Ga naar inhoud

Barcelona

Lid
 Bekijk profiel  Bekijk hun activiteit

  • Items

    12

  • Registratiedatum

  • Laatst bezocht

 Inhoudstype 

Berichten die geplaatst zijn door Barcelona

    Helaas ook MyStart probleem :(

    in Archief Bestrijding malware & virussen

    Geplaatst:

    jammer.. maar we proberen het opnieuw.. Ik heb de computer opnieuw opgestart in veilige modus met netwerkmogelijkheden, ik heb bovenstaande uitgevoerd en heb de computer niet opnieuw hoeven opstarten.. Ik krijg de volgende info:

    ComboFix 12-06-23.05 - Dennis 23-06-2012 18:13:42.3.2 - x86 NETWORK

    Microsoft Windows 7 Home Premium 6.1.7601.1.1252.31.1043.18.3199.2352 [GMT 2:00]

    Gestart vanuit: c:\users\Dennis\Desktop\ComboFix.exe

    gebruikte Opdracht switches :: c:\users\Dennis\Desktop\CFScript.txt

    AV: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}

    SP: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}

    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    * Nieuw herstelpunt werd aangemaakt

    .

    .

    (((((((((((((((((((( Bestanden Gemaakt van 2012-05-23 to 2012-06-23 ))))))))))))))))))))))))))))))

    .

    .

    2012-06-23 16:18 . 2012-06-23 16:18 -------- d-----w- c:\users\Default\AppData\Local\temp

    2012-06-23 15:10 . 2012-06-23 16:18 -------- d-----w- c:\users\Dennis\AppData\Local\temp

    2012-06-23 10:45 . 2012-06-23 10:45 -------- d-----w- c:\programdata\Tarma Installer

    2012-06-19 15:46 . 2012-06-02 22:19 53784 ----a-w- c:\windows\system32\wuauclt.exe

    2012-06-19 15:46 . 2012-06-02 22:19 45080 ----a-w- c:\windows\system32\wups2.dll

    2012-06-19 15:46 . 2012-06-02 22:19 1933848 ----a-w- c:\windows\system32\wuaueng.dll

    2012-06-19 15:46 . 2012-06-02 22:12 2422272 ----a-w- c:\windows\system32\wucltux.dll

    2012-06-19 15:45 . 2012-06-02 22:19 35864 ----a-w- c:\windows\system32\wups.dll

    2012-06-19 15:45 . 2012-06-02 22:19 577048 ----a-w- c:\windows\system32\wuapi.dll

    2012-06-19 15:45 . 2012-06-02 22:12 88576 ----a-w- c:\windows\system32\wudriver.dll

    2012-06-19 15:45 . 2012-06-02 13:19 171904 ----a-w- c:\windows\system32\wuwebv.dll

    2012-06-19 15:45 . 2012-06-02 13:12 33792 ----a-w- c:\windows\system32\wuapp.exe

    2012-06-14 06:01 . 2012-04-24 04:36 140288 ----a-w- c:\windows\system32\cryptsvc.dll

    2012-06-14 06:01 . 2012-04-24 04:36 1158656 ----a-w- c:\windows\system32\crypt32.dll

    2012-06-14 06:01 . 2012-04-24 04:36 103936 ----a-w- c:\windows\system32\cryptnet.dll

    2012-06-14 06:01 . 2012-05-15 01:05 2343936 ----a-w- c:\windows\system32\win32k.sys

    2012-06-14 06:01 . 2012-05-01 04:44 164352 ----a-w- c:\windows\system32\profsvc.dll

    2012-06-14 06:01 . 2012-04-07 11:26 2342400 ----a-w- c:\windows\system32\msi.dll

    2012-06-14 06:01 . 2012-04-26 04:45 58880 ----a-w- c:\windows\system32\rdpwsx.dll

    2012-06-14 06:01 . 2012-04-26 04:45 129536 ----a-w- c:\windows\system32\rdpcorekmts.dll

    2012-06-14 06:01 . 2012-04-26 04:41 8192 ----a-w- c:\windows\system32\rdrmemptylst.exe

    2012-06-10 15:46 . 2012-06-10 15:46 -------- d-----w- c:\users\Dennis\AppData\Local\Macromedia

    2012-06-10 12:46 . 2012-06-10 12:46 770384 ----a-w- c:\program files\Mozilla Firefox\msvcr100.dll

    2012-06-10 12:46 . 2012-06-10 12:46 421200 ----a-w- c:\program files\Mozilla Firefox\msvcp100.dll

    2012-06-02 13:37 . 2012-06-02 14:10 -------- d-----w- c:\users\Dennis\AppData\Roaming\AVG

    .

