Ga naar inhoud

ippa

Lid
  • Items

    6
  • Registratiedatum

  • Laatst bezocht

Berichten die geplaatst zijn door ippa

  1. Malwarebytes log hierbij:

    Malwarebytes Anti-Malware (-evaluatieversie-) 1.75.0.1300

    www.malwarebytes.org

    Databaseversie: v2013.09.16.03

    Windows 7 Service Pack 1 x86 NTFS

    Internet Explorer 10.0.9200.16686

    Jean :: JEAN-THINK [administrator]

    Bescherming: Ingeschakeld

    16/09/2013 14:13:32

    mbam-log-2013-09-16 (14-13-32).txt

    Scan type: Snelle scan

    Ingeschakelde scan opties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM

    Uitgeschakelde scan opties: P2P

    Objecten gescand: 215260

    Verstreken tijd: 4 minuut/minuten, 28 seconde(n)

    Geheugenprocessen gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Geheugenmodulen gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Registersleutels gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Registerwaarden gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Registerdata gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Mappen gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Bestanden gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    (einde)

  2. Gevraagde log:

    # AdwCleaner v3.004 - Report created 16/09/2013 at 12:08:34

    # Updated 15/09/2013 by Xplode

    # Operating System : Windows 7 Professional Service Pack 1 (32 bits)

    # Username : Jean - JEAN-THINK

    # Running from : C:\Users\Jean\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GX0XVIGM\adwcleaner.exe

    # Option : Clean

    ***** [ Services ] *****

    ***** [ Files / Folders ] *****

    Folder Deleted : C:\Users\Jean\AppData\Local\AVG Secure Search

    Folder Deleted : C:\Users\Jean\AppData\LocalLow\WiseConvert

    Folder Deleted : C:\Users\Jean\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\@themediafinder.com

    ***** [ Shortcuts ] *****

    ***** [ Registry ] *****

    Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{336D0C35-8A85-403A-B9D2-65C292C39087}]

    Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]

    Key Deleted : HKLM\SOFTWARE\Classes\1ClicktorrentFile

    Key Deleted : HKLM\SOFTWARE\Classes\1ClicktorrentFile1

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL

    Key Deleted : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe

    Key Deleted : HKLM\SOFTWARE\Classes\esrv.IncredibarESrvc

    Key Deleted : HKLM\SOFTWARE\Classes\esrv.IncredibarESrvc.1

    Key Deleted : HKLM\SOFTWARE\Classes\f

    Key Deleted : HKLM\SOFTWARE\Classes\funmoods.dskBnd

    Key Deleted : HKLM\SOFTWARE\Classes\funmoods.dskBnd.1

    Key Deleted : HKLM\SOFTWARE\Classes\funmoods.funmoodsHlpr

    Key Deleted : HKLM\SOFTWARE\Classes\funmoods.funmoodsHlpr.1

    Key Deleted : HKLM\SOFTWARE\Classes\funmoodsApp.appCore

    Key Deleted : HKLM\SOFTWARE\Classes\funmoodsApp.appCore.1

    Key Deleted : HKLM\SOFTWARE\Classes\I

    Key Deleted : HKLM\SOFTWARE\Classes\Incredibar.dskBnd

    Key Deleted : HKLM\SOFTWARE\Classes\Incredibar.dskBnd.1

    Key Deleted : HKLM\SOFTWARE\Classes\Incredibar.IncredibarHlpr

    Key Deleted : HKLM\SOFTWARE\Classes\Incredibar.IncredibarHlpr.1

    Key Deleted : HKLM\SOFTWARE\Classes\IncredibarApp.appCore

    Key Deleted : HKLM\SOFTWARE\Classes\IncredibarApp.appCore.1

    Key Deleted : HKLM\SOFTWARE\Classes\MF

    Key Deleted : HKLM\SOFTWARE\Classes\oneclick

    Key Deleted : HKLM\SOFTWARE\Classes\oneclickmg

    Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap

    Key Deleted : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol

    Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi

    Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1

    Key Deleted : HKLM\SOFTWARE\Classes\speedupmypc

    Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE

    Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASAPI32

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASMANCS

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASAPI32

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASMANCS

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASAPI32

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASMANCS

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASAPI32

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASMANCS

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASAPI32

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASMANCS

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS

    Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]

    Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin

    Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3196716

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_regcleaner_RASAPI32

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_regcleaner_RASMANCS

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_voor_hamster-free-ebook-converter_RASAPI32

    Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_voor_hamster-free-ebook-converter_RASMANCS

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C3110516-8EFC-49D6-8B72-69354F332062}

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{13119113-0854-469D-807A-171568457991}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{33119133-0854-469D-807A-171568457991}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{965B9DBE-B104-44AC-950A-8A5F97AFF439}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A9DB719C-7156-415E-B49D-BAD039DE4F13}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C01315C7-B4E2-4864-B43D-5FAFC414D179}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C1545464-C77C-4130-A572-1C619E2895FE}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ED0E67AD-926C-4008-87E5-03CF72AA2A7E}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{EF7FEC6D-451B-4452-9D26-7E10C6B5DB6E}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F03FD9D0-4F2B-497C-8A71-DD41D70B07D9}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{71B1DF81-18D9-4E5B-9493-CAB02B6E9D8F}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0D80F1C5-D17B-4177-AC68-955F3EF9F191}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{22B0769F-794B-4422-AC84-47B123C8986D}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{23119123-0854-469D-807A-171568457991}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{23C70BCA-6E23-4A65-AD2E-1389062074F1}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{23D8EEF7-0E13-4000-B9C4-6603C1E912D1}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{255E0B2A-D747-4EEF-B7CE-159D73A3656D}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{28ED590D-F5ED-4E05-A87F-1D759F1C6169}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{295CACB4-51F5-46FD-914E-C72BAAE1B672}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2CE5C4B9-6DBE-4528-96FA-C9FF38EF1762}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{34C1FDF7-02C1-4F23-B393-F48B16E071D1}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{45D5B93F-E2ED-4AF2-915E-DCDDBDA8C33C}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{54291324-7A3D-4F11-B707-3FB6A2C97BD9}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{59C63F11-D4E5-46E7-9B8A-EE158DCA83A8}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5DA22CBD-0029-4A09-B757-CF0FAFC488ED}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{771B99AB-636F-4A11-9039-8DFEB927B061}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{77A6E7D4-4A83-4A9B-A2A0-EF3B125DC29D}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A8321AA2-2227-40C7-8525-6C2F4E1B0EBE}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{AA41A731-6814-4A70-A6F1-C0A20FBBFBD5}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{ABBB8A9E-D8AF-40D1-94BE-5175077465FC}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BF737694-56F6-46FA-9FDC-FA99A5B25FAD}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C0585B2F-74D7-4734-88DE-6C150C5D4036}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{CA17D76B-F91D-4659-A7FD-A9F7ED375CDD}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{CFCD164E-8AC9-478E-9ECC-B616A932016C}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D5961CC0-B442-4567-8030-67E241EF4CC2}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D8242E89-2F81-484A-AE5B-BA8CAD5B7347}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E450067F-1C93-41A7-928E-07E5C2EEC680}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EF0588D6-1621-4A75-B8BE-F4BC34794136}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F977D9F2-4BDC-44A6-B508-7C0284C61EED}

    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{03119103-0854-469D-807A-171568457991}

    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}

    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{1D085C0A-E4F4-4F66-BDBF-4BE51015BFC3}

    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{48C9C8B0-A546-46C1-A81F-47A31E623E9D}

