A---- C:\Windows\system32\IEUDINIT.EXE

2013-12-11 03:03:10 ----A---- C:\Windows\SYSWOW64\elshyph.dll

2013-12-11 03:03:10 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe

2013-12-11 03:03:07 ----A---- C:\Windows\SYSWOW64\jsIntl.dll

2013-12-11 03:03:07 ----A---- C:\Windows\system32\elshyph.dll

2013-12-11 03:03:06 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe

2013-12-11 03:03:06 ----A---- C:\Windows\SYSWOW64\msrating.dll

2013-12-11 03:03:06 ----A---- C:\Windows\SYSWOW64\msls31.dll

2013-12-11 03:03:05 ----A---- C:\Windows\SYSWOW64\url.dll

2013-12-11 03:03:05 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll

2013-12-11 03:03:05 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat

2013-12-11 03:03:05 ----A---- C:\Windows\SYSWOW64\dxtrans.dll

2013-12-11 03:03:05 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll

2013-12-11 03:03:04 ----A---- C:\Windows\SYSWOW64\wextract.exe

2013-12-11 03:03:04 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll

2013-12-11 03:03:04 ----A---- C:\Windows\SYSWOW64\licmgr10.dll

2013-12-11 03:03:04 ----A---- C:\Windows\SYSWOW64\inseng.dll

2013-12-11 03:03:04 ----A---- C:\Windows\SYSWOW64\iesetup.dll

2013-12-11 03:03:04 ----A---- C:\Windows\SYSWOW64\iernonce.dll

2013-12-11 03:03:04 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll

2013-12-11 03:03:04 ----A---- C:\Windows\SYSWOW64\icardie.dll

2013-12-11 03:03:03 ----A---- C:\Windows\SYSWOW64\webcheck.dll

2013-12-11 03:03:03 ----A---- C:\Windows\SYSWOW64\vbscript.dll

2013-12-11 03:03:03 ----A---- C:\Windows\SYSWOW64\pngfilt.dll

2013-12-11 03:03:03 ----A---- C:\Windows\SYSWOW64\mshtmled.dll

2013-12-11 03:03:03 ----A---- C:\Windows\SYSWOW64\msfeeds.dll

2013-12-11 03:03:03 ----A---- C:\Windows\SYSWOW64\iexpress.exe

2013-12-11 03:03:02 ----A---- C:\Windows\SYSWOW64\occache.dll

2013-12-11 03:03:02 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll

2013-12-11 03:03:02 ----A---- C:\Windows\SYSWOW64\mshta.exe

2013-12-11 03:03:02 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe

2013-12-11 03:03:02 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll

2013-12-11 03:03:02 ----A---- C:\Windows\SYSWOW64\jscript.dll

2013-12-11 03:03:02 ----A---- C:\Windows\SYSWOW64\imgutil.dll

2013-12-11 03:03:02 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe

2013-12-11 03:03:02 ----A---- C:\Windows\SYSWOW64\iepeers.dll

2013-12-11 03:03:02 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll

2013-12-11 03:03:02 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll

2013-12-11 03:03:01 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe

2013-12-11 03:03:01 ----A---- C:\Windows\SYSWOW64\mshtmler.dll

2013-12-11 03:03:00 ----A---- C:\Windows\SYSWOW64\iesysprep.dll

2013-12-11 03:03:00 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe

2013-12-11 03:03:00 ----A---- C:\Windows\system32\msrating.dll

2013-12-11 03:03:00 ----A---- C:\Windows\system32\msls31.dll

2013-12-11 03:03:00 ----A---- C:\Windows\system32\jsIntl.dll

2013-12-11 03:02:59 ----A---- C:\Windows\system32\SetIEInstalledDate.exe

2013-12-11 03:02:59 ----A---- C:\Windows\system32\msfeedssync.exe

2013-12-11 03:02:59 ----A---- C:\Windows\system32\msfeedsbs.dll

2013-12-11 03:02:59 ----A---- C:\Windows\system32\IEAdvpack.dll

2013-12-11 03:02:58 ----A---- C:\Windows\system32\mshtmler.dll

2013-12-11 03:02:58 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll

2013-12-11 03:02:58 ----A---- C:\Windows\system32\iesysprep.dll

2013-12-11 03:02:58 ----A---- C:\Windows\system32\dxtrans.dll

2013-12-11 03:02:58 ----A---- C:\Windows\system32\dxtmsft.dll

2013-12-11 03:02:57 ----A---- C:\Windows\system32\url.dll

2013-12-11 03:02:57 ----A---- C:\Windows\system32\mshtmlmedia.dll

2013-12-11 03:02:57 ----A---- C:\Windows\system32\iedkcs32.dll

2013-12-11 03:02:57 ----A---- C:\Windows\system32\ieapfltr.dat

2013-12-11 03:02:57 ----A---- C:\Windows\system32\icardie.dll

