flash

[francist]

Ik weet eigenlijk niet goed waar ik moet beginnen.

Sinds kort heb ik regelmatig problemen met internet. Bij het zoeken valt internet vaak weg voor een tijdje en dan kan ik gewoon weer verder, of moet ik internet opnieuw opstarten. Mijn huisgenoten hebben dat euvel niet op hun computer, 't zal dus wel aan de mijne liggen.

Daarbij kan ik op geen enkele site meer die flash gebruikt, ik krijg telkens de melding dat ik de laatste versie moet installeren. Zelfs als ik het doe blijft dat zelfde zich herhalen. Ik heb Flash al gede-installeerd en opnieuw geïnstalleerd, maar niets help!

er zal dus vast nog wel een en ander mis zijn aan mijn machine... wat staat mij te doen (Hm, voor alle duidelijkheid... ben niet van plan om nieuwe computer te kopen)

[Asus]

Kan je het onderstaande uitvoeren en het gevraagde logje hier in je topic posten ? ...

Download RSIT van de onderstaande locaties en sla deze op het bureaublad op.

Hoe je controleert of je met een 32- of 64-bitversie van Windows werkt kan je hier bekijken.

• RSIT 32 bit (RSIT.exe)
  
• RSIT 64 bit (RSITx64.exe)
  

Dubbelklik op RSIT.exe om de tool te starten.

• Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  
• Vervolgens wordt de "Disclaimer of warranty" getoond, klik vervolgens op "Continue"
  
• Wanneer de tool gereed is worden er twee kladblok bestanden geopend genaamd "Log.txt" en "Info.txt" .
  

RSIT Logbestanden plaatsen

• Voeg het logbestand met de naam "Log.txt" als bijlage toe aan het volgende bericht. (Dit logbestand kunt u tevens terug vinden in de map ""C:\\rsit")
  
• Het logbestand met de naam "Info.txt" wat geminimaliseerd is hoeft u niet te plaatsen. (Dit logbestand wordt enkel de eerst keer bij het uitvoeren aangemaakt).
  
• Hoe u een bijlage kunt toevoegen aan het bericht leest u hier.
  

De handleiding voor het gebruik van RSIT kan je HIER bekijken en we hebben ook nog een instructievideo.

[francist]

Sorry voor het laattijdig reageren. de antwoorden werden naar een oud email adres gestuurd en zo kon ik niet vlot reageren. Nu, in ieder geval hieronder mijn logje zoals je had gevraagd

Logfile of random's system information tool 1.10 (written by random/random)

Run by francist at 2014-10-15 14:14:56

Microsoft Windows 7 Professional Service Pack 1

System drive C: has 388 GB (81%) free of 477 GB

Total RAM: 2814 MB (62% free)

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 14:14:57, on 15/10/2014

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v11.0 (11.00.9600.17280)

Boot mode: Normal

Running processes:

C:\Windows\system32\taskhost.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Program Files\AVG\AVG2014\avgui.exe

C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\Program Files\PC Drivers HeadQuarters\Driver Detective\DriversHQ.DriverDetective.Client.exe

C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe

C:\Program Files\Internet Download Manager\IDMan.exe

C:\Program Files\Internet Download Manager\IEMonitor.exe

C:\Windows\system32\taskeng.exe

C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE

C:\Program Files\CCleaner\CCleaner.exe

C:\Windows\system32\wbem\unsecapp.exe

C:\Program Files\OpenOffice.org 3\program\soffice.exe

C:\Program Files\OpenOffice.org 3\program\soffice.bin

C:\Windows\system32\ctfmon.exe

C:\Program Files\Okidata\OKI C3200 Status Monitor\OPSTM010.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Program Files\Internet Download Manager\idmBroker.exe

C:\Windows\system32\SearchProtocolHost.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Users\francist\Downloads\Programs\RSIT.exe

C:\Program Files\trend micro\francist.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = msn

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = msn

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

R3 - URLSearchHook: (no name) - {4c60e5ab-5c68-4c59-abaa-885010b24b32} - C:\Program Files\FromDocToPDF_65\bar\1.bin\65SrcAs.dll

O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll

O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll

O2 - BHO: Toolbar BHO - {a235e1e3-6296-4710-af39-104a7faa6c7c} - C:\PROGRA~1\FROMDO~2\bar\1.bin\65bar.dll

O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll

O2 - BHO: Search Assistant BHO - {f236ca79-3123-4afb-9f74-e98117ad5625} - C:\Program Files\FromDocToPDF_65\bar\1.bin\65SrcAs.dll

O3 - Toolbar: FromDocToPDF - {c66a678d-5e6c-4af9-8f57-c6192f42cf74} - C:\Program Files\FromDocToPDF_65\bar\1.bin\65bar.dll

O4 - HKLM\..\Run: [bCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\AVG2014\avgui.exe" /TRAYONLY

O4 - HKLM\..\Run: [FromDocToPDF Search Scope Monitor] "C:\PROGRA~1\FROMDO~2\bar\1.bin\65srchmn.exe" /m=2 /w /h

O4 - HKLM\..\Run: [startCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\x86\CLIStart.exe" MSRun

O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

O4 - HKCU\..\Run: [Driver Detective] C:\Program Files\PC Drivers HeadQuarters\Driver Detective\DriversHQ.DriverDetective.Client.exe /applicationMode:systemTray /showWelcome:false

O4 - HKCU\..\Run: [HydraVisionDesktopManager] "C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe"

O4 - HKCU\..\Run: [iDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot

O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

O4 - Startup: OneNote 2010 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE

O4 - Startup: OpenOffice.org 3.4.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe

O4 - Global Startup: NewShortcut1.lnk = ?

O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~1\MICROS~1\Office14\ONBttnIE.dll/105

O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200

O8 - Extra context menu item: Download alle links met IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm

O8 - Extra context menu item: Download met IDM - C:\Program Files\Internet Download Manager\IEExt.htm

O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000

O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll

O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

O23 - Service: ABBYY FineReader 10 PE Licensing Service (ABBYY.Licensing.FineReader.Professional.10.0) - ABBYY - C:\Program Files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe

O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe

O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2014\avgidsagent.exe

O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2014\avgwdsvc.exe

O23 - Service: FromDocToPDFService (FromDocToPDF_65Service) - COMPANYVERS_NAME - C:\PROGRA~1\FROMDO~2\bar\1.bin\65barsvc.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

O23 - Service: OKI OPHC DCS Loader - Oki Data Corporation - C:\Windows\system32\spool\DRIVERS\W32X86\3\OPHCLDCS.EXE

O23 - Service: Print Job Accounting (OkiJaSvc) - Oki Data Corporation - C:\Program Files\Okidata\Print Job Accounting\oklogsvc.exe

O23 - Service: Print Job Accounting Watch Service (OkiWchSvc) - Oki Data Corporation - C:\Program Files\Okidata\Print Job Accounting\okwchsvc.exe

O23 - Service: Print Job Accounting opja0004 (opja0004) - Oki Data Corporation - C:\Program Files\Okidata\Print Job Accounting\opja0004.exe

O23 - Service: OKI Local Port Manager (OpLclSrv) - Oki Data Corporation - C:\Program Files\Okidata\Common\Extend3\portmgrsrv.exe

O23 - Service: RealNetworks Downloader Resolver Service - Unknown owner - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe

--

End of file - 9145 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

C:\Windows\tasks\AutoKMS.job - C:\AutoKMS\AutoKMS.exe

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

C:\Windows\tasks\SW-Booster-S-792098896.job - c:\programdata\trusted publisher\sw-booster\SW-Booster.exe /schedule /profile "c:\programdata\trusted publisher\sw-booster\792098896.ini"

=========Mozilla firefox=========

ProfilePath - C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\ff6km64e.default

prefs.js - "browser.search.useDBForOrder" - true

prefs.js - "browser.startup.homepage" - "Google"

"ocr@babylon.com"=C:\Program Files\Babylon\Babylon-Pro\Utils\ocr@babylon.com

"65ffxtbr@FromDocToPDF_65.com"=C:\Program Files\FromDocToPDF_65\bar\1.bin

"{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}"=C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\

"belgiumeid@eid.belgium.be"=C:\Program Files\Mozilla Firefox\extensions\belgiumeid@eid.belgium.be

"{ABDE892B-13A8-4d1b-88E6-365A6E755758}"=C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]

"Description"=Adobe® Flash® Player 15.0.0.199 Plugin

"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_199.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf]

"Description"=

"Path"=C:\Program Files\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@FromDocToPDF_65.com/Plugin]

"Description"=FromDocToPDF Plugin

"Path"=C:\Program Files\FromDocToPDF_65\bar\1.bin\NP65Stub.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]

"Description"=Picasa3 plugin

"Path"=C:\Program Files\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.67.2]

"Description"=Java™ Deployment Toolkit

"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.67.2]

"Description"=Oracle® Next Generation Java™ Plug-In

"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]

"Description"=

"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]

"Description"=Office Authorization plug-in for NPAPI browsers

"Path"=C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]

"Description"=Microsoft SharePoint Plug-in for Firefox

"Path"=C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=16.0.3.51]

"Description"=RealPlayer LiveConnect-Enabled Plug-In

"Path"=C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprndlchromebrowserrecordext;version=1.3.3]

"Description"=RealNetworks RealDownloader Chrome Background Extension Plug-In

"Path"=C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprndlhtml5videoshim;version=1.3.3]

"Description"=RealNetworks RealDownloader HTML5VideoShim Plug-In

"Path"=C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprndlpepperflashvideoshim;version=1.3.3]

"Description"=RealNetworks RealDownloader Peppe rFlash Video Shim Plug-In

"Path"=C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpplugin;version=16.0.3.51]

"Description"=RealPlayer Download Plugin

"Path"=C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@realnetworks.com/npdlplugin;version=1]

"Description"=RealDownloader Plugin

"Path"=C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]

"Description"=Google Update

"Path"=C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]

"Description"=Google Update

"Path"=C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@VideoDownloadConverter_ScriptHelper.com/Plugin]

"Description"=VideoDownloadConverter_ScriptHelper Plugin

"Path"=C:\Program Files\VideoDownloadConverter\npVDCPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.5]

"Description"=VLC Multimedia Plugin

"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.5]

"Description"=VLC Multimedia Plugin

"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]

"Description"=Handles PDFs in-place in Firefox

"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\

belgiumeid@eid.belgium.be

C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\ff6km64e.default\extensions\

65ffxtbr@FromDocToPDF_65.com

firefox@lemurleap.info

gMvQS@h.net

mhU9iz@K76qh.net

nzM1lY@w.com

sitefinder@sitefinder.com

V@lJ.com

{b9db16a4-6edc-47ec-a1f4-b86292ed211d}

C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\ff6km64e.default\searchplugins\

ask-web-search.xml

conduit-search.xml

trovi-search.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0055C089-8582-441B-A0BF-17B458C2A3A8}]

IDM integration (IDMIEHlprObj Class) - C:\Program Files\Internet Download Manager\IDMIECC.dll [2014-08-20 417816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]

RealNetworks Download and Record Plugin for Internet Explorer - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2013-08-14 542376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]

Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]

Java Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-09-18 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a235e1e3-6296-4710-af39-104a7faa6c7c}]

Toolbar BHO - C:\PROGRA~1\FROMDO~2\bar\1.bin\65bar.dll [2013-09-18 712264]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]

Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

Java Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-09-18 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{f236ca79-3123-4afb-9f74-e98117ad5625}]

Search Assistant BHO - C:\Program Files\FromDocToPDF_65\bar\1.bin\65SrcAs.dll [2013-09-18 62864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{c66a678d-5e6c-4af9-8f57-c6192f42cf74} - FromDocToPDF - C:\Program Files\FromDocToPDF_65\bar\1.bin\65bar.dll [2013-09-18 712264]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2012-11-05 89184]

"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21 959176]

"AVG_UI"=C:\Program Files\AVG\AVG2014\avgui.exe [2014-08-25 5188112]

"FromDocToPDF Search Scope Monitor"=C:\PROGRA~1\FROMDO~2\bar\1.bin\65srchmn.exe [2013-09-18 44784]

"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\x86\CLIStart.exe [2013-08-19 747264]

"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2014-06-25 12021464]

"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2014-07-25 256896]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"Driver Detective"=C:\Program Files\PC Drivers HeadQuarters\Driver Detective\DriversHQ.DriverDetective.Client.exe [2013-09-24 3988888]

"HydraVisionDesktopManager"=C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe [2011-02-09 393216]

"IDMan"=C:\Program Files\Internet Download Manager\IDMan.exe [2014-10-03 3882576]

"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner.exe [2014-09-26 4811032]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Babylon Client]

C:\Program Files\Babylon\Babylon-Pro\Babylon.exe -AutoStart []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Bonus.SSR.FR10]

C:\Program Files\ABBYY FineReader 10\Bonus.ScreenshotReader.exe [2012-01-11 941320]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FromDocToPDF Search Scope Monitor]

C:\PROGRA~1\FROMDO~2\bar\1.bin\65srchmn.exe [2013-09-18 44784]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FromDocToPDF_65 Browser Plugin Loader]

C:\PROGRA~1\FROMDO~2\bar\1.bin\65brmon.exe [2013-09-18 30096]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]

