Vraag & Antwoord

Beveiliging & privacy

Mappennamen niet zichtbaar

Anoniem
None
35 antwoorden
  • Beste forum-leden,

    Ik heb een vrij irritant probleem. Ik ben de namen van mijn bestandsmappen kwijt. Uiteraard heb ik al even gezocht in de diverse fora, maar daar komen oplossingen naar voren, die bij mij niet de oplossing oplevert.

    Als ik de Windows verkenner gebruik is er niets aan de hand. De mapnamen worden netjes weer gegeven… echter als ik bv. een afbeelding wil opslaan vanuit een programma (opslaan als…), dan zie ik nergens meer de namen weer gegeven.

    Hetzelfde geld voor het openen van bv. een wordbestand vanuit word.

    Ik heb al meerdere zaken geprobeerd, maar ik krijg de mapnamen niet terug. Als ik de weergave wijzig naar details, krijg ik ook geen details meer te zien… alleen de icoontjes zijn nog zichtbaar.

    Iemand enig idee wat hier mis gaat? En hoe ik dit kan oplossen?
  • Hoi, begin met het volgende:

    [b:e4afa5e921]Welk programma[/b:e4afa5e921]:
  • OTL logfile created on: 4-1-2013 11:33:49 - Run 1
    OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Passenier\Desktop
    64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
    Internet Explorer (Version = 9.0.8112.16421)
    Locale: 00000413 | Country: Nederland | Language: NLD | Date Format: d-M-yyyy

    7,98 Gb Total Physical Memory | 5,25 Gb Available Physical Memory | 65,81% Memory free
    15,96 Gb Paging File | 10,37 Gb Available in Paging File | 64,97% Paging File free
    Paging file location(s): ?:\pagefile.sys [binary data]

    %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
    Drive C: | 1850,60 Gb Total Space | 1165,57 Gb Free Space | 62,98% Space Free | Partition Type: NTFS
    Drive D: | 236,60 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
    Drive E: | 6,74 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
    Drive F: | 15,04 Gb Total Space | 11,36 Gb Free Space | 75,48% Space Free | Partition Type: FAT32

    Computer Name: PASSENIER_001 | User Name: Passenier | Logged in as Administrator.
    Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
    Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

  • OTL Extras logfile created on: 4-1-2013 11:33:49 - Run 1
    OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Passenier\Desktop
    64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
    Internet Explorer (Version = 9.0.8112.16421)
    Locale: 00000413 | Country: Nederland | Language: NLD | Date Format: d-M-yyyy

    7,98 Gb Total Physical Memory | 5,25 Gb Available Physical Memory | 65,81% Memory free
    15,96 Gb Paging File | 10,37 Gb Available in Paging File | 64,97% Paging File free
    Paging file location(s): ?:\pagefile.sys [binary data]

    %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
    Drive C: | 1850,60 Gb Total Space | 1165,57 Gb Free Space | 62,98% Space Free | Partition Type: NTFS
    Drive D: | 236,60 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
    Drive E: | 6,74 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
    Drive F: | 15,04 Gb Total Space | 11,36 Gb Free Space | 75,48% Space Free | Partition Type: FAT32

    Computer Name: PASSENIER_001 | User Name: Passenier | Logged in as Administrator.
    Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
    Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

  • Indien jij de [b:9863baa2ed]Dell DataSafe Local Backup[/b:9863baa2ed] niet gebruikt, kan je die software beter deïnstalleren.
    Dat scheelt dan ook weer in de lopende processen!