    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}

    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}

    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}

    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{CFE8AAFD-A0F3-4329-84E9-6B679EC93EC2}

    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}

    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{71B1DF81-18D9-4E5B-9493-CAB02B6E9D8F}

    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{74C36554-31F0-49DD-8857-ED6A64DF45BE}

    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}

    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{92D30868-969C-41F5-912E-218E436AA9CF}

    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2C75F4EB-09BE-4A32-8EC8-BDBA9CA4E3DA}

    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}

    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]

    Key Deleted : HKCU\Software\1ClickDownload

    Key Deleted : HKCU\Software\DataMngr

    Key Deleted : HKCU\Software\IM

    Key Deleted : HKCU\Software\Imesh

    Key Deleted : HKCU\Software\ImInstaller

    Key Deleted : HKCU\Software\incredibar.com

    Key Deleted : HKCU\Software\lollipop

    Key Deleted : HKCU\Software\MediaFinder

    Key Deleted : HKCU\Software\Softonic

    Key Deleted : HKCU\Software\AppDataLow\Toolbar

    Key Deleted : HKCU\Software\AppDataLow\Software\Conduit

    Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes

    Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong

    Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar

    Key Deleted : HKCU\Software\AppDataLow\Software\WiseConvert

    Key Deleted : HKLM\Software\AVG Security Toolbar

    Key Deleted : HKLM\Software\Babylon

    Key Deleted : HKLM\Software\BabylonToolbar

    Key Deleted : HKLM\Software\Conduit

    Key Deleted : HKLM\Software\Iminent

    Key Deleted : HKLM\Software\incredibar.com

    Key Deleted : HKLM\Software\systweak

    Key Deleted : HKLM\Software\Tarma Installer

    Key Deleted : HKLM\Software\Uniblue\DriverScanner

    Key Deleted : HKLM\Software\Web Assistant

    Key Deleted : HKLM\Software\WiseConvert

    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\lollipop

    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}

    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\incredibar

    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WiseConvert Toolbar

    ***** [ Browsers ] *****

    -\\ Internet Explorer v10.0.9200.16686

    -\\ Mozilla Firefox v

    [ File : C:\Users\Jean\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\prefs.js ]

    Line Deleted : user_pref("browser.search.defaultenginename", "AVG Secure Search");

    Line Deleted : user_pref("browser.search.selectedEngine", "AVG Secure Search");

    Line Deleted : user_pref("browser.startup.homepage", "hxxp://isearch.avg.com/?cid={AA4F8698-9DEA-4E51-9A39-6B5C0EC90D11}&mid=a48e92bdd3414cc2b0b55a102a2ab90d-6279747c3b8441f2449f405f5c8fe8f57da5f623〈=nl&ds=hk011[...]

    -\\ Google Chrome v

    [ File : C:\Users\Jean\AppData\Local\Google\Chrome\User Data\Default\preferences ]

    Deleted : homepage

    Deleted : icon_url

    Deleted : search_url

    Deleted : keyword

    Deleted : urls_to_restore_on_startup

    *************************

    AdwCleaner[R0].txt - [13497 octets] - [16/09/2013 12:07:45]

    AdwCleaner[s0].txt - [13775 octets] - [16/09/2013 12:08:34]

    ########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [13836 octets] ##########

  3. Dag Jion,

    Bedankt voor uw hulp ! Hierbij het gevraagde logje:

    Zoek.exe Version 4.0.0.4 Updated 14-September-2013

    Tool run by Jean on ma 16/09/2013 at 11:16:13,45.

    Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x86

    Running in: Normal Mode Internet Access Detected

    Launched: C:\Users\Jean\Desktop\zoek\zoek.exe [script inserted]

    ==== System Restore Info ======================

    16/09/2013 11:17:23 Zoek.exe System Restore Point Created Succesfully.

    ==== Deleting CLSID Registry Keys ======================

    HKEY_USERS\S-1-5-21-1684296767-3379996526-237124131-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} deleted successfully

    HKEY_USERS\S-1-5-21-1684296767-3379996526-237124131-1000\Software\Microsoft\Internet Explorer\SearchScopes\{5DC11869-F95F-5769-4254-779BD04F67F0} deleted successfully

    HKEY_USERS\S-1-5-21-1684296767-3379996526-237124131-1000\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21} deleted successfully

    HKEY_USERS\S-1-5-21-1684296767-3379996526-237124131-1000\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} deleted successfully

    HKEY_USERS\S-1-5-21-1684296767-3379996526-237124131-1000\Software\Microsoft\Internet Explorer\SearchScopes\{BCA92C3E-01C0-4160-B026-F74D8F27ACB8} deleted successfully

    HKEY_USERS\S-1-5-21-1684296767-3379996526-237124131-1000\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A} deleted successfully

    HKEY_USERS\S-1-5-21-1684296767-3379996526-237124131-1000\Software\Microsoft\Internet Explorer\SearchScopes\{E46E2FB2-FB2E-47A1-A24A-45328751FD7A} deleted successfully

    HKEY_CLASSES_ROOT\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9} deleted successfully

    ==== Deleting CLSID Registry Values ======================

    HKEY_USERS\S-1-5-21-1684296767-3379996526-237124131-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\{7a55cbb2-2b2e-4a41-9de1-6ac5d2c2be0a} deleted successfully

    HKEY_USERS\S-1-5-21-1684296767-3379996526-237124131-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{ebd898f8-fcf6-4694-bc3b-eabc7271eeb1} deleted successfully

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} deleted successfully

    HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\urlsearchhooks\{ebd898f8-fcf6-4694-bc3b-eabc7271eeb1} deleted successfully

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{ebd898f8-fcf6-4694-bc3b-eabc7271eeb1} deleted successfully

    ==== Deleting Services ======================

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vToolbarUpdater15.5.0 deleted successfully

    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\vToolbarUpdater15.5.0 deleted successfully

    ==== FireFox Fix ======================

    ProfilePath: C:\Users\Jean\AppData\Roaming\Mozilla\Firefox\Profiles\extensions

    ---- Lines funmoods removed from prefs.js ----

    ---- Lines funmoods modified from prefs.js ----

    ---- Lines funmoods removed from user.js ----

    user_pref("extensions.funmoods.hmpg", true);

    user_pref("extensions.funmoods.hmpgUrl", "Funmoods Search");

    user_pref("extensions.funmoods.dfltSrch", true);

    user_pref("extensions.funmoods.srchPrvdr", "Search");

    user_pref("extensions.funmoods.dnsErr", true);

    user_pref("extensions.funmoods_i.newTab", true);

    user_pref("extensions.funmoods.newTabUrl", "Funmoods Search");

    user_pref("extensions.funmoods.tlbrSrchUrl", "Funmoods Search=");

    user_pref("extensions.funmoods.id", "4437E65A6BC0E2A2");

    user_pref("extensions.funmoods.instlDay", "15572");

    user_pref("extensions.funmoods.vrsn", "1.5.23.22");

    user_pref("extensions.funmoods.vrsni", "1.5.23.22");

    user_pref("extensions.funmoods_i.vrsnTs", "1.5.23.2216:13:17");

    user_pref("extensions.funmoods.prtnrId", "funmoods");

    user_pref("extensions.funmoods.prdct", "funmoods");

    user_pref("extensions.funmoods.aflt", "bf3");

    user_pref("extensions.funmoods_i.smplGrp", "none");

    user_pref("extensions.funmoods.tlbrId", "base");

    user_pref("extensions.funmoods.instlRef", "bf3");

    user_pref("extensions.funmoods.dfltLng", "");

    user_pref("extensions.funmoods.excTlbr", false);

    user_pref("extensions.funmoods.autoRvrt", false);

    user_pref("extensions.funmoods.envrmnt", "production");

    user_pref("extensions.funmoods.isdcmntcmplt", true);

    user_pref("extensions.funmoods.mntrvrsn", "1.3.0");

