hidde565

Hoi, De laptop had gister de hele dag aangestaan, dus daarom was de temperatuur daarom zo hoog denk ik. Heb 'm laatst nog 'stofvrij' gemaakt. En daarnaast kan ik niet klikken op vorig stuurprogramma! Hij is zeg maar niet selecteerbaar! Groeten

Bij het publiceren komt er een foutmelding, dus hierbij het tekstbestand: [ATTACH]30718[/ATTACH] LAPTOP.txt

Ik zou niet weten hoe dat zou moeten haha , ik moet trwns zeggen dat de laptop het flikkeren minder doet dan eerst!

[ATTACH]30701[/ATTACH] log.txt

Nee, helaas niet. Systeemherstel loopt tot een week terug! Weet u nog iets anders?

De laptop vertoont alsnog dat probleem, het kwam voor sinds ik de driver Nvidia heb upgedate. Het lijkt alsof er een popup in het scherm flikkert en het heeft volgensmij te maken met de taakbalk.

[ATTACH]30682[/ATTACH] AdwCleaner[S0].txt

[ATTACH]30611[/ATTACH] Dit is de goeie! zoek-results.log

[ATTACH]30601[/ATTACH] zoek-results3.log

Aub[ATTACH]30600[/ATTACH] zoek-results3.log

Hoi, ik wordt al geholpen onder een andere titel op dit forum! Ik plaatste het per ongeluk twee keer, maar krijg het niet verwijderd! In ieder geval bedankt voor de moeite!

Zoek.exe v5.0.0.0 Updated 19-February-2014 Tool run by Elon on wo 26-02-2014 at 20:09:30,82. Microsoft Windows 7 Enterprise 6.1.7601 Service Pack 1 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Elon\Desktop\zoek.exe [scan all users] [script inserted] [Checkboxes used] ===== Runcheck 20:14:15,27 ===== --- Create Environment Variables 20:14:16,94 --- Create System Restore Point 20:14:25,93 --- Checking Input 20:14:58,74 --- AU AppData Check 20:15:22,10 --- Remove From Windows Installer 20:15:29,61 --- Empty Folders Check 20:17:03,16 --- IE Startpage Check 20:17:13,08 --- Program Files DB Check 20:18:03,88 --- C:\Users\Default\AppData\Roaming DB Check 20:18:51,02 --- C:\Users\Default User\AppData\Roaming DB Check 20:18:51,02 --- C:\Users\Elon\AppData\Roaming DB Check 20:18:51,02 --- C:\Windows\SysNative\config\systemprofile\AppData\Roaming DB Check 20:18:51,02 --- C:\Windows\sysWoW64\config\systemprofile\AppData\Roaming DB Check 20:18:51,02 --- C:\Windows\serviceprofiles\networkservice\AppData\Roaming DB Check 20:18:51,02 --- C:\Windows\serviceprofiles\Localservice\AppData\Roaming DB Check 20:18:51,02 --- C:\Users\Elon DB Check 20:20:53,90 --- C:\PROGRA~3 DB Check 20:21:11,26 --- C:\Users\Default\AppData\Local DB Check 20:21:12,15 --- C:\Users\Default User\AppData\Local DB Check 20:21:12,15 --- C:\Users\Elon\AppData\Local DB Check 20:21:12,15 --- C:\Windows\SysNative\config\systemprofile\AppData\Local DB Check 20:21:12,15 --- C:\Windows\sysWoW64\config\systemprofile\AppData\Local DB Check 20:21:12,15 --- C:\Windows\serviceprofiles\networkservice\AppData\Local DB Check 20:21:12,15 --- C:\Windows\serviceprofiles\Localservice\AppData\Local DB Check 20:21:12,15 --- C:\ProgramData\Microsoft\Windows\Start Menu\Programs DB Check 20:22:33,13 --- C:\Users\Elon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs DB Check 20:22:41,64 --- Tasks DB Check 20:22:46,33 --- Downloads DB Check 20:22:49,84 --- C:\Users\Elon\AppData\LocalLow DB Check 20:23:48,92 --- C:\Windows\SysNative\config\systemprofile\AppData\LocalLow DB Check 20:23:48,92 --- C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow DB Check 20:23:48,92

Hallo, Sinds ik vanochtend via Windows Update mijn laptop heb 'upgedate', flikkert het scherm soms. Daarnaast download ik wel eens films via uTorrent, maar Avast geeft iets aan over het zelfde virus bij alle films! Ik hoop dat jullie mij kunnen helpen, groeten. Log.txt Logfile of random's system information tool 1.09 (written by random/random) Run by Elon at 2014-02-26 16:24:04 Microsoft Windows 7 Enterprise Service Pack 1 System drive C: has 146 GB (77%) free of 191 GB Total RAM: 4094 MB (54% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 16:24:06, on 26-2-2014 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v11.0 (11.00.9600.16518) Boot mode: Normal Running processes: C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe C:\Users\Elon\AppData\Roaming\Search Protection\SearchProtection.exe C:\Users\Elon\AppData\Roaming\Dropbox\bin\Dropbox.exe C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe C:\Program Files\AVAST Software\Avast\AvastUI.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Users\Elon\AppData\Roaming\Spotify\spotify.exe C:\Users\Elon\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Elon\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyHelper.exe C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyHelper.exe C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyHelper.exe C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyHelper.exe C:\Users\Elon\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Elon\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Elon\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyHelper.exe C:\Program Files\trend micro\Elon.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer! R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer! R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: (no name) - {87775fdb-6972-41f9-ae51-8326e38cb206} - (no file) F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKCU\..\Run: [Google Update] "C:\Users\Elon\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [HP Deskjet 3070 B611 series (NET)] "C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN24F630M605MQ:NW" -scfn "HP Deskjet 3070 B611 series (NET)" -AutoStart 1 O4 - HKCU\..\Run: [spotify Web Helper] "C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" O4 - HKCU\..\Run: [HP Deskjet 3520 series (NET)] "C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN2C51G3H905SY:NW" -scfn "HP Deskjet 3520 series (NET)" -AutoStart 1 O4 - HKCU\..\Run: [HP Deskjet 3070 B611 series (NET) #2] "C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN2486314K05MQ:NW" -scfn "HP Deskjet 3070 B611 series (NET) #2" -AutoStart 1 O4 - HKCU\..\Run: [searchProtection] "C:\Users\Elon\AppData\Roaming\Search Protection\SearchProtection.EXE" /autostart O4 - HKLM\..\Policies\Explorer\Run: [AdobeFlash] C:\Users\Elon\AppData\Roaming\server.exe O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-21-1227978982-2757754115-940779378-1004\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser') O4 - HKUS\S-1-5-21-1227978982-2757754115-940779378-1004\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser') O4 - Startup: Dropbox.lnk = Elon\AppData\Roaming\Dropbox\bin\Dropbox.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing) O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 11013 bytes ======Listing Processes====== \SystemRoot\System32\smss.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 wininit.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\lsm.exe winlogon.exe C:\Windows\system32\svchost.exe -k DcomLaunch "C:\Windows\system32\nvvsvc.exe" C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k GPSvcGroup C:\Windows\system32\svchost.exe -k NetworkService "C:\Program Files\AVAST Software\Avast\AvastSvc.exe" "C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe" C:\Windows\system32\nvvsvc.exe -session -first C:\Windows\System32\spoolsv.exe "taskhost.exe" C:\Windows\Explorer.EXE C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" "C:\Windows\system32\Dwm.exe" C:\Windows\system32\svchost.exe -k imgsvc "C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE" WLIDSvcM.exe 1112 C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation "C:\Program Files\Synaptics\SynTP\SynTPHelper.exe" C:\Windows\system32\SearchIndexer.exe /Embedding "C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" "C:\Users\Elon\AppData\Roaming\Search Protection\SearchProtection.exe" /autostart "C:\Users\Elon\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup "C:\Program Files\Windows Media Player\wmpnetwk.exe" C:\Windows\System32\svchost.exe -k LocalServicePeerNet "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe" "C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe" "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7} "C:\Users\Elon\AppData\Roaming\Spotify\spotify.exe" "C:\Users\Elon\AppData\Local\Google\Chrome\Application\chrome.exe" "C:\Users\Elon\AppData\Local\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3420.0.1751871964\147001557" --disable-image-transport-surface --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,1,14,27,33 --gpu-vendor-id=0x10de --gpu-device-id=0x0407 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.2702 --ignored=" --type=renderer " /prefetch:822062411 "C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=renderer --js-flags=--harmony-proxies --no-sandbox --lang=en-US --lang=en-US --log-severity=disable --channel="4128.1.16238001\1122382084" /prefetch:673131151 "C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=renderer --js-flags=--harmony-proxies --no-sandbox --lang=en-US --lang=en-US --log-severity=disable --channel="4128.2.597407603\1715961386" /prefetch:673131151 "C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=renderer --js-flags=--harmony-proxies --no-sandbox --lang=en-US --lang=en-US --log-severity=disable --channel="4128.3.2109697015\860888437" /prefetch:673131151 "C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=gpu-process --channel="4128.4.623612232\756779804" --no-sandbox --lang=en-US --log-severity=disable --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,9,19,22 --gpu-vendor-id=0x10de --gpu-device-id=0x0407 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.2702 --lang=en-US --log-severity=disable /prefetch:822062411 C:\Windows\System32\svchost.exe -k secsvcs "C:\Users\Elon\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group4 pct:10d stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/OmniboxBundledExperimentV1/StableReorderHoldbackR2/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_17/UMA-Uniformity-Trial-1-Percent/group_95/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --renderer-print-preview --enable-software-compositing --channel="3420.13.1475746250\1897008987" /prefetch:673131151 "C:\Users\Elon\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group4 pct:10d stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/OmniboxBundledExperimentV1/StableReorderHoldbackR2/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_17/UMA-Uniformity-Trial-1-Percent/group_95/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --renderer-print-preview --enable-software-compositing --channel="3420.15.1374673507\2061113967" /prefetch:673131151 "C:\Users\Elon\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group4 pct:10d stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/OmniboxBundledExperimentV1/StableReorderHoldbackR2/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_17/UMA-Uniformity-Trial-1-Percent/group_95/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --renderer-print-preview --enable-software-compositing --channel="3420.32.1511744630\244340277" /prefetch:673131151 "C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=renderer --js-flags=--harmony-proxies --no-sandbox --lang=en-US --lang=en-US --log-severity=disable --channel="4128.7.2050123969\1824776470" /prefetch:673131151 C:\Windows\system32\wbem\wmiprvse.exe C:\Windows\system32\sppsvc.exe "C:\Users\Elon\Desktop\RSITx64.exe" C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF} ======Scheduled tasks folder====== C:\Windows\tasks\Adobe Flash Player Updater.job C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1227978982-2757754115-940779378-1000Core.job C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1227978982-2757754115-940779378-1000UA.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}] avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-02-26 1390368] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 529280] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}] Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-01-16 462760] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Aanmeldhulp voor Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}] Windows Live Messenger Companion Helper - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2012-03-08 393600] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-01-16 171944] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-02-26 1390368] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-09-03 11464296] "SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-08-28 1825064] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] "AdobeFlash"=C:\Users\Elon\AppData\Roaming\server.exe [] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "JumiController"= [] "Google Update"=C:\Users\Elon\AppData\Local\Google\Update\GoogleUpdate.exe [2011-05-27 136176] "HP Deskjet 3070 B611 series (NET)"=C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\ScanToPCActivationApp.exe [2011-06-08 2676584] "Spotify Web Helper"=C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [2014-01-23 1171968] "HP Deskjet 3520 series (NET)"=C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe [2012-10-17 2573416] "HP Deskjet 3070 B611 series (NET) #2"=C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\ScanToPCActivationApp.exe [2011-06-08 2676584] "SearchProtection"=C:\Users\Elon\AppData\Roaming\Search Protection\SearchProtection.EXE [2013-12-31 837992] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] C:\Program Files (x86)\iTunes\iTunesHelper.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] C:\Program Files (x86)\QuickTime\QTTask.exe [2013-05-01 421888] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040] "Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904] "HP Software Update"=C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [2011-10-28 49208] ""= [] "AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-01-16 3764024] "QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2013-05-01 421888] "SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] "AdobeFlash"=C:\Users\Elon\AppData\Roaming\server.exe [] C:\Users\Elon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup Dropbox.lnk - C:\Users\Elon\AppData\Roaming\Dropbox\bin\Dropbox.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=5 "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "PromptOnSecureDesktop"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoActiveDesktop"=1 "NoActiveDesktopChanges"=1 "ForceActiveDesktopOn"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "C:\Users\Elon\AppData\Local\Temp\Terminado.exe"="C:\Users\Elon\AppData\Local\Temp\Terminado.exe:*:Enabled:Windows Messanger" "C:\Users\Elon\AppData\Roaming\server.exe"="C:\Users\Elon\AppData\Roaming\server.exe:*:Enabled:Windows Messanger" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVYU"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.i420"=iyuv_32.dll "VIDC.YVU9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "MSVideo8"=VfWWDM32.dll "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 3 months====== 2014-02-26 16:24:04 ----D---- C:\rsit 2014-02-26 16:21:16 ----D---- C:\Program Files\trend micro 2014-02-26 15:58:08 ----A---- C:\Windows\system32\FNTCACHE.DAT 2014-02-26 14:14:10 ----D---- C:\Windows\system32\drivers\en-US 2014-02-26 13:03:11 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll 2014-02-26 13:02:59 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2014-02-26 13:02:59 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2014-02-26 13:02:58 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys 2014-02-26 13:02:57 ----A---- C:\Windows\system32\tsgqec.dll 2014-02-26 13:02:56 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll 2014-02-26 13:02:56 ----A---- C:\Windows\SYSWOW64\tsgqec.dll 2014-02-26 13:02:56 ----A---- C:\Windows\SYSWOW64\mstsc.exe 2014-02-26 13:02:56 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll 2014-02-26 13:02:56 ----A---- C:\Windows\system32\wksprtPS.dll 2014-02-26 13:02:56 ----A---- C:\Windows\system32\wksprt.exe 2014-02-26 13:02:56 ----A---- C:\Windows\system32\TSWbPrxy.exe 2014-02-26 13:02:56 ----A---- C:\Windows\system32\mstsc.exe 2014-02-26 13:02:56 ----A---- C:\Windows\system32\MsRdpWebAccess.dll 2014-02-26 13:02:55 ----A---- C:\Windows\SYSWOW64\rdvidcrl.dll 2014-02-26 13:02:55 ----A---- C:\Windows\SYSWOW64\mstscax.dll 2014-02-26 13:02:55 ----A---- C:\Windows\system32\mstscax.dll 2014-02-26 13:02:54 ----A---- C:\Windows\system32\rdvidcrl.dll 2014-02-26 12:58:27 ----D---- C:\Program Files (x86)\NVIDIA Corporation 2014-02-26 12:57:32 ----A---- C:\Windows\system32\nvvsvc.exe 2014-02-26 12:57:32 ----A---- C:\Windows\system32\nvsvcr.dll 2014-02-26 12:57:32 ----A---- C:\Windows\system32\nvshext.dll 2014-02-26 12:56:37 ----A---- C:\Windows\SYSWOW64\OpenCL.dll 2014-02-26 12:56:37 ----A---- C:\Windows\system32\OpenCL.dll 2014-02-26 12:54:06 ----D---- C:\Program Files\NVIDIA Corporation 2014-02-26 12:46:10 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll 2014-02-26 12:46:10 ----A---- C:\Windows\system32\TSWorkspace.dll 2014-02-26 12:13:44 ----D---- C:\Program Files\PowerISO 2014-02-26 12:13:38 ----D---- C:\Program Files (x86)\SearchProtect 2014-02-26 12:09:12 ----D---- C:\ProgramData\Rosetta Stone 2014-02-26 12:09:12 ----D---- C:\Program Files (x86)\Rosetta Stone 2014-02-20 21:14:22 ----A---- C:\Windows\SYSWOW64\vbscript.dll 2014-02-20 21:14:22 ----A---- C:\Windows\system32\vbscript.dll 2014-02-20 21:13:33 ----A---- C:\Windows\SYSWOW64\msrating.dll 2014-02-20 21:13:33 ----A---- C:\Windows\SYSWOW64\ieui.dll 2014-02-20 21:13:33 ----A---- C:\Windows\system32\msrating.dll 2014-02-20 21:13:32 ----A---- C:\Windows\system32\ieui.dll 2014-02-20 21:13:32 ----A---- C:\Windows\system32\iernonce.dll 2014-02-20 21:13:32 ----A---- C:\Windows\system32\ieetwcollectorres.dll 2014-02-20 21:13:32 ----A---- C:\Windows\system32\ie4uinit.exe 2014-02-20 21:13:31 ----A---- C:\Windows\SYSWOW64\msfeeds.dll 2014-02-20 21:13:31 ----A---- C:\Windows\system32\jsproxy.dll 2014-02-20 21:13:30 ----A---- C:\Windows\SYSWOW64\jsproxy.dll 2014-02-20 21:13:30 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe 2014-02-20 21:13:30 ----A---- C:\Windows\SYSWOW64\iesetup.dll 2014-02-20 21:13:30 ----A---- C:\Windows\SYSWOW64\iernonce.dll 2014-02-20 21:13:30 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll 2014-02-20 21:13:30 ----A---- C:\Windows\system32\msfeeds.dll 2014-02-20 21:13:30 ----A---- C:\Windows\system32\ieUnatt.exe 2014-02-20 21:13:30 ----A---- C:\Windows\system32\iesetup.dll 2014-02-20 21:13:30 ----A---- C:\Windows\system32\ieetwproxystub.dll 2014-02-20 21:13:30 ----A---- C:\Windows\system32\ieetwcollector.exe 2014-02-20 21:13:29 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll 2014-02-20 21:13:29 ----A---- C:\Windows\system32\mshtml.dll 2014-02-20 21:13:28 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll 2014-02-20 21:13:28 ----A---- C:\Windows\system32\jscript9diag.dll 2014-02-20 21:13:28 ----A---- C:\Windows\system32\ieapfltr.dll 2014-02-20 21:13:27 ----A---- C:\Windows\SYSWOW64\wininet.dll 2014-02-20 21:13:27 ----A---- C:\Windows\SYSWOW64\iertutil.dll 2014-02-20 21:13:27 ----A---- C:\Windows\system32\wininet.dll 2014-02-20 21:13:27 ----A---- C:\Windows\system32\iertutil.dll 2014-02-20 21:13:26 ----A---- C:\Windows\SYSWOW64\urlmon.dll 2014-02-20 21:13:26 ----A---- C:\Windows\system32\urlmon.dll 2014-02-20 21:13:25 ----A---- C:\Windows\system32\ieframe.dll 2014-02-20 21:13:24 ----A---- C:\Windows\SYSWOW64\ieframe.dll 2014-02-20 21:13:23 ----A---- C:\Windows\SYSWOW64\mshtml.dll 2014-02-20 21:13:23 ----A---- C:\Windows\SYSWOW64\jscript9.dll 2014-02-20 21:13:22 ----A---- C:\Windows\system32\jscript9.dll 2014-02-20 20:52:38 ----A---- C:\Windows\system32\msxml3.dll 2014-02-20 20:52:36 ----A---- C:\Windows\SYSWOW64\msxml3r.dll 2014-02-20 20:52:36 ----A---- C:\Windows\SYSWOW64\msxml3.dll 2014-02-20 20:52:36 ----A---- C:\Windows\system32\msxml3r.dll 2014-02-20 20:52:26 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe 2014-02-20 20:52:26 ----A---- C:\Windows\SYSWOW64\RMActivate.exe 2014-02-20 20:52:26 ----A---- C:\Windows\system32\RMActivate_isv.exe 2014-02-20 20:52:26 ----A---- C:\Windows\system32\RMActivate.exe 2014-02-20 20:52:25 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe 2014-02-20 20:52:25 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe 2014-02-20 20:52:25 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe 2014-02-20 20:52:25 ----A---- C:\Windows\system32\RMActivate_ssp.exe 2014-02-20 20:52:24 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll 2014-02-20 20:52:24 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll 2014-02-20 20:52:24 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll 2014-02-20 20:52:24 ----A---- C:\Windows\SYSWOW64\secproc.dll 2014-02-20 20:52:24 ----A---- C:\Windows\SYSWOW64\msdrm.dll 2014-02-20 20:52:24 ----A---- C:\Windows\system32\secproc_ssp_isv.dll 2014-02-20 20:52:24 ----A---- C:\Windows\system32\secproc_ssp.dll 2014-02-20 20:52:24 ----A---- C:\Windows\system32\secproc_isv.dll 2014-02-20 20:52:24 ----A---- C:\Windows\system32\secproc.dll 2014-02-20 20:52:24 ----A---- C:\Windows\system32\msdrm.dll 2014-02-20 20:52:21 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll 2014-02-20 20:52:21 ----A---- C:\Windows\system32\d3d10warp.dll 2014-02-20 20:52:20 ----A---- C:\Windows\SYSWOW64\d2d1.dll 2014-02-20 20:52:20 ----A---- C:\Windows\system32\d2d1.dll 2014-01-31 20:40:09 ----D---- C:\Windows\Migration 2014-01-31 20:38:16 ----D---- C:\1b5fd34eb4a2f584cfd6e34d 2014-01-31 20:30:14 ----D---- C:\Program Files (x86)\Spotify 2014-01-16 20:08:59 ----A---- C:\Windows\SYSWOW64\javaws.exe 2014-01-16 20:08:48 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll 2014-01-16 20:08:48 ----A---- C:\Windows\SYSWOW64\javaw.exe 2014-01-16 20:08:48 ----A---- C:\Windows\SYSWOW64\java.exe 2014-01-16 19:51:14 ----A---- C:\Windows\system32\drivers\aswstm.sys 2014-01-15 20:09:24 ----A---- C:\Windows\system32\drivers\usbuhci.sys 2014-01-15 20:09:24 ----A---- C:\Windows\system32\drivers\usbport.sys 2014-01-15 20:09:24 ----A---- C:\Windows\system32\drivers\usbohci.sys 2014-01-15 20:09:24 ----A---- C:\Windows\system32\drivers\usbhub.sys 2014-01-15 20:09:24 ----A---- C:\Windows\system32\drivers\usbehci.sys 2014-01-15 20:09:24 ----A---- C:\Windows\system32\drivers\usbd.sys 2014-01-15 20:09:24 ----A---- C:\Windows\system32\drivers\usbccgp.sys 2014-01-15 20:09:22 ----A---- C:\Windows\system32\win32k.sys 2014-01-15 20:09:20 ----A---- C:\Windows\system32\drivers\netio.sys 2013-12-20 17:01:36 ----A---- C:\Windows\system32\wmploc.DLL 2013-12-20 17:01:35 ----A---- C:\Windows\SYSWOW64\wmploc.DLL 2013-12-20 17:01:35 ----A---- C:\Windows\SYSWOW64\wmp.dll 2013-12-20 17:01:33 ----A---- C:\Windows\system32\wmp.dll 2013-12-20 16:54:05 ----A---- C:\Windows\SYSWOW64\msieftp.dll 2013-12-20 16:54:05 ----A---- C:\Windows\system32\msieftp.dll 2013-12-20 16:54:03 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll 2013-12-20 16:54:03 ----A---- C:\Windows\system32\WMPhoto.dll 2013-12-20 16:54:02 ----A---- C:\Windows\system32\drivers\portcls.sys 2013-12-20 16:54:02 ----A---- C:\Windows\system32\drivers\drmk.sys 2013-12-20 16:53:59 ----A---- C:\Windows\SYSWOW64\tzres.dll 2013-12-20 16:53:59 ----A---- C:\Windows\system32\tzres.dll 2013-12-20 16:53:52 ----A---- C:\Windows\SYSWOW64\imagehlp.dll 2013-12-20 16:53:52 ----A---- C:\Windows\system32\imagehlp.dll 2013-12-20 16:53:51 ----A---- C:\Windows\SYSWOW64\wscript.exe 2013-12-20 16:53:51 ----A---- C:\Windows\SYSWOW64\scrrun.dll 2013-12-20 16:53:51 ----A---- C:\Windows\SYSWOW64\cscript.exe 2013-12-20 16:53:51 ----A---- C:\Windows\system32\wscript.exe 2013-12-20 16:53:51 ----A---- C:\Windows\system32\scrrun.dll 2013-12-20 16:53:51 ----A---- C:\Windows\system32\cscript.exe ======List of files/folders modified in the last 3 months====== 2014-02-26 16:24:06 ----D---- C:\Windows\Temp 2014-02-26 16:21:16 ----RD---- C:\Program Files 2014-02-26 16:20:20 ----D---- C:\Users\Elon\AppData\Roaming\Spotify 2014-02-26 16:20:09 ----D---- C:\Users\Elon\AppData\Roaming\TeraCopy 2014-02-26 16:19:17 ----RD---- C:\Program Files (x86) 2014-02-26 16:19:02 ----D---- C:\Windows\system32\Tasks 2014-02-26 16:18:58 ----D---- C:\Windows 2014-02-26 16:18:57 ----A---- C:\Windows\system32\aswBoot.exe 2014-02-26 16:16:11 ----D---- C:\Users\Elon\AppData\Roaming\uTorrent 2014-02-26 16:14:34 ----D---- C:\Windows\system32\config 2014-02-26 16:12:11 ----D---- C:\Windows\Prefetch 2014-02-26 16:00:07 ----D---- C:\Users\Elon\AppData\Roaming\Dropbox 2014-02-26 15:58:08 ----D---- C:\Windows\System32 2014-02-26 15:16:19 ----D---- C:\Windows\inf 2014-02-26 14:23:08 ----D---- C:\Users\Elon\AppData\Roaming\DAEMON Tools Lite 2014-02-26 14:22:33 ----D---- C:\Windows\system32\LogFiles 2014-02-26 14:22:32 ----D---- C:\Windows\debug 2014-02-26 14:17:28 ----D---- C:\ProgramData\NVIDIA 2014-02-26 14:17:17 ----D---- C:\Windows\winsxs 2014-02-26 14:15:11 ----D---- C:\Windows\SysWOW64 2014-02-26 14:14:10 ----D---- C:\Windows\SYSWOW64\wbem 2014-02-26 14:14:10 ----D---- C:\Windows\SYSWOW64\nl-NL 2014-02-26 14:14:10 ----D---- C:\Windows\system32\wbem 2014-02-26 14:14:10 ----D---- C:\Windows\system32\nl-NL 2014-02-26 14:14:10 ----D---- C:\Windows\system32\DriverStore 2014-02-26 14:14:10 ----D---- C:\Windows\system32\drivers 2014-02-26 13:03:20 ----D---- C:\Windows\system32\catroot 2014-02-26 13:03:18 ----D---- C:\Windows\system32\catroot2 2014-02-26 12:58:40 ----RD---- C:\Users 2014-02-26 12:50:01 ----SHD---- C:\Windows\Installer 2014-02-26 12:49:40 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI 2014-02-26 12:49:16 ----A---- C:\Windows\system32\PerfStringBackup.INI 2014-02-26 12:36:05 ----D---- C:\ProgramData\DAEMON Tools Lite 2014-02-26 12:09:25 ----D---- C:\Program Files (x86)\Common Files 2014-02-26 12:09:12 ----HD---- C:\ProgramData 2014-02-25 17:12:34 ----D---- C:\Users\Elon\AppData\Roaming\vlc 2014-02-25 14:52:52 ----D---- C:\Windows\rescache 2014-02-25 13:40:48 ----D---- C:\Windows\Microsoft.NET 2014-02-24 20:31:15 ----RSD---- C:\Windows\assembly 2014-02-24 18:00:21 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe 2014-02-24 17:03:55 ----D---- C:\Program Files\Internet Explorer 2014-02-24 17:03:55 ----D---- C:\Program Files (x86)\Internet Explorer 2014-02-20 21:28:18 ----D---- C:\Windows\system32\MRT 2014-02-20 21:25:39 ----A---- C:\Windows\system32\MRT.exe 2014-01-31 20:40:23 ----D---- C:\Windows\SYSWOW64\en-US 2014-01-31 20:40:23 ----D---- C:\Windows\system32\en-US 2014-01-31 20:40:09 ----SD---- C:\ProgramData\Microsoft 2014-01-18 17:08:07 ----D---- C:\Program Files\WinRAR 2014-01-16 20:25:33 ----D---- C:\ProgramData\Oracle 2014-01-16 18:54:17 ----D---- C:\ProgramData\Microsoft Help 2013-12-20 17:03:05 ----D---- C:\Program Files\Windows Media Player 2013-12-20 17:03:05 ----D---- C:\Program Files (x86)\Windows Media Player 2013-12-18 06:13:56 ----N---- C:\Windows\system32\MpSigStub.exe 2013-12-08 21:03:40 ----D---- C:\Windows\Panther 2013-12-08 21:03:39 ----D---- C:\Windows\Logs 2013-12-08 19:20:09 ----D---- C:\Windows\SYSWOW64\migration 2013-12-08 19:20:05 ----D---- C:\Windows\PolicyDefinitions 2013-12-08 19:20:04 ----D---- C:\Windows\system32\migration ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2013-10-19 65776] R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-01-16 207904] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888] R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2014-02-26 381440] R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552] R1 aswRdr;aswRdr; \??\C:\Windows\system32\drivers\aswRdr2.sys [2013-10-19 92544] R1 aswSnx;aswSnx; \??\C:\Windows\system32\drivers\aswSnx.sys [2014-02-26 1038072] R1 aswSP;aswSP; \??\C:\Windows\system32\drivers\aswSP.sys [2014-02-26 421704] R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560] R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2014-02-26 78648] R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmpx64.sys [2007-08-08 60928] R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimspx64.sys [2007-07-26 55296] R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdpx64.sys [2007-07-27 57856] R3 aswStm;aswStm; \??\C:\Windows\system32\drivers\aswStm.sys [2014-02-26 80184] R3 netw5v64;Stuurprogramma voor Intel® Wireless WiFi Link 5000 Series-adapter voor 64-bits Windows Vista; C:\Windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368] R3 nuvotoncir;Nuvoton IR Transceiver; C:\Windows\system32\DRIVERS\nuvotoncir.sys [2009-08-31 48128] R3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 109056] R3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864] R3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312] R3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864] R3 StillCam;Stuurprogramma voor seriële digitale fotocamera; C:\Windows\system32\drivers\serscan.sys [2009-07-14 12288] R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-08-28 292400] S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2012-03-08 48488] S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-09-03 2480104] S3 jumi;%Jumi%; C:\Windows\system32\DRIVERS\jumi.sys [2010-06-03 15160] S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352] S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888] S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456] S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656] S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688] S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys [] S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 56832] S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys [] S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2012-02-15 52736] S3 usbscan;Stuurprogramma voor USB-scanner; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 42496] S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys [] S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760] S3 winbondcir;Winbond IR Transceiver; C:\Windows\system32\DRIVERS\winbondcir.sys [2007-03-28 46592] S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432] R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-01-16 50344] R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136] R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-08-29 920864] R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-09-05 1364256] R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 2292096] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-24 257928] S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136] S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2014-02-26 655624] S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2012-03-08 1492840] S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-02-06 111616] S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136] S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136] S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136] S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-09-08 1255736] S4 aspnet_state;ASP.NET-statusservice; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808] S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184] -----------------EOF----------------

