sers

10 april 2014

Beste Clarkie

Ik heb idd de printer en de cartridges door de printer laten reinigen.

Het vervelende van het e.e.a. is dat je relatief erg veel geld kwijt ben aan nieuwe originele cartridges.

Ik zag vandaag een HP scanner-printer bij het Kruisvat voor euro 49,== terwijl nieuwe originele cartridges iets tegen de euro 30 kosten.

Ik zou graag het volgende willen weten. Als ik deze pagina afdruk zie ik op de afdruk bv niet het grijs van de kop.

de rode balken met daar in vandaag, 13:57 en Vandaag 19:36 is niet volledig rood maar alleen maar rood omlijnt. Het geel en blauwe petje en de rode sleutel ios allemaal goed

Hoe schat u de kans in dat het aan de cartridges/patronen ligt?

- - - Updated - - -

in additie>> Als u de kans redelijk in schat dat het aan de patronen ligt ga ik voor nieuwe patronen

10 april 2014

hallo allemaal.

Ik heb al jaren een HP Deskjet F4210 en had een Dell met XP.

Het werkte allemaal redelijk tot goed.

Ik heb nu een nieuwe desktop met Windows 8.1 erop.

Ik heb op de HP site gekeken en het complete instalatieprogramma gedownloaded en geinstaleerd.

De printer doet zijn werkl

Als ik een doc. bestand of een email bericht uitprint is er niets aan de hand. Maar als ik een foto uitprint dan krijg ik een blauwe print. Zelfs als ik een zwart wit foto uitprint.

Via het programma van HP kan ik niet zien of er voldoende inkt in de cartridges zit. (ik denk het haast wel omdat ik email wel gewoon in de juiste kleuren kan printen) ik gebruik zg "we care" cartridges (niet van HP).

Wat kan ik doen?

Alvast bedankt voor uw antwoord

24 februari 2014

Ik weet niet of jullie al zover zijn dat jullie problemen met smartphones ook opnemen in jullie package.

If yes dan het navolgende probleem:

Ik heb een Acer Z3 android 4.2.2 en WhatsApp installed.

Als ik een video opneem met de camera en verstuur via Whatsapp zijn de kleuren totaal verkeerd .

Wat rood moet zijn is blauw etc etc.

Als ik dezelfde video verstuur via email komt hij wel goed over.

Ik heb WhatsApp verwijderd en opnieuw installed. Geen resultaat

Alle foto's en video komen in de "Gallery app"ik kan daar geen instellingen vinden

Ik heb de cam,era instellingen gezet op "standaard"

Als jullie dit soort problemen behandelen alsvast bedankt voor je antwoord!

3 december 2013

Ok! Bedankt voor jullie antwoorden.

Ik ga me niet meer bekommeren om dit item.

3 december 2013

Goede morgen

Ik was bezig mijn pc wat schoon te maken via CCleaner (doe ik regelmatig).

Ik kijk ook altijd onder gereedschap naar "opstarten"

Nu zag ik ineens een file staan genaamd igfxpers van Intel Corporation bestand c:/Windows\system32\igfxpers.exe

Als ik op inter zoek wat igfxpers is dan kom ik uit op uitdrukkingen zoals virus dropper etc etc.

De vraag aan u is: is het gevaarlijk? if so moet ik het verwijderen en hoe doe ik dat.

Alvast bedankt voor uw antwoord

bijgaand screenprint van "opstarten" in CCleaner

vraag.doc

27 oktober 2013

Outlook is er nog en idd >>>vanuit outlook kom ik er in.

Ik weet nog niet hoe ik ze moet copy-en naar mijn huidige adresboek maar dat kan ook handmatig overtikken worden natuurlijk

Hartstikke bedankt voor de hulp!

27 oktober 2013

Ok no problem!

Wat nu te doen?

- - - Updated - - -

Ok no problem!
Wat nu te doen?

Nou ben ik weer te snel sry ......

Op mijn F schijf staat nu een file met de naam mailboxreservekopie.pst

Deze heb ik idd op 7 oktober aangemaakt (zie boven)

Als ik hem probeer te openen krijg ik een kladblok maar geen tekst

27 oktober 2013

Ik heb de verborgen en systeembestanden weergave nu gefaciliteerd.

Je zegt <<<<<en geef dan ook meteen even aan dat extensies van bekende programma's moeten worden>>>>>

Er staat 1 vakje (die is niet aangevinkt) met extensies voor bekende bestandtypen verbergen.

Bedoel je dat?

Verder kan ik geen optie kiezen in mapopties inzake extensies

27 oktober 2013

Als je dat in de zoekfunbktie bedoelt>>ja daar staat aangevinkt> Systeemmappen doorzoeken

Verborgen bestanden en mappen doorzoeken

Submappen doorzoeken en

Back-uptape doorzoeken

27 oktober 2013

Hi allemaal

Ik heb XP en gebruik outlook.

Verleden week ben ik met jullie bezig geweest om mijn oude computer wat sneller te laten starten.

Omdat ik overweeg om tzt een nieuwe desktop te kopen had ik daarvoor geprobeerd om mijn emails en email adressen te back-uppen naar mijn F schijf (externe harddisk)

Gisteren kwam ik erachter dat ik diverse email adressen ineens mis.

Volgens mij willekeurig.

Die backup kan ik ook niet terug vinden op mijn F schijf maar ik herinner me wel dat het iets met POT of PST bestanden te maken had.

Ik heb samen met jullie flink wat prorgramma's gedownloaded en gerunned maar ik geloof niet dat dat er iets mee te maken heeft.

Weten jullie misschien wat ik kan doen om die emailadressen terug te krijgen?

Alvast bedankt

22 oktober 2013

Sorry Kape. Ik heb het niet goed gelezen!

Het stond er wel degelijk

Nogamaals hartelijk dank voor alles

22 oktober 2013

ok all done!

Blijft alleen mijn vraag over dat file-tje op mijn buroblad.

Kan ik dat naar de prullenbak verwijzen?

Als ik niks hoor dan doe ik dat en zet ik morgenochtend de hele zaak op OPGELOST

Rest mij je hartelijk te bedanken voor de hulp die ik kreeg.

Ik wens je en jullie hele team heel veel succes

22 oktober 2013

Beste Kape,

Ja veel beter.

In ong. 1-1 1/2 minuut start de pc op tot gebruiksklaar!

Ik zou zeggen.....niets meer aan doen.

