UPDATES

Jean Paul · 8 december 2015

hierbij het log

ik heb het gekopieerd want na OPSLAAN ALS kreeg ik het niet open (als controle) omdat ik niet weet welke onder welke bestandsnaam en ik kreeg bijlage 51

bij de eerste start van zoek.exe kreeg ik bijlage 49 en na herstart bijlage 50

log ::

Zoek.exe v5.0.0.1 Updated 06-December-2015

Tool run by Pc on di 08/12/2015 at 12:22:50,19.

Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64

Running in: Normal Mode Internet Access Detected

Launched: C:\Users\Pc\Desktop\zoek.exe [scan all users] [script inserted] [Checkboxes used]

==== System Restore Info ======================

8/12/2015 12:25:17 Zoek.exe System Restore Point Created Successfully.

==== Empty Folders Check ======================

C:\PROGRA~2\Malwarebytes Anti-Exploit deleted successfully

C:\PROGRA~2\Norton Identity Safe deleted successfully

C:\PROGRA~3\ReviverSoft deleted successfully

C:\PROGRA~3\{BAF091CA-86C4-4627-ADA1-897E2621C1B0} deleted successfully

C:\Users\Pc\AppData\Roaming\ReviverSoft deleted successfully

C:\Users\Pc\AppData\Local\CutePDF Writer deleted successfully

C:\Users\Pc\AppData\Local\EmieBrowserModeList deleted successfully

C:\Users\Pc\AppData\Local\EmieSiteList deleted successfully

C:\Users\Pc\AppData\Local\EmieUserList deleted successfully

C:\Users\Pc\AppData\Local\PackageAware deleted successfully

C:\Users\Pc\AppData\Local\VirtualStore deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\oldsearch deleted successfully

==== Deleting CLSID Registry Values ======================

==== Installed Programs ======================

Adobe Acrobat Reader DC - Nederlands

Adobe AIR

Adobe Flash Player 19 ActiveX

Adobe Refresh Manager

Adobe Shockwave Player 12.2

Avast Internet Security

Broadcom 802.11 Wireless LAN Adapter

Compatibiliteitspakket voor het 2007 Microsoft Office system

CutePDF Writer 3.0

D3DX10

Gadwin PrintScreen

Google Chrome

Google Toolbar for Internet Explorer

Google Update Helper

HD Tune 2.55

HP FWUpdateEDO2

HP Photo Creations

HP Photosmart 5520 series Basissoftware van het apparaat

HP Photosmart 5520 series Help

HP Photosmart 5520 series Productverbeteringsonderzoek

HP Support Solutions Framework

HP Update

HPDiagnosticAlert

Intel PROSet Wireless

Intel® Processor Graphics

Intel® PROSet/Wireless for Bluetooth® + High Speed

Intel® PROSet/Wireless WiFi Software

Java 8 Update 45

Java 8 Update 65

Java 8 Update 66

Java Auto Updater

Junk Mail filter update

Metric Collection SDK 35

Microsoft .NET Framework 4.5.1 (Nederlands)

Microsoft .NET Framework 4.5.1 (NLD)

Microsoft .NET Framework 4.5.2

Microsoft Application Error Reporting

Microsoft Silverlight

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Movie Maker

MSVCRT

MSVCRT_amd64

MSVCRT110

MSVCRT110_amd64

OpenOffice 4.1.1

Photo Common

Photo Gallery

PIXresizer

Realtek Ethernet Controller Driver

Renesas Electronics USB 3.0 Host Controller Driver

SafeZone Stable 1.46.1990.55

Security Update for Microsoft .NET Framework 4.5.2 (KB3023224)

Security Update for Microsoft .NET Framework 4.5.2 (KB3035490)

Security Update for Microsoft .NET Framework 4.5.2 (KB3037581)

Security Update for Microsoft .NET Framework 4.5.2 (KB3074230)

Security Update for Microsoft .NET Framework 4.5.2 (KB3074550)

Skype™ 7.13

Speccy

swMSM

Synaptics TouchPad Driver

TeamViewer 9

Tweaking.com - Windows Repair

VLC media player

Vodafone Mobile Broadband

Windows Live Communications Platform

Windows Live Essentials

Windows Live Family Safety

Windows Live ID Sign-in Assistant

Windows Live Installer

Windows Live Mail

Windows Live Messenger

Windows Live MIME IFilter

Windows Live Photo Common

Windows Live PIMT Platform

Windows Live SOXE

Windows Live SOXE Definitions

Windows Live UX Platform

Windows Live UX Platform Language Pack

Windows Live Writer

Windows Live Writer Resources

==== Running Processes ======================

C:\Program Files\AVAST Software\Avast\AvastSvc.exe

C:\Program Files\AVAST Software\Avast\afwServ.exe

C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

C:\Users\Pc\AppData\Local\Microsoft\BingSvc\BingSvc.exe

C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler.exe

C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe

C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe

C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\WR_Tray_Icon.exe

C:\Program Files\AVAST Software\Avast\AvastUI.exe

C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbNotifier.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe

C:\Program Files (x86)\Windows Live\Mail\wlmail.exe

C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Users\Pc\Desktop\zoek.exe

C:\Windows\SysWOW64\cmd.exe

C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

C:\Windows\SysWOW64\cmd.exe

C:\Program Files (x86)\Gadwin Systems\PrintScreen\PrintScreen.exe

==== Deleting Services ======================

==== Batch Command(s) Run By Tool======================

Kan het volgende DLL-bestand niet laden: NETTRACE.DLL.

De Winsock-catalogus is opnieuw ingesteld.

De computer dient opnieuw te worden opgestart om het opnieuw instellen te voltooien.

==== Deleting Files \ Folders ======================

C:\PROGRA~3\{BAF091CA-86C4-4627-ADA1-897E2621C1B0} not found

C:\PROGRA~2\ExtractNow deleted

C:\windows\SysNative\Tasks\ParetoLogic Registration3 deleted

C:\Windows\tasks\ParetoLogic Registration3.job deleted

C:\PROGRA~2\COMMON~1\ParetoLogic deleted

C:\PROGRA~2\COMMON~1\Common Toolkit Suite deleted

C:\Users\Pc\AppData\Roaming\RHEng deleted

C:\Users\Pc\AppData\Roaming\ProductData deleted

C:\Users\Pc\AppData\Roaming\ParetoLogic deleted

C:\Users\Pc\AppData\Roaming\DriverCure deleted

C:\PROGRA~3\Reimage Express deleted

C:\PROGRA~3\ParetoLogic deleted

C:\PROGRA~3\Common Toolkit Suite deleted

C:\PROGRA~3\ProductData deleted

C:\PROGRA~3\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C} deleted

C:\PROGRA~3\Package Cache deleted

C:\Windows\Reimage.ini deleted

C:\Windows\tasks\ParetoLogic Update Version3.job deleted

C:\windows\SysNative\tasks\ParetoLogic Update Version3 deleted

C:\Windows\SysNative\config\systemprofile\Searches deleted

C:\Windows\sysWoW64\config\systemprofile\AppData\Roaming\Fighters deleted

C:\PROGRA~3\Fighters deleted

"C:\Users\Pc\AppData\Local\{142E28A5-24C1-4938-9EDE-69E45C99B9B9}" deleted

"C:\Users\Pc\AppData\Roaming\SECRV\backup6.bin" deleted

"C:\Users\Pc\AppData\Roaming\SECRV" deleted

==== System Specs ======================

Windows: Windows 7 Home Premium Edition (64-bit) Service Pack 1 (Build 7601)

Memory (RAM): 6092 MB

CPU Info: Intel® Core i7-2670QM CPU @ 2.20GHz

CPU Speed: 2229,0 MHz

Sound Card: Luidsprekers (High Definition A |

Display Adapters: Intel® HD Graphics 3000 | Intel® HD Graphics 3000 | RDPDD Chained DD | RDP Encoder Mirror Driver | RDP Reflector Display Driver

Monitors: 1x; Algemeen PnP-beeldscherm |

Screen Resolution: 1600 X 900 - 32 bit

Network: Network Present

Network Adapters: Microsoft Virtual WiFi Miniport Adapter #2 | Microsoft Virtual WiFi Miniport Adapter | Realtek PCIe GBE Family Controller | Intel® Centrino® Wireless-N 1030 | Bluetooth-apparaat (Personal Area Network)

CD / DVD Drives: 1x (D: | ) D: hp CDDVDW TS-L633R

Ports: COM Ports NOT Present. LPT Port NOT Present.

