mercury2001

hallo, bedankt reeds voor de support, ik Norton uitgeschakeld, systeemherstel opnieuw geprobeerd, zonder resultaat, ik krijg dezelfde foutmelding

Hallo, scan uitgevoerd, geen schendingen van de integriteit gevonden, mvg, Alain

Hallo, error 0x80070005, zie bijlage mvg, Alain

Hallo, probleem is dat mijn "systeemherstel" niet werkt, ik heb al vanalles geprobeerd, ook via veilige mode, het wil maar niet lukken, mvg, Alain

Hallo, welke map(pen) bedoel je? mvg, Alain

Hallo, in bijlage de instellingen systeembeveiliging, mvg, Alain

Beste, mijn probleem is nog steeds dat ik GEEN systeemherstel kan maken. In bijlage de settings van de map System Volume Information, mvg, Alain

Hallo, na een herinstallatie van Windows7 stel ik vast dat er een aantal mappen niet meer toegankelijk zijn, dit o.a. deze mappen op de C schijf: documents and settings, recovery, system volume information, msocache, Config.msi en $recycle.Bin. De mappen zijn beveiligd (hangslotje) en ik kan de beveiliging eigenschappen niet wijzigen. Wat zou hier verkeerd gegaan zijn? mvg, Alain

hallo, ik wil deze map verwijderen, omdat mijn systeemherstel nog nooit gewerkt heeft, dus zogezegd opnieuw beginnen. Ik vermoed dat die map de oorzaak is van het niet werken van systeemherstel

hallo, werkt niet, map blijft ontoegankelijk, mijn "systeemherstel" heeft nog nooit gewerkt, C:\System Volume Information (verborgen) Deze map is noodzakelijk voor de systeemherstelfunctie van Windows XP. De herstelfunctie is standaard voor alle schijven ingeschakeld en kan worden uitgeschakeld via het configuratiescherm, onderdeel Systeem, tabblad Systeemherstel, optie Systeemherstel op alle stations uitschakelen. Door het uitschakelen van de systeembeveiliging van een bepaalde schijf worden de eerder gemaakte herstelpunten (noodzakelijk voor de systeemherstelfunctie) verwijderd, en daarmee de bijbehorende map geleegd (de map System Volume Information zelf kan niet worden verwijderd).

hallo, hoe kan ik de map , op mijn d-schijf, system volume information verwijderen? Het lukt me niet. mvg, Alain

gevonden, bedankt !

Hallo, een vraag: al mijn sata aansluitingen (6) zijn volzet op mijn pc en ik wens nog 1 bijkomende aansluiting. Bestaat er hiervoor hardware? mvg, Alain

ja, klopt, afdrukken, ook draadloos werkt perfect, alleen niet van die Kiala (of misschien andere internet) pagina, mvg, Alain

Hallo, de Remote procedure Call staat op gestopt (hoe weer actief te krijgen?) de andere 2 op actief. Hieronder het logbestand, pc was deze morgen al opkuist door Ccleaner, # AdwCleaner v3.017 - Report created 27/01/2014 at 10:59:42 # Updated 12/01/2014 by Xplode # Operating System : Windows 7 Professional Service Pack 1 (64 bits) # Username : Alain - ALAIN-PC # Running from : C:\Users\Alain\Downloads\adwcleaner.exe # Option : Clean ***** [ Services ] ***** ***** [ Files / Folders ] ***** ***** [ Shortcuts ] ***** ***** [ Registry ] ***** ***** [ Browsers ] ***** -\\ Internet Explorer v10.0.9200.16750 ************************* AdwCleaner[R0].txt - [5590 octets] - [27/01/2014 10:51:14] AdwCleaner[R1].txt - [758 octets] - [27/01/2014 10:57:55] AdwCleaner[s0].txt - [5629 octets] - [27/01/2014 10:54:38] AdwCleaner[s1].txt - [680 octets] - [27/01/2014 10:59:42] ########## EOF - C:\AdwCleaner\AdwCleaner[s1].txt - [739 octets] ########## afdrukken lukt me nog niet,

hallo, helaas niet, ik vermoed toch ernstig dat er iets is gebeurd met Windows Image Acquisition, ik kreeg een foutmelding na de eerste heropstart na doe elektriciteitspanne. Alle andere afdrukwerk gaat, enkel deze weigert, nog steeds een blanco pagina, op mijn laptop is alles ok, bedankt alvast voor de moeite, mvg, Alain - - - Updated - - - nog even dit: dezer pagina kan ik dus niet afdrukken http://www.kialaverzendservice.be/sender/label.action?id=ff808081436cb4e40143c269c85e3698

