indo1991
-
Items
69 -
Registratiedatum
-
Laatst bezocht
Inhoudstype
Profielen
Forums
Store
Berichten die geplaatst zijn door indo1991
-
-
hij werkt nu beter,uitstekend
aleen hij word snel warm, maar dat ligt aan de batterij zelf.
ik dank jullie wel voor alle hulp.
-
Ze had avira virus scanner er op staan.
was een goede scanner.
maar ik heb avast erop gezet omdat ik zelf
die virus scanner ook op mijn eige laptop hebt staan
maar hier de volgende logje
Zoek.exe Version 4.0.0.4 Updated 31-07-2013
Tool run by Electrikeye on ma 05-08-2013 at 16:49:26,47.
Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Electrikeye\Downloads\zoek.exe [script inserted] [Checkboxes used]
==== Older Logs ======================
C:\zoek-results05-08-2013-1455.log 68038 bytes
==== Deleting CLSID Registry Keys ======================
==== Deleting CLSID Registry Values ======================
==== Deleting Services ======================
==== Registry Fix Code ======================
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Otshot"=-
==== Deleting Files \ Folders ======================
"C:\autoexec.bat" deleted
"C:\Users\Electrikeye\Downloads\SpyHunter-Installer (3).exe" deleted
"C:\Users\Electrikeye\Downloads\SpyHunter-Installer (2).exe" deleted
"C:\Users\Electrikeye\Downloads\SpyHunter-Installer (1).exe" deleted
"C:\Users\Electrikeye\Downloads\avast_free_antivirus_setup.exe" deleted
"C:\Users\Electrikeye\Downloads\ChromeSetup.exe" deleted
"C:\Users\Electrikeye\Downloads\SpyHunter-Installer.exe" deleted
"C:\Users\Electrikeye\Downloads\setup(2).exe" deleted
"C:\Program Files\Enigma Software Group" deleted
"C:\users\Electrikeye\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter" deleted
==== Firefox Extensions ======================
AppDir: C:\Program Files (x86)\Mozilla Firefox
- Undetermined - %AppDir%\extensions\staged
- Skype Click to Call - %AppDir%\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
- Undetermined - %AppDir%\extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}
==== Firefox Plugins ======================
==== Chrome Look ======================
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
fplhdcjmbpfkejbhngmlngaecbjmoimd - C:\Program Files\AVAST Software\Avast\AdBlocker\Chrome\avast-adblocker-chrome.crx[25-02-2013 11:09]
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com/"
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com/"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"
==== Empty IE Cache ======================
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Electrikeye\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
==== Empty FireFox Cache ======================
No FireFox Cache found
==== Empty Chrome Cache ======================
C:\users\Electrikeye\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
Java Cache cleared successfully
==== After Reboot ======================
==== Empty Temp Folders ======================
C:\Windows\Temp successfully emptied
C:\Users\ELECTR~1\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
C:\$RECYCLE.BIN successfully emptied
==== EOF on ma 05-08-2013 at 17:01:53,73 ======================
-
Hier de logje van zoek.exe
Zoek.exe Version 4.0.0.4 Updated 31-07-2013
Tool run by Electrikeye on ma 05-08-2013 at 14:31:21,75.
Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Electrikeye\Downloads\zoek.exe [script inserted] [Checkboxes used]
==== System Restore Info ======================
5-8-2013 14:36:11 Zoek.exe System Restore Point Created Succesfully.
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-1961875930-2905929432-421735862-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31ad400d-1b06-4e33-a59a-90c2c140cba0} deleted successfully
HKEY_USERS\S-1-5-21-1961875930-2905929432-421735862-1001\Software\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5} deleted successfully
HKEY_USERS\S-1-5-21-1961875930-2905929432-421735862-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} deleted successfully
HKEY_USERS\S-1-5-21-1961875930-2905929432-421735862-1001\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully
HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully
==== Deleting CLSID Registry Values ======================
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{ae07101b-46d4-4a98-af68-0333ea26e113} deleted successfully
==== Deleting Services ======================
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Web Assistant deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Web Assistant deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WsysSvc deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WsysSvc deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\Application\WsysSvc deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\WsysSvc deleted successfully
==== FireFox Fix ======================
Deleted from C:\Users\Electrikeye\AppData\Roaming\Mozilla\Firefox\Profiles\rg9ib7hw.default\prefs.js:
Added to C:\Users\Electrikeye\AppData\Roaming\Mozilla\Firefox\Profiles\rg9ib7hw.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);
==== Deleting Files \ Folders ======================
"C:\user.js" deleted
"C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml" deleted
"C:\Program Files (x86)\Mozilla Firefox\searchplugins\SearchResults.xml" deleted
"C:\Users\Electrikeye\Downloads\SoftonicDownloader_for_free-easy-cd-dvd-burner.exe" deleted
"C:\Users\Electrikeye\Downloads\SoftonicDownloader_voor_vlc-media-player.exe" deleted
"C:\Users\Electrikeye\Downloads\SoftonicDownloader_voor_winrar.exe" deleted
"C:\Windows\wininit.ini" deleted
"C:\Windows\SysNative\roboot64.exe" deleted
"C:\windows\SysNative\Tasks\DealPly" deleted
"C:\Windows\FAP1047.tmp" deleted
"C:\Windows\FAP10D6.tmp" deleted
"C:\Windows\FAP10F9.tmp" deleted
"C:\Windows\FAP1136.tmp" deleted
"C:\Windows\FAP1181.tmp" deleted
"C:\Windows\FAP11E3.tmp" deleted
"C:\Windows\FAP12D0.tmp" deleted
"C:\Windows\FAP12EF.tmp" deleted
"C:\Windows\FAP133.tmp" deleted
"C:\Windows\FAP13B1.tmp" deleted
"C:\Windows\FAP13F7.tmp" deleted
"C:\Windows\FAP140.tmp" deleted
"C:\Windows\FAP1442.tmp" deleted
"C:\Windows\FAP1467.tmp" deleted
"C:\Windows\FAP14AE.tmp" deleted
"C:\Windows\FAP1552.tmp" deleted
"C:\Windows\FAP15D1.tmp" deleted
"C:\Windows\FAP1608.tmp" deleted
"C:\Windows\FAP165.tmp" deleted
"C:\Windows\FAP1653.tmp" deleted
"C:\Windows\FAP1685.tmp" deleted
"C:\Windows\FAP16C6.tmp" deleted
"C:\Windows\FAP16E5.tmp" deleted
"C:\Windows\FAP1755.tmp" deleted
"C:\Windows\FAP178B.tmp" deleted
"C:\Windows\FAP17A4.tmp" deleted
"C:\Windows\FAP17C0.tmp" deleted
"C:\Windows\FAP17D5.tmp" deleted
"C:\Windows\FAP1802.tmp" deleted
"C:\Windows\FAP180A.tmp" deleted
"C:\Windows\FAP1826.tmp" deleted
"C:\Windows\FAP184C.tmp" deleted
"C:\Windows\FAP18C0.tmp" deleted
"C:\Windows\FAP190D.tmp" deleted
"C:\Windows\FAP19C2.tmp" deleted
"C:\Windows\FAP1A6.tmp" deleted
"C:\Windows\FAP1A90.tmp" deleted
"C:\Windows\FAP1B34.tmp" deleted
"C:\Windows\FAP1B8A.tmp" deleted
"C:\Windows\FAP1C0D.tmp" deleted
"C:\Windows\FAP1C67.tmp" deleted
"C:\Windows\FAP1CF.tmp" deleted
"C:\Windows\FAP1D06.tmp" deleted
"C:\Windows\FAP1D1F.tmp" deleted
"C:\Windows\FAP1D98.tmp" deleted
"C:\Windows\FAP1DF1.tmp" deleted
"C:\Windows\FAP1E09.tmp" deleted
"C:\Windows\FAP1E0D.tmp" deleted
"C:\Windows\FAP1E31.tmp" deleted
"C:\Windows\FAP1E4E.tmp" deleted
"C:\Windows\FAP1E56.tmp" deleted
"C:\Windows\FAP1E66.tmp" deleted
"C:\Windows\FAP1E99.tmp" deleted
"C:\Windows\FAP1EBE.tmp" deleted
"C:\Windows\FAP1ED7.tmp" deleted
"C:\Windows\FAP1EF5.tmp" deleted
"C:\Windows\FAP1F24.tmp" deleted
"C:\Windows\FAP1F57.tmp" deleted
"C:\Windows\FAP1F75.tmp" deleted
"C:\Windows\FAP1FAB.tmp" deleted
"C:\Windows\FAP1FB1.tmp" deleted
"C:\Windows\FAP1FB8.tmp" deleted
"C:\Windows\FAP1FF3.tmp" deleted
"C:\Windows\FAP2001.tmp" deleted
"C:\Windows\FAP2069.tmp" deleted
"C:\Windows\FAP2092.tmp" deleted
"C:\Windows\FAP20B4.tmp" deleted
"C:\Windows\FAP218A.tmp" deleted
"C:\Windows\FAP220E.tmp" deleted
"C:\Windows\FAP228E.tmp" deleted
"C:\Windows\FAP22CA.tmp" deleted
"C:\Windows\FAP2332.tmp" deleted
"C:\Windows\FAP23B6.tmp" deleted
"C:\Windows\FAP243B.tmp" deleted
"C:\Windows\FAP2472.tmp" deleted
"C:\Windows\FAP2493.tmp" deleted
"C:\Windows\FAP24F1.tmp" deleted
"C:\Windows\FAP2537.tmp" deleted
"C:\Windows\FAP25DE.tmp" deleted
"C:\Windows\FAP25E9.tmp" deleted
"C:\Windows\FAP260D.tmp" deleted
"C:\Windows\FAP264E.tmp" deleted
"C:\Windows\FAP266.tmp" deleted
"C:\Windows\FAP26B.tmp" deleted
"C:\Windows\FAP26C0.tmp" deleted
"C:\Windows\FAP26D5.tmp" deleted
"C:\Windows\FAP26DC.tmp" deleted
"C:\Windows\FAP272.tmp" deleted
"C:\Windows\FAP27C8.tmp" deleted
"C:\Windows\FAP27E2.tmp" deleted
"C:\Windows\FAP2833.tmp" deleted
"C:\Windows\FAP283F.tmp" deleted
"C:\Windows\FAP2843.tmp" deleted
"C:\Windows\FAP2870.tmp" deleted
"C:\Windows\FAP28A3.tmp" deleted
"C:\Windows\FAP28C3.tmp" deleted
"C:\Windows\FAP2931.tmp" deleted
"C:\Windows\FAP29D0.tmp" deleted
"C:\Windows\FAP2A6E.tmp" deleted
"C:\Windows\FAP2AAA.tmp" deleted
"C:\Windows\FAP2AD4.tmp" deleted
"C:\Windows\FAP2AE3.tmp" deleted
"C:\Windows\FAP2BC0.tmp" deleted
"C:\Windows\FAP2BE9.tmp" deleted
"C:\Windows\FAP2C1F.tmp" deleted
"C:\Windows\FAP2C24.tmp" deleted
"C:\Windows\FAP2C5E.tmp" deleted
"C:\Windows\FAP2C69.tmp" deleted
"C:\Windows\FAP2D18.tmp" deleted
"C:\Windows\FAP2D4A.tmp" deleted
"C:\Windows\FAP2D9B.tmp" deleted
"C:\Windows\FAP2DD6.tmp" deleted
"C:\Windows\FAP2E2.tmp" deleted
"C:\Windows\FAP2E4.tmp" deleted
"C:\Windows\FAP2E40.tmp" deleted
"C:\Windows\FAP2EDF.tmp" deleted
"C:\Windows\FAP2F7E.tmp" deleted
"C:\Windows\FAP2FBC.tmp" deleted
"C:\Windows\FAP30D8.tmp" deleted
"C:\Windows\FAP30D9.tmp" deleted
"C:\Windows\FAP3126.tmp" deleted
"C:\Windows\FAP3139.tmp" deleted
"C:\Windows\FAP319C.tmp" deleted
"C:\Windows\FAP323.tmp" deleted
"C:\Windows\FAP3242.tmp" deleted
"C:\Windows\FAP3269.tmp" deleted
"C:\Windows\FAP329.tmp" deleted
"C:\Windows\FAP32B2.tmp" deleted
"C:\Windows\FAP32E6.tmp" deleted
"C:\Windows\FAP32F8.tmp" deleted
"C:\Windows\FAP3359.tmp" deleted
"C:\Windows\FAP33B9.tmp" deleted
"C:\Windows\FAP33CB.tmp" deleted
"C:\Windows\FAP3429.tmp" deleted
"C:\Windows\FAP3432.tmp" deleted
"C:\Windows\FAP3554.tmp" deleted
"C:\Windows\FAP3563.tmp" deleted
"C:\Windows\FAP357D.tmp" deleted
"C:\Windows\FAP35EC.tmp" deleted
"C:\Windows\FAP379A.tmp" deleted
"C:\Windows\FAP37E6.tmp" deleted
"C:\Windows\FAP392A.tmp" deleted
"C:\Windows\FAP397B.tmp" deleted
"C:\Windows\FAP3A6D.tmp" deleted
"C:\Windows\FAP3AAE.tmp" deleted
"C:\Windows\FAP3AF0.tmp" deleted
"C:\Windows\FAP3B3D.tmp" deleted
"C:\Windows\FAP3B42.tmp" deleted
"C:\Windows\FAP3B81.tmp" deleted
"C:\Windows\FAP3CB6.tmp" deleted
"C:\Windows\FAP3D39.tmp" deleted
"C:\Windows\FAP3E14.tmp" deleted
"C:\Windows\FAP3E5F.tmp" deleted
"C:\Windows\FAP3EF1.tmp" deleted
"C:\Windows\FAP3F90.tmp" deleted
"C:\Windows\FAP4013.tmp" deleted
"C:\Windows\FAP405F.tmp" deleted
"C:\Windows\FAP409F.tmp" deleted
"C:\Windows\FAP4247.tmp" deleted
"C:\Windows\FAP4298.tmp" deleted
"C:\Windows\FAP42D9.tmp" deleted
"C:\Windows\FAP4554.tmp" deleted
"C:\Windows\FAP45CC.tmp" deleted
"C:\Windows\FAP4640.tmp" deleted
"C:\Windows\FAP4656.tmp" deleted
"C:\Windows\FAP4664.tmp" deleted
"C:\Windows\FAP4696.tmp" deleted
"C:\Windows\FAP469E.tmp" deleted
"C:\Windows\FAP46F7.tmp" deleted
"C:\Windows\FAP4732.tmp" deleted
"C:\Windows\FAP4817.tmp" deleted
"C:\Windows\FAP485B.tmp" deleted
"C:\Windows\FAP488C.tmp" deleted
"C:\Windows\FAP48BB.tmp" deleted
"C:\Windows\FAP4986.tmp" deleted
"C:\Windows\FAP4A50.tmp" deleted
"C:\Windows\FAP4A92.tmp" deleted
"C:\Windows\FAP4AAF.tmp" deleted
"C:\Windows\FAP4AD1.tmp" deleted
"C:\Windows\FAP4AEF.tmp" deleted
"C:\Windows\FAP4AF.tmp" deleted
"C:\Windows\FAP4AFB.tmp" deleted
"C:\Windows\FAP4B40.tmp" deleted
"C:\Windows\FAP4BCD.tmp" deleted
"C:\Windows\FAP4BE2.tmp" deleted
"C:\Windows\FAP4BF4.tmp" deleted
"C:\Windows\FAP4C08.tmp" deleted
"C:\Windows\FAP4C28.tmp" deleted
"C:\Windows\FAP4C83.tmp" deleted
"C:\Windows\FAP4D32.tmp" deleted
"C:\Windows\FAP4D7B.tmp" deleted
"C:\Windows\FAP4DD3.tmp" deleted
"C:\Windows\FAP4E1A.tmp" deleted
"C:\Windows\FAP4E35.tmp" deleted
"C:\Windows\FAP4E5B.tmp" deleted
"C:\Windows\FAP4E7C.tmp" deleted
"C:\Windows\FAP4EC5.tmp" deleted
"C:\Windows\FAP4F58.tmp" deleted
"C:\Windows\FAP4F8.tmp" deleted
"C:\Windows\FAP4FE6.tmp" deleted
"C:\Windows\FAP509D.tmp" deleted
"C:\Windows\FAP50EE.tmp" deleted
"C:\Windows\FAP5119.tmp" deleted
"C:\Windows\FAP519D.tmp" deleted
"C:\Windows\FAP5201.tmp" deleted
"C:\Windows\FAP5269.tmp" deleted
"C:\Windows\FAP52D0.tmp" deleted
"C:\Windows\FAP52F3.tmp" deleted
"C:\Windows\FAP5322.tmp" deleted
"C:\Windows\FAP53B1.tmp" deleted
"C:\Windows\FAP53CD.tmp" deleted
"C:\Windows\FAP54B9.tmp" deleted
"C:\Windows\FAP551B.tmp" deleted
