Melding op bureaublad

cannot open file C:\Program Files (x86)\Asus\EPU-4 Engine\Resource\gear.prg.

Deze melding komt telkens terug na opstarten PC. Hoe krijg ik de melding definitief verwijderd.

da's dus een stukje software dat mee opstart. of je het nodig hebt is de vraag.

de lijst met opstartende programma's door in het zoekvak in te toetsen: msconfig , en dan enter

je komt nu in het scherm systeemconfiguratie. op tabblad opstarten kan je in beginsel alle mee-opstarters uitvinken, behalve de antivirus, evt software voor draadloos, en software voor bijzondere toetsen (hotkeys).

mocht je na de herstart echt iets missen, dan kan je dat op dezelfde plek weer aaanvinken om mee op te laten starten.

Download RSIT van de onderstaande locaties en sla deze op het bureaublad op.

Hier staat een beschrijving hoe je kan kijken of je een 32- of 64-bitversie van Windows heeft.

• RSIT 32 bit (RSIT.exe)
  
• RSIT 64 bit (RSITx64.exe)
  

Dubbelklik op RSIT.exe om de tool te starten.

• Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  
• Vervolgens wordt de "Disclaimer of warranty" getoond, klik vervolgens op "Continue"
  
• Wanneer de tool gereed is wordt er een kladblok bestand genaamd "Log" geopend.
  
• Plaats de inhoud hiervan in het volgende bericht.
  

Logfile of random's system information tool 1.09 (written by random/random)

Run by Jan Cox at 2013-12-23 22:04:33

Microsoft Windows 7 Home Premium Service Pack 1

System drive C: has 106 GB (71%) free of 150 GB

Total RAM: 4061 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 22:04:39, on 23-12-2013

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v9.00 (9.00.8112.16526)

Boot mode: Normal

Running processes:

C:\Program Files (x86)\Microsoft Encarta\Encarta Winkler Prins Naslagbibliotheek 2007 DVD\EDICT.EXE

C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe

C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

C:\Users\Jan Cox\AppData\Roaming\Dropbox\bin\Dropbox.exe

C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe

C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

C:\Program Files (x86)\Freecorder\FLVSrvc.exe

C:\Program Files (x86)\Ask.com\Updater\Updater.exe

C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe

C:\Program Files (x86)\Citrix\ICA Client\concentr.exe

C:\Program Files (x86)\Citrix\ICA Client\redirector.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

C:\Program Files (x86)\Citrix\Receiver\Receiver.exe

C:\Program Files (x86)\Citrix\SelfServicePlugin\SelfServicePlugin.exe

C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe

C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE

C:\Program Files (x86)\Internet Explorer\iexplore.exe

C:\Program Files (x86)\Internet Explorer\iexplore.exe

C:\Program Files\trend micro\Jan Cox.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll

R3 - URLSearchHook: SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll

R3 - URLSearchHook: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files (x86)\Freecorder\prxtbFree.dll

F2 - REG:system.ini: UserInit=userinit.exe,

O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll

O2 - BHO: Complitly - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Users\Jan Cox\AppData\Roaming\Complitly\Complitly.dll

O2 - BHO: Freecorder - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files (x86)\Freecorder\prxtbFree.dll

O2 - BHO: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll

O2 - BHO: Aanmeldhulp voor Microsoft-account - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll

O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

O3 - Toolbar: Freecorder Toolbar - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - C:\Program Files (x86)\Freecorder\prxtbFree.dll

O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll

O3 - Toolbar: Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

O4 - HKLM\..\Run: [bCU] "C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe"

O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"

O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [Freecorder FLV Service] "C:\Program Files (x86)\Freecorder\FLVSrvc.exe" /run

O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"

O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe

O4 - HKLM\..\Run: [ConnectionCenter] "C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup

O4 - HKLM\..\Run: [Redirector] "C:\Program Files (x86)\Citrix\ICA Client\redirector.exe" /startup

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

O4 - HKCU\..\Run: [E07NXLRD_22929463] "C:\Program Files (x86)\Microsoft Encarta\Encarta Winkler Prins Naslagbibliotheek 2007 DVD\EDICT.EXE" -m

O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Jan Cox\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver

O4 - HKCU\..\Run: [spotify Web Helper] "C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe"

O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

O4 - HKCU\..\Run: [HP Photosmart 5520 series (NET)] "C:\Program Files\HP\HP Photosmart 5520 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN37R160F80602:NW" -scfn "HP Photosmart 5520 series (NET)" -AutoStart 1

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

O4 - Startup: Dropbox.lnk = Jan Cox\AppData\Roaming\Dropbox\bin\Dropbox.exe

O4 - Startup: Inktwaarschuwingen controleren - HP Photosmart 5520 series (netwerk).lnk = ?

O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

O4 - Global Startup: vpngui.exe.lnk = ?

O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MIF5BA~1\Office12\EXCEL.EXE/3000

O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print 2.0\smartprintsetup.exe

O9 - Extra 'Tools' menuitem: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print 2.0\smartprintsetup.exe

O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MIF5BA~1\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MIF5BA~1\Office12\ONBttnIE.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MIF5BA~1\Office12\REFIEBAR.DLL

O9 - Extra button: Encarta Winkler Prins Zoekbalk - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files (x86)\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL

O9 - Extra button: Toon of verberg HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://oas.support.microsoft.com/ActiveX/MSDcode.cab

O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.6.0.cab

O16 - DPF: {9E858349-A287-4D37-8C27-034330E160F9} (MijnAlbum Album Upload Software Control Control) - http://www.mijnalbum.nl/v3/skinsrc/core/system/aus8.0.14/ImageUploader8.cab

O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - MSN Games - Free Online Games

O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - MSN Games - Free Online Games

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll

O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

O18 - Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

O18 - Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

O18 - Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

O18 - Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

O18 - Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

O18 - Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

O18 - Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

O18 - Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

O18 - Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

O18 - Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

O18 - Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

O18 - Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

O18 - Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

O18 - Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

O18 - Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

O18 - Filter hijack: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: Acronis Nonstop Backup service (afcdpsrv) - Acronis - C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: Browser Configuration Utility Service (BCUService) - DeviceVM, Inc. - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe

O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--

End of file - 17047 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe

%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16

wininit.exe

%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16

C:\Windows\system32\services.exe

C:\Windows\system32\lsass.exe

C:\Windows\system32\lsm.exe

winlogon.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k RPCSS

"C:\Program Files\Microsoft Security Client\MsMpEng.exe"

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k GPSvcGroup

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

"C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe"

"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"

"C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe"

"C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe"

"C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe"

C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt

"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe"

"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe"

C:\Windows\System32\svchost.exe -k HPZ12

C:\Windows\System32\svchost.exe -k HPZ12

C:\Windows\system32\svchost.exe -k imgsvc

"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"

WLIDSvcM.exe 2120

C:\Windows\system32\svchost.exe -k HPService

"C:\Program Files\Microsoft Security Client\NisSrv.exe"

