Laptop traag en irritant veel pop ups

[guntheru]

Hallo, mijn laptop is tegenwoordig extreem traag en krijg constant popup meldingen.

Kan iemand mij hierbij helpen?

Heb al een rsit gedaan.

alvast bedankt!

Logfile of random's system information tool 1.09 (written by random/random)

Run by cedric at 2014-03-13 16:01:56

Microsoft Windows 7 Home Premium Service Pack 1

System drive C: has 89 GB (58%) free of 153 GB

Total RAM: 2937 MB (29% free)

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 16:23:55, on 13/03/2014

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v11.0 (11.00.9600.16518)

Boot mode: Normal

Running processes:

C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe

C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe

C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe

C:\Program Files (x86)\Common Files\Isabel\isa_kbc_certupdate.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

C:\Program Files (x86)\AVG\AVG2014\avgui.exe

C:\Program Files (x86)\Mozilla Firefox\firefox.exe

C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe

C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_70.exe

C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_70.exe

C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe

C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe

C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe

C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe

C:\Program Files\trend micro\cedric.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Zoeken

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

F2 - REG:system.ini: UserInit=userinit.exe,

O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll

O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll

O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll

O2 - BHO: TOSHIBA Media Controller Plug-in - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll

O4 - HKLM\..\Run: [sVPWUTIL] C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe SVPwUTIL

O4 - HKLM\..\Run: [KeNotify] "C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe" LPCM

O4 - HKLM\..\Run: [TWebCamera] "C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe" autorun

O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW

O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY

O4 - HKLM\..\Run: [isaKbcCertUpdate] C:\Program Files (x86)\Common Files\Isabel\isa_kbc_certupdate.exe

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_12_0_0_70_Plugin.exe -update plugin

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-18\..\Run: [TOSHIBA Online Product Information] C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe (User 'SYSTEM')

O4 - HKUS\S-1-5-18\..\RunOnce: [sPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [TOSHIBA Online Product Information] C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe (User 'Default user')

O4 - HKUS\.DEFAULT\..\RunOnce: [sPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')

O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000

O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105

O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - (no file)

O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - (no file)

O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - (no file)

O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - (no file)

O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~4\Office12\REFIEBAR.DLL

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O15 - Trusted Zone: http://cbc-pdf.cbc.be

O15 - Trusted Zone: http://static.cbc.be

O15 - Trusted Zone: http://www.cbccorporate.be

O15 - Trusted Zone: ?SOB - Úvodní stránka

O15 - Trusted Zone: http://www.csob.sk

O15 - Trusted Zone: http://www.isabel.be

O15 - Trusted Zone: http://www.beta.isabel.be

O15 - Trusted Zone: http://www.isabel.eu

O15 - Trusted Zone: http://www.beta.isabel.eu

O15 - Trusted Zone: http://kbc-pdf.kbc.be

O15 - Trusted Zone: http://static.kbc.be

O15 - Trusted Zone: KBC Asset Management

O15 - Trusted Zone: http://www.kbcam.com

O15 - Trusted Zone: http://wp-a.kbcbankingforbusiness.com

O15 - Trusted Zone: http://www.kbcbankingforbusiness.com

O15 - Trusted Zone: http://www.kbccorporates.com

O15 - Trusted Zone: http://www.kbcfi.com

O15 - Trusted Zone: http://wp-a.kbcmerchantbanking.com

O15 - Trusted Zone: http://www.kbcmerchantbanking.com

O15 - Trusted Zone: http://www.kh.hu

O15 - Trusted Zone: http://cbc-pdf.cbc.be (HKLM)

O15 - Trusted Zone: http://static.cbc.be (HKLM)

O15 - Trusted Zone: http://www.cbccorporate.be (HKLM)

O15 - Trusted Zone: ?SOB - Úvodní stránka (HKLM)

O15 - Trusted Zone: http://www.csob.sk (HKLM)

O15 - Trusted Zone: http://www.isabel.be (HKLM)

O15 - Trusted Zone: http://www.beta.isabel.be (HKLM)

O15 - Trusted Zone: http://www.isabel.eu (HKLM)

O15 - Trusted Zone: http://www.beta.isabel.eu (HKLM)

O15 - Trusted Zone: http://kbc-pdf.kbc.be (HKLM)

O15 - Trusted Zone: http://static.kbc.be (HKLM)

O15 - Trusted Zone: KBC Asset Management (HKLM)

O15 - Trusted Zone: http://www.kbcam.com (HKLM)

O15 - Trusted Zone: http://wp-a.kbcbankingforbusiness.com (HKLM)

O15 - Trusted Zone: http://www.kbcbankingforbusiness.com (HKLM)

O15 - Trusted Zone: http://www.kbccorporates.com (HKLM)

O15 - Trusted Zone: http://www.kbcfi.com (HKLM)

O15 - Trusted Zone: http://wp-a.kbcmerchantbanking.com (HKLM)

O15 - Trusted Zone: http://www.kbcmerchantbanking.com (HKLM)

O15 - Trusted Zone: http://www.kh.hu (HKLM)

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll

O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL

O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL

O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe

O23 - Service: ConfigFree WiMAX Service (cfWiMAXService) - TOSHIBA CORPORATION - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe

O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

O23 - Service: EPSON V5 Service4(04) (EPSON_EB_RPCV4_04) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE

O23 - Service: EPSON V3 Service4(04) (EPSON_PM_RPCV4_04) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe

O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe

O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - c:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Rapport Management Service (RapportMgmtService) - Trusteer Ltd. - C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: Notebook Performance Tuning Service (TEMPRO) (TemproMonitoringService) - Toshiba Europe GmbH - C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe

O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - Unknown owner - C:\Windows\system32\TODDSrv.exe (file missing)

O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe

O23 - Service: TOSHIBA HDD SSD Alert Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--

End of file - 15791 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe

%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16

%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16

wininit.exe

winlogon.exe

C:\Windows\system32\services.exe

C:\Windows\system32\lsass.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k RPCSS

"C:\Program Files\Microsoft Security Client\MsMpEng.exe"

"C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe"

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k GPSvcGroup

C:\Windows\system32\svchost.exe -k NetworkService

"C:\Windows\system32\Dwm.exe"

C:\Windows\System32\spoolsv.exe

"taskhost.exe"

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Windows\Explorer.EXE

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"

"C:\Program Files (x86)\Trusteer\Rapport\bin\RapportService.exe" -servicelaunch=true

"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service

"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service

"C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE"

"C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE"

"C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe"

"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s

"c:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe"

"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /FORPCEE3

"C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe"

"C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe"

"C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe"

"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"

"C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe"

"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey

"C:\Windows\System32\igfxtray.exe"

"C:\Windows\System32\hkcmd.exe"

"C:\Windows\System32\igfxpers.exe"

C:\Windows\system32\igfxsrvc.exe -Embedding

"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe"

C:\Windows\system32\svchost.exe -k imgsvc

"C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe"

C:\Windows\system32\igfxext.exe -Embedding

C:\Windows\system32\TODDSrv.exe

"C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe"

"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"

"C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe" LPCM

"C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW

"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe"

"C:\Program Files (x86)\Common Files\Isabel\isa_kbc_certupdate.exe"

WLIDSvcM.exe 3992

"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

"C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE"

C:\Windows\system32\SearchIndexer.exe /Embedding

"C:\Program Files\Microsoft Security Client\NisSrv.exe"

"C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"

"C:\Program Files\Windows Media Player\wmpnetwk.exe"

C:\Windows\System32\svchost.exe -k LocalServicePeerNet

C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}

"C:\Windows\system32\wuauclt.exe"

"C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe"

"C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe"

"C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe"

"C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe"

"C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe"

"C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY /updatefinished

"C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe"

"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"

"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=4116.123b0300.1651001137 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 4116 "\\.\pipe\gecko-crash-server-pipe.4116" plugin

"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_70.exe" --proxy-stub-channel=Flash5292.6BD5C768.14792 --host-broker-channel=Flash5292.6BD5C768.14503 --host-pid=5292 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll"

"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_70.exe" --channel=7052.006BF6EC.1619131190 --proxy-stub-channel=Flash5292.6BD5C768.14792 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll" --host-npapi-version=27 --type=renderer

"C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe" "C:\Users\cedric\AppData\Local\Temp\K9 Natural price list.pdf"

"C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe" --channel=4584.1.611308889 --type=renderer "C:\Users\cedric\AppData\Local\Temp\K9 Natural price list.pdf"

"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=4116.32702900.1547742137 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 4116 "\\.\pipe\gecko-crash-server-pipe.4116" plugin

"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe" --proxy-stub-channel=Flash944.6BD5C768.13364 --host-broker-channel=Flash944.6BD5C768.31374 --host-pid=944 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll"

"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe" --channel=452.0070F3D8.823400318 --proxy-stub-channel=Flash944.6BD5C768.13364 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll" --host-npapi-version=27 --type=renderer

C:\Windows\system32\wbem\wmiprvse.exe

"C:\Users\cedric\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job

C:\Windows\tasks\GoogleUpdateTaskMachineCore1ce0e0f4a8bbd6e.job

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\cedric\AppData\Roaming\Mozilla\Firefox\Profiles\m1r89vlm.default-1376402822709

prefs.js - "browser.search.useDBForOrder" - "false"

prefs.js - "browser.startup.homepage" - "http://search.conduit.com/?ctid=CT3320133&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SPDCB5A9EC-ED88-4753-841C-A8DCF4CF8C1B&SSPV="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]

"Description"=Adobe® Flash® Player 12.0.0.77 Plugin

"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]

"Description"=DivX Plus Web Player

"Path"=C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@divx.com/DivX OVS Helper,version=1.0.0]

"Description"=DivX OVS Helper Plug-in

"Path"=C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]

"Description"=Picasa3 plugin

"Path"=C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.51.2]

"Description"=Java™ Deployment Toolkit

"Path"=C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2]

"Description"=Oracle® Next Generation Java™ Plug-In

"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]

"Description"=

"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]

"Description"=Ag Player Plugin

"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]

"Description"=Microsoft SharePoint Plug-in for Firefox

"Path"=C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]

"Description"=WLPG Install MIME type

"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109]

"Description"=WLPG Install MIME type

"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]

"Description"=Google Update

"Path"=C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]

"Description"=Google Update

"Path"=C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]

"Description"=Handles PDFs in-place in Firefox

"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]

"Description"=Adobe® Flash® Player 12.0.0.77 Plugin

"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]

"Description"=

"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]

"Description"=Ag Player Plugin

"Path"=C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\

belgiumeid@eid.belgium.be

C:\Program Files (x86)\Mozilla Firefox\components\

nsIQTScriptablePlugin.xpt

C:\Program Files (x86)\Mozilla Firefox\plugins\

NPOFF12.DLL

nppdf32.dll

npqtplugin.dll

npqtplugin2.dll

npqtplugin3.dll

npqtplugin4.dll

npqtplugin5.dll

npqtplugin6.dll

npqtplugin7.dll

QuickTimePlugin.class

C:\Users\cedric\AppData\Roaming\Mozilla\Firefox\Profiles\m1r89vlm.default-1376402822709\extensions\

8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com

sitefinder@sitefinder.com

C:\Users\cedric\AppData\Roaming\Mozilla\Firefox\Profiles\m1r89vlm.default-1376402822709\searchplugins\

conduit-search.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]

ExplorerWnd Helper - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll [2014-03-06 2471744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]

Lync Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2014-02-16 218784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9421DD08-935F-4701-A9CA-22DF90AC4EA6}]

Easy Photo Print - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2009-08-24 430592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]

Skype add-on for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2013-11-20 6270336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]

Office Document Cache Handler - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2014-02-16 880344]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]

Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2014-02-16 2331336]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]

DivX Plus Web Player HTML5 <video> - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll [2010-12-08 3123072]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{593DDEC6-7468-4cdd-90E1-42DADAA222E9}]

DivX HiQ - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll [2010-12-08 3123072]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]

Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]

Java Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-03-10 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Aanmeldhulp voor Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]

Skype Browser Helper - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2013-11-20 4502400]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]

Office Document Cache Handler - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2014-02-16 707288]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

Java Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-03-10 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F3C88694-EFFA-4d78-B409-54B7B2535B14}]

TOSHIBA Media Controller Plug-in - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll [2010-03-19 529784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{9421DD08-935F-4701-A9CA-22DF90AC4EA6} - Easy Photo Print - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2009-08-24 430592]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2014-03-06 13662936]

"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-03-06 1368792]

"TPwrMain"=C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [2010-05-25 505768]

"SmoothView"=C:\Program Files\Toshiba\SmoothView\SmoothView.exe [2009-08-13 570680]

"00TCrdMain"=C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [2010-05-10 915320]

"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-03-10 2052392]

"SmartFaceVWatcher"=C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatcher.exe [2009-10-19 238080]

"TosSENotify"=C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [2010-02-05 709976]

"TosVolRegulator"=C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [2009-11-11 24376]

"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2013-10-23 1266912]

"IgfxTray"=C:\Windows\system32\igfxtray.exe [2014-03-06 163384]

"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2014-03-06 387640]

"Persistence"=C:\Windows\system32\igfxpers.exe [2014-03-06 418360]

"RtHDVBg_Dolby"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-03-06 1368792]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"FlashPlayerUpdate"=C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_12_0_0_70_Plugin.exe -update plugin []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivX Download Manager]

C:\Program Files (x86)\DivX\DivX Plus Web Player\DDmService.exe [2010-12-08 63360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EEventManager]

C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [2009-12-03 976320]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HWSetup]

C:\Program Files\TOSHIBA\Utilities\HWSetup.exe [2010-03-04 423936]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IObit Malware Fighter]

C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe /autostart []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mobilegeni daemon]

[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBAgent]

c:\Program Files (x86)\Nero\Nero BackItUp & Burn\Nero BackItUp\NBAgent.exe [2010-03-09 1086760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Toshiba Registration]

C:\Program Files\Toshiba\Registration\ToshibaReminder.exe [2010-04-19 136136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Toshiba TEMPRO]

C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe [2010-05-11 1050072]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TosNC]

C:\Program Files\Toshiba\BulletinBoard\TosNcCore.exe [2010-04-23 595816]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TosReelTimeMonitor]

C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe [2010-07-09 38304]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]

"SVPWUTIL"=C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe [2010-02-22 352256]

"KeNotify"=C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe [2010-08-15 34160]

"TWebCamera"=C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe [2010-05-01 2454840]

"DivXUpdate"=C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [2011-01-11 1230704]

"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]

"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2010-11-29 421888]

"AVG_UI"=C:\Program Files (x86)\AVG\AVG2014\avgui.exe [2014-01-22 4962320]

"IsaKbcCertUpdate"=C:\Program Files (x86)\Common Files\Isabel\isa_kbc_certupdate.exe [2013-10-22 1085976]

"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-12-21 959904]

"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]

C:\Windows\system32\igfxdev.dll [2014-03-06 272384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]

"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]

"SecurityProviders"=credssp.dll, schannel.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"ConsentPromptBehaviorAdmin"=5

"ConsentPromptBehaviorUser"=3

"EnableUIADesktopToggle"=0

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

"EnableLinkedConnections"=1

"DisableTaskMgr"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoActiveDesktop"=1

"NoActiveDesktopChanges"=1

"ForceActiveDesktopOn"=0

"NoRun"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]

"vidc.mrle"=msrle32.dll

"vidc.msvc"=msvidc32.dll

"msacm.imaadpcm"=imaadp32.acm

"msacm.msg711"=msg711.acm

"msacm.msgsm610"=msgsm32.acm

"msacm.msadpcm"=msadp32.acm

"midimapper"=midimap.dll

"wavemapper"=msacm32.drv

"VIDC.UYVY"=msyuv.dll

"VIDC.YUY2"=msyuv.dll

"VIDC.YVYU"=msyuv.dll

"VIDC.IYUV"=iyuv_32.dll

"vidc.i420"=iyuv_32.dll

"VIDC.YVU9"=tsbyuv.dll

"msacm.l3acm"=C:\Windows\System32\l3codeca.acm

"MSVideo8"=VfWWDM32.dll

"wave"=wdmaud.drv

"midi"=wdmaud.drv

"mixer"=wdmaud.drv

"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-03-13 16:01:58 ----D---- C:\Program Files\trend micro