2013-12-11 03:02:56 ----A---- C:\Windows\system32\webcheck.dll

2013-12-11 03:02:56 ----A---- C:\Windows\system32\mshtmled.dll

2013-12-11 03:02:56 ----A---- C:\Windows\system32\licmgr10.dll

2013-12-11 03:02:56 ----A---- C:\Windows\system32\inseng.dll

2013-12-11 03:02:55 ----A---- C:\Windows\system32\wextract.exe

2013-12-11 03:02:55 ----A---- C:\Windows\system32\vbscript.dll

2013-12-11 03:02:55 ----A---- C:\Windows\system32\msfeeds.dll

2013-12-11 03:02:55 ----A---- C:\Windows\system32\iexpress.exe

2013-12-11 03:02:54 ----A---- C:\Windows\system32\pngfilt.dll

2013-12-11 03:02:54 ----A---- C:\Windows\system32\occache.dll

2013-12-11 03:02:54 ----A---- C:\Windows\system32\mshta.exe

2013-12-11 03:02:53 ----A---- C:\Windows\system32\MshtmlDac.dll

2013-12-11 03:02:53 ----A---- C:\Windows\system32\jscript.dll

2013-12-11 03:02:53 ----A---- C:\Windows\system32\imgutil.dll

2013-12-11 03:02:53 ----A---- C:\Windows\system32\iepeers.dll

2013-11-18 12:03:15 ----D---- C:\Program Files (x86)\Mozilla Firefox

2013-11-13 15:14:20 ----A---- C:\Windows\SYSWOW64\crypt32.dll

2013-11-13 15:14:20 ----A---- C:\Windows\system32\crypt32.dll

2013-11-13 15:14:18 ----A---- C:\Windows\system32\drivers\afd.sys

2013-11-13 15:14:17 ----A---- C:\Windows\SYSWOW64\SmartcardCredentialProvider.dll

2013-11-13 15:14:17 ----A---- C:\Windows\SYSWOW64\credui.dll

2013-11-13 15:14:17 ----A---- C:\Windows\SYSWOW64\authui.dll

2013-11-13 15:14:17 ----A---- C:\Windows\system32\SmartcardCredentialProvider.dll

2013-11-13 15:14:17 ----A---- C:\Windows\system32\credui.dll

2013-11-13 15:14:17 ----A---- C:\Windows\system32\authui.dll

2013-11-13 15:14:14 ----A---- C:\Windows\SYSWOW64\sspicli.dll

2013-11-13 15:14:14 ----A---- C:\Windows\SYSWOW64\secur32.dll

2013-11-13 15:14:14 ----A---- C:\Windows\SYSWOW64\schannel.dll

2013-11-13 15:14:14 ----A---- C:\Windows\SYSWOW64\ncrypt.dll

2013-11-13 15:14:14 ----A---- C:\Windows\system32\sspisrv.dll

2013-11-13 15:14:14 ----A---- C:\Windows\system32\sspicli.dll

2013-11-13 15:14:14 ----A---- C:\Windows\system32\secur32.dll

2013-11-13 15:14:14 ----A---- C:\Windows\system32\schannel.dll

2013-11-13 15:14:14 ----A---- C:\Windows\system32\ncrypt.dll

2013-11-13 15:14:14 ----A---- C:\Windows\system32\lsass.exe

2013-11-13 15:14:14 ----A---- C:\Windows\system32\lsasrv.dll

2013-11-13 15:14:14 ----A---- C:\Windows\system32\drivers\ksecpkg.sys

2013-11-13 15:14:14 ----A---- C:\Windows\system32\drivers\ksecdd.sys

2013-11-13 15:14:14 ----A---- C:\Windows\system32\drivers\cng.sys

2013-11-13 15:14:09 ----A---- C:\Windows\SYSWOW64\gdi32.dll

2013-11-13 15:14:09 ----A---- C:\Windows\system32\gdi32.dll

2013-11-13 15:14:08 ----A---- C:\Windows\system32\IKEEXT.DLL

2013-11-13 15:14:07 ----A---- C:\Windows\SYSWOW64\nshwfp.dll

2013-11-13 15:14:07 ----A---- C:\Windows\SYSWOW64\FWPUCLNT.DLL

2013-11-13 15:14:07 ----A---- C:\Windows\system32\nshwfp.dll

2013-11-13 15:14:07 ----A---- C:\Windows\system32\FWPUCLNT.DLL

======List of files/folders modified in the last 3 months======

2014-01-30 14:47:53 ----D---- C:\Windows\Prefetch

2014-01-30 14:47:45 ----RD---- C:\Program Files

2014-01-30 14:37:50 ----D---- C:\Windows\Temp

2014-01-29 08:25:37 ----D---- C:\Users\gebruiker\AppData\Roaming\Dropbox

2014-01-29 07:51:35 ----D---- C:\ProgramData\NVIDIA

2014-01-28 09:44:51 ----D---- C:\Windows\system32\drivers\AVG

2014-01-23 07:21:07 ----SHD---- C:\System Volume Information

2014-01-23 07:07:30 ----D---- C:\Windows\System32

2014-01-23 07:07:30 ----D---- C:\Windows\inf

2014-01-23 07:07:30 ----A---- C:\Windows\system32\PerfStringBackup.INI

2014-01-23 07:00:19 ----D---- C:\Windows

2014-01-23 06:51:42 ----D---- C:\Users\gebruiker\AppData\Roaming\BitComet

2014-01-19 15:38:32 ----D---- C:\Windows\SysWOW64

2014-01-19 15:38:30 ----SHD---- C:\Windows\Installer

2014-01-19 15:38:30 ----SHD---- C:\Config.Msi

2014-01-19 15:38:20 ----HD---- C:\ProgramData

2014-01-19 15:38:19 ----RD---- C:\Program Files (x86)

