Asus

Net eventjes gecheckt: die werd verwijderd door de ESET online scanner ... nu, Chrome wordt door de eigenares niet gebruikt en zit bij mij in de categorie "beter kwijt dan rijk", dus deze wordt naar alle waarschijnlijkheid nog gedeïnstalleerd na haar goedkeuring. Nog eventjes meegeven dat het langdurige zwarte scherm waarop ie bleef hangen na het aanmelden werd veroorzaakt door Verizon, de software voor de fingerprint reader ... deze wordt niet gebruiktbij het aanmelden en na het verwijderen van deze software start hij keurig door. Bedankt voor de keurige en snelle assistentie ! Case closed.

Meer RAM-geheugen: als je over 2GB RAM beschikt en je plaatst daar 512MB bij dan heb je, op voorwaarde dat het moederbord niet moeilijk doet over twee verschillende merken, 2.5GB RAM i.p.v. 2GB.

Dan wensen we jou nog veel experimenteerplezier ... Als je binnen dit topic verder geen vragen of problemen meer hebt, mag je dit onderwerp afsluiten door een klik op de knop "Markeer als opgelost", die je links onderaan kan terugvinden … zo blijft het voor iedereen overzichtelijk.

Je kan het zelf perfect uittesten via What Is My IP Adress, zelfs wanneer je op de HomeSpot gaat. ;-)

Jij werkt met een Fujitsu Siemens SCALEO P, in deze desktops gebruikte Fujitsu Siemens een Asus P5GD1 moederbord ... vandaar de verwarring voor jou denk ik. Wanneer je RAM-geheugen van verschillende snelheden samen gaat gebruiken, dan werk je inderdaad aan de snelheid van het "traagste geheugen".

Ondertussen nog een online scan bij ESET gedaan, TDSSKiller en HitmanPro gerund, MBAM loopt niet meer vast. Alle gebruikte tools zijn verwijderd, een nieuw herstelpunt gemaakt, de oude zijn verwijderd. Ccleaner heeft zijn werk ook gedaan: samen met het verwijderen van de installatiebestanden van de ServicePacks toch nog een kleine 5GB schijfruimte kunnen winnen. De grafische problemen waarvoor hij hier terecht kwam zijn opgelost, temperaturen zitten zo'n 15° lager, loopt lekker en stabiel ... enkel nog een nieuwe adapter bestellen en de patiënt kan er weer voor een jaartje tegen ... xD Nog suggesties, vragen of zijn we er door ? ...

Dan zal een bezoek aan een PC-hersteller duidelijkheid moeten brengen ... maak vooraf eerst goede afspraken over de kostprijs van de diagnose. Bestanden recupereren kan nog: je haalt de harde schijf uit de laptop en verbindt deze d.m.v. een adapter met een andere PC ... zo kan je de harde schijf benaderen.

Kan je het onderstaande uitvoeren en het gevraagde logje hier in je topic posten ? ... Download RSIT van de onderstaande locaties en sla deze op het bureaublad op. Hoe je controleert of je met een 32- of 64-bitversie van Windows werkt kan je hier bekijken. RSIT 32 bit (RSIT.exe) RSIT 64 bit (RSITx64.exe) Dubbelklik op RSIT.exe om de tool te starten. Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren. Vervolgens wordt de "Disclaimer of warranty" getoond, klik vervolgens op "Continue" Wanneer de tool gereed is worden er twee kladblok bestanden geopend genaamd "Log.txt" en "Info.txt" . RSIT Logbestanden plaatsen Voeg het logbestand met de naam "Log.txt" als bijlage toe aan het volgende bericht. (Dit logbestand kunt u tevens terug vinden in de map ""C:\\rsit") Het logbestand met de naam "Info.txt" wat geminimaliseerd is hoeft u niet te plaatsen. (Dit logbestand wordt enkel de eerst keer bij het uitvoeren aangemaakt). Hoe u een bijlage kunt toevoegen aan het bericht leest u hier. De handleiding voor het gebruik van RSIT kan je HIER bekijken en we hebben ook nog een instructievideo.

Prima, dan sluiten we dit topic hier af.

Via deze link kan je alle drivers ophalen ... kies de juiste Windowsversie (32-bit of 64-bit). De volgorde van installeren is ook belangrijk, zie deze link ... lijstje is van Dell, maar werkwijze is identiek: je begint met de chipset, dan de grafische kaart (VGA), enz ... Voor sommige componenten ga je moeten via hardware identificatie moeten uitzoeken over welk merk het gaat: Druk op de Windows + R toets en typ in het uitvoervenster devmgmt.msc en druk op Enter. Rechtsklik in apparaatbeheer op het onbekende apparaat en kies Eigenschappen. Ga naar het tabblad Details. Onder Eigenschap: kies je Hardware-id's. Onder Waarde: vermeld de gegevens in de eerste regel en post deze hier wanneer je er niet uit geraakt.

Het testen van die stick(s) op een andere PC (zie tip falstring) zou ik zeker doen. Klopt, maar je wil een stabiel en perfect besturingssysteem vervangen door Windows 8, waarvan je niet met 100% zekerheid weet dat deze gaat werken op jouw moederbord. Vanwaar is die Windows 8 afkomstig ?

Momenteel loopt de defragmentatietool, die heeft nu zo'n 65% van de werkzaamheden uitgevoerd ... hij is stabieler, dat wel, maar na het inloggen op één van de twee accounts duurt het toch dikke twee minuten alvorens hij op zijn bureaublad komt, dit met (voorlopig) uitgeschakelde Norton. Alle drivers, players, readers, Java, FF, enz ... zijn ondertussen up-to-date. Nieuw FRST-logje: Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version:25-07-2014 Ran by Nick at 2014-07-26 11:06:38 Run:1 Running from C:\Users\Nick\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** CHR DefaultSearchKeyword: ask.com C:\ProgramData\McAfee ***************** CHR DefaultSearchKeyword: ask.com ==> The Chrome "Settings" can be used to fix the entry. C:\ProgramData\McAfee => Moved successfully. ==== End of Fixlog ====

Goedemorgen Mako, de tweede admin-account, die wordt niet gebruikt. Deze nacht heeft de scan van de systeembestanden gelopen en werd een schijfcontrole uitgevoerd, straks volgt nog een defragmentatie. In bijlage: de logjes. [ATTACH]34038[/ATTACH] [ATTACH]34039[/ATTACH] [ATTACH]34040[/ATTACH]

Belangrijk gegeven voor je begint met installeren: Asus Support stelt voor het P7H55 moederbord (er zijn 15 varianten in deze modelreeks) drivers beschikbaar voor Windows XP, Windows Vista en Windows 7 ... maar niet voor Windows 8 dus. Het zou kunnen dat de Windows 7 drivers het doen onder Windows 8, maar 100% zekerheid over de compatibiliteit van dit moederbord met Windows 8 heb je dus niet. Het wijzigen van de opstartvolgorde, dat wordt hier duidelijk uitgelegd.

Een aantal mogelijkheden: op de onderzijde van de laptop / het toetsenbord, op het aankoopfactuur, op de originele verpakking, in de handleiding.

Dan vrees ik eveneens dat je harde schijf overleden is ... wou je nog data recupereren of beschik je over de nodige back-ups ?