"C:\Windows\FAP55BE.tmp" deleted
"C:\Windows\FAP5602.tmp" deleted
"C:\Windows\FAP5636.tmp" deleted
"C:\Windows\FAP573D.tmp" deleted
"C:\Windows\FAP5762.tmp" deleted
"C:\Windows\FAP5775.tmp" deleted
"C:\Windows\FAP57F5.tmp" deleted
"C:\Windows\FAP5851.tmp" deleted
"C:\Windows\FAP58A1.tmp" deleted
"C:\Windows\FAP58A2.tmp" deleted
"C:\Windows\FAP58C7.tmp" deleted
"C:\Windows\FAP58D4.tmp" deleted
"C:\Windows\FAP591A.tmp" deleted
"C:\Windows\FAP594C.tmp" deleted
"C:\Windows\FAP597E.tmp" deleted
"C:\Windows\FAP598D.tmp" deleted
"C:\Windows\FAP59C8.tmp" deleted
"C:\Windows\FAP5A08.tmp" deleted
"C:\Windows\FAP5A1D.tmp" deleted
"C:\Windows\FAP5A49.tmp" deleted
"C:\Windows\FAP5AF7.tmp" deleted
"C:\Windows\FAP5B03.tmp" deleted
"C:\Windows\FAP5B7.tmp" deleted
"C:\Windows\FAP5C94.tmp" deleted
"C:\Windows\FAP5CC6.tmp" deleted
"C:\Windows\FAP5CC8.tmp" deleted
"C:\Windows\FAP5D08.tmp" deleted
"C:\Windows\FAP5E25.tmp" deleted
"C:\Windows\FAP5E53.tmp" deleted
"C:\Windows\FAP5EDE.tmp" deleted
"C:\Windows\FAP5EF7.tmp" deleted
"C:\Windows\FAP5F22.tmp" deleted
"C:\Windows\FAP5F27.tmp" deleted
"C:\Windows\FAP5F48.tmp" deleted
"C:\Windows\FAP5F89.tmp" deleted
"C:\Windows\FAP600F.tmp" deleted
"C:\Windows\FAP6043.tmp" deleted
"C:\Windows\FAP6055.tmp" deleted
"C:\Windows\FAP6059.tmp" deleted
"C:\Windows\FAP60AA.tmp" deleted
"C:\Windows\FAP60ED.tmp" deleted
"C:\Windows\FAP611A.tmp" deleted
"C:\Windows\FAP619.tmp" deleted
"C:\Windows\FAP620E.tmp" deleted
"C:\Windows\FAP62DC.tmp" deleted
"C:\Windows\FAP632D.tmp" deleted
"C:\Windows\FAP638D.tmp" deleted
"C:\Windows\FAP6392.tmp" deleted
"C:\Windows\FAP64A1.tmp" deleted
"C:\Windows\FAP64B9.tmp" deleted
"C:\Windows\FAP6548.tmp" deleted
"C:\Windows\FAP6578.tmp" deleted
"C:\Windows\FAP6583.tmp" deleted
"C:\Windows\FAP6584.tmp" deleted
"C:\Windows\FAP65D7.tmp" deleted
"C:\Windows\FAP6641.tmp" deleted
"C:\Windows\FAP6655.tmp" deleted
"C:\Windows\FAP6676.tmp" deleted
"C:\Windows\FAP66B0.tmp" deleted
"C:\Windows\FAP66BE.tmp" deleted
"C:\Windows\FAP6721.tmp" deleted
"C:\Windows\FAP672C.tmp" deleted
"C:\Windows\FAP675.tmp" deleted
"C:\Windows\FAP6792.tmp" deleted
"C:\Windows\FAP67C0.tmp" deleted
"C:\Windows\FAP67F5.tmp" deleted
"C:\Windows\FAP6875.tmp" deleted
"C:\Windows\FAP6885.tmp" deleted
"C:\Windows\FAP68B2.tmp" deleted
"C:\Windows\FAP68B3.tmp" deleted
"C:\Windows\FAP68C6.tmp" deleted
"C:\Windows\FAP68EB.tmp" deleted
"C:\Windows\FAP693A.tmp" deleted
"C:\Windows\FAP699F.tmp" deleted
"C:\Windows\FAP6A07.tmp" deleted
"C:\Windows\FAP6B16.tmp" deleted
"C:\Windows\FAP6BC4.tmp" deleted
"C:\Windows\FAP6BEC.tmp" deleted
"C:\Windows\FAP6C1E.tmp" deleted
"C:\Windows\FAP6C22.tmp" deleted
"C:\Windows\FAP6CB8.tmp" deleted
"C:\Windows\FAP6CD0.tmp" deleted
"C:\Windows\FAP6D2A.tmp" deleted
"C:\Windows\FAP6E12.tmp" deleted
"C:\Windows\FAP6EE0.tmp" deleted
"C:\Windows\FAP6F1E.tmp" deleted
"C:\Windows\FAP6FB6.tmp" deleted
"C:\Windows\FAP6FDB.tmp" deleted
"C:\Windows\FAP70C5.tmp" deleted
"C:\Windows\FAP70D2.tmp" deleted
"C:\Windows\FAP7142.tmp" deleted
"C:\Windows\FAP7172.tmp" deleted
"C:\Windows\FAP71D1.tmp" deleted
"C:\Windows\FAP71E1.tmp" deleted
"C:\Windows\FAP7241.tmp" deleted
"C:\Windows\FAP725E.tmp" deleted
"C:\Windows\FAP727F.tmp" deleted
"C:\Windows\FAP7290.tmp" deleted
"C:\Windows\FAP72A9.tmp" deleted
"C:\Windows\FAP72F0.tmp" deleted
"C:\Windows\FAP7306.tmp" deleted
"C:\Windows\FAP7377.tmp" deleted
"C:\Windows\FAP739B.tmp" deleted
"C:\Windows\FAP7403.tmp" deleted
"C:\Windows\FAP7461.tmp" deleted
"C:\Windows\FAP7483.tmp" deleted
"C:\Windows\FAP752E.tmp" deleted
"C:\Windows\FAP7561.tmp" deleted
"C:\Windows\FAP762B.tmp" deleted
"C:\Windows\FAP7756.tmp" deleted
"C:\Windows\FAP7757.tmp" deleted
"C:\Windows\FAP7824.tmp" deleted
"C:\Windows\FAP785C.tmp" deleted
"C:\Windows\FAP789.tmp" deleted
"C:\Windows\FAP78B3.tmp" deleted
"C:\Windows\FAP78DC.tmp" deleted
"C:\Windows\FAP7914.tmp" deleted
"C:\Windows\FAP7934.tmp" deleted
"C:\Windows\FAP794E.tmp" deleted
"C:\Windows\FAP7969.tmp" deleted
"C:\Windows\FAP7980.tmp" deleted
"C:\Windows\FAP79C2.tmp" deleted
"C:\Windows\FAP7A36.tmp" deleted
"C:\Windows\FAP7A65.tmp" deleted
"C:\Windows\FAP7A66.tmp" deleted
"C:\Windows\FAP7AB.tmp" deleted
"C:\Windows\FAP7AC8.tmp" deleted
"C:\Windows\FAP7B62.tmp" deleted
"C:\Windows\FAP7B7F.tmp" deleted
"C:\Windows\FAP7B86.tmp" deleted
"C:\Windows\FAP7BB0.tmp" deleted
"C:\Windows\FAP7C30.tmp" deleted
"C:\Windows\FAP7C32.tmp" deleted
"C:\Windows\FAP7D08.tmp" deleted
"C:\Windows\FAP7D7C.tmp" deleted
"C:\Windows\FAP7E16.tmp" deleted
"C:\Windows\FAP7E4F.tmp" deleted
"C:\Windows\FAP7E61.tmp" deleted
"C:\Windows\FAP7E62.tmp" deleted
"C:\Windows\FAP7E92.tmp" deleted
"C:\Windows\FAP7EC4.tmp" deleted
"C:\Windows\FAP7FBF.tmp" deleted
"C:\Windows\FAP7FD8.tmp" deleted
"C:\Windows\FAP801C.tmp" deleted
"C:\Windows\FAP8097.tmp" deleted
"C:\Windows\FAP80E8.tmp" deleted
"C:\Windows\FAP80F9.tmp" deleted
"C:\Windows\FAP810B.tmp" deleted
"C:\Windows\FAP8119.tmp" deleted
"C:\Windows\FAP814C.tmp" deleted
"C:\Windows\FAP818E.tmp" deleted
"C:\Windows\FAP81F6.tmp" deleted
"C:\Windows\FAP8211.tmp" deleted
"C:\Windows\FAP8282.tmp" deleted
"C:\Windows\FAP82ED.tmp" deleted
"C:\Windows\FAP82F3.tmp" deleted
"C:\Windows\FAP831D.tmp" deleted
"C:\Windows\FAP83BC.tmp" deleted
"C:\Windows\FAP83D0.tmp" deleted
"C:\Windows\FAP83F5.tmp" deleted
"C:\Windows\FAP8446.tmp" deleted
"C:\Windows\FAP84CB.tmp" deleted
"C:\Windows\FAP84E0.tmp" deleted
"C:\Windows\FAP8572.tmp" deleted
"C:\Windows\FAP85A3.tmp" deleted
"C:\Windows\FAP85D5.tmp" deleted
"C:\Windows\FAP85F1.tmp" deleted
"C:\Windows\FAP86EE.tmp" deleted
"C:\Windows\FAP8709.tmp" deleted
"C:\Windows\FAP874A.tmp" deleted
"C:\Windows\FAP879B.tmp" deleted
"C:\Windows\FAP87D8.tmp" deleted
"C:\Windows\FAP8865.tmp" deleted
"C:\Windows\FAP88D5.tmp" deleted
"C:\Windows\FAP8923.tmp" deleted
"C:\Windows\FAP8970.tmp" deleted
"C:\Windows\FAP898.tmp" deleted
"C:\Windows\FAP89DD.tmp" deleted
"C:\Windows\FAP89E1.tmp" deleted
"C:\Windows\FAP8A5D.tmp" deleted
"C:\Windows\FAP8ADD.tmp" deleted
"C:\Windows\FAP8AFD.tmp" deleted
"C:\Windows\FAP8C62.tmp" deleted
"C:\Windows\FAP8CA4.tmp" deleted
"C:\Windows\FAP8D16.tmp" deleted
"C:\Windows\FAP8DE5.tmp" deleted
"C:\Windows\FAP8E1E.tmp" deleted
"C:\Windows\FAP8E54.tmp" deleted
"C:\Windows\FAP8E63.tmp" deleted
"C:\Windows\FAP8E9.tmp" deleted
"C:\Windows\FAP8EA.tmp" deleted
"C:\Windows\FAP8EA3.tmp" deleted
"C:\Windows\FAP8EF4.tmp" deleted
"C:\Windows\FAP8F12.tmp" deleted
"C:\Windows\FAP8F73.tmp" deleted
"C:\Windows\FAP8F8.tmp" deleted
"C:\Windows\FAP9010.tmp" deleted
"C:\Windows\FAP9051.tmp" deleted
"C:\Windows\FAP912.tmp" deleted
"C:\Windows\FAP918C.tmp" deleted
"C:\Windows\FAP91D8.tmp" deleted
"C:\Windows\FAP925F.tmp" deleted
"C:\Windows\FAP929.tmp" deleted
"C:\Windows\FAP937B.tmp" deleted
"C:\Windows\FAP93DC.tmp" deleted
"C:\Windows\FAP93E0.tmp" deleted
"C:\Windows\FAP9566.tmp" deleted
"C:\Windows\FAP95B.tmp" deleted
"C:\Windows\FAP95F7.tmp" deleted
"C:\Windows\FAP960F.tmp" deleted
"C:\Windows\FAP9696.tmp" deleted
"C:\Windows\FAP96C0.tmp" deleted
"C:\Windows\FAP96D7.tmp" deleted
"C:\Windows\FAP96DB.tmp" deleted
"C:\Windows\FAP9762.tmp" deleted
"C:\Windows\FAP97E2.tmp" deleted
"C:\Windows\FAP98FA.tmp" deleted
"C:\Windows\FAP997B.tmp" deleted
"C:\Windows\FAP99AA.tmp" deleted
"C:\Windows\FAP99F6.tmp" deleted
"C:\Windows\FAP9A06.tmp" deleted
"C:\Windows\FAP9A83.tmp" deleted
"C:\Windows\FAP9A96.tmp" deleted
"C:\Windows\FAP9B02.tmp" deleted
"C:\Windows\FAP9B07.tmp" deleted
"C:\Windows\FAP9B2.tmp" deleted
"C:\Windows\FAP9B58.tmp" deleted
"C:\Windows\FAP9C4C.tmp" deleted
"C:\Windows\FAP9C93.tmp" deleted
"C:\Windows\FAP9C98.tmp" deleted
"C:\Windows\FAP9D1.tmp" deleted
"C:\Windows\FAP9D18.tmp" deleted
"C:\Windows\FAP9D97.tmp" deleted
"C:\Windows\FAP9DC5.tmp" deleted
"C:\Windows\FAP9DC6.tmp" deleted
"C:\Windows\FAP9E06.tmp" deleted
"C:\Windows\FAP9E55.tmp" deleted
"C:\Windows\FAP9E64.tmp" deleted
"C:\Windows\FAP9EE8.tmp" deleted
"C:\Windows\FAP9FA6.tmp" deleted
"C:\Windows\FAP9FA8.tmp" deleted
"C:\Windows\FAPA128.tmp" deleted
"C:\Windows\FAPA131.tmp" deleted
"C:\Windows\FAPA1FB.tmp" deleted
"C:\Windows\FAPA2C9.tmp" deleted
"C:\Windows\FAPA30F.tmp" deleted
"C:\Windows\FAPA332.tmp" deleted
"C:\Windows\FAPA368.tmp" deleted
"C:\Windows\FAPA3FC.tmp" deleted
"C:\Windows\FAPA41.tmp" deleted
"C:\Windows\FAPA43E.tmp" deleted
"C:\Windows\FAPA47F.tmp" deleted
"C:\Windows\FAPA61.tmp" deleted
"C:\Windows\FAPA623.tmp" deleted
"C:\Windows\FAPA710.tmp" deleted
"C:\Windows\FAPA741.tmp" deleted
"C:\Windows\FAPA78B.tmp" deleted
"C:\Windows\FAPA7CC.tmp" deleted
"C:\Windows\FAPA80E.tmp" deleted
"C:\Windows\FAPA812.tmp" deleted
"C:\Windows\FAPA891.tmp" deleted
"C:\Windows\FAPA92D.tmp" deleted
"C:\Windows\FAPA974.tmp" deleted
"C:\Windows\FAPA97E.tmp" deleted
"C:\Windows\FAPA9B0.tmp" deleted
"C:\Windows\FAPAA7F.tmp" deleted
"C:\Windows\FAPAB3C.tmp" deleted
"C:\Windows\FAPABC3.tmp" deleted
"C:\Windows\FAPABF3.tmp" deleted
"C:\Windows\FAPAC35.tmp" deleted
"C:\Windows\FAPAC54.tmp" deleted
"C:\Windows\FAPACE3.tmp" deleted
"C:\Windows\FAPAD22.tmp" deleted
"C:\Windows\FAPADB9.tmp" deleted
"C:\Windows\FAPADCD.tmp" deleted
"C:\Windows\FAPADD0.tmp" deleted
"C:\Windows\FAPAE2D.tmp" deleted
"C:\Windows\FAPAE7A.tmp" deleted
"C:\Windows\FAPAE9D.tmp" deleted
"C:\Windows\FAPAEC2.tmp" deleted
"C:\Windows\FAPAF09.tmp" deleted
"C:\Windows\FAPAF1B.tmp" deleted
"C:\Windows\FAPAF51.tmp" deleted
"C:\Windows\FAPAF80.tmp" deleted
"C:\Windows\FAPAF89.tmp" deleted
"C:\Windows\FAPAFCA.tmp" deleted
"C:\Windows\FAPB018.tmp" deleted
"C:\Windows\FAPB01F.tmp" deleted
"C:\Windows\FAPB026.tmp" deleted
"C:\Windows\FAPB08F.tmp" deleted
"C:\Windows\FAPB0E6.tmp" deleted
"C:\Windows\FAPB0EA.tmp" deleted
"C:\Windows\FAPB113.tmp" deleted
"C:\Windows\FAPB119.tmp" deleted
"C:\Windows\FAPB171.tmp" deleted
"C:\Windows\FAPB173.tmp" deleted
"C:\Windows\FAPB257.tmp" deleted
"C:\Windows\FAPB264.tmp" deleted
"C:\Windows\FAPB2FB.tmp" deleted
"C:\Windows\FAPB353.tmp" deleted
"C:\Windows\FAPB365.tmp" deleted
"C:\Windows\FAPB367.tmp" deleted
"C:\Windows\FAPB388.tmp" deleted
"C:\Windows\FAPB3A6.tmp" deleted
"C:\Windows\FAPB3AB.tmp" deleted
"C:\Windows\FAPB3D1.tmp" deleted
"C:\Windows\FAPB408.tmp" deleted
"C:\Windows\FAPB414.tmp" deleted
"C:\Windows\FAPB422.tmp" deleted
"C:\Windows\FAPB454.tmp" deleted
"C:\Windows\FAPB465.tmp" deleted
"C:\Windows\FAPB514.tmp" deleted
"C:\Windows\FAPB515.tmp" deleted
"C:\Windows\FAPB594.tmp" deleted
"C:\Windows\FAPB5A2.tmp" deleted
"C:\Windows\FAPB602.tmp" deleted
"C:\Windows\FAPB634.tmp" deleted
"C:\Windows\FAPB640.tmp" deleted
"C:\Windows\FAPB6C8.tmp" deleted
"C:\Windows\FAPB6DF.tmp" deleted
"C:\Windows\FAPB816.tmp" deleted
"C:\Windows\FAPB9D0.tmp" deleted
"C:\Windows\FAPBA21.tmp" deleted
"C:\Windows\FAPBABD.tmp" deleted
"C:\Windows\FAPBAFE.tmp" deleted
"C:\Windows\FAPBB2D.tmp" deleted
"C:\Windows\FAPBB32.tmp" deleted
"C:\Windows\FAPBB33.tmp" deleted
"C:\Windows\FAPBB7.tmp" deleted
"C:\Windows\FAPBBF9.tmp" deleted
"C:\Windows\FAPBC39.tmp" deleted
"C:\Windows\FAPBCBB.tmp" deleted
"C:\Windows\FAPBCC8.tmp" deleted
"C:\Windows\FAPBCEA.tmp" deleted
"C:\Windows\FAPBDA.tmp" deleted
"C:\Windows\FAPBDB1.tmp" deleted
"C:\Windows\FAPBDC5.tmp" deleted
"C:\Windows\FAPBE44.tmp" deleted
"C:\Windows\FAPBE7E.tmp" deleted
"C:\Windows\FAPBF3D.tmp" deleted
"C:\Windows\FAPBF4E.tmp" deleted
"C:\Windows\FAPC114.tmp" deleted
"C:\Windows\FAPC20C.tmp" deleted
"C:\Windows\FAPC21F.tmp" deleted
"C:\Windows\FAPC23F.tmp" deleted
"C:\Windows\FAPC24.tmp" deleted
"C:\Windows\FAPC29F.tmp" deleted
"C:\Windows\FAPC2DE.tmp" deleted
"C:\Windows\FAPC440.tmp" deleted
"C:\Windows\FAPC486.tmp" deleted
"C:\Windows\FAPC508.tmp" deleted
"C:\Windows\FAPC573.tmp" deleted
"C:\Windows\FAPC5E8.tmp" deleted
"C:\Windows\FAPC678.tmp" deleted
"C:\Windows\FAPC6BE.tmp" deleted
"C:\Windows\FAPC6D7.tmp" deleted
"C:\Windows\FAPC76B.tmp" deleted
"C:\Windows\FAPC7E3.tmp" deleted
"C:\Windows\FAPC7F3.tmp" deleted
"C:\Windows\FAPC83A.tmp" deleted
"C:\Windows\FAPC858.tmp" deleted
"C:\Windows\FAPC89.tmp" deleted
"C:\Windows\FAPC8E7.tmp" deleted
"C:\Windows\FAPC965.tmp" deleted
"C:\Windows\FAPC967.tmp" deleted
"C:\Windows\FAPC9AB.tmp" deleted
"C:\Windows\FAPCA08.tmp" deleted
"C:\Windows\FAPCAFE.tmp" deleted
"C:\Windows\FAPCB15.tmp" deleted
"C:\Windows\FAPCB3F.tmp" deleted
"C:\Windows\FAPCB62.tmp" deleted
"C:\Windows\FAPCBBA.tmp" deleted
"C:\Windows\FAPCBC3.tmp" deleted
"C:\Windows\FAPCC50.tmp" deleted
"C:\Windows\FAPCC7.tmp" deleted
"C:\Windows\FAPCCA.tmp" deleted
"C:\Windows\FAPCD79.tmp" deleted
"C:\Windows\FAPCD8A.tmp" deleted
"C:\Windows\FAPCD8E.tmp" deleted
"C:\Windows\FAPCD96.tmp" deleted
"C:\Windows\FAPCDCF.tmp" deleted
"C:\Windows\FAPCDE9.tmp" deleted
"C:\Windows\FAPCDFE.tmp" deleted
"C:\Windows\FAPCE05.tmp" deleted
"C:\Windows\FAPCE11.tmp" deleted
