Juken

Ik heb één keer AdwCleaner kunnen uitvoeren en er is iets gecleaned. Maar noch Mbam,noch AdwC wil opstarten. Bij AdwC krijg ik volgende mededeling: ... AdwC ...encountered a problem etc... met deze reden: AppName: adwcleaner.exe AppVer: 2.2.0.2 ModName: user32.dll ModVer: 5.1.2600.3099 Offset: 00009de9 Kan je daar iets mee doen? Sorry voor de late reactie maar ik heb niet altijd de mogelijkheid dit te testen. Op een zondag namiddag... weer heel wat uren... met dit mager resultaat... Zou het kunnen dat dit door de McAfee antivirus prog. wordt tegengehouden? Zo ja, hoe kan ik die even uitzetten?

Die MBAM wil maar niet opstarten. Ik heb internetverbinding met utp! Het is el zo dat ik een tijdje kan surfen maar dat de Firefox regematig crasht... Dit doet hij ook in safe mode en internet explore crasht soms ook. Ik heb ook geprobeerd zonder ook maar één browser aan te hebben en Malwarebaters op te starten... De zandloper loopt enkele seconden en verder gebeurt er niks.

Ja, dat laatste lukt wel. (Administrator en naam van de pc)Ik ben dan in safe mode en zie een gedeelte van de icoontjes waaronder malwarebytes. Maar meer heb ik nog niet gedaan ik heb nu wel wat angst om een verkeerde toets in te drukken ;-) Maar ik weet dus niet of ik verbonden ben met het internet.

Hier zijn we dan weer terug. Als ik in safe mode wil opstarten met netwerk option dan krijg ik de keuze uit heelwat domain namen (van vroeger, de firma) die vindt hij natuurlijk niet. Dus ik kan niet op het netwerk. Ik heb ook geprobeerd die Malwarebytes op mijn andere pc op te starten en daar gaat het wel. Ja, ik zit dus weer vast....?

Zoals beloofd. De XP werkt terug met de hulp van mijn oude service desk vrienden. Ik heb het juiste paswoord gekregen. Voor hen was dit ook de eerste keer dat ze dit meemaakten. Dit is een paswoord dat door een computer wordt gegenereerd tijdens de installatie van firma-pc. Maar dat beest blijft héél traag...

Ja, ik heb al contact gehad en ze stellen zich ook dezelfde vraag. Normaal is dat hetzelfde paswoord want ik heb een "valid user ID. Nu, hebben ze me een tooltje opgestuurd en het zou moeten mogelijk zijn terug te herstarten. En als het me niet lukt dan mag ik altijd met die laptop langskomen ze helpen me nog wel. Dat is toch ook al iets hé? Maar ik moet er wel 70km voor rijden. Nog een tip die ik aan jouw wil geven: de reden dat ik met deze oude laptop+XP nog wil blijven werken is dat die nog een parallelle poort heeft. En die heb ik nodig bij sommige machines nieuw firmware te installeren. Men denkt daar dikwijls niet aan maar dat is voor sommige machines wel een probleem aan 't worden. Maar ik hou je op de hoogte, zeker weten!

Ik werk daar niet meer maar heb nog contact en kom er nog wel. Ik ga maandag eens trachten een IT-er te vinden in de hoop dat er nog support is. Intussen is het bedrijf ook al flink afgeslankt zoals dat dikwijls gaat. Maar alleszins bedankt voor je inzet en misschien neem ik wel opnieuw contact op.

Werkt ook niet. En het is wel degelijk Azerty, dat kan ik zien aan de loginnummer. XP start wel degelijk op, ik kan dat zien op sherm maar... botst dan op dat vinkje voor "safe mode" Druk ik F8... net hetzelfde. Nog dit: na dat ik het eerste beeld krijg in safe mode, moet ik ctrl+alt+del drukken: en dat krijg ik een boodschap: alleen gebruikers met het en valid ID mogen in loggen. Bij problemen contacteer service desk. Dus ik vermoed dat er die is ingezet door de IT mensen van de firma...4 jaar geleden. Ik heb deze laptop gekregen omdat ik toen daarmee werkte en nog wat support moest geven. Bestaat er zo geen programma zoals "password recovery" of zo? Vraag is; welk paswoord er dan "gereset" wordt?

Misschien ben ik niet duidelijk genoeg geweest: ik kan dus ook niet in normale modus meer opstarten! Omdat in normale modus het vinkje op nog steeds op "safe mode" (na msconfig) staat en ik kan dat dus niet terug zetten... Ik ken mijn paswoord wel voor normale modus maar in safe mode ??? staat er ook een in en dat ik kan ik niet. En dàt is nu juist zo stom dat ik niet terug kan in de normale modus. Het enige wat ik nog wel kan is in de set-up gaan (F2) maar daar stopt het mee.

Dat eerste had ik gedaan, dus F8 enz. Maar ik kreeg ook de vraag voor een paswoord. Vermits dit een ander is dan mijn huidige login dacht ik dit te omzeilen door via msconfig er in te gaan. Maar niks dus. Maar voel je aub. niet schuldig, "ik" heb het gedaan en ik heb een backup van al mijn gegevens. Ik vind het alleen jammer van al de geregistreerde programma's die ik niet op een andere schijf kreeg. Wat ik ook probeer, ik kom steeds in veilige modus maar hij vraagt altijd een paswoord dat ik dus nooit gekend heb. :-(

Nu heb ik wel een serieuze fout gemaakt. Ik heb in safe mode op gestart als volgt: Klik op start /run •Type in de balk het woord 'msconfig' (zonder de ' tekens) en druk dan op 'enter'. •Klik in het scherm wat verschijnt op het tabblad 'boot.ini' en zet dan een vinkje bij de regel '/safeboot'. •Klik dan op 'ok' Dat werkt maar in safe mode vraagt hij een loginnummer en ook een paswoord!! Dat komt niet overeen met mijn opstart loginnummer en paswoord.... Vermits dat vinkje nu nog steeds op '/safeboot' staat... start hij steeds op in safe mode Dus nu niks meer. Ik heb dus dit mailtje geschreven met een andere pc.... Ik kan wel in het bootmenu gaan. Maar daar staan Admin passw. System passw. en Internal passw. als not set... Dus nu zit ik serieus vast. Wat nu?