C:\Windows\system32\NeroCheck.exe [2001-07-09 155648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]

C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2014-06-25 12021464]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]

C:\Program Files\Real\RealPlayer\Update\realsched.exe [2014-01-15 295512]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePDRShortCut]

C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe C:\Program Files\CyberLink\PowerDirector UpdateWithCreateOnce Software\CyberLink\PowerDirector\7.0 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VideoDownloadConverter EPM Support]

C:\PROGRA~1\VIDEOD~2\bar\1.bin\4zmedint.exe T8EPMSUP.DLL,S []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VideoDownloadConverter Search Scope Monitor]

C:\PROGRA~1\VIDEOD~2\bar\1.bin\4zsrchmn.exe /m=2 /w /h []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VideoDownloadConverter_4z Browser Plugin Loader]

C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zbrmon.exe []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup

NewShortcut1.lnk - C:\Program Files\USB_video_device\Utility\RemoteTool\BDARemote.exe

C:\Users\francist\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

OneNote 2010 Schermopname en Snel starten.lnk - C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE

OpenOffice.org 3.4.1.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]

"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2013-12-19 4171480]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]

"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"ConsentPromptBehaviorAdmin"=5

"ConsentPromptBehaviorUser"=3

"EnableUIADesktopToggle"=0

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]

"vidc.mrle"=msrle32.dll

"vidc.msvc"=msvidc32.dll

"msacm.imaadpcm"=imaadp32.acm

"msacm.msg711"=msg711.acm

"msacm.msgsm610"=msgsm32.acm

"msacm.msadpcm"=msadp32.acm

"midimapper"=midimap.dll

"wavemapper"=msacm32.drv

"VIDC.UYVY"=msyuv.dll

"VIDC.YUY2"=msyuv.dll

"VIDC.YVYU"=msyuv.dll

"VIDC.IYUV"=iyuv_32.dll

"vidc.i420"=iyuv_32.dll

"VIDC.YVU9"=tsbyuv.dll

"msacm.l3acm"=C:\Windows\System32\l3codeca.acm

"vidc.cvid"=iccvid.dll

"MSVideo8"=VfWWDM32.dll

"wave"=wdmaud.drv

"midi"=wdmaud.drv

"mixer"=wdmaud.drv

"aux"=wdmaud.drv

"wave1"=wdmaud.drv

"midi1"=wdmaud.drv

"mixer1"=wdmaud.drv

"aux1"=wdmaud.drv

"wave2"=wdmaud.drv

"midi2"=wdmaud.drv

"mixer2"=wdmaud.drv

"aux2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-10-15 13:41:22 ----D---- C:\rsit

2014-10-15 13:41:22 ----D---- C:\Program Files\trend micro

2014-10-14 13:51:03 ----A---- C:\Windows\system32\FNTCACHE.DAT

2014-10-12 12:34:47 ----D---- C:\Program Files\ConvertHelper

2014-10-12 10:39:50 ----D---- C:\ProgramData\OpttOn

2014-10-12 10:39:49 ----D---- C:\Program Files\OpttOn

2014-10-12 10:39:33 ----D---- C:\ProgramData\OoptOn

2014-10-12 10:39:32 ----D---- C:\Program Files\OoptOn

2014-10-12 10:39:08 ----D---- C:\Program Files\ORBTR

2014-10-12 10:39:05 ----D---- C:\Program Files\SearchProtect

2014-10-12 10:25:57 ----D---- C:\Users\francist\AppData\Roaming\EZDownloader

2014-10-12 10:22:28 ----A---- C:\Users\francist\AppData\Roaming\regsvr32.exe_log.txt

2014-10-12 10:22:28 ----A---- C:\Users\francist\AppData\Roaming\LiveSupport.exe_log.txt

2014-10-12 10:21:41 ----D---- C:\ProgramData\Trusted Publisher

2014-10-12 10:21:34 ----D---- C:\Program Files\SW-Booster

2014-10-12 10:21:12 ----D---- C:\ProgramData\YoutUBeAdBloacke

2014-10-12 10:21:11 ----D---- C:\Program Files\YoutUBeAdBloacke

2014-10-12 10:20:59 ----D---- C:\ProgramData\GoSSave

2014-10-12 10:20:58 ----D---- C:\Program Files\GoSSave

2014-10-12 10:20:47 ----D---- C:\ProgramData\8842c9b7700a382e

2014-10-11 19:17:59 ----A---- C:\Windows\system32\FlashPlayerApp.exe

2014-10-11 19:17:37 ----D---- C:\Users\francist\AppData\Roaming\RHEng

2014-10-11 19:17:22 ----D---- C:\Users\francist\AppData\Roaming\rmi

2014-10-11 13:33:01 ----D---- C:\Users\francist\AppData\Roaming\IDM

2014-10-11 13:33:01 ----D---- C:\Users\francist\AppData\Roaming\DMCache

2014-10-11 13:33:01 ----D---- C:\ProgramData\IDM

2014-10-11 13:32:26 ----D---- C:\Program Files\Internet Download Manager

2014-10-03 09:08:50 ----A---- C:\Windows\system32\drivers\idmwfp.sys

2014-10-01 01:14:31 ----A---- C:\Windows\system32\qdvd.dll

2014-09-23 22:02:07 ----A---- C:\Windows\system32\tzres.dll

2014-09-18 09:13:01 ----D---- C:\Program Files\Common Files\Java

2014-09-18 09:12:51 ----A---- C:\Windows\system32\javaws.exe

2014-09-18 09:12:38 ----A---- C:\Windows\system32\WindowsAccessBridge.dll

2014-09-18 09:12:38 ----A---- C:\Windows\system32\javaw.exe

2014-09-18 09:12:38 ----A---- C:\Windows\system32\java.exe

2014-09-18 09:12:32 ----D---- C:\Program Files\Java

======List of files/folders modified in the last 1 month======

2014-10-15 14:12:32 ----D---- C:\Windows\Temp

2014-10-15 13:42:46 ----D---- C:\Windows\Prefetch

2014-10-15 13:41:22 ----RD---- C:\Program Files

2014-10-15 13:27:42 ----D---- C:\ProgramData\AVG2014

2014-10-15 08:37:44 ----SHD---- C:\System Volume Information

2014-10-15 08:15:03 ----D---- C:\ProgramData\MFAData

2014-10-15 07:43:04 ----D---- C:\Windows\system32\config

2014-10-14 13:57:32 ----D---- C:\Windows\System32

2014-10-14 13:57:32 ----D---- C:\Windows\inf

2014-10-14 13:57:32 ----A---- C:\Windows\system32\PerfStringBackup.INI

2014-10-14 13:51:48 ----D---- C:\Windows\system32\Tasks

2014-10-14 13:51:17 ----D---- C:\Windows

2014-10-14 13:36:45 ----D---- C:\Users\francist\AppData\Roaming\vlc

2014-10-12 23:00:01 ----D---- C:\Windows\system32\LogFiles

2014-10-12 13:50:37 ----D---- C:\Program Files\Mozilla Firefox

2014-10-12 11:27:22 ----D---- C:\Program Files\CCleaner

2014-10-12 11:26:28 ----D---- C:\Windows\debug

2014-10-12 10:57:05 ----D---- C:\Windows\Tasks

2014-10-12 10:49:22 ----HD---- C:\Program Files\InstallShield Installation Information

2014-10-12 10:49:17 ----SHD---- C:\Windows\Installer

2014-10-12 10:49:17 ----D---- C:\Program Files\CyberLink

2014-10-12 10:45:58 ----D---- C:\Program Files\Ares

2014-10-12 10:39:50 ----HD---- C:\ProgramData

2014-10-12 10:39:18 ----D---- C:\Windows\system32\drivers

2014-10-12 10:39:15 ----D---- C:\Windows\AppPatch

2014-10-12 10:20:46 ----RD---- C:\Users

2014-10-12 10:20:46 ----HD---- C:\Windows\system32\GroupPolicy

2014-10-12 10:20:46 ----D---- C:\Program Files\Google

2014-10-05 18:10:07 ----D---- C:\Users\francist\AppData\Roaming\dvdcss

2014-10-01 03:01:26 ----D---- C:\Windows\winsxs

2014-10-01 01:13:59 ----D---- C:\Windows\system32\catroot

2014-09-29 13:06:41 ----D---- C:\Windows\rescache

2014-09-27 15:14:11 ----D---- C:\Program Files\Opera

2014-09-24 03:00:41 ----D---- C:\Windows\system32\nl-NL

2014-09-18 11:49:31 ----D---- C:\AutoKMS

2014-09-18 09:38:08 ----D---- C:\ProgramData\Oracle

2014-09-18 09:13:01 ----D---- C:\Program Files\Common Files

2014-09-18 09:12:00 ----D---- C:\Windows\system32\catroot2

2014-09-16 13:00:05 ----D---- C:\Windows\system32\NDF

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHX;AVGIDSHX; C:\Windows\system32\DRIVERS\avgidshx.sys [2014-06-17 147736]

R0 Avglogx;AVG Logging Driver; C:\Windows\system32\DRIVERS\avglogx.sys [2014-06-17 241944]

R0 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx86.sys [2014-08-06 98584]

R0 Avgrkx86;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx86.sys [2014-06-17 27416]

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]

R1 Avgdiskx;AVG Disk Driver; C:\Windows\system32\DRIVERS\avgdiskx.sys [2014-06-30 121624]

R1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdriverx.sys [2014-07-21 200984]

R1 AVGIDSShim;AVGIDSShim; C:\Windows\system32\DRIVERS\avgidsshimx.sys [2014-06-17 21272]

R1 Avgldx86;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx86.sys [2014-06-17 188696]

R1 Avgtdix;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdix.sys [2014-06-17 197400]

R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]

R2 AODDriver4.2;AODDriver4.2; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys [2012-11-20 48808]

R2 IDMWFP;IDMWFP; C:\Windows\system32\DRIVERS\idmwfp.sys [2014-10-01 115240]

R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]

R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atipmdag.sys [2010-03-03 5340160]

R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-03-03 152064]

R3 AtiHDAudioService;ATI Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW73.sys [2010-11-17 101392]

R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2014-06-25 3086040]

R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2013-09-17 543336]

R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2012-08-28 45736]

S3 aic78xx;aic78xx; C:\Windows\system32\drivers\djsvs.sys [2009-07-14 70720]

S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]

S3 amdiox86;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox86.sys []

S3 AODDriver4.0;AODDriver4.0; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys [2012-11-20 48808]

S3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-01-28 100352]

S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-03-03 5340160]

S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]

S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2014-01-22 88576]

S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-20 62464]

S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]

S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]

S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]

S3 SMIGrabber3C;SMI Grabber Device Tuner Filter 3C; C:\Windows\System32\Drivers\SmiUsbGrabber3C.sys [2011-01-26 805888]

S3 SPPD;SPPD; \??\C:\Windows\system32\drivers\SPPD.sys []

S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2014-01-22 184192]

S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]

S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]

S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]

S3 USB28xxBGA;USB 2863 Device; C:\Windows\system32\DRIVERS\emBDA.sys [2008-05-14 535040]

S3 USB28xxOEM;USB 28xx OEM Filter; C:\Windows\system32\DRIVERS\emOEM.sys [2008-05-14 286208]

S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]

S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\drivers\viac7.sys [2009-07-14 52736]

S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]

S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]

S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ABBYY.Licensing.FineReader.Professional.10.0;ABBYY FineReader 10 PE Licensing Service; C:\Program Files\Common Files\ABBYY\FineReader\10.00\Licensing\PE\NetworkLicenseServer.exe [2010-07-22 814344]

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-12 64704]

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-03-03 172032]

R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2013-08-19 276992]

R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files\AVG\AVG2014\avgidsagent.exe [2014-08-25 3242000]

R2 avgwd;AVG WatchDog; C:\Program Files\AVG\AVG2014\avgwdsvc.exe [2014-08-25 289328]

R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]

R2 FromDocToPDF_65Service;FromDocToPDFService; C:\PROGRA~1\FROMDO~2\bar\1.bin\65barsvc.exe [2013-09-18 42504]

R2 OKI OPHC DCS Loader;OKI OPHC DCS Loader; C:\Windows\system32\spool\DRIVERS\W32X86\3\OPHCLDCS.EXE [2007-05-29 24576]

R2 OkiJaSvc;Print Job Accounting; C:\Program Files\Okidata\Print Job Accounting\oklogsvc.exe [2013-05-28 299008]

R2 OkiWchSvc;Print Job Accounting Watch Service; C:\Program Files\Okidata\Print Job Accounting\okwchsvc.exe [2010-09-01 49152]

R2 opja0004;Print Job Accounting opja0004; C:\Program Files\Okidata\Print Job Accounting\opja0004.exe [2013-04-18 140800]

R2 OpLclSrv;OKI Local Port Manager; C:\Program Files\Okidata\Common\Extend3\portmgrsrv.exe [2012-03-28 147456]

R2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [2013-08-14 39056]

R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]

S2 Orbiter;Orbiter; C:\Windows\System32\svchost.exe [2009-07-14 20992]

S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-10-12 267440]

S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]

S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2014-03-11 136120]

S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-08-18 108032]

S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 30814400]

S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-09-04 119408]

S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]

S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]

S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]

S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]

S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-09-05 1343400]

S4 aspnet_state;ASP.NET-statusservice; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]

S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

[Asus]

Geen probleem hoor ... ;-)

Zodra één van de malware-experts online komt gebeurt de analyse van je logje en krijg je verdere persoonlijke begeleiding.