2014-01-19 15:17:51 ----D---- C:\Windows\Microsoft.NET

2014-01-19 15:16:29 ----D---- C:\Windows\SYSWOW64\drivers

2014-01-19 15:14:52 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware

2014-01-19 14:51:43 ----RSD---- C:\Windows\assembly

2014-01-18 10:01:11 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI

2014-01-18 09:57:47 ----D---- C:\Windows\SYSWOW64\en-US

2014-01-18 09:57:47 ----D---- C:\Windows\system32\en-US

2014-01-18 09:12:17 ----D---- C:\Windows\system32\drivers

2014-01-18 09:12:17 ----D---- C:\Program Files (x86)\MALWAREBYTES ANTI-MALWARE

2014-01-13 18:02:04 ----RSD---- C:\Windows\Fonts

2014-01-12 18:53:48 ----D---- C:\Users\gebruiker\AppData\Roaming\vlc

2014-01-09 23:25:34 ----D---- C:\Users\gebruiker\AppData\Roaming\Skype

2013-12-22 04:23:43 ----D---- C:\Windows\system32\catroot

2013-12-21 15:57:56 ----D---- C:\Windows\system32\config

2013-12-18 22:49:36 ----DC---- C:\Windows\system32\DRVSTORE

2013-12-18 22:49:23 ----D---- C:\Program Files (x86)\iTunes

2013-12-18 22:46:39 ----D---- C:\Windows\system32\DriverStore

2013-12-18 22:43:45 ----D---- C:\Program Files\Internet Explorer

2013-12-16 03:06:47 ----D---- C:\Windows\system32\MRT

2013-12-16 03:03:03 ----A---- C:\Windows\system32\MRT.exe

2013-12-12 04:02:33 ----D---- C:\Windows\rescache

2013-12-12 03:23:27 ----D---- C:\Windows\winsxs

2013-12-12 03:20:43 ----D---- C:\Program Files (x86)\Windows Media Player

2013-12-12 03:20:42 ----D---- C:\Program Files\Windows Media Player

2013-12-12 03:20:42 ----D---- C:\Program Files (x86)\Internet Explorer

2013-12-12 03:20:40 ----D---- C:\Windows\SYSWOW64\nl-NL

2013-12-12 03:20:40 ----D---- C:\Windows\system32\nl-NL

2013-12-12 03:04:17 ----D---- C:\Windows\system32\catroot2

2013-12-11 03:23:20 ----D---- C:\Windows\SYSWOW64\migration

2013-12-11 03:23:19 ----D---- C:\Windows\system32\migration

2013-12-11 03:23:19 ----D---- C:\Windows\PolicyDefinitions

2013-12-11 03:06:28 ----D---- C:\Windows\Logs

2013-12-10 20:25:55 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe

2013-12-01 12:06:21 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service

2013-11-18 20:05:10 ----D---- C:\ProgramData\Skype

2013-11-18 20:05:02 ----RD---- C:\Program Files (x86)\Skype

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx64.sys [2011-09-13 37456]

R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2011-11-29 55856]

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]

R1 Avgldx64;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx64.sys [2011-10-07 283728]

R1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx64.sys [2011-08-08 46672]

R1 Avgtdia;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdia.sys [2011-07-11 375376]

R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2012-07-20 283200]

R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]

R2 adfs;adfs; C:\Windows\system32\drivers\adfs.sys [2008-06-27 88632]

R2 WIBUKEY;WIBU-KEY Kernel Driver; C:\Windows\SYSTEM32\DRIVERS\WibuKey64.sys [2009-12-03 103224]

R3 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\AVGIDSDriver.Sys [2011-07-11 120400]

R3 AVGIDSFilter;AVGIDSFilter; C:\Windows\system32\DRIVERS\AVGIDSFilter.Sys [2011-07-11 29776]

R3 e1cexpress;Intel® PRO/1000 PCI Express Network Connection Driver C; C:\Windows\system32\DRIVERS\e1c62x64.sys [2010-09-21 313520]

R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]

R3 LVUSBS64;Logitech USB Monitor Filter; C:\Windows\system32\drivers\LVUSBS64.sys [2007-02-03 58528]

R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2013-04-04 25928]

R3 MEIx64;Intel® Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]

R3 MSHUSBVideo;NX6000/NX3000/VX2000/VX5000/VX5500/VX7000/Cinema Filter Driver; C:\Windows\System32\Drivers\nx6000.sys [2010-12-13 36720]

R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2010-04-27 83080]

R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2010-04-27 184968]

R3 wacmoumonitor;Wacom Mode Helper; C:\Windows\system32\DRIVERS\wacmoumonitor.sys [2010-11-02 13312]

R3 wacommousefilter;Wacom Mouse Filter Driver; C:\Windows\system32\DRIVERS\wacommousefilter.sys [2010-10-25 12848]

R3 wacomvhid;Wacom Virtual Hid Driver; C:\Windows\system32\DRIVERS\wacomvhid.sys [2009-09-22 16168]

S3 CamDrL64;Logitech QuickCam Pro 3000(PID_08B0); C:\Windows\system32\DRIVERS\CamDrL64.sys [2007-02-03 955680]

S3 dc3d;MS Hardware Device Detection Driver (USB); C:\Windows\system32\DRIVERS\dc3d.sys [2010-07-21 51600]

S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2013-08-20 103576]

S3 e.dentifier2;SmartCard Reader ABN AMRO e.dentifier2; C:\Windows\system32\DRIVERS\aabed2.sys [2008-03-20 28672]

S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2012-02-14 14692224]

S3 NuidFltr;NUID filter driver; C:\Windows\system32\DRIVERS\NuidFltr.sys [2010-07-21 23952]

S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]

S3 RTL8192cu;Realtek RTL8192CU Wireless LAN 802.11n USB 2.0 Network Adapter; C:\Windows\system32\DRIVERS\rtwlanu.sys [2012-03-19 1047144]

S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2013-08-20 204568]

S3 ssudserd;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudserd.sys [2013-06-04 203672]

S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]

S3 usb_rndisx;USB RNDIS-adapter; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-02-12 19968]

S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2012-02-15 52736]

S3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]

S3 WinUsb;SAMSUNG Android USB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

S3 WSDPrintDevice;WSD-ondersteuning voor afdrukken via UMB; C:\Windows\system32\DRIVERS\WSDPrint.sys [2009-07-14 23040]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]

R2 Apache2.2;Apache2.2; c:\xampp\apache\bin\httpd.exe [2010-10-18 20549]

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2013-09-07 55624]

R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe [2011-10-12 4433248]

R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe [2011-08-02 192776]

