Ga naar inhoud

GerritB

Lid
  • Items

    5
  • Registratiedatum

  • Laatst bezocht

Berichten die geplaatst zijn door GerritB

  1. Er is niets veranderd. Zodra ik rechtermuisknop gebruik krijg ik deze melding. Kon zelfs het programma ADWcleaner niet openen met rechter muisklik. Wat er afgegaan is stond ook al lang op de computer. Ik ga hem maar opnieuw installeren denk ik. Dit kost ook heel veel tijd.

  2. # AdwCleaner v1.703 - Logfile created 07/31/2012 at 19:27:09

    # Updated 20/07/2012 by Xplode

    # Operating system : Microsoft Windows XP Service Pack 3 (32 bits)

    # User : Gerrit Blonk - STUDEERKAMER

    # Running from : D:\Documents and Settings\Gerrit Blonk\Bureaublad\adwcleaner.exe

    # Option [Delete]

    ***** [services] *****

    Stopped & Deleted : DefaultTabSearch

    Stopped & Deleted : vToolbarUpdater11.2.0

    ***** [Files / Folders] *****

    Folder Deleted : D:\Documents and Settings\Gerrit Blonk\Local Settings\Application Data\AVG Secure Search

    Folder Deleted : D:\Documents and Settings\Gerrit Blonk\Local Settings\Application Data\Babylon

    Folder Deleted : D:\Documents and Settings\Gerrit Blonk\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\cgiaikfpllchefojlnehlmpekeogihnm

    Folder Deleted : D:\Documents and Settings\Gerrit Blonk\Application Data\AVG Secure Search

    Folder Deleted : D:\Documents and Settings\Gerrit Blonk\Application Data\Babylon

    Folder Deleted : D:\Documents and Settings\Gerrit Blonk\Application Data\BabylonToolbar

    Folder Deleted : D:\Documents and Settings\Gerrit Blonk\Application Data\pdfforge

    Folder Deleted : D:\Documents and Settings\All Users\Application Data\AVG Secure Search

    Folder Deleted : D:\Documents and Settings\All Users\Application Data\Babylon

    Folder Deleted : D:\Documents and Settings\All Users\Application Data\boost_interprocess

    Folder Deleted : D:\Documents and Settings\All Users\Menu Start\Programma's\DealPly

    Folder Deleted : D:\Program Files\AVG Secure Search

    Folder Deleted : D:\Program Files\BabylonToolbar

    Folder Deleted : D:\Program Files\DealPly

    Folder Deleted : D:\Program Files\DefaultTab

    Folder Deleted : D:\Program Files\Free Offers from Freeze.com

    Folder Deleted : D:\Program Files\Common Files\AVG Secure Search

    Folder Deleted : D:\Program Files\Common Files\spigot

    Folder Deleted : D:\WINDOWS\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}

    ***** [Registry] *****

    Key Deleted : HKCU\Software\AVG Secure Search

    Key Deleted : HKCU\Software\BabylonToolbar

    Key Deleted : HKCU\Software\DealPly

    Key Deleted : HKCU\Software\Default Tab

    Key Deleted : HKCU\Software\Google\Chrome\Extensions\cgiaikfpllchefojlnehlmpekeogihnm

    Key Deleted : HKCU\Software\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje

    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\DealPly

    Key Deleted : HKCU\Software\Softonic

    Key Deleted : HKLM\SOFTWARE\AVG Secure Search

    Key Deleted : HKLM\SOFTWARE\Babylon

    Key Deleted : HKLM\SOFTWARE\BabylonToolbar

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL

    Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI

    Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1

    Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj

    Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1

    Key Deleted : HKLM\SOFTWARE\Classes\b

    Key Deleted : HKLM\SOFTWARE\Classes\Babylon.dskBnd

    Key Deleted : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1

    Key Deleted : HKLM\SOFTWARE\Classes\bbylnApp.appCore

    Key Deleted : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1

    Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane

    Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane.1

    Key Deleted : HKLM\SOFTWARE\Classes\escort.escrtBtn.1

    Key Deleted : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc

    Key Deleted : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1

    Key Deleted : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd

    Key Deleted : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1

    Key Deleted : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol

    Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi

    Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1

    Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE

    Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1

    Key Deleted : HKLM\SOFTWARE\DealPly

    Key Deleted : HKLM\SOFTWARE\Default Tab

    Key Deleted : HKLM\SOFTWARE\DefaultTab

    Key Deleted : HKLM\SOFTWARE\Freeze.com

    Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\cgiaikfpllchefojlnehlmpekeogihnm

    Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje

    Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc

    Key Deleted : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43

    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar

    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DealPly

    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DefaultTab Chrome

    Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin

    Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]

    ***** [Registre - GUID] *****

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}

    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A3F2A195-0D11-463b-96BB-D2FF1B7490A1}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ECD0ECC6-DCA4-4013-A915-12355AB70999}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}

    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}

    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}

    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}

    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}

    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}

    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}

    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}

    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}

    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}

    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}

    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}

    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}

    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}

    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}

    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}

    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}

    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}

    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}

    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448}

    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{B922D405-6D13-4A2B-AE89-08A030DA4402}

    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}

    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}

    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}

    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}

    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448}

    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B922D405-6D13-4A2B-AE89-08A030DA4402}

    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}

    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}

    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]

    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]

    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]

    ***** [internet Browsers] *****

    -\\ Internet Explorer v8.0.6001.18702

    Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://isearch.avg.com/tab?cid={82A38D63-A372-4A75-B4EF-7F7A572E22B3}&mid=14c10c1e66cb47d18d93d1599a09827f-600ecc9482b06d0a38d5b4b8f16798343edeb44f〈=nl&ds=AVG&pr=fr&d=2012-06-05 18:58:18&v=11.1.0.12&sap=nt --> hxxp://www.google.com

    -\\ Google Chrome v20.0.1132.57

    File : D:\Documents and Settings\Gerrit Blonk\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences

    Deleted : "icon_url": "hxxp://isearch.avg.com/favicon.ico",

    Deleted : "keyword": "isearch.avg.com",

    Deleted : "name": "AVG Secure Search",

    Deleted : "search_url": "hxxp://isearch.avg.com/search?cid={82A38D63-A372-4A75-B4EF-7F7A572E22B3}&mid=14[...]

    Deleted : "js": [ "chrome.js", "surfcanyon.js" ],

    Deleted : "description": "Find stuff faster on Google, Yahoo! and Bing by digging out search re[...]

    Deleted : "update_url": "hxxp://www.surfcanyon.com/chrome_update.xml",

    Deleted : "update_url": "hxxp://autoupdate.chromewebtb.conduit-services.com/?productId=CT319671[...]

    *************************

    AdwCleaner[s1].txt - [13397 octets] - [31/07/2012 19:27:09]

    ########## EOF - D:\AdwCleaner[s1].txt - [13526 octets] ##########

    log van MBAM

    Malwarebytes Anti-Malware 1.62.0.1300

    Malwarebytes : Free anti-malware download

    Databaseversie: v2012.07.31.10

    Windows XP Service Pack 3 x86 NTFS

    Internet Explorer 8.0.6001.18702

    Gerrit Blonk :: STUDEERKAMER [administrator]

    31-7-2012 19:42:12

    mbam-log-2012-07-31 (19-42-12).txt

    Scantype: Snelle scan

    Ingeschakelde scanopties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM

    Uitgeschakelde scanopties: P2P

    Objecten gescand: 186888

    Verstreken tijd: 7 minuut/minuten, 26 seconde(n)

    Geheugenprocessen gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Geheugenmodulen gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Registersleutels gedetecteerd: 1

    HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\itunes.exe (Security.Hijack) -> Succesvol in quarantaine geplaatst en verwijderd.

