bart0

10 juli 2016

Ik heb nog niet geüpdate omdat daar nog iets meer geheugen voor nodig is om de download überhaupt te kunnen uitvoeren. Daarnaast heb ik met Etrecheck het volgende report gekregen:

EtreCheck version: 2.9.13 (267)

Report generated 2016-07-11 01:01:57

Download EtreCheck from https://etrecheck.com

Runtime 1:34

Performance: Excellent

Click the [Support] links for help with non-Apple products.

Click the [Details] links for more information about that line.

Problem: Other problem

Hardware Information: ⓘ

MacBook Pro (Retina, 15-inch, Late 2013)

[Technical Specifications] - [User Guide] - [Warranty & Service]

MacBook Pro - model: MacBookPro11,2

1 2 GHz Intel Core i7 CPU: 4-core

16 GB RAM Not upgradeable

BANK 0/DIMM0

8 GB DDR3 1600 MHz ok

BANK 1/DIMM0

8 GB DDR3 1600 MHz ok

Bluetooth: Good - Handoff/Airdrop2 supported

Wireless: en0: 802.11 a/b/g/n/ac

Battery: Health = Normal - Cycle count = 295

Video Information: ⓘ

Intel Iris Pro

Color LCD 2880 x 1800

System Software: ⓘ

OS X El Capitan 10.11.1 (15B42) - Time since boot: less than an hour

Disk Information: ⓘ

APPLE SSD SM0256F disk0 : (251 GB) (Solid State - TRIM: Yes)

EFI (disk0s1) <not mounted> : 210 MB

Recovery HD (disk0s3) <not mounted> [Recovery]: 650 MB

Macintosh HD (disk1) / [Startup]: 249.78 GB (4.96 GB free) (Low!)

Encrypted AES-XTS Unlocked

Core Storage: disk0s2 250.14 GB Online

USB Information: ⓘ

Apple Inc. Apple Internal Keyboard / Trackpad

Apple Inc. BRCM20702 Hub

Apple Inc. Bluetooth USB Host Controller

Thunderbolt Information: ⓘ

Apple Inc. thunderbolt_bus

Gatekeeper: ⓘ

Mac App Store and identified developers

System Launch Agents: ⓘ

[not loaded] 6 Apple tasks

[loaded] 144 Apple tasks

[running] 86 Apple tasks

System Launch Daemons: ⓘ

[not loaded] 43 Apple tasks

[loaded] 141 Apple tasks

[running] 102 Apple tasks

Launch Agents: ⓘ

[not loaded] com.adobe.AAM.Updater-1.0.plist (2015-05-31) [Support]

[running] com.brother.LOGINserver.plist (2014-05-08) [Support]

[loaded] com.google.keystone.agent.plist (2016-03-02) [Support]

[loaded] com.oracle.java.Java-Updater.plist (2014-11-25) [Support]

Launch Daemons: ⓘ

[loaded] com.adobe.SwitchBoard.plist (2015-05-31) [Support]

[loaded] com.adobe.fpsaud.plist (2016-06-13) [Support]

[loaded] com.google.keystone.daemon.plist (2016-03-02) [Support]

[loaded] com.microsoft.autoupdate.helpertool.plist (2016-04-15) [Support]

[loaded] com.microsoft.office.licensing.helper.plist (2010-08-25) [Support]

[loaded] com.microsoft.office.licensingV2.helper.plist (2016-02-12) [Support]

[loaded] com.oracle.java.Helper-Tool.plist (2014-11-25) [Support]

User Launch Agents: ⓘ

[loaded] com.adobe.AAM.Updater-1.0.plist (2015-04-20) [Support]

[loaded] uk.co.markallan.clamxav.clamscan.plist (2016-04-02) [Support]

User Login Items: ⓘ

iTunesHelper Programma (/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

ClamXav Programma Hidden (/Applications/ClamXav.app)

Livedrive Programma (/Applications/Livedrive.app/Contents/Resources/Livedrive.app)

Other Apps: ⓘ

[running] com.brother.utility.NETserver.96352

[running] com.brother.utility.USBserver.95712

[loaded] com.fiplab.MenuTabHelper

[running] com.fiplab.facetab.61152

[running] com.livedrive.Livedriveapp.113632

[loaded] uk.co.markallan.clamxav.54432

[loaded] 376 Apple tasks

[running] 221 Apple tasks

Internet Plug-ins: ⓘ

FlashPlayer-10.6: 22.0.0.192 - SDK 10.9 (2016-07-02) [Support]

QuickTime Plugin: 7.7.3 (2015-11-10)