[kape]

Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe (hier en hier) kan je lezen hoe je dat doet.

Download Zoek.exe naar het bureaublad (niet de .zip- of .rar-versie)

• Wanneer Internet Explorer of een andere browser of virusscanner melding geeft dat dit bestand onveilig zou zijn kun je negeren, dit is namelijk een onterechte waarschuwing.
  
• Dubbelklik op Zoek.exe om de tool te starten.
  
• Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  
• Kopieer nu onderstaande code en plak die in het grote invulvenster:
  
• Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.
  

  {4c60e5ab-5c68-4c59-abaa-885010b24b32};c
 C:\Program Files\FromDocToPDF_65;fs
 {a235e1e3-6296-4710-af39-104a7faa6c7c};c
 {f236ca79-3123-4afb-9f74-e98117ad5625};c
 {c66a678d-5e6c-4af9-8f57-c6192f42cf74};c
 FromDocToPDF Search Scope Monitor;s
 FromDocToPDF_65Service;s
 C:\Windows\tasks\AutoKMS.job;f
 C:\AutoKMS;fs
 C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\ff6km64e.default\extensions\[email="65ffxtbr@FromDocToPDF_65.com"]65ffxtbr@FromDocToPDF_65.com[/email];fs
 C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\ff6km64e.default\extensions\[email="firefox@lemurleap.info"]firefox@lemurleap.info[/email];fs
 C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\ff6km64e.default\extensions\[email="gMvQS@h.net"]gMvQS@h.net[/email];fs
 C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\ff6km64e.default\extensions\[email="mhU9iz@K76qh.net"]mhU9iz@K76qh.net[/email];fs
 C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\ff6km64e.default\extensions\[email="nzM1lY@w.com"]nzM1lY@w.com[/email];fs
 C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\ff6km64e.default\extensions\[email="sitefinder@sitefinder.com"]sitefinder@sitefinder.com[/email];fs
 C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\ff6km64e.default\extensions\[email="V@lJ.com"]V@lJ.com[/email];fs
 C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\ff6km64e.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d};fs
 C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\ff6km64e.default\searchplugins\ask-web-search.xml;f
 C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\ff6km64e.default\searchplugins\conduit-search.xml;f
 C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\ff6km64e.default\searchplugins\trovi-search.xml;f
 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a235e1e3-6296-4710-af39-104a7faa6c7c}];r
 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{f236ca79-3123-4afb-9f74-e98117ad5625}];r
 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run];r
 "FromDocToPDF Search Scope Monitor"=-;r
 [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Babylon Client];r
 [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FromDocToPDF Search Scope Monitor];r
 [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FromDocToPDF_65 Browser Plugin Loader];r
 [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VideoDownloadConverter EPM Support];r
 [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VideoDownloadConverter Search Scope Monitor];r
 [-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VideoDownloadConverter_4z Browser Plugin Loader];r
 C:\ProgramData\OpttOn;fs
C:\Program Files\OpttOn;fs
C:\ProgramData\OoptOn;fs
C:\Program Files\OoptOn;fs
C:\Program Files\ORBTR;fs
C:\Program Files\SearchProtect;fs
 C:\ProgramData\YoutUBeAdBloacke;fs
C:\Program Files\YoutUBeAdBloacke;fs
C:\ProgramData\GoSSave;fs
C:\Program Files\GoSSave;fs
C:\ProgramData\8842c9b7700a382e;fs
 emptyfolderscheck;delete 
startupall; 
filesrcm;

• Klik op de knop "More options" en vink nu de onderstaande opties aan.
  
• Do a Quick Scan
  
  
• Auto Clean
  
• De optie "Scan All Users" staat standaard aangevinkt.
  
• Klik nu op de knop "Run script".
  
• Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
  
• Mocht er geen logje verschijnen, start zoek.exe dan opnieuw en klik op de knop zoek-results.log, de log verschijnt dan alsnog.
  
• Post het geopende logje in het volgende bericht als bijlage.
  

Zoek.exe logbestand plaatsen

• Voeg het logbestand met de naam "Zoek-results.log" als bijlage toe aan het volgende bericht. (Dit logbestand kunt u tevens terug vinden op de systeemschijf als C:\\Zoek-results.log.)
  
• Hoe u een bijlage kunt toevoegen aan het bericht leest u hier.
  

[francist]

het logje ingevoerd zoald gevraagd, hopelijk is het gelukt

[ATTACH]36515[/ATTACH]

Zoek.exe v5.0.0.0 Updated 16-10-2014

Tool run by francist on do 16/10/2014 at 10:51:54,85.

Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x86

Running in: Normal Mode Internet Access Detected

Launched: C:\Users\francist\Downloads\Programs\zoek.exe [scan all users] [script inserted] [Checkboxes used]

==== System Restore Info ======================

16/10/2014 10:54:17 Zoek.exe System Restore Point Created Succesfully.

==== Empty Folders Check ======================

C:\Program Files\AVS4YOU deleted successfully

C:\Program Files\Mega Browse deleted successfully

C:\Program Files\ORBTR deleted successfully

C:\Program Files\SimilarSites deleted successfully

C:\Program Files\SW-Booster deleted successfully

C:\PROGRA~2\IDM deleted successfully

C:\PROGRA~2\Oracle deleted successfully

C:\Users\francist\AppData\Roaming\Foxit Reader deleted successfully

C:\Users\francist\AppData\Roaming\PerformerSoft deleted successfully

C:\Users\francist\AppData\Roaming\SimilarSites deleted successfully

C:\Users\francist\AppData\Roaming\Systweak deleted successfully

C:\Users\francist\AppData\Local\Bundled software uninstaller deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-3730078115-3281393171-2249441152-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{a235e1e3-6296-4710-af39-104a7faa6c7c} deleted successfully

HKEY_USERS\S-1-5-21-3730078115-3281393171-2249441152-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{a235e1e3-6296-4710-af39-104a7faa6c7c} deleted successfully

HKEY_USERS\S-1-5-21-3730078115-3281393171-2249441152-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{f236ca79-3123-4afb-9f74-e98117ad5625} deleted successfully

HKEY_USERS\S-1-5-21-3730078115-3281393171-2249441152-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{f236ca79-3123-4afb-9f74-e98117ad5625} deleted successfully

HKEY_USERS\S-1-5-21-3730078115-3281393171-2249441152-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{c66a678d-5e6c-4af9-8f57-c6192f42cf74} deleted successfully

HKEY_USERS\S-1-5-21-3730078115-3281393171-2249441152-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{c66a678d-5e6c-4af9-8f57-c6192f42cf74} deleted successfully

HKEY_USERS\S-1-5-21-3730078115-3281393171-2249441152-1000\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} deleted successfully

HKEY_USERS\S-1-5-21-3730078115-3281393171-2249441152-1000\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} deleted successfully

HKEY_USERS\S-1-5-21-3730078115-3281393171-2249441152-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} deleted successfully

HKEY_USERS\S-1-5-21-3730078115-3281393171-2249441152-1000\Software\Microsoft\Internet Explorer\SearchScopes\{9a216821-0ec5-49a3-85ac-fb72ae79a1e8} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{4c60e5ab-5c68-4c59-abaa-885010b24b32} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{a235e1e3-6296-4710-af39-104a7faa6c7c} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a235e1e3-6296-4710-af39-104a7faa6c7c} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{f236ca79-3123-4afb-9f74-e98117ad5625} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{f236ca79-3123-4afb-9f74-e98117ad5625} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{c66a678d-5e6c-4af9-8f57-c6192f42cf74} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-3730078115-3281393171-2249441152-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\{4c60e5ab-5c68-4c59-abaa-885010b24b32} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{c66a678d-5e6c-4af9-8f57-c6192f42cf74} deleted successfully

==== Deleting Services ======================

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FromDocToPDF_65Service deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\FromDocToPDF_65Service deleted successfully

==== FireFox Fix ======================

ProfilePath: C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\ff6km64e.default

---- Lines delta removed from prefs.js ----

user_pref("extensions.delta.admin", false);

user_pref("extensions.delta.aflt", "babsst");

user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");

user_pref("extensions.delta.autoRvrt", "false");

user_pref("extensions.delta.dfltLng", "nl");

user_pref("extensions.delta.excTlbr", false);

user_pref("extensions.delta.ffxUnstlRst", true);

user_pref("extensions.delta.id", "84bd1111000000000000001fd0d9b756");

user_pref("extensions.delta.instlDay", "15986");

user_pref("extensions.delta.instlRef", "sst");

user_pref("extensions.delta.newTab", false);

user_pref("extensions.delta.prdct", "delta");

user_pref("extensions.delta.prtnrId", "delta");

user_pref("extensions.delta.rvrt", "false");

user_pref("extensions.delta.smplGrp", "none");

user_pref("extensions.delta.tlbrId", "base");

user_pref("extensions.delta.tlbrSrchUrl", "");

user_pref("extensions.delta.vrsn", "1.8.24.6");

user_pref("extensions.delta.vrsnTs", "1.8.24.618:44:35");

user_pref("extensions.delta.vrsni", "1.8.24.6");

user_pref("extensions.delta_i.babExt", "");

user_pref("extensions.delta_i.babTrack", "affID=119776&tl=2193_&tsp=5029");

user_pref("extensions.delta_i.srcExt", "ss");

---- Lines delta removed from user.js ----

user_pref("extensions.delta.tlbrSrchUrl", "");

user_pref("extensions.delta.id", "84bd1111000000000000001fd0d9b756");

user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");

user_pref("extensions.delta.instlDay", "15986");

user_pref("extensions.delta.vrsn", "1.8.24.6");

user_pref("extensions.delta.vrsni", "1.8.24.6");

user_pref("extensions.delta.vrsnTs", "1.8.24.618:44:35");

user_pref("extensions.delta.prtnrId", "delta");

user_pref("extensions.delta.prdct", "delta");

user_pref("extensions.delta.aflt", "babsst");

user_pref("extensions.delta.smplGrp", "none");

user_pref("extensions.delta.tlbrId", "base");

user_pref("extensions.delta.instlRef", "sst");

user_pref("extensions.delta.dfltLng", "nl");

user_pref("extensions.delta.excTlbr", false);

user_pref("extensions.delta.ffxUnstlRst", true);

user_pref("extensions.delta.admin", false);

user_pref("extensions.delta_i.babTrack", "affID=119776&tl=2193_&tsp=5029");

user_pref("extensions.delta_i.babExt", "");

user_pref("extensions.delta_i.srcExt", "ss");

user_pref("extensions.delta.autoRvrt", "false");

user_pref("extensions.delta.rvrt", "false");

user_pref("extensions.delta.newTab", false);

---- FireFox user.js and prefs.js backups ----

user_20141610_1104_.backup

prefs_20141610_1104_.backup

==== Registry Fix Code ======================

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a235e1e3-6296-4710-af39-104a7faa6c7c}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{f236ca79-3123-4afb-9f74-e98117ad5625}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"FromDocToPDF Search Scope Monitor"=-

[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Babylon Client]

[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FromDocToPDF Search Scope Monitor]

[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FromDocToPDF_65 Browser Plugin Loader]

[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VideoDownloadConverter EPM Support]

[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VideoDownloadConverter Search Scope Monitor]

[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VideoDownloadConverter_4z Browser Plugin Loader]

==== Deleting Files \ Folders ======================

C:\Program Files\ORBTR not found

C:\Program Files\YoutUBeAdBloacke deleted

C:\ProgramData\YoutUBeAdBloacke deleted

C:\Program Files\GoSSave deleted

C:\ProgramData\GoSSave deleted

C:\Program Files\FromDocToPDF_65 deleted

C:\AutoKMS deleted

C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\ff6km64e.default\extensions\65ffxtbr@FromDocToPDF_65.com deleted

C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\ff6km64e.default\extensions\firefox@lemurleap.info deleted

C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\ff6km64e.default\extensions\gMvQS@h.net deleted

C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\ff6km64e.default\extensions\mhU9iz@K76qh.net deleted

C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\ff6km64e.default\extensions\nzM1lY@w.com deleted

C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\ff6km64e.default\extensions\sitefinder@sitefinder.com deleted

C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\ff6km64e.default\extensions\V@lJ.com deleted

C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\ff6km64e.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} deleted

C:\ProgramData\OpttOn deleted

C:\Program Files\OpttOn deleted

C:\ProgramData\OoptOn deleted

C:\Program Files\OoptOn deleted

C:\ProgramData\8842c9b7700a382e deleted

C:\Program Files\Video-Saver deleted

C:\Users\francist\appdata\locallow\FromDocToPDF_65 deleted

C:\Program Files\TornTV.com deleted

C:\Program Files\Babylon deleted

C:\Program Files\SearchProtect deleted

C:\UNWISE.EXE deleted

C:\Users\francist\AppData\Roaming\EZDownloader deleted

C:\PROGRA~2\APN deleted

C:\PROGRA~2\Avg_Update_0414b deleted

C:\PROGRA~2\Trusted Publisher deleted

C:\PROGRA~2\DSearchLink deleted

C:\PROGRA~2\IBUpdaterService deleted

C:\PROGRA~2\Package Cache deleted

C:\Users\francist\AppData\Local\SearchProtect deleted

C:\Users\francist\AppData\Local\IAC deleted

C:\Users\francist\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager deleted