"C:\Windows\FAPCE39.tmp" deleted
"C:\Windows\FAPCE3A.tmp" deleted
"C:\Windows\FAPCE8C.tmp" deleted
"C:\Windows\FAPCEB3.tmp" deleted
"C:\Windows\FAPCEE8.tmp" deleted
"C:\Windows\FAPCFA1.tmp" deleted
"C:\Windows\FAPCFB5.tmp" deleted
"C:\Windows\FAPCFC7.tmp" deleted
"C:\Windows\FAPD031.tmp" deleted
"C:\Windows\FAPD0A1.tmp" deleted
"C:\Windows\FAPD0B.tmp" deleted
"C:\Windows\FAPD0C4.tmp" deleted
"C:\Windows\FAPD12A.tmp" deleted
"C:\Windows\FAPD22A.tmp" deleted
"C:\Windows\FAPD2FA.tmp" deleted
"C:\Windows\FAPD31E.tmp" deleted
"C:\Windows\FAPD340.tmp" deleted
"C:\Windows\FAPD375.tmp" deleted
"C:\Windows\FAPD381.tmp" deleted
"C:\Windows\FAPD3A9.tmp" deleted
"C:\Windows\FAPD3CE.tmp" deleted
"C:\Windows\FAPD40A.tmp" deleted
"C:\Windows\FAPD47A.tmp" deleted
"C:\Windows\FAPD4B9.tmp" deleted
"C:\Windows\FAPD4C.tmp" deleted
"C:\Windows\FAPD4E4.tmp" deleted
"C:\Windows\FAPD519.tmp" deleted
"C:\Windows\FAPD55E.tmp" deleted
"C:\Windows\FAPD5C4.tmp" deleted
"C:\Windows\FAPD5D4.tmp" deleted
"C:\Windows\FAPD634.tmp" deleted
"C:\Windows\FAPD673.tmp" deleted
"C:\Windows\FAPD684.tmp" deleted
"C:\Windows\FAPD6C8.tmp" deleted
"C:\Windows\FAPD6E1.tmp" deleted
"C:\Windows\FAPD702.tmp" deleted
"C:\Windows\FAPD75.tmp" deleted
"C:\Windows\FAPD750.tmp" deleted
"C:\Windows\FAPD7A9.tmp" deleted
"C:\Windows\FAPD83D.tmp" deleted
"C:\Windows\FAPD86B.tmp" deleted
"C:\Windows\FAPD988.tmp" deleted
"C:\Windows\FAPDAF.tmp" deleted
"C:\Windows\FAPDB06.tmp" deleted
"C:\Windows\FAPDB84.tmp" deleted
"C:\Windows\FAPDBBC.tmp" deleted
"C:\Windows\FAPDBC9.tmp" deleted
"C:\Windows\FAPDC41.tmp" deleted
"C:\Windows\FAPDCA6.tmp" deleted
"C:\Windows\FAPDCCE.tmp" deleted
"C:\Windows\FAPDD07.tmp" deleted
"C:\Windows\FAPDD2E.tmp" deleted
"C:\Windows\FAPDD6D.tmp" deleted
"C:\Windows\FAPDEE6.tmp" deleted
"C:\Windows\FAPDF1.tmp" deleted
"C:\Windows\FAPE00A.tmp" deleted
"C:\Windows\FAPE031.tmp" deleted
"C:\Windows\FAPE1A5.tmp" deleted
"C:\Windows\FAPE292.tmp" deleted
"C:\Windows\FAPE2D4.tmp" deleted
"C:\Windows\FAPE315.tmp" deleted
"C:\Windows\FAPE32.tmp" deleted
"C:\Windows\FAPE3AE.tmp" deleted
"C:\Windows\FAPE432.tmp" deleted
"C:\Windows\FAPE487.tmp" deleted
"C:\Windows\FAPE4DD.tmp" deleted
"C:\Windows\FAPE4F1.tmp" deleted
"C:\Windows\FAPE6DF.tmp" deleted
"C:\Windows\FAPE702.tmp" deleted
"C:\Windows\FAPE783.tmp" deleted
"C:\Windows\FAPE83A.tmp" deleted
"C:\Windows\FAPE86B.tmp" deleted
"C:\Windows\FAPE8ED.tmp" deleted
"C:\Windows\FAPE92E.tmp" deleted
"C:\Windows\FAPE958.tmp" deleted
"C:\Windows\FAPE9AD.tmp" deleted
"C:\Windows\FAPE9E2.tmp" deleted
"C:\Windows\FAPE9FE.tmp" deleted
"C:\Windows\FAPEA36.tmp" deleted
"C:\Windows\FAPEA55.tmp" deleted
"C:\Windows\FAPEA5F.tmp" deleted
"C:\Windows\FAPEA75.tmp" deleted
"C:\Windows\FAPEAA7.tmp" deleted
"C:\Windows\FAPEAE9.tmp" deleted
"C:\Windows\FAPEAFE.tmp" deleted
"C:\Windows\FAPEB45.tmp" deleted
"C:\Windows\FAPEC52.tmp" deleted
"C:\Windows\FAPECA9.tmp" deleted
"C:\Windows\FAPECB1.tmp" deleted
"C:\Windows\FAPED0A.tmp" deleted
"C:\Windows\FAPEED4.tmp" deleted
"C:\Windows\FAPEFC1.tmp" deleted
"C:\Windows\FAPF00A.tmp" deleted
"C:\Windows\FAPF02D.tmp" deleted
"C:\Windows\FAPF03C.tmp" deleted
"C:\Windows\FAPF09D.tmp" deleted
"C:\Windows\FAPF0A0.tmp" deleted
"C:\Windows\FAPF0DA.tmp" deleted
"C:\Windows\FAPF0F1.tmp" deleted
"C:\Windows\FAPF149.tmp" deleted
"C:\Windows\FAPF152.tmp" deleted
"C:\Windows\FAPF215.tmp" deleted
"C:\Windows\FAPF27A.tmp" deleted
"C:\Windows\FAPF3A5.tmp" deleted
"C:\Windows\FAPF4E4.tmp" deleted
"C:\Windows\FAPF514.tmp" deleted
"C:\Windows\FAPF572.tmp" deleted
"C:\Windows\FAPF5E2.tmp" deleted
"C:\Windows\FAPF5FB.tmp" deleted
"C:\Windows\FAPF624.tmp" deleted
"C:\Windows\FAPF6D4.tmp" deleted
"C:\Windows\FAPF735.tmp" deleted
"C:\Windows\FAPF89E.tmp" deleted
"C:\Windows\FAPF94D.tmp" deleted
"C:\Windows\FAPF9DD.tmp" deleted
"C:\Windows\FAPF9EC.tmp" deleted
"C:\Windows\FAPFA5E.tmp" deleted
"C:\Windows\FAPFA8.tmp" deleted
"C:\Windows\FAPFA9B.tmp" deleted
"C:\Windows\FAPFAD9.tmp" deleted
"C:\Windows\FAPFB1B.tmp" deleted
"C:\Windows\FAPFBE5.tmp" deleted
"C:\Windows\FAPFC06.tmp" deleted
"C:\Windows\FAPFC66.tmp" deleted
"C:\Windows\FAPFC95.tmp" deleted
"C:\Windows\FAPFE29.tmp" deleted
"C:\Windows\FAPFE4C.tmp" deleted
"C:\Windows\FAPFF18.tmp" deleted
"C:\Windows\FAPFF8.tmp" deleted
"C:\Windows\FAPFFE5.tmp" deleted
"C:\Windows\FAPFFF5.tmp" deleted
"C:\windows\SysNative\tasks\Omiga Plus RunAsStdUser" deleted
"C:\windows\SysNative\tasks\Desk 365 RunAsStdUser" deleted
"C:\user.js" deleted
"C:\Windows\Syswow64\shoFFDC.tmp" deleted
"C:\Users\Electrikeye\AppData\Roaming\Mozilla\Firefox\Profiles\rg9ib7hw.default\searchplugins\babylon.xml" deleted
"C:\Program Files (x86)\Mozilla Firefox\searchplugins\qvo6.xml" deleted
"c:\program files\otshot\otshot.exe" deleted
"C:\Program Files (x86)\FilesFrog Update Checker\update_checker.exe" deleted
"C:\Program Files\Web Assistant" deleted
"c:\program files\otshot" deleted
"C:\Program Files (x86)\Smart Driver Updater" deleted
"C:\Program Files (x86)\Delta" deleted
"C:\Program Files (x86)\SearchCore for Browsers" deleted
"C:\Program Files (x86)\WinZipper" deleted
"C:\Program Files (x86)\FilesFrog Update Checker" deleted
"C:\Program Files (x86)\I Want This" deleted
"C:\Program Files (x86)\BearShare Applications\MediaBar" deleted
"C:\Program Files (x86)\Windows Searchqu Toolbar" deleted
"C:\Program Files (x86)\Desk 365" deleted
"C:\Program Files (x86)\Omiga Plus" deleted
"C:\Program Files (x86)\BrowserCompanion" deleted
"C:\Program Files (x86)\Perion" deleted
"C:\Program Files\Web Assistant" deleted
"C:\Users\Electrikeye\AppData\Roaming\Omiga Plus" deleted
"C:\Users\Electrikeye\AppData\Roaming\WinZipper" deleted
"C:\Users\Electrikeye\AppData\Roaming\Desk 365" deleted
"C:\Users\Electrikeye\AppData\Roaming\337" deleted
"C:\Users\Electrikeye\AppData\Roaming\eIntaller" deleted
"C:\Users\Electrikeye\AppData\Roaming\Babylon" deleted
"C:\Users\Electrikeye\AppData\Roaming\DealPly" deleted
"C:\Users\Electrikeye\AppData\Roaming\YoudaGames" deleted
"C:\Users\Electrikeye\AppData\Roaming\Systweak" deleted
"C:\Users\Electrikeye\AppData\Roaming\Smart Driver Updater" deleted
"C:\Users\Electrikeye\AppData\Roaming\OpenCandy" deleted
"C:\ProgramData\Browser Manager" deleted
"C:\ProgramData\eSafe" deleted
"C:\ProgramData\boost_interprocess" deleted
"C:\ProgramData\Tarma Installer" deleted
"C:\ProgramData\Babylon" deleted
"C:\ProgramData\Trymedia" deleted
"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YTD Video Downloader" deleted
"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Driver Updater" deleted
"C:\Users\Electrikeye\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker" deleted
"C:\Users\Electrikeye\AppData\Local\I Want This" deleted
"C:\Users\Electrikeye\AppData\Local\Software" deleted
"C:\Users\Electrikeye\AppData\Local\PackageAware" deleted
"C:\Users\Electrikeye\AppData\Local\SwvUpdater" deleted
"C:\Users\Electrikeye\AppData\LocalLow\mediabarbs" deleted
"C:\Users\Electrikeye\AppData\LocalLow\Delta" deleted
"C:\Users\Electrikeye\AppData\LocalLow\Softonic" deleted
"C:\Users\Electrikeye\AppData\LocalLow\DataMngr" deleted
"C:\Users\Electrikeye\AppData\LocalLow\uTorrentBar_NL" deleted
"C:\Users\Electrikeye\AppData\LocalLow\PriceGong" deleted
"C:\Users\Electrikeye\AppData\LocalLow\searchquband" deleted
"C:\Users\Electrikeye\AppData\LocalLow\Conduit" deleted
"C:\Windows\SysWow64\searchplugins" deleted
"C:\Windows\SysWow64\Extensions" deleted
==== Files Recently Created / Modified ======================
====== C:\Windows ====
2013-08-04 19:34:12 E9C8673674ECF840EE59ED805DBE9966 41664 ----a-w- C:\Windows\avastSS.scr
====== C:\Users\ELECTR~1\AppData\Local\Temp ====
2013-08-03 22:03:46 3B32CAA07D672F8A2E0DF5CB3A873F45 22704 ----a-w- C:\Users\ELECTR~1\AppData\Local\Temp\ESGScanner.sys
2013-08-03 22:02:16 B575AB32F77C20EB24D2EB4822B0EFBA 46646352 ----a-w- C:\Users\ELECTR~1\AppData\Local\Temp\SHSetup.exe
2013-08-03 12:38:16 F3A10836603E03A28CAF404B29328F92 394320 ----a-w- C:\Users\ELECTR~1\AppData\Local\Temp\uninst1.exe
====== C:\Windows\SysWOW64 =====
2013-08-04 19:34:36 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Windows\SysWOW64\config.nt
====== C:\Windows\SysWOW64\drivers =====
====== C:\Windows\Sysnative =====
2013-08-04 19:34:36 2B0C485EBE31E02C7B405F8DD072598D 287840 ----a-w- C:\Windows\Sysnative\aswBoot.exe
====== C:\Windows\Sysnative\drivers =====
2013-08-04 19:34:48 E86C64478D9A90D62255FE9EB0150C6E 175 ----a-w- C:\Windows\Sysnative\drivers\aswVmm.sys.sum
2013-08-04 19:34:48 A5F29AC2F0ADE8B995B49D7350CE3AC0 175 ----a-w- C:\Windows\Sysnative\drivers\aswSP.sys.sum
2013-08-04 19:34:48 2E83D2621E87C493AB45DC6655BA77D4 175 ----a-w- C:\Windows\Sysnative\drivers\aswSnx.sys.sum
2013-08-04 19:34:44 3815DB16CDA62190F5C0A65118F3D714 378944 ----a-w- C:\Windows\Sysnative\drivers\aswSP.sys
2013-08-04 19:34:44 0BAEFD3F648C6E7AB52990DD9565E4E2 33400 ----a-w- C:\Windows\Sysnative\drivers\aswFsBlk.sys
2013-08-04 19:34:42 64E2BAB4096C13D2342BC4661C967E07 72016 ----a-w- C:\Windows\Sysnative\drivers\aswRdr2.sys
2013-08-04 19:34:39 29DD8E458A84171202AA4979364C30C0 64288 ----a-w- C:\Windows\Sysnative\drivers\aswTdi.sys
2013-08-04 19:34:37 8C0800CDB501CFC1164B286A0478DC10 1030952 ----a-w- C:\Windows\Sysnative\drivers\aswSnx.sys
2013-08-04 19:34:37 5573AA70993A2BB81525B1C704B88763 65336 ----a-w- C:\Windows\Sysnative\drivers\aswRvrt.sys
2013-08-04 19:34:37 22F521108881DC59837F6FC614E0568F 189936 ----a-w- C:\Windows\Sysnative\drivers\aswVmm.sys
2013-08-04 19:34:36 FA562F34ED6633C66170B09182B4C049 80816 ----a-w- C:\Windows\Sysnative\drivers\aswMonFlt.sys
====== C:\Windows\Tasks ======
2013-08-05 12:34:08 6B9C314E56492169BAC1776ADBB4098A 3096 ----a-w- C:\Windows\Sysnative\Tasks\{99CE5B5F-5B08-4773-BC74-A3EAF410E67E}
2013-08-04 21:48:39 EB03E261C03B6E2E3DD4A279A264C3C5 4062 ----a-w- C:\Windows\Sysnative\Tasks\GoogleUpdateTaskMachineUA
2013-08-04 21:48:39 853DC2B86482AA389820782E30D1FEF6 1066 ----a-w- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-04 21:48:38 7246ABB110B175DD44BB6A8C90BA1E7C 3810 ----a-w- C:\Windows\Sysnative\Tasks\GoogleUpdateTaskMachineCore
2013-08-04 21:48:35 8D1A3D63CE788C74C6DD61D25E2E1E36 1062 ----a-w- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-04 19:34:36 59A0140F3A42F76F9170FB10771401F3 4182 ----a-w- C:\Windows\Sysnative\Tasks\avast! Emergency Update
2013-08-04 14:40:48 B799F6BB8413BD872F3353BEAB02965C 3370 ----a-w- C:\Windows\Sysnative\Tasks\{C3FC2B30-653E-4891-9B07-7D8D615B50AE}
2013-07-19 22:24:14 8FA3088182517205320B1D253DE69148 3198 ----a-w- C:\Windows\Sysnative\Tasks\{12E26A27-6E90-1358-3B11-CD5797742779}
====== C:\Windows\Temp ======
======= C:\Program Files =====
2013-08-03 22:03:41 -------- d-----w- C:\Program Files\Enigma Software Group
======= C:\Program Files (x86) =====
2013-08-05 10:30:15 -------- d-----w- C:\Program Files (x86)\Trend Micro
2013-08-04 14:06:56 -------- d-----w- C:\Program Files (x86)\Google
2013-08-03 22:02:55 -------- d-----w- C:\Program Files (x86)\Common Files\Wise Installation Wizard
======= C: =====
2013-08-03 22:04:22 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\autoexec.bat
====== C:\Users\Electrikeye\AppData\Roaming ======
2013-08-04 22:39:57 -------- d-----w- C:\users\Electrikeye\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
2013-08-02 21:24:42 -------- d-----w- C:\users\Electrikeye\AppData\Roaming\Ashtons Family Resort
2013-07-23 19:15:17 -------- d-----w- C:\users\Electrikeye\AppData\Roaming\PeaceCraft2
====== C:\Users\Electrikeye ======
2013-08-04 23:09:48 21D2A2DE8554DEBA29D8B721EB29E552 726464 ----a-w- C:\Users\Electrikeye\Downloads\SpyHunter-Installer (3).exe
2013-08-04 22:59:32 99FF410D3B6E8C7194EA8E001BBAE131 28659040 ----a-w- C:\Users\Electrikeye\Downloads\TuneUpUtilities2013_nl-NL.exe
2013-08-04 22:31:30 EEA0B34B60632083F2A75352BAE365FB 726464 ----a-w- C:\Users\Electrikeye\Downloads\SpyHunter-Installer (2).exe
2013-08-04 22:01:38 7251634C9F0E9822CB9692AD5898D803 2828552 ----a-w- C:\Users\Electrikeye\Downloads\avast-browser-cleanup.exe
2013-08-04 21:49:42 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2013-08-04 20:03:43 4C47469F47FD9F8437B62A86F6E0874F 666633 ----a-w- C:\Users\Electrikeye\Downloads\adwcleaner.exe
2013-08-04 19:46:57 EEA0B34B60632083F2A75352BAE365FB 726464 ----a-w- C:\Users\Electrikeye\Downloads\SpyHunter-Installer (1).exe
2013-08-04 19:34:44 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
2013-08-04 19:31:24 0EA95F1E762494B5D928ED4D5B5DA29B 117478104 ----a-w- C:\Users\Electrikeye\Downloads\avast_free_antivirus_setup.exe
2013-08-04 14:06:29 A8B5123A82CE82D806145C5EBAF8D3DB 784880 ----a-w- C:\Users\Electrikeye\Downloads\ChromeSetup.exe
2013-08-03 22:01:58 EEA0B34B60632083F2A75352BAE365FB 726464 ----a-w- C:\Users\Electrikeye\Downloads\SpyHunter-Installer.exe
