Grondige opschoning laptop

[kape]

Ziet er netjes uit ... tools nog verwijderen met Delfix.

Download Delfix by Xplode naar het bureaublad.

Dubbelklik op Delfix.exe om de tool te starten.

Zet nu vinkjes voor de volgende items:

• Remove disinfection tools
  
• Purge System Restore
  
• Reset system settings
  

Klik nu op "Run" en wacht geduldig tot de tool gereed is.

Wanneer de tool gereed is wordt er een logbestand aangemaakt. Dit hoeft u echter niet te plaatsen.

[Asus]

Nice !

Nu, ik dacht er ComboFix nog eens op los te laten als laatste schrobbeurt ? ....

[kape]

Mag je doen ... lijkt me niet veel te gaan opleveren. Maar je kan er niks mis mee doen ... it's all your choice !

[Asus]

Daar is ie eventjes zoet mee geweest ... ;-)

ComboFix 14-06-13.01 - Gregory 14/06/2014 18:06:18.1.2 - x64

Microsoft Windows 7 Ultimate 6.1.7601.1.1252.32.1043.18.4094.2560 [GMT 2:00]

Gestart vanuit: c:\users\Gregory\Desktop\ComboFix.exe

AV: Computer Bescherming *Disabled/Updated* {15414183-282E-D62C-CA37-EF24860A2F17}

SP: Computer Bescherming *Disabled/Updated* {AE20A067-0E14-D9A2-F087-D456FD8D65AA}

SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\users\Gregory\AppData\Roaming\inst.exe

c:\users\Gregory\AppData\Roaming\vso_ts_preview.xml

.

.

(((((((((((((((((((( Bestanden Gemaakt van 2014-05-14 to 2014-06-14 ))))))))))))))))))))))))))))))

.

.

2014-06-14 16:49 . 2014-06-14 16:49 -------- d-----w- c:\users\Default\AppData\Local\temp

2014-06-14 15:46 . 2014-06-14 15:11 24064 ----a-w- c:\windows\zoek-delete.exe

2014-06-14 15:46 . 2014-06-14 16:49 -------- d-----w- c:\users\Gregory\AppData\Local\Temp

2014-06-14 15:03 . 2014-06-14 15:03 82816 ----a-w- c:\users\Gregory\AppData\Roaming\pcouffin.sys

2014-06-14 08:16 . 2014-06-14 08:26 -------- d-----w- c:\programdata\HitmanPro

2014-06-14 06:30 . 2014-06-14 06:30 -------- d-----w- c:\windows\system32\appmgmt

2014-06-14 05:54 . 2014-06-14 05:54 -------- d-----w- c:\program files (x86)\Intel

2014-06-14 05:54 . 2013-08-05 09:50 53248 ----a-w- c:\windows\SysWow64\CSVer.dll

2014-06-14 05:54 . 2014-06-14 05:54 -------- d-----w- C:\Intel

2014-06-14 05:50 . 2014-06-14 06:00 -------- d-----w- c:\users\Gregory\AppData\Local\NVIDIA Corporation

2014-06-14 05:50 . 2014-04-30 18:27 1081112 ----a-w- c:\windows\SysWow64\nvspcap.dll

2014-06-14 05:50 . 2014-04-30 18:26 1225920 ----a-w- c:\windows\system32\nvspcap64.dll

2014-06-14 05:50 . 2014-06-14 05:50 -------- d-----w- c:\users\Gregory\AppData\Local\NVIDIA

2014-06-14 05:49 . 2014-06-14 05:50 -------- d-----w- c:\program files (x86)\NVIDIA Corporation

2014-06-14 05:48 . 2014-05-20 01:25 6769096 ----a-w- c:\windows\system32\nvcpl.dll

2014-06-14 05:48 . 2014-05-20 01:25 3514144 ----a-w- c:\windows\system32\nvsvc64.dll

2014-06-14 05:48 . 2014-05-20 01:25 927520 ----a-w- c:\windows\system32\nvvsvc.exe

2014-06-14 05:48 . 2014-05-20 01:25 62808 ----a-w- c:\windows\system32\nvshext.dll

