google chrome werkt traag

Piet van Dijk · 26 november 2014

Hallo

Ik heb een nieuwe computer. Onlangs google chrome geÏnstalleerd Deze werkt heel traag. Ik krijg het niet voor elkaar dit probleem te verhelpen.

Groeten, Piet van Dijk

- - - Updated - - -

Hallo.

Ik heb een probleem met google chrome. Het werkt heel traag. Ik hoop dat ik het goed gedaan heb door onderstaande te knippen en te plakken

Hartelijk dank

Piet van Dijk

Logfile of random's system information tool 1.10 (written by random/random)

Run by Piet at 2014-11-26 21:42:36

Microsoft Windows 8.1

System drive C: has 153 GB (80%) free of 190 GB

Total RAM: 3980 MB (54% free)

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 21:42:47, on 26-11-2014

Platform: Unknown Windows (WinNT 6.02.1008)

MSIE: Unable to get Internet Explorer version!

Boot mode: Normal

Running processes:

C:\WINDOWS\syswow64\wwahost.exe

C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE

C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Program Files\trend micro\Piet.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus13.msn.com

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.nl/

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

F2 - REG:system.ini: UserInit=userinit.exe

O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll

O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [ASUSPRP] "C:\Program Files (x86)\ASUS\APRP\APRP.EXE"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Policies\Explorer\Run: [btvStack] "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"

O4 - Startup: Verzenden naar OneNote.lnk = C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000

O8 - Extra context menu item: SafeKey Fill Forms - file://C:\Users\Piet\AppData\LocalLow\SafeKey\context.html?cmd=fillforms

O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105

O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll

O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll

O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll

O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll

O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL

O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

O23 - Service: ArcSoft Connect Daemon (ACDaemon) - Unknown owner - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (file missing)

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)

O23 - Service: AtherosSvc - Qualcomm Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe

O23 - Service: Intel® Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe

O23 - Service: @oem12.inf,%WIN32_DPTF_PARTICIPANT_PROC_SERVICE_DISPLAY_NAME%;Intel® Dynamic Platform and Thermal Framework Processor Participant Service Application (DptfParticipantProcessorService) - Unknown owner - C:\WINDOWS\system32\DptfParticipantProcessorService.exe (file missing)

O23 - Service: @oem12.inf,%WIN32_DPTF_POLICY_CONFIGTDP_SERVICE_DISPLAY_NAME%;Intel® Dynamic Platform and Thermal Framework Config TDP Service Application (DptfPolicyConfigTDPService) - Unknown owner - C:\WINDOWS\system32\DptfPolicyConfigTDPService.exe (file missing)

O23 - Service: @oem12.inf,%WIN32_DPTF_POLICY_CRITICAL_SERVICE_DISPLAY_NAME%;Intel® Dynamic Platform and Thermal Framework Critical Service Application (DptfPolicyCriticalService) - Unknown owner - C:\WINDOWS\system32\DptfPolicyCriticalService.exe (file missing)

O23 - Service: @oem12.inf,%WIN32_DPTF_POLICY_LPM_SERVICE_DISPLAY_NAME%;Intel® Dynamic Platform and Thermal Framework Low Power Mode Service Application (DptfPolicyLpmService) - Unknown owner - C:\WINDOWS\system32\DptfPolicyLpmService.exe (file missing)

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)

O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)

O23 - Service: Intel® Capability Licensing Service Interface - Intel® Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe

O23 - Service: Intel® Capability Licensing Service TCP IP Interface - Intel® Corporation - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe

O23 - Service: Intel® ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe

O23 - Service: Intel® Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)

O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)

O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)

O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

O23 - Service: ZAtheros Bt and Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

--

End of file - 9711 bytes

======Listing Processes======

wininit.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe -k DcomLaunch

C:\WINDOWS\system32\svchost.exe -k RPCSS

C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\WINDOWS\system32\svchost.exe -k netsvcs

C:\WINDOWS\system32\svchost.exe -k LocalService

C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\WINDOWS\system32\svchost.exe -k NetworkService

C:\WINDOWS\System32\spoolsv.exe

C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork

"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"

"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"

"C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" /service

C:\WINDOWS\system32\DptfParticipantProcessorService.exe

dashost.exe {02aa2797-fd58-4bc7-b319f4156ed4170a}

C:\WINDOWS\system32\DptfPolicyConfigTDPService.exe

C:\WINDOWS\system32\DptfPolicyCriticalService.exe

C:\WINDOWS\system32\DptfPolicyLpmService.exe

"C:\Program Files\Intel\iCLS Client\HeciServer.exe"

C:\WINDOWS\system32\svchost.exe -k imgsvc

C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted

"C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe"

C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted

"C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe"

C:\WINDOWS\System32\svchost.exe -k LocalServicePeerNet

C:\WINDOWS\system32\SearchIndexer.exe /Embedding

"C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler64.exe"

C:\WINDOWS\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}

"C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe"

"C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe"

"C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe"

"C:\Program Files\Windows Media Player\wmpnetwk.exe"

C:\WINDOWS\System32\WinLogon.exe -SpecialSession

-hiberboot

taskhostex.exe

C:\WINDOWS\Explorer.EXE

"C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe\LiveComm.exe" -ServerName:Microsoft.WindowsLive.Platform.Server

C:\Windows\System32\skydrive.exe -Embedding

"C:\WINDOWS\syswow64\wwahost.exe" -ServerName:App.wwa

"C:\Windows\System32\SettingSyncHost.exe" -Embedding

C:\Windows\System32\RuntimeBroker.exe -Embedding

"C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE" "C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE" -Embedding

"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"

"C:\Windows\System32\DptfPolicyLpmServiceHelper.exe"

"C:\Windows\System32\igfxtray.exe"

"C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe"

"C:\WINDOWS\system32\igfxsrvc.exe" -Embedding

"C:\Windows\System32\hkcmd.exe"

"C:\Windows\System32\igfxpers.exe"

"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s

"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /MAXX4

"C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE" /tsr

"C:\WINDOWS\system32\wwahost.exe" -ServerName:Microsoft.WindowsLive.Mail.wwa

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" http://datumprikker.nl/f5w2syzna82an7et/

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="5020.0.106213174\1131320765" --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,6,17,38 --disable-accelerated-video-decode --gpu-vendor-id=0x8086 --gpu-device-id=0x0a16 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=10.18.10.3308 --ignored=" --type=renderer " /prefetch:822062411

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=nl --force-fieldtrials="DomRel-Enable/control/EmbeddedSearch/Group4 pct:10d stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionContentVerification/Bootstrap/ExtensionInstallVerification/Enforce/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/Hivemind_A4_Stable_R7_Postperiod/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/ControlForLargePopulation/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SDCH/EnabledAll/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_73/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --channel="5020.1.1356721481\997274029" /prefetch:673131151

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="5020.3.1372746479\336307080" --ppapi-flash-args=enable_hw_video_decode=1 --lang=nl --ignored=" --type=renderer " /prefetch:-632637702

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=nl --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/DomRel-Enable/control/EmbeddedSearch/Group4 pct:10d stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/ExtensionContentVerification/Bootstrap/ExtensionInstallVerification/Enforce/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/Hivemind_A4_Stable_R7_Postperiod/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/ControlForLargePopulation/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SDCH/EnabledAll/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_73/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --channel="5020.4.117863767\1012994472" /prefetch:673131151

"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe98_ Global\UsGthrCtrlFltPipeMssGthrPipe98 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"

