Foutcode 80070005 en slechte configuratie.

Jean Paul · 10 mei 2014

Za 10/5/2014 10.11

Ik vond in het laatste bericht geen antwoordknop voor reactie te sturen en diende opnieuw in te loggen.

Bij deze dien ik te melden dat ik de stap genomen heb om toch de update naar EXPLORER 11 te doen en blijkbaar is deze gelukt want de configuratie ging voor 100% ok.

Een nieuwe browser werd gegeven en een aangepast scherm : Google kan ik niet als startpagina zetten en ik heb het reeds verschillende keren via EXTRA enz... gewijzigd maar telkens keert die DEFAULT SEARCH terug Zie bijlage.

Ik heb ook het laatste rapport van UP-DATE geschiedenis bijgevoegd. Ter inzage en controle.

kweezie wabbit · 11 mei 2014

Afgaande op wat ik zie op de afbeeldingen, zit je met een besmetting die het aanpassen van de startpagina verhindert.

Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe (hier en hier) kan je lezen hoe je dat doet.

Download Zoek.exe naar het bureaublad (niet de .zip- of .rar-versie)

Wanneer Internet Explorer of een andere browser of virusscanner melding geeft dat dit bestand onveilig zou zijn kun je negeren, dit is namelijk een onterechte waarschuwing.
Dubbelklik op Zoek.exe om de tool te starten.
Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
Kopieer nu onderstaande code en plak die in het grote invulvenster:
Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.

emptyclsid;
chromelook; 
firefoxlook; 
emptyfolderscheck;delete 
startupall; 
filesrcm;

Klik op de knop "Options" en vink nu de onderstaande opties aan.
Do a Deep Scan
Installed Programs
Running Processes
Auto Clean
De optie "Scan All Users" staat standaard aangevinkt.
Klik nu op de knop "Run script".
Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
Mocht er geen logje verschijnen, start zoek.exe dan opnieuw en klik op de knop zoek-results.log, de log verschijnt dan alsnog.
Post het geopende logje in het volgende bericht als bijlage.

Zoek.exe logbestand plaatsen

Voeg het logbestand met de naam "Zoek-results.log" als bijlage toe aan het volgende bericht. (Dit logbestand kunt u tevens terug vinden op de systeemschijf als C:\\Zoek-results.log.)
Hoe u een bijlage kunt toevoegen aan het bericht leest u hier.

Jean Paul · 11 mei 2014

Afgaande op wat ik zie op de afbeeldingen, zit je met een besmetting die het aanpassen van de startpagina verhindert.
Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe (hier en hier) kan je lezen hoe je dat doet.

Download Zoek.exe naar het bureaublad (niet de .zip- of .rar-versie)

Wanneer Internet Explorer of een andere browser of virusscanner melding geeft dat dit bestand onveilig zou zijn kun je negeren, dit is namelijk een onterechte waarschuwing.

Dubbelklik op Zoek.exe om de tool te starten.

Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.

Kopieer nu onderstaande code en plak die in het grote invulvenster:

Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.
emptyclsid;
chromelook; 
firefoxlook; 
emptyfolderscheck;delete 
startupall; 
filesrcm;
Klik op de knop "Options" en vink nu de onderstaande opties aan.

Do a Deep Scan

Installed Programs

Running Processes

Auto Clean

De optie "Scan All Users" staat standaard aangevinkt.

Klik nu op de knop "Run script".

Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).

Mocht er geen logje verschijnen, start zoek.exe dan opnieuw en klik op de knop zoek-results.log, de log verschijnt dan alsnog.

Post het geopende logje in het volgende bericht als bijlage.

Zoek.exe logbestand plaatsen

Voeg het logbestand met de naam "Zoek-results.log" als bijlage toe aan het volgende bericht. (Dit logbestand kunt u tevens terug vinden op de systeemschijf als C:\\Zoek-results.log.)

Hoe u een bijlage kunt toevoegen aan het bericht leest u hier.

Zo 11/5/2014 11.27

Dag, ik moest andermaal opnieuw inloggen want er was terug geen knop om reactie te versturen !

In bijlage het rapport van de zopas gedane ZOEK.EXE

Zoek.exe v5.0.0.0 Updated 14-April-2014

Tool run by Pc on zo 11/05/2014 at 10:59:37,50.

Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64

Running in: Normal Mode Internet Access Detected

Launched: C:\Users\Pc\Desktop\zoek.exe [scan all users] [script inserted] [Checkboxes used]

==== Running Processes ======================

C:\Windows\system32\csrss.exe

C:\Windows\system32\wininit.exe

C:\Windows\system32\csrss.exe

C:\Windows\system32\services.exe

C:\Windows\system32\lsass.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\winlogon.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k GPSvcGroup

C:\Windows\system32\Hpservice.exe

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\system32\WLANExt.exe

C:\Windows\system32\conhost.exe

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

C:\Windows\system32\taskhost.exe

C:\Program Files\Intel\WiFi\bin\EvtEng.exe

C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\System32\igfxtray.exe

C:\Windows\System32\igfxpers.exe

C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\AppIntegrator64.exe

C:\Program Files (x86)\Gadwin Systems\PrintScreen\PrintScreen.exe

C:\Windows\splwow64.exe

C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zSrchMn.exe

C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbrmon.exe

C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbrmon64.exe

C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.0.43\NST.exe

C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\NIS.exe

C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe

C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\NIS.exe

C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.0.43\NST.exe

C:\Windows\system32\svchost.exe -k imgsvc

C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe

C:\Windows\system32\valWBFPolicyService.exe

C:\PROGRA~2\VIDEOD~2\bar\1.bin\4zbarsvc.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

C:\Windows\system32\wbem\unsecapp.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE

C:\Windows\system32\SearchIndexer.exe

C:\Windows\system32\svchost.exe -k bthsvcs

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Windows\System32\WUDFHost.exe

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Program Files\Windows Media Player\wmpnetwk.exe

C:\Windows\System32\svchost.exe -k LocalServicePeerNet

C:\Windows\system32\DllHost.exe

C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe

C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe

C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

C:\Users\Pc\Desktop\zoek.exe

C:\Windows\system32\conhost.exe

C:\Windows\system32\wbem\wmiprvse.exe

==== System Restore Info ======================

11/05/2014 11:01:54 Zoek.exe System Restore Point Created Succesfully.

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} deleted successfully

HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Microsoft\Internet Explorer\SearchScopes\{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8} deleted successfully

HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{93a3111f-4f74-4ed8-895e-d9708497629e} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\{93a3111f-4f74-4ed8-895e-d9708497629e} deleted successfully

==== Installed Programs ======================

Adobe AIR

Adobe Flash Player 13 ActiveX

Adobe Reader XI (11.0.06) - Nederlands

Adobe Shockwave Player 12.0

Broadcom 802.11 Wireless LAN Adapter

Compatibiliteitspakket voor het 2007 Microsoft Office system

CutePDF Writer 3.0

D3DX10

FrostWire 5.7.2

Gadwin PrintScreen

Google Chrome

Google Toolbar for Internet Explorer

Google Update Helper

HP Support Solutions Framework

Intel PROSet Wireless

Intel® Processor Graphics

Intel® PROSet/Wireless for Bluetooth® + High Speed

Intel© PROSet/Wireless WiFi Software

Java 7 Update 51

Java 7 Update 51 (64-bit)

Java Auto Updater

Junk Mail filter update

Level Quality Watcher

Microsoft-invoegtoepassing Opslaan als PDF voor 2007 Microsoft Office-programma's

Microsoft .NET Framework 4.5.1

Microsoft .NET Framework 4.5.1 (Nederlands)

Microsoft .NET Framework 4.5.1 (NLD)

Microsoft Application Error Reporting

Microsoft Office Click-to-Run 2010

Microsoft Office PowerPoint Viewer 2007 (Dutch)

Microsoft Office Starter 2010 - English

Microsoft PowerPoint Viewer

Microsoft Silverlight

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

MSVCRT

MSVCRT_amd64

MSVCRT110

MSVCRT110_amd64

Norton Identity Safe

Norton Internet Security

Photo Common

PhotoPad Image Editor

Pixillion Image Converter

Realtek Ethernet Controller Driver

Renesas Electronics USB 3.0 Host Controller Driver

Security Update for Microsoft .NET Framework 4.5.1 (KB2898869)

Security Update for Microsoft .NET Framework 4.5.1 (KB2901126)

Settings Manager

SkypeT 6.14

Synaptics TouchPad Driver

TeamViewer 9

VideoDownloadConverter Internet Explorer Toolbar

VLC media player 2.1.3

Windows Live Communications Platform

Windows Live Essentials

Windows Live ID Sign-in Assistant

Windows Live Installer

Windows Live Mail

Windows Live MIME IFilter

Windows Live Photo Common

Windows Live PIMT Platform

Windows Live SOXE

Windows Live SOXE Definitions

Windows Live UX Platform

Windows Live UX Platform Language Pack

Windows Live Writer

Windows Live Writer Resources

WinRAR 5.01 (64-bit)

==== Deleting Services ======================

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\videodownloadconverter_4zservice deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\videodownloadconverter_4zservice deleted successfully

