pc repair tool

Hallo,

Mijn computer is vreselijk traag.
nu kreeg ik vandaag een aanbod van een pc repair tool, deze belooft de computer te scannen en alle fouten te herstellen.
is dit betrouwbaar ?
kan ik dit zonder gevaar downloaden?

met vriendelijke groet,
maria

[Peter]

Hoi Maria,

Pas op met zogenaamde pc repair tools, er zijn goede en slechte. De slechte beloven veel maar presteren niet of nauwelijks het beloofde of vertragen je computer.
Heb je een downloadlink van die "pc repair tool" zodat we even kunnen kijken?

Doe ook het volgende ivm je trage computer:

Stap 1:
Download OTL naar je bureaublad.

Sluit alle openstaande programma's zodat het programma ongestoord zijn werk kan doen.
Windows XP: Dubbelklik op OTL.com om het programma te starten.
Windows Vista/7/8: Rechtsklik op OTL.com en klik op Als administrator uitvoeren.
Zet een vinkje bij Scan All Users.
Klik op de knop Quick Scan.
Verander verder geen instellingen van OTL. De scan zal niet heel erg lang duren.

Na de scan zullen twee kladblok-vensters geopend worden, OTL.txt en Extras.txt.
Deze bestanden zijn opgeslagen in dezelfde locatie als OTL.

Kopieer en plak in de inhoud van beide logbestanden in een volgend bericht.
Als dit niet in 1 bericht past, verdeel het dan over meerdere berichten.

Stap 2:
Download MBAM (Malwarebytes' Anti-Malware).
(klik op Download Now, het bestand mbam-setup-x.xx.x.xxxx.exe wordt dan gedownload)

Na het downloaden, dubbelklik erop om het programma te installeren.

Verander geen instellingen tijdens de installatie.
Updates worden nu automatisch gedownload en geïnstalleerd.
Wacht tot het programma weer verschijnt.

De eerste keer na installatie krijg je een aantal mogelijkheden:
Let op: Haal het vinkje weg bij Start de gratis probeer versie van Malwarebytes Anti-Malware PRO.

Als je een antivirus-programma actief hebt, stop dat dan eerst. Het scannen van MBAM gaat dan een stuk sneller.
Ruim eventueel eerst de tijdelijke (internet) bestanden op.

Updaten:
Klik op tab Update en dan op "Controleer op updates".

Ga naar tab Scanner, kies Volledige Scan en klik op Scan.
Het scannen kan een tijdje duren, dus wees geduldig.
Wanneer de scan voltooid is, klik op OK, daarna "Bekijk Resultaten" om de resultaten te zien.
Zorg ervoor dat daar alles aangevinkt is, daarna klik op "Verwijder geselecteerde".
Na het verwijderen zal een log openen en kan er gevraagd worden om de computer opnieuw op te starten. Herstart dan de computer en MBAM.
Ga naar tab Logs, dubbelklik op de logfile die als laatste gemaakt is.
Kopieer en plak de inhoud van de logfile in een nieuw bericht.


Groeten, Peter

Hallo Peter,

Hierbij de link: http://systweak.com/registryCleaner/afterdownload/new/jp/?utm_source=ad_nl_8773&utm_campaign=ad_nl_8773

Ik hoor graag van je,

groeten,
Maria

[Peter]

Hoi Maria,

RegClean Pro kan je beter mijden. Het scant gratis je computer, zal allerlei fouten vinden en om deze te repareren moet je eerst betalen! Of er fouten zijn en of die dan gefixt worden is maar de vraag.

Doe je stappen die ik eerder gaf, dan kijken we verder.


Peter

oké, maar ik heb het al gedownload, hoe krijg ik het er weer af?

groet,
maria

[Peter]

maar ik heb het al gedownload, hoe krijg ik het er weer af?

Als je het alleen gedownload hebt en niet geïnstalleerd, verwijder dan het gedownloade bestand rcp_ad_nl_8773_ad_nl_8773.exe

Heb je het al geïnstalleerd, koop dan niets, doe niet wat het programma voorstelt maar probeer het venster te sluiten.
Voer vervolgens de gegeven stappen uit.


Peter

Hallo Peter,

ik stuur de bestanden wel mee

groet,
Maria

Hallo Peter,

Hierbij het mbam bestand:
Malwarebytes Anti-Malware 1.70.0.1100
www.malwarebytes.org

Databaseversie: v2013.03.08.11

Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 9.0.8112.16421
Ria :: DEBIJPC [administrator]

8-3-2013 15:21:43
mbam-log-2013-03-08 (15-21-43).txt

Scan type: Volledige scan (C:\|D:\|)
Ingeschakelde scan opties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM
Uitgeschakelde scan opties: P2P
Objecten gescand: 356223
Verstreken tijd: 2 uur/uren, 32 minuut/minuten, 32 seconde(n)

Geheugenprocessen gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)

Geheugenmodulen gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)

Registersleutels gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)

Registerwaarden gedetecteerd: 1
HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|Shell (Worm.AutoRun) -> Data: explorer.exe,C:\RECYCLER\S-1-5-21-9334393987-7786243173-053627241-4515\MsMxEng.exe -> Succesvol in quarantaine geplaatst en verwijderd.

Registerdata gedetecteerd: 3
HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|Shell (Hijack.Shell) -> Slecht: (explorer.exe,C:\RECYCLER\S-1-5-21-9334393987-7786243173-053627241-4515\MsMxEng.exe) Goed: (Explorer.exe) -> Succesvol in quarantaine geplaatst en gerepareerd.
HKCR\scrfile\shell\open\command| (Broken.OpenCommand) -> Slecht: (NOTEPAD.EXE %1) Goed: ("%1" /S) -> Succesvol in quarantaine geplaatst en gerepareerd.
HKCR\regfile\shell\open\command| (Broken.OpenCommand) -> Slecht: (NOTEPAD.EXE %1) Goed: (regedit.exe "%1") -> Succesvol in quarantaine geplaatst en gerepareerd.

Mappen gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)

Bestanden gedetecteerd: 1
C:\Users\Ria\AppData\Local\Zylom Games\Bookworm Deluxe\Bookworm.exe (PUP.Downloader.ZYL) -> Succesvol in quarantaine geplaatst en verwijderd.

(einde)

[Peter]

Hoi Maria,

ik stuur de bestanden wel mee

Nee, dat is niet goed.
Het probleem is dat logbestanden die als bijlages gepost worden, soms verminkt kunnen raken waardoor ze moeilijk te analyseren zijn.
Open de 2 bijlages opnieuw met Notepad en kopieer en plak de inhoud in een nieuw bericht.


