
pc-vraagje
Lid-
Items
70 -
Registratiedatum
-
Laatst bezocht
Inhoudstype
Profielen
Forums
Store
Alles dat geplaatst werd door pc-vraagje
-
Ik heb al een paar jaar een externe harde schijf aan staan, wat is het beste advies ? Als ik hem niet gebruik uit zetten, of gewoon laten draaien ? Het betreft en WD ( western Digital externe schijf ) al vast bedankt voor je antwoord. Groetjes . Michel Moderator u kunt de vraag sluiten Groetjes Michel
-
Bedankt voor jullie reactie. Groetjes Michel
-
Ik heb al een paar jaar een externe harde schijf aan staan, wat is het beste advies ? Als ik hem niet gebruik uit zetten, of gewoon laten draaien ? Het betreft en WD ( western Digital externe schijf ) al vast bedankt voor je antwoord. Groetjes . Michel
-
google account agenda synchroniseren
pc-vraagje reageerde op pc-vraagje's topic in Archief Tablet- en Smartphone
Ik sluit deze vraag later vanavond wel af.. groetjes -
google account agenda synchroniseren
pc-vraagje reageerde op pc-vraagje's topic in Archief Tablet- en Smartphone
Super Moderator, super dat je nog even reageerd. Ik ben er gelukkig uit gekomen. Ik ben met mijn mobiel naar Instellingen gegaan - applicatiebeheer- agenda - gegevens wissen ik heb daarna waarschijnlijk ook op verwijderen gedrukt. zodat mijn google agende app niet meer op mijn telefoon stond. Ik heb daarna mijn Google agenda app. weer gedownload en gelukkig alles werkte weer. Ik weet eigenlijk niet wat er verkeerd gegaan is. Maar goed het werkt in iedergeval weer, dan weet je meteen hoe vervelend het is als het niet werkt. Groetjes Michel van den Oetelaar -
Op dit moment heb ik een Samsung Galaxy S4 Mini Nu is het zo dat mijn google agenda niet meer werkt Als ik op mijn desktop computer via google agenda iets invoer komt hij wel op mijn mobiel google agenda naar boven. Alleen als ik iets in de google agenda app noteer komt hij niet terug op de google agenda op mijn desktop.. Toen ik het pas geinstalleerd had werkte het. Ik heb bij instellengen-accounts-google alles gesynchroniseerd. Wat kan hier het probleem zijn..? groetjes Michel
-
Beveiligingswaarschuwing
pc-vraagje reageerde op pc-vraagje's topic in Archief Bestrijding malware & virussen
kweezie wabbit: ik heb ook zo'n vermoeden. Nogmaals bedankt groetjes Michel. -
Beveiligingswaarschuwing
pc-vraagje reageerde op pc-vraagje's topic in Archief Bestrijding malware & virussen
Ja de melding is nog niet weg ?.. mijn Browser is firefox ik heb al een keer firefox op nieuw opgestart met alle add-0n uitgeschakeld, alleen veranderde er niets. op het moment dat ik met telebankieren een bank aan kies lees ik in mijn browser www.envoytransfers.com dit ging in het verleden altijd goed, en werkte ook zo.. alleen nu komt de waarschuwing elke keer naar boven ? Ik hoor graag wat voor opties we nog hebben. Groetjes Michel -
Beveiligingswaarschuwing
pc-vraagje reageerde op pc-vraagje's topic in Archief Bestrijding malware & virussen
Hierbij AdwCleaner (SO).txt Dit zou het juiste moeten zijn. excusses voor het vorige berichtje Hierbij de juist.. gr. MichelAdwCleanerS0.txt -
Beveiligingswaarschuwing
pc-vraagje reageerde op pc-vraagje's topic in Archief Bestrijding malware & virussen
Hkweezie wabbit, ik heb op scan gedrukt, ik kreeg kort een blauw balkje te zien, maar nu gebeurd er niets ? Hij zegt nu: Waiting for action. please uncheck elements you want to keep. De functie Clean is nog niet zichtbaar. hoe lang zou je daar op moeten wachten. Ik heb niet het gevoel dat er iets gebeurd . Is dit bekend bij jullie? Groetjes Michel -
Beveiligingswaarschuwing
pc-vraagje reageerde op pc-vraagje's topic in Archief Bestrijding malware & virussen
Hierbij plaats ik het log bestand gr Michelzoek-results.txt -
Beveiligingswaarschuwing
pc-vraagje reageerde op pc-vraagje's topic in Archief Bestrijding malware & virussen
Beste juisterr. hierbij de log gr Michellog.txt -
-
Heren bedankt voor jullie reactie, het is altijd goed om te horen waar andere mensen gebruik van maken en hoe hun ervaringen is. Groetjes Michel
-
Door de jaren heen heb ik een heleboel wachtwoorden in het gebruik. Kan er iemand me vertellen welk programma ik het beste kan gebruiken om al die wachtwoorden uit elkaar te houden al vast bedankt, Groetjes Michel
-
Pop up vensters
pc-vraagje reageerde op pc-vraagje's topic in Archief Bestrijding malware & virussen
Prima alle popups zijn verdwenen. al vast mijn dank er voor... de donatie komt er aan. even kijken hoe dat werkt.. Ik vindt het super interessant..ben geen expert, maar zou er wel meer in willen verdiepen. Nog tips toevallig wat ik zou kunnen doen om mijn pc kennis op een hoger niveau te krijgen, Studie c.q. boeken ik hoor het graag. Groetjes Michel -
Pop up vensters
pc-vraagje reageerde op pc-vraagje's topic in Archief Bestrijding malware & virussen
Zoek.exe Version 4.0.0.5 Updated 30-November-2013 Tool run by pc van papa on zo 01-12-2013 at 16:33:31,33. Microsoft® Windows Vista™ Home Premium 6.0.6002 Service Pack 2 x86 Running in: Normal Mode Internet Access Detected Launched: C:\Users\pc van papa\Desktop\zoek\zoek.com [script inserted] ==== Older Logs ====================== C:\zoek-results2013-11-30-115107.log 449 bytes C:\zoek-results2013-11-30-150405.log 11240 bytes C:\zoek-results2013-12-01-133031.log 17518 bytes ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== ==== Registry Fix Code ====================== Windows Registry Editor Version 5.00 [HKEY_USERS\S-1-5-21-1525442624-3355435439-3574477945-1000\Software\Microsoft\Windows\CurrentVersion\Run] "Intermediate"=- [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Intermediate"=- ==== Deleting Files \ Folders ====================== C:\Users\pc van papa\AppData\Roaming\Intermediate not found C:\Users\pc van papa\AppData\Local\ext_offermosquito deleted C:\Windows\system32\tasks\SpyHunter4Startup deleted C:\Windows\system32\tasks\{C25E3A3C-FA18-4D18-895F-189BDA4D7449} deleted ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions] "{20a82645-c095-46ed-80e3-08825760534b}"="C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension" [26-02-2012 20:41] [HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions] "magicplayer@torrentstream.org"="C:\Users\pc van papa\AppData\Roaming\ACEStream\extensions\firefox\magicplayer@torrentstream.org" [08-11-2013 08:10] ==== Firefox Extensions ====================== AppDir: C:\Program Files\Mozilla Firefox - Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ==== Firefox Plugins ====================== Profilepath: C:\Users\pc van papa\AppData\Roaming\Mozilla\Firefox\Profiles\qr8v4bu8.default-1380740250425 EE8D96E7899D12FC3AA5DB2034C0853C - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_152.dll - Shockwave Flash C694F47FB5870679B9C0D8D4BE97556B - C:\Users\pc van