    .

    .

    ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    2012-06-10 15:44 . 2012-04-05 15:15 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe

    2012-06-10 15:44 . 2011-05-18 17:51 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

    2012-05-16 17:48 . 2012-05-16 17:48 476960 ----a-w- c:\windows\system32\npdeployJava1.dll

    2012-05-16 17:48 . 2011-05-29 16:21 472864 ----a-w- c:\windows\system32\deployJava1.dll

    2012-04-19 02:50 . 2012-04-19 02:50 24896 ----a-w- c:\windows\system32\drivers\avgidshx.sys

    2012-03-31 04:39 . 2012-05-12 07:38 3968368 ----a-w- c:\windows\system32\ntkrnlpa.exe

    2012-03-31 04:39 . 2012-05-12 07:38 3913072 ----a-w- c:\windows\system32\ntoskrnl.exe

    2012-03-30 10:23 . 2012-05-12 07:38 1291632 ----a-w- c:\windows\system32\drivers\tcpip.sys

    2012-06-16 07:57 . 2012-05-04 19:29 85472 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll

    .

    .

    ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

    REGEDIT4

    .

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]

    "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 152872]

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136]

    "GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]

    "AVG_TRAY"="c:\program files\AVG\AVG2012\avgtray.exe" [2012-04-05 2587008]

    "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-11-29 421888]

    "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-12-13 421160]

    "Start WingMan Profiler"="c:\program files\Logitech\Gaming Software\LWEMon.exe" [2010-06-14 153672]

    "DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2011-07-28 1259376]

    "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-03-27 37296]

    "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-02 843712]

    "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

    "ConsentPromptBehaviorAdmin"= 5 (0x5)

    "ConsentPromptBehaviorUser"= 3 (0x3)

    "EnableUIADesktopToggle"= 0 (0x0)

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

    "mixer2"=wdmaud.drv

    .

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]

    BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~1\AVG\AVG2012\avgrsx.exe /sync /restart

    .

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

    Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp

    .

    R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-06-08 691696]

    R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx86.sys [2012-02-22 235216]

    R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-08-18 176128]

    R2 AVGIDSAgent;AVGIDSAgent;c:\program files\AVG\AVG2012\AVGIDSAgent.exe [2012-04-30 5106744]

    R2 avgwd;AVG WatchDog;c:\program files\AVG\AVG2012\avgwdsvc.exe [2012-02-14 193288]

    R2 gupdate;Google Updateservice (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-07-12 135664]

    R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-04-03 240232]

    R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-10 257224]

    R3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdriverx.sys [2011-12-23 139856]

    R3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\avgidsfilterx.sys [2011-12-23 24144]

    R3 AVGIDSShim;AVGIDSShim;c:\windows\system32\DRIVERS\avgidsshimx.sys [2011-12-23 17232]

    R3 gupdatem;Google Update-service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2010-07-12 135664]

    R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [x]

    R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32v.sys [2010-01-28 68200]

    R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]

    R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [2010-06-22 1343400]

    S0 AVGIDSHX;AVGIDSHX;c:\windows\system32\DRIVERS\avgidshx.sys [2012-04-19 24896]

    S0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx86.sys [2012-01-31 31952]

    S1 Avgtdix;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdix.sys [2012-03-19 301248]

    S3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20);c:\windows\system32\DRIVERS\L1C62x86.sys [2009-07-13 50688]

    .

    .

    --- Andere Services/Drivers In Geheugen ---

    .

    *NewlyCreated* - WS2IFSL

    .

    Inhoud van de 'Gedeelde Taken' map

    .

    2012-06-23 c:\windows\Tasks\Adobe Flash Player Updater.job

    - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-05 15:44]

    .

    2012-06-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

    - c:\program files\Google\Update\GoogleUpdate.exe [2010-07-12 17:33]

    .

    2012-06-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

    - c:\program files\Google\Update\GoogleUpdate.exe [2010-07-12 17:33]

    .

    .

    ------- Bijkomende Scan -------

    .

    uStart Page = hxxp://www.google.nl/

    uInternet Settings,ProxyOverride = *.local

    IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000

    TCP: DhcpNameServer = 212.54.35.25 212.54.40.25

    FF - ProfilePath - c:\users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\dok6u3k6.default\

    FF - prefs.js: browser.search.selectedEngine - Google

    .

    .

    --------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

    .

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

    @Denied: (Full) (Everyone)

    .

