Ga naar inhoud

Aanbevolen berichten

Geplaatst:

Download en installeer Speccy.

Speccy is er ook in Nederlandstalige versie, bij de installatie (of update) kan je de taal wijzigen van Engels naar Nederlands ... als je op het driehoekje klikt, krijg je een uitrolmenu waarin je Nederlands kan selecteren.

Wanneer, tijdens het installeren van Speccy, de optie aangeboden wordt om Google Chrome of Google Toolbar "gratis" mee te installeren dien je de vinkjes weg te halen, tenzij dit een bewuste keuze is.

525a111b37ea3-Speccy.PNG

Start nu het programma en er zal een overzicht gemaakt worden van je hardware.

Als dit gereed is selecteer je bovenaan "Bestand - Publiceer Snapshot" en vervolgens bevestig je die keuze met " Ja ".

In het venster dat nu opent krijg je een link te zien, kopieer nu die link en plak die in je volgende bericht. Zo krijgen we een gedetailleerd overzicht van je hardware.

Meer info over deze procedure lees je HIER.

Geplaatst:

Download 51a5f5d096dae-icon_RSIT.pngRSIT van de onderstaande locaties en sla deze op het bureaublad op.

Hier staat een beschrijving hoe je kan kijken of je een 32- of 64-bitversie van Windows heeft.

Dubbelklik op RSIT.exe om de tool te starten.

  • Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  • Vervolgens wordt de "Disclaimer of warranty" getoond, klik vervolgens op "Continue"
  • Wanneer de tool gereed is wordt er een kladblok bestand genaamd "Log" geopend.
  • Plaats de inhoud hiervan in het volgende bericht.

Bekijk ook de instructievideo.

Geplaatst:

Logfile of random's system information tool 1.09 (written by random/random)

Run by user at 2014-02-25 20:02:40

Microsoft Windows XP Professional Service Pack 3

System drive E: has 1 GB (9%) free of 16 GB

Total RAM: 894 MB (32% free)

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 20:03:01, on 25/02/2014

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:

E:\WINDOWS\System32\smss.exe

E:\WINDOWS\system32\winlogon.exe

E:\WINDOWS\system32\services.exe

E:\WINDOWS\system32\lsass.exe

E:\WINDOWS\system32\Ati2evxx.exe

E:\WINDOWS\system32\svchost.exe

E:\WINDOWS\System32\svchost.exe

E:\WINDOWS\system32\Ati2evxx.exe

E:\WINDOWS\Explorer.EXE

E:\WINDOWS\system32\spoolsv.exe

E:\Program Files\Belgium Identity Card\beid35gui.exe

E:\PROGRA~1\FROMDO~2\bar\1.bin\65brmon.exe

E:\WINDOWS\system32\ctfmon.exe

E:\Program Files\OpenOffice.org 3\program\soffice.exe

E:\Program Files\OpenOffice.org 3\program\soffice.bin

E:\Program Files\Java\jre6\bin\jqs.exe

E:\Program Files\Norton Identity Safe\Engine\2013.4.0.10\ccSvcHst.exe

E:\Program Files\Norton Internet Security\Engine\20.3.0.36\ccSvcHst.exe

E:\WINDOWS\system32\HPZipm12.exe

E:\WINDOWS\system32\svchost.exe

E:\Program Files\Norton Internet Security\Engine\20.3.0.36\ccSvcHst.exe

E:\Program Files\Norton Identity Safe\Engine\2013.4.0.10\ccSvcHst.exe

E:\WINDOWS\System32\svchost.exe

E:\Program Files\Outlook Express\msimn.exe

E:\Program Files\Internet Explorer\iexplore.exe

E:\Program Files\Internet Explorer\iexplore.exe

E:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32.exe

E:\Program Files\Internet Explorer\iexplore.exe

E:\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\00UCBLUR\RSIT[1].exe

E:\Program Files\trend micro\user.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN België: Hotmail, Skype, nieuws, entertainment, lifestyle en meer!

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

R3 - URLSearchHook: (no name) - {4c60e5ab-5c68-4c59-abaa-885010b24b32} - E:\Program Files\FromDocToPDF_65\bar\1.bin\65SrcAs.dll

O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - E:\Program Files\Norton Internet Security\Engine\20.3.0.36\coIEPlg.dll

O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - E:\Program Files\Norton Internet Security\Engine\20.3.0.36\IPS\IPSBHO.DLL

O2 - BHO: Toolbar BHO - {a235e1e3-6296-4710-af39-104a7faa6c7c} - E:\PROGRA~1\FROMDO~2\bar\1.bin\65bar.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - E:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - E:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O2 - BHO: Search Assistant BHO - {f236ca79-3123-4afb-9f74-e98117ad5625} - E:\Program Files\FromDocToPDF_65\bar\1.bin\65SrcAs.dll

O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - E:\Program Files\Norton Internet Security\Engine\20.3.0.36\coIEPlg.dll

O3 - Toolbar: FromDocToPDF - {c66a678d-5e6c-4af9-8f57-c6192f42cf74} - E:\Program Files\FromDocToPDF_65\bar\1.bin\65bar.dll

O4 - HKLM\..\Run: [beid] "E:\Program Files\Belgium Identity Card\beid35gui.exe" /startup

O4 - HKLM\..\Run: [QuickTime Task] "E:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "E:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "E:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [FromDocToPDF Search Scope Monitor] "E:\PROGRA~1\FROMDO~2\bar\1.bin\65srchmn.exe" /m=2 /w /h

O4 - HKLM\..\Run: [FromDocToPDF_65 Browser Plugin Loader] E:\PROGRA~1\FROMDO~2\bar\1.bin\65brmon.exe

O4 - HKCU\..\Run: [ctfmon.exe] E:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [Google Update] "E:\Documents and Settings\user\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c

O4 - HKCU\..\Run: [RDReminder] E:\Program Files\RegClean Pro\RegCleanPro.exe -rem

O4 - S-1-5-18 Startup: OpenOffice.org 3.0 .lnk = E:\Program Files\OpenOffice.org 3\program\quickstart.exe (User 'SYSTEM')

O4 - S-1-5-18 Startup: OpenOffice.org 3.3 .lnk = E:\Program Files\OpenOffice.org 3\program\quickstart.exe (User 'SYSTEM')

O4 - .DEFAULT Startup: OpenOffice.org 3.0 .lnk = E:\Program Files\OpenOffice.org 3\program\quickstart.exe (User 'Default user')

O4 - .DEFAULT Startup: OpenOffice.org 3.3 .lnk = E:\Program Files\OpenOffice.org 3\program\quickstart.exe (User 'Default user')

O4 - Startup: OpenOffice.org 3.0 .lnk = E:\Program Files\OpenOffice.org 3\program\quickstart.exe

O4 - Startup: OpenOffice.org 3.3 .lnk = E:\Program Files\OpenOffice.org 3\program\quickstart.exe

O8 - Extra context menu item: &Search - http://tbedits.fromdoctopdf.com/one-toolbaredits/menusearch.jhtml?s=207743773&p2=^Y6^xdm010^YY^be&si=CLqD7bm41LYCFUzHtAodJXUASQ&a=7A1348A1-45D6-4697-9DD3-400ECB2E8267&n=2013041810&cv=1

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Plugin Control) - http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} (AxisMediaControlEmb Class) - http://ideefixx.dyndns.tv:811/activex/AMC.cab

O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - E:\WINDOWS\system32\browseui.dll

O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - E:\WINDOWS\system32\browseui.dll

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - E:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - E:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: FromDocToPDFService (FromDocToPDF_65Service) - COMPANYVERS_NAME - E:\PROGRA~1\FROMDO~2\bar\1.bin\65barsvc.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - E:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: Norton Identity Safe (NCO) - Symantec Corporation - E:\Program Files\Norton Identity Safe\Engine\2013.4.0.10\ccSvcHst.exe

O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - E:\Program Files\Norton Internet Security\Engine\20.3.0.36\ccSvcHst.exe

O23 - Service: Pml Driver HPZ12 - HP - E:\WINDOWS\system32\HPZipm12.exe

--

End of file - 7659 bytes

======Scheduled tasks folder======

E:\WINDOWS\tasks\Adobe Flash Player Updater.job

E:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1547161642-746137067-682003330-1003Core.job

E:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1547161642-746137067-682003330-1003UA.job

E:\WINDOWS\tasks\User_Feed_Synchronization-{F0A4EADB-E0DC-459B-AF7B-0780EB9E49F7}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]

Adobe PDF Reader Help bij koppelingen - E:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2011-08-30 61888]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]

Norton Identity Protection - E:\Program Files\Norton Internet Security\Engine\20.3.0.36\coIEPlg.dll [2013-02-14 509776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]

Norton Vulnerability Protection - E:\Program Files\Norton Internet Security\Engine\20.3.0.36\IPS\IPSBHO.DLL [2012-11-16 387040]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a235e1e3-6296-4710-af39-104a7faa6c7c}]

Toolbar BHO - E:\PROGRA~1\FROMDO~2\bar\1.bin\65bar.dll [2013-04-18 708168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

Java Plug-In 2 SSV Helper - E:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-02-09 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]

JQSIEStartDetectorImpl Class - E:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-02-09 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{f236ca79-3123-4afb-9f74-e98117ad5625}]

Search Assistant BHO - E:\Program Files\FromDocToPDF_65\bar\1.bin\65SrcAs.dll [2013-04-18 62864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - E:\Program Files\Norton Internet Security\Engine\20.3.0.36\coIEPlg.dll [2013-02-14 509776]

{c66a678d-5e6c-4af9-8f57-c6192f42cf74} - FromDocToPDF - E:\Program Files\FromDocToPDF_65\bar\1.bin\65bar.dll [2013-04-18 708168]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"beid"=E:\Program Files\Belgium Identity Card\beid35gui.exe [2009-02-02 2035712]

"QuickTime Task"=E:\Program Files\QuickTime\qttask.exe [2010-03-12 417792]

"Adobe Reader Speed Launcher"=E:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2011-08-31 40368]

"Adobe ARM"=E:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-03-29 937920]

"FromDocToPDF Search Scope Monitor"=E:\PROGRA~1\FROMDO~2\bar\1.bin\65srchmn.exe [2013-04-18 44784]

"FromDocToPDF_65 Browser Plugin Loader"=E:\PROGRA~1\FROMDO~2\bar\1.bin\65brmon.exe [2013-04-18 30096]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"ctfmon.exe"=E:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

"Google Update"=E:\Documents and Settings\user\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2012-05-08 116648]

"RDReminder"=E:\Program Files\RegClean Pro\RegCleanPro.exe -rem []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]

E:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-03-29 937920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]

E:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2011-08-31 40368]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]

E:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATIPTA]

E:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2005-12-11 344064]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]

E:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]

E:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]

E:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

E:\Program Files\QuickTime\qttask.exe [2010-03-12 417792]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]

E:\WINDOWS\RTHDCPL.EXE [2006-07-21 16261632]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel]

E:\WINDOWS\SkyTel.EXE [2006-05-16 2879488]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\E:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^HP Digital Imaging Monitor.lnk]

E:\PROGRA~1\HP\DIGITA~1\bin\hpqtra08.exe [2006-02-19 288472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\E:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^HP Photosmart Premier Snelstart.lnk]

E:\PROGRA~1\HP\DIGITA~1\bin\hpqthb08.exe [2006-02-10 73728]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\E:^Documents and Settings^user^Menu Start^Programma's^Opstarten^OpenOffice.org 3.0 .lnk]

E:\PROGRA~1\OPENOF~1.ORG\program\QUICKS~1.EXE [2010-12-13 1198592]

E:\Documents and Settings\user\Menu Start\Programma's\Opstarten

OpenOffice.org 3.0 .lnk - E:\Program Files\OpenOffice.org 3\program\quickstart.exe

OpenOffice.org 3.3 .lnk - E:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]

E:\WINDOWS\system32\Ati2evxx.dll [2005-12-11 47104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]

E:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - E:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"HonorAutoRunSetting"=1

"NoDriveTypeAutoRun"=60

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

"E:\Program Files\Windows Live\Messenger\msnmsgr.exe"="E:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

"E:\Program Files\Windows Live\Messenger\livecall.exe"="E:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

"E:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="E:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"

"E:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="E:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"

"E:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="E:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"

"E:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="E:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"

"E:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="E:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"

"E:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="E:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"

"E:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="E:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"

"E:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"="E:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe"

"E:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"="E:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe"

"E:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="E:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"

"E:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe"="E:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"

"E:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe"="E:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe"

"E:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="E:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"

"E:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe"="E:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe:*:Enabled:hpqnrs08.exe"

"E:\Program Files\Java\jre6\bin\java.exe"="E:\Program Files\Java\jre6\bin\java.exe:*:Disabled:Java Platform SE binary"

"E:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"="E:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe:*:Enabled:Adobe Reader and Acrobat Manager"

"E:\Documents and Settings\user\Local Settings\Temp\pft254.tmp\setup.exe"="E:\Documents and Settings\user\Local Settings\Temp\pft254.tmp\setup.exe:*:Disabled:Kaspersky Anti-Virus 2009 Installatie"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