Voordat ik markeer als opgelost

Wat doe ik met Combofix en dat filetje op mijn buroblad

En...het maakt mij echt niets uit hoor maar ter info>>>ik krijg geen email meer wanneer je weer een antwoord/instructie stuurt

Mvg

21 oktober 2013

hier is het combofix log

ComboFix 13-10-21.01 - Eigenaar 10/21/2013 23:31:36.13.1 - x86

Microsoft Windows XP Home Edition 5.1.2600.3.1252.31.1043.18.2558.1917 [GMT 2:00]

Gestart vanuit: C:\Documents and Settings\Eigenaar.DELL\Bureaublad\ComboFix.exe

AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}

(((((((((((((((((((( Bestanden Gemaakt van 2013-09-21 to 2013-10-21 ))))))))))))))))))))))))))))))

2013-10-20 21:11:29 . 2013-10-20 21:11:44 -------- d-----w- C:\Program Files\FileZilla FTP Client

2013-10-20 18:31:00 . 2013-10-17 23:11:20 24064 ----a-w- C:\WINDOWS\zoek-delete.exe

2013-10-19 16:15:38 . 2013-10-19 16:15:50 -------- dc----w- C:\rsit

2013-10-05 13:38:07 . 2013-10-21 21:20:34 -------- d--h--r- C:\Documents and Settings\Eigenaar.DELL\Onlangs geopend

2013-09-26 18:00:39 . 2013-09-26 18:00:39 208760 ----a-w- C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll

2013-09-22 11:38:25 . 2013-09-22 11:38:03 94632 ----a-w- C:\WINDOWS\system32\WindowsAccessBridge.dll

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

2013-10-09 07:41:00 . 2012-04-04 07:10:08 692616 ----a-w- C:\WINDOWS\system32\FlashPlayerApp.exe

2013-10-09 07:40:58 . 2011-05-19 09:06:30 71048 ----a-w- C:\WINDOWS\system32\FlashPlayerCPLApp.cpl

2013-09-23 18:25:15 . 2004-08-04 12:00:00 920064 ----a-w- C:\WINDOWS\system32\wininet.dll

2013-09-23 18:25:12 . 2004-08-04 12:00:00 43520 ----a-w- C:\WINDOWS\system32\licmgr10.dll

2013-09-23 18:25:12 . 2004-08-04 12:00:00 1469440 ----a-w- C:\WINDOWS\system32\inetcpl.cpl

2013-09-23 18:25:08 . 2004-08-04 12:00:00 18944 ----a-w- C:\WINDOWS\system32\corpol.dll

2013-09-23 18:07:19 . 2004-08-04 12:00:00 385024 ----a-w- C:\WINDOWS\system32\html.iec

2013-08-30 07:48:13 . 2013-07-11 11:57:31 369584 ----a-w- C:\WINDOWS\system32\drivers\aswSP.sys

2013-08-30 07:48:13 . 2013-07-11 11:57:28 56080 ----a-w- C:\WINDOWS\system32\drivers\aswTdi.sys

2013-08-30 07:48:13 . 2013-07-11 11:57:27 177864 ----a-w- C:\WINDOWS\system32\drivers\aswVmm.sys

2013-08-30 07:48:12 . 2013-07-11 11:57:29 49760 ----a-w- C:\WINDOWS\system32\drivers\aswRdr.sys

2013-08-30 07:48:12 . 2013-07-11 11:57:28 770344 ----a-w- C:\WINDOWS\system32\drivers\aswSnx.sys

2013-08-30 07:48:12 . 2013-07-11 11:57:27 49376 ----a-w- C:\WINDOWS\system32\drivers\aswRvrt.sys

2013-08-30 07:48:11 . 2013-07-11 11:57:32 29816 ----a-w- C:\WINDOWS\system32\drivers\aswFsBlk.sys

2013-08-30 07:48:11 . 2013-07-11 11:57:26 66336 ----a-w- C:\WINDOWS\system32\drivers\aswMonFlt.sys

2013-08-30 07:47:40 . 2013-07-11 11:56:21 41664 ----a-w- C:\WINDOWS\avastSS.scr

2013-08-30 07:47:32 . 2012-08-26 07:47:16 229648 ----a-w- C:\WINDOWS\system32\aswBoot.exe

2013-08-29 07:01:31 . 2004-08-04 12:00:00 1878784 ----a-w- C:\WINDOWS\system32\win32k.sys

2013-08-09 01:56:37 . 2004-08-04 12:00:00 391168 ----a-w- C:\WINDOWS\system32\themeui.dll

2013-08-09 00:55:08 . 2004-08-04 12:00:00 144128 ----a-w- C:\WINDOWS\system32\drivers\usbport.sys

2013-08-09 00:55:07 . 2008-01-21 16:20:35 32384 ----a-w- C:\WINDOWS\system32\drivers\usbccgp.sys

2013-08-09 00:55:06 . 2004-08-04 12:00:00 5376 ----a-w- C:\WINDOWS\system32\drivers\usbd.sys

2013-08-05 13:30:18 . 2004-08-04 12:00:00 1289216 ----a-w- C:\WINDOWS\system32\ole32.dll

2013-08-02 23:48:38 . 2006-10-18 19:47:22 1543680 ------w- C:\WINDOWS\system32\wmvdecod.dll

1999-05-03 14:01:18 . 1999-05-03 14:01:18 99840 -c--a-w- C:\Program Files\Common Files\IRAABOUT.DLL

1998-12-08 23:53:54 . 1998-12-08 23:53:54 70144 -c--a-w- C:\Program Files\Common Files\IRAMDMTR.DLL

1998-12-08 23:53:54 . 1998-12-08 23:53:54 48640 -c--a-w- C:\Program Files\Common Files\IRALPTTR.DLL

1998-12-08 23:53:54 . 1998-12-08 23:53:54 31744 -c--a-w- C:\Program Files\Common Files\IRAWEBTR.DLL

1998-12-08 23:53:54 . 1998-12-08 23:53:54 186368 -c--a-w- C:\Program Files\Common Files\IRAREG.DLL

1998-12-08 23:53:54 . 1998-12-08 23:53:54 17920 -c--a-w- C:\Program Files\Common Files\IRASRIAL.DLL

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]

@="{472083B0-C522-11CF-8763-00608CC02F24}"

[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]

2013-08-30 07:47:20 121968 ----a-w- C:\Program Files\AVAST Software\Avast\ashShell.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"LVCOMS"="C:\Program Files\Common Files\Logitech\QCDriver\LVCOMS.EXE" [2001-09-06 17:10:12 94208]

"igfxpers"="C:\WINDOWS\system32\igfxpers.exe" [2005-09-20 07:36:20 114688]

"Adobe ARM"="C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 21:06:36 958576]

"avast"="C:\Program Files\AVAST Software\Avast\avastUI.exe" [2013-08-30 07:47:34 4858968]

"APSDaemon"="C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 19:43:52 59720]

"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2013-05-01 01:59:04 421888]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 17:02:53 15360]

"DWQueuedReporting"="C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-02-25 23:01:00 437160]

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^Adobe Reader Snelle start.lnk]

backup=C:\WINDOWS\pss\Adobe Reader Snelle start.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^HP Digital Imaging Monitor.lnk]

path=C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\HP Digital Imaging Monitor.lnk

backup=C:\WINDOWS\pss\HP Digital Imaging Monitor.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^Microsoft Office.lnk]

backup=C:\WINDOWS\pss\Microsoft Office.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^Poort voor Symantec Fax Starter Edition.lnk]

backup=C:\WINDOWS\pss\Poort voor Symantec Fax Starter Edition.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Start^Programma's^Opstarten^Reality Fusion GameCam SE.lnk]

backup=C:\WINDOWS\pss\Reality Fusion GameCam SE.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Eigenaar.DELL^Menu Start^Programma's^Opstarten^hpqtra08.exe]

path=C:\Documents and Settings\Eigenaar.DELL\Menu Start\Programma's\Opstarten\hpqtra08.exe

backup=C:\WINDOWS\pss\hpqtra08.exeStartup

[HKLM\~\startupfolder\C:^Documents and Settings^Eigenaar.DELL^Menu Start^Programma's^Opstarten^Secunia PSI.lnk]

backup=C:\WINDOWS\pss\Secunia PSI.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]