==== Deleting Files \ Folders ======================

C:\Users\Pc\AppData\Local\VideoDownloadConverter_4z deleted

C:\Users\Pc\AppData\Local\IAC deleted

C:\Users\Pc\AppData\LocalLow\VideoDownloadConverter_4z deleted

C:\Users\Pc\AppData\LocalLow\DataMngr deleted

"C:\PROGRA~2\VideoDownloadConverter_4z\bar\1.bin\4zauxstb64.dll" deleted

"C:\PROGRA~2\VideoDownloadConverter_4z\bar\1.bin\4zbrmon.exe" deleted

"C:\PROGRA~2\VideoDownloadConverter_4z\bar\1.bin\4zbrmon64.exe" deleted

"C:\PROGRA~2\VideoDownloadConverter_4z\bar\1.bin\4zbrstub.dll" deleted

"C:\PROGRA~2\VideoDownloadConverter_4z\bar\1.bin\4zbrstub64.dll" not deleted

"C:\PROGRA~2\VideoDownloadConverter_4z\bar\1.bin\4zdlghk64.dll" deleted

"C:\PROGRA~2\VideoDownloadConverter_4z\bar\1.bin\4zhkstub.dll" deleted

"C:\PROGRA~2\VideoDownloadConverter_4z\bar\1.bin\4zreghk.dll" deleted

"C:\PROGRA~2\VideoDownloadConverter_4z\bar\1.bin\4zSrchMn.exe" deleted

"C:\PROGRA~2\VideoDownloadConverter_4z\bar\1.bin\4zsrchmr.dll" deleted

"C:\PROGRA~2\VideoDownloadConverter_4z\bar\1.bin\AppIntegrator64.exe" deleted

"C:\PROGRA~2\VideoDownloadConverter_4z\bar\1.bin\AppIntegratorStub64.dll" deleted

"C:\PROGRA~2\VideoDownloadConverter_4z\bar\1.bin\ASSISTMONITOR64.DLL" deleted

"C:\PROGRA~2\VideoDownloadConverter_4z\bar\1.bin\Hpg64.dll" deleted

"C:\PROGRA~2\VideoDownloadConverter_4z\bar\1.bin\T8RES.DLL" deleted

"C:\PROGRA~2\VideoDownloadConverter_4z\bar\1.bin\assists\ie_default_search_provider\ARBITER64.DLL" deleted

"C:\PROGRA~2\VideoDownloadConverter_4z" not deleted

"C:\PROGRA~2\VideoDownloadConverter_4z\bar" not deleted

"C:\PROGRA~2\VideoDownloadConverter_4z\bar\1.bin" not deleted

"C:\PROGRA~2\VideoDownloadConverter_4z\bar\1.bin\assists" not deleted

"C:\PROGRA~2\VideoDownloadConverter_4z\bar\1.bin\assists\ie_default_search_provider" not deleted

==== Files Recently Created / Modified ======================

====== C:\Windows ====

====== C:\Users\Pc\AppData\Local\Temp ====

2014-05-09 08:23:09 DD3758E8F7F9CAB9CF146DF84EAA8D0C 189320 ----atw- C:\Users\Pc\AppData\Local\Temp\{D8EEBEAB-0BB5-461D-969D-027A7017EC8F}\psuser_64.dll

2014-05-09 08:23:09 A472F477ADC0C407E6661C135AAB892C 189320 ----atw- C:\Users\Pc\AppData\Local\Temp\{D8EEBEAB-0BB5-461D-969D-027A7017EC8F}\psmachine_64.dll

2014-05-09 08:23:09 785105A23650755A8F7A72405EB0D923 613768 ----atw- C:\Users\Pc\AppData\Local\Temp\{D8EEBEAB-0BB5-461D-969D-027A7017EC8F}\npGoogleUpdate3.dll

2014-05-09 08:23:09 59F611C4EB58B15D0C5A029781157388 166792 ----atw- C:\Users\Pc\AppData\Local\Temp\{D8EEBEAB-0BB5-461D-969D-027A7017EC8F}\psuser.dll

2014-05-09 08:23:09 34B85148820B68E3814FCC8B9A7A7242 166792 ----atw- C:\Users\Pc\AppData\Local\Temp\{D8EEBEAB-0BB5-461D-969D-027A7017EC8F}\psmachine.dll

2014-05-09 08:23:08 DA24EDFC1D6C1B67C010D34652B7052F 1705352 ----atw- C:\Users\Pc\AppData\Local\Temp\{D8EEBEAB-0BB5-461D-969D-027A7017EC8F}\goopdate.dll

2014-05-09 08:23:08 D893431503D5112DC3B799DF963D2AC8 114568 ----atw- C:\Users\Pc\AppData\Local\Temp\{D8EEBEAB-0BB5-461D-969D-027A7017EC8F}\GoogleUpdateComRegisterShell64.exe

2014-05-09 08:23:08 D5A444B63637EC0932172C6719A10252 263048 ----atw- C:\Users\Pc\AppData\Local\Temp\{D8EEBEAB-0BB5-461D-969D-027A7017EC8F}\GoogleCrashHandler.exe

2014-05-09 08:23:08 BE472797288F53AA9F56974B1A1FC18F 918672 ----a-w- C:\Users\Pc\AppData\Local\Temp\{D8EEBEAB-0BB5-461D-969D-027A7017EC8F}\GoogleUpdateSetup.exe

2014-05-09 08:23:08 720546B84ED5229E1584C8F3533A2F12 328072 ----atw- C:\Users\Pc\AppData\Local\Temp\{D8EEBEAB-0BB5-461D-969D-027A7017EC8F}\GoogleCrashHandler64.exe

2014-05-09 08:23:08 6FC454773ABF8DE9A33B35E03525140D 51080 ----atw- C:\Users\Pc\AppData\Local\Temp\{D8EEBEAB-0BB5-461D-969D-027A7017EC8F}\GoogleUpdateOnDemand.exe

2014-05-09 08:23:08 506708142BC63DABA64F2D3AD1DCD5BF 116648 ----atw- C:\Users\Pc\AppData\Local\Temp\{D8EEBEAB-0BB5-461D-969D-027A7017EC8F}\GoogleUpdate.exe

2014-05-09 08:23:08 49B70FBEEC01A69CA9AC115C109E9CDD 51080 ----atw- C:\Users\Pc\AppData\Local\Temp\{D8EEBEAB-0BB5-461D-969D-027A7017EC8F}\GoogleUpdateBroker.exe

2014-05-09 08:23:08 2DCAA5DECC48EC3361EE648A5688CBBF 26112 ----atw- C:\Users\Pc\AppData\Local\Temp\{D8EEBEAB-0BB5-461D-969D-027A7017EC8F}\GoogleUpdateHelper.msi

2014-05-09 08:20:51 9FAD775B2F49AF09006AAEA19360AE00 744504 ------w- C:\Users\Pc\AppData\Local\Temp\Pixillion-6380-1\ppadsetup.exe

====== Java Cache =====

====== C:\Windows\SysWOW64 =====

2014-05-10 13:32:00 5869FBC754578A59C8C8635B99DB79DE 17384448 ----a-w- C:\Windows\SysWOW64\mshtml.dll

2014-05-10 13:32:00 2518D1922371892ADEF1F07147DBD72A 2724864 ----a-w- C:\Windows\SysWOW64\mshtml.tlb

2014-05-09 07:50:27 E9504E484076585F6DA3C59F0E20E122 417792 ----a-w- C:\Windows\SysWOW64\WMPhoto.dll

2014-05-09 07:50:26 D96106CF60505734B14F6AE80AAA4B07 1987584 ----a-w- C:\Windows\SysWOW64\d3d10warp.dll

2014-05-09 07:50:25 14800BD31701A5047AC3145BB1E698AE 3419136 ----a-w- C:\Windows\SysWOW64\d2d1.dll

2014-05-09 07:49:40 A054EA8FBE16D4D34F06D81A4F0088E2 1230336 ----a-w- C:\Windows\SysWOW64\WindowsCodecs.dll

2014-05-08 10:59:20 AD27563BC16AB1EAACAE3033E99C2F78 194048 ----a-w- C:\Windows\SysWOW64\elshyph.dll

2014-05-08 10:59:13 F862CD08F1AD4EE39BD506853F3C6103 16284 ----a-w- C:\Windows\SysWOW64\ieuinit.inf

2014-05-08 10:59:13 F7B6E341F4B1947BEC0E14EEBE3C627E 111616 ----a-w- C:\Windows\SysWOW64\IEAdvpack.dll

2014-05-08 10:59:13 EDACA6C44D9CE200F899B7DB0F201DFF 164864 ----a-w- C:\Windows\SysWOW64\msrating.dll

2014-05-08 10:59:13 EC7038154490E50ACD405A022F51B204 83456 ----a-w- C:\Windows\SysWOW64\inseng.dll

2014-05-08 10:59:13 EBC35FE64056910A84485BEEB6DCCAC6 524288 ----a-w- C:\Windows\SysWOW64\msfeeds.dll

2014-05-08 10:59:13 E4E829EE073E046B0EB19B5FECB19B8C 1789440 ----a-w- C:\Windows\SysWOW64\wininet.dll

