EddyC

4 mei 2013

heb ondertussen een bios update gedaan (had het laatste bericht hier nog niet gezien....

heb een HP, heb de aanwijzigingen gevolgd die ze op hun helpdesk gaven

niet ALLE hardware gaf problemen, want een usb-stick kon ik wel aansluiten, maar met de bios update te doen is het probleem toch plots opgelost

Dit was de tweede keer dat ik met problemen zat, bedankt alweer, dank zij jullie zijn ze weer opgelost

4 mei 2013

ik merk nu ook dat m'n sd kaart van mijn fototoestel niet meer wordt herkend, kan m'n foto's dus niet meer overzetten op mijn computer:dong:

4 mei 2013

de verkoper zegt dat een adapter niet van toepassing is hier, de muis is al rechtstreeks aangesloten op de usb-poort

wat nu???

2 mei 2013

bedankt, misschien komt hier iemand anders uitleggen hoe een bios update te doen, in ieder geval zal ik van 't weekend eens gaan kijken voor zo'n adapter, alvast bedankt

2 mei 2013

muis is inderdaad aangesloten aan usb

maar idd 't is bij alle muizen hetzelfde, hoe moet ik een bios update doen? ben complete leek in computertechnologie, als ik er op kan werken ben ik al content, maar o wee als er iets niet marcheert dus....

1 mei 2013

goeiemorgen

sinds gisteravond werkt mijn Microsoft Optical Mouse 3000 niet meer

In februari heb ik hetzelfde probleem gehad, heb toen ook een nieuwe muis geprobeerd, maar die werd ook niet herkend. Drivers installeren via de Microsoft download site helpt niet

Toen werd dat probleem op één of andere manier plots opgelost, werkte de muis terug, maar toen werkte de helft van mijn PC niet meer zoals het hoort. Heb hier toen ook gepost, en het heeft heel wat moeite en antwoorden van uw experts gekost om dit in orde te krijgen.

Nu durf ik uit mezelf niets meer te proberen om de muis terug aan de praat te krijgen, bang dat alles weer op hetzelfde gaat uitdraaien als vorige keer

Kan er iemand mij helpen aub, ben absoluut niet bedreven in het werken zonder muis....

3 maart 2013

Nogmaals mijn hartelijke dank !

1 maart 2013

Hoera, de problemen lijken opgelost. Webcam werkt weer, msn werkt en configuratiescherm ook. Wat een geluk op zulk schitterend forum terecht te zijn gekomen, met zulke bekwame mensen. Mijn eeuwige dank in ieder geval. Kan er mij nu nog iemand zeggen in gewone taal (), wat de problemen waren, die de scan heeft gerepareerd? Nogmaals mijn grote dank !!!

Ik klikte al op "opgelost", maar zag dan dat er niet meer zou kunnen gereageerd worden, zou toch graag weten "wat" die problemen veroorzaakt heeft. Zal daarna markeren als opgelost.

1 maart 2013

goeienavond, hierbij het resultaat van de scan[ATTACH]24406[/ATTACH]

sfcdetails.txt

28 februari 2013

de test met HD tune gaf als resultaat uitsluitend groene blokjes

de volgende test doe ik morgenavond,

@kape : die test met speccy heeft dus ook geen uitsluitsel gebracht blijkbaar?

27 februari 2013

printscreen werkt blijkbaar ook niet, maar 'k heb met fototoestel een foto gemaakt

dit is wat ik krijg als ik bijvoorbeeld bureaubladafbeelding wil wijzigen via configuratiescherm, wil ik er iets anders openen, krijg ik soms dezelfde foutmelding, maar andere nummers uiteraard, of soms dus helemaal geen reactie op muisklik

wat betreft herstelpunt.... toen mijn muis niet meer werkte,heb ik idd een herstelpunt aangemaakt (toen ging dat nog), daarna werkte de muis wel, maar kwamen dus alle andere problemen die ik hier beschreven heb

Wat Java betreft, Kane heeft nog niet terug gereageerd, dus zullen afwachten, in ieder geval bedankt dat jullie mee naar een oplossing zoeken

26 februari 2013

http://speccy.piriform.com/results/3pj0eHzAW7m3NgPIcrubECF

hoop doet leven

25 februari 2013

Welke problemen heb je nu nog, nà deze behandelingen ?

Nog identiek dezelfde.... , in configuratiescherm ofwel foutmeldingen ofwel helemaal geen reactie, behalve openen van de lijst met programma's om er te kunnen verwijderen, maar dat was ook zo voor de behandelingen, msn onmogelijk aan te melden, naam ingeven duurt 1 minuut voor 2 letters, als je dan geduld hebt tot je naam en wachtwoord hebt ingegeven, zegt ie dat hij u niet kan aanmelden, bovendien wil je dan msn kader sluiten, kruipt de muiscursor achter het kader, met veel geluk sla je er in om op het kruisje te klikken. Spijtig genoeg dus nog alles hetzelfde

25 februari 2013

ComboFix 13-02-24.01 - Nadia 25/02/2013 11:32:52.1.2 - x86

Microsoft Windows 7 Édition Familiale Premium 6.1.7600.0.1252.32.1036.18.1976.758 [GMT 1:00]

Gestart vanuit: c:\users\Nadia\Desktop\ComboFix.exe

SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

* Nieuw herstelpunt werd aangemaakt

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\users\Nadia\GoToAssistDownloadHelper.exe

.

(((((((((((((((((((( Bestanden Gemaakt van 2013-01-25 to 2013-02-25 ))))))))))))))))))))))))))))))

.

2013-02-24 22:06 . 2013-02-24 21:59 24064 ----a-w- c:\windows\zoek-delete.exe

2013-02-24 09:26 . 2013-02-24 09:26 -------- d-----w- c:\users\Nadia\AppData\Local\TrafficSpaceLLC

2013-02-24 09:23 . 2013-02-24 09:23 -------- d-----w- c:\program files\Video Download Converter

2013-02-24 09:23 . 2013-02-24 09:23 -------- d-----w- c:\users\Nadia\AppData\Local\VideoDownloadConverter_4z

2013-02-24 09:23 . 2013-02-24 21:40 -------- d-----w- c:\program files\VideoDownloadConverter_4z

2013-02-22 20:10 . 2012-12-14 15:49 21104 ----a-w- c:\windows\system32\drivers\mbam.sys

2013-02-22 20:10 . 2013-02-22 20:10 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware

2013-02-22 18:51 . 2013-02-22 18:51 388096 ----a-r- c:\users\Nadia\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

2013-02-22 18:51 . 2013-02-22 18:51 -------- d-----w- c:\program files\Trend Micro

2013-02-20 20:26 . 2013-02-20 20:26 94112 ----a-w- c:\windows\system32\WindowsAccessBridge.dll

2013-02-20 20:26 . 2013-02-20 20:26 -------- d-----w- c:\program files\Java

2013-02-20 20:01 . 2013-02-20 20:01 -------- d-----w- c:\users\Nadia\AppData\Roaming\Malwarebytes

2013-02-20 20:00 . 2013-02-20 20:00 -------- d-----w- c:\programdata\Malwarebytes

2013-02-20 19:56 . 2013-02-20 19:56 -------- d-----w- c:\users\Nadia\AppData\Local\Programs