Hallo, Sinds ik vanochtend via Windows Update mijn laptop heb 'upgedate', flikkert het scherm soms. Daarnaast download ik wel eens films via uTorrent, maar Avast geeft iets aan over het zelfde virus bij alle films! Ik hoop dat jullie mij kunnen helpen, groeten. Log.txt Logfile of random's system information tool 1.09 (written by random/random) Run by Elon at 2014-02-26 16:24:04 Microsoft Windows 7 Enterprise Service Pack 1 System drive C: has 146 GB (77%) free of 191 GB Total RAM: 4094 MB (54% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 16:24:06, on 26-2-2014 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v11.0 (11.00.9600.16518) Boot mode: Normal Running processes: C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe C:\Users\Elon\AppData\Roaming\Search Protection\SearchProtection.exe C:\Users\Elon\AppData\Roaming\Dropbox\bin\Dropbox.exe C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe C:\Program Files\AVAST Software\Avast\AvastUI.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Users\Elon\AppData\Roaming\Spotify\spotify.exe C:\Users\Elon\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Elon\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyHelper.exe C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyHelper.exe C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyHelper.exe C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyHelper.exe C:\Users\Elon\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Elon\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Elon\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyHelper.exe C:\Program Files\trend micro\Elon.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer! R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer! R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: (no name) - {87775fdb-6972-41f9-ae51-8326e38cb206} - (no file) F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKCU\..\Run: [Google Update] "C:\Users\Elon\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [HP Deskjet 3070 B611 series (NET)] "C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN24F630M605MQ:NW" -scfn "HP Deskjet 3070 B611 series (NET)" -AutoStart 1 O4 - HKCU\..\Run: [spotify Web Helper] "C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" O4 - HKCU\..\Run: [HP Deskjet 3520 series (NET)] "C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN2C51G3H905SY:NW" -scfn "HP Deskjet 3520 series (NET)" -AutoStart 1 O4 - HKCU\..\Run: [HP Deskjet 3070 B611 series (NET) #2] "C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN2486314K05MQ:NW" -scfn "HP Deskjet 3070 B611 series (NET) #2" -AutoStart 1 O4 - HKCU\..\Run: [searchProtection] "C:\Users\Elon\AppData\Roaming\Search Protection\SearchProtection.EXE" /autostart O4 - HKLM\..\Policies\Explorer\Run: [AdobeFlash] C:\Users\Elon\AppData\Roaming\server.exe O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-21-1227978982-2757754115-940779378-1004\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser') O4 - HKUS\S-1-5-21-1227978982-2757754115-940779378-1004\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser') O4 - Startup: Dropbox.lnk = Elon\AppData\Roaming\Dropbox\bin\Dropbox.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing) O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 11013 bytes ======Listing Processes====== \SystemRoot\System32\smss.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 wininit.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\lsm.exe winlogon.exe C:\Windows\system32\svchost.exe -k DcomLaunch "C:\Windows\system32\nvvsvc.exe" C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k GPSvcGroup C:\Windows\system32\svchost.exe -k NetworkService "C:\Program Files\AVAST Software\Avast\AvastSvc.exe" "C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe" C:\Windows\system32\nvvsvc.exe -session -first C:\Windows\System32\spoolsv.exe "taskhost.exe" C:\Windows\Explorer.EXE C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" "C:\Windows\system32\Dwm.exe" C:\Windows\system32\svchost.exe -k imgsvc "C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE" WLIDSvcM.exe 1112 C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation "C:\Program Files\Synaptics\SynTP\SynTPHelper.exe" C:\Windows\system32\SearchIndexer.exe /Embedding "C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" "C:\Users\Elon\AppData\Roaming\Search Protection\SearchProtection.exe" /autostart "C:\Users\Elon\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup "C:\Program Files\Windows Media Player\wmpnetwk.exe" C:\Windows\System32\svchost.exe -k LocalServicePeerNet "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe" "C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe" "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7} "C:\Users\Elon\AppData\Roaming\Spotify\spotify.exe" "C:\Users\Elon\AppData\Local\Google\Chrome\Application\chrome.exe" "C:\Users\Elon\AppData\Local\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3420.0.1751871964\147001557" --disable-image-transport-surface --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,1,14,27,33 --gpu-vendor-id=0x10de --gpu-device-id=0x0407 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.2702 --ignored=" --type=renderer " /prefetch:822062411 "C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=renderer --js-flags=--harmony-proxies --no-sandbox --lang=en-US --lang=en-US --log-severity=disable --channel="4128.1.16238001\1122382084" /prefetch:673131151 "C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=renderer --js-flags=--harmony-proxies --no-sandbox --lang=en-US --lang=en-US --log-severity=disable --channel="4128.2.597407603\1715961386" /prefetch:673131151 "C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=renderer --js-flags=--harmony-proxies --no-sandbox --lang=en-US --lang=en-US --log-severity=disable --channel="4128.3.2109697015\860888437" /prefetch:673131151 "C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=gpu-process --channel="4128.4.623612232\756779804" --no-sandbox --lang=en-US --log-severity=disable --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,9,19,22 --gpu-vendor-id=0x10de --gpu-device-id=0x0407 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.2702 --lang=en-US --log-severity=disable /prefetch:822062411 C:\Windows\System32\svchost.exe -k secsvcs "C:\Users\Elon\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group4 pct:10d stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/OmniboxBundledExperimentV1/StableReorderHoldbackR2/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_17/UMA-Uniformity-Trial-1-Percent/group_95/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --renderer-print-preview --enable-software-compositing --channel="3420.13.1475746250\1897008987" /prefetch:673131151 "C:\Users\Elon\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group4 pct:10d stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/OmniboxBundledExperimentV1/StableReorderHoldbackR2/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_17/UMA-Uniformity-Trial-1-Percent/group_95/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --renderer-print-preview --enable-software-compositing --channel="3420.15.1374673507\2061113967" /prefetch:673131151 "C:\Users\Elon\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group4 pct:10d stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/OmniboxBundledExperimentV1/StableReorderHoldbackR2/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_17/UMA-Uniformity-Trial-1-Percent/group_95/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --renderer-print-preview --enable-software-compositing --channel="3420.32.1511744630\244340277" /prefetch:673131151 "C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=renderer --js-flags=--harmony-proxies --no-sandbox --lang=en-US --lang=en-US --log-severity=disable --channel="4128.7.2050123969\1824776470" /prefetch:673131151 C:\Windows\system32\wbem\wmiprvse.exe C:\Windows\system32\sppsvc.exe "C:\Users\Elon\Desktop\RSITx64.exe" C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF} ======Scheduled tasks folder====== C:\Windows\tasks\Adobe Flash Player Updater.job C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1227978982-2757754115-940779378-1000Core.job C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1227978982-2757754115-940779378-1000UA.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}] avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-02-26 1390368] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 529280] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}] Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-01-16 462760] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Aanmeldhulp voor Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}] Windows Live Messenger Companion Helper - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2012-03-08 393600] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-01-16 171944] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-02-26 1390368] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-09-03 11464296] "SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-08-28 1825064] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] "AdobeFlash"=C:\Users\Elon\AppData\Roaming\server.exe [] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "JumiController"= [] "Google Update"=C:\Users\Elon\AppData\Local\Google\Update\GoogleUpdate.exe [2011-05-27 136176] "HP Deskjet 3070 B611 series (NET)"=C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\ScanToPCActivationApp.exe [2011-06-08 2676584] "Spotify Web Helper"=C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [2014-01-23 1171968] "HP Deskjet 3520 series (NET)"=C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe [2012-10-17 2573416] "HP Deskjet 3070 B611 series (NET) #2"=C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\ScanToPCActivationApp.exe [2011-06-08 2676584] "SearchProtection"=C:\Users\Elon\AppData\Roaming\Search Protection\SearchProtection.EXE [2013-12-31 837992] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] C:\Program Files (x86)\iTunes\iTunesHelper.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] C:\Program Files (x86)\QuickTime\QTTask.exe [2013-05-01 421888] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040] "Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904] "HP Software Update"=C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [2011-10-28 49208] ""= [] "AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-01-16 3764024] "QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2013-05-01 421888] "SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] "AdobeFlash"=C:\Users\Elon\AppData\Roaming\server.exe [] C:\Users\Elon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup Dropbox.lnk - C:\Users\Elon\AppData\Roaming\Dropbox\bin\Dropbox.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=5 "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "PromptOnSecureDesktop"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoActiveDesktop"=1 "NoActiveDesktopChanges"=1 "ForceActiveDesktopOn"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "C:\Users\Elon\AppData\Local\Temp\Terminado.exe"="C:\Users\Elon\AppData\Local\Temp\Terminado.exe:*:Enabled:Windows Messanger" "C:\Users\Elon\AppData\Roaming\server.exe"="C:\Users\Elon\AppData\Roaming\server.exe:*:Enabled:Windows Messanger" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVYU"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.i420"=iyuv_32.dll "VIDC.YVU9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "MSVideo8"=VfWWDM32.dll "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 3 months====== 2014-02-26 16:24:04 ----D---- C:\rsit 2014-02-26 16:21:16 ----D---- C:\Program Files\trend micro 2014-02-26 15:58:08 ----A---- C:\Windows\system32\FNTCACHE.DAT 2014-02-26 14:14:10 ----D---- C:\Windows\system32\drivers\en-US 2014-02-26 13:03:11 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll 2014-02-26 13:02:59 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2014-02-26 13:02:59 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2014-02-26 13:02:58 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys 2014-02-26 13:02:57 ----A---- C:\Windows\system32\tsgqec.dll 2014-02-26 13:02:56 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll 2014-02-26 13:02:56 ----A---- C:\Windows\SYSWOW64\tsgqec.dll 2014-02-26 13:02:56 ----A---- C:\Windows\SYSWOW64\mstsc.exe 2014-02-26 13:02:56 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll 2014-02-26 13:02:56 ----A---- C:\Windows\system32\wksprtPS.dll 2014-02-26 13:02:56 ----A---- C:\Windows\system32\wksprt.exe 2014-02-26 13:02:56 ----A---- C:\Windows\system32\TSWbPrxy.exe 2014-02-26 13:02:56 ----A---- C:\Windows\system32\mstsc.exe 2014-02-26 13:02:56 ----A---- C:\Windows\system32\MsRdpWebAccess.dll 2014-02-26 13:02:55 ----A---- C:\Windows\SYSWOW64\rdvidcrl.dll 2014-02-26 13:02:55 ----A---- C:\Windows\SYSWOW64\mstscax.dll 2014-02-26 13:02:55 ----A---- C:\Windows\system32\mstscax.dll 2014-02-26 13:02:54 ----A---- C:\Windows\system32\rdvidcrl.dll 2014-02-26 12:58:27 ----D---- C:\Program Files (x86)\NVIDIA Corporation 2014-02-26 12:57:32 ----A---- C:\Windows\system32\nvvsvc.exe 2014-02-26 12:57:32 ----A---- C:\Windows\system32\nvsvcr.dll 2014-02-26 12:57:32 ----A---- C:\Windows\system32\nvshext.dll 2014-02-26 12:56:37 ----A---- C:\Windows\SYSWOW64\OpenCL.dll 2014-02-26 12:56:37 ----A---- C:\Windows\system32\OpenCL.dll 2014-02-26 12:54:06 ----D---- C:\Program Files\NVIDIA Corporation 2014-02-26 12:46:10 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll 2014-02-26 12:46:10 ----A---- C:\Windows\system32\TSWorkspace.dll 2014-02-26 12:13:44 ----D---- C:\Program Files\PowerISO 2014-02-26 12:13:38 ----D---- C:\Program Files (x86)\SearchProtect 2014-02-26 12:09:12 ----D---- C:\ProgramData\Rosetta Stone 2014-02-26 12:09:12 ----D---- C:\Program Files (x86)\Rosetta Stone 2014-02-20 21:14:22 ----A---- C:\Windows\SYSWOW64\vbscript.dll 2014-02-20 21:14:22 ----A---- C:\Windows\system32\vbscript.dll 2014-02-20 21:13:33 ----A---- C:\Windows\SYSWOW64\msrating.dll 2014-02-20 21:13:33 ----A---- C:\Windows\SYSWOW64\ieui.dll 2014-02-20 21:13:33 ----A---- C:\Windows\system32\msrating.dll 2014-02-20 21:13:32 ----A---- C:\Windows\system32\ieui.dll 2014-02-20 21:13:32 ----A---- C:\Windows\system32\iernonce.dll 2014-02-20 21:13:32 ----A---- C:\Windows\system32\ieetwcollectorres.dll 2014-02-20 21:13:32 ----A---- C:\Windows\system32\ie4uinit.exe 2014-02-20 21:13:31 ----A---- C:\Windows\SYSWOW64\msfeeds.dll 2014-02-20 21:13:31 ----A---- C:\Windows\system32\jsproxy.dll 2014-02-20 21:13:30 ----A---- C:\Windows\SYSWOW64\jsproxy.dll 2014-02-20 21:13:30 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe 2014-02-20 21:13:30 ----A---- C:\Windows\SYSWOW64\iesetup.dll 2014-02-20 21:13:30 ----A---- C:\Windows\SYSWOW64\iernonce.dll 2014-02-20 21:13:30 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll 2014-02-20 21:13:30 ----A---- C:\Windows\system32\msfeeds.dll 2014-02-20 21:13:30 ----A---- C:\Windows\system32\ieUnatt.exe 2014-02-20 21:13:30 ----A---- C:\Windows\system32\iesetup.dll 2014-02-20 21:13:30 ----A---- C:\Windows\system32\ieetwproxystub.dll 2014-02-20 21:13:30 ----A---- C:\Windows\system32\ieetwcollector.exe 2014-02-20 21:13:29 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll 2014-02-20 21:13:29 ----A---- C:\Windows\system32\mshtml.dll 2014-02-20 21:13:28 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll 2014-02-20 21:13:28 ----A---- C:\Windows\system32\jscript9diag.dll 2014-02-20 21:13:28 ----A---- C:\Windows\system32\ieapfltr.dll 2014-02-20 21:13:27 ----A---- C:\Windows\SYSWOW64\wininet.dll 2014-02-20 21:13:27 ----A---- C:\Windows\SYSWOW64\iertutil.dll 2014-02-20 21:13:27 ----A---- C:\Windows\system32\wininet.dll 2014-02-20 21:13:27 ----A---- C:\Windows\system32\iertutil.dll 2014-02-20 21:13:26 ----A---- C:\Windows\SYSWOW64\urlmon.dll 2014-02-20 21:13:26 ----A---- C:\Windows\system32\urlmon.dll 2014-02-20 21:13:25 ----A---- C:\Windows\system32\ieframe.dll 2014-02-20 21:13:24 ----A---- C:\Windows\SYSWOW64\ieframe.dll 2014-02-20 21:13:23 ----A---- C:\Windows\SYSWOW64\mshtml.dll 2014-02-20 21:13:23 ----A---- C:\Windows\SYSWOW64\jscript9.dll 2014-02-20 21:13:22 ----A---- C:\Windows\system32\jscript9.dll 2014-02-20 20:52:38 ----A---- C:\Windows\system32\msxml3.dll 2014-02-20 20:52:36 ----A---- C:\Windows\SYSWOW64\msxml3r.dll 2014-02-20 20:52:36 ----A---- C:\Windows\SYSWOW64\msxml3.dll 2014-02-20 20:52:36 ----A---- C:\Windows\system32\msxml3r.dll 2014-02-20 20:52:26 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe 2014-02-20 20:52:26 ----A---- C:\Windows\SYSWOW64\RMActivate.exe 2014-02-20 20:52:26 ----A---- C:\Windows\system32\RMActivate_isv.exe 2014-02-20 20:52:26 ----A---- C:\Windows\system32\RMActivate.exe 2014-02-20 20:52:25 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe 2014-02-20 20:52:25 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe 2014-02-20 20:52:25 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe 2014-02-20 20:52:25 ----A---- C:\Windows\system32\RMActivate_ssp.exe 2014-02-20 20:52:24 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll 2014-02-20 20:52:24 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll 2014-02-20 20:52:24 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll 2014-02-20 20:52:24 ----A---- C:\Windows\SYSWOW64\secproc.dll 2014-02-20 20:52:24 ----A---- C:\Windows\SYSWOW64\msdrm.dll 2014-02-20 20:52:24 ----A---- C:\Windows\system32\secproc_ssp_isv.dll 2014-02-20 20:52:24 ----A---- C:\Windows\system32\secproc_ssp.dll 2014-02-20 20:52:24 ----A---- C:\Windows\system32\secproc_isv.dll 2014-02-20 20:52:24 ----A---- C:\Windows\system32\secproc.dll 2014-02-20 20:52:24 ----A---- C:\Windows\system32\msdrm.dll 2014-02-20 20:52:21 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll 2014-02-20 20:52:21 ----A---- C:\Windows\system32\d3d10warp.dll 2014-02-20 20:52:20 ----A---- C:\Windows\SYSWOW64\d2d1.dll 2014-02-20 20:52:20 ----A---- C:\Windows\system32\d2d1.dll 2014-01-31 20:40:09 ----D---- C:\Windows\Migration 2014-01-31 20:38:16 ----D---- C:\1b5fd34eb4a2f584cfd6e34d 2014-01-31 20:30:14 ----D---- C:\Program Files (x86)\Spotify 2014-01-16 20:08:59 ----A---- C:\Windows\SYSWOW64\javaws.exe 2014-01-16 20:08:48 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll 2014-01-16 20:08:48 ----A---- C:\Windows\SYSWOW64\javaw.exe 2014-01-16 20:08:48 ----A---- C:\Windows\SYSWOW64\java.exe 2014-01-16 19:51:14 ----A---- C:\Windows\system32\drivers\aswstm.sys 2014-01-15 20:09:24 ----A---- C:\Windows\system32\drivers\usbuhci.sys 2014-01-15 20:09:24 ----A---- C:\Windows\system32\drivers\usbport.sys 2014-01-15 