Trage computer met meerdere vastlopers in programma's

Polr · 8 februari 2014

Mijn computer (Compaq) start heel langzaam op. Ik heb meerdere problemen, zoals:

- niet kunnen doorlinken vanuit mails in Outlook en Gmail;

- verwijderen software lukt niet omdat eerst alle Google-chrome vensters gesloten moeten worden. Ik zie geen geopende vensters;

- ik krijg meldingen dat google chrome mijn internetbrowser niet meer ondersteunt wegens een verouderde versie;

- ook het verwijderen van Google Chrome en de Ask-toolbar lukt niet a.g.v. het tweede aandachtsstreepje

Ik heb het idee dat Google Chrome de veroorzaker is van mijn problemen. Ook zou ik graag het opstarten willen versnellen. Kunt u mij hierbij helpen?

Polr

iEscape · 8 februari 2014

@ Poir,

op PCH!.

Om uit te sluiten dat malware - virus de oorzaak van de problemen is, voer onderstaande uit:

Download RSIT van de onderstaande locaties en sla deze op het bureaublad op.

Hier staat een beschrijving hoe je kan kijken of je een 32- of 64-bitversie van Windows heeft.

RSIT 32 bit (RSIT.exe)
RSIT 64 bit (RSITx64.exe)

Dubbelklik op RSIT.exe om de tool te starten.

Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
Vervolgens wordt de "Disclaimer of warranty" getoond, klik vervolgens op "Continue"
Wanneer de tool gereed is wordt er een kladblok bestand genaamd "Log" geopend.
Plaats de inhoud hiervan in het volgende bericht.

Bekijk ook de instructievideo.

Polr · 8 februari 2014

Beste iEscape en andere leden,

Hierbij het log dat ik volgens de bovenstaande instructies heb laten aanmaken door RSIT32:

Logfile of random's system information tool 1.09 (written by random/random)

Run by Rijk en Ineke at 2014-02-08 18:02:57

Microsoft® Windows Vista™ Home Premium Service Pack 2

System drive C: has 84 GB (28%) free of 298 GB

Total RAM: 2039 MB (51% free)

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 18:03:48, on 8-2-2014

Platform: Windows Vista SP2 (WinNT 6.00.1906)

MSIE: Internet Explorer v9.00 (9.00.8112.16526)

Boot mode: Normal

Running processes:

C:\Windows\system32\taskeng.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\taskeng.exe

C:\Program Files\Windows Media Player\wmpnscfg.exe

C:\Windows\System32\hkcmd.exe

C:\Windows\System32\igfxpers.exe

C:\Windows\RtHDVCpl.exe

C:\Windows\WindowsMobile\wmdSync.exe

C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe

C:\Program Files\AVG\AVG2012\avgtray.exe

C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zbrmon.exe

C:\Program Files\AVG Secure Search\vprot.exe

C:\Program Files\MapsGalaxy_39\bar\1.bin\39brmon.exe

C:\Program Files\Real\RealPlayer\Update\realsched.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Windows\ehome\ehtray.exe

C:\Users\Rijk en Ineke\AppData\Roaming\Dropbox\bin\Dropbox.exe

C:\Windows\system32\schtasks.exe

C:\Windows\ehome\ehmsas.exe

C:\Program Files\CCleaner\CCleaner.exe

C:\Windows\system32\wbem\unsecapp.exe

C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe

C:\Program Files\Marktplaats Zoekassistent\Marktplaats.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Program Files\windows defender\MSASCui.exe

C:\Windows\system32\igfxsrvc.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Windows\system32\Macromed\Flash\FlashUtil32_12_0_0_44_ActiveX.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Users\Rijk en Ineke\Desktop\RSIT.exe

C:\Program Files\trend micro\Rijk en Ineke.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.nl/?gfe_rd=cr&ei=F-G6Uv2KEcmP8gPtx4DwCA

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MyHeritage.com Search

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - (no file)

R3 - URLSearchHook: (no name) - {93a3111f-4f74-4ed8-895e-d9708497629e} - C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zSrcAs.dll

R3 - URLSearchHook: (no name) - {26842a09-ffa8-4e2c-ae12-0c80f01c3295} - C:\Program Files\MapsGalaxy_39\bar\1.bin\39SrcAs.dll

O1 - Hosts: ::1 localhost

O2 - BHO: HP Print Clips - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll

O2 - BHO: MHTBPos00 - {0C37B053-FD68-456a-82E1-D788EE342E6F} - C:\Program Files\Family Toolbar\tbu09631\tbcore3.dll

O2 - BHO: Toolbar BHO - {1e91a655-bb4b-4693-a05e-2edebc4c9d89} - C:\PROGRA~1\MAPSGA~2\bar\1.bin\39bar.dll

O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll

O2 - BHO: Toolbar BHO - {312f84fb-8970-4fd3-bddb-7012eac4afc9} - C:\PROGRA~1\VIDEOD~2\bar\1.bin\4zbar.dll

O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG2012\avgssie.dll

O2 - BHO: Search Assistant BHO - {71c1d63a-c944-428a-a5bd-ba513190e5d2} - C:\Program Files\MapsGalaxy_39\bar\1.bin\39SrcAs.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll

O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\17.3.0.49\AVG Secure Search_toolbar.dll

O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL

O2 - BHO: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files\Delta\delta\1.8.21.5\bh\delta.dll

O2 - BHO: Search Assistant BHO - {c547c6c2-561b-4169-a2a5-20ba771ca93b} - C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zSrcAs.dll

O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll

O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)

O3 - Toolbar: Family Toolbar - {FD2FD708-1F6F-4B68-B141-C5778F0C19BB} - C:\Program Files\Family Toolbar\tbu09631\tbcore3.dll

O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\17.3.0.49\AVG Secure Search_toolbar.dll

O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)

O3 - Toolbar: VideoDownloadConverter - {48586425-6bb7-4f51-8dc6-38c88e3ebb58} - C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zbar.dll

O3 - Toolbar: MapsGalaxy - {364ea597-e728-4ce4-bb4a-ed846ef47970} - C:\Program Files\MapsGalaxy_39\bar\1.bin\39bar.dll

O3 - Toolbar: Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files\Delta\delta\1.8.21.5\deltaTlbr.dll

O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide

O4 - HKLM\..\Run: [igfxTray] C:\Windows\system32\igfxtray.exe

O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe

O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe

O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe

O4 - HKLM\..\Run: [sunJavaUpdateReg] "C:\Windows\system32\jureg.exe"

O4 - HKLM\..\Run: [Windows Mobile-based device management] %windir%\WindowsMobile\wmdSync.exe

O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" /hide

O4 - HKLM\..\Run: [bCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices

O4 - HKLM\..\Run: [AVG_TRAY] "C:\Program Files\AVG\AVG2012\avgtray.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [VideoDownloadConverter Search Scope Monitor] "C:\PROGRA~1\VIDEOD~2\bar\1.bin\4zsrchmn.exe" /m=2 /w /h