2014-05-08 10:59:13 D9F12F54E3B5A092F1D5F191F5286E53 337408 ----a-w- C:\Windows\SysWOW64\html.iec

2014-05-08 10:59:13 CFCE4EFF1D6D909EE2EA3AFCB8F1E677 233472 ----a-w- C:\Windows\SysWOW64\url.dll

2014-05-08 10:59:13 CE6921D33682C6C3DB8A45853CC69402 455168 ----a-w- C:\Windows\SysWOW64\vbscript.dll

2014-05-08 10:59:13 C9CA9803299EB6AFA34CB520BAAB083D 32256 ----a-w- C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2014-05-08 10:59:13 C4A383FD50FBD7E274DD41CF571DF898 1967104 ----a-w- C:\Windows\SysWOW64\inetcpl.cpl

2014-05-08 10:59:13 C1A6E565B2782C09BC40AD749B46D9ED 71680 ----a-w- C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2014-05-08 10:59:13 C17139EAF939964142C7A1AEEE02DC81 616104 ----a-w- C:\Windows\SysWOW64\ieapfltr.dat

2014-05-08 10:59:13 BB185D4A9362AA17CBCEC0768CDBF249 704512 ----a-w- C:\Windows\SysWOW64\ieapfltr.dll

2014-05-08 10:59:13 AE6A2C5ECD3E96556E22F12816842F60 48640 ----a-w- C:\Windows\SysWOW64\mshtmler.dll

2014-05-08 10:59:13 ABDFC692D9FE43E2BA8FE6CB5A8CB95A 13312 ----a-w- C:\Windows\SysWOW64\mshta.exe

2014-05-08 10:59:13 AB3B2CA52AFB695AFCDD2620A21E5B21 24576 ----a-w- C:\Windows\SysWOW64\licmgr10.dll

2014-05-08 10:59:13 AA12D7A960DB78DD9690AB5B5DAE6586 440832 ----a-w- C:\Windows\SysWOW64\ieui.dll

2014-05-08 10:59:13 9E170B0AF156B478BD2B1FD6A2250C9E 62464 ----a-w- C:\Windows\SysWOW64\tdc.ocx

2014-05-08 10:59:13 9B8701A380CEE1B05D651B4ED4048C8F 645120 ----a-w- C:\Windows\SysWOW64\jsIntl.dll

2014-05-08 10:59:13 9A33FDDD687A836A1FD478B43C5A95FD 151552 ----a-w- C:\Windows\SysWOW64\iexpress.exe

2014-05-08 10:59:13 8C46360D6EF9D4C563FE834C4F287DA3 4254720 ----a-w- C:\Windows\SysWOW64\jscript9.dll

2014-05-08 10:59:13 887055A3C8DD6C87D200D11EAFDBD45B 74240 ----a-w- C:\Windows\SysWOW64\SetIEInstalledDate.exe

2014-05-08 10:59:13 83F49FD1BC0A999B006D564C540C7258 86016 ----a-w- C:\Windows\SysWOW64\iesysprep.dll

2014-05-08 10:59:13 82287FCFFA4A2D60FD744E3FEB3192C5 61952 ----a-w- C:\Windows\SysWOW64\iesetup.dll

2014-05-08 10:59:13 7E9FE7DB43BC204E44F159F843E35C15 367616 ----a-w- C:\Windows\SysWOW64\dxtmsft.dll

2014-05-08 10:59:13 779E142FE2159935E78C0FA2E190FF1E 610304 ----a-w- C:\Windows\SysWOW64\jscript.dll

2014-05-08 10:59:13 76F58DB8F85C125E0D6B3AA42F3BF1D0 1143808 ----a-w- C:\Windows\SysWOW64\urlmon.dll

2014-05-08 10:59:13 6EB0B7301E00F717BD68A742D1391FAF 36352 ----a-w- C:\Windows\SysWOW64\imgutil.dll

2014-05-08 10:59:13 6A92CEC8532056791C6832B2725D170D 139264 ----a-w- C:\Windows\SysWOW64\wextract.exe

2014-05-08 10:59:13 6922D7ED84AE102504174922D5D42F49 238288 ----a-w- C:\Windows\SysWOW64\iedkcs32.dll

2014-05-08 10:59:13 6557B48D53D653CFCCE3CB1CFA53A8E1 51200 ----a-w- C:\Windows\SysWOW64\ieetwproxystub.dll

2014-05-08 10:59:13 64831CAD496A073398853A34A5813675 69632 ----a-w- C:\Windows\SysWOW64\mshtmled.dll

2014-05-08 10:59:13 5EC13202430A3EB68DFF44CF1FEEA2BE 61952 ----a-w- C:\Windows\SysWOW64\MshtmlDac.dll

2014-05-08 10:59:13 55969AADF0210A614700F89B48976F68 43008 ----a-w- C:\Windows\SysWOW64\msfeedsbs.dll

2014-05-08 10:59:13 53FC62C51CB18C9100A7DFAF2D2A6C47 12800 ----a-w- C:\Windows\SysWOW64\msfeedssync.exe

2014-05-08 10:59:13 4F032F1FDEFEA5EC8EEA3562643B5EE8 69120 ----a-w- C:\Windows\SysWOW64\icardie.dll

2014-05-08 10:59:13 4BCC7EB5F20840DA67943BD86AE95735 56832 ----a-w- C:\Windows\SysWOW64\pngfilt.dll

2014-05-08 10:59:13 34FC79C948EE2C5FD0CD699E7D7F91B7 244224 ----a-w- C:\Windows\SysWOW64\dxtrans.dll

2014-05-08 10:59:13 31385A6CAA31BE9D07B0B32E5AA99ABB 43008 ----a-w- C:\Windows\SysWOW64\jsproxy.dll

2014-05-08 10:59:13 2AFBB91BBD2378933B26E6D68C140D1B 11745792 ----a-w- C:\Windows\SysWOW64\ieframe.dll

2014-05-08 10:59:13 2AF48780D879AFC43733159CB29CD8BD 1051136 ----a-w- C:\Windows\SysWOW64\mshtmlmedia.dll

2014-05-08 10:59:13 298FDE634538B62CEEEC266D8773B21A 182272 ----a-w- C:\Windows\SysWOW64\msls31.dll

2014-05-08 10:59:13 21BF6759685FD193715B483F2B3F21B1 112128 ----a-w- C:\Windows\SysWOW64\ieUnatt.exe

2014-05-08 10:59:13 1AFBAA54BDF637F69B8E02A5578286B0 116736 ----a-w- C:\Windows\SysWOW64\iepeers.dll

2014-05-08 10:59:13 1200D9C7DB0ADC1B8143A0A9921BF7DA 127488 ----a-w- C:\Windows\SysWOW64\occache.dll

2014-05-08 10:59:13 0FDC1A576A3F40420882C0F7C4A66EAD 32768 ----a-w- C:\Windows\SysWOW64\iernonce.dll

2014-05-08 10:59:13 0F4A295516781897FFB09B4CCF2E8798 592896 ----a-w- C:\Windows\SysWOW64\jscript9diag.dll

2014-05-08 10:59:13 05BD47136DE62FAFE9F95B40E4100144 2178048 ----a-w- C:\Windows\SysWOW64\iertutil.dll

2014-05-08 10:59:13 03B3541AE6986602CF9CB5B3AD169C33 208384 ----a-w- C:\Windows\SysWOW64\webcheck.dll

2014-05-08 10:57:53 C7A730AFB80B11F93EFC81B1D6F920D7 364544 ----a-w- C:\Windows\SysWOW64\XpsGdiConverter.dll

2014-05-08 10:57:53 6A7B5A3EFCCDB53DA41CF6838056990F 1158144 ----a-w- C:\Windows\SysWOW64\XpsPrint.dll

2014-05-08 10:57:53 6A13B4F3B3F575F1E24B877B9359AABA 10752 ---ha-w- C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll

2014-05-08 10:57:53 6951562DC4625EEFC6EACD52AD165866 9728 ---ha-w- C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll

2014-05-08 10:57:53 60F4AEFA103D421EA4A40E31409B4756 3072 ---ha-w- C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll

2014-05-08 10:57:53 600A65F922CCDCBB2D11467914241556 2284544 ----a-w- C:\Windows\SysWOW64\msmpeg2vdec.dll

2014-05-08 10:57:53 589CBC4989F750E1DA35625AB481CF43 4096 ---ha-w- C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll

2014-05-08 10:57:53 49ACA548B2423F1C67898E6AC719A9A6 3584 ---ha-w- C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll

2014-05-08 10:57:53 3BE0D923AA45A4DBE091C2D84F0B4FE7 3072 ---ha-w- C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll

2014-05-08 10:57:53 2E33DFD10F28F86C3FC40EE123CC3904 2560 ---ha-w- C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll

2014-05-08 10:57:53 1C60E09CA1C3A045BC4D367F67C915B7 5632 ---ha-w- C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll

2014-05-08 10:57:53 007863E45F25AA47A4C30D0930BBFD85 5632 ---ha-w- C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll

2014-05-08 10:57:52 FB3F036EF6A467F7AF46C821FF5D198D 220160 ----a-w- C:\Windows\SysWOW64\d3d10core.dll

