Ga naar inhoud

AppData\Roaming\newnext.me\nengine.dll

Jan IJszenga

Door Jan IJszenga
in Archief Windows 7

 Delen

Aanbevolen berichten

Jan IJszenga Nieuweling

Jan IJszenga

Geplaatst:
Geplaatst:

Hoi. IK heb elke keer bij het opstarten deze melding: AppData\Roaming\newnext.me\nengine.dll

Ik heb al wel op uw site een gelijk bericht gelezen maar oplossing was voor specifiek pc van plaatser discussie.

Wie wil mij helpen dit probleem op te lossen?

Heb rsit 64bit al gedownload.

uitkomst is:

Logfile of random's system information tool 1.09 (written by random/random)

Run by jan ijszenga at 2014-05-06 17:27:51

Microsoft Windows 7 Ultimate Service Pack 1

System drive C: has 144 GB (78%) free of 185 GB

Total RAM: 4025 MB (59% free)

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 17:28:02, on 6-5-2014

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v11.0 (11.00.9600.17041)

Boot mode: Normal

Running processes:

C:\Windows\SysWOW64\rundll32.exe

C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe

C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE

C:\Program Files (x86)\PC Veilig\Common\FSM32.EXE

C:\Program Files (x86)\LPT\srptm.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Program Files\trend micro\jan ijszenga.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fRrvugmxlJOT40l3ePPj8-059HVvGjtksvRS5aNdwvQREAWYh-OuJd7Eabt6VqBBcu3bLq8h8OGJTwTmyof9tV63-XR7LAYwh8pG5NFFnq2_KlHqoh8vCGMTxA8B0v5fIPUFZFvqWGEhJcas_R_MswqrPI80yYsm8BVzNCDtuQ4RF9gtZ3vY6d8c8k1Ill8,&q={searchTerms}

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fRrvugmxlJOT40l3ePPj8-059HVvGjtksvRS5aNdwvQREAWYh-OuJd7Eabt6VqBBcu3bLq8h8OGJTwTmyof9tV63-XR7LAYwh8pG5NFFnq2_KlHqoh8vCGMTxA8B0v5fIPUFZFvqWGEhJcas_R_MswqrPI80yYsm8BVzNCDtuQ4RF9gtZ3vY6d8c8k1Ill8,&q={searchTerms}

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Search,

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fRrvugmxlJOT40l3ePPj8-059HVvGjtksvRS5aNdwvQREAWYh-OuJd7Eabt6VqBBcu3bLq8h8OGJTwTmyof9tV63-XR7LAYwh8pG5NFFnq2_KlHqoh8vCGMTxA8B0v5fIPUFZFvqWGEhJcas_R_MswqrPI80yYsm8BVzNCDtuQ4RF9gtZ3vY6d8c8k1Ill8,&q={searchTerms}

R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fRrvugmxlJOT40l3ePPj8-059HVvGjtksvRS5aNdwvQREAWYh-OuJd7Eabt6VqBBcu3bLq8h8OGJTwTmyof9tV63-XR7LAYwh8pG5NFFnq2_KlHqoh8vCGMTxA8B0v5fIPUFZFvqWGEhJcas_R_MswqrPI80yYsm8BVzNCDtuQ4RF9gtZ3vY6d8c8k1Ill8,&q={searchTerms}

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

F2 - REG:system.ini: UserInit=userinit.exe

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll

O2 - BHO: LitmusBHO - {C6867EB7-8350-4856-877F-93CF8AE3DC9C} - C:\Program Files (x86)\PC Veilig\NRS\iescript\baselitmus.dll

O2 - BHO: Adblock Plus for IE Browser Helper Object - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll

O3 - Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - (no file)

O3 - Toolbar: Browsing Protection Toolbar - {265EEE8E-3228-44D3-AEA5-F7FDF5860049} - C:\Program Files (x86)\PC Veilig\NRS\iescript\baselitmus.dll

O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files (x86)\PC Veilig\Common\FSM32.EXE" /splash

O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files (x86)\PC Veilig\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW

O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun

O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

O4 - HKCU\..\Run: [NextLive] C:\Windows\SysWOW64\rundll32.exe "C:\Users\jan ijszenga\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l

O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe"

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-18\..\RunOnce: [sPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\RunOnce: [sPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')

O4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000

O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - Unknown owner - C:\Program Files (x86)\PC Veilig\Anti-Virus\fsgk32st.exe

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files (x86)\PC Veilig\FWES\Program\fsdfwd.exe

O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files (x86)\PC Veilig\Common\FSMA32.EXE

O23 - Service: F-Secure ORSP Client (FSORSPClient) - F-Secure Corporation - C:\Program Files (x86)\PC Veilig\ORSP Client\fsorsp.exe

O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: LPT System Updater Service (LPTSystemUpdater) - Unknown owner - C:\Program Files (x86)\LPT\srpts.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Online Games Manager (ogmservice) - RealNetworks, Inc. - C:\Program Files (x86)\Online Games Manager\ogmservice.exe

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: TomTomHOMEService - TomTom - C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--

End of file - 10512 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe

%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16

wininit.exe

%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16

C:\Windows\system32\services.exe

C:\Windows\system32\lsass.exe

C:\Windows\system32\lsm.exe

winlogon.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

"taskhost.exe"

"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"

"C:\Program Files (x86)\PC Veilig\Anti-Virus\fsgk32st.exe"

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

"C:\Program Files (x86)\PC Veilig\Anti-Virus\FSGK32.EXE" /service /stopevent=168 /ipcexch=184