O4 - HKLM\..\Run: [VideoDownloadConverter_4z Browser Plugin Loader] C:\PROGRA~1\VIDEOD~2\bar\1.bin\4zbrmon.exe

O4 - HKLM\..\Run: [vProt] "C:\Program Files\AVG Secure Search\vprot.exe"

O4 - HKLM\..\Run: [MapsGalaxy Search Scope Monitor] "C:\PROGRA~1\MAPSGA~2\bar\1.bin\39srchmn.exe" /m=2 /w /h

O4 - HKLM\..\Run: [MapsGalaxy_39 Browser Plugin Loader] C:\PROGRA~1\MAPSGA~2\bar\1.bin\39brmon.exe

O4 - HKLM\..\Run: [TkBellExe] "c:\program files\real\realplayer\Update\realsched.exe" -osboot

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe

O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe

O4 - HKCU\..\Run: [MobileDocuments] C:\Program Files\Common Files\Apple\Internet Services\ubd.exe

O4 - HKCU\..\Run: [Google Update] "C:\Users\Rijk en Ineke\AppData\Local\Google\Update\GoogleUpdate.exe" /c

O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe

O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')

O4 - Startup: Dropbox.lnk = Rijk en Ineke\AppData\Roaming\Dropbox\bin\Dropbox.exe

O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200

O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll

O9 - Extra button: HP Clipboek - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll

O9 - Extra button: HP Slim selecteren - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll

O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{9DA6A4E2-141E-42CD-B831-956198C3693F}: NameServer = 8.8.8.8

O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll

O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\17.3.0\ViProtocol.dll

O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe

O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\avgwdsvc.exe

O23 - Service: Google Updateservice (gupdate1cad9a219324c18) (gupdate1cad9a219324c18) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe

O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe

O23 - Service: MapsGalaxyService (MapsGalaxy_39Service) - COMPANYVERS_NAME - C:\PROGRA~1\MAPSGA~2\bar\1.bin\39barsvc.exe

O23 - Service: RealNetworks Downloader Resolver Service - Unknown owner - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe

O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

O23 - Service: VideoDownloadConverterService (VideoDownloadConverter_4zService) - COMPANYVERS_NAME - C:\PROGRA~1\VIDEOD~2\bar\1.bin\4zbarsvc.exe

O23 - Service: vToolbarUpdater17.3.0 - Unknown owner - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\ToolbarUpdater.exe

--

End of file - 12815 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job

C:\Windows\tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2940832217-195839467-2300631566-1000Core.job

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2940832217-195839467-2300631566-1000UA.job

C:\Windows\tasks\Norton Internet Security - Volledige systeemscan uitvoeren - Rijk en Ineke.job

C:\Windows\tasks\Norton Security Scan for Rijk en Ineke.job

C:\Windows\tasks\RegClean Pro_DEFAULT.job

C:\Windows\tasks\RegClean Pro_UPDATES.job

C:\Windows\tasks\RegistryBooster.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{053F9267-DC04-4294-A72C-58F732D338C0}]

HP Print Clips - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll [2007-03-02 177768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0C37B053-FD68-456a-82E1-D788EE342E6F}]

MHTBPos00 Class - C:\Program Files\Family Toolbar\tbu09631\tbcore3.dll [2009-05-07 2642432]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1e91a655-bb4b-4693-a05e-2edebc4c9d89}]

Toolbar BHO - C:\PROGRA~1\MAPSGA~2\bar\1.bin\39bar.dll [2013-02-04 707728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]

RealNetworks Download and Record Plugin for Internet Explorer - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2013-08-14 542376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{312f84fb-8970-4fd3-bddb-7012eac4afc9}]

Toolbar BHO - C:\PROGRA~1\VIDEOD~2\bar\1.bin\4zbar.dll [2013-01-08 707728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]

AVG Safe Search - C:\Program Files\AVG\AVG2012\avgssie.dll [2012-10-15 1417336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{71c1d63a-c944-428a-a5bd-ba513190e5d2}]

Search Assistant BHO - C:\Program Files\MapsGalaxy_39\bar\1.bin\39SrcAs.dll [2013-02-04 62864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]

Groove GFS Browser Helper - C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [2013-03-08 4171464]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]

Java Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-12-18 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]

AVG Security Toolbar - C:\Program Files\AVG Secure Search\17.3.0.49\AVG Secure Search_toolbar.dll [2014-01-09 3349528]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]

Office Document Cache Handler - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}]

delta Helper Object - C:\Program Files\Delta\delta\1.8.21.5\bh\delta.dll [2013-05-20 295832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c547c6c2-561b-4169-a2a5-20ba771ca93b}]

Search Assistant BHO - C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zSrcAs.dll [2013-01-08 62864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]

Ask Toolbar

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

Java Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-12-18 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{CCC7A320-B3CA-4199-B1A6-9F516DD69829}

{FD2FD708-1F6F-4B68-B141-C5778F0C19BB} - Family Toolbar - C:\Program Files\Family Toolbar\tbu09631\tbcore3.dll [2009-05-07 2642432]

{95B7759C-8C7F-4BF1-B163-73684A933233} - AVG Security Toolbar - C:\Program Files\AVG Secure Search\17.3.0.49\AVG Secure Search_toolbar.dll [2014-01-09 3349528]

{D4027C7F-154A-4066-A1AD-4243D8127440} -

{48586425-6bb7-4f51-8dc6-38c88e3ebb58} - VideoDownloadConverter - C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zbar.dll [2013-01-08 707728]

{364ea597-e728-4ce4-bb4a-ed846ef47970} - MapsGalaxy - C:\Program Files\MapsGalaxy_39\bar\1.bin\39bar.dll [2013-02-04 707728]

{82E1477C-B154-48D3-9891-33D83C26BCD3} - Delta Toolbar - C:\Program Files\Delta\delta\1.8.21.5\deltaTlbr.dll [2013-05-20 284056]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]

"IgfxTray"=C:\Windows\system32\igfxtray.exe [2007-05-29 142104]

"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2007-05-29 154392]

"Persistence"=C:\Windows\system32\igfxpers.exe [2007-05-29 138008]

"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-01-15 4874240]

"SunJavaUpdateReg"=C:\Windows\system32\jureg.exe [2007-04-07 54936]

"Windows Mobile-based device management"=C:\Windows\WindowsMobile\wmdSync.exe [2006-11-02 215552]

"LogitechQuickCamRibbon"=C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe [2009-10-14 2793304]

"BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2010-03-13 91520]

"AVG_TRAY"=C:\Program Files\AVG\AVG2012\avgtray.exe [2012-11-19 2598520]

"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]

"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2013-11-02 152392]

"APSDaemon"=C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-04-21 59720]

"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2013-05-01 421888]

