Last van ongevraagde links op diverse websites

Als ik op een van deze links ga staan dan zie ik de tekst "PirritSuggestor" .

dit is lastig en ik krijg het niet weg heeft iemand een oplossing?

Thanks

Download RSIT van de onderstaande locaties en sla deze op het bureaublad op.

Hoe je controleert of je met een 32- of 64-bitversie van Windows werkt kan je hier bekijken.

• RSIT 32 bit (RSIT.exe)
  
• RSIT 64 bit (RSITx64.exe)
  

Dubbelklik op RSIT.exe om de tool te starten.

• Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  
• Vervolgens wordt de "Disclaimer of warranty" getoond, klik vervolgens op "Continue"
  
• Wanneer de tool gereed is worden er twee kladblok bestanden geopend genaamd "Log.txt" en "Info.txt" .
  

RSIT Logbestanden plaatsen

• Voeg het logbestand met de naam "Log.txt" als bijlage toe aan het volgende bericht. (Dit logbestand kunt u tevens terug vinden in de map ""C:\\rsit")
  
• Het logbestand met de naam "Info.txt" wat geminimaliseerd is hoeft u niet te plaatsen. (Dit logbestand wordt enkel de eerst keer bij het uitvoeren aangemaakt).
  
• Hoe u een bijlage kunt toevoegen aan het bericht leest u hier.
  

De handleiding voor het gebruik van RSIT kan je HIER bekijken en we hebben ook nog een instructievideo.

Logfile of random's system information tool 1.10 (written by random/random)

Run by Claire at 2014-07-27 13:01:11

Microsoft Windows 7 Home Premium Service Pack 1

System drive C: has 314 GB (69%) free of 456 GB

Total RAM: 5996 MB (63% free)

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 13:01:12, on 27-7-2014

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v11.0 (11.00.9600.17207)

Boot mode: Normal

Running processes:

C:\Users\Claire\AppData\Roaming\Dropbox\bin\Dropbox.exe

C:\Program Files (x86)\AVG Secure Search\vprot.exe

C:\Program Files (x86)\AVG\AVG2013\avgui.exe

C:\Program Files (x86)\KPN\KPN Assistent\KPN_Assistent.exe

C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe

C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

C:\Program Files\trend micro\Claire.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.nl/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

R3 - URLSearchHook: (no name) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - (no file)

F2 - REG:system.ini: UserInit=userinit.exe

O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)

O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\18.1.7.644\AVG Secure Search_toolbar.dll

O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~4\Office14\URLREDIR.DLL

O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\18.1.7.644\AVG Secure Search_toolbar.dll

O4 - HKLM\..\Run: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe

O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe

O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG Secure Search\vprot.exe"

O4 - HKLM\..\Run: [Reader Application Helper] C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe

O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY

O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [KPN Assistent] C:\Program Files (x86)\KPN\KPN Assistent\KPN_Assistent.exe /auto

O4 - HKCU\..\Run: [HP Photosmart 7520 series (NET)] "C:\Program Files\HP\HP Photosmart 7520 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN2942B1NY05VV:NW" -scfn "HP Photosmart 7520 series (NET)" -AutoStart 1

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

O4 - Startup: Dropbox.lnk = Claire\AppData\Roaming\Dropbox\bin\Dropbox.exe

O4 - Startup: Inktwaarschuwingen controleren - HP Photosmart 7520 series (netwerk).lnk = ?

O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~2\MICROS~4\Office14\ONBttnIE.dll/105

O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office14\EXCEL.EXE/3000

O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Claire\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm

O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe

O9 - Extra 'Tools' menuitem: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\smartprintsetup.exe

O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL

O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\18.1.7\ViProtocol.dll

O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

O23 - Service: Adobe Active File Monitor V9 (AdobeActiveFileMonitor9.0) - Adobe Systems Incorporated - C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)

O23 - Service: ApplicationDashboardSnapshot.exe - Unknown owner - C:\Users\Claire\AppData\Local\ApplicationDashboardSnapshot\ApplicationDashboardSnapshot.exe (file missing)

O23 - Service: ArchiveTooltipUtility.exe - Unknown owner - C:\Users\Claire\AppData\Local\ArchiveTooltipUtility\ArchiveTooltipUtility.exe

O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe

O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: FunctionRubySnapshot - Unknown owner - C:\Windows\SysWOW64\FunctionRubySnapshot\FunctionRubySnapshot.exe

O23 - Service: HitmanPro Scheduler (HitmanProScheduler) - SurfRight B.V. - C:\Program Files\HitmanPro\hmpsched.exe

O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: Sony SCSI Helper Service - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\Fsk\SonySCSIHelperService.exe

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: AVG PC TuneUp Service (TuneUp.UtilitiesSvc) - AVG - C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: vToolbarUpdater18.1.7 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.7\ToolbarUpdater.exe

O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--

End of file - 12615 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe

%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16

%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16

wininit.exe

winlogon.exe

C:\Windows\system32\services.exe

C:\Windows\system32\lsass.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\system32\atiesrxx.exe