    [b:9863baa2ed]Welk programma[/b:9863baa2ed]:
  • ComboFix 13-01-06.01 - Passenier 07-01-2013 10:28:29.1.8 - x64
    Microsoft Windows 7 Home Premium 6.1.7601.1.1252.31.1043.18.8174.5829 [GMT 1:00]
    Gestart vanuit: c:\users\Passenier\Desktop\ComboFix.exe
    AV: McAfee Antivirus en antispyware *Disabled/Updated* {ADA629C7-7F48-5689-624A-3B76997E0892}
    FW: McAfee Firewall *Enabled* {959DA8E2-3527-57D1-4915-924367AD4FE9}
    SP: McAfee Antivirus en antispyware *Disabled/Updated* {16C7C823-5972-5907-58FA-0004E2F9422F}
    SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    .
    .
    (((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    C:\Install.exe
    c:\programdata\PCDr\6032\AddOnDownloaded\08c66698-ac37-420c-8ea0-a63d0e691e3a.dll
    c:\programdata\PCDr\6032\AddOnDownloaded\4011a5cd-1208-467b-b149-4c0534295875.dll
    c:\programdata\PCDr\6032\AddOnDownloaded\62089595-46e8-4c4f-9d7b-48be969390bb.dll
    c:\programdata\PCDr\6032\AddOnDownloaded\918ee45c-eb0a-4e61-97ad-c1849c2623ee.dll
    c:\programdata\PCDr\6032\AddOnDownloaded\b0654984-096d-4244-a127-3364577b6279.dll
    c:\users\Passenier\AppData\Local\assembly\tmp
    c:\users\Passenier\GoToAssistDownloadHelper.exe
    c:\windows\SysWow64\URTTemp
    c:\windows\SysWow64\URTTemp\regtlib.exe
    .
    .
    (((((((((((((((((((( Bestanden Gemaakt van 2012-12-07 to 2013-01-07 ))))))))))))))))))))))))))))))
    .
    .
    2013-01-07 09:33 . 2013-01-07 09:33 ——– d—–w- c:\users\Default\AppData\Local\temp
    2013-01-07 09:32 . 2013-01-07 09:32 76232 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{4E1038E4-1E37-45F9-8F30-39BF0CB392C6}\offreg.dll
    2013-01-07 08:00 . 2012-11-08 17:24 9125352 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{4E1038E4-1E37-45F9-8F30-39BF0CB392C6}\mpengine.dll
    2013-01-04 11:28 . 2012-05-28 09:28 197264 —-a-w- c:\windows\system32\drivers\HipShieldK.sys
    2013-01-03 08:56 . 2013-01-03 08:56 ——– d—–w- c:\program files (x86)\Staplessen
    2012-12-29 13:46 . 2012-12-29 13:46 ——– d—–w- c:\program files (x86)\Yahoo!
    2012-12-21 09:14 . 2012-12-16 17:11 46080 —-a-w- c:\windows\system32\atmlib.dll
    2012-12-21 09:14 . 2012-12-16 14:13 34304 —-a-w- c:\windows\SysWow64\atmlib.dll
    2012-12-21 09:14 . 2012-12-16 14:45 367616 —-a-w- c:\windows\system32\atmfd.dll
    2012-12-21 09:14 . 2012-12-16 14:13 295424 —-a-w- c:\windows\SysWow64\atmfd.dll
    2012-12-17 10:09 . 2012-12-17 10:09 ——– d—–w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
    2012-12-17 10:09 . 2012-12-17 10:09 ——– d—–w- c:\program files\iTunes
    2012-12-17 10:09 . 2012-12-17 10:09 ——– d—–w- c:\program files (x86)\iTunes
    2012-12-17 10:09 . 2012-12-17 10:09 ——– d—–w- c:\program files\iPod
    2012-12-15 08:38 . 2012-12-15 08:38 ——– d—–w- c:\program files (x86)\Microsoft Games for Windows - LIVE
    2012-12-15 08:38 . 2012-12-15 08:38 ——– d—–w- c:\windows\SysWow64\xlive
    2012-12-15 08:37 . 2008-07-12 07:18 467984 —-a-w- c:\windows\SysWow64\d3dx10_39.dll
    2012-12-15 08:37 . 2008-07-12 07:18 1493528 —-a-w- c:\windows\SysWow64\D3DCompiler_39.dll
    2012-12-15 08:37 . 2008-07-12 07:18 540688 —-a-w- c:\windows\system32\d3dx10_39.dll
    2012-12-15 08:37 . 2008-07-12 07:18 1942552 —-a-w- c:\windows\system32\D3DCompiler_39.dll
    2012-12-15 08:37 . 2008-07-12 07:18 3851784 —-a-w- c:\windows\SysWow64\D3DX9_39.dll
    2012-12-15 08:37 . 2008-07-12 07:18 4992520 —-a-w- c:\windows\system32\D3DX9_39.dll
    2012-12-12 21:31 . 2012-11-09 05:45 2048 —-a-w- c:\windows\system32\tzres.dll
    2012-12-12 21:30 . 2012-11-02 05:59 478208 —-a-w- c:\windows\system32\dpnet.dll
    2012-12-12 21:30 . 2012-11-02 05:11 376832 —-a-w- c:\windows\SysWow64\dpnet.dll
    .
    .
    .
    ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2012-12-12 21:53 . 2011-05-22 12:21 67413224 —-a-w- c:\windows\system32\MRT.exe
    2012-12-12 14:25 . 2012-04-09 08:14 697272 —-a-w- c:\windows\SysWow64\FlashPlayerApp.exe
    2012-12-12 14:25 . 2011-05-22 12:36 73656 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
    2012-11-09 05:40 . 2012-11-09 05:40 69672 —-a-w- c:\windows\system32\drivers\cfwids.sys
    2012-11-09 05:37 . 2012-07-09 12:50 339776 —-a-w- c:\windows\system32\drivers\mfewfpk.sys
    2012-11-09 05:37 . 2011-03-13 15:45 177680 —-a-w- c:\windows\system32\mfevtps.exe
    2012-11-09 05:35 . 2012-07-09 12:50 771096 —-a-w- c:\windows\system32\drivers\mfehidk.sys
    2012-11-09 05:34 . 2012-11-09 05:34 515528 —-a-w- c:\windows\system32\drivers\mfefirek.sys
    2012-11-09 05:34 . 2012-11-09 05:34 309400 —-a-w- c:\windows\system32\drivers\mfeavfk.sys
    2012-11-09 05:33 . 2012-11-09 05:33 178840 —-a-w- c:\windows\system32\drivers\mfeapfk.sys
    2012-11-06 07:57 . 2012-11-06 07:57 466456 —-a-w- c:\windows\system32\wrap_oal.dll
    2012-11-06 07:57 . 2012-11-06 07:57 444952 —-a-w- c:\windows\SysWow64\wrap_oal.dll
    2012-11-06 07:57 . 2012-11-06 07:57 122904 —-a-w- c:\windows\system32\OpenAL32.dll
    2012-11-06 07:57 . 2012-11-06 07:57 109080 —-a-w- c:\windows\SysWow64\OpenAL32.dll
    2012-11-02 10:06 . 2012-11-02 10:06 74703 —-a-w- c:\windows\SysWow64\mfc45.dat
    2012-11-02 00:46 . 2012-11-02 00:46 97208 —-a-w- c:\windows\system32\drivers\mfencrk.sys
    2012-11-02 00:46 . 2012-11-02 00:46 328976 —-a-w- c:\windows\system32\drivers\mfencbdc.sys
    2012-11-02 00:46 . 2012-11-02 00:46 10544 —-a-w- c:\windows\system32\drivers\mfeclnrk.sys
    2012-11-01 12:03 . 2012-11-01 12:03 74703 —-a-w- c:\windows\SysWow64\mfc45.dll
    2012-10-25 02:12 . 2012-10-25 02:12 94208 —-a-w- c:\windows\SysWow64\QuickTimeVR.qtx
    2012-10-25 02:12 . 2012-10-25 02:12 69632 —-a-w- c:\windows\SysWow64\QuickTime.qts
    2012-10-19 09:32 . 2012-11-01 12:07 2136064 —-a-w- c:\windows\system32\Incinerator64.dll
    2012-10-19 09:32 . 2012-11-01 12:07 2078208 —-a-w- c:\windows\SysWow64\Incinerator32.dll
    2012-10-19 09:04 . 2012-11-01 12:05 57680 —-a-w- c:\windows\system32\iolobtdfg.exe
    2012-10-19 09:03 . 2012-11-01 12:05 25744 —-a-w- c:\windows\system32\smrgdf.exe
    2012-10-19 08:38 . 2012-11-02 10:06 82160 —-a-w- c:\windows\system32\drivers\PDFsFilter.sys
    2012-10-16 08:38 . 2012-11-29 07:42 135168 —-a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
    2012-10-16 08:38 . 2012-11-29 07:42 350208 —-a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
    2012-10-16 07:39 . 2012-11-29 07:42 561664 —-a-w- c:\windows\apppatch\AcLayers.dll
    2012-10-11 12:13 . 2012-07-17 13:57 821736 —-a-w- c:\windows\SysWow64\npdeployJava1.dll
    2012-10-11 12:13 . 2011-05-13 08:35 746984 —-a-w- c:\windows\SysWow64\deployJava1.dll
    2012-10-09 18:17 . 2012-11-18 12:39 55296 —-a-w- c:\windows\system32\dhcpcsvc6.dll
    2012-10-09 18:17 . 2012-11-18 12:39 226816 —-a-w- c:\windows\system32\dhcpcore6.dll
    2012-10-09 17:40 . 2012-11-18 12:39 44032 —-a-w- c:\windows\SysWow64\dhcpcsvc6.dll
    2012-10-09 17:40 . 2012-11-18 12:39 193536 —-a-w- c:\windows\SysWow64\dhcpcore6.dll
    2011-08-15 18:50 . 2011-07-28 18:34 49412 —-a-w- c:\program files\Scan.dll.new
    2011-07-28 18:34 . 2011-06-06 19:13 48900 —-a-w- c:\program files\Scan.dll
    .
    .
    ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond
    REGEDIT4
    .
    [HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]
    2012-01-19 00:09 194848 —-a-w- c:\program files (x86)\Yontoo\YontooIEClient.dll
    .
    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
    @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
    [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
    2012-02-15 00:32 94208 —-a-w- c:\users\Passenier\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
    .
    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
    @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
    [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
    2012-02-15 00:32 94208 —-a-w- c:\users\Passenier\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
    .
    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
    @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
    [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
    2012-02-15 00:32 94208 —-a-w- c:\users\Passenier\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
    .
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
    "iCloudServices"="c:\program files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe" [2012-08-29 59280]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
    "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-11-28 59280]
    "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-12-12 152544]
    "mcpltui_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2012-10-07 454160]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "ConsentPromptBehaviorAdmin"= 5 (0x5)
    "ConsentPromptBehaviorUser"= 3 (0x3)
    "EnableUIADesktopToggle"= 0 (0x0)
    .
    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
    BootExecute REG_MULTI_SZ autocheck autochk *\0S??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0?????????????????\0??????\0autocheck smrgdf c:\users\Passenier\AppData\Roaming\iolo\\0\0
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ioloSystemService]
    @="Service"
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
    @=""
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]
    @=""
    .
    R1 FileDisk;FileDisk; [x]
    R1 RxFilter;RxFilter;c:\windows\system32\DRIVERS\RxFilter.sys [x]
    R2 CLKMSVC10_9EC60124;CyberLink Product - 2011/05/13 10:51;c:\program files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe [2010-10-26 236016]
    R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
    R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
    R2 DymoPnpService;DYMO PnP Service;c:\program files (x86)\DYMO\DYMO Label Software\DymoPnpService.exe [2011-01-28 32336]
    R2 McOobeSv;McAfee OOBE Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [2012-08-31 201304]
    R2 MMCSS;Multimedia Class Scheduler;c:\windows\system32\svchost.exe [2009-07-14 27136]
    R2 sppsvc;Software Protection;c:\windows\system32\sppsvc.exe [2010-11-20 3524608]
    R3 1394ohci;1394 OHCI Compliant Host Controller;c:\windows\system32\drivers\1394ohci.sys [2010-11-20 229888]
    R3 AcpiPmi;Stuurprogramma voor ACPI-compatibele energiemeter;c:\windows\system32\drivers\acpipmi.sys [2010-11-20 12800]
    R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-12-12 250808]
    R3 adp94xx;adp94xx;c:\windows\system32\DRIVERS\adp94xx.sys [2009-07-14 491088]
    R3 adpahci;adpahci;c:\windows\system32\DRIVERS\adpahci.sys [2009-07-14 339536]
    R3 amdsata;amdsata;c:\windows\system32\drivers\amdsata.sys [2011-03-11 107904]
    R3 amdsbs;amdsbs;c:\windows\system32\DRIVERS\amdsbs.sys [2009-07-14 194128]
    R3 AppID;AppID-stuurprogramma;c:\windows\system32\drivers\appid.sys [2010-11-20 61440]
    R3 AppIDSvc;Application Identity;c:\windows\system32\svchost.exe [2009-07-14 27136]
    R3 arcsas;arcsas;c:\windows\system32\DRIVERS\arcsas.sys [2009-07-14 97856]
    R3 b06bdrv;Broadcom NetXtreme II VBD;c:\windows\system32\DRIVERS\bxvbda.sys [2009-06-10 468480]
    R3 b57nd60a;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\b57nd60a.sys [2009-06-10 270848]