C:\Users\francist\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TornTV.com deleted

C:\Users\francist\Downloads\sysrc_trial_25044.exe deleted

C:\Users\francist\Downloads\Babylon10_setup.exe deleted

C:\Users\francist\AppData\LocalLow\IAC deleted

C:\Users\francist\AppData\LocalLow\Delta deleted

C:\Windows\tasks\SW-Booster-S-792098896.job deleted

C:\Windows\system32\tasks\SW-Booster-S-792098896 deleted

C:\Windows\system32\config\systemprofile\Searches deleted

C:\Windows\system32\roboot.exe deleted

C:\Windows\system32\RegistryHelperLM.ocx deleted

C:\Windows\System32\searchplugins deleted

C:\Windows\System32\Extensions deleted

C:\Users\francist\Documents\Optimizer Pro deleted

C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\ff6km64e.default\searchplugins\ask-web-search.xml deleted

C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\ff6km64e.default\searchplugins\conduit-search.xml deleted

C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\ff6km64e.default\searchplugins\trovi-search.xml deleted

C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\ff6km64e.default\jetpack deleted

C:\Users\francist\Desktop\sleutels\SoftonicDownloader_voor_vlc-media-player.exe deleted

C:\Users\francist\Desktop\Search.lnk deleted

"C:\Windows\tasks\AutoKMS.job" deleted

"C:\Program Files\Internet Download Manager\IDMan.exe" deleted

"C:\Program Files\Internet Download Manager\idmBroker.exe" deleted

"C:\Program Files\Internet Download Manager\idmftype.dll" deleted

"C:\Program Files\Internet Download Manager\idmmkb.dll" deleted

"C:\Program Files\Internet Download Manager\IDMNetMon.dll" deleted

"C:\Program Files\Internet Download Manager\IDMShellExt.dll" deleted

"C:\Program Files\Internet Download Manager\IEMonitor.exe" deleted

"C:\Users\francist\AppData\Local\FromDocToPDF_65" deleted

"C:\Program Files\Internet Download Manager" not deleted

==== Files Recently Created / Modified ======================

====== C:\Windows ====

====== C:\Users\francist\AppData\Local\Temp ====

2014-10-12 08:22:37 C0FF66D6529C9228AC9D3105B8283B3E 3042064 ----a-w- C:\Users\francist\AppData\Local\Temp\drvprosetup.exe

2014-10-12 08:22:25 D2D6341A87CC3995ABE80F505B6E112A 1207264 ----a-w- C:\Users\francist\AppData\Local\Temp\LiveSupport_setup.exe

2014-10-12 08:22:16 8EB256AD87ABE5397EC826A3E778B149 4245584 ----a-w- C:\Users\francist\AppData\Local\Temp\optprosetup.exe

2014-10-11 12:58:40 6F863592B75D156A15FC05070A6668EB 661416 ---ha-w- C:\Users\francist\AppData\Local\Temp\D1d0\temp\embededstub.exe

2014-10-11 12:58:40 6F863592B75D156A15FC05070A6668EB 661416 ---ha-w- C:\Users\francist\AppData\Local\Temp\733E3ca37E69B\temp\embededstub.exe

====== Java Cache =====

2014-10-14 13:31:16 A537385D87AD3B252B3839219DCD0B3C 5690 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\0\1ea61680-370d047a

2014-10-14 13:31:06 9D18C06B0D2A479DDC54448EE519E136 4303 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\0\29713240-2e3b20ea

2014-10-14 13:31:15 0596584451EB11881990624EB588B5FE 5625 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\0\37286880-22a4400c

2014-10-14 13:31:11 7CFFC3B03FCC3F565C1503E37469F753 4749 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\0\51f6aa00-44e4a072

2014-10-14 13:31:10 4AC2D416DD11EA557CA8755D90A4E8BC 4647 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\0\7315fa80-289e14d9

2014-10-14 13:31:08 7073E1F61844DCEF3C9D870229AED2F4 540 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\21726481-233cc491

2014-10-14 13:31:16 E1EFAF56F1608EA7E8FA1C254C6128EB 292 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\25dffd41-7d812587

2014-10-14 13:31:18 982C3D4819BFC26C42F7567E84CE0D82 4970 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\3eaabc01-27a0c8b4

2014-10-14 13:31:07 471ADF115FCB284696816E4F83A42509 470 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\5412b981-5a78762c

2014-10-14 13:31:05 AD561BA257E92D9358E6A73993B03E9E 401 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10\332bb80a-5d182e6a

2014-10-14 13:31:17 A8C029EB3CF1F16F29D215AF2E37F317 6167 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10\e34ea8a-580b6571

2014-10-14 13:31:15 F7961781379EE585C8499013D3A79940 5572 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\11\69d682cb-6b16ea42

2014-10-14 13:31:12 D86865A399ECCB13B2D973EEF10550B4 737 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\11\6d78840b-40067739

2014-10-14 13:31:08 4F969C64FCDAADC5B4A770A669EFB620 354 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\11\6f1878b-3f14b342

2014-10-14 13:31:06 48AB07B502E9D054E0527DCEA4B8E974 4776 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\11\ec2aa4b-535046de

2014-10-14 13:31:12 504E29C27819B603870E59C0CF8DF917 452 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12\66725cc-5ebc3afb

2014-10-14 13:31:17 4436847F93FC149AA646912206827FCE 541 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12\f916b0c-7f3e9310

2014-10-14 13:31:11 8DE1FC4B78355CAD6157A2C0625AA4F8 669 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\13\5c2d684d-61850785

2014-10-14 13:31:06 03EEFA8A5964DCF07DF50F793AC35A6B 443 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\14\2b2b9f4e-3afa3489

2014-10-14 13:31:11 B299AA96872CD48F2F61E1118EFCE0D8 3869 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\14\5ab1794e-4c8a7441

2014-10-14 13:31:09 914353ABFEC5A5707D1C3218E0C40655 532 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\14\76304e0e-2ce4e700

2014-10-14 13:31:15 D4A1594E4C278EA8670EFE89340B6674 515 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15\63b0918f-11ae5f15

2014-10-14 13:31:09 1C32D60C26D584F6A545CC6699BA3413 5351 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\16\161c4850-2420549e

2014-10-14 13:31:18 C3A32AC44F0043B65F467CB94D4E0534 822 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\17\402bee91-4c4af148

2014-10-14 13:31:05 408A8CEF60EB4CAF7514D007D90DBE66 617 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\17\43509791-330976f9

2014-10-14 13:31:18 E2CD6722EE6A48AD5121BCA758CE9E6F 5898 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18\1312df92-1f2c9260

2014-10-14 13:31:15 1A8886AE52050E6B64E4856F6E0A55A3 6016 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18\591bff52-6d4a7e20

2014-10-14 13:31:06 E1EFAF56F1608EA7E8FA1C254C6128EB 292 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2\10583b02-5ed4f0a9

2014-10-14 13:31:09 E4B4599F9710CD5244B168B23FE91703 659 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2\6c7fd502-2c4f7a03

2014-10-14 13:31:07 6E140190755A0B0A38711608D24EEF92 156 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2\75e64082-3ca14cdd

2014-10-14 13:31:18 B00C31C7A91AA50A4BBA0BE370E37C75 3540 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20\49838a14-3095a39e

2014-10-14 13:31:18 0F1104E41964883A42C37EF52D04508F 763 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\21\4b653515-6d86886b

2014-10-14 13:31:10 45815D21AE2794B408CB15D621F8097F 782 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22\165603d6-35ddfc96

2014-10-14 13:31:14 C44479A8EAF7895C1EFE354BEA0DE171 4139 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22\26109e96-410b963a

2014-10-14 13:31:12 828E902B3956FE44A374CDC61FF62D0A 675 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22\311688d6-5fded9bb

2014-10-14 13:31:15 66AE4CDCFCA6694B2130D686C0BAC12C 674 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\22\31446056-3545b7a3

2014-10-14 13:31:05 945C62DAB404C8C6FE2108A37F558A29 1423 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\23\21a0cbd7-1d7dd178

2014-10-14 13:31:16 14E689D0528CDB5A78FCA6F6EE60AD0B 5357 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\23\24349197-44121697

2014-10-14 13:31:14 740457FA0CBB4C72A32A1A81B0E7A9F4 5357 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\23\39294097-17b24fb2

2014-10-14 13:31:11 4EF5798D01A583DD91106671EA69EC24 5808 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\23\48300697-4840632f

2014-10-14 13:31:06 F55E6020D2702EF1C07D960F99D8F1DD 4990 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\23\4b639a17-5c78c1da

2014-10-14 13:31:11 1F4501A82AC541C7B4E5D734AC3ED4CB 5043 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24\2d85f2d8-208e09ce

2014-10-14 13:31:10 2A4C5F528A76AB53D2A126D1C0922133 687 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25\74be0199-3c2ae3b2

2014-10-14 13:31:08 D1D276709F29A1A400D92DECACD9D013 4465 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\26\41be289a-194e6a32

2014-10-14 13:31:11 D12BDE0A8190A77D8EC41C7219026652 536 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27\49a966db-5ce589d5

2014-10-14 13:31:07 129FA057A563638C33A1E8C941B49E1D 324 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27\5e1c1f1b-39f9d3b8

2014-10-14 13:31:14 3E5251E2851C617B1A12283C1503D775 5298 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27\715d769b-66dd0607

2014-10-14 13:31:10 4BC1230AABAA9286C288A17F4BFACEE1 5587 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29\380e2e5d-51f80d7f

2014-10-14 13:31:15 AFCBEAE1A40B1A970217BB5B587F2523 692 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29\5ab4191d-17d8c708

2014-10-14 13:31:10 D10ACDA8A9E4CF16F60A06CE7B8D7FB8 489 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29\5bb4c8dd-235db0f5

2014-10-14 13:30:57 022215A638E6FE34FBCC6BB0014D1363 101 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\3\28b5bfc3-36626f68315a072aa21f9869f4747262ccbee639fcf5e6a057814882e45e6e48-6.0.lap

2014-10-14 13:31:12 A95BE2178F7D1351473ACEAC198BFF72 3835 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\3\2f705643-400b1d3c

2014-10-14 13:31:17 23BCBFDA663122A815255E7EA77DDCAB 798 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\3\368f8383-35f2fcfe

2014-10-14 13:31:18 7BCD9B0DAF1A6B5B8721836AACAEC006 5356 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\30\511a101e-73eec2c9

2014-10-14 13:31:15 BEABA76571E99C3B7A1E804FFD15F35E 514 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\30\f3eb91e-6499c49e

2014-10-14 13:31:13 58F8E1701FD71BD612666ABF83A486E8 446 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33\17139aa1-71c589c1

2014-10-14 13:31:12 96F5FFB8CD8021465C63C27F0FAD5113 6000 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33\bd1f061-4cbd46bb

2014-10-14 13:31:12 28333F62D650F92802855E6F30EC8D23 5794 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\34\1c85b962-1e05cbe6

2014-10-14 13:31:13 7BAABEA16437709A60ACC3712883C30B 588 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\35\1e619e23-6b0a77c4

2014-10-14 13:31:07 4B25A0F6539EA9E35D6BC6983CE32A97 3196 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\35\5c7beee3-2a9bb2e7

2014-10-14 13:31:05 75FBDEA43BA8AC5ADBBD3CC198C9E807 4184 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\35\75319e3-2d20cd3f

2014-10-14 13:31:05 66373198B8828FF7C5DD427A9243C9F3 342 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36\2557e5e4-25d625dd

2014-10-14 13:31:04 BB5F8F083A009D1286F52A4651EA8A1D 12722 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36\2a975e4-7fd6c600

2014-10-14 13:31:17 00C20A5531DD3038C9C0C3BFD5E16035 5384 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36\348bdfa4-34d351fa

2014-10-14 13:31:16 92626867B3F56963C80300A304213EAD 5474 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36\4077e364-11c96d18

2014-10-14 13:31:06 471ADF115FCB284696816E4F83A42509 470 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\37\6efffbe5-1b7e250f

2014-10-14 13:31:06 9EC3E6A3BF927024282762B629E08237 4941 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\38\30b4ce26-7e073847

2014-10-14 13:31:13 BDBC40AC7AD51DAD7BC76B3EA3FF8AC4 688 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\38\5514b666-66c60cc5

2014-10-14 13:31:13 32A7F973124C39EFB02BC56AFD859727 5311 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39\53462727-1fc51af9

2014-10-14 13:31:07 BE5B98FBB0449D08E1B6F04F1E90A4DF 4836 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39\74599aa7-3462350c

2014-10-14 13:31:11 BD2D7EAA0C43C25E23F01190B0BB3C78 28340 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39\74cc9627-1e5be0ca

2014-10-14 13:31:13 6928ECEFFA136CB6CEB7368BF44DD239 6221 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\4\6062e2c4-4edc6082