2013-02-17 23:52 . 2013-02-17 23:52 -------- d-----w- c:\windows\fr

2013-02-17 23:51 . 2012-03-08 17:32 39272 ----a-w- c:\windows\system32\drivers\fssfltr.sys

2013-02-17 23:46 . 2013-02-17 23:53 -------- d-----w- c:\program files\Windows Live

2013-02-17 23:45 . 2013-02-17 23:45 15712 ----a-w- c:\program files\Common Files\Windows Live\.cache\dba70aae1ce0d6806\MeshBetaRemover.exe

2013-02-17 23:45 . 2013-02-17 23:45 89944 ----a-w- c:\program files\Common Files\Windows Live\.cache\d8e0b6911ce0d6805\DSETUP.dll

2013-02-17 23:45 . 2013-02-17 23:45 537432 ----a-w- c:\program files\Common Files\Windows Live\.cache\d8e0b6911ce0d6805\DXSETUP.exe

2013-02-17 23:45 . 2013-02-17 23:45 1801048 ----a-w- c:\program files\Common Files\Windows Live\.cache\d8e0b6911ce0d6805\dsetup32.dll

2013-02-17 23:45 . 2013-02-17 23:45 94040 ----a-w- c:\program files\Common Files\Windows Live\.cache\d5a117a71ce0d6804\DSETUP.dll

2013-02-17 23:45 . 2013-02-17 23:45 525656 ----a-w- c:\program files\Common Files\Windows Live\.cache\d5a117a71ce0d6804\DXSETUP.exe

2013-02-17 23:45 . 2013-02-17 23:45 1691480 ----a-w- c:\program files\Common Files\Windows Live\.cache\d5a117a71ce0d6804\dsetup32.dll

2013-02-17 01:14 . 2010-06-02 03:55 74072 ----a-w- c:\windows\system32\XAPOFX1_5.dll

2013-02-17 01:14 . 2010-06-02 03:55 527192 ----a-w- c:\windows\system32\XAudio2_7.dll

2013-02-17 01:14 . 2010-05-26 10:41 248672 ----a-w- c:\windows\system32\d3dx11_43.dll

2013-02-17 01:14 . 2010-05-26 10:41 2106216 ----a-w- c:\windows\system32\D3DCompiler_43.dll

2013-02-17 00:59 . 2013-02-19 20:55 -------- d-----w- C:\inetpub

2013-02-17 00:14 . 2009-09-04 16:44 69464 ----a-w- c:\windows\system32\XAPOFX1_3.dll

2013-02-17 00:14 . 2009-09-04 16:44 515416 ----a-w- c:\windows\system32\XAudio2_5.dll

2013-02-17 00:14 . 2009-09-04 16:29 453456 ----a-w- c:\windows\system32\d3dx10_42.dll

2013-02-17 00:14 . 2006-11-29 12:06 3426072 ----a-w- c:\windows\system32\d3dx9_32.dll

2013-02-15 23:12 . 2013-02-15 23:12 -------- d-----w- c:\program files\Synaptics

2013-02-15 22:17 . 2013-02-15 22:17 -------- d-----w- c:\windows\system32\EventProviders

2013-02-15 22:17 . 2013-02-16 23:00 -------- d-----w- C:\bc03acf1fbb7de7fa0d68f112d

2013-02-15 22:01 . 2013-02-15 23:37 -------- d-----w- c:\users\Nadia\AppData\Local\ElevatedDiagnostics

2013-02-12 19:55 . 2013-01-04 03:00 2345984 ----a-w- c:\windows\system32\win32k.sys

2013-02-12 19:55 . 2013-01-05 05:02 3957608 ----a-w- c:\windows\system32\ntkrnlpa.exe

2013-02-12 19:55 . 2013-01-05 05:02 3902312 ----a-w- c:\windows\system32\ntoskrnl.exe

2013-02-12 19:55 . 2013-01-04 04:55 1287528 ----a-w- c:\windows\system32\drivers\tcpip.sys

2013-02-12 19:55 . 2013-01-04 04:55 187240 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS

2013-01-27 08:53 . 2013-01-27 08:53 -------- d-----w- c:\program files\Common Files\Skype

2013-01-26 19:41 . 2013-01-26 19:41 -------- d-----w- c:\users\Nadia\AppData\Local\Facebook

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2013-02-25 10:13 . 2011-03-28 17:36 19696 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll

2013-02-20 20:26 . 2012-05-09 18:13 782240 ----a-w- c:\windows\system32\deployJava1.dll

2013-02-20 20:26 . 2012-05-09 18:13 861088 ----a-w- c:\windows\system32\npDeployJava1.dll

2013-02-13 04:09 . 2012-04-28 17:23 71024 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2013-02-13 04:09 . 2012-04-28 17:23 691568 ----a-w- c:\windows\system32\FlashPlayerApp.exe

2012-12-16 14:25 . 2012-12-20 22:56 295424 ----a-w- c:\windows\system32\atmfd.dll

2012-12-16 14:25 . 2012-12-20 22:56 34304 ----a-w- c:\windows\system32\atmlib.dll

2012-12-07 05:04 . 2013-01-09 18:31 308736 ----a-w- c:\windows\system32\Wpc.dll

2012-12-07 04:57 . 2013-01-09 18:31 2576384 ----a-w- c:\windows\system32\gameux.dll

2012-12-07 03:21 . 2013-01-09 18:31 45568 ----a-w- c:\windows\system32\oflc-nz.rs

2012-12-07 03:21 . 2013-01-09 18:31 43520 ----a-w- c:\windows\system32\csrr.rs

2012-12-07 03:21 . 2013-01-09 18:31 44544 ----a-w- c:\windows\system32\pegibbfc.rs

2012-12-07 03:21 . 2013-01-09 18:31 30720 ----a-w- c:\windows\system32\usk.rs

2012-12-07 03:21 . 2013-01-09 18:31 23552 ----a-w- c:\windows\system32\oflc.rs

2012-12-07 03:21 . 2013-01-09 18:31 20480 ----a-w- c:\windows\system32\pegi-pt.rs

2012-12-07 03:21 . 2013-01-09 18:31 20480 ----a-w- c:\windows\system32\pegi.rs

2012-12-07 03:21 . 2013-01-09 18:31 20480 ----a-w- c:\windows\system32\pegi-fi.rs

2012-12-07 03:21 . 2013-01-09 18:31 46592 ----a-w- c:\windows\system32\fpb.rs

2012-12-07 03:21 . 2013-01-09 18:31 21504 ----a-w- c:\windows\system32\grb.rs

2012-12-07 03:21 . 2013-01-09 18:31 51712 ----a-w- c:\windows\system32\esrb.rs

2012-12-07 03:21 . 2013-01-09 18:31 55296 ----a-w- c:\windows\system32\cero.rs

2012-12-07 03:21 . 2013-01-09 18:31 40960 ----a-w- c:\windows\system32\cob-au.rs

2012-12-07 03:21 . 2013-01-09 18:31 15360 ----a-w- c:\windows\system32\djctq.rs

2013-02-19 19:13 . 2013-02-19 19:13 263064 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\MOBK]

@="{3c3f3c1a-9153-7c05-f938-622e7003894d}"

