Kan geen programma's meer installeren (7-zip, temp files,firefox)

kape · 15 februari 2014

Start Hijackthis op. Selecteer “Scan”. Selecteer alleen de items die hieronder zijn genoemd:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Zoeken

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Zoeken

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R3 - URLSearchHook: (no name) - {9b339f6e-ddcd-401b-8764-230adbd01761} - (no file)

R3 - URLSearchHook: (no name) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - (no file)

O2 - BHO: (no name) - {276A03B8-8137-4478-849F-B203B50DABBD} - (no file)

O2 - BHO: (no name) - {63F152C7-55AD-4675-BA7E-65A22B06721B} - (no file)

O2 - BHO: (no name) - {9b339f6e-ddcd-401b-8764-230adbd01761} - (no file)

O3 - Toolbar: (no name) - {9b339f6e-ddcd-401b-8764-230adbd01761} - (no file)

O8 - Extra context menu item: Free YouTube Download - C:\Users\Fam.Smet\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm

O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Fam.Smet\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm

O20 - AppInit_DLLs: c:\docume~1\ settings\all users\application data\browserdefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}

O23 - Service: BrowserDefendert - Unknown owner - C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe (file missing)

Klik op 'Fix checked' om de items te verwijderen.

Let op : Windows Vista & 7 gebruikers dienen HijackThis als “administrator” uit te voeren via rechtermuisknop “als administrator uitvoeren". Indien dit via de snelkoppeling niet lukt voer je HijackThis als administrator uit in de volgende map : C:\Program Files\Trend Micro\HiJackThis of C:\Program Files (x86)\Trend Micro\HiJackThis.

Schakel je antivirus- en antispywareprogramma's tijdelijk uit, deze kunnen namelijk de werking van Z-Analyse nadelig beïnvloeden.

(hier en hier) kan je lezen hoe je dat doet.

Download Z-Analyse.exe naar het bureaublad.

Wanneer Internet Explorer of een andere browser of virusscanner melding geeft dat dit bestand onveilig zou zijn kan je dat negeren, het is namelijk een onterechte waarschuwing.

Z-Analyse.exe uitvoeren

Wanneer u problemen ondervindt bij het uitvoeren van dit programma of bepaalde foutmeldingen te zien krijgt laat dit dan even weten in uw bericht.

Klik met de rechtermuisknop op Z-Analyse.zip en klik op de optie "Alles uitpakken" als je Z-Analyse.zip gedownload hebt.
Dubbelklik vervolgens op Z-Analyse.exe om de tool te starten.
Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
Z-Analyse.exe gaat nu een scan uitvoeren, bij sommige systemen kan dit langer dan een kwartier duren.

Wacht nu geduldig af tot er een logje opent.
Plak het logbestand met de naam "Zoek-results.log" in je topic. (Dit logbestand kan je tevens terugvinden op de systeemschijf als C:\\Zoek-results.log.)

smetsky · 15 februari 2014

dat heb ik gedaan nu hier het logje van Z-Analyse

Z-Analyse V1.0.0.2 Updated 15-February-2014

Tool run by Fam.Smet on za 15/02/2014 at 16:14:57,56.

Microsoft Windows 7 Ultimate 6.1.7601 Service Pack 1 x86

Running in: Normal Mode Internet Access Detected

Launched: C:\Users\Fam.Smet\Desktop\Z-Analyse.exe [Deep Scan]

==== System Restore Info ======================

15/02/2014 16:16:46 Zoek.exe System Restore Point Created Succesfully.

==== Running Processes ======================

C:\Windows\System32\smss.exe

C:\Windows\system32\csrss.exe

C:\Windows\system32\wininit.exe

C:\Windows\system32\csrss.exe

C:\Windows\system32\services.exe

C:\Windows\system32\lsass.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\winlogon.exe

C:\Windows\system32\nvvsvc.exe

C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

C:\Program Files\Thomson\ST330\service\st330service.exe

C:\Program Files\WTouch\WTouchService.exe

C:\Windows\SYSTEM32\WISPTIS.EXE

C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

C:\Windows\system32\nvvsvc.exe

C:\Windows\SYSTEM32\WISPTIS.EXE

C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe

C:\Windows\system32\Dwm.exe

C:\Program Files\WTouch\WTouchUser.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\taskeng.exe

C:\Windows\system32\rundll32.exe

C:\Windows\system32\taskhost.exe

C:\Windows\System32\spoolsv.exe

C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

C:\Program Files\AVG\AVG9\avgwdsvc.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Windows\system32\libusbd-nt.exe

C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe

C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe

C:\Program Files\AVG\AVG9\avgnsx.exe

C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

C:\Program Files\AVG\AVG9\avgtray.exe

C:\Program Files\HP\HP Software Update\hpwuschd2.exe

C:\Windows\system32\PnkBstrA.exe

C:\Windows\system32\PSIService.exe

C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

C:\Windows\system32\Pen_Tablet.exe

C:\Program Files\AVG\AVG9\avgrsx.exe

C:\Program Files\AVG\AVG9\avgchsvx.exe

C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe

C:\Program Files\AVG\AVG9\avgcsrvx.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

C:\Windows\system32\WTablet\Pen_TabletUser.exe

C:\Program Files\AVG\AVG9\avgemc.exe

C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

C:\Windows\system32\Pen_Tablet.exe

C:\Program Files\LogMeIn Hamachi\hamachi-2.exe

C:\Program Files\AVG\AVG9\avgcsrvx.exe

C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe

C:\Windows\system32\SearchIndexer.exe

C:\Windows\System32\WUDFHost.exe

C:\Program Files\Logitech Gaming Software\LCore.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Users\Fam.Smet\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe

C:\Users\Fam.Smet\AppData\Roaming\Dropbox\bin\Dropbox.exe

C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe

C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

C:\Program Files\Common Files\Java\Java Update\jucheck.exe

C:\Program Files\Microsoft\BingBar\7.3.124.0\SeaPort.exe

C:\Program Files\Kuka Roboter GmbH\Kuka.Load 4\Bin\KukaLoadGUI.exe

C:\Program Files\Microsoft Office\Office12\WINWORD.EXE

C:\Program Files\AVG\AVG9\avgui.exe

C:\Windows\system32\conhost.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\system32\taskmgr.exe