hallo, bedankt, hierbij het log: Zoek.exe v5.0.0.0 Updated 25-January-2014 Tool run by Alain on zo 26/01/2014 at 5:41:17,11. Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Alain\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5Z127M2G\zoek.exe [scan all users] [script inserted] [Checkboxes used] ==== System Restore Info ====================== 26/01/2014 5:43:51 Zoek.exe System Restore Point Created Succesfully. ==== Empty Folders Check ====================== C:\PROGRA~2\AGEIA Technologies deleted successfully C:\PROGRA~2\MSXML 4.0 deleted successfully C:\Program Files\log deleted successfully C:\ProgramData\Oracle deleted successfully C:\ProgramData\PCSettings deleted successfully C:\ProgramData\regid.1986-12.com.adobe deleted successfully C:\Users\Alain\AppData\Roaming\AdobeUM deleted successfully C:\Users\Alain\AppData\Roaming\Apple Computer deleted successfully C:\Users\Alain\AppData\Roaming\Garmin deleted successfully C:\Users\Alain\AppData\Roaming\NeroDigital deleted successfully C:\Users\Alain\AppData\Local\CrashDumps deleted successfully C:\Users\Alain\AppData\Local\Garmin deleted successfully C:\Users\Alain\AppData\Local\MigWiz deleted successfully C:\Users\Alain\AppData\Local\Safe mirror deleted successfully ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vToolbarUpdater17.3.0 deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\vToolbarUpdater17.3.0 deleted successfully ==== Registry Fix Code x64 ====================== Windows Registry Editor Version 5.00 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0EEDB912-C5FA-486F-8334-57288578C627}] [-HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0EEDB912-C5FA-486F-8334-57288578C627}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"=- ==== Deleting Files \ Folders ====================== C:\ProgramData\YTD Video Downloader deleted C:\Users\Alain\AppData\Local\genienext deleted C:\Users\Alain\daemonprocess.txt deleted C:\Users\Alain\.android deleted C:\PROGRA~2\MyPC Backup deleted C:\PROGRA~2\GreenTree Applications deleted C:\PROGRA~2\COMMON~1\Spigot deleted C:\PROGRA~2\COMMON~1\Wondershare deleted C:\Users\Alain\AppData\Roaming\ParetoLogic deleted C:\Users\Alain\AppData\Roaming\DriverCure deleted C:\ProgramData\eSafe deleted C:\ProgramData\ParetoLogic deleted C:\ProgramData\AVG Secure Search deleted C:\Users\Alain\AppData\Local\AVG Secure Search deleted C:\Users\Alain\AppData\Local\Wondershare deleted C:\Users\Alain\AppData\Local\Mobogenie deleted C:\Users\Alain\AppData\Local\cache deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyFree Codec deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FairStars Audio Converter Pro deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YTD Video Downloader deleted C:\Users\Alain\AppData\LocalLow\AVG Secure Search deleted C:\Users\Alain\AppData\LocalLow\ElectroLyrics-16 deleted C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\AVG Secure Search deleted C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\Application Updater deleted C:\Windows\Syswow64\noa2DD3.tmp deleted C:\Windows\Syswow64\noa7629.tmp deleted C:\Windows\Syswow64\noaA5A2.tmp deleted C:\Users\Alain\Documents\Mobogenie deleted C:\Users\Public\Desktop\YTD Video Downloader.lnk deleted C:\Users\Alain\Desktop\YTD Video Downloader.lnk deleted "C:\Windows\SYSWOW64\TempWmicBatchFile.bat" deleted "C:\PROGRA~2\AVG Secure Search\vprot.exe" deleted "C:\PROGRA~2\AVG Secure Search\vprot.exe" deleted "C:\PROGRA~2\COMMON~1\AVG Secure Search\SiteSafetyInstaller\17.3.0\SiteSafety.dll" deleted "C:\PROGRA~2\COMMON~1\AVG Secure Search\vToolbarUpdater\17.3.0\log4cplusU.dll" deleted "C:\PROGRA~2\AVG Secure Search" deleted "C:\PROGRA~2\AVG Secure Search" deleted "C:\PROGRA~2\COMMON~1\AVG Secure Search" deleted "C:\PROGRA~2\COMMON~1\AVG Secure Search\SiteSafetyInstaller" deleted "C:\PROGRA~2\COMMON~1\AVG Secure Search\vToolbarUpdater" deleted "C:\PROGRA~2\COMMON~1\AVG Secure Search\SiteSafetyInstaller\17.3.0" deleted "C:\PROGRA~2\COMMON~1\AVG Secure Search\vToolbarUpdater\17.3.0" deleted ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== 2014-01-22 10:01:40 D1E75542EC8D1B4851765A57AC63618E 1908 ----a-w- C:\Windows\diagerr.xml 2014-01-22 10:01:40 242D896E9EE9CBA59D30A75959214D4E 2562 ----a-w- C:\Windows\diagwrn.xml ====== C:\Users\Alain\AppData\Local\Temp ==== 2014-01-24 09:45:30 67A4F993EBC17246AD2C00052AD0FE11 18926080 ----a-w- C:\Users\Alain\AppData\Local\Temp\BeidMW64.msi 2014-01-24 09:45:30 64E50696521D7FC6CE0EC230D1EA6601 17185280 ----a-w- C:\Users\Alain\AppData\Local\Temp\BeidMW.msi ====== Java Cache ===== 2014-01-11 16:43:34 9CA1686F87E625CECCEE76A988E7C88A 37 ----a-w- C:\Users\Alain\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10\4c5accca-6.0.lap 2014-01-24 10:20:01 710F08E124088255BC52C46C3574FEEB 30978 ----a-w- C:\Users\Alain\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18\5cb330d2-4819c89f 2014-01-24 10:22:32 415FC9732A3F4D89A0E01251CD66E136 646 ----a-w- C:\Users\Alain\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\19\3d7894d3-30cad046 2014-01-24 10:30:22 1BB1E7D5C81C4D7EB64C5CD4CC951323 32186 ----a-w- C:\Users\Alain\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\27\563db19b-18c9b494 2014-01-23 20:32:23 BD7B185C0C27CF6A11CCB95566DF6A71 79 ----a-w- C:\Users\Alain\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\4\7e4d3004-6.0.lap 2014-01-11 16:43:34 EBE5C5E31EBFB3010B730EE414761C46 827 ----a-w- C:\Users\Alain\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6\aec9606-30fab727 2014-01-11 16:43:34 9CA1686F87E625CECCEE76A988E7C88A 37 ----a-w- C:\Users\Alain\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6\aec9606-6.0.lap 2014-01-24 10:30:22 1B6A8D8DD3D490C8B1088B1AE6A681C7 39259 ----a-w- C:\Users\Alain\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\63\241fa03f-14a7b4f6 ====== C:\Windows\SysWOW64 ===== 2014-01-23 20:38:42 95E15A2DE75AB48728AB8E1911C3EDB1 264616 ----a-w- C:\Windows\SysWOW64\javaws.exe 2014-01-23 20:38:34 CB3638541DCAC86EE17FA8258202E20E 175016 ----a-w- C:\Windows\SysWOW64\javaw.exe 2014-01-23 20:38:34 A7871E39687EC6EE9712209DAE248B3A 96168 ----a-w- C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-01-23 20:38:34 9395BBE294045909A025C9F3DC3D9025 174504 ----a-w- C:\Windows\SysWOW64\java.exe ====== C:\Windows\SysWOW64\drivers ===== ====== C:\Windows\Sysnative ===== 2014-01-15 04:43:52 F2BF71FCEAB8FB8A691408C478E2FF4C 3156480 ----a-w- C:\Windows\Sysnative\win32k.sys ====== C:\Windows\Sysnative\drivers ===== 2014-01-24 03:52:47 0BB97D43299910CBFBA59C461B99B910 25928 ----a-w- C:\Windows\Sysnative\drivers\mbam.sys 2014-01-15 04:43:53 FFA06EF43987ED0DD42AD59B260C0C78 7808 ----a-w- C:\Windows\Sysnative\drivers\usbd.sys 2014-01-15 04:43:53 DD253AFC3BC6CBA412342DE60C3647F3 30720 ----a-w- C:\Windows\Sysnative\drivers\usbuhci.sys 2014-01-15 04:43:53 DCA68B0943D6FA415F0C56C92158A83A 99840 ----a-w- C:\Windows\Sysnative\drivers\usbccgp.sys 2014-01-15 04:43:53 8D1196CFBB223621F2C67D45710F25BA 343040 ----a-w- C:\Windows\Sysnative\drivers\usbhub.sys 2014-01-15 04:43:53 765A92D428A8DB88B960DA5A8D6089DC 25600 ----a-w- C:\Windows\Sysnative\drivers\usbohci.sys 2014-01-15 04:43:53 3555BA97171CD153118F73FDCCC8BFDE 376768 ----a-w- C:\Windows\Sysnative\drivers\netio.sys 2014-01-15 04:43:53 18A85013A3E0F7E1755365D287443965 53248 ----a-w- C:\Windows\Sysnative\drivers\usbehci.sys 2014-01-15 04:43:53 12FEB33791920678F8433701C822BCFD 325120 ----a-w- C:\Windows\Sysnative\drivers\usbport.sys ====== C:\Windows\Tasks ====== ====== C:\Windows\Temp ====== ======= C:\Program Files ===== 2014-01-25 13:40:03 -------- d-----w- C:\Program Files\trend micro 2014-01-24 09:46:36 -------- d-----w- C:\Program Files\DIFX 2014-01-16 17:02:17 -------- d-----w- C:\Program Files\Speccy ======= C:\PROGRA~2 ===== 2014-01-24 09:45:39 -------- d-----w- C:\PROGRA~2\Belgium Identity Card 2014-01-23 20:38:46 -------- d-----w- C:\PROGRA~2\COMMON~1\Java 2014-01-23 20:38:31 -------- d-----w- C:\PROGRA~2\Java 2014-01-11 14:48:19 -------- d-----w- C:\PROGRA~2\COMMON~1\Pegasus Imaging 2014-01-11 14:44:58 -------- d-----w- C:\PROGRA~2\Pinnacle ======= C: ===== ====== C:\Users\Alain\AppData\Roaming ====== 2014-01-22 08:46:07 -------- d-----w- C:\Windows\serviceprofiles\Localservice\AppData\Local\CrashDumps 2014-01-18 14:14:41 -------- d-----w- C:\Users\Alain\AppData\Local\Diagnostics 2014-01-12 15:32:45 -------- d-----w- C:\Users\Alain\AppData\Local\Avid_Studio_15 2014-01-11 14:51:26 -------- d-----w- C:\Users\Alain\AppData\Local\Pinnacle 2014-01-11 14:51:23 338EA336D7674A8CB63BD914F8AF0015 624 ----a-w- C:\Users\Alain\AppData\Roaming\ALAIN-PC.MTBF.txt 2014-01-11 14:51:21 -------- d-----w- C:\Users\Alain\AppData\Local\Pinnacle_Studio_17 ====== C:\Users\Alain ====== 2014-01-25 13:39:53 662C39FC1E27131551D557862CEC47F0 935175 ----a-w- C:\Users\Alain\Downloads\RSITx64.exe 2014-01-24 10:50:06 3FAE5D1D94D4D0CF95CAEE0DCA4CC88F 244573034 ----a-w- C:\Users\Alain\Downloads\adobe acrobat reader 7 0 professional multilanguage + keygenerator.exe 2014-01-24 09:46:36 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Belgium - eID 2014-01-24 03:52:19 A66B365579D8CEBD7F1D4D6B6F7F9373 10284816 ----a-w- C:\Users\Alain\Downloads\mbam-setup.exe 2014-01-23 20:38:34 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-01-16 17:01:51 8141DC2382882BD14BE556D7CA8650C3 4779896 ----a-w- C:\Users\Alain\Downloads\spsetup124.exe 2014-01-15 08:37:41 -------- d-----w- C:\ProgramData\Adobe Systems 2014-01-13 10:47:01 6E8CD9409823BEA643C3C01958210CE4 37660568 ----a-w- C:\Users\Alain\Downloads\Dropbox 2.6.2.exe 2014-01-13 10:46:48 D71557B97E7AEA858D6DD75ED3970A1F 2637688 ----a-w- C:\Users\Alain\Downloads\GSPS.exe 2014-01-13 10:46:42 -------- d-----r- C:\Users\Alain\Dropbox 2014-01-13 08:33:13 D71557B97E7AEA858D6DD75ED3970A1F 2637688 ----a-w- C:\Users\Alain\Downloads\GSPS (3).exe 2014-01-13 08:28:43 D71557B97E7AEA858D6DD75ED3970A1F 2637688 ----a-w- C:\Users\Alain\Downloads\GSPS (2).exe 2014-01-13 08:28:18 D71557B97E7AEA858D6DD75ED3970A1F 2637688 ----a-w- C:\Users\Alain\Downloads\GSPS (1).exe 2014-01-11 14:51:31 -------- d-----w- C:\Users\Alain\temp 2014-01-11 14:46:02 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pinnacle Studio 17 2014-01-11 14:42:22 -------- d-----w- C:\ProgramData\Pinnacle ====== C: exe-files == 2014-01-25 13:40:04 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\Alain.exe 2014-01-25 13:39:53 662C39FC1E27131551D557862CEC47F0 935175 ----a-w- C:\Users\Alain\Downloads\RSITx64.exe 2014-01-24 10:51:41 61A5FB191AE2AE876DB31DCCE75E4183 1822520 ----a-w- C:\Users\Alain\Downloads\adobe acrobat reader 7 0 professional multilanguage + keygenerator\instmsiw.exe 2014-01-24 10:51:41 54CD824282960815A1C613BD96910825 225280 ----a-w- C:\Users\Alain\Downloads\adobe acrobat reader 7 0 professional multilanguage + keygenerator\setup.exe 2014-01-24 10:51:41 43F7305C2E5DD4A8F3C5ABEB2FFE4833 1708856 ----a-w- C:\Users\Alain\Downloads\adobe acrobat reader 7 0 professional multilanguage + keygenerator\instmsia.exe 2014-01-24 10:50:06 3FAE5D1D94D4D0CF95CAEE0DCA4CC88F 244573034 ----a-w- C:\Users\Alain\Downloads\adobe acrobat reader 7 0 professional multilanguage + keygenerator.exe 2014-01-24 03:52:19 A66B365579D8CEBD7F1D4D6B6F7F9373 10284816 ----a-w- C:\Users\Alain\Downloads\mbam-setup.exe 2014-01-23 20:38:42 95E15A2DE75AB48728AB8E1911C3EDB1 264616 ----a-w- C:\Windows\SysWOW64\javaws.exe 2014-01-23 20:38:34 CB3638541DCAC86EE17FA8258202E20E 175016 ----a-w- C:\Windows\SysWOW64\javaw.exe 2014-01-23 20:38:34 9395BBE294045909A025C9F3DC3D9025 174504 ----a-w- C:\Windows\SysWOW64\java.exe 2014-01-23 20:38:32 FBC27FD8E76C53E6E8066944BBE2BF73 48040 ----a-w- C:\Program Files (x86)\Java\jre7\bin\jabswitch.exe 2014-01-23 20:38:32 F4BA3A5D5FDE0A321CD7C4A74749CE5B 15784 ----a-w- C:\Program Files (x86)\Java\jre7\bin\pack200.exe 2014-01-23 20:38:32 ED1F5F1906F8D963612A4831CDB331D6 15784 ----a-w- C:\Program Files (x86)\Java\jre7\bin\ktab.exe 2014-01-23 20:38:32 EBAB810C999D8C31F0D5D8B28B3EEDD1 15784 ----a-w- C:\Program Files (x86)\Java\jre7\bin\servertool.exe 2014-01-23 20:38:32 E9BFEA5B2F3F7598DA990F9728768790 66984 ----a-w- C:\Program Files (x86)\Java\jre7\bin\javacpl.exe 2014-01-23 20:38:32 CB3638541DCAC86EE17FA8258202E20E 175016 ----a-w- C:\Program Files (x86)\Java\jre7\bin\javaw.exe 2014-01-23 20:38:32 C422AF851B98378A39B51D99FE707E64 146344 ----a-w- C:\Program Files (x86)\Java\jre7\bin\unpack200.exe 2014-01-23 20:38:32 B9436A665A8621073A12338B16D7BFD4 182696 ----a-w- C:\Program Files (x86)\Java\jre7\bin\jqs.exe 2014-01-23 20:38:32 ACA236A716C2291E40ED069F2CBB3D35 49064 ----a-w- C:\Program Files (x86)\Java\jre7\bin\ssvagent.exe 2014-01-23 20:38:32 A8F2A6D5782AA0166D8367FF674DDF77 52648 ----a-w- C:\Program Files (x86)\Java\jre7\bin\jp2launcher.exe 2014-01-23 20:38:32 95E15A2DE75AB48728AB8E1911C3EDB1 264616 ----a-w- C:\Program Files (x86)\Java\jre7\bin\javaws.exe 2014-01-23 20:38:32 9395BBE294045909A025C9F3DC3D9025 174504 ----a-w- C:\Program Files (x86)\Java\jre7\bin\java.exe 2014-01-23 20:38:32 762E372DCFDAE32FAE52C1A50A0029C2 15784 ----a-w- C:\Program Files (x86)\Java\jre7\bin\klist.exe 2014-01-23 20:38:32 6EEAD2C8A5CAC1F0F2066ABD77BA9092 15784 ----a-w- C:\Program Files (x86)\Java\jre7\bin\keytool.exe 2014-01-23 20:38:32 6E2BECF6E17FF8DC850C058A38A50C4F 15784 ----a-w- C:\Program Files (x86)\Java\jre7\bin\rmiregistry.exe 2014-01-23 20:38:32 6E1B0EEBF3D1CC7ECF4104E1473900FF 15784 ----a-w- C:\Program Files (x86)\Java\jre7\bin\rmid.exe 2014-01-23 20:38:32 5877E6618DA03EE8E7A869F57EE6ACE5 15784 ----a-w- C:\Program Files (x86)\Java\jre7\bin\java-rmi.exe 2014-01-23 20:38:32 49A5F3169A23C00F9F2023DFE04D7AF6 15784 ----a-w- C:\Program Files (x86)\Java\jre7\bin\kinit.exe 2014-01-23 20:38:32 397A6EA17BB97800939DE44D7BFEEC04 15784 ----a-w- C:\Program Files (x86)\Java\jre7\bin\policytool.exe 2014-01-23 20:38:32 18BC25C50200C3DD4E67611D2467DAA2 15784 ----a-w- C:\Program Files (x86)\Java\jre7\bin\orbd.exe 2014-01-23 20:38:32 0E37C7C174521E16CEA0A6BC46F03BCD 16296 ----a-w- C:\Program Files (x86)\Java\jre7\bin\tnameserv.exe 2014-01-23 07:04:40 96B078A82B222B890B1236BCD17B9F02 3154480 ----a-w- C:\Users\Alain\AppData\Local\NVIDIA\NvBackend\Packages\00005721\dao.17692143.exe 2014-01-20 04:06:01 3842C46F2FBC7522EF625F1833530804 145408 ----a-w- C:\Users\Alain\AppData\LocalLow\Sun\Java\jre1.7.0_51\lzma.exe === C: other files == 2014-01-26 04:51:08 15FE29F7569060CE20EF0D60AA7D494A 29 ----a-w- C:\Windows\SysWOW64\TempWmicBatchFile.bat 2014-01-24 09:45:30 C1F1650DA495D8957E83608F8BE613A5 61312 ----a-w- C:\drivers\SPR3322K.sys 2014-01-24 09:45:30 B871A8F6396ECC620766F20E3A120857 57984 ----a-w- C:\drivers\SCR3XX2K.sys 2014-01-24 09:45:30 B2FB0404BFA484BFA5D9A2BE7C0C809C 172544 ----a-w- C:\drivers\cxbu0x64.sys 2014-01-24 09:45:30 888DFE4137F626CEA9CCE3BD47941B64 44672 ----a-w- C:\drivers\a38usbx64.sys 2014-01-24 09:45:30 8378A77DFAF832A7ACBE90F59066FF9A 14080 ----a-w- C:\drivers\acr38svr.sys 2014-01-24 09:45:30 2825E0E294686A26506690059E1F437A 29184 ----a-w- C:\drivers\usbccid.sys 2014-01-24 09:45:30 258D95A50AC8EF725E114C92FA3A38AA 71680 ----a-w- C:\drivers\S332x64.sys 2014-01-24 09:45:30 1BAACB69DC6C99FA6B249EF27D4642ED 68608 ----a-w- C:\drivers\S3XXx64.sys 2014-01-24 09:45:30 0FA03F53C0A635513F34B3D85BA1D361 17674 ----a-w- C:\drivers\a38usb98.sys 2014-01-24 09:45:30 0284C94FC495D8D08DF24C18994C1662 114304 ----a-w- C:\drivers\cxbu0wdm.sys 2014-01-24 09:45:29 5F92E1E98EC2F4E6FE13D19AA3E24AD7 37632 ----a-w- C:\drivers\a38usb.sys 2014-01-24 03:52:47 0BB97D43299910CBFBA59C461B99B910 25928 ----a-w- C:\Windows\System32\drivers\mbam.sys 2014-01-23 20:38:32 863EB6802B1C3B7630290871599BE0BD 18636 ----a-w- C:\Program Files (x86)\Java\jre7\lib\deploy\ffjcext.zip ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-21-567118889-1707754298-3187196265-1001\Software\Microsoft\Windows\CurrentVersion\Run] "NoAds"="D:\Noads\NoAds.exe" "updateMgr"="D:\acrobat reader\Acrobat\AdobeUpdateManager.exe AcPro7_0_0 -reboot 1" [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "SPReview"="C:\Windows\System32\SPReview\SPReview.exe /sp:1 /errorfwlink:Troubleshoot problems installing Service Pack 1 (SP1) for Windows 7 and Windows Server 2008 R2 /build:7601" [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\RunOnce] "SPReview"="C:\Windows\System32\SPReview\SPReview.exe /sp:1 /errorfwlink:Troubleshoot problems installing Service Pack 1 (SP1) for Windows 7 and Windows Server 2008 R2 /build:7601" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "vProt"="C:\Program Files (x86)\AVG Secure Search\vprot.exe" "Cobian Backup 10"="D:\Cobian backup\Cobian.exe" "Acrobat Assistant 7.0"="D:\acrobat reader\Distillr\Acrotray.exe" "SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" "beid"="C:\Program Files (x86)\Belgium Identity Card\beid35gui.exe /startup" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "NoAds"="D:\Noads\NoAds.exe" "updateMgr"="D:\acrobat reader\Acrobat\AdobeUpdateManager.exe AcPro7_0_0 -reboot 1" ==== Startup Registry Enabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "EvtMgr6"="C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming" "Nvtmru"="C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" "ShadowPlay"="C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart" "NvBackend"="C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" ==== Startup Registry Disabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="KiesPDLR.exe Run" "hkey"="HKCU" "command"="D:\\Samsung\\Kies\\External\\FirmwareUpdate\\KiesPDLR.exe Run" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Acrobat Assistant 8.0] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Acrobat Assistant 8.0" "hkey"="HKLM" "command"="\"D:\\Adobe acrobat\\Acrobat\\Acrotray.