[HKEY_CLASSES_ROOT\CLSID\{3c3f3c1a-9153-7c05-f938-622e7003894d}]

2010-04-13 18:11 2872120 ----a-w- c:\program files\McAfee Online Backup\MOBKshell.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\MOBK2]

@="{e6ea1d7d-144e-b977-98c4-84c53c1a69d0}"

[HKEY_CLASSES_ROOT\CLSID\{e6ea1d7d-144e-b977-98c4-84c53c1a69d0}]

2010-04-13 18:11 2872120 ----a-w- c:\program files\McAfee Online Backup\MOBKshell.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\MOBK3]

@="{b4caf489-1eec-c617-49ad-8d7088598c06}"

[HKEY_CLASSES_ROOT\CLSID\{b4caf489-1eec-c617-49ad-8d7088598c06}]

2010-04-13 18:11 2872120 ----a-w- c:\program files\McAfee Online Backup\MOBKshell.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Facebook Update"="c:\users\Nadia\AppData\Local\Facebook\Update\FacebookUpdate.exe" [2013-01-26 138096]

"Skype"="c:\program files\Skype\Phone\Skype.exe" [2013-01-08 18705664]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-10-24 138008]

"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-10-24 171288]

"Persistence"="c:\windows\system32\igfxpers.exe" [2011-10-24 172824]

"YouCam Service"="c:\program files\CyberLink\YouCam\YouCamService.exe" [2011-09-09 247016]

"Adobe Photo Downloader"="c:\program files\Adobe\Photoshop Elements 5.0\apdproxy.exe" [2006-09-14 61440]

"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-12-03 946352]

"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]

"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]

.

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

McAfee Online Backup Etat.lnk - c:\program files\McAfee Online Backup\MOBKstat.exe [2010-4-13 3045176]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 0 (0x0)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableLUA"= 0 (0x0)

"EnableUIADesktopToggle"= 0 (0x0)

"PromptOnSecureDesktop"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

"aux1"=wdmaud.drv

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

@=""

.

R2 BBSvc;BingBar Service;c:\program files\Microsoft\BingBar\7.1.391.0\BBSvc.exe [x]

R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [x]

R2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [x]

R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [x]

R3 RTL8167;Pilote Realtek 8167 NT;c:\windows\system32\DRIVERS\Rt86win7.sys [x]

R3 WatAdminSvc;Service Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [x]

R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]

S1 MOBKFilter;MOBKFilter;c:\windows\system32\DRIVERS\MOBK.sys [x]

S2 MBAMScheduler;MBAMScheduler;c:\program files\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]

S2 MOBKbackup;1%;c:\program files\McAfee Online Backup\MOBKbackup.exe [x]

S3 BBUpdate;BBUpdate;c:\program files\Microsoft\BingBar\7.1.391.0\SeaPort.exe [x]

S3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys [x]

S3 IntcHdmiAddService;Intel® High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [x]

S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]

S3 rtl8192se;Realtek Wireless LAN 802.11n PCI-E NIC NT Driver;c:\windows\system32\DRIVERS\rtl8192se.sys [x]

S3 rtsuvc;HP Webcam [2 MP Fixed];c:\windows\system32\DRIVERS\rtsuvc.sys [x]

.

Inhoud van de 'Gedeelde Taken' map

.

2013-02-25 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-28 04:09]

.

2013-01-26 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1063682820-3390088728-3065393947-1003Core.job

- c:\users\Nadia\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-01-26 19:40]

.

2013-01-26 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1063682820-3390088728-3065393947-1003UA.job

- c:\users\Nadia\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-01-26 19:40]

.

2013-02-25 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2012-05-15 18:54]

.

2013-01-26 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2012-05-15 18:54]

.

------- Bijkomende Scan -------

.

IE: &Verzenden naar OneNote - c:\progra~1\MIF5BA~1\Office14\ONBttnIE.dll/105

IE: E&xporteren naar Microsoft Excel - c:\progra~1\MIF5BA~1\Office14\EXCEL.EXE/3000

TCP: DhcpNameServer = 192.168.178.1

FF - ProfilePath - c:\users\Nadia\AppData\Roaming\Mozilla\Firefox\Profiles\uhoon77w.default\

FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?btnG=Google+Search&q=

FF - prefs.js: browser.search.selectedEngine - Google

FF - prefs.js: browser.startup.homepage - hxxp://www.google.com

FF - prefs.js: keyword.URL - hxxp://www.google.com/search?btnG=Google+Search&q=

FF - prefs.js: network.proxy.type - 0

FF - ExtSQL: 2013-02-24 10:23; 4zffxtbr@VideoDownloadConverter_4z.com; c:\users\Nadia\AppData\Roaming\Mozilla\Firefox\Profiles\uhoon77w.default\extensions\4zffxtbr@VideoDownloadConverter_4z.com

.

- - - - ORPHANS VERWIJDERD - - - -

.

HKLM-Run-VideoDownloadConverter Search Scope Monitor - c:\progra~1\VIDEOD~2\bar\1.bin\4zsrchmn.exe

AddRemove-Softonic - c:\program files\Softonic\Softonic\1.5.24.3\uninstall.exe

.

--------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

.

[HKEY_USERS\S-1-5-21-1063682820-3390088728-3065393947-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="WindowsLiveMail.Email.1"

.

[HKEY_USERS\S-1-5-21-1063682820-3390088728-3065393947-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]

@Denied: (2) (LocalSystem)

"Progid"="WindowsLiveMail.VCard.1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_5_502_149_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_5_502_149_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

"MSCurrentCountry"=dword:000000b5

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Voltooingstijd: 2013-02-25 11:42:35

ComboFix-quarantined-files.txt 2013-02-25 10:42

.

Pre-Run: 268.912.717.824 octets libres

Post-Run: 268.804.718.592 octets libres

.

- - End Of File - - CE477705FF796CB5A4DEAAC70B586B03

24 februari 2013

Zoek.exe Version 4.0.0.1 Updated 23-02-2013

Tool run by Nadia on zo 24/02/2013 at 22:59:02,51.

Microsoft Windows 7 Édition Familiale Premium 6.1.7600 x86

Running in: Normal Mode Internet Access Detected

==== System Restore Info ======================

24/02/2013 23:00:22 System Restore is disabled.