"VideoDownloadConverter Search Scope Monitor"=C:\PROGRA~1\VIDEOD~2\bar\1.bin\4zsrchmn.exe [2013-01-08 42536]

"VideoDownloadConverter_4z Browser Plugin Loader"=C:\PROGRA~1\VIDEOD~2\bar\1.bin\4zbrmon.exe [2013-01-08 30096]

"vProt"=C:\Program Files\AVG Secure Search\vprot.exe [2014-02-05 2552856]

"MapsGalaxy Search Scope Monitor"=C:\PROGRA~1\MAPSGA~2\bar\1.bin\39srchmn.exe [2013-02-04 42536]

"MapsGalaxy_39 Browser Plugin Loader"=C:\PROGRA~1\MAPSGA~2\bar\1.bin\39brmon.exe [2013-02-04 30096]

"TkBellExe"=c:\program files\real\realplayer\Update\realsched.exe [2013-10-08 295512]

"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"Launcher"=C:\Windows\SMINST\launcher.exe [2007-04-03 44168]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]

"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952]

"MobileDocuments"=C:\Program Files\Common Files\Apple\Internet Services\ubd.exe [2012-02-23 59240]

"Google Update"=C:\Users\Rijk en Ineke\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-06 116648]

"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-19 202240]

"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner.exe [2014-01-21 4455704]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AppleSyncNotifier]

C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [2011-10-06 59240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]

C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-04-21 59720]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTSyncU.exe]

C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe [2007-05-30 868352]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EEventManager]

C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe [2006-03-17 102400]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Health Check Scheduler]

c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [2007-05-24 71176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]

C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-03-11 49152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpsysdrv]

c:\hp\support\hpsysdrv.exe [2007-04-18 65536]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]

C:\Program Files\iTunes\iTunesHelper.exe [2013-11-02 152392]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KBD]

C:\HP\KBD\KbdStub.EXE [2006-12-08 65536]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel]

C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MyTomTomSA.exe]

C:\Program Files\MyTomTom 3\MyTomTomSA.exe [2011-11-14 435672]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OsdMaestro]

C:\Program Files\Hewlett-Packard\On-Screen OSD Indicator\OSD.exe [2007-02-15 118784]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

C:\Program Files\QuickTime\QTTask.exe [2013-05-01 421888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RegistryBooster]

C:\Program Files\Uniblue\RegistryBooster\launcher.exe delay 20000 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ROC_roc_dec12]

C:\Program Files\AVG Secure Search\ROC_roc_dec12.exe /PROMPT /CMPID=roc_dec12 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TomTomHOME.exe]

C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [2013-07-02 248208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\vProt]

C:\Program Files\AVG Secure Search\vprot.exe [2014-02-05 2552856]

C:\Users\Rijk en Ineke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

Dropbox.lnk - C:\Users\Rijk en Ineke\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]

C:\Windows\system32\igfxdev.dll [2007-05-17 200704]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]

"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL [2013-03-08 4171464]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDriveTypeAutoRun"=157

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

"C:\Program Files\BitTorrent\bittorrent.exe"="C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]

"vidc.mrle"=msrle32.dll

"vidc.msvc"=msvidc32.dll

"msacm.imaadpcm"=imaadp32.acm

"msacm.msg711"=msg711.acm

"msacm.msgsm610"=msgsm32.acm

"msacm.msadpcm"=msadp32.acm

"midimapper"=midimap.dll

"wavemapper"=msacm32.drv

"VIDC.UYVY"=msyuv.dll

"VIDC.YUY2"=msyuv.dll

"VIDC.YVYU"=msyuv.dll

"VIDC.IYUV"=iyuv_32.dll

"vidc.i420"=lvcodec2.dll

"VIDC.YVU9"=tsbyuv.dll

"msacm.l3acm"=C:\Windows\System32\l3codeca.acm

"vidc.cvid"=iccvid.dll

"MSVideo8"=VfWWDM32.dll

"MSVideo"=vfwwdm32.dll

"wave"=wdmaud.drv

"midi"=wdmaud.drv

"mixer"=wdmaud.drv

"aux"=wdmaud.drv

"wave1"=wdmaud.drv

"midi2"=wdmaud.drv

"mixer1"=wdmaud.drv

"aux2"=wdmaud.drv

"wave2"=wdmaud.drv

"midi1"=wdmaud.drv

"mixer2"=wdmaud.drv

"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-02-08 18:02:57 ----D---- C:\rsit

2014-02-08 18:02:57 ----D---- C:\Program Files\trend micro

2014-02-08 14:03:51 ----D---- C:\ProgramData\Oracle

2014-02-08 14:03:06 ----A---- C:\Windows\system32\javaws.exe

2014-02-08 14:02:55 ----A---- C:\Windows\system32\WindowsAccessBridge.dll

2014-02-08 14:02:55 ----A---- C:\Windows\system32\javaw.exe

2014-02-08 14:02:55 ----A---- C:\Windows\system32\java.exe

2014-02-06 11:21:21 ----D---- C:\Program Files\CCleaner

2014-02-03 09:08:20 ----D---- C:\Windows\system32\SearchProtect

2014-02-02 11:03:17 ----D---- C:\Program Files\MyPC Backup

2014-02-02 11:02:35 ----D---- C:\Program Files\Speed Test 127

2014-02-02 11:02:29 ----D---- C:\Users\Rijk en Ineke\AppData\Roaming\PerformerSoft

2014-02-02 11:02:14 ----D---- C:\Program Files\SearchProtect

======List of files/folders modified in the last 1 month======

2014-02-08 18:03:34 ----D---- C:\Windows\Temp

2014-02-08 18:02:57 ----D---- C:\Program Files

2014-02-08 14:03:51 ----HD---- C:\ProgramData

2014-02-08 14:03:27 ----SHD---- C:\Windows\Installer

2014-02-08 14:03:06 ----D---- C:\Windows\System32

2014-02-08 14:02:55 ----D---- C:\Program Files\Java

2014-02-08 13:58:54 ----SHD---- C:\System Volume Information

2014-02-08 13:41:31 ----D---- C:\ProgramData\Google

2014-02-08 13:41:31 ----D---- C:\Program Files\Google

2014-02-08 13:40:08 ----D---- C:\Windows\Prefetch

2014-02-08 13:21:04 ----D---- C:\Windows\system32\wbem

2014-02-08 12:32:35 ----D---- C:\Users\Rijk en Ineke\AppData\Roaming\Dropbox

2014-02-08 12:00:32 ----D---- C:\Users\Rijk en Ineke\AppData\Roaming\Belastingdienst