C:\Windows\system32\conhost.exe

C:\Users\FAM~1.SME\AppData\Local\Temp\LDScan.exe

C:\Windows\system32\vssvc.exe

C:\Windows\system32\SearchProtocolHost.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Windows\system32\svchost.exe -k hpdevmgmt

C:\Windows\System32\svchost.exe -k HPZ12

C:\Windows\system32\svchost.exe -k imgsvc

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalServicePeerNet

C:\Windows\system32\svchost.exe -k SDRSVC

C:\Windows\System32\svchost.exe -k swprv

==== System Specs ======================

Windows: Windows 7 Ultimate Edition Service Pack 1 (Build 7601)

Memory (RAM): 3064 MB

CPU Info: Intel® Core i5 CPU 750 @ 2.67GHz

CPU Speed: 2657,0 MHz

Sound Card: Luidsprekers (Logitech G330 Hea |

Digitale audio (S/PDIF) (High D |

Digitale audio (HDMI) (High Def |

Display Adapters: NVIDIA GeForce GT 440 | NVIDIA GeForce GT 440 | RDPDD Chained DD | RDP Encoder Mirror Driver | RDP Reflector Display Driver

Monitors: 1x; Algemeen PnP-beeldscherm |

Screen Resolution: 1600 X 900 - 32 bit

Network: Network Present

Network Adapters: Realtek RTL8168D/8111D Family PCI-E Gigabit Ethernet NIC (NDIS 6.20) | Hamachi Network Interface

CD / DVD Drives: 2x (F: | G: | ) F: HL-DT-STDVDRAM GH22NS40 | G:

Ports: COM Ports NOT Present. LPT Port NOT Present.

Mouse: 8 Button Wheel Mouse Present

Hard Disks: C: 244,1GB | D: 344,6GB | E: 341,8GB

Hard Disks - Free: C: 67,7GB | D: 110,0GB | E: 254,4GB

Manufacturer *: American Megatrends Inc.

BIOS Info: AT/AT COMPATIBLE | 01/15/10 | DELL - 20100115

Time Zone: Romance (standaardtijd)

Motherboard *: MEDIONPC MS-7616

Country: Belgi‰

Language: NLB

==== System Specs (Software) ======================

Anti-Virus: AVG Anti-Virus Free On-access scanning disabled (Outdated)

Anti-Spyware: AVG Anti-Virus Free disabled (Outdated)

Anti-Spyware: Windows Defender disabled (Outdated)

Internet Explorer Version: 11.0.9600.16518

Google Chrome version: 32.0.1700.107

Adobe Reader version: 10.1.9.22

Sun Java version: 1.7.0_07 (32-bit)

Flash Player version: 12.0.0.44

Shockwave Player version: 11.6r626

==== Files Recently Created / Modified ======================

====== C:\Windows ====

====== C:\Users\FAM~1.SME\AppData\Local\Temp ====

2014-02-15 15:14:54 3304FDFB4F7424B385C308B812FB019C 71680 ----a-w- C:\Users\Fam.Smet\AppData\Local\Temp\LDScan.exe

====== Java Cache =====

====== C:\Windows\system32 =====

2014-02-12 13:19:56 B8F28AAC003060E3B125D2447CFC19E2 164864 ----a-w- C:\Windows\System32\msrating.dll

2014-02-12 13:19:56 B5B3334F177CED627C2D7FE38235B6B1 2724864 ----a-w- C:\Windows\System32\mshtml.tlb

2014-02-12 13:19:56 85AC8EB265EDCAD86D651D45C5E3AB83 440832 ----a-w- C:\Windows\System32\ieui.dll

2014-02-12 13:19:56 6F2E12C6229558B5829FDD07603763C2 4096 ----a-w- C:\Windows\System32\ieetwcollectorres.dll

2014-02-12 13:19:56 6A06EB11F1E5BDAA795DAE7838F9FE20 43008 ----a-w- C:\Windows\System32\jsproxy.dll

2014-02-12 13:19:56 1D724A2EC124094B83FCB07533FC9BB5 208896 ----a-w- C:\Windows\System32\ie4uinit.exe

2014-02-12 13:19:55 7D6B20C69CC8EECB8F31D4FAF913BBE8 112128 ----a-w- C:\Windows\System32\ieUnatt.exe

2014-02-12 13:19:55 5DD49C02D059C1E6E47A8FB4A076C9B1 703488 ----a-w- C:\Windows\System32\ieapfltr.dll

2014-02-12 13:19:55 408805B8083896DC95E6340F4016BEBD 61952 ----a-w- C:\Windows\System32\iesetup.dll

2014-02-12 13:19:55 29B66A7E3E1AA79C690D5D862AC76F64 108032 ----a-w- C:\Windows\System32\ieetwcollector.exe

2014-02-12 13:19:55 260D6B421E5551E8BA75D16B5CA90D9A 51200 ----a-w- C:\Windows\System32\ieetwproxystub.dll

2014-02-12 13:19:55 0F739443669F3A48F1B2325995117BFE 553472 ----a-w- C:\Windows\System32\jscript9diag.dll

2014-02-12 13:19:55 0E7B7C9F483300F9FF97C6A1E4BC4F57 32768 ----a-w- C:\Windows\System32\iernonce.dll

2014-02-12 13:19:54 C9D1131E2163CE932DF3EAAF0EEA3673 524288 ----a-w- C:\Windows\System32\msfeeds.dll

2014-02-12 13:19:53 9C89246184979A070B0C6CCF61C68136 1820160 ----a-w- C:\Windows\System32\wininet.dll

2014-02-12 13:19:53 5D9DC6332A4FC66388B09BBE7CF53750 1156096 ----a-w- C:\Windows\System32\urlmon.dll

2014-02-12 13:19:53 40E68599FE3A10F816217D3789FCE74E 1964032 ----a-w- C:\Windows\System32\inetcpl.cpl