2013-04-04 21:06:36 958576 ----a-w- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]

2005-09-20 07:32:24 77824 ----a-w- C:\WINDOWS\system32\hkcmd.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]

2008-03-25 19:27:58 49152 ----a-w- C:\Program Files\Hp\HP Software Update\hpwuSchd2.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\hpqSRMon]

2008-03-13 07:34:28 81920 ----a-w- C:\Program Files\Hp\Digital Imaging\bin\HpqSRmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]

2005-09-20 07:35:40 94208 ----a-w- C:\WINDOWS\system32\igfxtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LVCOMS]

2003-12-06 00:12:12 102400 -c--a-w- C:\Program Files\Common Files\Logitech\PDDriver\LVComS.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mxomssmenu]

2008-07-21 15:16:06 169312 -c--a-w- C:\Program Files\Maxtor\OneTouch Status\MaxMenuMgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Nikon Transfer Monitor]

2008-09-30 12:06:50 485208 -c--a-w- C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RealTray]

2010-12-20 21:18:16 20480 ----a-w- C:\Program Files\Real\RealPlayer\realplay.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]

2013-02-28 16:50:02 18642024 ----a-r- C:\Program Files\Skype\Phone\Skype.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]

"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\system32\\sessmgr.exe"=

"C:\\Program Files\\Microsoft Office\\Office\\1043\\WFXMSRVR.EXE"=

"C:\\Program Files\\Messenger\\msmsgs.exe"=

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"C:\\WINDOWS\\system32\\mmc.exe"=

"C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqusgm.exe"=

"C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqusgh.exe"=

"C:\\Program Files\\Hp\\HP Software Update\\HPWUCli.exe"=

"C:\\Program Files\\Hp\\Digital Imaging\\Smart Web Printing\\SmartWebPrintExe.exe"=

"C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqtra08.exe"=

"C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqste08.exe"=

"C:\\Program Files\\Hp\\Digital Imaging\\bin\\hposid01.exe"=

"C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqkygrp.exe"=

"C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpiscnapp.exe"=

"C:\\Program Files\\Common Files\\HP\\Digital Imaging\\bin\\hpqPhotoCrm.exe"=

"C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqpsapp.exe"=

"C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqpse.exe"=

"C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqsudi.exe"=

"C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqgplgtupl.exe"=

"C:\\Program Files\\Hp\\Digital Imaging\\bin\\hpqgpc01.exe"=

"C:\\WINDOWS\\system32\\dpvsetup.exe"=

"C:\\Program Files\\Soluto\\SolutoCleanup.exe"=

"C:\\Program Files\\Soluto\\Soluto.exe"=

"C:\\Program Files\\Soluto\\SolutoService.exe"=

"C:\\Program Files\\Soluto\\SolutoConsole.exe"=

"C:\\Program Files\\Soluto\\SolutoUpdateService.exe"=

"C:\\Program Files\\Skype\\Phone\\Skype.exe"=

"C:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=

R0 aswRvrt;aswRvrt;C:\WINDOWS\system32\drivers\aswRvrt.sys [7/11/2013 1:57:27 PM 49376]

R0 aswVmm;aswVmm;C:\WINDOWS\system32\drivers\aswVmm.sys [7/11/2013 1:57:27 PM 177864]

R0 Soluto;Soluto;C:\WINDOWS\system32\drivers\Soluto.sys [10/27/2012 10:36:41 AM 51144]

R1 aswSnx;aswSnx;C:\WINDOWS\system32\drivers\aswSnx.sys [7/11/2013 1:57:28 PM 770344]

R1 aswSP;aswSP;C:\WINDOWS\system32\drivers\aswSP.sys [7/11/2013 1:57:31 PM 369584]

R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\drivers\aswFsBlk.sys [7/11/2013 1:57:32 PM 29816]

R2 aswMonFlt;aswMonFlt;C:\WINDOWS\system32\drivers\aswMonFlt.sys [7/11/2013 1:57:26 PM 66336]

R2 Fabs;FABS - Helping agent for MAGIX media database;C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe [5/24/2011 10:33:30 AM 1840128]

R2 ogmservice;Online Games Manager;C:\Program Files\Online Games Manager\ogmservice.exe [8/8/2013 4:18:38 PM 559552]

R2 SolutoLauncherService;Soluto Launcher Service;C:\Program Files\Soluto\SolutoLauncherService.exe [10/25/2012 6:11:08 PM 148536]

R2 SolutoService;Soluto PCGenome Core Service;C:\Program Files\Soluto\SolutoService.exe [10/25/2012 6:11:02 PM 620088]

R3 cpuz135;cpuz135;\??\C:\WINDOWS\TEMP\cpuz135\cpuz135_x32.sys --> C:\WINDOWS\TEMP\cpuz135\cpuz135_x32.sys [?]

S2 Skype C2C Service;Skype C2C Service;C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe [10/2/2012 1:13:44 PM 3064000]

S2 SkypeUpdate;Skype Updater;C:\Program Files\Skype\Updater\Updater.exe [2/28/2013 6:45:16 PM 161384]

S3 ADM8511;ADMtek ADM8511/AN986 USB To Fast Ethernet Converter;C:\WINDOWS\system32\drivers\ADM8511.SYS [1/21/2008 11:56:44 AM 20160]

S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe [4/26/2011 1:54:12 PM 2702848]

S3 netr73;Sitecom RT73 Wireless Driver for Vista;C:\WINDOWS\system32\drivers\netr73.sys [9/3/2011 3:04:05 PM 256000]

S3 RK281X;Driver for RK281X Device;C:\WINDOWS\system32\drivers\RK281X.sys [6/25/2010 2:16:00 PM 44400]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12

getPlusHelper REG_MULTI_SZ getPlusHelper

hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]

2013-10-19 10:51:35 1185744 ----a-w- C:\Program Files\Google\Chrome\Application\30.0.1599.101\Installer\chrmstp.exe

Inhoud van de 'Gedeelde Taken' map

2013-10-21 C:\WINDOWS\Tasks\Adobe Flash Player Updater.job

- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-04 07:10:08 . 2013-10-09 07:41:07]

2013-10-21 C:\WINDOWS\Tasks\avast! Emergency Update.job

- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-07-11 11:56:11 . 2013-08-30 07:47:33]

2013-10-21 C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job

- C:\Program Files\Google\Update\GoogleUpdate.exe [2012-11-15 10:13:34 . 2012-11-15 10:13:30]

2013-10-21 C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

- C:\Program Files\Google\Update\GoogleUpdate.exe [2012-11-15 10:13:34 . 2012-11-15 10:13:30]

------- Bijkomende Scan -------

uStart Page = hxxp://www.google.com

TCP: DhcpNameServer = 212.54.40.25 212.54.35.25

DPF: {2E28242B-A689-11D4-80F2-0040266CBB8D} - hxxp://gocanaria.ath.cx:8000/kxhcm10.ocx

DPF: {3E90FFF5-1347-45B9-91F6-DA47926E9697} - hxxp://online-virusscan.casema.nl/systemcheck/PlaNetSysInfo.cab

DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://game.zylom.com/activex/zylomgamesplayer.cab

DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} - hxxp://83.84.124.118:9999/activex/AMC.cab

21 oktober 2013

sample_20131020_0814.zip downloaden

Hier is de link naar het bestandje

Ik kom nog met combofix

21 oktober 2013

Beste Kape,

Altijd goed te horen dat er flink wat rotzooi is opgeruimd.