    Registerwaarden gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Registerdata gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Mappen gedetecteerd: 0

    (Geen kwaadaardige objecten gedetecteerd)

    Bestanden gedetecteerd: 5

    D:\Documents and Settings\Gerrit Blonk\Mijn documenten\Downloads\VideoConverterSetup.exe (Adware.Agent) -> Succesvol in quarantaine geplaatst en verwijderd.

    D:\Documents and Settings\Gerrit Blonk\Mijn documenten\Downloads\YouTubeToMP3Setup.exe (Adware.InstallCore) -> Succesvol in quarantaine geplaatst en verwijderd.

    D:\Documents and Settings\Gerrit Blonk\Mijn documenten\Downloads\oi_QuickTimeInstallerexe.exe (PUP.BundleInstaller.OI) -> Succesvol in quarantaine geplaatst en verwijderd.

    D:\Documents and Settings\Gerrit Blonk\Mijn documenten\Downloads\FinalTorrent2011Setup.exe (PUP.BundleOffers.IIQ) -> Succesvol in quarantaine geplaatst en verwijderd.

    D:\Documents and Settings\Gerrit Blonk\Mijn documenten\Downloads\freefileviewer_730.exe (PUP.BundleOffers.IIQ) -> Succesvol in quarantaine geplaatst en verwijderd.

    (einde)

    Hijack This log

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 20:06:37, on 31-7-2012

    Platform: Windows XP SP3 (WinNT 5.01.2600)

    MSIE: Internet Explorer v8.00 (8.00.6001.18702)

    Boot mode: Normal

    Running processes:

    D:\WINDOWS\System32\smss.exe

    D:\WINDOWS\system32\winlogon.exe

    D:\WINDOWS\system32\services.exe

    D:\WINDOWS\system32\lsass.exe

    D:\WINDOWS\system32\svchost.exe

    D:\WINDOWS\System32\svchost.exe

    D:\WINDOWS\system32\spoolsv.exe

    D:\WINDOWS\Explorer.EXE

    D:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

    D:\Program Files\HP\hpcoretech\hpcmpmgr.exe

    D:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe

    D:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe

    D:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

    D:\Program Files\AVG\AVG2012\avgtray.exe

    D:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe

    D:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe

    D:\Program Files\DellTPad\Apoint.exe

    D:\Program Files\Common Files\Java\Java Update\jusched.exe

    D:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe

    D:\Program Files\HDD Health\HDDHealth.exe

    D:\Program Files\IE New Window Maximizer\iemaximizer.exe

    D:\Program Files\WFR\HIDAgent.exe

    D:\Program Files\W3i\InstallIQUpdater\InstallIQUpdater.exe

    D:\Documents and Settings\Gerrit Blonk\Application Data\Spotify\Spotify.exe

    D:\Program Files\Skype\Phone\Skype.exe

    D:\WINDOWS\system32\ctfmon.exe

    D:\Documents and Settings\Gerrit Blonk\Application Data\Spotify\Data\SpotifyWebHelper.exe

