[HaraMo]

Hi

 

I hope someone can help to give the laptop a good cleaning. it's slower then in when it was new (maybe malware involved?). a lot of things can be uninstalled, liked toolbar and so on. but before I do something, can someone take a look and tel me what to do first? 

 

see OTL reports

 

OTL logfile created on: 5/11/2014 22:54:26 - Run 1

OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Sylvine\Desktop

Windows Vista Home Basic Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation

Internet Explorer (Version = 8.0.6001.19088)

Locale: 00000813 | Country: België | Language: NLB | Date Format: d/MM/yyyy

 

2,90 Gb Total Physical Memory | 1,28 Gb Available Physical Memory | 44,05% Memory free

6,04 Gb Paging File | 4,40 Gb Available in Paging File | 72,76% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files

Drive C: | 222,70 Gb Total Space | 151,22 Gb Free Space | 67,90% Space Free | Partition Type: NTFS

Drive D: | 10,18 Gb Total Space | 1,76 Gb Free Space | 17,27% Space Free | Partition Type: NTFS

 

Computer Name: PC_VAN_SYLVINE | User Name: Sylvine | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Quick Scan

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

 

========== Processes (SafeList) ==========

 

PRC - C:\Users\Sylvine\Desktop\OTL.exe (OldTimer Tools)

PRC - C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Anti-Virus\fssm32.exe (F-Secure Corporation)

PRC - C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Anti-Virus\fsgk32.exe (F-Secure Corporation)

PRC - C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.)

PRC - c:\Program Files\TeamViewer\Version9\TeamViewer_Desktop.exe (TeamViewer GmbH)

PRC - C:\Program Files\TeamViewer\Version9\TeamViewer.exe (TeamViewer GmbH)

PRC - C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe (TeamViewer GmbH)

PRC - C:\Program Files\TeamViewer\Version9\tv_w32.exe (TeamViewer GmbH)

PRC - C:\Program Files\Telenet Security Pack\fshoster32.exe (F-Secure Corporation)

PRC - C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Common\FSM32.EXE (F-Secure Corporation)

PRC - C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Common\FSMA32.EXE (F-Secure Corporation)

PRC - C:\Program Files\Telenet Security Pack\apps\CCF_Reputation\fsorsp.exe (F-Secure Corporation)

PRC - C:\Program Files\Sony\PMB\PMBVolumeWatcher.exe (Sony Corporation)

PRC - C:\Program Files\Sony\PMB\PMBDeviceInfoProvider.exe (Sony Corporation)

PRC - C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe (Google Inc.)

PRC - C:\Windows\explorer.exe (Microsoft Corporation)

PRC - C:\Program Files\IDT\WDM\sttray.exe (IDT, Inc.)

PRC - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_fa807195\stacsv.exe (IDT, Inc.)

PRC - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_fa807195\AEstSrv.exe (Andrea Electronics Corporation)

PRC - C:\Program Files\SMINST\BLService.exe ()

 

 

========== Modules (No Company Name) ==========

 

MOD - C:\Program Files\Google\Chrome\Application\38.0.2125.111\pdf.dll ()

MOD - C:\Program Files\Google\Chrome\Application\38.0.2125.111\ffmpegsumo.dll ()

MOD - C:\Windows\winsxs\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.77_none_b59ef0c311fca244\QtMultimediaKit1.dll ()

MOD - C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\FSGUI\fsavures.eng ()

MOD - C:\Program Files\Google\Quick Search Box\bin\1.2.1151.245\rlz.dll ()

MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\e3180b4230f052996adb81da3dc64ad0\System.Management.ni.dll ()

MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\aa3e053d433c48e1e8c3f436b4de1ed3\System.Configuration.ni.dll ()

MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\cfb60f99da570cc494e27e0e8ee747e2\System.Xml.ni.dll ()

MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\381fb23cb39e1a61e13b8770eb9800ba\System.Windows.Forms.ni.dll ()

MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\f1aa2385c0109f3059e0e6ba8b58ff68\System.Drawing.ni.dll ()

MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9dff86a62a525ec8dc827fe9f50298b7\System.ni.dll ()

MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\0309936a8e1672d39b9cf14463ce69f9\mscorlib.ni.dll ()

MOD - C:\Program Files\Common Files\LightScribe\QtGui4.dll ()

MOD - C:\Program Files\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll ()

MOD - C:\Program Files\Common Files\LightScribe\QtCore4.dll ()

 

 

========== Services (SafeList) ==========

 

SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)

SRV - (TeamViewer9) -- C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe (TeamViewer GmbH)

SRV - (fshoster) -- C:\Program Files\Telenet Security Pack\fshoster32.exe (F-Secure Corporation)

SRV - (FSMA) -- C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Common\FSMA32.EXE (F-Secure Corporation)

SRV - (SkypeUpdate) -- C:\Program Files\Skype\Updater\Updater.exe (Skype Technologies)

SRV - (FSORSPClient) -- C:\Program Files\Telenet Security Pack\apps\CCF_Reputation\fsorsp.exe (F-Secure Corporation)

SRV - (PMBDeviceInfoProvider) -- C:\Program Files\Sony\PMB\PMBDeviceInfoProvider.exe (Sony Corporation)

SRV - (STacSV) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_fa807195\stacsv.exe (IDT, Inc.)

SRV - (AESTFilters) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_fa807195\AEstSrv.exe (Andrea Electronics Corporation)

SRV - (Recovery Service for Windows) -- C:\Program Files\SMINST\BLService.exe ()

SRV - (ezSharedSvc) -- C:\Windows\System32\ezsvc7.dll (EasyBits Sofware AS)

SRV - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)

 

 

========== Driver Services (SafeList) ==========

 

DRV - (NwlnkFwd) -- system32\DRIVERS\nwlnkfwd.sys File not found

DRV - (NwlnkFlt) -- system32\DRIVERS\nwlnkflt.sys File not found

DRV - (IpInIp) -- system32\DRIVERS\ipinip.sys File not found

DRV - (F-Secure Gatekeeper) -- C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys (F-Secure Corporation)

DRV - (F-Secure HIPS) -- C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\HIPS\drivers\fshs.sys (F-Secure Corporation)

DRV - (fsni) -- C:\Program Files\Telenet Security Pack\apps\CCF_Scanning\fsni32.sys (F-Secure Corporation)

DRV - (fsbts) -- C:\Windows\System32\drivers\fsbts.sys ()

DRV - (fsvista) -- C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys ()

DRV - (STHDA) -- C:\Windows\System32\drivers\stwrt.sys (IDT, Inc.)

DRV - (RTL8169) -- C:\Windows\System32\drivers\Rtlh86.sys (Realtek Corporation                                            )

DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Atheros Communications, Inc.)

DRV - (IntcHdmiAddService) -- C:\Windows\System32\drivers\IntcHdmi.sys (Intel® Corporation)

DRV - (NETw3v32) -- C:\Windows\System32\drivers\NETw3v32.sys (Intel Corporation)

DRV - (HpqKbFiltr) -- C:\Windows\System32\drivers\HpqKbFiltr.sys (Hewlett-Packard Development Company, L.P.)

 

 

========== Standard Registry (SafeList) ==========

 

 

========== Internet Explorer ==========

 

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.h...resario&pf=cnnb

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.h...resario&pf=cnnb

IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.c...ferrer:source?}

IE - HKLM\..\SearchScopes\{2F15F787-E106-4928-9E29-B6C6639BBBAC}: "URL" = http://slirsredirect...hpcnnbie7-nl-be

IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.co...g}&sourceid=ie7

IE - HKLM\..\SearchScopes\{B491D4F1-797F-488C-A8BB-705112DE6955}: "URL" = http://nl.search.yah...p06&type=ie2008

IE - HKLM\..\SearchScopes\{C9660356-E80A-468F-A23D-721E78908CF3}: "URL" = http://nb.kelkoopart...tnerId=96913938

 

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.h...resario&pf=cnnb

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1

IE - HKCU\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}

IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/...Box&FORM=IE8SRC

IE - HKCU\..\SearchScopes\{2F15F787-E106-4928-9E29-B6C6639BBBAC}: "URL" = http://slirsredirect...hpcnnbie7-nl-be

IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.co...1I7GGLL_nlBE340

IE - HKCU\..\SearchScopes\{B491D4F1-797F-488C-A8BB-705112DE6955}: "URL" = http://nl.search.yah...p06&type=ie2008

IE - HKCU\..\SearchScopes\{C9660356-E80A-468F-A23D-721E78908CF3}: "URL" = http://nb.kelkoopart...tnerId=96913938

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

 

========== FireFox ==========

 

FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.71.2: C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.71.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)

 

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{4701b00b-14c3-429d-aa7a-cc094799006b}: C:\Program Files\Telenet Security Pack\apps\OnlineSafety\browser\deploy\fs_firefox_https [2014/06/07 09:40:26 | 000,000,000 | ---D | M]

 

 

========== Chrome  ==========

 

CHR - default_search_provider:  (Enabled)

CHR - default_search_provider: search_url = 

CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}

CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\38.0.2125.111\PepperFlash\pepflashplayer.dll

CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer

CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\38.0.2125.111\ppGoogleNaClPluginChrome.dll

CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\38.0.2125.111\pdf.dll

CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll

CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll

CHR - plugin: Java™ Platform SE 7 U25 (Enabled) = C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll

CHR - plugin: Java Deployment Toolkit 7.0.250.16 (Enabled) = C:\Windows\system32\npDeployJava1.dll

CHR - plugin: Windows Presentation Foundation (Enabled) = c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

CHR - Extension: No name found = C:\Users\Sylvine\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\

 

O1 HOSTS File: ([2006/09/18 22:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts

O1 - Hosts: 127.0.0.1       localhost

O1 - Hosts: ::1             localhost

O2 - BHO: (Telenet Veilig Online) - {45BBE08D-81C5-4A67-AF20-B2A077C67747} - C:\Program Files\Telenet Security Pack\apps\OnlineSafety\browser\install\fs_ie_https\fs_ie_https.dll (F-Secure Corporation)

O2 - BHO: (Java™ Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)

O2 - BHO: (Java™ Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

O4 - HKLM..\Run: [F-Secure Hoster (44163)] C:\Program Files\Telenet Security Pack\fshoster32.exe (F-Secure Corporation)

O4 - HKLM..\Run: [F-Secure Manager] C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Common\FSM32.EXE (F-Secure Corporation)

O4 - HKLM..\Run: [Google Quick Search Box] C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe (Google Inc.)

O4 - HKLM..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe (Hewlett-Packard)

O4 - HKLM..\Run: [PMBVolumeWatcher] C:\Program Files\Sony\PMB\PMBVolumeWatcher.exe (Sony Corporation)

O4 - HKLM..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray.exe (IDT, Inc.)

O4 - HKLM..\Run: [UpdateLBPShortCut] C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)

O4 - HKLM..\Run: [UpdateP2GoShortCut] C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)

O4 - HKLM..\Run: [UpdatePSTShortCut] C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)

O13 - gopher Prefix: missing

O16 - DPF: {888078C6-70B2-4F88-8EE7-1F50DDEA6120} https://as.photoprin...geUploader6.cab (CeWe Color AG & Co. OHG Control)

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.ad...Plus/1.6/gp.cab (Reg Error: Key error.)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 195.130.131.1 195.130.130.129

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{16191C9B-50F9-40F4-B35E-A645B7F8237B}: DhcpNameServer = 195.130.131.1 195.130.130.129

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{21FCE72E-4AE8-4B0E-A26C-48A78C9A0F57}: DhcpNameServer = 195.130.131.1 195.130.130.129

O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)

O24 - Desktop WallPaper: C:\Users\Sylvine\AppData\Roaming\Microsoft\Windows Photo Gallery\Bureaubladachtergrond van Windows Fotogalerie.jpg

O24 - Desktop BackupWallPaper: C:\Users\Sylvine\AppData\Roaming\Microsoft\Windows Photo Gallery\Bureaubladachtergrond van Windows Fotogalerie.jpg

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2006/09/18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]

O34 - HKLM BootExecute: (autocheck autochk *)

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

 

========== Files/Folders - Created Within 30 Days ==========

 

[2014/11/05 22:51:49 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Sylvine\Desktop\OTL.exe

[2014/11/05 16:49:09 | 000,000,000 | ---D | C] -- C:\Program Files\TeamViewer

[2014/11/05 16:48:13 | 006,626,856 | ---- | C] (TeamViewer GmbH) -- C:\Users\Sylvine\Desktop\TeamViewer_Setup_nl.exe

[2014/11/01 15:01:06 | 000,000,000 | ---D | C] -- C:\Users\Sylvine\AppData\Roaming\Oracle

[2014/11/01 15:00:43 | 000,000,000 | ---D | C] -- C:\Windows\Sun

[2014/11/01 15:00:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Oracle

[2014/11/01 15:00:11 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java

[2014/11/01 14:59:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

[2014/11/01 14:59:12 | 000,000,000 | ---D | C] -- C:\Program Files\Java

[2014/10/23 12:39:32 | 000,000,000 | ---D | C] -- C:\Windows\System32\EventProviders

 

========== Files - Modified Within 30 Days ==========

 

[2014/11/05 22:51:51 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Sylvine\Desktop\OTL.exe

[2014/11/05 22:36:00 | 000,001,046 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

[2014/11/05 22:23:00 | 000,000,940 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job

[2014/11/05 21:55:11 | 000,000,458 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{F35DC992-CEF3-45B7-B82D-A13B8766B76A}.job

[2014/11/05 21:29:50 | 000,000,286 | ---- | M] () -- C:\ProgramData\hpqp.ini

[2014/11/05 21:29:41 | 000,000,226 | ---- | M] () -- C:\Windows\tasks\OGALogon.job

[2014/11/05 21:29:38 | 000,001,042 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

[2014/11/05 21:29:16 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

[2014/11/05 21:29:16 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

[2014/11/05 21:29:11 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2014/11/05 21:29:04 | 3119,435,776 | -HS- | M] () -- C:\hiberfil.sys

[2014/11/05 20:39:42 | 000,389,304 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT

[2014/11/05 16:49:27 | 000,000,955 | ---- | M] () -- C:\Users\Public\Desktop\TeamViewer 9.lnk

[2014/11/05 16:48:18 | 006,626,856 | ---- | M] (TeamViewer GmbH) -- C:\Users\Sylvine\Desktop\TeamViewer_Setup_nl.exe

[2014/10/31 09:42:15 | 000,001,991 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk

[2014/10/30 09:55:34 | 000,679,804 | ---- | M] () -- C:\Windows\System32\perfh013.dat

[2014/10/30 09:55:34 | 000,671,272 | ---- | M] () -- C:\Windows\System32\perfh00C.dat

[2014/10/30 09:55:34 | 000,131,400 | ---- | M] () -- C:\Windows\System32\perfc013.dat

[2014/10/30 09:55:33 | 000,598,612 | ---- | M] () -- C:\Windows\System32\perfh009.dat

[2014/10/30 09:55:33 | 000,127,260 | ---- | M] () -- C:\Windows\System32\perfc00C.dat

[2014/10/30 09:55:33 | 000,105,284 | ---- | M] () -- C:\Windows\System32\perfc009.dat

[2014/10/22 16:14:28 | 000,002,635 | ---- | M] () -- C:\Users\Sylvine\Desktop\Microsoft Office Word 2003.lnk

 

========== Files Created - No Company Name ==========

 

[2014/11/05 16:49:27 | 000,000,967 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk

[2014/11/05 16:49:27 | 000,000,955 | ---- | C] () -- C:\Users\Public\Desktop\TeamViewer 9.lnk