2014-03-13 16:01:56 ----D---- C:\rsit

2014-03-10 09:52:11 ----D---- C:\Users\cedric\AppData\Roaming\beid-cache

2014-03-10 09:50:13 ----D---- C:\ProgramData\Oracle

2014-03-10 09:46:49 ----A---- C:\Windows\SYSWOW64\javaws.exe

2014-03-10 09:46:20 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll

2014-03-10 09:46:20 ----A---- C:\Windows\SYSWOW64\javaw.exe

2014-03-10 09:46:20 ----A---- C:\Windows\SYSWOW64\java.exe

2014-03-07 14:42:09 ----A---- C:\Windows\system32\rdpudd.dll

2014-03-07 14:42:09 ----A---- C:\Windows\system32\RdpGroupPolicyExtension.dll

2014-03-07 14:42:09 ----A---- C:\Windows\system32\rdpcorets.dll

2014-03-07 14:42:08 ----A---- C:\Windows\SYSWOW64\rdpendp_winip.dll

2014-03-07 14:42:08 ----A---- C:\Windows\system32\TSWbPrxy.exe

2014-03-07 14:42:08 ----A---- C:\Windows\system32\rdpendp_winip.dll

2014-03-07 14:42:08 ----A---- C:\Windows\system32\drivers\rdpvideominiport.sys

2014-03-07 14:42:07 ----A---- C:\Windows\SYSWOW64\mstsc.exe

2014-03-07 14:42:07 ----A---- C:\Windows\SYSWOW64\aaclient.dll

2014-03-07 14:42:07 ----A---- C:\Windows\system32\mstsc.exe

2014-03-07 14:42:07 ----A---- C:\Windows\system32\MsRdpWebAccess.dll

2014-03-07 14:42:06 ----A---- C:\Windows\SYSWOW64\tsgqec.dll

2014-03-07 14:42:06 ----A---- C:\Windows\SYSWOW64\mstscax.dll

2014-03-07 14:42:06 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll

2014-03-07 14:42:06 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe

2014-03-07 14:42:05 ----A---- C:\Windows\system32\wksprt.exe

2014-03-07 14:42:05 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll

2014-03-07 14:42:05 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys

2014-03-07 14:42:05 ----A---- C:\Windows\system32\aaclient.dll

2014-03-07 14:42:04 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll

2014-03-07 14:42:04 ----A---- C:\Windows\system32\tsgqec.dll

2014-03-07 14:42:04 ----A---- C:\Windows\system32\mstscax.dll

2014-03-07 14:42:03 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll

2014-03-07 14:42:03 ----A---- C:\Windows\system32\wksprtPS.dll

2014-03-07 14:37:13 ----A---- C:\Windows\SYSWOW64\qdvd.dll

2014-03-07 14:37:13 ----A---- C:\Windows\system32\qdvd.dll

2014-03-07 14:35:21 ----A---- C:\Windows\system32\RegistryDefragBootTime.exe

2014-03-07 11:55:23 ----D---- C:\Program Files\DIFX

2014-03-07 11:52:51 ----D---- C:\Windows\SYSWOW64\beidpp

2014-03-07 11:52:48 ----D---- C:\Windows\SYSWOW64\siscardplugins

2014-03-07 11:52:33 ----D---- C:\Program Files\log

2014-03-07 11:52:33 ----D---- C:\Program Files (x86)\Belgium Identity Card

2014-03-07 11:51:42 ----D---- C:\drivers

2014-03-07 11:31:02 ----A---- C:\Windows\system32\drivers\RapportKE64.sys

2014-03-07 11:29:29 ----D---- C:\Program Files (x86)\Trusteer

2014-03-07 11:27:25 ----D---- C:\ProgramData\Trusteer

2014-03-07 11:23:04 ----D---- C:\ProgramData\Isabel Services

2014-03-06 22:09:50 ----A---- C:\Windows\system32\drivers\rtwlane.sys

2014-03-06 22:09:02 ----A---- C:\Windows\system32\RtNicProp64.dll

2014-03-06 22:09:02 ----A---- C:\Windows\system32\drivers\Rt64win7.sys

2014-03-06 22:06:02 ----A---- C:\Windows\system32\WavesGUILib64.dll

2014-03-06 22:06:02 ----A---- C:\Windows\system32\tossaeapo64.dll

2014-03-06 22:06:02 ----A---- C:\Windows\system32\toseaeapo64.dll

2014-03-06 22:06:01 ----A---- C:\Windows\system32\tosasfapo64.dll

2014-03-06 22:06:01 ----A---- C:\Windows\system32\tosade.dll

2014-03-06 22:06:01 ----A---- C:\Windows\system32\tepeqapo64.dll

2014-03-06 22:06:00 ----A---- C:\Windows\system32\tadefxapo264.dll

2014-03-06 22:06:00 ----A---- C:\Windows\system32\tadefxapo.dll

2014-03-06 22:05:58 ----A---- C:\Windows\system32\sltech64.dll

2014-03-06 22:05:58 ----A---- C:\Windows\system32\slprp64.dll

2014-03-06 22:05:56 ----A---- C:\Windows\system32\slcnt64.dll

2014-03-06 22:05:55 ----A---- C:\Windows\system32\sl3apo64.dll

2014-03-06 22:05:55 ----A---- C:\Windows\system32\SFSS_APO.dll

2014-03-06 22:05:54 ----A---- C:\Windows\system32\SFNHK64.dll

2014-03-06 22:05:54 ----A---- C:\Windows\system32\SFCOM64.dll

2014-03-06 22:05:54 ----A---- C:\Windows\system32\SFAPO64.dll

2014-03-06 22:05:52 ----A---- C:\Windows\system32\drivers\rtvienna.dat

2014-03-06 22:05:51 ----A---- C:\Windows\system32\RtPgEx64.dll

2014-03-06 22:05:48 ----A---- C:\Windows\system32\RtlCPAPI64.dll

2014-03-06 22:05:46 ----A---- C:\Windows\system32\drivers\RTKVHD64.sys

2014-03-06 22:05:43 ----A---- C:\Windows\system32\RtkCoLDR64.dll

2014-03-06 22:05:43 ----A---- C:\Windows\system32\RtkCfg64.dll

2014-03-06 22:05:40 ----A---- C:\Windows\system32\RtkAPO64.dll

2014-03-06 22:05:40 ----A---- C:\Windows\system32\RtkApi64.dll

2014-03-06 22:05:39 ----A---- C:\Windows\system32\RTEEP64A.dll

2014-03-06 22:05:39 ----A---- C:\Windows\system32\RTEEL64A.dll

2014-03-06 22:05:39 ----A---- C:\Windows\system32\RTEEG64A.dll

2014-03-06 22:05:38 ----A---- C:\Windows\system32\RTEED64A.dll

2014-03-06 22:05:38 ----A---- C:\Windows\system32\RtDataProc64.dll

2014-03-06 22:05:36 ----A---- C:\Windows\system32\RTCOM64.dll

2014-03-06 22:05:36 ----A---- C:\Windows\system32\drivers\RTAIODAT.DAT

2014-03-06 22:05:35 ----A---- C:\Windows\system32\RP3DHT64.dll

2014-03-06 22:05:35 ----A---- C:\Windows\system32\RP3DAA64.dll

2014-03-06 22:05:33 ----A---- C:\Windows\system32\RCoRes64.dat

2014-03-06 22:05:33 ----A---- C:\Windows\system32\RCoInstII64.dll

2014-03-06 22:05:26 ----A---- C:\Windows\system32\R4EEP64A.dll

2014-03-06 22:05:26 ----A---- C:\Windows\system32\R4EEL64A.dll

2014-03-06 22:05:26 ----A---- C:\Windows\system32\R4EEG64A.dll

2014-03-06 22:05:26 ----A---- C:\Windows\system32\R4EED64A.dll

2014-03-06 22:05:26 ----A---- C:\Windows\system32\R4EEA64A.dll

2014-03-06 22:05:24 ----A---- C:\Windows\system32\NAHIMICAPOSettingsIPC.dll

2014-03-06 22:05:22 ----A---- C:\Windows\system32\NAHIMICAPOlfx.dll

2014-03-06 22:05:22 ----A---- C:\Windows\system32\MISS_APO.dll

2014-03-06 22:05:18 ----A---- C:\Windows\system32\MaxxVolumeSDAPO.dll

2014-03-06 22:05:17 ----A---- C:\Windows\system32\MaxxVoiceAPO2064.dll

2014-03-06 22:05:17 ----A---- C:\Windows\system32\MaxxSpeechAPO64.dll

2014-03-06 22:05:16 ----A---- C:\Windows\system32\MaxxAudioVnN64.dll

2014-03-06 22:05:09 ----A---- C:\Windows\system32\MaxxAudioVnA64.dll

2014-03-06 22:05:06 ----A---- C:\Windows\system32\MaxxAudioRealtek64.dll

2014-03-06 22:05:04 ----A---- C:\Windows\system32\MaxxAudioRealtek264.dll

2014-03-06 22:05:02 ----A---- C:\Windows\system32\MaxxAudioEQ64.dll

2014-03-06 22:05:00 ----A---- C:\Windows\system32\MaxxAudioAPOShell64.dll

2014-03-06 22:04:59 ----A---- C:\Windows\SYSWOW64\MaxxAudioAPOShell.dll

2014-03-06 22:04:58 ----A---- C:\Windows\system32\MaxxAudioAPO5064.dll

2014-03-06 22:04:58 ----A---- C:\Windows\system32\MaxxAudioAPO4064.dll

2014-03-06 22:04:58 ----A---- C:\Windows\system32\MaxxAudioAPO30.dll

2014-03-06 22:04:57 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll

2014-03-06 22:04:56 ----A---- C:\Windows\system32\KAAPORT64.dll

2014-03-06 22:04:47 ----A---- C:\Windows\system32\FMAPO64.dll

2014-03-06 22:04:46 ----A---- C:\Windows\system32\DTSVoiceClarityDLL64.dll

2014-03-06 22:04:46 ----A---- C:\Windows\system32\DTSU2PREC64.dll

2014-03-06 22:04:45 ----A---- C:\Windows\system32\DTSU2PLFX64.dll

2014-03-06 22:04:45 ----A---- C:\Windows\system32\DTSU2PGFX64.dll

2014-03-06 22:04:44 ----A---- C:\Windows\system32\DTSSymmetryDLL64.dll

2014-03-06 22:04:44 ----A---- C:\Windows\system32\DTSS2SpeakerDLL64.dll

2014-03-06 22:04:43 ----A---- C:\Windows\system32\DTSS2HeadphoneDLL64.dll

2014-03-06 22:04:43 ----A---- C:\Windows\system32\DTSNeoPCDLL64.dll

2014-03-06 22:04:42 ----A---- C:\Windows\system32\DTSLimiterDLL64.dll

2014-03-06 22:04:42 ----A---- C:\Windows\system32\DTSLFXAPO64.dll

2014-03-06 22:04:42 ----A---- C:\Windows\system32\DTSGFXAPONS64.dll

2014-03-06 22:04:42 ----A---- C:\Windows\system32\DTSGFXAPO64.dll

2014-03-06 22:04:41 ----A---- C:\Windows\system32\DTSGainCompensatorDLL64.dll

2014-03-06 22:04:40 ----A---- C:\Windows\system32\DTSBoostDLL64.dll

2014-03-06 22:04:39 ----A---- C:\Windows\system32\DTSBassEnhancementDLL64.dll

2014-03-06 22:04:38 ----A---- C:\Windows\system32\DDPP64A.dll

2014-03-06 22:04:37 ----A---- C:\Windows\system32\DDPO64A.dll

2014-03-06 22:04:36 ----A---- C:\Windows\system32\DDPD64A.dll

2014-03-06 22:04:36 ----A---- C:\Windows\system32\DDPA64.dll

2014-03-06 22:04:32 ----A---- C:\Windows\system32\CONEQMSAPOGUILibrary.dll

2014-03-06 22:04:28 ----A---- C:\Windows\system32\audioLibVc.dll

2014-03-06 22:04:27 ----A---- C:\Windows\system32\AERTAR64.dll

2014-03-06 22:04:27 ----A---- C:\Windows\system32\AERTAC64.dll

2014-03-06 22:04:27 ----A---- C:\Windows\system32\AcpiServiceVnA64.dll

2014-03-06 22:00:28 ----A---- C:\Windows\system32\igfxCoIn_v2869.dll

2014-03-06 22:00:27 ----A---- C:\Windows\SYSWOW64\iglhsip32.dll

2014-03-06 22:00:27 ----A---- C:\Windows\SYSWOW64\iglhcp32.dll

2014-03-06 22:00:27 ----A---- C:\Windows\system32\iglhsip64.dll

2014-03-06 22:00:27 ----A---- C:\Windows\system32\iglhcp64.dll

2014-03-06 22:00:27 ----A---- C:\Windows\system32\igfxtray.exe

2014-03-06 22:00:27 ----A---- C:\Windows\system32\igfxTMM.dll

2014-03-06 22:00:27 ----A---- C:\Windows\system32\igfxsrvc.exe

2014-03-06 22:00:25 ----A---- C:\Windows\system32\igfxpph.dll

2014-03-06 22:00:24 ----A---- C:\Windows\SYSWOW64\igfxexps32.dll

2014-03-06 22:00:24 ----A---- C:\Windows\SYSWOW64\igfxdv32.dll

2014-03-06 22:00:24 ----A---- C:\Windows\system32\igfxpers.exe

2014-03-06 22:00:24 ----A---- C:\Windows\system32\igfxext.exe

2014-03-06 22:00:23 ----A---- C:\Windows\system32\igfxdo.dll

2014-03-06 22:00:23 ----A---- C:\Windows\system32\IGFXDEVLib.dll

2014-03-06 22:00:22 ----A---- C:\Windows\SYSWOW64\igdumdx32.dll

2014-03-06 22:00:22 ----A---- C:\Windows\SYSWOW64\igdumd32.dll

2014-03-06 22:00:22 ----A---- C:\Windows\SYSWOW64\igd10umd32.dll

2014-03-06 22:00:22 ----A---- C:\Windows\system32\igdumd64.dll

2014-03-06 22:00:22 ----A---- C:\Windows\system32\drivers\igdkmd64.sys

2014-03-06 22:00:21 ----A---- C:\Windows\system32\ig4icd64.dll

2014-03-06 22:00:20 ----A---- C:\Windows\SYSWOW64\ig4icd32.dll

2014-03-06 22:00:19 ----A---- C:\Windows\system32\hkcmd.exe

2014-03-06 22:00:17 ----A---- C:\Windows\system32\GfxUI.exe

2014-03-06 22:00:16 ----A---- C:\Windows\system32\gfxSrvc.dll

2014-03-06 22:00:13 ----A---- C:\Windows\system32\difx64.exe

2014-03-06 22:00:07 ----A---- C:\log.txt

2014-03-06 21:56:04 ----A---- C:\Windows\system32\SmartDefragBootTime.exe

2014-03-06 21:55:47 ----A---- C:\Windows\system32\IObitSmartDefragExtension.dll

2014-03-06 21:46:00 ----D---- C:\ProgramData\ProductData

2014-03-06 21:45:18 ----D---- C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}