"C:\Program Files (x86)\PC Veilig\Common\FSMA32.EXE"

"C:\Windows\system32\Dwm.exe"

"C:\Program Files (x86)\LPT\srpts.exe"

C:\Windows\Explorer.EXE

oid 1.3.6.1.4.1.2213.11.1.27 HosterGroupType 0

"C:\Program Files (x86)\Online Games Manager\ogmservice.exe" --service-run

C:\Windows\system32\svchost.exe -k imgsvc

"C:\Windows\System32\hkcmd.exe"

"C:\Windows\System32\igfxpers.exe"

"C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe"

"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun

"C:\Windows\SysWOW64\rundll32.exe" "C:\Users\jan ijszenga\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l

"C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe"

"C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE" /tsr

oid 1.3.6.1.4.1.2213.11.1.27.64 HosterGroupType 0

"C:\Program Files (x86)\PC Veilig\Common\FSM32.EXE" /splash

"C:\Program Files (x86)\PC Veilig\ORSP Client\fsorsp.exe"

"C:\Program Files (x86)\PC Veilig\FWES\Program\fsdfwd.exe"

"C:\Program Files (x86)\PC Veilig\Anti-Virus\fssm32.exe" 3 604 608 612

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

"C:\Program Files (x86)\PC Veilig\Spam Control\fsscoepl_x64.exe"

"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-e27974c2-614c-4636-bdb7-3ed929ee5868 -SystemEventPortName:HostProcess-31779df0-228f-4e4c-80e5-81f2ce36f238 -IoCancelEventPortName:HostProcess-6c524a4f-6428-400b-abae-3ca71caecb98 -NonStateChangingEventPortName:HostProcess-c4fbc963-fc40-4a4c-b8f4-2ee3881aec2a -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:aff121ec-acf1-431f-a4da-02529cee725f -DeviceGroupId:WpdFsGroup

C:\Windows\system32\SearchIndexer.exe /Embedding

"C:\Program Files (x86)\PC Veilig\Anti-Virus\fsav32.exe"

"C:\Program Files (x86)\LPT\srptm.exe"

\??\C:\Windows\system32\conhost.exe "19762900981669710331836847828-1761106495-201484695-2205406751006016102-4456406

"C:\Windows\system32\NOTEPAD.EXE" C:\Users\jan ijszenga\Desktop\Nieuw tekstdocument.txt

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="4028.0.1770386169\1774019164" --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,1,5,14,28 --disable-accelerated-video-decode --gpu-vendor-id=0x8086 --gpu-device-id=0x2a42 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.15.10.2302 --ignored=" --type=renderer " /prefetch:822062411

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials="AutocompleteDynamicTrial_2/Postperiod_EnableZeroSuggest_R7_Stable_MostVisitedControl/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group7 pct:10g stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/Bootstrap/GoogleNow/Default/OmniboxBundledExperimentV1/POSTPERIOD_StableReorderHoldbackControlR4/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_06/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --disable-accelerated-video-decode --enable-software-compositing --channel="4028.1.1537523285\450342687" /prefetch:673131151

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials="AutocompleteDynamicTrial_2/Postperiod_EnableZeroSuggest_R7_Stable_MostVisitedControl/BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group7 pct:10g stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/Bootstrap/GoogleNow/Default/OmniboxBundledExperimentV1/POSTPERIOD_StableReorderHoldbackControlR4/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_06/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/group_01/" --extension-process --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --disable-accelerated-video-decode --enable-software-compositing --channel="4028.2.706909225\398866959" /prefetch:673131151

C:\Windows\System32\svchost.exe -k secsvcs

"C:\Program Files\Windows Media Player\wmpnetwk.exe"

C:\Windows\system32\wbem\wmiprvse.exe

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="4028.4.660987746\1913012128" --ppapi-flash-args --lang=nl --ignored=" --type=renderer " /prefetch:-632637702

C:\Windows\system32\sppsvc.exe

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials="AutocompleteDynamicTrial_2/Postperiod_EnableZeroSuggest_R7_Stable_MostVisitedControl/BrowserBlacklist/Enabled/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group7 pct:10g stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/Bootstrap/FlashHardwareVideoDecode/Disabled/GoogleNow/Default/OmniboxBundledExperimentV1/POSTPERIOD_StableReorderHoldbackControlR4/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_12/UMA-Uniformity-Trial-1-Percent/group_06/UMA-Uniformity-Trial-10-Percent/group_02/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-50-Percent/group_01/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --disable-accelerated-video-decode --enable-software-compositing --channel="4028.5.68555891\323887128" /prefetch:673131151

"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe4_ Global\UsGthrCtrlFltPipeMssGthrPipe4 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"

"C:\Windows\system32\SearchFilterHost.exe" 0 508 512 520 65536 516

"C:\Users\jan ijszenga\Documents\Downloads\RSITx64.exe"

C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFCB3198-32F3-4E8B-9539-4324694ED664}]

Adblock Plus for IE Browser Helper Object - C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2013-10-08 515848]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]

Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C6867EB7-8350-4856-877F-93CF8AE3DC9C}]

Browsing Protection Class - C:\Program Files (x86)\PC Veilig\NRS\iescript\baselitmus.dll [2014-04-24 556072]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFCB3198-32F3-4E8B-9539-4324694ED664}]

Adblock Plus for IE Browser Helper Object - C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2013-10-08 448776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{ae07101b-46d4-4a98-af68-0333ea26e113}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]