2014-02-08 10:16:51 ----D---- C:\Windows\system32\drivers\AVG

2014-02-08 10:11:12 ----D---- C:\Windows\system32\Tasks

2014-02-08 10:09:52 ----D---- C:\Windows\SMINST

2014-02-06 15:08:50 ----D---- C:\Windows

2014-02-06 13:33:55 ----D---- C:\Windows\inf

2014-02-06 11:36:10 ----D---- C:\Windows\Panther

2014-02-06 11:36:09 ----D---- C:\Windows\Logs

2014-02-06 11:36:09 ----D---- C:\Windows\Debug

2014-02-05 20:18:02 ----D---- C:\Windows\system32\drivers

2014-02-05 20:04:10 ----D---- C:\Users\Rijk en Ineke\AppData\Roaming\Betcat

2014-02-05 17:37:50 ----D---- C:\Program Files\Common Files\Symantec Shared

2014-02-05 13:46:18 ----A---- C:\Windows\system32\FlashPlayerApp.exe

2014-02-05 13:17:53 ----D---- C:\Program Files\AVG Secure Search

2014-02-05 13:16:06 ----D---- C:\Windows\Tasks

2014-02-05 13:16:06 ----D---- C:\Windows\system32\Msdtc

2014-02-05 13:13:44 ----D---- C:\Windows\system32\config

2014-02-05 13:12:55 ----D---- C:\Windows\system32\spool

2014-02-05 13:12:54 ----D---- C:\Windows\system32\CodeIntegrity

2014-02-05 13:12:54 ----D---- C:\Windows\system32\catroot2

2014-02-05 13:12:40 ----D---- C:\Program Files\Common Files\AVG Secure Search

2014-02-05 13:12:37 ----D---- C:\Windows\registration

2014-02-02 11:04:57 ----D---- C:\Windows\winsxs

2014-01-16 11:21:02 ----A---- C:\Windows\system32\PerfStringBackup.INI

2014-01-16 09:59:46 ----N---- C:\Windows\system32\MpSigStub.exe

2014-01-15 19:52:12 ----D---- C:\Windows\system32\MRT

2014-01-15 19:38:59 ----A---- C:\Windows\system32\mrt.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHX;AVGIDSHX; C:\Windows\system32\DRIVERS\avgidshx.sys [2012-04-19 24896]

R0 Avgrkx86;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx86.sys [2012-01-31 31952]

R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [2008-11-20 43872]

R1 Avgldx86;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx86.sys [2012-11-08 250080]

R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx86.sys [2011-12-23 41040]

R1 Avgtdix;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdix.sys [2013-04-11 302368]

R1 avgtp;avgtp; \??\C:\Windows\system32\drivers\avgtpx86.sys [2013-11-11 37664]

R3 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdriverx.sys [2012-12-10 142176]

R3 AVGIDSFilter;AVGIDSFilter; C:\Windows\system32\DRIVERS\avgidsfilterx.sys [2011-12-23 24144]

R3 AVGIDSShim;AVGIDSShim; C:\Windows\system32\DRIVERS\avgidsshimx.sys [2011-12-23 17232]

R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 26840]

R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2007-05-17 1767936]

R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-01-15 2047576]

R3 LVPr2Mon;Logitech LVPr2Mon Driver; C:\Windows\system32\DRIVERS\LVPr2Mon.sys [2009-10-07 25752]

R3 LVRS;Logitech RightSound Filter Driver; C:\Windows\system32\DRIVERS\lvrs.sys [2009-10-07 266008]

R3 LVUVC;Logitech Webcam 200(UVC); C:\Windows\system32\DRIVERS\lvuvc.sys [2009-10-07 6756632]

R3 Ps2;PS2; C:\Windows\system32\DRIVERS\PS2.sys [2005-12-12 19072]

R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2007-03-05 76288]

R3 usbaudio;Stuurprogramma voor USB-audio (WDM); C:\Windows\system32\drivers\usbaudio.sys [2013-07-12 73344]

R3 WudfPf;@%SystemRoot%\system32\drivers\Wudfpf.sys,-1000; C:\Windows\system32\drivers\WudfPf.sys [2012-07-26 66560]

R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2012-07-26 155136]

S0 BTHidEnum;Bluetooth HID Enumerator; C:\Windows\System32\Drivers\vbtenum.sys []

S0 BTHidMgr;Bluetooth HID Manager Service; C:\Windows\System32\Drivers\BTHidMgr.sys []

S3 BlueletAudio;Bluetooth Audio Service; C:\Windows\system32\DRIVERS\blueletaudio.sys []

S3 BlueletSCOAudio;Bluetooth SCO Audio Service; C:\Windows\system32\DRIVERS\BlueletSCOAudio.sys []

S3 BT;Bluetooth PAN Network Adapter; C:\Windows\system32\DRIVERS\btnetdrv.sys []

S3 Btcsrusb;Bluetooth USB For Bluetooth Service; C:\Windows\System32\Drivers\btcusb.sys []

S3 Dot4;Microsoft IEEE-1284.4-stuurprogramma; C:\Windows\system32\DRIVERS\Dot4.sys [2008-01-19 131584]

S3 Dot4Print;Stuurprogramma voor printerklasse voor IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2008-01-19 16384]

S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2008-01-19 36864]

S3 drmkaud;Microsoft Kernel DRM-audiodecoder; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]

S3 HdAudAddService;Microsoft 1.1 UAA Functiestuurprogramma voor High Definition Audio-service; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]

S3 ialm;ialm; C:\Windows\system32\DRIVERS\igdkmd32.sys [2007-05-17 1767936]

S3 lvpopflt;Logitech POP Suppression Filter; C:\Windows\system32\DRIVERS\lvpopflt.sys [2009-10-07 114712]

S3 MSKSSRV;Microsoft Streaming Service-proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]

S3 MSPCLOCK;Microsoft Streaming Clock-proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]

S3 MSPQM;Microsoft Streaming Kwaliteitsbeheer Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]

S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink-conversieprogramma; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]

S3 nmwcd;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmb.sys [2010-02-26 18176]

S3 nmwcdc;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbo.sys [2010-02-26 22528]

S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]

S3 pfc;Padus ASPI Shell; C:\Windows\system32\drivers\pfc.sys [2003-09-19 21248]

S3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\Windows\System32\Drivers\RootMdm.sys [2008-01-19 8192]

S3 SymIMMP;SymIMMP; C:\Windows\system32\DRIVERS\SymIM.sys []

S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2010-02-26 8192]

S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2012-12-13 45056]

S3 usbscan;Stuurprogramma voor USB-scanner; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 35328]

S3 usbser;Nokia USB Serial Port; C:\Windows\system32\DRIVERS\usbser.sys [2013-08-29 27648]

S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2010-02-26 8192]

S3 usbvideo;USB-videoapparaat (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2008-01-19 134016]

S3 VComm;Virtual Serial port driver; C:\Windows\system32\DRIVERS\VComm.sys []

S3 VcommMgr;Bluetooth VComm Manager Service; C:\Windows\System32\Drivers\VcommMgr.sys []

S3 winusb;WinUSB Service; C:\Windows\system32\DRIVERS\winusb.sys [2009-04-11 31616]

S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-10 65640]