2013-08-03 21:52:42 3C6B3DFE2D8C5E0E61AE1468E9623F3E 655200 ----a-w- C:\Users\Electrikeye\Downloads\setup(2).exe
2013-08-02 21:24:42 -------- d-----w- C:\ProgramData\Ashtons Family Resort
====== C: exe-files ==
2013-08-04 23:09:48 21D2A2DE8554DEBA29D8B721EB29E552 726464 ----a-w- C:\Users\Electrikeye\Downloads\SpyHunter-Installer (3).exe
2013-08-04 22:59:32 99FF410D3B6E8C7194EA8E001BBAE131 28659040 ----a-w- C:\Users\Electrikeye\Downloads\TuneUpUtilities2013_nl-NL.exe
2013-08-04 22:39:57 36B98B8197E1BE8E7382D29C1A3628AA 110080 ----a-r- C:\Users\Electrikeye\AppData\Roaming\Microsoft\Installer\{8AE3CFB6-78B2-4F55-A7BE-618FCFF43A03}\Icon1226A4C5.exe
2013-08-04 22:39:56 36B98B8197E1BE8E7382D29C1A3628AA 110080 ----a-r- C:\Users\Electrikeye\AppData\Roaming\Microsoft\Installer\{8AE3CFB6-78B2-4F55-A7BE-618FCFF43A03}\IconF7A21AF7.exe
2013-08-04 22:39:56 36B98B8197E1BE8E7382D29C1A3628AA 110080 ----a-r- C:\Users\Electrikeye\AppData\Roaming\Microsoft\Installer\{8AE3CFB6-78B2-4F55-A7BE-618FCFF43A03}\IconD7F16134.exe
2013-08-04 22:31:30 EEA0B34B60632083F2A75352BAE365FB 726464 ----a-w- C:\Users\Electrikeye\Downloads\SpyHunter-Installer (2).exe
2013-08-04 22:01:38 7251634C9F0E9822CB9692AD5898D803 2828552 ----a-w- C:\Users\Electrikeye\Downloads\avast-browser-cleanup.exe
2013-08-04 21:49:14 4A3B3C915C3FC187689EC0EB116C2616 33792864 ----a-w- C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\28.0.1500.95\28.0.1500.95_chrome_installer.exe
2013-08-04 21:48:32 6466C051022547489D3409205128881B 59784 ----atw- C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleUpdateBroker.exe
2013-08-04 21:48:32 506708142BC63DABA64F2D3AD1DCD5BF 116648 ----atw- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
2013-08-04 21:48:32 1CA3976D1B1FE826ADF339F90AC25C60 59784 ----atw- C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleUpdateOnDemand.exe
2013-08-04 21:48:32 107FB8EC41EA89DFD895E900A78BB9C6 784880 ----a-w- C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleUpdateSetup.exe
2013-08-04 21:48:31 D9A08472D8D0218A0AE2C9D9F63EA531 290696 ----atw- C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler64.exe
2013-08-04 21:48:31 8726802EA4FBFFA3FD54FD2449BF51D4 217992 ----atw- C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler.exe
2013-08-04 21:48:31 506708142BC63DABA64F2D3AD1DCD5BF 116648 ----atw- C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleUpdate.exe
2013-08-04 20:03:43 4C47469F47FD9F8437B62A86F6E0874F 666633 ----a-w- C:\Users\Electrikeye\Downloads\adwcleaner.exe
2013-08-04 19:46:57 EEA0B34B60632083F2A75352BAE365FB 726464 ----a-w- C:\Users\Electrikeye\Downloads\SpyHunter-Installer (1).exe
2013-08-04 19:34:36 2B0C485EBE31E02C7B405F8DD072598D 287840 ----a-w- C:\Windows\System32\aswBoot.exe
2013-08-04 19:31:24 0EA95F1E762494B5D928ED4D5B5DA29B 117478104 ----a-w- C:\Users\Electrikeye\Downloads\avast_free_antivirus_setup.exe
2013-08-04 19:21:47 3129F15EF44A1C48C898D5F4C8961372 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$IOVIHQ3.exe
2013-08-04 19:19:29 B61EEE7F852F2657BF818BB674967C40 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$IKDUNQS.exe
2013-08-04 19:14:15 A35E41A6B13B008982D91EFDCCB23D69 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$I765BSH.exe
2013-08-04 14:35:27 B693AEE5CD3D6EB29057F8EFFAC67660 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$I29CP83.exe
2013-08-04 14:35:27 A8C75E265799C1BDA2FF23C21DE07688 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$I1RXY4O.exe
2013-08-04 14:35:27 9CFDF02426E6A80AD213CE872FB7EDF6 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$I6QSKMR.exe
2013-08-04 14:35:27 98433FFF3196AD196540A15BE5827B7F 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$I9FR6R9.exe
2013-08-04 14:35:27 96395031F4D86F82F1A638C461CD80B6 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$I3VMRA0.exe
2013-08-04 14:35:27 218FEA164B6A295862F8264B3C7FBAD7 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$IZOBCN6.exe
2013-08-04 14:35:27 1F1D17976BFC82E77D8A6AD87B973CFE 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$IMO2VG8.exe
2013-08-04 14:35:00 EB283EB76EE94B9AF86930EE97026D78 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$I1EL30I.exe
2013-08-04 14:35:00 E5E3D12C66783BCC817EA844633EC8D6 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$IY516TF.exe
2013-08-04 14:35:00 D7C545992259E12D875E9F32CDE81F65 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$I8UHXGS.exe
2013-08-04 14:35:00 D25457A820521EAC73D86AF522FE1CB2 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$IDILAPZ.exe
2013-08-04 14:35:00 CB4B58A30CBB473EF19968AB67A8389E 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$IE7APR9.exe
2013-08-04 14:35:00 C5B6E5716C97110142952C0AACA5B8A2 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$IP8TWE4.exe
2013-08-04 14:35:00 BA32062DCDDEF5AF731423394B9D7A36 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$IPNKFSE.exe
2013-08-04 14:35:00 B7CCC5D783D96ACD4E41BEC9C2E1E213 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$ID4A925.exe
2013-08-04 14:35:00 B7229598D539A7C69586C1E5EC20D27E 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$I6KDU17.exe
2013-08-04 14:35:00 B6B7AB818F671064FF8C9FBBA30279BE 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$I0SSOZO.exe
2013-08-04 14:35:00 B5F59A07DCF7220C2B7DDFE5A15A2484 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$IDUFKNZ.exe
2013-08-04 14:35:00 B5B491FCDEF7E9DBF14129D317C09315 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$I6JXB86.exe
2013-08-04 14:35:00 B507CA9CCA1549D25CD93FE46F3D42B7 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$IK646OC.exe
2013-08-04 14:35:00 B3C5DF2F4C1CA163953CA7BA5AA53C37 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$IY84WYV.exe
2013-08-04 14:35:00 ABFB34FCD5D0EF52FCA8A8F76E8B9176 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$ISA9DN2.exe
2013-08-04 14:35:00 ABD0A1529A390E72E8DF55A8CDAB1861 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$I9MPSDG.exe
2013-08-04 14:35:00 A843689E69E9A90E02E4C5A6874C0145 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$IRZ801Q.exe
2013-08-04 14:35:00 A7BBD42AB74B84F96F6BDBF818916FE6 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$ILCQ8AD.exe
2013-08-04 14:35:00 A51B782AB28E8282ADF0F8D84D060816 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$IKED4AO.exe
2013-08-04 14:35:00 9F187E1DA7C3B202867F5E370760BE70 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$I37UW1Z.exe
2013-08-04 14:35:00 95220E746DA7A8AD3140C4C49E431EF2 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$ICW9KOE.exe
2013-08-04 14:35:00 842249D8B6C3FC00765EB179AD51381A 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$INWSAF6.exe
2013-08-04 14:35:00 83952103DB302D0366B82E8FDFAC10AC 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$I8QNCY1.exe
2013-08-04 14:35:00 8240407C47CCFE2CD067E002C82D4FB6 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$IH7GX92.exe
2013-08-04 14:35:00 7EBCD2BCEF394FACF3CBE4DF70BFFC67 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$IKXYTHT.exe
2013-08-04 14:35:00 7DC53E6AFC1B11323BDBE64F2C3BC604 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$IY6I0MB.exe
2013-08-04 14:35:00 756FAC4CF06C3FCF8FF3ACF2681ECDB3 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$IAR59RQ.exe
2013-08-04 14:35:00 6AFFCF3EC856968724A6FFE056F11133 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$I4RV5HB.exe
2013-08-04 14:35:00 5D7D3C44B98381A577F472D42E93FF9B 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$IU5GTC1.exe
2013-08-04 14:35:00 51E91B1FB9A9577C94C07320FC3E2F28 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$IZ2N0BI.exe
2013-08-04 14:35:00 51CA387FF4D18ACEB7837268A5C3698E 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$IC0Q4NK.exe
2013-08-04 14:35:00 515547A88A5223F53C5E0391145BA7BA 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$I1R84Q5.exe
2013-08-04 14:35:00 4AEC3CA3B892D1FEF69DF6A95D449C39 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$I26CYS1.exe
2013-08-04 14:35:00 2CB090C591766E1BB756E75D730B0739 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$I21ZZFY.exe
2013-08-04 14:35:00 2BD4A47A7FB6ACA252D1BDC9D237BC5B 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$IW1GGCH.exe
2013-08-04 14:35:00 1F7403AC29DA65DA5B07A3CA35ADE857 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$IKSD2C6.exe
2013-08-04 14:35:00 1CB5E4BF06ECD0C6FB9288B4A0539999 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$I1MWXS6.exe
2013-08-04 14:35:00 07855C4BB47D88E824490ED8B5429459 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$I6PF2UT.exe
2013-08-04 14:35:00 0561EA1B84DA76FB61BD77973617C695 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$IFKUFNA.exe
2013-08-04 14:06:29 A8B5123A82CE82D806145C5EBAF8D3DB 784880 ----a-w- C:\Users\Electrikeye\Downloads\ChromeSetup.exe
2013-08-03 22:02:16 B575AB32F77C20EB24D2EB4822B0EFBA 46646352 ----a-w- C:\Users\Electrikeye\AppData\Local\Temp\SHSetup.exe
2013-08-03 22:01:58 EEA0B34B60632083F2A75352BAE365FB 726464 ----a-w- C:\Users\Electrikeye\Downloads\SpyHunter-Installer.exe
2013-08-03 21:52:42 3C6B3DFE2D8C5E0E61AE1468E9623F3E 655200 ----a-w- C:\Users\Electrikeye\Downloads\setup(2).exe
2013-08-03 21:18:22 30A17EBA6EF99EC3DAAA90A2AF83FF9D 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$I9DYF6R.exe
2013-08-03 12:38:16 F3A10836603E03A28CAF404B29328F92 394320 ----a-w- C:\Users\Electrikeye\AppData\Local\Temp\uninst1.exe
2013-07-31 16:12:18 F850FB25CC95C20CAB231AA9F245BA5E 5984531 ----a-w- C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1.11.0.1146[1].exe
=== C: other files ==
2013-08-04 19:34:44 3815DB16CDA62190F5C0A65118F3D714 378944 ----a-w- C:\Windows\System32\drivers\aswSP.sys
2013-08-04 19:34:44 0BAEFD3F648C6E7AB52990DD9565E4E2 33400 ----a-w- C:\Windows\System32\drivers\aswFsBlk.sys
2013-08-04 19:34:42 64E2BAB4096C13D2342BC4661C967E07 72016 ----a-w- C:\Windows\System32\drivers\aswRdr2.sys
2013-08-04 19:34:39 29DD8E458A84171202AA4979364C30C0 64288 ----a-w- C:\Windows\System32\drivers\aswTdi.sys
2013-08-04 19:34:37 8C0800CDB501CFC1164B286A0478DC10 1030952 ----a-w- C:\Windows\System32\drivers\aswSnx.sys
2013-08-04 19:34:37 5573AA70993A2BB81525B1C704B88763 65336 ----a-w- C:\Windows\System32\drivers\aswRvrt.sys
2013-08-04 19:34:37 22F521108881DC59837F6FC614E0568F 189936 ----a-w- C:\Windows\System32\drivers\aswVmm.sys
2013-08-04 19:34:36 FA562F34ED6633C66170B09182B4C049 80816 ----a-w- C:\Windows\System32\drivers\aswMonFlt.sys
2013-08-04 14:35:00 75A8EBA9F3429E325B5F3EC52179F3B5 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1961875930-2905929432-421735862-1001\$IK5NG3N.sys
2013-08-03 22:04:22 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\autoexec.bat
2013-08-03 22:03:46 3B32CAA07D672F8A2E0DF5CB3A873F45 22704 ----a-w- C:\Users\Electrikeye\AppData\Local\Temp\ESGScanner.sys
==== Startup Registry Enabled ======================
[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"
[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"
[HKEY_USERS\S-1-5-21-1961875930-2905929432-421735862-1001\Software\Microsoft\Windows\CurrentVersion\Run]
"SDP"="C:\Program Files (x86)\FilesFrog Update Checker\update_checker.exe /auto "
"Spotify"="C:\Users\Electrikeye\AppData\Roaming\Spotify\Spotify.exe /uri spotify:autostart"
"Spotify Web Helper"="C:\Users\Electrikeye\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
"Smart Driver Updater"="C:\Program Files (x86)\Smart Driver Updater\SDULauncher.exe"
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"IsMyWinLockerReboot"="msiexec.exe /qn /x{voidguid}"
[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"mctadmin"="C:\Windows\System32\mctadmin.exe"
"IsMyWinLockerReboot"="msiexec.exe /qn /x{voidguid}"
[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"mctadmin"="C:\Windows\System32\mctadmin.exe"
"IsMyWinLockerReboot"="msiexec.exe /qn /x{voidguid}"
[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"IsMyWinLockerReboot"="msiexec.exe /qn /x{voidguid}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"BackupManagerTray"="C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe -h -k"
"LManager"="C:\Program Files (x86)\Launch Manager\LManager.exe"
"SuiteTray"="C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"
"KPN Assistent"="C:\Program Files (x86)\KPN\KPN Assistent\KPN_Assistent.exe /auto"
"Otshot"="c:\program files\otshot\otshot.exe -minimize"
"Denzi"="C:\Program Files (x86)\Denzi\Denzi.exe"
"avast"="C:\Program Files\AVAST Software\Avast\avastUI.exe /nogui"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"SDP"="C:\Program Files (x86)\FilesFrog Update Checker\update_checker.exe /auto "
"Spotify"="C:\Users\Electrikeye\AppData\Roaming\Spotify\Spotify.exe /uri spotify:autostart"