2014-05-08 10:57:52 D4F264FE23F8953D840904418220C15E 293376 ----a-w- C:\Windows\SysWOW64\dxgi.dll

2014-05-08 10:57:52 D4212AB475A3B25EC4DF574536C3EDC5 249856 ----a-w- C:\Windows\SysWOW64\d3d10_1core.dll

2014-05-08 10:57:52 8B285BDAB7735FDFB18E6F7122923B77 187392 ----a-w- C:\Windows\SysWOW64\UIAnimation.dll

2014-05-08 10:57:52 8504944851DF6175CC489A8F3328459E 1080832 ----a-w- C:\Windows\SysWOW64\d3d10.dll

2014-05-08 10:57:52 62A6EB5771580CAE445804389F3F7432 207872 ----a-w- C:\Windows\SysWOW64\WindowsCodecsExt.dll

2014-05-08 10:57:52 4FF3EC04CD47DD62181894B71B004E40 604160 ----a-w- C:\Windows\SysWOW64\d3d10level9.dll

2014-05-08 10:57:52 4277F5164DE9B7C665BB928B9145BEE0 1247744 ----a-w- C:\Windows\SysWOW64\DWrite.dll

2014-05-08 10:57:52 3C1936A12C62254F914A01BBC6A8DC69 161792 ----a-w- C:\Windows\SysWOW64\d3d10_1.dll

====== C:\Windows\SysWOW64\drivers =====

====== C:\Windows\Sysnative =====

2014-05-10 13:32:00 DE5DE05946D6FC2DC494C55BC7BC4C6E 2724864 ----a-w- C:\Windows\Sysnative\mshtml.tlb

2014-05-10 13:32:00 A98DA2EC1E56CF52C682D072F77D9874 23547904 ----a-w- C:\Windows\Sysnative\mshtml.dll

2014-05-09 16:32:08 710FD0E362A1A5C087DB90C1BAC46411 940032 ----a-w- C:\Windows\Sysnative\MsSpellCheckingFacility.exe

2014-05-09 07:50:26 E8710B5DDA963E6BA198DF5FB209E72A 2565120 ----a-w- C:\Windows\Sysnative\d3d10warp.dll

2014-05-09 07:50:26 C676E5EA388AF7C4C031F56F9B42E362 3928064 ----a-w- C:\Windows\Sysnative\d2d1.dll

2014-05-09 07:50:26 4EDF8812713291DBBFDA67CE6215F236 465920 ----a-w- C:\Windows\Sysnative\WMPhoto.dll

2014-05-09 07:49:40 AFCA5C1ECEAF948FC815178BC077680E 1424384 ----a-w- C:\Windows\Sysnative\WindowsCodecs.dll

2014-05-08 10:59:13 FFF555C177D9F2B79B5C3146BED09FB1 548352 ----a-w- C:\Windows\Sysnative\vbscript.dll

2014-05-08 10:59:13 FD61D51199F3FC9EB0023FBF405EAAD0 147968 ----a-w- C:\Windows\Sysnative\occache.dll

2014-05-08 10:59:13 F862CD08F1AD4EE39BD506853F3C6103 16284 ----a-w- C:\Windows\Sysnative\ieuinit.inf

2014-05-08 10:59:13 F220BA78AB542C70211D73AE4729B2CD 2260480 ----a-w- C:\Windows\Sysnative\wininet.dll

2014-05-08 10:59:13 F00AE7B953ABEF1B53FBBA187DFC8238 243200 ----a-w- C:\Windows\Sysnative\webcheck.dll

2014-05-08 10:59:13 EE10AB99A480875E012CA339EC48F02B 1228800 ----a-w- C:\Windows\Sysnative\mshtmlmedia.dll

2014-05-08 10:59:13 EBAD8A4D048ED257E4A45F6356541F86 846336 ----a-w- C:\Windows\Sysnative\ieapfltr.dll

2014-05-08 10:59:13 E7161E2C66FF9B1E87C30FC9D2497ABB 195584 ----a-w- C:\Windows\Sysnative\msrating.dll

2014-05-08 10:59:13 E70D4270C43CE6C46841B684315B9EFF 62464 ----a-w- C:\Windows\Sysnative\pngfilt.dll

2014-05-08 10:59:13 E4A6577D74B2439974C8018AB5F1BFEA 13312 ----a-w- C:\Windows\Sysnative\msfeedssync.exe

2014-05-08 10:59:13 E0D95345D1EBB54F28E958782B9C0CE0 453120 ----a-w- C:\Windows\Sysnative\dxtmsft.dll

2014-05-08 10:59:13 D6067F7EE060C5D6D79008AD591B4E3B 33792 ----a-w- C:\Windows\Sysnative\iernonce.dll

2014-05-08 10:59:13 D31AE751B6DACAFD0D7CC99EAE9606C2 131072 ----a-w- C:\Windows\Sysnative\IEAdvpack.dll

2014-05-08 10:59:13 CFBA793F678EB3855052ECF99357A9A1 296960 ----a-w- C:\Windows\Sysnative\dxtrans.dll

2014-05-08 10:59:13 CE8831D2DCB5803A4CBC8EDCCBBC2A05 77312 ----a-w- C:\Windows\Sysnative\tdc.ocx

2014-05-08 10:59:13 CB57E934280D346AE0A9B053DAA284C5 51200 ----a-w- C:\Windows\Sysnative\jsproxy.dll

2014-05-08 10:59:13 C92173481A58935BE15172079CF122B8 235520 ----a-w- C:\Windows\Sysnative\url.dll

2014-05-08 10:59:13 C17139EAF939964142C7A1AEEE02DC81 616104 ----a-w- C:\Windows\Sysnative\ieapfltr.dat

2014-05-08 10:59:13 BF25489459C7A762DD7B3186C7E3984D 5784064 ----a-w- C:\Windows\Sysnative\jscript9.dll

2014-05-08 10:59:13 BB6DEAFAC5F0AAEC37FEAF3F3AA48347 774144 ----a-w- C:\Windows\Sysnative\jscript.dll

2014-05-08 10:59:13 ADA5C3D49A12CED9F07913DC00E547A8 48128 ----a-w- C:\Windows\Sysnative\imgutil.dll

2014-05-08 10:59:13 A3F9A9E46BDDBB8B20B7CF3EEDB990F2 66048 ----a-w- C:\Windows\Sysnative\iesetup.dll

2014-05-08 10:59:13 A3A132CBE48AF0324466469F2CAAE8A2 111616 ----a-w- C:\Windows\Sysnative\ieetwcollector.exe

2014-05-08 10:59:13 A14BB2F5F6457738AAA11367F5172A05 13551104 ----a-w- C:\Windows\Sysnative\ieframe.dll

2014-05-08 10:59:13 9870EC900829595D191BB03C6C48B479 83968 ----a-w- C:\Windows\Sysnative\MshtmlDac.dll

2014-05-08 10:59:13 9675B272086CF5D22B83B541FAA8D4EA 30208 ----a-w- C:\Windows\Sysnative\licmgr10.dll

2014-05-08 10:59:13 964C89BC8A52A260D68C90FDDEB862E2 38400 ----a-w- C:\Windows\Sysnative\JavaScriptCollectionAgent.dll

2014-05-08 10:59:13 95828D670CFD3B16EE188168E083C3C5 13824 ----a-w- C:\Windows\Sysnative\mshta.exe

2014-05-08 10:59:13 915D8A9E112C97C90C654F792B6B28B9 48640 ----a-w- C:\Windows\Sysnative\ieetwproxystub.dll

2014-05-08 10:59:13 8F7FBD0177F79727CF945ABDA657A0AC 235008 ----a-w- C:\Windows\Sysnative\elshyph.dll

2014-05-08 10:59:13 77FBE2E014EFB93FD037FA33AB8C7D6E 263376 ----a-w- C:\Windows\Sysnative\iedkcs32.dll

2014-05-08 10:59:13 75AD355828187145A60E3DC7BAF7B0F3 628736 ----a-w- C:\Windows\Sysnative\msfeeds.dll

2014-05-08 10:59:13 7446786E7092ABE122D372F95E6ED74B 574976 ----a-w- C:\Windows\Sysnative\ieui.dll

2014-05-08 10:59:13 72116CC377FF4281B0132C397026D911 4096 ----a-w- C:\Windows\Sysnative\ieetwcollectorres.dll

2014-05-08 10:59:13 6F1AF8E1206E92256459E3012C20472A 942592 ----a-w- C:\Windows\Sysnative\jsIntl.dll

2014-05-08 10:59:13 68899208A26E4522D25DBA87FF2E98D1 84992 ----a-w- C:\Windows\Sysnative\mshtmled.dll

2014-05-08 10:59:13 5BBDBE5EBB49EA7C76A2EE7490A45D68 101376 ----a-w- C:\Windows\Sysnative\inseng.dll

2014-05-08 10:59:13 5141B67F14E2B6CBB6ADF851ABE364A5 90112 ----a-w- C:\Windows\Sysnative\SetIEInstalledDate.exe

2014-05-08 10:59:13 46FD16F9B1924A2EA8CD5C6716CC654F 167424 ----a-w- C:\Windows\Sysnative\iexpress.exe

