BB-code Computer vertoond uitvalverschijnselen Help me !!!!!

Christano · 19 september 2013

Beste Pc Helpforum,

De computer van mijn schoonmoeder vertoond uitvalverschijnselen. De pc is al aan de ouder kant en er vallen steeds meer functie uit ook ziet ze steeds minder dingen in der taakbalken staan.

Af en toe verschijnt er een rood scherm en doet die niks meer, de virusscanner kan verder niks vinden ik hoop dat jullie me nog kunnen helpen???

ik hoop snel van u te horen.

met vriendelijke groet,

Christano

Jean-Pierre · 19 september 2013

Voer in volgorde onderstaande eens uit op die pc.

Download en installeer Speccy.

Speccy is er ook in Nederlandstalige versie, bij de installatie (of update) kan je de taal wijzigen van Engels naar Nederlands ... als je op het driehoekje klikt, krijg je een uitrolmenu waarin je Nederlands kan selecteren.

Wanneer, tijdens het installeren van Speccy, de optie aangeboden wordt om Google Chrome of Google Toolbar "gratis" mee te installeren dien je de vinkjes weg te halen, tenzij dit een bewuste keuze is.

Start nu het programma en er zal een overzicht gemaakt worden van je hardware.

Als dit gereed is selecteer je bovenaan " Bestand - Publiceer Snapshot " en vervolgens bevestig je die keuze met " Ja ".

In het venster dat nu opent krijg je een link te zien, kopieer nu die link en plak die in je volgende bericht. Zo krijgen we een gedetailleerd overzicht van je hardware.

Meer info over deze procedure lees je HIER.

Na bovenstaande ineens ook even volgende.

Download RSIT van de onderstaande locaties en sla deze op het bureaublad op.

Hier staat een beschrijving hoe je kan kijken of je een 32- of 64-bitversie van Windows heeft.

RSIT 32 bit (RSIT.exe)
RSIT 64 bit (RSITx64.exe)

Dubbelklik op RSIT.exe om de tool te starten.

Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
Vervolgens wordt de "Disclaimer of warranty" getoond, klik vervolgens op "Continue"
Wanneer de tool gereed is wordt er een kladblok bestand genaamd "Log" geopend.
Plaats de inhoud hiervan in het volgende bericht.

Christano · 20 september 2013

Beste Jean Pierre,

Heel erg bedankt voor je snelle reactie en ik hoop dat je me kan helpen ik heb het programma Speccy over de computer gehaald de linkt zie je hieronden

http://speccy.piriform.com/results/gUwBc1UmLzEMJ2khurfRsPD

het programma RSIT heb ik ook erover heen gegooid en hier volgt het LOG

Logfile of random's system information tool 1.09 (written by random/random)

Run by jaimie at 2013-09-20 16:59:44

Microsoft® Windows Vista™ Home Basic Service Pack 2

System drive C: has 55 GB (52%) free of 106 GB

Total RAM: 1790 MB (41% free)

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 17:00:07, on 20-9-2013

Platform: Windows Vista SP2 (WinNT 6.00.1906)

MSIE: Internet Explorer v9.00 (9.00.8112.16506)

Boot mode: Normal

Running processes:

C:\Windows\system32\Dwm.exe

C:\Windows\system32\taskeng.exe

C:\Windows\Explorer.EXE

C:\Program Files\Realtek Semiconductor Corp\Realtek Card Reader Monitor\CardReaderMonitor.exe

C:\Program Files\Microsoft Security Client\msseces.exe

C:\Program Files\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe

C:\Program Files\AVG Secure Search\vprot.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\Program Files\AVG\AVG2013\avgui.exe

C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe

C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe

C:\Windows\System32\rundll32.exe

C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVH.EXE

C:\Program Files\Common Files\microsoft shared\virtualization handler\OfficeVirt.exe

C:\Windows\system32\Macromed\Flash\FlashUtil32_11_8_800_175_ActiveX.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Windows\system32\conime.exe

C:\Users\jaimie\Desktop\RSIT.exe

C:\Program Files\trend micro\jaimie.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.hyves.nl

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.nl/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer wordt aangeboden door Hyves

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O1 - Hosts: ::1 localhost

O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: WebConnect - {2316c625-b487-4410-a1a5-ff040b65245f} - C:\Program Files\WebConnect\WebConnectbho.dll

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll

O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)

O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll

O3 - Toolbar: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O3 - Toolbar: Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - (no file)

O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide

O4 - HKLM\..\Run: [CardReaderMonitor] C:\Program Files\Realtek Semiconductor Corp.\Realtek Card Reader Monitor\CardReaderMonitor.exe

O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey

O4 - HKLM\..\Run: [Reader Application Helper] C:\Program Files\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe

O4 - HKLM\..\Run: [vProt] "C:\Program Files\AVG Secure Search\vprot.exe"

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\AVG2013\avgui.exe" /TRAYONLY

O4 - HKCU\..\Run: [iSUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler

O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe"

O4 - HKCU\..\Run: [NTRedirect] C:\Windows\system32\rundll32.exe "C:\Users\jaimie\AppData\Roaming\BabSolution\Shared\enhancedNT.dll",Run

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\15.5.0\ViProtocol.dll

O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2013\avgidsagent.exe

O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2013\avgwdsvc.exe

O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\Program Files\Powercinema\Kernel\TV\CLCapSvc.exe

O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\Program Files\Powercinema\Kernel\TV\CLSched.exe

O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe

O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

O23 - Service: Sony SCSI Helper Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\Fsk\SonySCSIHelperService.exe

O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe

O23 - Service: Update WebConnect - WebConnect - C:\Program Files\WebConnect\updateWebConnect.exe

O23 - Service: vToolbarUpdater15.5.0 - Unknown owner - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\ToolbarUpdater.exe