    D:\Program Files\AVG\AVG2012\avgwdsvc.exe

    D:\Program Files\CASIO\Photo Loader\Plauto.exe

    D:\Program Files\Windows Desktop Search\WindowsSearch.exe

    D:\Program Files\Back2zip\Back2zip.exe

    D:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe

    D:\WINDOWS\system32\WISPTIS.EXE

    D:\Program Files\DellTPad\ApMsgFwd.exe

    D:\Program Files\Java\jre6\bin\jqs.exe

    D:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe

    D:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe

    D:\Program Files\DellTPad\Apntex.exe

    D:\Program Files\DellTPad\HidFind.exe

    D:\Program Files\AVG\AVG2012\AVGIDSAgent.exe

    D:\Program Files\AVG\AVG2012\avgnsx.exe

    D:\Program Files\AVG\AVG2012\avgrsx.exe

    D:\Program Files\AVG\AVG2012\avgcsrvx.exe

    D:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesApp32.exe

    D:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE

    D:\Program Files\ChromePlus\chrome.exe

    D:\Program Files\ChromePlus\chrome.exe

    D:\Program Files\ChromePlus\chrome.exe

    D:\Program Files\ChromePlus\chrome.exe

    D:\Program Files\ChromePlus\chrome.exe

    D:\Program Files\ChromePlus\chrome.exe

    D:\Program Files\ChromePlus\chrome.exe

    D:\Program Files\Malwarebytes' Anti-Malware\mbam.exe

    D:\Documents and Settings\Gerrit Blonk\Mijn documenten\Downloads\HijackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

    O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

    O2 - BHO: AVG Do Not Track - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - D:\Program Files\AVG\AVG2012\avgdtiex.dll

    O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - D:\Program Files\AVG\AVG2012\avgssie.dll

    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

    O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre6\bin\ssv.dll

    O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - D:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\jre6\bin\jp2ssv.dll

    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - D:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

    O4 - HKLM\..\Run: [HP Component Manager] "D:\Program Files\HP\hpcoretech\hpcmpmgr.exe"

    O4 - HKLM\..\Run: [HPDJ Taskbar Utility] D:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe

    O4 - HKLM\..\Run: [statusClient] D:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe /auto

    O4 - HKLM\..\Run: [TomcatStartup] D:\Program Files\Hewlett-Packard\Toolbox2.0\hpbpsttp.exe

    O4 - HKLM\..\Run: [ATIPTA] D:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

    O4 - HKLM\..\Run: [GrooveMonitor] "D:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"

    O4 - HKLM\..\Run: [AVG_TRAY] "D:\Program Files\AVG\AVG2012\avgtray.exe"

    O4 - HKLM\..\Run: [vProt] "D:\Program Files\AVG Secure Search\vprot.exe"

    O4 - HKLM\..\Run: [FinePrint Dispatcher v5] "D:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe" /source=HKLM

    O4 - HKLM\..\Run: [HP Software Update] D:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe

    O4 - HKLM\..\Run: [Windows Defender] "D:\Program Files\Windows Defender\MSASCui.exe" -hide

    O4 - HKLM\..\Run: [Apoint] D:\Program Files\DellTPad\Apoint.exe

    O4 - HKLM\..\Run: [sunJavaUpdateSched] "D:\Program Files\Common Files\Java\Java Update\jusched.exe"

    O4 - HKLM\..\Run: [HTC Sync Loader] "D:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe" -startup

    O4 - HKLM\..\Run: [HF_G_Jul] "D:\Program Files\AVG Secure Search\HF_G_Jul.exe" /DoAction

    O4 - HKCU\..\Run: [Google Update] "D:\Documents and Settings\Gerrit Blonk\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c

    O4 - HKCU\..\Run: [HDDHealth] D:\Program Files\HDD Health\HDDHealth.exe -wl

    O4 - HKCU\..\Run: [iE New Window Maximizer] D:\Program Files\IE New Window Maximizer\iemaximizer.exe

    O4 - HKCU\..\Run: [HIDAgent] D:\Program Files\WFR\HIDAgent.exe

    O4 - HKCU\..\Run: [DriverScanner] "D:\PROGRA~1\Uniblue\DRIVER~1\launcher.exe" delay 20000

    O4 - HKCU\..\Run: [installIQUpdater] "D:\Program Files\W3i\InstallIQUpdater\InstallIQUpdater.exe" /silent /autorun

    O4 - HKCU\..\Run: [spotify] "D:\Documents and Settings\Gerrit Blonk\Application Data\Spotify\Spotify.exe" /uri spotify:autostart

    O4 - HKCU\..\Run: [skype] "D:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun

    O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe

    O4 - HKCU\..\Run: [spotify Web Helper] "D:\Documents and Settings\Gerrit Blonk\Application Data\Spotify\Data\SpotifyWebHelper.exe"

