Star Wars

Dit is alvast het RSIT-log bestand: Logfile of random's system information tool 1.09 (written by random/random) Run by Johan at 2013-11-08 21:58:28 Microsoft Windows 7 Home Premium Service Pack 1 System drive C: has 388 GB (84%) free of 464 GB Total RAM: 5813 MB (57% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 21:58:29, on 8-11-2013 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v10.0 (10.00.9200.16720) Boot mode: Normal Running processes: C:\Users\Johan\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe C:\Program Files (x86)\Launch Manager\LManager.exe C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe C:\Program Files (x86)\AVG\AVG2014\avgui.exe C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe C:\Program Files (x86)\Launch Manager\LMworker.exe C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE C:\Program Files\trend micro\Johan.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = {searchTerms - Yahoo Search Results} R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = {searchTerms - Yahoo Search Results} R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: ViewPassword - {dd000e12-c224-49a5-899e-0b37dbd95f15} - C:\Program Files (x86)\ViewPassword\134.dll O4 - HKLM\..\Run: [suiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" O4 - HKLM\..\Run: [backupManagerTray] "C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" -h -k O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe O4 - HKLM\..\Run: [ArcadeMovieService] "C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe" O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe O4 - HKCU\..\Run: [spotify Web Helper] "C:\Users\Johan\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" O4 - HKCU\..\Run: [HP Deskjet 3050A J611 series (NET)] "C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN34I1CJ3X05WK:NW" -scfn "HP Deskjet 3050A J611 series (NET)" -AutoStart 1 O4 - HKUS\S-1-5-18\..\RunOnce: [isMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\RunOnce: [isMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'Default user') O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office12\EXCEL.EXE/3000 O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~4\Office12\REFIEBAR.DLL O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} (Bitdefender QuickScan Control) - http://quickscan.bitdefender.com/qsax/qsax.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe O23 - Service: devolo Network Service (DevoloNetworkService) - devolo AG - C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: EgisTec Ticket Service - Egis Technology Inc. - C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe O23 - Service: ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Acer\Acer Updater\UpdaterService.exe O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: NTI IScheduleSvc - NTI Corporation - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: Intel® Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: vToolbarUpdater15.2.0 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.2.0\ToolbarUpdater.exe O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 10109 bytes ======Listing Processes====== \SystemRoot\System32\smss.exe C:\PROGRA~2\AVG\AVG2014\avgrsa.exe /boot C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe /pipeName=d0b8b11f-c4c3-4a1f-aec1-790d603d6d11 /coreSdkOptions=4364 /logConfFile="C:\Windows\TEMP\855b732b-2c4b-4765-98d5-9020c142696a-1c0-oopp.tmp" /loggerName=AVG.RS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG2014\" %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 wininit.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch winlogon.exe C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" "C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe" "C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe" "C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe" "C:\Program Files (x86)\Launch Manager\dsiwmis.exe" "C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe" "C:\Program Files (x86)\Launch Manager\LMutilps32.exe" --system-level-mutex="Local\{B904A927-FE6B-48fd-8C83-6B807BED1F9C}" --enable-wmi-window C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation "C:\Program Files (x86)\Acer\Registration\GREGsvc.exe" "C:\Program Files\Acer\Acer Updater\UpdaterService.exe" "C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe" C:\Windows\system32\svchost.exe -k imgsvc "C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.2.0\ToolbarUpdater.exe" C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted "C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe" "C:\Program Files (x86)\AVG\AVG2014\avgemca.exe" "taskhost.exe" "C:\Windows\system32\Dwm.exe" C:\Windows\Explorer.EXE "C:\Windows\System32\igfxtray.exe" "C:\Windows\System32\hkcmd.exe" "C:\Windows\System32\igfxpers.exe" "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s C:\Windows\system32\igfxsrvc.exe -Embedding "C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe" "C:\Users\Johan\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" "C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN34I1CJ3X05WK:NW" -scfn "HP Deskjet 3050A J611 series (NET)" -AutoStart 1 "C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" -h -k "C:\Program Files (x86)\Launch Manager\LManager.exe" "C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe" "C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY "C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe" "C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe" "C:\Program Files (x86)\Launch Manager\LMworker.exe" C:\Windows\system32\igfxext.exe -Embedding "C:\Program Files\Synaptics\SynTP\SynTPHelper.exe" C:\Windows\system32\wbem\wmiprvse.exe C:\Windows\system32\wbem\unsecapp.exe -Embedding "C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe" C:\Windows\system32\SearchIndexer.exe /Embedding taskeng.exe {7E78888B-AD9D-474B-8F2E-8E4A0067C0CE} "C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe" "C:\Program Files\Windows Media Player\wmpnetwk.exe" C:\Windows\System32\svchost.exe -k LocalServicePeerNet "C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe" "C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\HPNetworkCommunicator.exe" C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7} "C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe" "C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe" "C:\Program Files\EgisTec IPS\PMMUpdate.exe" "C:\Program Files\EgisTec IPS\EgisUpdate.exe" "C:\Program Files\Internet Explorer\iexplore.exe" "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3740 CREDAT:267521 /prefetch:2 C:\Windows\system32\Macromed\Flash\FlashUtil64_11_9_900_117_ActiveX.exe -Embedding "C:\Windows\System32\MsSpellCheckingFacility.exe" -Embedding "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3740 CREDAT:1643839 /prefetch:2 "C:\Users\Johan\Desktop\RSITx64.exe" C:\Windows\system32\wbem\wmiprvse.exe ======Scheduled tasks folder====== C:\Windows\tasks\Adobe Flash Player Updater.job C:\Windows\tasks\ViewPassword Update.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29 529280] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29 441216] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{dd000e12-c224-49a5-899e-0b37dbd95f15}] ViewPassword - C:\Program Files (x86)\ViewPassword\134.dll [2013-11-07 137216] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-08-15 167704] "HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-08-15 392472] "Persistence"=C:\Windows\system32\igfxpers.exe [2011-08-15 416024] "SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-03-28 2723624] "RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-06-09 11860072] "Power Management"=C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [2011-08-02 1831016] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Spotify Web Helper"=C:\Users\Johan\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [2013-04-01 1104280] "HP Deskjet 3050A J611 series (NET)"=C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe [2012-10-17 2573416] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify] C:\Users\Johan\AppData\Roaming\Spotify\Spotify.exe [2013-04-01 4480920] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VDownloader] C:\Program Files\VDownloader\VDownloader.exe /silent [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Johan^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^VDownloader.lnk] C:\PROGRA~2\VDOWNL~1\VDOWNL~1.EXE /silent [] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "SuiteTray"=C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [2011-09-20 341360] "BackupManagerTray"=C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [2011-04-24 297280] "LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2011-07-01 1103440] "ArcadeMovieService"=C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe [2011-08-26 177448] "AVG_UI"=C:\Program Files (x86)\AVG\AVG2014\avgui.exe [2013-10-07 4908592] "Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576] "HP Software Update"=C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [2011-10-28 49208] ""= [] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui] C:\Windows\system32\igfxdev.dll [2011-08-09 390144] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro37.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=5 "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDrives"=0 "NoDriveTypeAutoRun"=145 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDrives"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVYU"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.i420"=iyuv_32.dll "VIDC.YVU9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "MSVideo8"=VfWWDM32.dll "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 ======List of files/folders created in the last 1 month====== 2013-11-08 21:58:28 ----D---- C:\rsit 2013-11-08 21:58:28 ----D---- C:\Program Files\trend micro 2013-11-08 19:21:28 ----D---- C:\ProgramData\HitmanPro 2013-11-08 18:53:41 ----SHD---- C:\$RECYCLE.BIN 2013-11-08 18:53:37 ----A---- C:\ComboFix.txt 2013-11-08 18:30:53 ----D---- C:\Users\Johan\AppData\Roaming\SUPERAntiSpyware.com 2013-11-07 23:17:05 ----D---- C:\Program Files (x86)\glindorus 2013-11-07 23:16:40 ----D---- C:\Program Files (x86)\ViewPassword 2013-11-03 00:35:47 ----D---- C:\Users\Johan\AppData\Roaming\PowerCinema 2013-10-31 23:53:47 ----A---- C:\Windows\system32\drivers\usbuhci.sys 2013-10-31 23:53:47 ----A---- C:\Windows\system32\drivers\usbport.sys 2013-10-31 23:53:47 ----A---- C:\Windows\system32\drivers\usbohci.sys 2013-10-31 23:53:47 ----A---- C:\Windows\system32\drivers\usbhub.sys 2013-10-31 23:53:47 ----A---- C:\Windows\system32\drivers\usbehci.sys 2013-10-31 23:53:47 ----A---- C:\Windows\system32\drivers\usbd.sys 2013-10-31 23:53:47 ----A---- C:\Windows\system32\drivers\usbccgp.sys 2013-10-22 21:51:07 ----D---- C:\Users\Johan\AppData\Roaming\NewsLeecher 2013-10-22 21:50:55 ----D---- C:\Program Files (x86)\NewsLeecher 2013-10-13 19:39:30 ----A---- C:\logFileUI.txt 2013-10-12 19:52:24 ----A---- C:\Windows\SYSWOW64\ieui.dll 2013-10-12 19:52:24 ----A---- C:\Windows\system32\ieui.dll 2013-10-12 19:52:23 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe 2013-10-12 19:52:23 ----A---- C:\Windows\SYSWOW64\iesysprep.dll 2013-10-12 19:52:23 ----A---- C:\Windows\SYSWOW64\iesetup.dll 2013-10-12 19:52:23 ----A---- C:\Windows\SYSWOW64\iertutil.dll 2013-10-12 19:52:23 ----A---- C:\Windows\SYSWOW64\iernonce.dll 2013-10-12 19:52:23 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe 2013-10-12 19:52:23 ----A---- C:\Windows\system32\iesysprep.dll 2013-10-12 19:52:23 ----A---- C:\Windows\system32\iesetup.dll 2013-10-12 19:52:23 ----A---- C:\Windows\system32\iernonce.dll 2013-10-12 19:52:23 ----A---- C:\Windows\system32\ie4uinit.exe 2013-10-12 19:52:22 ----A---- C:\Windows\system32\iertutil.dll 2013-10-12 19:52:21 ----A---- C:\Windows\SYSWOW64\msfeeds.dll 2013-10-12 19:52:21 ----A---- C:\Windows\SYSWOW64\jscript.dll 2013-10-12 19:52:21 ----A---- C:\Windows\system32\msfeeds.dll 2013-10-12 19:52:21 ----A---- C:\Windows\system32\jscript.dll 2013-10-12 19:52:20 ----A---- C:\Windows\SYSWOW64\jscript9.dll 2013-10-12 19:52:20 ----A---- C:\Windows\system32\jscript9.dll 2013-10-12 19:52:19 ----A---- C:\Windows\SYSWOW64\urlmon.dll 2013-10-12 19:52:19 ----A---- C:\Windows\system32\urlmon.dll 2013-10-12 19:52:18 ----A---- C:\Windows\SYSWOW64\jsproxy.dll 2013-10-12 19:52:18 ----A---- C:\Windows\system32\jsproxy.dll 2013-10-12 19:52:17 ----A---- C:\Windows\SYSWOW64\wininet.dll 2013-10-12 19:52:17 ----A---- C:\Windows\system32\wininet.dll 2013-10-12 19:52:16 ----A---- C:\Windows\SYSWOW64\ieframe.dll 2013-10-12 19:52:15 ----A---- C:\Windows\system32\ieframe.dll 2013-10-12 19:52:14 ----A---- C:\Windows\system32\mshtml.dll 2013-10-12 19:52:11 ----A---- C:\Windows\SYSWOW64\mshtml.dll 2013-10-12 17:58:12 ----A---- C:\Windows\wininit.ini 2013-10-12 17:54:56 ----D---- C:\Program Files (x86)\Conduit 2013-10-12 17:54:50 ----D---- C:\ProgramData\Conduit 2013-10-12 17:54:26 ----D---- C:\Users\Johan\AppData\Roaming\Youtube Downloader HD 2013-10-12 17:54:13 ----D---- C:\Program Files (x86)\Youtube Downloader HD 2013-10-12 17:26:14 ----D---- C:\Users\Johan\AppData\Roaming\Nico Mak Computing 2013-10-12 17:26:12 ----A---- C:\Windows\system32\roboot64.exe 2013-10-12 17:26:02 ----D---- C:\ProgramData\YTD Video Downloader 2013-10-12 00:13:28 ----D---- C:\92ba2ab9116f1dd538d2b2 2013-10-11 17:17:41 ----A---- C:\Windows\system32\scavengeui.dll 2013-10-11 17:17:39 ----A---- C:\Windows\SYSWOW64\comctl32.dll 2013-10-11 17:17:39 ----A---- C:\Windows\SYSWOW64\atmfd.dll 2013-10-11 17:17:39 ----A---- C:\Windows\system32\comctl32.dll 2013-10-11 17:17:39 ----A---- C:\Windows\system32\atmfd.dll 2013-10-11 17:17:38 ----A---- C:\Windows\SYSWOW64\lpk.dll 2013-10-11 17:17:38 ----A---- C:\Windows\SYSWOW64\fontsub.dll 2013-10-11 17:17:38 ----A---- C:\Windows\SYSWOW64\dciman32.dll 2013-10-11 17:17:38 ----A---- C:\Windows\system32\lpk.dll 2013-10-11 17:17:38 ----A---- C:\Windows\system32\fontsub.dll 2013-10-11 17:17:38 ----A---- C:\Windows\system32\dciman32.dll 2013-10-11 17:17:38 ----A---- C:\Windows\system32\atmlib.dll 2013-10-11 17:17:37 ----A---- C:\Windows\SYSWOW64\atmlib.dll 2013-10-11 17:17:37 ----A---- C:\Windows\system32\drivers\Wdf01000.sys 2013-10-11 17:16:46 ----A---- C:\Windows\system32\drivers\usbvideo.sys 2013-10-11 17:16:46 ----A---- C:\Windows\system32\drivers\usbcir.sys 2013-10-11 17:16:45 ----A---- C:\Windows\system32\drivers\hidparse.sys 2013-10-11 17:16:45 ----A---- C:\Windows\system32\drivers\hidclass.sys 2013-10-11 17:16:44 ----A---- C:\Windows\SYSWOW64\WebClnt.dll 2013-10-11 17:16:44 ----A---- C:\Windows\SYSWOW64\davclnt.dll 2013-10-11 17:16:44 ----A---- C:\Windows\system32\WebClnt.dll 2013-10-11 17:16:44 ----A---- C:\Windows\system32\drivers\mrxdav.sys 2013-10-11 17:16:44 ----A---- C:\Windows\system32\davclnt.dll 2013-10-11 17:16:42 ----A---- C:\Windows\SYSWOW64\mswsock.dll 2013-10-11 17:16:42 ----A---- C:\Windows\system32\mswsock.dll 2013-10-11 17:16:42 ----A---- C:\Windows\system32\drivers\tcpip.sys 2013-10-11 17:16:42 ----A---- C:\Windows\system32\drivers\afd.sys 2013-10-11 17:16:41 ----A---- C:\Windows\system32\win32k.sys 2013-10-11 17:16:37 ----A---- C:\Windows\system32\ntoskrnl.exe 2013-10-11 17:16:37 ----A---- C:\Windows\system32\advapi32.dll 2013-10-11 17:16:36 ----A---- C:\Windows\SYSWOW64\tdh.dll 2013-10-11 17:16:36 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe 2013-10-11 17:16:36 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe 2013-10-11 17:16:36 ----A---- C:\Windows\SYSWOW64\advapi32.dll 2013-10-11 17:16:36 ----A---- C:\Windows\system32\tdh.dll 2013-10-11 17:16:36 ----A---- C:\Windows\system32\ntdll.dll 2013-10-11 17:16:35 ----A---- C:\Windows\SYSWOW64\ntdll.dll 2013-10-11 17:16:35 ----A---- C:\Windows\system32\wow64.dll 2013-10-11 17:16:34 ----A---- C:\Windows\SYSWOW64\wow32.dll 2013-10-11 17:16:34 ----A---- C:\Windows\SYSWOW64\user.exe 2013-10-11 17:16:34 ----A---- C:\Windows\SYSWOW64\setup16.exe 2013-10-11 17:16:34 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll 2013-10-11 17:16:34 ----A---- C:\Windows\SYSWOW64\instnm.exe 2013-10-11 17:16:24 ----A---- C:\Windows\SYSWOW64\PresentationCFFRasterizerNative_v0300.dll 2013-10-11 17:16:24 ----A---- C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2013-10-11 17:16:24 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys ======List of files/folders modified in the last 1 month====== 2013-11-08 21:58:28 ----RD---- C:\Program Files 2013-11-08 21:53:58 ----D---- C:\Windows\Temp 2013-11-08 20:21:49 ----D---- C:\Windows\system32\config 2013-11-08 20:10:33 ----A---- C:\Windows\SYSWOW64\log.txt 2013-11-08 20:08:54 ----D---- C:\ProgramData\clear.fi 2013-11-08 20:08:46 ----D---- C:\Windows\System32 2013-11-08 19:27:15 ----D---- C:\Windows\system32\drivers 2013-11-08 19:21:28 ----D---- C:\ProgramData 2013-11-08 19:17:55 ----RD---- C:\Program Files (x86) 2013-11-08 19:03:28 ----D---- C:\Windows\inf 2013-11-08 19:03:28 ----A---- C:\Windows\system32\PerfStringBackup.INI 2013-11-08 18:53:39 ----D---- C:\Qoobox 2013-11-08 18:51:55 ----D---- C:\Windows 2013-11-08 18:51:55 ----A---- C:\Windows\system.ini 2013-11-08 18:48:57 ----D---- C:\Windows\SYSWOW64\drivers 2013-11-08 18:48:57 ----D---- C:\Windows\SysWOW64 2013-11-08 18:48:57 ----D---- C:\Windows\AppPatch 2013-11-08 18:48:56 ----D---- C:\Program Files (x86)\Common Files 2013-11-08 18:28:58 ----D---- C:\Config.Msi 2013-11-08 18:27:47 ----D---- C:\ProgramData\MFAData 2013-11-08 17:21:25 ----SHD---- C:\Windows\Installer 2013-11-08 17:20:25 ----SHD---- C:\System Volume Information 2013-11-08 17:11:08 ----D---- C:\Windows\system32\Tasks 2013-11-08 17:06:00 ----D---- C:\Windows\system32\wfp 2013-11-08 17:05:57 ----D---- C:\Windows\system32\wbem 2013-11-08 17:05:00 ----D---- C:\Windows\Tasks 2013-11-08 17:05:00 ----D---- C:\Windows\system32\DriverStore 2013-11-08 17:05:00 ----D---- C:\Windows\system32\catroot2 2013-11-08 17:04:56 ----D---- C:\ProgramData\BackupManager 2013-11-08 17:04:55 ----D---- C:\Windows\winsxs 2013-11-08 17:04:55 ----D---- C:\Windows\registration 2013-11-08 17:04:52 ----HD---- C:\Windows\system32\GroupPolicy 2013-11-08 16:05:16 ----D---- C:\Windows\SYSWOW64\GroupPolicy 2013-11-08 15:59:30 ----D---- C:\ProgramData\Wincert 2013-11-08 15:41:51 ----D---- C:\Windows\system32\NDF 2013-11-08 15:38:00 ----D---- C:\Users\Johan\AppData\Roaming\Spotify 2013-11-07 23:20:35 ----D---- C:\Windows\Prefetch 2013-10-31 23:53:07 ----D---- C:\Windows\system32\catroot 2013-10-22 20:09:26 ----SD---- C:\Users\Johan\AppData\Roaming\Microsoft 2013-10-12 21:46:20 ----D---- C:\Windows\rescache 2013-10-12 20:46:42 ----D---- C:\Program Files (x86)\Internet Explorer 2013-10-12 20:46:39 ----D---- C:\Program Files\Internet Explorer 2013-10-12 20:46:10 ----D---- C:\Program Files\Microsoft Silverlight 2013-10-12 20:46:09 ----D---- C:\Program Files (x86)\Microsoft Silverlight 2013-10-12 19:54:27 ----D---- C:\ProgramData\Microsoft Help 2013-10-12 17:59:21 ----SD---- C:\ProgramData\Microsoft 2013-10-12 17:59:21 ----D---- C:\Program Files (x86)\Microsoft 2013-10-12 17:12:41 ----D---- C:\Windows\Microsoft.NET 2013-10-12 17:12:00 ----RSD---- C:\Windows\assembly 2013-10-12 00:07:52 ----D---- C:\Windows\system32\MRT 2013-10-12 00:05:06 ----A---- C:\Windows\system32\MRT.exe 2013-10-11 23:58:55 ----D---- C:\Windows\system32\nl-NL 2013-10-11 16:27:51 ----D---- C:\$AVG ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 AVGIDSHA;AVGIDSHA; C:\Windows\system32\DRIVERS\avgidsha.sys [2013-09-02 192824] R0 Avgloga;AVG Logging Driver; C:\Windows\system32\DRIVERS\avgloga.sys [2013-09-02 294712] R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx64.sys [2013-08-20 123704] R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx64.sys [2013-09-08 31544] R0 iaStor;Intel AHCI Controller; C:\Windows\system32\drivers\iaStor.sys [2010-11-05 438808] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888] R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2012-03-07 530488] R1 Avgdiska;AVG Disk Driver; C:\Windows\system32\DRIVERS\avgdiska.sys [2013-09-25 148792] R1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdrivera.sys [2013-09-02 241464] R1 Avgldx64;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx64.sys [2013-09-02 212280] R1 Avgtdia;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdia.sys [2013-08-01 251192] R1 mwlPSDFilter;mwlPSDFilter; C:\Windows\system32\DRIVERS\mwlPSDFilter.sys [2011-10-27 22648] R1 mwlPSDNServ;mwlPSDNServ; C:\Windows\system32\DRIVERS\mwlPSDNServ.sys [2011-10-27 20520] R1 mwlPSDVDisk;mwlPSDVDisk; C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys [2011-10-27 62776] R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904] R2 NPF_devolo;NetGroup Packet Filter Driver (devolo); C:\Windows\sysWOW64\drivers\npf_devolo.sys [2010-06-10 34048] R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2011-06-02 2750464] R3 HECIx64;Intel® Management Engine Interface; C:\Windows\system32\drivers\HECIx64.sys [2009-09-17 56344] R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-08-09 12289472] R3 Impcd;Impcd; C:\Windows\system32\DRIVERS\Impcd.sys [2010-02-26 158976] R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-06-14 2899176] R3 IntcDAud;Intel® Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-14 317440] R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\Windows\system32\DRIVERS\L1C62x64.sys [2011-03-23 77936] R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2011-09-20 18432] R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-12-01 250984] R3 StillCam;Stuurprogramma voor seriële digitale fotocamera; C:\Windows\system32\drivers\serscan.sys [2009-07-14 12288] R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2011-03-28 1417776] R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2011-09-20 17408] R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920] R3 WSDPrintDevice;WSD-ondersteuning voor afdrukken via UMB; C:\Windows\system32\DRIVERS\WSDPrint.sys [2009-07-14 23040] S3 androidusb;SAMSUNG Android Composite ADB Interface Driver; C:\Windows\System32\Drivers\ssadadb.sys [2011-05-13 36328] S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232] S3 BthEnum;Bluetooth-stuurprogramma voor aanvraagblok; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984] S3 BthPan;Bluetooth-apparaat (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784] S3 BTHPORT;Stuurprogramma voor Bluetooth-poort; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960] S3 BTHUSB;USB-stuurprogramma voor Bluetooth-radio; C:\Windows\System32\Drivers\BTHUSB.sys [2011-09-21 80384] S3 catchme;catchme; \??\C:\ComboFix\catchme.sys [] S3 massfilter_hs;HS HandSet Mass Storage Filter Driver; \??\C:\Windows\system32\drivers\massfilter_hs.sys [2012-04-16 18456] S3 mcdbus;Driver for MagicISO SCSI Host Controller; C:\Windows\system32\DRIVERS\mcdbus.sys [2009-02-24 255552] S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352] S3 RFCOMM;Bluetooth-apparaat (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720] S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\ssadbus.sys [2011-05-13 157672] S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\Windows\system32\DRIVERS\ssadmdfl.sys [2011-05-13 16872] S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\Windows\system32\DRIVERS\ssadmdm.sys [2011-05-13 177640] S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\Windows\system32\DRIVERS\ssadserd.sys [2011-05-13 146920] S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392] S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232] S3 usb_rndisx;USB RNDIS-adapter; C:\Windows\system32\drivers\usb8023x.sys [2013-02-12 19968] S3 usbscan;Stuurprogramma voor USB-scanner; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984] S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-09 65640] R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [2013-10-03 3538480] R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [2013-09-25 301152] R2 DevoloNetworkService;devolo Network Service; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [2010-12-23 3304768] R2 DsiWMIService;Dritek WMI Service; C:\Program Files (x86)\Launch Manager\dsiwmis.exe [2011-07-01 353360] R2 ePowerSvc;ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2011-08-02 872552] R2 GREGService;GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [2011-05-30 36456] R2 Live Updater Service;Live Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2012-04-05 255376] R2 LMS;Intel® Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe [2010-09-16 325656] R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [2011-04-24 256832] R2 UNS;Intel® Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2010-09-16 2538520] R2 vToolbarUpdater15.2.0;vToolbarUpdater15.2.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.2.0\ToolbarUpdater.exe [2013-05-24 1015984] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-08 257416] S3 EgisTec Ticket Service;EgisTec Ticket Service; C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [2011-06-21 173424] S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011-11-23 655624] S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072] S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-09 136120] S3 NBService;NBService; C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe [2006-11-10 774144] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-03-04 1255736] S3 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-29 2292096] S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 57184] -----------------EOF-----------------

Beste, Als ik IE opstart en een website wil openen duurt dit lang alvorens de site geopend is. Op de site zie ik dan vervelende pop-up's met de vermelding dat mijn schijfruimte vol geraakt, en nog andere onzin. Zelfs als ik ergens wil op klikken komt er een vervelend kadertje te voorschijn, juist op de plaats waar ik eigenlijk moet klikken. Graag jullie hulp. Alvast bedankt. - - - Updated - - - Nog een vervelende: een pop-up met als naam jsticket.net. Grts

Pc start wel op als de windows Vista cd geplaatst is. Moet ik dan een volledige herinstallatie doen of wat. Grtz

Kan Hijackthis niet uitvoeren als administrator !!!

Beste, Heb systeemherstel proberen uit te voeren, maar er kwam na het heropstarten het volgende op het scherm: "Er is tijdens systeemherstel een onbekende fout opgetreden" Dus dit wil duidelijk niet lukken. Grtz

Nee, maar het cd-romstation doet wel raar bij het opstarten. Hij tikt, stopt dan weer, tikt opnieuw..... Ik weet niet of dit er iets mee te maken zou hebben. Groetjes,

Beste, Ik heb reeds een paar dagen problemen met het opstarten van de pc. Soms bevriest het beeld ofwel stopt hij gewoon, valt dan uit, om vervolgens weer op te starten. Er is ook al een blauw scherm geweest, maar het was onmogelijk om dit te lezen. Het was dan weer snel verdwenen van het scherm. Na enkele pogingen doet de pc het dan toch, dan krijg ik de melding dat één of ander programma niet meer werkt en wordt afgesloten. nl windows verkenner en Microsoft Quick launcher zijn al aan de beurt geweest. Ik heb Windows Vista Home Premium. Alvast bedankt voor jullie reactie.

Hebben jullie daar een goede oplossing voor ? Het vorige hebben jullie super opgelost. Alvast bedankt.

Ik denk dat het aan de router ligt. Nu sta ik zo'n 16 meter van de router (telenet) en krijg ik een site moeilijk open. Ik heb al een homeplug bij in een stopkontact gestoken (op het verste punt). Volgens het syteem heb ik een uitstekende verbinding, maar toch wordt alles traag geladen. Als ik 2 meter van telenet-router ga staan met de laptop, zoekt hij natuurlijk eerst de routerverbinding en dan kan ik wel snel sites laden.

Ik heb Firefox geïnstalleerd, maar ik merk eigenlijk geen verschil. Bij het laden van hln.be zijn eigenlijk alle twee even snel.

Veel heeft het niet geholpen, ik denk dat het eerder aan de router-verbinding ligt. Zou dit kunnen?

Neen alleen Internet Explorer.

Het opstarten is al enkele dagen ok. Het laden van sites is soms nog een probleem.

ComboFix 13-06-13.01 - Johan 15-06-2013 9:26.2.2 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.31.1043.18.5813.4261 [GMT 2:00] Gestart vanuit: c:\users\Johan\Desktop\ComboFix.exe gebruikte Opdracht switches :: c:\users\Johan\Desktop\CFScript.txt AV: AVG AntiVirus Free Edition 2013 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9} SP: AVG AntiVirus Free Edition 2013 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Nieuw herstelpunt werd aangemaakt . . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\program files (x86)\DVDVideoSoft c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\da-DK\DVDVideoSoft.AppFx.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\da-DK\DVDVideoSoft.DialogForms.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\da-DK\DVDVideoSoft.PresetEditor.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\da-DK\DVDVideoSoft.Resources.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\da-DK\FreeYouTubeToMP3Converter.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\de-DE\DVDVideoSoft.AppFx.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\de-DE\DVDVideoSoft.DialogForms.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\de-DE\DVDVideoSoft.PresetEditor.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\de-DE\DVDVideoSoft.Resources.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\de-DE\FreeYouTubeToMP3Converter.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\DVDVideoSoft.AVConverter.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\DVDVideoSoft.DVSiTunes.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\DVDVideoSoft.DVSVideoDownloader.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\DVDVideoSoft.MediaTagsEditor.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\DVDVideoSoft.PresetEditor.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\DVDVideoSoft.Presets.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\DVDVideoSoft.Resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\DVDVideoSoft.RockIdHelper.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\DVDVideoSoft.TaskbarManager.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\DVDVideoSoft.VideoFileToIPOD.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\DVDVideoSoft.YTConverterAppExt.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\el-GR\DVDVideoSoft.AppFx.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\el-GR\DVDVideoSoft.DialogForms.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\el-GR\DVDVideoSoft.PresetEditor.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\el-GR\DVDVideoSoft.Resources.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\el-GR\FreeYouTubeToMP3Converter.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\es-ES\DVDVideoSoft.AppFx.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\es-ES\DVDVideoSoft.DialogForms.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\es-ES\DVDVideoSoft.PresetEditor.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\es-ES\DVDVideoSoft.Resources.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\es-ES\FreeYouTubeToMP3Converter.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\fr-FR\DVDVideoSoft.AppFx.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\fr-FR\DVDVideoSoft.DialogForms.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\fr-FR\DVDVideoSoft.PresetEditor.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\fr-FR\DVDVideoSoft.Resources.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\fr-FR\FreeYouTubeToMP3Converter.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\FreeYouTubeToMP3Converter.exe c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\FreeYouTubeToMP3Converter.xml c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\FreeYouTubeToMP3ConverterProfile.xml c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\FreeYouTubeToMP3ConverterProfileD.xml c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\hu-HU\DVDVideoSoft.AppFx.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\hu-HU\DVDVideoSoft.DialogForms.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\hu-HU\DVDVideoSoft.PresetEditor.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\hu-HU\DVDVideoSoft.Resources.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\hu-HU\FreeYouTubeToMP3Converter.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\it-IT\DVDVideoSoft.AppFx.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\it-IT\DVDVideoSoft.DialogForms.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\it-IT\DVDVideoSoft.PresetEditor.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\it-IT\DVDVideoSoft.Resources.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\it-IT\FreeYouTubeToMP3Converter.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\ja-JP\DVDVideoSoft.AppFx.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\ja-JP\DVDVideoSoft.DialogForms.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\ja-JP\DVDVideoSoft.PresetEditor.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\ja-JP\DVDVideoSoft.Resources.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\ja-JP\FreeYouTubeToMP3Converter.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\nl-NL\DVDVideoSoft.AppFx.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\nl-NL\DVDVideoSoft.DialogForms.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\nl-NL\DVDVideoSoft.PresetEditor.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\nl-NL\DVDVideoSoft.Resources.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\nl-NL\FreeYouTubeToMP3Converter.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\pl-PL\DVDVideoSoft.AppFx.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\pl-PL\DVDVideoSoft.DialogForms.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\pl-PL\DVDVideoSoft.PresetEditor.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\pl-PL\DVDVideoSoft.Resources.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\pl-PL\FreeYouTubeToMP3Converter.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\pt-BR\DVDVideoSoft.AppFx.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\pt-BR\DVDVideoSoft.DialogForms.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\pt-BR\DVDVideoSoft.PresetEditor.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\pt-BR\DVDVideoSoft.Resources.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\pt-BR\FreeYouTubeToMP3Converter.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\pt-PT\DVDVideoSoft.AppFx.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\pt-PT\DVDVideoSoft.DialogForms.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\pt-PT\DVDVideoSoft.PresetEditor.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\pt-PT\DVDVideoSoft.Resources.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\pt-PT\FreeYouTubeToMP3Converter.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\ru-RU\DVDVideoSoft.AppFx.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\ru-RU\DVDVideoSoft.DialogForms.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\ru-RU\DVDVideoSoft.PresetEditor.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\ru-RU\DVDVideoSoft.Resources.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\ru-RU\FreeYouTubeToMP3Converter.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\sv-SE\DVDVideoSoft.AppFx.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\sv-SE\DVDVideoSoft.DialogForms.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\sv-SE\DVDVideoSoft.PresetEditor.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\sv-SE\DVDVideoSoft.Resources.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\sv-SE\FreeYouTubeToMP3Converter.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\taglib-sharp.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\tr-TR\DVDVideoSoft.AppFx.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\tr-TR\DVDVideoSoft.DialogForms.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\tr-TR\DVDVideoSoft.PresetEditor.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\tr-TR\DVDVideoSoft.Resources.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\tr-TR\FreeYouTubeToMP3Converter.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\zh-CHS\DVDVideoSoft.AppFx.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\zh-CHS\DVDVideoSoft.DialogForms.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\zh-CHS\DVDVideoSoft.PresetEditor.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\zh-CHS\DVDVideoSoft.Resources.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\zh-CHS\FreeYouTubeToMP3Converter.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\zh-CHT\DVDVideoSoft.AppFx.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\zh-CHT\DVDVideoSoft.DialogForms.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\zh-CHT\DVDVideoSoft.PresetEditor.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\zh-CHT\DVDVideoSoft.Resources.resources.dll c:\program files (x86)\DVDVideoSoft\Free YouTube to MP3 Converter\zh-CHT\FreeYouTubeToMP3Converter.resources.dll c:\program files (x86)\DVDVideoSoft\unins000.dat c:\program files (x86)\DVDVideoSoft\unins000.exe c:\program files (x86)\DVDVideoSoft\unins000.msg . . (((((((((((((((((((( Bestanden Gemaakt van 2013-05-15 to 2013-06-15 )))))))))))))))))))))))))))))) . . 2013-06-15 07:32 . 2013-06-15 07:32 -------- d-----w- c:\users\Default\AppData\Local\temp 2013-06-13 16:38 . 2013-06-13 16:38 388096 ----a-r- c:\users\Johan\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2013-06-13 14:44 . 2013-06-13 14:44 -------- d-----w- c:\users\Johan\AppData\Roaming\Malwarebytes 2013-06-13 14:43 . 2013-06-13 14:43 -------- d-----w- c:\programdata\Malwarebytes 2013-06-13 14:43 . 2013-06-13 14:43 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware 2013-06-13 14:43 . 2013-04-04 12:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys 2013-06-13 14:43 . 2013-06-13 14:43 -------- d-----w- c:\users\Johan\AppData\Local\Programs 2013-06-12 19:57 . 2013-06-12 19:57 -------- d-----w- c:\program files (x86)\Trend Micro 2013-06-12 09:33 . 2013-06-12 09:33 -------- d-----w- c:\programdata\Visan 2013-06-12 09:33 . 2013-06-12 09:33 -------- d-----w- c:\programdata\HP Photo Creations 2013-06-12 09:33 . 2013-06-12 09:33 -------- d-----w- c:\program files (x86)\HP Photo Creations 2013-06-12 09:32 . 2013-06-12 09:32 -------- d-----w- c:\users\Johan\AppData\Roaming\HpUpdate 2013-06-12 09:32 . 2012-10-17 02:31 741480 ------w- c:\windows\system32\HPDiscoPMa011.dll 2013-06-12 09:30 . 2013-06-12 09:30 -------- d-----w- c:\programdata\HP 2013-06-12 09:30 . 2013-06-12 09:32 -------- d-----w- c:\program files (x86)\HP 2013-06-12 09:29 . 2013-06-12 09:29 -------- d-----w- c:\program files\HP 2013-06-12 09:28 . 2013-06-12 09:35 -------- d-----w- c:\users\Johan\AppData\Local\HP 2013-06-03 17:39 . 2013-06-12 17:58 -------- d-----w- c:\program files (x86)\GreenTree Applications 2013-05-28 08:54 . 2013-06-09 08:56 -------- d-----w- c:\users\Johan\AppData\Local\Ahead 2013-05-28 08:54 . 2013-05-28 09:18 -------- d-----w- c:\users\Johan\AppData\Roaming\Ahead 2013-05-28 08:53 . 2013-05-28 08:54 -------- d-----w- c:\program files (x86)\Common Files\Ahead 2013-05-28 08:53 . 2013-05-28 08:53 -------- d-----w- c:\programdata\Nero 2013-05-28 08:53 . 2013-05-28 08:53 -------- d-----w- c:\program files (x86)\Nero 2013-05-16 18:19 . 2013-04-10 06:01 983400 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys 2013-05-16 18:19 . 2013-04-10 06:01 265064 ----a-w- c:\windows\system32\drivers\dxgmms1.sys 2013-05-16 18:19 . 2011-02-03 11:25 144384 ----a-w- c:\windows\system32\cdd.dll 2013-05-16 18:14 . 2013-02-27 05:52 14172672 ----a-w- c:\windows\system32\shell32.dll 2013-05-16 18:14 . 2013-02-27 05:48 1930752 ----a-w- c:\windows\system32\authui.dll 2013-05-16 18:14 . 2013-02-27 06:02 111448 ----a-w- c:\windows\system32\consent.exe 2013-05-16 18:14 . 2013-02-27 05:52 197120 ----a-w- c:\windows\system32\shdocvw.dll 2013-05-16 18:14 . 2013-02-27 05:47 70144 ----a-w- c:\windows\system32\appinfo.dll 2013-05-16 18:14 . 2013-02-27 04:49 1796096 ----a-w- c:\windows\SysWow64\authui.dll 2013-05-16 18:14 . 2013-03-19 05:53 48640 ----a-w- c:\windows\system32\wwanprotdim.dll 2013-05-16 18:14 . 2013-03-19 05:53 230400 ----a-w- c:\windows\system32\wwansvc.dll 2013-05-16 18:14 . 2013-04-10 03:30 3153920 ----a-w- c:\windows\system32\win32k.sys . . . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-06-12 10:56 . 2012-03-04 13:44 75825640 ----a-w- c:\windows\system32\MRT.exe 2013-06-12 09:31 . 2012-03-28 18:23 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2013-06-12 09:31 . 2011-10-27 12:12 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2013-05-24 19:11 . 2013-01-25 15:47 45856 ----a-w- c:\windows\system32\drivers\avgtpx64.sys 2013-05-17 12:01 . 2011-03-29 01:36 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll 2013-05-15 08:14 . 2013-05-15 08:14 226304 ----a-w- c:\windows\system32\elshyph.dll 2013-05-15 08:14 . 2013-05-15 08:14 185344 ----a-w- c:\windows\SysWow64\elshyph.dll 2013-05-15 08:14 . 2013-05-15 08:14 158720 ----a-w- c:\windows\SysWow64\msls31.dll 2013-05-15 08:14 . 2013-05-15 08:14 1054720 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe 2013-05-15 08:14 . 2013-05-15 08:14 719360 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll 2013-05-15 08:14 . 2013-05-15 08:14 523264 ----a-w- c:\windows\SysWow64\vbscript.dll 2013-05-15 08:14 . 2013-05-15 08:14 150528 ----a-w- c:\windows\SysWow64\iexpress.exe 2013-05-15 08:14 . 2013-05-15 08:14 138752 ----a-w- c:\windows\SysWow64\wextract.exe 2013-05-15 08:14 . 2013-05-15 08:14 73728 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe 2013-05-15 08:14 . 2013-05-15 08:14 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll 2013-05-15 08:14 . 2013-05-15 08:14 38400 ----a-w- c:\windows\SysWow64\imgutil.dll 2013-05-15 08:14 . 2013-05-15 08:14 137216 ----a-w- c:\windows\SysWow64\ieUnatt.exe 2013-05-15 08:14 . 2013-05-15 08:14 12800 ----a-w- c:\windows\SysWow64\mshta.exe 2013-05-15 08:14 . 2013-05-15 08:14 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll 2013-05-15 08:14 . 2013-05-15 08:14 61952 ----a-w- c:\windows\SysWow64\tdc.ocx 2013-05-15 08:14 . 2013-05-15 08:14 361984 ----a-w- c:\windows\SysWow64\html.iec 2013-05-15 08:14 . 2013-05-15 08:14 23040 ----a-w- c:\windows\SysWow64\licmgr10.dll 2013-05-15 08:14 . 2013-05-15 08:14 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl 2013-05-15 08:14 . 2013-05-15 08:14 905728 ----a-w- c:\windows\system32\mshtmlmedia.dll 2013-05-15 08:14 . 2013-05-15 08:14 81408 ----a-w- c:\windows\system32\icardie.dll 2013-05-15 08:14 . 2013-05-15 08:14 762368 ----a-w- c:\windows\system32\ieapfltr.dll 2013-05-15 08:14 . 2013-05-15 08:14 452096 ----a-w- c:\windows\system32\dxtmsft.dll 2013-05-15 08:14 . 2013-05-15 08:14 441856 ----a-w- c:\windows\system32\html.iec 2013-05-15 08:14 . 2013-05-15 08:14 281600 ----a-w- c:\windows\system32\dxtrans.dll 2013-05-15 08:14 . 2013-05-15 08:14 270848 ----a-w- c:\windows\system32\iedkcs32.dll 2013-05-15 08:14 . 2013-05-15 08:14 235008 ----a-w- c:\windows\system32\url.dll 2013-05-15 08:14 . 2013-05-15 08:14 216064 ----a-w- c:\windows\system32\msls31.dll 2013-05-15 08:14 . 2013-05-15 08:14 197120 ----a-w- c:\windows\system32\msrating.dll 2013-05-15 08:14 . 2013-05-15 08:14 1400416 ----a-w- c:\windows\system32\ieapfltr.dat 2013-05-15 08:14 . 2013-05-15 08:14 97280 ----a-w- c:\windows\system32\mshtmled.dll 2013-05-15 08:14 . 2013-05-15 08:14 27648 ----a-w- c:\windows\system32\licmgr10.dll 2013-05-15 08:14 . 2013-05-15 08:14 247296 ----a-w- c:\windows\system32\webcheck.dll 2013-05-15 08:14 . 2013-05-15 08:14 167424 ----a-w- c:\windows\system32\iexpress.exe 2013-05-15 08:14 . 2013-05-15 08:14 1509376 ----a-w- c:\windows\system32\inetcpl.cpl 2013-05-15 08:14 . 2013-05-15 08:14 144896 ----a-w- c:\windows\system32\wextract.exe 2013-05-15 08:14 . 2013-05-15 08:14 102912 ----a-w- c:\windows\system32\inseng.dll 2013-05-15 08:14 . 2013-05-15 08:14 62976 ----a-w- c:\windows\system32\pngfilt.dll 2013-05-15 08:14 . 2013-05-15 08:14 599552 ----a-w- c:\windows\system32\vbscript.dll 2013-05-15 08:14 . 2013-05-15 08:14 51200 ----a-w- c:\windows\system32\imgutil.dll 2013-05-15 08:14 . 2013-05-15 08:14 173568 ----a-w- c:\windows\system32\ieUnatt.exe 2013-05-15 08:14 . 2013-05-15 08:14 149504 ----a-w- c:\windows\system32\occache.dll 2013-05-15 08:14 . 2013-05-15 08:14 13824 ----a-w- c:\windows\system32\mshta.exe 2013-05-15 08:14 . 2013-05-15 08:14 136192 ----a-w- c:\windows\system32\iepeers.dll 2013-05-15 08:14 . 2013-05-15 08:14 92160 ----a-w- c:\windows\system32\SetIEInstalledDate.exe 2013-05-15 08:14 . 2013-05-15 08:14 77312 ----a-w- c:\windows\system32\tdc.ocx 2013-05-15 08:14 . 2013-05-15 08:14 52224 ----a-w- c:\windows\system32\msfeedsbs.dll 2013-05-15 08:14 . 2013-05-15 08:14 48640 ----a-w- c:\windows\system32\mshtmler.dll 2013-05-15 08:14 . 2013-05-15 08:14 135680 ----a-w- c:\windows\system32\IEAdvpack.dll 2013-05-15 08:14 . 2013-05-15 08:14 12800 ----a-w- c:\windows\system32\msfeedssync.exe 2013-05-15 08:13 . 2013-05-15 08:13 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-05-15 08:13 . 2013-05-15 08:13 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-05-15 08:13 . 2013-05-15 08:13 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-05-15 08:13 . 2013-05-15 08:13 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-05-15 08:13 . 2013-05-15 08:13 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-05-15 08:13 . 2013-05-15 08:13 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-05-15 08:13 . 2013-05-15 08:13 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll 2013-05-15 08:13 . 2013-05-15 08:13 4096 ---ha-w- c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2013-05-15 08:13 . 2013-05-15 08:13 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-05-15 08:13 . 2013-05-15 08:13 3584 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-05-15 08:13 . 2013-05-15 08:13 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll 2013-05-15 08:13 . 2013-05-15 08:13 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-05-15 08:13 . 2013-05-15 08:13 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2013-05-15 08:13 . 2013-05-15 08:13 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-05-15 08:13 . 2013-05-15 08:13 2560 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-05-15 08:13 . 2013-05-15 08:13 2560 ---ha-w- c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-05-15 08:13 . 2013-05-15 08:13 1158144 ----a-w- c:\windows\SysWow64\XpsPrint.dll 2013-05-15 08:13 . 2013-05-15 08:13 10752 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-05-15 08:13 . 2013-05-15 08:13 10752 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-05-15 08:13 . 2013-05-15 08:13 522752 ----a-w- c:\windows\system32\XpsGdiConverter.dll 2013-05-15 08:13 . 2013-05-15 08:13 465920 ----a-w- c:\windows\system32\WMPhoto.dll 2013-05-15 08:13 . 2013-05-15 08:13 364544 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll 2013-05-15 08:13 . 2013-05-15 08:13 2284544 ----a-w- c:\windows\SysWow64\msmpeg2vdec.dll 2013-05-15 08:13 . 2013-05-15 08:13 1682432 ----a-w- c:\windows\system32\XpsPrint.dll 2013-05-15 08:13 . 2013-05-15 08:13 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll 2013-05-15 08:13 . 2013-05-15 08:13 3928064 ----a-w- c:\windows\system32\d2d1.dll 2013-05-15 08:13 . 2013-05-15 08:13 363008 ----a-w- c:\windows\system32\dxgi.dll 2013-05-15 08:13 . 2013-05-15 08:13 2776576 ----a-w- c:\windows\system32\msmpeg2vdec.dll 2013-05-15 08:13 . 2013-05-15 08:13 2565120 ----a-w- c:\windows\system32\d3d10warp.dll 2013-05-15 08:13 . 2013-05-15 08:13 220160 ----a-w- c:\windows\SysWow64\d3d10core.dll 2013-05-15 08:13 . 2013-05-15 08:13 207872 ----a-w- c:\windows\SysWow64\WindowsCodecsExt.dll 2013-05-15 08:13 . 2013-05-15 08:13 1247744 ----a-w- c:\windows\SysWow64\DWrite.dll 2013-05-15 08:13 . 2013-05-15 08:13 1175552 ----a-w- c:\windows\system32\FntCache.dll 2013-05-15 08:13 . 2013-05-15 08:13 1080832 ----a-w- c:\windows\SysWow64\d3d10.dll 2013-05-15 08:13 . 2013-05-15 08:13 648192 ----a-w- c:\windows\system32\d3d10level9.dll 2013-05-15 08:13 . 2013-05-15 08:13 604160 ----a-w- c:\windows\SysWow64\d3d10level9.dll 2013-05-15 08:13 . 2013-05-15 08:13 3419136 ----a-w- c:\windows\SysWow64\d2d1.dll 2013-05-15 08:13 . 2013-05-15 08:13 333312 ----a-w- c:\windows\system32\d3d10_1core.dll 2013-05-15 08:13 . 2013-05-15 08:13 296960 ----a-w- c:\windows\system32\d3d10core.dll 2013-05-15 08:13 . 2013-05-15 08:13 293376 ----a-w- c:\windows\SysWow64\dxgi.dll 2013-05-15 08:13 . 2013-05-15 08:13 249856 ----a-w- c:\windows\SysWow64\d3d10_1core.dll 2013-05-15 08:13 . 2013-05-15 08:13 245248 ----a-w- c:\windows\system32\WindowsCodecsExt.dll 2013-05-15 08:13 . 2013-05-15 08:13 1988096 ----a-w- c:\windows\SysWow64\d3d10warp.dll 2013-05-15 08:13 . 2013-05-15 08:13 194560 ----a-w- c:\windows\system32\d3d10_1.dll 2013-05-15 08:13 . 2013-05-15 08:13 1643520 ----a-w- c:\windows\system32\DWrite.dll 2013-05-15 08:13 . 2013-05-15 08:13 161792 ----a-w- c:\windows\SysWow64\d3d10_1.dll . . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Spotify Web Helper"="c:\users\Johan\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2013-04-01 1104280] "Spotify"="c:\users\Johan\AppData\Roaming\Spotify\Spotify.exe" [2013-04-01 4480920] "HP Deskjet 3050A J611 series (NET)"="c:\program files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe" [2012-10-17 2573416] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "SuiteTray"="c:\program files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" [2011-09-20 341360] "BackupManagerTray"="c:\program files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" [2011-04-24 297280] "LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2011-07-01 1103440] "ArcadeMovieService"="c:\program files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe" [2011-08-26 177448] "AVG_UI"="c:\program files (x86)\AVG\AVG2013\avgui.exe" [2013-04-28 4408368] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576] "HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2011-10-28 49208] . [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "IsMyWinLockerReboot"="msiexec.exe" [2010-11-21 73216] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux"=wdmaud.drv . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] @="" . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "ROC_ROC_JULY_P1"="c:\program files (x86)\AVG Secure Search\ROC_ROC_JULY_P1.exe" / /PROMPT /CMPID=ROC_JULY_P1 . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x] R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys;c:\windows\SYSNATIVE\Drivers\ssadadb.sys [x] R3 EgisTec Ticket Service;EgisTec Ticket Service;c:\program files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe;c:\program files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [x] R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [x] R3 massfilter_hs;HS HandSet Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter_hs.sys;c:\windows\SYSNATIVE\drivers\massfilter_hs.sys [x] R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssadbus.sys [x] R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdfl.sys [x] R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdm.sys [x] R3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\DRIVERS\ssadserd.sys;c:\windows\SYSNATIVE\DRIVERS\ssadserd.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x] R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x] R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x] S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsha.sys [x] S0 Avgloga;AVG Logging Driver;c:\windows\system32\DRIVERS\avgloga.sys;c:\windows\SYSNATIVE\DRIVERS\avgloga.sys [x] S0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgmfx64.sys [x] S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgrkx64.sys [x] S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x] S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsdrivera.sys [x] S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgldx64.sys [x] S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys;c:\windows\SYSNATIVE\DRIVERS\avgtdia.sys [x] S1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx64.sys;c:\windows\SYSNATIVE\drivers\avgtpx64.sys [x] S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDFilter.sys [x] S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDNServ.sys [x] S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDVDisk.sys [x] S2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2013\avgidsagent.exe;c:\program files (x86)\AVG\AVG2013\avgidsagent.exe [x] S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2013\avgwdsvc.exe;c:\program files (x86)\AVG\AVG2013\avgwdsvc.exe [x] S2 BBSvc;BingBar Service;c:\program files (x86)\Microsoft\BingBar\7.1.355.0\BBSvc.exe;c:\program files (x86)\Microsoft\BingBar\7.1.355.0\BBSvc.exe [x] S2 DevoloNetworkService;devolo Network Service;c:\program files (x86)\devolo\dlan\devolonetsvc.exe;c:\program files (x86)\devolo\dlan\devolonetsvc.exe [x] S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe;c:\program files (x86)\Launch Manager\dsiwmis.exe [x] S2 ePowerSvc;ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [x] S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe;c:\program files (x86)\Acer\Registration\GREGsvc.exe [x] S2 Live Updater Service;Live Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe;c:\program files\Acer\Acer Updater\UpdaterService.exe [x] S2 NPF_devolo;NetGroup Packet Filter Driver (devolo);c:\windows\sysWOW64\drivers\npf_devolo.sys;c:\windows\sysWOW64\drivers\npf_devolo.sys [x] S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe;c:\program files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [x] S2 UNS;Intel® Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [x] S2 vToolbarUpdater15.2.0;vToolbarUpdater15.2.0;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.2.0\ToolbarUpdater.exe;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.2.0\ToolbarUpdater.exe [x] S3 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\7.1.355.0\SeaPort.exe;c:\program files (x86)\Microsoft\BingBar\7.1.355.0\SeaPort.exe [x] S3 HECIx64;Intel® Management Engine Interface;c:\windows\system32\drivers\HECIx64.sys;c:\windows\SYSNATIVE\drivers\HECIx64.sys [x] S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys;c:\windows\SYSNATIVE\DRIVERS\Impcd.sys [x] S3 IntcDAud;Intel® Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x] S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x] S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\System32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x] . . Inhoud van de 'Gedeelde Taken' map . 2013-06-15 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-28 09:31] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-08-15 167704] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-08-15 392472] "Persistence"="c:\windows\system32\igfxpers.exe" [2011-08-15 416024] "SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [bU] "RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-06-09 11860072] "Power Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2011-08-02 1831016] . ------- Bijkomende Scan ------- . uStart Page = hxxp://www.google.be/ uLocal Page = c:\windows\system32\blank.htm mLocal Page = c:\windows\SysWOW64\blank.htm IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: E&xporteren naar Microsoft Excel - c:\progra~2\MICROS~4\Office12\EXCEL.EXE/3000 TCP: DhcpNameServer = 195.130.131.131 195.130.130.3 . - - - - ORPHANS VERWIJDERD - - - - . Toolbar-Locked - (no file) Wow6432Node-HKLM-Run-<NO NAME> - (no file) WebBrowser-{EBD898F8-FCF6-4694-BC3B-EABC7271EEB1} - (no file) . . . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\software\McAfee] "SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79, 00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\ . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Voltooingstijd: 2013-06-15 09:34:27 ComboFix-quarantined-files.txt 2013-06-15 07:34 ComboFix2.txt 2013-06-14 15:36 . Pre-Run: 412.684.369.920 bytes beschikbaar Post-Run: 412.274.388.992 bytes beschikbaar . - - End Of File - - F49B4ED2000889C4C6E13C73EB2E0092 D41D8CD98F00B204E9800998ECF8427E

ComboFix 13-06-13.01 - Johan 14-06-2013 17:23:13.1.2 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.31.1043.18.5813.3834 [GMT 2:00] Gestart vanuit: c:\users\Johan\Desktop\ComboFix.exe AV: AVG AntiVirus Free Edition 2013 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9} SP: AVG AntiVirus Free Edition 2013 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\programdata\1359067600.bdinstall.bin c:\programdata\Wincert\WIN32C~1.DLL c:\windows\SysWow64\Packet.dll c:\windows\SysWow64\pthreadVC.dll c:\windows\SysWow64\wpcap.dll . . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . . -------\Legacy_NPF -------\Service_npf . . (((((((((((((((((((( Bestanden Gemaakt van 2013-05-14 to 2013-06-14 )))))))))))))))))))))))))))))) . . 2013-06-14 15:29 . 2013-06-14 15:29 -------- d-----w- c:\users\Default\AppData\Local\temp 2013-06-13 16:38 . 2013-06-13 16:38 388096 ----a-r- c:\users\Johan\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2013-06-13 14:44 . 2013-06-13 14:44 -------- d-----w- c:\users\Johan\AppData\Roaming\Malwarebytes 2013-06-13 14:43 . 2013-06-13 14:43 -------- d-----w- c:\programdata\Malwarebytes 2013-06-13 14:43 . 2013-06-13 14:43 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware 2013-06-13 14:43 . 2013-04-04 12:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys 2013-06-13 14:43 . 2013-06-13 14:43 -------- d-----w- c:\users\Johan\AppData\Local\Programs 2013-06-12 19:57 . 2013-06-12 19:57 -------- d-----w- c:\program files (x86)\Trend Micro 2013-06-12 09:33 . 2013-06-12 09:33 -------- d-----w- c:\programdata\Visan 2013-06-12 09:33 . 2013-06-12 09:33 -------- d-----w- c:\programdata\HP Photo Creations 2013-06-12 09:33 . 2013-06-12 09:33 -------- d-----w- c:\program files (x86)\HP Photo Creations 2013-06-12 09:32 . 2013-06-12 09:32 -------- d-----w- c:\users\Johan\AppData\Roaming\HpUpdate 2013-06-12 09:32 . 2012-10-17 02:31 741480 ------w- c:\windows\system32\HPDiscoPMa011.dll 2013-06-12 09:30 . 2013-06-12 09:30 -------- d-----w- c:\programdata\HP 2013-06-12 09:30 . 2013-06-12 09:32 -------- d-----w- c:\program files (x86)\HP 2013-06-12 09:29 . 2013-06-12 09:29 -------- d-----w- c:\program files\HP 2013-06-12 09:28 . 2013-06-12 09:35 -------- d-----w- c:\users\Johan\AppData\Local\HP 2013-06-03 17:39 . 2013-06-12 17:58 -------- d-----w- c:\program files (x86)\GreenTree Applications 2013-06-03 17:23 . 2013-06-12 17:58 -------- d-----w- c:\program files (x86)\DVDVideoSoft 2013-05-28 08:54 . 2013-06-09 08:56 -------- d-----w- c:\users\Johan\AppData\Local\Ahead 2013-05-28 08:54 . 2013-05-28 09:18 -------- d-----w- c:\users\Johan\AppData\Roaming\Ahead 2013-05-28 08:53 . 2013-05-28 08:54 -------- d-----w- c:\program files (x86)\Common Files\Ahead 2013-05-28 08:53 . 2013-05-28 08:53 -------- d-----w- c:\programdata\Nero 2013-05-28 08:53 . 2013-05-28 08:53 -------- d-----w- c:\program files (x86)\Nero 2013-05-16 18:19 . 2013-04-10 06:01 983400 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys 2013-05-16 18:19 . 2013-04-10 06:01 265064 ----a-w- c:\windows\system32\drivers\dxgmms1.sys 2013-05-16 18:19 . 2011-02-03 11:25 144384 ----a-w- c:\windows\system32\cdd.dll 2013-05-16 18:14 . 2013-02-27 05:52 14172672 ----a-w- c:\windows\system32\shell32.dll 2013-05-16 18:14 . 2013-02-27 05:48 1930752 ----a-w- c:\windows\system32\authui.dll 2013-05-16 18:14 . 2013-02-27 06:02 111448 ----a-w- c:\windows\system32\consent.exe 2013-05-16 18:14 . 2013-02-27 05:52 197120 ----a-w- c:\windows\system32\shdocvw.dll 2013-05-16 18:14 . 2013-02-27 05:47 70144 ----a-w- c:\windows\system32\appinfo.dll 2013-05-16 18:14 . 2013-02-27 04:49 1796096 ----a-w- c:\windows\SysWow64\authui.dll 2013-05-16 18:14 . 2013-03-19 05:53 48640 ----a-w- c:\windows\system32\wwanprotdim.dll 2013-05-16 18:14 . 2013-03-19 05:53 230400 ----a-w- c:\windows\system32\wwansvc.dll 2013-05-16 18:14 . 2013-04-10 03:30 3153920 ----a-w- c:\windows\system32\win32k.sys . . . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-06-12 10:56 . 2012-03-04 13:44 75825640 ----a-w- c:\windows\system32\MRT.exe 2013-06-12 09:31 . 2012-03-28 18:23 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2013-06-12 09:31 . 2011-10-27 12:12 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2013-05-24 19:11 . 2013-01-25 15:47 45856 ----a-w- c:\windows\system32\drivers\avgtpx64.sys 2013-05-17 12:01 . 2011-03-29 01:36 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll 2013-05-15 08:14 . 2013-05-15 08:14 226304 ----a-w- c:\windows\system32\elshyph.dll 2013-05-15 08:14 . 2013-05-15 08:14 185344 ----a-w- c:\windows\SysWow64\elshyph.dll 2013-05-15 08:14 . 2013-05-15 08:14 158720 ----a-w- c:\windows\SysWow64\msls31.dll 2013-05-15 08:14 . 2013-05-15 08:14 1054720 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe 2013-05-15 08:14 . 2013-05-15 08:14 719360 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll 2013-05-15 08:14 . 2013-05-15 08:14 523264 ----a-w- c:\windows\SysWow64\vbscript.dll 2013-05-15 08:14 . 2013-05-15 08:14 150528 ----a-w- c:\windows\SysWow64\iexpress.exe 2013-05-15 08:14 . 2013-05-15 08:14 138752 ----a-w- c:\windows\SysWow64\wextract.exe 2013-05-15 08:14 . 2013-05-15 08:14 73728 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe 2013-05-15 08:14 . 2013-05-15 08:14 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll 2013-05-15 08:14 . 2013-05-15 08:14 38400 ----a-w- c:\windows\SysWow64\imgutil.dll 2013-05-15 08:14 . 2013-05-15 08:14 137216 ----a-w- c:\windows\SysWow64\ieUnatt.exe 2013-05-15 08:14 . 2013-05-15 08:14 12800 ----a-w- c:\windows\SysWow64\mshta.exe 2013-05-15 08:14 . 2013-05-15 08:14 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll 2013-05-15 08:14 . 2013-05-15 08:14 61952 ----a-w- c:\windows\SysWow64\tdc.ocx 2013-05-15 08:14 . 2013-05-15 08:14 361984 ----a-w- c:\windows\SysWow64\html.iec 2013-05-15 08:14 . 2013-05-15 08:14 23040 ----a-w- c:\windows\SysWow64\licmgr10.dll 2013-05-15 08:14 . 2013-05-15 08:14 1441280 ----a-w- c:\windows\SysWow64\inetcpl.cpl 2013-05-15 08:14 . 2013-05-15 08:14 905728 ----a-w- c:\windows\system32\mshtmlmedia.dll 2013-05-15 08:14 . 2013-05-15 08:14 81408 ----a-w- c:\windows\system32\icardie.dll 2013-05-15 08:14 . 2013-05-15 08:14 762368 ----a-w- c:\windows\system32\ieapfltr.dll 2013-05-15 08:14 . 2013-05-15 08:14 452096 ----a-w- c:\windows\system32\dxtmsft.dll 2013-05-15 08:14 . 2013-05-15 08:14 441856 ----a-w- c:\windows\system32\html.iec 2013-05-15 08:14 . 2013-05-15 08:14 281600 ----a-w- c:\windows\system32\dxtrans.dll 2013-05-15 08:14 . 2013-05-15 08:14 270848 ----a-w- c:\windows\system32\iedkcs32.dll 2013-05-15 08:14 . 2013-05-15 08:14 235008 ----a-w- c:\windows\system32\url.dll 2013-05-15 08:14 . 2013-05-15 08:14 216064 ----a-w- c:\windows\system32\msls31.dll 2013-05-15 08:14 . 2013-05-15 08:14 197120 ----a-w- c:\windows\system32\msrating.dll 2013-05-15 08:14 . 2013-05-15 08:14 1400416 ----a-w- c:\windows\system32\ieapfltr.dat 2013-05-15 08:14 . 2013-05-15 08:14 97280 ----a-w- c:\windows\system32\mshtmled.dll 2013-05-15 08:14 . 2013-05-15 08:14 27648 ----a-w- c:\windows\system32\licmgr10.dll 2013-05-15 08:14 . 2013-05-15 08:14 247296 ----a-w- c:\windows\system32\webcheck.dll 2013-05-15 08:14 . 2013-05-15 08:14 167424 ----a-w- c:\windows\system32\iexpress.exe 2013-05-15 08:14 . 2013-05-15 08:14 1509376 ----a-w- c:\windows\system32\inetcpl.cpl 2013-05-15 08:14 . 2013-05-15 08:14 144896 ----a-w- c:\windows\system32\wextract.exe 2013-05-15 08:14 . 2013-05-15 08:14 102912 ----a-w- c:\windows\system32\inseng.dll 2013-05-15 08:14 . 2013-05-15 08:14 62976 ----a-w- c:\windows\system32\pngfilt.dll 2013-05-15 08:14 . 2013-05-15 08:14 599552 ----a-w- c:\windows\system32\vbscript.dll 2013-05-15 08:14 . 2013-05-15 08:14 51200 ----a-w- c:\windows\system32\imgutil.dll 2013-05-15 08:14 . 2013-05-15 08:14 173568 ----a-w- c:\windows\system32\ieUnatt.exe 2013-05-15 08:14 . 2013-05-15 08:14 149504 ----a-w- c:\windows\system32\occache.dll 2013-05-15 08:14 . 2013-05-15 08:14 13824 ----a-w- c:\windows\system32\mshta.exe 2013-05-15 08:14 . 2013-05-15 08:14 136192 ----a-w- c:\windows\system32\iepeers.dll 2013-05-15 08:14 . 2013-05-15 08:14 92160 ----a-w- c:\windows\system32\SetIEInstalledDate.exe 2013-05-15 08:14 . 2013-05-15 08:14 77312 ----a-w- c:\windows\system32\tdc.ocx 2013-05-15 08:14 . 2013-05-15 08:14 52224 ----a-w- c:\windows\system32\msfeedsbs.dll 2013-05-15 08:14 . 2013-05-15 08:14 48640 ----a-w- c:\windows\system32\mshtmler.dll 2013-05-15 08:14 . 2013-05-15 08:14 135680 ----a-w- c:\windows\system32\IEAdvpack.dll 2013-05-15 08:14 . 2013-05-15 08:14 12800 ----a-w- c:\windows\system32\msfeedssync.exe 2013-05-15 08:13 . 2013-05-15 08:13 9728 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-05-15 08:13 . 2013-05-15 08:13 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll 2013-05-15 08:13 . 2013-05-15 08:13 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-05-15 08:13 . 2013-05-15 08:13 5632 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-05-15 08:13 . 2013-05-15 08:13 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll 2013-05-15 08:13 . 2013-05-15 08:13 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll 2013-05-15 08:13 . 2013-05-15 08:13 4096 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-user32-l1-1-0.dll 2013-05-15 08:13 . 2013-05-15 08:13 4096 ---ha-w- c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll 2013-05-15 08:13 . 2013-05-15 08:13 3584 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-05-15 08:13 . 2013-05-15 08:13 3584 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll 2013-05-15 08:13 . 2013-05-15 08:13 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-version-l1-1-0.dll 2013-05-15 08:13 . 2013-05-15 08:13 3072 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-05-15 08:13 . 2013-05-15 08:13 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll 2013-05-15 08:13 . 2013-05-15 08:13 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll 2013-05-15 08:13 . 2013-05-15 08:13 2560 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-05-15 08:13 . 2013-05-15 08:13 2560 ---ha-w- c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll 2013-05-15 08:13 . 2013-05-15 08:13 1158144 ----a-w- c:\windows\SysWow64\XpsPrint.dll 2013-05-15 08:13 . 2013-05-15 08:13 10752 ---ha-w- c:\windows\SysWow64\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-05-15 08:13 . 2013-05-15 08:13 10752 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll 2013-05-15 08:13 . 2013-05-15 08:13 522752 ----a-w- c:\windows\system32\XpsGdiConverter.dll 2013-05-15 08:13 . 2013-05-15 08:13 465920 ----a-w- c:\windows\system32\WMPhoto.dll 2013-05-15 08:13 . 2013-05-15 08:13 364544 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll 2013-05-15 08:13 . 2013-05-15 08:13 2284544 ----a-w- c:\windows\SysWow64\msmpeg2vdec.dll 2013-05-15 08:13 . 2013-05-15 08:13 1682432 ----a-w- c:\windows\system32\XpsPrint.dll 2013-05-15 08:13 . 2013-05-15 08:13 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll 2013-05-15 08:13 . 2013-05-15 08:13 3928064 ----a-w- c:\windows\system32\d2d1.dll 2013-05-15 08:13 . 2013-05-15 08:13 363008 ----a-w- c:\windows\system32\dxgi.dll 2013-05-15 08:13 . 2013-05-15 08:13 2776576 ----a-w- c:\windows\system32\msmpeg2vdec.dll 2013-05-15 08:13 . 2013-05-15 08:13 2565120 ----a-w- c:\windows\system32\d3d10warp.dll 2013-05-15 08:13 . 2013-05-15 08:13 220160 ----a-w- c:\windows\SysWow64\d3d10core.dll 2013-05-15 08:13 . 2013-05-15 08:13 207872 ----a-w- c:\windows\SysWow64\WindowsCodecsExt.dll 2013-05-15 08:13 . 2013-05-15 08:13 1247744 ----a-w- c:\windows\SysWow64\DWrite.dll 2013-05-15 08:13 . 2013-05-15 08:13 1175552 ----a-w- c:\windows\system32\FntCache.dll 2013-05-15 08:13 . 2013-05-15 08:13 1080832 ----a-w- c:\windows\SysWow64\d3d10.dll 2013-05-15 08:13 . 2013-05-15 08:13 648192 ----a-w- c:\windows\system32\d3d10level9.dll 2013-05-15 08:13 . 2013-05-15 08:13 604160 ----a-w- c:\windows\SysWow64\d3d10level9.dll 2013-05-15 08:13 . 2013-05-15 08:13 3419136 ----a-w- c:\windows\SysWow64\d2d1.dll 2013-05-15 08:13 . 2013-05-15 08:13 333312 ----a-w- c:\windows\system32\d3d10_1core.dll 2013-05-15 08:13 . 2013-05-15 08:13 296960 ----a-w- c:\windows\system32\d3d10core.dll 2013-05-15 08:13 . 2013-05-15 08:13 293376 ----a-w- c:\windows\SysWow64\dxgi.dll 2013-05-15 08:13 . 2013-05-15 08:13 249856 ----a-w- c:\windows\SysWow64\d3d10_1core.dll 2013-05-15 08:13 . 2013-05-15 08:13 245248 ----a-w- c:\windows\system32\WindowsCodecsExt.dll 2013-05-15 08:13 . 2013-05-15 08:13 1988096 ----a-w- c:\windows\SysWow64\d3d10warp.dll 2013-05-15 08:13 . 2013-05-15 08:13 194560 ----a-w- c:\windows\system32\d3d10_1.dll 2013-05-15 08:13 . 2013-05-15 08:13 1643520 ----a-w- c:\windows\system32\DWrite.dll 2013-05-15 08:13 . 2013-05-15 08:13 161792 ----a-w- c:\windows\SysWow64\d3d10_1.dll . . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Spotify Web Helper"="c:\users\Johan\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2013-04-01 1104280] "Spotify"="c:\users\Johan\AppData\Roaming\Spotify\Spotify.exe" [2013-04-01 4480920] "HP Deskjet 3050A J611 series (NET)"="c:\program files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe" [2012-10-17 2573416] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "SuiteTray"="c:\program files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" [2011-09-20 341360] "BackupManagerTray"="c:\program files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" [2011-04-24 297280] "LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2011-07-01 1103440] "ArcadeMovieService"="c:\program files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe" [2011-08-26 177448] "AVG_UI"="c:\program files (x86)\AVG\AVG2013\avgui.exe" [2013-04-28 4408368] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576] "HP Software Update"="c:\program files (x86)\Hp\HP Software Update\HPWuSchd2.exe" [2011-10-28 49208] . [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "IsMyWinLockerReboot"="msiexec.exe" [2010-11-21 73216] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux"=wdmaud.drv . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] @="" . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "ROC_ROC_JULY_P1"="c:\program files (x86)\AVG Secure Search\ROC_ROC_JULY_P1.exe" / /PROMPT /CMPID=ROC_JULY_P1 . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x] R3 androidusb;SAMSUNG Android Composite ADB Interface Driver;c:\windows\system32\Drivers\ssadadb.sys;c:\windows\SYSNATIVE\Drivers\ssadadb.sys [x] R3 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\7.1.355.0\SeaPort.exe;c:\program files (x86)\Microsoft\BingBar\7.1.355.0\SeaPort.exe [x] R3 EgisTec Ticket Service;EgisTec Ticket Service;c:\program files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe;c:\program files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe [x] R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [x] R3 massfilter_hs;HS HandSet Mass Storage Filter Driver;c:\windows\system32\drivers\massfilter_hs.sys;c:\windows\SYSNATIVE\drivers\massfilter_hs.sys [x] R3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM);c:\windows\system32\DRIVERS\ssadbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssadbus.sys [x] R3 ssadmdfl;SAMSUNG Android USB Modem (Filter);c:\windows\system32\DRIVERS\ssadmdfl.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdfl.sys [x] R3 ssadmdm;SAMSUNG Android USB Modem Drivers;c:\windows\system32\DRIVERS\ssadmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssadmdm.sys [x] R3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM);c:\windows\system32\DRIVERS\ssadserd.sys;c:\windows\SYSNATIVE\DRIVERS\ssadserd.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x] R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x] R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x] S0 AVGIDSHA;AVGIDSHA;c:\windows\system32\DRIVERS\avgidsha.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsha.sys [x] S0 Avgloga;AVG Logging Driver;c:\windows\system32\DRIVERS\avgloga.sys;c:\windows\SYSNATIVE\DRIVERS\avgloga.sys [x] S0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgmfx64.sys [x] S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgrkx64.sys [x] S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x] S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdrivera.sys;c:\windows\SYSNATIVE\DRIVERS\avgidsdrivera.sys [x] S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys;c:\windows\SYSNATIVE\DRIVERS\avgldx64.sys [x] S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys;c:\windows\SYSNATIVE\DRIVERS\avgtdia.sys [x] S1 avgtp;avgtp;c:\windows\system32\drivers\avgtpx64.sys;c:\windows\SYSNATIVE\drivers\avgtpx64.sys [x] S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDFilter.sys [x] S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDNServ.sys [x] S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDVDisk.sys [x] S2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2013\avgidsagent.exe;c:\program files (x86)\AVG\AVG2013\avgidsagent.exe [x] S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2013\avgwdsvc.exe;c:\program files (x86)\AVG\AVG2013\avgwdsvc.exe [x] S2 BBSvc;BingBar Service;c:\program files (x86)\Microsoft\BingBar\7.1.355.0\BBSvc.exe;c:\program files (x86)\Microsoft\BingBar\7.1.355.0\BBSvc.exe [x] S2 DevoloNetworkService;devolo Network Service;c:\program files (x86)\devolo\dlan\devolonetsvc.exe;c:\program files (x86)\devolo\dlan\devolonetsvc.exe [x] S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe;c:\program files (x86)\Launch Manager\dsiwmis.exe [x] S2 ePowerSvc;ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [x] S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe;c:\program files (x86)\Acer\Registration\GREGsvc.exe [x] S2 Live Updater Service;Live Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe;c:\program files\Acer\Acer Updater\UpdaterService.exe [x] S2 NPF_devolo;NetGroup Packet Filter Driver (devolo);c:\windows\sysWOW64\drivers\npf_devolo.sys;c:\windows\sysWOW64\drivers\npf_devolo.sys [x] S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe;c:\program files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [x] S2 UNS;Intel® Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [x] S2 vToolbarUpdater15.2.0;vToolbarUpdater15.2.0;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.2.0\ToolbarUpdater.exe;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.2.0\ToolbarUpdater.exe [x] S3 HECIx64;Intel® Management Engine Interface;c:\windows\system32\drivers\HECIx64.sys;c:\windows\SYSNATIVE\drivers\HECIx64.sys [x] S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys;c:\windows\SYSNATIVE\DRIVERS\Impcd.sys [x] S3 IntcDAud;Intel® Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x] S3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C62x64.sys;c:\windows\SYSNATIVE\DRIVERS\L1C62x64.sys [x] S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\System32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x] . . --- Andere Services/Drivers In Geheugen --- . *NewlyCreated* - WS2IFSL . Inhoud van de 'Gedeelde Taken' map . 2013-06-13 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-28 09:31] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-08-15 167704] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-08-15 392472] "Persistence"="c:\windows\system32\igfxpers.exe" [2011-08-15 416024] "RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-06-09 11860072] "Power Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2011-08-02 1831016] . ------- Bijkomende Scan ------- . uStart Page = hxxp://www.google.be/ uLocal Page = c:\windows\system32\blank.htm mLocal Page = c:\windows\SysWOW64\blank.htm IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: E&xporteren naar Microsoft Excel - c:\progra~2\MICROS~4\Office12\EXCEL.EXE/3000 IE: Free YouTube Download - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm IE: Free YouTube to MP3 Converter - c:\program files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm TCP: DhcpNameServer = 195.130.131.131 195.130.130.3 . - - - - ORPHANS VERWIJDERD - - - - . Toolbar-Locked - (no file) Wow6432Node-HKLM-Run-<NO NAME> - (no file) HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start Toolbar-Locked - (no file) WebBrowser-{EBD898F8-FCF6-4694-BC3B-EABC7271EEB1} - (no file) HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe . . . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_7_700_224_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_7_700_224.ocx, 1" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\software\McAfee] "SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79, 00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\ . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ------------------------ Andere Aktieve Processen ------------------------ . c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe c:\program files (x86)\Launch Manager\LMutilps32.exe c:\program files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe c:\program files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe c:\program files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe . ************************************************************************** . Voltooingstijd: 2013-06-14 17:36:43 - machine werd herstart ComboFix-quarantined-files.txt 2013-06-14 15:36 . Pre-Run: 410.907.516.928 bytes beschikbaar Post-Run: 411.291.054.080 bytes beschikbaar . - - End Of File - - 8A84B6F1F02A35C53061196651D660CB D41D8CD98F00B204E9800998ECF8427E

Beste, Het opstarten gaat terug vlotter. Het scherm met de vermelding dat de laptop moet opstarten met systeemherstel komt voorlopig ook niet terug. Het enig wat ik merk is het laden van sites, dit is nog traag. Heb jij ook enige suggesties om mijn systeem toch beter te beveiligen want ik denk dat dit bij mij niet optimaal is. Alvast bedankt.

# AdwCleaner v2.303 - Verslag gemaakt op 13/06/2013 om 22:47:58 # Geactualiseerd op 08/06/2013 door Xplode # Besturingssysteem : Windows 7 Home Premium Service Pack 1 (64 bits) # Gebruiker : Johan - JOHAN-PC # Opstarten Modus : Normale modus # Gelanceerd vanaf : C:\Users\Johan\Desktop\adwcleaner.exe # Optie [Verwijderen] ***** [Diensten] ***** ***** [Files / Mappen] ***** Map Verwijderd : C:\Program Files (x86)\Search Results Toolbar Verwijderd bij het opstarten : C:\Program Files (x86)\Common Files\AVG Secure Search ***** [Register] ***** ***** [browsers] ***** -\\ Internet Explorer v10.0.9200.16611 [OK] Het register bevat geen enkele ongeoorloofde invoer. -\\ Google Chrome v [Onmogelijk de versie te verkrijgen] File : C:\Users\Johan\AppData\Local\Google\Chrome\User Data\Default\Preferences [OK] De file bevat geen enkele ongeoorloofde invoer. ************************* AdwCleaner[s1].txt - [931 octets] - [13/06/2013 22:47:58] ########## EOF - C:\AdwCleaner[s1].txt - [990 octets] ##########

Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 18:42:33, on 13-6-2013 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v10.0 (10.00.9200.16611) Boot mode: Normal Running processes: C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe C:\Users\Johan\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe C:\Program Files (x86)\Launch Manager\LManager.exe C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe C:\Program Files (x86)\AVG\AVG2013\avgui.exe C:\Program Files (x86)\AVG Secure Search\vprot.exe C:\Program Files (x86)\Launch Manager\LMworker.exe C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer! R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer! R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer! R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O4 - HKLM\..\Run: [suiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" O4 - HKLM\..\Run: [backupManagerTray] "C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" -h -k O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe O4 - HKLM\..\Run: [ArcadeMovieService] "C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe" O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG Secure Search\vprot.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [spotify Web Helper] "C:\Users\Johan\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" O4 - HKCU\..\Run: [spotify] "C:\Users\Johan\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart O4 - HKCU\..\Run: [HP Deskjet 3050A J611 series (NET)] "C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN34I1CJ3X05WK:NW" -scfn "HP Deskjet 3050A J611 series (NET)" -AutoStart 1 O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\RunOnce: [isMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\RunOnce: [isMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'Default user') O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~4\Office12\REFIEBAR.DLL O9 - Extra button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - (no file) O9 - Extra 'Tools' menuitem: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - (no file) O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} (Bitdefender QuickScan Control) - http://quickscan.bitdefender.com/qsax/qsax.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\15.2.0\ViProtocol.dll O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe O23 - Service: devolo Network Service (DevoloNetworkService) - devolo AG - C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: EgisTec Ticket Service - Egis Technology Inc. - C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe O23 - Service: ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Acer\Acer Updater\UpdaterService.exe O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: NTI IScheduleSvc - NTI Corporation - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: Intel® Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: vToolbarUpdater15.2.0 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.2.0\ToolbarUpdater.exe O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 11460 bytes Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Databaseversie: v2013.06.13.06 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 10.0.9200.16614 Johan :: JOHAN-PC [administrator] 13-6-2013 16:46:33 mbam-log-2013-06-13 (16-46-33).txt Scan type: Snelle scan Ingeschakelde scan opties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM Uitgeschakelde scan opties: P2P Objecten gescand: 212412 Verstreken tijd: 6 minuut/minuten, 14 seconde(n) Geheugenprocessen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Geheugenmodulen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Registersleutels gedetecteerd: 5 HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1ED9DA0-AFD0-4B90-AC6A-D3874F591014} (PUP.Datamngr) -> Succesvol in quarantaine geplaatst en verwijderd. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1ED9DA0-AFD0-4B90-AC6A-D3874F591014} (PUP.Datamngr) -> Succesvol in quarantaine geplaatst en verwijderd. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{F34C9277-6577-4DFF-B2D7-7D58092F272F} (PUP.Datamngr) -> Succesvol in quarantaine geplaatst en verwijderd. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{F34C9277-6577-4DFF-B2D7-7D58092F272F} (PUP.Datamngr) -> Succesvol in quarantaine geplaatst en verwijderd. HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F34C9277-6577-4DFF-B2D7-7D58092F272F} (PUP.Datamngr) -> Succesvol in quarantaine geplaatst en verwijderd. Registerwaarden gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Registerdata gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Mappen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Bestanden gedetecteerd: 2 C:\Users\Johan\AppData\Local\Temp\Rar$EX13.424\Nero 7.5.9.0 Ultra edition NL\Keygen\keygen.exe (RiskWare.Tool.HCK) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Users\Johan\AppData\Local\Temp\Rar$EX95.424\Nero 7.5.9.0 Ultra edition NL\Keygen\keygen.exe (RiskWare.Tool.HCK) -> Succesvol in quarantaine geplaatst en verwijderd. (einde)

Dit is het logbestand: Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 22:01:23, on 12-6-2013 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v10.0 (10.00.9200.16611) Boot mode: Normal Running processes: C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe C:\Users\Johan\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe C:\Program Files (x86)\Launch Manager\LManager.exe C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe C:\Program Files (x86)\AVG\AVG2013\avgui.exe C:\Program Files (x86)\AVG Secure Search\vprot.exe C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe C:\Program Files (x86)\Launch Manager\LMworker.exe C:\Program Files (x86)\Acer\clear.fi\MVP\clear.fiAgent.exe C:\Program Files (x86)\Acer\clear.fi\MVP\.\Kernel\DMR\DMREngine.exe C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer! R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer! R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer! R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: (no name) - {ebd898f8-fcf6-4694-bc3b-eabc7271eeb1} - (no file) F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file) O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\15.2.0.5\AVG Secure Search_toolbar.dll O2 - BHO: DataMngr - {C1ED9DA0-AFD0-4b90-AC6A-D3874F591014} - C:\PROGRA~2\SEARCH~1\Datamngr\BROWSE~1.DLL O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll O2 - BHO: DVDVideoSoft.WebPageAdjuster - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll O2 - BHO: Search-Results Toolbar - {f34c9277-6577-4dff-b2d7-7d58092f272f} - C:\PROGRA~2\SEARCH~1\Datamngr\SRTOOL~1\searchresultsDx.dll O3 - Toolbar: Search-Results Toolbar - {f34c9277-6577-4dff-b2d7-7d58092f272f} - C:\PROGRA~2\SEARCH~1\Datamngr\SRTOOL~1\searchresultsDx.dll O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\15.2.0.5\AVG Secure Search_toolbar.dll O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\7.1.355.0\BingExt.dll" (file missing) O4 - HKLM\..\Run: [suiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" O4 - HKLM\..\Run: [backupManagerTray] "C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe" -h -k O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe O4 - HKLM\..\Run: [ArcadeMovieService] "C:\Program Files (x86)\Acer\clear.fi\Movie\clear.fiMovieService.exe" O4 - HKLM\..\Run: [DATAMNGR] C:\PROGRA~2\SEARCH~1\Datamngr\DATAMN~1.EXE O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG Secure Search\vprot.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [spotify Web Helper] "C:\Users\Johan\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" O4 - HKCU\..\Run: [spotify] "C:\Users\Johan\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart O4 - HKCU\..\Run: [HP Deskjet 3050A J611 series (NET)] "C:\Program Files\HP\HP Deskjet 3050A J611 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN34I1CJ3X05WK:NW" -scfn "HP Deskjet 3050A J611 series (NET)" -AutoStart 1 O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\RunOnce: [isMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\RunOnce: [isMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'Default user') O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~4\Office12\REFIEBAR.DLL O9 - Extra button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll O9 - Extra 'Tools' menuitem: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} (Bitdefender QuickScan Control) - http://quickscan.bitdefender.com/qsax/qsax.cab O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file) O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\15.2.0\ViProtocol.dll O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O20 - AppInit_DLLs: c:\progra~3\wincert\win32c~1.dll O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe O23 - Service: devolo Network Service (DevoloNetworkService) - devolo AG - C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: EgisTec Ticket Service - Egis Technology Inc. - C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe O23 - Service: ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Acer\Acer Updater\UpdaterService.exe O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: NBService - Nero AG - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: NTI IScheduleSvc - NTI Corporation - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: Intel® Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: vToolbarUpdater15.2.0 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.2.0\ToolbarUpdater.exe O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 13205 bytes

Ik heb een acer aspire 7739Z met windows 7 home premium (nu reeds 1,5 jaar) Bij het opstarten verschijnt er regelmatig dat de computer moet heropgestart worden met systeemherstel. Dit gebeurt meer en meer. Als dan de laptop toch opgestart is kan ik soms IE niet openen. Dan verschijnt de vermelding dat IE niet meer werkt. Na enkele malen geprobeerd te hebben doet IE het dan toch. Ook de netverbindingen zijn traag. Ik mag dan wel een perfecte signaalsterkte hebben toch duurt het lang eer dat een site zich geopend heeft. Dit is ooit anders geweest. Een backup heb ik niet gemaakt van het systeem, toen de laptop nieuw was, als daar om gevraagd werd. Een installatie cd van windows 7 Home Premium was er ook niet bij toen hem aangekocht heb. Wat zou er kunnen mis zijn? HELP mij !!! Alvast bedankt.

Oké, dan toch eens beter gekeken dan mijn neus lang was...... Heb het gevonden, dus bij deze is dit probleem opgelost. Bedankt om te helpen !!!

Heb de software gedownload en geinstalleerd. Printer werkt maar bij de instellingen kan ik de afdrukkwaliteit niet meer aanpassen (Klad, snal normaal, snel, best,...)..............

Dat is het juist, als ik de cd in het Dvd-Rw-station (E) steek kan ik via verkenner niets terug vinden. Ik hoor de installatie-cd wel draaien maar dat is maar even. Dan stopt het. En in verkenner zie ik achter station E dan niets. Bij een andere dvd lukt dit wel.

Ik heb zopas een nieuwe printer gekocht. Alles verliep goed tot aan het installeren van de software. De cd wordt niet automatisch opgestart. In verkenner staat bij het DVD-rw-station geen inhoud van de cd, in dit geval de inhoud van de installatie cd van de printer. Dus kan ik ook niet op setup klikken. Raar geval niet !!! Mijn nieuwe printer is een HP Deskjet 3050A all-in-one J611 series. Het besturingssysteem is Vista 32-bits. Mijn vorige printer was ook een Hp, dus heb ik eerst de oude software verwijderd om de nieuwe te intalleren. Wie kan mij helpen.

Jaaa, inderdaad probleem is opgelost. Sorry voor het late antwoord. De Extender doet z'n werk. Bedankt voor de info. Grtz