Mouse: 5 Button Wheel Mouse Present

Hard Disks: C: 596,1GB

Hard Disks - Free: C: 276,7GB

Manufacturer *: Hewlett-Packard

BIOS Info: AT/AT COMPATIBLE | 10/23/12 | HPQOEM - 1

Time Zone: Romance (standaardtijd)

Motherboard *: Hewlett-Packard 1800

Country: België

Language: NLB

==== System Specs (Software) ======================

AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}

SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

FW: avast! Antivirus *Disabled* {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}

Default Browser: Google Chrome 47.0.2526.73

Internet Explorer Version: 11.0.9600.18015

Google Chrome version: 47.0.2526.73

Adobe Reader version: 15.9.20077.160923

Sun Java version: 1.8.0_66 (32-bit)

Sun Java version: 1.8.0_66 (64-bit)

Shockwave Player version: 12.2.1r171

==== Files Recently Created / Modified ======================

====== C:\Windows ====

2015-11-20 13:22:38 CA2A8AF1DBAD0F31F9B33A2827DFBC16 207 ----a-w- C:\Windows\tweaking.com-regbackup-PC-PC-Windows-7-Home-Premium-(64-bit).dat

2015-11-19 17:28:51 08CFBE8D43EE0451FCC31EC50319A0BE 43112 ----a-w- C:\Windows\avastSS.scr

====== C:\Users\Pc\AppData\Local\Temp ====

2015-12-02 16:25:12 8397BA6B2624DEB61E1E02F19956738B 301576 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS1288\InstallDiagnosticAlert.exe

2015-12-02 16:25:12 01F44CB82172ED933E16E1EC04855C66 591360 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS1288\HPDiagnosticAlert.msi

2015-12-02 16:25:04 196CA9FF278B1D697DA35D3A09128F4A 1806160 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS126B\InstallFWUpdateEdoMsi.exe

2015-12-02 16:25:03 224AF3A0CDA3591BB2012C265EE33CF0 819200 ------w- C:\Users\Pc\AppData\Local\Temp\7zS126B\FWUpdateEDO2Msi.msi

2015-11-30 16:35:09 C4CF03B998D4D758B89CD07F22D7A7F9 645168 ----a-w- C:\Users\Pc\AppData\Local\Temp\MSS\3.11.226.1\McUICnt.exe

2015-11-30 16:35:09 874D66BF8A6D75A26B275D3132AB1E2C 153760 ----a-w- C:\Users\Pc\AppData\Local\Temp\MSS\3.11.226.1\McInstallerRes_LD.dll

2015-11-30 16:35:09 51BE9CB0AB9B481322A05E8A007B2D55 770248 ----a-w- C:\Users\Pc\AppData\Local\Temp\MSS\3.11.226.1\McInstallerStartup.dll

2015-11-30 16:35:09 45B8C2CDB10D2A0F24BCEFF76ABF96FC 265536 ----a-w- C:\Users\Pc\AppData\Local\Temp\MSS\3.11.226.1\McInstallerRes.dll

2015-11-30 16:35:09 43A07A01F731A01F6B5158A034EBBFD0 560664 ----a-w- C:\Users\Pc\AppData\Local\Temp\MSS\3.11.226.1\mcbrwsr2.dll

2015-11-25 15:17:58 FD9E709D6107F039A9533DE5FE316E73 324152 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\utils\x86\DIFxAPI.dll

2015-11-25 15:17:58 FB0D5236CB97604C26E4ED0EE3561461 2873232 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\amd64\hpinkinsB111.exe

2015-11-25 15:17:58 F386A68BBDF739BB48B736ABA5FBA000 1979280 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\drivers\scanner\x32\HPScanTRDrv_PS5520.dll

2015-11-25 15:17:58 E4848F7374052BB6569E81063E18B125 2216336 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\i386\hpinkinsB111.exe

2015-11-25 15:17:58 E48077AAE55A33AE3F8C59D293A88E6B 890272 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\Toolbar\smartprintsetup.exe

2015-11-25 15:17:58 E25E204DA75C9B091F9A1D98DE14D632 505232 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\i386\hpvpldrv09.dll

2015-11-25 15:17:58 E0F71158825F5E0A94A6829D2BAF31B7 1719912 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\Setup.exe

2015-11-25 15:17:58 D7FD47049414798815CB4BCFAF830C8F 331664 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\amd64\hpinkstsB111LM.dll

2015-11-25 15:17:58 D329818570DCAD8B3BC1DA6F89AA1491 590224 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\amd64\hpvpldrv09.dll

2015-11-25 15:17:58 BE215EB72965C7A198479085195C877D 5671192 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\Toolbar\BingBarSetup.exe

2015-11-25 15:17:58 BD8A8F7AAC5F3C7AFFC5A843D7250772 499088 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\drivers\scanner\x32\HPWia2_PS5520.dll

2015-11-25 15:17:58 BBC82E175B89511A97C69339D3E6E2E9 307304 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\utils\x64\RemovePreinstalledDrivers.exe

2015-11-25 15:17:58 B4853AB8A381E102FB1EE7B0251E422E 269712 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\amd64\hpinkcoiB111.dll

2015-11-25 15:17:58 B3E573761417F4E69F60E3853934712B 762368 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\i386\unires.dll

2015-11-25 15:17:58 AF8C1F3635148502A9141DA00CA94FD7 538512 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\i386\hpfime51.dll

2015-11-25 15:17:58 AE2A23229873B9CDC2E9E319BD692B20 1773672 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\Optional\RLBootstrap.exe

2015-11-25 15:17:58 9FEC9008C047DD2F8076D75A8365CEF0 622992 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\drivers\scanner\x64\HPWia2_PS5520.dll

2015-11-25 15:17:58 98FE94DC34015805C20DB7E0AF75A920 255592 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\utils\x86\RemovePreinstalledDrivers.exe

2015-11-25 15:17:58 936EFCE03EC6F3ACE172154CC5D97234 2723216 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\drivers\scanner\x64\HPScanTRDrv_PS5520.dll

2015-11-25 15:17:58 9195C8759A6D7D0B798F608C1CB9F660 325224 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\utils\HPInstallLogCollector.exe

2015-11-25 15:17:58 90BD05344DCF9D2950AE4C50D8713D91 268688 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\i386\hpinkstsB111LM.dll

2015-11-25 15:17:58 8B43B71E6D946C4F5531981FC146A102 375296 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\i386\unidrv.dll

2015-11-25 15:17:58 89312F4E8D6AFE9025CB7350EA026333 77712 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\amd64\hpvplui09.dll

2015-11-25 15:17:58 74B491ECC8EC045A639F83FBEFE6224E 556432 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\amd64\hpfime51.dll

2015-11-25 15:17:58 70A72FC276267DBFDB39AC1FD358CFE0 884224 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\amd64\unidrvui.dll

2015-11-25 15:17:58 6DC38C20D2B27210AA410E21E9929F14 220560 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\i386\hpinkcoiB111.dll

2015-11-25 15:17:58 6B7622CA9F9E218B37A4CA89CCD2BD3C 747520 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\i386\unidrvui.dll

2015-11-25 15:17:58 65E65894F3BF4138EB913F6A906F643D 1448552 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\HP\Setup\hpssres.dll

2015-11-25 15:17:58 5E87AF3E7FA0771C4D70C24428E6C57F 617360 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\drivers\scanner\x64\HPWia1_PS5520.dll

2015-11-25 15:17:58 590615D8DFF10CE195890221BF7C3627 529808 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\i386\hpinkstsB111.dll

2015-11-25 15:17:58 585D2EB9FBED6B7B9D0107BFB5C94043 531512 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\utils\x64\DIFxAPI.dll

2015-11-25 15:17:58 4B31039DC5E7E5AC34E3A7E9D4966955 237456 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\i386\hpvplres09.dll

2015-11-25 15:17:58 416EDAF698AE65E4A0E744299B259361 762368 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\amd64\unires.dll