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2013-09-07 55624]

R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe [2013-10-16 5175856]

R2 avgwd;AVG WatchDog; C:\Program Files\AVG\AVG2012\avgwdsvc.exe [2012-02-14 193288]

R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]

R2 hpqddsvc;HP CUE DeviceDiscovery-service; C:\Windows\system32\svchost.exe [2008-01-19 21504]

R2 LVPrcSrv;Process Monitor; C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe [2009-10-07 154136]

R2 MapsGalaxy_39Service;MapsGalaxyService; C:\PROGRA~1\MAPSGA~2\bar\1.bin\39barsvc.exe [2013-02-04 42504]

R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\Windows\system32\svchost.exe [2008-01-19 21504]

R2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [2013-08-14 39056]

R2 TomTomHOMEService;TomTomHOMEService; C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe [2013-07-02 93072]

R2 uagqecsvc;Microsoft Forefront UAG Quarantine Enforcement Client; C:\Program Files\Microsoft Forefront UAG\Endpoint Components\3.1.0\uagqecsvc.exe [2010-04-09 149904]

R2 VideoDownloadConverter_4zService;VideoDownloadConverterService; C:\PROGRA~1\VIDEOD~2\bar\1.bin\4zbarsvc.exe [2013-01-08 42504]

R2 vToolbarUpdater17.3.0;vToolbarUpdater17.3.0; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\ToolbarUpdater.exe [2014-01-09 1771544]

R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\Windows\system32\svchost.exe [2008-01-19 21504]

R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2008-01-19 21504]

R3 iPod Service;iPod-service; C:\Program Files\iPod\bin\iPodService.exe [2013-11-02 553288]

R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

S2 gupdate1cad9a219324c18;Google Updateservice (gupdate1cad9a219324c18); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-04-11 133104]

S2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-19 21504]

S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2008-01-19 21504]

S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-05 257928]

S3 DMService;Microsoft Forefront UAG Endpoint Component Manager; C:\Windows\DOWNLO~1\DMService.exe [2010-06-13 468368]

S3 gupdatem;Google Update-service (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-04-11 133104]

S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-02-10 138168]

S3 IDriverT;InstallDriver Table Manager; c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]

S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2013-03-08 30798512]

S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]

S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-07-20 754856]

S4 Bonjour Service;Bonjour-service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 390504]

S4 HP Health Check Service;HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2007-05-24 61440]

S4 NAUpdate;@C:\Program Files\Nero\Update\NASvc.exe,-200; C:\Program Files\Nero\Update\NASvc.exe [2011-03-04 584488]

S4 RoxMediaDB9;RoxMediaDB9; c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe [2007-05-11 887544]

S4 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2010-06-14 615936]

S4 stllssvr;stllssvr; c:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2007-05-03 74656]

-----------------EOF-----------------

iEscape · 8 februari 2014

@ Poir,

Van zodra 1 van de experts online is zal deze je zeker verder helpen aangaande je vraag/probleem.

Jion · 8 februari 2014

Dag Polr,

Er staat heel wat rotzooi op je systeem. We zullen dit in verschillende stappen in orde brengen.

Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe (hier en hier) kan je lezen hoe je dat doet.

Download Zoek.exe naar het bureaublad (niet de .zip- of .rar-versie).

Wanneer Internet Explorer of een andere browser of virusscanner melding geeft dat dit bestand onveilig zou zijn kun je negeren, dit is namelijk een onterechte waarschuwing.
Dubbelklik op Zoek.exe om de tool te starten.
Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
Kopieer nu onderstaande code en plak die in het grote invulvenster:
Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.

C:\Program Files\VideoDownloadConverter_4z;fs
C:\Program Files\AVG Secure Search;fs
C:\Program Files\Common Files\AVG Secure Search;fs
C:\Program Files\MapsGalaxy_39;fs
C:\Program Files\Family Toolbar;fs
C:\Program Files\Delta;fs
C:\Program Files\Uniblue;fs
C:\Windows\system32\SearchProtect;fs
C:\Program Files\MyPC Backup;fs
C:\Program Files\SearchProtect;fs
C:\Users\Rijk en Ineke\AppData\Roaming\PerformerSoft;fs
C:\Program Files\Speed Test 127;fs
C:\Windows\tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job;f
C:\Windows\tasks\Norton Internet Security - Volledige systeemscan uitvoeren - Rijk en Ineke.job;f
C:\Windows\tasks\Norton Security Scan for Rijk en Ineke.job;f
C:\Windows\tasks\RegClean Pro_DEFAULT.job;f
C:\Windows\tasks\RegClean Pro_UPDATES.job;f
C:\Windows\tasks\RegistryBooster.job;f
{00000000-6E41-4FD3-8538-502F5495E5FC};c
{93a3111f-4f74-4ed8-895e-d9708497629e};c
{26842a09-ffa8-4e2c-ae12-0c80f01c3295};c
{0C37B053-FD68-456a-82E1-D788EE342E6F};c
{1e91a655-bb4b-4693-a05e-2edebc4c9d89};c
{312f84fb-8970-4fd3-bddb-7012eac4afc9};c
{71c1d63a-c944-428a-a5bd-ba513190e5d2};c
{95B7759C-8C7F-4BF1-B163-73684A933233};c
{C1AF5FA5-852C-4C90-812E-A7F75E011D87};c
{c547c6c2-561b-4169-a2a5-20ba771ca93b};c
{D4027C7F-154A-4066-A1AD-4243D8127440};c
{FD2FD708-1F6F-4B68-B141-C5778F0C19BB};c
{48586425-6bb7-4f51-8dc6-38c88e3ebb58};c
{364ea597-e728-4ce4-bb4a-ed846ef47970};c
{82E1477C-B154-48D3-9891-33D83C26BCD3};c
{B658800C-F66E-4EF3-AB85-6C0C227862A9};c
{CCC7A320-B3CA-4199-B1A6-9F516DD69829};c
MapsGalaxy_39Service;s
VideoDownloadConverter_4zService;s
vToolbarUpdater17.3.0;s
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run];r
"VideoDownloadConverter Search Scope Monitor"=-;r
"VideoDownloadConverter_4z Browser Plugin Loader"=-;r
"vProt"=-;r
"MapsGalaxy Search Scope Monitor"=-;r
"MapsGalaxy_39 Browser Plugin Loader"=-;r
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RegistryBooster];r
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ROC_roc_dec12];r
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\vProt];r
chromelook; 
firefoxlook; 
emptyclsid;
emptyfolderscheck;delete 
startupall; 
filesrcm;

De optie "Scan All Users" staat standaard aangevinkt.
Klik nu op de knop "Run script".
Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
Mocht er geen logje verschijnen, start zoek.exe dan opnieuw en klik op de knop zoek-results.log, de log verschijnt dan alsnog.
Post het geopende logje in het volgende bericht.