--

End of file - 7860 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job

C:\Windows\tasks\FreeFileViewerUpdateChecker.job

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

C:\Windows\tasks\Recovery DVD Creator.job

C:\Windows\tasks\RegAce Scheduled Scan - jaimie.job

C:\Windows\tasks\Uitgebreide garantie.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]

Adobe PDF Reader Help bij koppelingen - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-23 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2316c625-b487-4410-a1a5-ff040b65245f}]

WebConnect - C:\Program Files\WebConnect\WebConnectbho.dll [2013-08-30 149288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]

Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-09-22 191792]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]

Java Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-02-26 461216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]

Windows Live Messenger Companion Helper - C:\Program Files\Windows Live\Companion\companioncore.dll [2010-11-10 393600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]

Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2013-08-17 192592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CA6319C0-31B7-401E-A518-A07C3DB8F777}]

CBrowserHelperObject Object - C:\Program Files\Google\Google_BAE\BAE.dll [2006-11-09 98304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

Java Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-02-26 170912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

{95B7759C-8C7F-4BF1-B163-73684A933233}

{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2013-08-17 192592]

{82E1477C-B154-48D3-9891-33D83C26BCD3} -

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]

"CardReaderMonitor"=C:\Program Files\Realtek Semiconductor Corp.\Realtek Card Reader Monitor\CardReaderMonitor.exe [2007-07-25 643072]

"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2013-06-20 995176]

""= []

"Reader Application Helper"=C:\Program Files\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe [2012-07-12 892928]

"vProt"=C:\Program Files\AVG Secure Search\vprot.exe [2013-08-14 2314416]

"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]

"AVG_UI"=C:\Program Files\AVG\AVG2013\avgui.exe [2013-08-15 4411440]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"ISUSPM"=C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [2006-09-11 218032]

"TomTomHOME.exe"=C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [2012-12-05 247768]

"NTRedirect"=C:\Users\jaimie\AppData\Roaming\BabSolution\Shared\enhancedNT.dll [2013-08-22 187888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISUSPM]

C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [2006-09-11 218032]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]

C:\Windows\system32\NvCpl.dll [2007-09-19 8497696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]

C:\Windows\system32\NvMcTray.dll [2007-09-19 81920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvSvc]

C:\Windows\system32\nvsvc.dll [2007-09-19 86016]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCMService]

c:\Program Files\Powercinema\PCMService.exe [2007-02-14 159744]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]

C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SmpcSys]

C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe [2007-07-19 1120568]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]

C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2011-06-25 39408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh]

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2007-02-09 845360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\toolbar_eula_launcher]

C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe [2007-02-20 28672]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro35]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro35.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"dontdisplaylastusername"=0

"legalnoticecaption"=

"legalnoticetext"=

"shutdownwithoutlogon"=1

"undockwithoutlogon"=1

"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"NoDriveTypeAutoRun"=255

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]

"vidc.mrle"=msrle32.dll

"vidc.msvc"=msvidc32.dll

"msacm.imaadpcm"=imaadp32.acm

"msacm.msg711"=msg711.acm

"msacm.msgsm610"=msgsm32.acm

"msacm.msadpcm"=msadp32.acm

"midimapper"=midimap.dll

"wavemapper"=msacm32.drv

"VIDC.UYVY"=msyuv.dll

"VIDC.YUY2"=msyuv.dll

"VIDC.YVYU"=msyuv.dll

"VIDC.IYUV"=iyuv_32.dll

"VIDC.I420"=lvcodec2.dll

"VIDC.YVU9"=tsbyuv.dll

"msacm.l3acm"=C:\Windows\System32\l3codeca.acm

"vidc.cvid"=iccvid.dll

"msacm.l3codecp"=

"msacm.siren"=sirenacm.dll

"MSVideo"=vfwwdm32.dll

"MSVideo8"=VfWWDM32.dll

"wave"=wdmaud.drv

"midi"=wdmaud.drv

"mixer"=wdmaud.drv

"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-09-20 16:59:44 ----D---- C:\rsit