20:09:24 ----A---- C:\Windows\system32\drivers\usbohci.sys 2014-01-15 20:09:24 ----A---- C:\Windows\system32\drivers\usbhub.sys 2014-01-15 20:09:24 ----A---- C:\Windows\system32\drivers\usbehci.sys 2014-01-15 20:09:24 ----A---- C:\Windows\system32\drivers\usbd.sys 2014-01-15 20:09:24 ----A---- C:\Windows\system32\drivers\usbccgp.sys 2014-01-15 20:09:22 ----A---- C:\Windows\system32\win32k.sys 2014-01-15 20:09:20 ----A---- C:\Windows\system32\drivers\netio.sys 2013-12-20 17:01:36 ----A---- C:\Windows\system32\wmploc.DLL 2013-12-20 17:01:35 ----A---- C:\Windows\SYSWOW64\wmploc.DLL 2013-12-20 17:01:35 ----A---- C:\Windows\SYSWOW64\wmp.dll 2013-12-20 17:01:33 ----A---- C:\Windows\system32\wmp.dll 2013-12-20 16:54:05 ----A---- C:\Windows\SYSWOW64\msieftp.dll 2013-12-20 16:54:05 ----A---- C:\Windows\system32\msieftp.dll 2013-12-20 16:54:03 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll 2013-12-20 16:54:03 ----A---- C:\Windows\system32\WMPhoto.dll 2013-12-20 16:54:02 ----A---- C:\Windows\system32\drivers\portcls.sys 2013-12-20 16:54:02 ----A---- C:\Windows\system32\drivers\drmk.sys 2013-12-20 16:53:59 ----A---- C:\Windows\SYSWOW64\tzres.dll 2013-12-20 16:53:59 ----A---- C:\Windows\system32\tzres.dll 2013-12-20 16:53:52 ----A---- C:\Windows\SYSWOW64\imagehlp.dll 2013-12-20 16:53:52 ----A---- C:\Windows\system32\imagehlp.dll 2013-12-20 16:53:51 ----A---- C:\Windows\SYSWOW64\wscript.exe 2013-12-20 16:53:51 ----A---- C:\Windows\SYSWOW64\scrrun.dll 2013-12-20 16:53:51 ----A---- C:\Windows\SYSWOW64\cscript.exe 2013-12-20 16:53:51 ----A---- C:\Windows\system32\wscript.exe 2013-12-20 16:53:51 ----A---- C:\Windows\system32\scrrun.dll 2013-12-20 16:53:51 ----A---- C:\Windows\system32\cscript.exe ======List of files/folders modified in the last 3 months====== 2014-02-26 16:24:06 ----D---- C:\Windows\Temp 2014-02-26 16:21:16 ----RD---- C:\Program Files 2014-02-26 16:20:20 ----D---- C:\Users\Elon\AppData\Roaming\Spotify 2014-02-26 16:20:09 ----D---- C:\Users\Elon\AppData\Roaming\TeraCopy 2014-02-26 16:19:17 ----RD---- C:\Program Files (x86) 2014-02-26 16:19:02 ----D---- C:\Windows\system32\Tasks 2014-02-26 16:18:58 ----D---- C:\Windows 2014-02-26 16:18:57 ----A---- C:\Windows\system32\aswBoot.exe 2014-02-26 16:16:11 ----D---- C:\Users\Elon\AppData\Roaming\uTorrent 2014-02-26 16:14:34 ----D---- C:\Windows\system32\config 2014-02-26 16:12:11 ----D---- C:\Windows\Prefetch 2014-02-26 16:00:07 ----D---- C:\Users\Elon\AppData\Roaming\Dropbox 2014-02-26 15:58:08 ----D---- C:\Windows\System32 2014-02-26 15:16:19 ----D---- C:\Windows\inf 2014-02-26 14:23:08 ----D---- C:\Users\Elon\AppData\Roaming\DAEMON Tools Lite 2014-02-26 14:22:33 ----D---- C:\Windows\system32\LogFiles 2014-02-26 14:22:32 ----D---- C:\Windows\debug 2014-02-26 14:17:28 ----D---- C:\ProgramData\NVIDIA 2014-02-26 14:17:17 ----D---- C:\Windows\winsxs 2014-02-26 14:15:11 ----D---- C:\Windows\SysWOW64 2014-02-26 14:14:10 ----D---- C:\Windows\SYSWOW64\wbem 2014-02-26 14:14:10 ----D---- C:\Windows\SYSWOW64\nl-NL 2014-02-26 14:14:10 ----D---- C:\Windows\system32\wbem 2014-02-26 14:14:10 ----D---- C:\Windows\system32\nl-NL 2014-02-26 14:14:10 ----D---- C:\Windows\system32\DriverStore 2014-02-26 14:14:10 ----D---- C:\Windows\system32\drivers 2014-02-26 13:03:20 ----D---- C:\Windows\system32\catroot 2014-02-26 13:03:18 ----D---- C:\Windows\system32\catroot2 2014-02-26 12:58:40 ----RD---- C:\Users 2014-02-26 12:50:01 ----SHD---- C:\Windows\Installer 2014-02-26 12:49:40 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI 2014-02-26 12:49:16 ----A---- C:\Windows\system32\PerfStringBackup.INI 2014-02-26 12:36:05 ----D---- C:\ProgramData\DAEMON Tools Lite 2014-02-26 12:09:25 ----D---- C:\Program Files (x86)\Common Files 2014-02-26 12:09:12 ----HD---- C:\ProgramData 2014-02-25 17:12:34 ----D---- C:\Users\Elon\AppData\Roaming\vlc 2014-02-25 14:52:52 ----D---- C:\Windows\rescache 2014-02-25 13:40:48 ----D---- C:\Windows\Microsoft.NET 2014-02-24 20:31:15 ----RSD---- C:\Windows\assembly 2014-02-24 18:00:21 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe 2014-02-24 17:03:55 ----D---- C:\Program Files\Internet Explorer 2014-02-24 17:03:55 ----D---- C:\Program Files (x86)\Internet Explorer 2014-02-20 21:28:18 ----D---- C:\Windows\system32\MRT 2014-02-20 21:25:39 ----A---- C:\Windows\system32\MRT.exe 2014-01-31 20:40:23 ----D---- C:\Windows\SYSWOW64\en-US 2014-01-31 20:40:23 ----D---- C:\Windows\system32\en-US 2014-01-31 20:40:09 ----SD---- C:\ProgramData\Microsoft 2014-01-18 17:08:07 ----D---- C:\Program Files\WinRAR 2014-01-16 20:25:33 ----D---- C:\ProgramData\Oracle 2014-01-16 18:54:17 ----D---- C:\ProgramData\Microsoft Help 2013-12-20 17:03:05 ----D---- C:\Program Files\Windows Media Player 2013-12-20 17:03:05 ----D---- C:\Program Files (x86)\Windows Media Player 2013-12-18 06:13:56 ----N---- C:\Windows\system32\MpSigStub.exe 2013-12-08 21:03:40 ----D---- C:\Windows\Panther 2013-12-08 21:03:39 ----D---- C:\Windows\Logs 2013-12-08 19:20:09 ----D---- C:\Windows\SYSWOW64\migration 2013-12-08 19:20:05 ----D---- C:\Windows\PolicyDefinitions 2013-12-08 19:20:04 ----D---- C:\Windows\system32\migration ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2013-10-19 65776] R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-01-16 207904] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888] R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2014-02-26 381440] R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552] R1 aswRdr;aswRdr; \??\C:\Windows\system32\drivers\aswRdr2.sys [2013-10-19 92544] R1 aswSnx;aswSnx; \??\C:\Windows\system32\drivers\aswSnx.sys [2014-02-26 1038072] R1 aswSP;aswSP; \??\C:\Windows\system32\drivers\aswSP.sys [2014-02-26 421704] R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560] R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2014-02-26 78648] R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmpx64.sys [2007-08-08 60928] R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimspx64.sys [2007-07-26 55296] R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdpx64.sys [2007-07-27 57856] R3 aswStm;aswStm; \??\C:\Windows\system32\drivers\aswStm.sys [2014-02-26 80184] R3 netw5v64;Stuurprogramma voor Intel® Wireless WiFi Link 5000 Series-adapter voor 64-bits Windows Vista; C:\Windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368] R3 nuvotoncir;Nuvoton IR Transceiver; C:\Windows\system32\DRIVERS\nuvotoncir.sys [2009-08-31 48128] R3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 109056] R3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864] R3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312] R3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864] R3 StillCam;Stuurprogramma voor seriële digitale fotocamera; C:\Windows\system32\drivers\serscan.sys [2009-07-14 12288] R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-08-28 292400] S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2012-03-08 48488] S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-09-03 2480104] S3 jumi;%Jumi%; C:\Windows\system32\DRIVERS\jumi.sys [2010-06-03 15160] S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352] S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888] S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456] S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656] S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688] S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys [] S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 56832] S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys [] S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2012-02-15 52736] S3 usbscan;Stuurprogramma voor USB-scanner; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 42496] S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys [] S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760] S3 winbondcir;Winbond IR Transceiver; C:\Windows\system32\DRIVERS\winbondcir.sys [2007-03-28 46592] S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432] R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-01-16 50344] R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136] R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-08-29 920864] R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-09-05 1364256] R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 2292096] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-24 257928] S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136] S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2014-02-26 655624] S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2012-03-08 1492840] S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-02-06 111616] S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136] S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136] S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136] S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-09-08 1255736] S4 aspnet_state;ASP.NET-statusservice; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808] S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184] -----------------EOF-----------------Logfile of random's system information tool 1.09 (written by random/random) Run by Elon at 2014-02-26 16:24:04 Microsoft Windows 7 Enterprise Service Pack 1 System drive C: has 146 GB (77%) free of 191 GB Total RAM: 4094 MB (54% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 16:24:06, on 26-2-2014 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v11.0 (11.00.9600.16518) Boot mode: Normal Running processes: C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe C:\Users\Elon\AppData\Roaming\Search Protection\SearchProtection.exe C:\Users\Elon\AppData\Roaming\Dropbox\bin\Dropbox.exe C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe C:\Program Files\AVAST Software\Avast\AvastUI.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Users\Elon\AppData\Roaming\Spotify\spotify.exe C:\Users\Elon\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Elon\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyHelper.exe C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyHelper.exe C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyHelper.exe C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyHelper.exe C:\Users\Elon\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Elon\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Elon\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyHelper.exe C:\Program Files\trend micro\Elon.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer! R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer! R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: (no name) - {87775fdb-6972-41f9-ae51-8326e38cb206} - (no file) F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKCU\..\Run: [Google Update] "C:\Users\Elon\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [HP Deskjet 3070 B611 series (NET)] "C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN24F630M605MQ:NW" -scfn "HP Deskjet 3070 B611 series (NET)" -AutoStart 1 O4 - HKCU\..\Run: [spotify Web Helper] "C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" O4 - HKCU\..\Run: [HP Deskjet 3520 series (NET)] "C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN2C51G3H905SY:NW" -scfn "HP Deskjet 3520 series (NET)" -AutoStart 1 O4 - HKCU\..\Run: [HP Deskjet 3070 B611 series (NET) #2] "C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN2486314K05MQ:NW" -scfn "HP Deskjet 3070 B611 series (NET) #2" -AutoStart 1 O4 - HKCU\..\Run: [searchProtection] "C:\Users\Elon\AppData\Roaming\Search Protection\SearchProtection.EXE" /autostart O4 - HKLM\..\Policies\Explorer\Run: [AdobeFlash] C:\Users\Elon\AppData\Roaming\server.exe O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-21-1227978982-2757754115-940779378-1004\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser') O4 - HKUS\S-1-5-21-1227978982-2757754115-940779378-1004\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser') O4 - Startup: Dropbox.lnk = Elon\AppData\Roaming\Dropbox\bin\Dropbox.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing) O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 11013 bytes ======Listing Processes====== \SystemRoot\System32\smss.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 wininit.exe %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\lsm.exe winlogon.exe C:\Windows\system32\svchost.exe -k DcomLaunch "C:\Windows\system32\nvvsvc.exe" C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k GPSvcGroup C:\Windows\system32\svchost.exe -k NetworkService "C:\Program Files\AVAST Software\Avast\AvastSvc.exe" "C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe" C:\Windows\system32\nvvsvc.exe -session -first C:\Windows\System32\spoolsv.exe "taskhost.exe" C:\Windows\Explorer.EXE C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" "C:\Windows\system32\Dwm.exe" C:\Windows\system32\svchost.exe -k imgsvc "C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE" WLIDSvcM.exe 1112 C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation "C:\Program Files\Synaptics\SynTP\SynTPHelper.exe" C:\Windows\system32\SearchIndexer.exe /Embedding "C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" "C:\Users\Elon\AppData\Roaming\Search Protection\SearchProtection.exe" /autostart "C:\Users\Elon\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup "C:\Program Files\Windows Media Player\wmpnetwk.exe" C:\Windows\System32\svchost.exe -k LocalServicePeerNet "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe" "C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe" "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7} "C:\Users\Elon\AppData\Roaming\Spotify\spotify.exe" "C:\Users\Elon\AppData\Local\Google\Chrome\Application\chrome.exe" "C:\Users\Elon\AppData\Local\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="3420.0.1751871964\147001557" --disable-image-transport-surface --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,1,14,27,33 --gpu-vendor-id=0x10de --gpu-device-id=0x0407 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.2702 --ignored=" --type=renderer " /prefetch:822062411 "C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=renderer --js-flags=--harmony-proxies --no-sandbox --lang=en-US --lang=en-US --log-severity=disable --channel="4128.1.16238001\1122382084" /prefetch:673131151 "C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=renderer --js-flags=--harmony-proxies --no-sandbox --lang=en-US --lang=en-US --log-severity=disable --channel="4128.2.597407603\1715961386" /prefetch:673131151 "C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=renderer --js-flags=--harmony-proxies --no-sandbox --lang=en-US --lang=en-US --log-severity=disable --channel="4128.3.2109697015\860888437" /prefetch:673131151 "C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=gpu-process --channel="4128.4.623612232\756779804" --no-sandbox --lang=en-US --log-severity=disable --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,9,19,22 --gpu-vendor-id=0x10de --gpu-device-id=0x0407 --gpu-driver-vendor=NVIDIA --gpu-driver-version=9.18.13.2702 --lang=en-US --log-severity=disable /prefetch:822062411 C:\Windows\System32\svchost.exe -k secsvcs "C:\Users\Elon\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group4 pct:10d stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/OmniboxBundledExperimentV1/StableReorderHoldbackR2/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_17/UMA-Uniformity-Trial-1-Percent/group_95/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --renderer-print-preview --enable-software-compositing --channel="3420.13.1475746250\1897008987" /prefetch:673131151 "C:\Users\Elon\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group4 pct:10d stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/OmniboxBundledExperimentV1/StableReorderHoldbackR2/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_17/UMA-Uniformity-Trial-1-Percent/group_95/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --renderer-print-preview --enable-software-compositing --channel="3420.15.1374673507\2061113967" /prefetch:673131151 "C:\Users\Elon\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=nl --force-fieldtrials="AutocompleteDynamicTrial_2/DefaultControl_R2_Stable/BrowserPreReadExperiment/100-pct-default/ChromeSuggestions/Default/EmbeddedSearch/Group4 pct:10d stable:pp1 use_cacheable_ntp:1 espv:210 suppress_on_srp:1/ExtensionInstallVerification/None/OmniboxBundledExperimentV1/StableReorderHoldbackR2/Prerender/PrerenderEnabled/PrerenderFromOmnibox/OmniboxPrerenderDisabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_17/UMA-Uniformity-Trial-1-Percent/group_95/UMA-Uniformity-Trial-10-Percent/group_08/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_03/UMA-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-50-Percent/group_01/" --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --renderer-print-preview --enable-software-compositing --channel="3420.32.1511744630\244340277" /prefetch:673131151 "C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyHelper.exe" --type=renderer --js-flags=--harmony-proxies --no-sandbox --lang=en-US --lang=en-US --log-severity=disable --channel="4128.7.2050123969\1824776470" /prefetch:673131151 C:\Windows\system32\wbem\wmiprvse.exe C:\Windows\system32\sppsvc.exe "C:\Users\Elon\Desktop\RSITx64.exe" C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF} ======Scheduled tasks folder====== C:\Windows\tasks\Adobe Flash Player Updater.job C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1227978982-2757754115-940779378-1000Core.job C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1227978982-2757754115-940779378-1000UA.