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k LocalService

"C:\Program Files\HitmanPro\hmpsched.exe"

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

"C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe"

C:\Users\Claire\AppData\Local\ArchiveTooltipUtility\ArchiveTooltipUtility.exe

atieclxx

C:\Windows\Explorer.EXE

"C:\Windows\system32\Dwm.exe"

"taskhost.exe"

"C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe"

"C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe"

"C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe"

"C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe"

"C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.7\ToolbarUpdater.exe"

"C:\Windows\System32\igfxtray.exe"

"C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.7\loggingserver.exe" 72648 "C:\ProgramData\AVG Secure Search\Logger\logger.properties"

\??\C:\Windows\system32\conhost.exe "-15119298511056098836-100824258249886-53831240-641395907-1865876791-1710471245

"C:\Windows\System32\hkcmd.exe"

"C:\Windows\System32\igfxpers.exe"

"C:\Program Files\Elantech\ETDCtrl.exe"

"C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe" /TUStart /pid:2196

"C:\Program Files (x86)\AVG\AVG2013\avgnsa.exe"

"C:\Program Files\HP\HP Photosmart 7520 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN2942B1NY05VV:NW" -scfn "HP Photosmart 7520 series (NET)" -AutoStart 1

"C:\Users\Claire\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup

"C:\Windows\system32\RunDll32.exe" "C:\Program Files\HP\HP Photosmart 7520 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN2942B1NY05VV;CONNECTION=NW;MONITOR=1;

"C:\Program Files\HP\HP Photosmart 7520 series\Bin\HPNetworkCommunicatorCom.exe" -Embedding

"C:\Program Files (x86)\AVG Secure Search\vprot.exe"

"C:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY

"C:\Program Files (x86)\KPN\KPN Assistent\KPN_Assistent.exe" /auto

C:\Program Files (x86)\AVG\AVG2013\avgrsa.exe

"C:\Program Files (x86)\AVG\AVG2013\avgemca.exe"

C:\Windows\system32\wbem\wmiprvse.exe

C:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe /pipeName=9aa3c509-4673-4c79-96b7-92108954bb4a /coreSdkOptions=4126 /logConfFile="C:\Windows\system32\config\systemprofile\AppData\Local\Avg2013\temp\d9ec6a4f-80b5-4419-b1b9-d24496bfcc0e-dd0-oopp.tmp" /loggerName=AVG.RS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG2013\" /registryPath="SYSTEM\CurrentControlSet\Services\Avg\Avg2013" /tempPath="C:\Windows\system32\config\systemprofile\AppData\Local\Avg2013\temp\"

C:\Windows\system32\wbem\unsecapp.exe -Embedding

C:\Windows\system32\wbem\wmiprvse.exe

C:\Program Files (x86)\AVG\AVG2013\avgcsrva.exe /pipeName=e4533107-be4a-4a53-a4a0-8d3055a45d69 /coreSdkOptions=4114 /logConfFile="C:\Windows\system32\config\systemprofile\AppData\Local\Avg2013\temp\645b5d71-f7f6-4c49-8cf9-6a38ec055317-710-oopp.tmp" /loggerName=AVG.NS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG2013\" /registryPath="SYSTEM\CurrentControlSet\Services\Avg\Avg2013" /tempPath="C:\Windows\system32\config\systemprofile\AppData\Local\Avg2013\temp\"

taskeng.exe {92AD6A8A-D242-4A09-9EF7-F5F023FF32F0}

"C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe"

"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"

"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

"C:\Program Files\Elantech\ETDCtrlHelper.exe"

"C:\Program Files\Internet Explorer\iexplore.exe"

"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3308 CREDAT:267521 /prefetch:2

"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"

WLIDSvcM.exe 1604

C:\Windows\system32\Macromed\Flash\FlashUtil64_14_0_0_145_ActiveX.exe -Embedding

C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe

C:\Windows\SysWOW64\FunctionRubySnapshot\FunctionRubySnapshot.exe

"C:\Windows\System32\MsSpellCheckingFacility.exe" -Embedding

"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3308 CREDAT:2757938 /prefetch:2

"C:\Users\Claire\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GYZA678B\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]

AVG Safe Search

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]

Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]

AVG Safe Search

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]

AVG Security Toolbar - C:\Program Files (x86)\AVG Secure Search\18.1.7.644\AVG Secure Search_toolbar.dll [2014-06-22 3584024]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]

Office Document Cache Handler - C:\PROGRA~2\MICROS~4\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]

{95B7759C-8C7F-4BF1-B163-73684A933233} - AVG Security Toolbar - C:\Program Files (x86)\AVG Secure Search\18.1.7.644\AVG Secure Search_toolbar.dll [2014-06-22 3584024]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-03-10 11785832]

"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-04-15 168216]

"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-04-15 392472]

"Persistence"=C:\Windows\system32\igfxpers.exe [2011-04-15 416024]

"IntelTBRunOnce"=wscript.exe //b //nologo C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs []

"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2010-11-12 2588968]

"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-07-29 497648]

