Ga naar inhoud

Ebonny

Lid
  • Items

    341
  • Registratiedatum

  • Laatst bezocht

Berichten die geplaatst zijn door Ebonny

  1. Beste Mako,

    Het opstarten van webpagina's is niet direct na het opstarten traag maar ook wanneer de laptop enige tijd aan staat.Alleen wanneer hij één ker is opgestart gaat de 2e keer sneller.Programma's starten wel snel o.

    Ik heb de ESET online scanner uitgevoerd duurde zeker lang.

    Alleen Scan for potentially unwanted applications stond er niet bij.

    Wel moest ik Enable of Disable detection of potentially unwanted applications aan vinken. Ik heb Disable aan gevinkt.

    De andere 2 log files FRST log.txtkomen nog.

    gr Ebonny

  2. Hallo Mako,

     

    Deze ging beter. Hierbij de log file.

    gr Ebonny

     

    ~ Verslag van ZHPDiag v2014.12.25.178 - Nicolas Coolman  (25-12-2014)
    ~ Gelanceerd door Acer (27-12-2014 18:10:01)
    ~ Facebook : https://www.facebook.com/nicolascoolman1
    ~ Het adres van de webforum : http://forum.nicolascoolman.fr
    ~ Vertaald door de gebruiker
    ~ Staat van de versie : Bijgewerkte versie.
    ~  Lijst wit : Ingeschakeld door het programma
    ~ Tot misbruik van bevoegdheden : OK
    ~ Gebruikersaccountbeheer (UAC) : Deactivate by program

    ---\\ Internet-browsers
    MSIE: Internet Explorer v11.0.9600.17501
    GCIE: Google Chrome v39.0.2171.95 (Defaut)

    ---\\ Windows productinformatie
    ~ Langage: Néerlandais
    Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601)
    Windows Server License Manager Script : OK
    Software Protection Service (Protection logicielle) : OK
    Windows Automatic Updates : OK
    Windows Activation Technologies : OK

    ---\\ Software om het systeem te beveiligen
    AVG 2015 v15.0.5577
    Malwarebytes Anti-Malware versie 2.0.4.1028
    Microsoft Security Client NL-NL Language Pack v2.1.1116.0
    ESET Online Scanner v3
    Windows Defender W7 (Deactivate)

    ---\\ Systeem optimalisatie software
    CCleaner v5.00

    ---\\ Delen van software PeerToPeer

    ---\\ Software die extra aandacht behoeft
    Adobe Flash Player 16 ActiveX
    Adobe Reader XI

    ---\\ Informatie over het systeem
    ~ Processor: Intel64 Family 6 Model 37 Stepping 2, GenuineIntel
    ~ Operating System: 64 Bits
    Boot mode: Normal (Normal boot)
    Total RAM: 3956 MB (64% free)
    System Restore: Activé (Enable)
    System drive C: has 214 GB (73%) free of 290 GB

    ---\\ Verbinding met het systeem-modus
    ~ Computer Name: ACER-PC
    ~ User Name: Acer
    ~ All Users Names: Gast, Administrator, Acer,
    ~ Unselected Option: None
    Logged in as Administrator

    ---\\ Omgevingsvariabelen
    ~ System Unit : C:\
    ~ %AppZHP% : C:\Users\Acer\AppData\Roaming\ZHP\
    ~ %AppData% : C:\Users\Acer\AppData\Roaming\
    ~ %Desktop% : C:\Users\Acer\Desktop\
    ~ %Favorites% : C:\Users\Acer\Favorites\
    ~ %LocalAppData% : C:\Users\Acer\AppData\Local\
    ~ %StartMenu% : C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\
    ~ %Windir% : C:\Windows\
    ~ %System% : C:\Windows\System32\

    ---\\ Overzicht vaste en verwisselbare stations
    C: Hard drive, Flash drive, Thumb drive (Free 214 Go of 290 Go)
    D: Hard drive, Flash drive, Thumb drive (Free 51 Go of 290 Go)
    E: CD-ROM drive (Not Inserted)

     

    ---\\ Staat van het Windows Beveiligingscentrum
    [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
    ~ Security Center: 46 Legitimates Filtered in 00mn 00s

     

    ---\\ Zoeken naar bepaalde algemene bestanden
    [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Windows Verkenner.) (.25-2-2011 - 7:19:30.) -- C:\Windows\Explorer.exe [2871808]
    [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Windows Toepassing Opstarten.) (.14-7-2009 - 2:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
    [MD5.4AF089160FE082E5EA5C4AA72782DCA2] - (.Microsoft Corporation - Internetuitbreidingen voor Win32.) (.22-11-2014 - 2:28:21.) -- C:\Windows\System32\wininet.dll [2358272]
    [MD5.8CEBD9D0A0A879CDE9F36F4383B7CAEA] - (.Microsoft Corporation - Toepassing Windows-aanmelden.) (.17-7-2014 - 3:07:24.) -- C:\Windows\System32\Winlogon.exe [455168]
    [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Software Licensing-bibliotheek.) (.20-11-2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448]
    [MD5.FA886682CFC5D36718D3E436AACF10B9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.30-5-2014 - 7:45:52.) -- C:\Windows\system32\Drivers\AFD.sys [497152]
    [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14-7-2009 - 2:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
    [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14-7-2009 - 0:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
    [MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20-11-2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
    [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20-11-2010 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
    [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20-11-2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
    [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - i8042-poortstuurprogramma.) (.14-7-2009 - 0:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
    [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14-7-2009 - 1:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
    [MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27-4-2011 - 3:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208]
    [MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20-11-2010 - 10:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
    [MD5.1A29A59A4C5BA6F8C85062A613B7E2B2] - (.Microsoft Corporation - NT-bestandssysteemstuurprogramma.) (.24-1-2014 - 3:37:55.) -- C:\Windows\system32\Drivers\ntfs.sys [1684928]
    [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Stuurprogramma voor parallelle poort.) (.14-7-2009 - 1:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
    [MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20-11-2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
    [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14-7-2009 - 1:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
    [MD5.70988118145F5F10EF24720B97F35F65] - (.Microsoft Corporation - TDI Translation Driver.) (.11-11-2014 - 2:46:26.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
    [MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Volume Shadow Copy-stuurprogramma.) (.20-11-2010 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
    ~ Generic Processes:  Scanned in 00mn 00s

     

    ---\\ Status van de verborgen bestanden (verborgen/totaal)
    ~ Mes images (My Pictures) : 1/1065
    ~ Mes musiques (My Musics) : 13/147
    ~ Mes Videos (My Videos) : 5/13
    ~ Mes Favoris (My Favorites) : 1/204
    ~ Mes Documents (My Documents) : 1/593
    ~ Mon Bureau (My Desktop) : 1/52
    ~ Menu demarrer (Programs) : 1/31
    ~ Hidden Files:  Scanned in 00mn 01s

     

    ---\\ Gestarte processen
    [MD5.0D6972A795995F07B6D78CA7724744FB] - (.Egis Technology Inc. - MyWinLocker.) -- C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe   [349552] [PID.3344]
    [MD5.75102FC486595CF486DFD7239BE30DD5] - (.No owner - DefaultSettingEXE MFC Application.) -- C:\Windows\PLFSetI.exe   [206208] [PID.3360]
    [MD5.48C3EBD6D5E52AFCB1A0FA9B7F9802FA] - (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe   [59720] [PID.3372]
    [MD5.D3F78E38C39AB0E7358735717FB52EAE] - (.Samsung - Kies.) -- C:\Program Files (x86)\Samsung\Kies\Kies.exe   [1563440] [PID.3648]
    [MD5.646A34526CC33BE4CA933C5680D80B48] - (.Nokia - Nokia Suite.) -- C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe   [1090912] [PID.3696]
    [MD5.B54921381A950C8215FB363B485C432B] - (.Hewlett-Packard Co. - HP Digital Imaging Monitor.) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe   [270336] [PID.4120]
    [MD5.94F80155B91B8DF7A0EAD527C853D377] - (.NewTech Infosystems, Inc. - Acer Backup Manager.) -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe   [265984] [PID.4336]
    [MD5.0ADF079D36B2C25E6E9BECE1BD937ACE] - (.Egis Technology Inc. - PMM Update Application.) -- C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe   [407920] [PID.4500]
    [MD5.56D1890D74A8999F756E338210846AF1] - (.Dritek System Inc. - Launch Manager Keyboard Application.) -- C:\Program Files (x86)\Launch Manager\LManager.exe   [1094736] [PID.4916]
    [MD5.B569E48B3A30E24601FCE6C98501E383] - (.CyberLink Corp. - Acer Arcade Deluxe Resident Program.) -- C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe   [419112] [PID.4924]
    [MD5.3D295062806875591B8BC30DC3A8AF61] - (.Sony Corporation - Reader Library Launcher.) -- C:\Program Files (x86)\Sony\Reader\Data\bin\launcher\Reader Library Launcher.exe   [906648] [PID.4936]
    [MD5.4312B4DD07050FC58146756634058CE8] - (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2015\avgui.exe   [3653136] [PID.4964]
    [MD5.EB1B7B961090A4AF33FC297516B88FAE] - (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe   [310064] [PID.5004]
    [MD5.C637FC4638A96165256B28D38DE7B953] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe   [49208] [PID.5024]
    [MD5.887CAA31048EB8ED09A0CBD0E6F46F09] - (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe   [507776] [PID.5032]
    [MD5.0EF0822810009D58118CCDFD098FA9F4] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe   [157480] [PID.5040]
    [MD5.F255E48EA981E943A14CF16269F3F3AF] - (.Egis Technology Inc. - EgisUpdate Release Application.) -- C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe   [201584] [PID.4316]
    [MD5.F16EEA6CCA9D8A7D1193AE80E43FBBC7] - (.Hewlett-Packard Co. - HP CUE Status Root.) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe   [168960] [PID.4192]
    [MD5.8A9FACCB684500829F7D0BCC67B386CC] - (.Hewlett-Packard Co. - HP CUE Alert Popup Window Objects.) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe   [559104] [PID.4740]
    [MD5.883008A9B5BFF94A153D99DBA54CB5C1] - (.Hewlett-Packard - GPCore COM object.) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe   [362496] [PID.4360]
    [MD5.58FBD16C4BB84D9F69C25F30DAA4CE31] - (.Nokia - Microsoft Bluetooth Media Server.) -- C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe   [158032] [PID.5432]
    [MD5.A24BFBAE8B50A6780B68FF3673FAB52F] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\IEXPLORE.exe   [815280] [PID.6668]
    [MD5.BB513BA628D328BF05C15F4B86AEF64C] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe   [8144896] [PID.1680]
    [MD5.FC5B75CA6A1DA31EDD4F8D53F5540B98] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe   [81088] [PID.1920]
    [MD5.650D03E40F93FAE323CB841F80368E5C] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe   [60744] [PID.1964]
    [MD5.BA5BEC7FB1EABF3FBD38924AB45C7B3A] - (.AVG Technologies CZ, s.r.o. - AVG Watchdog Service.) -- C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe   [298080] [PID.2024]
    [MD5.0191DEE9B9EB7902AF2CF4F67301095D] - (.Acer Incorporated - Global Registration Service.) -- C:\Program Files (x86)\Acer\Registration\GREGsvc.exe   [23584] [PID.2496]
    [MD5.23DE5B62B0445A6F874BE633C95B483E] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe   [268824] [PID.2544]
    [MD5.9A308FCDCCA98A15B6F62D36A272160E] - (.NewTech Infosystems, Inc. - Backup Manager Module.) -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe   [255744] [PID.2684]
    [MD5.B8D903B2894FF9AFBD99CA51C35590D7] - (.NTI, Inc. - NTI Backup Now 5 Scheduler Service.) -- C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe   [144640] [PID.2708]
    [MD5.616F6E52CAE254727A886BA8EDA1BEEA] - (.No owner - RichVideo Module.) -- C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe   [247152] [PID.2764]
    [MD5.CC907C2FB839D3F92690A25FF8E463BE] - (.TeamViewer GmbH - TeamViewer 9.) -- C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe   [4972864] [PID.2908]
    [MD5.F9EC9ACD504D823D9B9CA98A4F8D3CA2] - (.Acer Group - Updater Service.) -- C:\Program Files\Acer\Acer Updater\UpdaterService.exe   [243232] [PID.2960]
    [MD5.CB8C1CC4F46FBAC78150754D77460C73] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe   [230792] [PID.3592]
    [MD5.CC3775100ABA633984F73DFAE1F55CAE] - (.Intel Corporation - User Notification Service.) -- C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe   [2320920] [PID.940]
    [MD5.78F7BB9F4924BE164294C59B8C3FC096] - (.Nokia - ServiceLayer Module.) -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe   [737616] [PID.5052]
    ~ Processes Running:  Scanned in 00mn 00s

     

    ---\\ Google Chrome, start, zoeken, extensies (G0, G1, G2)
    C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Preferences

    ---\\ Google Chrome extensie map
    ~ Google Lines Browser: 0 Legitimates Filtered in 00mn 00s

     

    ---\\ Internet Explorer, proxybeheer (R5)
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
    R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
    ~ Proxy management:  Scanned in 00mn 00s

     

    ---\\ Analyse van lijnen F0, F1, F2, F3 - IniFiles, Autoloading programma's
    F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
    F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
    F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
    ~ Keys:  Scanned in 00mn 00s

     

    ---\\ Hosts-bestand omleiding (O1)
    ~ Le fichier hôte est sain (The hosts file is clean) (21)
    ~ Hosts File:  Scanned in 00mn 00s

     

    ---\\ Toepassingen gestart door register & bestand (O4)
    O4 - HKLM\..\Run: [mwlDaemon] . (.Egis Technology Inc. - MyWinLocker.) -- C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe
    O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Realtek HD Audio configuratie.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
    O4 - HKLM\..\Run: [PLFSetI] . (.No owner - DefaultSettingEXE MFC Application.) -- C:\Windows\PLFSetI.exe
    O4 - HKLM\..\Run: [synTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.)
    O4 - HKLM\..\Run: [Acer ePower Management] . (.Acer Incorporated - ePowerTray.) -- C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
    O4 - HKLM\..\Run: [AmIcoSinglun64] . (.Alcor Micro Corp. - Single LUN Icon Utility for VID 058F PID 63.) -- C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
    O4 - HKLM\..\Run: [bCSSync] . (.Microsoft Corporation - Microsoft Office 2010 component.) -- C:\Program Files\Microsoft Office\Office14\BCSSync.exe   =>.Microsoft Corporation
    O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_7360584B616087257445E78FC1FAACF2] . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    O4 - HKCU\..\Run: [iCloudServices] . (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
    O4 - HKCU\..\Run: [KiesPreload] . (.Samsung - Kies.) -- C:\Program Files (x86)\Samsung\Kies\Kies.exe
    O4 - HKCU\..\Run: [NokiaSuite.exe] . (.Nokia - Nokia Suite.) -- C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe
    O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Google Installer.) -- C:\Users\Acer\AppData\Local\Google\Update\GoogleUpdate.exe
    O4 - HKCU\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe   =>.Piriform Ltd
    O4 - HKLM\..\Wow6432Node\Run: [backupManagerTray] . (.NewTech Infosystems, Inc. - Acer Backup Manager.) -- C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
    O4 - HKLM\..\Wow6432Node\Run: [Norton Online Backup] . (.Symantec Corporation - Norton Online Backup Service.) -- C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe   =>.Symantec Corporation
    O4 - HKLM\..\Wow6432Node\Run: [suiteTray] . (.Egis Technology Inc. - SuiteTray.) -- C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe
    O4 - HKLM\..\Wow6432Node\Run: [EgisUpdate] . (.Egis Technology Inc. - EgisUpdate Release Application.) -- C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
    O4 - HKLM\..\Wow6432Node\Run: [EgisTecPMMUpdate] . (.Egis Technology Inc. - PMM Update Application.) -- C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
    O4 - HKLM\..\Wow6432Node\Run: [startCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe   =>.Advanced Micro Devices, Inc
    O4 - HKLM\..\Wow6432Node\Run: [LManager] . (.Dritek System Inc. - Launch Manager Keyboard Application.) -- C:\Program Files (x86)\Launch Manager\LManager.exe
    O4 - HKLM\..\Wow6432Node\Run: [ArcadeDeluxeAgent] . (.CyberLink Corp. - Acer Arcade Deluxe Resident Program.) -- C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
    O4 - HKLM\..\Wow6432Node\Run: [Reader Library Launcher] . (.Sony Corporation - Reader Library Launcher.) -- C:\Program Files (x86)\Sony\Reader\Data\bin\launcher\Reader Library Launcher.exe
    O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
    O4 - HKLM\..\Wow6432Node\Run: [hpqSRMon] . (.Hewlett-Packard - HpqSRmon.) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
    O4 - HKLM\..\Wow6432Node\Run: [AVG_UI] . (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\AVG2015\avgui.exe
    O4 - HKLM\..\Wow6432Node\Run: [KiesTrayAgent] . (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe   =>.Samsung Electronics Co
    O4 - HKLM\..\Wow6432Node\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe   =>.Hewlett-Packard Co
    O4 - HKLM\..\Wow6432Node\Run: [sunJavaUpdateSched] . (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe   =>.Oracle Corporation
    O4 - HKLM\..\Wow6432Node\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe
    O4 - HKUS\S-1-5-19\..\Run: [sidebar] . (.Microsoft Corporation - Windows-bureaubladgadgets.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
    O4 - HKUS\S-1-5-20\..\Run: [sidebar] . (.Microsoft Corporation - Windows-bureaubladgadgets.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe
    O4 - HKUS\.DEFAULT\..\RunOnce: [spUninstallDeleteDir] rmdir /s /q \SearchProtect   =>PUP.SearchProtect
    O4 - HKUS\S-1-5-18\..\RunOnce: [spUninstallDeleteDir] rmdir /s /q \SearchProtect   =>PUP.SearchProtect
    O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe   =>.Microsoft Corporation
    O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe   =>.Microsoft Corporation
    O4 - HKUS\S-1-5-21-2668737801-3381503766-2512015713-1000\..\Run: [GoogleChromeAutoLaunch_7360584B616087257445E78FC1FAACF2] . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    O4 - HKUS\S-1-5-21-2668737801-3381503766-2512015713-1000\..\Run: [iCloudServices] . (.Apple Inc. - iCloud.) -- C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
    O4 - HKUS\S-1-5-21-2668737801-3381503766-2512015713-1000\..\Run: [KiesPreload] . (.Samsung - Kies.) -- C:\Program Files (x86)\Samsung\Kies\Kies.exe
    O4 - HKUS\S-1-5-21-2668737801-3381503766-2512015713-1000\..\Run: [NokiaSuite.exe] . (.Nokia - Nokia Suite.) -- C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe
    O4 - HKUS\S-1-5-21-2668737801-3381503766-2512015713-1000\..\Run: [Google Update] . (.Google Inc. - Google Installer.) -- C:\Users\Acer\AppData\Local\Google\Update\GoogleUpdate.exe
    O4 - HKUS\S-1-5-21-2668737801-3381503766-2512015713-1000\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe   =>.Piriform Ltd
    ~ Application:  Scanned in 00mn 00s

     

    ---\\ Knoppen op de werkbalk "belangrijkste instrumenten" Internet Explorer (O9)
    O9 - Extra button: &Verzenden naar OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} -- C:\Program Files (x86)\MICROS~2\Office14\ONBttnIE.dll (.not file.)
    O9 - Extra button: &Gekoppelde notities van OneNote [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} -- C:\Program Files (x86)\MICROS~2\Office14\ONBTTN~1.dll (.not file.)
    ~ IE Extra Buttons:  Scanned in 00mn 00s

     

    ---\\ ActiveX-objecten (Downloaded Program Files) (O16)
    O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} ((no name)) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex64-2.2.6.0.cab
    ~ Objets ActiveX:  Scanned in 00mn 00s

     

    ---\\ Domeinadres van de DNS (O17) wijzigen
    O17 - HKLM\System\CCS\Services\Tcpip\..\{BE77A58F-6CE0-4869-A3F6-569F157EA701}: DhcpNameServer = 192.168.1.1
    O17 - HKLM\System\CCS\Services\Tcpip\..\{E7C159C5-E95D-4032-87E2-DFF0B685D449}: DhcpNameServer = 213.46.228.196 62.179.104.196
    O17 - HKLM\System\CCS\Services\Tcpip\..\{E7C159C5-E95D-4032-87E2-DFF0B685D449}: DhcpDomain = arnhem.chello.nl
    O17 - HKLM\System\CS1\Services\Tcpip\..\{BE77A58F-6CE0-4869-A3F6-569F157EA701}: DhcpNameServer = 192.168.1.1
    O17 - HKLM\System\CS1\Services\Tcpip\..\{E7C159C5-E95D-4032-87E2-DFF0B685D449}: DhcpNameServer = 213.46.228.196 62.179.104.196
    O17 - HKLM\System\CS1\Services\Tcpip\..\{E7C159C5-E95D-4032-87E2-DFF0B685D449}: DhcpDomain = arnhem.chello.nl
    O17 - HKLM\System\CS2\Services\Tcpip\..\{BE77A58F-6CE0-4869-A3F6-569F157EA701}: DhcpNameServer = 192.168.1.1
    O17 - HKLM\System\CS2\Services\Tcpip\..\{E7C159C5-E95D-4032-87E2-DFF0B685D449}: DhcpNameServer = 213.46.228.196 62.179.104.196
    O17 - HKLM\System\CS2\Services\Tcpip\..\{E7C159C5-E95D-4032-87E2-DFF0B685D449}: DhcpDomain = arnhem.chello.nl
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
    ~ Domain:  Scanned in 00mn 00s

     

    ---\\ Aanvullend Protocol (O18)
    O18 - Handler: wlmailhtml [64Bits] - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (...) --
    O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll  =>.Microsoft Corporation
    ~ Protocole Additionnel:  Scanned in 00mn 00s

     

    ---\\ Lijst van niet-Microsoft NT services die niet uitgeschakeld zijn (O23)
    O23 - Service: GS-Supporter (e81a9dc1) . (...) - C:\Program Files (x86)\gs-ena~1\AssistantSvc.dll (.not file.)  =>PUP.SaveClicker
    ~ Services: 20 Legitimates Filtered in 00mn 04s

     

    ---\\ Taken die zijn gepland in de automatische modus (O39)
    O39 - APT:  - (..) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater   [940]
    O39 - APT:  - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore   [1052]
    O39 - APT:  - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA   [1056]
    O39 - APT:  - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2668737801-3381503766-2512015713-1000Core   [1010]
    O39 - APT:  - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2668737801-3381503766-2512015713-1000UA   [1062]
    ~ Scheduled Task: 20 Legitimates Filtered in 00mn 05s

     

    ---\\ Geïnstalleerde software (O42)
    O42 - Logiciel: Aangifte inkomstenbelasting 2011 - (.Belastingdienst.) [HKLM][64Bits] -- Aangifte inkomstenbelasting 2011
    O42 - Logiciel: Aangifte inkomstenbelasting 2012 - (.Belastingdienst.) [HKLM][64Bits] -- Aangifte inkomstenbelasting 2012
    O42 - Logiciel: Aangifte inkomstenbelasting 2013 - (.Belastingdienst.) [HKLM][64Bits] -- Aangifte inkomstenbelasting 2013
    O42 - Logiciel: Ask Toolbar - (.APN, LLC.) [HKLM][64Bits] -- {4F524A2D-5637-4300-76A7-A758B70C0A00}  =>Toolbar.Avira
    O42 - Logiciel: Hema Fotoalbum - (.Hema.) [HKCU][64Bits] -- {83EF9202-135C-4AFC-A083-DE9D09C6BC46}_is1
    O42 - Logiciel: LimeWire Music - (.ProNetSharing LLC.) [HKLM][64Bits] -- LimeWire Music
    O42 - Logiciel: PokerStars.eu - (.PokerStars.eu.) [HKLM][64Bits] -- PokerStars.eu
    O42 - Logiciel: SyncDroid version 1.2.4 - (.JunTu Software, Inc..) [HKLM][64Bits] -- {BE7E35A4-59E5-412B-9B18-57B4938B8C0B}_is1
    O42 - Logiciel: Widevine Media Optimizer IE 6.0.0 - (.Widevine Technologies.) [HKCU][64Bits] -- optimizer_ie
    O42 - Logiciel: partypoker - (.PartyGaming.) [HKLM][64Bits] -- PartyPoker
    ~ Logic: 32 Legitimates Filtered in 00mn 00s

