Ga naar inhoud

doodles

Lid
  • Aantal items

    6
  • Registratiedatum

  • Laatst bezocht

Berichten die geplaatst zijn door doodles

  1. ZO zijn we weer.

    Gedaan, hierbij de logfile, waarbij ik wil opmerken dat chrome niet lekker opstart.

    ComboFix 12-12-28.02 - Acer 28-12-2012 19:59:18.2.3 - x64

    Microsoft Windows 7 Home Premium 6.1.7601.1.1252.31.1043.18.4091.2259 [GMT 1:00]

    Gestart vanuit: c:\users\Acer\Desktop\ComboFix.exe

    gebruikte Opdracht switches :: c:\users\Acer\Desktop\cfscript.txt

    AV: ESET NOD32 Antivirus 5.2 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}

    SP: ESET NOD32 Antivirus 5.2 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}

    SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    .

    FILE ::

    "c:\windows\system32\drivers\ewtsouyq.sys"

    .

    .

    (((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    c:\windows\SysWow64\DEBUG.log

    .

    .

    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    -------\Service_ewtsouyq

    .

    .

    (((((((((((((((((((( Bestanden Gemaakt van 2012-11-28 to 2012-12-28 ))))))))))))))))))))))))))))))

    .

    .

    2012-12-28 19:17 . 2012-12-28 19:17 -------- d-----w- c:\users\Default\AppData\Local\temp

    2012-12-27 16:21 . 2012-12-27 16:21 388096 ----a-r- c:\users\Acer\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

    2012-12-27 16:21 . 2012-12-27 16:21 -------- d-----w- c:\program files (x86)\Trend Micro

    2012-12-27 11:16 . 2012-08-21 12:01 33240 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys

    2012-12-27 11:16 . 2012-12-27 11:16 -------- d-----w- c:\program files\iPod

    2012-12-27 11:16 . 2012-12-27 11:16 -------- d-----w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69

    2012-12-27 11:16 . 2012-12-27 11:16 -------- d-----w- c:\program files\iTunes

    2012-12-27 11:16 . 2012-12-27 11:16 -------- d-----w- c:\program files (x86)\iTunes

    2012-12-24 13:56 . 2012-12-24 13:56 -------- d-----w- c:\program files (x86)\Qualcomm Atheros

    2012-12-24 13:55 . 2012-11-22 19:51 3831808 ----a-w- c:\windows\system32\drivers\athrx.sys

    2012-12-24 13:55 . 2012-11-22 19:51 3831808 ------w- c:\windows\system32\athrx.sys

    2012-12-24 13:55 . 2012-12-24 13:56 -------- d-----w- c:\programdata\Qualcomm Atheros

    2012-12-24 13:54 . 2012-08-29 16:48 243712 ----a-w- c:\windows\system32\drivers\RtsUStor.sys

    2012-12-24 13:54 . 2011-11-10 15:54 9882112 ----a-w- c:\windows\SysWow64\RtsUStoricon.dll

    2012-12-24 13:50 . 2012-12-24 13:50 -------- d-----w- c:\program files\Broadcom

    2012-12-24 13:49 . 2012-12-24 13:49 -------- d-----w- c:\windows\Dell

    2012-12-24 13:42 . 2012-08-28 12:27 58536 ----a-w- c:\windows\system32\drivers\usbfilter.sys

    2012-12-24 08:16 . 2012-12-24 08:16 -------- d-----w- c:\program files (x86)\VS Revo Group

    2012-12-22 17:02 . 2012-12-22 17:02 -------- d-----w- C:\test

    2012-12-21 08:21 . 2012-12-16 17:11 46080 ----a-w- c:\windows\system32\atmlib.dll

    2012-12-21 08:21 . 2012-12-16 14:13 34304 ----a-w- c:\windows\SysWow64\atmlib.dll

    2012-12-21 08:21 . 2012-12-16 14:45 367616 ----a-w- c:\windows\system32\atmfd.dll

    2012-12-21 08:21 . 2012-12-16 14:13 295424 ----a-w- c:\windows\SysWow64\atmfd.dll

    2012-12-14 22:44 . 2012-12-14 22:44 -------- d-----w- c:\windows\Migration

    2012-12-12 22:34 . 2012-11-14 05:52 2382848 ----a-w- c:\windows\system32\mshtml.tlb

    2012-12-12 22:33 . 2012-11-14 06:06 499200 ----a-w- c:\program files\Internet Explorer\jsdbgui.dll

    2012-12-12 22:33 . 2012-11-14 02:01 678912 ----a-w- c:\program files (x86)\Internet Explorer\iedvtool.dll

    2012-12-12 22:33 . 2012-11-14 02:00 387584 ----a-w- c:\program files (x86)\Internet Explorer\jsdbgui.dll

    2012-12-12 22:33 . 2012-11-14 06:06 887296 ----a-w- c:\program files\Internet Explorer\iedvtool.dll

    2012-12-12 22:33 . 2012-11-14 07:06 17811968 ----a-w- c:\windows\system32\mshtml.dll

    2012-12-12 22:33 . 2012-11-14 06:32 10925568 ----a-w- c:\windows\system32\ieframe.dll

    2012-12-12 06:51 . 2012-11-22 03:26 3149824 ----a-w- c:\windows\system32\win32k.sys

    2012-12-12 06:51 . 2012-11-09 05:45 2048 ----a-w- c:\windows\system32\tzres.dll

    2012-12-12 06:51 . 2012-11-09 04:42 2048 ----a-w- c:\windows\SysWow64\tzres.dll

    2012-12-12 06:49 . 2012-11-02 05:59 478208 ----a-w- c:\windows\system32\dpnet.dll

    2012-12-12 06:49 . 2012-11-02 05:11 376832 ----a-w- c:\windows\SysWow64\dpnet.dll

    2012-12-11 19:52 . 2012-12-13 19:40 -------- d-----w- c:\users\Acer\AppData\Roaming\tor

    2012-11-29 19:55 . 2012-11-29 19:55 -------- d-----w- c:\program files (x86)\Common Files\Atheros

    2012-11-29 19:54 . 2012-11-29 19:55 -------- d-----w- c:\program files (x86)\Bluetooth Suite

    .

    .

    .

    ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    2012-12-12 22:37 . 2011-01-07 17:58 67413224 ----a-w- c:\windows\system32\MRT.exe

    2012-12-12 13:11 . 2012-05-11 18:59 697272 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe

    2012-12-12 13:11 . 2011-05-20 04:02 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl

    2012-11-30 14:54 . 2012-11-30 14:54 561664 ----a-w- c:\windows\apppatch\AcLayers.dll

    2012-11-30 14:54 . 2012-11-30 14:54 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll

    2012-11-30 14:54 . 2012-11-30 14:54 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll

    2012-11-17 15:01 . 2012-11-17 15:01 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys

    2012-11-17 15:01 . 2012-11-17 15:01 84992 ----a-w- c:\windows\system32\WUDFSvc.dll

    2012-11-17 15:01 . 2012-11-17 15:01 744448 ----a-w- c:\windows\system32\WUDFx.dll

    2012-11-17 15:01 . 2012-11-17 15:01 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll

    2012-11-17 15:01 . 2012-11-17 15:01 229888 ----a-w- c:\windows\system32\WUDFHost.exe

    2012-11-17 15:01 . 2012-11-17 15:01 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys

    2012-11-17 15:01 . 2012-11-17 15:01 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll

    2012-11-17 15:00 . 2012-11-17 15:00 9728 ----a-w- c:\windows\system32\Wdfres.dll

    2012-11-17 15:00 . 2012-11-17 15:00 785512 ----a-w- c:\windows\system32\drivers\Wdf01000.sys

    2012-11-17 15:00 . 2012-11-17 15:00 54376 ----a-w- c:\windows\system32\drivers\WdfLdr.sys

    2012-11-17 14:59 . 2012-11-17 14:59 55296 ----a-w- c:\windows\system32\dhcpcsvc6.dll

    2012-11-17 14:59 . 2012-11-17 14:59 44032 ----a-w- c:\windows\SysWow64\dhcpcsvc6.dll