Laatste logje van MBAM hieronder, andere logs heeft ie niet: liep telkens vast bij het exporteren ... er werden alle runs samen zo'n 250 PUP's verwijderd. Malwarebytes Anti-Malware Malwarebytes | Free Anti-Malware & Internet Security Software Scandatum: 25/07/2014 Scantijd: 22:25:40 Logbestand: mbam.txt Beheerder: Ja Versie: 2.00.2.1012 Malwaredatabase: v2014.07.25.07 Rootkitdatabase: v2014.07.17.01 Licentie: Gratis Malwarebescherming: Uitgeschakeld Kwaadaardige Website Bescherming: Uitgeschakeld Self-protection: Uitgeschakeld Besturingssysteem: Windows Vista Service Pack 2 Processor: x86 Bestandssysteem: NTFS Gebruiker: Nick Scantype: Bedreigingsscan Resultaat: Voltooid Objecten Gescand: 318920 Verstreken Tijd: 16 m, 16 s Geheugen: Ingeschakeld Opstarten: Ingeschakeld Bestandssysteem: Ingeschakeld Archieven: Ingeschakeld Rootkits: Uitgeschakeld Heuristics: Ingeschakeld POP: Waarschuwen POA: Ingeschakeld Processen: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registersleutels: 0 (No malicious items detected) Registerwaardes: 0 (No malicious items detected) Registerdata: 0 (No malicious items detected) Mappen: 0 (No malicious items detected) Bestanden: 0 (No malicious items detected) Fysieke Sectoren: 0 (No malicious items detected) (end) _________________________________________________________________________________________________________ Zoek.exe v5.0.0.0 Updated 24-07-2014 Tool run by Nick on vr 25/07/2014 at 22:46:19,09. Microsoft® Windows Vista™ Home Premium 6.0.6002 Service Pack 2 x86 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Nick\Desktop\zoek.exe [scan all users] [script inserted] ==== Older Logs ====================== C:\zoek-results2014-07-25-170959.log 20413 bytes ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-1667088166-3542532225-2137799823-1001\Software\Microsoft\Internet Explorer\SearchScopes\{288B14EF-2C35-4A47-B0EB-E1CDFA8C9A25} deleted successfully HKEY_USERS\S-1-5-21-1667088166-3542532225-2137799823-1001\Software\Microsoft\Internet Explorer\SearchScopes\{4B2CE579-0209-4A65-8470-44EFDAA34575} deleted successfully HKEY_USERS\S-1-5-21-1667088166-3542532225-2137799823-1001\Software\Microsoft\Internet Explorer\SearchScopes\{7AE107FA-4712-4808-AB77-730CD173CCEF} deleted successfully HKEY_USERS\S-1-5-21-1667088166-3542532225-2137799823-1001\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD22} deleted successfully ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== ==== FireFox Fix ====================== ProfilePath: C:\Users\Nick\AppData\Roaming\Mozilla\Profiles\v519690 user.js not found ---- FireFox user.js and prefs.js backups ---- prefs_20142507_2305_.backup ProfilePath: C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\xaspnpxb.default user.js not found ---- Lines ask.com removed from prefs.js ---- user_pref("browser.search.defaultengine", "Ask.com"); user_pref("browser.search.order.1", "Ask.com"); ---- FireFox user.js and prefs.js backups ---- prefs_20142507_2305_.backup ProfilePath: C:\Users\Nick\AppData\Roaming\Thunderbird\Profiles\v519690 user.js not found ---- FireFox user.js and prefs.js backups ---- prefs_20142507_2305_.backup ProfilePath: C:\Users\Nick\AppData\Roaming\TomTom\HOME\Profiles\qkfyjdso.default user.js not found ---- FireFox user.js and prefs.js backups ---- prefs_20142507_2305_.backup ==== Deleting Files \ Folders ====================== C:\Users\Nick\AppData\Local\AskPartnerNetwork not found C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\xaspnpxb.default\extensions\toolbar@ask.com.xpi not found C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\xaspnpxb.default\extensions\{2b0cf91e-63d5-4474-9229-134d0b96fb28}(22) deleted C:\Program Files\Conduit deleted C:\Users\Nick\AppData\Roaming\Uniblue deleted C:\PROGRA~2\Ask deleted C:\PROGRA~2\AlawarWrapper deleted C:\PROGRA~2\APN deleted C:\PROGRA~2\boost_interprocess deleted C:\Users\Nick\AppData\Local\CRE deleted C:\Users\Nick\AppData\Local\cache deleted C:\Users\Nick\AppData\Local\Conduit deleted C:\Users\Nick\Searches deleted C:\Users\Nick\AppData\LocalLow\wincorebsband deleted C:\Users\Nick\AppData\LocalLow\Conduit deleted C:\Windows\WinInit.ini deleted C:\Windows\System32\REN26A2.tmp deleted C:\Windows\System32\REN26A3.tmp deleted C:\Windows\System32\RENECDF.tmp deleted C:\Windows\System32\RENECE0.tmp deleted C:\Users\Public\Documents\AlawarWrapper deleted C:\Users\Nick\EarthatNight Screensaver nlBE.exe deleted C:\Users\Nick\fundels-2.1.3 (1).exe deleted C:\Users\Nick\JavaSetup7u11 (1).exe deleted C:\Users\Nick\NRnR.exe deleted C:\Users\Nick\TomTomHOME2winlatest.exe deleted "C:\Windows\Installer\48840.msi" deleted ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions] "{BBDA0591-3099-440a-AA10-41764D9DB4DB}"="C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF" [18/06/2014 20:01] ==== Firefox Extensions ====================== ProfilePath: C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\xaspnpxb.default - Firefox 3 theme for Firefox 4 - %ProfilePath%\extensions\ffe_ff3ff4@game-point.net.xpi ProfilePath: C:\Users\Nick\AppData\Roaming\TomTom\HOME\Profiles\qkfyjdso.default - Map status indicator - C:\Program Files\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com - TomTom HOME default theme - C:\Program Files\TomTom HOME 2\xul\extensions\baseTheme@tomtom.com AppDir: C:\Program Files\Mozilla Firefox - Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ==== Firefox Plugins ====================== Profilepath: C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\xaspnpxb.default 486DCD78DFB28733BFDD4D4EFEA2FD50 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll - Java Platform SE 7 U65 EE23F610D9353B9217FFEC4B73A27EF5 - C:\Program Files\Java\jre7\bin\dtplugin\npdeployJava1.dll - Java Deployment Toolkit 7.0.650.20 4390CCD3790F8D9C427C0C29590C62D7 - C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll - Shockwave Flash FB5621842FDABF9F8359775573498FBC - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll - Google Update 5B92CB0A3EEE50F6B9AE036B4F9B0F0C - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll - Google Earth Plugin 358878E398AB0FB8B1EE176C2E3EDF48 - C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll - Google Updater D38AFAE9A9F77F9BE6473E9CC83D5647 - C:\Program Files\QuickTime\Plugins\npqtplugin7.dll - QuickTime Plug-in 7.6.9 8B98B1A31858618AD9544477E2F7814D - C:\Program Files\QuickTime\Plugins\npqtplugin6.dll - QuickTime Plug-in 7.6.9 D8F8E45ACC404661CF0787F2A0888180 - C:\Program Files\QuickTime\Plugins\npqtplugin5.dll - QuickTime Plug-in 7.6.9 7B55FEF2BA47A2420BB49CD93320077A - C:\Program Files\QuickTime\Plugins\npqtplugin4.dll - QuickTime Plug-in 7.6.9 D9F5A433758BC151850E53690D57663A - C:\Program Files\QuickTime\Plugins\npqtplugin3.dll - QuickTime Plug-in 7.6.9 2FE95733EB36CD762EAE54BBE9D8B11C - C:\Program Files\QuickTime\Plugins\npqtplugin2.dll - QuickTime Plug-in 7.6.9 8FD41344CB62DDB06E2A339F2C5F1947 - C:\Program Files\QuickTime\Plugins\npqtplugin.dll - QuickTime Plug-in 7.6.9 8130FF8214221BA5AC764909587E161A - C:\Program Files\Adobe\Reader 8.0\Reader\browser\nppdf32.dll - Adobe Acrobat AB87EEFFD18F2BAAFC274E7075EA6C67 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll - Windows Presentation Foundation / Windows Presentation Foundation ==== Chrome Look ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions cdjfkejjfbnnahgfabnehkfkhpfghoak - C:\Users\Nick\AppData\Local\CRE\cdjfkejjfbnnahgfabnehkfkhpfghoak.crx[] mkfokfffehpeedafpekjeddnmnjhmcmk - C:\Program Files\Norton Internet Security\Engine\21.4.0.13\Exts\Chrome.crx[26/06/2014 12:22] HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions cdjfkejjfbnnahgfabnehkfkhpfghoak - C:\Users\Nick\AppData\Local\CRE\cdjfkejjfbnnahgfabnehkfkhpfghoak.crx[] Ask Toolbar - Nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo Spelletjes - Nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdjfkejjfbnnahgfabnehkfkhpfghoak Norton Identity Protection - Nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk Google Wallet - Nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda ==== Chrome Fix ====================== C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo deleted successfully C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_aaaaojmikegpiepcfdkkjaplodkpfmlo_0.localstorage deleted successfully C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aaaaojmikegpiepcfdkkjaplodkpfmlo deleted successfully C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdjfkejjfbnnahgfabnehkfkhpfghoak deleted successfully C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cdjfkejjfbnnahgfabnehkfkhpfghoak_0.localstorage deleted successfully ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://be.msn.com/default.aspx?lang=nl-be&ocid=oa-EarthatNight" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://breedband.telenet.be" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://be.msn.com/default.aspx?lang=nl-be&ocid=oa-EarthatNight" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes "DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" {012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}" {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.be/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7GPEA_nl" ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F60730A4A66673047777F5728467D401 deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\cdjfkejjfbnnahgfabnehkfkhpfghoak deleted successfully HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions\cdjfkejjfbnnahgfabnehkfkhpfghoak deleted successfully HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Updater deleted successfully HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{4A03706F-666A-4037-7777-5F2748764D10} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\F60730A4A66673047777F5728467D401 deleted successfully ==== Empty IE Cache ====================== C:\Users\Nick\AppData\Local\temp\acro_rd_dir\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Tiny\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Nick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot ==== Empty FireFox Cache ====================== C:\Users\Nick\AppData\Local\Mozilla\Firefox\Profiles\xaspnpxb.default\Cache emptied successfully C:\Users\Tiny\AppData\Local\Mozilla\Firefox\Profiles\d430zuvm.default\Cache emptied successfully ==== Empty Chrome Cache ====================== C:\Users\Nick\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=2208 folders=408 126272781 bytes) ==== Empty Temp Folders ====================== C:\Users\Default\AppData\Local\temp emptied successfully C:\Users\Default User\AppData\Local\temp emptied successfully C:\Users\Nick\AppData\Local\temp will be emptied at reboot C:\Users\Public\AppData\Local\temp emptied successfully C:\Users\Tiny\AppData\Local\temp emptied successfully C:\Windows\system32\config\systemprofile\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\Windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\Nick\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Users\Nick\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found "C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found "C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found ==== EOF on vr 25/07/2014 at 23:16:40,48 ======================