    Voltooingstijd: 2012-06-23 18:19:44

    ComboFix-quarantined-files.txt 2012-06-23 16:19

    ComboFix2.txt 2012-06-23 15:55

    ComboFix3.txt 2012-06-23 15:11

    .

    Pre-Run: 64.025.468.928 bytes beschikbaar

    Post-Run: 63.864.901.632 bytes beschikbaar

    .

    - - End Of File - - D19CE8696F0C3B3B83D054AFD721C97B

    ---------- Post toegevoegd om 18:22 ---------- Vorige post was om 18:21 ----------

    ik zal nu de computer opnieuw opstarten zonder veilige modus.. Als ik straks opnieuw iets moet uitvoeren in veilige modus zou u dit dan wil willen aangeven a.u.b.

    ---------- Post toegevoegd om 18:26 ---------- Vorige post was om 18:22 ----------

    Ik heb de computer opnieuw opgestart zonder veilige modus... Ik heb op icoon Mozilla Firefox geklikt en heb nu al geen MyStart meer.. We zijn op de goede weg of niet?

    ---------- Post toegevoegd om 18:27 ---------- Vorige post was om 18:26 ----------

    Wanneer ik een nieuw tabblad open is het helaas nog wel MyStart..

    Helaas ook MyStart probleem :(

    in Archief Bestrijding malware & virussen

    Geplaatst:

    Hartelijk dank voor de reactie! Ik heb bovenstaande uitgevoerd, heb niet opnieuw hoeven opstarten en de volgende info mogen ontvangen:

    ComboFix 12-06-23.05 - Dennis 23-06-2012 17:49:12.2.2 - x86

    Microsoft Windows 7 Home Premium 6.1.7601.1.1252.31.1043.18.3199.2018 [GMT 2:00]

    Gestart vanuit: c:\users\Dennis\Desktop\ComboFix.exe

    gebruikte Opdracht switches :: c:\users\Dennis\Desktop\CFScript.txt

    AV: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}

    SP: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}

    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    .

    .

    (((((((((((((((((((( Bestanden Gemaakt van 2012-05-23 to 2012-06-23 ))))))))))))))))))))))))))))))

    .

    .

    2012-06-23 15:53 . 2012-06-23 15:53 -------- d-----w- c:\users\Default\AppData\Local\temp

    2012-06-23 15:10 . 2012-06-23 15:53 -------- d-----w- c:\users\Dennis\AppData\Local\temp

    2012-06-23 10:45 . 2012-06-23 10:45 -------- d-----w- c:\programdata\Tarma Installer

    2012-06-19 15:46 . 2012-06-02 22:19 53784 ----a-w- c:\windows\system32\wuauclt.exe

    2012-06-19 15:46 . 2012-06-02 22:19 45080 ----a-w- c:\windows\system32\wups2.dll

    2012-06-19 15:46 . 2012-06-02 22:19 1933848 ----a-w- c:\windows\system32\wuaueng.dll

    2012-06-19 15:46 . 2012-06-02 22:12 2422272 ----a-w- c:\windows\system32\wucltux.dll

    2012-06-19 15:45 . 2012-06-02 22:19 35864 ----a-w- c:\windows\system32\wups.dll

    2012-06-19 15:45 . 2012-06-02 22:19 577048 ----a-w- c:\windows\system32\wuapi.dll

    2012-06-19 15:45 . 2012-06-02 22:12 88576 ----a-w- c:\windows\system32\wudriver.dll

    2012-06-19 15:45 . 2012-06-02 13:19 171904 ----a-w- c:\windows\system32\wuwebv.dll

    2012-06-19 15:45 . 2012-06-02 13:12 33792 ----a-w- c:\windows\system32\wuapp.exe

    2012-06-14 06:01 . 2012-04-24 04:36 140288 ----a-w- c:\windows\system32\cryptsvc.dll

    2012-06-14 06:01 . 2012-04-24 04:36 1158656 ----a-w- c:\windows\system32\crypt32.dll

    2012-06-14 06:01 . 2012-04-24 04:36 103936 ----a-w- c:\windows\system32\cryptnet.dll

    2012-06-14 06:01 . 2012-05-15 01:05 2343936 ----a-w- c:\windows\system32\win32k.sys

    2012-06-14 06:01 . 2012-05-01 04:44 164352 ----a-w- c:\windows\system32\profsvc.dll

    2012-06-14 06:01 . 2012-04-07 11:26 2342400 ----a-w- c:\windows\system32\msi.dll

    2012-06-14 06:01 . 2012-04-26 04:45 58880 ----a-w- c:\windows\system32\rdpwsx.dll