    R3 BDESVC;BitLocker Drive Encryption Service;c:\windows\System32\svchost.exe [2009-07-14 27136]
    R3 BrFiltLo;Brother USB Mass-Storage Lower Filter Driver;c:\windows\system32\DRIVERS\BrFiltLo.sys [2009-06-10 18432]
    R3 BrFiltUp;Brother USB Mass-Storage Upper Filter Driver;c:\windows\system32\DRIVERS\BrFiltUp.sys [2009-06-10 8704]
    R3 Brserid;Brother MFC Serial Port Interface Driver (WDM);c:\windows\System32\Drivers\Brserid.sys [2009-07-14 286720]
    R3 BrSerWdm;Brother WDM Serial driver;c:\windows\System32\Drivers\BrSerWdm.sys [2009-06-10 47104]
    R3 BrUsbMdm;Brother MFC USB Fax Only Modem;c:\windows\System32\Drivers\BrUsbMdm.sys [2009-06-10 14976]
    R3 BrUsbSer;Brother MFC USB Serial WDM Driver;c:\windows\System32\Drivers\BrUsbSer.sys [2009-06-10 14720]
    R3 BTHPORT;Stuurprogramma voor Bluetooth-poort;c:\windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
    R3 CertPropSvc;Certificate Propagation;c:\windows\system32\svchost.exe [2009-07-14 27136]
    R3 circlass;Consumer IR Devices;c:\windows\system32\DRIVERS\circlass.sys [2009-07-14 45568]
    R3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2011-05-24 79360]
    R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2011-05-13 79360]
    R3 Creative Media Toolbox 6 Licensing Service;Creative Media Toolbox 6 Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\MT6Licensing.exe [2011-05-24 79360]
    R3 defragsvc;Disk Defragmenter;c:\windows\system32\svchost.exe [2009-07-14 27136]
    R3 ebdrv;Broadcom NetXtreme II 10 GigE VBD;c:\windows\system32\DRIVERS\evbda.sys [2009-06-10 3286016]
    R3 ehRecvr;Windows Media Center Receiver Service;c:\windows\ehome\ehRecvr.exe [2010-11-20 696832]
    R3 ehSched;Windows Media Center Scheduler Service;c:\windows\ehome\ehsched.exe [2009-07-14 127488]
    R3 elxstor;elxstor;c:\windows\system32\DRIVERS\elxstor.sys [2009-07-14 530496]
    R3 ErrDev;Stuurprogramma voor Microsoft Hardware Error Device;c:\windows\system32\drivers\errdev.sys [2009-07-13 9728]
    R3 Fax;Fax;c:\windows\system32\fxssvc.exe [2010-11-20 689152]
    R3 fdPHost;Function Discovery Provider Host;c:\windows\system32\svchost.exe [2009-07-14 27136]
    R3 Filetrace;Filetrace;c:\windows\system32\drivers\filetrace.sys [2009-07-13 34304]
    R3 FLEXnet Licensing Service;FLEXnet Licensing Service;c:\program files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011-05-13 1045256]
    R3 FsDepends;File System Dependency Minifilter;c:\windows\system32\drivers\FsDepends.sys [2009-07-14 55376]
    R3 gagp30kx;Microsoft Generic AGPv3.0 Filter for K8 Processor Platforms;c:\windows\system32\DRIVERS\gagp30kx.sys [2009-07-14 65088]
    R3 hcw85cir;Hauppauge Consumer Infrared Receiver;c:\windows\system32\drivers\hcw85cir.sys [2009-06-10 31232]
    R3 HdAudAddService;Microsoft 1.1 UAA Functiestuurprogramma voor High Definition Audio-service;c:\windows\system32\drivers\HdAudio.sys [2010-11-20 350208]
    R3 HidBth;Microsoft Bluetooth HID Miniport;c:\windows\system32\DRIVERS\hidbth.sys [2009-07-14 100864]
    R3 HidIr;Microsoft Infrared HID Driver;c:\windows\system32\DRIVERS\hidir.sys [2009-07-14 46592]
    R3 HipShieldK;McAfee Inc. HipShieldK;c:\windows\system32\drivers\HipShieldK.sys [2012-05-28 197264]
    R3 HomeGroupListener;HomeGroup Listener;c:\windows\System32\svchost.exe [2009-07-14 27136]
    R3 HomeGroupProvider;HomeGroup Provider;c:\windows\System32\svchost.exe [2009-07-14 27136]
    R3 HpSAMD;HpSAMD;c:\windows\system32\drivers\HpSAMD.sys [2010-11-20 78720]
    R3 iaStorV;Intel RAID Controller Windows 7;c:\windows\system32\drivers\iaStorV.sys [2011-03-11 410496]
    R3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [2010-02-27 158976]
    R3 IPBusEnum;PnP-X IP Bus Enumerator;c:\windows\system32\svchost.exe [2009-07-14 27136]
    R3 IPMIDRV;IPMIDRV;c:\windows\system32\drivers\IPMIDrv.sys [2010-11-20 78848]
    R3 iScsiPrt;iScsiPort-stuurprogramma;c:\windows\system32\drivers\msiscsi.sys [2010-11-20 273792]
    R3 KtmRm;KtmRm for Distributed Transaction Coordinator;c:\windows\System32\svchost.exe [2009-07-14 27136]
    R3 lltdsvc;Link-Layer Topology Discovery Mapper;c:\windows\System32\svchost.exe [2009-07-14 27136]
    R3 LSI_FC;LSI_FC;c:\windows\system32\DRIVERS\lsi_fc.sys [2009-07-14 114752]
    R3 LSI_SAS;LSI_SAS;c:\windows\system32\DRIVERS\lsi_sas.sys [2009-07-14 106560]
    R3 LSI_SAS2;LSI_SAS2;c:\windows\system32\DRIVERS\lsi_sas2.sys [2009-07-14 65600]
    R3 LSI_SCSI;LSI_SCSI;c:\windows\system32\DRIVERS\lsi_scsi.sys [2009-07-14 115776]
    R3 McAWFwk;McAfee Activation Service;c:\progra~1\mcafee\msc\mcawfwk.exe [2011-01-28 225216]
    R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files (x86)\McAfee Security Scan\3.0.285\McCHSvc.exe [2012-09-05 234776]
    R3 megasas;megasas;c:\windows\system32\DRIVERS\megasas.sys [2009-07-14 35392]
    R3 MegaSR;MegaSR;c:\windows\system32\DRIVERS\MegaSR.sys [2009-07-14 284736]
    R3 mfencrk;McAfee Inc. mfencrk;c:\windows\system32\DRIVERS\mfencrk.sys [2012-11-02 97208]
    R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files (x86)\Microsoft Office\Office14\GROOVE.EXE [2012-09-20 30785672]
    R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-12-03 115168]
    R3 mpio;Stuurprogramma voor Microsoft mulitpad bus;c:\windows\system32\drivers\mpio.sys [2010-11-20 155008]
    R3 msahci;msahci;c:\windows\system32\drivers\msahci.sys [2010-11-20 31104]
    R3 msdsm;Specifieke module voor Microsoft multipadapparaat;c:\windows\system32\drivers\msdsm.sys [2010-11-20 140672]
    R3 mshidkmdf;Pass-through HID to KMDF Filter Driver;c:\windows\System32\drivers\mshidkmdf.sys [2009-07-14 8192]
    R3 MSiSCSI;Microsoft iSCSI Initiator Service;c:\windows\system32\svchost.exe [2009-07-14 27136]
    R3 MsRPC;MsRPC; [x]
    R3 MTConfig;Microsoft Input Configuration Driver;c:\windows\system32\DRIVERS\MTConfig.sys [2009-07-14 15360]
    R3 NdisCap;NDIS Capture LightWeight Filter;c:\windows\system32\DRIVERS\ndiscap.sys [2009-07-14 35328]
    R3 nfrd960;nfrd960;c:\windows\system32\DRIVERS\nfrd960.sys [2009-07-14 51264]
    R3 nvstor;nvstor;c:\windows\system32\drivers\nvstor.sys [2011-03-11 166272]
    R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
    R3 p2pimsvc;Peer Networking Identity Manager;c:\windows\System32\svchost.exe [2009-07-14 27136]
    R3 p2psvc;Peer Networking Grouping;c:\windows\System32\svchost.exe [2009-07-14 27136]
    R3 PCDSRVC{1E208CE0-FB7451FF-06020200}_0;PCDSRVC{1E208CE0-FB7451FF-06020200}_0 - PCDR Kernel Mode Service Helper Driver;c:\program files\dell support center\pcdsrvc_x64.pkms [2012-08-17 25584]
    R3 PerfHost;Performance Counter DLL Host;c:\windows\SysWow64\perfhost.exe [2009-07-14 20992]
    R3 pla;Performance Logs & Alerts;c:\windows\System32\svchost.exe [2009-07-14 27136]
    R3 PNRPAutoReg;PNRP Machine Name Publication Service;c:\windows\System32\svchost.exe [2009-07-14 27136]
    R3 PNRPsvc;Peer Name Resolution Protocol;c:\windows\System32\svchost.exe [2009-07-14 27136]
    R3 ql2300;ql2300;c:\windows\system32\DRIVERS\ql2300.sys [2009-07-14 1524816]
    R3 ql40xx;ql40xx;c:\windows\system32\DRIVERS\ql40xx.sys [2009-07-14 128592]
    R3 QWAVE;Quality Windows Audio Video Experience;c:\windows\system32\svchost.exe [2009-07-14 27136]
    R3 QWAVEdrv;QWAVE driver;c:\windows\system32\drivers\qwavedrv.sys [2009-07-14 46592]
    R3 rdpbus;Remote Desktop Device Redirector Bus Driver;c:\windows\system32\DRIVERS\rdpbus.sys [2009-07-14 24064]
    R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 19456]
    R3 sbp2port;SBP-2 Transport/Protocol-busstuurprogramma;c:\windows\system32\drivers\sbp2port.sys [2010-11-20 103808]
    R3 SCPolicySvc;Smart Card Removal Policy;c:\windows\system32\svchost.exe [2009-07-14 27136]
    R3 SensrSvc;Adaptive Brightness;c:\windows\system32\svchost.exe [2009-07-14 27136]
    R3 sermouse;Serial Mouse Driver;c:\windows\system32\DRIVERS\sermouse.sys [2009-07-14 26624]
    R3 SessionEnv;Remote Desktop Configuration;c:\windows\System32\svchost.exe [2009-07-14 27136]
    R3 sffdisk;SFF Storage Class-stuurprogramma;c:\windows\system32\drivers\sffdisk.sys [2009-07-14 14336]
    R3 sffp_mmc;Stuurprogramma volgens SFF-opslagprotocol voor MMC;c:\windows\system32\drivers\sffp_mmc.sys [2009-07-14 13824]
    R3 sffp_sd;Stuurprogramma volgens SFF-opslagprotocol voor SDBus;c:\windows\system32\drivers\sffp_sd.sys [2010-11-20 14336]
    R3 SiSRaid2;SiSRaid2;c:\windows\system32\DRIVERS\SiSRaid2.sys [2009-07-14 43584]
    R3 SiSRaid4;SiSRaid4;c:\windows\system32\DRIVERS\sisraid4.sys [2009-07-14 80464]
    R3 Smb;Bericht-georiënteerd TCP/IP- en TCP/IPv6-protocol (SMB-sessie);c:\windows\system32\DRIVERS\smb.sys [2009-07-14 93184]
    R3 SNMPTRAP;SNMP Trap;c:\windows\System32\snmptrap.exe [2009-07-14 14336]
    R3 sppuinotify;SPP Notification Service;c:\windows\system32\svchost.exe [2009-07-14 27136]
    R3 Steam Client Service;Steam Client Service;c:\program files (x86)\Common Files\Steam\SteamService.exe [2012-12-21 541760]
    R3 stexstor;stexstor;c:\windows\system32\DRIVERS\stexstor.sys [2009-07-14 24656]
    R3 stllssvr;stllssvr;c:\program files (x86)\Common Files\SureThing Shared\stllssvr.exe [2010-11-08 74392]
    R3 TabletInputService;Tablet PC Input Service;c:\windows\System32\svchost.exe [2009-07-14 27136]
    R3 TBS;TPM Base Services;c:\windows\System32\svchost.exe [2009-07-14 27136]
    R3 TCPIP6;Microsoft IPv6 Protocol Driver;c:\windows\system32\DRIVERS\tcpip.sys [2012-10-03 1914248]
    R3 THREADORDER;Thread Ordering Server;c:\windows\system32\svchost.exe [2009-07-14 27136]
    R3 TrustedInstaller;Windows Modules Installer;c:\windows\servicing\TrustedInstaller.exe [2010-11-20 194048]
    R3 tssecsrv;Remote Desktop Services Security Filter Driver;c:\windows\system32\DRIVERS\tssecsrv.sys [2010-11-20 39424]
    R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
    R3 uagp35;Microsoft AGPv3.5 Filter;c:\windows\system32\DRIVERS\uagp35.sys [2009-07-14 64080]
    R3 UI0Detect;Interactive Services Detection;c:\windows\system32\UI0Detect.exe [2009-07-14 40960]
    R3 uliagpkx;Uli AGP Bus Filter;c:\windows\system32\drivers\uliagpkx.sys [2009-07-14 64592]
    R3 UmPass;Microsoft UMPass Driver;c:\windows\system32\DRIVERS\umpass.sys [2009-07-14 9728]
    R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-09-28 53760]
    R3 usbcir;eHome-infraroodontvanger (USBCIR);c:\windows\system32\drivers\usbcir.sys [2009-07-14 100352]
    R3 VaultSvc;Credential Manager;c:\windows\system32\lsass.exe [2011-11-17 31232]
    R3 vhdmp;vhdmp;c:\windows\system32\drivers\vhdmp.sys [2010-11-20 215936]
    R3 vsmraid;vsmraid;c:\windows\system32\DRIVERS\vsmraid.sys [2009-07-14 161872]
    R3 WacomPen;Wacom Serial Pen HID Driver;c:\windows\system32\DRIVERS\wacompen.sys [2009-07-14 27776]
    R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [2011-05-22 1255736]
    R3 wbengine;Block Level Backup Engine Service;c:\windows\system32\wbengine.exe [2010-11-20 1504256]
    R3 WbioSrvc;Windows Biometric Service;c:\windows\system32\svchost.exe [2009-07-14 27136]
    R3 wcncsvc;Windows Connect Now - Config Registrar;c:\windows\System32\svchost.exe [2009-07-14 27136]
    R3 WcsPlugInService;Windows Color System;c:\windows\system32\svchost.exe [2009-07-14 27136]
    R3 Wd;Wd;c:\windows\system32\DRIVERS\wd.sys [2009-07-14 21056]