    ---- Lines OneClickDownload removed from prefs.js ----

    ---- Lines OneClickDownload modified from prefs.js ----

    ---- FireFox user.js and prefs.js backups ----

    user_20131609_1120_.backup

    prefs_20131609_1120_.backup

    ==== Registry Fix Code ======================

    Windows Registry Editor Version 5.00

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

    "Media Finder"=-

    "vProt"=-

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

    "AppInit_DLLs"=-

    ==== Deleting Files \ Folders ======================

    "C:\user.js" deleted

    "C:\Users\Jean\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lollipop.lnk" deleted

    "C:\Program Files\Mozilla Firefox\user.js" deleted

    "C:\ProgramData\SPLFBFF.tmp" deleted

    "C:\Users\Jean\AppData\Local\funmoods-speeddial.crx" deleted

    "C:\Users\Jean\AppData\Local\funmoods.crx" deleted

    "C:\Users\Jean\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lollipop.lnk" deleted

    "C:\Users\Jean\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\lollipop.lnk" deleted

    "C:\Users\Jean\Downloads\SoftonicDownloader_for_regcleaner.exe" deleted

    "C:\user.js" deleted

    "C:\Windows\system32\roboot.exe" deleted

    "C:\Users\Jean\AppData\Local\Lollipop\Lollipop.exe" deleted

    "C:\Users\Jean\AppData\Local\Lollipop\Lollipop.exe" deleted

    "C:\Program Files\Media Finder" deleted

    "C:\Users\Jean\AppData\Local\Lollipop" deleted

    "C:\ProgramData\Tarma Installer" deleted

    "C:\ProgramData\AVG Secure Search" deleted

    "C:\Program Files\AVG Secure Search" deleted

    "C:\Program Files\Common Files\AVG Secure Search" deleted

    "C:\Program Files\GUMFE7A.tmp" deleted

    "C:\Program Files\iMesh Applications" deleted

    "C:\Program Files\1ClickDownload" deleted

    "C:\Program Files\Incredibar.com" deleted

    "C:\Program Files\UtilityChest_49" deleted

    "C:\Program Files\Media Finder" deleted

    "C:\Program Files\WiseConvert" deleted

    "C:\Program Files\Conduit" deleted

    "C:\found.000" deleted

    "C:\Users\Jean\AppData\Roaming\SendSpace" deleted

    "C:\Users\Jean\AppData\Roaming\Babylon" deleted

    "C:\Users\Jean\AppData\Roaming\Systweak" deleted

    "C:\Users\Jean\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\gencrawler@some.com" deleted

    "C:\Users\Jean\AppData\Roaming\Media Finder" deleted

    "C:\ProgramData\Ask" deleted

    "C:\ProgramData\boost_interprocess" deleted

    "C:\ProgramData\OptimizerPro1" deleted

    "C:\ProgramData\InstallMate" deleted

    "C:\ProgramData\Tarma Installer" deleted

    "C:\ProgramData\Premium" deleted

    "C:\ProgramData\Babylon" deleted

    "C:\Users\Jean\AppData\Local\Ilivid Player" deleted

    "C:\Users\Jean\AppData\Local\Lollipop" deleted

    "C:\Users\Jean\AppData\Local\PackageAware" deleted

    "C:\Users\Jean\AppData\Local\Conduit" deleted

    "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Finder" deleted

    "C:\Users\Jean\AppData\LocalLow\DataMngr" deleted

    "C:\Users\Jean\AppData\LocalLow\Incredibar.com" deleted

    "C:\Users\Jean\AppData\LocalLow\PriceGong" deleted

    "C:\Users\Jean\AppData\LocalLow\Conduit" deleted

    "C:\Users\Jean\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\extensions\ffxtlbr@funmoods.com" deleted

    "C:\Users\Jean\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\OneClickDownload@OneClickDownload.com" deleted

    ==== Files Recently Created / Modified ======================

    ====== C:\Windows ====

    ====== C:\Users\Jean\AppData\Local\Temp ====

    2013-09-16 08:09:08 2433E09C08C21455000F7E36D7653759 489472 ----a-w- C:\Users\Jean\AppData\Local\Temp\SDIAG_36e647f8-05e2-451c-b708-db9ce540efd1\DiagPackage.dll

    ====== Java Cache =====

    ====== C:\Windows\system32 =====

    2013-09-12 18:29:05 06EEAD5864F357ADC618F65A2F2C5156 2706432 ----a-w- C:\Windows\System32\mshtml.tlb

    2013-09-12 18:29:04 79DC575FE905D5DD5C5A4C5993A7C7F9 2876928 ----a-w- C:\Windows\System32\jscript9.dll

    2013-09-12 18:29:04 00531B52C9468929F2C651B3BCADCBC9 690688 ----a-w- C:\Windows\System32\jscript.dll

    2013-09-12 18:29:03 BCA4913CDE903B4BDEEDAD1D6DBF5E2A 391168 ----a-w- C:\Windows\System32\ieui.dll

    2013-09-12 18:29:03 7E540E07B97DCBCF8F76FA743B486BF2 61440 ----a-w- C:\Windows\System32\iesetup.dll

    2013-09-12 18:29:03 7C63629508BB87227C3C861355A155B4 39424 ----a-w- C:\Windows\System32\jsproxy.dll

    2013-09-12 18:29:02 E5D91D6B81A293AB6854CAD112240A4B 1141248 ----a-w- C:\Windows\System32\urlmon.dll

    2013-09-12 18:29:02 54C06D9684F3D0AD7E87502E57CC4655 42496 ----a-w- C:\Windows\System32\ie4uinit.exe

    2013-09-12 18:29:02 43852485D0B78C021A47E9548A4CFFE0 71680 ----a-w- C:\Windows\System32\RegisterIEPKEYs.exe

    2013-09-12 18:29:02 3B74EADF1B70251D3CDB87BC338DC34D 109056 ----a-w- C:\Windows\System32\iesysprep.dll

    2013-09-12 18:29:02 2EC47CF6A36F6A83BB8B98C1425B4D41 493056 ----a-w- C:\Windows\System32\msfeeds.dll

    2013-09-12 18:29:02 281A720B0A984E325599EE1F0342E8FB 2048000 ----a-w- C:\Windows\System32\iertutil.dll

    2013-09-12 18:29:02 000B55B43992179E69C2E83CCB8F1126 33280 ----a-w- C:\Windows\System32\iernonce.dll

    2013-09-12 18:29:01 535F6263035F2530A62D5D64EF6E73D3 1767936 ----a-w- C:\Windows\System32\wininet.dll

    2013-09-12 18:29:00 4FCC53B82D91607FB9AE24E617108BB2 13761024 ----a-w- C:\Windows\System32\ieframe.dll

    2013-09-12 18:28:58 5D2D7E7850CE963C2F401D4DEE7BB32A 14332928 ----a-w- C:\Windows\System32\mshtml.dll

    2013-09-12 06:25:40 E02781D4871844DCD30DF1D69A650F78 12872704 ----a-w- C:\Windows\System32\shell32.dll

    2013-09-12 06:25:40 2C4A87CA8C00E98EFDCFA2E8EC9A3503 180224 ----a-w- C:\Windows\System32\shdocvw.dll