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Adobe ARM] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Adobe ARM" "hkey"="HKLM" "command"="\"C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\AdobeAAMUpdater-1.0] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="AdobeAAMUpdater-1.0" "hkey"="HKLM" "command"="\"C:\\Program Files (x86)\\Common Files\\Adobe\\OOBE\\PDApp\\UWA\\UpdaterStartupUtility.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\KiesPreload] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="KiesPreload" "hkey"="HKCU" "command"="D:\\Samsung\\Kies\\Kies.exe /preload" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\KiesTrayAgent] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="KiesTrayAgent" "hkey"="HKLM" "command"="D:\\Samsung\\Kies\\KiesTrayAgent.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\NetLimiter] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="NetLimiter" "hkey"="HKLM" "command"="C:\\Program Files (x86)\\NetLimiter\\NetLimiter.exe /s" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\QuickTime Task] "key"="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="QuickTime Task" "hkey"="HKLM" "command"="\"C:\\Program Files (x86)\\QuickTime\\QTTask.exe\" -atboottime" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Gamma.lnk] "item"="Adobe Gamma" "path"="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Adobe Gamma.lnk" "backup"="C:\\Windows\\pss\\Adobe Gamma.lnk.CommonStartup" "backupExtension"=".CommonStartup" "command"="C:\\PROGRA~2\\COMMON~1\\Adobe\\CALIBR~1\\ADOBEG~1.EXE" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^ComproRemote.lnk] "item"="ComproRemote" "path"="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\ComproRemote.lnk" "backup"="C:\\Windows\\pss\\ComproRemote.lnk.CommonStartup" "backupExtension"=".CommonStartup" "command"="C:\\PROGRA~2\\COMMON~1\\VIDEOM~1\\COMPRO~1.EXE" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^ComproSchedulerDTV.lnk] "item"="ComproSchedulerDTV" "path"="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\ComproSchedulerDTV.lnk" "backup"="C:\\Windows\\pss\\ComproSchedulerDTV.lnk.CommonStartup" "backupExtension"=".CommonStartup" "command"="C:\\PROGRA~2\\COMMON~1\\VIDEOM~1\\COMPRO~2.EXE" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Users^Alain^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Logitech . Productregistratie.lnk] "item"="Logitech . Productregistratie" "path"="C:\\Users\\Alain\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Logitech . Productregistratie.lnk" "backup"="C:\\Windows\\pss\\Logitech . Productregistratie.lnk.Startup" "backupExtension"=".Startup" "command"="C:\\PROGRA~2\\COMMON~1\\LogiShrd\\eReg\\SetPoint\\eReg.exe" ==== Startup Folders ====================== 2014-01-15 08:36:24 2453 ----a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Acrobat Speed Launcher.lnk ==== Task Scheduler Jobs ====================== C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ [undetermined Task] C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [23/12/2013 13:41] ==== Other Scheduled Tasks ====================== "C:\Windows\SysNative\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"] "C:\Windows\SysNative\tasks\CreateChoiceProcessTask" [C:\Windows\System32\browserchoice.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\Norton WSC Integration" ["C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\WSCStub.exe"] "C:\Windows\SysNative\tasks\SidebarExecute" [C:\Program Files\Windows Sidebar\sidebar.exe] "C:\Windows\SysNative\tasks\Apple\AppleSoftwareUpdate" [C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe] "C:\Windows\SysNative\tasks\Norton Identity Safe\Norton Error Analyzer" [C:\Program Files (x86)\Norton Identity Safe\Engine\2014.6.0.27\SymErr.exe] "C:\Windows\SysNative\tasks\Norton Identity Safe\Norton Error Processor" [C:\Program Files (x86)\Norton Identity Safe\Engine\2014.6.0.27\SymErr.exe] "C:\Windows\SysNative\tasks\Norton Internet Security\Norton Error Analyzer" [C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\SymErr.exe] "C:\Windows\SysNative\tasks\Norton Internet Security\Norton Error Processor" [C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\SymErr.exe] ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions] "belgiumeid@eid.belgium.be"="C:\Program Files\Mozilla Firefox\extensions\belgiumeid@eid.belgium.be" [] ==== Chrome Look ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions icdlfehblmklkikfigmjhbmmpmkmpooj - C:\Program Files (x86)\Common Files\Spigot\GC\errorassistant_1.1.crx[] mhkaekfpcppmmioggniknbnbdbcigpkk - C:\Program Files (x86)\Common Files\Spigot\GC\coupons_2.4.crx[] mkfokfffehpeedafpekjeddnmnjhmcmk - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\Exts\Chrome.crx[19/01/2014 18:42] ndibdjnfmopecpmkdieinmbadjfpblof - C:\ProgramData\AVG Secure Search\ChromeExt\17.3.0.49\avg.crx[] ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="HLN.be, Nieuws, sport en showbizz, 24/24, 7/7, meer dan 350 nieuwsupdates per dag" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Default_Page_URL"="Fixhomepage" "Start Page"="Fixhomepage" "Search Page"="Fixhomepage" [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main] "Default_Page_URL"="Fixhomepage" "Start Page"="Fixhomepage" "Search Page"="Fixhomepage" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="HLN.be, Nieuws, sport en showbizz, 24/24, 7/7, meer dan 350 nieuwsupdates per dag" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Search Page"="Bing" "Default_Page_URL"="MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!" "Start Page"="MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!" [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main] "Search Page"="Bing" "Default_Page_URL"="MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!" "Start Page"="MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes "DefaultScope"="{2D6E2881-483F-49C0-AFD1-E8F31906B23B}" {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Unknown Url="Not_Found" {2D6E2881-483F-49C0-AFD1-E8F31906B23B} Google Url="{searchTerms} - Google zoeken?}" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="{searchTerms} - Google Search}" ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-567118889-1707754298-3187196265-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully HKEY_USERS\S-1-5-21-567118889-1707754298-3187196265-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully HKEY_USERS\S-1-5-21-567118889-1707754298-3187196265-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} deleted successfully HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully ==== Deleting CLSID Registry Values ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\avg@toolbar deleted successfully ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof deleted successfully HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0 deleted successfully HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM deleted successfully HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0 deleted successfully HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NetLimiter deleted successfully ==== Empty IE Cache ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Alain\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Alain\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5Z127M2G will be deleted at reboot C:\Users\Alain\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FXHIGX8B will be deleted at reboot ==== Empty FireFox Cache ====================== No FireFox Profiles found ==== Empty Chrome Cache ====================== No Chrome User Data found ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=549 folders=239 95564984 bytes) ==== Empty Temp Folders ====================== C:\Users\Default\AppData\Local\Temp emptied successfully C:\Users\Default User\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\Users\Alain\AppData\Local\Temp will be emptied at reboot C:\Windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\Alain\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Users\Alain\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5Z127M2G" not found "C:\Users\Alain\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FXHIGX8B" deleted ==== EOF on zo 26/01/2014 at 5:54:11,90 ======================