2014-03-06 21:45:15 ----D---- C:\ProgramData\IObit

2014-03-06 21:44:36 ----D---- C:\Program Files (x86)\IObit

2014-03-06 21:43:49 ----D---- C:\Users\cedric\AppData\Roaming\IObit

2014-03-05 21:20:52 ----D---- C:\Users\cedric\AppData\Roaming\AVG2014

2014-03-05 21:20:12 ----D---- C:\Users\cedric\AppData\Roaming\TuneUp Software

2014-03-05 21:19:27 ----HD---- C:\$AVG

2014-03-05 21:19:27 ----D---- C:\ProgramData\AVG2014

2014-03-05 21:18:22 ----D---- C:\Program Files (x86)\AVG

2014-03-05 21:16:47 ----HD---- C:\ProgramData\Common Files

2014-03-05 21:16:47 ----D---- C:\ProgramData\MFAData

2014-03-05 21:02:30 ----D---- C:\Users\cedric\AppData\Roaming\LavasoftStatistics

2014-03-05 20:48:27 ----D---- C:\Program Files (x86)\Lavasoft

2014-03-05 20:45:20 ----D---- C:\ProgramData\Lavasoft

2014-03-05 20:08:57 ----A---- C:\Windows\SYSWOW64\FAP53D5.tmp

2014-03-05 20:08:51 ----A---- C:\Windows\SYSWOW64\FAP3C3D.tmp

2014-03-05 20:08:46 ----A---- C:\Windows\SYSWOW64\FAP268A.tmp

2014-03-05 20:08:41 ----A---- C:\Windows\SYSWOW64\FAP13B3.tmp

2014-03-05 20:08:28 ----A---- C:\Windows\SYSWOW64\FAPE072.tmp

2014-03-05 20:08:28 ----A---- C:\Windows\SYSWOW64\FAPDF86.tmp

2014-03-05 20:08:25 ----A---- C:\Windows\SYSWOW64\FAPD3FF.tmp

2014-03-05 20:08:24 ----A---- C:\Windows\SYSWOW64\FAPD0C2.tmp

2014-03-05 20:07:30 ----A---- C:\Windows\SYSWOW64\FAPFFAC.tmp

2014-02-28 09:18:36 ----D---- C:\Windows\Migration

2014-02-24 00:33:12 ----A---- C:\Windows\chgt-c.ini

2014-02-24 00:33:03 ----D---- C:\Program Files\PhotoZoom Pro 4

2014-02-21 14:23:51 ----D---- C:\Program Files (x86)\SimilarSites

2014-02-21 14:23:34 ----D---- C:\Users\cedric\AppData\Roaming\SimilarSites

2014-02-21 14:21:33 ----D---- C:\Program Files\office.tmp

2014-02-16 22:41:38 ----A---- C:\Windows\SYSWOW64\vbscript.dll

2014-02-16 22:41:38 ----A---- C:\Windows\system32\vbscript.dll

2014-02-16 21:45:52 ----A---- C:\Windows\SYSWOW64\vbar332.dll

2014-02-16 21:45:04 ----D---- C:\LogoSmartz Trial

2014-02-16 13:26:21 ----D---- C:\Program Files (x86)\Mozilla Firefox

======List of files/folders modified in the last 1 month======

2014-03-13 16:01:58 ----RD---- C:\Program Files

2014-03-13 16:01:10 ----D---- C:\Windows\Temp

2014-03-13 15:54:26 ----D---- C:\Windows\SysWOW64

2014-03-13 15:54:13 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe

2014-03-13 15:47:27 ----D---- C:\Windows\system32\config

2014-03-13 15:27:00 ----D---- C:\ProgramData\Adobe

2014-03-12 21:13:22 ----D---- C:\Windows\system32\catroot2

2014-03-12 21:13:22 ----D---- C:\Windows\system32\catroot

2014-03-12 21:13:20 ----D---- C:\Windows\winsxs

2014-03-12 20:47:10 ----SHD---- C:\Windows\Installer

2014-03-11 11:58:12 ----SHD---- C:\System Volume Information

2014-03-10 12:58:33 ----D---- C:\Windows\system32\drivers

2014-03-10 10:14:34 ----D---- C:\Users\cedric\AppData\Roaming\Adobe

2014-03-10 09:50:13 ----HD---- C:\ProgramData

2014-03-10 09:47:11 ----D---- C:\Program Files (x86)\Common Files

2014-03-10 09:45:36 ----D---- C:\Program Files (x86)\Java

2014-03-10 09:39:24 ----D---- C:\Program Files (x86)\Adobe

2014-03-09 22:42:44 ----D---- C:\Windows\System32

2014-03-09 22:42:44 ----A---- C:\Windows\system32\PerfStringBackup.INI

2014-03-09 22:42:40 ----D---- C:\Windows\inf

2014-03-08 11:59:21 ----D---- C:\Windows\system32\Tasks

2014-03-08 11:58:22 ----RD---- C:\Program Files (x86)

2014-03-08 11:57:28 ----HD---- C:\Program Files (x86)\InstallShield Installation Information

2014-03-08 11:57:27 ----D---- C:\Program Files (x86)\TOSHIBA

2014-03-08 11:50:21 ----D---- C:\Windows\Tasks

2014-03-08 11:28:47 ----D---- C:\Users\cedric\AppData\Roaming\SoftGrid Client

2014-03-07 22:07:28 ----SD---- C:\Users\cedric\AppData\Roaming\Microsoft

2014-03-07 21:49:41 ----D---- C:\Windows

2014-03-07 15:03:47 ----D---- C:\Windows\SYSWOW64\wbem

2014-03-07 15:03:47 ----D---- C:\Windows\SYSWOW64\nl-NL

2014-03-07 15:03:46 ----D---- C:\Windows\system32\wbem

2014-03-07 15:03:46 ----D---- C:\Windows\system32\nl-NL

2014-03-07 15:03:46 ----D---- C:\Windows\system32\drivers\nl-NL

2014-03-07 15:03:46 ----D---- C:\Windows\PolicyDefinitions

2014-03-07 15:03:44 ----D---- C:\Windows\system32\DriverStore

2014-03-07 11:18:38 ----D---- C:\Windows\system32\drivers\UMDF

2014-03-07 09:46:26 ----D---- C:\Windows\Microsoft.NET

2014-03-06 22:31:12 ----D---- C:\Windows\SoftwareDistribution

2014-03-06 22:29:20 ----D---- C:\Windows\debug

2014-03-06 22:09:02 ----A---- C:\Windows\system32\RTNUninst64.dll

2014-03-06 22:07:33 ----D---- C:\Windows\SYSWOW64\RTCOM

2014-03-06 22:00:27 ----A---- C:\Windows\system32\igfxsrvc.dll

2014-03-06 22:00:26 ----A---- C:\Windows\system32\igfxress.dll

2014-03-06 22:00:24 ----A---- C:\Windows\system32\igfxexps.dll

2014-03-06 22:00:23 ----A---- C:\Windows\system32\igfxdev.dll

2014-03-06 22:00:22 ----A---- C:\Windows\system32\igd10umd64.dll

2014-03-06 22:00:19 ----A---- C:\Windows\system32\hccutils.dll

2014-03-06 21:53:30 ----D---- C:\Windows\Panther

2014-03-06 21:46:18 ----D---- C:\Users\cedric\AppData\Roaming\Apple Computer

2014-03-05 21:14:06 ----D---- C:\Program Files\Common Files

2014-03-05 20:06:07 ----D---- C:\Program Files\CCleaner

2014-03-05 18:41:24 ----D---- C:\Windows\Prefetch

2014-03-05 05:23:45 ----RD---- C:\Program Files (x86)\Skype

2014-03-05 05:23:42 ----D---- C:\ProgramData\Skype

2014-03-02 19:43:59 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI

2014-03-01 21:47:17 ----D---- C:\Windows\system32\NDF

2014-02-28 09:25:42 ----RSD---- C:\Windows\assembly

2014-02-28 09:19:07 ----D---- C:\Windows\SYSWOW64\en-US

2014-02-28 09:19:07 ----D---- C:\Windows\system32\en-US

2014-02-28 09:18:36 ----SD---- C:\ProgramData\Microsoft

2014-02-21 14:21:01 ----D---- C:\Program Files (x86)\MSECache

2014-02-17 11:29:21 ----D---- C:\Program Files\Internet Explorer

2014-02-17 11:29:21 ----D---- C:\Program Files (x86)\Internet Explorer

2014-02-17 11:29:15 ----RSD---- C:\Windows\Fonts

2014-02-17 11:23:04 ----D---- C:\Windows\system32\MRT

2014-02-17 11:19:32 ----A---- C:\Windows\system32\MRT.exe

2014-02-16 21:57:21 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service

2014-02-16 21:12:56 ----D---- C:\ProgramData\Microsoft Help

2014-02-16 21:00:18 ----D---- C:\Program Files\Microsoft Office 15

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHA;AVGIDSHA; C:\Windows\system32\DRIVERS\avgidsha.sys [2013-11-25 196376]

R0 Avgloga;AVG Logging Driver; C:\Windows\system32\DRIVERS\avgloga.sys [2013-10-31 294712]

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2009-06-04 408600]

R0 LPCFilter;LPC Lower Filter Driver; C:\Windows\system32\DRIVERS\LPCFilter.sys [2010-03-22 46192]

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2013-09-27 248240]

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]

R0 RapportKE64;RapportKE64; C:\Windows\System32\Drivers\RapportKE64.sys [2014-02-10 316312]

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]

R0 TVALZ;TOSHIBA ACPI-Based Value Added Logical and General Purpose Device Driver; C:\Windows\system32\DRIVERS\TVALZ_O.SYS [2009-07-14 26840]

R1 Avgtdia;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdia.sys [2013-08-01 251192]

R1 RapportCerberus_59849;RapportCerberus_59849; \??\C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus64_59849.sys [2014-03-07 606672]

R1 RapportEI64;RapportEI64; \??\C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportEI64.sys [2014-02-10 282712]

R1 RapportPG64;RapportPG64; \??\C:\Program Files (x86)\Trusteer\Rapport\bin\x64\RapportPG64.sys [2014-02-10 397848]

R1 SbFw;SbFw; C:\Windows\system32\drivers\SbFw.sys [2012-09-20 258848]

R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]

R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2013-09-27 134944]

R3 CeKbFilter;CeKbFilter; C:\Windows\system32\DRIVERS\CeKbFilter.sys [2010-10-04 20592]

R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2014-03-06 10629408]

R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2014-03-06 3791320]

R3 PGEffect;Pangu effect driver; C:\Windows\system32\DRIVERS\pgeffect.sys [2009-06-22 35008]

R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2014-03-06 888536]

R3 RTWlanE;Realtek Wireless LAN 802.11n PCI-E Network Adapter; C:\Windows\system32\DRIVERS\rtwlane.sys [2014-03-06 2988760]

R3 SBFWIMCLMP;GFI Software Firewall NDIS IM Filter Miniport; C:\Windows\system32\DRIVERS\SBFWIM.sys [2012-09-12 120064]

R3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfslh.sys [2013-06-26 767144]

R3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaylh.sys [2013-06-26 273576]

R3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirlh.sys [2013-06-26 28840]

R3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvollh.sys [2013-06-26 23208]

R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-03-10 316464]

R3 tdcmdpst;TOSHIBA Writing Engine Filter Driver; C:\Windows\system32\DRIVERS\tdcmdpst.sys [2009-07-30 27784]

S3 androidusb;SAMSUNG Android Composite ADB Interface Driver; C:\Windows\System32\Drivers\ssadadb.sys [2011-05-13 36328]

S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2014-03-07 19456]

S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-01-07 232992]

S3 RTL8192Ce;Realtek Wireless LAN 802.11n PCI-E NIC Driver; C:\Windows\system32\DRIVERS\rtl8192Ce.sys [2010-04-28 932384]

S3 SBFWIMCL;GFI Software Firewall NDIS IM Filter Service; C:\Windows\system32\DRIVERS\sbfwim.sys [2012-09-12 120064]

S3 sbhips;sbhips; C:\Windows\system32\drivers\sbhips.sys [2012-09-20 61216]

S3 sbwtis;sbwtis; C:\Windows\system32\DRIVERS\sbwtis.sys [2012-09-20 86816]

S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\ssadbus.sys [2011-05-13 157672]

S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\Windows\system32\DRIVERS\ssadmdfl.sys [2011-05-13 16872]

S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\Windows\system32\DRIVERS\ssadmdm.sys [2011-05-13 177640]

S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\Windows\system32\DRIVERS\ssadserd.sys [2011-05-13 146920]

S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2014-03-07 57856]

S3 usbscan;Stuurprogramma voor USB-scanner; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]

S3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]

S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]

R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [2013-09-24 348008]

R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-01-03 1363616]

R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-01-03 1748640]

R2 cfWiMAXService;ConfigFree WiMAX Service; C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe [2010-01-28 249200]

R2 ConfigFree Service;ConfigFree Service; C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe [2009-03-10 46448]

R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2013-04-22 822504]

R2 EPSON_EB_RPCV4_04;EPSON V5 Service4(04); C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE [2009-09-14 166400]

R2 EPSON_PM_RPCV4_04;EPSON V3 Service4(04); C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE [2009-09-14 128512]

R2 IconMan_R;IconMan_R; C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [2010-08-27 1811456]

R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-10-23 23808]

R2 Nero BackItUp Scheduler 4.0;Nero BackItUp Scheduler 4.0; c:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe [2010-01-15 935208]

R2 OfficeSvc;Microsoft Office-service; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [2013-10-31 1907896]

R2 RapportMgmtService;Rapport Management Service; C:\Program Files (x86)\Trusteer\Rapport\bin\RapportMgmtService.exe [2014-02-10 1444120]

R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2013-06-26 523944]

R2 TemproMonitoringService;Notebook Performance Tuning Service (TEMPRO); C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [2010-05-11 124368]

R2 TODDSrv;TOSHIBA Optical Disc Drive Service; C:\Windows\system32\TODDSrv.exe [2009-07-28 140632]

R2 TosCoSrv;TOSHIBA Power Saver; C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe [2010-05-25 489384]

R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]

R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2013-10-23 348376]

R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2013-06-26 207528]

R3 TOSHIBA HDD SSD Alert Service;TOSHIBA HDD SSD Alert Service; C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe [2010-02-05 137560]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]

S2 gupdate;Google Updateservice (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-01-30 135664]

S2 LiveUpdateSvc;LiveUpdate; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2013-12-03 2151200]

S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]

S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-13 257928]

S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-01-30 135664]

S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-09 136120]

S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-02-06 111616]

S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]

S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-02-16 118896]

S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]

S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2013-10-03 150600]

S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2013-10-03 5132888]

S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-12-13 1255736]

S4 aspnet_state;ASP.NET-statusservice; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]

S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

[kape]

Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe (hier en hier) kan je lezen hoe je dat doet.

Download Zoek.exe naar het bureaublad (niet de .zip- of .rar-versie)

• Wanneer Internet Explorer of een andere browser of virusscanner melding geeft dat dit bestand onveilig zou zijn kun je negeren, dit is namelijk een onterechte waarschuwing.
  
• Dubbelklik op Zoek.exe om de tool te starten.
  
• Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  
• Kopieer nu onderstaande code en plak die in het grote invulvenster:
  
• Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.
  

  C:\Users\cedric\AppData\Roaming\Mozilla\Firefox\Profiles\m1r89vlm.default-1376402822709\extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7...394107f67c.com;fs
 C:\Users\cedric\AppData\Roaming\Mozilla\Firefox\Profiles\m1r89vlm.default-1376402822709\extensions\[email="sitefinder@sitefinder.com"]sitefinder@sitefinder.com[/email];fs
 C:\Users\cedric\AppData\Roaming\Mozilla\Firefox\Profiles\m1r89vlm.default-1376402822709\searchplugins\conduit-search.xml;f
 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}];r64
 [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mobilegeni daemon];r64
 C:\Windows\SYSWOW64\FAP53D5.tmp;f
 C:\Windows\SYSWOW64\FAP3C3D.tmp;f
 C:\Windows\SYSWOW64\FAP268A.tmp;f
 C:\Windows\SYSWOW64\FAP13B3.tmp;f
 C:\Windows\SYSWOW64\FAPE072.tmp;f
 C:\Windows\SYSWOW64\FAPDF86.tmp;f
 C:\Windows\SYSWOW64\FAPD3FF.tmp;f
 C:\Windows\SYSWOW64\FAPD0C2.tmp;f
 C:\Windows\SYSWOW64\FAPFFAC.tmp;f
 C:\Program Files (x86)\SimilarSites;fs
 C:\Users\cedric\AppData\Roaming\SimilarSites;fs
 emptyfolderscheck;delete 
startupall; 
filesrcm;

• Klik op de knop "Options" en vink nu de onderstaande opties aan.
  
• Do a Quick Scan
  
  
• Auto Clean
  
• De optie "Scan All Users" staat standaard aangevinkt.
  
• Klik nu op de knop "Run script".
  
• Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
  
• Mocht er geen logje verschijnen, start zoek.exe dan opnieuw en klik op de knop zoek-results.log, de log verschijnt dan alsnog.
  
• Post het geopende logje in het volgende bericht.
  

[guntheru]

Zoek.exe v5.0.0.0 Updated 07-March-2014

Tool run by cedric on do 13/03/2014 at 17:37:33,55.

Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64

Running in: Normal Mode Internet Access Detected

Launched: C:\Users\cedric\Downloads\zoek.exe [scan all users] [script inserted] [Checkboxes used]

==== System Restore Info ======================

13/03/2014 17:43:03 Zoek.exe System Restore Point Created Succesfully.