    2012-06-14 06:01 . 2012-04-26 04:45 129536 ----a-w- c:\windows\system32\rdpcorekmts.dll

    2012-06-14 06:01 . 2012-04-26 04:41 8192 ----a-w- c:\windows\system32\rdrmemptylst.exe

    2012-06-10 15:46 . 2012-06-10 15:46 -------- d-----w- c:\users\Dennis\AppData\Local\Macromedia

    2012-06-10 12:46 . 2012-06-10 12:46 770384 ----a-w- c:\program files\Mozilla Firefox\msvcr100.dll

    2012-06-10 12:46 . 2012-06-10 12:46 421200 ----a-w- c:\program files\Mozilla Firefox\msvcp100.dll

    2012-06-02 13:37 . 2012-06-02 14:10 -------- d-----w- c:\users\Dennis\AppData\Roaming\AVG

    .

    .

    .

    ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    2012-06-10 15:44 . 2012-04-05 15:15 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe

    2012-06-10 15:44 . 2011-05-18 17:51 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

    2012-05-16 17:48 . 2012-05-16 17:48 476960 ----a-w- c:\windows\system32\npdeployJava1.dll

    2012-05-16 17:48 . 2011-05-29 16:21 472864 ----a-w- c:\windows\system32\deployJava1.dll

    2012-04-19 02:50 . 2012-04-19 02:50 24896 ----a-w- c:\windows\system32\drivers\avgidshx.sys

    2012-03-31 04:39 . 2012-05-12 07:38 3968368 ----a-w- c:\windows\system32\ntkrnlpa.exe

    2012-03-31 04:39 . 2012-05-12 07:38 3913072 ----a-w- c:\windows\system32\ntoskrnl.exe

    2012-03-30 10:23 . 2012-05-12 07:38 1291632 ----a-w- c:\windows\system32\drivers\tcpip.sys

    2012-06-16 07:57 . 2012-05-04 19:29 85472 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll

    .

    .

    ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

    REGEDIT4

    .

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]

    "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 152872]

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136]

    "GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]

    "AVG_TRAY"="c:\program files\AVG\AVG2012\avgtray.exe" [2012-04-05 2587008]

    "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-11-29 421888]

    "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-12-13 421160]

    "Start WingMan Profiler"="c:\program files\Logitech\Gaming Software\LWEMon.exe" [2010-06-14 153672]

    "DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2011-07-28 1259376]

    "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-03-27 37296]

    "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-02 843712]

    "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

    "ConsentPromptBehaviorAdmin"= 5 (0x5)

    "ConsentPromptBehaviorUser"= 3 (0x3)

    "EnableUIADesktopToggle"= 0 (0x0)

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

    "mixer2"=wdmaud.drv

    .

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]

    BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~1\AVG\AVG2012\avgrsx.exe /sync /restart

    .

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

    Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp

    .

    R2 gupdate;Google Updateservice (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-07-12 135664]

    R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-10 257224]

    R3 gupdatem;Google Update-service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2010-07-12 135664]

    R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [x]

    R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]

    R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [2010-06-22 1343400]

    S0 AVGIDSHX;AVGIDSHX;c:\windows\system32\DRIVERS\avgidshx.sys [2012-04-19 24896]

    S0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx86.sys [2012-01-31 31952]

    S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-06-08 691696]

    S1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx86.sys [2012-02-22 235216]

    S1 Avgtdix;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdix.sys [2012-03-19 301248]

    S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-08-18 176128]

    S2 AVGIDSAgent;AVGIDSAgent;c:\program files\AVG\AVG2012\AVGIDSAgent.exe [2012-04-30 5106744]

    S2 avgwd;AVG WatchDog;c:\program files\AVG\AVG2012\avgwdsvc.exe [2012-02-14 193288]

    S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-04-03 240232]

    S3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdriverx.sys [2011-12-23 139856]

    S3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\avgidsfilterx.sys [2011-12-23 24144]

    S3 AVGIDSShim;AVGIDSShim;c:\windows\system32\DRIVERS\avgidsshimx.sys [2011-12-23 17232]

    S3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20);c:\windows\system32\DRIVERS\L1C62x86.sys [2009-07-13 50688]

    S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32v.sys [2010-01-28 68200]

    .

    .

    Inhoud van de 'Gedeelde Taken' map

    .

    2012-06-23 c:\windows\Tasks\Adobe Flash Player Updater.job

    - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-05 15:44]

    .