papa\AppData\Roaming\ACEStream\player\npace_plugin.dll - Ace Stream P2P Multimedia Plug-in CFAF7B67C78D09D79688AEDCA3D090E2 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll - Google Update 6768C724599214E4F9ADD9F8FF5097EB - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll - Java Platform SE 7 U45 F1CD6E22E5AE5CEEB7712E546A5FC853 - C:\Program Files\Java\jre7\bin\dtplugin\npdeployJava1.dll - Java Deployment Toolkit 7.0.450.18 BE501CBC29B2025A263D80D399F1797A - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll - Silverlight Plug-In 04ACC61B47857E779CD92D1D88770BF1 - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll - Adobe Acrobat 77B09C2C6F407531447DA75E3ACD1C5B - C:\Program Files\Adobe\Reader 10.0\Reader\browser\nppdf32.dll - Adobe Acrobat C517E5EA7CEE783F3681F62D2A362E5B - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll - Windows Live? Photo Gallery 4B76EFB51EC0900B6459BA0F588CE8A1 - C:\Program Files\Veetle\plugins\npVeetle.dll - Veetle TV Core A1B2B09240361031D1D794D57FC7359C - C:\Program Files\Veetle\Player\npvlc.dll - Veetle TV Player AB87EEFFD18F2BAAFC274E7075EA6C67 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll - Windows Presentation Foundation / Windows Presentation Foundation B27CCB1168B1960AEC6E9D3E0E0F0D2A - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrlui.dll - Microsoft® Silverlight ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.com/" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.com/" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes "DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}" ==== Empty IE Cache ====================== C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\pc van papa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Users\pc van papa\AppData\Local\Temp\acro_rd_dir\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\pc van papa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3DR549NA will be deleted at reboot C:\Users\pc van papa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot ==== Empty FireFox Cache ====================== C:\Users\pc van papa\AppData\Local\Mozilla\Firefox\Profiles\qr8v4bu8.default-1380740250425\Cache emptied successfully ==== Empty Chrome Cache ====================== No Chrome User Data found ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\PCVANP~1\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Users\pc van papa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not deleted "C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not deleted "C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not deleted "C:\Users\pc van papa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3DR549NA" not found ==== EOF on zo 01-12-2013 at 17:04:55,60 ====================== Hierbij weer een geopend logje.. Gr. Michel -
Pop up vensters
pc-vraagje reageerde op pc-vraagje's topic in Archief Bestrijding malware & virussen
Zoek.exe Version 4.0.0.5 Updated 30-November-2013 Tool run by pc van papa on zo 01-12-2013 at 13:43:25,86. Microsoft® Windows Vista™ Home Premium 6.0.6002 Service Pack 2 x86 Running in: Normal Mode Internet Access Detected Launched: C:\Users\pc van papa\Desktop\zoek\zoek.com [script inserted] [Checkboxes used] ==== Older Logs ====================== C:\zoek-results2013-11-30-115107.log 449 bytes C:\zoek-results2013-11-30-150405.log 11240 bytes ==== Empty Folders Check ====================== C:\Program Files\AGEIA Technologies deleted successfully C:\Program Files\Feed2All deleted successfully C:\Program Files\Logitech deleted successfully C:\Program Files\MSXML 4.0 deleted successfully C:\Program Files\TomTom DesktopSuite deleted successfully C:\ProgramData\Oracle deleted successfully C:\Users\pc van papa\AppData\Roaming\advantage deleted successfully C:\Users\pc van papa\AppData\Roaming\CheckPoint deleted successfully C:\Users\pc van papa\AppData\Roaming\f-secure deleted successfully C:\Users\pc van papa\AppData\Roaming\OfferMosquito deleted successfully C:\Users\pc van papa\AppData\Roaming\PeerNetworking deleted successfully C:\Users\pc van papa\AppData\Roaming\QuickScan deleted successfully C:\Users\pc van papa\AppData\Roaming\TorrentStream deleted successfully C:\Users\pc van papa\AppData\Roaming\Windows Live Writer deleted successfully C:\Users\pc van papa\AppData\Local\cache deleted successfully C:\Users\pc van papa\AppData\Local\LogiShrd deleted successfully ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{ba14329e-9550-4989-b3f2-9732e92d17cc} deleted successfully HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{ba14329e-9550-4989-b3f2-9732e92d17cc} deleted successfully ==== Deleting CLSID Registry Values ====================== HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{ba14329e-9550-4989-b3f2-9732e92d17cc} deleted successfully HKEY_USERS\S-1-5-21-1525442624-3355435439-3574477945-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{ba14329e-9550-4989-b3f2-9732e92d17cc} deleted successfully HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Approved Extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc} deleted successfully HKEY_USERS\S-1-5-21-1525442624-3355435439-3574477945-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\{ba14329e-9550-4989-b3f2-9732e92d17cc} deleted successfully ==== Deleting Services ====================== ==== Registry Fix Code ====================== Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "DataMgr"=- "Intermediate"- ==== Deleting Files \ Folders ====================== C:\Users\pc van papa\AppData\Roaming\Intermediate not found C:\Users\pc van papa\AppData\Roaming\Systweak not found C:\Users\pc van papa\AppData\Roaming\SpeedyPC Software not found C:\ProgramData\SpeedyPC Software not found C:\Users\pc van papa\AppData\Roaming\SSync not found C:\Program Files\Mobogenie not found C:\Users\pc van papa\AppData\Roaming\DataMgr deleted ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== ====== C:\Users\PCVANP~1\AppData\Local\Temp ==== 2013-11-27 08:52:26 AB555DBDD80BC967598548998AB99F96 8848416 ------w- C:\Users\pc van papa\AppData\Local\Temp\Temp1_Vuze_5.2.0.0_win32.zip\Vuze_5.2.0.0_win32.exe ====== Java Cache ===== ====== C:\Windows\system32 ===== ====== C:\Windows\system32\drivers ===== ====== C:\Windows\Tasks ====== 2013-11-06 18:21:21 E275CBC947714D110ACC7F76A5F4A531 4042 ----a-w- C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA 2013-11-06 18:21:21 3C688CD32A9B6A474D7852BEC76F3548 1046 ----a-w- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2013-11-06 18:21:17 988D293BED56076A47B10AC867DBFB55 3790 ----a-w- C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore 2013-11-06 18:21:16 0001BAB30F2A9CBAD7ABFDEB9820E858 1042 ----a-w- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job ====== C:\Windows\Temp ====== ======= C:\Program Files ===== 2013-11-27 16:23:34 -------- d-----w- C:\Program Files\trend micro 2013-11-06 18:20:49 -------- d-----w- C:\Program Files\Google 2013-11-06 18:15:37 -------- d-----w- C:\Program Files\iExplorer ======= C: ===== ====== C:\Users\pc van papa\AppData\Roaming ====== 2013-11-30 14:58:27 -------- d-----w- C:\Users\pc van papa\AppData\Local\Temp 2013-11-06 18:26:10 -------- d-----w- C:\Windows\system32\config\systemprofile\AppData\Local\Google 2013-11-06 18:22:56 -------- d-----w- C:\Users\pc van papa\AppData\Local\ext_offermosquito 2013-11-06 18:20:49 -------- d-----w- C:\Users\pc van papa\AppData\Local\Google 2013-11-06 18:19:24 -------- d-----w- C:\Users\pc van papa\AppData\Local\Macroplant_LLC 2013-11-06 18:16:45 -------- d-----w- C:\Users\pc van papa\AppData\Locallow\Apple Computer 2013-11-06 17:18:23 -------- d-----w- C:\Users\pc van papa\AppData\Roaming\DiskAid 2013-11-06 17:18:21 -------- d-----w- C:\Users\pc van papa\AppData\Local\DigiDNA ====== C:\Users\pc van papa ====== 2013-11-29 18:06:58 69CA82A7482A00D8EE063D2B97FC4338 781383 ----a-w- C:\Users\pc van papa\Downloads\RSIT.exe 2013-11-29 15:26:00 CE2E04C5B0C4820E129886A874D92C03 4618136 ----a-w- C:\Users\pc van papa\Downloads\ccsetup408.exe 2013-11-22 09:50:44 CD016B15D57E5B7EFF153AD963DDDFA4 1071224 ----a-w- C:\Users\pc van papa\Downloads\install_flashplayer11x32au_mssd_aaa_aih.exe ====== C: exe-files == 2013-11-30 16:03:38 AB555DBDD80BC967598548998AB99F96 8848416 ----a-w- C:\Users\pc van papa\AppData\Roaming\Azureus\tmp\AZU6910373271138841256.tmp\Vuze_5.2.0.0_win32.exe 2013-11-29 18:06:58 69CA82A7482A00D8EE063D2B97FC4338 781383 ----a-w- C:\Users\pc van papa\Downloads\RSIT.exe 2013-11-29 15:26:00 CE2E04C5B0C4820E129886A874D92C03 4618136 ----a-w- C:\Users\pc van papa\Downloads\ccsetup408.exe 2013-11-27 16:23:38 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\pc van papa.exe 2013-11-27 08:52:26 AB555DBDD80BC967598548998AB99F96 8848416 ------w- C:\Users\pc van papa\Documents\Vuze_5.2.0.0_win32\Vuze_5.2.0.0_win32.exe 2013-11-27 08:52:26 AB555DBDD80BC967598548998AB99F96 8848416 ------w- C:\Users\pc van papa\AppData\Local\Temp\Temp1_Vuze_5.2.0.0_win32.zip\Vuze_5.2.0.0_win32.exe 2013-11-26 12:53:54 DC3C17C18CECFB1B855682F43DE3F153 2559344 ----a-w- C:\EEK\Run\a2cmd.exe === C: other files == 2013-12-01 10:27:38 892C5094D3785C0716851320A1FA41E9 3253 ----a-w- C:\Users\pc van papa\.rainlendar2\backups\20131201-Rainlendar2Backup.zip 2013-11-30 16:03:23 EE9AC2DE9FE7DFA7832EDA1DAAA23B80 8017140 ----a-w- C:\Users\pc van papa\AppData\Local\Temp\Vuze_5.2.0.0_win32.zip 2013-11-29 23:00:01 7C0AB01C04FF3B1D72E1B72B0AC8C43B 3253 ----a-w- C:\Users\pc van papa\.rainlendar2\backups\20131130-Rainlendar2Backup.zip 2013-11-28 23:08:24 B06D53077E1D25646DD37E2C45F6E397 3195 ----a-w- C:\Users\pc van papa\.rainlendar2\backups\20131129-Rainlendar2Backup.zip 2013-11-28 07:45:27 5FA14F03234CFB2A55C38F76CB064C5A 3195 ----a-w- C:\Users\pc van papa\.rainlendar2\backups\20131128-Rainlendar2Backup.zip 2013-11-27 08:59:50 932A263A6B2D1DD88D150445BFD4A73B 3204 ----a-w- C:\Users\pc van papa\.rainlendar2\backups\20131127-Rainlendar2Backup.zip 2013-11-26 08:20:45 2EF95206947EB1BFB9E3CD9200F2B873 3204 ----a-w- C:\Users\pc van papa\.rainlendar2\backups\20131126-Rainlendar2Backup.zip 2013-11-25 07:15:56 9C74179388183ECA2975E2913BD63721 3204 ----a-w- C:\Users\pc van papa\.rainlendar2\backups\20131125-Rainlendar2Backup.zip ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run] "WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter" "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /detectMem" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run] "WindowsWelcomeCenter"="rundll32.exe oobefldr.dll,ShowWelcomeCenter" "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /detectMem" [HKEY_USERS\S-1-5-21-1525442624-3355435439-3574477945-1000\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun" "Rainlendar2"="C:\Program Files\Rainlendar2\Rainlendar2.exe" "ehTray.exe"="C:\Windows\ehome\ehTray.exe" "Skype"="C:\Program Files\Skype\Phone\Skype.exe /minimized /regrun" "WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" "ACEStream"="C:\Users\pc van papa\AppData\Roaming\ACEStream\engine\ace_engine.exe" "TomTomHOME.exe"="C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe" "SSync"="C:\Users\pc van papa\AppData\Roaming\SSync\SSync.exe" "Intermediate"="C:\Users\pc van papa\AppData\Roaming\Intermediate\Intermediate.exe" "SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NeroFilterCheck"="C:\Windows\system32\NeroCheck.exe" "WD Quick View"="C:\Program Files\Western Digital\WD Quick View\WDDMStatus.exe" "Adobe ARM"="C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "MSC"="C:\Program Files\Microsoft Security Client\msseces.exe -hide -runkey" "SunJavaUpdateSched"="C:\Program Files\Common Files\Java\Java Update\jusched.exe" "Windows Defender"="%ProgramFiles%\Windows Defender\MSASCui.exe -hide" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe /autoRun" "Rainlendar2"="C:\Program Files\Rainlendar2\Rainlendar2.exe" "ehTray.exe"="C:\Windows\ehome\ehTray.exe" "Skype"="C:\Program Files\Skype\Phone\Skype.exe /minimized /regrun" "WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" "ACEStream"="C:\Users\pc van papa\AppData\Roaming\ACEStream\engine\ace_engine.exe" "TomTomHOME.exe"="C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe" "SSync"="C:\Users\pc van papa\AppData\Roaming\SSync\SSync.exe" "Intermediate"="C:\Users\pc van papa\AppData\Roaming\Intermediate\Intermediate.exe" "SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" ==== Startup Folders ====================== 2013-10-28 10:01:57 1101 ----a-w- C:\Users\pc van papa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Schermopname en Snel starten.lnk ==== Task Scheduler Jobs ====================== C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [22-11-2013 11:39] C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [06-11-2013 19:20] C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [06-11-2013 19:20] ==== Other Scheduled Tasks ====================== "C:\Windows\system32\tasks\Adobe Flash Player Updater" [C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe] "C:\Windows\system32\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"] "C:\Windows\system32\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files\Google\Update\GoogleUpdate.exe] "C:\Windows\system32\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files\Google\Update\GoogleUpdate.exe] "C:\Windows\system32\tasks\SpyHunter4Startup" ["C:\Program Files\Enigma Software Group\SpyHunter\Spyhunter4.exe"] "C:\Windows\system32\tasks\{C25E3A3C-FA18-4D18-895F-189BDA4D7449}" ["c:\program files\mozilla