Nation Zoom zoekmachine die ik niet wil

Heuvel14 · 25 januari 2014

Hallo ,

Ik heb last van een zoekmachine die zich opdringt.

Google heb ik ingesteld als zoekmachine maar deze krijg ik niet meer.

Nation Zoom komt ongewild tevoorschijn floepen en ik krijg deze maar niet verwijderd.

vr. gr. Ingrid

iEscape · 25 januari 2014

@ Ingrid,

Download RSIT van de onderstaande locaties en sla deze op het bureaublad op.

Hier staat een beschrijving hoe je kan kijken of je een 32- of 64-bitversie van Windows heeft.

RSIT 32 bit (RSIT.exe)
RSIT 64 bit (RSITx64.exe)

Dubbelklik op RSIT.exe om de tool te starten.

Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
Vervolgens wordt de "Disclaimer of warranty" getoond, klik vervolgens op "Continue"
Wanneer de tool gereed is wordt er een kladblok bestand genaamd "Log" geopend.
Plaats de inhoud hiervan in het volgende bericht.

Bekijk ook de instructievideo.

Heuvel14 · 25 januari 2014

Logfile of random's system information tool 1.09 (written by random/random)

Run by Eigenaar at 2014-01-25 18:33:21

Microsoft® Windows Vista™ Business Service Pack 2

System drive C: has 19 GB (13%) free of 153 GB

Total RAM: 2037 MB (22% free)

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 18:34:21, on 25-1-2014

Platform: Windows Vista SP2 (WinNT 6.00.1906)

MSIE: Internet Explorer v9.00 (9.00.8112.16526)

Boot mode: Normal

Running processes:

C:\Program Files\Norton PC Checkup\Engine\2.0.17.20\ccSvcHst.exe

C:\Windows\system32\Dwm.exe

C:\Windows\system32\taskeng.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\taskeng.exe

C:\Program Files\iSafe\iSafeTray.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\Program Files\Real\RealPlayer\Update\realsched.exe

C:\Program Files\Samsung\Kies\KiesTrayAgent.exe

C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

C:\Program Files\Windows Media Player\wmpnscfg.exe

C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe

C:\Windows\System32\hkcmd.exe

C:\Windows\System32\igfxpers.exe

C:\Program Files\AVAST Software\Avast\AvastUI.exe

C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\Program Files\Mobogenie\DaemonProcess.exe

C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe

C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe

C:\Program Files\Skype\Phone\Skype.exe

C:\Program Files\Samsung\Kies\Kies.exe

C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe

C:\Program Files\YouTube Accelerator\YouTubeAccelerator.exe

C:\Windows\System32\rundll32.exe

C:\Windows\system32\igfxsrvc.exe

C:\Users\Eigenaar\AppData\Roaming\Dropbox\bin\Dropbox.exe

C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe

C:\Program Files\ControlCenter4\BrCtrlCntr.exe

C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe

C:\Program Files\ControlCenter4\BrCcUxSys.exe

C:\Program Files\Windows Mail\WinMail.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Users\Eigenaar\Downloads\RSIT.exe

C:\Program Files\trend micro\Eigenaar.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Nation Zoom

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Zoeken

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Nation Zoom

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nationzoom.com/web/?type=ds&ts=1387487577&from=ild&uid=WDCXWD1600AAJS-00L7A0_WD-WMAV3913639536395&q={searchTerms}

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.nationzoom.com/web/?type=ds&ts=1387487577&from=ild&uid=WDCXWD1600AAJS-00L7A0_WD-WMAV3913639536395&q={searchTerms}

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Nation Zoom

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.nationzoom.com/web/?type=ds&ts=1387487577&from=ild&uid=WDCXWD1600AAJS-00L7A0_WD-WMAV3913639536395&q={searchTerms}

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.nationzoom.com/web/?type=ds&ts=1387487577&from=ild&uid=WDCXWD1600AAJS-00L7A0_WD-WMAV3913639536395&q={searchTerms}

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O2 - BHO: CrossriderApp0032850 - {11111111-1111-1111-1111-110311281150} - C:\Program Files\Object Browser\Object Browser-bho.dll

O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll

O2 - BHO: RoboForm BHO - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll

O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll

O3 - Toolbar: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)

O3 - Toolbar: avast! EasyPass Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll

O3 - Toolbar: avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe

O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

O4 - HKLM\..\Run: [ControlCenter4] C:\Program Files\ControlCenter4\BrCcBoot.exe /autorun

O4 - HKLM\..\Run: [brStsMon00] C:\Program Files\Browny02\Brother\BrStMonW.exe /AUTORUN

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Real\RealPlayer\Update\realsched.exe" -osboot

O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files\Samsung\Kies\KiesTrayAgent.exe

O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"

O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe

O4 - HKLM\..\Run: [skytel] C:\Program Files\Realtek\Audio\HDA\Skytel.exe

O4 - HKLM\..\Run: [igfxTray] C:\Windows\system32\igfxtray.exe

O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe

O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe

O4 - HKLM\..\Run: [vProt] "C:\Program Files\AVG Nation toolbar\vprot.exe"

O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [Computer Updater] "C:\Program Files\Computer Updater\ComputerUp-dater.Exe" /boot

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [mobilegeni daemon] C:\Program Files\Mobogenie\DaemonProcess.exe

O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"

O4 - HKCU\..\Run: [AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe

O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun

O4 - HKCU\..\Run: [KPeerNexonEU] C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe

O4 - HKCU\..\Run: [COMMUNICATOR] "C:\Program Files\Microsoft Office Communicator\Communicator.exe" /silentRetrials /background

O4 - HKCU\..\Run: [KiesPreload] C:\Program Files\Samsung\Kies\Kies.exe /preload

O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"

O4 - HKCU\..\Run: [GoobzoYouTubeAccelerator] "C:\Program Files\YouTube Accelerator\YouTubeAccelerator.exe" /startup

O4 - HKCU\..\Run: [NextLive] C:\Windows\system32\rundll32.exe "C:\Users\Eigenaar\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l

O4 - Startup: Dropbox.lnk = C:\Users\Eigenaar\AppData\Roaming\Dropbox\bin\Dropbox.exe

O4 - Startup: Mediacontrole Picture Motion Browser.lnk = C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe

O8 - Extra context menu item: avast! EasyPass Werkbalk - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html

O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Formulieren Invullen - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html

O8 - Extra context menu item: Formulieren opslaan - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html

O8 - Extra context menu item: Menu aanpassen - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html

O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra button: Formulier Invullen - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll

O9 - Extra 'Tools' menuitem: Formulieren Invullen - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll

O9 - Extra button: Opslaan - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll

O9 - Extra 'Tools' menuitem: Formulieren opslaan - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll

O9 - Extra button: Show Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll

O9 - Extra 'Tools' menuitem: avast! EasyPass Werkbalk - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - (no file)

O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - (no file)

O10 - Unknown file in Winsock LSP: c:\program files\youtube accelerator\ytalsp.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} - http://verkopen.marktplaats.nl/js/widgets/imageUploader/aurigma/5_7_24_0/ImageUploader5.cab

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{391A2AFB-51A3-482A-98BC-507C53F2C7F9}: NameServer = 192.168.1.1,8.8.8.8

O17 - HKLM\System\CS1\Services\Tcpip\..\{391A2AFB-51A3-482A-98BC-507C53F2C7F9}: NameServer = 192.168.1.1,8.8.8.8

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\17.0.12\ViProtocol.dll

O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

O20 - AppInit_DLLs: C:\PROGRA~1\SearchProtect\SearchProtect\bin\SPVC32Loader.dll

O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe

O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: Search Protect by Conduit Service (CltMngSvc) - Unknown owner - C:\PROGRA~1\SearchProtect\Main\bin\CltMngSvc.exe (file missing)

O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe

O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe

O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: iSafeService - Elex do Brasil Participações Ltda - C:\Program Files\iSafe\iSafeSvc.exe

O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe

O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe

O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe

O23 - Service: Common Client Job Manager Service (PCCUJobMgr) - Symantec Corporation - C:\Program Files\Norton PC Checkup\Engine\2.0.17.20\ccSvcHst.exe

O23 - Service: RealNetworks Downloader Resolver Service - Unknown owner - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe

O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

O23 - Service: vToolbarUpdater17.0.12 - Unknown owner - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\17.0.12\ToolbarUpdater.exe

O23 - Service: WinZiper service (winzipersvc) - Taiwan Shui Mu Chih Ching Technology Limited. - C:\Program Files\WinZipper\winzipersvc.exe

O23 - Service: Wpm Service (Wpm) - Cherished Technololgy LIMITED - C:\ProgramData\WPM\wprotectmanager.exe

O23 - Service: YouTubeAcceleratorService - GOOBZO - C:\PROGRA~1\YOUTUB~1\YouTubeAcceleratorService.exe

--

End of file - 15399 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

C:\Windows\tasks\Object Browser-chromeinstaller.job

C:\Windows\tasks\Object Browser-codedownloader.job

C:\Windows\tasks\Object Browser-enabler.job

C:\Windows\tasks\Object Browser-firefoxinstaller.job

C:\Windows\tasks\Object Browser-updater.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311281150}]

Object Browser - C:\Program Files\Object Browser\Object Browser-bho.dll [2013-12-19 644464]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]

RealNetworks Download and Record Plugin for Internet Explorer - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2013-08-14 542376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{724d43a9-0d85-11d4-9908-00400523e39a}]

avast! EasyPass Toolbar Helper - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll [2013-10-14 20622024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]

Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]

Java Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-10-08 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]

avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-01-17 1138536]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

Java Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-10-08 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{95B7759C-8C7F-4BF1-B163-73684A933233}

{724d43a0-0d85-11d4-9908-00400523e39a} - avast! EasyPass Toolbar - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll [2013-10-14 20622024]

{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-01-17 1138536]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2007-03-01 153136]

"AppleSyncNotifier"=C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [2012-02-23 59240]

"APSDaemon"=C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-04-21 59720]

"ControlCenter4"=C:\Program Files\ControlCenter4\BrCcBoot.exe [2012-03-01 143360]

"BrStsMon00"=C:\Program Files\Browny02\Brother\BrStMonW.exe [2011-12-13 2678784]

"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2013-05-01 421888]

"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2013-08-16 152392]

"TkBellExe"=C:\Program Files\Real\RealPlayer\Update\realsched.exe [2013-09-05 295512]

"KiesTrayAgent"=C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [2013-09-04 311152]

"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]

"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2009-03-30 7289376]

"Skytel"=C:\Program Files\Realtek\Audio\HDA\Skytel.exe [2009-03-30 1833504]

"IgfxTray"=C:\Windows\system32\igfxtray.exe [2008-04-03 141848]

"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2008-04-03 166424]

"Persistence"=C:\Windows\system32\igfxpers.exe [2008-04-03 133656]

"vProt"=C:\Program Files\AVG Nation toolbar\vprot.exe []

"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-01-17 3764024]

"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-09-03 958576]

"Computer Updater"=C:\Program Files\Computer Updater\ComputerUp-dater.Exe /boot []

"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]

"mobilegeni daemon"=C:\Program Files\Mobogenie\DaemonProcess.exe [2013-12-10 761024]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-06-01 153136]

"AutoStartNPSAgent"=C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe [2010-07-29 95576]

"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2013-11-14 20584608]

"KPeerNexonEU"=C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe []

"COMMUNICATOR"=C:\Program Files\Microsoft Office Communicator\Communicator.exe [2007-07-23 5803368]

"KiesPreload"=C:\Program Files\Samsung\Kies\Kies.exe [2013-09-04 1564528]

"RoboForm"=C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2013-10-14 100200]

"GoobzoYouTubeAccelerator"=C:\Program Files\YouTube Accelerator\YouTubeAccelerator.exe [2013-12-19 2218856]

"NextLive"=C:\Users\Eigenaar\AppData\Roaming\newnext.me\nengine.dll [2013-11-14 1283584]

C:\Users\Eigenaar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

Dropbox.lnk - C:\Users\Eigenaar\AppData\Roaming\Dropbox\bin\Dropbox.exe

Mediacontrole Picture Motion Browser.lnk - C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"AppInit_DLLs"="C:\PROGRA~1\SearchProtect\SearchProtect\bin\SPVC32Loader.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]

C:\Windows\system32\igfxdev.dll [2008-03-27 204800]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]

"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

"C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe"="C:\Nexon\NEXON_EU_Downloader\NEXON_EU_Downloader_Engine.exe:*:Enabled:NEXON_EU_Downloader_Engine.exe"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]

"vidc.mrle"=msrle32.dll

"vidc.msvc"=msvidc32.dll

"msacm.imaadpcm"=imaadp32.acm

"msacm.msg711"=msg711.acm

"msacm.msgsm610"=msgsm32.acm

"msacm.msadpcm"=msadp32.acm

"midimapper"=midimap.dll

"wavemapper"=msacm32.drv

"vidc.uyvy"=msyuv.dll

"vidc.yuy2"=msyuv.dll

"vidc.yvyu"=msyuv.dll

"vidc.iyuv"=iyuv_32.dll

"vidc.i420"=iyuv_32.dll

"vidc.yvu9"=tsbyuv.dll

"msacm.l3acm"=C:\Windows\System32\l3codeca.acm

"vidc.cvid"=iccvid.dll

"msacm.siren"=sirenacm.dll

"VIDC.IV41"=ir41_32.dll

"wave"=wdmaud.drv

"midi"=wdmaud.drv

"mixer"=wdmaud.drv

"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2014-01-25 18:33:21 ----D---- C:\rsit