2014-02-12 13:19:53 34CBED7698D557DDB43F8732FBC2ACB9 2168320 ----a-w- C:\Windows\System32\iertutil.dll

2014-02-12 13:19:52 79FA7D8B488F90EDE325963379A6F738 11266048 ----a-w- C:\Windows\System32\ieframe.dll

2014-02-12 13:19:51 C863E5A2417DF0F2A31ED32C3B2CB23F 17103872 ----a-w- C:\Windows\System32\mshtml.dll

2014-02-12 13:19:51 99280392987A1A96C756A9F38C4CE396 4244480 ----a-w- C:\Windows\System32\jscript9.dll

2014-02-12 13:15:31 3D485254E43EF4E4F707346B5731EA9A 454656 ----a-w- C:\Windows\System32\vbscript.dll

2014-02-12 11:44:53 EA093130471090037BB70A4AF86FAD1B 420008 ----a-w- C:\Windows\System32\locale.nls

2014-02-12 11:44:53 E4561704CBFA193761743E5AF746C669 1237504 ----a-w- C:\Windows\System32\msxml3.dll

2014-02-12 11:44:52 17B06F23237FCD731FA2E10ECD6EDFE1 2048 ----a-w- C:\Windows\System32\msxml3r.dll

2014-02-12 11:44:34 D96106CF60505734B14F6AE80AAA4B07 1987584 ----a-w- C:\Windows\System32\d3d10warp.dll

2014-02-12 11:44:34 14800BD31701A5047AC3145BB1E698AE 3419136 ----a-w- C:\Windows\System32\d2d1.dll

2014-02-12 11:44:32 E01D2AC63453534DB8AD1EA97DEE9C3A 594944 ----a-w- C:\Windows\System32\RMActivate_isv.exe

2014-02-12 11:44:31 6142C5540C8D2764D59CBC11AF4A5900 572416 ----a-w- C:\Windows\System32\RMActivate.exe

2014-02-12 11:44:31 0F5FEF37588AF457E02125674F171A4F 508928 ----a-w- C:\Windows\System32\RMActivate_ssp_isv.exe

2014-02-12 11:44:30 BBCE3E9E74C7CEA47FA4115B360AC2C6 423936 ----a-w- C:\Windows\System32\secproc_isv.dll

2014-02-12 11:44:30 7FA485555BF802FE3DB5598004DBDFAC 390144 ----a-w- C:\Windows\System32\msdrm.dll

2014-02-12 11:44:30 12A9F24DC9F465DA79AC2272D829A81E 428032 ----a-w- C:\Windows\System32\secproc.dll

2014-02-12 11:44:30 08D323750350A8A29611D1004C0CF319 510976 ----a-w- C:\Windows\System32\RMActivate_ssp.exe

2014-02-12 11:44:29 9158DBE2F8483434FC72F320690C9DB8 87040 ----a-w- C:\Windows\System32\secproc_ssp_isv.dll

2014-02-12 11:44:29 58712A48D31B40EBCB35B47205F87771 87040 ----a-w- C:\Windows\System32\secproc_ssp.dll

2014-02-05 11:53:22 504A71BECE129516D421A54983F8637C 5556104 ----a-w- C:\Windows\System32\FlashPlayerInstaller.exe

====== C:\Windows\system32\drivers =====

====== C:\Windows\Tasks ======

====== C:\Windows\Temp ======

======= C:\Program Files =====

2014-01-22 15:07:59 -------- d-----w- C:\Program Files\TERA

======= C: =====

====== C:\Users\Fam.Smet\AppData\Roaming ======

2014-02-15 15:13:41 -------- d-----w- C:\Users\Fam.Smet\AppData\Roaming\AVG9

2014-01-22 15:30:06 -------- d-----w- C:\Users\Fam.Smet\AppData\Roaming\TERA

====== C:\Users\Fam.Smet ======

2014-02-15 15:10:15 036AFD4D3BC4E1318CC18D94C2AEF00B 1347584 ----a-w- C:\Users\Fam.Smet\Desktop\Z-Analyse.exe

2014-01-22 15:08:03 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TERA

====== C: exe-files ==

2014-02-15 15:14:54 3304FDFB4F7424B385C308B812FB019C 71680 ----a-w- C:\Users\Fam.Smet\AppData\Local\Temp\LDScan.exe

2014-02-15 15:10:15 036AFD4D3BC4E1318CC18D94C2AEF00B 1347584 ----a-w- C:\Users\Fam.Smet\Desktop\Z-Analyse.exe

2014-02-15 15:09:46 643465B0252BB1768B5E3BF7179BF0A3 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-3116469899-2467498249-1593398681-1000\$IBVJHGQ.exe

2014-02-15 15:08:32 036AFD4D3BC4E1318CC18D94C2AEF00B 1347584 ----a-w- C:\$Recycle.Bin\S-1-5-21-3116469899-2467498249-1593398681-1000\$RBVJHGQ.exe

2014-02-14 21:35:27 9813F031FF89914BABC79DCC84BF2BEF 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-3116469899-2467498249-1593398681-1000\$IRC3XZ1.exe

2014-02-14 18:55:53 69CA82A7482A00D8EE063D2B97FC4338 781383 ----a-w- C:\$Recycle.Bin\S-1-5-21-3116469899-2467498249-1593398681-1000\$RRC3XZ1.exe

2014-02-13 14:07:15 078D66AD44C5E9DF5C473DACE05D6DAF 282968 ----a-w- C:\Users\Fam.Smet\Favorites\Downloads\Firefox Setup Stub 27.0 (1).exe

2014-02-13 13:48:24 598B099857FEED877FD46A7ADBEFA032 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-3116469899-2467498249-1593398681-1000\$I6FF202.exe

2014-02-12 13:19:56 1D724A2EC124094B83FCB07533FC9BB5 208896 ----a-w- C:\Windows\System32\ie4uinit.exe

2014-02-12 13:19:55 7D6B20C69CC8EECB8F31D4FAF913BBE8 112128 ----a-w- C:\Windows\System32\ieUnatt.exe