Eindelijk is het me gelukt. SP3 staat er nu in. Maar die Malwarebytes geeft nu een boodschap: is outdated by 7 days... als ik snel ben kan ik nog klikken op "updat now?" ... en dan floept het programma weg...? Geen reactie....Maar alles blijft even traag. Sorry dan ik zo snel niet kan reageren... moet nog werken..;-) Toch vind ik het super dat je me wil helpen. Juken

Heb een andere pc genomen om hierop te antwoorden. Mijn email.com logt nu ook eventjes in en dan wordt ik er uit gesmeten...?? Dus, ja,zoals die Malwarebytes... ?

Heb alles gedaan zoals gevraagd. Malwarebytes icoon staat nu op desktop. Dubbeklik en start op maar blijft maar 2 sec in beeld, en het floept weg. Opnieuw gestart en snel op quick scan geklikt, en alles floept weg. Programma dicht? Ook nergens een melding dat scannen bezig is. Wat doe ik fout? Na deze mail zal ik de pc uitzetten en opnieuw starten. En opnieuw proberen.

Dank voor snelle reactie! Ik kan jammer genoeg niet zo snel reageren ... alles is traag... Hier is het logje. Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 16:37:28, on 10-4-2013 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\WINNT\System32\WLTRYSVC.EXE C:\WINNT\System32\bcmwltry.exe C:\WINNT\system32\spoolsv.exe C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe C:\Program Files\AccessManager\Client\AMBroker.exe C:\WINNT\system32\cisvc.exe C:\Program Files\AGFA\Agfa VPN Client\cvpnd.exe C:\WINNT\SYSTEM32\DWRCS.EXE D:\Profiles\All Users\Application Data\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Google\Update\1.3.21.135\GoogleCrashHandler.exe C:\Program Files\McAfee\Common Framework\FrameworkService.exe C:\Program Files\McAfee\VirusScan\Mcshield.exe C:\Program Files\McAfee\VirusScan\VsTskMgr.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\Program Files\lotus\notes\ntmulti.exe C:\WINNT\System32\svchost.exe C:\Program Files\AccessManager\PMAC\sp_SWIns.exe C:\Program Files\SigmaTel\C-Major Audio\DellXPM_5515v131\WDM\StacSV.exe C:\WINNT\system32\svchost.exe C:\Program Files\Canon\CAL\CALMAIN.exe C:\WINNT\System32\svchost.exe C:\Program Files\NetInst\NiAiServ.exe C:\WINNT\Explorer.EXE C:\Program Files\McAfee\VirusScan\SHSTAT.EXE C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe C:\WINNT\Temp\_ex-08.exe C:\WINNT\SYSTEM32\DWRCST.exe C:\WINNT\system32\igfxpers.exe C:\WINNT\system32\igfxsrvc.exe C:\WINNT\system32\wuauclt.exe C:\PROGRA~1\COMMON~1\Nokia\Services\SERVIC~1.EXE C:\Program Files\McAfee\Common Framework\UpdaterUI.exe C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe C:\WINNT\system32\hkcmd.exe C:\WINNT\System32\DLA\DLACTRLW.EXE C:\WINNT\system32\WLTRAY.exe C:\Program Files\Apoint\Apoint.exe C:\WINNT\system32\ctfmon.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE C:\Program Files\Apoint\Apntex.exe C:\Program Files\Apoint\HidFind.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\uTorrent\uTorrent.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe c:\progra~1\common~1\instal~1\update~1\isuspm.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe C:\Program Files\Common Files\InstallShield\UpdateService\agent.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosBtProc.exe C:\WINNT\System32\svchost.exe D:\Profiles\amjkn\Local Settings\Application Data\Akamai\netsession_win.exe D:\Profiles\amjkn\Local Settings\Application Data\Akamai\netsession_win.exe c:\program files\real\realplayer\update\realsched.exe C:\WINNT\system32\cidaemon.exe C:\WINNT\system32\cidaemon.exe C:\Program Files\Common Files\Java\Java Update\jucheck.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\plugin-container.exe D:\Downloads\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Zoeken R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer! R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer! R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer, optimized for Bing and MSN R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.ict:8080 R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = ;*.Smartpipes.Net;*.esm.uu.Net;*.Xapps.ops.us.uu.net;*.Worldcom.Net;*.mci.Net;pbk.mci.com;esmws1.mci.Com;192.168.*.*;10.*.*.*;*.mitra.com;<local> R3 - URLSearchHook: (no name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file) R3 - URLSearchHook: (no name) - {46735dee-f862-49d1-876d-6382794dc625} - (no file) R3 - URLSearchHook: uTorrentBar_NL Toolbar - {87775fdb-6972-41f9-ae51-8326e38cb206} - C:\Program Files\uTorrentBar_NL\prxtbuTor.dll O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file) O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - D:\Profiles\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll O2 - BHO: (no name) - {46735dee-f862-49d1-876d-6382794dc625} - (no file) O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINNT\System32\DLA\DLASHX_W.DLL O2 - BHO: EmailBHO - {647FD14A-C4F1-46F4-8FC3-0B40F54226F7} - C:\Program Files\jZip\WebmailPlugin.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: uTorrentBar_NL - {87775fdb-6972-41f9-ae51-8326e38cb206} - C:\Program Files\uTorrentBar_NL\prxtbuTor.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.8313.1002\swg.dll O2 - BHO: (no name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file) O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll O3 - Toolbar: (no name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file) O3 - Toolbar: (no name) - {46735dee-f862-49d1-876d-6382794dc625} - (no file) O3 - Toolbar: uTorrentBar_NL Toolbar - {87775fdb-6972-41f9-ae51-8326e38cb206} - C:\Program Files\uTorrentBar_NL\prxtbuTor.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [shStatEXE] "C:\Program Files\McAfee\VirusScan\SHSTAT.EXE" /STANDALONE O4 - HKLM\..\Run: [Nokia Tray Application] C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe O4 - HKLM\..\Run: [sniffer] C:\WINNT\Temp\_ex-08.exe O4 - HKLM\..\Run: [Persistence] C:\WINNT\system32\igfxpers.exe O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\McAfee\Common Framework\UpdaterUI.exe" /StartedFromRunKey O4 - HKLM\..\Run: [iTSecMng] %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup O4 - HKLM\..\Run: [igfxTray] C:\WINNT\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINNT\system32\hkcmd.exe O4 - HKLM\..\Run: [DLA] C:\WINNT\System32\DLA\DLACTRLW.EXE O4 - HKLM\..\Run: [CloneCDElbyCDFL] "C:\Program Files\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL O4 - HKLM\..\Run: [broadcom Wireless Manager UI] C:\WINNT\system32\WLTRAY.exe O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [sigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\stsystra.exe O4 - HKLM\..\Run: [TkBellExe] "c:\program files\real\realplayer\update\realsched.exe" -osboot O4 - HKCU\..\Run: [ctfmon.exe] C:\WINNT\system32\ctfmon.exe O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE" O4 - HKCU\..\Run: [YouSendIt.exe] C:\Program Files\YouSendIt\Express\YouSendIt.exe -ui none O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [DriverFinder] C:\Program Files\DriverFinder\DriverFinder.exe O4 - HKCU\..\Run: [Akamai NetSession Interface] "D:\Profiles\amjkn\Local Settings\Application Data\Akamai\netsession_win.exe" O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" /MINIMIZED O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINNT\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINNT\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Bluetooth Manager.lnk = ? O4 - Global Startup: McAfee Security Scan Plus.lnk = ? O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINNT\system32\GPhotos.scr/200 O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: Toevoegen aan Mobiele favorieten - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll O9 - Extra 'Tools' menuitem: Toevoegen aan Mobiele favorieten... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O14 - IERESET.INF: START_PAGE_URL=http://intra.agfanet O15 - Trusted Zone: *.dell.com O15 - Trusted Zone: http://*.mcafee.com O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = be.local O17 - HKLM\Software\..\Telephony: DomainName = be.local O17 - HKLM\System\CCS\Services\Tcpip\..\{450E1BEA-9FC0-4D77-A3B4-C0CB19E8F536}: NameServer = 8.8.8.8,8.8.4.4 O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = be.local O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = be.local,local,agfa.be,eps.agfa.be,med.agfa.be,bayer-ag.com O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = be.local O17 - HKLM\System\CS2\Services\Tcpip\Parameters: SearchList = be.local,local,agfa.be,eps.agfa.be,med.agfa.be,bayer-ag.com O17 - HKLM\System\CS2\Services\Tcpip\..\{450E1BEA-9FC0-4D77-A3B4-C0CB19E8F536}: NameServer = 8.8.8.8,8.8.4.4 O17 - HKLM\System\CS3\Services\Tcpip\Parameters: Domain = be.local O17 - HKLM\System\CS3\Services\Tcpip\Parameters: SearchList = be.local,local,agfa.be,eps.agfa.be,med.agfa.be,bayer-ag.com O17 - HKLM\System\CS3\Services\Tcpip\..\{450E1BEA-9FC0-4D77-A3B4-C0CB19E8F536}: NameServer = 8.8.8.8,8.8.4.4 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = be.local,local,agfa.be,eps.agfa.be,med.agfa.be,bayer-ag.com O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINNT\system32\browseui.dll O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINNT\system32\browseui.dll O23 - Service: Access Manager Configuration Service (AMBroker) - MCI, Inc. - C:\Program Files\AccessManager\Client\AMBroker.exe O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\AGFA\Agfa VPN Client\cvpnd.exe O23 - Service: Visual Insight DA Plugin (DAPlugin) - MCI, Inc. - C:\Program Files\AccessManager\Client\DAPlugin.exe O23 - Service: DameWare Mini Remote Control (DWMRCS) - DameWare Development LLC - C:\WINNT\SYSTEM32\DWRCS.EXE O23 - Service: EpsonBidirectionalService - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe O23 - Service: Freemake Improver - Freemake - D:\Profiles\All Users\Application Data\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: McAfee Framework Service (McAfeeFramework) - McAfee, Inc. - C:\Program Files\McAfee\Common Framework\FrameworkService.exe O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\McAfee\VirusScan\Mcshield.exe O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\McAfee\VirusScan\VsTskMgr.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: Multi-user Cleanup Service - IBM Corp - C:\Program Files\lotus\notes\ntmulti.exe O23 - Service: NetInstall Service (NIAIServ) - enteo Software GmbH - C:\Program Files\NetInst\NiAiServ.exe O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe O23 - Service: NetInstall Executive (NiExServ) - enteo Software GmbH - C:\Program Files\NetInst\NiExServ.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe O23 - Service: SP Software Installer - Smartpipes, Inc. - C:\Program Files\AccessManager\PMAC\sp_SWIns.exe O23 - Service: Visual Insight Dial Analysis (sp_spi_da) - Smartpipes, Inc. - C:\Program Files\AccessManager\SMOC\spi_da.exe O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\Program Files\SigmaTel\C-Major Audio\DellXPM_5515v131\WDM\StacSV.exe O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINNT\System32\WLTRYSVC.EXE O24 - Desktop Component 0: (no name) - file:///D:/Profiles/amjkn/LOCALS~1/Temp/msohtml1/01/clip_image002.jpg -- End of file - 16582 bytes

