Ga naar inhoud

blauw scherm geheugendump


Aanbevolen berichten

Beste,

Volgende logfile heb ik bekomen.

In veilige modus kan ik de laptop aan de praat houden, en heb ik deze fysieke geheugendump bekomen.

Wat doe ik nu ?

Alvast bedankt !

mvg

serjo

Logfile of Trend Micro HijackThis v2.0.5

Scan saved at 15:29:13, on 7/07/2014

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v11.0 (11.00.9600.17126)

FIREFOX: 29.0.1 (en-US)

Boot mode: Safe mode with network support

Running processes:

C:\Users\Roos\Downloads\HijackThis.exe

C:\Windows\SysWOW64\NOTEPAD.EXE

C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

C:\herstelmap pc\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll

F2 - REG:system.ini: UserInit=userinit.exe

O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll

O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\coIEPlg.dll

O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\IPS\IPSBHO.DLL

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll

O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O2 - BHO: (no name) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - (no file)

O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll

O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll

O3 - Toolbar: (no name) - {8dcb7100-df86-4384-8842-8fa844297b3f} - (no file)

O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll

O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\coIEPlg.dll

O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

O4 - HKLM\..\Run: [iAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

O4 - HKLM\..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe

O4 - HKLM\..\Run: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe

O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"

O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"

O4 - HKLM\..\Run: [Olympus ib] "C:\Program Files (x86)\Olympus\ib\olycamdetect.exe" /Startup

O4 - HKLM\..\Run: [MDS_Menu] "C:\Program Files (x86)\Olympus\ib\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Olympus\ib" UpdateWithCreateOnce "Software\OLYMPUS\ib\1.0"

O4 - HKLM\..\Run: [HPConnectionManager] C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

O4 - HKCU\..\Run: [skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun

O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_13_0_0_214_Plugin.exe -update plugin

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

O4 - Startup: Dropbox.lnk = Roos\AppData\Roaming\Dropbox\bin\Dropbox.exe

O4 - Startup: OpenOffice.org 3.3 .lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe

O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe

O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200

O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000

O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe

O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe

O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll

O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL

O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)

O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll

O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

O23 - Service: Easybits Services for Windows (ezSharedSvc) - EasyBits Software AS - C:\Windows\System32\ezSharedSvcHost.exe

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe

O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe

O23 - Service: HP Client Services (HPClientSvc) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe

O23 - Service: HP Connection Manager 4 Service (hpCMSrv) - Hewlett-Packard Development Company L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe

O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe

O23 - Service: HPWMISVC - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe

O23 - Service: Intel® Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe

O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe

O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\N360.exe

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10101 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: Intel® Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--

End of file - 14683 bytes

Link naar reactie
Delen op andere sites

  • Reacties 26
  • Aangemaakt
  • Laatste reactie

Beste reacties in dit topic

Beste reacties in dit topic

Geplaatste afbeeldingen

Start Hijackthis op. Selecteer “Scan”. Selecteer alleen de items die hieronder zijn genoemd:

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll

O2 - BHO: (no name) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - (no file)

O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll

O3 - Toolbar: (no name) - {8dcb7100-df86-4384-8842-8fa844297b3f} - (no file)

O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll

O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe"

Klik op 'Fix checked' om de items te verwijderen.

Let op : Windows Vista & 7 gebruikers dienen HijackThis als “administrator” uit te voeren via rechtermuisknop “als administrator uitvoeren". Indien dit via de snelkoppeling niet lukt voer je HijackThis als administrator uit in de volgende map : C:\Program Files\Trend Micro\HiJackThis of C:\Program Files (x86)\Trend Micro\HiJackThis.

Download 51a5f5d096dae-icon_RSIT.pngRSIT van de onderstaande locaties en sla deze op het bureaublad op.

Hier staat een beschrijving hoe je kan kijken of je een 32- of 64-bitversie van Windows heeft.

Dubbelklik op RSIT.exe om de tool te starten.

  • Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  • Vervolgens wordt de "Disclaimer of warranty" getoond, klik vervolgens op "Continue"
  • Wanneer de tool gereed is worden er twee kladblok bestanden geopend genaamd "Log.txt" en "Info.txt" .

RSIT Logbestanden plaatsen

  • Voeg het logbestand met de naam "Log.txt" als bijlage toe aan het volgende bericht. (Dit logbestand kunt u tevens terug vinden in de map ""C:\\rsit")
  • Het logbestand met de naam "Info.txt" wat geminimaliseerd is hoeft u niet te plaatsen. (Dit logbestand wordt enkel de eerst keer bij het uitvoeren aangemaakt).
  • Hoe u een bijlage kunt toevoegen aan het bericht leest u hier.

Bekijk ook de instructievideo.

Link naar reactie
Delen op andere sites

Beste,

Opgestart in veilige modus, hijackthis uitgevoerd als administrator, volgende items kan ik niet verwijderen:

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

mvg

serjo

Link naar reactie
Delen op andere sites

Logfile of random's system information tool 1.10 (written by random/random)

Run by Roos at 2014-07-07 19:04:15

Microsoft Windows 7 Home Premium Service Pack 1

System drive C: has 566 GB (81%) free of 698 GB

Total RAM: 4044 MB (78% free)

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 19:04:16, on 7/07/2014

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v11.0 (11.00.9600.17126)

Boot mode: Safe mode with network support

Running processes:

C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE

C:\Users\Roos\Downloads\HijackThis.exe

C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

C:\Program Files\trend micro\Roos.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

F2 - REG:system.ini: UserInit=userinit.exe

O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll

O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\coIEPlg.dll

O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\IPS\IPSBHO.DLL

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll

O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll

O2 - BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll

O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\coIEPlg.dll

O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

O4 - HKLM\..\Run: [iAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

O4 - HKLM\..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe

O4 - HKLM\..\Run: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe

O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"

O4 - HKLM\..\Run: [Olympus ib] "C:\Program Files (x86)\Olympus\ib\olycamdetect.exe" /Startup

O4 - HKLM\..\Run: [MDS_Menu] "C:\Program Files (x86)\Olympus\ib\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Olympus\ib" UpdateWithCreateOnce "Software\OLYMPUS\ib\1.0"

O4 - HKLM\..\Run: [HPConnectionManager] C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

O4 - HKCU\..\Run: [skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

O4 - Startup: Dropbox.lnk = Roos\AppData\Roaming\Dropbox\bin\Dropbox.exe

O4 - Startup: OpenOffice.org 3.3 .lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe

O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe

O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200

O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000

O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe

O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe

O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll

O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL

O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)

O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll

O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)

O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

O23 - Service: Easybits Services for Windows (ezSharedSvc) - EasyBits Software AS - C:\Windows\System32\ezSharedSvcHost.exe

O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe

O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe

O23 - Service: HP Client Services (HPClientSvc) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe

O23 - Service: HP Connection Manager 4 Service (hpCMSrv) - Hewlett-Packard Development Company L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe

O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe

O23 - Service: HPWMISVC - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe

O23 - Service: Intel® Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe

O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)

O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe

O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\N360.exe

O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10101 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

O23 - Service: Intel® Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--

End of file - 13924 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe

%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16

wininit.exe

%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16

C:\Windows\system32\services.exe

winlogon.exe

C:\Windows\system32\lsass.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Windows\Explorer.EXE

ctfmon.exe

C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}

"C:\Program Files\Internet Explorer\iexplore.exe"

"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1540 CREDAT:275457 /prefetch:2

"C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE"

"C:\Users\Roos\Downloads\HijackThis.exe"

"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1540 CREDAT:668718 /prefetch:2

"C:\herstelmap pc\RSITx64.exe"

C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

C:\Windows\tasks\HPCeeScheduleForRoos.job - C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe HPCeeScheduleForRoos (null)

=========Mozilla firefox=========

ProfilePath - C:\Users\Roos\AppData\Roaming\Mozilla\Firefox\Profiles\uelon7rk.default

prefs.js - "browser.startup.homepage" - "Google"

prefs.js - "keyword.URL" - "Yahoo Search - Web Search="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]

"Description"=Adobe® Flash® Player 13.0.0.214 Plugin

"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]

"Description"=Adobe Shockwave Player

"Path"=C:\Windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]

"Description"=Google Earth in your browser

"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]

"Description"=Picasa3 plugin

"Path"=C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.51.2]

"Description"=Java™ Deployment Toolkit

"Path"=C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2]

"Description"=Oracle® Next Generation Java™ Plug-In

"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]

"Description"=

"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]

"Description"=Ag Player Plugin

"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]

"Description"=WLPG Install MIME type

"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109]

"Description"=WLPG Install MIME type

"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]

"Description"=Google Update

"Path"=C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]

"Description"=Google Update

"Path"=C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0]

"Description"=WildTangent Games App Presence Detector Plugin

"Path"=C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]

"Description"=Handles PDFs in-place in Firefox

"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]

"Description"=Adobe® Flash® Player 13.0.0.214 Plugin

"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]

"Description"=Oracle® Next Generation Java™ Plug-In

"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]

"Description"=

"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]

"Description"=Ag Player Plugin

"Path"=c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll

C:\Users\Roos\AppData\Roaming\Mozilla\Firefox\Profiles\uelon7rk.default\extensions\

toolbar@ask.com

{635abd67-4fe9-1b23-4f01-e679fa7484c1}

C:\Users\Roos\AppData\Roaming\Mozilla\Firefox\Profiles\uelon7rk.default\searchplugins\

askcom.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]

Norton Identity Protection - C:\Program Files (x86)\Norton 360\Engine64\21.3.0.12\coIEPlg.dll [2014-04-28 916320]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 529280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]

Skype add-on for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-03-21 6270336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

Java Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-05-06 49440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]

HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2013-08-28 303416]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}]

MSS+ Identifier - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09 96128]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]

Norton Identity Protection - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\coIEPlg.dll [2014-04-28 654176]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]

Norton Vulnerability Protection - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\IPS\IPSBHO.DLL [2014-02-21 392344]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]

Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]

Java Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-12-18 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Aanmeldhulp voor Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]

Skype Browser Helper - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-03-21 4502400]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

Java Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-12-18 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}]

HP Network Check Helper - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28 286520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files (x86)\Norton 360\Engine64\21.3.0.12\coIEPlg.dll [2014-04-28 916320]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]

{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\coIEPlg.dll [2014-04-28 654176]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-01-08 167960]

"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-01-08 391704]

"Persistence"=C:\Windows\system32\igfxpers.exe [2011-01-08 418328]