McAfee is verwijderd, zoek.exe is vlot verlopen (logje hieronder) maar MBAM is vastgelopen ... loopt dus voor de tweede keer momenteel. Zoek.exe v5.0.0.0 Updated 24-07-2014 Tool run by Nick on vr 25/07/2014 at 18:59:59,72. Microsoft® Windows Vista™ Home Premium 6.0.6002 Service Pack 2 x86 Running in: Normal Mode Internet Access Detected Launched: C:\Users\Nick\Desktop\zoek.exe [scan all users] [script inserted] ==== System Restore Info ====================== 25/07/2014 19:01:24 Zoek.exe System Restore Point Created Succesfully. ==== Empty Folders Check ====================== C:\Program Files\BearShare Applications deleted successfully C:\Program Files\GUM6141.tmp deleted successfully C:\Program Files\MSXML 4.0 deleted successfully C:\Program Files\TomTom DesktopSuite deleted successfully C:\Program Files\Common Files\SWF Studio deleted successfully C:\PROGRA~2\Oracle deleted successfully C:\PROGRA~2\PCSettings deleted successfully C:\Users\Nick\AppData\Roaming\Malwarebytes deleted successfully C:\Users\Nick\AppData\Local\PackageAware deleted successfully ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-1667088166-3542532225-2137799823-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2b0cf91e-63d5-4474-9229-134d0b96fb28} deleted successfully HKEY_USERS\S-1-5-21-1667088166-3542532225-2137799823-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2b0cf91e-63d5-4474-9229-134d0b96fb28} deleted successfully HKEY_USERS\S-1-5-21-1667088166-3542532225-2137799823-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully HKEY_USERS\S-1-5-21-1667088166-3542532225-2137799823-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully HKEY_CLASSES_ROOT\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC} deleted successfully HKEY_CLASSES_ROOT\CLSID\{2b0cf91e-63d5-4474-9229-134d0b96fb28} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2b0cf91e-63d5-4474-9229-134d0b96fb28} deleted successfully HKEY_CLASSES_ROOT\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully ==== Deleting CLSID Registry Values ====================== HKEY_USERS\S-1-5-21-1667088166-3542532225-2137799823-1001\Software\Microsoft\Internet Explorer\URLSearchHooks\{00000000-6E41-4FD3-8538-502F5495E5FC} deleted successfully HKEY_USERS\S-1-5-21-1667088166-3542532225-2137799823-1001\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser\{2b0cf91e-63d5-4474-9229-134d0b96fb28} deleted successfully HKEY_USERS\S-1-5-21-1667088166-3542532225-2137799823-1001\Software\Microsoft\Internet Explorer\URLSearchHooks\{2b0cf91e-63d5-4474-9229-134d0b96fb28} deleted successfully HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\urlsearchhooks\{2b0cf91e-63d5-4474-9229-134d0b96fb28} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{2b0cf91e-63d5-4474-9229-134d0b96fb28} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\urlsearchhooks\{87775fdb-6972-41f9-ae51-8326e38cb206} deleted successfully ==== Deleting Services ====================== HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\APNMCP deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\APNMCP deleted successfully ==== Registry Fix Code ====================== Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "ApnTBMon"=- ==== Deleting Files \ Folders ====================== C:\Program Files\Ask.com not found C:\Program Files\Spelletjes deleted C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\xaspnpxb.default\searchplugins\ask-search.xml deleted C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\xaspnpxb.default\searchplugins\askcom.xml deleted C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\xaspnpxb.default\searchplugins\safesearch.xml deleted C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\xaspnpxb.default\searchplugins\Search_Results.xml deleted "C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" deleted "C:\Program Files\AskPartnerNetwork" deleted "C:\Program Files\AskPartnerNetwork\Toolbar" deleted "C:\Program Files\AskPartnerNetwork\Toolbar\Updater" deleted ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== ====== C:\Users\Nick\AppData\Local\Temp ==== 2014-07-25 16:56:00 D7AD0AD3162BCD50E1D2E462E8C748EA 264488 ----a-w- C:\Users\Nick\AppData\Local\temp\MSS\3.8.150.1\McInstallerRes.dll 2014-07-25 16:56:00 9BD51360CB8F1A2206642599D40FD258 419048 ----a-w- C:\Users\Nick\AppData\Local\temp\MSS\3.8.150.1\mcbrwsr2.dll 2014-07-25 16:56:00 7A5A07D9A323DFD9097C9CF39E6802E6 153760 ----a-w- C:\Users\Nick\AppData\Local\temp\MSS\3.8.150.1\McInstallerRes_LD.dll 2014-07-25 16:56:00 74557BFD04530E512DBB9C151C4DA110 499384 ----a-w- C:\Users\Nick\AppData\Local\temp\MSS\3.8.150.1\McUICnt.exe 2014-07-25 16:56:00 26FD227409FB73C4D958602B8A3EFFA0 577632 ----a-w- C:\Users\Nick\AppData\Local\temp\MSS\3.8.150.1\McInstallerStartup.dll ====== Java Cache ===== ====== C:\Windows\system32 ===== ====== C:\Windows\system32\drivers ===== 2014-07-25 16:47:43 799613BA73D25641402AA81B6403EFF8 51928 ----a-w- C:\Windows\System32\drivers\mwac.sys 2014-07-25 16:47:43 1AA835E8A0B8EDF3D676B4ED4BF5EF07 74456 ----a-w- C:\Windows\System32\drivers\mbamchameleon.sys 2014-07-10 19:26:01 F5272A105F59A7B3B345D9D6D87DA7AD 273408 ----a-w- C:\Windows\System32\drivers\afd.sys ====== C:\Windows\Tasks ====== ====== C:\Windows\Temp ====== ======= C:\Program Files ===== 2014-07-25 16:41:58 -------- d-----w- C:\Program Files\Speccy 2014-07-25 16:15:47 -------- d-----w- C:\Program Files\trend micro ======= C: ===== ====== C:\Users\Nick\AppData\Roaming ====== 2014-07-25 16:42:23 -------- d-----w- C:\Windows\serviceprofiles\Localservice\AppData\Roaming\PeerNetworking 2014-07-05 19:43:38 -------- d-----w- C:\Users\Nick\AppData\Local\Adobe 2014-06-26 03:56:57 -------- d-----w- C:\Users\Nick\AppData\Local\AskPartnerNetwork ====== C:\Users\Nick ====== 2014-07-25 16:42:06 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy 2014-07-08 04:23:25 536C47F39D34FCD635FBACE0F563CBB8 3194495 ----a-w- C:\Users\Nick\Stromae - Formidable [Lyrics HQ] - from YouTube.mp3 2014-07-08 04:22:22 5FE26F26F49ACD199BB990EEC4E687EC 3214975 ----a-w- C:\Users\Nick\Stromae - ta fête - from YouTube.mp3 2014-07-08 04:20:36 DD3140CB7E5B72438E70AF57160D3662 4648157 ----a-w- C:\Users\Nick\Pharrell Williams - Marilyn Monroe - from YouTube.mp3 2014-07-08 04:19:00 12FC5831EFD4F935818FE676041C106D 3952255 ----a-w- C:\Users\Nick\Pharrell Williams - Happy (Official Music Video) - from YouTube.mp3 2014-07-08 04:16:31 C36AC6934BD9CF9635FA94C9DCA1D1E6 3953508 ----a-w- C:\Users\Nick\Michael Jackson, Justin Timberlake - Love Never Felt So Good - from YouTube.mp3 2014-07-08 04:11:56 087CA3C0972B5884544E06A605A70FD1 58357584 ----a-w- C:\Users\Nick\Deadmau5 Live @ Main Stage, Ultra Music Festival 2014, Miami, US 03 29 2014 Presented by UMF - from YouTube.mp3 2014-07-06 04:19:49 89CC3D5D5645DBB505DCBAB2D036495A 86847771 ----a-w- C:\Users\Nick\Carl Cox - Ultra Music Festival 2014 (Friday) - 28.03.2014 - from YouTube (1).mp3 2014-07-06 04:04:35 89CC3D5D5645DBB505DCBAB2D036495A 86847771 ----a-w- C:\Users\Nick\Carl Cox - Ultra Music Festival 2014 (Friday) - 28.03.2014 - from YouTube.mp3 2014-07-06 04:02:13 B0EF9DA44729D8876E6B94788B053776 3454883 ----a-w- C:\Users\Nick\OZARK HENRY - I_'M YOUR SACRIFICE - from YouTube.mp3 2014-07-06 04:00:07 969B6FB3ED52677C5F40ABCC5FA5115F 3012682 ----a-w- C:\Users\Nick\The Common Linnets - Calm After The Storm (The Netherlands) 2014 Eurovision Song Contest - from YouTube.mp3 2014-07-06 03:58:23 95A83BBBCD4EA474E2380A9E3850CBFF 3388010 ----a-w- C:\Users\Nick\The Black Keys - Little Black Submaries - from YouTube.mp3 ====== C: exe-files == 2014-07-25 16:56:00 74557BFD04530E512DBB9C151C4DA110 499384 ----a-w- C:\Users\Nick\AppData\Local\temp\MSS\3.8.150.1\McUICnt.exe 2014-07-25 16:42:42 8ADE4FA030ABC0A8223C22BCA411CEB9 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-1667088166-3542532225-2137799823-1001\$IUC39OG.exe 2014-07-25 16:42:31 11BA55B98DE4932234A7BF03737606D9 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-1667088166-3542532225-2137799823-1001\$I0S8PUT.exe 2014-07-25 16:42:24 E10F607105994A0941FA13A95BD47F43 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-1667088166-3542532225-2137799823-1001\$I8JDZCO.exe 2014-07-25 16:39:54 6DC6EBDF9391271098C40F6BA7779430 4890736 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-1667088166-3542532225-2137799823-1001\$R8JDZCO.exe 2014-07-25 16:15:48 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\Nick.exe 2014-07-25 16:13:39 8685FAF50C04F9A9C2F56FF64B0B7ACB 1107968 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-1667088166-3542532225-2137799823-1001\$RUC39OG.exe 2014-07-25 16:11:40 C5D237A3DA4A914D19D825C73FDE4487 8848464 ----a-w- C:\Program Files\Google\Update\Install\{165FDE85-6E97-422E-8E74-395035740BCC}\36.0.1985.125_35.0.1916.153_chrome_updater.exe 2014-07-25 16:11:40 C5D237A3DA4A914D19D825C73FDE4487 8848464 ----a-w- C:\Program Files\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\36.0.1985.125\36.0.1985.125_35.0.1916.153_chrome_updater.exe === C: other files == 2014-07-25 16:47:43 799613BA73D25641402AA81B6403EFF8 51928 ----a-w- C:\Windows\System32\drivers\mwac.sys 2014-07-25 16:47:43 1AA835E8A0B8EDF3D676B4ED4BF5EF07 74456 ----a-w- C:\Windows\System32\drivers\mbamchameleon.sys ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-21-1667088166-3542532225-2137799823-1001\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun" "ehTray.exe"="C:\Windows\ehome\ehTray.exe" "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" "TomTomHOME.exe"="C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe" "WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" "QPService"="C:\Program Files\HP\QuickPlay\QPService.exe" "HP Health Check Scheduler"="C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" "CognizanceTS"="rundll32.exe c:\PROGRA~1\BIOSCR~1\VeriSoft\Bin\ASTSVCC.dll,RegisterModule" "NvCplDaemon"="RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup" "NvMediaCenter"="RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit" "EEventManager"="C:\Program Files\Epson Software\Event Manager\EEventManager.exe" "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" "AgentMonitor"="C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe" "SunJavaUpdateSched"="C:\Program Files\Common Files\Java\Java Update\jusched.exe" "QlbCtrl"="%ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start" "hpWirelessAssistant"="%ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" "WAWifiMessage"="%ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] "Launcher"="%WINDIR%\SMINST\launcher.exe " [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun" "ehTray.exe"="C:\Windows\ehome\ehTray.exe" "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" "TomTomHOME.exe"="C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe" "WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="C:\\Windows\\System32\\APSHook.dll" ==== Startup Registry Disabled ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\HP Software Update] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="HP Software Update" "hkey"="HKLM" "command"="C:\\Program Files\\Hp\\HP Software Update\\HPWuSchd2.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\LightScribe Control Panel] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="LightScribe Control Panel" "hkey"="HKCU" "command"="C:\\Program Files\\Common Files\\LightScribe\\LightScribeControlPanel.exe -hidden" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\lime pro] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="lime pro" "hkey"="HKCU" "command"="\"C:\\Program Files\\Lime PRO\\LimePro.exe\" -h" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\QuickTime Task] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="QuickTime Task" "hkey"="HKLM" "command"="\"C:\\Program Files\\QuickTime\\QTTask.exe\" -atboottime" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\swg] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="swg" "hkey"="HKCU" "command"="\"C:\\Program Files\\Google\\GoogleToolbarNotifier\\GoogleToolbarNotifier.