R2 Bonjour Service;Bonjour-service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2012-07-09 104912]

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2012-07-08 123856]

R2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-04-04 418376]

R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2013-04-04 701512]

R2 MSCamSvc;MSCamSvc; C:\Program Files\Microsoft LifeCam\MSCamS64.exe [2010-12-13 194416]

R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-01-18 884512]

R2 RealtekCU;RealtekCU; C:\Program Files (x86)\Sitecom\Wireless High-gain Network Adapter Utility\RtlService.exe [2010-04-16 36864]

R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-01-18 383264]

R2 TabletServiceWacom;TabletServiceWacom; C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe [2010-11-15 5716848]

R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]

R3 iPod Service;iPod-service; C:\Program Files\iPod\bin\iPodService.exe [2013-11-02 641352]

S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-22 116648]

S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-02-25 1260320]

S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-09-05 171680]

S3 Adobe Version Cue CS4;Adobe Version Cue CS4; C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS4\Server\bin\VersionCueCS4.exe [2008-08-15 284016]

S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-10 257416]

S3 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2011-09-06 77944]

S3 BITCOMET_HELPER_SERVICE;BitComet Disk Boost Service; C:\Program Files (x86)\BitComet\tools\BitCometService.exe [2010-12-28 1296728]

S3 cphs;Intel® Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2012-02-14 276248]

S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2011-03-09 1436424]

S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011-03-09 1045256]

S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-22 116648]

S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2013-11-26 111616]

S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-11-18 119408]

S3 TeamViewer6;TeamViewer 6; C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe [2011-01-27 2253688]

S3 TeamViewer7;TeamViewer 7; C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2011-12-14 2984832]

S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-02-05 1255736]

S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2012-07-08 51648]

S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]

S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]

S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]

-----------------EOF-----------------

EnkoY · 30 januari 2014

Sluit jouw systeem af als je het commando "shutdown -f" gebruikt?

Je kan dit doen door tegelijkertijd op de windowsknop en de "R" toets te drukken.

Vervolgens intikken: "shutdown -f" zonder aanhalingstekens en op enter duwen.

Zorg wel dat enige geopende bestanden zijn opgeslagen en/afgesloten, dit commando sluit je systeem namelijk meteen af. (als het werkt)

kweezie wabbit · 31 januari 2014

Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe (hier en hier) kan je lezen hoe je dat doet.

Download Zoek.exe naar het bureaublad (niet de .zip- of .rar-versie)

Wanneer Internet Explorer of een andere browser of virusscanner melding geeft dat dit bestand onveilig zou zijn kun je negeren, dit is namelijk een onterechte waarschuwing.
Dubbelklik op Zoek.exe om de tool te starten.
Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
Kopieer nu onderstaande code en plak die in het grote invulvenster:
Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.

C:\Program Files (x86)\iMesh Applications\MediaBar\Datamngr\datamngrUI.exe;virustotal
{11111111-1111-1111-1111-110011041135};c
{E87806B5-E908-45FD-AF5E-957D83E58E68};c
C:\Program Files (x86)\Softonic\;f
{5018CFD2-804D-4C99-9F81-25EAEA2769DE};c
emptyclsid;
chromelook; 
firefoxlook; 
emptyfolderscheck;delete 
startupall; 
filesrcm;

Klik op de knop "Options" en vink nu de onderstaande opties aan.
Do a Deep Scan
Installed Programs
HijackThis Log
System Specs
Startup Information
Auto Clean
De optie "Scan All Users" staat standaard aangevinkt.
Klik nu op de knop "Run script".
Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
Mocht er geen logje verschijnen, start zoek.exe dan opnieuw en klik op de knop zoek-results.log, de log verschijnt dan alsnog.
Post het geopende logje in het volgende bericht.

Shiruvan · 17 februari 2014

Hier zijn de resultaten!

Zoek.exe v5.0.0.0 Updated 15-February-2014

Tool run by gebruiker on ma 17-02-2014 at 13:48:26,84.

Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64

Running in: Normal Mode Internet Access Detected

Launched: C:\Users\gebruiker\Desktop\zoek.exe [scan all users] [script inserted] [Checkboxes used]

==== Older Logs ======================

C:\zoek-results2014-02-17-115348.log 62636 bytes

==== VirusTotal Scan ======================

C:\Program Files (x86)\iMesh Applications\MediaBar\Datamngr\datamngrUI.exe not found

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== Installed Programs ======================

Aangifte inkomstenbelasting 2011

ABN AMRO e.dentifier2 software

Adobe After Effects CS4

Adobe After Effects CS4 Presets

Adobe After Effects CS4 Third Party Content

Adobe AIR

Adobe Anchor Service CS4

Adobe Anchor Service x64 CS4

Adobe Asset Services CS4

Adobe Bridge CS4

Adobe CMaps CS4

Adobe CMaps x64 CS4

Adobe Color - Photoshop Specific CS4

Adobe Color EU Extra Settings CS4

Adobe Color JA Extra Settings CS4

Adobe Color NA Recommended Settings CS4

Adobe Color Video Profiles AE CS4

Adobe Color Video Profiles CS CS4

Adobe Contribute CS4

Adobe Creative Suite 4 Master Collection

Adobe CS4 American English Speech Analysis Models

Adobe CSI CS4

Adobe CSI CS4 x64

Adobe Default Language CS4

Adobe Device Central CS4

Adobe Dreamweaver CS4

Adobe Drive CS4 x64

Adobe Dynamiclink Support

Adobe Encore CS4

Adobe Encore CS4 Codecs

Adobe ExtendScript Toolkit CS4

Adobe Extension Manager CS4

Adobe Fireworks CS4

Adobe Flash CS4

Adobe Flash CS4 Extension - Flash Lite STI en

Adobe Flash CS4 STI-en

Adobe Flash Player 10 ActiveX

Adobe Flash Player 12 Plugin

Adobe Fonts All

Adobe Fonts All x64

Adobe Illustrator CS4

Adobe InDesign CS4

Adobe InDesign CS4 Application Feature Set Files (Roman)