"Power Management"=C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [2011-08-02 1831016]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"HP Photosmart 7520 series (NET)"=C:\Program Files\HP\HP Photosmart 7520 series\Bin\ScanToPCActivationApp.exe [2012-05-08 2552168]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]

"Norton Online Backup"=C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2010-06-02 1155928]

"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-05-25 336384]

"LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2011-07-01 1103440]

"vProt"=C:\Program Files (x86)\AVG Secure Search\vprot.exe [2014-06-22 2571288]

""= []

"Reader Application Helper"=C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe [2012-07-12 892928]

"AVG_UI"=C:\Program Files (x86)\AVG\AVG2013\avgui.exe [2014-01-21 4411952]

"APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2012-11-28 59280]

"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]

"KPN Assistent"=C:\Program Files (x86)\KPN\KPN Assistent\KPN_Assistent.exe [2012-11-28 14160352]

C:\Users\Claire\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

Dropbox.lnk - C:\Users\Claire\AppData\Roaming\Dropbox\bin\Dropbox.exe

Inktwaarschuwingen controleren - HP Photosmart 7520 series (netwerk).lnk - C:\Windows\system32\RunDll32.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]

C:\Windows\system32\igfxdev.dll [2011-04-15 385024]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]

"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37Crusader]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37CrusaderBoot]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HitmanPro37Crusader]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\HitmanPro37CrusaderBoot]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"ConsentPromptBehaviorAdmin"=5

"ConsentPromptBehaviorUser"=3

"EnableUIADesktopToggle"=0

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

"EnableLinkedConnections"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoActiveDesktop"=1

"NoActiveDesktopChanges"=1

"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AcroRd32.exe]

"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\agatha christie - death on the nile-wt.exe]

"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\backitup.exe]

"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bejeweled 2 deluxe-wt.exe]

"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cc_kart2-wt.exe]

"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\chuzzle deluxe-wt.exe]

"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\drivegreen1-wt.exe]

"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\fate-wt.exe]

"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\hpcustpartic.exe]

"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iastorui.exe]

"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\insaniquarium deluxe-wt.exe]

"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\itunes.exe]

"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jewel quest solitaire-wt.exe]

"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jewelmatch3-wt.exe]

"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\lmanager.exe]

"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mysteryofmortlakemansion-wt.exe]

"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nobuclient.exe]

"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\penguins-wt.exe]

"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\plantsvszombies-wt.exe]

"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\polar-wt.exe]

"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\provider.exe]

"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\reader.exe]

"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\signalislandui.exe]

"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\slingo deluxe-wt.exe]

"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\torchlight-wt.exe]

"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\virtualvillagers4thetreeoflife-wt.exe]

"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wedding dash-wt.exe]

"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zuma deluxe-wt.exe]

"Debugger=""C:\Program Files (x86)\AVG\AVG PC TuneUp\TUAutoReactivator64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]