{ae07101b-46d4-4a98-af68-0333ea26e113}

{265EEE8E-3228-44D3-AEA5-F7FDF5860049} - Browsing Protection Toolbar - C:\Program Files (x86)\PC Veilig\NRS\iescript\baselitmus.dll [2014-04-24 556072]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-02-11 162328]

"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-02-11 386584]

"Persistence"=C:\Windows\system32\igfxpers.exe [2011-02-11 417304]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-10-28 3675352]

"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]

"NextLive"=C:\Windows\SysWOW64\rundll32.exe [2009-07-14 44544]

"TomTomHOME.exe"=C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe [2009-11-13 247144]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]

"F-Secure Manager"=C:\Program Files (x86)\PC Veilig\Common\FSM32.EXE [2009-11-18 201128]

"F-Secure TNB"=C:\Program Files (x86)\PC Veilig\FSGUI\TNBUtil.exe [2014-02-05 1655464]

"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]

"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]

C:\Users\jan ijszenga\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

OneNote 2007 Schermopname en Snel starten.lnk - C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]

C:\Windows\system32\igfxdev.dll [2011-02-11 272896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]

"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]

"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"ConsentPromptBehaviorAdmin"=5

"ConsentPromptBehaviorUser"=3

"EnableUIADesktopToggle"=0

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoActiveDesktop"=1

"NoActiveDesktopChanges"=0

"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]

"vidc.mrle"=msrle32.dll

"vidc.msvc"=msvidc32.dll

"msacm.imaadpcm"=imaadp32.acm

"msacm.msg711"=msg711.acm

"msacm.msgsm610"=msgsm32.acm

"msacm.msadpcm"=msadp32.acm

"midimapper"=midimap.dll

"wavemapper"=msacm32.drv

"VIDC.UYVY"=msyuv.dll

"VIDC.YUY2"=msyuv.dll

"VIDC.YVYU"=msyuv.dll

"VIDC.IYUV"=iyuv_32.dll

"vidc.i420"=iyuv_32.dll

"VIDC.YVU9"=tsbyuv.dll

"msacm.l3acm"=C:\Windows\System32\l3codeca.acm

"MSVideo8"=VfWWDM32.dll

"wave"=wdmaud.drv

"midi"=wdmaud.drv

"mixer"=wdmaud.drv

"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-05-06 17:27:52 ----D---- C:\Program Files\trend micro

2014-05-06 17:27:51 ----D---- C:\rsit

2014-05-06 10:50:32 ----SD---- C:\Windows\system32\CompatTel

2014-05-06 10:13:36 ----A---- C:\Windows\system32\aepdu.dll

2014-05-06 10:13:35 ----A---- C:\Windows\system32\aeinv.dll

2014-05-02 12:01:56 ----A---- C:\Windows\system32\mshtml.dll

2014-05-02 12:01:55 ----A---- C:\Windows\SYSWOW64\mshtml.dll

2014-05-02 11:00:39 ----D---- C:\Program Files (x86)\TomTom DesktopSuite

2014-04-22 11:49:48 ----A---- C:\Windows\system32\ieui.dll

2014-04-22 11:49:47 ----A---- C:\Windows\SYSWOW64\ieui.dll

2014-04-22 11:49:46 ----A---- C:\Windows\SYSWOW64\vbscript.dll

2014-04-22 11:49:46 ----A---- C:\Windows\system32\vbscript.dll

2014-04-22 11:49:40 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-04-22 11:49:40 ----A---- C:\Windows\system32\iernonce.dll