2014-10-14 13:31:06 28A5A1F27BFE24CF82CD427846141445 4904 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\4\6d105ac4-1f14cc8a

2014-10-14 13:31:07 8125A8E7F9E158CF4E87124768725301 3992 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\4\7dfbe384-64c33e90

2014-10-14 13:31:18 930EEAE26E6D331E4ABB5E1DBA4E1566 539 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\40\14e83c68-12b2812a

2014-10-14 13:31:13 199E7FCE434E801097B173D8FD713562 3839 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\40\1c968668-55d5c8cd

2014-10-14 13:31:16 BCABEF1E97A0C75226EF76F2F5C4F90B 533 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\41\20351629-5d48050d

2014-10-14 13:31:08 569CAA3AEA99D2DF5DA734FCB6E0CF2D 502 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\41\28c83429-78d95516

2014-10-14 13:31:16 814FB4315C31BBF2C950185F25D89B8E 895 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\41\41e42969-78ccdfc7

2014-10-14 13:31:14 C0E1F82352377C7C3AEFA19873D051DA 704 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42\27fdef2a-69a63297

2014-10-14 13:31:05 A208095E22B28F46B219229DA285D47B 1309 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\42\68132d2a-7d9b6f31

2014-10-14 13:31:17 2021C29C7157A0A8097BDC1F06E251B5 850 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\43\50eea7eb-73cfe665

2014-10-14 13:31:16 AF26E7201FB150DE7BFAF7221A907665 4662 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\43\7577edeb-3b7816e9

2014-10-14 13:31:12 39AFB9714659DCCDDE4FEA57ABA8F108 4520 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\45\490ee6d-532e73c1

2014-10-14 13:31:05 7CB850F134C090A7A53C56F7D30B871D 982 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\45\677d2ead-6106117c

2014-10-14 13:31:06 7CB850F134C090A7A53C56F7D30B871D 982 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\46\4cdf0aae-2c037bbd

2014-10-14 13:31:13 58F8E1701FD71BD612666ABF83A486E8 446 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\46\62381f6e-6db216c8

2014-10-14 13:31:06 03EEFA8A5964DCF07DF50F793AC35A6B 443 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\46\92b062e-5cf9c264

2014-10-14 13:31:09 DDCDD19283986DAF3F8C2061DE78842F 903 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\46\e7f05ee-687c906c

2014-10-14 13:31:04 47AAB3329FE17E2F3C90EA3744037517 3199 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\47\2440762f-4395f3e3

2014-10-14 13:31:16 86CF3B422A18570816A42438E1C43B10 557 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\47\76d5bd6f-4c4711a9

2014-10-14 13:31:07 FC94236C1AA27C61794EE265E71F0900 4028 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\48\1f917a70-3d57ec36

2014-10-14 13:31:05 0DCC6F5AD7329A97C7235ADAE1CCD78E 4899 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\48\65ca8ff0-564b455a

2014-10-14 13:31:14 36044C111C111E81C78CBBDC9BC3AEB1 3740 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\48\da0f930-1668a770

2014-10-14 13:31:13 502B6D650CDA6DF522BDBD07B763A6E3 6093 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5\1535ea05-5fd61baa

2014-10-14 13:31:16 F6B2EA430DB24CE30B1B22A6BAD48BA0 4918 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5\173edbc5-73d9a384

2014-10-14 13:31:08 C8D52CDB43DA554703D79F16502DF8C7 4004 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5\634a1985-2fb2c158

2014-10-14 13:31:09 970BA351CE27D1B838C8422B07E9F9A8 4212 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5\748f9b05-4f7ce867

2014-10-14 13:31:17 F75188333C70062E166E8B200B41F4D1 4630 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5\7c74f605-61ac5aad

2014-10-14 13:31:08 7DFD1415F678B1EA8350FE42EBDDFC13 2901 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50\272f3b72-370e2401

2014-10-14 13:31:17 BE6F588A8359BE98F9B2D7142EA34FA0 4860 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50\36bbffb2-6d53b627

2014-10-14 13:31:15 D73CC9BD58E872B9178CD0D6EE9213C8 532 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\50\38b28872-512a3ae0

2014-10-14 13:31:15 148A4853257601D21043CFD987CCA129 3792 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\51\61c92133-4ae00293

2014-10-14 13:31:09 6B78E14EE52A8A1AA6BDFD0DBFAF71F3 362 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\17f1a1b4-59c7951c

2014-10-14 13:31:11 358647288757816D8A35891E9B551407 597 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\2f28b7f4-55f189e8

2014-10-14 13:31:05 02F2A537DEBAD3838B075576D9F9A481 357 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\3fe0b974-3be8e0ad

2014-10-14 13:31:10 8FE72BC0DF4733214052BE5409C2E926 4108 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\59dbcbf4-44eb1f89

2014-10-14 13:31:12 40A8DD9848EDF29DCFF1378346AF8822 618 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\52\d6d9274-5526f063

2014-10-14 13:31:15 6FA66133648D5B55DCBBA64C5C2BA1D6 362 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53\6b4dde75-4ff3745f

2014-10-14 13:31:14 D47A53D4D00BA636EFC886490A5AD904 464 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53\72caa1f5-5c1e0770

2014-10-14 13:31:09 D37ED873F3FD33B1F0C323B0BB744A86 409 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54\4a9a0536-2989c354

2014-10-14 13:31:08 7E7E6D583E13FD52F7A9F7A54CE24F7F 3533 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54\55a88f6-580c1511

2014-10-14 13:31:05 EE9A56DD3B84133778ADEE3028726841 1411 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\54\5f001ff6-298832a3

2014-10-14 13:31:07 E1EFAF56F1608EA7E8FA1C254C6128EB 292 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\56\325a87b8-2896a1e7

2014-10-14 13:31:19 66AE4CDCFCA6694B2130D686C0BAC12C 674 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\56\756c31b8-3dc754a5

2014-10-14 13:31:09 D6872F529DD4A5D8E47B530CCB2EF6D9 3732 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\56\c9c5ef8-134203df

2014-10-14 13:31:16 14BCBCD4E11189A8789CB0593C17F57F 587 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\57\18d01e39-1e170654

2014-10-14 13:31:08 271E4DF366D71C8C765D753CB66B82CE 767 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\57\435456f9-4794a285

2014-10-14 13:31:12 8F2D181CC699564DFF0EFB0E61EEDF29 598 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\58\1e1c0aba-57569c6e

2014-10-14 13:31:12 DD69C041A81BE145C3EFEA4BCCC4F97A 4278 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\58\6b92613a-40634c48

2014-10-14 13:31:14 8D5471D83B5C4806C091C032FE164406 591 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\58\7c4e4f3a-177e136d

2014-10-14 13:31:11 FAE55500FA5773CDAC76BF6856BD6C67 653 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\59\3cb46fb-20e9a0e3

2014-10-14 13:31:09 ACB7C857D98AB338C869FDF6C53CD3BE 2895 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\59\48fdfe7b-2ef55ae7

2014-10-14 13:31:07 D296AD267F619CE09C642AB0B8C2C6F0 5093 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\59\52783e7b-12d825f9

2014-10-14 13:31:18 65878D2BAE05BA0F8D7BA16A8951AEB6 6060 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\59\73a78cbb-7f7c655d

2014-10-14 13:31:11 B4455D24E69812887AA68B00AA57254A 5185 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6\2302586-3462426c

2014-10-14 13:31:17 3BE9DA11B9C5AD189E637DCCF1E044F9 221 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6\38142e86-76a519d5

2014-10-14 13:31:14 BF9EC7F873A1526C53180F3982009F0F 533 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6\3ab6d106-65c6ff45

2014-10-14 13:31:14 36B18FA071B56955EFD849B85E48169B 6171 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6\7aa6bd86-29141b47

2014-10-14 13:31:10 71A1B75A8071309887EA0B98FF1A3927 5570 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62\14e50efe-63a2beff

2014-10-14 13:31:07 BB3246ABAA3762D437620D3D71B4E6E3 1032 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62\7f669a7e-6bb0acb1

2014-10-14 13:31:15 A80F0834F0673073814BA2B670F7E63D 6197 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\63\2fe0e63f-439f6189

2014-10-14 13:31:17 1B085BECEB36656D43C48FD40A40C465 4061 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\63\4f7a003f-57a14cf3

2014-10-14 13:31:11 504E29C27819B603870E59C0CF8DF917 452 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\63\5369267f-6a268d5a

2014-10-14 13:31:04 265A9B9B723E62F219FC50039A989B46 159 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\28ab6787-23124e58

2014-10-14 13:31:09 4974E1BE085AC302C24D716E7D74630C 3374 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\6ac06d47-3d72f925

2014-10-14 13:31:13 2663E957693FDFD2D6904C8C67E4B6BB 478 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\7d448407-775654cd

2014-10-14 13:31:13 7D181739142CFB035D5B09476868D4BB 3852 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\8\7bd76e88-36a8e47c

2014-10-14 13:30:58 650F0F5FDCE9E3A7912864F6E2A912D3 249950 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\23b7ee09-65b7cfdb

2014-10-14 13:31:10 6B78E14EE52A8A1AA6BDFD0DBFAF71F3 362 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\39846509-4b8f0fc2

2014-10-14 13:31:05 960BA73E5612EF22975CAF2BFCDB44F7 392 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\3dd4f49-25f88978

2014-10-14 13:31:18 CF07DF957CA6911519475C197CA9EC3B 782 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\52bf2f49-30a761ab

2014-10-14 13:31:08 AFCECF8D399A61DD0E8546EE797D339B 614 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\6530fbc9-5bfc72ea

2014-10-14 13:31:18 6556B66CD38D274635965EE56C67FBD1 594 ----a-w- C:\Users\francist\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\7e1fabc9-3a9f8567

====== C:\Windows\system32 =====

2014-10-14 11:51:03 0AE3470A6684F492D57465E81834BB28 444136 ----a-w- C:\Windows\System32\FNTCACHE.DAT

2014-10-11 17:17:59 E68C89106038E6246FBA26DD6344C31E 701104 ----a-w- C:\Windows\System32\FlashPlayerApp.exe

2014-10-11 17:17:59 B71C4D76D9B4808CC4795AB655798F06 71344 ----a-w- C:\Windows\System32\FlashPlayerCPLApp.cpl

====== C:\Windows\system32\drivers =====

2014-10-03 07:08:50 38FCDE896A5B212B98562D3AB67C6C6D 115240 ----a-w- C:\Windows\System32\drivers\idmwfp.sys

====== C:\Windows\Tasks ======

2014-10-12 08:59:30 FAA78ADAF0F150A0EBE4E9A2241DE660 3206 ----a-w- C:\Windows\system32\Tasks\{E2D57E2C-544E-4C2B-89DF-3B5A9EF8E7FB}

2014-10-12 08:54:56 76C3527B84EAC32B8FC6962C9B0ED307 3106 ----a-w- C:\Windows\system32\Tasks\{DDBD2AD1-B132-4D7F-9DA3-442165275904}

2014-10-11 17:18:00 DDB057C944421D550A1A9ED1625BF599 3878 ----a-w- C:\Windows\system32\Tasks\Adobe Flash Player Updater

2014-10-11 17:18:00 C02378EF1CC7BA6AD2B35DBDBD290622 940 ----a-w- C:\Windows\Tasks\Adobe Flash Player Updater.job

====== C:\Windows\Temp ======

======= C:\Program Files =====

2014-10-15 11:41:22 -------- d-----w- C:\Program Files\trend micro

2014-10-12 10:34:47 -------- d-----w- C:\Program Files\ConvertHelper

2014-10-11 11:32:26 -------- d-----w- C:\Program Files\Internet Download Manager

2014-09-18 07:13:01 -------- d-----w- C:\Program Files\Common Files\Java

2014-09-18 07:12:32 -------- d-----w- C:\Program Files\Java

======= C: =====

====== C:\Users\francist\AppData\Roaming ======

2014-10-13 09:17:34 78C8AF28FD40F6E7ACB0304FB0A42A4A 122848 ----a-w- C:\Users\francist\AppData\Local\GDIPFONTCACHEV1.DAT

2014-10-12 08:20:46 -------- d-----w- C:\Users\HomeGroupUser$\AppData\Local\Torch

2014-10-12 08:20:46 -------- d-----w- C:\Users\HomeGroupUser$\AppData\Local\Google

2014-10-12 08:20:46 -------- d-----w- C:\Users\HomeGroupUser$\AppData\Local\Comodo

2014-10-12 08:20:46 -------- d-----w- C:\Users\HomeGroupUser$\AppData\Local\Chromatic Browser

2014-10-12 08:20:46 -------- d-----w- C:\Users\Gast\AppData\Local\Torch

2014-10-12 08:20:46 -------- d-----w- C:\Users\Gast\AppData\Local\Google

2014-10-12 08:20:46 -------- d-----w- C:\Users\Gast\AppData\Local\Comodo

2014-10-12 08:20:46 -------- d-----w- C:\Users\Gast\AppData\Local\Chromatic Browser

2014-10-12 08:20:46 -------- d-----w- C:\Users\francist\AppData\Local\Torch

2014-10-12 08:20:46 -------- d-----w- C:\Users\francist\AppData\Local\Comodo

2014-10-12 08:20:46 -------- d-----w- C:\Users\francist\AppData\Local\Chromatic Browser