"vidc.mrle"=msrle32.dll

"vidc.msvc"=msvidc32.dll

"msacm.imaadpcm"=imaadp32.acm

"msacm.msg711"=msg711.acm

"msacm.msgsm610"=msgsm32.acm

"msacm.msadpcm"=msadp32.acm

"midimapper"=midimap.dll

"wavemapper"=msacm32.drv

"VIDC.UYVY"=msyuv.dll

"VIDC.YUY2"=msyuv.dll

"VIDC.YVYU"=msyuv.dll

"VIDC.IYUV"=iyuv_32.dll

"vidc.i420"=iyuv_32.dll

"VIDC.YVU9"=tsbyuv.dll

"msacm.l3acm"=C:\Windows\System32\l3codeca.acm

"MSVideo8"=VfWWDM32.dll

"wave"=wdmaud.drv

"midi"=wdmaud.drv

"mixer"=wdmaud.drv

"aux"=wdmaud.drv

"wave1"=wdmaud.drv

"midi1"=wdmaud.drv

"mixer1"=wdmaud.drv

"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 3 months======

2014-07-27 12:57:50 ----D---- C:\rsit

2014-07-27 12:57:50 ----D---- C:\Program Files\trend micro

2014-07-20 15:01:57 ----D---- C:\Windows\SYSWOW64\FunctionRubySnapshot

2014-07-20 15:01:27 ----D---- C:\Users\Claire\AppData\Roaming\Systweak

2014-07-20 15:01:21 ----A---- C:\Windows\system32\roboot64.exe

2014-07-18 17:32:25 ----N---- C:\bootsqm.dat

2014-07-18 17:16:45 ----A---- C:\Windows\SYSWOW64\authuitu.dll

2014-07-18 17:16:45 ----A---- C:\Windows\system32\TURegOpt.exe

2014-07-18 17:16:45 ----A---- C:\Windows\system32\authuitu.dll

2014-07-12 11:42:55 ----A---- C:\Windows\system32\aepdu.dll

2014-07-12 11:42:54 ----A---- C:\Windows\system32\aeinv.dll

2014-07-12 11:42:49 ----A---- C:\Windows\system32\win32k.sys

2014-07-12 11:42:48 ----A---- C:\Windows\SYSWOW64\osk.exe

2014-07-12 11:42:48 ----A---- C:\Windows\system32\osk.exe

2014-07-12 11:42:47 ----A---- C:\Windows\SYSWOW64\qedit.dll

2014-07-12 11:42:47 ----A---- C:\Windows\system32\qedit.dll

2014-07-12 11:42:47 ----A---- C:\Windows\system32\drivers\afd.sys

2014-07-12 11:42:46 ----A---- C:\Windows\SYSWOW64\wdigest.dll

2014-07-12 11:42:46 ----A---- C:\Windows\SYSWOW64\TSpkg.dll

2014-07-12 11:42:46 ----A---- C:\Windows\SYSWOW64\schannel.dll

2014-07-12 11:42:46 ----A---- C:\Windows\SYSWOW64\ncrypt.dll

2014-07-12 11:42:46 ----A---- C:\Windows\SYSWOW64\msv1_0.dll

2014-07-12 11:42:46 ----A---- C:\Windows\SYSWOW64\kerberos.dll

2014-07-12 11:42:46 ----A---- C:\Windows\SYSWOW64\credssp.dll

2014-07-12 11:42:46 ----A---- C:\Windows\system32\wdigest.dll

2014-07-12 11:42:46 ----A---- C:\Windows\system32\TSpkg.dll

2014-07-12 11:42:46 ----A---- C:\Windows\system32\schannel.dll

2014-07-12 11:42:46 ----A---- C:\Windows\system32\ncrypt.dll

2014-07-12 11:42:46 ----A---- C:\Windows\system32\msv1_0.dll

2014-07-12 11:42:46 ----A---- C:\Windows\system32\kerberos.dll

2014-07-12 11:42:46 ----A---- C:\Windows\system32\credssp.dll

2014-07-12 11:42:42 ----A---- C:\Windows\SYSWOW64\urlmon.dll

2014-07-12 11:42:42 ----A---- C:\Windows\SYSWOW64\mshtmled.dll

2014-07-12 11:42:42 ----A---- C:\Windows\SYSWOW64\mshtml.dll

2014-07-12 11:42:42 ----A---- C:\Windows\SYSWOW64\msfeeds.dll

2014-07-12 11:42:42 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll

2014-07-12 11:42:42 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll

2014-07-12 11:42:42 ----A---- C:\Windows\SYSWOW64\iernonce.dll

2014-07-12 11:42:42 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll

2014-07-12 11:42:42 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll

2014-07-12 11:42:42 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-07-12 11:42:42 ----A---- C:\Windows\system32\iernonce.dll