==== Empty Folders Check ======================

C:\PROGRA~2\Lavasoft deleted successfully

C:\PROGRA~2\MSXML 4.0 deleted successfully

C:\PROGRA~2\SimilarSites deleted successfully

C:\PROGRA~2\WinZip Registry Optimizer deleted successfully

C:\Program Files\log deleted successfully

C:\Program Files\office.tmp deleted successfully

C:\PROGRA~3\boost_interprocess deleted successfully

C:\PROGRA~3\Oracle deleted successfully

C:\Users\cedric\AppData\Roaming\BitTorrent deleted successfully

C:\Users\cedric\AppData\Roaming\Nico Mak Computing deleted successfully

C:\Users\cedric\AppData\Roaming\SimilarSites deleted successfully

C:\Users\cedric\AppData\Roaming\Sony Corporation deleted successfully

C:\Users\cedric\AppData\Roaming\TP deleted successfully

C:\Users\cedric\AppData\Local\cache deleted successfully

C:\Users\cedric\AppData\Local\genienext deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-1022104969-3133531358-4227153473-1001\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} deleted successfully

HKEY_USERS\S-1-5-21-1022104969-3133531358-4227153473-1001\Software\Microsoft\Internet Explorer\SearchScopes\{6A6E4B66-F3E2-4B55-8BC5-4A9D176AC983} deleted successfully

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== FireFox Fix ======================

ProfilePath: C:\Users\cedric\AppData\Roaming\Mozilla\Firefox\Profiles\m1r89vlm.default-1376402822709

---- Lines conduit removed from prefs.js ----

user_pref("browser.newtab.url", "http://search.conduit.com/?ctid=CT3320133&octid=EB_ORIGINAL_CTID&SearchSource=69&CUI=&SSPV=&Lay=1&UM=4&UP=SPDCB5A9EC-

user_pref("browser.search.defaultenginename", "Conduit Search");

user_pref("browser.search.selectedEngine", "Conduit Search");

user_pref("browser.startup.homepage", "http://search.conduit.com/?ctid=CT3320133&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SPDCB5A9EC-ED88-4

---- FireFox user.js and prefs.js backups ----

user_20141303_1813_.backup

prefs_20141303_1813_.backup

==== Registry Fix Code x64 ======================

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]

[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mobilegeni daemon]

==== Deleting Files \ Folders ======================

C:\Users\cedric\AppData\Roaming\Mozilla\Firefox\Profiles\m1r89vlm.default-1376402822709\extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7...394107f67c.com not found

C:\Program Files (x86)\SimilarSites not found

C:\Users\cedric\AppData\Roaming\SimilarSites not found

C:\Users\cedric\AppData\Roaming\Mozilla\Firefox\Profiles\m1r89vlm.default-1376402822709\extensions\sitefinder@sitefinder.com deleted

C:\Windows\syswow64\appdata deleted

C:\Users\cedric\daemonprocess.txt deleted

C:\Users\cedric\.android deleted

C:\PROGRA~2\GreenTree Applications deleted

C:\Users\cedric\AppData\Roaming\Systweak deleted

C:\PROGRA~3\ParetoLogic deleted

C:\PROGRA~3\ProductData deleted

C:\PROGRA~3\YTD Video Downloader deleted

C:\Users\cedric\AppData\Local\APN deleted

C:\Users\cedric\AppData\Local\SearchProtect deleted

C:\Users\cedric\AppData\Local\Mobogenie deleted

C:\Users\cedric\AppData\Local\SwvUpdater deleted

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YTD Video Downloader deleted

C:\Users\cedric\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Lollipop deleted

C:\Windows\SysNative\roboot64.exe deleted

C:\Users\cedric\Downloads\SoftonicDownloader_voor_advanced-systemcare.exe deleted

C:\Users\cedric\AppData\LocalLow\ADSRemoval deleted

C:\Users\cedric\AppData\LocalLow\boost_interprocess deleted

C:\windows\SysNative\tasks\DTReg deleted

C:\Windows\Syswow64\FAP13B3.tmp deleted

C:\Windows\Syswow64\FAP268A.tmp deleted

C:\Windows\Syswow64\FAP3C3D.tmp deleted

C:\Windows\Syswow64\FAP53D5.tmp deleted

C:\Windows\Syswow64\FAPD0C2.tmp deleted

C:\Windows\Syswow64\FAPD3FF.tmp deleted

C:\Windows\Syswow64\FAPDF86.tmp deleted

C:\Windows\Syswow64\FAPE072.tmp deleted

C:\Windows\Syswow64\FAPFFAC.tmp deleted

C:\Windows\Syswow64\SearchProtect deleted

C:\Users\cedric\Documents\Optimizer Pro deleted

C:\Users\cedric\Documents\Mobogenie deleted

C:\Users\cedric\AppData\Roaming\Mozilla\Firefox\Profiles\m1r89vlm.default-1376402822709\searchplugins\conduit-search.xml deleted

C:\Users\cedric\AppData\Roaming\Mozilla\Firefox\Profiles\m1r89vlm.default-1376402822709\Invalidprefs.js deleted

C:\Users\cedric\AppData\Roaming\Mozilla\Firefox\Profiles\m1r89vlm.default-1376402822709\extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com deleted

==== Files Recently Created / Modified ======================

====== C:\Windows ====

2014-02-23 23:33:12 4E189CEBB9122D0DE29B99D68F7E0019 1442 ----a-w- C:\Windows\chgt-c.ini

====== C:\Users\cedric\AppData\Local\Temp ====

2014-03-08 10:59:10 C76B8E74F900E083712ADC5B597A05C3 339264 ----a-w- C:\Users\cedric\AppData\Local\Temp\3180\taskmgr.dll

2014-03-08 10:59:10 5C74AD321FDD45D4562F6F67D9A75C84 1145120 ----a-w- C:\Users\cedric\AppData\Local\Temp\3180\ProjectOnUninstall.exe

2014-03-08 10:48:52 2F28FCA1AECCCA9C06A5043B0702FBBE 1753920 ----a-w- C:\Users\cedric\AppData\Local\Temp\ASCDownloader\IMF_ActionCenterDownloader.exe

2014-03-08 10:47:54 C76B8E74F900E083712ADC5B597A05C3 339264 ----a-w- C:\Users\cedric\AppData\Local\Temp\4635\taskmgr.dll

2014-03-08 10:47:54 5C74AD321FDD45D4562F6F67D9A75C84 1145120 ----a-w- C:\Users\cedric\AppData\Local\Temp\4635\ProjectOnUninstall.exe

2014-03-07 10:51:46 67A4F993EBC17246AD2C00052AD0FE11 18926080 ----a-w- C:\Users\cedric\AppData\Local\Temp\BeidMW64.msi

2014-03-07 10:51:45 64E50696521D7FC6CE0EC230D1EA6601 17185280 ----a-w- C:\Users\cedric\AppData\Local\Temp\BeidMW.msi

2014-03-07 10:27:19 0B88C2FFEA162EDB43DFDB3619513723 272664 ----a-w- C:\Users\cedric\AppData\Local\Temp\Step2.exe

2014-03-07 10:22:47 DE2594D67FE8B09756FC62024CFD7C79 12136960 ----a-w- C:\Users\cedric\AppData\Local\Temp\Step1.msi

====== Java Cache =====

2014-03-10 08:50:43 C1BBA7F1278F193AB584FFF460DB5E2A 17878 ----a-w- C:\Users\cedric\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12\eef218c-2f8dde56

2014-03-10 08:50:29 B3D163E07CBABE802563E61E8291ED55 99 ----a-w- C:\Users\cedric\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\17\49a00451-6.0.lap

2014-03-10 08:50:29 415FC9732A3F4D89A0E01251CD66E136 646 ----a-w- C:\Users\cedric\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\17\49a00451-6f035100

2014-03-10 08:50:27 415FC9732A3F4D89A0E01251CD66E136 646 ----a-w- C:\Users\cedric\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18\3cb32f52-4d45b09f

2014-03-10 08:52:03 4FF89A65EF2C1BAA8666DE0614D0A627 469 ----a-w- C:\Users\cedric\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\38\4de63de6-107df52a

2014-03-10 08:52:01 58FAC43F18D460DEBCF6BEC9B57FAF20 137 ----a-w- C:\Users\cedric\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42\3fe5812a-6.0.lap

2014-03-10 08:50:30 34FA8033B50A3F99D3AB8209C72C0ABA 6860 ----a-w- C:\Users\cedric\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\43\1ca2666b-158444e7

2014-03-10 08:52:02 1B5ED17F7C2215073A3A12910D54A34C 35335 ----a-w- C:\Users\cedric\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\8\497e8c48-1b21ef79

====== C:\Windows\SysWOW64 =====

2014-03-10 08:46:49 95E15A2DE75AB48728AB8E1911C3EDB1 264616 ----a-w- C:\Windows\SysWOW64\javaws.exe

2014-03-10 08:46:20 CB3638541DCAC86EE17FA8258202E20E 175016 ----a-w- C:\Windows\SysWOW64\javaw.exe

2014-03-10 08:46:20 A7871E39687EC6EE9712209DAE248B3A 96168 ----a-w- C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-03-10 08:46:20 9395BBE294045909A025C9F3DC3D9025 174504 ----a-w- C:\Windows\SysWOW64\java.exe

2014-03-07 13:42:08 8999F18D38D55E34D356796507FFD639 192000 ----a-w- C:\Windows\SysWOW64\rdpendp_winip.dll

2014-03-07 13:42:07 E6446AB7A7E602CAFF51ACA3C68C1526 269312 ----a-w- C:\Windows\SysWOW64\aaclient.dll

2014-03-07 13:42:07 40FF6C636380A87DE3A99F4E348BFDCB 1048064 ----a-w- C:\Windows\SysWOW64\mstsc.exe

2014-03-07 13:42:06 EF1689081813A60D4610FF429530BA36 4916224 ----a-w- C:\Windows\SysWOW64\mstscax.dll

2014-03-07 13:42:06 A9D4140B8B843D5719F7C3EED8C0F9FD 37376 ----a-w- C:\Windows\SysWOW64\tsgqec.dll

2014-03-07 13:42:04 D3F64318307CEC05CBDE533D99976532 16896 ----a-w- C:\Windows\SysWOW64\wksprtPS.dll

2014-03-07 13:42:03 3F853160DEE5B71B9AD2F1BAF2B1E55B 46592 ----a-w- C:\Windows\SysWOW64\MsRdpWebAccess.dll

2014-03-07 13:37:13 33B26FA5DBEB69FFAB703EDCB4E6DE4A 514560 ----a-w- C:\Windows\SysWOW64\qdvd.dll

2014-03-06 21:04:59 99DE7F0838685CE9F4C39E58FEE6F48B 790272 ----a-w- C:\Windows\SysWOW64\MaxxAudioAPOShell.dll

2014-03-06 21:00:27 626E882211093EA7C632FC3A6C91578D 147456 ----a-w- C:\Windows\SysWOW64\iglhcp32.dll

2014-03-06 21:00:27 053CDD6CC8D53D96030A66ADCF2CAFFA 208896 ----a-w- C:\Windows\SysWOW64\iglhsip32.dll

2014-03-06 21:00:24 93C9F5E09337213A4A3DE7E13A724D2E 228864 ----a-w- C:\Windows\SysWOW64\igfxdv32.dll

2014-03-06 21:00:24 0263DD370C8CC5B66B76C1B6A426F121 23552 ----a-w- C:\Windows\SysWOW64\igfxexps32.dll

2014-03-06 21:00:22 FC766773A207255FF0E48CC5EF7203CC 4338688 ----a-w- C:\Windows\SysWOW64\igd10umd32.dll

2014-03-06 21:00:22 6485368ADC59D2FAC03D8C29B4104FC8 571904 ----a-w- C:\Windows\SysWOW64\igdumdx32.dll

2014-03-06 21:00:22 21DF57EE5AEDA5CB7CB4D43FCD97251E 4896768 ----a-w- C:\Windows\SysWOW64\igdumd32.dll

2014-03-06 21:00:20 BFAC249F12855ECA75F48F52764A6811 11405824 ----a-w- C:\Windows\SysWOW64\ig4icd32.dll

====== C:\Windows\SysWOW64\drivers =====

====== C:\Windows\Sysnative =====

2014-03-07 13:42:09 E9A0777DCA9148157E0EF9B71D7DE353 15360 ----a-w- C:\Windows\Sysnative\RdpGroupPolicyExtension.dll

2014-03-07 13:42:09 AD4D0AEDB5993EDA31EB80A54EDBC344 243200 ----a-w- C:\Windows\Sysnative\rdpudd.dll

2014-03-07 13:42:09 8F69EE5E0EB0779DC3E90DFD8D8E8683 3174912 ----a-w- C:\Windows\Sysnative\rdpcorets.dll

2014-03-07 13:42:08 D346E07D62E3D4BEAB040939744EC31B 228864 ----a-w- C:\Windows\Sysnative\rdpendp_winip.dll

2014-03-07 13:42:08 AE8535663AA64318D174CD7CA44ED947 62976 ----a-w- C:\Windows\Sysnative\TSWbPrxy.exe

2014-03-07 13:42:07 F059D17612BF074443C01FCCC8D5C905 54272 ----a-w- C:\Windows\Sysnative\MsRdpWebAccess.dll

2014-03-07 13:42:07 98C04A60A10777D99B569636C55FE91C 1123840 ----a-w- C:\Windows\Sysnative\mstsc.exe

2014-03-07 13:42:06 7B619C36F84720CB6AB77031B6F4FA60 13312 ----a-w- C:\Windows\Sysnative\TsUsbRedirectionGroupPolicyExtension.dll

2014-03-07 13:42:06 0E894692EB8579703FB1EC8AB6908571 13312 ----a-w- C:\Windows\Sysnative\TsUsbRedirectionGroupPolicyControl.exe

2014-03-07 13:42:05 9EB297848DAACF111C36B6048EFF5AEA 43520 ----a-w- C:\Windows\Sysnative\TsUsbGDCoInstaller.dll

2014-03-07 13:42:05 87E8244DCB33A7A0836C66389B8874B6 322560 ----a-w- C:\Windows\Sysnative\aaclient.dll

2014-03-07 13:42:05 6846ECABF7034DD97EE1DE38F1DA16B4 384000 ----a-w- C:\Windows\Sysnative\wksprt.exe

2014-03-07 13:42:04 FF16B21E5C0C46A70B2CD4F65B87D9F1 5773824 ----a-w- C:\Windows\Sysnative\mstscax.dll

2014-03-07 13:42:04 E98E2152251EB2576714B2CCE01555DC 44032 ----a-w- C:\Windows\Sysnative\tsgqec.dll

2014-03-07 13:42:03 09112DADA82F4700F833C2E40DFB59FC 18432 ----a-w- C:\Windows\Sysnative\wksprtPS.dll

2014-03-07 13:37:13 973131EB99BE1E19DAC502CB724E72A5 366592 ----a-w- C:\Windows\Sysnative\qdvd.dll

2014-03-07 13:35:21 DAD88CD4525202FE432A3F2876B11480 27456 ----a-w- C:\Windows\Sysnative\RegistryDefragBootTime.exe

2014-03-06 21:09:02 0D2106264D437A031DD64A9DA514357F 73800 ----a-w- C:\Windows\Sysnative\RtNicProp64.dll

2014-03-06 21:06:02 771536F10F1A419622787FB5D27A8E6B 871856 ----a-w- C:\Windows\Sysnative\tossaeapo64.dll

2014-03-06 21:06:02 3D30D3B2776C1A24F6498F569466E8D7 162224 ----a-w- C:\Windows\Sysnative\toseaeapo64.dll

2014-03-06 21:06:02 0C089E47D8BD3996742F0939DE7E2D48 2103040 ----a-w- C:\Windows\Sysnative\WavesGUILib64.dll

2014-03-06 21:06:01 C082B23A77E89D5AA0329777FF34A0DE 65944 ----a-w- C:\Windows\Sysnative\tepeqapo64.dll

2014-03-06 21:06:01 A58E46E776CFAD5DCBC8C2D9A920E7B4 582056 ----a-w- C:\Windows\Sysnative\tosasfapo64.dll

2014-03-06 21:06:01 7380AE45CFA24369A7305520897142B8 1361336 ----a-w- C:\Windows\Sysnative\tosade.dll

2014-03-06 21:06:00 95F25E2D41AACCB8956F8E3C6740E377 148416 ----a-w- C:\Windows\Sysnative\tadefxapo.dll

2014-03-06 21:06:00 1A3586235C5DEF0C05F2F0C711E94376 836544 ----a-w- C:\Windows\Sysnative\tadefxapo264.dll

2014-03-06 21:05:58 928A1E0360023226799F08F07108C07B 244480 ----a-w- C:\Windows\Sysnative\slprp64.dll

2014-03-06 21:05:58 0F94B0EB0F9691C56E2C2F392F5BD53B 723200 ----a-w- C:\Windows\Sysnative\sltech64.dll