     

    ---\\ HKCU & HKLM Software Keys
    [HKCU\Software\AC1]
    [HKCU\Software\PartyGaming]
    [HKCU\Software\Reg]
    [HKCU\Software\SyncDroid]
    [HKCU\Software\Widevine]
    [HKCU\Software\ƒAƒvƒŠƒP[ƒVƒ‡ƒ“ ƒEƒBƒU[ƒh‚Ŷ¬‚³‚ꂽƒ[ƒJƒ‹ ƒAƒvƒŠƒP[ƒVƒ‡ƒ“]
    [HKLM\Software\Wow6432Node\Reg]
    [HKLM\Software\Wow6432Node\SyncDroid]
    ~ Key Software: 423 Legitimates Filtered in 00mn 00s

     

    ---\\ 'Inhoud van mappen programma's, ProgramFiles, ProgramData, AppData (O43)
    O43 - CFD: 9-4-2012 - 14:46:06 - [] ----D C:\Program Files (x86)\35Label
    O43 - CFD: 20-2-2012 - 14:50:46 - [] ----D C:\Program Files (x86)\Belastingdienst
    O43 - CFD: 30-1-2013 - 15:25:09 - [] ----D C:\Program Files (x86)\LimeWire
    O43 - CFD: 30-1-2013 - 17:22:29 - [] ----D C:\Program Files (x86)\LimeWire Music
    O43 - CFD: 2-5-2014 - 17:02:04 - [] ----D C:\Program Files (x86)\PokerStars.EU
    O43 - CFD: 25-7-2014 - 16:59:24 - [] ----D C:\Program Files (x86)\SyncDroid
    O43 - CFD: 2-12-2014 - 10:45:20 - [] ----D C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
    O43 - CFD: 9-6-2012 - 15:34:46 - [] ----D C:\ProgramData\LimeWire Music
    O43 - CFD: 20-2-2012 - 14:50:47 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Belastingdienst
    O43 - CFD: 26-11-2014 - 11:34:54 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Graphics Related Programs
    O43 - CFD: 30-12-2013 - 16:49:55 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
    O43 - CFD: 30-1-2013 - 15:25:10 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LimeWire Music
    O43 - CFD: 2-5-2014 - 17:04:42 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\partypoker
    O43 - CFD: 17-1-2013 - 15:58:48 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PokerStars.EU
    O43 - CFD: 10-4-2012 - 15:50:24 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reader
    O43 - CFD: 25-7-2014 - 16:59:24 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SyncDroid
    O43 - CFD: 14-11-2011 - 12:32:18 - [0] R-H-D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
    O43 - CFD: 12-9-2013 - 17:17:36 - [] ----D C:\Users\Acer\AppData\Roaming\AC1
    O43 - CFD: 5-11-2014 - 15:48:50 - [] ----D C:\Users\Acer\AppData\Roaming\Belastingdienst
    O43 - CFD: 14-2-2013 - 20:54:51 - [] ----D C:\Users\Acer\AppData\Roaming\cef-cache
    O43 - CFD: 9-6-2012 - 15:47:47 - [] ----D C:\Users\Acer\AppData\Roaming\LimeWire Music
    O43 - CFD: 2-10-2012 - 16:34:17 - [] ----D C:\Users\Acer\AppData\Roaming\Party
    O43 - CFD: 7-10-2014 - 15:34:00 - [] ----D C:\Users\Acer\AppData\Roaming\SyncDroid
    O43 - CFD: 12-11-2014 - 13:06:20 - [] -SH-D C:\Users\Acer\AppData\Local\EmieBrowserModeList
    O43 - CFD: 26-1-2013 - 12:49:57 - [] ----D C:\Users\Acer\AppData\Local\Hema Fotoalbum
    O43 - CFD: 26-1-2013 - 12:20:10 - [] ----D C:\Users\Acer\AppData\Local\PokerStars
    O43 - CFD: 2-5-2014 - 17:02:37 - [] ----D C:\Users\Acer\AppData\Local\PokerStars.EU
    O43 - CFD: 26-12-2012 - 13:06:24 - [] ----D C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hema Fotoalbum
    O43 - CFD: 30-1-2013 - 14:35:06 - [0] ----D C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LimeWire
    ~ Program Folder: 308 Legitimates Filtered in 00mn 01s

     

    ---\\ Meest recente bestanden gewijzigd of gemaakt op Windows en System32 (O44)
    O44 - LFC:[MD5.C7BC96C3711C0D269DA26D1F0ECEC547] - 19-12-2014 - 19:40:57 ---A- . (...) -- C:\Windows\NeroDigital.ini   [69]
    O44 - LFC:[MD5.5D119CE420D2ECFCB4C746B535AB9181] - 24-12-2014 - 11:57:04 ---A- . (...) -- C:\zoek-results2014-12-24-105704.log   [27670]
    O44 - LFC:[MD5.CC7AA7B42CF418FC3D926913490048F8] - 26-12-2014 - 15:55:49 ---A- . (...) -- C:\Windows\zoek-delete.exe   [24064]
    O44 - LFC:[MD5.A76BEAAE411D6D0AECB48239D218C767] - 26-12-2014 - 16:16:50 ---A- . (...) -- C:\zoek-results.log   [5439]
    ~ Files: 11 Legitimates Filtered in 00mn 01s

     

    ---\\ Activiteiten en functies bij het opstarten van Windows Verkenner (O46)
    O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
    O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook [64Bits] - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
    ~ ShellExecuteHooks:  Scanned in 00mn 00s

     

    ---\\ Registersleutel Shell MountPoints2 (MPSK) (O51)
    O51 - MPSK:{1f496acc-1a23-11e4-bb78-00262d757ec2}\AutoRun\command. (...) -- F:\Startme.exe (.not file.)
    ~ Keys:  Scanned in 00mn 00s

     

    ---\\ Opsomming van het register sleutels PoliciesSystem (MWPS) (O55)
    O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
    O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
    ~ MWPS: 16 Legitimates Filtered in 00mn 00s

     

    ---\\ Opsomming van de registersleutel PoliciesExplorer (CÖKVI) (O56)
    O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
    ~ MWPE Keys: 4 Legitimates Filtered in 00mn 00s

     

    ---\\ Overzicht van de drivers (SDL) (O58)
    O58 - SDL:14-9-2013 - 12:33:10 ---A- . (...) -- C:\Windows\System32\Drivers\aswSnx.sys.sum   [175]
    O58 - SDL:14-9-2013 - 12:33:10 ---A- . (...) -- C:\Windows\System32\Drivers\aswSP.sys.sum   [175]
    O58 - SDL:14-9-2013 - 12:33:10 ---A- . (...) -- C:\Windows\System32\Drivers\aswVmm.sys.sum   [175]  =>.ALWIL Software
    O58 - SDL:14-7-2009 - 2:47:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys   [530496]
    O58 - SDL:6-3-2011 - 19:26:12 ---A- . (.eMPIA Technology, Inc. - USB 28xx BDA Driver.) -- C:\Windows\System32\Drivers\emBDA64.sys   [683136]
    O58 - SDL:6-3-2011 - 19:25:18 ---A- . (.eMPIA Technology, Inc. - USB 28xx BDA Lower filter.) -- C:\Windows\System32\Drivers\emOEM64.sys   [1189504]
    O58 - SDL:10-6-2009 - 21:31:59 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys   [31232]
    O58 - SDL:11-4-2014 - 9:39:22 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudbus.sys   [110336]
    O58 - SDL:11-4-2014 - 9:39:22 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG Android Modem Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudmdm.sys   [206080]
    O58 - SDL:14-7-2009 - 2:45:55 ---A- . (.Promise Technology - Promise  SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys   [24656]
    O58 - SDL:13-12-2012 - 13:50:36 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\Drivers\usbaapl64.sys   [54784]
    ~ Drivers: 97 Legitimates Filtered in 00mn 56s

     

    ---\\ Meest recente bestanden gewijzigd of gemaakt (gebruiker) (O61)
    O61 - LFC: 24-12-2014 - 18:11:33 ---A- . (...) -- C:\Users\Acer\Downloads\adwcleaner_4.106.exe   [2173952]
    O61 - LFC: 26-12-2014 - 18:11:33 ---A- . (...) -- C:\Users\Acer\Desktop\zoek.exe   [1295360]
    ~ 45 Fichiers temporaires (Temporary files)
    ~ 216 Fichiers cookies (Cookies files)
    ~ Files: 5 Legitimates Filtered in 00mn 04s

     

    ---\\ Lijst van cleaning tools (CLAB) (O63)
    O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1  =>.Nicolas Coolman
    O63 - Logiciel: RSIT - (.random/random.)
    ~ ADS:  Scanned in 00mn 00s

     

    ---\\ Bestandsassociaties mogelijk aangepast (O67)
    O67 - Shell Spawning: <.html> <ChromeHTML>[HKCU\..\open\Command] (.Not Key.)
    ~ FASS Keys: 11 Legitimates Filtered in 00mn 00s

     

    ---\\ Startmenu Internet (SMI) (O68)
    O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
    ~ Keys:  Scanned in 00mn 00s

     

    ---\\ Zoek "infecties in internetbrowsers (SBI) (O69)
    O69 - SBI: SearchScopes [HKCU] {012E1000-F331-11DB-8314-0800200C9A66} - (Google) - http://www.google.com
    O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com
    O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - http://www.google.com
    ~ Keys:  Scanned in 00mn 00s

     

    ---\\ Bepaalde zoekopdracht in de hoofdmap van het systeem (SPRF) (O84)
    [MD5.0D3B680986310AE5540578C0E481C6A0] [sPRF][3-3-2010] (...) -- C:\ProgramData\FullRemove.exe   [131984]
    [MD5.4A7D7A329B32E96A3DA4B83C41A16D7C] [sPRF][5-11-2014] (.inkscape.org - Inkscape.) -- C:\Users\Acer\Desktop\Inkscape-0.48.2-1-win32.exe   [35746429]
    [MD5.92ABBC6E52E32F8F66684F90BF4A25CE] [sPRF][26-12-2014] (...) -- C:\Users\Acer\Desktop\zoek.exe   [1295360]
    ~ Files: 7 Legitimates Filtered in 00mn 01s

     

    ---\\ Overzicht van de productcodes van software (PUC) (O90)
    O90 - PUC: "617DD6FF01B79624F991FF0BA74CDC59" . (.Bing Bar.) -- C:\Windows\Installer\{FF6DD716-7B10-4269-9F19-FFB07AC4CD95}\icon_installer_ico  =>Toolbar.Bing
    O90 - PUC: "D2A425F473650034677A7A857BC0A000" . (.Ask Toolbar.) -- C:\Windows\Installer\{4F524A2D-5637-4300-76A7-A758B70C0A00}\ToolbarIcon.exe  =>Toolbar.Ask
    ~ Update Products: 2 Legitimates Filtered in 00mn 00s

     

    ---\\ Microsoft Installer-bestanden (WIS) (NTFS) (O93)
    [MD5.3561A670FD52E8DB7EBEE4E2F85AB036] [WIS][16-12-2013] (.Microsoft Corporation - Bing Bar.) -- C:\Windows\Installer\111d3.msi   [741376]  =>Toolbar.Bing
    ~ WIS: 1 Legitimates Filtered in 00mn 04s

     

    ---\\ Algemene toestand van niet-Microsoft services (GSR) (SR = Running, SS = gestopt)
    SS - | Demand 24-12-2014 267440 |  (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
    SS - | Auto 9-11-2014 3488784 |  (AVGIDSAgent) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe
    SS - | Auto 10-7-1658 0 |  (e81a9dc1) . (...) - C:\Program Files (x86)\gs-ena~1\AssistantSvc.dll
    SS - | Auto 22-10-2014 107912 |  (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    SS - | Demand 22-10-2014 107912 |  (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    SS - | Demand 28-12-2011 182768 |  (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
    SS - | Demand 27-5-2010 305520 |  (MWLService) . (.Egis Technology Inc..) - C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe
    SS - | Demand 17-4-2010 50432 |  (NTIBackupSvc) . (.NewTech InfoSystems, Inc..) - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
    SS - | Demand 10-7-1658 0 |  (PCDSRVC{D1725DDC-01E99333-06020101}_0) . (...) - c:\users\acer\appdata\local\temp\ejcvpotesvv7\pcdrdiag\bin\pcdsrvc_x64.pkms
    SS - | Auto 23-10-2013 172192 |  (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
    SS - | Demand 4-2-2013 155824 |  (Sony PC Companion) . (.Avanquest Software.) - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
    SS - | Demand 2-4-2010 73728 |  (Sony SCSI Helper Service) . (.Sony Corporation.) - C:\Program Files (x86)\Common Files\Sony Shared\Fsk\SonySCSIHelperService.exe
    SS - | Demand 14-7-2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
    SR - | Auto 19-12-2014 81088 |  (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
    SR - | Auto 28-3-2009 16896 |  (AgereModemAudio) . (.LSI Corporation.) - C:\Program Files\LSI SoftModem\agr64svc.exe
    SR - | Auto 10-12-2009 202752 |  (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe
    SR - | Auto 7-10-2014 60744 |  (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    SR - | Auto 9-11-2014 298080 |  (avgwd) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe
    SR - | Auto 30-8-2011 462184 |  (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe
    SR - | Auto 26-2-2010 841248 |  (ePowerSvc) . (.Acer Incorporated.) - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
    SR - | Auto 8-1-2010 23584 |  (GREGService) . (.Acer Incorporated.) - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
    SR - | Demand 14-7-2009 27136 | C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll (hpqcxs08) . (.Hewlett-Packard Co..) - C:\Windows\System32\svchost.exe
    SR - | Auto 14-7-2009 27136 | C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll (hpqddsvc) . (.Hewlett-Packard Co..) - C:\Windows\System32\svchost.exe
    SR - | Auto 14-7-2009 27136 | C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.dll (HPSLPSVC) . (.Hewlett-Packard Co..) - C:\Windows\System32\svchost.exe
    SR - | Demand 15-10-2014 643880 |  (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
    SR - | Auto 3-3-2010 268824 |  (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
    SR - | Auto 14-7-2009 27136 | C:\Windows\system32\HPZinw12.dll (Net Driver HPZ12) . (.Hewlett-Packard.) - C:\Windows\System32\svchost.exe
    SR - | Auto 2-6-2010 2804568 |  (NOBU) . (.Symantec Corporation.) - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe  =>.Symantec Corporation
    SR - | Auto 29-6-2010 255744 |  (NTI IScheduleSvc) . (.NewTech Infosystems, Inc..) - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
    SR - | Auto 17-4-2010 144640 |  (NTISchedulerSvc) . (.NTI, Inc..) - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
    SR - | Auto 14-7-2009 27136 | C:\Windows\system32\HPZipm12.dll (Pml Driver HPZ12) . (.Hewlett-Packard.) - C:\Windows\System32\svchost.exe
    SR - | Auto 17-4-2009 247152 |  (RichVideo) . (...) - C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
    SR - | Demand 18-4-2013 737616 |  (ServiceLayer) . (.Nokia.) - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
    SR - | Auto 2-4-2014 4972864 |  (TeamViewer9) . (.TeamViewer GmbH.) - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
    SR - | Auto 3-3-2010 2320920 |  (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe
    SR - | Auto 29-1-2010 243232 |  (Updater Service) . (.Acer Group.) - C:\Program Files\Acer\Acer Updater\UpdaterService.exe
    SR - | Demand 10-7-1658 0 |  (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe  =>.Microsoft Corporation
    SR - | Auto 14-7-2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
    SR - | Auto 13-3-2010 146928 |  ({1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC}) . (.CyberLink Corp..) - C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\000.fcl
    ~ Services:  Scanned in 00mn 11s

     

    ---\\ Onderzoek gelijktijdige op de Master Boot Record (MBR) (O80)
    Run by Acer at 27-12-2014 18:12:46
    ~ OS 64 not supported by MBR tool
    ~ MBR: 0 Legitimates Filtered in 00mn 00s

     

    ---\\ Onderzoek de Master Boot Record op Infecties (MBRCheck) (O80)
    Written by ad13, http://ad13.geekstog
    Run by Acer at 27-12-2014 18:12:48
    ********* Dump file Name *********
    C:\PhysicalDisk0_MBR.bin
    ~ MBR:  Scanned in 00mn 02s

     

    ---\\ Extra scan (O88)
    Database Version : 13026 - (25-12-2014)
    Clés trouvées (Keys found) : 7
    Valeurs trouvées (Values found) : 0
    Dossiers trouvés  (Folders found) : 0
    Fichiers trouvés  (Files found) : 3

    [HKLM\SYSTEM\CurrentControlSet\Services\e81a9dc1]   =>PUP.SaveClicker^
    [HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{4F524A2D-5637-4300-76A7-A758B70C0A00}]   =>Toolbar.Avira^
    [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{b7fe5d70-9aa2-40f1-9c6b-12a255f085e1}]   =>Casino.OnlineGames
    [HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{b7fe5d70-9aa2-40f1-9c6b-12a255f085e1}]   =>Casino.OnlineGames
    [HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\extensions\{b7fe5d70-9aa2-40f1-9c6b-12a255f085e1}]   =>Casino.OnlineGames
    [HKCU\Software\PartyGaming]   =>Casino.OnlineGames
    [HKLM\Software\Classes\Interface\{09B8C335-1622-42C7-8650-A79D56551343}]   =>Adware.MapsGalaxy
    O4 - HKUS\.DEFAULT\..\RunOnce: [spUninstallDeleteDir] rmdir /s /q \SearchProtect   =>PUP.SearchProtect^
    O4 - HKUS\S-1-5-18\..\RunOnce: [spUninstallDeleteDir] rmdir /s /q \SearchProtect   =>PUP.SearchProtect^
    C:\Windows\Installer\111d3.msi   =>Toolbar.Bing^
    ~ Additionnel Scan: 451640 Items scanned in 00mn 25s

     

    ---\\ Additional information about modules
    ~ http://nicolascoolman.fr/r5-internet-explorer-proxy-management-iepm/  =>.Internet Explorer, proxybeheer (R5)
    ~ http://nicolascoolman.fr/o4-applications-demarrees-par-le-registre/  =>.Toepassingen gestart door register & bestand (O4)
    ~ http://nicolascoolman.fr/o51-mountpoints2-shell-key-mpsk/  =>.Registersleutel Shell MountPoints2 (MPSK) (O51)
    ~ AMI: 3 Legitimates Filtered in 00mn 00s

     

    ---\\ Samenvatting van detecties gevonden op uw werkstation
    http://nicolascoolman.fr/pup-searchprotect  =>PUP.SearchProtect
    http://nicolascoolman.fr/pup-saveclicker  =>PUP.SaveClicker
    http://nicolascoolman.fr/toolbar-ask  =>Toolbar.Ask
    http://www.nicolascoolman.fr/blog/  =>Casino.OnlineGames
    http://nicolascoolman.fr/adware-mapsgalaxy  =>Adware.MapsGalaxy
    ~ MSI: 5 link(s) detected in 00mn 00s

     

    ~ 1035 Legitimates filtered by white list
    End of the scan (558 lines in 03mn 13s)(0)

  3. Hallo Mako,

    Hierbij het log bestandje van zoek exe. Het andere bestandje volgt.

    gr Ebonny

    Zoek.exe v5.0.0.0 Updated 24-12-2014

    Tool run by Acer on vr 26-12-2014 at 15:55:52,10.

    Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64

    Running in: Normal Mode Internet Access Detected

    Launched: C:\Users\Acer\Desktop\zoek.exe [scan all users] [script inserted]

    ==== Older Logs ======================

    C:\zoek-results2014-12-24-105704.log 27670 bytes

    ==== Deleting CLSID Registry Keys ======================

    ==== Deleting CLSID Registry Values ======================

    ==== Deleting Services ======================

    ==== Firefox Extensions Registry ======================

    [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]

    "smartwebprinting@hp.com"="C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3" [14-09-2013 13:24]

    [HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]

    "smartwebprinting@hp.com"="C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3" [14-09-2013 13:24]

    ==== Chromium Look ======================

    Google Chrome Version: 39.0.2171.95 (Up to date, latest Stable version: 39.0.2171.95)

    ==== Set IE to Default ======================

    Old Values:

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

    "Start Page"="http://www.google.com"

    New Values:

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

    "Start Page"="http://www.google.com"

    ==== All HKCU SearchScopes ======================

    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

    "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

    {012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"

    {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"

    {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

    ==== Empty IE Cache ======================

    C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Users\Acer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully

    C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Users\TEMP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Users\TEMP.Acer-PC\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Users\Acer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0T4ZS9M5 will be deleted at reboot

    C:\Users\Acer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HQVHSBHK will be deleted at reboot

    C:\Users\Acer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OLJBBWJG will be deleted at reboot

    ==== Empty FireFox Cache ======================

    No FireFox Profiles found

    ==== Empty Chrome Cache ======================

    C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

    ==== Empty All Flash Cache ======================

    Flash Cache Emptied Successfully

    ==== Empty All Java Cache ======================

    Java Cache cleared successfully

    ==== C:\zoek_backup content ======================

    C:\zoek_backup (files=115 folders=40 25045364 bytes)

    ==== Empty Temp Folders ======================

    C:\Users\Acer\AppData\Local\Temp will be emptied at reboot

    C:\Users\Default\AppData\Local\Temp emptied successfully

    C:\Users\Default User\AppData\Local\Temp emptied successfully

    C:\Users\TEMP\AppData\Local\Temp emptied successfully

    C:\Users\TEMP.Acer-PC\AppData\Local\Temp emptied successfully

    C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully

    C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully

    C:\Windows\Temp will be emptied at reboot

    ==== After Reboot ======================

    ==== Empty Temp Folders ======================

    C:\Windows\Temp successfully emptied

    C:\Users\Acer\AppData\Local\Temp successfully emptied

    ==== Empty Recycle Bin ======================

    C:\$RECYCLE.BIN successfully emptied

    ==== Deleting Files / Folders ======================

    "C:\Users\Acer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0T4ZS9M5" not found

    "C:\Users\Acer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HQVHSBHK" not found

    "C:\Users\Acer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OLJBBWJG" not found

    ==== EOF on vr 26-12-2014 at 16:16:50,27 ======================

  4. Hierbij het logbestand van MalwareBytes

     

    gr Ebonny

     

     

     

     

    Malwarebytes Anti-Malware
    www.malwarebytes.org

    Scandatum: 26-12-2014
    Scantijd: 12:36:09
    Logbestand: MBAM Scanlog.txt
    Beheerder: Ja

    Versie: 2.00.4.1028
    Malwaredatabase: v2014.12.26.06
    Rootkitdatabase: v2014.12.23.02
    Licentie: Gratis
    Malwarebescherming: Uitgeschakeld
    Kwaadaardige Website Bescherming: Uitgeschakeld
    Zelfbescherming: Uitgeschakeld

    Besturingssysteem: Windows 7 Service Pack 1
    Processor: x64
    Bestandssysteem: NTFS
    Gebruiker: Acer

    Scantype: Bedreigingsscan
    Resultaat: Voltooid
    Objecten Gescand: 448203
    Verstreken Tijd: 28 m, 22 s

    Geheugen: Ingeschakeld
    Opstarten: Ingeschakeld
    Bestandssysteem: Ingeschakeld
    Archieven: Ingeschakeld
    Rootkits: Uitgeschakeld
    Heuristiek: Ingeschakeld
    POP: Waarschuwen
    POA: Ingeschakeld

    Processen: 0
    (Geen kwaadaardige items gedetecteerd)

    Modules: 0
    (Geen kwaadaardige items gedetecteerd)

    Registersleutels: 0
    (Geen kwaadaardige items gedetecteerd)

    Registerwaardes: 0
    (Geen kwaadaardige items gedetecteerd)

    Registerdata: 0
    (Geen kwaadaardige items gedetecteerd)

    Mappen: 0
    (Geen kwaadaardige items gedetecteerd)

    Bestanden: 0
    (Geen kwaadaardige items gedetecteerd)

    Fysieke Sectoren: 0
    (Geen kwaadaardige items gedetecteerd)

    (end)

  5. Zo 1e kerstdag is weer voorbij en ga weer verder met mijn probleem.

    Hierbij het logje van ADWcleaner.