"Spotify Web Helper"="C:\Users\Electrikeye\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
"Smart Driver Updater"="C:\Program Files (x86)\Smart Driver Updater\SDULauncher.exe"
==== Startup Registry Enabled x64 ======================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AmIcoSinglun64"="C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe"
"IgfxTray"="C:\Windows\system32\igfxtray.exe"
"HotKeysCmds"="C:\Windows\system32\hkcmd.exe"
"Persistence"="C:\Windows\system32\igfxpers.exe"
"RTHDVCPL"="C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s"
"Power Management"="C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe"
"SynTPEnh"="%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe "
==== Task Scheduler Jobs ======================
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [04-08-2013 23:48]
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [04-08-2013 23:48]
==== Firefox Extensions ======================
AppDir: C:\Program Files (x86)\Mozilla Firefox
- Undetermined - %AppDir%\extensions\staged
- Skype Click to Call - %AppDir%\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
- Undetermined - %AppDir%\extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}
==== Firefox Plugins ======================
==== Chrome Look ======================
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
dlnembnfbcpjnepmfjmngjenhhajpdfd - C:\Program Files\Web Assistant\source.crx[]
fdloijijlkoblmigdofommgnheckmaki - C:\Program Files (x86)\Funmoods\funmoods\1.5.11.16\funmoodsOEM.crx[]
fplhdcjmbpfkejbhngmlngaecbjmoimd - C:\Program Files\AVAST Software\Avast\AdBlocker\Chrome\avast-adblocker-chrome.crx[25-02-2013 11:09]
jifflliplgeajjdhmkcfnngfpgbjonjg - C:\Program Files (x86)\Perion\NewTab\newTab.crx[]
lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx[]
meinjhkhgaalhfbinmclpmjikccbplkf - C:\Users\Electrikeye\AppData\Local\CRE\meinjhkhgaalhfbinmclpmjikccbplkf.crx[]
mpfapcdfbbledbojijcbcclmlieaoogk - C:\Users\Electrikeye\AppData\Local\I Want This\Chrome\I Want This.crx[]
HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions
meinjhkhgaalhfbinmclpmjikccbplkf - C:\Users\Electrikeye\AppData\Local\CRE\meinjhkhgaalhfbinmclpmjikccbplkf.crx[]
Google Docs - Electrikeye - Default\Extensions\aohghmighlieiainnegkcijnfilokake
Google Drive - Electrikeye - Default\Extensions\apdfllckaahabafndbhieahigkjlhalf
YouTube - Electrikeye - Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo
Google Search - Electrikeye - Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf
avast Ad Blocker - Electrikeye - Default\Extensions\fplhdcjmbpfkejbhngmlngaecbjmoimd
AdBlock - Electrikeye - Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom
avast Online Security - Electrikeye - Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
New tab for Chrome\u2122 - Electrikeye - Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg
Gmail - Electrikeye - Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia
==== Chrome Fix ======================
C:\Users\Electrikeye\AppData\Local\Google\Chrome\User Data\Default\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg deleted successfully
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com/"
"Search Bar"="http://www.bing.com"
"Use Search Asst"="yes"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchUrl]
"Default"="http://feed.snap.do/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=NL&userid=2133e195-412b-4090-ae1d-7ca51e78a860&searchtype=ds&q={searchTerms}&installDate=30/04/2013"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\SearchUrl]
"Default"="http://feed.snap.do/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=NL&userid=2133e195-412b-4090-ae1d-7ca51e78a860&searchtype=ds&q={searchTerms}&installDate=30/04/2013"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{9BB47C17-9C68-4BB3-B188-DD9AF0FD2421}"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2421}] not found
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Start Page"="http://www.google.com/"
"Use Search Asst"="no"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\SearchUrl]
"(Default)"="http://search.msn.com/results.asp?q=%s"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"
==== Reset Google Chrome ======================
C:\users\Electrikeye\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\users\Electrikeye\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
==== Deleting Registry Keys ======================
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\fdloijijlkoblmigdofommgnheckmaki deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\jifflliplgeajjdhmkcfnngfpgbjonjg deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\meinjhkhgaalhfbinmclpmjikccbplkf deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\mpfapcdfbbledbojijcbcclmlieaoogk deleted successfully
HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions\meinjhkhgaalhfbinmclpmjikccbplkf deleted successfully
==== HijackThis Entries ======================
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Bing
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [backupManagerTray] "C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" -h -k
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [suiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"
O4 - HKLM\..\Run: [KPN Assistent] C:\Program Files (x86)\KPN\KPN Assistent\KPN_Assistent.exe /auto
O4 - HKLM\..\Run: [Otshot] c:\program files\otshot\otshot.exe -minimize
O4 - HKLM\..\Run: [Denzi] C:\Program Files (x86)\Denzi\Denzi.exe
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKCU\..\Run: [sDP] C:\Program Files (x86)\FilesFrog Update Checker\update_checker.exe /auto
O4 - HKCU\..\Run: [spotify] "C:\Users\Electrikeye\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
O4 - HKCU\..\Run: [spotify Web Helper] "C:\Users\Electrikeye\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
O4 - HKCU\..\Run: [smart Driver Updater] C:\Program Files (x86)\Smart Driver Updater\SDULauncher.exe
O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [isMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [isMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'Default user')
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - MSN Games - Free Online Games
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: EgisTec Ticket Service - Egis Technology Inc. - C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe
O23 - Service: ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel® Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NTI IScheduleSvc - NTI Corporation - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: Online Games Manager (ogmservice) - RealNetworks, Inc. - C:\Program Files (x86)\Online Games Manager\ogmservice.exe
O23 - Service: PasswordBox - PasswordBox, Inc. - C:\Program Files (x86)\PasswordBox\pbbtnService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel® Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
==== Empty IE Cache ======================
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Electrikeye\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
==== Empty FireFox Cache ======================
No FireFox Cache found
==== Empty Chrome Cache ======================
C:\users\Electrikeye\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
Java Cache cleared successfully
==== After Reboot ======================
==== Empty Temp Folders ======================
C:\Windows\Temp successfully emptied
C:\Users\ELECTR~1\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
C:\$RECYCLE.BIN successfully emptied
==== EOF on ma 05-08-2013 at 14:55:17,86 ======================
-
En als jullie toevallig iets zie staan wat rotzooi is.
kunnen jullie me dat dan ook vertellen
bedankt alvast
-
het gaat dit x om een andere laptop( van de buurvrouw)
ik heb de virus/scanner van cc cleaner en avast.
de log van de laptop is
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:33:40, on 5-8-2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16635)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\FilesFrog Update Checker\update_checker.exe
C:\Users\Electrikeye\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\KPN\KPN Assistent\KPN_Assistent.exe
C:\Program Files\otshot\otshot.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe
C:\Windows\SysWOW64\NOTEPAD.EXE
C:\Windows\SysWOW64\DllHost.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = QVO6
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Bing
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = QVO6
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = QVO6
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.snapdo.com/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=NL&userid=2133e195-412b-4090-ae1d-7ca51e78a860&searchtype=ds&q={searchTerms}&installDate=30/04/2013
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.snapdo.com/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=NL&userid=2133e195-412b-4090-ae1d-7ca51e78a860&searchtype=ds&q={searchTerms}&installDate=30/04/2013
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: uTorrentBar_NL - {87775fdb-6972-41f9-ae51-8326e38cb206} - (no file)
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: (no name) - {A7DF592F-6E2A-45C4-9A87-4BD217D714ED} - (no file)
O2 - BHO: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files (x86)\Delta\delta\1.8.16.16\bh\delta.dll
O2 - BHO: Wincore Mediabar - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - C:\PROGRA~2\BEARSH~1\MediaBar\Datamngr\ToolBar\wincorebsdtx.dll
O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: Wincore Mediabar - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - C:\PROGRA~2\BEARSH~1\MediaBar\Datamngr\ToolBar\wincorebsdtx.dll
O3 - Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - (no file)
O3 - Toolbar: (no name) - {25E2E5C9-C43C-4EE8-B23E-4383915F2BCE} - (no file)
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [backupManagerTray] "C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" -h -k
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [suiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"
O4 - HKLM\..\Run: [KPN Assistent] C:\Program Files (x86)\KPN\KPN Assistent\KPN_Assistent.exe /auto
O4 - HKLM\..\Run: [Otshot] c:\program files\otshot\otshot.exe -minimize
O4 - HKLM\..\Run: [Denzi] C:\Program Files (x86)\Denzi\Denzi.exe
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKCU\..\Run: [sDP] C:\Program Files (x86)\FilesFrog Update Checker\update_checker.exe /auto
O4 - HKCU\..\Run: [spotify] "C:\Users\Electrikeye\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart
O4 - HKCU\..\Run: [spotify Web Helper] "C:\Users\Electrikeye\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"
O4 - HKCU\..\Run: [smart Driver Updater] C:\Program Files (x86)\Smart Driver Updater\SDULauncher.exe
O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [isMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [isMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'Default user')
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: Zoek op het web - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - (no file)
O9 - Extra button: Rich Media Downloader - {A7DF592F-6E2A-45C4-9A87-4BD217D714ED} - (no file)
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - MSN Games - Free Online Games
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - (no file)
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - (no file)
O20 - AppInit_DLLs:
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: EgisTec Ticket Service - Egis Technology Inc. - C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe
O23 - Service: ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel® Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NTI IScheduleSvc - NTI Corporation - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: Online Games Manager (ogmservice) - RealNetworks, Inc. - C:\Program Files (x86)\Online Games Manager\ogmservice.exe
O23 - Service: PasswordBox - PasswordBox, Inc. - C:\Program Files (x86)\PasswordBox\pbbtnService.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel® Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: Web Assistant - Unknown owner - C:\Program Files\Web Assistant\ExtensionUpdaterService.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: Wsys Service (WsysSvc) - Wsys Co., Ltd. - C:\ProgramData\eSafe\eGdpSvc.exe
--
End of file - 13116 bytes
-
0p een laptop krijg ik de melding van otschot.
ik hb gekeken op verschillende website's.
maar dan moet ik programma spyhunter instaleren,waar je
daarna voor moet betalen.
is er ook een mogelijkheid hem gratis te verwijderen?