2014-01-21 15:26:59 ----D---- C:\Program Files\Common Files\Steam

2014-01-21 15:26:50 ----D---- C:\Program Files\Steam

2014-01-16 10:23:21 ----D---- C:\Windows\system32\SearchProtect

2014-01-14 17:01:13 ----D---- C:\ProgramData\Sony

2014-01-14 16:55:00 ----D---- C:\Users\Eigenaar\AppData\Roaming\Sony

2014-01-14 08:20:13 ----A---- C:\Windows\ntbtlog.txt

2014-01-01 17:23:44 ----D---- C:\Program Files\Transformice

2014-01-01 17:23:40 ----D---- C:\Program Files\Common Files\Adobe AIR

======List of files/folders modified in the last 1 month======

2014-01-25 18:34:21 ----D---- C:\Program Files\trend micro

2014-01-25 18:33:23 ----D---- C:\Users\Eigenaar\AppData\Roaming\Skype

2014-01-25 18:32:56 ----D---- C:\Windows\Temp

2014-01-25 18:04:00 ----D---- C:\Users\Eigenaar\AppData\Roaming\Dropbox

2014-01-25 18:02:25 ----D---- C:\Users\Eigenaar\AppData\Roaming\newnext.me

2014-01-25 18:01:36 ----AD---- C:\ProgramData\TEMP

2014-01-25 18:01:31 ----D---- C:\Windows\system32\Tasks

2014-01-25 18:01:09 ----D---- C:\Program Files\iSafe

2014-01-25 18:00:11 ----D---- C:\Program Files\WinZipper

2014-01-24 17:43:08 ----RD---- C:\Program Files

2014-01-24 17:42:42 ----SHD---- C:\System Volume Information

2014-01-24 17:29:06 ----D---- C:\Program Files\Wajam

2014-01-24 11:26:38 ----D---- C:\Users\Eigenaar\AppData\Roaming\SkypEmoticons

2014-01-24 10:47:08 ----D---- C:\Program Files\DCE

2014-01-24 09:58:51 ----D---- C:\Program Files\ShopperPro

2014-01-23 22:12:08 ----D---- C:\Windows\Prefetch

2014-01-22 21:33:11 ----D---- C:\Windows\System32

2014-01-22 21:33:11 ----A---- C:\Windows\system32\PerfStringBackup.INI

2014-01-22 21:33:10 ----D---- C:\Windows\inf

2014-01-22 09:47:39 ----A---- C:\Windows\system32\FlashPlayerApp.exe

2014-01-21 15:51:00 ----SHD---- C:\Windows\Installer

2014-01-21 15:50:59 ----D---- C:\Config.Msi

2014-01-21 15:26:59 ----D---- C:\Program Files\Common Files

2014-01-20 16:13:40 ----D---- C:\Windows\system32\catroot2

2014-01-20 13:20:53 ----D---- C:\Users\Eigenaar\AppData\Roaming\iSafe

2014-01-19 17:38:19 ----D---- C:\Windows\Tasks

2014-01-17 15:56:58 ----D---- C:\Windows\system32\drivers

2014-01-17 15:56:58 ----D---- C:\Windows

2014-01-17 15:55:41 ----A---- C:\Windows\system32\aswBoot.exe

2014-01-16 10:34:39 ----D---- C:\ProgramData\Microsoft Help

2014-01-16 10:28:15 ----D---- C:\Windows\system32\MRT

2014-01-16 10:28:05 ----A---- C:\Windows\system32\mrt.exe

2014-01-16 10:23:56 ----D---- C:\Program Files\SearchProtect

2014-01-14 17:01:13 ----D---- C:\ProgramData

2014-01-14 17:01:13 ----D---- C:\Program Files\Sony

2014-01-13 12:20:39 ----D---- C:\Windows\system32\spool

2014-01-01 17:23:49 ----D---- C:\ProgramData\Adobe

2014-01-01 17:23:41 ----D---- C:\Program Files\Adobe

2014-01-01 17:23:33 ----D---- C:\Users\Eigenaar\AppData\Roaming\Adobe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2013-10-19 49944]

R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-01-17 180248]

R0 PxHelp20;PxHelp20; C:\Windows\system32\Drivers\PxHelp20.sys [2006-11-02 36624]

R1 AsIO;AsIO; C:\Windows\system32\drivers\AsIO.sys [2007-12-17 12400]

R1 aswKbd;aswKbd; \??\C:\Windows\system32\drivers\aswKbd.sys [2013-12-01 26136]

R1 AswRdr;aswRdr; \??\C:\Windows\system32\drivers\aswRdr.sys [2014-01-17 54832]

R1 aswSnx;aswSnx; \??\C:\Windows\system32\drivers\aswSnx.sys [2014-01-17 775952]

R1 aswSP;aswSP; \??\C:\Windows\system32\drivers\aswSP.sys [2014-01-17 410528]

R1 aswTdi;aswTdi; \??\C:\Windows\system32\drivers\aswTdi.sys [2014-01-17 57672]

R1 avgtp;avgtp; \??\C:\Windows\system32\drivers\avgtpx86.sys [2013-10-10 37664]

R1 iSafeNetFilter;iSafeNetFilter; \??\C:\Program Files\iSafe\iSafeNetFilter.sys [2013-12-30 54784]

R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2014-01-17 67824]

R2 RtNdPt60;Realtek NDIS Protocol Driver; C:\Windows\system32\DRIVERS\RtNdPt60.sys [2007-12-11 27648]

R3 FsUsbExDisk;FsUsbExDisk; \??\C:\Windows\system32\FsUsbExDisk.SYS [2010-06-14 36608]

R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 26840]

R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 26176]

R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2008-03-27 2307072]

R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2009-03-30 2350624]

R3 iSafeKrnl;iSafeKrnl; \??\C:\Program Files\iSafe\iSafeKrnl.sys [2013-12-30 192000]

R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2006-10-19 7680]

R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2009-05-05 163328]

R3 StillCam;Stuurprogramma voor seriële digitale fotocamera; C:\Windows\system32\DRIVERS\serscan.sys [2008-01-18 9216]

R3 TEAM;Realtek Virtual Miniport Driver for Teaming (NDIS 6.0); C:\Windows\system32\DRIVERS\RtTeam60.sys [2008-10-24 35328]

R3 WudfPf;@%SystemRoot%\system32\drivers\Wudfpf.sys,-1000; C:\Windows\system32\drivers\WudfPf.sys [2012-07-26 66560]

S3 aswTap;avast! SecureLine TAP Adapter v3; C:\Windows\system32\DRIVERS\aswTap.sys [2013-10-19 35272]

S3 catchme;catchme; \??\C:\Users\Eigenaar\AppData\Local\Temp\catchme.sys []

S3 drmkaud;Microsoft Kernel DRM-audiodecoder; C:\Windows\system32\drivers\drmkaud.sys [2008-01-18 5632]

S3 EagleXNt;EagleXNt; C:\Windows\system32\drivers\EagleXNt.sys []

S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-09-22 39272]

S3 grmnusb;grmnusb; C:\Windows\system32\drivers\grmnusb.sys [2012-04-18 15720]

S3 HdAudAddService;Microsoft 1.1 UAA Functiestuurprogramma voor High Definition Audio-service; C:\Windows\system32\drivers\HdAudio.sys [2009-04-10 236544]

S3 htcnprot;HTC NDIS Protocol Driver; C:\Windows\system32\DRIVERS\htcnprot.sys [2012-12-07 23040]

S3 MSKSSRV;Microsoft Streaming Service-proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-18 8192]

S3 MSPCLOCK;Microsoft Streaming Clock-proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-18 5888]

S3 MSPQM;Microsoft Streaming Kwaliteitsbeheer Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-18 5504]

S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink-conversieprogramma; C:\Windows\system32\drivers\MSTEE.sys [2008-01-18 6016]

S3 RTTEAMPT;Realtek Teaming Protocol Driver (NDIS 6.0); C:\Windows\system32\DRIVERS\RtTeam60.sys [2008-10-24 35328]

S3 RTVLANPT;Realtek Vlan Protocol Driver (NDIS 6.0); C:\Windows\system32\DRIVERS\RtVlan60.sys [2007-12-03 19968]

S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\ssadbus.sys [2013-06-21 136904]

S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\Windows\system32\DRIVERS\ssadmdfl.sys [2013-06-21 17864]

S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\Windows\system32\DRIVERS\ssadmdm.sys [2013-06-21 153672]

S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\sscdbus.sys [2013-06-21 136776]

S3 sscdmdfl;SAMSUNG Mobile Modem Filter; C:\Windows\system32\DRIVERS\sscdmdfl.sys [2013-06-21 17864]

S3 sscdmdm;SAMSUNG Mobile Modem Drivers; C:\Windows\system32\DRIVERS\sscdmdm.sys [2013-06-21 153672]

S3 sscdserd;SAMSUNG Mobile Modem Diagnostic Serial Port (WDM); C:\Windows\system32\DRIVERS\sscdserd.sys [2013-06-21 130248]

S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2012-12-13 45056]

S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]

S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2012-07-26 155136]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-09-03 65640]

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2012-12-21 57008]

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-01-17 50344]

R2 Bonjour Service;Bonjour-service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 390504]

R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-18 21504]

R2 FsUsbExService;FsUsbExService; C:\Windows\system32\FsUsbExService.Exe [2010-07-04 238952]

R2 iSafeService;iSafeService; C:\Program Files\iSafe\iSafeSvc.exe [2013-12-30 491688]

R2 PassThru Service;Internet Pass-Through Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [2012-12-07 167424]

R2 PCCUJobMgr;Common Client Job Manager Service; C:\Program Files\Norton PC Checkup\Engine\2.0.17.20\ccSvcHst.exe [2011-11-07 126392]

R2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [2013-08-14 39056]

R2 vToolbarUpdater17.0.12;vToolbarUpdater17.0.12; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\17.0.12\ToolbarUpdater.exe [2013-10-10 1733448]

R2 winzipersvc;WinZiper service; C:\Program Files\WinZipper\winzipersvc.exe [2013-12-24 424104]

R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 1710464]

R2 Wpm;Wpm Service; C:\ProgramData\WPM\wprotectmanager.exe [2013-12-19 499856]

R2 YouTubeAcceleratorService;YouTubeAcceleratorService; C:\PROGRA~1\YOUTUB~1\YouTubeAcceleratorService.exe [2013-12-19 1502056]

R3 iPod Service;iPod-service; C:\Program Files\iPod\bin\iPodService.exe [2013-08-16 553288]

R3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-06-01 271920]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

S2 CltMngSvc;Search Protect by Conduit Service; C:\PROGRA~1\SearchProtect\Main\bin\CltMngSvc.exe []

S2 gupdate;Google Updateservice (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-10-13 136176]

S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-09-05 171680]

S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-22 257928]

S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2010-09-22 1493352]

S3 gupdatem;Google Update-service (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-10-13 136176]

S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]

S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]

S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-04-13 792112]

S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]

S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2014-01-07 569768]

S3 WPFFontCache_v0400;@c:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-07-20 754856]

-----------------EOF-----------------

iEscape · 25 januari 2014

@ Ingrid,

Van zodra 1 van de experts online is zal deze je zeker verder helpen aangaande je vraag/probleem.

kape · 25 januari 2014

Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe (hier en hier) kan je lezen hoe je dat doet.