Flash Player: 22.0.0.192 - SDK 10.9 (2016-07-02) [Support]

AdobePDFViewer: 10.1.1 (2015-05-31) [Support]

EPPEX Plugin: 10.0 (2014-07-06) [Support]

Default Browser: 601 - SDK 10.11 (2015-11-10)

o1dbrowserplugin: 5.41.3.0 - SDK 10.8 (2016-02-22) [Support]

SharePointBrowserPlugin: 14.6.1 - SDK 10.6 (2016-03-05) [Support]

googletalkbrowserplugin: 5.41.3.0 - SDK 10.8 (2015-12-11) [Support]

Silverlight: 5.1.30514.0 - SDK 10.6 (2014-07-25) [Support]

JavaAppletPlugin: Java 8 Update 91 build 14 (2016-04-25) Check version

3rd Party Preference Panes: ⓘ

Flash Player (2016-06-13) [Support]

Java (2016-04-25) [Support]

Time Machine: ⓘ

Skip System Files: NO

Mobile backups: ON

Auto backup: YES

Volumes being backed up:

Macintosh HD: Disk size: 249.78 GB Disk used: 244.81 GB

Destinations:

TimeMachineBackup [Network]

Total size: 726.66 GB

Total number of backups: 24

Oldest backup: 05-03-16 17:46

Last backup: 01-06-16 09:53

Size of backup disk: Too small

Backup size 726.66 GB < (Disk used 244.81 GB X 3)

Top Processes by CPU: ⓘ

49% Livedrive

5% kernel_task

5% WindowServer

2% Mail

1% fontd

Top Processes by Memory: ⓘ

1.07 GB kernel_task

573 MB Livedrive

475 MB softwareupdated

393 MB com.apple.WebKit.WebContent(3)

279 MB mdworker(14)

Virtual Memory Information: ⓘ

7.09 GB Free RAM

8.90 GB Used RAM (3.31 GB Cached)

0 B Swap Used

Diagnostics Information: ⓘ

Jul 11, 2016, 01:00:13 AM /Library/Logs/DiagnosticReports/Livedrive_2016-07-11-010013_[redacted].cpu_resource.diag [Details]

/Applications/Livedrive.app/Contents/Resources/Livedrive.app/Contents/MacOS/Livedrive

Jul 11, 2016, 12:54:45 AM ~/Library/Logs/DiagnosticReports/com.apple.sbd_2016-07-11-005445_[redacted].crash

/System/Library/PrivateFrameworks/CloudServices.framework/Versions/A/XPCServices/com.apple.sbd.xpc/Contents/MacOS/com.apple.sbd

Jul 11, 2016, 12:54:34 AM ~/Library/Logs/DiagnosticReports/com.apple.sbd_2016-07-11-005434_[redacted].crash

Jul 11, 2016, 12:52:57 AM Self test - passed

6 juli 2016

Eigenschappen Mac:

OS X El Capitan (versie 10.11.1)
MacBook Pro (Retina, 15-inch, eind 2013)
Processor 2 GHz Intel Core i7
Geheugen 16 GB 1600 MHz DDR3
Opstartschijf Macintosh HD
Videokaart Intel Iris Pro 1536 MB

Geheugen:

MacinTosh 249,78 GB

Programma's: 21,08 GB
Foto's 102,41 GB
Audio 2,96 GB
Films 40,73 GB
Overig 82,6 GB
Nog beschikbaar 0 GB

Iedere keer als ik de computer opruim is hij nog geen week later weer vol, terwijl er helemaal niet veel of niks aan bestanden bijgekomen is. Ook wanneer ik het geheugen 'schoonmaak' met het programma 'Onyx', is er zo weer 2 GB vrij, maar dat is twee dagen later ook weer helemaal vol. Hoe kan dit; en belangrijker nog; hoe kan ik het voorkomen?

12 juni 2013

Hij gedraagt zich goed

Bedankt!

12 juni 2013

Hee,

Hieronder staan de 2 logbestanden.

De bestanden van hijackthis die ik moest verwijderen heb ik verwijderd, maar de laatste die je me had gegeven werd niet meteen verwijderd. Na een paar keer was hij wel verwijderd.