2014-03-06 21:05:56 35C6A24D95DC70A73D2DABD04FA7EB2D 1044224 ----a-w- C:\Windows\Sysnative\slcnt64.dll

2014-03-06 21:05:55 B4D7A07098508A3BCC3C57612F890F98 947760 ----a-w- C:\Windows\Sysnative\SFSS_APO.dll

2014-03-06 21:05:55 5AE160D9D229409D975D71AA1D38F5D9 898816 ----a-w- C:\Windows\Sysnative\sl3apo64.dll

2014-03-06 21:05:54 7B3E9344FB43D799C6462227A0E65877 221024 ----a-w- C:\Windows\Sysnative\SFNHK64.dll

2014-03-06 21:05:54 2C25AF115BDDC05D9A84D26227A08E63 81248 ----a-w- C:\Windows\Sysnative\SFCOM64.dll

2014-03-06 21:05:54 17ABCAD44A75C635583A238ED6333357 78688 ----a-w- C:\Windows\Sysnative\SFAPO64.dll

2014-03-06 21:05:52 F0D94C5786977B4C44A914683DEBAA9A 1958616 ----a-w- C:\Windows\Sysnative\RTSnMg64.cpl

2014-03-06 21:05:51 0E2C5B7C842024F50B1795A980C4D0FF 2810072 ----a-w- C:\Windows\Sysnative\RtPgEx64.dll

2014-03-06 21:05:48 CA1D7D09854D305A64B100DC1400BA21 331880 ----a-w- C:\Windows\Sysnative\RtlCPAPI64.dll

2014-03-06 21:05:43 8814A281406553A2640D6A04702C63BD 14952 ----a-w- C:\Windows\Sysnative\RtkCoLDR64.dll

2014-03-06 21:05:43 0805289E121F3E3C458C970B08314EB2 149608 ----a-w- C:\Windows\Sysnative\RtkCfg64.dll

2014-03-06 21:05:40 C08DE9FE49B8DE126EE7A42C7C80450E 1021656 ----a-w- C:\Windows\Sysnative\RtkApi64.dll

2014-03-06 21:05:40 6DB093B854351CD7F36A4E8EA7082E7A 2782936 ----a-w- C:\Windows\Sysnative\RtkAPO64.dll

2014-03-06 21:05:39 ECAEC5FBBBEF8612AF0A866AFA5F7EF2 101208 ----a-w- C:\Windows\Sysnative\RTEEL64A.dll

2014-03-06 21:05:39 D0D0D82B7366E691275E433CD34F89B2 375128 ----a-w- C:\Windows\Sysnative\RTEEP64A.dll

2014-03-06 21:05:39 6F4CD493196100EEF349D7132CECAFD9 78680 ----a-w- C:\Windows\Sysnative\RTEEG64A.dll

2014-03-06 21:05:38 A6286A6C7A1BBFCBA17AA54384A21D1C 204120 ----a-w- C:\Windows\Sysnative\RTEED64A.dll

2014-03-06 21:05:38 2A7224C314131592497D02A57D867218 618200 ----a-w- C:\Windows\Sysnative\RtDataProc64.dll

2014-03-06 21:05:36 22CAB76AF907B82664FEDE6A653ABA2A 1286872 ----a-w- C:\Windows\Sysnative\RTCOM64.dll

2014-03-06 21:05:35 E9D4A333DF15D06C68AC4BFB9B6581CB 310104 ----a-w- C:\Windows\Sysnative\RP3DAA64.dll

2014-03-06 21:05:35 B6FE01558CC03F3866C9AD0ED19261D8 310104 ----a-w- C:\Windows\Sysnative\RP3DHT64.dll

2014-03-06 21:05:33 6FE243C4544916588BE5DEC48F541714 154840 ----a-w- C:\Windows\Sysnative\RCoInstII64.dll

2014-03-06 21:05:33 038364E2CA0621AD0436DC72C46EF8C0 43720192 ----a-w- C:\Windows\Sysnative\RCoRes64.dat

2014-03-06 21:05:26 D0EB28022A91A5C084E8A7DEBB08D8D2 141584 ----a-w- C:\Windows\Sysnative\R4EEL64A.dll

2014-03-06 21:05:26 8882AD10853E45402CABD3BAF48A7EFC 124176 ----a-w- C:\Windows\Sysnative\R4EEA64A.dll

2014-03-06 21:05:26 0B5EF50E26CFD1E7BF01E32E053532B2 434960 ----a-w- C:\Windows\Sysnative\R4EED64A.dll

2014-03-06 21:05:26 03625A179B27362D3A90E3331AEBE95E 7164176 ----a-w- C:\Windows\Sysnative\R4EEP64A.dll

2014-03-06 21:05:26 01096663377134C41D618AF0E53A953E 75024 ----a-w- C:\Windows\Sysnative\R4EEG64A.dll

2014-03-06 21:05:24 32D0421AE8550172EEFC6301685FED1C 912184 ----a-w- C:\Windows\Sysnative\NAHIMICAPOSettingsIPC.dll

2014-03-06 21:05:22 B6DBCBB878A3BE0B48E8F5045CB9CA9D 906800 ----a-w- C:\Windows\Sysnative\MISS_APO.dll

2014-03-06 21:05:22 34775CBB1FAA0693C61994082B4C55D9 5753112 ----a-w- C:\Windows\Sysnative\NAHIMICAPOlfx.dll

2014-03-06 21:05:18 587A8CF457604D84266FF858CEB60223 662784 ----a-w- C:\Windows\Sysnative\MaxxVolumeSDAPO.dll

2014-03-06 21:05:17 8C3D0711219078FB6601C39387EB7B30 1286400 ----a-w- C:\Windows\Sysnative\MaxxSpeechAPO64.dll

2014-03-06 21:05:17 32E91908A319CF4FDDE18C6F5699E0E0 907008 ----a-w- C:\Windows\Sysnative\MaxxVoiceAPO2064.dll

2014-03-06 21:05:16 0B8F799CDEFF2A5C4ADFA86CC22323FA 3899648 ----a-w- C:\Windows\Sysnative\MaxxAudioVnN64.dll

2014-03-06 21:05:09 1B89185D5D7AB3A10B4309E16C62CC30 27644160 ----a-w- C:\Windows\Sysnative\MaxxAudioVnA64.dll

2014-03-06 21:05:06 61D45CFD4C0694D318D8160857CF4DDA 14153984 ----a-w- C:\Windows\Sysnative\MaxxAudioRealtek64.dll

2014-03-06 21:05:04 DD8A18C147ACD7799D84FD4A4E1C4064 1922304 ----a-w- C:\Windows\Sysnative\MaxxAudioRealtek264.dll

2014-03-06 21:05:02 1A6C91215105B6B6C48B0F531E1CD8FA 2036992 ----a-w- C:\Windows\Sysnative\MaxxAudioEQ64.dll

2014-03-06 21:05:00 D956C3D6ECE65A10A1018A72E08C4973 1013504 ----a-w- C:\Windows\Sysnative\MaxxAudioAPOShell64.dll

2014-03-06 21:04:58 E15522E4A9CF2F48395F5548167E8895 1345280 ----a-w- C:\Windows\Sysnative\MaxxAudioAPO5064.dll

2014-03-06 21:04:58 315AEF22E309E724AD0575C75E7EF5F3 1084160 ----a-w- C:\Windows\Sysnative\MaxxAudioAPO4064.dll

2014-03-06 21:04:58 06080807E61471A18AD99F3E6FF3C9B5 663296 ----a-w- C:\Windows\Sysnative\MaxxAudioAPO30.dll

2014-03-06 21:04:57 75616F8DB5C092A8A50AFEC273859DD7 318808 ----a-w- C:\Windows\Sysnative\MaxxAudioAPO20.dll

2014-03-06 21:04:56 6F7D1601DA55BBE5C7A79E01E236D7B9 603984 ----a-w- C:\Windows\Sysnative\KAAPORT64.dll

2014-03-06 21:04:47 922CDA544EB5C5A57795B38ED5871B69 2743328 ----a-w- C:\Windows\Sysnative\FMAPO64.dll

2014-03-06 21:04:46 DE32448E6B40141C80DAABFF6FBE1744 693352 ----a-w- C:\Windows\Sysnative\DTSVoiceClarityDLL64.dll

2014-03-06 21:04:46 A9B98F96FBE514ADEABD20B2BD132172 415680 ----a-w- C:\Windows\Sysnative\DTSU2PREC64.dll

2014-03-06 21:04:45 8AE860D92752CFA136979B1FF797FFDC 501184 ----a-w- C:\Windows\Sysnative\DTSU2PLFX64.dll

2014-03-06 21:04:45 37B8A8089ECED77F6CEAF74917C5D12B 487360 ----a-w- C:\Windows\Sysnative\DTSU2PGFX64.dll

2014-03-06 21:04:44 F132C08BD8C58579B400DFAA71F34CFB 1756264 ----a-w- C:\Windows\Sysnative\DTSS2SpeakerDLL64.dll

2014-03-06 21:04:44 9948969B2C1987B1D64789EFEB284A84 712296 ----a-w- C:\Windows\Sysnative\DTSSymmetryDLL64.dll

2014-03-06 21:04:43 F7C357462077156DC211AC2112FC8C53 1568360 ----a-w- C:\Windows\Sysnative\DTSS2HeadphoneDLL64.dll

2014-03-06 21:04:43 2EF5442E8E7ED20F7634EEFB09640C8F 491112 ----a-w- C:\Windows\Sysnative\DTSNeoPCDLL64.dll

2014-03-06 21:04:42 BC0474E5476E5EA0D0E1AA5AC41E2061 242792 ----a-w- C:\Windows\Sysnative\DTSGFXAPO64.dll

2014-03-06 21:04:42 B3977C8BA77559F4F8752AE8EB724C87 242792 ----a-w- C:\Windows\Sysnative\DTSLFXAPO64.dll

2014-03-06 21:04:42 3B8FB5376F5431C0101747D5138BCB9B 241768 ----a-w- C:\Windows\Sysnative\DTSGFXAPONS64.dll

2014-03-06 21:04:42 192A03A21636D3775CEE4C049C3BEB2A 432744 ----a-w- C:\Windows\Sysnative\DTSLimiterDLL64.dll

2014-03-06 21:04:41 FF31A2F57AAAB58DB78FCC961A58B206 428648 ----a-w- C:\Windows\Sysnative\DTSGainCompensatorDLL64.dll

2014-03-06 21:04:40 21B38D4D86A87909491F690883AE6D1E 1486952 ----a-w- C:\Windows\Sysnative\DTSBoostDLL64.dll

2014-03-06 21:04:39 8B5A737AD11EF45D9B1AEB4ED6884968 728680 ----a-w- C:\Windows\Sysnative\DTSBassEnhancementDLL64.dll

2014-03-06 21:04:38 B827E0AE582ACD641F0B2B052773A5CA 6217904 ----a-w- C:\Windows\Sysnative\DDPP64A.dll

2014-03-06 21:04:37 A1C8F811777EFA1B6BD82B226016CF2D 313520 ----a-w- C:\Windows\Sysnative\DDPO64A.dll

2014-03-06 21:04:36 FAC24F4CC63235D9533DD6605E5EE6F0 1938608 ----a-w- C:\Windows\Sysnative\DDPD64A.dll

2014-03-06 21:04:36 82DF29C6D5571BFA69429563F0AED677 260272 ----a-w- C:\Windows\Sysnative\DDPA64.dll

2014-03-06 21:04:32 6E14F444A2506049EEC25CB5EDFE0905 113576 ----a-w- C:\Windows\Sysnative\CONEQMSAPOGUILibrary.dll

2014-03-06 21:04:28 2D0895BED270D1A8CADD981A5BFC0AE5 605496 ----a-w- C:\Windows\Sysnative\audioLibVc.dll

2014-03-06 21:04:27 F2CF417EF502555B139EDCD9FEBF9CD3 109848 ----a-w- C:\Windows\Sysnative\AcpiServiceVnA64.dll

2014-03-06 21:04:27 B3E9EA31E37EDCC1D54CE20504549ABE 108640 ----a-w- C:\Windows\Sysnative\AERTAR64.dll

2014-03-06 21:04:27 2CBDC11690656A1A2D03EC65AE2BCE68 209096 ----a-w- C:\Windows\Sysnative\AERTAC64.dll

2014-03-06 21:00:28 EE4F3EE7BEF22FD35EA5249A78D3AB79 90112 ----a-w- C:\Windows\Sysnative\igfxCoIn_v2869.dll

2014-03-06 21:00:28 5D463B6AB51B49D666F5965AA9464D87 5448 ----a-w- C:\Windows\Sysnative\iglhxs64.vp

2014-03-06 21:00:27 8FF8BB604620836A0B0CE7E99D56440A 511032 ----a-w- C:\Windows\Sysnative\igfxsrvc.exe

2014-03-06 21:00:27 8C71C669747887B4054D056C7A6F79F8 188416 ----a-w- C:\Windows\Sysnative\iglhcp64.dll

2014-03-06 21:00:27 73D292020B4911315686596EBBC5640F 380416 ----a-w- C:\Windows\Sysnative\igfxTMM.dll

2014-03-06 21:00:27 3CD0E54D977C28CA50FBE3E40C6F7D0F 163384 ----a-w- C:\Windows\Sysnative\igfxtray.exe

2014-03-06 21:00:27 233064139949FF4349A1E17C20F39A1A 206336 ----a-w- C:\Windows\Sysnative\iglhsip64.dll

2014-03-06 21:00:26 FE9DD2A78C919CAFD30C895B4AB8C3C1 87552 ----a-w- C:\Windows\Sysnative\igfxrfin.lrc

2014-03-06 21:00:26 F679EF4C684268FB0055A3074E2A7566 87040 ----a-w- C:\Windows\Sysnative\igfxrdan.lrc

2014-03-06 21:00:26 EDDF165A5814EE5867AE3C1F2C5FC556 87552 ----a-w- C:\Windows\Sysnative\igfxrslv.lrc

2014-03-06 21:00:26 E578FDE93CE0B29696E8B04CB7218CD9 87552 ----a-w- C:\Windows\Sysnative\igfxrnor.lrc

2014-03-06 21:00:26 C877ADB543F67912A5592A2A146E6837 87552 ----a-w- C:\Windows\Sysnative\igfxrtrk.lrc

2014-03-06 21:00:26 BF43C2CA2973A6482C3766F2C011B257 86528 ----a-w- C:\Windows\Sysnative\igfxrheb.lrc

2014-03-06 21:00:26 BDD3B304F100C16879EA77BFDF7801B6 87552 ----a-w- C:\Windows\Sysnative\igfxrptb.lrc

2014-03-06 21:00:26 B9FE5A0ADB2A6E92B782BBD748442CB1 84992 ----a-w- C:\Windows\Sysnative\igfxrjpn.lrc

2014-03-06 21:00:26 B97118477D60610D7EE14F253CC69398 88576 ----a-w- C:\Windows\Sysnative\igfxresn.lrc

2014-03-06 21:00:26 B80052C021433859818EE3E55390F592 88064 ----a-w- C:\Windows\Sysnative\igfxrsky.lrc

2014-03-06 21:00:26 B2D5AC8C8955384314BA8C6567DDEC79 87552 ----a-w- C:\Windows\Sysnative\igfxrsve.lrc

2014-03-06 21:00:26 A71EFF1FAD6374D4984F6E020A1224FA 84992 ----a-w- C:\Windows\Sysnative\igfxrkor.lrc

2014-03-06 21:00:26 93F8B79AC238ECF79A4233CCA8F682B0 87552 ----a-w- C:\Windows\Sysnative\igfxrhun.lrc

2014-03-06 21:00:26 8B7B506C19FB073F9ECDC67F6053AF5C 88576 ----a-w- C:\Windows\Sysnative\igfxrfra.lrc

2014-03-06 21:00:26 6D3BC2A0270207F31DC0B3B34DFEEDEC 88064 ----a-w- C:\Windows\Sysnative\igfxrptg.lrc

2014-03-06 21:00:26 58ACF6E6C6A59819D27D6CE624D2EF47 88064 ----a-w- C:\Windows\Sysnative\igfxrita.lrc

2014-03-06 21:00:26 4E34EF2E9B236F809CD7C4F8FE73BC95 87552 ----a-w- C:\Windows\Sysnative\igfxrenu.lrc

2014-03-06 21:00:26 290F868B7964BC82BBB545AC38378B8E 88064 ----a-w- C:\Windows\Sysnative\igfxrplk.lrc