Download Zoek.exe naar het bureaublad (niet de .zip- of .rar-versie)

Wanneer Internet Explorer of een andere browser of virusscanner melding geeft dat dit bestand onveilig zou zijn kun je negeren, dit is namelijk een onterechte waarschuwing.
Dubbelklik op Zoek.exe om de tool te starten.
Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
Kopieer nu onderstaande code en plak die in het grote invulvenster:
Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.

  {11111111-1111-1111-1111-110311281150};c
 C:\Program Files\Object Browser;fs
 {95B7759C-8C7F-4BF1-B163-73684A933233};c
 mobilegeni daemon;s
 C:\Program Files\Mobogenie;fs
 NextLive;s
 C:\Users\Eigenaar\AppData\Roaming\newnext.me;fs
 {DFB852A3-47F8-48C4-A200-58CAB36FD2A2};c
 CltMngSvc;s
 iSafeService;s
 C:\Windows\tasks\Object Browser-chromeinstaller.job;f
 C:\Windows\tasks\Object Browser-codedownloader.job;f
 C:\Windows\tasks\Object Browser-enabler.job;f
 C:\Windows\tasks\Object Browser-firefoxinstaller.job;f
 C:\Windows\tasks\Object Browser-updater.job;f
 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311281150}];r
 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}];r
 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run];r
 "mobilegeni daemon"=-;r
 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run];r
 "NextLive"=-;r
 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows];r
 "AppInit_DLLs"=-;r
 C:\Windows\system32\SearchProtect;fs
 C:\Program Files\iSafe;fs
 C:\Program Files\ShopperPro;fs
 C:\Users\Eigenaar\AppData\Roaming\iSafe;fs
 C:\Program Files\SearchProtect;fs
 emptyfolderscheck;delete 
startupall; 
filesrcm;

Klik op de knop "Options" en vink nu de onderstaande opties aan.
Do a Quick Scan
Auto Clean
De optie "Scan All Users" staat standaard aangevinkt.
Klik nu op de knop "Run script".
Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
Mocht er geen logje verschijnen, start zoek.exe dan opnieuw en klik op de knop zoek-results.log, de log verschijnt dan alsnog.
Post het geopende logje in het volgende bericht.

Heuvel14 · 25 januari 2014

Zoek.exe v5.0.0.0 Updated 25-Januari-2014

Tool run by Eigenaar on za 25-01-2014 at 19:12:08,09.

Microsoft® Windows Vista™ Business 6.0.6002 Service Pack 2 x86

Running in: Normal Mode Internet Access Detected

Launched: C:\Users\Eigenaar\Downloads\zoek (2).exe [scan all users] [script inserted]

===== Runcheck 19:12:34,31 =====

--- Create Environment Variables 19:12:34,96

--- Create System Restore Point 19:12:55,88

Ik weet niet of ik het wel helemaal goed gedaan heb ?

- - - Updated - - -

Zoek.exe v5.0.0.0 Updated 25-Januari-2014

Tool run by Eigenaar on za 25-01-2014 at 19:12:08,09.

Microsoft® Windows Vista™ Business 6.0.6002 Service Pack 2 x86

Running in: Normal Mode Internet Access Detected

Launched: C:\Users\Eigenaar\Downloads\zoek (2).exe [scan all users] [script inserted]

===== Runcheck 19:12:34,31 =====

--- Create Environment Variables 19:12:34,96

--- Create System Restore Point 19:12:55,88

--- Checking Input 19:13:25,84

--- Empty Folders Check 19:14:32,05

--- Del by CLSID 19:14:33,00

--- Delete Services 19:15:29,56

--- Registry Fix 19:15:51,95

--- Delete files\folders 19:15:51,98

--- Create Backups 19:15:52,08

kape · 25 januari 2014

Dit is een overzicht van de taken die zoek.exe aan het uitvoeren is, maar nog niet het volledige programma. Indien het afgewerkt is, zou je een logje moeten vinden in je C-partitie met de naam zoek-results.log. Het kan een tijdje duren vóór dit log compleet is. Indien het klaar is, mag je het hier in een volgende bericht hangen.

Heuvel14 · 25 januari 2014

Zoek.exe v5.0.0.0 Updated 25-Januari-2014

Tool run by Eigenaar on za 25-01-2014 at 19:12:08,09.

Microsoft® Windows Vista™ Business 6.0.6002 Service Pack 2 x86

Running in: Normal Mode Internet Access Detected

Launched: C:\Users\Eigenaar\Downloads\zoek (2).exe [scan all users] [script inserted]

==== System Restore Info ======================

25-1-2014 19:13:24 Zoek.exe System Restore Point Created Succesfully.

==== Empty Folders Check ======================

C:\Program Files\AmbraSoft deleted successfully

C:\Program Files\BearShare Applications deleted successfully

C:\Program Files\MSXML 4.0 deleted successfully

C:\Program Files\Oracle deleted successfully

C:\Program Files\SecretSauce deleted successfully

C:\Program Files\Uniblue deleted successfully

C:\Program Files\Zylom Games deleted successfully

C:\Program Files\Common Files\SWF Studio deleted successfully

C:\ProgramData\Driver Tool deleted successfully

C:\ProgramData\Malwarebytes' Anti-Malware (portable) deleted successfully

C:\ProgramData\Spybot - Search & Destroy deleted successfully

C:\Users\Eigenaar\AppData\Roaming\BitTorrent deleted successfully

C:\Users\Eigenaar\AppData\Roaming\Desk 365 deleted successfully

C:\Users\Eigenaar\AppData\Roaming\WinRAR deleted successfully

C:\Users\Eigenaar\AppData\Local\LogMeIn Hamachi deleted successfully

C:\Users\Eigenaar\AppData\Local\Object Browser deleted successfully

C:\Users\Eigenaar\AppData\Local\Wajam deleted successfully

C:\Users\Ingrid\AppData\Local\VirtualStore deleted successfully

C:\Users\Jeremy\AppData\Local\Object Browser deleted successfully

C:\Users\Jeremy\AppData\Local\SpookyManor deleted successfully

C:\Users\Jeremy\AppData\Local\{54F2F48C-5EA7-4852-9E2E-E14490AD208E} deleted successfully

C:\Users\Jeremy\AppData\Local\{66487B18-3B80-4F84-807B-850C47993996} deleted successfully

C:\Users\Jeremy\AppData\Local\{7FD4A3D4-99D4-43A9-94FF-4BB25A8B5797} deleted successfully

C:\Users\Noah Jaira\AppData\Local\Object Browser deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-2310077886-2185433429-3398584410-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110311281150} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{11111111-1111-1111-1111-110311281150} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311281150} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{DFB852A3-47F8-48C4-A200-58CAB36FD2A2} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully

==== Deleting Services ======================

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CltMngSvc deleted successfully

==== Registry Fix Code ======================

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311281150}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"mobilegeni daemon"=-