    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\CTFMON.EXE (User 'Lokale service')

    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\CTFMON.EXE (User 'Netwerkservice')

    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')

    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\CTFMON.EXE (User 'Default user')

    O4 - Startup: Back2zip.lnk = D:\Program Files\Back2zip\Back2zip.exe

    O4 - Global Startup: Photo Loader supervisory.lnk = D:\Program Files\CASIO\Photo Loader\Plauto.exe

    O4 - Global Startup: Windows Search.lnk = D:\Program Files\Windows Desktop Search\WindowsSearch.exe

    O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://D:\WINDOWS\system32\GPhotos.scr/200

    O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://D:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

    O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

    O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

    O9 - Extra button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - D:\Program Files\AVG\AVG2012\avgdtiex.dll

    O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - D:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - D:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe

    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

    O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - D:\Program Files\AVG\AVG2012\avgpp.dll

    O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - D:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

    O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - D:\WINDOWS\System32\browseui.dll

    O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - D:\WINDOWS\System32\browseui.dll

    O23 - Service: Apple Mobile Device - Apple Inc. - D:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

    O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - D:\Program Files\AVG\AVG2012\AVGIDSAgent.exe

    O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - D:\Program Files\AVG\AVG2012\avgwdsvc.exe

    O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - D:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - D:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Updater Service (gusvc) - Google - D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - D:\Program Files\Java\jre6\bin\jqs.exe

    O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - D:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe

    O23 - Service: Pml Driver HPZ12 - HP - D:\WINDOWS\system32\HPZipm12.exe

    O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - D:\Program Files\Skype\Updater\Updater.exe

    O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - D:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe

    O23 - Service: X10 Device Network Service (x10nets) - X10 - D:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

    --

    End of file - 11575 bytes

  3. bij deze de logfile.

    hg Gerrit

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 11:48:46, on 31-7-2012

    Platform: Windows XP SP3 (WinNT 5.01.2600)

    MSIE: Internet Explorer v8.00 (8.00.6001.18702)

    Boot mode: Normal

    Running processes:

    D:\WINDOWS\System32\smss.exe

    D:\WINDOWS\system32\winlogon.exe

    D:\WINDOWS\system32\services.exe

    D:\WINDOWS\system32\lsass.exe

    D:\WINDOWS\system32\svchost.exe

    D:\WINDOWS\System32\svchost.exe

    D:\WINDOWS\system32\spoolsv.exe

    D:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

    D:\Program Files\AVG\AVG2012\avgwdsvc.exe

    D:\WINDOWS\Explorer.EXE

    D:\Program Files\DefaultTab\DefaultTabSearch.exe

    D:\Program Files\Java\jre6\bin\jqs.exe

    D:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe

    D:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe

    D:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe

    D:\Program Files\HP\hpcoretech\hpcmpmgr.exe

    D:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe

    D:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe

    D:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe

    D:\Program Files\AVG\AVG2012\avgtray.exe

    D:\Program Files\AVG\AVG2012\avgnsx.exe

    D:\Program Files\AVG Secure Search\vprot.exe

    D:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe

    D:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe

    D:\Program Files\DellTPad\Apoint.exe

    D:\Program Files\Common Files\Java\Java Update\jusched.exe

    D:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe

    D:\Program Files\HDD Health\HDDHealth.exe

    D:\Program Files\AVG\AVG2012\AVGIDSAgent.exe

    D:\Program Files\IE New Window Maximizer\iemaximizer.exe

    D:\Program Files\AVG\AVG2012\avgrsx.exe

    D:\Program Files\WFR\HIDAgent.exe

    D:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe

    D:\Program Files\W3i\InstallIQUpdater\InstallIQUpdater.exe

    D:\Program Files\Skype\Phone\Skype.exe

    D:\WINDOWS\system32\ctfmon.exe

    D:\Documents and Settings\Gerrit Blonk\Application Data\Spotify\Data\SpotifyWebHelper.exe