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}] avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-02-26 1390368] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 529280] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}] Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-01-16 462760] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Aanmeldhulp voor Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}] Windows Live Messenger Companion Helper - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2012-03-08 393600] [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-01-16 171944] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-02-26 1390368] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-09-03 11464296] "SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-08-28 1825064] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] "AdobeFlash"=C:\Users\Elon\AppData\Roaming\server.exe [] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "JumiController"= [] "Google Update"=C:\Users\Elon\AppData\Local\Google\Update\GoogleUpdate.exe [2011-05-27 136176] "HP Deskjet 3070 B611 series (NET)"=C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\ScanToPCActivationApp.exe [2011-06-08 2676584] "Spotify Web Helper"=C:\Users\Elon\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [2014-01-23 1171968] "HP Deskjet 3520 series (NET)"=C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe [2012-10-17 2573416] "HP Deskjet 3070 B611 series (NET) #2"=C:\Program Files\HP\HP Deskjet 3070 B611 series\Bin\ScanToPCActivationApp.exe [2011-06-08 2676584] "SearchProtection"=C:\Users\Elon\AppData\Roaming\Search Protection\SearchProtection.EXE [2013-12-31 837992] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM] C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] C:\Program Files (x86)\iTunes\iTunesHelper.exe [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] C:\Program Files (x86)\QuickTime\QTTask.exe [2013-05-01 421888] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run] "GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040] "Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904] "HP Software Update"=C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [2011-10-28 49208] ""= [] "AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-01-16 3764024] "QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2013-05-01 421888] "SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336] [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] "AdobeFlash"=C:\Users\Elon\AppData\Roaming\server.exe [] C:\Users\Elon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup Dropbox.lnk - C:\Users\Elon\AppData\Roaming\Dropbox\bin\Dropbox.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832] [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=5 "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "PromptOnSecureDesktop"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoActiveDesktop"=1 "NoActiveDesktopChanges"=1 "ForceActiveDesktopOn"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] "C:\Users\Elon\AppData\Local\Temp\Terminado.exe"="C:\Users\Elon\AppData\Local\Temp\Terminado.exe:*:Enabled:Windows Messanger" "C:\Users\Elon\AppData\Roaming\server.exe"="C:\Users\Elon\AppData\Roaming\server.exe:*:Enabled:Windows Messanger" [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVYU"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.i420"=iyuv_32.dll "VIDC.YVU9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "MSVideo8"=VfWWDM32.dll "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 3 months====== 2014-02-26 16:24:04 ----D---- C:\rsit 2014-02-26 16:21:16 ----D---- C:\Program Files\trend micro 2014-02-26 15:58:08 ----A---- C:\Windows\system32\FNTCACHE.DAT 2014-02-26 14:14:10 ----D---- C:\Windows\system32\drivers\en-US 2014-02-26 13:03:11 ----A---- C:\Windows\system32\TsUsbGDCoInstaller.dll 2014-02-26 13:02:59 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll 2014-02-26 13:02:59 ----A---- C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe 2014-02-26 13:02:58 ----A---- C:\Windows\system32\drivers\TsUsbFlt.sys 2014-02-26 13:02:57 ----A---- C:\Windows\system32\tsgqec.dll 2014-02-26 13:02:56 ----A---- C:\Windows\SYSWOW64\wksprtPS.dll 2014-02-26 13:02:56 ----A---- C:\Windows\SYSWOW64\tsgqec.dll 2014-02-26 13:02:56 ----A---- C:\Windows\SYSWOW64\mstsc.exe 2014-02-26 13:02:56 ----A---- C:\Windows\SYSWOW64\MsRdpWebAccess.dll 2014-02-26 13:02:56 ----A---- C:\Windows\system32\wksprtPS.dll 2014-02-26 13:02:56 ----A---- C:\Windows\system32\wksprt.exe 2014-02-26 13:02:56 ----A---- C:\Windows\system32\TSWbPrxy.exe 2014-02-26 13:02:56 ----A---- C:\Windows\system32\mstsc.exe 2014-02-26 13:02:56 ----A---- C:\Windows\system32\MsRdpWebAccess.dll 2014-02-26 13:02:55 ----A---- C:\Windows\SYSWOW64\rdvidcrl.dll 2014-02-26 13:02:55 ----A---- C:\Windows\SYSWOW64\mstscax.dll 2014-02-26 13:02:55 ----A---- C:\Windows\system32\mstscax.dll 2014-02-26 13:02:54 ----A---- C:\Windows\system32\rdvidcrl.dll 2014-02-26 12:58:27 ----D---- C:\Program Files (x86)\NVIDIA Corporation 2014-02-26 12:57:32 ----A---- C:\Windows\system32\nvvsvc.exe 2014-02-26 12:57:32 ----A---- C:\Windows\system32\nvsvcr.dll 2014-02-26 12:57:32 ----A---- C:\Windows\system32\nvshext.dll 2014-02-26 12:56:37 ----A---- C:\Windows\SYSWOW64\OpenCL.dll 2014-02-26 12:56:37 ----A---- C:\Windows\system32\OpenCL.dll 2014-02-26 12:54:06 ----D---- C:\Program Files\NVIDIA Corporation 2014-02-26 12:46:10 ----A---- C:\Windows\SYSWOW64\TSWorkspace.dll 2014-02-26 12:46:10 ----A---- C:\Windows\system32\TSWorkspace.dll 2014-02-26 12:13:44 ----D---- C:\Program Files\PowerISO 2014-02-26 12:13:38 ----D---- C:\Program Files (x86)\SearchProtect 2014-02-26 12:09:12 ----D---- C:\ProgramData\Rosetta Stone 2014-02-26 12:09:12 ----D---- C:\Program Files (x86)\Rosetta Stone 2014-02-20 21:14:22 ----A---- C:\Windows\SYSWOW64\vbscript.dll 2014-02-20 21:14:22 ----A---- C:\Windows\system32\vbscript.dll 2014-02-20 21:13:33 ----A---- C:\Windows\SYSWOW64\msrating.dll 2014-02-20 21:13:33 ----A---- C:\Windows\SYSWOW64\ieui.dll 2014-02-20 21:13:33 ----A---- C:\Windows\system32\msrating.dll 2014-02-20 21:13:32 ----A---- C:\Windows\system32\ieui.dll 2014-02-20 21:13:32 ----A---- C:\Windows\system32\iernonce.dll 2014-02-20 21:13:32 ----A---- C:\Windows\system32\ieetwcollectorres.dll 2014-02-20 21:13:32 ----A---- C:\Windows\system32\ie4uinit.exe 2014-02-20 21:13:31 ----A---- C:\Windows\SYSWOW64\msfeeds.dll 2014-02-20 21:13:31 ----A---- C:\Windows\system32\jsproxy.dll 2014-02-20 21:13:30 ----A---- C:\Windows\SYSWOW64\jsproxy.dll 2014-02-20 21:13:30 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe 2014-02-20 21:13:30 ----A---- C:\Windows\SYSWOW64\iesetup.dll 2014-02-20 21:13:30 ----A---- C:\Windows\SYSWOW64\iernonce.dll 2014-02-20 21:13:30 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll 2014-02-20 21:13:30 ----A---- C:\Windows\system32\msfeeds.dll 2014-02-20 21:13:30 ----A---- C:\Windows\system32\ieUnatt.exe 2014-02-20 21:13:30 ----A---- C:\Windows\system32\iesetup.dll 2014-02-20 21:13:30 ----A---- C:\Windows\system32\ieetwproxystub.dll 2014-02-20 21:13:30 ----A---- C:\Windows\system32\ieetwcollector.exe 2014-02-20 21:13:29 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll 2014-02-20 21:13:29 ----A---- C:\Windows\system32\mshtml.dll 2014-02-20 21:13:28 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll 2014-02-20 21:13:28 ----A---- C:\Windows\system32\jscript9diag.dll 2014-02-20 21:13:28 ----A---- C:\Windows\system32\ieapfltr.dll 2014-02-20 21:13:27 ----A---- C:\Windows\SYSWOW64\wininet.dll 2014-02-20 21:13:27 ----A---- C:\Windows\SYSWOW64\iertutil.dll 2014-02-20 21:13:27 ----A---- C:\Windows\system32\wininet.dll 2014-02-20 21:13:27 ----A---- C:\Windows\system32\iertutil.dll 2014-02-20 21:13:26 ----A---- C:\Windows\SYSWOW64\urlmon.dll 2014-02-20 21:13:26 ----A---- C:\Windows\system32\urlmon.dll 2014-02-20 21:13:25 ----A---- C:\Windows\system32\ieframe.dll 2014-02-20 21:13:24 ----A---- C:\Windows\SYSWOW64\ieframe.dll 2014-02-20 21:13:23 ----A---- C:\Windows\SYSWOW64\mshtml.dll 2014-02-20 21:13:23 ----A---- C:\Windows\SYSWOW64\jscript9.dll 2014-02-20 21:13:22 ----A---- C:\Windows\system32\jscript9.dll 2014-02-20 20:52:38 ----A---- C:\Windows\system32\msxml3.dll 2014-02-20 20:52:36 ----A---- C:\Windows\SYSWOW64\msxml3r.dll 2014-02-20 20:52:36 ----A---- C:\Windows\SYSWOW64\msxml3.dll 2014-02-20 20:52:36 ----A---- C:\Windows\system32\msxml3r.dll 2014-02-20 20:52:26 ----A---- C:\Windows\SYSWOW64\RMActivate_isv.exe 2014-02-20 20:52:26 ----A---- C:\Windows\SYSWOW64\RMActivate.exe 2014-02-20 20:52:26 ----A---- C:\Windows\system32\RMActivate_isv.exe 2014-02-20 20:52:26 ----A---- C:\Windows\system32\RMActivate.exe 2014-02-20 20:52:25 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp_isv.exe 2014-02-20 20:52:25 ----A---- C:\Windows\SYSWOW64\RMActivate_ssp.exe 2014-02-20 20:52:25 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe 2014-02-20 20:52:25 ----A---- C:\Windows\system32\RMActivate_ssp.exe 2014-02-20 20:52:24 ----A---- C:\Windows\SYSWOW64\secproc_ssp_isv.dll 2014-02-20 20:52:24 ----A---- C:\Windows\SYSWOW64\secproc_ssp.dll 2014-02-20 20:52:24 ----A---- C:\Windows\SYSWOW64\secproc_isv.dll 2014-02-20 20:52:24 ----A---- C:\Windows\SYSWOW64\secproc.dll 2014-02-20 20:52:24 ----A---- C:\Windows\SYSWOW64\msdrm.dll 2014-02-20 20:52:24 ----A---- C:\Windows\system32\secproc_ssp_isv.dll 2014-02-20 20:52:24 ----A---- C:\Windows\system32\secproc_ssp.dll 2014-02-20 20:52:24 ----A---- C:\Windows\system32\secproc_isv.dll 2014-02-20 20:52:24 ----A---- C:\Windows\system32\secproc.dll 2014-02-20 20:52:24 ----A---- C:\Windows\system32\msdrm.dll 2014-02-20 20:52:21 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll 2014-02-20 20:52:21 ----A---- C:\Windows\system32\d3d10warp.dll 2014-02-20 20:52:20 ----A---- C:\Windows\SYSWOW64\d2d1.dll 2014-02-20 20:52:20 ----A---- C:\Windows\system32\d2d1.dll 2014-01-31 20:40:09 ----D---- C:\Windows\Migration 2014-01-31 20:38:16 ----D---- C:\1b5fd34eb4a2f584cfd6e34d 2014-01-31 20:30:14 ----D---- C:\Program Files (x86)\Spotify 2014-01-16 20:08:59 ----A---- C:\Windows\SYSWOW64\javaws.exe 2014-01-16 20:08:48 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll 2014-01-16 20:08:48 ----A---- C:\Windows\SYSWOW64\javaw.exe 2014-01-16 20:08:48 ----A---- C:\Windows\SYSWOW64\java.exe 2014-01-16 19:51:14 ----A---- C:\Windows\system32\drivers\aswstm.sys 2014-01-15 20:09:24 ----A---- C:\Windows\system32\drivers\usbuhci.sys 2014-01-15 20:09:24 ----A---- C:\Windows\system32\drivers\usbport.sys 2014-01-15 20:09:24 ----A---- C:\Windows\system32\drivers\usbohci.sys 2014-01-15 20:09:24 ----A---- C:\Windows\system32\drivers\usbhub.sys 2014-01-15 20:09:24 ----A---- C:\Windows\system32\drivers\usbehci.sys 2014-01-15 20:09:24 ----A---- C:\Windows\system32\drivers\usbd.sys 2014-01-15 20:09:24 ----A---- C:\Windows\system32\drivers\usbccgp.sys 2014-01-15 20:09:22 ----A---- C:\Windows\system32\win32k.sys 2014-01-15 20:09:20 ----A---- C:\Windows\system32\drivers\netio.sys 2013-12-20 17:01:36 ----A---- C:\Windows\system32\wmploc.DLL 2013-12-20 17:01:35 ----A---- C:\Windows\SYSWOW64\wmploc.DLL 2013-12-20 17:01:35 ----A---- C:\Windows\SYSWOW64\wmp.dll 2013-12-20 17:01:33 ----A---- C:\Windows\system32\wmp.dll 2013-12-20 16:54:05 ----A---- C:\Windows\SYSWOW64\msieftp.dll 2013-12-20 16:54:05 ----A---- C:\Windows\system32\msieftp.dll 2013-12-20 16:54:03 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll 2013-12-20 16:54:03 ----A---- C:\Windows\system32\WMPhoto.dll 2013-12-20 16:54:02 ----A---- C:\Windows\system32\drivers\portcls.sys 2013-12-20 16:54:02 ----A---- C:\Windows\system32\drivers\drmk.sys 2013-12-20 16:53:59 ----A---- C:\Windows\SYSWOW64\tzres.dll 2013-12-20 16:53:59 ----A---- C:\Windows\system32\tzres.dll 2013-12-20 16:53:52 ----A---- C:\Windows\SYSWOW64\imagehlp.dll 2013-12-20 16:53:52 ----A---- C:\Windows\system32\imagehlp.dll 2013-12-20 16:53:51 ----A---- C:\Windows\SYSWOW64\wscript.exe 2013-12-20 16:53:51 ----A---- C:\Windows\SYSWOW64\scrrun.dll 2013-12-20 16:53:51 ----A---- C:\Windows\SYSWOW64\cscript.exe 2013-12-20 16:53:51 ----A---- C:\Windows\system32\wscript.exe 2013-12-20 16:53:51 ----A---- C:\Windows\system32\scrrun.dll 2013-12-20 16:53:51 ----A---- C:\Windows\system32\cscript.exe ======List of files/folders modified in the last 3 months====== 2014-02-26 16:24:06 ----D---- C:\Windows\Temp 2014-02-26 16:21:16 ----RD---- C:\Program Files 2014-02-26 16:20:20 ----D---- C:\Users\Elon\AppData\Roaming\Spotify 2014-02-26 16:20:09 ----D---- C:\Users\Elon\AppData\Roaming\TeraCopy 2014-02-26 16:19:17 ----RD---- C:\Program Files (x86) 2014-02-26 16:19:02 ----D---- C:\Windows\system32\Tasks 2014-02-26 16:18:58 ----D---- C:\Windows 2014-02-26 16:18:57 ----A---- C:\Windows\system32\aswBoot.exe 2014-02-26 16:16:11 ----D---- C:\Users\Elon\AppData\Roaming\uTorrent 2014-02-26 16:14:34 ----D---- C:\Windows\system32\config 2014-02-26 16:12:11 ----D---- C:\Windows\Prefetch 2014-02-26 16:00:07 ----D---- C:\Users\Elon\AppData\Roaming\Dropbox 2014-02-26 15:58:08 ----D---- C:\Windows\System32 2014-02-26 15:16:19 ----D---- C:\Windows\inf 2014-02-26 14:23:08 ----D---- C:\Users\Elon\AppData\Roaming\DAEMON Tools Lite 2014-02-26 14:22:33 ----D---- C:\Windows\system32\LogFiles 2014-02-26 14:22:32 ----D---- C:\Windows\debug 2014-02-26 14:17:28 ----D---- C:\ProgramData\NVIDIA 2014-02-26 14:17:17 ----D---- C:\Windows\winsxs 2014-02-26 14:15:11 ----D---- C:\Windows\SysWOW64 2014-02-26 14:14:10 ----D---- C:\Windows\SYSWOW64\wbem 2014-02-26 14:14:10 ----D---- C:\Windows\SYSWOW64\nl-NL 2014-02-26 14:14:10 ----D---- C:\Windows\system32\wbem 2014-02-26 14:14:10 ----D---- C:\Windows\system32\nl-NL 2014-02-26 14:14:10 ----D---- C:\Windows\system32\DriverStore 2014-02-26 14:14:10 ----D---- C:\Windows\system32\drivers 2014-02-26 13:03:20 ----D---- C:\Windows\system32\catroot 2014-02-26 13:03:18 ----D---- C:\Windows\system32\catroot2 2014-02-26 12:58:40 ----RD---- C:\Users 2014-02-26 12:50:01 ----SHD---- C:\Windows\Installer 2014-02-26 12:49:40 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI 2014-02-26 12:49:16 ----A---- C:\Windows\system32\PerfStringBackup.INI 2014-02-26 12:36:05 ----D---- C:\ProgramData\DAEMON Tools Lite 2014-02-26 12:09:25 ----D---- C:\Program Files (x86)\Common Files 2014-02-26 12:09:12 ----HD---- C:\ProgramData 2014-02-25 17:12:34 ----D---- C:\Users\Elon\AppData\Roaming\vlc 2014-02-25 14:52:52 ----D---- C:\Windows\rescache 2014-02-25 13:40:48 ----D---- C:\Windows\Microsoft.NET 2014-02-24 20:31:15 ----RSD---- C:\Windows\assembly 2014-02-24 18:00:21 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe 2014-02-24 17:03:55 ----D---- C:\Program Files\Internet Explorer 2014-02-24 17:03:55 ----D---- C:\Program Files (x86)\Internet Explorer 2014-02-20 21:28:18 ----D---- C:\Windows\system32\MRT 2014-02-20 21:25:39 ----A---- C:\Windows\system32\MRT.exe 2014-01-31 20:40:23 ----D---- C:\Windows\SYSWOW64\en-US 2014-01-31 20:40:23 ----D---- C:\Windows\system32\en-US 2014-01-31 20:40:09 ----SD---- C:\ProgramData\Microsoft 2014-01-18 17:08:07 ----D---- C:\Program Files\WinRAR 2014-01-16 20:25:33 ----D---- C:\ProgramData\Oracle 2014-01-16 18:54:17 ----D---- C:\ProgramData\Microsoft Help 2013-12-20 17:03:05 ----D---- C:\Program Files\Windows Media Player 2013-12-20 17:03:05 ----D---- C:\Program Files (x86)\Windows Media Player 2013-12-18 06:13:56 ----N---- C:\Windows\system32\MpSigStub.exe 2013-12-08 21:03:40 ----D---- C:\Windows\Panther 2013-12-08 21:03:39 ----D---- C:\Windows\Logs 2013-12-08 19:20:09 ----D---- C:\Windows\SYSWOW64\migration 2013-12-08 19:20:05 ----D---- C:\Windows\PolicyDefinitions 2013-12-08 19:20:04 ----D---- C:\Windows\system32\migration ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2013-10-19 65776] R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-01-16 207904] R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888] R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2014-02-26 381440] R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 199552] R1 aswRdr;aswRdr; \??\C:\Windows\system32\drivers\aswRdr2.sys [2013-10-19 92544] R1 aswSnx;aswSnx; \??\C:\Windows\system32\drivers\aswSnx.sys [2014-02-26 1038072] R1 aswSP;aswSP; \??\C:\Windows\system32\drivers\aswSP.sys [2014-02-26 421704] R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560] R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2014-02-26 78648] R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmpx64.sys [2007-08-08 60928] R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimspx64.sys [2007-07-26 55296] R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdpx64.sys [2007-07-27 57856] R3 aswStm;aswStm; \??\C:\Windows\system32\drivers\aswStm.sys [2014-02-26 80184] R3 netw5v64;Stuurprogramma voor Intel® Wireless WiFi Link 5000 Series-adapter voor 64-bits Windows Vista; C:\Windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368] R3 nuvotoncir;Nuvoton IR Transceiver; C:\Windows\system32\DRIVERS\nuvotoncir.sys [2009-08-31 48128] R3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 109056] R3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864] R3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312] R3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864] R3 StillCam;Stuurprogramma voor seriële digitale fotocamera; C:\Windows\system32\drivers\serscan.sys [2009-07-14 12288] R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-08-28 292400] S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2012-03-08 48488] S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2010-09-03 2480104] S3 jumi;%Jumi%; C:\Windows\system32\DRIVERS\jumi.sys [2010-06-03 15160] S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352] S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888] S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456] S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 6656] S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 34688] S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys [] S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 56832] S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys [] S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2012-02-15 52736] S3 usbscan;Stuurprogramma voor USB-scanner; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 42496] S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys [] S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 21760] S3 winbondcir;Winbond IR Transceiver; C:\Windows\system32\DRIVERS\winbondcir.sys [2007-03-28 46592] S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432] R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-01-16 50344] R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136] R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-08-29 920864] R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2013-09-05 1364256] R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 2292096] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-24 257928] S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136] S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2014-02-26 655624] S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2012-03-08 1492840] S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-02-06 111616] S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696] S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136] S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136] S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136] S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-09-08 1255736] S4 aspnet_state;ASP.NET-statusservice; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808] S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184] -----------------EOF-----------------