    2012-11-17 14:59 . 2012-11-17 14:59 226816 ----a-w- c:\windows\system32\dhcpcore6.dll

    2012-11-17 14:59 . 2012-11-17 14:59 193536 ----a-w- c:\windows\SysWow64\dhcpcore6.dll

    2012-11-17 14:58 . 2012-11-17 14:58 70656 ----a-w- c:\windows\system32\nlaapi.dll

    2012-11-17 14:58 . 2012-11-17 14:58 569344 ----a-w- c:\windows\system32\iphlpsvc.dll

    2012-11-17 14:58 . 2012-11-17 14:58 45568 ----a-w- c:\windows\system32\drivers\tcpipreg.sys

    2012-11-17 14:58 . 2012-11-17 14:58 303104 ----a-w- c:\windows\system32\nlasvc.dll

    2012-11-17 14:58 . 2012-11-17 14:58 216576 ----a-w- c:\windows\system32\ncsi.dll

    2012-11-17 14:58 . 2012-11-17 14:58 1914248 ----a-w- c:\windows\system32\drivers\tcpip.sys

    2012-11-17 14:58 . 2012-11-17 14:58 52224 ----a-w- c:\windows\SysWow64\nlaapi.dll

    2012-11-17 14:58 . 2012-11-17 14:58 246272 ----a-w- c:\windows\system32\netcorehc.dll

    2012-11-17 14:58 . 2012-11-17 14:58 18944 ----a-w- c:\windows\SysWow64\netevent.dll

    2012-11-17 14:58 . 2012-11-17 14:58 18944 ----a-w- c:\windows\system32\netevent.dll

    2012-11-17 14:58 . 2012-11-17 14:58 175104 ----a-w- c:\windows\SysWow64\netcorehc.dll

    2012-11-17 14:58 . 2012-11-17 14:58 156672 ----a-w- c:\windows\SysWow64\ncsi.dll

    2012-11-17 14:57 . 2012-11-17 14:57 62976 ----a-w- c:\windows\system32\TSWbPrxy.exe

    2012-11-17 14:57 . 2012-11-17 14:57 54272 ----a-w- c:\windows\system32\MsRdpWebAccess.dll

    2012-11-17 14:57 . 2012-11-17 14:57 37376 ----a-w- c:\windows\SysWow64\tsgqec.dll

    2012-11-17 14:57 . 2012-11-17 14:57 3174912 ----a-w- c:\windows\system32\rdpcorets.dll

    2012-11-17 14:57 . 2012-11-17 14:57 269312 ----a-w- c:\windows\SysWow64\aaclient.dll

    2012-11-17 14:57 . 2012-11-17 14:57 243200 ----a-w- c:\windows\system32\rdpudd.dll

    2012-11-17 14:57 . 2012-11-17 14:57 228864 ----a-w- c:\windows\system32\rdpendp_winip.dll

    2012-11-17 14:57 . 2012-11-17 14:57 19456 ----a-w- c:\windows\system32\drivers\rdpvideominiport.sys

    2012-11-17 14:57 . 2012-11-17 14:57 192000 ----a-w- c:\windows\SysWow64\rdpendp_winip.dll

    2012-11-17 14:57 . 2012-11-17 14:57 15360 ----a-w- c:\windows\system32\RdpGroupPolicyExtension.dll

    2012-11-17 14:57 . 2012-11-17 14:57 1123840 ----a-w- c:\windows\system32\mstsc.exe

    2012-11-17 14:57 . 2012-11-17 14:57 1048064 ----a-w- c:\windows\SysWow64\mstsc.exe

    2012-11-17 14:57 . 2012-11-17 14:57 4916224 ----a-w- c:\windows\SysWow64\mstscax.dll

    2012-11-17 14:57 . 2012-11-17 14:57 57856 ----a-w- c:\windows\system32\drivers\TsUsbFlt.sys

    2012-11-17 14:57 . 2012-11-17 14:57 5773824 ----a-w- c:\windows\system32\mstscax.dll

    2012-11-17 14:57 . 2012-11-17 14:57 46592 ----a-w- c:\windows\SysWow64\MsRdpWebAccess.dll

    2012-11-17 14:57 . 2012-11-17 14:57 44032 ----a-w- c:\windows\system32\tsgqec.dll

    2012-11-17 14:57 . 2012-11-17 14:57 43520 ----a-w- c:\windows\system32\TsUsbGDCoInstaller.dll

    2012-11-17 14:57 . 2012-11-17 14:57 384000 ----a-w- c:\windows\system32\wksprt.exe

    2012-11-17 14:57 . 2012-11-17 14:57 322560 ----a-w- c:\windows\system32\aaclient.dll

    2012-11-17 14:57 . 2012-11-17 14:57 18432 ----a-w- c:\windows\system32\wksprtPS.dll

    2012-11-17 14:57 . 2012-11-17 14:57 16896 ----a-w- c:\windows\SysWow64\wksprtPS.dll

    2012-11-17 14:57 . 2012-11-17 14:57 13312 ----a-w- c:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll

    2012-11-17 14:57 . 2012-11-17 14:57 13312 ----a-w- c:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe

    2012-11-17 14:57 . 2012-11-17 14:57 96768 ----a-w- c:\windows\SysWow64\sspicli.dll

    2012-11-17 14:57 . 2012-11-17 14:57 458712 ----a-w- c:\windows\system32\drivers\cng.sys

    2012-11-17 14:57 . 2012-11-17 14:57 340992 ----a-w- c:\windows\system32\schannel.dll

    2012-11-17 14:57 . 2012-11-17 14:57 307200 ----a-w- c:\windows\system32\ncrypt.dll

    2012-11-17 14:57 . 2012-11-17 14:57 247808 ----a-w- c:\windows\SysWow64\schannel.dll

    2012-11-17 14:57 . 2012-11-17 14:57 22016 ----a-w- c:\windows\SysWow64\secur32.dll

    2012-11-17 14:57 . 2012-11-17 14:57 154480 ----a-w- c:\windows\system32\drivers\ksecpkg.sys

    2012-11-17 14:57 . 2012-11-17 14:57 1448448 ----a-w- c:\windows\system32\lsasrv.dll

    2012-11-17 14:57 . 2012-11-17 14:57 220160 ----a-w- c:\windows\SysWow64\ncrypt.dll

    2012-11-17 14:53 . 2012-11-17 14:53 1659760 ----a-w- c:\windows\system32\drivers\ntfs.sys

    2012-11-17 14:52 . 2012-11-17 14:52 245760 ----a-w- c:\windows\system32\OxpsConverter.exe

    2012-11-08 17:24 . 2012-12-28 08:04 9125352 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{D6A18B8A-003C-4E72-BA98-0ECBF02D5F20}\mpengine.dll

    2012-11-07 20:10 . 2012-11-07 20:11 108008 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll

    2012-11-07 20:10 . 2012-11-07 20:11 289768 ----a-w- c:\windows\system32\javaws.exe

    2012-11-07 20:10 . 2012-11-07 20:11 189416 ----a-w- c:\windows\system32\javaw.exe

    2012-11-07 20:10 . 2012-11-07 20:11 916456 ----a-w- c:\windows\system32\deployJava1.dll

    2012-11-07 20:10 . 2012-11-07 20:11 1034216 ----a-w- c:\windows\system32\npDeployJava1.dll

    2012-11-07 20:10 . 2012-11-07 20:11 188904 ----a-w- c:\windows\system32\java.exe

    2012-10-04 16:40 . 2012-12-12 06:50 44032 ----a-w- c:\windows\apppatch\acwow64.dll

    .

    .

    ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

    REGEDIT4

    .

    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]

    @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"

    [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]

    2010-05-27 02:40 120176 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x86\PSDProtect.dll

    .