    D:\WINDOWS\system32\WISPTIS.EXE

    D:\Program Files\AVG\AVG2012\avgcsrvx.exe

    D:\Program Files\DellTPad\ApMsgFwd.exe

    D:\Program Files\CASIO\Photo Loader\Plauto.exe

    D:\Program Files\Windows Desktop Search\WindowsSearch.exe

    D:\Program Files\DellTPad\Apntex.exe

    D:\Program Files\Back2zip\Back2zip.exe

    D:\Program Files\DellTPad\HidFind.exe

    D:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesApp32.exe

    D:\PROGRA~1\MICROS~2\Office12\OUTLOOK.EXE

    D:\Program Files\ChromePlus\chrome.exe

    D:\Program Files\ChromePlus\chrome.exe

    D:\Program Files\ChromePlus\chrome.exe

    D:\Program Files\ChromePlus\chrome.exe

    D:\Program Files\ChromePlus\chrome.exe

    D:\Program Files\ChromePlus\chrome.exe

    D:\Program Files\ChromePlus\chrome.exe

    D:\Program Files\ChromePlus\chrome.exe

    D:\Program Files\ChromePlus\chrome.exe

    D:\Documents and Settings\Gerrit Blonk\Mijn documenten\Downloads\HijackThis.exe

    D:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Babylon Search

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Koppelingen

    R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - D:\Program Files\Ask.com\GenericAskToolbar.dll

    O2 - BHO: Adobe PDF Reader Help bij koppelingen - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll

    O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - D:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll

    O2 - BHO: AVG Do Not Track - {31332EEF-CB9F-458F-AFEB-D30E9A66B6BA} - D:\Program Files\AVG\AVG2012\avgdtiex.dll

    O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - D:\Program Files\AVG\AVG2012\avgssie.dll

    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll

    O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files\Java\jre6\bin\ssv.dll

    O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - D:\Program Files\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll

    O2 - BHO: DealPly - {A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} - D:\Program Files\DealPly\DealPlyIE.dll

    O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - D:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - D:\Program Files\Ask.com\GenericAskToolbar.dll

    O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Program Files\Java\jre6\bin\jp2ssv.dll

    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - D:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

    O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - D:\Program Files\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll

    O3 - Toolbar: Nero Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - D:\Program Files\Ask.com\GenericAskToolbar.dll

    O3 - Toolbar: Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - D:\Program Files\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll

    O4 - HKLM\..\Run: [HP Component Manager] "D:\Program Files\HP\hpcoretech\hpcmpmgr.exe"

    O4 - HKLM\..\Run: [HPDJ Taskbar Utility] D:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe

    O4 - HKLM\..\Run: [statusClient] D:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe /auto

    O4 - HKLM\..\Run: [TomcatStartup] D:\Program Files\Hewlett-Packard\Toolbox2.0\hpbpsttp.exe

    O4 - HKLM\..\Run: [ATIPTA] D:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

    O4 - HKLM\..\Run: [GrooveMonitor] "D:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"

    O4 - HKLM\..\Run: [AVG_TRAY] "D:\Program Files\AVG\AVG2012\avgtray.exe"

    O4 - HKLM\..\Run: [vProt] "D:\Program Files\AVG Secure Search\vprot.exe"

    O4 - HKLM\..\Run: [FinePrint Dispatcher v5] "D:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe" /source=HKLM

    O4 - HKLM\..\Run: [HP Software Update] D:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe

    O4 - HKLM\..\Run: [Windows Defender] "D:\Program Files\Windows Defender\MSASCui.exe" -hide

    O4 - HKLM\..\Run: [Apoint] D:\Program Files\DellTPad\Apoint.exe

    O4 - HKLM\..\Run: [sunJavaUpdateSched] "D:\Program Files\Common Files\Java\Java Update\jusched.exe"