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-ea13ae3a-2aef-412e-9293-451e87da10e0 -SystemEventPortName:HostProcess-fa0cdb43-b041-4ffe-a32b-30e79f90259d -IoCancelEventPortName:HostProcess-0baa4cea-c3ad-4d40-b7fb-9cce8990db4f -NonStateChangingEventPortName:HostProcess-55613737-29ba-45fc-82ca-44ab7bc3f1b5 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:193e0830-0441-46fd-a837-2ab44ac117ba -DeviceGroupId:WpdFsGroup

"C:\Windows\system32\Dwm.exe"

C:\Windows\Explorer.EXE

"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s

"C:\Windows\System32\igfxtray.exe"

"C:\Windows\System32\hkcmd.exe"

"C:\Windows\System32\igfxpers.exe"

"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey

"C:\Program Files (x86)\Microsoft Encarta\Encarta Winkler Prins Naslagbibliotheek 2007 DVD\EDICT.EXE" -m

"C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background

"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray

"C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe"

"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun

"C:\Program Files\HP\HP Photosmart 5520 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN37R160F80602:NW" -scfn "HP Photosmart 5520 series (NET)" -AutoStart 1

"C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe"

"C:\Users\Jan Cox\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup

"C:\Windows\system32\RunDll32.exe" "C:\Program Files\HP\HP Photosmart 5520 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN37R160F80602;CONNECTION=NW;MONITOR=1;

"C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe"

"C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"

"C:\Program Files (x86)\Freecorder\FLVSrvc.exe" /run

"C:\Program Files (x86)\Ask.com\Updater\Updater.exe"

"C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe"

"C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup

"C:\Program Files (x86)\Citrix\ICA Client\redirector.exe" /startup

"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

"C:\Program Files\HP\HP Photosmart 5520 series\Bin\HPNetworkCommunicatorCom.exe" -Embedding

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

"taskhost.exe"

taskeng.exe {0FAEB0A2-4B0D-475E-92B7-3710AD1C1E14}

"C:\Program Files (x86)\Citrix\Receiver\Receiver.exe" -autoupdate -startplugins

C:\Windows\system32\SearchIndexer.exe /Embedding

"C:\Program Files\Windows Media Player\wmpnetwk.exe"

C:\Windows\system32\wbem\unsecapp.exe -Embedding

C:\Windows\sysWOW64\wbem\wmiprvse.exe -Embedding

C:\Windows\System32\svchost.exe -k LocalServicePeerNet

"C:\Program Files\HP\HP Photosmart 5520 series\Bin\HPNetworkCommunicator.exe"

"C:\Program Files (x86)\Citrix\SelfServicePlugin\SelfServicePlugin.exe"

"C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe" -Embedding

C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}

"C:\Windows\system32\wuauclt.exe"

"C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.exe"

C:\Windows\system32\svchost.exe -k defragsvc

"C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE"

"C:\Program Files (x86)\Internet Explorer\iexplore.exe" Windows 7 Melding op bureaublad

"C:\Program Files (x86)\Internet Explorer\iexplore.exe" SCODEF:4280 CREDAT:145409

"C:\Windows\system32\SearchFilterHost.exe" 0 512 516 524 65536 520

"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe32_ Global\UsGthrCtrlFltPipeMssGthrPipe32 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"

"E:\Jan Cox\Downloads\RSITx64.exe"

C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job

C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-956185951-1265831734-1300764519-1000Core.job

C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-956185951-1265831734-1300764519-1000UA.job

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

C:\Windows\tasks\ParetoLogic Registration3.job

C:\Windows\tasks\ParetoLogic Update Version3 Startup Task.job

C:\Windows\tasks\ParetoLogic Update Version3.job

C:\Windows\tasks\RegCure Pro.job

C:\Windows\tasks\SyncBack BU_PC_naar_ExtHDD.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}]

Complitly - C:\Users\Jan Cox\AppData\Roaming\Complitly\64\Complitly64.dll [2011-10-16 167416]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]

Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2013-12-14 256080]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]

HP Print Enhancer - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-10-22 328248]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}]

Complitly - C:\Users\Jan Cox\AppData\Roaming\Complitly\Complitly.dll [2011-10-16 139768]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1392b8d2-5c05-419f-a8f6-b9f15a596612}]

Freecorder Toolbar - C:\Program Files (x86)\Freecorder\prxtbFree.dll [2011-05-09 176936]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1dad3af3-ef2f-4f64-ac4b-11789189fcb6}]

Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll [2013-07-23 1451680]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]

Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]

Java Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-10-08 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Aanmeldhulp voor Microsoft-account - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]

Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2013-12-14 194128]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]

Ask Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2012-12-10 1520840]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

Java Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-10-08 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]

HP Smart BHO Class - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-10-22 517688]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2013-12-14 256080]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]

{1392b8d2-5c05-419f-a8f6-b9f15a596612} - Freecorder Toolbar - C:\Program Files (x86)\Freecorder\prxtbFree.dll [2011-05-09 176936]

{D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll [2012-12-10 1520840]

{eec0f710-38b5-4aba-99bf-ec87564a4e13} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BingExt.dll [2013-07-23 1451680]

{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2013-12-14 194128]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-07-06 11057768]

"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-02-11 162328]

"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-02-11 386584]

"Persistence"=C:\Windows\system32\igfxpers.exe [2011-02-11 417304]

"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2013-10-23 1266912]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"E07NXLRD_22929463"=C:\Program Files (x86)\Microsoft Encarta\Encarta Winkler Prins Naslagbibliotheek 2007 DVD\EDICT.EXE [2006-06-14 351000]

"msnmsgr"=C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [2012-09-12 4272640]

"Facebook Update"=C:\Users\Jan Cox\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-07-11 138096]

"Spotify Web Helper"=C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe [2013-04-26 1104280]

"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]

"HP Photosmart 5520 series (NET)"=C:\Program Files\HP\HP Photosmart 5520 series\Bin\ScanToPCActivationApp.exe [2012-10-17 2573416]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service]

C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [2009-09-12 357384]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]

C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]

C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe]

C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [2009-09-12 5048488]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]

"BCU"=C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe [2010-03-05 411864]

"NUSB3MON"=C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2010-04-27 113288]

"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]

"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]

"Freecorder FLV Service"=C:\Program Files (x86)\Freecorder\FLVSrvc.exe [2011-03-24 167936]

"ApnUpdater"=C:\Program Files (x86)\Ask.com\Updater\Updater.exe [2012-12-10 1573576]

"HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2011-10-28 49208]

""= []

"ConnectionCenter"=C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [2013-09-16 395656]

"Redirector"=C:\Program Files (x86)\Citrix\ICA Client\redirector.exe [2013-09-16 153992]

"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup

HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

vpngui.exe.lnk - C:\Windows\Installer\{467D5E81-8349-4892-9E81-C3674ED8E451}\Icon09DB8A851.exe