"E:\Program Files\Windows Live\Messenger\msnmsgr.exe"="E:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

"E:\Program Files\Windows Live\Messenger\livecall.exe"="E:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]

"midimapper"=midimap.dll

"msacm.imaadpcm"=imaadp32.acm

"msacm.msadpcm"=msadp32.acm

"msacm.msg711"=msg711.acm

"msacm.msgsm610"=msgsm32.acm

"msacm.trspch"=tssoft32.acm

"vidc.cvid"=iccvid.dll

"vidc.I420"=msh263.drv

"vidc.iv31"=ir32_32.dll

"vidc.iv32"=ir32_32.dll

"vidc.iv41"=ir41_32.ax

"vidc.iyuv"=iyuv_32.dll

"vidc.mrle"=msrle32.dll

"vidc.msvc"=msvidc32.dll

"vidc.uyvy"=msyuv.dll

"vidc.yuy2"=msyuv.dll

"vidc.yvu9"=tsbyuv.dll

"vidc.yvyu"=msyuv.dll

"wavemapper"=msacm32.drv

"msacm.msg723"=msg723.acm

"vidc.M263"=msh263.drv

"vidc.M261"=msh261.drv

"msacm.msaudio1"=msaud32.acm

"msacm.sl_anet"=sl_anet.acm

"msacm.iac2"=E:\WINDOWS\system32\iac25_32.ax

"vidc.iv50"=ir50_32.dll

"msacm.l3acm"=E:\WINDOWS\system32\l3codeca.acm

"wave"=wdmaud.drv

"midi"=wdmaud.drv

"mixer"=wdmaud.drv

"aux"=wdmaud.drv

"vidc.LEAD"=LCODCCMP.DLL

======List of files/folders created in the last 1 month======

2014-02-25 20:02:42 ----D---- E:\Program Files\trend micro

2014-02-25 20:02:40 ----D---- E:\rsit

2014-02-24 17:47:37 ----D---- E:\Program Files\Speccy

2014-02-13 18:56:32 ----ASH---- E:\pagefile.sys

2014-02-13 18:53:24 ----HDC---- E:\WINDOWS\$NtUninstallKB2916036$

2014-02-07 16:45:35 ----D---- E:\Documents and Settings\All Users\Application Data\tmp

2014-02-07 16:45:34 ----D---- E:\Documents and Settings\All Users\Application Data\hps

======List of files/folders modified in the last 1 month======

2014-02-25 20:02:42 ----RD---- E:\Program Files

2014-02-25 20:02:41 ----D---- E:\WINDOWS\Temp

2014-02-25 20:02:15 ----D---- E:\WINDOWS\Prefetch

2014-02-25 18:04:16 ----A---- E:\WINDOWS\SchedLgU.Txt

2014-02-25 17:28:03 ----SHD---- E:\System Volume Information

2014-02-24 17:48:17 ----D---- E:\WINDOWS

2014-02-24 17:48:10 ----D---- E:\WINDOWS\system32\CatRoot2

2014-02-22 09:06:40 ----D---- E:\WINDOWS\system32

2014-02-22 09:06:28 ----A---- E:\WINDOWS\system32\FlashPlayerApp.exe

2014-02-13 21:49:03 ----D---- E:\WINDOWS\Debug

2014-02-13 19:07:01 ----D---- E:\WINDOWS\Microsoft.NET

2014-02-13 19:06:55 ----RSD---- E:\WINDOWS\assembly

2014-02-13 18:56:32 ----D---- E:\Program Files\Internet Explorer

2014-02-13 18:53:36 ----HD---- E:\WINDOWS\inf

2014-02-13 18:53:28 ----RSHDC---- E:\WINDOWS\system32\dllcache

2014-02-13 18:52:33 ----SHD---- E:\WINDOWS\Installer

2014-02-13 18:52:12 ----HD---- E:\Config.Msi

2014-02-13 18:50:18 ----A---- E:\WINDOWS\system32\PerfStringBackup.INI

2014-02-13 18:48:58 ----D---- E:\WINDOWS\WinSxS

2014-02-13 18:37:08 ----D---- E:\WINDOWS\system32\MRT

2014-02-13 18:21:32 ----A---- E:\WINDOWS\system32\MRT.exe

2014-02-13 18:20:14 ----D---- E:\WINDOWS\ie8updates

2014-02-08 22:02:13 ----RSD---- E:\WINDOWS\Fonts

2014-02-06 04:38:34 ----A---- E:\WINDOWS\system32\wininet.dll

2014-02-06 00:08:31 ----N---- E:\WINDOWS\system32\occache.dll

2014-02-06 00:08:31 ----N---- E:\WINDOWS\system32\mstime.dll

2014-02-06 00:08:31 ----N---- E:\WINDOWS\system32\jsproxy.dll

2014-02-06 00:08:31 ----N---- E:\WINDOWS\system32\iedkcs32.dll

2014-02-06 00:08:31 ----A---- E:\WINDOWS\system32\urlmon.dll

2014-02-06 00:08:31 ----A---- E:\WINDOWS\system32\url.dll

2014-02-06 00:08:31 ----A---- E:\WINDOWS\system32\mshtmled.dll

2014-02-06 00:08:31 ----A---- E:\WINDOWS\system32\mshtml.dll

2014-02-06 00:08:31 ----A---- E:\WINDOWS\system32\msfeedsbs.dll

2014-02-06 00:08:31 ----A---- E:\WINDOWS\system32\msfeeds.dll

2014-02-06 00:08:31 ----A---- E:\WINDOWS\system32\licmgr10.dll

2014-02-06 00:08:31 ----A---- E:\WINDOWS\system32\iertutil.dll

2014-02-06 00:08:31 ----A---- E:\WINDOWS\system32\iepeers.dll

2014-02-06 00:08:31 ----A---- E:\WINDOWS\system32\ieframe.dll

2014-02-06 00:08:31 ----A---- E:\WINDOWS\system32\corpol.dll

2014-02-05 23:29:26 ----N---- E:\WINDOWS\system32\ie4uinit.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 PxHelp20;PxHelp20; E:\WINDOWS\System32\Drivers\PxHelp20.sys [2005-08-19 46080]

R0 SymDS;Symantec Data Store; E:\WINDOWS\system32\drivers\NIS\1403000.024\SYMDS.SYS [2013-01-22 367704]

R0 SymEFA;Symantec Extended File Attributes; E:\WINDOWS\system32\drivers\NIS\1403000.024\SYMEFA.SYS [2013-01-31 934488]

R1 BHDrvx86;BHDrvx86; \??\E:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\BASHDefs\20140214.001\BHDrvx86.sys []

R1 ccSet_NIS;Norton Internet Security Settings Manager; E:\WINDOWS\system32\drivers\NIS\1403000.024\ccSetx86.sys [2012-11-16 134304]

R1 ccSet_NST;Norton Identity Safe Settings Manager; E:\WINDOWS\system32\drivers\NST\7DD04000.00A\ccSetx86.sys [2013-04-16 134744]

R1 eeCtrl;Symantec Eraser Control driver; \??\E:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys []

R1 intelppm;Intel GV3-processorstuurprogramma; E:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40448]

R1 SRTSPX;Symantec Real Time Storage Protection (PEL); E:\WINDOWS\system32\drivers\NIS\1403000.024\SRTSPX.SYS [2013-01-29 32344]

R1 SymIRON;Symantec Iron Driver; E:\WINDOWS\system32\drivers\NIS\1403000.024\Ironx86.SYS [2012-11-16 175264]

R1 SYMTDI;Symantec Network Dispatch Driver; E:\WINDOWS\System32\Drivers\NIS\1403000.024\SYMTDI.SYS [2013-01-31 394656]

R3 ati2mtag;ati2mtag; E:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2005-12-11 1414656]

R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\E:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys []

R3 HDAudBus;Microsoft UAA-busstuurprogramma voor High Definition Audio; E:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]

R3 HidUsb;Microsoft HID Class-stuurprogramma; E:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]

R3 huawei_enumerator;huawei_enumerator; E:\WINDOWS\system32\DRIVERS\ew_jubusenum.sys [2010-12-30 72832]

R3 IDSxpx86;IDSxpx86; \??\E:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\IPSDefs\20140224.001\IDSxpx86.sys []

R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); E:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-07-24 4353024]

R3 mouhid;Stuurprogramma voor muis-HID; E:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-09-06 12288]

R3 NAVENG;NAVENG; \??\E:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\VirusDefs\20140224.023\NAVENG.SYS []

R3 NAVEX15;NAVEX15; \??\E:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\VirusDefs\20140224.023\NAVEX15.SYS []

R3 RT61;Ralink RT61 Wireless Driver; E:\WINDOWS\system32\DRIVERS\RT61.sys [2006-08-02 384384]

R3 rtl8139;NT-stuurprogramma voor Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter; E:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]

R3 SRTSP;Symantec Real Time Storage Protection; E:\WINDOWS\System32\Drivers\NIS\1403000.024\SRTSP.SYS [2013-01-29 602712]

R3 SymEvent;SymEvent; \??\E:\WINDOWS\system32\Drivers\SYMEVENT.SYS []

R3 usbccgp;Microsoft generiek hoofd-USB-stuurprogramma; E:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]

R3 Wdf01000;Kernel Mode Driver Frameworks service; E:\WINDOWS\System32\Drivers\wdf01000.sys [2008-03-27 503008]

S3 ACSSCR;ACR38 Smart Card Reader; E:\WINDOWS\system32\DRIVERS\a38usb.sys [2009-06-08 33536]

S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device; E:\WINDOWS\system32\DRIVERS\ew_hwusbdev.sys [2010-12-30 102784]

S3 ew_usbenumfilter;huawei_CompositeFilter; E:\WINDOWS\system32\DRIVERS\ew_usbenumfilter.sys [2010-12-30 11136]

S3 ewusbnet;HUAWEI USB-NDIS miniport; E:\WINDOWS\system32\DRIVERS\ewusbnet.sys [2010-12-31 234368]

S3 HPZid412;IEEE-1284.4 Driver HPZid412; E:\WINDOWS\system32\DRIVERS\HPZid412.sys [2006-04-13 49664]

S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; E:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2006-04-13 16496]

S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; E:\WINDOWS\system32\DRIVERS\HPZius12.sys [2006-04-13 21568]

S3 huawei_cdcacm;huawei_cdcacm; E:\WINDOWS\system32\DRIVERS\ew_jucdcacm.sys [2010-12-30 85632]

S3 huawei_cdcecm;huawei_cdcecm; E:\WINDOWS\system32\DRIVERS\ew_jucdcecm.sys [2010-12-30 51456]

S3 huawei_ext_ctrl;huawei_ext_ctrl; E:\WINDOWS\system32\DRIVERS\ew_juextctrl.sys [2010-12-30 26496]

S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; E:\WINDOWS\system32\DRIVERS\ewusbmdm.sys [2010-12-30 191872]

S3 usbprint;Microsoft USB PRINTER Class; E:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]

S3 usbscan;Stuurprogramma voor USB-scanner; E:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]

S3 USBSTOR;Stuurprogramma voor USB-massaopslag; E:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]

S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; E:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]

S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; E:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; E:\WINDOWS\system32\Ati2evxx.exe [2005-12-11 393216]

R2 JavaQuickStarterService;Java Quick Starter; E:\Program Files\Java\jre6\bin\jqs.exe [2011-02-02 153376]

R2 NCO;Norton Identity Safe; E:\Program Files\Norton Identity Safe\Engine\2013.4.0.10\ccSvcHst.exe [2013-05-21 144368]

R2 NIS;Norton Internet Security; E:\Program Files\Norton Internet Security\Engine\20.3.0.36\ccSvcHst.exe [2012-12-24 144520]

R2 Pml Driver HPZ12;Pml Driver HPZ12; E:\WINDOWS\system32\HPZipm12.exe [2007-08-09 73728]

S2 FromDocToPDF_65Service;FromDocToPDFService; E:\PROGRA~1\FROMDO~2\bar\1.bin\65barsvc.exe [2013-04-18 42504]

S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; E:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-22 257928]

S3 aspnet_state;ASP.NET State Service; E:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]

S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; E:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]

S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; E:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]

S3 idsvc;Windows CardSpace; E:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]

S3 WMPNetworkSvc;Windows Media Player Network Sharing-service; E:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-02 917504]

S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; E:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; E:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

- - - Updated - - -

Logfile of random's system information tool 1.09 (written by random/random)

Run by user at 2014-02-25 20:02:40

Microsoft Windows XP Professional Service Pack 3

System drive E: has 1 GB (9%) free of 16 GB

Total RAM: 894 MB (32% free)

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 20:03:01, on 25/02/2014

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:

E:\WINDOWS\System32\smss.exe

E:\WINDOWS\system32\winlogon.exe

E:\WINDOWS\system32\services.exe

E:\WINDOWS\system32\lsass.exe

E:\WINDOWS\system32\Ati2evxx.exe

E:\WINDOWS\system32\svchost.exe

E:\WINDOWS\System32\svchost.exe

E:\WINDOWS\system32\Ati2evxx.exe

E:\WINDOWS\Explorer.EXE

E:\WINDOWS\system32\spoolsv.exe

E:\Program Files\Belgium Identity Card\beid35gui.exe

E:\PROGRA~1\FROMDO~2\bar\1.bin\65brmon.exe

E:\WINDOWS\system32\ctfmon.exe

E:\Program Files\OpenOffice.org 3\program\soffice.exe

E:\Program Files\OpenOffice.org 3\program\soffice.bin

E:\Program Files\Java\jre6\bin\jqs.exe

E:\Program Files\Norton Identity Safe\Engine\2013.4.0.10\ccSvcHst.exe

E:\Program Files\Norton Internet Security\Engine\20.3.0.36\ccSvcHst.exe

E:\WINDOWS\system32\HPZipm12.exe

E:\WINDOWS\system32\svchost.exe

E:\Program Files\Norton Internet Security\Engine\20.3.0.36\ccSvcHst.exe

E:\Program Files\Norton Identity Safe\Engine\2013.4.0.10\ccSvcHst.exe

E:\WINDOWS\System32\svchost.exe

E:\Program Files\Outlook Express\msimn.exe

E:\Program Files\Internet Explorer\iexplore.exe

E:\Program Files\Internet Explorer\iexplore.exe

E:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32.exe

E:\Program Files\Internet Explorer\iexplore.exe

E:\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\00UCBLUR\RSIT[1].exe

E:\Program Files\trend micro\user.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://be.msn.com/default.aspx

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

R3 - URLSearchHook: (no name) - {4c60e5ab-5c68-4c59-abaa-885010b24b32} - E:\Program Files\FromDocToPDF_65\bar\1.bin\65SrcAs.dll

O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - E:\Program Files\Norton Internet Security\Engine\20.3.0.36\coIEPlg.dll

O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - E:\Program Files\Norton Internet Security\Engine\20.3.0.36\IPS\IPSBHO.DLL

O2 - BHO: Toolbar BHO - {a235e1e3-6296-4710-af39-104a7faa6c7c} - E:\PROGRA~1\FROMDO~2\bar\1.bin\65bar.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - E:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - E:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O2 - BHO: Search Assistant BHO - {f236ca79-3123-4afb-9f74-e98117ad5625} - E:\Program Files\FromDocToPDF_65\bar\1.bin\65SrcAs.dll

O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - E:\Program Files\Norton Internet Security\Engine\20.3.0.36\coIEPlg.dll

O3 - Toolbar: FromDocToPDF - {c66a678d-5e6c-4af9-8f57-c6192f42cf74} - E:\Program Files\FromDocToPDF_65\bar\1.bin\65bar.dll

O4 - HKLM\..\Run: [beid] "E:\Program Files\Belgium Identity Card\beid35gui.exe" /startup

O4 - HKLM\..\Run: [QuickTime Task] "E:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "E:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "E:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [FromDocToPDF Search Scope Monitor] "E:\PROGRA~1\FROMDO~2\bar\1.bin\65srchmn.exe" /m=2 /w /h

O4 - HKLM\..\Run: [FromDocToPDF_65 Browser Plugin Loader] E:\PROGRA~1\FROMDO~2\bar\1.bin\65brmon.exe

O4 - HKCU\..\Run: [ctfmon.exe] E:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [Google Update] "E:\Documents and Settings\user\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c

O4 - HKCU\..\Run: [RDReminder] E:\Program Files\RegClean Pro\RegCleanPro.exe -rem

O4 - S-1-5-18 Startup: OpenOffice.org 3.0 .lnk = E:\Program Files\OpenOffice.org 3\program\quickstart.exe (User 'SYSTEM')

O4 - S-1-5-18 Startup: OpenOffice.org 3.3 .lnk = E:\Program Files\OpenOffice.org 3\program\quickstart.exe (User 'SYSTEM')

O4 - .DEFAULT Startup: OpenOffice.org 3.0 .lnk = E:\Program Files\OpenOffice.org 3\program\quickstart.exe (User 'Default user')

O4 - .DEFAULT Startup: OpenOffice.org 3.3 .lnk = E:\Program Files\OpenOffice.org 3\program\quickstart.exe (User 'Default user')

O4 - Startup: OpenOffice.org 3.0 .lnk = E:\Program Files\OpenOffice.org 3\program\quickstart.exe

O4 - Startup: OpenOffice.org 3.3 .lnk = E:\Program Files\OpenOffice.org 3\program\quickstart.exe

O8 - Extra context menu item: &Search - http://tbedits.fromdoctopdf.com/one-toolbaredits/menusearch.jhtml?s=207743773&p2=^Y6^xdm010^YY^be&si=CLqD7bm41LYCFUzHtAodJXUASQ&a=7A1348A1-45D6-4697-9DD3-400ECB2E8267&n=2013041810&cv=1

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Plugin Control) - http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} (AxisMediaControlEmb Class) - http://ideefixx.dyndns.tv:811/activex/AMC.cab

O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - E:\WINDOWS\system32\browseui.dll

O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - E:\WINDOWS\system32\browseui.dll

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - E:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - E:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: FromDocToPDFService (FromDocToPDF_65Service) - COMPANYVERS_NAME - E:\PROGRA~1\FROMDO~2\bar\1.bin\65barsvc.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - E:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: Norton Identity Safe (NCO) - Symantec Corporation - E:\Program Files\Norton Identity Safe\Engine\2013.4.0.10\ccSvcHst.exe

O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - E:\Program Files\Norton Internet Security\Engine\20.3.0.36\ccSvcHst.exe

O23 - Service: Pml Driver HPZ12 - HP - E:\WINDOWS\system32\HPZipm12.exe

--

End of file - 7659 bytes

======Scheduled tasks folder======

E:\WINDOWS\tasks\Adobe Flash Player Updater.job

E:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1547161642-746137067-682003330-1003Core.job

E:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1547161642-746137067-682003330-1003UA.job

E:\WINDOWS\tasks\User_Feed_Synchronization-{F0A4EADB-E0DC-459B-AF7B-0780EB9E49F7}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]

Adobe PDF Reader Help bij koppelingen - E:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2011-08-30 61888]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]

Norton Identity Protection - E:\Program Files\Norton Internet Security\Engine\20.3.0.36\coIEPlg.dll [2013-02-14 509776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]

Norton Vulnerability Protection - E:\Program Files\Norton Internet Security\Engine\20.3.0.36\IPS\IPSBHO.DLL [2012-11-16 387040]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a235e1e3-6296-4710-af39-104a7faa6c7c}]

Toolbar BHO - E:\PROGRA~1\FROMDO~2\bar\1.bin\65bar.dll [2013-04-18 708168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

Java Plug-In 2 SSV Helper - E:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-02-09 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]

JQSIEStartDetectorImpl Class - E:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-02-09 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{f236ca79-3123-4afb-9f74-e98117ad5625}]

Search Assistant BHO - E:\Program Files\FromDocToPDF_65\bar\1.bin\65SrcAs.dll [2013-04-18 62864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - E:\Program Files\Norton Internet Security\Engine\20.3.0.36\coIEPlg.dll [2013-02-14 509776]

{c66a678d-5e6c-4af9-8f57-c6192f42cf74} - FromDocToPDF - E:\Program Files\FromDocToPDF_65\bar\1.bin\65bar.dll [2013-04-18 708168]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"beid"=E:\Program Files\Belgium Identity Card\beid35gui.exe [2009-02-02 2035712]

"QuickTime Task"=E:\Program Files\QuickTime\qttask.exe [2010-03-12 417792]

"Adobe Reader Speed Launcher"=E:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2011-08-31 40368]

"Adobe ARM"=E:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-03-29 937920]

"FromDocToPDF Search Scope Monitor"=E:\PROGRA~1\FROMDO~2\bar\1.bin\65srchmn.exe [2013-04-18 44784]

"FromDocToPDF_65 Browser Plugin Loader"=E:\PROGRA~1\FROMDO~2\bar\1.bin\65brmon.exe [2013-04-18 30096]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"ctfmon.exe"=E:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

"Google Update"=E:\Documents and Settings\user\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2012-05-08 116648]

"RDReminder"=E:\Program Files\RegClean Pro\RegCleanPro.exe -rem []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]

E:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-03-29 937920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]

E:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2011-08-31 40368]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]

E:\WINDOWS\ALCMTR.EXE [2005-05-03 69632]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATIPTA]

E:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2005-12-11 344064]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]

E:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]

E:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2007-05-08 54840]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]

E:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

E:\Program Files\QuickTime\qttask.exe [2010-03-12 417792]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]

E:\WINDOWS\RTHDCPL.EXE [2006-07-21 16261632]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel]

E:\WINDOWS\SkyTel.EXE [2006-05-16 2879488]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\E:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^HP Digital Imaging Monitor.lnk]

E:\PROGRA~1\HP\DIGITA~1\bin\hpqtra08.exe [2006-02-19 288472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\E:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^HP Photosmart Premier Snelstart.lnk]

E:\PROGRA~1\HP\DIGITA~1\bin\hpqthb08.exe [2006-02-10 73728]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\E:^Documents and Settings^user^Menu Start^Programma's^Opstarten^OpenOffice.org 3.0 .lnk]

E:\PROGRA~1\OPENOF~1.ORG\program\QUICKS~1.EXE [2010-12-13 1198592]

E:\Documents and Settings\user\Menu Start\Programma's\Opstarten

OpenOffice.org 3.0 .lnk - E:\Program Files\OpenOffice.org 3\program\quickstart.exe

OpenOffice.org 3.3 .lnk - E:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]

E:\WINDOWS\system32\Ati2evxx.dll [2005-12-11 47104]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]

E:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - E:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"HonorAutoRunSetting"=1

"NoDriveTypeAutoRun"=60

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

"E:\Program Files\Windows Live\Messenger\msnmsgr.exe"="E:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

"E:\Program Files\Windows Live\Messenger\livecall.exe"="E:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

"E:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="E:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe"

"E:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="E:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe"

"E:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe"="E:\Program Files\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe"

"E:\Program Files\HP\Digital Imaging\bin\hposfx08.exe"="E:\Program Files\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe"

"E:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="E:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe"

"E:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe"="E:\Program Files\HP\Digital Imaging\bin\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"

"E:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="E:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"

"E:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe"="E:\Program Files\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe"

"E:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe"="E:\Program Files\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe"

"E:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe"="E:\Program Files\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"

"E:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe"="E:\Program Files\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"

"E:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe"="E:\Program Files\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe"

"E:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="E:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe"

"E:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe"="E:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe:*:Enabled:hpqnrs08.exe"

"E:\Program Files\Java\jre6\bin\java.exe"="E:\Program Files\Java\jre6\bin\java.exe:*:Disabled:Java Platform SE binary"

"E:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"="E:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe:*:Enabled:Adobe Reader and Acrobat Manager"

"E:\Documents and Settings\user\Local Settings\Temp\pft254.tmp\setup.exe"="E:\Documents and Settings\user\Local Settings\Temp\pft254.tmp\setup.exe:*:Disabled:Kaspersky Anti-Virus 2009 Installatie"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

"E:\Program Files\Windows Live\Messenger\msnmsgr.exe"="E:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

"E:\Program Files\Windows Live\Messenger\livecall.exe"="E:\Program Files\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"

"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]

"midimapper"=midimap.dll

"msacm.imaadpcm"=imaadp32.acm

"msacm.msadpcm"=msadp32.acm

"msacm.msg711"=msg711.acm

"msacm.msgsm610"=msgsm32.acm

"msacm.trspch"=tssoft32.acm

"vidc.cvid"=iccvid.dll

"vidc.I420"=msh263.drv

"vidc.iv31"=ir32_32.dll

"vidc.iv32"=ir32_32.dll

"vidc.iv41"=ir41_32.ax

"vidc.iyuv"=iyuv_32.dll

"vidc.mrle"=msrle32.dll

"vidc.msvc"=msvidc32.dll

"vidc.uyvy"=msyuv.dll

"vidc.yuy2"=msyuv.dll

"vidc.yvu9"=tsbyuv.dll

"vidc.yvyu"=msyuv.dll

"wavemapper"=msacm32.drv

"msacm.msg723"=msg723.acm

"vidc.M263"=msh263.drv

"vidc.M261"=msh261.drv

"msacm.msaudio1"=msaud32.acm

"msacm.sl_anet"=sl_anet.acm

"msacm.iac2"=E:\WINDOWS\system32\iac25_32.ax

"vidc.iv50"=ir50_32.dll

"msacm.l3acm"=E:\WINDOWS\system32\l3codeca.acm

"wave"=wdmaud.drv

"midi"=wdmaud.drv

"mixer"=wdmaud.drv

"aux"=wdmaud.drv

"vidc.LEAD"=LCODCCMP.DLL

======List of files/folders created in the last 1 month======

2014-02-25 20:02:42 ----D---- E:\Program Files\trend micro

2014-02-25 20:02:40 ----D---- E:\rsit

2014-02-24 17:47:37 ----D---- E:\Program Files\Speccy

2014-02-13 18:56:32 ----ASH---- E:\pagefile.sys

2014-02-13 18:53:24 ----HDC---- E:\WINDOWS\$NtUninstallKB2916036$

2014-02-07 16:45:35 ----D---- E:\Documents and Settings\All Users\Application Data\tmp

