trage laptop

snowym · 20 februari 2014

Aangezien jullie mij al een paar keer goed geholpen hebben hierbij mijn HIJack log: hij is niet meer vooruit te branden en de flash crasht steeds.

Logfile of random's system information tool 1.09 (written by random/random)

Run by Maaike at 2014-02-20 18:17:29

Microsoft Windows 7 Home Premium Service Pack 1

System drive C: has 219 GB (75%) free of 291 GB

Total RAM: 1788 MB (73% free)

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 18:18:04, on 20-2-2014

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v10.0 (10.00.9200.16798)

Boot mode: Normal

Running processes:

C:\Users\Maaike\AppData\Local\Google\Chrome Frame\Application\32.0.1700.107\chrome_frame_helper.exe

C:\Users\Maaike\AppData\Roaming\Dropbox\bin\Dropbox.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

C:\Users\Maaike\AppData\Local\Google\Update\1.3.22.5\GoogleCrashHandler.exe

C:\Program Files (x86)\Internet Explorer\IELowutil.exe

C:\Program Files\trend micro\Maaike.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:Tabs

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

F2 - REG:system.ini: UserInit=userinit.exe,

O1 - Hosts: ::1 localhost

O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll

O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll

O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll

O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

O4 - HKCU\..\Run: [Google Update] "C:\Users\Maaike\AppData\Local\Google\Update\GoogleUpdate.exe" /c

O4 - HKCU\..\Run: [ChromeFrameHelper] "C:\Users\Maaike\AppData\Local\Google\Chrome Frame\Application\32.0.1700.107\chrome_frame_helper.exe" --startup

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-18\..\Run: [AROReminder] C:\Program Files (x86)\ARO 2012\aro.exe -rem (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [AROReminder] C:\Program Files (x86)\ARO 2012\aro.exe -rem (User 'Default user')

O4 - Startup: Dropbox.lnk = Maaike\AppData\Roaming\Dropbox\bin\Dropbox.exe

O8 - Extra context menu item: Converteren naar Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Doel van koppeling converteren naar Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

O8 - Extra context menu item: Doel van koppeling toevoegen aan bestaande PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Koppelingsdoel converteren naar Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

O8 - Extra context menu item: Koppelingsdoel converteren naar bestaande PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

O8 - Extra context menu item: Toevoegen aan bestaand PDF-bestand - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Toevoegen aan bestaande PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html

O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll

O9 - Extra button: Toon of verberg HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O16 - DPF: {45A0A292-ECC6-4D8F-9EA9-A4BD411D24C1} - http://www6.king.com/ctl/kingcomie.cab

O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - http://game.zylom.com/activex/zylomgamesplayer.cab

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

O18 - Protocol: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Users\Maaike\AppData\Local\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL

O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

O20 - AppInit_DLLs: acaptuser32.dll

O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\AESTSr64.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe

O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe

O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\STacSV64.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--

End of file - 11720 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe

%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16

wininit.exe

%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16

winlogon.exe

C:\Windows\system32\services.exe

C:\Windows\system32\lsass.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\system32\atiesrxx.exe

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\STacSV64.exe

C:\Windows\system32\svchost.exe -k GPSvcGroup

C:\Windows\system32\svchost.exe -k NetworkService

atieclxx

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

"taskhost.exe"

C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\AESTSr64.exe

"C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe"

C:\Windows\SysWOW64\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt

"C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe"

C:\Windows\System32\svchost.exe -k HPZ12

"C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler.exe"

"C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler64.exe"

C:\Windows\System32\svchost.exe -k HPZ12

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Windows\system32\svchost.exe -k imgsvc

C:\Windows\System32\svchost.exe -k WerSvcGroup

"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"

WLIDSvcM.exe 2220

"C:\Windows\system32\Dwm.exe"

C:\Windows\Explorer.EXE

"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice

"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun

"C:\Users\Maaike\AppData\Local\Google\Chrome Frame\Application\32.0.1700.107\chrome_frame_helper.exe" --startup

"C:\Users\Maaike\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup

"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

"C:\Users\Maaike\AppData\Local\Google\Update\1.3.22.5\GoogleCrashHandler.exe"

"C:\Users\Maaike\AppData\Local\Google\Update\1.3.22.5\GoogleCrashHandler64.exe"

"C:\Program Files\Windows Media Player\wmpnetwk.exe"

C:\Windows\system32\SearchIndexer.exe /Embedding

C:\Windows\System32\svchost.exe -k LocalServicePeerNet

C:\Windows\System32\svchost.exe -k NetworkServiceAndNoImpersonation

C:\Windows\System32\svchost.exe -k secsvcs

"C:\Program Files (x86)\Internet Explorer\IELowutil.exe" -embedding

taskeng.exe {FF859C6D-DF44-4407-B15E-D3B237916F06}

taskeng.exe {53079449-95EA-467A-8B05-A90139D944FA}

taskeng.exe {DA80C627-ADB2-41F5-BB34-EEA9B62D7B2B}

taskeng.exe {DA2971F7-55A2-4B0B-AFC4-F2DFAA094939}

"C:\Users\Maaike\Downloads\RSITx64.exe"

C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job

C:\Windows\tasks\Driver Booster Update.job

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3100507608-2638254785-3817670561-1001Core.job

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3100507608-2638254785-3817670561-1001UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]

ExplorerWnd Helper - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll [2013-12-24 2486592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]

Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2013-12-13 256080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

Java Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-09-05 43520]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]

HP Print Enhancer - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-10-22 328248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]

Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-01-30 62376]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]

Java Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-12-18 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Aanmeldhulp voor Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]

Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2013-12-13 194128]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]

Adobe PDF Conversion Toolbar Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-08 351864]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

Java Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-12-18 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]

SmartSelect Class - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-08 351864]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]

HP Smart BHO Class - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-10-22 517688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2013-12-13 256080]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]

{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-08 351864]

{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2013-12-13 194128]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2011-09-22 4035152]

"WirelessAssistant"=c:\program files (x86)\hewlett-packard\hp wireless assistant\hpwamain.exe [2009-07-23 498744]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]

"Google Update"=C:\Users\Maaike\AppData\Local\Google\Update\GoogleUpdate.exe [2010-04-18 136176]

"ChromeFrameHelper"=C:\Users\Maaike\AppData\Local\Google\Chrome Frame\Application\32.0.1700.107\chrome_frame_helper.exe [2014-02-02 83784]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0]

c:\program files (x86)\adobe\acrobat 9.0\acrobat\acrotray.exe [2013-05-08 642664]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]

C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Easybits Recovery]

c:\program files (x86)\easybits for kids\ezrecover.exe [2009-06-22 60464]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]

C:\Users\Maaike\AppData\Local\Google\Update\GoogleUpdate.exe [2010-04-18 136176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QlbCtrl.exe]

c:\program files (x86)\hewlett-packard\hp quick launch buttons\qlbctrl.exe [2009-06-24 320056]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QPService]

c:\program files (x86)\hp\quickplay\qpservice.exe [2009-06-23 468264]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

C:\Program Files (x86)\QuickTime\QTTask.exe [2010-11-29 421888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RIMBBLaunchAgent.exe]

C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe [2011-11-02 90448]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]

C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]

C:\Program Files (x86)\Skype\Phone\Skype.exe [2012-07-13 17418928]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]

c:\program files (x86)\ati technologies\ati.ace\core-static\clistart.exe [2009-07-02 98304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]

C:\Program Files\synaptics\syntp\syntpenh.exe [2009-07-15 1815848]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SysTrayApp]

c:\program files\idt\wdm\sttray64.exe [2009-07-22 450048]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Trend Micro RUBotted V2.0 Beta]

C:\Program Files (x86)\Trend Micro\RUBotted\RUBottedGUI.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WirelessAssistant]

c:\program files (x86)\hewlett-packard\hp wireless assistant\hpwamain.exe [2009-07-23 498744]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]

C:\PROGRA~2\Hp\DIGITA~1\bin\hpqtra08.exe [2009-05-21 275768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Maaike^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2007 Schermopname en Snel starten.lnk]

C:\PROGRA~2\MICROS~1\Office12\ONENOTEM.EXE [2009-02-26 97680]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]

""= []

"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]

C:\Users\Maaike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

Dropbox.lnk - C:\Users\Maaike\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

"AppInit_DLLs"="acaptuser64.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\Windows\system32\wpdshserviceobj.dll [2010-11-20 115200]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]

"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"WallpaperStyle"=2

"DisableLockWorkstation"=0

"DisableChangePassword"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"ConsentPromptBehaviorAdmin"=0

"ConsentPromptBehaviorUser"=3

"EnableUIADesktopToggle"=0

"PromptOnSecureDesktop"=0

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

"HideFastUserSwitching"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoActiveDesktop"=1

"NoActiveDesktopChanges"=1

"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]

"vidc.mrle"=msrle32.dll

"vidc.msvc"=msvidc32.dll

"msacm.imaadpcm"=imaadp32.acm

"msacm.msg711"=msg711.acm

"msacm.msgsm610"=msgsm32.acm

"msacm.msadpcm"=msadp32.acm

"midimapper"=midimap.dll

"wavemapper"=msacm32.drv

"VIDC.UYVY"=msyuv.dll

"VIDC.YUY2"=msyuv.dll

"VIDC.YVYU"=msyuv.dll

"VIDC.IYUV"=iyuv_32.dll

"vidc.i420"=iyuv_32.dll

"VIDC.YVU9"=tsbyuv.dll

"msacm.l3acm"=C:\Windows\System32\l3codeca.acm

"MSVideo8"=VfWWDM32.dll

"wave1"=wdmaud.drv

"midi1"=wdmaud.drv

"mixer1"=wdmaud.drv

"aux1"=wdmaud.drv

"wave"=wdmaud.drv

"midi"=wdmaud.drv

"mixer"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 3 months======

2014-02-15 21:45:30 ----A---- C:\Windows\system32\vbscript.dll

2014-02-15 21:45:29 ----A---- C:\Windows\SYSWOW64\vbscript.dll

2014-02-15 21:41:45 ----A---- C:\Windows\SYSWOW64\msrating.dll

2014-02-15 21:41:44 ----A---- C:\Windows\system32\msrating.dll

2014-02-15 21:41:43 ----A---- C:\Windows\SYSWOW64\ieui.dll

2014-02-15 21:41:42 ----A---- C:\Windows\system32\ieui.dll

2014-02-15 21:41:36 ----A---- C:\Windows\SYSWOW64\iesetup.dll

2014-02-15 21:41:35 ----A---- C:\Windows\SYSWOW64\iernonce.dll

2014-02-15 21:41:35 ----A---- C:\Windows\system32\iesetup.dll

2014-02-15 21:41:35 ----A---- C:\Windows\system32\iernonce.dll

2014-02-15 21:41:34 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe

2014-02-15 21:41:33 ----A---- C:\Windows\SYSWOW64\iesysprep.dll

2014-02-15 21:41:33 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe

2014-02-15 21:41:33 ----A---- C:\Windows\system32\ie4uinit.exe

2014-02-15 21:41:32 ----A---- C:\Windows\system32\iesysprep.dll

2014-02-15 21:41:30 ----A---- C:\Windows\SYSWOW64\iertutil.dll

2014-02-15 21:41:26 ----A---- C:\Windows\system32\iertutil.dll

2014-02-15 21:41:11 ----A---- C:\Windows\SYSWOW64\msfeeds.dll

2014-02-15 21:41:10 ----A---- C:\Windows\system32\msfeeds.dll

2014-02-15 21:41:08 ----A---- C:\Windows\SYSWOW64\jscript.dll

2014-02-15 21:41:08 ----A---- C:\Windows\system32\jscript.dll

2014-02-15 21:41:04 ----A---- C:\Windows\system32\jscript9.dll

2014-02-15 21:41:00 ----A---- C:\Windows\SYSWOW64\jscript9.dll

2014-02-15 21:40:56 ----A---- C:\Windows\SYSWOW64\urlmon.dll

2014-02-15 21:40:54 ----A---- C:\Windows\system32\urlmon.dll

2014-02-15 21:40:48 ----A---- C:\Windows\system32\jsproxy.dll

2014-02-15 21:40:46 ----A---- C:\Windows\SYSWOW64\jsproxy.dll

2014-02-15 21:40:44 ----A---- C:\Windows\SYSWOW64\wininet.dll

2014-02-15 21:40:41 ----A---- C:\Windows\system32\wininet.dll

2014-02-15 21:40:37 ----A---- C:\Windows\SYSWOW64\ieframe.dll

2014-02-15 21:40:28 ----A---- C:\Windows\system32\ieframe.dll

2014-02-15 21:40:16 ----A---- C:\Windows\system32\mshtml.dll

2014-02-15 21:39:59 ----A---- C:\Windows\SYSWOW64\mshtml.dll

2014-02-13 22:34:57 ----A---- C:\Windows\system32\msxml3.dll

2014-02-13 22:34:56 ----A---- C:\Windows\SYSWOW64\msxml3r.dll

2014-02-13 22:34:56 ----A---- C:\Windows\SYSWOW64\msxml3.dll

2014-02-13 22:34:56 ----A---- C:\Windows\system32\msxml3r.dll

2014-02-13 22:34:37 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe

2014-02-13 22:34:37 ----A---- C:\Windows\system32\RMActivate_isv.exe

2014-02-13 22:34:37 ----A---- C:\Windows\system32\RMActivate.exe

2014-02-13 22:34:36 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe

2014-02-13 22:34:36 ----A---- C:\Windows\SYSWOW64\RMActivate.exe

2014-02-13 22:34:36 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe

2014-02-13 22:34:35 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe

2014-02-13 22:34:35 ----A---- C:\Windows\system32\secproc_isv.dll

2014-02-13 22:34:35 ----A---- C:\Windows\system32\RMActivate_ssp.exe

2014-02-13 22:34:34 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll

2014-02-13 22:34:34 ----A---- C:\Windows\system32\secproc.dll

2014-02-13 22:34:34 ----A---- C:\Windows\system32\msdrm.dll

2014-02-13 22:34:32 ----A---- C:\Windows\SYSWOW64\secproc.dll

2014-02-13 22:34:32 ----A---- C:\Windows\SYSWOW64\msdrm.dll

2014-02-13 22:34:32 ----A---- C:\Windows\system32\secproc_ssp_isv.dll

2014-02-13 22:34:32 ----A---- C:\Windows\system32\secproc_ssp.dll

2014-02-13 22:34:31 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll

2014-02-13 22:34:31 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll

2014-02-13 22:33:55 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll

2014-02-13 22:33:54 ----A---- C:\Windows\system32\d3d10warp.dll

2014-02-13 22:33:53 ----A---- C:\Windows\SYSWOW64\d2d1.dll

2014-02-13 22:33:53 ----A---- C:\Windows\system32\d2d1.dll

2014-02-13 22:28:59 ----A---- C:\Windows\system32\drivers\ssadwhnt.sys

2014-02-13 22:28:59 ----A---- C:\Windows\system32\drivers\ssadmdm.sys

2014-02-13 22:28:59 ----A---- C:\Windows\system32\drivers\ssadmdfl.sys

2014-02-13 22:28:59 ----A---- C:\Windows\system32\drivers\ssadcmnt.sys

2014-02-13 22:28:59 ----A---- C:\Windows\system32\drivers\ssadbus.sys

2014-02-13 22:28:59 ----A---- C:\Windows\system32\drivers\ssadadb.sys

2014-02-13 22:28:58 ----A---- C:\Windows\system32\drivers\ssadserd.sys

2014-02-13 20:57:07 ----A---- C:\Windows\system32\WdfCoInstaller01005.dll

2014-02-13 20:57:07 ----A---- C:\Windows\system32\drivers\WdfCoInstaller01005.dll

2014-02-13 20:57:06 ----A---- C:\Windows\system32\drivers\ssadcm.sys

2014-02-13 20:43:38 ----A---- C:\Windows\system32\drivers\ssadwh.sys

2014-02-13 20:35:09 ----D---- C:\Program Files (x86)\MyFree Codec

2014-02-13 20:33:18 ----A---- C:\Windows\SYSWOW64\dgderapi.dll

2014-01-27 14:18:53 ----D---- C:\ProgramData\GARMIN

2014-01-27 14:04:33 ----D---- C:\Users\Maaike\AppData\Roaming\DropboxMaster

2014-01-27 14:02:52 ----D---- C:\Users\Maaike\AppData\Roaming\Dropbox

2014-01-23 18:31:12 ----A---- C:\Windows\MusiccityDownload.exe

2014-01-23 18:31:12 ----A---- C:\Windows\MASetupCaller.dll

2014-01-19 19:34:22 ----D---- C:\ProgramData\Oracle

2014-01-19 19:34:00 ----A---- C:\Windows\SYSWOW64\javaws.exe

2014-01-19 19:33:54 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll

2014-01-19 19:33:54 ----A---- C:\Windows\SYSWOW64\javaw.exe

2014-01-19 19:33:54 ----A---- C:\Windows\SYSWOW64\java.exe

2014-01-18 23:19:10 ----D---- C:\Program Files (x86)\GCTool

2014-01-18 22:10:38 ----A---- C:\Windows\system32\drivers\usbport.sys

2014-01-18 22:10:38 ----A---- C:\Windows\system32\drivers\usbehci.sys

2014-01-18 22:10:37 ----A---- C:\Windows\system32\drivers\usbuhci.sys

2014-01-18 22:10:37 ----A---- C:\Windows\system32\drivers\usbohci.sys

2014-01-18 22:10:37 ----A---- C:\Windows\system32\drivers\usbhub.sys

2014-01-18 22:10:37 ----A---- C:\Windows\system32\drivers\usbccgp.sys

2014-01-18 22:10:36 ----A---- C:\Windows\system32\drivers\usbd.sys

2014-01-18 22:10:34 ----A---- C:\Windows\system32\win32k.sys

2014-01-18 22:10:28 ----A---- C:\Windows\system32\drivers\netio.sys

2014-01-14 16:29:35 ----D---- C:\Program Files (x86)\Garmin GPS Plugin

2014-01-14 16:29:27 ----D---- C:\Program Files\Garmin GPS Plugin

2014-01-14 16:28:33 ----D---- C:\Program Files (x86)\Garmin

2014-01-14 16:26:53 ----D---- C:\Users\Maaike\AppData\Roaming\Garmin

2014-01-11 14:54:18 ----D---- C:\Users\Maaike\AppData\Roaming\gsak

2014-01-11 14:53:55 ----A---- C:\Windows\SYSWOW64\ChilkatCharset.dll

2014-01-11 14:53:55 ----A---- C:\Windows\SYSWOW64\ChilkatBz2.dll

2014-01-11 14:53:54 ----A---- C:\Windows\SYSWOW64\ChilkatZip2.dll

2014-01-11 14:53:54 ----A---- C:\Windows\SYSWOW64\ChilkatHttp.dll

2014-01-11 14:53:54 ----A---- C:\Windows\SYSWOW64\ChilkatFtp2.dll

2014-01-11 14:53:54 ----A---- C:\Windows\SYSWOW64\ChilkatCsv.dll

2014-01-11 14:53:53 ----A---- C:\Windows\SYSWOW64\midas.dll

2014-01-11 14:53:43 ----D---- C:\Program Files (x86)\gsak

2014-01-07 16:55:11 ----A---- C:\Windows\SYSWOW64\CmdLineExt.dll

2014-01-07 16:53:40 ----D---- C:\Windows\SYSWOW64\URTTEMP

2014-01-07 16:48:48 ----D---- C:\Program Files (x86)\2K Games

2013-12-28 18:59:32 ----D---- C:\Program Files (x86)\ESET

2013-12-28 14:55:13 ----D---- C:\ProgramData\Razer

2013-12-27 00:27:02 ----A---- C:\Windows\system32\RtNicProp64.dll

2013-12-27 00:27:02 ----A---- C:\Windows\system32\drivers\Rt64win7.sys

2013-12-24 23:25:47 ----A---- C:\Windows\SYSWOW64\tzres.dll

2013-12-24 23:25:47 ----A---- C:\Windows\system32\tzres.dll

2013-12-24 23:25:32 ----A---- C:\Windows\system32\msieftp.dll

2013-12-24 23:25:31 ----A---- C:\Windows\SYSWOW64\msieftp.dll

2013-12-24 23:25:25 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll

2013-12-24 23:25:25 ----A---- C:\Windows\system32\WMPhoto.dll

2013-12-24 23:25:22 ----A---- C:\Windows\SYSWOW64\imagehlp.dll

2013-12-24 23:25:22 ----A---- C:\Windows\system32\imagehlp.dll

2013-12-24 23:25:18 ----A---- C:\Windows\system32\drivers\portcls.sys

2013-12-24 23:25:18 ----A---- C:\Windows\system32\drivers\drmk.sys

2013-12-24 23:24:31 ----A---- C:\Windows\system32\scrrun.dll

2013-12-24 23:24:31 ----A---- C:\Windows\system32\cscript.exe

2013-12-24 23:24:30 ----A---- C:\Windows\SYSWOW64\wscript.exe

2013-12-24 23:24:30 ----A---- C:\Windows\system32\wscript.exe

2013-12-24 23:24:29 ----A---- C:\Windows\SYSWOW64\scrrun.dll

2013-12-24 23:24:29 ----A---- C:\Windows\SYSWOW64\cscript.exe

2013-12-21 00:38:01 ----A---- C:\Windows\SYSWOW64\wmploc.DLL

2013-12-21 00:38:01 ----A---- C:\Windows\SYSWOW64\wmp.dll

2013-12-21 00:38:01 ----A---- C:\Windows\system32\wmploc.DLL

2013-12-21 00:38:01 ----A---- C:\Windows\system32\wmp.dll

2013-12-07 15:55:22 ----A---- C:\Windows\system32\sdnclean64.exe

2013-12-07 15:55:16 ----D---- C:\ProgramData\Spybot - Search & Destroy

2013-12-07 00:31:41 ----D---- C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}

2013-12-06 17:13:01 ----SHD---- C:\$RECYCLE.BIN

2013-12-06 17:07:53 ----D---- C:\Windows\Temp

2013-12-04 15:23:53 ----D---- C:\Users\Maaike\AppData\Roaming\Malwarebytes

2013-12-04 15:23:39 ----D---- C:\ProgramData\Malwarebytes

2013-11-23 20:56:55 ----D---- C:\zoek_backup

2013-11-23 15:42:39 ----D---- C:\rsit

2013-11-23 15:42:39 ----D---- C:\Program Files\trend micro

======List of files/folders modified in the last 3 months======

2014-02-20 18:17:49 ----D---- C:\Windows\Prefetch

2014-02-20 18:15:44 ----D---- C:\Windows

2014-02-20 15:04:41 ----D---- C:\Windows\system32\config

2014-02-19 10:11:33 ----D---- C:\Windows\Microsoft.NET

2014-02-19 10:11:31 ----RSD---- C:\Windows\assembly

2014-02-17 22:02:38 ----SHD---- C:\Windows\Installer

2014-02-17 22:02:38 ----HD---- C:\Config.Msi

2014-02-17 21:57:27 ----RD---- C:\Program Files (x86)

2014-02-16 20:26:25 ----D---- C:\Program Files (x86)\Samsung

2014-02-16 01:08:28 ----D---- C:\Windows\SysWOW64

2014-02-15 22:36:57 ----D---- C:\Windows\Panther

2014-02-15 22:36:57 ----D---- C:\Windows\inf

2014-02-15 22:36:51 ----D---- C:\Windows\SoftwareDistribution

2014-02-15 22:34:29 ----D---- C:\Windows\winsxs

2014-02-15 22:30:14 ----D---- C:\Windows\System32

2014-02-15 22:30:12 ----D---- C:\Windows\SYSWOW64\nl-NL

2014-02-15 22:30:12 ----D---- C:\Windows\system32\nl-NL

2014-02-15 22:30:10 ----D---- C:\Program Files\Internet Explorer

2014-02-15 22:30:10 ----D---- C:\Program Files (x86)\Internet Explorer

2014-02-15 22:18:58 ----A---- C:\Windows\system32\PerfStringBackup.INI

2014-02-15 21:49:28 ----D---- C:\Windows\system32\catroot

2014-02-15 21:43:34 ----D---- C:\Windows\system32\catroot2

2014-02-15 20:59:37 ----SHD---- C:\System Volume Information

2014-02-15 20:57:33 ----D---- C:\ProgramData\ProductData

2014-02-15 00:47:31 ----D---- C:\Windows\debug

2014-02-13 22:43:27 ----D---- C:\Windows\system32\drivers

2014-02-13 22:30:05 ----D---- C:\Windows\system32\DriverStore

2014-02-13 21:18:33 ----D---- C:\ProgramData\Microsoft Help

2014-02-13 20:50:27 ----D---- C:\Windows\system32\MRT

2014-02-13 20:49:38 ----A---- C:\Windows\system32\MRT.exe

2014-02-13 20:33:15 ----HD---- C:\Program Files (x86)\InstallShield Installation Information

2014-02-13 20:32:13 ----D---- C:\ProgramData\Samsung

2014-02-13 20:11:26 ----D---- C:\Users\Maaike\AppData\Roaming\Samsung

2014-02-07 16:33:14 ----A---- C:\Windows\SYSWOW64\Redemption.dll

2014-02-07 14:22:12 ----D---- C:\Windows\system32\Tasks

2014-02-07 14:18:09 ----D---- C:\Program Files (x86)\Common Files

2014-02-05 10:29:45 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe

2014-01-31 21:23:30 ----SD---- C:\ProgramData\Microsoft

2014-01-28 15:39:06 ----D---- C:\Program Files (x86)\Google

2014-01-27 14:18:53 ----HD---- C:\ProgramData

2014-01-27 14:07:25 ----D---- C:\UITSLUITEND VOOR DATA

2014-01-27 13:51:52 ----D---- C:\Program Files\CCleaner

2014-01-19 23:23:38 ----D---- C:\Windows\Logs

2014-01-19 19:33:54 ----D---- C:\Program Files (x86)\Java

2014-01-14 16:32:30 ----D---- C:\Program Files\DIFX

2014-01-14 16:29:27 ----RD---- C:\Program Files

2014-01-07 16:54:33 ----D---- C:\Windows\registration

2013-12-28 15:00:32 ----D---- C:\Program Files (x86)\Trend Micro

2013-12-28 14:55:19 ----D---- C:\ProgramData\IObit

2013-12-28 14:55:18 ----D---- C:\Program Files (x86)\IObit

2013-12-28 14:54:13 ----D---- C:\Users\Maaike\AppData\Roaming\IObit

2013-12-27 21:39:03 ----D---- C:\Windows\Tasks

2013-12-27 21:39:03 ----D---- C:\Windows\system32\wfp

2013-12-27 21:39:00 ----D---- C:\Windows\system32\wbem

2013-12-27 21:37:17 ----D---- C:\Windows\system32\CodeIntegrity

2013-12-23 15:20:21 ----SHD---- C:\boot

2013-12-21 00:41:52 ----D---- C:\Program Files\Windows Media Player

2013-12-21 00:41:52 ----D---- C:\Program Files (x86)\Windows Media Player

2013-12-18 06:13:56 ----N---- C:\Windows\system32\MpSigStub.exe

2013-12-14 01:22:56 ----D---- C:\Windows\system32\drivers\etc

2013-12-12 16:18:58 ----D---- C:\Windows\SYSWOW64\wbem

2013-12-12 16:18:54 ----D---- C:\Windows\system32\Macromed

2013-12-12 16:18:50 ----D---- C:\Program Files\Microsoft Silverlight

2013-12-12 16:18:47 ----D---- C:\Program Files\Common Files\Microsoft Shared

2013-12-12 16:18:46 ----D---- C:\Program Files (x86)\QuickTime

2013-12-12 16:18:41 ----D---- C:\Program Files (x86)\Microsoft Silverlight

2013-12-12 16:16:26 ----D---- C:\ProgramData\Apple Computer

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2009-05-05 16440]

R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2011-08-04 62496]

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]

R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2011-08-04 146432]

R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2011-08-04 38288]

R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]

R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2011-08-04 187632]

R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2009-09-22 1484800]

R3 AtiHdmiService;ATI Service for HD Audio Codec; C:\Windows\system32\drivers\AtiHdmi.sys [2009-06-05 114192]

R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-07-02 6036480]

R3 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2011-08-09 202576]

R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2009-04-29 18432]

R3 RimVSerPort;RIM Virtual Serial Port v2; C:\Windows\system32\DRIVERS\RimSerial_AMD64.sys [2011-07-20 44032]

R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\Windows\System32\Drivers\RootMdm.sys [2009-07-14 11264]

R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-05-23 215040]

R3 STHDA;IDT High Definition Audio CODEC; C:\Windows\system32\DRIVERS\stwrt64.sys [2009-07-22 487936]

R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-07-15 273456]

R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2009-03-09 36408]

R3 VSTWinDriver6;VSTWinDriver6; C:\Windows\system32\drivers\VSTwindrvr6.sys [2008-07-03 252928]

R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]

S3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\agrsm64.sys [2009-06-10 1146880]

S3 androidusb;SAMSUNG Android Composite ADB Interface Driver; C:\Windows\System32\Drivers\ssadadb.sys [2014-01-23 38080]

S3 dc3d;MS Hardware Device Detection Driver; C:\Windows\system32\DRIVERS\dc3d.sys [2009-03-23 20992]

S3 grmnusb;grmnusb; C:\Windows\system32\drivers\grmnusb.sys [2012-04-18 19304]

S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2009-06-10 6108416]

S3 KMWDFILTER;HIDServiceDesc; C:\Windows\system32\DRIVERS\KMWDFILTER.sys [2009-04-29 30208]

S3 netw5v64;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit; C:\Windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368]

S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-11-10 19456]

S3 RimUsb;BlackBerry Smartphone; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [2011-07-25 74752]

S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2009-06-24 216576]

S3 RtsUIR;Realtek IR Driver; C:\Windows\system32\DRIVERS\Rts516xIR.sys []

S3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 109056]

S3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]

S3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]

S3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]

S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\ssadbus.sys [2014-01-23 169288]

S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\Windows\system32\DRIVERS\ssadmdfl.sys [2014-01-23 21320]

S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\Windows\system32\DRIVERS\ssadmdm.sys [2014-01-23 188232]

S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\Windows\system32\DRIVERS\ssadserd.sys [2014-01-23 158024]

S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-11-10 57856]

S3 USBCCID;Realtek Smartcard Reader Driver; C:\Windows\system32\DRIVERS\RtsUCcid.sys []

S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AESTFilters;Andrea ST Filters Service; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\AESTSr64.exe [2009-03-02 89600]

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-07-02 203264]

R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [2011-09-22 974944]

R2 ezSharedSvc;Easybits Shared Services for Windows; C:\Windows\system32\svchost.exe [2009-07-14 27136]

R2 hpqddsvc;HP CUE DeviceDiscovery-service; C:\Windows\system32\svchost.exe [2009-07-14 27136]

R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2009-06-17 73728]

R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]

R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]

R2 STacSV;Audio Service; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_ccf0dd3cb081af84\STacSV64.exe [2009-07-22 240128]

R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]

R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 27136]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

S2 gupdate;Google Updateservice (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-10-17 136176]

S2 LiveUpdateSvc;LiveUpdate; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2013-12-03 2151200]

S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-05 257928]

S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2009-11-27 651720]

S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-10-17 136176]

S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-11-10 194032]

S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]

S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-06-19 1255736]

S4 Com4QLBEx;Com4QLBEx; C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-05-05 228408]

S4 hpqwmiex;hpqwmiex; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2009-04-30 229944]

S4 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [2009-05-15 935208]

S4 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-07-03 160944]

-----------------EOF-----------------

clarkie · 20 februari 2014

Van zodra 1 van de experts online is zal deze je zeker verder helpen aangaande je vraag/probleem.

kape · 21 februari 2014

Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe (hier en hier) kan je lezen hoe je dat doet.

Download Zoek.exe naar het bureaublad (niet de .zip- of .rar-versie)

Wanneer Internet Explorer of een andere browser of virusscanner melding geeft dat dit bestand onveilig zou zijn kun je negeren, dit is namelijk een onterechte waarschuwing.
Dubbelklik op Zoek.exe om de tool te starten.
Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
Kopieer nu onderstaande code en plak die in het grote invulvenster:
Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.

  C:\Windows\tasks\Driver Booster Update.job;f
 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}];r64
 C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll;f
 [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run];r64
 ""=-;r64
 C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D};fs
 C:\zoek_backup;fs
  emptyfolderscheck;delete 
startupall; 
filesrcm;

Klik op de knop "Options" en vink nu de onderstaande opties aan.
Do a Quick Scan
Auto Clean
De optie "Scan All Users" staat standaard aangevinkt.
Klik nu op de knop "Run script".
Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
Mocht er geen logje verschijnen, start zoek.exe dan opnieuw en klik op de knop zoek-results.log, de log verschijnt dan alsnog.
Post het geopende logje in het volgende bericht.

snowym · 21 februari 2014

Zoek.exe v5.0.0.0 Updated 19-February-2014

Tool run by Maaike on vr 21-02-2014 at 11:03:38,59.

Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64

Running in: Normal Mode Internet Access Detected

Launched: C:\Users\Maaike\Downloads\zoek.exe [scan all users] [script inserted] [Checkboxes used]

==== Older Logs ======================

C:\zoek-results2013-11-23-210323.log 22065 bytes

C:\zoek-results2013-11-24-223546.log 376 bytes

C:\zoek-results2013-11-25-154229.log 14844 bytes

C:\zoek-results2013-12-06-161238.log 11176 bytes

==== Empty Folders Check ======================

C:\PROGRA~2\MyFree Codec deleted successfully

C:\PROGRA~2\Trend Micro deleted successfully

C:\PROGRA~3\Oracle deleted successfully

C:\PROGRA~3\Spybot - Search & Destroy deleted successfully

C:\PROGRA~3\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D} deleted successfully

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== Registry Fix Code x64 ======================

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]

""=-

==== Deleting Files \ Folders ======================

C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D} not found

C:\PROGRA~3\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D} not found

C:\zoek_backup deleted

C:\PROGRA~3\ProductData deleted

C:\Users\Maaike\Downloads\SoftonicDownloader_voor_samsung-kies.exe deleted

"C:\Windows\tasks\Driver Booster Update.job" deleted

"C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll" deleted

"C:\Windows\Installer\6beea.msi" deleted

==== Files Recently Created / Modified ======================

====== C:\Windows ====

2014-01-23 17:31:12 F9FCD1220E1B880111258C03D1650994 330240 ----a-w- C:\Windows\MASetupCaller.dll

2014-01-23 17:31:12 BBF1106FEF85FD9049506FA8AD454D75 90112 ----a-w- C:\Windows\MAMCityDownload.ocx

2014-01-23 17:31:12 35783FF1CCAB7CFBFE799EF8D6476C0D 30568 ----a-w- C:\Windows\MusiccityDownload.exe

====== C:\Users\Maaike\AppData\Local\Temp ====

2014-02-21 09:48:11 9EB54EABFB8B9FA02BFC48AF3A9FD020 41984 ----a-w- C:\Users\Maaike\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpaenlqx.dll

====== Java Cache =====

====== C:\Windows\SysWOW64 =====

2014-02-15 20:45:29 B8BF98AB4F9408C0C0AC5504E8BF4BBA 523776 ----a-w- C:\Windows\SysWOW64\vbscript.dll

2014-02-15 20:41:46 96484B4ED8FD9838692E3B5896C6DA61 2706432 ----a-w- C:\Windows\SysWOW64\mshtml.tlb

2014-02-15 20:41:45 FFD94811DD4D65FFA5EF36B5C1432B06 163840 ----a-w- C:\Windows\SysWOW64\msrating.dll

2014-02-15 20:41:43 2060E914C746DA531EE593098DA4A45E 391168 ----a-w- C:\Windows\SysWOW64\ieui.dll

2014-02-15 20:41:36 71EB230269480E7F5F62E46261404B10 61440 ----a-w- C:\Windows\SysWOW64\iesetup.dll

2014-02-15 20:41:35 E016BB18F1D978772EF5D1662E536372 33280 ----a-w- C:\Windows\SysWOW64\iernonce.dll

2014-02-15 20:41:34 E8D832E99CD4CDA14FACCC7A5F47EB00 71680 ----a-w- C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2014-02-15 20:41:33 A66F7525EBF8530C495D10E742FCDA2B 109056 ----a-w- C:\Windows\SysWOW64\iesysprep.dll

2014-02-15 20:41:30 5DC326473A638CC67EA5A4AF4C776BEB 2049024 ----a-w- C:\Windows\SysWOW64\iertutil.dll

2014-02-15 20:41:11 952B209CA4A39FB67C9CF110B9855583 493056 ----a-w- C:\Windows\SysWOW64\msfeeds.dll

2014-02-15 20:41:08 2F867C9A274B4C731E3ADB9BAF3337C4 690688 ----a-w- C:\Windows\SysWOW64\jscript.dll

2014-02-15 20:41:00 0AAE2EE5A85EA18E00079CAF359B9387 2877952 ----a-w- C:\Windows\SysWOW64\jscript9.dll

2014-02-15 20:40:56 66A313E15312F666829D024235B1BA24 1140736 ----a-w- C:\Windows\SysWOW64\urlmon.dll

2014-02-15 20:40:46 6733B2B5EEA3243E1B0FC5EABDA7223B 39936 ----a-w- C:\Windows\SysWOW64\jsproxy.dll

2014-02-15 20:40:44 1FF83D2BE92B40DAE234CF4236680B6E 1767936 ----a-w- C:\Windows\SysWOW64\wininet.dll

2014-02-15 20:40:37 FAF025218BF7A20BDD899C097B86E4A8 13760512 ----a-w- C:\Windows\SysWOW64\ieframe.dll

2014-02-15 20:39:59 4098C722E878697489F0207108C8E0DA 14359040 ----a-w- C:\Windows\SysWOW64\mshtml.dll

2014-02-13 21:34:59 EA093130471090037BB70A4AF86FAD1B 420008 ----a-w- C:\Windows\SysWOW64\locale.nls

2014-02-13 21:34:56 E4561704CBFA193761743E5AF746C669 1237504 ----a-w- C:\Windows\SysWOW64\msxml3.dll

2014-02-13 21:34:56 17B06F23237FCD731FA2E10ECD6EDFE1 2048 ----a-w- C:\Windows\SysWOW64\msxml3r.dll

2014-02-13 21:34:37 E01D2AC63453534DB8AD1EA97DEE9C3A 594944 ----a-w- C:\Windows\SysWOW64\RMActivate_isv.exe

2014-02-13 21:34:36 6142C5540C8D2764D59CBC11AF4A5900 572416 ----a-w- C:\Windows\SysWOW64\RMActivate.exe

2014-02-13 21:34:36 0F5FEF37588AF457E02125674F171A4F 508928 ----a-w- C:\Windows\SysWOW64\RMActivate_ssp_isv.exe

2014-02-13 21:34:35 08D323750350A8A29611D1004C0CF319 510976 ----a-w- C:\Windows\SysWOW64\RMActivate_ssp.exe

2014-02-13 21:34:34 BBCE3E9E74C7CEA47FA4115B360AC2C6 423936 ----a-w- C:\Windows\SysWOW64\secproc_isv.dll

2014-02-13 21:34:32 7FA485555BF802FE3DB5598004DBDFAC 390144 ----a-w- C:\Windows\SysWOW64\msdrm.dll

2014-02-13 21:34:32 12A9F24DC9F465DA79AC2272D829A81E 428032 ----a-w- C:\Windows\SysWOW64\secproc.dll

2014-02-13 21:34:31 9158DBE2F8483434FC72F320690C9DB8 87040 ----a-w- C:\Windows\SysWOW64\secproc_ssp_isv.dll

2014-02-13 21:34:31 58712A48D31B40EBCB35B47205F87771 87040 ----a-w- C:\Windows\SysWOW64\secproc_ssp.dll

2014-02-13 21:33:55 D96106CF60505734B14F6AE80AAA4B07 1987584 ----a-w- C:\Windows\SysWOW64\d3d10warp.dll

2014-02-13 21:33:53 14800BD31701A5047AC3145BB1E698AE 3419136 ----a-w- C:\Windows\SysWOW64\d2d1.dll

2014-02-13 19:33:18 37655385D1CF8560A52027B8008FAE0E 821824 ----a-w- C:\Windows\SysWOW64\dgderapi.dll

====== C:\Windows\SysWOW64\drivers =====

====== C:\Windows\Sysnative =====

2014-02-15 20:45:30 3EA9300DB7A2987A755F2EF83598A92D 600064 ----a-w- C:\Windows\Sysnative\vbscript.dll

2014-02-15 20:41:46 600FB9CB67C48F76C5ECE67E7B76D4B0 2706432 ----a-w- C:\Windows\Sysnative\mshtml.tlb

2014-02-15 20:41:44 7A824F15114E3D34691946E0D2F58911 197120 ----a-w- C:\Windows\Sysnative\msrating.dll

2014-02-15 20:41:42 100E323E81887683B73534EED8286771 526336 ----a-w- C:\Windows\Sysnative\ieui.dll

2014-02-15 20:41:35 F62A5D527794DCBC1F84B1976FB44244 67072 ----a-w- C:\Windows\Sysnative\iesetup.dll

2014-02-15 20:41:35 2ACDD6E1522DDA16D73F3E61A02EFCEB 39936 ----a-w- C:\Windows\Sysnative\iernonce.dll

2014-02-15 20:41:33 B5450A1AEAE4DFFA7E9383756F548FDD 89600 ----a-w- C:\Windows\Sysnative\RegisterIEPKEYs.exe

2014-02-15 20:41:33 5F63553B55465358ED6B0ED241DB44CF 51712 ----a-w- C:\Windows\Sysnative\ie4uinit.exe

2014-02-15 20:41:32 56DDB27B59BDE8CA6C9D563D38BC4673 136704 ----a-w- C:\Windows\Sysnative\iesysprep.dll

2014-02-15 20:41:26 CB0DB3C57ED00FCDCDE7536CC505EF55 2648576 ----a-w- C:\Windows\Sysnative\iertutil.dll

2014-02-15 20:41:10 D5B3FD1A39B6EBFD65B260B1E0FAF7D0 603136 ----a-w- C:\Windows\Sysnative\msfeeds.dll

2014-02-15 20:41:08 F75B88A57B3264914FD80462CB992F0C 855552 ----a-w- C:\Windows\Sysnative\jscript.dll

2014-02-15 20:41:04 027D0EAECAC2358406A088EA218A47C0 3960320 ----a-w- C:\Windows\Sysnative\jscript9.dll

2014-02-15 20:40:54 EFC64446D5881A95674E04DFAC39AB7A 1365504 ----a-w- C:\Windows\Sysnative\urlmon.dll

2014-02-15 20:40:48 DBF5C7BFBAB5E01020E16156E2D5FEC3 53760 ----a-w- C:\Windows\Sysnative\jsproxy.dll

2014-02-15 20:40:41 90860E913075B03369BEB7B0B510DC2F 2241536 ----a-w- C:\Windows\Sysnative\wininet.dll

2014-02-15 20:40:28 B61F1163B0717D7781CBD140AF80D3BA 15403520 ----a-w- C:\Windows\Sysnative\ieframe.dll

2014-02-15 20:40:16 1B59269891A17BD804F3F640A66F2A08 19274240 ----a-w- C:\Windows\Sysnative\mshtml.dll

2014-02-13 21:34:59 EA093130471090037BB70A4AF86FAD1B 420008 ----a-w- C:\Windows\Sysnative\locale.nls

2014-02-13 21:34:57 0D298133C359AB8CB9EB4FA178BF3947 1882112 ----a-w- C:\Windows\Sysnative\msxml3.dll

2014-02-13 21:34:56 CD2C20CC3B385A32701F78C0ACBBE9F3 2048 ----a-w- C:\Windows\Sysnative\msxml3r.dll

2014-02-13 21:34:37 1B3741488AA7E237961A29D1E7A44C0A 626176 ----a-w- C:\Windows\Sysnative\RMActivate.exe

2014-02-13 21:34:37 17CF3B3F68272BD40C878D4DBAB0EBC9 658432 ----a-w- C:\Windows\Sysnative\RMActivate_isv.exe

2014-02-13 21:34:36 297926B15AE5390409F1007EB28A8EFB 552960 ----a-w- C:\Windows\Sysnative\RMActivate_ssp_isv.exe

2014-02-13 21:34:35 5693212AB2EBCACBBE05EC3A642113E2 485888 ----a-w- C:\Windows\Sysnative\secproc_isv.dll

2014-02-13 21:34:35 03F8F411F118CFDA508E77C747BB05EA 553984 ----a-w- C:\Windows\Sysnative\RMActivate_ssp.exe

2014-02-13 21:34:34 C6AC2C91541D24F9E236A670C0CA793D 528384 ----a-w- C:\Windows\Sysnative\msdrm.dll

2014-02-13 21:34:34 399FC1B75790EE606A6FD9F2FB4C891C 488448 ----a-w- C:\Windows\Sysnative\secproc.dll

2014-02-13 21:34:32 DC6DD779F35BB42E2E76FDFEC565C251 123392 ----a-w- C:\Windows\Sysnative\secproc_ssp_isv.dll

2014-02-13 21:34:32 B41B1FEDEBBD955B4E25676B42087885 123392 ----a-w- C:\Windows\Sysnative\secproc_ssp.dll

2014-02-13 21:33:54 E8710B5DDA963E6BA198DF5FB209E72A 2565120 ----a-w- C:\Windows\Sysnative\d3d10warp.dll

2014-02-13 21:33:53 C676E5EA388AF7C4C031F56F9B42E362 3928064 ----a-w- C:\Windows\Sysnative\d2d1.dll

2014-02-13 19:57:07 5DC6B957DF2AE4B704C71AAFAE4BF401 1919168 ----a-w- C:\Windows\Sysnative\WdfCoInstaller01005.dll

====== C:\Windows\Sysnative\drivers =====

2014-02-13 21:28:59 FE9FA1AAE4D00CA73ADEF4437CD89679 17224 ----a-w- C:\Windows\Sysnative\drivers\ssadcmnt.sys

2014-02-13 21:28:59 D6CFD3B2EABCF9327DE39C62BABFA1E3 21320 ----a-w- C:\Windows\Sysnative\drivers\ssadmdfl.sys

2014-02-13 21:28:59 5EB01E6148742C3EC2185AC92F6D16FD 188232 ----a-w- C:\Windows\Sysnative\drivers\ssadmdm.sys

2014-02-13 21:28:59 52D6F40B50ECFC051979FEC68E74F0F8 169288 ----a-w- C:\Windows\Sysnative\drivers\ssadbus.sys

2014-02-13 21:28:59 3CF7A4350C9646D92F147D620EC0D363 38080 ----a-w- C:\Windows\Sysnative\drivers\ssadadb.sys

2014-02-13 21:28:59 0D7B007DEA662EE90C87CB0AEA5D692A 17736 ----a-w- C:\Windows\Sysnative\drivers\ssadwhnt.sys

2014-02-13 21:28:58 FF20F67DD5644BD1D2E7FCD95AF7F03B 158024 ----a-w- C:\Windows\Sysnative\drivers\ssadserd.sys

2014-02-13 19:57:07 5DC6B957DF2AE4B704C71AAFAE4BF401 1919168 ----a-w- C:\Windows\Sysnative\drivers\WdfCoInstaller01005.dll

2014-02-13 19:57:06 FE9FA1AAE4D00CA73ADEF4437CD89679 17224 ----a-w- C:\Windows\Sysnative\drivers\ssadcm.sys

2014-02-13 19:43:38 0D7B007DEA662EE90C87CB0AEA5D692A 17736 ----a-w- C:\Windows\Sysnative\drivers\ssadwh.sys

====== C:\Windows\Tasks ======

2014-02-21 10:02:15 60FE13AE0640C95BC285451A70D8E3A1 3124 ----a-w- C:\Windows\Sysnative\Tasks\{5647BE99-C058-4707-BBAB-D18A5D107A50}

====== C:\Windows\Temp ======

======= C:\Program Files =====

======= C:\PROGRA~2 =====

======= C: =====

====== C:\Users\Maaike\AppData\Roaming ======

2014-02-05 10:59:11 -------- d-----w- C:\Users\Maaike\AppData\Local\By_Gpsgek

2014-01-27 13:15:53 -------- d-----w- C:\Users\Maaike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Garmin

2014-01-27 13:04:33 -------- d-----w- C:\Users\Maaike\AppData\Roaming\DropboxMaster

2014-01-27 13:03:53 -------- d-----w- C:\Users\Maaike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2014-01-27 13:02:52 -------- d-----w- C:\Users\Maaike\AppData\Roaming\Dropbox

====== C:\Users\Maaike ======

2014-02-18 20:59:37 98E86C6A8EB8E1C16429A10633CB4311 623616 ----a-w- C:\Users\Maaike\Downloads\BinRekenen.exe

2014-02-18 20:58:14 3844D343A8D05859552D588FB279713B 1428480 ----a-w- C:\Users\Maaike\Downloads\LetterTellers.exe

2014-02-18 20:56:36 F13D2CDF35548CED04096D7729959006 1399296 ----a-w- C:\Users\Maaike\Downloads\TexToHex (2).exe

2014-02-18 20:55:51 F13D2CDF35548CED04096D7729959006 1399296 ----a-w- C:\Users\Maaike\Downloads\TexToHex (1).exe

2014-02-18 20:54:40 F13D2CDF35548CED04096D7729959006 1399296 ----a-w- C:\Users\Maaike\Downloads\TexToHex.exe

2014-02-18 20:53:33 F6E7BA27F377E19E70E186E8A8CFACA0 1350656 ----a-w- C:\Users\Maaike\Downloads\RSA.exe

2014-02-18 20:52:04 2D4B5E558FEA8EE66C614315109EB5D0 1342464 ----a-w- C:\Users\Maaike\Downloads\XORSleutel.exe

2014-02-18 20:48:13 EC38159FC20E3656C637F94E88B27AC5 1678336 ----a-w- C:\Users\Maaike\Downloads\Steganografie.exe

2014-02-13 20:11:04 4525A25E6027EF8CD60466268C24C054 75211320 ----a-w- C:\Users\Maaike\Downloads\KiesSetup (1).exe

2014-02-13 19:28:14 4525A25E6027EF8CD60466268C24C054 75211320 ----a-w- C:\Users\Maaike\Downloads\KiesSetup.exe

2014-02-07 13:14:37 D52DC3CD5A3AF6F0CAA14A7FC79E95E3 11201344 ----a-w- C:\Users\Maaike\Downloads\iobituninstaller3.1.exe

2014-01-28 14:39:16 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth

2014-01-27 13:18:53 -------- d-----w- C:\ProgramData\GARMIN

2014-01-27 13:05:28 -------- d-----r- C:\Users\Maaike\Dropbox

====== C: exe-files ==