2013-09-20 16:59:44 ----D---- C:\Program Files\trend micro

2013-09-20 16:46:46 ----D---- C:\Program Files\Speccy

2013-09-19 12:45:54 ----D---- C:\Program Files\MyPC Backup

2013-09-13 12:00:58 ----D---- C:\ProgramData\BitGuard

2013-09-13 12:00:38 ----D---- C:\Program Files\WebConnect

2013-09-12 07:17:45 ----A---- C:\Windows\system32\mshtmled.dll

2013-09-12 07:17:44 ----A---- C:\Windows\system32\vbscript.dll

2013-09-12 07:17:42 ----A---- C:\Windows\system32\jsproxy.dll

2013-09-12 07:17:42 ----A---- C:\Windows\system32\ieui.dll

2013-09-12 07:17:41 ----A---- C:\Windows\system32\msfeeds.dll

2013-09-12 07:17:41 ----A---- C:\Windows\system32\ieUnatt.exe

2013-09-12 07:17:40 ----A---- C:\Windows\system32\wininet.dll

2013-09-12 07:17:39 ----A---- C:\Windows\system32\jscript.dll

2013-09-12 07:17:38 ----A---- C:\Windows\system32\url.dll

2013-09-12 07:17:38 ----A---- C:\Windows\system32\jscript9.dll

2013-09-12 07:17:37 ----A---- C:\Windows\system32\iertutil.dll

2013-09-12 07:17:34 ----A---- C:\Windows\system32\urlmon.dll

2013-09-12 07:17:31 ----A---- C:\Windows\system32\mshtml.dll

2013-09-12 07:17:29 ----A---- C:\Windows\system32\ieframe.dll

2013-09-11 07:34:05 ----A---- C:\Windows\system32\themeui.dll

2013-09-11 07:34:03 ----A---- C:\Windows\system32\win32k.sys

2013-09-10 01:34:48 ----A---- C:\Windows\system32\drivers\avgidsshimx.sys

2013-09-05 01:43:42 ----A---- C:\Windows\system32\drivers\avgrkx86.sys

2013-09-01 21:46:56 ----D---- C:\Program Files\Delta

2013-09-01 21:44:03 ----D---- C:\Program Files\Uniblue

2013-09-01 21:43:41 ----D---- C:\Users\jaimie\AppData\Roaming\Delta

2013-09-01 21:43:37 ----D---- C:\ProgramData\BrowserDefender

2013-09-01 21:43:26 ----D---- C:\Users\jaimie\AppData\Roaming\BabSolution

2013-08-28 07:51:45 ----A---- C:\Windows\system32\WMVDECOD.DLL

======List of files/folders modified in the last 1 month======

2013-09-20 16:59:44 ----RD---- C:\Program Files

2013-09-20 16:59:17 ----D---- C:\Windows\TEMP

2013-09-20 15:17:06 ----D---- C:\Program Files\File Type Assistant

2013-09-20 15:14:52 ----SHD---- C:\System Volume Information

2013-09-20 12:01:56 ----AD---- C:\Windows\System32

2013-09-20 12:01:52 ----A---- C:\Windows\system32\FlashPlayerApp.exe

2013-09-20 08:48:08 ----D---- C:\Users\jaimie\AppData\Roaming\SoftGrid Client

2013-09-20 08:16:05 ----D---- C:\ProgramData\MFAData

2013-09-19 13:10:09 ----D---- C:\Windows

2013-09-19 13:06:57 ----D---- C:\Windows\system32\catroot2

2013-09-19 13:05:16 ----D---- C:\Windows\system32\drivers

2013-09-19 13:02:34 ----HD---- C:\ProgramData

2013-09-19 13:01:42 ----D---- C:\Windows\system32\Tasks

2013-09-19 12:56:10 ----D---- C:\Windows\system32\config

2013-09-19 12:51:24 ----D---- C:\Windows\Tasks

2013-09-19 12:51:17 ----D---- C:\Users\jaimie\AppData\Roaming\Systweak

2013-09-19 12:45:47 ----SHD---- C:\Windows\Installer

2013-09-19 12:45:45 ----D---- C:\Windows\winsxs

2013-09-18 06:26:42 ----D---- C:\Windows\prefetch

2013-09-14 12:14:40 ----D---- C:\Windows\inf

2013-09-14 12:14:40 ----A---- C:\Windows\system32\PerfStringBackup.INI

2013-09-14 07:20:33 ----D---- C:\ProgramData\Microsoft Help

2013-09-13 12:03:15 ----D---- C:\Windows\Minidump

2013-09-13 12:02:05 ----D---- C:\Program Files\CCleaner

2013-09-12 08:34:51 ----D---- C:\Windows\system32\migration

2013-09-12 08:34:45 ----D---- C:\Program Files\Internet Explorer

2013-09-12 07:38:30 ----D---- C:\Program Files\Microsoft Application Virtualization Client

2013-09-12 07:20:31 ----D---- C:\Windows\system32\catroot

2013-09-12 07:07:11 ----D---- C:\Windows\system32\MRT

2013-09-12 07:00:27 ----A---- C:\Windows\system32\mrt.exe

2013-09-09 06:37:09 ----D---- C:\ProgramData\AVG2013

2013-09-01 21:52:20 ----D---- C:\Users\jaimie\AppData\Roaming\Uniblue

2013-08-22 18:36:26 ----A---- C:\Windows\system32\roboot.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSHX;AVGIDSHX; C:\Windows\system32\DRIVERS\avgidshx.sys [2013-07-20 60216]

R0 Avglogx;AVG Logging Driver; C:\Windows\system32\DRIVERS\avglogx.sys [2013-07-20 246072]

R0 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; C:\Windows\system32\DRIVERS\avgmfx86.sys [2013-07-01 96568]

R0 Avgrkx86;AVG Anti-Rootkit Driver; C:\Windows\system32\DRIVERS\avgrkx86.sys [2013-09-05 39224]

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2013-06-18 211560]

R1 AVGIDSDriver;AVGIDSDriver; C:\Windows\system32\DRIVERS\avgidsdriverx.sys [2013-07-20 208184]

R1 AVGIDSShim;AVGIDSShim; C:\Windows\system32\DRIVERS\avgidsshimx.sys [2013-09-10 22328]

R1 Avgldx86;AVG AVI Loader Driver; C:\Windows\system32\DRIVERS\avgldx86.sys [2013-07-20 171320]

R1 Avgtdix;AVG TDI Driver; C:\Windows\system32\DRIVERS\avgtdix.sys [2013-03-21 182072]

R1 avgtp;avgtp; \??\C:\Windows\system32\drivers\avgtpx86.sys [2013-08-14 37664]

R1 MpKsl1819e1b4;MpKsl1819e1b4; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{721AD41E-3F67-4A70-A4C2-B01B876C2B82}\MpKsl1819e1b4.sys [2013-09-20 40392]

R3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDART.sys [2007-11-05 182272]

R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvmfdx32.sys [2007-11-18 1040544]

R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2007-09-19 7626400]

R3 nvsmu;nvsmu; C:\Windows\system32\DRIVERS\nvsmu.sys [2007-02-16 12032]

R3 RTL8187B;Realtek RTL8187B Wireless 802.11b/g 54Mbps USB 2.0 Network Adapter; C:\Windows\system32\DRIVERS\RTL8187B.sys [2010-03-31 350720]

R3 RTSTOR;USB Mass Storage Device; C:\Windows\system32\drivers\RTSTOR.SYS [2007-06-15 47616]

R3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfslh.sys [2013-06-26 583848]