2014-02-12 13:19:55 29B66A7E3E1AA79C690D5D862AC76F64 108032 ----a-w- C:\Windows\System32\ieetwcollector.exe

2014-02-12 13:19:53 9E8F9FDD407DDE997965EEFD9E635CCF 469504 ----a-w- C:\Program Files\Internet Explorer\ieinstal.exe

2014-02-12 13:19:53 4263F6C131E513CEA1AE82B5B81A4E1A 808152 ----a-w- C:\Program Files\Internet Explorer\iexplore.exe

2014-02-12 11:44:32 E01D2AC63453534DB8AD1EA97DEE9C3A 594944 ----a-w- C:\Windows\System32\RMActivate_isv.exe

2014-02-12 11:44:31 6142C5540C8D2764D59CBC11AF4A5900 572416 ----a-w- C:\Windows\System32\RMActivate.exe

2014-02-12 11:44:31 0F5FEF37588AF457E02125674F171A4F 508928 ----a-w- C:\Windows\System32\RMActivate_ssp_isv.exe

2014-02-12 11:44:30 08D323750350A8A29611D1004C0CF319 510976 ----a-w- C:\Windows\System32\RMActivate_ssp.exe

=== C: other files ==

2014-02-15 15:08:52 D0AF50927370F8B260506F60CAA749A7 2679122 ----a-w- C:\Users\Fam.Smet\Desktop\Z-analyse.zip

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-21-3116469899-2467498249-1593398681-1000\Software\Microsoft\Windows\CurrentVersion\Run]

"ISUSPM"="C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe -scheduler"

"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun"

"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe"

"Spotify Web Helper"="C:\Users\Fam.Smet\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IAStorIcon"="C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe"

"UpdateLBPShortCut"="C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe C:\Program Files\CyberLink\LabelPrint UpdateWithCreateOnce Software\CyberLink\LabelPrint\2.5"

"AVG9_TRAY"="C:\PROGRA~1\AVG\AVG9\avgtray.exe"

"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"

"Adobe ARM"="C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

"Launch LCore"="C:\Program Files\Logitech Gaming Software\LCore.exe /minimized"

"SunJavaUpdateSched"="C:\Program Files\Common Files\Java\Java Update\jusched.exe"

"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe -atboottime"

"LogMeIn Hamachi Ui"="C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe --auto-start"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]

"Registering MS MPEG4 ActiveX filter..."="C:\Windows\system32\regsvr32.exe /s C:\Windows\system32\mpg4ds32.ax"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"ISUSPM"="C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe -scheduler"

"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun"

"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe"

"Spotify Web Helper"="C:\Users\Fam.Smet\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"

==== Startup Registry Disabled ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Adobe ARM]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="Adobe ARM"

"hkey"="HKLM"

"command"="\"C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\AutoStartNPSAgent]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="AutoStartNPSAgent"

"hkey"="HKCU"

"command"="C:\\Program Files\\Samsung\\Samsung New PC Studio\\NPSAgent.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\CLMLServer]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="CLMLServer"

"hkey"="HKLM"

"command"="\"C:\\Program Files\\CyberLink\\Power2Go\\CLMLSvc.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Corel File Shell Monitor]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="Corel File Shell Monitor"

"hkey"="HKLM"

"command"="C:\\Program Files\\Corel\\Corel MediaOne\\CorelIOMonitor.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\CreativeTaskScheduler]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="CreativeTaskScheduler"

"hkey"="HKCU"

"command"="\"C:\\Program Files\\Creative\\Shared Files\\CTSched.exe\" /logon"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\DivXUpdate]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="DivXUpdate"

"hkey"="HKLM"

"command"="\"C:\\Program Files\\DivX\\DivX Update\\DivXUpdate.exe\" /CHECKNOW"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Easy-PrintToolBox]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="Easy-PrintToolBox"

"hkey"="HKLM"

"command"="C:\\Program Files\\Canon\\Easy-PrintToolBox\\BJPSMAIN.EXE /logon"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\GrooveMonitor]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="GrooveMonitor"

"hkey"="HKLM"

"command"="\"C:\\Program Files\\Microsoft Office\\Office12\\GrooveMonitor.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\LogMeIn Hamachi Ui]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="LogMeIn Hamachi Ui"

"hkey"="HKLM"

"command"="\"C:\\Program Files\\LogMeIn Hamachi\\hamachi-2-ui.exe\" --auto-start"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PlusService]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="PlusService"

"hkey"="HKLM"

"command"="C:\\Program Files\\Yuna Software\\Messenger Plus!\\PlusService.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\QuickTime Task]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="QuickTime Task"

"hkey"="HKLM"

"command"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Spotify Web Helper]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="Spotify Web Helper"

"hkey"="HKCU"

"command"="\"C:\\Users\\Fam.Smet\\AppData\\Roaming\\Spotify\\Data\\SpotifyWebHelper.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SunJavaUpdateSched]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="SunJavaUpdateSched"

"hkey"="HKLM"

"command"="\"C:\\Program Files\\Common Files\\Java\\Java Update\\jusched.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\UpdateP2GoShortCut]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="UpdateP2GoShortCut"

"hkey"="HKLM"

"command"="\"C:\\Program Files\\CyberLink\\Power2Go\\MUITransfer\\MUIStartMenu.exe\" \"C:\\Program Files\\CyberLink\\Power2Go\" UpdateWithCreateOnce \"SOFTWARE\\CyberLink\\Power2Go\\6.0\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]

"path"="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\HP Digital Imaging Monitor.lnk"

"backup"="C:\\Windows\\pss\\HP Digital Imaging Monitor.lnk.CommonStartup"

"backupExtension"=".CommonStartup"

"command"="C:\\PROGRA~1\\HP\\DIGITA~1\\bin\\hpqtra08.exe "

"item"="HP Digital Imaging Monitor"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^NkbMonitor.exe.lnk]

"path"="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\NkbMonitor.exe.lnk"

"backup"="C:\\Windows\\pss\\NkbMonitor.exe.lnk.CommonStartup"