    2013-09-12 06:25:39 ED880065BBB2C5F57B74F30812A65F4F 2348544 ----a-w- C:\Windows\System32\win32k.sys

    2013-09-12 06:25:38 6933E2AFF444A7A95D5C67E98449163E 868352 ----a-w- C:\Windows\System32\kernel32.dll

    2013-09-12 06:25:38 51BB04243DF6196C06E125898127E397 169984 ----a-w- C:\Windows\System32\winsrv.dll

    2013-09-12 06:25:38 2DE16A63F71D10B42ACE01E759078600 271360 ----a-w- C:\Windows\System32\conhost.exe

    2013-09-12 06:25:38 1E65CF7B26D02750544EFDD73C8118FA 293376 ----a-w- C:\Windows\System32\KernelBase.dll

    ====== C:\Windows\system32\drivers =====

    2013-09-12 06:25:39 DDCE686D76C2B4DB435A3AF5BD0E691D 133056 ----a-w- C:\Windows\System32\drivers\ataport.sys

    ====== C:\Windows\Tasks ======

    ====== C:\Windows\Temp ======

    ======= C:\Program Files =====

    2013-09-15 18:35:22 -------- d-----w- C:\Program Files\trend micro

    2013-09-12 17:54:57 -------- d-----w- C:\Program Files\MetaGeek

    ======= C: =====

    ====== C:\Users\Jean\AppData\Roaming ======

    2013-09-12 17:58:34 -------- d-----w- C:\Users\Jean\AppData\Local\MetaGeek,_LLC

    2013-09-12 17:54:57 -------- d-----w- C:\Users\Jean\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MetaGeek

    2013-08-27 09:20:15 DE89A475288483123B956B55941FEA32 8388608 ----a-w- C:\Windows\serviceprofiles\Localservice\AppData\Local\~FontCache-S-1-5-21-1684296767-3379996526-237124131-1000.dat

    ====== C:\Users\Jean ======

    2013-09-12 17:52:43 8B7A47303E413360DF14A9560F12DE14 600048 ----a-w- C:\Users\Jean\Downloads\inssider.exe

    ====== C: exe-files ==

    2013-09-16 08:16:46 08D74ADA6B0955E0DEB719CB0CC936FE 3961048 ----a-w- C:\Users\Jean\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2FUMEJRB\pcspeedup_e284fff82bfa4135a519e91724794af8_.exe

    2013-09-15 18:35:22 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\Jean.exe

    2013-09-15 18:34:56 69CA82A7482A00D8EE063D2B97FC4338 781383 ----a-w- C:\Users\Jean\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XPFCCIXN\RSIT.exe

    2013-09-12 18:29:02 54C06D9684F3D0AD7E87502E57CC4655 42496 ----a-w- C:\Windows\System32\ie4uinit.exe

    2013-09-12 18:29:02 43852485D0B78C021A47E9548A4CFFE0 71680 ----a-w- C:\Windows\System32\RegisterIEPKEYs.exe

    2013-09-12 18:29:01 37287D98A1BF5D56AA729CEB9B27C6B1 770648 ----a-w- C:\Program Files\Internet Explorer\iexplore.exe

    2013-09-12 17:54:57 A3558BE4E9FF59CC497E68CE26CB9A2F 45126 ----a-r- C:\Users\Jean\AppData\Roaming\Microsoft\Installer\{65A5E87D-7A3F-4819-807D-B86990D5F369}\_C103A54796D0027EBD63FB.exe

    2013-09-12 17:54:57 A3558BE4E9FF59CC497E68CE26CB9A2F 45126 ----a-r- C:\Users\Jean\AppData\Roaming\Microsoft\Installer\{65A5E87D-7A3F-4819-807D-B86990D5F369}\_853F67D554F05449430E7E.exe

    2013-09-12 17:54:57 A3558BE4E9FF59CC497E68CE26CB9A2F 45126 ----a-r- C:\Users\Jean\AppData\Roaming\Microsoft\Installer\{65A5E87D-7A3F-4819-807D-B86990D5F369}\_747764F8CEB43B54CEA72B.exe

    2013-09-12 17:52:43 8B7A47303E413360DF14A9560F12DE14 600048 ----a-w- C:\Users\Jean\Downloads\inssider.exe

    2013-09-12 06:25:38 2DE16A63F71D10B42ACE01E759078600 271360 ----a-w- C:\Windows\System32\conhost.exe

    === C: other files ==

    2013-09-12 06:25:39 ED880065BBB2C5F57B74F30812A65F4F 2348544 ----a-w- C:\Windows\System32\win32k.sys

    2013-09-12 06:25:39 DDCE686D76C2B4DB435A3AF5BD0E691D 133056 ----a-w- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_a5025d31bee4647c\ataport.sys

    2013-09-12 06:25:39 DDCE686D76C2B4DB435A3AF5BD0E691D 133056 ----a-w- C:\Windows\System32\drivers\ataport.sys

    ==== Startup Registry Enabled ======================

    [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]

    "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

    [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]

    "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"

    [HKEY_USERS\S-1-5-21-1684296767-3379996526-237124131-1000\Software\Microsoft\Windows\CurrentVersion\Run]

    "Google Update"="C:\Users\Jean\AppData\Local\Google\Update\GoogleUpdate.exe /c"

    [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce]

    "mctadmin"="C:\Windows\System32\mctadmin.exe"

    [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce]

    "mctadmin"="C:\Windows\System32\mctadmin.exe"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "IMSS"="C:\Program Files\Intel\Intel® Management Engine Components\IMSS\PIconStartup.exe"

    "IAStorIcon"="C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe"

    "Lenovo Registration"="C:\Program Files\Lenovo Registration\LenovoReg.exe /boot"

    "BCSSync"="C:\Program Files\Microsoft Office\Office14\BCSSync.exe /DelayServices"

    "avast"="C:\Program Files\AVAST Software\Avast\avastUI.exe /nogui"

    "Adobe ARM"="C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

    "dlcqmon.exe"="C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe"

    "MemoryCardManager"="C:\Program Files\Dell Photo AIO Printer 966\memcard.exe"

    "vProt"="C:\Program Files\AVG Secure Search\vprot.exe"

    "IgfxTray"="C:\Windows\system32\igfxtray.exe"

    "HotKeysCmds"="C:\Windows\system32\hkcmd.exe"

    "Persistence"="C:\Windows\system32\igfxpers.exe"

    "SunJavaUpdateSched"="C:\Program Files\Common Files\Java\Java Update\jusched.exe"

    "APSDaemon"="C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

    "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe"

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

    "Google Update"="C:\Users\Jean\AppData\Local\Google\Update\GoogleUpdate.exe /c"

    ==== Startup Registry Disabled ======================

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\FaxCenterServer]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="FaxCenterServer"

    "hkey"="HKLM"

    "command"="\"C:\\Program Files\\Dell PC Fax\\fm3032.exe\" /s"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Google Update]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="Google Update"

    "hkey"="HKCU"

    "command"="\"C:\\Users\\Jean\\AppData\\Local\\Google\\Update\\GoogleUpdate.exe\" /c"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\GoogleDriveSync]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="GoogleDriveSync"

    "hkey"="HKCU"

    "command"="\"C:\\Program Files\\Google\\Drive\\googledrivesync.exe\" /autostart"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Power Manager Power Agenda]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="Power Manager Power Agenda"

    "hkey"="HKLM"

    "command"="C:\\PROGRA~1\\ThinkPad\\UTILIT~1\\DPMHost.exe"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\RtHDVCpl]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="RtHDVCpl"