Ha, Heb Delfix en CCleaner uitgevoerd, defragmenteren ga ik binnenkort doen Bedankt voor de hulp!

Ha, CCleaner gebruik ik al geregeld Ik had nog wel een vraagje als ik de map Administrator kijk dan staat daar een map .swt, weet niet wat het inhoud? En nog een vraag, met defragmentatie raak je verder geen bestanden kwijt toch, hij ordent ze alleen maar? Geld dit ook voor de schijfopruiming, of maakt dit juist de hele 'schijf' leeg? Gr

Goedemorgen, Vastlopen doet ie niet meer , maar erg snel is ie nog niet. Gr

Bij AdwCleaner heb ik wel op clean gedrukt, maar er was niets gevonden. Heb het nogmaals gedaan, en weer niets gevonden! [ATTACH]28600[/ATTACH] mbam-log-2013-10-21 (20-20-28).txt

[ATTACH]28590[/ATTACH] [ATTACH]28591[/ATTACH] AdwCleaner[R1].txt zoek-results3.log

Zoek.exe Version 4.0.0.5 Updated 17-October-2013 Tool run by Hofte on ma 21-10-2013 at 11:27:52,03. Microsoft Windows 7 Enterprise 6.1.7601 Service Pack 1 x86 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Administrator\Desktop\zoek.exe [script inserted] ==== System Restore Info ====================== 21-10-2013 11:28:55 Zoek.exe System Restore Point Created Succesfully. ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-2695659227-4190923716-1575364736-500\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} deleted successfully HKEY_USERS\S-1-5-21-2695659227-4190923716-1575364736-500\Software\Microsoft\Internet Explorer\SearchScopes\{01648709-8328-4DD4-AD1C-B4EC762D0140} deleted successfully ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CltMngSvc deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\CltMngSvc deleted successfully ==== Deleting Files \ Folders ====================== C:\Users\Administrator\AppData\Local\SearchProtect deleted C:\Users\Administrator\.TransferManager.db deleted C:\Program Files\Mozilla Firefox\user.js deleted C:\Program Files\MyFree Codec deleted C:\Users\Administrator\AppData\Local\CRE deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyFree Codec deleted C:\Users\Administrator\AppData\LocalLow\microsoft\silverlight\outofbrowser\index\portal.qtrax.com deleted C:\Windows\system32\config\systemprofile\AppData\LocalLow\Application Updater deleted "C:\ProgramData\mhuciwoqrlhqcnw" deleted "C:\Users\Administrator\AppData\Roaming\Ehagz\ukwiz.zot" deleted "C:\Users\Administrator\AppData\Roaming\Daag" deleted "C:\Users\Administrator\AppData\Roaming\Ehagz" deleted "C:\Users\Administrator\AppData\Roaming\Oggoek" deleted ==== Folders Found ====================== ==== Files Found ====================== --- C:\Program Files\HP\Common\TransferManager.dll --- Company: Hewlett-Packard File Description: TransferManager File Version: 1.0.14.0 Product Name: TransferManager Copyright: © Hewlett-Packard. All rights reserved. Original Filename: TransferManager.dll File type: ----a-w- File size: 235576 Created time: 2011-10-28 10:17:22 Modified time: 2011-10-28 10:17:22 MD5: AA64DFD779BDC7CF36BFD4B259AA7A44 SHA1: 804EEC6FB853AFE7B16BA45349AFA5B3EEEF9F69 --- C:\Program Files\HP\Common\TransferManagerPS.dll --- Company: ------ File Description: ------ File Version: ------ Product Name: ------ Copyright: ------ Original Filename: ------ File type: ----a-w- File size: 60472 Created time: 2011-10-28 10:17:34 Modified time: 2011-10-28 10:17:34 MD5: CD7285934145C96BFA02C274A899D800 SHA1: 0F8F65294B5FFAECD41BF5E9F6AB4B11D7C90E4C ==== Folders Found In C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1 ====================== 2013-10-05 10:26:02 d-----w- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1\x86 2013-10-05 10:26:02 d-----w- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1\x86\x86 ==== Files Found In C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1 ====================== 2012-08-21 11:01:22 106928 ----a-w- 498BD12B38B549887D9E856EB734354E C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1\x86\GEARAspi.dll 2012-08-21 11:01:22 115672 ----a-w- FB45A66ADB7900D80AA65E666A5A3288 C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1\x86\DifXInst32.exe 2012-08-21 11:01:22 26840 ----a-w- 185ADA973B5020655CEE342059A86CBB C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1\x86\x86\GEARAspiWDM.sys 2012-08-21 11:01:22 2704 ----a-w- 6258ABB375A0C0566EDF16B7C785D994 C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1\x86\GEARAspiWDM.inf 2012-08-21 11:01:22 323464 ----a-w- CF73C3A03582408D422D4F7A01190D00 C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1\x86\DIFxAPI.dll 2012-08-21 11:01:22 7587 ----a-w- 4AD3F7E7BD34C641ABBDC77472FFD749 C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1\x86\gearaspiwdmx86.cat 2012-08-21 11:01:28 1977816 ----a-w- 85E85B5BC75B0D712FEDB5633E1D2AFB C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1\GEARDIFx.exe 2013-10-05 10:26:08 3982 ----a-w- 17B4CD230672744B91B738A84988EECB C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1\x86\DIFxInstallLog.txt ==== Registry Search Results for "SearchProtect" ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\SearchProtect] [HKEY_LOCAL_MACHINE\SOFTWARE\SearchProtect] "InstallDir"="C:\\PROGRA~1\\SearchProtect" [HKEY_USERS\S-1-5-21-2695659227-4190923716-1575364736-500\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\\Program Files\\SearchProtect\\UI\\bin\\cltmngui.exe"="Search Protect by Conduit" [HKEY_USERS\S-1-5-21-2695659227-4190923716-1575364736-500_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache] "C:\\Program Files\\SearchProtect\\UI\\bin\\cltmngui.exe"="Search Protect by Conduit" ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== ====== C:\Users\ADMINI~1\AppData\Local\Temp ==== ====== Java Cache ===== ====== C:\Windows\system32 ===== 2013-10-20 17:20:35 8449956064B65CDBA476AEBE5C59B9D9 340272 ----a-w- C:\Windows\System32\FNTCACHE.DAT 2013-10-19 16:48:45 9223A2810B73069F4A03A636052EF14A 264616 ----a-w- C:\Windows\System32\javaws.exe 2013-10-19 16:48:27 DC1342498BEE7EF1646E9D63138B69CC 175016 ----a-w- C:\Windows\System32\javaw.exe 2013-10-19 16:48:27 9BF46C7F21E75FA0BB03AA93368CC66C 94632 ----a-w- C:\Windows\System32\WindowsAccessBridge.dll 2013-10-19 16:48:27 658633D255FEF154EA1CB8705B4468C5 174504 ----a-w- C:\Windows\System32\java.exe 2013-10-11 11:50:21 E02C01EB0ED522327AFF3BE5CBCF6017 690688 ----a-w- C:\Windows\System32\jscript.dll 2013-10-11 11:50:21 351B1A5B8A02A59DD29D122B0D231FA6 2706432 ----a-w- C:\Windows\System32\mshtml.tlb 2013-10-11 11:50:19 5A847E98EAF032928E67EE52DE08952D 2876928 ----a-w- C:\Windows\System32\jscript9.dll 2013-10-11 11:50:18 DC7DB5BC0E2D135103730E08FE1C540D 39424 ----a-w- C:\Windows\System32\jsproxy.dll 2013-10-11 11:50:18 BE8F3297A0BC3D3E3B66D9A45F64F0B9 61440 ----a-w- C:\Windows\System32\iesetup.dll 2013-10-11 11:50:17 5E775F0C365F01A8A7382BBEFC4A53A5 391168 ----a-w- C:\Windows\System32\ieui.dll 2013-10-11 11:50:15 E8433E4E65BDFB35DE5C2BFF745F1386 42496 ----a-w- C:\Windows\System32\ie4uinit.exe 2013-10-11 11:50:15 883C0D3A22CE87A3203CD5518EBB5758 493056 ----a-w- C:\Windows\System32\msfeeds.dll 2013-10-11 11:50:15 6E9013E3D112E26A42EC057CAE990649 109056 ----a-w- C:\Windows\System32\iesysprep.dll 2013-10-11 11:50:15 58A43D9DFFF91C1457EC47BDCF969B59 71680 ----a-w- C:\Windows\System32\RegisterIEPKEYs.exe 2013-10-11 11:50:15 556F70EDECE99CCD64C7D8897F3264F4 33280 ----a-w- C:\Windows\System32\iernonce.dll 2013-10-11 11:50:14 61DC3F2BE3093FE22CD717260946D7AD 1141248 ----a-w- C:\Windows\System32\urlmon.dll 2013-10-11 11:50:13 122B216B091D06F672CC8D331128FB06 2048512 ----a-w- C:\Windows\System32\iertutil.dll 2013-10-11 11:50:10 E4FEB264B47360B7296AEA4E052F88D8 1767936 ----a-w- C:\Windows\System32\wininet.dll 2013-10-11 11:50:08 8F5EAAF76A6811332A8C67DB0D4C395F 13761024 ----a-w- C:\Windows\System32\ieframe.dll 2013-10-11 11:50:03 A7221924181C8EB92B64C5A2D888BEA5 14335488 ----a-w- C:\Windows\System32\mshtml.dll 2013-10-11 05:25:38 75F5E1FE8D55CF8E577E0EC5F2290D3F 530432 ----a-w- C:\Windows\System32\comctl32.dll 2013-10-11 05:25:33 E94C583CDE2348950155F2AF2876F34D 231424 ----a-w- C:\Windows\System32\mswsock.dll 2013-10-11 05:25:25 482C8CD985C727C7C78A5E9B320947F0 3969472 ----a-w- C:\Windows\System32\ntkrnlpa.exe 2013-10-11 05:25:24 813A7F5A2D6D366EB3FFB643B851BCE5 3914176 ----a-w- C:\Windows\System32\ntoskrnl.exe 2013-10-11 05:25:23 E0B8C6B1EA1EF94747E966E9093FB968 1289096 ----a-w- C:\Windows\System32\ntdll.dll 2013-10-11 05:25:23 401D25136E26B237D77DA1BF1198B3BD 619520 ----a-w- C:\Windows\System32\tdh.dll 2013-10-11 05:25:22 D67472125471784DE7147946EDA25FEB 640512 ----a-w- C:\Windows\System32\advapi32.dll 2013-10-11 05:25:20 2A01B40C8334A8124001CFAC256FCA83 102608 ----a-w- C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll 2013-10-11 05:25:19 5C6B44F9CAAC475B7B9EBBC29CB7F065 295424 ----a-w- C:\Windows\System32\atmfd.dll 2013-10-11 05:25:19 2342EC9254F4C60CA98441BD65C89E12 10240 ----a-w- C:\Windows\System32\dciman32.dll 2013-10-11 05:25:18 F632602316001D517F4EF3B53B9A6C33 26112 ----a-w- C:\Windows\System32\lpk.dll 2013-10-11 05:25:18 8CC4638FA7B5B921B9080CF962582C0B 70656 ----a-w- C:\Windows\System32\fontsub.dll 2013-10-11 05:25:18 7D27E63B54DB093BB0D9E95F81094D75 34304 ----a-w- C:\Windows\System32\atmlib.dll 2013-10-11 05:25:14 E2ED66FAF894F545EB083AC5F5763854 434688 ----a-w- C:\Windows\System32\scavengeui.dll 2013-10-11 05:25:07 445C354D772DFEBF46F73078C8C2C797 2348544 ----a-w- C:\Windows\System32\win32k.sys 2013-10-11 05:24:57 75E8EBD7040CE238684333F97014762A 205824 ----a-w- C:\Windows\System32\WebClnt.dll 2013-10-11 05:24:56 EAF4712B706936C0B10D3B5319B37E81 81920 ----a-w- C:\Windows\System32\davclnt.dll ====== C:\Windows\system32\drivers ===== 2013-10-19 16:35:45 71D97F1A3CC47A56728F7A400A3F8295 76288 ----a-w- C:\Windows\System32\drivers\usbccgp.sys 2013-10-19 16:35:44 C4FB8E7ADEA9B5CEEA885A1B504B7E40 43008 ----a-w- C:\Windows\System32\drivers\usbehci.sys 2013-10-19 16:35:44 86AA95ACB611001E26CD2C0145F2225A 258560 ----a-w- C:\Windows\System32\drivers\usbhub.sys 2013-10-19 16:35:43 FDA6F2BB7FA034D95863ED8788B4E416 284672 ----a-w- C:\Windows\System32\drivers\usbport.sys 2013-10-19 16:35:43 6FB17D7A2E76B838886E5E8C60239DAE 6016 ----a-w- C:\Windows\System32\drivers\usbd.sys 2013-10-19 16:35:42 DCDF9855145A14DFCA0AB32308871961 20480 ----a-w- C:\Windows\System32\drivers\usbohci.sys 2013-10-19 16:35:42 8E51D04175BAA14C4F79AA5F6D248770 24064 ----a-w- C:\Windows\System32\drivers\usbuhci.sys 2013-10-11 05:25:36 FC6B21DB4B5B398AB93DBE59CBF11036 36352 ----a-w- C:\Windows\System32\drivers\usbscan.sys 2013-10-11 05:25:36 F1B27299F547D452EDAEF01FC187CB91 25728 ----a-w- C:\Windows\System32\drivers\hidparse.sys 2013-10-11 05:25:36 50ABE682EBE752EAF62B18790D6D491C 55808 ----a-w- C:\Windows\System32\drivers\hidclass.sys 2013-10-11 05:25:33 F81BB7E487EDCEAB630A7EE66CF23913 338944 ----a-w- C:\Windows\System32\drivers\afd.sys 2013-10-11 05:25:33 CA59F7C570AF70BC174F477CFE2D9EE3 1294272 ----a-w- C:\Windows\System32\drivers\tcpip.sys 2013-10-11 05:25:30 71BC35067CABC02C9453AEAA42B2E43E 729024 ----a-w- C:\Windows\System32\drivers\dxgkrnl.sys 2013-10-11 05:24:56 21F4B24ACFC79A483515BD986DD9043F 115712 ----a-w- C:\Windows\System32\drivers\mrxdav.sys 2013-10-11 05:24:51 2352AB5F9F8F097BF9D41D5A4718A041 86016 ----a-w- C:\Windows\System32\drivers\usbcir.sys 2013-10-11 05:24:49 25944D2CC49E0A6C581D02A74B7D6645 527064 ----a-w- C:\Windows\System32\drivers\Wdf01000.sys ====== C:\Windows\Tasks ====== 2013-10-18 17:02:15 E7D79AEDA96D3FAEEF82A5628FAC5B56 1042 ----a-w- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-10-18 17:02:15 B96F0EB98839AB8CCA57CB6254C6ADD6 4038 ----a-w- C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA 2013-10-18 17:02:13 4B935242FB4971EF9120652DAE728182 3786 ----a-w- C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore 2013-10-18 17:02:12 7607E606118823AF628177595132D60A 1038 ----a-w- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job ====== C:\Windows\Temp ====== ======= C:\Program Files ===== 2013-10-19 16:50:09 -------- d-----w- C:\Program Files\Common Files\Java 2013-10-18 17:02:05 -------- d-----w- C:\Program Files\Google ======= C: ===== ====== C:\Users\Administrator\AppData\Roaming ====== 2013-10-20 17:40:47 -------- d-----w- C:\Users\Administrator\AppData\Local\Temp 2013-10-20 09:49:07 F0F2FFAB24B9D2C122E62151487BB9B8 84968 ----a-w- C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT 2013-10-20 08:59:27 -------- d-----w- C:\Users\Administrator\AppData\Roaming\uTorrent ====== C:\Users\Administrator ====== 2013-10-20 17:24:45 -------- d-----w- C:\ProgramData\Apple Computer 2013-10-20 09:08:22 69CA82A7482A00D8EE063D2B97FC4338 781383 ----a-w- C:\Users\Administrator\Desktop\RSIT.exe 2013-10-19 16:51:51 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2013-10-19 16:50:03 -------- d-----w- C:\ProgramData\Oracle 2013-10-19 16:48:27 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2013-10-18 17:03:01 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2013-10-05 10:26:11 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2013-10-05 10:24:27 -------- d-----w- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1 ====== C: exe-files == 2013-10-20 09:08:22 69CA82A7482A00D8EE063D2B97FC4338 781383 ----a-w- C:\Users\Administrator\Desktop\RSIT.exe 2013-10-20 09:00:18 27DA3304BCFC3A131141543767FDFE35 1141328 ----a-w- C:\Users\Administrator\AppData\Roaming\uTorrent\updates\3.3.2_30180.exe 2013-10-20 08:59:53 27DA3304BCFC3A131141543767FDFE35 1141328 ----a-w- C:\Users\Administrator\AppData\Roaming\uTorrent\uTorrent.exe 2013-10-19 17:10:33 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\Trend Micro\Hofte.exe 2013-10-19 16:48:45 9223A2810B73069F4A03A636052EF14A 264616 ----a-w- C:\Windows\System32\javaws.exe 2013-10-19 16:48:27 DC1342498BEE7EF1646E9D63138B69CC 175016 ----a-w- C:\Windows\System32\javaw.exe 2013-10-19 16:48:27 658633D255FEF154EA1CB8705B4468C5 174504 ----a-w- C:\Windows\System32\java.exe 2013-10-19 16:48:16 CC27986F45EF9FD700BC347355B002B3 15784 ----a-w- C:\Program Files\Java\jre7\bin\rmid.exe 2013-10-19 16:48:16 738AF811C60870FB218D47C628D350AA 15784 ----a-w- C:\Program Files\Java\jre7\bin\rmiregistry.exe 2013-10-19 16:48:16 707BFE32E04720B9D50562669A30F86C 49064 ----a-w- C:\Program Files\Java\jre7\bin\ssvagent.exe 2013-10-19 16:48:16 5FA3FFE74E893E8A9443C2CF3DFA7A64 15784 ----a-w- C:\Program Files\Java\jre7\bin\pack200.exe 2013-10-19 16:48:16 555651269833A415E1F9E594E8DD829F 146344 ----a-w- C:\Program Files\Java\jre7\bin\unpack200.exe 2013-10-19 16:48:16 54A30377949D4984EE72C5510C58B83D 16296 ----a-w- C:\Program Files\Java\jre7\bin\tnameserv.exe 2013-10-19 16:48:16 464358DE0429ABB319DFE3F5E5C85F77 15784 ----a-w- C:\Program Files\Java\jre7\bin\orbd.exe 2013-10-19 16:48:16 3FB1EAAB3CD35126D1F3B9A0A5B7B2DC 15784 ----a-w- C:\Program Files\Java\jre7\bin\policytool.exe 2013-10-19 16:48:16 15EBB4D4B54FCE42D8CB116145BB7EBA 15784 ----a-w- C:\Program Files\Java\jre7\bin\servertool.exe 2013-10-19 16:48:15 CE10E75E10EB6952A7D813FA587EC632 15784 ----a-w- C:\Program Files\Java\jre7\bin\ktab.exe 2013-10-19 16:48:15 CBFE91C51D4FA69FE9D140ABEB7E51DC 15784 ----a-w- C:\Program Files\Java\jre7\bin\kinit.exe 2013-10-19 16:48:15 80A79264302910C7C24BA7E44267EFEF 182696 ----a-w- C:\Program Files\Java\jre7\bin\jqs.exe 2013-10-19 16:48:15 7F55715977ECF32633857F16980F008E 52648 ----a-w- C:\Program Files\Java\jre7\bin\jp2launcher.exe 2013-10-19 16:48:15 7814B0A3E6FE8FFF31B7108D16FC4591 15784 ----a-w- C:\Program Files\Java\jre7\bin\keytool.exe 2013-10-19 16:48:15 5721DA732075E01569A287767CBCFA5A 15784 ----a-w- C:\Program Files\Java\jre7\bin\klist.exe 2013-10-19 16:48:14 DC1342498BEE7EF1646E9D63138B69CC 175016 ----a-w- C:\Program Files\Java\jre7\bin\javaw.exe 2013-10-19 16:48:14 9223A2810B73069F4A03A636052EF14A 264616 ----a-w- C:\Program Files\Java\jre7\bin\javaws.exe 2013-10-19 16:48:14 83D790AA563347A026771D50E3D07A9B 66984 ----a-w- C:\Program Files\Java\jre7\bin\javacpl.exe 2013-10-19 16:48:14 658633D255FEF154EA1CB8705B4468C5 174504 ----a-w- C:\Program Files\Java\jre7\bin\java.exe 2013-10-19 16:48:13 A9743D2D69B80800FEA5F24E7C4B02B3 48040 ----a-w- C:\Program Files\Java\jre7\bin\jabswitch.exe 2013-10-19 16:48:13 2F7EBCD8FB6557997F0583508FFFE6B1 15784 ----a-w- C:\Program Files\Java\jre7\bin\java-rmi.exe 2013-10-19 16:36:54 0AAED42FF8ACDEE2CAC7B0F9A40EBA76 59392 ----a-w- C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Resources\template.exe 2013-10-19 16:36:53 D93F66F49305DD28437838E8648951A6 103272 ----a-w- C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe 2013-10-19 16:36:53 77D4A137779DB57638C9CB9048973B68 54632 ----a-w- C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Resources\airappinstaller.exe 2013-10-19 16:36:53 77D4A137779DB57638C9CB9048973B68 54632 ----a-w- C:\Program Files\Adobe\Flash Player\AddIns\airappinstaller\airappinstaller.exe 2013-10-19 16:36:52 E8BA226A3E6B0D69B097141460B9CB68 130408 ----a-w- C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR Application Installer.exe 2013-10-18 17:02:41 1DB5B92E54BA5E4976995B6BE4B0BB81 34615136 ----a-w- C:\Program Files\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\30.0.1599.101\30.0.1599.101_chrome_installer.exe 2013-10-18 17:02:08 CEFEBDB9E274BD90C12D131ED25CC819 59784 ----atw- C:\Program Files\Google\Update\1.3.21.165\GoogleUpdateOnDemand.exe 2013-10-18 17:02:07 EB8EEB98D01B5D31898D8E53C3789832 59784 ----atw- C:\Program Files\Google\Update\1.3.21.165\GoogleUpdateBroker.exe 2013-10-18 17:02:07 BE27258FE3740CADE4A1B9CEE4DCCDAF 819176 ----a-w- C:\Program Files\Google\Update\1.3.21.165\GoogleUpdateSetup.exe 2013-10-18 17:02:07 506708142BC63DABA64F2D3AD1DCD5BF 116648 ----atw- C:\Program Files\Google\Update\GoogleUpdate.exe 2013-10-18 17:02:05 CF7B0E597C1F34E528285495721DEEE9 237960 ----atw- C:\Program Files\Google\Update\1.3.21.165\GoogleCrashHandler.exe 2013-10-18 17:02:05 506708142BC63DABA64F2D3AD1DCD5BF 116648 ----atw- C:\Program Files\Google\Update\1.3.21.165\GoogleUpdate.exe 2013-10-18 17:02:05 0DC0DE2966A6DBA4CFBF6639DF44F5BA 319880 ----atw- C:\Program Files\Google\Update\1.3.21.165\GoogleCrashHandler64.exe === C: other files == 2013-10-19 16:48:16 0A35B7026416325DE4A3EEC131F6EE2C 18636 ----a-w- C:\Program Files\Java\jre7\lib\deploy\ffjcext.zip 2013-10-19 16:35:45 71D97F1A3CC47A56728F7A400A3F8295 76288 ----a-w- C:\Windows\System32\DriverStore\FileRepository\usb.inf_x86_neutral_ef2e2e69da5c57df\usbccgp.sys 2013-10-19 16:35:45 71D97F1A3CC47A56728F7A400A3F8295 76288 ----a-w- C:\Windows\System32\drivers\usbccgp.sys 2013-10-19 16:35:44 C4FB8E7ADEA9B5CEEA885A1B504B7E40 43008 ----a-w- C:\Windows\System32\DriverStore\FileRepository\usbport.inf_x86_neutral_12acda10f5c2fedf\usbehci.sys 2013-10-19 16:35:44 C4FB8E7ADEA9B5CEEA885A1B504B7E40 43008 ----a-w- C:\Windows\System32\drivers\usbehci.sys 2013-10-19 16:35:44 86AA95ACB611001E26CD2C0145F2225A 258560 ----a-w- C:\Windows\System32\DriverStore\FileRepository\usbport.inf_x86_neutral_12acda10f5c2fedf\usbhub.sys 2013-10-19 16:35:44 86AA95ACB611001E26CD2C0145F2225A 258560 ----a-w- C:\Windows\System32\drivers\usbhub.sys 2013-10-19 16:35:43 FDA6F2BB7FA034D95863ED8788B4E416 284672 ----a-w- C:\Windows\System32\DriverStore\FileRepository\usbport.inf_x86_neutral_12acda10f5c2fedf\usbport.sys 2013-10-19 16:35:43 FDA6F2BB7FA034D95863ED8788B4E416 284672 ----a-w- C:\Windows\System32\drivers\usbport.sys 2013-10-19 16:35:43 86AA95ACB611001E26CD2C0145F2225A 258560 ----a-w- C:\Windows\System32\DriverStore\FileRepository\usb.inf_x86_neutral_ef2e2e69da5c57df\usbhub.sys 2013-10-19 16:35:43 6FB17D7A2E76B838886E5E8C60239DAE 6016 ----a-w- C:\Windows\System32\DriverStore\FileRepository\usbport.inf_x86_neutral_12acda10f5c2fedf\usbd.sys 2013-10-19 16:35:43 6FB17D7A2E76B838886E5E8C60239DAE 6016 ----a-w- C:\Windows\System32\drivers\usbd.sys 2013-10-19 16:35:42 DCDF9855145A14DFCA0AB32308871961 20480 ----a-w- C:\Windows\System32\DriverStore\FileRepository\usbport.inf_x86_neutral_12acda10f5c2fedf\usbohci.sys 2013-10-19 16:35:42 DCDF9855145A14DFCA0AB32308871961 20480 ----a-w- C:\Windows\System32\drivers\usbohci.sys 2013-10-19 16:35:42 8E51D04175BAA14C4F79AA5F6D248770 24064 ----a-w- C:\Windows\System32\DriverStore\FileRepository\usbport.inf_x86_neutral_12acda10f5c2fedf\usbuhci.sys 2013-10-19 16:35:42 8E51D04175BAA14C4F79AA5F6D248770 24064 ----a-w- C:\Windows\System32\drivers\usbuhci.sys ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions] "wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [19-07-2013 13:39] ==== Chrome Look ====================== AdBlock - Administrator - Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom Chrome In-App Payments service - Administrator - Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.com" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}] not found New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.com" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}" ==== Empty IE Cache ====================== C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully ==== Empty FireFox Cache ====================== No FireFox Profiles found ==== Empty Chrome Cache ====================== C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\ADMINI~1\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== EOF on ma 21-10-2013 at 11:57:30,40 ======================