2014-02-07 16:45:34 ----D---- E:\Documents and Settings\All Users\Application Data\hps

======List of files/folders modified in the last 1 month======

2014-02-25 20:02:42 ----RD---- E:\Program Files

2014-02-25 20:02:41 ----D---- E:\WINDOWS\Temp

2014-02-25 20:02:15 ----D---- E:\WINDOWS\Prefetch

2014-02-25 18:04:16 ----A---- E:\WINDOWS\SchedLgU.Txt

2014-02-25 17:28:03 ----SHD---- E:\System Volume Information

2014-02-24 17:48:17 ----D---- E:\WINDOWS

2014-02-24 17:48:10 ----D---- E:\WINDOWS\system32\CatRoot2

2014-02-22 09:06:40 ----D---- E:\WINDOWS\system32

2014-02-22 09:06:28 ----A---- E:\WINDOWS\system32\FlashPlayerApp.exe

2014-02-13 21:49:03 ----D---- E:\WINDOWS\Debug

2014-02-13 19:07:01 ----D---- E:\WINDOWS\Microsoft.NET

2014-02-13 19:06:55 ----RSD---- E:\WINDOWS\assembly

2014-02-13 18:56:32 ----D---- E:\Program Files\Internet Explorer

2014-02-13 18:53:36 ----HD---- E:\WINDOWS\inf

2014-02-13 18:53:28 ----RSHDC---- E:\WINDOWS\system32\dllcache

2014-02-13 18:52:33 ----SHD---- E:\WINDOWS\Installer

2014-02-13 18:52:12 ----HD---- E:\Config.Msi

2014-02-13 18:50:18 ----A---- E:\WINDOWS\system32\PerfStringBackup.INI

2014-02-13 18:48:58 ----D---- E:\WINDOWS\WinSxS

2014-02-13 18:37:08 ----D---- E:\WINDOWS\system32\MRT

2014-02-13 18:21:32 ----A---- E:\WINDOWS\system32\MRT.exe

2014-02-13 18:20:14 ----D---- E:\WINDOWS\ie8updates

2014-02-08 22:02:13 ----RSD---- E:\WINDOWS\Fonts

2014-02-06 04:38:34 ----A---- E:\WINDOWS\system32\wininet.dll

2014-02-06 00:08:31 ----N---- E:\WINDOWS\system32\occache.dll

2014-02-06 00:08:31 ----N---- E:\WINDOWS\system32\mstime.dll

2014-02-06 00:08:31 ----N---- E:\WINDOWS\system32\jsproxy.dll

2014-02-06 00:08:31 ----N---- E:\WINDOWS\system32\iedkcs32.dll

2014-02-06 00:08:31 ----A---- E:\WINDOWS\system32\urlmon.dll

2014-02-06 00:08:31 ----A---- E:\WINDOWS\system32\url.dll

2014-02-06 00:08:31 ----A---- E:\WINDOWS\system32\mshtmled.dll

2014-02-06 00:08:31 ----A---- E:\WINDOWS\system32\mshtml.dll

2014-02-06 00:08:31 ----A---- E:\WINDOWS\system32\msfeedsbs.dll

2014-02-06 00:08:31 ----A---- E:\WINDOWS\system32\msfeeds.dll

2014-02-06 00:08:31 ----A---- E:\WINDOWS\system32\licmgr10.dll

2014-02-06 00:08:31 ----A---- E:\WINDOWS\system32\iertutil.dll

2014-02-06 00:08:31 ----A---- E:\WINDOWS\system32\iepeers.dll

2014-02-06 00:08:31 ----A---- E:\WINDOWS\system32\ieframe.dll

2014-02-06 00:08:31 ----A---- E:\WINDOWS\system32\corpol.dll

2014-02-05 23:29:26 ----N---- E:\WINDOWS\system32\ie4uinit.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 PxHelp20;PxHelp20; E:\WINDOWS\System32\Drivers\PxHelp20.sys [2005-08-19 46080]

R0 SymDS;Symantec Data Store; E:\WINDOWS\system32\drivers\NIS\1403000.024\SYMDS.SYS [2013-01-22 367704]

R0 SymEFA;Symantec Extended File Attributes; E:\WINDOWS\system32\drivers\NIS\1403000.024\SYMEFA.SYS [2013-01-31 934488]

R1 BHDrvx86;BHDrvx86; \??\E:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\BASHDefs\20140214.001\BHDrvx86.sys []

R1 ccSet_NIS;Norton Internet Security Settings Manager; E:\WINDOWS\system32\drivers\NIS\1403000.024\ccSetx86.sys [2012-11-16 134304]

R1 ccSet_NST;Norton Identity Safe Settings Manager; E:\WINDOWS\system32\drivers\NST\7DD04000.00A\ccSetx86.sys [2013-04-16 134744]

R1 eeCtrl;Symantec Eraser Control driver; \??\E:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys []

R1 intelppm;Intel GV3-processorstuurprogramma; E:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40448]

R1 SRTSPX;Symantec Real Time Storage Protection (PEL); E:\WINDOWS\system32\drivers\NIS\1403000.024\SRTSPX.SYS [2013-01-29 32344]

R1 SymIRON;Symantec Iron Driver; E:\WINDOWS\system32\drivers\NIS\1403000.024\Ironx86.SYS [2012-11-16 175264]

R1 SYMTDI;Symantec Network Dispatch Driver; E:\WINDOWS\System32\Drivers\NIS\1403000.024\SYMTDI.SYS [2013-01-31 394656]

R3 ati2mtag;ati2mtag; E:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2005-12-11 1414656]

R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\E:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys []

R3 HDAudBus;Microsoft UAA-busstuurprogramma voor High Definition Audio; E:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]

R3 HidUsb;Microsoft HID Class-stuurprogramma; E:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]

R3 huawei_enumerator;huawei_enumerator; E:\WINDOWS\system32\DRIVERS\ew_jubusenum.sys [2010-12-30 72832]

R3 IDSxpx86;IDSxpx86; \??\E:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\IPSDefs\20140224.001\IDSxpx86.sys []

R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); E:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-07-24 4353024]

R3 mouhid;Stuurprogramma voor muis-HID; E:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-09-06 12288]

R3 NAVENG;NAVENG; \??\E:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\VirusDefs\20140224.023\NAVENG.SYS []

R3 NAVEX15;NAVEX15; \??\E:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\Definitions\VirusDefs\20140224.023\NAVEX15.SYS []

R3 RT61;Ralink RT61 Wireless Driver; E:\WINDOWS\system32\DRIVERS\RT61.sys [2006-08-02 384384]

R3 rtl8139;NT-stuurprogramma voor Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter; E:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]

R3 SRTSP;Symantec Real Time Storage Protection; E:\WINDOWS\System32\Drivers\NIS\1403000.024\SRTSP.SYS [2013-01-29 602712]

R3 SymEvent;SymEvent; \??\E:\WINDOWS\system32\Drivers\SYMEVENT.SYS []

R3 usbccgp;Microsoft generiek hoofd-USB-stuurprogramma; E:\WINDOWS\system32\DRIVERS\usbccgp.sys [2013-08-09 32384]

R3 Wdf01000;Kernel Mode Driver Frameworks service; E:\WINDOWS\System32\Drivers\wdf01000.sys [2008-03-27 503008]

S3 ACSSCR;ACR38 Smart Card Reader; E:\WINDOWS\system32\DRIVERS\a38usb.sys [2009-06-08 33536]

S3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device; E:\WINDOWS\system32\DRIVERS\ew_hwusbdev.sys [2010-12-30 102784]

S3 ew_usbenumfilter;huawei_CompositeFilter; E:\WINDOWS\system32\DRIVERS\ew_usbenumfilter.sys [2010-12-30 11136]

S3 ewusbnet;HUAWEI USB-NDIS miniport; E:\WINDOWS\system32\DRIVERS\ewusbnet.sys [2010-12-31 234368]

S3 HPZid412;IEEE-1284.4 Driver HPZid412; E:\WINDOWS\system32\DRIVERS\HPZid412.sys [2006-04-13 49664]

S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; E:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2006-04-13 16496]

S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; E:\WINDOWS\system32\DRIVERS\HPZius12.sys [2006-04-13 21568]

S3 huawei_cdcacm;huawei_cdcacm; E:\WINDOWS\system32\DRIVERS\ew_jucdcacm.sys [2010-12-30 85632]

S3 huawei_cdcecm;huawei_cdcecm; E:\WINDOWS\system32\DRIVERS\ew_jucdcecm.sys [2010-12-30 51456]

S3 huawei_ext_ctrl;huawei_ext_ctrl; E:\WINDOWS\system32\DRIVERS\ew_juextctrl.sys [2010-12-30 26496]

S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; E:\WINDOWS\system32\DRIVERS\ewusbmdm.sys [2010-12-30 191872]

S3 usbprint;Microsoft USB PRINTER Class; E:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]

S3 usbscan;Stuurprogramma voor USB-scanner; E:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]

S3 USBSTOR;Stuurprogramma voor USB-massaopslag; E:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]

S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; E:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]

S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; E:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; E:\WINDOWS\system32\Ati2evxx.exe [2005-12-11 393216]

R2 JavaQuickStarterService;Java Quick Starter; E:\Program Files\Java\jre6\bin\jqs.exe [2011-02-02 153376]

R2 NCO;Norton Identity Safe; E:\Program Files\Norton Identity Safe\Engine\2013.4.0.10\ccSvcHst.exe [2013-05-21 144368]

R2 NIS;Norton Internet Security; E:\Program Files\Norton Internet Security\Engine\20.3.0.36\ccSvcHst.exe [2012-12-24 144520]

R2 Pml Driver HPZ12;Pml Driver HPZ12; E:\WINDOWS\system32\HPZipm12.exe [2007-08-09 73728]

S2 FromDocToPDF_65Service;FromDocToPDFService; E:\PROGRA~1\FROMDO~2\bar\1.bin\65barsvc.exe [2013-04-18 42504]

S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; E:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-22 257928]

S3 aspnet_state;ASP.NET State Service; E:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]

S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; E:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]

S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; E:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]

S3 idsvc;Windows CardSpace; E:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]

S3 WMPNetworkSvc;Windows Media Player Network Sharing-service; E:\Program Files\Windows Media Player\WMPNetwk.exe [2006-11-02 917504]

S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; E:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; E:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Geplaatst:

Je Java software is verouderd.

Oudere versies hebben lekken die malware de kans geeft om zich te installeren op je systeem.

Ga naar Java en download daar de correcte Java versie.

  • Klik op "Gratis Java-download".
  • Ga akkoord met de licentiebepalingen en klik op de button voor de gratis download.
  • Het bestand JavaSetup wordt aangeboden - kies hier voor "bestand opslaan".
  • Sluit alle programma's die eventueel open zijn - zeker je web browser!
  • Ga dan naar Start > Configuratiescherm > Software en verwijder alle oudere versies van Java uit de Softwarelijst.
  • Vink alles aan met Java Runtime Environment (JRE of J2SE of JAVA) in de naam.
  • Klik dan op Verwijderen of op de Wijzig/Verwijder knop.
  • Herhaal dit tot alle oudere versies verdwenen zijn.
  • Na het verwijderen van alle oudere versies, herstart je pc.
  • Klik vervolgens op JavaSetup om de nieuwste versie van Java te installeren.
  • Vink de installatie van de Ask toolbar uit en ga dan verder met de installatie.

Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe (hier en hier) kan je lezen hoe je dat doet.

Download 51a612a8b27e2-Zoek.pngZoek.exe naar het bureaublad (niet de .zip- of .rar-versie)

  • Wanneer Internet Explorer of een andere browser of virusscanner melding geeft dat dit bestand onveilig zou zijn kun je negeren, dit is namelijk een onterechte waarschuwing.
  • Dubbelklik op Zoek.exe om de tool te starten.
  • Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  • Kopieer nu onderstaande code en plak die in het grote invulvenster:
  • Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.

FromDocToPDF_65Service;FromDocToPDFService;s
{4c60e5ab-5c68-4c59-abaa-885010b24b32};c
E:\Program Files\FromDocToPDF_65\bar;fs
{a235e1e3-6296-4710-af39-104a7faa6c7c};c
E:\PROGRA~1\FROMDO~2\bar;fs
{f236ca79-3123-4afb-9f74-e98117ad5625};c
{c66a678d-5e6c-4af9-8f57-c6192f42cf74};c
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a235e1e3-6296-4710-af39-104a7faa6c7c}];r
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{f236ca79-3123-4afb-9f74-e98117ad5625}];r
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run];r
"FromDocToPDF Search Scope Monitor"=-;r
"FromDocToPDF_65 Browser Plugin Loader"=-;r
emptyclsid;
chromelook; 
firefoxlook; 
emptyfolderscheck;delete 
startupall; 
filesrcm;

  • Klik op de knop "Options" en vink nu de onderstaande opties aan.
  • Do a Deep Scan

  • Installed Programs

  • HijackThis Log

  • Startup Information
  • Running Processes
  • Auto Clean
  • De optie "Scan All Users" staat standaard aangevinkt.
  • Klik nu op de knop "Run script".
  • Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
  • Mocht er geen logje verschijnen, start zoek.exe dan opnieuw en klik op de knop zoek-results.log, de log verschijnt dan alsnog.
  • Post het geopende logje in het volgende bericht.