2015-11-25 15:17:58 3D1713B5944726304C388C3D3F824E15 74640 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\i386\hpvplui09.dll

2015-11-25 15:17:58 30989DE0A391F77BCFC46E4F186A997A 237456 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\amd64\hpvplres09.dll

2015-11-25 15:17:58 2A03C3ED11EE3B3029DE485A7250B0A1 11502184 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\HP-DQEX5.exe

2015-11-25 15:17:58 229C0F149E357315D0AD1B9E2BEF2305 495504 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\drivers\scanner\x32\HPWia1_PS5520.dll

2015-11-25 15:17:58 10082D5492C7BD118FE703AC6CCB8AFC 479232 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\amd64\unidrv.dll

2015-11-25 15:17:58 0A30836BCD754C2CED78706FDF69EC42 198248 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\utils\hpUrlLauncher.exe

2015-11-25 15:17:58 07084783892A6DE8E3C1CB55A9321D5D 661904 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\amd64\hpinkstsB111.dll

2015-11-25 15:17:55 D38E972675DDD8EFD8367B0E63A7BA72 3022848 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\PS552x86.msi

2015-11-25 15:17:55 D21F6C500DF18C25908A2E9E74663CE4 245760 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\Optional\P552Ux86.msi

2015-11-25 15:17:55 BDE0D76EF26B78395DB2A35F77A98995 966656 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\Optional\HP Update.msi

2015-11-25 15:17:55 6AF4012D21180E77B2C6D04B212D5539 245760 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\Optional\P552Ux64.msi

2015-11-25 15:17:55 4637D45A061E962329A097F3A98696DF 3223552 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\PS552x64.msi

2015-11-25 15:17:55 2F59BDEACAB5748BED1A433AA60A21B8 172032 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS3C04\Optional\lp-ps5520MSI.msi

====== Java Cache =====

====== C:\Windows\SysWOW64 =====

====== C:\Windows\SysWOW64\drivers =====

====== C:\Windows\Sysnative =====

2015-11-29 12:17:51 C90A62094AD17737C92B5AC34191EF97 386096 ----a-w- C:\Windows\Sysnative\aswBoot.exe

2015-11-25 15:19:01 3D7C1DFE052288F40AC9ABFB2A824B92 741480 ------w- C:\Windows\Sysnative\HPDiscoPMB111.dll

====== C:\Windows\Sysnative\drivers =====

2015-11-29 12:17:57 F667A04F874F39125489984F36620CC2 449992 ----a-w- C:\Windows\Sysnative\drivers\asw6B1F.tmp

2015-11-29 12:17:57 F3563782C54609473EA824517636AE3F 28144 ----a-w- C:\Windows\Sysnative\drivers\asw6ABB.tmp

2015-11-29 12:17:57 ED9451A5BA5940D90A9464A901D08844 1059656 ----a-w- C:\Windows\Sysnative\drivers\asw6B1A.tmp

2015-11-29 12:17:57 D34E4A194A595FDBCBB314B68C3DC833 28656 ----a-w- C:\Windows\Sysnative\drivers\asw6B1C.tmp

2015-11-29 12:17:57 ADD0EC73AEFBC170E5B8C4734DB74AA0 273784 ----a-w- C:\Windows\Sysnative\drivers\asw6B20.tmp

2015-11-29 12:17:57 9F3215B03BE9F28D1F2FDBECDE5302E1 154256 ----a-w- C:\Windows\Sysnative\drivers\asw6B30.tmp

2015-11-29 12:17:57 7B2E6767FA25540C400CFDA8E7E4FB11 97648 ----a-w- C:\Windows\Sysnative\drivers\asw6B1D.tmp

2015-11-29 12:17:57 6D1E4B74AA1E8C3C41EE601C2C8490ED 93528 ----a-w- C:\Windows\Sysnative\drivers\asw6B1B.tmp

2015-11-29 12:17:57 4ACDEA0ABC0EB8519E51D370F0D036FB 65224 ----a-w- C:\Windows\Sysnative\drivers\asw6B1E.tmp

2015-11-19 17:28:34 19E98B65B94991D150AD430BFEF81C7A 466400 ----a-w- C:\Windows\Sysnative\drivers\aswNdisFlt.sys

====== C:\Windows\Tasks ======

2015-12-01 13:20:14 89B2680B9E67849F8E47C664858A2480 3148 ----a-w- C:\Windows\Sysnative\Tasks\SidebarExecute

2015-11-25 15:19:22 45DD649593B68223CC6169E5C0FED2FE 3602 ----a-w- C:\Windows\Sysnative\Tasks\HPCustParticipation HP Photosmart 5520 series

2015-11-20 11:11:42 940E42014CBC3D2B6B24587B3697D2AA 3016 ----a-w- C:\Windows\Sysnative\Tasks\{E83DCDB4-D41C-47DC-A533-A178BA3E48E2}

2015-11-20 11:11:34 940E42014CBC3D2B6B24587B3697D2AA 3016 ----a-w- C:\Windows\Sysnative\Tasks\{E4CE8752-8CF5-4E4A-84A0-BC9E8951133E}

2015-11-20 09:59:42 B07CB0A03F14974F377D74283E5AE06E 3642 ----a-w- C:\Windows\Sysnative\Tasks\Tweaking.com - Windows Repair Tray Icon

2015-11-19 18:19:07 9738C88D62287D750DF51590FFC7288A 3026 ----a-w- C:\Windows\Sysnative\Tasks\SafeZone scheduled Autoupdate 1447957143

====== C:\Windows\Temp ======

======= C:\Program Files =====

2015-12-06 09:24:44 -------- d-----w- C:\Program Files\Speccy

2015-12-03 16:58:10 -------- d-----w- C:\Program Files\Common Files\AV

2015-11-25 15:18:43 -------- d-----w- C:\Program Files\HP

======= C:\PROGRA~2 =====

2015-12-06 09:37:58 -------- d-----w- C:\PROGRA~2\HD Tune

2015-12-03 16:58:10 -------- d-----w- C:\PROGRA~2\COMMON~1\AV

2015-11-25 15:19:25 -------- d-----w- C:\PROGRA~2\HP Photo Creations

2015-11-20 11:17:11 -------- d-----w- C:\PROGRA~2\COMMON~1\Skype

2015-11-16 11:22:04 -------- d-----w- C:\PROGRA~2\Tweaking.com

2015-11-13 10:57:04 -------- d-----r- C:\PROGRA~2\Skype

2015-11-12 11:34:18 -------- d-----w- C:\PROGRA~2\COMMON~1\Java

======= C: =====

====== C:\Users\Pc\AppData\Roaming ======

2015-11-25 15:19:26 -------- d-----w- C:\Users\Pc\AppData\Locallow\Hewlett-Packard

2015-11-25 15:19:03 -------- d-----w- C:\Users\Pc\AppData\Roaming\HpUpdate

2015-11-25 15:15:21 -------- d-----w- C:\Users\Pc\AppData\Local\HP

2015-11-25 14:33:00 -------- d-----w- C:\Windows\sysWoW64\config\systemprofile\AppData\Local\CutePDF Writer

2015-11-14 15:25:47 -------- d-----w- C:\Users\Pc\AppData\Local\CEF

====== C:\Users\Pc ======

2015-12-07 11:32:30 A0E654430E6E7153EC239075D6F25CA5 3715408 ----a-w- C:\Users\Pc\Downloads\CrystalDiskInfoPortable_6.5.2.paf (2).exe

2015-12-07 11:32:29 A0E654430E6E7153EC239075D6F25CA5 3715408 ----a-w- C:\Users\Pc\Downloads\CrystalDiskInfoPortable_6.5.2.paf (1).exe

2015-12-07 11:30:39 A0E654430E6E7153EC239075D6F25CA5 3715408 ----a-w- C:\Users\Pc\Downloads\CrystalDiskInfoPortable_6.5.2.paf.exe

2015-12-06 09:37:58 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD Tune

2015-12-06 09:37:22 088812A121E0A9CEB40CE9C808C8A90C 642632 ----a-w- C:\Users\Pc\Downloads\hdtune_255.exe

2015-12-06 09:22:49 FF70EB133BE86B9F9EB18E274DAA6B6C 5111240 ----a-w- C:\Users\Pc\Downloads\spsetup129 (2).exe