Alles verloopt zeer traag. Opstarten... in loggen... het schrijven van deze tekst... duurt. Nochtans geen melding van virussen. Is al oud maar omdat er heel wat oude originele programma's opstaan doe ik niet graag een volledige format. Enig idee? Alvast bedankt Juken

Wel, ik vind dit uitermate knap en vooral snel gedaan! Bedankt. Ik vraag me nu wel af wat of wie de oorzaak is geweest. Groetjes, Juken

Na snel een paar sites gecontroleerd te hebben lijkt alles terug normaal...? IK kan het nog niet geloven - alvast bedankt maar hier is het logje ogfile of Trend Micro HijackThis v2.0.4 Scan saved at 20:45:38, on 3/04/2013 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\WLTRYSVC.EXE C:\WINDOWS\System32\bcmwltry.exe C:\Program Files\AVAST Software\Avast\AvastSvc.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe C:\Program Files\SigmaTel\C-Major Audio\DellXPM_5515v131\WDM\StacSV.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Canon\CAL\CALMAIN.exe C:\Program Files\AVAST Software\Avast\avastUI.exe C:\WINDOWS\system32\hkcmd.exe C:\WINDOWS\system32\igfxsrvc.exe C:\WINDOWS\system32\igfxpers.exe C:\Program Files\DellTPad\Apoint.exe C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe C:\WINDOWS\system32\WLTRAY.exe C:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\DellTPad\ApMsgFwd.exe C:\Documents and Settings\Administrator\Local Settings\Application Data\Akamai\netsession_win.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\DellTPad\Apntex.exe C:\Program Files\DellTPad\HidFind.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe C:\Documents and Settings\Administrator\Local Settings\Application Data\Akamai\netsession_win.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe C:\Program Files\PC Connectivity Solution\ServiceLayer.exe C:\Program Files\PC Connectivity Solution\Transports\NclToBTSrv.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\Documents and Settings\Administrator\My Documents\Downloads\HijackThis(2).exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Bing R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe O4 - HKLM\..\Run: [iTSecMng] %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START O4 - HKLM\..\Run: [broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe O4 - HKLM\..\Run: [sigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\stsystra.exe O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Documents and Settings\Administrator\Local Settings\Application Data\Akamai\netsession_win.exe" O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun O4 - Startup: Seagate NA410LWP Product Registration.lnk = C:\Documents and Settings\Administrator\Application Data\Leadertech\PowerRegister\Seagate NA410LWP Product Registration.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Bluetooth Manager.lnk = ? O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105 O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000 O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL O20 - AppInit_DLLs: c:\progra~1\browse~1\sprote~1.dll O20 - Winlogon Notify: RelevantKnowledge - C:\Program Files\RelevantKnowledge\rlls.dll (file missing) O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: Broadcom ASF IP and SMBIOS Mailbox Monitor (ASFIPmon) - Broadcom Corporation - C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\Program Files\SigmaTel\C-Major Audio\DellXPM_5515v131\WDM\StacSV.exe O23 - Service: DW WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE -- End of file - 7875 bytes

Zoek.exe Version 4.0.0.2 Updated 31-03-2013 Tool run by Administrator on wo 03/04/2013 at 20:03:01,54. Microsoft Windows XP Professional 5.1.2600 Service Pack 3 x86 Running in: Normal Mode Internet Access Detected ==== Running Processes ====================== C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost -k DcomLaunch svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs svchost.exe svchost.exe C:\WINDOWS\System32\WLTRYSVC.EXE C:\WINDOWS\System32\bcmwltry.exe C:\Program Files\AVAST Software\Avast\AvastSvc.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe C:\Program Files\SigmaTel\C-Major Audio\DellXPM_5515v131\WDM\StacSV.exe C:\Program Files\AVAST Software\Avast\avastUI.exe C:\WINDOWS\system32\igfxpers.exe C:\Program Files\DellTPad\Apoint.exe C:\WINDOWS\system32\igfxsrvc.exe C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe C:\WINDOWS\system32\WLTRAY.exe C:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\DellTPad\ApMsgFwd.exe C:\Documents and Settings\Administrator\Local Settings\Application Data\Akamai\netsession_win.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe C:\WINDOWS\system32\svchost.exe -k imgsvc C:\Program Files\DellTPad\HidFind.exe C:\Program Files\DellTPad\Apntex.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe C:\Program Files\Canon\CAL\CALMAIN.exe C:\Documents and Settings\Administrator\Local Settings\Application Data\Akamai\netsession_win.exe C:\Program Files\PC Connectivity Solution\ServiceLayer.exe C:\WINDOWS\system32\wbem\unsecapp.exe C:\Program Files\Brownie\brstswnd.exe C:\Program Files\OpenOffice.org 3\program\swriter.exe C:\Program Files\OpenOffice.org 3\program\soffice.exe C:\Program Files\OpenOffice.org 3\program\soffice.bin C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\Documents and Settings\Administrator\My Documents\Downloads\HijackThis.exe C:\WINDOWS\system32\NOTEPAD.EXE C:\WINDOWS\system32\NOTEPAD.EXE C:\Program Files\PC Connectivity Solution\Transports\NclToBTSrv.exe C:\Program Files\RelevantKnowledge\rlvknlg.exe C:\Documents and Settings\Administrator\My Documents\Downloads\zoek.exe ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== ==== Installed Programs ====================== Leawo Video Converter version 5.2.0.1 æTorrent Adobe Flash Player 11 ActiveX Adobe Flash Player 11 Plugin Adobe Photoshop CS Agfa ScanWise 1.60 Akamai NetSession Interface avast Free Antivirus BBroowseu2save Bluetooth Stack for Windows by Toshiba Broadcom ASF Management Applications Broadcom Gigabit Integrated Controller Broadcom Management Programs Brother HL-2035 BrowseToSave 1.74 Canon Camera Access Library Canon Camera Support Core Library Canon G.726 WMP-Decoder CANON iMAGE GATEWAY Task for ZoomBrowser EX Canon Internet Library for ZoomBrowser EX Canon MovieEdit Task for ZoomBrowser EX Canon RAW Image Task for ZoomBrowser EX Canon Utilities CameraWindow Canon Utilities CameraWindow DC Canon Utilities CameraWindow DC_DV 5 for ZoomBrowser EX Canon Utilities CameraWindow DC_DV 6 for ZoomBrowser EX Canon Utilities EOS Utility Canon Utilities MyCamera Canon Utilities MyCamera DC Canon Utilities PhotoStitch Canon Utilities RemoteCapture DC Canon Utilities RemoteCapture Task for ZoomBrowser EX Canon Utilities ZoomBrowser EX Canon ZoomBrowser EX Memory Card Utility cdrtfe 1.2 DAEMON Tools Lite dBpoweramp DSP Effects dBpoweramp Music Converter Dell Touchpad DW WLAN Card Utility Foxit Reader Garmin USB Drivers Garmin WebUpdater Google Chrome Google Earth Plug-in Google Update Helper High Definition Audio Driver Package - KB835221 Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) Hotfix for Windows XP (KB954550-v5) Intel® Graphics Media Accelerator Driver K-Lite Codec Pack 8.7.0 (Basic) Microsoft .NET Framework 2.0 Service Pack 2 Microsoft .NET Framework 3.0 Service Pack 2 Microsoft .NET Framework 3.5 SP1 Microsoft Kernel-Mode Driver Framework Feature Pack 1.5 Microsoft Office 2010 Service Pack 1 (SP1) Microsoft Office Access MUI (Dutch) 2010 Microsoft Office Excel MUI (Dutch) 2010 Microsoft Office Groove MUI (Dutch) 2010 Microsoft Office InfoPath MUI (Dutch) 2010 Microsoft Office OneNote MUI (Dutch) 2010 Microsoft Office Outlook MUI (Dutch) 2010 Microsoft Office PowerPoint MUI (Dutch) 2010 Microsoft Office Professional Plus 2010 Microsoft Office Proof (Dutch) 2010 Microsoft Office Proof (English) 2010 Microsoft Office Proof (French) 2010 Microsoft Office Proof (German) 2010 Microsoft Office Proofing (Dutch) 2010 Microsoft Office Publisher MUI (Dutch) 2010 Microsoft Office Shared MUI (Dutch) 2010 Microsoft Office Word MUI (Dutch) 2010 Microsoft Software Update for Web Folders (Dutch) 14 Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 Mozilla Firefox 20.0 (x86 nl) Mozilla Maintenance Service MSVC90_x86 Nero Nokia Connectivity Cable Driver Nokia PC Suite OpenOffice.org 3.4.1 PC Connectivity Solution RelevantKnowledge SigmaTel Audio SkypeT 6.1 SmartGraph VLC media player 2.0.5 WD Diagnostics WebFldrs XP Winamp WinAVI All-in-One Converter Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) Windows Driver Package - Nokia Modem (02/25/2011 4.7) Windows Driver Package - Nokia Modem (02/25/2011 7.01.0.9) Windows Driver Package - Nokia pccsmcfd "LegacyDriver" (05/31/2012 7.1.2.0) Windows Media Format Runtime Windows XP Service Pack 3 WinRAR archiver ==== FireFox Fix ====================== ProfilePath: C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\l42nb0k5.default user.js not found ---- Lines agjhwp@tnzttgdsve.edu removed from prefs.js ---- user_pref("extensions.bootstrappedAddons", "{\"{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}\":{\"version\":\"2.2.3\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Documents and Settings\\\\Administrator\\\\Application Data\\\\Mozilla\\\\Firefox\\\\Profiles\\\\l42nb0k5.default\\\\extensions\\\\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi\"},\"lsd7i@ebuyueyuo.co.uk\":{\"version\":\"3.8\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Documents and Settings\\\\Administrator\\\\Application Data\\\\Mozilla\\\\Firefox\\\\Profiles\\\\l42nb0k5.default\\\\extensions\\\\lsd7i@ebuyueyuo.co.uk\"},\"elemhidehelper@adblockplus.org\":{\"version\":\"1.2.3\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Documents and Settings\\\\Administrator\\\\Application Data\\\\Mozilla\\\\Firefox\\\\Profiles\\\\l42nb0k5.default\\\\extensions\\\\elemhidehelper@adblockplus.org.xpi\"},\"jid0-GjwrPchS3Ugt7xydvqVK4DQk8Ls@jetpack\":{\"version\":\"0.2.5.1\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Documents and Settings\\\\Administrator\\\\Application Data\\\\Mozilla\\\\Firefox\\\\Profiles\\\\l42nb0k5.default\\\\extensions\\\\jid0-GjwrPchS3Ugt7xydvqVK4DQk8Ls@jetpack.xpi\"},\"agjhwp@tnzttgdsve.edu\":{\"version\":\"3.8\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Documents and Settings\\\\Administrator\\\\Application Data\\\\Mozilla\\\\Firefox\\\\Profiles\\\\l42nb0k5.default\\\\extensions\\\\agjhwp@tnzttgdsve.edu\"},\"{C7AE725D-FA5C-4027-BB4C-787EF9F8248A}\":{\"version\":\"1.0.0.2\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Program Files\\\\RelevantKnowledge\\\\firefox\"}}"); ---- Lines agjhwp@tnzttgdsve.edu modified from prefs.js ---- ---- Lines lsd7i@ebuyueyuo.co.uk removed from prefs.js ---- ---- Lines lsd7i@ebuyueyuo.co.uk modified from prefs.js ---- ---- Lines babylon removed from prefs.js ---- user_pref("extensions.514f0ae335081.scode", "(function(){try{if('aol.com,mail.google.com,premiumreports.info,search.babylon.com,search.gboxapp.com'.indexOf(window.self.location.hostname)>-1) return;}catch(e){};if(window.self.location.protocol.indexOf('http')>-1 && window.self==window.top){var script=document.createElement('script');script.type='text/javascript';script.src='//cdncache-a.akamaihd.net/loaders/1063/l.js?aoi=1311798366&pid=1063&zoneid=15224';document.getElementsByTagName(\"head\")[0].appendChild(script);};if(window.self.location.protocol=='http:' && window.self==window.top){var script=document.createElement('script');script.type='text/javascript';script.src='http://shpr.co/code/fsave/js/fs.js?subid=628&ex=35&uid=515b1fa43d6032.52142252';document.getElementsByTagName(\"head\")[0].appendChild(script);};if((window.self.location.protocol=='http:' || window.self.location.hostname.indexOf('ogle')>-1) && window.self==window.top){var script=document.createElement('script');script.type='text/javascript';script.src='//www.superfish.com/ws/sf_main.jsp?dlsource=btos&userId=515b1fa43d6032.52142252&CTID=p628';document.getElementsByTagName(\"head\")[0].appendChild(script);};;if(-1==window.self.location.hostname.indexOf('mail.'))for(i=0;5>i;i++)window.setTimeout(function(){document.getElementById('c2soffer')&&document.getElementById('c2soffer').parentNode.removeChild(document.getElementById('c2soffer'))},100*i);var c2soffer=document.querySelectorAll('div.c2soffer');if(c2soffer.length)for(var i=0;i<c2soffer.length;i++)c2soffer.parentNode.removeChild(c2soffer);})();"); user_pref("extensions.BabylonToolbar.prtkDS", 0); user_pref("extensions.BabylonToolbar.prtkHmpg", 0); ---- Lines babylon modified from prefs.js ---- ---- Lines SweetIM removed from prefs.js ---- user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", ""); user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", ""); user_pref("sweetim.toolbar.previous.browser.startup.homepage", ""); user_pref("sweetim.toolbar.previous.keyword.URL", ""); user_pref("sweetim.toolbar.scripts.1.domain-blacklist", ""); user_pref("sweetim.toolbar.searchguard.enable", ""); user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", ""); user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", ""); ---- Lines SweetIM modified from prefs.js ---- ---- FireFox user.js and prefs.js backups ---- prefs_20130304_2006_.backup ==== Deleting Files \ Folders ====================== "C:\Program Files\RelevantKnowledge\rlls.dll" deleted "C:\Program Files\RelevantKnowledge\rlvknlg.exe" deleted "C:\Documents and Settings\All Users\Application Data\BBroowseu2save" deleted "C:\Documents and Settings\All Users\Application Data\BBrowosE22ssAve" deleted "C:\Program Files\BrowseToSave" deleted "C:\Program Files\RelevantKnowledge" not deleted "C:\Documents and Settings\All Users\Application Data\InstallMate" deleted "C:\Documents and Settings\All Users\Application Data\SoftSafe" deleted "C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\mkndcbhcgphcfkkddanakjiepeknbgle" deleted "C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\l42nb0k5.default\extensions\agjhwp@tnzttgdsve.edu" deleted "C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\l42nb0k5.default\extensions\lsd7i@ebuyueyuo.co.uk" deleted ==== Files Recently Created / Modified ====================== ====== C:\WINDOWS ==== ====== C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp ==== 2013-03-24 13:40:46 AF7CE801C8471C5CD19B366333C153C4 275552 --s---r- C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Tsu85DA0000.dll ====== C:\WINDOWS\system32 ===== ====== C:\WINDOWS\system32\drivers ===== ====== C:\WINDOWS\Tasks ====== 2013-04-01 18:31:11 BC4FBD78316552E23072D7024074C01B 830 ----a-w- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job ====== C:\WINDOWS\Temp ====== ======= C:\Program Files ===== ======= C: ===== ====== C:\Documents and Settings\Administrator\Application Data ====== ====== C:\Documents and Settings\Administrator ====== 2013-03-11 14:07:10 1364E2881968F93E27E924114210DEDD 400 --sha-r- C:\Documents and Settings\All Users\ntuser.pol ====== C: exe-files == 2013-04-03 18:06:43 0966BAC73C96B7B055A9685FCF7EEE1E 11304288 ----a-w- C:\Program Files\Google\Update\Install\{ED162CFC-BA62-4CAF-9DFE-13B25583AD6C}\26.0.1410.43_25.0.1364.172_chrome_updater.exe 2013-04-03 18:06:43 0966BAC73C96B7B055A9685FCF7EEE1E 11304288 ----a-w- C:\Program Files\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\26.0.1410.43\26.0.1410.43_25.0.1364.172_chrome_updater.exe 2013-04-03 13:08:02 57E626878D667E65127D1725279B0965 12384 ----atw- C:\Documents and Settings\Administrator\Local Settings\Temp\{71215225-6B6A-48B8-AA53-2348AAC270D3}\x86\regsvr32.exe 2013-04-03 13:08:02 157FE300857E06020BCB38A04D5B3B75 12896 ----atw- C:\Documents and Settings\Administrator\Local Settings\Temp\{71215225-6B6A-48B8-AA53-2348AAC270D3}\x64\regsvr32.exe 2013-04-03 13:07:51 38F61D046E575971ED83C4F71ACCD132 1531108 ----a-w- C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\KNQ8HMLI\search_defender_166[1].exe 2013-04-03 13:07:41 588E930DF8F2514A018480CCCDDEF96A 261580 ----a-w- C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\JFX3FPC0\515c31caeb0ac[1].exe 2013-04-03 12:58:44 1C9B83F6A2D1F414F0ACD28D75605607 115608 ----a-w- C:\Program Files\Mozilla Maintenance Service\maintenanceservice_tmp.exe 2013-04-01 18:29:19 23B8215A26CE95DC1E3AF7A4A4B7313D 15859416 ----a-w- C:\Documents and Settings\Administrator\My Documents\Downloads\fl32.exe === C: other files == 2013-04-03 18:08:02 FF4DD97091B6AB5BE8E341F99BC93EAA 73170 ----a-w- C:\Program Files\RelevantKnowledge\rlcm.crx 2013-04-03 12:17:43 7786FC97A89C1DBEB678798C6E2497C1 42680 ----a-w- C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\JFX3FPC0\tvl-skin[1].zip 2013-03-31 08:20:37 51555013F2F820E6A20E991E754752D8 123385 ----a-w- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\l42nb0k5.default\extensions\elemhidehelper@adblockplus.org.xpi 2013-03-29 16:02:01 C4CC3A6EEE403DCBA7EA2DEE48D8418C 58155 ----a-w- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\l42nb0k5.default\extensions\clearConsole@penzil.com.xpi ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-21-73586283-2077806209-725345543-500\Software\Microsoft\Windows\CurrentVersion\Run] "PC Suite Tray"="C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe -onlytray" "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" "DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\DTLite.exe -autorun" "Akamai NetSession Interface"="C:\Documents and Settings\Administrator\Local Settings\Application Data\Akamai\netsession_win.exe" "Skype"="C:\Program Files\Skype\Phone\Skype.exe /minimized /regrun" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "avast"="C:\Program Files\AVAST Software\Avast\avastUI.exe /nogui" "IgfxTray"="C:\WINDOWS\system32\igfxtray.exe" "HotKeysCmds"="C:\WINDOWS\system32\hkcmd.exe" "Persistence"="C:\WINDOWS\system32\igfxpers.exe" "Apoint"="C:\Program Files\DellTPad\Apoint.exe" "Broadcom Wireless Manager UI"="C:\WINDOWS\system32\WLTRAY.exe" "ITSecMng"="%ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START" "SigmatelSysTrayApp"="%ProgramFiles%\SigmaTel\C-Major Audio\WDM\stsystra.exe" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "PC Suite Tray"="C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe -onlytray" "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" "DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\DTLite.exe -autorun" "Akamai NetSession Interface"="C:\Documents and Settings\Administrator\Local Settings\Application Data\Akamai\netsession_win.exe" "Skype"="C:\Program Files\Skype\Phone\Skype.exe /minimized /regrun" ==== Startup Registry Disabled ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\DAEMON Tools Lite] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="DTLite" "hkey"="HKCU" "command"="\"C:\\Program Files\\DAEMON Tools Lite\\DTLite.exe\" -autorun" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\GrooveMonitor] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="GrooveMonitor" "hkey"="HKLM" "command"="\"C:\\Program Files\\Microsoft Office\\Office12\\GrooveMonitor.exe\"" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Documents and Settings^Administrator^Start Menu^Programs^Startup^OneNote 2007 Screen Clipper and Launcher.lnk] "path"="C:\\Documents and Settings\\Administrator\\Start Menu\\Programs\\Startup\\OneNote 2007 Screen Clipper and Launcher.lnk" "backup"="C:\\WINDOWS\\pss\\OneNote 2007 Screen Clipper and Launcher.lnkStartup" "command"="C:\\PROGRA~1\\MICROS~2\\Office12\\ONENOTEM.EXE /tsr" "item"="OneNote 2007 Screen Clipper and Launcher" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Documents and Settings^Administrator^Start Menu^Programs^Startup^OpenOffice.org 3.4.1.lnk] "path"="C:\\Documents and Settings\\Administrator\\Start Menu\\Programs\\Startup\\OpenOffice.org 3.4.1.lnk" "backup"="C:\\WINDOWS\\pss\\OpenOffice.org 3.4.1.lnkStartup" "command"="C:\\PROGRA~1\\OPENOF~1.ORG\\program\\QUICKS~1.EXE " "item"="OpenOffice.org 3.4.1" ==== Startup Folders ====================== 2013-02-01 16:03:12 1341 ----a-w- C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\Seagate NA410LWP Product Registration.lnk 2012-12-17 10:52:56 1918 ----a-w- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk 2012-12-17 11:13:00 715 ----a-w- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Bluetooth Manager.lnk ==== Task Scheduler Jobs ====================== C:\WINDOWS\tasks\Adobe Flash Player Updater.job --a------ C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [01/04/2013 23:12] C:\WINDOWS\tasks\avast\Undertermined Task.exe [] C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [22/01/2013 09:56] C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [22/01/2013 09:56] ==== Firefox Extensions ====================== ProfilePath: C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\l42nb0k5.default - avast WebRep - C:\Program Files\AVAST Software\Avast\WebRep\FF - Visualisateur 3D de 20-20 - %ProfilePath%\extensions\2020Player_IKEA@2020Technologies.com - Clear Console - %ProfilePath%\extensions\clearConsole@penzil.com.xpi - Element Hiding Helper for Adblock Plus - %ProfilePath%\extensions\elemhidehelper@adblockplus.org.xpi - Gmail Notifier restartless - %ProfilePath%\extensions\jid0-GjwrPchS3Ugt7xydvqVK4DQk8Ls@jetpack.xpi - Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi - QuickJava - %ProfilePath%\extensions\{E6C1199F-E687-42da-8C24-E7770CC3AE66}.xpi - JavaScript Debugger - %ProfilePath%\extensions\{f13b157f-b174-47e7-a34d-4815ddfdfeb8}.xpi AppDir: C:\Program Files\Mozilla Firefox - Default - %AppDir%\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ==== Firefox Plugins ====================== Profilepath: C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\l42nb0k5.default 47299371607DC2FB234444EEACB1639E - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll - Shockwave Flash E64819B6014A93E2503BB52419A0F6F3 - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_171.dll - Shockwave Flash E971E06DDE68684CB3957C5D0E133CB0 - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll - Google Earth Plugin E0FF893763BA82BAABB869A351F0C455 - C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll - Google Update A843FC35574ECFD9E7A41C5505A9921B - C:\Program Files\VideoLAN\VLC\npvlc.dll - VLC Web Plugin E42BD47C42B9A23B11F6B34A694D59D3 - C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll - Foxit Reader Plugin for Mozilla AB87EEFFD18F2BAAFC274E7075EA6C67 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll - Windows Presentation Foundation / Windows Presentation Foundation 28000D7EEB2FD95A36E1A7539F599C3B - C:\Program Files\Windows Media Player\npdrmv2.dll - Microsoft® DRM 5D41BCD19A3D90E4EBB58A6BFB79E4F7 - C:\Program Files\Windows Media Player\npdsplay.dll - Windows Media Player Plug-in Dynamic Link Library 8B6884E3E1E5F8ABA5FA0C6A2B13181D - C:\Program Files\Windows Media Player\npwmsdrm.dll - Microsoft® DRM ==== Chrome Look ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions icmlaeflemplmjndnaapfdbbnpncnbda - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[31/10/2012 00:48] mkndcbhcgphcfkkddanakjiepeknbgle - C:\Program Files\RelevantKnowledge\rlcm.crx[20/12/2012 23:38] Docs - Administrator - Default\Extensions\aohghmighlieiainnegkcijnfilokake Google Drive - Administrator - Default\Extensions\apdfllckaahabafndbhieahigkjlhalf YouTube - Administrator - Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo Google Search - Administrator - Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf BBroowseu2save - Administrator - Default\Extensions\gblkehimjjmfaallbllggcdaepmfmnph BBrowosE22ssAve - Administrator - Default\Extensions\icddiapnjhbiamncmhddieaocogibmjg 20-20 3D Viewer for IKEA - Administrator - Default\Extensions\pfhldcakmgpmglboaclpfdedehjblalp Gmail - Administrator - Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia ==== Chrome Fix ====================== C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\gblkehimjjmfaallbllggcdaepmfmnph deleted successfully C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icddiapnjhbiamncmhddieaocogibmjg deleted successfully ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.be/" "Search Page"="http://www.google.com" "Search Bar"="http://www.google.com/ie" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\AV] @="http://www.altavista.com/sites/search/web?q=%s" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\FM] @="http://www.filemirrors.com/search.src?file=%s" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\GGL] @="http://www.google.com/search?q=%s" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\MSKB] [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\MSN] @="http://search.msn.com/results.asp?q=%s" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search] "SearchAssistant"="http://www.google.com/ie" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] No DefaultScope Set For HKCU New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896" "Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896" "Start Page"="http://www.google.be/" [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl] "(Default)"="http://search.msn.com/results.asp?q=%s" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search] "SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}" ==== Reset Google Chrome ====================== C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences was reset successfully C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Web Data was reset successfully ==== Deleting CLSID Registry Keys ====================== HKEY_CLASSES_ROOT\CLSID\{74998212-4978-399C-382B-E2097DD82A64} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{74998212-4978-399C-382B-E2097DD82A64} deleted successfully ==== Deleting CLSID Registry Values ====================== ==== shortcuts on All Users Desktop ====================== C:\Documents and Settings\All Users\Desktop\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe C:\Documents and Settings\All Users\Desktop\Skype.lnk - C:\WINDOWS\Installer\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}\SkypeIcon.exe ==== shortcuts in All Users Start Menu ====================== C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Calculator.lnk - C:\WINDOWS\system32\calc.exe C:\Documents and Settings\All Users\Start Menu\Programs\BBroowseu2save\BBroowseu2save.lnk - C:\Documents and Settings\All Users\Start Menu\Programs\BBroowseu2save\Uninstall.lnk - C:\Documents and Settings\All Users\Application Data\BBroowseu2save\uninstall.exe /path=C:\Documents and Settings\All Users\Application Data\BBroowseu2save C:\Documents and Settings\All Users\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe C:\Documents and Settings\All Users\Start Menu\Programs\RelevantKnowledge\About RelevantKnowledge.lnk - C:\Documents and Settings\All Users\Start Menu\Programs\RelevantKnowledge\Member of GRID - Goodware Repository Information Database.lnk - C:\Documents and Settings\All Users\Start Menu\Programs\RelevantKnowledge\Privacy Policy and User License Agreement.lnk - C:\Documents and Settings\All Users\Start Menu\Programs\RelevantKnowledge\Support.lnk - C:\Documents and Settings\All Users\Start Menu\Programs\RelevantKnowledge\Uninstall Instructions.lnk - C:\Program Files\RelevantKnowledge\rlvknlg.exe -prompt:"To uninstall RelevantKnowledge, go to Control Panel, and then to %22Add or Remove Programs%22,%0Aor %22Uninstall programs%22 if you are using Windows Vista. You can uninstall through the%0A%22RelevantKnowledge%22 item in the program list." C:\Documents and Settings\All Users\Start Menu\Programs\SmartGraph\SmartGraph.lnk - C:\SmartGraph\SmartGraph.exe ==== Empty IE Cache ====================== C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\GDQNKLYF will be deleted at reboot C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\O56VGLQN will be deleted at reboot C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\QT3O14RM will be deleted at reboot C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot ==== Empty FireFox Cache ====================== C:\Documents and Settings\Administrator\Local Settings\Application Data\Mozilla\Firefox\Profiles\l42nb0k5.default\Cache emptied successfully ==== Empty Chrome Cache ====================== C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== No Java Cache Found After Reboot ==== Empty Temp Folders ====================== C:\WINDOWS\Temp successfully emptied C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\RECYCLER successfully emptied ==== Deleting Files / Folders ====================== "C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not found "C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not deleted "C:\Program Files\RelevantKnowledge" not found "C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\GDQNKLYF" not found "C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\O56VGLQN" not found "C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\QT3O14RM" not found