Polr · 9 februari 2014

Hoi Jion,

Ik heb jouw instructies uitgevoerd. Hieronder de inhoud van het enorme logbestand dat zoek.exe samenstelde. Ik hoop dat je er iets mee kunt om mij te helpen.

Gr. Polr

Zoek.exe v5.0.0.0 Updated07-February-2014

Tool run by Rijk en Ineke on zo09-02-2014 at 13:27:56,43.

Microsoft® Windows Vista™ HomePremium 6.0.6002 Service Pack 2 x86

Running in: Normal Mode InternetAccess Detected

Launched: C:\Users\Rijk enIneke\Pictures\zoek.exe [scan all users] [script inserted]

==== System Restore Info======================

9-2-2014 13:30:04 Zoek.exe SystemRestore Point Created Succesfully.

==== Empty Folders Check======================

C:\Program Files\Wolf deletedsuccessfully

C:\ProgramData\Babylon deletedsuccessfully

C:\ProgramData\Bluetooth deletedsuccessfully

C:\ProgramData\HPSSUPPLY deletedsuccessfully

C:\ProgramData\Oracle deletedsuccessfully

C:\ProgramData\PhotoStitchdeleted successfully

C:\ProgramData\ZoomBrowserdeleted successfully

C:\Users\Rijk enIneke\AppData\Roaming\GetRightToGo deleted successfully

C:\Users\Rijk enIneke\AppData\Roaming\PerformerSoft deleted successfully

C:\Users\Rijk enIneke\AppData\Roaming\The Complete Genealogy Reporter - FTB deletedsuccessfully

C:\Users\Rijk enIneke\AppData\Local\NokiaAccount deleted successfully

C:\Users\Rijk enIneke\AppData\Local\PackageAware deleted successfully

==== Deleting CLSID Registry Keys======================

HKEY_USERS\S-1-5-21-2940832217-195839467-2300631566-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0C37B053-FD68-456a-82E1-D788EE342E6F}deleted successfully

HKEY_USERS\S-1-5-21-2940832217-195839467-2300631566-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0C37B053-FD68-456a-82E1-D788EE342E6F}deleted successfully

HKEY_USERS\S-1-5-21-2940832217-195839467-2300631566-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1e91a655-bb4b-4693-a05e-2edebc4c9d89}deleted successfully

HKEY_USERS\S-1-5-21-2940832217-195839467-2300631566-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1e91a655-bb4b-4693-a05e-2edebc4c9d89}deleted successfully

HKEY_USERS\S-1-5-21-2940832217-195839467-2300631566-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{312f84fb-8970-4fd3-bddb-7012eac4afc9}deleted successfully

HKEY_USERS\S-1-5-21-2940832217-195839467-2300631566-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{312f84fb-8970-4fd3-bddb-7012eac4afc9}deleted successfully

HKEY_USERS\S-1-5-21-2940832217-195839467-2300631566-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{71c1d63a-c944-428a-a5bd-ba513190e5d2}deleted successfully

HKEY_USERS\S-1-5-21-2940832217-195839467-2300631566-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{71c1d63a-c944-428a-a5bd-ba513190e5d2}deleted successfully

HKEY_USERS\S-1-5-21-2940832217-195839467-2300631566-1000\Software\Microsoft\InternetExplorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233} deletedsuccessfully

HKEY_USERS\S-1-5-21-2940832217-195839467-2300631566-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}deleted successfully

HKEY_USERS\S-1-5-21-2940832217-195839467-2300631566-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}deleted successfully

HKEY_USERS\S-1-5-21-2940832217-195839467-2300631566-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}deleted successfully

HKEY_USERS\S-1-5-21-2940832217-195839467-2300631566-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}deleted successfully

HKEY_USERS\S-1-5-21-2940832217-195839467-2300631566-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{c547c6c2-561b-4169-a2a5-20ba771ca93b}deleted successfully

HKEY_USERS\S-1-5-21-2940832217-195839467-2300631566-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{c547c6c2-561b-4169-a2a5-20ba771ca93b}deleted successfully

HKEY_USERS\S-1-5-21-2940832217-195839467-2300631566-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}deleted successfully

HKEY_USERS\S-1-5-21-2940832217-195839467-2300631566-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD2FD708-1F6F-4B68-B141-C5778F0C19BB}deleted successfully

HKEY_USERS\S-1-5-21-2940832217-195839467-2300631566-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD2FD708-1F6F-4B68-B141-C5778F0C19BB}deleted successfully

HKEY_USERS\S-1-5-21-2940832217-195839467-2300631566-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{48586425-6bb7-4f51-8dc6-38c88e3ebb58}deleted successfully

HKEY_USERS\S-1-5-21-2940832217-195839467-2300631566-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{48586425-6bb7-4f51-8dc6-38c88e3ebb58}deleted successfully

HKEY_USERS\S-1-5-21-2940832217-195839467-2300631566-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{364ea597-e728-4ce4-bb4a-ed846ef47970}deleted successfully

HKEY_USERS\S-1-5-21-2940832217-195839467-2300631566-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{364ea597-e728-4ce4-bb4a-ed846ef47970}deleted successfully

HKEY_USERS\S-1-5-21-2940832217-195839467-2300631566-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}deleted successfully

HKEY_USERS\S-1-5-21-2940832217-195839467-2300631566-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}deleted successfully

HKEY_USERS\S-1-5-21-2940832217-195839467-2300631566-1000\Software\Microsoft\InternetExplorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} deletedsuccessfully

HKEY_CLASSES_ROOT\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}deleted successfully

HKEY_CLASSES_ROOT\CLSID\{93a3111f-4f74-4ed8-895e-d9708497629e}deleted successfully

HKEY_CLASSES_ROOT\CLSID\{26842a09-ffa8-4e2c-ae12-0c80f01c3295}deleted successfully

HKEY_CLASSES_ROOT\CLSID\{0C37B053-FD68-456a-82E1-D788EE342E6F}deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\BrowserHelper Objects\{0C37B053-FD68-456a-82E1-D788EE342E6F} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{1e91a655-bb4b-4693-a05e-2edebc4c9d89}deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\BrowserHelper Objects\{1e91a655-bb4b-4693-a05e-2edebc4c9d89} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{312f84fb-8970-4fd3-bddb-7012eac4afc9}deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\BrowserHelper Objects\{312f84fb-8970-4fd3-bddb-7012eac4afc9} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{71c1d63a-c944-428a-a5bd-ba513190e5d2}deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\BrowserHelper Objects\{71c1d63a-c944-428a-a5bd-ba513190e5d2} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\BrowserHelper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\BrowserHelper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{c547c6c2-561b-4169-a2a5-20ba771ca93b}deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\BrowserHelper Objects\{c547c6c2-561b-4169-a2a5-20ba771ca93b} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\BrowserHelper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{FD2FD708-1F6F-4B68-B141-C5778F0C19BB}deleted successfully