R3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaylh.sys [2013-06-26 197800]

R3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirlh.sys [2013-06-26 24232]

R3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvollh.sys [2013-06-26 20136]

R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2007-02-09 182456]

R3 WudfPf;@%SystemRoot%\system32\drivers\Wudfpf.sys,-1000; C:\Windows\system32\drivers\WudfPf.sys [2012-07-26 66560]

S1 logodkac;logodkac; \??\C:\Windows\system32\drivers\logodkac.sys []

S3 drmkaud;Microsoft Kernel DRM-audiodecoder; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]

S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-09-23 39272]

S3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\System32\Drivers\GEARAspiWDM.sys []

S3 MSKSSRV;Microsoft Streaming Service-proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]

S3 MSPCLOCK;Microsoft Streaming Clock-proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]

S3 MSPQM;Microsoft Streaming Kwaliteitsbeheer Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]

S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink-conversieprogramma; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]

S3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2013-06-18 107392]

S3 QCDonner;Logitech QuickCam Express(PID_0840); C:\Windows\system32\DRIVERS\LVCD.sys [2004-04-26 474304]

S3 usbscan;Stuurprogramma voor USB-scanner; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 35328]

S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]

S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2012-07-26 155136]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files\AVG\AVG2013\avgidsagent.exe [2013-07-04 4939312]

R2 avgwd;AVG WatchDog; C:\Program Files\AVG\AVG2013\avgwdsvc.exe [2013-07-23 283136]

R2 CLCapSvc;CyberLink Background Capture Service (CBCS); c:\Program Files\Powercinema\Kernel\TV\CLCapSvc.exe [2007-02-14 278608]

R2 cvhsvc;Client Virtualization Handler; C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2013-04-22 822504]

R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]

R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-06-20 22208]

R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2010-09-22 249136]

R2 sftlist;Application Virtualization Client; C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe [2013-06-26 523944]

R2 TomTomHOMEService;TomTomHOMEService; C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe [2012-12-05 92632]

R2 Update WebConnect;Update WebConnect; C:\Program Files\WebConnect\updateWebConnect.exe [2013-08-30 206632]

R2 vToolbarUpdater15.5.0;vToolbarUpdater15.5.0; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\ToolbarUpdater.exe [2013-08-14 1643184]

R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2010-09-21 1710464]

R3 sftvsa;Application Virtualization Service Agent; C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe [2013-06-26 207528]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

S2 CLSched;CyberLink Task Scheduler (CTS); c:\Program Files\Powercinema\Kernel\TV\CLSched.exe [2007-02-14 110677]

S2 gupdate;Google Updateservice (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-03-08 136176]

S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-20 257416]

S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2010-09-23 1493352]

S3 gupdatem;Google Update-service (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-03-08 136176]

S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2012-08-12 194032]

S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]

S3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2013-06-20 295376]

S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]

S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2011-04-05 149352]

S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2011-04-05 4640000]

S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2007-02-08 212480]

S3 Sony SCSI Helper Service;Sony SCSI Helper Service; C:\Program Files\Common Files\Sony Shared\Fsk\SonySCSIHelperService.exe [2012-05-23 73728]

S3 WPFFontCache_v0400;@c:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-04-18 754856]

S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040]

-----------------EOF-----------------

ik hoop snel van je te horen alvast bedankt groetjessssss

Jean-Pierre · 20 september 2013

Temperaturen zijn zo i zo aan de hoge kant maar ik ga eerst even je logje laten nakijken door de specialisten.;-)

Jion · 20 september 2013

Download Zoek.zip naar het bureaublad.

Wanneer Internet Explorer of een andere browser of virusscanner melding geeft dat dit bestand onveilig zou zijn kun je negeren, dit is namelijk een onterechte waarschuwing.
Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe (hier en hier) kan je lezen hoe je dat doet.
Klik met de rechtermuisknop op Zoek.zip en klik op de optie "Alles uitpakken".
Dubbelklik op Zoek.exe om de tool te starten.
Windows Vista, 7 en 8 gebruikers dienen de tool als "administrator" uit te voeren door middel van de rechtermuisknop en kiezen voor Als Administrator uitvoeren.
Kopieer nu onderstaande code en plak die in het grote invulvenster:
Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkaardig probleem.

{2316c625-b487-4410-a1a5-ff040b65245f};c
C:\Program Files\WebConnect;fs
{95B7759C-8C7F-4BF1-B163-73684A933233};c
{95B7759C-8C7F-4BF1-B163-73684A933233};c
{82E1477C-B154-48D3-9891-33D83C26BCD3};c
C:\Users\jaimie\AppData\Roaming\BabSolution;fs
C:\Program Files\AVG Secure Search;fs
{B658800C-F66E-4EF3-AB85-6C0C227862A9};c
C:\Program Files\Common Files\AVG Secure Search;fs
vToolbarUpdater15.5.0;s
{2316c625-b487-4410-a1a5-ff040b65245f};c
Update WebConnect;s
C:\Program Files\WebConnect;fs
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run];r
"vProt"=-;r
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run];r
"NTRedirect"=-;r
C:\ProgramData\BitGuard;fs
C:\Program Files\Delta;fs
C:\Users\jaimie\AppData\Roaming\Delta;fs
C:\ProgramData\BrowserDefender;fs
autoclean;
startupall; 
filesrcm;

Klik nu op de knop "Run script".
Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
Mocht na de herstart geen logje verschijnen, start zoek.exe dan opnieuw, de log verschijnt dan alsnog.
Post het geopende logje in het volgende bericht.

Christano · 21 september 2013

oke bedankt ik hoop snel van u te horen zodat ik hopelijk de pc kan redden:cool:

Jean Pierre is het trouwens verstandig om het bericht van Jion ook te gaan uitvoeren met het bestand zoek.zip???