    Ik ga nu de Anti-Malware uitvoeren.

    Moet ik ook zoek exe nogmaals goed uitvoeren?

    gr Ebonny

    AdwCleaner v4.106 - Rapport aangemaakt 24/12/2014 op 12:09:36

    # Laatste Update 21/12/2014 door Xplode

    # Database : 2014-12-21.4 [Live]

    # Besturingssysteem : Windows 7 Home Premium Service Pack 1 (64 bits)

    # Gebruikersnaam : Acer - ACER-PC

    # Gestart vanuit : C:\Users\Acer\Downloads\adwcleaner_4.106.exe

    # Optie : Verwijderen

    ***** [ Services ] *****

    ***** [ Bestanden / Mappen ] *****

    Map Verwijderd : C:\ProgramData\NCH Software

    Map Verwijderd : C:\ProgramData\Fighters

    Map Verwijderd : C:\Program Files (x86)\NCH Software

    Map Verwijderd : C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Fighters

    Map Verwijderd : C:\Users\Acer\AppData\Roaming\NCH Software

    Map Verwijderd : C:\Users\Acer\AppData\Roaming\Fighters

    ***** [ Taken ] *****

    ***** [ Snelkoppelingen ] *****

    ***** [ Register ] *****

    Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}

    Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}

    Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{38122A36-83B2-46B8-B39A-EC72A4614A07}

    Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2318C2B1-4965-11D4-9B18-009027A5CD4F}

    Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}

    Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AD708C09-D51B-45B3-9D28-4EBA2681FEBF}

    Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2318C2B1-4965-11D4-9B18-009027A5CD4F}

    Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{38122A36-83B2-46B8-B39A-EC72A4614A07}

    Waarde Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{2318C2B1-4965-11D4-9B18-009027A5CD4F}]

    Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}

    Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Classes\Interface\{CA021789-C8CD-4676-BC40-90077A19D5CD}

    Waarde Verwijderd : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{2318C2B1-4965-11D4-9B18-009027A5CD4F}]

    Sleutel Verwijderd : HKCU\Software\Linkey

    Sleutel Verwijderd : HKCU\Software\Softonic

    Sleutel Verwijderd : HKLM\SOFTWARE\SmdmF

    ***** [ Browsers ] *****

    -\\ Internet Explorer v11.0.9600.17496

    -\\ Google Chrome v39.0.2171.95

    *************************

    AdwCleaner[R0].txt - [4040 octets] - [28/10/2014 13:04:04]

    AdwCleaner[R1].txt - [2419 octets] - [28/10/2014 18:02:55]

    AdwCleaner[R2].txt - [1384 octets] - [21/11/2014 13:03:42]

    AdwCleaner[R3].txt - [1323 octets] - [24/11/2014 19:52:04]

    AdwCleaner[R4].txt - [3383 octets] - [24/12/2014 12:03:35]

    AdwCleaner[s0].txt - [3708 octets] - [28/10/2014 13:06:46]

    AdwCleaner[s1].txt - [2105 octets] - [28/10/2014 18:05:14]

    AdwCleaner[s2].txt - [1215 octets] - [21/11/2014 13:05:33]

    AdwCleaner[s3].txt - [1199 octets] - [24/11/2014 19:54:37]

    AdwCleaner[s4].txt - [2965 octets] - [24/12/2014 12:09:36]

    ########## EOF - C:\AdwCleaner\AdwCleaner[s4].txt - [3025 octets] ##########

  6. Hiermede de log van zoekexe.

    Gr Ebonny

    Zoek.exe v5.0.0.0 Updated 24-12-2014

    Tool run by Acer on wo 24-12-2014 at 11:18:08,33.

    Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64

    Running in: Normal Mode Internet Access Detected

    Launched: C:\Users\Acer\AppData\Local\Temp\Rar$DI00.875\zoek.exe.com [scan all users] [script inserted] [Checkboxes used]

    ==== System Restore Info ======================

    24-12-2014 11:19:48 Zoek.exe System Restore Point Created Succesfully.

    ==== Torpig Check ======================

    HKEY_CLASSES_ROOT\Directory\shellex\CopyHookHandlers\FileSystem {217FC9C0-3AEA-1069-A2DB-08002B30309D} %SystemRoot%\system32\shell32.dll

    HKEY_CLASSES_ROOT\Directory\shellex\CopyHookHandlers\Sharing {40dd6e20-7c17-11ce-a804-00aa003ca9f6} %SystemRoot%\system32\ntshrui.dll

    ==== Empty Folders Check ======================

    C:\Users\Acer\AppData\Roaming\Systweak deleted successfully

    C:\Users\Acer\AppData\Local\Comodo deleted successfully

    C:\Users\Administrator\AppData\Local\Comodo deleted successfully

    C:\Users\Administrator\AppData\Local\Google deleted successfully

    C:\Users\Gast\AppData\Local\Comodo deleted successfully

    C:\Users\Gast\AppData\Local\Google deleted successfully

    ==== Deleting CLSID Registry Keys ======================

    HKEY_USERS\S-1-5-21-2668737801-3381503766-2512015713-1000\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476} deleted successfully

    ==== Deleting CLSID Registry Values ======================

    ==== Deleting Services ======================

    ==== Deleting Files \ Folders ======================

    C:\PROGRA~2\Microsoft SQL Server Compact Edition deleted

    C:\Windows\SysNative\roboot64.exe deleted

    C:\Users\Acer\Downloads\SoftonicDownloader_voor_acoustica-cd-dvd-label-maker.exe deleted

    C:\Windows\wininit.ini deleted

    C:\Windows\SysNative\config\systemprofile\Searches deleted

    ==== Files Recently Created / Modified ======================

    ====== C:\Windows ====

    ====== C:\Users\Acer\AppData\Local\Temp ====

    2014-12-19 09:10:38 BCB0728F4B117855765CE8FE883B5E9B 1536 ----a-w- C:\Users\Acer\AppData\Local\Temp\NOSEventMessages.dll

    2014-12-19 07:05:29 EAE97E47C695583E0F85D57CFE6038AA 85185048 ----a-w- C:\Users\Acer\AppData\Local\Temp\{D5878294-C113-43c5-A24F-FC333C52015A}\NokiaSuite2Installer.exe

    ====== Java Cache =====

    ====== C:\Windows\SysWOW64 =====

    2014-12-18 08:54:35 0481346D0EF668C0D4FF69A7BBEFA846 115712 ----a-w- C:\Windows\SysWOW64\ieUnatt.exe

    2014-12-12 11:03:24 FF0A6E76FAE624AC74780AB008752F98 3209728 ----a-w- C:\Windows\SysWOW64\mf.dll

    2014-12-12 11:03:24 D17954CA6343F43B62637F51996B4E95 23040 ----a-w- C:\Windows\SysWOW64\mfpmp.exe

    2014-12-12 11:03:24 60FBCF033FF42A40C916C01A962A8802 50176 ----a-w- C:\Windows\SysWOW64\rrinstaller.exe

    2014-12-12 11:03:24 52096F5F476733F2E2725CF346FF373B 2048 ----a-w- C:\Windows\SysWOW64\mferror.dll

    2014-12-12 11:03:24 20257A0BFB824B49055A6EEC29C72C03 103424 ----a-w- C:\Windows\SysWOW64\mfps.dll

    2014-12-11 11:55:41 E1456E7396022EBE4E5434188D1AC8B0 1230336 ----a-w- C:\Windows\SysWOW64\WindowsCodecs.dll

    2014-12-11 11:55:32 F25284C763E728E4DAC248C211D1FC5B 76288 ----a-w- C:\Windows\SysWOW64\mshtmled.dll

    2014-12-11 11:55:32 BB25F69463AD8E7E51B5D9D158B5F8DF 30720 ----a-w- C:\Windows\SysWOW64\iernonce.dll

    2014-12-11 11:55:32 2EADED07BDA52C1FC5A6D4E1CC5858F0 47616 ----a-w- C:\Windows\SysWOW64\ieetwproxystub.dll

    2014-12-11 11:55:30 F98B3860BB47089EA8C1504F043E90E9 342200 ----a-w- C:\Windows\SysWOW64\iedkcs32.dll

    2014-12-11 11:55:30 F34F6DC38A21FCDBB50CDD1EE97B1EA3 1307136 ----a-w- C:\Windows\SysWOW64\urlmon.dll

    2014-12-11 11:55:30 D7A98A4CEA2E89F544065A00BF37FC10 688640 ----a-w- C:\Windows\SysWOW64\msfeeds.dll

    2014-12-11 11:55:30 69AC6FD5B0B4DC963723E1EBDEE10A2C 285696 ----a-w- C:\Windows\SysWOW64\dxtrans.dll

    2014-12-11 11:55:30 2ABC5587D582ACCEA30B4CF968C2A4A5 60416 ----a-w- C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

    2014-12-11 11:55:29 220505B0B3E96C857DD01729AF0CD369 19749376 ----a-w- C:\Windows\SysWOW64\mshtml.dll

    2014-12-11 11:55:28 F0BCBD8FCDA145EED53ED66C45CC378B 62464 ----a-w- C:\Windows\SysWOW64\iesetup.dll

    2014-12-11 11:55:28 DEB9476A3CD1A5819DD4504BB7C6BA66 2724864 ----a-w- C:\Windows\SysWOW64\mshtml.tlb

    2014-12-11 11:55:28 543ADCEA31CF9C2B4EEB900D4AAFD0F9 2052096 ----a-w- C:\Windows\SysWOW64\inetcpl.cpl

    2014-12-11 11:55:28 41AFA61E061E98E97272AC02184C8C2C 710144 ----a-w- C:\Windows\SysWOW64\ieapfltr.dll

    2014-12-11 11:55:28 01777AB557997E98691E322225314E57 2277888 ----a-w- C:\Windows\SysWOW64\iertutil.dll

    2014-12-11 11:55:27 EC5A3E4E21079B9D423AA0760828D678 620032 ----a-w- C:\Windows\SysWOW64\jscript9diag.dll

    2014-12-11 11:55:26 759E2FAD5371512C6679FA346719493E 47104 ----a-w- C:\Windows\SysWOW64\jsproxy.dll

    2014-12-11 11:55:25 CF9D05678B02B44FBC8D8AD8C9F30D58 478208 ----a-w- C:\Windows\SysWOW64\ieui.dll

    2014-12-11 11:55:25 35BD045804B67E78F4CAB72CB820AF7F 418304 ----a-w- C:\Windows\SysWOW64\dxtmsft.dll

    2014-12-11 11:55:24 B59E370277EDB6643083B62297175628 12836864 ----a-w- C:\Windows\SysWOW64\ieframe.dll

    2014-12-11 11:55:22 F728E7E9937117E0F32F39840EB6D737 4299264 ----a-w- C:\Windows\SysWOW64\jscript9.dll

    2014-12-11 11:55:22 5E4E0E43E0A5BF9F089696DFA7A3D677 1888256 ----a-w- C:\Windows\SysWOW64\wininet.dll

    2014-12-11 11:55:22 37F078B5B435AFC6BF316F2AD14B469A 501248 ----a-w- C:\Windows\SysWOW64\vbscript.dll

    2014-12-11 11:55:22 2E9E105037AC1274656C3D1125323352 1155072 ----a-w- C:\Windows\SysWOW64\mshtmlmedia.dll

    2014-12-11 11:55:21 930F63D6BC43D4BCD937DFCECDA95F82 168960 ----a-w- C:\Windows\SysWOW64\msrating.dll

    2014-12-11 11:55:21 29CED1A4777A43526A4ED8A7B6936883 64000 ----a-w- C:\Windows\SysWOW64\MshtmlDac.dll

    2014-12-11 11:55:03 9EA3783672D21817B9DF1061B54C3B3C 155136 ----a-w- C:\Windows\SysWOW64\charmap.exe

    2014-12-11 11:55:02 B975C202F590BBC5AA63225FBD148791 198656 ----a-w- C:\Windows\SysWOW64\WSManHTTPConfig.exe

    2014-12-11 11:55:02 B6AC69FFBAA159DD5CEED814245A286D 214016 ----a-w- C:\Windows\SysWOW64\WsmWmiPl.dll

    2014-12-11 11:55:02 5D9A1A3E5824CECE65871C60E5A08A1A 145920 ----a-w- C:\Windows\SysWOW64\WsmAuto.dll

    2014-12-11 11:55:02 2C28FEC61C4AC68480A99CB7AA197FA9 248832 ----a-w- C:\Windows\SysWOW64\WSManMigrationPlugin.dll

    2014-12-11 11:55:02 1DE9BD23AFA36150586C732D876D9B74 1177088 ----a-w- C:\Windows\SysWOW64\WsmSvc.dll

    2014-12-11 11:54:59 50C73E54062BA252350F3F29580E28DA 2048 ----a-w- C:\Windows\SysWOW64\tzres.dll

    ====== C:\Windows\SysWOW64\drivers =====

    ====== C:\Windows\Sysnative =====

    2014-12-18 08:54:35 5564883BFB523D5078A5B1FE3128FD63 144384 ----a-w- C:\Windows\Sysnative\ieUnatt.exe

    2014-12-12 11:03:24 AB2EB93A982A2C26BA3E4D2D65328804 24576 ----a-w- C:\Windows\Sysnative\mfpmp.exe

    2014-12-12 11:03:24 9797A23F773C0782A0D91BEC44054166 206848 ----a-w- C:\Windows\Sysnative\mfps.dll

    2014-12-12 11:03:24 68E09E7CD4DC52F132A4B492ACE8C243 55808 ----a-w- C:\Windows\Sysnative\rrinstaller.exe

    2014-12-12 11:03:24 63578DB847FCC40883CB8F303E785D46 2048 ----a-w- C:\Windows\Sysnative\mferror.dll

    2014-12-12 11:03:23 6E1DDE0E72FB8268F42F6777CE4C5036 4121600 ----a-w- C:\Windows\Sysnative\mf.dll

    2014-12-11 11:55:44 F0356290BA3940F31AFF5566501495F7 192000 ----a-w- C:\Windows\Sysnative\aepic.dll

    2014-12-11 11:55:44 E00981CF227CEEBE7B5A8D99C76D1116 741376 ----a-w- C:\Windows\Sysnative\invagent.dll

    2014-12-11 11:55:44 D257AF48934D2167BE15AA4008176381 1083392 ----a-w- C:\Windows\Sysnative\aeinv.dll

    2014-12-11 11:55:44 985558125FEEC89AB4AD142158B066D7 830976 ----a-w- C:\Windows\Sysnative\appraiser.dll

    2014-12-11 11:55:44 8E64BB62AB3810D3C29ED50C405AD3BD 1232040 ----a-w- C:\Windows\Sysnative\aitstatic.exe

    2014-12-11 11:55:43 DAF13A81A5FC895D68B1D9A72F65F4CB 413184 ----a-w- C:\Windows\Sysnative\generaltel.dll

    2014-12-11 11:55:43 5CD6E919CE938A98AB25A2EA2C8C4EDA 227328 ----a-w- C:\Windows\Sysnative\aepdu.dll

    2014-12-11 11:55:43 4253086737D81D7C9C160FDE6C037F44 396800 ----a-w- C:\Windows\Sysnative\devinv.dll

    2014-12-11 11:55:41 A9A0BFD706B3A24C403EEFEB0790D011 1424384 ----a-w- C:\Windows\Sysnative\WindowsCodecs.dll

    2014-12-11 11:55:32 D471F7A428C21DB04D810445D12D68E0 48640 ----a-w- C:\Windows\Sysnative\ieetwproxystub.dll

    2014-12-11 11:55:32 0FABE2AB8CA2D5CC7C95798533B4D057 114688 ----a-w- C:\Windows\Sysnative\ieetwcollector.exe

    2014-12-11 11:55:31 077AEB068A51B396F25BBCAB0944FC3A 2724864 ----a-w- C:\Windows\Sysnative\mshtml.tlb

    2014-12-11 11:55:30 F987718A5CA053DC23E94A531F1754A4 34304 ----a-w- C:\Windows\Sysnative\iernonce.dll

    2014-12-11 11:55:30 9F07E8FC75C5F98A783ABFD3005EFC22 77824 ----a-w- C:\Windows\Sysnative\JavaScriptCollectionAgent.dll

    2014-12-11 11:55:30 39B512C643812FC2D4843C0D4206C759 718848 ----a-w- C:\Windows\Sysnative\ie4uinit.exe

    2014-12-11 11:55:28 E7A2061ADF0F4D430FECDA1E8D6B7BA6 1548288 ----a-w- C:\Windows\Sysnative\urlmon.dll

    2014-12-11 11:55:28 5BF0BAA1E5EF724287565E97C9219254 389296 ----a-w- C:\Windows\Sysnative\iedkcs32.dll

    2014-12-11 11:55:27 B4E481E9498CE22113628C4E9EA24427 4096 ----a-w- C:\Windows\Sysnative\ieetwcollectorres.dll

    2014-12-11 11:55:25 EBC8C9F61F4C148B8C6A28EDE80C51E4 968704 ----a-w- C:\Windows\Sysnative\MsSpellCheckingFacility.exe

    2014-12-11 11:55:25 14BA910E7731FC84EB85328BD0F1EE81 800768 ----a-w- C:\Windows\Sysnative\msfeeds.dll

    2014-12-11 11:55:25 0AF0AEF0BA9EF6169E61C78504DCAE55 316928 ----a-w- C:\Windows\Sysnative\dxtrans.dll

    2014-12-11 11:55:24 EFBA893429814EA3244C87C2D1256618 800768 ----a-w- C:\Windows\Sysnative\ieapfltr.dll

    2014-12-11 11:55:24 23AE7A3B44D5C550B81347288CE3230E 66560 ----a-w- C:\Windows\Sysnative\iesetup.dll

    2014-12-11 11:55:23 982B871A25B5078093FAD82D0AB0E3FC 2885120 ----a-w- C:\Windows\Sysnative\iertutil.dll

    2014-12-11 11:55:23 3FE71E2A5BD3EC652E64FC8BCEFEDD2C 2125312 ----a-w- C:\Windows\Sysnative\inetcpl.cpl

    2014-12-11 11:55:22 DFECAE6D925FBC9078870E16F98C471F 54784 ----a-w- C:\Windows\Sysnative\jsproxy.dll

    2014-12-11 11:55:21 F7CCA58B973FB5EAED8D1F12DD3E51F6 490496 ----a-w- C:\Windows\Sysnative\dxtmsft.dll

    2014-12-11 11:55:21 8EF01E2EF21D41A23FF70B28179F9ABE 633856 ----a-w- C:\Windows\Sysnative\ieui.dll

    2014-12-11 11:55:20 DB10D681314714E0D4623E4C0CF6654A 92160 ----a-w- C:\Windows\Sysnative\mshtmled.dll

    2014-12-11 11:55:20 556D271F4243B273EDA353512BF3608A 14412800 ----a-w- C:\Windows\Sysnative\ieframe.dll

    2014-12-11 11:55:19 8D64466AD12CA5677CD0099C43C58569 6039552 ----a-w- C:\Windows\Sysnative\jscript9.dll

    2014-12-11 11:55:19 7AC115968B8856004920057B2271224C 1359360 ----a-w- C:\Windows\Sysnative\mshtmlmedia.dll

    2014-12-11 11:55:19 4AF089160FE082E5EA5C4AA72782DCA2 2358272 ----a-w- C:\Windows\Sysnative\wininet.dll

    2014-12-11 11:55:19 1D294810D3A8A8F722E86AA001F54DCC 580096 ----a-w- C:\Windows\Sysnative\vbscript.dll

    2014-12-11 11:55:19 021DFF3CB0ADCD19B3AAA00A650FDEE2 814080 ----a-w- C:\Windows\Sysnative\jscript9diag.dll

    2014-12-11 11:55:18 89296EF4A3729A049DA25B7D67A04078 199680 ----a-w- C:\Windows\Sysnative\msrating.dll

    2014-12-11 11:55:18 17A157A4225CF562202AC71DB8103177 88064 ----a-w- C:\Windows\Sysnative\MshtmlDac.dll

    2014-12-11 11:55:17 D478A4CF07FB8ADF72FB16B88E8030B8 25059840 ----a-w- C:\Windows\Sysnative\mshtml.dll

    2014-12-11 11:55:03 36E5E9D0400475230A7F57F274B88321 165888 ----a-w- C:\Windows\Sysnative\charmap.exe

    2014-12-11 11:55:02 FDEB5EE2E4DB9DE9251DDAF6A5BCA070 346624 ----a-w- C:\Windows\Sysnative\WSManMigrationPlugin.dll

    2014-12-11 11:55:02 D929ABD465A2DED963DA8B30946A8D5C 2020352 ----a-w- C:\Windows\Sysnative\WsmSvc.dll

    2014-12-11 11:55:02 9B44CABE3536D0E3BF627176318AAFC9 181248 ----a-w- C:\Windows\Sysnative\WsmAuto.dll

    2014-12-11 11:55:02 5C642B7B0365305451D579F3EFAD57D4 310272 ----a-w- C:\Windows\Sysnative\WsmWmiPl.dll

    2014-12-11 11:55:02 41457C1909F6D1100C0F9B9CFF7960FC 266240 ----a-w- C:\Windows\Sysnative\WSManHTTPConfig.exe

    2014-12-11 11:54:59 A026998E927FD2095505154CBD72F35B 2048 ----a-w- C:\Windows\Sysnative\tzres.dll

    ====== C:\Windows\Sysnative\drivers =====

    2014-12-11 11:55:39 70988118145F5F10EF24720B97F35F65 119296 ----a-w- C:\Windows\Sysnative\drivers\tdx.sys

    2014-11-24 19:01:39 26C43960C99EE861A5D0EDC4DCF3B1C3 129752 ----a-w- C:\Windows\Sysnative\drivers\MBAMSwissArmy.sys

    2014-11-24 19:01:10 D3311B31C470E7681B14D9B014CBF9ED 93400 ----a-w- C:\Windows\Sysnative\drivers\mbamchameleon.sys

    2014-11-24 19:01:10 95EF63A7827D4E3A229CBBCB42619E93 63704 ----a-w- C:\Windows\Sysnative\drivers\mwac.sys

    2014-11-24 19:01:10 5C3669B71657F22E67A1D4BD49D2CBE7 25816 ----a-w- C:\Windows\Sysnative\drivers\mbam.sys

    ====== C:\Windows\Tasks ======

    ====== C:\Windows\Temp ======

    ======= C:\Program Files =====

    ======= C:\PROGRA~2 =====

    2014-11-26 10:34:54 -------- d-----w- C:\PROGRA~2\NCH Software

    ======= C: =====

    ====== C:\Users\Acer\AppData\Roaming ======

    2014-11-26 10:34:51 -------- d-----w- C:\Users\Acer\AppData\Roaming\NCH Software

    ====== C:\Users\Acer ======

    2014-12-12 10:41:12 C2E3F4F4F14DE9B086BF479E70729916 1055936 ----a-w- C:\Users\Acer\Downloads\install_flashplayer16x32axau_gtbd_chrd_dn_aaa_aih.exe

    2014-12-02 09:45:22 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes

    2014-12-02 09:44:42 -------- d-----w- C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7

    2014-11-26 10:34:55 -------- d-----w- C:\ProgramData\NCH Software

    2014-11-26 10:34:54 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite

    2014-11-26 10:34:54 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Graphics Related Programs

    ====== C: exe-files ==

    2014-12-19 07:05:29 EAE97E47C695583E0F85D57CFE6038AA 85185048 ----a-w- C:\Users\Acer\AppData\Local\Temp\{D5878294-C113-43c5-A24F-FC333C52015A}\NokiaSuite2Installer.exe

    2014-12-18 08:54:35 5564883BFB523D5078A5B1FE3128FD63 144384 ----a-w- C:\Windows\System32\ieUnatt.exe

    2014-12-18 08:54:35 0481346D0EF668C0D4FF69A7BBEFA846 115712 ----a-w- C:\Windows\SysWOW64\ieUnatt.exe

    2014-12-17 12:46:38 28C1B7DD7D81B6653A35C5BF5FDF8900 5972496 ----a-w- C:\Program Files (x86)\AVG\AVG2015\avgcrema.exe

    === C: other files ==

    ==== Startup Registry Enabled ======================

    [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]