2014-06-14 05:48 . 2014-05-20 01:25 387528 ----a-w- c:\windows\system32\nvmctray.dll

2014-06-14 05:48 . 2014-05-20 01:25 2560968 ----a-w- c:\windows\system32\nvsvcr.dll

2014-06-14 05:48 . 2014-05-14 23:49 3774821 ----a-w- c:\windows\system32\nvcoproc.bin

2014-06-14 05:48 . 2014-06-14 06:00 -------- d-----w- c:\programdata\NVIDIA Corporation

2014-06-14 05:44 . 2014-03-31 16:42 40392 ----a-w- c:\windows\system32\drivers\nvvad64v.sys

2014-06-14 05:43 . 2014-03-31 16:42 37320 ----a-w- c:\windows\system32\nvaudcap64v.dll

2014-06-14 05:43 . 2014-03-31 16:42 34760 ----a-w- c:\windows\SysWow64\nvaudcap32v.dll

2014-06-13 21:15 . 2014-06-13 21:15 -------- d-----w- c:\windows\ERUNT

2014-06-13 18:19 . 2014-06-13 18:19 -------- d-----w- c:\program files\CCleaner

2014-06-13 17:08 . 2014-06-13 17:08 -------- d-----w- c:\program files\Speccy

2014-06-13 17:05 . 2014-01-09 02:22 5694464 ----a-w- c:\windows\SysWow64\mstscax.dll

2014-06-13 17:05 . 2014-01-03 22:44 6574592 ----a-w- c:\windows\system32\mstscax.dll

2014-06-13 16:59 . 2014-06-13 16:59 -------- d-sh--w- c:\users\Gregory\AppData\Local\EmieUserList

2014-06-13 16:59 . 2014-06-13 16:59 -------- d-sh--w- c:\users\Gregory\AppData\Local\EmieSiteList

2014-06-13 16:32 . 2014-05-08 09:32 16384 ----a-w- c:\windows\system32\RdpGroupPolicyExtension.dll

2014-06-13 16:32 . 2014-05-08 09:32 3178496 ----a-w- c:\windows\system32\rdpcorets.dll

2014-06-13 16:14 . 2014-06-13 16:14 -------- d-----w- c:\windows\system32\drivers\en-US

2014-06-13 15:53 . 2012-08-23 15:28 3584 ----a-w- c:\windows\system32\drivers\nl-NL\tsusbflt.sys.mui

2014-06-13 15:53 . 2012-08-23 14:10 19456 ----a-w- c:\windows\system32\drivers\rdpvideominiport.sys

2014-06-13 15:53 . 2012-08-23 14:13 243200 ----a-w- c:\windows\system32\rdpudd.dll

2014-06-13 15:53 . 2012-08-23 11:12 192000 ----a-w- c:\windows\SysWow64\rdpendp_winip.dll

2014-06-13 15:53 . 2012-08-23 10:51 228864 ----a-w- c:\windows\system32\rdpendp_winip.dll

2014-06-13 15:51 . 2012-05-04 09:59 514560 ----a-w- c:\windows\SysWow64\qdvd.dll

2014-06-13 15:51 . 2012-05-04 11:00 366592 ----a-w- c:\windows\system32\qdvd.dll

2014-06-13 15:51 . 2013-09-25 02:23 1030144 ----a-w- c:\windows\system32\TSWorkspace.dll

2014-06-13 15:51 . 2013-09-25 01:57 792576 ----a-w- c:\windows\SysWow64\TSWorkspace.dll

2014-06-13 15:43 . 2014-06-13 15:43 -------- d-----w- c:\program files (x86)\Common Files\Java

2014-06-13 15:43 . 2014-05-07 13:02 98216 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll

2014-06-13 15:24 . 2014-06-13 15:24 -------- d-s---w- c:\windows\system32\CompatTel

2014-06-13 15:11 . 2014-06-13 15:11 -------- d-----w- c:\program files\trend micro

2014-06-11 18:05 . 2014-06-11 18:05 -------- d-----w- c:\program files\DIFX

2014-06-11 18:03 . 2014-06-11 18:03 -------- d-----w- C:\Ross-Tech

2014-06-11 17:42 . 2014-06-02 06:03 810200 ----a-w- c:\program files\Internet Explorer\iexplore.exe

2014-06-11 17:41 . 2014-05-30 10:21 23414784 ----a-w- c:\windows\system32\mshtml.dll

2014-05-16 06:56 . 2014-05-16 06:56 1619632 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\OFFICE12\OGL.DLL

.