"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=nl --force-fieldtrials="AutoReloadExperiment/Enabled/AutoReloadVisibleOnlyExperiment/Enabled/BrowserBlacklist/Enabled/DomRel-Enable/control/EmbeddedSearch/Group4 pct:10d stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnableSessionCrashedBubbleUI/Disabled/ExtensionContentVerification/Bootstrap/ExtensionInstallVerification/Enforce/GoogleNow/Enable/NewProfileManagement/OldAvatarMenu/OmniboxBundledExperimentV1/Hivemind_A4_Stable_R7_Postperiod/PasswordGeneration/Disabled/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/ControlForLargePopulation/RapporRollout/Enabled/RememberCertificateErrorDecisions/Default/SDCH/EnabledAll/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-New-Install-Uniformity-Trial/Control/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_16/UMA-Uniformity-Trial-1-Percent/group_73/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_01/UMA-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --enable-delegated-renderer --enable-impl-side-painting --num-raster-threads=1 --disable-accelerated-video-decode --channel="5020.6.1619002059\823536627" /prefetch:673131151

"D:\Downloads\RSITx64.exe"

"C:\WINDOWS\system32\SearchFilterHost.exe" 0 568 572 580 65536 576

C:\WINDOWS\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c

C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]

Lync Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2014-10-14 218776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126}]

CIESpeechBHO Class - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2013-01-25 66688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]

Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2014-10-14 2334928]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]

Lync Browser Helper - C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2014-10-14 153248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]

Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2014-10-14 1729752]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"DptfPolicyLpmServiceHelper"=C:\WINDOWS\system32\DptfPolicyLpmServiceHelper.exe [2013-07-31 79376]

"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2013-10-01 391128]

"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2013-10-01 771032]

"Persistence"=C:\Windows\system32\igfxpers.exe [2013-10-01 769496]

"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2013-08-13 13642968]

"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2013-08-07 1321688]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]

"BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2013-01-25 131712]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]

"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe []

"ASUSPRP"=C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2013-04-26 3187360]

"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21 959176]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]

"BtvStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2013-01-25 131712]

C:\Users\Piet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

Verzenden naar OneNote.lnk - C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]

C:\WINDOWS\system32\igfxdev.dll [2013-10-01 623104]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\prwntdrv]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\mcpltsvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\prwntdrv]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"DisableCAD"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]

"msacm.l3acm"=C:\Windows\System32\l3codeca.acm

"VIDC.YUY2"=msyuv.dll

"vidc.i420"=iyuv_32.dll

"msacm.msgsm610"=msgsm32.acm

"msacm.msg711"=msg711.acm

"VIDC.YVYU"=msyuv.dll

"VIDC.YVU9"=tsbyuv.dll

"wavemapper"=msacm32.drv

"midimapper"=midimap.dll

"VIDC.UYVY"=msyuv.dll

"VIDC.IYUV"=iyuv_32.dll

"vidc.mrle"=msrle32.dll

"msacm.imaadpcm"=imaadp32.acm

"msacm.msadpcm"=msadp32.acm

"vidc.msvc"=msvidc32.dll

"wave"=wdmaud.drv

"midi"=wdmaud.drv

"mixer"=wdmaud.drv

"aux"=wdmaud.drv

"wave2"=wdmaud.drv

"midi2"=wdmaud.drv

"mixer2"=wdmaud.drv

"aux1"=wdmaud.drv

"MSVideo8"=VfWWDM32.dll

"wave4"=wdmaud.drv

"mixer4"=wdmaud.drv

"midi4"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-11-26 21:42:36 ----D---- C:\rsit