HKEY_CLASSES_ROOT\CLSID\{48586425-6bb7-4f51-8dc6-38c88e3ebb58}deleted successfully

HKEY_CLASSES_ROOT\CLSID\{364ea597-e728-4ce4-bb4a-ed846ef47970}deleted successfully

HKEY_CLASSES_ROOT\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}deleted successfully

HKEY_CLASSES_ROOT\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}deleted successfully

==== Deleting CLSID Registry Values======================

HKEY_USERS\S-1-5-21-2940832217-195839467-2300631566-1000\Software\Microsoft\InternetExplorer\URLSearchHooks\{00000000-6E41-4FD3-8538-502F5495E5FC} deletedsuccessfully

HKEY_USERS\S-1-5-21-2940832217-195839467-2300631566-1000\Software\Microsoft\InternetExplorer\URLSearchHooks\{93a3111f-4f74-4ed8-895e-d9708497629e} deletedsuccessfully

HKEY_USERS\S-1-5-21-2940832217-195839467-2300631566-1000\Software\Microsoft\InternetExplorer\URLSearchHooks\{26842a09-ffa8-4e2c-ae12-0c80f01c3295} deletedsuccessfully

HKEY_USERS\S-1-5-21-2940832217-195839467-2300631566-1000\Software\Microsoft\InternetExplorer\Toolbar\WebBrowser\{D4027C7F-154A-4066-A1AD-4243D8127440} deletedsuccessfully

HKEY_USERS\S-1-5-21-2940832217-195839467-2300631566-1000\Software\Microsoft\InternetExplorer\Toolbar\WebBrowser\{FD2FD708-1F6F-4B68-B141-C5778F0C19BB} deletedsuccessfully

HKEY_USERS\S-1-5-21-2940832217-195839467-2300631566-1000\Software\Microsoft\InternetExplorer\Toolbar\WebBrowser\{48586425-6bb7-4f51-8dc6-38c88e3ebb58} deletedsuccessfully

HKEY_USERS\S-1-5-21-2940832217-195839467-2300631566-1000\Software\Microsoft\InternetExplorer\Toolbar\WebBrowser\{364ea597-e728-4ce4-bb4a-ed846ef47970} deletedsuccessfully

HKEY_USERS\S-1-5-21-2940832217-195839467-2300631566-1000\Software\Microsoft\InternetExplorer\Toolbar\WebBrowser\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} deletedsuccessfully

HKEY_USERS\S-1-5-21-2940832217-195839467-2300631566-1000\Software\Microsoft\InternetExplorer\URLSearchHooks\{93a3111f-4f74-4ed8-895e-d9708497629e} deletedsuccessfully

HKEY_USERS\S-1-5-21-2940832217-195839467-2300631566-1000\Software\Microsoft\InternetExplorer\URLSearchHooks\{26842a09-ffa8-4e2c-ae12-0c80f01c3295} deletedsuccessfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\InternetExplorer\Toolbar\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\InternetExplorer\Toolbar\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\InternetExplorer\Toolbar\{FD2FD708-1F6F-4B68-B141-C5778F0C19BB} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\InternetExplorer\Toolbar\{48586425-6bb7-4f51-8dc6-38c88e3ebb58} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\InternetExplorer\Toolbar\{364ea597-e728-4ce4-bb4a-ed846ef47970} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\InternetExplorer\Toolbar\{82E1477C-B154-48D3-9891-33D83C26BCD3} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\InternetExplorer\Toolbar\{CCC7A320-B3CA-4199-B1A6-9F516DD69829} deleted successfully

==== Deleting Services======================

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MapsGalaxy_39Servicedeleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\MapsGalaxy_39Servicedeleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VideoDownloadConverter_4zServicedeleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\VideoDownloadConverter_4zServicedeleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vToolbarUpdater17.3.0deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\vToolbarUpdater17.3.0deleted successfully

==== Registry Fix Code======================

Windows Registry Editor Version5.00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"VideoDownloadConverterSearch Scope Monitor"=-

"VideoDownloadConverter_4zBrowser Plugin Loader"=-

"vProt"=-

"MapsGalaxy Search Scope Monitor"=-

"MapsGalaxy_39 BrowserPlugin Loader"=-

[-HKEY_LOCAL_MACHINE\software\microsoft\sharedtools\msconfig\startupreg\RegistryBooster]

[-HKEY_LOCAL_MACHINE\software\microsoft\sharedtools\msconfig\startupreg\ROC_roc_dec12]

[-HKEY_LOCAL_MACHINE\software\microsoft\sharedtools\msconfig\startupreg\vProt]

==== Deleting Files \ Folders======================

C:\Users\Rijk enIneke\AppData\Roaming\PerformerSoft not found

C:\Program Files\SearchProtectdeleted

C:\Program Files\Speed Test 127deleted

"C:\Windows\tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job"deleted

"C:\Windows\tasks\NortonInternet Security - Volledige systeemscan uitvoeren - Rijk en Ineke.job"deleted

"C:\Windows\tasks\NortonSecurity Scan for Rijk en Ineke.job" deleted

"C:\Windows\tasks\RegCleanPro_DEFAULT.job" deleted

"C:\Windows\tasks\RegCleanPro_UPDATES.job" deleted

"C:\Windows\tasks\RegistryBooster.job"deleted

==== Files Recently Created /Modified ======================

====== C:\Windows ====

======C:\Users\RIJKEN~1\AppData\Local\Temp ====

2014-02-06 10:55:09 FBF1CE5A3D017271CF979A3DFF872BFB 26112 ----atw- C:\Users\Rijk enIneke\AppData\Local\Temp\{1873C742-9A61-4EDA-A06B-AA03FA61E094}\GoogleUpdateHelper.msi

2014-02-06 10:55:09 CA0A340ABCF0C14A09691CBC90186AB4 51080 ----atw- C:\Users\Rijk enIneke\AppData\Local\Temp\{1873C742-9A61-4EDA-A06B-AA03FA61E094}\GoogleUpdateBroker.exe

2014-02-06 10:55:09 C98E0215F7B65F0DDEE0591BD57EDFA6 847128 ----a-w- C:\Users\Rijk enIneke\AppData\Local\Temp\{1873C742-9A61-4EDA-A06B-AA03FA61E094}\GoogleUpdateSetup.exe

2014-02-06 10:55:09 A7495E342A2EE0160812AC856C11F6CF 847752 ----atw- C:\Users\Rijken Ineke\AppData\Local\Temp\{1873C742-9A61-4EDA-A06B-AA03FA61E094}\goopdate.dll

2014-02-06 10:55:09 9CCBA5E2489E603BB1578D1D541252A8 273800 ----atw- C:\Users\Rijk enIneke\AppData\Local\Temp\{1873C742-9A61-4EDA-A06B-AA03FA61E094}\GoogleCrashHandler64.exe