Geplaatst:

Beste,

alvast voor de reeds geboden hulp. Hieronder de log.

Zoek.exe v5.0.0.0 Updated 19-February-2014

Tool run by user on do 27/02/2014 at 21:09:52,42.

Microsoft Windows XP Professional 5.1.2600 Service Pack 3 x86

Running in: Normal Mode Internet Access Detected

Launched: E:\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\A7ELYJ04\zoek[1].exe [scan all users] [script inserted] [Checkboxes used]

==== Running Processes ======================

E:\WINDOWS\System32\smss.exe

E:\WINDOWS\system32\winlogon.exe

E:\WINDOWS\system32\services.exe

E:\WINDOWS\system32\lsass.exe

E:\WINDOWS\system32\Ati2evxx.exe

E:\WINDOWS\system32\svchost -k DcomLaunch

svchost.exe

E:\WINDOWS\System32\svchost.exe -k netsvcs

svchost.exe

E:\WINDOWS\system32\Ati2evxx.exe

E:\WINDOWS\Explorer.EXE

E:\WINDOWS\system32\spoolsv.exe

E:\Program Files\Belgium Identity Card\beid35gui.exe

E:\PROGRA~1\FROMDO~2\bar\1.bin\65brmon.exe

E:\Program Files\Common Files\Java\Java Update\jusched.exe

E:\WINDOWS\system32\ctfmon.exe

E:\Program Files\OpenOffice.org 3\program\soffice.exe

E:\Program Files\OpenOffice.org 3\program\soffice.bin

svchost.exe

E:\Program Files\Java\jre7\bin\jqs.exe

E:\Program Files\Norton Identity Safe\Engine\2013.4.0.10\ccSvcHst.exe

E:\Program Files\Norton Internet Security\Engine\20.3.0.36\ccSvcHst.exe

E:\WINDOWS\system32\HPZipm12.exe

E:\WINDOWS\system32\svchost.exe -k imgsvc

E:\Program Files\Norton Internet Security\Engine\20.3.0.36\ccSvcHst.exe

E:\Program Files\Norton Identity Safe\Engine\2013.4.0.10\ccSvcHst.exe

E:\WINDOWS\System32\svchost.exe -k HTTPFilter

E:\Program Files\Internet Explorer\iexplore.exe

E:\Program Files\Internet Explorer\iexplore.exe

E:\Program Files\Internet Explorer\iexplore.exe

E:\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\A7ELYJ04\zoek[1].exe

==== System Restore Info ======================

27/02/2014 21:12:58 Zoek.exe System Restore Point Created Succesfully.

==== Empty Folders Check ======================

E:\Documents and Settings\user\Application Data\Lite deleted successfully

E:\Documents and Settings\user\Application Data\Systweak deleted successfully

E:\Documents and Settings\user\Application Data\WinRAR deleted successfully

E:\Documents and Settings\user\Local Settings\Application Data\WMTools Downloaded Files deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-1547161642-746137067-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4c60e5ab-5c68-4c59-abaa-885010b24b32} deleted successfully

HKEY_USERS\S-1-5-21-1547161642-746137067-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{a235e1e3-6296-4710-af39-104a7faa6c7c} deleted successfully

HKEY_USERS\S-1-5-21-1547161642-746137067-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{a235e1e3-6296-4710-af39-104a7faa6c7c} deleted successfully

HKEY_USERS\S-1-5-21-1547161642-746137067-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{f236ca79-3123-4afb-9f74-e98117ad5625} deleted successfully

HKEY_USERS\S-1-5-21-1547161642-746137067-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{f236ca79-3123-4afb-9f74-e98117ad5625} deleted successfully

HKEY_USERS\S-1-5-21-1547161642-746137067-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{c66a678d-5e6c-4af9-8f57-c6192f42cf74} deleted successfully

HKEY_USERS\S-1-5-21-1547161642-746137067-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{c66a678d-5e6c-4af9-8f57-c6192f42cf74} deleted successfully

HKEY_USERS\S-1-5-21-1547161642-746137067-682003330-1003\Software\Microsoft\Internet Explorer\SearchScopes\{9a216821-0ec5-49a3-85ac-fb72ae79a1e8} deleted successfully

HKEY_USERS\S-1-5-21-1547161642-746137067-682003330-1003\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{4c60e5ab-5c68-4c59-abaa-885010b24b32} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{a235e1e3-6296-4710-af39-104a7faa6c7c} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a235e1e3-6296-4710-af39-104a7faa6c7c} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{f236ca79-3123-4afb-9f74-e98117ad5625} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{f236ca79-3123-4afb-9f74-e98117ad5625} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{c66a678d-5e6c-4af9-8f57-c6192f42cf74} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-1547161642-746137067-682003330-1003\Software\Microsoft\Internet Explorer\URLSearchHooks\{4c60e5ab-5c68-4c59-abaa-885010b24b32} deleted successfully

HKEY_USERS\S-1-5-21-1547161642-746137067-682003330-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{c66a678d-5e6c-4af9-8f57-c6192f42cf74} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{c66a678d-5e6c-4af9-8f57-c6192f42cf74} deleted successfully

HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\{F04D2D30-776C-4d02-8627-8E4385ECA58D} deleted successfully

==== Installed Programs ======================

Adobe AIR

Adobe Flash Player 12 ActiveX

Adobe Flash Player 12 Plugin

Adobe Reader 8.3.1 - Nederlands

AiO_Scan_CDA

AiOSoftwareNPI

ATI-configuratiescherm

ATI Display Driver

AXIS Media Control Embedded

Belgium e-ID middleware 3.5.1 (build 5075)

Beveiligingsupdate for Windows XP (KB941569)

Beveiligingsupdate voor Microsoft Windows (KB2564958)

Beveiligingsupdate voor Windows Internet Explorer 7 (KB938127-v2)

Beveiligingsupdate voor Windows Internet Explorer 7 (KB963027)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2183461)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2360131)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2416400)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2482017)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2497640)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2510531)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2530548)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2544521)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2559049)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2586448)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2618444)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2647516)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2675157)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2699988)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2722913)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2744842)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2761465)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2792100)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2797052)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2799329)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2809289)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2817183)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2829530)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2838727)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2846071)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2847204)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2862772)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2870699)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2879017)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2888505)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2898785)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2909210)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB2909921)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB971961)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB981332)

Beveiligingsupdate voor Windows Internet Explorer 8 (KB982381)

Beveiligingsupdate voor Windows Media Player (KB2378111)

Beveiligingsupdate voor Windows Media Player (KB2834904-v2)

Beveiligingsupdate voor Windows Media Player (KB2834904)

Beveiligingsupdate voor Windows Media Player (KB952069)

Beveiligingsupdate voor Windows Media Player (KB954155)

Beveiligingsupdate voor Windows Media Player (KB968816)

Beveiligingsupdate voor Windows Media Player (KB973540)

Beveiligingsupdate voor Windows Media Player (KB975558)

Beveiligingsupdate voor Windows Media Player (KB978695)

Beveiligingsupdate voor Windows Media Player 11 (KB936782)

Beveiligingsupdate voor Windows Media Player 11 (KB954154)

Beveiligingsupdate voor Windows XP (KB2079403)

Beveiligingsupdate voor Windows XP (KB2115168)

Beveiligingsupdate voor Windows XP (KB2121546)

Beveiligingsupdate voor Windows XP (KB2160329)

Beveiligingsupdate voor Windows XP (KB2229593)

Beveiligingsupdate voor Windows XP (KB2259922)

Beveiligingsupdate voor Windows XP (KB2279986)

Beveiligingsupdate voor Windows XP (KB2286198)

Beveiligingsupdate voor Windows XP (KB2296011)

Beveiligingsupdate voor Windows XP (KB2296199)

Beveiligingsupdate voor Windows XP (KB2347290)

Beveiligingsupdate voor Windows XP (KB2360937)

Beveiligingsupdate voor Windows XP (KB2387149)

Beveiligingsupdate voor Windows XP (KB2393802)

Beveiligingsupdate voor Windows XP (KB2412687)

Beveiligingsupdate voor Windows XP (KB2419632)

Beveiligingsupdate voor Windows XP (KB2423089)

Beveiligingsupdate voor Windows XP (KB2436673)

Beveiligingsupdate voor Windows XP (KB2440591)

Beveiligingsupdate voor Windows XP (KB2443105)

Beveiligingsupdate voor Windows XP (KB2476490)

Beveiligingsupdate voor Windows XP (KB2476687)

Beveiligingsupdate voor Windows XP (KB2478960)

Beveiligingsupdate voor Windows XP (KB2478971)

Beveiligingsupdate voor Windows XP (KB2479628)

Beveiligingsupdate voor Windows XP (KB2479943)

Beveiligingsupdate voor Windows XP (KB2481109)

Beveiligingsupdate voor Windows XP (KB2483185)

Beveiligingsupdate voor Windows XP (KB2485376)

Beveiligingsupdate voor Windows XP (KB2485663)

Beveiligingsupdate voor Windows XP (KB2503658)

Beveiligingsupdate voor Windows XP (KB2503665)

Beveiligingsupdate voor Windows XP (KB2506212)

Beveiligingsupdate voor Windows XP (KB2506223)

Beveiligingsupdate voor Windows XP (KB2507618)

Beveiligingsupdate voor Windows XP (KB2507938)

Beveiligingsupdate voor Windows XP (KB2508272)

Beveiligingsupdate voor Windows XP (KB2508429)

Beveiligingsupdate voor Windows XP (KB2509553)

Beveiligingsupdate voor Windows XP (KB2511455)

Beveiligingsupdate voor Windows XP (KB2524375)

Beveiligingsupdate voor Windows XP (KB2535512)

Beveiligingsupdate voor Windows XP (KB2536276-v2)

Beveiligingsupdate voor Windows XP (KB2536276)

Beveiligingsupdate voor Windows XP (KB2544893-v2)

Beveiligingsupdate voor Windows XP (KB2544893)

Beveiligingsupdate voor Windows XP (KB2555917)

Beveiligingsupdate voor Windows XP (KB2562937)

Beveiligingsupdate voor Windows XP (KB2566454)

Beveiligingsupdate voor Windows XP (KB2567053)

Beveiligingsupdate voor Windows XP (KB2567680)

Beveiligingsupdate voor Windows XP (KB2570222)

Beveiligingsupdate voor Windows XP (KB2570947)

Beveiligingsupdate voor Windows XP (KB2584146)

Beveiligingsupdate voor Windows XP (KB2585542)

Beveiligingsupdate voor Windows XP (KB2592799)

Beveiligingsupdate voor Windows XP (KB2598479)

Beveiligingsupdate voor Windows XP (KB2603381)

Beveiligingsupdate voor Windows XP (KB2618451)

Beveiligingsupdate voor Windows XP (KB2619339)

Beveiligingsupdate voor Windows XP (KB2620712)

Beveiligingsupdate voor Windows XP (KB2621440)

Beveiligingsupdate voor Windows XP (KB2624667)

Beveiligingsupdate voor Windows XP (KB2631813)

Beveiligingsupdate voor Windows XP (KB2633171)

Beveiligingsupdate voor Windows XP (KB2639417)

Beveiligingsupdate voor Windows XP (KB2641653)

Beveiligingsupdate voor Windows XP (KB2646524)

Beveiligingsupdate voor Windows XP (KB2647518)

Beveiligingsupdate voor Windows XP (KB2653956)

Beveiligingsupdate voor Windows XP (KB2655992)

Beveiligingsupdate voor Windows XP (KB2659262)

Beveiligingsupdate voor Windows XP (KB2660465)

Beveiligingsupdate voor Windows XP (KB2661637)

Beveiligingsupdate voor Windows XP (KB2676562)

Beveiligingsupdate voor Windows XP (KB2685939)

Beveiligingsupdate voor Windows XP (KB2686509)

Beveiligingsupdate voor Windows XP (KB2691442)

Beveiligingsupdate voor Windows XP (KB2695962)

Beveiligingsupdate voor Windows XP (KB2698365)

Beveiligingsupdate voor Windows XP (KB2705219)

Beveiligingsupdate voor Windows XP (KB2707511)

Beveiligingsupdate voor Windows XP (KB2709162)

Beveiligingsupdate voor Windows XP (KB2712808)

Beveiligingsupdate voor Windows XP (KB2718523)

Beveiligingsupdate voor Windows XP (KB2719985)

Beveiligingsupdate voor Windows XP (KB2723135)

Beveiligingsupdate voor Windows XP (KB2724197)

Beveiligingsupdate voor Windows XP (KB2727528)

Beveiligingsupdate voor Windows XP (KB2731847)

