Ga naar inhoud

Nero Lite


Meesters77

Aanbevolen berichten

Hoi,

Ik heb Nero Lite (unattended) gedownload, alles werkt prima.

Maar op 1 ding na.

Als ik mijn computer opnieuw opstart, begint de installatie wizzard opnieuw te installeren.

Ik heb Nero geheel van mijn computer verwijderd, maar het blijft terug komen.

Tijdens het installeren op taakbeheer gekeken, en gekeken waar de file vandaan komt, (appdata/local/temp).

Alles verwijderd in die map, maar dat helpt niet.

Start, alle programma's, de map opstarten, die is leeg.

Start, uitvoeren, msconfig, dan tabblad opstarten, staat ie ook niet tussen.

Het gaat om het bestand Abcww.exe (Nero Self Extractor).

Kan iemand mij hiermee helpen, thx

Link naar reactie
Delen op andere sites

Heb je Nero gedownload vanaf de officiële site?

Ik denk het niet, je zal wat extra rotzooi gedownload hebben.

Download 51a5f5d096dae-icon_RSIT.pngRSIT van de onderstaande locaties en sla deze op het bureaublad op.

Hoe je controleert of je met een 32- of 64-bitversie van Windows werkt kan je hier bekijken.

Dubbelklik op RSIT.exe om de tool te starten.

  • Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  • Vervolgens wordt de "Disclaimer of warranty" getoond, klik vervolgens op "Continue"
  • Wanneer de tool gereed is worden er twee kladblok bestanden geopend genaamd "Log.txt" en "Info.txt" .

RSIT Logbestanden plaatsen

  • Voeg het logbestand met de naam "Log.txt" als bijlage toe aan het volgende bericht. (Dit logbestand kunt u tevens terug vinden in de map ""C:\\rsit")
  • Het logbestand met de naam "Info.txt" wat geminimaliseerd is hoeft u niet te plaatsen. (Dit logbestand wordt enkel de eerst keer bij het uitvoeren aangemaakt).
  • Hoe u een bijlage kunt toevoegen aan het bericht leest u hier.

De handleiding voor het gebruik van RSIT kan je HIER bekijken en we hebben ook nog een instructievideo.

Link naar reactie
Delen op andere sites

Logfile of random's system information tool 1.10 (written by random/random)

Run by Meesters at 2014-07-13 17:05:45

Microsoft Windows 7 Ultimate Service Pack 1

System drive C: has 599 GB (64%) free of 937 GB

Total RAM: 4095 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 17:05:53, on 13-7-2014

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Unable to get Internet Explorer version!

Boot mode: Normal

Running processes:

C:\Users\Meesters\AppData\Roaming\MSDCSC\msdcsc.exe

C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe

C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE

C:\Program Files (x86)\DAEMON Tools Lite\DTShellHlp.exe

C:\Users\Meesters\AppData\Roaming\MSDCSC\msdcsc.exe

C:\Windows\SysWOW64\notepad.exe

C:\Program Files (x86)\iolo\System Mechanic Professional\System Shield\ioloSSTray.exe

C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE

C:\Users\Meesters\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Users\Meesters\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Users\Meesters\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Users\Meesters\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Users\Meesters\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Users\Meesters\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Users\Meesters\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Users\Meesters\AppData\Local\Google\Chrome\Application\chrome.exe

C:\Program Files\trend micro\Meesters.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Mysearchdial Search

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Mysearchdial Search

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

F2 - REG:system.ini: UserInit=userinit.exe,

O3 - Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - (no file)

O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun

O4 - HKLM\..\Run: [iJNetworkScannerSelectorEX] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe /FORCE

O4 - HKLM\..\Run: [CanonQuickMenu] C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE /logon

O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun

O4 - HKCU\..\Run: [MicroUpdate] C:\Users\Meesters\AppData\Roaming\MSDCSC\msdcsc.exe

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000

O10 - Unknown file in Winsock LSP: c:\windows\system32\iavlsp.dll

O10 - Unknown file in Winsock LSP: c:\windows\system32\iavlsp.dll

O10 - Unknown file in Winsock LSP: c:\windows\system32\iavlsp.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: iolo System Service (ioloSystemService) - iolo technologies, LLC - C:\Program Files (x86)\iolo\Common\Lib\ioloServiceManager.exe

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: vseamps - Commtouch, Inc. - C:\Program Files\Common Files\Authentium\AntiVirus5\vseamps.exe

O23 - Service: vsedsps - Commtouch, Inc. - C:\Program Files\Common Files\Authentium\AntiVirus5\vsedsps.exe

O23 - Service: vseqrts - Commtouch, Inc. - C:\Program Files\Common Files\Authentium\AntiVirus5\vseqrts.exe

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

--

End of file - 7392 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe

%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16

wininit.exe

%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16

C:\Windows\system32\services.exe

C:\Windows\system32\lsass.exe

C:\Windows\system32\lsm.exe

winlogon.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\system32\atiesrxx.exe

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k GPSvcGroup

C:\Windows\system32\svchost.exe -k NetworkService

atieclxx

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

"taskhost.exe"

taskeng.exe {85E52021-2124-4B42-A492-07EAECE4E276}

"C:\Program Files (x86)\iolo\System Mechanic Professional\iologovernor64.exe"

"C:\Windows\system32\Dwm.exe"

C:\Windows\Explorer.EXE

"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun

KHALMNPR.EXE /API

"C:\Users\Meesters\AppData\Roaming\MSDCSC\msdcsc.exe"

"C:\Program Files\Logitech\SetPointG\SetPointII.exe"

"C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe" /FORCE

"C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE" /logon

"C:\Program Files (x86)\DAEMON Tools Lite\DTShellHlp.exe"

"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow

"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0

"C:\Program Files (x86)\iolo\Common\Lib\ioloServiceManager.exe"

"C:\Users\Meesters\AppData\Roaming\MSDCSC\msdcsc.exe"

C:\Windows\SysWOW64\PnkBstrA.exe

notepad

C:\Windows\system32\svchost.exe -k imgsvc

"C:\Program Files\Common Files\Authentium\AntiVirus5\vsedsps.exe"

"C:\Program Files\Common Files\Authentium\AntiVirus5\vseamps.exe"

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-be852b39-8710-4e57-83c7-89694cfc045c -SystemEventPortName:HostProcess-29d6fe74-bf2b-4377-8074-941b7e6eaf9b -IoCancelEventPortName:HostProcess-ecc21d37-66d0-4ade-914f-5e3981ce73e0 -NonStateChangingEventPortName:HostProcess-466d0902-0447-4bb6-87d0-575ecd5ab9d2 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:4b53b50c-7172-4aca-b52e-ee89c9e5d8e4 -DeviceGroupId:WpdFsGroup