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\TomTomHOME.exe] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="TomTomHOME.exe" "hkey"="HKCU" "command"="\"C:\\Program Files\\TomTom HOME 2\\TomTomHOMERunner.exe\"" ==== Startup Folders ====================== 2007-12-08 21:41:30 1875 ----a-w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Office.lnk ==== Task Scheduler Jobs ====================== C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [12/07/2014 09:23] C:\Windows\tasks\Google Software Updater.job --a------ C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [31/08/2012 16:55] C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [31/01/2010 12:42] C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [31/01/2010 12:42] ==== Other Scheduled Tasks ====================== "C:\Windows\system32\tasks\Adobe Flash Player Updater" [C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe] "C:\Windows\system32\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"] "C:\Windows\system32\tasks\CreateChoiceProcessTask" [C:\Windows\System32\browserchoice.exe] "C:\Windows\system32\tasks\ExtendedServicePlan" ["C:\Program Files\Hewlett-Packard\SDP\RemEngine.exe"] "C:\Windows\system32\tasks\Google Software Updater" [C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe] "C:\Windows\system32\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files\Google\Update\GoogleUpdate.exe] "C:\Windows\system32\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files\Google\Update\GoogleUpdate.exe] "C:\Windows\system32\tasks\HP Health Check" ["C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe"] "C:\Windows\system32\tasks\Norton WSC Integration" ["C:\Program Files\Norton Internet Security\Engine\21.3.0.12\WSCStub.exe"] "C:\Windows\system32\tasks\{0CEF7FCC-7029-4F2F-A56A-F76ABD48EE4F}" ["c:\program files\google\chrome\application\chrome.exe"] "C:\Windows\system32\tasks\Norton Internet Security\Norton Error Analyzer" [C:\Program Files\Norton Internet Security\Engine\21.3.0.12\SymErr.exe] "C:\Windows\system32\tasks\Norton Internet Security\Norton Error Processor" [C:\Program Files\Norton Internet Security\Engine\21.3.0.12\SymErr.exe] ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions] "{BBDA0591-3099-440a-AA10-41764D9DB4DB}"="C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF" [18/06/2014 20:01] ==== Firefox Extensions ====================== ProfilePath: C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\xaspnpxb.default - Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn - Spelletjes - %ProfilePath%\extensions\{2b0cf91e-63d5-4474-9229-134d0b96fb28}(22) - Firefox 3 theme for Firefox 4 - %ProfilePath%\extensions\ffe_ff3ff4@game-point.net.xpi - Ask Toolbar - %ProfilePath%\extensions\toolbar@ask.com.xpi ProfilePath: C:\Users\Nick\AppData\Roaming\TomTom\HOME\Profiles\qkfyjdso.default - Map status indicator - C:\Program Files\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com - TomTom HOME default theme - C:\Program Files\TomTom HOME 2\xul\extensions\baseTheme@tomtom.com AppDir: C:\Program Files\Mozilla Firefox - Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ==== Firefox Plugins ====================== Profilepath: C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\xaspnpxb.default 4390CCD3790F8D9C427C0C29590C62D7 - C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll - Shockwave Flash FB5621842FDABF9F8359775573498FBC - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll - Google Update 5B92CB0A3EEE50F6B9AE036B4F9B0F0C - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll - Google Earth Plugin AF661355EBAB898EB92D5454AEF93CE0 - C:\Windows\system32\npDeployJava1.dll - Java Deployment Toolkit 7.0.400.43 358878E398AB0FB8B1EE176C2E3EDF48 - C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll - Google Updater D38AFAE9A9F77F9BE6473E9CC83D5647 - C:\Program Files\QuickTime\Plugins\npqtplugin7.dll - QuickTime Plug-in 7.6.9 8B98B1A31858618AD9544477E2F7814D - C:\Program Files\QuickTime\Plugins\npqtplugin6.dll - QuickTime Plug-in 7.6.9 D8F8E45ACC404661CF0787F2A0888180 - C:\Program Files\QuickTime\Plugins\npqtplugin5.dll - QuickTime Plug-in 7.6.9 7B55FEF2BA47A2420BB49CD93320077A - C:\Program Files\QuickTime\Plugins\npqtplugin4.dll - QuickTime Plug-in 7.6.9 D9F5A433758BC151850E53690D57663A - C:\Program Files\QuickTime\Plugins\npqtplugin3.dll - QuickTime Plug-in 7.6.9 2FE95733EB36CD762EAE54BBE9D8B11C - C:\Program Files\QuickTime\Plugins\npqtplugin2.dll - QuickTime Plug-in 7.6.9 8FD41344CB62DDB06E2A339F2C5F1947 - C:\Program Files\QuickTime\Plugins\npqtplugin.dll - QuickTime Plug-in 7.6.9 8130FF8214221BA5AC764909587E161A - C:\Program Files\Adobe\Reader 8.0\Reader\browser\nppdf32.dll - Adobe Acrobat AB87EEFFD18F2BAAFC274E7075EA6C67 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll - Windows Presentation Foundation / Windows Presentation Foundation DFCAB29E8FD38F95650CC1E203E8D318 - C:\Windows\system32\npmproxy.dll - Microsoft® Windows® Operating System ==== Chrome Look ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions aaaaojmikegpiepcfdkkjaplodkpfmlo - C:\ProgramData\AskPartnerNetwork\Toolbar\ORJ\CRX\ToolbarCR.crx[25/06/2014 01:53] cdjfkejjfbnnahgfabnehkfkhpfghoak - C:\Users\Nick\AppData\Local\CRE\cdjfkejjfbnnahgfabnehkfkhpfghoak.crx[28/10/2012 16:29] mkfokfffehpeedafpekjeddnmnjhmcmk - C:\Program Files\Norton Internet Security\Engine\21.3.0.12\Exts\Chrome.crx[28/04/2014 14:52] HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions cdjfkejjfbnnahgfabnehkfkhpfghoak - C:\Users\Nick\AppData\Local\CRE\cdjfkejjfbnnahgfabnehkfkhpfghoak.crx[28/10/2012 16:29] Ask Toolbar - Nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo Spelletjes - Nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdjfkejjfbnnahgfabnehkfkhpfghoak Norton Identity Protection - Nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk Google Wallet - Nick\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda ==== C:\zoek_backup content ====================== C:\zoek_backup (files=75 folders=31 20008237 bytes) ==== EOF on vr 25/07/2014 at 19:09:59,41 ======================