C:\Users\Jan Cox\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

Dropbox.lnk - C:\Users\Jan Cox\AppData\Roaming\Dropbox\bin\Dropbox.exe

Inktwaarschuwingen controleren - HP Photosmart 5520 series (netwerk).lnk - C:\Windows\system32\RunDll32.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]

C:\Windows\system32\igfxdev.dll [2011-02-11 272896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]

"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]

"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"ConsentPromptBehaviorAdmin"=0

"ConsentPromptBehaviorUser"=3

"EnableLUA"=0

"EnableUIADesktopToggle"=0

"PromptOnSecureDesktop"=0

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoActiveDesktop"=1

"NoActiveDesktopChanges"=1

"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]

"vidc.mrle"=msrle32.dll

"vidc.msvc"=msvidc32.dll

"msacm.imaadpcm"=imaadp32.acm

"msacm.msg711"=msg711.acm

"msacm.msgsm610"=msgsm32.acm

"msacm.msadpcm"=msadp32.acm

"midimapper"=midimap.dll

"wavemapper"=msacm32.drv

"vidc.uyvy"=msyuv.dll

"vidc.yuy2"=msyuv.dll

"vidc.yvyu"=msyuv.dll

"vidc.iyuv"=iyuv_32.dll

"vidc.i420"=iyuv_32.dll

"vidc.yvu9"=tsbyuv.dll

"msacm.l3acm"=C:\Windows\System32\l3codeca.acm

"wave1"=wdmaud.drv

"midi1"=wdmaud.drv

"mixer1"=wdmaud.drv

"aux1"=wdmaud.drv

"wave"=wdmaud.drv

"midi"=wdmaud.drv

"mixer"=wdmaud.drv

"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-12-23 22:04:33 ----D---- C:\rsit

