ElsV

13 november 2011

AVG terug geïnstalleerd, pc werkt iets sneller nu.

Bedankt voor de hulp

12 november 2011

oeps, die spatie inderdaad over het hoofd gezien en Combofix verwijderd. Moet ik die DrWeb-CureIt ook nog verwijderen ?

12 november 2011

Combofix/uninstall kan niet gevonden worden ...

Is het ook ok als ik die via de zoekfunctie allemaal selecteer en verwijder ?

CCleaner staat hier standaard op.

Ik ga terug AVG installeren dan. Die heb ik er indertijd afgezwierd en vervangen door MSE omdat ik ineens vaststelde dat AVG op een of andere vreemde manier 36GB gebruikte ...

Nog maar eens terug proberen nu.

11 november 2011

Een groot verschil ! Scrollen gaat een pak sneller als ik de real time protection uitschakel ... Schakel dit terug in en krijg meteen vertraging !

11 november 2011

Done !

11 november 2011

Bestand is te groot om te uploaden 2,07 mb !

10 november 2011

Het is niet helemaal ok verlopen : de taal stond meteen goed, F9 werkte niet, zag enkel het groene pijltje. Heb daar dan maar op gedrukt en programma begon meteen te scannen zonder dat ik ook maar iets in de instellingen gewijzigd had, hopelijk geen grote gevolgen ?

Log is zodanig lang dat ik 'm hier niet geplaatst krijg. Kreeg melding dat er geen virussen gevonden waren, maar in de log zag ik toch dat er hier en daar iets was waar niet zomaar "ok" achter stond. Kan ik de log op een andere manier doorsturen ?

10 november 2011

Opstarten gaat sneller heb ik de indruk, scrollen gaat ook iets sneller, op facebook blijft het nog regelmatig hangen ...

Stond er iets in de log wat voor de vertraging kon zorgen, want dat is allemaal chinees

9 november 2011

Dank je voor de uitleg !

Hier de nieuwe log :

ComboFix 11-11-08.02 - ASUS 09/11/2011 16:21:46.2.2 - x86

Microsoft Windows XP Home Edition 5.1.2600.3.1252.32.1043.18.1015.250 [GMT 1:00]

Gestart vanuit: C:\Documents and Settings\ASUS\Bureaublad\ComboFix.exe

gebruikte Opdracht switches :: C:\Documents and Settings\ASUS\Bureaublad\CFScript.txt

AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}

AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}

(((((((((((((((((((( Bestanden Gemaakt van 2011-10-09 to 2011-11-09 ))))))))))))))))))))))))))))))

2011-11-09 12:24:55 . 2011-11-09 12:24:55 -------- d-----w- C:\WINDOWS\LastGood

2011-11-08 21:06:09 . 2011-11-08 21:06:09 28752 ----a-w- C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{8306A478-AAB3-4DBA-8C64-502F645D3338}\MpKsl86fff1f4.sys

2011-11-08 21:05:53 . 2011-11-08 21:05:53 56200 ----a-w- C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{8306A478-AAB3-4DBA-8C64-502F645D3338}\offreg.dll

2011-11-08 21:05:27 . 2011-10-07 03:48:07 6668624 ----a-w- C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{8306A478-AAB3-4DBA-8C64-502F645D3338}\mpengine.dll

2011-10-14 04:59:21 . 2011-11-09 15:17:38 -------- d--h--r- C:\Documents and Settings\ASUS\Onlangs geopend

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

2011-10-07 03:48:07 . 2010-10-11 17:50:27 6668624 ----a-w- C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll

2011-09-29 12:52:10 . 2011-06-08 09:08:53 404640 ----a-w- C:\WINDOWS\system32\FlashPlayerCPLApp.cpl

2011-09-26 09:41:44 . 2009-05-18 19:45:30 23040 ----a-w- C:\WINDOWS\system32\oleaccrc.dll

2011-09-26 09:41:44 . 2008-07-29 17:59:58 614912 ----a-w- C:\WINDOWS\system32\uiautomationcore.dll

2011-09-26 09:41:20 . 2009-05-18 19:45:30 220160 ----a-w- C:\WINDOWS\system32\oleacc.dll

2011-09-09 09:12:05 . 2009-05-18 19:45:22 602624 ----a-w- C:\WINDOWS\system32\crypt32.dll

2011-09-06 14:09:57 . 2009-05-18 19:45:34 1859072 ----a-w- C:\WINDOWS\system32\win32k.sys

2011-08-31 16:00:50 . 2011-07-01 10:58:56 22216 ----a-w- C:\WINDOWS\system32\drivers\mbam.sys

2011-08-22 23:41:22 . 2009-05-18 19:45:34 916480 ----a-w- C:\WINDOWS\system32\wininet.dll

2011-08-22 23:41:20 . 2009-05-18 19:45:27 43520 ----a-w- C:\WINDOWS\system32\licmgr10.dll

2011-08-22 23:41:20 . 2009-05-18 19:45:26 1469440 ------w- C:\WINDOWS\system32\inetcpl.cpl

2011-08-22 11:58:28 . 2009-05-18 19:45:26 385024 ----a-w- C:\WINDOWS\system32\html.iec

2011-08-17 13:49:54 . 2009-05-18 19:45:21 138496 ----a-w- C:\WINDOWS\system32\drivers\afd.sys

2011-06-16 06:58:07 . 2011-06-16 06:56:56 154914552 ----a-w- C:\Program Files\OOo_3.3.0_Win_x86_install-wJRE_nl.exe