hierbij het log: Logfile of random's system information tool 1.09 (written by random/random) Run by Alain at 2014-01-25 14:40:03 Microsoft Windows 7 Professional Service Pack 1 System drive C: has 80 GB (47%) free of 171 GB Total RAM: 6134 MB (63% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 14:40:05, on 25/01/2014 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v10.0 (10.00.9200.16750) Boot mode: Normal Running processes: C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe D:\Noads\NoAds.exe C:\Program Files (x86)\AVG Secure Search\vprot.exe D:\Cobian backup\Cobian.exe D:\acrobat reader\Distillr\acrotray.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe D:\Cobian backup\cbInterface.exe C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE D:\acrobat reader\Acrobat\Acrobat.exe C:\Users\Alain\AppData\Local\Temp\Adobelm_Cleanup.0001 C:\Users\Alain\AppData\Local\Temp\Adobelm_Cleanup.0001 C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE C:\Windows\SysWOW64\DllHost.exe C:\Program Files\trend micro\Alain.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = HLN.be, Nieuws, sport en showbizz, 24/24, 7/7, meer dan 350 nieuwsupdates per dag R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Fixhomepage R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Fixhomepage R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Fixhomepage R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=C:\Windows\SysWOW64\userinit.exe, O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\acrobat reader\ActiveX\AcroIEHelper.dll O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - D:\Shareaza\RazaWebHook32.dll O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coIEPlg.dll O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\IPS\IPSBHO.DLL O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\17.3.0.49\AVG Secure Search_toolbar.dll O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - D:\acrobat reader\Acrobat\AcroIEFavClient.dll O2 - BHO: Logitech SetPoint - {AF949550-9094-4807-95EC-D1C317803333} - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coIEPlg.dll O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\17.3.0.49\AVG Secure Search_toolbar.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - D:\acrobat reader\Acrobat\AcroIEFavClient.dll O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG Secure Search\vprot.exe" O4 - HKLM\..\Run: [Cobian Backup 10] "D:\Cobian backup\Cobian.exe" O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "D:\acrobat reader\Distillr\Acrotray.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [beid] "C:\Program Files (x86)\Belgium Identity Card\beid35gui.exe" /startup O4 - HKCU\..\Run: [NoAds] "D:\Noads\NoAds.exe" O4 - HKCU\..\Run: [updateMgr] D:\acrobat reader\Acrobat\AdobeUpdateManager.exe AcPro7_0_0 -reboot 1 O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\RunOnce: [sPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"Troubleshoot problems installing Service Pack 1 (SP1) for Windows 7 and Windows Server 2008 R2" /build:7601 (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\RunOnce: [sPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"Troubleshoot problems installing Service Pack 1 (SP1) for Windows 7 and Windows Server 2008 R2" /build:7601 (User 'Default user') O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ? O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {34DC6011-88B5-4EA9-BA7A-DC7B4F4437FE} (JordanUploader Class) - http://photoservice.fujicolor.eu/ips-opdata/uploadClients/fuji/jordan.cab O16 - DPF: {53049A9A-1122-4673-B8D4-12F545AE3285} (CV781Object Object) - http://avm565a-sn.ddns.eagleeyes.tw:85/AVC_AX_764.cab O16 - DPF: {971FC730-55F1-461F-83FD-B3BF5E1F039E} (AMCCtrl Class) - http://178.118.53.209:8910/AVC_AX_742.cab O16 - DPF: {AA09E7F8-1C11-4B65-9D61-EB6CB0F1E86C} (CV781Object Object) - http://sieuthivienthong.dyndns.org:8081/AVC_AX_35X.cab O16 - DPF: {B513310D-152C-4521-97C4-C92860987AD2} (CameraViewer Class) - http://113.161.84.225:9006/MediaClientAxCtrl.cab O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\17.3.0\ViProtocol.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Ashampoo HDD Control 2 Service (AHDDC2) - Unknown owner - C:\Program Files (x86)\Ashampoo\Ashampoo HDD Control 2\AHDDC2_Service.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: Cobian Backup 10 Volume Shadow Copy service (cbVSCService) - CobianSoft, Luis Cobian - D:\Cobian backup\cbVSCService.exe O23 - Service: Cron Service for Prey (CronService) - Fork Ltd. - D:\Prey\platform\windows\cronsvc.exe O23 - Service: Defragmentation-Service (DfSdkS) - mst software GmbH, Germany - C:\Program Files (x86)\Ashampoo\Ashampoo HDD Control 2\DfSdkS64.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: FABS - Helping agent for MAGIX media database (Fabs) - MAGIX AG - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Sentinel HASP License Manager (hasplms) - Unknown owner - C:\Windows\system32\hasplms.exe (file missing) O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: vToolbarUpdater17.3.0 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\ToolbarUpdater.exe O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 11981 bytes ======Listing Processes====== \SystemRoot\System32\smss.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 wininit.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 C:\Windows\system32\services.exe winlogon.exe C:\Windows\system32\lsass.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch "C:\Windows\system32\nvvsvc.exe" "C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe" C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k GPSvcGroup C:\Windows\system32\svchost.exe -k NetworkService "C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe" C:\Windows\system32\nvvsvc.exe -session -first C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork "taskhost.exe" "C:\Windows\system32\Dwm.exe" "C:\Program Files (x86)\Ashampoo\Ashampoo HDD Control 2\AHDDC2_Service.exe" C:\Windows\Explorer.EXE "D:\Cobian backup\cbVSCService.exe" "D:\Prey\platform\windows\cronsvc.exe" "C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe" /DisableUI C:\Windows\system32\hasplms.exe -run "C:\Program Files\Logitech\SetPointP\SetPoint.exe" /launchGaming "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe" "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe" "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe" "C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler.exe" "C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe" /s "NIS" /m "C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\diMaster.dll" /prefetch:1 "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray "C:\Program Files (x86)\Google\Update\1.3.22.3\GoogleCrashHandler64.exe" "C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe" KHALMNPR.EXE /API "C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" "D:\Noads\NoAds.exe" "C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" C:\Windows\system32\svchost.exe -k imgsvc "C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe" "C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\ToolbarUpdater.exe" "C:\Program Files (x86)\AVG Secure Search\vprot.exe" "D:\Cobian backup\Cobian.exe" "D:\acrobat reader\Distillr\acrotray.exe" "C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\loggingserver.exe" 72648 "C:\ProgramData\AVG Secure Search\Logger\logger.properties" \??\C:\Windows\system32\conhost.exe "-727900884-1444913889-21634523-884365802469687718-1498616496-1603158009-1596921501 "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" "C:\Windows\system32\rundll32.exe" Shell32.dll,Control_RunDLL mmsys.cpl "D:\Cobian backup\cbInterface.exe" "C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe" /c /a /s UserSession "C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1 C:\Windows\system32\SearchIndexer.exe /Embedding C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted "C:\Program Files\Windows Media Player\wmpnetwk.exe" C:\Windows\System32\svchost.exe -k LocalServicePeerNet "C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp \??\C:\Windows\system32\conhost.exe "189884698917560715691711029546-19650037357301250481953107462-936490874-1681395038 "C:\Program Files (x86)\Nero\Update\NASvc.exe" "C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE" "D:\acrobat reader\Acrobat\Acrobat.exe" /o /eo /l "C:\Users\Alain\AppData\Local\Temp\Adobelm_Cleanup.0001" 6028 "C:\Users\Alain\AppData\Local\Temp\""Adobelm_Cleanup.0001.dir.0022" "C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe" "C:\Users\Alain\AppData\Local\Temp\Adobelm_Cleanup.0001" 6028 "C:\Users\Alain\AppData\Local\Temp\""Adobelm_Cleanup.0001.dir.0023" C:\Windows\system32\wbem\wmiprvse.exe "C:\Program Files\Internet Explorer\iexplore.exe" Windows 7 printprobleem na elektriciteitspanne "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:6564 CREDAT:267521 /prefetch:2 C:\Windows\system32\Macromed\Flash\FlashUtil64_11_9_900_170_ActiveX.exe -Embedding "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:6564 CREDAT:3020109 /prefetch:2 "C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe21_ Global\UsGthrCtrlFltPipeMssGthrPipe21 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "C:\Windows\system32\SearchFilterHost.exe" 0 532 536 544 65536 540 "C:\Users\Alain\Downloads\RSITx64.exe" C:\Windows\SysWOW64\DllHost.exe /Processid:{60A90A2F-858D-42AF-8929-82BE9D99E8A1} C:\Windows\system32\wbem\wmiprvse.exe ======Scheduled tasks folder====== C:\Windows\tasks\GoogleUpdateTaskMachineCore.job C:\Windows\tasks\GoogleUpdateTaskMachineUA.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0EEDB912-C5FA-486F-8334-57288578C627}] Shareaza Web Download Hook - D:\Shareaza\RazaWebHook64.dll [2013-11-24 40448] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}] Norton Identity Protection - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll [2013-10-06 769360] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF949550-9094-4807-95EC-D1C317803333}] Logitech SetPoint - C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2013-07-31 433944] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}] Adobe PDF Reader Link Helper - D:\acrobat reader\ActiveX\AcroIEHelper.dll [2004-12-14 63136] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0EEDB912-C5FA-486F-8334-57288578C627}] Shareaza Web Download Hook - D:\Shareaza\RazaWebHook32.dll [2013-11-24 34816] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}] Norton Identity Protection - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coIEPlg.dll [2013-10-06 526672] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}] Norton Vulnerability Protection - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\IPS\IPSBHO.DLL [2013-09-29 388504] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-01-23 462760] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}] AVG Security Toolbar - C:\Program Files (x86)\AVG Secure Search\17.3.0.49\AVG Secure Search_toolbar.dll [2014-01-09 3349528] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}] Adobe PDF Conversion Toolbar Helper - D:\acrobat reader\Acrobat\AcroIEFavClient.dll [2006-12-18 231160] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF949550-9094-4807-95EC-D1C317803333}] Logitech SetPoint - C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2013-07-31 364824] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-01-23 171944] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll [2013-10-06 769360] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar] {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coIEPlg.dll [2013-10-06 526672] {95B7759C-8C7F-4BF1-B163-73684A933233} - AVG Security Toolbar - C:\Program Files (x86)\AVG Secure Search\17.3.0.49\AVG Secure Search_toolbar.dll [2014-01-09 3349528] {47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - D:\acrobat reader\Acrobat\AcroIEFavClient.dll [2006-12-18 231160] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "EvtMgr6"=C:\Program Files\Logitech\SetPointP\SetPoint.exe [2013-07-31 3091224] "Nvtmru"=C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [2013-11-14 1028384] "ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2013-12-10 1100248] "NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2013-12-10 2279712] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "NoAds"=D:\Noads\NoAds.exe [2013-10-29 122880] "updateMgr"=D:\acrobat reader\Acrobat\AdobeUpdateManager.exe [2006-03-30 313472] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0] D:\Adobe acrobat\Acrobat\Acrotray.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPreload] D:\Samsung\Kies\Kies.exe [2013-11-06 1564528] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent] D:\Samsung\Kies\KiesTrayAgent.exe [2013-11-06 311152] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NetLimiter] C:\Program Files (x86)\NetLimiter\NetLimiter.exe /s [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] C:\Program Files (x86)\QuickTime\QTTask.exe [2010-11-29 421888] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Gamma.lnk] C:\PROGRA~2\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE [2005-03-16 113664] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^ComproRemote.lnk] C:\PROGRA~2\COMMON~1\VIDEOM~1\COMPRO~1.EXE [2011-01-26 13365248] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^ComproSchedulerDTV.lnk] C:\PROGRA~2\COMMON~1\VIDEOM~1\COMPRO~2.EXE [2011-03-10 409600] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Alain^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Logitech . Productregistratie.lnk] C:\PROGRA~2\COMMON~1\LogiShrd\eReg\SetPoint\eReg.exe [2009-11-16 517384] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "vProt"=C:\Program Files (x86)\AVG Secure Search\vprot.exe [2014-01-09 2486296] "Cobian Backup 10"=D:\Cobian backup\Cobian.exe [2010-09-23 421376] "Acrobat Assistant 7.0"=D:\acrobat reader\Distillr\Acrotray.exe [2008-04-23 483328] "SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336] "beid"=C:\Program Files (x86)\Belgium Identity Card\beid35gui.exe /startup [] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup Adobe Acrobat Speed Launcher.lnk - C:\Windows\Installer\{AC76BA86-1033-F400-7760-000000000002}\SC_Acrobat.