Beveiligingsupdate voor Windows XP (KB2753842-v2)

Beveiligingsupdate voor Windows XP (KB2753842)

Beveiligingsupdate voor Windows XP (KB2757638)

Beveiligingsupdate voor Windows XP (KB2758857)

Beveiligingsupdate voor Windows XP (KB2761226)

Beveiligingsupdate voor Windows XP (KB2770660)

Beveiligingsupdate voor Windows XP (KB2778344)

Beveiligingsupdate voor Windows XP (KB2779030)

Beveiligingsupdate voor Windows XP (KB2780091)

Beveiligingsupdate voor Windows XP (KB2799494)

Beveiligingsupdate voor Windows XP (KB2802968)

Beveiligingsupdate voor Windows XP (KB2807986)

Beveiligingsupdate voor Windows XP (KB2808735)

Beveiligingsupdate voor Windows XP (KB2813170)

Beveiligingsupdate voor Windows XP (KB2813345)

Beveiligingsupdate voor Windows XP (KB2820197)

Beveiligingsupdate voor Windows XP (KB2820917)

Beveiligingsupdate voor Windows XP (KB2829361)

Beveiligingsupdate voor Windows XP (KB2834886)

Beveiligingsupdate voor Windows XP (KB2839229)

Beveiligingsupdate voor Windows XP (KB2845187)

Beveiligingsupdate voor Windows XP (KB2847311)

Beveiligingsupdate voor Windows XP (KB2849470)

Beveiligingsupdate voor Windows XP (KB2850851)

Beveiligingsupdate voor Windows XP (KB2850869)

Beveiligingsupdate voor Windows XP (KB2859537)

Beveiligingsupdate voor Windows XP (KB2862152)

Beveiligingsupdate voor Windows XP (KB2862330)

Beveiligingsupdate voor Windows XP (KB2862335)

Beveiligingsupdate voor Windows XP (KB2864063)

Beveiligingsupdate voor Windows XP (KB2868038)

Beveiligingsupdate voor Windows XP (KB2868626)

Beveiligingsupdate voor Windows XP (KB2876217)

Beveiligingsupdate voor Windows XP (KB2876315)

Beveiligingsupdate voor Windows XP (KB2876331)

Beveiligingsupdate voor Windows XP (KB2883150)

Beveiligingsupdate voor Windows XP (KB2892075)

Beveiligingsupdate voor Windows XP (KB2893294)

Beveiligingsupdate voor Windows XP (KB2893984)

Beveiligingsupdate voor Windows XP (KB2898715)

Beveiligingsupdate voor Windows XP (KB2900986)

Beveiligingsupdate voor Windows XP (KB2914368)

Beveiligingsupdate voor Windows XP (KB2916036)

Beveiligingsupdate voor Windows XP (KB923561)

Beveiligingsupdate voor Windows XP (KB923789)

Beveiligingsupdate voor Windows XP (KB938464-v2)

Beveiligingsupdate voor Windows XP (KB946648)

Beveiligingsupdate voor Windows XP (KB950760)

Beveiligingsupdate voor Windows XP (KB950762)

Beveiligingsupdate voor Windows XP (KB950974)

Beveiligingsupdate voor Windows XP (KB951066)

Beveiligingsupdate voor Windows XP (KB951376-v2)

Beveiligingsupdate voor Windows XP (KB951748)

Beveiligingsupdate voor Windows XP (KB952004)

Beveiligingsupdate voor Windows XP (KB952954)

Beveiligingsupdate voor Windows XP (KB954459)

Beveiligingsupdate voor Windows XP (KB954600)

Beveiligingsupdate voor Windows XP (KB955069)

Beveiligingsupdate voor Windows XP (KB956572)

Beveiligingsupdate voor Windows XP (KB956744)

Beveiligingsupdate voor Windows XP (KB956802)

Beveiligingsupdate voor Windows XP (KB956803)

Beveiligingsupdate voor Windows XP (KB956844)

Beveiligingsupdate voor Windows XP (KB957097)

Beveiligingsupdate voor Windows XP (KB958644)

Beveiligingsupdate voor Windows XP (KB958687)

Beveiligingsupdate voor Windows XP (KB958690)

Beveiligingsupdate voor Windows XP (KB958869)

Beveiligingsupdate voor Windows XP (KB959426)

Beveiligingsupdate voor Windows XP (KB960225)

Beveiligingsupdate voor Windows XP (KB960715)

Beveiligingsupdate voor Windows XP (KB960803)

Beveiligingsupdate voor Windows XP (KB960859)

Beveiligingsupdate voor Windows XP (KB961371)

Beveiligingsupdate voor Windows XP (KB961373)

Beveiligingsupdate voor Windows XP (KB961501)

Beveiligingsupdate voor Windows XP (KB968537)

Beveiligingsupdate voor Windows XP (KB969059)

Beveiligingsupdate voor Windows XP (KB969898)

Beveiligingsupdate voor Windows XP (KB969947)

Beveiligingsupdate voor Windows XP (KB970238)

Beveiligingsupdate voor Windows XP (KB970430)

Beveiligingsupdate voor Windows XP (KB971468)

Beveiligingsupdate voor Windows XP (KB971486)

Beveiligingsupdate voor Windows XP (KB971557)

Beveiligingsupdate voor Windows XP (KB971633)

Beveiligingsupdate voor Windows XP (KB971657)

Beveiligingsupdate voor Windows XP (KB972270)

Beveiligingsupdate voor Windows XP (KB973346)

Beveiligingsupdate voor Windows XP (KB973354)

Beveiligingsupdate voor Windows XP (KB973507)

Beveiligingsupdate voor Windows XP (KB973525)

Beveiligingsupdate voor Windows XP (KB973869)

Beveiligingsupdate voor Windows XP (KB973904)

Beveiligingsupdate voor Windows XP (KB974112)

Beveiligingsupdate voor Windows XP (KB974318)

Beveiligingsupdate voor Windows XP (KB974392)

Beveiligingsupdate voor Windows XP (KB974571)

Beveiligingsupdate voor Windows XP (KB975025)

Beveiligingsupdate voor Windows XP (KB975467)

Beveiligingsupdate voor Windows XP (KB975560)

Beveiligingsupdate voor Windows XP (KB975561)

Beveiligingsupdate voor Windows XP (KB975562)

Beveiligingsupdate voor Windows XP (KB975713)

Beveiligingsupdate voor Windows XP (KB977165)

Beveiligingsupdate voor Windows XP (KB977816)

Beveiligingsupdate voor Windows XP (KB977914)

Beveiligingsupdate voor Windows XP (KB978037)

Beveiligingsupdate voor Windows XP (KB978251)

Beveiligingsupdate voor Windows XP (KB978262)

Beveiligingsupdate voor Windows XP (KB978338)

Beveiligingsupdate voor Windows XP (KB978542)

Beveiligingsupdate voor Windows XP (KB978601)

Beveiligingsupdate voor Windows XP (KB978706)

Beveiligingsupdate voor Windows XP (KB979309)

Beveiligingsupdate voor Windows XP (KB979482)

Beveiligingsupdate voor Windows XP (KB979559)

Beveiligingsupdate voor Windows XP (KB979683)

Beveiligingsupdate voor Windows XP (KB979687)

Beveiligingsupdate voor Windows XP (KB980195)

Beveiligingsupdate voor Windows XP (KB980218)

Beveiligingsupdate voor Windows XP (KB980232)

Beveiligingsupdate voor Windows XP (KB980436)

Beveiligingsupdate voor Windows XP (KB981322)

Beveiligingsupdate voor Windows XP (KB981852)

Beveiligingsupdate voor Windows XP (KB981957)

Beveiligingsupdate voor Windows XP (KB981997)

Beveiligingsupdate voor Windows XP (KB982132)

Beveiligingsupdate voor Windows XP (KB982214)

Beveiligingsupdate voor Windows XP (KB982665)

Beveiligingsupdate voor Windows XP (KB982802)

BufferChm

C4100

c4100_Help

CCleaner (remove only)

CP_CalendarTemplates1

cp_OnlineProjectsConfig

CP_Package_Basic1

CP_Panorama1Config

cp_PosterPrintConfig

CueTour

CustomerResearchQFolder

Destinations

DeviceManagementQFolder

DocProc

DocProcQFolder

DocumentViewer

DocumentViewerQFolder

Essenti‰le update voor Windows Media Player 11 (KB959772)

eSupportQFolder

Fax_CDA

FM PDF To JPG Converter Free 2.37

Free Mp3 Wma Converter V 2.2

FromDocToPDF Toolbar

FullDPAppQFolder

Google Chrome

GPL Ghostscript 8.71 Lite

Guitar Pro 5.2

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)

Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)

Hotfix for Windows Media Format 11 SDK (KB929399)

Hotfix for Windows XP (KB954550-v5)

Hotfix for Windows XP (KB976002-v5)

Hotfix voor Windows Media Player 11 (KB939683)

Hotfix voor Windows XP (KB2158563)

Hotfix voor Windows XP (KB2443685)

Hotfix voor Windows XP (KB2570791)

Hotfix voor Windows XP (KB2633952)

Hotfix voor Windows XP (KB2756822)

Hotfix voor Windows XP (KB2779562)

Hotfix voor Windows XP (KB952287)

Hotfix voor Windows XP (KB961118)

Hotfix voor Windows XP (KB970653-v3)

Hotfix voor Windows XP (KB976098-v2)

Hotfix voor Windows XP (KB979306)

Hotfix voor Windows XP (KB981793)

HP Customer Participation Program 7.0

HP Document Viewer 7.0

HP Imaging Device Functions 7.0

HP Photosmart Premier Software 6.5

HP Photosmart, Officejet and Deskjet 7.0.A

HP Product Assistant

HP Solution Center 7.0

HP Update

HPPhotoSmartExpress

HPProductAssistant

InstantShareDevices

InstantShareDevicesMFC

Java 7 Update 51

Java Auto Updater

KB888111: High Definition Audio

Kruidvat fotoservice

MarketResearch

Microsoft .NET Framework 1.1

Microsoft .NET Framework 1.1 Dutch Language Pack

Microsoft .NET Framework 1.1 Security Update (KB2698023)

Microsoft .NET Framework 1.1 Security Update (KB2833941)

Microsoft .NET Framework 1.1 Security Update (KB979906)

Microsoft .NET Framework 2.0 Service Pack 2

Microsoft .NET Framework 3.0 Service Pack 2

Microsoft .NET Framework 3.5 SP1

Microsoft Compression Client Pack 1.0 for Windows XP

Microsoft Internationalized Domain Names Mitigation APIs

Microsoft Kernel-Mode Driver Framework Feature Pack 1.7

Microsoft National Language Support Downlevel APIs

Microsoft Silverlight

Microsoft User-Mode Driver Framework Feature Pack 1.0

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

MP4 to MP3 Converter 6.1.6

MSXML 4.0 SP2 (KB954430)

MSXML 4.0 SP2 (KB973688)

Nero 6 Enterprise Edition

NewCopy_CDA

Norton Identity Safe

Norton Internet Security

OCR Software by I.R.I.S 7.0

OpenOffice.org 3.3

PanoStandAlone

PhotoGallery

ProductContextNPI

RandMap

Readme

Realtek High Definition Audio Driver

Scan

ScannerCopy

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2736416)

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2840629)

Security Update for Microsoft .NET Framework 3.5 SP1 (KB2861697)

SkinsHP1

SlideShow

SolutionCenter

Sonic_PrimoSDK

Speccy

Status

Toolbox

TrayApp

Unload

Update for Microsoft .NET Framework 3.5 SP1 (KB963707)

Update voor Windows Internet Explorer 8 (KB976662)

Update voor Windows Internet Explorer 8 (KB980182)

Update voor Windows Internet Explorer 8 (KB980302)

Update voor Windows XP (KB2141007)

Update voor Windows XP (KB2345886)

Update voor Windows XP (KB2467659)

Update voor Windows XP (KB2541763)

Update voor Windows XP (KB2607712)

Update voor Windows XP (KB2616676)

Update voor Windows XP (KB2641690)

Update voor Windows XP (KB2661254-v2)

Update voor Windows XP (KB2718704)

Update voor Windows XP (KB2736233)

Update voor Windows XP (KB2749655)

Update voor Windows XP (KB2863058)

Update voor Windows XP (KB2904266)

Update voor Windows XP (KB951978)

Update voor Windows XP (KB955759)

Update voor Windows XP (KB955839)

Update voor Windows XP (KB967715)

Update voor Windows XP (KB968389)

Update voor Windows XP (KB971029)

Update voor Windows XP (KB971737)

Update voor Windows XP (KB973687)

Update voor Windows XP (KB973815)

VideoLAN VLC media player 0.8.6f

WebFldrs XP

WebReg

Windows Driver Package - Atheros (AR5211) Net (01/20/2006 4.2.2.7)

Windows Driver Package - ATI Technologies Inc System (12/20/2004 5.10.1000.5)

Windows Driver Package - Ralink Technology, Inc. (RT61) Net (08/02/2006 1.01.02.0000)

Windows Genuine Advantage Notifications (KB905474)