[2013/01/15 18:41:10 | 000,044,240 | ---- | C] () -- C:\Windows\System32\drivers\fsbts.sys

[2013/01/15 18:39:32 | 000,020,440 | ---- | C] () -- C:\Windows\prodsett_copy.ini

[2009/12/30 17:32:35 | 000,004,755 | ---- | C] () -- C:\Users\Sylvine\verkeerslicht.jpg

[2009/09/19 16:33:53 | 000,005,632 | ---- | C] () -- C:\Users\Sylvine\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2009/07/12 15:04:34 | 000,000,955 | ---- | C] () -- C:\Users\Sylvine\intlname.ols

[2009/06/29 18:53:02 | 000,006,080 | ---- | C] () -- C:\Users\Sylvine\AppData\Local\d3d9caps.dat

[2009/04/17 03:16:19 | 000,000,286 | ---- | C] () -- C:\ProgramData\hpqp.ini

 

========== ZeroAccess Check ==========

 

[2006/11/02 13:51:16 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

"" = %SystemRoot%\system32\shell32.dll -- [2011/01/21 16:46:32 | 011,582,464 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

"" = %systemroot%\system32\wbem\fastprox.dll -- [2009/03/03 05:36:24 | 000,615,424 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

"" = %systemroot%\system32\wbem\wbemess.dll -- [2008/01/21 03:33:39 | 000,347,648 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Both

 

========== LOP Check ==========

 

[2011/12/02 22:46:33 | 000,000,000 | ---D | M] -- C:\Users\Sylvine\AppData\Roaming\F-Secure

[2009/07/18 15:47:50 | 000,000,000 | ---D | M] -- C:\Users\Sylvine\AppData\Roaming\Gaijin Ent

[2014/11/01 15:01:06 | 000,000,000 | ---D | M] -- C:\Users\Sylvine\AppData\Roaming\Oracle

[2009/06/20 16:27:05 | 000,000,000 | ---D | M] -- C:\Users\Sylvine\AppData\Roaming\WildTangent

 

========== Purity Check ==========

 

 

 

< End of report >

 

OTL Extras logfile created on: 5/11/2014 22:54:26 - Run 1

OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Sylvine\Desktop

Windows Vista Home Basic Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation

Internet Explorer (Version = 8.0.6001.19088)

Locale: 00000813 | Country: België | Language: NLB | Date Format: d/MM/yyyy

 

2,90 Gb Total Physical Memory | 1,28 Gb Available Physical Memory | 44,05% Memory free

6,04 Gb Paging File | 4,40 Gb Available in Paging File | 72,76% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files

Drive C: | 222,70 Gb Total Space | 151,22 Gb Free Space | 67,90% Space Free | Partition Type: NTFS

Drive D: | 10,18 Gb Total Space | 1,76 Gb Free Space | 17,27% Space Free | Partition Type: NTFS

 

Computer Name: PC_VAN_SYLVINE | User Name: Sylvine | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Quick Scan

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

 

========== Extra Registry (SafeList) ==========

 

 

========== File Associations ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)

.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

 

========== Shell Spawning ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)

Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

 

========== Security Center Settings ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"cval" = 1

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

"AntiVirusOverride" = 0

"AntiSpywareOverride" = 0

"FirewallOverride" = 0

"VistaSp1" = Reg Error: Unknown registry data type -- File not found

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\S-1-5-21-2512610291-1866108432-2110468150-1000]

"EnableNotifications" = 0

"EnableNotificationsRef" = 1

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

 

========== Firewall Settings ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

 

========== Authorized Applications List ==========

 

 

========== Vista Active Open Ports Exception List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{036686CE-1215-43EB-A2C4-71DFD83DBD8D}" = lport=2869 | protocol=6 | dir=in | app=system | 

"{06B507EF-9160-4DEE-84AD-E240636C2C71}" = rport=137 | protocol=17 | dir=out | app=system | 

"{0B4CF5A7-D844-468E-A42F-C240B2367560}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 

"{0E3C70E7-3401-45F6-9E00-94BB3E4A70A6}" = rport=138 | protocol=17 | dir=out | app=system | 

"{3430CD64-A7D9-4C2F-8EE5-76AE5560A54B}" = rport=445 | protocol=6 | dir=out | app=system | 

"{3B8F55AC-CEAF-46EE-ABB3-40CA1FB78A16}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | 

"{49379D97-9484-43FA-8FF7-4B0F91E696DC}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 

"{5E73A3A0-456C-4BDC-9F1B-59F399A12C79}" = lport=53 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | 

"{65523991-DA9E-476E-936B-C52785C6A2D6}" = lport=67 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | 

"{6DB90C9F-DF42-4B13-A094-0E262E436169}" = lport=547 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | 

"{8A47477C-9EEC-4EAE-B639-38E2F27D3700}" = lport=138 | protocol=17 | dir=in | app=system | 

"{AF60FDA5-449B-4FF7-AB48-0F628198E28F}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | [email protected],-28539 | 

"{B19879F5-2B3D-4FB2-B81D-A252455EF667}" = lport=139 | protocol=6 | dir=in | app=system | 

"{B70FCF56-9541-4B86-9CDC-9A9E6762D49C}" = lport=2869 | protocol=6 | dir=in | app=system | 

"{CF1E4445-BF04-4F33-8975-DE54DAA440BA}" = rport=2869 | protocol=6 | dir=out | app=system | 

"{D445050E-7BC1-4440-98ED-FCDA84A8AF58}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\google\chrome\application\chrome.exe | 

"{DA34191E-4C1F-41C3-80EF-28CE50E6B9C3}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 

"{DFBABE37-F3AB-4855-92BB-BCA6B3774819}" = lport=137 | protocol=17 | dir=in | app=system | 

"{E2AFD6E5-5E77-41EE-B274-0FC885D4BEF7}" = rport=139 | protocol=6 | dir=out | app=system | 

"{E3ECA373-E748-4A7D-A900-4BD1BD32BC84}" = lport=68 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | 

"{F44622C1-CF8E-4D05-B8DB-80CC72197362}" = lport=445 | protocol=6 | dir=in | app=system | 

 

========== Vista Active Application Exception List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{020A2459-96A9-4B88-A3F0-AF33DF666B09}" = dir=in | app=c:\program files\hp\quickplay\qp.exe | 

"{15A6D112-56E3-43D1-BCA0-7920B3A1CCCC}" = dir=in | app=c:\program files\hp\quickplay\qpservice.exe | 

"{2E5A8153-6FB9-453C-A7FD-AA1404408DEE}" = dir=in | app=c:\program files\msn messenger\livecall.exe | 

"{4F5D86B3-8460-45D7-BBD6-17B9688FF378}" = dir=in | app=c:\program files\cyberlink\powerdirector\pdr.exe | 

"{7162150C-6C33-4B49-A3EF-C103245E23FB}" = protocol=58 | dir=out | [email protected],-28546 | 

"{75717999-20F5-42E8-A8AA-09CF78AD9862}" = protocol=58 | dir=in | [email protected],-28545 | 

"{76C3A380-FB7E-4904-9B3B-B39DAF839941}" = protocol=1 | dir=out | [email protected],-28544 | 

"{78CBD371-A311-4BEA-9457-1A90BEFEE8D2}" = protocol=17 | dir=in | app=c:\program files\teamviewer\version9\teamviewer_service.exe | 

"{7A677E53-291D-4859-B4F2-E2816E5F7386}" = protocol=6 | dir=in | app=c:\program files\teamviewer\version9\teamviewer_service.exe | 

"{866BADBA-EC81-49D7-9E52-6EA535CE87E1}" = dir=out | svc=sharedaccess | app=%systemroot%\system32\svchost.exe | 

"{9F6E7926-D6D6-460D-96AC-919CBEFE471D}" = protocol=17 | dir=in | app=c:\program files\teamviewer\version9\teamviewer.exe | 

"{A34242A3-E9E9-481C-BE72-EDC8ECC3C971}" = dir=in | app=c:\program files\skype\phone\skype.exe | 

"{C209987E-128B-453E-BA3E-DB660D830C4F}" = protocol=1 | dir=in | [email protected],-28543 | 

"{C68678D7-30AB-46EA-BB69-5512A1973643}" = dir=in | app=c:\program files\msn messenger\msnmsgr.exe | 

"{EAA3F866-B55D-4106-BC51-49BE103BE511}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 

"{F5C16659-B17E-40E0-BBDC-72D6B16A8FDA}" = protocol=6 | dir=in | app=c:\program files\teamviewer\version9\teamviewer.exe | 

"{FC2D5020-3CF9-490A-8574-256E81B5964A}" = protocol=58 | dir=in | [email protected],-148 | 

 

========== HKEY_LOCAL_MACHINE Uninstall List ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{00000000-2778-5BED-8199-52EB14D8D22F}" = F-Secure CCF Reputation

"{0054A0F6-00C9-4498-B821-B5C9578F433E}" = HP Help and Support

"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam

"{0289B35E-DC07-4c7a-9710-BBD686EA4B7D}" = Status

"{0E7DBD52-B097-4F2B-A7C7-F105B0D20FDB}" = LightScribe System Software  1.14.17.1

"{0F7C2E47-089E-4d23-B9F7-39BE00100776}" = Toolbox

"{101738D7-D805-37A9-BB91-1F2C351782BF}" = Microsoft .NET Framework 3.5 Language Pack SP1 - nld

"{17050C48-16CB-4500-A102-CEAD750CE11E}" = HP User Guides 0138

"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer

"{18669FF9-C8FE-407a-9F70-E674896B1DB4}" = GPBaseService

"{196467F1-C11F-4F76-858B-5812ADC83B94}" = MSXML 4.0 SP3 Parser

"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite

"{228C6B46-64E2-404E-898A-EF0830603EF4}" = HPNetworkAssistant

"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer

"{23C3D009-6194-4FF3-BE24-6CAA46C71B0A}" = Online Safety 2.99.2293.1524

"{254C37AA-6B72-4300-84F6-98A82419187E}" = ActiveCheck component for HP Active Support Library

"{2614F54E-A828-49FA-93BA-45A3F756BFAA}" = 32 Bit HP CIO Components Installer

"{2617FA1F-0C04-3ABB-AF64-7D5B6620C341}" = Microsoft .NET Framework 4 Client Profile NLD Language Pack

"{26A24AE4-039D-4CA4-87B4-2F03217071FF}" = Java 7 Update 71

"{34BFB099-07B2-4E95-A673-7362D60866A2}" = PSSWCORE

"{34D2AB40-150D-475D-AE32-BD23FB5EE355}" = HP Quick Launch Buttons 6.40 M1

"{36FDBE6E-6684-462b-AE98-9A39A1B200CC}" = HPProductAssistant

"{3877C901-7B90-4727-A639-B6ED2DD59D43}" = ESU for Microsoft Vista

"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile

"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go

"{45D707E9-F3C4-11D9-A373-0050BAE317E1}" = HP DVD Play 3.7

"{47F36D92-E58E-456D-B73C-3382737E4C42}" = HP Update

"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater

"{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}" = Google Earth

"{4D9C7DA3-D532-432D-A556-5F6CD186B0A5}" = DJ_AIO_03_F4200_ProductContext

"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.11

"{5109C064-813E-4e87-B0DE-C8AF7B5BC02B}" = SmartWebPrintingOC

"{5158F1F5-FA1B-4D49-B546-55A5004B89BD}" = Microsoft Works

"{57A5AEC1-97FC-474D-92C4-908FCC2253D4}" = HP Customer Experience Enhancements

"{62653245-3DC5-4019-AF6B-4E62D6150D9E}" = F4200_Help

"{658FDBCA-B7A1-43E4-A849-9F0812473331}" = Computer Security 14.99.103.0 (release)

"{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites

"{669D4A35-146B-4314-89F1-1AC3D7B88367}" = HPAsset component for HP Active Support Library

"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder

"{67DFCE0D-BBA9-43AC-90B3-548390ECE522}" = F4200

"{687FEF8A-8597-40b4-832C-297EA3F35817}" = BufferChm

"{6F4F9F2E-3389-49E7-9866-FBB204684D5D}" = F-Secure CCF Scanning 1.43.102.193 (release)

"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder

"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable

"{732A3F80-008B-4350-BD58-EC5AE98707B8}" = HP Common Access Service Library

"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

"{8130C92F-EAED-4969-97CD-1C466C3504F2}" = Telenet Security Pack

"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8169 8168 8101E 8102E Ethernet Driver

"{8A85DEAD-7C1F-4368-881C-72AC74CB2E91}" = UnloadSupport

"{8D7F2A65-0359-4682-AC84-7A2D929EC1A2}" = F-Secure Network CCF 1.02.134

"{90110413-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Editie 2003

"{90120000-0020-0413-0000-0000000FF1CE}" = Compatibiliteitspakket voor het 2007 Microsoft Office system

"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In

"{95A747E0-DF19-46CB-A622-20A0107201BD}" = HP Total Care Setup

"{9C2D4047-0E40-499a-AC7A-C4B9BB12FE03}" = TrayApp

"{9DBCE8C7-FE94-4D8F-9FF0-38EF3D8BC99E}" = DJ_AIO_03_F4200_Software

"{A11409F1-CD33-4076-85CB-4EE4A8439BFE}" = Scan

"{A5AB9D5E-52E2-440e-A3ED-9512E253C81A}" = SolutionCenter

"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper

"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder

"{AC76BA86-7AD7-1043-7B44-A90000000001}" = Adobe Reader 9 - Nederlands

"{AD72CFB4-C2BF-424E-9DF0-C7BAD1F30A11}" = Adobe Shockwave Player

"{ADE14C1E-AA43-45D3-88E5-00767D31B0E8}" = OGA Notifier 1.7.0105.35.0

"{AE9A67F9-ADF1-4a44-BAB5-C1DB302B37A2}" = HP Deskjet F4200 All-In-One Driver Software 10.0 Rel .3

"{B29B526D-F027-4122-BC7A-D9E5BC86CC40}" = DJ_AIO_03_F4200_Software_Min

"{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}" = PMB

"{B8DBED1E-8BC3-4d08-B94A-F9D7D88E9BBF}" = HPSSupply

"{BAD0FA60-09CF-4411-AE6A-C2844C8812FA}" = HP Photosmart Essential 2.5

"{C3A32068-8AB1-4327-BB16-BED9C6219DC7}" = Atheros Driver Installation Program

"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint

"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector

"{CCB9B81A-167F-4832-B305-D2A0430840B3}" = WebReg

"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1

"{CE7E3BE0-2DD3-4416-A690-F9E4A99A8CFF}" = HP Active Support Library

"{D2E0F0CC-6BE0-490b-B08B-9267083E34C9}" = MarketResearch

"{D99A8E3A-AE5A-4692-8B19-6F16D454E240}" = Destination Component

"{DC24971E-1946-445D-8A82-CE685433FA7D}" = Realtek USB 2.0 Card Reader

"{E08DC77E-D09A-4e36-8067-D6DBBCC5F8DC}" = VideoToolkit01

"{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio

"{E5E29403-3D25-40C6-892B-F9FEE2A95585}" = HP Wireless Assistant

"{ECEE0279-785F-4CB3-9F28-E69813234BF8}" = SPORE Creature Creator Trial Edition

"{EF1ADA5A-0B1A-4662-8C55-7475A61D8B65}" = DeviceDiscovery

"{EFD9F1E7-B80B-4D97-80BA-2B80FCE6DABB}" = F-Secure SafeSearch 1.03.146.0 (release)