.

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2014-06-11 15:43 . 2012-07-13 20:18 692400 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe

2014-06-11 15:43 . 2011-11-06 16:42 70832 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2014-06-01 15:17 . 2010-09-16 12:13 95414520 ----a-w- c:\windows\system32\MRT.exe

2014-04-14 02:24 . 2014-05-10 11:32 465408 ----a-w- c:\windows\system32\aepdu.dll

2014-04-14 02:19 . 2014-05-10 11:32 424448 ----a-w- c:\windows\system32\aeinv.dll

2014-03-31 20:46 . 2014-03-31 20:46 130712 ----a-w- c:\windows\SysWow64\MSSTDFMT.DLL

2014-03-31 20:46 . 2014-03-31 20:46 1070232 ----a-w- c:\windows\SysWow64\MSCOMCTL.OCX

.

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]

"VolPanel"="c:\program files (x86)\Creative\Sound Blaster X-Fi Surround 5.1\Volume Panel\VolPanlu.exe" [2008-11-24 237693]

"Module Loader"="c:\program files (x86)\Creative\Shared Files\Module Loader\DLLML.exe" [2007-07-23 57344]

"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]

"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2011-10-24 421888]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]

"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-11-01 152392]

"F-Secure Manager"="c:\program files (x86)\Telenet Security Pack\apps\ComputerSecurity\Common\FSM32.EXE" [2013-08-20 310208]

"F-Secure Hoster (44163)"="c:\program files (x86)\Telenet Security Pack\fshoster32.exe" [2013-01-18 188400]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 0 (0x0)

"ConsentPromptBehaviorUser"= 0 (0x0)

"EnableLUA"= 0 (0x0)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]

"LoadAppInit_DLLs"=1 (0x1)

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]

@=""

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]

@=""

.

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]

R3 cpudrv64;cpudrv64;c:\program files (x86)\SystemRequirementsLab\cpudrv64.sys;c:\program files (x86)\SystemRequirementsLab\cpudrv64.sys [x]

R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [x]

R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]

R3 ksaud;Creative USB Audio Driver;c:\windows\system32\drivers\ksaud.sys;c:\windows\SYSNATIVE\drivers\ksaud.sys [x]

R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x]

R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]

R3 RT-USB;Ross-Tech USB driver;c:\windows\system32\drivers\RT-USB64.SYS;c:\windows\SYSNATIVE\drivers\RT-USB64.SYS [x]

R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]

R3 TFsExDisk;TFsExDisk;c:\windows\System32\Drivers\TFsExDisk.sys;c:\windows\SYSNATIVE\Drivers\TFsExDisk.sys [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]

R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]

R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]

R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]

S0 fsbts;fsbts;c:\windows\system32\Drivers\fsbts.sys;c:\windows\SYSNATIVE\Drivers\fsbts.sys [x]

S1 F-Secure HIPS;F-Secure HIPS Driver;c:\program files (x86)\Telenet Security Pack\apps\ComputerSecurity\HIPS\drivers\fshs.sys;c:\program files (x86)\Telenet Security Pack\apps\ComputerSecurity\HIPS\drivers\fshs.sys [x]

S1 fsvista;F-Secure Vista Support Driver;c:\program files (x86)\Telenet Security Pack\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys;c:\program files (x86)\Telenet Security Pack\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys [x]

S2 fshoster;F-Secure Dll Hoster;c:\program files (x86)\Telenet Security Pack\fshoster32.exe;c:\program files (x86)\Telenet Security Pack\fshoster32.exe [x]

S2 FSORSPClient;F-Secure ORSP Client;c:\program files (x86)\Telenet Security Pack\apps\CCF_Reputation\fsorsp.exe;c:\program files (x86)\Telenet Security Pack\apps\CCF_Reputation\fsorsp.exe [x]