2014-11-26 21:42:36 ----D---- C:\Program Files\trend micro

2014-11-21 09:54:02 ----D---- C:\ProgramData\ArcSoft

2014-11-21 09:53:54 ----A---- C:\WINDOWS\SYSWOW64\drivers\afc.sys

2014-11-21 09:53:50 ----A---- C:\WINDOWS\PCDLIB32.DLL

2014-11-21 09:53:21 ----D---- C:\Users\Piet\AppData\Roaming\ArcSoft

2014-11-21 09:44:39 ----D---- C:\WINDOWS\FilmScan

2014-11-21 09:44:39 ----D---- C:\WINDOWS\FILMCAM

2014-11-19 16:04:52 ----A---- C:\WINDOWS\SYSWOW64\pku2u.dll

2014-11-19 16:04:52 ----A---- C:\WINDOWS\SYSWOW64\kerberos.dll

2014-11-19 16:04:52 ----A---- C:\WINDOWS\system32\kerberos.dll

2014-11-19 16:04:51 ----A---- C:\WINDOWS\system32\pku2u.dll

2014-11-14 15:45:30 ----A---- C:\WINDOWS\system32\user32.dll

2014-11-14 15:45:28 ----A---- C:\WINDOWS\SYSWOW64\user32.dll

2014-11-14 15:45:27 ----A---- C:\WINDOWS\system32\drivers\WdFilter.sys

2014-11-14 15:45:26 ----A---- C:\WINDOWS\system32\drivers\WdNisDrv.sys

2014-11-14 15:45:25 ----A---- C:\WINDOWS\system32\drivers\WdBoot.sys

2014-11-14 15:45:23 ----A---- C:\WINDOWS\SYSWOW64\winshfhc.dll

2014-11-14 15:45:23 ----A---- C:\WINDOWS\system32\winshfhc.dll

2014-11-14 15:44:50 ----A---- C:\WINDOWS\SYSWOW64\msi.dll

2014-11-14 15:44:49 ----A---- C:\WINDOWS\SYSWOW64\authui.dll

2014-11-14 15:44:49 ----A---- C:\WINDOWS\system32\msihnd.dll

2014-11-14 15:44:49 ----A---- C:\WINDOWS\system32\msi.dll

2014-11-14 15:44:49 ----A---- C:\WINDOWS\system32\authui.dll

2014-11-14 15:44:48 ----A---- C:\WINDOWS\SYSWOW64\msihnd.dll

2014-11-14 15:44:48 ----A---- C:\WINDOWS\system32\consent.exe

2014-11-14 15:44:48 ----A---- C:\WINDOWS\system32\appinfo.dll

2014-11-13 10:20:08 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll

2014-11-13 10:20:08 ----A---- C:\WINDOWS\system32\schannel.dll

2014-11-13 10:20:07 ----A---- C:\WINDOWS\SYSWOW64\ncryptsslp.dll

2014-11-13 10:20:07 ----A---- C:\WINDOWS\system32\ncryptsslp.dll

2014-11-13 10:20:07 ----A---- C:\WINDOWS\system32\dpapisrv.dll

2014-11-12 22:48:55 ----A---- C:\WINDOWS\system32\rdpcorets.dll

2014-11-12 22:48:54 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll

2014-11-12 22:48:54 ----A---- C:\WINDOWS\system32\lsasrv.dll

2014-11-12 22:48:54 ----A---- C:\WINDOWS\system32\drivers\ksecpkg.sys

2014-11-12 22:48:54 ----A---- C:\WINDOWS\system32\drivers\cng.sys

2014-11-12 22:48:54 ----A---- C:\WINDOWS\system32\certcli.dll

2014-11-12 22:48:54 ----A---- C:\WINDOWS\system32\adtschema.dll

2014-11-12 22:48:53 ----A---- C:\WINDOWS\SYSWOW64\msaudite.dll

2014-11-12 22:48:53 ----A---- C:\WINDOWS\SYSWOW64\adtschema.dll

2014-11-12 22:48:53 ----A---- C:\WINDOWS\system32\rfxvmt.dll

2014-11-12 22:48:53 ----A---- C:\WINDOWS\system32\msaudite.dll

2014-11-12 22:48:53 ----A---- C:\WINDOWS\system32\drivers\rdpvideominiport.sys

2014-11-12 19:48:49 ----A---- C:\WINDOWS\system32\rdpudd.dll

2014-11-12 19:47:59 ----A---- C:\WINDOWS\SYSWOW64\oleaut32.dll

2014-11-12 19:47:59 ----A---- C:\WINDOWS\system32\oleaut32.dll

2014-11-12 19:47:55 ----A---- C:\WINDOWS\system32\wuaueng.dll

2014-11-12 19:47:54 ----A---- C:\WINDOWS\SYSWOW64\wuwebv.dll

2014-11-12 19:47:54 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll

2014-11-12 19:47:54 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll

2014-11-12 19:47:54 ----A---- C:\WINDOWS\system32\wucltux.dll

2014-11-12 19:47:54 ----A---- C:\WINDOWS\system32\wuapi.dll

2014-11-12 19:47:53 ----A---- C:\WINDOWS\SYSWOW64\wups.dll

2014-11-12 19:47:53 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll

2014-11-12 19:47:53 ----A---- C:\WINDOWS\SYSWOW64\wuapp.exe

2014-11-12 19:47:53 ----A---- C:\WINDOWS\system32\wuwebv.dll

2014-11-12 19:47:53 ----A---- C:\WINDOWS\system32\wups2.dll

2014-11-12 19:47:53 ----A---- C:\WINDOWS\system32\wups.dll

2014-11-12 19:47:53 ----A---- C:\WINDOWS\system32\wudriver.dll

2014-11-12 19:47:53 ----A---- C:\WINDOWS\system32\wuauclt.exe

2014-11-12 19:47:53 ----A---- C:\WINDOWS\system32\wuapp.exe

2014-11-12 19:47:53 ----A---- C:\WINDOWS\system32\wuaext.dll

2014-11-12 19:47:08 ----A---- C:\WINDOWS\system32\mshtml.dll

2014-11-12 19:47:07 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll

2014-11-12 19:46:36 ----A---- C:\WINDOWS\system32\ieframe.dll

2014-11-12 19:46:30 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll

2014-11-12 19:46:25 ----A---- C:\WINDOWS\system32\jscript9.dll

2014-11-12 19:46:23 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll

2014-11-12 19:46:22 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll

2014-11-12 19:46:22 ----A---- C:\WINDOWS\system32\wininet.dll

2014-11-12 19:46:21 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll

2014-11-12 19:46:21 ----A---- C:\WINDOWS\system32\urlmon.dll

2014-11-12 19:46:21 ----A---- C:\WINDOWS\system32\inetcomm.dll

2014-11-12 19:46:21 ----A---- C:\WINDOWS\system32\iertutil.dll

2014-11-12 19:46:21 ----A---- C:\WINDOWS\system32\actxprxy.dll

2014-11-12 19:46:20 ----A---- C:\WINDOWS\SYSWOW64\jscript.dll

2014-11-12 19:46:20 ----A---- C:\WINDOWS\SYSWOW64\inetcomm.dll

2014-11-12 19:46:20 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll

2014-11-12 19:46:19 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll

2014-11-12 19:46:19 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll

2014-11-12 19:46:19 ----A---- C:\WINDOWS\SYSWOW64\ieui.dll

2014-11-12 19:46:19 ----A---- C:\WINDOWS\system32\vbscript.dll

2014-11-12 19:46:19 ----A---- C:\WINDOWS\system32\msfeeds.dll

2014-11-12 19:46:19 ----A---- C:\WINDOWS\system32\jscript9diag.dll

2014-11-12 19:46:19 ----A---- C:\WINDOWS\system32\jscript.dll

2014-11-12 19:46:19 ----A---- C:\WINDOWS\system32\ieui.dll

2014-11-12 19:46:18 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll

2014-11-12 19:46:18 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll

2014-11-12 19:46:18 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll

2014-11-12 19:46:18 ----A---- C:\WINDOWS\SYSWOW64\dxtmsft.dll

2014-11-12 19:46:18 ----A---- C:\WINDOWS\system32\dxtrans.dll

2014-11-12 19:46:18 ----A---- C:\WINDOWS\system32\dxtmsft.dll

2014-11-12 19:46:17 ----A---- C:\WINDOWS\SYSWOW64\webcheck.dll

2014-11-12 19:46:17 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll

2014-11-12 19:46:17 ----A---- C:\WINDOWS\system32\webcheck.dll

2014-11-12 19:46:17 ----A---- C:\WINDOWS\system32\ieetwproxystub.dll

2014-11-12 19:46:17 ----A---- C:\WINDOWS\system32\ieapfltr.dll

2014-11-12 19:46:16 ----A---- C:\WINDOWS\SYSWOW64\msrating.dll