"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-12-17 2480936]

"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2011-01-25 525312]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"NCPluginUpdater"=C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe [2014-06-24 21720]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-05-08 21445248]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]

"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2011-04-07 336384]

"IAStorIcon"=C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [2011-01-13 283160]

"HP Quick Launch"=C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [2010-11-09 586296]

"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2013-12-18 40312]

"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]

"Easybits Recovery"=C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [2011-03-16 61112]

"HPOSD"=C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [2011-01-27 318520]

"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]

"Olympus ib"=C:\Program Files (x86)\Olympus\ib\olycamdetect.exe [2012-02-02 96128]

"MDS_Menu"=C:\Program Files (x86)\Olympus\ib\MUITransfer\MUIStartMenu.exe [2011-08-30 223104]

"HPConnectionManager"=C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe [2011-09-13 103992]

""= []

"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup

McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe

C:\Users\Roos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

Dropbox.lnk - C:\Users\Roos\AppData\Roaming\Dropbox\bin\Dropbox.exe

OpenOffice.org 3.3 .lnk - C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]

C:\Windows\system32\igfxdev.dll [2011-01-08 384000]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]

wlnotify.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]

"{E54729E8-BB3D-4270-9D49-7389EA579090}"=C:\Windows\SysWow64\EZUPBH~1.DLL [2011-05-06 52920]

"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]

"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\SMR410]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"LogonHoursAction"=2

"DontDisplayLogonHoursWarnings"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"ConsentPromptBehaviorAdmin"=5

"ConsentPromptBehaviorUser"=3

"EnableUIADesktopToggle"=0

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoActiveDesktop"=1

"NoActiveDesktopChanges"=1

"ForceActiveDesktopOn"=0

"EnableShellExecuteHooks"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]

"vidc.mrle"=msrle32.dll

"vidc.msvc"=msvidc32.dll

"msacm.imaadpcm"=imaadp32.acm

"msacm.msg711"=msg711.acm

"msacm.msgsm610"=msgsm32.acm

"msacm.msadpcm"=msadp32.acm

"midimapper"=midimap.dll

"wavemapper"=msacm32.drv

"VIDC.UYVY"=msyuv.dll

"VIDC.YUY2"=msyuv.dll

"VIDC.YVYU"=msyuv.dll

"VIDC.IYUV"=iyuv_32.dll

"vidc.i420"=iyuv_32.dll

"VIDC.YVU9"=tsbyuv.dll

"msacm.l3acm"=C:\Windows\System32\l3codeca.acm

"MSVideo8"=VfWWDM32.dll

"wave"=wdmaud.drv

"midi"=wdmaud.drv

"mixer"=wdmaud.drv

"aux"=wdmaud.drv

"wave1"=wdmaud.drv

"midi1"=wdmaud.drv

"mixer1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-07-07 19:04:16 ----D---- C:\Program Files\trend micro

2014-07-07 19:04:15 ----D---- C:\rsit

2014-07-07 15:27:38 ----D---- C:\herstelmap pc

2014-07-01 20:41:12 ----D---- C:\NPE

2014-07-01 20:40:57 ----A---- C:\Windows\ntbtlog.txt

2014-06-11 12:02:55 ----A---- C:\Windows\SYSWOW64\usp10.dll

2014-06-11 12:02:55 ----A---- C:\Windows\system32\usp10.dll

2014-06-11 12:02:54 ----A---- C:\Windows\system32\drivers\tcpip.sys

2014-06-11 12:02:54 ----A---- C:\Windows\system32\drivers\FWPKCLNT.SYS

2014-06-11 12:02:53 ----A---- C:\Windows\SYSWOW64\msxml6r.dll

2014-06-11 12:02:53 ----A---- C:\Windows\SYSWOW64\msxml6.dll

2014-06-11 12:02:53 ----A---- C:\Windows\SYSWOW64\msxml3r.dll

2014-06-11 12:02:53 ----A---- C:\Windows\SYSWOW64\msxml3.dll

2014-06-11 12:02:53 ----A---- C:\Windows\system32\msxml6r.dll

2014-06-11 12:02:53 ----A---- C:\Windows\system32\msxml6.dll

2014-06-11 12:02:53 ----A---- C:\Windows\system32\msxml3r.dll

2014-06-11 12:02:53 ----A---- C:\Windows\system32\msxml3.dll

2014-06-11 12:02:50 ----A---- C:\Windows\SYSWOW64\mshtmled.dll

2014-06-11 12:02:50 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll

2014-06-11 12:02:49 ----A---- C:\Windows\SYSWOW64\urlmon.dll

2014-06-11 12:02:49 ----A---- C:\Windows\SYSWOW64\mshtml.dll

2014-06-11 12:02:49 ----A---- C:\Windows\SYSWOW64\msfeeds.dll

2014-06-11 12:02:49 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll

2014-06-11 12:02:49 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll

2014-06-11 12:02:49 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll

2014-06-11 12:02:49 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll

2014-06-11 12:02:49 ----A---- C:\Windows\system32\ieetwproxystub.dll

2014-06-11 12:02:48 ----A---- C:\Windows\SYSWOW64\iesetup.dll

2014-06-11 12:02:48 ----A---- C:\Windows\SYSWOW64\iertutil.dll

2014-06-11 12:02:48 ----A---- C:\Windows\system32\urlmon.dll

2014-06-11 12:02:47 ----A---- C:\Windows\SYSWOW64\jsproxy.dll

2014-06-11 12:02:47 ----A---- C:\Windows\SYSWOW64\ieui.dll

2014-06-11 12:02:47 ----A---- C:\Windows\SYSWOW64\iernonce.dll

2014-06-11 12:02:47 ----A---- C:\Windows\SYSWOW64\ieframe.dll

2014-06-11 12:02:47 ----A---- C:\Windows\SYSWOW64\dxtrans.dll

2014-06-11 12:02:47 ----A---- C:\Windows\system32\msfeeds.dll

2014-06-11 12:02:47 ----A---- C:\Windows\system32\ieetwcollectorres.dll

2014-06-11 12:02:47 ----A---- C:\Windows\system32\ieetwcollector.exe

2014-06-11 12:02:47 ----A---- C:\Windows\system32\dxtmsft.dll

2014-06-11 12:02:46 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll

2014-06-11 12:02:46 ----A---- C:\Windows\SYSWOW64\jscript9.dll

2014-06-11 12:02:46 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe

2014-06-11 12:02:46 ----A---- C:\Windows\system32\iesetup.dll

2014-06-11 12:02:46 ----A---- C:\Windows\system32\iertutil.dll

2014-06-11 12:02:46 ----A---- C:\Windows\system32\ie4uinit.exe

2014-06-11 12:02:45 ----A---- C:\Windows\SYSWOW64\wininet.dll

2014-06-11 12:02:45 ----A---- C:\Windows\SYSWOW64\vbscript.dll

2014-06-11 12:02:45 ----A---- C:\Windows\SYSWOW64\msrating.dll

2014-06-11 12:02:45 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll

2014-06-11 12:02:45 ----A---- C:\Windows\system32\jsproxy.dll

2014-06-11 12:02:45 ----A---- C:\Windows\system32\ieui.dll

2014-06-11 12:02:45 ----A---- C:\Windows\system32\iernonce.dll

2014-06-11 12:02:45 ----A---- C:\Windows\system32\dxtrans.dll

2014-06-11 12:02:44 ----A---- C:\Windows\system32\mshtmlmedia.dll

2014-06-11 12:02:44 ----A---- C:\Windows\system32\mshtmled.dll

2014-06-11 12:02:44 ----A---- C:\Windows\system32\jscript9diag.dll

2014-06-11 12:02:44 ----A---- C:\Windows\system32\ieUnatt.exe

2014-06-11 12:02:44 ----A---- C:\Windows\system32\ieframe.dll

2014-06-11 12:02:43 ----A---- C:\Windows\system32\wininet.dll

2014-06-11 12:02:43 ----A---- C:\Windows\system32\vbscript.dll

2014-06-11 12:02:43 ----A---- C:\Windows\system32\jscript9.dll

2014-06-11 12:02:43 ----A---- C:\Windows\system32\ieapfltr.dll

2014-06-11 12:02:42 ----A---- C:\Windows\system32\msrating.dll

2014-06-11 12:02:41 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe

2014-06-11 12:02:41 ----A---- C:\Windows\system32\mshtml.dll

2014-06-11 12:02:23 ----A---- C:\Windows\system32\aepdu.dll

2014-06-11 12:02:22 ----A---- C:\Windows\system32\aeinv.dll

======List of files/folders modified in the last 1 month======

2014-07-07 19:04:16 ----RD---- C:\Program Files

2014-07-07 18:23:19 ----D---- C:\Windows\Temp

2014-07-07 18:07:59 ----D---- C:\Windows\Minidump

2014-07-07 18:07:29 ----D---- C:\Windows

2014-07-07 18:04:59 ----D---- C:\Windows\System32

2014-07-07 18:04:59 ----D---- C:\Windows\inf

2014-07-07 18:04:59 ----A---- C:\Windows\system32\PerfStringBackup.INI

2014-07-07 18:02:38 ----D---- C:\Windows\Tasks

2014-07-07 18:02:38 ----D---- C:\Windows\system32\Tasks

2014-07-07 18:01:39 ----D---- C:\Users\Roos\AppData\Roaming\Skype

2014-07-07 18:01:04 ----A---- C:\Windows\SYSWOW64\log.txt

2014-07-07 17:59:35 ----D---- C:\Windows\Prefetch

2014-07-07 15:35:08 ----SD---- C:\Users\Roos\AppData\Roaming\Microsoft

2014-07-07 11:51:59 ----SHD---- C:\System Volume Information

2014-07-07 11:50:34 ----D---- C:\Windows\system32\config

2014-07-06 17:10:30 ----D---- C:\Users\Roos\AppData\Roaming\Dropbox

2014-07-06 17:10:28 ----D---- C:\Users\Roos\AppData\Roaming\DropboxMaster

2014-07-01 20:51:28 ----D---- C:\Windows\system32\drivers

2014-07-01 20:48:11 ----HD---- C:\ProgramData

2014-07-01 17:25:05 ----D---- C:\Windows\SysWOW64

2014-06-26 22:43:46 ----D---- C:\Windows\system32\drivers\N360x64

2014-06-25 21:43:31 ----D---- C:\ProgramData\Norton

2014-06-25 21:40:50 ----D---- C:\Program Files (x86)\Norton 360

2014-06-25 21:20:06 ----SHD---- C:\Windows\Installer

2014-06-25 21:15:07 ----RD---- C:\Program Files (x86)