2014-10-12 08:20:46 -------- d-----w- C:\Users\Administrator\AppData\Local\Torch

2014-10-12 08:20:46 -------- d-----w- C:\Users\Administrator\AppData\Local\Google

2014-10-12 08:20:46 -------- d-----w- C:\Users\Administrator\AppData\Local\Comodo

2014-10-12 08:20:46 -------- d-----w- C:\Users\Administrator\AppData\Local\Chromatic Browser

2014-10-11 17:17:37 -------- d-----w- C:\Users\francist\AppData\Roaming\RHEng

2014-10-11 17:17:22 -------- d-----w- C:\Users\francist\AppData\Roaming\rmi

2014-10-11 11:33:01 -------- d-----w- C:\Users\francist\AppData\Roaming\IDM

2014-10-11 11:33:01 -------- d-----w- C:\Users\francist\AppData\Roaming\DMCache

====== C:\Users\francist ======

2014-10-12 08:20:47 6471C52810B8A50B8C7897FBE5F0E2D1 398 --sha-r- C:\ProgramData\ntuser.pol

2014-10-12 08:20:46 -------- d-----w- C:\Users\HomeGroupUser$\AppData

2014-10-12 08:20:46 -------- d-----w- C:\Users\Gast\AppData

2014-10-11 11:32:29 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager

2014-09-18 07:12:39 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

====== C: exe-files ==

2014-10-15 13:14:33 BA6F13709F87AA1331DC90B47612AE4E 73336 ----a-w- C:\Program Files\Opera\25.0.1614.50\wow_helper.exe

2014-10-15 13:14:33 67AE9D36E2F9C138258CD7E7A60EEB85 499832 ----a-w- C:\Program Files\Opera\25.0.1614.50\opera_crashreporter.exe

2014-10-15 13:14:32 869A9FC9EA13303D4BF6F8D0D9392C76 3190392 ----a-w- C:\Program Files\Opera\25.0.1614.50\opera_autoupdate.exe

2014-10-15 13:14:32 5F4690AE3AA40EA032088855ACBCEE46 1117816 ----a-w- C:\Program Files\Opera\25.0.1614.50\installer.exe

2014-10-15 13:14:32 0ECD88A23DC0E7FAB3FA4A6298153A81 50071160 ----a-w- C:\Program Files\Opera\25.0.1614.50\opera.exe

2014-10-15 11:41:22 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\francist.exe

2014-10-15 11:41:08 8685FAF50C04F9A9C2F56FF64B0B7ACB 1107968 ----a-w- C:\Users\francist\Downloads\Programs\RSIT.exe

2014-10-12 11:50:36 28026DB53EEF61CCF0101672C77CE134 277616 ----a-w- C:\Users\francist\AppData\Local\Mozilla\updates\308046B0AF4A39CB\updates\0\updater.exe

2014-10-12 10:34:48 6E31F3208DD045C7C8FD2300B58D6A61 110080 ----a-w- C:\Program Files\ConvertHelper\ffmpeg.exe

2014-10-12 10:34:48 5D3640A286C978AA3C10D22D631F151E 27554 ----a-w- C:\Program Files\ConvertHelper\cvhelper.exe

2014-10-12 10:34:47 1F634B0F67DD9E15198100DA415FCFE3 695578 ----a-w- C:\Program Files\ConvertHelper\unins000.exe

2014-10-12 10:34:21 6E76BE10C88A00A124A903E155C4A1CE 3782822 ----a-w- C:\Users\francist\Downloads\Programs\ConvertHelperSetup.exe

2014-10-12 09:26:58 9AE4C48DB6D9EB7D060C71AB1AABF5F0 4965896 ----a-w- C:\Users\francist\Downloads\Programs\ccsetup418.exe

2014-10-12 08:22:37 C0FF66D6529C9228AC9D3105B8283B3E 3042064 ----a-w- C:\Users\francist\AppData\Local\Temp\drvprosetup.exe

2014-10-12 08:22:25 D2D6341A87CC3995ABE80F505B6E112A 1207264 ----a-w- C:\Users\francist\AppData\Local\Temp\LiveSupport_setup.exe

2014-10-12 08:22:16 8EB256AD87ABE5397EC826A3E778B149 4245584 ----a-w- C:\Users\francist\AppData\Local\Temp\optprosetup.exe

2014-10-11 17:17:59 E68C89106038E6246FBA26DD6344C31E 701104 ----a-w- C:\Windows\System32\FlashPlayerApp.exe

2014-10-11 17:17:39 43FD6141C6266EFCBC5370242BB6DD1C 1293288 ----a-w- C:\Users\francist\AppData\Roaming\RHEng\79BB71DB9EF6437B802332C7D56FFDE8\speedupmypc-NL-p2.exe

2014-10-11 17:17:37 41B2817C500AEC698EE7D41370794EF1 17913520 ----a-w- C:\Users\francist\AppData\Roaming\rmi\flashplayer15_install_win_pi.exe

2014-10-11 17:17:07 2B0431B80D215D597A8F0B2613BD65B2 527944 ----a-w- C:\Users\francist\Downloads\Programs\flashplayer15_install_win_pi_2.exe

2014-10-11 17:04:43 57CC25107A730AB5AA1818D3450211CC 6326664 ----a-w- C:\Users\francist\AppData\Roaming\IDM\idmupdt.exe

2014-10-11 12:58:40 6F863592B75D156A15FC05070A6668EB 661416 ---ha-w- C:\Users\francist\AppData\Local\Temp\D1d0\temp\embededstub.exe

2014-10-11 12:58:40 6F863592B75D156A15FC05070A6668EB 661416 ---ha-w- C:\Users\francist\AppData\Local\Temp\733E3ca37E69B\temp\embededstub.exe

2014-10-11 11:31:41 11F9F487FD8503305CDA87FF834683A5 170496 ----a-w- C:\Users\francist\Documents\Internet Download Manager 6.19 Build 1 Retail Nederlands\Internet Download Manager 6.19 Build 1 Retail Nederlands\patch.new-UnREaL\Tonec.Inc.Internet.Download.Manager.v6.xx.WinALL.Incl.Keygen.and.Patch.update1-UnREaL.exe

=== C: other files ==

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-21-3730078115-3281393171-2249441152-1000\Software\Microsoft\Windows\CurrentVersion\Run]

"Driver Detective"="C:\Program Files\PC Drivers HeadQuarters\Driver Detective\DriversHQ.DriverDetective.Client.exe /applicationMode:systemTray /showWelcome:false"

"HydraVisionDesktopManager"="C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe"

"IDMan"="C:\Program Files\Internet Download Manager\IDMan.exe /onboot"

"CCleaner Monitoring"="C:\Program Files\CCleaner\CCleaner.exe /MONITOR"

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_USERS\S-1-5-21-3730078115-3281393171-2249441152-1000\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"FlashPlayerUpdate"="C:\Windows\system32\Macromed\Flash\FlashUtil32_15_0_0_167_ActiveX.exe -update activex"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"BCSSync"="C:\Program Files\Microsoft Office\Office14\BCSSync.exe /DelayServices"

"Adobe ARM"="C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

"AVG_UI"="C:\Program Files\AVG\AVG2014\avgui.exe /TRAYONLY"

"StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\x86\CLIStart.exe MSRun"

"RtHDVCpl"="C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s"

"SunJavaUpdateSched"="C:\Program Files\Common Files\Java\Java Update\jusched.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"Driver Detective"="C:\Program Files\PC Drivers HeadQuarters\Driver Detective\DriversHQ.DriverDetective.Client.exe /applicationMode:systemTray /showWelcome:false"

"HydraVisionDesktopManager"="C:\Program Files\ATI Technologies\HydraVision\HydraDM.exe"

"IDMan"="C:\Program Files\Internet Download Manager\IDMan.exe /onboot"

"CCleaner Monitoring"="C:\Program Files\CCleaner\CCleaner.exe /MONITOR"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"FlashPlayerUpdate"="C:\Windows\system32\Macromed\Flash\FlashUtil32_15_0_0_167_ActiveX.exe -update activex"

==== Startup Registry Disabled ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Bonus.SSR.FR10]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="Bonus.SSR.FR10"

"hkey"="HKLM"

"command"="\"C:\\Program Files\\ABBYY FineReader 10\\Bonus.ScreenshotReader.exe\" /autorun"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\NeroCheck]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="NeroCheck"

"hkey"="HKLM"

"command"="C:\\Windows\\system32\\NeroCheck.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\RtHDVCpl]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="RtHDVCpl"

"hkey"="HKLM"

"command"="C:\\Program Files\\Realtek\\Audio\\HDA\\RtHDVCpl.exe -s"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\TkBellExe]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="TkBellExe"

"hkey"="HKLM"

"command"="\"C:\\Program Files\\Real\\RealPlayer\\Update\\realsched.exe\" -osboot"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\UpdatePDRShortCut]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="UpdatePDRShortCut"

"hkey"="HKLM"

"command"="\"C:\\Program Files\\CyberLink\\PowerDirector\\MUITransfer\\MUIStartMenu.exe\" \"C:\\Program Files\\CyberLink\\PowerDirector\" UpdateWithCreateOnce \"Software\\CyberLink\\PowerDirector\\7.0\""

==== Startup Folders ======================

2013-09-12 16:56:47 1270 ----a-w- C:\Users\francist\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Schermopname en Snel starten.lnk

2013-09-18 13:12:21 1197 ----a-w- C:\Users\francist\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.4.1.lnk

2013-10-09 16:32:37 898 ----a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NewShortcut1.lnk

==== Task Scheduler Jobs ======================

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe []

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe []

==== Other Scheduled Tasks ======================

"C:\Windows\system32\tasks\Adobe Flash Player Updater" [C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe]

"C:\Windows\system32\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"]

"C:\Windows\system32\tasks\CreateChoiceProcessTask" [C:\Windows\System32\browserchoice.exe]

"C:\Windows\system32\tasks\Driver Detective-RTMRules" [C:\Program Files\PC Drivers HeadQuarters\Driver Detective\DriversHQ.DriverDetective.Client.exe]

"C:\Windows\system32\tasks\Driver Detective-RTMScan" [C:\Program Files\PC Drivers HeadQuarters\Driver Detective\DriversHQ.DriverDetective.Client.exe]

"C:\Windows\system32\tasks\Driver Detective-RTMUpdater" [C:\Program Files\PC Drivers HeadQuarters\Driver Detective\DriversHQ.DriverDetective.Client.exe]

"C:\Windows\system32\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files\Google\Update\GoogleUpdate.exe]

"C:\Windows\system32\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files\Google\Update\GoogleUpdate.exe]

"C:\Windows\system32\tasks\Opera scheduled Autoupdate 1378240423" [C:\Program Files\Opera\launcher.exe]

"C:\Windows\system32\tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-3730078115-3281393171-2249441152-1000" [C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe]

"C:\Windows\system32\tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3730078115-3281393171-2249441152-1000" [C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe]

"C:\Windows\system32\tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3730078115-3281393171-2249441152-1000" [C:\Program Files\RealNetworks\RealDownloader\realupgrade.exe]

"C:\Windows\system32\tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3730078115-3281393171-2249441152-1000" [C:\Program Files\Real\RealUpgrade\RealUpgrade.exe]

"C:\Windows\system32\tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3730078115-3281393171-2249441152-1000" [C:\Program Files\Real\RealUpgrade\RealUpgrade.exe]

"C:\Windows\system32\tasks\SidebarExecute" [C:\Program Files\Windows Sidebar\sidebar.exe]

"C:\Windows\system32\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc]

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]

"{ABDE892B-13A8-4d1b-88E6-365A6E755758}"="C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext" [15/01/2014 08:41]

[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]

"mozilla_cc@internetdownloadmanager.com"="C:\Users\francist\AppData\Roaming\IDM\idmmzcc5" [11/10/2014 19:05]

==== Firefox Extensions ======================

ProfilePath: C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\ff6km64e.default

- Torntv 3 - %ProfilePath%\extensions\trtv3@trtv.com.xpi

AppDir: C:\Program Files\Mozilla Firefox

- Belgium eID - %AppDir%\extensions\belgiumeid@eid.belgium.be

- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\ff6km64e.default

A43AED9963E166FBAAB1A41ADEB25806 - C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_199.dll - Shockwave Flash

14D06C3796CE3F6BA8F43CDF3AD65D76 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll - Java Platform SE 7 U67

0A6E5E3BEF374AA2F47071E7374EAD7B - C:\Program Files\Java\jre7\bin\dtplugin\npdeployJava1.dll - Java Deployment Toolkit 7.0.670.1

64C4ADE063A9C93D3BAE09922AD90C27 - C:\Program Files\Adobe\Reader 11.0\Reader\browser\nppdf32.dll - Adobe Acrobat

446BCAE59E26321802E000FC3E0C390A - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll - Adobe Acrobat

9419AA8A2799526EC32B473C2BB7A10D - C:\Program Files\Google\Picasa3\npPicasa3.dll - Picasa

0CA4180B21C6B728578F3B0433BB740E - C:\Program Files\VideoLAN\VLC\npvlc.dll - VLC Web Plugin

3A9E1940B4459CC97FDCBB24FCB69004 - C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll - RealPlayer G2 LiveConnect-Enabled Plug-In (32-bit)