Bedankt alvast

Groetjes,

Bart

# AdwCleaner v2.303 - Verslag gemaakt op 12/06/2013 om 15:23:53

# Geactualiseerd op 08/06/2013 door Xplode

# Besturingssysteem : Windows 7 Ultimate Service Pack 1 (32 bits)

# Gebruiker : Bart - BART-LAPTOP-3

# Opstarten Modus : Normale modus

# Gelanceerd vanaf : C:\Users\Bart\Desktop\adwcleaner.exe

# Optie [Verwijderen]

***** [Diensten] *****

Gestopt & Verwijdert : BrowserDefendert

Gestopt & Verwijdert : eSafeSvc

Gestopt & Verwijdert : WebCake Desktop Updater

***** [Files / Mappen] *****

File Verwijderd : C:\Users\Bart\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data

File Verwijderd : C:\Users\Bart\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences

File Verwijderd : C:\Users\Bart\AppData\Roaming\BabMaint.exe

Map Verwijderd : C:\Program Files\Common Files\DVDVideoSoft\TB

Map Verwijderd : C:\Program Files\Conduit

Map Verwijderd : C:\Program Files\DealPly

Map Verwijderd : C:\Program Files\Delta

Map Verwijderd : C:\Program Files\Desk 365

Map Verwijderd : C:\Program Files\WebCake

Map Verwijderd : C:\ProgramData\Babylon

Map Verwijderd : C:\ProgramData\eSafe

Map Verwijderd : C:\ProgramData\Tarma Installer

Map Verwijderd : C:\Users\Bart\AppData\Local\Bundled software uninstaller

Map Verwijderd : C:\Users\Bart\AppData\Local\Conduit

Map Verwijderd : C:\Users\Bart\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjoijdanhaiflhibkljeklcghcmmfffh

Map Verwijderd : C:\Users\Bart\AppData\LocalLow\Conduit

Map Verwijderd : C:\Users\Bart\AppData\LocalLow\Delta

Map Verwijderd : C:\Users\Bart\AppData\Roaming\BabSolution

Map Verwijderd : C:\Users\Bart\AppData\Roaming\Babylon

Map Verwijderd : C:\Users\Bart\AppData\Roaming\DealPly

Map Verwijderd : C:\Users\Bart\AppData\Roaming\Delta

Map Verwijderd : C:\Users\Bart\AppData\Roaming\dvdvideosoftiehelpers

Map Verwijderd : C:\Users\Bart\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender

Map Verwijderd : C:\Users\Bart\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly

Map Verwijderd : C:\Users\Bart\AppData\Roaming\WebCake

Verwijderd bij het opstarten : C:\ProgramData\BrowserDefender

***** [Register] *****

Sleutel Verwijderd : HKCU\Software\AppDataLow\Software\SmartBar

Sleutel Verwijderd : HKCU\Software\AppDataLow\SProtector

Sleutel Verwijderd : HKCU\Software\BabSolution

Sleutel Verwijderd : HKCU\Software\BI

Sleutel Verwijderd : HKCU\Software\Conduit

Sleutel Verwijderd : HKCU\Software\DataMngr

Sleutel Verwijderd : HKCU\Software\DataMngr_Toolbar

Sleutel Verwijderd : HKCU\Software\DealPly

Sleutel Verwijderd : HKCU\Software\Delta

Sleutel Verwijderd : HKCU\Software\e2dbddb369eb47

Sleutel Verwijderd : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings

Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}

Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}

Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2A5A2A90-3B30-4E6E-A955-2F232C6EF517}

Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4B6ACEA2-308A-4876-AD36-57CEC5B4FCC7}

Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}

Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}

Sleutel Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\DealPly

Sleutel Verwijderd : HKCU\Software\PrivitizeVPNInstallDates

Sleutel Verwijderd : HKCU\Software\StartSearch

Sleutel Verwijderd : HKLM\Software\Babylon

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\{7169BBB3-3289-4696-B35D-4A88BCF6FB12}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\escort.DLL

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\esrv.EXE

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\AppID\WebCakeIEClient.DLL

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{2A5A2A90-3B30-4E6E-A955-2F232C6EF517}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{4B6ACEA2-308A-4876-AD36-57CEC5B4FCC7}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{AF6B0594-6008-4327-93E5-608AD710A6FA}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{DF84E609-C3A4-49CB-A160-61767DAF8899}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\delta.deltaappCore

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\delta.deltaappCore.1

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\delta.deltadskBnd

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\delta.deltadskBnd.1

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\delta.deltaHlpr

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\delta.deltaHlpr.1

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\escort.escortIEPane

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\escort.escortIEPane.1

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\esrv.deltaESrvc

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\esrv.deltaESrvc.1

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{DF84E609-C3A4-49CB-A160-61767DAF8899}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Prod.cap

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\Toolbar.CT2865317

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\TypeLib\{EFDF368C-8DD9-4E05-87CD-16AA5CB03CB8}