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"NextLive"=-

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"AppInit_DLLs"=-

==== Deleting Files \ Folders ======================

C:\Program Files\Object Browser deleted

C:\Users\Eigenaar\AppData\Roaming\newnext.me deleted

C:\Windows\system32\SearchProtect deleted

C:\Program Files\ShopperPro deleted

C:\Users\Eigenaar\AppData\Roaming\iSafe deleted

C:\Program Files\SearchProtect deleted

C:\Windows\system32\appdata deleted

"C:\Windows\tasks\Object Browser-chromeinstaller.job" deleted

"C:\Windows\tasks\Object Browser-codedownloader.job" deleted

"C:\Windows\tasks\Object Browser-enabler.job" deleted

"C:\Windows\tasks\Object Browser-firefoxinstaller.job" deleted

"C:\Windows\tasks\Object Browser-updater.job" deleted

"C:\Program Files\Mobogenie\DaemonProcess.exe" deleted

"C:\Program Files\Mobogenie\libeay32.dll" deleted

"C:\Program Files\Mobogenie\msvcp100.dll" deleted

"C:\Program Files\Mobogenie\msvcr100.dll" deleted

"C:\Program Files\Mobogenie\QtCore4.dll" deleted

"C:\Program Files\Mobogenie\QtGui4.dll" deleted

"C:\Program Files\Mobogenie\QtNetwork4.dll" deleted

"C:\Program Files\Mobogenie\QtSql4.dll" deleted

"C:\Program Files\Mobogenie\QtWebKit4.dll" deleted

"C:\Program Files\Mobogenie\ssleay32.dll" deleted

"C:\Program Files\iSafe\bugreport.exe" not deleted

"C:\Program Files\iSafe\dup.exe" not deleted

"C:\Program Files\iSafe\IC.dll" not deleted

"C:\Program Files\iSafe\iCommu.dll" not deleted

"C:\Program Files\iSafe\iCore.dll" not deleted

"C:\Program Files\iSafe\iPluginDetector.dll" not deleted

"C:\Program Files\iSafe\iSafe.exe" not deleted

"C:\Program Files\iSafe\iSafeEngine.dll" not deleted

"C:\Program Files\iSafe\iSafeKrnl.sys" not deleted

"C:\Program Files\iSafe\iSafeKrnlCall.dll" not deleted

"C:\Program Files\iSafe\iSafeKrnlCall64.dll" not deleted

"C:\Program Files\iSafe\iSafeNetFilter.sys" not deleted

"C:\Program Files\iSafe\iSafeScan.exe" not deleted

"C:\Program Files\iSafe\iSafeSvc.exe" not deleted

"C:\Program Files\iSafe\iSafeSvc2.exe" not deleted

"C:\Program Files\iSafe\iSafeTray.exe" not deleted

"C:\Program Files\iSafe\iSafeUpdate.exe" not deleted

"C:\Program Files\iSafe\iStart.exe" not deleted

"C:\Program Files\iSafe\libpng.dll" not deleted

"C:\Program Files\iSafe\main" not deleted

"C:\Program Files\iSafe\msvcp110.dll" not deleted

"C:\Program Files\iSafe\msvcr110.dll" not deleted

"C:\Program Files\iSafe\ouilibx.dll" not deleted

"C:\Program Files\iSafe\sqlite3.dll" not deleted

"C:\Program Files\iSafe\TrayDownloader.exe" not deleted

"C:\Program Files\iSafe\uninstall.exe" not deleted

"C:\Program Files\iSafe\uninstall.inst" not deleted

"C:\Program Files\iSafe\cfg\config.dat" not deleted

"C:\Program Files\iSafe\cfg\customscan.dat" not deleted

"C:\Program Files\iSafe\cfg\fullscan.dat" not deleted

"C:\Program Files\iSafe\cfg\isafe.dat" not deleted

"C:\Program Files\iSafe\cfg\iSafeUpdate.ini" not deleted

"C:\Program Files\iSafe\cfg\ors.dat" not deleted

"C:\Program Files\iSafe\cfg\quickscan.dat" not deleted

"C:\Program Files\iSafe\data\bas.dat" not deleted

"C:\Program Files\iSafe\data\bts.dat" not deleted

"C:\Program Files\iSafe\data\eas.dat" not deleted

"C:\Program Files\iSafe\data\ess.dat" not deleted

"C:\Program Files\iSafe\data\nlu.dat" not deleted

"C:\Program Files\iSafe\data\rms.dat" not deleted

"C:\Program Files\iSafe\data\sta.dat" not deleted

"C:\Program Files\iSafe\data\was.dat" not deleted

"C:\Program Files\iSafe\font\segoeui.ttf" not deleted

"C:\Program Files\iSafe\font\segoeuib.ttf" not deleted

"C:\Program Files\iSafe\lang\lang.xml" not deleted

"C:\Program Files\iSafe\lang\startup_lang.xml" not deleted

"C:\Program Files\iSafe\log\iSafeKrnlCall.log" not deleted

"C:\Program Files\iSafe\log\iSafeSvc.LOG" not deleted

"C:\Program Files\iSafe\log\iSafeSvc2.LOG" not deleted

"C:\Program Files\iSafe\log\iSafeSvc2_1a7df0ec-3337-4d57-b441-1dee19934574.dmp" not deleted

"C:\Program Files\iSafe\log\iSafeSvc2_ffa5d7b0-4872-43ec-97cc-4e18dde576ff.dmp" not deleted