2014-06-25 20:45:16 ----D---- C:\Program Files (x86)\Mozilla Firefox

2014-06-25 20:36:37 ----A---- C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt

2014-06-17 17:23:23 ----D---- C:\Windows\winsxs

2014-06-14 19:02:06 ----D---- C:\Program Files\Internet Explorer

2014-06-14 19:02:05 ----D---- C:\Windows\SYSWOW64\en-US

2014-06-14 19:02:03 ----D---- C:\Windows\system32\en-US

2014-06-14 19:02:00 ----D---- C:\Program Files (x86)\Internet Explorer

2014-06-14 19:01:59 ----D---- C:\Windows\system32\DriverStore

2014-06-11 20:11:45 ----D---- C:\ProgramData\Microsoft Help

2014-06-11 20:10:45 ----D---- C:\Windows\system32\catroot2

2014-06-11 20:10:12 ----SD---- C:\Windows\system32\CompatTel

2014-06-11 12:02:18 ----D---- C:\Windows\system32\catroot

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2011-01-13 439320]

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]

R0 SymDS;Symantec Data Store; C:\Windows\system32\drivers\N360x64\1503000.00C\SYMDS64.SYS [2013-10-30 493656]

R0 SymEFA;Symantec Extended File Attributes; C:\Windows\system32\drivers\N360x64\1503000.00C\SYMEFA64.SYS [2014-03-04 1148120]

R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]

R3 MEIx64;Intel® Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-20 56344]

R3 netr28x;Ralink 802.11n Extensible Wireless Driver; C:\Windows\system32\DRIVERS\netr28x.sys [2010-11-05 1041760]

R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-01-27 425064]

R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-12-17 1403440]

S1 BHDrvx64;BHDrvx64; \??\C:\Program Files (x86)\Norton 360\NortonData\21.3.0.12\Definitions\BASHDefs\20140606.001\BHDrvx64.sys [2014-06-06 1530160]

S1 ccSet_N360;N360 Settings Manager; C:\Windows\system32\drivers\N360x64\1503000.00C\ccSetx64.sys [2014-02-21 162392]

S1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [2014-06-25 486192]

S1 IDSVia64;IDSVia64; \??\C:\Program Files (x86)\Norton 360\NortonData\21.3.0.12\Definitions\IPSDefs\20140630.001\IDSvia64.sys [2014-06-30 525016]

S1 SRTSPX;Symantec Real Time Storage Protection (PEL) x64; C:\Windows\system32\drivers\N360x64\1503000.00C\SRTSPX64.SYS [2013-10-30 36952]

S1 SymIRON;Symantec Iron Driver; C:\Windows\system32\drivers\N360x64\1503000.00C\Ironx64.SYS [2013-10-30 264280]

S1 SymNetS;Symantec Network Security WFP Driver; C:\Windows\System32\Drivers\N360x64\1503000.00C\SYMNETS.SYS [2014-02-18 593112]

S3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-04-07 8281600]

S3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-04-07 293376]

S3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl664.sys [2009-06-10 1311232]

S3 clwvd;CyberLink WebCam Virtual Driver; C:\Windows\system32\DRIVERS\clwvd.sys [2010-07-28 31088]

S3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2014-06-25 142128]

S3 IntcDAud;Intel® Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-15 317440]

S3 intelkmd;intelkmd; C:\Windows\system32\DRIVERS\igdpmd64.sys [2011-01-08 12262688]

S3 NAVENG;NAVENG; \??\C:\Program Files (x86)\Norton 360\NortonData\21.3.0.12\Definitions\VirusDefs\20140701.002\ENG64.SYS [2014-06-25 126040]

S3 NAVEX15;NAVEX15; \??\C:\Program Files (x86)\Norton 360\NortonData\21.3.0.12\Definitions\VirusDefs\20140701.002\EX64.SYS [2014-06-25 2099288]

S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm62x64.sys [2009-06-10 408960]

S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]

S3 RSPCIESTOR;Realtek PCIE CardReader Driver; C:\Windows\system32\DRIVERS\RtsPStor.sys [2011-02-15 335464]

S3 SCLx64;SCL010 Contactless Reader; C:\Windows\system32\DRIVERS\SCLx64.sys [2011-01-11 69248]

S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2010-11-21 109056]

S3 SRTSP;Symantec Real Time Storage Protection x64; C:\Windows\System32\Drivers\N360x64\1503000.00C\SRTSP64.SYS [2014-02-13 875736]

S3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]

S3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]

S3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]

S3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10301; C:\Windows\system32\DRIVERS\stwrt64.sys [2011-01-25 520192]

S3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [2014-06-25 177752]

S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]

S3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

S2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-18 65432]

S2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-04-07 203776]

S2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-04-11 1390720]

S2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-04-11 1764992]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]

S2 ezSharedSvc;Easybits Services for Windows; C:\Windows\syswow64\ezSharedSvcHost.exe [2010-04-23 514232]

S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-02-02 116648]

S2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2012-09-27 86528]

S2 HPClientSvc;HP Client Services; C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe [2010-08-05 291896]

S2 HPWMISVC;HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2010-11-09 26680]

S2 IAStorDataMgrSvc;Intel® Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2011-01-13 13336]

S2 IconMan_R;IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2011-02-19 2372096]

S2 LMS;Intel® Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe [2011-02-01 326168]

S2 N360;Norton 360; C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\N360.exe [2014-05-11 265040]

S2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-02-25 249648]

S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-04-03 315008]

S2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10101; C:\Program Files\IDT\WDM\STacSV64.exe [2011-01-25 296448]

S2 UNS;Intel® Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2011-02-01 2656280]

S2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 2286976]

S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-16 257712]

S3 BBSvc;Bing Bar Update Service; C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-03-02 183560]

S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]

S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-02-02 116648]

S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-10 136120]

S3 hpCMSrv;HP Connection Manager 4 Service; C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe [2011-09-13 1098296]

S3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe [2012-09-06 1001376]

S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-05-30 111616]

S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [2014-04-09 289256]

S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]

S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-05-17 119408]

S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]

S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-02-14 1255736]

S4 aspnet_state;ASP.NET-statusservice; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]

S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]

-----------------EOF-----------------

Link naar reactie
Delen op andere sites

Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe (hier en hier) kan je lezen hoe je dat doet.

Download 51a612a8b27e2-Zoek.pngZoek.exe naar het bureaublad (niet de .zip- of .rar-versie)

  • Wanneer Internet Explorer of een andere browser of virusscanner melding geeft dat dit bestand onveilig zou zijn kun je negeren, dit is namelijk een onterechte waarschuwing.
  • Dubbelklik op Zoek.exe om de tool te starten.
  • Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  • Kopieer nu onderstaande code en plak die in het grote invulvenster:
  • Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.

  C:\Users\Roos\AppData\Roaming\Mozilla\Firefox\Profiles\uelon7rk.default\extensions\toolbar@ask.com;fs
 C:\Users\Roos\AppData\Roaming\Mozilla\Firefox\Profiles\uelon7rk.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1};fs
 C:\Users\Roos\AppData\Roaming\Mozilla\Firefox\Profiles\uelon7rk.default\searchplugins\askcom.xml;f
 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run];r64
 ""=-;r64
 emptyfolderscheck;delete 
startupall; 
filesrcm;

  • Klik op de knop "More options" en vink nu de onderstaande opties aan.
  • Do a Quick Scan

  • Auto Clean
  • De optie "Scan All Users" staat standaard aangevinkt.
  • Klik nu op de knop "Run script".
  • Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
  • Mocht er geen logje verschijnen, start zoek.exe dan opnieuw en klik op de knop zoek-results.log, de log verschijnt dan alsnog.
  • Post het geopende logje in het volgende bericht als bijlage.

Zoek.exe logbestand plaatsen

  • Voeg het logbestand met de naam "Zoek-results.log" als bijlage toe aan het volgende bericht. (Dit logbestand kunt u tevens terug vinden op de systeemschijf als C:\\Zoek-results.log.)
  • Hoe u een bijlage kunt toevoegen aan het bericht leest u hier.

Link naar reactie
Delen op andere sites

Zoek.exe v5.0.0.0 Updated 05-July-2014

Tool run by Roos on ma 07/07/2014 at 20:04:34,58.

Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64

Running in: Safe Mode NETWORK Internet Access Detected

Launched: C:\herstelmap pc\zoek.exe [scan all users] [script inserted] [Checkboxes used]

==== System Restore Info ======================

==== Empty Folders Check ======================

C:\PROGRA~2\MSXML 4.0 deleted successfully

C:\Program Files\Symantec deleted successfully

C:\PROGRA~3\Oracle deleted successfully

C:\PROGRA~3\PCSettings deleted successfully

C:\Users\Teun\AppData\Roaming\hpqLog deleted successfully

C:\Users\MATS\AppData\Local\VirtualStore deleted successfully

C:\Users\Raf\AppData\Local\VirtualStore deleted successfully

C:\Users\Raf\AppData\Local\{C65EDB98-8DF0-4C5A-9A78-1A5BA2B774E3} deleted successfully

C:\Users\Roos\AppData\Local\ib deleted successfully

C:\Users\Teun\AppData\Local\VirtualStore deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-1413599566-1329967044-1382984099-1000\Software\Microsoft\Internet Explorer\SearchScopes\{2fa28606-de77-4029-af96-b231e3b8f827} deleted successfully

HKEY_USERS\S-1-5-21-1413599566-1329967044-1382984099-1000\Software\Microsoft\Internet Explorer\SearchScopes\{701A77EF-1EA0-4326-94A6-B6F80844A7D7} deleted successfully

HKEY_USERS\S-1-5-21-1413599566-1329967044-1382984099-1000\Software\Microsoft\Internet Explorer\SearchScopes\{7CB514BE-E1EB-426E-9CA5-630F3CCBDC78} deleted successfully

HKEY_USERS\S-1-5-21-1413599566-1329967044-1382984099-1000\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4} deleted successfully

HKEY_USERS\S-1-5-21-1413599566-1329967044-1382984099-1000\Software\Microsoft\Internet Explorer\SearchScopes\{b7fca997-d0fb-4fe0-8afd-255e89cf9671} deleted successfully

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== FireFox Fix ======================