    "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

    [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]

    "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

    [HKEY_USERS\S-1-5-21-2668737801-3381503766-2512015713-1000\Software\Microsoft\Windows\CurrentVersion\Run]

    "GoogleChromeAutoLaunch_7360584B616087257445E78FC1FAACF2"="C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --no-startup-window"

    "iCloudServices"="C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe"

    "KiesPreload"="C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload"

    "NokiaSuite.exe"="C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray"

    "Google Update"="C:\Users\Acer\AppData\Local\Google\Update\GoogleUpdate.exe /c"

    "CCleaner Monitoring"="C:\Program Files\CCleaner\CCleaner64.exe /MONITOR"

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]

    [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce]

    "mctadmin"="C:\Windows\System32\mctadmin.exe"

    [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce]

    "mctadmin"="C:\Windows\System32\mctadmin.exe"

    [HKEY_USERS\S-1-5-21-2668737801-3381503766-2512015713-1000\Software\Microsoft\Windows\CurrentVersion\RunOnce]

    [HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\RunOnce]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "BackupManagerTray"="C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe -h -k"

    "Norton Online Backup"="C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe"

    "SuiteTray"="C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"

    "EgisUpdate"="C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe -d"

    "EgisTecPMMUpdate"="C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"

    "StartCCC"="C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe MSRun"

    "LManager"="C:\Program Files (x86)\Launch Manager\LManager.exe"

    "ArcadeDeluxeAgent"="C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe"

    "Reader Library Launcher"="C:\Program Files (x86)\Sony\Reader\Data\bin\launcher\Reader Library Launcher.exe"

    "APSDaemon"="C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

    "hpqSRMon"="C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe"

    "AVG_UI"="C:\Program Files (x86)\AVG\AVG2015\avgui.exe /TRAYONLY"

    "KiesTrayAgent"="C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe"

    "Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

    "HP Software Update"="C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe"

    "SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

    "iTunesHelper"="C:\Program Files (x86)\iTunes\iTunesHelper.exe"

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

    "GoogleChromeAutoLaunch_7360584B616087257445E78FC1FAACF2"="C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --no-startup-window"

    "iCloudServices"="C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe"

    "KiesPreload"="C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload"

    "NokiaSuite.exe"="C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray"

    "Google Update"="C:\Users\Acer\AppData\Local\Google\Update\GoogleUpdate.exe /c"

    "CCleaner Monitoring"="C:\Program Files\CCleaner\CCleaner64.exe /MONITOR"

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]

    "AppInit_DLLs"="C:\\Users\\Acer\\AppData\\Local\\DProtect\\eBP.dll,C:\\Users\\Acer\\AppData\\Local\\DProtect\\eBPSD.dll"

    ==== Startup Registry Enabled x64 ======================

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "mwlDaemon"="C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe"

    "RtHDVCpl"="C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s"

    "PLFSetI"="C:\Windows\PLFSetI.exe"

    "Acer ePower Management"="C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe"

    "AmIcoSinglun64"="C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe"

    "BCSSync"="C:\Program Files\Microsoft Office\Office14\BCSSync.exe /DelayServices"

    "SynTPEnh"="%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe "

    ==== Startup Registry Disabled ======================

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run-]

    "Google Update"="\"C:\\Users\\Acer\\AppData\\Local\\Google\\Update\\GoogleUpdate.exe\" /c"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run-]

    "PlayMovie"="\"C:\\Program Files (x86)\\Acer Arcade Deluxe\\PlayMovie\\PMVService.exe\""

    "HP Software Update"="C:\\Program Files (x86)\\HP\\HP Software Update\\HPWuSchd2.exe"

    "Adobe ARM"="\"C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe\""

    "QuickTime Task"="\"C:\\Program Files (x86)\\QuickTime\\QTTask.exe\" -atboottime"

    "SunJavaUpdateSched"="\"C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe\""

    "iTunesHelper"="\"C:\\Program Files (x86)\\iTunes\\iTunesHelper.exe\""

    ==== Startup Folders ======================

    2013-09-14 12:22:26 2103 ----a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk

    ==== Task Scheduler Jobs ======================

    C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [24-12-2014 11:16]

    C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [22-10-2014 09:56]

    C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [22-10-2014 09:56]

    C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2668737801-3381503766-2512015713-1000Core.job --a------ C:\Users\Acer\AppData\Local\Google\Update\GoogleUpdate.exe [12-02-2013 10:21]

    C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2668737801-3381503766-2512015713-1000UA.job --a------ C:\Users\Acer\AppData\Local\Google\Update\GoogleUpdate.exe [12-02-2013 10:21]

    ==== Other Scheduled Tasks ======================

    "C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe]

    "C:\Windows\SysNative\tasks\Adobe-online actualiseringsprogramma" [C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe]

    "C:\Windows\SysNative\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"]

    "C:\Windows\SysNative\tasks\CreateChoiceProcessTask" [C:\Windows\System32\browserchoice.exe]

    "C:\Windows\SysNative\tasks\Google Updater and Installer" [C:\Users\Acer\AppData\Local\Google\Update\GoogleUpdate.exe]

    "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]

    "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]

    "C:\Windows\SysNative\tasks\GoogleUpdateTaskUserS-1-5-21-2668737801-3381503766-2512015713-1000Core" [C:\Users\Acer\AppData\Local\Google\Update\GoogleUpdate.exe]

    "C:\Windows\SysNative\tasks\GoogleUpdateTaskUserS-1-5-21-2668737801-3381503766-2512015713-1000UA" [C:\Users\Acer\AppData\Local\Google\Update\GoogleUpdate.exe]

    "C:\Windows\SysNative\tasks\HP-Online updateprogramma" [C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe]

    "C:\Windows\SysNative\tasks\Java Update Scheduler" [C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe]

    "C:\Windows\SysNative\tasks\SidebarExecute" [C:\Program Files\Windows Sidebar\sidebar.exe]

    "C:\Windows\SysNative\tasks\{544C7FA0-F6C1-4F12-99DC-6C287F11A31D}" ["c:\users\acer\appdata\local\google\chrome\application\chrome.exe"]

    "C:\Windows\SysNative\tasks\{7A8A6320-4F30-456B-9C69-02D1912D95E6}" ["c:\users\acer\appdata\local\google\chrome\application\chrome.exe"]

    "C:\Windows\SysNative\tasks\Apple\AppleSoftwareUpdate" [C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe]

    "C:\Windows\SysNative\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc]

    ==== Folders in C:\PROGRA~3 0-6 Months Old ======================

    2014-06-30 12:19:57 -------- d-----w- C:\PROGRA~3\Freemake

    2014-07-10 16:03:03 -------- d-----w- C:\PROGRA~3\AVS4YOU

    2014-08-02 10:24:34 -------- d-----w- C:\PROGRA~3\Sony

    2014-08-02 10:28:05 -------- d-----w- C:\PROGRA~3\Sony Mobile

    2014-08-12 11:13:11 -------- d-----w- C:\PROGRA~3\34BE82C4-E596-4e99-A191-52C6199EBF69

    2014-10-21 09:17:51 -------- d-----w- C:\PROGRA~3\AVG2015

    2014-10-22 12:01:05 -------- d-----w- C:\PROGRA~3\Oracle

    2014-11-26 10:34:55 -------- d-----w- C:\PROGRA~3\NCH Software

    2014-12-02 09:44:42 -------- d-----w- C:\PROGRA~3\E1864A66-75E3-486a-BD95-D1B7D99A84A7

    ==== Firefox Extensions Registry ======================

    [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]

    "smartwebprinting@hp.com"="C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3" [14-09-2013 13:24]

    [HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]

    "smartwebprinting@hp.com"="C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3" [14-09-2013 13:24]

    ==== Chromium Look ======================

    Google Chrome Version: 39.0.2171.95 (Up to date, latest Stable version: 39.0.2171.95)

    YouTube - Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo

    Google Search - Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf

    Google Wallet - Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda

    Gmail - Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

    ==== Set IE to Default ======================

    Old Values:

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

    "Start Page"="http://www.default-search.net?sid=476&aid=134&itype=n&ver=14682&tm=542&src=hmp"

    New Values:

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

    "Start Page"="http://www.google.com"

    ==== All HKCU SearchScopes ======================

    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

    "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

    {012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"

    {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"

    {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

    ==== Empty IE Cache ======================

    C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Users\Acer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Users\Acer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully

    C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Users\TEMP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Users\TEMP.Acer-PC\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    ==== Empty FireFox Cache ======================

    No FireFox Profiles found

    ==== Empty Chrome Cache ======================

    C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

    ==== Empty All Flash Cache ======================

    Flash Cache Emptied Successfully

    ==== Empty All Java Cache ======================

    Java Cache cleared successfully

    ==== C:\zoek_backup content ======================

    C:\zoek_backup (files=115 folders=40 25045364 bytes)

    ==== Empty Temp Folders ======================

    C:\Users\Acer\AppData\Local\Temp will be emptied at reboot

    C:\Users\Default\AppData\Local\Temp emptied successfully

    C:\Users\Default User\AppData\Local\Temp emptied successfully

    C:\Users\TEMP\AppData\Local\Temp emptied successfully

    C:\Users\TEMP.Acer-PC\AppData\Local\Temp emptied successfully

    C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully

    C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully

    C:\Windows\Temp will be emptied at reboot

    ==== After Reboot ======================

    ==== Empty Temp Folders ======================

    C:\Windows\Temp successfully emptied

    C:\Users\Acer\AppData\Local\Temp successfully emptied

    ==== Empty Recycle Bin ======================

    C:\$RECYCLE.BIN successfully emptied

    ==== EOF on wo 24-12-2014 at 11:57:04,74 ======================

  7. Hierbij de logfile.

    Moet ik in Malwarebytes alle gedetecteerde fouten verwijderen of herstellen?

    gr Ebonny

    Malwarebytes Anti-Malware

    www.malwarebytes.org

    Scandatum: 22-11-2014

    Scantijd: 12:40:20

    Logbestand: MBAM Scanlog.txt

    Beheerder: Ja

    Versie: 2.00.3.1025

    Malwaredatabase: v2014.11.22.05

    Rootkitdatabase: v2014.11.21.01

    Licentie: Gratis

    Malwarebescherming: Uitgeschakeld

    Kwaadaardige Website Bescherming: Uitgeschakeld

    Zelfbescherming: Uitgeschakeld

    Besturingssysteem: Windows 7 Service Pack 1

    Processor: x64

    Bestandssysteem: NTFS

    Gebruiker: Acer

    Scantype: Aangepaste Scan

    Resultaat: Voltooid

    Objecten Gescand: 705953

    Verstreken Tijd: 4 u, 2 m, 12 s

    Geheugen: Ingeschakeld

    Opstarten: Ingeschakeld

    Bestandssysteem: Ingeschakeld

    Archieven: Ingeschakeld

    Rootkits: Ingeschakeld

    Heuristiek: Ingeschakeld

    POP: Ingeschakeld

    POA: Ingeschakeld

    Processen: 0

    (Geen kwaadaardige items gedetecteerd)

    Modules: 0

    (Geen kwaadaardige items gedetecteerd)

    Registersleutels: 0

    (Geen kwaadaardige items gedetecteerd)

    Registerwaardes: 1

    PUP.Optional.FreeMakeConverter.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|fmconverter@gmail.com, C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\, In Quarantaine, [2e3d291543391e18ad03310b897ae818]

    Registerdata: 2

    PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\ABOUTURLS|newtab, %appdata%\SimplyTech\home\home.htm, Goed: (www.google.com), Slecht: (%appdata%\SimplyTech\home\home.htm),Vervangen,[bcaff5492c50e353e9f45fe70df8827e]

    PUP.Optional.SimplyTech.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\ABOUTURLS|newtab, %appdata%\SimplyTech\home\home.htm, Goed: (www.google.com), Slecht: (%appdata%\SimplyTech\home\home.htm),Vervangen,[9bd056e8c5b7171fb528d86ec441ab55]

    Mappen: 0

    (Geen kwaadaardige items gedetecteerd)

    Bestanden: 4

    PUP.Optional.MindSpark.A, C:\Users\Acer\Downloads\Allin1Convert.exe, In Quarantaine, [87e48eb0f389fe38974f000826df629e],

    PUP.Optional.Softonic, C:\zoek_backup\C_Users_Acer_Downloads_SoftonicDownloader_voor_inkscape.exe.vir, In Quarantaine, [e388ba84afcd1422751d2e2cae52f709],

    PUP.Optional.Softonic.A, D:\Bewaar\Download internet\SoftonicDownloader_voor_acdsee-photo-manager.exe, In Quarantaine, [86e5003ea3d960d689183cfe8d748a76],

    PUP.Optional.Conduit, D:\Bewaar\Download internet\Converter 2012 sept\WiseConvert_1.4.exe, In Quarantaine, [a4c7b08e1a625cdae0e430ff3ec22cd4],

    Fysieke Sectoren: 0

    (Geen kwaadaardige items gedetecteerd)

    (end)

  8. Sorry voor het ongemak. Ik heb niet in de gaten gehad dat de vorige discussie nog open stond. Zal niet meer gebeuren.

    Kan ik de codes die ik heb ontvangen weer gebruiken wanneer de PC weer trager wordt of is die niet aan te raden.

    hierbij de Log.

    gr Ebonny

    # AdwCleaner v4.101 - Rapport aangemaakt 21/11/2014 op 13:05:33

    # Laatste Update 09/11/2014 door Xplode

    # Database : 2014-11-16.1 [Live]

    # Besturingssysteem : Windows 7 Home Premium Service Pack 1 (64 bits)

    # Gebruikersnaam : Acer - ACER-PC

    # Gestart vanuit : C:\Users\Acer\Downloads\adwcleaner_4.101.exe

    # Optie : Verwijderen

    ***** [ Services ] *****

    ***** [ Bestanden / Mappen ] *****

    ***** [ Taken ] *****

    ***** [ Snelkoppelingen ] *****

    ***** [ Register ] *****

    Sleutel Verwijderd : HKLM\SOFTWARE\Classes\TypeLib\{EEA63863-87BC-4DCA-A5B5-EB97E3B04806}

    Sleutel Verwijderd : HKCU\Software\Softonic

    ***** [ Browsers ] *****

    -\\ Internet Explorer v11.0.9600.17420

    -\\ Google Chrome v38.0.2125.111

    *************************

    AdwCleaner[R0].txt - [4040 octets] - [28/10/2014 13:04:04]

    AdwCleaner[R1].txt - [2419 octets] - [28/10/2014 18:02:55]

    AdwCleaner[R2].txt - [1384 octets] - [21/11/2014 13:03:42]

    AdwCleaner[s0].txt - [3708 octets] - [28/10/2014 13:06:46]

    AdwCleaner[s1].txt - [2105 octets] - [28/10/2014 18:05:14]

    AdwCleaner[s2].txt - [1075 octets] - [21/11/2014 13:05:33]

    ########## EOF - C:\AdwCleaner\AdwCleaner[s2].txt - [1135 octets] ##########

  9. Hierbij de logfile.

    gr Ebonny

    Zoek.exe v5.0.0.0 Updated 19-November-2014

    Tool run by Acer on do 20-11-2014 at 13:49:00,99.

    Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64

    Running in: Normal Mode Internet Access Detected

    Launched: C:\Users\Acer\Downloads\zoek (1).exe [scan all users] [script inserted]

    ==== Older Logs ======================

    C:\zoek-results2014-11-19-113343.log 62384 bytes

    ==== Deleting CLSID Registry Keys ======================

    ==== Deleting CLSID Registry Values ======================

    ==== Deleting Services ======================

    ==== Registry Fix Code ======================

    Windows Registry Editor Version 5.00

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]

    "AppInit_DLLs"=-

    ==== Registry Fix Code x64 ======================

    Windows Registry Editor Version 5.00

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]

    "AppInit_DLLs"=-

    ==== Firefox Extensions Registry ======================

    [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]

    "fmconverter@gmail.com"="C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox" [30-06-2014 13:19]

    [HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]

    "smartwebprinting@hp.com"="C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3" [14-09-2013 13:24]

    ==== Chromium Look ======================

    AFAS Personal Bijwerk Assistent - Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdcefkchgdibcdegcafkekacfdapplbo

    AVG Web TuneUp - Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkmdocpbnblchppecickbipihlkehdfg

    ==== Set IE to Default ======================

    Old Values:

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

    "Start Page"="Google"

    New Values:

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

    "Start Page"="Google"

    ==== All HKCU SearchScopes ======================

    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

    "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

    {012E1000-F331-11DB-8314-0800200C9A66} Google Url="{searchTerms - Google Search}"

    {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="{searchTerms} - Bing"

    {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="{searchTerms} - Google Search}"

    ==== Empty IE Cache ======================

    C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Users\Acer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Users\TEMP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Users\TEMP.Acer-PC\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Users\Acer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\7G08XVMP will be deleted at reboot

    C:\Users\Acer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\H3WQS5N7 will be deleted at reboot

    C:\Users\Acer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\UZ8S7S9C will be deleted at reboot

    C:\Users\Acer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XXLED8DZ will be deleted at reboot

    ==== Empty FireFox Cache ======================

    No FireFox Profiles found

    ==== Empty Chrome Cache ======================

    C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

    ==== Empty All Flash Cache ======================

    Flash Cache Emptied Successfully

    ==== Empty All Java Cache ======================

    Java Cache cleared successfully

    ==== C:\zoek_backup content ======================

    C:\zoek_backup (files=102 folders=38 23194506 bytes)

    ==== Empty Temp Folders ======================

    C:\Users\Acer\AppData\Local\Temp will be emptied at reboot

    C:\Users\Default\AppData\Local\Temp emptied successfully

    C:\Users\Default User\AppData\Local\Temp emptied successfully

    C:\Users\TEMP\AppData\Local\Temp emptied successfully

    C:\Users\TEMP.Acer-PC\AppData\Local\Temp emptied successfully

    C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully

    C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully

    C:\Windows\Temp will be emptied at reboot

    ==== After Reboot ======================

    ==== Empty Temp Folders ======================

    C:\Windows\Temp successfully emptied

    C:\Users\Acer\AppData\Local\Temp successfully emptied

    ==== Empty Recycle Bin ======================

    C:\$RECYCLE.BIN successfully emptied

    ==== Deleting Files / Folders ======================

    "C:\Users\Acer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\7G08XVMP" not found

    "C:\Users\Acer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\H3WQS5N7" not found

    "C:\Users\Acer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\UZ8S7S9C" not found

    "C:\Users\Acer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XXLED8DZ" not found

    ==== EOF on do 20-11-2014 at 14:11:06,80 ======================

  10. Hierbij de logfile.

    gr Ebonny

    Zoek.exe v5.0.0.0 Updated 19-November-2014

    Tool run by Acer on do 20-11-2014 at 13:49:00,99.

    Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64

    Running in: Normal Mode Internet Access Detected

    Launched: C:\Users\Acer\Downloads\zoek (1).exe [scan all users] [script inserted]

    ==== Older Logs ======================

    C:\zoek-results2014-11-19-113343.log 62384 bytes

    ==== Deleting CLSID Registry Keys ======================

    ==== Deleting CLSID Registry Values ======================

    ==== Deleting Services ======================

    ==== Registry Fix Code ======================

    Windows Registry Editor Version 5.00

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]

    "AppInit_DLLs"=-

    ==== Registry Fix Code x64 ======================

    Windows Registry Editor Version 5.00

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]

    "AppInit_DLLs"=-

    ==== Firefox Extensions Registry ======================

    [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]

    "fmconverter@gmail.com"="C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox" [30-06-2014 13:19]

    [HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]

    "smartwebprinting@hp.com"="C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3" [14-09-2013 13:24]

    ==== Chromium Look ======================

    AFAS Personal Bijwerk Assistent - Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdcefkchgdibcdegcafkekacfdapplbo

    AVG Web TuneUp - Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkmdocpbnblchppecickbipihlkehdfg

    ==== Set IE to Default ======================

    Old Values:

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

    "Start Page"="Google"

    New Values:

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

    "Start Page"="Google"

    ==== All HKCU SearchScopes ======================

    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

    "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

    {012E1000-F331-11DB-8314-0800200C9A66} Google Url="{searchTerms - Google Search}"

    {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="{searchTerms} - Bing"

    {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="{searchTerms} - Google Search}"

    ==== Empty IE Cache ======================

    C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Users\Acer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Users\TEMP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Users\TEMP.Acer-PC\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Users\Acer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\7G08XVMP will be deleted at reboot

    C:\Users\Acer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\H3WQS5N7 will be deleted at reboot

    C:\Users\Acer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\UZ8S7S9C will be deleted at reboot

    C:\Users\Acer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XXLED8DZ will be deleted at reboot

    ==== Empty FireFox Cache ======================

    No FireFox Profiles found

    ==== Empty Chrome Cache ======================

    C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

    ==== Empty All Flash Cache ======================

    Flash Cache Emptied Successfully

    ==== Empty All Java Cache ======================

    Java Cache cleared successfully

    ==== C:\zoek_backup content ======================

    C:\zoek_backup (files=102 folders=38 23194506 bytes)

    ==== Empty Temp Folders ======================

    C:\Users\Acer\AppData\Local\Temp will be emptied at reboot

    C:\Users\Default\AppData\Local\Temp emptied successfully

    C:\Users\Default User\AppData\Local\Temp emptied successfully

    C:\Users\TEMP\AppData\Local\Temp emptied successfully

    C:\Users\TEMP.Acer-PC\AppData\Local\Temp emptied successfully

    C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully

    C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully

    C:\Windows\Temp will be emptied at reboot

    ==== After Reboot ======================

    ==== Empty Temp Folders ======================

    C:\Windows\Temp successfully emptied

    C:\Users\Acer\AppData\Local\Temp successfully emptied

    ==== Empty Recycle Bin ======================

    C:\$RECYCLE.BIN successfully emptied

    ==== Deleting Files / Folders ======================

    "C:\Users\Acer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\7G08XVMP" not found

    "C:\Users\Acer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\H3WQS5N7" not found

    "C:\Users\Acer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\UZ8S7S9C" not found

    "C:\Users\Acer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XXLED8DZ" not found

    ==== EOF on do 20-11-2014 at 14:11:06,80 ======================

  11. Hiermede de logfile.

    gr Ebonny

    Zoek.exe v5.0.0.0 Updated 16-November-2014

    Tool run by Acer on wo 19-11-2014 at 9:31:45,49.

    Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64

    Running in: Normal Mode Internet Access Detected

    Launched: C:\Users\Acer\Downloads\zoek (1).exe [scan all users] [script inserted] [Checkboxes used]

    ==== System Restore Info ======================

    19-11-2014 9:36:41 Zoek.exe System Restore Point Created Succesfully.

    ==== Deleting CLSID Registry Keys ======================

    HKEY_USERS\S-1-5-21-2668737801-3381503766-2512015713-1000\Software\Microsoft\Internet Explorer\SearchScopes\{562488DA-E43F-4EA7-9D2C-8629763D2850} deleted successfully

    ==== Deleting CLSID Registry Values ======================

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{4F524A2D-5350-4500-76A7-7A786E7484D7} deleted successfully

    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{4F524A2D-5350-4500-76A7-7A786E7484D7} deleted successfully

    ==== Installed Programs ======================

    3100_3200_3300_Help

    3100_3200_3300trb

    3200

    64 Bit HP CIO Components Installer

    Aangifte inkomstenbelasting 2011

    Aangifte inkomstenbelasting 2012

    Aangifte inkomstenbelasting 2013

    ACDSee Pro 3

    Acer Arcade Deluxe

    Acer Backup Manager

    Acer Crystal Eye Webcam

    Acer ePower Management

    Acer eRecovery Management

    Acer GameZone Console

    Acer GridVista

    Acer Registration

    Acer ScreenSaver

    Acoustica CD/DVD Label Maker

    Acrobat.com

    Adobe AIR

    Adobe Digital Editions 2.0

    Adobe Flash Player 15 ActiveX

    Adobe Reader XI (11.0.09) - Nederlands

    AIO_CDB_ProductContext

    AIO_CDB_Software

    AIO_Scan

    Airport Mania First Flight

    Albelli Fotoboeken

    Alcor Micro USB Card Reader

    Amazonia

    Apple Application Support

    Apple Mobile Device Support

    Apple Software Update

    Ask Toolbar

    ATI Catalyst Install Manager

    Audio Comparer

    AVG 2015

    AVG Web TuneUp

    Backup Manager Basic

    Bing Bar

    Bonjour

    Broadcom Gigabit NetLink Controller

    BufferChm

    Cake Mania

    Catalyst Control Center - Branding

    Catalyst Control Center Core Implementation

    Catalyst Control Center Graphics Full Existing

    Catalyst Control Center Graphics Full New

    Catalyst Control Center Graphics Light

    Catalyst Control Center Graphics Previews Vista

    Catalyst Control Center InstallProxy

    Catalyst Control Center Localization All

    ccc-core-static

    ccc-utility64

    CCC Help Chinese Standard

    CCC Help Chinese Traditional

    CCC Help Czech

    CCC Help Danish

    CCC Help Dutch

    CCC Help English

    CCC Help Finnish

    CCC Help French

    CCC Help German

    CCC Help Greek

    CCC Help Hungarian

    CCC Help Italian

    CCC Help Japanese

    CCC Help Korean

    CCC Help Norwegian

    CCC Help Polish

    CCC Help Portuguese

    CCC Help Russian

    CCC Help Spanish

    CCC Help Swedish

    CCC Help Thai

    CCC Help Turkish

    CCleaner

    Citrix XenApp Web Plugin

    Copy

    CyberLink PhotoNow

    CyberLink PowerDirector

    CyberLink PowerDVD 10

    Definition Update for Microsoft Office 2010 (KB2899521) 64-Bit Edition

    Defraggler

    Destinations

    DeviceDiscovery

    DocProc

    Dream Day First Home

    eSobi v2

    Farm Frenzy 2

    Fax

    Freemake Video Converter versie 4.1.4

    Galapago

    Google Chrome

    Google Earth

    Google Toolbar for Internet Explorer

    Google Update Helper

    Google+ Auto Backup

    GPBaseService2

    Hema Fotoalbum

    Heroes of Hellas

    Hewlett-Packard ACLM.NET v1.1.0.0

    HP Customer Participation Program 13.0

    HP Imaging Device Functions 13.0

    HP Photosmart Essential 3.5

    HP Photosmart Officejet and Deskjet All-In-One Driver Software 13.0 Rel. B

    HP Product Detection

    HP Smart Web Printing 4.51

    HP Solution Center 13.0

    HP Update

    HPDiagnosticAlert

    HPPhotoGadget

    HPPhotoSmartDiscLabelContent1

    HPPhotosmartEssential

    HPProductAssistant

    HPSSupply

    iCloud

    Identity Card

    Inkscape 0.48.2

    Intel® Management Engine Components

    Intel® Rapid Storage Technology

    iTunes

    Java 7 Update 67

    Java 8 Update 25

    Java Auto Updater

    Junk Mail filter update

    Launch Manager

    LimeWire Music

    LSI HDA Modem

    Malwarebytes Anti-Malware versie 2.0.3.1025

    MarketResearch

    Merriam Websters Spell Jam

    Microsoft .NET Framework 4.5.1

    Microsoft .NET Framework 4.5.1 (Nederlands)

    Microsoft .NET Framework 4.5.1 (NLD)

    Microsoft Antimalware Service NL-NL Language Pack

    Microsoft Application Error Reporting

    Microsoft Choice Guard

    Microsoft Office Access MUI (Dutch) 2010

    Microsoft Office Excel MUI (Dutch) 2010

    Microsoft Office Groove MUI (Dutch) 2010

    Microsoft Office InfoPath MUI (Dutch) 2010

    Microsoft Office Office 32-bit Components 2010

    Microsoft Office OneNote MUI (Dutch) 2010

    Microsoft Office Outlook MUI (Dutch) 2010

    Microsoft Office PowerPoint MUI (Dutch) 2010

    Microsoft Office Professional Plus 2010

    Microsoft Office Proof (Dutch) 2010

    Microsoft Office Proof (English) 2010

    Microsoft Office Proof (French) 2010

    Microsoft Office Proof (German) 2010

    Microsoft Office Proofing (Dutch) 2010

    Microsoft Office Publisher MUI (Dutch) 2010

    Microsoft Office Shared 32-bit MUI (Dutch) 2010

    Microsoft Office Shared MUI (Dutch) 2010

    Microsoft Office Word MUI (Dutch) 2010

    Microsoft Security Client NL-NL Language Pack

    Microsoft Silverlight

    Microsoft SQL Server 2005 Compact Edition [ENU]

    Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

    Microsoft Visual C++ 2005 Redistributable

    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148

    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

    Microsoft_VC100_CRT_SP1_x64

    Microsoft_VC100_CRT_SP1_x86

    MSVC80_x64_v2

    MSVC80_x86_v2

    MSVC90_x64

    MSVC90_x86

    MSVCRT

    MSXML 4.0 SP2 (KB954430)

    MSXML 4.0 SP2 (KB973688)

    MyFreeCodec

    MyWinLocker

    MyWinLocker Suite

    Nero 8 Lite

    Network64

    Nokia Connectivity Cable Driver

    Nokia Suite

    Norton Online Backup

    NTI Backup Now 5

    NTI Backup Now Standard

    NTI Media Maker 8

    OCR Software by I.R.I.S. 13.0

    partypoker

    PC Connectivity Solution

    Picasa 3

    Poker Pop

    PokerStars.eu

    QuickTime 7

    Reader Library by Sony

    Realtek High Definition Audio Driver

    Samsung Kies

    SAMSUNG USB Driver for Mobile Phones

    Search App by Ask

    Security Update for Microsoft .NET Framework 4.5.1 (KB2894854v2)

    Security Update for Microsoft .NET Framework 4.5.1 (KB2898869)

    Security Update for Microsoft .NET Framework 4.5.1 (KB2901126)

    Security Update for Microsoft .NET Framework 4.5.1 (KB2931368)

    Security Update for Microsoft .NET Framework 4.5.1 (KB2972107)

    Security Update for Microsoft .NET Framework 4.5.1 (KB2972216)

    Security Update for Microsoft .NET Framework 4.5.1 (KB2978128)

    Security Update for Microsoft .NET Framework 4.5.1 (KB2979578v2)

    Security Update for Microsoft Office 2010 (KB2553284) 64-Bit Edition

    Security Update for Microsoft Office 2010 (KB2687423) 64-Bit Edition

    Security Update for Microsoft Office 2010 (KB2850016) 64-Bit Edition

    Security Update for Microsoft Office 2010 (KB2880971) 64-Bit Edition

    Security Update for Microsoft Office 2010 (KB2881071) 64-Bit Edition

    Security Update for Microsoft Word 2010 (KB2883013) 64-Bit Edition

    Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition

    Shop for HP Supplies

    Shredder

    SkypeT 6.14

    SmartWebPrinting

    Softwarenetz Adressen2

    Softwarenetz Adressen3

    SolutionCenter

    Sony Mobile Update Engine

    Sony PC Companion 2.10.211

    Speccy

    Spin & Win

    Status

    Synaptics Pointing Device Driver

    SyncDroid version 1.2.4

    TeamViewer 9

    Toolbox

    TrayApp

    UnloadSupport

    Update for Microsoft Access 2010 (KB2553446) 64-Bit Edition

    Update for Microsoft Excel 2010 (KB2889935) 64-Bit Edition

    Update for Microsoft Filter Pack 2.0 (KB2878281) 64-Bit Edition

    Update for Microsoft InfoPath 2010 (KB2817369) 64-Bit Edition

    Update for Microsoft InfoPath 2010 (KB2817396) 64-Bit Edition

    Update for Microsoft Office 2010 (KB2589298) 64-Bit Edition

    Update for Microsoft Office 2010 (KB2589352) 64-Bit Edition

    Update for Microsoft Office 2010 (KB2589375) 64-Bit Edition

    Update for Microsoft Office 2010 (KB2589386) 64-Bit Edition

    Update for Microsoft Office 2010 (KB2597087) 64-Bit Edition

    Update for Microsoft Office 2010 (KB2687275) 64-Bit Edition

    Update for Microsoft Office 2010 (KB2687502) 64-Bit Edition

    Update for Microsoft Office 2010 (KB2794737) 64-Bit Edition

    Update for Microsoft Office 2010 (KB2825635) 64-Bit Edition

    Update for Microsoft Office 2010 (KB2825640) 64-Bit Edition

    Update for Microsoft Office 2010 (KB2837581) 64-Bit Edition

    Update for Microsoft Office 2010 (KB2837602) 64-Bit Edition

    Update for Microsoft Office 2010 (KB2837606) 64-Bit Edition

    Update for Microsoft Office 2010 (KB2850079) 64-Bit Edition

    Update for Microsoft Office 2010 (KB2878252) 64-Bit Edition

    Update for Microsoft Office 2010 (KB2889828) 64-Bit Edition

    Update for Microsoft OneNote 2010 (KB2837595) 64-Bit Edition

    Update for Microsoft Outlook 2010 (KB2687567) 64-Bit Edition

    Update for Microsoft PowerPoint 2010 (KB2837579) 64-Bit Edition

    Update for Microsoft PowerPoint 2010 (KB2878251) 64-Bit Edition

    Update for Microsoft SharePoint Workspace 2010 (KB2760601) 64-Bit Edition

    Update for Microsoft Visio 2010 (KB2880526) 64-Bit Edition

    Update for Microsoft Visio Viewer 2010 (KB2837587) 64-Bit Edition

    USB Video/Audio Device Driver

    Visual Studio 2012 x64 Redistributables

    Visual Studio 2012 x86 Redistributables

    VLC media player 1.0.5

    WebReg

    Welcome Center

    Widevine Media Optimizer IE 6.0.0

    Winamp

    Windows-stuurprogrammapakket - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0)

    Windows Live - Hulpprogramma voor uploaden

    Windows Live aanmeldhulp

    Windows Live Call

    Windows Live Communications Platform

    Windows Live Essentials

    Windows Live Mail

    Windows Live Messenger

    Windows Live Movie Maker

    Windows Live Photo Gallery

    Windows Live Sync

    Windows Live Writer

    WinRAR

    ==== Running Processes ======================

    C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

    C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

    C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe

    C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe

    C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe

    C:\Windows\PLFSetI.exe

    C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe

    C:\Program Files (x86)\Samsung\Kies\Kies.exe

    C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe

    C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

    C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe

    C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe

    C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe

    C:\Program Files (x86)\Acer\Registration\GREGsvc.exe

    C:\Windows\SysWOW64\svchost.exe

    C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

    C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe

    C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe

    C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe

    C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe

    C:\Program Files\Acer\Acer Updater\UpdaterService.exe

    C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe

    C:\Program Files (x86)\Launch Manager\LManager.exe

    C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe

    C:\Program Files (x86)\Sony\Reader\Data\bin\launcher\Reader Library Launcher.exe

    C:\Program Files (x86)\AVG\AVG2015\avgui.exe

    C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe

    C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe

    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

    C:\Windows\SysWOW64\ctfmon.exe

    C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe

    C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe

    C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe

    C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe

    C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

    C:\Users\Acer\Downloads\zoek (1).exe

    C:\Windows\SysWOW64\cmd.exe

    C:\Windows\SysWOW64\cmd.exe

    C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe

    C:\Windows\SysWOW64\cmd.exe

    C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

    ==== Deleting Services ======================

    ==== Deleting Files \ Folders ======================

    C:\Users\Acer\AppData\Local\DProtect not found

    C:\Users\Acer\AppData\Roaming\FreeVideoConverter deleted

    C:\PROGRA~3\AVG Web TuneUp deleted

    C:\Users\Acer\Downloads\SoftonicDownloader_voor_inkscape.exe deleted

    C:\Users\Acer\AppData\LocalLow\AVG Web TuneUp deleted

    C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\AVG Web TuneUp deleted

    C:\Windows\SysNative\config\systemprofile\Searches deleted

    "C:\Windows\Installer\6361f.msi" deleted

    "C:\PROGRA~2\AVG Web TuneUp\TBAPI.dll" deleted

    "C:\PROGRA~2\AVG Web TuneUp" not deleted

    ==== System Specs ======================

    Windows: Windows 7 Home Premium Edition (64-bit) Service Pack 1 (Build 7601)

    Memory (RAM): 3957 MB

    CPU Info: Intel® Core i3 CPU M 330 @ 2.13GHz

    CPU Speed: 2126,5 MHz

    Sound Card: Luidsprekers (Realtek High Defi |

    Realtek Digital Output (Realtek |

    Display Adapters: ATI Mobility Radeon HD 5470 | ATI Mobility Radeon HD 5470 | RDPDD Chained DD | RDP Encoder Mirror Driver | RDP Reflector Display Driver

    Monitors: 1x; Algemeen PnP-beeldscherm |

    Screen Resolution: 1600 X 900 - 32 bit

    Network: Network Present

    Network Adapters: Microsoft Virtual WiFi Miniport Adapter | Broadcom NetLink Gigabit Ethernet | Atheros AR5B93 Wireless Network Adapter

    CD / DVD Drives: 1x (E: | ) E: HL-DT-STDVDRAM GT32N

    Ports: COM3 LPT Port NOT Present.

    Mouse: 5 Button Wheel Mouse Present

    Hard Disks: C: 290,1GB | D: 290,4GB

    Hard Disks - Free: C: 210,3GB | D: 57,4GB

    Manufacturer *: Phoenix Technologies LTD

    BIOS Info: AT/AT COMPATIBLE | 07/29/10 | ACRSYS - 6040000

    Time Zone: West-Europa (standaardtijd)

    Motherboard *: Acer Aspire 7740

    Country: Nederland

    Language: NLD

    ==== System Specs (Software) ======================

    Anti-Virus: AVG AntiVirus Free Edition 2015 On-access scanning disabled (Outdated)

    Anti-Spyware: Windows Defender disabled (Outdated)

    Anti-Spyware: AVG AntiVirus Free Edition 2015 disabled (Outdated)

    Default Browser: Google Chrome 38.0.2125.111

    Internet Explorer Version: 11.0.9600.17420

    Google Chrome version: 38.0.2125.111

    Adobe Reader version: 11.0.9.29

    Sun Java version: 1.8.0_25 (32-bit)

    Sun Java version: 1.8.0_25 (64-bit)

    ==== Files Recently Created / Modified ======================

    ====== C:\Windows ====

    ====== C:\Users\Acer\AppData\Local\Temp ====

    2014-11-12 10:39:06 BCB0728F4B117855765CE8FE883B5E9B 1536 ----a-w- C:\Users\Acer\AppData\Local\Temp\NOSEventMessages.dll

    ====== Java Cache =====

    2014-10-22 12:02:12 C1BBA7F1278F193AB584FFF460DB5E2A 17878 ----a-w- C:\Users\Acer\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12\eef218c-3b90aff1

    2014-10-22 12:02:04 415FC9732A3F4D89A0E01251CD66E136 646 ----a-w- C:\Users\Acer\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\17\49a00451-3b68dd83

    2014-10-22 12:02:04 EAFDA3CA853FA14FA726CAAD1269E5EB 424 ----a-w- C:\Users\Acer\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\17\49a00451-aa56bb018d5de3a531ee91cc4857f0f479656e5370ebf87789e721aaaf530ebc-6.0.lap

    2014-10-28 10:29:41 415FC9732A3F4D89A0E01251CD66E136 646 ----a-w- C:\Users\Acer\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\18\3cb32f52-706e7524

    2014-10-22 12:02:05 34FA8033B50A3F99D3AB8209C72C0ABA 6860 ----a-w- C:\Users\Acer\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\43\1ca2666b-727c71a8

    ====== C:\Windows\SysWOW64 =====

    2014-11-12 10:52:47 9AB39ADD28C7C1A685B1EA8C6A25CF08 146432 ----a-w- C:\Windows\SysWOW64\msaudite.dll

    2014-11-12 10:52:47 980EEEE8815DA7593708774D1225BD35 681984 ----a-w- C:\Windows\SysWOW64\adtschema.dll

    2014-11-12 10:52:47 9216ABFD53F5EC1F35C3554AD1A175DE 22016 ----a-w- C:\Windows\SysWOW64\secur32.dll

    2014-11-12 10:52:47 13E5B1CD503A4B21E9F0A2D55A00198B 96768 ----a-w- C:\Windows\SysWOW64\sspicli.dll

    2014-11-12 10:52:38 FB56C76FEA44693752BD99D7D9930ABA 341168 ----a-w- C:\Windows\SysWOW64\iedkcs32.dll

    2014-11-12 10:52:38 B6273619A3DF28F03B64E911E45A6AB2 30720 ----a-w- C:\Windows\SysWOW64\iernonce.dll

    2014-11-12 10:52:38 A6E51BDCB8F4B84E874F918F0452763D 76288 ----a-w- C:\Windows\SysWOW64\mshtmled.dll

    2014-11-12 10:52:38 843BD9DAF03ABB6761DEE6D155301F28 60416 ----a-w- C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

    2014-11-12 10:52:38 5D5640C34C4A97467F77489DBB157568 47616 ----a-w- C:\Windows\SysWOW64\ieetwproxystub.dll

    2014-11-12 10:52:38 4772DB007FFBD4BBE3F526704BCA67FE 1310208 ----a-w- C:\Windows\SysWOW64\urlmon.dll

    2014-11-12 10:52:37 93074C4FA92A8399404D032F6AF72C1B 19781632 ----a-w- C:\Windows\SysWOW64\mshtml.dll

    2014-11-12 10:52:37 66F4FFDBCD501260ABC198317D2B0D10 285696 ----a-w- C:\Windows\SysWOW64\dxtrans.dll

    2014-11-12 10:52:37 26EE6C9780A8FC872C60F9E35D7EBD4B 688640 ----a-w- C:\Windows\SysWOW64\msfeeds.dll

    2014-11-12 10:52:36 5972510EF1C6097D9C14C17387A5EDB2 2724864 ----a-w- C:\Windows\SysWOW64\mshtml.tlb

    2014-11-12 10:52:35 FA310BD4A5DE904445DDDE54C5A654F2 2277376 ----a-w- C:\Windows\SysWOW64\iertutil.dll

    2014-11-12 10:52:35 7748B3DDDC92C7FC11F7462DB872E8E7 2051072 ----a-w- C:\Windows\SysWOW64\inetcpl.cpl

    2014-11-12 10:52:35 5E01004CBC35A78FE2AB4016CCAD4760 708096 ----a-w- C:\Windows\SysWOW64\ieapfltr.dll

    2014-11-12 10:52:35 19D68FDEE62519C5A0387EB4E88A01EF 62464 ----a-w- C:\Windows\SysWOW64\iesetup.dll

    2014-11-12 10:52:33 A1A2EE55A2C69F79AED00973E604B9C4 418304 ----a-w- C:\Windows\SysWOW64\dxtmsft.dll

    2014-11-12 10:52:33 8A46404AC1AEB22AA2D4C906D0FC86C2 620032 ----a-w- C:\Windows\SysWOW64\jscript9diag.dll

    2014-11-12 10:52:33 8585BC27224F97458C186AA085B754A7 478208 ----a-w- C:\Windows\SysWOW64\ieui.dll

    2014-11-12 10:52:33 6DDC0F44A70976C492CB1666BA9A7912 47104 ----a-w- C:\Windows\SysWOW64\jsproxy.dll

    2014-11-12 10:52:33 4F8CD74CD69A94ED1A5D7E837A356F4E 115712 ----a-w- C:\Windows\SysWOW64\ieUnatt.exe

    2014-11-12 10:52:33 36EE0A2A981617610F921BCBB997DB06 12819456 ----a-w- C:\Windows\SysWOW64\ieframe.dll

    2014-11-12 10:52:30 AE39939F1E25401B9A4952A7A8D372AC 4298240 ----a-w- C:\Windows\SysWOW64\jscript9.dll

    2014-11-12 10:52:30 9ED3132B7F0D36FA9911721E8B2CB968 501248 ----a-w- C:\Windows\SysWOW64\vbscript.dll

    2014-11-12 10:52:30 6DD7D61A8EF3DFEC4FAEFEB395E77424 1892864 ----a-w- C:\Windows\SysWOW64\wininet.dll

    2014-11-12 10:52:30 4169C6A6613856D69224498620F0C2B5 1155072 ----a-w- C:\Windows\SysWOW64\mshtmlmedia.dll

    2014-11-12 10:52:29 755D0A90CFC4BCB178D7070B0351F0AE 64000 ----a-w- C:\Windows\SysWOW64\MshtmlDac.dll

    2014-11-12 10:52:29 139E85C4E5DF322AE1BF6544D8C32B0A 168960 ----a-w- C:\Windows\SysWOW64\msrating.dll

    2014-11-12 10:52:09 537184E7306E06BB22C5B93D2AFA4DF8 1237504 ----a-w- C:\Windows\SysWOW64\msxml3.dll

    2014-11-12 10:52:09 09FA271EE1F9AD68B2D1C1C210F4B71F 2048 ----a-w- C:\Windows\SysWOW64\msxml3r.dll

    2014-11-12 10:52:07 5FDBDEECA34E73325D87C5ACD16A3EEC 701440 ----a-w- C:\Windows\SysWOW64\IMJP10K.DLL

    2014-11-12 10:52:05 8D338464B851DDD76E2B876A3E09EB70 442880 ----a-w- C:\Windows\SysWOW64\AUDIOKSE.dll

    2014-11-12 10:52:04 FD79B005E849DF3D7E9B5EB7A637C528 374784 ----a-w- C:\Windows\SysWOW64\AudioEng.dll

    2014-11-12 10:52:04 AA7325057A1E1CC401798C0B1238E182 195584 ----a-w- C:\Windows\SysWOW64\AudioSes.dll

    2014-11-12 10:51:58 B580A6B9932669DE703001AEE66D5BB1 259584 ----a-w- C:\Windows\SysWOW64\msv1_0.dll

    2014-11-12 10:51:58 9CEA80FFC617E6B6DD7B52E6225C0D38 65536 ----a-w- C:\Windows\SysWOW64\TSpkg.dll

    2014-11-12 10:51:58 8FE6AB488ECDC60930CE973A7051B0D4 221184 ----a-w- C:\Windows\SysWOW64\ncrypt.dll

    2014-11-12 10:51:58 8CFAEFCD7F1E004950FCAE870A501B3E 248832 ----a-w- C:\Windows\SysWOW64\schannel.dll

    2014-11-12 10:51:58 8205E55DFB11809E5F2AAD1C48840535 17408 ----a-w- C:\Windows\SysWOW64\credssp.dll

    2014-11-12 10:51:58 3B3B8BA16DC999EA17D075D2F1064DE4 550912 ----a-w- C:\Windows\SysWOW64\kerberos.dll

    2014-11-12 10:51:58 37BC079204BF9B087D6DE6B728908B4B 172032 ----a-w- C:\Windows\SysWOW64\wdigest.dll

    2014-11-12 10:51:49 0F39AC3274312EFFD03928291E8BA7CA 67584 ----a-w- C:\Windows\SysWOW64\packager.dll

    2014-11-12 10:51:44 CB55B9AAB060C803BE4AD229AA0FEC28 2363904 ----a-w- C:\Windows\SysWOW64\msi.dll

    2014-11-12 10:51:40 EDA54D2E17C0271D2CDA946ABE344110 571904 ----a-w- C:\Windows\SysWOW64\oleaut32.dll

    ====== C:\Windows\SysWOW64\drivers =====

    ====== C:\Windows\Sysnative =====

    2014-11-14 09:00:59 D41D8CD98F00B204E9800998ECF8427E 0 ----atw- C:\Windows\Sysnative\HP_192.168.1.7_MY5BPB3078045K

    2014-11-12 10:52:51 F992AAE3F2DF1D7D2A75B681B0C5280E 304640 ----a-w- C:\Windows\Sysnative\generaltel.dll

    2014-11-12 10:52:51 9F1FA4F36406693C77CC5779AA7E532D 228864 ----a-w- C:\Windows\Sysnative\aepdu.dll

    2014-11-12 10:52:50 6021CF6A11DE9B5FC1BD210B6855C497 424448 ----a-w- C:\Windows\Sysnative\aeinv.dll

    2014-11-12 10:52:47 C4C1B73FC2FF151BA08E1EAFDE2A2FAF 1460736 ----a-w- C:\Windows\Sysnative\lsasrv.dll

    2014-11-12 10:52:47 7184AEACDA13E64B10F84E9DD79C8A01 146432 ----a-w- C:\Windows\Sysnative\msaudite.dll

    2014-11-12 10:52:47 58F87BF5659C8EBC61EB439C916F2F9A 681984 ----a-w- C:\Windows\Sysnative\adtschema.dll

    2014-11-12 10:52:47 008CD4EBFABCF78D0F19B3778492648C 683520 ----a-w- C:\Windows\Sysnative\termsrv.dll

    2014-11-12 10:52:38 854B230F5D77486B67D809FFB8A10C7E 2724864 ----a-w- C:\Windows\Sysnative\mshtml.tlb

    2014-11-12 10:52:38 7293701905DF1F40760C851F20DDC9EC 114688 ----a-w- C:\Windows\Sysnative\ieetwcollector.exe

    2014-11-12 10:52:38 4E47ABA3C6C5032446A2AF7EFD026037 716800 ----a-w- C:\Windows\Sysnative\ie4uinit.exe

    2014-11-12 10:52:38 33098C85B789630865CD3F5D22FB0DFC 77824 ----a-w- C:\Windows\Sysnative\JavaScriptCollectionAgent.dll

    2014-11-12 10:52:38 26BC4EC95E363DD59171710E22108F15 34304 ----a-w- C:\Windows\Sysnative\iernonce.dll

    2014-11-12 10:52:38 1F3794CE1AEA5DA12ACF90210EAE4ECB 48640 ----a-w- C:\Windows\Sysnative\ieetwproxystub.dll

    2014-11-12 10:52:35 56651A76C63DAF2C593F1F767FC8A856 1550336 ----a-w- C:\Windows\Sysnative\urlmon.dll

    2014-11-12 10:52:35 1C216980E7D21100A357B52B3C45F78D 388272 ----a-w- C:\Windows\Sysnative\iedkcs32.dll

    2014-11-12 10:52:34 E17C34BECCD1388E9B386A9F82F01222 4096 ----a-w- C:\Windows\Sysnative\ieetwcollectorres.dll

    2014-11-12 10:52:33 C6A719FD0B07B2DD0ADACD07636F4BAD 968704 ----a-w- C:\Windows\Sysnative\MsSpellCheckingFacility.exe

    2014-11-12 10:52:33 2A1A7F17C906941334C6A67E935F214B 316928 ----a-w- C:\Windows\Sysnative\dxtrans.dll

    2014-11-12 10:52:33 1E30BECF0DB35481588FB72C9CF97CA2 800768 ----a-w- C:\Windows\Sysnative\msfeeds.dll

    2014-11-12 10:52:32 BD708EBEDB35E474F1A19747154ACC47 799232 ----a-w- C:\Windows\Sysnative\ieapfltr.dll

    2014-11-12 10:52:32 6507CA9349500A535AF70670F248E525 66560 ----a-w- C:\Windows\Sysnative\iesetup.dll

    2014-11-12 10:52:31 BA4EC6139B8830BBA9CC5D065CA5796C 2884096 ----a-w- C:\Windows\Sysnative\iertutil.dll

    2014-11-12 10:52:31 5C9D58591D0091630452B04F35527240 2124288 ----a-w- C:\Windows\Sysnative\inetcpl.cpl

    2014-11-12 10:52:30 31F2A5ECFD2C75F970A3007ACD5627C7 54784 ----a-w- C:\Windows\Sysnative\jsproxy.dll

    2014-11-12 10:52:30 08BCDD6C9E23D00309F359620461DFE8 144384 ----a-w- C:\Windows\Sysnative\ieUnatt.exe

    2014-11-12 10:52:29 69602F6259598A7837CB83D3608FE293 633856 ----a-w- C:\Windows\Sysnative\ieui.dll

    2014-11-12 10:52:29 277A4735954F1BF29EE3D138A5251BFE 490496 ----a-w- C:\Windows\Sysnative\dxtmsft.dll

    2014-11-12 10:52:29 154B8555A118BCFD95F358390E418B00 14390272 ----a-w- C:\Windows\Sysnative\ieframe.dll

    2014-11-12 10:52:28 98088A13F65BE35DA3693F264740CEEC 1359360 ----a-w- C:\Windows\Sysnative\mshtmlmedia.dll

    2014-11-12 10:52:28 7EE5FBD190BF5B27F7977EA6CBF0DCAC 92160 ----a-w- C:\Windows\Sysnative\mshtmled.dll

    2014-11-12 10:52:27 F208D7FB40FD80EA9F123BABF687359C 6040064 ----a-w- C:\Windows\Sysnative\jscript9.dll

    2014-11-12 10:52:27 B6DC4597FF946B0C8B29650A71F52D4E 580096 ----a-w- C:\Windows\Sysnative\vbscript.dll

    2014-11-12 10:52:27 7EC80DB959695D4F927D2D601DA59F35 814080 ----a-w- C:\Windows\Sysnative\jscript9diag.dll

    2014-11-12 10:52:27 6FC2819A4F80AAB2DADEDFC1EFEE3C3F 2365440 ----a-w- C:\Windows\Sysnative\wininet.dll

    2014-11-12 10:52:26 EE3592B010E3F69D141323E592C01A1A 199680 ----a-w- C:\Windows\Sysnative\msrating.dll

    2014-11-12 10:52:26 4B6D9AB2ECD11AF5F6B1C42D938E0A85 88064 ----a-w- C:\Windows\Sysnative\MshtmlDac.dll

    2014-11-12 10:52:25 BBD6A636AAA65D874F3863280CD8373D 25110016 ----a-w- C:\Windows\Sysnative\mshtml.dll

    2014-11-12 10:52:09 D005697F0467BBDDAB7638496DA5DB52 2048 ----a-w- C:\Windows\Sysnative\msxml3r.dll

    2014-11-12 10:52:09 364ECFF4ABD9D575F4F7CF7EB7928EF3 1882624 ----a-w- C:\Windows\Sysnative\msxml3.dll

    2014-11-12 10:52:07 1FEBD408F32DFC523882E7DA5AC57819 878080 ----a-w- C:\Windows\Sysnative\IMJP10K.DLL

    2014-11-12 10:52:05 DE3E38431B00C2EA247C53675DCF01A0 680960 ----a-w- C:\Windows\Sysnative\audiosrv.dll

    2014-11-12 10:52:05 9383B21A4B77C130940262DDC5F3F49B 500224 ----a-w- C:\Windows\Sysnative\AUDIOKSE.dll

    2014-11-12 10:52:04 FAFCB80D42A65964B6F4945283B8C10F 296448 ----a-w- C:\Windows\Sysnative\AudioSes.dll

    2014-11-12 10:52:04 B1BB7B91C3C878FDB2874138CE81C4EF 284672 ----a-w- C:\Windows\Sysnative\EncDump.dll

    2014-11-12 10:52:04 A2C9E45F4069A002E985D1563D16813B 440832 ----a-w- C:\Windows\Sysnative\AudioEng.dll

    2014-11-12 10:51:58 DF30FC54FFF79BC744B22A4850A3CF92 86528 ----a-w- C:\Windows\Sysnative\TSpkg.dll

    2014-11-12 10:51:58 A71B81AC2C14ABA013CCF1225D9E3E36 342016 ----a-w- C:\Windows\Sysnative\schannel.dll

    2014-11-12 10:51:58 55F0CF40479A1FC89CFA578909A540F2 210944 ----a-w- C:\Windows\Sysnative\wdigest.dll

    2014-11-12 10:51:58 47C48C705F4F1EFC99B50B43AE4301FE 314880 ----a-w- C:\Windows\Sysnative\msv1_0.dll

    2014-11-12 10:51:58 336BA030AB7B05300CB0B5C6AFB27176 22016 ----a-w- C:\Windows\Sysnative\credssp.dll

    2014-11-12 10:51:58 109CC0DF72CC07A6CB59D2995255A1DA 309760 ----a-w- C:\Windows\Sysnative\ncrypt.dll

    2014-11-12 10:51:58 028D99F83CBB31DB7995530B89EA13CF 728064 ----a-w- C:\Windows\Sysnative\kerberos.dll

    2014-11-12 10:51:49 934735F508E297504460935B71E99F0B 77824 ----a-w- C:\Windows\Sysnative\packager.dll

    2014-11-12 10:51:48 93C055B6AAD76360A60CB7E59A491531 3198976 ----a-w- C:\Windows\Sysnative\win32k.sys

    2014-11-12 10:51:44 2720C94ADCC1727A66365CCB1CE456C4 3241984 ----a-w- C:\Windows\Sysnative\msi.dll

    2014-11-12 10:51:40 B938AF16A521C913791C6F7AFF032757 861696 ----a-w- C:\Windows\Sysnative\oleaut32.dll

    ====== C:\Windows\Sysnative\drivers =====

    2014-11-12 10:52:47 41774FF331F609EF442B7398EE6202B1 155064 ----a-w- C:\Windows\Sysnative\drivers\ksecpkg.sys

    2014-10-29 20:35:16 4A989DB4EABAC4297A9DE0D70A9483CB 263960 ----a-w- C:\Windows\Sysnative\drivers\avgidsdrivera.sys

    ====== C:\Windows\Tasks ======

    ====== C:\Windows\Temp ======

    ======= C:\Program Files =====

    ======= C:\PROGRA~2 =====

    2014-11-05 17:03:13 -------- d-----w- C:\PROGRA~2\Inkscape

    2014-10-28 10:29:08 -------- d-----w- C:\PROGRA~2\COMMON~1\Java

    ======= C: =====

    ====== C:\Users\Acer\AppData\Roaming ======

    2014-11-12 12:06:20 -------- d-sh--w- C:\Users\Acer\AppData\Local\EmieBrowserModeList

    2014-11-12 12:06:12 -------- d-sh--w- C:\Users\Acer\AppData\Locallow\EmieBrowserModeList

    2014-11-05 17:07:33 -------- d-----w- C:\Users\Acer\AppData\Roaming\inkscape

    2014-10-21 09:21:08 -------- d-----w- C:\Users\Acer\AppData\Roaming\AVG2015

    2014-10-21 09:20:26 -------- d-----w- C:\Windows\sysWoW64\config\systemprofile\AppData\Roaming\AVG2015

    2014-10-21 09:20:04 -------- d-----w- C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Avg2015

    2014-10-21 09:17:41 -------- d-----w- C:\Windows\SysNative\config\systemprofile\AppData\Local\Avg2015

    2014-10-21 09:15:54 -------- d-----w- C:\Users\Acer\AppData\Local\Avg2015

    2014-10-20 11:19:22 -------- d-----w- C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp

    2014-10-20 11:19:22 -------- d-----w- C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp

    2014-10-20 11:19:22 -------- d-----w- C:\Users\TEMP\AppData\Local\Temp

    2014-10-20 11:19:22 -------- d-----w- C:\Users\TEMP.Acer-PC\AppData\Local\Temp

    2014-10-20 11:19:22 -------- d-----w- C:\Users\Default\AppData\Local\Temp

    2014-10-20 11:19:22 -------- d-----w- C:\Users\Default User\AppData\Local\Temp

    2014-10-20 11:19:22 -------- d-----w- C:\Users\Acer\AppData\Local\Temp

    ====== C:\Users\Acer ======

    2014-11-18 12:07:25 8045ABB21A3BDD66A48E1ED5C0F0EF6A 1222144 ----a-w- C:\Users\Acer\Downloads\RSITx64.exe

    2014-11-05 17:01:42 4A7D7A329B32E96A3DA4B83C41A16D7C 35746429 ----a-w- C:\Users\Acer\Desktop\Inkscape-0.48.2-1-win32.exe

    2014-10-28 10:28:52 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

    2014-10-22 12:01:05 -------- d-----w- C:\ProgramData\Oracle

    2014-10-21 09:17:51 -------- d-----w- C:\ProgramData\AVG2015

    ====== C: exe-files ==

    2014-11-18 12:07:25 8045ABB21A3BDD66A48E1ED5C0F0EF6A 1222144 ----a-w- C:\Users\Acer\Downloads\RSITx64.exe

    2014-11-17 14:02:55 5B4ED5734945619EE3BCDB9825D2F526 51080 ----atw- C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleUpdateOnDemand.exe

    2014-11-17 14:02:55 06036279056145E0F08FC095CB789E6A 51080 ----atw- C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleUpdateBroker.exe

    2014-11-17 14:02:54 87EB5AFD21E52CB08883E04605B55829 880784 ----a-w- C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleUpdateSetup.exe

    2014-11-17 14:02:48 F172AD4E906D97ED8F071896FC6789DC 107912 ----atw- C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleUpdate.exe

    2014-11-17 14:02:48 EDD3E562684CB4C50704B471BEAB1F86 114568 ----atw- C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleUpdateComRegisterShell64.exe

    2014-11-17 14:02:48 CB8C1CC4F46FBAC78150754D77460C73 230792 ----atw- C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe

    2014-11-17 14:02:48 7161E8E31B7FD3B1CE083C2CA5FD5F44 285064 ----atw- C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler64.exe

    2014-11-17 14:02:44 87EB5AFD21E52CB08883E04605B55829 880784 ----a-w- C:\Program Files (x86)\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.25.11\GoogleUpdateSetup.exe

    2014-11-16 13:15:11 5B4ED5734945619EE3BCDB9825D2F526 51080 ----atw- C:\Users\Acer\AppData\Local\Google\Update\1.3.25.11\GoogleUpdateOnDemand.exe

    2014-11-16 13:15:11 06036279056145E0F08FC095CB789E6A 51080 ----atw- C:\Users\Acer\AppData\Local\Google\Update\1.3.25.11\GoogleUpdateBroker.exe

    2014-11-16 13:15:10 87EB5AFD21E52CB08883E04605B55829 880784 ----a-w- C:\Users\Acer\AppData\Local\Google\Update\1.3.25.11\GoogleUpdateSetup.exe

    2014-11-16 13:15:04 F172AD4E906D97ED8F071896FC6789DC 107912 ----atw- C:\Users\Acer\AppData\Local\Google\Update\1.3.25.11\GoogleUpdate.exe

    2014-11-16 13:15:04 EDD3E562684CB4C50704B471BEAB1F86 114568 ----atw- C:\Users\Acer\AppData\Local\Google\Update\1.3.25.11\GoogleUpdateComRegisterShell64.exe

    2014-11-16 13:15:04 CB8C1CC4F46FBAC78150754D77460C73 230792 ----atw- C:\Users\Acer\AppData\Local\Google\Update\1.3.25.11\GoogleCrashHandler.exe

    2014-11-16 13:15:04 7161E8E31B7FD3B1CE083C2CA5FD5F44 285064 ----atw- C:\Users\Acer\AppData\Local\Google\Update\1.3.25.11\GoogleCrashHandler64.exe

    2014-11-16 13:15:00 87EB5AFD21E52CB08883E04605B55829 880784 ----a-w- C:\Users\Acer\AppData\Local\Google\Update\Download\{430FD4D0-B729-4F61-AA34-91526481799D}\1.3.25.11\GoogleUpdateSetup.exe

    2014-11-14 08:58:24 F5990EFEDD846FF03771E95E3F241483 6122736 ----a-w- C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe

    2014-11-14 08:58:24 91F861349A9B579667F6A050B56BA6A7 15888 ----a-w- C:\Program Files (x86)\AVG\AVG2015\avgrdtestx.exe

    2014-11-14 08:58:24 5C1EF7DFD56C52B8054977B6A381ABED 16912 ----a-w- C:\Program Files (x86)\AVG\AVG2015\avgrdtesta.exe

    2014-11-14 08:58:24 04202D3E38016AFB4367FFFCDD20C27F 62992 ----a-w- C:\Program Files (x86)\AVG\AVG2015\avguirux.exe

    2014-11-12 10:52:51 C265E023A65D7DA049E1B1D957F714EE 161960 ----a-w- C:\Windows\System32\CompatTel\QueryAppBlock.exe

    2014-11-12 10:52:51 037DF5FF4E17AD355309F0E4B15B48BE 46752 ----a-w- C:\Windows\System32\CompatTel\wicainventory.exe

    2014-11-12 10:52:38 B569522A58F9B53B20D16516D26E0DD8 221184 ----a-w- C:\Program Files (x86)\Internet Explorer\ielowutil.exe

    2014-11-12 10:52:38 7293701905DF1F40760C851F20DDC9EC 114688 ----a-w- C:\Windows\System32\ieetwcollector.exe

    2014-11-12 10:52:38 4E47ABA3C6C5032446A2AF7EFD026037 716800 ----a-w- C:\Windows\System32\ie4uinit.exe

    2014-11-12 10:52:35 B5724D61C7CB3FC9BACD9F8E58A77A03 468992 ----a-w- C:\Program Files (x86)\Internet Explorer\ieinstal.exe

    2014-11-12 10:52:35 2E1CAA313AAE151B8D6E81C0075DE88C 222720 ----a-w- C:\Program Files\Internet Explorer\ielowutil.exe

    2014-11-12 10:52:34 591C6FD1541BAFAEEE82B1F5831C8532 815280 ----a-w- C:\Program Files (x86)\Internet Explorer\iexplore.exe

    2014-11-12 10:52:33 C6A719FD0B07B2DD0ADACD07636F4BAD 968704 ----a-w- C:\Windows\System32\MsSpellCheckingFacility.exe

    2014-11-12 10:52:33 4F8CD74CD69A94ED1A5D7E837A356F4E 115712 ----a-w- C:\Windows\SysWOW64\ieUnatt.exe

    2014-11-12 10:52:32 0A2FA344ABBE0D160CE9773256A42B21 484352 ----a-w- C:\Program Files\Internet Explorer\ieinstal.exe

    2014-11-12 10:52:30 F00FC8AF1B04C4611F92BC3DA01A2F49 813744 ----a-w- C:\Program Files\Internet Explorer\iexplore.exe

    2014-11-12 10:52:30 08BCDD6C9E23D00309F359620461DFE8 144384 ----a-w- C:\Windows\System32\ieUnatt.exe

    2014-11-12 10:52:07 73E0DAD52482E65C478EA46081C8785A 141312 ----a-w- C:\Windows\System32\IME\IMEJP10\imjpuexc.exe

    2014-11-12 10:52:06 7EEB4D2A17421D337F970FB5C3B24410 106496 ----a-w- C:\Windows\SysWOW64\IME\IMEJP10\imjpuexc.exe

    === C: other files ==

    2014-11-12 10:52:47 41774FF331F609EF442B7398EE6202B1 155064 ----a-w- C:\Windows\System32\drivers\ksecpkg.sys

    2014-11-12 10:51:48 93C055B6AAD76360A60CB7E59A491531 3198976 ----a-w- C:\Windows\System32\win32k.sys

    ==== Startup Registry Enabled ======================

    [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]

    "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

    [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]

    "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

    [HKEY_USERS\S-1-5-21-2668737801-3381503766-2512015713-1000\Software\Microsoft\Windows\CurrentVersion\Run]

    "GoogleChromeAutoLaunch_7360584B616087257445E78FC1FAACF2"="C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --no-startup-window"

    "iCloudServices"="C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe"

    "KiesPreload"="C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload"

    "NokiaSuite.exe"="C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray"

    "Google Update"="C:\Users\Acer\AppData\Local\Google\Update\GoogleUpdate.exe /c"

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]

    [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce]

    "mctadmin"="C:\Windows\System32\mctadmin.exe"

    [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce]

    "mctadmin"="C:\Windows\System32\mctadmin.exe"

    [HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\RunOnce]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "BackupManagerTray"="C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe -h -k"

    "Norton Online Backup"="C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe"

    "SuiteTray"="C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"

    "EgisUpdate"="C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe -d"

    "EgisTecPMMUpdate"="C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"

    "StartCCC"="C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe MSRun"

    "LManager"="C:\Program Files (x86)\Launch Manager\LManager.exe"

    "ArcadeDeluxeAgent"="C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe"

    "Reader Library Launcher"="C:\Program Files (x86)\Sony\Reader\Data\bin\launcher\Reader Library Launcher.exe"

    "APSDaemon"="C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

    "hpqSRMon"="C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe"

    "AVG_UI"="C:\Program Files (x86)\AVG\AVG2015\avgui.exe /TRAYONLY"

    "KiesTrayAgent"="C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe"

    "Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

    "HP Software Update"="C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe"

    "SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

    "GoogleChromeAutoLaunch_7360584B616087257445E78FC1FAACF2"="C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --no-startup-window"

    "iCloudServices"="C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe"

    "KiesPreload"="C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload"

    "NokiaSuite.exe"="C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray"

    "Google Update"="C:\Users\Acer\AppData\Local\Google\Update\GoogleUpdate.exe /c"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]

    "AppInit_DLLs"="C:\\Users\\Acer\\AppData\\Local\\DProtect\\eBP.dll,C:\\Users\\Acer\\AppData\\Local\\DProtect\\eBPSD.dll"

    ==== Startup Registry Enabled x64 ======================

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "mwlDaemon"="C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe"

    "RtHDVCpl"="C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s"

    "PLFSetI"="C:\Windows\PLFSetI.exe"

    "Acer ePower Management"="C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe"

    "AmIcoSinglun64"="C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe"

    "BCSSync"="C:\Program Files\Microsoft Office\Office14\BCSSync.exe /DelayServices"

    "SynTPEnh"="%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe "

    ==== Startup Registry Disabled ======================

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run-]

    "Google Update"="\"C:\\Users\\Acer\\AppData\\Local\\Google\\Update\\GoogleUpdate.exe\" /c"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run-]

    "PlayMovie"="\"C:\\Program Files (x86)\\Acer Arcade Deluxe\\PlayMovie\\PMVService.exe\""

    "HP Software Update"="C:\\Program Files (x86)\\HP\\HP Software Update\\HPWuSchd2.exe"

    "Adobe ARM"="\"C:\\Program Files (x86)\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe\""

    "QuickTime Task"="\"C:\\Program Files (x86)\\QuickTime\\QTTask.exe\" -atboottime"

    "SunJavaUpdateSched"="\"C:\\Program Files (x86)\\Common Files\\Java\\Java Update\\jusched.exe\""

    "iTunesHelper"="\"C:\\Program Files (x86)\\iTunes\\iTunesHelper.exe\""

    ==== Startup Folders ======================

    2013-09-14 12:22:26 2103 ----a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk

    ==== Task Scheduler Jobs ======================

    C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [12-11-2014 12:29]

    C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ [undetermined Task]

    C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [22-10-2014 09:56]

    C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2668737801-3381503766-2512015713-1000Core.job --a------ C:\Users\Acer\AppData\Local\Google\Update\GoogleUpdate.exe [12-02-2013 10:21]

    C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2668737801-3381503766-2512015713-1000UA.job --a------ C:\Users\Acer\AppData\Local\Google\Update\GoogleUpdate.exe [12-02-2013 10:21]

    ==== Other Scheduled Tasks ======================

    "C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe]

    "C:\Windows\SysNative\tasks\Adobe-online actualiseringsprogramma" [C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe]

    "C:\Windows\SysNative\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"]

    "C:\Windows\SysNative\tasks\CreateChoiceProcessTask" [C:\Windows\System32\browserchoice.exe]

    "C:\Windows\SysNative\tasks\Google Updater and Installer" [C:\Users\Acer\AppData\Local\Google\Update\GoogleUpdate.exe]

    "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]

    "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe]

    "C:\Windows\SysNative\tasks\GoogleUpdateTaskUserS-1-5-21-2668737801-3381503766-2512015713-1000Core" [C:\Users\Acer\AppData\Local\Google\Update\GoogleUpdate.exe]

    "C:\Windows\SysNative\tasks\GoogleUpdateTaskUserS-1-5-21-2668737801-3381503766-2512015713-1000UA" [C:\Users\Acer\AppData\Local\Google\Update\GoogleUpdate.exe]

    "C:\Windows\SysNative\tasks\HP-Online updateprogramma" [C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe]

    "C:\Windows\SysNative\tasks\Java Update Scheduler" [C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe]

    "C:\Windows\SysNative\tasks\SidebarExecute" [C:\Program Files\Windows Sidebar\sidebar.exe]

    "C:\Windows\SysNative\tasks\{544C7FA0-F6C1-4F12-99DC-6C287F11A31D}" ["c:\users\acer\appdata\local\google\chrome\application\chrome.exe"]