2014-04-22 11:49:40 ----A---- C:\Windows\system32\ieetwcollectorres.dll

2014-04-22 11:49:40 ----A---- C:\Windows\system32\ie4uinit.exe

2014-04-22 11:49:38 ----A---- C:\Windows\SYSWOW64\dxtrans.dll

2014-04-22 11:49:38 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll

2014-04-22 11:49:38 ----A---- C:\Windows\system32\jscript9diag.dll

2014-04-22 11:49:38 ----A---- C:\Windows\system32\dxtrans.dll

2014-04-22 11:49:38 ----A---- C:\Windows\system32\dxtmsft.dll

2014-04-22 11:49:37 ----A---- C:\Windows\SYSWOW64\msrating.dll

2014-04-22 11:49:37 ----A---- C:\Windows\SYSWOW64\msfeeds.dll

2014-04-22 11:49:37 ----A---- C:\Windows\SYSWOW64\jsproxy.dll

2014-04-22 11:49:37 ----A---- C:\Windows\system32\msrating.dll

2014-04-22 11:49:37 ----A---- C:\Windows\system32\msfeeds.dll

2014-04-22 11:49:37 ----A---- C:\Windows\system32\jsproxy.dll

2014-04-22 11:49:36 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll

2014-04-22 11:49:36 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe

2014-04-22 11:49:36 ----A---- C:\Windows\SYSWOW64\iesetup.dll

2014-04-22 11:49:36 ----A---- C:\Windows\SYSWOW64\iernonce.dll

2014-04-22 11:49:36 ----A---- C:\Windows\system32\ieUnatt.exe

2014-04-22 11:49:36 ----A---- C:\Windows\system32\iesetup.dll

2014-04-22 11:49:33 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll

2014-04-22 11:49:33 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll

2014-04-22 11:49:33 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll

2014-04-22 11:49:33 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe

2014-04-22 11:49:33 ----A---- C:\Windows\system32\ieetwproxystub.dll

2014-04-22 11:49:33 ----A---- C:\Windows\system32\ieetwcollector.exe

2014-04-22 11:49:33 ----A---- C:\Windows\system32\ieapfltr.dll

2014-04-22 11:49:32 ----A---- C:\Windows\SYSWOW64\iertutil.dll

2014-04-22 11:49:31 ----A---- C:\Windows\SYSWOW64\wininet.dll

2014-04-22 11:49:31 ----A---- C:\Windows\SYSWOW64\urlmon.dll

2014-04-22 11:49:31 ----A---- C:\Windows\system32\wininet.dll

2014-04-22 11:49:31 ----A---- C:\Windows\system32\urlmon.dll

2014-04-22 11:49:31 ----A---- C:\Windows\system32\iertutil.dll

2014-04-22 11:49:30 ----A---- C:\Windows\system32\ieframe.dll

2014-04-22 11:49:29 ----A---- C:\Windows\SYSWOW64\ieframe.dll

2014-04-22 11:49:28 ----A---- C:\Windows\system32\jscript9.dll

2014-04-22 11:49:27 ----A---- C:\Windows\SYSWOW64\jscript9.dll

2014-04-09 13:54:14 ----D---- C:\Program Files (x86)\Online Games Manager

2014-04-09 13:53:52 ----D---- C:\ProgramData\Trymedia

2014-04-09 09:21:57 ----A---- C:\Windows\system32\drivers\storport.sys

2014-04-09 09:21:57 ----A---- C:\Windows\system32\drivers\msiscsi.sys

2014-04-09 09:21:56 ----A---- C:\Windows\SYSWOW64\iologmsg.dll

2014-04-09 09:21:56 ----A---- C:\Windows\system32\iologmsg.dll

2014-04-09 09:21:56 ----A---- C:\Windows\system32\drivers\Diskdump.sys

2014-04-09 09:21:48 ----A---- C:\Windows\system32\drivers\ntfs.sys

2014-04-09 09:21:32 ----A---- C:\Windows\SYSWOW64\setup16.exe

2014-04-09 09:21:32 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll

2014-04-09 09:21:32 ----A---- C:\Windows\SYSWOW64\kernel32.dll

2014-04-09 09:21:32 ----A---- C:\Windows\system32\wow64win.dll

2014-04-09 09:21:32 ----A---- C:\Windows\system32\wow64.dll

2014-04-09 09:21:32 ----A---- C:\Windows\system32\ntvdm64.dll

2014-04-09 09:21:32 ----A---- C:\Windows\system32\kernel32.dll

2014-04-09 09:21:31 ----A---- C:\Windows\system32\wow64cpu.dll

2014-04-09 09:21:30 ----A---- C:\Windows\SYSWOW64\wow32.dll

2014-04-09 09:21:30 ----A---- C:\Windows\SYSWOW64\user.exe

2014-04-09 09:21:30 ----A---- C:\Windows\SYSWOW64\instnm.exe

======List of files/folders modified in the last 1 month======

2014-05-06 17:27:54 ----D---- C:\Windows\Temp

2014-05-06 17:27:52 ----RD---- C:\Program Files

2014-05-06 17:18:48 ----D---- C:\Windows\system32\config

2014-05-06 10:50:40 ----D---- C:\Windows\winsxs

2014-05-06 10:50:32 ----D---- C:\Windows\System32

2014-05-06 10:50:20 ----SHD---- C:\System Volume Information

2014-05-06 10:08:01 ----D---- C:\Windows\system32\catroot

2014-05-05 11:58:27 ----D---- C:\Windows\inf

2014-05-05 11:58:18 ----D---- C:\Windows

2014-05-04 14:09:04 ----D---- C:\Windows\system32\catroot2

2014-05-03 10:59:13 ----A---- C:\Windows\system32\PerfStringBackup.INI

2014-05-03 10:34:11 ----D---- C:\Windows\Prefetch

2014-05-02 12:02:07 ----D---- C:\Windows\SysWOW64

2014-05-02 11:01:17 ----SHD---- C:\Windows\Installer

2014-05-02 11:01:04 ----D---- C:\Program Files (x86)\TomTom HOME 2

2014-05-02 11:00:39 ----RD---- C:\Program Files (x86)

2014-04-30 11:45:44 ----HD---- C:\ProgramData

2014-04-23 15:56:02 ----D---- C:\Windows\rescache

2014-04-22 18:37:14 ----D---- C:\Program Files\Internet Explorer

2014-04-22 18:37:13 ----D---- C:\Windows\SYSWOW64\nl-NL

2014-04-22 18:37:13 ----D---- C:\Windows\SYSWOW64\en-US

2014-04-22 18:37:12 ----D---- C:\Windows\system32\nl-NL

2014-04-22 18:37:12 ----D---- C:\Windows\system32\en-US

2014-04-22 18:37:12 ----D---- C:\Windows\PolicyDefinitions

2014-04-22 18:37:11 ----D---- C:\Program Files (x86)\Internet Explorer

2014-04-20 15:40:13 ----D---- C:\Users\jan ijszenga\AppData\Roaming\newnext.me

2014-04-17 14:06:07 ----D---- C:\Windows\SoftwareDistribution

2014-04-12 20:13:14 ----D---- C:\Windows\debug

2014-04-10 10:58:36 ----D---- C:\Program Files (x86)\Common Files

2014-04-09 10:48:47 ----D---- C:\Windows\system32\drivers

2014-04-09 10:48:44 ----D---- C:\Windows\AppPatch

2014-04-09 10:48:40 ----D---- C:\Windows\system32\DriverStore

2014-04-09 10:44:40 ----D---- C:\ProgramData\Microsoft Help

2014-04-09 10:43:38 ----D---- C:\Windows\system32\MRT

2014-04-09 10:42:30 ----A---- C:\Windows\system32\MRT.exe

2014-04-08 13:30:46 ----D---- C:\Windows\Minidump

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 fsbts;fsbts; C:\Windows\system32\Drivers\fsbts.sys [2014-02-05 56016]

