kan geen filmpjes (meer) afspelen op internet

[Peter]

Prima zo
.
Nu gaan we eerst maar eens slapen. Welterusten.


Peter

gelukkig
truste
 
grt

[Peter]

Hoi,

Start OTL opnieuw.
Kopieer de volgende code en plak deze in het veld Custom Scans/Fixes:

Code: [Selecteer]

:OTL
PRC - [2012-09-10 14:31:46 | 000,209,920 | ---- | M] () -- C:\ProgramData\Premium\Codec\Codec.exe
MOD - [2012-09-10 14:31:46 | 000,209,920 | ---- | M] () -- C:\ProgramData\Premium\Codec\Codec.exe
IE - HKU\S-1-5-21-2406912119-1605005730-2438429615-1000\..\SearchScopes\{98A4A199-5E39-41C3-BD29-6692F0217673}: "URL" = http://www.mysearchresults.com/search?c=3522&t=01&q={searchTerms}
64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\PROGRAM FILES\IB UPDATER\FIREFOX
64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}: C:\PROGRAM FILES\IB UPDATER\FIREFOX
CHR - Extension: Codec-V = C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\caoolmehdgkbmcdnlgfpgahfkeakdecj\3_0\
CHR - Extension: Codec-V = C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\jnijhegihkfbamonciemnijadacedgdo\3_0\
O4 - HKLM..\Run: []  File not found
O4 - HKU\S-1-5-21-2406912119-1605005730-2438429615-1000..\Run: []  File not found
[2013-06-18 18:51:00 | 000,000,940 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013-06-18 07:59:37 | 000,000,372 | -H-- | M] () -- C:\Windows\tasks\CodecUpdaterTask{B11775D1-8E12-4355-9518-59D77C34866B}.job
[2013-06-12 15:42:00 | 000,000,292 | ---- | M] () -- C:\Windows\tasks\RegClean Pro_UPDATES.job
[2013-05-26 15:40:27 | 004,702,376 | ---- | M] (Systweak Inc                                                ) -- C:\Users\Gebruiker\Desktop\rcpsetup_softonic_sd_new.exe

:Reg
[HKEY_USERS\S-1-5-21-2406912119-1605005730-2438429615-1000\SOFTWARE\Classes\.html]
@="htmlfile"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{DFA7B3AB-A1B6-40E5-8F06-92E13D65B218}"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Savings Addon"=-
"SP_a8235b05"=-
"SP_e14dcdfa"=-
[HKEY_USERS\S-1-5-21-2406912119-1605005730-2438429615-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Torch"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5AFFD887-D6C1-4E6D-AC86-9EE3811CFA71}]

:Files
ipconfig /flushdns /c

:Commands
[emptytemp]
[emptyflash]
[reboot]

Klik op Run Fix.
Wacht tot OTL klaar is met fixen en herstart de computer als daarom gevraagd wordt.
Bewaar de log die verschijnt en plak de inhoud als tekst in een nieuw bericht.

Hoi,

volgens mij is dit het

All processes killed
========== OTL ==========
Process Codec.exe killed successfully!
Registry key HKEY_USERS\S-1-5-21-2406912119-1605005730-2438429615-1000\Software\Microsoft\Internet Explorer\SearchScopes\{98A4A199-5E39-41C3-BD29-6692F0217673}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{98A4A199-5E39-41C3-BD29-6692F0217673}\ not found.
C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\caoolmehdgkbmcdnlgfpgahfkeakdecj\3_0 folder moved successfully.
C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\jnijhegihkfbamonciemnijadacedgdo\3_0 folder moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
Registry value HKEY_USERS\S-1-5-21-2406912119-1605005730-2438429615-1000\Software\Microsoft\Windows\CurrentVersion\Run\\ deleted successfully.
C:\Windows\Tasks\Adobe Flash Player Updater.job moved successfully.
C:\Windows\Tasks\CodecUpdaterTask{B11775D1-8E12-4355-9518-59D77C34866B}.job moved successfully.
C:\Windows\Tasks\RegClean Pro_UPDATES.job moved successfully.
C:\Users\Gebruiker\Desktop\rcpsetup_softonic_sd_new.exe moved successfully.
========== REGISTRY ==========
HKEY_USERS\S-1-5-21-2406912119-1605005730-2438429615-1000\SOFTWARE\Classes\.html\\@|"htmlfile" /E : value set successfully!
Registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{DFA7B3AB-A1B6-40E5-8F06-92E13D65B218} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DFA7B3AB-A1B6-40E5-8F06-92E13D65B218}\ not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\\Savings Addon not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\\SP_a8235b05 not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\\SP_e14dcdfa not found.
Registry value HKEY_USERS\S-1-5-21-2406912119-1605005730-2438429615-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\\Torch not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5AFFD887-D6C1-4E6D-AC86-9EE3811CFA71}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5AFFD887-D6C1-4E6D-AC86-9EE3811CFA71}\ not found.
========== FILES ==========
< ipconfig /flushdns /c >
Windows IP-configuratie
De DNS-omzettingscache is leeggemaakt.
C:\Users\Gebruiker\Downloads\cmd.bat deleted successfully.
C:\Users\Gebruiker\Downloads\cmd.txt deleted successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Gebruiker
->Temp folder emptied: 1647449070 bytes
->Temporary Internet Files folder emptied: 405497828 bytes
->Java cache emptied: 0 bytes
->Google Chrome cache emptied: 331028602 bytes
->Flash cache emptied: 1458 bytes
 
User: Kiosk
->Temp folder emptied: 96833367 bytes
->Temporary Internet Files folder emptied: 447252 bytes
->Flash cache emptied: 291 bytes
 
User: Public
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 447884415 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 43221786 bytes
RecycleBin emptied: 490996058 bytes
 
Total Files Cleaned = 3.303,00 mb
 
 
[EMPTYFLASH]
 