    2012-06-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

    - c:\program files\Google\Update\GoogleUpdate.exe [2010-07-12 17:33]

    .

    2012-06-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

    - c:\program files\Google\Update\GoogleUpdate.exe [2010-07-12 17:33]

    .

    .

    ------- Bijkomende Scan -------

    .

    uStart Page = hxxp://www.google.nl/

    uInternet Settings,ProxyOverride = *.local

    IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000

    TCP: DhcpNameServer = 212.54.35.25 212.54.40.25

    FF - ProfilePath - c:\users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\dok6u3k6.default\

    FF - prefs.js: browser.search.selectedEngine - Google

    FF - prefs.js: browser.startup.homepage - hxxp://Mystart.incredibar.com/mb124

    FF - user.js: extensions.incredibar_i.newTab - false

    FF - user.js: extensions.incredibar_i.tlbrSrchUrl - hxxp://mystart.Incredibar.com/?a=6R8wRyFgjO&loc=IB_TB&i=26&search=

    FF - user.js: extensions.incredibar_i.id - c483d31800000000000090e6ba9ddc14

    FF - user.js: extensions.incredibar_i.instlDay - 15514

    FF - user.js: extensions.incredibar_i.vrsn - 1.5.11.14

    FF - user.js: extensions.incredibar_i.vrsni - 1.5.11.14

    FF - user.js: extensions.incredibar_i.vrsnTs - 1.5.11.1412:46

    FF - user.js: extensions.incredibar_i.prtnrId - Incredibar

    FF - user.js: extensions.incredibar_i.prdct - incredibar

    FF - user.js: extensions.incredibar_i.aflt - orgnl

    FF - user.js: extensions.incredibar_i.smplGrp - none

    FF - user.js: extensions.incredibar_i.tlbrId - base

    FF - user.js: extensions.incredibar_i.instlRef -

    FF - user.js: extensions.incredibar_i.dfltLng -

    FF - user.js: extensions.incredibar_i.excTlbr - false

    FF - user.js: extensions.incredibar_i.ms_url_id -

    FF - user.js: extensions.incredibar_i.upn2 - 6R8wRyFgjO

    FF - user.js: extensions.incredibar_i.upn2n - 92824584465238852

    FF - user.js: extensions.incredibar_i.productid - 26

    FF - user.js: extensions.incredibar_i.installerproductid - 26

    FF - user.js: extensions.incredibar_i.did - 10658

    FF - user.js: extensions.incredibar_i.ppd -

    .

    .

    --------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

    .

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

    @Denied: (Full) (Everyone)

    .

    Voltooingstijd: 2012-06-23 17:55:02

    ComboFix-quarantined-files.txt 2012-06-23 15:55

    ComboFix2.txt 2012-06-23 15:11

    .

    Pre-Run: 64.118.149.120 bytes beschikbaar

    Post-Run: 63.931.428.864 bytes beschikbaar

    .

    - - End Of File - - 048D236EAB95B264B1B25F4BE780E121

    Helaas ook MyStart probleem :(

    in Archief Bestrijding malware & virussen

    Geplaatst:

    Al heel erg bedankt voor de snelle reactie..!! ik heb de instructies uitgevoerd en krijg het volgende:

    ComboFix 12-06-23.05 - Dennis 23-06-2012 17:05:25.1.2 - x86

    Microsoft Windows 7 Home Premium 6.1.7601.1.1252.31.1043.18.3199.2004 [GMT 2:00]

    Gestart vanuit: c:\users\Dennis\Desktop\ComboFix.exe

    AV: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}

    SP: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}

    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    * Nieuw herstelpunt werd aangemaakt

    .

    .

    (((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    c:\programdata\windows

    c:\programdata\windows\dumd.dat

    c:\programdata\windows\xdor.dat

    C:\Recycle.Bin

    c:\users\Dennis\AppData\Roaming\Biovto

    c:\users\Dennis\AppData\Roaming\Biovto\ycabo.irx

    c:\users\Dennis\AppData\Roaming\Ocuzx

    c:\users\Dennis\AppData\Roaming\Ocuzx\ehci.ycz

    c:\windows\system32\tmp3E57.tmp

    c:\windows\system32\tmp3EE4.tmp

    c:\windows\system32\tmp7B56.tmp

    c:\windows\system32\tmp7B67.tmp

    c:\windows\system32\tmp9CF.tmp

    c:\windows\system32\tmpA0F.tmp

    .

    .

    (((((((((((((((((((( Bestanden Gemaakt van 2012-05-23 to 2012-06-23 ))))))))))))))))))))))))))))))

    .