2011-03-31 07:59:11 . 2010-11-08 13:43:20 1986520 ----a-w- C:\Program Files\SyncBack_Setup_NL.exe

2010-10-10 17:42:28 . 2010-10-10 17:42:17 13111256 ----a-w- C:\Program Files\mssefullinstall-x86fre-nl-nl-xp.exe

2010-09-19 15:39:45 . 2010-09-19 10:13:34 137920704 ----a-w- C:\Program Files\OOo_3.2.1_Win_x86_install_nl.exe

((((((((((((((((((((((((((((( SnapShot@2011-11-08_20.29.59 )))))))))))))))))))))))))))))))))))))))))

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\OverlayIconExtension1]

@="{fe25455d-b4c2-4e32-97d2-92632ec1c224}"

[HKEY_CLASSES_ROOT\CLSID\{fe25455d-b4c2-4e32-97d2-92632ec1c224}]

2009-11-06 23:07:04 297808 ----a-w- C:\WINDOWS\system32\mscoree.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\OverlayIconExtension2]

@="{1fae2d88-a78e-4f03-909f-be818a3c1ce6}"

[HKEY_CLASSES_ROOT\CLSID\{1fae2d88-a78e-4f03-909f-be818a3c1ce6}]

2009-11-06 23:07:04 297808 ----a-w- C:\WINDOWS\system32\mscoree.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-04-09 15:18:00 39408]

"ccleaner"="C:\Program Files\CCleaner\CCleaner.exe" [2011-06-24 19:53:16 2423608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IgfxTray"="C:\WINDOWS\system32\igfxtray.exe" [2007-12-19 15:08:08 135168]

"HotKeysCmds"="C:\WINDOWS\system32\hkcmd.exe" [2007-12-19 15:08:12 159744]

"Persistence"="C:\WINDOWS\system32\igfxpers.exe" [2007-12-19 15:07:42 131072]

"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2009-03-06 08:57:54 1434920]

"SynAsusAcpi"="C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe" [2009-03-06 08:58:06 79144]

"AsusACPIServer"="C:\Program Files\EeePC\ACPI\AsAcpiSvr.exe" [2009-04-16 17:46:30 630784]

"AsusEPCMonitor"="C:\Program Files\EeePC\ACPI\AsEPCMon.exe" [2009-03-13 14:15:02 98304]

"AsusTray"="C:\Program Files\EeePC\ACPI\AsTray.exe" [2009-04-16 16:58:54 118784]

"Parental Control"="C:\Program Files\Parental Control\bin\pcontrol.exe" [2009-03-20 22:23:32 1104384]

"RTHDCPL"="RTHDCPL.EXE" [2009-03-27 03:22:08 17567744]

"hpqSRMon"="C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-08-20 08:54:08 150016]

"MSC"="C:\Program Files\Microsoft Security Client\msseces.exe" [2011-06-15 13:16:48 997920]

"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2011-08-31 01:57:22 40368]

"Adobe ARM"="C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-29 19:59:06 937920]

"SunJavaUpdateSched"="C:\Program Files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 10:59:52 254696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]

"Malwarebytes' Anti-Malware"="C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-08-31 16:00:48 449608]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-15 12:00:00 15360]

"DWQueuedReporting"="C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2008-11-03 23:44:24 435096]

C:\Documents and Settings\All Users\Menu Start\Programma's\Opstarten\

HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2008-3-25 214360]

Windows Search.lnk - C:\Program Files\Windows Desktop Search\WindowsSearch.exe [2008-5-26 123904]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]

"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 20:41:34 304128]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

@="Driver"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]

2011-08-31 01:57:22 40368 ----a-w- C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]

2010-04-16 20:12:58 3872080 ----a-w- C:\Program Files\Windows Live\Messenger\msnmsgr.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"%windir%\\system32\\sessmgr.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgm.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgh.exe"=

"C:\\Program Files\\HP\\HP Software Update\\HPWUCli.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\Smart Web Printing\\SmartWebPrintExe.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgpc01.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqpse.exe"=

"C:\\Program Files\\Common Files\\HP\\Digital Imaging\\bin\\hpqPhotoCrm.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqsudi.exe"=

"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqpsapp.exe"=

"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

"C:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=

"C:\\WINDOWS\\system32\\muzapp.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

"427:UDP"= 427:UDP:SLP_Port(427)

"5985:TCP"= 5985:TCP:*:Disabled:Windows Remote Management

R1 MpKsl4f45a6d8;MpKsl4f45a6d8;\??\C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{D3E2198D-AE1E-4DCD-9E1F-38704C0CFA47}\MpKsl4f45a6d8.sys --> C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{D3E2198D-AE1E-4DCD-9E1F-38704C0CFA47}\MpKsl4f45a6d8.sys [?]

R1 MpKsl86fff1f4;MpKsl86fff1f4;C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{8306A478-AAB3-4DBA-8C64-502F645D3338}\MpKsl86fff1f4.sys [8/11/2011 22:06:09 28752]

R1 policyappblockservice;Parental Control Application Filter;C:\Program Files\Parental Control\bin\policyappblock.sys [2/02/2009 21:22:44 5120]

R3 L1c;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller;C:\WINDOWS\system32\drivers\l1c51x86.sys [9/04/2009 12:17:24 38912]

S1 MpKsl0a2d45d5;MpKsl0a2d45d5;\??\C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{1EB86957-0BD3-487A-93B2-89DC96D32B2E}\MpKsl0a2d45d5.sys --> C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{1EB86957-0BD3-487A-93B2-89DC96D32B2E}\MpKsl0a2d45d5.sys [?]

S1 MpKsl10b1e89e;MpKsl10b1e89e;\??\C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{6FE2290A-E2BC-424A-9C0C-FAE80203BE79}\MpKsl10b1e89e.sys --> C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{6FE2290A-E2BC-424A-9C0C-FAE80203BE79}\MpKsl10b1e89e.sys [?]

S1 MpKsl1f5390ab;MpKsl1f5390ab;\??\C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{371AE6E2-FE2F-4623-BE01-5C52704887BF}\MpKsl1f5390ab.sys --> C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{371AE6E2-FE2F-4623-BE01-5C52704887BF}\MpKsl1f5390ab.sys [?]

S1 MpKsl42f0a878;MpKsl42f0a878;\??\C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{F59D32E2-4131-48D2-8806-27C878194491}\MpKsl42f0a878.sys --> C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{F59D32E2-4131-48D2-8806-27C878194491}\MpKsl42f0a878.sys [?]

S1 MpKsl496cb3ce;MpKsl496cb3ce;\??\C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{633ED9ED-E23E-4EAB-B699-16F473227CFF}\MpKsl496cb3ce.sys --> C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{633ED9ED-E23E-4EAB-B699-16F473227CFF}\MpKsl496cb3ce.sys [?]

S1 MpKsl4e51075c;MpKsl4e51075c;\??\C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{8D0328BA-93A4-42FE-B49E-65731936DF34}\MpKsl4e51075c.sys --> C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{8D0328BA-93A4-42FE-B49E-65731936DF34}\MpKsl4e51075c.sys [?]

S1 MpKsl51a6a79a;MpKsl51a6a79a;\??\C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{4D0B33A3-B7D5-4ED4-992C-0A635FE38C3F}\MpKsl51a6a79a.sys --> C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{4D0B33A3-B7D5-4ED4-992C-0A635FE38C3F}\MpKsl51a6a79a.sys [?]

S1 MpKsl65ff1186;MpKsl65ff1186;\??\C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{7667D025-E546-49C8-8405-85468F60A4DC}\MpKsl65ff1186.sys --> C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{7667D025-E546-49C8-8405-85468F60A4DC}\MpKsl65ff1186.sys [?]

S1 MpKsl926e5c51;MpKsl926e5c51;\??\C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{C73042AD-F68C-4F5F-BC8C-A1708CCA8801}\MpKsl926e5c51.sys --> C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{C73042AD-F68C-4F5F-BC8C-A1708CCA8801}\MpKsl926e5c51.sys [?]

S1 MpKsleef327e6;MpKsleef327e6;\??\C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{1CA98746-6D84-467A-AA0D-47CB422F1323}\MpKsleef327e6.sys --> C:\Documents and Settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{1CA98746-6D84-467A-AA0D-47CB422F1323}\MpKsleef327e6.sys [?]

S2 gupdate;Google Updateservice (gupdate);C:\Program Files\Google\Update\GoogleUpdate.exe [9/04/2010 16:18:04 135664]

S3 Ambfilt;Ambfilt;C:\WINDOWS\system32\drivers\Ambfilt.sys [18/05/2009 21:42:00 1684736]

S3 gupdatem;Google Update-service (gupdatem);C:\Program Files\Google\Update\GoogleUpdate.exe [9/04/2010 16:18:04 135664]

S3 SRS_PremiumSound_Service;SRS Labs Premium Sound;C:\WINDOWS\system32\drivers\SRS_PremiumSound_i386.sys [19/05/2009 9:02:46 232872]

S3 uvclf;uvclf;C:\WINDOWS\system32\drivers\uvclf.sys [2/04/2009 3:19:09 39040]

S3 uxddrv;Dynamically loaded UxdDrv;\??\UNC\192.168.254.253\public\Dynafix_32__01.06.11\uxddrv.sys --> UNC\192.168.254.253\public\Dynafix_32__01.06.11\uxddrv.sys [?]

S3 WinRM;Windows Remote Management (WS-Management);C:\WINDOWS\system32\svchost.exe -k WINRM [18/05/2009 20:45:33 14336]

--- Andere Services/Drivers In Geheugen ---

*NewlyCreated* - MPKSL2934C6A1

*NewlyCreated* - MPKSL546C1C8E

*NewlyCreated* - MPKSL7560AEEC

*NewlyCreated* - MPKSL767DDF6F

*NewlyCreated* - MPKSL86FFF1F4

*NewlyCreated* - MPKSL89EB62A6

*NewlyCreated* - MPKSL8A60B988

*NewlyCreated* - MPKSLB46763C0

*NewlyCreated* - MPKSLD1F0D0C0

*NewlyCreated* - MPKSLDFDDB14B

*NewlyCreated* - MPKSLFD96699D

*Deregistered* - MpKsl2934c6a1

*Deregistered* - MpKsl546c1c8e

*Deregistered* - MpKsl7560aeec

*Deregistered* - MpKsl767ddf6f

*Deregistered* - MpKsl89eb62a6

*Deregistered* - MpKsl8a60b988

*Deregistered* - MpKslb46763c0

*Deregistered* - MpKsld1f0d0c0

*Deregistered* - MpKsldfddb14b

*Deregistered* - MpKslfd96699d

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12

HPService REG_MULTI_SZ HPSLPSVC

hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc

WINRM REG_MULTI_SZ WINRM

Inhoud van de 'Gedeelde Taken' map

2011-11-07 C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job

- C:\Program Files\Google\Update\GoogleUpdate.exe [2010-04-09 15:18:04 . 2010-04-09 15:18:02]

2011-11-09 C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

- C:\Program Files\Google\Update\GoogleUpdate.exe [2010-04-09 15:18:04 . 2010-04-09 15:18:02]

------- Bijkomende Scan -------

IE: E&xporteren naar Microsoft Excel - C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000

IE: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html

IE: Verzenden naar &Bluetooth-apparaat... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm

IE: Verzenden naar Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

TCP: DhcpNameServer = 192.168.1.1

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

Rootkit scan 2011-11-09 16:31:59

Windows 5.1.2600 Service Pack 3 NTFS

scannen van verborgen processen ...

scannen van verborgen autostart items ...

scannen van verborgen bestanden ...

Scan succesvol afgerond

verborgen bestanden: 0

**************************************************************************

Voltooingstijd: 2011-11-09 16:34:58

ComboFix-quarantined-files.txt 2011-11-09 15:34:54

ComboFix2.txt 2011-11-08 20:33:03

9 november 2011

Ik probeer hier ook een beetje uit te leren, vandaar vroeg ik mij af waarom de regel die ik moest verwijderen uit het eerste HJT logje mbt de blanco startpagina op internet precies weg moest ? Dit is toch maar enkel om een blanco startpagina te krijgen en meer niet of zie ik dit verkeerd ?

8 november 2011

Hier de ComboFix log :

ComboFix 11-11-08.02 - ASUS 08/11/2011 21:08:56.1.2 - x86

Microsoft Windows XP Home Edition 5.1.2600.3.1252.32.1043.18.1015.209 [GMT 1:00]

Gestart vanuit: c:\documents and settings\ASUS\Bureaublad\ComboFix.exe

AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}

AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}

.

(((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

.

c:\documents and settings\ASUS\Application Data\PriceGong

c:\documents and settings\ASUS\Application Data\PriceGong\Data\1.txt

c:\documents and settings\ASUS\Application Data\PriceGong\Data\1.xml

c:\documents and settings\ASUS\Application Data\PriceGong\Data\2229.txt

c:\documents and settings\ASUS\Application Data\PriceGong\Data\2626.txt

c:\documents and settings\ASUS\Application Data\PriceGong\Data\4489.txt

c:\documents and settings\ASUS\Application Data\PriceGong\Data\6174.txt

c:\documents and settings\ASUS\Application Data\PriceGong\Data\a.txt

c:\documents and settings\ASUS\Application Data\PriceGong\Data\a.xml

c:\documents and settings\ASUS\Application Data\PriceGong\Data\b.txt

c:\documents and settings\ASUS\Application Data\PriceGong\Data\b.xml

c:\documents and settings\ASUS\Application Data\PriceGong\Data\c.txt

c:\documents and settings\ASUS\Application Data\PriceGong\Data\c.xml

c:\documents and settings\ASUS\Application Data\PriceGong\Data\d.txt

c:\documents and settings\ASUS\Application Data\PriceGong\Data\d.xml

c:\documents and settings\ASUS\Application Data\PriceGong\Data\e.txt

c:\documents and settings\ASUS\Application Data\PriceGong\Data\e.xml

c:\documents and settings\ASUS\Application Data\PriceGong\Data\f.txt

c:\documents and settings\ASUS\Application Data\PriceGong\Data\f.xml

c:\documents and settings\ASUS\Application Data\PriceGong\Data\g.txt

c:\documents and settings\ASUS\Application Data\PriceGong\Data\g.xml

c:\documents and settings\ASUS\Application Data\PriceGong\Data\h.txt

c:\documents and settings\ASUS\Application Data\PriceGong\Data\h.xml

c:\documents and settings\ASUS\Application Data\PriceGong\Data\i.txt

c:\documents and settings\ASUS\Application Data\PriceGong\Data\i.xml

c:\documents and settings\ASUS\Application Data\PriceGong\Data\j.txt

c:\documents and settings\ASUS\Application Data\PriceGong\Data\J.xml

c:\documents and settings\ASUS\Application Data\PriceGong\Data\k.txt

c:\documents and settings\ASUS\Application Data\PriceGong\Data\k.xml

c:\documents and settings\ASUS\Application Data\PriceGong\Data\l.txt

c:\documents and settings\ASUS\Application Data\PriceGong\Data\l.xml

c:\documents and settings\ASUS\Application Data\PriceGong\Data\m.txt

c:\documents and settings\ASUS\Application Data\PriceGong\Data\m.xml

c:\documents and settings\ASUS\Application Data\PriceGong\Data\n.txt

c:\documents and settings\ASUS\Application Data\PriceGong\Data\n.xml

c:\documents and settings\ASUS\Application Data\PriceGong\Data\o.txt

c:\documents and settings\ASUS\Application Data\PriceGong\Data\o.xml

c:\documents and settings\ASUS\Application Data\PriceGong\Data\p.txt

c:\documents and settings\ASUS\Application Data\PriceGong\Data\p.xml

c:\documents and settings\ASUS\Application Data\PriceGong\Data\q.txt

c:\documents and settings\ASUS\Application Data\PriceGong\Data\q.xml

c:\documents and settings\ASUS\Application Data\PriceGong\Data\r.txt

c:\documents and settings\ASUS\Application Data\PriceGong\Data\r.xml

c:\documents and settings\ASUS\Application Data\PriceGong\Data\s.txt

c:\documents and settings\ASUS\Application Data\PriceGong\Data\s.xml

c:\documents and settings\ASUS\Application Data\PriceGong\Data\t.txt

c:\documents and settings\ASUS\Application Data\PriceGong\Data\t.xml

c:\documents and settings\ASUS\Application Data\PriceGong\Data\u.txt

c:\documents and settings\ASUS\Application Data\PriceGong\Data\u.xml

c:\documents and settings\ASUS\Application Data\PriceGong\Data\v.txt

c:\documents and settings\ASUS\Application Data\PriceGong\Data\v.xml

c:\documents and settings\ASUS\Application Data\PriceGong\Data\w.txt

c:\documents and settings\ASUS\Application Data\PriceGong\Data\w.xml

c:\documents and settings\ASUS\Application Data\PriceGong\Data\wlu.txt

c:\documents and settings\ASUS\Application Data\PriceGong\Data\x.txt

c:\documents and settings\ASUS\Application Data\PriceGong\Data\x.xml

c:\documents and settings\ASUS\Application Data\PriceGong\Data\y.txt

c:\documents and settings\ASUS\Application Data\PriceGong\Data\y.xml

c:\documents and settings\ASUS\Application Data\PriceGong\Data\z.txt

c:\documents and settings\ASUS\Application Data\PriceGong\Data\z.xml

c:\documents and settings\ASUS\Menu Start\Programma's\Opstarten\OpenOffice.org 3.2 .lnk

c:\documents and settings\ASUS\Menu Start\Programma's\Opstarten\OpenOffice.org 3.3 .lnk

c:\program files\Windows Searchqu Toolbar

.

(((((((((((((((((((( Bestanden Gemaakt van 2011-10-08 to 2011-11-08 ))))))))))))))))))))))))))))))

.

2011-11-08 20:05 . 2011-11-08 20:05 56200 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{FA96935B-8207-4AFB-9D66-21EAE3D10DBC}\offreg.dll

2011-11-08 20:05 . 2011-10-07 03:48 6668624 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{FA96935B-8207-4AFB-9D66-21EAE3D10DBC}\mpengine.dll

2011-10-14 04:59 . 2011-11-08 16:00 -------- d--h--r- c:\documents and settings\ASUS\Onlangs geopend

.

((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2011-10-07 03:48 . 2010-10-11 17:50 6668624 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll

2011-09-29 12:52 . 2011-06-08 09:08 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2011-09-26 09:41 . 2009-05-18 19:45 23040 ----a-w- c:\windows\system32\oleaccrc.dll

2011-09-26 09:41 . 2008-07-29 17:59 614912 ----a-w- c:\windows\system32\uiautomationcore.dll

2011-09-26 09:41 . 2009-05-18 19:45 220160 ----a-w- c:\windows\system32\oleacc.dll

2011-09-09 09:12 . 2009-05-18 19:45 602624 ----a-w- c:\windows\system32\crypt32.dll

2011-09-06 14:09 . 2009-05-18 19:45 1859072 ----a-w- c:\windows\system32\win32k.sys

2011-08-31 16:00 . 2011-07-01 10:58 22216 ----a-w- c:\windows\system32\drivers\mbam.sys

2011-08-22 23:41 . 2009-05-18 19:45 916480 ----a-w- c:\windows\system32\wininet.dll

2011-08-22 23:41 . 2009-05-18 19:45 43520 ----a-w- c:\windows\system32\licmgr10.dll

2011-08-22 23:41 . 2009-05-18 19:45 1469440 ------w- c:\windows\system32\inetcpl.cpl

2011-08-22 11:58 . 2009-05-18 19:45 385024 ----a-w- c:\windows\system32\html.iec

2011-08-17 13:49 . 2009-05-18 19:45 138496 ----a-w- c:\windows\system32\drivers\afd.sys

2011-06-16 06:58 . 2011-06-16 06:56 154914552 ----a-w- c:\program files\OOo_3.3.0_Win_x86_install-wJRE_nl.exe

2011-03-31 07:59 . 2010-11-08 13:43 1986520 ----a-w- c:\program files\SyncBack_Setup_NL.exe

2010-10-10 17:42 . 2010-10-10 17:42 13111256 ----a-w- c:\program files\mssefullinstall-x86fre-nl-nl-xp.exe

2010-09-19 15:39 . 2010-09-19 10:13 137920704 ----a-w- c:\program files\OOo_3.2.1_Win_x86_install_nl.exe

.

((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

.

*Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

REGEDIT4

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\OverlayIconExtension1]

@="{fe25455d-b4c2-4e32-97d2-92632ec1c224}"

[HKEY_CLASSES_ROOT\CLSID\{fe25455d-b4c2-4e32-97d2-92632ec1c224}]

2009-11-06 23:07 297808 ----a-w- c:\windows\system32\mscoree.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\OverlayIconExtension2]

@="{1fae2d88-a78e-4f03-909f-be818a3c1ce6}"

[HKEY_CLASSES_ROOT\CLSID\{1fae2d88-a78e-4f03-909f-be818a3c1ce6}]

2009-11-06 23:07 297808 ----a-w- c:\windows\system32\mscoree.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-04-09 39408]

"ccleaner"="c:\program files\CCleaner\CCleaner.exe" [2011-06-24 2423608]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-12-19 135168]

"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-12-19 159744]

"Persistence"="c:\windows\system32\igfxpers.exe" [2007-12-19 131072]

"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2009-03-06 1434920]

"SynAsusAcpi"="c:\program files\Synaptics\SynTP\SynAsusAcpi.exe" [2009-03-06 79144]

"AsusACPIServer"="c:\program files\EeePC\ACPI\AsAcpiSvr.exe" [2009-04-16 630784]

"AsusEPCMonitor"="c:\program files\EeePC\ACPI\AsEPCMon.exe" [2009-03-13 98304]

"AsusTray"="c:\program files\EeePC\ACPI\AsTray.exe" [2009-04-16 118784]

"Parental Control"="c:\program files\Parental Control\bin\pcontrol.exe" [2009-03-20 1104384]

"RTHDCPL"="RTHDCPL.EXE" [2009-03-27 17567744]

"hpqSRMon"="c:\program files\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-08-20 150016]

"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2011-06-15 997920]

"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2011-08-31 40368]

"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-29 937920]

"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]

"removetoolbar"="RD" [X]

"removedatamngr"="RD" [X]

"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-08-31 449608]

.

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-15 15360]

"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2008-11-03 435096]

.

c:\documents and settings\All Users\Menu Start\Programma's\Opstarten\

HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2008-3-25 214360]

Windows Search.lnk - c:\program files\Windows Desktop Search\WindowsSearch.exe [2008-5-26 123904]

.

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]

"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\program files\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

@="Service"

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

@="Driver"

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]

2011-08-31 01:57 40368 ----a-w- c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]

2010-04-16 20:12 3872080 ----a-w- c:\program files\Windows Live\Messenger\msnmsgr.exe

.

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]

"%windir%\\Network Diagnostic\\xpnetdiag.exe"=

"%windir%\\system32\\sessmgr.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgm.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqusgh.exe"=

"c:\\Program Files\\HP\\HP Software Update\\HPWUCli.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\Smart Web Printing\\SmartWebPrintExe.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgplgtupl.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqgpc01.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqpse.exe"=

"c:\\Program Files\\Common Files\\HP\\Digital Imaging\\bin\\hpqPhotoCrm.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqsudi.exe"=

"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqpsapp.exe"=

"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=

"c:\\WINDOWS\\system32\\muzapp.exe"=

.

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]

"427:UDP"= 427:UDP:SLP_Port(427)

"5985:TCP"= 5985:TCP:*:Disabled:Windows Remote Management

.

R1 MpKsl4f45a6d8;MpKsl4f45a6d8;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{D3E2198D-AE1E-4DCD-9E1F-38704C0CFA47}\MpKsl4f45a6d8.sys --> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{D3E2198D-AE1E-4DCD-9E1F-38704C0CFA47}\MpKsl4f45a6d8.sys [?]

R1 policyappblockservice;Parental Control Application Filter;c:\program files\Parental Control\bin\policyappblock.sys [2/02/2009 21:22 5120]

R3 L1c;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller;c:\windows\system32\drivers\l1c51x86.sys [9/04/2009 12:17 38912]

S1 MpKsl0a2d45d5;MpKsl0a2d45d5;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{1EB86957-0BD3-487A-93B2-89DC96D32B2E}\MpKsl0a2d45d5.sys --> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{1EB86957-0BD3-487A-93B2-89DC96D32B2E}\MpKsl0a2d45d5.sys [?]

S1 MpKsl10b1e89e;MpKsl10b1e89e;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{6FE2290A-E2BC-424A-9C0C-FAE80203BE79}\MpKsl10b1e89e.sys --> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{6FE2290A-E2BC-424A-9C0C-FAE80203BE79}\MpKsl10b1e89e.sys [?]

S1 MpKsl1f5390ab;MpKsl1f5390ab;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{371AE6E2-FE2F-4623-BE01-5C52704887BF}\MpKsl1f5390ab.sys --> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{371AE6E2-FE2F-4623-BE01-5C52704887BF}\MpKsl1f5390ab.sys [?]

S1 MpKsl42f0a878;MpKsl42f0a878;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{F59D32E2-4131-48D2-8806-27C878194491}\MpKsl42f0a878.sys --> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{F59D32E2-4131-48D2-8806-27C878194491}\MpKsl42f0a878.sys [?]

S1 MpKsl496cb3ce;MpKsl496cb3ce;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{633ED9ED-E23E-4EAB-B699-16F473227CFF}\MpKsl496cb3ce.sys --> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{633ED9ED-E23E-4EAB-B699-16F473227CFF}\MpKsl496cb3ce.sys [?]

S1 MpKsl4e51075c;MpKsl4e51075c;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{8D0328BA-93A4-42FE-B49E-65731936DF34}\MpKsl4e51075c.sys --> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{8D0328BA-93A4-42FE-B49E-65731936DF34}\MpKsl4e51075c.sys [?]

S1 MpKsl51a6a79a;MpKsl51a6a79a;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{4D0B33A3-B7D5-4ED4-992C-0A635FE38C3F}\MpKsl51a6a79a.sys --> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{4D0B33A3-B7D5-4ED4-992C-0A635FE38C3F}\MpKsl51a6a79a.sys [?]

S1 MpKsl65ff1186;MpKsl65ff1186;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{7667D025-E546-49C8-8405-85468F60A4DC}\MpKsl65ff1186.sys --> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{7667D025-E546-49C8-8405-85468F60A4DC}\MpKsl65ff1186.sys [?]

S1 MpKsl926e5c51;MpKsl926e5c51;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{C73042AD-F68C-4F5F-BC8C-A1708CCA8801}\MpKsl926e5c51.sys --> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{C73042AD-F68C-4F5F-BC8C-A1708CCA8801}\MpKsl926e5c51.sys [?]

S1 MpKsleef327e6;MpKsleef327e6;\??\c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{1CA98746-6D84-467A-AA0D-47CB422F1323}\MpKsleef327e6.sys --> c:\documents and settings\All Users\Application Data\Microsoft\Microsoft Antimalware\Definition Updates\{1CA98746-6D84-467A-AA0D-47CB422F1323}\MpKsleef327e6.sys [?]

S2 gupdate;Google Updateservice (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [9/04/2010 16:18 135664]

S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [18/05/2009 21:42 1684736]

S3 gupdatem;Google Update-service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [9/04/2010 16:18 135664]

S3 SRS_PremiumSound_Service;SRS Labs Premium Sound;c:\windows\system32\drivers\SRS_PremiumSound_i386.sys [19/05/2009 9:02 232872]

S3 uvclf;uvclf;c:\windows\system32\drivers\uvclf.sys [2/04/2009 3:19 39040]

S3 uxddrv;Dynamically loaded UxdDrv;\??\UNC\192.168.254.253\public\Dynafix_32__01.06.11\uxddrv.sys --> UNC\192.168.254.253\public\Dynafix_32__01.06.11\uxddrv.sys [?]

S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [18/05/2009 20:45 14336]

.

--- Andere Services/Drivers In Geheugen ---

.

*NewlyCreated* - MPKSL2934C6A1

*NewlyCreated* - MPKSL546C1C8E

*NewlyCreated* - MPKSL7560AEEC

*NewlyCreated* - MPKSL767DDF6F

*NewlyCreated* - MPKSL89EB62A6

*NewlyCreated* - MPKSL8A60B988

*NewlyCreated* - MPKSLB46763C0

*NewlyCreated* - MPKSLD1F0D0C0

*NewlyCreated* - MPKSLDFDDB14B

*NewlyCreated* - MPKSLFD96699D

*Deregistered* - MpKsl2934c6a1

*Deregistered* - MpKsl546c1c8e

*Deregistered* - MpKsl7560aeec

*Deregistered* - MpKsl767ddf6f

*Deregistered* - MpKsl89eb62a6

*Deregistered* - MpKsl8a60b988

*Deregistered* - MpKslb46763c0

*Deregistered* - MpKsld1f0d0c0

*Deregistered* - MpKsldfddb14b

*Deregistered* - MpKslfd96699d

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12

HPService REG_MULTI_SZ HPSLPSVC

hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc

WINRM REG_MULTI_SZ WINRM

.

Inhoud van de 'Gedeelde Taken' map

.

2011-11-07 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files\Google\Update\GoogleUpdate.exe [2010-04-09 15:18]

.

2011-11-08 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2010-04-09 15:18]

.

------- Bijkomende Scan -------

.

uStart Page = about:blank

IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000

IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html

IE: Verzenden naar &Bluetooth-apparaat... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm

IE: Verzenden naar Bluetooth - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

TCP: DhcpNameServer = 192.168.1.1

.

- - - - ORPHANS VERWIJDERD - - - -

.

WebBrowser-{2D8D9ACC-F6D7-4362-8876-A275CA929591} - (no file)

MSConfigStartUp-SRS Premium Sound - c:\program files\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe

AddRemove-{09FF4DB8-7DE9-4D47-B7DB-915DB7D9A8CA} - c:\documents and settings\All Users\Application Data\{AB2D8F2E-F7AD-4446-A11A-50D846B2CF2A}\bm_installer.exe

.

**************************************************************************

.

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

Rootkit scan 2011-11-08 21:29

Windows 5.1.2600 Service Pack 3 NTFS

.

scannen van verborgen processen ...

.

scannen van verborgen autostart items ...

.

scannen van verborgen bestanden ...

.

Scan succesvol afgerond

verborgen bestanden: 0

.

**************************************************************************

.

Voltooingstijd: 2011-11-08 21:33:02

ComboFix-quarantined-files.txt 2011-11-08 20:32

.

Pre-Run: 37.171.810.304 bytes beschikbaar

Post-Run: 37.740.371.968 bytes beschikbaar

.

WindowsXP-KB310994-SP2-Home-BootDisk-NLD.exe

[boot loader]

timeout=2

default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS

[operating systems]

c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons

UnsupportedDebug="do not select this" /debug

multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect

.

- - End Of File - - 3EEB49F9555C1AAE9D4CBCDED45C3C07

8 november 2011

Het openen gaat iets sneller lijkt me, scrollen op een pagina (bijv Facebook) verloopt nog steeds traag !

8 november 2011

Okidoki, voor alle zekerheid ook met de zoekfunctie alles van Bittorrent gezocht en verwijderd, zat nog wel één en ander verborgen.

Hier het MBAM logje :

Malwarebytes' Anti-Malware 1.51.2.1300

www.malwarebytes.org

Databaseversie: 8109

Windows 5.1.2600 Service Pack 3

Internet Explorer 8.0.6001.18702

8/11/2011 16:56:39

mbam-log-2011-11-08 (16-56-39).txt

Scantype: Snelle scan

Objecten gescand: 179206

Verstreken tijd: 29 minuut/minuten, 1 seconde(n)

Geheugenprocessen geïnfecteerd: 0

Geheugenmodulen geïnfecteerd: 0

Registersleutels geïnfecteerd: 0

Registerwaarden geïnfecteerd: 0

Registerdata geïnfecteerd: 0

Mappen geïnfecteerd: 0

Bestanden geïnfecteerd: 0

Geheugenprocessen geïnfecteerd:

(Geen kwaadaardige objecten gedetecteerd)

Geheugenmodulen geïnfecteerd:

(Geen kwaadaardige objecten gedetecteerd)

Registersleutels geïnfecteerd:

(Geen kwaadaardige objecten gedetecteerd)

Registerwaarden geïnfecteerd:

(Geen kwaadaardige objecten gedetecteerd)

Registerdata geïnfecteerd:

(Geen kwaadaardige objecten gedetecteerd)