ProfilePath: C:\Users\MATS\AppData\Roaming\Mozilla\Firefox\Profiles\h4gsv3n4.default

user.js not found

---- Lines WebSearch removed from prefs.js ----

user_pref("keyword.URL", "Ask.com

---- Lines ask.com removed from prefs.js ----

user_pref("browser.search.defaultengine", "Ask.com");

user_pref("browser.search.order.1", "Ask.com");

---- Lines asktb removed from prefs.js ----

user_pref("extensions.asktb.ff-original-keyword-url", "");

---- FireFox user.js and prefs.js backups ----

prefs_20140707_2021_.backup

ProfilePath: C:\Users\Raf\AppData\Roaming\Mozilla\Firefox\Profiles\iwwzfuta.default

user.js not found

---- Lines WebSearch removed from prefs.js ----

user_pref("keyword.URL", "Ask.com

---- Lines ask.com removed from prefs.js ----

user_pref("browser.search.defaultengine", "Ask.com");

user_pref("browser.search.order.1", "Ask.com");

---- Lines asktb removed from prefs.js ----

user_pref("extensions.asktb.ff-original-keyword-url", "");

---- FireFox user.js and prefs.js backups ----

prefs_20140707_2021_.backup

ProfilePath: C:\Users\Roos\AppData\Roaming\Mozilla\Firefox\Profiles\uelon7rk.default

user.js not found

---- Lines ask.com modified from prefs.js ----

user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}\":{\"descriptor\":\"C:\\\\

---- FireFox user.js and prefs.js backups ----

prefs_20140707_2021_.backup

ProfilePath: C:\Users\Teun\AppData\Roaming\Mozilla\Firefox\Profiles\k9a3clk9.default

user.js not found

---- Lines WebSearch removed from prefs.js ----

user_pref("keyword.URL", "Ask.com

---- Lines ask.com removed from prefs.js ----

user_pref("browser.search.defaultengine", "Ask.com");

user_pref("browser.search.order.1", "Ask.com");

---- Lines asktb removed from prefs.js ----

user_pref("extensions.asktb.ff-original-keyword-url", "");

---- FireFox user.js and prefs.js backups ----

prefs_20140707_2021_.backup

==== Registry Fix Code x64 ======================

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

""=-

==== Deleting Files \ Folders ======================

C:\Users\Roos\AppData\Roaming\Mozilla\Firefox\Profiles\uelon7rk.default\extensions\toolbar@ask.com deleted

C:\Users\Roos\AppData\Roaming\Mozilla\Firefox\Profiles\uelon7rk.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} deleted

C:\PROGRA~2\Ask.com deleted

C:\PROGRA~3\Ask deleted

C:\Users\Roos\Searches deleted

C:\Users\MATS\AppData\LocalLow\AskToolbar deleted

C:\Users\Raf\AppData\LocalLow\AskToolbar deleted

C:\Users\Roos\AppData\LocalLow\AskToolbar deleted

C:\Users\Teun\AppData\LocalLow\AskToolbar deleted

C:\windows\SysNative\TASKS\Scheduled Update for Ask Toolbar deleted

C:\Windows\SysNative\config\systemprofile\Searches deleted

C:\Users\MATS\AppData\Roaming\Mozilla\Firefox\Profiles\h4gsv3n4.default\extensions\staged deleted

C:\Users\Raf\AppData\Roaming\Mozilla\Firefox\Profiles\iwwzfuta.default\extensions\staged deleted

C:\Users\Roos\AppData\Roaming\Mozilla\Firefox\Profiles\uelon7rk.default\searchplugins\askcom.xml deleted

C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE} deleted

"C:\Windows\Installer\4c7ed.msi" deleted

"C:\Windows\Installer\79f83.msi" deleted

==== Files Recently Created / Modified ======================

====== C:\Windows ====

====== C:\Users\Roos\AppData\Local\Temp ====

2014-07-07 18:01:33 CF95932C00190451115C782E139DE582 264488 ----a-w- C:\Users\Roos\AppData\Local\Temp\MSS\3.8.150.1\McInstallerRes.dll

2014-07-07 18:01:33 87AA773F15D90973090D4DF76F8E60EF 565808 ----a-w- C:\Users\Roos\AppData\Local\Temp\MSS\3.8.150.1\mcbrwsr2.dll

2014-07-07 18:01:33 2AA753368BF68871962D2E99B8692985 153760 ----a-w- C:\Users\Roos\AppData\Local\Temp\MSS\3.8.150.1\McInstallerRes_LD.dll

2014-07-07 18:01:33 14E9947D26B0A418AA02F87741E4B40B 769736 ----a-w- C:\Users\Roos\AppData\Local\Temp\MSS\3.8.150.1\McInstallerStartup.dll

2014-07-07 18:01:32 C4CF03B998D4D758B89CD07F22D7A7F9 645168 ----a-w- C:\Users\Roos\AppData\Local\Temp\MSS\3.8.150.1\McUICnt.exe

2014-07-07 17:54:35 5634C601025C31032A0AF1590B4C0CA6 43008 ----a-w- C:\Users\Roos\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpulm72d.dll

2014-07-06 13:01:49 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Users\Roos\AppData\Local\Temp\sysvszmq.dll

2014-06-26 21:50:43 CA52DFF54CDD68EBFB2EFE41276D5E58 277104 ----a-w- C:\Users\Roos\AppData\Local\Temp\MozUpdater\bgupdate-2\updater.exe

2014-06-26 21:50:27 CA52DFF54CDD68EBFB2EFE41276D5E58 277104 ----a-w- C:\Users\Roos\AppData\Local\Temp\MozUpdater\bgupdate-1\updater.exe

2014-06-26 21:50:19 CA52DFF54CDD68EBFB2EFE41276D5E58 277104 ----a-w- C:\Users\Roos\AppData\Local\Temp\MozUpdater\bgupdate\updater.exe

2014-06-26 21:01:45 5634C601025C31032A0AF1590B4C0CA6 43008 ----a-w- C:\Users\Raf\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp9i3syy.dll

====== Java Cache =====

====== C:\Windows\SysWOW64 =====

====== C:\Windows\SysWOW64\drivers =====

====== C:\Windows\Sysnative =====

====== C:\Windows\Sysnative\drivers =====

2014-06-11 10:02:54 17F685B67C74B8F7BFED4308790B71DE 288192 ----a-w- C:\Windows\Sysnative\drivers\FWPKCLNT.SYS

2014-06-11 10:02:54 04ADD18EE5CC9FBEDAEC1DD1CD0CB45E 1903552 ----a-w- C:\Windows\Sysnative\drivers\tcpip.sys

====== C:\Windows\Tasks ======

====== C:\Windows\Temp ======

======= C:\Program Files =====

2014-07-07 17:04:16 -------- d-----w- C:\Program Files\trend micro

======= C:\PROGRA~2 =====

======= C: =====

====== C:\Users\Roos\AppData\Roaming ======

2014-07-07 16:01:21 -------- d-sh--w- C:\Users\Roos\AppData\Locallow\EmieUserList

2014-07-07 16:01:21 -------- d-sh--w- C:\Users\Roos\AppData\Locallow\EmieSiteList

2014-07-07 13:05:46 -------- d-sh--w- C:\Users\Roos\AppData\Local\EmieUserList

2014-07-07 13:05:46 -------- d-sh--w- C:\Users\Roos\AppData\Local\EmieSiteList

2014-07-07 12:56:17 -------- d-----w- C:\Users\Roos\AppData\Local\ElevatedDiagnostics

====== C:\Users\Roos ======

2014-07-07 16:25:43 262EBC2884133A3AC89109D87829ED5B 29981224 ----a-w- C:\Users\Roos\Downloads\5100_nld_win2k_xp.exe

====== C: exe-files ==

2014-07-07 18:01:32 C4CF03B998D4D758B89CD07F22D7A7F9 645168 ----a-w- C:\Users\Roos\AppData\Local\Temp\MSS\3.8.150.1\McUICnt.exe

2014-07-07 17:04:16 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\Roos.exe

2014-07-07 17:03:58 8045ABB21A3BDD66A48E1ED5C0F0EF6A 1222144 ----a-w- C:\herstelmap pc\RSITx64.exe

2014-07-07 16:25:43 262EBC2884133A3AC89109D87829ED5B 29981224 ----a-w- C:\Users\Roos\Downloads\5100_nld_win2k_xp.exe

=== C: other files ==

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-21-1413599566-1329967044-1382984099-1000\Software\Microsoft\Windows\CurrentVersion\Run]

"Skype"="C:\Program Files (x86)\Skype\Phone\Skype.exe /minimized /regrun"

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"StartCCC"="C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe MSRun"

"IAStorIcon"="C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe"

"HP Quick Launch"="C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe"

"Adobe Reader Speed Launcher"="C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"

"Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

"Easybits Recovery"="C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe"

"HPOSD"="C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe"

"GrooveMonitor"="C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"

"Olympus ib"="C:\Program Files (x86)\Olympus\ib\olycamdetect.exe /Startup"

"MDS_Menu"="C:\Program Files (x86)\Olympus\ib\MUITransfer\MUIStartMenu.exe C:\Program Files (x86)\Olympus\ib UpdateWithCreateOnce Software\OLYMPUS\ib\1.0"

"HPConnectionManager"="C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe"

"SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"Skype"="C:\Program Files (x86)\Skype\Phone\Skype.exe /minimized /regrun"

==== Startup Registry Enabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IgfxTray"="C:\Windows\system32\igfxtray.exe"

"HotKeysCmds"="C:\Windows\system32\hkcmd.exe"

"Persistence"="C:\Windows\system32\igfxpers.exe"

"SynTPEnh"="%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe "

"SysTrayApp"="C:\Program Files\IDT\WDM\sttray64.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]

"NCPluginUpdater"="C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe Update"

==== Startup Folders ======================

2013-10-05 10:18:11 1046 ----a-w- C:\Users\Raf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

2010-02-01 08:13:17 1239 ----a-w- C:\Users\Roos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3 .lnk

==== Task Scheduler Jobs ======================

C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [16/05/2014 17:09]

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [02/02/2013 19:33]

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [02/02/2013 19:33]

C:\Windows\tasks\HPCeeScheduleForRoos.job --a------ C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [13/09/2010 22:15]

==== Other Scheduled Tasks ======================

"C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe]

"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]

"C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]

"C:\Windows\SysNative\tasks\HPCeeScheduleForRoos" [C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe]

"C:\Windows\SysNative\tasks\MirageAgent" [C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe]