Ik heb de indruk dat het opstarten wel iets beter gaat.

Alles bij elkaar duurt het 4 1/2 minuut voordat mijn outlook programma ook daadwerkelijk werkt.

Zoals gezegd het is een oude computer.

Misschien is het wijs om toch nog eens naar CCleaner te kijken inzake de opstartprogramma's? (zie de bijlage die ik in het begin heb opgestuurd)

Als daar ook niets meer te "doen" valt moeten we het maar van het "oude" ding accepteren denk ik zo.

Ik hoor het graag als ik nog iets meer moet/kan doen en anders zou ik deze vraag als opgelost willen markeren

Alvast bedankt!

mvg

Jacques

- - - Updated - - -

Ter aanvulling van bovenstaande een vraagje

Er staat nu een pictogram genaamd "sample" op mijn buroblad

Beveiligd met een paswoord.

Kan ik die gewoon verwijderen?

Alvast bedankt!

20 oktober 2013

hier is het log

Zoek.exe Version 4.0.0.5 Updated 17-October-2013

Tool run by Eigenaar on Sun 10/20/2013 at 19:58:44.46.

Microsoft Windows XP Home Edition 5.1.2600 Service Pack 3 x86

Running in: Normal Mode Internet Access Detected

Launched: C:\Documents and Settings\Eigenaar.DELL\Mijn documenten\Downloads\zoek\zoek.scr [script inserted] [Checkboxes used]

==== Older Logs ======================

C:\zoek-results2013-10-20-140038.log 19095 bytes

==== Creating Sample_20131020_0814.zip ======================

Process chrome.exe killed

Copied file C:\Documents and Settings\Eigenaar.DELL\Application Data\BabMaint.exe to sample\BabMaint.exe

sample\BabMaint.exe renamed to 06D4F8F40814EF453CBAA45F036F9A5D

C:\Documents and Settings\All Users\Bureaublad\sample_20131020_0814.zip created successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-1177238915-484061587-839522115-1003\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} deleted successfully

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== FireFox Fix ======================

Deleted from C:\Documents and Settings\Eigenaar.DELL\Application Data\Mozilla\Firefox\Profiles\qpn01x6z.default\prefs.js:

user_pref("browser.startup.homepage", "http://search.imesh.net");

user_pref("browser.search.selectedEngine", "AVG Secure Search");

Added to C:\Documents and Settings\Eigenaar.DELL\Application Data\Mozilla\Firefox\Profiles\qpn01x6z.default\prefs.js:

user_pref("browser.startup.homepage", "http://www.google.com");

user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");

user_pref("browser.newtab.url", "http://www.google.com/");

user_pref("browser.search.defaultengine", "Google");

user_pref("browser.search.defaultenginename", "Google");

user_pref("browser.search.selectedEngine", "Google");

user_pref("browser.search.order.1", "Google");

user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");

user_pref("browser.search.suggest.enabled", true);

user_pref("browser.search.useDBForOrder", true);

ProfilePath: C:\Documents and Settings\Eigenaar.DELL\Application Data\Mozilla\Firefox\Profiles\qpn01x6z.default

---- Lines DataMngr removed from prefs.js ----

user_pref("DataMngr.Updater.Enabled", "true");

---- Lines DataMngr modified from prefs.js ----

---- Lines DataMngr removed from user.js ----

---- Lines I Want This removed from prefs.js ----

user_pref("extensions.crossriderapp2258.2258.description", "I Want This!");

user_pref("extensions.crossriderapp2258.2258.name", "I Want This");

---- Lines I Want This modified from prefs.js ----

---- Lines I Want This removed from user.js ----

---- Lines Delta Toolbar removed from prefs.js ----

---- Lines Delta Toolbar modified from prefs.js ----

---- Lines Delta Toolbar removed from user.js ----

---- Lines softonic.com removed from prefs.js ----

user_pref("extensions.Softonic.tlbrSrchUrl", "http://search.softonic.com/MON00001/tb_v1?SearchSource=1&cc=&q=");

---- Lines softonic.com modified from prefs.js ----

user_pref("extensions.enabledAddons", "{20a82645-c095-46ed-80e3-08825760534b}:0.0.0,wrc@avast.com:6.0.1407,ffxtlbr@babylon.com:1.2.0,crossriderapp2258@crossrider.com:0.80.26,ffxtlbra@softonic.com:1.5.0,{1FD91A9C-410C-4090-BBCC-55D3450EF433}:1.0,{28387537-e3f9-4ed7-860c-11e69af4a8a0}:4.6.1.01,{972ce4c6-7e08-4474-a285-3208198ce6fd}:7.0.1");

---- Lines softonic.com removed from user.js ----

user_pref("extensions.Softonic.tlbrSrchUrl", "http://search.softonic.com/MON00001/tb_v1?SearchSource=1&cc=&q=");

---- Lines Yontoo removed from prefs.js ----

---- Lines Yontoo modified from prefs.js ----

---- Lines Yontoo removed from user.js ----

user_pref("extentions.y2layers.defaultEnableAppsList", "twittube,buzzdock,YontooNewOffers");

---- Lines Wincore Mediabar removed from prefs.js ----

---- Lines Wincore Mediabar modified from prefs.js ----

---- Lines Wincore Mediabar removed from user.js ----

---- Lines DealPly removed from prefs.js ----

---- Lines DealPly modified from prefs.js ----

---- Lines DealPly removed from user.js ----

user_pref('extensions.dealply.partner', 'inff');

user_pref('extensions.dealply.channel', 'infftog01');

user_pref('extensions.dealply.installId', 'v24300260020945368739172012111114122533');

user_pref('extensions.dealply.installIdSource', 'inst');

user_pref('extensions.dealply.sampleGroup', '3');

user_pref('extensions.dealply.partner', 'vita');

user_pref('extensions.dealply.channel', 'vitasuperfiles');

user_pref('extensions.dealply.installId', 'v24300266269130459584412012111214315133');

user_pref('extensions.dealply.installIdSource', 'inst');

user_pref('extensions.dealply.sampleGroup', '3');