Windows Internet Explorer 7

Windows Internet Explorer 8

Windows Media Format 11 runtime

Windows Media Player 11

Windows PowerShell 1.0

Windows XP Service Pack 3

WinRAR

Zilla JPG To PDF Converter 2.0

==== Deleting Services ======================

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FromDocToPDF_65Service deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\FromDocToPDF_65Service deleted successfully

==== Registry Fix Code ======================

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a235e1e3-6296-4710-af39-104a7faa6c7c}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{f236ca79-3123-4afb-9f74-e98117ad5625}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"FromDocToPDF Search Scope Monitor"=-

"FromDocToPDF_65 Browser Plugin Loader"=-

==== Deleting Files \ Folders ======================

E:\Documents and Settings\user\Application Data\FromDocToPDF_65 deleted

E:\found.000 deleted

E:\Documents and Settings\user\Application Data\Toolbar4 deleted

E:\Documents and Settings\user\Local Settings\Application Data\IAC deleted

E:\WINDOWS\002639_.tmp deleted

E:\WINDOWS\SET3.tmp deleted

E:\WINDOWS\SET4.tmp deleted

E:\WINDOWS\SET8.tmp deleted

E:\WINDOWS\system32\roboot.exe deleted

"E:\Program Files\FromDocToPDF_65\bar\1.bin\65brmon.exe" deleted

"E:\Program Files\FromDocToPDF_65\bar\1.bin\65brstub.dll" deleted

"E:\Program Files\FromDocToPDF_65\bar\1.bin\T8RES.DLL" deleted

"E:\PROGRA~1\FROMDO~2\bar\1.bin\65brmon.exe" deleted

"E:\PROGRA~1\FROMDO~2\bar\1.bin\65brstub.dll" deleted

"E:\PROGRA~1\FROMDO~2\bar\1.bin\T8RES.DLL" deleted

"E:\Program Files\FromDocToPDF_65\bar\1.bin\65brmon.exe" deleted

"E:\Program Files\FromDocToPDF_65\bar\1.bin\65brstub.dll" deleted

"E:\Program Files\FromDocToPDF_65\bar\1.bin\T8RES.DLL" deleted

"E:\Program Files\FromDocToPDF_65\bar\1.bin\65brmon.exe" deleted

"E:\Program Files\FromDocToPDF_65\bar\1.bin\65brstub.dll" deleted

"E:\Program Files\FromDocToPDF_65\bar\1.bin\T8RES.DLL" deleted

"E:\Program Files\FromDocToPDF_65\bar" deleted

"E:\PROGRA~1\FROMDO~2\bar" deleted

"E:\Program Files\FromDocToPDF_65" deleted

"E:\Program Files\FromDocToPDF_65" deleted

"E:\Program Files\FromDocToPDF_65\bar\1.bin" deleted

"E:\PROGRA~1\FROMDO~2\bar\1.bin" deleted

"E:\Program Files\FromDocToPDF_65\bar" deleted

"E:\Program Files\FromDocToPDF_65\bar\1.bin" deleted

"E:\Program Files\FromDocToPDF_65\bar" deleted

"E:\Program Files\FromDocToPDF_65\bar\1.bin" deleted

==== System Specs ======================

Windows: Windows XP Professional Service Pack 3 (Build 2600)

Memory (RAM): 895 MB

CPU Info: Intel® Celeron® M CPU 410 @ 1.46GHz

CPU Speed: 1463,3 MHz

Sound Card: Realtek HD Audio output |

Display Adapters: ATI RADEON XPRESS 200M Series | ATI RADEON XPRESS 200M Series | NetMeeting driver | RDPDD Chained DD

Monitors: 1x; Plug en Play-monitor | Plug en Play-monitor |

Screen Resolution: 1280 X 800 - 32 bit

Network: Network Present

Network Adapters: Ralink Wireless LAN Card V2 - Pakketplanner-minipoort | Realtek RTL8139 Family PCI Fast Ethernet NIC - Pakketplanner-minipoort

CD / DVD Drives: 1x (D: | ) D: Optiarc DVD RW AD-5540A

Ports: COM Ports NOT Present. LPT Port NOT Present.

Mouse: 16 Button Wheel Mouse Present

Hard Disks: C: 133,4GB | E: 15,6GB

Hard Disks - Free: C: 117,5GB | E: 1,0GB

Manufacturer *: Packard Bell

BIOS Info: AT/AT COMPATIBLE | 11/15/06 | PKBQCI - 6040000

Time Zone: West-Europa (standaardtijd)

Motherboard *: Packard Bell BV EasyNote MZ35

Country: Belgi‰

Language: NLB

==== System Specs (Software) ======================

Anti-Virus: Norton Internet Security On-access scanning disabled (Updated)

Firewall: Norton Internet Security disabled

Internet Explorer version: 8.0.6001.18702

Google Chrome version: 33.0.1750.117

Adobe Reader version: 8.3.1.289

Sun Java version: 1.7.0_51 (32-bit)

Flash Player version: 12.0.0.70

==== Files Recently Created / Modified ======================

====== E:\WINDOWS ====

====== E:\DOCUME~1\user\LOCALS~1\Temp ====

====== Java Cache =====

2014-02-27 19:16:15 C1BBA7F1278F193AB584FFF460DB5E2A 17878 ----a-w- E:\Documents and Settings\user\Local Settings\Application Data\Sun\Java\Deployment\cache\6.0\12\eef218c-6b0ac699

2014-02-27 19:16:05 415FC9732A3F4D89A0E01251CD66E136 646 ----a-w- E:\Documents and Settings\user\Local Settings\Application Data\Sun\Java\Deployment\cache\6.0\17\49a00451-58856853

2014-02-27 19:16:05 88AD963B69BFE5E3C7485E1524E1E5DD 99 ----a-w- E:\Documents and Settings\user\Local Settings\Application Data\Sun\Java\Deployment\cache\6.0\17\49a00451-6.0.lap

2014-02-27 19:16:01 415FC9732A3F4D89A0E01251CD66E136 646 ----a-w- E:\Documents and Settings\user\Local Settings\Application Data\Sun\Java\Deployment\cache\6.0\18\3cb32f52-4486301c

2014-02-27 19:16:05 34FA8033B50A3F99D3AB8209C72C0ABA 6860 ----a-w- E:\Documents and Settings\user\Local Settings\Application Data\Sun\Java\Deployment\cache\6.0\43\1ca2666b-1bde2ad4

2014-02-27 19:37:11 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- E:\Documents and Settings\user\Local Settings\Application Data\Sun\Java\Deployment\SystemCache\6.0\32\6c34baa0-27cb6327

====== E:\WINDOWS\system32 =====

2014-02-27 19:27:02 C94EC0201AD94C0A25461F1073F60493 145408 ----a-w- E:\WINDOWS\System32\javacpl.cpl

2014-02-27 19:27:02 95E15A2DE75AB48728AB8E1911C3EDB1 264616 ----a-w- E:\WINDOWS\System32\javaws.exe

2014-02-27 19:26:49 FD80D0AE205EC54D1A204DDBD6B766DA 94632 ----a-w- E:\WINDOWS\System32\WindowsAccessBridge.dll

2014-02-27 19:26:49 CB3638541DCAC86EE17FA8258202E20E 175016 ----a-w- E:\WINDOWS\System32\javaw.exe

2014-02-27 19:26:49 9395BBE294045909A025C9F3DC3D9025 174504 ----a-w- E:\WINDOWS\System32\java.exe

====== E:\WINDOWS\system32\drivers =====

====== E:\WINDOWS\Tasks ======

====== E:\WINDOWS\Temp ======

======= E:\Program Files =====

2014-02-27 19:26:23 -------- d-----w- E:\Program Files\Java

2014-02-27 19:11:37 -------- d-----w- E:\Program Files\Common Files\Java

2014-02-25 19:02:42 -------- d-----w- E:\Program Files\trend micro

2014-02-24 16:47:37 -------- d-----w- E:\Program Files\Speccy

======= E: =====

====== E:\Documents and Settings\user\Application Data ======

2014-02-27 19:15:54 -------- d-----w- E:\Documents and Settings\user\Local Settings\Application Data\Sun

====== E:\Documents and Settings\user ======

2014-02-25 20:54:20 -------- d--h--r- E:\Documents and Settings\user\Onlangs geopend

2014-02-07 15:49:24 -------- d-----w- E:\Documents and Settings\user\restore

====== E: exe-files ==

2014-02-27 19:27:02 95E15A2DE75AB48728AB8E1911C3EDB1 264616 ----a-w- E:\WINDOWS\system32\javaws.exe

2014-02-27 19:26:49 CB3638541DCAC86EE17FA8258202E20E 175016 ----a-w- E:\WINDOWS\system32\javaw.exe

2014-02-27 19:26:49 9395BBE294045909A025C9F3DC3D9025 174504 ----a-w- E:\WINDOWS\system32\java.exe

2014-02-27 19:26:31 F4BA3A5D5FDE0A321CD7C4A74749CE5B 15784 ----a-w- E:\Program Files\Java\jre7\bin\pack200.exe

2014-02-27 19:26:31 ED1F5F1906F8D963612A4831CDB331D6 15784 ----a-w- E:\Program Files\Java\jre7\bin\ktab.exe

2014-02-27 19:26:31 EBAB810C999D8C31F0D5D8B28B3EEDD1 15784 ----a-w- E:\Program Files\Java\jre7\bin\servertool.exe

2014-02-27 19:26:31 C422AF851B98378A39B51D99FE707E64 146344 ----a-w- E:\Program Files\Java\jre7\bin\unpack200.exe

2014-02-27 19:26:31 ACA236A716C2291E40ED069F2CBB3D35 49064 ----a-w- E:\Program Files\Java\jre7\bin\ssvagent.exe

2014-02-27 19:26:31 762E372DCFDAE32FAE52C1A50A0029C2 15784 ----a-w- E:\Program Files\Java\jre7\bin\klist.exe

2014-02-27 19:26:31 6E2BECF6E17FF8DC850C058A38A50C4F 15784 ----a-w- E:\Program Files\Java\jre7\bin\rmiregistry.exe

2014-02-27 19:26:31 6E1B0EEBF3D1CC7ECF4104E1473900FF 15784 ----a-w- E:\Program Files\Java\jre7\bin\rmid.exe

2014-02-27 19:26:31 397A6EA17BB97800939DE44D7BFEEC04 15784 ----a-w- E:\Program Files\Java\jre7\bin\policytool.exe

2014-02-27 19:26:31 18BC25C50200C3DD4E67611D2467DAA2 15784 ----a-w- E:\Program Files\Java\jre7\bin\orbd.exe

2014-02-27 19:26:31 0E37C7C174521E16CEA0A6BC46F03BCD 16296 ----a-w- E:\Program Files\Java\jre7\bin\tnameserv.exe

2014-02-27 19:26:30 B9436A665A8621073A12338B16D7BFD4 182696 ----a-w- E:\Program Files\Java\jre7\bin\jqs.exe

2014-02-27 19:26:30 A8F2A6D5782AA0166D8367FF674DDF77 52648 ----a-w- E:\Program Files\Java\jre7\bin\jp2launcher.exe

2014-02-27 19:26:30 6EEAD2C8A5CAC1F0F2066ABD77BA9092 15784 ----a-w- E:\Program Files\Java\jre7\bin\keytool.exe

2014-02-27 19:26:30 49A5F3169A23C00F9F2023DFE04D7AF6 15784 ----a-w- E:\Program Files\Java\jre7\bin\kinit.exe

2014-02-27 19:26:29 FBC27FD8E76C53E6E8066944BBE2BF73 48040 ----a-w- E:\Program Files\Java\jre7\bin\jabswitch.exe

2014-02-27 19:26:29 E9BFEA5B2F3F7598DA990F9728768790 66984 ----a-w- E:\Program Files\Java\jre7\bin\javacpl.exe

2014-02-27 19:26:29 CB3638541DCAC86EE17FA8258202E20E 175016 ----a-w- E:\Program Files\Java\jre7\bin\javaw.exe

2014-02-27 19:26:29 95E15A2DE75AB48728AB8E1911C3EDB1 264616 ----a-w- E:\Program Files\Java\jre7\bin\javaws.exe

2014-02-27 19:26:29 9395BBE294045909A025C9F3DC3D9025 174504 ----a-w- E:\Program Files\Java\jre7\bin\java.exe

2014-02-27 19:26:29 5877E6618DA03EE8E7A869F57EE6ACE5 15784 ----a-w- E:\Program Files\Java\jre7\bin\java-rmi.exe

2014-02-27 19:25:51 3842C46F2FBC7522EF625F1833530804 145408 ----a-w- E:\Documents and Settings\user\Application Data\Sun\Java\jre1.7.0_51\lzma.exe

2014-02-25 19:02:44 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- E:\Program Files\trend micro\user.exe

2014-02-22 07:40:19 A4F0C36642681927FA53CD6A90CA2975 7620312 ----a-w- E:\Documents and Settings\user\Local Settings\Application Data\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\33.0.1750.117\33.0.1750.117_32.0.1700.107_chrome_updater.exe