"C:\Windows\SysNative\tasks\Norton WSC Integration" ["C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\WSCStub.exe"]

"C:\Windows\SysNative\tasks\Registration" ["C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe"]

"C:\Windows\SysNative\tasks\User_Feed_Synchronization-{7D60E71F-9576-456D-9960-72FAC07E2415}" [C:\Windows\system32\msfeedssync.exe]

"C:\Windows\SysNative\tasks\User_Feed_Synchronization-{7E52FD94-CE9D-423A-B8A6-2337A92AB41A}" [C:\Windows\system32\msfeedssync.exe]

"C:\Windows\SysNative\tasks\User_Feed_Synchronization-{85EA4649-007A-4D3F-A857-6E04E692CDC5}" [C:\Windows\system32\msfeedssync.exe]

"C:\Windows\SysNative\tasks\User_Feed_Synchronization-{F2B0F6D0-194B-4A06-98BF-E3BA260D236B}" [C:\Windows\system32\msfeedssync.exe]

"C:\Windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe]

"C:\Windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\HPSAObjUtilTask" [C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\UtilTask.exe]

"C:\Windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe]

"C:\Windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\Update Check" [C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe]

"C:\Windows\SysNative\tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan" [C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe]

"C:\Windows\SysNative\tasks\Norton 360\Norton Error Analyzer" [C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\SymErr.exe]

"C:\Windows\SysNative\tasks\Norton 360\Norton Error Processor" [C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\SymErr.exe]

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]

"{BBDA0591-3099-440a-AA10-41764D9DB4DB}"="C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.3.0.12\IPSFF" [26/06/2014 22:47]

==== Firefox Extensions ======================

ProfilePath: C:\Users\MATS\AppData\Roaming\Mozilla\Firefox\Profiles\h4gsv3n4.default

- Yahoo Toolbar - %ProfilePath%\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}

ProfilePath: C:\Users\Raf\AppData\Roaming\Mozilla\Firefox\Profiles\iwwzfuta.default

- Yahoo Toolbar - %ProfilePath%\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}

ProfilePath: C:\Users\Teun\AppData\Roaming\Mozilla\Firefox\Profiles\k9a3clk9.default

- Yahoo Toolbar - %ProfilePath%\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}

AppDir: C:\Program Files (x86)\Mozilla Firefox

- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

- Skype Click to Call - %AppDir%\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi

==== Firefox Plugins ======================

Profilepath: C:\Users\Roos\AppData\Roaming\Mozilla\Firefox\Profiles\uelon7rk.default

A58DE0A570148AF5FF3512B2A340D09F - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll - Shockwave Flash

6846D2CA7E1D5937AEE3F99BB7F5464B - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1168638.dll - Shockwave for Director / Shockwave for Director

855B79451ECF62602F20EB4D5C71F99B - C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll - Shockwave for Director / Shockwave for Director

==== Deleted Firefox Extensions ======================

C:\Users\MATS\AppData\Roaming\Mozilla\Firefox\Profiles\h4gsv3n4.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} deleted

C:\Users\Raf\AppData\Roaming\Mozilla\Firefox\Profiles\iwwzfuta.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} deleted

C:\Users\Teun\AppData\Roaming\Mozilla\Firefox\Profiles\k9a3clk9.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} deleted

==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions

lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx[11/04/2014 19:46]

mkfokfffehpeedafpekjeddnmnjhmcmk - C:\Program Files (x86)\Norton 360\Engine\21.3.0.12\Exts\Chrome.crx[28/04/2014 14:52]

Docs - MATS\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake

Google Drive - MATS\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf

YouTube - MATS\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo

Google Search - MATS\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf

Norton Identity Protection - MATS\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk

Gmail - MATS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

Google Docs - Raf\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake

Google Drive - Raf\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf

YouTube - Raf\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo

Google Search - Raf\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf

Norton Identity Protection - Raf\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk

Google Wallet - Raf\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda

Gmail - Raf\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

Google Docs - Roos\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake

Google Drive - Roos\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf

Norton Identity Safe for Google Chrome™ - Roos\AppData\Local\Google\Chrome\User Data\Default\Extensions\bejnhdlplbjhffionohbdnpcbobfejcc

YouTube - Roos\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo

Google Search - Roos\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf

Google Wallet - Roos\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda

Gmail - Roos\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

Docs - Teun\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake

Google Drive - Teun\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf

YouTube - Teun\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo

Google Search - Teun\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf

Norton Identity Protection - Teun\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk

Gmail - Teun\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

==== Set IE to Default ======================

Old Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="Google"

"Default_Page_URL"="Bing"

"Search Page"="Google"

"Search Bar"="Upgrade to Google Chrome"

"Default_Search_URL"="Upgrade to Google Chrome"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]

@="%s - Google Search"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]

"SearchAssistant"="Upgrade to Google Chrome"

"Default_Search_URL"="Upgrade to Google Chrome"

New Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Search Page"="Bing"

"Search Bar"="Bing"

"Default_Search_URL"="Bing"

"Default_Page_URL"="MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!"

"Start Page"="Google"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]

"(Default)"="%s - Bing"

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search]

"Default_Search_URL"="Bing"

"SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="{searchTerms} - Bing"

{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="{searchTerms} - Google Search}"

{C73DE029-FCE3-4075-9F3C-669C2C8C79E5} Google Url="{searchTerms} - Google Search"

{d43b3890-80c7-4010-a95d-1e77b5924dc3} Wikipedia Url="{searchTerms - Search results - Wikipedia, the free encyclopedia}"

{D944BB61-2E34-4DBF-A683-47E505C587DC} eBay Url="{searchTerms | eBay}"

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\65F8E9A2B13CBBD4FB2EF0E48C913255 deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F60730A4A66673047777F5728467D401 deleted successfully

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0} deleted successfully

HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4A03706F-666A-4037-7777-5F2748764D10} deleted successfully

HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{2A9E8F56-C31B-4DBB-BFE2-0F4EC8192355} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\65F8E9A2B13CBBD4FB2EF0E48C913255 deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\F60730A4A66673047777F5728467D401 deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\MATS\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\MATS\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully

C:\Users\MATS\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\Raf\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\Raf\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully

C:\Users\Raf\AppData\Local\Temp\acro_rd_dir\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\Raf\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\Roos\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\Roos\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully

C:\Users\Roos\AppData\Local\Temp\acro_rd_dir\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\Roos\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\Teun\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\Teun\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully

C:\Users\Teun\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

C:\Users\MATS\AppData\Local\Mozilla\Firefox\Profiles\h4gsv3n4.default\Cache emptied successfully

C:\Users\Raf\AppData\Local\Mozilla\Firefox\Profiles\iwwzfuta.default\Cache emptied successfully

C:\Users\Roos\AppData\Local\Mozilla\Firefox\Profiles\uelon7rk.default\Cache emptied successfully

C:\Users\Teun\AppData\Local\Mozilla\Firefox\Profiles\k9a3clk9.default\Cache emptied successfully

==== Empty Chrome Cache ======================

C:\Users\MATS\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

C:\Users\Raf\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

C:\Users\Roos\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

C:\Users\Teun\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=552 folders=62 9485011 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully

C:\Users\MATS\AppData\Local\Temp emptied successfully

C:\Users\Raf\AppData\Local\Temp emptied successfully

C:\Users\Roos\AppData\Local\Temp will be emptied at reboot

C:\Users\Teun\AppData\Local\Temp emptied successfully

C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully

C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully

C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied

C:\Users\Roos\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on ma 07/07/2014 at 20:32:42,98 ======================

Link naar reactie
Delen op andere sites

Download adwcleaner.pngAdwCleaner by Xplode naar het bureaublad.

  • Sluit alle openstaande vensters.
  • Dubbelklik op AdwCleaner om hem te starten.
  • Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren,
  • Door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
  • Klik op Scan.
  • Klik vervolgens op Clean.
  • Klik bij Herstarten Noodzakelijk op OK

Nadat de PC opnieuw is opgestart, opent meestal een logfile.

Anders is het hier terug te vinden C:\AdwCleaner\AdwCleaner[s0].txt.

Logbestand plaatsen

  • Voeg het logbestand met de naam C:\AdwCleaner\AdwCleaner[s0].txt als bijlage toe aan het volgende bericht.
  • Hoe u een bijlage kunt toevoegen aan het bericht leest u hier.

Link naar reactie
Delen op andere sites

# AdwCleaner v3.214 - Rapport aangemaakt 08/07/2014 op 09:16:56

# Laatste Update 29/06/2014 door Xplode

# Besturingssysteem : Windows 7 Home Premium Service Pack 1 (64 bits)

# Gebruikersnaam : Roos - ROOS-HP

# Gestart vanuit : C:\herstelmap pc\adwcleaner\adwcleaner_3.214.exe

# Optie : Verwijderen

***** [ Services ] *****

***** [ Bestanden / Mappen ] *****

***** [ Snelkoppelingen ] *****

***** [ Register ] *****

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}

Sleutel Verwijderd : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}

Sleutel Verwijderd : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}

Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}

Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}

Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}

Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}

Sleutel Verwijderd : HKCU\Software\APN

Sleutel Verwijderd : HKCU\Software\Ask.com

Sleutel Verwijderd : HKCU\Software\AppDataLow\Software\AskToolbar

Sleutel Verwijderd : HKLM\Software\APN

Sleutel Verwijderd : HKLM\Software\AskToolbar

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}

Sleutel Verwijderd : HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF

Sleutel Verwijderd : HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17126

-\\ Mozilla Firefox v29.0.1 (en-US)

[ Bestand : C:\Users\MATS\AppData\Roaming\Mozilla\Firefox\Profiles\h4gsv3n4.default\prefs.js ]

[ Bestand : C:\Users\Raf\AppData\Roaming\Mozilla\Firefox\Profiles\iwwzfuta.default\prefs.js ]

[ Bestand : C:\Users\Roos\AppData\Roaming\Mozilla\Firefox\Profiles\uelon7rk.default\prefs.js ]

[ Bestand : C:\Users\Teun\AppData\Roaming\Mozilla\Firefox\Profiles\k9a3clk9.default\prefs.js ]

-\\ Google Chrome v35.0.1916.153

[ Bestand : C:\Users\MATS\AppData\Local\Google\Chrome\User Data\Default\preferences ]

[ Bestand : C:\Users\Raf\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Verwijderd [Extension] : bopakagnckmlgajfccecajhnimjiiedh

[ Bestand : C:\Users\Roos\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Verwijderd [Extension] : bopakagnckmlgajfccecajhnimjiiedh

[ Bestand : C:\Users\Teun\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Verwijderd [Extension] : dhdepfaagokllfmhfbcfmocaeigmoebo

Verwijderd [Extension] : hphibigbodkkohoglgfkddblldpfohjl

Verwijderd [Extension] : kdcnnmifdmlmjffdgeieikcokcogpbej

Verwijderd [Extension] : kincjchfokkeneeofpeefomkikfkiedl

Verwijderd [Extension] : kkkeikdkpjenmoiicggnnodbkebafgpc

Verwijderd [Extension] : pgmfkblbflahhponhjmkcnpjinenhlnc

*************************

AdwCleaner[R0].txt - [5453 octets] - [08/07/2014 09:08:36]

AdwCleaner[s0].txt - [5107 octets] - [08/07/2014 09:16:56]

########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [5167 octets] ##########

Link naar reactie
Delen op andere sites

De malware is mooi opgeruimd.