---- Lines Torntv removed from prefs.js ----

---- Lines Torntv modified from prefs.js ----

---- Lines Torntv removed from user.js ----

---- Lines BabylonToolbar removed from prefs.js ----

user_pref("extensions.BabylonToolbar.babExt", "");

user_pref("extensions.BabylonToolbar.babTrack", "affID=110819");

user_pref("extensions.BabylonToolbar.bbDpng", 4);

user_pref("extensions.BabylonToolbar.dfltSrch", true);

user_pref("extensions.BabylonToolbar.hmpg", true);

user_pref("extensions.BabylonToolbar.lastDP", 4);

user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.5.3.1715:09:33");

user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "7.0");

user_pref("extensions.BabylonToolbar.newTab", false);

user_pref("extensions.BabylonToolbar.propectorlck", 74727152);

user_pref("extensions.BabylonToolbar.prtkDS", 1);

user_pref("extensions.BabylonToolbar.prtkHmpg", 1);

user_pref("extensions.BabylonToolbar.smplGrp", "none");

user_pref("extensions.BabylonToolbar.srcExt", "ss");

user_pref("extensions.BabylonToolbar.vrsnTs", "1.5.3.1715:09:33");

user_pref("extensions.BabylonToolbar_i.aflt", "babsst");

user_pref("extensions.BabylonToolbar_i.babExt", "");

user_pref("extensions.BabylonToolbar_i.babTrack", "affID=110819");

user_pref("extensions.BabylonToolbar_i.hardId", "141a73df000000000000000cf6354857");

user_pref("extensions.BabylonToolbar_i.id", "141a73df000000000000000cf6354857");

user_pref("extensions.BabylonToolbar_i.instlDay", "15455");

user_pref("extensions.BabylonToolbar_i.instlRef", "sst");

user_pref("extensions.BabylonToolbar_i.newTab", false);

user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");

user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");

user_pref("extensions.BabylonToolbar_i.smplGrp", "none");

user_pref("extensions.BabylonToolbar_i.srcExt", "ss");

user_pref("extensions.BabylonToolbar_i.tlbrId", "tb9");

user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");

user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");

user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1715:09:33");

---- Lines BabylonToolbar modified from prefs.js ----

---- Lines BabylonToolbar removed from user.js ----

user_pref("extensions.BabylonToolbar_i.id", "141a73df000000000000000cf6354857");

user_pref("extensions.BabylonToolbar_i.hardId", "141a73df000000000000000cf6354857");

user_pref("extensions.BabylonToolbar_i.instlDay", "15514");

user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");

user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");

user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");

user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");

user_pref("extensions.BabylonToolbar_i.aflt", "babsst");

user_pref("extensions.BabylonToolbar_i.tlbrId", "tb9");

user_pref("extensions.BabylonToolbar_i.instlRef", "sst");

user_pref("extensions.BabylonToolbar.autoRvrt", "false");

user_pref("extensions.BabylonToolbar_i.newTab", false);

user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "http://search.babylon.com/?babsrc=TB_def&mntrId=141a73df000000000000000cf6354857&q=");

user_pref("extensions.BabylonToolbar.id", "141a73df000000000000000cf6354857");

user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}");

user_pref("extensions.BabylonToolbar.instlDay", "15656");

user_pref("extensions.BabylonToolbar.vrsn", "1.8.3.8");

user_pref("extensions.BabylonToolbar.vrsni", "1.8.3.8");

user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.8.3.813:22:31");

user_pref("extensions.BabylonToolbar.prtnrId", "babylon");

user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");

user_pref("extensions.BabylonToolbar.aflt", "babsst");

user_pref("extensions.BabylonToolbar_i.smplGrp", "none");

user_pref("extensions.BabylonToolbar.tlbrId", "tb9");

user_pref("extensions.BabylonToolbar.instlRef", "sst");

user_pref("extensions.BabylonToolbar.dfltLng", "en");

user_pref("extensions.BabylonToolbar.excTlbr", false);

user_pref("extensions.BabylonToolbar.admin", false);

user_pref("extensions.BabylonToolbar_i.babTrack", "affID=110824&tt=4612_7");

user_pref("extensions.BabylonToolbar_i.babExt", "");

user_pref("extensions.BabylonToolbar_i.srcExt", "ss");

---- Lines Search removed from prefs.js ----

user_pref("extensions.Softonic.rvrtMsg", "Click Yes to keep current home page and default search settings, Click No to restore original settings");

---- Lines Search modified from prefs.js ----

---- Lines Search removed from user.js ----

user_pref("extensions.Softonic.rvrtMsg", "Click Yes to keep current home page and default search settings, Click No to restore original settings");

---- Lines imesh removed from prefs.js ----

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_sr[imesh.com].expiration", "Sat May 05 2012 23:32:08 GMT+0200");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_sr[imesh.com].value", "1336167128");

---- Lines imesh modified from prefs.js ----

---- Lines imesh removed from user.js ----

---- Lines ask.com removed from prefs.js ----

user_pref("extensions.wrc.SearchRules.ask.com.style", ".WRCN {display:none} #yui-main .tsrc_vnru .title + .WRCN, #yui-main #teoma-results .title + .WRCN {display:inline !important; background: url(\"IMAGE\") right no-repeat}");

user_pref("extensions.wrc.SearchRules.ask.com.url", "^http(s)?\\:\\/\\/(.+\\.)?ask\\.com\\/.*");

---- Lines ask.com modified from prefs.js ----

---- Lines ask.com removed from user.js ----

---- Lines crossrider removed from prefs.js ----

user_pref("extensions.crossrider.bic", "136f878fae898f0a5a41e3b1a9cbb8bb");

user_pref("extensions.crossriderapp2258.2258.active", true);

user_pref("extensions.crossriderapp2258.2258.addressbar", "");

user_pref("extensions.crossriderapp2258.2258.affid", "0");

user_pref("extensions.crossriderapp2258.2258.backgroundver", 8);

user_pref("extensions.crossriderapp2258.2258.can_run_bg_code", true);

user_pref("extensions.crossriderapp2258.2258.certdomaininstaller", "");

user_pref("extensions.crossriderapp2258.2258.changeprevious", false);

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_aoi.value", "1335608540");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_crr.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_crr.value", "1336202311");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_geo.expiration", "Sat May 05 2012 12:22:23 GMT+0200");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_geo.value", "%7B%22geoplugin_city%22%3A%22Capelle%22%2C%22geoplugin_region%22%3A%22South%20Holland%22%2C%22geoplugin_areaCode%22%3A0%2C%22geoplugin_dmaCode%22%3A0%2C%22geoplugin_countryCode%22%3A%22NL%22%2C%22geoplugin_countryName%22%3A%22Netherlands%22%2C%22geoplugin_continentCode%22%3A%22EU%22%2C%22geoplugin_latitude%22%3A51.929901%2C%22geoplugin_longitude%22%3A4.5796%2C%22geoplugin_regionCode%22%3A11%2C%22geoplugin_regionName%22%3A%22South%20Holland%22%2C%22geoplugin_currencyCode%22%3A%22EUR%22%2C%22geoplugin_currencySymbol%22%3A%22%26%238364%3B%22%2C%22geoplugin_currencyConverter%22%3A0.7553650629%7D");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_hotfix20111102645.value", "%221%22");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_installer_params.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_installer_params.value", "%7B%22source_id%22%3A%2220646%22%2C%22sub_id%22%3A%22default%22%2C%22uzid%22%3A%2220646%26subid%3D%26pid%3D1112%22%7D");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_parent_zoneid.value", "%2220646%22");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");

user_pref("extensions.crossriderapp2258.2258.cookie._GPL_zoneid.value", "%2232962%22");

user_pref("extensions.crossriderapp2258.2258.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");

user_pref("extensions.crossriderapp2258.2258.cookie.InstallationTime.value", "1335608540");

user_pref("extensions.crossriderapp2258.2258.domain", "");

user_pref("extensions.crossriderapp2258.2258.emailsig", "");

user_pref("extensions.crossriderapp2258.2258.enablesearch", false);

user_pref("extensions.crossriderapp2258.2258.exposesites", "");

user_pref("extensions.crossriderapp2258.2258.fbremoteurl", "");

user_pref("extensions.crossriderapp2258.2258.group", 0);

user_pref("extensions.crossriderapp2258.2258.homepage", "");

user_pref("extensions.crossriderapp2258.2258.iframe", false);

user_pref("extensions.crossriderapp2258.2258.InstallationTime", 1335608540);

user_pref("extensions.crossriderapp2258.2258.manifesturl", "");

user_pref("extensions.crossriderapp2258.2258.newtab", "");

user_pref("extensions.crossriderapp2258.2258.opensearch", "");