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "IncrediMail"="c:\program files (x86)\IncrediMail\bin\IncMail.exe" [2012-08-14 366576]

    "Advanced SystemCare 5"="c:\program files (x86)\IObit\Advanced SystemCare 5\ASCTray.exe" [2012-05-28 288128]

    "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]

    "MobileDocuments"="c:\program files (x86)\Common Files\Apple\Internet Services\ubd.exe" [2012-02-23 59240]

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

    "GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]

    "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-09-28 642728]

    "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-11 919008]

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

    "ConsentPromptBehaviorAdmin"= 5 (0x5)

    "ConsentPromptBehaviorUser"= 0 (0x0)

    "EnableUIADesktopToggle"= 0 (0x0)

    "EnableLinkedConnections"= 1 (0x1)

    .

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

    @=""

    .

    R0 sptd;sptd; [x]

    R2 AODDriver4.01;AODDriver4.01; [x]

    R2 BrcmMgmtAgent;Broadcom Management Agent;c:\program files\Broadcom\MgmtAgent\BrcmMgmtAgent.exe [2012-08-02 204288]

    R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

    R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-09-29 676936]

    R3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]

    R3 AVFSFilter;AVFSFilter;c:\windows\system32\DRIVERS\avfsfilter.sys [x]

    R3 cpuz134;cpuz134;c:\users\Acer\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [x]

    R3 esgiguard;esgiguard;c:\program files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys [2011-03-02 13088]

    R3 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [2010-05-27 305520]

    R3 PCDSRVC{11725DDC-8233B918-06020101}_0;PCDSRVC{11725DDC-8233B918-06020101}_0 - PCDR Kernel Mode Service Helper Driver; [x]

    R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-11-17 19456]

    R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-11-17 57856]

    R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [2011-01-05 1255736]

    R4 AdobeActiveFileMonitor10.0;Adobe Active File Monitor V10;c:\program files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe [2011-09-14 169624]

    R4 AdobeActiveFileMonitor11.0;Adobe Active File Monitor V11;c:\program files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [2012-09-23 171600]

    R4 CyberLink PowerDVD 11.0 Monitor Service;CyberLink PowerDVD 11.0 Monitor Service;c:\program files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe [2011-03-31 70952]

    R4 CyberLink PowerDVD 11.0 Service;CyberLink PowerDVD 11.0 Service;c:\program files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSServer.exe [2011-03-31 312616]

    R4 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]

    S0 amd_sata;amd_sata;c:\windows\system32\DRIVERS\amd_sata.sys [2012-04-11 82560]

    S0 amd_xata;amd_xata;c:\windows\system32\DRIVERS\amd_xata.sys [2012-04-11 42624]

    S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2012-08-10 56336]

    S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2012-03-14 209768]

    S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2012-03-14 148528]

    S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys [2009-06-03 22576]

    S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys [2009-06-03 20016]

    S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys [2009-06-03 60464]

    S2 {329F96B6-DF1E-4328-BFDA-39EA953C1312};Power Control [2011/12/06 20:06];c:\program files (x86)\CyberLink\PowerDVD11\Common\NavFilter\000.fcl [2011-04-12 09:16 148976]

    S2 AdobeActiveFileMonitor7.0;Adobe Active File Monitor V7;c:\program files (x86)\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe [2008-09-16 169312]

    S2 AdvancedSystemCareService5;Advanced SystemCare Service 5;c:\program files (x86)\IObit\Advanced SystemCare 5\ASCService.exe [2012-05-26 913792]

    S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2012-09-28 239616]

    S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe [2011-01-20 76448]

    S2 CLHNServiceForPowerDVD;CLHNServiceForPowerDVD;c:\program files (x86)\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe [2011-04-20 83240]

    S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe [2010-06-22 321104]

    S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2012-03-07 913144]

    S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2012-03-14 137144]

    S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [2010-06-11 868896]

    S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe [2010-01-08 23584]

    S2 IconMan_R;IconMan_R;c:\program files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [2012-09-07 2464400]

    S2 Live Updater Service;Live Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2012-04-05 255376]

    S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2012-09-29 399432]

    S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2010-02-18 462632]

    S2 nlsX86cc;NLS Service;c:\windows\SysWOW64\NLSSRV32.EXE [2011-01-12 68928]

    S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2010-06-28 255744]

    S2 ntk_PowerDVD;ntk_PowerDVD;c:\program files (x86)\CyberLink\PowerDVD11\Kernel\DMP\ntk_PowerDVD_64.sys [2011-04-20 75248]

    S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2012-04-05 255376]

    S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [2012-05-14 96896]

    S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys [2011-01-20 28832]

    S3 k57nd60a;Broadcom NetLink Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [2012-09-04 433976]

    S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-09-29 25928]

    S3 pcouffin;VSO Software pcouffin;c:\windows\system32\Drivers\pcouffin.sys [2011-01-08 82816]

    S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2012-08-29 243712]

    S3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-09-28 53760]

    S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [2012-08-28 58536]

    .

    .

    Inhoud van de 'Gedeelde Taken' map

    .

    2012-12-28 c:\windows\Tasks\Adobe Flash Player Updater.job

    - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-11 13:11]

    .

    2012-12-28 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

    - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-03 23:07]

    .

    2012-12-28 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

    - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-03 23:07]

    .

    2012-12-28 c:\windows\Tasks\Updater.job

    - c:\programdata\WombatUpdater\WombatUpdater.exe [2010-12-30 09:26]

    .

    .

    --------- X64 Entries -----------

    .

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]

    @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"

    [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]

    2010-05-27 02:42 137584 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x64\PSDProtect.dll

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2012-03-07 4081008]

    "AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2011-01-20 615584]

    "AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2011-01-20 379552]

    "AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-09-20 444904]

    .

    ------- Bijkomende Scan -------

    .

    uStart Page = hxxp://www.nu.nl/

    mWindow Title = Microsoft Internet Explorer

    mLocal Page = c:\windows\SysWOW64\blank.htm

    IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200

    IE: Download with PodWorks Platinum - c:\program files (x86)\ImTOO\PodWorks Platinum\upod_link.HTM

    IE: E&xporteren naar Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000

    TCP: DhcpNameServer = 192.168.1.1 188.142.0.6 188.142.0.22

    .

    - - - - ORPHANS VERWIJDERD - - - -

    .

    Toolbar-Locked - (no file)

    WebBrowser-{D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0} - (no file)

    WebBrowser-{30F9B915-B755-4826-820B-08FBA6BD249D} - (no file)

    WebBrowser-{1392B8D2-5C05-419F-A8F6-B9F15A596612} - (no file)

    ShellIconOverlayIdentifiers-{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} - (no file)

    ShellIconOverlayIdentifiers-{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} - (no file)

    ShellIconOverlayIdentifiers-{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} - (no file)

    ShellIconOverlayIdentifiers-{FB314EDC-A251-47B7-93E1-CDD82E34AF8B} - (no file)

    .

    .

    .

    [HKEY_LOCAL_MACHINE\system\ControlSet001\services\{329F96B6-DF1E-4328-BFDA-39EA953C1312}]

    "ImagePath"="\??\c:\program files (x86)\CyberLink\PowerDVD11\Common\NavFilter\000.fcl"

    .