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]

R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2014-02-05 381440]

R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]

R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]

R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-02-05 283064]

R1 F-Secure HIPS;F-Secure HIPS Driver; \??\C:\Program Files (x86)\PC Veilig\HIPS\drivers\fshs.sys [2009-11-18 59784]

R1 FSFW;F-Secure Firewall Driver; C:\Windows\System32\drivers\fsdfw.sys [2009-11-18 94024]

R1 fsvista;F-Secure Vista Support Driver; \??\C:\Program Files (x86)\PC Veilig\Anti-Virus\minifilter\fsvista.sys [2009-11-18 16768]

R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]

R3 F-Secure Gatekeeper;F-Secure Gatekeeper; \??\C:\Program Files (x86)\PC Veilig\Anti-Virus\minifilter\fsgk.sys [2014-02-05 202176]

R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-02-11 10628640]

R3 netr28x;Ralink 802.11n Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr28x.sys [2013-02-25 2426672]

R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]

R3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]

S1 FSES;F-Secure Email Scanning Driver; C:\Windows\System32\drivers\fses.sys [2014-02-05 50384]

S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]

S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2010-11-20 20992]

S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]

S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]

S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []

S3 taphss6;Anchorfree HSS VPN Adapter; C:\Windows\system32\DRIVERS\taphss6.sys [2013-10-16 42184]

S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]

S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []

S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []

S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]

S4 F-Secure Filter;F-Secure File System Filter; \??\C:\Program Files (x86)\PC Veilig\Anti-Virus\Win2K\FSfilter.sys [2009-11-18 41640]

S4 F-Secure Recognizer;F-Secure File System Recognizer; \??\C:\Program Files (x86)\PC Veilig\Anti-Virus\Win2K\FSrec.sys [2009-11-18 27048]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]

R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]

R2 F-Secure Gatekeeper Handler Starter;FSGKHS; C:\Program Files (x86)\PC Veilig\Anti-Virus\fsgk32st.exe [2009-11-18 221608]

R2 FSMA;F-Secure Management Agent; C:\Program Files (x86)\PC Veilig\Common\FSMA32.EXE [2009-11-18 188840]

R2 LPTSystemUpdater;LPT System Updater Service; C:\Program Files (x86)\LPT\srpts.exe [2014-02-06 32288]

R2 ogmservice;Online Games Manager; C:\Program Files (x86)\Online Games Manager\ogmservice.exe [2014-03-27 581568]

R2 TomTomHOMEService;TomTomHOMEService; C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe [2009-11-13 92008]

R3 FSDFWD;F-Secure Anti-Virus Firewall Daemon; C:\Program Files (x86)\PC Veilig\FWES\Program\fsdfwd.exe [2009-11-18 846248]

R3 FSORSPClient;F-Secure ORSP Client; C:\Program Files (x86)\PC Veilig\ORSP Client\fsorsp.exe [2014-02-05 60352]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]

S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-05 116648]

S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]

S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-05 116648]

S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-03-06 111616]

S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]

S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]

S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]

S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]

S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2014-02-05 1255736]

S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]

S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

Mvg Jan

juisterr Veteraan

juisterr

Geplaatst:
Geplaatst:

Download 51a612a8b27e2-Zoek.pngZoek.zip naar het bureaublad.

  • Wanneer Internet Explorer of een andere browser of virusscanner melding geeft dat dit bestand onveilig zou zijn kun je negeren, dit is namelijk een onterechte waarschuwing.

Antivirussoftware uitschakelen

Schakel je antivirus- en antispywareprogramma's tijdelijk uit, deze kunnen namelijk conflicteren met Zoek.exe.

Zoek.exe uitvoeren

Wanneer u problemen ondervindt bij het uitvoeren van dit programma of bepaalde foutmeldingen te zien krijgt laat dit dan even weten in uw bericht.

  • Klik met de rechtermuisknop op Zoek.zip en klik op de optie "Alles uitpakken".
  • Dubbelklik vervolgens op Zoek.exe om de tool te starten.
  • Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  • Klik nu op de knop "Run script".
  • Er verschijnt een popup met de melding dat er geen script aangetroffen is, druk gewoon op OK.
  • Zoek.exe gaat nu een scan + reparatie uitvoeren, bij sommige systemen kan deze langer dan een half uur duren.
  • Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
  • Mocht na de herstart geen logje verschijnen, start zoek.exe dan opnieuw, de log verschijnt dan alsnog.
  • Post het geopende logje in het volgende bericht als bijlage.

Zoek.exe logbestand plaatsen

  • Voeg het logbestand met de naam "Zoek-results.log" als bijlage toe aan het volgende bericht.
    (Dit logbestand kunt u tevens terug vinden op de systeemschijf als C:\Zoek-results.log.)

  • 1 maand later...
Jan IJszenga Nieuweling

Jan IJszenga

Geplaatst:
  • Auteur
Geplaatst: (aangepast)

sorry voor late reactie. ben tijd offline geweest

mvg jan

Zoek.exe v5.0.0.0 Updated 22-06-2014

Tool run by jan ijszenga on wo 25-06-2014 at 16:00:28,08.