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\WebCakeIEClient.Api

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\WebCakeIEClient.Api.1

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\WebCakeIEClient.Layers

Sleutel Verwijderd : HKLM\SOFTWARE\Classes\WebCakeIEClient.Layers.1

Sleutel Verwijderd : HKLM\Software\Conduit

Sleutel Verwijderd : HKLM\Software\DataMngr

Sleutel Verwijderd : HKLM\Software\DealPly

Sleutel Verwijderd : HKLM\Software\Delta

Sleutel Verwijderd : HKLM\Software\Desksvc

Sleutel Verwijderd : HKLM\SOFTWARE\e2dbddb369eb47

Sleutel Verwijderd : HKLM\Software\eSafeSecControl

Sleutel Verwijderd : HKLM\SOFTWARE\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde

Sleutel Verwijderd : HKLM\SOFTWARE\Google\Chrome\Extensions\fjoijdanhaiflhibkljeklcghcmmfffh

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2A5A2A90-3B30-4E6E-A955-2F232C6EF517}

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4B6ACEA2-308A-4876-AD36-57CEC5B4FCC7}

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{AF6B0594-6008-4327-93E5-608AD710A6FA}

Sleutel Verwijderd : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\063A857434EDED11A893800002C0A966

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C4ED781C-7394-4906-AAFF-D6AB64FF7C38}

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DealPly

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta Chrome Toolbar

Sleutel Verwijderd : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eSafeSecControl

Sleutel Verwijderd : HKLM\Software\SP Global

Sleutel Verwijderd : HKLM\Software\SProtector

Sleutel Verwijderd : HKLM\Software\Tarma Installer

Sleutel Verwijderd : HKLM\Software\V9

Sleutel Verwijderd : HKU\S-1-5-21-3091460872-3751063814-4196830348-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

Waarde Verwijderd : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]

Waarde Verwijderd : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]

Waarde Verwijderd : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [WebCake Desktop]

Waarde Verwijderd : HKCU\Software\Mozilla\Firefox\Extensions [{0F827075-B026-42F3-885D-98981EE7B1AE}]

***** [browsers] *****

-\\ Internet Explorer v10.0.9200.16576

Vervangen : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www.delta-search.com/?affID=122254&tt=120613_ctrl&babsrc=HP_ss&mntrId=E4540017C458CE10 --> hxxp://www.google.com

-\\ Google Chrome v27.0.1453.110

File : C:\Users\Bart\AppData\Local\Google\Chrome\User Data\Default\Preferences

[OK] De file bevat geen enkele ongeoorloofde invoer.

*************************

AdwCleaner[s1].txt - [12072 octets] - [12/06/2013 15:23:53]

########## EOF - C:\AdwCleaner[s1].txt - [12133 octets] ##########

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 15:33:15, on 12-6-2013

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v10.0 (10.00.9200.16576)

Boot mode: Normal

Running processes:

C:\Windows\system32\taskhost.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Program Files\Canon\Canon IJ Network Scan Utility\CNMNSUT.EXE

C:\Windows\System32\igfxtray.exe

C:\Windows\System32\hkcmd.exe

C:\Windows\System32\igfxpers.exe

C:\Program Files\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\Program Files\Microsoft Security Client\msseces.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe

C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe

C:\Users\Bart\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Program Files\Common Files\Apple\Internet Services\BookmarkDAV_client.exe

C:\Program Files\Livedrive\Livedrive.exe

C:\Program Files\Air Mouse\Air Mouse\Air Mouse.exe

C:\Program Files\Microsoft Office\Office15\ONENOTEM.EXE

C:\Windows\system32\NOTEPAD.EXE

C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe

C:\program files\stardock\fences\Fences.exe

C:\Program Files\Air Mouse\Air Mouse\Mobile Mouse Service.exe

C:\Program Files\Microsoft Office\Office15\MsoSync.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

C:\Windows\system32\wuauclt.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

O1 - Hosts: ::1 localhost

O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll

O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~3\Office15\URLREDIR.DLL

O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~1\MICROS~3\Office15\GROOVEEX.DLL

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll

O2 - BHO: BrowserHelper Class - {EDF48A39-1442-463F-9F4E-F376A78D034A} - C:\Program Files\Livedrive\ExplorerExtensions.dll

O4 - HKLM\..\Run: [iJNetworkScanUtility] C:\Program Files\Canon\Canon IJ Network Scan Utility\CNMNSUT.EXE

O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

O4 - HKLM\..\Run: [igfxTray] C:\Windows\system32\igfxtray.exe

O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe

O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe

O4 - HKLM\..\Run: [RIMBBLaunchAgent.exe] C:\Program Files\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