"C:\Program Files\iSafe\tws\antirk.dll" not deleted

"C:\Program Files\iSafe\tws\common.ini" not deleted

"C:\Program Files\iSafe\tws\ctools.dll" not deleted

"C:\Program Files\iSafe\tws\decexp.dll" not deleted

"C:\Program Files\iSafe\tws\emlib.dll" not deleted

"C:\Program Files\iSafe\tws\falgorit.dll" not deleted

"C:\Program Files\iSafe\tws\fddsdb.dat" not deleted

"C:\Program Files\iSafe\tws\fgui.dll" not deleted

"C:\Program Files\iSafe\tws\filau.dll" not deleted

"C:\Program Files\iSafe\tws\filcmn.dll" not deleted

"C:\Program Files\iSafe\tws\filcpt.dll" not deleted

"C:\Program Files\iSafe\tws\filppi.dll" not deleted

"C:\Program Files\iSafe\tws\filpps.ini" not deleted

"C:\Program Files\iSafe\tws\filup.dat" not deleted

"C:\Program Files\iSafe\tws\filup.ini" not deleted

"C:\Program Files\iSafe\tws\filvss.dll" not deleted

"C:\Program Files\iSafe\tws\filvss.ini" not deleted

"C:\Program Files\iSafe\tws\fsrexc.dat" not deleted

"C:\Program Files\iSafe\tws\fupd.dll" not deleted

"C:\Program Files\iSafe\tws\leave.dat" not deleted

"C:\Program Files\iSafe\tws\lsf.dll" not deleted

"C:\Program Files\iSafe\tws\mca.dll" not deleted

"C:\Program Files\iSafe\tws\message.dll" not deleted

"C:\Program Files\iSafe\tws\plugmgr.dll" not deleted

"C:\Program Files\iSafe\tws\psmgr.dll" not deleted

"C:\Program Files\iSafe\tws\quarantine.dll" not deleted

"C:\Program Files\iSafe\tws\tsc.dll" not deleted

"C:\Program Files\iSafe\tws\twsdk.dll" not deleted

"C:\Program Files\iSafe\tws\twsupd.dll" not deleted

"C:\Program Files\iSafe\tws\twsupd.ini" not deleted

"C:\Program Files\iSafe\tws\unacev2.dll" not deleted

"C:\Program Files\iSafe\tws\unchm.dll" not deleted

"C:\Program Files\iSafe\tws\unemb.dll" not deleted

"C:\Program Files\iSafe\tws\unmisc.dll" not deleted

"C:\Program Files\iSafe\tws\unrar.dll" not deleted

"C:\Program Files\iSafe\tws\unsevzip.dll" not deleted

"C:\Program Files\iSafe\tws\unzip32.dll" not deleted

"C:\Program Files\iSafe\tws\vfst.dll" not deleted

"C:\Program Files\iSafe\tws\w32tools.dll" not deleted

"C:\Program Files\iSafe\tws\zipexp.dll" not deleted

"C:\Program Files\iSafe\tws\zlib1.dll" not deleted

"C:\Program Files\iSafe\user\sie.dat" not deleted

"C:\Program Files\iSafe\skin2\style\style_new.xml" not deleted

"C:\Program Files\iSafe\skin2\image\new\about_bg.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\about_update.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\activity.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\activity_bk.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\app_icon.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\arrowdown-green.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\arrowdown-jadegreen.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\arrowup-orange.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\arrowup-yellow.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\arrow_down.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\arrow_up.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\BG.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\bing_16_16.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\block_more.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\boost_btn_bk.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\boost_computer.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\boost_icon_blue.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\boost_icon_gray.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\boottime_bk.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\boot_time_arrow.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\boot_time_icon.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\boot_time_nodata.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\boot_time_scanning.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\boot_time_tip_blue.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\boot_time_tip_orange.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\boot_time_tip_red.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\browser_icon_list.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\browser_protect_bk.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\btnbg_35.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\btn_close.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\btn_close_about.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\btn_min.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\btn_set.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\button-small.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\button_icon.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\cfgclose.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\check_checked.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\check_indeterminate.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\check_uncheck.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\chrome_16.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\cleanscanresultdlg_bg.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\clean_icon_blue.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\clean_icon_gray.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\clean_ok.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\clean_reg_icon.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\clean_waiting.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\clear_list.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\clear_tip.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\cm_iconlist.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\combo_browser.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\combo_browser_dropdown_bk.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\combo_skin.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\combo_skin2.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\combo_skin3.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\common_button_bk.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\defaultbrowser_handler.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\defaultsearch_handler.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\disable_startup.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\donate.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\edit_skin.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\edit_skin_op.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\exam_%.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\exam_animate_bk.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\exam_arrow.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\exam_btn.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\exam_icon.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\exam_icon_list.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\exam_left.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\exam_logo.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\exam_num.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\exam_option_ok.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\exam_option_ok_green.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\exam_option_ok_point.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\exam_tree_ boost.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\exam_tree_collapse.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\exam_tree_collapse_green.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\exam_tree_collapse_red.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\exam_tree_error.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\exam_tree_expand.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\exam_tree_expand_green.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\exam_tree_expand_red.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\exam_tree_protect.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\exam_tree_rubbish.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\exam_tree_warning.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\exit.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\fast-scan.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\firefox_16.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\flow_used.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\google_16_16.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\head_checked.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\head_indeteminate.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\head_unchecked.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\homepage_handler.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\hover_bk_large.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\hover_bk_small.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\icon_complete_36.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\icon_deep_clean.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\icon_exam.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\icon_netmon.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\icon_optimize.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\icon_plugin.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\icon_protect.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\icon_quick_clean.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\icon_setting.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\icon_softmgr.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\icon_virusscan.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\icon_warning_36.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\ie_16_16.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\IE_default.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\if_block.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\if_prompt.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\if_question.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\if_warning.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\inst_bg1.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\inst_close_btn.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\inst_cover_bg.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\inst_inst_btn.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\inst_wheel.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\interception_bk.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\intercept_delete.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\intercept_history_iconlist.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\isafe_16.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\language_btn_bk.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\like.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\like_count.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\line1.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\line2.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\listctrlbtn.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\listitem_bk.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\listtabbg.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\listtitlebg.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\list_header.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\list_setting.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\lock_state_list.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\menubg.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\menu_bkg.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\menu_bkg2.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\menu_item_over.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\menu_setting_over.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\msgbox_bk.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\nation_icon_list.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\netbutton.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\netbutton_icon.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\netbutton_left.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\netbutton_right.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\network_protect_lock.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\network_protect_uncheck.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\network_protect_unlock.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\new_abovebg.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\num_blue.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\num_green.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\num_pink.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\one_click_startup.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\one_key_cookie.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\one_key_reg.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\one_key_rubbish.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\one_key_trace.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\online_shopping.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\open_folder.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\opera_16.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\p2cBtn.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\percent_green.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\pic-error.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\pic-info.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\pic-question.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\pic-warning.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\plugin.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\plugin_handler.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\plugin_normal.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\plugin_security_level.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\plugin_should_delete.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\plugin_should_disable.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\pop_arrow.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\pop_arrow_fail.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\pop_block.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\pop_block_btn.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\pop_block_mbtn.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\pop_clean.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\pop_icon.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\pop_mon_highrisk.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\pop_mon_prompt.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\pop_mon_warning.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\pop_ok.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\pop_startup_clock.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\pop_startup_fast.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\pop_startup_normal.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\pop_startup_safe.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\pop_startup_slow.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\pop_startup_unsafe.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\pop_sys_button2.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\pop_sys_close.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\pop_sys_number.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\pop_sys_star.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\pop_title.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\pop_unkownweb.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\pop_warning.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\progressbar_anim.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\progressbar_bk.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\progressbar_image.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\progress_end.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\progress_end_bk.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\progress_header.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\progress_header_bk.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\progress_middle.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\progress_middle_bk.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\protect_icon_blue.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\protect_icon_gray.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\pvb_line.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\pvb_skin.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\quick_clean_icon_list.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\radio_checked.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\radio_unchecked.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\resource.xml" not deleted

"C:\Program Files\iSafe\skin2\image\new\revert_bk.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\revert_cancel.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\revert_ok.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\revocation.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\risk.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\scancheck.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\scan_animate.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\scan_complete.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\scan_scanning.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\scan_warning.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\score_bg0.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\score_bg1.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\score_bg2.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\score_bg3.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\score_bg4.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\score_bg5.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\score_number.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\search_engine_icon_list.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\separateline.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\setting_bg.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\setting_img_list.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\shortcut.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\shortcut_handler.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\softmgr_dlg_bk.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\softmgr_result_dlg_bk.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\softremain_icon_list.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\software_mgr.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\soft_rating_bk.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\soft_rating_indicator.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\soft_remove_button_bk.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\soft_remove_gray.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\soft_remove_green.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\soft_remove_orange.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\soft_remove_red.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\soft_uninst_icon_20.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\soft_uninst_icon_32.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\srfe.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\startup_acclate.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\startup_handler.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\startup_hasitem_handler.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\startup_off.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\startup_on.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\stopwatch.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\submenu_arrow.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\sub_toggle_btn.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\suspended_bg.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\suspenditembk.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\suspend_close.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\switch_button_off.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\switch_button_on.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\sys_boost.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\sys_imglist.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\sys_key_svc.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\sys_menu.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\s_deepclean.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\s_plugin.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\s_quickclean.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\s_registry.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\s_rubbish.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\s_sysopt.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\s_trace.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\tab_bg.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\tab_iconlist.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\tab_separator.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\tab_vert_line.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\tip_scanning_bk.gif" not deleted

"C:\Program Files\iSafe\skin2\image\new\tobutton1.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\toggletbar_bg.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\traymenu_bk.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\traymenu_btn_bk.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\treeitem_collapse.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\treeitem_expand.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\treeitem_line.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\treeitem_line_half.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\uninst_bg_fadeout.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\uninst_body.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\uninst_btn_bg.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\uninst_btn_bg1.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\uninst_btn_bg2.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\uninst_btn_choice.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\uninst_invest_logo.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\uninst_logo_fadeout.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\uninst_ok.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\uninst_pic_compatible.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\uninst_pic_speedup.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\uninst_pic_uninstall.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\uninst_step_arrow.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\unlocked_icon_16.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\unlocked_icon_32.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\update.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\v9_16_16.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\VirScan_btn_bg.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\virscan_tips_ico.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\virscan_warning_ico.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\virus_custom_scan.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\virus_delete_btn.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\virus_full_scan.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\virus_quick_scan.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\virus_restore_btn.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\virus_setting_icon.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\vscroll.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\YAC_16.png" not deleted