Microsoft Windows 7 Ultimate 6.1.7601 Service Pack 1 x64

Running in: Normal Mode Internet Access Detected

Launched: C:\Users\jan ijszenga\Desktop\zoek.exe [scan all users] [Quick Scan] [Auto Clean]

==== System Restore Info ======================

25-6-2014 16:01:47 Zoek.exe System Restore Point Created Succesfully.

==== Empty Folders Check ======================

C:\PROGRA~2\Advanced System Protector deleted successfully

C:\PROGRA~2\Systweak Support Dock deleted successfully

C:\PROGRA~2\TomTom DesktopSuite deleted successfully

C:\Users\jan ijszenga\AppData\Local\cache deleted successfully

C:\Users\jan ijszenga\AppData\Local\MigWiz deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-3349385582-3753753202-882759144-1001\Software\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully

HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully

==== Deleting Services ======================

==== Deleting Files \ Folders ======================

C:\Users\jan ijszenga\AppData\Local\genienext deleted

C:\Users\jan ijszenga\.android deleted

C:\PROGRA~2\Alawar deleted

C:\Users\jan ijszenga\AppData\Roaming\newnext.me deleted

C:\Users\jan ijszenga\AppData\Roaming\GoforFiles deleted

C:\Users\jan ijszenga\AppData\Roaming\Hotspot Shield deleted

C:\Users\jan ijszenga\AppData\Roaming\Systweak deleted

C:\Windows\sysWoW64\config\systemprofile\AppData\Roaming\Hotspot Shield deleted

C:\PROGRA~3\AlawarWrapper deleted

C:\PROGRA~3\Allmyapps deleted

C:\PROGRA~3\Package Cache deleted

C:\PROGRA~3\Trymedia deleted

C:\Users\jan ijszenga\AppData\Local\Mobogenie deleted

C:\Windows\SysNative\roboot64.exe deleted

C:\Users\jan ijszenga\Searches deleted

C:\windows\SysNative\Tasks\GoforFilesUpdate deleted

C:\Windows\SysNative\config\systemprofile\Searches deleted

C:\Users\Public\Documents\AlawarWrapper deleted

==== Files Recently Created / Modified ======================

====== C:\Windows ====

2014-06-25 13:45:27 F8DD830B55822856E478E4D7E7653D9F 4096 ----a-w- C:\Windows\d3dx.dat

====== C:\Users\JANIJS~1\AppData\Local\Temp ====

====== Java Cache =====

====== C:\Windows\SysWOW64 =====

2014-06-25 13:43:06 F557E36B291BE2B28FCA4D4A68AE2219 114176 ----a-w- C:\Windows\SysWOW64\PCWizard.cpl

====== C:\Windows\SysWOW64\drivers =====

====== C:\Windows\Sysnative =====

====== C:\Windows\Sysnative\drivers =====

2014-06-25 13:30:17 D41D8CD98F00B204E9800998ECF8427E 0 ---ha-w- C:\Windows\Sysnative\drivers\Msft_Kernel_WinUSB_01009.Wdf

2014-06-11 09:30:59 17F685B67C74B8F7BFED4308790B71DE 288192 ----a-w- C:\Windows\Sysnative\drivers\FWPKCLNT.SYS

2014-06-11 09:30:59 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E 1903552 ----a-w- C:\Windows\Sysnative\drivers\tcpip.sys

====== C:\Windows\Tasks ======

2014-06-06 09:35:17 6DCA04085B9A2C9E14FDAE591B670D10 4010 ----a-w- C:\Windows\Sysnative\Tasks\User_Feed_Synchronization-{46D3D965-5F68-4F5E-89BE-671B2F75C543}

====== C:\Windows\Temp ======

======= C:\Program Files =====

======= C:\PROGRA~2 =====

2014-06-25 13:43:01 -------- d-----w- C:\PROGRA~2\CPUID

2014-06-06 08:40:12 -------- d-----w- C:\PROGRA~2\Reallusion

2014-06-06 08:40:11 -------- d--h--w- C:\PROGRA~2\InstallShield Installation Information

2014-06-06 08:39:35 -------- d-----w- C:\PROGRA~2\COMMON~1\InstallShield

======= C: =====

====== C:\Users\jan ijszenga\AppData\Roaming ======

====== C:\Users\jan ijszenga ======

2014-06-25 13:43:06 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID

2014-06-06 08:40:27 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FaceFilter Studio

====== C: exe-files ==

2014-06-25 13:43:05 D64D1E9E5AAE16E1A648A981192999CC 29696 ----a-w- C:\Program Files (x86)\CPUID\PC Wizard 2013\Mark\markx86_324.exe

2014-06-25 13:43:05 2E6B32958BA4AE8EBAEA020129C34D2B 218112 ----a-w- C:\Program Files (x86)\CPUID\PC Wizard 2013\Web\webupdt.exe

2014-06-25 13:43:04 BACB957837A2EA83FD39D229726C05E6 20480 ----a-w- C:\Program Files (x86)\CPUID\PC Wizard 2013\Data\settings.exe

2014-06-25 13:43:04 52A6DA5EDAD61ABBB0535F8EE3E44C65 21797 ----a-w- C:\Program Files (x86)\CPUID\PC Wizard 2013\Data\pcwiz16.exe

2014-06-25 13:43:01 D331BDA7C6D9668DD26F7A07B2FB8D13 73728 ----a-w- C:\Program Files (x86)\CPUID\PC Wizard 2013\PC Wizard.exe

2014-06-25 13:43:01 B80D455C1B4897AC67A790D7B49BD186 741377 ----a-w- C:\Program Files (x86)\CPUID\PC Wizard 2013\unins000.exe