"{F42CD69D-E393-47c8-B2CD-B139C4ADA9A8}" = Copy

"Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites

"Adobe Flash Player ActiveX" = Adobe Flash Player 15 ActiveX

"CCleaner" = CCleaner

"F-Secure ServiceEnabler 44163" = Telenet Security Pack

"Google Chrome" = Google Chrome

"HDMI" = Intel® Graphics Media Accelerator Driver

"HP Imaging Device Functions" = HP Imaging Device Functions 10.0

"HP Photosmart Essential" = HP Photosmart Essential 2.5

"HP Smart Web Printing" = HP Smart Web Printing

"HP Solution Center & Imaging Support Tools" = HP Solution Center 10.0

"HPExtendedCapabilities" = HP Customer Participation Program 10.0

"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam

"InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite

"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go

"InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint

"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector

"Microsoft .NET Framework 3.5 Language Pack SP1 - nld" = Taalpakket voor Microsoft .NET Framework 3.5 SP1 - NL

"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1

"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile

"Microsoft .NET Framework 4 Client Profile NLD Language Pack" = Taalpakket voor Microsoft .NET Framework 4 Client Profile - NLD

"Quick Search Box" = Snelzoekvak van Google

"Shop for HP Supplies" = Shop for HP Supplies

"SynTPDeinstKey" = Synaptics Pointing Device Driver

"TeamViewer 9" = TeamViewer 9

"WildTangent hp Master Uninstall" = My HP Games

 

========== Last 20 Event Log Errors ==========

 

[ Application Events ]

Error - 3/03/2012 14:15:39 | Computer Name = PC_van_Sylvine | Source = Windows Search Service | ID = 3013

Description = 

 

Error - 10/03/2012 8:07:27 | Computer Name = PC_van_Sylvine | Source = WinMgmt | ID = 10

Description = 

 

Error - 10/03/2012 8:12:11 | Computer Name = PC_van_Sylvine | Source = Microsoft-Windows-CAPI2 | ID = 131083

Description = 

 

Error - 10/03/2012 8:12:13 | Computer Name = PC_van_Sylvine | Source = Microsoft-Windows-CAPI2 | ID = 131083

Description = 

 

Error - 10/03/2012 8:26:19 | Computer Name = PC_van_Sylvine | Source = Microsoft-Windows-CAPI2 | ID = 131083

Description = 

 

Error - 10/03/2012 8:26:19 | Computer Name = PC_van_Sylvine | Source = Microsoft-Windows-CAPI2 | ID = 131083

Description = 

 

Error - 10/03/2012 8:26:22 | Computer Name = PC_van_Sylvine | Source = Microsoft-Windows-CAPI2 | ID = 131083

Description = 

 

Error - 10/03/2012 8:26:26 | Computer Name = PC_van_Sylvine | Source = Microsoft-Windows-CAPI2 | ID = 131083

Description = 

 

Error - 10/03/2012 11:07:37 | Computer Name = PC_van_Sylvine | Source = Microsoft-Windows-CAPI2 | ID = 131083

Description = 

 

Error - 10/03/2012 11:07:37 | Computer Name = PC_van_Sylvine | Source = Microsoft-Windows-CAPI2 | ID = 131083

Description = 

 

[ System Events ]

Error - 5/11/2014 15:40:45 | Computer Name = PC_van_Sylvine | Source = Service Control Manager | ID = 7009

Description = 

 

Error - 5/11/2014 15:40:45 | Computer Name = PC_van_Sylvine | Source = Service Control Manager | ID = 7000

Description = 

 

Error - 5/11/2014 15:42:10 | Computer Name = PC_van_Sylvine | Source = Service Control Manager | ID = 7022

Description = 

 

Error - 5/11/2014 15:47:05 | Computer Name = PC_van_Sylvine | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001

Description = 

 

Error - 5/11/2014 15:55:13 | Computer Name = PC_van_Sylvine | Source = Microsoft-Windows-LanguagePackSetup | ID = 1003

Description = 

 

Error - 5/11/2014 16:29:14 | Computer Name = PC_van_Sylvine | Source = HTTP | ID = 15016

Description = 

 

Error - 5/11/2014 16:30:44 | Computer Name = PC_van_Sylvine | Source = Service Control Manager | ID = 7000

Description = 

 

Error - 5/11/2014 16:30:57 | Computer Name = PC_van_Sylvine | Source = Service Control Manager | ID = 7022

Description = 

 

Error - 5/11/2014 16:32:54 | Computer Name = PC_van_Sylvine | Source = Microsoft-Windows-LanguagePackSetup | ID = 1001

Description = 

 

Error - 5/11/2014 16:45:19 | Computer Name = PC_van_Sylvine | Source = Microsoft-Windows-LanguagePackSetup | ID = 1003

Description = 

 

 

< End of report >

 

 

[Advertisements]

Do we know us?

Please download FRST (by Farbar) from the link below and save it to your Desktop.

Download Mirror #1

If you are unsure whether you have 32-Bit or 64-Bit Windows, see here

• Disable all anti-virus and anti-malware software to prevent them inhibiting FRST in any way. If you are unsure how to do this, see THIS.
• Double-click FRST.exe/FRST64.exe (depending on which version you downloaded) to run it. (if you have Windows Vista / Windows 7 / Windows 8: Please do a Right click on the FRST icon and select Run as Administrator)
• When the disclaimer appears, click Yes.
• Click Scan to start FRST.
• When FRST finishes scanning, two logs, FRST.txt and Addition.txt will open.
• Copy (Ctrl+C) and Paste (Ctrl+V) the contents of both of these logs into your next post please.

[Machiavelli]

Do we know us?

Please download FRST (by Farbar) from the link below and save it to your Desktop.

Download Mirror #1

If you are unsure whether you have 32-Bit or 64-Bit Windows, see here

• Disable all anti-virus and anti-malware software to prevent them inhibiting FRST in any way. If you are unsure how to do this, see THIS.
• Double-click FRST.exe/FRST64.exe (depending on which version you downloaded) to run it. (if you have Windows Vista / Windows 7 / Windows 8: Please do a Right click on the FRST icon and select Run as Administrator)
• When the disclaimer appears, click Yes.
• Click Scan to start FRST.
• When FRST finishes scanning, two logs, FRST.txt and Addition.txt will open.
• Copy (Ctrl+C) and Paste (Ctrl+V) the contents of both of these logs into your next post please.

[HaraMo]

Results of scan with FRST.exe ( windows vista 32 bit, right click , as administrator):

 

 

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 10-11-2014

Ran by Sylvine at 2014-11-12 12:46:18

Running from C:\Users\Sylvine\Desktop

Boot Mode: Normal

==========================================================

 

 

==================== Security Center ========================

 

(If an entry is included in the fixlist, it will be removed.)

 

AV: Computer Bescherming (Disabled - Up to date) {15414183-282E-D62C-CA37-EF24860A2F17}

AS: Computer Bescherming (Disabled - Up to date) {AE20A067-0E14-D9A2-F087-D456FD8D65AA}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

 

==================== Installed Programs ======================

 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

 

32 Bit HP CIO Components Installer (Version: 2.1.5 - Hewlett-Packard) Hidden

Activation Assistant for the 2007 Microsoft Office suites (HKLM\...\Activation Assistant for the 2007 Microsoft Office suites) (Version:  - Microsoft Corporation)

Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0 - Microsoft Corporation) Hidden

ActiveCheck component for HP Active Support Library (Version: 1.1.18.0 - Hewlett-Packard) Hidden

Adobe Flash Player 15 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 15.0.0.223 - Adobe Systems Incorporated)

Adobe Reader 9 - Nederlands (HKLM\...\{AC76BA86-7AD7-1043-7B44-A90000000001}) (Version: 9.0.0 - Adobe Systems Incorporated)

Adobe Shockwave Player (HKLM\...\{AD72CFB4-C2BF-424E-9DF0-C7BAD1F30A11}) (Version: 11.0 - Adobe Systems, Inc.)

Atheros Driver Installation Program (HKLM\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 5.0 - Atheros)

BufferChm (Version: 100.0.170.000 - Hewlett-Packard) Hidden

CCleaner (HKLM\...\CCleaner) (Version: 3.24 - Piriform)

Compatibiliteitspakket voor het 2007 Microsoft Office system (HKLM\...\{90120000-0020-0413-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)

Computer Security 14.99.103.0 (release) (Version: 14.99.103.0 - F-Secure Corporation) Hidden

Copy (Version: 100.0.170.000 - Hewlett-Packard) Hidden

CustomerResearchQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden

CyberLink DVD Suite (HKLM\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 6.0.2424 - CyberLink Corp.)

CyberLink YouCam (HKLM\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 2.0.2512 - CyberLink Corp.)

Destination Component (Version: 100.0.0.0 - Hewlett-Packard) Hidden

DeviceDiscovery (Version: 110.0.180.000 - Hewlett-Packard) Hidden

DeviceManagementQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden

DJ_AIO_03_F4200_ProductContext (Version: 100.0.215.000 - Hewlett-Packard) Hidden

DJ_AIO_03_F4200_Software (Version: 100.0.206.000 - Hewlett-Packard) Hidden

DJ_AIO_03_F4200_Software_Min (Version: 100.0.213.000 - Hewlett-Packard) Hidden

ESU for Microsoft Vista (HKLM\...\{3877C901-7B90-4727-A639-B6ED2DD59D43}) (Version: 1.0.0 - Hewlett-Packard)

eSupportQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden

F4200 (Version: 100.0.206.000 - Uw bedrijfsnaam) Hidden

F4200_Help (Version: 100.0.206.000 - Hewlett-Packard) Hidden

F-Secure CCF Reputation (Version: 1.1.25.2280 - F-Secure) Hidden

F-Secure CCF Scanning 1.43.102.193 (release) (Version: 1.43.102.193 - F-Secure Corporation) Hidden

F-Secure Network CCF 1.02.134 (Version: 1.02.134 - F-Secure Corporation) Hidden

F-Secure SafeSearch 1.03.146.0 (release) (Version: 1.03.146.0 - F-Secure Corporation) Hidden

Google Chrome (HKLM\...\Google Chrome) (Version: 38.0.2125.111 - Google Inc.)

Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)

Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)

Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden

Google Update Helper (Version: 1.3.25.5 - Google Inc.) Hidden

GPBaseService (Version: 100.0.187.000 - Hewlett-Packard) Hidden

HP Active Support Library (HKLM\...\{CE7E3BE0-2DD3-4416-A690-F9E4A99A8CFF}) (Version: 3.1.9.1 - Hewlett-Packard)

HP Customer Experience Enhancements (HKLM\...\{57A5AEC1-97FC-474D-92C4-908FCC2253D4}) (Version: 5.7.0.2664 - Hewlett-Packard)

HP Customer Participation Program 10.0 (HKLM\...\HPExtendedCapabilities) (Version: 10.0 - HP)

HP Deskjet F4200 All-In-One Driver Software 10.0 Rel .3 (HKLM\...\{AE9A67F9-ADF1-4a44-BAB5-C1DB302B37A2}) (Version: 10.0 - HP)

HP DVD Play 3.7 (HKLM\...\{45D707E9-F3C4-11D9-A373-0050BAE317E1}) (Version: 3.7.0.5723 - Hewlett-Packard)

HP Help and Support (HKLM\...\{0054A0F6-00C9-4498-B821-B5C9578F433E}) (Version: 2.1.3.0 - Hewlett-Packard Company)

HP Imaging Device Functions 10.0 (HKLM\...\HP Imaging Device Functions) (Version: 10.0 - HP)

HP Photosmart Essential 2.5 (HKLM\...\HP Photosmart Essential) (Version: 2.5 - HP)

HP Quick Launch Buttons 6.40 M1 (HKLM\...\{34D2AB40-150D-475D-AE32-BD23FB5EE355}) (Version: 6.40 M1 - Hewlett-Packard)

HP Smart Web Printing (HKLM\...\HP Smart Web Printing) (Version: 3.5 - HP)

HP Solution Center 10.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 10.0 - HP)

HP Total Care Setup (HKLM\...\{95A747E0-DF19-46CB-A622-20A0107201BD}) (Version: 1.1.2413.2876 - Hewlett-Packard Company)

HP Update (HKLM\...\{47F36D92-E58E-456D-B73C-3382737E4C42}) (Version: 4.000.013.003 - Hewlett-Packard)

HP User Guides 0138 (HKLM\...\{17050C48-16CB-4500-A102-CEAD750CE11E}) (Version: 1.01.0000 - Hewlett-Packard)

HP Wireless Assistant (HKLM\...\{E5E29403-3D25-40C6-892B-F9FEE2A95585}) (Version: 3.50 A6 - Hewlett-Packard)

HPAsset component for HP Active Support Library (Version: 2.0.64.3 - Hewlett-Packard) Hidden

HPNetworkAssistant (Version: 1.1.70 - Hewlett-Packard.) Hidden

HPProductAssistant (Version: 100.0.170.000 - Hewlett-Packard) Hidden

HPSSupply (Version: 100.0.170.000 - Hewlett-Packard) Hidden

IDT Audio (HKLM\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6140.0 - IDT)

Intel® Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version:  - Intel Corporation)

Java 7 Update 71 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)

LabelPrint (HKLM\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1224 - CyberLink Corp.)

LabelPrint (Version: 2.5.1224 - CyberLink Corp.) Hidden

LightScribe System Software  1.14.17.1 (HKLM\...\{0E7DBD52-B097-4F2B-A7C7-F105B0D20FDB}) (Version: 1.14.17.1 - LightScribe)

MarketResearch (Version: 100.0.170.000 - Hewlett-Packard) Hidden

Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)

Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office Professional Editie 2003 (HKLM\...\{90110413-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Works (HKLM\...\{5158F1F5-FA1B-4D49-B546-55A5004B89BD}) (Version: 9.7.0621 - Microsoft Corporation)

MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB973685) (HKLM\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)

My HP Games (HKLM\...\WildTangent hp Master Uninstall) (Version: 1.0.0.62 - WildTangent)

OGA Notifier 1.7.0105.35.0 (Version: 1.7.0105.35.0 - Microsoft Corporation) Hidden

Online Safety 2.99.2293.1524 (Version: 2.99.2293.1524 - F-Secure Corporation) Hidden

PMB (HKLM\...\{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}) (Version: 5.5.02.12220 - Sony Corporation)

Power2Go (HKLM\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.0.2423 - CyberLink Corp.)

Power2Go (Version: 6.0.2423 - CyberLink Corp.) Hidden

PowerDirector (HKLM\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 7.0.2424 - CyberLink Corp.)

PowerDirector (Version: 7.0.2424 - CyberLink Corp.) Hidden

PSSWCORE (Version: 2.02.0000 - Hewlett-Packard) Hidden

Realtek 8169 8168 8101E 8102E Ethernet Driver (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0000 - Realtek)

Realtek USB 2.0 Card Reader (HKLM\...\{DC24971E-1946-445D-8A82-CE685433FA7D}) (Version: 6.0.6000.20115 - Realtek Semiconductor Corp.)

Scan (Version: 10.0.0.0 - Hewlett-Packard) Hidden

Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 10.0 - HP)

Skype™ 6.11 (HKLM\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)

SmartWebPrintingOC (Version: 100.0.189.000 - Hewlett-Packard) Hidden

Snelzoekvak van Google (HKLM\...\Quick Search Box) (Version: 1.2.1151.245 - Google, Inc.)