"C:\Program Files\iSafe\skin2\image\new\yahoo_16_16.png" not deleted

"C:\Program Files\iSafe\skin2\layout\new\aboutdlg.xml" not deleted

"C:\Program Files\iSafe\skin2\layout\new\boottimedlg.xml" not deleted

"C:\Program Files\iSafe\skin2\layout\new\CleanScanResultDlg.xml" not deleted

"C:\Program Files\iSafe\skin2\layout\new\cover.xml" not deleted

"C:\Program Files\iSafe\skin2\layout\new\disable_warnings.xml" not deleted

"C:\Program Files\iSafe\skin2\layout\new\install.xml" not deleted

"C:\Program Files\iSafe\skin2\layout\new\language_select.xml" not deleted

"C:\Program Files\iSafe\skin2\layout\new\maindlg.xml" not deleted

"C:\Program Files\iSafe\skin2\layout\new\msgbox.xml" not deleted

"C:\Program Files\iSafe\skin2\layout\new\revertdlg.xml" not deleted

"C:\Program Files\iSafe\skin2\layout\new\softmgr_guide.xml" not deleted

"C:\Program Files\iSafe\skin2\layout\new\softmgr_result.xml" not deleted

"C:\Program Files\iSafe\skin2\layout\new\suspended.xml" not deleted

"C:\Program Files\iSafe\skin2\layout\new\suspendinfo.xml" not deleted

"C:\Program Files\iSafe\skin2\layout\new\suspend_interception.xml" not deleted

"C:\Program Files\iSafe\skin2\layout\new\traydlg.xml" not deleted

"C:\Program Files\iSafe\skin2\layout\new\traymenudlg.xml" not deleted

"C:\Program Files\iSafe\skin2\layout\new\uninstall.xml" not deleted

"C:\Program Files\iSafe\skin2\layout\new\uninstall2.xml" not deleted

"C:\Program Files\iSafe\skin2\layout\new\uninstall_animation.xml" not deleted

"C:\Program Files\iSafe\skin2\layout\new\uninstall_logo_fade.xml" not deleted

"C:\Program Files\iSafe\skin2\layout\new\upgrade.xml" not deleted

"C:\Program Files\iSafe\skin2\layout\new\VirusScannerDlg.xml" not deleted

"C:\Program Files\iSafe\skin2\layout\new\virusscan_customdlg.xml" not deleted

"C:\Program Files\iSafe\skin2\layout\new\virusscan_settingdlg.xml" not deleted

"C:\Program Files\iSafe\skin2\layout\new\pop\blockblacklist.xml" not deleted

"C:\Program Files\iSafe\skin2\layout\new\pop\blockmodify.xml" not deleted

"C:\Program Files\iSafe\skin2\layout\new\pop\cleartrash.xml" not deleted

"C:\Program Files\iSafe\skin2\layout\new\pop\install_plugin.xml" not deleted

"C:\Program Files\iSafe\skin2\layout\new\pop\lock_guide.xml" not deleted

"C:\Program Files\iSafe\skin2\layout\new\pop\modifydefaultsearch.xml" not deleted

"C:\Program Files\iSafe\skin2\layout\new\pop\modifystartup.xml" not deleted

"C:\Program Files\iSafe\skin2\layout\new\pop\querymodify.xml" not deleted

"C:\Program Files\iSafe\skin2\layout\new\pop\shortcut.xml" not deleted

"C:\Program Files\iSafe\skin2\layout\new\pop\startup_assist.xml" not deleted

"C:\Program Files\iSafe\skin2\layout\new\pop\updatedb.xml" not deleted

"C:\Program Files\iSafe\tws\defs\base0000.dat" not deleted

"C:\Program Files\iSafe\tws\defs\base0001.dat" not deleted

"C:\Program Files\iSafe\tws\defs\catalog.dat" not deleted

"C:\Program Files\iSafe\tws\plugins\filavutd.dll" not deleted

"C:\Program Files\iSafe\tws\plugins\virut.tpl" not deleted

"C:\Program Files\iSafe\tws\quarantine\catalog.dat" not deleted

"C:\Program Files\iSafe\tws\x64\psmgr.dll" not deleted

"C:\Program Files\Mobogenie" deleted

"C:\Program Files\iSafe" not deleted

"C:\Program Files\iSafe\cfg" not deleted

"C:\Program Files\iSafe\data" not deleted

"C:\Program Files\iSafe\font" not deleted

"C:\Program Files\iSafe\lang" not deleted

"C:\Program Files\iSafe\log" not deleted

"C:\Program Files\iSafe\skin2" not deleted

"C:\Program Files\iSafe\tws" not deleted

"C:\Program Files\iSafe\user" not deleted

"C:\Program Files\iSafe\skin2\image" not deleted

"C:\Program Files\iSafe\skin2\layout" not deleted

"C:\Program Files\iSafe\skin2\style" not deleted

"C:\Program Files\iSafe\skin2\image\new" not deleted

"C:\Program Files\iSafe\skin2\layout\new" not deleted

"C:\Program Files\iSafe\skin2\layout\new\pop" not deleted

"C:\Program Files\iSafe\tws\defs" not deleted

"C:\Program Files\iSafe\tws\logs" not deleted

"C:\Program Files\iSafe\tws\plugins" not deleted

"C:\Program Files\iSafe\tws\quarantine" not deleted

"C:\Program Files\iSafe\tws\task" not deleted

"C:\Program Files\iSafe\tws\temp" not deleted

"C:\Program Files\iSafe\tws\trace" not deleted

"C:\Program Files\iSafe\tws\x64" not deleted

==== Files Recently Created / Modified ======================

====== C:\Windows ====

====== C:\Users\Eigenaar\AppData\Local\Temp ====

2014-01-25 17:01:16 C53BF888CD33856165353C73D877D654 246272 ----a-w- C:\Users\Eigenaar\AppData\Local\Temp\afgytdrp_951134_setup.exe

2014-01-25 14:24:32 C53BF888CD33856165353C73D877D654 246272 ----a-w- C:\Users\Eigenaar\AppData\Local\Temp\afgytdrp_443263_setup.exe

2014-01-24 14:55:48 C53BF888CD33856165353C73D877D654 246272 ----a-w- C:\Users\Eigenaar\AppData\Local\Temp\afgytdrp_348714_setup.exe

2014-01-22 08:38:48 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Users\Eigenaar\AppData\Local\Temp\ShopperProFull.exe

2014-01-19 16:37:45 EB583B1C73560FD4912838721E0099AE 351744 ----a-w- C:\Users\Jeremy\AppData\Local\Temp\AI_EXTUI_BIN_7660\ResourceCleaner.dll

2014-01-19 16:37:45 A41C99336FF4A09A601A858ED808F5CB 9880 ----a-w- C:\Users\Jeremy\AppData\Local\Temp\AI_EXTUI_BIN_7660\viewer.exe

2014-01-19 16:37:45 9ABD8F0A0C03A2794B599C8F82C9EE60 294400 ----a-w- C:\Users\Jeremy\AppData\Local\Temp\AI_EXTUI_BIN_7660\Prereq.dll

2014-01-19 16:37:45 8B81E44843E040D453367B14DC6BFF5F 80896 ----a-w- C:\Users\Jeremy\AppData\Local\Temp\AI_EXTUI_BIN_7660\aicustact.dll

2014-01-19 16:37:45 0BF1AF3127CC2838FAE174DE53B590ED 69632 ----a-w- C:\Users\Jeremy\AppData\Local\Temp\AI_EXTUI_BIN_7660\DataUploader.dll

2014-01-19 16:37:45 09FAF8048CE436C66543C283860A3C83 278016 ----a-w- C:\Users\Jeremy\AppData\Local\Temp\AI_EXTUI_BIN_7660\aipackagechainer.exe

====== Java Cache =====

====== C:\Windows\system32 =====

====== C:\Windows\system32\drivers =====

====== C:\Windows\Tasks ======

2014-01-22 08:34:14 C4B5771E9C14CD5B200A3BFB2E85FD55 3340 ----a-w- C:\Windows\system32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2310077886-2185433429-3398584410-1000

====== C:\Windows\Temp ======

======= C:\Program Files =====

2014-01-21 14:26:59 -------- d-----w- C:\Program Files\Common Files\Steam

2014-01-21 14:26:50 -------- d-----w- C:\Program Files\Steam

2014-01-01 16:23:44 -------- d-----w- C:\Program Files\Transformice

2014-01-01 16:23:40 -------- d-----w- C:\Program Files\Common Files\Adobe AIR

======= C: =====

2014-01-24 16:29:29 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\end

====== C:\Users\Eigenaar\AppData\Roaming ======

2014-01-22 20:30:38 -------- d-----w- C:\Users\Jeremy\AppData\Roaming\Dropbox

2014-01-21 14:39:26 -------- d-----w- C:\Users\Jeremy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2014-01-19 16:38:01 -------- d-----w- C:\Users\Jeremy\AppData\Roaming\Graboid Inc

2014-01-14 16:01:13 -------- d-----w- C:\Users\Eigenaar\AppData\Local\Sony

2014-01-14 15:55:00 -------- d-----w- C:\Users\Eigenaar\AppData\Roaming\Sony

2014-01-09 12:07:53 -------- d-----w- C:\Users\Noah Jaira\AppData\Roaming\isafe

2014-01-09 12:07:24 -------- d-----w- C:\Users\Noah Jaira\AppData\Local\SearchProtect