    O4 - HKLM\..\Run: [HTC Sync Loader] "D:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe" -startup

    O4 - HKLM\..\Run: [HF_G_Jul] "D:\Program Files\AVG Secure Search\HF_G_Jul.exe" /DoAction

    O4 - HKCU\..\Run: [Google Update] "D:\Documents and Settings\Gerrit Blonk\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c

    O4 - HKCU\..\Run: [HDDHealth] D:\Program Files\HDD Health\HDDHealth.exe -wl

    O4 - HKCU\..\Run: [iE New Window Maximizer] D:\Program Files\IE New Window Maximizer\iemaximizer.exe

    O4 - HKCU\..\Run: [HIDAgent] D:\Program Files\WFR\HIDAgent.exe

    O4 - HKCU\..\Run: [DriverScanner] "D:\PROGRA~1\Uniblue\DRIVER~1\launcher.exe" delay 20000

    O4 - HKCU\..\Run: [installIQUpdater] "D:\Program Files\W3i\InstallIQUpdater\InstallIQUpdater.exe" /silent /autorun

    O4 - HKCU\..\Run: [spotify] "D:\Documents and Settings\Gerrit Blonk\Application Data\Spotify\Spotify.exe" /uri spotify:autostart

    O4 - HKCU\..\Run: [skype] "D:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun

    O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe

    O4 - HKCU\..\Run: [spotify Web Helper] "D:\Documents and Settings\Gerrit Blonk\Application Data\Spotify\Data\SpotifyWebHelper.exe"

    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\CTFMON.EXE (User 'Lokale service')

    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\CTFMON.EXE (User 'Netwerkservice')

    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')

    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\CTFMON.EXE (User 'Default user')

    O4 - Startup: Back2zip.lnk = D:\Program Files\Back2zip\Back2zip.exe

    O4 - Global Startup: Photo Loader supervisory.lnk = D:\Program Files\CASIO\Photo Loader\Plauto.exe

    O4 - Global Startup: Windows Search.lnk = D:\Program Files\Windows Desktop Search\WindowsSearch.exe

    O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://D:\WINDOWS\system32\GPhotos.scr/200

    O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://D:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

    O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

    O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll

    O9 - Extra button: AVG Do Not Track - {68BCFFE1-A2DA-4B40-9068-87ECBFC19D16} - D:\Program Files\AVG\AVG2012\avgdtiex.dll

    O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - D:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - D:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL

    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - D:\WINDOWS\Network Diagnostic\xpnetdiag.exe

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe

    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll

    O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - D:\Program Files\AVG\AVG2012\avgpp.dll

    O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - D:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

    O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - D:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\11.2.0\ViProtocol.dll

    O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - D:\WINDOWS\System32\browseui.dll

    O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - D:\WINDOWS\System32\browseui.dll

    O23 - Service: Apple Mobile Device - Apple Inc. - D:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

    O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - D:\Program Files\AVG\AVG2012\AVGIDSAgent.exe

    O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - D:\Program Files\AVG\AVG2012\avgwdsvc.exe

    O23 - Service: DefaultTabSearch - Unknown owner - D:\Program Files\DefaultTab\DefaultTabSearch.exe

    O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - D:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - D:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Updater Service (gusvc) - Google - D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - D:\Program Files\Java\jre6\bin\jqs.exe

    O23 - Service: Internet Pass-Through Service (PassThru Service) - Unknown owner - D:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe

    O23 - Service: Pml Driver HPZ12 - HP - D:\WINDOWS\system32\HPZipm12.exe

    O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - D:\Program Files\Skype\Updater\Updater.exe

    O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - D:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe

    O23 - Service: vToolbarUpdater11.2.0 - Unknown owner - D:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe

    O23 - Service: X10 Device Network Service (x10nets) - X10 - D:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

    --

    End of file - 13410 bytes

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.