Probeer nu of je de pc in normale modus kan opstarten.

Doe dan het volgende.

Download Blue Screen View.

Start het programma op.

Je zal nu een overzicht krijgen van de laatste foutmeldingen en Minidumps (.dmp-bestand).

Selecteer het eerste bestand uit de lijst onder Dump File en druk op Ctrl+A

Klik vervolgens op File (Bestand) en daarna op Save Selected Items (geselecteerde items opslaan) (Ctrl+S)

Sla het bestand op je bureaublad op.

Voeg nu het bestand als bijlage toe aan je volgend bericht.

Dit kan je desnoods ook uitvoeren in veilige modus.

Link naar reactie
Delen op andere sites

Beste,

Ik heb dit nog steeds uitgevoerd in veilige modus.

De reden: deze ochtend had ik nog een dump zoals je kan merken in de bestanden.

Van harte dank voor al het begeleidingswerk.

mvg

serjo

==================================================

Dump File : 070814-28719-01.dmp

Crash Time : 8/07/2014 9:25:51

Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA

Bug Check Code : 0x00000050

Parameter 1 : fffff880`ea4fe560

Parameter 2 : 00000000`00000000

Parameter 3 : fffff880`059805a8

Parameter 4 : 00000000`00000005

Caused By Driver : atikmdag.sys

Caused By Address : atikmdag.sys+e547f

File Description : ATI Radeon Kernel Mode Driver

Product Name : ATI Radeon Family

Company : ATI Technologies Inc.

File Version : 8.01.01.1114

Processor : x64

Crash Address : ntoskrnl.exe+75bc0

Stack Address 1 :

Stack Address 2 :

Stack Address 3 :

Computer Name :

Full Path : C:\Windows\Minidump\070814-28719-01.dmp

Processors Count : 4

Major Version : 15

Minor Version : 7601

Dump File Size : 262.144

Dump File Time : 8/07/2014 9:27:07

==================================================

==================================================

Dump File : 070814-27861-01.dmp

Crash Time : 7/07/2014 23:15:12

Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA

Bug Check Code : 0x00000050

Parameter 1 : fffff880`fcd64560

Parameter 2 : 00000000`00000000

Parameter 3 : fffff880`059665a8

Parameter 4 : 00000000`00000005

Caused By Driver : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+75bc0

File Description : NT Kernel & System

Product Name : Microsoft® Windows® Operating System

Company : Microsoft Corporation

File Version : 6.1.7601.18409 (win7sp1_gdr.140303-2144)

Processor : x64

Crash Address : ntoskrnl.exe+75bc0

Stack Address 1 :

Stack Address 2 :

Stack Address 3 :

Computer Name :

Full Path : C:\Windows\Minidump\070814-27861-01.dmp

Processors Count : 4

Major Version : 15

Minor Version : 7601

Dump File Size : 262.144

Dump File Time : 8/07/2014 8:40:55

==================================================

==================================================

Dump File : 070714-76658-01.dmp

Crash Time : 7/07/2014 22:09:41

Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA

Bug Check Code : 0x00000050

Parameter 1 : fffff881`23c3f560

Parameter 2 : 00000000`00000000

Parameter 3 : fffff880`059a15a8

Parameter 4 : 00000000`00000005

Caused By Driver : iaStor.sys

Caused By Address : iaStor.sys+21a67

File Description : Intel Rapid Storage Technology driver - x64

Product Name : Intel Rapid Storage Technology driver

Company : Intel Corporation

File Version : 10.1.2.1004

Processor : x64

Crash Address : ntoskrnl.exe+75bc0

Stack Address 1 :

Stack Address 2 :

Stack Address 3 :

Computer Name :

Full Path : C:\Windows\Minidump\070714-76658-01.dmp

Processors Count : 4

Major Version : 15

Minor Version : 7601

Dump File Size : 262.144

Dump File Time : 7/07/2014 22:11:43

==================================================

==================================================

Dump File : 070714-78811-01.dmp

Crash Time : 7/07/2014 20:53:21

Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA

Bug Check Code : 0x00000050

Parameter 1 : fffff881`0efd7560

Parameter 2 : 00000000`00000000

Parameter 3 : fffff880`059795a8

Parameter 4 : 00000000`00000005

Caused By Driver : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+75bc0

File Description : NT Kernel & System

Product Name : Microsoft® Windows® Operating System

Company : Microsoft Corporation

File Version : 6.1.7601.18409 (win7sp1_gdr.140303-2144)

Processor : x64

Crash Address : ntoskrnl.exe+75bc0

Stack Address 1 :

Stack Address 2 :

Stack Address 3 :

Computer Name :

Full Path : C:\Windows\Minidump\070714-78811-01.dmp

Processors Count : 4

Major Version : 15

Minor Version : 7601

Dump File Size : 262.144

Dump File Time : 7/07/2014 20:55:28

==================================================

==================================================

Dump File : 070714-36395-01.dmp

Crash Time : 7/07/2014 19:58:19

Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA

Bug Check Code : 0x00000050

Parameter 1 : fffff881`2d4eb560

Parameter 2 : 00000000`00000000

Parameter 3 : fffff880`0675b5a8

Parameter 4 : 00000000`00000005

Caused By Driver : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+75bc0

File Description : NT Kernel & System

Product Name : Microsoft® Windows® Operating System

Company : Microsoft Corporation

File Version : 6.1.7601.18409 (win7sp1_gdr.140303-2144)

Processor : x64

Crash Address : ntoskrnl.exe+75bc0

Stack Address 1 :

Stack Address 2 :

Stack Address 3 :

Computer Name :

Full Path : C:\Windows\Minidump\070714-36395-01.dmp

Processors Count : 4

Major Version : 15

Minor Version : 7601

Dump File Size : 262.144

Dump File Time : 7/07/2014 19:59:40

==================================================

==================================================

Dump File : 070714-64132-01.dmp

Crash Time : 7/07/2014 19:51:28

Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA

Bug Check Code : 0x00000050

Parameter 1 : fffff881`1ab16560

Parameter 2 : 00000000`00000000

Parameter 3 : fffff880`067665a8

Parameter 4 : 00000000`00000005

Caused By Driver : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+75bc0

File Description : NT Kernel & System

Product Name : Microsoft® Windows® Operating System

Company : Microsoft Corporation

File Version : 6.1.7601.18409 (win7sp1_gdr.140303-2144)

Processor : x64

Crash Address : ntoskrnl.exe+75bc0

Stack Address 1 :

Stack Address 2 :

Stack Address 3 :

Computer Name :

Full Path : C:\Windows\Minidump\070714-64132-01.dmp

Processors Count : 4

Major Version : 15

Minor Version : 7601

Dump File Size : 262.144

Dump File Time : 7/07/2014 19:53:09

==================================================

==================================================

Dump File : 070714-49311-01.dmp

Crash Time : 7/07/2014 18:06:33

Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA

Bug Check Code : 0x00000050

Parameter 1 : fffff881`2f46c560

Parameter 2 : 00000000`00000000

Parameter 3 : fffff880`0678e5a8

Parameter 4 : 00000000`00000005

Caused By Driver : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+75bc0

File Description : NT Kernel & System

Product Name : Microsoft® Windows® Operating System

Company : Microsoft Corporation

File Version : 6.1.7601.18409 (win7sp1_gdr.140303-2144)

Processor : x64

Crash Address : ntoskrnl.exe+75bc0

Stack Address 1 :

Stack Address 2 :

Stack Address 3 :

Computer Name :

Full Path : C:\Windows\Minidump\070714-49311-01.dmp

Processors Count : 4

Major Version : 15

Minor Version : 7601

Dump File Size : 262.144

Dump File Time : 7/07/2014 18:08:03

==================================================

==================================================

Dump File : 070714-46753-01.dmp

Crash Time : 7/07/2014 12:02:40

Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA

Bug Check Code : 0x00000050

Parameter 1 : fffff881`2bdc2560

Parameter 2 : 00000000`00000000

Parameter 3 : fffff880`059a45a8

Parameter 4 : 00000000`00000005

Caused By Driver : iaStor.sys

Caused By Address : iaStor.sys+6388

File Description : Intel Rapid Storage Technology driver - x64

Product Name : Intel Rapid Storage Technology driver

Company : Intel Corporation

File Version : 10.1.2.1004

Processor : x64

Crash Address : ntoskrnl.exe+75bc0

Stack Address 1 :

Stack Address 2 :

Stack Address 3 :

Computer Name :

Full Path : C:\Windows\Minidump\070714-46753-01.dmp

Processors Count : 4

Major Version : 15

Minor Version : 7601

Dump File Size : 262.144

Dump File Time : 7/07/2014 12:04:11

==================================================

==================================================

Dump File : 070714-52806-01.dmp

Crash Time : 7/07/2014 11:53:03

Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA

Bug Check Code : 0x00000050

Parameter 1 : fffff881`4627a560

Parameter 2 : 00000000`00000000

Parameter 3 : fffff880`0675c5a8

Parameter 4 : 00000000`00000005

Caused By Driver : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+75bc0

File Description : NT Kernel & System

Product Name : Microsoft® Windows® Operating System

Company : Microsoft Corporation

File Version : 6.1.7601.18409 (win7sp1_gdr.140303-2144)

Processor : x64

Crash Address : ntoskrnl.exe+75bc0

Stack Address 1 :

Stack Address 2 :

Stack Address 3 :

Computer Name :