2014-07-12 11:42:42 ----A---- C:\Windows\system32\ieetwproxystub.dll

2014-07-12 11:42:42 ----A---- C:\Windows\system32\iedkcs32.dll

2014-07-12 11:42:41 ----A---- C:\Windows\SYSWOW64\iesetup.dll

2014-07-12 11:42:41 ----A---- C:\Windows\SYSWOW64\iertutil.dll

2014-07-12 11:42:41 ----A---- C:\Windows\system32\urlmon.dll

2014-07-12 11:42:40 ----A---- C:\Windows\SYSWOW64\jsproxy.dll

2014-07-12 11:42:40 ----A---- C:\Windows\SYSWOW64\ieui.dll

2014-07-12 11:42:40 ----A---- C:\Windows\SYSWOW64\ieframe.dll

2014-07-12 11:42:40 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll

2014-07-12 11:42:40 ----A---- C:\Windows\SYSWOW64\dxtrans.dll

2014-07-12 11:42:40 ----A---- C:\Windows\system32\msfeeds.dll

2014-07-12 11:42:40 ----A---- C:\Windows\system32\ieetwcollectorres.dll

2014-07-12 11:42:40 ----A---- C:\Windows\system32\ieetwcollector.exe

2014-07-12 11:42:40 ----A---- C:\Windows\system32\dxtmsft.dll

2014-07-12 11:42:39 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll

2014-07-12 11:42:39 ----A---- C:\Windows\SYSWOW64\jscript9.dll

2014-07-12 11:42:39 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe

2014-07-12 11:42:39 ----A---- C:\Windows\system32\iesetup.dll

2014-07-12 11:42:39 ----A---- C:\Windows\system32\iertutil.dll

2014-07-12 11:42:39 ----A---- C:\Windows\system32\ie4uinit.exe

2014-07-12 11:42:38 ----A---- C:\Windows\SYSWOW64\wininet.dll

2014-07-12 11:42:38 ----A---- C:\Windows\SYSWOW64\vbscript.dll

2014-07-12 11:42:38 ----A---- C:\Windows\SYSWOW64\msrating.dll

2014-07-12 11:42:38 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll

2014-07-12 11:42:38 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll

2014-07-12 11:42:38 ----A---- C:\Windows\system32\jsproxy.dll

2014-07-12 11:42:38 ----A---- C:\Windows\system32\ieui.dll

2014-07-12 11:42:38 ----A---- C:\Windows\system32\ieframe.dll

2014-07-12 11:42:38 ----A---- C:\Windows\system32\dxtrans.dll

2014-07-12 11:42:37 ----A---- C:\Windows\system32\mshtmlmedia.dll

2014-07-12 11:42:37 ----A---- C:\Windows\system32\mshtmled.dll

2014-07-12 11:42:37 ----A---- C:\Windows\system32\jscript9diag.dll

2014-07-12 11:42:37 ----A---- C:\Windows\system32\jscript9.dll

2014-07-12 11:42:37 ----A---- C:\Windows\system32\ieUnatt.exe

2014-07-12 11:42:36 ----A---- C:\Windows\system32\wininet.dll

2014-07-12 11:42:36 ----A---- C:\Windows\system32\vbscript.dll

2014-07-12 11:42:36 ----A---- C:\Windows\system32\msrating.dll

2014-07-12 11:42:36 ----A---- C:\Windows\system32\MshtmlDac.dll

2014-07-12 11:42:36 ----A---- C:\Windows\system32\ieapfltr.dll

2014-07-12 11:42:35 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe

2014-07-12 11:42:35 ----A---- C:\Windows\system32\mshtml.dll

2014-07-12 11:42:27 ----A---- C:\Windows\SYSWOW64\sspicli.dll

2014-07-12 11:42:27 ----A---- C:\Windows\SYSWOW64\secur32.dll

2014-07-12 11:42:27 ----A---- C:\Windows\system32\lsasrv.dll

2014-06-15 18:58:39 ----A---- C:\Windows\SYSWOW64\usp10.dll

2014-06-15 18:58:39 ----A---- C:\Windows\system32\usp10.dll

2014-06-15 18:58:38 ----A---- C:\Windows\SYSWOW64\msxml6.dll

2014-06-15 18:58:38 ----A---- C:\Windows\system32\msxml6.dll

2014-06-15 18:58:38 ----A---- C:\Windows\system32\msxml3.dll

2014-06-15 18:58:38 ----A---- C:\Windows\system32\drivers\tcpip.sys

2014-06-15 18:58:38 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS

2014-06-15 18:58:37 ----A---- C:\Windows\SYSWOW64\msxml6r.dll

2014-06-15 18:58:37 ----A---- C:\Windows\SYSWOW64\msxml3r.dll

2014-06-15 18:58:37 ----A---- C:\Windows\SYSWOW64\msxml3.dll

2014-06-15 18:58:37 ----A---- C:\Windows\system32\msxml6r.dll

2014-06-15 18:58:37 ----A---- C:\Windows\system32\msxml3r.dll

2014-06-04 13:48:54 ----D---- C:\Users\Claire\AppData\Roaming\CyberLink

2014-05-15 09:17:05 ----A---- C:\Windows\system32\shell32.dll

2014-05-15 09:17:04 ----A---- C:\Windows\SYSWOW64\shell32.dll

2014-05-15 09:14:44 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe

2014-05-15 09:14:41 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe

2014-05-15 09:14:41 ----A---- C:\Windows\system32\winlogon.exe

2014-05-15 09:14:41 ----A---- C:\Windows\system32\objsel.dll

2014-05-15 09:14:41 ----A---- C:\Windows\system32\ntoskrnl.exe

2014-05-15 09:14:39 ----A---- C:\Windows\SYSWOW64\objsel.dll

2014-05-15 09:14:39 ----A---- C:\Windows\SYSWOW64\KernelBase.dll

2014-05-15 09:14:39 ----A---- C:\Windows\system32\KernelBase.dll

2014-05-15 09:14:39 ----A---- C:\Windows\system32\drivers\ksecpkg.sys

2014-05-15 09:14:38 ----A---- C:\Windows\SYSWOW64\wincredprovider.dll

2014-05-15 09:14:38 ----A---- C:\Windows\SYSWOW64\dpapiprovider.dll

2014-05-15 09:14:38 ----A---- C:\Windows\SYSWOW64\dimsroam.dll

2014-05-15 09:14:38 ----A---- C:\Windows\SYSWOW64\cngprovider.dll