C:\Windows\splwow64.exe 8192

"C:\Program Files (x86)\iolo\System Mechanic Professional\System Shield\ioloSSTray.exe"

C:\Windows\System32\svchost.exe -k LocalServicePeerNet

"C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE"

C:\Windows\System32\svchost.exe -k secsvcs

C:\Windows\system32\svchost.exe -k SDRSVC

"C:\Users\Meesters\AppData\Local\Google\Chrome\Application\chrome.exe"

"C:\Users\Meesters\AppData\Local\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="1400.0.855061079\1082566612" --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,3,12,22 --gpu-vendor-id=0x1002 --gpu-device-id=0x68b8 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=13.251.0.0 --ignored=" --type=renderer " /prefetch:822062411

"C:\Users\Meesters\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials=BrowserPreReadExperiment/100-pct-default/DeferBackgroundExtensionCreation/RateLimited/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-1-Percent/group_15/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/default/ --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --channel="1400.2.668257002\567889896" /prefetch:673131151

"C:\Users\Meesters\AppData\Local\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="1400.3.915042231\427521617" --ppapi-flash-args --lang=nl --ignored=" --type=renderer " /prefetch:-632637702

"C:\Users\Meesters\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials=BrowserPreReadExperiment/100-pct-default/DeferBackgroundExtensionCreation/RateLimited/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-1-Percent/group_15/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/default/ --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --channel="1400.4.784467624\1201155598" /prefetch:673131151

"C:\Users\Meesters\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials=BrowserPreReadExperiment/100-pct-default/DeferBackgroundExtensionCreation/RateLimited/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-1-Percent/group_15/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/default/ --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --channel="1400.5.308871888\763254061" /prefetch:673131151

"C:\Users\Meesters\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials=BrowserPreReadExperiment/100-pct-default/DeferBackgroundExtensionCreation/RateLimited/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-1-Percent/group_15/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/default/ --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --channel="1400.6.1675135255\1131211578" /prefetch:673131151

"C:\Users\Meesters\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials=BrowserPreReadExperiment/100-pct-default/DeferBackgroundExtensionCreation/RateLimited/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-1-Percent/group_15/UMA-Uniformity-Trial-10-Percent/group_06/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_06/UMA-Uniformity-Trial-50-Percent/default/ --enable-threaded-compositing --renderer-print-preview --disable-html-notifications --channel="1400.7.333938323\243945204" /prefetch:673131151

"C:\Users\Meesters\Desktop\RSITx64.exe"

C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Digital Sites.job - C:\Users\Meesters\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE /Check

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2930457502-4171832609-1148051504-1000Core.job - C:\Users\Meesters\AppData\Local\Google\Update\GoogleUpdate.exe /c

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2930457502-4171832609-1148051504-1000UA.job - C:\Users\Meesters\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{ae07101b-46d4-4a98-af68-0333ea26e113}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]

{ae07101b-46d4-4a98-af68-0333ea26e113}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"EvtMgr6"=C:\Program Files\Logitech\SetPointP\SetPoint.exe [2011-06-24 1744152]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]

"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-03-14 3672640]

"MicroUpdate"=C:\Users\Meesters\AppData\Roaming\MSDCSC\msdcsc.exe [2014-04-14 290313379]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]

"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [2013-12-06 766208]

"IJNetworkScannerSelectorEX"=C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [2012-03-26 449168]

"CanonQuickMenu"=C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [2014-03-25 1284680]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]

c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2011-06-17 68376]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]

"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AMP]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AMPSE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BITS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EventSystem]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ioloSystemService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vseamps]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vsedsps]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vseqrts]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AMP]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AMPSE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\BITS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\EventSystem]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\ioloSystemService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vseamps]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vsedsps]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\vseqrts]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"ConsentPromptBehaviorAdmin"=5

"ConsentPromptBehaviorUser"=3

"EnableUIADesktopToggle"=0

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoActiveDesktop"=1

"NoActiveDesktopChanges"=1

"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]