2014-05-08 10:59:13 4399857346DD183683332921500046B1 86016 ----a-w- C:\Windows\Sysnative\RegisterIEPKEYs.exe

2014-05-08 10:59:13 3F547245C78F4847B73EDDFD4A2F7E12 752640 ----a-w- C:\Windows\Sysnative\jscript9diag.dll

2014-05-08 10:59:13 3F498856C68725717195C16568FE19D0 586240 ----a-w- C:\Windows\Sysnative\ie4uinit.exe

2014-05-08 10:59:13 3A4FD19F13F8809BA08E9F76C0E38832 413696 ----a-w- C:\Windows\Sysnative\html.iec

2014-05-08 10:59:13 32417AE8280276968E5C551ED85D3525 1400832 ----a-w- C:\Windows\Sysnative\urlmon.dll

2014-05-08 10:59:13 2EBD0C5B090125AECF017C57344C45AB 247808 ----a-w- C:\Windows\Sysnative\msls31.dll

2014-05-08 10:59:13 2405D24AA28CCC4CC7E0CC0AE008746F 48640 ----a-w- C:\Windows\Sysnative\mshtmler.dll

2014-05-08 10:59:13 1FCBE949A67939ADEAE7279E423AA684 135680 ----a-w- C:\Windows\Sysnative\iepeers.dll

2014-05-08 10:59:13 1F8534A19A66275C863DE17645CB2A13 2767360 ----a-w- C:\Windows\Sysnative\iertutil.dll

2014-05-08 10:59:13 1EA6500C25A80E8BDB65099C509AF993 143872 ----a-w- C:\Windows\Sysnative\wextract.exe

2014-05-08 10:59:13 1BF215FF4DF6DE10D2F81A2CE85157D2 139264 ----a-w- C:\Windows\Sysnative\ieUnatt.exe

2014-05-08 10:59:13 1654093C8BD3342997D27B71684ACCE8 2043904 ----a-w- C:\Windows\Sysnative\inetcpl.cpl

2014-05-08 10:59:13 0FBEBD36FEFFEE5AF25FDAEE5E35EE99 105984 ----a-w- C:\Windows\Sysnative\iesysprep.dll

2014-05-08 10:59:13 0A9D5716CB1F3AFA73703F39647BB8C2 81408 ----a-w- C:\Windows\Sysnative\icardie.dll

2014-05-08 10:59:13 038ABC9BCC86DFF9E181D44E43E2CEBA 52224 ----a-w- C:\Windows\Sysnative\msfeedsbs.dll

2014-05-08 10:57:53 FB4045578F5180BDB1963AB352B78548 5632 ---ha-w- C:\Windows\Sysnative\api-ms-win-downlevel-shlwapi-l2-1-0.dll

2014-05-08 10:57:53 FA428BDBCFAB9DC3D58F0BD2CCD50EA2 1682432 ----a-w- C:\Windows\Sysnative\XpsPrint.dll

2014-05-08 10:57:53 F5CEF064C7E6D95DA86B9D064A56A969 3584 ---ha-w- C:\Windows\Sysnative\api-ms-win-downlevel-advapi32-l2-1-0.dll

2014-05-08 10:57:53 F49E92B50CED5C9F1725D3C0329FD933 10752 ---ha-w- C:\Windows\Sysnative\api-ms-win-downlevel-advapi32-l1-1-0.dll

2014-05-08 10:57:53 E8EEA503870CB6A6DC4E09A2433DF33E 2776576 ----a-w- C:\Windows\Sysnative\msmpeg2vdec.dll

2014-05-08 10:57:53 AFC3DB5C6EB8CA8017DDB81D6C0AD02A 9728 ---ha-w- C:\Windows\Sysnative\api-ms-win-downlevel-shlwapi-l1-1-0.dll

2014-05-08 10:57:53 9108540E866F75C7AF2B91DD921A8091 3072 ---ha-w- C:\Windows\Sysnative\api-ms-win-downlevel-shell32-l1-1-0.dll

2014-05-08 10:57:53 9094039A00485F71C4DE64BF51F64C46 3072 ---ha-w- C:\Windows\Sysnative\api-ms-win-downlevel-version-l1-1-0.dll

2014-05-08 10:57:53 72723D3E4781BADC62C3180C137E7B23 4096 ---ha-w- C:\Windows\Sysnative\api-ms-win-downlevel-user32-l1-1-0.dll

2014-05-08 10:57:53 6F623BD09CBB4C3F97374F12976E5EA5 522752 ----a-w- C:\Windows\Sysnative\XpsGdiConverter.dll

2014-05-08 10:57:53 64A4AB126E24FD3F58EBE64852773DB5 2560 ---ha-w- C:\Windows\Sysnative\api-ms-win-downlevel-normaliz-l1-1-0.dll

2014-05-08 10:57:53 0E6FBF19D9DFBB77316C23DF91F8A101 5632 ---ha-w- C:\Windows\Sysnative\api-ms-win-downlevel-ole32-l1-1-0.dll

2014-05-08 10:57:52 F1C19F0AA151B90A7416FA1D50DDB582 245248 ----a-w- C:\Windows\Sysnative\WindowsCodecsExt.dll

2014-05-08 10:57:52 C4C183E6551084039EC862DA1C945E3D 1175552 ----a-w- C:\Windows\Sysnative\FntCache.dll

2014-05-08 10:57:52 B2CA1AC17E78D986B22FD6C2261CD84F 1238528 ----a-w- C:\Windows\Sysnative\d3d10.dll

2014-05-08 10:57:52 AFB73882AE41E1629A63E6713FE30FB9 296960 ----a-w- C:\Windows\Sysnative\d3d10core.dll

2014-05-08 10:57:52 9AE80F6A66B30E3ED8CDF858CF28B11B 194560 ----a-w- C:\Windows\Sysnative\d3d10_1.dll

2014-05-08 10:57:52 8DFB5752FCE145A6B295093C0A8BE131 363008 ----a-w- C:\Windows\Sysnative\dxgi.dll

2014-05-08 10:57:52 63F72417CA38D8FC8F53709649B589E3 333312 ----a-w- C:\Windows\Sysnative\d3d10_1core.dll

2014-05-08 10:57:52 63BB89DED1E9104E68D33E54DE4D340D 1643520 ----a-w- C:\Windows\Sysnative\DWrite.dll

2014-05-08 10:57:52 3834316FE8A653227282196525E07DFE 648192 ----a-w- C:\Windows\Sysnative\d3d10level9.dll

2014-05-08 10:57:52 04CB7C8FDC6D9640DD82A527208F72C4 221184 ----a-w- C:\Windows\Sysnative\UIAnimation.dll

2014-05-06 07:48:08 84ED099009EF0DF82A37D4FEAE012655 465408 ----a-w- C:\Windows\Sysnative\aepdu.dll

2014-05-06 07:48:08 5513F4766C9987D6B0D49D51BB2E5EE4 424448 ----a-w- C:\Windows\Sysnative\aeinv.dll

====== C:\Windows\Sysnative\drivers =====

====== C:\Windows\Tasks ======

2014-05-09 08:13:38 -------- d-----w- C:\Windows\Sysnative\Tasks\NCH Software

====== C:\Windows\Temp ======

======= C:\Program Files =====

2014-04-23 18:59:57 -------- d-----w- C:\Program Files\Windows Live

2014-04-20 18:43:52 -------- d-----w- C:\Program Files\trend micro

2014-04-13 12:17:29 -------- d-----w- C:\Program Files\Google

======= C:\PROGRA~2 =====

2014-05-09 08:13:29 -------- d-----w- C:\PROGRA~2\NCH Software

2014-05-09 08:10:05 -------- d-----w- C:\PROGRA~2\VideoDownloadConverter_4z

2014-04-15 20:20:36 -------- d-----w- C:\PROGRA~2\FrostWire 5

======= C: =====

====== C:\Users\Pc\AppData\Roaming ======

2014-05-09 08:21:42 -------- d-----w- C:\Users\Pc\AppData\Roaming\NCH Software

2014-05-09 08:14:13 -------- d-----w- C:\Users\Pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NCH Software Suite

2014-05-09 08:14:13 -------- d-----w- C:\Users\Pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Graphics Related Programs

2014-05-08 11:12:51 -------- d-sh--w- C:\Users\Pc\AppData\Local\EmieUserList

2014-05-08 11:12:51 -------- d-sh--w- C:\Users\Pc\AppData\Local\EmieSiteList

2014-04-23 09:38:02 -------- d-----w- C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp

2014-04-23 09:38:01 -------- d-----w- C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Temp

2014-04-23 09:38:01 -------- d-----w- C:\Windows\SysNative\config\systemprofile\AppData\Local\Temp

2014-04-23 09:38:01 -------- d-----w- C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp

2014-04-23 09:38:01 -------- d-----w- C:\Users\Public\AppData\Local\temp

2014-04-23 09:38:01 -------- d-----w- C:\Users\Pc\AppData\Local\Temp

2014-04-23 09:38:01 -------- d-----w- C:\Users\Default\AppData\Local\Temp

2014-04-23 09:38:01 -------- d-----w- C:\Users\Default User\AppData\Local\Temp

2014-04-23 09:38:01 -------- d-----w- C:\Users\Administrator\AppData\Local\temp

2014-04-20 09:06:00 -------- d-----w- C:\Windows\SysNative\config\systemprofile\AppData\Roaming\Fighters