SolutionCenter (Version: 100.0.175.000 - Hewlett-Packard) Hidden

SPORE Creature Creator Trial Edition (HKLM\...\{ECEE0279-785F-4CB3-9F28-E69813234BF8}) (Version: 1.00.0000 - Electronic Arts)

Status (Version: 110.0.180.000 - Hewlett-Packard) Hidden

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 12.1.0.0 - Synaptics)

Taalpakket voor Microsoft .NET Framework 3.5 SP1 - NL (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - nld) (Version:  - Microsoft Corporation)

Taalpakket voor Microsoft .NET Framework 4 Client Profile - NLD (HKLM\...\Microsoft .NET Framework 4 Client Profile NLD Language Pack) (Version: 4.0.30319 - Microsoft Corporation)

TeamViewer 9 (HKLM\...\TeamViewer 9) (Version: 9.0.32494 - TeamViewer)

Telenet Security Pack (HKLM\...\F-Secure ServiceEnabler 44163) (Version: 1.99.192.0 - F-Secure Corporation)

Telenet Security Pack (Version: 1.99.192.0 - F-Secure Corporation) Hidden

Toolbox (Version: 100.0.170.000 - Hewlett-Packard) Hidden

TrayApp (Version: 110.0.180.000 - Hewlett-Packard) Hidden

UnloadSupport (Version: 10.0.0 - Hewlett-Packard) Hidden

VideoToolkit01 (Version: 100.0.128.000 - Hewlett-Packard) Hidden

WebReg (Version: 100.0.170.000 - Hewlett-Packard) Hidden

 

==================== Custom CLSID (selected items): ==========================

 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

 

CustomCLSID: HKU\S-1-5-21-2512610291-1866108432-2110468150-1000_Classes\CLSID\{039B2CA5-3B41-4D93-AD77-47D3293FC5CB}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll No File

CustomCLSID: HKU\S-1-5-21-2512610291-1866108432-2110468150-1000_Classes\CLSID\{42481700-CF3C-4D05-8EC6-F9A1C57E8DC0}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll No File

CustomCLSID: HKU\S-1-5-21-2512610291-1866108432-2110468150-1000_Classes\CLSID\{9E385F0A-0BA2-430C-96AA-4399C5E40F6C}\localserver32 -> C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.)

CustomCLSID: HKU\S-1-5-21-2512610291-1866108432-2110468150-1000_Classes\CLSID\{BB6410D8-F879-4184-9C5C-6A02D16AE0B3}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll No File

CustomCLSID: HKU\S-1-5-21-2512610291-1866108432-2110468150-1000_Classes\CLSID\{CA1073A2-5F3F-4445-8E5E-7109BDCEDDBE}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll No File

CustomCLSID: HKU\S-1-5-21-2512610291-1866108432-2110468150-1000_Classes\CLSID\{D0D38C6E-BF64-4C42-840D-3E0019D9F7A6}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll No File

CustomCLSID: HKU\S-1-5-21-2512610291-1866108432-2110468150-1000_Classes\CLSID\{D5A55D2D-C59D-42C3-A5BF-4C08EEE74339}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll No File

 

==================== Restore Points  =========================

 

01-11-2014 13:56:49 Installed Java 7 Update 71

01-11-2014 14:01:55 Taalpakket verwijderen

01-11-2014 19:58:43 Taalpakket verwijderen

05-11-2014 14:19:11 Taalpakket verwijderen

05-11-2014 19:54:22 Taalpakket verwijderen

05-11-2014 20:44:45 Taalpakket verwijderen

06-11-2014 07:54:57 Taalpakket verwijderen

06-11-2014 12:24:29 Taalpakket verwijderen

07-11-2014 23:00:02 Gepland herstelpunt

09-11-2014 13:28:21 Taalpakket verwijderen

10-11-2014 14:36:52 Taalpakket verwijderen

11-11-2014 19:53:02 Taalpakket verwijderen

12-11-2014 02:00:18 Windows Update

12-11-2014 11:32:59 Taalpakket verwijderen

 

==================== Hosts content: ==========================

 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

 

2006-11-02 11:23 - 2006-09-18 22:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost

::1             localhost

 

==================== Scheduled Tasks (whitelisted) =============

 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

 

Task: {1AC8830F-AF24-4D6E-85EA-B69A455982B3} - System32\Tasks\OGADaily => C:\Windows\system32\OGAVerify.exe [2008-12-31] ()

Task: {2D9E12E8-7806-4B97-B416-ADD2A7B1D8C5} - System32\Tasks\{563586EF-CD43-487A-85E4-422373CCCF83} => Iexplore.exe http://ui.skype.com/...red;notincluded

Task: {39C36A0F-B6A6-4A4F-8B5B-1598A7BD969D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-11] (Adobe Systems Incorporated)

Task: {6C84005D-5B33-46BB-A96C-212799BA904B} - System32\Tasks\{8A0EF864-7743-4E23-B5D8-687E2A1458ED} => Iexplore.exe http://ui.skype.com/...red;notincluded

Task: {743FE249-DF7C-4D51-8076-5808D951ED01} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-29] (Google Inc.)

Task: {A04D46B1-3713-4506-9EE2-5851092F3B8E} - System32\Tasks\HP Health Check => c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [2008-10-09] (Hewlett-Packard)

Task: {AA3E8B27-E4E7-41EA-BDA1-8C82686201F7} - System32\Tasks\{4A25501F-3BAA-4BB9-9FF1-5E235D074E5F} => Iexplore.exe http://ui.skype.com/...red;notincluded

Task: {C42933EC-4BDA-46C5-8CAD-50B9186CB3AC} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-10-24] (Piriform Ltd)

Task: {C9160E8A-1D2C-44BA-9CD5-922C4610B0DF} - System32\Tasks\OGALogon => C:\Windows\system32\OGAVerify.exe [2008-12-31] ()

Task: {DAE1EED6-DA66-4454-AA04-4428B81048DD} - System32\Tasks\{B142A561-F3A6-46A5-855E-D8CADE344090} => Iexplore.exe http://ui.skype.com/...red;notincluded

Task: {E5195263-A109-4B36-A748-B393CBBBBDAE} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-29] (Google Inc.)

 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

 

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\OGADaily.job => C:\Windows\system32\OGAVerify.exe

Task: C:\Windows\Tasks\OGALogon.job => C:\Windows\system32\OGAVerify.exe

Task: C:\Windows\Tasks\User_Feed_Synchronization-{F35DC992-CEF3-45B7-B82D-A13B8766B76A}.job => C:\Windows\system32\msfeedssync.exe

 

==================== Loaded Modules (whitelisted) =============

 

2013-01-15 18:38 - 2013-11-26 10:58 - 00045608 _____ () C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Anti-Virus\FSAVHRES.eng

2013-12-11 13:35 - 2013-12-11 13:35 - 00220200 _____ () C:\Program Files\Telenet Security Pack\daas2.dll

2009-03-13 07:46 - 2008-12-23 16:18 - 00365952 _____ () C:\Program Files\SMINST\BLService.exe

2009-03-13 07:46 - 2008-12-23 16:18 - 00132480 _____ () C:\Program Files\SMINST\STWmiM.dll

2009-03-13 06:59 - 2008-11-26 00:29 - 00247152 _____ () C:\Program Files\CyberLink\Shared files\RichVideo.exe

2010-01-29 17:13 - 2011-12-02 22:44 - 00103424 _____ () C:\Program Files\Google\Quick Search Box\bin\1.2.1151.245\rlz.dll

2013-01-15 18:38 - 2013-11-26 10:58 - 00056360 _____ () C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\FSGUI\fsavures.eng

2014-06-07 09:29 - 2014-06-07 09:29 - 00592936 _____ () C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.77_none_b59ef0c311fca244\QtMultimediaKit1.dll

2007-07-12 12:55 - 2007-07-12 12:55 - 01581056 _____ () C:\Program Files\Common Files\LightScribe\QtCore4.dll

2007-08-14 12:59 - 2007-08-14 12:59 - 06365184 _____ () C:\Program Files\Common Files\LightScribe\QtGui4.dll

2007-07-12 12:55 - 2007-07-12 12:55 - 00131072 _____ () C:\Program Files\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll

2013-01-16 11:16 - 2013-01-16 11:16 - 00030888 _____ () C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Anti-Virus\minifilter\hashlib_x86.dll

2013-01-15 18:39 - 2014-06-07 09:42 - 00212008 _____ () C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Spam Control\fsas.dll

2008-10-22 10:32 - 2008-10-22 10:32 - 00628016 _____ () C:\Program Files\Hewlett-Packard\Shared\hpqToaster.exe

 

==================== Alternate Data Streams (whitelisted) =========

 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

 

 

==================== Safe Mode (whitelisted) ===================

 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

 

==================== EXE Association (whitelisted) =============

 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

 

 

==================== MSCONFIG/TASK MANAGER disabled items =========

 

(Currently there is no automatic fix for this section.)

 

MSCONFIG\Services: GameConsoleService => 3

MSCONFIG\Services: SkypeUpdate => 2

MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

MSCONFIG\startupreg: MsnMsgr => "C:\Program Files\MSN Messenger\msnmsgr.exe" /background

MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized

MSCONFIG\startupreg: swg => "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

MSCONFIG\startupreg: UpdatePDIRShortCut => "C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\PowerDirector" UpdateWithCreateOnce "SOFTWARE\CyberLink\PowerDirector\7.0"

MSCONFIG\startupreg: Windows Defender => %ProgramFiles%\Windows Defender\MSASCui.exe -hide

 

========================= Accounts: ==========================

 

Administrator (S-1-5-21-2512610291-1866108432-2110468150-500 - Administrator - Disabled)

Gast (S-1-5-21-2512610291-1866108432-2110468150-501 - Limited - Disabled)

Sylvine (S-1-5-21-2512610291-1866108432-2110468150-1000 - Administrator - Enabled) => C:\Users\Sylvine

 

==================== Faulty Device Manager Devices =============

 

 

==================== Event log errors: =========================

 

Application errors:

==================

Error: (11/12/2014 00:20:50 PM) (Source: Windows Search Service) (EventID: 3024) (User: )

Description: De update kan niet worden gestart omdat er geen toegang kan worden verkregen tot de inhoudsbronnen. Herstel de fouten en probeer de update opnieuw uit te voeren.

 

Context: toepassing , catalogus SystemIndex

 

Error: (11/12/2014 00:18:57 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (11/12/2014 00:13:37 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (11/12/2014 03:06:34 AM) (Source: Perflib) (EventID: 1008) (User: )

Description: PNRPsvcC:\Windows\system32\pnrpperf.dll4

 

Error: (11/12/2014 03:06:33 AM) (Source: Perflib) (EventID: 1010) (User: )

Description: EmdCacheC:\Windows\system32\emdmgmt.dll4

 

Error: (11/11/2014 08:39:04 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (11/10/2014 03:22:51 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (11/09/2014 02:14:22 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (11/06/2014 01:10:32 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (11/06/2014 08:40:58 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

 

System errors:

=============

Error: (11/12/2014 00:33:27 PM) (Source: Microsoft-Windows-LanguagePackSetup) (EventID: 1003) (User: NT AUTHORITY)

Description: 0x800f0825fr-FR

 

Error: (11/12/2014 00:20:16 PM) (Source: Microsoft-Windows-LanguagePackSetup) (EventID: 1001) (User: NT AUTHORITY)

Description: 0x80070032

 

Error: (11/12/2014 00:19:03 PM) (Source: Service Control Manager) (EventID: 7022) (User: )

Description: HP CUE DeviceDiscovery-service

 

Error: (11/12/2014 00:18:57 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Parallel port driver%%1058

 

Error: (11/12/2014 00:17:28 PM) (Source: HTTP) (EventID: 15016) (User: )

Description: \Device\Http\ReqQueueKerberos

 

Error: (11/12/2014 00:13:39 PM) (Source: Service Control Manager) (EventID: 7022) (User: )

Description: HP CUE DeviceDiscovery-service

 

Error: (11/12/2014 00:13:37 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Parallel port driver%%1058

 

Error: (11/12/2014 00:12:08 PM) (Source: HTTP) (EventID: 15016) (User: )

Description: \Device\Http\ReqQueueKerberos

 

Error: (11/11/2014 08:54:02 PM) (Source: Microsoft-Windows-LanguagePackSetup) (EventID: 1003) (User: NT AUTHORITY)

Description: 0x800f0825fr-FR

 

Error: (11/11/2014 08:41:47 PM) (Source: Microsoft-Windows-LanguagePackSetup) (EventID: 1001) (User: NT AUTHORITY)

Description: 0x80070032

 

 

Microsoft Office Sessions:

=========================

Error: (11/12/2014 00:20:50 PM) (Source: Windows Search Service) (EventID: 3024) (User: )

Description: Context: toepassing , catalogus SystemIndex

 

Error: (11/12/2014 00:18:57 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (11/12/2014 00:13:37 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (11/12/2014 03:06:34 AM) (Source: Perflib) (EventID: 1008) (User: )

Description: PNRPsvcC:\Windows\system32\pnrpperf.dll4

 

Error: (11/12/2014 03:06:33 AM) (Source: Perflib) (EventID: 1010) (User: )

Description: EmdCacheC:\Windows\system32\emdmgmt.dll4

 

Error: (11/11/2014 08:39:04 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (11/10/2014 03:22:51 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (11/09/2014 02:14:22 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (11/06/2014 01:10:32 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

Error: (11/06/2014 08:40:58 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

 

 

CodeIntegrity Errors:

===================================

  Date: 2014-11-12 12:45:56.796

  Description: De integriteit van de kopie voor het bestand \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys kan niet worden geverifieerd omdat de reeks kopie-hashes per pagina niet is gevonden op het systeem.

 

  Date: 2014-11-12 12:45:56.544

  Description: De integriteit van de kopie voor het bestand \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys kan niet worden geverifieerd omdat de reeks kopie-hashes per pagina niet is gevonden op het systeem.

 

  Date: 2014-11-12 12:45:56.299

  Description: De integriteit van de kopie voor het bestand \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys kan niet worden geverifieerd omdat de reeks kopie-hashes per pagina niet is gevonden op het systeem.

 

  Date: 2014-11-12 12:45:56.038

  Description: De integriteit van de kopie voor het bestand \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys kan niet worden geverifieerd omdat de reeks kopie-hashes per pagina niet is gevonden op het systeem.

 

  Date: 2014-11-12 12:45:55.767

  Description: De integriteit van de kopie voor het bestand \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys kan niet worden geverifieerd omdat de reeks kopie-hashes per pagina niet is gevonden op het systeem.

 

  Date: 2014-11-12 12:45:55.555

  Description: De integriteit van de kopie voor het bestand \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys kan niet worden geverifieerd omdat de reeks kopie-hashes per pagina niet is gevonden op het systeem.

 

  Date: 2014-11-12 12:45:55.322

  Description: De integriteit van de kopie voor het bestand \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys kan niet worden geverifieerd omdat de reeks kopie-hashes per pagina niet is gevonden op het systeem.

 

  Date: 2014-11-12 12:45:55.073

  Description: De integriteit van de kopie voor het bestand \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys kan niet worden geverifieerd omdat de reeks kopie-hashes per pagina niet is gevonden op het systeem.

 

  Date: 2014-11-12 12:35:57.120

  Description: De integriteit van de kopie voor het bestand \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys kan niet worden geverifieerd omdat de reeks kopie-hashes per pagina niet is gevonden op het systeem.

 

  Date: 2014-11-12 12:35:56.751

  Description: De integriteit van de kopie voor het bestand \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys kan niet worden geverifieerd omdat de reeks kopie-hashes per pagina niet is gevonden op het systeem.