    .

    2012-06-23 15:10 . 2012-06-23 15:10 -------- d-----w- c:\users\Dennis\AppData\Local\temp

    2012-06-23 15:10 . 2012-06-23 15:10 -------- d-----w- c:\users\Default\AppData\Local\temp

    2012-06-23 10:45 . 2012-06-23 10:45 -------- d-----w- c:\programdata\Tarma Installer

    2012-06-19 15:46 . 2012-06-02 22:19 53784 ----a-w- c:\windows\system32\wuauclt.exe

    2012-06-19 15:46 . 2012-06-02 22:19 45080 ----a-w- c:\windows\system32\wups2.dll

    2012-06-19 15:46 . 2012-06-02 22:19 1933848 ----a-w- c:\windows\system32\wuaueng.dll

    2012-06-19 15:46 . 2012-06-02 22:12 2422272 ----a-w- c:\windows\system32\wucltux.dll

    2012-06-19 15:45 . 2012-06-02 22:19 35864 ----a-w- c:\windows\system32\wups.dll

    2012-06-19 15:45 . 2012-06-02 22:19 577048 ----a-w- c:\windows\system32\wuapi.dll

    2012-06-19 15:45 . 2012-06-02 22:12 88576 ----a-w- c:\windows\system32\wudriver.dll

    2012-06-19 15:45 . 2012-06-02 13:19 171904 ----a-w- c:\windows\system32\wuwebv.dll

    2012-06-19 15:45 . 2012-06-02 13:12 33792 ----a-w- c:\windows\system32\wuapp.exe

    2012-06-14 06:01 . 2012-04-24 04:36 140288 ----a-w- c:\windows\system32\cryptsvc.dll

    2012-06-14 06:01 . 2012-04-24 04:36 1158656 ----a-w- c:\windows\system32\crypt32.dll

    2012-06-14 06:01 . 2012-04-24 04:36 103936 ----a-w- c:\windows\system32\cryptnet.dll

    2012-06-14 06:01 . 2012-05-15 01:05 2343936 ----a-w- c:\windows\system32\win32k.sys

    2012-06-14 06:01 . 2012-05-01 04:44 164352 ----a-w- c:\windows\system32\profsvc.dll

    2012-06-14 06:01 . 2012-04-07 11:26 2342400 ----a-w- c:\windows\system32\msi.dll

    2012-06-14 06:01 . 2012-04-26 04:45 58880 ----a-w- c:\windows\system32\rdpwsx.dll

    2012-06-14 06:01 . 2012-04-26 04:45 129536 ----a-w- c:\windows\system32\rdpcorekmts.dll

    2012-06-14 06:01 . 2012-04-26 04:41 8192 ----a-w- c:\windows\system32\rdrmemptylst.exe

    2012-06-10 15:46 . 2012-06-10 15:46 -------- d-----w- c:\users\Dennis\AppData\Local\Macromedia

    2012-06-10 12:46 . 2012-06-10 12:46 770384 ----a-w- c:\program files\Mozilla Firefox\msvcr100.dll

    2012-06-10 12:46 . 2012-06-10 12:46 421200 ----a-w- c:\program files\Mozilla Firefox\msvcp100.dll

    2012-06-02 13:37 . 2012-06-02 14:10 -------- d-----w- c:\users\Dennis\AppData\Roaming\AVG

    .

    .

    .

    ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    2012-06-10 15:44 . 2012-04-05 15:15 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe

    2012-06-10 15:44 . 2011-05-18 17:51 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

    2012-05-16 17:48 . 2012-05-16 17:48 476960 ----a-w- c:\windows\system32\npdeployJava1.dll

    2012-05-16 17:48 . 2011-05-29 16:21 472864 ----a-w- c:\windows\system32\deployJava1.dll

    2012-04-19 02:50 . 2012-04-19 02:50 24896 ----a-w- c:\windows\system32\drivers\avgidshx.sys

    2012-03-31 04:39 . 2012-05-12 07:38 3968368 ----a-w- c:\windows\system32\ntkrnlpa.exe

    2012-03-31 04:39 . 2012-05-12 07:38 3913072 ----a-w- c:\windows\system32\ntoskrnl.exe

    2012-03-30 10:23 . 2012-05-12 07:38 1291632 ----a-w- c:\windows\system32\drivers\tcpip.sys

    2012-06-16 07:57 . 2012-05-04 19:29 85472 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll

    .

    .

    ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

    REGEDIT4

    .

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]

    "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-06-27 152872]

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136]

    "GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]

    "AVG_TRAY"="c:\program files\AVG\AVG2012\avgtray.exe" [2012-04-05 2587008]

    "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2010-11-29 421888]

    "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2010-12-13 421160]

    "Start WingMan Profiler"="c:\program files\Logitech\Gaming Software\LWEMon.exe" [2010-06-14 153672]

    "DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2011-07-28 1259376]

    "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-03-27 37296]

    "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-02 843712]

    "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

    "ConsentPromptBehaviorAdmin"= 5 (0x5)

    "ConsentPromptBehaviorUser"= 3 (0x3)

    "EnableUIADesktopToggle"= 0 (0x0)

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

    "mixer2"=wdmaud.drv

    .

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]

    BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~1\AVG\AVG2012\avgrsx.exe /sync /restart

    .

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]

    Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp

    .

    R2 gupdate;Google Updateservice (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-07-12 135664]

    R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-06-10 257224]

    R3 gupdatem;Google Update-service (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2010-07-12 135664]

    R3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [x]

    R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]

    R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [2010-06-22 1343400]

    S0 AVGIDSHX;AVGIDSHX;c:\windows\system32\DRIVERS\avgidshx.sys [2012-04-19 24896]

    S0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx86.sys [2012-01-31 31952]

    S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-06-08 691696]

    S1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx86.sys [2012-02-22 235216]

    S1 Avgtdix;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdix.sys [2012-03-19 301248]

    S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2009-08-18 176128]

    S2 AVGIDSAgent;AVGIDSAgent;c:\program files\AVG\AVG2012\AVGIDSAgent.exe [2012-04-30 5106744]

    S2 avgwd;AVG WatchDog;c:\program files\AVG\AVG2012\avgwdsvc.exe [2012-02-14 193288]

    S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2010-04-03 240232]

    S3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdriverx.sys [2011-12-23 139856]

    S3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\avgidsfilterx.sys [2011-12-23 24144]

    S3 AVGIDSShim;AVGIDSShim;c:\windows\system32\DRIVERS\avgidsshimx.sys [2011-12-23 17232]

    S3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20);c:\windows\system32\DRIVERS\L1C62x86.sys [2009-07-13 50688]

    S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32v.sys [2010-01-28 68200]

    .

    .

    Inhoud van de 'Gedeelde Taken' map

    .

    2012-06-23 c:\windows\Tasks\Adobe Flash Player Updater.job

    - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-05 15:44]

    .

    2012-06-23 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

    - c:\program files\Google\Update\GoogleUpdate.exe [2010-07-12 17:33]

    .

    2012-06-23 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

    - c:\program files\Google\Update\GoogleUpdate.exe [2010-07-12 17:33]

    .

    .

    ------- Bijkomende Scan -------

    .

    uStart Page = hxxp://www.google.nl/

    uInternet Settings,ProxyOverride = *.local

    IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000

    TCP: DhcpNameServer = 212.54.35.25 212.54.40.25

    FF - ProfilePath - c:\users\Dennis\AppData\Roaming\Mozilla\Firefox\Profiles\dok6u3k6.default\

    FF - prefs.js: browser.search.selectedEngine - Google

    FF - prefs.js: browser.startup.homepage - hxxp://Mystart.incredibar.com/mb124

    FF - user.js: extensions.incredibar_i.newTab - false

    FF - user.js: extensions.incredibar_i.tlbrSrchUrl - hxxp://mystart.Incredibar.com/?a=6R8wRyFgjO&loc=IB_TB&i=26&search=

    FF - user.js: extensions.incredibar_i.id - c483d31800000000000090e6ba9ddc14

    FF - user.js: extensions.incredibar_i.instlDay - 15514

    FF - user.js: extensions.incredibar_i.vrsn - 1.5.11.14

    FF - user.js: extensions.incredibar_i.vrsni - 1.5.11.14

    FF - user.js: extensions.incredibar_i.vrsnTs - 1.5.11.1412:46

    FF - user.js: extensions.incredibar_i.prtnrId - Incredibar

    FF - user.js: extensions.incredibar_i.prdct - incredibar

    FF - user.js: extensions.incredibar_i.aflt - orgnl

    FF - user.js: extensions.incredibar_i.smplGrp - none

    FF - user.js: extensions.incredibar_i.tlbrId - base

    FF - user.js: extensions.incredibar_i.instlRef -

    FF - user.js: extensions.incredibar_i.dfltLng -

    FF - user.js: extensions.incredibar_i.excTlbr - false

    FF - user.js: extensions.incredibar_i.ms_url_id -

    FF - user.js: extensions.incredibar_i.upn2 - 6R8wRyFgjO

    FF - user.js: extensions.incredibar_i.upn2n - 92824584465238852

    FF - user.js: extensions.incredibar_i.productid - 26

    FF - user.js: extensions.incredibar_i.installerproductid - 26

    FF - user.js: extensions.incredibar_i.did - 10658

    FF - user.js: extensions.incredibar_i.ppd -

    .