21 september 2013 aangepast door Christano

Jean-Pierre · 21 september 2013

Best dat je inderdaad eerst het bericht van Jion uitvoert alvorens andere zaken te gaan uitvoeren.

Jion is namelijk 1 van die specialisten waar ik het eerder over had.

21 september 2013 aangepast door Jean-Pierre

Christano · 21 september 2013

Beste Jion en Jean Pierre ik heb het bestand zoek.zip over de computer heen gehaald zoals Jion beschreef het duur ff maar hier is het logje

Zoek.exe Version 4.0.0.4 Updated 19-September-2013

Tool run by jaimie on za 21-09-2013 at 13:24:33,89.

Microsoft® Windows Vista™ Home Basic 6.0.6002 Service Pack 2 x86

Running in: Normal Mode Internet Access Detected

Launched: C:\Users\jaimie\Documents\zoek\zoek.exe [script inserted]

==== System Restore Info ======================

21-9-2013 13:26:40 Zoek.exe System Restore Point Created Succesfully.

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-367893845-1825591885-46999492-1002\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2316c625-b487-4410-a1a5-ff040b65245f} deleted successfully

HKEY_USERS\S-1-5-21-367893845-1825591885-46999492-1002\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2316c625-b487-4410-a1a5-ff040b65245f} deleted successfully

HKEY_USERS\S-1-5-21-367893845-1825591885-46999492-1002\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully

HKEY_USERS\S-1-5-21-367893845-1825591885-46999492-1002\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully

HKEY_USERS\S-1-5-21-367893845-1825591885-46999492-1002\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3} deleted successfully

HKEY_USERS\S-1-5-21-367893845-1825591885-46999492-1002\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{2316c625-b487-4410-a1a5-ff040b65245f} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2316c625-b487-4410-a1a5-ff040b65245f} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3} deleted successfully

HKEY_CLASSES_ROOT\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{82E1477C-B154-48D3-9891-33D83C26BCD3} deleted successfully

==== Deleting Services ======================

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vToolbarUpdater15.5.0 deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\vToolbarUpdater15.5.0 deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Update WebConnect deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Update WebConnect deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\Application\Update WebConnect deleted successfully

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Update WebConnect deleted successfully

==== FireFox Fix ======================

ProfilePath: C:\Users\jaimie\AppData\Roaming\Mozilla\Firefox\Profiles\36idldj2.default

---- Lines delta removed from prefs.js ----

---- Lines delta modified from prefs.js ----

---- Lines delta removed from user.js ----

user_pref("extensions.delta.tlbrSrchUrl", "");

user_pref("extensions.delta.id", "54e716ed00000000000000140b47dfc0");

user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");

user_pref("extensions.delta.instlDay", "15961");

user_pref("extensions.delta.vrsn", "1.8.24.6");

user_pref("extensions.delta.vrsni", "1.8.24.6");

user_pref("extensions.delta.vrsnTs", "1.8.24.612:01:30");

user_pref("extensions.delta.prtnrId", "delta");

user_pref("extensions.delta.prdct", "delta");

user_pref("extensions.delta.aflt", "babsst");

user_pref("extensions.delta.smplGrp", "none");

user_pref("extensions.delta.tlbrId", "base");

user_pref("extensions.delta.instlRef", "sst");

user_pref("extensions.delta.dfltLng", "nl");

user_pref("extensions.delta.excTlbr", false);

user_pref("extensions.delta.ffxUnstlRst", true);

user_pref("extensions.delta.admin", false);

user_pref("extensions.delta_i.babTrack", "affID=119357&tsp=5004");

user_pref("extensions.delta_i.babExt", "");

user_pref("extensions.delta_i.srcExt", "ss");

user_pref("extensions.delta.autoRvrt", "false");

user_pref("extensions.delta.rvrt", "false");

user_pref("extensions.delta.newTab", false);

---- Lines yahoo removed from prefs.js ----

user_pref("google.toolbar.subscribe.aggregators.myyahoo.desc", "My Yahoo!");

user_pref("google.toolbar.subscribe.aggregators.myyahoo.id", "myyahoo");

user_pref("google.toolbar.subscribe.aggregators.myyahoo.order", "3");

user_pref("google.toolbar.subscribe.aggregators.myyahoo.title", "My Yahoo");

user_pref("google.toolbar.subscribe.aggregators.myyahoo.url", "http://add.my.yahoo.com/rss?url=%feed%");

---- Lines yahoo modified from prefs.js ----

---- Lines yahoo removed from user.js ----

---- FireFox user.js and prefs.js backups ----

user_21-09-2013_1335_.backup

prefs_21-09-2013_1335_.backup

==== Registry Fix Code ======================

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

"vProt"=-

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"NTRedirect"=-

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

"bProtector Start Page"=-

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]

"bProtectorDefaultScope"=-

==== Deleting Files \ Folders ======================

"C:\Users\jaimie\AppData\Local\fvnqqpij" deleted

"C:\Users\jaimie\AppData\Local\sambqikl" deleted

"C:\Program Files\GUT91A0.tmp" deleted

"C:\Program Files\Mozilla Firefox\searchplugins\avg-secure-search.xml" deleted

"C:\Users\jaimie\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data" deleted

"C:\Users\jaimie\AppData\Local\Google\Chrome\User Data\Default\bProtectorPreferences" deleted

"C:\Windows\WinInit.ini" deleted

"C:\Windows\system32\Tasks\BrowserDefendert" deleted

"C:\Windows\system32\Tasks\EPUpdater" deleted

"C:\Windows\system32\tasks\RegClean Pro" deleted

"C:\END" deleted

"C:\Windows\system32\roboot.exe" deleted

"C:\Users\jaimie\AppData\Roaming\Mozilla\Firefox\Profiles\36idldj2.default\searchplugins\live-search.xml" deleted