"vidc.mrle"=msrle32.dll

"vidc.msvc"=msvidc32.dll

"msacm.imaadpcm"=imaadp32.acm

"msacm.msg711"=msg711.acm

"msacm.msgsm610"=msgsm32.acm

"msacm.msadpcm"=msadp32.acm

"midimapper"=midimap.dll

"wavemapper"=msacm32.drv

"vidc.uyvy"=msyuv.dll

"vidc.yuy2"=msyuv.dll

"vidc.yvyu"=msyuv.dll

"vidc.iyuv"=iyuv_32.dll

"vidc.i420"=iyuv_32.dll

"vidc.yvu9"=tsbyuv.dll

"msacm.l3acm"=C:\Windows\System32\l3codeca.acm

"wave"=wdmaud.drv

"midi"=wdmaud.drv

"mixer"=wdmaud.drv

"aux"=wdmaud.drv

"wave1"=wdmaud.drv

"midi1"=wdmaud.drv

"mixer1"=wdmaud.drv

"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

.js - open - NOTEPAD.EXE %1

.reg - open - NOTEPAD.EXE %1

.scr - open - NOTEPAD.EXE %1

.vbs - open - NOTEPAD.EXE %1

======List of files/folders created in the last 1 month======

2014-07-13 17:05:46 ----D---- C:\Program Files\trend micro

2014-07-13 17:05:45 ----D---- C:\rsit

2014-07-10 15:40:48 ----D---- C:\Users\Meesters\AppData\Roaming\dclogs

2014-07-10 15:40:18 ----D---- C:\Users\Meesters\AppData\Roaming\MSDCSC

2014-07-09 20:00:16 ----A---- C:\Windows\SYSWOW64\qedit.dll

2014-07-09 20:00:16 ----A---- C:\Windows\system32\qedit.dll

2014-07-09 20:00:15 ----A---- C:\Windows\SYSWOW64\osk.exe

2014-07-09 20:00:15 ----A---- C:\Windows\system32\win32k.sys

2014-07-09 20:00:15 ----A---- C:\Windows\system32\osk.exe

2014-07-09 20:00:12 ----A---- C:\Windows\system32\drivers\afd.sys

2014-07-09 20:00:08 ----A---- C:\Windows\SYSWOW64\wininet.dll

2014-07-09 20:00:08 ----A---- C:\Windows\SYSWOW64\mshtmled.dll

2014-07-09 20:00:08 ----A---- C:\Windows\SYSWOW64\jscript9.dll

2014-07-09 20:00:08 ----A---- C:\Windows\SYSWOW64\jscript.dll

2014-07-09 20:00:08 ----A---- C:\Windows\SYSWOW64\ieui.dll

2014-07-09 20:00:08 ----A---- C:\Windows\SYSWOW64\dxtrans.dll

2014-07-09 20:00:08 ----A---- C:\Windows\system32\jscript9.dll

2014-07-09 20:00:08 ----A---- C:\Windows\system32\dxtrans.dll

2014-07-09 20:00:07 ----A---- C:\Windows\SYSWOW64\mshtml.dll

2014-07-09 20:00:07 ----A---- C:\Windows\system32\wininet.dll

2014-07-09 20:00:07 ----A---- C:\Windows\system32\jsproxy.dll

2014-07-09 20:00:06 ----A---- C:\Windows\SYSWOW64\vbscript.dll

2014-07-09 20:00:06 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll

2014-07-09 20:00:04 ----A---- C:\Windows\system32\vbscript.dll

2014-07-09 20:00:04 ----A---- C:\Windows\system32\mshtmled.dll

2014-07-09 20:00:04 ----A---- C:\Windows\system32\ieui.dll

2014-07-09 20:00:04 ----A---- C:\Windows\system32\dxtmsft.dll

2014-07-09 20:00:03 ----A---- C:\Windows\system32\mshtml.dll

2014-07-09 20:00:03 ----A---- C:\Windows\system32\jscript.dll

2014-07-09 20:00:02 ----A---- C:\Windows\SYSWOW64\urlmon.dll

2014-07-09 20:00:02 ----A---- C:\Windows\SYSWOW64\mshta.exe

2014-07-09 20:00:02 ----A---- C:\Windows\system32\mshta.exe

2014-07-09 20:00:02 ----A---- C:\Windows\system32\msfeedsbs.dll

2014-07-09 20:00:02 ----A---- C:\Windows\system32\ieUnatt.exe

2014-07-09 20:00:01 ----A---- C:\Windows\SYSWOW64\url.dll

2014-07-09 20:00:01 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll

2014-07-09 20:00:01 ----A---- C:\Windows\SYSWOW64\msfeeds.dll

2014-07-09 20:00:01 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe

2014-07-09 20:00:01 ----A---- C:\Windows\SYSWOW64\iertutil.dll

2014-07-09 20:00:01 ----A---- C:\Windows\system32\urlmon.dll

2014-07-09 20:00:01 ----A---- C:\Windows\system32\url.dll

2014-07-09 20:00:01 ----A---- C:\Windows\system32\msfeeds.dll

2014-07-09 20:00:01 ----A---- C:\Windows\system32\iertutil.dll

2014-07-09 20:00:00 ----A---- C:\Windows\SYSWOW64\jsproxy.dll

2014-07-09 20:00:00 ----A---- C:\Windows\SYSWOW64\ieframe.dll

2014-07-09 20:00:00 ----A---- C:\Windows\system32\ieframe.dll

2014-07-09 19:59:59 ----A---- C:\Windows\system32\msfeedssync.exe

2014-07-09 19:59:58 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe

2014-07-09 19:59:46 ----A---- C:\Windows\SYSWOW64\sspicli.dll

2014-07-09 19:59:46 ----A---- C:\Windows\SYSWOW64\secur32.dll

2014-07-09 19:59:46 ----A---- C:\Windows\system32\lsasrv.dll

2014-07-06 18:05:36 ----HD---- C:\ProgramData\CanonIJScan

2014-07-06 18:05:34 ----D---- C:\Users\Meesters\AppData\Roaming\Canon

2014-07-06 11:00:35 ----HD---- C:\ProgramData\CanonIJEGV

2014-07-06 10:57:42 ----D---- C:\ProgramData\Canon IJ Network Tool

2014-07-06 10:57:18 ----A---- C:\Windows\SYSWOW64\CNHMCA.dll

2014-07-06 10:57:16 ----A---- C:\Windows\SYSWOW64\CNC_B9U.dll

2014-07-06 10:57:16 ----A---- C:\Windows\SYSWOW64\CNC_B9L.dll

2014-07-06 10:56:12 ----D---- C:\Program Files\Common Files\CANON

2014-07-06 10:56:03 ----D---- C:\ProgramData\CanonIJWSpt

2014-07-06 10:55:38 ----D---- C:\Program Files\Canon

2014-07-06 10:53:36 ----A---- C:\Windows\system32\CNMLMB9.DLL

2014-07-06 10:53:07 ----D---- C:\Windows\system32\STRING

2014-07-06 10:53:07 ----A---- C:\Windows\system32\CNMN6UI.DLL

2014-07-06 10:53:07 ----A---- C:\Windows\system32\CNMN6PPM.DLL

======List of files/folders modified in the last 1 month======

2014-07-13 17:05:53 ----D---- C:\Windows\Prefetch

2014-07-13 17:05:50 ----D---- C:\Windows\Temp

2014-07-13 17:05:46 ----RD---- C:\Program Files

2014-07-13 13:53:56 ----A---- C:\Windows\SYSWOW64\iolo.ini.txt

2014-07-13 13:53:56 ----A---- C:\Windows\SYSWOW64\iolo.ini

2014-07-13 13:53:56 ----A---- C:\Windows\system32\iolo.ini

2014-07-13 13:51:44 ----D---- C:\Windows\system32\config

2014-07-13 11:16:03 ----D---- C:\Windows

2014-07-13 11:14:30 ----D---- C:\Users\Meesters\AppData\Roaming\DAEMON Tools Lite

2014-07-13 11:14:17 ----D---- C:\Windows\inf

2014-07-13 11:14:17 ----D---- C:\Windows\debug

2014-07-13 11:03:14 ----HD---- C:\ProgramData

2014-07-13 10:35:41 ----SHD---- C:\Windows\Installer

2014-07-13 10:35:41 ----SHD---- C:\Config.Msi

2014-07-13 10:35:35 ----RD---- C:\Program Files (x86)