2013-12-23 22:04:33 ----D---- C:\Program Files\trend micro

2013-12-18 22:02:27 ----D---- C:\Windows\system32\catroot2

2013-12-18 22:00:02 ----D---- C:\Windows\SoftwareDistribution

2013-12-18 21:54:22 ----D---- C:\Windows\SoftwareDistribution.old

2013-12-18 21:22:21 ----D---- C:\Users\Jan Cox\AppData\Roaming\ParetoLogic

2013-12-18 21:22:21 ----D---- C:\Users\Jan Cox\AppData\Roaming\DriverCure

2013-12-18 21:22:04 ----D---- C:\ProgramData\ParetoLogic

2013-12-18 21:22:04 ----D---- C:\Program Files (x86)\ParetoLogic

2013-12-12 11:32:40 ----D---- C:\Windows\Migration

2013-12-12 07:51:30 ----A---- C:\Windows\SYSWOW64\mshtmled.dll

2013-12-12 07:51:30 ----A---- C:\Windows\system32\mshtmled.dll

2013-12-12 07:51:29 ----A---- C:\Windows\SYSWOW64\vbscript.dll

2013-12-12 07:51:29 ----A---- C:\Windows\SYSWOW64\ieui.dll

2013-12-12 07:51:28 ----A---- C:\Windows\SYSWOW64\wininet.dll

2013-12-12 07:51:28 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe

2013-12-12 07:51:28 ----A---- C:\Windows\system32\wininet.dll

2013-12-12 07:51:28 ----A---- C:\Windows\system32\ieUnatt.exe

2013-12-12 07:51:28 ----A---- C:\Windows\system32\ieui.dll

2013-12-12 07:51:27 ----A---- C:\Windows\SYSWOW64\url.dll

2013-12-12 07:51:27 ----A---- C:\Windows\SYSWOW64\msfeeds.dll

2013-12-12 07:51:27 ----A---- C:\Windows\system32\url.dll

2013-12-12 07:51:27 ----A---- C:\Windows\system32\msfeeds.dll

2013-12-12 07:51:27 ----A---- C:\Windows\system32\jsproxy.dll

2013-12-12 07:51:26 ----A---- C:\Windows\SYSWOW64\urlmon.dll

2013-12-12 07:51:26 ----A---- C:\Windows\SYSWOW64\iertutil.dll

2013-12-12 07:51:26 ----A---- C:\Windows\system32\urlmon.dll

2013-12-12 07:51:26 ----A---- C:\Windows\system32\iertutil.dll

2013-12-12 07:51:25 ----A---- C:\Windows\SYSWOW64\jsproxy.dll

2013-12-12 07:51:25 ----A---- C:\Windows\SYSWOW64\jscript9.dll

2013-12-12 07:51:25 ----A---- C:\Windows\SYSWOW64\jscript.dll

2013-12-12 07:51:25 ----A---- C:\Windows\system32\vbscript.dll

2013-12-12 07:51:25 ----A---- C:\Windows\system32\jscript9.dll

2013-12-12 07:51:25 ----A---- C:\Windows\system32\jscript.dll

2013-12-12 07:51:24 ----A---- C:\Windows\SYSWOW64\mshtml.dll

2013-12-12 07:51:23 ----A---- C:\Windows\system32\mshtml.dll

2013-12-12 07:51:22 ----A---- C:\Windows\SYSWOW64\ieframe.dll

2013-12-12 07:51:22 ----A---- C:\Windows\system32\ieframe.dll

2013-12-12 05:16:19 ----A---- C:\Windows\system32\win32k.sys

2013-12-12 05:16:18 ----A---- C:\Windows\SYSWOW64\imagehlp.dll

2013-12-12 05:16:18 ----A---- C:\Windows\system32\imagehlp.dll

2013-12-12 05:16:15 ----A---- C:\Windows\SYSWOW64\tzres.dll

2013-12-12 05:16:15 ----A---- C:\Windows\system32\tzres.dll

2013-12-12 05:16:13 ----A---- C:\Windows\system32\drivers\portcls.sys

2013-12-12 05:16:13 ----A---- C:\Windows\system32\drivers\drmk.sys

2013-12-12 05:16:12 ----A---- C:\Windows\SYSWOW64\wscript.exe

2013-12-12 05:16:12 ----A---- C:\Windows\SYSWOW64\scrrun.dll

2013-12-12 05:16:12 ----A---- C:\Windows\SYSWOW64\cscript.exe

2013-12-12 05:16:12 ----A---- C:\Windows\system32\wscript.exe

2013-12-12 05:16:12 ----A---- C:\Windows\system32\scrrun.dll

2013-12-12 05:16:12 ----A---- C:\Windows\system32\cscript.exe

======List of files/folders modified in the last 1 month======

2013-12-23 22:04:39 ----D---- C:\Windows\Prefetch

2013-12-23 22:04:33 ----RD---- C:\Program Files

2013-12-23 22:04:03 ----D---- C:\Windows\Temp

2013-12-23 22:01:11 ----SHD---- C:\System Volume Information

2013-12-23 19:19:12 ----D---- C:\Windows\system32\config

2013-12-23 18:45:46 ----D---- C:\Windows\winsxs

2013-12-23 18:32:16 ----D---- C:\Users\Jan Cox\AppData\Roaming\Dropbox

2013-12-23 18:30:34 ----D---- C:\Windows\SysWOW64

2013-12-23 18:30:33 ----D---- C:\Windows\System32

2013-12-19 00:39:48 ----D---- C:\Windows\rescache

2013-12-18 22:49:29 ----D---- C:\Windows\inf

2013-12-18 22:49:29 ----D---- C:\Windows

2013-12-18 22:39:28 ----D---- C:\Windows\Panther

2013-12-18 22:39:28 ----D---- C:\Windows\Logs

2013-12-18 22:39:28 ----D---- C:\Windows\debug

2013-12-18 22:38:14 ----D---- C:\Program Files\CCleaner

2013-12-18 22:14:34 ----D---- C:\Program Files\Windows Media Player

2013-12-18 22:14:34 ----D---- C:\Program Files (x86)\Windows Media Player

2013-12-18 21:22:24 ----D---- C:\Windows\Tasks

2013-12-18 21:22:24 ----D---- C:\Windows\system32\Tasks

2013-12-18 21:22:08 ----D---- C:\Program Files (x86)\Common Files

2013-12-18 21:22:04 ----RD---- C:\Program Files (x86)

2013-12-18 21:22:04 ----HD---- C:\ProgramData

2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\zh-TW

2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\zh-HK

2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\zh-CN

2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\tr-TR

2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\sv-SE

2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\ru-RU

2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\pt-PT

2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\pt-BR

2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\pl-PL

2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\nl-NL

2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\nb-NO

2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\ko-KR

2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\ja-JP

2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\it-IT

2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\hu-HU

2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\fr-FR

2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\fi-FI

2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\es-ES

2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\en-US

2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\el-GR

2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\de-DE

2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\da-DK

2013-12-18 21:12:53 ----D---- C:\Windows\SYSWOW64\cs-CZ

2013-12-18 21:12:53 ----D---- C:\Windows\system32\zh-TW

2013-12-18 21:12:53 ----D---- C:\Windows\system32\zh-HK

2013-12-18 21:12:53 ----D---- C:\Windows\system32\zh-CN

2013-12-18 21:12:53 ----D---- C:\Windows\system32\tr-TR

2013-12-18 21:12:53 ----D---- C:\Windows\system32\sv-SE

2013-12-18 21:12:53 ----D---- C:\Windows\system32\ru-RU

2013-12-18 21:12:53 ----D---- C:\Windows\system32\pt-PT

2013-12-18 21:12:53 ----D---- C:\Windows\system32\pt-BR

2013-12-18 21:12:53 ----D---- C:\Windows\system32\pl-PL

2013-12-18 21:12:53 ----D---- C:\Windows\system32\nl-NL

2013-12-18 21:12:53 ----D---- C:\Windows\system32\nb-NO

2013-12-18 21:12:53 ----D---- C:\Windows\system32\ko-KR

2013-12-18 21:12:53 ----D---- C:\Windows\system32\ja-JP

2013-12-18 21:12:53 ----D---- C:\Windows\system32\it-IT

2013-12-18 21:12:53 ----D---- C:\Windows\system32\hu-HU

2013-12-18 21:12:53 ----D---- C:\Windows\system32\fr-FR

2013-12-18 21:12:53 ----D---- C:\Windows\system32\fi-FI

2013-12-18 21:12:53 ----D---- C:\Windows\system32\es-ES

2013-12-18 21:12:53 ----D---- C:\Windows\system32\el-GR

2013-12-18 21:12:53 ----D---- C:\Windows\system32\de-DE

2013-12-18 21:12:53 ----D---- C:\Windows\system32\da-DK

2013-12-18 21:12:53 ----D---- C:\Windows\system32\cs-CZ

2013-12-18 21:12:52 ----D---- C:\Windows\system32\en-US

2013-12-15 11:23:35 ----SHD---- C:\Config.Msi

2013-12-15 11:18:52 ----SHD---- C:\Windows\Installer

2013-12-15 11:18:47 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI

2013-12-15 11:18:39 ----A---- C:\Windows\system32\PerfStringBackup.INI

2013-12-13 16:48:56 ----D---- C:\Windows\system32\NDF

2013-12-12 12:48:48 ----D---- C:\Windows\system32\catroot

2013-12-12 12:34:29 ----D---- C:\Windows\SYSWOW64\migration

2013-12-12 12:34:29 ----D---- C:\Program Files\Internet Explorer

2013-12-12 12:34:29 ----D---- C:\Program Files (x86)\Internet Explorer

2013-12-12 12:34:28 ----D---- C:\Windows\system32\migration

2013-12-12 12:34:28 ----D---- C:\Windows\PolicyDefinitions

2013-12-12 11:48:12 ----D---- C:\Windows\Microsoft.NET

2013-12-12 11:36:17 ----RSD---- C:\Windows\assembly

2013-12-12 11:32:40 ----SD---- C:\ProgramData\Microsoft

2013-12-12 11:24:29 ----D---- C:\Windows\system32\MRT

2013-12-12 11:22:32 ----A---- C:\Windows\system32\MRT.exe

2013-12-12 08:00:07 ----D---- C:\Windows\system32\DriverStore

2013-12-12 08:00:07 ----D---- C:\Windows\system32\drivers

2013-12-12 07:52:49 ----D---- C:\ProgramData\Microsoft Help

2013-12-11 08:20:24 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe

2013-11-29 17:00:28 ----D---- C:\Users\Jan Cox\AppData\Roaming\Belastingdienst

2013-11-28 22:15:45 ----D---- C:\Program Files (x86)\Auslogics

2013-11-28 22:13:39 ----D---- C:\Windows\Minidump

2013-11-25 22:06:25 ----D---- C:\Windows\SYSWOW64\Adobe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2013-09-27 248240]

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]

R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2011-06-15 254496]

R0 tdrpman251;Acronis Try&Decide and Restore Points filter (build 251); C:\Windows\system32\DRIVERS\tdrpm251.sys [2011-06-15 1455648]

R0 timounter;Acronis Backup Archive Explorer; C:\Windows\system32\DRIVERS\timntr.sys [2011-06-15 929312]

R1 AsIO;AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [2009-08-04 13440]

R1 ctxusbm;Citrix USB Monitor Driver; C:\Windows\system32\DRIVERS\ctxusbm.sys [2013-08-19 95152]

R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]

R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2013-09-27 134944]

R3 afcdp;afcdp; C:\Windows\system32\DRIVERS\afcdp.sys [2011-06-15 250400]

R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2009-10-09 1394176]

R3 CVPNDRVA;Cisco Systems Inc. IPSec Driver; \??\C:\Windows\system32\Drivers\CVPNDRVA.sys [2010-03-23 304784]

R3 DNE;Deterministic Network Enhancer Miniport; C:\Windows\system32\DRIVERS\dne64x.sys [2008-11-16 157968]