"C:\Users\jaimie\AppData\Roaming\Mozilla\Firefox\Profiles\36idldj2.default\searchplugins\LiveSearch.xml" deleted

"C:\Users\jaimie\AppData\Roaming\Mozilla\Firefox\Profiles\36idldj2.default\searchplugins\search-results.xml" deleted

"C:\Users\jaimie\AppData\Roaming\Mozilla\Firefox\Profiles\36idldj2.default\bProtector_extensions.rdf" deleted

"C:\Users\jaimie\AppData\Roaming\Mozilla\Firefox\Profiles\36idldj2.default\bProtector_extensions.sqlite" deleted

"C:\Users\jaimie\AppData\Roaming\Mozilla\Firefox\Profiles\36idldj2.default\bProtector_prefs.js" deleted

"C:\ProgramData\54EF90BB8A9116ED000054EF3BD41EBD\54EF90BB8A9116ED000054EF3BD41EBD" deleted

"C:\ProgramData\54EF90BB8A9116ED000054EF3BD41EBD\54EF90BB8A9116ED000054EF3BD41EBD.ico" deleted

"C:\Program Files\WebConnect\updateWebConnect.exe" deleted

"C:\Program Files\WebConnect\WebConnect.Common.dll" deleted

"C:\Program Files\AVG Secure Search\vprot.exe" deleted

"C:\Program Files\WebConnect\updateWebConnect.exe" deleted

"C:\Program Files\WebConnect\WebConnect.Common.dll" deleted

"C:\Program Files\WebConnect\updateWebConnect.exe" deleted

"C:\Program Files\WebConnect\WebConnect.Common.dll" deleted

"C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\15.5.0\SiteSafety.dll" deleted

"C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\log4cplusU.dll" deleted

"C:\ProgramData\54EF90BB8A9116ED000054EF3BD41EBD" deleted

"C:\Users\jaimie\AppData\Roaming\Delta" deleted

"C:\Program Files\WebConnect" not deleted

"C:\Users\jaimie\AppData\Roaming\BabSolution" deleted

"C:\Program Files\AVG Secure Search" deleted

"C:\Program Files\Common Files\AVG Secure Search" deleted

"C:\Program Files\WebConnect" not deleted

"C:\ProgramData\BitGuard" deleted

"C:\Program Files\Delta" deleted

"C:\Users\jaimie\AppData\Roaming\Delta" deleted

"C:\ProgramData\BrowserDefender" deleted

"C:\Program Files\GUM9190.tmp" deleted

"C:\Program Files\Uniblue\SpeedUpMyPC" deleted

"C:\Program Files\Delta" deleted

"C:\Program Files\File Type Assistant" deleted

"C:\Program Files\PC Performer" deleted

"C:\Program Files\MyPC Backup" deleted

"C:\Program Files\WebConnect" not deleted

"C:\Program Files\File Scout" deleted

"C:\Users\jaimie\AppData\Roaming\BabSolution" deleted

"C:\Users\jaimie\AppData\Roaming\Babylon" deleted

"C:\Users\jaimie\AppData\Roaming\File Scout" deleted

"C:\Users\jaimie\AppData\Roaming\Delta" deleted

"C:\Users\jaimie\AppData\Roaming\Registry Mechanic" deleted

"C:\Users\jaimie\AppData\Roaming\Systweak" deleted

"C:\Users\jaimie\AppData\Roaming\PerformerSoft" deleted

"C:\ProgramData\Ask" deleted

"C:\ProgramData\APN" deleted

"C:\ProgramData\BitGuard" deleted

"C:\ProgramData\BrowserDefender" deleted

"C:\ProgramData\Uniblue\DriverScanner" deleted

"C:\ProgramData\IBUpdaterService" deleted

"C:\ProgramData\Tarma Installer" deleted

"C:\ProgramData\Babylon" deleted

"C:\Users\jaimie\AppData\Local\FileTypeAssistant" deleted

"C:\Users\jaimie\AppData\Local\PackageAware" deleted

"C:\Windows\system32\config\systemprofile\AppData\Local\FileTypeAssistant" deleted

"C:\Users\jaimie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender" deleted

"C:\Users\jaimie\AppData\LocalLow\BabylonToolbar" deleted

"C:\Windows\System32\AI_RecycleBin" deleted

"C:\Users\jaimie\AppData\Roaming\Mozilla\Firefox\Profiles\36idldj2.default\extensions\ffxtlbr@delta.com" deleted

"C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller" deleted

"C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater" deleted

"C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\15.5.0" deleted

"C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0" deleted

==== Files Recently Created / Modified ======================

====== C:\Windows ====

====== C:\Users\jaimie\AppData\Local\Temp ====

====== Java Cache =====

2013-08-26 16:22:33 18AD24FFE563CFDB1867899DEEF39F2D 14183 ----a-w- C:\Users\jaimie\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\1\44668a41-1291f3d5

2013-08-26 16:23:04 3FBAE7C1454CCAF458C4A50625B90970 4639 ----a-w- C:\Users\jaimie\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10\2cf9b48a-27640873

2013-08-26 16:22:32 1E262CB95EDFA6CEC46F71711DAAC576 394641 ----a-w- C:\Users\jaimie\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\12\15cd774c-3660e5c9

2013-08-26 16:23:05 D17C70A7D388C797E0B19BEDC50EDD8F 1556 ----a-w- C:\Users\jaimie\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\14\6f303ce-3c6c5854

2013-09-10 07:40:41 E1B828911ADF8CEA4F18DC7B862FF6CE 4869 ----a-w- C:\Users\jaimie\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\15\23b78ecf-2fd7ebfb

2013-09-10 07:38:55 1E262CB95EDFA6CEC46F71711DAAC576 394641 ----a-w- C:\Users\jaimie\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\2\364a8382-2971bdbe