-
De laptop doet het weer uitstekend.
de laaste stappen heb ik wel niet gedaan maar voor de rest
bedankt voor jullie zere snelle hulp ( sorry voor late reacie)
-
log van adware cleaner
# AdwCleaner v2.306 - Verslag gemaakt op 19/07/2013 om 21:52:31
# Geactualiseerd op 19/07/2013 door Xplode
# Besturingssysteem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Gebruiker : silvia - SILVIA-PC
# Opstarten Modus : Normale modus
# Gelanceerd vanaf : C:\Users\silvia\Downloads\adwcleaner.exe
# Optie [Verwijderen]
***** [Diensten] *****
Gestopt & Verwijdert : WebCake Desktop Updater
***** [Files / Mappen] *****
File Verwijderd : C:\END
File Verwijderd : C:\Program Files (x86)\Mozilla FireFox\searchplugins\Search_Results.xml
File Verwijderd : C:\user.js
File Verwijderd : C:\Users\Public\Desktop\eBay.lnk
File Verwijderd : C:\Users\silvia\AppData\Local\funmoods.crx
File Verwijderd : C:\Users\silvia\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_bbjciahceamgodcoidkjpchnokgfpphh_0.localstorage
File Verwijderd : C:\Users\silvia\AppData\Roaming\Mozilla\Firefox\Profiles\y7fw8932.default-1350226499707\searchplugins\Web Search.xml
Map Verwijderd : C:\Program Files (x86)\BrowserCompanion
Map Verwijderd : C:\Program Files (x86)\Conduit
Map Verwijderd : C:\Program Files (x86)\Funmoods
Map Verwijderd : C:\Program Files (x86)\Mozilla Firefox\Extensions\ffxtlbr@babylon.com
Map Verwijderd : C:\Program Files (x86)\PriceGong
Map Verwijderd : C:\Program Files (x86)\Savings Sidekick
Map Verwijderd : C:\Program Files (x86)\SpecialSavings
Map Verwijderd : C:\Program Files (x86)\WebCake
Map Verwijderd : C:\ProgramData\APN
Map Verwijderd : C:\ProgramData\Ask
Map Verwijderd : C:\ProgramData\Babylon
Map Verwijderd : C:\ProgramData\boost_interprocess
Map Verwijderd : C:\ProgramData\IBUpdaterService
Map Verwijderd : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong
Map Verwijderd : C:\ProgramData\Tarma Installer
Map Verwijderd : C:\Users\silvia\AppData\Local\APN
Map Verwijderd : C:\Users\silvia\AppData\Local\Bundled software uninstaller
Map Verwijderd : C:\Users\silvia\AppData\Local\Conduit
Map Verwijderd : C:\Users\silvia\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbjciahceamgodcoidkjpchnokgfpphh
Map Verwijderd : C:\Users\silvia\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Map Verwijderd : C:\Users\silvia\AppData\Local\PackageAware
Map Verwijderd : C:\Users\silvia\AppData\Local\Savings Sidekick
Map Verwijderd : C:\Users\silvia\AppData\LocalLow\Conduit
Map Verwijderd : C:\Users\silvia\AppData\LocalLow\koyotesofttoolbarnew
Map Verwijderd : C:\Users\silvia\AppData\LocalLow\PriceGong
Map Verwijderd : C:\Users\silvia\AppData\Roaming\Babylon
Map Verwijderd : C:\Users\silvia\AppData\Roaming\DealPly
Map Verwijderd : C:\Users\silvia\AppData\Roaming\Funmoods
Map Verwijderd : C:\Users\silvia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpecialSavings
Map Verwijderd : C:\Users\silvia\AppData\Roaming\Mozilla\Firefox\Profiles\smt341bo.default\extensions\crossriderapp5060@crossrider.com
Map Verwijderd : C:\Users\silvia\AppData\Roaming\Mozilla\Firefox\Profiles\smt341bo.default\extensions\plugin@getwebcake.com
Map Verwijderd : C:\Users\silvia\AppData\Roaming\Mozilla\Firefox\Profiles\smt341bo.default\extensions\staged
Map Verwijderd : C:\Users\silvia\AppData\Roaming\Mozilla\Firefox\Profiles\y7fw8932.default-1350226499707\CT3300849
Map Verwijderd : C:\Users\silvia\AppData\Roaming\Mozilla\Firefox\Profiles\y7fw8932.default-1350226499707\extensions\{462be121-2b54-4218-bf00-b9bf8135b23f}
Map Verwijderd : C:\Users\silvia\AppData\Roaming\Mozilla\Firefox\Profiles\y7fw8932.default-1350226499707\extensions\{707db484-2428-402d-afb5-d85b387544c7}
Map Verwijderd : C:\Users\silvia\AppData\Roaming\Mozilla\Firefox\Profiles\y7fw8932.default-1350226499707\extensions\{f2d3789a-1428-4ee6-af23-375abc1e250a}
Map Verwijderd : C:\Users\silvia\AppData\Roaming\Mozilla\Firefox\Profiles\y7fw8932.default-1350226499707\extensions\ffxtlbr@funmoods.com
Map Verwijderd : C:\Users\silvia\AppData\Roaming\Mozilla\Firefox\Profiles\y7fw8932.default-1350226499707\extensions\plugin@getwebcake.com
Map Verwijderd : C:\Users\silvia\AppData\Roaming\Mozilla\Firefox\Profiles\y7fw8932.default-1350226499707\Smartbar
Map Verwijderd : C:\Users\silvia\AppData\Roaming\OpenCandy
Map Verwijderd : C:\Users\silvia\AppData\Roaming\PerformerSoft
Map Verwijderd : C:\Users\silvia\AppData\Roaming\WebCake
Verwijderd bij het opstarten : C:\Program Files (x86)\Common Files\AVG Secure Search
***** [Register] *****
Sleutel Verwijderd : HKCU\Software\1ClickDownload
Sleutel Verwijderd : HKCU\Software\AppDataLow\Software\Crossrider
Sleutel Verwijderd : HKCU\Software\AppDataLow\Software\PriceGong
Sleutel Verwijderd : HKCU\Software\AppDataLow\Software\Savings Sidekick
Sleutel Verwijderd : HKCU\Software\AppDataLow\Software\SmartBar
Sleutel Verwijderd : HKCU\Software\AppDataLow\Software\SpecialSavings
Sleutel Verwijderd : HKCU\Software\BabSolution
Sleutel Verwijderd : HKCU\Software\BI
Sleutel Verwijderd : HKCU\Software\Blabbers
Sleutel Verwijderd : HKCU\Software\BrowserCompanion
Sleutel Verwijderd : HKCU\Software\Conduit
Sleutel Verwijderd : HKCU\Software\Cr_Installer
Sleutel Verwijderd : HKCU\Software\DataMngr
Sleutel Verwijderd : HKCU\Software\Funmoods
Sleutel Verwijderd : HKCU\Software\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh
Sleutel Verwijderd : HKCU\Software\InstalledBrowserExtensions
Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1631550F-191D-4826-B069-D9439253D926}
Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2A5A2A90-3B30-4E6E-A955-2F232C6EF517}
Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}
Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}
Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3}
Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E87806B5-E908-45FD-AF5E-957D83E58E68}
Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\10
Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2A5A2A90-3B30-4E6E-A955-2F232C6EF517}
Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}
Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}
Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3}
Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\DealPly
Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Funmoods
Sleutel Verwijderd : HKCU\Software\OCS
Sleutel Verwijderd : HKCU\Software\pc optimizer pro
Sleutel Verwijderd : HKCU\Software\SmartBar
Sleutel Verwijderd : HKCU\Software\Softonic
Sleutel Verwijderd : HKCU\Software\systweak
Sleutel Verwijderd : HKCU\Software\5f0d78cbd6aed48
Sleutel Verwijderd : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Sleutel Verwijderd : HKLM\Software\AVG Security Toolbar
Sleutel Verwijderd : HKLM\Software\Babylon
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\{7169BBB3-3289-4696-B35D-4A88BCF6FB12}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\{835315FC-1BF6-4CA9-80CD-F6C158D40692}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\{960DF771-CFCB-4E53-A5B5-6EF2BBE6E706}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\{AC662AF2-4601-4A68-84DF-A3FE83F1A5F9}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\{D97A8234-F2A2-4AD4-91D5-FECDB2C553AF}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\BrowserConnection.dll
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\DNSBHO.dll
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\PriceGongIE.DLL
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\WebCakeIEClient.DLL
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CrossriderApp0005060.BHO
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CrossriderApp0005060.BHO.1
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CrossriderApp0005060.FBApi
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CrossriderApp0005060.FBApi.1
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CrossriderApp0005060.Sandbox
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CrossriderApp0005060.Sandbox.1
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\esrv.funmoodsESrvc
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\esrv.funmoodsESrvc.1
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\f
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\funmoods.dskBnd
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\funmoods.dskBnd.1
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\funmoods.funmoodsHlpr
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\funmoods.funmoodsHlpr.1
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\funmoodsApp.appCore
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\funmoodsApp.appCore.1
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Prod.cap
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\TypeLib\{1D085C0A-E4F4-4F66-BDBF-4BE51015BFC3}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\TypeLib\{5B4144E1-B61D-495A-9A50-CD1A95D86D15}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\TypeLib\{841D5A49-E48D-413C-9C28-EB3D9081D705}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\TypeLib\{960DF771-CFCB-4E53-A5B5-6EF2BBE6E706}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\TypeLib\{EFDF368C-8DD9-4E05-87CD-16AA5CB03CB8}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\WebCakeIEClient.Api
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\WebCakeIEClient.Api.1
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\WebCakeIEClient.Layers
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\WebCakeIEClient.Layers.1
Sleutel Verwijderd : HKLM\Software\Conduit
Sleutel Verwijderd : HKLM\Software\DataMngr
Sleutel Verwijderd : HKLM\Software\InstallIQ
Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASAPI32
Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASMANCS
Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\FunmoodsSetup_RASAPI32
Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\FunmoodsSetup_RASMANCS
Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASAPI32
Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASMANCS
Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\Savings Sidekick_RASAPI32
Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\Savings Sidekick_RASMANCS
Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASAPI32
Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASMANCS
Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASAPI32
Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASMANCS
Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\softonic_ggl_1_RASAPI32
Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\softonic_ggl_1_RASMANCS
Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32
Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS
Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{AF6B0594-6008-4327-93E5-608AD710A6FA}
Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Sleutel Verwijderd : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Sleutel Verwijderd : HKLM\Software\SearchquSRTB
Sleutel Verwijderd : HKLM\Software\systweak
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{75A4D144-506D-4BE5-81DB-EC7DA1E7F840}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{965B9DBE-B104-44AC-950A-8A5F97AFF439}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A69A551A-1AAE-4B67-8C2E-52F8B8A19504}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A9DB719C-7156-415E-B49D-BAD039DE4F13}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AF6B0594-6008-4327-93E5-608AD710A6FA}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DF84E609-C3A4-49CB-A160-61767DAF8899}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F03FD9D0-4F2B-497C-8A71-DD41D70B07D9}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{0D80F1C5-D17B-4177-AC68-955F3EF9F191}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{23C70BCA-6E23-4A65-AD2E-1389062074F1}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{23D8EEF7-0E13-4000-B9C4-6603C1E912D1}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{295CACB4-51F5-46FD-914E-C72BAAE1B672}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{2CE5C4B9-6DBE-4528-96FA-C9FF38EF1762}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{34C1FDF7-02C1-4F23-B393-F48B16E071D1}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{44B619BC-3D2B-4990-AA4F-9AA366921792}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{54291324-7A3D-4F11-B707-3FB6A2C97BD9}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{59C63F11-D4E5-46E7-9B8A-EE158DCA83A8}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{5DA22CBD-0029-4A09-B757-CF0FAFC488ED}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{77A6E7D4-4A83-4A9B-A2A0-EF3B125DC29D}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C0585B2F-74D7-4734-88DE-6C150C5D4036}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{CA17D76B-F91D-4659-A7FD-A9F7ED375CDD}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{D8242E89-2F81-484A-AE5B-BA8CAD5B7347}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{DF84E609-C3A4-49CB-A160-61767DAF8899}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{EF0588D6-1621-4A75-B8BE-F4BC34794136}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\bkomkajifikmkfnjgphkjcfeepbnojok
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\fjoijdanhaiflhibkljeklcghcmmfffh
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C87FC351-A80D-43E9-9A86-CF1E29DC443A}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2421}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Funmoods
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\PriceGong
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Savings Sidekick
Sleutel Verwijderd : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SpecialSavings
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{0D80F1C5-D17B-4177-AC68-955F3EF9F191}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{23C70BCA-6E23-4A65-AD2E-1389062074F1}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{23D8EEF7-0E13-4000-B9C4-6603C1E912D1}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{295CACB4-51F5-46FD-914E-C72BAAE1B672}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{2CE5C4B9-6DBE-4528-96FA-C9FF38EF1762}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{34C1FDF7-02C1-4F23-B393-F48B16E071D1}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{44B619BC-3D2B-4990-AA4F-9AA366921792}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{54291324-7A3D-4F11-B707-3FB6A2C97BD9}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{59C63F11-D4E5-46E7-9B8A-EE158DCA83A8}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{5DA22CBD-0029-4A09-B757-CF0FAFC488ED}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{77A6E7D4-4A83-4A9B-A2A0-EF3B125DC29D}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{C0585B2F-74D7-4734-88DE-6C150C5D4036}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{CA17D76B-F91D-4659-A7FD-A9F7ED375CDD}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{D8242E89-2F81-484A-AE5B-BA8CAD5B7347}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{DF84E609-C3A4-49CB-A160-61767DAF8899}
Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{EF0588D6-1621-4A75-B8BE-F4BC34794136}
Sleutel Verwijderd : HKLM\SOFTWARE\DataMngr
Sleutel Verwijderd : HKLM\SOFTWARE\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh
Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2421}
Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C4ED781C-7394-4906-AAFF-D6AB64FF7C38}
Sleutel Verwijderd : HKLM\SOFTWARE\Tarma Installer
Waarde Verwijderd : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Waarde Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [WebCake Desktop]
Waarde Verwijderd : HKCU\Software\Mozilla\Firefox\Extensions [specialsavings@superfish.com]
Waarde Verwijderd : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Waarde Verwijderd : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Waarde Verwijderd : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Waarde Verwijderd : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [10]
Waarde Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Waarde Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [10]
***** [browsers] *****
-\\ Internet Explorer v10.0.9200.16635
Vervangen : [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl - Default] = hxxp://feed-msgplus.linkury.com/?publisher=MessengerPlus&dpid=MessengerPlus&co=NL&userid=c4b08b5f-1553-49de-a112-0776255e1661&sp=addr&q={searchTerms} --> hxxp://www.google.com
-\\ Mozilla Firefox v22.0 (nl)
File : C:\Users\silvia\AppData\Roaming\Mozilla\Firefox\Profiles\y7fw8932.default-1350226499707\prefs.js
C:\Users\silvia\AppData\Roaming\Mozilla\Firefox\Profiles\y7fw8932.default-1350226499707\user.js ... Verwijderd !
Verwijderd : user_pref("CT3300849.1000082.isPlayDisplay", "true");
Verwijderd : user_pref("CT3300849.1000082.state", "{\"state\":\"stopped\",\"text\":\"Radio Net...\",\"description[...]
Verwijderd : user_pref("CT3300849.1000234.TWC_TMP_city", "AMERSFOORT");
Verwijderd : user_pref("CT3300849.1000234.TWC_TMP_country", "NL");
Verwijderd : user_pref("CT3300849.1000234.TWC_country", "NETHERLANDS");
Verwijderd : user_pref("CT3300849.1000234.TWC_locId", "NLXX0056");
Verwijderd : user_pref("CT3300849.1000234.TWC_location", "Amersfoort, Netherlands");
Verwijderd : user_pref("CT3300849.1000234.TWC_region", "OT");
Verwijderd : user_pref("CT3300849.1000234.TWC_temp_dis", "c");
Verwijderd : user_pref("CT3300849.1000234.TWC_wind_dis", "kmh");
Verwijderd : user_pref("CT3300849.1000234.weatherData", "{\"icon\":\"26.png\",\"temperature\":\"17°C\",\"temperat[...]
Verwijderd : user_pref("CT3300849.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Verwijderd : user_pref("CT3300849.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Verwijderd : user_pref("CT3300849.FF19Solved", "true");
Verwijderd : user_pref("CT3300849.FirstTime", "true");
Verwijderd : user_pref("CT3300849.FirstTimeFF3", "true");
Verwijderd : user_pref("CT3300849.PG_ENABLE", "dHJ1ZQ==");
Verwijderd : user_pref("CT3300849.PG_ENABLE.enc", "dHJ1ZQ==");
Verwijderd : user_pref("CT3300849.SF_JUST_INSTALLED.enc", "RkFMU0U=");
Verwijderd : user_pref("CT3300849.SF_STATUS.enc", "RU5BQkxFRA==");
Verwijderd : user_pref("CT3300849.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT330[...]