2014-06-25 13:43:01 216D3D767466CF1F9A41A662A6171DA5 608856 ----a-w- C:\Program Files (x86)\CPUID\PC Wizard 2013\systweakasp_c.exe

=== C: other files ==

2014-06-25 13:43:04 A453083B8F4CA7CB60CAC327E97EDBE2 25320 ----a-w- C:\Program Files (x86)\CPUID\PC Wizard 2013\pcwiz_x64.sys

2014-06-25 13:43:04 557FD33EE99DB6FE263CFCB82B7866B3 28976 ----a-w- C:\Program Files (x86)\CPUID\PC Wizard 2013\pcwiz_ia64.sys

2014-06-25 13:43:04 3AB94FBA7196E84A97E83B15F7BCB270 25320 ----a-w- C:\Program Files (x86)\CPUID\PC Wizard 2013\pcwiz_x32.sys

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-21-3349385582-3753753202-882759144-1001\Software\Microsoft\Windows\CurrentVersion\Run]

"DAEMON Tools Lite"="C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe -autorun"

"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun"

"NextLive"="C:\Windows\SysWOW64\rundll32.exe C:\Users\jan ijszenga\AppData\Roaming\newnext.me\nengine.dll,EntryPoint -m l"

"TomTomHOME.exe"="C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe"

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"SPReview"="C:\Windows\System32\SPReview\SPReview.exe /sp:1 /errorfwlink:Troubleshoot problems installing Service Pack 1 (SP1) for Windows 7 and Windows Server 2008 R2 - Windows Help /build:7601"

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"SPReview"="C:\Windows\System32\SPReview\SPReview.exe /sp:1 /errorfwlink:Troubleshoot problems installing Service Pack 1 (SP1) for Windows 7 and Windows Server 2008 R2 - Windows Help /build:7601"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"F-Secure Manager"="C:\Program Files (x86)\PC Veilig\Common\FSM32.EXE /splash"

"F-Secure TNB"="C:\Program Files (x86)\PC Veilig\FSGUI\TNBUtil.exe /CHECKALL /WAITFORSW"

"GrooveMonitor"="C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"

"Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"DAEMON Tools Lite"="C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe -autorun"

"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun"

"NextLive"="C:\Windows\SysWOW64\rundll32.exe C:\Users\jan ijszenga\AppData\Roaming\newnext.me\nengine.dll,EntryPoint -m l"

"TomTomHOME.exe"="C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe"

==== Startup Registry Enabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IgfxTray"="C:\Windows\system32\igfxtray.exe"

"HotKeysCmds"="C:\Windows\system32\hkcmd.exe"

"Persistence"="C:\Windows\system32\igfxpers.exe"

==== Startup Folders ======================

2014-02-06 09:03:26 1310 ----a-w- C:\Users\jan ijszenga\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Schermopname en Snel starten.lnk

==== Task Scheduler Jobs ======================

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [05-02-2014 09:53]

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [05-02-2014 09:53]

==== Other Scheduled Tasks ======================

"C:\Windows\SysNative\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"]

"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]

"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]

"C:\Windows\SysNative\tasks\User_Feed_Synchronization-{46D3D965-5F68-4F5E-89BE-671B2F75C543}" [C:\Windows\system32\msfeedssync.exe]

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]

"litmus-ff@f-secure.com"="C:\Program Files (x86)\PC Veilig\NRS\litmus-ff@f-secure.com" [03-06-2014 10:54]

==== Firefox Extensions ======================

ProfilePath: C:\Users\JANIJS~1\AppData\Roaming\TomTom\HOME\Profiles\jwr97ldj.default

- Map status indicator - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com

- TomTom HOME default theme - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\baseTheme@tomtom.com

- Emulator - %ProfilePath%\extensions\Navcore.8.010.9369@tomtom.com

==== Firefox Plugins ======================

==== Chrome Look ======================

Google Docs - jan ijszenga\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake

Google Drive - jan ijszenga\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf

YouTube - jan ijszenga\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo

Google Search - jan ijszenga\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf

AdBlock - jan ijszenga\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom

Google Wallet - jan ijszenga\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda

Gmail - jan ijszenga\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

==== Set IE to Default ======================

Old Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="http://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fRrvugmxlJOT40l3ePPj8-059HVvGjtksvRS5aNdwvQREAWYh-OuJd7Eabt6VqBBcu3bLq8h8OGJTwTmyof9tV63-XR7LAYwh8pG5NFFnq2_KlHqoh8vCGMTxA8B0v5fIPkWIps_NZLL79GHRaCu0EPefYpa7AeZMYeetPHLOVWJgYR7Qua6f48sRgb7sK4,"

"Search Bar"="http://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fRrvugmxlJOT40l3ePPj8-059HVvGjtksvRS5aNdwvQREAWYh-OuJd7Eabt6VqBBcu3bLq8h8OGJTwTmyof9tV63-XR7LAYwh8pG5NFFnq2_KlHqoh8vCGMTxA8B0v5fIPUFZFvqWGEhJcas_R_MswqrPI80yYsm8BVzNCDtuQ4RF9gtZ3vY6d8c8k1Ill8,&q={searchTerms}"

"Search Page"="http://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fRrvugmxlJOT40l3ePPj8-059HVvGjtksvRS5aNdwvQREAWYh-OuJd7Eabt6VqBBcu3bLq8h8OGJTwTmyof9tV63-XR7LAYwh8pG5NFFnq2_KlHqoh8vCGMTxA8B0v5fIPUFZFvqWGEhJcas_R_MswqrPI80yYsm8BVzNCDtuQ4RF9gtZ3vY6d8c8k1Ill8,&q={searchTerms}"