0FCEAA7D12B7B0BA825E5C770B1DCA48 - C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll - RealPlayer Download Plugin

D2B5242013356AF422A42B9FAA4056C2 - C:\Users\francist\AppData\Roaming\VASCO\VascoCardReaderPlugin\3.2.3.2\npVascoCardReaderPlugin.dll - VASCO Card Reader Plugin

BE126CB7049E89ED6F3038016668B502 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll - RealNetworks RealDownloader Chrome Background Extension Plug-In (32-bit)

EAC427FEF96A13058C1ACD17C38966CF - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll - RealNetworks RealDownloader PepperFlashVideoShim Plug-In (32-bit)

96B3689320E9B16EDF38B7A5001C35F0 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll - RealNetworks RealDownloader HTML5VideoShim Plug-In (32-bit)

F8CB60A5ACA5D73807ECBD9942A8BCB7 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll - RealDownloader Plugin

83949CA2E938F744F6D344A90A5C2EC3 - C:\Program Files\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll - Foxit PhantomPDF Plugin for Mozilla

==== Deleted Firefox Extensions ======================

C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\ff6km64e.default\extensions\trtv3@trtv.com.xpi deleted

==== Chromium Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions

bicnnkjibmphdeigoodpjlcklcnaobdj - C:\Program Files\TornTV.com\torntv10.crx[]

idhngdhcfkoamngbedgpaokgjbnpdiji - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx[14/08/2013 16:24]

jeaohhlajejodfjadcponpnjgkiikocn - C:\Program Files\Internet Download Manager\IDMGCExt.crx[]

OoptOn - Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak

Bitdefender QuickScan - Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie

GGoSavvEa - Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj

OpttOn - Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo

OoptOn - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak

Bitdefender QuickScan - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie

GGoSavvEa - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj

OpttOn - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo

OoptOn - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak

Bitdefender QuickScan - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie

GGoSavvEa - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj

OpttOn - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo

OoptOn - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak

Bitdefender QuickScan - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie

GGoSavvEa - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj

OpttOn - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo

OoptOn - Administrator\AppData\Local\Torch\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak

Bitdefender QuickScan - Administrator\AppData\Local\Torch\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie

GGoSavvEa - Administrator\AppData\Local\Torch\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj

OpttOn - Administrator\AppData\Local\Torch\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo

OoptOn - francist\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak

Bitdefender QuickScan - francist\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie

GGoSavvEa - francist\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj

OpttOn - francist\AppData\Local\Chromatic Browser\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo

OoptOn - francist\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak

Bitdefender QuickScan - francist\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie

GGoSavvEa - francist\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj

OpttOn - francist\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo

OoptOn - francist\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak

RealDownloader - francist\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji

IDM Integration Module - francist\AppData\Local\Google\Chrome\User Data\Default\Extensions\jeaohhlajejodfjadcponpnjgkiikocn

Google Wallet - francist\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda

Bitdefender QuickScan - francist\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie

GGoSavvEa - francist\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj

OpttOn - francist\AppData\Local\Google\Chrome\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo

OoptOn - francist\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak

Bitdefender QuickScan - francist\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie

GGoSavvEa - francist\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj

OpttOn - francist\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo

OoptOn - francist\AppData\Local\Torch\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak

Bitdefender QuickScan - francist\AppData\Local\Torch\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie

GGoSavvEa - francist\AppData\Local\Torch\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj

OpttOn - francist\AppData\Local\Torch\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo

OoptOn - Gast\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak

Bitdefender QuickScan - Gast\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie

GGoSavvEa - Gast\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj

OpttOn - Gast\AppData\Local\Chromatic Browser\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo

OoptOn - Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak

Bitdefender QuickScan - Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie

GGoSavvEa - Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj

OpttOn - Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo

OoptOn - Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak

Bitdefender QuickScan - Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie

GGoSavvEa - Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj

OpttOn - Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo

OoptOn - Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak

Bitdefender QuickScan - Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie

GGoSavvEa - Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj

OpttOn - Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo

OoptOn - Gast\AppData\Local\Torch\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak

Bitdefender QuickScan - Gast\AppData\Local\Torch\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie

GGoSavvEa - Gast\AppData\Local\Torch\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj

OpttOn - Gast\AppData\Local\Torch\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo

OoptOn - HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak

Bitdefender QuickScan - HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie

GGoSavvEa - HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj

OpttOn - HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo

OoptOn - HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak

Bitdefender QuickScan - HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie

GGoSavvEa - HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj

OpttOn - HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo

OoptOn - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak

Bitdefender QuickScan - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie

GGoSavvEa - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj

OpttOn - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo

OoptOn - HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak

Bitdefender QuickScan - HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie

GGoSavvEa - HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj

OpttOn - HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo

OoptOn - HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak

Bitdefender QuickScan - HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie

GGoSavvEa - HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj

OpttOn - HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo

==== Chromium Startpages ======================

C:\Users\francist\AppData\Local\Google\Chrome\User Data\Default\Preferences

"homepage": "https://www.google.be/",

"startup_urls": [ "http://www.google.be/", "http://www.google/" ],

==== Chromium Fix ======================

C:\Users\francist\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.superfish.com_0.localstorage deleted successfully

C:\Users\francist\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.superfish.com_0.localstorage-journal deleted successfully

C:\Users\francist\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage deleted successfully

C:\Users\francist\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.superfish.com_0.localstorage-journal deleted successfully

C:\Users\francist\AppData\Local\Google\Chrome\User Data\Default\Extensions\jeaohhlajejodfjadcponpnjgkiikocn deleted successfully

C:\Users\francist\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jeaohhlajejodfjadcponpnjgkiikocn deleted successfully

C:\Users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak deleted successfully

C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak deleted successfully

C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak deleted successfully

C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak deleted successfully

C:\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak deleted successfully

C:\Users\francist\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak deleted successfully

C:\Users\francist\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak deleted successfully

C:\Users\francist\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak deleted successfully

C:\Users\francist\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak deleted successfully

C:\Users\francist\AppData\Local\Torch\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak deleted successfully

C:\Users\Gast\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak deleted successfully

C:\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak deleted successfully

C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak deleted successfully

C:\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak deleted successfully

C:\Users\Gast\AppData\Local\Torch\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak deleted successfully

C:\Users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak deleted successfully

C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak deleted successfully

C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak deleted successfully

C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak deleted successfully

C:\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\ccfkfponealjabohkkcbegahhciifpak deleted successfully

C:\Users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie deleted successfully

C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie deleted successfully

C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie deleted successfully

C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie deleted successfully

C:\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie deleted successfully

C:\Users\francist\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie deleted successfully

C:\Users\francist\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie deleted successfully

C:\Users\francist\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie deleted successfully

C:\Users\francist\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie deleted successfully

C:\Users\francist\AppData\Local\Torch\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie deleted successfully

C:\Users\Gast\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie deleted successfully

C:\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie deleted successfully

C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie deleted successfully

C:\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie deleted successfully

C:\Users\Gast\AppData\Local\Torch\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie deleted successfully

C:\Users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie deleted successfully

C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie deleted successfully

C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie deleted successfully

C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie deleted successfully

C:\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie deleted successfully

C:\Users\francist\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pdnkcidphdcakpkheohlhocaicfamjie_0.localstorage deleted successfully

C:\Users\francist\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pdnkcidphdcakpkheohlhocaicfamjie_0.localstorage-journal deleted successfully

C:\Users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj deleted successfully

C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj deleted successfully

C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj deleted successfully

C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj deleted successfully

C:\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj deleted successfully

C:\Users\francist\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj deleted successfully

C:\Users\francist\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj deleted successfully

C:\Users\francist\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj deleted successfully

C:\Users\francist\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj deleted successfully

C:\Users\francist\AppData\Local\Torch\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj deleted successfully

C:\Users\Gast\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj deleted successfully

C:\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj deleted successfully

C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj deleted successfully

C:\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj deleted successfully

C:\Users\Gast\AppData\Local\Torch\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj deleted successfully

C:\Users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj deleted successfully

C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj deleted successfully

C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj deleted successfully

C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj deleted successfully

C:\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\pgecdnaaholiemcolfalkpbgpligallj deleted successfully

C:\Users\Administrator\AppData\Local\Chromatic Browser\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo deleted successfully

C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo deleted successfully

C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo deleted successfully

C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo deleted successfully

C:\Users\Administrator\AppData\Local\Torch\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo deleted successfully

C:\Users\francist\AppData\Local\Chromatic Browser\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo deleted successfully

C:\Users\francist\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo deleted successfully

C:\Users\francist\AppData\Local\Google\Chrome\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo deleted successfully

C:\Users\francist\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo deleted successfully

C:\Users\francist\AppData\Local\Torch\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo deleted successfully

C:\Users\Gast\AppData\Local\Chromatic Browser\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo deleted successfully

C:\Users\Gast\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo deleted successfully

C:\Users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo deleted successfully

C:\Users\Gast\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo deleted successfully

C:\Users\Gast\AppData\Local\Torch\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo deleted successfully

C:\Users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo deleted successfully

C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo deleted successfully

C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo deleted successfully

C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo deleted successfully

C:\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\podpcacebcbnajnhbeeiockebiihcnbo deleted successfully

==== Set IE to Default ======================

Old Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="http://www.google.be/"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]

"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

New Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="http://www.google.be/"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]

"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"

{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02"

{1A5F2C58-F62A-4CE4-9E59-7BA818F3D90E} Google Url="https://www.google.com/search?q={searchTerms}"

{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7"

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-3730078115-3281393171-2249441152-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0055C089-8582-441B-A0BF-17B458C2A3A8} deleted successfully

HKEY_USERS\S-1-5-21-3730078115-3281393171-2249441152-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0055C089-8582-441B-A0BF-17B458C2A3A8} deleted successfully

HKEY_USERS\S-1-5-21-3730078115-3281393171-2249441152-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0055C089-8582-441B-A0BF-17B458C2A3A8} deleted successfully

HKEY_USERS\S-1-5-21-3730078115-3281393171-2249441152-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0055C089-8582-441B-A0BF-17B458C2A3A8} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{0055C089-8582-441B-A0BF-17B458C2A3A8} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0055C089-8582-441B-A0BF-17B458C2A3A8} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\ocr@babylon.com deleted successfully

HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\65ffxtbr@FromDocToPDF_65.com deleted successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\bicnnkjibmphdeigoodpjlcklcnaobdj deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\jeaohhlajejodfjadcponpnjgkiikocn deleted successfully

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{4820778D-AB0D-6D18-C316-52A6A0E1D507} deleted successfully

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C87834EB-A2A0-B9D4-AA9A-C263D1191051} deleted successfully

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Internet Download Manager deleted successfully

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect deleted successfully

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePDRShortCut deleted successfully

==== Empty IE Cache ======================

C:\Users\francist\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\francist\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

C:\Users\francist\AppData\Local\Mozilla\Firefox\Profiles\ff6km64e.default\Cache will be emptied at reboot

==== Empty Chrome Cache ======================

C:\Users\francist\AppData\Local\Opera Software\Opera Stable\Cache emptied successfully

C:\Users\francist\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=1049 folders=329 77616191 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully

C:\Users\Default User\AppData\Local\Temp emptied successfully

C:\Users\francist\AppData\Local\Temp will be emptied at reboot

C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully

C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully

C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied

C:\Users\francist\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Program Files\Internet Download Manager" not found

==== EOF on do 16/10/2014 at 11:14:39,32 ======================

zoek-results.log

16 oktober 2014 aangepast door kape
quote verwijderd

[kape]

Oeps ... daar is een flinke berg rotzooi mee verwijderd

Download AdwCleaner by Xplode naar het bureaublad.

• Sluit alle openstaande vensters.
  
• Dubbelklik op AdwCleaner om hem te starten.
  
• Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren,
  
• Door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  
• Klik op Scan.
  
• Klik vervolgens op Clean (Engelse versie)of Verwijderen (Nederlandse versie).
  
• Klik bij Herstarten Noodzakelijk op OK
  

Nadat de PC opnieuw is opgestart, opent meestal een logfile.

Anders is het hier terug te vinden C:\\AdwCleaner\\AdwCleaner[s0].txt.

Logbestand plaatsen

• Voeg het logbestand met de naam C:\\AdwCleaner\\AdwCleaner[s0].txt als bijlage toe aan het volgende bericht.
  
• Hoe u een bijlage kunt toevoegen aan het bericht leest u hier.
  