Verwijderd : user_pref("CT3300849.UserID", "UN89506828519194293");
Verwijderd : user_pref("CT3300849.addressBarTakeOverEnabledInHidden", "true");
Verwijderd : user_pref("CT3300849.autoDisableScopes", -1);
Verwijderd : user_pref("CT3300849.browser.search.defaultthis.engineName", "true");
Verwijderd : user_pref("CT3300849.countryCode", "NL");
Verwijderd : user_pref("CT3300849.defaultSearch", "true");
Verwijderd : user_pref("CT3300849.enableFix404ByUser", "TRUE");
Verwijderd : user_pref("CT3300849.enableSearchFromAddressBar", "true");
Verwijderd : user_pref("CT3300849.event_data.enc", "JTVCJTVE");
Verwijderd : user_pref("CT3300849.fired_events.enc", "");
Verwijderd : user_pref("CT3300849.firstTimeDialogOpened", "true");
Verwijderd : user_pref("CT3300849.fixPageNotFoundErrorByUser", "TRUE");
Verwijderd : user_pref("CT3300849.fixPageNotFoundErrorInHidden", "true");
Verwijderd : user_pref("CT3300849.fixUrls", true);
Verwijderd : user_pref("CT3300849.fullUserID", "UN89506828519194293.UP.20130626140522");
Verwijderd : user_pref("CT3300849.homepageuserchanged", true);
Verwijderd : user_pref("CT3300849.installDate", "20/6/2013 14:13:40");
Verwijderd : user_pref("CT3300849.installSessionId", "458A677F-4B5F-44AC-91F8-46BF803DF479");
Verwijderd : user_pref("CT3300849.installSp", "false");
Verwijderd : user_pref("CT3300849.installType", "xpe");
Verwijderd : user_pref("CT3300849.installUsage", "2013-06-20T15:17:30.2499323+03:00");
Verwijderd : user_pref("CT3300849.installUsageEarly", "2013-06-20T15:17:28.5807109+03:00");
Verwijderd : user_pref("CT3300849.installerVersion", "1.4.2.3");
Verwijderd : user_pref("CT3300849.isCheckedStartAsHidden", true);
Verwijderd : user_pref("CT3300849.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Verwijderd : user_pref("CT3300849.isFirstTimeToolbarLoading", "false");
Verwijderd : user_pref("CT3300849.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Verwijderd : user_pref("CT3300849.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Verwijderd : user_pref("CT3300849.key_date.enc", "MjI=");
Verwijderd : user_pref("CT3300849.keyword", "true");
Verwijderd : user_pref("CT3300849.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit[...]
Verwijderd : user_pref("CT3300849.lastVersion", "10.16.4.519");
Verwijderd : user_pref("CT3300849.mam_gk_appStateReportTime.enc", "MTM3MTkxMjcxNzYxNg==");
Verwijderd : user_pref("CT3300849.mam_gk_appState_CouponBuddy.enc", "b2Zm");
Verwijderd : user_pref("CT3300849.mam_gk_appState_Easytobook.enc", "b2Zm");
Verwijderd : user_pref("CT3300849.mam_gk_appState_Easytobook_targeted.enc", "b2Zm");
Verwijderd : user_pref("CT3300849.mam_gk_appState_PriceGong.enc", "b2Zm");
Verwijderd : user_pref("CT3300849.mam_gk_appState_WindowShopper.enc", "b2Zm");
Verwijderd : user_pref("CT3300849.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IlByaWNlR29uZyIsInVybCI6Imh0dHA6Ly9w[...]
Verwijderd : user_pref("CT3300849.mam_gk_appsDefaultEnabled.enc", "ZmFsc2U=");
Verwijderd : user_pref("CT3300849.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IkVhc3l0b2Jvb2tfdGF[...]
Verwijderd : user_pref("CT3300849.mam_gk_currentVersion.enc", "MS44LjAuNA==");
Verwijderd : user_pref("CT3300849.mam_gk_eventsCache.enc", "eyI3ZWQwYzcyOC01NWI5LTQzZTAtYTcyZi1mNTZmNGY3NmE1OTkiO[...]
Verwijderd : user_pref("CT3300849.mam_gk_first_time.enc", "MQ==");
Verwijderd : user_pref("CT3300849.mam_gk_gadgetOpen.enc", "d2VsY29tZQ==");
Verwijderd : user_pref("CT3300849.mam_gk_installer_preapproved.enc", "ZmFsc2U=");
Verwijderd : user_pref("CT3300849.mam_gk_lastLoginTime.enc", "MTM3MTkxMjcxMzk3Nw==");
Verwijderd : user_pref("CT3300849.mam_gk_localization.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiJCZWxlaWQg[...]
Verwijderd : user_pref("CT3300849.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
Verwijderd : user_pref("CT3300849.mam_gk_settings1.8.0.4.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVyd[...]
Verwijderd : user_pref("CT3300849.mam_gk_showCloseButton.enc", "ZmFsc2U=");
Verwijderd : user_pref("CT3300849.mam_gk_showWelcomeGadget.enc", "dHJ1ZQ==");
Verwijderd : user_pref("CT3300849.mam_gk_userId.enc", "ZTg2ZDc2YzctYmYyNC00YmY2LTljYTEtZDFiM2VlOGQ4ODdj");
Verwijderd : user_pref("CT3300849.migrateAppsAndComponents", true);
Verwijderd : user_pref("CT3300849.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.pc-helpforum[...]
Verwijderd : user_pref("CT3300849.openThankYouPage", "true");
Verwijderd : user_pref("CT3300849.openUninstallPage", "true");
Verwijderd : user_pref("CT3300849.originalHomepage", "about:home");
Verwijderd : user_pref("CT3300849.originalSearchAddressUrl", "hxxp://feed.snap.do/?publisher=QuickObrw&dpid=Quick[...]
Verwijderd : user_pref("CT3300849.originalSearchEngine", "");
Verwijderd : user_pref("CT3300849.revertSettingsEnabled", "false");
Verwijderd : user_pref("CT3300849.search.searchAppId", "130122137377838536");
Verwijderd : user_pref("CT3300849.search.searchCount", "0");
Verwijderd : user_pref("CT3300849.searchFromAddressBarEnabledByUser", "true");
Verwijderd : user_pref("CT3300849.searchInNewTabEnabledByUser", "true");
Verwijderd : user_pref("CT3300849.searchInNewTabEnabledInHidden", "true");
Verwijderd : user_pref("CT3300849.searchRevert", "false");
Verwijderd : user_pref("CT3300849.searchSuggestEnabledByUser", "true");
Verwijderd : user_pref("CT3300849.searchUserMode", "1");
Verwijderd : user_pref("CT3300849.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Verwijderd : user_pref("CT3300849.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Verwijderd : user_pref("CT3300849.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Verwijderd : user_pref("CT3300849.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Verwijderd : user_pref("CT3300849.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Verwijderd : user_pref("CT3300849.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Verwijderd : user_pref("CT3300849.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Verwijderd : user_pref("CT3300849.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data[...]
Verwijderd : user_pref("CT3300849.serviceLayer_services_Configuration_lastUpdate", "1374178725752");
Verwijderd : user_pref("CT3300849.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1371730649983");
Verwijderd : user_pref("CT3300849.serviceLayer_services_appsMetadata_lastUpdate", "1371912838595");
Verwijderd : user_pref("CT3300849.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1371730649449");
Verwijderd : user_pref("CT3300849.serviceLayer_services_installUsage_ToolbarInstallEarly_lastUpdate", "1371730647[...]
Verwijderd : user_pref("CT3300849.serviceLayer_services_installUsage_ToolbarInstall_lastUpdate", "1371730651034")[...]
Verwijderd : user_pref("CT3300849.serviceLayer_services_location_lastUpdate", "1372244495984");
Verwijderd : user_pref("CT3300849.serviceLayer_services_login_10.15.2.23_lastUpdate", "1371915932063");
Verwijderd : user_pref("CT3300849.serviceLayer_services_login_10.16.2.509_lastUpdate", "1372244495839");
Verwijderd : user_pref("CT3300849.serviceLayer_services_login_10.16.4.519_lastUpdate", "1374258498310");
Verwijderd : user_pref("CT3300849.serviceLayer_services_menu_769c590835a76d075fe33b9a87a87786_lastUpdate", "13719[...]
Verwijderd : user_pref("CT3300849.serviceLayer_services_menu_d32f45618f5a02bd965c56155a643855_lastUpdate", "13719[...]
Verwijderd : user_pref("CT3300849.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1371730649408");
Verwijderd : user_pref("CT3300849.serviceLayer_services_searchAPI_lastUpdate", "1374178725257");
Verwijderd : user_pref("CT3300849.serviceLayer_services_serviceMap_lastUpdate", "1374178725140");
Verwijderd : user_pref("CT3300849.serviceLayer_services_toolbarContextMenu_lastUpdate", "1371730649338");
Verwijderd : user_pref("CT3300849.serviceLayer_services_toolbarSettings_lastUpdate", "1374258498269");
Verwijderd : user_pref("CT3300849.serviceLayer_services_translation_lastUpdate", "1374178725061");
Verwijderd : user_pref("CT3300849.settingsINI", true);
Verwijderd : user_pref("CT3300849.shouldFirstTimeDialog", "false");
Verwijderd : user_pref("CT3300849.showToolbarPermission", "false");
Verwijderd : user_pref("CT3300849.smartbar.CTID", "CT3300849");
Verwijderd : user_pref("CT3300849.smartbar.Uninstall", "0");
Verwijderd : user_pref("CT3300849.smartbar.homepage", "true");
Verwijderd : user_pref("CT3300849.smartbar.isHidden", true);
Verwijderd : user_pref("CT3300849.smartbar.toolbarName", "FileConverter 1.4 B2 ");
Verwijderd : user_pref("CT3300849.startPage", "true");
Verwijderd : user_pref("CT3300849.toolbarBornServerTime", "20-6-2013");
Verwijderd : user_pref("CT3300849.toolbarCurrentServerTime", "19-7-2013");
Verwijderd : user_pref("CT3300849.toolbarLoginClientTime", "Thu Jun 20 2013 14:17:30 GMT+0200");
Verwijderd : user_pref("CT3300849.versionFromInstaller", "10.15.2.23");
Verwijderd : user_pref("CT3300849_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Verwijderd : user_pref("Smartbar.ConduitHomepagesList", "");
Verwijderd : user_pref("Smartbar.ConduitSearchEngineList", "");
Verwijderd : user_pref("Smartbar.ConduitSearchUrlList", "");
Verwijderd : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://feed.snap.do/?publisher=QuickObrw&dpid=Qu[...]
Verwijderd : user_pref("Smartbar.keywordURLSelectedCTID", "CT3300849");
Verwijderd : user_pref("browser.search.defaultengine", "Ask.com");
Verwijderd : user_pref("browser.search.defaultthis.engineName", "FileConverter 1.4 B2 Customized Web Search");
Verwijderd : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3300849&CUI[...]
Verwijderd : user_pref("extensions.delta.admin", false);
Verwijderd : user_pref("extensions.delta.aflt", "babsst");
Verwijderd : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Verwijderd : user_pref("extensions.delta.autoRvrt", "false");
Verwijderd : user_pref("extensions.delta.dfltLng", "en");
Verwijderd : user_pref("extensions.delta.excTlbr", false);
Verwijderd : user_pref("extensions.delta.ffxUnstlRst", true);
Verwijderd : user_pref("extensions.delta.id", "469e9f190000000000007ce9d31ac8d9");
Verwijderd : user_pref("extensions.delta.instlDay", "15850");
Verwijderd : user_pref("extensions.delta.instlRef", "sst");
Verwijderd : user_pref("extensions.delta.newTab", false);
Verwijderd : user_pref("extensions.delta.prdct", "delta");
Verwijderd : user_pref("extensions.delta.prtnrId", "delta");
Verwijderd : user_pref("extensions.delta.rvrt", "false");
Verwijderd : user_pref("extensions.delta.smplGrp", "none");
Verwijderd : user_pref("extensions.delta.tlbrId", "base");
Verwijderd : user_pref("extensions.delta.tlbrSrchUrl", "");
Verwijderd : user_pref("extensions.delta.vrsn", "1.8.21.5");
Verwijderd : user_pref("extensions.delta.vrsnTs", "1.8.21.521:10:34");
Verwijderd : user_pref("extensions.delta.vrsni", "1.8.21.5");
Verwijderd : user_pref("extensions.delta_i.babExt", "");
Verwijderd : user_pref("extensions.delta_i.babTrack", "affID=119776&tt=gc_");
Verwijderd : user_pref("extensions.delta_i.srcExt", "ss");
Verwijderd : user_pref("extensions.enabledAddons", "ffxtlbr%40funmoods.com:1.5.1,%7Bf2d3789a-1428-4ee6-af23-375ab[...]
Verwijderd : user_pref("extensions.funmoods.aflt", "stonicrio");
Verwijderd : user_pref("extensions.funmoods.autoRvrt", false);
Verwijderd : user_pref("extensions.funmoods.brwsrsrc", "ietlbr");
Verwijderd : user_pref("extensions.funmoods.cntry", "NL");
Verwijderd : user_pref("extensions.funmoods.cv", "cv5");
Verwijderd : user_pref("extensions.funmoods.dfltLng", "");
Verwijderd : user_pref("extensions.funmoods.dfltSrch", false);
Verwijderd : user_pref("extensions.funmoods.dfltlng", "en");
Verwijderd : user_pref("extensions.funmoods.dfltsrch", "false");
Verwijderd : user_pref("extensions.funmoods.dnsErr", true);
Verwijderd : user_pref("extensions.funmoods.envrmnt", "production");
Verwijderd : user_pref("extensions.funmoods.excTlbr", false);
Verwijderd : user_pref("extensions.funmoods.fmupdtFirst", false);
Verwijderd : user_pref("extensions.funmoods.hdrMd5", "55FB74B753B5F12F990885688676988B");
Verwijderd : user_pref("extensions.funmoods.hmpg", false);
Verwijderd : user_pref("extensions.funmoods.hmpgUrl", "hxxp://searchfunmoods.com/?f=1&a=stonicrio&chnl=stonicrio&[...]
Verwijderd : user_pref("extensions.funmoods.hrdid", "7CE9D31AC8D99F19");
Verwijderd : user_pref("extensions.funmoods.id", "7CE9D31AC8D99F19");
Verwijderd : user_pref("extensions.funmoods.instlDay", "15640");
Verwijderd : user_pref("extensions.funmoods.instlRef", "stonicrio");
Verwijderd : user_pref("extensions.funmoods.instlday", "15640");
Verwijderd : user_pref("extensions.funmoods.instlref", "stonicrio");
Verwijderd : user_pref("extensions.funmoods.isdcmntcmplt", true);
Verwijderd : user_pref("extensions.funmoods.keywordurl", "");
Verwijderd : user_pref("extensions.funmoods.lastVrsnTs", "1.5.23.2217:31:49");
Verwijderd : user_pref("extensions.funmoods.mntrvrsn", "1.3.0");
Verwijderd : user_pref("extensions.funmoods.monitorreport", true);
Verwijderd : user_pref("extensions.funmoods.newTabUrl", "hxxp://searchfunmoods.com/?f=2&a=stonicrio&chnl=stonicri[...]
Verwijderd : user_pref("extensions.funmoods.newtab", "false");
Verwijderd : user_pref("extensions.funmoods.newtaburl", "hxxp://searchfunmoods.com/?f=2&a=stonicrio&chnl=stonicri[...]
Verwijderd : user_pref("extensions.funmoods.pnu_base", "{\"newVrsn\":\"204\",\"lastVrsn\":\"204\",\"vrsnLoad\":\"[...]
Verwijderd : user_pref("extensions.funmoods.prdct", "funmoods");
Verwijderd : user_pref("extensions.funmoods.prtnrId", "funmoods");
Verwijderd : user_pref("extensions.funmoods.prtnrid", "funmoods");
Verwijderd : user_pref("extensions.funmoods.savedVrsnTs", "1");
Verwijderd : user_pref("extensions.funmoods.sg", "{smplGrp}");
Verwijderd : user_pref("extensions.funmoods.smplgrp", "free");
Verwijderd : user_pref("extensions.funmoods.srch", "");
Verwijderd : user_pref("extensions.funmoods.srchPrvdr", "Search");
Verwijderd : user_pref("extensions.funmoods.srchprvdr", "Search");
Verwijderd : user_pref("extensions.funmoods.tlbrId", "base");
Verwijderd : user_pref("extensions.funmoods.tlbrSrchUrl", "hxxp://searchfunmoods.com/?f=3&a=stonicrio&chnl=stonic[...]