    --------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.032\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.032"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ani\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.ani"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bay\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.bay"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bmp\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="PhotoViewer.FileAssoc.Bitmap"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bw\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.bw"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cr2\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="Google.PhotoViewer.3.0"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.crw\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="Google.PhotoViewer.3.0"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cs1\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.cs1"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cur\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.cur"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcr\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="Google.PhotoViewer.3.0"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcx\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.dcx"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dib\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.dib"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djv\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.djv"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djvu\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.djvu"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dng\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="Google.PhotoViewer.3.0"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.emf\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.emf"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.erf\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.erf"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fff\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.fff"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fpx\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.fpx"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gif\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="PhotoViewer.FileAssoc.Gif"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icl\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.icl"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icn\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.icn"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ico\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.ico"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iff\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="Winamp.File.iff"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ilbm\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.ilbm"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.int\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.int"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.inta\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.inta"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iw4\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.iw4"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2c\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.j2c"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2k\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.j2k"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jfif\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.jfif"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jif\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.jif"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jp2\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.jp2"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpc\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.jpc"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpe\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="Google.PhotoViewer.3.0"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpeg\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="Google.PhotoViewer.3.0"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.jpg"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpk\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.jpk"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpx\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.jpx"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lbm\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.lbm"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mos\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.mos"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mrw\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="Google.PhotoViewer.3.0"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nef\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="Google.PhotoViewer.3.0"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.orf\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="Google.PhotoViewer.3.0"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbm\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.pbm"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcd\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.pcd"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pct\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.pct"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcx\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.pcx"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pef\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="Google.PhotoViewer.3.0"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pgm\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.pgm"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pic\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.pic"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pict\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.pict"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pix\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.pix"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="PhotoViewer.FileAssoc.Png"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppm\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.ppm"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psd\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.psd"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psp\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.psp"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raf\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="Google.PhotoViewer.3.0"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ras\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.ras"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raw\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="Winamp.File.raw"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgb\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.rgb"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgba\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.rgba"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rle\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.rle"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rsb\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.rsb"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sgi\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.sgi"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sr2\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="Google.PhotoViewer.3.0"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.srf\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="Google.PhotoViewer.3.0"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tga\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.tga"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.thm\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.thm"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tif\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="PhotoViewer.FileAssoc.Tiff"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tiff\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="PhotoViewer.FileAssoc.Tiff"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttc\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.ttc"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttf\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.ttf"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbm\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.wbm"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbmp\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.wbmp"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmf\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.wmf"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xbm\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.xbm"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xif\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.xif"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xpm\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.xpm"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

    @Denied: (A 2) (Everyone)

    @="FlashBroker"

    "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_135_ActiveX.exe,-101"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

    "Enabled"=dword:00000001

    .

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

    @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_135_ActiveX.exe"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

    @Denied: (A 2) (Everyone)

    @="IFlashBroker5"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

    @="{00020424-0000-0000-C000-000000000046}"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

    "Version"="1.0"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

    @Denied: (A 2) (Everyone)

    @="FlashBroker"

    "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_135_ActiveX.exe,-101"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

    "Enabled"=dword:00000001

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_135_ActiveX.exe"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

    @Denied: (A 2) (Everyone)

    @="Shockwave Flash Object"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_135.ocx"

    "ThreadingModel"="Apartment"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

    @="0"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

    @="ShockwaveFlash.ShockwaveFlash.11"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_135.ocx, 1"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

    @="1.0"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

    @="ShockwaveFlash.ShockwaveFlash"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

    @Denied: (A 2) (Everyone)

    @="Macromedia Flash Factory Object"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_135.ocx"

    "ThreadingModel"="Apartment"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

    @="FlashFactory.FlashFactory.1"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_135.ocx, 1"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

    @="1.0"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

    @="FlashFactory.FlashFactory"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

    @Denied: (A 2) (Everyone)

    @="IFlashBroker5"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

    @="{00020424-0000-0000-C000-000000000046}"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

    "Version"="1.0"

    .

    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

    @Denied: (Full) (Everyone)

    .

    ------------------------ Andere Aktieve Processen ------------------------

    .

    c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

    c:\program files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe

    c:\windows\SysWOW64\IoctlSvc.exe

    .

    **************************************************************************

    .

    Voltooingstijd: 2012-12-28 20:29:20 - machine werd herstart

    ComboFix-quarantined-files.txt 2012-12-28 19:29

    ComboFix2.txt 2012-12-28 11:39

    .

    Pre-Run: 81.292.201.984 bytes beschikbaar

    Post-Run: 80.776.126.464 bytes beschikbaar

    .

    - - End Of File - - 7F86D362BDC5889CE95959A0B6813F31

  2. hoi,

    probleem lijkt opgelost, dankjewel.

    Hier is de log file:

    ComboFix 12-12-28.01 - Acer 28-12-2012 12:12:57.1.3 - x64

    Microsoft Windows 7 Home Premium 6.1.7601.1.1252.31.1043.18.4091.2464 [GMT 1:00]

    Gestart vanuit: c:\users\Acer\Desktop\ComboFix.exe

    AV: ESET NOD32 Antivirus 5.2 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}

    SP: ESET NOD32 Antivirus 5.2 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}

    SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    .

    .

    (((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    c:\program files (x86)\WinPCap

    c:\program files (x86)\WinPCap\install.log

    c:\program files (x86)\WinPCap\rpcapd.exe

    c:\programdata\1349546409.bdinstall.bin

    c:\programdata\7510b656b7a215785982239197361ace_c

    c:\programdata\QuestScan

    c:\programdata\Windows

    c:\programdata\windows\lmbd.dll

    c:\programdata\windows\msxx.dat

    c:\programdata\windows\vvve.dat

    c:\programdata\windows\wjdj.dat

    c:\windows\IsUn0413.exe

    c:\windows\SysWow64\Packet.dll

    c:\windows\SysWow64\pthreadVC.dll

    c:\windows\SysWow64\URTTemp

    c:\windows\SysWow64\URTTemp\regtlib.exe

    c:\windows\SysWow64\wpcap.dll

    .

    .

    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    -------\Legacy_NPF

    -------\Service_NPF

    .

    .

    (((((((((((((((((((( Bestanden Gemaakt van 2012-11-28 to 2012-12-28 ))))))))))))))))))))))))))))))

    .

    .

    2012-12-28 11:28 . 2012-12-28 11:28 -------- d-----w- c:\users\Default\AppData\Local\temp

    2012-12-27 20:10 . 2012-12-27 20:10 -------- d-----w- c:\users\Acer\Nieuwe map

    2012-12-27 16:21 . 2012-12-27 16:21 388096 ----a-r- c:\users\Acer\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

    2012-12-27 16:21 . 2012-12-27 16:21 -------- d-----w- c:\program files (x86)\Trend Micro

    2012-12-27 11:16 . 2012-08-21 12:01 33240 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys

    2012-12-27 11:16 . 2012-12-27 11:16 -------- d-----w- c:\program files\iPod

    2012-12-27 11:16 . 2012-12-27 11:16 -------- d-----w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69

    2012-12-27 11:16 . 2012-12-27 11:16 -------- d-----w- c:\program files\iTunes

    2012-12-27 11:16 . 2012-12-27 11:16 -------- d-----w- c:\program files (x86)\iTunes

    2012-12-24 13:56 . 2012-12-24 13:56 -------- d-----w- c:\program files (x86)\Qualcomm Atheros

    2012-12-24 13:55 . 2012-11-22 19:51 3831808 ----a-w- c:\windows\system32\drivers\athrx.sys

    2012-12-24 13:55 . 2012-11-22 19:51 3831808 ------w- c:\windows\system32\athrx.sys

    2012-12-24 13:55 . 2012-12-24 13:56 -------- d-----w- c:\programdata\Qualcomm Atheros

    2012-12-24 13:54 . 2012-08-29 16:48 243712 ----a-w- c:\windows\system32\drivers\RtsUStor.sys

    2012-12-24 13:54 . 2011-11-10 15:54 9882112 ----a-w- c:\windows\SysWow64\RtsUStoricon.dll

    2012-12-24 13:50 . 2012-12-24 13:50 -------- d-----w- c:\program files\Broadcom

    2012-12-24 13:49 . 2012-12-24 13:49 -------- d-----w- c:\windows\Dell

    2012-12-24 13:42 . 2012-08-28 12:27 58536 ----a-w- c:\windows\system32\drivers\usbfilter.sys

    2012-12-24 08:16 . 2012-12-24 08:16 -------- d-----w- c:\program files (x86)\VS Revo Group

    2012-12-22 17:02 . 2012-12-22 17:02 -------- d-----w- C:\test

    2012-12-21 08:21 . 2012-12-16 17:11 46080 ----a-w- c:\windows\system32\atmlib.dll

    2012-12-21 08:21 . 2012-12-16 14:13 34304 ----a-w- c:\windows\SysWow64\atmlib.dll

    2012-12-21 08:21 . 2012-12-16 14:45 367616 ----a-w- c:\windows\system32\atmfd.dll

    2012-12-21 08:21 . 2012-12-16 14:13 295424 ----a-w- c:\windows\SysWow64\atmfd.dll