Zoek.exe Version 4.0.0.5 Updated 17-October-2013 Tool run by Hofte on zo 20-10-2013 at 19:32:10,58. Microsoft Windows 7 Enterprise 6.1.7601 Service Pack 1 x86 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Administrator\Desktop\zoek.exe [script inserted] ==== System Restore Info ====================== 20-10-2013 19:33:35 Zoek.exe System Restore Point Created Succesfully. ==== Registry Fix Code ====================== Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"=- ==== Deleting Files \ Folders ====================== "C:\Program Files\SearchProtect\Main\bin\CltMngSvc.exe" deleted "C:\Program Files\SearchProtect\SearchProtect\bin\cltmng.exe" deleted "C:\Program Files\SearchProtect\UI\bin\cltmngui.exe" deleted "C:\Program Files\SearchProtect" not deleted "C:\Program Files\SearchProtect\Main" not deleted "C:\Program Files\SearchProtect\SearchProtect" deleted "C:\Program Files\SearchProtect\UI" deleted "C:\Program Files\SearchProtect\Main\bin" not deleted "C:\Program Files\SearchProtect\SearchProtect\bin" deleted "C:\Program Files\SearchProtect\UI\bin" deleted ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== ====== C:\Users\ADMINI~1\AppData\Local\Temp ==== 2013-10-20 08:59:54 9FB9D49C2DB7EDD1084AB765D619F5C6 66368 ----a-w- C:\Users\Administrator\AppData\Local\Temp\uttBF5F.tmp.exe 2013-10-19 12:25:21 B22198403FFEAF57BE49FF5A08DA1EF4 23003252 ----a-w- C:\Users\Administrator\AppData\Local\Temp\vlc-2.0.8-win32.exe 2013-10-19 12:24:02 9FB9D49C2DB7EDD1084AB765D619F5C6 66368 ----a-w- C:\Users\Administrator\AppData\Local\Temp\uttF60D.tmp.exe 2013-10-19 12:23:15 24AEB20C4D857A431FE82AAC1A95C005 902736 ----a-w- C:\Users\Administrator\AppData\Local\Temp\utt4A73.tmp.exe 2013-10-19 12:06:33 A12FB1A9FC4433CD64C77A7250821A02 172032 ----a-w- C:\Users\Administrator\AppData\Local\Temp\muzapp.exe 2013-10-19 12:06:32 0A2003F4CFD58C350C7B2E2D9807D12D 200704 ----a-w- C:\Users\Administrator\AppData\Local\Temp\muzwmts.dll 2013-10-19 12:06:30 8CB1DDC3EAC6B60213C75B21DAE06FF5 135168 ----a-w- C:\Users\Administrator\AppData\Local\Temp\muzaf1.dll ====== Java Cache ===== ====== C:\Windows\system32 ===== 2013-10-20 17:20:35 8449956064B65CDBA476AEBE5C59B9D9 340272 ----a-w- C:\Windows\System32\FNTCACHE.DAT 2013-10-19 16:48:45 9223A2810B73069F4A03A636052EF14A 264616 ----a-w- C:\Windows\System32\javaws.exe 2013-10-19 16:48:27 DC1342498BEE7EF1646E9D63138B69CC 175016 ----a-w- C:\Windows\System32\javaw.exe 2013-10-19 16:48:27 9BF46C7F21E75FA0BB03AA93368CC66C 94632 ----a-w- C:\Windows\System32\WindowsAccessBridge.dll 2013-10-19 16:48:27 658633D255FEF154EA1CB8705B4468C5 174504 ----a-w- C:\Windows\System32\java.exe 2013-10-11 11:50:21 E02C01EB0ED522327AFF3BE5CBCF6017 690688 ----a-w- C:\Windows\System32\jscript.dll 2013-10-11 11:50:21 351B1A5B8A02A59DD29D122B0D231FA6 2706432 ----a-w- C:\Windows\System32\mshtml.tlb 2013-10-11 11:50:19 5A847E98EAF032928E67EE52DE08952D 2876928 ----a-w- C:\Windows\System32\jscript9.dll 2013-10-11 11:50:18 DC7DB5BC0E2D135103730E08FE1C540D 39424 ----a-w- C:\Windows\System32\jsproxy.dll 2013-10-11 11:50:18 BE8F3297A0BC3D3E3B66D9A45F64F0B9 61440 ----a-w- C:\Windows\System32\iesetup.dll 2013-10-11 11:50:17 5E775F0C365F01A8A7382BBEFC4A53A5 391168 ----a-w- C:\Windows\System32\ieui.dll 2013-10-11 11:50:15 E8433E4E65BDFB35DE5C2BFF745F1386 42496 ----a-w- C:\Windows\System32\ie4uinit.exe 2013-10-11 11:50:15 883C0D3A22CE87A3203CD5518EBB5758 493056 ----a-w- C:\Windows\System32\msfeeds.dll 2013-10-11 11:50:15 6E9013E3D112E26A42EC057CAE990649 109056 ----a-w- C:\Windows\System32\iesysprep.dll 2013-10-11 11:50:15 58A43D9DFFF91C1457EC47BDCF969B59 71680 ----a-w- C:\Windows\System32\RegisterIEPKEYs.exe 2013-10-11 11:50:15 556F70EDECE99CCD64C7D8897F3264F4 33280 ----a-w- C:\Windows\System32\iernonce.dll 2013-10-11 11:50:14 61DC3F2BE3093FE22CD717260946D7AD 1141248 ----a-w- C:\Windows\System32\urlmon.dll 2013-10-11 11:50:13 122B216B091D06F672CC8D331128FB06 2048512 ----a-w- C:\Windows\System32\iertutil.dll 2013-10-11 11:50:10 E4FEB264B47360B7296AEA4E052F88D8 1767936 ----a-w- C:\Windows\System32\wininet.dll 2013-10-11 11:50:08 8F5EAAF76A6811332A8C67DB0D4C395F 13761024 ----a-w- C:\Windows\System32\ieframe.dll 2013-10-11 11:50:03 A7221924181C8EB92B64C5A2D888BEA5 14335488 ----a-w- C:\Windows\System32\mshtml.dll 2013-10-11 05:25:38 75F5E1FE8D55CF8E577E0EC5F2290D3F 530432 ----a-w- C:\Windows\System32\comctl32.dll 2013-10-11 05:25:33 E94C583CDE2348950155F2AF2876F34D 231424 ----a-w- C:\Windows\System32\mswsock.dll 2013-10-11 05:25:25 482C8CD985C727C7C78A5E9B320947F0 3969472 ----a-w- C:\Windows\System32\ntkrnlpa.exe 2013-10-11 05:25:24 813A7F5A2D6D366EB3FFB643B851BCE5 3914176 ----a-w- C:\Windows\System32\ntoskrnl.exe 2013-10-11 05:25:23 E0B8C6B1EA1EF94747E966E9093FB968 1289096 ----a-w- C:\Windows\System32\ntdll.dll 2013-10-11 05:25:23 401D25136E26B237D77DA1BF1198B3BD 619520 ----a-w- C:\Windows\System32\tdh.dll 2013-10-11 05:25:22 D67472125471784DE7147946EDA25FEB 640512 ----a-w- C:\Windows\System32\advapi32.dll 2013-10-11 05:25:20 2A01B40C8334A8124001CFAC256FCA83 102608 ----a-w- C:\Windows\System32\PresentationCFFRasterizerNative_v0300.dll 2013-10-11 05:25:19 5C6B44F9CAAC475B7B9EBBC29CB7F065 295424 ----a-w- C:\Windows\System32\atmfd.dll 2013-10-11 05:25:19 2342EC9254F4C60CA98441BD65C89E12 10240 ----a-w- C:\Windows\System32\dciman32.dll 2013-10-11 05:25:18 F632602316001D517F4EF3B53B9A6C33 26112 ----a-w- C:\Windows\System32\lpk.dll 2013-10-11 05:25:18 8CC4638FA7B5B921B9080CF962582C0B 70656 ----a-w- C:\Windows\System32\fontsub.dll 2013-10-11 05:25:18 7D27E63B54DB093BB0D9E95F81094D75 34304 ----a-w- C:\Windows\System32\atmlib.dll 2013-10-11 05:25:14 E2ED66FAF894F545EB083AC5F5763854 434688 ----a-w- C:\Windows\System32\scavengeui.dll 2013-10-11 05:25:07 445C354D772DFEBF46F73078C8C2C797 2348544 ----a-w- C:\Windows\System32\win32k.sys 2013-10-11 05:24:57 75E8EBD7040CE238684333F97014762A 205824 ----a-w- C:\Windows\System32\WebClnt.dll 2013-10-11 05:24:56 EAF4712B706936C0B10D3B5319B37E81 81920 ----a-w- C:\Windows\System32\davclnt.dll ====== C:\Windows\system32\drivers ===== 2013-10-19 16:35:45 71D97F1A3CC47A56728F7A400A3F8295 76288 ----a-w- C:\Windows\System32\drivers\usbccgp.sys 2013-10-19 16:35:44 C4FB8E7ADEA9B5CEEA885A1B504B7E40 43008 ----a-w- C:\Windows\System32\drivers\usbehci.sys 2013-10-19 16:35:44 86AA95ACB611001E26CD2C0145F2225A 258560 ----a-w- C:\Windows\System32\drivers\usbhub.sys 2013-10-19 16:35:43 FDA6F2BB7FA034D95863ED8788B4E416 284672 ----a-w- C:\Windows\System32\drivers\usbport.sys 2013-10-19 16:35:43 6FB17D7A2E76B838886E5E8C60239DAE 6016 ----a-w- C:\Windows\System32\drivers\usbd.sys 2013-10-19 16:35:42 DCDF9855145A14DFCA0AB32308871961 20480 ----a-w- C:\Windows\System32\drivers\usbohci.sys 2013-10-19 16:35:42 8E51D04175BAA14C4F79AA5F6D248770 24064 ----a-w- C:\Windows\System32\drivers\usbuhci.sys 2013-10-11 05:25:36 FC6B21DB4B5B398AB93DBE59CBF11036 36352 ----a-w- C:\Windows\System32\drivers\usbscan.sys 2013-10-11 05:25:36 F1B27299F547D452EDAEF01FC187CB91 25728 ----a-w- C:\Windows\System32\drivers\hidparse.sys 2013-10-11 05:25:36 50ABE682EBE752EAF62B18790D6D491C 55808 ----a-w- C:\Windows\System32\drivers\hidclass.sys 2013-10-11 05:25:33 F81BB7E487EDCEAB630A7EE66CF23913 338944 ----a-w- C:\Windows\System32\drivers\afd.sys 2013-10-11 05:25:33 CA59F7C570AF70BC174F477CFE2D9EE3 1294272 ----a-w- C:\Windows\System32\drivers\tcpip.sys 2013-10-11 05:25:30 71BC35067CABC02C9453AEAA42B2E43E 729024 ----a-w- C:\Windows\System32\drivers\dxgkrnl.sys 2013-10-11 05:24:56 21F4B24ACFC79A483515BD986DD9043F 115712 ----a-w- C:\Windows\System32\drivers\mrxdav.sys 2013-10-11 05:24:51 2352AB5F9F8F097BF9D41D5A4718A041 86016 ----a-w- C:\Windows\System32\drivers\usbcir.sys 2013-10-11 05:24:49 25944D2CC49E0A6C581D02A74B7D6645 527064 ----a-w- C:\Windows\System32\drivers\Wdf01000.sys ====== C:\Windows\Tasks ====== 2013-10-18 17:02:15 B96F0EB98839AB8CCA57CB6254C6ADD6 4038 ----a-w- C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA 2013-10-18 17:02:15 7F93A3E71DBFCB81651174794D4F01DD 1042 ----a-w- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-10-18 17:02:13 4B935242FB4971EF9120652DAE728182 3786 ----a-w- C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore 2013-10-18 17:02:12 3567E5809D338A6517C906AA232E672F 1038 ----a-w- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job ====== C:\Windows\Temp ====== ======= C:\Program Files ===== 2013-10-19 16:50:09 -------- d-----w- C:\Program Files\Common Files\Java 2013-10-19 12:24:49 -------- d-----w- C:\Program Files\SearchProtect 2013-10-18 17:02:05 -------- d-----w- C:\Program Files\Google ======= C: ===== ====== C:\Users\Administrator\AppData\Roaming ====== 2013-10-20 09:49:07 F0F2FFAB24B9D2C122E62151487BB9B8 84968 ----a-w- C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT 2013-10-20 08:59:27 -------- d-----w- C:\Users\Administrator\AppData\Roaming\uTorrent 2013-10-19 12:24:24 -------- d-----w- C:\Users\Administrator\AppData\Local\SearchProtect ====== C:\Users\Administrator ====== 2013-10-20 17:24:45 -------- d-----w- C:\ProgramData\Apple Computer 2013-10-20 09:08:22 69CA82A7482A00D8EE063D2B97FC4338 781383 ----a-w- C:\Users\Administrator\Desktop\RSIT.exe 2013-10-19 16:51:51 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2013-10-19 16:50:03 -------- d-----w- C:\ProgramData\Oracle 2013-10-19 16:48:27 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2013-10-18 17:03:01 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome 2013-10-05 10:26:11 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2013-10-05 10:24:27 -------- d-----w- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1 2013-09-30 18:06:20 B662B3EEA4D29D06D4B5B31F956ED917 1773 ----a-w- C:\Users\Administrator\.TransferManager.db ====== C: exe-files == 2013-10-20 09:08:22 69CA82A7482A00D8EE063D2B97FC4338 781383 ----a-w- C:\Users\Administrator\Desktop\RSIT.exe 2013-10-20 09:00:18 27DA3304BCFC3A131141543767FDFE35 1141328 ----a-w- C:\Users\Administrator\AppData\Roaming\uTorrent\updates\3.3.2_30180.exe 2013-10-20 09:00:11 295206BCBEF09873DC45B26E8C1CF84F 5616616 ----a-w- C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D6RBKTDX\SPSetup[1].exe 2013-10-20 08:59:59 80AF7980A7E0EE4345112F5AF92CF587 66992 ----a-w- C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QZ380QOT\spstub[1].exe 2013-10-20 08:59:54 9FB9D49C2DB7EDD1084AB765D619F5C6 66368 ----a-w- C:\Users\Administrator\AppData\Local\temp\uttBF5F.tmp.exe 2013-10-20 08:59:53 27DA3304BCFC3A131141543767FDFE35 1141328 ----a-w- C:\Users\Administrator\AppData\Roaming\uTorrent\uTorrent.exe 2013-10-19 17:10:33 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\Trend Micro\Hofte.exe 2013-10-19 16:48:45 9223A2810B73069F4A03A636052EF14A 264616 ----a-w- C:\Windows\System32\javaws.exe 2013-10-19 16:48:27 DC1342498BEE7EF1646E9D63138B69CC 175016 ----a-w- C:\Windows\System32\javaw.exe 2013-10-19 16:48:27 658633D255FEF154EA1CB8705B4468C5 174504 ----a-w- C:\Windows\System32\java.exe 2013-10-19 16:48:16 CC27986F45EF9FD700BC347355B002B3 15784 ----a-w- C:\Program Files\Java\jre7\bin\rmid.exe 2013-10-19 16:48:16 738AF811C60870FB218D47C628D350AA 15784 ----a-w- C:\Program Files\Java\jre7\bin\rmiregistry.exe 2013-10-19 16:48:16 707BFE32E04720B9D50562669A30F86C 49064 ----a-w- C:\Program Files\Java\jre7\bin\ssvagent.exe 2013-10-19 16:48:16 5FA3FFE74E893E8A9443C2CF3DFA7A64 15784 ----a-w- C:\Program Files\Java\jre7\bin\pack200.exe 2013-10-19 16:48:16 555651269833A415E1F9E594E8DD829F 146344 ----a-w- C:\Program Files\Java\jre7\bin\unpack200.exe 2013-10-19 16:48:16 54A30377949D4984EE72C5510C58B83D 16296 ----a-w- C:\Program Files\Java\jre7\bin\tnameserv.exe 2013-10-19 16:48:16 464358DE0429ABB319DFE3F5E5C85F77 15784 ----a-w- C:\Program Files\Java\jre7\bin\orbd.exe 2013-10-19 16:48:16 3FB1EAAB3CD35126D1F3B9A0A5B7B2DC 15784 ----a-w- C:\Program Files\Java\jre7\bin\policytool.exe 2013-10-19 16:48:16 15EBB4D4B54FCE42D8CB116145BB7EBA 15784 ----a-w- C:\Program Files\Java\jre7\bin\servertool.exe 2013-10-19 16:48:15 CE10E75E10EB6952A7D813FA587EC632 15784 ----a-w- C:\Program Files\Java\jre7\bin\ktab.exe 2013-10-19 16:48:15 CBFE91C51D4FA69FE9D140ABEB7E51DC 15784 ----a-w- C:\Program Files\Java\jre7\bin\kinit.exe 2013-10-19 16:48:15 80A79264302910C7C24BA7E44267EFEF 182696 ----a-w- C:\Program Files\Java\jre7\bin\jqs.exe 2013-10-19 16:48:15 7F55715977ECF32633857F16980F008E 52648 ----a-w- C:\Program Files\Java\jre7\bin\jp2launcher.exe 2013-10-19 16:48:15 7814B0A3E6FE8FFF31B7108D16FC4591 15784 ----a-w- C:\Program Files\Java\jre7\bin\keytool.exe 2013-10-19 16:48:15 5721DA732075E01569A287767CBCFA5A 15784 ----a-w- C:\Program Files\Java\jre7\bin\klist.exe 2013-10-19 16:48:14 DC1342498BEE7EF1646E9D63138B69CC 175016 ----a-w- C:\Program Files\Java\jre7\bin\javaw.exe 2013-10-19 16:48:14 9223A2810B73069F4A03A636052EF14A 264616 ----a-w- C:\Program Files\Java\jre7\bin\javaws.exe 2013-10-19 16:48:14 83D790AA563347A026771D50E3D07A9B 66984 ----a-w- C:\Program Files\Java\jre7\bin\javacpl.exe 2013-10-19 16:48:14 658633D255FEF154EA1CB8705B4468C5 174504 ----a-w- C:\Program Files\Java\jre7\bin\java.exe 2013-10-19 16:48:13 A9743D2D69B80800FEA5F24E7C4B02B3 48040 ----a-w- C:\Program Files\Java\jre7\bin\jabswitch.exe 2013-10-19 16:48:13 2F7EBCD8FB6557997F0583508FFFE6B1 15784 ----a-w- C:\Program Files\Java\jre7\bin\java-rmi.exe 2013-10-19 16:36:54 0AAED42FF8ACDEE2CAC7B0F9A40EBA76 59392 ----a-w- C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Resources\template.exe 2013-10-19 16:36:53 D93F66F49305DD28437838E8648951A6 103272 ----a-w- C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe 2013-10-19 16:36:53 77D4A137779DB57638C9CB9048973B68 54632 ----a-w- C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Resources\airappinstaller.exe 2013-10-19 16:36:53 77D4A137779DB57638C9CB9048973B68 54632 ----a-w- C:\Program Files\Adobe\Flash Player\AddIns\airappinstaller\airappinstaller.exe 2013-10-19 16:36:52 E8BA226A3E6B0D69B097141460B9CB68 130408 ----a-w- C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR Application Installer.exe 2013-10-19 12:25:21 B22198403FFEAF57BE49FF5A08DA1EF4 23003252 ----a-w- C:\Users\Administrator\AppData\Local\temp\vlc-2.0.8-win32.exe 2013-10-19 12:24:02 9FB9D49C2DB7EDD1084AB765D619F5C6 66368 ----a-w- C:\Users\Administrator\AppData\Local\temp\uttF60D.tmp.exe 2013-10-19 12:23:15 24AEB20C4D857A431FE82AAC1A95C005 902736 ----a-w- C:\Users\Administrator\AppData\Local\temp\utt4A73.tmp.exe 2013-10-19 12:06:33 A12FB1A9FC4433CD64C77A7250821A02 172032 ----a-w- C:\Users\Administrator\AppData\Local\temp\muzapp.exe 2013-10-18 17:02:41 1DB5B92E54BA5E4976995B6BE4B0BB81 34615136 ----a-w- C:\Program Files\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\30.0.1599.101\30.0.1599.101_chrome_installer.exe 2013-10-18 17:02:08 CEFEBDB9E274BD90C12D131ED25CC819 59784 ----atw- C:\Program Files\Google\Update\1.3.21.165\GoogleUpdateOnDemand.exe 2013-10-18 17:02:07 EB8EEB98D01B5D31898D8E53C3789832 59784 ----atw- C:\Program Files\Google\Update\1.3.21.165\GoogleUpdateBroker.exe 2013-10-18 17:02:07 BE27258FE3740CADE4A1B9CEE4DCCDAF 819176 ----a-w- C:\Program Files\Google\Update\1.3.21.165\GoogleUpdateSetup.exe 2013-10-18 17:02:07 506708142BC63DABA64F2D3AD1DCD5BF 116648 ----atw- C:\Program Files\Google\Update\GoogleUpdate.exe 2013-10-18 17:02:05 CF7B0E597C1F34E528285495721DEEE9 237960 ----atw- C:\Program Files\Google\Update\1.3.21.165\GoogleCrashHandler.exe 2013-10-18 17:02:05 506708142BC63DABA64F2D3AD1DCD5BF 116648 ----atw- C:\Program Files\Google\Update\1.3.21.165\GoogleUpdate.exe 2013-10-18 17:02:05 0DC0DE2966A6DBA4CFBF6639DF44F5BA 319880 ----atw- C:\Program Files\Google\Update\1.3.21.165\GoogleCrashHandler64.exe === C: other files == 2013-10-19 16:48:16 0A35B7026416325DE4A3EEC131F6EE2C 18636 ----a-w- C:\Program Files\Java\jre7\lib\deploy\ffjcext.zip 2013-10-19 16:36:05 00E220222110A2355391758C1041CDC7 53 ----a-w- C:\Users\Administrator\AppData\Local\temp\utt770C.tmp.bat 2013-10-19 16:35:45 71D97F1A3CC47A56728F7A400A3F8295 76288 ----a-w- C:\Windows\System32\DriverStore\FileRepository\usb.inf_x86_neutral_ef2e2e69da5c57df\usbccgp.sys 2013-10-19 16:35:45 71D97F1A3CC47A56728F7A400A3F8295 76288 ----a-w- C:\Windows\System32\drivers\usbccgp.sys 2013-10-19 16:35:44 C4FB8E7ADEA9B5CEEA885A1B504B7E40 43008 ----a-w- C:\Windows\System32\DriverStore\FileRepository\usbport.inf_x86_neutral_12acda10f5c2fedf\usbehci.sys 2013-10-19 16:35:44 C4FB8E7ADEA9B5CEEA885A1B504B7E40 43008 ----a-w- C:\Windows\System32\drivers\usbehci.sys 2013-10-19 16:35:44 86AA95ACB611001E26CD2C0145F2225A 258560 ----a-w- C:\Windows\System32\DriverStore\FileRepository\usbport.inf_x86_neutral_12acda10f5c2fedf\usbhub.sys 2013-10-19 16:35:44 86AA95ACB611001E26CD2C0145F2225A 258560 ----a-w- C:\Windows\System32\drivers\usbhub.sys 2013-10-19 16:35:43 FDA6F2BB7FA034D95863ED8788B4E416 284672 ----a-w- C:\Windows\System32\DriverStore\FileRepository\usbport.inf_x86_neutral_12acda10f5c2fedf\usbport.sys 2013-10-19 16:35:43 FDA6F2BB7FA034D95863ED8788B4E416 284672 ----a-w- C:\Windows\System32\drivers\usbport.sys 2013-10-19 16:35:43 86AA95ACB611001E26CD2C0145F2225A 258560 ----a-w- C:\Windows\System32\DriverStore\FileRepository\usb.inf_x86_neutral_ef2e2e69da5c57df\usbhub.sys 2013-10-19 16:35:43 6FB17D7A2E76B838886E5E8C60239DAE 6016 ----a-w- C:\Windows\System32\DriverStore\FileRepository\usbport.inf_x86_neutral_12acda10f5c2fedf\usbd.sys 2013-10-19 16:35:43 6FB17D7A2E76B838886E5E8C60239DAE 6016 ----a-w- C:\Windows\System32\drivers\usbd.sys 2013-10-19 16:35:42 DCDF9855145A14DFCA0AB32308871961 20480 ----a-w- C:\Windows\System32\DriverStore\FileRepository\usbport.inf_x86_neutral_12acda10f5c2fedf\usbohci.sys 2013-10-19 16:35:42 DCDF9855145A14DFCA0AB32308871961 20480 ----a-w- C:\Windows\System32\drivers\usbohci.sys 2013-10-19 16:35:42 8E51D04175BAA14C4F79AA5F6D248770 24064 ----a-w- C:\Windows\System32\DriverStore\FileRepository\usbport.inf_x86_neutral_12acda10f5c2fedf\usbuhci.sys 2013-10-19 16:35:42 8E51D04175BAA14C4F79AA5F6D248770 24064 ----a-w- C:\Windows\System32\drivers\usbuhci.sys 2013-10-19 12:23:21 3E49537966C8644328D2EA048CE80C4D 98 ----a-w- C:\Users\Administrator\AppData\Local\temp\utt639F.tmp.bat ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-21-2695659227-4190923716-1575364736-500\Software\Microsoft\Windows\CurrentVersion\Run] "Spotify Web Helper"="C:\Users\Administrator\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" "HP Deskjet 3520 series (NET)"="C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe -deviceID CN2C51G3H905SY:NW -scfn HP Deskjet 3520 series (NET) -AutoStart 1" "KiesPreload"="C:\Program Files\Samsung\Kies\Kies.exe /preload" @="C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe MSRun" "RTHDVCPL"="C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s" "EvtMgr6"="C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming" "APSDaemon"="C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe -atboottime" "HP Software Update"="C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe" "avast"="C:\Program Files\AVAST Software\Avast\avastUI.exe /nogui" "Adobe ARM"="C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" "KiesTrayAgent"="C:\Program Files\Samsung\Kies\KiesTrayAgent.exe" "SunJavaUpdateSched"="C:\Program Files\Common Files\Java\Java Update\jusched.exe" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Spotify Web Helper"="C:\Users\Administrator\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" "HP Deskjet 3520 series (NET)"="C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe -deviceID CN2C51G3H905SY:NW -scfn HP Deskjet 3520 series (NET) -AutoStart 1" "KiesPreload"="C:\Program Files\Samsung\Kies\Kies.exe /preload" @="C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe" ==== Startup Registry Disabled ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Adobe ARM] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Adobe ARM" "hkey"="HKLM" "command"="\"C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\APSDaemon] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="APSDaemon" "hkey"="HKLM" "command"="\"C:\\Program Files\\Common Files\\Apple\\Apple Application Support\\APSDaemon.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\iTunesHelper] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="iTunesHelper" "hkey"="HKLM" "command"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\QuickTime Task] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="QuickTime Task" "hkey"="HKLM" "command"="\"C:\\Program Files\\QuickTime\\QTTask.exe\" -atboottime" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Spotify Web Helper] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Spotify Web Helper" "hkey"="HKCU" "command"="\"C:\\Users\\Administrator\\AppData\\Roaming\\Spotify\\Data\\SpotifyWebHelper.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SunJavaUpdateSched] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="SunJavaUpdateSched" "hkey"="HKLM" "command"="\"C:\\Program Files\\Common Files\\Java\\Java Update\\jusched.exe\"" ==== Startup Folders ====================== 2013-03-29 10:56:53 1061 ----a-w- C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ==== Task Scheduler Jobs ====================== C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [10-10-2013 12:57] C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [18-10-2013 19:02] C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [18-10-2013 19:02] ==== Other Scheduled Tasks ====================== "C:\Windows\system32\tasks\Adobe Flash Player Updater" [C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe] "C:\Windows\system32\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"] "C:\Windows\system32\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files\Google\Update\GoogleUpdate.exe] "C:\Windows\system32\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files\Google\Update\GoogleUpdate.exe] "C:\Windows\system32\tasks\HPCustParticipation HP Deskjet 3520 series" ["C:\Program Files\HP\HP Deskjet 3520 series\Bin\HPCustPartic.exe"] "C:\Windows\system32\tasks\Apple\AppleSoftwareUpdate" [C:\Program Files\Apple Software Update\SoftwareUpdate.exe] ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions] "wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [19-07-2013 13:39] ==== Chrome Look ====================== Google Docs - Administrator - Default\Extensions\aohghmighlieiainnegkcijnfilokake AdBlock - Administrator - Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom Chrome In-App Payments service - Administrator - Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda Gmail - Administrator - Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia ==== Empty IE Cache ====================== C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully ==== Empty FireFox Cache ====================== No FireFox Profiles found ==== Empty Chrome Cache ====================== C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\ADMINI~1\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Program Files\SearchProtect" not found ==== EOF on zo 20-10-2013 at 19:43:01,21 ======================