"backupExtension"=".CommonStartup"

"command"="C:\\PROGRA~1\\Nikon\\PICTUR~1\\NKBMON~1.EXE "

"item"="NkbMonitor.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Users^Fam.Smet^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk]

"path"="C:\\Users\\Fam.Smet\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Dropbox.lnk"

"backup"="C:\\Windows\\pss\\Dropbox.lnk.Startup"

"backupExtension"=".Startup"

"command"="C:\\Users\\FAM~1.SME\\AppData\\Roaming\\Dropbox\\bin\\Dropbox.exe /systemstartup"

"item"="Dropbox"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Users^Fam.Smet^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Schermopname en Snel starten.lnk]

"path"="C:\\Users\\Fam.Smet\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\OneNote 2007 Schermopname en Snel starten.lnk"

"backup"="C:\\Windows\\pss\\OneNote 2007 Schermopname en Snel starten.lnk.Startup"

"backupExtension"=".Startup"

"command"="C:\\PROGRA~1\\MICROS~2\\Office12\\ONENOTEM.EXE /tsr"

"item"="OneNote 2007 Schermopname en Snel starten"

==== Startup Folders ======================

2013-10-14 15:36:36 1066 ----a-w- C:\Users\Fam.Smet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

==== Task Scheduler Jobs ======================

C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [05/02/2014 13:53]

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [08/09/2010 12:18]

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [08/09/2010 12:18]

C:\Windows\tasks\Registry Reviver-Fam.Smet-Startup.job --a------ C:\Program Files\ReviverSoft\Registry Reviver\RegistryReviver.exe []

C:\Windows\tasks\Registry Reviver.job --a------ C:\Program Files\ReviverSoft\Registry Reviver\RegistryReviver.exe []

C:\Windows\tasks\VIVADNLBAC.job --ahs---- [undetermined Task]

==== Other Scheduled Tasks ======================

"C:\Windows\system32\tasks\Adobe Flash Player Updater" [C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe]

"C:\Windows\system32\tasks\BrowserDefendert" [C:\Windows\system32\sc.exe start BrowserDefendert]

"C:\Windows\system32\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"]

"C:\Windows\system32\tasks\CreateChoiceProcessTask" [C:\Windows\System32\browserchoice.exe]

"C:\Windows\system32\tasks\EPUpdater" [C:\Users\FAM~1.SME\AppData\Roaming\BABSOL~1\Shared\BabMaint.exe]

"C:\Windows\system32\tasks\GoforFilesUpdate" [C:\Program Files\GoforFiles\GFFUpdater.exe]

"C:\Windows\system32\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files\Google\Update\GoogleUpdate.exe]

"C:\Windows\system32\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files\Google\Update\GoogleUpdate.exe]

"C:\Windows\system32\tasks\Razer_Game_Booster_AutoUpdate" [C:\Program Files\Razer\Razer Game Booster\AutoUpdate.exe]

"C:\Windows\system32\tasks\Registry Reviver" [C:\Program Files\ReviverSoft\Registry Reviver\RegistryReviver.exe]

"C:\Windows\system32\tasks\Registry Reviver-Fam.Smet-Startup" [C:\Program Files\ReviverSoft\Registry Reviver\RegistryReviver.exe]

"C:\Windows\system32\tasks\User_Feed_Synchronization-{D740361E-3079-4650-ADC9-3BB93DACE783}" [C:\Windows\system32\msfeedssync.exe]

"C:\Windows\system32\tasks\VIVADNLBAC" [C:\Windows\system32\rundll32.exe "C:\Windows\system32\cliconfg9.dll",Mnoqqyrz]

"C:\Windows\system32\tasks\{09F9CA38-A0CC-4A7D-8D98-98796625F1E5}" [F:\MANUAL INSTALLATION\MODEM DRIVERS\SPEEDTOUCH330_V2\CDrun.exe]

"C:\Windows\system32\tasks\{0DE01FFF-FF9C-48A9-A911-D90A4CC55842}" [F:\DRIVERS\SPEEDTOUCH330\menu.exe]

"C:\Windows\system32\tasks\{1470C725-BB15-4EAC-83BB-4A443427DB78}" [C:\Program Files\Thomson\SpeedTouch USB\stdialup.exe]

"C:\Windows\system32\tasks\{1F079A41-229B-4D21-8EDD-39CC4279A9B2}" [C:\Program Files\Thomson\SpeedTouch USB\stdialup.exe]

"C:\Windows\system32\tasks\{216B91A0-4368-4F3D-8763-12E461555584}" [F:\bcont.exe]

"C:\Windows\system32\tasks\{28716597-ED79-4CB1-8BE2-432A0A50359C}" [E:\drivers speedtouch\ST330v2\Setup.exe]

"C:\Windows\system32\tasks\{33591041-B459-4B1E-97E0-275FBBBDE121}" [F:\DRIVERS\SPEEDTOUCH330\menu.exe]

"C:\Windows\system32\tasks\{3A9A9B28-CB30-4BDD-9044-33AAC1EE8EE3}" [F:\MANUAL INSTALLATION\MODEM DRIVERS\SPEEDTOUCH330_V2\CDrun.exe]

"C:\Windows\system32\tasks\{3ADF3738-9F08-4587-9850-CB4382C2CA21}" [E:\drivers speedtouch\ST330v2\menu.exe]

"C:\Windows\system32\tasks\{5D428C32-C137-40AB-BCBB-1560CF28076A}" [C:\Program Files\Thomson\SpeedTouch USB\stdialup.exe]

"C:\Windows\system32\tasks\{6589CE05-C8E6-431A-8229-DA9941B7AD3F}" ["C:\Program Files\Internet Explorer\iexplore.exe" ]Download Skype op uw computer ? Mac, Windows, Linux ? Skype

"C:\Windows\system32\tasks\{6673C8DE-5418-487C-89A8-5B5E7D58502D}" [F:\DRIVERS\SPEEDTOUCH330\Setup.exe]