2014-03-06 21:00:26 26286D4D81AC51D38B4B2DF66B95AE89 87040 ----a-w- C:\Windows\Sysnative\igfxrtha.lrc

2014-03-06 21:00:26 22652661A8C57BDBAB0E3D908C707245 88064 ----a-w- C:\Windows\Sysnative\igfxrrus.lrc

2014-03-06 21:00:26 1DB9AF476448524A214C8878E775EB67 88064 ----a-w- C:\Windows\Sysnative\igfxrdeu.lrc

2014-03-06 21:00:26 19174B0EC0D7335487882305C96547E9 88064 ----a-w- C:\Windows\Sysnative\igfxrnld.lrc

2014-03-06 21:00:26 04114241F83C27BA56CBFAFA4619848E 88576 ----a-w- C:\Windows\Sysnative\igfxrell.lrc

2014-03-06 21:00:25 DCFFF6EE3EA7606DC9B5D0DDB480F727 83968 ----a-w- C:\Windows\Sysnative\igfxrcht.lrc

2014-03-06 21:00:25 A961369E7D52C9569BD374D8243D94F3 83968 ----a-w- C:\Windows\Sysnative\igfxrchs.lrc

2014-03-06 21:00:25 9DF9255689C480D3FE219752C9D09C55 244224 ----a-w- C:\Windows\Sysnative\igfxpph.dll

2014-03-06 21:00:25 28935157633349C0E74DE61FC89C9167 87552 ----a-w- C:\Windows\Sysnative\igfxrcsy.lrc

2014-03-06 21:00:25 194FBB48D50F5357905FAA019EA2B231 86528 ----a-w- C:\Windows\Sysnative\igfxrara.lrc

2014-03-06 21:00:24 93349A60604AAAEC54DA4458FD04DC47 224824 ----a-w- C:\Windows\Sysnative\igfxext.exe

2014-03-06 21:00:24 4E592C92850A9A2C0E3BF702A60C0908 418360 ----a-w- C:\Windows\Sysnative\igfxpers.exe

2014-03-06 21:00:23 8D190B001736DB115F49021741267B51 142336 ----a-w- C:\Windows\Sysnative\igfxdo.dll

2014-03-06 21:00:23 3F57403B74E5A6C7B5A527F21CE97F10 4096 ----a-w- C:\Windows\Sysnative\IGFXDEVLib.dll

2014-03-06 21:00:22 E8E14873F4FE2AA36F9E1BEDB88C0158 6549504 ----a-w- C:\Windows\Sysnative\igdumd64.dll

2014-03-06 21:00:22 09487A4A161615176ACE18DE834793CE 122368 ----a-w- C:\Windows\Sysnative\igfxcpl.cpl

2014-03-06 21:00:21 E02A08D4450647244F14C00DB3C0D639 15546880 ----a-w- C:\Windows\Sysnative\ig4icd64.dll

2014-03-06 21:00:19 E703154B70055754D28239B1A07998F1 259 ----a-w- C:\Windows\Sysnative\GfxUI.exe.config

2014-03-06 21:00:19 4E2B2F3B7FD17CA06C74F5B54AD476A2 387640 ----a-w- C:\Windows\Sysnative\hkcmd.exe

2014-03-06 21:00:17 9D497C3C093D4E65B8EAAA95133831C8 3158584 ----a-w- C:\Windows\Sysnative\GfxUI.exe

2014-03-06 21:00:16 F537983F65DD5BA0C17F6D95DA4B9696 119360 ----a-w- C:\Windows\Sysnative\Gfxres.sv-SE.resources

2014-03-06 21:00:16 AB20AF03DA5AC78FD9DEFBA318A435A8 189552 ----a-w- C:\Windows\Sysnative\Gfxres.th-TH.resources

2014-03-06 21:00:16 7DCB8B4BD50DEB37C4671C961367B079 121173 ----a-w- C:\Windows\Sysnative\Gfxres.tr-TR.resources

2014-03-06 21:00:16 77AB19E1907F311863B23094BB517019 104044 ----a-w- C:\Windows\Sysnative\Gfxres.zh-TW.resources

2014-03-06 21:00:16 405C4693BB5C5E37C9C0D69988082621 102883 ----a-w- C:\Windows\Sysnative\Gfxres.zh-CN.resources

2014-03-06 21:00:16 3C321E8DC259CF496CBCC6695490C662 118058 ----a-w- C:\Windows\Sysnative\Gfxres.sk-SK.resources

2014-03-06 21:00:16 2410905B04FBDC450E15C7ABD34C567D 119808 ----a-w- C:\Windows\Sysnative\gfxSrvc.dll

2014-03-06 21:00:16 1592AB29C1B53C993939C2C74C3A8C81 114372 ----a-w- C:\Windows\Sysnative\Gfxres.sl-SI.resources

2014-03-06 21:00:16 0FA6CF9ACD2AAB5B35FCBDBA4BC6ECCD 165395 ----a-w- C:\Windows\Sysnative\Gfxres.ru-RU.resources

2014-03-06 21:00:14 FB3AC60EC591A93790885D4BDE8906C4 118409 ----a-w- C:\Windows\Sysnative\Gfxres.pl-PL.resources

2014-03-06 21:00:14 F93C2A04C6963E0D43AC31EB26175092 136401 ----a-w- C:\Windows\Sysnative\Gfxres.ja-JP.resources

2014-03-06 21:00:14 E6D6609F49E7D807542827B8EF48D838 133746 ----a-w- C:\Windows\Sysnative\Gfxres.he-IL.resources

2014-03-06 21:00:14 C2A75C0341015889ED74F853BA5F21D7 123230 ----a-w- C:\Windows\Sysnative\Gfxres.ko-KR.resources

2014-03-06 21:00:14 C219E058EC655352BDE407DC496E1E87 119616 ----a-w- C:\Windows\Sysnative\Gfxres.hu-HU.resources

2014-03-06 21:00:14 B6F3F46234300C5A701F84D30915E81F 120800 ----a-w- C:\Windows\Sysnative\Gfxres.fr-FR.resources

2014-03-06 21:00:14 9E66009E269C8113FC2DB51210232FD9 118697 ----a-w- C:\Windows\Sysnative\Gfxres.fi-FI.resources

2014-03-06 21:00:14 86B1912B5ED6EEA59F91E9454DFBB06D 125558 ----a-w- C:\Windows\Sysnative\Gfxres.it-IT.resources

2014-03-06 21:00:14 630EDA1F8C6F46DB01C56869DF46FBC7 119067 ----a-w- C:\Windows\Sysnative\Gfxres.pt-PT.resources

2014-03-06 21:00:14 5525BB54E5B6D471E3FE83AFB69A993C 114852 ----a-w- C:\Windows\Sysnative\Gfxres.nb-NO.resources

2014-03-06 21:00:14 13B80E7A4C0BA1FCBC53B289B52DD58D 120366 ----a-w- C:\Windows\Sysnative\Gfxres.pt-BR.resources

2014-03-06 21:00:14 12FA5616DABD2DBB2EFC83FCD7F5FEAB 119586 ----a-w- C:\Windows\Sysnative\Gfxres.nl-NL.resources

2014-03-06 21:00:13 ECCC5744385342272C25DDEBCB3DC9E9 122927 ----a-w- C:\Windows\Sysnative\Gfxres.es-ES.resources

2014-03-06 21:00:13 D3B47A7DB8683DB7DBB9BD809D05A7AE 154680 ----a-w- C:\Windows\Sysnative\difx64.exe

2014-03-06 21:00:13 A1D56C6514D3BCCED1118B1A24F25D91 110211 ----a-w- C:\Windows\Sysnative\Gfxres.en-US.resources

2014-03-06 21:00:13 794173FEB0C0275BE9E2F4750A9F6C7B 118745 ----a-w- C:\Windows\Sysnative\Gfxres.cs-CZ.resources

2014-03-06 21:00:13 653B94C71B5AAE750898AB7D305F2203 114261 ----a-w- C:\Windows\Sysnative\Gfxres.da-DK.resources

2014-03-06 21:00:13 63E8B7570D3CFD513F453B6B1F6080A2 122709 ----a-w- C:\Windows\Sysnative\Gfxres.de-DE.resources

2014-03-06 21:00:13 5DC5D4517F868EAC180C77D6F21B201F 139909 ----a-w- C:\Windows\Sysnative\Gfxres.ar-SA.resources

2014-03-06 21:00:13 36D6DE4918F97ACB23E606C51A7108FE 178407 ----a-w- C:\Windows\Sysnative\Gfxres.el-GR.resources

2014-03-06 20:56:04 4D5D8058F17C873B4F0792678BAA6534 34080 ----a-w- C:\Windows\Sysnative\SmartDefragBootTime.exe

2014-03-06 20:55:47 6A6E91C06ACDBE1D85A4EC469BBB8EBB 121856 ----a-w- C:\Windows\Sysnative\IObitSmartDefragExtension.dll

====== C:\Windows\Sysnative\drivers =====

2014-03-07 13:42:08 313F68E1A3E6345A4F47A36B07062F34 19456 ----a-w- C:\Windows\Sysnative\drivers\rdpvideominiport.sys

2014-03-07 13:42:05 17C6B51CBCCDED95B3CC14E22791F85E 57856 ----a-w- C:\Windows\Sysnative\drivers\TsUsbFlt.sys

2014-03-07 10:31:02 9A8F69CEEC2062FCD156F53B867BDCEA 316312 ----a-w- C:\Windows\Sysnative\drivers\RapportKE64.sys

2014-03-07 10:18:43 D41D8CD98F00B204E9800998ECF8427E 0 ---ha-w- C:\Windows\Sysnative\drivers\Msft_User_WUDFUsbccidDriver_01_09_00.Wdf

2014-03-06 21:09:50 ECDE3F85CBFE6C6CF89BC6E48BA2E056 2988760 ----a-w- C:\Windows\Sysnative\drivers\rtwlane.sys

2014-03-06 21:09:02 D787F86566F6EA23053D9C5F401E33B7 888536 ----a-w- C:\Windows\Sysnative\drivers\Rt64win7.sys

2014-03-06 21:05:52 072413353DBD94C37F23CD85E0F2DF05 5804772 ----a-w- C:\Windows\Sysnative\drivers\rtvienna.dat

2014-03-06 21:05:46 C651A99B25AF42423FF80A88A58CD00B 3791320 ----a-w- C:\Windows\Sysnative\drivers\RTKVHD64.sys

2014-03-06 21:05:36 867F8909D2DC751A2C986DA044ED271F 704269 ----a-w- C:\Windows\Sysnative\drivers\RTAIODAT.DAT

2014-03-06 21:00:22 8814F0B9A09C647D3D7BE735450E7B4C 10629408 ----a-w- C:\Windows\Sysnative\drivers\igdkmd64.sys

====== C:\Windows\Tasks ======

2014-03-06 20:46:09 C6A0B29D4F83B98B2E37BDC5A0538C41 2888 ----a-w- C:\Windows\Sysnative\Tasks\Uninstaller_SkipUac_Administrator

====== C:\Windows\Temp ======

======= C:\Program Files =====

2014-03-13 15:01:58 -------- d-----w- C:\Program Files\trend micro

2014-03-07 10:55:23 -------- d-----w- C:\Program Files\DIFX

2014-02-23 23:33:03 -------- d-----w- C:\Program Files\PhotoZoom Pro 4

======= C:\PROGRA~2 =====

2014-03-10 08:47:11 -------- d-----w- C:\PROGRA~2\COMMON~1\Java

2014-03-10 08:39:24 -------- d-----w- C:\PROGRA~2\COMMON~1\Adobe

2014-03-08 10:18:51 -------- d-----w- C:\PROGRA~2\COMMON~1\Isabel CSP

2014-03-08 10:18:51 -------- d-----w- C:\PROGRA~2\COMMON~1\Isabel

2014-03-07 10:52:33 -------- d-----w- C:\PROGRA~2\Belgium Identity Card

2014-03-07 10:29:29 -------- d-----w- C:\PROGRA~2\Trusteer

2014-03-06 20:44:36 -------- d-----w- C:\PROGRA~2\IObit

2014-03-05 20:18:22 -------- d-----w- C:\PROGRA~2\AVG

2014-03-05 04:23:45 -------- d-----w- C:\PROGRA~2\COMMON~1\Skype

======= C: =====

2014-03-07 15:51:14 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\asc_rdflag

====== C:\Users\cedric\AppData\Roaming ======

2014-03-10 08:52:11 -------- d-----w- C:\Users\cedric\AppData\Roaming\beid-cache

2014-03-08 09:52:47 -------- d-----w- C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Trusteer

2014-03-07 10:30:01 -------- d-----w- C:\Users\cedric\AppData\Local\Trusteer

2014-03-06 21:29:22 -------- d-----w- C:\Windows\sysWoW64\config\systemprofile\AppData\Roaming\IObit

2014-03-06 20:46:04 -------- d-----w- C:\Users\cedric\AppData\Locallow\IObit

2014-03-06 20:43:49 -------- d-----w- C:\Users\cedric\AppData\Roaming\IObit

2014-03-05 20:20:52 -------- d-----w- C:\Users\cedric\AppData\Roaming\AVG2014

2014-03-05 20:20:37 -------- d-----w- C:\Windows\sysWoW64\config\systemprofile\AppData\Roaming\AVG2014

2014-03-05 20:20:14 -------- d-----w- C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Avg2014

2014-03-05 20:20:12 -------- d-----w- C:\Users\cedric\AppData\Roaming\TuneUp Software

2014-03-05 20:18:23 -------- d-----w- C:\Windows\SysNative\config\systemprofile\AppData\Local\Avg2014

2014-03-05 20:16:47 -------- d-----w- C:\Users\cedric\AppData\Local\Avg2014

2014-03-05 20:02:30 -------- d-----w- C:\Users\cedric\AppData\Roaming\LavasoftStatistics

2014-02-26 21:53:59 -------- d-----w- C:\Users\cedric\AppData\Local\SpeedBalance

2014-02-25 22:23:45 -------- d-----w- C:\Users\cedric\AppData\Local\webkit

2014-02-25 22:20:27 3A5DA0850690839A59D7906FB4C866BB 1469 ----a-w- C:\Users\cedric\AppData\Local\recently-used.xbel

2014-02-25 22:17:31 -------- d-----w- C:\Users\cedric\AppData\Local\gtk-2.0

2014-02-25 22:14:53 -------- d-----w- C:\Users\cedric\AppData\Local\fontconfig

2014-02-25 22:14:51 -------- d-----w- C:\Users\cedric\AppData\Local\gegl-0.2

2014-02-23 23:33:07 -------- d-----w- C:\Users\cedric\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoZoom Pro 4

====== C:\Users\cedric ======

2014-03-13 15:01:22 662C39FC1E27131551D557862CEC47F0 935175 ----a-w- C:\Users\cedric\Downloads\RSITx64.exe

2014-03-13 14:59:38 69CA82A7482A00D8EE063D2B97FC4338 781383 ----a-w- C:\Users\cedric\Downloads\RSIT.exe

2014-03-12 12:09:06 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG zelfstandigLinkScanner

2014-03-10 08:46:20 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-03-10 08:28:11 D6A3D61864E8F9565550548865D7522C 921000 ----a-w- C:\Users\cedric\Downloads\jxpiinstall(1).exe

2014-03-10 08:26:58 D6A3D61864E8F9565550548865D7522C 921000 ----a-w- C:\Users\cedric\Downloads\jxpiinstall.exe

2014-03-08 10:18:51 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KBC-Online for Business

2014-03-07 13:58:11 CB869DAEA55A8D78687F91FE467CA3E7 46222840 ----a-w- C:\Users\cedric\Downloads\eID-QuickInstaller-build-7416-signed_tcm227-236875(1).exe

2014-03-07 10:55:24 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Belgium - eID

2014-03-07 10:50:11 CB869DAEA55A8D78687F91FE467CA3E7 46222840 ----a-w- C:\Users\cedric\Downloads\eID-QuickInstaller-build-7416-signed_tcm227-236875.exe

2014-03-07 10:29:54 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Trusteer Eindpuntbeveiliging

2014-03-07 10:27:25 -------- d-----w- C:\ProgramData\Trusteer

2014-03-07 10:23:04 -------- d-----w- C:\ProgramData\Isabel Services

2014-03-07 10:22:16 3CAA77307A96AE7325DB5EDEAF1BDD02 135968 ----a-w- C:\Users\cedric\Downloads\O4BT.Installer.Kbc.exe