2014-11-12 19:46:16 ----A---- C:\WINDOWS\SYSWOW64\msfeedsbs.dll

2014-11-12 19:46:16 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll

2014-11-12 19:46:16 ----A---- C:\WINDOWS\SYSWOW64\inseng.dll

2014-11-12 19:46:16 ----A---- C:\WINDOWS\SYSWOW64\ieUnatt.exe

2014-11-12 19:46:16 ----A---- C:\WINDOWS\SYSWOW64\iesysprep.dll

2014-11-12 19:46:16 ----A---- C:\WINDOWS\SYSWOW64\iepeers.dll

2014-11-12 19:46:16 ----A---- C:\WINDOWS\SYSWOW64\hlink.dll

2014-11-12 19:46:16 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll

2014-11-12 19:46:16 ----A---- C:\WINDOWS\system32\mshtmled.dll

2014-11-12 19:46:16 ----A---- C:\WINDOWS\system32\msfeedsbs.dll

2014-11-12 19:46:16 ----A---- C:\WINDOWS\system32\JavaScriptCollectionAgent.dll

2014-11-12 19:46:16 ----A---- C:\WINDOWS\system32\inseng.dll

2014-11-12 19:46:16 ----A---- C:\WINDOWS\system32\ieUnatt.exe

2014-11-12 19:46:16 ----A---- C:\WINDOWS\system32\iesysprep.dll

2014-11-12 19:46:16 ----A---- C:\WINDOWS\system32\iepeers.dll

2014-11-12 19:46:16 ----A---- C:\WINDOWS\system32\ieetwcollector.exe

2014-11-12 19:46:16 ----A---- C:\WINDOWS\system32\iedkcs32.dll

2014-11-12 19:46:16 ----A---- C:\WINDOWS\system32\ie4uinit.exe

2014-11-12 19:46:16 ----A---- C:\WINDOWS\system32\hlink.dll

2014-11-12 19:46:15 ----A---- C:\WINDOWS\SYSWOW64\wextract.exe

2014-11-12 19:46:15 ----A---- C:\WINDOWS\SYSWOW64\url.dll

2014-11-12 19:46:15 ----A---- C:\WINDOWS\SYSWOW64\pngfilt.dll

2014-11-12 19:46:15 ----A---- C:\WINDOWS\SYSWOW64\occache.dll

2014-11-12 19:46:15 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll

2014-11-12 19:46:15 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll

2014-11-12 19:46:15 ----A---- C:\WINDOWS\SYSWOW64\mshta.exe

2014-11-12 19:46:15 ----A---- C:\WINDOWS\SYSWOW64\msfeedssync.exe

2014-11-12 19:46:15 ----A---- C:\WINDOWS\SYSWOW64\licmgr10.dll

2014-11-12 19:46:15 ----A---- C:\WINDOWS\SYSWOW64\JavaScriptCollectionAgent.dll

2014-11-12 19:46:15 ----A---- C:\WINDOWS\SYSWOW64\imgutil.dll

2014-11-12 19:46:15 ----A---- C:\WINDOWS\SYSWOW64\iexpress.exe

2014-11-12 19:46:15 ----A---- C:\WINDOWS\SYSWOW64\iesetup.dll

2014-11-12 19:46:15 ----A---- C:\WINDOWS\SYSWOW64\iernonce.dll

2014-11-12 19:46:15 ----A---- C:\WINDOWS\SYSWOW64\ieetwproxystub.dll

2014-11-12 19:46:15 ----A---- C:\WINDOWS\SYSWOW64\IEAdvpack.dll

2014-11-12 19:46:15 ----A---- C:\WINDOWS\system32\wextract.exe

2014-11-12 19:46:15 ----A---- C:\WINDOWS\system32\url.dll

2014-11-12 19:46:15 ----A---- C:\WINDOWS\system32\pngfilt.dll

2014-11-12 19:46:15 ----A---- C:\WINDOWS\system32\occache.dll

2014-11-12 19:46:15 ----A---- C:\WINDOWS\system32\msrating.dll

2014-11-12 19:46:15 ----A---- C:\WINDOWS\system32\MshtmlDac.dll

2014-11-12 19:46:15 ----A---- C:\WINDOWS\system32\mshta.exe

2014-11-12 19:46:15 ----A---- C:\WINDOWS\system32\msfeedssync.exe

2014-11-12 19:46:15 ----A---- C:\WINDOWS\system32\licmgr10.dll

2014-11-12 19:46:15 ----A---- C:\WINDOWS\system32\jsproxy.dll

2014-11-12 19:46:15 ----A---- C:\WINDOWS\system32\imgutil.dll

2014-11-12 19:46:15 ----A---- C:\WINDOWS\system32\iexpress.exe

2014-11-12 19:46:15 ----A---- C:\WINDOWS\system32\iesetup.dll

2014-11-12 19:46:15 ----A---- C:\WINDOWS\system32\iernonce.dll

2014-11-12 19:46:15 ----A---- C:\WINDOWS\system32\IEAdvpack.dll

2014-11-12 19:45:51 ----A---- C:\WINDOWS\SYSWOW64\msxml3.dll

2014-11-12 19:45:51 ----A---- C:\WINDOWS\system32\msxml3.dll

2014-11-12 19:45:50 ----A---- C:\WINDOWS\SYSWOW64\AudioSes.dll

2014-11-12 19:45:50 ----A---- C:\WINDOWS\SYSWOW64\AUDIOKSE.dll

2014-11-12 19:45:50 ----A---- C:\WINDOWS\system32\audiosrv.dll

2014-11-12 19:45:50 ----A---- C:\WINDOWS\system32\AudioSes.dll

2014-11-12 19:45:50 ----A---- C:\WINDOWS\system32\AUDIOKSE.dll

2014-11-12 19:45:50 ----A---- C:\WINDOWS\system32\audiodg.exe

2014-11-12 19:45:49 ----A---- C:\WINDOWS\SYSWOW64\packager.dll

2014-11-12 19:45:49 ----A---- C:\WINDOWS\SYSWOW64\AudioEng.dll

2014-11-12 19:45:49 ----A---- C:\WINDOWS\system32\win32k.sys

2014-11-12 19:45:49 ----A---- C:\WINDOWS\system32\packager.dll

2014-11-12 19:45:49 ----A---- C:\WINDOWS\system32\EncDump.dll

2014-11-12 19:45:49 ----A---- C:\WINDOWS\system32\AudioEng.dll

2014-11-12 19:45:49 ----A---- C:\WINDOWS\system32\AudioEndpointBuilder.dll

2014-11-12 19:45:41 ----A---- C:\WINDOWS\system32\shell32.dll

2014-11-12 19:45:41 ----A---- C:\WINDOWS\system32\ntoskrnl.exe

2014-11-12 19:45:40 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll

2014-11-12 19:45:39 ----A---- C:\WINDOWS\system32\twinui.dll

2014-11-12 19:45:39 ----A---- C:\WINDOWS\system32\SettingsHandlers.dll

2014-11-12 19:45:38 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll

2014-11-12 19:45:38 ----A---- C:\WINDOWS\system32\MFMediaEngine.dll

2014-11-12 19:45:38 ----A---- C:\WINDOWS\system32\localspl.dll

2014-11-12 19:45:38 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys

2014-11-12 19:45:37 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll

2014-11-12 19:45:37 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll

2014-11-12 19:45:37 ----A---- C:\WINDOWS\SYSWOW64\MFMediaEngine.dll

2014-11-12 19:45:37 ----A---- C:\WINDOWS\system32\win32spl.dll

2014-11-12 19:45:36 ----A---- C:\WINDOWS\SYSWOW64\WsmSvc.dll

2014-11-12 19:45:36 ----A---- C:\WINDOWS\SYSWOW64\puiobj.dll

2014-11-12 19:45:36 ----A---- C:\WINDOWS\system32\WsmSvc.dll

2014-11-12 19:45:36 ----A---- C:\WINDOWS\system32\puiobj.dll

2014-11-12 19:45:36 ----A---- C:\WINDOWS\system32\drivers\netio.sys

2014-11-12 19:45:35 ----AC---- C:\WINDOWS\system32\drivers\USBSTOR.SYS

2014-11-12 19:45:35 ----A---- C:\WINDOWS\SYSWOW64\untfs.dll

2014-11-12 19:45:35 ----A---- C:\WINDOWS\system32\untfs.dll

2014-11-12 19:45:35 ----A---- C:\WINDOWS\system32\FXSCOMEX.dll

2014-11-12 19:45:35 ----A---- C:\WINDOWS\system32\drivers\FWPKCLNT.SYS

2014-11-12 19:45:34 ----A---- C:\WINDOWS\SYSWOW64\FXSAPI.dll

2014-11-12 19:45:34 ----A---- C:\WINDOWS\system32\FXSAPI.dll

2014-10-30 20:01:37 ----D---- C:\ProgramData\ASUS

2014-10-30 19:41:42 ----D---- C:\Teruggehaalde bestanden

2014-10-30 19:23:16 ----D---- C:\Program Files\Recuva

2014-10-27 21:40:29 ----D---- C:\WINDOWS\nl

2014-10-27 21:40:17 ----D---- C:\WINDOWS\de

2014-10-27 21:40:11 ----D---- C:\WINDOWS\fr

2014-10-27 21:40:04 ----D---- C:\WINDOWS\it

2014-10-27 20:49:23 ----A---- C:\WINDOWS\system32\drivers\{b0c7827f-c845-429a-833b-c2a798fc4fc3}Gw64.sys