    2012-12-14 22:44 . 2012-12-14 22:44 -------- d-----w- c:\windows\Migration

    2012-12-13 19:04 . 2012-12-13 19:40 -------- d-----w- c:\users\Acer\AppData\Roaming\Ylokih

    2012-12-13 19:04 . 2012-12-13 19:05 -------- d-----w- c:\users\Acer\AppData\Roaming\Paola

    2012-12-12 22:33 . 2012-11-14 06:06 499200 ----a-w- c:\program files\Internet Explorer\jsdbgui.dll

    2012-12-12 22:33 . 2012-11-14 02:01 678912 ----a-w- c:\program files (x86)\Internet Explorer\iedvtool.dll

    2012-12-12 22:33 . 2012-11-14 02:00 387584 ----a-w- c:\program files (x86)\Internet Explorer\jsdbgui.dll

    2012-12-12 22:33 . 2012-11-14 06:06 887296 ----a-w- c:\program files\Internet Explorer\iedvtool.dll

    2012-12-12 22:33 . 2012-11-14 07:06 17811968 ----a-w- c:\windows\system32\mshtml.dll

    2012-12-12 22:33 . 2012-11-14 06:32 10925568 ----a-w- c:\windows\system32\ieframe.dll

    2012-12-12 06:51 . 2012-11-22 03:26 3149824 ----a-w- c:\windows\system32\win32k.sys

    2012-12-12 06:51 . 2012-11-09 05:45 2048 ----a-w- c:\windows\system32\tzres.dll

    2012-12-12 06:51 . 2012-11-09 04:42 2048 ----a-w- c:\windows\SysWow64\tzres.dll

    2012-12-12 06:49 . 2012-11-02 05:59 478208 ----a-w- c:\windows\system32\dpnet.dll

    2012-12-12 06:49 . 2012-11-02 05:11 376832 ----a-w- c:\windows\SysWow64\dpnet.dll

    2012-12-11 19:52 . 2012-12-11 19:54 -------- d-----w- c:\users\Acer\AppData\Roaming\Xireka

    2012-12-11 19:52 . 2012-12-11 19:52 -------- d-----w- c:\users\Acer\AppData\Roaming\Newane

    2012-12-11 19:52 . 2012-12-13 19:40 -------- d-----w- c:\users\Acer\AppData\Roaming\tor

    2012-11-29 19:55 . 2012-11-29 19:55 -------- d-----w- c:\program files (x86)\Common Files\Atheros

    2012-11-29 19:54 . 2012-11-29 19:55 -------- d-----w- c:\program files (x86)\Bluetooth Suite

    .

    .

    .

    ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    2012-12-12 22:37 . 2011-01-07 17:58 67413224 ----a-w- c:\windows\system32\MRT.exe

    2012-12-12 13:11 . 2012-05-11 18:59 697272 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe

    2012-12-12 13:11 . 2011-05-20 04:02 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl

    2012-11-30 14:54 . 2012-11-30 14:54 561664 ----a-w- c:\windows\apppatch\AcLayers.dll

    2012-11-30 14:54 . 2012-11-30 14:54 350208 ----a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll

    2012-11-30 14:54 . 2012-11-30 14:54 135168 ----a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll

    2012-11-17 15:01 . 2012-11-17 15:01 87040 ----a-w- c:\windows\system32\drivers\WUDFPf.sys

    2012-11-17 15:01 . 2012-11-17 15:01 84992 ----a-w- c:\windows\system32\WUDFSvc.dll

    2012-11-17 15:01 . 2012-11-17 15:01 744448 ----a-w- c:\windows\system32\WUDFx.dll

    2012-11-17 15:01 . 2012-11-17 15:01 45056 ----a-w- c:\windows\system32\WUDFCoinstaller.dll

    2012-11-17 15:01 . 2012-11-17 15:01 229888 ----a-w- c:\windows\system32\WUDFHost.exe

    2012-11-17 15:01 . 2012-11-17 15:01 198656 ----a-w- c:\windows\system32\drivers\WUDFRd.sys

    2012-11-17 15:01 . 2012-11-17 15:01 194048 ----a-w- c:\windows\system32\WUDFPlatform.dll

    2012-11-17 15:00 . 2012-11-17 15:00 9728 ----a-w- c:\windows\system32\Wdfres.dll

    2012-11-17 15:00 . 2012-11-17 15:00 785512 ----a-w- c:\windows\system32\drivers\Wdf01000.sys

    2012-11-17 15:00 . 2012-11-17 15:00 54376 ----a-w- c:\windows\system32\drivers\WdfLdr.sys

    2012-11-17 14:59 . 2012-11-17 14:59 55296 ----a-w- c:\windows\system32\dhcpcsvc6.dll

    2012-11-17 14:59 . 2012-11-17 14:59 44032 ----a-w- c:\windows\SysWow64\dhcpcsvc6.dll

    2012-11-17 14:59 . 2012-11-17 14:59 226816 ----a-w- c:\windows\system32\dhcpcore6.dll

    2012-11-17 14:59 . 2012-11-17 14:59 193536 ----a-w- c:\windows\SysWow64\dhcpcore6.dll

    2012-11-17 14:58 . 2012-11-17 14:58 70656 ----a-w- c:\windows\system32\nlaapi.dll

    2012-11-17 14:58 . 2012-11-17 14:58 569344 ----a-w- c:\windows\system32\iphlpsvc.dll

    2012-11-17 14:58 . 2012-11-17 14:58 45568 ----a-w- c:\windows\system32\drivers\tcpipreg.sys

    2012-11-17 14:58 . 2012-11-17 14:58 303104 ----a-w- c:\windows\system32\nlasvc.dll

    2012-11-17 14:58 . 2012-11-17 14:58 216576 ----a-w- c:\windows\system32\ncsi.dll

    2012-11-17 14:58 . 2012-11-17 14:58 1914248 ----a-w- c:\windows\system32\drivers\tcpip.sys

    2012-11-17 14:58 . 2012-11-17 14:58 52224 ----a-w- c:\windows\SysWow64\nlaapi.dll

    2012-11-17 14:58 . 2012-11-17 14:58 246272 ----a-w- c:\windows\system32\netcorehc.dll

    2012-11-17 14:58 . 2012-11-17 14:58 18944 ----a-w- c:\windows\SysWow64\netevent.dll

    2012-11-17 14:58 . 2012-11-17 14:58 18944 ----a-w- c:\windows\system32\netevent.dll

    2012-11-17 14:58 . 2012-11-17 14:58 175104 ----a-w- c:\windows\SysWow64\netcorehc.dll

    2012-11-17 14:58 . 2012-11-17 14:58 156672 ----a-w- c:\windows\SysWow64\ncsi.dll

    2012-11-17 14:57 . 2012-11-17 14:57 62976 ----a-w- c:\windows\system32\TSWbPrxy.exe

    2012-11-17 14:57 . 2012-11-17 14:57 54272 ----a-w- c:\windows\system32\MsRdpWebAccess.dll

    2012-11-17 14:57 . 2012-11-17 14:57 37376 ----a-w- c:\windows\SysWow64\tsgqec.dll

    2012-11-17 14:57 . 2012-11-17 14:57 3174912 ----a-w- c:\windows\system32\rdpcorets.dll

    2012-11-17 14:57 . 2012-11-17 14:57 269312 ----a-w- c:\windows\SysWow64\aaclient.dll

    2012-11-17 14:57 . 2012-11-17 14:57 243200 ----a-w- c:\windows\system32\rdpudd.dll

    2012-11-17 14:57 . 2012-11-17 14:57 228864 ----a-w- c:\windows\system32\rdpendp_winip.dll

    2012-11-17 14:57 . 2012-11-17 14:57 19456 ----a-w- c:\windows\system32\drivers\rdpvideominiport.sys

    2012-11-17 14:57 . 2012-11-17 14:57 192000 ----a-w- c:\windows\SysWow64\rdpendp_winip.dll

    2012-11-17 14:57 . 2012-11-17 14:57 15360 ----a-w- c:\windows\system32\RdpGroupPolicyExtension.dll