2014-03-06 21:08:29 D41D8CD98F00B204E9800998ECF8427E 0 ---ha-w- C:\ProgramData\DP45977C.lfl

2014-03-06 20:46:04 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller

2014-03-06 20:45:18 -------- d-----w- C:\ProgramData\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}

2014-03-06 20:45:15 -------- d-----w- C:\ProgramData\IObit

2014-03-06 20:43:20 D72352C40ABFC97336923A22403C7729 41807400 ----a-w- C:\Users\cedric\Desktop\advanced-systemcare-setup.exe

2014-03-06 20:40:30 7FFE531FC3065DE780E683F4197B5F67 4892480 ----a-w- C:\Users\cedric\Downloads\wzmp_8.exe

2014-03-05 20:19:27 -------- d-----w- C:\ProgramData\AVG2014

2014-03-05 20:16:47 -------- d--h--w- C:\ProgramData\Common Files

2014-03-05 19:45:20 -------- d-----w- C:\ProgramData\Lavasoft

2014-03-05 19:43:58 33917156051EE3EBE0CD70F226CF1FB1 455640 ----a-w- C:\Users\cedric\Downloads\ad-aware-windows-downloader.exe

2014-03-05 19:08:55 683FDD3D773C58B262DC07CD0C6CE938 10285040 ----a-w- C:\Users\cedric\Downloads\mbam-setup-1.75.0.1300(2).exe

2014-03-05 19:05:29 C8F069A68D57DA55102D58CFE24C0D72 4765152 ----a-w- C:\Users\cedric\Downloads\ccsetup411.exe

2014-03-05 04:23:45 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2014-02-25 22:17:08 -------- d-----w- C:\Users\cedric\.thumbnails

2014-02-25 22:14:51 -------- d-----w- C:\Users\cedric\.gimp-2.8

2014-02-16 20:01:21 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013

====== C: exe-files ==

2014-03-13 15:01:59 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\cedric.exe

2014-03-13 15:01:22 662C39FC1E27131551D557862CEC47F0 935175 ----a-w- C:\Users\cedric\Downloads\RSITx64.exe

2014-03-13 14:59:38 69CA82A7482A00D8EE063D2B97FC4338 781383 ----a-w- C:\Users\cedric\Downloads\RSIT.exe

2014-03-10 08:45:49 C422AF851B98378A39B51D99FE707E64 146344 ----a-w- C:\Program Files (x86)\Java\jre7\bin\unpack200.exe

2014-03-10 08:45:49 0E37C7C174521E16CEA0A6BC46F03BCD 16296 ----a-w- C:\Program Files (x86)\Java\jre7\bin\tnameserv.exe

2014-03-10 08:45:47 F4BA3A5D5FDE0A321CD7C4A74749CE5B 15784 ----a-w- C:\Program Files (x86)\Java\jre7\bin\pack200.exe

2014-03-10 08:45:47 EBAB810C999D8C31F0D5D8B28B3EEDD1 15784 ----a-w- C:\Program Files (x86)\Java\jre7\bin\servertool.exe

2014-03-10 08:45:47 ACA236A716C2291E40ED069F2CBB3D35 49064 ----a-w- C:\Program Files (x86)\Java\jre7\bin\ssvagent.exe

2014-03-10 08:45:47 6E2BECF6E17FF8DC850C058A38A50C4F 15784 ----a-w- C:\Program Files (x86)\Java\jre7\bin\rmiregistry.exe

2014-03-10 08:45:47 6E1B0EEBF3D1CC7ECF4104E1473900FF 15784 ----a-w- C:\Program Files (x86)\Java\jre7\bin\rmid.exe

2014-03-10 08:45:47 397A6EA17BB97800939DE44D7BFEEC04 15784 ----a-w- C:\Program Files (x86)\Java\jre7\bin\policytool.exe

2014-03-10 08:45:47 18BC25C50200C3DD4E67611D2467DAA2 15784 ----a-w- C:\Program Files (x86)\Java\jre7\bin\orbd.exe

2014-03-10 08:45:46 ED1F5F1906F8D963612A4831CDB331D6 15784 ----a-w- C:\Program Files (x86)\Java\jre7\bin\ktab.exe

2014-03-10 08:45:46 B9436A665A8621073A12338B16D7BFD4 182696 ----a-w- C:\Program Files (x86)\Java\jre7\bin\jqs.exe

2014-03-10 08:45:46 762E372DCFDAE32FAE52C1A50A0029C2 15784 ----a-w- C:\Program Files (x86)\Java\jre7\bin\klist.exe

2014-03-10 08:45:46 6EEAD2C8A5CAC1F0F2066ABD77BA9092 15784 ----a-w- C:\Program Files (x86)\Java\jre7\bin\keytool.exe

2014-03-10 08:45:46 49A5F3169A23C00F9F2023DFE04D7AF6 15784 ----a-w- C:\Program Files (x86)\Java\jre7\bin\kinit.exe

2014-03-10 08:45:45 A8F2A6D5782AA0166D8367FF674DDF77 52648 ----a-w- C:\Program Files (x86)\Java\jre7\bin\jp2launcher.exe

2014-03-10 08:45:44 E9BFEA5B2F3F7598DA990F9728768790 66984 ----a-w- C:\Program Files (x86)\Java\jre7\bin\javacpl.exe

2014-03-10 08:45:44 CB3638541DCAC86EE17FA8258202E20E 175016 ----a-w- C:\Program Files (x86)\Java\jre7\bin\javaw.exe

2014-03-10 08:45:44 95E15A2DE75AB48728AB8E1911C3EDB1 264616 ----a-w- C:\Program Files (x86)\Java\jre7\bin\javaws.exe

2014-03-10 08:45:43 FBC27FD8E76C53E6E8066944BBE2BF73 48040 ----a-w- C:\Program Files (x86)\Java\jre7\bin\jabswitch.exe

2014-03-10 08:45:43 9395BBE294045909A025C9F3DC3D9025 174504 ----a-w- C:\Program Files (x86)\Java\jre7\bin\java.exe

2014-03-10 08:45:43 5877E6618DA03EE8E7A869F57EE6ACE5 15784 ----a-w- C:\Program Files (x86)\Java\jre7\bin\java-rmi.exe

2014-03-10 08:43:58 3842C46F2FBC7522EF625F1833530804 145408 ----a-w- C:\Users\cedric\AppData\LocalLow\Sun\Java\jre1.7.0_51\lzma.exe

2014-03-10 08:28:11 D6A3D61864E8F9565550548865D7522C 921000 ----a-w- C:\Users\cedric\Downloads\jxpiinstall(1).exe

2014-03-10 08:26:58 D6A3D61864E8F9565550548865D7522C 921000 ----a-w- C:\Users\cedric\Downloads\jxpiinstall.exe

2014-03-08 10:59:10 5C74AD321FDD45D4562F6F67D9A75C84 1145120 ----a-w- C:\Users\cedric\AppData\Local\Temp\3180\ProjectOnUninstall.exe

2014-03-08 10:48:55 26AE0B3EBF24F13292372CAC53E461BE 39694640 ----a-w- C:\ProgramData\IObit\ASCDownloader\Advanced SystemCare.exe

2014-03-08 10:48:52 2F28FCA1AECCCA9C06A5043B0702FBBE 1753920 ----a-w- C:\Users\cedric\AppData\Local\Temp\ASCDownloader\IMF_ActionCenterDownloader.exe

2014-03-08 10:47:54 5C74AD321FDD45D4562F6F67D9A75C84 1145120 ----a-w- C:\Users\cedric\AppData\Local\Temp\4635\ProjectOnUninstall.exe

2014-03-07 20:48:19 CB869DAEA55A8D78687F91FE467CA3E7 46222840 ----a-w- C:\Users\cedric\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6E96L6H1\eID-QuickInstaller-build-7416-signed_tcm227-236875.exe

2014-03-07 13:58:11 CB869DAEA55A8D78687F91FE467CA3E7 46222840 ----a-w- C:\Users\cedric\Downloads\eID-QuickInstaller-build-7416-signed_tcm227-236875(1).exe

2014-03-07 10:50:11 CB869DAEA55A8D78687F91FE467CA3E7 46222840 ----a-w- C:\Users\cedric\Downloads\eID-QuickInstaller-build-7416-signed_tcm227-236875.exe

2014-03-07 10:27:19 0B88C2FFEA162EDB43DFDB3619513723 272664 ----a-w- C:\Users\cedric\AppData\Local\Temp\Step2.exe

2014-03-07 10:22:16 3CAA77307A96AE7325DB5EDEAF1BDD02 135968 ----a-w- C:\Users\cedric\Downloads\O4BT.Installer.Kbc.exe

2014-03-06 21:06:04 2FF3426DE6BB81F20849755381B47B52 287488 ----a-w- C:\Program Files\Realtek\Audio\HDA\WavesSvc64.exe

2014-03-06 21:06:03 ACA3B1A550ED553028F5FDBFA0398A22 101120 ----a-w- C:\Program Files\Realtek\Audio\HDA\WavesSvc.exe

2014-03-06 21:06:02 2A21E75EF80242E0646E7567993E977D 562792 ----a-w- C:\Program Files\Realtek\Audio\HDA\vncutil64.exe

2014-03-06 21:05:48 72C58C9DE23EE6B9B15E9D3A33E5B59E 1719512 ----a-w- C:\Program Files\Realtek\Audio\HDA\RtlUpd64.exe

2014-03-06 21:05:44 B291D7BE1D602860F764270CF02079B7 7506136 ----a-w- C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

2014-03-06 21:05:42 57E2E6BF2D8B3EDA2077A3A5502F2333 290520 ----a-w- C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe

2014-03-06 21:05:39 54BF6A01D8E2C804612703F878E2BCDC 978648 ----a-w- C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe

2014-03-06 21:05:28 3749C2382FFEFBB2C5C42AB5D09C10BC 13662936 ----a-w- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

2014-03-06 21:05:27 F31CDC26F3624750C2AE2DEFF1E598DA 1368792 ----a-w- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

2014-03-06 21:05:00 736E5D35E9AA5F847CC84A0DA6BF2B18 3670272 ----a-w- C:\Program Files\Realtek\Audio\HDA\MaxxAudioControl64.exe

2014-03-06 21:04:48 0C57BAD785EEAD029ABF6CBCF43E9A39 51776 ----a-w- C:\Program Files\Realtek\Audio\HDA\FMAPP.exe

2014-03-06 21:04:45 6688B6F74C360CBC366B7AF948D9084D 240576 ----a-w- C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe

2014-03-06 21:04:39 44BB65B1D3827043978FC8E11CA7C0B4 210024 ----a-w- C:\Program Files\Realtek\Audio\HDA\DTSAudioService64.exe

2014-03-06 21:04:32 F9EDCA74B8CB3744159DEF02352F7BD6 58880 ----a-w- C:\Program Files\Realtek\Audio\HDA\CreateRtkToastLnk.exe

2014-03-06 20:56:29 EBBA40A5961A12540E3B024548296BA1 4213072 ----a-w- C:\Program Files (x86)\IObit\IObit Malware Fighter\adsremoval\IE\Adblock.exe

2014-03-06 20:56:21 ECA745AE9DDECCE3B4C55BE0B657B0DB 3730704 ----a-w- C:\Program Files (x86)\IObit\IObit Malware Fighter\adsremovalsetup02251.exe

2014-03-06 20:54:55 13BECDBFC9F055C1D07479F38C4A2123 7267616 ----a-w- C:\ProgramData\IObit\ASCDownloader\Smart Defrag 3.exe

2014-03-06 20:54:45 D9365C61C616D0F8369D9D4B23A16912 13933264 ----a-w- C:\ProgramData\IObit\ASCDownloader\Driver Booster.exe

2014-03-06 20:54:32 EFC5AF1AF298781D459C80A3C75E5873 23688584 ----a-w- C:\ProgramData\IObit\ASCDownloader\IObit Malware Fighter 2.exe

2014-03-06 20:46:03 A9E39A061CF55238D9BBD8113EDA929D 7560992 ----a-w- C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe

2014-03-06 20:46:00 5D4ACF36CF6B3E2453C2E39216BD173B 629568 ----a-w- C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallDisplay.exe

2014-03-06 20:45:59 C098B4EA64D8C957486ACD736031435C 588608 ----a-w- C:\Program Files (x86)\IObit\IObit Uninstaller\Install_PintoStartMenu.exe

2014-03-06 20:45:57 78148DC7BA8C46551929FF7E47FA4133 1114944 ----a-w- C:\Program Files (x86)\IObit\IObit Uninstaller\Uninstaler_SkipUac.exe

2014-03-06 20:45:48 935E2093CEED8198C820B7F60BB63167 2151200 ----a-w- C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe

2014-03-06 20:45:47 1B39F4B8BA2EA0063C054ABD9C8C5F14 2129728 ----a-w- C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallPromote.exe

2014-03-06 20:43:20 D72352C40ABFC97336923A22403C7729 41807400 ----a-w- C:\Users\cedric\Desktop\advanced-systemcare-setup.exe

2014-03-06 20:40:30 7FFE531FC3065DE780E683F4197B5F67 4892480 ----a-w- C:\Users\cedric\Downloads\wzmp_8.exe

=== C: other files ==

2014-03-13 05:36:17 DB9C19AF00AF59299146FAE53285022E 128676 ----a-w- C:\Users\cedric\AppData\Roaming\Mozilla\Firefox\Profiles\m1r89vlm.default-1376402822709\extensions\adblockpopups@jessehakanen.net.xpi

2014-03-10 09:09:09 6C702001B52B46BC97434B4CEFDAF55E 20959 ----a-w- C:\Users\cedric\AppData\Roaming\Mozilla\Firefox\Profiles\m1r89vlm.default-1376402822709\extensions\belgiumeid@eid.belgium.be.xpi

2014-03-10 08:45:50 863EB6802B1C3B7630290871599BE0BD 18636 ----a-w- C:\Program Files (x86)\Java\jre7\lib\deploy\ffjcext.zip

2014-03-10 08:43:12 5596EE15F5694BB23A69DBDA96CE2BB6 921512 ----a-w- C:\Users\cedric\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\N05SQ5HM\JavaSetup7u51.com

2014-03-10 08:25:35 5596EE15F5694BB23A69DBDA96CE2BB6 921512 ----a-w- C:\Users\cedric\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NOST8A3I\JavaSetup7u51.com

2014-03-10 08:20:29 5596EE15F5694BB23A69DBDA96CE2BB6 921512 ----a-w- C:\Users\cedric\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D3U0OI87\JavaSetup7u51.com

2014-03-10 08:11:36 5596EE15F5694BB23A69DBDA96CE2BB6 921512 ----a-w- C:\Users\cedric\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6E96L6H1\JavaSetup7u51.com

2014-03-07 13:42:08 313F68E1A3E6345A4F47A36B07062F34 19456 ----a-w- C:\Windows\System32\drivers\rdpvideominiport.sys

2014-03-07 13:42:05 17C6B51CBCCDED95B3CC14E22791F85E 57856 ----a-w- C:\Windows\System32\drivers\TsUsbFlt.sys

2014-03-07 10:51:45 C1F1650DA495D8957E83608F8BE613A5 61312 ----a-w- C:\drivers\SPR3322K.sys

2014-03-07 10:51:45 2825E0E294686A26506690059E1F437A 29184 ----a-w- C:\drivers\usbccid.sys

2014-03-07 10:51:44 B871A8F6396ECC620766F20E3A120857 57984 ----a-w- C:\drivers\SCR3XX2K.sys

2014-03-07 10:51:44 B2FB0404BFA484BFA5D9A2BE7C0C809C 172544 ----a-w- C:\drivers\cxbu0x64.sys

2014-03-07 10:51:44 258D95A50AC8EF725E114C92FA3A38AA 71680 ----a-w- C:\drivers\S332x64.sys

2014-03-07 10:51:44 1BAACB69DC6C99FA6B249EF27D4642ED 68608 ----a-w- C:\drivers\S3XXx64.sys

2014-03-07 10:51:44 0284C94FC495D8D08DF24C18994C1662 114304 ----a-w- C:\drivers\cxbu0wdm.sys

2014-03-07 10:51:43 888DFE4137F626CEA9CCE3BD47941B64 44672 ----a-w- C:\drivers\a38usbx64.sys

2014-03-07 10:51:43 8378A77DFAF832A7ACBE90F59066FF9A 14080 ----a-w- C:\drivers\acr38svr.sys

2014-03-07 10:51:43 5F92E1E98EC2F4E6FE13D19AA3E24AD7 37632 ----a-w- C:\drivers\a38usb.sys