    "hkey"="HKLM"

    "command"="C:\\Program Files\\Realtek\\Audio\\HDA\\RtHDVCpl.exe -s"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SpeedUpMyPC]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="SpeedUpMyPC"

    "hkey"="HKCU"

    "command"="\"C:\\Program Files\\Uniblue\\SpeedUpMyPC\\launcher.exe\" -d 20000 "

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^ USRobotics Wireless USB Adapter.lnk]

    "path"="C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\ USRobotics Wireless USB Adapter.lnk"

    "backup"="C:\\Windows\\pss\\ USRobotics Wireless USB Adapter.lnk.CommonStartup"

    "backupExtension"=".CommonStartup"

    "command"="C:\\PROGRA~1\\USROBO~1\\WIRELE~1\\USR54G.exe -T"

    "item"="USRobotics Wireless USB Adapter"

    ==== Startup Folders ======================

    2013-02-04 15:31:56 1021 ----a-w- C:\Users\Jean\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

    ==== Task Scheduler Jobs ======================

    C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [13/09/2013 12:46]

    C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ [undetermined Task]

    C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [27/10/2012 08:36]

    C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1684296767-3379996526-237124131-1000Core.job --a------ C:\Users\Jean\AppData\Local\Google\Update\GoogleUpdate.exe [01/09/2012 10:19]

    C:\Windows\tasks\PCDoctorBackgroundMonitorTask.job --a------ C:\Program Files\PC-Doctor\uaclauncher.exe [27/06/2011 17:54]

    C:\Windows\tasks\SystemToolsDailyTest.job --a------ C:\Program Files\PC-Doctor\uaclauncher.exe [27/06/2011 17:54]

    ==== Firefox Extensions ======================

    AppDir: C:\Program Files\Mozilla Firefox

    - Belgium eID - %AppDir%\extensions\belgiumeid@eid.belgium.be

    ==== Firefox Plugins ======================

    ==== Chrome Look ======================

    HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions

    bbjciahceamgodcoidkjpchnokgfpphh - C:\Users\Jean\AppData\Local\funmoods.crx[]

    cjpglkicenollcignonpgiafdgfeehoj - C:\Users\Jean\AppData\Local\funmoods-speeddial.crx[]

    dednnpigldgdbpgcdpfppmlcnnbjciel - C:\Users\Jean\AppData\Roaming\Media Finder\Extensions\gencrawler_gc.crx[]

    dlnembnfbcpjnepmfjmngjenhhajpdfd - C:\Program Files\Web Assistant\source.crx[]

    lpmkgpnbiojfaoklbkpfneikocaobfai - C:\Users\Jean\AppData\Roaming\Media Finder\Extensions\mf_plugin_gc.crx[]

    ndibdjnfmopecpmkdieinmbadjfpblof - C:\ProgramData\\ChromeExt\\avg.crx[]

    pmlghpafmmnmmkjdhacccolfgnkiboco - C:\Program Files\1ClickDownload\oneclickdownloader11.crx[]

    HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions

    bbjciahceamgodcoidkjpchnokgfpphh - C:\Users\Jean\AppData\Local\funmoods.crx[]

    cjpglkicenollcignonpgiafdgfeehoj - C:\Users\Jean\AppData\Local\funmoods-speeddial.crx[]

    ==== Chrome Fix ======================

    C:\Users\Jean\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_dlnembnfbcpjnepmfjmngjenhhajpdfd_0.localstorage deleted successfully

    ==== Set IE to Default ======================

    Old Values:

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

    "Start Page"="Aanmelden: De Tijd"

    "Search Bar"="Bing"

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]

    "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}] not found

    New Values:

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

    "Search Bar"="Bing"

    "Start Page"="Aanmelden: De Tijd"

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]

    "DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

    ==== All HKCU SearchScopes ======================

    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

    {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="{searchTerms} - Bing"

    {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="{searchTerms} - Google Search}"

    {95B7759C-8C7F-4BF1-B163-73684A933233} AVG Secure Search Url="Zoek"

    ==== Deleting CLSID Registry Keys ======================

    HKEY_USERS\S-1-5-21-1684296767-3379996526-237124131-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8dcb7100-df86-4384-8842-8fa844297b3f} deleted successfully

    HKEY_USERS\S-1-5-21-1684296767-3379996526-237124131-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8dcb7100-df86-4384-8842-8fa844297b3f} deleted successfully

    HKEY_CLASSES_ROOT\CLSID\{8dcb7100-df86-4384-8842-8fa844297b3f} deleted successfully

    ==== Deleting CLSID Registry Values ======================

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{8dcb7100-df86-4384-8842-8fa844297b3f} deleted successfully

    ==== Deleting Registry Keys ======================

    HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh deleted successfully

    HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\cjpglkicenollcignonpgiafdgfeehoj deleted successfully

    HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\dednnpigldgdbpgcdpfppmlcnnbjciel deleted successfully

    HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd deleted successfully

    HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\lpmkgpnbiojfaoklbkpfneikocaobfai deleted successfully

    HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof deleted successfully

    HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco deleted successfully

    HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh deleted successfully

    HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions\cjpglkicenollcignonpgiafdgfeehoj deleted successfully

    ==== Empty IE Cache ======================

    C:\Users\Jean\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully

    C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Users\Jean\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2FUMEJRB will be deleted at reboot

    ==== Empty FireFox Cache ======================

    No FireFox Cache found

    ==== Empty Chrome Cache ======================

    C:\Users\Jean\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

    ==== Empty All Flash Cache ======================

    Flash Cache Emptied Successfully

    ==== Empty All Java Cache ======================

    Java Cache cleared successfully

    ==== After Reboot ======================

    ==== Empty Temp Folders ======================

    C:\Windows\Temp successfully emptied

    C:\Users\Jean\AppData\Local\Temp successfully emptied

    ==== Empty Recycle Bin ======================

    C:\$RECYCLE.BIN successfully emptied

    ==== Deleting Files / Folders ======================

    "C:\Users\Jean\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2FUMEJRB" deleted

    ==== EOF on ma 16/09/2013 at 11:23:49,34 ======================

  4. Inhoud van de Log:

    Logfile of random's system information tool 1.09 (written by random/random)

    Run by Jean at 2013-09-15 20:35:21

    Microsoft Windows 7 Professional Service Pack 1

    System drive C: has 235 GB (81%) free of 288 GB

    Total RAM: 2922 MB (52% free)

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 20:35:30, on 15/09/2013

    Platform: Windows 7 SP1 (WinNT 6.00.3505)

    MSIE: Internet Explorer v10.0 (10.00.9200.16686)

    Boot mode: Normal

    Running processes:

    C:\Windows\system32\Dwm.exe

    C:\Windows\Explorer.EXE

    C:\Windows\system32\taskhost.exe

    C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

    C:\Program Files\AVAST Software\Avast\AvastUI.exe

    C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe

    C:\Program Files\Dell Photo AIO Printer 966\memcard.exe

    C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE

    C:\Windows\System32\igfxtray.exe

    C:\Windows\System32\hkcmd.exe

    C:\Windows\System32\igfxpers.exe

    C:\Program Files\Common Files\Java\Java Update\jusched.exe

    C:\Program Files\iTunes\iTunesHelper.exe

    C:\Users\Jean\AppData\Roaming\Dropbox\bin\Dropbox.exe

    C:\Users\Jean\AppData\Local\Lollipop\Lollipop.exe

    C:\Windows\system32\taskeng.exe

    C:\Program Files\LENOVO\Message Center Plus\MCPLaunch.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\Windows\system32\Macromed\Flash\FlashUtil32_11_8_800_174_ActiveX.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\Windows\system32\SearchProtocolHost.exe