2014-07-13 10:34:39 ----SHD---- C:\System Volume Information

2014-07-13 10:31:12 ----D---- C:\ProgramData\Nero

2014-07-13 10:30:55 ----D---- C:\Windows\system32\Tasks

2014-07-10 21:08:26 ----D---- C:\Windows\winsxs

2014-07-10 21:08:23 ----D---- C:\Windows\SysWOW64

2014-07-10 21:06:52 ----D---- C:\Windows\rescache

2014-07-10 16:30:36 ----D---- C:\Users\Meesters\AppData\Roaming\Nero

2014-07-10 16:28:27 ----D---- C:\Windows\system32\catroot2

2014-07-10 16:02:34 ----D---- C:\Windows\Cursors

2014-07-10 15:48:17 ----D---- C:\Program Files (x86)\MSXML 4.0

2014-07-10 15:30:30 ----D---- C:\Program Files (x86)\Common Files

2014-07-09 21:48:00 ----D---- C:\Program Files (x86)\Internet Explorer

2014-07-09 21:47:58 ----D---- C:\Windows\SYSWOW64\migration

2014-07-09 21:47:57 ----D---- C:\Windows\system32\migration

2014-07-09 21:47:57 ----D---- C:\Windows\System32

2014-07-09 21:47:56 ----D---- C:\Program Files\Internet Explorer

2014-07-09 21:47:55 ----D---- C:\Program Files\Windows Journal

2014-07-09 21:47:50 ----D---- C:\Windows\ehome

2014-07-09 21:47:49 ----D---- C:\Windows\system32\drivers

2014-07-09 21:42:21 ----D---- C:\Windows\system32\MRT

2014-07-09 21:42:20 ----A---- C:\Windows\system32\MRT.exe

2014-07-09 21:42:11 ----D---- C:\ProgramData\Microsoft Help

2014-07-09 19:59:24 ----D---- C:\Windows\system32\catroot

2014-07-08 13:56:12 ----SD---- C:\Users\Meesters\AppData\Roaming\Microsoft

2014-07-06 11:00:33 ----D---- C:\Program Files (x86)\Canon

2014-07-06 10:57:18 ----RSD---- C:\Windows\Media

2014-07-06 10:57:08 ----D---- C:\Windows\twain_32

2014-07-06 10:56:12 ----D---- C:\Program Files\Common Files

2014-07-06 10:54:14 ----HD---- C:\Windows\system32\CanonIJ Uninstaller Information

2014-07-06 10:54:12 ----D---- C:\Windows\system32\DriverStore

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]

R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2013-03-11 564824]

R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552]

R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]

R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-04-18 283200]

R1 ElRawDisk;ElRawDisk; \??\C:\Windows\system32\drivers\ElRawDsk.sys [2008-12-09 23464]

R2 AMP;Active Malware Protection Minifilter Driver; \??\C:\Windows\system32\Drivers\amp.sys [2012-08-24 173408]

R2 AMPSE;Active Malware Protection Support Driver; \??\C:\Windows\system32\Drivers\ampse.sys [2012-08-24 1504608]

R2 PDFsFilter;PDFsFilter; C:\Windows\system32\DRIVERS\PDFsFilter.sys [2014-04-07 82160]

R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2013-12-06 13207552]

R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2013-12-06 626176]

R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2013-09-24 94208]

R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2011-04-30 66840]

R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2011-04-30 60184]

R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2005-03-29 8192]

R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2014-02-18 901848]

R3 VIAHdAudAddService;VIA High Definition Audio Driver Service; C:\Windows\system32\drivers\viahduaa.sys [2010-01-11 1290752]

S3 az2wsrdg;az2wsrdg; C:\Windows\system32\drivers\az2wsrdg.sys []

S3 BVRPMPR5a64;BVRPMPR5a64 NDIS Protocol Driver; \??\C:\Windows\system32\drivers\BVRPMPR5a64.SYS [2010-09-27 35840]

S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys []

S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]

S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]

S3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2011-04-26 353000]

S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656]

S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688]

S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys []

S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2012-08-23 57856]

S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys []

S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]

S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys []

S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760]

S3 WinUsb;SAMSUNG Android USB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2013-12-06 239616]

R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]

R2 ioloSystemService;iolo System Service; C:\Program Files (x86)\iolo\Common\Lib\ioloServiceManager.exe [2014-04-30 4492776]

R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2012-04-22 76888]

R2 vseamps;vseamps; C:\Program Files\Common Files\Authentium\AntiVirus5\vseamps.exe [2012-08-24 121696]

R2 vsedsps;vsedsps; C:\Program Files\Common Files\Authentium\AntiVirus5\vsedsps.exe [2012-08-24 119136]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2012-07-09 104912]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2012-07-09 123856]

S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]

S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe [2011-06-17 359192]

S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]

S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]

S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-02-25 568512]

S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]

S3 vseqrts;vseqrts; C:\Program Files\Common Files\Authentium\AntiVirus5\vseqrts.exe [2012-08-24 181600]

S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-07-30 1255736]

S4 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960]

S4 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2012-07-09 51648]

S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]

S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]

S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2012-07-09 139696]

S4 TomTomHOMEService;TomTomHOMEService; C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe [2011-12-05 92592]

-----------------EOF-----------------

Link naar reactie
Delen op andere sites

Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe (hier en hier) kan je lezen hoe je dat doet.

Download 51a612a8b27e2-Zoek.pngZoek.exe naar het bureaublad (niet de .zip- of .rar-versie)

  • Wanneer Internet Explorer of een andere browser of virusscanner melding geeft dat dit bestand onveilig zou zijn kun je negeren, dit is namelijk een onterechte waarschuwing.
  • Dubbelklik op Zoek.exe om de tool te starten.
  • Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  • Kopieer nu onderstaande code en plak die in het grote invulvenster:
  • Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.

  {ae07101b-46d4-4a98-af68-0333ea26e113};c
 C:\Windows\tasks\Digital Sites.job;f
 C:\ProgramData\Nero;fs
 C:\Users\Meesters\AppData\Roaming\Nero;fs
 emptyfolderscheck;delete 
startupall; 
filesrcm;

  • Klik op de knop "More options" en vink nu de onderstaande opties aan.
  • Do a Quick Scan

  • Auto Clean
  • De optie "Scan All Users" staat standaard aangevinkt.
  • Klik nu op de knop "Run script".
  • Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
  • Mocht er geen logje verschijnen, start zoek.exe dan opnieuw en klik op de knop zoek-results.log, de log verschijnt dan alsnog.
  • Post het geopende logje in het volgende bericht als bijlage.

Zoek.exe logbestand plaatsen

  • Voeg het logbestand met de naam "Zoek-results.log" als bijlage toe aan het volgende bericht. (Dit logbestand kunt u tevens terug vinden op de systeemschijf als C:\\Zoek-results.log.)
  • Hoe u een bijlage kunt toevoegen aan het bericht leest u hier.

Link naar reactie
Delen op andere sites

Zoek.exe v5.0.0.0 Updated 14-07-2014

Tool run by Meesters on ma 14-07-2014 at 19:36:24,58.

Microsoft Windows 7 Ultimate 6.1.7601 Service Pack 1 x64

Running in: Normal Mode Internet Access Detected

Launched: C:\Users\Meesters\Downloads\zoek.exe [scan all users] [script inserted] [Checkboxes used]

==== System Restore Info ======================

14-7-2014 19:38:14 Zoek.exe System Restore Point Created Succesfully.