Adobe InDesign CS4 Common Base Files

Adobe InDesign CS4 Icon Handler

Adobe InDesign CS4 Icon Handler x64

Adobe Linguistics CS4

Adobe Linguistics CS4 x64

Adobe Media Encoder CS4

Adobe Media Encoder CS4 Additional Exporter

Adobe Media Encoder CS4 Dolby

Adobe Media Encoder CS4 Exporter

Adobe Media Encoder CS4 Importer

Adobe Media Player

Adobe MotionPicture Color Files CS4

Adobe Output Module

Adobe PDF Library Files CS4

Adobe PDF Library Files x64 CS4

Adobe Photoshop CS4

Adobe Photoshop CS4 (64 Bit)

Adobe Photoshop CS4 Support

Adobe Premiere Pro CS4

Adobe Premiere Pro CS4 Functional Content

Adobe Premiere Pro CS4 Third Party Content

Adobe Reader X (10.1.3) - Nederlands

Adobe Search for Help

Adobe Service Manager Extension

Adobe Setup

Adobe SGM CS4

Adobe SING CS4

Adobe Soundbooth CS4

Adobe Soundbooth CS4 Codecs

Adobe Type Support CS4

Adobe Type Support x64 CS4

Adobe Update Manager CS4

Adobe Version Cue CS4 Server

Adobe WinSoft Linguistics Plugin

Adobe WinSoft Linguistics Plugin x64

Adobe XMP Panels CS4

AdobeColorCommonSetCMYK

AdobeColorCommonSetRGB

ANNO 2070

Apple Application Support

Apple Mobile Device Support

Apple Software Update

ASIO4ALL

AutoCAD 2007 - English

Autodesk 3ds Max 2011 32-bit Components

Autodesk Backburner 2008.1

Autodesk DWF Viewer

Autodesk FBX Plug-in 2011.1 - 3ds Max 2011

Autodesk FBX Plug-in 2011.1 - 3ds Max 2011 64-bit

Autodesk Material Library 2011

Autodesk Material Library 2011 Base Image library

Autodesk SketchBookExpress 2010

Autodesk SketchBookPro 2011

AVG 2012

AviSynth 2.5

BitComet 1.29

Bonjour

Brother MFL-Pro Suite MFC-J6510DW

CCleaner

Cisco EAP-FAST Module

Cisco LEAP Module

Cisco PEAP Module

Composite 2011

Composite 2011 (64-bit)

Connect

CopyTrans Suite Remove Only

D3DX10

DAEMON Tools Lite

DivX Setup

Dropbox

FileZilla Client 3.4.0

FL Studio 10

FlashGet 3.7

Google Chrome

Google Update Helper

IL Download Manager

Intel® Network Connections Drivers

iTunes

Java Auto Updater

Java 6 Update 29

Java 7 Update 5

JavaFX 2.1.1

Junk Mail filter update

kuler

LPD8 Editor

Macromedia Flash Player 8

Malwarebytes Anti-Malware versie 1.75.0.1300

Microsoft .NET Framework 4 Client Profile NLD Language Pack

Microsoft .NET Framework 4.5

Microsoft Application Error Reporting

Microsoft Corporation

Microsoft LifeCam

Microsoft Silverlight

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2005 Redistributable (x64)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219

Movavi Video Suite 10 SE

Mozilla Firefox 27.0.1 (x86 nl)

Mozilla Maintenance Service

MSVCRT

MSVCRT_amd64

MSVCRT110

MSVCRT110_amd64

MSXML 4.0 SP2 (KB954430)

MSXML 4.0 SP2 (KB973688)

Native Instruments Absynth 5

Native Instruments Battery 3

Native Instruments FM8

Native Instruments Guitar Rig 4

Native Instruments Komplete 6

Native Instruments Kontakt 4

Native Instruments Kontakt 4 Factory Content

Native Instruments Massive

Native Instruments Reaktor 5

Native Instruments Service Center

Native Instruments Traktor 2

NVIDIA-configuratiescherm 311.06

NVIDIA 3D Vision stuurprogramma 311.06

NVIDIA Display Control Panel

NVIDIA Grafisch stuurprogramma 311.06

NVIDIA Install Application

NVIDIA PhysX

NVIDIA Stereoscopic 3D Driver

NVIDIA Update 1.11.3

NVIDIA Update Components

Origin

PDF Settings CS4

Photo Common

Photoshop Camera Raw

Photoshop Camera Raw_x64

Pistonsoft BPM Detector 1.0

Pixel Bender Toolkit

Premiumplay Codec-C

PVSonyDll

QuickTime

RapidShare Manager 2

Real Alternative 1.7.5

rekordbox 1.4.1

rekordbox 2.0.1

SAMSUNG USB Driver for Mobile Phones

Security Update for CAPICOM (KB931906)

Security Update for Taalpakket voor Microsoft .NET Framework 4 Client Profile - NLD (KB2478663)

Security Update for Taalpakket voor Microsoft .NET Framework 4 Client Profile - NLD (KB2518870)

Sitecom Wireless High-gain Network Adapter Driver and Utility

SketchUp 2013

Skype Click to Call

SkypeT 6.10

Sounddrain Downloader

Spotify

Suite Shared Configuration CS4

Switch Sound File Converter

Taalpakket voor Microsoft .NET Framework 4 Client Profile - NLD

TeamViewer 6

TeamViewer 7

Ubisoft Game Launcher

Unity Web Player

V-Ray for 3dsmax 2011 for x64

V-Ray for 3dsmax 2011 for x86

VC80CRTRedist - 8.0.50727.6195

Visual Studio 2008 x64 Redistributables

VLC media player 2.0.4

VSO ConvertXToDVD

Wacom-tablet

WavePad Sound Editor

WebTablet IE Plugin

WebTablet Netscape Plugin

WhiteCap

WibuKey Setup (WibuKey Remove)