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"=" " [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn] c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2013-06-13 66328] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp] wlnotify.dll [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System] "DisableTaskMgr"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=0 "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "PromptOnSecureDesktop"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "DisableStatusMessages"=0 "DisableTaskMgr"=0 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NofolderOptions"=0 "NoDriveTypeAutoRun"=149 "NoDriveAutoRun"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoActiveDesktop"=1 "NoActiveDesktopChanges"=1 "ForceActiveDesktopOn"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVYU"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.i420"=iyuv_32.dll "VIDC.YVU9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "MSVideo8"=VfWWDM32.dll "wave1"=wdmaud.drv "midi"=wdmaud.drv "mixer1"=wdmaud.drv "aux"=wdmaud.drv "wave"=wdmaud.drv "midi3"=wdmaud.drv "mixer"=wdmaud.drv "wave4"=wdmaud.drv "midi4"=wdmaud.drv "mixer4"=wdmaud.drv "wave2"=wdmaud.drv "midi1"=wdmaud.drv "mixer2"=wdmaud.drv "wave3"=wdmaud.drv "midi2"=wdmaud.drv "mixer3"=wdmaud.drv "vidc.CDV5"=cdv5codc.dll "vidc.CLLC"=cllccodc.dll "vidc.CUVC"=cuvccodc.dll "vidc.CDVC"=cdvccodc.dll "vidc.CDVH"=cdvhcodc.dll "vidc.CMIC"=cmiccodc.dll "vidc.CHQX"=chqxcodc.dll "vidc.C210"=c210codc.dll "wave5"=wdmaud.drv "midi5"=wdmaud.drv "mixer5"=wdmaud.drv "wave6"=wdmaud.drv "midi6"=wdmaud.drv "mixer6"=wdmaud.drv "wave8"=wdmaud.drv "midi8"=wdmaud.drv "mixer8"=wdmaud.drv "wave7"=wdmaud.drv "midi7"=wdmaud.drv "mixer7"=wdmaud.drv "wave9"=wdmaud.drv "midi9"=wdmaud.drv "mixer9"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 month====== 2014-01-25 14:40:03 ----D---- C:\rsit 2014-01-25 14:40:03 ----D---- C:\Program Files\trend micro 2014-01-24 11:57:36 ----A---- C:\Windows\ntbtlog.txt 2014-01-24 10:46:36 ----D---- C:\Program Files\DIFX 2014-01-24 10:45:40 ----D---- C:\Windows\SYSWOW64\siscardplugins 2014-01-24 10:45:40 ----D---- C:\Windows\SYSWOW64\beidpp 2014-01-24 10:45:40 ----D---- C:\Program Files\log 2014-01-24 10:45:40 ----D---- C:\Program Files (x86)\Mozilla Firefox 2014-01-24 10:45:39 ----D---- C:\Program Files (x86)\Belgium Identity Card 2014-01-24 10:45:29 ----D---- C:\drivers 2014-01-24 04:52:57 ----D---- C:\Users\Alain\AppData\Roaming\Malwarebytes 2014-01-24 04:52:48 ----D---- C:\ProgramData\Malwarebytes 2014-01-24 04:52:47 ----D---- C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-01-24 04:52:47 ----A---- C:\Windows\system32\drivers\mbam.sys 2014-01-23 21:38:42 ----A---- C:\Windows\SYSWOW64\javaws.exe 2014-01-23 21:38:34 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll 2014-01-23 21:38:34 ----A---- C:\Windows\SYSWOW64\javaw.exe 2014-01-23 21:38:34 ----A---- C:\Windows\SYSWOW64\java.exe 2014-01-23 21:38:31 ----D---- C:\Program Files (x86)\Java 2014-01-22 11:48:16 ----D---- C:\Users\Alain\AppData\Roaming\ParetoLogic 2014-01-22 11:48:16 ----D---- C:\Users\Alain\AppData\Roaming\DriverCure 2014-01-22 11:48:09 ----D---- C:\ProgramData\ParetoLogic 2014-01-16 18:02:17 ----D---- C:\Program Files\Speccy 2014-01-15 10:09:56 ----HD---- C:\Windows\PIF 2014-01-15 09:41:19 ----D---- C:\Users\Alain\AppData\Roaming\AdobeUM 2014-01-15 09:37:41 ----D---- C:\ProgramData\Adobe Systems 2014-01-15 09:36:11 ----D---- C:\Windows\SYSWOW64\spool 2014-01-15 05:43:53 ----A---- C:\Windows\system32\drivers\usbuhci.sys 2014-01-15 05:43:53 ----A---- C:\Windows\system32\drivers\usbport.sys 2014-01-15 05:43:53 ----A---- C:\Windows\system32\drivers\usbohci.sys 2014-01-15 05:43:53 ----A---- C:\Windows\system32\drivers\usbhub.sys 2014-01-15 05:43:53 ----A---- C:\Windows\system32\drivers\usbehci.sys 2014-01-15 05:43:53 ----A---- C:\Windows\system32\drivers\usbd.sys 2014-01-15 05:43:53 ----A---- C:\Windows\system32\drivers\usbccgp.sys 2014-01-15 05:43:53 ----A---- C:\Windows\system32\drivers\netio.sys 2014-01-15 05:43:52 ----A---- C:\Windows\system32\win32k.sys 2014-01-13 09:28:03 ----SHD---- C:\Windows\ftpcache 2014-01-11 15:51:23 ----A---- C:\Users\Alain\AppData\Roaming\ALAIN-PC.MTBF.txt 2014-01-11 15:44:58 ----D---- C:\Program Files (x86)\Pinnacle 2014-01-11 15:42:22 ----D---- C:\ProgramData\Pinnacle 2014-01-09 06:25:08 ----A---- C:\Windows\SYSWOW64\noa7629.tmp 2013-12-26 22:30:23 ----D---- C:\Users\Alain\AppData\Roaming\Apple Computer 2013-12-26 08:55:22 ----D---- C:\Users\Alain\AppData\Roaming\FairStars Audio Converter Pro ======List of files/folders modified in the last 1 month====== 2014-01-25 14:40:03 ----RD---- C:\Program Files 2014-01-25 14:39:56 ----D---- C:\Windows\Temp 2014-01-25 14:38:31 ----A---- C:\Windows\SYSWOW64\TempWmicBatchFile.bat 2014-01-25 13:13:15 ----D---- C:\Windows\system32\config 2014-01-25 12:34:26 ----D---- C:\Windows\System32 2014-01-25 12:34:26 ----D---- C:\Windows\inf 2014-01-25 12:34:26 ----A---- C:\Windows\system32\PerfStringBackup.INI 2014-01-25 12:14:24 ----D---- C:\ProgramData\NVIDIA 2014-01-25 12:14:17 ----SHD---- C:\System Volume Information 2014-01-25 06:30:24 ----D---- C:\Program Files (x86)\Internet Explorer 2014-01-24 12:01:52 ----SHD---- C:\Windows\Installer 2014-01-24 12:01:51 ----SHD---- C:\Config.Msi 2014-01-24 12:00:52 ----D---- C:\ProgramData\Adobe 2014-01-24 11:57:36 ----D---- C:\Windows 2014-01-24 10:46:36 ----D---- C:\Windows\winsxs 2014-01-24 10:46:36 ----D---- C:\Windows\system32\catroot 2014-01-24 10:46:35 ----D---- C:\Windows\system32\DriverStore 2014-01-24 10:45:40 ----RD---- C:\Program Files (x86) 2014-01-24 10:45:40 ----D---- C:\Windows\SysWOW64 2014-01-24 04:56:50 ----HD---- C:\ProgramData 2014-01-24 04:56:50 ----D---- C:\ProgramData\YTD Video Downloader 2014-01-24 04:52:47 ----D---- C:\Windows\system32\drivers 2014-01-23 21:38:51 ----D---- C:\ProgramData\Oracle 2014-01-23 21:38:46 ----D---- C:\Program Files (x86)\Common Files 2014-01-22 14:54:39 ----RSD---- C:\Windows\assembly 2014-01-22 14:54:39 ----D---- C:\Windows\Microsoft.NET 2014-01-22 14:54:38 ----D---- C:\Windows\system32\Tasks 2014-01-22 11:50:37 ----D---- C:\Windows\Tasks 2014-01-22 11:46:10 ----D---- C:\Windows\system32\wbem 2014-01-22 11:45:19 ----D---- C:\ProgramData\Norton 2014-01-22 11:45:18 ----D---- C:\Windows\system32\drivers\UMDF 2014-01-22 11:45:18 ----D---- C:\Windows\system32\CodeIntegrity 2014-01-22 11:45:18 ----D---- C:\Windows\system32\catroot2 2014-01-22 11:45:18 ----D---- C:\Windows\AppCompat 2014-01-22 11:45:15 ----D---- C:\Windows\registration 2014-01-22 10:54:02 ----D---- C:\Windows\system32\wfp 2014-01-19 17:39:59 ----D---- C:\Windows\system32\FxsTmp 2014-01-18 15:14:41 ----D---- C:\Windows\system32\NDF 2014-01-18 04:49:50 ----D---- C:\Users\Alain\AppData\Roaming\Adobe 2014-01-17 11:30:12 ----D---- C:\Users\Alain\AppData\Roaming\MAGIX 2014-01-15 09:36:08 ----RSD---- C:\Windows\Fonts 2014-01-15 09:28:38 ----D---- C:\ProgramData\regid.1986-12.com.adobe 2014-01-15 07:03:08 ----D---- C:\Windows\debug 2014-01-15 05:44:55 ----D---- C:\Windows\system32\MRT 2014-01-15 05:44:46 ----A---- C:\Windows\system32\MRT.exe 2014-01-13 05:38:26 ----D---- C:\Windows\SoftwareDistribution 2014-01-10 07:32:13 ----D---- C:\Windows\Minidump 2014-01-09 05:45:51 ----D---- C:\ProgramData\AVG Secure Search 2014-01-09 05:45:48 ----D---- C:\Program Files (x86)\AVG Secure Search 2014-01-08 17:39:55 ----D---- C:\Users\Alain\AppData\Roaming\FileZilla ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888] R0 SymDS;Symantec Data Store; C:\Windows\system32\drivers\NISx64\1501000.012\SYMDS64.SYS [2013-09-10 493656] R0 SymEFA;Symantec Extended File Attributes; C:\Windows\system32\drivers\NISx64\1501000.012\SYMEFA64.SYS [2013-09-27 1147480] R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552] R1 avgtp;avgtp; \??\C:\Windows\system32\drivers\avgtpx64.sys [2013-10-28 46368] R1 BHDrvx64;BHDrvx64; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20140121.001\BHDrvx64.sys [2013-12-18 1526488] R1 ccSet_NIS;NIS Settings Manager; C:\Windows\system32\drivers\NISx64\1501000.012\ccSetx64.sys [2013-09-26 162392] R1 cdrblock;cdrblock; C:\Windows\system32\DRIVERS\cdrblock.sys [2011-04-21 36696] R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560] R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [2013-12-12 484952] R1 IDSVia64;IDSVia64; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20140124.001\IDSvia64.sys [2014-01-21 521944] R1 SRTSP;Symantec Real Time Storage Protection x64; C:\Windows\system32\drivers\NISx64\1501000.012\SRTSP64.SYS [2013-09-27 858200] R1 SRTSPX;Symantec Real Time Storage Protection (PEL) x64; C:\Windows\system32\drivers\NISx64\1501000.012\SRTSPX64.SYS [2013-09-10 36952] R1 SymIM;Symantec Network Security Intermediate Filter Driver; C:\Windows\system32\DRIVERS\SymIMv.sys [2013-09-10 78936] R1 SymIRON;Symantec Iron Driver; C:\Windows\system32\drivers\NISx64\1501000.012\Ironx64.SYS [2013-09-27 264280] R1 SymNetS;Symantec Network Security WFP Driver; C:\Windows\system32\drivers\NISx64\1501000.012\SYMNETS.SYS [2013-09-26 590936] R2 aksdf;aksdf; \??\C:\Windows\system32\drivers\aksdf.sys [2013-08-09 91784] R2 hardlock;hardlock; \??\C:\Windows\system32\drivers\hardlock.sys [2013-08-09 331328] R3 akshasp;SafeNet Inc. HASP Key; C:\Windows\system32\DRIVERS\akshasp.sys [2013-08-09 60488] R3 akshhl;SafeNet Inc. Sentinel HL Key; C:\Windows\system32\DRIVERS\akshhl.sys [2013-08-09 63944] R3 aksusb;SafeNet Inc. USB Key; C:\Windows\system32\DRIVERS\aksusb.sys [2013-08-09 303624] R3 ComproHID;VideoMate Root Enumerated Hid Device; C:\Windows\system32\DRIVERS\ComproHID64.sys [2007-10-01 9088] R3 e1yexpress;Stuurprogramma voor Intel® Gigabit-netwerkverbindingen; C:\Windows\system32\DRIVERS\e1y60x64.sys [2009-06-10 281088] R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2013-12-12 137648] R3 LEqdUsb;Logitech SetPoint Unifying KMDF USB Filter; C:\Windows\system32\DRIVERS\LEqdUsb.Sys [2013-05-23 77592] R3 LHidEqd;Logitech SetPoint Unifying KMDF HID Filter; C:\Windows\system32\DRIVERS\LHidEqd.Sys [2013-05-23 13080] R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2013-05-23 76568] R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2013-05-23 59160] R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2013-04-04 25928] R3 NAVENG;NAVENG; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140124.016\ENG64.SYS [2014-01-20 126040] R3 NAVEX15;NAVEX15; \??\C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140124.016\EX64.SYS [2014-01-20 2099288] R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2013-10-27 196384] R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2013-12-05 39200] R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [2013-12-12 177752] R3 VMHybrid64;VMHybrid service; C:\Windows\system32\DRIVERS\VMHybr64.sys [2011-05-06 1403648] S3 cxbu0x64;OMNIKEY 3x21; C:\Windows\system32\DRIVERS\cxbu0x64.sys [2013-08-19 187264] S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [] S3 epmntdrv;epmntdrv; \??\C:\Windows\syswow64\epmntdrv.sys [2010-07-15 14216] S3 EuGdiDrv;EuGdiDrv; \??\C:\Windows\syswow64\EuGdiDrv.sys [2010-07-15 8456] S3 Ph3xIB64;Philips 713x Inbox PCI TV Card; C:\Windows\system32\DRIVERS\Ph3xIB64.sys [2009-06-10 1627520] S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888] S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456] S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656] S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [] S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688] S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2012-08-23 57856] S3 usbscan;Stuurprogramma voor USB-scanner; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496] S3 usbser;USB Serial emulation driver; C:\Windows\system32\DRIVERS\usbser.sys [2013-08-29 33280] S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760] S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984] S4 aksfridge;Sentinel Fridge; C:\Windows\system32\DRIVERS\aksfridge.sys [2013-08-09 140736] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AHDDC2;Ashampoo HDD Control 2 Service; C:\Program Files (x86)\Ashampoo\Ashampoo HDD Control 2\AHDDC2_Service.exe [2012-07-30 1518504] R2 cbVSCService;Cobian Backup 10 Volume Shadow Copy service; D:\Cobian backup\cbVSCService.exe [2010-09-23 67584] R2 CronService;Cron Service for Prey; D:\Prey\platform\windows\cronsvc.exe [2013-05-08 23552] R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136] R2 Fabs;FABS - Helping agent for MAGIX media database; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [2009-08-27 1253376] R2 hasplms;Sentinel HASP License Manager; C:\Windows\system32\hasplms.exe [2009-12-16 3750400] R2 MBAMScheduler;MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-04-04 418376] R2 MBAMService;MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2013-04-04 701512] R2 NAUpdate;@C:\Program Files (x86)\Nero\Update\NASvc.exe,-200; C:\Program Files (x86)\Nero\Update\NASvc.exe [2013-07-18 762192] R2 NIS;Norton Internet Security; C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe [2013-10-08 275696] R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2013-12-10 1494304] R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2013-12-10 15129376] R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-11-11 922912] R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2013-11-11 414496] R2 UleadBurningHelper;Ulead Burning Helper; C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [2005-01-31 49152] R2 vToolbarUpdater17.3.0;vToolbarUpdater17.3.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.3.0\ToolbarUpdater.exe [2014-01-09 1771544] R3 Adobe LM Service;Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [2013-10-29 72704] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088] S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-23 116648] S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136] S3 aspnet_state;ASP.NET-statusservice; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808] S3 DfSdkS;Defragmentation-Service; C:\Program Files (x86)\Ashampoo\Ashampoo HDD Control 2\DfSdkS64.exe [2009-08-24 544768] S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2008-08-07 3276800] S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-12-23 116648] S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe [2013-06-13 357144] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136] S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136] S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136] S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-10-28 1255736] S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] -----------------EOF-----------------