==== Empty Folders Check ======================

C:\PROGRA~2\iMesh Applications deleted successfully

C:\PROGRA~2\MyFree Codec deleted successfully

C:\PROGRA~2\Nokia deleted successfully

C:\PROGRA~2\Origin Games deleted successfully

C:\PROGRA~2\Samsung deleted successfully

C:\PROGRA~2\COMMON~1\EAInstaller deleted successfully

C:\PROGRA~3\Babylon deleted successfully

C:\PROGRA~3\Canon IJ Network Tool deleted successfully

C:\PROGRA~3\ioloGovernor deleted successfully

C:\Users\Meesters\AppData\Roaming\Atgiy deleted successfully

C:\Users\Meesters\AppData\Local\Samsung deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-2930457502-4171832609-1148051504-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} deleted successfully

HKEY_USERS\S-1-5-21-2930457502-4171832609-1148051504-1000\Software\Microsoft\Internet Explorer\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} deleted successfully

HKEY_USERS\S-1-5-21-2930457502-4171832609-1148051504-1000\Software\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8} deleted successfully

HKEY_USERS\S-1-5-21-2930457502-4171832609-1148051504-1000\Software\Microsoft\Internet Explorer\SearchScopes\{96bd48dd-741b-41ae-ac4a-aff96ba00f7e} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully

HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully

==== Deleting Services ======================

==== Deleting Files \ Folders ======================

C:\ProgramData\Nero deleted

C:\Users\Meesters\AppData\Roaming\Nero deleted

C:\PROGRA~2\COMMON~1\Spigot deleted

C:\Users\Meesters\AppData\Roaming\CrashRpt1402.dll deleted

C:\Users\Meesters\AppData\Roaming\DigitalSites deleted

C:\Users\Meesters\AppData\Roaming\Babylon deleted

C:\Users\Meesters\AppData\Roaming\OpenCandy deleted

C:\PROGRA~3\Package Cache deleted

C:\Users\Meesters\AppData\Local\Bundled software uninstaller deleted

C:\Users\Meesters\Searches deleted

C:\Users\Meesters\AppData\LocalLow\Toolbar4 deleted

C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\Application Updater deleted

C:\windows\SysNative\tasks\Digital Sites deleted

C:\Windows\tasks\Digital Sites.job deleted

C:\user.js deleted

C:\Windows\SysWow64\AI_RecycleBin deleted

C:\Windows\SysWow64\searchplugins deleted

C:\Windows\SysWow64\Extensions deleted

"C:\Users\Meesters\AppData\Roaming\MSDCSC\msdcsc.exe" deleted

"C:\Users\Meesters\AppData\Roaming\MSDCSC" deleted

==== Files Recently Created / Modified ======================

====== C:\Windows ====

====== C:\Users\Meesters\AppData\Local\Temp ====

====== Java Cache =====

====== C:\Windows\SysWOW64 =====

2014-07-10 13:48:10 2C536D41DCE213E1D449F18B3D41EA55 414368 ----a-w- C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-07-09 18:00:16 492FF9C530EC0352B3C904CE9898269D 509440 ----a-w- C:\Windows\SysWOW64\qedit.dll

2014-07-09 18:00:15 C6A991D7DF17EBD8DE4739CD1F283133 646144 ----a-w- C:\Windows\SysWOW64\osk.exe

2014-07-09 18:00:08 A4636CC74620EC3EE05131655E36FBFB 717824 ----a-w- C:\Windows\SysWOW64\jscript.dll

2014-07-09 18:00:08 87061403346685B82D9E1300EBD0D84C 73728 ----a-w- C:\Windows\SysWOW64\mshtmled.dll

2014-07-09 18:00:08 6D85994A1B5B811E19CF761AF42B3453 176640 ----a-w- C:\Windows\SysWOW64\ieui.dll

2014-07-09 18:00:08 61D9AD9E55D7A1E10C0EF701ADE1C486 1129472 ----a-w- C:\Windows\SysWOW64\wininet.dll

2014-07-09 18:00:08 50A9D2A6D74339C927B73F1DEA396380 2382848 ----a-w- C:\Windows\SysWOW64\mshtml.tlb

2014-07-09 18:00:08 47297C4CA64236DA125951A8879D512B 223232 ----a-w- C:\Windows\SysWOW64\dxtrans.dll

2014-07-09 18:00:08 07AA09C276D0A9AAF215C5831FC5A068 1810432 ----a-w- C:\Windows\SysWOW64\jscript9.dll

2014-07-09 18:00:07 BEFE2A3B0FD950E895A623DF4238247E 12353024 ----a-w- C:\Windows\SysWOW64\mshtml.dll

2014-07-09 18:00:06 7C5308EF989ED1D58FF104D6685EC19F 421376 ----a-w- C:\Windows\SysWOW64\vbscript.dll

2014-07-09 18:00:06 3529CC014F68A6807599B0B4E4D79879 353792 ----a-w- C:\Windows\SysWOW64\dxtmsft.dll

2014-07-09 18:00:02 ACFC12807A5EA0771EE5A602CCDE7E64 1106432 ----a-w- C:\Windows\SysWOW64\urlmon.dll

2014-07-09 18:00:02 520F221209823156E53F5022C7106BC9 11776 ----a-w- C:\Windows\SysWOW64\mshta.exe

2014-07-09 18:00:01 CF17BB569F00CBFB31ADD37E6D0CE49F 231936 ----a-w- C:\Windows\SysWOW64\url.dll

2014-07-09 18:00:01 9CE5BD4C26F8DE6FB34AF91F9A5EF30F 142848 ----a-w- C:\Windows\SysWOW64\ieUnatt.exe

2014-07-09 18:00:01 83048D7A0993EF8D45D1CACA205F8C5E 1796096 ----a-w- C:\Windows\SysWOW64\iertutil.dll

2014-07-09 18:00:01 1FC96DDA638BD3BEFD8065515F2AF4C4 1427968 ----a-w- C:\Windows\SysWOW64\inetcpl.cpl

2014-07-09 18:00:01 1194A8254BCB718632C9FD59B536E59D 607744 ----a-w- C:\Windows\SysWOW64\msfeeds.dll

2014-07-09 18:00:01 01DF51C566DBD1FD2EB71FC1F7ED0163 41472 ----a-w- C:\Windows\SysWOW64\msfeedsbs.dll

2014-07-09 18:00:00 2A88BA359F10E9957EE08BC01C1DD764 9711616 ----a-w- C:\Windows\SysWOW64\ieframe.dll

2014-07-09 18:00:00 0510617D8970EFFEAF0925CC578E8A6C 65024 ----a-w- C:\Windows\SysWOW64\jsproxy.dll

2014-07-09 17:59:58 6B65935D3CC6067A21CF2A546FF0E860 10752 ----a-w- C:\Windows\SysWOW64\msfeedssync.exe

2014-07-09 17:59:46 A0E053D8D97ED0F913D56E6AF21DD26F 22016 ----a-w- C:\Windows\SysWOW64\secur32.dll