==== Running Processes ======================

C:\Windows\system32\csrss.exe

C:\Windows\system32\wininit.exe

C:\Windows\system32\csrss.exe

C:\Windows\system32\services.exe

C:\Windows\system32\lsass.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\winlogon.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe

C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

C:\Program Files\Microsoft\BingBar\7.1.391.0\BBSvc.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe

C:\Program Files\McAfee Online Backup\MOBKbackup.exe

C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe

C:\Windows\system32\svchost.exe -k imgsvc

C:\Windows\system32\svchost.exe -k bthsvcs

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Windows\system32\taskhost.exe

C:\Program Files\McAfee Online Backup\MOBKbackup.exe

C:\Windows\system32\taskeng.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Program Files\Google\Update\GoogleUpdate.exe

C:\Windows\System32\igfxtray.exe

C:\Windows\System32\igfxpers.exe

C:\Program Files\Adobe\Photoshop Elements 5.0\apdproxy.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\Users\Nadia\AppData\Local\Facebook\Update\FacebookUpdate.exe

C:\Program Files\Skype\Phone\Skype.exe

C:\Program Files\McAfee Online Backup\MOBKstat.exe

C:\Windows\system32\SearchIndexer.exe

C:\Program Files\Windows Media Player\wmpnetwk.exe

C:\Windows\System32\svchost.exe -k LocalServicePeerNet

C:\Windows\system32\DllHost.exe

C:\Windows\System32\svchost.exe -k secsvcs

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Mozilla Firefox\plugin-container.exe

C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_6_602_168.exe

C:\Windows\servicing\TrustedInstaller.exe

C:\Users\Nadia\AppData\Local\Temp\Temp1_zoek-1.zip\zoek.exe

C:\Windows\system32\conhost.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Program Files\Microsoft\BingBar\7.1.391.0\SeaPort.exe

C:\Windows\system32\DllHost.exe

==== Installed Programs ======================

@C:\\Program Files\\Intel\\Intel® Graphics Media Accelerator Driver\\Uninstall\\Setup.exe,-2018

Adobe AIR

Adobe Flash Player 11 ActiveX

Adobe Flash Player 11 Plugin

Adobe Help Center 2.1

Adobe Photoshop Elements 5.0

Adobe Reader X (10.1.6) - Nederlands

Bing Bar

Compl‚ment Messenger

Contr“le ActiveX Windows Live Mesh pour connexions … distance

CyberLink YouCam 5

D3DX10

Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition

Facebook Video Calling 1.2.0.287

Galerie de photos Windows Live

Google Earth Plug-in

Google Update Helper

HiJackThis

HP Webcam Driver

Intel® Graphics Media Accelerator Driver

Java 7 Update 15

Java Auto Updater

JavaFX 2.1.1

Junk Mail filter update

Malwarebytes Anti-Malware version 1.70.0.1100

McAfee Online Backup

McAfee Virtual Technician

Mesh Runtime

Microsoft .NET Framework 4 Client Profile

Microsoft .NET Framework 4 Client Profile FRA Language Pack

Microsoft Application Error Reporting

Microsoft Office 2010 Service Pack 1 (SP1)

Microsoft Office Access MUI (Dutch) 2010

Microsoft Office Excel MUI (Dutch) 2010

Microsoft Office Groove MUI (Dutch) 2010

Microsoft Office InfoPath MUI (Dutch) 2010

Microsoft Office OneNote MUI (Dutch) 2010

Microsoft Office Outlook MUI (Dutch) 2010

Microsoft Office PowerPoint MUI (Dutch) 2010

Microsoft Office Professional Plus 2010

Microsoft Office Proof (Dutch) 2010

Microsoft Office Proof (English) 2010

Microsoft Office Proof (French) 2010

Microsoft Office Proof (German) 2010

Microsoft Office Proofing (Dutch) 2010

Microsoft Office Publisher MUI (Dutch) 2010

Microsoft Office Shared MUI (Dutch) 2010

Microsoft Office Word MUI (Dutch) 2010

Microsoft Silverlight

Microsoft Visual C++ 2005 Redistributable

Module linguistique Microsoft .NET Framework 4 Client Profile FRA

Mozilla Firefox 19.0 (x86 fr)

Mozilla Maintenance Service

MSVCRT

myphotobook.be

Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)

Security Update for Microsoft Excel 2010 (KB2597126) 32-Bit Edition

Security Update for Microsoft InfoPath 2010 (KB2687417) 32-Bit Edition

Security Update for Microsoft InfoPath 2010 (KB2687436) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2553091)

Security Update for Microsoft Office 2010 (KB2553096)

Security Update for Microsoft Office 2010 (KB2553371) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2553447) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2589320) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2597986) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2598243) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2687501) 32-Bit Edition

Security Update for Microsoft Office 2010 (KB2687510) 32-Bit Edition

Security Update for Microsoft Visio 2010 (KB2687508) 32-Bit Edition

Security Update for Microsoft Visio Viewer 2010 (KB2598287) 32-Bit Edition

Security Update for Microsoft Word 2010 (KB2760410) 32-Bit Edition

Security Update for Module linguistique Microsoft .NET Framework 4 Client Profile FRA (KB2518870)

Shared C Run-time for x86

Skype Click to Call

SkypeT 6.1

Softonic toolbar on IE

Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217)

Update for Microsoft Office 2010 (KB2553065)

Update for Microsoft Office 2010 (KB2553092)

Update for Microsoft Office 2010 (KB2553181) 32-Bit Edition

Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition

Update for Microsoft Office 2010 (KB2553270) 32-Bit Edition

Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition

Update for Microsoft Office 2010 (KB2553378) 32-Bit Edition

Update for Microsoft Office 2010 (KB2566458)

Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition

Update for Microsoft Office 2010 (KB2598242) 32-Bit Edition

Update for Microsoft Office 2010 (KB2687509) 32-Bit Edition

Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition

Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition

Update for Microsoft OneNote 2010 (KB2687277) 32-Bit Edition

Update for Microsoft Outlook 2010 (KB2597090) 32-Bit Edition

Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition

Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition

Update for Microsoft PowerPoint 2010 (KB2598240) 32-Bit Edition

Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition

Video Download Converter version 1.0.0.0

VideoDownloadConverter Toolbar

Windows Live Communications Platform

Windows Live Family Safety

Windows Live ID Sign-in Assistant

Windows Live Installer

Windows Live Mail

Windows Live Mesh

Windows Live Messenger

Windows Live Messenger Companion Core

Windows Live MIME IFilter

Windows Live Movie Maker

Windows Live Photo Common

Windows Live Photo Gallery

Windows Live PIMT Platform

Windows Live Remote Client

Windows Live Remote Client Resources

Windows Live Remote Service

Windows Live Remote Service Resources

Windows Live SOXE

Windows Live SOXE Definitions

Windows Live UX Platform

Windows Live UX Platform Language Pack

Windows Live Writer

Windows Live Writer Resources

==== Reset Hosts File ======================

#

# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.

#

# This file contains the mappings of IP addresses to host names. Each

# entry should be kept on an individual line. The IP address should

# be placed in the first column followed by the corresponding host name.

# The IP address and the host name should be separated by at least one

# space.

#

# Additionally, comments (such as these) may be inserted on individual

# lines or following the machine name denoted by a '#' symbol.

#

# For example:

#

# 102.54.94.97 rhino.acme.com # source server

# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.