Hallo, alles uitgevoerd zoals gevraagd, zie de 2 logbestanden hieronder. Echter nog steeds hetzelfde probleem, niet mogelijk om de pagina af te drukken, de pagina blijft leeg, mvg, Alain Malwarebytes Anti-Malware (-evaluatieversie-) 1.75.0.1300 www.malwarebytes.org Databaseversie: v2014.01.24.01 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 10.0.9200.16750 Alain :: ALAIN-PC [administrator] Bescherming: Ingeschakeld 24/01/2014 4:53:27 mbam-log-2014-01-24 (04-53-27).txt Scan type: Snelle scan Ingeschakelde scan opties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM Uitgeschakelde scan opties: P2P Objecten gescand: 207639 Verstreken tijd: 2 minuut/minuten, 8 seconde(n) Geheugenprocessen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Geheugenmodulen gedetecteerd: 1 C:\Users\Alain\AppData\Roaming\newnext.me\nengine.dll (PUP.Optional.NextLive.A) -> Zal worden verwijderd tijdens het herstarten. Registersleutels gedetecteerd: 3 HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{DEDAF650-12B8-48F5-A843-BBA100716106} (PUP.Optional.SweetIM.A) -> Succesvol in quarantaine geplaatst en verwijderd. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{DEDAF650-12B8-48F5-A843-BBA100716106} (PUP.Optional.SweetIM.A) -> Succesvol in quarantaine geplaatst en verwijderd. HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C} (PUP.Optional.OptimzerPro.A) -> Succesvol in quarantaine geplaatst en verwijderd. Registerwaarden gedetecteerd: 1 HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|NextLive (PUP.Optional.NextLive.A) -> Data: C:\Windows\SysWOW64\rundll32.exe "C:\Users\Alain\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l -> Succesvol in quarantaine geplaatst en verwijderd. Registerdata gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Mappen gedetecteerd: 9 C:\ProgramData\DealPlyLive (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd. C:\ProgramData\DealPlyLive\Update (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd. C:\ProgramData\DealPlyLive\Update\Log (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Users\Alain\AppData\Roaming\Dealply (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Users\Alain\AppData\Roaming\Dealply\UpdateProc (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Users\Alain\AppData\Local\DealPlyLive (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Users\Alain\AppData\Local\DealPlyLive\CrashReports (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Users\Alain\AppData\Roaming\newnext.me (PUP.Optional.NextLive.A) -> Zal worden verwijderd tijdens het herstarten. C:\Users\Alain\AppData\Roaming\newnext.me\cache (PUP.Optional.NextLive.A) -> Succesvol in quarantaine geplaatst en verwijderd. Bestanden gedetecteerd: 6 C:\ProgramData\YTD Video Downloader\ytd_installer.exe (PUP.Optional.Spigot.A) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Users\Alain\AppData\Roaming\newnext.me\nengine.dll (PUP.Optional.NextLive.A) -> Zal worden verwijderd tijdens het herstarten. C:\ProgramData\DealPlyLive\Update\Log\DealPlyLive.log (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Users\Alain\AppData\Roaming\Dealply\UpdateProc\config.dat (PUP.Optional.DealPly.A) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Users\Alain\AppData\Roaming\newnext.me\nengine.cookie (PUP.Optional.NextLive.A) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Users\Alain\AppData\Roaming\newnext.me\cache\spark.bin (PUP.Optional.NextLive.A) -> Succesvol in quarantaine geplaatst en verwijderd. (einde) 2014/01/24 04:53:06 +0100 ALAIN-PC Alain MESSAGE Starting protection 2014/01/24 04:53:06 +0100 ALAIN-PC Alain MESSAGE Protection started successfully 2014/01/24 04:53:06 +0100 ALAIN-PC Alain MESSAGE Starting IP protection 2014/01/24 04:53:15 +0100 ALAIN-PC Alain MESSAGE IP Protection started successfully 2014/01/24 04:53:15 +0100 ALAIN-PC Alain MESSAGE Starting database refresh 2014/01/24 04:53:15 +0100 ALAIN-PC Alain MESSAGE Stopping IP protection 2014/01/24 04:53:17 +0100 ALAIN-PC Alain MESSAGE IP Protection stopped successfully 2014/01/24 04:53:19 +0100 ALAIN-PC Alain MESSAGE Database refreshed successfully 2014/01/24 04:53:19 +0100 ALAIN-PC Alain MESSAGE Starting IP protection 2014/01/24 04:53:20 +0100 ALAIN-PC Alain MESSAGE IP Protection started successfully 2014/01/24 04:58:14 +0100 ALAIN-PC Alain MESSAGE Starting protection 2014/01/24 04:58:14 +0100 ALAIN-PC Alain MESSAGE Protection started successfully 2014/01/24 04:58:14 +0100 ALAIN-PC Alain MESSAGE Starting IP protection 2014/01/24 04:58:16 +0100 ALAIN-PC Alain MESSAGE IP Protection started successfully