firefox\firefox.exe"] "C:\Windows\system32\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc] ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions] "{20a82645-c095-46ed-80e3-08825760534b}"="C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension" [26-02-2012 20:41] [HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions] "magicplayer@torrentstream.org"="C:\Users\pc van papa\AppData\Roaming\ACEStream\extensions\firefox\magicplayer@torrentstream.org" [08-11-2013 08:10] ==== Firefox Extensions ====================== AppDir: C:\Program Files\Mozilla Firefox - Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ==== Firefox Plugins ====================== Profilepath: C:\Users\pc van papa\AppData\Roaming\Mozilla\Firefox\Profiles\qr8v4bu8.default-1380740250425 EE8D96E7899D12FC3AA5DB2034C0853C - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_152.dll - Shockwave Flash C694F47FB5870679B9C0D8D4BE97556B - C:\Users\pc van papa\AppData\Roaming\ACEStream\player\npace_plugin.dll - Ace Stream P2P Multimedia Plug-in CFAF7B67C78D09D79688AEDCA3D090E2 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll - Google Update 6768C724599214E4F9ADD9F8FF5097EB - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll - Java Platform SE 7 U45 F1CD6E22E5AE5CEEB7712E546A5FC853 - C:\Program Files\Java\jre7\bin\dtplugin\npdeployJava1.dll - Java Deployment Toolkit 7.0.450.18 BE501CBC29B2025A263D80D399F1797A - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll - Silverlight Plug-In 04ACC61B47857E779CD92D1D88770BF1 - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll - Adobe Acrobat 77B09C2C6F407531447DA75E3ACD1C5B - C:\Program Files\Adobe\Reader 10.0\Reader\browser\nppdf32.dll - Adobe Acrobat C517E5EA7CEE783F3681F62D2A362E5B - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll - Windows Live? Photo Gallery 4B76EFB51EC0900B6459BA0F588CE8A1 - C:\Program Files\Veetle\plugins\npVeetle.dll - Veetle TV Core A1B2B09240361031D1D794D57FC7359C - C:\Program Files\Veetle\Player\npvlc.dll - Veetle TV Player AB87EEFFD18F2BAAFC274E7075EA6C67 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll - Windows Presentation Foundation / Windows Presentation Foundation B27CCB1168B1960AEC6E9D3E0E0F0D2A - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrlui.dll - Microsoft® Silverlight ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.com/" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.com/" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes "DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}" ==== Empty IE Cache ====================== C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\pc van papa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FXH0NFCB will be deleted at reboot C:\Users\pc van papa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\N96N0T9U will be deleted at reboot C:\Users\pc van papa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot ==== Empty FireFox Cache ====================== C:\Users\pc van papa\AppData\Local\Mozilla\Firefox\Profiles\qr8v4bu8.default-1380740250425\Cache emptied successfully ==== Empty Chrome Cache ====================== No Chrome User Data found ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\PCVANP~1\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Users\pc van papa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not deleted "C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not deleted "C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not deleted "C:\Users\pc van papa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FXH0NFCB" not found "C:\Users\pc van papa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\N96N0T9U" not found ==== EOF on zo 01-12-2013 at 14:30:31,82 ====================== Hierbij nogmaals de gegevens incl. de opdrachten uit het invulvenster. Nu zou het moeten kunnen.. groetjes Michel -
Pop up vensters
pc-vraagje reageerde op pc-vraagje's topic in Archief Bestrijding malware & virussen
Zoek.exe Version 4.0.0.5 Updated 24-November-2013 Tool run by pc van papa on za 30-11-2013 at 15:29:35,07. Microsoft® Windows Vista™ Home Premium 6.0.6002 Service Pack 2 x86 Running in: Normal Mode Internet Access Detected Launched: C:\Users\pc van papa\AppData\Local\Temp\Temp2_zoek.zip\zoek.scr [Checkboxes used] ==== Older Logs ====================== C:\zoek-results2013-11-30-115107.log 449 bytes ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-1525442624-3355435439-3574477945-1000\Software\Microsoft\Internet Explorer\SearchScopes\{DA3B8372-9729-4AD1-923F-F4DB790206D4} deleted successfully ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== ==== FireFox Fix ====================== Deleted from C:\Users\pc van papa\AppData\Roaming\Mozilla\Firefox\Profiles\qr8v4bu8.default-1380740250425\prefs.js: user_pref("browser.search.useDBForOrder", "false"); Added to C:\Users\pc van papa\AppData\Roaming\Mozilla\Firefox\Profiles\qr8v4bu8.default-1380740250425\prefs.js: user_pref("browser.startup.homepage", "http://www.google.com"); user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q="); user_pref("browser.newtab.url", "http://www.google.com/"); user_pref("browser.search.defaultengine", "Google"); user_pref("browser.search.defaultenginename", "Google"); user_pref("browser.search.selectedEngine", "Google"); user_pref("browser.search.order.1", "Google"); user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q="); user_pref("browser.search.suggest.enabled", true); user_pref("browser.search.useDBForOrder", true); ProfilePath: C:\Users\pc van papa\AppData\Roaming\Mozilla\Firefox\Profiles\qr8v4bu8.default-1380740250425 user.js not found ---- FireFox user.js and prefs.js backups ---- prefs_30-11-2013_1551_.backup ==== Deleting Files \ Folders ====================== C:\Users\pc van papa\daemonprocess.txt deleted C:\Program Files\Mobogenie deleted C:\Program Files\SopCast deleted C:\Program Files\1ClickDownload deleted C:\Program Files\Conduit deleted C:\found.000 deleted C:\found.001 deleted C:\Users\pc van papa\AppData\Roaming\Intermediate deleted C:\Users\pc van papa\AppData\Roaming\SSync deleted C:\Users\pc van papa\AppData\Roaming\Common deleted C:\Users\pc van papa\AppData\Roaming\SpeedyPC Software deleted C:\Users\pc van papa\AppData\Roaming\DriverCure deleted C:\Users\pc van papa\AppData\Roaming\CheckPoint\ZoneAlarm LTD Toolbar deleted C:\Users\pc van papa\AppData\Roaming\Systweak deleted C:\Users\pc van papa\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\gencrawler@some.com deleted C:\Users\pc van papa\AppData\Roaming\Media Finder deleted C:\ProgramData\APN deleted C:\ProgramData\SpeedyPC Software deleted C:\Users\pc van papa\AppData\Local\Ilivid Player deleted C:\Users\pc van papa\AppData\Local\Mobogenie deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Finder