User: All Users
 
User: Default
 
User: Default User
 
User: Gebruiker
->Flash cache emptied: 0 bytes
 
User: Kiosk
->Flash cache emptied: 0 bytes
 
User: Public
 
Total Flash Files Cleaned = 0,00 mb
 
 
OTL by OldTimer - Version 3.2.69.0 log created on 06192013_222646
Files\Folders moved on Reboot...
C:\Users\Gebruiker\AppData\Local\Temp\Low\JavaDeployReg.log moved successfully.
C:\Users\Gebruiker\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\Z0G593SM\likes[1].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\Z0G593SM\serie-overzicht[1].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\Z0G593SM\sh119[2].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\Y19URKAW\LocalStorage[1].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\O6FSW4FZ\default[1].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\O6FSW4FZ\spijsverteringscheck[1].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\O6FSW4FZ\topic,3695.new[1].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\O6FSW4FZ\xmlProxy[2].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NVPPAA82\AjaxHistoryFrame[1].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\NVPPAA82\google_com[1].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\MMUTPCWX\ai[1].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\MMUTPCWX\xmlProxy[6].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LKCVMKQO\episodes[1].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LKCVMKQO\noticons-regular-webfont[1].eot moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\LKCVMKQO\url[1].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\GMP1OLID\ai[1].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\GMP1OLID\ai[2].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\GHAH34QJ\3YEwT2a1878zysq92S8_9w[1].eot moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\GHAH34QJ\blank[1].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\GHAH34QJ\GFXHasherAjaxIFrame_e8u3OtQonFhEjc0Yi_3RCA2[3].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\GHAH34QJ\GFXHasherVerification[2].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\GHAH34QJ\net5[1].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\GHAH34QJ\RHp5spKuj-AQOgQKPITXrQ[1].eot moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\GHAH34QJ\tyj4dcX-j2M0ERUlmIDlrvesZW2xOQ-xsNqO47m55DA[1].eot moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G5579LVJ\ai[1].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G5579LVJ\fastbutton[1].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\G5579LVJ\like[2].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\EWO6FXH5\ai[1].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\EWO6FXH5\ai[2].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\EWO6FXH5\ai[3].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\CV9W0SL9\proxy[1].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\CV9W0SL9\search[1].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\8KIFKKEP\ai[1].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\8KIFKKEP\flextag[1].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\8KIFKKEP\resourcespreload[1].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\8KIFKKEP\search[3].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\8DYC5A29\uitgelogd[1].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\8CBRUN0T\master[1].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\6TFTFYI0\completed[1].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\6TFTFYI0\Messenger[1].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\6TFTFYI0\RteFrameResources[1].htm moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\AntiPhishing\7A7E08C8-3FF5-45F2-873D-A84D669DC82F.dat moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\MSIMGSIZ.DAT moved successfully.
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.
File move failed. C:\Windows\temp\GacelaLSPService.log scheduled to be moved on reboot.
PendingFileRenameOperations files...
Registry entries deleted on Reboot...

[Peter]

Ok, prima.
Doe nu het volgende:

Stap 1:
Download de nieuwste versie van Adobe Flash Player HIER
Let op: Haal het vinkje weg zodat de extra software niet mee-geïnstalleerd wordt.
Klik daarna op Nu downloaden.
Installeer het vervolgens.

Stap 2:
Download ESET Onlinescanner

Klik op de knop "Run ESET Online Scanner".
Er kan een popup verschijnen als je niet Internet Explorer gebruikt. Klik dan in de popup op de link "http://download.eset.com/special/eos/esetsmartinstaller_enu.exe" om het programma eerst te downloaden. Voer het daarna uit.
Vink aan YES, I accept the Terms of Use.
Klik op Start
Installeer het ActiveX control.
Zet een vinkje bij:
- Remove found threats
- Scan archives
Klik op "Advanced Settings" en vink aan:
- Scan for potentially unwanted applications
- Scan for potentially unsafe applications
- Enable Anti-Stealth technology

Tip: Schakel nu eerst je eigen virusscanner uit, het scannen met ESET gaat dan sneller.

Klik op Start
De computer wordt nu gescand. Dit kan even duren...
Na het scannen kan je het venster sluiten.
 Tip: Schakel nu eerst je eigen virusscanner weer in.
Ga met de verkenner naar "C:\Program Files\ESET\ESET Online Scanner" of "C:\Program Files (x86)\ESET\ESET Online Scanner", afhankelijk van de Windows versie.
Open met Kladblok het logbestand log.txt.
Kopieer en plak de inhoud van het logbestand in een nieuw bericht.

Hoi,

heeft even geduurd, maar kreeg dit, weet niet of dit 't is

ESETSmartInstaller@High as CAB hook log:
OnlineScanner64.ocx - registred OK
OnlineScanner.ocx - registred OK
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=b1329622f3c0e24d893b0358bb44bd7b
# engine=14117
# end=finished
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2013-06-20 05:29:30
# local_time=2013-06-20 07:29:30 (+0100, West-Europa (zomertijd))
# country="Netherlands"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=3591 16777213 100 91 74599 134345955 0 0
# compatibility_mode=5893 16776574 100 94 35731467 123379220 0 0
# scanned=251985
# found=5
# cleaned=1
# scan_time=17950
sh=6B2BA4FB670452206B0D47365F2F5953A32AA77F ft=1 fh=1e12043e7c643432 vn="Win32/GenUpdater application" ac=I fn="C:\Documents and Settings\All Users\Premium\Codec\runtime.dll"
sh=6B2BA4FB670452206B0D47365F2F5953A32AA77F ft=1 fh=1e12043e7c643432 vn="Win32/GenUpdater application" ac=I fn="C:\ProgramData\Premium\Codec\runtime.dll"
sh=6B2BA4FB670452206B0D47365F2F5953A32AA77F ft=1 fh=1e12043e7c643432 vn="Win32/GenUpdater application" ac=I fn="C:\Users\All Users\Application Data\Premium\Codec\runtime.dll"
sh=6B2BA4FB670452206B0D47365F2F5953A32AA77F ft=1 fh=1e12043e7c643432 vn="Win32/GenUpdater application" ac=I fn="C:\Users\All Users\Premium\Codec\runtime.dll"
sh=6B2BA4FB670452206B0D47365F2F5953A32AA77F ft=1 fh=1e12043e7c643432 vn="Win32/GenUpdater application (cleaned by deleting - quarantined)" ac=C fn="C:\Documents and Settings\All Users\Application Data\Premium\Codec\runtime.dll"

[Peter]

Hoi,

heeft even geduurd, maar kreeg dit, weet niet of dit 't is

Prima gedaan.

We gaan opnieuw een poging doen met Zoek.exe.
Download Zoek.exe naar het bureaublad.

• Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe
  (hier of hier) kan je lezen hoe je dat doet.
• Windows XP gebruikers: Dubbelklik op Zoek.exe om de tool te starten.
• Windows Vista, 7 en 8 gebruikers: Rechtsklik op Zoek.exe en klik op Als administrator uitvoeren.
• Kopieer nu onderstaande code en plak die in het grote invulvenster:
• Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkwaardig probleem.