2014-05-15 09:14:38 ----A---- C:\Windows\SYSWOW64\capiprovider.dll

2014-05-15 09:14:38 ----A---- C:\Windows\SYSWOW64\adprovider.dll

2014-05-15 09:14:38 ----A---- C:\Windows\system32\wincredprovider.dll

2014-05-15 09:14:38 ----A---- C:\Windows\system32\sspisrv.dll

2014-05-15 09:14:38 ----A---- C:\Windows\system32\sspicli.dll

2014-05-15 09:14:38 ----A---- C:\Windows\system32\secur32.dll

2014-05-15 09:14:38 ----A---- C:\Windows\system32\lsass.exe

2014-05-15 09:14:38 ----A---- C:\Windows\system32\drivers\ksecdd.sys

2014-05-15 09:14:38 ----A---- C:\Windows\system32\dpapiprovider.dll

2014-05-15 09:14:38 ----A---- C:\Windows\system32\dimsroam.dll

2014-05-15 09:14:38 ----A---- C:\Windows\system32\cngprovider.dll

2014-05-15 09:14:38 ----A---- C:\Windows\system32\capiprovider.dll

2014-05-15 09:14:38 ----A---- C:\Windows\system32\adprovider.dll

2014-05-09 08:07:11 ----SD---- C:\Windows\system32\CompatTel

2014-05-05 10:38:52 ----D---- C:\ProgramData\AVG Secure Search

======List of files/folders modified in the last 3 months======

2014-07-27 13:00:57 ----D---- C:\Windows\Temp

2014-07-27 12:57:50 ----RD---- C:\Program Files

2014-07-27 12:57:15 ----D---- C:\Windows\system32\config

2014-07-27 12:51:08 ----D---- C:\Users\Claire\AppData\Roaming\Dropbox

2014-07-27 12:51:03 ----D---- C:\Windows\system32\NDF

2014-07-27 12:49:44 ----D---- C:\Windows\SYSWOW64\drivers

2014-07-27 12:49:41 ----D---- C:\Windows\system32\drivers

2014-07-27 12:49:17 ----D---- C:\Windows\System32

2014-07-27 12:49:17 ----A---- C:\Windows\system32\bootdelete.exe

2014-07-27 12:49:10 ----SHD---- C:\System Volume Information

2014-07-27 12:47:20 ----D---- C:\ProgramData\MFAData

2014-07-27 12:42:21 ----D---- C:\Windows\SysWOW64

2014-07-27 12:39:59 ----RD---- C:\Program Files (x86)

2014-07-24 08:39:52 ----D---- C:\Windows\system32\Tasks

2014-07-23 22:07:22 ----D---- C:\Users\Claire\AppData\Roaming\vlc

2014-07-23 21:56:01 ----SHD---- C:\Windows\Installer

2014-07-23 21:55:49 ----SD---- C:\ProgramData\Microsoft

2014-07-23 21:55:49 ----D---- C:\Program Files (x86)\Microsoft

2014-07-23 21:54:07 ----SD---- C:\Users\Claire\AppData\Roaming\Microsoft

2014-07-23 21:43:41 ----A---- C:\Windows\wininit.ini

2014-07-23 21:32:53 ----HD---- C:\OEM

2014-07-23 21:25:10 ----D---- C:\Program Files (x86)\CyberLink

2014-07-23 20:32:57 ----D---- C:\Windows\winsxs

2014-07-23 18:41:19 ----D---- C:\ProgramData\KESI

2014-07-23 18:41:12 ----D---- C:\Program Files (x86)\Kurzweil Educational Systems

2014-07-23 18:40:50 ----D---- C:\Program Files (x86)\Common Files

2014-07-23 18:40:29 ----RSD---- C:\Windows\Fonts

2014-07-23 18:40:29 ----D---- C:\Windows

2014-07-23 18:40:28 ----A---- C:\Windows\win.ini

2014-07-20 15:05:35 ----D---- C:\Windows\Tasks

2014-07-20 13:59:04 ----D---- C:\Windows\inf

2014-07-20 13:59:04 ----A---- C:\Windows\system32\PerfStringBackup.INI

2014-07-19 20:00:26 ----SHD---- C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}

2014-07-19 19:58:41 ----A---- C:\Windows\SYSWOW64\log.txt

2014-07-18 17:44:55 ----D---- C:\Program Files (x86)\Google

2014-07-18 17:16:30 ----D---- C:\Program Files (x86)\AVG

2014-07-18 16:47:54 ----D---- C:\Windows\system32\catroot2

2014-07-18 16:38:02 ----HDC---- C:\ProgramData\{6EBCE946-F3F0-4347-9E0E-DAE25E6F34D3}

2014-07-18 16:38:02 ----D---- C:\Users\Claire\AppData\Roaming\HpUpdate

2014-07-17 20:22:19 ----D---- C:\Program Files\Windows Journal

2014-07-17 20:22:18 ----D---- C:\Windows\SYSWOW64\Dism

2014-07-17 20:22:17 ----D---- C:\Windows\system32\Dism

2014-07-17 20:22:17 ----D---- C:\Windows\ehome

2014-07-17 20:22:16 ----D---- C:\Windows\system32\nl-NL

2014-07-17 20:22:15 ----D---- C:\Windows\SYSWOW64\en-US

2014-07-17 20:22:15 ----D---- C:\Windows\system32\en-US

2014-07-17 20:22:15 ----D---- C:\Program Files\Internet Explorer

2014-07-17 20:22:15 ----D---- C:\Program Files (x86)\Internet Explorer

2014-07-17 20:18:23 ----D---- C:\Windows\Prefetch

2014-07-17 20:06:34 ----D---- C:\ProgramData\Microsoft Help

2014-07-17 20:03:52 ----D---- C:\Windows\system32\MRT

2014-07-17 19:56:49 ----A---- C:\Windows\system32\MRT.exe

2014-07-12 11:42:20 ----D---- C:\Windows\system32\catroot

2014-07-12 11:28:30 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe

2014-06-22 21:56:55 ----D---- C:\Program Files (x86)\AVG Secure Search

2014-06-16 15:38:08 ----D---- C:\Windows\rescache

2014-06-16 12:51:32 ----D---- C:\Windows\system32\DriverStore

2014-05-18 22:01:31 ----D---- C:\Windows\Microsoft.NET

2014-05-18 22:00:41 ----RSD---- C:\Windows\assembly

2014-05-05 10:38:52 ----HD---- C:\ProgramData

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHA;AVGIDSHA; C:\Windows\system32\DRIVERS\avgidsha.sys [2013-07-20 71480]