R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-02-11 10628640]

R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-07-06 2419176]

R3 IntcHdmiAddService;Intel® High Definition Audio HDMI; C:\Windows\system32\drivers\IntcHdmi.sys [2010-01-07 144896]

R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2013-04-04 25928]

R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2009-07-16 15416]

R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2010-04-27 83080]

R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2010-04-27 184968]

R3 StillCam;Stuurprogramma voor seriële digitale fotocamera; C:\Windows\system32\drivers\serscan.sys [2009-07-14 12288]

S3 CVirtA;Cisco Systems VPN Adapter for 64-bit Windows; C:\Windows\system32\DRIVERS\CVirtA64.sys [2010-02-08 14992]

S3 dgderdrv;dgderdrv; C:\Windows\System32\drivers\dgderdrv.sys []

S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2012-07-28 57280]

S3 HTCAND64;HTC Device Driver; C:\Windows\System32\Drivers\ANDROIDUSB.sys [2009-11-01 33736]

S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys []

S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]

S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]

S3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]

S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2012-08-23 57856]

S3 usb_rndisx;USB RNDIS-adapter; C:\Windows\system32\drivers\usb8023x.sys [2013-02-12 19968]

S3 usbscan;Stuurprogramma voor USB-scanner; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]

S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

S3 WSDPrintDevice;WSD-ondersteuning voor afdrukken via UMB; C:\Windows\system32\DRIVERS\WSDPrint.sys [2009-07-14 23040]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AcrSch2Svc;Acronis Scheduler2 Service; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [2009-09-12 891432]

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-10 65640]

R2 afcdpsrv;Acronis Nonstop Backup service; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [2011-06-15 2326920]

R2 BCUService;Browser Configuration Utility Service; C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe [2010-03-05 235752]

R2 CVPND;Cisco Systems, Inc. VPN Service; C:\Program Files (x86)\Cisco Systems\VPN Client\cvpnd.exe [2010-03-23 1528616]

R2 hpqddsvc;HP CUE DeviceDiscovery-service; C:\Windows\system32\svchost.exe [2009-07-14 27136]

R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2009-07-14 27136]

R2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-04-04 418376]

R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2013-04-04 701512]

R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-10-23 23808]

R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]

R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]

R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 2292480]

R3 BBUpdate;BBUpdate; C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\SeaPort.exe [2013-07-23 240288]

R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 27136]

R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2013-10-23 348376]

S2 BBSvc;BingBar Service; C:\Program Files (x86)\Microsoft\BingBar\7.2.241.0\BBSvc.exe [2013-07-23 193696]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]

S2 gupdate;Google Updateservice (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-10-13 136176]

S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11 257416]

S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2012-09-12 1512448]

S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-10-13 136176]

S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-31 194032]

S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]

S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]

S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-11-12 1255736]

S4 aspnet_state;ASP.NET-statusservice; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]

S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

Download Zoek.zip naar het bureaublad.

• Wanneer Internet Explorer of een andere browser of virusscanner melding geeft dat dit bestand onveilig zou zijn kun je negeren, dit is namelijk een onterechte waarschuwing.
  
• Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe (hier en hier) kan je lezen hoe je dat doet.
  
• Klik met de rechtermuisknop op Zoek.zip en klik op de optie "Alles uitpakken".
  
• Dubbelklik op Zoek.exe om de tool te starten.
  
• Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  
• Kopieer nu onderstaande code en plak die in het grote invulvenster:
  
• Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.
  

{00000000-6E41-4FD3-8538-502F5495E5FC};c
 C:\Program Files (x86)\Ask.com;fs
 {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A};c
 {1392b8d2-5c05-419f-a8f6-b9f15a596612};c
 C:\Program Files (x86)\Freecorder\prxtbFree.dll;f
 {0FB6A909-6086-458F-BD92-1F8EE10042A0};c
 C:\Users\Jan Cox\AppData\Roaming\Complitly;fs
 {D4027C7F-154A-4066-A1AD-4243D8127440};c
 ApnUpdater;s
 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}];r64
 [-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}];r64
 [-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1392b8d2-5c05-419f-a8f6-b9f15a596612}];r64
 [-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}];r64
 [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run];r64
 "ApnUpdater"=-;r64
 ""=-;r64
  emptyfolderscheck;delete 
startupall; 
filesrcm;

• Klik op de knop "Options" en vink nu de onderstaande opties aan.
  
• Do a Quick Scan
  
  
• IE Defaults
  
• Auto Clean
  
• De optie "Scan All Users" staat standaard aangevinkt.
  
• Klik nu op de knop "Run script".
  
• Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
  
• Mocht er geen logje verschijnen, start zoek.exe dan opnieuw en klik op de knop zoek-results.log, de log verschijnt dan alsnog.
  
• Post het geopende logje in het volgende bericht.
  

Zoek.exe v5.0.0.0 Updated 23-December-2013

Tool run by Jan Cox on do 26-12-2013 at 13:51:04,56.

Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64

Running in: Normal Mode Internet Access Detected

Launched: E:\Jan Cox\Desktop\zoek.exe [scan all users] [script inserted]

==== System Restore Info ======================

26-12-2013 13:53:52 Zoek.exe System Restore Point Created Succesfully.

==== Empty Folders Check ======================

C:\PROGRA~2\FoxTabVideoToMP3 deleted successfully

C:\PROGRA~2\MarkAny deleted successfully

C:\PROGRA~2\Samsung deleted successfully

C:\PROGRA~2\COMMON~1\Symantec Shared deleted successfully

C:\ProgramData\Babylon deleted successfully

C:\ProgramData\Nokia deleted successfully

C:\ProgramData\Oracle deleted successfully

C:\ProgramData\Symantec deleted successfully

C:\Users\Jan Cox\AppData\Roaming\Gusyf deleted successfully

C:\Users\Jan Cox\AppData\Roaming\Lotid deleted successfully

C:\Users\Jan Cox\AppData\Roaming\Outlook deleted successfully

C:\Users\Jan Cox\AppData\Roaming\Samsung deleted successfully

C:\Users\Jan Cox\AppData\Roaming\Windows Live Writer deleted successfully

C:\Users\Jan Cox\AppData\Local\CrashDumps deleted successfully

C:\Users\Jan Cox\AppData\Local\Samsung deleted successfully

C:\Users\Jan Cox\AppData\Local\VirtualStore deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-956185951-1265831734-1300764519-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} deleted successfully

HKEY_USERS\S-1-5-21-956185951-1265831734-1300764519-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1392b8d2-5c05-419f-a8f6-b9f15a596612} deleted successfully

HKEY_USERS\S-1-5-21-956185951-1265831734-1300764519-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1392b8d2-5c05-419f-a8f6-b9f15a596612} deleted successfully

HKEY_USERS\S-1-5-21-956185951-1265831734-1300764519-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92-1F8EE10042A0} deleted successfully