2014-01-05 14:30:19 -------- d-----w- C:\Users\Jeremy\AppData\Roaming\WinZipper

2014-01-01 16:23:53 -------- d-----w- C:\Users\Jeremy\AppData\Roaming\Transformice

2013-12-31 11:26:07 -------- d-----w- C:\Users\Jeremy\AppData\Roaming\isafe

====== C:\Users\Eigenaar ======

2014-01-25 17:32:33 69CA82A7482A00D8EE063D2B97FC4338 781383 ----a-w- C:\Users\Eigenaar\Downloads\RSIT.exe

2014-01-24 16:48:17 683FDD3D773C58B262DC07CD0C6CE938 10285040 ----a-w- C:\Users\Eigenaar\Downloads\mbam-setup-1.75.0.1300.exe

2014-01-21 14:26:51 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam

2014-01-19 16:37:13 C4454C28263FD643149827C2DCA6FF59 1564784 ----a-w- C:\Users\Jeremy\Downloads\GraboidVideoInstaller-5.0.2.0.exe

2014-01-14 16:05:52 D369CCC33E244BD6647DA952EA81A78C 213170336 ----a-w- C:\Users\Eigenaar\Desktop\vegaspro11-0-700_32bit[1].exe

2014-01-14 16:02:19 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony

2014-01-14 16:01:13 -------- d-----w- C:\ProgramData\Sony

2014-01-14 15:52:02 D369CCC33E244BD6647DA952EA81A78C 213170336 ----a-w- C:\Users\Eigenaar\Desktop\vegaspro11-0-700_32bit.exe

2014-01-14 15:47:34 FBC8C7E6F47AFE83274FB893D90ABFE6 401752 ----a-w- C:\Users\Jeremy\Downloads\SoftonicDownloader_voor_sony-vegas.exe

2014-01-09 12:12:23 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Users\Noah Jaira\daemonprocess.txt

2013-12-31 11:28:39 33B10BAEDA36961C13A2C5ECF38B3FB7 4662 ----a-w- C:\Users\Jeremy\daemonprocess.txt

====== C: exe-files ==

2014-01-25 17:33:25 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\Eigenaar.exe

2014-01-25 17:32:33 69CA82A7482A00D8EE063D2B97FC4338 781383 ----a-w- C:\Users\Eigenaar\Downloads\RSIT.exe

2014-01-25 17:01:16 C53BF888CD33856165353C73D877D654 246272 ----a-w- C:\Users\Eigenaar\AppData\Local\Temp\afgytdrp_951134_setup.exe

2014-01-25 14:24:32 C53BF888CD33856165353C73D877D654 246272 ----a-w- C:\Users\Eigenaar\AppData\Local\Temp\afgytdrp_443263_setup.exe

2014-01-25 13:12:26 FAC28881D89144D72B55B11FEB579E1F 4843544 ----a-w- C:\Windows\Temp\{7CA9D85C-9B9A-46A4-A22F-4B7E93BC96DB}.exe

2014-01-24 16:48:17 683FDD3D773C58B262DC07CD0C6CE938 10285040 ----a-w- C:\Users\Eigenaar\Downloads\mbam-setup-1.75.0.1300.exe

2014-01-24 16:37:59 B500E391DD2DFA6809BCC7F56EE70F1D 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-2310077886-2185433429-3398584410-1000\$IYC609I.exe

2014-01-24 16:29:22 CA9F34D3C05D91371F3D11F49350C179 471928 ----a-w- C:\Program Files\Wajam\Updater\update.exe

2014-01-24 16:29:06 11DE1638CCC2A78E6A41D8366D24E96D 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-2310077886-2185433429-3398584410-1000\$I03UR6R.exe

2014-01-24 16:29:06 09A3C44C868258F17B4319F60D068959 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-2310077886-2185433429-3398584410-1000\$IRKJWRY.exe

2014-01-24 14:55:48 C53BF888CD33856165353C73D877D654 246272 ----a-w- C:\Users\Eigenaar\AppData\Local\Temp\afgytdrp_348714_setup.exe

2014-01-22 08:38:48 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Users\Eigenaar\AppData\Local\Temp\ShopperProFull.exe

2014-01-21 14:39:24 CEDE02D7AF62449A2C38C49ABECC0CD3 4995416 ----a-w- C:\Program Files\Steam\SteamApps\common\Dungeonland\redist\vcredist_x86.exe

2014-01-21 14:39:24 C395044C2774DBD05A624E3202D1D35B 9152512 ----a-w- C:\Program Files\Steam\SteamApps\common\Dungeonland\dungeonland.exe

2014-01-21 14:27:32 D693C232F8CCD62735C649F023EA0CF2 1348944 ----a-w- C:\Program Files\Steam\SteamTmp.exe

2014-01-21 14:26:59 C3D855CC0A8E5E373FDFCF4F743C5C9D 569768 ----a-w- C:\Program Files\Common Files\Steam\SteamService.exe

2014-01-19 16:38:01 D1025208F3B4205FBAD3E5952E3E14C0 38233440 ----a-w- C:\Users\Jeremy\AppData\Roaming\Graboid Inc\Graboid Video\prerequisites\RequiredApplication\GraboidVideoSetup-5.0.2.0.exe

2014-01-19 16:37:45 A41C99336FF4A09A601A858ED808F5CB 9880 ----a-w- C:\Users\Jeremy\AppData\Local\temp\AI_EXTUI_BIN_7660\viewer.exe

2014-01-19 16:37:45 09FAF8048CE436C66543C283860A3C83 278016 ----a-w- C:\Users\Jeremy\AppData\Local\temp\AI_EXTUI_BIN_7660\aipackagechainer.exe

2014-01-19 16:37:13 C4454C28263FD643149827C2DCA6FF59 1564784 ----a-w- C:\Users\Jeremy\Downloads\GraboidVideoInstaller-5.0.2.0.exe

=== C: other files ==

2014-01-22 16:28:21 7E4D9C9DE500D065B4D8A5E609FD87F2 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-2310077886-2185433429-3398584410-1000\$IJREFYQ.zip

2014-01-22 16:24:59 9C680BF7AEE2815A97B67D9BFBE6923B 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-2310077886-2185433429-3398584410-1003\$IQL44B4.zip

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-21-2310077886-2185433429-3398584410-1000\Software\Microsoft\Windows\CurrentVersion\Run]

"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"

"AutoStartNPSAgent"="C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe"

"Skype"="C:\Program Files\Skype\Phone\Skype.exe /minimized /regrun"

"KPeerNexonEU"="C:\Nexon\NEXON_EU_Downloader\nxEULauncher.exe"

"COMMUNICATOR"="C:\Program Files\Microsoft Office Communicator\Communicator.exe /silentRetrials /background"

"KiesPreload"="C:\Program Files\Samsung\Kies\Kies.exe /preload"

"RoboForm"="C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"

"GoobzoYouTubeAccelerator"="C:\Program Files\YouTube Accelerator\YouTubeAccelerator.exe /startup"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe"

"AppleSyncNotifier"="C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe"

"APSDaemon"="C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

"ControlCenter4"="C:\Program Files\ControlCenter4\BrCcBoot.exe /autorun"

"BrStsMon00"="C:\Program Files\Browny02\Brother\BrStMonW.exe /AUTORUN"

"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe -atboottime"

"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe"

"TkBellExe"="C:\Program Files\Real\RealPlayer\Update\realsched.exe -osboot"

"KiesTrayAgent"="C:\Program Files\Samsung\Kies\KiesTrayAgent.exe"

"GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"

"RtHDVCpl"="C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe"

"Skytel"="C:\Program Files\Realtek\Audio\HDA\Skytel.exe"

"IgfxTray"="C:\Windows\system32\igfxtray.exe"

"HotKeysCmds"="C:\Windows\system32\hkcmd.exe"

"Persistence"="C:\Windows\system32\igfxpers.exe"

"vProt"="C:\Program Files\AVG Nation toolbar\vprot.exe"

"AvastUI.exe"="C:\Program Files\AVAST Software\Avast\AvastUI.exe /nogui"

"Adobe ARM"="C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

"Computer Updater"="C:\Program Files\Computer Updater\ComputerUp-dater.Exe /boot"

"SunJavaUpdateSched"="C:\Program Files\Common Files\Java\Java Update\jusched.exe"