Peter

okee, het moet dan wel in gedeeltes, want het was te groot om het in een keer te versturen. 
hierbij het eerste gedeelte van OTL:

OTL logfile created on: 8-3-2013 13:29:38 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Ria\Downloads
Windows Vista Home Basic Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000413 | Country: Nederland | Language: NLD | Date Format: d-M-yyyy
 
1013,29 Mb Total Physical Memory | 151,34 Mb Available Physical Memory | 14,94% Memory free
2,24 Gb Paging File | 0,93 Gb Available in Paging File | 41,54% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 68,32 Gb Total Space | 23,73 Gb Free Space | 34,74% Space Free | Partition Type: NTFS
Drive D: | 6,21 Gb Total Space | 2,30 Gb Free Space | 37,01% Space Free | Partition Type: NTFS
 
Computer Name: DEBIJPC | User Name: Ria | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2013-03-08 13:28:13 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Ria\Downloads\OTL (1).com
PRC - [2013-02-22 16:45:25 | 002,535,376 | ---- | M] () -- C:\ProgramData\BrowserProtect\2.6.1184.107\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe
PRC - [2013-02-16 21:55:34 | 000,213,384 | ---- | M] (Google Inc.) -- C:\Users\Ria\AppData\Local\Google\Update\1.3.21.135\GoogleCrashHandler.exe
PRC - [2013-02-10 16:00:14 | 000,013,824 | ---- | M] (Smartbar) -- C:\Users\Ria\AppData\Local\Smartbar\Application\QuickShare.exe
PRC - [2013-02-08 14:55:20 | 001,644,680 | ---- | M] (Ask) -- C:\Program Files\Ask.com\Updater\Updater.exe
PRC - [2013-01-27 11:11:46 | 000,295,232 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft Security Client\NisSrv.exe
PRC - [2013-01-27 11:11:46 | 000,020,456 | ---- | M] (Microsoft Corporation) -- c:\Program Files\Microsoft Security Client\MsMpEng.exe
PRC - [2013-01-27 11:11:06 | 000,947,152 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\msseces.exe
PRC - [2013-01-11 17:02:52 | 006,395,760 | ---- | M] (Systweak) -- C:\Program Files\Advanced System Protector\AdvancedSystemProtector.exe
PRC - [2012-10-26 07:49:04 | 000,202,752 | ---- | M] () -- C:\Users\Ria\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe
PRC - [2011-11-08 11:17:12 | 000,596,656 | ---- | M] (iolo technologies, LLC) -- C:\Program Files\iolo\System Mechanic\SMTrayNotify.exe
PRC - [2011-11-08 10:57:10 | 000,722,616 | ---- | M] (iolo technologies, LLC) -- C:\Program Files\iolo\Common\Lib\ioloServiceManager.exe
PRC - [2009-04-11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009-04-11 07:27:28 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conime.exe
PRC - [2008-01-19 08:33:27 | 000,151,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\schtasks.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2013-03-04 22:21:57 | 000,911,432 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Data.SQLite\1.0.66.0__db937bc2d44ff139\System.Data.SQLite.dll
MOD - [2013-03-04 22:21:47 | 008,013,664 | ---- | M] () -- C:\Windows\assembly\GAC\Microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\Microsoft.mshtml.dll
MOD - [2013-03-04 22:21:46 | 000,139,264 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\Interop.SHDocVw\1.1.0.0__84542ff99aed6a4d\Interop.SHDocVw.dll
MOD - [2013-03-04 21:39:51 | 014,718,320 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32_11_6_602_171.dll
MOD - [2013-03-01 00:08:19 | 000,459,728 | ---- | M] () -- C:\Users\Ria\AppData\Local\Google\Chrome\Application\25.0.1364.152\ppGoogleNaClPluginChrome.dll
MOD - [2013-03-01 00:08:16 | 004,050,896 | ---- | M] () -- C:\Users\Ria\AppData\Local\Google\Chrome\Application\25.0.1364.152\pdf.dll
MOD - [2013-03-01 00:07:21 | 001,552,848 | ---- | M] () -- C:\Users\Ria\AppData\Local\Google\Chrome\Application\25.0.1364.152\ffmpegsumo.dll
MOD - [2013-02-22 16:45:25 | 002,535,376 | ---- | M] () -- C:\ProgramData\BrowserProtect\2.6.1184.107\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe
MOD - [2013-02-22 16:44:30 | 002,288,080 | ---- | M] () -- c:\ProgramData\BrowserProtect\2.6.1184.107\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll
MOD - [2013-02-14 18:56:32 | 000,212,992 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\9251ee45e5d2a8d6da856a0ab09fccd8\System.ServiceProcess.ni.dll
MOD - [2013-02-14 18:56:29 | 001,840,640 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\e656a905a2590f3d78cca8ec70491672\System.Web.Services.ni.dll
MOD - [2013-02-14 18:56:21 | 011,820,544 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\1acfb2e00e9900f0bc4c78117d44e92e\System.Web.ni.dll
MOD - [2013-02-14 18:53:28 | 001,801,216 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\bba853b4e1a9e8be74e3ff9f2a559515\System.Deployment.ni.dll
MOD - [2013-02-14 18:09:14 | 012,433,920 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\6c96c87b44cb3a1fcac5588405ca6dde\System.Windows.Forms.ni.dll
MOD - [2013-02-10 16:00:12 | 000,023,040 | ---- | M] () -- C:\Users\Ria\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Core.dll
MOD - [2013-02-10 16:00:10 | 001,575,424 | ---- | M] () -- C:\Users\Ria\AppData\Local\Smartbar\Application\Smartbar.GUI.MainClient.dll
MOD - [2013-02-10 16:00:10 | 000,037,888 | ---- | M] () -- C:\Users\Ria\AppData\Local\Smartbar\Application\Smartbar.Resources.AutomaticUpdates.dll
MOD - [2013-02-10 16:00:08 | 000,007,680 | ---- | M] () -- C:\Users\Ria\AppData\Local\Smartbar\Application\Smartbar.GUI.Multimedia.Loader.dll
MOD - [2013-02-10 15:57:20 | 000,650,240 | ---- | M] () -- C:\Users\Ria\AppData\Local\Smartbar\Application\Smartbar.GUI.Controls.dll
MOD - [2013-02-10 15:57:16 | 000,040,960 | ---- | M] () -- C:\Users\Ria\AppData\Local\Smartbar\Application\MACTrackBarLib.dll
MOD - [2013-02-10 15:57:14 | 000,028,672 | ---- | M] () -- C:\Users\Ria\AppData\Local\Smartbar\Application\nl\Smartbar.Resources.LanguageSettings.resources.dll
MOD - [2013-02-10 15:57:12 | 000,044,032 | ---- | M] () -- C:\Users\Ria\AppData\Local\Smartbar\Application\Smartbar.Resources.LanguageSettings.dll
MOD - [2013-02-10 15:57:10 | 000,051,200 | ---- | M] () -- C:\Users\Ria\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.InternetExplorerLocalPlugin.dll
MOD - [2013-02-10 15:57:08 | 000,073,728 | ---- | M] () -- C:\Users\Ria\AppData\Local\Smartbar\Application\Smartbar.Personalization.BusinessLogic.dll
MOD - [2013-02-10 15:57:06 | 000,062,976 | ---- | M] () -- C:\Users\Ria\AppData\Local\Smartbar\Application\Smartbar.Resources.HistoryAndStatsWrapper.dll
MOD - [2013-02-10 15:57:06 | 000,018,944 | ---- | M] () -- C:\Users\Ria\AppData\Local\Smartbar\Application\Smartbar.Resources.SocialNetsSharer.dll
MOD - [2013-02-10 15:57:06 | 000,013,312 | ---- | M] () -- C:\Users\Ria\AppData\Local\Smartbar\Application\Smartbar.Resources.SideBySide.dll
MOD - [2013-02-10 15:57:06 | 000,006,144 | ---- | M] () -- C:\Users\Ria\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.EventManager.dll
MOD - [2013-02-10 15:57:04 | 000,012,800 | ---- | M] () -- C:\Users\Ria\AppData\Local\Smartbar\Application\Smartbar.Resources.Utilities.dll
MOD - [2013-02-10 15:57:02 | 000,074,752 | ---- | M] () -- C:\Users\Ria\AppData\Local\Smartbar\Application\Smartbar.GUI.Docking.dll
MOD - [2013-02-10 15:57:02 | 000,012,288 | ---- | M] () -- C:\Users\Ria\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Utilities.dll
MOD - [2013-02-10 15:57:02 | 000,009,728 | ---- | M] () -- C:\Users\Ria\AppData\Local\Smartbar\Application\Smartbar.Personalization.Common.dll
MOD - [2013-02-10 15:57:02 | 000,007,168 | ---- | M] () -- C:\Users\Ria\AppData\Local\Smartbar\Application\Smartbar.Resources.ProcessDownMonitor.dll
MOD - [2013-02-10 15:57:02 | 000,007,168 | ---- | M] () -- C:\Users\Ria\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.BusinessEntities.dll
MOD - [2013-01-11 17:02:58 | 001,730,928 | ---- | M] () -- C:\Program Files\Advanced System Protector\aspsys.dll
MOD - [2013-01-11 16:38:22 | 000,998,400 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\0afbfe813c69c6e59adeff8d392893c7\System.Management.ni.dll
MOD - [2013-01-11 16:05:50 | 000,220,672 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\be7e9d179601b68d944bca0774562154\CustomMarshalers.ni.dll
MOD - [2013-01-11 16:00:51 | 000,627,712 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\482ed6a5ddd587481b969d477e26ea89\System.EnterpriseServices.ni.dll
MOD - [2013-01-11 16:00:49 | 000,627,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\a639235d6ce0d3cd05ca1ba26d0ceb68\System.Transactions.ni.dll
MOD - [2013-01-11 15:59:08 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\592d5682eedb48ff0480da9feb859f95\System.Configuration.ni.dll
MOD - [2013-01-11 15:58:50 | 005,450,752 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\025fc2d92484ad7c0fe120a8fd44d47b\System.Xml.ni.dll
MOD - [2013-01-11 15:53:08 | 001,593,856 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\44025a748649f45d638ca47bc9a0ead3\System.Drawing.ni.dll
MOD - [2013-01-11 15:52:40 | 006,621,696 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\5ba06b927f084937f15503f04ae0e4a3\System.Data.ni.dll
MOD - [2013-01-11 15:52:33 | 002,295,296 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\36c33ac424a0a8107c0ea553f0bdadc7\System.Core.ni.dll
MOD - [2013-01-11 15:51:34 | 007,977,984 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\d70cd42bae1e041b6c3d937303b8f03c\System.ni.dll
MOD - [2013-01-11 15:51:10 | 011,492,352 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\2227d1559f87943255069398608d5c56\mscorlib.ni.dll
MOD - [2013-01-10 15:01:56 | 000,886,272 | ---- | M] () -- C:\Program Files\Advanced System Protector\System.Data.SQLite.dll
MOD - [2013-01-10 15:01:54 | 000,168,448 | ---- | M] () -- C:\Program Files\Advanced System Protector\unrar.dll
MOD - [2012-10-26 07:49:04 | 000,202,752 | ---- | M] () -- C:\Users\Ria\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe
MOD - [2009-03-31 19:04:19 | 000,446,464 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_nl_b77a5c561934e089\System.Windows.Forms.resources.dll
MOD - [2009-03-31 19:04:19 | 000,413,696 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Deployment.resources\2.0.0.0_nl_b03f5f7f11d50a3a\System.Deployment.resources.dll
MOD - [2009-03-31 19:04:18 | 000,303,104 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_nl_b77a5c561934e089\mscorlib.resources.dll
MOD - [2009-03-30 05:42:19 | 000,261,632 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
MOD - [2009-03-30 05:42:17 | 002,933,760 | ---- | M] () -- C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
MOD - [2009-03-30 05:42:11 | 000,069,120 | ---- | M] () -- C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
 