deleted C:\Users\pc van papa\Downloads\rcpsetup_25752.exe deleted C:\Users\pc van papa\Downloads\SopCast-3.5.0.exe deleted C:\Users\pc van papa\Downloads\SpeedyPC_Error_Fix.exe deleted C:\Users\pc van papa\AppData\LocalLow\PriceGong deleted C:\Users\pc van papa\AppData\LocalLow\Conduit deleted C:\Windows\system32\config\systemprofile\AppData\LocalLow\Vuze_Remote deleted C:\Windows\system32\config\systemprofile\AppData\LocalLow\PriceGong deleted C:\Windows\system32\roboot.exe deleted ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions] "{20a82645-c095-46ed-80e3-08825760534b}"="C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension" [26-02-2012 20:41] [HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions] "magicplayer@torrentstream.org"="C:\Users\pc van papa\AppData\Roaming\ACEStream\extensions\firefox\magicplayer@torrentstream.org" [08-11-2013 08:10] ==== Firefox Extensions ====================== ProfilePath: C:\Users\pc van papa\AppData\Roaming\Mozilla\Firefox\Profiles\qr8v4bu8.default-1380740250425 - OfferMosquito - %ProfilePath%\extensions\om@offermosquito.com.xpi AppDir: C:\Program Files\Mozilla Firefox - Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ==== Firefox Plugins ====================== Profilepath: C:\Users\pc van papa\AppData\Roaming\Mozilla\Firefox\Profiles\qr8v4bu8.default-1380740250425 EE8D96E7899D12FC3AA5DB2034C0853C - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_152.dll - Shockwave Flash C694F47FB5870679B9C0D8D4BE97556B - C:\Users\pc van papa\AppData\Roaming\ACEStream\player\npace_plugin.dll - Ace Stream P2P Multimedia Plug-in CFAF7B67C78D09D79688AEDCA3D090E2 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll - Google Update 6768C724599214E4F9ADD9F8FF5097EB - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll - Java Platform SE 7 U45 F1CD6E22E5AE5CEEB7712E546A5FC853 - C:\Program Files\Java\jre7\bin\dtplugin\npdeployJava1.dll - Java Deployment Toolkit 7.0.450.18 BE501CBC29B2025A263D80D399F1797A - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll - Silverlight Plug-In 04ACC61B47857E779CD92D1D88770BF1 - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll - Adobe Acrobat 77B09C2C6F407531447DA75E3ACD1C5B - C:\Program Files\Adobe\Reader 10.0\Reader\browser\nppdf32.dll - Adobe Acrobat C517E5EA7CEE783F3681F62D2A362E5B - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll - Windows Live? Photo Gallery 4B76EFB51EC0900B6459BA0F588CE8A1 - C:\Program Files\Veetle\plugins\npVeetle.dll - Veetle TV Core A1B2B09240361031D1D794D57FC7359C - C:\Program Files\Veetle\Player\npvlc.dll - Veetle TV Player AB87EEFFD18F2BAAFC274E7075EA6C67 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll - Windows Presentation Foundation / Windows Presentation Foundation B27CCB1168B1960AEC6E9D3E0E0F0D2A - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrlui.dll - Microsoft® Silverlight ==== Deleted Firefox Extensions ====================== C:\Users\pc van papa\AppData\Roaming\Mozilla\Firefox\Profiles\qr8v4bu8.default-1380740250425\extensions\om@offermosquito.com.xpi deleted ==== Chrome Look ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions dednnpigldgdbpgcdpfppmlcnnbjciel - C:\Users\pc van papa\AppData\Roaming\Media Finder\Extensions\gencrawler_gc.crx[] jplinpmadfkdgipabgcdchbdikologlh - No path found[] lpmkgpnbiojfaoklbkpfneikocaobfai - No path found[] HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions gbmdkmlcnbapgegninelmjbfibaghdmk - No path found[] ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.com/" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{DA3B8372-9729-4AD1-923F-F4DB790206D4}" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{DA3B8372-9729-4AD1-923F-F4DB790206D4}] not found New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.com/" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}" ==== Reset Google Chrome ====================== Nothing found to reset ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\dednnpigldgdbpgcdpfppmlcnnbjciel deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\jplinpmadfkdgipabgcdchbdikologlh deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\lpmkgpnbiojfaoklbkpfneikocaobfai deleted successfully HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions\gbmdkmlcnbapgegninelmjbfibaghdmk deleted successfully HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1 deleted successfully ==== Empty IE Cache ====================== C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\UpdatusUser\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\pc van papa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KGAEDV74 will be deleted at reboot C:\Users\pc van papa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VXEH7PG0 will be deleted at reboot C:\Users\pc van papa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot ==== Empty FireFox Cache ====================== C:\Users\pc van papa\AppData\Local\Mozilla\Firefox\Profiles\qr8v4bu8.default-1380740250425\Cache emptied successfully ==== Empty Chrome Cache ====================== No Chrome User Data found ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\PCVANP~1\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Users\pc van papa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not deleted "C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not deleted "C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not deleted "C:\Users\pc van papa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KGAEDV74" not found "C:\Users\pc van papa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VXEH7PG0" not found ==== EOF on za 30-11-2013 at 16:04:05,05 ====================== Laat even weten wat de conclusie is.. Groetjes Michel -
Pop up vensters
pc-vraagje reageerde op pc-vraagje's topic in Archief Bestrijding malware & virussen