127.0.0.1 localhost

::1 localhost

==== FireFox Fix ======================

Deleted from C:\Users\Eddy Coussement\AppData\Roaming\Mozilla\Firefox\Profiles\tkqmh9fs.default\prefs.js:

user_pref("browser.startup.homepage", "http://www.google.com");

user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");

user_pref("browser.newtab.url", "http://www.google.com/");

user_pref("browser.search.defaultengine", "Google");

user_pref("browser.search.defaultenginename", "Google");

user_pref("browser.search.selectedEngine", "Google");

user_pref("browser.search.order.1", "Google");

user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");

user_pref("browser.search.suggest.enabled", true);

user_pref("browser.search.useDBForOrder", true);

Added to C:\Users\Eddy Coussement\AppData\Roaming\Mozilla\Firefox\Profiles\tkqmh9fs.default\prefs.js:

user_pref("browser.startup.homepage", "http://www.google.com");

user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");

user_pref("browser.newtab.url", "http://www.google.com/");

user_pref("browser.search.defaultengine", "Google");

user_pref("browser.search.defaultenginename", "Google");

user_pref("browser.search.selectedEngine", "Google");

user_pref("browser.search.order.1", "Google");

user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");

user_pref("browser.search.suggest.enabled", true);

user_pref("browser.search.useDBForOrder", true);

Deleted from C:\Users\Nadia\AppData\Roaming\Mozilla\Firefox\Profiles\uhoon77w.default\prefs.js:

user_pref("browser.startup.homepage", "http://www.google.com");

user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");

user_pref("browser.newtab.url", "http://www.google.com/");

user_pref("browser.search.defaultengine", "Google");

user_pref("browser.search.defaultenginename", "Google");

user_pref("browser.search.selectedEngine", "Google");

user_pref("browser.search.order.1", "Google");

user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");

user_pref("browser.search.useDBForOrder", true);

Added to C:\Users\Nadia\AppData\Roaming\Mozilla\Firefox\Profiles\uhoon77w.default\prefs.js:

user_pref("browser.startup.homepage", "http://www.google.com");

user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");

user_pref("browser.newtab.url", "http://www.google.com/");

user_pref("browser.search.defaultengine", "Google");

user_pref("browser.search.defaultenginename", "Google");

user_pref("browser.search.selectedEngine", "Google");

user_pref("browser.search.order.1", "Google");

user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");

user_pref("browser.search.suggest.enabled", true);

user_pref("browser.search.useDBForOrder", true);

==== System Specs ======================

Windows: Windows 7 Home Premium Edition (Build 7600)

Internet Explorer: 9.0.8112.16421

Memory (RAM): 1977 MB

CPU Info: Pentium® Dual-Core CPU T4500 @ 2.30GHz

CPU Speed: 2308,7 MHz

Sound Card: Haut-parleurs (Périphérique Hig |

Display Adapters: Mobile Intel® 4 Series Express Chipset Family | Mobile Intel® 4 Series Express Chipset Family | RDPDD Chained DD | RDP Encoder Mirror Driver | RDP Reflector Display Driver

Monitors: 1x; Moniteur Plug-and-Play générique |

Screen Resolution: 1366 X 768 - 32 bit

Network: Network Present

Network Adapters: Realtek RTL8191SE 802.11b/g/n WiFi Adapter | Périphérique Bluetooth (réseau personnel) | Realtek PCIe FE Family Controller

CD / DVD Drives: 1x (D: | ) D: hp DVDRAM GT30L

Ports: COM3 LPT Port NOT Present.

Mouse: 4 Button Wheel Mouse Present

Hard Disks: C: 298,0GB

Hard Disks - Free: C: 250,6GB

Manufacturer *: Hewlett-Packard

BIOS Info: AT/AT COMPATIBLE | 09/15/09 | HPQOEM - f

Time Zone: Paris, Madrid

Motherboard *: Hewlett-Packard 1526

Sun Java version: 1.7.0_15

Country: Belgi‰

Language: NLB

==== Files Recently Created / Modified ======================

====== C:\Windows ====

2013-02-17 23:48:50 F9F4905664C5B42B49E78EFA12D1A6B6 20 ----a-w- C:\Windows\$ô‰

2013-02-17 23:22:19 F9F4905664C5B42B49E78EFA12D1A6B6 20 ----a-w- C:\Windows\,öl

====== C:\Users\Nadia\AppData\Local\Temp ====

====== C:\Windows\system32 =====

2013-02-20 20:26:53 674F852FAE7E686F74EF11A4FE44ED21 94112 ----a-w- C:\Windows\System32\WindowsAccessBridge.dll

2013-02-17 01:14:24 8A4CEBF34370D689E198E6673C1F2C40 74072 ----a-w- C:\Windows\System32\XAPOFX1_5.dll

2013-02-17 01:14:24 81DFDDFB401D663BA7E6AD1C80364216 527192 ----a-w- C:\Windows\System32\XAudio2_7.dll

2013-02-17 01:14:23 8E0BB968FF41D80E5F2C747C04DB79AE 248672 ----a-w- C:\Windows\System32\d3dx11_43.dll

2013-02-17 01:14:23 1C9B45E87528B8BB8CFA884EA0099A85 2106216 ----a-w- C:\Windows\System32\D3DCompiler_43.dll

2013-02-17 00:14:35 8B01FB723F3B30AB3DEBDDBF97CFE577 515416 ----a-w- C:\Windows\System32\XAudio2_5.dll

2013-02-17 00:14:35 501AC862517C5445742BEE8A2B88414E 453456 ----a-w- C:\Windows\System32\d3dx10_42.dll

2013-02-17 00:14:35 30686ECE80545E06D78D156EB9F7D463 69464 ----a-w- C:\Windows\System32\XAPOFX1_3.dll

2013-02-17 00:14:32 26AF232140C88B42D92A88F2198EDF6A 3426072 ----a-w- C:\Windows\System32\d3dx9_32.dll

2013-02-12 22:06:56 EED68558AAA106535E7290C9A8E0D5A3 2382848 ----a-w- C:\Windows\System32\mshtml.tlb

2013-02-12 22:06:56 CDBFCB9A88E130F1138F80B01C56B680 420864 ----a-w- C:\Windows\System32\vbscript.dll

2013-02-12 22:06:56 A9919376933F7E43F93E5DA1FFBEFC9F 73216 ----a-w- C:\Windows\System32\mshtmled.dll

2013-02-12 22:06:55 F8D269134EEC097B7E47C818AF4862A7 176640 ----a-w- C:\Windows\System32\ieui.dll

2013-02-12 22:06:55 CBC39CAD3421AB71966BDD98ABF847E0 607744 ----a-w- C:\Windows\System32\msfeeds.dll

2013-02-12 22:06:55 6E14642F79C2510626BA399F9BCC4DE6 142848 ----a-w- C:\Windows\System32\ieUnatt.exe

2013-02-12 22:06:55 39511E05F37F0BEF8FA3B85386800BB9 65024 ----a-w- C:\Windows\System32\jsproxy.dll

2013-02-12 22:06:54 C079169E6A07FC4412475C02969EB9CE 1800704 ----a-w- C:\Windows\System32\jscript9.dll

2013-02-12 22:06:54 B49B56B64F57699A1A663D2CF7D0A56F 1129472 ----a-w- C:\Windows\System32\wininet.dll

2013-02-12 22:06:54 9352AF851D98380738161620C916A042 231936 ----a-w- C:\Windows\System32\url.dll

2013-02-12 22:06:54 8843B6A1B8E102841B2DFF02805C5CEC 717824 ----a-w- C:\Windows\System32\jscript.dll

2013-02-12 22:06:53 D171EAA745A2C0C583CDDA13D9088EE4 1796096 ----a-w- C:\Windows\System32\iertutil.dll

2013-02-12 22:06:53 BE157C3800DA3010EFC48280ECF81C16 1103872 ----a-w- C:\Windows\System32\urlmon.dll

2013-02-12 22:06:53 470D8189D7FE9928FFFECBF55AAA3233 1427968 ----a-w- C:\Windows\System32\inetcpl.cpl