 

 

==================== Memory info =========================== 

 

Processor: Pentium® Dual-Core CPU T4200 @ 2.00GHz

Percentage of memory in use: 44%

Total physical RAM: 2973.98 MB

Available physical RAM: 1663.21 MB

Total Pagefile: 6172.29 MB

Available Pagefile: 4848.77 MB

Total Virtual: 2047.88 MB

Available Virtual: 1904.18 MB

 

==================== Drives ================================

 

Drive c: () (Fixed) (Total:222.7 GB) (Free:152.03 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Drive d: (RECOVERY) (Fixed) (Total:10.18 GB) (Free:1.76 GB) NTFS ==>[System with boot components (obtained from reading drive)]

 

==================== MBR & Partition Table ==================

 

========================================================

Disk: 0 (Size: 232.9 GB) (Disk ID: 97466647)

Partition 1: (Active) - (Size=222.7 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=10.2 GB) - (Type=07 NTFS)

 

==================== End Of Log ============================

 

 

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 10-11-2014

Ran by Sylvine (administrator) on PC_VAN_SYLVINE on 12-11-2014 12:45:27

Running from C:\Users\Sylvine\Desktop

Loaded Profile: Sylvine (Available profiles: Sylvine)

Platform: Microsoft® Windows Vista™ Home Basic  Service Pack 1 (X86) OS Language: Nederlands (Nederland)

Internet Explorer Version 8

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

 

==================== Processes (Whitelisted) =================

 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

 

(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_fa807195\stacsv.exe

(Microsoft Corporation) C:\Windows\System32\SLsvc.exe

(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_fa807195\AEstSrv.exe

(F-Secure Corporation) C:\Program Files\Telenet Security Pack\fshoster32.exe

(F-Secure Corporation) C:\Program Files\Telenet Security Pack\apps\CCF_Reputation\fsorsp.exe

(F-Secure Corporation) C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Anti-Virus\fsgk32.exe

(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe

(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\VS7DEBUG\MDM.EXE

(Sony Corporation) C:\Program Files\Sony\PMB\PMBDeviceInfoProvider.exe

() C:\Program Files\SMINST\BLService.exe

() C:\Program Files\CyberLink\Shared files\RichVideo.exe

(TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe

(TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\TeamViewer.exe

(TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\tv_w32.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Intel Corporation) C:\Windows\System32\igfxsrvc.exe

(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe

(CyberLink Corp.) C:\Program Files\HP\QuickPlay\QPService.exe

( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe

(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuSchd2.exe

(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe

(Google Inc.) C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe

(Sony Corporation) C:\Program Files\Sony\PMB\PMBVolumeWatcher.exe

(F-Secure Corporation) C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Common\FSM32.EXE

(F-Secure Corporation) C:\Program Files\Telenet Security Pack\fshoster32.exe

(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe

(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe

(Google Inc.) C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

(F-Secure Corporation) C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Common\FSMA32.EXE

(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe

(F-Secure Corporation) C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Anti-Virus\fssm32.exe

(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe

(Hewlett-Packard) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe

() C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe

(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Service.exe

(Microsoft Corporation) C:\Windows\System32\wuauclt.exe

(TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\TeamViewer_Desktop.exe

(Microsoft Corporation) C:\Windows\System32\conime.exe

 

 

==================== Registry (Whitelisted) ==================

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

 

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1410344 2008-12-04] (Synaptics, Inc.)

HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray.exe [483420 2009-01-20] (IDT, Inc.)

HKLM\...\Run: [QPService] => C:\Program Files\HP\QuickPlay\QPService.exe [468264 2008-09-23] (CyberLink Corp.)

HKLM\...\Run: [UpdateLBPShortCut] => C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [210216 2008-06-13] (CyberLink Corp.)

HKLM\...\Run: [UpdatePSTShortCut] => C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe [210216 2008-12-24] (CyberLink Corp.)

HKLM\...\Run: [UCam_Menu] => C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [218408 2008-12-03] (CyberLink Corp.)

HKLM\...\Run: [QlbCtrl.exe] => C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [206128 2008-10-10] ( Hewlett-Packard Development Company, L.P.)

HKLM\...\Run: [UpdateP2GoShortCut] => C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [210216 2008-10-30] (CyberLink Corp.)

HKLM\...\Run: [HP Health Check Scheduler] => c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [75008 2008-10-09] (Hewlett-Packard)

HKLM\...\Run: [HP Software Update] => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49152 2007-10-14] (Hewlett-Packard)

HKLM\...\Run: [WirelessAssistant] => C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [432432 2008-12-08] (Hewlett-Packard)

HKLM\...\Run: [hpqSRMon] => C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe [80896 2008-06-02] (Hewlett-Packard)

HKLM\...\Run: [Google Quick Search Box] => C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe [122368 2009-08-14] (Google Inc.)

HKLM\...\Run: [PMBVolumeWatcher] => C:\Program Files\Sony\PMB\PMBVolumeWatcher.exe [648032 2010-11-26] (Sony Corporation)

HKLM\...\Run: [F-Secure Manager] => C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Common\FSM32.EXE [310312 2013-11-26] (F-Secure Corporation)

HKLM\...\Run: [F-Secure Hoster (44163)] => C:\Program Files\Telenet Security Pack\fshoster32.exe [191528 2013-12-11] (F-Secure Corporation)

HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)

HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter

HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter

HKU\S-1-5-21-2512610291-1866108432-2110468150-1000\...\Run: [LightScribe Control Panel] => C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2363392 2008-06-09] (Hewlett-Packard Company)

HKU\S-1-5-21-2512610291-1866108432-2110468150-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)

HKU\S-1-5-21-2512610291-1866108432-2110468150-1000\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2009-08-14] (Google Inc.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk

ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)

 

==================== Internet (Whitelisted) ====================

 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

 

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.h...resario&pf=cnnb

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.h...resario&pf=cnnb

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.h...resario&pf=cnnb

SearchScopes: HKLM - {2F15F787-E106-4928-9E29-B6C6639BBBAC} URL = http://slirsredirect...hpcnnbie7-nl-be

SearchScopes: HKLM - {B491D4F1-797F-488C-A8BB-705112DE6955} URL = http://nl.search.yah...p06&type=ie2008

SearchScopes: HKLM - {C9660356-E80A-468F-A23D-721E78908CF3} URL = http://nb.kelkoopart...tnerId=96913938

SearchScopes: HKCU - {2F15F787-E106-4928-9E29-B6C6639BBBAC} URL = http://slirsredirect...hpcnnbie7-nl-be

SearchScopes: HKCU - {B491D4F1-797F-488C-A8BB-705112DE6955} URL = http://nl.search.yah...p06&type=ie2008

SearchScopes: HKCU - {C9660356-E80A-468F-A23D-721E78908CF3} URL = http://nb.kelkoopart...tnerId=96913938

BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

BHO: Telenet Veilig Online -> {45BBE08D-81C5-4A67-AF20-B2A077C67747} -> C:\Program Files\Telenet Security Pack\apps\OnlineSafety\browser\install\fs_ie_https\fs_ie_https.dll (F-Secure Corporation)

BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

BHO: Google Toolbar Notifier BHO -> {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} -> C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)

BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)

Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

DPF: {888078C6-70B2-4F88-8EE7-1F50DDEA6120} https://as.photoprin...geUploader6.cab

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.ad...Plus/1.6/gp.cab

Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 195.130.131.1 195.130.130.129

 

FireFox:

========

FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)

FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension

FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-08-18]

FF HKLM\...\Firefox\Extensions: [{4701b00b-14c3-429d-aa7a-cc094799006b}] - C:\Program Files\Telenet Security Pack\apps\OnlineSafety\browser\deploy\fs_firefox_https

FF Extension: Veilig Online - C:\Program Files\Telenet Security Pack\apps\OnlineSafety\browser\deploy\fs_firefox_https [2014-06-07]

 

Chrome: 

=======

CHR StartupUrls: Default -> "hxxp://www.google.com/"

CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\38.0.2125.111\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\38.0.2125.111\ppGoogleNaClPluginChrome.dll No File

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\38.0.2125.111\pdf.dll ()

CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)

CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File

CHR Plugin: (Java™ Platform SE 7 U25) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

CHR Plugin: (Java Deployment Toolkit 7.0.250.16) - C:\Windows\system32\npDeployJava1.dll No File

CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

CHR Profile: C:\Users\Sylvine\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Wallet) - C:\Users\Sylvine\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-23]

CHR HKLM\...\Chrome\Extension: [jmjjnhpacphpjmnnlnccpfmhkcloaade] - C:\Program Files\Telenet Security Pack\apps\OnlineSafety\browser\install\fs_chrome_https\fs_chrome_https.crx [2014-05-23]

 

========================== Services (Whitelisted) =================

 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

 

R2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_fa807195\aestsrv.exe [81920 2009-01-20] (Andrea Electronics Corporation)

R2 ezSharedSvc; C:\Windows\System32\ezsvc7.dll [129992 2008-02-03] (EasyBits Sofware AS) [File not signed]

R2 fshoster; C:\Program Files\Telenet Security Pack\fshoster32.exe [191528 2013-12-11] (F-Secure Corporation)

R3 FSMA; C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Common\FSMA32.EXE [216104 2013-11-26] (F-Secure Corporation)

R2 FSORSPClient; C:\Program Files\Telenet Security Pack\apps\CCF_Reputation\fsorsp.exe [60352 2013-06-26] (F-Secure Corporation)

R2 HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [94208 2008-10-09] (Hewlett-Packard) [File not signed]

R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [217088 2008-03-25] (Hewlett-Packard Co.) [File not signed]

R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [135168 2008-03-25] (Hewlett-Packard Co.) [File not signed]

R3 hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [223232 2008-10-23] (Hewlett-Packard Development Company, L.P.) [File not signed]

R2 LightScribeService; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [73728 2008-06-09] (Hewlett-Packard Company) [File not signed]

R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2008-07-18] (Hewlett-Packard) [File not signed]

R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2008-07-18] (Hewlett-Packard) [File not signed]

R2 Recovery Service for Windows; C:\Program Files\SMINST\BLService.exe [365952 2008-12-23] ()

R2 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [247152 2008-11-26] ()

R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_fa807195\STacSV.exe [249938 2009-01-20] (IDT, Inc.)

 

==================== Drivers (Whitelisted) ====================

 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

 

R3 F-Secure Gatekeeper; C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys [145960 2014-11-05] (F-Secure Corporation)

R1 F-Secure HIPS; C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\HIPS\drivers\fshs.sys [73896 2014-06-28] (F-Secure Corporation)

R0 fsbts; C:\Windows\System32\Drivers\fsbts.sys [44240 2014-06-07] ()

R3 fsni; C:\Program Files\Telenet Security Pack\apps\CCF_Scanning\fsni32.sys [70184 2014-06-19] (F-Secure Corporation)

R1 fsvista; C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys [12840 2013-11-26] ()

S3 IpInIp; system32\DRIVERS\ipinip.sys [X]

S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]

S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

 

==================== NetSvcs (Whitelisted) ===================

 

 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

 

 

==================== One Month Created Files and Folders ========

 

(If an entry is included in the fixlist, the file\folder will be moved.)

 

2014-11-12 12:45 - 2014-11-12 12:46 - 00017844 _____ () C:\Users\Sylvine\Desktop\FRST.txt

2014-11-12 12:45 - 2014-11-12 12:45 - 00000000 ____D () C:\FRST

2014-11-12 12:36 - 2014-11-12 12:36 - 01107968 _____ (Farbar) C:\Users\Sylvine\Desktop\FRST.exe

2014-11-05 23:21 - 2014-11-12 12:40 - 00000000 ____D () C:\Users\Sylvine\Desktop\pc technieker Hidara Solutions

2014-11-05 16:49 - 2014-11-05 16:49 - 00000967 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk

2014-11-05 16:49 - 2014-11-05 16:49 - 00000955 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk

2014-11-05 16:49 - 2014-11-05 16:49 - 00000000 ____D () C:\Program Files\TeamViewer

2014-11-05 16:48 - 2014-11-05 16:48 - 06626856 _____ (TeamViewer GmbH) C:\Users\Sylvine\Desktop\TeamViewer_Setup_nl.exe

2014-11-01 15:01 - 2014-11-01 15:01 - 00000000 ____D () C:\Users\Sylvine\AppData\Roaming\Oracle

2014-11-01 15:00 - 2014-11-01 15:00 - 00000000 ____D () C:\Windows\Sun

2014-11-01 15:00 - 2014-11-01 15:00 - 00000000 ____D () C:\ProgramData\Oracle

2014-11-01 15:00 - 2014-11-01 15:00 - 00000000 ____D () C:\Program Files\Common Files\Java

2014-11-01 14:59 - 2014-11-01 14:59 - 00272808 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2014-11-01 14:59 - 2014-11-01 14:59 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2014-11-01 14:59 - 2014-11-01 14:59 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2014-11-01 14:59 - 2014-11-01 14:59 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll

2014-11-01 14:59 - 2014-11-01 14:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-11-01 14:59 - 2014-11-01 14:59 - 00000000 ____D () C:\Program Files\Java

2014-10-23 12:39 - 2014-10-23 12:39 - 00000000 ____D () C:\Windows\system32\EventProviders

 

==================== One Month Modified Files and Folders =======

 

(If an entry is included in the fixlist, the file\folder will be moved.)

 

2014-11-12 12:36 - 2010-02-07 15:45 - 00001046 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-11-12 12:36 - 2006-11-02 13:45 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

2014-11-12 12:36 - 2006-11-02 13:45 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

2014-11-12 12:34 - 2012-07-09 20:39 - 00000458 ____H () C:\Windows\Tasks\User_Feed_Synchronization-{F35DC992-CEF3-45B7-B82D-A13B8766B76A}.job

2014-11-12 12:23 - 2014-06-07 10:00 - 00000940 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-11-12 12:22 - 2009-04-17 02:36 - 01828092 _____ () C:\Windows\WindowsUpdate.log

2014-11-12 12:19 - 2009-08-08 13:16 - 00000443 _____ () C:\Windows\system32\Drivers\etc\hosts.ics

2014-11-12 12:17 - 2010-02-07 15:45 - 00001042 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-11-12 12:17 - 2009-07-15 19:10 - 00000226 _____ () C:\Windows\Tasks\OGALogon.job

2014-11-12 12:17 - 2009-04-17 03:16 - 00000286 _____ () C:\ProgramData\hpqp.ini

2014-11-12 12:17 - 2006-11-02 13:58 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-11-12 12:13 - 2006-11-02 13:58 - 00032620 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-11-12 03:06 - 2013-08-23 14:48 - 00000000 ____D () C:\Windows\system32\MRT

2014-11-12 03:00 - 2006-11-02 11:24 - 100445232 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe

2014-11-12 00:00 - 2009-07-15 19:10 - 00000226 _____ () C:\Windows\Tasks\OGADaily.job

2014-11-11 21:23 - 2014-06-07 10:00 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2014-11-11 21:23 - 2014-06-07 10:00 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2014-11-05 20:41 - 2009-06-20 16:22 - 00107512 _____ () C:\Users\Sylvine\AppData\Local\GDIPFONTCACHEV1.DAT

2014-11-05 20:39 - 2006-11-02 13:44 - 00389304 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-11-05 20:38 - 2012-11-19 13:35 - 00083086 _____ () C:\Windows\PFRO.log

2014-10-31 09:42 - 2010-02-14 18:03 - 00001991 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-10-30 09:55 - 2009-03-13 13:47 - 00679804 _____ () C:\Windows\system32\perfh013.dat

2014-10-30 09:55 - 2009-03-13 13:47 - 00131400 _____ () C:\Windows\system32\perfc013.dat

2014-10-30 09:55 - 2006-11-02 11:33 - 02301620 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-10-22 16:14 - 2009-06-29 18:47 - 00002635 _____ () C:\Users\Sylvine\Desktop\Microsoft Office Word 2003.lnk

 

Some content of TEMP:

====================

C:\Users\Sylvine\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe

C:\Users\Sylvine\AppData\Local\Temp\jre-7u60-windows-i586-iftw.exe

C:\Users\Sylvine\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe

 

 

==================== Bamital & volsnap Check =================

 

(There is no automatic fix for files that do not pass verification.)