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_13.name", "CrossriderAppUtils");

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_13.ver", 1);

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_14.name", "CrossriderUtils");

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_14.ver", 1);

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_15.name", "FacebookFFIE");

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_15.ver", 1);

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_16.name", "FFAppAPIWrapper");

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_16.ver", 1);

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_17.name", "jQuery");

user_pref("extensions.crossriderapp2258.2258.plugins.plugin_17.ver", 1);

user_pref("extensions.crossriderapp2258.2258.plugins_lists.plugins_0", "17,14,16");

user_pref("extensions.crossriderapp2258.2258.plugins_lists.plugins_1", "17,14,13,16,15");

user_pref("extensions.crossriderapp2258.2258.pluginsurl", "http://app-static.crossrider.com/plugin/apps/2258/plugins/080/ff/plugins.json");

user_pref("extensions.crossriderapp2258.2258.pluginsversion", 2);

user_pref("extensions.crossriderapp2258.2258.premium", true);

user_pref("extensions.crossriderapp2258.2258.publisher", "215 Apps");

user_pref("extensions.crossriderapp2258.2258.searchstatus", 0);

user_pref("extensions.crossriderapp2258.2258.setnewtab", false);

user_pref("extensions.crossriderapp2258.2258.settingsurl", "");

user_pref("extensions.crossriderapp2258.2258.thankyou", "http://iw.antthis.com/thankyou.html");

user_pref("extensions.crossriderapp2258.2258.updateinterval", 360);

user_pref("extensions.crossriderapp2258.2258.ver", 50);

user_pref("extensions.crossriderapp2258.adsOldValue", -1);

user_pref("extensions.crossriderapp2258.apps", "2258");

user_pref("extensions.crossriderapp2258.bic", "136f878fae898f0a5a41e3b1a9cbb8bb");

user_pref("extensions.crossriderapp2258.cid", 2258);

user_pref("extensions.crossriderapp2258.firstrun", false);

user_pref("extensions.crossriderapp2258.hadappinstalled", true);

user_pref("extensions.crossriderapp2258.installationdate", 1335608540);

user_pref("extensions.crossriderapp2258.lastcheck", 22270031);

user_pref("extensions.crossriderapp2258.lastcheckitem", 22270039);

---- Lines crossrider modified from prefs.js ----

user_pref("extensions.enabledAddons", "{20a82645-c095-46ed-80e3-08825760534b}:0.0.0,wrc@avast.com:6.0.1407,ffxtlbr@babylon.com:1.2.0,crossriderapp2258@crossrider.com:0.80.26,ffxtlbra@disabled:1.5.0,{1FD91A9C-410C-4090-BBCC-55D3450EF433}:1.0,{28387537-e3f9-4ed7-860c-11e69af4a8a0}:4.6.1.01,{972ce4c6-7e08-4474-a285-3208198ce6fd}:7.0.1");

---- Lines crossrider removed from user.js ----

---- Lines Search-Results removed from prefs.js ----

user_pref("extensions.wrc.SearchRules.rambler.ru.style", ".WRCN {display:none} .search-results .title + .WRCN {display:inline !important; background: url(\"IMAGE\") right no-repeat}");

---- Lines Search-Results modified from prefs.js ----

---- Lines Search-Results removed from user.js ----

---- Lines 1FD91A9C-410C-4090-BBCC-55D3450EF433 removed from prefs.js ----

---- Lines 1FD91A9C-410C-4090-BBCC-55D3450EF433 modified from prefs.js ----

user_pref("extensions.enabledAddons", "{20a82645-c095-46ed-80e3-08825760534b}:0.0.0,wrc@avast.com:6.0.1407,ffxtlbr@babylon.com:1.2.0,disabledapp2258@disabled.com:0.80.26,ffxtlbra@disabled:1.5.0,{1FD91A9C-410C-4090-BBCC-55D3450EF433}:1.0,{28387537-e3f9-4ed7-860c-11e69af4a8a0}:4.6.1.01,{972ce4c6-7e08-4474-a285-3208198ce6fd}:7.0.1");

---- Lines 1FD91A9C-410C-4090-BBCC-55D3450EF433 removed from user.js ----

---- Lines ilivid removed from prefs.js ----

---- Lines ilivid modified from prefs.js ----

---- Lines ilivid removed from user.js ----

---- Lines {1FD91A9C-410C-4090-BBCC-55D3450EF433} removed from prefs.js ----

---- Lines {1FD91A9C-410C-4090-BBCC-55D3450EF433} modified from prefs.js ----

---- Lines {1FD91A9C-410C-4090-BBCC-55D3450EF433} removed from user.js ----

---- FireFox user.js and prefs.js backups ----

user_20131020_0817_.backup

prefs_20131020_0817_.backup

==== Deleting Files \ Folders ======================

C:\Program Files\iMesh Applications\MediaBar deleted

C:\Program Files\Delta deleted

C:\Program Files\iMesh Applications deleted

C:\Program Files\SearchCore for Browsers deleted

C:\Documents and Settings\Eigenaar.DELL\Application Data\Uniblue deleted

C:\Documents and Settings\Eigenaar.DELL\Application Data\LimeWirePlus deleted

C:\Documents and Settings\Eigenaar.DELL\Application Data\searchquband deleted

C:\Documents and Settings\Eigenaar.DELL\Application Data\Systweak deleted

C:\Documents and Settings\All Users\Application Data\Babylon deleted

C:\Documents and Settings\All Users\Application Data\Trymedia deleted

C:\Documents and Settings\Eigenaar.DELL\Local Settings\Application Data\Ilivid Player deleted

C:\Documents and Settings\Eigenaar.DELL\Local Settings\Application Data\CRE deleted

C:\Documents and Settings\Eigenaar.DELL\Local Settings\Application Data\PackageAware deleted

C:\Documents and Settings\Eigenaar.DELL\Local Settings\Application Data\Conduit deleted

C:\WINDOWS\002693_.tmp deleted

C:\WINDOWS\SET3.tmp deleted

C:\WINDOWS\SET4.tmp deleted

C:\WINDOWS\SET8.tmp deleted

C:\WINDOWS\wininit.ini deleted

C:\Documents and Settings\Eigenaar.DELL\AppData\LocalLow\DataMngr deleted

C:\Documents and Settings\Eigenaar.DELL\Application Data\Mozilla\Firefox\Profiles\qpn01x6z.default\searchplugins\browsemngr.xml deleted

C:\Documents and Settings\Eigenaar.DELL\Application Data\Mozilla\Firefox\Profiles\qpn01x6z.default\searchplugins\SearchResults.xml deleted