 
========== Services (SafeList) ==========
 
SRV - [2013-03-04 22:41:19 | 000,251,248 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013-02-22 16:45:25 | 002,535,376 | ---- | M] () [Auto | Running] -- C:\ProgramData\BrowserProtect\2.6.1184.107\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe -- (BrowserProtect)
SRV - [2013-01-27 11:11:46 | 000,295,232 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- c:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV - [2013-01-27 11:11:46 | 000,020,456 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV - [2011-11-08 10:57:10 | 000,722,616 | ---- | M] (iolo technologies, LLC) [Auto | Running] -- C:\Program Files\iolo\Common\Lib\ioloServiceManager.exe -- (ioloSystemService)
SRV - [2008-01-19 08:38:24 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\blbdrive.sys -- (blbdrive)
DRV - [2013-01-20 15:59:04 | 000,100,328 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\NisDrvWFP.sys -- (NisDrv)
DRV - [2010-02-25 01:03:16 | 000,014,904 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CPQBTTN.sys -- (HBtnKey)
DRV - [2009-09-08 10:40:14 | 000,020,392 | ---- | M] (EldoS Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\ElRawDsk.sys -- (ElRawDisk)
DRV - [2009-04-29 07:46:54 | 000,015,872 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\HpqKbFiltr.sys -- (HpqKbFiltr)
DRV - [2008-03-04 01:32:00 | 000,188,416 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CHDRT32.sys -- (CnxtHdAudService)
DRV - [2007-10-29 10:38:38 | 000,162,088 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Apfiltr.sys -- (ApfiltrService)
DRV - [2007-07-10 06:27:56 | 000,008,704 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\XAudio.sys -- (XAudio)
DRV - [2007-05-04 15:11:32 | 002,219,520 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\NETw4v32.sys -- (NETw4v32)
DRV - [2007-04-30 20:59:30 | 000,160,768 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CHDART.sys -- (HdAudAddService)
DRV - [2007-04-23 22:51:08 | 000,050,176 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtnicxp.sys -- (RTL8023xp)
DRV - [2006-11-02 08:30:54 | 001,781,760 | ---- | M] (Intel® Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\NETw3v32.sys -- (NETw3v32)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKLM\..\SearchScopes\{80259BF2-3AA9-4AB4-A35A-675DF3CE53BB}: "URL" = http://nl.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06
IE - HKLM\..\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}: "URL" = http://us.yhs.search.yahoo.com/avg/search?fr=yhs-avg-chrome&type=yahoo_avg_hs2-tb-web_chrome_us&p={searchTerms}
 
 
IE - HKU\.DEFAULT\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - No CLSID value found
IE - HKU\.DEFAULT\..\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}: "URL" = http://us.yhs.search.yahoo.com/avg/search?fr=yhs-avg-chrome&type=yahoo_avg_hs2-tb-web_chrome_us&p={searchTerms}
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\..\URLSearchHook: {A3BC75A2-1F87-4686-AA43-5347D756017C} - No CLSID value found
IE - HKU\S-1-5-18\..\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}: "URL" = http://us.yhs.search.yahoo.com/avg/search?fr=yhs-avg-chrome&type=yahoo_avg_hs2-tb-web_chrome_us&p={searchTerms}
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

en hierbij het tweede gedeelte van OTL:

 
IE - HKU\S-1-5-21-630323099-3112645402-2095186954-1000\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www.delta-search.com/?affID=119816&babsrc=HP_ss&mntrId=58ca57d2000000000000001a739d03ec
IE - HKU\S-1-5-21-630323099-3112645402-2095186954-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.hyves.nl
IE - HKU\S-1-5-21-630323099-3112645402-2095186954-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.hyves.nl/browsers/IE8/ [binary data]
IE - HKU\S-1-5-21-630323099-3112645402-2095186954-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = 
IE - HKU\S-1-5-21-630323099-3112645402-2095186954-1000\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\S-1-5-21-630323099-3112645402-2095186954-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-search.com/?affID=119816&babsrc=HP_ss&mntrId=58ca57d2000000000000001a739d03ec
IE - HKU\S-1-5-21-630323099-3112645402-2095186954-1000\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
IE - HKU\S-1-5-21-630323099-3112645402-2095186954-1000\..\SearchScopes,bProtectorDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKU\S-1-5-21-630323099-3112645402-2095186954-1000\..\SearchScopes,DefaultScope = {27E31E94-0F53-457A-AEBA-553D80B8BD65}
IE - HKU\S-1-5-21-630323099-3112645402-2095186954-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC
IE - HKU\S-1-5-21-630323099-3112645402-2095186954-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://www.delta-search.com/?q={searchTerms}&affID=119816&babsrc=SP_ss&mntrId=58ca57d2000000000000001a739d03ec
IE - HKU\S-1-5-21-630323099-3112645402-2095186954-1000\..\SearchScopes\{27E31E94-0F53-457A-AEBA-553D80B8BD65}: "URL" = http://www.google.com/search?hl=en&q={searchTerms}&rlz=1I7GGLL_en
IE - HKU\S-1-5-21-630323099-3112645402-2095186954-1000\..\SearchScopes\{93C02D33-A035-48CF-83B3-0A3C013E0098}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=ORJ&o=&src=kw&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000YYNL&apn_uid=88B03F9F-8637-4D9B-8E1B-6915DBCF8DD0&apn_sauid=3374D653-090B-4F51-9FDE-F7CB4020191E
IE - HKU\S-1-5-21-630323099-3112645402-2095186954-1000\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.com/search?cid={80BA8AE9-4698-4F2C-8BCC-3886318A6BB1}&mid=fdf9c5501d0147d6a7ead1527e661d9d-63400a1fd68776af9b2c0262b02a02b023f30421&lang=nl&ds=AVG&pr=fr&d=2011-12-15 23:04:53&v=8.0.0.34&sap=dsp&q={searchTerms}
IE - HKU\S-1-5-21-630323099-3112645402-2095186954-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
========== FireFox ==========
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_6_602_171.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.3: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Ria\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Ria\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar: C:\ProgramData\AVG Secure Search\9.0.0.18\ [2011-12-07 08:46:22 | 000,000,000 | ---D | M]
 
[2013-03-04 22:19:47 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
 
========== Chrome  ==========
 
CHR - default_search_provider: Delta Search (Enabled)
CHR - default_search_provider: search_url = http://www.delta-search.com/?q={searchTerms}&affID=119816&babsrc=SP_ss&mntrId=58ca57d2000000000000001a739d03ec
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR - homepage: http://www.delta-search.com/?affID=119816&babsrc=HP_ss&mntrId=58ca57d2000000000000001a739d03ec
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Ria\AppData\Local\Google\Chrome\Application\25.0.1364.152\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Ria\AppData\Local\Google\Chrome\Application\25.0.1364.152\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Ria\AppData\Local\Google\Chrome\Application\25.0.1364.152\gcswf32.dll
CHR - plugin: Shockwave Flash (Disabled) = C:\Users\Ria\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.290.11 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U29 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Program Files\Microsoft\Office Live\npOLW.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: Google Update (Enabled) = C:\Users\Ria\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - Extension: Ask Toolbar = C:\Users\Ria\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo\7.15.15.37265_0\
CHR - Extension: QuickShare Widget = C:\Users\Ria\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\
CHR - Extension: YouTube = C:\Users\Ria\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_1\
CHR - Extension: Google Zoeken = C:\Users\Ria\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_1\
CHR - Extension: PricePeep = C:\Users\Ria\AppData\Local\Google\Chrome\User Data\Default\Extensions\licjnkifamhpbaefhdpacpmihicfbomb\2.1.0.22_0\
CHR - Extension: Gmail = C:\Users\Ria\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
 
O1 HOSTS File: ([2006-09-18 22:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2 - BHO: (HP Print Clips) - {053F9267-DC04-4294-A72C-58F732D338C0} - C:\Program Files\HP\Smart Web Printing\hpswp_framework.dll (Hewlett-Packard Co.)
O2 - BHO: (Adobe PDF Reader Help bij koppelingen) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (delta Helper Object) - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files\Delta\delta\1.8.10.0\bh\delta.dll (Delta-search.com)
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (Delta Toolbar) - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files\Delta\delta\1.8.10.0\deltaTlbr.dll (Delta-search.com)
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKU\S-1-5-21-630323099-3112645402-2095186954-1000\..\Toolbar\WebBrowser: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [ApnUpdater] C:\Program Files\Ask.com\Updater\Updater.exe (Ask)
O4 - HKLM..\Run: [iolo Startup] C:\Program Files\iolo\Common\Lib\ioloLManager.exe (iolo technologies, LLC)
O4 - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKU\.DEFAULT..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background File not found
O4 - HKU\S-1-5-18..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background File not found
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-630323099-3112645402-2095186954-1000..\Run: [Browser Infrastructure Helper] C:\Users\Ria\AppData\Local\Smartbar\Application\QuickShare.exe (Smartbar)
O4 - HKU\S-1-5-21-630323099-3112645402-2095186954-1000..\Run: [FLV Player] C:\Users\Ria\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe ()
O4 - HKLM..\RunOnce: [AvgUninstallURL] C:\Windows\System32\cmd.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-21-630323099-3112645402-2095186954-1000\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-21-630323099-3112645402-2095186954-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O9 - Extra Button: HP Clipboek - {58ECB495-38F0-49cb-A538-10282ABF65E7} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll (Hewlett-Packard Co.)
O9 - Extra Button: HP Slim selecteren - {700259D7-1666-479a-93B1-3250410481E8} - C:\Program Files\HP\Smart Web Printing\hpswp_extensions.dll (Hewlett-Packard Co.)
O13 - gopher Prefix: missing
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1295595662263 (WUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 10.9.2)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DE11F963-4B9F-466E-B3F4-4ACDE6B1E25C}: DhcpNameServer = 192.168.2.1
O20 - AppInit_DLLs: (c:\progra~2\browse~1\261184~1.107\{c16c1~1\browse~1.dll) - c:\ProgramData\BrowserProtect\2.6.1184.107\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll ()
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKU\S-1-5-21-630323099-3112645402-2095186954-1000 Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKU\S-1-5-21-630323099-3112645402-2095186954-1000 Winlogon: Shell - (C:\RECYCLER\S-1-5-21-9334393987-7786243173-053627241-4515\MsMxEng.exe) -  File not found
O24 - Desktop WallPaper: C:\Users\Ria\AppData\Roaming\Microsoft\Windows Photo Gallery\Bureaubladachtergrond van Windows Fotogalerie.jpg
O24 - Desktop BackupWallPaper: C:\Users\Ria\AppData\Roaming\Microsoft\Windows Photo Gallery\Bureaubladachtergrond van Windows Fotogalerie.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2005-09-11 16:18:54 | 000,000,340 | -HS- | M] () - D:\AUTOMODE -- [ NTFS ]
O33 - MountPoints2\{64ade077-0081-11dd-b879-001b3882f46e}\Shell\AutoRun\command - "" = F:\ClickMe.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
========== Files/Folders - Created Within 30 Days ==========

en hierbij het derde gedeelte :