    "C:\Windows\SysNative\tasks\{7A8A6320-4F30-456B-9C69-02D1912D95E6}" ["c:\users\acer\appdata\local\google\chrome\application\chrome.exe"]

    "C:\Windows\SysNative\tasks\Apple\AppleSoftwareUpdate" [C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe]

    "C:\Windows\SysNative\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc]

    ==== Firefox Extensions Registry ======================

    [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]

    "fmconverter@gmail.com"="C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox" [30-06-2014 13:19]

    [HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]

    "smartwebprinting@hp.com"="C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3" [14-09-2013 13:24]

    ==== Fake Chromium Profiles Check ======================

    Fake profile C:\Users\Acer\AppData\Local\Google\Chrome SxS deleted

    Fake profile C:\Users\Acer\AppData\Local\Comodo\Dragon deleted

    Fake profile C:\Users\Administrator\AppData\Local\Google\Chrome deleted

    Fake profile C:\Users\Administrator\AppData\Local\Google\Chrome SxS deleted

    Fake profile C:\Users\Administrator\AppData\Local\Comodo\Dragon deleted

    Fake profile C:\Users\Gast\AppData\Local\Google\Chrome deleted

    Fake profile C:\Users\Gast\AppData\Local\Google\Chrome SxS deleted

    Fake profile C:\Users\Gast\AppData\Local\Comodo\Dragon deleted

    ==== Chromium Look ======================

    YouTube - Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo

    AFAS Personal Bijwerk Assistent - Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdcefkchgdibcdegcafkekacfdapplbo

    Google Search - Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf

    AVG Web TuneUp - Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkmdocpbnblchppecickbipihlkehdfg

    Google Wallet - Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda

    Gmail - Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

    ==== Set IE to Default ======================

    Old Values:

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

    "Start Page"="Google"

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]

    No DefaultScope Set For HKCU

    New Values:

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

    "Start Page"="Google"

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]

    "DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"

    ==== All HKCU SearchScopes ======================

    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

    {012E1000-F331-11DB-8314-0800200C9A66} Google Url="{searchTerms - Google Search}"

    {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="{searchTerms} - Bing"

    {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="{searchTerms} - Google Search}"

    ==== Deleting Registry Keys ======================

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D2A425F405350054677A7A857BC02100 deleted successfully

    HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4F524A2D-5350-4500-76A7-A758B70C1200} deleted successfully

    HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\D2A425F405350054677A7A857BC02100 deleted successfully

    ==== HijackThis Entries ======================

    F2 - REG:system.ini: UserInit=userinit.exe,

    O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll

    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~4\Office14\GROOVEEX.DLL

    O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll

    O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll

    O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~4\Office14\URLREDIR.DLL

    O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll

    O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll

    O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

    O4 - HKLM\..\Run: [backupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k

    O4 - HKLM\..\Run: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe

    O4 - HKLM\..\Run: [suiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"

    O4 - HKLM\..\Run: [EgisUpdate] "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d

    O4 - HKLM\..\Run: [EgisTecPMMUpdate] "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"

    O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

    O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe

    O4 - HKLM\..\Run: [ArcadeDeluxeAgent] "C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe"

    O4 - HKLM\..\Run: [Reader Library Launcher] C:\Program Files (x86)\Sony\Reader\Data\bin\launcher\Reader Library Launcher.exe

    O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

    O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe

    O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2015\avgui.exe" /TRAYONLY

    O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe

    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe

    O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

    O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_7360584B616087257445E78FC1FAACF2] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window

    O4 - HKCU\..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe

    O4 - HKCU\..\Run: [KiesPreload] C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload

    O4 - HKCU\..\Run: [NokiaSuite.exe] C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray

    O4 - HKCU\..\Run: [Google Update] "C:\Users\Acer\AppData\Local\Google\Update\GoogleUpdate.exe" /c

    O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

    O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

    O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

    O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

    O4 - HKUS\S-1-5-18\..\RunOnce: [spUninstallDeleteDir] rmdir /s /q "\SearchProtect" (User 'SYSTEM')

    O4 - HKUS\.DEFAULT\..\RunOnce: [spUninstallDeleteDir] rmdir /s /q "\SearchProtect" (User 'Default user')

    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

    O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105

    O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200

    O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000

    O8 - Extra context menu item: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm

    O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm

    O9 - Extra button: PokerStars.eu - {07BA1DA9-F501-4796-8728-74D1B91A6CD5} - C:\Program Files (x86)\PokerStars.EU\PokerStarsUpdate.exe

    O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

    O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

    O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

    O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

    O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Users\Acer\Desktop\PartyPoker.lnk

    O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Users\Acer\Desktop\PartyPoker.lnk

    O9 - Extra button: Toon of verberg HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

    O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

    O16 - DPF: {82E5DF24-51E8-47CD-864A-F4BD5005AA73} (iCloud Web App Plugin) - https://www.icloud.com/system/iCloud.cab

    O16 - DPF: {9E858349-A287-4D37-8C27-034330E160F9} (MijnAlbum Album Upload Software Control Control) - http://www.mijnalbum.nl/v3/skinsrc/core/system/aus8.0.35/Uploader8.cab

    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL

    O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

    O20 - AppInit_DLLs: C:\Users\Acer\AppData\Local\DProtect\eBP.dll,C:\Users\Acer\AppData\Local\DProtect\eBPSD.dll

    O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

    O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

    O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agr64svc.exe

    O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

    O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)

    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

    O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe

    O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe

    O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

    O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

    O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe

    O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

    O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe

    O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

    O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)

    O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

    O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

    O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

    O23 - Service: MyWinLocker Service (MWLService) - Egis Technology Inc. - C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe

    O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe

    O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe

    O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe

    O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - NTI, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe

    O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe

    O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe

    O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe

    O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

    O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe

    O23 - Service: Sony SCSI Helper Service - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\Fsk\SonySCSIHelperService.exe

    O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

    O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe

    O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

    O23 - Service: Intel® Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

    O23 - Service: Updater Service - Acer Group - C:\Program Files\Acer\Acer Updater\UpdaterService.exe

    O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

    O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

    O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

    O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

    O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

    ==== Empty IE Cache ======================

    C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Users\Acer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Users\Acer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully

    C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Users\TEMP\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Users\TEMP.Acer-PC\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    ==== Empty FireFox Cache ======================

    No FireFox Profiles found

    ==== Empty Chrome Cache ======================

    C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

    ==== Empty All Flash Cache ======================

    Flash Cache Emptied Successfully

    ==== Empty All Java Cache ======================

    Java Cache cleared successfully

    ==== C:\zoek_backup content ======================

    C:\zoek_backup (files=102 folders=38 23194506 bytes)

    ==== Empty Temp Folders ======================

    C:\Users\Acer\AppData\Local\Temp will be emptied at reboot

    C:\Users\Default\AppData\Local\Temp emptied successfully

    C:\Users\Default User\AppData\Local\Temp emptied successfully

    C:\Users\TEMP\AppData\Local\Temp emptied successfully

    C:\Users\TEMP.Acer-PC\AppData\Local\Temp emptied successfully

    C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully

    C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully

    C:\Windows\Temp will be emptied at reboot

    ==== After Reboot ======================

    ==== Empty Temp Folders ======================

    C:\Windows\Temp successfully emptied

    C:\Users\Acer\AppData\Local\Temp successfully emptied

    ==== Empty Recycle Bin ======================

    C:\$RECYCLE.BIN successfully emptied

    ==== Deleting Files / Folders ======================

    "C:\PROGRA~2\AVG Web TuneUp" not found

    ==== EOF on wo 19-11-2014 at 12:33:43,90 ======================

  12. Beste,

    Hierbij het logfile.

    gr Ebonny

    Logfile of random's system information tool 1.10 (written by random/random)

    Run by Acer at 2014-11-18 13:08:07

    Microsoft Windows 7 Home Premium Service Pack 1

    System drive C: has 217 GB (73%) free of 297 GB

    Total RAM: 3957 MB (52% free)

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 13:08:12, on 18-11-2014

    Platform: Windows 7 SP1 (WinNT 6.00.3505)

    MSIE: Internet Explorer v11.0 (11.00.9600.17420)

    Boot mode: Normal

    Running processes:

    C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe

    C:\Windows\PLFSetI.exe

    C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe

    C:\Program Files (x86)\Samsung\Kies\Kies.exe

    C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe

    C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

    C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe

    C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe

    C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe

    C:\Program Files (x86)\Launch Manager\LManager.exe

    C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe

    C:\Program Files (x86)\Sony\Reader\Data\bin\launcher\Reader Library Launcher.exe

    C:\Program Files (x86)\AVG\AVG2015\avgui.exe

    C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe

    C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe

    C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

    C:\Windows\SysWOW64\ctfmon.exe

    C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe

    C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe

    C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe

    C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe

    C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

    C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

    C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE

    C:\Program Files\trend micro\Acer.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = msn

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Bing

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = msn

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = msn

    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

    F2 - REG:system.ini: UserInit=userinit.exe,

    O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll

    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~4\Office14\GROOVEEX.DLL

    O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll

    O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll

    O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~4\Office14\URLREDIR.DLL

    O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll

    O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll

    O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

    O3 - Toolbar: (no name) - {4F524A2D-5350-4500-76A7-7A786E7484D7} - (no file)

    O4 - HKLM\..\Run: [backupManagerTray] "C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k

    O4 - HKLM\..\Run: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe

    O4 - HKLM\..\Run: [suiteTray] "C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe"

    O4 - HKLM\..\Run: [EgisUpdate] "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe" -d

    O4 - HKLM\..\Run: [EgisTecPMMUpdate] "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"

    O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

    O4 - HKLM\..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe

    O4 - HKLM\..\Run: [ArcadeDeluxeAgent] "C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe"

    O4 - HKLM\..\Run: [Reader Library Launcher] C:\Program Files (x86)\Sony\Reader\Data\bin\launcher\Reader Library Launcher.exe

    O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

    O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe

    O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2015\avgui.exe" /TRAYONLY

    O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe

    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe

    O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

    O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_7360584B616087257445E78FC1FAACF2] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window

    O4 - HKCU\..\Run: [iCloudServices] C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe

    O4 - HKCU\..\Run: [KiesPreload] C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload

    O4 - HKCU\..\Run: [NokiaSuite.exe] C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray

    O4 - HKCU\..\Run: [Google Update] "C:\Users\Acer\AppData\Local\Google\Update\GoogleUpdate.exe" /c

    O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

    O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

    O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

    O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

    O4 - HKUS\S-1-5-18\..\RunOnce: [spUninstallDeleteDir] rmdir /s /q "\SearchProtect" (User 'SYSTEM')

    O4 - HKUS\.DEFAULT\..\RunOnce: [spUninstallDeleteDir] rmdir /s /q "\SearchProtect" (User 'Default user')

    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

    O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105

    O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200

    O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000

    O8 - Extra context menu item: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm

    O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm

    O9 - Extra button: PokerStars.eu - {07BA1DA9-F501-4796-8728-74D1B91A6CD5} - C:\Program Files (x86)\PokerStars.EU\PokerStarsUpdate.exe

    O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

    O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

    O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

    O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

    O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Users\Acer\Desktop\PartyPoker.lnk

    O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Users\Acer\Desktop\PartyPoker.lnk

    O9 - Extra button: Toon of verberg HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

    O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

    O16 - DPF: {82E5DF24-51E8-47CD-864A-F4BD5005AA73} (iCloud Web App Plugin) - https://www.icloud.com/system/iCloud.cab

    O16 - DPF: {9E858349-A287-4D37-8C27-034330E160F9} (MijnAlbum Album Upload Software Control Control) - http://www.mijnalbum.nl/v3/skinsrc/core/system/aus8.0.35/Uploader8.cab

    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL

    O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

    O20 - AppInit_DLLs: C:\Users\Acer\AppData\Local\DProtect\eBP.dll,C:\Users\Acer\AppData\Local\DProtect\eBPSD.dll

    O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

    O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

    O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agr64svc.exe

    O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)

    O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)

    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

    O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe

    O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe

    O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

    O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)

    O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe

    O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)

    O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe

    O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

    O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)

    O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

    O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

    O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)

    O23 - Service: MyWinLocker Service (MWLService) - Egis Technology Inc. - C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe

    O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe

    O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe

    O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe

    O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - NTI, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe

    O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe

    O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe

    O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe

    O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)

    O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe

    O23 - Service: Sony SCSI Helper Service - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\Fsk\SonySCSIHelperService.exe

    O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)

    O23 - Service: TeamViewer 9 (TeamViewer9) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe

    O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)

    O23 - Service: Intel® Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

    O23 - Service: Updater Service - Acer Group - C:\Program Files\Acer\Acer Updater\UpdaterService.exe

    O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)

    O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)

    O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)

    O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)

    O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)

    O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

    --

    End of file - 17458 bytes

    ======Listing Processes======

    \SystemRoot\System32\smss.exe

    c:\PROGRA~2\AVG\AVG2015\avgrsa.exe /boot

    C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe /pipeName=c2feea3f-0200-0000-a0d3-21765ef2c453 /binaryPath="C:\Program Files (x86)\AVG\AVG2015\"

    %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16

    %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16

    wininit.exe

    winlogon.exe

    C:\Windows\system32\services.exe

    C:\Windows\system32\lsass.exe

    C:\Windows\system32\lsm.exe

    C:\Windows\system32\svchost.exe -k DcomLaunch

    C:\Windows\system32\svchost.exe -k RPCSS

    C:\Windows\system32\atiesrxx.exe

    C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

    C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

    C:\Windows\system32\svchost.exe -k LocalService

    C:\Windows\system32\svchost.exe -k netsvcs

    atieclxx

    C:\Windows\system32\svchost.exe -k NetworkService

    C:\Windows\System32\spoolsv.exe

    C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

    "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"

    "C:\Program Files\LSI SoftModem\agr64svc.exe"

    "C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"

    "C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe"

    "C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe"

    "C:\Program Files\Bonjour\mDNSResponder.exe"

    "C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe"

    "C:\Program Files (x86)\AVG\AVG2015\avgemca.exe"

    "taskhost.exe"

    taskeng.exe {F10D5EF2-1F80-4265-85A3-BE0550AD5FF6}

    "C:\Windows\system32\Dwm.exe"

    C:\Windows\Explorer.EXE

    "C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler.exe"

    "C:\Program Files (x86)\Google\Update\1.3.25.11\GoogleCrashHandler64.exe"

    "C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe"

    "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s

    "C:\Windows\PLFSetI.exe"

    "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"

    "C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe"

    "C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe"

    "C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe"

    "C:\Program Files (x86)\Samsung\Kies\Kies.exe" /preload

    "C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe" -tray

    "C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe"

    "C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k

    "C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe"

    "C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe"

    "C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe"

    C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

    "C:\Program Files (x86)\Acer\Registration\GREGsvc.exe"

    C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt

    "C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe"

    C:\Windows\System32\svchost.exe -k HPZ12

    "C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe" SERVICE

    "C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe"

    "C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe"

    C:\Windows\System32\svchost.exe -k HPZ12

    "C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe"

    C:\Windows\system32\svchost.exe -k imgsvc

    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted

    "C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe"

    "C:\Program Files\Acer\Acer Updater\UpdaterService.exe"

    C:\Windows\system32\wbem\unsecapp.exe -Embedding

    C:\Windows\system32\svchost.exe -k HPService

    C:\Windows\system32\wbem\wmiprvse.exe

    "C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe"

    "C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe"

    C:\Windows\system32\SearchIndexer.exe /Embedding

    {D64DD25F-1842-49B7-ADEB-A51AC7DB58D4}

    "C:\Program Files\Synaptics\SynTP\SynTPHelper.exe"

    "C:\Program Files (x86)\Launch Manager\LManager.exe"

    "C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe"

    "C:\Program Files (x86)\Sony\Reader\Data\bin\launcher\Reader Library Launcher.exe"

    "C:\Program Files (x86)\AVG\AVG2015\avgui.exe" /TRAYONLY

    "C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe"

    "C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe"

    "C:\Program Files\Windows Media Player\wmpnetwk.exe"

    "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

    ctfmon.exe

    "C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe" -CtxID "#Hewlett-Packard#HP Photosmart 3200 series#1379161594" -Startup

    "C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe" -Embedding

    "C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe" -Embedding

    {CC8B71EB-E203-4BCC-8C84-52E1EB765233}

    "C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE"

    "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"

    "C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"

    "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0

    "C:\Program Files\Internet Explorer\iexplore.exe" Windows 7 Traagheid Laptop

    "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3628 CREDAT:267521 /prefetch:2

    C:\Windows\system32\sppsvc.exe

    "C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe"

    C:\Windows\system32\wbem\wmiprvse.exe

    "C:\Windows\system32\SearchFilterHost.exe" 0 516 520 528 65536 524

    taskhost.exe $(Arg0)

    "C:\Program Files\Internet Explorer\iexplore.exe" Windows 7 Traagheid Laptop

    "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2548 CREDAT:267521 /prefetch:2

    C:\Windows\system32\Macromed\Flash\FlashUtil64_15_0_0_223_ActiveX.exe -Embedding

    "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2548 CREDAT:2692378 /prefetch:2

    "C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"

    "C:\Users\Acer\Downloads\RSITx64.exe"

    C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

    ======Scheduled tasks folder======

    C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

    C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c

    C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

    C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2668737801-3381503766-2512015713-1000Core.job - C:\Users\Acer\AppData\Local\Google\Update\GoogleUpdate.exe /c

    C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2668737801-3381503766-2512015713-1000UA.job - C:\Users\Acer\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

    ======Registry dump======

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]

    Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 6671064]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]

    Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2011-12-28 346736]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]

    Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll [2011-12-28 318960]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]

    Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2013-03-06 690392]

    [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0347C33E-8762-4905-BF09-768834316C61}]

    HP Print Enhancer - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-20 328248]

    [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]

    Groove GFS Browser Helper - C:\PROGRA~2\MICROS~4\Office14\GROOVEEX.DLL [2013-12-19 4171480]

    [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]

    Java Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll [2014-10-28 460712]

    [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

    Windows Live Aanmelden - Help - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

    [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]

    Google Toolbar Helper - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2011-12-28 256112]

    [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]

    Google Toolbar Notifier BHO - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll [2011-12-28 761840]

    [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]

    Office Document Cache Handler - C:\PROGRA~2\MICROS~4\Office14\URLREDIR.DLL [2013-03-06 562904]

    [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]

    Google Dictionary Compression sdch - C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll [2011-12-28 458736]

    [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

    Java Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll [2014-10-28 172968]

    [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856}]

    HP Smart BHO Class - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-20 509496]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

    {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2011-12-28 346736]

    {4F524A2D-5350-4500-76A7-7A786E7484D7}

    [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]

    {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2011-12-28 256112]

    {4F524A2D-5350-4500-76A7-7A786E7484D7}

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

    "mwlDaemon"=C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe [2010-05-27 349552]

    "RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2009-10-29 8312352]

    "PLFSetI"=C:\Windows\PLFSetI.exe [2010-06-09 206208]

    "SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-09-18 1842472]

    "Acer ePower Management"=C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [2010-02-26 818720]

    "AmIcoSinglun64"=C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [2010-06-10 324608]

    "BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2012-11-05 108144]

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

    "GoogleChromeAutoLaunch_7360584B616087257445E78FC1FAACF2"=C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2014-10-22 854344]

    "iCloudServices"=C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [2013-11-20 59720]

    "KiesPreload"=C:\Program Files (x86)\Samsung\Kies\Kies.exe [2014-06-14 1563440]

    "NokiaSuite.exe"=C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [2013-10-02 1090912]

    "Google Update"=C:\Users\Acer\AppData\Local\Google\Update\GoogleUpdate.exe [2013-02-12 116648]

    [HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]

    "BackupManagerTray"=C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [2010-06-29 265984]

    "Norton Online Backup"=C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [2010-06-02 1155928]

    "SuiteTray"=C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [2010-05-27 337264]

    "EgisUpdate"=C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [2010-03-11 201584]

    "EgisTecPMMUpdate"=C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [2010-03-11 407920]

    "StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-12-09 98304]

    "LManager"=C:\Program Files (x86)\Launch Manager\LManager.exe [2009-11-02 1094736]

    "ArcadeDeluxeAgent"=C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [2009-10-29 419112]

    "Reader Library Launcher"=C:\Program Files (x86)\Sony\Reader\Data\bin\launcher\Reader Library Launcher.exe [2010-07-13 906648]

    "APSDaemon"=C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [2014-07-31 43816]

    "hpqSRMon"=C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [2008-07-22 150528]

    "AVG_UI"=C:\Program Files (x86)\AVG\AVG2015\avgui.exe [2014-11-09 3653136]

    "KiesTrayAgent"=C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [2014-06-14 310064]

    "Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-08-21 959176]

    "HP Software Update"=C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [2011-05-10 49208]

    "SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-10-07 507776]

    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup

    HP Digital Imaging Monitor.lnk - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]

    "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2013-12-19 6671064]

    [HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]

    "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~4\Office14\GROOVEEX.DLL [2013-12-19 4171480]

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]

    "SecurityProviders"=credssp.dll

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MCODS]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

    "ConsentPromptBehaviorAdmin"=5

    "ConsentPromptBehaviorUser"=3

    "EnableUIADesktopToggle"=0

    "dontdisplaylastusername"=0

    "legalnoticecaption"=

    "legalnoticetext"=

    "shutdownwithoutlogon"=1

    "undockwithoutlogon"=1

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

    "NoDriveTypeAutoRun"=145

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

    "NoActiveDesktop"=1

    "NoActiveDesktopChanges"=1

    "ForceActiveDesktopOn"=0

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]