C:\Documents and Settings\Eigenaar.DELL\Application Data\Mozilla\Firefox\Profiles\qpn01x6z.default\searchplugins\Search_Results.xml deleted

C:\Documents and Settings\Eigenaar.DELL\Application Data\Mozilla\Firefox\Profiles\qpn01x6z.default\ilividtoolbarguid deleted

C:\Program Files\Mozilla Firefox\extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433} deleted

C:\Documents and Settings\Eigenaar.DELL\Application Data\BabMaint.exe deleted

C:\Documents and Settings\Eigenaar.DELL\Application Data\Mozilla\Firefox\Profiles\qpn01x6z.default\extensions\ffxtlbra@softonic.com deleted

C:\Documents and Settings\Eigenaar.DELL\Application Data\Mozilla\Firefox\Profiles\qpn01x6z.default\extensions\plugin@yontoo.com deleted

C:\Documents and Settings\Eigenaar.DELL\Application Data\Mozilla\Firefox\Profiles\qpn01x6z.default\extensions\crossriderapp2258@crossrider.com deleted

"C:\Program Files\Mozilla Firefox\extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}" not found

"C:\Documents and Settings\Eigenaar.DELL\Mijn documenten\Downloads\RSIT (1).exe" deleted

"C:\Documents and Settings\Eigenaar.DELL\Mijn documenten\Downloads\DriverFinder_Setup.exe" deleted

"C:\Documents and Settings\Eigenaar.DELL\Application Data\Mozilla\Firefox\Profiles\qpn01x6z.default\extensions\torntv@torntv.com.xpi" deleted

"C:\Documents and Settings\Eigenaar.DELL\Application Data\Mozilla\Firefox\Profiles\qpn01x6z.default\extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}" deleted

"C:\Documents and Settings\Eigenaar.DELL\Application Data\VTExtra\cdcert.cat" deleted

"C:\Documents and Settings\Eigenaar.DELL\Application Data\VTExtra" deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]

"smartwebprinting@hp.com"="C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2" [04/06/2012 03:45 PM]

[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]

"smartwebprinting@hp.com"="C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2" [04/06/2012 03:45 PM]

==== Firefox Extensions ======================

ProfilePath: C:\Documents and Settings\Eigenaar.DELL\Application Data\Mozilla\Firefox\Profiles\qpn01x6z.default

- Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension

- avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF

- Undetermined - C:\Program Files\iMesh Applications\MediaBar\Datamngr\FirefoxExtension

- Delta Toolbar - %ProfilePath%\extensions\ffxtlbr@delta.com

- Wincore Mediabar - %ProfilePath%\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}

- DealPly - %ProfilePath%\extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}

==== Firefox Plugins ======================

Profilepath: C:\Documents and Settings\Eigenaar.DELL\Application Data\Mozilla\Firefox\Profiles\qpn01x6z.default

D7324EB1EDCB8990F8522DE0311359E9 - C:\WINDOWS\system32\npdeployJava1.dll - Java Deployment Toolkit 7.0.250.17

2FAF656688BDBCC1076385E58567939D - C:\Program Files\Oracle\JavaFX 2.0 Runtime\bin\plugin2\npjp2.dll - Java Platform SE 7 U3

38DD6F1A9808139033B3714BEE1EEA97 - C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll - Java Platform SE 7 U2

8C2044169BE2224C8A7CB8E81E7581AF - C:\Documents and Settings\Eigenaar.DELL\Local Settings\Application Data\Google\Update\1.3.21.79\npGoogleUpdate3.dll - Google Update

FC5866F7793AF2CBCD425CC4B8D32A9E - C:\Documents and Settings\All Users\Application Data\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll - Zylom Plugin

AB87EEFFD18F2BAAFC274E7075EA6C67 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll - Windows Presentation Foundation / Windows Presentation Foundation

901DF887DBDF87FA3C659239F68F3228 - C:\Program Files\Windows Media Player\npdrmv2.dll - Microsoft® DRM

F89E6BBD6A080D8C714DFB6F30678288 - C:\Program Files\Windows Media Player\npwmsdrm.dll - Microsoft® DRM

0F9DEA5814D22F83FED5F427E263DED0 - C:\Program Files\Windows Media Player\npdsplay.dll - Windows Media Player Plug-in Dynamic Link Library

F0B8C822A200250EDF60049F07E4CC41 - C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll - RealPlayer G2 LiveConnect-Enabled Plug-In (32-bit)

30257426F6DA31808C6698EC01DE2D97 - C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll - RealPlayer Version Plugin

3CB231F12674D3CB0AC1F5EDE9578E85 - C:\WINDOWS\system32\npwmsdrm.dll - Microsoft® Windows Media Services

3EA079023D32054BFD73D08E77C72609 - C:\WINDOWS\system32\npptools.dll - Besturingssysteem Microsoft® Windows®

==== Deleting Files \ Folders ======================

"C:\Documents and Settings\Eigenaar.DELL\Application Data\Mozilla\Firefox\Profiles\qpn01x6z.default\extensions\ffxtlbr@delta.com" deleted

"C:\Documents and Settings\Eigenaar.DELL\Application Data\Mozilla\Firefox\Profiles\qpn01x6z.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}" deleted

"C:\Documents and Settings\Eigenaar.DELL\Application Data\Mozilla\Firefox\Profiles\qpn01x6z.default\extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}" deleted

"C:\Documents and Settings\Eigenaar.DELL\Application Data\Mozilla\Firefox\Profiles\qpn01x6z.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0}" deleted

==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions

bodddioamolcibagionmmobehnbhiakf - No path found[]

jbpkiefagocgkmemidfngdkamloieekf - No path found[]

lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx[10/02/2012 01:14 PM]

Angry Birds - Eigenaar.DELL - Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj

Google Drive - Eigenaar.DELL - Default\Extensions\apdfllckaahabafndbhieahigkjlhalf

YouTube - Eigenaar.DELL - Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo

Google Search - Eigenaar.DELL - Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf

Cut the Rope - Eigenaar.DELL - Default\Extensions\gkddaofiamhgfjmaccfcfpfolpgbeomj

Skype Click to Call - Eigenaar.DELL - Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl

Chrome In-App Payments service - Eigenaar.DELL - Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda

Gmail - Eigenaar.DELL - Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

==== Chrome Fix ======================

C:\Documents and Settings\Eigenaar.DELL\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_search.conduit.com_0.localstorage-journal deleted successfully

C:\Documents and Settings\Eigenaar.DELL\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\http_productivity3.ourtoolbar.com_0.localstorage-journal deleted successfully

C:\Documents and Settings\Eigenaar.DELL\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_bodddioamolcibagionmmobehnbhiakf_0.localstorage deleted successfully

C:\Documents and Settings\Eigenaar.DELL\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_bodddioamolcibagionmmobehnbhiakf_0.localstorage-journal deleted successfully

==== Set IE to Default ======================

Old Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="http://www.google.com"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]

"Tabs"="http://www.delta-search.com/?affID=119556&babsrc=NT_ss&mntrId=141A000CF6354857"

New Values:

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"Start Page"="http://www.google.com"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]

"Tabs"="res://ieframe.dll/tabswelcome.htm"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