2014-04-20 09:05:47 -------- d-----w- C:\Windows\SysNative\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2014-04-20 09:05:41 -------- d-----w- C:\Windows\sysWoW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

2014-04-20 09:05:36 -------- d-----r- C:\Windows\SysNative\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-04-20 09:05:36 -------- d-----r- C:\Windows\SysNative\config\systemprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools

2014-04-20 09:05:25 -------- d-----w- C:\Windows\SysNative\config\systemprofile\AppData\Roaming\Identities

2014-04-15 20:22:07 -------- d-----w- C:\Users\Pc\AppData\Local\Comodo

2014-04-15 20:20:49 -------- d-----w- C:\Users\Pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FrostWire 5

2014-04-13 12:18:25 -------- d-----w- C:\Users\Pc\AppData\Roaming\Google

2014-04-12 18:42:33 -------- dc----w- C:\Users\Pc\AppData\Local\MigWiz

====== C:\Users\Pc ======

2014-05-09 08:23:54 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome

2014-05-09 08:13:38 -------- d-----w- C:\ProgramData\NCH Software

2014-05-09 08:13:32 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite

2014-05-09 08:13:31 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Graphics Related Programs

2014-05-08 10:14:39 -------- d-----r- C:\Windows\SysNative\config\systemprofile\Searches

2014-04-23 09:30:56 -------- d-----w- C:\Users\dub_cm_auto\Application Data

2014-04-20 09:05:36 -------- d-----r- C:\Windows\SysNative\config\systemprofile\Videos

2014-04-20 09:05:36 -------- d-----r- C:\Windows\SysNative\config\systemprofile\Pictures

2014-04-20 09:05:36 -------- d-----r- C:\Windows\SysNative\config\systemprofile\Music

2014-04-20 09:05:36 -------- d-----r- C:\Windows\SysNative\config\systemprofile\Favorites

2014-04-20 09:05:36 -------- d-----r- C:\Windows\SysNative\config\systemprofile\Downloads

2014-04-20 09:05:36 -------- d-----r- C:\Windows\SysNative\config\systemprofile\Documents

2014-04-20 09:05:19 -------- d-----r- C:\Windows\sysWoW64\config\systemprofile\Favorites

2014-04-20 09:05:19 -------- d-----r- C:\Windows\SysNative\config\systemprofile\Desktop

2014-04-17 09:24:52 -------- d-----w- C:\Users\Pc\Belgacom Cloud

2014-04-15 20:22:15 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo

2014-04-13 12:17:04 -------- d-----w- C:\ProgramData\Google

====== C: exe-files ==

2014-05-10 20:46:06 1FBB30DE77DA40710325CB7F718BA22C 466720 ----a-w- C:\Users\Pc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UAQ0N4VN\the girl with the dragon tattoo+delug+bittorent+client_1.0.exe

2014-05-09 16:32:08 710FD0E362A1A5C087DB90C1BAC46411 940032 ----a-w- C:\Windows\System32\MsSpellCheckingFacility.exe

2014-05-09 08:23:43 B2F463EA8A99A33A6BCE698EF4646CCF 37101272 ----a-w- C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\34.0.1847.131\34.0.1847.131_chrome_installer.exe

2014-05-09 08:23:08 D893431503D5112DC3B799DF963D2AC8 114568 ----atw- C:\Users\Pc\AppData\Local\Temp\{D8EEBEAB-0BB5-461D-969D-027A7017EC8F}\GoogleUpdateComRegisterShell64.exe

2014-05-09 08:23:08 D5A444B63637EC0932172C6719A10252 263048 ----atw- C:\Users\Pc\AppData\Local\Temp\{D8EEBEAB-0BB5-461D-969D-027A7017EC8F}\GoogleCrashHandler.exe

2014-05-09 08:23:08 BE472797288F53AA9F56974B1A1FC18F 918672 ----a-w- C:\Users\Pc\AppData\Local\Temp\{D8EEBEAB-0BB5-461D-969D-027A7017EC8F}\GoogleUpdateSetup.exe

2014-05-09 08:23:08 720546B84ED5229E1584C8F3533A2F12 328072 ----atw- C:\Users\Pc\AppData\Local\Temp\{D8EEBEAB-0BB5-461D-969D-027A7017EC8F}\GoogleCrashHandler64.exe

2014-05-09 08:23:08 6FC454773ABF8DE9A33B35E03525140D 51080 ----atw- C:\Users\Pc\AppData\Local\Temp\{D8EEBEAB-0BB5-461D-969D-027A7017EC8F}\GoogleUpdateOnDemand.exe

2014-05-09 08:23:08 506708142BC63DABA64F2D3AD1DCD5BF 116648 ----atw- C:\Users\Pc\AppData\Local\Temp\{D8EEBEAB-0BB5-461D-969D-027A7017EC8F}\GoogleUpdate.exe

2014-05-09 08:23:08 49B70FBEEC01A69CA9AC115C109E9CDD 51080 ----atw- C:\Users\Pc\AppData\Local\Temp\{D8EEBEAB-0BB5-461D-969D-027A7017EC8F}\GoogleUpdateBroker.exe

2014-05-09 08:20:54 9FAD775B2F49AF09006AAEA19360AE00 744504 ----a-w- C:\Program Files (x86)\NCH Software\PhotoPad\photopadsetup_v2.46.exe

2014-05-09 08:20:53 01C68D4347FF027D6777C5F347CC86EE 2109496 ----a-w- C:\Program Files (x86)\NCH Software\PhotoPad\photopad.exe

2014-05-09 08:20:51 9FAD775B2F49AF09006AAEA19360AE00 744504 ------w- C:\Users\Pc\AppData\Local\Temp\Pixillion-6380-1\ppadsetup.exe

2014-05-09 08:13:51 88AB8AF8926148DF1F8AAAA95F6F8048 514624 ----a-w- C:\Users\Pc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TV5P4ND1\pixpsetup.exe

2014-05-09 08:13:36 88AB8AF8926148DF1F8AAAA95F6F8048 514624 ----a-w- C:\Program Files (x86)\NCH Software\Pixillion\pixillionsetup_v2.73.exe

2014-05-09 08:13:29 D180434E310EB75851A37D7E98B672AF 1674816 ----a-w- C:\Program Files (x86)\NCH Software\Pixillion\pixillion.exe

2014-05-09 08:13:14 88AB8AF8926148DF1F8AAAA95F6F8048 514624 ----a-w- C:\Users\Pc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNDNCIPE\pixpsetup.exe

2014-05-09 08:09:44 855511B7D0519179F4868A7417BF04A1 443288 ----a-w- C:\Users\Pc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BNRHEJB8\VideoDownloadConvert.exe

2014-05-08 10:59:13 F972DDD19A10F53D74021DDEAC07CCA6 470016 ----a-w- C:\Program Files (x86)\Internet Explorer\ieinstal.exe

2014-05-08 10:59:13 EA8386CA87165460D39A1D29FF11080B 809680 ----a-w- C:\Program Files\Internet Explorer\iexplore.exe

2014-05-08 10:59:13 E4A6577D74B2439974C8018AB5F1BFEA 13312 ----a-w- C:\Windows\System32\msfeedssync.exe

2014-05-08 10:59:13 E0155A11B26C7D5347069AB7ACB62D02 222720 ----a-w- C:\Program Files\Internet Explorer\ielowutil.exe

2014-05-08 10:59:13 C5C7E33308BAE18BD9F59F9A93E85D33 482816 ----a-w- C:\Program Files\Internet Explorer\ieinstal.exe

2014-05-08 10:59:13 C1A6E565B2782C09BC40AD749B46D9ED 71680 ----a-w- C:\Windows\SysWOW64\RegisterIEPKEYs.exe

2014-05-08 10:59:13 BEA4E0C0BA936E8A3DB24D1A37BF70BE 222720 ----a-w- C:\Program Files (x86)\Internet Explorer\ielowutil.exe

2014-05-08 10:59:13 ABDFC692D9FE43E2BA8FE6CB5A8CB95A 13312 ----a-w- C:\Windows\SysWOW64\mshta.exe

2014-05-08 10:59:13 A3A132CBE48AF0324466469F2CAAE8A2 111616 ----a-w- C:\Windows\System32\ieetwcollector.exe

2014-05-08 10:59:13 9A33FDDD687A836A1FD478B43C5A95FD 151552 ----a-w- C:\Windows\SysWOW64\iexpress.exe

2014-05-08 10:59:13 95828D670CFD3B16EE188168E083C3C5 13824 ----a-w- C:\Windows\System32\mshta.exe

2014-05-08 10:59:13 887055A3C8DD6C87D200D11EAFDBD45B 74240 ----a-w- C:\Windows\SysWOW64\SetIEInstalledDate.exe

2014-05-08 10:59:13 7F7F391491C315A4A72EFCAC0D34FA93 25600 ----a-w- C:\Program Files (x86)\Internet Explorer\ExtExport.exe

2014-05-08 10:59:13 6A92CEC8532056791C6832B2725D170D 139264 ----a-w- C:\Windows\SysWOW64\wextract.exe