    "vidc.mrle"=msrle32.dll

    "vidc.msvc"=msvidc32.dll

    "msacm.imaadpcm"=imaadp32.acm

    "msacm.msg711"=msg711.acm

    "msacm.msgsm610"=msgsm32.acm

    "msacm.msadpcm"=msadp32.acm

    "midimapper"=midimap.dll

    "wavemapper"=msacm32.drv

    "VIDC.UYVY"=msyuv.dll

    "VIDC.YUY2"=msyuv.dll

    "VIDC.YVYU"=msyuv.dll

    "VIDC.IYUV"=iyuv_32.dll

    "vidc.i420"=iyuv_32.dll

    "VIDC.YVU9"=tsbyuv.dll

    "msacm.l3acm"=C:\Windows\System32\l3codeca.acm

    "MSVideo8"=VfWWDM32.dll

    "wave"=wdmaud.drv

    "midi"=wdmaud.drv

    "mixer"=wdmaud.drv

    "aux"=wdmaud.drv

    "wave1"=wdmaud.drv

    "midi1"=wdmaud.drv

    "mixer1"=wdmaud.drv

    "aux1"=wdmaud.drv

    "wave2"=wdmaud.drv

    "midi2"=wdmaud.drv

    "mixer2"=wdmaud.drv

    "aux2"=wdmaud.drv

    ======File associations======

    .js - edit - C:\Windows\System32\Notepad.exe %1

    .js - open - C:\Windows\System32\WScript.exe "%1" %*

    ======List of files/folders created in the last 1 month======

    2014-11-18 13:08:07 ----D---- C:\rsit

    2014-11-12 11:52:51 ----A---- C:\Windows\system32\generaltel.dll

    2014-11-12 11:52:51 ----A---- C:\Windows\system32\aepdu.dll

    2014-11-12 11:52:50 ----A---- C:\Windows\system32\aeinv.dll

    2014-11-12 11:52:47 ----A---- C:\Windows\SYSWOW64\sspicli.dll

    2014-11-12 11:52:47 ----A---- C:\Windows\SYSWOW64\secur32.dll

    2014-11-12 11:52:47 ----A---- C:\Windows\SYSWOW64\msaudite.dll

    2014-11-12 11:52:47 ----A---- C:\Windows\SYSWOW64\adtschema.dll

    2014-11-12 11:52:47 ----A---- C:\Windows\system32\termsrv.dll

    2014-11-12 11:52:47 ----A---- C:\Windows\system32\msaudite.dll

    2014-11-12 11:52:47 ----A---- C:\Windows\system32\lsasrv.dll

    2014-11-12 11:52:47 ----A---- C:\Windows\system32\drivers\ksecpkg.sys

    2014-11-12 11:52:47 ----A---- C:\Windows\system32\adtschema.dll

    2014-11-12 11:52:38 ----A---- C:\Windows\SYSWOW64\urlmon.dll

    2014-11-12 11:52:38 ----A---- C:\Windows\SYSWOW64\mshtmled.dll

    2014-11-12 11:52:38 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll

    2014-11-12 11:52:38 ----A---- C:\Windows\SYSWOW64\iernonce.dll

    2014-11-12 11:52:38 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll

    2014-11-12 11:52:38 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll

    2014-11-12 11:52:38 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll

    2014-11-12 11:52:38 ----A---- C:\Windows\system32\iernonce.dll

    2014-11-12 11:52:38 ----A---- C:\Windows\system32\ieetwproxystub.dll

    2014-11-12 11:52:38 ----A---- C:\Windows\system32\ieetwcollector.exe

    2014-11-12 11:52:38 ----A---- C:\Windows\system32\ie4uinit.exe

    2014-11-12 11:52:37 ----A---- C:\Windows\SYSWOW64\mshtml.dll

    2014-11-12 11:52:37 ----A---- C:\Windows\SYSWOW64\msfeeds.dll

    2014-11-12 11:52:37 ----A---- C:\Windows\SYSWOW64\dxtrans.dll

    2014-11-12 11:52:35 ----A---- C:\Windows\SYSWOW64\iesetup.dll

    2014-11-12 11:52:35 ----A---- C:\Windows\SYSWOW64\iertutil.dll

    2014-11-12 11:52:35 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll

    2014-11-12 11:52:35 ----A---- C:\Windows\system32\urlmon.dll

    2014-11-12 11:52:35 ----A---- C:\Windows\system32\iedkcs32.dll

    2014-11-12 11:52:34 ----A---- C:\Windows\system32\ieetwcollectorres.dll

    2014-11-12 11:52:33 ----A---- C:\Windows\SYSWOW64\jsproxy.dll

    2014-11-12 11:52:33 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll

    2014-11-12 11:52:33 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe

    2014-11-12 11:52:33 ----A---- C:\Windows\SYSWOW64\ieui.dll

    2014-11-12 11:52:33 ----A---- C:\Windows\SYSWOW64\ieframe.dll

    2014-11-12 11:52:33 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll

    2014-11-12 11:52:33 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe

    2014-11-12 11:52:33 ----A---- C:\Windows\system32\msfeeds.dll

    2014-11-12 11:52:33 ----A---- C:\Windows\system32\dxtrans.dll

    2014-11-12 11:52:32 ----A---- C:\Windows\system32\iesetup.dll

    2014-11-12 11:52:32 ----A---- C:\Windows\system32\ieapfltr.dll

    2014-11-12 11:52:31 ----A---- C:\Windows\system32\iertutil.dll

    2014-11-12 11:52:30 ----A---- C:\Windows\SYSWOW64\wininet.dll

    2014-11-12 11:52:30 ----A---- C:\Windows\SYSWOW64\vbscript.dll

    2014-11-12 11:52:30 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll

    2014-11-12 11:52:30 ----A---- C:\Windows\SYSWOW64\jscript9.dll

    2014-11-12 11:52:30 ----A---- C:\Windows\system32\jsproxy.dll

    2014-11-12 11:52:30 ----A---- C:\Windows\system32\ieUnatt.exe

    2014-11-12 11:52:29 ----A---- C:\Windows\SYSWOW64\msrating.dll

    2014-11-12 11:52:29 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll

    2014-11-12 11:52:29 ----A---- C:\Windows\system32\ieui.dll

    2014-11-12 11:52:29 ----A---- C:\Windows\system32\ieframe.dll

    2014-11-12 11:52:29 ----A---- C:\Windows\system32\dxtmsft.dll

    2014-11-12 11:52:28 ----A---- C:\Windows\system32\mshtmlmedia.dll

    2014-11-12 11:52:28 ----A---- C:\Windows\system32\mshtmled.dll

    2014-11-12 11:52:27 ----A---- C:\Windows\system32\wininet.dll

    2014-11-12 11:52:27 ----A---- C:\Windows\system32\vbscript.dll

    2014-11-12 11:52:27 ----A---- C:\Windows\system32\jscript9diag.dll

    2014-11-12 11:52:27 ----A---- C:\Windows\system32\jscript9.dll

    2014-11-12 11:52:26 ----A---- C:\Windows\system32\msrating.dll

    2014-11-12 11:52:26 ----A---- C:\Windows\system32\MshtmlDac.dll

    2014-11-12 11:52:25 ----A---- C:\Windows\system32\mshtml.dll

    2014-11-12 11:52:09 ----A---- C:\Windows\SYSWOW64\msxml3r.dll

    2014-11-12 11:52:09 ----A---- C:\Windows\SYSWOW64\msxml3.dll

    2014-11-12 11:52:09 ----A---- C:\Windows\system32\msxml3r.dll

    2014-11-12 11:52:09 ----A---- C:\Windows\system32\msxml3.dll

    2014-11-12 11:52:07 ----A---- C:\Windows\SYSWOW64\IMJP10K.DLL

    2014-11-12 11:52:07 ----A---- C:\Windows\system32\IMJP10K.DLL

    2014-11-12 11:52:05 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll

    2014-11-12 11:52:05 ----A---- C:\Windows\system32\audiosrv.dll

    2014-11-12 11:52:05 ----A---- C:\Windows\system32\AUDIOKSE.dll

    2014-11-12 11:52:04 ----A---- C:\Windows\SYSWOW64\AudioSes.dll

    2014-11-12 11:52:04 ----A---- C:\Windows\SYSWOW64\AudioEng.dll

    2014-11-12 11:52:04 ----A---- C:\Windows\system32\EncDump.dll

    2014-11-12 11:52:04 ----A---- C:\Windows\system32\AudioSes.dll

    2014-11-12 11:52:04 ----A---- C:\Windows\system32\AudioEng.dll

    2014-11-12 11:51:58 ----A---- C:\Windows\SYSWOW64\wdigest.dll

    2014-11-12 11:51:58 ----A---- C:\Windows\SYSWOW64\TSpkg.dll

    2014-11-12 11:51:58 ----A---- C:\Windows\SYSWOW64\schannel.dll

    2014-11-12 11:51:58 ----A---- C:\Windows\SYSWOW64\ncrypt.dll

    2014-11-12 11:51:58 ----A---- C:\Windows\SYSWOW64\msv1_0.dll

    2014-11-12 11:51:58 ----A---- C:\Windows\SYSWOW64\kerberos.dll

    2014-11-12 11:51:58 ----A---- C:\Windows\SYSWOW64\credssp.dll

    2014-11-12 11:51:58 ----A---- C:\Windows\system32\wdigest.dll

    2014-11-12 11:51:58 ----A---- C:\Windows\system32\TSpkg.dll

    2014-11-12 11:51:58 ----A---- C:\Windows\system32\schannel.dll

    2014-11-12 11:51:58 ----A---- C:\Windows\system32\ncrypt.dll

    2014-11-12 11:51:58 ----A---- C:\Windows\system32\msv1_0.dll

    2014-11-12 11:51:58 ----A---- C:\Windows\system32\kerberos.dll

    2014-11-12 11:51:58 ----A---- C:\Windows\system32\credssp.dll

    2014-11-12 11:51:49 ----A---- C:\Windows\SYSWOW64\packager.dll

    2014-11-12 11:51:49 ----A---- C:\Windows\system32\packager.dll

    2014-11-12 11:51:48 ----A---- C:\Windows\system32\win32k.sys

    2014-11-12 11:51:44 ----A---- C:\Windows\SYSWOW64\msi.dll

    2014-11-12 11:51:44 ----A---- C:\Windows\system32\msi.dll

    2014-11-12 11:51:40 ----A---- C:\Windows\SYSWOW64\oleaut32.dll

    2014-11-12 11:51:40 ----A---- C:\Windows\system32\oleaut32.dll

    2014-11-05 18:07:33 ----D---- C:\Users\Acer\AppData\Roaming\inkscape

    2014-11-05 18:03:13 ----D---- C:\Program Files (x86)\Inkscape

    2014-10-31 11:13:10 ----A---- C:\malware 31-10.txt

    2014-10-29 21:35:16 ----A---- C:\Windows\system32\drivers\avgidsdrivera.sys

    2014-10-28 13:04:01 ----D---- C:\AdwCleaner

    2014-10-28 11:29:02 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll

    2014-10-22 13:01:05 ----D---- C:\ProgramData\Oracle

    2014-10-21 10:21:08 ----D---- C:\Users\Acer\AppData\Roaming\AVG2015

    2014-10-21 10:17:51 ----D---- C:\ProgramData\AVG2015

    2014-10-20 12:24:48 ----SHD---- C:\$RECYCLE.BIN

    2014-10-20 12:19:22 ----D---- C:\Windows\Temp

    ======List of files/folders modified in the last 1 month======

    2014-11-18 13:08:12 ----D---- C:\Windows\Prefetch

    2014-11-18 13:08:11 ----D---- C:\Program Files\trend micro

    2014-11-18 13:03:23 ----A---- C:\Windows\SYSWOW64\log.txt

    2014-11-18 11:45:53 ----D---- C:\ProgramData\MFAData

    2014-11-18 11:44:24 ----D---- C:\Windows\system32\config

    2014-11-17 15:07:03 ----SHD---- C:\Windows\Installer

    2014-11-17 15:07:03 ----HD---- C:\Config.Msi

    2014-11-17 15:03:01 ----RD---- C:\Program Files (x86)

    2014-11-17 15:02:57 ----D---- C:\Windows\Tasks

    2014-11-16 12:58:35 ----A---- C:\Windows\NeroDigital.ini

    2014-11-16 12:42:45 ----D---- C:\Windows\System32

    2014-11-16 12:42:45 ----D---- C:\Windows\inf

    2014-11-16 12:42:45 ----A---- C:\Windows\system32\PerfStringBackup.INI

    2014-11-15 14:34:50 ----D---- C:\Users\Acer\AppData\Roaming\vlc

    2014-11-14 11:52:12 ----SHD---- C:\System Volume Information

    2014-11-14 10:01:44 ----D---- C:\Windows\system32\drivers

    2014-11-13 14:07:01 ----HD---- C:\$AVG

    2014-11-12 13:43:19 ----D---- C:\Windows\rescache

    2014-11-12 12:57:18 ----D---- C:\Windows\Microsoft.NET

    2014-11-12 12:56:44 ----RSD---- C:\Windows\assembly

    2014-11-12 12:29:20 ----D---- C:\Windows\SysWOW64

    2014-11-12 12:29:08 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe

    2014-11-12 12:26:37 ----D---- C:\Windows\winsxs

    2014-11-12 12:22:51 ----SD---- C:\Windows\system32\CompatTel

    2014-11-12 12:22:50 ----D---- C:\Windows\SYSWOW64\nl-NL

    2014-11-12 12:22:50 ----D---- C:\Windows\SYSWOW64\en-US

    2014-11-12 12:22:50 ----D---- C:\Windows\system32\nl-NL

    2014-11-12 12:22:50 ----D---- C:\Program Files\Internet Explorer

    2014-11-12 12:22:49 ----D---- C:\Windows\system32\en-US

    2014-11-12 12:22:49 ----D---- C:\Program Files (x86)\Internet Explorer

    2014-11-12 12:14:58 ----D---- C:\ProgramData\Microsoft Help

    2014-11-12 12:13:20 ----RSD---- C:\Windows\Fonts

    2014-11-12 12:12:13 ----D---- C:\Windows\system32\MRT

    2014-11-12 12:02:55 ----D---- C:\Windows\debug

    2014-11-12 12:02:53 ----A---- C:\Windows\system32\MRT.exe

    2014-11-12 11:51:32 ----D---- C:\Windows\system32\catroot2

    2014-11-12 11:51:32 ----D---- C:\Windows\system32\catroot

    2014-11-12 11:38:32 ----AD---- C:\Windows

    2014-11-07 09:58:04 ----HD---- C:\ProgramData

    2014-11-07 09:58:03 ----D---- C:\Windows\system32\Tasks

    2014-11-05 15:48:50 ----D---- C:\Users\Acer\AppData\Roaming\Belastingdienst

    2014-11-04 14:30:58 ----N---- C:\Windows\system32\MpSigStub.exe

    2014-10-31 10:39:37 ----D---- C:\Program Files (x86)\Malwarebytes Anti-Malware

    2014-10-28 11:29:08 ----D---- C:\Program Files (x86)\Common Files

    2014-10-22 20:18:08 ----D---- C:\Windows\system32\NDF

    2014-10-22 13:00:59 ----D---- C:\Program Files (x86)\Java

    2014-10-21 10:24:18 ----D---- C:\ProgramData\AVG2014

    2014-10-21 10:21:38 ----D---- C:\Program Files (x86)\AVG

    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R0 AVGIDSHA;AVGIDSHA; C:\Windows\system32\DRIVERS\avgidsha.sys [2014-06-18 190744]

    R0 Avgloga;AVG Logging Driver; C:\Windows\system32\DRIVERS\avgloga.sys [2014-07-18 313624]

    R0 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx64.sys [2014-10-05 124184]

    R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx64.sys [2014-06-18 31512]

    R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2010-03-03 540696]

    R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]

    R1 Avgdiska;AVG Disk Driver; C:\Windows\system32\DRIVERS\avgdiska.sys [2014-06-18 153368]

    R1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdrivera.sys [2014-10-29 263960]

    R1 Avgldx64;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx64.sys [2014-08-28 243480]

    R1 Avgtdia;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdia.sys [2014-10-10 274200]

    R1 avgtp;avgtp; \??\C:\Windows\system32\drivers\avgtpx64.sys [2014-09-12 50976]

    R1 mwlPSDFilter;mwlPSDFilter; C:\Windows\system32\DRIVERS\mwlPSDFilter.sys [2009-06-03 22576]

    R1 mwlPSDNServ;mwlPSDNServ; C:\Windows\system32\DRIVERS\mwlPSDNServ.sys [2009-06-03 20016]

    R1 mwlPSDVDisk;mwlPSDVDisk; C:\Windows\system32\DRIVERS\mwlPSDVDisk.sys [2009-06-03 60464]

    R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]

    R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\agrsm64.sys [2009-08-13 1209856]

    R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2010-05-12 2229608]

    R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-12-10 6179328]

    R3 DKbFltr;Dritek Keyboard Filter Driver (64-bit); C:\Windows\SysWOW64\Drivers\DKbFltr.sys [2009-03-26 25608]

    R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]

    R3 HECIx64;Intel® Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]

    R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2009-10-28 2018080]

    R3 k57nd60a;Broadcom NetLink Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\k57nd60a.sys [2010-06-08 406056]

    R3 NTIDrvr;NTIDrvr; \??\C:\Windows\system32\drivers\NTIDrvr.sys [2010-04-28 18432]

    R3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2009-06-25 205472]

    R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2009-09-18 292912]

    R3 UBHelper;UBHelper; \??\C:\Windows\system32\drivers\UBHelper.sys [2010-04-28 17408]

    R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]

    S3 AmUStor;AM USB Stroage Driver; C:\Windows\system32\drivers\AmUStor.SYS [2010-06-10 40448]

    S3 ASPI;Advanced SCSI Programming Interface Driver; \??\C:\Windows\System32\DRIVERS\ASPI32.sys []

    S3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl664.sys [2009-06-10 1311232]

    S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2014-04-11 110336]

    S3 E1G60;Intel® PRO/1000 NDIS 6 Adapter Driver; C:\Windows\system32\DRIVERS\E1G6032E.sys [2009-06-10 145792]

    S3 ggflt;SOMC USB Flash Driver Filter; C:\Windows\system32\DRIVERS\ggflt.sys [2014-08-02 16088]

    S3 ggsomc;SOMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsomc.sys [2014-08-02 30424]

    S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2009-06-10 6108416]

    S3 L1E;NDIS Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller(NDIS6.20); C:\Windows\system32\DRIVERS\L1E62x64.sys [2009-06-20 54272]

    S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2013-01-23 19968]

    S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2013-01-23 27136]

    S3 nmwcdnsucx64;Nokia USB Flashing Generic; C:\Windows\system32\drivers\nmwcdnsucx64.sys [2013-01-23 12800]

    S3 nmwcdnsux64;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsux64.sys [2013-01-23 171008]

    S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-10-17 26112]

    S3 PCDSRVC{D1725DDC-01E99333-06020101}_0;PCDSRVC{D1725DDC-01E99333-06020101}_0 - PCDR Kernel Mode Service Helper Driver; \??\c:\users\acer\appdata\local\temp\ejcvpotesvv7\pcdrdiag\bin\pcdsrvc_x64.pkms []

    S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]

    S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2014-04-11 206080]

    S3 StillCam;Stuurprogramma voor seriële digitale fotocamera; C:\Windows\system32\DRIVERS\serscan.sys [2009-07-14 12288]

    S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-20 59392]

    S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2013-01-23 9216]

    S3 USB28xxBGA;USB 2861 Device; C:\Windows\system32\DRIVERS\emBDA64.sys [2011-03-06 683136]

    S3 USB28xxOEM;USB 28xx OEM Filter; C:\Windows\system32\DRIVERS\emOEM64.sys [2011-03-06 1189504]

    S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2012-12-13 54784]

    S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]

    S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2013-01-23 9216]

    S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-09-12 64704]

    R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agr64svc.exe [2009-03-28 16896]

    R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-12-10 202752]

    R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-06-12 43336]

    R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [2014-11-09 3488784]

    R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [2014-11-09 298080]

    R2 Bonjour Service;Bonjour-service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]

    R2 ePowerSvc;Acer ePower Service; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [2010-02-26 841248]

    R2 GREGService;GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [2010-01-08 23584]

    R2 hpqddsvc;HP CUE DeviceDiscovery-service; C:\Windows\system32\svchost.exe [2009-07-14 27136]

    R2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2009-07-14 27136]

    R2 LMS;Intel® Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe [2010-03-03 268824]

    R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]

    R2 NOBU;Norton Online Backup; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2010-06-02 2804568]

    R2 NTI IScheduleSvc;NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [2010-06-29 255744]

    R2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2010-04-17 144640]

    R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]

    R2 RichVideo;Cyberlink RichVideo Service(CRVS); C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [2009-04-17 247152]

    R2 TeamViewer9;TeamViewer 9; C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [2014-04-02 4972864]

    R2 UNS;Intel® Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2010-03-03 2320920]

    R2 Updater Service;Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [2010-01-29 243232]

    R3 hpqcxs08;hpqcxs08; C:\Windows\system32\svchost.exe [2009-07-14 27136]

    R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]

    R3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]

    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]

    S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]

    S2 e81a9dc1;GS-Supporter; C:\Windows\syswow64\rundll32.exe [2009-07-14 44544]

    S2 gupdate;Google Update-service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-22 107912]

    S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]

    S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-12 267440]

    S3 gupdatem;Google Update-service (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-22 107912]

    S3 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-12-28 182768]

    S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-11-06 114688]

    S3 iPod Service;iPod-service; C:\Program Files\iPod\bin\iPodService.exe [2014-08-01 641352]

    S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2013-12-19 50942144]

    S3 MWLService;MyWinLocker Service; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [2010-05-27 305520]

    S3 NTIBackupSvc;NTI Backup Now 5 Backup Service; C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2010-04-17 50432]

    S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]

    S3 Sony PC Companion;Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2013-02-04 155824]

    S3 Sony SCSI Helper Service;Sony SCSI Helper Service; C:\Program Files (x86)\Common Files\Sony Shared\Fsk\SonySCSIHelperService.exe [2010-04-02 73728]

    S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-12-17 1255736]

    S4 aspnet_state;ASP.NET-statusservice; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]

    S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

    S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

    S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

    -----------------EOF-----------------

  13. Hierbij het logfile

    gr Ebonny

    # AdwCleaner v4.001 - Rapport aangemaakt 21/10/2014 op 11:07:54

    # DB v2014-10-20.3

    # Laatste Update 20/10/2014 door Xplode

    # Besturingssysteem : Windows 7 Home Premium Service Pack 1 (64 bits)

    # Gebruikersnaam : Acer - ACER-PC

    # Gestart vanuit : C:\Users\Acer\Downloads\adwcleaner_4.001 (2).exe

    # Optie : Verwijderen

    ***** [ Services ] *****

    ***** [ Bestanden / Mappen ] *****

    ***** [ Taken ] *****

    ***** [ Snelkoppelingen ] *****

    ***** [ Register ] *****

    Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{06E58E5E-F8CB-4049-991E-A41C03BD419E}

    Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{100EB1FD-D03E-47FD-81F3-EE91287F9465}

    Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{258C9770-1713-4021-8D7E-1F184A2BD754}

    Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}

    Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{31CF9EBE-5755-4A1D-AC25-2834D952D9B4}

    Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}

    Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{43D9E6F0-1776-4897-AE14-ECEDECBAFEC0}

    Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{5A074B29-F830-49DE-A31B-5BB9D7F6B407}

    Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{5AA2BA46-9913-4DC7-9620-69AB0FA17AE7}

    Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}

    Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{77FEF28E-EB96-44FF-B511-3185DEA48697}

    Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{855F3B16-6D32-4FE6-8A56-BBB695989046}

    Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}

    Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}

    Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{B580CF65-E151-49C3-B73F-70B13FCA8E86}

    Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{BDEA95CF-F0E6-41E0-BD3D-B00F39A4E939}

    Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{C451C08A-EC37-45DF-AAAD-18B51AB5E837}

    Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}

    Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{DCC70A83-E184-40A3-906B-779AF5E941C4}

    Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{EF99BD32-C1FB-11D2-892F-0090271D4F88}

    Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{06E58E5E-F8CB-4049-991E-A41C03BD419E}

    Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{100EB1FD-D03E-47FD-81F3-EE91287F9465}

    Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{258C9770-1713-4021-8D7E-1F184A2BD754}

    Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{2EECD738-5844-4A99-B4B6-146BF802613B}

    Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{31CF9EBE-5755-4A1D-AC25-2834D952D9B4}

    Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}

    Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{43D9E6F0-1776-4897-AE14-ECEDECBAFEC0}

    Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{5A074B29-F830-49DE-A31B-5BB9D7F6B407}

    Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{5AA2BA46-9913-4DC7-9620-69AB0FA17AE7}

    Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{74F475FA-6C75-43BD-AAB9-ECDA6184F600}

    Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{77FEF28E-EB96-44FF-B511-3185DEA48697}

    Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{855F3B16-6D32-4FE6-8A56-BBB695989046}

    Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}

    Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{98889811-442D-49DD-99D7-DC866BE87DBC}

    Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{B580CF65-E151-49C3-B73F-70B13FCA8E86}

    Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{BDEA95CF-F0E6-41E0-BD3D-B00F39A4E939}

    Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{C451C08A-EC37-45DF-AAAD-18B51AB5E837}

    Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}

    Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{DCC70A83-E184-40A3-906B-779AF5E941C4}

    Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Extension Compatibility\{EF99BD32-C1FB-11D2-892F-0090271D4F88}

    Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094

    Sleutel Verwijderd : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536

    ***** [ Browsers ] *****

    -\\ Internet Explorer v11.0.9600.17344

    -\\ Google Chrome v38.0.2125.104

    *************************

    AdwCleaner[R0].txt - [989 octets] - [09/06/2014 21:55:41]

    AdwCleaner[R1].txt - [1112 octets] - [11/06/2014 14:25:27]

    AdwCleaner[R2].txt - [1231 octets] - [16/06/2014 15:44:51]

    AdwCleaner[R3].txt - [5195 octets] - [07/10/2014 16:44:58]

    AdwCleaner[R4].txt - [1495 octets] - [09/10/2014 13:41:20]

    AdwCleaner[R5].txt - [6967 octets] - [21/10/2014 11:04:59]

    AdwCleaner[s0].txt - [864 octets] - [09/06/2014 21:56:27]

    AdwCleaner[s1].txt - [987 octets] - [11/06/2014 14:26:40]

    AdwCleaner[s2].txt - [1107 octets] - [16/06/2014 15:45:52]

    AdwCleaner[s3].txt - [5058 octets] - [07/10/2014 16:48:55]

    AdwCleaner[s4].txt - [1371 octets] - [09/10/2014 13:43:00]

    AdwCleaner[s5].txt - [6692 octets] - [21/10/2014 11:07:54]

    ########## EOF - C:\AdwCleaner\AdwCleaner[s5].txt - [6752 octets] ##########

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.