2013-09-10 07:40:41 1BED8044ADE1D9064A50488CF4B36904 4286 ----a-w- C:\Users\jaimie\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\21\1df30415-51f5704a

2013-08-26 16:24:21 E1B828911ADF8CEA4F18DC7B862FF6CE 4869 ----a-w- C:\Users\jaimie\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\23\5cae0b17-6ec903ee

2013-09-10 07:38:38 3B5C292D3851429200090EEE53F6F298 1914833 ----a-w- C:\Users\jaimie\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\26\730bf31a-4fe55d0a

2013-08-26 16:23:05 6837576E8D1DC733FD048490892AF904 3902 ----a-w- C:\Users\jaimie\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\28\70300c5c-5f5505ad

2013-08-26 16:22:05 C1E8A6CD531706858B73DEE7893956EA 1944859 ----a-w- C:\Users\jaimie\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\3\fa425c3-1a78e422

2013-09-10 07:39:32 9DA21B02A1B7638D9D16BEA2D84E4F85 3998 ----a-w- C:\Users\jaimie\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\31\1c166a1f-4bb8a386

2013-09-10 07:40:41 5D058A19E4C2DA627DBDA33538F434B6 6400 ----a-w- C:\Users\jaimie\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\33\8f7d4a1-6c36f4c8

2013-09-10 07:45:21 1BED8044ADE1D9064A50488CF4B36904 4286 ----a-w- C:\Users\jaimie\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\35\536e90e3-4271289d

2013-08-26 16:24:21 A1EEBE53A3EB7CB46BF66620BB2D812A 4896 ----a-w- C:\Users\jaimie\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\37\1c5c5a65-19375043

2013-08-26 16:22:27 78896A5FC17B9E1C63F4106968CF8BBE 1811082 ----a-w- C:\Users\jaimie\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\38\366065e6-411b13bd

2013-08-26 16:23:58 1BED8044ADE1D9064A50488CF4B36904 4286 ----a-w- C:\Users\jaimie\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\39\6264e7-558c0342

2013-09-10 07:40:41 A1EEBE53A3EB7CB46BF66620BB2D812A 4896 ----a-w- C:\Users\jaimie\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\41\6313e8a9-375616e1

2013-09-10 07:39:35 5556437ADB2FEFB9EF3C1DE829F2FDC5 3886 ----a-w- C:\Users\jaimie\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\44\16ade86c-23ccda14

2013-09-10 07:40:41 B08223396AA642E413A54F9EDF2FFDDA 6240 ----a-w- C:\Users\jaimie\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\44\3e4ed46c-14ad6575

2013-08-26 16:24:21 5D058A19E4C2DA627DBDA33538F434B6 6400 ----a-w- C:\Users\jaimie\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\45\1b2e7fed-4f3e1705

2013-08-26 16:24:21 B08223396AA642E413A54F9EDF2FFDDA 6240 ----a-w- C:\Users\jaimie\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\45\7703b9ed-295c2f02

2013-09-10 07:40:41 1BED8044ADE1D9064A50488CF4B36904 4286 ----a-w- C:\Users\jaimie\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\49\1933a1f1-194018b7

2013-09-10 07:40:41 1BED8044ADE1D9064A50488CF4B36904 4286 ----a-w- C:\Users\jaimie\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\53\c5a76b5-29228af3

2013-08-26 16:23:06 1AA72F28F83E39D6C7963EA340F29071 4000 ----a-w- C:\Users\jaimie\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\56\cbdc5b8-1fc381b1

2013-09-10 07:38:53 78896A5FC17B9E1C63F4106968CF8BBE 1811082 ----a-w- C:\Users\jaimie\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\6\a0dcb46-7907f3f1

2013-08-26 16:23:05 C3195CD1BEAE3518734E579226148FCD 3343 ----a-w- C:\Users\jaimie\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\60\7308ea7c-7c00d815

2013-09-10 07:39:34 3FBAE7C1454CCAF458C4A50625B90970 4639 ----a-w- C:\Users\jaimie\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\63\185e177f-6e1df754

2013-09-10 07:38:56 18AD24FFE563CFDB1867899DEEF39F2D 14183 ----a-w- C:\Users\jaimie\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\7\308d3847-1e377303

2013-08-26 16:23:03 9DA21B02A1B7638D9D16BEA2D84E4F85 3998 ----a-w- C:\Users\jaimie\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\8\e113d88-603abe25

====== C:\Windows\system32 =====

2013-09-12 05:17:45 24BEF006E8A79457172084FD24395509 2382848 ----a-w- C:\Windows\System32\mshtml.tlb

2013-09-12 05:17:45 0381DAD42485BBC0B2BEF9DC163086FE 73216 ----a-w- C:\Windows\System32\mshtmled.dll

2013-09-12 05:17:44 1416E2CBA99B8B85F7007DF8D4FBE347 420864 ----a-w- C:\Windows\System32\vbscript.dll

2013-09-12 05:17:42 7610640A56A5D1599EA5841B65103CFA 176640 ----a-w- C:\Windows\System32\ieui.dll

2013-09-12 05:17:42 67E8C37D929EE30016C17ACE1379E047 65024 ----a-w- C:\Windows\System32\jsproxy.dll

2013-09-12 05:17:41 5062CDE3660C96ADC4A1702AA13D972A 142848 ----a-w- C:\Windows\System32\ieUnatt.exe

2013-09-12 05:17:41 314C2F90B4D337527AD0231F44BA88F9 607744 ----a-w- C:\Windows\System32\msfeeds.dll

2013-09-12 05:17:40 21A5424935A32080A58DD40F2712212C 1129472 ----a-w- C:\Windows\System32\wininet.dll

2013-09-12 05:17:39 490107BF073A44A54E39BDB6C2077D5A 717824 ----a-w- C:\Windows\System32\jscript.dll

