tune up rtl120.bpl

• 

  knien

  03-01-2013 23:29

  Dank je wel voor de goede hulp.

  Groetjes Frans

  Rapporteren
• 

  fazantje

  04-01-2013 11:02

  Hoi Frans,

  Topic is weer heropend, ik moet zo weg, maar Ben zal straks verder kijken.

  Frans schreef:

  >>>Hallo,

  Van morgen starte ik de labtop weer op en tot mijn verbazing staat tune up er weer op. Wil je me nog een keer helpen?

  groet Frans<<<

  Groetjes Huib;)

  

  Rapporteren
• 

  knien

  04-01-2013 11:13

  Oke dan kijk ik vanmiddag nog een keer

  Rapporteren
• 

  Ben

  04-01-2013 11:31

  Hallo,

  Download DDS van sUBS van één van deze locaties en plaats het op je bureaublad:

  DDS - Bleeping Computer download.

  DDS - Bleeping Computer download.

  DDS - Infospyware.

  

  DDS is een diagnosetool en maakt gebruik van scripts.

  Schakel je beveiligings software uit voordat je DDS uitvoert!

  (hier of hier) kan je lezen hoe je dat doet.

  Dubbelklik op DDS om de tool te starten.

  Er worden nu automatisch twee log bestanden op het bureablad opgeslagen.

  DDS.txt

  Attach.txt (Plaats deze alleen indien hierom wordt gevraagd!)

  Post het DDS.txt in het volgende bericht.

  Gr.Ben

  Rapporteren
• 

  knien

  04-01-2013 12:02

  Hallo Ben

  Het logje

  DDS (Ver_2012-11-20.01) - NTFS_AMD64

  Internet Explorer: 9.0.8112.16457 BrowserJavaVersion: 1.6.0_37

  Run by Frans1 at 11:59:44 on 2013-01-04

  Microsoft Windows 7 Home Premium 6.1.7601.1.1252.31.1043.18.3767.2007

  .

  AV: AVG Internet Security 2011 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}

  SP: AVG Internet Security 2011 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}

  SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

  FW: AVG Firewall *Enabled* {621CC794-9486-F902-D092-0484E8EA828B}

  .

  ============== Running Processes ===============

  .

  C:\Windows\system32\lsm.exe

  C:\Windows\system32\svchost.exe -k DcomLaunch

  C:\Windows\system32\svchost.exe -k RPCSS

  C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

  C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

  C:\Windows\system32\svchost.exe -k netsvcs

  C:\Windows\system32\svchost.exe -k LocalService

  C:\Windows\system32\svchost.exe -k NetworkService

  C:\Windows\SYSTEM32\WISPTIS.EXE

  C:\Windows\System32\spoolsv.exe

  C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

  C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE

  C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

  C:\Program Files (x86)\AVG\AVG10\avgfws.exe

  C:\Program Files (x86)\AVG\AVG10\avgwdsvc.exe

  C:\Program Files (x86)\Launch Manager\dsiwmis.exe

  C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe

  C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

  C:\Program Files (x86)\Acer\Registration\GREGsvc.exe

  C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt

  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

  C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe

  C:\Windows\System32\svchost.exe -k HPZ12

  C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe

  C:\Windows\System32\svchost.exe -k HPZ12

  C:\Program Files (x86)\SMART Technologies\Education Software\ResponseHardwareService.exe

  C:\Windows\system32\svchost.exe -k imgsvc

  C:\Program Files\Acer\Acer Updater\UpdaterService.exe

  C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

  C:\Windows\system32\taskhost.exe

  C:\Windows\system32\Dwm.exe

  C:\Windows\SYSTEM32\WISPTIS.EXE

  C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe

  C:\Windows\Explorer.EXE

  C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe

  C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

  C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe

  C:\Windows\System32\igfxtray.exe

  C:\Windows\System32\hkcmd.exe

  C:\Windows\system32\igfxsrvc.exe

  C:\Windows\System32\igfxpers.exe

  C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE

  C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE

  C:\Windows\system32\igfxext.exe

  C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe

  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

  C:\Users\Frans1\AppData\Roaming\Dropbox\bin\Dropbox.exe

  C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

  C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe

  C:\ProgramData\U3\U3Launcher\LaunchU3.exe

  C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE

  C:\Windows\system32\wbem\unsecapp.exe

  C:\Program Files (x86)\Launch Manager\LManager.exe

  C:\Windows\system32\wbem\wmiprvse.exe

  C:\Program Files (x86)\SMART Technologies\Education Software\SMARTBoardService.exe

  C:\Program Files (x86)\AVG\AVG10\avgtray.exe

  C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe

  C:\Program Files (x86)\Launch Manager\LMworker.exe

  C:\Program Files (x86)\Citrix\ICA Client\concentr.exe

  C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe

  C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe

  C:\Program Files (x86)\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe

  C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

  C:\Program Files\Windows Media Player\wmpnetwk.exe

  C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe

  C:\Program Files (x86)\Mozilla Firefox\firefox.exe

  C:\Program Files (x86)\AVG\AVG10\avgui.exe

  C:\PROGRA~2\AVG\AVG10\Tuneup\TUMICR~1.EXE

  C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe

  C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_3_300_268.exe

  C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_3_300_268.exe

  C:\Program Files (x86)\AVG\AVG10\avgcfgex.exe

  C:\Windows\System32\svchost.exe -k WerSvcGroup

  C:\Windows\system32\wbem\wmiprvse.exe

  C:\Windows\System32\cscript.exe

  .

  ============== Pseudo HJT Report ===============

  .

  uStart Page = hxxp://www.google.nl/

  uDefault_Page_URL = hxxp://acer.msn.com

  mStart Page = hxxp://acer.msn.com

  mDefault_Page_URL = hxxp://acer.msn.com

  mWinlogon: Userinit = userinit.exe,

  BHO: HP Print Enhancer: {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll

  BHO: ThreeShips IE Helper: {17FDB9F8-DCC4-4F6A-AE07-B16018A48469} - C:\Program Files (x86)\Common Files\Threeships Shared\Dll\ThreeShipsIEHelper.dll

  BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

  BHO: AVG Safe Search: {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG10\avgssie.dll

  BHO: SMART Notebook Download Utility: {67BCF957-85FC-4036-8DC4-D4D80E00A77B} - C:\Program Files (x86)\SMART Technologies\Education Software\Win32\NotebookPlugin.dll

  BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL

  BHO: Java™ Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll

  BHO: Windows Live Aanmelden - Help: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

  BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL

  BHO: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

  BHO: HP Smart BHO Class: {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

  TB: SMART Sync: {8E1233B3-485A-4E51-B77E-9E075A68C588} - C:\Program Files (x86)\SMART Technologies\Education Software\SyncIEToolbar.dll

  EB: HP Smart Web Printing: {555D4D79-4BD2-4094-A395-CFC534424A05} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_bho.dll

  EB: HP Smart Web Printing: {555D4D79-4BD2-4094-A395-CFC534424A05} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_bho.dll

  uRun: “C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE”

  uRun: C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

  uRun: “C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe” -autorun

  mRun: C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

  mRun: “C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe” -h -k

  mRun: C:\Program Files (x86)\Launch Manager\LManager.exe

  mRun: “C:\Program Files (x86)\SMART Technologies\Education Software\SMARTBoardService.exe”

  mRun: C:\Program Files (x86)\AVG\AVG10\avgtray.exe

  mRun: “C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe”

  mRun: “C:\Program Files (x86)\Citrix\ICA Client\concentr.exe” /startup

  StartupFolder: C:\Users\Frans1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Dropbox.lnk - C:\Users\Frans1\AppData\Roaming\Dropbox\bin\Dropbox.exe

  StartupFolder: C:\Users\Frans1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\LAUNCH~1.LNK - C:\Users\Frans1\AppData\Roaming\Microsoft\Installer\{D8E363A7-88B7-446D-B2C0-E26CE4DC8E54}\_294823.exe

  StartupFolder: C:\Users\Frans1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\ONENOT~1.LNK - C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE

  StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\HPDIGI~1.LNK - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

  uPolicies-Explorer: NoDriveTypeAutoRun = dword:255

  mPolicies-Explorer: NoActiveDesktop = dword:1

  mPolicies-Explorer: NoActiveDesktopChanges = dword:1

  mPolicies-Explorer: NoDriveTypeAutoRun = dword:255

  mPolicies-System: ConsentPromptBehaviorAdmin = dword:5

  mPolicies-System: ConsentPromptBehaviorUser = dword:3

  mPolicies-System: EnableUIADesktopToggle = dword:0

  IE: &Verzenden naar OneNote - C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105

  IE: E&xporteren naar Microsoft Excel - C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000

  IE: Free YouTube to MP3 Converter - C:\Users\Frans1\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm

  IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

  IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

  IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

  IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

  DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab

  DPF: {CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab

  DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab

  TCP: NameServer = 212.54.40.25 212.54.35.25 192.168.0.1

  TCP: Interfaces\{1D9BA531-F553-47DF-BBD7-A351E2EC56F9} : DHCPNameServer = 212.54.40.25 212.54.35.25 192.168.0.1

  TCP: Interfaces\{1D9BA531-F553-47DF-BBD7-A351E2EC56F9}\A5967676F68363131303 : DHCPNameServer = 212.54.40.25 212.54.35.25

  Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

  Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

  Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

  Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

  Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

  Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

  Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

  Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

  Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

  Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

  Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

  Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

  Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

  Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

  Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

  Filter: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

  Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

  Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG10\avgpp.dll

  SSODL: WebCheck -

  SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL

  x64-mStart Page = hxxp://acer.msn.com

  x64-mDefault_Page_URL = hxxp://acer.msn.com

  x64-BHO: AVG Safe Search: {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG10\avgssiea.dll

  x64-BHO: SMART Notebook Download Utility: {67BCF957-85FC-4036-8DC4-D4D80E00A77B} - C:\Program Files (x86)\SMART Technologies\Education Software\Win64\NotebookPlugin.dll

  x64-BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL

  x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL

  x64-Run: C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s

  x64-Run: C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe

  x64-Run: “C:\Program Files\Microsoft Office\Office14\BCSSync.exe” /DelayServices

  x64-Run: C:\Windows\System32\igfxtray.exe

  x64-Run: C:\Windows\System32\hkcmd.exe

  x64-Run: C:\Windows\System32\igfxpers.exe

  x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll

  x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

  x64-Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -

  x64-Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -

  x64-Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -

  x64-Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -

  x64-Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -

  x64-Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -

  x64-Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -

  x64-Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -

  x64-Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -

  x64-Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -

  x64-Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -

  x64-Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -

  x64-Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -

  x64-Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -

  x64-Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -

  x64-Filter: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -

  x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

  x64-Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG10\avgppa.dll

  x64-Notify: igfxcui - igfxdev.dll

  x64-SSODL: WebCheck -

  x64-SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL

  .

  ================= FIREFOX ===================

  .

  FF - ProfilePath - C:\Users\Frans1\AppData\Roaming\Mozilla\Firefox\Profiles\2vd4rjh1.default\

  FF - prefs.js: browser.search.selectedEngine - Google

  FF - plugin: C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL

  FF - plugin: C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL

  FF - plugin: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll

  FF - plugin: C:\Program Files (x86)\Common Files\ThreeShips Shared\Dll\npTSHelper.dll

  FF - plugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll

  FF - plugin: C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrlui.dll

  FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npicaN.dll

  FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

  FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_268.dll

  FF - plugin: C:\Windows\SysWOW64\npdeployJava1.dll

  FF - plugin: C:\Windows\SysWOW64\npmproxy.dll

  FF - ExtSQL: !HIDDEN! 2011-08-26 20:23; smartwebprinting@hp.com; C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

  .

  ============= SERVICES / DRIVERS ===============

  .

  R0 AVGIDSEH;AVGIDSEH;C:\Windows\System32\drivers\AVGIDSEH.sys

  R0 Avgrkx64;AVG Anti-Rootkit Driver;C:\Windows\System32\drivers\avgrkx64.sys

  R1 Avgfwfd;AVG network filter service;C:\Windows\System32\drivers\avgfwd6a.sys

  R1 Avgldx64;AVG AVI Loader Driver;C:\Windows\System32\drivers\avgldx64.sys

  R1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;C:\Windows\System32\drivers\avgmfx64.sys

  R1 Avgtdia;AVG TDI Driver;C:\Windows\System32\drivers\avgtdia.sys

  R1 ctxusbm;Citrix USB Monitor Driver;C:\Windows\System32\drivers\ctxusbm.sys

  R1 SASDIFSV;SASDIFSV;C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys

  R1 SASKUTIL;SASKUTIL;C:\Program Files\SUPERAntiSpyware\saskutil64.sys

  R2 !SASCORE;SAS Core Service;C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE

  R2 avgfws;AVG Firewall;C:\Program Files (x86)\AVG\AVG10\avgfws.exe

  R2 avgwd;AVG WatchDog;C:\Program Files (x86)\AVG\AVG10\avgwdsvc.exe

  R2 DsiWMIService;Dritek WMI Service;C:\Program Files (x86)\Launch Manager\dsiwmis.exe

  R2 ePowerSvc;Acer ePower Service;C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe

  R2 GREGService;GREGService;C:\Program Files (x86)\Acer\Registration\GREGsvc.exe

  R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

  R2 NTI IScheduleSvc;NTI IScheduleSvc;C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe

  R2 Response Hardware;Response Hardware;C:\Program Files (x86)\SMART Technologies\Education Software\ResponseHardwareService.exe

  R2 TurboB;Turbo Boost UI Monitor driver;C:\Windows\System32\drivers\TurboB.sys

  R2 UNS;Intel(R) Management & Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

  R2 Updater Service;Updater Service;C:\Program Files\Acer\Acer Updater\UpdaterService.exe

  R3 AVGIDSDriver;AVGIDSDriver;C:\Windows\System32\drivers\AVGIDSDriver.sys

  R3 AVGIDSFilter;AVGIDSFilter;C:\Windows\System32\drivers\AVGIDSFilter.sys

  R3 HECIx64;Intel(R) Management Engine Interface;C:\Windows\System32\drivers\HECIx64.sys

  R3 Impcd;Impcd;C:\Windows\System32\drivers\Impcd.sys

  R3 IntcDAud;Intel(R) Display Audio;C:\Windows\System32\drivers\IntcDAud.sys

  R3 SMARTMouseFilterx64;HID-compliant mouse;C:\Windows\System32\drivers\SMARTMouseFilterx64.sys

  R3 SMARTVHidMiniVistaAmd64;SMART HID Device;C:\Windows\System32\drivers\SMARTVHidMiniVistaAmd64.sys

  R3 SMARTVTabletPCx64;SMART Virtual TabletPC;C:\Windows\System32\drivers\SMARTVTabletPCx64.sys

  S2 AVGIDSAgent;AVGIDSAgent;C:\Program Files (x86)\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe

  S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

  S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

  S3 ose64;Office 64 Source Engine;C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE

  S3 Revoflt;Revoflt;C:\Windows\System32\drivers\revoflt.sys

  S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\System32\drivers\RtsUStor.sys

  S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys

  S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys

  S3 TurboBoost;TurboBoost;C:\Program Files\Intel\TurboBoost\TurboBoost.exe

  S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys

  S3 WatAdminSvc;Windows Activation Technologies-service;C:\Windows\System32\Wat\WatAdminSvc.exe

  .

  =============== Created Last 30 ================

  .

  2013-01-03 21:48:57 ——– d—–w- C:\Windows\ERUNT

  2013-01-03 21:47:46 ——– d—–w- C:\JRT

  2013-01-03 20:22:25 ——– d—–w- C:\Users\Frans1\AppData\Local\Programs

  2013-01-03 20:11:13 ——– d—–w- C:\Users\Frans1\AppData\Local\VS Revo Group

  2013-01-03 20:11:08 31800 —-a-w- C:\Windows\System32\drivers\revoflt.sys

  2013-01-03 20:11:05 ——– d—–w- C:\Program Files\VS Revo Group

  2013-01-03 20:00:53 ——– d-sh–w- C:\ProgramData\{D1D4879F-2279-49C9-AEBF-3B95C84EAA8F}

  2012-12-26 13:22:01 ——– d—–w- C:\Intel

  2012-12-24 18:28:41 37216 —-a-w- C:\Windows\System32\uxtuneup.dll

  2012-12-24 18:28:41 29536 —-a-w- C:\Windows\SysWow64\uxtuneup.dll

  2012-12-21 17:43:08 34656 —-a-w- C:\Windows\System32\TURegOpt.exe

  2012-12-21 17:43:07 25952 —-a-w- C:\Windows\System32\authuitu.dll

  2012-12-21 17:43:07 21344 —-a-w- C:\Windows\SysWow64\authuitu.dll

  2012-12-21 17:42:46 ——– d—–w- C:\Program Files (x86)\TuneUp Utilities 2013

  2012-12-21 17:42:37 ——– d-sh–w- C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}

  2012-12-21 17:41:18 ——– d—–w- C:\Program Files (x86)\DVDVideoSoft

  2012-12-21 17:41:18 ——– d—–w- C:\Program Files (x86)\Common Files\DVDVideoSoft

  2012-12-21 17:39:32 46080 —-a-w- C:\Windows\System32\atmlib.dll

  2012-12-21 17:39:32 34304 —-a-w- C:\Windows\SysWow64\atmlib.dll

  2012-12-21 17:39:31 367616 —-a-w- C:\Windows\System32\atmfd.dll

  2012-12-21 17:39:31 295424 —-a-w- C:\Windows\SysWow64\atmfd.dll

  2012-12-18 11:46:58 ——– d—–r- C:\Users\Frans1\Dropbox

  2012-12-12 11:18:07 2048 —-a-w- C:\Windows\SysWow64\tzres.dll

  2012-12-12 11:18:07 2048 —-a-w- C:\Windows\System32\tzres.dll

  2012-12-12 11:18:03 3149824 —-a-w- C:\Windows\System32\win32k.sys

  2012-12-09 16:47:37 96224 —-a-w- C:\Program Files (x86)\Mozilla Firefox\webapprt-stub.exe

  .

  ==================== Find3M ====================

  .

  2012-12-14 15:49:28 24176 —-a-w- C:\Windows\System32\drivers\mbam.sys

  2012-11-14 06:11:44 2312704 —-a-w- C:\Windows\System32\jscript9.dll

  2012-11-14 06:04:11 1392128 —-a-w- C:\Windows\System32\wininet.dll

  2012-11-14 06:02:49 1494528 —-a-w- C:\Windows\System32\inetcpl.cpl

  2012-11-14 05:57:46 599040 —-a-w- C:\Windows\System32\vbscript.dll

  2012-11-14 05:57:35 173056 —-a-w- C:\Windows\System32\ieUnatt.exe

  2012-11-14 05:52:40 2382848 —-a-w- C:\Windows\System32\mshtml.tlb

  2012-11-14 02:09:22 1800704 —-a-w- C:\Windows\SysWow64\jscript9.dll

  2012-11-14 01:58:15 1427968 —-a-w- C:\Windows\SysWow64\inetcpl.cpl

  2012-11-14 01:57:37 1129472 —-a-w- C:\Windows\SysWow64\wininet.dll

  2012-11-14 01:49:25 142848 —-a-w- C:\Windows\SysWow64\ieUnatt.exe

  2012-11-14 01:48:27 420864 —-a-w- C:\Windows\SysWow64\vbscript.dll

  2012-11-14 01:44:42 2382848 —-a-w- C:\Windows\SysWow64\mshtml.tlb

  2012-11-12 03:47:46 312160 —-a-w- C:\Windows\System32\drivers\avgldx64.sys

  2012-11-02 05:59:11 478208 —-a-w- C:\Windows\System32\dpnet.dll

  2012-11-02 05:11:31 376832 —-a-w- C:\Windows\SysWow64\dpnet.dll

  2012-10-16 08:38:37 135168 —-a-w- C:\Windows\apppatch\AppPatch64\AcXtrnal.dll

  2012-10-16 08:38:34 350208 —-a-w- C:\Windows\apppatch\AppPatch64\AcLayers.dll

  2012-10-16 07:39:52 561664 —-a-w- C:\Windows\apppatch\AcLayers.dll

  2012-10-10 06:49:14 73656 —-a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl

  2012-10-10 06:49:14 696760 —-a-w- C:\Windows\SysWow64\FlashPlayerApp.exe

  2012-10-09 18:17:13 55296 —-a-w- C:\Windows\System32\dhcpcsvc6.dll

  2012-10-09 18:17:13 226816 —-a-w- C:\Windows\System32\dhcpcore6.dll

  2012-10-09 17:40:31 44032 —-a-w- C:\Windows\SysWow64\dhcpcsvc6.dll

  2012-10-09 17:40:31 193536 —-a-w- C:\Windows\SysWow64\dhcpcore6.dll

  .

  ============= FINISH: 12:00:17,64 ===============

  groet Fans

  Rapporteren
• 

  Ben

  04-01-2013 13:29

  Hallo,

  “zoek.exe” gebruiken

  Schakel je antivirus- en antispywareprogramma's uit, zoek.exe wordt tijdens het downloaden of tijdens gebruik soms als trojan aangezien.

  (hier of hier) kan je lezen hoe je dat doet.

  Download daarna zoek.exe naar het bureaublad.

  Windows 2000 en Windows XP: start de tool middels dubbelklik op “zoek.exe”.

  Windows Vista en Windows 7: start de tool middels rechtsklik op “zoek.exe” en dan kiezen voor Als Administrator uitvoeren.

  Vervolgens zal er na een tijdje een venster geopend worden.

  Met je muis selecteer je nu de volgende keuze "Combined fix"(rechts onderaan)

  Kopieer nu onderstaande Vet gedrukte en plak die in het grote invulvenster:

  autoclean;

  TuneUpUtilitiesDrv;s

  C:\Program Files (x86)\TuneUp Utilities 2013;fs

  C:\JRT;fs

  C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F};f

  C:\Windows\System32\uxtuneup.dll;f

  C:\Windows\SysWow64\uxtuneup.dll;f

  C:\Windows\System32\TURegOpt.exe;f

  C:\Windows\System32\authuitu.dll;f

  C:\Windows\SysWow64\authuitu.dll;f

  Sluit nu eerst alle nog openstaande programmavensters!

  Klik nu op de knop "Run script".

  Wacht nu geduldig af tot er een logje opent(dit kan na een herstart zijn)

  Mocht na de herstart geen logje verschijnen, start zoek.exe dan opnieuw, de log verschijnt dan alsnog.

  Post nu de inhoud van het geopende logje in het volgende bericht en vertel hoe het nu gaat.

  Gr.Ben

  Rapporteren
• 

  knien

  04-01-2013 15:43

  Hallo Ben, TuneUp utilities en Tune Up 1 klik onderhoud staan nog altijd op mijn bureaublad

  Zoek.exe Version 3.0.0.4 Updated 02-January-2013

  Tool run by Frans1 on vr 04-01-2013 at 15:23:30,70.

  Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64

  Running in: Normal Mode Internet Access Detected

  ==== Deleting CLSID Registry Keys ======================

  HKEY_USERS\S-1-5-21-3380754458-4291045806-472352418-1000\Software\Microsoft\Internet Explorer\SearchScopes\{B94324FA-D6DB-4551-9F08-C5E6F52D17D6} deleted successfully

  HKEY_CLASSES_ROOT\CLSID\{828030A1-22C1-4009-854F-8E305202313F} deleted successfully

  ==== Deleting CLSID Registry Values ======================

  ==== Deleting Services ======================

  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TuneUpUtilitiesDrv deleted successfully

  HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\TuneUpUtilitiesDrv deleted successfully

  ==== Deleting Files \ Folders ======================

  “C:\Windows\System32\TURegOpt.exe” not found

  “C:\Windows\System32\uxtuneup.dll” deleted

  “C:\Windows\SysWow64\uxtuneup.dll” deleted

  “C:\Windows\System32\TURegOpt.exe” deleted

  “C:\Windows\System32\authuitu.dll” deleted

  “C:\Windows\SysWow64\authuitu.dll” deleted

  “C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}” deleted

  “C:\Program Files (x86)\TuneUp Utilities 2013” deleted

  “C:\JRT” deleted

  ==== Firefox Extensions ======================

  ProfilePath: C:\Users\Frans1\AppData\Roaming\Mozilla\Firefox\Profiles\2vd4rjh1.default

  - =DVDVideoSoft YouTube MP3 and Video Download - %ProfilePath%\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}.xpi

  AppDir: C:\Program Files (x86)\Mozilla Firefox

  - Default - %AppDir%\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

  - Java Console - %AppDir%\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}

  - Java Console - %AppDir%\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}

  ==== Firefox Plugins ======================

  Profilepath: C:\Users\Frans1\AppData\Roaming\Mozilla\Firefox\Profiles\2vd4rjh1.default

  3E21E80D10E1033D9C137440554FF724 - C:\Windows\SysWOW64\npdeployJava1.dll - Java Deployment Toolkit 6.0.370.6

  90ABBBFFD282900CFAAABAB53BEDEBDB - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_268.dll - Shockwave Flash

  F475DAA3CF6D19DA49BE7BAC0A966DB3 - C:\Windows\system32\Adobe\Director\np32dsw.dll - Shockwave for Director / Shockwave for Director

  15E298B5EC5B89C5994A59863969D9FF - C:\Windows\SysWOW64\npmproxy.dll - Microsoft® Windows® Operating System

  ==== Chrome Look ======================

  HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions

  jmfkcklnlgedgbglfkkgedjfmejoahla - C:\Program Files (x86)\AVG\AVG10\Chrome\safesearch.crx

  ==== Set IE to Default ======================

  Old Values:

  “Start Page”=“http://www.google.nl/”

  “DefaultScope”=“{0633EE93-D776-472f-A0FF-E1416B8B2E3A}”

  New Values:

  “Start Page”=“http://www.google.nl/”

  “DefaultScope”=“{6A1806CD-94D4-4689-BA73-E35EA1EA9990}”

  ==== All HKCU SearchScopes ======================

  HKCU\*\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url=“http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC”

  HKCU\*\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url=“http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}”

  ==== Deleting CLSID Registry Keys ======================

  ==== Deleting CLSID Registry Values ======================

  ==== Deleting Registry Keys ======================

  HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\livecall deleted successfully

  HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\ms-help deleted successfully

  HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\msnim deleted successfully

  ==== Empty IE Cache ======================

  C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

  C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

  C:\Users\Frans0\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

  C:\Users\Frans1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully

  C:\Users\Frans1\AppData\Local\Temp\acro_rd_dir\Temporary Internet Files\Content.IE5 emptied successfully

  C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

  C:\Windows\serviceprofiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

  C:\Windows\serviceprofiles\LocalService\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully

  C:\Windows\serviceprofiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

  C:\Users\Frans1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

  ==== Empty FireFox Cache ======================

  C:\users\Frans1\AppData\Local\Mozilla\Firefox\Profiles\2vd4rjh1.default\Cache emptied successfully

  ==== Empty Chrome Cache ======================

  No Chrome User Data found

  ==== Empty All Flash Cache ======================

  Flash Cache Emptied Successfully

  ==== Empty All Java Cache ======================

  Java Cache cleared successfully

  After Reboot

  ==== Empty Temp Folders ======================

  C:\Windows\Temp successfully emptied

  C:\Users\Frans1\AppData\Local\Temp successfully emptied

  ==== Empty Recycle Bin ======================

  C:\$RECYCLE.BIN successfully emptied

  ==== Deleting Files / Folders ======================

  “C:\Users\Frans1\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat” not found

  Groet Frans

  Rapporteren
• 

  Ben

  04-01-2013 16:42

  Hallo,

  Plaats weer een nieuw DDS.txt logje.

  Gr.Ben

  Rapporteren
• 

  knien

  04-01-2013 17:12

  Hier het logje.

  DDS (Ver_2012-11-20.01) - NTFS_AMD64

  Internet Explorer: 9.0.8112.16457 BrowserJavaVersion: 1.6.0_37

  Run by Frans1 at 17:10:16 on 2013-01-04

  Microsoft Windows 7 Home Premium 6.1.7601.1.1252.31.1043.18.3767.2263

  .

  AV: AVG Internet Security 2011 *Enabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}

  SP: AVG Internet Security 2011 *Enabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}

  SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

  FW: AVG Firewall *Enabled* {621CC794-9486-F902-D092-0484E8EA828B}

  .

  ============== Running Processes ===============

  .

  C:\PROGRA~2\AVG\AVG10\avgchsva.exe

  C:\Windows\system32\lsm.exe

  C:\Windows\system32\svchost.exe -k DcomLaunch

  C:\Windows\system32\svchost.exe -k RPCSS

  C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

  C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

  C:\Windows\system32\svchost.exe -k netsvcs

  C:\Windows\system32\svchost.exe -k LocalService

  C:\Windows\system32\svchost.exe -k NetworkService

  C:\Windows\SYSTEM32\WISPTIS.EXE

  C:\Windows\System32\spoolsv.exe

  C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

  C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE

  C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

  C:\Program Files (x86)\AVG\AVG10\avgfws.exe

  C:\Program Files (x86)\AVG\AVG10\avgwdsvc.exe

  C:\Program Files (x86)\Launch Manager\dsiwmis.exe

  C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe

  C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

  C:\Program Files (x86)\Acer\Registration\GREGsvc.exe

  C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt

  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

  C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe

  C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe

  C:\Program Files (x86)\SMART Technologies\Education Software\ResponseHardwareService.exe

  C:\Program Files\Acer\Acer Updater\UpdaterService.exe

  C:\Program Files (x86)\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe

  C:\Program Files (x86)\AVG\AVG10\avgam.exe

  C:\Program Files (x86)\AVG\AVG10\avgnsa.exe

  C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

  C:\Program Files (x86)\AVG\AVG10\avgcsrva.exe

  C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

  C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

  C:\Program Files\Windows Media Player\wmpnetwk.exe

  C:\Windows\system32\wbem\wmiprvse.exe

  C:\PROGRA~2\AVG\AVG10\avgrsa.exe

  C:\Program Files (x86)\AVG\AVG10\avgcsrva.exe

  C:\Windows\system32\taskhost.exe

  C:\Windows\SYSTEM32\WISPTIS.EXE

  C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe

  C:\Windows\system32\Dwm.exe

  C:\Windows\Explorer.EXE

  C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\TabTip32.exe

  C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

  C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe

  C:\Windows\System32\igfxtray.exe

  C:\Windows\System32\hkcmd.exe

  C:\Windows\System32\igfxpers.exe

  C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE

  C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE

  C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe

  C:\Windows\system32\igfxsrvc.exe

  C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

  C:\Users\Frans1\AppData\Roaming\Dropbox\bin\Dropbox.exe

  C:\ProgramData\U3\U3Launcher\LaunchU3.exe

  C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE

  C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

  C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe

  C:\Program Files (x86)\Launch Manager\LManager.exe

  C:\Program Files (x86)\SMART Technologies\Education Software\SMARTBoardService.exe

  C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe

  C:\Program Files (x86)\AVG\AVG10\avgtray.exe

  C:\Program Files (x86)\Launch Manager\LMworker.exe

  C:\Program Files (x86)\Citrix\ICA Client\concentr.exe

  C:\Windows\system32\igfxext.exe

  C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe

  C:\Program Files (x86)\AVG\AVG10\Identity Protection\agent\bin\avgidsmonitor.exe

  C:\Windows\system32\wbem\unsecapp.exe

  C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe

  C:\Program Files (x86)\Mozilla Firefox\firefox.exe

  C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe

  C:\Windows\system32\taskeng.exe

  C:\Windows\system32\wbem\wmiprvse.exe

  C:\Windows\System32\cscript.exe

  .

  ============== Pseudo HJT Report ===============

  .

  uStart Page = hxxp://www.google.nl/

  uDefault_Page_URL = hxxp://acer.msn.com

  mStart Page = hxxp://acer.msn.com

  mDefault_Page_URL = hxxp://acer.msn.com

  mWinlogon: Userinit = userinit.exe,

  BHO: HP Print Enhancer: {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll

  BHO: ThreeShips IE Helper: {17FDB9F8-DCC4-4F6A-AE07-B16018A48469} - C:\Program Files (x86)\Common Files\Threeships Shared\Dll\ThreeShipsIEHelper.dll

  BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

  BHO: AVG Safe Search: {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG10\avgssie.dll

  BHO: SMART Notebook Download Utility: {67BCF957-85FC-4036-8DC4-D4D80E00A77B} - C:\Program Files (x86)\SMART Technologies\Education Software\Win32\NotebookPlugin.dll

  BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL

  BHO: Java™ Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll

  BHO: Windows Live Aanmelden - Help: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

  BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL

  BHO: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

  BHO: HP Smart BHO Class: {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

  TB: SMART Sync: {8E1233B3-485A-4E51-B77E-9E075A68C588} - C:\Program Files (x86)\SMART Technologies\Education Software\SyncIEToolbar.dll

  EB: HP Smart Web Printing: {555D4D79-4BD2-4094-A395-CFC534424A05} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_bho.dll

  EB: HP Smart Web Printing: {555D4D79-4BD2-4094-A395-CFC534424A05} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_bho.dll

  uRun: “C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE”

  uRun: C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

  uRun: “C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe” -autorun

  mRun: C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

  mRun: “C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe” -h -k

  mRun: C:\Program Files (x86)\Launch Manager\LManager.exe

  mRun: “C:\Program Files (x86)\SMART Technologies\Education Software\SMARTBoardService.exe”

  mRun: C:\Program Files (x86)\AVG\AVG10\avgtray.exe

  mRun: “C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe”

  mRun: “C:\Program Files (x86)\Citrix\ICA Client\concentr.exe” /startup

  StartupFolder: C:\Users\Frans1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Dropbox.lnk - C:\Users\Frans1\AppData\Roaming\Dropbox\bin\Dropbox.exe

  StartupFolder: C:\Users\Frans1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\LAUNCH~1.LNK - C:\Users\Frans1\AppData\Roaming\Microsoft\Installer\{D8E363A7-88B7-446D-B2C0-E26CE4DC8E54}\_294823.exe

  StartupFolder: C:\Users\Frans1\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\ONENOT~1.LNK - C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE

  StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\HPDIGI~1.LNK - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

  uPolicies-Explorer: NoDriveTypeAutoRun = dword:255

  mPolicies-Explorer: NoActiveDesktop = dword:1

  mPolicies-Explorer: NoActiveDesktopChanges = dword:1

  mPolicies-Explorer: NoDriveTypeAutoRun = dword:255

  mPolicies-System: ConsentPromptBehaviorAdmin = dword:5

  mPolicies-System: ConsentPromptBehaviorUser = dword:3

  mPolicies-System: EnableUIADesktopToggle = dword:0

  IE: &Verzenden naar OneNote - C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105

  IE: E&xporteren naar Microsoft Excel - C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000

  IE: Free YouTube to MP3 Converter - C:\Users\Frans1\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm

  IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

  IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll

  IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

  IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

  DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab

  DPF: {CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab

  DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_37-windows-i586.cab

  TCP: NameServer = 212.54.40.25 212.54.35.25

  TCP: Interfaces\{1D9BA531-F553-47DF-BBD7-A351E2EC56F9} : DHCPNameServer = 212.54.40.25 212.54.35.25

  TCP: Interfaces\{1D9BA531-F553-47DF-BBD7-A351E2EC56F9}\B496A6B646F6F637 : DHCPNameServer = 212.54.40.25 212.54.35.25 192.168.0.1

  Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

  Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

  Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

  Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

  Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

  Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

  Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

  Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

  Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

  Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

  Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

  Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

  Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

  Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

  Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

  Filter: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll

  Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

  Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG10\avgpp.dll

  SSODL: WebCheck -

  SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL

  x64-mStart Page = hxxp://acer.msn.com

  x64-mDefault_Page_URL = hxxp://acer.msn.com

  x64-BHO: AVG Safe Search: {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG10\avgssiea.dll

  x64-BHO: SMART Notebook Download Utility: {67BCF957-85FC-4036-8DC4-D4D80E00A77B} - C:\Program Files (x86)\SMART Technologies\Education Software\Win64\NotebookPlugin.dll

  x64-BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL

  x64-BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL

  x64-Run: C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s

  x64-Run: C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe

  x64-Run: “C:\Program Files\Microsoft Office\Office14\BCSSync.exe” /DelayServices

  x64-Run: C:\Windows\System32\igfxtray.exe

  x64-Run: C:\Windows\System32\hkcmd.exe

  x64-Run: C:\Windows\System32\igfxpers.exe

  x64-IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll

  x64-IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

  x64-Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -

  x64-Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -

  x64-Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -

  x64-Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -

  x64-Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -

  x64-Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -

  x64-Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -

  x64-Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -

  x64-Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -

  x64-Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -

  x64-Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -

  x64-Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -

  x64-Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -

  x64-Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -

  x64-Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -

  x64-Filter: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} -

  x64-Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

  x64-Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG10\avgppa.dll

  x64-Notify: igfxcui - igfxdev.dll

  x64-SSODL: WebCheck -

  x64-SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL

  .

  ================= FIREFOX ===================

  .

  FF - ProfilePath - C:\Users\Frans1\AppData\Roaming\Mozilla\Firefox\Profiles\2vd4rjh1.default\

  FF - prefs.js: browser.search.selectedEngine - Google

  FF - plugin: C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL

  FF - plugin: C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL

  FF - plugin: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll

  FF - plugin: C:\Program Files (x86)\Common Files\ThreeShips Shared\Dll\npTSHelper.dll

  FF - plugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll

  FF - plugin: C:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrlui.dll

  FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npicaN.dll

  FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

  FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_268.dll

  FF - plugin: C:\Windows\SysWOW64\npdeployJava1.dll

  FF - plugin: C:\Windows\SysWOW64\npmproxy.dll

  FF - ExtSQL: !HIDDEN! 2011-08-26 20:23; smartwebprinting@hp.com; C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

  .

  ============= SERVICES / DRIVERS ===============

  .

  R0 AVGIDSEH;AVGIDSEH;C:\Windows\System32\drivers\AVGIDSEH.sys

  R0 Avgrkx64;AVG Anti-Rootkit Driver;C:\Windows\System32\drivers\avgrkx64.sys

  R1 Avgfwfd;AVG network filter service;C:\Windows\System32\drivers\avgfwd6a.sys

  R1 Avgldx64;AVG AVI Loader Driver;C:\Windows\System32\drivers\avgldx64.sys

  R1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;C:\Windows\System32\drivers\avgmfx64.sys

  R1 Avgtdia;AVG TDI Driver;C:\Windows\System32\drivers\avgtdia.sys

  R1 ctxusbm;Citrix USB Monitor Driver;C:\Windows\System32\drivers\ctxusbm.sys

  R1 SASDIFSV;SASDIFSV;C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys

  R1 SASKUTIL;SASKUTIL;C:\Program Files\SUPERAntiSpyware\saskutil64.sys

  R2 !SASCORE;SAS Core Service;C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE

  R2 avgfws;AVG Firewall;C:\Program Files (x86)\AVG\AVG10\avgfws.exe

  R2 AVGIDSAgent;AVGIDSAgent;C:\Program Files (x86)\AVG\AVG10\Identity Protection\Agent\Bin\AVGIDSAgent.exe

  R2 avgwd;AVG WatchDog;C:\Program Files (x86)\AVG\AVG10\avgwdsvc.exe

  R2 DsiWMIService;Dritek WMI Service;C:\Program Files (x86)\Launch Manager\dsiwmis.exe

  R2 ePowerSvc;Acer ePower Service;C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe

  R2 GREGService;GREGService;C:\Program Files (x86)\Acer\Registration\GREGsvc.exe

  R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

  R2 NTI IScheduleSvc;NTI IScheduleSvc;C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe

  R2 Response Hardware;Response Hardware;C:\Program Files (x86)\SMART Technologies\Education Software\ResponseHardwareService.exe

  R2 TurboB;Turbo Boost UI Monitor driver;C:\Windows\System32\drivers\TurboB.sys

  R2 UNS;Intel(R) Management & Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

  R2 Updater Service;Updater Service;C:\Program Files\Acer\Acer Updater\UpdaterService.exe

  R3 AVGIDSDriver;AVGIDSDriver;C:\Windows\System32\drivers\AVGIDSDriver.sys

  R3 AVGIDSFilter;AVGIDSFilter;C:\Windows\System32\drivers\AVGIDSFilter.sys

  R3 HECIx64;Intel(R) Management Engine Interface;C:\Windows\System32\drivers\HECIx64.sys

  R3 Impcd;Impcd;C:\Windows\System32\drivers\Impcd.sys

  R3 IntcDAud;Intel(R) Display Audio;C:\Windows\System32\drivers\IntcDAud.sys

  R3 SMARTMouseFilterx64;HID-compliant mouse;C:\Windows\System32\drivers\SMARTMouseFilterx64.sys

  R3 SMARTVHidMiniVistaAmd64;SMART HID Device;C:\Windows\System32\drivers\SMARTVHidMiniVistaAmd64.sys

  R3 SMARTVTabletPCx64;SMART Virtual TabletPC;C:\Windows\System32\drivers\SMARTVTabletPCx64.sys

  S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

  S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe

  S3 ose64;Office 64 Source Engine;C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE

  S3 Revoflt;Revoflt;C:\Windows\System32\drivers\revoflt.sys

  S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\System32\drivers\RtsUStor.sys

  S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys

  S3 TurboBoost;TurboBoost;C:\Program Files\Intel\TurboBoost\TurboBoost.exe

  S3 USBAAPL64;Apple Mobile USB Driver;C:\Windows\System32\drivers\usbaapl64.sys

  S3 WatAdminSvc;Windows Activation Technologies-service;C:\Windows\System32\Wat\WatAdminSvc.exe

  .

  =============== Created Last 30 ================

  .

  2013-01-04 14:29:50 ——– d-sh–w- C:\$RECYCLE.BIN

  2013-01-04 14:27:47 ——– d—–w- C:\Users\Frans1\AppData\Local\Temp

  2013-01-03 21:48:57 ——– d—–w- C:\Windows\ERUNT

  2013-01-03 20:22:25 ——– d—–w- C:\Users\Frans1\AppData\Local\Programs

  2013-01-03 20:11:13 ——– d—–w- C:\Users\Frans1\AppData\Local\VS Revo Group

  2013-01-03 20:11:08 31800 —-a-w- C:\Windows\System32\drivers\revoflt.sys

  2013-01-03 20:11:05 ——– d—–w- C:\Program Files\VS Revo Group

  2013-01-03 20:00:53 ——– d-sh–w- C:\ProgramData\{D1D4879F-2279-49C9-AEBF-3B95C84EAA8F}

  2012-12-26 13:22:01 ——– d—–w- C:\Intel

  2012-12-24 18:28:41 37216 —-a-w- C:\Windows\System32\uxtuneup.dll

  2012-12-21 17:43:08 34656 —-a-w- C:\Windows\System32\TURegOpt.exe

  2012-12-21 17:43:07 25952 —-a-w- C:\Windows\System32\authuitu.dll

  2012-12-21 17:41:18 ——– d—–w- C:\Program Files (x86)\DVDVideoSoft

  2012-12-21 17:41:18 ——– d—–w- C:\Program Files (x86)\Common Files\DVDVideoSoft

  2012-12-21 17:39:32 46080 —-a-w- C:\Windows\System32\atmlib.dll

  2012-12-21 17:39:32 34304 —-a-w- C:\Windows\SysWow64\atmlib.dll

  2012-12-21 17:39:31 367616 —-a-w- C:\Windows\System32\atmfd.dll

  2012-12-21 17:39:31 295424 —-a-w- C:\Windows\SysWow64\atmfd.dll

  2012-12-18 11:46:58 ——– d—–r- C:\Users\Frans1\Dropbox

  2012-12-12 11:18:07 2048 —-a-w- C:\Windows\SysWow64\tzres.dll

  2012-12-12 11:18:07 2048 —-a-w- C:\Windows\System32\tzres.dll

  2012-12-12 11:18:03 3149824 —-a-w- C:\Windows\System32\win32k.sys

  2012-12-09 16:47:37 96224 —-a-w- C:\Program Files (x86)\Mozilla Firefox\webapprt-stub.exe

  .

  ==================== Find3M ====================

  .

  2012-12-14 15:49:28 24176 —-a-w- C:\Windows\System32\drivers\mbam.sys

  2012-11-14 06:11:44 2312704 —-a-w- C:\Windows\System32\jscript9.dll

  2012-11-14 06:04:11 1392128 —-a-w- C:\Windows\System32\wininet.dll

  2012-11-14 06:02:49 1494528 —-a-w- C:\Windows\System32\inetcpl.cpl

  2012-11-14 05:57:46 599040 —-a-w- C:\Windows\System32\vbscript.dll

  2012-11-14 05:57:35 173056 —-a-w- C:\Windows\System32\ieUnatt.exe

  2012-11-14 05:52:40 2382848 —-a-w- C:\Windows\System32\mshtml.tlb

  2012-11-14 02:09:22 1800704 —-a-w- C:\Windows\SysWow64\jscript9.dll

  2012-11-14 01:58:15 1427968 —-a-w- C:\Windows\SysWow64\inetcpl.cpl

  2012-11-14 01:57:37 1129472 —-a-w- C:\Windows\SysWow64\wininet.dll

  2012-11-14 01:49:25 142848 —-a-w- C:\Windows\SysWow64\ieUnatt.exe

  2012-11-14 01:48:27 420864 —-a-w- C:\Windows\SysWow64\vbscript.dll

  2012-11-14 01:44:42 2382848 —-a-w- C:\Windows\SysWow64\mshtml.tlb

  2012-11-12 03:47:46 312160 —-a-w- C:\Windows\System32\drivers\avgldx64.sys

  2012-11-02 05:59:11 478208 —-a-w- C:\Windows\System32\dpnet.dll

  2012-11-02 05:11:31 376832 —-a-w- C:\Windows\SysWow64\dpnet.dll

  2012-10-16 08:38:37 135168 —-a-w- C:\Windows\apppatch\AppPatch64\AcXtrnal.dll

  2012-10-16 08:38:34 350208 —-a-w- C:\Windows\apppatch\AppPatch64\AcLayers.dll

  2012-10-16 07:39:52 561664 —-a-w- C:\Windows\apppatch\AcLayers.dll

  2012-10-10 06:49:14 73656 —-a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl

  2012-10-10 06:49:14 696760 —-a-w- C:\Windows\SysWow64\FlashPlayerApp.exe

  2012-10-09 18:17:13 55296 —-a-w- C:\Windows\System32\dhcpcsvc6.dll

  2012-10-09 18:17:13 226816 —-a-w- C:\Windows\System32\dhcpcore6.dll

  2012-10-09 17:40:31 44032 —-a-w- C:\Windows\SysWow64\dhcpcsvc6.dll

  2012-10-09 17:40:31 193536 —-a-w- C:\Windows\SysWow64\dhcpcore6.dll

  .

  ============= FINISH: 17:10:45,67 ===============

  Rapporteren
• 

  Ben

  04-01-2013 17:22

  Hallo,

  Windows Vista en Windows 7: start de tool middels rechtsklik op “zoek.exe” en dan kiezen voor Als Administrator uitvoeren.

  Vervolgens zal er na een tijdje een venster geopend worden.

  Met je muis selecteer je nu de volgende keuze "Combined fix"(rechts onderaan)

  Kopieer nu onderstaande Vet gedrukte en plak die in het grote invulvenster:

  autoclean;

  C:\Windows\System32\uxtuneup.dll;f

  C:\Windows\System32\TURegOpt.exe;f

  C:\Windows\System32\authuitu.dll;f

  Sluit nu eerst alle nog openstaande programmavensters!

  Klik nu op de knop "Run script".

  Wacht nu geduldig af tot er een logje opent(dit kan na een herstart zijn)

  Mocht na de herstart geen logje verschijnen, start zoek.exe dan opnieuw, de log verschijnt dan alsnog.

  Post nu de inhoud van het geopende logje in het volgende bericht.

  >>>TuneUp utilities en Tune Up 1 klik onderhoud staan nog altijd op mijn bureaublad<<<

  Deze kan je verwijderen ga met het muispeiltje er opstaan > druk rechter knop > kies verwijderen.

  Gr.Ben

  Rapporteren

Dit topic is gesloten, er kunnen geen reacties meer worden geplaatst.