Ik heb hier een patiënt op bezoek waarop 2 administrator-accounts actief zijn, dit is het RSIT logje van "account 1": Logfile of random's system information tool 1.10 (written by random/random) Run by Nick at 2014-07-25 18:15:44 Microsoft® Windows Vista™ Home Premium Service Pack 2 System drive C: has 31 GB (29%) free of 107 GB Total RAM: 1982 MB (52% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 18:17:28, on 25/07/2014 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v9.00 (9.00.8112.16561) Boot mode: Normal Running processes: C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Norton Internet Security\Engine\21.3.0.12\NIS.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\HP\QuickPlay\QPService.exe C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe C:\Windows\System32\rundll32.exe C:\Program Files\Epson Software\Event Manager\EEventManager.exe C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Windows\ehome\ehtray.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe C:\Users\Nick\Desktop\RSIT.exe C:\Program Files\trend micro\Nick.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN België: Hotmail, Skype, nieuws, entertainment, lifestyle en meer! R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer! R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Zita R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (file missing) R3 - URLSearchHook: Spelletjes Toolbar - {2b0cf91e-63d5-4474-9229-134d0b96fb28} - C:\Program Files\Spelletjes\prxtbSpel.dll O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll O2 - BHO: Spelletjes - {2b0cf91e-63d5-4474-9229-134d0b96fb28} - C:\Program Files\Spelletjes\prxtbSpel.dll O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\21.3.0.12\coIEPlg.dll O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\21.3.0.12\IPS\IPSBHO.DLL O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Ask Shopping Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - "C:\Program Files\AskPartnerNetwork\Toolbar\ORJ\Passport.dll" (file missing) O2 - BHO: VeriSoft Access Manager - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - c:\Program Files\Bioscrypt\VeriSoft\Bin\ItIEAddIn.dll O3 - Toolbar: Spelletjes Toolbar - {2b0cf91e-63d5-4474-9229-134d0b96fb28} - C:\Program Files\Spelletjes\prxtbSpel.dll O3 - Toolbar: Ask Shopping Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - "C:\Program Files\AskPartnerNetwork\Toolbar\ORJ\Passport.dll" (file missing) O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\21.3.0.12\coIEPlg.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe" O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start O4 - HKLM\..\Run: [HP Health Check Scheduler] C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe O4 - HKLM\..\Run: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe O4 - HKLM\..\Run: [WAWifiMessage] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe O4 - HKLM\..\Run: [CognizanceTS] rundll32.exe c:\PROGRA~1\BIOSCR~1\VeriSoft\Bin\ASTSVCC.dll,RegisterModule O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [EEventManager] "C:\Program Files\Epson Software\Event Manager\EEventManager.exe" O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [AgentMonitor] C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [ApnTBMon] "C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe" O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - AppInit_DLLs: C:\Windows\System32\APSHook.dll O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll O23 - Service: ABBYY FineReader 9.0 Sprint Licensing Service (ABBYY.Licensing.FineReader.Sprint.9.0) - ABBYY - C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: Ask-updateservice (APNMCP) - APN LLC. - C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files\Norton Internet Security\Engine\21.3.0.12\NIS.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe -- End of file - 9507 bytes ======Scheduled tasks folder====== C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe C:\Windows\tasks\Google Software Updater.job - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe scheduled_start C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler =========Mozilla firefox========= ProfilePath - C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\xaspnpxb.default prefs.js - "browser.startup.homepage" - "http://www.google.be" "{20a82645-c095-46ed-80e3-08825760534b}"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ "{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}"=C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn\ "{BBDA0591-3099-440a-AA10-41764D9DB4DB}"=C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 14.0.0.145 Plugin "Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin] "Description"=Google Earth in your browser "Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.40.2] "Description"=Java™ Deployment Toolkit "Path"=C:\Windows\system32\npDeployJava1.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5] "Description"=Windows Presentation Foundation plug-in for Mozilla browsers "Path"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pack.google.com/Google Updater;version=14] "Description"=Google Updater "Path"=C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3] "Description"=Google Update "Path"=C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9] "Description"=Google Update "Path"=C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll C:\Program Files\Mozilla Firefox\components\ nsIQTScriptablePlugin.xpt C:\Program Files\Mozilla Firefox\plugins\ nppdf32.dll npqtplugin.dll npqtplugin2.dll npqtplugin3.dll npqtplugin4.dll npqtplugin5.dll npqtplugin6.dll npqtplugin7.dll QuickTimePlugin.class C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\xaspnpxb.default\extensions\ {2b0cf91e-63d5-4474-9229-134d0b96fb28}(22) C:\Users\Nick\AppData\Roaming\Mozilla\Firefox\Profiles\xaspnpxb.default\searchplugins\ ask-search.xml askcom.xml safesearch.xml Search_Results.xml ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}] Adobe PDF Reader Help bij koppelingen - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}] MSS+ Identifier - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09 96128] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2b0cf91e-63d5-4474-9229-134d0b96fb28}] Spelletjes Toolbar - C:\Program Files\Spelletjes\prxtbSpel.dll [2011-05-09 176936] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}] Norton Identity Protection - C:\Program Files\Norton Internet Security\Engine\21.3.0.12\coIEPlg.dll [2014-04-28 654176] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}] Norton Vulnerability Protection - C:\Program Files\Norton Internet Security\Engine\21.3.0.12\IPS\IPSBHO.DLL [2014-02-21 392344] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9421DD08-935F-4701-A9CA-22DF90AC4EA6}] Easy Photo Print - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-03-29 266240] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}] Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2014-03-31 194504] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}] Ask Shopping Toolbar - C:\Program Files\AskPartnerNetwork\Toolbar\ORJ\Passport.dll [2014-06-24 12184] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DF21F1DB-80C6-11D3-9483-B03D0EC10000}] VeriSoft Access Manager - c:\Program Files\Bioscrypt\VeriSoft\Bin\ItIEAddIn.dll [2006-11-21 71192] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {2b0cf91e-63d5-4474-9229-134d0b96fb28} - Spelletjes Toolbar - C:\Program Files\Spelletjes\prxtbSpel.dll [2011-05-09 176936] {D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Shopping Toolbar - C:\Program Files\AskPartnerNetwork\Toolbar\ORJ\Passport.dll [2014-06-24 12184] {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files\Norton Internet Security\Engine\21.3.0.12\coIEPlg.dll [2014-04-28 654176] {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2014-03-31 194504] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2007-01-13 827392] "QPService"=C:\Program Files\HP\QuickPlay\QPService.exe [2007-04-23 176128] "QlbCtrl"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2007-02-13 159744] "HP Health Check Scheduler"=C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [2007-03-12 50696] "hpWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2007-03-01 472776] "WAWifiMessage"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe [2007-01-10 317128] "CognizanceTS"=c:\PROGRA~1\BIOSCR~1\VeriSoft\Bin\ASTSVCC.dll [2003-12-22 17920] "NvCplDaemon"=C:\Windows\system32\NvCpl.dll [2008-12-04 13556256] "NvMediaCenter"=C:\Windows\system32\NvMcTray.dll [2008-12-04 92704] "EEventManager"=C:\Program Files\Epson Software\Event Manager\EEventManager.exe [2009-12-03 976320] "Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-10-15 39792] "AgentMonitor"=C:\Program Files\VTech\DownloadManager\System\AgentMonitor.exe [2013-06-20 391040] "SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336] "ApnTBMon"=C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [2014-06-24 1956760] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce] "Launcher"=C:\Windows\SMINST\launcher.exe [2006-11-07 44128] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920] "ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952] "swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2008-08-31 39408] "TomTomHOME.exe"=C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [2013-08-27 248208] "WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-19 202240] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2005-02-16 49152] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2007-04-19 484904] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\lime pro] C:\Program Files\Lime PRO\LimePro.exe [2011-08-16 3670528] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] C:\Program Files\QuickTime\QTTask.exe [2010-11-29 421888] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2008-08-31 39408] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TomTomHOME.exe] C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [2013-08-27 248208] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="C:\Windows\System32\APSHook.