======List of files/folders modified in the last 1 month======

2014-11-26 21:42:36 ----RD---- C:\Program Files

2014-11-26 21:38:46 ----D---- C:\WINDOWS\Temp

2014-11-26 21:38:29 ----D---- C:\WINDOWS\AppReadiness

2014-11-26 21:38:26 ----HD---- C:\Program Files\WindowsApps

2014-11-26 21:37:59 ----D---- C:\WINDOWS\Prefetch

2014-11-26 21:34:56 ----D---- C:\WINDOWS\system32\sru

2014-11-25 22:36:25 ----D---- C:\WINDOWS\LiveKernelReports

2014-11-25 20:44:09 ----D---- C:\WINDOWS\system32\config

2014-11-25 20:37:01 ----D---- C:\WINDOWS\WinSxS

2014-11-25 20:36:28 ----D---- C:\WINDOWS\system32\catroot2

2014-11-25 19:00:52 ----D---- C:\WINDOWS\System32

2014-11-25 19:00:52 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI

2014-11-25 19:00:51 ----D---- C:\WINDOWS\Inf

2014-11-24 15:50:39 ----D---- C:\WINDOWS\system32\DriverStore

2014-11-24 15:35:50 ----D---- C:\WINDOWS\Microsoft.NET

2014-11-23 16:10:35 ----D---- C:\Program Files (x86)

2014-11-23 16:10:30 ----HD---- C:\Program Files (x86)\InstallShield Installation Information

2014-11-23 16:10:27 ----D---- C:\WINDOWS\SysWOW64

2014-11-23 16:08:44 ----SHD---- C:\System Volume Information

2014-11-21 13:50:14 ----RSD---- C:\WINDOWS\assembly

2014-11-21 09:54:02 ----HD---- C:\ProgramData

2014-11-21 09:53:54 ----D---- C:\WINDOWS\SYSWOW64\drivers

2014-11-21 09:53:51 ----D---- C:\Windows

2014-11-21 09:53:40 ----D---- C:\Program Files (x86)\Common Files

2014-11-21 09:44:39 ----SHD---- C:\WINDOWS\Installer

2014-11-21 09:44:39 ----D---- C:\WINDOWS\twain_32

2014-11-19 17:11:33 ----D---- C:\WINDOWS\CbsTemp

2014-11-18 09:18:36 ----D---- C:\ProgramData\regid.1991-06.com.microsoft

2014-11-18 09:17:35 ----D---- C:\Program Files\Microsoft Office 15

2014-11-16 15:10:13 ----D---- C:\WINDOWS\rescache

2014-11-16 14:54:36 ----D---- C:\WINDOWS\system32\drivers

2014-11-16 14:54:36 ----D---- C:\Program Files\Windows Defender

2014-11-16 14:54:36 ----D---- C:\Program Files (x86)\Windows Defender

2014-11-14 16:26:57 ----D---- C:\WINDOWS\system32\MRT

2014-11-14 16:25:06 ----A---- C:\WINDOWS\system32\MRT.exe

2014-11-14 14:18:41 ----D---- C:\Program Files (x86)\ALDI

2014-11-14 14:13:30 ----D---- C:\WINDOWS\Tasks

2014-11-13 21:46:45 ----D---- C:\WINDOWS\SYSWOW64\nl-NL

2014-11-13 21:46:45 ----D---- C:\WINDOWS\SYSWOW64\migration

2014-11-13 21:46:45 ----D---- C:\WINDOWS\system32\nl-NL

2014-11-13 21:46:45 ----D---- C:\WINDOWS\system32\migration

2014-11-13 21:46:45 ----D---- C:\Program Files (x86)\Internet Explorer

2014-11-13 21:46:44 ----RD---- C:\WINDOWS\ToastData

2014-11-13 21:46:44 ----D---- C:\WINDOWS\system32\wbem

2014-11-13 21:46:44 ----D---- C:\Program Files\Internet Explorer

2014-11-13 21:46:43 ----RD---- C:\WINDOWS\ImmersiveControlPanel

2014-11-13 21:46:43 ----D---- C:\WINDOWS\apppatch

2014-11-11 21:50:57 ----D---- C:\WINDOWS\Minidump

2014-10-31 10:48:51 ----D---- C:\Program Files\Google

2014-10-31 10:48:51 ----D---- C:\Program Files (x86)\Google

2014-10-30 20:03:39 ----D---- C:\Program Files (x86)\ASUS

2014-10-30 20:03:34 ----D---- C:\WINDOWS\system32\Tasks

2014-10-30 20:01:15 ----D---- C:\AsusVibeData

2014-10-30 20:00:53 ----D---- C:\ProgramData\CyberLink

2014-10-30 12:25:26 ----N---- C:\WINDOWS\system32\MpSigStub.exe

2014-10-30 01:55:02 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe

2014-10-27 21:40:23 ----D---- C:\WINDOWS\en-GB

2014-10-27 21:39:25 ----D---- C:\Program Files (x86)\Windows Live

2014-10-27 21:38:50 ----D---- C:\WINDOWS\Logs

2014-10-27 20:49:25 ----A---- C:\WINDOWS\win.ini

2014-10-27 20:10:59 ----D---- C:\Users\Piet\AppData\Roaming\Systweak

2014-10-27 19:45:11 ----D---- C:\Program Files (x86)\Free YouTube Downloader

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2013-05-03 677360]

R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]

R3 Afc;PPdus ASPI Shell; C:\WINDOWS\SysWOW64\drivers\Afc.sys [2006-11-14 22784]

R3 athr;@athw8x.inf,%ATHR.Service.DispName%;Qualcomm Atheros Extensible Wireless LAN device driver; C:\WINDOWS\system32\DRIVERS\athw8x.sys [2013-06-18 3680256]

R3 BTATH_HCRP;@oem14.inf,%BTATH_HCRP.SvcDesc%;Bluetooth HCRP Server driver; C:\WINDOWS\System32\drivers\btath_hcrp.sys [2013-01-25 179432]

R3 BTATH_RCP;@oem18.inf,%BTATH_RCP%;Bluetooth AVRCP Device; C:\WINDOWS\System32\drivers\btath_rcp.sys [2013-01-25 136424]

R3 BtFilter;BtFilter; C:\WINDOWS\system32\DRIVERS\btfilter.sys [2014-04-28 599240]

R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Bluetooth Enumerator-service; C:\WINDOWS\System32\drivers\BthEnum.sys [2013-08-22 53248]

R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy-stuurprogramma; C:\WINDOWS\system32\DRIVERS\BthLEEnum.sys [2014-03-18 226304]

R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2014-07-24 118272]

R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;USB-stuurprogramma voor Bluetooth-radio; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2014-03-18 81920]

R3 DptfDevDram;DptfDevDram; C:\WINDOWS\system32\DRIVERS\DptfDevDram.sys [2013-07-31 68072]

R3 DptfDevPch;DptfDevPch; C:\WINDOWS\system32\DRIVERS\DptfDevPch.sys [2013-07-31 57216]

R3 DptfDevProc;DptfDevProc; C:\WINDOWS\system32\DRIVERS\DptfDevProc.sys [2013-07-31 120256]

R3 DptfManager;DptfManager; C:\WINDOWS\system32\DRIVERS\DptfManager.sys [2013-07-31 200808]

R3 HIDSwitch;@oem15.inf,%ASSW.DisplayName%;ASUS Wireless Radio Control; C:\WINDOWS\System32\drivers\AsHIDSwitch64.sys [2013-08-06 19256]

R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2013-10-01 4177920]

R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2013-08-13 3588184]

R3 iwdbus;@oem30.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2013-08-22 26008]