Mappen geïnfecteerd:

(Geen kwaadaardige objecten gedetecteerd)

Bestanden geïnfecteerd:

(Geen kwaadaardige objecten gedetecteerd)

En hier het HJT logje :

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 17:00:26, on 8/11/2011

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\SearchIndexer.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\igfxtray.exe

C:\WINDOWS\system32\hkcmd.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\EeePC\ACPI\AsAcpiSvr.exe

C:\Program Files\EeePC\ACPI\AsEPCMon.exe

C:\WINDOWS\system32\igfxsrvc.exe

C:\Program Files\EeePC\ACPI\AsTray.exe

C:\Program Files\Parental Control\bin\pcontrol.exe

C:\WINDOWS\RTHDCPL.EXE

C:\Program Files\Microsoft Security Client\msseces.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

C:\Program Files\Windows Desktop Search\WindowsSearch.exe

C:\Program Files\OpenOffice.org 3\program\soffice.exe

C:\WINDOWS\system32\igfxext.exe

C:\Program Files\OpenOffice.org 3\program\soffice.bin

C:\WINDOWS\system32\svchost.exe

C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe

C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe

C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe

C:\Program Files\Windows Live\Contacts\wlcomm.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\Program Files\Common Files\Java\Java Update\jucheck.exe

C:\Program Files\Windows Live\Mail\wlmail.exe

C:\Program Files\Internet Explorer\IEXPLORE.EXE

C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe

C:\WINDOWS\system32\msiexec.exe

C:\WINDOWS\system32\rundll32.exe

C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

C:\WINDOWS\system32\SearchProtocolHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll

O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe

O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe

O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe

O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [synAsusAcpi] C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe

O4 - HKLM\..\Run: [AsusACPIServer] C:\Program Files\EeePC\ACPI\AsAcpiSvr.exe

O4 - HKLM\..\Run: [AsusEPCMonitor] C:\Program Files\EeePC\ACPI\AsEPCMon.exe

O4 - HKLM\..\Run: [AsusTray] C:\Program Files\EeePC\ACPI\AsTray.exe

O4 - HKLM\..\Run: [Parental Control] "C:\Program Files\Parental Control\bin\pcontrol.exe" --start

O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe

O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent

O4 - HKLM\..\RunOnce: [removetoolbar] cmd.exe /c RD /S /Q "C:\PROGRA~1\WI9130~1\ToolBar"

O4 - HKLM\..\RunOnce: [removedatamngr] cmd.exe /c RD /S /Q "C:\Program Files\Windows Searchqu Toolbar\"

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO

O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\system32\Macromed\Flash\FlashUtil10x_ActiveX.exe -update activex

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Lokale service')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Netwerkservice')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - Startup: OpenOffice.org 3.2 .lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe

O4 - Startup: OpenOffice.org 3.3 .lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe

O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe

O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000

O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html

O8 - Extra context menu item: Verzenden naar &Bluetooth-apparaat... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm

O8 - Extra context menu item: Verzenden naar Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Toon of verberg HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1271009336859

O16 - DPF: {A9F8D9EC-3D0A-4A60-BD82-FBD64BAD370D} (DDRevision Class) - http://h20264.www2.hp.com/ediags/dd/install/HPDriverDiagnosticsxp2k.cab

O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab

O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\Aibelive\VOICEC~1\SKYPE4~1.DLL

O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

--

End of file - 9869 bytes

7 november 2011

Hallo,

Kan iemand aub nog eens het volgend logje bekijken en zien of er iets abnormaals tussen staat ? Mijn internet werkt weer ongelooflijk traag ...

Alvast bedankt !

Els

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 20:43:04, on 7/11/2011

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Microsoft\BingBar\SeaPort.EXE

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Java\jre6\bin\jqs.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\SearchIndexer.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\igfxtray.exe

C:\WINDOWS\system32\hkcmd.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\EeePC\ACPI\AsAcpiSvr.exe

C:\Program Files\EeePC\ACPI\AsEPCMon.exe

C:\WINDOWS\system32\igfxsrvc.exe

C:\Program Files\EeePC\ACPI\AsTray.exe

C:\Program Files\Parental Control\bin\pcontrol.exe

C:\WINDOWS\RTHDCPL.EXE

C:\Program Files\Microsoft Security Client\msseces.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe

C:\Program Files\Windows Desktop Search\WindowsSearch.exe

C:\Program Files\OpenOffice.org 3\program\soffice.exe

C:\WINDOWS\system32\igfxext.exe

C:\Program Files\OpenOffice.org 3\program\soffice.bin

C:\WINDOWS\system32\svchost.exe

C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe

C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe

C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe

C:\Program Files\Windows Live\Contacts\wlcomm.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\Program Files\Common Files\Java\Java Update\jucheck.exe

C:\Program Files\Windows Live\Mail\wlmail.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\WINDOWS\system32\SearchProtocolHost.exe

C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = Facemoods Search

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

R3 - URLSearchHook: BittorrentBar_NL Toolbar - {2d8d9acc-f6d7-4362-8876-a275ca929591} - C:\Program Files\BittorrentBar_NL\prxtbBit0.dll

O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll

O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

O2 - BHO: BittorrentBar_NL - {2d8d9acc-f6d7-4362-8876-a275ca929591} - C:\Program Files\BittorrentBar_NL\prxtbBit0.dll

O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll

O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll

O3 - Toolbar: BittorrentBar_NL Toolbar - {2d8d9acc-f6d7-4362-8876-a275ca929591} - C:\Program Files\BittorrentBar_NL\prxtbBit0.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)