[francist]

het log van adwcleaner

# AdwCleaner v4.000 - Rapport aangemaakt 16/10/2014 op 17:38:05

# DB v2014-10-15.7

# Laatste Update 12/10/2014 door Xplode

# Besturingssysteem : Windows 7 Professional Service Pack 1 (32 bits)

# Gebruikersnaam : francist - FRANCIS

# Gestart vanuit : C:\Users\francist\Desktop\adwcleaner_4.000.exe

# Optie : Verwijderen

***** [ Services ] *****

Service Verwijderd : SPPD

***** [ Bestanden / Mappen ] *****

Map Verwijderd : C:\Users\Administrator\AppData\Local\Chromatic Browser

Map Verwijderd : C:\Users\francist\AppData\Local\Chromatic Browser

Map Verwijderd : C:\Users\Gast\AppData\Local\Chromatic Browser

Map Verwijderd : C:\Users\HomeGroupUser$\AppData\Local\Chromatic Browser

Map Verwijderd : C:\Users\Administrator\AppData\Local\torch

Map Verwijderd : C:\Users\francist\AppData\Local\torch

Map Verwijderd : C:\Users\Gast\AppData\Local\torch

Map Verwijderd : C:\Users\HomeGroupUser$\AppData\Local\torch

Map Verwijderd : C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\ff6km64e.default\VideoDownloadConverter_4z

Map Verwijderd : C:\Users\francist\AppData\Roaming\RHEng

Map Verwijderd : C:\ProgramData\PC Drivers HeadQuarters

Map Verwijderd : C:\Program Files\PC Drivers HeadQuarters

Map Verwijderd : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Detective

Bestand Verwijderd : C:\Users\francist\AppData\Roaming\LiveSupport.exe_log.txt

Bestand Verwijderd : C:\Users\francist\AppData\Roaming\regsvr32.exe_log.txt

Bestand Verwijderd : C:\Users\francist\AppData\Roaming\Mozilla\Firefox\Profiles\ff6km64e.default\user.js

***** [ Taken ] *****

Taak Verwijderd : Driver Detective-RTMUpdater

Taak Verwijderd : Driver Detective-RTMScan

Taak Verwijderd : Driver Detective-RTMRules

***** [ Snelkoppelingen ] *****

***** [ Register ] *****

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\FromDocToPDF_65.DynamicBarButton

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\FromDocToPDF_65.DynamicBarButton.1

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\FromDocToPDF_65.FeedManager

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\FromDocToPDF_65.FeedManager.1

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\FromDocToPDF_65.HTMLMenu

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\FromDocToPDF_65.HTMLMenu.1

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\FromDocToPDF_65.HTMLPanel

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\FromDocToPDF_65.HTMLPanel.1

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\FromDocToPDF_65.MultipleButton

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\FromDocToPDF_65.MultipleButton.1

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\FromDocToPDF_65.PseudoTransparentPlugin

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\FromDocToPDF_65.PseudoTransparentPlugin.1

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\FromDocToPDF_65.Radio

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\FromDocToPDF_65.Radio.1

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\FromDocToPDF_65.RadioSettings

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\FromDocToPDF_65.RadioSettings.1

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\FromDocToPDF_65.ScriptButton

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\FromDocToPDF_65.ScriptButton.1

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\FromDocToPDF_65.SettingsPlugin

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\FromDocToPDF_65.SettingsPlugin.1

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\FromDocToPDF_65.SkinLauncher

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\FromDocToPDF_65.SkinLauncher.1

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\FromDocToPDF_65.SkinLauncherSettings

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\FromDocToPDF_65.SkinLauncherSettings.1

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\FromDocToPDF_65.ThirdPartyInstaller

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\FromDocToPDF_65.ThirdPartyInstaller.1

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\FromDocToPDF_65.ToolbarProtector

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\FromDocToPDF_65.ToolbarProtector.1

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\FromDocToPDF_65.UrlAlertButton

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\FromDocToPDF_65.UrlAlertButton.1

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\FromDocToPDF_65.XMLSessionPlugin

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\FromDocToPDF_65.XMLSessionPlugin.1

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Prod.cap

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\speedupmypc

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ToolbarProtector

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ToolbarProtector.1

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASAPI32

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\MegaBrowse_RASAPI32

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\MegaBrowse_RASMANCS

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\Torntv Downloader_RASAPI32

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\Torntv Downloader_RASMANCS

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\updateMegaBrowse_RASAPI32

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\updateMegaBrowse_RASMANCS

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\updatequalitink_RASAPI32

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\updatequalitink_RASMANCS

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\utilMegaBrowse_RASAPI32

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\utilMegaBrowse_RASMANCS

Sleutel Verwijderd : HKLM\SOFTWARE\MozillaPlugins\@FromDocToPDF_65.com/Plugin

Sleutel Verwijderd : HKLM\SOFTWARE\MozillaPlugins\@VideoDownloadConverter_ScriptHelper.com/Plugin

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\.

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\..9

Sleutel Verwijderd : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{c67abfdb}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{00B11DA2-75ED-4364-ABA5-9A95B1F5E946}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{017D68F2-19B3-41AE-9D8A-8B09DBD25479}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{2BD4465D-669A-42E6-B449-636B0B10EBB8}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{3700B685-D795-4E17-9B78-73BCEE5D4086}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{3719959C-1CCD-4FA7-8EBB-7D9DED86FCCB}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{3E6260AC-BC6F-44B4-942B-1568C367543A}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{504B4AA9-9952-4490-B0E1-80A5321C35F7}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{72D05120-DF65-4C27-921E-899B5267FEF2}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{8AD40E5E-9FD9-4F5E-B4D1-DDF2C921DCE3}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{947217BD-E967-400A-B14A-BA851A8EDCBB}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{A0CF6CB9-2276-4F30-B841-05A67067ACE0}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{AFA196F4-80E5-47AD-B7BC-C671487D36FB}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{B7FD68F7-D28B-431E-9EE8-E45D915B7F17}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{BC7E25D7-4681-46A3-AF5A-9A1B865783ED}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{CBBEA4B9-B183-47AC-8B1F-FD526AC99A8D}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{CD1D181E-C654-4CA5-9D09-B3648537FD7D}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{E0C3A839-0E5E-4EBC-9F8F-E56F8FC732CE}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{E1C4699E-5E74-4F30-A4A2-378E45D44F07}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{F96EE2EF-FE15-4878-AECD-BC367F12C70F}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{FC2B119B-2352-4E7A-9197-B9E1BBADE61B}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{517eda57-8d46-4459-96a5-3af167ef052d}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{7c91f9db-621f-4bac-85a4-af73782a5193}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{36B445BF-1B84-466A-A623-A360A8CFF8C3}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{3B3F3AAD-FB97-49FF-BFEE-D22869AC4326}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{6CBF5C01-C876-481B-867E-111CB1D2A7D6}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{D97143C2-4282-496B-BDC4-7EC852F1497C}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\TypeLib\{1747AE4D-0A83-4336-84D4-48500BF1554F}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\TypeLib\{2C9D27D8-C81E-4968-8026-E725E01650C1}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\TypeLib\{37923200-6887-4B44-95D4-CAE8F83ECFEE}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\TypeLib\{3BB1BA04-1B88-4690-9AD3-0D38412F5FF1}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\TypeLib\{3EFEC319-72E8-42AA-AC38-8CF8A0661CDD}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\TypeLib\{4D8AEB1D-4ED4-44AC-A039-4775B2575DB0}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\TypeLib\{542EAC56-BF4B-46A7-943E-0A4C2CBA34EA}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\TypeLib\{6191571E-F7EE-47C3-B229-2DFAC70DB5D2}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\TypeLib\{74C02D12-FAEE-4834-80D2-5B7D2480AD61}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\TypeLib\{840AE8AE-D547-433E-985C-6BF6C74F5084}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\TypeLib\{A85ACA7E-5CD2-461B-877A-994CCCCF491C}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\TypeLib\{BF6FDBB8-7CD5-402D-AB4F-E4F13D3490C8}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\TypeLib\{E3CDDB72-3ADC-4920-B42B-68A8C29FA942}

Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8A4E8BCB-5598-4CAF-9DEC-4D452760E28D}

Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A86782D8-7B41-452F-A217-1854F72DBA54}

Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BC7E25D7-4681-46A3-AF5A-9A1B865783ED}

Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{517eda57-8d46-4459-96a5-3af167ef052d}

Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7c91f9db-621f-4bac-85a4-af73782a5193}

Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{517eda57-8d46-4459-96a5-3af167ef052d}

Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7c91f9db-621f-4bac-85a4-af73782a5193}

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{2BD4465D-669A-42E6-B449-636B0B10EBB8}

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8AD40E5E-9FD9-4F5E-B4D1-DDF2C921DCE3}

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{BC7E25D7-4681-46A3-AF5A-9A1B865783ED}

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{CBBEA4B9-B183-47AC-8B1F-FD526AC99A8D}

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{E1C4699E-5E74-4F30-A4A2-378E45D44F07}

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{FC2B119B-2352-4E7A-9197-B9E1BBADE61B}

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{517eda57-8d46-4459-96a5-3af167ef052d}

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7c91f9db-621f-4bac-85a4-af73782a5193}

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2D6F0AC3-0C2E-4E07-8FDA-11268AB51211}

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{36B445BF-1B84-466A-A623-A360A8CFF8C3}

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6CBF5C01-C876-481B-867E-111CB1D2A7D6}

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{701F5C41-BB30-46DA-A56B-68784B0B762B}

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A3B975A0-F679-444E-9D94-6D292FA53140}

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D97143C2-4282-496B-BDC4-7EC852F1497C}

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E0C3A839-0E5E-4EBC-9F8F-E56F8FC732CE}

Sleutel Verwijderd : HKCU\Software\1ClickDownload

Sleutel Verwijderd : HKCU\Software\BABSOLUTION

Sleutel Verwijderd : HKCU\Software\BI

Sleutel Verwijderd : HKCU\Software\DataMngr

Sleutel Verwijderd : HKCU\Software\Driver Pro

Sleutel Verwijderd : HKCU\Software\filescout

Sleutel Verwijderd : HKCU\Software\FromDocToPDF_65

Sleutel Verwijderd : HKCU\Software\InstallCore

Sleutel Verwijderd : HKCU\Software\Optimizer Pro

Sleutel Verwijderd : HKCU\Software\RegisteredApplicationsEx

Sleutel Verwijderd : HKCU\Software\SearchProtectINT

Sleutel Verwijderd : HKCU\Software\Softonic

Sleutel Verwijderd : HKCU\Software\systweak

Sleutel Verwijderd : HKCU\Software\Webplayer

Sleutel Verwijderd : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}

Sleutel Verwijderd : HKCU\Software\AppDataLow\Software\FromDocToPDF_65

Sleutel Verwijderd : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}

Sleutel Verwijderd : HKLM\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}

Sleutel Verwijderd : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}

Sleutel Verwijderd : HKLM\SOFTWARE\{77D46E27-0E41-4478-87A6-AABE6FBCF252}

Sleutel Verwijderd : HKLM\SOFTWARE\DataMngr

Sleutel Verwijderd : HKLM\SOFTWARE\FromDocToPDF_65

Sleutel Verwijderd : HKLM\SOFTWARE\SearchProtect

Sleutel Verwijderd : HKLM\SOFTWARE\SW-Booster

Sleutel Verwijderd : HKLM\SOFTWARE\systweak

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FromDocToPDF_65bar Uninstall Firefox

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FromDocToPDF_65bar Uninstall Internet Explorer

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5D6D605B-E4B7-490B-A794-9284BC3D2A8B}

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WhiteSmoke_US Toolbar

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17280

-\\ Mozilla Firefox v31.0 (x86 nl)

-\\ Google Chrome v37.0.2062.124

*************************

AdwCleaner[R0].txt - [15461 octets] - [16/10/2014 17:34:58]

AdwCleaner[s0].txt - [15269 octets] - [16/10/2014 17:38:05]

########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [15330 octets] ##########

[kape]

Ook hier geldt weer de opmerking ... jongens, wat een massa rotzooi heeft AdwCleaner weer van de PC gehaald. Nog eentje dan:

Download de Junkware Removal Tool by Thisisu naar je bureaublad.

Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met JRT

(hier of hier) kan je lezen hoe je de gebruikte beveiligingssoftware kunt uitschakelen.

• Dubbelklik op JRT.exe om de tool te starten.
  
• Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  
• De tool zal vervolgens het systeem scannen.
  
• De scan kan afhankelijk van je systeemspecificaties soms vrij lang duren, wacht geduldig af.
  
• Als de scan gereed is zal er een logje (JRT.txt) op het bureaublad opgeslagen worden en automatisch worden geopend.
  
• Post de inhoud van deze log in je volgende bericht als bijlage.
  

[francist]

hieronder het gevraagde log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.3.3 (10.14.2014:1)

OS: Windows 7 Professional x86

Ran by francist on ma 20/10/2014 at 7:34:24,98

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\update mega browse

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\updateLemurLeap_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\updateLemurLeap_RASMANCS

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\utilqualitink_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\utilqualitink_RASMANCS

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\updateWiseEnhance_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\updateWiseEnhance_RASMANCS

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\utilWiseEnhance_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\utilWiseEnhance_RASMANCS

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\WiseEnhance_RASAPI32

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\WiseEnhance_RASMANCS

~~~ Files

~~~ Folders

Successfully deleted: [Folder] "C:\Users\francist\appdata\locallow\sitefinder"

Successfully deleted: [Folder] "C:\Users\francist\Local Settings\Application Data\pc_drivers_headquarters"

~~~ FireFox

Emptied folder: C:\Users\francist\AppData\Roaming\mozilla\firefox\profiles\ff6km64e.default\minidumps [2 files]

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on ma 20/10/2014 at 7:36:30,34

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~