S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]

S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]

S3 F-Secure Gatekeeper;F-Secure Gatekeeper;c:\program files (x86)\Telenet Security Pack\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys;c:\program files (x86)\Telenet Security Pack\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys [x]

S3 fsni;fsni;c:\program files (x86)\Telenet Security Pack\apps\CCF_Scanning\fsni64.sys;c:\program files (x86)\Telenet Security Pack\apps\CCF_Scanning\fsni64.sys [x]

S3 netw5v64;Stuurprogramma voor Intel® Wireless WiFi Link 5000 Series-adapter voor 64-bits Windows Vista;c:\windows\system32\DRIVERS\netw5v64.sys;c:\windows\SYSNATIVE\DRIVERS\netw5v64.sys [x]

S3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [x]

S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]

S3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTAZL6.SYS [x]

S3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTDPV6.SYS [x]

S3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT6.SYS;c:\windows\SYSNATIVE\DRIVERS\VSTCNXT6.SYS [x]

.

.

Inhoud van de 'Gedeelde Taken' map

.

2014-06-14 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-07-13 15:43]

.

2014-06-14 c:\windows\Tasks\HP Photo Creations Communicator.job

- c:\programdata\HP Photo Creations\Communicator.exe [2011-09-20 09:11]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Creative SB Monitoring Utility"="sbavmon.dll" [2008-12-01 103424]

"EvtMgr6"="c:\program files\Logitech\SetPointP\SetPoint.exe" [2014-05-19 3100440]

"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-04-30 2199840]

"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2014-04-30 1225920]

.

------- Bijkomende Scan -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = https://www.google.be/

mLocal Page = c:\windows\SysWOW64\blank.htm

uInternet Settings,ProxyOverride = *.local

IE: E&xporteren naar Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000

TCP: DhcpNameServer = 195.130.131.4 195.130.130.132

FF - ProfilePath - c:\users\Gregory\AppData\Roaming\Mozilla\Firefox\Profiles\mz05bcs5.default\

FF - prefs.js: network.proxy.http - 127.0.0.1

FF - prefs.js: network.proxy.http_port - 54929

FF - prefs.js: network.proxy.type - 0

.

- - - - ORPHANS VERWIJDERD - - - -

.

Wow6432Node-HKLM-Run-NPSStartup - (no file)

HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start

.

.

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\fshoster]

"ImagePath"="\"c:\program files (x86)\Telenet Security Pack\fshoster32.exe\" -hosterid:0"

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_13_0_0_214_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_13_0_0_214_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_13_0_0_214_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_13_0_0_214_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_214.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.13"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_214.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_214.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_13_0_0_214.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\F-Secure\My Services Agent\Protected]

@Denied: ) (Everyone)

"AgentIdentifier"="ed22c38b-8d75-4e21-ad9a-cfafa12e4c4b"

"AuthorizationCode"=""

"44163_AgentIdentifier"="ed22c38b-8d75-4e21-ad9a-cfafa12e4c4b"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Voltooingstijd: 2014-06-14 18:53:27

ComboFix-quarantined-files.txt 2014-06-14 16:53

.

Pre-Run: 172.791.296.000 bytes beschikbaar

Post-Run: 172.625.555.456 bytes beschikbaar

.

- - End Of File - - A00D3941459080487A15CCC32D912E6E

A36C5E4F47E84449FF07ED3517B43A31

[kape]

Dit moet volstaan ... tijd voor Delfix:

Download Delfix by Xplode naar het bureaublad.

Dubbelklik op Delfix.exe om de tool te starten.

Zet nu vinkjes voor de volgende items:

• Remove disinfection tools
  
• Purge System Restore
  
• Reset system settings
  

Klik nu op "Run" en wacht geduldig tot de tool gereed is.

Wanneer de tool gereed is wordt er een logbestand aangemaakt. Dit hoeft u echter niet te plaatsen.

[Asus]

Alles vlot verlopen ... eventjes mee zoet geweest, maar het resultaat mag er zijn.

Bedankt voor de vlotte assistentie !

Case closed.