    R3 Wecsvc;Windows Event Collector;c:\windows\system32\svchost.exe [2009-07-14 27136]
    R3 wercplsupport;Problem Reports and Solutions Control Panel Support;c:\windows\System32\svchost.exe [2009-07-14 27136]
    R3 WerSvc;Windows Error Reporting Service;c:\windows\System32\svchost.exe [2009-07-14 27136]
    R3 WimFltr;WimFltr;c:\windows\system32\DRIVERS\wimfltr.sys [2006-11-01 151656]
    R3 WIMMount;WIMMount;c:\windows\system32\drivers\wimmount.sys [2009-07-14 22096]
    R3 WinRM;Windows Remote Management (WS-Management);c:\windows\System32\svchost.exe [2009-07-14 27136]
    R3 WinUsb;WinUsb;c:\windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]
    R3 WmiAcpi;Microsoft Windows Management Interface for ACPI;c:\windows\system32\drivers\wmiacpi.sys [2009-07-13 14336]
    R3 WPCSvc;Parental Controls;c:\windows\system32\svchost.exe [2009-07-14 27136]
    R3 WSDPrintDevice;WSD-ondersteuning voor afdrukken via UMB;c:\windows\system32\DRIVERS\WSDPrint.sys [2009-07-14 23040]
    R3 WwanSvc;WWAN AutoConfig;c:\windows\system32\svchost.exe [2009-07-14 27136]
    R4 clr_optimization_v2.0.50727_64;Microsoft .NET Framework NGEN v2.0.50727_X64;c:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe [2009-06-10 89920]
    R4 Mcx2Svc;Media Center Extender Service;c:\windows\system32\svchost.exe [2009-07-14 27136]
    R4 Roxio UPnP Renderer 10;Roxio UPnP Renderer 10;c:\program files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [2008-06-20 313840]
    R4 Roxio Upnp Server 10;Roxio Upnp Server 10;c:\program files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [2008-06-20 362992]
    R4 RoxLiveShare10;LiveShare P2P Server 10;c:\program files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxLiveShare10.exe [2008-06-20 309744]
    R4 RoxMediaDB10;RoxMediaDB10;c:\program files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe [2008-06-20 1120752]
    R4 RoxMediaDB12OEM;RoxMediaDB12OEM;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [2010-11-25 1116656]
    R4 RoxWatch10;Roxio Hard Drive Watcher 10;c:\program files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatch10.exe [2008-06-20 166384]
    R4 RoxWatch12;Roxio Hard Drive Watcher 12;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [2010-11-25 219632]
    R4 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
    R4 TeamViewer7;TeamViewer 7;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-07-16 2735528]
    R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
    S0 amdxata;amdxata;c:\windows\system32\drivers\amdxata.sys [2011-03-11 27008]
    S0 CLFS;Common Log (CLFS);c:\windows\System32\CLFS.sys [2009-07-14 367696]
    S0 CNG;CNG;c:\windows\System32\Drivers\cng.sys [2012-08-24 458712]
    S0 FileInfo;File Information FS MiniFilter;c:\windows\system32\drivers\fileinfo.sys [2009-07-14 70224]
    S0 fvevol;Filterstuurprogramma Bitlocker-stationsvergrendeling;c:\windows\System32\DRIVERS\fvevol.sys [2010-11-20 223248]
    S0 hwpolicy;Hardware Policy Driver;c:\windows\System32\drivers\hwpolicy.sys [2010-11-20 14720]
    S0 KSecPkg;KSecPkg;c:\windows\System32\Drivers\ksecpkg.sys [2012-08-24 154480]
    S0 mfewfpk;McAfee Inc. mfewfpk;c:\windows\system32\drivers\mfewfpk.sys [2012-11-09 339776]
    S0 msisadrv;msisadrv;c:\windows\system32\drivers\msisadrv.sys [2009-07-14 15424]
    S0 pcw;Performance Counters for Windows Driver;c:\windows\System32\drivers\pcw.sys [2009-07-14 50768]
    S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2010-03-19 55856]
    S0 rdyboost;ReadyBoost;c:\windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
    S0 spldr;Security Processor Loader Driver; [x]
    S0 vdrvroot;Microsoft Virtual Drive Enumerator-stuurprogramma;c:\windows\system32\drivers\vdrvroot.sys [2009-07-14 36432]
    S0 volmgr;Stuurprogramma voor Volumebeheer;c:\windows\system32\drivers\volmgr.sys [2010-11-20 71552]
    S0 volmgrx;Dynamisch Volumebeheer;c:\windows\System32\drivers\volmgrx.sys [2010-11-20 363392]
    S0 Wdf01000;Kernel Mode Driver Frameworks service;c:\windows\system32\drivers\Wdf01000.sys [2012-07-26 785512]
    S1 blbdrive;blbdrive;c:\windows\system32\DRIVERS\blbdrive.sys [2009-07-13 45056]
    S1 DfsC;DFS Namespace Client Driver;c:\windows\system32\Drivers\dfsc.sys [2010-11-20 102400]
    S1 discache;System Attribute Cache;c:\windows\system32\drivers\discache.sys [2009-07-13 40448]
    S1 ElRawDisk;ElRawDisk;c:\windows\system32\drivers\ElRawDsk.sys [2009-09-08 23464]
    S1 nsiproxy;NSI proxy service driver.;c:\windows\system32\drivers\nsiproxy.sys [2009-07-13 24576]
    S1 RDPENCDD;RDP Encoder Mirror Driver;c:\windows\system32\drivers\rdpencdd.sys [2009-07-14 7680]
    S1 RDPREFMP;Reflector Display Driver used to gain access to graphics data;c:\windows\system32\drivers\rdprefmp.sys [2009-07-14 8192]
    S1 tdx;Stuurprogramma voor ondersteuning van NetIO Legacy TDI;c:\windows\system32\DRIVERS\tdx.sys [2010-11-20 119296]
    S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
    S1 Wanarpv6;IPv6 ARP-stuurprogramma voor externe toegang;c:\windows\system32\DRIVERS\wanarp.sys [2010-11-20 88576]
    S1 WfpLwf;WFP Lightweight Filter;c:\windows\system32\DRIVERS\wfplwf.sys [2009-07-14 12800]
    S2 AdobeActiveFileMonitor9.0;Adobe Active File Monitor V9;c:\program files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe [2010-09-30 169408]
    S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63960]
    S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2010-12-09 203776]
    S2 Apple Mobile Device;Apple Mobile Device;c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2012-08-11 55184]
    S2 AudioEndpointBuilder;Windows Audio Endpoint Builder;c:\windows\System32\svchost.exe [2009-07-14 27136]
    S2 BFE;Base Filtering Engine;c:\windows\system32\svchost.exe [2009-07-14 27136]
    S2 CTAudSvcService;Creative Audio Service;c:\program files (x86)\Creative\Shared Files\CTAudSvc.exe [2009-02-23 307200]
    S2 DPS;Diagnostic Policy Service;c:\windows\System32\svchost.exe [2009-07-14 27136]
    S2 EFS;Encrypting File System (EFS);c:\windows\System32\lsass.exe [2011-11-17 31232]
    S2 FDResPub;Function Discovery Resource Publication;c:\windows\system32\svchost.exe [2009-07-14 27136]
    S2 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe [2009-07-14 27136]
    S2 gpsvc;Group Policy Client;c:\windows\system32\svchost.exe [2009-07-14 27136]
    S2 HomeNetSvc;McAfee Home Network;c:\program files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2012-10-07 220856]
    S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-09-13 13336]
    S2 IKEEXT;IKE and AuthIP IPsec Keying Modules;c:\windows\system32\svchost.exe [2009-07-14 27136]
    S2 ioloSystemService;iolo System Service;c:\program files (x86)\iolo\Common\Lib\ioloServiceManager.exe [2012-10-19 1028464]
    S2 iphlpsvc;IP Helper;c:\windows\System32\svchost.exe [2009-07-14 27136]
    S2 lltdio;Link-Layer Topology Discovery Mapper I/O Driver;c:\windows\system32\DRIVERS\lltdio.sys [2009-07-14 60928]
    S2 luafv;Virtualisatie van UAC-bestanden;c:\windows\system32\drivers\luafv.sys [2009-07-13 113152]
    S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [2012-08-31 201304]
    S2 McMPFSvc;McAfee Personal Firewall Service;c:\program files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2012-10-07 220856]
    S2 McNaiAnn;McAfee VirusScan Announcer;c:\program files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2012-10-07 220856]
    S2 mcpltsvc;McAfee Platform Services;c:\program files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2012-10-07 220856]
    S2 mfecore;McAfee Anti-Malware Core;c:\program files\Common Files\McAfee\AMCore\mcshield.exe [2012-10-06 1007288]
    S2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\McAfee\SystemCore\\mfefire.exe [2012-11-09 218320]
    S2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe [2012-11-09 177680]
    S2 MpsSvc;Windows Firewall;c:\windows\system32\svchost.exe [2009-07-14 27136]
    S2 NlaSvc;Network Location Awareness;c:\windows\System32\svchost.exe [2009-07-14 27136]
    S2 nsi;Network Store Interface Service;c:\windows\system32\svchost.exe [2009-07-14 27136]
    S2 PcaSvc;Program Compatibility Assistant Service;c:\windows\system32\svchost.exe [2009-07-14 27136]
    S2 PDFsFilter;PDFsFilter;c:\windows\system32\DRIVERS\PDFsFilter.sys [2012-10-19 82160]
    S2 PEAUTH;PEAUTH;c:\windows\system32\drivers\peauth.sys [2009-07-14 651264]
    S2 Power;Power;c:\windows\system32\svchost.exe [2009-07-14 27136]
    S2 ProfSvc;User Profile Service;c:\windows\system32\svchost.exe [2009-07-14 27136]
    S2 RpcEptMapper;RPC Endpoint Mapper;c:\windows\system32\svchost.exe [2009-07-14 27136]
    S2 rspndr;Link-Layer Topology Discovery Responder;c:\windows\system32\DRIVERS\rspndr.sys [2009-07-14 76800]
    S2 SysMain;Superfetch;c:\windows\system32\svchost.exe [2009-07-14 27136]
    S2 tcpipreg;TCP/IP Registry Compatibility;c:\windows\system32\drivers\tcpipreg.sys [2012-10-03 45568]
    S2 UxSms;Desktop Window Manager Session Manager;c:\windows\System32\svchost.exe [2009-07-14 27136]
    S2 WinDefend;Windows Defender;c:\windows\System32\svchost.exe [2009-07-14 27136]
    S2 Wlansvc;WLAN AutoConfig;c:\windows\system32\svchost.exe [2009-07-14 27136]
    S2 wlidsvc;Windows Live ID Sign-in Assistant;c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 2292096]
    S2 WSearch;Windows Search;c:\windows\system32\SearchIndexer.exe [2011-05-04 591872]
    S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [2010-12-09 8281088]
    S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2010-12-09 292352]
    S3 Appinfo;Application Information;c:\windows\system32\svchost.exe [2009-07-14 27136]
    S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [2010-11-17 115216]
    S3 BCM43XX;Stuurprogramma voor DW WLAN-kaart;c:\windows\system32\DRIVERS\bcmwl664.sys [2010-05-20 3058168]
    S3 bowser;Stuurprogramma voor browserondersteuning;c:\windows\system32\DRIVERS\bowser.sys [2011-02-23 90624]
    S3 BthEnum;Bluetooth-stuurprogramma voor aanvraagblok;c:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
    S3 BthPan;Bluetooth-apparaat (Personal Area Network);c:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
    S3 bthserv;Bluetooth Support Service;c:\windows\system32\svchost.exe [2009-07-14 27136]
    S3 BTHUSB;USB-stuurprogramma voor Bluetooth-radio;c:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
    S3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys [2010-07-13 344616]
    S3 btwaudio;Bluetooth-audioapparaat;c:\windows\system32\drivers\btwaudio.sys [2010-07-20 102952]
    S3 btwavdt;Bluetooth AVDT Service;c:\windows\system32\DRIVERS\btwavdt.sys [2010-07-20 135720]
    S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2010-03-02 39464]
    S3 btwrchid;btwrchid;c:\windows\system32\DRIVERS\btwrchid.sys [2010-07-20 21544]
    S3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys [2012-11-09 69672]
    S3 CompositeBus;Stuurprogramma voor Composite Bus Enumerator;c:\windows\system32\drivers\CompositeBus.sys [2010-11-20 38912]
    S3 DXGKrnl;LDDM Graphics Subsystem;c:\windows\System32\drivers\dxgkrnl.sys [2010-11-20 982912]