R0 Avgloga;AVG Logging Driver; C:\Windows\system32\DRIVERS\avgloga.sys [2013-07-20 311608]

R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx64.sys [2013-07-01 116536]

R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx64.sys [2013-10-23 45880]

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\drivers\iaStor.sys [2011-01-13 439320]

R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2010-03-19 55856]

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]

R1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdrivera.sys [2013-11-25 246072]

R1 Avgldx64;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx64.sys [2013-07-20 206648]

R1 Avgtdia;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdia.sys [2014-04-15 240952]

R1 avgtp;avgtp; \??\C:\Windows\system32\drivers\avgtpx64.sys [2014-06-22 50464]

R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]

R2 TurboB;Turbo Boost UI Monitor driver; C:\Windows\system32\DRIVERS\TurboB.sys [2010-11-30 16120]

R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-05-24 9359872]

R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-05-24 309760]

R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2011-06-02 2750464]

R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2010-11-12 138024]

R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]

R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-03-15 2814952]

R3 IntcDAud;Intel® Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-14 317440]

R3 intelkmd;intelkmd; C:\Windows\system32\DRIVERS\igdpmd64.sys [2011-04-15 12228128]

R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2010-09-27 76912]

R3 MEIx64;Intel® Management Engine Interface; C:\Windows\system32\drivers\HECIx64.sys [2010-10-20 56344]

R3 StillCam;Stuurprogramma voor seriële digitale fotocamera; C:\Windows\system32\drivers\serscan.sys [2009-07-14 12288]

R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [2014-06-23 14112]

R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]

R4 hitmanpro37;HitmanPro 3.7 Support Driver; \??\C:\Windows\system32\drivers\hitmanpro37.sys []

S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]

S3 RgFltX64;RgFltX64; \??\C:\Users\Claire\AppData\Local\ArchiveTooltipUtility\RgFltX64.sys []

S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-07-20 247400]

S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]

S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]

S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2012-09-28 53760]

S3 usbscan;Stuurprogramma voor USB-scanner; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]

S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeActiveFileMonitor9.0;Adobe Active File Monitor V9; C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe [2010-09-30 169408]

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-05-24 204288]

R2 ArchiveTooltipUtility.exe;ArchiveTooltipUtility.exe; C:\Users\Claire\AppData\Local\ArchiveTooltipUtility\ArchiveTooltipUtility.exe [2014-07-26 98341]

R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [2013-07-04 4939312]

R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [2013-11-20 283136]

R2 FunctionRubySnapshot;FunctionRubySnapshot; C:\Windows\SysWOW64\FunctionRubySnapshot\FunctionRubySnapshot.exe [2014-07-20 60964]

R2 HitmanProScheduler;HitmanPro Scheduler; C:\Program Files\HitmanPro\hmpsched.exe [2014-07-17 127752]

R2 Live Updater Service;Live Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [2011-04-22 244624]

R2 TuneUp.UtilitiesSvc;AVG PC TuneUp Service; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2014-07-14 2253112]

R2 vToolbarUpdater18.1.7;vToolbarUpdater18.1.7; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.1.7\ToolbarUpdater.exe [2014-06-22 1813528]

R3 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-29 2292096]

S2 ApplicationDashboardSnapshot.exe;ApplicationDashboardSnapshot.exe; C:\Users\Claire\AppData\Local\ApplicationDashboardSnapshot\ApplicationDashboardSnapshot.exe []

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]

S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]

S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-12 262320]

S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-06-19 111616]

S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]

S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]

S3 Sony SCSI Helper Service;Sony SCSI Helper Service; C:\Program Files (x86)\Common Files\Sony Shared\Fsk\SonySCSIHelperService.exe [2012-05-23 73728]

S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-03-25 1255736]

S4 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-05-08 65432]

S4 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2012-08-11 55184]

S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]

S4 Bonjour Service;Bonjour-service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 462184]

S4 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2011-07-01 353360]

S4 ePowerSvc;ePower Service; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [2011-08-02 872552]

S4 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]

S4 GREGService;GREGService; C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe [2011-05-30 36456]

S4 IAStorDataMgrSvc;Intel® Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-01-13 13336]

S4 iPod Service;iPod-service; C:\Program Files\iPod\bin\iPodService.exe [2012-12-12 641504]

S4 LMS;Intel® Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe [2011-02-01 326168]

S4 NAUpdate;@C:\Program Files (x86)\Nero\Update\NASvc.exe,-200; C:\Program Files (x86)\Nero\Update\NASvc.exe [2011-03-30 598312]

S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

S4 NOBU;Norton Online Backup; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2010-06-02 2804568]

S4 TurboBoost;Intel® Turbo Boost Technology Monitor 2.0; C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2010-11-30 149504]

S4 UNS;Intel® Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2011-02-01 2656280]

S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184]

-----------------EOF-----------------

log.txtverontschuldiging, foutje hierbij het bestand.