========== Files/Folders - Created Within 30 Days ==========
 
[2013-03-07 18:26:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced System Protector
[2013-03-07 18:26:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Systweak
[2013-03-07 18:26:20 | 000,000,000 | ---D | C] -- C:\Program Files\Advanced System Protector
[2013-03-07 18:23:04 | 000,000,000 | ---D | C] -- C:\Users\Ria\AppData\Roaming\Systweak
[2013-03-07 18:22:38 | 000,018,800 | ---- | C] (Systweak Inc., (www.systweak.com)) -- C:\Windows\System32\roboot.exe
[2013-03-07 18:22:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro
[2013-03-07 18:21:43 | 000,000,000 | ---D | C] -- C:\Program Files\RegClean Pro
[2013-03-04 22:23:01 | 000,000,000 | ---D | C] -- C:\Users\Ria\AppData\Local\Bundled software uninstaller
[2013-03-04 22:22:55 | 000,000,000 | ---D | C] -- C:\Users\Ria\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FLV Player
[2013-03-04 22:22:48 | 000,000,000 | ---D | C] -- C:\Users\Ria\AppData\Local\WebPlayer
[2013-03-04 22:22:36 | 000,000,000 | ---D | C] -- C:\Program Files\PricePeep
[2013-03-04 22:21:30 | 000,000,000 | ---D | C] -- C:\Users\Ria\AppData\Local\Smartbar
[2013-03-04 22:20:23 | 000,000,000 | ---D | C] -- C:\Windows\System32\searchplugins
[2013-03-04 22:20:23 | 000,000,000 | ---D | C] -- C:\Windows\System32\Extensions
[2013-03-04 22:20:22 | 000,000,000 | ---D | C] -- C:\Users\Ria\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserProtect
[2013-03-04 22:20:09 | 000,000,000 | ---D | C] -- C:\ProgramData\BrowserProtect
[2013-03-04 22:19:56 | 000,000,000 | ---D | C] -- C:\Users\Ria\AppData\Roaming\BabSolution
[2013-03-04 22:19:53 | 000,000,000 | ---D | C] -- C:\Program Files\Delta
[2013-03-04 22:19:47 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2013-03-04 22:19:46 | 000,000,000 | ---D | C] -- C:\Users\Ria\AppData\Roaming\Delta
[2013-03-04 22:19:27 | 000,000,000 | ---D | C] -- C:\Users\Ria\AppData\Roaming\Babylon
[2013-03-04 22:19:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Babylon
[2013-03-02 12:16:04 | 000,000,000 | ---D | C] -- C:\Users\Ria\AppData\Local\{F742728F-A6C2-45B6-B8E4-D32600283410}
[2013-03-01 22:38:09 | 000,000,000 | ---D | C] -- C:\Users\Ria\AppData\Local\{90B8D9C3-3772-4D92-A28C-52F69CB96BB0}
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2013-03-08 13:40:13 | 000,000,940 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013-03-08 13:39:29 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013-03-08 13:25:47 | 000,680,432 | ---- | M] () -- C:\Windows\System32\perfh013.dat
[2013-03-08 13:25:47 | 000,599,188 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013-03-08 13:25:47 | 000,131,520 | ---- | M] () -- C:\Windows\System32\perfc013.dat
[2013-03-08 13:25:47 | 000,105,202 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013-03-08 13:20:24 | 000,000,150 | ---- | M] () -- C:\Users\Public\Documents\hpqp.ini
[2013-03-08 13:20:13 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2013-03-08 13:20:12 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2013-03-08 13:19:02 | 000,000,268 | ---- | M] () -- C:\Windows\tasks\RegClean Pro_UPDATES.job
[2013-03-08 13:19:02 | 000,000,260 | ---- | M] () -- C:\Windows\tasks\RegClean Pro_DEFAULT.job
[2013-03-08 13:18:45 | 1063,288,832 | -HS- | M] () -- C:\hiberfil.sys
[2013-03-07 22:02:02 | 000,001,006 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-630323099-3112645402-2095186954-1000Core.job
[2013-03-07 22:02:01 | 000,001,058 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-630323099-3112645402-2095186954-1000UA.job
[2013-03-07 18:26:57 | 000,000,998 | ---- | M] () -- C:\Users\Public\Desktop\Advanced System Protector.lnk
[2013-03-07 18:22:34 | 000,000,847 | ---- | M] () -- C:\Users\Public\Desktop\RegClean Pro.lnk
[2013-03-06 17:40:38 | 000,002,034 | ---- | M] () -- C:\Users\Ria\Application Data\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[2013-03-06 17:40:37 | 000,002,032 | ---- | M] () -- C:\Users\Ria\Desktop\Google Chrome.lnk
[2013-03-04 22:44:44 | 000,001,912 | ---- | M] () -- C:\Windows\epplauncher.mif
[2013-03-04 22:22:55 | 000,001,920 | ---- | M] () -- C:\Users\Ria\Desktop\FLV Player.lnk
[2013-02-14 18:20:57 | 000,000,938 | ---- | M] () -- C:\Users\Ria\Application Data\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Outlook starten.lnk
[2013-02-14 18:05:31 | 000,419,040 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2013-03-07 18:26:57 | 000,000,998 | ---- | C] () -- C:\Users\Public\Desktop\Advanced System Protector.lnk
[2013-03-07 18:26:20 | 000,017,136 | ---- | C] () -- C:\Windows\System32\sasnative32.exe
[2013-03-07 18:25:07 | 000,000,260 | ---- | C] () -- C:\Windows\tasks\RegClean Pro_DEFAULT.job
[2013-03-07 18:25:01 | 000,000,268 | ---- | C] () -- C:\Windows\tasks\RegClean Pro_UPDATES.job
[2013-03-07 18:22:34 | 000,000,847 | ---- | C] () -- C:\Users\Public\Desktop\RegClean Pro.lnk
[2013-03-04 22:22:54 | 000,001,920 | ---- | C] () -- C:\Users\Ria\Desktop\FLV Player.lnk
[2013-03-04 21:40:03 | 000,000,940 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012-10-31 13:15:34 | 000,074,703 | ---- | C] () -- C:\Windows\System32\mfc45.dat
[2011-12-15 17:14:57 | 002,325,680 | ---- | C] () -- C:\Windows\System32\Incinerator.dll
[2011-12-15 17:10:51 | 000,074,703 | ---- | C] () -- C:\Windows\System32\mfc45.dll
[2011-07-07 16:59:30 | 000,000,262 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2011-07-01 13:15:42 | 000,002,240 | ---- | C] () -- C:\Users\Ria\MR900406928.JPG
[2011-06-20 17:10:21 | 000,000,680 | ---- | C] () -- C:\Users\Ria\AppData\Local\d3d9caps.dat
[2010-08-07 18:13:39 | 000,000,539 | ---- | C] () -- C:\Users\Ria\intlname.ols
[2008-02-25 16:35:33 | 000,013,312 | ---- | C] () -- C:\Users\Ria\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
 
========== ZeroAccess Check ==========
 
[2006-11-02 13:51:16 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012-06-08 18:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009-04-11 07:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009-04-11 07:28:25 | 000,347,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
========== LOP Check ==========
 
[2013-03-04 22:19:58 | 000,000,000 | ---D | M] -- C:\Users\Ria\AppData\Roaming\BabSolution
[2013-03-04 22:19:27 | 000,000,000 | ---D | M] -- C:\Users\Ria\AppData\Roaming\Babylon
[2012-03-14 17:15:37 | 000,000,000 | ---D | M] -- C:\Users\Ria\AppData\Roaming\Belastingdienst
[2013-03-04 22:19:46 | 000,000,000 | ---D | M] -- C:\Users\Ria\AppData\Roaming\Delta
[2011-11-14 18:47:44 | 000,000,000 | ---D | M] -- C:\Users\Ria\AppData\Roaming\Dropbox
[2011-12-15 17:39:37 | 000,000,000 | ---D | M] -- C:\Users\Ria\AppData\Roaming\iolo
[2009-10-21 19:12:15 | 000,000,000 | ---D | M] -- C:\Users\Ria\AppData\Roaming\Skip-Bo
[2013-03-07 18:27:28 | 000,000,000 | ---D | M] -- C:\Users\Ria\AppData\Roaming\Systweak
[2010-12-27 15:40:07 | 000,000,000 | ---D | M] -- C:\Users\Ria\AppData\Roaming\Zylom
 
========== Purity Check ==========
 
 
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 124 bytes -> C:\ProgramData\TEMP:0B4227B4

< End of report >

en hierbij de Extras:
OTL Extras logfile created on: 8-3-2013 13:29:38 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Ria\Downloads
Windows Vista Home Basic Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000413 | Country: Nederland | Language: NLD | Date Format: d-M-yyyy
 
1013,29 Mb Total Physical Memory | 151,34 Mb Available Physical Memory | 14,94% Memory free
2,24 Gb Paging File | 0,93 Gb Available in Paging File | 41,54% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 68,32 Gb Total Space | 23,73 Gb Free Space | 34,74% Space Free | Partition Type: NTFS
Drive D: | 6,21 Gb Total Space | 2,30 Gb Free Space | 37,01% Space Free | Partition Type: NTFS
 
Computer Name: DEBIJPC | User Name: Ria | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- C:\Program Files\Advanced System Protector\filetypehelper.exe -scanunknown "%1" (Systweak)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
"UacDisableNotify" = 1
"InternetSettingsDisableNotify" = 1
"AutoUpdateDisableNotify" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{1F33E58E-3788-410B-8699-18429CD7BF6D}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | 
"{24A8F55C-133C-4AD7-A406-4EAFE83AE47E}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{DF258BE9-BDCB-4C61-BDAF-2CD70D506A0A}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | 
"{FB738E32-9677-4FFF-93A1-F2928C78C4C9}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{10A7D364-4ACF-478A-A7D5-7F409A6C5C3E}" = protocol=6 | dir=in | app=c:\users\ria\appdata\roaming\dropbox\bin\dropbox.exe | 
"{114B20DC-78F3-4D60-96A8-E31EB76F082C}" = protocol=6 | dir=in | app=c:\program files\avg\avg10\avgmfapx.exe | 
"{1C963F20-D88C-453A-8B5E-9D1E56EA84BA}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe | 
"{2F0DE38B-8F95-4B4A-AD6D-AF70001CB736}" = protocol=17 | dir=in | app=c:\program files\avg\avg10\avgmfapx.exe | 
"{31C91253-1BCF-4D6A-BFC8-7C2E46E3F3BC}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe | 
"{3FED5E83-F0B6-4BC8-8439-B30C960B7D6A}" = protocol=17 | dir=in | app=c:\users\ria\appdata\roaming\dropbox\bin\dropbox.exe | 
"{48643DE1-5918-4B37-ADF0-164A48C1E627}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | 
"{5BA52198-E636-4335-BBDF-623089FFF091}" = dir=in | app=c:\program files\hp\quickplay\qp.exe | 
"{E40CBBFE-26D7-48B2-9947-C4651D9D8F6A}" = dir=in | app=c:\program files\hp\quickplay\qpservice.exe | 
"TCP Query User{48C909CF-1A1D-4BE7-8DA0-51541CF772F3}C:\program files\java\jre7\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\java.exe | 
"TCP Query User{8367459B-E12C-4396-8882-A76DE6BB1F83}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe | 
"UDP Query User{3711A127-5EA2-443C-93D2-09AA07697E42}C:\program files\java\jre7\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\java.exe | 
"UDP Query User{B0DD9A0A-D000-43A7-882F-FE421EA9861A}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========

deel 2 Extras:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0394CDC8-FABD-4ed8-B104-03393876DFDF}" = Roxio Creator Tools
"{072B53D7-DAAD-4562-8764-B528D0ADA7C4}" = Windows Live Family Safety
"{082702D5-5DD8-4600-BCE5-48B15174687F}" = HP Doc Viewer
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0D397393-9B50-4c52-84D5-77E344289F87}" = Roxio Creator Data
"{0D499481-22C6-4B25-8AC2-6D3F6C885FB9}" = OpenOffice.org Installer 1.0
"{101738D7-D805-37A9-BB91-1F2C351782BF}" = Microsoft .NET Framework 3.5 Language Pack SP1 - nld
"{10E1E87C-656C-4D08-86D6-5443D28583BE}" = TrayApp
"{11F93B4B-48F0-4A4E-AE77-DFA96A99664B}" = Roxio Creator EasyArchive
"{13F00518-807A-4B3A-83B0-A7CD90F3A398}" = MarketResearch
"{14B441B7-774D-4170-98EA-A13667AE6218}" = Windows Live Writer Resources
"{15D2D75C-9CB2-4efd-BAD7-B9B4CB4BC693}" = BrowserProtect
"{1753255A-0AEB-4220-8C75-607B73F0C133}" = Copy
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{22466889-7642-488d-AA0E-F619704CF7AB}" = DeviceDiscovery
"{254C37AA-6B72-4300-84F6-98A82419187E}" = Hewlett-Packard Active Check
"{2617FA1F-0C04-3ABB-AF64-7D5B6620C341}" = Microsoft .NET Framework 4 Client Profile NLD Language Pack
"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java(TM) 6 Update 29
"{26A24AE4-039D-4CA4-87B4-2F83217009FF}" = Java 7 Update 9
"{27481F86-8D06-4359-ABCE-C46AC239DEF5}" = ESU for Microsoft Vista
"{290B83AA-093A-45BF-A917-D1C4A1E8D917}" = HP Active Support Library
"{29FA38B4-0AE4-4D0D-8A51-6165BB990BB0}" = WebReg
"{2A07C35B-8384-4DA4-9A95-442B6C89A073}" = Windows Live Essentials
"{2F28B3C9-2C89-4206-8B33-8ADC9577C49B}" = Scan
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{33C65B6A-5D73-4E3E-A1F9-127C27BD3F72}" = Roxio MyDVD Basic v9
"{34D2AB40-150D-475D-AE32-BD23FB5EE355}" = HP Quick Launch Buttons
"{35E1EC43-D4FC-4E4A-AAB3-20DDA27E8BB0}" = Roxio Activation Module
"{390DD8BB-BB57-4942-A029-2D913E4E9D74}" = Microsoft Security Client
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3F92ABBB-6BBF-11D5-B229-002078017FBF}" = NetWaiting
"{40F7AED3-0C7D-4582-99F6-484A515C73F2}" = HP Easy Setup - Frontend
"{415CDA53-9100-476F-A7B2-476691E117C7}" = HP Smart Web Printing
"{45D707E9-F3C4-11D9-A373-0050BAE317E1}" = HP DVD Play 3.2
"{48294D95-EE9A-4377-8213-44FC4265FB27}" = Windows Live Messenger
"{487B0B9B-DCD4-440D-89A0-A6EDE1A545A3}" = HPSSupply
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{50779A29-834E-4E36-BBEB-B7CABC67A825}" = Microsoft Security Client NL-NL Language Pack
"{543E938C-BDC4-4933-A612-01293996845F}" = UnloadSupport
"{54B5F150-A6E9-412D-962B-D9B1FCB0AB07}" = MSCU for Microsoft Vista
"{55FD1D5A-7AEF-4DA3-8FAF-A71B2A52FFC7}_is1" = iolo technologies' System Mechanic
"{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}" = Microsoft Office Live Add-in 1.3
"{5DD4FCBD-A3C1-4155-9E17-4161C70AAABA}" = Segoe UI
"{619CDD8A-14B6-43a1-AB6C-0F4EE48CE048}" = Roxio Creator Copy
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler 3
"{669D4A35-146B-4314-89F1-1AC3D7B88367}" = Hewlett-Packard Asset Agent
"{66C1DD9B-02D8-4A31-B54C-FE8DC76F25D4}" = HP User Guides 0078
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7E017923-16F8-4E32-94EF-0A150BD196FE}" = Windows Live Writer
"{80CA15EA-C0A5-7CAF-B9E9-B8B2A87EFE11}" = Orange menu toepassing
"{824D3839-DAA1-4315-A822-7AE3E620E528}" = VideoToolkit01
"{8389382B-53BA-4A87-8854-91E3D80A5AC7}" = HP Photosmart Essential2.01
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{83FFCFC7-88C6-41c6-8752-958A45325C82}" = Roxio Creator Audio
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{90CA15EA-C0A5-7CAF-B9E9-B8B2A87EFE11}" = Orange registratie toepassing
"{91CA0413-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Small Business Editie 2003
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95140000-007A-0413-0000-0000000FF1CE}" = Microsoft Office Outlook Connector
"{9BD262D0-B788-4546-A0A5-F4F56EC3834B}" = Windows Live Photo Common
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = Touch Pad Driver
"{A2A0A82F-025F-458d-A0CD-9BB2320804B5}" = Microsoft Works
"{A60B3BF0-954B-42AF-B8D8-2C1D34B613AA}" = Windows Live Photo Gallery
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC76BA86-7AD7-1043-7B44-A81200000003}" = Adobe Reader 8.1.2 - Nederlands
"{AE46ABD3-D625-467F-B5A7-8D3FFF077F0D}" = Realtek 8139 and 8139C+ Ethernet Network Card Driver for Windows Vista
"{AEA07F97-9088-497c-8821-0F36BD5DC251}" = HPProductAssistant
"{AF7FC1CA-79DF-43c3-90A3-33EFEB9294CE}" = AIO_Scan
"{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{B4F35A00-24FD-4fb3-BF5E-413D5423434D}" = DJ_AIO_Software_min
"{BCD6CD1A-0DBE-412E-9F25-3B500D1E6BA1}" = SolutionCenter
"{BCF16F16-AC0E-4ABE-A9EF-412CF484BA51}" = Windows Live Family Safety
"{C1920D73-7374-49d9-8C37-58A6E49078A5}" = F2100_Help
"{C5EF81AC-FE4C-4157-97E3-2E08B000742A}" = F2100_doccd
"{C6150D8A-86ED-41D3-87BB-F3BB51B0B77F}" = Windows Live ID Sign-in Assistant
"{C8B0680B-CDAE-4809-9F91-387B6DE00F7C}" = Roxio Creator Basic v9
"{CA50045C-5119-48e7-9BA7-6B317379857A}" = DJ_AIO_Software
"{CB7224D9-6DCA-43F1-8F83-6B1E39A00F92}" = Windows Live Movie Maker
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0E39A1D-0CEE-4D85-B4A2-E3BE990D075E}" = Destination Component
"{D32067CD-7409-4792-BFA0-1469BCD8F0C8}" = HP Wireless Assistant
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D588365A-AE39-4F27-BDAE-B4E72C8E900C}" = Windows Live Mail
"{D6F25CF9-4E87-43EB-B324-C12BE9CDD668}" = Windows Live UX Platform Language Pack
"{D9B4D7EE-481C-4C36-86AB-A8F7417725FF}" = LightScribe  1.6.43.1
"{DA15D535-5E1D-4076-B520-8571346D6238}" = Norton™ Security Scan
"{DC24971E-1946-445D-8A82-CE685433FA7D}" = Realtek USB 2.0 Card Reader
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E2662C24-B31E-4349-A084-32EB76E8B760}" = BufferChm
"{E34F703A-1C9D-4B1F-ABBE-D7E8800B860D}" = Windows Live Sync
"{E548726E-F4E8-459f-BAB8-45551BC071E9}" = DJ_AIO_ProductContext
"{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger
"{E9C18EBD-85BE-47D0-AA73-3FEDCC976B04}" = Toolbox
"{EDCD68B3-48F2-414C-BF20-6924193A3E58}" = AmbraSoft Familiepakket 0910 Demo
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F1C409F0-8322-4c87-BD08-2F62777D490D}" = F2100
"{F1D7AC58-554A-4A58-B784-B61558B1449A}" = QLBCASL
"{F1E63043-54FC-429B-AB2C-31AF9FBA4BC7}" = 32 Bit HP CIO Components Installer
"{F72E2DDC-3DB8-4190-A21D-63883D955FE7}" = PSSWCORE
"{F7D739D1-B597-4802-A4CB-E1FBF326C9B0}" = QuickShare
"{F8EDC0F8-15BC-4411-8762-77105C8AAEEC}" = Microsoft Antimalware Service NL-NL Language Pack
"{FAB0C302-CB18-4A7A-BA03-C3DC23101A68}" = HP Active Support Library 32 bit components
"{FD8D8B04-BEAD-4A55-AA1D-62D2373E7DEA}" = Status
"00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~B9F029BF_is1" = Advanced System Protector
"Aangifte inkomstenbelasting 2007" = Aangifte inkomstenbelasting 2007
"Aangifte inkomstenbelasting 2008" = Aangifte inkomstenbelasting 2008
"Aangifte inkomstenbelasting 2010" = Aangifte inkomstenbelasting 2010
"Aangifte inkomstenbelasting 2011" = Aangifte inkomstenbelasting 2011
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player
"bi_uninstaller" = Bundled software uninstaller
"CNXT_AUDIO_HDA" = Conexant HD Audio
"CNXT_MODEM_HDA_HSF" = HDAUDIO Soft Data Fax Modem with SmartCP
"delta" = Delta toolbar  
"Delta Chrome Toolbar" = Delta Chrome Toolbar
"Easy Taalcursus Engels" = Easy Taalcursus Engels
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"Microsoft .NET Framework 3.5 Language Pack SP1 - nld" = Taalpakket voor Microsoft .NET Framework 3.5 SP1 - NL
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile NLD Language Pack" = Taalpakket voor Microsoft .NET Framework 4 Client Profile - NLD
"Microsoft Security Client" = Microsoft Security Essentials
"PricePeep" = PricePeep for Google Chrome
"RegClean Pro_is1" = RegClean Pro
"Verzoek of wijziging voorlopige aanslag 2009" = Verzoek of wijziging voorlopige aanslag 2009
"WinLiveSuite" = Windows Live Essentials
 
========== HKEY_USERS Uninstall List ==========
 
[HKEY_USERS\S-1-5-21-630323099-3112645402-2095186954-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{79A765E1-C399-405B-85AF-466F52E918B0}" = Ask Toolbar Updater
"Bookworm Deluxe" = Bookworm Deluxe
"FLV Player" = FLV Player
"Google Chrome" = Google Chrome
"SKIP-BO Castaway Caper(TM)" = SKIP-BO Castaway Caper(TM)
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 1-3-2013 10:38:21 | Computer Name = debijpc | Source = Windows Search Service | ID = 3013
Description = 
 
Error - 2-3-2013 16:04:11 | Computer Name = debijpc | Source = Application Error | ID = 1000
Description = Toepassing met fout OfficeLiveSignIn.exe, versie 2.0.2313.0, tijdstempel
 0x491c0a79, module met fout OfficeLiveSignIn.exe, versie 2.0.2313.0, tijdstempel
 0x491c0a79, uitzonderingscode 0xc0000005, foutmarge 0x00003ce7,  proces-id 0x11ec,
 starttijd van toepassing 0x01ce177f6c412080.
 
Error - 4-3-2013 17:21:53 | Computer Name = debijpc | Source = Application Error | ID = 1000
Description = Toepassing met fout OfficeLiveSignIn.exe, versie 2.0.2313.0, tijdstempel
 0x491c0a79, module met fout OfficeLiveSignIn.exe, versie 2.0.2313.0, tijdstempel
 0x491c0a79, uitzonderingscode 0xc0000005, foutmarge 0x00003ce7,  proces-id 0x9c, 
starttijd van toepassing 0x01ce19159bce20e0.
 
Error - 5-3-2013 13:52:06 | Computer Name = debijpc | Source = Windows Search Service | ID = 3013
Description = 
 
Error - 6-3-2013 11:20:24 | Computer Name = debijpc | Source = Windows Search Service | ID = 3013
Description = 
 
Error - 7-3-2013 13:22:48 | Computer Name = debijpc | Source = Application Error | ID = 1000
Description = Toepassing met fout OfficeLiveSignIn.exe, versie 2.0.2313.0, tijdstempel
 0x491c0a79, module met fout OfficeLiveSignIn.exe, versie 2.0.2313.0, tijdstempel
 0x491c0a79, uitzonderingscode 0xc0000005, foutmarge 0x00003ce7,  proces-id 0xd94,
 starttijd van toepassing 0x01ce1b5710ec4022.
 
Error - 7-3-2013 17:04:45 | Computer Name = debijpc | Source = Application Error | ID = 1000
Description = Toepassing met fout OfficeLiveSignIn.exe, versie 2.0.2313.0, tijdstempel
 0x491c0a79, module met fout OfficeLiveSignIn.exe, versie 2.0.2313.0, tijdstempel
 0x491c0a79, uitzonderingscode 0xc0000005, foutmarge 0x00003ce7,  proces-id 0x94c,
 starttijd van toepassing 0x01ce1b5b137d94c2.
 
Error - 7-3-2013 17:23:51 | Computer Name = debijpc | Source = Application Error | ID = 1000
Description = Toepassing met fout OfficeLiveSignIn.exe, versie 2.0.2313.0, tijdstempel
 0x491c0a79, module met fout OfficeLiveSignIn.exe, versie 2.0.2313.0, tijdstempel
 0x491c0a79, uitzonderingscode 0xc0000005, foutmarge 0x00003ce7,  proces-id 0x560,
 starttijd van toepassing 0x01ce1b777b3e6dc2.
 
Error - 7-3-2013 17:25:52 | Computer Name = debijpc | Source = Application Error | ID = 1000
Description = Toepassing met fout OfficeLiveSignIn.exe, versie 2.0.2313.0, tijdstempel
 0x491c0a79, module met fout OfficeLiveSignIn.exe, versie 2.0.2313.0, tijdstempel
 0x491c0a79, uitzonderingscode 0xc0000005, foutmarge 0x00003ce7,  proces-id 0x1494,
 starttijd van toepassing 0x01ce1b7a1a201862.
 
Error - 8-3-2013 8:29:14 | Computer Name = debijpc | Source = Application Error | ID = 1000
Description = Toepassing met fout OfficeLiveSignIn.exe, versie 2.0.2313.0, tijdstempel
 0x491c0a79, module met fout OfficeLiveSignIn.exe, versie 2.0.2313.0, tijdstempel
 0x491c0a79, uitzonderingscode 0xc0000005, foutmarge 0x00003ce7,  proces-id 0xa54,
 starttijd van toepassing 0x01ce1bf7cf5fcff2.
 
[ System Events ]
Error - 1-3-2013 17:51:56 | Computer Name = debijpc | Source = DCOM | ID = 10010
Description = 
 
Error - 4-3-2013 17:40:38 | Computer Name = debijpc | Source = DCOM | ID = 10010
Description = 
 
Error - 6-3-2013 11:18:59 | Computer Name = debijpc | Source = DCOM | ID = 10010
Description = 
 
Error - 6-3-2013 17:30:39 | Computer Name = debijpc | Source = DCOM | ID = 10010
Description = 
 
Error - 7-3-2013 15:02:47 | Computer Name = debijpc | Source = DCOM | ID = 10005
Description = 
 
Error - 7-3-2013 15:02:49 | Computer Name = debijpc | Source = Service Control Manager | ID = 7009
Description = 
 
Error - 7-3-2013 15:02:49 | Computer Name = debijpc | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 7-3-2013 15:03:17 | Computer Name = debijpc | Source = Service Control Manager | ID = 7009
Description = 
 
Error - 7-3-2013 15:03:17 | Computer Name = debijpc | Source = Service Control Manager | ID = 7000
Description = 
 
Error - 7-3-2013 17:27:14 | Computer Name = debijpc | Source = DCOM | ID = 10010
Description = 
 
 
< End of report >

[Peter]

Ok, prima gedaan nu.


Peter