2014-03-07 10:51:43 0FA03F53C0A635513F34B3D85BA1D361 17674 ----a-w- C:\drivers\a38usb98.sys

2014-03-07 10:31:16 83E7AA6B7A0BD16E5D19A725F50D7901 233336 ----a-w- C:\ProgramData\Trusteer\Rapport\store\exts\RapportMS\baseline\RapportIaso64.sys

2014-03-07 10:31:15 48B7B7BD033DC916748ADA22CE1D72A1 63320 ----a-w- C:\ProgramData\Trusteer\Rapport\store\exts\RapportMS\baseline\RapportIaso.sys

2014-03-07 10:31:11 AB51E1F08C8E789D6C9E8B94D15BE9A9 340432 ----a-w- C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus32_59849.sys

2014-03-07 10:31:11 000D82CC258E2D341605A6F350C4D1E6 606672 ----a-w- C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus64_59849.sys

2014-03-07 10:31:02 9A8F69CEEC2062FCD156F53B867BDCEA 316312 ----a-w- C:\Windows\System32\drivers\RapportKE64.sys

2014-03-06 21:09:50 ECDE3F85CBFE6C6CF89BC6E48BA2E056 2988760 ----a-w- C:\Windows\System32\drivers\rtwlane.sys

2014-03-06 21:09:02 D787F86566F6EA23053D9C5F401E33B7 888536 ----a-w- C:\Windows\System32\drivers\Rt64win7.sys

2014-03-06 21:05:46 C651A99B25AF42423FF80A88A58CD00B 3791320 ----a-w- C:\Windows\System32\drivers\RTKVHD64.sys

2014-03-06 21:00:22 8814F0B9A09C647D3D7BE735450E7B4C 10629408 ----a-w- C:\Windows\System32\drivers\igdkmd64.sys

==== Startup Registry Enabled ======================

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"TOSHIBA Online Product Information"="C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe"

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run]

"TOSHIBA Online Product Information"="C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe"

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"SPReview"="C:\Windows\System32\SPReview\SPReview.exe /sp:1 /errorfwlink:Troubleshoot problems installing Service Pack 1 (SP1) for Windows 7 and Windows Server 2008 R2 /build:7601"

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_USERS\S-1-5-21-1022104969-3133531358-4227153473-1001\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"FlashPlayerUpdate"="C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_12_0_0_70_Plugin.exe -update plugin"

[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"SPReview"="C:\Windows\System32\SPReview\SPReview.exe /sp:1 /errorfwlink:Troubleshoot problems installing Service Pack 1 (SP1) for Windows 7 and Windows Server 2008 R2 /build:7601"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SVPWUTIL"="C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe SVPwUTIL"

"KeNotify"="C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe LPCM"

"DivXUpdate"="C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe /CHECKNOW"

"GrooveMonitor"="C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"

"QuickTime Task"="C:\Program Files (x86)\QuickTime\QTTask.exe -atboottime"

"AVG_UI"="C:\Program Files (x86)\AVG\AVG2014\avgui.exe /TRAYONLY"

"IsaKbcCertUpdate"="C:\Program Files (x86)\Common Files\Isabel\isa_kbc_certupdate.exe"

"Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

"SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

"TWebCamera"=""C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe" autorun"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"FlashPlayerUpdate"="C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_12_0_0_70_Plugin.exe -update plugin"

==== Startup Registry Enabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"RtHDVCpl"="C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s"

"RtHDVBg"="C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE3 "

"TosVolRegulator"="C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe"

"MSC"="C:\Program Files\Microsoft Security Client\msseces.exe -hide -runkey"

"IgfxTray"="C:\Windows\system32\igfxtray.exe"

"HotKeysCmds"="C:\Windows\system32\hkcmd.exe"

"Persistence"="C:\Windows\system32\igfxpers.exe"

"RtHDVBg_Dolby"="C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /FORPCEE3"

"TPwrMain"="%ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE"

"SmoothView"="%ProgramFiles%\Toshiba\SmoothView\SmoothView.exe "

"00TCrdMain"="%ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe "

"SynTPEnh"="%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe "

"SmartFaceVWatcher"="%ProgramFiles%\Toshiba\SmartFaceV\SmartFaceVWatcher.exe "

"TosSENotify"="C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe"

==== Startup Registry Disabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Adobe Reader Speed Launcher]

"command"="\"C:\\Program Files (x86)\\Adobe\\Reader 9.0\\Reader\\Reader_sl.exe\""

"hkey"="HKLM"

"item"="Adobe Reader Speed Launcher"

"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\DivX Download Manager]

"command"="\"C:\\Program Files (x86)\\DivX\\DivX Plus Web Player\\DDmService.exe\" start"

"hkey"="HKLM"

"item"="DivX Download Manager"

"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\EEventManager]

"command"="\"C:\\Program Files (x86)\\Epson Software\\Event Manager\\EEventManager.exe\""

"hkey"="HKLM"

"item"="EEventManager"

"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\HWSetup]

"command"="C:\\Program Files\\TOSHIBA\\Utilities\\HWSetup.exe hwSetUP"

"hkey"="HKLM"

"item"="HWSetup"

"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\IObit Malware Fighter]

"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="IObit Malware Fighter"

"hkey"="HKLM"

"command"="\"C:\\Program Files (x86)\\IObit\\IObit Malware Fighter\\IMF.exe\" /autostart"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\NBAgent]

"command"="\"c:\\Program Files (x86)\\Nero\\Nero BackItUp & Burn\\Nero BackItUp\\NBAgent.exe\" /WinStart"

"hkey"="HKLM"

"item"="NBAgent"

"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Toshiba Registration]

"command"="C:\\Program Files\\Toshiba\\Registration\\ToshibaReminder.exe"

"hkey"="HKLM"

"item"="Toshiba Registration"

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Toshiba TEMPRO]

"command"="C:\\Program Files (x86)\\Toshiba TEMPRO\\TemproTray.exe"

"hkey"="HKLM"

"item"="Toshiba TEMPRO"

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\TosNC]

"command"="C:\\Program Files\\Toshiba\\BulletinBoard\\TosNcCore.exe"

"hkey"="HKLM"

"item"="TosNC"

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\TosReelTimeMonitor]

"command"="C:\\Program Files\\TOSHIBA\\ReelTime\\TosReelTimeMonitor.exe"

"hkey"="HKLM"

"item"="TosReelTimeMonitor"

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

==== Task Scheduler Jobs ======================

C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [13/03/2014 15:54]

C:\Windows\tasks\GoogleUpdateTaskMachineCore1ce0e0f4a8bbd6e.job --a------ C:6C:\ProgramC:FilesC:x86\Google\Update\GoogleUpdate.exe []

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:6C:\ProgramC:FilesC:x86\Google\Update\GoogleUpdate.exe []

==== Other Scheduled Tasks ======================

"C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe]

"C:\Windows\SysNative\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"]

"C:\Windows\SysNative\tasks\ConfigFree Startup Programs" [C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe]

"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]

"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore1ce0e0f4a8bbd6e" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]

"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]

"C:\Windows\SysNative\tasks\Uninstaller_SkipUac_Administrator" [C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe]

"C:\Windows\SysNative\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc]

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]

"belgiumeid@eid.belgium.be"="C:\Program Files\Mozilla Firefox\extensions\belgiumeid@eid.belgium.be" []

==== Firefox Extensions ======================

ProfilePath: C:\Users\cedric\AppData\Roaming\Mozilla\Firefox\Profiles\m1r89vlm.default-1376402822709

- Adblock Plus Pop-up Addon - %ProfilePath%\extensions\adblockpopups@jessehakanen.net.xpi

- Belgium eID - %ProfilePath%\extensions\belgiumeid@eid.belgium.be.xpi

AppDir: C:\Program Files (x86)\Mozilla Firefox

- Belgium eID - %AppDir%\extensions\belgiumeid@eid.belgium.be

- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

- Skype Click to Call - %AppDir%\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi

==== Firefox Plugins ======================

Profilepath: C:\Users\cedric\AppData\Roaming\Mozilla\Firefox\Profiles\m1r89vlm.default-1376402822709

95812430959AE88CDD0301AB3A71913B - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll - Shockwave Flash

D775FA6F1E88B3B99E69E8A0D6C3A819 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll - Shockwave Flash

18CF51689186AEB9D1D149AEB0E92D03 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL - Microsoft Office 2013

==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions

fnjbmmemklcjgepojigaapkoodmkgbae - C:\Program Files (x86)\DivX\DivX Plus Web Player\google_chrome\wpa\wpa.crx[08/12/2010 22:15]

kdidombaedgpfiiedeimiebkmbilgmlc - No path found[]

lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx[03/01/2014 01:32]

nneajnkjbffgblleaoojgaacokifdkhm - C:\Program Files (x86)\DivX\DivX Plus Web Player\google_chrome\html5video\html5video.crx[08/12/2010 22:15]

Advanced SystemCare Surfing Protection - cedric\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbmegnmpleoagolcnjnejdacakedpcgd

DivX HiQ - cedric\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnjbmmemklcjgepojigaapkoodmkgbae

DivX Plus Web Player HTML5 \u003Cvideo\u003E - cedric\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm

==== Set IE to Default ======================

Old Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="http://www.trovigo.com/?gd=&ctid=CT3322168&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SPB04C9218-20B1-420B-A132-C1B6716BC8FF&SSPV="

"Search Page"="http://www.google.com"

"Search Bar"="http://www.google.com/ie"

"Default_Search_URL"="http://www.google.com/ie"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]

@="http://www.google.com/search?q=%s"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]

"SearchAssistant"="http://www.google.com/ie"

"Default_Search_URL"="http://www.google.com/ie"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]

"DefaultScope"="{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}] not found

New Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"

"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"

"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"

"Start Page"="http://www.trovigo.com/?gd=&ctid=CT3322168&octid=EB_ORIGINAL_CTID&SearchSource=55&CUI=&UM=4&UP=SPB04C9218-20B1-420B-A132-C1B6716BC8FF&SSPV="

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]

"(Default)"="http://search.msn.com/results.asp?q=%s"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]

"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"

"SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]

"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"

{2BF1907A-156C-4923-BE7F-17713D97E1F8} Google Url="http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"

{3A93E9D2-EE23-44D2-AF74-8A87AD53413A} Unknown Url="Not_Found"

{4FD52280-AE04-4DFE-86D6-FC593968E122} Unknown Url="Not_Found"

{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-1022104969-3133531358-4227153473-1001\Software\Microsoft\Internet Explorer\SearchScopes\{3A93E9D2-EE23-44D2-AF74-8A87AD53413A} deleted successfully

HKEY_USERS\S-1-5-21-1022104969-3133531358-4227153473-1001\Software\Microsoft\Internet Explorer\SearchScopes\{4FD52280-AE04-4DFE-86D6-FC593968E122} deleted successfully

==== Deleting CLSID Registry Values ======================

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc deleted successfully

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher deleted successfully

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IObit Malware Fighter deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\cedric\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\cedric\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully

C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

C:\Users\cedric\AppData\Local\Mozilla\Firefox\Profiles\m1r89vlm.default-1376402822709\Cache emptied successfully

==== Empty Chrome Cache ======================

C:\Users\cedric\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=1583 folders=175 127583770 bytes)

==== Empty Temp Folders ======================

C:\Users\cedric\AppData\Local\Temp will be emptied at reboot

C:\Users\Default\AppData\Local\Temp emptied successfully

C:\Users\Default User\AppData\Local\Temp emptied successfully

C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot

C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully

C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied

C:\Users\cedric\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\Low" not deleted

==== EOF on do 13/03/2014 at 20:24:02,88 ======================

[kape]

Download AdwCleaner by Xplode naar het bureaublad.

AdwCleaner uitvoeren

• Sluit alle openstaande vensters.
  
• Dubbelklik op AdwCleaner.exe om de tool te starten.
  
• Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  
• Klik vervolgens op de knop Scan.
  
• Wanneer de scan gereed is Klikt u vervolgens op de knop Clean.
  
• Als dit gereed is wordt er gevraagd om de computer opnieuw op te starten, klik hier op OK.
  
• Nadat de computer opnieuw is opgestart wordt het logbestand automatisch geopend.
  
• Plaats dit logbestand in het volgende bericht.
  

[guntheru]

# AdwCleaner v3.022 - Report created 14/03/2014 at 06:26:53

# Updated 13/03/2014 by Xplode

# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)

# Username : cedric - GUNTHERAGNETHA

# Running from : C:\Users\cedric\Desktop\adwcleaner.exe

# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Deleted : C:\Users\cedric\AppData\LocalLow\ShopperReports3

File Deleted : C:\Users\cedric\AppData\Roaming\Mozilla\Firefox\Profiles\m1r89vlm.default-1376402822709\user.js

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKCU\Software\Classes\Applications\lollipop.exe

Key Deleted : HKLM\SOFTWARE\Classes\Applications\ilividsetup.exe

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASAPI32

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASMANCS

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ClickPotatoLiteSA_RASAPI32

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ClickPotatoLiteSA_RASMANCS

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6C97A91E-4524-4019-86AF-2AA2D567BF5C}

Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Key Deleted : HKCU\Software\DefaultTab

Key Deleted : HKCU\Software\lollipop

Key Deleted : HKCU\Software\ParetoLogic

Key Deleted : HKCU\Software\Softonic

Key Deleted : HKCU\Software\systweak

Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}

Key Deleted : HKCU\Software\AppDataLow\Software\ShopperReports3

Key Deleted : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}

Key Deleted : HKLM\Software\Conduit

Key Deleted : HKLM\Software\DefaultTab

Key Deleted : HKLM\Software\SearchProtect

Key Deleted : HKLM\Software\systweak

Key Deleted : HKLM\Software\Uniblue

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16518

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [start Page]

-\\ Mozilla Firefox v27.0.1 (nl)

[ File : C:\Users\cedric\AppData\Roaming\Mozilla\Firefox\Profiles\m1r89vlm.default-1376402822709\prefs.js ]

-\\ Google Chrome v33.0.1750.146

[ File : C:\Users\cedric\AppData\Local\Google\Chrome\User Data\Default\preferences ]

*************************

AdwCleaner[R0].txt - [3957 octets] - [14/03/2014 06:25:02]

AdwCleaner[s0].txt - [3541 octets] - [14/03/2014 06:26:53]

########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [3601 octets] ##########

[kape]

En hoe staat het nu met de snelheid en de ongewenste pop-ups van de laptop ?

[guntheru]

Alles lijkt opgelost denk ik

bedankt voor de hulp!

[kape]

Prima ... dan mag je de gebruikte tools en nog wat restjes opruimen:

Download Delfix by Xplode naar het bureaublad.

Dubbelklik op Delfix.exe om de tool te starten.

Zet nu vinkjes voor de volgende items:

• Remove disinfection tools
  
• Purge System Restore
  
• Reset system settings
  

Klik nu op "Run" en wacht geduldig tot de tool gereed is.

Wanneer de tool gereed is wordt er een logbestand aangemaakt. Dit hoeft u echter niet te plaatsen.

Download CCleaner. (Als je het nog niet hebt)

Installeer het (als je niet wilt dat Google Chrome op je PC als standaard-webbrowser wordt geïnstalleerd, moet je de 2 vinkjes wegdoen !!!) en start CCleaner op.

Klik in de linkse kolom op “Cleaner”.

Klik achtereenvolgens op ‘Analyseren’ en na de analyse op 'Schoonmaken'.

Klik vervolgens in de linkse kolom op “Register” en klik op ‘Scan naar problemen”.

Als er fouten gevonden worden klik je op ”Herstel geselecteerde problemen” en ”OK”.

Dan krijg je de vraag om een back-up te maken. Klik op “JA”.

Kies dan “Herstel alle geselecteerde fouten”.

Soms is 1 analyse niet voldoende. Deze procedure mag je herhalen tot de analyse geen fouten meer aangeeft.

Sluit hierna CCleaner terug af.

Wil je dit uitgebreid in beeld bekijken, klik dan hier voor de handleiding.

Indien dit allemaal probleemloos verlopen is en je binnen dit topic verder geen vragen of problemen meer hebt, mag je dit onderwerp afsluiten door een klik op de knop "Markeer als opgelost", die je links onderaan kan terugvinden … zo blijft het voor iedereen overzichtelijk.

[guntheru]

oke, alles gelukt!

super bedankt, kan ik terug stressvrij op de laptop

[kape]

super bedankt, kan ik terug stressvrij op de laptop

Veel plezier ermee