    S3 e.dentifier2;SmartCard Reader ABN AMRO e.dentifier2;c:\windows\system32\DRIVERS\aabed2.sys [2008-03-20 28672]
    S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [2010-06-08 406056]
    S3 KeyIso;CNG Key Isolation;c:\windows\system32\lsass.exe [2011-11-17 31232]
    S3 MEIx64;Intel(R) Management Engine Interface ;c:\windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
    S3 mfeapfk;McAfee Inc. mfeapfk;c:\windows\system32\drivers\mfeapfk.sys [2012-11-09 178840]
    S3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys [2012-11-09 515528]
    S3 mfencbdc;McAfee Inc. mfencbdc;c:\windows\system32\DRIVERS\mfencbdc.sys [2012-11-02 328976]
    S3 monitor;Microsoft Monitor Class Function Driver-service;c:\windows\system32\DRIVERS\monitor.sys [2009-07-13 30208]
    S3 mpsdrv;Autorisatiestuurprogramma van Windows Firewall;c:\windows\system32\drivers\mpsdrv.sys [2009-07-14 77312]
    S3 mrxsmb10;SMB 1.x mini-redirector;c:\windows\system32\DRIVERS\mrxsmb10.sys [2011-07-09 288768]
    S3 mrxsmb20;SMB 2.0 mini-redirector;c:\windows\system32\DRIVERS\mrxsmb20.sys [2011-04-27 128000]
    S3 NativeWifiP;NativeWiFi Filter;c:\windows\system32\DRIVERS\nwifi.sys [2009-07-14 318976]
    S3 netprofm;Network List Service;c:\windows\System32\svchost.exe [2009-07-14 27136]
    S3 RasAgileVpn;WAN Miniport (IKEv2);c:\windows\system32\DRIVERS\AgileVpn.sys [2009-07-14 60416]
    S3 RFCOMM;Bluetooth-apparaat (RFCOMM Protocol TDI);c:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
    S3 scfilter;Klassefilterstuurprogramma voor smartcard-PnP;c:\windows\system32\DRIVERS\scfilter.sys [2010-11-20 29696]
    S3 SDRSVC;Windows Backup;c:\windows\system32\svchost.exe [2009-07-14 27136]
    S3 srv2;Stuurprogramma Server SMB 2.xxx;c:\windows\system32\DRIVERS\srv2.sys [2011-04-29 410112]
    S3 srvnet;srvnet;c:\windows\system32\DRIVERS\srvnet.sys [2011-04-29 168448]
    S3 StillCam;Stuurprogramma voor seriële digitale fotocamera;c:\windows\system32\DRIVERS\serscan.sys [2009-07-14 12288]
    S3 t3;Sound Blaster X-Fi Xtreme Audio;c:\windows\system32\drivers\t3.sys [2009-07-27 639512]
    S3 tunnel;Stuurprogramma voor Microsoft IPv6 Tunnel-minipoortadapter;c:\windows\system32\DRIVERS\tunnel.sys [2010-11-20 125440]
    S3 umbus;UMBus Enumerator-stuurprogramma;c:\windows\system32\DRIVERS\umbus.sys [2010-11-20 48640]
    S3 vwifibus;Stuurprogramma voor Virtual WiFi-bus;c:\windows\system32\DRIVERS\vwifibus.sys [2009-07-14 24576]
    S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
    S3 WdiServiceHost;Diagnostic Service Host;c:\windows\System32\svchost.exe [2009-07-14 27136]
    S3 WdiSystemHost;Diagnostic System Host;c:\windows\System32\svchost.exe [2009-07-14 27136]
    S3 WPDBusEnum;Portable Device Enumerator Service;c:\windows\system32\svchost.exe [2009-07-14 27136]
    .
    .
    — Andere Services/Drivers In Geheugen —
    .
    *Deregistered* - CLKMDRV10_9EC60124
    *Deregistered* - ioloSGuardDriver
    *Deregistered* - mfeavfk01
    .
    Inhoud van de 'Gedeelde Taken' map
    .
    2013-01-07 c:\windows\Tasks\Adobe Flash Player Updater.job
    - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-09 14:25]
    .
    .
    ——— X64 Entries ———–
    .
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
    @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
    [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
    2012-02-15 00:32 97792 —-a-w- c:\users\Passenier\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
    @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
    [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
    2012-02-15 00:32 97792 —-a-w- c:\users\Passenier\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
    @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
    [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
    2012-02-15 00:32 97792 —-a-w- c:\users\Passenier\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
    @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
    [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
    2012-02-15 00:32 97792 —-a-w- c:\users\Passenier\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
    .
    ——- Bijkomende Scan ——-
    .
    uDefault_Search_URL = hxxp://www.google.com/ie
    uStart Page = hxxp://www.google.com/
    uInternet Settings,ProxyOverride = *.local
    uSearchAssistant = hxxp://www.google.com/ie
    uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
    IE: &Verzenden naar OneNote - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
    IE: Afbeelding verzenden naar &Bluetooth-apparaat… - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
    IE: Converteren naar Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
    IE: Doel van koppeling converteren naar Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
    IE: Doel van koppeling toevoegen aan bestaande PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
    IE: E&xporteren naar Microsoft Excel - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
    IE: Pagina verzenden naar &Bluetooth-apparaat… - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    IE: Toevoegen aan bestaande PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
    TCP: DhcpNameServer = 192.168.1.254 195.241.77.55 195.241.77.58
    DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} - hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
    FF - ProfilePath - c:\users\Passenier\AppData\Roaming\Mozilla\Firefox\Profiles\parv4eb0.default\
    FF - prefs.js: browser.startup.homepage - www.google.nl
    FF - user.js: extentions.y2layers.installId - 5d0ddc16-bb55-49d9-91ac-cf783bb63154
    FF - user.js: extentions.y2layers.defaultEnableAppsList - DropDownDeals,BestVideoDownloader,EzLooker,TwitTube,TopRelatedTopics,Buzzdock,
    FF - user.js: extensions.autoDisableScopes - 14
    FF - user.js: security.csp.enable - false
    .
    .
    ——- Bestandsassociaties ——-
    .
    JSEFile=NOTEPAD.EXE %1
    .
    - - - - ORPHANS VERWIJDERD - - - -
    .
    Toolbar-Locked - (no file)
    Wow6432Node-HKLM-Run-<NO NAME> - (no file)
    Wow6432Node-HKLM-RunOnce-c:\program files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe - c:\program files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe
    Toolbar-Locked - (no file)
    .
    .
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PCDSRVC{1E208CE0-FB7451FF-06020200}_0]
    "ImagePath"="\??\c:\program files\dell support center\pcdsrvc_x64.pkms"
    .
    ——————— VERGRENDELDE REGISTER SLEUTELS ———————
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
    @Denied: (A 2) (Everyone)
    @="FlashBroker"
    "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_135_ActiveX.exe,-101"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
    "Enabled"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
    @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_135_ActiveX.exe"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
    @Denied: (A 2) (Everyone)
    @="IFlashBroker5"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
    @="{00020424-0000-0000-C000-000000000046}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    "Version"="1.0"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
    @Denied: (A 2) (Everyone)
    @="FlashBroker"
    "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_135_ActiveX.exe,-101"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
    "Enabled"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_135_ActiveX.exe"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
    @Denied: (A 2) (Everyone)
    @="Shockwave Flash Object"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_135.ocx"
    "ThreadingModel"="Apartment"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
    @="0"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
    @="ShockwaveFlash.ShockwaveFlash.11"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_135.ocx, 1"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
    @="1.0"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
    @="ShockwaveFlash.ShockwaveFlash"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
    @Denied: (A 2) (Everyone)
    @="Macromedia Flash Factory Object"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_135.ocx"
    "ThreadingModel"="Apartment"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
    @="FlashFactory.FlashFactory.1"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_135.ocx, 1"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
    @="1.0"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
    @="FlashFactory.FlashFactory"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
    @Denied: (A 2) (Everyone)
    @="IFlashBroker5"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
    @="{00020424-0000-0000-C000-000000000046}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    "Version"="1.0"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
    "SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
    00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ApplicabilityEvaluationCache\Microsoft-Windows-WinMan-WinIP-Package-TopLevel~31bf3856ad364e35~amd64~~7.1.7601.16398]
    @DACL=(02 0000)
    "ApplicabilityState"=dword:00000070
    "CurrentState"=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ApplicabilityEvaluationCache\Package_for_KB2753842~31bf3856ad364e35~amd64~~6.1.1.2]
    @DACL=(02 0000)
    "ApplicabilityState"=dword:00000070
    "CurrentState"=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ApplicabilityEvaluationCache\Package_for_KB2758857~31bf3856ad364e35~amd64~~6.1.1.0]
    @DACL=(02 0000)
    "ApplicabilityState"=dword:00000070
    "CurrentState"=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ApplicabilityEvaluationCache\Package_for_KB2761465~31bf3856ad364e35~amd64~~10.2.1.0]
    @DACL=(02 0000)
    "ApplicabilityState"=dword:00000000
    "CurrentState"=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ApplicabilityEvaluationCache\Package_for_KB2761465~31bf3856ad364e35~amd64~~9.4.1.0]
    @DACL=(02 0000)
    "ApplicabilityState"=dword:00000070
    "CurrentState"=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ApplicabilityEvaluationCache\Package_for_KB2770660~31bf3856ad364e35~amd64~~6.1.1.0]
    @DACL=(02 0000)
    "ApplicabilityState"=dword:00000070
    "CurrentState"=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ApplicabilityEvaluationCache\Package_for_KB2779030~31bf3856ad364e35~amd64~~6.1.1.2]
    @DACL=(02 0000)
    "ApplicabilityState"=dword:00000070
    "CurrentState"=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ApplicabilityEvaluationCache\Package_for_KB2779562~31bf3856ad364e35~amd64~~6.1.1.1]
    @DACL=(02 0000)
    "ApplicabilityState"=dword:00000070
    "CurrentState"=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
    @Denied: (Full) (Everyone)
    .
    Voltooingstijd: 2013-01-07 10:35:01
    ComboFix-quarantined-files.txt 2013-01-07 09:35
    .
    Pre-Run: 1.252.209.664.000 bytes beschikbaar
    Post-Run: 1.251.969.482.752 bytes beschikbaar
    .
    - - End Of File - - 002017BC496EC287454634CB3257D753
  • Open een nieuw kladblok (of anders: notepad) bestand, via "Start\Alle programma’s\Bureau-accessoires\[b:abdb4e3338]Kladblok (of Notepad)[/b:abdb4e3338]".