"C:\Windows\system32\tasks\{79623C5F-10C2-46AE-8941-5E74BDADFDD3}" [F:\MANUAL INSTALLATION\MODEM DRIVERS\SPEEDTOUCH330_V2\CDrun.exe]

"C:\Windows\system32\tasks\{82979CC9-AB78-4AF4-B92A-77E4757F7FF1}" [C:\Program Files\Thomson\SpeedTouch USB\stdialup.exe]

"C:\Windows\system32\tasks\{84670A05-E882-401E-A7F4-0A5A0F11F048}" [C:\Program Files\Thomson\SpeedTouch USB\stdialup.exe]

"C:\Windows\system32\tasks\{8F12D364-6A76-433C-8E70-954FE1F431A9}" [F:\DRIVERS\SPEEDTOUCH330\Setup.exe]

"C:\Windows\system32\tasks\{9311A7D3-7C5D-49A0-9F0C-1B1837D8F456}" ["c:\program files\internet explorer\iexplore.exe" ]Download Skype op uw computer ? Mac, Windows, Linux ? Skype

"C:\Windows\system32\tasks\{9A81FDB3-A685-44DC-886F-C53D58A96A99}" [C:\Program Files\Skype\Phone\Skype.exe]

"C:\Windows\system32\tasks\{9AEEFD57-4C2F-4151-ABB3-820C78F111A6}" [F:\DRIVERS\SPEEDTOUCH330\Setup.exe]

"C:\Windows\system32\tasks\{9F4A4F77-4C3D-4848-A30B-2D8B5304B103}" [F:\DRIVERS\SPEEDTOUCH330\menu.exe]

"C:\Windows\system32\tasks\{AFB41E8E-C70C-4827-A8B6-7980C5BD7A29}" [F:\MANUAL INSTALLATION\MODEM DRIVERS\SPEEDTOUCH330_V2\CDrun.exe]

"C:\Windows\system32\tasks\{B395DFB8-F215-4EE0-9BF1-8828A0C1CEFD}" [F:\bcont.exe]

"C:\Windows\system32\tasks\{C289FCDA-701C-4A07-A777-7266973CCD11}" [C:\Program Files\Thomson\SpeedTouch USB\stdialup.exe]

"C:\Windows\system32\tasks\{C2C134CA-053A-439C-BFA6-067C3BD13B80}" [F:\DRIVERS\SPEEDTOUCH330\CDrun.exe]

"C:\Windows\system32\tasks\{C305F4D2-4165-4813-9B3D-259EA8F8BD46}" [F:\DRIVERS\SPEEDTOUCH330\Setup.exe]

"C:\Windows\system32\tasks\{D064B46C-7C27-4C00-B856-E299DA8F6294}" [F:\DRIVERS\SPEEDTOUCH330\Setup.exe]

"C:\Windows\system32\tasks\{D7015872-B9F3-4EBB-8E50-3FF1CB4BA688}" [F:\MANUAL INSTALLATION\MODEM DRIVERS\SPEEDTOUCH330_V2\CDrun.exe]

"C:\Windows\system32\tasks\{E42BDF9C-DC63-40CE-A848-E790D61F7539}" [C:\Program Files\Activision\Call of Duty - World at War\CoDWaWmp.exe]

"C:\Windows\system32\tasks\{E867A476-AE5A-4898-A538-1E567CB564F2}" [F:\DRIVERS\SPEEDTOUCH330\Setup.exe]

"C:\Windows\system32\tasks\{ED45DA71-7AD8-4C42-8931-3870707EF832}" [C:\Program Files\Activision\Call of Duty - World at War\CoDWaWmp.exe]

"C:\Windows\system32\tasks\{F7A707CA-3E22-4908-BFCF-076BA6BFBDF0}" [F:\MANUAL INSTALLATION\MODEM DRIVERS\SPEEDTOUCH330_V2\CDrun.exe]

"C:\Windows\system32\tasks\{FE7CB072-A7A7-4DB6-8B09-A936DFBCB6CB}" [C:\Program Files\Thomson\SpeedTouch USB\stdialup.exe]

"C:\Windows\system32\tasks\Apple\AppleSoftwareUpdate" [C:\Program Files\Apple Software Update\SoftwareUpdate.exe]

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]

"fmconverter@gmail.com"="C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Firefox" [30/12/2013 14:05]

[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]

"smartwebprinting@hp.com"="C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3" [11/08/2011 15:36]

==== Firefox Extensions ======================

==== Firefox Plugins ======================

==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions

jbolfgndggfhhpbnkgnpjkfhinclbigj - C:\Program Files\Freemake\Freemake Video Converter\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx[08/11/2013 09:50]

joifgdlkhokekeaenpkaehbnjhncglbh - C:\ProgramData\Bcool\joifgdlkhokekeaenpkaehbnjhncglbh.crx[10/04/2012 14:36]

kdidombaedgpfiiedeimiebkmbilgmlc - C:\Program Files\DefaultTab\DefaultTab.crx[]

HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions

nikpibnbobmbdbheedjfogjlikpgpnhp - C:\Users\Fam.Smet\AppData\Roaming\DVDVideoSoft\DVDVideoSoftBrowserExtension.crx[28/11/2012 20:52]

Google Docs - Fam.Smet\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake

Google Drive - Fam.Smet\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf

YouTube - Fam.Smet\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo

Google Search - Fam.Smet\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf

AdBlock - Fam.Smet\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom

Freemake Video Converter - Fam.Smet\AppData\Local\Google\Chrome\User Data\Default\Extensions\jbolfgndggfhhpbnkgnpjkfhinclbigj

Bcool - Fam.Smet\AppData\Local\Google\Chrome\User Data\Default\Extensions\joifgdlkhokekeaenpkaehbnjhncglbh

DefaultTab - Fam.Smet\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc

DVDVideoSoft Browser Extension - Fam.Smet\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp

Google Wallet - Fam.Smet\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda

Gmail - Fam.Smet\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

==== IE Start and Search Settings ======================

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="http://www.google.com"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]

"Start Page Redirect Cache"="http://www.google.com"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]