Thanks

Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe (hier en hier) kan je lezen hoe je dat doet.

Download Zoek.exe naar het bureaublad (niet de .zip- of .rar-versie)

• Wanneer Internet Explorer of een andere browser of virusscanner melding geeft dat dit bestand onveilig zou zijn kun je negeren, dit is namelijk een onterechte waarschuwing.
  
• Dubbelklik op Zoek.exe om de tool te starten.
  
• Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  
• Kopieer nu onderstaande code en plak die in het grote invulvenster:
  
• Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.
  

  {872b5b88-9db5-4310-bdd0-ac189557e5f5};c
 {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0},c
 {95B7759C-8C7F-4BF1-B163-73684A933233};c
 C:\Program Files (x86)\AVG Secure Search\18.1.7.644\AVG Secure Search_toolbar.dll;f
 vProt;s
 C:\Users\Claire\AppData\Roaming\DVDVideoSoftIEHelpers;fs
 {F274614C-63F8-47D5-A4D1-FBDDE494F8D1};c
 ArchiveTooltipUtility.exe;s
 C:\Users\Claire\AppData\Local\ArchiveTooltipUtility;fs
 vToolbarUpdater18.1.7;s
 C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater;fs
 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}],r64
 [-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}];r64
 [-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}];r64
 [-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Run];r64
 "vProt"=-;r64
""=-;r64
 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AcroRd32.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\agatha christie - death on the nile-wt.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\backitup.exe],r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bejeweled 2 deluxe-wt.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cc_kart2-wt.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\chuzzle deluxe-wt.exe];r64
 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\drivegreen1-wt.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\fate-wt.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\hpcustpartic.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iastorui.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\insaniquarium deluxe-wt.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\itunes.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jewel quest solitaire-wt.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jewelmatch3-wt.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\lmanager.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mysteryofmortlakemansion-wt.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nobuclient.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\penguins-wt.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\plantsvszombies-wt.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\polar-wt.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\provider.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\reader.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\signalislandui.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\slingo deluxe-wt.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\torchlight-wt.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\virtualvillagers4thetreeoflife-wt.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\wedding dash-wt.exe];r64
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\zuma deluxe-wt.exe];r64
 C:\Windows\SYSWOW64\FunctionRubySnapshot;fs
C:\Users\Claire\AppData\Roaming\Systweak;fs
C:\Windows\system32\roboot64.exe;f
 C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308};fs
 C:\ProgramData\{6EBCE946-F3F0-4347-9E0E-DAE25E6F34D3};fs
 FunctionRubySnapshot;s
 C:\Windows\SysWOW64\FunctionRubySnapshot;fs
 emptyfolderscheck;delete 
startupall; 
filesrcm;

• Klik op de knop "More options" en vink nu de onderstaande opties aan.
  
• Do a Quick Scan
  
  
• Auto Clean
  
• De optie "Scan All Users" staat standaard aangevinkt.
  
• Klik nu op de knop "Run script".
  
• Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
  
• Mocht er geen logje verschijnen, start zoek.exe dan opnieuw en klik op de knop zoek-results.log, de log verschijnt dan alsnog.
  
• Post het geopende logje in het volgende bericht als bijlage.
  

Zoek.exe logbestand plaatsen

• Voeg het logbestand met de naam "Zoek-results.log" als bijlage toe aan het volgende bericht. (Dit logbestand kunt u tevens terug vinden op de systeemschijf als C:\\Zoek-results.log.)
  
• Hoe u een bijlage kunt toevoegen aan het bericht leest u hier.
  

Hierbij zoek-results

zoek-results.txt

Download AdwCleaner by Xplode naar het bureaublad.

• Sluit alle openstaande vensters.
  
• Dubbelklik op AdwCleaner om hem te starten.
  
• Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren,
  
• Door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  
• Klik op Scan.
  
• Klik vervolgens op Clean.
  
• Klik bij Herstarten Noodzakelijk op OK
  

Nadat de PC opnieuw is opgestart, opent meestal een logfile.

Anders is het hier terug te vinden C:\AdwCleaner\AdwCleaner[s0].txt.

Logbestand plaatsen

• Voeg het logbestand met de naam C:\AdwCleaner\AdwCleaner[s0].txt als bijlage toe aan het volgende bericht.
  
• Hoe u een bijlage kunt toevoegen aan het bericht leest u hier.
  

Hierbij het laatste log bestand.

AdwCleaner[R0].txt

Je hebt AdwCleaner enkel laten "scannen". Het is ook de bedoeling dat je dit programma de gevonden items laat "verwijderen". Want deze moeten wel degelijk opgeruimd worden. Wil je AdwCleaner nog eens herhalen en nu kiezen voor "verwijderen" ... en dan weer het logje daarvan in een volgend bericht hangen ?

hierbij de tekst file na nadat verwijderen is uitgevoerd.

AdwCleaner[S0].txt