Full Path : C:\Windows\Minidump\070714-52806-01.dmp

Processors Count : 4

Major Version : 15

Minor Version : 7601

Dump File Size : 262.144

Dump File Time : 7/07/2014 11:54:26

==================================================

==================================================

Dump File : 070614-22854-01.dmp

Crash Time : 6/07/2014 16:39:42

Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA

Bug Check Code : 0x00000050

Parameter 1 : fffff880`f9274560

Parameter 2 : 00000000`00000000

Parameter 3 : fffff880`067645a8

Parameter 4 : 00000000`00000005

Caused By Driver : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+75bc0

File Description : NT Kernel & System

Product Name : Microsoft® Windows® Operating System

Company : Microsoft Corporation

File Version : 6.1.7601.18409 (win7sp1_gdr.140303-2144)

Processor : x64

Crash Address : ntoskrnl.exe+75bc0

Stack Address 1 :

Stack Address 2 :

Stack Address 3 :

Computer Name :

Full Path : C:\Windows\Minidump\070614-22854-01.dmp

Processors Count : 4

Major Version : 15

Minor Version : 7601

Dump File Size : 262.144

Dump File Time : 6/07/2014 16:40:59

==================================================

==================================================

Dump File : 070614-52057-01.dmp

Crash Time : 6/07/2014 14:59:06

Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA

Bug Check Code : 0x00000050

Parameter 1 : fffff881`26ed2560

Parameter 2 : 00000000`00000000

Parameter 3 : fffff880`067825a8

Parameter 4 : 00000000`00000005

Caused By Driver : iaStor.sys

Caused By Address : iaStor.sys+21a01

File Description : Intel Rapid Storage Technology driver - x64

Product Name : Intel Rapid Storage Technology driver

Company : Intel Corporation

File Version : 10.1.2.1004

Processor : x64

Crash Address : ntoskrnl.exe+75bc0

Stack Address 1 :

Stack Address 2 :

Stack Address 3 :

Computer Name :

Full Path : C:\Windows\Minidump\070614-52057-01.dmp

Processors Count : 4

Major Version : 15

Minor Version : 7601

Dump File Size : 262.144

Dump File Time : 6/07/2014 15:00:28

==================================================

==================================================

Dump File : 070214-45692-01.dmp

Crash Time : 2/07/2014 9:33:07

Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA

Bug Check Code : 0x00000050

Parameter 1 : fffff881`28f1dd60

Parameter 2 : 00000000`00000000

Parameter 3 : fffff880`067855a8

Parameter 4 : 00000000`00000005

Caused By Driver : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+75bc0

File Description : NT Kernel & System

Product Name : Microsoft® Windows® Operating System

Company : Microsoft Corporation

File Version : 6.1.7601.18409 (win7sp1_gdr.140303-2144)

Processor : x64

Crash Address : ntoskrnl.exe+75bc0

Stack Address 1 :

Stack Address 2 :

Stack Address 3 :

Computer Name :

Full Path : C:\Windows\Minidump\070214-45692-01.dmp

Processors Count : 4

Major Version : 15

Minor Version : 7601

Dump File Size : 262.144

Dump File Time : 2/07/2014 9:34:28

==================================================

==================================================

Dump File : 070114-26254-01.dmp

Crash Time : 1/07/2014 21:00:04

Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA

Bug Check Code : 0x00000050

Parameter 1 : fffff880`a671c560

Parameter 2 : 00000000`00000000

Parameter 3 : fffff880`0676c5a8

Parameter 4 : 00000000`00000005

Caused By Driver : dxgmms1.sys

Caused By Address : dxgmms1.sys+c194

File Description : DirectX Graphics MMS

Product Name : Microsoft® Windows® Operating System

Company : Microsoft Corporation

File Version : 6.1.7601.18126 (win7sp1_gdr.130409-1534)

Processor : x64

Crash Address : ntoskrnl.exe+75bc0

Stack Address 1 :

Stack Address 2 :

Stack Address 3 :

Computer Name :

Full Path : C:\Windows\Minidump\070114-26254-01.dmp

Processors Count : 4

Major Version : 15

Minor Version : 7601

Dump File Size : 262.144

Dump File Time : 1/07/2014 21:01:32

==================================================

==================================================

Dump File : 070114-19110-01.dmp

Crash Time : 1/07/2014 18:58:02

Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA

Bug Check Code : 0x00000050

Parameter 1 : fffff881`1ead4560

Parameter 2 : 00000000`00000000

Parameter 3 : fffff880`0675b5a8

Parameter 4 : 00000000`00000005

Caused By Driver : i8042prt.sys

Caused By Address : i8042prt.sys+8c1d

File Description : i8042-poortstuurprogramma

Product Name : Besturingssysteem Microsoft® Windows®

Company : Microsoft Corporation

File Version : 6.1.7600.16385 (win7_rtm.090713-1255)

Processor : x64

Crash Address : ntoskrnl.exe+75bc0

Stack Address 1 :

Stack Address 2 :

Stack Address 3 :

Computer Name :

Full Path : C:\Windows\Minidump\070114-19110-01.dmp

Processors Count : 4

Major Version : 15

Minor Version : 7601

Dump File Size : 262.144

Dump File Time : 1/07/2014 18:58:57

==================================================

==================================================

Dump File : 070114-24460-01.dmp

Crash Time : 1/07/2014 18:48:31

Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA

Bug Check Code : 0x00000050

Parameter 1 : fffff880`9bb36560

Parameter 2 : 00000000`00000000

Parameter 3 : fffff880`067785a8

Parameter 4 : 00000000`00000005

Caused By Driver : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+75bc0

File Description : NT Kernel & System

Product Name : Microsoft® Windows® Operating System

Company : Microsoft Corporation

File Version : 6.1.7601.18409 (win7sp1_gdr.140303-2144)

Processor : x64

Crash Address : ntoskrnl.exe+75bc0

Stack Address 1 :

Stack Address 2 :

Stack Address 3 :

Computer Name :

Full Path : C:\Windows\Minidump\070114-24460-01.dmp

Processors Count : 4

Major Version : 15

Minor Version : 7601

Dump File Size : 262.144

Dump File Time : 1/07/2014 18:49:54

==================================================

==================================================

Dump File : 070114-19000-01.dmp

Crash Time : 1/07/2014 17:26:12

Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA

Bug Check Code : 0x00000050

Parameter 1 : fffff881`0b306560

Parameter 2 : 00000000`00000000

Parameter 3 : fffff880`067765a8

Parameter 4 : 00000000`00000005

Caused By Driver : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+75bc0

File Description : NT Kernel & System

Product Name : Microsoft® Windows® Operating System

Company : Microsoft Corporation

File Version : 6.1.7601.18409 (win7sp1_gdr.140303-2144)

Processor : x64

Crash Address : ntoskrnl.exe+75bc0

Stack Address 1 :

Stack Address 2 :

Stack Address 3 :

Computer Name :

Full Path : C:\Windows\Minidump\070114-19000-01.dmp

Processors Count : 4

Major Version : 15

Minor Version : 7601

Dump File Size : 262.144

Dump File Time : 1/07/2014 17:27:18

==================================================

==================================================

Dump File : 070114-24913-01.dmp

Crash Time : 1/07/2014 17:19:17

Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA

Bug Check Code : 0x00000050

Parameter 1 : fffff881`28bcd560

Parameter 2 : 00000000`00000000

Parameter 3 : fffff880`0675d5a8

Parameter 4 : 00000000`00000005

Caused By Driver : atikmpag.sys

Caused By Address : atikmpag.sys+558d

File Description : AMD multi-vendor Miniport Driver

Product Name : AMD driver

Company : Advanced Micro Devices, Inc.

File Version : 8.14.01.6178

Processor : x64

Crash Address : ntoskrnl.exe+75bc0

Stack Address 1 :

Stack Address 2 :

Stack Address 3 :

Computer Name :

Full Path : C:\Windows\Minidump\070114-24913-01.dmp

Processors Count : 4

Major Version : 15

Minor Version : 7601

Dump File Size : 262.144

Dump File Time : 1/07/2014 17:20:39

==================================================

==================================================

Dump File : 062714-28875-01.dmp

Crash Time : 27/06/2014 11:48:01

Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA

Bug Check Code : 0x00000050

Parameter 1 : fffff881`3635d560

Parameter 2 : 00000000`00000000

Parameter 3 : fffff880`0679f5a8

Parameter 4 : 00000000`00000005

Caused By Driver : SynTP.sys

Caused By Address : SynTP.sys+17a54

File Description : Synaptics Touchpad Driver

Product Name : Synaptics Pointing Device Driver

Company : Synaptics Incorporated

File Version : 15.2.4.4 15Dec10

Processor : x64

Crash Address : ntoskrnl.exe+75bc0

Stack Address 1 :

Stack Address 2 :

Stack Address 3 :

Computer Name :

Full Path : C:\Windows\Minidump\062714-28875-01.dmp

Processors Count : 4

Major Version : 15

Minor Version : 7601

Dump File Size : 262.144

Dump File Time : 27/06/2014 11:48:56

==================================================

==================================================

Dump File : 062714-22635-01.dmp

Crash Time : 27/06/2014 0:08:27

Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA

Bug Check Code : 0x00000050

Parameter 1 : fffff881`24256560

Parameter 2 : 00000000`00000000

Parameter 3 : fffff880`059a65a8

Parameter 4 : 00000000`00000005

Caused By Driver : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+75bc0

File Description : NT Kernel & System

Product Name : Microsoft® Windows® Operating System

Company : Microsoft Corporation

File Version : 6.1.7601.18409 (win7sp1_gdr.140303-2144)

Processor : x64

Crash Address : ntoskrnl.exe+75bc0

Stack Address 1 :

Stack Address 2 :

Stack Address 3 :

Computer Name :

Full Path : C:\Windows\Minidump\062714-22635-01.dmp

Processors Count : 4

Major Version : 15

Minor Version : 7601

Dump File Size : 262.144

Dump File Time : 27/06/2014 0:09:27

==================================================

==================================================

Dump File : 062714-29499-01.dmp

Crash Time : 27/06/2014 0:00:21

Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA

Bug Check Code : 0x00000050

Parameter 1 : fffff881`226b6560

Parameter 2 : 00000000`00000000

Parameter 3 : fffff880`067a65a8

Parameter 4 : 00000000`00000005

Caused By Driver : atikmpag.sys

Caused By Address : atikmpag.sys+485c

File Description : AMD multi-vendor Miniport Driver

Product Name : AMD driver

Company : Advanced Micro Devices, Inc.