=== E: other files ==

2014-02-27 19:26:32 863EB6802B1C3B7630290871599BE0BD 18636 ----a-w- E:\Program Files\Java\jre7\lib\deploy\ffjcext.zip

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-21-1547161642-746137067-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Run]

"ctfmon.exe"="E:\WINDOWS\system32\ctfmon.exe"

"Google Update"="E:\Documents and Settings\user\Local Settings\Application Data\Google\Update\GoogleUpdate.exe /c"

"RDReminder"="E:\Program Files\RegClean Pro\RegCleanPro.exe -rem"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"beid"="E:\Program Files\Belgium Identity Card\beid35gui.exe /startup"

"QuickTime Task"="E:\Program Files\QuickTime\qttask.exe -atboottime"

"Adobe Reader Speed Launcher"="E:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

"Adobe ARM"="E:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

"SunJavaUpdateSched"="E:\Program Files\Common Files\Java\Java Update\jusched.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"ctfmon.exe"="E:\WINDOWS\system32\ctfmon.exe"

"Google Update"="E:\Documents and Settings\user\Local Settings\Application Data\Google\Update\GoogleUpdate.exe /c"

"RDReminder"="E:\Program Files\RegClean Pro\RegCleanPro.exe -rem"

==== Startup Registry Disabled ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"=""

"hkey"="HKLM"

"command"=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Adobe ARM]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="AdobeARM"

"hkey"="HKLM"

"command"="\"E:\\Program Files\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Adobe Reader Speed Launcher]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="Reader_sl"

"hkey"="HKLM"

"command"="\"E:\\Program Files\\Adobe\\Reader 8.0\\Reader\\Reader_sl.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Alcmtr]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="ALCMTR"

"hkey"="HKLM"

"command"="ALCMTR.EXE"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ATIPTA]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="atiptaxx"

"hkey"="HKLM"

"command"="\"E:\\Program Files\\ATI Technologies\\ATI Control Panel\\atiptaxx.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ctfmon.exe]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="ctfmon"

"hkey"="HKCU"

"command"="E:\\WINDOWS\\system32\\ctfmon.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\HP Software Update]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="HPWuSchd2"

"hkey"="HKLM"

"command"="E:\\Program Files\\HP\\HP Software Update\\HPWuSchd2.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\NeroFilterCheck]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="NeroCheck"

"hkey"="HKLM"

"command"="E:\\WINDOWS\\system32\\NeroCheck.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\QuickTime Task]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="qttask"

"hkey"="HKLM"

"command"="\"E:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\RTHDCPL]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="RTHDCPL"

"hkey"="HKLM"

"command"="RTHDCPL.EXE"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SkyTel]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="SkyTel"

"hkey"="HKLM"

"command"="SkyTel.EXE"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\E:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^HP Digital Imaging Monitor.lnk]

"path"="E:\\Documents and Settings\\All Users\\Menu Start\\Programma's\\Opstarten\\HP Digital Imaging Monitor.lnk"

"backup"="E:\\WINDOWS\\pss\\HP Digital Imaging Monitor.lnkCommon Startup"

"command"="E:\\PROGRA~1\\HP\\DIGITA~1\\bin\\hpqtra08.exe "

"item"="HP Digital Imaging Monitor"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\E:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^HP Photosmart Premier Snelstart.lnk]

"path"="E:\\Documents and Settings\\All Users\\Menu Start\\Programma's\\Opstarten\\HP Photosmart Premier Snelstart.lnk"

"backup"="E:\\WINDOWS\\pss\\HP Photosmart Premier Snelstart.lnkCommon Startup"

"command"="E:\\PROGRA~1\\HP\\DIGITA~1\\bin\\hpqthb08.exe -s"

"item"="HP Photosmart Premier Snelstart"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\E:^Documents and Settings^user^Menu Start^Programma's^Opstarten^OpenOffice.org 3.0 .lnk]

"path"="E:\\Documents and Settings\\user\\Menu Start\\Programma's\\Opstarten\\OpenOffice.org 3.0 .lnk"

"backup"="E:\\WINDOWS\\pss\\OpenOffice.org 3.0 .lnkStartup"

"command"="E:\\PROGRA~1\\OPENOF~1.ORG\\program\\QUICKS~1.EXE "

"item"="OpenOffice.org 3.0 "

==== Startup Folders ======================

2011-02-27 11:28:56 864 ----a-w- E:\Documents and Settings\user\Menu Start\Programma's\Opstarten\OpenOffice.org 3.0 .lnk

2011-03-08 19:40:08 864 ----a-w- E:\Documents and Settings\user\Menu Start\Programma's\Opstarten\OpenOffice.org 3.3 .lnk

==== Task Scheduler Jobs ======================

E:\WINDOWS\tasks\Adobe Flash Player Updater.job --a------ E:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [22/02/2014 09:06]

E:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1547161642-746137067-682003330-1003Core.job --a------ E:\Documents and Settings\user\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [08/05/2012 22:16]

E:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1547161642-746137067-682003330-1003UA.job --a------ E:\Documents and Settings\user\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [08/05/2012 22:16]

E:\WINDOWS\tasks\User_Feed_Synchronization-{F0A4EADB-E0DC-459B-AF7B-0780EB9E49F7}.job --ah----- E:\WINDOWS\system32\msfeedssync.exe [08/03/2009 03:31]

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]

"{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}"="E:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_20.1.0.24\coFFPlgn" [27/02/2014 20:33]

==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions

mkfokfffehpeedafpekjeddnmnjhmcmk - E:\Program Files\Norton Internet Security\Engine\20.3.0.36\Exts\Chrome.crx[07/03/2013 12:43]

nppllibpnmahfaklnpggkibhkapjkeob - E:\Program Files\Norton Identity Safe\Engine\2013.4.0.10\Exts\Chrome.crx[31/05/2013 02:49]

YouTube - user\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo

Google Search - user\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf

Norton Identity Protection - user\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk

Google Wallet - user\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda

Norton Identity Protection - user\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\nppllibpnmahfaklnpggkibhkapjkeob

Gmail - user\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

==== Set IE to Default ======================

Old Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="Google"

New Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="Google"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

"DefaultScope"="{2F4A51D0-BB13-4A10-A72B-AE68D386CDD5}"

{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Unknown Url="Not_Found"

{2F4A51D0-BB13-4A10-A72B-AE68D386CDD5} Bing Url="{searchTerms} - Bing"

{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="{searchTerms} - Google Search}"

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-1547161642-746137067-682003330-1003\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} deleted successfully

==== Deleting CLSID Registry Values ======================

==== HijackThis Entries ======================

O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - E:\Program Files\Norton Internet Security\Engine\20.3.0.36\coIEPlg.dll

O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - E:\Program Files\Norton Internet Security\Engine\20.3.0.36\IPS\IPSBHO.DLL

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Program Files\Java\jre7\bin\ssv.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - E:\Program Files\Java\jre7\bin\jp2ssv.dll

O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - E:\Program Files\Norton Internet Security\Engine\20.3.0.36\coIEPlg.dll

O4 - HKLM\..\Run: [beid] "E:\Program Files\Belgium Identity Card\beid35gui.exe" /startup

O4 - HKLM\..\Run: [QuickTime Task] "E:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "E:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "E:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [sunJavaUpdateSched] "E:\Program Files\Common Files\Java\Java Update\jusched.exe"

O4 - HKCU\..\Run: [ctfmon.exe] E:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [Google Update] "E:\Documents and Settings\user\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c

O4 - HKCU\..\Run: [RDReminder] E:\Program Files\RegClean Pro\RegCleanPro.exe -rem

O4 - Startup: OpenOffice.org 3.0 .lnk = E:\Program Files\OpenOffice.org 3\program\quickstart.exe

O4 - Startup: OpenOffice.org 3.3 .lnk = E:\Program Files\OpenOffice.org 3\program\quickstart.exe

O8 - Extra context menu item: &Search - http://tbedits.fromdoctopdf.com/one-toolbaredits/menusearch.jhtml?s=207743773&p2=^Y6^xdm010^YY^be&si=CLqD7bm41LYCFUzHtAodJXUASQ&a=7A1348A1-45D6-4697-9DD3-400ECB2E8267&n=2013041810&cv=1

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - E:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Plugin Control) - http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} (AxisMediaControlEmb Class) - http://ideefixx.dyndns.tv:811/activex/AMC.cab

O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - E:\WINDOWS\system32\browseui.dll

O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - E:\WINDOWS\system32\browseui.dll

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - E:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - E:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - E:\Program Files\Java\jre7\bin\jqs.exe

O23 - Service: Norton Identity Safe (NCO) - Symantec Corporation - E:\Program Files\Norton Identity Safe\Engine\2013.4.0.10\ccSvcHst.exe

O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - E:\Program Files\Norton Internet Security\Engine\20.3.0.36\ccSvcHst.exe

O23 - Service: Pml Driver HPZ12 - HP - E:\WINDOWS\system32\HPZipm12.exe

==== Empty IE Cache ======================

E:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

E:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5 emptied successfully

E:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

E:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

E:\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\A7ELYJ04 will be deleted at reboot

E:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

E:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

E:\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

E:\Documents and Settings\user\Local Settings\Application Data\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== E:\zoek_backup content ======================

E:\zoek_backup (files=350 folders=58 34332417 bytes)

==== Empty Temp Folders ======================

E:\Documents and Settings\Default User\Local Settings\Temp emptied successfully

E:\Documents and Settings\LocalService\Local Settings\Temp emptied successfully

E:\Documents and Settings\NetworkService\Local Settings\Temp emptied successfully

E:\Documents and Settings\user\Local Settings\Temp will be emptied at reboot

E:\WINDOWS\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

E:\WINDOWS\Temp successfully emptied

E:\DOCUME~1\user\LOCALS~1\Temp successfully emptied

==== Empty Recycle Bin ======================

E:\RECYCLER successfully emptied

==== Deleting Files / Folders ======================

"E:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not found

"E:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not found

"E:\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not deleted

"E:\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\A7ELYJ04" not found

==== EOF on do 27/02/2014 at 21:40:54,89 ======================

Geplaatst:

Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe (hier en hier) kan je lezen hoe je dat doet.

Start 51a612a8b27e2-Zoek.pngZoek.exe nogmaals met het onderstaande script.

  • Dubbelklik op Zoek.exe om de tool te starten.
  • Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  • Kopieer nu onderstaande code en plak die in het grote invulvenster:
  • Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.
     
    [HKEY_USERS\S-1-5-21-1547161642-746137067-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Run];r
    "RDReminder"=-;r
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run];r
    "RDReminder"=-;r
    FromDocToPDF Toolbar;u
    standardserch;
    torpigcheck;
    autoclean.;
    


  • Klik nu op de knop "Run script".
  • Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
  • Mocht er geen logje verschijnen, start zoek.exe dan opnieuw en klik op de knop zoek-results.log, de log verschijnt dan alsnog.
  • Post het geopende logje in het volgende bericht.

Geplaatst:

Zoek.exe v5.0.0.0 Updated 19-February-2014

Tool run by user on vr 28/02/2014 at 22:19:42,57.

Microsoft Windows XP Professional 5.1.2600 Service Pack 3 x86

Running in: Normal Mode Internet Access Detected

Launched: E:\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\42XGG1ZV\zoek[1].exe [scan all users] [script inserted]

==== Older Logs ======================

E:\zoek-results2014-02-27-204054.log 50486 bytes

==== Torpig Check ======================

HKEY_CLASSES_ROOT\Directory\shellex\CopyHookHandlers\CDF {67EA19A0-CCEF-11d0-8024-00C04FD75D13} %SystemRoot%\system32\shdocvw.dll

HKEY_CLASSES_ROOT\Directory\shellex\CopyHookHandlers\FileSystem {217FC9C0-3AEA-1069-A2DB-08002B30309D} shell32.dll

HKEY_CLASSES_ROOT\Directory\shellex\CopyHookHandlers\MyDocuments {ECF03A33-103D-11d2-854D-006008059367} %SystemRoot%\system32\mydocs.dll

HKEY_CLASSES_ROOT\Directory\shellex\CopyHookHandlers\Sharing {40dd6e20-7c17-11ce-a804-00aa003ca9f6} ntshrui.dll

==== Registry Fix Code ======================

Windows Registry Editor Version 5.00

[HKEY_USERS\S-1-5-21-1547161642-746137067-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Run]

"RDReminder"=-

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"RDReminder"=-

==== Folders in E:\DOCUME~1\ALLUSE~1\APPLIC~1 0-6 Months Old ======================

2014-02-07 15:45:34 -------- d-----w- E:\DOCUME~1\ALLUSE~1\APPLIC~1\hps

2014-02-07 15:45:35 -------- d-----w- E:\DOCUME~1\ALLUSE~1\APPLIC~1\tmp

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\FromDocToPDF_65bar Uninstall deleted successfully

==== E:\zoek_backup content ======================

E:\zoek_backup (files=350 folders=58 34332417 bytes)

==== EOF on vr 28/02/2014 at 22:25:05,21 ======================

Gast
Dit topic is nu gesloten voor nieuwe reacties.
×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.