2013-02-12 22:06:52 C97434C851C4821BD92D2831FDF1ECBE 12321280 ----a-w- C:\Windows\System32\mshtml.dll

2013-02-12 22:06:51 0E816EA3C5DCE94C95099E8B38E75E67 9738240 ----a-w- C:\Windows\System32\ieframe.dll

2013-02-12 19:55:13 A7F9EAC3EC67C68B216A5AB22EE51BDE 2345984 ----a-w- C:\Windows\System32\win32k.sys

2013-02-12 19:55:09 4FC77400373F727993B96CD2AD5C94CC 3957608 ----a-w- C:\Windows\System32\ntkrnlpa.exe

2013-02-12 19:55:08 B089270BACB16B8A1F0FDE1529DBFE65 3902312 ----a-w- C:\Windows\System32\ntoskrnl.exe

2013-02-12 19:54:36 A28F0D880F3A9D3A25E0DB14EF197063 293376 ----a-w- C:\Windows\System32\KernelBase.dll

2013-02-12 19:54:35 A2CB61B68566F6DB067607273119D27B 868352 ----a-w- C:\Windows\System32\kernel32.dll

2013-02-12 19:54:35 8531AAF69394EFB93BC653916C46D245 169984 ----a-w- C:\Windows\System32\winsrv.dll

2013-02-12 19:54:34 06325E5412596F7B4A8170519EF64392 271360 ----a-w- C:\Windows\System32\conhost.exe

====== C:\Windows\system32\drivers =====

2013-02-22 20:10:36 629CABB0421668C9D3D402A3C3D77E14 21104 ----a-w- C:\Windows\System32\drivers\mbam.sys

2013-02-17 23:51:26 B0082808A6856A252F7CDD939892CE50 39272 ----a-w- C:\Windows\System32\drivers\fssfltr.sys

2013-02-16 23:30:48 D41D8CD98F00B204E9800998ECF8427E 0 ---ha-w- C:\Windows\System32\drivers\Msft_Kernel_point32_01009.Wdf

2013-02-12 19:55:04 BBCEAEFF1FD72A026F827CBB2F4AA8AD 1287528 ----a-w- C:\Windows\System32\drivers\tcpip.sys

2013-02-12 19:55:03 4EAF381B295658DEA460AFC9F95DD299 187240 ----a-w- C:\Windows\System32\drivers\FWPKCLNT.SYS

====== C:\Windows\Tasks ======

====== C:\Windows\Temp ======

======= C:\Program Files =====

2013-02-24 09:23:44 -------- d-----w- C:\Program Files\Video Download Converter

2013-02-24 09:23:34 -------- d-----w- C:\Program Files\VideoDownloadConverter_4z

2013-02-22 18:51:59 -------- d-----w- C:\Program Files\Trend Micro

2013-02-17 23:46:02 -------- d-----w- C:\Program Files\Windows Live

2013-02-15 23:12:20 -------- d-----w- C:\Program Files\Synaptics

2013-01-27 08:53:12 -------- d-----w- C:\Program Files\Common Files\Skype

======= C: =====

====== C:\Users\Nadia\AppData\Roaming ======

2013-02-24 21:48:13 -------- d-----w- C:\users\Nadia\AppData\Local\Temp

2013-02-24 09:26:35 -------- d-----w- C:\users\Nadia\AppData\Local\TrafficSpaceLLC

2013-02-24 09:23:36 -------- d-----w- C:\users\Nadia\AppData\Local\VideoDownloadConverter_4z

2013-02-20 19:56:44 -------- d-----w- C:\users\Nadia\AppData\Local\Programs

2013-02-15 22:01:24 -------- d-----w- C:\users\Nadia\AppData\Local\ElevatedDiagnostics

2013-01-26 19:41:06 -------- d-----w- C:\users\Nadia\AppData\Local\Facebook

====== C:\Users\Nadia ======

====== C: exe-files ==

2013-02-24 21:21:16 41F1E601F8AF77EDD08F486296155135 565400 ----a-w- C:\Users\Nadia\Downloads\MVTInstaller (1).exe

2013-02-24 17:07:24 41F1E601F8AF77EDD08F486296155135 565400 ----a-w- C:\Users\Nadia\Downloads\MVTInstaller(1).exe

2013-02-24 09:23:44 DDB7A6952665090F2C76A9640E5AAE53 726760 ----a-w- C:\Program Files\Video Download Converter\unins000.exe

2013-02-24 09:23:44 C9A0C46EFD118CC4E852EDA995EF615D 1677312 ----a-w- C:\Program Files\Video Download Converter\Video Download Converter.exe

2013-02-24 09:23:44 67C86C7FDDD4628BA23988A2BA46E619 8503808 ----a-w- C:\Program Files\Video Download Converter\ffmpeg.exe

2013-02-24 09:23:44 54EFF6AB8E8C0A1672E6DB094611CDCA 5689344 ----a-w- C:\Program Files\Video Download Converter\mplayerc.exe

2013-02-22 20:04:08 0FB6D382FA5FBF72D05FC2A4503B7DF2 10156344 ----a-w- C:\Users\Nadia\Downloads\mbam-setup-1.70.0.1100(1).exe

2013-02-20 19:56:12 0FB6D382FA5FBF72D05FC2A4503B7DF2 10156344 ----a-w- C:\Users\Nadia\Downloads\mbam-setup-1.70.0.1100.exe

2013-02-20 19:32:11 FB60360A82003C11A256A1CF233E4B11 6220608 ----a-w- C:\Users\Nadia\Downloads\speedupmypc.exe

2013-02-18 00:13:36 05B6D2685BB11A96D9DC654F6E82F736 667016 ----a-w- C:\Users\Nadia\Downloads\7601.17514.101119-1850_Update_Sp_Wave1-GRMSP1.1_DVD.exe

2013-02-17 23:45:25 A0EE8879A17B1D4B00B37D294AF106D0 15712 ----a-w- C:\Program Files\Common Files\Windows Live\.cache\dba70aae1ce0d6806\MeshBetaRemover.exe

2013-02-17 23:45:21 DDCE338BB173B32024679D61FB4F2BA6 537432 ----a-w- C:\Program Files\Common Files\Windows Live\.cache\d8e0b6911ce0d6805\DXSETUP.exe

2013-02-17 23:45:16 F5443547CAAC20AA334A88817579270F 525656 ----a-w- C:\Program Files\Common Files\Windows Live\.cache\d5a117a71ce0d6804\DXSETUP.exe

2013-02-17 23:43:45 348C3DAC42050E3E0BB2AE5CC0F1F4ED 1290600 ----a-w- C:\Users\Nadia\Downloads\wlsetup-web(2).exe

=== C: other files ==

2013-02-24 22:00:28 86E44F84A7903EA6E7734466322D4CB8 716 ----a-w- C:\Users\Nadia\AppData\Local\Temp\test9.bat

2013-02-24 09:23:44 C4529D6E81F60775E09E7C1D00DA0559 3237888 ----a-w- C:\Program Files\Video Download Converter\DevComponents.DotNetBar2.dll

2013-02-22 20:10:36 629CABB0421668C9D3D402A3C3D77E14 21104 ----a-w- C:\Windows\System32\drivers\mbam.sys