"DefaultScope"="{2486B4FA-38AD-4BDA-8C83-D498803E6423}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE11SR"

{0CEAEAEA-987E-47C9-91D5-B39885A588D0} Yahoo! Search Url="http://search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms}"

{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} Delta Search Url="http://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=2A6E4061862D9489&affID=121564&tsp=4956"

{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} Unknown Url="Not_Found"

{1B839259-D94D-43B4-88E3-E5D5D16C7D45} Search Here Url="http://www.mysearchresults.com/search?c=3520&t=01&q={searchTerms}"

{2486B4FA-38AD-4BDA-8C83-D498803E6423} Search Url="http://www.startsearcher.com/?q={searchTerms}&src=IE"

{73ccfd25-abe2-4bdf-ac5d-28a470a4d234} Google Url="http://www.google.co.uk/search?hl=en&q={searchTerms}&meta=&rlz="

{afdbddaa-5d3f-42ee-b79c-185a7020515b} Unknown Url="Not_Found"

==== HijackThis Entries ======================

O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll

O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll

O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\7.3.124.0\BingExt.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll

O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O4 - HKLM\..\Run: [iAStorIcon] C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

O4 - HKLM\..\Run: [updateLBPShortCut] "C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"

O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe

O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [Launch LCore] C:\Program Files\Logitech Gaming Software\LCore.exe /minimized

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start

O4 - HKCU\..\Run: [iSUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler

O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [spotify Web Helper] "C:\Users\Fam.Smet\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

O4 - Startup: Dropbox.lnk = Fam.Smet\AppData\Roaming\Dropbox\bin\Dropbox.exe

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll

O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

O9 - Extra button: Toon of verberg HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O16 - DPF: {E6F480FC-BD44-4CBA-B74A-89AF7842937D} (SysInfo Class) - http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_cyri_4.5.1.0.cab

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe

O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe

O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe

O23 - Service: Intel® Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: LibUsb-Win32 - Daemon, Version 0.1.10.1 (libusbd) - libusb-Win32 - C:\Windows\system32\libusbd-nt.exe

O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files\LogMeIn Hamachi\LMIGuardianSvc.exe

O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe

O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe

O23 - Service: ProtexisLicensing - Unknown owner - C:\Windows\system32\PSIService.exe

O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

O23 - Service: SpeedTouch 330 Manager (st330service) - THmulti - C:\Program Files/Thomson/ST330/service/st330service.exe

O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

O23 - Service: TabletServicePen - Wacom Technology, Corp. - C:\Windows\system32\Pen_Tablet.exe

O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe

O23 - Service: WTouch Service (WTouchService) - Wacom Technology, Corp. - C:\Program Files\WTouch\WTouchService.exe

==== C:\zoek_backup content ======================

C:\zoek_backup (files=0 folders=0 0 bytes)

==== EOF on za 15/02/2014 at 16:23:04,88 ======================

kape · 15 februari 2014

Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe (hier en hier) kan je lezen hoe je dat doet.

Download Zoek.exe naar het bureaublad (niet de .zip- of .rar-versie)

Wanneer Internet Explorer of een andere browser of virusscanner melding geeft dat dit bestand onveilig zou zijn kun je negeren, dit is namelijk een onterechte waarschuwing.
Dubbelklik op Zoek.exe om de tool te starten.
Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
Kopieer nu onderstaande code en plak die in het grote invulvenster:
Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.

  C:\Windows\tasks\VIVADNLBAC.job;f
 C:\Windows\system32\tasks\BrowserDefendert;fs
 C:\Windows\system32\tasks\EPUpdater;fs
 C:\Windows\system32\tasks\VIVADNLBAC;fs
 Joifgdlkhokekeaenpkaehbnjhncglbh;chr
 C:\ProgramData\Bcool;fs
 Kdidombaedgpfiiedeimiebkmbilgmlc;chr
 C:\Program Files\DefaultTab;fs
 Nikpibnbobmbdbheedjfogjlikpgpnhp;chr
 C:\Users\Fam.Smet\AppData\Roaming\DVDVideoSoft;fs
 {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9};c
 {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E};c
 {1B839259-D94D-43B4-88E3-E5D5D16C7D45};c
 {2486B4FA-38AD-4BDA-8C83-D498803E6423};c
 {afdbddaa-5d3f-42ee-b79c-185a7020515b};c
 emptyfolderscheck;delete 
startupall; 
filesrcm;

Klik op de knop "Options" en vink nu de onderstaande opties aan.
Do a Quick Scan
Auto Clean
De optie "Scan All Users" staat standaard aangevinkt.
Klik nu op de knop "Run script".
Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
Mocht er geen logje verschijnen, start zoek.exe dan opnieuw en klik op de knop zoek-results.log, de log verschijnt dan alsnog.
Post het geopende logje in het volgende bericht.

smetsky · 16 februari 2014

Zoek.exe v5.0.0.0 Updated 15-February-2014

Tool run by Fam.Smet on zo 16/02/2014 at 16:20:22,89.

Microsoft Windows 7 Ultimate 6.1.7601 Service Pack 1 x86

Running in: Normal Mode Internet Access Detected

Launched: C:\Users\Fam.Smet\Desktop\zoek.scr [scan all users] [script inserted] [Checkboxes used]

==== Older Logs ======================

C:\zoek-results2014-02-15-152304.log 40934 bytes

C:\zoek-results2014-02-16-115930.log 40177 bytes

==== Empty Folders Check ======================

C:\Program Files\AGEIA Technologies deleted successfully

C:\Program Files\MSXML 4.0 deleted successfully

C:\Program Files\NuGardt Software deleted successfully

C:\Program Files\Razer deleted successfully

C:\Program Files\Common Files\eSellerate deleted successfully

C:\Users\Fam.Smet\AppData\Roaming\DefaultTab deleted successfully

C:\Users\Fam.Smet\AppData\Roaming\Google deleted successfully

C:\Users\Fam.Smet\AppData\Roaming\Samsung deleted successfully

C:\Users\Fam.Smet\AppData\Roaming\Windows Live Writer deleted successfully

C:\Windows\serviceprofiles\Localservice\AppData\Roaming\Xfire deleted successfully