2014-07-09 17:59:46 230AAF45031E87638CA4053C0399C1E6 96768 ----a-w- C:\Windows\SysWOW64\sspicli.dll

2014-07-06 08:57:18 D16CF34B17899F90A8FCF2A3F77B4A27 15872 ----a-w- C:\Windows\SysWOW64\CNHMCA.dll

2014-07-06 08:57:16 A1EE573A3A9F337CD309BAC48FD0DDE8 81664 ----a-w- C:\Windows\SysWOW64\CNC1763D.TBL

2014-07-06 08:57:16 86802456CB4AD11942447D1112242CA0 320000 ----a-w- C:\Windows\SysWOW64\CNC_B9L.dll

2014-07-06 08:57:16 7E29A9BD894FC34A26126DB13499A99D 103424 ----a-w- C:\Windows\SysWOW64\CNC_B9U.dll

====== C:\Windows\SysWOW64\drivers =====

====== C:\Windows\Sysnative =====

2014-07-09 18:00:16 D6AFBAA93169E6772565A1BC896D666B 624128 ----a-w- C:\Windows\Sysnative\qedit.dll

2014-07-09 18:00:15 F1726E14C8F7B40CD828345890AAF764 3157504 ----a-w- C:\Windows\Sysnative\win32k.sys

2014-07-09 18:00:15 A064A1D9CBD7F6959AAEAEAFF96DB2E9 692736 ----a-w- C:\Windows\Sysnative\osk.exe

2014-07-09 18:00:08 8E6746AF9EA920E39C9D1C663DB567A6 2339328 ----a-w- C:\Windows\Sysnative\jscript9.dll

2014-07-09 18:00:08 7B3C76AA54331CBF7FFCDBEC1D83C097 282112 ----a-w- C:\Windows\Sysnative\dxtrans.dll

2014-07-09 18:00:08 5B3B793F3C6163940E8BA8DBA56AEBF1 2382848 ----a-w- C:\Windows\Sysnative\mshtml.tlb

2014-07-09 18:00:07 5550345E6C4130091C1E4C5F3EF5CF3A 1392128 ----a-w- C:\Windows\Sysnative\wininet.dll

2014-07-09 18:00:07 09674197E0428B8ABE3E3B56500537EC 85504 ----a-w- C:\Windows\Sysnative\jsproxy.dll

2014-07-09 18:00:04 E42B1DB1860F846AF063970207EF1976 599040 ----a-w- C:\Windows\Sysnative\vbscript.dll

2014-07-09 18:00:04 CFD0B099FD637C3AA47066D9084A3E2B 96768 ----a-w- C:\Windows\Sysnative\mshtmled.dll

2014-07-09 18:00:04 62EF2C9D76C636BC68BE059F147A5A1A 453120 ----a-w- C:\Windows\Sysnative\dxtmsft.dll

2014-07-09 18:00:04 38E9DA3044665E03577A8849F22352D6 248320 ----a-w- C:\Windows\Sysnative\ieui.dll

2014-07-09 18:00:03 FDC9B927AD2FF9291BE3516A4505297C 17854464 ----a-w- C:\Windows\Sysnative\mshtml.dll

2014-07-09 18:00:03 9AED9B0B7B3A76A97F91769A5AD5CCFD 816640 ----a-w- C:\Windows\Sysnative\jscript.dll

2014-07-09 18:00:02 E740D21714AF588B2C8175122D392E68 12800 ----a-w- C:\Windows\Sysnative\mshta.exe

2014-07-09 18:00:02 6F53954FD61CFA5515BF3F5530879163 173056 ----a-w- C:\Windows\Sysnative\ieUnatt.exe

2014-07-09 18:00:02 5D17B006EDAA6FF525796C149D637E51 55296 ----a-w- C:\Windows\Sysnative\msfeedsbs.dll

2014-07-09 18:00:01 C5DAF0B1681C46957844BA8481E1712D 1348608 ----a-w- C:\Windows\Sysnative\urlmon.dll

2014-07-09 18:00:01 A485866D8C54D6DD28B5134360361296 2148352 ----a-w- C:\Windows\Sysnative\iertutil.dll

2014-07-09 18:00:01 9BF4F4E5D4FD07FD920E225E6623AAFF 1494016 ----a-w- C:\Windows\Sysnative\inetcpl.cpl

2014-07-09 18:00:01 8DBEBABC764D0A370E01C617EA283C9D 237056 ----a-w- C:\Windows\Sysnative\url.dll

2014-07-09 18:00:01 7103F5DF856606DF6F91D696B7BF9E1C 729088 ----a-w- C:\Windows\Sysnative\msfeeds.dll

2014-07-09 18:00:00 BD40F44B809BFEEE353D0F1F2CEF47F4 10890752 ----a-w- C:\Windows\Sysnative\ieframe.dll

2014-07-09 17:59:59 FF322703CC4F1DA5F18898A7D4BD7FF6 11264 ----a-w- C:\Windows\Sysnative\msfeedssync.exe

2014-07-09 17:59:46 D4CCE15190269486A5E6D4D4E597F798 1460736 ----a-w- C:\Windows\Sysnative\lsasrv.dll

2014-07-06 08:53:36 FA132E1DAB518B28F4B20DB154A647FC 389120 ----a-w- C:\Windows\Sysnative\CNMLMB9.DLL

2014-07-06 08:53:07 BE3660521C98A7D12FCC925582B6EC89 39424 ----a-w- C:\Windows\Sysnative\CNMN6UI.DLL

2014-07-06 08:53:07 6FE535FAAB7D0EC3B815818D29F07814 359936 ----a-w- C:\Windows\Sysnative\CNMN6PPM.DLL

====== C:\Windows\Sysnative\drivers =====

2014-07-09 18:00:12 FA886682CFC5D36718D3E436AACF10B9 497152 ----a-w- C:\Windows\Sysnative\drivers\afd.sys

====== C:\Windows\Tasks ======

====== C:\Windows\Temp ======

======= C:\Program Files =====

2014-07-13 15:05:46 -------- d-----w- C:\Program Files\trend micro

2014-07-06 08:56:12 -------- d-----w- C:\Program Files\Common Files\CANON

2014-07-06 08:55:38 -------- d-----w- C:\Program Files\Canon

======= C:\PROGRA~2 =====

2014-07-10 13:30:30 -------- d-----w- C:\PROGRA~2\COMMON~1\Nero

======= C: =====

====== C:\Users\Meesters\AppData\Roaming ======

2014-07-06 16:05:34 -------- d-----w- C:\Users\Meesters\AppData\Roaming\Canon

====== C:\Users\Meesters ======

2014-07-13 14:14:08 8045ABB21A3BDD66A48E1ED5C0F0EF6A 1222144 ----a-w- C:\Users\Meesters\Desktop\RSITx64.exe