R3 kbfiltr;@oem17.inf,%kbfiltr.SvcDesc%;Keyboard Filter; C:\WINDOWS\System32\drivers\kbfiltr.sys [2012-08-02 14992]

R3 MEIx64;@oem13.inf,%TEE_SvcDesc%;Intel® Management Engine Interface ; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [2013-05-31 99800]

R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2014-03-18 167424]

R3 RSUSBVSTOR;@oem6.inf,%RSUSBVSTOR.SvcDesc%;RtsUVStor.Sys Realtek USB Card Reader; C:\WINDOWS\System32\Drivers\RtsUVStor.sys [2013-01-15 327240]

R3 RTL8168;@netrt630x64.inf,%rtl8168.Service.DispName%;Realtek 8168 NT-stuurprogramma; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [2013-06-18 591360]

R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;USB-videoapparaat (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2013-08-22 212224]

R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]

S3 AthBTPort;@oem11.inf,%BTHSUPPORT.SvcDesc%;Qualcomm Atheros Virtual Bluetooth Class; C:\WINDOWS\system32\DRIVERS\btath_flt.sys [2013-01-25 89168]

S3 ATP;@oem5.inf,%PS2.DeviceDesc%;ASUS Input Device; C:\WINDOWS\System32\drivers\AsusTP.sys [2013-09-04 70416]

S3 BTATH_A2DP;@oem10.inf,%BTATH_A2DP.SvcDesc%;Bluetooth A2DP Audio Driver; C:\WINDOWS\system32\drivers\btath_a2dp.sys [2013-01-25 346192]

S3 btath_avdt;@oem10.inf,%btath_avdt.SvcDesc%;Qualcomm Atheros Bluetooth AVDT Service; C:\WINDOWS\system32\drivers\btath_avdt.sys [2013-01-25 115280]

S3 BTATH_LWFLT;@oem22.inf,%BTATH_LWFLT%;Bluetooth LWFLT Device; C:\WINDOWS\system32\DRIVERS\btath_lwflt.sys [2013-01-25 77464]

S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Stuurprogramma voor Bluetooth-poort; C:\WINDOWS\System32\Drivers\BTHport.sys [2014-07-24 1200640]

S3 dot4;@oem32.inf,%Dot4_Name%;MS IEEE-1284.4 Driver; C:\WINDOWS\system32\DRIVERS\Dot4.sys [2012-10-19 151968]

S3 Dot4Print;@oem33.inf,%Dot4Print_Name%;Print Class Driver for IEEE-1284.4; C:\WINDOWS\System32\drivers\Dot4Prt.sys [2012-10-19 27040]

S3 dot4usb;@oem32.inf,%DOT4USB_NAME%;Dot4USB Filter; C:\WINDOWS\system32\DRIVERS\dot4usb.sys [2012-10-19 49056]

S3 intaud_WaveExtensible;@oem29.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2013-08-22 39320]

S3 IntcDAud;@oem26.inf,%IntcDAud.SvcDesc%;Intel® Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2013-09-26 452088]

S3 usbaudio;@wdma_usb.inf,%USBAudio.SvcDesc%;Stuurprogramma voor USB-audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2014-03-18 121088]

S3 WinUsb;@wpdmtp.inf,%WinUsb.SvcDesc%;WinUsb; C:\WINDOWS\system32\DRIVERS\WinUsb.sys [2013-08-22 78848]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-12 64704]

R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2013-01-25 227456]

R2 ClickToRunSvc;Microsoft Office ClickToRun Service; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2014-10-30 2443960]

R2 DptfParticipantProcessorService;@oem12.inf,%WIN32_DPTF_PARTICIPANT_PROC_SERVICE_DISPLAY_NAME%;Intel® Dynamic Platform and Thermal Framework Processor Participant Service Application; C:\WINDOWS\system32\DptfParticipantProcessorService.exe [2013-07-31 83032]

R2 DptfPolicyConfigTDPService;@oem12.inf,%WIN32_DPTF_POLICY_CONFIGTDP_SERVICE_DISPLAY_NAME%;Intel® Dynamic Platform and Thermal Framework Config TDP Service Application; C:\WINDOWS\system32\DptfPolicyConfigTDPService.exe [2013-07-31 100032]

R2 DptfPolicyCriticalService;@oem12.inf,%WIN32_DPTF_POLICY_CRITICAL_SERVICE_DISPLAY_NAME%;Intel® Dynamic Platform and Thermal Framework Critical Service Application; C:\WINDOWS\system32\DptfPolicyCriticalService.exe [2013-07-31 84568]

R2 DptfPolicyLpmService;@oem12.inf,%WIN32_DPTF_POLICY_LPM_SERVICE_DISPLAY_NAME%;Intel® Dynamic Platform and Thermal Framework Low Power Mode Service Application; C:\WINDOWS\system32\DptfPolicyLpmService.exe [2013-07-31 92864]

R2 Intel® Capability Licensing Service Interface;Intel® Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2013-05-11 733696]

R2 Intel® ME Service;Intel® ME Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe [2013-05-31 131544]

R2 jhi_service;Intel® Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [2013-05-31 169432]

R2 LMS;Intel® Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe [2013-05-31 368600]

S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-22 116648]

S3 ACDaemon;ArcSoft Connect Daemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe []

S3 cphs;Intel® Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2013-10-01 279000]

S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]

S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-22 116648]

S3 Intel® Capability Licensing Service TCP IP Interface;Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [2013-05-11 822232]

S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2013-02-01 150600]

-----------------EOF-----------------

iEscape · 26 november 2014

@ Piet,

Uw topic is verplaatst aar het forum-onderdeel Bestrijding malware & virussen.

Zodra een malware/virus expert online is wordt u verder geholpen.

kape · 27 november 2014

Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe (hier en hier) kan je lezen hoe je dat doet.

Download Zoek.exe naar het bureaublad (niet de .zip- of .rar-versie)

Wanneer Internet Explorer of een andere browser of virusscanner melding geeft dat dit bestand onveilig zou zijn kun je negeren, dit is namelijk een onterechte waarschuwing.
Dubbelklik op Zoek.exe om de tool te starten.
Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
Kopieer nu onderstaande code en plak die in het grote invulvenster:
Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.

CHRdefaults;
emptyfolderscheck;delete 
startupall; 
filesrcm;

Klik op de knop "More options" en vink nu de onderstaande opties aan.
Do a Deep Scan
Autoclean
De optie "Scan All Users" staat standaard aangevinkt.
Klik nu op de knop "Run script".
Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
Mocht er geen logje verschijnen, start zoek.exe dan opnieuw en klik op de knop zoek-results.log, de log verschijnt dan alsnog.
Post het geopende logje in het volgende bericht als bijlage.

Zoek.exe logbestand plaatsen

Voeg het logbestand met de naam "Zoek-results.log" als bijlage toe aan het volgende bericht. (Dit logbestand kunt u tevens terug vinden op de systeemschijf als C:\\Zoek-results.log.)
Hoe u een bijlage kunt toevoegen aan het bericht leest u hier.

Piet van Dijk · 28 november 2014

Goedemorgen

Ik het de deep-scane gedaan. In de handleiding staat dat ik onderaan mijn bericht 'meer opties' kan aanklikken. Die vind ik niet. Ik wil de bijlage versturen, maar vind hier nu geen paperclip. Ik heb nu hieronder met knippen en plakken de resultaten van de deepscan bijgevoegd. Had ik het anders moeten doen??

groeten, Piet van Dijk.