HKEY_USERS\S-1-5-21-956185951-1265831734-1300764519-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0FB6A909-6086-458F-BD92-1F8EE10042A0} deleted successfully

HKEY_USERS\S-1-5-21-956185951-1265831734-1300764519-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully

HKEY_USERS\S-1-5-21-956185951-1265831734-1300764519-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully

HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} deleted successfully

HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} deleted successfully

HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{1392b8d2-5c05-419f-a8f6-b9f15a596612} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1392b8d2-5c05-419f-a8f6-b9f15a596612} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0} deleted successfully

HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0} deleted successfully

HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-956185951-1265831734-1300764519-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\{00000000-6E41-4FD3-8538-502F5495E5FC} deleted successfully

HKEY_USERS\S-1-5-21-956185951-1265831734-1300764519-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\{BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} deleted successfully

HKEY_USERS\S-1-5-21-956185951-1265831734-1300764519-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{1392b8d2-5c05-419f-a8f6-b9f15a596612} deleted successfully

HKEY_USERS\S-1-5-21-956185951-1265831734-1300764519-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\{1392b8d2-5c05-419f-a8f6-b9f15a596612} deleted successfully

HKEY_USERS\S-1-5-21-956185951-1265831734-1300764519-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{1392b8d2-5c05-419f-a8f6-b9f15a596612} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully

==== Deleting Services ======================

==== Registry Fix Code x64 ======================

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1392b8d2-5c05-419f-a8f6-b9f15a596612}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]

"ApnUpdater"=-

""=-

==== Deleting Files \ Folders ======================

C:\Program Files (x86)\Ask.com deleted

C:\Users\Jan Cox\AppData\Roaming\Complitly deleted

"C:\Program Files (x86)\Freecorder\prxtbFree.dll" deleted

==== Files Recently Created / Modified ======================

====== C:\Windows ====

====== C:\Users\JANCOX~1\AppData\Local\Temp ====

2013-12-23 21:50:14 FE447D1CD38CECAC2331FA932078D9A0 271360 ----a-w- C:\Users\Jan Cox\AppData\Local\Temp\42585506-1013-4466-8924-544260C17A10\SmiProvider.dll

2013-12-23 21:50:14 FC00A05639494779002682A9B965EF9C 471040 ----a-w- C:\Users\Jan Cox\AppData\Local\Temp\42585506-1013-4466-8924-544260C17A10\WimProvider.dll

2013-12-23 21:50:14 E7CAED467F80B29F4E63BA493614DBB1 127488 ----a-w- C:\Users\Jan Cox\AppData\Local\Temp\42585506-1013-4466-8924-544260C17A10\OSProvider.dll

2013-12-23 21:50:14 8D3855B133E21143E8B4BFADB9FB14A3 302080 ----a-w- C:\Users\Jan Cox\AppData\Local\Temp\42585506-1013-4466-8924-544260C17A10\UnattendProvider.dll

2013-12-23 21:50:14 7B38D7916A7CD058C16A0A6CA5077901 271360 ----a-w- C:\Users\Jan Cox\AppData\Local\Temp\42585506-1013-4466-8924-544260C17A10\wdscore.dll

2013-12-23 21:50:14 739968678548BA15F6B9372E8760C012 444416 ----a-w- C:\Users\Jan Cox\AppData\Local\Temp\42585506-1013-4466-8924-544260C17A10\TransmogProvider.dll

2013-12-23 21:50:14 45FF4FA5CA5432BFCCDED4433FE2A85B 216576 ----a-w- C:\Users\Jan Cox\AppData\Local\Temp\42585506-1013-4466-8924-544260C17A10\MsiProvider.dll

2013-12-23 21:50:13 FC2DB5842190C6E78A40CD7DA483B27C 435712 ----a-w- C:\Users\Jan Cox\AppData\Local\Temp\42585506-1013-4466-8924-544260C17A10\DmiProvider.dll

2013-12-23 21:50:13 F2B0771A7CD27F20689E0AB787B7EB7C 289792 ----a-w- C:\Users\Jan Cox\AppData\Local\Temp\42585506-1013-4466-8924-544260C17A10\DismCore.dll

2013-12-23 21:50:13 EFCB002ABC3529D71B61E6FB6434566C 762368 ----a-w- C:\Users\Jan Cox\AppData\Local\Temp\42585506-1013-4466-8924-544260C17A10\CbsProvider.dll

2013-12-23 21:50:13 C9D74156913061BE6C51D8FC3ACF8E93 53760 ----a-w- C:\Users\Jan Cox\AppData\Local\Temp\42585506-1013-4466-8924-544260C17A10\FolderProvider.dll

2013-12-23 21:50:13 BBB9E4FA2561F6A6E5CCF25DA069AC1B 313344 ----a-w- C:\Users\Jan Cox\AppData\Local\Temp\42585506-1013-4466-8924-544260C17A10\IntlProvider.dll

2013-12-23 21:50:13 9A821D8D62F4C60232B856E98CBA7E4F 96768 ----a-w- C:\Users\Jan Cox\AppData\Local\Temp\42585506-1013-4466-8924-544260C17A10\DismHost.exe

2013-12-23 21:50:13 8CA117CB9338C0351236939717CB7084 186368 ----a-w- C:\Users\Jan Cox\AppData\Local\Temp\42585506-1013-4466-8924-544260C17A10\DismProv.dll

2013-12-23 21:50:13 6A4BD682396F29FD7DF5AB389509B950 183296 ----a-w- C:\Users\Jan Cox\AppData\Local\Temp\42585506-1013-4466-8924-544260C17A10\CompatProvider.dll

2013-12-23 21:50:13 5488E381238FF19687FDD7AB2F44CFCC 111616 ----a-w- C:\Users\Jan Cox\AppData\Local\Temp\42585506-1013-4466-8924-544260C17A10\DismCorePS.dll

====== Java Cache =====

2013-12-14 14:21:13 A5A5B060100EA88CFCA9CD584BDFB1CB 954 ----a-w- C:\Users\Jan Cox\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\14\5a440ce-51015ffb

2013-12-14 14:21:26 A7DD1F29E531CC4D1089B72AC2F91F88 290622 ----a-w- C:\Users\Jan Cox\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15\4d6d490f-2a7b567f

2013-12-14 14:21:13 5648C128EB4E465BA7FF63E0AB4A6D80 828 ----a-w- C:\Users\Jan Cox\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\20\329ed8d4-47ac678a

2013-12-14 14:21:13 B6DF07D8D682C841DD17468670A26276 9690 ----a-w- C:\Users\Jan Cox\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\24\1d54c358-27db6285

2013-12-14 14:10:59 EB506C33A9C4A87AE509243E868DFAB0 4057 ----a-w- C:\Users\Jan Cox\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\25\25b2b059-3bab0157

2013-12-14 14:10:59 4E5917E4FCE8307B9EBAF535CA1D010D 85954 ----a-w- C:\Users\Jan Cox\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\26\1c84571a-32868a4e