 

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

 

 

LastRegBack: 2014-11-12 12:24

 

==================== End Of Log ============================

[Machiavelli]

Step 1: Adwarecleaner

Please download AdwCleaner (by Xplode) from the link below and save it to your Desktop:

Download Mirror #1

• Right-click on AdwCleaner.exe and select Run as administrator. (If you have Windows XP the just run it)
• Click Scan and let the scan run.
• When it finishes, click Clean, following the on screen prompts
• After your computer reboots, a log will open. Please Copy (Ctrl+C) and Paste (Ctrl+V) this into your next post.

Note: The log can also be found in here: C:\AdwCleaner\

Step 2: Malwarebytes

Please download Malwarebytes Anti-Malware to your desktop Install the progamme and select update
Once it has updated select Settings > Detection and Protection
Tick Scan for rootkits



Go back to the Dashboard and select Scan Now



If threats are detected, click the Apply Actions button, MBAM will ask for a reboot.





On completion of the scan (or after the reboot) select View Detailed Log
Select Export > Select text file and save to the desktop
Attach/Post that log

Step 3: Junkware Removal Tool

 Please download Junkware Removal Tool to your desktop.

• Shut down your protection software now to avoid potential conflicts.
• Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
• The tool will open and start scanning your system.
• Please be patient as this can take a while to complete depending on your system's specifications.
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
• Post the contents of JRT.txt into your next message.

Step 4: FRST Scan

• Run FRST. (if you have Windows Vista / Windows 7 / Windows 8: Please do a Right click on the FRST icon and select Run as Administrator)
• Click Scan to start FRST.
• When FRST finishes scanning, a log, FRST.txt, will open.
• Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this log into your next post please.

[HaraMo]

Result Step 1: Adwarecleaner

# AdwCleaner v4.101 - Rapport aangemaakt 12/11/2014 op 16:25:14

# Laatste Update 09/11/2014 door Xplode

# Database : 2014-11-11.2 [Live]

# Besturingssysteem : Windows Vista ™ Home Basic Service Pack 1 (32 bits)

# Gebruikersnaam : Sylvine - PC_VAN_SYLVINE

# Gestart vanuit : C:\Users\Sylvine\Desktop\AdwCleaner.exe

# Optie : Verwijderen

 

***** [ Services ] *****

 

 

***** [ Bestanden / Mappen ] *****

 

Map Verwijderd : C:\Users\Sylvine\AppData\LocalLow\HPAppData

 

***** [ Taken ] *****

 

 

***** [ Snelkoppelingen ] *****

 

 

***** [ Register ] *****

 

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\protector_dll.protectorbho

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{761F6A83-F007-49E4-8EAC-CDB6808EF06F}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{97D69524-BB57-4185-9C7F-5F05593B771A}

Sleutel Verwijderd : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2F15F787-E106-4928-9E29-B6C6639BBBAC}

Sleutel Verwijderd : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{C9660356-E80A-468F-A23D-721E78908CF3}

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2F15F787-E106-4928-9E29-B6C6639BBBAC}

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{C9660356-E80A-468F-A23D-721E78908CF3}

Sleutel Verwijderd : HKCU\Software\IM

Sleutel Verwijderd : HKCU\Software\ImInstaller

 

***** [ Browsers ] *****

 

-\\ Internet Explorer v8.0.6001.19088

 

 

-\\ Google Chrome v38.0.2125.111

 

[C:\Users\Sylvine\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Verwijderd [Search Provider] : hxxp://nb.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913938

[C:\Users\Sylvine\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Verwijderd [Search Provider] : hxxp://slirsredirect.search.aol.com/slirs_hxxp/sredir?sredir=1547&query={searchTerms}&invocationType=tb50hpcnnbie7-nl-be

 

*************************

 

AdwCleaner[R0].txt - [2163 octets] - [12/11/2014 16:22:55]

AdwCleaner[S0].txt - [2113 octets] - [12/11/2014 16:25:14]

 

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2173 octets] ##########

 

[HaraMo]

Results step 2 malwarebytes

 

Malwarebytes Anti-Malware

www.malwarebytes.org

 

Scan Date: 12/11/2014

Scan Time: 16:36:01

Logfile: report-mbam.txt

Administrator: Yes

 

Version: 2.00.3.1025

Malware Database: v2014.11.12.07

Rootkit Database: v2014.11.11.01

License: Free

Malware Protection: Disabled

Malicious Website Protection: Disabled

Self-protection: Disabled

 

OS: Windows Vista Service Pack 1

CPU: x86

File System: NTFS

User: Sylvine

 

Scan Type: Threat Scan

Result: Completed

Objects Scanned: 298464

Time Elapsed: 17 min, 1 sec

 

Memory: Enabled

Startup: Enabled

Filesystem: Enabled

Archives: Enabled

Rootkits: Enabled

Heuristics: Enabled

PUP: Enabled

PUM: Enabled

 

Processes: 0

(No malicious items detected)

 

Modules: 0

(No malicious items detected)

 

Registry Keys: 0

(No malicious items detected)

 

Registry Values: 0

(No malicious items detected)

 

Registry Data: 0

(No malicious items detected)

 

Folders: 0

(No malicious items detected)

 

Files: 0

(No malicious items detected)

 

Physical Sectors: 0

(No malicious items detected)

 

 

(end)

[HaraMo]

Results Step 3: Junkware Removal Tool

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.3.7 (11.08.2014:1)

OS: Windows Vista ™ Home Basic x86

Ran by Sylvine on wo 12/11/2014 at 17:11:41,47

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

 

 

 

~~~ Services

 

 

 

~~~ Registry Values

 

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\\Start Page

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\DisplayName

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\URL

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL

 

 

 

~~~ Registry Keys

 

 

 

~~~ Files

 

 

 

~~~ Folders

 

 

 

~~~ Event Viewer Logs were cleared

 

 

 

 

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on wo 12/11/2014 at 17:13:50,13

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

[HaraMo]

Results FRST (two logs)

 

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 10-11-2014

Ran by Sylvine (administrator) on PC_VAN_SYLVINE on 12-11-2014 17:46:21

Running from C:\Users\Sylvine\Desktop

Loaded Profile: Sylvine (Available profiles: Sylvine)

Platform: Microsoft® Windows Vista™ Home Basic  Service Pack 1 (X86) OS Language: Nederlands (Nederland)

Internet Explorer Version 8

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

 

==================== Processes (Whitelisted) =================

 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

 

(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_fa807195\stacsv.exe

(Microsoft Corporation) C:\Windows\System32\SLsvc.exe

(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_fa807195\AEstSrv.exe

(F-Secure Corporation) C:\Program Files\Telenet Security Pack\fshoster32.exe

(F-Secure Corporation) C:\Program Files\Telenet Security Pack\apps\CCF_Reputation\fsorsp.exe

(F-Secure Corporation) C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Anti-Virus\fsgk32.exe

(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe

(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\VS7DEBUG\MDM.EXE

(Sony Corporation) C:\Program Files\Sony\PMB\PMBDeviceInfoProvider.exe

() C:\Program Files\SMINST\BLService.exe

() C:\Program Files\CyberLink\Shared files\RichVideo.exe

(TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe

(F-Secure Corporation) C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Common\FSMA32.EXE

(F-Secure Corporation) C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Anti-Virus\fssm32.exe

(TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\TeamViewer.exe

(TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\tv_w32.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

(Intel Corporation) C:\Windows\System32\igfxsrvc.exe

(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe

(CyberLink Corp.) C:\Program Files\HP\QuickPlay\QPService.exe

( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe

(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuSchd2.exe

(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe

(Google Inc.) C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe

(Sony Corporation) C:\Program Files\Sony\PMB\PMBVolumeWatcher.exe

(F-Secure Corporation) C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Common\FSM32.EXE

(F-Secure Corporation) C:\Program Files\Telenet Security Pack\fshoster32.exe

(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe

(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe

(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe

(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe

(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe

(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe

(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

() C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe

(Hewlett-Packard) C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe

(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Service.exe

(Microsoft Corporation) C:\Windows\System32\wuauclt.exe

(Microsoft Corporation) C:\Windows\System32\conime.exe

(TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\TeamViewer_Desktop.exe

 

 

==================== Registry (Whitelisted) ==================

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

 

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1410344 2008-12-04] (Synaptics, Inc.)

HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray.exe [483420 2009-01-20] (IDT, Inc.)

HKLM\...\Run: [QPService] => C:\Program Files\HP\QuickPlay\QPService.exe [468264 2008-09-23] (CyberLink Corp.)

HKLM\...\Run: [UpdateLBPShortCut] => C:\Program Files\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [210216 2008-06-13] (CyberLink Corp.)

HKLM\...\Run: [UpdatePSTShortCut] => C:\Program Files\CyberLink\DVD Suite\MUITransfer\MUIStartMenu.exe [210216 2008-12-24] (CyberLink Corp.)

HKLM\...\Run: [UCam_Menu] => C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [218408 2008-12-03] (CyberLink Corp.)

HKLM\...\Run: [QlbCtrl.exe] => C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [206128 2008-10-10] ( Hewlett-Packard Development Company, L.P.)

HKLM\...\Run: [UpdateP2GoShortCut] => C:\Program Files\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [210216 2008-10-30] (CyberLink Corp.)

HKLM\...\Run: [HP Health Check Scheduler] => c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [75008 2008-10-09] (Hewlett-Packard)

HKLM\...\Run: [HP Software Update] => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49152 2007-10-14] (Hewlett-Packard)

HKLM\...\Run: [WirelessAssistant] => C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [432432 2008-12-08] (Hewlett-Packard)

HKLM\...\Run: [hpqSRMon] => C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe [80896 2008-06-02] (Hewlett-Packard)

HKLM\...\Run: [Google Quick Search Box] => C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe [122368 2009-08-14] (Google Inc.)

HKLM\...\Run: [PMBVolumeWatcher] => C:\Program Files\Sony\PMB\PMBVolumeWatcher.exe [648032 2010-11-26] (Sony Corporation)

HKLM\...\Run: [F-Secure Manager] => C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Common\FSM32.EXE [310312 2013-11-26] (F-Secure Corporation)

HKLM\...\Run: [F-Secure Hoster (44163)] => C:\Program Files\Telenet Security Pack\fshoster32.exe [191528 2013-12-11] (F-Secure Corporation)

HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)

HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter

HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => rundll32.exe oobefldr.dll,ShowWelcomeCenter

HKU\S-1-5-21-2512610291-1866108432-2110468150-1000\...\Run: [LightScribe Control Panel] => C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2363392 2008-06-09] (Hewlett-Packard Company)

HKU\S-1-5-21-2512610291-1866108432-2110468150-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-21] (Microsoft Corporation)

HKU\S-1-5-21-2512610291-1866108432-2110468150-1000\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2009-08-14] (Google Inc.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk

ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)

 

==================== Internet (Whitelisted) ====================

 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

 

SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search

SearchScopes: HKLM - {B491D4F1-797F-488C-A8BB-705112DE6955} URL = http://nl.search.yah...p06&type=ie2008

SearchScopes: HKCU - {B491D4F1-797F-488C-A8BB-705112DE6955} URL = http://nl.search.yah...p06&type=ie2008

BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

BHO: Telenet Veilig Online -> {45BBE08D-81C5-4A67-AF20-B2A077C67747} -> C:\Program Files\Telenet Security Pack\apps\OnlineSafety\browser\install\fs_ie_https\fs_ie_https.dll (F-Secure Corporation)

BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

BHO: Google Toolbar Notifier BHO -> {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} -> C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)

BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)

Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)

DPF: {888078C6-70B2-4F88-8EE7-1F50DDEA6120} https://as.photoprin...geUploader6.cab

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.ad...Plus/1.6/gp.cab

Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 195.130.131.1 195.130.130.129

 

FireFox:

========

FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)

FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension

FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-08-18]

FF HKLM\...\Firefox\Extensions: [{4701b00b-14c3-429d-aa7a-cc094799006b}] - C:\Program Files\Telenet Security Pack\apps\OnlineSafety\browser\deploy\fs_firefox_https

FF Extension: Veilig Online - C:\Program Files\Telenet Security Pack\apps\OnlineSafety\browser\deploy\fs_firefox_https [2014-06-07]

 

Chrome: 

=======

CHR StartupUrls: Default -> "hxxp://www.google.com/"

CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\38.0.2125.111\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\38.0.2125.111\ppGoogleNaClPluginChrome.dll No File

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\38.0.2125.111\pdf.dll ()

CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)

CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File

CHR Plugin: (Java™ Platform SE 7 U25) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

CHR Plugin: (Java Deployment Toolkit 7.0.250.16) - C:\Windows\system32\npDeployJava1.dll No File

CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

CHR Profile: C:\Users\Sylvine\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Google Wallet) - C:\Users\Sylvine\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-23]

CHR HKLM\...\Chrome\Extension: [jmjjnhpacphpjmnnlnccpfmhkcloaade] - C:\Program Files\Telenet Security Pack\apps\OnlineSafety\browser\install\fs_chrome_https\fs_chrome_https.crx [2014-05-23]

 

========================== Services (Whitelisted) =================

 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

 

R2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_fa807195\aestsrv.exe [81920 2009-01-20] (Andrea Electronics Corporation)

R2 ezSharedSvc; C:\Windows\System32\ezsvc7.dll [129992 2008-02-03] (EasyBits Sofware AS) [File not signed]

R2 fshoster; C:\Program Files\Telenet Security Pack\fshoster32.exe [191528 2013-12-11] (F-Secure Corporation)

R3 FSMA; C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Common\FSMA32.EXE [216104 2013-11-26] (F-Secure Corporation)

R2 FSORSPClient; C:\Program Files\Telenet Security Pack\apps\CCF_Reputation\fsorsp.exe [60352 2013-06-26] (F-Secure Corporation)

R2 HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [94208 2008-10-09] (Hewlett-Packard) [File not signed]

R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [217088 2008-03-25] (Hewlett-Packard Co.) [File not signed]

R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [135168 2008-03-25] (Hewlett-Packard Co.) [File not signed]

R3 hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [223232 2008-10-23] (Hewlett-Packard Development Company, L.P.) [File not signed]

R2 LightScribeService; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [73728 2008-06-09] (Hewlett-Packard Company) [File not signed]

R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2008-07-18] (Hewlett-Packard) [File not signed]

R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2008-07-18] (Hewlett-Packard) [File not signed]

R2 Recovery Service for Windows; C:\Program Files\SMINST\BLService.exe [365952 2008-12-23] ()

R2 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [247152 2008-11-26] ()

R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_fa807195\STacSV.exe [249938 2009-01-20] (IDT, Inc.)

 

==================== Drivers (Whitelisted) ====================

 

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

 

R3 F-Secure Gatekeeper; C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys [145960 2014-11-05] (F-Secure Corporation)

R1 F-Secure HIPS; C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\HIPS\drivers\fshs.sys [73896 2014-06-28] (F-Secure Corporation)

R0 fsbts; C:\Windows\System32\Drivers\fsbts.sys [44240 2014-06-07] ()

R3 fsni; C:\Program Files\Telenet Security Pack\apps\CCF_Scanning\fsni32.sys [70184 2014-06-19] (F-Secure Corporation)

R1 fsvista; C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys [12840 2013-11-26] ()

S3 IpInIp; system32\DRIVERS\ipinip.sys [X]

S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]

S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]

 

==================== NetSvcs (Whitelisted) ===================

 

 

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

 

 

==================== One Month Created Files and Folders ========

 

(If an entry is included in the fixlist, the file\folder will be moved.)

 

2014-11-12 17:46 - 2014-11-12 17:46 - 00016617 _____ () C:\Users\Sylvine\Desktop\FRST.txt

2014-11-12 17:46 - 2014-11-12 12:36 - 01107968 _____ (Farbar) C:\Users\Sylvine\Desktop\FRST.exe

2014-11-12 17:11 - 2014-11-12 17:11 - 00000000 ____D () C:\Windows\ERUNT

2014-11-12 16:35 - 2014-11-12 16:36 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-11-12 16:34 - 2014-11-12 16:34 - 00000899 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2014-11-12 16:34 - 2014-11-12 16:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2014-11-12 16:34 - 2014-11-12 16:34 - 00000000 ____D () C:\ProgramData\Malwarebytes

2014-11-12 16:34 - 2014-11-12 16:34 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware

2014-11-12 16:34 - 2014-10-01 11:11 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-11-12 16:34 - 2014-10-01 11:11 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2014-11-12 16:34 - 2014-10-01 11:11 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2014-11-12 16:22 - 2014-11-12 16:25 - 00000000 ____D () C:\AdwCleaner

2014-11-12 12:45 - 2014-11-12 17:46 - 00000000 ____D () C:\FRST

2014-11-05 23:21 - 2014-11-12 17:45 - 00000000 ____D () C:\Users\Sylvine\Desktop\pc technieker Hidara Solutions

2014-11-05 16:49 - 2014-11-05 16:49 - 00000967 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk

2014-11-05 16:49 - 2014-11-05 16:49 - 00000955 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk

2014-11-05 16:49 - 2014-11-05 16:49 - 00000000 ____D () C:\Program Files\TeamViewer

2014-11-05 16:48 - 2014-11-05 16:48 - 06626856 _____ (TeamViewer GmbH) C:\Users\Sylvine\Desktop\TeamViewer_Setup_nl.exe

2014-11-01 15:01 - 2014-11-01 15:01 - 00000000 ____D () C:\Users\Sylvine\AppData\Roaming\Oracle

2014-11-01 15:00 - 2014-11-01 15:00 - 00000000 ____D () C:\Windows\Sun

2014-11-01 15:00 - 2014-11-01 15:00 - 00000000 ____D () C:\ProgramData\Oracle

2014-11-01 15:00 - 2014-11-01 15:00 - 00000000 ____D () C:\Program Files\Common Files\Java

2014-11-01 14:59 - 2014-11-01 14:59 - 00272808 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe

2014-11-01 14:59 - 2014-11-01 14:59 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe

2014-11-01 14:59 - 2014-11-01 14:59 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\java.exe

2014-11-01 14:59 - 2014-11-01 14:59 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll

2014-11-01 14:59 - 2014-11-01 14:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2014-11-01 14:59 - 2014-11-01 14:59 - 00000000 ____D () C:\Program Files\Java

2014-10-23 12:39 - 2014-10-23 12:39 - 00000000 ____D () C:\Windows\system32\EventProviders

 

==================== One Month Modified Files and Folders =======

 

(If an entry is included in the fixlist, the file\folder will be moved.)

 

2014-11-12 17:36 - 2010-02-07 15:45 - 00001046 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-11-12 17:33 - 2012-07-09 20:39 - 00000458 ____H () C:\Windows\Tasks\User_Feed_Synchronization-{F35DC992-CEF3-45B7-B82D-A13B8766B76A}.job

2014-11-12 17:23 - 2014-06-07 10:00 - 00000940 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-11-12 17:23 - 2009-04-17 02:36 - 01845562 _____ () C:\Windows\WindowsUpdate.log

2014-11-12 16:36 - 2010-02-07 15:45 - 00001042 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-11-12 16:29 - 2009-04-17 03:16 - 00000286 _____ () C:\ProgramData\hpqp.ini

2014-11-12 16:28 - 2009-08-08 13:16 - 00000443 _____ () C:\Windows\system32\Drivers\etc\hosts.ics

2014-11-12 16:28 - 2009-07-15 19:10 - 00000226 _____ () C:\Windows\Tasks\OGALogon.job

2014-11-12 16:26 - 2012-11-19 13:35 - 00083404 _____ () C:\Windows\PFRO.log

2014-11-12 16:26 - 2006-11-02 13:58 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-11-12 16:26 - 2006-11-02 13:45 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0

2014-11-12 16:26 - 2006-11-02 13:45 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0

2014-11-12 16:25 - 2006-11-02 13:58 - 00032620 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-11-12 03:06 - 2013-08-23 14:48 - 00000000 ____D () C:\Windows\system32\MRT

2014-11-12 03:00 - 2006-11-02 11:24 - 100445232 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe

2014-11-12 00:00 - 2009-07-15 19:10 - 00000226 _____ () C:\Windows\Tasks\OGADaily.job

2014-11-11 21:23 - 2014-06-07 10:00 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2014-11-11 21:23 - 2014-06-07 10:00 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2014-11-05 20:41 - 2009-06-20 16:22 - 00107512 _____ () C:\Users\Sylvine\AppData\Local\GDIPFONTCACHEV1.DAT

2014-11-05 20:39 - 2006-11-02 13:44 - 00389304 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-10-31 09:42 - 2010-02-14 18:03 - 00001991 _____ () C:\Users\Public\Desktop\Google Chrome.lnk

2014-10-30 09:55 - 2009-03-13 13:47 - 00679804 _____ () C:\Windows\system32\perfh013.dat

2014-10-30 09:55 - 2009-03-13 13:47 - 00131400 _____ () C:\Windows\system32\perfc013.dat

2014-10-30 09:55 - 2006-11-02 11:33 - 02301620 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-10-22 16:14 - 2009-06-29 18:47 - 00002635 _____ () C:\Users\Sylvine\Desktop\Microsoft Office Word 2003.lnk

 

Some content of TEMP:

====================

C:\Users\Sylvine\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe

C:\Users\Sylvine\AppData\Local\Temp\jre-7u60-windows-i586-iftw.exe

C:\Users\Sylvine\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe

C:\Users\Sylvine\AppData\Local\Temp\Quarantine.exe

C:\Users\Sylvine\AppData\Local\Temp\sqlite3.dll

 

 

==================== Bamital & volsnap Check =================

 

(There is no automatic fix for files that do not pass verification.)

 

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

 

 

LastRegBack: 2014-11-12 16:34

 

==================== End Of Log ============================

 

Additional scan result of Farbar Recovery Scan Tool (x86) Version: 10-11-2014

Ran by Sylvine at 2014-11-12 17:47:03

Running from C:\Users\Sylvine\Desktop

Boot Mode: Normal

==========================================================

 

 

==================== Security Center ========================

 

(If an entry is included in the fixlist, it will be removed.)

 

AV: Computer Bescherming (Disabled - Up to date) {15414183-282E-D62C-CA37-EF24860A2F17}

AS: Computer Bescherming (Disabled - Up to date) {AE20A067-0E14-D9A2-F087-D456FD8D65AA}

AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

 

==================== Installed Programs ======================

 

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

 

32 Bit HP CIO Components Installer (Version: 2.1.5 - Hewlett-Packard) Hidden

Activation Assistant for the 2007 Microsoft Office suites (HKLM\...\Activation Assistant for the 2007 Microsoft Office suites) (Version:  - Microsoft Corporation)

Activation Assistant for the 2007 Microsoft Office suites (Version: 1.0 - Microsoft Corporation) Hidden

ActiveCheck component for HP Active Support Library (Version: 1.1.18.0 - Hewlett-Packard) Hidden

Adobe Flash Player 15 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 15.0.0.223 - Adobe Systems Incorporated)

Adobe Reader 9 - Nederlands (HKLM\...\{AC76BA86-7AD7-1043-7B44-A90000000001}) (Version: 9.0.0 - Adobe Systems Incorporated)

Adobe Shockwave Player (HKLM\...\{AD72CFB4-C2BF-424E-9DF0-C7BAD1F30A11}) (Version: 11.0 - Adobe Systems, Inc.)

Atheros Driver Installation Program (HKLM\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 5.0 - Atheros)

BufferChm (Version: 100.0.170.000 - Hewlett-Packard) Hidden

CCleaner (HKLM\...\CCleaner) (Version: 3.24 - Piriform)

Compatibiliteitspakket voor het 2007 Microsoft Office system (HKLM\...\{90120000-0020-0413-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)

Computer Security 14.99.103.0 (release) (Version: 14.99.103.0 - F-Secure Corporation) Hidden

Copy (Version: 100.0.170.000 - Hewlett-Packard) Hidden

CustomerResearchQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden

CyberLink DVD Suite (HKLM\...\InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}) (Version: 6.0.2424 - CyberLink Corp.)

CyberLink YouCam (HKLM\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 2.0.2512 - CyberLink Corp.)

Destination Component (Version: 100.0.0.0 - Hewlett-Packard) Hidden

DeviceDiscovery (Version: 110.0.180.000 - Hewlett-Packard) Hidden

DeviceManagementQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden

DJ_AIO_03_F4200_ProductContext (Version: 100.0.215.000 - Hewlett-Packard) Hidden

DJ_AIO_03_F4200_Software (Version: 100.0.206.000 - Hewlett-Packard) Hidden

DJ_AIO_03_F4200_Software_Min (Version: 100.0.213.000 - Hewlett-Packard) Hidden

ESU for Microsoft Vista (HKLM\...\{3877C901-7B90-4727-A639-B6ED2DD59D43}) (Version: 1.0.0 - Hewlett-Packard)

eSupportQFolder (Version: 1.00.0000 - Hewlett-Packard) Hidden

F4200 (Version: 100.0.206.000 - Uw bedrijfsnaam) Hidden

F4200_Help (Version: 100.0.206.000 - Hewlett-Packard) Hidden

F-Secure CCF Reputation (Version: 1.1.25.2280 - F-Secure) Hidden

F-Secure CCF Scanning 1.43.102.193 (release) (Version: 1.43.102.193 - F-Secure Corporation) Hidden

F-Secure Network CCF 1.02.134 (Version: 1.02.134 - F-Secure Corporation) Hidden

F-Secure SafeSearch 1.03.146.0 (release) (Version: 1.03.146.0 - F-Secure Corporation) Hidden

Google Chrome (HKLM\...\Google Chrome) (Version: 38.0.2125.111 - Google Inc.)

Google Earth (HKLM\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)

Google Toolbar for Internet Explorer (HKLM\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.5111.1712 - Google Inc.)

Google Toolbar for Internet Explorer (Version: 1.0.0 - Google Inc.) Hidden

Google Update Helper (Version: 1.3.25.5 - Google Inc.) Hidden

GPBaseService (Version: 100.0.187.000 - Hewlett-Packard) Hidden

HP Active Support Library (HKLM\...\{CE7E3BE0-2DD3-4416-A690-F9E4A99A8CFF}) (Version: 3.1.9.1 - Hewlett-Packard)

HP Customer Experience Enhancements (HKLM\...\{57A5AEC1-97FC-474D-92C4-908FCC2253D4}) (Version: 5.7.0.2664 - Hewlett-Packard)

HP Customer Participation Program 10.0 (HKLM\...\HPExtendedCapabilities) (Version: 10.0 - HP)

HP Deskjet F4200 All-In-One Driver Software 10.0 Rel .3 (HKLM\...\{AE9A67F9-ADF1-4a44-BAB5-C1DB302B37A2}) (Version: 10.0 - HP)

HP DVD Play 3.7 (HKLM\...\{45D707E9-F3C4-11D9-A373-0050BAE317E1}) (Version: 3.7.0.5723 - Hewlett-Packard)

HP Help and Support (HKLM\...\{0054A0F6-00C9-4498-B821-B5C9578F433E}) (Version: 2.1.3.0 - Hewlett-Packard Company)

HP Imaging Device Functions 10.0 (HKLM\...\HP Imaging Device Functions) (Version: 10.0 - HP)

HP Photosmart Essential 2.5 (HKLM\...\HP Photosmart Essential) (Version: 2.5 - HP)

HP Quick Launch Buttons 6.40 M1 (HKLM\...\{34D2AB40-150D-475D-AE32-BD23FB5EE355}) (Version: 6.40 M1 - Hewlett-Packard)

HP Smart Web Printing (HKLM\...\HP Smart Web Printing) (Version: 3.5 - HP)

HP Solution Center 10.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 10.0 - HP)

HP Total Care Setup (HKLM\...\{95A747E0-DF19-46CB-A622-20A0107201BD}) (Version: 1.1.2413.2876 - Hewlett-Packard Company)

HP Update (HKLM\...\{47F36D92-E58E-456D-B73C-3382737E4C42}) (Version: 4.000.013.003 - Hewlett-Packard)

HP User Guides 0138 (HKLM\...\{17050C48-16CB-4500-A102-CEAD750CE11E}) (Version: 1.01.0000 - Hewlett-Packard)

HP Wireless Assistant (HKLM\...\{E5E29403-3D25-40C6-892B-F9FEE2A95585}) (Version: 3.50 A6 - Hewlett-Packard)

HPAsset component for HP Active Support Library (Version: 2.0.64.3 - Hewlett-Packard) Hidden

HPNetworkAssistant (Version: 1.1.70 - Hewlett-Packard.) Hidden

HPProductAssistant (Version: 100.0.170.000 - Hewlett-Packard) Hidden

HPSSupply (Version: 100.0.170.000 - Hewlett-Packard) Hidden

IDT Audio (HKLM\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6140.0 - IDT)

Intel® Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version:  - Intel Corporation)

Java 7 Update 71 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)

LabelPrint (HKLM\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.1224 - CyberLink Corp.)

LabelPrint (Version: 2.5.1224 - CyberLink Corp.) Hidden

LightScribe System Software  1.14.17.1 (HKLM\...\{0E7DBD52-B097-4F2B-A7C7-F105B0D20FDB}) (Version: 1.14.17.1 - LightScribe)

Malwarebytes Anti-Malware versie 2.0.3.1025 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)

MarketResearch (Version: 100.0.170.000 - Hewlett-Packard) Hidden

Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version:  - Microsoft Corporation)

Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)

Microsoft Office File Validation Add-In (HKLM\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office Professional Editie 2003 (HKLM\...\{90110413-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Works (HKLM\...\{5158F1F5-FA1B-4D49-B546-55A5004B89BD}) (Version: 9.7.0621 - Microsoft Corporation)

MSXML 4.0 SP2 (KB954430) (HKLM\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)

MSXML 4.0 SP3 Parser (KB973685) (HKLM\...\{859DFA95-E4A6-48CD-B88E-A3E483E89B44}) (Version: 4.30.2107.0 - Microsoft Corporation)

My HP Games (HKLM\...\WildTangent hp Master Uninstall) (Version: 1.0.0.62 - WildTangent)

OGA Notifier 1.7.0105.35.0 (Version: 1.7.0105.35.0 - Microsoft Corporation) Hidden

Online Safety 2.99.2293.1524 (Version: 2.99.2293.1524 - F-Secure Corporation) Hidden

PMB (HKLM\...\{B6A98E5F-D6A7-46FB-9E9D-1F7BF443491C}) (Version: 5.5.02.12220 - Sony Corporation)

Power2Go (HKLM\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.0.2423 - CyberLink Corp.)

Power2Go (Version: 6.0.2423 - CyberLink Corp.) Hidden

PowerDirector (HKLM\...\InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}) (Version: 7.0.2424 - CyberLink Corp.)

PowerDirector (Version: 7.0.2424 - CyberLink Corp.) Hidden

PSSWCORE (Version: 2.02.0000 - Hewlett-Packard) Hidden

Realtek 8169 8168 8101E 8102E Ethernet Driver (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 1.00.0000 - Realtek)

Realtek USB 2.0 Card Reader (HKLM\...\{DC24971E-1946-445D-8A82-CE685433FA7D}) (Version: 6.0.6000.20115 - Realtek Semiconductor Corp.)

Scan (Version: 10.0.0.0 - Hewlett-Packard) Hidden

Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 10.0 - HP)

Skype™ 6.11 (HKLM\...\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}) (Version: 6.11.102 - Skype Technologies S.A.)

SmartWebPrintingOC (Version: 100.0.189.000 - Hewlett-Packard) Hidden

Snelzoekvak van Google (HKLM\...\Quick Search Box) (Version: 1.2.1151.245 - Google, Inc.)

SolutionCenter (Version: 100.0.175.000 - Hewlett-Packard) Hidden

SPORE Creature Creator Trial Edition (HKLM\...\{ECEE0279-785F-4CB3-9F28-E69813234BF8}) (Version: 1.00.0000 - Electronic Arts)

Status (Version: 110.0.180.000 - Hewlett-Packard) Hidden

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 12.1.0.0 - Synaptics)

Taalpakket voor Microsoft .NET Framework 3.5 SP1 - NL (HKLM\...\Microsoft .NET Framework 3.5 Language Pack SP1 - nld) (Version:  - Microsoft Corporation)

Taalpakket voor Microsoft .NET Framework 4 Client Profile - NLD (HKLM\...\Microsoft .NET Framework 4 Client Profile NLD Language Pack) (Version: 4.0.30319 - Microsoft Corporation)

TeamViewer 9 (HKLM\...\TeamViewer 9) (Version: 9.0.32494 - TeamViewer)

Telenet Security Pack (HKLM\...\F-Secure ServiceEnabler 44163) (Version: 1.99.192.0 - F-Secure Corporation)

Telenet Security Pack (Version: 1.99.192.0 - F-Secure Corporation) Hidden

Toolbox (Version: 100.0.170.000 - Hewlett-Packard) Hidden

TrayApp (Version: 110.0.180.000 - Hewlett-Packard) Hidden

UnloadSupport (Version: 10.0.0 - Hewlett-Packard) Hidden

VideoToolkit01 (Version: 100.0.128.000 - Hewlett-Packard) Hidden

WebReg (Version: 100.0.170.000 - Hewlett-Packard) Hidden

 

==================== Custom CLSID (selected items): ==========================

 

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

 

CustomCLSID: HKU\S-1-5-21-2512610291-1866108432-2110468150-1000_Classes\CLSID\{039B2CA5-3B41-4D93-AD77-47D3293FC5CB}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll No File

CustomCLSID: HKU\S-1-5-21-2512610291-1866108432-2110468150-1000_Classes\CLSID\{42481700-CF3C-4D05-8EC6-F9A1C57E8DC0}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll No File

CustomCLSID: HKU\S-1-5-21-2512610291-1866108432-2110468150-1000_Classes\CLSID\{9E385F0A-0BA2-430C-96AA-4399C5E40F6C}\localserver32 -> C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.)

CustomCLSID: HKU\S-1-5-21-2512610291-1866108432-2110468150-1000_Classes\CLSID\{BB6410D8-F879-4184-9C5C-6A02D16AE0B3}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll No File

CustomCLSID: HKU\S-1-5-21-2512610291-1866108432-2110468150-1000_Classes\CLSID\{CA1073A2-5F3F-4445-8E5E-7109BDCEDDBE}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll No File

CustomCLSID: HKU\S-1-5-21-2512610291-1866108432-2110468150-1000_Classes\CLSID\{D0D38C6E-BF64-4C42-840D-3E0019D9F7A6}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll No File

CustomCLSID: HKU\S-1-5-21-2512610291-1866108432-2110468150-1000_Classes\CLSID\{D5A55D2D-C59D-42C3-A5BF-4C08EEE74339}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll No File

 

==================== Restore Points  =========================

 

01-11-2014 19:58:43 Taalpakket verwijderen

05-11-2014 14:19:11 Taalpakket verwijderen

05-11-2014 19:54:22 Taalpakket verwijderen

05-11-2014 20:44:45 Taalpakket verwijderen

06-11-2014 07:54:57 Taalpakket verwijderen

06-11-2014 12:24:29 Taalpakket verwijderen

07-11-2014 23:00:02 Gepland herstelpunt

09-11-2014 13:28:21 Taalpakket verwijderen

10-11-2014 14:36:52 Taalpakket verwijderen

11-11-2014 19:53:02 Taalpakket verwijderen

12-11-2014 02:00:18 Windows Update

12-11-2014 11:32:59 Taalpakket verwijderen

12-11-2014 15:45:03 Taalpakket verwijderen

 

==================== Hosts content: ==========================

 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

 

2006-11-02 11:23 - 2006-09-18 22:41 - 00000761 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1       localhost

::1             localhost

 

==================== Scheduled Tasks (whitelisted) =============

 

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

 

Task: {1AC8830F-AF24-4D6E-85EA-B69A455982B3} - System32\Tasks\OGADaily => C:\Windows\system32\OGAVerify.exe [2008-12-31] ()

Task: {2D9E12E8-7806-4B97-B416-ADD2A7B1D8C5} - System32\Tasks\{563586EF-CD43-487A-85E4-422373CCCF83} => Iexplore.exe http://ui.skype.com/...red;notincluded

Task: {39C36A0F-B6A6-4A4F-8B5B-1598A7BD969D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-11] (Adobe Systems Incorporated)

Task: {6C84005D-5B33-46BB-A96C-212799BA904B} - System32\Tasks\{8A0EF864-7743-4E23-B5D8-687E2A1458ED} => Iexplore.exe http://ui.skype.com/...red;notincluded

Task: {743FE249-DF7C-4D51-8076-5808D951ED01} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-29] (Google Inc.)

Task: {A04D46B1-3713-4506-9EE2-5851092F3B8E} - System32\Tasks\HP Health Check => c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [2008-10-09] (Hewlett-Packard)

Task: {AA3E8B27-E4E7-41EA-BDA1-8C82686201F7} - System32\Tasks\{4A25501F-3BAA-4BB9-9FF1-5E235D074E5F} => Iexplore.exe http://ui.skype.com/...red;notincluded

Task: {C42933EC-4BDA-46C5-8CAD-50B9186CB3AC} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-10-24] (Piriform Ltd)

Task: {C9160E8A-1D2C-44BA-9CD5-922C4610B0DF} - System32\Tasks\OGALogon => C:\Windows\system32\OGAVerify.exe [2008-12-31] ()

Task: {DAE1EED6-DA66-4454-AA04-4428B81048DD} - System32\Tasks\{B142A561-F3A6-46A5-855E-D8CADE344090} => Iexplore.exe http://ui.skype.com/...red;notincluded

Task: {E5195263-A109-4B36-A748-B393CBBBBDAE} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2014-10-29] (Google Inc.)

 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

 

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\OGADaily.job => C:\Windows\system32\OGAVerify.exe

Task: C:\Windows\Tasks\OGALogon.job => C:\Windows\system32\OGAVerify.exe

Task: C:\Windows\Tasks\User_Feed_Synchronization-{F35DC992-CEF3-45B7-B82D-A13B8766B76A}.job => C:\Windows\system32\msfeedssync.exe

 

==================== Loaded Modules (whitelisted) =============

 

2013-01-15 18:38 - 2013-11-26 10:58 - 00045608 _____ () C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Anti-Virus\FSAVHRES.eng

2013-12-11 13:35 - 2013-12-11 13:35 - 00220200 _____ () C:\Program Files\Telenet Security Pack\daas2.dll

2009-03-13 07:46 - 2008-12-23 16:18 - 00365952 _____ () C:\Program Files\SMINST\BLService.exe

2009-03-13 07:46 - 2008-12-23 16:18 - 00132480 _____ () C:\Program Files\SMINST\STWmiM.dll

2009-03-13 06:59 - 2008-11-26 00:29 - 00247152 _____ () C:\Program Files\CyberLink\Shared files\RichVideo.exe

2013-01-16 11:16 - 2013-01-16 11:16 - 00030888 _____ () C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Anti-Virus\minifilter\hashlib_x86.dll

2013-01-15 18:39 - 2014-06-07 09:42 - 00212008 _____ () C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Spam Control\fsas.dll

2013-01-15 18:38 - 2014-05-21 13:49 - 00949288 _____ () C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\Anti-Virus\fm4av.dll

2010-01-29 17:13 - 2011-12-02 22:44 - 00103424 _____ () C:\Program Files\Google\Quick Search Box\bin\1.2.1151.245\rlz.dll

2013-01-15 18:38 - 2013-11-26 10:58 - 00056360 _____ () C:\Program Files\Telenet Security Pack\apps\ComputerSecurity\FSGUI\fsavures.eng

2014-06-07 09:29 - 2014-06-07 09:29 - 00592936 _____ () C:\Windows\WinSxS\x86_f-secure.qt_4_6_2_2e112a926211c0a3_4.6.482.77_none_b59ef0c311fca244\QtMultimediaKit1.dll

2007-07-12 12:55 - 2007-07-12 12:55 - 01581056 _____ () C:\Program Files\Common Files\LightScribe\QtCore4.dll

2007-08-14 12:59 - 2007-08-14 12:59 - 06365184 _____ () C:\Program Files\Common Files\LightScribe\QtGui4.dll

2007-07-12 12:55 - 2007-07-12 12:55 - 00131072 _____ () C:\Program Files\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll

2008-10-22 10:32 - 2008-10-22 10:32 - 00628016 _____ () C:\Program Files\Hewlett-Packard\Shared\hpqToaster.exe

 

==================== Alternate Data Streams (whitelisted) =========

 

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

 

 

==================== Safe Mode (whitelisted) ===================

 

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

 

==================== EXE Association (whitelisted) =============

 

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)

 

 

==================== MSCONFIG/TASK MANAGER disabled items =========

 

(Currently there is no automatic fix for this section.)

 

MSCONFIG\Services: GameConsoleService => 3

MSCONFIG\Services: SkypeUpdate => 2

MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

MSCONFIG\startupreg: MsnMsgr => "C:\Program Files\MSN Messenger\msnmsgr.exe" /background

MSCONFIG\startupreg: Skype => "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized

MSCONFIG\startupreg: swg => "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

MSCONFIG\startupreg: UpdatePDIRShortCut => "C:\Program Files\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" "C:\Program Files\CyberLink\PowerDirector" UpdateWithCreateOnce "SOFTWARE\CyberLink\PowerDirector\7.0"

MSCONFIG\startupreg: Windows Defender => %ProgramFiles%\Windows Defender\MSASCui.exe -hide

 

========================= Accounts: ==========================

 

Administrator (S-1-5-21-2512610291-1866108432-2110468150-500 - Administrator - Disabled)

Gast (S-1-5-21-2512610291-1866108432-2110468150-501 - Limited - Disabled)

Sylvine (S-1-5-21-2512610291-1866108432-2110468150-1000 - Administrator - Enabled) => C:\Users\Sylvine

 

==================== Faulty Device Manager Devices =============

 

 

==================== Event log errors: =========================

 

Application errors:

==================

 

System errors:

=============

 

Microsoft Office Sessions:

=========================

 

CodeIntegrity Errors:

===================================

  Date: 2014-11-12 17:47:00.610

  Description: De integriteit van de kopie voor het bestand \Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys kan niet worden geverifieerd omdat de reeks kopie-hashes per pagina niet is gevonden op het systeem.

 

  Date: 2014-11-12 17:47:00.408

  Description: De integriteit van de kopie voor het bestand \Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys kan niet worden geverifieerd omdat de reeks kopie-hashes per pagina niet is gevonden op het systeem.

 

  Date: 2014-11-12 17:47:00.198

  Description: De integriteit van de kopie voor het bestand \Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys kan niet worden geverifieerd omdat de reeks kopie-hashes per pagina niet is gevonden op het systeem.

 

  Date: 2014-11-12 17:46:59.988

  Description: De integriteit van de kopie voor het bestand \Device\HarddiskVolume1\Windows\System32\drivers\mwac.sys kan niet worden geverifieerd omdat de reeks kopie-hashes per pagina niet is gevonden op het systeem.

 

  Date: 2014-11-12 17:46:59.666

  Description: De integriteit van de kopie voor het bestand \Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys kan niet worden geverifieerd omdat de reeks kopie-hashes per pagina niet is gevonden op het systeem.

 

  Date: 2014-11-12 17:46:59.457

  Description: De integriteit van de kopie voor het bestand \Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys kan niet worden geverifieerd omdat de reeks kopie-hashes per pagina niet is gevonden op het systeem.

 

  Date: 2014-11-12 17:46:59.243

  Description: De integriteit van de kopie voor het bestand \Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys kan niet worden geverifieerd omdat de reeks kopie-hashes per pagina niet is gevonden op het systeem.

 

  Date: 2014-11-12 17:46:59.033

  Description: De integriteit van de kopie voor het bestand \Device\HarddiskVolume1\Windows\System32\drivers\mbamchameleon.sys kan niet worden geverifieerd omdat de reeks kopie-hashes per pagina niet is gevonden op het systeem.

 

  Date: 2014-11-12 17:46:43.983

  Description: De integriteit van de kopie voor het bestand \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys kan niet worden geverifieerd omdat de reeks kopie-hashes per pagina niet is gevonden op het systeem.

 

  Date: 2014-11-12 17:46:43.779

  Description: De integriteit van de kopie voor het bestand \Device\HarddiskVolume1\Windows\System32\drivers\tcpip.sys kan niet worden geverifieerd omdat de reeks kopie-hashes per pagina niet is gevonden op het systeem.

 

 

==================== Memory info =========================== 

 

Processor: Pentium® Dual-Core CPU T4200 @ 2.00GHz

Percentage of memory in use: 38%

Total physical RAM: 2973.98 MB

Available physical RAM: 1833.52 MB

Total Pagefile: 6184.23 MB

Available Pagefile: 4918.65 MB

Total Virtual: 2047.88 MB

Available Virtual: 1915.65 MB

 

==================== Drives ================================

 

Drive c: () (Fixed) (Total:222.7 GB) (Free:153.15 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Drive d: (RECOVERY) (Fixed) (Total:10.18 GB) (Free:1.76 GB) NTFS ==>[System with boot components (obtained from reading drive)]

 

==================== MBR & Partition Table ==================

 

========================================================

Disk: 0 (Size: 232.9 GB) (Disk ID: 97466647)

Partition 1: (Active) - (Size=222.7 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=10.2 GB) - (Type=07 NTFS)

 

==================== End Of Log ============================

[Machiavelli]

IMPORTANT: You MUST use Internet Explorer for this step!

• Visit the ESET Online Scanner Web Page
• Select the blue Run ESET Online Scanner button:
  
• Tick the box next to YES, I accept the Terms of Use and click Start
  
• When asked, allow the ActiveX control to install.
• Select Enable detection of potentially unwanted applications and select Advanced Settings:
  
• Make sure to check the options Remove found threats and Enable Anti-Stealth technology are checked:
  
• Click Start. (This scan can take several hours, so please be patient):
  
• Once the scan is completed, select List of found threats:
  
• Select Export to text file... and save the file as ESETlog.txt on your Desktop:
  
• Click the Back button.
• Click the Finish button:
  
• Use Notepad to open the saved log file (on your Desktop- ESET.txt)[/b]
• Copy and paste that log as a reply to this topic.

[HaraMo]

Results ESET online scanner:

No log is made because no thread were found.

[Machiavelli]

OK, how is your system running?

[Machiavelli]

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.