2013-02-20 20:26:53 674F852FAE7E686F74EF11A4FE44ED21 94112 ----a-w- C:\Windows\System32\WindowsAccessBridge.dll

2013-02-19 21:58:29 652BBA5113E45878CF95B36135C28B3B 46 ----a-w- C:\Users\Nadia\Desktop\RestoreMicrosoftSoftwareShadowCopyProviderWindows7.bat

2013-02-17 23:51:26 B0082808A6856A252F7CDD939892CE50 39272 -c--a-w- C:\Windows\System32\DRVSTORE\fssfltr_F81BFAB31A96EBC51D97A2D005244F41BE442B43\fssfltr.sys

2013-02-17 23:51:26 B0082808A6856A252F7CDD939892CE50 39272 ----a-w- C:\Windows\System32\drivers\fssfltr.sys

2013-02-17 23:45:21 9E0711BED229B60A853BCC5D10DEAAFC 89944 ----a-w- C:\Program Files\Common Files\Windows Live\.cache\d8e0b6911ce0d6805\DSETUP.dll

2013-02-17 23:45:21 0F58CCD58A29827B5D406874360E4C08 1801048 ----a-w- C:\Program Files\Common Files\Windows Live\.cache\d8e0b6911ce0d6805\dsetup32.dll

2013-02-17 23:45:16 EF0ECDE0DF6DC9CE1AC6D6907C261CEA 1691480 ----a-w- C:\Program Files\Common Files\Windows Live\.cache\d5a117a71ce0d6804\dsetup32.dll

2013-02-17 23:45:16 56ECE9BD3C4A321166F1BD1EFCABF585 94040 ----a-w- C:\Program Files\Common Files\Windows Live\.cache\d5a117a71ce0d6804\DSETUP.dll

======== System Restore Points ========

No Restore Point in System.

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

[HKEY_USERS\S-1-5-21-1063682820-3390088728-3065393947-1003\Software\Microsoft\Windows\CurrentVersion\Run]

"msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe /background"

"Facebook Update"="C:\Users\Nadia\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver"

"Skype"="C:\Program Files\Skype\Phone\Skype.exe /minimized /regrun"

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce]

"mctadmin"="C:\Windows\System32\mctadmin.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IgfxTray"="C:\Windows\system32\igfxtray.exe"

"HotKeysCmds"="C:\Windows\system32\hkcmd.exe"

"Persistence"="C:\Windows\system32\igfxpers.exe"

"YouCam Service"="C:\Program Files\CyberLink\YouCam\YouCamService.exe /s"

"Adobe Photo Downloader"="C:\Program Files\Adobe\Photoshop Elements 5.0\apdproxy.exe"

"Adobe ARM"="C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

"BCSSync"="C:\Program Files\Microsoft Office\Office14\BCSSync.exe /DelayServices"

"SunJavaUpdateSched"="C:\Program Files\Common Files\Java\Java Update\jusched.exe"

"VideoDownloadConverter Search Scope Monitor"="C:\PROGRA~1\VIDEOD~2\bar\1.bin\4zsrchmn.exe /m=2 /w /h"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe /background"

"Facebook Update"="C:\Users\Nadia\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver"

"Skype"="C:\Program Files\Skype\Phone\Skype.exe /minimized /regrun"

==== Startup Folders ======================

2012-05-01 17:36:47 997 ----a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Online Backup Etat.lnk

==== Task Scheduler Jobs ======================

C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [13/02/2013 05:09]

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [15/05/2012 19:54]

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [15/05/2012 19:54]

==== Firefox Extensions ======================

ProfilePath: C:\Users\Eddy Coussement\AppData\Roaming\Mozilla\Firefox\Profiles\tkqmh9fs.default

- VideoDownloadConverter - %ProfilePath%\extensions\4zffxtbr@VideoDownloadConverter_4z.com

ProfilePath: C:\Users\Nadia\AppData\Roaming\Mozilla\Firefox\Profiles\uhoon77w.default

- VideoDownloadConverter - %ProfilePath%\extensions\4zffxtbr@VideoDownloadConverter_4z.com

AppDir: C:\Program Files\Mozilla Firefox

- Default - %AppDir%\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\Nadia\AppData\Roaming\Mozilla\Firefox\Profiles\uhoon77w.default

AFD9010DC500096809C2784551909304 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll - Java Platform SE 7 U15

1B197A0ED28DB310AB67591567C3787A - C:\Windows\system32\npDeployJava1.dll - Java Deployment Toolkit 7.0.150.3

F647D0BEA553C1D0C251CE07DA6A5511 - C:\Program Files\Adobe\Reader 10.0\Reader\browser\nppdf32.dll - Adobe Acrobat

DB988B4550DB9BCE86F9199D961057FC - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll - Adobe Acrobat

7D2C149C21BA955CFFE39C08466BA31B - C:\Windows\system32\Macromed\Flash\NPSWF32_11_6_602_168.dll - Shockwave Flash

0B31B0F8FA99CFD009C8FBEA9E20C9DE - C:\Users\Nadia\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll - Facebook Video Calling Plugin

586FDC4E02623EE228EC35B9604AE5F2 - C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll - Google Update

FA910662B178E09857CA6B98E3E22435 - C:\Program Files\McAfee\Supportability\MVT\NPMVTPlugin.dll - McAfee Virtual Technician

B78F4C2C592C87DF54E8E0C6AAEF3874 - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll - Google Earth Plugin

711A2E6A55EC7BFD59B5F649D58B704B - c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll - Silverlight Plug-In

C517E5EA7CEE783F3681F62D2A362E5B - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll - Windows Live? Photo Gallery

15E298B5EC5B89C5994A59863969D9FF - C:\Windows\system32\npmproxy.dll - Microsoft® Windows® Operating System

21A55BABD31DA624449F06A591AE73ED - c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrlui.dll - Microsoft ® Silverlight

==== Set IE to Default ======================

Old Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

New Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"

{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

==== Reset Google Chrome ======================

Nothing found to reset

==== Reset IE Proxy ======================

Value(s) before fix:

"ProxyEnable"=dword:00000000

Value(s) after fix:

"ProxyEnable"=dword:00000000

==== HijackThis Entries ======================

O1 - Hosts: ::1 localhost

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MIF5BA~1\Office14\GROOVEEX.DLL

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll

O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll

O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MIF5BA~1\Office14\URLREDIR.DLL

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll

O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~1\MIF5BA~1\Office14\ONBttnIE.dll/105

O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MIF5BA~1\Office14\EXCEL.EXE/3000

O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll

O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll

O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

O23 - Service: Adobe Active File Monitor V5 (AdobeActiveFileMonitor5.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe

O23 - Service: @%systemroot%\system32\appidsvc.dll,-100 (AppIDSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (Audiosrv) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\AxInstSV.dll,-103 (AxInstSV) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\bdesvc.dll,-100 (BDESVC) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\bthserv.dll,-101 (bthserv) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\defragsvc.dll,-101 (defragsvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\dhcpcore.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\ehome\ehrecvr.exe,-101 (ehRecvr) - Unknown owner - C:\Windows\ehome\ehRecvr.exe

O23 - Service: @%SystemRoot%\ehome\ehsched.exe,-101 (ehSched) - Unknown owner - C:\Windows\ehome\ehsched.exe