"DefaultScope"="{8EAD81EC-3E0B-47B7-9EF3-595F5FFB8C72}"

{0633EE93-D776-472f-A0FF-E1416B8B2E3A} @ieframe.dll,-12512 Url="http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC"

{4908C441-5A0C-483B-A8E6-F495DEFAAE55} Unknown Url="Not_Found"

{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

{8EAD81EC-3E0B-47B7-9EF3-595F5FFB8C72} Google Url="http://www.google.nl/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7GZEU_nlNL510"

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-1177238915-484061587-839522115-1003\Software\Microsoft\Internet Explorer\SearchScopes\{4908C441-5A0C-483B-A8E6-F495DEFAAE55} deleted successfully

==== Deleting CLSID Registry Values ======================

==== shortcuts on Users Desktops ======================

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\ABN AMRO Inloggen.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe --app=https://www.abnamro.nl/nl/logon/identification.html

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\AVS Video Converter.lnk - C:\Program Files\AVS4YOU\AVSVideoConverter\AVSVideoConverter.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\AVS4YOU Software Navigator.lnk - C:\Program Files\AVS4YOU\AVSSoftwareNavigator\AVS4YOUSoftwareNavigator.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\Eusing Free Registry Cleaner.lnk - C:\Program Files\Eusing Free Registry Cleaner\Regcleaner.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\HiJackThis.lnk - C:\Documents and Settings\Eigenaar.DELL\Application Data\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\Inloggen op Mijn AEGON.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe --app=https://online.aegon.nl/WSB/sso-box/wayf.html?int_source=/inloggen/

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\MIJN HOME PAGE.lnk - C:\Documents and Settings\Eigenaar.DELL\Mijn documenten\MIJN HOME PAGE

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\Outlook Express.lnk - C:\Program Files\Outlook Express\msimn.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\PhotoFiltre.lnk - C:\Program Files\PhotoFiltre\PhotoFiltre.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\Snelkoppeling naar kompozer.lnk - C:\Documents and Settings\Eigenaar.DELL\Bureaublad\cursuskompozer\Cursus Kompozer\Programma's\KompoZer 0.7.10\kompozer.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\Aangifte inkomstenbelasting 2008.lnk - C:\Program Files\Belastingdienst\Aangifte inkomstenbelasting\2008\ib2008.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\Aangifte inkomstenbelasting 2009.lnk - C:\Program Files\Belastingdienst\Aangifte inkomstenbelasting\2009\ib2009.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\Aangifte inkomstenbelasting 2010.lnk - C:\Program Files\Belastingdienst\Aangifte inkomstenbelasting\2010\ib2010.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\Aangifte inkomstenbelasting 2011.lnk - C:\Program Files\Belastingdienst\Aangifte inkomstenbelasting\2011\ib2011.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\Aangifte inkomstenbelasting 2012.lnk - C:\Program Files\Belastingdienst\Aangifte inkomstenbelasting\2012\ib2012.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\Alkemade.lnk - C:\Documents and Settings\Eigenaar.DELL\Mijn documenten\Alkemade

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\CDBurnerXP.lnk - C:\Program Files\CDBurnerXP\cdbxpp.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\CollageIt.lnk - C:\Program Files\CollageIt\CollageIt.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\coverXP.lnk - C:\Program Files\coverXP\coverxp.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\Fotoservice.lnk - C:\Program Files\AH\Fotoservice\Fotoservice.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\Get The Best Facebook Chat Messenger.lnk -

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\HD Tune.lnk - C:\Program Files\HD Tune\HDTune.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\HP Photosmart Essential 3.0.lnk - C:\Program Files\Hp\Digital Imaging\bin\hpqpse.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\HP Solution Center.lnk - C:\Program Files\Hp\Digital Imaging\bin\hpqdirec.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\Intelli-studio.lnk - C:\Program Files\SAMSUNG\Intelli-studio\iStudio.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\Kinderopvangtoeslag 2010notsent.lnk - C:\Program Files\Belastingdienst\Kinderopvangtoeslag\2010\ko2010.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\Kinderopvangtoeslag 2011.lnk - C:\Program Files\Belastingdienst\Kinderopvangtoeslag\2011\ko2011.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\KO 2009.lnk - C:\Program Files\Belastingdienst\Kinderopvangtoeslag\2009\ko2009.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\ko2011dec24sent.lnk - C:\Program Files\Belastingdienst\Kinderopvangtoeslag\2011\ko2011.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\Mijn documenten.lnk - C:\Documents and Settings\Eigenaar.DELL\Mijn documenten

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\nikon handleiding.lnk - C:\Documents and Settings\Eigenaar.DELL\Mijn documenten\nikon handleiding.pdf

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\Nikon Transfer.lnk - C:\Program Files\Nikon\Nikon Transfer\NktTransfer.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\Paint.NET.lnk - C:\Program Files\Paint.NET\PaintDotNet.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\Panorama Maker 4.lnk - C:\Program Files\ArcSoft\Panorama Maker 4\PMK.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\Shop for HP Supplies.lnk - C:\Program Files\Hp\HPSSUPPLY\hpqSSupply.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\Speccy.lnk - C:\Program Files\Speccy\Speccy.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\ViewNX.lnk - C:\Program Files\Nikon\ViewNX\ViewNX.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\Ongebruikte bureaubladpictogrammen\Aangifte inkomstenbelasting 2007.lnk - C:\Program Files\Belastingdienst\Aangifte inkomstenbelasting\2007\ib2007.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\Ongebruikte bureaubladpictogrammen\Aangifte inkomstenbelasting 2008.lnk - C:\Program Files\Belastingdienst\Aangifte inkomstenbelasting\2008claudia\ib2008.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\Ongebruikte bureaubladpictogrammen\Acrobat.com.lnk - C:\Program Files\Adobe\Acrobat.com\Acrobat.com.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\Ongebruikte bureaubladpictogrammen\drivers.lnk - C:\DELL\drivers

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\Ongebruikte bureaubladpictogrammen\Kinderopvangtoeslag 2007.lnk - C:\Bdienst\2007\ko2007.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\Ongebruikte bureaubladpictogrammen\KO 2008.lnk - C:\Program Files\Belastingdienst\Kinderopvangtoeslag\2008\ko2008.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\Ongebruikte bureaubladpictogrammen\KT 2008.lnk - C:\Program Files\Belastingdienst\Kindertoeslag\2008\kt2008.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\Ongebruikte bureaubladpictogrammen\KT 2009.lnk - C:\Program Files\Belastingdienst\Kindgebonden budget\2009\kt2009.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\Ongebruikte bureaubladpictogrammen\PhotoViewer.lnk - C:\Program Files\Photo Viewer\PhotoViewer.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\Ongebruikte bureaubladpictogrammen\Solution Center.lnk - C:\Program Files\Dell\SolutionCenter\DellSC.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\diverse om te bewaren\Ongebruikte bureaubladpictogrammen\VT 2008.lnk - C:\Program Files\Belastingdienst\Voorlopige Teruggaaf\2008\vt2008.exe

C:\Documents and Settings\Eigenaar.DELL\Bureaublad\Zoë\KLEURBOEK 1-2-3 nr.1.lnk - C:\Program Files\PuzzelMatch\Kleurboeken\Kleurboek 1-2-3 nr.1\ColorP.exe