C:\Users\Fam.Smet\AppData\Local\GHISLER deleted successfully

C:\Users\Fam.Smet\AppData\Local\MigWiz deleted successfully

C:\Users\Fam.Smet\AppData\Local\nvmcstogfx deleted successfully

C:\Users\Fam.Smet\AppData\Local\PackageAware deleted successfully

C:\Users\Fam.Smet\AppData\Local\Pixology deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-3116469899-2467498249-1593398681-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} deleted successfully

HKEY_USERS\S-1-5-21-3116469899-2467498249-1593398681-1000\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} deleted successfully

HKEY_USERS\S-1-5-21-3116469899-2467498249-1593398681-1000\Software\Microsoft\Internet Explorer\SearchScopes\{1B839259-D94D-43B4-88E3-E5D5D16C7D45} deleted successfully

HKEY_USERS\S-1-5-21-3116469899-2467498249-1593398681-1000\Software\Microsoft\Internet Explorer\SearchScopes\{2486B4FA-38AD-4BDA-8C83-D498803E6423} deleted successfully

HKEY_USERS\S-1-5-21-3116469899-2467498249-1593398681-1000\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} deleted successfully

HKEY_USERS\S-1-5-21-3116469899-2467498249-1593398681-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0CEAEAEA-987E-47C9-91D5-B39885A588D0} deleted successfully

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BrowserDefendert deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\BrowserDefendert deleted successfully

==== Deleting Files \ Folders ======================

C:\Program Files\DefaultTab not found

C:\Windows\system32\tasks\BrowserDefendert deleted

C:\Windows\system32\tasks\EPUpdater deleted

C:\Windows\system32\tasks\VIVADNLBAC deleted

C:\ProgramData\Bcool deleted

C:\Users\Fam.Smet\AppData\Roaming\DVDVideoSoft deleted

C:\Program Files\Conduit deleted

C:\Program Files\Common Files\DVDVideoSoft\bin deleted

C:\Program Files\OApps deleted

C:\found.000 deleted

C:\Users\Fam.Smet\AppData\Roaming\RSBot_Accounts.ini deleted

C:\Users\Fam.Smet\AppData\Roaming\RSBuddy Login.ini deleted

C:\Users\Fam.Smet\AppData\Roaming\RSBuddy_smetje.ini deleted

C:\Users\Fam.Smet\AppData\Roaming\GoforFiles deleted

C:\Users\Fam.Smet\AppData\Roaming\DVDVideoSoftIEHelpers deleted

C:\Users\Fam.Smet\AppData\Roaming\GetRightToGo deleted

C:\Users\Fam.Smet\AppData\Local\Conduit deleted

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bcool deleted

C:\Users\Fam.Smet\AppData\LocalLow\AskToolbar deleted

C:\Users\Fam.Smet\AppData\LocalLow\Delta deleted

C:\Users\Fam.Smet\AppData\LocalLow\Conduit deleted

C:\Windows\system32\config\systemprofile\AppData\LocalLow\Application Updater deleted

C:\Windows\system32\Tasks\GoforFilesUpdate deleted

C:\Windows\System32\AI_RecycleBin deleted

C:\Windows\System32\dlo1805.tmp deleted

C:\Windows\System32\SET8864.tmp deleted

C:\Windows\System32\SET994D.tmp deleted

C:\Windows\System32\tmp2981.tmp deleted

C:\Windows\System32\tmp29A2.tmp deleted

C:\Windows\System32\searchplugins deleted

C:\Windows\System32\Extensions deleted

"C:\Windows\tasks\VIVADNLBAC.job" not deleted

"C:\Users\Fam.Smet\AppData\Local\8tw1pkp6o6" deleted

"C:\Users\Fam.Smet\AppData\Local\{02104578-F49C-48B3-B689-7DFA9D136D46}" deleted

"C:\Users\Fam.Smet\AppData\Local\{0EB7BB5F-3283-4761-BA43-541FC64B3606}" deleted

"C:\Users\Fam.Smet\AppData\Local\{4E9CDAD5-698C-47F7-A4CE-604A2780CF85}" deleted

"C:\Users\Fam.Smet\AppData\Local\{6365B8E7-C380-43E3-93B4-213AB009D105}" deleted

"C:\Users\Fam.Smet\AppData\Local\{69460A3E-7C27-4F14-8C99-62FE8F512EC9}" deleted

"C:\Users\Fam.Smet\AppData\Local\{9062C817-B6B0-4966-9001-7871C40050C8}" deleted

"C:\Users\Fam.Smet\AppData\Local\{A02CEEB8-D48B-46D2-98A8-866C6929CED0}" deleted

"C:\Users\Fam.Smet\AppData\Local\{A7480FA0-1B0D-4D3C-8262-7A680AD0C880}" deleted

"C:\Users\Fam.Smet\AppData\Local\{C4A91D52-063E-4BC2-B363-DE012D098A9C}" deleted

"C:\Users\Fam.Smet\AppData\Local\{C716DFEB-36F1-411E-BAC7-F93FFA88776E}" deleted

"C:\Users\Fam.Smet\AppData\Local\{C9CD48CD-BD57-4ACF-A3F4-7FFC0FFA3904}" deleted

"C:\Users\Fam.Smet\AppData\Local\{D22F0BB4-3A27-4881-9C01-7204A9AB29A9}" deleted

"C:\Users\Fam.Smet\AppData\Local\{D29E2164-1A41-4C1F-AD5F-D4C0E1E5A8E7}" deleted

"C:\Users\Fam.Smet\AppData\Local\{D88B8363-855E-426E-A22A-756D0F103827}" deleted

"C:\Users\Fam.Smet\AppData\Local\{ED92AB33-F367-4254-8E4D-2DC180FE9975}" deleted

"C:\Users\Fam.Smet\AppData\Local\{F4FC0A41-5BFE-4607-A547-A0AF28117830}" deleted

"C:\ProgramData\8tw1pkp6o6" deleted