    2012-11-17 14:57 . 2012-11-17 14:57 1123840 ----a-w- c:\windows\system32\mstsc.exe

    2012-11-17 14:57 . 2012-11-17 14:57 1048064 ----a-w- c:\windows\SysWow64\mstsc.exe

    2012-11-17 14:57 . 2012-11-17 14:57 4916224 ----a-w- c:\windows\SysWow64\mstscax.dll

    2012-11-17 14:57 . 2012-11-17 14:57 57856 ----a-w- c:\windows\system32\drivers\TsUsbFlt.sys

    2012-11-17 14:57 . 2012-11-17 14:57 5773824 ----a-w- c:\windows\system32\mstscax.dll

    2012-11-17 14:57 . 2012-11-17 14:57 46592 ----a-w- c:\windows\SysWow64\MsRdpWebAccess.dll

    2012-11-17 14:57 . 2012-11-17 14:57 44032 ----a-w- c:\windows\system32\tsgqec.dll

    2012-11-17 14:57 . 2012-11-17 14:57 43520 ----a-w- c:\windows\system32\TsUsbGDCoInstaller.dll

    2012-11-17 14:57 . 2012-11-17 14:57 384000 ----a-w- c:\windows\system32\wksprt.exe

    2012-11-17 14:57 . 2012-11-17 14:57 322560 ----a-w- c:\windows\system32\aaclient.dll

    2012-11-17 14:57 . 2012-11-17 14:57 18432 ----a-w- c:\windows\system32\wksprtPS.dll

    2012-11-17 14:57 . 2012-11-17 14:57 16896 ----a-w- c:\windows\SysWow64\wksprtPS.dll

    2012-11-17 14:57 . 2012-11-17 14:57 13312 ----a-w- c:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll

    2012-11-17 14:57 . 2012-11-17 14:57 13312 ----a-w- c:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe

    2012-11-17 14:57 . 2012-11-17 14:57 96768 ----a-w- c:\windows\SysWow64\sspicli.dll

    2012-11-17 14:57 . 2012-11-17 14:57 458712 ----a-w- c:\windows\system32\drivers\cng.sys

    2012-11-17 14:57 . 2012-11-17 14:57 340992 ----a-w- c:\windows\system32\schannel.dll

    2012-11-17 14:57 . 2012-11-17 14:57 307200 ----a-w- c:\windows\system32\ncrypt.dll

    2012-11-17 14:57 . 2012-11-17 14:57 247808 ----a-w- c:\windows\SysWow64\schannel.dll

    2012-11-17 14:57 . 2012-11-17 14:57 22016 ----a-w- c:\windows\SysWow64\secur32.dll

    2012-11-17 14:57 . 2012-11-17 14:57 154480 ----a-w- c:\windows\system32\drivers\ksecpkg.sys

    2012-11-17 14:57 . 2012-11-17 14:57 1448448 ----a-w- c:\windows\system32\lsasrv.dll

    2012-11-17 14:57 . 2012-11-17 14:57 220160 ----a-w- c:\windows\SysWow64\ncrypt.dll

    2012-11-17 14:53 . 2012-11-17 14:53 1659760 ----a-w- c:\windows\system32\drivers\ntfs.sys

    2012-11-17 14:52 . 2012-11-17 14:52 245760 ----a-w- c:\windows\system32\OxpsConverter.exe

    2012-11-08 17:24 . 2012-12-28 08:04 9125352 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{D6A18B8A-003C-4E72-BA98-0ECBF02D5F20}\mpengine.dll

    2012-11-07 20:10 . 2012-11-07 20:11 108008 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll

    2012-11-07 20:10 . 2012-11-07 20:11 289768 ----a-w- c:\windows\system32\javaws.exe

    2012-11-07 20:10 . 2012-11-07 20:11 189416 ----a-w- c:\windows\system32\javaw.exe

    2012-11-07 20:10 . 2012-11-07 20:11 916456 ----a-w- c:\windows\system32\deployJava1.dll

    2012-11-07 20:10 . 2012-11-07 20:11 1034216 ----a-w- c:\windows\system32\npDeployJava1.dll

    2012-11-07 20:10 . 2012-11-07 20:11 188904 ----a-w- c:\windows\system32\java.exe

    2012-10-04 16:40 . 2012-12-12 06:50 44032 ----a-w- c:\windows\apppatch\acwow64.dll

    2012-09-29 18:54 . 2012-08-05 13:59 25928 ----a-w- c:\windows\system32\drivers\mbam.sys

    .

    .

    ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

    REGEDIT4

    .

    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]

    @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"

    [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]

    2010-05-27 02:40 120176 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x86\PSDProtect.dll

    .

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "IncrediMail"="c:\program files (x86)\IncrediMail\bin\IncMail.exe" [2012-08-14 366576]

    "Advanced SystemCare 5"="c:\program files (x86)\IObit\Advanced SystemCare 5\ASCTray.exe" [2012-05-28 288128]

    "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]

    "MobileDocuments"="c:\program files (x86)\Common Files\Apple\Internet Services\ubd.exe" [2012-02-23 59240]

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

    "GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]

    "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2012-09-28 642728]

    "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-11 919008]

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

    "ConsentPromptBehaviorAdmin"= 5 (0x5)

    "ConsentPromptBehaviorUser"= 0 (0x0)

    "EnableUIADesktopToggle"= 0 (0x0)

    "EnableLinkedConnections"= 1 (0x1)

    .

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

    @=""

    .

    R0 sptd;sptd; [x]

    R1 ewtsouyq;ewtsouyq;c:\windows\system32\drivers\ewtsouyq.sys [x]

    R2 AODDriver4.01;AODDriver4.01; [x]

    R2 BrcmMgmtAgent;Broadcom Management Agent;c:\program files\Broadcom\MgmtAgent\BrcmMgmtAgent.exe [2012-08-02 204288]

    R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]

    R2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-09-29 676936]

    R3 amdiox64;AMD IO Driver;c:\windows\system32\DRIVERS\amdiox64.sys [2010-02-18 46136]

    R3 AVFSFilter;AVFSFilter;c:\windows\system32\DRIVERS\avfsfilter.sys [x]

    R3 cpuz134;cpuz134;c:\users\Acer\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [x]

    R3 esgiguard;esgiguard;c:\program files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys [2011-03-02 13088]

    R3 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [2010-05-27 305520]

    R3 PCDSRVC{11725DDC-8233B918-06020101}_0;PCDSRVC{11725DDC-8233B918-06020101}_0 - PCDR Kernel Mode Service Helper Driver; [x]

    R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-11-17 19456]

    R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-11-17 57856]

    R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-09-28 53760]

    R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [2011-01-05 1255736]

    R4 AdobeActiveFileMonitor10.0;Adobe Active File Monitor V10;c:\program files (x86)\Adobe\Elements 10 Organizer\PhotoshopElementsFileAgent.exe [2011-09-14 169624]

    R4 AdobeActiveFileMonitor11.0;Adobe Active File Monitor V11;c:\program files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [2012-09-23 171600]

    R4 CyberLink PowerDVD 11.0 Monitor Service;CyberLink PowerDVD 11.0 Monitor Service;c:\program files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe [2011-03-31 70952]

    R4 CyberLink PowerDVD 11.0 Service;CyberLink PowerDVD 11.0 Service;c:\program files (x86)\CyberLink\PowerDVD11\Common\MediaServer\CLMSServer.exe [2011-03-31 312616]

    R4 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]

    S0 amd_sata;amd_sata;c:\windows\system32\DRIVERS\amd_sata.sys [2012-04-11 82560]

    S0 amd_xata;amd_xata;c:\windows\system32\DRIVERS\amd_xata.sys [2012-04-11 42624]

    S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2012-08-10 56336]

    S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2012-03-14 209768]

    S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2012-03-14 148528]

    S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys [2009-06-03 22576]

    S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys [2009-06-03 20016]

    S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys [2009-06-03 60464]