2014-07-06 16:05:36 -------- d--h--w- C:\ProgramData\CanonIJScan

2014-07-06 09:00:35 -------- d--h--w- C:\ProgramData\CanonIJEGV

2014-07-06 08:58:00 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG4200 series

2014-07-06 08:56:15 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gebruikersregistratie voor Canon MG4200 series

2014-07-06 08:56:03 -------- d-----w- C:\ProgramData\CanonIJWSpt

2014-07-06 08:55:45 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities

2014-07-06 08:55:24 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG4200 series Manual

====== C: exe-files ==

2014-07-13 15:05:46 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\Meesters.exe

2014-07-13 14:14:08 8045ABB21A3BDD66A48E1ED5C0F0EF6A 1222144 ----a-w- C:\Users\Meesters\Desktop\RSITx64.exe

2014-07-13 09:03:06 F63E7FD48CAA8563D994CBB4A0314463 621672 ----a-w- C:\Program Files (x86)\Canon\Quick Menu\CNQMULNC.EXE

2014-07-13 09:03:06 F4B76972229BC45D039C44B87D2519BF 592984 ----a-w- C:\Program Files (x86)\Canon\Quick Menu\CNQMLNCR.EXE

2014-07-13 09:03:06 E015476B5F5620B6A88F7A0E572FA9DF 991848 ----a-w- C:\Program Files (x86)\Canon\Quick Menu\CNQMSWCS.EXE

2014-07-13 09:03:06 78BC759CD8B8A3B1119E520583D42E5A 769128 ----a-w- C:\Program Files (x86)\Canon\Quick Menu\CNQMACNF.EXE

2014-07-13 09:03:06 6AD64E318ED6B5F04AFAC2849DE05EA0 1284680 ----a-w- C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE

2014-07-13 09:03:06 3D4058C53ECB180907410F39CB39C134 1089112 ----a-w- C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE

2014-07-13 09:03:06 215A5E3991E3E82C135B66B39E9B1B90 382040 ----a-w- C:\Program Files (x86)\Canon\Quick Menu\CNSEMAIN.EXE

2014-07-13 09:03:06 13629FA912300B606BF886514B01248D 779384 ----a-w- C:\Program Files (x86)\Canon\Quick Menu\CNQMINST.EXE

2014-07-09 18:00:15 C6A991D7DF17EBD8DE4739CD1F283133 646144 ----a-w- C:\Windows\SysWOW64\osk.exe

2014-07-09 18:00:15 A064A1D9CBD7F6959AAEAEAFF96DB2E9 692736 ----a-w- C:\Windows\System32\osk.exe

2014-07-09 18:00:15 89D2706FCD45E33CECFBD46BCBAD7E16 10240 ----a-w- C:\Program Files (x86)\Common Files\microsoft shared\ink\TabTip32.exe

2014-07-09 18:00:15 20235ED4653CFDDCDEF721F5126A1C47 224768 ----a-w- C:\Program Files\Common Files\Microsoft Shared\ink\TabTip.exe

2014-07-09 18:00:02 E740D21714AF588B2C8175122D392E68 12800 ----a-w- C:\Windows\System32\mshta.exe

2014-07-09 18:00:02 6F53954FD61CFA5515BF3F5530879163 173056 ----a-w- C:\Windows\System32\ieUnatt.exe

2014-07-09 18:00:02 520F221209823156E53F5022C7106BC9 11776 ----a-w- C:\Windows\SysWOW64\mshta.exe

2014-07-09 18:00:01 9CE5BD4C26F8DE6FB34AF91F9A5EF30F 142848 ----a-w- C:\Windows\SysWOW64\ieUnatt.exe

2014-07-09 18:00:01 0F83DDFD1AD9716304BD998CAABB5933 763632 ----a-w- C:\Program Files\Internet Explorer\iexplore.exe

2014-07-09 18:00:01 08ED70F000508724BAF881AA07C21BE1 758000 ----a-w- C:\Program Files (x86)\Internet Explorer\iexplore.exe

2014-07-09 17:59:59 FF322703CC4F1DA5F18898A7D4BD7FF6 11264 ----a-w- C:\Windows\System32\msfeedssync.exe

2014-07-09 17:59:58 F1D33F2C0AEDE67F85D9578BA49010DA 223232 ----a-w- C:\Program Files (x86)\Internet Explorer\ielowutil.exe

2014-07-09 17:59:58 AA9B90593C22088BF7B5F729031A1C26 469504 ----a-w- C:\Program Files (x86)\Internet Explorer\ieinstal.exe

2014-07-09 17:59:58 8319DBE0C358D9330DB92AD41CD2C469 22528 ----a-w- C:\Program Files (x86)\Internet Explorer\ExtExport.exe

2014-07-09 17:59:58 82E7252FFD91D7ED5E07B17DAEF08F9A 482816 ----a-w- C:\Program Files\Internet Explorer\ieinstal.exe

2014-07-09 17:59:58 6B65935D3CC6067A21CF2A546FF0E860 10752 ----a-w- C:\Windows\SysWOW64\msfeedssync.exe

2014-07-09 17:59:58 211D047E6CBE134ABF6B02319C9FF063 223744 ----a-w- C:\Program Files\Internet Explorer\ielowutil.exe

=== C: other files ==

2014-07-10 17:05:46 289A8C82003A490084020B1680EC943C 1324 ----a-w- C:\Windows\SysWOW64\config\SM Registry Backup\07-10-2014 19.05.41\restore.bat

2014-07-09 18:00:15 F1726E14C8F7B40CD828345890AAF764 3157504 ----a-w- C:\Windows\System32\win32k.sys

2014-07-09 18:00:12 FA886682CFC5D36718D3E436AACF10B9 497152 ----a-w- C:\Windows\System32\drivers\afd.sys

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-21-2930457502-4171832609-1148051504-1000\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun"

"DAEMON Tools Lite"="C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe -autorun"

"MicroUpdate"="C:\Users\Meesters\AppData\Roaming\MSDCSC\msdcsc.exe"

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"StartCCC"="C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe MSRun"

"IJNetworkScannerSelectorEX"="C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe /FORCE"

"CanonQuickMenu"="C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE /logon"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun"

"DAEMON Tools Lite"="C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe -autorun"

"MicroUpdate"="C:\Users\Meesters\AppData\Roaming\MSDCSC\msdcsc.exe"

==== Startup Registry Enabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"EvtMgr6"="C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming"

==== Task Scheduler Jobs ======================

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2930457502-4171832609-1148051504-1000Core.job --a------ C:\Users\Meesters\AppData\Local\Google\Update\GoogleUpdate.exe []