    Kopieer en plak de volgende (vetgedrukte, blauwe tekst) in het lege kladblokvenstervenster


    [b:abdb4e3338]
  • ComboFix 13-01-06.01 - Passenier 07-01-2013 16:30:56.2.8 - x64
    Microsoft Windows 7 Home Premium 6.1.7601.1.1252.31.1043.18.8174.6142 [GMT 1:00]
    Gestart vanuit: c:\users\Passenier\Desktop\ComboFix.exe
    gebruikte Opdracht switches :: c:\users\Passenier\Desktop\CFScript.txt
    AV: McAfee Antivirus en antispyware *Disabled/Updated* {ADA629C7-7F48-5689-624A-3B76997E0892}
    FW: McAfee Firewall *Disabled* {959DA8E2-3527-57D1-4915-924367AD4FE9}
    SP: McAfee Antivirus en antispyware *Disabled/Updated* {16C7C823-5972-5907-58FA-0004E2F9422F}
    SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    .
    .
    (((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    c:\program files (x86)\Yontoo
    c:\program files (x86)\Yontoo\YontooIEClient.dll
    c:\users\Passenier\AppData\Local\assembly\tmp
    .
    .
    (((((((((((((((((((( Bestanden Gemaakt van 2012-12-07 to 2013-01-07 ))))))))))))))))))))))))))))))
    .
    .
    2013-01-07 15:35 . 2013-01-07 15:35 ——– d—–w- c:\users\Default\AppData\Local\temp
    2013-01-07 09:32 . 2013-01-07 09:32 76232 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{4E1038E4-1E37-45F9-8F30-39BF0CB392C6}\offreg.dll
    2013-01-07 08:00 . 2012-11-08 17:24 9125352 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{4E1038E4-1E37-45F9-8F30-39BF0CB392C6}\mpengine.dll
    2013-01-04 11:28 . 2012-05-28 09:28 197264 —-a-w- c:\windows\system32\drivers\HipShieldK.sys
    2013-01-03 08:56 . 2013-01-03 08:56 ——– d—–w- c:\program files (x86)\Staplessen
    2012-12-29 13:46 . 2012-12-29 13:46 ——– d—–w- c:\program files (x86)\Yahoo!
    2012-12-21 09:14 . 2012-12-16 17:11 46080 —-a-w- c:\windows\system32\atmlib.dll
    2012-12-21 09:14 . 2012-12-16 14:13 34304 —-a-w- c:\windows\SysWow64\atmlib.dll
    2012-12-21 09:14 . 2012-12-16 14:45 367616 —-a-w- c:\windows\system32\atmfd.dll
    2012-12-21 09:14 . 2012-12-16 14:13 295424 —-a-w- c:\windows\SysWow64\atmfd.dll
    2012-12-17 10:09 . 2012-12-17 10:09 ——– d—–w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
    2012-12-17 10:09 . 2012-12-17 10:09 ——– d—–w- c:\program files\iTunes
    2012-12-17 10:09 . 2012-12-17 10:09 ——– d—–w- c:\program files (x86)\iTunes
    2012-12-17 10:09 . 2012-12-17 10:09 ——– d—–w- c:\program files\iPod
    2012-12-15 08:38 . 2012-12-15 08:38 ——– d—–w- c:\program files (x86)\Microsoft Games for Windows - LIVE
    2012-12-15 08:38 . 2012-12-15 08:38 ——– d—–w- c:\windows\SysWow64\xlive
    2012-12-15 08:37 . 2008-07-12 07:18 467984 —-a-w- c:\windows\SysWow64\d3dx10_39.dll
    2012-12-15 08:37 . 2008-07-12 07:18 1493528 —-a-w- c:\windows\SysWow64\D3DCompiler_39.dll
    2012-12-15 08:37 . 2008-07-12 07:18 540688 —-a-w- c:\windows\system32\d3dx10_39.dll
    2012-12-15 08:37 . 2008-07-12 07:18 1942552 —-a-w- c:\windows\system32\D3DCompiler_39.dll
    2012-12-15 08:37 . 2008-07-12 07:18 3851784 —-a-w- c:\windows\SysWow64\D3DX9_39.dll
    2012-12-15 08:37 . 2008-07-12 07:18 4992520 —-a-w- c:\windows\system32\D3DX9_39.dll
    2012-12-12 21:31 . 2012-11-09 05:45 2048 —-a-w- c:\windows\system32\tzres.dll
    2012-12-12 21:30 . 2012-11-02 05:59 478208 —-a-w- c:\windows\system32\dpnet.dll
    2012-12-12 21:30 . 2012-11-02 05:11 376832 —-a-w- c:\windows\SysWow64\dpnet.dll
    .
    .
    .
    ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2012-12-12 21:53 . 2011-05-22 12:21 67413224 —-a-w- c:\windows\system32\MRT.exe
    2012-12-12 14:25 . 2012-04-09 08:14 697272 —-a-w- c:\windows\SysWow64\FlashPlayerApp.exe
    2012-12-12 14:25 . 2011-05-22 12:36 73656 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
    2012-11-09 05:40 . 2012-11-09 05:40 69672 —-a-w- c:\windows\system32\drivers\cfwids.sys
    2012-11-09 05:37 . 2012-07-09 12:50 339776 —-a-w- c:\windows\system32\drivers\mfewfpk.sys
    2012-11-09 05:37 . 2011-03-13 15:45 177680 —-a-w- c:\windows\system32\mfevtps.exe
    2012-11-09 05:35 . 2012-07-09 12:50 771096 —-a-w- c:\windows\system32\drivers\mfehidk.sys
    2012-11-09 05:34 . 2012-11-09 05:34 515528 —-a-w- c:\windows\system32\drivers\mfefirek.sys
    2012-11-09 05:34 . 2012-11-09 05:34 309400 —-a-w- c:\windows\system32\drivers\mfeavfk.sys
    2012-11-09 05:33 . 2012-11-09 05:33 178840 —-a-w- c:\windows\system32\drivers\mfeapfk.sys
    2012-11-06 07:57 . 2012-11-06 07:57 466456 —-a-w- c:\windows\system32\wrap_oal.dll
    2012-11-06 07:57 . 2012-11-06 07:57 444952 —-a-w- c:\windows\SysWow64\wrap_oal.dll
    2012-11-06 07:57 . 2012-11-06 07:57 122904 —-a-w- c:\windows\system32\OpenAL32.dll
    2012-11-06 07:57 . 2012-11-06 07:57 109080 —-a-w- c:\windows\SysWow64\OpenAL32.dll
    2012-11-02 10:06 . 2012-11-02 10:06 74703 —-a-w- c:\windows\SysWow64\mfc45.dat
    2012-11-02 00:46 . 2012-11-02 00:46 97208 —-a-w- c:\windows\system32\drivers\mfencrk.sys
    2012-11-02 00:46 . 2012-11-02 00:46 328976 —-a-w- c:\windows\system32\drivers\mfencbdc.sys
    2012-11-02 00:46 . 2012-11-02 00:46 10544 —-a-w- c:\windows\system32\drivers\mfeclnrk.sys
    2012-11-01 12:03 . 2012-11-01 12:03 74703 —-a-w- c:\windows\SysWow64\mfc45.dll
    2012-10-25 02:12 . 2012-10-25 02:12 94208 —-a-w- c:\windows\SysWow64\QuickTimeVR.qtx
    2012-10-25 02:12 . 2012-10-25 02:12 69632 —-a-w- c:\windows\SysWow64\QuickTime.qts
    2012-10-19 09:32 . 2012-11-01 12:07 2136064 —-a-w- c:\windows\system32\Incinerator64.dll
    2012-10-19 09:32 . 2012-11-01 12:07 2078208 —-a-w- c:\windows\SysWow64\Incinerator32.dll
    2012-10-19 09:04 . 2012-11-01 12:05 57680 —-a-w- c:\windows\system32\iolobtdfg.exe
    2012-10-19 09:03 . 2012-11-01 12:05 25744 —-a-w- c:\windows\system32\smrgdf.exe
    2012-10-19 08:38 . 2012-11-02 10:06 82160 —-a-w- c:\windows\system32\drivers\PDFsFilter.sys
    2012-10-16 08:38 . 2012-11-29 07:42 135168 —-a-w- c:\windows\apppatch\AppPatch64\AcXtrnal.dll
    2012-10-16 08:38 . 2012-11-29 07:42 350208 —-a-w- c:\windows\apppatch\AppPatch64\AcLayers.dll
    2012-10-16 07:39 . 2012-11-29 07:42 561664 —-a-w- c:\windows\apppatch\AcLayers.dll
    2012-10-11 12:13 . 2012-07-17 13:57 821736 —-a-w- c:\windows\SysWow64\npdeployJava1.dll
    2012-10-11 12:13 . 2011-05-13 08:35 746984 —-a-w- c:\windows\SysWow64\deployJava1.dll
    2012-10-09 18:17 . 2012-11-18 12:39 55296 —-a-w- c:\windows\system32\dhcpcsvc6.dll
    2012-10-09 18:17 . 2012-11-18 12:39 226816 —-a-w- c:\windows\system32\dhcpcore6.dll
    2012-10-09 17:40 . 2012-11-18 12:39 44032 —-a-w- c:\windows\SysWow64\dhcpcsvc6.dll
    2012-10-09 17:40 . 2012-11-18 12:39 193536 —-a-w- c:\windows\SysWow64\dhcpcore6.dll
    2011-08-15 18:50 . 2011-07-28 18:34 49412 —-a-w- c:\program files\Scan.dll.new
    2011-07-28 18:34 . 2011-06-06 19:13 48900 —-a-w- c:\program files\Scan.dll
    .
    .
    ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond
    REGEDIT4
    .
    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
    @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
    [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
    2012-02-15 00:32 94208 —-a-w- c:\users\Passenier\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
    .
    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
    @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
    [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
    2012-02-15 00:32 94208 —-a-w- c:\users\Passenier\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
    .
    [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
    @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
    [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
    2012-02-15 00:32 94208 —-a-w- c:\users\Passenier\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
    .
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
    "iCloudServices"="c:\program files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe" [2012-08-29 59280]
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
    "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-11-28 59280]
    "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-12-12 152544]
    "mcpltui_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2012-10-07 454160]
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "ConsentPromptBehaviorAdmin"= 5 (0x5)
    "ConsentPromptBehaviorUser"= 3 (0x3)
    "EnableUIADesktopToggle"= 0 (0x0)
    .
    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
    BootExecute REG_MULTI_SZ autocheck autochk *\0S??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0??,\0autocheck autochk *\0?????????????????\0??????\0autocheck smrgdf c:\users\Passenier\AppData\Roaming\iolo\\0\0
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ioloSystemService]
    @="Service"
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
    @=""
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc]
    @=""
    .
    R2 CLKMSVC10_9EC60124;CyberLink Product - 2011/05/13 10:51;c:\program files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe [2010-10-26 236016]
    R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
    R2 DymoPnpService;DYMO PnP Service;c:\program files (x86)\DYMO\DYMO Label Software\DymoPnpService.exe [2011-01-28 32336]
    R2 McOobeSv;McAfee OOBE Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [2012-08-31 201304]
    R3 Creative ALchemy AL6 Licensing Service;Creative ALchemy AL6 Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [2011-05-24 79360]
    R3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [2011-05-13 79360]
    R3 Creative Media Toolbox 6 Licensing Service;Creative Media Toolbox 6 Licensing Service;c:\program files (x86)\Common Files\Creative Labs Shared\Service\MT6Licensing.exe [2011-05-24 79360]
    R3 HipShieldK;McAfee Inc. HipShieldK;c:\windows\system32\drivers\HipShieldK.sys [2012-05-28 197264]
    R3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [2010-02-27 158976]
    R3 McAWFwk;McAfee Activation Service;c:\progra~1\mcafee\msc\mcawfwk.exe [2011-01-28 225216]
    R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files (x86)\McAfee Security Scan\3.0.285\McCHSvc.exe [2012-09-05 234776]
    R3 mfencrk;McAfee Inc. mfencrk;c:\windows\system32\DRIVERS\mfencrk.sys [2012-11-02 97208]
    R3 PCDSRVC{1E208CE0-FB7451FF-06020200}_0;PCDSRVC{1E208CE0-FB7451FF-06020200}_0 - PCDR Kernel Mode Service Helper Driver;c:\program files\dell support center\pcdsrvc_x64.pkms [2012-08-17 25584]
    R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 19456]
    R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
    R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [2012-09-28 53760]
    R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [2011-05-22 1255736]
    R4 Roxio UPnP Renderer 10;Roxio UPnP Renderer 10;c:\program files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe [2008-06-20 313840]
    R4 Roxio Upnp Server 10;Roxio Upnp Server 10;c:\program files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe [2008-06-20 362992]
    R4 RoxLiveShare10;LiveShare P2P Server 10;c:\program files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxLiveShare10.exe [2008-06-20 309744]
    R4 RoxMediaDB10;RoxMediaDB10;c:\program files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe [2008-06-20 1120752]
    R4 RoxMediaDB12OEM;RoxMediaDB12OEM;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [2010-11-25 1116656]
    R4 RoxWatch10;Roxio Hard Drive Watcher 10;c:\program files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatch10.exe [2008-06-20 166384]
    R4 RoxWatch12;Roxio Hard Drive Watcher 12;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [2010-11-25 219632]
    R4 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2012-07-13 160944]