Logfile of random's system information tool 1.09 (written by random/random) Run by pc van papa at 2013-11-29 19:10:33 Microsoft® Windows Vista™ Home Premium Service Pack 2 System drive C: has 43 GB (28%) free of 153 GB Total RAM: 2046 MB (30% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 19:11:08, on 29-11-2013 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v9.00 (9.00.8112.16520) Boot mode: Normal Running processes: C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Program Files\Trusteer\Rapport\bin\RapportService.exe C:\Program Files\NVIDIA Corporation\Display\nvtray.exe C:\Program Files\Western Digital\WD Quick View\WDDMStatus.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\Microsoft Security Client\msseces.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\Rainlendar2\Rainlendar2.exe C:\Windows\ehome\ehtray.exe C:\Program Files\Skype\Phone\Skype.exe C:\Users\pc van papa\AppData\Roaming\ACEStream\engine\ace_engine.exe C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE C:\Windows\ehome\ehmsas.exe C:\Windows\system32\conime.exe C:\Users\pc van papa\AppData\Roaming\ACEStream\updater\ace_update.exe C:\Windows\System32\mobsync.exe C:\Program Files\Vuze\Azureus.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_9_900_152.exe C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_9_900_152.exe C:\Program Files\Windows Mail\WinMail.exe C:\Users\pc van papa\Downloads\RSIT.exe C:\Program Files\trend micro\pc van papa.exe C:\Windows\system32\SearchFilterHost.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer! R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer! R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: (no name) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - (no file) O1 - Hosts: ::1 localhost O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [NeroFilterCheck] C:\Windows\system32\NeroCheck.exe O4 - HKLM\..\Run: [WD Quick View] C:\Program Files\Western Digital\WD Quick View\WDDMStatus.exe O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [Rainlendar2] C:\Program Files\Rainlendar2\Rainlendar2.exe O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKCU\..\Run: [ACEStream] C:\Users\pc van papa\AppData\Roaming\ACEStream\engine\ace_engine.exe O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe" O4 - HKCU\..\Run: [sSync] "C:\Users\pc van papa\AppData\Roaming\SSync\SSync.exe" O4 - HKCU\..\Run: [DataMgr] "C:\Users\pc van papa\AppData\Roaming\DataMgr\DataMgr.exe" O4 - HKCU\..\Run: [intermediate] "C:\Users\pc van papa\AppData\Roaming\Intermediate\Intermediate.exe" O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE') O4 - Startup: OneNote 2010 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~1\MICROS~3\Office14\ONBttnIE.dll/105 O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office14\EXCEL.EXE/3000 O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe O23 - Service: Rapport Management Service (RapportMgmtService) - Trusteer Ltd. - C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe O23 - Service: TomTomHOMEService - TomTom - C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe O23 - Service: WD Backup (WDBackup) - Western Digital - C:\Program Files\Western Digital\WD SmartWare\WDBackupEngine.exe O23 - Service: WD Drive Manager (WDDriveService) - Western Digital - C:\Program Files\Western Digital\WD Drive Manager\WDDriveService.exe O23 - Service: WD Rules (WDRulesService) - Western Digital - C:\Program Files\Western Digital\WD SmartWare\WDRulesEngine.exe -- End of file - 10190 bytes ======Scheduled tasks folder====== C:\Windows\tasks\Adobe Flash Player Updater.job C:\Windows\tasks\GoogleUpdateTaskMachineCore.job C:\Windows\tasks\GoogleUpdateTaskMachineUA.job =========Mozilla firefox========= ProfilePath - C:\Users\pc van papa\AppData\Roaming\Mozilla\Firefox\Profiles\qr8v4bu8.default-1380740250425 prefs.js - "browser.search.useDBForOrder" - "false" "{20a82645-c095-46ed-80e3-08825760534b}"=C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer] "Description"=Adobe® Flash® Player 11.9.900.152 Plugin "Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_152.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@checkpoint.com/FFApi] "Description"=ZoneAlarm LTD Toolbar Api "Path"= [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.45.2] "Description"=Java™ Deployment Toolkit "Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2] "Description"=Oracle® Next Generation Java™ Plug-In "Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0] "Description"=Ag Player Plugin "Path"=C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0] "Description"=Office Authorization plug-in for NPAPI browsers "Path"=C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0] "Description"=Microsoft SharePoint Plug-in for Firefox "Path"=C:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922] "Description"=WLPG Install MIME type "Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308] "Description"=WLPG Install MIME type "Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5] "Description"=Windows Presentation Foundation plug-in for Mozilla browsers "Path"=C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3] "Description"=Google Update "Path"=C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9] "Description"=Google Update "Path"=C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.19] "Description"=Veetle TV Core "Path"=C:\Program Files\Veetle\plugins\npVeetle.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18] "Description"=Veetle TV Player "Path"=C:\Program Files\Veetle\Player\npvlc.dll [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader] "Description"=Handles PDFs in-place in Firefox "Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll C:\Program Files\Mozilla Firefox\plugins\ np-mswmp.dll nppdf32.dll WMP Firefox Plugin License.rtf WMP Firefox Plugin RelNotes.txt ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}] Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2009-01-26 1879896] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-10-08 462760] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}] Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}] Windows Live Messenger Companion Helper - C:\Program Files\Windows Live\Companion\companioncore.dll [2012-03-08 393600] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}] Office Document Cache Handler - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL [2013-03-06 562904] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-10-08 171944] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184] "NeroFilterCheck"=C:\Windows\system32\NeroCheck.exe [2001-07-09 155648] "WD Quick View"=C:\Program Files\Western Digital\WD Quick View\WDDMStatus.exe [2012-04-30 5235608] "Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576] "MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2013-10-23 948440] "SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920] "Rainlendar2"=C:\Program Files\Rainlendar2\Rainlendar2.exe [2011-08-12 2433024] "ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952] "Skype"=C:\Program Files\Skype\Phone\Skype.exe [2013-10-02 20472992] "WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-19 202240] "ACEStream"=C:\Users\pc van papa\AppData\Roaming\ACEStream\engine\ace_engine.exe [2013-11-07 27904] "TomTomHOME.exe"=C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [2013-07-02 248208] "SSync"=C:\Users\pc van papa\AppData\Roaming\SSync\SSync.exe [2013-04-09 36864] "DataMgr"=C:\Users\pc van papa\AppData\Roaming\DataMgr\DataMgr.exe [2013-10-09 168824] "Intermediate"=C:\Users\pc van papa\AppData\Roaming\Intermediate\Intermediate.exe [2013-04-09 