Zoek.exe v5.0.0.0 Updated 27-11-2014

Tool run by Piet on vr 28-11-2014 at 9:25:54,82.

Microsoft Windows 8.1 6.3.9600 x64

Running in: Normal Mode Internet Access Detected

Launched: C:\Users\Piet\Desktop\zoek.exe [scan all users] [script inserted] [Checkboxes used]

==== System Restore Info ======================

28-11-2014 09:29:17 Zoek.exe System Restore Point Created Succesfully.

==== Empty Folders Check ======================

C:\PROGRA~2\ALDI deleted successfully

C:\Program Files\Google deleted successfully

C:\Program Files\stinger deleted successfully

C:\Users\Piet\AppData\Roaming\Systweak deleted successfully

C:\Users\Piet\AppData\Local\VirtualStore deleted successfully

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== Running Processes ======================

C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe

C:\Program Files (x86)\Intel\Intel® Management Engine Components\FWService\IntelMeFWService.exe

C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe

C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE

C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\WINDOWS\syswow64\wwahost.exe

C:\Users\Piet\Desktop\zoek.exe

C:\WINDOWS\SysWOW64\cmd.exe

==== Deleting Services ======================

==== FireFox Fix ======================

ProfilePath: C:\Users\Piet\AppData\Roaming\Mozilla\Firefox\Profiles\ztl5v41v.default

---- Lines SmarterPower removed from prefs.js ----

user_pref("extensions.SmarterPower.asul", "1411715057073");

user_pref("extensions.SmarterPower.aul", "1411720729253");

user_pref("extensions.SmarterPower.irl", true);

user_pref("extensions.SmarterPower.is", "isgiwhNL");

user_pref("extensions.SmarterPower.ug", "6d5b18c9-6cee-4e98-a418-9c8aed51e522");

---- FireFox user.js and prefs.js backups ----

user_28-11-2014_0936_.backup

prefs_28-11-2014_0936_.backup

==== Deleting Files \ Folders ======================

C:\PROGRA~3\SetStretch.VBS deleted

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted

C:\WINDOWS\SysNative\roboot64.exe deleted

C:\WINDOWS\wininit.ini deleted

C:\windows\SysNative\tasks\ASP deleted

C:\windows\SysNative\drivers\{5eeb83d0-96ea-4249-942c-beead6847053}Gw64.sys deleted

C:\windows\SysNative\drivers\{b0c7827f-c845-429a-833b-c2a798fc4fc3}Gw64.sys deleted

==== System Specs ======================

Operating System: Microsoft Windows 8.1 6.3.9600 64 bits

Manufacturer: ASUSTeK COMPUTER INC. - Model: S451LA

Install Date: 20-5-2014 12:18:36

Last Boot: 21-11-2014 09:56:15

Processor: Intel® Core i5-4200U CPU @ 1.60GHz

Number of Processors: 4

Work Station

Bootmode: Normal boot

Total RAM: 3979 MB (free 2189 MB - 55)

Computername: CINTA

Domain: WORKGROUP

User: Piet (Administrator account)

Local Disk: C:\ - NTFS - 185 GB (free 146 GB)

Local Disk: D:\ - NTFS - 258 GB (free 218 GB)

CD \ DVD Drive: E:\

Bootdevice: \Device\HarddiskVolume1

Windows update:

Country: Nederland

Language: NLD

==== System Specs (Software) ======================

Anti-Virus: Windows Defender On-access scanning disabled (Outdated)

Anti-Spyware: Windows Defender disabled (Outdated)

Internet Explorer Version: 11.0.9600.17416

Google Chrome version: 39.0.2171.71

Adobe Reader version: 11.0.9.29

Flash Player version: 11.1.102.63

==== Files Recently Created / Modified ======================

====== C:\WINDOWS ====

2014-11-21 08:53:50 7ED438C44B90AF7B01609A942C7E7196 212480 ----a-w- C:\WINDOWS\PCDLIB32.DLL

====== C:\Users\Piet\AppData\Local\Temp ====

====== Java Cache =====

====== C:\WINDOWS\SysWOW64 =====

2014-11-19 15:04:52 66F97677CC13F7B9E2408CC75750A389 208896 ----a-w- C:\WINDOWS\SysWOW64\pku2u.dll

2014-11-19 15:04:52 4CD4C8D34213975444643A5F9594E363 806400 ----a-w- C:\WINDOWS\SysWOW64\kerberos.dll

2014-11-14 14:45:28 5F333FDBF392850373C89BDA31EBEC1B 1346048 ----a-w- C:\WINDOWS\SysWOW64\user32.dll

2014-11-14 14:45:23 3B45EA6108E48406828D4E015FF41DD0 12800 ----a-w- C:\WINDOWS\SysWOW64\winshfhc.dll

2014-11-14 14:44:50 46FBD043A1688EFD6AC1395EE886AD33 3607040 ----a-w- C:\WINDOWS\SysWOW64\msi.dll

2014-11-14 14:44:49 B09332CC976AC43EFF595B6F01AA275C 2459136 ----a-w- C:\WINDOWS\SysWOW64\authui.dll

2014-11-14 14:44:48 48C20EB77757F22840FF4CED98D8DEB1 325120 ----a-w- C:\WINDOWS\SysWOW64\msihnd.dll

====== C:\WINDOWS\SysWOW64\drivers =====

2014-11-21 08:53:54 6CCD1135320109D6B219F1A6E04AD9F6 22784 ----a-w- C:\WINDOWS\SysWOW64\drivers\afc.sys

====== C:\WINDOWS\Sysnative =====

2014-11-19 15:04:52 E87F8EC00FEEF700E61F6989D88A8BC2 991232 ----a-w- C:\WINDOWS\Sysnative\kerberos.dll

2014-11-19 15:04:51 788C7D910267DDCD675DF4AB01961265 259584 ----a-w- C:\WINDOWS\Sysnative\pku2u.dll

2014-11-14 14:45:30 F0A117D19873FCDF801F082F33BFBB6C 1519488 ----a-w- C:\WINDOWS\Sysnative\user32.dll

2014-11-14 14:45:23 668417ED63F9FBE7DD8D7A54B04279DA 14336 ----a-w- C:\WINDOWS\Sysnative\winshfhc.dll

2014-11-14 14:44:49 EF745B98D81B8C462DB99FC8B5C4322A 3320320 ----a-w- C:\WINDOWS\Sysnative\msi.dll

2014-11-14 14:44:49 D5B41A0C38408814A3E9BAC8C82B2E5B 2773504 ----a-w- C:\WINDOWS\Sysnative\authui.dll

2014-11-14 14:44:49 D0C15BC83B3D0AF4F9B1D70216D91794 428032 ----a-w- C:\WINDOWS\Sysnative\msihnd.dll

2014-11-14 14:44:48 D1A2E993DB1867C79177CCC9DB6337D0 116032 ----a-w- C:\WINDOWS\Sysnative\consent.exe

2014-11-14 14:44:48 034ED41F13D9C1845C1E081F05B640DB 110080 ----a-w- C:\WINDOWS\Sysnative\appinfo.dll

====== C:\WINDOWS\Sysnative\drivers =====

2014-11-14 14:45:27 DE8D12B4C3F55FA2C5E9774314F6C58A 258368 ----a-w- C:\WINDOWS\Sysnative\drivers\WdFilter.sys

2014-11-14 14:45:26 4AD874CDC812EC156265E451B6B09DAB 114496 ----a-w- C:\WINDOWS\Sysnative\drivers\WdNisDrv.sys