O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (eventlog) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: Google Update-service (gupdate) (gupdate) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\ListSvc.dll,-100 (HomeGroupListener) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\provsvc.dll,-100 (HomeGroupProvider) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-500 (iphlpsvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe

O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe

O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: 1% (MOBKbackup) - Unknown owner - C:\Program Files\McAfee Online Backup\MOBKbackup.exe

O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe

O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\Windows\system32\msiexec.exe

O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\netprofm.dll,-202 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\pnrpauto.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\umpo.dll,-100 (Power) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @regsvc.dll,-1 (RemoteRegistry) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%windir%\system32\RpcEpMap.dll,-1001 (RpcEptMapper) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe

O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\System32\sensrsvc.dll,-1000 (SensrSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\ipnathlp.dll,-106 (SharedAccess) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe

O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe

O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe

O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe

O23 - Service: @%SystemRoot%\system32\sppuinotify.dll,-103 (sppuinotify) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (StiSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\tbssvc.dll,-100 (TBS) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\themeservice.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\trkwks.dll,-1 (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\Windows\servicing\TrustedInstaller.exe

O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe

O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe

O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe

O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe

O23 - Service: @%systemroot%\system32\wbiosrvc.dll,-100 (WbioSrvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%ProgramFiles%\Windows Defender\MsMpRes.dll,-103 (WinDefend) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\wmpnetwk.exe

O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\Windows\System32\svchost.exe

O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - Unknown owner - C:\Windows\system32\SearchIndexer.exe

O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe

O23 - Service: @%SystemRoot%\System32\wwansvc.dll,-257 (WwanSvc) - Unknown owner - C:\Windows\system32\svchost.exe

==== Empty IE Cache ======================

C:\Users\Eddy Coussement\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\Eddy Coussement\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully

C:\Users\Nadia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully

C:\Windows\serviceprofiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Windows\serviceprofiles\LocalService\AppData\Local\Temp\Fichiers Internet temporaires\Content.IE5 emptied successfully

C:\Windows\serviceprofiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

C:\Users\Nadia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JAUI9ICB will be deleted at reboot

C:\Users\Nadia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

C:\users\Eddy Coussement\AppData\Local\Mozilla\Firefox\Profiles\tkqmh9fs.default\Cache emptied successfully

C:\users\Nadia\AppData\Local\Mozilla\Firefox\Profiles\uhoon77w.default\Cache emptied successfully

==== Empty Chrome Cache ======================

No Chrome User Data found

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

After Reboot

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied

C:\Users\Nadia\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\Nadia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found

"C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found

"C:\Users\Nadia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JAUI9ICB" not found

24 februari 2013

Ja maar, hoe schakel ik McAfee tijdelijk uit? Alleen de pagina Mc Afee Internet Security opent zich (half), en daar kon ik alleen Firewall uitschakelen. Kan het programma toch niet verwijderen? Ik heb daar een abonnement op. Mc Afee Security Center, dat vind ik helemaal niet hier, vind dat ook raar want ik heb dat gehad, kon daar alles regelen voor mijn abonnement, zoals automatische verlenging en dergelijke. Nu heb ik dat blijkbaar niet meer.

24 februari 2013

Kan je via "veilige modus" andere programma's downloaden ? Neem er gewoon eentje dat je kent en probeer dat eens uit ?

Ja, een ander programma lukt blijkbaar wel.

23 februari 2013

dat lukt ook niet, krijg volgende melding : Firefox ne peut trouver le fichier à l'adresse http://www.hijackthis.nl/smeenk/110113/zoek.exe.

't is in het frans, omdat mijn pc ingesteld is op frans, aangezien ik franstalige partner heb

begin radeloos te worden....hoe krijgen we dit in godsnaam opgelost?

23 februari 2013

Ik krijg mijn McAfee Security Center niet geopend, klik ik rechtermuisknop opent alleen Mc Afee Internet Security (slechts een halve pagina opent zich, vreemde toestand dus. Kan via die halve pagina wel mijn firewall uitschakelen, maar niet de rest. Bon, probeerde dus zoek.exe te downloaden in deze toestand, maar krijg dan van McAfee steeds de melding dat er een Trojaans paard in quarantaine geplaatst is, ik vermoed dat dit dus slaat op zoek.exe

MBAM uitschakelen lukt ook niet, vraagt mij om een product key, terwijl ik toch dacht dat het een gratis proefversie betrof ?

Zit nu dus helemaal vast. Wat nu???

22 februari 2013

MBAM heeft niets gevonden, vroeg dus ook niet om PC opnieuw op te starten

Malwarebytes Anti-Malware (Trial) 1.70.0.1100

Malwarebytes : Free anti-malware download

Database version: v2013.02.22.04

Windows 7 x86 NTFS

Internet Explorer 9.0.8112.16421

Nadia :: NADIA [administrator]

Protection: Disabled

22/02/2013 21:11:51

mbam-log-2013-02-22 (21-11-51).txt

Scan type: Quick scan

Scan options disabled: P2P

Objects scanned: 240834

Time elapsed: 14 minute(s), 58 second(s)

Memory Processes Detected: 0

(No malicious items detected)

Memory Modules Detected: 0

(No malicious items detected)

Registry Keys Detected: 0

(No malicious items detected)

Registry Values Detected: 0

(No malicious items detected)

Registry Data Items Detected: 0

(No malicious items detected)

Folders Detected: 0

(No malicious items detected)

Files Detected: 0

(No malicious items detected)

(end)

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 21:32:38, on 22/02/2013

Platform: Windows 7 (WinNT 6.00.3504)

MSIE: Internet Explorer v9.00 (9.00.8112.16464)

Boot mode: Normal

Running processes:

C:\Windows\system32\taskhost.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\System32\igfxtray.exe

C:\Windows\System32\hkcmd.exe

C:\Windows\System32\igfxpers.exe

C:\Program Files\Adobe\Photoshop Elements 5.0\apdproxy.exe

C:\Program Files\McAfeeMOBK\WrapperTrayIcon.exe

C:\Program Files\Common Files\McAfee\Platform\mcuicnt.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\Users\Nadia\AppData\Local\Facebook\Update\FacebookUpdate.exe

C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe

C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe

C:\Windows\notepad.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Mozilla Firefox\plugin-container.exe

C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_6_602_168.exe

C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

R3 - URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll

O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MIF5BA~1\Office14\GROOVEEX.DLL

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll

O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll

O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll

O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MIF5BA~1\Office14\URLREDIR.DLL

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll

O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll

O4 - HKLM\..\Run: [igfxTray] C:\Windows\system32\igfxtray.exe

O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe

O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe

O4 - HKLM\..\Run: [YouCam Service] "C:\Program Files\CyberLink\YouCam\YouCamService.exe" /s

O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Elements 5.0\apdproxy.exe"

O4 - HKLM\..\Run: [mcui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [bCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices

O4 - HKLM\..\Run: [McAfeeWrapperApplication] "C:\Program Files\McAfeeMOBK\WrapperTrayIcon.exe"

O4 - HKLM\..\Run: [mcpltui_exe] "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\RunOnce: [Malwarebytes Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent

O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Nadia\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver

O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE RÉSEAU')

O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.0.318\SSScheduler.exe