hallo, nee, ik krijg de startpagina google.be

hallo, bedankt voor de tip, maar helaas: geen resultaat, mvg, Alain

hallo, een probleem: voor verzending via Kiala dient er een document te worden afgeprint via hun website. Tot eergisteren lukte dit perfect, doch na een elektriciteitspanne lukt dit niet meer. Ik krijg een blanco internet pagina, dus totaal geen inhoud. Systeemherstel werkt (sedert aankoop van mijn pc) niet, daar kan ik geen hulp van verwachten. Alle andere printopdrachten lukken perfect, ik heb wel 1 x de melding gekregen bij het opstarten dat er iets fout was met WIA, Windows Image Aquisition, iemand een idee of oplossing wat ik hieraan kan verhelpen? alvast bedankt, mvg, Alain ps: windows 7, 64-bit en IE10

Hallo, bedankt voor de info, ik had het al kunnen verwijderen via Ccleaner, maar ik was benieuwd welke toepassing het betrof, mvg, Alain

ja, maar een paar weken was dit het geval niet, nu komt die map telkens tevoorschijn, toch bedankt hé, mvg, Alain

hallo, alvast bedankt voor je reactie, het lukt gedeeltelijk: bij toevoegen/verwijderen van een favoriet staat die map er weer, mvg, Alain