Windows Live Communications Platform

Windows Live Essentials

Windows Live ID Sign-in Assistant

Windows Live Installer

Windows Live Mail

Windows Live MIME IFilter

Windows Live Photo Common

Windows Live PIMT Platform

Windows Live SOXE

Windows Live SOXE Definitions

Windows Live UX Platform

Windows Live UX Platform Language Pack

Windows Live Writer

Windows Live Writer Resources

Windows Media Player Firefox Plugin

WinRAR

Wireless Keyboard Driver

==== Running Processes ======================

C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

c:\xampp\apache\bin\httpd.exe

C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

C:\xampp\apache\bin\httpd.exe

C:\Program Files (x86)\Sitecom\Wireless High-gain Network Adapter Utility\RtlService.exe

C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe

C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

H:\Sketchbook\SketchBookSnapshot.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

C:\Program Files (x86)\AVG\AVG2012\avgtray.exe

C:\Program Files (x86)\Wireless Keyboard Driver\LedStatusApp.exe

C:\Program Files (x86)\Sitecom\Wireless High-gain Network Adapter Utility\RtWlan.exe

C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe

C:\Program Files (x86)\iTunes\iTunesHelper.exe

C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe

C:\Windows\SysWOW64\DllHost.exe

C:\Program Files (x86)\Internet Explorer\IELowutil.exe

C:\Users\gebruiker\Desktop\zoek.exe

C:\Windows\SysWOW64\cmd.exe

E:\Adobe CS4\Adobe Photoshop CS4\Photoshop.exe

C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

==== System Specs ======================

Windows: Windows 7 Home Premium Edition (64-bit) Service Pack 1 (Build 7601)

Memory (RAM): 4076 MB

CPU Info: Intel® Core i5-2400 CPU @ 3.10GHz

CPU Speed: 3138,2 MHz

Sound Card: Luidsprekers (2- High Definitio |

Digitale audio (S/PDIF) (2- Hig |

Display Adapters: NVIDIA GeForce GT 240 | NVIDIA GeForce GT 240 | RDPDD Chained DD | RDP Encoder Mirror Driver | RDP Reflector Display Driver

Monitors: 2x; Algemeen PnP-beeldscherm | ACER AL1716 |

Screen Resolution: 1920 X 1080 - 32 bit

Network: Network Present

Network Adapters: Intel® 82579V Gigabit Network Connection

CD / DVD Drives: 2x (D: | F: | ) D: Optiarc DVD RW AD-5260S | F: DTSOFT BDROM

Ports: COM Ports NOT Present. LPT Port NOT Present.

Mouse: 5 Button Wheel Mouse Present

Hard Disks: C: 99,9GB | E: 365,8GB | H: 472,5GB | I: 229,5GB | J: 229,5GB

Hard Disks - Free: C: 18,4GB | E: 148,4GB | H: 262,5GB | I: 63,2GB | J: 77,1GB

Manufacturer *: Intel Corp.

BIOS Info: AT/AT COMPATIBLE | 11/15/10 | INTEL - 1072009

Time Zone: West-Europa (standaardtijd)

Motherboard *: Intel Corporation DH67BL

Country: Nederland

Language: NLD

==== System Specs (Software) ======================

Anti-Virus: AVG Anti-Virus Free Edition 2012 On-access scanning disabled (Outdated)

Anti-Spyware: AVG Anti-Virus Free Edition 2012 disabled (Outdated)

Anti-Spyware: Windows Defender disabled (Outdated)

Default Browser: Google Chrome 32.0.1700.107

Internet Explorer Version: 11.0.9600.16476

Mozilla Firefox version: 27.0.1 (x86 nl)

Google Chrome version: 32.0.1700.107

Adobe Reader version: 10.1.3.23

Sun Java version: 1.7.0_05 (32-bit)

Flash Player version: 12.0.0.44

==== Files Recently Created / Modified ======================

====== C:\Windows ====

====== C:\Users\GEBRUI~1\AppData\Local\Temp ====

====== Java Cache =====

====== C:\Windows\SysWOW64 =====

====== C:\Windows\SysWOW64\drivers =====

====== C:\Windows\Sysnative =====

====== C:\Windows\Sysnative\drivers =====

====== C:\Windows\Tasks ======

====== C:\Windows\Temp ======

======= C:\Program Files =====

2014-01-30 13:47:45 -------- d-----w- C:\Program Files\trend micro

======= C:\PROGRA~2 =====

2014-01-19 14:38:19 -------- d-----w- C:\PROGRA~2\SketchUp

======= C: =====

====== C:\Users\gebruiker\AppData\Roaming ======

2014-02-17 11:15:26 -------- d-----w- C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp

2014-02-17 11:15:26 -------- d-----w- C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp

2014-02-17 11:15:26 -------- d-----w- C:\Users\UpdatusUser\AppData\Local\Temp

2014-02-17 11:15:26 -------- d-----w- C:\Users\Mcx1-GEBRUIKER-PC\AppData\Local\Temp

2014-02-17 11:15:26 -------- d-----w- C:\Users\gebruiker\AppData\Local\Temp

2014-02-17 11:15:26 -------- d-----w- C:\Users\Default\AppData\Local\Temp

2014-02-17 11:15:26 -------- d-----w- C:\Users\Default User\AppData\Local\Temp

2014-02-17 11:15:26 -------- d-----w- C:\Users\Administrator\AppData\Local\Temp

2014-02-04 05:21:57 -------- d-----w- C:\Users\gebruiker\AppData\Roaming\FlvtoConverter