"Use Search Asst"="yes"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchUrl]

"Default"="http://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fRrvugmxlJOT40l3ePPj8-059HVvGjtksvRS5aNdwvQREAWYh-OuJd7Eabt6VqBBcu3bLq8h8OGJTwTmyof9tV63-XR7LAYwh8pG5NFFnq2_KlHqoh8vCGMTxA8B0v5fIPUFZFvqWGEhJcas_R_MswqrPI80yYsm8BVzNCDtuQ4RF9gtZ3vY6d8c8k1Ill8,&q={searchTerms}"

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\SearchUrl]

"Default"="http://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fRrvugmxlJOT40l3ePPj8-059HVvGjtksvRS5aNdwvQREAWYh-OuJd7Eabt6VqBBcu3bLq8h8OGJTwTmyof9tV63-XR7LAYwh8pG5NFFnq2_KlHqoh8vCGMTxA8B0v5fIPUFZFvqWGEhJcas_R_MswqrPI80yYsm8BVzNCDtuQ4RF9gtZ3vY6d8c8k1Ill8,&q={searchTerms}"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]

"Default"="http://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fRrvugmxlJOT40l3ePPj8-059HVvGjtksvRS5aNdwvQREAWYh-OuJd7Eabt6VqBBcu3bLq8h8OGJTwTmyof9tV63-XR7LAYwh8pG5NFFnq2_KlHqoh8vCGMTxA8B0v5fIPUFZFvqWGEhJcas_R_MswqrPI80yYsm8BVzNCDtuQ4RF9gtZ3vY6d8c8k1Ill8,&q={searchTerms}"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]

"Default_Search_URL"="http://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fRrvugmxlJOT40l3ePPj8-059HVvGjtksvRS5aNdwvQREAWYh-OuJd7Eabt6VqBBcu3bLq8h8OGJTwTmyof9tV63-XR7LAYwh8pG5NFFnq2_KlHqoh8vCGMTxA8B0v5fIPUFZFvqWGEhJcas_R_MswqrPI80yYsm8BVzNCDtuQ4RF9gtZ3vY6d8c8k1Ill8,&q={searchTerms}"

"SearchAssistant"="http://feed.snapdo.com/?p=mKO_AwFzXIpYRbPAMW02fRrvugmxlJOT40l3ePPj8-059HVvGjtksvRS5aNdwvQREAWYh-OuJd7Eabt6VqBBcu3bLq8h8OGJTwTmyof9tV63-XR7LAYwh8pG5NFFnq2_KlHqoh8vCGMTxA8B0v5fIPUFZFvqWGEhJcas_R_MswqrPI80yYsm8BVzNCDtuQ4RF9gtZ3vY6d8c8k1Ill8,&q={searchTerms}"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]

"DefaultScope"="{006ee092-9658-4fd6-bd8e-a21a348e59f5}"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}] not found

New Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"

"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"

"Start Page"="http://www.google.com"

"Use Search Asst"="no"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchUrl]

"(Default)"="http://search.msn.com/results.asp?q=%s"

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\SearchUrl]

"(Default)"="http://search.msn.com/results.asp?q=%s"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]

"(Default)"="http://search.msn.com/results.asp?q=%s"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]

"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"

"SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]

"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"

{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\jan ijszenga\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\jan ijszenga\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully

C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\jan ijszenga\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

No Flash Cache Found

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=1315 folders=141 158213042 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully

C:\Users\Default User\AppData\Local\Temp emptied successfully

C:\Users\jan ijszenga\AppData\Local\Temp will be emptied at reboot

C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot

C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully

C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied

C:\Users\JANIJS~1\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\MpCmdRun.log" not found

==== EOF on wo 25-06-2014 at 16:20:54,59 ======================

aangepast door kape
quote verwijderd
  • 2 weken later...
kape Grootmeester

kape

Geplaatst:
Geplaatst:

Dubbelklik op Zoek.exe om de tool te starten.


  • Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  • Kopieer nu onderstaande code en plak die in het grote invulvenster:
  • Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem. 

 
 [HKEY_USERS\S-1-5-21-3349385582-3753753202-882759144-1001\Software\Microsoft\Windows\CurrentVersion\Run];r64
 "NextLive"=-;r64
 C:\Users\jan ijszenga\AppData\Roaming\newnext.me;fs
 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run];r64
 "NextLive"=-;r64

  • De optie "Scan All Users" staat standaard aangevinkt.
  • Klik nu op de knop "Run script".
  • Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
  • Mocht er geen logje verschijnen, start zoek.exe dan opnieuw en klik op de knop zoek-results.log, de log verschijnt dan alsnog.
  • Post het geopende logje in het volgende bericht als bijlage.

Zoek.exe logbestand plaatsen

  • Voeg het logbestand met de naam "Zoek-results.log" als bijlage toe aan het volgende bericht. (Dit logbestand kunt u tevens terug vinden op de systeemschijf als C:\\Zoek-results.log.)
  • Hoe u een bijlage kunt toevoegen aan het bericht leest u hier.

 Delen
Ga naar topic overzicht
Logo

OVER ONS

PC Helpforum helpt GRATIS computergebruikers sinds juli 2006. Ons team geeft via het forum professioneel antwoord op uw vragen en probeert uw pc problemen zo snel mogelijk op te lossen. Word lid vandaag, plaats je vraag online en het PC Helpforum-team helpt u graag verder!

SITEMAP

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.