File Version : 8.14.01.6178

Processor : x64

Crash Address : ntoskrnl.exe+75bc0

Stack Address 1 :

Stack Address 2 :

Stack Address 3 :

Computer Name :

Full Path : C:\Windows\Minidump\062714-29499-01.dmp

Processors Count : 4

Major Version : 15

Minor Version : 7601

Dump File Size : 262.144

Dump File Time : 27/06/2014 0:01:21

==================================================

==================================================

Dump File : 062614-31777-01.dmp

Crash Time : 26/06/2014 23:51:00

Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA

Bug Check Code : 0x00000050

Parameter 1 : fffff881`3a76f560

Parameter 2 : 00000000`00000000

Parameter 3 : fffff880`0675f5a8

Parameter 4 : 00000000`00000005

Caused By Driver : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+75bc0

File Description : NT Kernel & System

Product Name : Microsoft® Windows® Operating System

Company : Microsoft Corporation

File Version : 6.1.7601.18409 (win7sp1_gdr.140303-2144)

Processor : x64

Crash Address : ntoskrnl.exe+75bc0

Stack Address 1 :

Stack Address 2 :

Stack Address 3 :

Computer Name :

Full Path : C:\Windows\Minidump\062614-31777-01.dmp

Processors Count : 4

Major Version : 15

Minor Version : 7601

Dump File Size : 262.144

Dump File Time : 26/06/2014 23:52:04

==================================================

==================================================

Dump File : 062614-42401-01.dmp

Crash Time : 26/06/2014 23:09:03

Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA

Bug Check Code : 0x00000050

Parameter 1 : fffff881`1e9ea560

Parameter 2 : 00000000`00000000

Parameter 3 : fffff880`0675a5a8

Parameter 4 : 00000000`00000005

Caused By Driver : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+75bc0

File Description : NT Kernel & System

Product Name : Microsoft® Windows® Operating System

Company : Microsoft Corporation

File Version : 6.1.7601.18409 (win7sp1_gdr.140303-2144)

Processor : x64

Crash Address : ntoskrnl.exe+75bc0

Stack Address 1 :

Stack Address 2 :

Stack Address 3 :

Computer Name :

Full Path : C:\Windows\Minidump\062614-42401-01.dmp

Processors Count : 4

Major Version : 15

Minor Version : 7601

Dump File Size : 262.144

Dump File Time : 26/06/2014 23:10:39

==================================================

==================================================

Dump File : 062614-41714-01.dmp

Crash Time : 26/06/2014 22:59:08

Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA

Bug Check Code : 0x00000050

Parameter 1 : fffff881`1ff2fd60

Parameter 2 : 00000000`00000000

Parameter 3 : fffff880`067765a8

Parameter 4 : 00000000`00000005

Caused By Driver : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+75bc0

File Description : NT Kernel & System

Product Name : Microsoft® Windows® Operating System

Company : Microsoft Corporation

File Version : 6.1.7601.18409 (win7sp1_gdr.140303-2144)

Processor : x64

Crash Address : ntoskrnl.exe+75bc0

Stack Address 1 :

Stack Address 2 :

Stack Address 3 :

Computer Name :

Full Path : C:\Windows\Minidump\062614-41714-01.dmp

Processors Count : 4

Major Version : 15

Minor Version : 7601

Dump File Size : 262.144

Dump File Time : 26/06/2014 23:00:42

==================================================

==================================================

Dump File : 062614-37455-01.dmp

Crash Time : 26/06/2014 22:51:56

Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA

Bug Check Code : 0x00000050

Parameter 1 : fffff881`33c73560

Parameter 2 : 00000000`00000000

Parameter 3 : fffff880`059a35a8

Parameter 4 : 00000000`00000005

Caused By Driver : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+75bc0

File Description : NT Kernel & System

Product Name : Microsoft® Windows® Operating System

Company : Microsoft Corporation

File Version : 6.1.7601.18409 (win7sp1_gdr.140303-2144)

Processor : x64

Crash Address : ntoskrnl.exe+75bc0

Stack Address 1 :

Stack Address 2 :

Stack Address 3 :

Computer Name :

Full Path : C:\Windows\Minidump\062614-37455-01.dmp

Processors Count : 4

Major Version : 15

Minor Version : 7601

Dump File Size : 262.144

Dump File Time : 26/06/2014 22:53:34

==================================================

==================================================

Dump File : 013014-38438-01.dmp

Crash Time : 30/01/2014 22:59:20

Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA

Bug Check Code : 0x00000050

Parameter 1 : fffff881`387aa560

Parameter 2 : 00000000`00000000

Parameter 3 : fffff880`0697a5a8

Parameter 4 : 00000000`00000005

Caused By Driver : SynTP.sys

Caused By Address : SynTP.sys+17a54

File Description : Synaptics Touchpad Driver

Product Name : Synaptics Pointing Device Driver

Company : Synaptics Incorporated

File Version : 15.2.4.4 15Dec10

Processor : x64

Crash Address : ntoskrnl.exe+75bc0

Stack Address 1 :

Stack Address 2 :

Stack Address 3 :

Computer Name :

Full Path : C:\Windows\Minidump\013014-38438-01.dmp

Processors Count : 4

Major Version : 15

Minor Version : 7601

Dump File Size : 262.144

Dump File Time : 30/01/2014 23:00:56

==================================================

==================================================

Dump File : 111813-32729-01.dmp

Crash Time : 18/11/2013 14:45:58

Bug Check String : PAGE_FAULT_IN_NONPAGED_AREA

Bug Check Code : 0x00000050

Parameter 1 : fffff881`16944560

Parameter 2 : 00000000`00000000

Parameter 3 : fffff880`059945a8

Parameter 4 : 00000000`00000005

Caused By Driver : SynTP.sys

Caused By Address : SynTP.sys+15526

File Description : Synaptics Touchpad Driver

Product Name : Synaptics Pointing Device Driver

Company : Synaptics Incorporated

File Version : 15.2.4.4 15Dec10

Processor : x64

Crash Address : ntoskrnl.exe+75bc0

Stack Address 1 :

Stack Address 2 :

Stack Address 3 :

Computer Name :

Full Path : C:\Windows\Minidump\111813-32729-01.dmp

Processors Count : 4

Major Version : 15

Minor Version : 7601

Dump File Size : 262.144

Dump File Time : 18/11/2013 14:47:01

==================================================

==================================================

Dump File : 070313-25989-01.dmp

Crash Time : 3/07/2013 9:53:08

Bug Check String : DRIVER_POWER_STATE_FAILURE

Bug Check Code : 0x1000009f

Parameter 1 : 00000000`00000004

Parameter 2 : 00000000`00000258

Parameter 3 : fffffa80`042e2660

Parameter 4 : fffff800`00b9c3d0

Caused By Driver : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+78a7a

File Description : NT Kernel & System

Product Name : Microsoft® Windows® Operating System

Company : Microsoft Corporation

File Version : 6.1.7601.18409 (win7sp1_gdr.140303-2144)

Processor : x64

Crash Address : ntoskrnl.exe+78a7a

Stack Address 1 :

Stack Address 2 :

Stack Address 3 :

Computer Name :

Full Path : C:\Windows\Minidump\070313-25989-01.dmp

Processors Count : 4

Major Version : 15

Minor Version : 7601

Dump File Size : 513.736

Dump File Time : 3/07/2013 9:54:29

==================================================

==================================================

Dump File : 111112-27003-01.dmp

Crash Time : 11/11/2012 10:47:26

Bug Check String : KMODE_EXCEPTION_NOT_HANDLED

Bug Check Code : 0x0000001e

Parameter 1 : 00000000`00000000

Parameter 2 : 00000000`00000000

Parameter 3 : 00000000`00000000

Parameter 4 : 00000000`00000000

Caused By Driver : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+7ef90

File Description : NT Kernel & System

Product Name : Microsoft® Windows® Operating System

Company : Microsoft Corporation

File Version : 6.1.7601.18409 (win7sp1_gdr.140303-2144)

Processor : x64

Crash Address : ntoskrnl.exe+7ef90

Stack Address 1 :

Stack Address 2 :

Stack Address 3 :

Computer Name :

Full Path : C:\Windows\Minidump\111112-27003-01.dmp

Processors Count : 4

Major Version : 15

Minor Version : 7601

Dump File Size : 262.144

Dump File Time : 11/11/2012 10:48:23

==================================================

==================================================

Dump File : 040310-30669-01.dmp

Crash Time : 3/04/2010 22:47:57

Bug Check String : KMODE_EXCEPTION_NOT_HANDLED

Bug Check Code : 0x0000001e

Parameter 1 : 00000000`00000000

Parameter 2 : 00000000`00000000

Parameter 3 : 00000000`00000000

Parameter 4 : 00000000`00000000

Caused By Driver : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+7cc10

File Description : NT Kernel & System

Product Name : Microsoft® Windows® Operating System

Company : Microsoft Corporation

File Version : 6.1.7601.18409 (win7sp1_gdr.140303-2144)

Processor : x64

Crash Address : ntoskrnl.exe+7cc10

Stack Address 1 :

Stack Address 2 :

Stack Address 3 :

Computer Name :

Full Path : C:\Windows\Minidump\040310-30669-01.dmp

Processors Count : 4

Major Version : 15

Minor Version : 7601

Dump File Size : 262.144

Dump File Time : 3/04/2010 22:49:18

==================================================

==================================================

Dump File : 020310-37128-01.dmp

Crash Time : 3/02/2010 20:19:53

Bug Check String : DRIVER_POWER_STATE_FAILURE

Bug Check Code : 0x1000009f

Parameter 1 : 00000000`00000004

Parameter 2 : 00000000`00000258

Parameter 3 : fffffa80`042e3b60

Parameter 4 : fffff800`042a5740

Caused By Driver : ntoskrnl.exe

Caused By Address : ntoskrnl.exe+7f4da

File Description : NT Kernel & System

Product Name : Microsoft® Windows® Operating System

Company : Microsoft Corporation

File Version : 6.1.7601.18409 (win7sp1_gdr.140303-2144)

Processor : x64

Crash Address : ntoskrnl.exe+7f4da

Stack Address 1 :

Stack Address 2 :

Stack Address 3 :

Computer Name :

Full Path : C:\Windows\Minidump\020310-37128-01.dmp

Processors Count : 4

Major Version : 15

Minor Version : 7601

Dump File Size : 571.552

Dump File Time : 3/02/2010 20:21:35

==================================================

Link naar reactie
Delen op andere sites

Gast
Dit topic is nu gesloten voor nieuwe reacties.

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.