C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2930457502-4171832609-1148051504-1000UA.job --a------ C:\Users\Meesters\AppData\Local\Google\Update\GoogleUpdate.exe []

==== Other Scheduled Tasks ======================

"C:\Windows\SysNative\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"]

"C:\Windows\SysNative\tasks\Google Updater and Installer" [C:\Users\Meesters\AppData\Local\Google\Update\GoogleUpdate.exe]

"C:\Windows\SysNative\tasks\GoogleUpdateTaskUserS-1-5-21-2930457502-4171832609-1148051504-1000Core" [C:\Users\Meesters\AppData\Local\Google\Update\GoogleUpdate.exe]

"C:\Windows\SysNative\tasks\GoogleUpdateTaskUserS-1-5-21-2930457502-4171832609-1148051504-1000UA" [C:\Users\Meesters\AppData\Local\Google\Update\GoogleUpdate.exe]

"C:\Windows\SysNative\tasks\iolo Process Governor" [C:\Program Files (x86)\iolo\System Mechanic Professional\iologovernor64.exe]

"C:\Windows\SysNative\tasks\SidebarExecute" [C:\Program Files\Windows Sidebar\sidebar.exe]

==== Firefox Extensions ======================

ProfilePath: C:\Users\Meesters\AppData\Roaming\TomTom\HOME\Profiles\a72hohrr.default

- Map status indicator - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com

- TomTom HOME default theme - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\baseTheme@tomtom.com

==== Firefox Plugins ======================

==== Chrome Look ======================

Google Wallet - Meesters\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda

==== Set IE to Default ======================

Old Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="http://start.mysearchdial.com/?f=1&a=dsites0301&cd=2XzuyEtN2Y1L1QzuzytD0EyC0B0A0C0DyB0C0ByDtAyEyBtCtN0D0Tzu0SyBzytCtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=932465461&ir="

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]

"Start Page"="http://start.mysearchdial.com/?f=1&a=dsites0301&cd=2XzuyEtN2Y1L1QzuzytD0EyC0B0A0C0DyB0C0ByDtAyEyBtCtN0D0Tzu0SyBzytCtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=932465461&ir="

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]

"Start Page"="http://start.mysearchdial.com/?f=1&a=dsites0301&cd=2XzuyEtN2Y1L1QzuzytD0EyC0B0A0C0DyB0C0ByDtAyEyBtCtN0D0Tzu0SyBzytCtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=932465461&ir="

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]

"Tabs"="http://start.mysearchdial.com/?f=2&a=dsites0301&cd=2XzuyEtN2Y1L1QzuzytD0EyC0B0A0C0DyB0C0ByDtAyEyBtCtN0D0Tzu0SyBzytCtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=932465461&ir="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs]

"Tabs"="http://start.mysearchdial.com/?f=2&a=dsites0301&cd=2XzuyEtN2Y1L1QzuzytD0EyC0B0A0C0DyB0C0ByDtAyEyBtCtN0D0Tzu0SyBzytCtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=932465461&ir="

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]

"DefaultScope"="{96bd48dd-741b-41ae-ac4a-aff96ba00f7e}"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{96bd48dd-741b-41ae-ac4a-aff96ba00f7e}] not found

New Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="http://www.google.com"

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]

"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]

"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]

"Tabs"="res://ieframe.dll/tabswelcome.htm"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs]

"Tabs"="res://ieframe.dll/tabswelcome.htm"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]

"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"

{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\Meesters\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\Meesters\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\Meesters\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully

C:\Users\Default User\AppData\Local\Temp emptied successfully

C:\Users\Meesters\AppData\Local\Temp will be emptied at reboot

C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully

C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully

C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied

C:\Users\Meesters\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\Meesters\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found

==== EOF on ma 14-07-2014 at 19:53:08,53 ======================

aangepast door Meesters77
Link naar reactie
Delen op andere sites

Dubbelklik op Zoek.exe om de tool te starten.

  • Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  • Kopieer nu onderstaande code en plak die in het grote invulvenster:
  • Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.

 
 [HKEY_USERS\S-1-5-21-2930457502-4171832609-1148051504-1000\Software\Microsoft\Windows\CurrentVersion\Run];r64
 "MicroUpdate"=-;r64
 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run];r64
 "MicroUpdate"=-;r64

  • De optie "Scan All Users" staat standaard aangevinkt.
  • Klik nu op de knop "Run script".
  • Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
  • Mocht er geen logje verschijnen, start zoek.exe dan opnieuw en klik op de knop zoek-results.log, de log verschijnt dan alsnog.
  • Post het geopende logje in het volgende bericht als bijlage.

Zoek.exe logbestand plaatsen

  • Voeg het logbestand met de naam "Zoek-results.log" als bijlage toe aan het volgende bericht. (Dit logbestand kunt u tevens terug vinden op de systeemschijf als C:\\Zoek-results.log.)
  • Hoe u een bijlage kunt toevoegen aan het bericht leest u hier.

Link naar reactie
Delen op andere sites

Option Explicit

Dim fs, objFSO, objLogFile, oFolder

Set fs = CreateObject("scripting.filesystemobject")

oFolder = Wscript.Arguments.Item(0)

Const ForAppending = 2

Set objFSO = CreateObject("Scripting.FileSystemObject")

Set objLogFile = objFSO.OpenTextFile("test.txt", ForAppending, True)

objLogFile.Write(oFolder & " (F=")

objLogFile.Write CountFiles(oFolder)

objLogFile.Write(" D=")

objLogFile.Write CountFolders(oFolder)

objLogFile.Write(" ")

objLogFile.Write FolderSize(oFolder)

objLogFile.Write(" bytes)" & vbCrLf )

objLogFile.Close

Function CountFolders (ByVal StrFolder)

Dim ParentFld

Dim SubFld

Dim IntCount

Set ParentFld = fs.GetFolder (StrFolder)

IntCount = ParentFld.SubFolders.Count

For Each SubFld In ParentFld.SubFolders

IntCount = IntCount + CountFolders(SubFld.Path)

Next

CountFolders = IntCount

End Function

Function FolderSize (ByVal StrFolder)

Dim ParentFld

Dim IntCount

Set ParentFld = fs.GetFolder (StrFolder)

IntCount = ParentFld.size

FolderSize = IntCount

End Function

Function CountFiles (ByVal StrFolder)

Dim ParentFld

Dim SubFld

Dim IntCount

Set ParentFld = fs.GetFolder (StrFolder)

IntCount = ParentFld.Files.Count

For Each SubFld In ParentFld.SubFolders

IntCount = IntCount + CountFiles(SubFld.Path)

Next

CountFiles = IntCount

End Function

Link naar reactie
Delen op andere sites

Gast
Dit topic is nu gesloten voor nieuwe reacties.
×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.