    C:\Windows\system32\SearchFilterHost.exe

    C:\Users\Jean\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XPFCCIXN\RSIT.exe

    C:\Program Files\trend micro\Jean.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Bing

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Aanmelden: De Tijd

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

    R3 - URLSearchHook: (no name) - {7a55cbb2-2b2e-4a41-9de1-6ac5d2c2be0a} - (no file)

    O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)

    O3 - Toolbar: (no name) - !{F9639E4A-801B-4843-AEE3-03D9DA199E77} - (no file)

    O3 - Toolbar: (no name) - {A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} - (no file)

    O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

    O3 - Toolbar: (no name) - {ebd898f8-fcf6-4694-bc3b-eabc7271eeb1} - (no file)

    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

    O4 - HKLM\..\Run: [iMSS] "C:\Program Files\Intel\Intel® Management Engine Components\IMSS\PIconStartup.exe"

    O4 - HKLM\..\Run: [iAStorIcon] C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe

    O4 - HKLM\..\Run: [Lenovo Registration] C:\Program Files\Lenovo Registration\LenovoReg.exe /boot

    O4 - HKLM\..\Run: [bCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices

    O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui

    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

    O4 - HKLM\..\Run: [dlcqmon.exe] "C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe"

    O4 - HKLM\..\Run: [MemoryCardManager] "C:\Program Files\Dell Photo AIO Printer 966\memcard.exe"

    O4 - HKLM\..\Run: [vProt] "C:\Program Files\AVG Secure Search\vprot.exe"

    O4 - HKLM\..\Run: [igfxTray] C:\Windows\system32\igfxtray.exe

    O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe

    O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe

    O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

    O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

    O4 - HKCU\..\Run: [Media Finder] "C:\Program Files\Media Finder\Media Finder.exe" /opentotray

    O4 - HKCU\..\Run: [Google Update] "C:\Users\Jean\AppData\Local\Google\Update\GoogleUpdate.exe" /c

    O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

    O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

    O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

    O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

    O4 - Startup: Dropbox.lnk = C:\Users\Jean\AppData\Roaming\Dropbox\bin\Dropbox.exe

    O4 - Startup: lollipop.lnk = Jean\AppData\Local\Lollipop\Lollipop.exe

    O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll

    O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll

    O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

    O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

    O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll

    O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll

    O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

    O16 - DPF: {C4B977A3-E8A2-37E9-ADCD-2597FAAC61F5} (MachineInfoActiveX.MachineInfoActiveX) - http://shop.lenovo.com/SEUILibrary/lenovo-portal/cab/autodetect/MachineInfo.cab

    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

    O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\15.5.0\ViProtocol.dll

    O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

    O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

    O20 - AppInit_DLLs:

    O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

    O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

    O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe

    O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

    O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe

    O23 - Service: Intel® Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\system32\IntelCpHeciSvc.exe

    O23 - Service: dlcq_device - - C:\Windows\system32\dlcqcoms.exe

    O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

    O23 - Service: Intel® Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe

    O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

    O23 - Service: Intel® Identity Protection Technology Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files\Intel\Services\IPT\jhi_service.exe

    O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files\Intel\Intel® Management Engine Components\LMS\LMS.exe

    O23 - Service: Power Manager DBC Service - Lenovo - C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE

    O23 - Service: System Update (SUService) - Lenovo Group Limited - C:\Program Files\Lenovo\System Update\SUService.exe

    O23 - Service: Intel® Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files\Intel\Intel® Management Engine Components\UNS\UNS.exe

    O23 - Service: VIPAppService - Symantec Corporation - C:\Program Files\Symantec\VIP Access Client\VIPAppService.exe

    O23 - Service: vToolbarUpdater15.5.0 - Unknown owner - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\ToolbarUpdater.exe

    --

    End of file - 10152 bytes

    ======Scheduled tasks folder======

    C:\Windows\tasks\Adobe Flash Player Updater.job

    C:\Windows\tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job

    C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

    C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

    C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1684296767-3379996526-237124131-1000Core.job

    C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1684296767-3379996526-237124131-1000UA.job

    C:\Windows\tasks\PCDoctorBackgroundMonitorTask.job

    C:\Windows\tasks\SystemToolsDailyTest.job

    ======Registry dump======

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

    {8dcb7100-df86-4384-8842-8fa844297b3f} - Bing Bar - C:\Program Files\Microsoft\BingBar\BingExt.dll [2011-03-02 1089288]

    !{F9639E4A-801B-4843-AEE3-03D9DA199E77}

    {A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3}

    {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-05-09 198688]

    {ebd898f8-fcf6-4694-bc3b-eabc7271eeb1}

    {2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2013-08-20 192592]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

    "IMSS"=C:\Program Files\Intel\Intel® Management Engine Components\IMSS\PIconStartup.exe [2010-11-17 112152]

    "IAStorIcon"=C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe [2010-11-06 283160]

    "Lenovo Registration"=C:\Program Files\Lenovo Registration\LenovoReg.exe [2011-02-09 4309184]

    "BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2010-03-13 91520]

    "avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2013-05-09 4858968]

    "Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]

    "dlcqmon.exe"=C:\Program Files\Dell Photo AIO Printer 966\dlcqmon.exe [2006-12-12 291720]

    "MemoryCardManager"=C:\Program Files\Dell Photo AIO Printer 966\memcard.exe [2006-12-12 304008]

    "vProt"=C:\Program Files\AVG Secure Search\vprot.exe [2013-08-14 2314416]

    "IgfxTray"=C:\Windows\system32\igfxtray.exe [2012-03-19 144664]

    "HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2012-03-19 180504]

    "Persistence"=C:\Windows\system32\igfxpers.exe [2012-03-19 187672]

    "SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-03-12 253816]

    "APSDaemon"=C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2013-04-21 59720]

    "iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2013-05-31 152392]

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

    "Media Finder"=C:\Program Files\Media Finder\Media Finder.exe /opentotray []

    "Google Update"=C:\Users\Jean\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-01 116648]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FaxCenterServer]

    C:\Program Files\Dell PC Fax\fm3032.exe [2006-12-12 312200]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]

    C:\Users\Jean\AppData\Local\Google\Update\GoogleUpdate.exe [2012-09-01 116648]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GoogleDriveSync]

    C:\Program Files\Google\Drive\googledrivesync.exe [2013-06-27 20097696]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Power Manager Power Agenda]

    C:\PROGRA~1\ThinkPad\UTILIT~1\DPMHost.exe [2010-12-14 75064]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]

    C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2010-10-19 9755240]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpeedUpMyPC]

    C:\Program Files\Uniblue\SpeedUpMyPC\launcher.exe -d 20000 []

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^ USRobotics Wireless USB Adapter.lnk]

    C:\PROGRA~1\USROBO~1\WIRELE~1\USR54G.exe [2006-04-14 663552]

    C:\Users\Jean\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

    Dropbox.lnk - C:\Users\Jean\AppData\Roaming\Dropbox\bin\Dropbox.exe

    lollipop.lnk - C:\Users\Jean\AppData\Local\Lollipop\Lollipop.exe

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]

    "AppInit_DLLs"=" "

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]

    C:\Windows\system32\igfxdev.dll [2012-03-19 325120]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp]

    wlnotify.dll []

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

    WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]