2014-11-14 14:45:25 0359607177E5E9F6041136CC0A5CB0B6 35320 ----a-w- C:\WINDOWS\Sysnative\drivers\WdBoot.sys

2014-11-12 21:48:54 6D2EE96150E35B9EA49F2B481DE0369A 177472 ----a-w- C:\WINDOWS\Sysnative\drivers\ksecpkg.sys

2014-11-12 21:48:54 4E1207CE16E615B0B7A70DC889F4500E 563976 ----a-w- C:\WINDOWS\Sysnative\drivers\cng.sys

2014-11-12 21:48:53 9F08A6608F98B5407E7DDBCF306573EF 27456 ----a-w- C:\WINDOWS\Sysnative\drivers\rdpvideominiport.sys

2014-11-12 18:45:38 CCB3A2BB60FE5073F2DEA63FE83CF8FE 2497344 ----a-w- C:\WINDOWS\Sysnative\drivers\tcpip.sys

2014-11-12 18:45:36 E3FCE2A6B3533D99A3B498504DF9CC47 474432 ----a-w- C:\WINDOWS\Sysnative\drivers\netio.sys

2014-11-12 18:45:35 7F23E38C5B6448F91439E4066645191E 428864 ----a-w- C:\WINDOWS\Sysnative\drivers\FWPKCLNT.SYS

2014-11-12 18:45:35 66732C13628BDB1AB0D6FD46027327C2 148800 -c--a-w- C:\WINDOWS\Sysnative\drivers\USBSTOR.SYS

====== C:\WINDOWS\Tasks ======

====== C:\WINDOWS\Temp ======

======= C:\Program Files =====

2014-11-26 20:42:36 -------- d-----w- C:\Program Files\trend micro

2014-10-30 18:23:16 -------- d-----w- C:\Program Files\Recuva

======= C:\PROGRA~2 =====

2014-11-21 08:53:40 -------- d-----w- C:\PROGRA~2\COMMON~1\ArcSoft

======= C: =====

====== C:\Users\Piet\AppData\Roaming ======

2014-11-21 08:54:02 -------- d-----w- C:\Users\Piet\AppData\Local\ArcSoft

2014-11-21 08:53:21 -------- d-----w- C:\Users\Piet\AppData\Roaming\ArcSoft

====== C:\Users\Piet ======

2014-11-26 20:36:01 8045ABB21A3BDD66A48E1ED5C0F0EF6A 1222144 ----a-w- C:\Users\Piet\Desktop\RSITx64.exe

2014-11-21 08:54:19 -------- d-----r- C:\WINDOWS\sysWoW64\config\systemprofile\Saved Games

2014-11-21 08:54:19 -------- d-----r- C:\WINDOWS\sysWoW64\config\systemprofile\Links

2014-11-21 08:54:19 -------- d-----r- C:\WINDOWS\sysWoW64\config\systemprofile\Contacts

2014-11-21 08:54:19 -------- d-----r- C:\Users\Piet\Downloads

2014-11-21 08:54:19 -------- d-----r- C:\Users\Piet\Documents

2014-11-21 08:54:18 -------- d-----r- C:\WINDOWS\sysWoW64\config\systemprofile\Searches

2014-11-21 08:54:18 -------- d-----r- C:\WINDOWS\sysWoW64\config\systemprofile\OneDrive

2014-11-21 08:54:18 -------- d-----r- C:\Users\Piet\Videos

2014-11-21 08:54:18 -------- d-----r- C:\Users\Piet\Pictures

2014-11-21 08:54:18 -------- d-----r- C:\Users\Piet\Music

2014-11-21 08:54:02 -------- d-----w- C:\ProgramData\ArcSoft

2014-11-21 08:44:39 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\35mm film scanner

2014-11-14 10:16:42 -------- d-----r- C:\Users\Piet\Saved Games

2014-10-30 19:01:37 -------- d-----w- C:\ProgramData\ASUS

2014-10-30 18:23:23 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva

====== C: exe-files ==

2014-11-26 21:18:36 9D83E2859AC027E8C505CB4D1931AF47 1117264 ----a-w- C:\Program Files (x86)\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\39.0.2171.71\39.0.2171.71_39.0.2171.65_chrome_updater.exe

2014-11-26 20:42:37 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\Piet.exe

2014-11-26 20:36:01 8045ABB21A3BDD66A48E1ED5C0F0EF6A 1222144 ----a-w- C:\Users\Piet\Desktop\RSITx64.exe

2014-11-21 08:53:07 B3FD01873BD5FD163AB465779271C58F 614532 ----a-w- C:\Program Files (x86)\Common Files\InstallShield\Engine\6\Intel 32\IKernel.exe

=== C: other files ==

2014-11-21 08:53:54 6CCD1135320109D6B219F1A6E04AD9F6 22784 ----a-w- C:\Windows\SysWOW64\drivers\afc.sys

==== Startup Registry Enabled ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Adobe Reader Speed Launcher"="C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"

"ASUSPRP"="C:\Program Files (x86)\ASUS\APRP\APRP.EXE"

"Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]

"BtvStack"="C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"

==== Startup Registry Enabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"DptfPolicyLpmServiceHelper"="C:\WINDOWS\system32\DptfPolicyLpmServiceHelper.exe"

"IgfxTray"="C:\WINDOWS\system32\igfxtray.exe"

"HotKeysCmds"="C:\WINDOWS\system32\hkcmd.exe"

"Persistence"="C:\Windows\system32\igfxpers.exe"

"RTHDVCPL"="C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s"

"RtHDVBg"="C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe /MAXX4"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]

"BtvStack"="C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"

==== Startup Folders ======================

2014-06-18 17:48:44 1131 ----a-w- C:\Users\Piet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Verzenden naar OneNote.lnk

==== Task Scheduler Jobs ======================

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job --a-------- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [22-09-2014 19:58]

C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job --a-------- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [22-09-2014 19:58]

==== Other Scheduled Tasks ======================

"C:\WINDOWS\SysNative\tasks\AsusVibeSchedule" ["C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe"]

"C:\WINDOWS\SysNative\tasks\CreateChoiceProcessTask" [C:\Windows\BrowserChoice\browserchoice.exe]

"C:\WINDOWS\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]

"C:\WINDOWS\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]

"C:\WINDOWS\SysNative\tasks\User_Feed_Synchronization-{25E8FD79-4FD2-4E63-A9A3-AFF709AB58FF}" [C:\WINDOWS\system32\msfeedssync.exe]

==== Firefox Extensions ======================

==== Firefox Plugins ======================

Profilepath: C:\Users\Piet\AppData\Roaming\Mozilla\Firefox\Profiles\ztl5v41v.default

D6ED6EB98E759460AD8C66DE23070132 - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npMeetingJoinPluginOC.dll - Microsoft Office 2013

18CF51689186AEB9D1D149AEB0E92D03 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL - Microsoft Office 2013

==== Chromium Look ======================

Google Slides - Piet\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek

Google Docs - Piet\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake

Google Drive - Piet\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf

YouTube - Piet\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo

Google Search - Piet\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf

Google Sheets - Piet\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap

Google Wallet - Piet\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda

Gmail - Piet\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

==== Set IE to Default ======================

Old Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="http://www.google.nl/"

New Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="http://www.google.nl/"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"

{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02"

{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7AVNB_nlNL607"

==== Reset Google Chrome ======================

C:\Users\Piet\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully

C:\Users\Piet\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== HijackThis Entries ======================