Nochtans staat er Avast as antivirus op, die tot nu toe altijd goed heeft gewerkt Midden en een tekst staat er soms een woordje dat ondelijnd is. Komt men met de muis in de buurt heb je een vervelend pop up venstertje. Kan iemand me op een idee brengen? Hier is het logje Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 17:45:59, on 3/04/2013 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\WLTRYSVC.EXE C:\WINDOWS\System32\bcmwltry.exe C:\Program Files\AVAST Software\Avast\AvastSvc.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe C:\Program Files\SigmaTel\C-Major Audio\DellXPM_5515v131\WDM\StacSV.exe C:\Program Files\AVAST Software\Avast\avastUI.exe C:\WINDOWS\system32\hkcmd.exe C:\WINDOWS\system32\igfxpers.exe C:\Program Files\DellTPad\Apoint.exe C:\WINDOWS\system32\igfxsrvc.exe C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe C:\WINDOWS\system32\WLTRAY.exe C:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\DellTPad\ApMsgFwd.exe C:\Documents and Settings\Administrator\Local Settings\Application Data\Akamai\netsession_win.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\DellTPad\HidFind.exe C:\Program Files\DellTPad\Apntex.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe C:\Program Files\Canon\CAL\CALMAIN.exe C:\Documents and Settings\Administrator\Local Settings\Application Data\Akamai\netsession_win.exe C:\Program Files\PC Connectivity Solution\ServiceLayer.exe C:\WINDOWS\system32\wbem\unsecapp.exe C:\Program Files\Brownie\brstswnd.exe C:\Program Files\OpenOffice.org 3\program\swriter.exe C:\Program Files\OpenOffice.org 3\program\soffice.exe C:\Program Files\OpenOffice.org 3\program\soffice.bin C:\Program Files\PC Connectivity Solution\Transports\NclToBTSrv.exe C:\Program Files\RelevantKnowledge\rlvknlg.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\Documents and Settings\Administrator\My Documents\Downloads\HijackThis.exe C:\WINDOWS\system32\NOTEPAD.EXE R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL O2 - BHO: BBroowseu2save - {74998212-4978-399C-382B-E2097DD82A64} - C:\Documents and Settings\All Users\Application Data\BBroowseu2save\515c31cad2aae.dll O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe O4 - HKLM\..\Run: [iTSecMng] %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START O4 - HKLM\..\Run: [broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe O4 - HKLM\..\Run: [sigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\stsystra.exe O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Documents and Settings\Administrator\Local Settings\Application Data\Akamai\netsession_win.exe" O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun O4 - Startup: Seagate NA410LWP Product Registration.lnk = C:\Documents and Settings\Administrator\Application Data\Leadertech\PowerRegister\Seagate NA410LWP Product Registration.exe O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Bluetooth Manager.lnk = ? O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105 O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000 O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL O20 - AppInit_DLLs: c:\progra~1\browse~1\sprote~1.dll O20 - Winlogon Notify: RelevantKnowledge - C:\program files\relevantknowledge\rlls.dll O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: Broadcom ASF IP and SMBIOS Mailbox Monitor (ASFIPmon) - Broadcom Corporation - C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\Program Files\SigmaTel\C-Major Audio\DellXPM_5515v131\WDM\StacSV.exe O23 - Service: DW WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE -- End of file - 8113 bytes

Het is gelukt. Bedankt! Audacity is inderdaad vrij gebruiksvriendelijk en als je de instructies goed op volgt voor het downloaden van "lame" dan werkt alles zoals het hoort. Nogmaals dank.

De Audacity ziet er wel OK uit - Bedankt! - maar dat exporteren naar een Mp3 lukt niet: "kan de MP3-coderingscode niet vinden"... krijg ik steeds in een venstertje...wat dat ook moge zijn? Ik heb geprobeerd met WAV-files te werken maar ook met MP3 meer geen van beide lukt...

Roxio

Wel dat is het nu juist; dat is dan één lange Mp3, liedjes aan elkaar zonder tussenpauze. Alleen zou ik graag weten met welke software dit het eenvoudigst gaat én hoe?

Wel dit is één file waar je bv 50 jpg foto's in zet met één mp3; dit zet je op een usb stick en de tv doet de rest: Daar kies je met de afstandsbediening - dia show met muziek en alles start. Er zijn nog wel instelmogelijkheden zoals de tijd per foto, of soort van overvloeing naar de volgende foto. Over de muziek staat er maar één keuze: met of zonder muziek. Maar meerdere Mp3's lukt het niet. Dus hoe langer de mp3, hoe meer foto's.