2013-12-14 14:11:03 58BD6897CD0FEA04FA771BB516FCFC9D 790 ----a-w- C:\Users\Jan Cox\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29\1e61985d-3a9da13b

2013-12-14 14:21:13 ECD54FC45895F7E3F9F783BB46908612 875 ----a-w- C:\Users\Jan Cox\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29\2cde3d5d-5b7df89f

2013-12-14 14:10:11 49FA97DAA63847509D5A972451D73620 1468 ----a-w- C:\Users\Jan Cox\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\3\7125cd43-7c6737d8

2013-12-14 14:21:14 962B22D209AE8358412FF3F14A7FF0D0 850 ----a-w- C:\Users\Jan Cox\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\37\614e0c65-536a0d02

2013-12-14 14:21:14 1F7EA670347142EC4E298F5547FFB9C5 943 ----a-w- C:\Users\Jan Cox\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\47\7631b6ef-12d909d4

2013-12-14 14:10:59 D9226140D3D2FF2D371149337FEA30EE 12749 ----a-w- C:\Users\Jan Cox\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53\34c01335-37f77997

2013-12-14 14:10:10 AECC5CCF33D7AE0E535F2E70CD06665C 54659 ----a-w- C:\Users\Jan Cox\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\56\2e9ab978-5019ff84

2013-12-14 14:11:00 17BFAB6CEDE3EF1E198431337808A804 1044 ----a-w- C:\Users\Jan Cox\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\56\4149fa78-45cb1e22

2013-12-14 14:10:10 BAA3EADAC3DAE150EE6510CED45F604F 35341 ----a-w- C:\Users\Jan Cox\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\59\1e3dfdfb-1be4ace2

2013-12-14 14:21:14 C154BC244A2989340401D19DEACF54B1 857 ----a-w- C:\Users\Jan Cox\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\9\3f7fad09-7ac1f916

====== C:\Windows\SysWOW64 =====

====== C:\Windows\SysWOW64\drivers =====

====== C:\Windows\Sysnative =====

====== C:\Windows\Sysnative\drivers =====

2013-12-12 04:16:13 E0D3CD5841E5C7BE7B94BA946AF1E498 116736 ----a-w- C:\Windows\Sysnative\drivers\drmk.sys

2013-12-12 04:16:13 1E0B4CBBA91C6B041A14ECC2186F7E24 230400 ----a-w- C:\Windows\Sysnative\drivers\portcls.sys

====== C:\Windows\Tasks ======

====== C:\Windows\Temp ======

======= C:\Program Files =====

2013-12-23 21:04:33 -------- d-----w- C:\Program Files\trend micro

======= C:\PROGRA~2 =====

======= C: =====

====== C:\Users\Jan Cox\AppData\Roaming ======

2013-12-18 20:22:21 -------- d-----w- C:\Users\Jan Cox\AppData\Roaming\DriverCure

====== C:\Users\Jan Cox ======

2013-12-23 21:35:20 -------- d-----w- C:\ProgramData\Windows Genuine Advantage

====== C: exe-files ==

2013-12-23 21:50:13 9A821D8D62F4C60232B856E98CBA7E4F 96768 ----a-w- C:\Users\Jan Cox\AppData\Local\Temp\42585506-1013-4466-8924-544260C17A10\DismHost.exe

2013-12-23 21:04:33 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\Jan Cox.exe

=== C: other files ==

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-21-956185951-1265831734-1300764519-1000\Software\Microsoft\Windows\CurrentVersion\Run]

"E07NXLRD_47349969"="C:\Program Files (x86)\Microsoft Encarta\Encarta Winkler Prins Naslagbibliotheek 2007 DVD\EDICT.EXE -m"

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"BCU"="C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"E07NXLRD_47349969"="C:\Program Files (x86)\Microsoft Encarta\Encarta Winkler Prins Naslagbibliotheek 2007 DVD\EDICT.EXE -m"

==== Startup Registry Disabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Acronis Scheduler2 Service]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="Acronis Scheduler2 Service"

"hkey"="HKLM"

"command"="\"C:\\Program Files (x86)\\Common Files\\Acronis\\Schedule2\\schedhlp.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Adobe ARM]

"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="Adobe ARM"

"hkey"="HKLM"

"command"="\"C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ApnUpdater]

"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="ApnUpdater"

"hkey"="HKLM"

"command"="\"C:\\Program Files (x86)\\Ask.com\\Updater\\Updater.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\BCU]

"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="BCU"

"hkey"="HKLM"

"command"="\"C:\\Program Files (x86)\\DeviceVM\\Browser Configuration Utility\\BCU.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ConnectionCenter]

"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="ConnectionCenter"

"hkey"="HKLM"

"command"="\"C:\\Program Files (x86)\\Citrix\\ICA Client\\concentr.exe\" /startup"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\E07NXLRD_1108293]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="E07NXLRD_1108293"

"hkey"="HKCU"

"command"="\"C:\\Program Files (x86)\\Microsoft Encarta\\Encarta Winkler Prins Naslagbibliotheek 2007 DVD\\EDICT.EXE\" -m"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\E07NXLRD_22929463]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="E07NXLRD_22929463"

"hkey"="HKCU"

"command"="\"C:\\Program Files (x86)\\Microsoft Encarta\\Encarta Winkler Prins Naslagbibliotheek 2007 DVD\\EDICT.EXE\" -m"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Facebook Update]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="Facebook Update"

"hkey"="HKCU"

"command"="\"C:\\Users\\Jan Cox\\AppData\\Local\\Facebook\\Update\\FacebookUpdate.exe\" /c /nocrashserver"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Freecorder FLV Service]

"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="Freecorder FLV Service"

"hkey"="HKLM"

"command"="\"C:\\Program Files (x86)\\Freecorder\\FLVSrvc.exe\" /run"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\GrooveMonitor]

"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="GrooveMonitor"

"hkey"="HKLM"

"command"="\"C:\\Program Files (x86)\\Microsoft Office\\Office12\\GrooveMonitor.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\HotKeysCmds]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="HotKeysCmds"

"hkey"="HKLM"

"command"="C:\\Windows\\system32\\hkcmd.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\HP Photosmart 5520 series (NET)]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="HP Photosmart 5520 series (NET)"

"hkey"="HKCU"

"command"="\"C:\\Program Files\\HP\\HP Photosmart 5520 series\\Bin\\ScanToPCActivationApp.exe\" -deviceID \"CN37R160F80602:NW\" -scfn \"HP Photosmart 5520 series (NET)\" -AutoStart 1"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\HP Software Update]

"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="HP Software Update"

"hkey"="HKLM"

"command"="C:\\Program Files (x86)\\HP\\HP Software Update\\HPWuSchd2.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\IgfxTray]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="IgfxTray"

"hkey"="HKLM"

"command"="C:\\Windows\\system32\\igfxtray.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\MSC]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="MSC"

"hkey"="HKLM"