2014-02-04 05:21:57 -------- d-----w- C:\Users\gebruiker\AppData\Local\SounddrainDownloader

2014-02-04 05:20:08 -------- d-----w- C:\Users\gebruiker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sounddrain Downloader

2014-02-04 05:19:39 -------- d-----w- C:\Users\gebruiker\AppData\Local\Sounddrain Downloader

====== C:\Users\gebruiker ======

2014-02-04 05:11:15 197C0A765259A1F01E53E513E52E2739 545912 ----a-w- C:\Users\gebruiker\Downloads\SounddrainDownloader.exe

2014-01-19 14:38:24 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SketchUp 2013

2014-01-19 14:38:20 -------- d-----w- C:\ProgramData\SketchUp

====== C: exe-files ==

2014-02-17 12:01:39 338037EFA0E8E8699B2667D57B751574 118896 ----a-w- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice_tmp.exe

2014-02-12 07:24:34 FF3FD6B78A82624C7B319EEA7F7EB8F6 51080 ----atw- C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleUpdateOnDemand.exe

2014-02-12 07:24:33 BA5C08130D2EFBD4E546912646DC4461 847640 ----a-w- C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleUpdateSetup.exe

2014-02-12 07:24:33 6D24CD9918A11CD8AB9AE678CB2CC3C7 51080 ----atw- C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleUpdateBroker.exe

2014-02-12 07:24:23 EA8B5B41163A06FFA8930F5316473035 273800 ----atw- C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler64.exe

2014-02-12 07:24:23 C98ACDE22458C8F46FD0503CB9E2D01F 223112 ----atw- C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler.exe

2014-02-12 07:24:22 506708142BC63DABA64F2D3AD1DCD5BF 116648 ----atw- C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleUpdate.exe

2014-02-12 07:24:20 BA5C08130D2EFBD4E546912646DC4461 847640 ----a-w- C:\Program Files (x86)\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.22.5\GoogleUpdateSetup.exe

=== C: other files ==

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-21-1425546220-2149087120-3192326966-1000\Software\Microsoft\Windows\CurrentVersion\Run]

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

"DivXUpdate"="C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe /CHECKNOW"

"DATAMNGR"="C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\DATAMN~1.EXE"

"SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

"AVG_TRAY"="C:\Program Files (x86)\AVG\AVG2012\avgtray.exe"

"WIRELESS-KB-LED-STATUS"="C:\Program Files (x86)\Wireless Keyboard Driver\LedStatusApp.exe"

"NCUpdateHelper"="C:\Program Files (x86)\NCWest\NCLauncher\NCUpdateHelper.exe"

"QuickTime Task"="C:\Program Files (x86)\QuickTime\QTTask.exe -atboottime"

"APSDaemon"="C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

"iTunesHelper"="C:\Program Files (x86)\iTunes\iTunesHelper.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]

"AppInit_DLLs"="C:\\PROGRA~2\\IMESHA~1\\MediaBar\\Datamngr\\datamngr.dll C:\\PROGRA~2\\IMESHA~1\\MediaBar\\Datamngr\\IEBHO.dll "

==== Startup Registry Disabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\AdobeCS4ServiceManager]

"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="AdobeCS4ServiceManager"

"hkey"="HKLM"

"command"="\"C:\\Program Files (x86)\\Common Files\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe\" -launchedbylogin"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Adobe_ID0ENQBO]

"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="Adobe_ID0ENQBO"

"hkey"="HKLM"

"command"="C:\\PROGRA~2\\COMMON~1\\Adobe\\ADOBEV~1\\Server\\bin\\VERSIO~2.EXE"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\APSDaemon]

"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="APSDaemon"

"hkey"="HKLM"

"command"="\"C:\\Program Files (x86)\\Common Files\\Apple\\Apple Application Support\\APSDaemon.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\DAEMON Tools Lite]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="DAEMON Tools Lite"

"hkey"="HKCU"

"command"="\"C:\\Program Files (x86)\\DAEMON Tools Lite\\DTLite.exe\" -autorun"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\iTunesHelper]

"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="iTunesHelper"

"hkey"="HKLM"

"command"="\"C:\\Program Files (x86)\\iTunes\\iTunesHelper.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\LifeCam]

"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="LifeCam"

"hkey"="HKLM"

"command"="\"C:\\Program Files (x86)\\Microsoft LifeCam\\LifeExp.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\QuickTime Task]

"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="QuickTime Task"

"hkey"="HKLM"

"command"="\"C:\\Program Files (x86)\\QuickTime\\QTTask.exe\" -atboottime"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Skype]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="Skype"

"hkey"="HKCU"

"command"="\"C:\\Program Files (x86)\\Skype\\Phone\\Skype.exe\" /minimized /regrun"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^AutoCAD Startup Accelerator.lnk]

"path"="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\AutoCAD Startup Accelerator.lnk"

"backup"="C:\\Windows\\pss\\AutoCAD Startup Accelerator.lnk.CommonStartup"

"backupExtension"=".CommonStartup"

"command"="C:\\PROGRA~2\\COMMON~1\\AUTODE~1\\ACSTAR~1.EXE "

"item"="AutoCAD Startup Accelerator"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Network Server.lnk]

"path"="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Network Server.lnk"

"backup"="C:\\Windows\\pss\\Network Server.lnk.CommonStartup"

"backupExtension"=".CommonStartup"

"command"="C:\\PROGRA~2\\WIBUKEY\\Server\\WkSvMgr.exe "

"item"="Network Server"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Users^gebruiker^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk]

"path"="C:\\Users\\gebruiker\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Dropbox.lnk"

"backup"="C:\\Windows\\pss\\Dropbox.lnk.Startup"

"backupExtension"=".Startup"