    - - - - ORPHANS VERWIJDERD - - - -

    .

    Toolbar-Locked - (no file)

    .

    .

    .

    --------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

    .

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

    @Denied: (Full) (Everyone)

    .

    Voltooingstijd: 2012-06-23 17:11:45

    ComboFix-quarantined-files.txt 2012-06-23 15:11

    .

    Pre-Run: 64.247.549.952 bytes beschikbaar

    Post-Run: 64.062.529.536 bytes beschikbaar

    .

    - - End Of File - - 396099F18D2E5117F08CE22C995BFD1A

    Helaas ook MyStart probleem :(

    in Archief Bestrijding malware & virussen

    Geplaatst:

    Hallo..

    ook hier last van het MyStart probleem.. Ik heb de termen "MyStart" & "Incredibar" ingevoerd bij zoeken in Deze computer.. Daarna alle gevonden items verwijderd. Ook bij Extra en Add-ons dit verwijderd.. Computer opnieuw opgestort, start firefox en helaas is de startpagina My Start, terwijl in configaratiescherm bij startpagina keurig google.nl staat.. Na het lezen van dit forum heb ik Hijack This geïnstalleerd, geklikt op "Do a systemscan and save a logfile", ik kreeg de melding "For some reason your system denied writing to the Host file ...." en heb op ok geklikt.. ik krijg het volgende overzicht:

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 16:39:03, on 23-6-2012

    Platform: Windows 7 SP1 (WinNT 6.00.3505)

    MSIE: Internet Explorer v8.00 (8.00.7601.17514)

    Boot mode: Normal

    Running processes:

    C:\Windows\system32\Dwm.exe

    C:\Windows\Explorer.EXE

    C:\Windows\system32\taskhost.exe

    C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

    C:\Program Files\AVG\AVG2012\avgtray.exe

    C:\Program Files\iTunes\iTunesHelper.exe

    C:\Program Files\Logitech\Gaming Software\LWEMon.exe

    C:\Program Files\DivX\DivX Update\DivXUpdate.exe

    C:\Program Files\Common Files\Java\Java Update\jusched.exe

    C:\Program Files\DAEMON Tools Lite\DTLite.exe

    C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe

    C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe

    C:\Program Files\Mozilla Firefox\firefox.exe

    C:\Program Files\Mozilla Firefox\plugin-container.exe

    C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe

    C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_3_300_257.exe

    C:\Users\Dennis\Desktop\Downloads\HijackThis.exe

    C:\Windows\system32\taskeng.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = NoRRoD.nl

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    O2 - BHO: AVG Do Not Track - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - C:\Program Files\AVG\AVG2012\avgdtiex.dll

    O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG2012\avgssie.dll

    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

    O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll

    O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

    O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"

    O4 - HKLM\..\Run: [AVG_TRAY] "C:\Program Files\AVG\AVG2012\avgtray.exe"

    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime

    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"

    O4 - HKLM\..\Run: [start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui

    O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW

    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

    O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

    O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun

    O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"

    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

    O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

    O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

    O9 - Extra button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - C:\Program Files\AVG\AVG2012\avgdtiex.dll

    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

    O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll

    O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll

    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

    O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll

    O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

    O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe

    O23 - Service: Mobiel Apple apparaat (Apple Mobile Device) - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

    O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe

    O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\avgwdsvc.exe

    O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

    O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

    O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Unknown owner - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe (file missing)

    O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe

    O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe

    O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe

    O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

    --

    End of file - 7341 bytes

    Ik gebruik Windows 7 Home Premium & Mozilla Firefox

    Hoe nu verder a.u.b.?

    Ik hoop dat jullie mij kunnen helpen!

Logo

OVER ONS

PC Helpforum helpt GRATIS computergebruikers sinds juli 2006. Ons team geeft via het forum professioneel antwoord op uw vragen en probeert uw pc problemen zo snel mogelijk op te lossen. Word lid vandaag, plaats je vraag online en het PC Helpforum-team helpt u graag verder!

SITEMAP

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.