2014-05-08 10:59:13 53FC62C51CB18C9100A7DFAF2D2A6C47 12800 ----a-w- C:\Windows\SysWOW64\msfeedssync.exe

2014-05-08 10:59:13 5141B67F14E2B6CBB6ADF851ABE364A5 90112 ----a-w- C:\Windows\System32\SetIEInstalledDate.exe

2014-05-08 10:59:13 46FD16F9B1924A2EA8CD5C6716CC654F 167424 ----a-w- C:\Windows\System32\iexpress.exe

2014-05-08 10:59:13 4399857346DD183683332921500046B1 86016 ----a-w- C:\Windows\System32\RegisterIEPKEYs.exe

2014-05-08 10:59:13 41F922D6A794C0F8425C8436D7077C84 359632 ----a-w- C:\Program Files\Internet Explorer\iediagcmd.exe

2014-05-08 10:59:13 3F498856C68725717195C16568FE19D0 586240 ----a-w- C:\Windows\System32\ie4uinit.exe

2014-05-08 10:59:13 21BF6759685FD193715B483F2B3F21B1 112128 ----a-w- C:\Windows\SysWOW64\ieUnatt.exe

2014-05-08 10:59:13 1EA6500C25A80E8BDB65099C509AF993 143872 ----a-w- C:\Windows\System32\wextract.exe

2014-05-08 10:59:13 1BF215FF4DF6DE10D2F81A2CE85157D2 139264 ----a-w- C:\Windows\System32\ieUnatt.exe

2014-05-08 10:59:13 0667ED9F8E905E1F73DB60ACCEDCBCA7 811728 ----a-w- C:\Program Files (x86)\Internet Explorer\iexplore.exe

2014-05-06 14:31:48 BE472797288F53AA9F56974B1A1FC18F 918672 ----a-w- C:\Users\Pc\AppData\Local\Apps\2.0\ZBDQPJK5.DRD\TZND627D.8CV\inst...app_4fe91ede9f9bdca3_0001.0003_62a41fd7933a48bd\GoogleUpdateSetup.exe

2014-05-06 14:31:48 BE472797288F53AA9F56974B1A1FC18F 918672 ----a-w- C:\Users\Pc\AppData\Local\Apps\2.0\ZBDQPJK5.DRD\TZND627D.8CV\clic...exe_4fe91ede9f9bdca3_0001.0003_none_e0b66a49f1dbb42d\GoogleUpdateSetup.exe

2014-05-06 14:31:48 30485BC4DAAA839808CB0F19D80D8AB8 10120 ------w- C:\Users\Pc\AppData\Local\Apps\2.0\ZBDQPJK5.DRD\TZND627D.8CV\inst...app_4fe91ede9f9bdca3_0001.0003_62a41fd7933a48bd\clickonce_bootstrap.exe

2014-05-06 08:58:37 BE472797288F53AA9F56974B1A1FC18F 918672 ----a-w- C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleUpdateSetup.exe

2014-05-06 08:58:37 6FC454773ABF8DE9A33B35E03525140D 51080 ----atw- C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleUpdateOnDemand.exe

2014-05-06 08:58:37 49B70FBEEC01A69CA9AC115C109E9CDD 51080 ----atw- C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleUpdateBroker.exe

2014-05-06 08:58:28 D893431503D5112DC3B799DF963D2AC8 114568 ----atw- C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleUpdateComRegisterShell64.exe

2014-05-06 08:58:28 D5A444B63637EC0932172C6719A10252 263048 ----atw- C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler.exe

2014-05-06 08:58:28 720546B84ED5229E1584C8F3533A2F12 328072 ----atw- C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler64.exe

2014-05-06 08:58:26 506708142BC63DABA64F2D3AD1DCD5BF 116648 ----atw- C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleUpdate.exe

2014-05-06 08:58:19 BE472797288F53AA9F56974B1A1FC18F 918672 ----a-w- C:\Program Files (x86)\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.24.7\GoogleUpdateSetup.exe

2014-05-06 07:48:08 D39F522D9B0033E50C7F54138CFBC0D8 31232 ----a-w- C:\Windows\System32\CompatTel\wicainventory.exe

2014-05-06 07:48:08 21EDB6E45163A5635D6D6307EB42BC77 104960 ----a-w- C:\Windows\System32\CompatTel\QueryAppBlock.exe

=== C: other files ==

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Microsoft\Windows\CurrentVersion\Run]

"Gadwin PrintScreen"="C:\Program Files (x86)\Gadwin Systems\PrintScreen\PrintScreen.exe /nosplash"

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

"NUSB3MON"="C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"

"VideoDownloadConverter EPM Support"="C:\PROGRA~2\VIDEOD~2\bar\1.bin\4zmedint.exe T8EPMSUP.DLL,S"

"VideoDownloadConverter Search Scope Monitor"="C:\PROGRA~2\VIDEOD~2\bar\1.bin\4zsrchmn.exe /m=2 /w /h"

"VideoDownloadConverter_4z Browser Plugin Loader"="C:\PROGRA~2\VIDEOD~2\bar\1.bin\4zbrmon.exe"

"VideoDownloadConverter_4z Browser Plugin Loader 64"="C:\PROGRA~2\VIDEOD~2\bar\1.bin\4zbrmon64.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"Gadwin PrintScreen"="C:\Program Files (x86)\Gadwin Systems\PrintScreen\PrintScreen.exe /nosplash"

==== Startup Registry Enabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IgfxTray"="C:\Windows\system32\igfxtray.exe"

"HotKeysCmds"="C:\Windows\system32\hkcmd.exe"

"Persistence"="C:\Windows\system32\igfxpers.exe"

"VideoDownloadConverter Home Page Guard 64 bit"="C:\PROGRA~2\VIDEOD~2\bar\1.bin\AppIntegrator64.exe"

==== Startup Registry Disabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SunJavaUpdateSched]

"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="SunJavaUpdateSched"

"hkey"="HKLM"

"command"="\"C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SynTPEnh]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="SynTPEnh"

"hkey"="HKLM"

"command"="%ProgramFiles%\\Synaptics\\SynTP\\SynTPEnh.exe"

==== Task Scheduler Jobs ======================

C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [28/04/2014 21:10]

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [17/01/2014 12:06]

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ [undetermined Task]

==== Other Scheduled Tasks ======================

"C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe]

"C:\Windows\SysNative\tasks\CreateChoiceProcessTask" [C:\Windows\System32\browserchoice.exe]

"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]

"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]

"C:\Windows\SysNative\tasks\Norton WSC Integration" ["C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\WSCStub.exe"]

"C:\Windows\SysNative\tasks\Norton Identity Safe\Norton Error Analyzer" [C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.0.43\SymErr.exe]

"C:\Windows\SysNative\tasks\Norton Identity Safe\Norton Error Processor" [C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.0.43\SymErr.exe]

"C:\Windows\SysNative\tasks\Norton Internet Security\Norton Error Analyzer" [C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\SymErr.exe]

"C:\Windows\SysNative\tasks\Norton Internet Security\Norton Error Processor" [C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\SymErr.exe]

"C:\Windows\SysNative\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc]

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]

"{BBDA0591-3099-440a-AA10-41764D9DB4DB}"="C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF" [17/04/2014 10:03]

==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions

mkfokfffehpeedafpekjeddnmnjhmcmk - C:\Program Files (x86)\Norton Internet Security\Engine\21.2.0.38\Exts\Chrome.crx[11/03/2014 22:44]

Google Docs - Pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake

Google Drive - Pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf

YouTube - Pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo

Google Search - Pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf

BobyLyrics-16 - Pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\iffnmffcnjgdnckipooehcgglcfaheeb

Norton Identity Protection - Pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk

Google Wallet - Pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda

Gmail - Pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

==== Chrome Fix ======================

C:\Users\Pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\iffnmffcnjgdnckipooehcgglcfaheeb deleted successfully

==== Set IE to Default ======================

Old Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="Ask Home Page"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]

"DefaultScope"="{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8}"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8}] not found

New Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="Google"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]

"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="{searchTerms} - Bing"

{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="{searchTerms} - Google Search}"

{7FA82449-D80B-4B04-8429-7BC5FF2AECB0} Google Url="https://www.google.com/search?q={searchTerms}"

{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} default-search.net Url="{searchTerms - Aztec Media Yahoo Search Results}"

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{48586425-6bb7-4f51-8dc6-38c88e3ebb58} deleted successfully

HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{48586425-6bb7-4f51-8dc6-38c88e3ebb58} deleted successfully

HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{312f84fb-8970-4fd3-bddb-7012eac4afc9} deleted successfully

HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{312f84fb-8970-4fd3-bddb-7012eac4afc9} deleted successfully

HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{c547c6c2-561b-4169-a2a5-20ba771ca93b} deleted successfully

HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{c547c6c2-561b-4169-a2a5-20ba771ca93b} deleted successfully

HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{48586425-6bb7-4f51-8dc6-38c88e3ebb58} deleted successfully

HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{312f84fb-8970-4fd3-bddb-7012eac4afc9} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{312f84fb-8970-4fd3-bddb-7012eac4afc9} deleted successfully

HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{c547c6c2-561b-4169-a2a5-20ba771ca93b} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c547c6c2-561b-4169-a2a5-20ba771ca93b} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{48586425-6bb7-4f51-8dc6-38c88e3ebb58} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{48586425-6bb7-4f51-8dc6-38c88e3ebb58} deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\Pc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully

C:\Users\Pc\AppData\Local\Temp\acrord32_sbx\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\Pc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UAQ0N4VN will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\Pc\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=267 folders=51 18786175 bytes)

==== Empty Temp Folders ======================

C:\Users\Administrator\AppData\Local\temp emptied successfully

C:\Users\Default\AppData\Local\Temp emptied successfully

C:\Users\Default User\AppData\Local\Temp emptied successfully

C:\Users\Pc\AppData\Local\Temp will be emptied at reboot

C:\Users\Public\AppData\Local\temp emptied successfully

C:\Windows\SysNative\config\systemprofile\AppData\Local\Temp emptied successfully

C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Temp emptied successfully

C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully

C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully

C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied

C:\Users\Pc\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\PROGRA~2\VideoDownloadConverter_4z\bar\1.bin\4zbrstub64.dll" not found

"C:\PROGRA~2\VideoDownloadConverter_4z" not found

"C:\Users\Pc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UAQ0N4VN" deleted

==== EOF on zo 11/05/2014 at 11:22:22,77 ======================

************************************

PS : mag ik uw bevindingen ivm de gedane bewerkingen met de UP DATE geschiedenis. Is deze volgens u goed verlopen en nu oke ? De update naar EXPLO 11 is blijkbaar ook oké.

Graag uw zicht en beoordeling aub.

Groeten,

Jean Paul

kweezie wabbit · 11 mei 2014

De windows updates lijken nu normaal te verlopen.

Hou het een tijdje in de gaten en als er nog (of weer) problemen opduiken, laat het dan maar weten.

Je Java software is verouderd.

Oudere versies hebben lekken die malware de kans geeft om zich te installeren op je systeem.

Ga naar Java en download daar de correcte Java versie.

Klik op "Gratis Java-download".
Ga akkoord met de licentiebepalingen en klik op de button voor de gratis download.
Het bestand JavaSetup wordt aangeboden - kies hier voor "bestand opslaan".
Sluit alle programma's die eventueel open zijn - zeker je web browser!
Ga dan naar Start > Configuratiescherm > Software en verwijder alle oudere versies van Java uit de Softwarelijst.
Vink alles aan met Java Runtime Environment (JRE of J2SE of JAVA) in de naam.
Klik dan op Verwijderen of op de Wijzig/Verwijder knop.
Herhaal dit tot alle oudere versies verdwenen zijn.
Na het verwijderen van alle oudere versies, herstart je pc.
Klik vervolgens op JavaSetup om de nieuwste versie van Java te installeren.
Vink de installatie van de Ask toolbar uit en ga dan verder met de installatie.

Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe (hier en hier) kan je lezen hoe je dat doet.

Start Zoek.exe nogmaals met het onderstaande script.

Dubbelklik op Zoek.exe om de tool te starten.
Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
Kopieer nu onderstaande code en plak die in het grote invulvenster:

Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.

 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run];r
"VideoDownloadConverter EPM Support"=-;r
"VideoDownloadConverter Search Scope Monitor"=-;r
"VideoDownloadConverter_4z Browser Plugin Loader"=-;r
"VideoDownloadConverter_4z Browser Plugin Loader 64"=-;r
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run];r64
"VideoDownloadConverter Home Page Guard 64 bit"=-;r64
standardsearch;
chromelook;
startupall;
filesrcm;
installedprogs;
autoclean;

Klik nu op de knop "Run script".
Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
Mocht er geen logje verschijnen, start zoek.exe dan opnieuw en klik op de knop zoek-results.log, de log verschijnt dan alsnog.
Post het geopende logje in het volgende bericht als bijlage.

Zoek.exe logbestand plaatsen

Voeg het logbestand met de naam "Zoek-results.log" als bijlage toe aan het volgende bericht. (Dit logbestand kunt u tevens terug vinden op de systeemschijf als C:\\Zoek-results.log.)
Hoe u een bijlage kunt toevoegen aan het bericht leest u hier.

Jean Paul · 11 mei 2014

De windows updates lijken nu normaal te verlopen.
Hou het een tijdje in de gaten en als er nog (of weer) problemen opduiken, laat het dan maar weten.

Je Java software is verouderd.

Oudere versies hebben lekken die malware de kans geeft om zich te installeren op je systeem.

Ga naar Java en download daar de correcte Java versie.

Klik op "Gratis Java-download".

Ga akkoord met de licentiebepalingen en klik op de button voor de gratis download.

Het bestand JavaSetup wordt aangeboden - kies hier voor "bestand opslaan".

Sluit alle programma's die eventueel open zijn - zeker je web browser!

Ga dan naar Start > Configuratiescherm > Software en verwijder alle oudere versies van Java uit de Softwarelijst.

Vink alles aan met Java Runtime Environment (JRE of J2SE of JAVA) in de naam.

Klik dan op Verwijderen of op de Wijzig/Verwijder knop.

Herhaal dit tot alle oudere versies verdwenen zijn.

Na het verwijderen van alle oudere versies, herstart je pc.

Klik vervolgens op JavaSetup om de nieuwste versie van Java te installeren.

Vink de installatie van de Ask toolbar uit en ga dan verder met de installatie.

Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe (hier en hier) kan je lezen hoe je dat doet.

Start Zoek.exe nogmaals met het onderstaande script.
Dubbelklik op Zoek.exe om de tool te starten.

Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.

Kopieer nu onderstaande code en plak die in het grote invulvenster:
Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run];r
"VideoDownloadConverter EPM Support"=-;r
"VideoDownloadConverter Search Scope Monitor"=-;r
"VideoDownloadConverter_4z Browser Plugin Loader"=-;r
"VideoDownloadConverter_4z Browser Plugin Loader 64"=-;r
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run];r64
"VideoDownloadConverter Home Page Guard 64 bit"=-;r64
standardsearch;
chromelook;
startupall;
filesrcm;
installedprogs;
autoclean;
Klik nu op de knop "Run script".

Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).

Mocht er geen logje verschijnen, start zoek.exe dan opnieuw en klik op de knop zoek-results.log, de log verschijnt dan alsnog.

Post het geopende logje in het volgende bericht als bijlage.
Zoek.exe logbestand plaatsen

Voeg het logbestand met de naam "Zoek-results.log" als bijlage toe aan het volgende bericht. (Dit logbestand kunt u tevens terug vinden op de systeemschijf als C:\\Zoek-results.log.)

Hoe u een bijlage kunt toevoegen aan het bericht leest u hier.

Zo 11/5/2014 18.06

Seffens ga ik het bovenstaande doen met ZOEK.EXE

Eerst een klein hulpje voor het JAVA aub :

Ga in in de bijlage naar PROGRAMMA'S en ONDERDELEN of neem ik JAVA (links inde lijst rechtstreeks.

Kan er terug een knop reactie worden gecreeerd want ik moet telkens opnieuw inloggen met paswoord of een teken via mail graag.

Groeten,

Jean Paul · 11 mei 2014

Zo 11/5/2014 18.06
Seffens ga ik het bovenstaande doen met ZOEK.EXE

Eerst een klein hulpje voor het JAVA aub :

Ga in in de bijlage naar PROGRAMMA'S en ONDERDELEN of neem ik JAVA (links inde lijst rechtstreeks.

Kan er terug een knop reactie worden gecreeerd want ik moet telkens opnieuw inloggen met paswoord of een teken via mail graag.

[ATTACH=CONFIG]31946[/ATTACH][ATTACH=CONFIG]31947[/ATTACH]

Groeten,

********************************

Zo 11/5/2014 23.46u

Goede avond,

Ik heb alles uitgevoerd uit laatste opdracht.

Hopelijk was de zaak met JAVA goed . Kunt u nazien ?

Hierna laatste rapport van ZOEK.EXE

Zoek.exe v5.0.0.0 Updated 14-April-2014

Tool run by Pc on zo 11/05/2014 at 23:31:37,31.

Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64

Running in: Normal Mode Internet Access Detected

Launched: C:\Users\Pc\Desktop\zoek.exe [scan all users] [script inserted]

==== Older Logs ======================

C:\zoek-results2014-05-11-092222.log 54850 bytes

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} deleted successfully

==== Deleting CLSID Registry Values ======================

==== Installed Programs ======================

Adobe AIR

Adobe Flash Player 13 ActiveX

Adobe Reader XI (11.0.06) - Nederlands

Adobe Shockwave Player 12.0

Broadcom 802.11 Wireless LAN Adapter

Compatibiliteitspakket voor het 2007 Microsoft Office system

CutePDF Writer 3.0

D3DX10

FrostWire 5.7.2

Gadwin PrintScreen

Google Chrome

Google Toolbar for Internet Explorer

Google Update Helper

HP Support Solutions Framework

Intel PROSet Wireless

Intel® Processor Graphics

Intel® PROSet/Wireless for Bluetooth® + High Speed

Intel© PROSet/Wireless WiFi Software

Java 7 Update 55