Hierbij dan wel het goede logje! log.txt + nog een vraagje, heb allerlei dingen geupdate en opeens stond daar Search Protect by Conduit, op allerlei manieren proberen te verwijderen, maar krijg het gewoon niet weg! Gr info.txt

Ik heb beide logjes onder elkaar gezet, dus de log.txt moet er volgens mij wel onder staan! Met de hoofdmap bedoel ik 'mijn documenten'. Gr.

Hierbij de logjes: Logfile of random's system information tool 1.09 (written by random/random) Run by Hofte at 2013-10-19 19:19:29 Microsoft Windows 7 Enterprise Service Pack 1 System drive C: has 188 GB (79%) free of 238 GB Total RAM: 3071 MB (70% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 19:19:39, on 19-10-2013 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v10.0 (10.00.9200.16720) Boot mode: Normal Running processes: C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\PROGRA~1\SearchProtect\SearchProtect\bin\cltmng.exe C:\PROGRA~1\SearchProtect\UI\bin\cltmngui.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe C:\Program Files\Logitech\SetPointP\SetPoint.exe C:\Program Files\HP\HP Software Update\hpwuschd2.exe C:\Program Files\AVAST Software\Avast\AvastUI.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Samsung\Kies\KiesTrayAgent.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Users\Administrator\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.EXE C:\Program Files\Samsung\Kies\Kies.exe C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe C:\Users\Administrator\AppData\Roaming\Dropbox\bin\Dropbox.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe C:\Program Files\Common Files\Apple\Apple Application Support\distnoted.exe C:\Windows\system32\conhost.exe C:\Users\Administrator\Desktop\RSIT.exe C:\Program Files\trend micro\Hofte.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer! R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer! R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll O4 - HKLM\..\Run: [startCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s O4 - HKLM\..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files\Samsung\Kies\KiesTrayAgent.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKCU\..\Run: [spotify Web Helper] "C:\Users\Administrator\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" O4 - HKCU\..\Run: [HP Deskjet 3520 series (NET)] "C:\Program Files\HP\HP Deskjet 3520 series\Bin\ScanToPCActivationApp.exe" -deviceID "CN2C51G3H905SY:NW" -scfn "HP Deskjet 3520 series (NET)" -AutoStart 1 O4 - HKCU\..\Run: [KiesPreload] C:\Program Files\Samsung\Kies\Kies.exe /preload O4 - HKCU\..\Run: [] C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe O4 - Startup: Dropbox.lnk = Administrator\AppData\Roaming\Dropbox\bin\Dropbox.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Administrator\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O20 - AppInit_DLLs: C:\PROGRA~1\SearchProtect\SearchProtect\bin\SPVC32Loader.dll O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Search Protect by Conduit Service (CltMngSvc) - Conduit - C:\PROGRA~1\SearchProtect\Main\bin\CltMngSvc.exe O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe -- End of file - 6048 bytes ======Scheduled tasks folder====== C:\Windows\tasks\Adobe Flash Player Updater.job C:\Windows\tasks\GoogleUpdateTaskMachineCore.job C:\Windows\tasks\GoogleUpdateTaskMachineUA.job info.txt logfile of random's system information tool 1.09 2013-10-19 19:19:45 ======Uninstall list====== Update for Microsoft Office 2007 (KB2508958)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {0C5823AA-7B6F-44E1-8D5B-8FD1FF0E6438} Adobe AIR-->c:\Program Files\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall Adobe AIR-->MsiExec.exe /I{52E225FC-FCB4-41F7-837B-6E37FB05BD7B} Adobe Flash Player 11 ActiveX-->C:\Windows\system32\Macromed\Flash\FlashUtil32_11_9_900_117_ActiveX.exe -maintain activex Adobe Flash Player 11 Plugin-->C:\Windows\system32\Macromed\Flash\FlashUtil32_11_9_900_117_Plugin.exe -maintain plugin Adobe Reader XI (11.0.05) - Nederlands-->MsiExec.exe /I{AC76BA86-7AD7-1043-7B44-AB0000000001} Apple Application Support-->MsiExec.exe /I{46F044A5-CE8B-4196-984E-5BD6525E361D} Apple Mobile Device Support-->MsiExec.exe /I{0592EF96-69D8-4E4B-9CC9-88F58EA86F01} Apple Software Update-->MsiExec.exe /I{C6579A65-9CAE-4B31-8B6B-3306E0630A66} Auslogics Disk Defrag-->"C:\Program Files\Auslogics\Auslogics Disk Defrag\unins000.exe" avast! Free Antivirus-->C:\Program Files\AVAST Software\Avast\aswRunDll.exe "C:\Program Files\AVAST Software\Avast\Setup\setiface.dll" RunSetup Bonjour-->MsiExec.exe /X{79155F2B-9895-49D7-8612-D92580E0DE5B} Bonjour-afdrukservices-->MsiExec.exe /I{9D210D79-AEC5-453B-960C-4DD2C73931E1} Catalyst Control Center - Branding-->MsiExec.exe /I{8D7133DE-27D2-47E5-B248-4180278D32AA} CCleaner-->"C:\Program Files\CCleaner\uninst.exe" eReg-->MsiExec.exe /I{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C} Google Chrome-->"C:\Program Files\Google\Chrome\Application\30.0.1599.101\Installer\setup.exe" --uninstall --multi-install --chrome --system-level --verbose-logging Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} HP Deskjet 3520 series Basissoftware van het apparaat-->MsiExec.exe /I{843340F9-D3A9-4DB4-BF23-A642B0B117BA} HP Deskjet 3520 series Help-->MsiExec.exe /I{8916BFB2-3728-478C-A8CD-03EAC4B9813C} HP Deskjet 3520 series Productverbeteringsonderzoek-->MsiExec.exe /I{59752521-2964-4701-B9FD-DF541D5405F5} HP Deskjet 3520 series Setup Guide-->MsiExec.exe /I{AEEDCEB7-00B8-4BE1-B492-AB04803D5F1E} HP FWUpdateEDO2-->MsiExec.exe /I{415FA9AD-DA10-4ABE-97B6-5051D4795C90} HP Photo Creations-->C:\Program Files\HP Photo Creations\uninst.exe HP Update-->MsiExec.exe /X{6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5} HPDiagnosticAlert-->MsiExec.exe /I{846B5DED-DC8C-4E1A-B5B4-9F5B39A0CACE} iTunes-->MsiExec.exe /I{E05D82D8-FE70-4228-B073-B0C07FE27595} Java 7 Update 45-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83217045FF} Logitech SetPoint 6.22-->C:\Program Files\Common Files\LogiShrd\sp6_Uninstall\setup.exe Microsoft .NET Framework 4 Client Profile-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\Setup.exe /repair /x86 /parameterfolder Client Microsoft .NET Framework 4 Client Profile-->MsiExec.exe /X{3C3901C5-3455-3E0A-A214-0B093A5070A6} Microsoft .NET Framework 4 Extended-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\Setup.exe /repair /x86 /parameterfolder Extended Microsoft .NET Framework 4 Extended-->MsiExec.exe /X{0A0CADCF-78DA-33C4-A350-CD51849B9702} Microsoft Antimalware Service NL-NL Language Pack-->MsiExec.exe /X{F8EDC0F8-15BC-4411-8762-77105C8AAEEC} Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-0015-0413-0000-0000000FF1CE} /uninstall {26257879-B20D-4D30-A429-B387A4890929} Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-0016-0413-0000-0000000FF1CE} /uninstall {26257879-B20D-4D30-A429-B387A4890929} Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-0018-0413-0000-0000000FF1CE} /uninstall {26257879-B20D-4D30-A429-B387A4890929} Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-0019-0413-0000-0000000FF1CE} /uninstall {26257879-B20D-4D30-A429-B387A4890929} Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-001A-0413-0000-0000000FF1CE} /uninstall {26257879-B20D-4D30-A429-B387A4890929} Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-001B-0413-0000-0000000FF1CE} /uninstall {26257879-B20D-4D30-A429-B387A4890929} Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {6E107EB7-8B55-48BF-ACCB-199F86A2CD93} Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-0044-0413-0000-0000000FF1CE} /uninstall {26257879-B20D-4D30-A429-B387A4890929} Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-006E-0413-0000-0000000FF1CE} /uninstall {1D12BC91-360E-424C-97C4-813651313660} Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-00A1-0413-0000-0000000FF1CE} /uninstall {26257879-B20D-4D30-A429-B387A4890929} Microsoft Office 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-00BA-0413-0000-0000000FF1CE} /uninstall {26257879-B20D-4D30-A429-B387A4890929} Microsoft Office Access MUI (Dutch) 2007-->MsiExec.exe /X{90120000-0015-0413-0000-0000000FF1CE} Microsoft Office Enterprise 2007-->"C:\Program Files\Common Files\Microsoft Shared\OFFICE12\Office Setup Controller\setup.exe" /uninstall ENTERPRISE /dll OSETUP.DLL Microsoft Office Enterprise 2007-->MsiExec.exe /X{90120000-0030-0000-0000-0000000FF1CE} Microsoft Office Excel MUI (Dutch) 2007-->MsiExec.exe /X{90120000-0016-0413-0000-0000000FF1CE} Microsoft Office File Validation Add-In-->MsiExec.exe /I{90140000-2005-0000-0000-0000000FF1CE} Microsoft Office Groove MUI (Dutch) 2007-->MsiExec.exe /X{90120000-00BA-0413-0000-0000000FF1CE} Microsoft Office InfoPath MUI (Dutch) 2007-->MsiExec.exe /X{90120000-0044-0413-0000-0000000FF1CE} Microsoft Office OneNote MUI (Dutch) 2007-->MsiExec.exe /X{90120000-00A1-0413-0000-0000000FF1CE} Microsoft Office Outlook MUI (Dutch) 2007-->MsiExec.exe /X{90120000-001A-0413-0000-0000000FF1CE} Microsoft Office PowerPoint MUI (Dutch) 2007-->MsiExec.exe /X{90120000-0018-0413-0000-0000000FF1CE} Microsoft Office Proof (Dutch) 2007-->MsiExec.exe /X{90120000-001F-0413-0000-0000000FF1CE} Microsoft Office Proof (English) 2007-->MsiExec.exe /X{90120000-001F-0409-0000-0000000FF1CE} Microsoft Office Proof (French) 2007-->MsiExec.exe /X{90120000-001F-040C-0000-0000000FF1CE} Microsoft Office Proof (German) 2007-->MsiExec.exe /X{90120000-001F-0407-0000-0000000FF1CE} Microsoft Office Proofing (Dutch) 2007-->MsiExec.exe /X{90120000-002C-0413-0000-0000000FF1CE} Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-001F-0407-0000-0000000FF1CE} /uninstall {928D7B99-2BEA-49F9-83B8-20FA57860643} Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-001F-0409-0000-0000000FF1CE} /uninstall {1FF96026-A04A-4C3E-B50A-BB7022654D0F} Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-001F-040C-0000-0000000FF1CE} /uninstall {71F055E8-E2C6-4214-BB3D-BFE03561B89E} Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)-->msiexec /package {90120000-001F-0413-0000-0000000FF1CE} /uninstall {2C95E7EE-FEA7-4B3A-A6E5-DF90A88B816A} Microsoft Office Publisher MUI (Dutch) 2007-->MsiExec.exe /X{90120000-0019-0413-0000-0000000FF1CE} Microsoft Office Shared MUI (Dutch) 2007-->MsiExec.exe /X{90120000-006E-0413-0000-0000000FF1CE} Microsoft Office Word MUI (Dutch) 2007-->MsiExec.exe /X{90120000-001B-0413-0000-0000000FF1CE} Microsoft Outlook Reservekopie van persoonlijke mappen-->MsiExec.exe /X{C63E7C60-25EB-11D3-8EDA-00A0C911E8E5} Microsoft Security Client NL-NL Language Pack-->MsiExec.exe /I{50779A29-834E-4E36-BBEB-B7CABC67A825} Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053-->MsiExec.exe /X{770657D0-A123-3C07-8E44-1C83EC895118} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2} Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d} Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148-->MsiExec.exe /X{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C} Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570-->MsiExec.exe /X{86CE85E6-DBAC-3FFD-B977-E4B79F83C909} Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe /X{9A25302D-30C0-39D9-BD6F-21E6EC160475} Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161-->MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F} Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729-->MsiExec.exe /X{6AFCA4E1-9B78-3640-8F72-A7BF33448200} MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94} OpenAL-->"C:\Program Files\OpenAL\OalinstGridRelease.exe" /U QuickTime-->MsiExec.exe /I{B67BAFBA-4C9F-48FA-9496-933E3B255044} Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -removeonly Samsung Kies-->"C:\Program Files\InstallShield Installation Information\{758C8301-2696-4855-AF45-534B1200980A}\setup.exe" -runfromtemp -l0x0409 -removeonly Samsung Kies-->MsiExec.exe /I{758C8301-2696-4855-AF45-534B1200980A} SAMSUNG USB Driver for Mobile Phones-->C:\Program Files\Samsung\USB Drivers\Uninstall.exe Search Protect-->"C:\PROGRA~1\SearchProtect\Main\bin\uninstall.exe" /S Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {3E0806DB-3085-378A-840A-F0D3AE3609D1} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {728D9A6A-2206-31E8-9F65-C3EABEFCF53E} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {2CE2EB39-45C8-32D4-8A99-5529C38F1B99} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {7E97AB83-C1FE-38DE-B848-877E0A4BD81E} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {DB31DEDD-BF95-31E7-A9B7-5480561CEFF3} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {67A5F99B-5EBA-3812-8D2E-BC251490DD3F} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {8DDEFC7E-0C61-3D11-AFC6-5414F2DAFD01} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {4952F442-5C1A-38EB-8C23-B18EFE77E20C} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {9EC88EA8-4ABE-393C-87BD-90EABB1C4C9B} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {86BB5A25-8CC3-33CE-A393-CF28901682B2} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {16EEC04A-B924-37E0-97CF-422DCEFC1B63} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {C4D978AA-2668-3404-96DE-96E2AFC62FD7} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {CD6D9B8A-BBC4-3FA7-B24D-D74CE90630CF} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2736428)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {FCBF8C05-F031-381A-8B7F-45403B55ADF5} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {ECBEE23D-AB7E-3DAA-B66B-CD52003198F1} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {788818B1-B191-3217-A210-7ACFDE19CE4A} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {B7C20E16-9A3A-3F05-A6B5-E15AA09200E0} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {CF581973-77E0-3093-A1AC-A03130DE990F} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2835393)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {576C07F8-777C-3981-B8BF-063A6B57254E} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {90EA7C4E-7F03-31FD-BE27-B1A9B4AE56BD} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628v2)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {1E88AFAE-CEF7-3540-8FF6-6D00877B2767} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Client Profile (KB2858302v2)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {8BA4E34D-95C5-3907-87E4-62FBB31A2190} /parameterfolder Client Security Update for Microsoft .NET Framework 4 Extended (KB2487367)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {42A3562E-8B4E-39A4-B82D-CC12F82889E3} /parameterfolder Extended Security Update for Microsoft .NET Framework 4 Extended (KB2656351)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {4952F442-5C1A-38EB-8C23-B18EFE77E20C} /parameterfolder Extended Security Update for Microsoft .NET Framework 4 Extended (KB2736428)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {FCBF8C05-F031-381A-8B7F-45403B55ADF5} /parameterfolder Extended Security Update for Microsoft .NET Framework 4 Extended (KB2742595)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {788818B1-B191-3217-A210-7ACFDE19CE4A} /parameterfolder Extended Security Update for Microsoft .NET Framework 4 Extended (KB2858302v2)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {8BA4E34D-95C5-3907-87E4-62FBB31A2190} /parameterfolder Extended Security Update for Microsoft Office 2007 suites (KB2596744) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {D33B9EF5-3801-496A-A2D6-B7F4BE972D75} Security Update for Microsoft Office 2007 suites (KB2596754) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {B145DBBB-7778-4A5D-9D2B-DA6569F02391} Security Update for Microsoft Office 2007 suites (KB2596792) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {E34960DB-2A93-45DB-A208-02650F7AB09C} Security Update for Microsoft Office 2007 suites (KB2596825) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {B7727B4D-5EA3-4C11-9D30-15E47616DCAF} Security Update for Microsoft Office 2007 suites (KB2596871) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {293FB6BE-D3EB-4162-B522-F9108040B9FE} Security Update for Microsoft Office 2007 suites (KB2597969) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {2B3C041A-A7F2-4A24-968D-4BEB6A123D15} Security Update for Microsoft Office 2007 suites (KB2597973) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {EA575F57-C5D1-4B5A-B9F9-F16EEBC6B58C} Security Update for Microsoft Office 2007 suites (KB2687309) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {E949D8B9-24FD-4AB7-B427-FC42AA8BB2D9} Security Update for Microsoft Office 2007 suites (KB2687439) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {3579CE34-B225-4B19-A3AF-DE5F562A212F} Security Update for Microsoft Office 2007 suites (KB2760411) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {79850906-6D2B-4061-8EAF-EAC84173DEC5} Security Update for Microsoft Office 2007 suites (KB2760585) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {8907F32C-DF89-4C2F-AEDE-0DB4B65451C0} Security Update for Microsoft Office 2007 suites (KB2760591) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {319FC809-3841-4739-A25F-FDBADF073697} Security Update for Microsoft Office 2007 suites (KB2827326) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {4CCE0378-386F-4DC2-9CC1-A3710C77057D} Security Update for Microsoft Office 2007 suites (KB2827329) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {81352C19-97CF-4365-8EAE-205BCC9A2DC8} Security Update for Microsoft Office Excel 2007 (KB2827324) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {686630EC-8033-4031-85C5-D8E5CD62A958} Security Update for Microsoft Office InfoPath 2007 (KB2687440) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {8F311D6C-D8DD-4C32-9457-1A129CABD1A5} Security Update for Microsoft Office Outlook 2007 (KB2825999) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {7A0E1177-574A-4F26-AD24-B003699C35FA} Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {AEA16A27-0B97-4670-818F-A98D06EC0A6F} Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {0EF0D4FB-BB23-4515-AAEA-1240AC2DA525} Security Update for Microsoft Office Publisher 2007 (KB2597971) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {9D689455-5858-4AE4-A3CA-6E4149FE3F70} Security Update for Microsoft Office Word 2007 (KB2827330) 32-Bit Edition -->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {2C57A81A-7534-4DEE-A450-7FBE86F3200D} TeraCopy 2.12-->"C:\Program Files\TeraCopy\unins000.exe" TmNationsForever-->"C:\Program Files\TmNationsForever\unins000.exe" Update for 2007 Microsoft Office System (KB967642)-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {C444285D-5E4F-48A4-91DD-47AAAA68E92D} Update for Microsoft .NET Framework 4 Client Profile (KB2468871)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {5E9CF3A4-ADB3-3080-A8BF-976A28340758} /parameterfolder Client Update for Microsoft .NET Framework 4 Client Profile (KB2533523)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {81EBB9D7-173C-32E3-B477-149C8DE075E4} /parameterfolder Client Update for Microsoft .NET Framework 4 Client Profile (KB2600217)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {5D9961AC-7C99-36A2-9EF0-34678AED5384} /parameterfolder Client Update for Microsoft .NET Framework 4 Client Profile (KB2836939)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {0160BA31-409C-3FD0-9C87-C7D95BF46986} /parameterfolder Client Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {D5B80B17-2443-3296-A700-792FAA0748BD} /parameterfolder Client Update for Microsoft .NET Framework 4 Extended (KB2468871)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {5E9CF3A4-ADB3-3080-A8BF-976A28340758} /parameterfolder Extended Update for Microsoft .NET Framework 4 Extended (KB2533523)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {81EBB9D7-173C-32E3-B477-149C8DE075E4} /parameterfolder Extended Update for Microsoft .NET Framework 4 Extended (KB2600217)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {5D9961AC-7C99-36A2-9EF0-34678AED5384} /parameterfolder Extended Update for Microsoft .NET Framework 4 Extended (KB2836939)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {0160BA31-409C-3FD0-9C87-C7D95BF46986} /parameterfolder Extended Update for Microsoft .NET Framework 4 Extended (KB2836939v3)-->C:\Windows\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {D5B80B17-2443-3296-A700-792FAA0748BD} /parameterfolder Extended Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {A024FC7B-77DE-45DE-A058-1C049A17BFB3} Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {6FAA03BD-2B51-4029-9AD9-64A3B8E3C84C} Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {CB68A5B0-3508-4193-AEB9-AF636DAECE0F} Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {E9A82945-BA29-4EE8-8F2A-2F49545E9CF2} Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition-->msiexec /package {90120000-001A-0413-0000-0000000FF1CE} /uninstall {F8564AF8-30AE-4427-ACF3-69714E1BB656} Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2827325) 32-Bit Edition-->msiexec /package {90120000-0030-0000-0000-0000000FF1CE} /uninstall {11C9B057-27FF-4BC1-82F6-DC4B15E70A2E} Update voor Microsoft Office Excel 2007 Help (KB963678)-->msiexec /package {90120000-0016-0413-0000-0000000FF1CE} /uninstall {5CF7002F-6F49-4482-9564-5614FBE560FA} Update voor Microsoft Office Powerpoint 2007 Help (KB963669)-->msiexec /package {90120000-0018-0413-0000-0000000FF1CE} /uninstall {15D84E79-1ED7-42C5-B2FD-745C3FBDDDC5} Update voor Microsoft Office Word 2007 Help (KB963665)-->msiexec /package {90120000-001B-0413-0000-0000000FF1CE} /uninstall {A66AE6A1-8D8C-4102-BC18-38CBDE40F809} VLC media player 2.1.0-->C:\Program Files\VideoLAN\VLC\uninstall.exe Windows Live Call-->MsiExec.exe /I{C20C2630-B3A7-44BA-BDD0-31E256AE490E} Windows Live Communications Platform-->MsiExec.exe /I{3175E049-F9A9-4A3D-8F19-AC9FB04514D1} Windows Live Messenger-->MsiExec.exe /X{CC38A00D-7EED-46CE-9281-D1D97B81F22A} WinRAR 5.00 (32-bit)-->C:\Program Files\WinRAR\uninstall.exe ======System event log====== Computer Name: Hofte-PC Event Code: 104 Message: Logboekbestand Windows PowerShell is gewist. Record Number: 220726 Source Name: Microsoft-Windows-Eventlog Time Written: 20130724082727.002929-000 Event Type: Informatie User: Hofte-PC\Hofte Computer Name: Hofte-PC Event Code: 104 Message: Logboekbestand Media Center is gewist. Record Number: 220725 Source Name: Microsoft-Windows-Eventlog Time Written: 20130724082726.877929-000 Event Type: Informatie User: Hofte-PC\Hofte Computer Name: Hofte-PC Event Code: 104 Message: Logboekbestand Key Management Service is gewist. Record Number: 220724 Source Name: Microsoft-Windows-Eventlog Time Written: 20130724082726.768554-000 Event Type: Informatie User: Hofte-PC\Hofte Computer Name: Hofte-PC Event Code: 104 Message: Logboekbestand Internet Explorer is gewist. Record Number: 220723 Source Name: Microsoft-Windows-Eventlog Time Written: 20130724082726.659179-000 Event Type: Informatie User: Hofte-PC\Hofte Computer Name: Hofte-PC Event Code: 104 Message: Logboekbestand System is gewist. Record Number: 220722 Source Name: Microsoft-Windows-Eventlog Time Written: 20130724082726.518554-000 Event Type: Informatie User: Hofte-PC\Hofte =====Application event log===== Computer Name: Hofte-PC Event Code: 6000 Message: De kennisgevingssubscriber van winlogon <SessionEnv> was niet beschikbaar om een kennisgevingsgebeurtenis te verwerken. Record Number: 39983 Source Name: Microsoft-Windows-Winlogon Time Written: 20130724161949.000000-000 Event Type: Informatie User: Computer Name: Hofte-PC Event Code: 9009 Message: Beheer van bureaubladvensters is afgesloten met code 0x40010004 Record Number: 39982 Source Name: Desktop Window Manager Time Written: 20130724161949.000000-000 Event Type: Informatie User: Computer Name: Hofte-PC Event Code: 8224 Message: De VSS-service is vanwege een time-out voor niet actief afgesloten. Record Number: 39981 Source Name: VSS Time Written: 20130724100914.000000-000 Event Type: Informatie User: Computer Name: Hofte-PC Event Code: 33 Message: Kan activeringscontext voor 'C:\Program Files\HP\HP Deskjet 3520 series\DriverStore\Pipeline\amd64\hpinkinsB011.exe' niet maken. Kan afhankelijke assembly Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" niet vinden. Gebruik sxstrace.exe voor een gedetailleerde diagnose. Record Number: 39980 Source Name: SideBySide Time Written: 20130724095948.000000-000 Event Type: Fout User: Computer Name: Hofte-PC Event Code: 6 Message: Record Number: 39979 Source Name: BBSvc Time Written: 20130724083012.000000-000 Event Type: Informatie User: =====Security event log===== Computer Name: Hofte-PC Event Code: 4672 Message: Speciale bevoegdheden toegewezen aan nieuwe aanmelding. Onderwerp: Beveiligings-id: S-1-5-18 Accountnaam: SYSTEM Accountdomein: NT AUTHORITY Aanmeldings-id: 0x3e7 Bevoegdheden: SeAssignPrimaryTokenPrivilege SeTcbPrivilege SeSecurityPrivilege SeTakeOwnershipPrivilege SeLoadDriverPrivilege SeBackupPrivilege SeRestorePrivilege SeDebugPrivilege SeAuditPrivilege SeSystemEnvironmentPrivilege SeImpersonatePrivilege Record Number: 53404 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20130724100612.226562-000 Event Type: Controle geslaagd User: Computer Name: Hofte-PC Event Code: 4624 Message: Er is een account aangemeld. Onderwerp: Beveiligings-id: S-1-5-18 Accountnaam: HOFTE-PC$ Accountdomein: WORKGROUP Aanmeldings-id: 0x3e7 Aanmeldingstype: 5 Nieuwe aanmelding: Beveiligings-id: S-1-5-18 Accountnaam: SYSTEM Accountdomein: NT AUTHORITY Aanmeldings-id: 0x3e7 Aanmeldings-GUID: {00000000-0000-0000-0000-000000000000} Procesgegevens: Proces-id: 0x240 Naam proces: C:\Windows\System32\services.exe Netwerkgegevens: Naam van werkstation: Netwerkadres van bron: - Poort van bron: - Gedetailleerde verificatiegegevens: Aanmeldingsproces: Advapi Verificatiepakket: Negotiate Doorgezette services: - Pakketnaam (alleen NTLM): - Sleutellengte: 0 Deze gebeurtenis wordt gegenereerd wanneer een aanmeldingssessie wordt gemaakt. De gebeurtenis wordt gegenereerd op de computer waartoe toegang wordt verkregen. De velden Onderwerp bevatten de account op het lokale systeem waardoor de aanmelding is aangevraagd. Dit is meestal een service zoals de Server-service, of een lokaal proces zoals Winlogon.exe of Services.exe. In het veld Aanmeldingstype ziet u het type aanmelding. De meest algemene typen zijn 2 (interactief) en 3 (netwerk). Het veld Nieuwe aanmelding bevat de account waarvoor de nieuwe aanmelding is gemaakt. Dit is de account waarmee is aangemeld. In de netwerkvelden ziet u de bron van een externe aanmeldingsaanvraag. Naam van werkstation is niet altijd beschikbaar en kan in sommige gevallen leeg zijn. De velden met verificatiegegevens bevatten gedetailleerde informatie over deze aanmeldingsaanvraag. - Aanmeldings-GUID is een unieke id die kan worden gebruikt om deze gebeurtenis af te stemmen met een KDC-gebeurtenis. - In Doorgezette services ziet u welke tussentijdse services voor deze aanmeldingsaanvraag zijn gebruikt. - Pakketnaam geeft aan welk subprotocol van de NTLM-protocollen is gebruikt. - Sleutellengte geeft de lengte van de gegenereerde sessiesleutel aan. Dit veld is 0 als er geen sessiesleutel is aangevraagd. Record Number: 53403 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20130724100612.226562-000 Event Type: Controle geslaagd User: Computer Name: Hofte-PC Event Code: 4672 Message: Speciale bevoegdheden toegewezen aan nieuwe aanmelding. Onderwerp: Beveiligings-id: S-1-5-18 Accountnaam: SYSTEM Accountdomein: NT AUTHORITY Aanmeldings-id: 0x3e7 Bevoegdheden: SeAssignPrimaryTokenPrivilege SeTcbPrivilege SeSecurityPrivilege SeTakeOwnershipPrivilege SeLoadDriverPrivilege SeBackupPrivilege SeRestorePrivilege SeDebugPrivilege SeAuditPrivilege SeSystemEnvironmentPrivilege SeImpersonatePrivilege Record Number: 53402 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20130724100612.117187-000 Event Type: Controle geslaagd User: Computer Name: Hofte-PC Event Code: 4624 Message: Er is een account aangemeld. Onderwerp: Beveiligings-id: S-1-5-18 Accountnaam: HOFTE-PC$ Accountdomein: WORKGROUP Aanmeldings-id: 0x3e7 Aanmeldingstype: 5 Nieuwe aanmelding: Beveiligings-id: S-1-5-18 Accountnaam: SYSTEM Accountdomein: NT AUTHORITY Aanmeldings-id: 0x3e7 Aanmeldings-GUID: {00000000-0000-0000-0000-000000000000} Procesgegevens: Proces-id: 0x240 Naam proces: C:\Windows\System32\services.exe Netwerkgegevens: Naam van werkstation: Netwerkadres van bron: - Poort van bron: - Gedetailleerde verificatiegegevens: Aanmeldingsproces: Advapi Verificatiepakket: Negotiate Doorgezette services: - Pakketnaam (alleen NTLM): - Sleutellengte: 0 Deze gebeurtenis wordt gegenereerd wanneer een aanmeldingssessie wordt gemaakt. De gebeurtenis wordt gegenereerd op de computer waartoe toegang wordt verkregen. De velden Onderwerp bevatten de account op het lokale systeem waardoor de aanmelding is aangevraagd. Dit is meestal een service zoals de Server-service, of een lokaal proces zoals Winlogon.exe of Services.exe. In het veld Aanmeldingstype ziet u het type aanmelding. De meest algemene typen zijn 2 (interactief) en 3 (netwerk). Het veld Nieuwe aanmelding bevat de account waarvoor de nieuwe aanmelding is gemaakt. Dit is de account waarmee is aangemeld. In de netwerkvelden ziet u de bron van een externe aanmeldingsaanvraag. Naam van werkstation is niet altijd beschikbaar en kan in sommige gevallen leeg zijn. De velden met verificatiegegevens bevatten gedetailleerde informatie over deze aanmeldingsaanvraag. - Aanmeldings-GUID is een unieke id die kan worden gebruikt om deze gebeurtenis af te stemmen met een KDC-gebeurtenis. - In Doorgezette services ziet u welke tussentijdse services voor deze aanmeldingsaanvraag zijn gebruikt. - Pakketnaam geeft aan welk subprotocol van de NTLM-protocollen is gebruikt. - Sleutellengte geeft de lengte van de gegenereerde sessiesleutel aan. Dit veld is 0 als er geen sessiesleutel is aangevraagd. Record Number: 53401 Source Name: Microsoft-Windows-Security-Auditing Time Written: 20130724100612.117187-000 Event Type: Controle geslaagd User: Computer Name: Hofte-PC Event Code: 1102 Message: Het controlelogboek is gewist. Onderwerp: Beveiligings-id: S-1-5-21-2695659227-4190923716-1575364736-500 Accountnaam: Hofte Domeinnaam: Hofte-PC Aanmeldings-id: 0x214c6 Record Number: 53400 Source Name: Microsoft-Windows-Eventlog Time Written: 20130724082726.159179-000 Event Type: Controle geslaagd User: ======Environment variables====== "ComSpec"=%SystemRoot%\system32\cmd.exe "FP_NO_HOST_CHECK"=NO "OS"=Windows_NT "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0;C:\Program Files\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files\QuickTime\QTSystem "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC "PROCESSOR_ARCHITECTURE"=x86 "TEMP"=%SystemRoot%\TEMP "TMP"=%SystemRoot%\TEMP "USERNAME"=SYSTEM "windir"=%SystemRoot% "PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\ "NUMBER_OF_PROCESSORS"=2 "PROCESSOR_LEVEL"=15 "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 3 Stepping 4, GenuineIntel "PROCESSOR_REVISION"=0304 "asl.log"=Destination=file "CLASSPATH"=.;C:\Program Files\Java\jre6\lib\ext\QTJava.zip "QTJAVA"=C:\Program Files\Java\jre6\lib\ext\QTJava.zip -----------------EOF----------------- Daarnaast 3 vraagjes: - Ik heb per ongeluk op 'nee' geklikt toen RSIT dat vroeg tijdens de scan, weet niet of dit gevolgen heeft? - In de hoofdmap staat '.swt', nooit eerder gezien - Ditzelfde geld voor 'TransferManager B.v.d.

Alles is verwijderd, mag ik u hartelijk danken