"command"="C:\\Users\\GEBRUI~1\\AppData\\Roaming\\Dropbox\\bin\\Dropbox.exe "

"item"="Dropbox"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Users^gebruiker^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Facebook Messenger.lnk]

"path"="C:\\Users\\gebruiker\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Facebook Messenger.lnk"

"backup"="C:\\Windows\\pss\\Facebook Messenger.lnk.Startup"

"backupExtension"=".Startup"

"command"="C:\\Users\\GEBRUI~1\\AppData\\Local\\Facebook\\MESSEN~1\\214814~1.0\\FACEBO~1.EXE "

"item"="Facebook Messenger"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Users^gebruiker^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.3 .lnk]

"path"="C:\\Users\\gebruiker\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\OpenOffice.org 3.3 .lnk"

"backup"="C:\\Windows\\pss\\OpenOffice.org 3.3 .lnk.Startup"

"backupExtension"=".Startup"

"command"="C:\\PROGRA~2\\OPENOF~1.ORG\\program\\QUICKS~1.EXE "

"item"="OpenOffice.org 3.3 "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\iPod Service]

==== Startup Folders ======================

2012-12-03 16:29:22 1546 ----a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SketchBook Snapshot.lnk

==== Task Scheduler Jobs ======================

C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [05-02-2014 05:46]

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [22-09-2013 14:30]

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [22-09-2013 14:30]

==== Other Scheduled Tasks ======================

"C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe]

"C:\Windows\SysNative\tasks\CreateChoiceProcessTask" [C:\Windows\System32\browserchoice.exe]

"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]

"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]

"C:\Windows\SysNative\tasks\OpenCandyHelperRun" [C:\Windows\system32\rundll32.exe "C:\Users\gebruiker\AppData\Roaming\OpenCandy\C119BC11437D4E298152389DC531554C\OCBrowserHelper_1.0.3.85.dll",_OCRestartDll@16]

"C:\Windows\SysNative\tasks\SidebarExecute" [C:\Program Files\Windows Sidebar\sidebar.exe]

"C:\Windows\SysNative\tasks\User_Feed_Synchronization-{0E3901EF-79D0-4BDF-902E-E2AB5E9CBF61}" [C:\Windows\system32\msfeedssync.exe]

"C:\Windows\SysNative\tasks\{C339D5D6-9E4D-4B35-BD7E-86CBAB53E7B4}" [C:\Program Files (x86)\Skype\\Phone\Skype.exe]

"C:\Windows\SysNative\tasks\{E5170CCB-2673-46B0-A7FE-9941E572A222}" [C:\Users\gebruiker\Downloads\qc1110_x64.exe]

"C:\Windows\SysNative\tasks\Apple\AppleSoftwareUpdate" [C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe]

"C:\Windows\SysNative\tasks\NCH Software\SwitchDowngrade" [C:\Program Files (x86)\NCH Software\Switch\switch.exe]

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]

"{1E73965B-8B48-48be-9C8D-68B920ABC1C4}"="C:\Program Files (x86)\AVG\AVG2012\Firefox4" [31-08-2012 20:46]

==== Firefox Extensions ======================

ProfilePath: C:\Users\GEBRUI~1\AppData\Roaming\Mozilla\Firefox\Profiles\m8kwkdti.default

- Ant Video Downloader - C:\Users\gebruiker\AppData\Roaming\Mozilla\Firefox\Profiles\m8kwkdti.default\extensions\anttoolbar@ant.com

- Ant Video Downloader - %ProfilePath%\extensions\anttoolbar@ant.com

- United States English Spellchecker - %ProfilePath%\extensions\en-US@dictionaries.addons.mozilla.org

- flashget3 Extension - %ProfilePath%\extensions\{DB9127A2-3381-41ec-82B3-1B6ED4C6F29A}

- FDislike - %ProfilePath%\extensions\fbdislike@doweb.fr.xpi

- YouTube to MP3 - %ProfilePath%\extensions\info@video2mp3.at.xpi

- YouTube to MP3 - %ProfilePath%\extensions\youtube2mp3@mondayx.de.xpi

- Youtube to mp3 converter - AudioThief.com - %ProfilePath%\extensions\{B2CEA309-6B58-4B8C-9D0D-6E65D88F6603}.xpi

- Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

AppDir: C:\Program Files (x86)\Mozilla Firefox

- Skype Click to Call - %AppDir%\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

- Undetermined - %AppDir%\extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}

==== Firefox Plugins ======================

Profilepath: C:\Users\gebruiker\AppData\Roaming\Mozilla\Firefox\Profiles\m8kwkdti.default

FD6ACD9D85177259D442A0C4AC15F7B8 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll - Shockwave Flash

3E0EB8CC0526CF152C80628A7EBAD7C3 - C:\Users\gebruiker\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll - Unity Player

2F4781F84C92E8C4B1586E47A78E8A61 - C:\Windows\SysWOW64\npDeployJava1.dll - Java Deployment Toolkit 7.0.50.255

15E298B5EC5B89C5994A59863969D9FF - C:\Windows\SysWOW64\npmproxy.dll - Microsoft® Windows® Operating System

==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions

jmfkcklnlgedgbglfkkgedjfmejoahla - C:\Program Files (x86)\AVG\AVG2012\Chrome\safesearch.crx[21-12-2011 21:09]

nneajnkjbffgblleaoojgaacokifdkhm - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx[12-12-2011 14:13]

Google Docs - gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake

Google Drive - gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf

YouTube - gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo

Last updated at time on date - gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb

Google Search - gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf

AVG Safe Search - gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmfkcklnlgedgbglfkkgedjfmejoahla

Google Wallet - gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda

DivX Plus Web Player HTML5 \u003Cvideo\u003E - gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm

Gmail - gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

==== HijackThis Entries ======================