2015-12-06 09:22:29 FF70EB133BE86B9F9EB18E274DAA6B6C 5111240 ----a-w- C:\Users\Pc\Downloads\spsetup129 (1).exe

2015-12-06 09:22:04 FF70EB133BE86B9F9EB18E274DAA6B6C 5111240 ----a-w- C:\Users\Pc\Downloads\spsetup129.exe

2015-12-02 20:33:09 F0EE0FE6CC055FCEBE2B417D6ACAEF57 5239920 ----a-w- C:\Users\Pc\Downloads\ParetoLogic PC Health Advisor_nl.exe

2015-11-26 13:14:47 5B25F49478139646E8E6EFCABCD555D8 1405 ----a-w- C:\Users\Pc\Desktop\winupd.bat

2015-11-25 15:19:25 -------- d-----w- C:\ProgramData\Visan

2015-11-25 15:19:25 -------- d-----w- C:\ProgramData\HP Photo Creations

2015-11-25 15:19:00 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP

2015-11-25 15:18:43 -------- d-----w- C:\ProgramData\HP

2015-11-25 15:18:36 49CBBF1433C1ACA875DD6CFAFB46316E 57 ----a-w- C:\ProgramData\Ament.ini

2015-11-25 15:15:56 732FA5C43663AEBB69F97C07CD76A1D5 65671128 ----a-w- C:\Users\Pc\Downloads\PS5520_1315-1.exe

2015-11-20 11:17:12 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2015-11-20 09:59:40 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com

====== C: exe-files ==

2015-12-07 11:32:30 A0E654430E6E7153EC239075D6F25CA5 3715408 ----a-w- C:\Users\Pc\Downloads\CrystalDiskInfoPortable_6.5.2.paf (2).exe

2015-12-07 11:32:29 A0E654430E6E7153EC239075D6F25CA5 3715408 ----a-w- C:\Users\Pc\Downloads\CrystalDiskInfoPortable_6.5.2.paf (1).exe

2015-12-07 11:30:39 A0E654430E6E7153EC239075D6F25CA5 3715408 ----a-w- C:\Users\Pc\Downloads\CrystalDiskInfoPortable_6.5.2.paf.exe

2015-12-06 14:56:26 1C7B42662625CB22E1CAA241A1D845CC 6912080 ----a-w- C:\Program Files (x86)\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\47.0.2526.73\47.0.2526.73_46.0.2490.86_chrome_updater.exe

2015-12-06 09:37:58 F8FC2D14DF813CC920A39B3CB7E59CBC 401408 ----a-w- C:\Program Files (x86)\HD Tune\HDTune.exe

2015-12-06 09:37:58 CEFC20D14D9940D53505E9B9769139E7 682266 ----a-w- C:\Program Files (x86)\HD Tune\unins000.exe

2015-12-06 09:37:22 088812A121E0A9CEB40CE9C808C8A90C 642632 ----a-w- C:\Users\Pc\Downloads\hdtune_255.exe

2015-12-06 09:22:49 FF70EB133BE86B9F9EB18E274DAA6B6C 5111240 ----a-w- C:\Users\Pc\Downloads\spsetup129 (2).exe

2015-12-06 09:22:29 FF70EB133BE86B9F9EB18E274DAA6B6C 5111240 ----a-w- C:\Users\Pc\Downloads\spsetup129 (1).exe

2015-12-06 09:22:04 FF70EB133BE86B9F9EB18E274DAA6B6C 5111240 ----a-w- C:\Users\Pc\Downloads\spsetup129.exe

2015-12-04 08:50:09 BA7396EF42213C0F84343C186610B851 88392 ----atw- C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleUpdateWebPlugin.exe

2015-12-04 08:50:08 EC0FAADC62E1C1DADA953DE433BEFB01 88392 ----atw- C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleUpdateOnDemand.exe

2015-12-04 08:50:08 AD8495335C1A605A4E0E32334DF52303 88392 ----atw- C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleUpdateBroker.exe

2015-12-04 08:50:07 1D652959033B873B77B8D5A12011FD85 927824 ----a-w- C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleUpdateSetup.exe

2015-12-04 08:49:35 5424FDF3776F5458EAFAABFB87AA9285 130888 ----atw- C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleUpdateComRegisterShell64.exe

2015-12-04 08:49:33 73F542663FD48B49A798A56DAA18C136 307016 ----atw- C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler64.exe

2015-12-04 08:49:31 7DC16FAEA44C8D96A1C113305A4059A2 245576 ----atw- C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler.exe

2015-12-04 08:49:15 88FBBB1C601A6BC42054E57C2897FA45 144200 ----atw- C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleUpdate.exe

2015-12-04 08:49:13 1D652959033B873B77B8D5A12011FD85 927824 ----a-w- C:\Program Files (x86)\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.29.1\GoogleUpdateSetup.exe

2015-12-03 16:58:10 F6CC12DB8DC6FB85136BD5D908409FF9 174904 ----a-w- C:\Program Files\Common Files\AV\avast! Antivirus\upgrade.exe

2015-12-03 16:58:10 F6CC12DB8DC6FB85136BD5D908409FF9 174904 ----a-w- C:\Program Files (x86)\Common Files\AV\avast! Antivirus\upgrade.exe

2015-12-03 16:58:10 26BA77E86AE40F7EE01D20D49DB5331C 634832 ----a-w- C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe

2015-12-03 16:58:10 26BA77E86AE40F7EE01D20D49DB5331C 634832 ----a-w- C:\Program Files (x86)\Common Files\AV\avast! Antivirus\backup.exe

2015-12-02 20:33:09 F0EE0FE6CC055FCEBE2B417D6ACAEF57 5239920 ----a-w- C:\Users\Pc\Downloads\ParetoLogic PC Health Advisor_nl.exe

2015-12-02 16:25:17 6E42CF0D47AF25DEA4CECDBE093D521C 10134 ----a-r- C:\Users\Pc\AppData\Roaming\Microsoft\Installer\{B6465A32-8BE9-4B38-ADC5-4B4BDDC10B0D}\ARPPRODUCTICON.exe

2015-12-02 16:25:12 8397BA6B2624DEB61E1E02F19956738B 301576 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS1288\InstallDiagnosticAlert.exe

2015-12-02 16:25:04 196CA9FF278B1D697DA35D3A09128F4A 1806160 ----a-w- C:\Users\Pc\AppData\Local\Temp\7zS126B\InstallFWUpdateEdoMsi.exe

2015-12-02 15:55:44 B67FA61043F8F04CC4480C2BFAD6DA3E 131992 ----a-w- C:\Program Files\Speccy\uninst.exe

2015-12-02 15:55:22 E10AF8FA3E1AFD78749610DEB8D9B856 7067048 ----a-w- C:\Program Files\Speccy\Speccy64.exe

2015-12-02 15:55:20 B95B0B558379A7F41FEE9513A914E547 5329832 ----a-w- C:\Program Files\Speccy\Speccy.exe

=== C: other files ==

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Microsoft\Windows\CurrentVersion\Run]

"Gadwin PrintScreen"="C:\Program Files (x86)\Gadwin Systems\PrintScreen\PrintScreen.exe /nosplash"

"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun"

"Web Companion"="C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize"

"BingSvc"="C:\Users\Pc\AppData\Local\Microsoft\BingSvc\BingSvc.exe"

"HP Photosmart 5520 series (NET)"="C:\Program Files\HP\HP Photosmart 5520 series\Bin\ScanToPCActivationApp.exe -deviceID CN38U123TN0602:NW -scfn HP Photosmart 5520 series (NET) -AutoStart 1"

[HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Microsoft\Windows\CurrentVersion\runonce]