36864] "SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480] C:\Users\pc van papa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup OneNote 2010 Schermopname en Snel starten.lnk - C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfPf] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfRd] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CleanHlp] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CleanHlp.sys] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "EnableUIADesktopToggle"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "BindDirectlyToPropertySetStorage"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVYU"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "VIDC.I420"=lvcodec2.dll "VIDC.YVU9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "vidc.cvid"=iccvid.dll "MSVideo"=vfwwdm32.dll "MSVideo8"=VfWWDM32.dll "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "msacm.siren"=sirenacm.dll "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "wave2"=wdmaud.drv "midi2"=wdmaud.drv "mixer2"=wdmaud.drv "wave3"=wdmaud.drv "midi3"=wdmaud.drv "mixer3"=wdmaud.drv "wave4"=wdmaud.drv "midi4"=wdmaud.drv "mixer4"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 .js - open - C:\Windows\System32\WScript.exe "%1" %* ======List of files/folders created in the last 1 month====== 2013-11-28 19:13:11 ----D---- C:\Users\pc van papa\AppData\Roaming\Systweak 2013-11-28 19:13:06 ----A---- C:\Windows\system32\roboot.exe 2013-11-27 19:16:58 ----D---- C:\Users\pc van papa\AppData\Roaming\DriverCure 2013-11-27 19:16:56 ----D---- C:\Users\pc van papa\AppData\Roaming\SpeedyPC Software 2013-11-27 19:16:33 ----D---- C:\ProgramData\SpeedyPC Software 2013-11-27 17:23:34 ----D---- C:\Program Files\trend micro 2013-11-27 17:23:33 ----D---- C:\rsit 2013-11-25 12:56:34 ----D---- C:\ProgramData\Spybot - Search & Destroy 2013-11-25 12:56:34 ----D---- C:\Program Files\Spybot - Search & Destroy 2013-11-16 00:35:24 ----D---- C:\Users\pc van papa\AppData\Roaming\Malwarebytes 2013-11-16 00:35:07 ----D---- C:\ProgramData\Malwarebytes 2013-11-16 00:35:03 ----A---- C:\Windows\system32\drivers\mbam.sys 2013-11-16 00:35:02 ----D---- C:\Program Files\Malwarebytes' Anti-Malware 2013-11-15 03:11:51 ----A---- C:\Windows\system32\vbscript.dll 2013-11-15 03:11:51 ----A---- C:\Windows\system32\mshtmled.dll 2013-11-15 03:11:48 ----A---- C:\Windows\system32\jsproxy.dll 2013-11-15 03:11:48 ----A---- C:\Windows\system32\ieUnatt.exe 2013-11-15 03:11:48 ----A---- C:\Windows\system32\ieui.dll 2013-11-15 03:11:47 ----A---- C:\Windows\system32\wininet.dll 2013-11-15 03:11:47 ----A---- C:\Windows\system32\msfeeds.dll 2013-11-15 03:11:45 ----A---- C:\Windows\system32\jscript9.dll 2013-11-15 03:11:45 ----A---- C:\Windows\system32\jscript.dll 2013-11-15 03:11:44 ----A---- C:\Windows\system32\url.dll 2013-11-15 03:11:44 ----A---- C:\Windows\system32\iertutil.dll 2013-11-15 03:11:41 ----A---- C:\Windows\system32\urlmon.dll 2013-11-15 03:11:39 ----A---- C:\Windows\system32\ieframe.dll 2013-11-15 03:11:38 ----A---- C:\Windows\system32\mshtml.dll 2013-11-14 16:26:07 ----A---- C:\Windows\system32\gdi32.dll 2013-11-14 16:25:57 ----A---- C:\Windows\system32\crypt32.dll 2013-11-14 16:25:44 ----A---- C:\Windows\system32\IKEEXT.DLL 2013-11-14 16:25:43 ----A---- C:\Windows\system32\FWPUCLNT.DLL 2013-11-06 19:22:44 ----D---- C:\Users\pc van papa\AppData\Roaming\Intermediate 2013-11-06 19:22:43 ----D---- C:\Users\pc van papa\AppData\Roaming\DataMgr 2013-11-06 19:22:41 ----D---- C:\Users\pc van papa\AppData\Roaming\SSync 2013-11-06 19:20:49 ----D---- C:\Program Files\Google 2013-11-06 19:18:49 ----D---- C:\Users\pc van papa\AppData\Roaming\OfferMosquito 2013-11-06 19:18:49 ----D---- C:\Users\pc van papa\AppData\Roaming\Common 2013-11-06 19:15:37 ----D---- C:\Program Files\iExplorer 2013-11-06 18:18:23 ----D---- C:\Users\pc van papa\AppData\Roaming\DiskAid 2013-11-06 15:26:34 ----ASH---- C:\hiberfil.sys 2013-11-02 21:46:50 ----D---- C:\Program Files\Mobogenie ======List of files/folders modified in the last 1 month====== 2013-11-29 19:10:42 ----D---- C:\Users\pc van papa\AppData\Roaming\Azureus 2013-11-29 19:10:28 ----D---- C:\Windows\Temp 2013-11-29 19:04:45 ----SHD---- C:\System Volume Information 2013-11-29 19:02:17 ----D---- C:\Users\pc van papa\AppData\Roaming\Skype 2013-11-29 16:27:45 ----D---- C:\Windows\inf 2013-11-29 16:27:32 ----D---- C:\Windows 2013-11-29 16:21:56 ----D---- C:\Users\pc van papa\AppData\Roaming\.ACEStream 2013-11-29 09:56:23 ----D---- C:\Windows\system32\drivers 2013-11-29 09:56:23 ----D---- C:\Windows\nl-NL 2013-11-28 19:18:59 ----D---- C:\Windows\Tasks 2013-11-28 19:18:54 ----RD---- C:\Program Files 2013-11-28 19:18:27 ----D---- C:\Windows\system32\Tasks 2013-11-28 19:13:06 ----D---- C:\Windows\System32 2013-11-28 19:12:00 ----A---- C:\Windows\system32\PerfStringBackup.INI 2013-11-27 19:26:14 ----D---- C:\Program Files\Common Files 2013-11-27 19:16:33 ----HD---- C:\ProgramData 2013-11-26 12:09:00 ----D---- C:\Windows\system32\drivers\etc 2013-11-25 08:21:11 ----SHD---- C:\Windows\Installer 2013-11-23 22:00:08 ----D---- C:\Users\pc van papa\AppData\Roaming\vlc 2013-11-23 21:40:18 ----D---- C:\Users\pc van papa\AppData\Roaming\dvdcss 2013-11-22 11:39:02 ----A---- C:\Windows\system32\FlashPlayerApp.exe 2013-11-21 13:27:41 ----D---- C:\Windows\nap 2013-11-21 10:06:09 ----D---- C:\Windows\Debug 2013-11-21 09:32:11 ----D---- C:\Windows\system32\catroot2 2013-11-19 11:21:30 ----N---- C:\Windows\system32\MpSigStub.exe 2013-11-16 12:26:40 ----D---- C:\Program Files\Mozilla Maintenance Service 2013-11-16 12:26:34 ----D---- C:\Windows\ehome 2013-11-16 09:42:14 ----D---- C:\Program Files\Mozilla Firefox 2013-11-16 09:32:53 ----D---- C:\Users\pc van papa\AppData\Roaming\advantage 2013-11-15 03:49:24 ----D---- C:\Windows\rescache 2013-11-15 03:28:43 ----D---- C:\Windows\system32\migration 2013-11-15 03:28:42 ----D---- C:\Windows\system32\nl-NL 2013-11-15 03:28:42 ----D---- C:\Program Files\Internet Explorer 2013-11-15 03:13:05 ----D---- C:\ProgramData\Microsoft Help 2013-11-15 03:12:32 ----D---- C:\Windows\winsxs 2013-11-15 03:12:23 ----D---- C:\Windows\system32\catroot 2013-11-15 03:07:31 ----D---- C:\Windows\system32\MRT 2013-11-15 03:04:07 ----A---- C:\Windows\system32\mrt.exe 2013-11-13 16:21:46 ----D---- C:\Program Files\Microsoft Security Client 2013-11-13 10:55:31 ----D---- C:\Program Files\CCleaner 2013-11-08 08:18:41 ----D---- C:\Windows\Microsoft.NET 2013-11-08 08:18:40 ----RSD---- C:\Windows\assembly 2013-11-06 15:28:21 ----D---- C:\Windows\SoftwareDistribution 2013-11-06 15:21:15 ----D---- C:\Windows\Minidump 2013-11-01 09:53:34 ----D---- C:\ProgramData\Skype 2013-11-01 09:53:21 ----RD---- C:\Program Files\Skype ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2013-09-27 214696] R0 RapportKELL;RapportKELL; C:\Windows\System32\Drivers\RapportKELL.sys [2013-10-25 108816] R1 RapportCerberus_59849;RapportCerberus_59849; \??