Code: [Selecteer]

standardsearch;
autoclean;


• Klik nu op de knop "Run Script".
• Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
• Mocht na de herstart geen logje verschijnen, start zoek.exe dan opnieuw, de log verschijnt dan alsnog.
• Kopieer en plak de inhoud van het geopende logje in je volgend bericht.

hoi,

volgens mij is dit het zo


Zoek.exe Version 4.0.0.2 Updated 18-June-2013
Tool run by Gebruiker on do 20-06-2013 at 22:13:57,68.
Microsoft Windows 7 Home Premium  6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-2406912119-1605005730-2438429615-1000\Software\Microsoft\Internet Explorer\SearchScopes\{D78F0A18-8451-442D-A1F9-47418638975D} deleted successfully
==== Deleting CLSID Registry Values ======================

==== Running Processes ======================
C:\Program Files (x86)\HP SimplePass 2012\TrueSuiteService.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
C:\ProgramData\Clickfree\HDDV2USB3\UACProxy.exe
C:\Windows\SysWOW64\ezSharedSvcHost.exe
C:\Program Files (x86)\GfK Internet Monitor\GfK-Reporting.exe
C:\Program Files (x86)\GfK Internet Monitor\GfK-Updater.exe
C:\Program Files (x86)\GfKLSPService\GfKLSPService.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
C:\Program Files (x86)\HP SimplePass 2012\TouchControl.exe
C:\ProgramData\Premium\Codec\Codec.exe
C:\Program Files (x86)\HP SimplePass 2012\BioMonitor.exe
C:\Program Files (x86)\CyberLink\YouCam\YCMMirage.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\ProgramData\Clickfree\cfagent.exe
C:\Users\Gebruiker\AppData\Local\Google\Update\1.3.21.145\GoogleCrashHandler.exe
C:\ProgramData\Clickfree\HDDV2USB3\reminder\SacReminder.exe
C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\GfKLSPService\GfK-WatchDog.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
C:\Program Files (x86)\GfK Internet Monitor\GfK-Process-Connector.exe
C:\Users\Gebruiker\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Gebruiker\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Gebruiker\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Gebruiker\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Gebruiker\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Gebruiker\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Gebruiker\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Gebruiker\Desktop\zoek.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\SysWOW64\cmd.exe
C:\Windows\sysWOW64\wbem\wmiprvse.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
==== FireFox Fix ======================
ProfilePath: C:\Users\Gebruiker\AppData\Roaming\Mozilla\Firefox\Profiles\[ofr2][opt]rs0
user.js not found
---- Lines 5060f9e011873@5060f9e0118ac.com removed from prefs.js ----

---- Lines 5060f9e011873@5060f9e0118ac.com modified from prefs.js ----

---- FireFox user.js and prefs.js backups ----
prefs_20-06-2013_2218_.backup
==== Deleting Files \ Folders ======================
"C:\Users\Gebruiker\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\iLivid.lnk" deleted
"C:\Windows\SysNative\roboot64.exe" deleted
"C:\windows\SysNative\dmwu.exe" deleted
"C:\Windows\SysNative\sasnative64.exe" deleted
"C:\ProgramData\Premium\Codec\Codec.exe" deleted
"C:\ProgramData\Codec-V" deleted
"C:\Program Files (x86)\SoftQuick" deleted
"C:\Users\Gebruiker\AppData\Roaming\Systweak" deleted
"C:\ProgramData\Systweak" deleted
"C:\ProgramData\Codec-V" deleted
"C:\ProgramData\WoW Worldwide Software LTD" deleted
"C:\ProgramData\Premium" not deleted
"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Codec-V" deleted
"C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Codec-V" deleted
"C:\Users\Gebruiker\AppData\Local\Updater21426" deleted
"C:\Users\Gebruiker\AppData\LocalLow\Codec-V" deleted
"C:\Users\Gebruiker\AppData\LocalLow\DataMngr" deleted
"C:\Windows\Syswow64\jmdp" deleted
"C:\Windows\Syswow64\ARFC" deleted
"C:\ProgramData\Premium\Codec" not deleted
==== System Specs ======================
Windows: Windows 7 Home Premium Edition (64-bit) Service Pack 1 (Build 7601)
Memory (RAM): 6092 MB
CPU Info: Intel(R) Core(TM) i5-2450M CPU @ 2.50GHz
CPU Speed: 2568,4 MHz
Sound Card: Luidsprekers en hoofdtelefoons  |
Communicatie-hoofdtelefoons (ID |
Display Adapters: Intel(R) HD Graphics Family | Intel(R) HD Graphics Family | RDPDD Chained DD | RDP Encoder Mirror Driver | RDP Reflector Display Driver
Monitors: 1x; Algemeen PnP-beeldscherm |
Screen Resolution: 1600 X 900 - 32 bit
Network: Network Present
Network Adapters: Microsoft Virtual WiFi Miniport Adapter #2 | Microsoft Virtual WiFi Miniport Adapter | Intel(R) Centrino(R) Wireless-N 1030 | Realtek PCIe GBE Family Controller | Bluetooth-apparaat (Personal Area Network)
CD / DVD Drives: 1x (F: | ) F: hp      DVD-RAM UJ8B1
Ports: COM5 LPT Port NOT Present.
Mouse: 5 Button Wheel Mouse Present
Hard Disks: C:  439,4GB | D:  22,2GB | E:  4,0GB
Hard Disks - Free: C:  362,8GB | D:  2,4GB | E:  1,1GB
Manufacturer *: Hewlett-Packard
BIOS Info: AT/AT COMPATIBLE | 12/05/11 | HPQOEM - 1
Time Zone: West-Europa (standaardtijd)
Motherboard *: Hewlett-Packard 1800
Internet Explorer Version: 10.0.9200.16618
Sun Java version: 1.7.0_21
Country: Nederland
Language: NLD

==== Files Recently Created / Modified ======================
====== C:\Windows ====
====== C:\Users\GEBRUI~1\AppData\Local\Temp ====
2013-06-19 20:48:58 BCB0728F4B117855765CE8FE883B5E9B 1536 ----a-w- C:\Users\GEBRUI~1\AppData\Local\Temp\NOSEventMessages.dll
====== C:\Windows\SysWOW64 =====
2013-06-16 23:30:06 8255AD29A44B2E14B2DD99319F92A0AB 95648 ----a-w- C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2013-06-16 19:34:51 F4EEFAA7FE643E45A15C678DA0EFB0AB 71048 ----a-w- C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-06-16 19:34:51 9229CC932F2F1C5BC384006C969B00A5 692104 ----a-w- C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-06-16 00:28:21 F67B1B348CBBCB60DAEC276712582E8C 2706432 ----a-w- C:\Windows\SysWOW64\mshtml.tlb
2013-06-16 00:28:20 B3DC4D1658093C1E486CA9F22180BECF 1141248 ----a-w- C:\Windows\SysWOW64\urlmon.dll
2013-06-16 00:28:18 F383B1AD5D7FDC1ACB0D900B50572F8D 2046976 ----a-w- C:\Windows\SysWOW64\iertutil.dll
2013-06-16 00:28:18 5E2D9C88284AA3BECF15BEA0920A1903 391168 ----a-w- C:\Windows\SysWOW64\ieui.dll
2013-06-16 00:28:16 FCA0837B2739C044EEC00AF0DDD73FFC 13760512 ----a-w- C:\Windows\SysWOW64\ieframe.dll
2013-06-16 00:28:12 05920BD009621D06722A1CD339DA6481 14327808 ----a-w- C:\Windows\SysWOW64\mshtml.dll
2013-06-13 01:03:23 DD09C65E52F3D5574F9774EE0D4DAA57 33280 ----a-w- C:\Windows\SysWOW64\iernonce.dll
2013-06-13 01:03:23 CE3EC9D85ED88ED4AD948B90BB9ED31D 71680 ----a-w- C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-06-13 01:03:23 A10E7B582DEA86572510CB73CCCECA34 61440 ----a-w- C:\Windows\SysWOW64\iesetup.dll
2013-06-13 01:03:23 9593EA1AE5F39C1174B532213D47664B 109056 ----a-w- C:\Windows\SysWOW64\iesysprep.dll
2013-06-13 01:03:22 0FEED965B909BA2D210CE78C21626A69 493056 ----a-w- C:\Windows\SysWOW64\msfeeds.dll
2013-06-13 01:03:21 091C7153A1292F19BE34FAC07FFF12EC 690688 ----a-w- C:\Windows\SysWOW64\jscript.dll
2013-06-13 01:03:20 97FA62873FF759574B20DF39FF22CC27 2877440 ----a-w- C:\Windows\SysWOW64\jscript9.dll
2013-06-13 01:03:17 4395AC0BC02009AFAAB01368BA38AF30 39424 ----a-w- C:\Windows\SysWOW64\jsproxy.dll
2013-06-13 01:03:17 2473CA6595A2659D7039A4A89FECA269 1767936 ----a-w- C:\Windows\SysWOW64\wininet.dll
2013-06-12 07:56:03 FC415B303B1ECF80B5F130A1F7203D02 492544 ----a-w- C:\Windows\SysWOW64\win32spl.dll
2013-06-12 07:56:00 45FBAFFA68CBC29AC2563985CEE72B9C 24576 ----a-w- C:\Windows\SysWOW64\cryptdlg.dll
2013-06-12 07:55:34 5B2E4E90C04FB9AE9F2C5E99FF59B283 1230336 ----a-w- C:\Windows\SysWOW64\WindowsCodecs.dll
2013-06-12 07:55:30 CC917AC4D3F8756FF13174980B474791 43008 ----a-w- C:\Windows\SysWOW64\certenc.dll
2013-06-12 07:55:30 92245C959E5BC378809D2CC5E9F6E9C7 1160192 ----a-w- C:\Windows\SysWOW64\crypt32.dll
2013-06-12 07:55:30 8A8B277067C22F4BF6AA9A31692FC4D3 103936 ----a-w- C:\Windows\SysWOW64\cryptnet.dll
2013-06-12 07:55:30 3897DFF247D9ED0006190349DE264E14 140288 ----a-w- C:\Windows\SysWOW64\cryptsvc.dll
2013-06-12 07:55:30 0D52559AEF4AA5EAC82F530617032283 903168 ----a-w- C:\Windows\SysWOW64\certutil.exe
2013-06-12 07:55:22 6DE66FE7C526637E74CD066461C7C871 1505280 ----a-w- C:\Windows\SysWOW64\d3d11.dll
====== C:\Windows\SysWOW64\drivers =====
====== C:\Windows\Sysnative =====
2013-06-16 00:28:21 14DAE73A3B8599329329ADB2604E62A4 2706432 ----a-w- C:\Windows\Sysnative\mshtml.tlb
2013-06-16 00:28:19 C9152A497D0CA33CE9D729F1179DDB01 1365504 ----a-w- C:\Windows\Sysnative\urlmon.dll
2013-06-16 00:28:18 1BDF694C5BA91A1576DA907DA3077EF8 2648064 ----a-w- C:\Windows\Sysnative\iertutil.dll
2013-06-16 00:28:17 9AD5D9CE1D07B76176615723D1E6217D 526336 ----a-w- C:\Windows\Sysnative\ieui.dll
2013-06-16 00:28:16 AB2F2F56064E8AA8634C790956860A3D 15404544 ----a-w- C:\Windows\Sysnative\ieframe.dll
2013-06-16 00:28:14 5C41AF3F4B83340D2783CE8FDE30566A 19233792 ----a-w- C:\Windows\Sysnative\mshtml.dll
2013-06-13 01:03:23 D575B8A1E28747D8562A7EB0D95AAD74 51712 ----a-w- C:\Windows\Sysnative\ie4uinit.exe
2013-06-13 01:03:23 8C42F591EA3D14004C0684ADD177941B 39936 ----a-w- C:\Windows\Sysnative\iernonce.dll
2013-06-13 01:03:23 6D1CD9151AC8E10B6B7DBEAAD89A2E56 89600 ----a-w- C:\Windows\Sysnative\RegisterIEPKEYs.exe
2013-06-13 01:03:23 5C9D6C25054683CEEC28935C1DDB03DF 136704 ----a-w- C:\Windows\Sysnative\iesysprep.dll
2013-06-13 01:03:23 146A64604D96E82B03CD57B214E66632 67072 ----a-w- C:\Windows\Sysnative\iesetup.dll
2013-06-13 01:03:22 C928E6CC4DF7ED4620BAB3CE96262632 855552 ----a-w- C:\Windows\Sysnative\jscript.dll
2013-06-13 01:03:22 4A420CB5E499E484B1E5E1CE010E6896 603136 ----a-w- C:\Windows\Sysnative\msfeeds.dll
2013-06-13 01:03:21 396D851E3B6ECB9990718C25567ABBB9 3958784 ----a-w- C:\Windows\Sysnative\jscript9.dll
2013-06-13 01:03:17 5AD28C210D17029694554420022E1074 53248 ----a-w- C:\Windows\Sysnative\jsproxy.dll
2013-06-13 01:03:16 12716D987D475B051F35895659159705 2241024 ----a-w- C:\Windows\Sysnative\wininet.dll
2013-06-12 07:56:03 67CF11E00D026A5C0C88EA5F84D501E5 751104 ----a-w- C:\Windows\Sysnative\win32spl.dll
2013-06-12 07:56:00 C06FAAF13E37CE482F612AFF2D2331F3 30720 ----a-w- C:\Windows\Sysnative\cryptdlg.dll
2013-06-12 07:55:34 3D7BB6DD7A87B3E36E44CA94444247A8 1424384 ----a-w- C:\Windows\Sysnative\WindowsCodecs.dll
2013-06-12 07:55:30 D8129C49798CBBFB2E4351D4B7B8EF9C 184320 ----a-w- C:\Windows\Sysnative\cryptsvc.dll
2013-06-12 07:55:30 A96D5ECA5742603E0E345C4F6B801F5E 1464320 ----a-w- C:\Windows\Sysnative\crypt32.dll
2013-06-12 07:55:30 4586B77B18FA9A8518AF76CA8FD247D9 1192448 ----a-w- C:\Windows\Sysnative\certutil.exe
2013-06-12 07:55:30 2C4C22EA1735F21F355EB1A39832F7DF 139776 ----a-w- C:\Windows\Sysnative\cryptnet.dll
2013-06-12 07:55:30 189B0BAE1B0EDD51CEF1CD3F4CDEE02E 52224 ----a-w- C:\Windows\Sysnative\certenc.dll
2013-06-12 07:55:22 4C92EB7535CAA1681A77D928FBF9771F 1887232 ----a-w- C:\Windows\Sysnative\d3d11.dll
====== C:\Windows\Sysnative\drivers =====
2013-06-12 07:56:30 9849EA3843A2ADBDD1497E97A85D8CAE 1910632 ----a-w- C:\Windows\Sysnative\drivers\tcpip.sys
2013-05-27 15:40:11 9C3AC71A9934B884FAC567A8807E9C4D 31800 ----a-w- C:\Windows\Sysnative\drivers\revoflt.sys
====== C:\Windows\Tasks ======
2013-06-19 21:49:41 B8F3E0E9A9ECE4D863E88FFD37A1C560 940 ----a-w- C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-06-17 23:20:50 04CFFB86D460C0338EB79F79AE3EF471 3258 ----a-w- C:\Windows\Sysnative\Tasks\{995A980C-D870-4A6C-B6A3-6D3CBC304EF9}
2013-06-17 22:51:35 E98778C11529A042F974DA78ADFA1F6B 3132 ----a-w- C:\Windows\Sysnative\Tasks\{C0032B1D-E490-4ED0-940A-08CD201D1E95}
2013-06-17 22:49:21 749D99D6F5EA444D7762516F4B3BB842 3132 ----a-w- C:\Windows\Sysnative\Tasks\{623ED32F-8A0E-49EE-8575-B977E45425B1}
2013-06-17 22:46:02 8663209D2BF107809CFF0B33A42016BD 3284 ----a-w- C:\Windows\Sysnative\Tasks\{92022640-CBE2-47D1-A905-4226046D825B}
2013-06-16 19:34:52 4C03209032B8F5A62219D1CC1BA348D4 3878 ----a-w- C:\Windows\Sysnative\Tasks\Adobe Flash Player Updater
2013-06-04 07:40:35 27659A9644C8A6A1A39C7D0149A9EBF8 3300 ----a-w- C:\Windows\Sysnative\Tasks\{2CE9A039-6804-4A18-AA66-5A319B8D8DDD}
2013-05-26 13:43:08 1F95B5FC2784333956F670531C698428 3120 ----a-w- C:\Windows\Sysnative\Tasks\Advanced System Protector_startup
2013-05-26 13:42:37 E3021B35343F48C41E55192E714D6DAD 3050 ----a-w- C:\Windows\Sysnative\Tasks\RegClean Pro_UPDATES
2013-05-26 13:42:32 D8113471914AF22112C7EF7C7837A406 3108 ----a-w- C:\Windows\Sysnative\Tasks\RegClean Pro
====== C:\Windows\Temp ======
======= C:\Program Files =====
2013-06-02 11:40:40 -------- d-----w- C:\Program Files\MGTEK
2013-06-02 11:40:40 -------- d-----w- C:\Program Files\Common Files\MGTEK
2013-05-27 15:40:10 -------- d-----w- C:\Program Files\VS Revo Group
======= C:\Program Files (x86) =====
2013-06-19 21:54:25 -------- d-----w- C:\Program Files (x86)\ESET
2013-06-04 07:41:24 -------- d-----w- C:\Program Files (x86)\Windows Phone
2013-06-02 11:40:40 -------- d-----w- C:\Program Files (x86)\MGTEK
2013-06-02 11:40:40 -------- d-----w- C:\Program Files (x86)\Common Files\MGTEK
======= C: =====
2013-06-17 21:01:40 B9F28F6A7184CD465848994001BFC200 15915 ----a-w- C:\AdwCleaner[S1].txt
====== C:\Users\Gebruiker\AppData\Roaming ======
2013-06-16 23:27:51 -------- d-----w- C:\users\Gebruiker\AppData\Locallow\Sun
2013-05-27 15:40:14 -------- d-----w- C:\users\Gebruiker\AppData\Local\VS Revo Group
2013-05-26 13:42:06 -------- d-----w- C:\users\Gebruiker\AppData\Local\MGTEK
====== C:\Users\Gebruiker ======
2013-06-20 12:27:55 E8D3E34FFDAF21DF7C09CBBBA5763237 2347384 ----a-w- C:\Users\Gebruiker\Downloads\esetsmartinstaller_enu.exe
2013-06-18 17:28:03 4ADCFEE16EE9978F06157634669D36FB 602112 ----a-w- C:\Users\Gebruiker\Downloads\OTL.com
2013-06-16 23:30:32 -------- d-----w- C:\ProgramData\Sun
2013-06-04 07:41:25 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Phone
2013-06-04 07:36:27 -------- d-----w- C:\ProgramData\Applications
2013-05-27 15:40:11 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2013-05-26 13:42:17 02C1EE40968BAA67C3A785CDA9807125 262 --sha-r- C:\Users\Gebruiker\ntuser.pol
2013-05-26 13:40:16 -------- d-----w- C:\ProgramData\MGTEK
====== C: exe-files ==
2013-06-20 12:27:55 E8D3E34FFDAF21DF7C09CBBBA5763237 2347384 ----a-w- C:\Documents and Settings\Gebruiker\Downloads\esetsmartinstaller_enu.exe
2013-06-19 21:54:25 CE0D0B11986FD2C0247AE88A59B36A6E 579904 ----a-w- C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe
2013-06-19 21:54:25 BDB7D97012F9B3102DB72AA76A24942A 546944 ----a-w- C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerApp.exe
2013-06-19 21:54:25 7C9EEC809FB9CDA26EFC245C001EA980 2347384 ----a-w- C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe
2013-06-19 21:54:25 7ABF8849E76732C357F419B1AF5668F2 546944 ----a-w- C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineCmdLineScannerA.exe
2013-06-19 21:54:25 6D4ED8A5C071F29730A6F0B943FEEA3A 122584 ----a-w- C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerUninstaller.exe
2013-06-19 08:08:00 80633916458CC8041D0F483B7633E9F6 1582944 ----a-w- C:\Documents and Settings\Gebruiker\AppData\Local\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\27.0.1453.116\27.0.1453.116_27.0.1453.110_chrome_updater.exe
=== C: other files ==
2013-06-18 17:28:03 4ADCFEE16EE9978F06157634669D36FB 602112 ----a-w- C:\Users\Gebruiker\Downloads\OTL.com
2013-06-18 17:28:03 4ADCFEE16EE9978F06157634669D36FB 602112 ----a-w- C:\Documents and Settings\Gebruiker\Downloads\OTL.com
2013-06-16 23:20:21 9CDCA70485BD6B9D230365F67C31F132 433752 ----a-w- C:\Windows\System32\drivers\NISx64\1404000.028\symnets.sys
2013-06-16 23:20:21 599872BAD7CFB45C7CE47CDED4B726D8 1139800 ----a-w- C:\Windows\System32\drivers\NISx64\1404000.028\symefa64.sys
2013-06-16 23:20:21 52DC0048D667757A8A2E4C87182890AC 493656 ----a-w- C:\Windows\System32\drivers\NISx64\1404000.028\symds64.sys
2013-06-16 23:20:21 42947647F71E9EF2167B42B372F1DDB7 23448 ----a-r- C:\Windows\System32\drivers\NISx64\1404000.028\symelam.sys
2013-06-16 23:20:21 0E76CEF892C45734F7AED09FDDF35D4D 36952 ----a-w- C:\Windows\System32\drivers\NISx64\1404000.028\srtspx64.sys
2013-06-16 23:20:20 ADF37F1A715D6C56C8E065FD8569A9A4 224416 ----a-w- C:\Windows\System32\drivers\NISx64\1404000.028\ironx64.sys
2013-06-16 23:20:20 56685951208AC81CF923B9B08BEDF3B7 169048 ----a-w- C:\Windows\System32\drivers\NISx64\1404000.028\ccsetx64.sys
2013-06-16 23:20:20 2FD9346F9D76CB4192D37329CFA47A82 796760 ----a-w- C:\Windows\System32\drivers\NISx64\1404000.028\srtsp64.sys

==== Startup Registry Enabled ======================
[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"
[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun"
[HKEY_USERS\S-1-5-21-2406912119-1605005730-2438429615-1000\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"="C:\Users\Gebruiker\AppData\Local\Google\Update\GoogleUpdate.exe /c"
"NokiaSuite.exe"="C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray"
"CollaborationHost"="C:\Windows\system32\p2phost.exe -s"
"ClickfreeMonitor"="c:\programdata\Clickfree\cfagent.exe"
"SacReminderHDDV2"="C:\ProgramData\Clickfree\HDDV2USB3\reminder\SacReminder.exe"
"msnmsgr"="~C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe /background"
[HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"mctadmin"="C:\Windows\System32\mctadmin.exe"
[HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"mctadmin"="C:\Windows\System32\mctadmin.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"StartCCC"="C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe MSRun"
"NUSB3MON"="C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
"HPQuickWebProxy"="C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe"
"HP Quick Launch"="C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe"
"Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"HPOSD"="C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe"
"HP CoolSense"="C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe -byrunkey"
"Easybits Recovery"="C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe"
"HP Software Update"="C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe"
"GfK-WatchDog"="C:\Program Files (x86)\GfKLSPService\GfK-WatchDog.exe /Debug"
"SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Google Update"="C:\Users\Gebruiker\AppData\Local\Google\Update\GoogleUpdate.exe /c"
"NokiaSuite.exe"="C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray"
"CollaborationHost"="C:\Windows\system32\p2phost.exe -s"
"ClickfreeMonitor"="c:\programdata\Clickfree\cfagent.exe"
"SacReminderHDDV2"="C:\ProgramData\Clickfree\HDDV2USB3\reminder\SacReminder.exe"
"msnmsgr"="~C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe /background"
==== Startup Registry Enabled x64 ======================
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="C:\Windows\system32\igfxtray.exe"
"HotKeysCmds"="C:\Windows\system32\hkcmd.exe"
"Persistence"="C:\Windows\system32\igfxpers.exe"
"IntelPAN"="C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe /tf Intel PAN Tray"
"BTMTrayAgent"="rundll32.exe C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll,TrayApp"
"SetDefault"="C:\Program Files\Hewlett-Packard\HP LaunchBox\SetDefault.exe"
"SysTrayApp"="C:\Program Files\IDT\WDM\sttray64.exe"
"SynTPEnh"="%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe "
==== Startup Folders ======================
2012-11-24 12:22:42 1300 ----a-w- C:\users\Gebruiker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Schermopname en Snel starten.lnk
==== Task Scheduler Jobs ======================
C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [19-06-2013 23:49]
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2406912119-1605005730-2438429615-1000Core.job --a------ C:\Users\Gebruiker\AppData\Local\Google\Update\GoogleUpdate.exe [23-09-2012 03:22]
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2406912119-1605005730-2438429615-1000UA.job --a------ C:\Users\Gebruiker\AppData\Local\Google\Update\GoogleUpdate.exe [23-09-2012 03:22]
C:\Windows\tasks\HPCeeScheduleForGebruiker.job --a------ C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [15-07-2011 05:43]
==== Firefox Extensions ======================
==== Firefox Plugins ======================

==== Chrome Look ======================
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
caoolmehdgkbmcdnlgfpgahfkeakdecj - C:\ProgramData\Codec-V\caoolmehdgkbmcdnlgfpgahfkeakdecj.crx[]
debkinhcgejcbfgjiaalomcmkedjmiaa - C:\Program Files (x86)\HP SimplePass 2012\tschrome.crx[25-08-2011 05:41]
haoepcnhncgggebmfplofoibmpdeipme - C:\ProgramData\continuetosave\haoepcnhncgggebmfplofoibmpdeipme.crx[]
igkejcihojcegdmifcnlkhmnelneogef - C:\Program Files (x86)\GfK Internet Monitor\Chrome Extension\extension.crx[10-10-2012 14:59]
jnijhegihkfbamonciemnijadacedgdo - C:\ProgramData\Codec-V\jnijhegihkfbamonciemnijadacedgdo.crx[]
kiplfnciaokpcennlkldkdaeaaomamof - C:\Users\Gebruiker\AppData\Local\Torch\Plugins\TorchPlugin.crx[18-04-2013 07:16]
mkfokfffehpeedafpekjeddnmnjhmcmk - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\Exts\Chrome.crx[31-05-2013 03:49]
nbmafkdmkkckhggblphicnnhlgljnoje - C:\Program Files (x86)\TornTV.com\torn2_10.crx[]
Website Logon - Gebruiker - Default\Extensions\debkinhcgejcbfgjiaalomcmkedjmiaa
GfK Internet Monitor - Gebruiker - Default\Extensions\igkejcihojcegdmifcnlkhmnelneogef
Norton Identity Protection - Gebruiker - Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk
==== Chrome Fix ======================
C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_mystart.incredibar.com_0.localstorage deleted successfully
C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_mystart.incredibar.com_0.localstorage-journal deleted successfully
C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.incredibar-search.com_0.localstorage deleted successfully
C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.incredibar-search.com_0.localstorage-journal deleted successfully
C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_continuetosave.info_0.localstorage deleted successfully
C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_continuetosave.info_0.localstorage-journal deleted successfully
C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_haoepcnhncgggebmfplofoibmpdeipme_0.localstorage deleted successfully
C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_haoepcnhncgggebmfplofoibmpdeipme_0.localstorage-journal deleted successfully