O4 - HKCU\..\Run: [iCloudServices] C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe

O4 - HKCU\..\Run: [ApplePhotoStreams] C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe

O4 - HKCU\..\Run: [spotify Web Helper] "C:\Users\Bart\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"

O4 - HKCU\..\Run: [b89371320B2EE11FC054C53F0A75C821DF3B361D._service_run] "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=service

O4 - HKCU\..\Run: [com.apple.dav.bookmarks.daemon] C:\Program Files\Common Files\Apple\Internet Services\BookmarkDAV_client.exe

O4 - HKCU\..\Run: [Livedrive] "C:\Program Files\Livedrive\Livedrive.exe" /setup

O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')

O4 - Startup: Verzenden naar OneNote.lnk = C:\Program Files\Microsoft Office\Office15\ONENOTEM.EXE

O4 - Global Startup: Air Mouse.lnk = C:\Program Files\Air Mouse\Air Mouse\Air Mouse.exe

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office15\EXCEL.EXE/3000

O8 - Extra context menu item: Free YouTube Download - C:\Users\Bart\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm

O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~3\Office15\ONBttnIE.dll/105

O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office15\ONBttnIE.dll

O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office15\ONBttnIE.dll

O9 - Extra button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll

O9 - Extra 'Tools' menuitem: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll

O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office15\ONBttnIELinkedNotes.dll

O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office15\ONBttnIELinkedNotes.dll

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O16 - DPF: {6E718D87-6909-4FCE-92D4-EDCB2F725727} (Navigram Control) - http://navigram.com/engine/v1140/Navigram.cab

O16 - DPF: {82E5DF24-51E8-47CD-864A-F4BD5005AA73} (iCloud Web App Plugin) - https://www.icloud.com/system/iCloud.cab

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL

O21 - SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\system32\CbFsMntNtf3.dll

O22 - SharedTaskScheduler: Virtual Storage Mount Notification - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\Windows\system32\CbFsMntNtf3.dll

O22 - SharedTaskScheduler: FencesShellExt - {1984DD45-52CF-49cd-AB77-18F378FEA264} - C:\Program Files\Stardock\Fences\FencesMenu.dll

O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: Cron Service for Prey (CronService) - Fork Ltd. - C:\Prey\platform\windows\cronsvc.exe

O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: Livedrive VSS Service (LivedriveVSSService) - Unknown owner - C:\Program Files\Livedrive\VSSService.exe

O23 - Service: NitroPDFReaderDriverCreatorReadSpool3 (NitroReaderDriverReadSpool3) - Nitro PDF Software - C:\Program Files\Nitro\Reader 3\NitroPDFReaderDriverService3.exe

O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

--

End of file - 9274 bytes

10 juni 2013

Logfile of Trend Micro HijackThis v2.0.4

Scan saved at 21:25:14, on 10-6-2013

Platform: Windows 7 SP1 (WinNT 6.00.3505)

MSIE: Internet Explorer v10.0 (10.00.9200.16576)

Boot mode: Normal

Running processes:

C:\Windows\system32\taskhost.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Program Files\Canon\Canon IJ Network Scan Utility\CNMNSUT.EXE

C:\Windows\System32\igfxtray.exe

C:\Windows\System32\hkcmd.exe

C:\Windows\System32\igfxpers.exe

C:\Program Files\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\Program Files\Microsoft Security Client\msseces.exe

C:\Program Files\iTunes\iTunesHelper.exe

C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe

C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe

C:\Users\Bart\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Program Files\Common Files\Apple\Internet Services\BookmarkDAV_client.exe

C:\Program Files\Livedrive\Livedrive.exe

C:\Program Files\Air Mouse\Air Mouse\Air Mouse.exe

C:\Program Files\Microsoft Office\Office15\ONENOTEM.EXE

C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe

C:\Program Files\Air Mouse\Air Mouse\Mobile Mouse Service.exe

C:\Program Files\Google\Chrome\Application\chrome.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.nl/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O1 - Hosts: ::1 localhost

O2 - BHO: Lync Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll

O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll

O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~3\Office15\URLREDIR.DLL

O2 - BHO: delta Helper Object - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Program Files\Delta\delta\1.8.16.16\bh\delta.dll

O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~1\MICROS~3\Office15\GROOVEEX.DLL

O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll

O2 - BHO: BrowserHelper Class - {EDF48A39-1442-463F-9F4E-F376A78D034A} - C:\Program Files\Livedrive\ExplorerExtensions.dll

O3 - Toolbar: Delta Toolbar - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Program Files\Delta\delta\1.8.16.16\deltaTlbr.dll