    "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~4\Office14\GROOVEEX.DLL [2012-08-16 4171424]

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]

    "SecurityProviders"=credssp.dll

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

    "ConsentPromptBehaviorAdmin"=5

    "ConsentPromptBehaviorUser"=3

    "EnableUIADesktopToggle"=0

    "dontdisplaylastusername"=0

    "legalnoticecaption"=

    "legalnoticetext"=

    "shutdownwithoutlogon"=1

    "undockwithoutlogon"=1

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]

    "vidc.mrle"=msrle32.dll

    "vidc.msvc"=msvidc32.dll

    "msacm.imaadpcm"=imaadp32.acm

    "msacm.msg711"=msg711.acm

    "msacm.msgsm610"=msgsm32.acm

    "msacm.msadpcm"=msadp32.acm

    "midimapper"=midimap.dll

    "wavemapper"=msacm32.drv

    "VIDC.UYVY"=msyuv.dll

    "VIDC.YUY2"=msyuv.dll

    "VIDC.YVYU"=msyuv.dll

    "VIDC.IYUV"=iyuv_32.dll

    "vidc.i420"=iyuv_32.dll

    "VIDC.YVU9"=tsbyuv.dll

    "msacm.l3acm"=C:\Windows\System32\l3codeca.acm

    "vidc.cvid"=iccvid.dll

    "MSVideo8"=VfWWDM32.dll

    "wave"=wdmaud.drv

    "midi"=wdmaud.drv

    "mixer"=wdmaud.drv

    "aux"=wdmaud.drv

    "wave1"=wdmaud.drv

    "midi1"=wdmaud.drv

    "mixer1"=wdmaud.drv

    "aux1"=wdmaud.drv

    "msacm.siren"=sirenacm.dll

    ======File associations======

    .js - edit - C:\Windows\System32\Notepad.exe %1

    .js - open - C:\Windows\System32\WScript.exe "%1" %*

    ======List of files/folders created in the last 1 month======

    2013-09-15 20:35:22 ----D---- C:\Program Files\trend micro

    2013-09-15 20:35:21 ----D---- C:\rsit

    2013-09-12 20:29:04 ----A---- C:\Windows\system32\jscript9.dll

    2013-09-12 20:29:04 ----A---- C:\Windows\system32\jscript.dll

    2013-09-12 20:29:03 ----A---- C:\Windows\system32\jsproxy.dll

    2013-09-12 20:29:03 ----A---- C:\Windows\system32\ieui.dll

    2013-09-12 20:29:03 ----A---- C:\Windows\system32\iesetup.dll

    2013-09-12 20:29:02 ----A---- C:\Windows\system32\urlmon.dll

    2013-09-12 20:29:02 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe

    2013-09-12 20:29:02 ----A---- C:\Windows\system32\msfeeds.dll

    2013-09-12 20:29:02 ----A---- C:\Windows\system32\iesysprep.dll

    2013-09-12 20:29:02 ----A---- C:\Windows\system32\iertutil.dll

    2013-09-12 20:29:02 ----A---- C:\Windows\system32\iernonce.dll

    2013-09-12 20:29:02 ----A---- C:\Windows\system32\ie4uinit.exe

    2013-09-12 20:29:01 ----A---- C:\Windows\system32\wininet.dll

    2013-09-12 20:29:00 ----A---- C:\Windows\system32\ieframe.dll

    2013-09-12 20:28:58 ----A---- C:\Windows\system32\mshtml.dll

    2013-09-12 19:54:57 ----D---- C:\Program Files\MetaGeek

    2013-09-12 08:25:40 ----A---- C:\Windows\system32\shell32.dll

    2013-09-12 08:25:40 ----A---- C:\Windows\system32\shdocvw.dll

    2013-09-12 08:25:39 ----A---- C:\Windows\system32\win32k.sys

    2013-09-12 08:25:39 ----A---- C:\Windows\system32\drivers\ataport.sys

    2013-09-12 08:25:38 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

    2013-09-12 08:25:38 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

    2013-09-12 08:25:38 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

    2013-09-12 08:25:38 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

    2013-09-12 08:25:38 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

    2013-09-12 08:25:38 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

    2013-09-12 08:25:38 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

    2013-09-12 08:25:38 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

    2013-09-12 08:25:38 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

    2013-09-12 08:25:38 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

    2013-09-12 08:25:38 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

    2013-09-12 08:25:38 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

    2013-09-12 08:25:38 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

    2013-09-12 08:25:38 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

    2013-09-12 08:25:38 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

    2013-09-12 08:25:38 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

    2013-09-12 08:25:38 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

    2013-09-12 08:25:38 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

    2013-09-12 08:25:38 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

    2013-09-12 08:25:38 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

    2013-09-12 08:25:38 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

    2013-09-12 08:25:38 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

    2013-09-12 08:25:38 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

    2013-09-12 08:25:38 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

    2013-09-12 08:25:38 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

    2013-09-12 08:25:38 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

    2013-09-12 08:25:38 ----A---- C:\Windows\system32\winsrv.dll

    2013-09-12 08:25:38 ----A---- C:\Windows\system32\KernelBase.dll

    2013-09-12 08:25:38 ----A---- C:\Windows\system32\kernel32.dll

    2013-09-12 08:25:38 ----A---- C:\Windows\system32\conhost.exe

    2013-09-12 08:25:37 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

    2013-09-12 08:25:37 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

    ======List of files/folders modified in the last 1 month======

    2013-09-15 20:35:30 ----D---- C:\Windows\Prefetch

    2013-09-15 20:35:24 ----D---- C:\Windows\Temp

    2013-09-15 20:35:22 ----RD---- C:\Program Files

    2013-09-15 20:11:01 ----D---- C:\Windows\Panther

    2013-09-15 20:11:01 ----D---- C:\Windows\inf

    2013-09-15 20:11:01 ----D---- C:\Windows\debug

    2013-09-15 20:11:01 ----D---- C:\Windows

    2013-09-15 19:41:17 ----D---- C:\ProgramData\PCDr

    2013-09-15 19:26:18 ----D---- C:\Users\Jean\AppData\Roaming\Dropbox

    2013-09-15 19:26:18 ----A---- C:\Windows\system32\log.txt

    2013-09-15 19:25:37 ----D---- C:\Windows\system32\config

    2013-09-15 19:25:26 ----D---- C:\Windows\system32\Tasks

    2013-09-15 19:22:35 ----D---- C:\ProgramData\AVG Secure Search

    2013-09-15 19:22:23 ----D---- C:\Program Files\AVG Secure Search

    2013-09-15 19:21:49 ----D---- C:\ProgramData\Tarma Installer

    2013-09-15 19:10:49 ----SHD---- C:\System Volume Information

    2013-09-15 18:49:13 ----SHD---- C:\Windows\Installer

    2013-09-15 12:37:56 ----D---- C:\Windows\System32

    2013-09-15 12:37:56 ----A---- C:\Windows\system32\PerfStringBackup.INI

    2013-09-13 12:46:15 ----A---- C:\Windows\system32\FlashPlayerApp.exe

    2013-09-13 09:07:39 ----D---- C:\Windows\rescache

    2013-09-13 08:24:25 ----D---- C:\Windows\Microsoft.NET

    2013-09-13 08:24:06 ----RSD---- C:\Windows\assembly

    2013-09-13 08:17:38 ----D---- C:\Windows\winsxs

    2013-09-13 08:16:02 ----D---- C:\Program Files\Internet Explorer

    2013-09-13 08:15:59 ----D---- C:\Windows\system32\nl-NL

    2013-09-13 08:15:43 ----D---- C:\Windows\system32\DriverStore

    2013-09-13 08:15:42 ----D---- C:\Windows\system32\drivers

    2013-09-12 20:32:06 ----D---- C:\ProgramData\Microsoft Help

    2013-09-12 20:29:13 ----D---- C:\Windows\system32\catroot

    2013-09-12 20:29:12 ----D---- C:\Windows\system32\catroot2

    2013-09-12 20:28:02 ----D---- C:\Windows\system32\MRT

    2013-09-12 20:26:36 ----A---- C:\Windows\system32\MRT.exe

    2013-09-12 19:54:57 ----SD---- C:\Users\Jean\AppData\Roaming\Microsoft

    2013-09-11 10:00:11 ----D---- C:\Windows\system32\NDF

    2013-09-03 16:59:52 ----D---- C:\Program Files\Dl_cats

    2013-09-01 02:30:34 ----D---- C:\Windows\Tasks

    2013-09-01 02:30:34 ----D---- C:\Windows\system32\wfp

    2013-09-01 02:30:34 ----D---- C:\Windows\system32\wbem

    2013-09-01 02:30:34 ----D---- C:\Windows\AppCompat

    2013-09-01 02:30:30 ----D---- C:\Program Files\Common Files\AVG Secure Search

    2013-09-01 02:30:21 ----D---- C:\Windows\registration

    2013-09-01 02:28:37 ----D---- C:\Windows\system32\LogFiles

    2013-08-22 20:15:58 ----HD---- C:\ProgramData

    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R0 aswRvrt;aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [2013-05-09 49376]

    R0 aswVmm;aswVmm; C:\Windows\system32\drivers\aswVmm.sys [2013-06-28 175176]

    R0 iaStor;Intel AHCI Controller; C:\Windows\system32\drivers\iaStor.sys [2010-11-05 354840]

    R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]

    R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2012-10-23 20624]

    R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2013-05-09 61680]

    R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2013-06-28 770344]

    R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2013-06-28 369584]

    R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2013-05-09 56080]

    R1 avgtp;avgtp; \??\C:\Windows\system32\drivers\avgtpx86.sys [2013-08-14 37664]

    R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]

    R1 VWiFiFlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]

    R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2013-05-09 29816]

    R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2013-05-09 66336]

    R3 cxbu0wdm;OMNIKEY 3x21; C:\Windows\system32\DRIVERS\cxbu0wdm.sys [2011-09-06 119040]

    R3 e1cexpress;Intel® PRO/1000 PCI Express Network Connection Driver C; C:\Windows\system32\DRIVERS\e1c6232.sys [2010-10-28 238760]

    R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 26840]

    R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2012-03-19 13210624]

    R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2010-10-19 3218920]

    R3 IntcDAud;Intel® Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-14 269824]

    R3 MEI;Intel® Management Engine Interface; C:\Windows\system32\DRIVERS\HECI.sys [2010-10-19 41088]

    R3 netr28u;RT2870 USB Extensible Wireless LAN Card Driver; C:\Windows\system32\DRIVERS\netr28u.sys [2010-05-26 856928]

    R3 psadd;Lenovo Parties Service Access Device Driver; C:\Windows\system32\DRIVERS\psadd.sys [2009-12-02 33088]

    R3 TPM;TPM; C:\Windows\system32\drivers\tpm.sys [2009-07-14 30720]

    R3 TVTI2C;Lenovo SM bus driver; C:\Windows\system32\DRIVERS\Tvti2c.sys [2009-09-24 38336]

    R3 usbscan;Stuurprogramma voor USB-scanner; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]

    R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]

    S2 Parvdm;Parvdm; C:\Windows\system32\drivers\parvdm.sys [2009-07-14 8704]

    S3 aic78xx;aic78xx; C:\Windows\system32\drivers\djsvs.sys [2009-07-14 70720]

    S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]

    S3 athrusb;Atheros Wireless LAN USB device driver; C:\Windows\system32\DRIVERS\athrusb.sys [2008-07-29 904192]

    S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]

    S3 BthEnum;Bluetooth-stuurprogramma voor aanvraagblok; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 34816]

    S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]

    S3 BTHPORT;Stuurprogramma voor Bluetooth-poort; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 393728]

    S3 BTHUSB;USB-stuurprogramma voor Bluetooth-radio; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]

    S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-20 62464]

    S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]

    S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]

    S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]

    S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]

    S3 Ser2plx86;Prolific Serial port WDF driver; C:\Windows\system32\DRIVERS\ser2pl.sys []

    S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]

    S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]

    S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]

    S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]

    S3 USRWGU(USR);USRobotics Wireless USB Adapter(USR); C:\Windows\system32\DRIVERS\USRWGU.sys [2005-12-29 408064]

    S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]

    S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\drivers\viac7.sys [2009-07-14 52736]

    S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]

    S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]

    S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-10 65640]

    R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2012-12-21 57008]

    R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-05-09 46808]

    R2 Bonjour Service;Bonjour-service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 390504]

    R2 CCALib8;Canon Camera Access Library 8; C:\Program Files\Canon\CAL\CALMAIN.exe [2005-09-30 96341]

    R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]

    R2 dlcq_device;dlcq_device; C:\Windows\system32\dlcqcoms.exe [2006-12-12 537480]

    R2 IAStorDataMgrSvc;Intel® Rapid Storage Technology; C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-11-06 13336]

    R2 jhi_service;Intel® Identity Protection Technology Host Interface Service; C:\Program Files\Intel\Services\IPT\jhi_service.exe [2011-02-24 212944]

    R2 LMS;Intel® Management and Security Application Local Management Service; C:\Program Files\Intel\Intel® Management Engine Components\LMS\LMS.exe [2010-11-17 325656]

    R2 Power Manager DBC Service;Power Manager DBC Service; C:\Program Files\ThinkPad\Utilities\PWMDBSVC.EXE [2010-12-14 70968]

    R2 SeaPort;SeaPort; C:\Program Files\Microsoft\BingBar\SeaPort.EXE [2011-02-25 249648]

    R2 SUService;System Update; C:\Program Files\Lenovo\System Update\SUService.exe [2010-11-25 28672]

    R2 UNS;Intel® Management and Security Application User Notification Service; C:\Program Files\Intel\Intel® Management Engine Components\UNS\UNS.exe [2010-11-17 2656280]

    R2 VIPAppService;VIPAppService; C:\Program Files\Symantec\VIP Access Client\VIPAppService.exe [2011-07-13 82544]

    R2 vToolbarUpdater15.5.0;vToolbarUpdater15.5.0; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\ToolbarUpdater.exe [2013-08-14 1643184]

    R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 1710464]

    R3 iPod Service;iPod-service; C:\Program Files\iPod\bin\iPodService.exe [2013-05-31 553288]

    R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]

    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

    S2 gupdate;Google Update-service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-10-27 136176]

    S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-13 257416]

    S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]

    S3 BBSvc;Bing Bar Update Service; C:\Program Files\Microsoft\BingBar\BBSvc.EXE [2011-03-02 183560]

    S3 cphs;Intel® Content Protection HECI Service; C:\Windows\system32\IntelCpHeciSvc.exe [2012-03-19 276248]

    S3 gupdatem;Google Update-service (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-10-27 136176]

    S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-10-27 194032]

    S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2012-09-20 30785672]

    S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]

    S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]

    S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]

    S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]

    S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2012-04-04 1343400]

    S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-23 51040]

    -----------------EOF-----------------

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.