\C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus32_59849.sys [2013-10-27 340432] R1 RapportEI;RapportEI; \??\C:\Program Files\Trusteer\Rapport\bin\RapportEI.sys [2013-10-25 157264] R1 RapportPG;RapportPG; \??\C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys [2013-10-25 230448] R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2013-09-27 104768] R3 HdAudAddService;Microsoft 1.1 UAA Functiestuurprogramma voor High Definition Audio-service; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544] R3 MBAMProtector;MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [2013-04-04 22856] R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda32v.sys [2013-06-16 161056] R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2013-09-12 9253664] R3 PID_0928;Logitech QuickCam Express(PID_0928); C:\Windows\system32\DRIVERS\LV561AV.SYS [2009-04-30 495768] R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2006-11-02 44544] R3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam.sys [2011-02-16 11520] R3 WudfPf;@%SystemRoot%\system32\drivers\Wudfpf.sys,-1000; C:\Windows\system32\drivers\WudfPf.sys [2012-07-26 66560] R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2012-07-26 155136] S1 mferkdk;VSCore mferkdk; \??\C:\Program Files\McAfee\VirusScan Enterprise\mferkdk.sys [] S3 cleanhlp;cleanhlp; \??\C:\EEK\RUN\cleanhlp32.sys [2013-08-21 50200] S3 drmkaud;Microsoft Kernel DRM-audiodecoder; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632] S3 esgiguard;esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [] S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2012-03-08 39272] S3 ialm;ialm; C:\Windows\system32\DRIVERS\igdkmd32.sys [2006-10-19 1380864] S3 MSKSSRV;Microsoft Streaming Service-proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192] S3 MSPCLOCK;Microsoft Streaming Clock-proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888] S3 MSPQM;Microsoft Streaming Kwaliteitsbeheer Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504] S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink-conversieprogramma; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016] S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-10 65640] R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504] R2 MBAMScheduler;MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-04-04 418376] R2 MBAMService;MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [2013-04-04 701512] R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-10-23 22208] R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2013-09-12 662816] R2 RapportMgmtService;Rapport Management Service; C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe [2013-10-25 1444120] R2 SBSDWSCService;SBSD Security Center Service; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368] R2 TomTomHOMEService;TomTomHOMEService; C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe [2013-07-02 93072] R2 WDBackup;WD Backup; C:\Program Files\Western Digital\WD SmartWare\WDBackupEngine.exe [2012-04-24 1150368] R2 WDDriveService;WD Drive Manager; C:\Program Files\Western Digital\WD Drive Manager\WDDriveService.exe [2012-04-11 247704] R2 WDRulesService;WD Rules; C:\Program Files\Western Digital\WD SmartWare\WDRulesEngine.exe [2012-04-11 1177496] R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2011-03-28 1713536] R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2013-10-23 280288] R3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] S2 gupdate;Google Update-service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-11-06 116648] S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-10-10 1258856] S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-09-05 171680] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-11-22 257416] S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160] S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2012-03-08 1492840] S3 gupdatem;Google Update-service (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-11-06 116648] S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632] S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-11-16 119408] S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352] S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-07-20 754856] S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240] S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240] S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240] S4 wlcrasvc;Windows Live Mesh remote connections service; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 51040] -----------------EOF----------------- Hensyr kun je hier verder mee ? Ik hoor het graag. Groetjes michel -
Pop up vensters
pc-vraagje reageerde op pc-vraagje's topic in Archief Bestrijding malware & virussen
Plaats de inhoud hiervan in het volgende bericht... Klopt het dat het een heleboel tekst is.? Is het nu de bedoeling dat ik al die tekst kopieer in een nieuw bericht.? -
Met regelmaat dat ik een venster op het internet open komen er pop-up melding in beeld vervelende reclame van spelletjes die ik niet wil spelen.. Heeft iemand een idee hoe ik van die vervelende pop-up vensters af kom ? Ik hoor het graag. Groetjes Michel
-
Ik zit bij onsbrabantnet. Ik heb op de site van onsbrabantnet mijn wachtwoord gewijzigd.en dit ook aangepast in mijn windows mail instellingen. nu werk het. ben benieuwd voor hoelang. mocht dit niet werken, heb je dan nog ideeën? gr michel
-
Telkens krijg ik deze melding als ik windows mail van Vista open.. Account: 'mail.xxxxxxx.nl', Server: 'mail.xxxxxxxx.nl', Protocol: POP3, Reactie van server: '-ERR Authentication failed.', Poort: 110, Beveiligd(SSL): Nee, Serverfout: 0x800CCC90, Foutnummer: 0x800CCC92 Daar bij is het ook nog zo dat als ik naar extra ga en dan naar accounts Eigenschappen - Servers telkens mijn e-mail gebruikersnaam en wachtwoord leeg is .... Wie kan me helpen. Al vast bedankt Michel
-
Ik kan alleen aangeven, de computer in slaapstand zetten na 1min 2 min 3min of uren of nooit ik heb dit gewijzigd. alleen kan ik de computer niet dmv start etc in slaap stand zetten hij blijft aanstaan. vroeger sloeg hij gewoon af. en ging in slaapstand nu niet meer . wat zou het kunnen zijn.. al vast bedankt michel
- 5 antwoorden
-
- opgevallen
- probleem
- (en 5 meer)

OVER ONS
PC Helpforum helpt GRATIS computergebruikers sinds juli 2006. Ons team geeft via het forum professioneel antwoord op uw vragen en probeert uw pc problemen zo snel mogelijk op te lossen. Word lid vandaag, plaats je vraag online en het PC Helpforum-team helpt u graag verder!