    S2 {329F96B6-DF1E-4328-BFDA-39EA953C1312};Power Control [2011/12/06 20:06];c:\program files (x86)\CyberLink\PowerDVD11\Common\NavFilter\000.fcl [2011-04-12 09:16 148976]

    S2 AdobeActiveFileMonitor7.0;Adobe Active File Monitor V7;c:\program files (x86)\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe [2008-09-16 169312]

    S2 AdvancedSystemCareService5;Advanced SystemCare Service 5;c:\program files (x86)\IObit\Advanced SystemCare 5\ASCService.exe [2012-05-26 913792]

    S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2012-09-28 239616]

    S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe [2011-01-20 76448]

    S2 CLHNServiceForPowerDVD;CLHNServiceForPowerDVD;c:\program files (x86)\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe [2011-04-20 83240]

    S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe [2010-06-22 321104]

    S2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2012-03-07 913144]

    S2 epfwwfpr;epfwwfpr;c:\windows\system32\DRIVERS\epfwwfpr.sys [2012-03-14 137144]

    S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [2010-06-11 868896]

    S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe [2010-01-08 23584]

    S2 IconMan_R;IconMan_R;c:\program files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [2012-09-07 2464400]

    S2 Live Updater Service;Live Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2012-04-05 255376]

    S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2012-09-29 399432]

    S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2010-02-18 462632]

    S2 nlsX86cc;NLS Service;c:\windows\SysWOW64\NLSSRV32.EXE [2011-01-12 68928]

    S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2010-06-28 255744]

    S2 ntk_PowerDVD;ntk_PowerDVD;c:\program files (x86)\CyberLink\PowerDVD11\Kernel\DMP\ntk_PowerDVD_64.sys [2011-04-20 75248]

    S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe [2012-04-05 255376]

    S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [2012-05-14 96896]

    S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys [2011-01-20 28832]

    S3 k57nd60a;Broadcom NetLink Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [2012-09-04 433976]

    S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-09-29 25928]

    S3 pcouffin;VSO Software pcouffin;c:\windows\system32\Drivers\pcouffin.sys [2011-01-08 82816]

    S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys [2012-08-29 243712]

    S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [2012-08-28 58536]

    .

    .

    Inhoud van de 'Gedeelde Taken' map

    .

    2012-12-28 c:\windows\Tasks\Adobe Flash Player Updater.job

    - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-11 13:11]

    .

    2012-12-27 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2988280475-2932619533-408335912-1001Core.job

    - c:\users\Acer\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-11-06 15:39]

    .

    2012-12-28 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2988280475-2932619533-408335912-1001UA.job

    - c:\users\Acer\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-11-06 15:39]

    .

    2012-12-28 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

    - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-03 23:07]

    .

    2012-12-28 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

    - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-03 23:07]

    .

    2012-12-28 c:\windows\Tasks\Updater.job

    - c:\programdata\WombatUpdater\WombatUpdater.exe [2010-12-30 09:26]

    .

    .

    --------- X64 Entries -----------

    .

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]

    @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"

    [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]

    2010-05-27 02:42 137584 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x64\PSDProtect.dll

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2012-03-07 4081008]

    "AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\BtvStack.exe" [2011-01-20 615584]

    "AthBtTray"="c:\program files (x86)\Bluetooth Suite\AthBtTray.exe" [2011-01-20 379552]

    "AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-09-20 444904]

    .

    ------- Bijkomende Scan -------

    .

    uStart Page = hxxp://www.nu.nl/

    mWindow Title = Microsoft Internet Explorer

    mLocal Page = c:\windows\SysWOW64\blank.htm

    IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200

    IE: Download with PodWorks Platinum - c:\program files (x86)\ImTOO\PodWorks Platinum\upod_link.HTM

    IE: E&xporteren naar Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000

    TCP: DhcpNameServer = 192.168.1.1 188.142.0.6 188.142.0.22

    .

    - - - - ORPHANS VERWIJDERD - - - -

    .

    Toolbar-Locked - (no file)

    Toolbar-Locked - (no file)

    WebBrowser-{D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0} - (no file)

    WebBrowser-{30F9B915-B755-4826-820B-08FBA6BD249D} - (no file)

    WebBrowser-{1392B8D2-5C05-419F-A8F6-B9F15A596612} - (no file)

    ShellIconOverlayIdentifiers-{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} - (no file)

    ShellIconOverlayIdentifiers-{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} - (no file)

    ShellIconOverlayIdentifiers-{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} - (no file)

    ShellIconOverlayIdentifiers-{FB314EDC-A251-47B7-93E1-CDD82E34AF8B} - (no file)

    AddRemove-Easy-WebPrint - c:\windows\IsUn0413.exe

    .

    .

    .

    [HKEY_LOCAL_MACHINE\system\ControlSet001\services\{329F96B6-DF1E-4328-BFDA-39EA953C1312}]

    "ImagePath"="\??\c:\program files (x86)\CyberLink\PowerDVD11\Common\NavFilter\000.fcl"

    .

    --------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.032\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.032"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ani\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.ani"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bay\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.bay"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bmp\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="PhotoViewer.FileAssoc.Bitmap"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bw\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.bw"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cr2\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="Google.PhotoViewer.3.0"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.crw\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="Google.PhotoViewer.3.0"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cs1\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.cs1"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cur\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.cur"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcr\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="Google.PhotoViewer.3.0"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcx\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.dcx"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dib\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.dib"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djv\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.djv"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.djvu\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.djvu"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dng\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="Google.PhotoViewer.3.0"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.emf\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.emf"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.erf\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.erf"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fff\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.fff"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fpx\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.fpx"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gif\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="PhotoViewer.FileAssoc.Gif"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icl\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.icl"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.icn\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.icn"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ico\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.ico"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iff\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="Winamp.File.iff"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ilbm\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.ilbm"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.int\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.int"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.inta\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.inta"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iw4\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.iw4"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2c\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.j2c"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.j2k\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.j2k"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jfif\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.jfif"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jif\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.jif"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jp2\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.jp2"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpc\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.jpc"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpe\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="Google.PhotoViewer.3.0"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpeg\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="Google.PhotoViewer.3.0"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.jpg"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpk\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.jpk"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpx\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.jpx"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lbm\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.lbm"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mos\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.mos"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mrw\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="Google.PhotoViewer.3.0"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nef\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="Google.PhotoViewer.3.0"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.orf\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="Google.PhotoViewer.3.0"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbm\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.pbm"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcd\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.pcd"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pct\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.pct"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcx\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.pcx"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pef\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="Google.PhotoViewer.3.0"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pgm\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.pgm"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pic\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.pic"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pict\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.pict"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pix\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.pix"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="PhotoViewer.FileAssoc.Png"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppm\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.ppm"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psd\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.psd"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psp\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.psp"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raf\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="Google.PhotoViewer.3.0"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ras\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.ras"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raw\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="Winamp.File.raw"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgb\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.rgb"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rgba\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.rgba"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rle\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.rle"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rsb\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.rsb"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sgi\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.sgi"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sr2\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="Google.PhotoViewer.3.0"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.srf\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="Google.PhotoViewer.3.0"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tga\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.tga"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.thm\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.thm"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tif\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="PhotoViewer.FileAssoc.Tiff"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tiff\UserChoice]

    @Denied: (2) (S-1-5-21-2988280475-2932619533-408335912-1001)

    @Denied: (2) (LocalSystem)

    "Progid"="PhotoViewer.FileAssoc.Tiff"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttc\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.ttc"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttf\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.ttf"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbm\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.wbm"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbmp\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.wbmp"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmf\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.wmf"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xbm\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.xbm"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xif\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.xif"

    .

    [HKEY_USERS\S-1-5-21-2988280475-2932619533-408335912-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xpm\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="ACDSee 9.0.xpm"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

    @Denied: (A 2) (Everyone)

    @="FlashBroker"

    "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_135_ActiveX.exe,-101"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

    "Enabled"=dword:00000001

    .

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

    @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_135_ActiveX.exe"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

    @Denied: (A 2) (Everyone)

    @="IFlashBroker5"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

    @="{00020424-0000-0000-C000-000000000046}"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

    "Version"="1.0"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

    @Denied: (A 2) (Everyone)

    @="FlashBroker"

    "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_135_ActiveX.exe,-101"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

    "Enabled"=dword:00000001

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_135_ActiveX.exe"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

    @Denied: (A 2) (Everyone)

    @="Shockwave Flash Object"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_135.ocx"

    "ThreadingModel"="Apartment"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

    @="0"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

    @="ShockwaveFlash.ShockwaveFlash.11"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_135.ocx, 1"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

    @="1.0"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

    @="ShockwaveFlash.ShockwaveFlash"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

    @Denied: (A 2) (Everyone)

    @="Macromedia Flash Factory Object"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_135.ocx"

    "ThreadingModel"="Apartment"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

    @="FlashFactory.FlashFactory.1"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_135.ocx, 1"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

    @="1.0"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

    @="FlashFactory.FlashFactory"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

    @Denied: (A 2) (Everyone)

    @="IFlashBroker5"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

    @="{00020424-0000-0000-C000-000000000046}"

    .

    [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

    "Version"="1.0"

    .

    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]

    @Denied: (Full) (Everyone)

    .

    ------------------------ Andere Aktieve Processen ------------------------

    .

    c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

    c:\program files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe

    c:\windows\SysWOW64\IoctlSvc.exe

    .

    **************************************************************************

    .

    Voltooingstijd: 2012-12-28 12:39:54 - machine werd herstart

    ComboFix-quarantined-files.txt 2012-12-28 11:39

    .

    Pre-Run: 78.101.385.216 bytes beschikbaar

    Post-Run: 77.282.107.392 bytes beschikbaar

    .

    - - End Of File - - 8C9A8EE5D16747CE6ED1E65B1F177452

  3. Bedankt voor de snelle reactie.

    Helaas probleem nog niet opgelost.

    Malware bytes heeft niets gevonden.

    Hieronder nieuwe scan va hijack:

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = nu.nl | Het laatste nieuws het eerst op nu.nl

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer

    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll

    O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files (x86)\Canon\Easy-WebPrint\EWPBrowseLoader.dll

    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll

    O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll

    O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

    O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll

    O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files (x86)\Canon\Easy-WebPrint\Toolband.dll

    O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll

    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

    O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"

    O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

    O4 - HKCU\..\Run: [incrediMail] C:\Program Files (x86)\IncrediMail\bin\IncMail.exe /c

    O4 - HKCU\..\Run: [Advanced SystemCare 5] "C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCTray.exe" /AutoStart

    O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

    O4 - HKCU\..\Run: [MobileDocuments] C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe

    O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

    O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

    O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

    O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

    O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200

    O8 - Extra context menu item: Download with PodWorks Platinum - C:\Program Files (x86)\ImTOO\PodWorks Platinum\upod_link.HTM

    O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000

    O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll

    O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll

    O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll

    O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll

    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL

    O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

    O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

    O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll

    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL

    O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

    O23 - Service: Adobe Active File Monitor V7 (AdobeActiveFileMonitor7.0) - Adobe Systems Incorporated - C:\Program Files (x86)\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe

    O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

    O23 - Service: Advanced SystemCare Service 5 (AdvancedSystemCareService5) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCService.exe

    O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

    O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)

    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

    O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe

    O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

    O23 - Service: Broadcom Management Agent (BrcmMgmtAgent) - Broadcom Corporation - C:\Program Files\Broadcom\MgmtAgent\BrcmMgmtAgent.exe

    O23 - Service: CLHNServiceForPowerDVD - Unknown owner - C:\Program Files (x86)\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe

    O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe

    O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

    O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe

    O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe

    O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

    O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

    O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe

    O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

    O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe

    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe

    O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

    O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Acer\Acer Updater\UpdaterService.exe

    O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

    O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

    O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

    O23 - Service: MyWinLocker Service (MWLService) - Egis Technology Inc. - C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe

    O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe

    O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe

    O23 - Service: NLS Service (nlsX86cc) - Nalpeiron Ltd. - C:\Windows\SysWOW64\NLSSRV32.EXE

    O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe

    O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe

    O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\SysWOW64\IoctlSvc.exe

    O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies, Inc. - C:\Program Files (x86)\WinPcap\rpcapd.exe

    O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

    O23 - Service: Updater Service - Acer Incorporated - C:\Program Files\Acer\Acer Updater\UpdaterService.exe

    O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

    O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

    O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

    O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

    O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

    --

  4. Ik heb sinds enige tijd last van een trojan genaamd win32 kryptik .ild, deze komt zodra ik chrome opstart.

    Ik heb via Hijackthis een scan gemaakt, wie wil helpen:

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 05:22, on 27-12-2012

    Platform: Windows 7 SP1 (WinNT 6.00.3505)

    MSIE: Internet Explorer v9.00 (9.00.8112.16457)

    Boot mode: Normal

    Running processes:

    C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe

    C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCTray.exe

    C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe

    C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe

    C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe

    C:\Program Files (x86)\iTunes\iTunesHelper.exe

    C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe

    C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe

    C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

    R3 - URLSearchHook: (no name) - {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - (no file)

    R3 - URLSearchHook: (no name) - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - (no file)

    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll

    O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files (x86)\Canon\Easy-WebPrint\EWPBrowseLoader.dll

    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll

    O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll

    O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

    O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

    O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll

    O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files (x86)\Canon\Easy-WebPrint\Toolband.dll

    O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll

    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

    O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"

    O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

    O4 - HKCU\..\Run: [incrediMail] C:\Program Files (x86)\IncrediMail\bin\IncMail.exe /c

    O4 - HKCU\..\Run: [Advanced SystemCare 5] "C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCTray.exe" /AutoStart

    O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

    O4 - HKCU\..\Run: [MobileDocuments] C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe

    O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

    O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

    O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

    O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

    O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200

    O8 - Extra context menu item: Download with PodWorks Platinum - C:\Program Files (x86)\ImTOO\PodWorks Platinum\upod_link.HTM

    O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000

    O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll

    O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll

    O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll

    O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll

    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL

    O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

    O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll

    O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

    O15 - Trusted IP range:

    O15 - ESC Trusted IP range:

    O16 - DPF: Garmin Communicator Plug-In -

    O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} -

    O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (a-squared Scanner) -

    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} -

    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll

    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL

    O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

    O23 - Service: Adobe Active File Monitor V7 (AdobeActiveFileMonitor7.0) - Adobe Systems Incorporated - C:\Program Files (x86)\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe

    O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

    O23 - Service: Advanced SystemCare Service 5 (AdvancedSystemCareService5) - IObit - C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCService.exe

    O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

    O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)

    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

    O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe

    O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

    O23 - Service: Broadcom Management Agent (BrcmMgmtAgent) - Broadcom Corporation - C:\Program Files\Broadcom\MgmtAgent\BrcmMgmtAgent.exe

    O23 - Service: CLHNServiceForPowerDVD - Unknown owner - C:\Program Files (x86)\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe

    O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe

    O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

    O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe

    O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe

    O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

    O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

    O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe

    O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

    O23 - Service: HitmanPro 3.6 Crusader (HitmanPro36Crusader) - Unknown owner - (no file)

    O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe

    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe

    O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

    O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Acer\Acer Updater\UpdaterService.exe

    O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe

    O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

    O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

    O23 - Service: MyWinLocker Service (MWLService) - Egis Technology Inc. - C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe

    O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe

    O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe

    O23 - Service: NLS Service (nlsX86cc) - Nalpeiron Ltd. - C:\Windows\SysWOW64\NLSSRV32.EXE

    O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe

    O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe

    O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\SysWOW64\IoctlSvc.exe

    O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies, Inc. - C:\Program Files (x86)\WinPcap\rpcapd.exe

    O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

    O23 - Service: Updater Service - Acer Incorporated - C:\Program Files\Acer\Acer Updater\UpdaterService.exe

    O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

    O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

    O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

    O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

    O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

×
×
  • Nieuwe aanmaken...