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp] wlnotify.dll [] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "EnableUIADesktopToggle"=0 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDrives"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "BindDirectlyToPropertySetStorage"=0 "NoDrives"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVYU"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.i420"=iyuv_32.dll "VIDC.YVU9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "vidc.cvid"=iccvid.dll "MSVideo8"=VfWWDM32.dll "msacm.siren"=sirenacm.dll "vidc.XVID"=xvidvfw.dll "msacm.l3codecp"= "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 ======List of files/folders created in the last 1 month====== 2014-07-25 18:15:47 ----D---- C:\Program Files\trend micro 2014-07-25 18:15:44 ----D---- C:\rsit 2014-07-25 18:09:02 ----ASH---- C:\hiberfil.sys 2014-07-14 07:56:51 ----A---- C:\Windows\ntbtlog.txt 2014-07-10 21:26:06 ----A---- C:\Windows\system32\win32k.sys 2014-07-10 21:26:05 ----A---- C:\Windows\system32\qedit.dll 2014-07-10 21:26:01 ----A---- C:\Windows\system32\drivers\afd.sys 2014-07-10 21:25:14 ----A---- C:\Windows\system32\wininet.dll 2014-07-10 21:25:14 ----A---- C:\Windows\system32\vbscript.dll 2014-07-10 21:25:14 ----A---- C:\Windows\system32\mshtmled.dll 2014-07-10 21:25:14 ----A---- C:\Windows\system32\jscript.dll 2014-07-10 21:25:14 ----A---- C:\Windows\system32\ieui.dll 2014-07-10 21:25:14 ----A---- C:\Windows\system32\dxtrans.dll 2014-07-10 21:25:14 ----A---- C:\Windows\system32\dxtmsft.dll 2014-07-10 21:25:13 ----A---- C:\Windows\system32\jscript9.dll 2014-07-10 21:25:11 ----A---- C:\Windows\system32\mshtml.dll 2014-07-10 21:25:08 ----A---- C:\Windows\system32\msfeedssync.exe 2014-07-10 21:25:08 ----A---- C:\Windows\system32\msfeedsbs.dll 2014-07-10 21:25:08 ----A---- C:\Windows\system32\msfeeds.dll 2014-07-10 21:25:08 ----A---- C:\Windows\system32\jsproxy.dll 2014-07-10 21:25:07 ----A---- C:\Windows\system32\url.dll 2014-07-10 21:25:05 ----A---- C:\Windows\system32\ieUnatt.exe 2014-07-10 21:25:05 ----A---- C:\Windows\system32\iertutil.dll 2014-07-10 21:25:05 ----A---- C:\Windows\system32\ieframe.dll 2014-07-10 21:25:04 ----A---- C:\Windows\system32\urlmon.dll 2014-07-10 21:25:04 ----A---- C:\Windows\system32\mshta.exe 2014-07-08 06:08:34 ----D---- C:\Program Files\McAfee Security Scan 2014-07-05 19:54:04 ----D---- C:\ProgramData\McAfee Security Scan 2014-07-05 19:53:56 ----D---- C:\ProgramData\McAfee 2014-06-26 05:56:31 ----SHD---- C:\Config.Msi ======List of files/folders modified in the last 1 month====== 2014-07-25 18:15:47 ----RD---- C:\Program Files 2014-07-25 18:15:29 ----D---- C:\Windows\temp 2014-07-25 18:13:31 ----SHD---- C:\System Volume Information 2014-07-25 18:11:05 ----D---- C:\Windows\SMINST 2014-07-14 07:56:51 ----D---- C:\Windows 2014-07-12 09:36:16 ----D---- C:\Windows\system32\drivers\NIS 2014-07-12 09:23:59 ----D---- C:\Windows\System32 2014-07-12 09:23:48 ----A---- C:\Windows\system32\FlashPlayerApp.exe 2014-07-12 09:06:04 ----D---- C:\Program Files\Windows Journal 2014-07-12 09:06:01 ----D---- C:\Windows\system32\migration 2014-07-12 09:06:01 ----D---- C:\Windows\system32\drivers 2014-07-12 09:06:01 ----D---- C:\Program Files\Internet Explorer 2014-07-12 09:03:25 ----D---- C:\Windows\winsxs 2014-07-12 08:58:25 ----D---- C:\Windows\system32\MRT 2014-07-12 08:58:13 ----A---- C:\Windows\system32\mrt.exe 2014-07-10 21:25:38 ----D---- C:\Windows\system32\catroot 2014-07-10 21:25:37 ----D---- C:\Windows\system32\catroot2 2014-07-06 05:53:07 ----A---- C:\Windows\system32\PerfStringBackup.INI 2014-07-06 05:53:03 ----D---- C:\Windows\inf 2014-07-05 19:54:04 ----D---- C:\ProgramData 2014-06-26 05:57:19 ----SHD---- C:\Windows\Installer 2014-06-26 05:56:40 ----D---- C:\Program Files\AskPartnerNetwork ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [2007-02-02 43528] R0 SymDS;Symantec Data Store; C:\Windows\system32\drivers\NIS\1503000.00C\SYMDS.SYS [2013-09-10 367704] R0 SymEFA;Symantec Extended File Attributes; C:\Windows\system32\drivers\NIS\1503000.00C\SYMEFA.SYS [2014-03-04 936152] R1 BHDrvx86;BHDrvx86; \??\C:\Program Files\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20140703.001\BHDrvx86.sys [2014-05-10 1101616] R1 ccSet_NIS;NIS Settings Manager; C:\Windows\system32\drivers\NIS\1503000.00C\ccSetx86.sys [2013-09-26 127064] R1 eabfiltr;eabfiltr; C:\Windows\system32\DRIVERS\eabfiltr.sys [2006-11-30 8192] R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [2014-06-26 377648] R1 IDSVix86;IDSVix86; \??\C:\Program Files\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20140708.001\IDSvix86.sys [2014-06-18 395992] R1 SRTSPX;Symantec Real Time Storage Protection (PEL); C:\Windows\system32\drivers\NIS\1503000.00C\SRTSPX.SYS [2013-09-10 32344] R1 SymIRON;Symantec Iron Driver; C:\Windows\system32\drivers\NIS\1503000.00C\Ironx86.SYS [2013-09-27 206936] R1 SYMTDIv;Symantec Vista Network Dispatch Driver; C:\Windows\System32\Drivers\NIS\1503000.00C\SYMTDIV.SYS [2014-02-18 384728] R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2006-06-19 12672] R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2007-02-24 39936] R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2007-01-23 42496] R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2007-01-23 37376] R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio.sys [2006-11-28 8192] R3 ATSWPDRV;AuthenTec TruePrint USB Driver (SwipeSensor); C:\Windows\system32\DRIVERS\ATSwpDrv.sys [2007-03-28 140424] R3 BCM43XX;Stuurprogramma voor de Broadcom 802.11-netwerkadapter; C:\Windows\system32\DRIVERS\bcmwl6.sys [2007-01-03 534016] R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2014-06-12 109872] R3 HBtnKey;HBtnKey; C:\Windows\system32\DRIVERS\cpqbttn.sys [2006-06-28 9472] R3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDART.sys [2007-04-12 160768] R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2006-12-07 985600] R3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2006-12-07 207360] R3 NAVENG;NAVENG; \??\C:\Program Files\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140708.016\NAVENG.SYS [2014-06-26 93272] R3 NAVEX15;NAVEX15; \??\C:\Program Files\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140708.016\NAVEX15.SYS [2014-06-26 1612376] R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvmfdx32.sys [2007-03-07 1059112] R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2008-12-04 7606688] R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2007-02-17 12032] R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-11 89088] R3 SRTSP;Symantec Real Time Storage Protection; C:\Windows\System32\Drivers\NIS\1503000.00C\SRTSP.SYS [2014-02-13 664280] R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT.SYS [2013-11-18 142936] R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2007-01-13 181432] R3 usbvideo;USB-videoapparaat (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2013-07-12 134272] R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2006-12-07 659968] R3 WudfPf;@%SystemRoot%\system32\drivers\Wudfpf.sys,-1000; C:\Windows\system32\drivers\WudfPf.sys [2012-07-26 66560] S3 BCM43XV;Broadcom Extensible 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl6.sys [2007-01-03 534016] S3 catchme;catchme; \??\C:\Users\Nick\AppData\Local\Temp\catchme.sys [] S3 drmkaud;Microsoft Kernel DRM-audiodecoder; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632] S3 E100B;Intel® PRO-adapterstuurprogramma; C:\Windows\system32\DRIVERS\e100b325.sys [2006-11-02 163328] S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2006-11-02 200704] S3 ialm;ialm; C:\Windows\system32\DRIVERS\igdkmd32.sys [2006-10-19 1380864] S3 MSKSSRV;Microsoft Streaming Service-proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192] S3 MSPCLOCK;Microsoft Streaming Clock-proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888] S3 MSPQM;Microsoft Streaming Kwaliteitsbeheer Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504] S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink-conversieprogramma; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016] S3 SCL0102K;SCL010 Contactless Reader; C:\Windows\system32\DRIVERS\SCL0102K.sys [2009-11-30 61952] S3 usbscan;Stuurprogramma voor USB-scanner; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 35328] S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2012-07-26 155136] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 ABBYY.Licensing.FineReader.Sprint.9.0;ABBYY FineReader 9.0 Sprint Licensing Service; C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [2009-05-14 759048] R2 APNMCP;Ask-updateservice; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [2014-06-24 165784] R2 ASBroker;Logon Session Broker; C:\Windows\System32\svchost.exe [2008-01-19 21504] R2 ASChannel;Local Communication Channel; C:\Windows\System32\svchost.exe [2008-01-19 21504] R2 CLCapSvc;CyberLink Background Capture Service (CBCS); C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe [2007-04-23 262243] R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504] R2 gupdate;Google Updateservice (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-01-31 135664] R2 HP Health Check Service;HP Health Check Service; C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2007-03-14 62984] R2 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2006-05-02 135168] R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2007-04-19 75304] R2 NIS;Norton Internet Security; C:\Program Files\Norton Internet Security\Engine\21.3.0.12\NIS.exe [2014-05-11 276376] R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2008-12-04 203296] R2 TomTomHOMEService;TomTomHOMEService; C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe [2013-08-27 93072] R2 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [2006-11-28 386560] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144] S2 CLSched;CyberLink Task Scheduler (CTS); C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe [2007-04-23 106593] S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-31 194032] S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2012-07-13 160944] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-12 262320] S3 Com4Qlb;Com4Qlb; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe [2007-01-09 110592] S3 gupdatem;Google Update-service (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-01-31 135664] S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728] S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [2014-04-09 235696] S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-06-19 119408] S3 RoxMediaDB9;RoxMediaDB9; C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe [2007-02-12 880640] S3 stllssvr;stllssvr; C:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2007-02-17 74656] S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-09-11 770168] S4 aspnet_state;ASP.NET-statusservice; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688] S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856] -----------------EOF-----------------