==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com/"
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com/"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing  Url="http://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google  Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-2406912119-1605005730-2438429615-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE} deleted successfully
HKEY_USERS\S-1-5-21-2406912119-1605005730-2438429615-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE} deleted successfully
HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{E54729E8-BB3D-4270-9D49-7389EA579090} deleted successfully
HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE} deleted successfully
==== Deleting CLSID Registry Values ======================
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{E54729E8-BB3D-4270-9D49-7389EA579090} deleted successfully
==== Deleting Registry Keys ======================
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\jnijhegihkfbamonciemnijadacedgdo deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\caoolmehdgkbmcdnlgfpgahfkeakdecj deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\haoepcnhncgggebmfplofoibmpdeipme deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\nbmafkdmkkckhggblphicnnhlgljnoje deleted successfully
==== HijackThis Entries ======================
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Gacela2 - {4BEEA052-726D-4A6E-B65D-A6BD07C263F3} - C:\Program Files (x86)\GfK Internet Monitor\Gacela2.dll
O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll
O2 - BHO: Adblock IE - {667BEE43-20BD-4CE3-94AC-E63E04D4B191} - C:\Program Files (x86)\MGTEK\Adblock IE\adblockie.dll
O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\IPS\IPSBHO.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: TSBHO Class - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2012\IEBHO.dll
O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\coIEPlg.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [HPQuickWebProxy] "C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe"
O4 - HKLM\..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe
O4 - HKLM\..\Run: [HP CoolSense] C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe -byrunkey
O4 - HKLM\..\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [GfK-WatchDog] C:\Program Files (x86)\GfKLSPService\GfK-WatchDog.exe /Debug
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\Gebruiker\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [NokiaSuite.exe] C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray
O4 - HKCU\..\Run: [CollaborationHost] C:\Windows\system32\p2phost.exe -s
O4 - HKCU\..\Run: [ClickfreeMonitor] c:\programdata\Clickfree\cfagent.exe
O4 - HKCU\..\Run: [SacReminderHDDV2] C:\ProgramData\Clickfree\HDDV2USB3\reminder\SacReminder.exe
O4 - HKCU\..\Run: [msnmsgr] ~"C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: OneNote 2010 Schermopname en Snel starten.lnk = C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-103 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (file missing)
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll,-102 - {25510184-5A38-4A99-B273-DCA8EEF6CD08} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\NCLauncherFromIE.exe (file missing)
O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: (no name) - {4BEEA052-726D-4A6E-B65D-A6BD07C263F3} - C:\Program Files (x86)\GfK Internet Monitor\Gacela2.dll
O9 - Extra 'Tools' menuitem: Informatie over GfK Internet Monitor - {4BEEA052-726D-4A6E-B65D-A6BD07C263F3} - C:\Program Files (x86)\GfK Internet Monitor\Gacela2.dll
O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\gfklspservice.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\gfklspservice.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\gfklspservice.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\gfklspservice.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\gfklspservice.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} (OnlineScanner Control) - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{F50D7155-740D-4E72-A594-3A3A8EEC599F}: NameServer = 84.241.226.9 84.241.226.140
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs:     
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Intel® Centrino® Wireless Bluetooth® 3.0 + High Speed Service (AMPPALR3) - Intel Corporation - C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
O23 - Service: Bluetooth Device Monitor - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
O23 - Service: Bluetooth Media Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
O23 - Service: Bluetooth OBEX Service - Intel Corporation - C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
O23 - Service: Intel(R) Centrino(R) Wireless Bluetooth(R) 3.0 + High Speed Security Service (BTHSSecurityMgr) - Intel(R) Corporation - C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
O23 - Service: CFUACProxy_hddv2usb3 - Storage Appliance Corp. - C:\ProgramData\Clickfree\HDDV2USB3\UACProxy.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: Easybits Services for Windows (ezSharedSvc) - EasyBits Software AS - C:\Windows\System32\ezSharedSvcHost.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: TrueSuiteService (FPLService) - HP - C:\Program Files (x86)\HP SimplePass 2012\TrueSuiteService.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: GfK-Reporting-Service - Unknown owner - C:\Program Files (x86)\GfK Internet Monitor\GfK-Reporting.exe
O23 - Service: GfK-Update-Service - Unknown owner - C:\Program Files (x86)\GfK Internet Monitor\GfK-Updater.exe
O23 - Service: GfKLSPService - GfK - C:\Program Files (x86)\GfKLSPService\GfKLSPService.exe
O23 - Service: HP Support Assistant Service - Unknown owner - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe (file missing)
O23 - Service: HP Client Services (HPClientSvc) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)
O23 - Service: HPWMISVC - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
O23 - Service: Intel(R) Identity Protection Technology Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Wireless PAN DHCP Server (MyWiFiDHCPDNS) - Unknown owner - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\ccSvcHst.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10101 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

==== Empty IE Cache ======================
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\LocalService\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
==== Empty FireFox Cache ======================
No FireFox Cache found
==== Empty Chrome Cache ======================
C:\users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
Java Cache cleared successfully
==== After Reboot ======================
==== Empty Temp Folders ======================
C:\Windows\Temp successfully emptied
C:\Users\GEBRUI~1\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
C:\$RECYCLE.BIN successfully emptied
==== Deleting Files / Folders ======================
"C:\ProgramData\Premium"  not found
==== EOF on do 20-06-2013 at 22:27:30,43 ======================

volgens mij was dat alles (?)

[Peter]

Hoi,

We gaan de goede kant op.

Start Zoek opnieuw:

• Schakel je antivirus- en antispywareprogramma's uit, mogelijk kunnen ze conflicteren met zoek.exe
  (hier of hier) kan je lezen hoe je dat doet.
• Windows XP gebruikers: Dubbelklik op Zoek.exe om de tool te starten.
• Windows Vista, 7 en 8 gebruikers: Rechtsklik op Zoek.exe en klik op Als Administrator uitvoeren.
• Kopieer nu onderstaande code en plak die in het invulvenster:
• Note: Dit script is speciaal bedoeld voor deze PC, gebruik dit dan ook niet op andere PC's met een gelijkwaardig probleem.