Verwijderd : user_pref("extensions.funmoods.tlbrid", "base");
Verwijderd : user_pref("extensions.funmoods.tlbrsrchurl", "hxxp://searchfunmoods.com/?f=3&a=stonicrio&chnl=stonic[...]
Verwijderd : user_pref("extensions.funmoods.vrsn", "1.5.23.22");
Verwijderd : user_pref("extensions.funmoods.vrsni", "1.5.23.22");
Verwijderd : user_pref("extensions.funmoods.vrsnts", "");
Verwijderd : user_pref("extensions.funmoods_i.newTab", false);
Verwijderd : user_pref("extensions.funmoods_i.smplGrp", "none");
Verwijderd : user_pref("extensions.funmoods_i.vrsnTs", "1.5.23.2217:31:49");
Verwijderd : user_pref("extensions.helperbar.Country", "Netherlands");
Verwijderd : user_pref("extensions.helperbar.DockingPositionDown", false);
Verwijderd : user_pref("extensions.helperbar.LastHiddenTime", 22904070);
Verwijderd : user_pref("extensions.helperbar.SmartbarDisabled", true);
Verwijderd : user_pref("extensions.helperbar.SmartbarStateMinimaized", false);
Verwijderd : user_pref("extensions.helperbar.UserID", "6e588e28-7347-47a3-8f59-f2a70dfc509e");
Verwijderd : user_pref("extensions.helperbar.Visibility", false);
Verwijderd : user_pref("extensions.helperbar.countryiso", "nl");
Verwijderd : user_pref("extensions.helperbar.downloadprovider", "quickobrw");
Verwijderd : user_pref("extensions.helperbar.installationid", "6e588e28-7347-47a3-8f59-f2a70dfc509e");
Verwijderd : user_pref("extensions.helperbar.installdate", "29/03/2013");
Verwijderd : user_pref("extensions.helperbar.publisher", "quickobrw");
Verwijderd : user_pref("extensions.mixidj.tlbrId", "mdelta");
Verwijderd : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?octid=CT3300849&ctid=CT3300849&S[...]
Verwijderd : user_pref("smartbar.addressBarOwnerCTID", "CT3300849");
Verwijderd : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3300849&CUI=UN895068285[...]
Verwijderd : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT[...]
Verwijderd : user_pref("smartbar.defaultSearchOwnerCTID", "CT3300849");
Verwijderd : user_pref("smartbar.homePageOwnerCTID", "CT3300849");
Verwijderd : user_pref("smartbar.machineId", "4VMYPJL/AWWFFGOZDWLQTNAOFCGGDIZHOCAAQJFROTH4AQYVCMYPV+6PERD0K6BMPHX[...]
Verwijderd : user_pref("smartbar.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT330[...]
-\\ Google Chrome v [Onmogelijk de versie te verkrijgen]
File : C:\Users\silvia\AppData\Local\Google\Chrome\User Data\Default\Preferences
Verwijderd [l.1] : icon_url ={"backup":null,"browser":{"window_placement":{"bottom":718,"left":10,"maximized":false,"right":1060,[...]
*************************
AdwCleaner[s1].txt - [43688 octets] - [19/07/2013 21:52:31]
########## EOF - C:\AdwCleaner[s1].txt - [43749 octets] ##########
log van hijackthis
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:59:43, on 19-7-2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16635)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\uTorrent\uTorrent.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\Ralink\Common\RaUI.exe
C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\KPN\KPN Assistent\KPN Assistent\KPN_Assistent.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=NL&userid=6e588e28-7347-47a3-8f59-f2a70dfc509e&searchtype=ds&q={searchTerms}&installDate=29/03/2013
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=NL&userid=6e588e28-7347-47a3-8f59-f2a70dfc509e&searchtype=ds&q={searchTerms}&installDate=29/03/2013
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Search
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=NL&userid=6e588e28-7347-47a3-8f59-f2a70dfc509e&searchtype=ds&q={searchTerms}&installDate=29/03/2013
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=NL&userid=6e588e28-7347-47a3-8f59-f2a70dfc509e&searchtype=ds&q={searchTerms}&installDate=29/03/2013
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Aanmeldhulp voor Microsoft-account - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: (no name) - !{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} - (no file)
O4 - HKLM\..\Run: [backupManagerTray] "C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" -h -k
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [suiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [KPN Assistent] C:\Program Files (x86)\KPN\KPN Assistent\KPN Assistent\KPN_Assistent.exe /auto
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [isMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [isMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Ralink Wireless Utility.lnk = C:\Program Files (x86)\Ralink\Common\RaUI.exe
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra button: Toon of verberg HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Realtime Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: EgisTec Ticket Service - Egis Technology Inc. - C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe
O23 - Service: ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
O23 - Service: Intel® Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NTI IScheduleSvc - NTI Corporation - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Ralink Registry Writer (RalinkRegistryWriter) - Ralink Technology, Corp. - C:\Program Files (x86)\Ralink\Common\RaRegistry.exe
O23 - Service: Ralink Registry Writer 64 (RalinkRegistryWriter64) - Ralink Technology, Corp. - C:\Program Files (x86)\Ralink\Common\RaRegistry64.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel® Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: vToolbarUpdater15.3.0 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.3.0\ToolbarUpdater.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 12114 bytes
-
O2 - BHO: CrossriderApp0005060 - {11111111-1111-1111-1111-110011501160} - C:\Program Files (x86)\Savings Sidekick\Savings Sidekick.dll
O2 - BHO: WebCake Layers - {2A5A2A90-3B30-4E6E-A955-2F232C6EF517} - C:\Program Files (x86)\WebCake\WebCakeIEClient.dll
O2 - BHO: SpecialSavings - {74F475FA-6C75-43BD-AAB9-ECDA6184F600} - C:\Program Files (x86)\SpecialSavings\SpecialSavingsSinged.dll
O2 - BHO: Funmoods Helper Object - {75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} - C:\Program Files (x86)\Funmoods\1.5.23.22\bh\escort.dll
O3 - Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - (no file)
O3 - Toolbar: (no name) - {0cc09160-108c-4759-bab1-5c12c216e005} - (no file)
O3 - Toolbar: (no name) - !{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} - (no file)
O4 - HKLM\..\Run: [browser companion helper] C:\Program Files (x86)\BrowserCompanion\BCHelper.exe /T=3 /CHI=kolgnaidildmdbfgdnoapjdianbpajne
O4 - HKCU\..\Run: [WebCake Desktop] "C:\Users\silvia\AppData\Roaming\WebCake\WebCakeDesktop.exe"
O9 - Extra button: SpecialSavings - {A69A551A-1AAE-4B67-8C2E-52F8B8A19504} - C:\Program Files (x86)\SpecialSavings \SpecialSavingsSinged.dll
Deze bestanden heb ik kunnen verwijderen.
maar ik vind de volgende bestanden niet
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Search -7347-47a3-8f59-f2a70dfc509e&searchtype=ds&q={searchTerms}&installDate=29/03/201 3
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Search -7347-47a3-8f59-f2a70dfc509e&searchtype=ds&q={searchTerms}&installDate=29/03/201 3
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Search
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = Search -7347-47a3-8f59-f2a70dfc509e&searchtype=ds&q={searchTerms}&installDate=29/03/201 3
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = Search -7347-47a3-8f59-f2a70dfc509e&searchtype=ds&q={searchTerms}&installDate=29/03/201 3
ik vond deze wel
wouw ze verwijderen omdat ze op elkaar lijken.
maar vraag het toch ff na voor ik een foutje maak
de volgende stappen kan ik dan uitvoeren.
-
geen probleem ik wacht wel af, ik zou dan ook de oorzaak willen weten, van waarom dit bestand ontbreekt
-
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:55:15, on 19-7-2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16635)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\uTorrent\uTorrent.exe
C:\Users\silvia\AppData\Roaming\WebCake\WebCakeDesktop.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
C:\Program Files (x86)\Launch Manager\LManager.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Ralink\Common\RaUI.exe
C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe
C:\Program Files (x86)\KPN\KPN Assistent\KPN Assistent\KPN_Assistent.exe
C:\Program Files (x86)\Launch Manager\LMworker.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_7_700_224.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe
C:\Windows\SysWOW64\DllHost.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=NL&userid=6e588e28-7347-47a3-8f59-f2a70dfc509e&searchtype=ds&q={searchTerms}&installDate=29/03/2013
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=NL&userid=6e588e28-7347-47a3-8f59-f2a70dfc509e&searchtype=ds&q={searchTerms}&installDate=29/03/2013
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=NL&userid=6e588e28-7347-47a3-8f59-f2a70dfc509e&searchtype=hp&installDate=29/03/2013
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=NL&userid=6e588e28-7347-47a3-8f59-f2a70dfc509e&searchtype=ds&q={searchTerms}&installDate=29/03/2013
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.snapdo.com/?publisher=QuickObrw&dpid=QuickObrw&co=NL&userid=6e588e28-7347-47a3-8f59-f2a70dfc509e&searchtype=ds&q={searchTerms}&installDate=29/03/2013
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: CrossriderApp0005060 - {11111111-1111-1111-1111-110011501160} - C:\Program Files (x86)\Savings Sidekick\Savings Sidekick.dll
O2 - BHO: WebCake Layers - {2A5A2A90-3B30-4E6E-A955-2F232C6EF517} - C:\Program Files (x86)\WebCake\WebCakeIEClient.dll
O2 - BHO: SpecialSavings - {74F475FA-6C75-43BD-AAB9-ECDA6184F600} - C:\Program Files (x86)\SpecialSavings\SpecialSavingsSinged.dll
O2 - BHO: Funmoods Helper Object - {75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} - C:\Program Files (x86)\Funmoods\1.5.23.22\bh\escort.dll
O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Aanmeldhulp voor Microsoft-account - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\15.3.0.11\AVG SafeGuard toolbar_toolbar.dll
O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - (no file)
O3 - Toolbar: (no name) - {0cc09160-108c-4759-bab1-5c12c216e005} - (no file)
O3 - Toolbar: (no name) - !{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} - (no file)
O3 - Toolbar: AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\15.3.0.11\AVG SafeGuard toolbar_toolbar.dll
O4 - HKLM\..\Run: [backupManagerTray] "C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" -h -k
O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [suiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [browser companion helper] C:\Program Files (x86)\BrowserCompanion\BCHelper.exe /T=3 /CHI=kolgnaidildmdbfgdnoapjdianbpajne
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe"
O4 - HKLM\..\Run: [KPN Assistent] C:\Program Files (x86)\KPN\KPN Assistent\KPN Assistent\KPN_Assistent.exe /auto
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [WebCake Desktop] "C:\Users\silvia\AppData\Roaming\WebCake\WebCakeDesktop.exe"
O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [isMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [isMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Ralink Wireless Utility.lnk = C:\Program Files (x86)\Ralink\Common\RaUI.exe
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: SpecialSavings - {A69A551A-1AAE-4B67-8C2E-52F8B8A19504} - C:\Program Files (x86)\SpecialSavings\SpecialSavingsSinged.dll
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra button: Toon of verberg HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\15.3.0\ViProtocol.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Realtime Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: EgisTec Ticket Service - Egis Technology Inc. - C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe
O23 - Service: ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
O23 - Service: Intel® Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NTI IScheduleSvc - NTI Corporation - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Ralink Registry Writer (RalinkRegistryWriter) - Ralink Technology, Corp. - C:\Program Files (x86)\Ralink\Common\RaRegistry.exe
O23 - Service: Ralink Registry Writer 64 (RalinkRegistryWriter64) - Ralink Technology, Corp. - C:\Program Files (x86)\Ralink\Common\RaRegistry64.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel® Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: vToolbarUpdater15.3.0 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.3.0\ToolbarUpdater.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: WebCake Desktop Updater - WebCake LLC - C:\Program Files (x86)\WebCake\WebCakeDesktop.Updater.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 14343 bytes
-
Ik heb een probleem met een laptop,hij start wel normaal op.
In de melding staat: Het programma kan niet worden gestart. [bchelper.exe- systeemfout] omdat sqlitle3.dll ontbreekt
op uw computer. U kunt dit probleem mogelijk oplossen door het programma opnieuw te installeren.
Wat kan ik het beste doen?
-
hij doet het weer, heb hem opnieuw opgestart. en hoefde niks te doen
-
ik heb probleem met laptop ik kan wel via inlog scherm inloggen.
maar dan zwart beeld, in het verleden had ik dit probleem ook, toen had ik via veilige modus,taakbeheer iets opgelost. alleen ik weet niet meer wat ik had gedaan. weet iemand misschien dit.
ik moest wel iets veraderen, maar probleem is ik ben het ff vergeten
-
ik heb hem nog niet kunnen nakijken
ben zelf ziek geweest
en hoorde niet egt wat meer
van die persoon ik zal nog eens navragen
-
dat dacht ik al het gaan om een sony vailo ik vind de onderdelen niet zo 123 op internet. want ik heb dan denk ik de orineele onderdelen nodig en jha het is de 1x dat ik dit ga fixen. en gelukkig via youtube internet, weet ik al hoe moet
-
ik moet een laptop fixen en er is drank over gekomen.
sommige toetsen doet het niet meer, en dvd/cd spelet doet het dus niet meer het is 2 dagen gebeurt. en k moet laptop maken van familie lid.
is deze te fixen?
-
Ik ben een laptop aan maken voor een familie lid.
en krijg als ik hem opstart een wit scherm met teks Please wait while connection is established en ook in duits.
ik vond op internet dat ik met cd kaspersky moest doen dat heb ik gedaan.
maar moest files zoeken en verwijderen maar vind ze niet wat kan ik nu beste doen?
ik heb hem nu ff op de scan gezet.
dus deze stap lukt me niet echt
Dubbelklik op het pictogram "Filemanager"
Navigeer nu naar de map c:\windows\system32\
Zoek nu naar het bestand wat lijkt op ch8l0.exe en verwijder deze.
Bij Windows Vista is deze infectie op een andere locatie of onder een andere naam geplaatst dan bij XP, zoek bij Windows Vista naar het volgende bestanden die lijken op de onderstaande.
C:\Users\Gebruikersnaam\AppData\Roaming\0.4208281249860084.exe
c:\windows\system32\0.4208281249860084.exe
-
hij doet het maar zie d e helf van het beeld
bv met gta eflc zie ik de telefoon niet omdat dat stuk niet in beeld is
maar had wat beeldschermpjes gezien welke is beste ?
Hewlett packard S2031A - Beeldscherm
200 is eiglijk net de limet de prijs dus welk is beste? waar ik ps3 kan op aansluiten
-
ja maar ik heb hem al jare geleden gekocht het is vrij oud ding
dus heb hem al paar jaar 3 jaar of zo
en heb geinstaleerd hij deed het aleen zie niet alles van het beeld
een stukje van beeld zeg maar zie je niet dus het beeld is door de helf
heb geprobeert met knopje de beeld na links te schuiven werkte maar klein beetje
wat ik heb gedaan is
beeldscherm bij tv buurt gezet
eers ps3 op tv aangeslote
toen naar instellinge voor de pc gedaan
toen kabel achter uit getrokke dan pc kabel er in
toen deed die het
maar je ziet de helf van het beeld
ik ga denk ik nieuw beeldscherm kopen
niet al de duur weet iemand toevallig
goed mooi beeldscherm hd
en goed werkt op de ps3
-
jh daar dacht ik zelf ook aan zal strax proberen bedank voor tip
-
ik heb deze kabel
en mijn scherm is
dus
1 geluid doet het
2 als ik aan zet ps3 staat er deze output word niet ondersteund
-
ah maak niet
ja dat is het en geluid doet het wel ik wil instellinge beeldschem doen zou dat helpe?
of tog niet
-
ja dat klop
maar kijk ik heb een aparte kabel
die zet de vga naar divi zeg maar zo soort opset stukje
die hoefde ik aleen in de monitor te bevestigen en dan
op de kabel van divi en dan in ps3
dus kan het tog niet?
De service user profile-service verhindert het aanmelden.
in Archief Windows Vista
Geplaatst:
Hallo.
Ik krijgt de melding:De service user profile-service verhindert het aanmelden.
Ik weet dat ik via veilige modus een nieuw acount moest aanmaken,maar probleeem is, als ik klik op ander acount beheren staat het tekentje dat je wachtwoord moet intypen. Dus ik klik er op maar niks gebeurd. Dus ik kan niks doen