    R4 TeamViewer7;TeamViewer 7;c:\program files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2012-07-16 2735528]
    R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
    S0 mfewfpk;McAfee Inc. mfewfpk;c:\windows\system32\drivers\mfewfpk.sys [2012-11-09 339776]
    S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2010-03-19 55856]
    S1 ElRawDisk;ElRawDisk;c:\windows\system32\drivers\ElRawDsk.sys [2009-09-08 23464]
    S2 AdobeActiveFileMonitor9.0;Adobe Active File Monitor V9;c:\program files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe [2010-09-30 169408]
    S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2010-12-09 203776]
    S2 HomeNetSvc;McAfee Home Network;c:\program files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2012-10-07 220856]
    S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-09-13 13336]
    S2 ioloSystemService;iolo System Service;c:\program files (x86)\iolo\Common\Lib\ioloServiceManager.exe [2012-10-19 1028464]
    S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [2012-08-31 201304]
    S2 McMPFSvc;McAfee Personal Firewall Service;c:\program files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2012-10-07 220856]
    S2 McNaiAnn;McAfee VirusScan Announcer;c:\program files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2012-10-07 220856]
    S2 mcpltsvc;McAfee Platform Services;c:\program files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [2012-10-07 220856]
    S2 mfecore;McAfee Anti-Malware Core;c:\program files\Common Files\McAfee\AMCore\mcshield.exe [2012-10-06 1007288]
    S2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\McAfee\SystemCore\\mfefire.exe [2012-11-09 218320]
    S2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe [2012-11-09 177680]
    S2 PDFsFilter;PDFsFilter;c:\windows\system32\DRIVERS\PDFsFilter.sys [2012-10-19 82160]
    S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys [2010-11-17 115216]
    S3 btwampfl;Bluetooth AMP USB Filter;c:\windows\system32\drivers\btwampfl.sys [2010-07-13 344616]
    S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys [2010-03-02 39464]
    S3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys [2012-11-09 69672]
    S3 e.dentifier2;SmartCard Reader ABN AMRO e.dentifier2;c:\windows\system32\DRIVERS\aabed2.sys [2008-03-20 28672]
    S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [2010-06-08 406056]
    S3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys [2012-11-09 515528]
    S3 mfencbdc;McAfee Inc. mfencbdc;c:\windows\system32\DRIVERS\mfencbdc.sys [2012-11-02 328976]
    S3 t3;Sound Blaster X-Fi Xtreme Audio;c:\windows\system32\drivers\t3.sys [2009-07-27 639512]
    .
    .
    — Andere Services/Drivers In Geheugen —
    .
    *Deregistered* - CLKMDRV10_9EC60124
    *Deregistered* - ioloSGuardDriver
    *Deregistered* - mfeavfk01
    .
    Inhoud van de 'Gedeelde Taken' map
    .
    2013-01-07 c:\windows\Tasks\Adobe Flash Player Updater.job
    - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-09 14:25]
    .
    .
    ——— X64 Entries ———–
    .
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
    @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
    [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
    2012-02-15 00:32 97792 —-a-w- c:\users\Passenier\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
    @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
    [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
    2012-02-15 00:32 97792 —-a-w- c:\users\Passenier\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
    @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
    [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
    2012-02-15 00:32 97792 —-a-w- c:\users\Passenier\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
    @="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
    [HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
    2012-02-15 00:32 97792 —-a-w- c:\users\Passenier\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
    .
    ——- Bijkomende Scan ——-
    .
    uDefault_Search_URL = hxxp://www.google.com/ie
    uStart Page = hxxp://www.google.com/
    uInternet Settings,ProxyOverride = *.local
    uSearchAssistant = hxxp://www.google.com/ie
    uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
    IE: &Verzenden naar OneNote - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
    IE: Afbeelding verzenden naar &Bluetooth-apparaat… - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
    IE: Converteren naar Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
    IE: Doel van koppeling converteren naar Adobe PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
    IE: Doel van koppeling toevoegen aan bestaande PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
    IE: E&xporteren naar Microsoft Excel - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
    IE: Pagina verzenden naar &Bluetooth-apparaat… - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    IE: Toevoegen aan bestaande PDF - c:\program files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
    TCP: DhcpNameServer = 192.168.1.254 195.241.77.55 195.241.77.58
    DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} - hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
    FF - ProfilePath - c:\users\Passenier\AppData\Roaming\Mozilla\Firefox\Profiles\parv4eb0.default\
    FF - prefs.js: browser.startup.homepage - www.google.nl
    FF - user.js: extentions.y2layers.installId - 5d0ddc16-bb55-49d9-91ac-cf783bb63154
    FF - user.js: extentions.y2layers.defaultEnableAppsList - DropDownDeals,BestVideoDownloader,EzLooker,TwitTube,TopRelatedTopics,Buzzdock,
    FF - user.js: extensions.autoDisableScopes - 14
    FF - user.js: security.csp.enable - false
    .
    - - - - ORPHANS VERWIJDERD - - - -
    .
    BHO-{FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - c:\program files (x86)\Yontoo\YontooIEClient.dll
    Toolbar-Locked - (no file)
    Wow6432Node-HKLM-Run-<NO NAME> - (no file)
    Wow6432Node-HKLM-RunOnce-c:\program files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe - c:\program files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpdate.exe
    .
    .
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\PCDSRVC{1E208CE0-FB7451FF-06020200}_0]
    "ImagePath"="\??\c:\program files\dell support center\pcdsrvc_x64.pkms"
    .
    ——————— VERGRENDELDE REGISTER SLEUTELS ———————
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
    @Denied: (A 2) (Everyone)
    @="FlashBroker"
    "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_135_ActiveX.exe,-101"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
    "Enabled"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
    @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_135_ActiveX.exe"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
    @Denied: (A 2) (Everyone)
    @="IFlashBroker5"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
    @="{00020424-0000-0000-C000-000000000046}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    "Version"="1.0"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
    @Denied: (A 2) (Everyone)
    @="FlashBroker"
    "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_135_ActiveX.exe,-101"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
    "Enabled"=dword:00000001
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_135_ActiveX.exe"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
    @Denied: (A 2) (Everyone)
    @="Shockwave Flash Object"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_135.ocx"
    "ThreadingModel"="Apartment"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
    @="0"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
    @="ShockwaveFlash.ShockwaveFlash.11"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_135.ocx, 1"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
    @="1.0"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
    @="ShockwaveFlash.ShockwaveFlash"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
    @Denied: (A 2) (Everyone)
    @="Macromedia Flash Factory Object"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_135.ocx"
    "ThreadingModel"="Apartment"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
    @="FlashFactory.FlashFactory.1"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
    @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_135.ocx, 1"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
    @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
    @="1.0"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
    @="FlashFactory.FlashFactory"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
    @Denied: (A 2) (Everyone)
    @="IFlashBroker5"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
    @="{00020424-0000-0000-C000-000000000046}"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
    @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
    "Version"="1.0"
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
    "SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
    00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ApplicabilityEvaluationCache\Microsoft-Windows-WinMan-WinIP-Package-TopLevel~31bf3856ad364e35~amd64~~7.1.7601.16398]
    @DACL=(02 0000)
    "ApplicabilityState"=dword:00000070
    "CurrentState"=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ApplicabilityEvaluationCache\Package_for_KB2753842~31bf3856ad364e35~amd64~~6.1.1.2]
    @DACL=(02 0000)
    "ApplicabilityState"=dword:00000070
    "CurrentState"=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ApplicabilityEvaluationCache\Package_for_KB2758857~31bf3856ad364e35~amd64~~6.1.1.0]
    @DACL=(02 0000)
    "ApplicabilityState"=dword:00000070
    "CurrentState"=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ApplicabilityEvaluationCache\Package_for_KB2761465~31bf3856ad364e35~amd64~~10.2.1.0]
    @DACL=(02 0000)
    "ApplicabilityState"=dword:00000000
    "CurrentState"=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ApplicabilityEvaluationCache\Package_for_KB2761465~31bf3856ad364e35~amd64~~9.4.1.0]
    @DACL=(02 0000)
    "ApplicabilityState"=dword:00000070
    "CurrentState"=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ApplicabilityEvaluationCache\Package_for_KB2770660~31bf3856ad364e35~amd64~~6.1.1.0]
    @DACL=(02 0000)
    "ApplicabilityState"=dword:00000070
    "CurrentState"=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ApplicabilityEvaluationCache\Package_for_KB2779030~31bf3856ad364e35~amd64~~6.1.1.2]
    @DACL=(02 0000)
    "ApplicabilityState"=dword:00000070
    "CurrentState"=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\ApplicabilityEvaluationCache\Package_for_KB2779562~31bf3856ad364e35~amd64~~6.1.1.1]
    @DACL=(02 0000)
    "ApplicabilityState"=dword:00000070
    "CurrentState"=dword:00000000
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
    @Denied: (Full) (Everyone)
    .
    Voltooingstijd: 2013-01-07 16:36:39
    ComboFix-quarantined-files.txt 2013-01-07 15:36
    ComboFix2.txt 2013-01-07 09:35
    .
    Pre-Run: 1.251.706.249.216 bytes beschikbaar
    Post-Run: 1.251.641.012.224 bytes beschikbaar
    .
    - - End Of File - - 83DB7C8756B6B90445D6DF875204B440
  • Laat nu eerst weten hoe jouw Windows nu draait.
  • Als ik de verkenner gebruik zie ik netjes alle namen staan… echter als ik vanuit een programma werk en ik bv. een bestand wil openen, dan zie ik geen namen staan… ik moet dus elke keer gokken waar het bestand ongeveer zou moeten staan.
  • Doe het volgende:

    [b:5ce394ad5c]Welk programma[/b:5ce394ad5c]:
  • [code:1:770e3c0adb]
    HitmanPro 3.7.0.185
    www.hitmanpro.com

    Computer name . . . . : PASSENIER_001
    Windows . . . . . . . : 6.1.1.7601.X64/8
    User name . . . . . . : Passenier_001\Passenier
    UAC . . . . . . . . . : Enabled
    License . . . . . . . : Free

    Scan date . . . . . . : 2013-01-07 21:51:51
    Scan mode . . . . . . : Normal
    Scan duration . . . . : 2m 17s
    Disk access mode . . : Direct disk access (SRB)
    Cloud . . . . . . . . : Internet
    Reboot . . . . . . . : No

    Threats . . . . . . . : 0
    Traces . . . . . . . : 30

    Objects scanned . . . : 2.204.867
    Files scanned . . . . : 114.083
    Remnants scanned . . : 677.985 files / 1.412.799 keys

    Potential Unwanted Programs _________________________________________________

    HKLM\SOFTWARE\Classes\AppID\YontooIEClient.DLL\ (Yontoo)
    HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4eaf-B541-F8DE92DD98DB}\ (Babylon)
    HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}\ (Yontoo)
    HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}\ (Funmoods)
    HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}\ (Yontoo)
    HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}\ (Yontoo)
    HKLM\SOFTWARE\Classes\Wow6432Node\AppID\YontooIEClient.DLL\ (Yontoo)
    HKLM\SOFTWARE\Classes\Wow6432Node\AppID\{BDB69379-802F-4eaf-B541-F8DE92DD98DB}\ (Babylon)
    HKLM\SOFTWARE\Classes\Wow6432Node\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}\ (Yontoo)
    HKLM\SOFTWARE\Classes\Wow6432Node\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}\ (Funmoods)
    HKLM\SOFTWARE\Classes\Wow6432Node\CLSID\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}\ (Yontoo)
    HKLM\SOFTWARE\Classes\Wow6432Node\CLSID\{7E84186E-B5DE-4226-8A66-6E49C6B511B4}\ (Yontoo)
    HKLM\SOFTWARE\Classes\Wow6432Node\CLSID\{80922ee0-8a76-46ae-95d5-bd3c3fe0708d}\ (Yontoo)
    HKLM\SOFTWARE\Classes\Wow6432Node\CLSID\{99066096-8989-4612-841F-621A01D54AD7}\ (Yontoo)
    HKLM\SOFTWARE\Classes\Wow6432Node\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}\ (Yontoo)
    HKLM\SOFTWARE\Classes\Wow6432Node\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}\ (Yontoo)
    HKLM\SOFTWARE\Classes\Wow6432Node\CLSID\{FE9271F2-6EFD-44b0-A826-84C829536E93}\ (Yontoo)
    HKLM\SOFTWARE\Classes\Wow6432Node\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}\ (Yontoo)
    HKLM\SOFTWARE\Classes\Wow6432Node\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}\ (Yontoo)
    HKLM\SOFTWARE\Classes\YontooIEClient.Api.1\ (Yontoo)
    HKLM\SOFTWARE\Classes\YontooIEClient.Api\ (Yontoo)
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\ (Yontoo)
    HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\niapdbllcanepiiimjjndipklodoedlc\ (Yontoo)
    HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}\ (Yontoo)
    HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}\ (Yontoo)

    Cookies _____________________________________________________________________

    C:\Users\Passenier\AppData\Roaming\Microsoft\Windows\Cookies\8A953WJJ.txt
    C:\Users\Passenier\AppData\Roaming\Microsoft\Windows\Cookies\LS2NFYQH.txt
    C:\Users\Passenier\AppData\Roaming\Microsoft\Windows\Cookies\NKBA3BU0.txt
    C:\Users\Passenier\AppData\Roaming\Microsoft\Windows\Cookies\SMLAPMSF.txt
    C:\Users\Passenier\AppData\Roaming\Microsoft\Windows\Cookies\WQBFYD4O.txt


    [/code:1:770e3c0adb]
  • Probeer dit ook:

    Download [b:008f901ea2] naar het bureaublad, als u een melding krijgt dat het bestand mogelijk onveilig is kunt u dit negeren.
    [list:008f901ea2]
    [*:008f901ea2] Dubbelklik op "[b:008f901ea2]Unhide.exe[/b:008f901ea2]" om de tool te starten.
    [*:008f901ea2] [b:008f901ea2]
  • Ik heb wel een pop-up gekregen, maar deze zag er anders uit. Het volgende logbestand kreeg ik erbij:

    [quote:e962ad259e]
    Unhide by Lawrence Abrams (Grinler)
    http://www.bleepingcomputer.com/
    Copyright 2008-2013 BleepingComputer.com
    More Information about Unhide.exe can be found at this link:
    http://www.bleepingcomputer.com/forums/topic405109.html

    Program started at: 01/08/2013 08:52:53 AM
    Windows Version: Windows 7

    Please be patient while your files are made visible again.

    Processing the C:\ drive
    Finished processing the C:\ drive. 383245 files processed.

    Processing the F:\ drive
    Finished processing the F:\ drive. 2946 files processed.

    Processing the G:\ drive
    Finished processing the G:\ drive. 0 files processed.

    Processing the H:\ drive
    Finished processing the H:\ drive. 0 files processed.

    Processing the I:\ drive
    Finished processing the I:\ drive. 0 files processed.

    Processing the J:\ drive
    Finished processing the J:\ drive. 0 files processed.

    The C:\Users\PASSEN~1\AppData\Local\Temp\smtmp\ folder does not exist!!
    Unhide cannot restore your missing shortcuts!!
    Please see this topic in order to learn how to restore default
    Start Menu shortcuts: http://www.bleepingcomputer.com/forums/topic405109.html

    Searching for Windows Registry changes made by FakeHDD rogues.
    - Checking HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
    - Checking HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
    - Checking HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System
    - Checking HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\ActiveDesktop
    - Checking HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
    No registry changes detected.

    Program finished at: 01/08/2013 10:00:49 AM
    Execution time: 1 hours(s), 7 minute(s), and 55 seconds(s)
    [/quote:e962ad259e]
  • De namen van de mappen en bestanden zijn nog steeds niet zichtbaar.
    Ik heb werkelijk geen idee wat dit kan veroorzaken… maar zo langzamerhand zit ik al te denken aan het opnieuw installeren van mijn besturingssysteem met alle ellende die daar dan weer bij komt.
  • Die mappen die niet zichtbaar zijn, staan die op de systeempartitie of op een andere partitie?
  • Werkelijk waar geen idee… maar ik kan geen enkele map of bestand zien waar een naam bij staat als ik deze probeer te openen vanuit een programma.
  • Doe de ComboFix scan nogmaals.
    Het kan na opstarten van ComboFix gebeuren dat er een melding komt:

    - of ComboFix wil geupdated worden;
    - of ComboFix wil opnieuw gedownload worden.

    Post wederom de inhoud van het ComboFix-log.
  • Combofix alleen, of met het speciale script?
  • Enkel ComboFix.
    Als dit met script moet, staat het erbij!

Beantwoord deze vraag

Dit is een gearchiveerde pagina. Antwoorden is niet meer mogelijk.