Code: [Selecteer]

C:\Windows\Sysnative\Tasks\Advanced System Protector_startup;f
C:\Windows\Sysnative\Tasks\RegClean Pro_UPDATES;f
C:\Windows\Sysnative\Tasks\RegClean Pro;f
C:\Documents and Settings\All Users\Premium\Codec\runtime.dll;f
C:\Users\All Users\Application Data\Premium\Codec\runtime.dll;f
C:\Users\All Users\Premium\Codec\runtime.dll;f
C:\Users\Gebruiker\AppData\Local\Torch;fs
kiplfnciaokpcennlkldkdaeaaomamof;chr
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Savings Addon];r
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SP_a8235b05];r
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SP_e14dcdfa];r
[-HKEY_USERS\S-1-5-21-2406912119-1605005730-2438429615-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Torch];r
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5AFFD887-D6C1-4E6D-AC86-9EE3811CFA71}];r
{5AFFD887-D6C1-4E6D-AC86-9EE3811CFA71};c
silentrunners;
autoclean;


• Klik nu op de knop "Run Script".
• Wacht nu geduldig af tot er een logje opent (dit kan na een herstart zijn als deze benodigd is).
• Mocht na de herstart geen logje verschijnen, start zoek.exe dan opnieuw, de log verschijnt dan alsnog.
• Kopieer en plak de inhoud van het geopende logje in je volgend bericht.

ok

nou dit is 't volgens mij


Zoek.exe Version 4.0.0.2 Updated 18-June-2013
Tool run by Gebruiker on vr 21-06-2013 at  0:17:03,41.
Microsoft Windows 7 Home Premium  6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
==== Older Logs ======================
C:\zoek-results20-06-2013-2227.log 44181 bytes
==== Deleting CLSID Registry Keys ======================
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5AFFD887-D6C1-4E6D-AC86-9EE3811CFA71} deleted successfully
==== Deleting CLSID Registry Values ======================

==== Registry Fix Code ======================
Windows Registry Editor Version 5.00
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Savings Addon]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SP_a8235b05]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SP_e14dcdfa]
[-HKEY_USERS\S-1-5-21-2406912119-1605005730-2438429615-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Torch]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5AFFD887-D6C1-4E6D-AC86-9EE3811CFA71}]
==== Deleting Files \ Folders ======================
"C:\Documents and Settings\All Users\Premium\Codec\runtime.dll" not found
"C:\Users\All Users\Application Data\Premium\Codec\runtime.dll" not found
"C:\Users\All Users\Premium\Codec\runtime.dll" not found
"C:\Windows\Sysnative\Tasks\Advanced System Protector_startup" deleted
"C:\Windows\Sysnative\Tasks\RegClean Pro_UPDATES" deleted
"C:\Windows\Sysnative\Tasks\RegClean Pro" deleted
"C:\Users\Gebruiker\AppData\Local\Torch" deleted
==== Firefox Extensions ======================
==== Firefox Plugins ======================

==== Chrome Look ======================
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
debkinhcgejcbfgjiaalomcmkedjmiaa - C:\Program Files (x86)\HP SimplePass 2012\tschrome.crx[25-08-2011 05:41]
igkejcihojcegdmifcnlkhmnelneogef - C:\Program Files (x86)\GfK Internet Monitor\Chrome Extension\extension.crx[10-10-2012 14:59]
kiplfnciaokpcennlkldkdaeaaomamof - C:\Users\Gebruiker\AppData\Local\Torch\Plugins\TorchPlugin.crx[]
mkfokfffehpeedafpekjeddnmnjhmcmk - C:\Program Files (x86)\Norton Internet Security\Engine\20.4.0.40\Exts\Chrome.crx[31-05-2013 03:49]
Website Logon - Gebruiker - Default\Extensions\debkinhcgejcbfgjiaalomcmkedjmiaa
GfK Internet Monitor - Gebruiker - Default\Extensions\igkejcihojcegdmifcnlkhmnelneogef
Norton Identity Protection - Gebruiker - Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com/"
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com/"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing  Url="http://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google  Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"
==== Deleting Registry Keys ======================
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\kiplfnciaokpcennlkldkdaeaaomamof deleted successfully
==== Silent Runners ======================
"Silent Runners.vbs", revision 69.2, http://www.silentrunners.org/
Output limited to non-default values, except where indicated by "{++}"

Startup items buried in registry:
---------------------------------
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ {++}
Google Update = "C:\Users\Gebruiker\AppData\Local\Google\Update\GoogleUpdate.exe" /c [Google Inc.]
NokiaSuite.exe = C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray [Nokia]
CollaborationHost = C:\Windows\system32\p2phost.exe -s [MS]
ClickfreeMonitor = c:\programdata\Clickfree\cfagent.exe [Clickfree]
SacReminderHDDV2 = C:\ProgramData\Clickfree\HDDV2USB3\reminder\SacReminder.exe [SAC]
msnmsgr = ~"C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background [file not found]
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}
IgfxTray = C:\Windows\system32\igfxtray.exe [Intel Corporation]
HotKeysCmds = C:\Windows\system32\hkcmd.exe [Intel Corporation]
Persistence = C:\Windows\system32\igfxpers.exe [Intel Corporation]
SysTrayApp = C:\Program Files\IDT\WDM\sttray64.exe
SynTPEnh = C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
IntelPAN = "C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel PAN Tray [Intel(R) Corporation]
BTMTrayAgent = rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp [MS]
SetDefault = C:\Program Files\Hewlett-Packard\HP LaunchBox\SetDefault.exe [Hewlett-Packard Development Company, L.P.]
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\ {++}
IAStorIcon = C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [null data]
StartCCC = "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [Advanced Micro Devices, Inc.]
NUSB3MON = "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [Renesas Electronics Corporation]
HPQuickWebProxy = "C:\Program Files (x86)\Hewlett-Packard\HP QuickWeb\hpqwutils.exe" [Hewlett-Packard Company]
HP Quick Launch = C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [Hewlett-Packard Development Company, L.P.]
Adobe ARM = "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [Adobe Systems Incorporated]
HPOSD = C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe [Hewlett-Packard Development Company, L.P.]
HP CoolSense = C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe -byrunkey [Hewlett-Packard Development Company, L.P.]
Easybits Recovery = C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe [EasyBits Software AS]
HP Software Update = C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [Hewlett-Packard]
GfK-WatchDog = C:\Program Files (x86)\GfKLSPService\GfK-WatchDog.exe /Debug [null data]
SunJavaUpdateSched = "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [Oracle Corporation]