2013-09-12 05:17:38 C019B0A82FDF2AA2A8627704685D4D53 1800704 ----a-w- C:\Windows\System32\jscript9.dll

2013-09-12 05:17:38 90270F2060EB2F6F1C1C7A3DB6DC941F 231936 ----a-w- C:\Windows\System32\url.dll

2013-09-12 05:17:37 F21A5999C6354AC042D42D687EC027F1 1796096 ----a-w- C:\Windows\System32\iertutil.dll

2013-09-12 05:17:34 57EFDDDA9A057C3F868409D4FD9655EC 1427968 ----a-w- C:\Windows\System32\inetcpl.cpl

2013-09-12 05:17:34 51059C99C8432519A8416BD8252940CA 1104896 ----a-w- C:\Windows\System32\urlmon.dll

2013-09-12 05:17:31 6DB41C70A74B420A0ADC55A9862DDAD9 12335104 ----a-w- C:\Windows\System32\mshtml.dll

2013-09-12 05:17:29 4EA7E90932BEBB21F1B5A5666A807C1F 9738752 ----a-w- C:\Windows\System32\ieframe.dll

2013-09-11 05:34:05 DBD9448D06E67FE6F29261FFAD205B68 615936 ----a-w- C:\Windows\System32\themeui.dll

2013-09-11 05:34:03 7971B5B112ECD33A771C432137A4E30D 2049536 ----a-w- C:\Windows\System32\win32k.sys

====== C:\Windows\system32\drivers =====

2013-09-09 23:34:48 2717EBC35166B8793DBFFB4390B8F2E7 22328 ----a-w- C:\Windows\System32\drivers\avgidsshimx.sys

2013-09-04 23:43:42 CBCE8ED318DB8EA431F9D25AC9B7FF41 39224 ----a-w- C:\Windows\System32\drivers\avgrkx86.sys

====== C:\Windows\Tasks ======

====== C:\Windows\Temp ======

======= C:\Program Files =====

2013-09-20 14:59:44 -------- d-----w- C:\Program Files\trend micro

2013-09-20 14:46:46 -------- d-----w- C:\Program Files\Speccy

2013-09-13 10:00:38 -------- d-----w- C:\Program Files\WebConnect

2013-09-01 19:44:03 -------- d-----w- C:\Program Files\Uniblue

======= C: =====

====== C:\Users\jaimie\AppData\Roaming ======

2013-09-20 18:17:34 -------- d-----w- C:\Windows\serviceprofiles\Localservice\AppData\Local\PnrpSqm

2013-09-20 15:15:44 -------- d-----w- C:\Users\jaimie\AppData\Local\Avg2014

2013-09-20 14:47:19 -------- d-----w- C:\Windows\serviceprofiles\Localservice\AppData\Roaming\PeerNetworking

====== C:\Users\jaimie ======

2013-09-20 14:57:51 69CA82A7482A00D8EE063D2B97FC4338 781383 ----a-w- C:\Users\jaimie\Desktop\RSIT.exe

2013-09-13 06:55:49 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG

====== C: exe-files ==

2013-09-20 15:15:39 8EA98E4F807905E8264351D2522B5943 15920 ----a-w- C:\ProgramData\MFAData\SelfUpd\avgrdtestx.exe

2013-09-20 15:15:39 18CDB35B336F476D79B8B3819248D6CF 63024 ----a-w- C:\ProgramData\MFAData\SelfUpd\avguirux.exe

2013-09-20 15:15:37 07B1FB0401CAFA446B7BFE04D075C49E 5903304 ----a-w- C:\ProgramData\MFAData\SelfUpd\avgmfapx.exe

2013-09-20 15:15:34 6FF3974A6D6C7E85C75E7C45907C9499 287792 ----a-w- C:\ProgramData\MFAData\SelfUpd\avgrunasx.exe

2013-09-20 15:15:34 394A799E0E8EF32DB349C8410F3337F9 16944 ----a-w- C:\ProgramData\MFAData\SelfUpd\avgrdtesta.exe

2013-09-20 15:15:32 ADCD3E35657C3CA3CCE86FAA3EAF77EA 626736 ----a-w- C:\ProgramData\MFAData\SelfUpd\avgntdumpx.exe

2013-09-20 14:59:44 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\jaimie.exe

2013-09-20 14:57:51 69CA82A7482A00D8EE063D2B97FC4338 781383 ----a-w- C:\Users\jaimie\Desktop\RSIT.exe

2013-09-19 19:53:35 0B1CD71CE29E8123A664A5B40153D2FE 1915744 ----a-w- C:\Program Files\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\29.0.1547.76\29.0.1547.76_29.0.1547.66_chrome_updater.exe

=== C: other files ==

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]

"WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter"

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /detectMem"

[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]

"WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter"

"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /detectMem"

[HKEY_USERS\S-1-5-21-367893845-1825591885-46999492-1002\Software\Microsoft\Windows\CurrentVersion\Run]

"ISUSPM"="C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe -scheduler"

"TomTomHOME.exe"="C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"CardReaderMonitor"="C:\Program Files\Realtek Semiconductor Corp.\Realtek Card Reader Monitor\CardReaderMonitor.exe"

"MSC"="c:\Program Files\Microsoft Security Client\msseces.exe -hide -runkey"

"Reader Application Helper"="C:\Program Files\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe"

"SunJavaUpdateSched"="C:\Program Files\Common Files\Java\Java Update\jusched.exe"

"AVG_UI"="C:\Program Files\AVG\AVG2013\avgui.exe /TRAYONLY"

"Windows Defender"="%ProgramFiles%\Windows Defender\MSASCui.exe -hide"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

"ISUSPM"="C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe -scheduler"

"TomTomHOME.exe"="C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe"

==== Startup Registry Disabled ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\ISUSPM]