"Application Restart #1"="C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --flag-switches-begin --flag-switches-end --restore-last-session -- http://track.pc-helpforum.be/track/click/30483147/www.pc-helpforum.be?p=eyJzIjoiWldNNFZwcE1GMExadkJWTF91ZURYVnpBakdjIiwidiI6MSwicCI6IntcInVcIjozMDQ4MzE0NyxcInZcIjoxLFwidXJsXCI6XCJodHRwOlxcXC9cXFwvd3d3LnBjLWhlbHBmb3J1bS5iZVxcXC90b3BpY1xcXC82MDg0MC11cGRhdGVzXFxcLz92aWV3PWdldG5ld3Bvc3RcIixcImlkXCI6XCJiNGViMTEzOTRlM2U0NTFlYjM0M2Q1ZTkwMmVlOWE3MFwiLFwidXJsX2lkc1wiOltcImE1OWQwZDEyMmU1MDhkOWFjMGJmNTNmNTA5MmRkZmFlNGEyMDg2YzBcIl19In0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"AvastUI.exe"="C:\Program Files\AVAST Software\Avast\AvastUI.exe /nogui"

"MobileBroadband"="C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe /silent"

"VmbNotifier"="C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbNotifier.exe"

"SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

"sfagent"="C:\Program Files (x86)\Fighters\SPAMfighter\sfagent.exe"

"NUSB3MON"="C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"

"Malwarebytes Anti-Exploit"="C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe"

"IObit Malware Fighter"="C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe /autostart"

"CommonToolkitTray"="C:\Program Files (x86)\Fighters\Tray\FightersTray.exe"

"HP Software Update"="C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"Gadwin PrintScreen"="C:\Program Files (x86)\Gadwin Systems\PrintScreen\PrintScreen.exe /nosplash"

"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun"

"Web Companion"="C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize"

"BingSvc"="C:\Users\Pc\AppData\Local\Microsoft\BingSvc\BingSvc.exe"

"HP Photosmart 5520 series (NET)"="C:\Program Files\HP\HP Photosmart 5520 series\Bin\ScanToPCActivationApp.exe -deviceID CN38U123TN0602:NW -scfn HP Photosmart 5520 series (NET) -AutoStart 1"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"Application Restart #1"="C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --flag-switches-begin --flag-switches-end --restore-last-session -- http://track.pc-helpforum.be/track/click/30483147/www.pc-helpforum.be?p=eyJzIjoiWldNNFZwcE1GMExadkJWTF91ZURYVnpBakdjIiwidiI6MSwicCI6IntcInVcIjozMDQ4MzE0NyxcInZcIjoxLFwidXJsXCI6XCJodHRwOlxcXC9cXFwvd3d3LnBjLWhlbHBmb3J1bS5iZVxcXC90b3BpY1xcXC82MDg0MC11cGRhdGVzXFxcLz92aWV3PWdldG5ld3Bvc3RcIixcImlkXCI6XCJiNGViMTEzOTRlM2U0NTFlYjM0M2Q1ZTkwMmVlOWE3MFwiLFwidXJsX2lkc1wiOltcImE1OWQwZDEyMmU1MDhkOWFjMGJmNTNmNTA5MmRkZmFlNGEyMDg2YzBcIl19In0"

==== Startup Registry Enabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"SynTPEnh"="%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe"

"Persistence"="C:\Windows\system32\igfxpers.exe"

"MSC"="c:\Program Files\Microsoft Security Client\msseces.exe -hide -runkey"

"IgfxTray"="C:\Windows\system32\igfxtray.exe"

"HotKeysCmds"="C:\Windows\system32\hkcmd.exe"

==== Startup Registry Disabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\IMFservice]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\MbaeSvc]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\ReimageRealTimeProtector]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\Service Mgr WanderBurst]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\SkypeUpdate]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\SPAMfighter Update Service]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\Suite Service]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\Update Mgr WanderBurst]

==== Startup Folders ======================

2015-11-25 15:21:12 1952 ----a-w- C:\Users\Pc\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Inktwaarschuwingen controleren - HP Photosmart 5520 series (netwerk).lnk

==== Task Scheduler Jobs ======================

C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [19/11/2015 18:10]

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [29/08/2015 15:20]

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ [undetermined Task]

==== Other Scheduled Tasks ======================

"C:\Windows\SysNative\tasks\Adobe Acrobat Update Task" [C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe]

"C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe]

"C:\Windows\SysNative\tasks\CreateChoiceProcessTask" [C:\Windows\System32\browserchoice.exe]

"C:\Windows\SysNative\tasks\Driver Booster SkipUAC (Pc)" [C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe]

"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]

"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]

"C:\Windows\SysNative\tasks\HPCustParticipation HP Photosmart 5520 series" ["C:\Program Files\HP\HP Photosmart 5520 series\Bin\HPCustPartic.exe"]

"C:\Windows\SysNative\tasks\SafeZone scheduled Autoupdate 1447957143" [C:\Program Files\AVAST Software\SZBrowser\launcher.exe]

"C:\Windows\SysNative\tasks\SidebarExecute" [C:\Program Files\Windows Sidebar\sidebar.exe]

"C:\Windows\SysNative\tasks\Tweaking.com - Windows Repair Tray Icon" [C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\WR_Tray_Icon.exe]

"C:\Windows\SysNative\tasks\Uninstaller_SkipUac_Pc" [C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe]

"C:\Windows\SysNative\tasks\{2F69A123-3414-44BE-86C8-C4F886C31519}" [C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe]

"C:\Windows\SysNative\tasks\{E4CE8752-8CF5-4E4A-84A0-BC9E8951133E}" [C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe]

"C:\Windows\SysNative\tasks\{E83DCDB4-D41C-47DC-A533-A178BA3E48E2}" [C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe]

"C:\Windows\SysNative\tasks\AVAST Software\Avast settings backup" [C:\Program Files\Common Files\AV\avast Antivirus\backup.exe]

"C:\Windows\SysNative\tasks\Lenovo\Lenovo Customer Feedback Program 64 35" ["%ProgramFiles(x86)%\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe"]

"C:\Windows\SysNative\tasks\Norton Identity Safe\Norton Error Analyzer" [C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.3.12\SymErr.exe]

"C:\Windows\SysNative\tasks\Norton Identity Safe\Norton Error Processor" [C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.3.12\SymErr.exe]

"C:\Windows\SysNative\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc]

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]

"sp@avast.com"="C:\Program Files\AVAST Software\Avast\SafePrice\FF" [29/11/2015 13:17]

==== Chromium Look ======================

Google Chrome Version: 46.0.2490.86

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions

eofcbnmajmjmplflapaojjnihcjkigck - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx[19/11/2015 18:28]

gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[19/11/2015 18:28]

HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions

fcfenmboojpjinhpgggodefccipikbpd - No path found[]

Comodo Drag&Drop Service - Pc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\aneodkojaglhnkkdbbdnmmmgimlcaogo

Comodo Web Inspector - Pc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdngekjahnmlkinegnhdmmbcfnmbclnn

Comodo Media Downloader - Pc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dihmnpngfonlhjmgkflpnibiaaliendo

Comodo Share Page Service - Pc\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\mcmdgbiocnkpnaccjkailibfgepaccgf

Chrome Web Store Payments - Pc\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda

Google Docs - Pc\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake

Google Drive - Pc\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf

YouTube - Pc\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo

Google Search - Pc\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf

Avast SafePrice - Pc\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\eofcbnmajmjmplflapaojjnihcjkigck

Google Docs Offline - Pc\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi

Avast Online Security - Pc\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gomekmidlodglbbmalcneegieacbdmki

Chrome Web Store Payments - Pc\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda

Gmail - Pc\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

==== Chromium Fix ======================

C:\Users\Pc\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\https_c.betrad.com_0.localstorage deleted successfully

C:\Users\Pc\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\https_c.betrad.com_0.localstorage-journal deleted successfully

C:\Users\Pc\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\http_c.betrad.com_0.localstorage deleted successfully

C:\Users\Pc\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\http_c.betrad.com_0.localstorage-journal deleted successfully

C:\Users\Pc\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\https_partner.support.services.microsoft.com_0.localstorage deleted successfully

C:\Users\Pc\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\https_partner.support.services.microsoft.com_0.localstorage-journal deleted successfully

C:\Users\Pc\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\http_skype.nl.softonic.com_0.localstorage deleted successfully

C:\Users\Pc\AppData\Local\Google\Chrome\User Data\Profile 1\Local Storage\http_skype.nl.softonic.com_0.localstorage-journal deleted successfully

==== Set IE to Default ======================

Old Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="http://www.google.be/"

New Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="http://www.google.be/"

==== All HKLM and HKCU SearchScopes ======================

HKLM\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

HKLM\SearchScopes\{DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} - No_Url_Value

HKLM\Wow6432Node\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

HKLM\Wow6432Node\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

HKLM\Wow6432Node\SearchScopes\{632F07F3-19A1-4d16-A23F-E6CE9486BAB5} - http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01

HKLM\Wow6432Node\SearchScopes\{E9410C70-B6AE-41FF-AB71-32F4B279EA5F} - https://www.google.com/search?trackid=sp-006&q={searchTerms}

HKCU\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

HKCU\SearchScopes\{012E1000-F331-11DB-8314-0800200C9A66} - http://www.google.com/search?q={searchTerms}

HKCU\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - http://www.bing.com/search?FORM=U218DF&PC=U218&q={searchTerms}&src=IE-SearchBox

HKCU\SearchScopes\{632F07F3-19A1-4d16-A23F-E6CE9486BAB5} - http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01

HKCU\SearchScopes\{E9410C70-B6AE-41FF-AB71-32F4B279EA5F} - https://www.google.com/search?trackid=sp-006&q={searchTerms}

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A13C2648-91D4-4BF3-BC6D-0079707C4389} deleted successfully

HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A13C2648-91D4-4BF3-BC6D-0079707C4389} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{A13C2648-91D4-4BF3-BC6D-0079707C4389} deleted successfully

HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{A13C2648-91D4-4BF3-BC6D-0079707C4389} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{A13C2648-91D4-4BF3-BC6D-0079707C4389} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{A13C2648-91D4-4BF3-BC6D-0079707C4389} deleted successfully

==== HijackThis Entries ======================

F2 - REG:system.ini: UserInit=userinit.exe,

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll

O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

O2 - BHO: Aanmeldhulp voor Microsoft-account - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui

O4 - HKLM\..\Run: [MobileBroadband] C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe /silent

O4 - HKLM\..\Run: [VmbNotifier] C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbNotifier.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [sfagent] C:\Program Files (x86)\Fighters\SPAMfighter\sfagent.exe

O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"

O4 - HKLM\..\Run: [Malwarebytes Anti-Exploit] C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe

O4 - HKLM\..\Run: [iObit Malware Fighter] "C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe" /autostart

O4 - HKLM\..\Run: [CommonToolkitTray] C:\Program Files (x86)\Fighters\Tray\FightersTray.exe

O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe

O4 - HKCU\..\Run: [Gadwin PrintScreen] "C:\Program Files (x86)\Gadwin Systems\PrintScreen\PrintScreen.exe" /nosplash

O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

O4 - HKCU\..\Run: [Web Companion] C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize

O4 - HKCU\..\Run: [bingSvc] C:\Users\Pc\AppData\Local\Microsoft\BingSvc\BingSvc.exe

O4 - HKCU\..\Run: [HP Photosmart 5520 series (NET)] "C:\Program Files\HP\HP Photosmart 5520 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN38U123TN0602:NW" -scfn "HP Photosmart 5520 series (NET)" -AutoStart 1

O4 - HKCU\..\RunOnce: [Application Restart #1] C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --flag-switches-begin --flag-switches-end --restore-last-session -- http://track.pc-helpforum.be/track/click/30483147/www.pc-helpforum.be?p=eyJzIjoiWldNNFZwcE1GMExadkJWTF91ZURYVnpBakdjIiwidiI6MSwicCI6IntcInVcIjozMDQ4MzE0NyxcInZcIjoxLFwidXJsXCI6XCJodHRwOlxcXC9cXFwvd3d3LnBjLWhlbHBmb3J1bS5iZVxcXC90b3BpY1xcXC82MDg0MC11cGRhdGVzXFxcLz92aWV3PWdldG5ld3Bvc3RcIixcImlkXCI6XCJiNGViMTEzOTRlM2U0NTFlYjM0M2Q1ZTkwMmVlOWE3MFwiLFwidXJsX2lkc1wiOltcImE1OWQwZDEyMmU1MDhkOWFjMGJmNTNmNTA5MmRkZmFlNGEyMDg2YzBcIl19In0

O4 - Startup: Inktwaarschuwingen controleren - HP Photosmart 5520 series (netwerk).lnk = ?

O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print 2.0\smartprintsetup.exe

O9 - Extra 'Tools' menuitem: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print 2.0\smartprintsetup.exe

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL

O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: Intel® Centrino® Wireless Bluetooth® + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe

O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe

O23 - Service: Avast Firewall (avast! Firewall) - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe

O23 - Service: Intel® Centrino® Wireless Bluetooth® + High Speed Security Service (BTHSSecurityMgr) - Intel® Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe

O23 - Service: Intel® Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)

O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - Hewlett-Packard Company - C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe

O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe

O23 - Service: Norton Identity Safe (NCO) - Unknown owner - C:\Program Files (x86)\Norton Identity Safe\Engine\2014.7.3.12\NST.exe (file missing)

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel® Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: Validity WBF Policy Service (valWBFPolicyService) - Unknown owner - C:\Windows\system32\valWBFPolicyService.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: Vodafone Mobile Broadband-service (VmbService) - Vodafone - C:\Program Files (x86)\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

O23 - Service: Intel® PROSet/Wireless Zero Configuration Service (ZeroConfigService) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\Pc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\Pc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully

C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\Pc\AppData\Local\Opera Software\Opera Stable\Cache emptied successfully

C:\Users\Pc\AppData\Local\Comodo\Dragon\User Data\Default\Cache emptied successfully

C:\Users\Pc\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

C:\Users\Pc\AppData\Local\Google\Chrome\User Data\Profile 1\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache is not empty, a reboot is needed

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=100 folders=43 112131525 bytes)

==== Empty Temp Folders ======================

C:\Users\Administrator\AppData\Local\temp emptied successfully

C:\Users\Default\AppData\Local\temp emptied successfully

C:\Users\Default User\AppData\Local\temp emptied successfully

C:\Users\dub_cm_auto\AppData\Local\temp emptied successfully

C:\Users\Jeanpaul\AppData\Local\temp emptied successfully

C:\Users\Pc\AppData\Local\Temp will be emptied at reboot

C:\Users\Public\AppData\Local\temp emptied successfully

C:\Windows\SysNative\config\systemprofile\AppData\Local\temp emptied successfully

C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Temp emptied successfully

C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully

C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully

C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied

C:\Users\Pc\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\Pc\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\283JV4XC\cdn1.static.keezmovies.phncdn.com" not found

"C:\Users\Pc\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\283JV4XC\cdn2.dashbida.com" not found

"C:\Users\Pc\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\283JV4XC\cdnapi.kaltura.com" not found

"C:\Users\Pc\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\283JV4XC\cdnbakmi.kaltura.com" not found

"C:\Users\Pc\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\283JV4XC\embed.wistia.com" not found

"C:\Users\Pc\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\283JV4XC\eu.rad-serve.com" not found

"C:\Users\Pc\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\283JV4XC\launch.newsinc.com" not found

"C:\Users\Pc\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\283JV4XC\pic2.pbsrc.com" not found

"C:\Users\Pc\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\283JV4XC\secure.insightexpressai.com" not found

"C:\Users\Pc\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\283JV4XC\static.issuu.com" not found

"C:\Users\Pc\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\283JV4XC\static1.koken.vtm.be" not found

"C:\Users\Pc\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\283JV4XC\static1.nieuws.vtm.be" not found

"C:\Users\Pc\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\283JV4XC\static1.vtm.vmmacdn.be" not found

"C:\Users\Pc\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\283JV4XC\va1en.sftcdn.net" not found

"C:\Users\Pc\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\283JV4XC\www.myheritage.nl" not found

==== EOF on di 08/12/2015 at 12:51:53,84 ======================

OK ZO ?

kweezie wabbit · 9 december 2015

Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe (hier en hier) kan je lezen hoe je dat doet.

Dubbelklik op Zoek.exe om de tool te starten.
Gebruikers van Windows Vista en later dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
Kopieer nu onderstaande code en plak die in het grote invulvenster:
Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.

C:\Users\Pc\Downloads\CrystalDiskInfoPortable_6.5.2.paf (2).exe;f
C:\Users\Pc\Downloads\CrystalDiskInfoPortable_6.5.2.paf (1).exe;f
C:\Users\Pc\Downloads\spsetup129 (2).exe;f
C:\Users\Pc\Downloads\spsetup129 (1).exe;f
C:\Users\Pc\Downloads\ParetoLogic PC Health Advisor_nl.exe;f
C:\Program Files (x86)\Lavasoft;fs
C:\Program Files (x86)\IObit;fs
C:\Windows\SysNative\tasks\Driver Booster SkipUAC (Pc);f
C:\Windows\SysNative\tasks\Uninstaller_SkipUac_Pc;f
C:\Windows\SysNative\tasks\{2F69A123-3414-44BE-86C8-C4F886C31519};f
[HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Microsoft\Windows\CurrentVersion\Run];r
"Web Companion"=-;r
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run];r
"Web Companion"=-;r
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run];r
"IObit Malware Fighter"=-;r
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\ReimageRealTimeProtector];r
LiveUpdateSvc;s
IObit;z
IObit;a
Lavasoft;z
Lavasoft;a
Reimage;z
Reimage;a
autoclean;

De optie "Scan All Users" staat standaard aangevinkt.
Klik nu op de knop "Run script".
Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
Mocht er geen logje verschijnen, start zoek.exe dan opnieuw en klik op de knop zoek-results.log, de log verschijnt dan alsnog.
Post het geopende logje in het volgende bericht als bijlage.

Zoek.exe logbestand plaatsen

Voeg het logbestand met de naam "Zoek-results.log" als bijlage toe aan het volgende bericht. (Dit logbestand kunt u tevens terug vinden op de systeemschijf als C:\Zoek-results.log.)
Hoe u een bijlage kunt toevoegen aan het bericht leest u hier.

Jean Paul · 9 december 2015

2015/09/12 12,24

Bij de start Kwam er weer Het venster: Bijlage 52

Wat betekent dit en/of geeft dit een probleem bij de uitvoering van de codes ?

Hieronder het LOG:

Zoek.exe v5.0.0.1 Updated 06-December-2015

Tool run by Pc on wo 09/12/2015 at 11:47:16,41.

Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64

Running in: Normal Mode Internet Access Detected

Launched: C:\Users\Pc\Desktop\zoek.exe [scan all users] [script inserted]

==== Older Logs ======================

C:\zoek-results2015-12-08-115153.log 55434 bytes

==== Empty Folders Check ======================

C:\Users\Pc\AppData\Local\VirtualStore deleted successfully

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LiveUpdateSvc deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\LiveUpdateSvc deleted successfully

==== Registry Fix Code ======================

Windows Registry Editor Version 5.00

[HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Microsoft\Windows\CurrentVersion\Run]

Companion"=-

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"Web Companion"=-

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IObit Malware Fighter"=-

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\Services\ReimageRealTimeProtector]

==== Batch Command(s) Run By Tool======================

Kan het volgende DLL-bestand niet laden: NETTRACE.DLL.

De Winsock-catalogus is opnieuw ingesteld.

De computer dient opnieuw te worden opgestart om het opnieuw instellen te voltooien.

==== Deleting Files \ Folders ======================

C:\Program Files (x86)\Lavasoft not found

C:\Users\Pc\AppData\Roaming\ProductData deleted

"C:\Users\Pc\Downloads\CrystalDiskInfoPortable_6.5.2.paf (2).exe" deleted

"C:\Users\Pc\Downloads\CrystalDiskInfoPortable_6.5.2.paf (1).exe" deleted

"C:\Users\Pc\Downloads\spsetup129 (2).exe" deleted

"C:\Users\Pc\Downloads\spsetup129 (1).exe" deleted

"C:\Users\Pc\Downloads\ParetoLogic PC Health Advisor_nl.exe" deleted

"C:\Windows\SysNative\tasks\Driver Booster SkipUAC (Pc)" deleted

"C:\Windows\SysNative\tasks\Uninstaller_SkipUac_Pc" deleted

"C:\Windows\SysNative\tasks\{2F69A123-3414-44BE-86C8-C4F886C31519}" deleted

"C:\Program Files (x86)\IObit" deleted

==== Folders Found ======================

2015-08-22 08:53:31 2015-08-22 08:53:31 -------- d-----w- C:\Program Files (x86)\Common Files\IObit

2015-08-22 08:37:07 2015-09-17 16:21:17 -------- d-----w- C:\ProgramData\IObit

2015-08-22 08:57:58 2015-08-22 08:57:58 -------- d-----w- C:\ProgramData\IObit\IObit Uninstaller

2015-08-22 08:37:07 2015-09-17 16:21:17 -------- d-----w- C:\Users\All Users\IObit

2015-08-22 08:57:58 2015-08-22 08:57:58 -------- d-----w- C:\Users\All Users\IObit\IObit Uninstaller

2015-08-22 08:37:12 2015-09-17 16:20:55 -------- d-----w- C:\Users\Pc\AppData\LocalLow\IObit

2015-08-22 08:36:59 2015-09-17 16:20:55 -------- d-----w- C:\Users\Pc\AppData\Roaming\IObit

2015-08-22 08:36:59 2015-09-17 16:20:55 -------- d-----w- C:\Users\Pc\AppData\Roaming\IObit\IObit Malware Fighter

2015-08-22 08:37:31 2015-09-17 16:20:55 -------- d-----w- C:\Users\Pc\AppData\Roaming\IObit\IObit Uninstaller

2015-12-09 11:01:54 2015-12-09 11:01:56 -------- d---a-w- C:\zoek_backup\C_Program Files (x86)_IObit

2015-12-09 11:01:54 2015-12-09 11:01:54 -------- d---a-w- C:\zoek_backup\C_Program Files (x86)_IObit\IObit Uninstaller

2015-11-22 09:21:35 2015-11-22 09:21:35 -------- dc----w- C:\Users\Pc\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_Reimage.exe_3ebff21972bb15d16ccee6998f58dfa1e5cf4_151141e0

2015-11-01 09:36:13 2015-11-01 09:36:13 -------- dc----w- C:\Users\Pc\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_Reimage.exe_b7c614fdafc50535fa6517d4a962c77babac8b_0eb1afde

2015-12-08 11:40:36 2015-12-08 11:40:37 -------- d---a-w- C:\zoek_backup\C_PROGRA~3_Reimage Express

==== Files Found ======================

--- C:\Users\Pc\AppData\Local\Microsoft\Internet Explorer\DOMStore\D7LE40S8\iobit_malware_fighter.en.downloadastro[1].xml ---

Company: ------

File Description: ------

File Version: ------

Product Name: ------

Copyright: ------

Original Filename: ------

File type: ----a-w-

File size: 420

Created time: 2015-08-22 08:29:04

Modified time: 2015-08-22 08:30:32

MD5: 029244D8EB22309E50389019360995CB

SHA1: 803F69540BC0CB5B338CC938143DA2213CDE410F

--- C:\Users\Pc\AppData\Local\Microsoft\Internet Explorer\DOMStore\QOW8NXN7\www.iobit[1].xml ---

Company: ------

File Description: ------

File Version: ------

Product Name: ------

Copyright: ------

Original Filename: ------

File type: ----a-w-

File size: 1128

Created time: 2015-08-22 08:37:39

Modified time: 2015-08-22 08:56:01

MD5: 917522A845099A8D70C3B1E7F5A0A882

SHA1: E1890EF1842BB99C8CAB4A342DC2DB439CADDFF1

--- C:\Users\Pc\AppData\Local\Microsoft\Internet Explorer\DOMStore\S2DCP3ER\store.iobit[1].xml ---

Company: ------

File Description: ------

File Version: ------

Product Name: ------

Copyright: ------

Original Filename: ------

File type: ----a-w-

File size: 13

Created time: 2015-08-22 08:29:27

Modified time: 2015-08-22 08:29:27

MD5: C1DDEA3EF6BBEF3E7060A1A9AD89E4C5

SHA1: 35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966

--- C:\Windows\SysWOW64\LavasoftTcpService.dll ---

Company: Lavasoft Limited

File Description:

File Version: 2.3.3.7

Product Name: LavasoftTcpService.dll

Copyright:

Original Filename:

File type: ----a-w-

File size: 326288

Created time: 2015-04-24 08:50:56

Modified time: 2015-03-12 09:58:58

MD5: C85A2849F9E3389E70D5240D0EB77A0A

SHA1: DEDD8F0F9D5A4010092A2F3638C2E8AFB12BDD41

--- C:\zoek_backup\C_Windows_Reimage.ini.vir ---

Company: ------

File Description: ------

File Version: ------

Product Name: ------

Copyright: ------

Original Filename: ------

File type: ----a-w-

File size: 148

Created time: 2015-12-08 11:40:43

Modified time: 2015-11-22 15:38:41

MD5: 80BB9F50D066EABEF8777006E054569B

SHA1: 4929BF2F59C96C912B38A34A1594F47167CC421C

==== Registry Search Results for "IObit" ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\IObit]

[HKEY_LOCAL_MACHINE\SOFTWARE\IObit\Advanced SystemCare 8]

"installpath"="C:\\Program Files (x86)\\IObit\\Surfing Protection"

[HKEY_LOCAL_MACHINE\SOFTWARE\IObit\Advanced SystemCare 8]

"apppath"="C:\\Program Files (x86)\\IObit\\Advanced SystemCare 8\\"

[HKEY_LOCAL_MACHINE\SOFTWARE\IObit\ASC]

"Path"="C:\\Program Files (x86)\\IObit\\Advanced SystemCare 8\\ASC.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\IObit\Driver Booster]

[HKEY_LOCAL_MACHINE\SOFTWARE\IObit\IObit Malware Fighter]

"Free"="C:\\Program Files (x86)\\IObit\\IObit Malware Fighter\\"

[HKEY_LOCAL_MACHINE\SOFTWARE\IObit\LiveUpdate]

"AppPath"="C:\\Program Files (x86)\\IObit\\LiveUpdate\\LiveUpdate.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\IObit\RealTimeProtector]

"InstallLocation"="C:\\Program Files (x86)\\IObit\\Advanced SystemCare 8\\"

[HKEY_LOCAL_MACHINE\SOFTWARE\IObit\Uninstaller 4]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\IObit Malware Fighter]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\IObitUnstaler]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\//\//\IObit Cloud Anti-Malwre]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\IObit Malware Fighter]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\IObitUnstaler]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\ShellEx\ContextMenuHandlers\IObit Malware Fighter]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Folder\ShellEx\ContextMenuHandlers\IObitUnstaler]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\IObit Malware Fighter]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\IObitUnstaler]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{ACB9DC96-D7BB-430F-AE6B-97F0DFDEAFCC}\1.0\0\win64]

@="C:\\Program Files (x86)\\IObit\\IObit Malware Fighter\\IMFShellExt.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{ACB9DC96-D7BB-430F-AE6B-97F0DFDEAFCC}\1.0\HELPDIR]

@="C:\\Program Files (x86)\\IObit\\IObit Malware Fighter"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{CFDD9042-CEFB-4B68-B956-90CB0E466B38}\1.0\0\win64]

@="C:\\Program Files (x86)\\IObit\\IObit Uninstaller\\UninstallMenuRight64.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{CFDD9042-CEFB-4B68-B956-90CB0E466B38}\1.0\HELPDIR]

@="C:\\Program Files (x86)\\IObit\\IObit Uninstaller"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{ACB9DC96-D7BB-430F-AE6B-97F0DFDEAFCC}\1.0\0\win64]

@="C:\\Program Files (x86)\\IObit\\IObit Malware Fighter\\IMFShellExt.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{ACB9DC96-D7BB-430F-AE6B-97F0DFDEAFCC}\1.0\HELPDIR]

@="C:\\Program Files (x86)\\IObit\\IObit Malware Fighter"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{CFDD9042-CEFB-4B68-B956-90CB0E466B38}\1.0\0\win64]

@="C:\\Program Files (x86)\\IObit\\IObit Uninstaller\\UninstallMenuRight64.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{CFDD9042-CEFB-4B68-B956-90CB0E466B38}\1.0\HELPDIR]

@="C:\\Program Files (x86)\\IObit\\IObit Uninstaller"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\IMFservice]

"Description"="IObit Malware Fighter Service"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\IMFservice]

"Description"="IObit Malware Fighter Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\IMFservice]

"Description"="IObit Malware Fighter Service"

[HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Microsoft\Internet Explorer\DOMStorage\iobit.com]

[HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Microsoft\Internet Explorer\DOMStorage\iobit_malware_fighter.en.downloadastro.com]

[HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.iobit.com]

[HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted]

"C:\\Users\\Pc\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\BNRHEJB8\\IObit-Malware-Fighter-Setup.exe"=dword:00000001

[HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted]

"C:\\ProgramData\\IObit\\ASCDownloader\\IMF3\\Driver Booster.exe"=dword:00000001

[HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted]

"C:\\ProgramData\\IObit\\ASCDownloader\\IMF3\\Advanced SystemCare.exe"=dword:00000001

[HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted]

"C:\\ProgramData\\IObit\\ASCDownloader\\IMF3\\Smart Defrag.exe"=dword:00000001

[HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]

"C:\\Program Files (x86)\\IObit\\IObit Uninstaller\\Uninstaler_SkipUac.exe"="Uninstall Programs"

[HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]

"C:\\Program Files (x86)\\IObit\\IObit Uninstaller\\Uninstaler_SkipUac.exe"="Uninstall Programs"

==== Registry Search Results for "Lavasoft" ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Lavasoft]

[HKEY_LOCAL_MACHINE\SOFTWARE\Lavasoft\Web Companion]

[HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Microsoft\Windows Live Mail\Reply Count]

"support@em.lavasoft.com"="AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAGiXgeWkRjECMK7kQqfcNNQAAAAACAAAAAAAQZgAAAAEA

==== Registry Search Results for "Reimage" ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\ReiExpressContainer.exe]

@="C:\\Program Files\\Reimage\\Reimage Express\\ReiExpressContainer.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F8A4FC32-DDA3-4DD9-8C62-49F778FF630B}\1.0\0\win64]

@="C:\\Program Files\\Reimage\\Reimage Express\\ReiEngine.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{F8A4FC32-DDA3-4DD9-8C62-49F778FF630B}\1.0\HELPDIR]

@="C:\\Program Files\\Reimage\\Reimage Express"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36}\1.0\0\win64]

@="C:\\Program Files\\Reimage\\Reimage Repair\\REI_Axcontrol.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36}\1.0\HELPDIR]

@="C:\\Program Files\\Reimage\\Reimage Repair"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{F8A4FC32-DDA3-4DD9-8C62-49F778FF630B}\1.0\0\win64]

@="C:\\Program Files\\Reimage\\Reimage Express\\ReiEngine.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{F8A4FC32-DDA3-4DD9-8C62-49F778FF630B}\1.0\HELPDIR]

@="C:\\Program Files\\Reimage\\Reimage Express"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36}\1.0\0\win64]

@="C:\\Program Files\\Reimage\\Reimage Repair\\REI_Axcontrol.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36}\1.0\HELPDIR]

@="C:\\Program Files\\Reimage\\Reimage Repair"

[HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Local AppWizard-Generated Applications\Reimage - Windows Problem Relief.]

[HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Local AppWizard-Generated Applications\Reimage - Windows Problem Relief.\Recent File List]

[HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Local AppWizard-Generated Applications\Reimage - Windows Problem Relief.\Settings]

[HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Persisted]

"C:\\Users\\Pc\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\TVN6R8BK\\ReimageRepair.exe"=dword:00000001

[HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Reimage]

[HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Reimage\PC Repair]

[HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Reimage\PC Repair\Smartbar]

"ReportQuickScan"="http://www.reimageplus.com/scan-report/?run_id=20476e24423847d2a353360b96"

[HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Reimage\Reimage Express]

"FallBackUrl"="http://www.reimageplus.com/reminderexpress/"

[HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Reimage\Reimage Repair]

[HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Reimage\Reimage Repair\Scan Results]

[HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\reimageexpress]

[HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\reimageexpress\ScanResult]

[HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\reimagerepair]

[HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\reimagerepair\ScanResult]

[HKEY_USERS\S-1-5-21-2366639599-4099548902-4220582541-1000\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]

"C:\\Program Files\\Reimage\\Reimage Protector\\ReiProtectorM.exe"="Reimage Reminder"