2014-02-06 10:55:09 600B1A4BCC0823A96DC7B86F005ADBB8 51080 ----atw- C:\Users\Rijk enIneke\AppData\Local\Temp\{1873C742-9A61-4EDA-A06B-AA03FA61E094}\GoogleUpdateOnDemand.exe

2014-02-06 10:55:09 506708142BC63DABA64F2D3AD1DCD5BF 116648 ----atw- C:\Users\Rijk enIneke\AppData\Local\Temp\{1873C742-9A61-4EDA-A06B-AA03FA61E094}\GoogleUpdate.exe

2014-02-06 10:55:09 465680BDE344CE4FF6646626AA3A9125 223112 ----atw- C:\Users\Rijk enIneke\AppData\Local\Temp\{1873C742-9A61-4EDA-A06B-AA03FA61E094}\GoogleCrashHandler.exe

====== Java Cache =====

2014-02-08 13:04:21 415FC9732A3F4D89A0E01251CD66E136 646 ----a-w- C:\Users\Rijk en Ineke\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\17\49a00451-4207e367

2014-02-08 13:04:20 415FC9732A3F4D89A0E01251CD66E136 646 ----a-w- C:\Users\Rijk enIneke\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18\3cb32f52-5bb1f038

====== C:\Windows\system32 =====

2014-02-08 13:03:06 95E15A2DE75AB48728AB8E1911C3EDB1 264616 ----a-w- C:\Windows\System32\javaws.exe

2014-02-08 13:02:55 FD80D0AE205EC54D1A204DDBD6B766DA 94632 ----a-w- C:\Windows\System32\WindowsAccessBridge.dll

2014-02-08 13:02:55 CB3638541DCAC86EE17FA8258202E20E 175016 ----a-w- C:\Windows\System32\javaw.exe

2014-02-08 13:02:55 9395BBE294045909A025C9F3DC3D9025 174504 ----a-w- C:\Windows\System32\java.exe

2014-02-08 12:26:11 7C428C7AE120278409B4B00E8A629F1C 90948 ----a-w- C:\Windows\System32\cc_20140208_132556.reg

======C:\Windows\system32\drivers =====

====== C:\Windows\Tasks ======

2014-02-07 08:33:01 A86CFBC49EDDFF77714C67566A524119 3342 ----a-w- C:\Windows\system32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2940832217-195839467-2300631566-1000

====== C:\Windows\Temp ======

======= C:\Program Files =====

2014-02-08 17:02:57 -------- d-----w- C:\ProgramFiles\trend micro

2014-02-02 10:03:17 -------- d-----w- C:\ProgramFiles\MyPC Backup

======= C: =====

====== C:\Users\Rijk enIneke\AppData\Roaming ======

2014-02-02 10:05:29 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Users\Rijk enIneke\AppData\Roaming\PDFConverterApp

2014-02-02 10:02:14 -------- d-----w- C:\Users\Rijken Ineke\AppData\Local\SearchProtect

====== C:\Users\Rijk en Ineke======

2014-02-08 17:02:06 69CA82A7482A00D8EE063D2B97FC4338 781383 ----a-w- C:\Users\Rijk enIneke\Desktop\RSIT.exe

2014-02-08 12:59:41 -------- d-----w- C:\ProgramData\Microsoft\Windows\StartMenu\Programs\Java

====== C: exe-files ==

2014-02-07 09:36:29 6A8A2E262F26B69861B579AEA1159CCD 177639 ------r- C:\ProgramFiles\Belastingdienst\Aangifte inkomstenbelasting\2013\ib2013u.exe

=== C: other files ==

2014-02-08 18:00:45 53EAFBF3F7F3E3D2BA20AA9D84416295 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-2940832217-195839467-2300631566-1000\$I22LHZ3.com

==== Startup Registry Enabled======================

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]

"WindowsWelcomeCenter"="rundll32.exeoobefldr.dll,ShowWelcomeCenter"

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe/detectMem"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]

"WindowsWelcomeCenter"="rundll32.exeoobefldr.dll,ShowWelcomeCenter"

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe/detectMem"

[HKEY_USERS\S-1-5-21-2940832217-195839467-2300631566-1000\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="C:\ProgramFiles\Windows Sidebar\sidebar.exe /autoRun"

"ehTray.exe"="C:\Windows\ehome\ehTray.exe"

"MobileDocuments"="C:\ProgramFiles\Common Files\Apple\Internet Services\ubd.exe"

"GoogleUpdate"="C:\Users\Rijk enIneke\AppData\Local\Google\Update\GoogleUpdate.exe /c"

"WMPNSCFG"="C:\ProgramFiles\Windows Media Player\WMPNSCFG.exe"

"CCleanerMonitoring"="C:\Program Files\CCleaner\CCleaner.exe /MONITOR"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IgfxTray"="C:\Windows\system32\igfxtray.exe"

"HotKeysCmds"="C:\Windows\system32\hkcmd.exe"

"Persistence"="C:\Windows\system32\igfxpers.exe"

"RtHDVCpl"="RtHDVCpl.exe"

"SunJavaUpdateReg"="C:\Windows\system32\jureg.exe"

"LogitechQuickCamRibbon"="C:\ProgramFiles\Logitech\Logitech WebCam Software\LWS.exe /hide"

"BCSSync"="C:\ProgramFiles\Microsoft Office\Office14\BCSSync.exe /DelayServices"

"AVG_TRAY"="C:\ProgramFiles\AVG\AVG2012\avgtray.exe"

"AdobeARM"="C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

"iTunesHelper"="C:\ProgramFiles\iTunes\iTunesHelper.exe"

"APSDaemon"="C:\ProgramFiles\Common Files\Apple\Apple Application Support\APSDaemon.exe"

"QuickTimeTask"="C:\Program Files\QuickTime\QTTask.exe -atboottime"

"TkBellExe"="c:\programfiles\real\realplayer\Update\realsched.exe -osboot"

"SunJavaUpdateSched"="C:\ProgramFiles\Common Files\Java\Java Update\jusched.exe"

"WindowsDefender"="%ProgramFiles%\Windows Defender\MSASCui.exe -hide"

"Windows Mobile-based devicemanagement"="%windir%\WindowsMobile\wmdSync.exe "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]

"Launcher"="%WINDIR%\SMINST\launcher.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="C:\ProgramFiles\Windows Sidebar\sidebar.exe /autoRun"

"ehTray.exe"="C:\Windows\ehome\ehTray.exe"

"MobileDocuments"="C:\ProgramFiles\Common Files\Apple\Internet Services\ubd.exe"

"Google Update"="C:\Users\Rijken Ineke\AppData\Local\Google\Update\GoogleUpdate.exe /c"

"WMPNSCFG"="C:\ProgramFiles\Windows Media Player\WMPNSCFG.exe"

"CCleanerMonitoring"="C:\Program Files\CCleaner\CCleaner.exe /MONITOR"

==== Startup Registry Disabled======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SharedTools\MSConfig\startupreg\AppleSyncNotifier]