"command"="\"C:\\Program Files\\Microsoft Security Client\\msseces.exe\" -hide -runkey"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\msnmsgr]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="msnmsgr"

"hkey"="HKCU"

"command"="\"C:\\Program Files (x86)\\Windows Live\\Messenger\\msnmsgr.exe\" /background"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\NUSB3MON]

"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="NUSB3MON"

"hkey"="HKLM"

"command"="\"C:\\Program Files (x86)\\Renesas Electronics\\USB 3.0 Host Controller Driver\\Application\\nusb3mon.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Persistence]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="Persistence"

"hkey"="HKLM"

"command"="C:\\Windows\\system32\\igfxpers.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Redirector]

"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="Redirector"

"hkey"="HKLM"

"command"="\"C:\\Program Files (x86)\\Citrix\\ICA Client\\redirector.exe\" /startup"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\RtHDVCpl]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="RtHDVCpl"

"hkey"="HKLM"

"command"="C:\\Program Files\\Realtek\\Audio\\HDA\\RAVCpl64.exe -s"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Sidebar]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="Sidebar"

"hkey"="HKCU"

"command"="C:\\Program Files\\Windows Sidebar\\sidebar.exe /autoRun"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Spotify Web Helper]

"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="Spotify Web Helper"

"hkey"="HKCU"

"command"="\"C:\\Program Files (x86)\\Spotify\\Data\\SpotifyWebHelper.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SunJavaUpdateSched]

"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="SunJavaUpdateSched"

"hkey"="HKLM"

"command"="\"C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\TrueImageMonitor.exe]

"key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run"

"item"="TrueImageMonitor.exe"

"hkey"="HKLM"

"command"="C:\\Program Files (x86)\\Acronis\\TrueImageHome\\TrueImageMonitor.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]

"path"="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\HP Digital Imaging Monitor.lnk"

"backup"="C:\\Windows\\pss\\HP Digital Imaging Monitor.lnk.CommonStartup"

"backupExtension"=".CommonStartup"

"command"="C:\\PROGRA~2\\HP\\DIGITA~1\\bin\\hpqtra08.exe "

"item"="HP Digital Imaging Monitor"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^vpngui.exe.lnk]

"path"="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\vpngui.exe.lnk"

"backup"="C:\\Windows\\pss\\vpngui.exe.lnk.CommonStartup"

"backupExtension"=".CommonStartup"

"command"="C:\\Windows\\Installer\\{467D5E81-8349-4892-9E81-C3674ED8E451}\\Icon09DB8A851.exe -user_logon"

"item"="vpngui.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Users^Jan Cox^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk]

"path"="C:\\Users\\Jan Cox\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Dropbox.lnk"

"backup"="C:\\Windows\\pss\\Dropbox.lnk.Startup"

"backupExtension"=".Startup"

"command"="C:\\Users\\JANCOX~1\\AppData\\Roaming\\Dropbox\\bin\\Dropbox.exe /systemstartup"

"item"="Dropbox"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Users^Jan Cox^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Inktwaarschuwingen controleren - HP Photosmart 5520 series (netwerk).lnk]

"path"="C:\\Users\\Jan Cox\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Inktwaarschuwingen controleren - HP Photosmart 5520 series (netwerk).lnk"

"backup"="C:\\Windows\\pss\\Inktwaarschuwingen controleren - HP Photosmart 5520 series (netwerk).lnk.Startup"

"backupExtension"=".Startup"

"command"="C:\\Windows\\system32\\RunDll32.exe \"C:\\Program Files\\HP\\HP Photosmart 5520 series\\bin\\HPStatusBL.dll\",RunDLLEntry SERIALNUMBER=CN37R160F80602;CONNECTION=NW;MONITOR=1;"

"item"="Inktwaarschuwingen controleren - HP Photosmart 5520 series (netwerk)"

==== Startup Folders ======================

2013-12-24 14:44:23 1064 ----a-w- C:\Users\Jan Cox\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

==== Task Scheduler Jobs ======================

C:\Windows\tasks\Adobe Flash Player Updater.job --a------ [undetermined Task]

C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-956185951-1265831734-1300764519-1000Core.job --a------ C:\Users\Jan Cox\AppData\Local\Facebook\Update\FacebookUpdate.exe [11-07-2012 21:44]

C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-956185951-1265831734-1300764519-1000UA.job --a------ [undetermined Task]

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ [undetermined Task]

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ [undetermined Task]

C:\Windows\tasks\SyncBack BU_PC_naar_ExtHDD.job --a------ [undetermined Task]

==== Other Scheduled Tasks ======================

"C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe]

"C:\Windows\SysNative\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"]

"C:\Windows\SysNative\tasks\CreateChoiceProcessTask" [C:\Windows\System32\browserchoice.exe]

"C:\Windows\SysNative\tasks\FacebookUpdateTaskUserS-1-5-21-956185951-1265831734-1300764519-1000Core" [C:\Users\Jan Cox\AppData\Local\Facebook\Update\FacebookUpdate.exe]

"C:\Windows\SysNative\tasks\FacebookUpdateTaskUserS-1-5-21-956185951-1265831734-1300764519-1000UA" [C:\Users\Jan Cox\AppData\Local\Facebook\Update\FacebookUpdate.exe]

"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]

"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]

"C:\Windows\SysNative\tasks\HPCustParticipation HP Photosmart 5520 series" ["C:\Program Files\HP\HP Photosmart 5520 series\Bin\HPCustPartic.exe"]

"C:\Windows\SysNative\tasks\Launch HTC Sync Loader" [C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe]

"C:\Windows\SysNative\tasks\Scheduled Update for Ask Toolbar" [C:\Program Files (x86)\Ask.com\UpdateTask.exe]

"C:\Windows\SysNative\tasks\SidebarExecute" [C:\Program Files\Windows Sidebar\sidebar.exe]

"C:\Windows\SysNative\tasks\SyncBack BU_PC_naar_ExtHDD" [C:\Program Files (x86)\2BrightSparks\SyncBack\SyncBack.exe]

"C:\Windows\SysNative\tasks\User_Feed_Synchronization-{EE86F141-EC3D-4746-90C5-8FA16EE0E1EE}" [C:\Windows\system32\msfeedssync.exe]

"C:\Windows\SysNative\tasks\ASUS\ASUS SIX Engine" [C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe]

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]

"smartwebprinting@hp.com"="C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3" [05-10-2011 19:47]

[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]

"smartwebprinting@hp.com"="C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3" [05-10-2011 19:47]

==== C:\zoek_backup content ======================

C:\zoek_backup (files=25 folders=6 4277675 bytes)

==== EOF on do 26-12-2013 at 13:56:51,62 ======================

26 december 2013 aangepast door kape

Krijg je nu de melding nog op je bureaublad ?

Ja nog steeds aanwezig op bureaublad.

Typ in startvak onderaan eens deze bestandsnaam gear.prg ... en kijk dan eens of die via de zoekopdracht gevonden wordt ?