DygOzl

Neen helaas is alles nog steeds hetzelfde als in het begin vd problemen.

Via hdmi geeft het dit... en Let niet op de taal..die pc ketel heeft dat op turks staan..

Vervangen van de drivers hebben niet geholpen. Nieuwe scherm uitgeprobeerd, ook geen progressie. Maar als mn grafische kaart dood is, hoe komt het dan dat ik met een hdmi aansluiting op tv of extern scherm wel beeld krijg?

Bij opstarten van mijn laptop krijg ik een zwart scherm, het systeem start wel op, alles draait. Echter is er enkel een zwart beeld te zien op mijn scherm of beter gezegd "niets" eigenlijk. Als ik via hdmi verbinding maak met een extern scherm dan zie ik wel mijn bureaublad etc verschijnen, echter kan ik wel zeggen dat er wat scheelt aan het beeld. Pixels zijn niet 100% en heb hier en daar wat groene schijn. De buurjongen heeft dit eerder opgelost door te spelen met de energieprestaties etc. Ook heeft hij koelpasta aangebracht. Mijn harde schijf is ondertussen ook al vervangen. De buurjongen heeft dan opnieuw dezelfde handelingen verricht. Maar ondertussen (nog geen maand later) valt mijn scherm alweer weg. Grafische kaart naar de knoppen? Wie weet het mij te zeggen? Ik heb een Dell XPS M1530 met Windows 7 (hier voor Vista, maar de kerel die mijn harde schijf heeft vervangen zette er W7 op) Intel core 2 duo cpu T5750 2.00 GHz 3.00 GB RAM 32-bits besturingssysteem

Ik heb uiteindelijk iemand gevonden die verstand van zaken heeft. Hij gaat een HD proberen en mij op de hoogte brengen van de mankementen. Mocht het mislopen, zal je nog horen van me. Mijn laptop heeft helaas geen garantie meer. Deze is immers 5 jaar oud. Hij heeft zn beste tijd wel gehad met al dat gerender en tekenprogramma's. Maar aangezien mn krap studentenbudget moet ik toch tot kerst hiermee verder ^^ bedankt allen voor jullie hulp.

Ik zal eens moeten rondvragen, want bij het minste dat ik wil uitvoeren loopt het mis. Via Dell Diagnostics lukte het ook al niet.. Stel ik vind eentje die ik mag uitproberen, hoe doe ik dit dan precies? Vergt dit enig losdraaien van een 10-tal delen etc?

Beste Dasle, deze middag bovenstaande 2x uitgevoerd. Poging 1: liep alles weer volledig vast. Poging 2: ging hij een uur scannen zonder vast te hangen. Ga ik de vaatwasser vullen.. kom ik terug en zie ik een probleemmelding: Probleemhandtekening: Gebeurtenisnaam van probleem: BlueScreen Versie van besturingssysteem: 6.0.6002.2.2.0.768.3 Landinstelling-id: 2067 Aanvullende informatie over dit probleem: BCCode: 9f BCP1: 00000003 BCP2: 888D0788 BCP3: 888D0788 BCP4: 878D0BA0 OS Version: 6_0_6002 Service Pack: 2_0 Product: 768_1 Bestanden die helpen bij het beschrijven van het probleem: C:\Windows\Minidump\Mini101113-01.dmp C:\Users\Ramcom\AppData\Local\Temp\WER-95457-0.sysdata.xml C:\Users\Ramcom\AppData\Local\Temp\WER4EF.tmp.version.txt Lees onze privacyverklaring: Privacyverklaring voor de Microsoft Error Reporting Service Stilaan voor een nieuwe harde schijf zoeken? Of een nieuwe laptop? You tell me...xD Gelukkig kan ik er nog mee lachen.

CD gebrand, CD/DVD-rom als first boot device ingesteld, cd in m'n drive gelegd... Hoop zwart-wit tekst.. en uiteindelijk dit: invalid opcode at 7146 1851 3093 02 60 0000 1000 CB00 A06C AFA0 006C 0000 0003 09F0 invalide opcode at 152D 1851 perating system

Neen, ik heb een externe harde schijf van 1.5 TB, dus plaats genoeg. Maar het wou niet lukken. Foutmelding was iets in de aard van "Backup kon niet worden voltooid,... 0x8000FFFF Ik ben trouwens pas terug van een lange dag pendelen. Eens Seatools for DOS ISO image proberen te branden als dat nog nut heeft.

Na poging 5 kreeg ik dit, hij liep vast en ik ging slapen. s Morgens stond ie nog steeds op exact hetzelfde blokje. Na mijn les zal ik bovenstaande proberen uit te voeren. Al dat groen maakte mij voor een moment wel superblij moet ik toegeven. Eerder had ik ook een tool van hitmanpro gedownload. Deze had een 4tal Trojans gevonden en allerlei ander rotzooi. Ik heb ook alweer een backup proberen te maken, dit keer liep hij niet vast maar kreeg ik een foutmelding.

Hier is hij vastgelopen.

http://speccy.piriform.com/results/TZzpNLfODChDa0maOkqbkxg

Kleine update: Hij was dus de volgende ochtend nog steeds exact hetzelfde bezig; op 18 procent blijven steken. Heb ik hem maar gedwongen moeten afsluiten. Ik begin toch stilletjes gefrustreerd te geraken hierdoor. Aan allen die moeite doen om mij te helpen: enorme dank en mijn oprechte appreciaties!

Beste Jean-Pierre, bedankt voor je berichtje. Ik heb bovenstaande dingen gedaan zoals je me gezegd hebt. Hij staat al uren op stap 4 van 5 en 18 procent (11096 van 413424). Ik heb hem laten staan hopend dat het gewoon een moeilijker deel is om te scannen. De FAN draait gelukkig nu wel. Zou ik nog wachten of zou dit geen zin hebben?

http://speccy.piriform.com/results/TZzpNLfODChDa0maOkqbkxg

Kan het trouwens aan de fan liggen? Mijn broer heeft zopas gemerkt dat die plots stopt met draaien. Hij is normaal ook stil als hij draait, daarmee dat het mij niet was opgevallen. Vooraleer ik 'm eventueel moet laten vervangen, is het misschien handig om te achterhalen of het een software- of een hardwaregebonden probleem is.

Skype gebruikt om te chatten..na een kwartier liep 'm weer vast.

Log nr 2 voor herstart = [ATTACH]28314[/ATTACH] Log nr 3 na herstart = [ATTACH]28313[/ATTACH] TDSSKiller.2.8.16.0_03.10.2013_12.56.52_log.txt TDSSKiller.2.8.16.0_03.10.2013_12.48.29_log.txt

[ATTACH]28308[/ATTACH] Voila! TDSSKiller.2.8.16.0_02.10.2013_19.48.41_log.txt

12u later.. nog steeds dezelfde problemen. Geen log file te bespeuren, laptop is alweer volledig vastgelopen tijdens de scan,... Begin nu toch echt wel wanhopig te worden. *grmpfh*

Mijn laptop heeft zichzelf dus afgesloten ..ik zie ook geen log file tussen mijn documenten staan. Ik zet hem opnieuw aan met hoop op succes tot ik terug ben van school. Groetjes x

Ik laat hem gewoon aan staan tot de ochtend. Hij zegt nog steeds: Ondertussen 2tal uurtjes later.. Taakbalk en Bureaublad wel actief nu, alsook het blauw schermpje. Ik zal je morgen wel op de hoogte houden hoe het is verlopen.

Eerste poging= Laptop liep alweer volledig vast bij: Tweede poging: Nou loopt mijn startbalk vast. (Klok op laptop staat op 20:33, het is nu 20:43, ben begonnen met scannen om 20:30) Ik wacht geduldig op voortgang... Voor het vastlopen flikkerde hij wel een aantal keren, alsof ie wou opnieuw opstarten. Maar keerde uiteindelijk terug naar het bureaublad met blauw schermpje.

Ik ben nu eventjes aan het testen met een snelle scan op Malwarebytes. Als hij vast loopt, weet ik het je te zeggen. Bedankt voor je hulp trouwens. - - - Updated - - - Hij hangt weer vast... CTRL+ALT+DELETE reageert ook niet. Malwarebytes had wel na 5min 24 objecten gedetecteerd.

Hij is nu bezig, al een dik halfuur trouwens. Maar plots krijg ik ook het volgende te zien: - - - Updated - - - Zoek.exe Version 4.0.0.4 Updated 24-September-2013 Tool run by Ramcom on ma 30/09/2013 at 18:33:50,21. Windows Vista Home Premium 6.0.6002 Service Pack 2 x86 WMI=failure Running in: Normal Mode No Internet Access Detected Launched: C:\Users\Ramcom\Downloads\zoek\zoek.exe [script inserted] [Checkboxes used] ==== System Restore Info ====================== 30/09/2013 18:39:08 Zoek.exe System Restore Point Created Succesfully. ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-1166321317-2856568384-716361271-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{14f0d511-36a2-41ca-ae01-ba4f87282c97} deleted successfully HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4efb-9B51-7695ECA05670} deleted successfully HKEY_USERS\S-1-5-21-1166321317-2856568384-716361271-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4efb-9B51-7695ECA05670} deleted successfully HKEY_USERS\S-1-5-21-1166321317-2856568384-716361271-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD} deleted successfully HKEY_USERS\S-1-5-21-1166321317-2856568384-716361271-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD} deleted successfully HKEY_USERS\S-1-5-21-1166321317-2856568384-716361271-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} deleted successfully HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{ccec60fc-2608-4e58-9659-3ffc159e8ea9} deleted successfully HKEY_USERS\S-1-5-21-1166321317-2856568384-716361271-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{ccec60fc-2608-4e58-9659-3ffc159e8ea9} deleted successfully HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{ccec60fc-2608-4e58-9659-3ffc159e8ea9} deleted successfully HKEY_USERS\S-1-5-21-1166321317-2856568384-716361271-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{ccec60fc-2608-4e58-9659-3ffc159e8ea9} deleted successfully HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2C688203-7EB3-4327-9995-1CB417BA23F9} deleted successfully HKEY_USERS\S-1-5-21-1166321317-2856568384-716361271-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2C688203-7EB3-4327-9995-1CB417BA23F9} deleted successfully HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2C688203-7EB3-4327-9995-1CB417BA23F9} deleted successfully HKEY_USERS\S-1-5-21-1166321317-2856568384-716361271-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2C688203-7EB3-4327-9995-1CB417BA23F9} deleted successfully HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0457331d-8ca6-4f97-9c26-6a9ef2b2dba8} deleted successfully HKEY_USERS\S-1-5-21-1166321317-2856568384-716361271-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0457331d-8ca6-4f97-9c26-6a9ef2b2dba8} deleted successfully HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0457331d-8ca6-4f97-9c26-6a9ef2b2dba8} deleted successfully HKEY_USERS\S-1-5-21-1166321317-2856568384-716361271-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0457331d-8ca6-4f97-9c26-6a9ef2b2dba8} deleted successfully HKEY_USERS\S-1-5-21-1166321317-2856568384-716361271-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} deleted successfully HKEY_USERS\S-1-5-21-1166321317-2856568384-716361271-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} deleted successfully HKEY_USERS\S-1-5-21-1166321317-2856568384-716361271-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3} deleted successfully HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F4430FE8-2638-42e5-B849-800749B94EED} deleted successfully HKEY_USERS\S-1-5-21-1166321317-2856568384-716361271-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F4430FE8-2638-42e5-B849-800749B94EED} deleted successfully HKEY_USERS\S-1-5-21-1166321317-2856568384-716361271-1000\Software\Microsoft\Internet Explorer\SearchScopes\{40439b93-f815-4122-8073-d03bed94c303} deleted successfully HKEY_CLASSES_ROOT\CLSID\{14f0d511-36a2-41ca-ae01-ba4f87282c97} deleted successfully HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4efb-9B51-7695ECA05670} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670} deleted successfully HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD} deleted successfully HKEY_CLASSES_ROOT\CLSID\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD} deleted successfully HKEY_CLASSES_ROOT\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87} deleted successfully HKEY_CLASSES_ROOT\CLSID\{ccec60fc-2608-4e58-9659-3ffc159e8ea9} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ccec60fc-2608-4e58-9659-3ffc159e8ea9} deleted successfully HKEY_CLASSES_ROOT\CLSID\{2C688203-7EB3-4327-9995-1CB417BA23F9} deleted successfully HKEY_CLASSES_ROOT\CLSID\{0457331d-8ca6-4f97-9c26-6a9ef2b2dba8} deleted successfully HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} deleted successfully HKEY_CLASSES_ROOT\CLSID\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} deleted successfully HKEY_CLASSES_ROOT\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{F4430FE8-2638-42e5-B849-800749B94EED} deleted successfully ==== Deleting CLSID Registry Values ====================== HKEY_USERS\S-1-5-21-1166321317-2856568384-716361271-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\{14f0d511-36a2-41ca-ae01-ba4f87282c97} deleted successfully HKEY_USERS\S-1-5-21-1166321317-2856568384-716361271-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{2C688203-7EB3-4327-9995-1CB417BA23F9} deleted successfully HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{0457331d-8ca6-4f97-9c26-6a9ef2b2dba8} deleted successfully HKEY_USERS\S-1-5-21-1166321317-2856568384-716361271-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{0457331d-8ca6-4f97-9c26-6a9ef2b2dba8} deleted successfully HKEY_USERS\S-1-5-21-1166321317-2856568384-716361271-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} deleted successfully HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\urlsearchhooks\{14f0d511-36a2-41ca-ae01-ba4f87282c97} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{2C688203-7EB3-4327-9995-1CB417BA23F9} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{0457331d-8ca6-4f97-9c26-6a9ef2b2dba8} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{7AC3E13B-3BCA-4158-B330-F66DBB03C1B5} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{82E1477C-B154-48D3-9891-33D83C26BCD3} deleted successfully ==== Deleting Services ====================== ==== FireFox Fix ====================== Deleted from C:\Users\Ramcom\AppData\Roaming\Mozilla\Firefox\Profiles\n2spnneo.default\prefs.js: user_pref("browser.startup.homepage", "http://www.google.be/"); user_pref("browser.newtab.url", "http://www.delta-search.com/?affID=119816&babsrc=NT_ss&mntrId=d0666b9800000000000000215c4e67d3"); user_pref("browser.search.defaultengine", "Ask.com"); user_pref("browser.search.defaultenginename", "Ask.com"); user_pref("browser.search.selectedEngine", "Delta Search"); user_pref("browser.search.order.1", "Ask.com"); user_pref("keyword.URL", "http://www.questscan.com/?tmp=nemo_results_removelink&prt=QstscanPB&keywords="); user_pref("browser.search.useDBForOrder", true); Added to C:\Users\Ramcom\AppData\Roaming\Mozilla\Firefox\Profiles\n2spnneo.default\prefs.js: user_pref("browser.startup.homepage", "http://www.google.com"); user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q="); user_pref("browser.newtab.url", "http://www.google.com/"); user_pref("browser.search.defaultengine", "Google"); user_pref("browser.search.defaultenginename", "Google"); user_pref("browser.search.selectedEngine", "Google"); user_pref("browser.search.order.1", "Google"); user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q="); user_pref("browser.search.suggest.enabled", true); user_pref("browser.search.useDBForOrder", true); ProfilePath: C:\Users\Ramcom\AppData\Roaming\Mozilla\Firefox\Profiles\n2spnneo.default ---- Lines C:\Users\Ramcom\AppData\Roaming\Mozilla\Firefox\Profiles\n2spnneo.default\extensions\ffxtlbr@delta.com removed from prefs.js ---- ---- Lines C:\Users\Ramcom\AppData\Roaming\Mozilla\Firefox\Profiles\n2spnneo.default\extensions\ffxtlbr@delta.com modified from prefs.js ---- ---- Lines C:\Users\Ramcom\AppData\Roaming\Mozilla\Firefox\Profiles\n2spnneo.default\extensions\ffxtlbr@delta.com removed from user.js ---- ---- Lines C:\Users\Ramcom\AppData\Roaming\Mozilla\Firefox\Profiles\n2spnneo.default\extensions\firefox@tvunetworks.com removed from prefs.js ---- ---- Lines C:\Users\Ramcom\AppData\Roaming\Mozilla\Firefox\Profiles\n2spnneo.default\extensions\firefox@tvunetworks.com modified from prefs.js ---- ---- Lines C:\Users\Ramcom\AppData\Roaming\Mozilla\Firefox\Profiles\n2spnneo.default\extensions\firefox@tvunetworks.com removed from user.js ---- ---- Lines BabylonToolbar removed from prefs.js ---- user_pref("extensions.BabylonToolbar_i.newTab", true); user_pref("extensions.BabylonToolbar_i.newTabUrl", "http://www.delta-search.com/?affID=119816&babsrc=NT_ss&mntrId=d0666b9800000000000000215c4e67d3"); ---- Lines BabylonToolbar modified from prefs.js ---- ---- Lines BabylonToolbar removed from user.js ---- ---- Lines ask.com removed from prefs.js ---- ---- Lines ask.com modified from prefs.js ---- ---- Lines ask.com removed from user.js ---- ---- Lines search.com removed from prefs.js ---- ---- Lines search.com modified from prefs.js ---- ---- Lines search.com removed from user.js ---- ---- FireFox user.js and prefs.js backups ---- user_20133009_1846_.backup prefs_20133009_1846_.backup ==== Registry Fix Code ====================== Windows Registry Editor Version 5.00 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{78F3A323-798E-4AEA-9A57-88F4B05FD5DD}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ccec60fc-2608-4e58-9659-3ffc159e8ea9}] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "atmxmld9"=- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"=- [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "bProtector Start Page"=- [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "bProtectorDefaultScope"=- ==== Deleting Files \ Folders ====================== "C:\Program Files\vShare.tv plugin" not found "C:\Program Files\Delta" not found "C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml" deleted "C:\Users\Ramcom\AppData\Roaming\Mozilla\Firefox\Profiles\n2spnneo.default\searchplugins\delta.xml" deleted "C:\Users\Ramcom\AppData\Roaming\Mozilla\Firefox\Profiles\n2spnneo.default\searchplugins\askcom.xml" deleted "C:\Users\Ramcom\AppData\Roaming\Generic" deleted "C:\Users\Ramcom\AppData\Roaming\.ptbt1" deleted "C:\ProgramData\Fruit" deleted "C:\Program Files\Mozilla Firefox\searchplugins\babylon.xml" deleted "C:\Program Files\Mozilla Firefox\Plugins\npvsharetvplg.dll" deleted "C:\ProgramData\UpdaterLog.txt" deleted "C:\ProgramData\SPL144.tmp" deleted "C:\ProgramData\SPL3916.tmp" deleted "C:\ProgramData\SPL3F9F.tmp" deleted "C:\ProgramData\SPL7593.tmp" deleted "C:\ProgramData\SPLA801.tmp" deleted "C:\ProgramData\SPLBB9.tmp" deleted "C:\ProgramData\SPLCA7F.tmp" deleted "C:\Users\Ramcom\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data" deleted "C:\Users\Ramcom\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences" deleted "C:\Windows\tasks\ParetoLogic Registration.job" deleted "C:\Windows\system32\Tasks\BrowserProtect" deleted "C:\Users\Ramcom\AppData\Roaming\Mozilla\Firefox\Profiles\n2spnneo.default\searchplugins\askcom.xml" deleted "C:\Users\Ramcom\AppData\Roaming\Mozilla\Firefox\Profiles\n2spnneo.default\bProtector_extensions.rdf" deleted "C:\Users\Ramcom\AppData\Roaming\Mozilla\Firefox\Profiles\n2spnneo.default\bProtector_extensions.sqlite" deleted "C:\Users\Ramcom\AppData\Roaming\Mozilla\Firefox\Profiles\n2spnneo.default\bprotector_prefs.js" deleted "C:\Users\Ramcom\AppData\Roaming\tmp" deleted "C:\Users\Ramcom\AppData\Roaming\FMZilla" deleted "C:\Users\Ramcom\AppData\Roaming\Samsung" deleted "C:\Program Files\SHOUTcast Radio Toolbar" deleted "C:\Program Files\BS.Player ControlBar" deleted "C:\Programs\PartyGaming.Net" deleted "C:\Program Files\Mozilla Firefox\extensions\{F0E1168A-B4B5-484C-B77E-0D28E6B64096}" deleted "C:\Users\Ramcom\AppData\Roaming\Mozilla\Firefox\Profiles\n2spnneo.default\extensions\{3697b17c-b572-4862-a5e6-7f922c0f3403}" deleted "C:\found.003" deleted "C:\found.002" deleted "C:\Program Files\GUMB481.tmp" deleted "C:\Program Files\FoxTabPDFConverter" deleted "C:\found.000" deleted "C:\found.001" deleted "C:\found.002" deleted "C:\found.003" deleted "C:\Users\Ramcom\AppData\Roaming\VshareComplete" deleted "C:\Users\Ramcom\AppData\Roaming\Systweak" deleted "C:\Users\Ramcom\AppData\Roaming\OpenCandy" deleted "C:\ProgramData\InstallMate" deleted "C:\Users\Ramcom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserProtect" deleted ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== 2013-09-29 17:36:45 34ACBBE218F3B6F1A73E983CD42C4762 387158333 ----a-w- C:\Windows\MEMORY.DMP ====== C:\Users\Ramcom\AppData\Local\Temp ==== 2013-09-28 12:33:29 F509E86EFCBA242200E4C2AFF917D2FC 38912 ----a-w- C:\Users\Ramcom\AppData\Local\Temp\CProgram FilesOpera\gstreamer\plugins\gstwaveform.dll 2013-09-28 12:33:29 D7139E04B44274C71B3C1C5DBF3F5F52 835584 ----a-w- C:\Users\Ramcom\AppData\Local\Temp\CProgram FilesOpera\gstreamer\gstreamer.dll 2013-09-28 12:33:29 C400199CE866C00A806B0EEBB9E5326C 73728 ----a-w- C:\Users\Ramcom\AppData\Local\Temp\CProgram FilesOpera\gstreamer\plugins\gstwavparse.dll 2013-09-28 12:33:29 942F3F023712605AF4B0BCC87111046B 201728 ----a-w- C:\Users\Ramcom\AppData\Local\Temp\CProgram FilesOpera\mapi\OperaMAPI.dll 2013-09-28 12:33:29 8331A35D0797249A88A3DEED26AD1F59 16192864 ----a-w- C:\Users\Ramcom\AppData\Local\Temp\CProgram FilesOpera\opera.dll 2013-09-28 12:33:29 0ACDD4EC0A2A2944EEDBD83815226FE5 101888 ----a-w- C:\Users\Ramcom\AppData\Local\Temp\CProgram FilesOpera\gstreamer\plugins\gstwebmdec.dll 2013-09-28 12:33:28 E39BAE9F813632AC6B434D6BC01A1A6C 93696 ----a-w- C:\Users\Ramcom\AppData\Local\Temp\CProgram FilesOpera\gstreamer\plugins\gstaudioconvert.dll 2013-09-28 12:33:28 D48156B954D8E8974D35CA27628FA623 57344 ----a-w- C:\Users\Ramcom\AppData\Local\Temp\CProgram FilesOpera\gstreamer\plugins\gstautodetect.dll 2013-09-28 12:33:28 747F73CD83367B287899CE3A41DD04F0 158208 ----a-w- C:\Users\Ramcom\AppData\Local\Temp\CProgram FilesOpera\gstreamer\plugins\gstffmpegcolorspace.dll 2013-09-28 12:33:28 50E5B61B4BDE3CB0335801F57C7BAE40 312832 ----a-w- C:\Users\Ramcom\AppData\Local\Temp\CProgram FilesOpera\gstreamer\plugins\gstoggdec.dll 2013-09-28 12:33:28 4C938B92F6E389CC22BDE03BE140F43C 62976 ----a-w- C:\Users\Ramcom\AppData\Local\Temp\CProgram FilesOpera\gstreamer\plugins\gstdecodebin2.dll 2013-09-28 12:33:28 4125C4D8D5F0DB304B42D0F0AA9E9485 96256 ----a-w- C:\Users\Ramcom\AppData\Local\Temp\CProgram FilesOpera\gstreamer\plugins\gstcoreplugins.dll 2013-09-28 12:33:28 330922836B5424869DB8597F48CFE1B3 94208 ----a-w- C:\Users\Ramcom\AppData\Local\Temp\CProgram FilesOpera\gstreamer\plugins\gstaudioresample.dll 2013-09-28 12:33:28 2880FF5DAABA68431C9CF056786A10FB 67072 ----a-w- C:\Users\Ramcom\AppData\Local\Temp\CProgram FilesOpera\gstreamer\plugins\gstdirectsound.dll 2013-09-28 12:33:28 1C9B45E87528B8BB8CFA884EA0099A85 2106216 ----a-w- C:\Users\Ramcom\AppData\Local\Temp\CProgram FilesOpera\D3DCompiler_43.dll 2013-09-28 12:33:27 FFC67949EF7C2BF307ED91B293581DD2 879456 ----a-w- C:\Users\Ramcom\AppData\Local\Temp\CProgram FilesOpera\opera.exe 2013-09-28 12:33:27 EB788245CC6675F57F6B7D010F2A8176 1197920 ----a-w- C:\Users\Ramcom\AppData\Local\Temp\CProgram FilesOpera\updatechecker\opera_autoupdate.exe 2013-09-28 12:33:22 C5520FEB7AD5F6E3692B6DE41F6A1A27 879456 ----a-w- C:\Users\Ramcom\AppData\Local\Temp\CProgram FilesOpera\OperaUpgrader.exe 2013-09-28 12:33:22 00849D0BA007AE8ECBC3EA32846DFF97 13156112 ----a-w- C:\Users\Ramcom\AppData\Local\Temp\CProgram FilesOpera\Opera-12.16-1860.i386.autoupdate.exe ====== Java Cache ===== ====== C:\Windows\system32 ===== ====== C:\Windows\system32\drivers ===== 2013-09-28 12:46:43 4470E3C1E0C3378E4CAB137893C12C3A 22856 ----a-w- C:\Windows\System32\drivers\mbam.sys ====== C:\Windows\Tasks ====== ====== C:\Windows\Temp ====== ======= C:\Program Files ===== 2013-09-30 13:05:21 -------- d-----w- C:\Program Files\trend micro ======= C: ===== ====== C:\Users\Ramcom\AppData\Roaming ====== ====== C:\Users\Ramcom ====== 2013-09-30 16:35:51 EBBB7499429AF3F8645E19EDAF40EE08 1262592 ----a-w- C:\Users\Ramcom\Desktop\Z-Analyse.exe 2013-09-30 13:18:23 4754539F6D178B84DE28DBCBE7CDA23A 2092792 ----a-w- C:\Users\Ramcom\Downloads\avira_free_antivirus.exe 2013-09-30 13:04:45 69CA82A7482A00D8EE063D2B97FC4338 781383 ----a-w- C:\Users\Ramcom\Downloads\RSIT (1).exe 2013-09-30 13:04:45 4460C6E048EF955C9CDF19458AFF98A8 131918888 ----a-w- C:\Users\Ramcom\Downloads\avast_free_antivirus_setup (1).exe 2013-09-30 13:03:40 69CA82A7482A00D8EE063D2B97FC4338 781383 ----a-w- C:\Users\Ramcom\Downloads\RSIT.exe 2013-09-29 16:51:11 17C8BF490CA207D06EF2A0EC84F47191 1042066 ----a-w- C:\Users\Ramcom\Downloads\adwcleaner (1).exe 2013-09-29 16:09:21 17C8BF490CA207D06EF2A0EC84F47191 1042066 ----a-w- C:\Users\Ramcom\Downloads\adwcleaner.exe ====== C: exe-files == 2013-09-30 13:05:21 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\Ramcom.exe === C: other files == 2013-09-30 16:34:34 AEA2C9F12478F48227F4D7C3606BBB1C 544 ----a-w- C:\$Recycle.Bin\S-1-5-21-1166321317-2856568384-716361271-1000\$I3A6ARW.zip 2013-09-30 16:34:26 0BE568FD1E7D6C6D64D2272649F5C716 111 ----a-w- C:\Users\Ramcom\AppData\Local\Temp\scripttest.vbs 2013-09-30 16:28:45 A601B58B1F4235E606ED9F36F75C458C 2053967 ----a-w- C:\$Recycle.Bin\S-1-5-21-1166321317-2856568384-716361271-1000\$R3A6ARW.zip 2013-09-28 12:46:43 4470E3C1E0C3378E4CAB137893C12C3A 22856 ----a-w- C:\Windows\System32\drivers\mbam.sys 2013-09-28 12:33:24 C10E20FCB710BB1EC6034DDB681262D8 1444127 ----a-w- C:\Users\Ramcom\AppData\Local\Temp\CProgram FilesOpera\skin\standard_skin.zip 2013-09-28 12:33:24 4A72C050936BF35B374C817924DB9F0E 241062 ----a-w- C:\Users\Ramcom\AppData\Local\Temp\CProgram FilesOpera\locale\en\en.zip ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run] "WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter" "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /detectMem" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run] "WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter" "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /detectMem" [HKEY_USERS\S-1-5-21-1166321317-2856568384-716361271-1000\Software\Microsoft\Windows\CurrentVersion\Run] "Akamai NetSession Interface"="C:\Users\Ramcom\AppData\Local\Akamai\netsession_win.exe" "ISUSPM"="C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe -scheduler" "Google Update"="C:\Users\Ramcom\AppData\Local\Google\Update\GoogleUpdate.exe /c" "Facebook Update"="C:\Users\Ramcom\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver" "ehTray.exe"="C:\Windows\ehome\ehTray.exe" [HKEY_USERS\S-1-5-21-1166321317-2856568384-716361271-1004\Software\Microsoft\Windows\CurrentVersion\Run] "ooVoo"="C\ooVoo.exe /minimized" "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /detectMem" [HKEY_USERS\S-1-5-21-1166321317-2856568384-716361271-1004\Software\Microsoft\Windows\CurrentVersion\Runonce] "BurnImage"="regsvr32 /s c:\windows\IMAPIShellExt.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "OEM02Mon.exe"="C:\Windows\OEM02Mon.exe" "Apoint"="C:\Program Files\DellTPad\Apoint.exe" "Windows Defender"="%ProgramFiles%\Windows Defender\MSASCui.exe -hide" "SigmatelSysTrayApp"="%ProgramFiles%\SigmaTel\C-Major Audio\WDM\sttray.exe" "PCMService"="C:\Program Files\Dell\MediaDirect\PCMService.exe" "lxeamon.exe"="C:\Program Files\Lexmark S300-S400 Series\lxeamon.exe" "IAAnotif"="C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Akamai NetSession Interface"="C:\Users\Ramcom\AppData\Local\Akamai\netsession_win.exe" "ISUSPM"="C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe -scheduler" "Google Update"="C:\Users\Ramcom\AppData\Local\Google\Update\GoogleUpdate.exe /c" "Facebook Update"="C:\Users\Ramcom\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver" "ehTray.exe"="C:\Windows\ehome\ehTray.exe" ==== Startup Registry Disabled ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Adobe ARM] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Adobe ARM" "hkey"="HKLM" "command"="\"C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Adobe Reader Speed Launcher] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Adobe Reader Speed Launcher" "hkey"="HKLM" "command"="\"C:\\Program Files\\Adobe\\Reader 9.0\\Reader\\Reader_sl.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\AdobeAAMUpdater-1.0] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="AdobeAAMUpdater-1.0" "hkey"="HKLM" "command"="\"C:\\Program Files\\Common Files\\Adobe\\OOBE\\PDApp\\UWA\\UpdaterStartupUtility.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\AdobeCS6ServiceManager] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="AdobeCS6ServiceManager" "hkey"="HKLM" "command"="\"C:\\Program Files\\Common Files\\Adobe\\CS6ServiceManager\\CS6ServiceManager.exe\" -launchedbylogin" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\APSDaemon] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="APSDaemon" "hkey"="HKLM" "command"="\"C:\\Program Files\\Common Files\\Apple\\Apple Application Support\\APSDaemon.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\DAEMON Tools Lite] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="DAEMON Tools Lite" "hkey"="HKCU" "command"="\"C:\\Program Files\\DAEMON Tools Lite\\DTLite.exe\" -autorun" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\DivX Download Manager] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="DivX Download Manager" "hkey"="HKLM" "command"="\"C:\\Program Files\\DivX\\DivX Plus Web Player\\DDmService.exe\" start" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\DivXUpdate] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="DivXUpdate" "hkey"="HKLM" "command"="\"C:\\Program Files\\DivX\\DivX Update\\DivXUpdate.exe\" /CHECKNOW" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ECenter] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="ECenter" "hkey"="HKLM" "command"="C:\\Dell\\E-Center\\EULALauncher.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\EzPrint] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="EzPrint" "hkey"="HKLM" "command"="\"C:\\Program Files\\Lexmark S300-S400 Series\\ezprint.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Google Desktop Search] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Google Desktop Search" "hkey"="HKLM" "command"="\"C:\\Program Files\\Google\\Google Desktop Search\\GoogleDesktop.exe\" /startup" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\HP Software Update] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="HP Software Update" "hkey"="HKLM" "command"="C:\\Program Files\\HP\\HP Software Update\\HPWuSchd2.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Messenger (Yahoo!)] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Messenger (Yahoo!)" "hkey"="HKCU" "command"="\"C:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe\" -quiet" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\MsnMsgr] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="MsnMsgr" "hkey"="HKCU" "command"="\"C:\\Program Files\\Windows Live\\Messenger\\MsnMsgr.Exe\" /background" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\PSQLLauncher] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="PSQLLauncher" "hkey"="HKLM" "command"="\"C:\\Program Files\\Fingerprint Reader Suite\\launcher.exe\" /startup" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\QuickTime Task] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="QuickTime Task" "hkey"="HKLM" "command"="\"C:\\Program Files\\QuickTime\\QTTask.exe\" -atboottime" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SunJavaUpdateSched] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="SunJavaUpdateSched" "hkey"="HKLM" "command"="\"C:\\Program Files\\Common Files\\Java\\Java Update\\jusched.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Windows Mobile Device Center] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Windows Mobile Device Center" "hkey"="HKLM" "command"="%windir%\\WindowsMobile\\wmdc.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk] "path"="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\Bluetooth.lnk" "backup"="C:\\Windows\\pss\\Bluetooth.lnk.CommonStartup" "backupExtension"=".CommonStartup" "command"="C:\\PROGRA~1\\WIDCOMM\\BLUETO~1\\BTTray.exe " "item"="Bluetooth" ==== Startup Folders ====================== 2008-08-21 00:00:10 1835 ----a-w- C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk 2008-08-21 00:00:10 1835 ----a-w- C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk 2011-12-16 21:59:19 1815 ----a-w- C:\Users\Ramcom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk 2013-06-18 20:05:46 992 ----a-w- C:\Users\Ramcom\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk 2013-07-13 16:27:51 1835 ----a-w- C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk ==== Task Scheduler Jobs ====================== C:\Windows\tasks\Adobe Flash Player Updater.job --a------ [undetermined Task] C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1166321317-2856568384-716361271-1000Core.job --a------ C:\Users\Ramcom\AppData\Local\Facebook\Update\FacebookUpdate.exe [12/07/2012 00:19] C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1166321317-2856568384-716361271-1000UA.job --a------ C:\Users\Ramcom\AppData\Local\Facebook\Update\FacebookUpdate.exe [12/07/2012 00:19] C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [18/05/2010 21:11] C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [18/05/2010 21:11] C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1166321317-2856568384-716361271-1000Core1cc90ae648ab3b3.job --a------ C:\Users\Ramcom\AppData\Local\Google\Update\GoogleUpdate.exe [21/09/2009 20:59] C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1166321317-2856568384-716361271-1000UA.job --a------ C:\Users\Ramcom\AppData\Local\Google\Update\GoogleUpdate.exe [21/09/2009 20:59] C:\Windows\tasks\PCDoctorBackgroundMonitorTask.job --a------ C:\Program Files\Dell Support Center\uaclauncher.exe [06/10/2011 22:31] C:\Windows\tasks\SystemToolsDailyTest.job --a------ C:\Program Files\Dell Support Center\uaclauncher.exe [06/10/2011 22:31] C:\Windows\tasks\User_Feed_Synchronization-{3B37E3E5-53F3-412E-B5FE-E65FE9181644}.job --ah----- C:\Windows\system32\msfeedssync.exe [16/12/2011 23:43] ==== Firefox Extensions ====================== ProfilePath: C:\Users\Ramcom\AppData\Roaming\Mozilla\Firefox\Profiles\n2spnneo.default - Delta Toolbar - %ProfilePath%\extensions\ffxtlbr@delta.com - TVU Web Player - %ProfilePath%\extensions\firefox@tvunetworks.com - FoxyProxy Basic - %ProfilePath%\extensions\foxyproxy@eric.h.jung - Microsoft .NET Framework Assistant - %ProfilePath%\extensions\{20a82645-c095-46ed-80e3-08825760534b} - Greasemonkey - %ProfilePath%\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781} - vshare Add-On - %ProfilePath%\extensions\{dd05fd3d-18df-4ce4-ae53-e795339c5f01}.xpi AppDir: C:\Program Files\Mozilla Firefox - Default - %AppDir%\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ==== Firefox Plugins ====================== Profilepath: C:\Users\Ramcom\AppData\Roaming\Mozilla\Firefox\Profiles\n2spnneo.default ABCB4A6EAB701C629378255ABCB308E5 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll - Java Platform SE 7 U25 D7324EB1EDCB8990F8522DE0311359E9 - C:\Windows\system32\npDeployJava1.dll - Java Deployment Toolkit 7.0.250.17 7550FC1ADE982582D5920BEA6430E3D4 - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll - Google Earth Plugin 667CB7D2CAF917608421E5250462C0AA - C:\Program Files\Mozilla Firefox\plugins\nppdf32.dll - Adobe Acrobat 0B31B0F8FA99CFD009C8FBEA9E20C9DE - C:\Users\Ramcom\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll - Facebook Video Calling Plugin C517E5EA7CEE783F3681F62D2A362E5B - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll - Windows Live? Photo Gallery 4D653377CB26B03A8EEA5E494DA98B8A - C:\Program Files\Nitro PDF\Reader 2\npnitromozilla.dll - Nitro PDF Plug-In A66A630E101E7B5CF0946F34935660CC - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll - DivX Plus Web Player CF381F81FA2A050A8EA73BAB995F3002 - C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll - QuickTime Plug-in 7.7.1 D72CC3C02764E28C691DBA9751FF8A86 - C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll - QuickTime Plug-in 7.7.1 BC405F582CAAC78AEDE4488E8A259FA1 - C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll - QuickTime Plug-in 7.7.1 C560D8A34A372EE10235938FD2D34CC3 - C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll - QuickTime Plug-in 7.7.1 AF28C98E0897F0475833D02D3CCFFF77 - C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll - QuickTime Plug-in 7.7.1 CABA1A399C7C7471DEBA73CB3BA5AADB - C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll - QuickTime Plug-in 7.7.1 1D10BD2720963F6B6DB25ACB1F5CF8E9 - C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll - QuickTime Plug-in 7.7.1 F9AE1AD5CC7F73827B64A05A44902B07 - C:\Program Files\Mozilla Firefox\plugins\npwachk.dll - Winamp Application Detector B938C1AE3ADCE166190895685B0BEB0D - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll - DivX VOD Helper Plug-in 32A783FE8D78DB883368CA851E274DBE - C:\Windows\system32\Adobe\Director\np32dsw.dll - Shockwave for Director / Shockwave for Director 075394F75303286C2FA91908CB781609 - C:\Program Files\Microsoft\Office Live\npOLW.dll - Microsoft Office Live Plug-in for Firefox / Microsoft Office Live Plug-in for Firefox 89DEEFEFFF3B30A0D76627CEEADD6470 - C:\Windows\system32\NpFv501.dll - Flatcast Viewer Plugin 5.0.356 AB87EEFFD18F2BAAFC274E7075EA6C67 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll - Windows Presentation Foundation / Windows Presentation Foundation 4B0E1AD13E44536BFA0D995E474C3EFC - C:\Program Files\Mozilla Firefox\plugins\npunagi2.dll - AOL Media Playback Plugin 99F97C9FE748C37528C338A423577FCB - C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll - Microsoft® Windows Media Player Firefox Plugin E627C000BBB9F3148A1522AF1D6663CC - C:\Windows\system32\NpFv415.dll - Flatcast CF381F81FA2A050A8EA73BAB995F3002 - C:\Program Files\QuickTime\Plugins\npqtplugin7.dll - QuickTime Plug-in 7.7.1 D72CC3C02764E28C691DBA9751FF8A86 - C:\Program Files\QuickTime\Plugins\npqtplugin6.dll - QuickTime Plug-in 7.7.1 BC405F582CAAC78AEDE4488E8A259FA1 - C:\Program Files\QuickTime\Plugins\npqtplugin5.dll - QuickTime Plug-in 7.7.1 C560D8A34A372EE10235938FD2D34CC3 - C:\Program Files\QuickTime\Plugins\npqtplugin4.dll - QuickTime Plug-in 7.7.1 AF28C98E0897F0475833D02D3CCFFF77 - C:\Program Files\QuickTime\Plugins\npqtplugin3.dll - QuickTime Plug-in 7.7.1 CABA1A399C7C7471DEBA73CB3BA5AADB - C:\Program Files\QuickTime\Plugins\npqtplugin2.dll - QuickTime Plug-in 7.7.1 1D10BD2720963F6B6DB25ACB1F5CF8E9 - C:\Program Files\QuickTime\Plugins\npqtplugin.dll - QuickTime Plug-in 7.7.1 667CB7D2CAF917608421E5250462C0AA - C:\Program Files\Adobe\Reader 9.0\Reader\browser\nppdf32.dll - Adobe Acrobat 667CB7D2CAF917608421E5250462C0AA - C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll - Adobe Acrobat 67077DC01744DC010AC978B9885A3D08 - C:\Program Files\Nitro PDF\Reader 2\npdf.dll - Nitro PDF Library DFCAB29E8FD38F95650CC1E203E8D318 - C:\Windows\system32\npmproxy.dll - Microsoft® Windows® Operating System ==== Chrome Look ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions dlfienamagdnkekbbbocojppncdambda - C:\Program Files\VshareComplete\chrome\VshareCompleteChrome.crx[] eooncjejnppfjjklapaamhcdmjbilmde - C:\Users\Ramcom\AppData\Roaming\Delta\delta.crx[] kpionmjnkbpcdpcflammlgllecmejgjj - C:\Program Files\vShare.tv plugin\vshareplg.crx[] nneajnkjbffgblleaoojgaacokifdkhm - C:\Program Files\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx[12/12/2011 15:13] pgafcinpmmpklohkojmllohd****efph - C:\ProgramData\BrowserProtect\2.6.1095.52\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.crx[] 8 Ball Pool - Ramcom - Default\Extensions\bhljoejlbnebcpflalenbmpnanjbikof Last updated at time on date - Ramcom - Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb Pixlr-o-matic - Ramcom - Default\Extensions\ehcibdjmpjlekgjhepbfmenfppliikcj Google Calendar - Ramcom - Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn 3D Bowling - Ramcom - Default\Extensions\gemohgpikgjbgmdfbfjdailocichgbjm eBuddy Chat - Ramcom - Default\Extensions\giacidpcfkbjnapjaklcdchjmmnajmpm AdBlock - Ramcom - Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom FlyOrDie Backgammon - Ramcom - Default\Extensions\jjajfipfoldnngmddjicblncidmijama Stencil Graffiti Creator - Ramcom - Default\Extensions\kamlhhebdhbhbnekgdbpfheacleljimo Autodesk Homestyler - Ramcom - Default\Extensions\kdmmkfaghgcicheaimnpffeeekheafkb Nokia Maps 3D browser plugin - Ramcom - Default\Extensions\lilolcmoknakbgobboojdpbnggkhkibk Chat Undetected - Ramcom - Default\Extensions\llmfehnfojojfamjjijjciopbjimcffa WGT Golf Game - Ramcom - Default\Extensions\mpedbpkelbhcbkdaglillalioeeekbpb Chrome In-App Payments service - Ramcom - Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda 20-20 3D Viewer for IKEA - Ramcom - Default\Extensions\nnbjlpbcjbhgeeloohnpbcfblhnkhffm DivX Plus Web Player HTML5 \u003Cvideo\u003E - Ramcom - Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm Psykopaint - Ramcom - Default\Extensions\pgjchkcfmigkkhedgjedmffdepgmpfil ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.be/" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://startsear.ch/?aff=1&cf=c27e32ca-07d0-11e1-8880-001fe2d9d939" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{40439b93-f815-4122-8073-d03bed94c303}" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{40439b93-f815-4122-8073-d03bed94c303}] not found New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.be/" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC" {0B4A10D1-FBD6-451d-BFDA-F03252B05984} Unknown Url="Not_Found" {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} Unknown Url="Not_Found" {19FBAABA-7590-4C80-AB64-440D92CF6512} Unknown Url="Not_Found" {483830EE-A4CD-4b71-B0A3-3D82E62A6909} Unknown Url="Not_Found" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}" {70D46D94-BF1E-45ED-B567-48701376298E} Google Desktop Url="http://127.0.0.1:4664/search&s=cUEpBlw88RklbkTLLgiYBpmxuZY?q={searchTerms}" ==== Reset Google Chrome ====================== C:\Users\Ramcom\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully C:\Users\Ramcom\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-1166321317-2856568384-716361271-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0B4A10D1-FBD6-451d-BFDA-F03252B05984} deleted successfully HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} deleted successfully HKEY_USERS\S-1-5-21-1166321317-2856568384-716361271-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} deleted successfully HKEY_USERS\S-1-5-21-1166321317-2856568384-716361271-1000\Software\Microsoft\Internet Explorer\SearchScopes\{19FBAABA-7590-4C80-AB64-440D92CF6512} deleted successfully HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4b71-B0A3-3D82E62A6909} deleted successfully HKEY_USERS\S-1-5-21-1166321317-2856568384-716361271-1000\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4b71-B0A3-3D82E62A6909} deleted successfully ==== Deleting CLSID Registry Values ====================== ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\dlfienamagdnkekbbbocojppncdambda deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\kpionmjnkbpcdpcflammlgllecmejgjj deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\pgafcinpmmpklohkojmllohd****efph deleted successfully ==== HijackThis Entries ====================== R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.be/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer aangeboden door Dell R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local;<local> R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O2 - BHO: Lexmark Werkbalk - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll O2 - BHO: Lexmark - {D2C5E510-BE6D-42CC-9F61-E4F939078474} - C:\Program Files\Lexmark Printable Web\bho.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll O3 - Toolbar: Lexmark Werkbalk - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll O4 - HKLM\..\Run: [OEM02Mon.exe] C:\Windows\OEM02Mon.exe O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [sigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\sttray.exe O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\MediaDirect\PCMService.exe" O4 - HKLM\..\Run: [lxeamon.exe] "C:\Program Files\Lexmark S300-S400 Series\lxeamon.exe" O4 - HKLM\..\Run: [iAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\Ramcom\AppData\Local\Akamai\netsession_win.exe" O4 - HKCU\..\Run: [iSUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -scheduler O4 - HKCU\..\Run: [Google Update] "C:\Users\Ramcom\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Ramcom\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-21-1166321317-2856568384-716361271-1004\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'UpdatusUser') O4 - HKUS\S-1-5-21-1166321317-2856568384-716361271-1004\..\RunOnce: [burnImage] regsvr32 /s c:\windows\IMAPIShellExt.dll (User 'UpdatusUser') O4 - Startup: Dell Dock.lnk = C:\Program Files\Dell\DellDock\DellDock.exe O4 - Startup: Dropbox.lnk = Ramcom\AppData\Roaming\Dropbox\bin\Dropbox.exe O8 - Extra context menu item: &SHOUTcast Search - C:\ProgramData\SHOUTcast Radio Toolbar\ieToolbar\resources\en-US\local\search.html O8 - Extra context menu item: Afbeelding verzenden naar &Bluetooth-apparaat... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Pagina verzenden naar &Bluetooth-apparaat... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra 'Tools' menuitem: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab O16 - DPF: {4A85DBE0-BFB2-4119-8401-186A7C6EB653} - http://messenger.zone.msn.com/MessengerGamesContent/GameContent/nl/mjss/MJSS.cab109791.cab O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/resources/VistaMSNPUpldnl-be.cab O16 - DPF: {58EF1388-AF07-4D13-A069-D107671B8819} - http://www.gamegarden.net/game/ggsecure.cab O16 - DPF: {8CFCF42C-1C64-47D6-AEEC-F9D001832ED3} (DellSystem.Scanner) - http://xserv.dell.com/DellDriverScanner/DellSystem.CAB O16 - DPF: {9C23D886-43CB-43DE-B2DB-112A68D7E10A} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader2.cab O16 - DPF: {A672558F-A878-4D5A-A921-627C091CEB60} (Flatcast Producer 4.15) - http://www.flatcast-data.com/data/objects/NpFp415.dll O16 - DPF: {C1F8FC10-E5DB-4112-9DBF-6C3FF728D4E3} (DellSystemLite.Scanner) - http://support.dell.com/systemprofiler/DellSystemLite.CAB O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\MP3 Skype Recorder\Skype4COM.dll O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe O23 - Service: Dock Login Service (DockLoginService) - Stardock Corporation - C:\Program Files\Dell\DellDock\DockLogin.exe O23 - Service: Intel® PROSet/Wireless Event Log (EvtEng) - Intel® Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe O23 - Service: FLEXnet Licensing Service - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Google Desktop Manager 5.9.1005.12335 (GoogleDesktopManager-051210-111108) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: lxeaCATSCustConnectService - Lexmark International, Inc. - C:\Windows\system32\spool\DRIVERS\W32X86\3\\lxeaserv.exe O23 - Service: lxea_device - - C:\Windows\system32\lxeacoms.exe O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: MySql - Unknown owner - C:\mysql\bin\mysqld-nt.exe O23 - Service: NitroPDFReaderDriverCreatorReadSpool2 (NitroReaderDriverReadSpool2) - Nitro PDF Software - C:\Program Files\Nitro PDF\Reader 2\NitroPDFReaderDriverService2.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe O23 - Service: Intel® PROSet/Wireless Registry Service (RegSrvc) - Intel® Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - Unknown owner - C:\Program Files\Dell Support Center\bin\sprtsvc.exe (file missing) ==== Empty IE Cache ====================== C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Ramcom\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Ramcom\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot ==== Empty FireFox Cache ====================== No FireFox Cache found ==== Empty Chrome Cache ====================== C:\Users\Ramcom\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully C:\Users\Ramcom\AppData\Local\Google\Chrome\User Data\Default\Application Cache\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\Ramcom\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Users\Ramcom\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found ==== EOF on ma 30/09/2013 at 18:58:43,30 ======================