Kan je de volledige type-aanduiding van je laptop posten, bijvoorbeeld Compaq Presario CQ56-109WM ?

Ja hoor, ik zou beginnen met de ontbrekende gegevens te bezorgen: * het merk en de volledige type-aanduiding van de laptop * de volledige type-aanduiding van het toetsenbord * een link naar een Speccy-logje: Download en installeer Speccy. Speccy is er ook in Nederlandstalige versie, bij de installatie (of update) kan je de taal wijzigen van Engels naar Nederlands ... als je op het driehoekje klikt, krijg je een uitrolmenu waarin je Nederlands kan selecteren. Wanneer, tijdens het installeren van Speccy, de optie aangeboden wordt om Google Chrome of Google Toolbar "gratis" mee te installeren dien je de vinkjes weg te halen, tenzij dit een bewuste keuze is. Start nu het programma en er zal een overzicht gemaakt worden van je hardware. Als dit gereed is selecteer je bovenaan "Bestand - Publiceer Snapshot" en vervolgens bevestig je die keuze met " Ja ". In het venster dat nu opent krijg je een link te zien, kopieer nu die link en plak die in je volgende bericht. Zo krijgen we een gedetailleerd overzicht van je hardware. Meer info over deze procedure lees je HIER.

De type-aanduiding van je moederbord is helaas niet volledig, er ontbreekt / ontbreken nog 1 tot 3 letters: P7H55-???

De netwerkkaart zit reeds in je laptop ingebouwd maar de driver (het stuurprogramma) die ontbreekt nog, vandaar die melding die je krijgt (bericht #1) ... je kan de driver downloaden via de link in bericht #6 en na het downloaden kan je hem installeren.

Kan je de bestanden nog benaderen wanneer je opstart vanop een Ubuntu Live CD ?

Ik vrees er een beetje voor, maar je kan het CD/DVD-station ook mechanisch openen dmv een recht geplooide paperclip: