YJB11

Beste, ik heb sinds een paar dagen last van Exclusiverewards "aanbiedingen" ..... Hoe kom ik daar weer van af? Hoop dat jullie me kunnen helpen.... Vriendelijke groeten, YJB11

Yeeeaaaahhh! Hij is weg! Geweldig! Hastikke bedankt!

Dit heb ik teruggekregen: # AdwCleaner v2.108 - Verslag gemaakt op 26/01/2013 om 17:53:33 # Geactualiseerd op 24/01/2013 door Xplode # Besturingssysteem : Windows 7 Home Premium Service Pack 1 (64 bits) # Gebruiker : MEDION - MEDION-PC # Opstarten Modus : Normale modus # Gelanceerd vanaf : C:\Users\MEDION\Desktop\adwcleaner.exe # Optie [Verwijderen] ***** [Diensten] ***** Gestopt & Verwijdert : Sidekick Manager ***** [Files / Mappen] ***** File Verwijdert : C:\END File Verwijdert : C:\Program Files (x86)\Mozilla Firefox\searchplugins\avg-secure-search.xml File Verwijdert : C:\user.js File Verwijdert : C:\Users\MEDION\AppData\Roaming\Mozilla\Firefox\Profiles\ob3qyotw.default\bprotector_extensions.sqlite File Verwijdert : C:\Users\MEDION\AppData\Roaming\Mozilla\Firefox\Profiles\ob3qyotw.default\bprotector_prefs.js File Verwijdert : C:\Users\MEDION\AppData\Roaming\Mozilla\Firefox\Profiles\ob3qyotw.default\searchplugins\bProtect.xml Map Verwijdert : C:\Program Files (x86)\1ClickDownload Map Verwijdert : C:\Program Files (x86)\AVG Secure Search Map Verwijdert : C:\Program Files (x86)\Conduit Map Verwijdert : C:\Program Files (x86)\uTorrentBar_NL Map Verwijdert : C:\ProgramData\AVG Secure Search Map Verwijdert : C:\ProgramData\AVG Security Toolbar Map Verwijdert : C:\ProgramData\Partner Map Verwijdert : C:\ProgramData\Tarma Installer Map Verwijdert : C:\Users\MEDION\AppData\Local\AVG Secure Search Map Verwijdert : C:\Users\MEDION\AppData\Local\AVG Security Toolbar Map Verwijdert : C:\Users\MEDION\AppData\Local\Conduit Map Verwijdert : C:\Users\MEDION\AppData\Local\Google\Chrome\User Data\Default\Extensions\caloheeledhajihipjihanmihhegodlc Map Verwijdert : C:\Users\MEDION\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjofdnhdkbflacojpfpkchgafjahijbb Map Verwijdert : C:\Users\MEDION\AppData\Local\Temp\avg@toolbar Map Verwijdert : C:\Users\MEDION\AppData\LocalLow\AVG Secure Search Map Verwijdert : C:\Users\MEDION\AppData\LocalLow\AVG Security Toolbar Map Verwijdert : C:\Users\MEDION\AppData\LocalLow\Conduit Map Verwijdert : C:\Users\MEDION\AppData\LocalLow\PriceGong Map Verwijdert : C:\Users\MEDION\AppData\LocalLow\uTorrentBar_NL Map Verwijdert : C:\Users\MEDION\AppData\Roaming\Mozilla\Firefox\Profiles\ob3qyotw.default\Conduit Map Verwijdert : C:\Users\MEDION\AppData\Roaming\Mozilla\Firefox\Profiles\ob3qyotw.default\ConduitCommon Map Verwijdert : C:\Users\MEDION\AppData\Roaming\Mozilla\Firefox\Profiles\ob3qyotw.default\CT2865317 Map Verwijdert : C:\Users\MEDION\AppData\Roaming\Mozilla\Firefox\Profiles\ob3qyotw.default\extensions\{87775fdb-6972-41f9-ae51-8326e38cb206} Map Verwijdert : C:\Users\MEDION\AppData\Roaming\Mozilla\Firefox\Profiles\ob3qyotw.default\FCTB Map Verwijdert : C:\Users\MEDION\AppData\Roaming\Mozilla\Firefox\Profiles\ob3qyotw.default\SweetPacksToolbarData Verwijdert bij het opstarten : C:\Program Files (x86)\Common Files\AVG Secure Search Verwijdert bij het opstarten : C:\ProgramData\Sidekick Manager ***** [Register] ***** Sleutel Verwijdert : HKCU\Software\1ClickDownload Sleutel Verwijdert : HKCU\Software\AppDataLow\Software\AVG Security Toolbar Sleutel Verwijdert : HKCU\Software\AppDataLow\Software\Conduit Sleutel Verwijdert : HKCU\Software\AppDataLow\Software\Crossrider Sleutel Verwijdert : HKCU\Software\AppDataLow\Software\PriceGong Sleutel Verwijdert : HKCU\Software\AppDataLow\Software\SmartBar Sleutel Verwijdert : HKCU\Software\AppDataLow\Software\uTorrentBar_NL Sleutel Verwijdert : HKCU\Software\AppDataLow\Toolbar Sleutel Verwijdert : HKCU\Software\AVG Secure Search Sleutel Verwijdert : HKCU\Software\AVG Security Toolbar Sleutel Verwijdert : HKCU\Software\bProtector Sleutel Verwijdert : HKCU\Software\Conduit Sleutel Verwijdert : HKCU\Software\Cr_Installer Sleutel Verwijdert : HKCU\Software\DataMngr Sleutel Verwijdert : HKCU\Software\DataMngr_Toolbar Sleutel Verwijdert : HKCU\Software\Google\Chrome\Extensions\caloheeledhajihipjihanmihhegodlc Sleutel Verwijdert : HKCU\Software\Google\Chrome\Extensions\cjofdnhdkbflacojpfpkchgafjahijbb Sleutel Verwijdert : HKCU\Software\IGearSettings Sleutel Verwijdert : HKCU\Software\IM Sleutel Verwijdert : HKCU\Software\ImInstaller Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{87775FDB-6972-41F9-AE51-8326E38CB206} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{87775FDB-6972-41F9-AE51-8326E38CB206} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706} Sleutel Verwijdert : HKCU\Software\Softonic Sleutel Verwijdert : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9} Sleutel Verwijdert : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233} Sleutel Verwijdert : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A} Sleutel Verwijdert : HKLM\Software\AVG Secure Search Sleutel Verwijdert : HKLM\Software\AVG Security Toolbar Sleutel Verwijdert : HKLM\Software\Babylon Sleutel Verwijdert : HKLM\Software\bProtector Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Conduit.Engine Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Prod.cap Sleutel Verwijdert : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol Sleutel Verwijdert : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi Sleutel Verwijdert : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Toolbar.CT2865317 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Toolbar.CT3227982 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE Sleutel Verwijdert : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1 Sleutel Verwijdert : HKLM\Software\Conduit Sleutel Verwijdert : HKLM\Software\DataMngr Sleutel Verwijdert : HKLM\Software\IB Updater Sleutel Verwijdert : HKLM\Software\Iminent Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASAPI32 Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Tracing\SweetIM_RASMANCS Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011501160} Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3E87EA0C-D5FA-4BD8-A9E1-C341F4B798F8} Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC} Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706} Sleutel Verwijdert : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin Sleutel Verwijdert : HKLM\Software\uTorrentBar_NL Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3E87EA0C-D5FA-4BD8-A9E1-C341F4B798F8} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\caloheeledhajihipjihanmihhegodlc Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\cjofdnhdkbflacojpfpkchgafjahijbb Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110011501160} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4B0B6D92-E947-41FF-95AD-87E17FE07783} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AB89CEDC-9857-498A-9B88-49B8AA6F49DA} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\uTorrentBar_NL Toolbar Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6} Sleutel Verwijdert : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd Sleutel Verwijdert : HKLM\SOFTWARE\Tarma Installer Waarde Verwijdert : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page] Waarde Verwijdert : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{30F9B915-B755-4826-820B-08FBA6BD249D}] Waarde Verwijdert : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{87775FDB-6972-41F9-AE51-8326E38CB206}] Waarde Verwijdert : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}] Waarde Verwijdert : HKCU\Software\Mozilla\Firefox\Extensions [{b64982b1-d112-42b5-b1e4-d3867c4533f8}] Waarde Verwijdert : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{87775FDB-6972-41F9-AE51-8326E38CB206}] Waarde Verwijdert : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}] Waarde Verwijdert : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar] ***** [browsers] ***** -\\ Internet Explorer v9.0.8112.16457 [OK] Het register bevat geen enkele ongeoorloofde invoer. -\\ Mozilla Firefox v18.0.1 (nl) File : C:\Users\MEDION\AppData\Roaming\Mozilla\Firefox\Profiles\ob3qyotw.default\prefs.js C:\Users\MEDION\AppData\Roaming\Mozilla\Firefox\Profiles\ob3qyotw.default\user.js ... Verwijdert ! Verwijdert : user_pref("CT2438727..clientLogIsEnabled", true); Verwijdert : user_pref("CT2438727..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...] Verwijdert : user_pref("CT2438727..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...] Verwijdert : user_pref("CT2438727.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); Verwijdert : user_pref("CT2438727.BrowserCompStateIsOpen_1000515", true); Verwijdert : user_pref("CT2438727.CT2438727", "CT2438727"); Verwijdert : user_pref("CT2438727.CurrentServerDate", "8-9-2011"); Verwijdert : user_pref("CT2438727.DialogsAlignMode", "LTR"); Verwijdert : user_pref("CT2438727.DialogsGetterLastCheckTime", "Thu Sep 08 2011 00:16:58 GMT+0200"); Verwijdert : user_pref("CT2438727.DownloadReferralCookieData", "{\"BannerName\":\"\",\"BannerTypeId\":\"\",\"Bann[...] Verwijdert : user_pref("CT2438727.FirstServerDate", "14-8-2011"); Verwijdert : user_pref("CT2438727.FirstTime", true); Verwijdert : user_pref("CT2438727.FirstTimeFF3", true); Verwijdert : user_pref("CT2438727.FixPageNotFoundErrors", true); Verwijdert : user_pref("CT2438727.GroupingServerCheckInterval", 1440); Verwijdert : user_pref("CT2438727.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); Verwijdert : user_pref("CT2438727.HasUserGlobalKeys", true); Verwijdert : user_pref("CT2438727.HomePageProtectorEnabled", false); Verwijdert : user_pref("CT2438727.Initialize", true); Verwijdert : user_pref("CT2438727.InitializeCommonPrefs", true); Verwijdert : user_pref("CT2438727.InstallationAndCookieDataSentCount", 3); Verwijdert : user_pref("CT2438727.InstalledDate", "Sun Aug 14 2011 17:39:56 GMT+0200"); Verwijdert : user_pref("CT2438727.IsAlertDBUpdated", true); Verwijdert : user_pref("CT2438727.IsGrouping", false); Verwijdert : user_pref("CT2438727.IsInitSetupIni", true); Verwijdert : user_pref("CT2438727.IsMulticommunity", false); Verwijdert : user_pref("CT2438727.IsOpenThankYouPage", true); Verwijdert : user_pref("CT2438727.IsOpenUninstallPage", true); Verwijdert : user_pref("CT2438727.IsProtectorsInit", true); Verwijdert : user_pref("CT2438727.LanguagePackLastCheckTime", "Thu Sep 08 2011 00:16:58 GMT+0200"); Verwijdert : user_pref("CT2438727.LanguagePackReloadIntervalMM", 1440); Verwijdert : user_pref("CT2438727.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...] Verwijdert : user_pref("CT2438727.LastLogin_3.5.0.12", "Fri Aug 19 2011 12:07:30 GMT+0200"); Verwijdert : user_pref("CT2438727.LastLogin_3.6.0.10", "Thu Sep 08 2011 00:16:58 GMT+0200"); Verwijdert : user_pref("CT2438727.LatestVersion", "3.6.0.10"); Verwijdert : user_pref("CT2438727.Locale", "en"); Verwijdert : user_pref("CT2438727.MCDetectTooltipHeight", "83"); Verwijdert : user_pref("CT2438727.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); Verwijdert : user_pref("CT2438727.MCDetectTooltipWidth", "295"); Verwijdert : user_pref("CT2438727.MyStuffEnabledAtInstallation", false); Verwijdert : user_pref("CT2438727.OriginalFirstVersion", "3.5.0.12"); Verwijdert : user_pref("CT2438727.SearchEngineBeforeUnload", "Google"); Verwijdert : user_pref("CT2438727.SearchFromAddressBarIsInit", true); Verwijdert : user_pref("CT2438727.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT243[...] Verwijdert : user_pref("CT2438727.SearchInNewTabEnabled", true); Verwijdert : user_pref("CT2438727.SearchInNewTabIntervalMM", 1440); Verwijdert : user_pref("CT2438727.SearchInNewTabLastCheckTime", "Thu Sep 08 2011 00:16:56 GMT+0200"); Verwijdert : user_pref("CT2438727.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...] Verwijdert : user_pref("CT2438727.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...] Verwijdert : user_pref("CT2438727.SearchProtectorEnabled", false); Verwijdert : user_pref("CT2438727.SearchProtectorToolbarDisabled", false); Verwijdert : user_pref("CT2438727.ServiceMapLastCheckTime", "Thu Sep 08 2011 00:16:57 GMT+0200"); Verwijdert : user_pref("CT2438727.SettingsLastCheckTime", "Thu Sep 08 2011 00:16:56 GMT+0200"); Verwijdert : user_pref("CT2438727.SettingsLastUpdate", "1314929172"); Verwijdert : user_pref("CT2438727.ThirdPartyComponentsInterval", 504); Verwijdert : user_pref("CT2438727.ThirdPartyComponentsLastCheck", "Sun Sep 04 2011 17:59:57 GMT+0200"); Verwijdert : user_pref("CT2438727.ThirdPartyComponentsLastUpdate", "1312887586"); Verwijdert : user_pref("CT2438727.ToolbarShrinkedFromSetup", false); Verwijdert : user_pref("CT2438727.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2438727"); Verwijdert : user_pref("CT2438727.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...] Verwijdert : user_pref("CT2438727.UserID", "UN20514295609005573"); Verwijdert : user_pref("CT2438727.ValidationData_Toolbar", 2); Verwijdert : user_pref("CT2438727.alertChannelId", "832836"); Verwijdert : user_pref("CT2438727.backendstorage.currentgame", "70696F6E656572747261696C"); Verwijdert : user_pref("CT2438727.backendstorage.facebook_ctid_connect_send_new", "73656E646564"); Verwijdert : user_pref("CT2438727.backendstorage.facebook_mode", "32"); Verwijdert : user_pref("CT2438727.backendstorage.facebook_user_locale", "656E"); Verwijdert : user_pref("CT2438727.components.1000515", true); Verwijdert : user_pref("CT2438727.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...] Verwijdert : user_pref("CT2438727.globalFirstTimeInfoLastCheckTime", "Thu Sep 08 2011 00:16:58 GMT+0200"); Verwijdert : user_pref("CT2438727.homepageProtectorEnableByLogin", true); Verwijdert : user_pref("CT2438727.initDone", true); Verwijdert : user_pref("CT2438727.isAppTrackingManagerOn", true); Verwijdert : user_pref("CT2438727.myStuffEnabled", true); Verwijdert : user_pref("CT2438727.myStuffPublihserMinWidth", 400); Verwijdert : user_pref("CT2438727.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...] Verwijdert : user_pref("CT2438727.myStuffServiceIntervalMM", 1440); Verwijdert : user_pref("CT2438727.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...] Verwijdert : user_pref("CT2438727.oldAppsList", "129017707048431316,129017707048587567,111,129509324767711885,129[...] Verwijdert : user_pref("CT2438727.searchProtectorDialogDelayInSec", 10); Verwijdert : user_pref("CT2438727.searchProtectorEnableByLogin", true); Verwijdert : user_pref("CT2438727.testingCtid", ""); Verwijdert : user_pref("CT2438727.toolbarAppMetaDataLastCheckTime", "Thu Sep 08 2011 00:16:58 GMT+0200"); Verwijdert : user_pref("CT2438727.toolbarContextMenuLastCheckTime", "Tue Aug 30 2011 23:50:50 GMT+0200"); Verwijdert : user_pref("CT2438727.usagesFlag", 2); Verwijdert : user_pref("CT2865317..clientLogIsEnabled", false); Verwijdert : user_pref("CT2865317..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...] Verwijdert : user_pref("CT2865317..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...] Verwijdert : user_pref("CT2865317.ALLOW_SHOWING_HIDDEN_TOOLBAR", false); Verwijdert : user_pref("CT2865317.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); Verwijdert : user_pref("CT2865317.CT2865317", "CT2865317"); Verwijdert : user_pref("CT2865317.CurrentServerDate", "25-1-2013"); Verwijdert : user_pref("CT2865317.DSInstall", true); Verwijdert : user_pref("CT2865317.DialogsAlignMode", "LTR"); Verwijdert : user_pref("CT2865317.DialogsGetterLastCheckTime", "Fri Jan 25 2013 18:37:45 GMT+0100"); Verwijdert : user_pref("CT2865317.DownloadReferralCookieData", ""); Verwijdert : user_pref("CT2865317.EMailNotifierPollDate", "Tue Jul 31 2012 17:48:16 GMT+0200"); Verwijdert : user_pref("CT2865317.FeedLastCount5397019970362056034", 332); Verwijdert : user_pref("CT2865317.FeedPollDate2429156812186649977", "Tue Jul 31 2012 17:48:17 GMT+0200"); Verwijdert : user_pref("CT2865317.FeedPollDate2429156813040823546", "Tue Jul 31 2012 17:48:16 GMT+0200"); Verwijdert : user_pref("CT2865317.FeedPollDate2429156813130095866", "Tue Jul 31 2012 17:48:16 GMT+0200"); Verwijdert : user_pref("CT2865317.FeedPollDate2429156813224203613", "Tue Jul 31 2012 17:48:16 GMT+0200"); Verwijdert : user_pref("CT2865317.FeedPollDate2429156813230837251", "Tue Jul 31 2012 17:48:16 GMT+0200"); Verwijdert : user_pref("CT2865317.FeedPollDate2429156813454291735", "Tue Jul 31 2012 17:48:16 GMT+0200"); Verwijdert : user_pref("CT2865317.FeedPollDate2429156813729834876", "Tue Jul 31 2012 17:48:16 GMT+0200"); Verwijdert : user_pref("CT2865317.FeedPollDate2429156813860870021", "Tue Jul 31 2012 17:48:17 GMT+0200"); Verwijdert : user_pref("CT2865317.FeedPollDate2429156814264681793", "Tue Jul 31 2012 17:48:17 GMT+0200"); Verwijdert : user_pref("CT2865317.FeedPollDate2429156814863075366", "Tue Jul 31 2012 17:48:16 GMT+0200"); Verwijdert : user_pref("CT2865317.FeedPollDate2429156815257761081", "Tue Jul 31 2012 17:48:16 GMT+0200"); Verwijdert : user_pref("CT2865317.FeedTTL2429156813040823546", 15); Verwijdert : user_pref("CT2865317.FeedTTL2429156813130095866", 10); Verwijdert : user_pref("CT2865317.FeedTTL2429156813454291735", 5); Verwijdert : user_pref("CT2865317.FeedTTL2429156814264681793", 5); Verwijdert : user_pref("CT2865317.FirstServerDate", "18-5-2012"); Verwijdert : user_pref("CT2865317.FirstTime", true); Verwijdert : user_pref("CT2865317.FirstTimeFF3", true); Verwijdert : user_pref("CT2865317.FirstTimeHiddenVer", true); Verwijdert : user_pref("CT2865317.FixPageNotFoundErrors", false); Verwijdert : user_pref("CT2865317.GroupingServerCheckInterval", 1440); Verwijdert : user_pref("CT2865317.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); Verwijdert : user_pref("CT2865317.HPInstall", false); Verwijdert : user_pref("CT2865317.HasUserGlobalKeys", true); Verwijdert : user_pref("CT2865317.HomePageProtectorEnabled", false); Verwijdert : user_pref("CT2865317.HomepageBeforeUnload", "hxxp://www.google.nl/ig|hxxp://www.jijbent.nl/|hxxps://[...] Verwijdert : user_pref("CT2865317.Initialize", true); Verwijdert : user_pref("CT2865317.InitializeCommonPrefs", true); Verwijdert : user_pref("CT2865317.InstallationAndCookieDataSentCount", 3); Verwijdert : user_pref("CT2865317.InstallationType", "Unknown"); Verwijdert : user_pref("CT2865317.InstalledDate", "Fri May 18 2012 19:12:01 GMT+0200"); Verwijdert : user_pref("CT2865317.IsAlertDBUpdated", true); Verwijdert : user_pref("CT2865317.IsGrouping", false); Verwijdert : user_pref("CT2865317.IsInitSetupIni", true); Verwijdert : user_pref("CT2865317.IsMulticommunity", false); Verwijdert : user_pref("CT2865317.IsOpenThankYouPage", true); Verwijdert : user_pref("CT2865317.IsOpenUninstallPage", true); Verwijdert : user_pref("CT2865317.LanguagePackLastCheckTime", "Fri Jan 25 2013 18:37:45 GMT+0100"); Verwijdert : user_pref("CT2865317.LanguagePackReloadIntervalMM", 1440); Verwijdert : user_pref("CT2865317.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...] Verwijdert : user_pref("CT2865317.LastLogin_3.12.2.3", "Wed May 30 2012 23:59:19 GMT+0200"); Verwijdert : user_pref("CT2865317.LastLogin_3.13.0.6", "Wed Jul 18 2012 04:13:52 GMT+0200"); Verwijdert : user_pref("CT2865317.LastLogin_3.14.1.0", "Tue Aug 28 2012 01:45:42 GMT+0200"); Verwijdert : user_pref("CT2865317.LastLogin_3.15.1.0", "Sat Nov 10 2012 16:28:13 GMT+0100"); Verwijdert : user_pref("CT2865317.LastLogin_3.16.0.3", "Fri Jan 25 2013 18:37:45 GMT+0100"); Verwijdert : user_pref("CT2865317.LatestVersion", "3.16.0.3"); Verwijdert : user_pref("CT2865317.Locale", "nl"); Verwijdert : user_pref("CT2865317.MCDetectTooltipHeight", "83"); Verwijdert : user_pref("CT2865317.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); Verwijdert : user_pref("CT2865317.MCDetectTooltipWidth", "295"); Verwijdert : user_pref("CT2865317.MyStuffEnabledAtInstallation", true); Verwijdert : user_pref("CT2865317.OriginalFirstVersion", "3.12.2.3"); Verwijdert : user_pref("CT2865317.SearchCaption", "uTorrentBar_NL Customized Web Search"); Verwijdert : user_pref("CT2865317.SearchEngineBeforeUnload", "Google"); Verwijdert : user_pref("CT2865317.SearchFromAddressBarIsInit", true); Verwijdert : user_pref("CT2865317.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT286[...] Verwijdert : user_pref("CT2865317.SearchInNewTabEnabled", true); Verwijdert : user_pref("CT2865317.SearchInNewTabIntervalMM", 1440); Verwijdert : user_pref("CT2865317.SearchInNewTabLastCheckTime", "Fri Jan 25 2013 18:37:44 GMT+0100"); Verwijdert : user_pref("CT2865317.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...] Verwijdert : user_pref("CT2865317.SearchInNewTabUserEnabled", false); Verwijdert : user_pref("CT2865317.SearchProtectorEnabled", false); Verwijdert : user_pref("CT2865317.SearchProtectorToolbarDisabled", false); Verwijdert : user_pref("CT2865317.SendProtectorDataViaLogin", true); Verwijdert : user_pref("CT2865317.ServiceMapLastCheckTime", "Fri Jan 25 2013 18:37:33 GMT+0100"); Verwijdert : user_pref("CT2865317.SettingsLastCheckTime", "Fri Jan 25 2013 18:37:41 GMT+0100"); Verwijdert : user_pref("CT2865317.SettingsLastUpdate", "1359123102"); Verwijdert : user_pref("CT2865317.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT2865317&SearchSource=13"); Verwijdert : user_pref("CT2865317.ThirdPartyComponentsInterval", 504); Verwijdert : user_pref("CT2865317.ThirdPartyComponentsLastCheck", "Fri May 18 2012 19:11:44 GMT+0200"); Verwijdert : user_pref("CT2865317.ThirdPartyComponentsLastUpdate", "1331805997"); Verwijdert : user_pref("CT2865317.ToolbarShrinkedFromSetup", false); Verwijdert : user_pref("CT2865317.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2865317"); Verwijdert : user_pref("CT2865317.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...] Verwijdert : user_pref("CT2865317.UserID", "UN98566605432585150"); Verwijdert : user_pref("CT2865317.WeatherNetwork", ""); Verwijdert : user_pref("CT2865317.WeatherPollDate", "Tue Jul 31 2012 17:48:17 GMT+0200"); Verwijdert : user_pref("CT2865317.WeatherUnit", "C"); Verwijdert : user_pref("CT2865317.alertChannelId", "1257316"); Verwijdert : user_pref("CT2865317.autoDisableScopes", -1); Verwijdert : user_pref("CT2865317.backendstorage.cbcountry_000", "4E4C"); Verwijdert : user_pref("CT2865317.backendstorage.cbcountry_001", "4E4C"); Verwijdert : user_pref("CT2865317.backendstorage.cbfirsttime", "467269204D617920313820323031322031393A31313A34372[...] Verwijdert : user_pref("CT2865317.backendstorage.cbopenmamsettings", "30"); Verwijdert : user_pref("CT2865317.backendstorage.pairingkey", "46434130463433363738443041334446324539383536364138[...] Verwijdert : user_pref("CT2865317.backendstorage.scriptsource", "687474703A2F2F3132372E302E302E313A31303030302F67[...] Verwijdert : user_pref("CT2865317.backendstorage.uttorrents", "7B226275696C64223A32383730352C226C6162656C223A5B5D[...] Verwijdert : user_pref("CT2865317.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...] Verwijdert : user_pref("CT2865317.globalFirstTimeInfoLastCheckTime", "Fri May 18 2012 19:11:45 GMT+0200"); Verwijdert : user_pref("CT2865317.homepageProtectorEnableByLogin", true); Verwijdert : user_pref("CT2865317.initDone", true); Verwijdert : user_pref("CT2865317.isAppTrackingManagerOn", true); Verwijdert : user_pref("CT2865317.myStuffEnabled", true); Verwijdert : user_pref("CT2865317.myStuffPublihserMinWidth", 400); Verwijdert : user_pref("CT2865317.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...] Verwijdert : user_pref("CT2865317.myStuffServiceIntervalMM", 1440); Verwijdert : user_pref("CT2865317.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...] Verwijdert : user_pref("CT2865317.navigateToUrlOnSearch", false); Verwijdert : user_pref("CT2865317.revertSettingsEnabled", true); Verwijdert : user_pref("CT2865317.searchProtectorDialogDelayInSec", 10); Verwijdert : user_pref("CT2865317.searchProtectorEnableByLogin", true); Verwijdert : user_pref("CT2865317.testingCtid", ""); Verwijdert : user_pref("CT2865317.toolbarAppMetaDataLastCheckTime", "Fri Jan 25 2013 18:37:45 GMT+0100"); Verwijdert : user_pref("CT2865317.toolbarContextMenuLastCheckTime", "Fri May 18 2012 19:11:45 GMT+0200"); Verwijdert : user_pref("CT2865317.usagesFlag", 2); Verwijdert : user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3227982&Search[...] Verwijdert : user_pref("CommunityToolbar.ConduitSearchList", "appbario8 Customized Web Search"); Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2865317/CT2865317[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT3227982/CT3227982[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1257316/1252989/NL", "\"0\"[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1663751/1656277/NL", "\"0\"[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/832836/828639/NL", "\"0\"")[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/NL", "\"0\"")[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2438727", [...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2865317", [...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT3227982", [...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.13[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.14[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.15[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.15[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.16[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.5.[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.6.[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2438727",[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2865317",[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT3227982",[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/20[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2438727&octid=[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2865317/CT2865317[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/27/243/CT2438727/Images/Blank.png", "\"2[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE",[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"7ae[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=nl", "\"419[...] Verwijdert : user_pref("CommunityToolbar.EngineHiddenByUser", true); Verwijdert : user_pref("CommunityToolbar.EngineOwner", ""); Verwijdert : user_pref("CommunityToolbar.EngineOwnerGuid", "{87775fdb-6972-41f9-ae51-8326e38cb206}"); Verwijdert : user_pref("CommunityToolbar.EngineOwnerToolbarId", "utorrentbar_nl"); Verwijdert : user_pref("CommunityToolbar.IsEngineShown", false); Verwijdert : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true); Verwijdert : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\MEDION\\AppData\\Roaming\\Mozilla\\[...] Verwijdert : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.15.0.0"); Verwijdert : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2865317"); Verwijdert : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{87775fdb-6972-41f9-ae51-8326e38cb206}"); Verwijdert : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "utorrentbar_nl"); Verwijdert : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://search.avg.com/route/?d=4df6acfe&[...] Verwijdert : user_pref("CommunityToolbar.ToolbarsList", "CT2438727,CT2865317"); Verwijdert : user_pref("CommunityToolbar.ToolbarsList2", "ConduitEngine,CT2438727,CT2865317"); Verwijdert : user_pref("CommunityToolbar.ToolbarsList4", "CT2438727,CT2865317"); Verwijdert : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Sun Jun 19 2011 00:15:41 GMT+02[...] Verwijdert : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440); Verwijdert : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Thu Jun 23 2011 19:46:25 GMT+0200"); Verwijdert : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com"); Verwijdert : user_pref("CommunityToolbar.alert.locale", "en"); Verwijdert : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440); Verwijdert : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Fri Jun 24 2011 23:49:32 GMT+0200"); Verwijdert : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559"); Verwijdert : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20); Verwijdert : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com"); Verwijdert : user_pref("CommunityToolbar.alert.showTrayIcon", false); Verwijdert : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300); Verwijdert : user_pref("CommunityToolbar.alert.userId", "6642bcdc-2929-40a3-8236-4caff52eb743"); Verwijdert : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Sun Jul 17 2011 13:52:42 GMT+0200"); Verwijdert : user_pref("CommunityToolbar.globalUserId", "ce97fbeb-ef0b-48bc-a684-242d789e531f"); Verwijdert : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true); Verwijdert : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true); Verwijdert : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT3227982"); Verwijdert : user_pref("CommunityToolbar.killedEngine", true); Verwijdert : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Tue Jul 31 2012 17:48:1[...] Verwijdert : user_pref("CommunityToolbar.notifications.alertEnabled", true); Verwijdert : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440); Verwijdert : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Sun Aug 05 2012 23:29:34 GMT+020[...] Verwijdert : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com"); Verwijdert : user_pref("CommunityToolbar.notifications.locale", "en"); Verwijdert : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440); Verwijdert : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Sun Aug 05 2012 23:29:26 GMT+0200"); Verwijdert : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611"); Verwijdert : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20); Verwijdert : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com"); Verwijdert : user_pref("CommunityToolbar.notifications.showTrayIcon", false); Verwijdert : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300); Verwijdert : user_pref("CommunityToolbar.notifications.userId", "1471e50f-cbee-40c3-b5e4-0ce8c69a7ed3"); Verwijdert : user_pref("CommunityToolbar.originalHomepage", "hxxp://www.google.nl/ig|hxxp://www.jijbent.nl/|hxxps[...] Verwijdert : user_pref("CommunityToolbar.originalSearchEngine", "Google"); Verwijdert : user_pref("CommunityToolbar.undefined", ""); Verwijdert : user_pref("avg.install.installDirPath", "C:\\ProgramData\\AVG Secure Search\\FireFoxExt\\14.0.2.14")[...] Verwijdert : user_pref("browser.newtab.url", "hxxp://mystart.incredibar.com/mb128?a=6OyZjiEuIi&i=26"); Verwijdert : user_pref("browser.search.defaultenginename", "MyStart Search"); Verwijdert : user_pref("browser.search.defaultthis.engineName", "appbario8 Customized Web Search"); Verwijdert : user_pref("browser.search.order.1", "appbario8 Customized Web Search"); Verwijdert : user_pref("extensions.50e79bf28d1c4.scode", "(function(){try{if('aol.com,mail.google.com,mystart.inc[...] Verwijdert : user_pref("extensions.BabylonToolbar.bbDpng", 17); Verwijdert : user_pref("extensions.BabylonToolbar.cntry", "NL"); Verwijdert : user_pref("extensions.BabylonToolbar.firstRun", false); Verwijdert : user_pref("extensions.BabylonToolbar.hdrMd5", "3BB7D6FAEEC0A0726B5A90AEC70524A3"); Verwijdert : user_pref("extensions.BabylonToolbar.lastActv", "17"); Verwijdert : user_pref("extensions.BabylonToolbar.lastDP", 17); Verwijdert : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.4.31.221:52:40"); Verwijdert : user_pref("extensions.BabylonToolbar.propectorlck", 57539581); Verwijdert : user_pref("extensions.BabylonToolbar.prtkHmpg", 1); Verwijdert : user_pref("extensions.incredibar.actvtyRptTime", "1357350155671"); Verwijdert : user_pref("extensions.incredibar.admin", false); Verwijdert : user_pref("extensions.incredibar.aflt", "orgnl"); Verwijdert : user_pref("extensions.incredibar.afterInstallRpt", "sent"); Verwijdert : user_pref("extensions.incredibar.cntry", "NL"); Verwijdert : user_pref("extensions.incredibar.dfltLng", "EN"); Verwijdert : user_pref("extensions.incredibar.dfltSrch", false); Verwijdert : user_pref("extensions.incredibar.did", "10674"); Verwijdert : user_pref("extensions.incredibar.envrmnt", "production"); Verwijdert : user_pref("extensions.incredibar.excTlbr", false); Verwijdert : user_pref("extensions.incredibar.hdrMd5", "43CB1B83122E60C46D3EAB027D85D27D"); Verwijdert : user_pref("extensions.incredibar.hmpg", false); Verwijdert : user_pref("extensions.incredibar.id", "ca8fa2890000000000006c626d981e70"); Verwijdert : user_pref("extensions.incredibar.installerproductid", "26"); Verwijdert : user_pref("extensions.incredibar.instlDay", "15710"); Verwijdert : user_pref("extensions.incredibar.instlRef", ""); Verwijdert : user_pref("extensions.incredibar.isDcmntCmplt", true); Verwijdert : user_pref("extensions.incredibar.lastVrsnTs", "1.5.11.142:42:02"); Verwijdert : user_pref("extensions.incredibar.mntrvrsn", "1.2.0"); Verwijdert : user_pref("extensions.incredibar.newTab", false); Verwijdert : user_pref("extensions.incredibar.noFFXTlbr", false); Verwijdert : user_pref("extensions.incredibar.ppd", ""); Verwijdert : user_pref("extensions.incredibar.prdct", "incredibar"); Verwijdert : user_pref("extensions.incredibar.productid", "26"); Verwijdert : user_pref("extensions.incredibar.prtnrId", "Incredibar"); Verwijdert : user_pref("extensions.incredibar.sg", "none"); Verwijdert : user_pref("extensions.incredibar.smplGrp", "none"); Verwijdert : user_pref("extensions.incredibar.tlbrId", "base"); Verwijdert : user_pref("extensions.incredibar.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6OyZjiEuIi&loc=IB_T[...] Verwijdert : user_pref("extensions.incredibar.upn2", "6OyZjiEuIi"); Verwijdert : user_pref("extensions.incredibar.upn2n", "92262741949956850"); Verwijdert : user_pref("extensions.incredibar.vrsn", "1.5.11.14"); Verwijdert : user_pref("extensions.incredibar.vrsnTs", "1.5.11.142:42:02"); Verwijdert : user_pref("extensions.incredibar.vrsni", "1.5.11.14"); Verwijdert : user_pref("extensions.incredibar_i.aflt", "orgnl"); Verwijdert : user_pref("extensions.incredibar_i.dfltLng", ""); Verwijdert : user_pref("extensions.incredibar_i.did", "10674"); Verwijdert : user_pref("extensions.incredibar_i.excTlbr", false); Verwijdert : user_pref("extensions.incredibar_i.id", "ca8fa2890000000000006c626d981e70"); Verwijdert : user_pref("extensions.incredibar_i.installerproductid", "26"); Verwijdert : user_pref("extensions.incredibar_i.instlDay", "15710"); Verwijdert : user_pref("extensions.incredibar_i.instlRef", ""); Verwijdert : user_pref("extensions.incredibar_i.ms_url_id", ""); Verwijdert : user_pref("extensions.incredibar_i.newTab", false); Verwijdert : user_pref("extensions.incredibar_i.ppd", ""); Verwijdert : user_pref("extensions.incredibar_i.prdct", "incredibar"); Verwijdert : user_pref("extensions.incredibar_i.productid", "26"); Verwijdert : user_pref("extensions.incredibar_i.prtnrId", "Incredibar"); Verwijdert : user_pref("extensions.incredibar_i.smplGrp", "none"); Verwijdert : user_pref("extensions.incredibar_i.tlbrId", "base"); Verwijdert : user_pref("extensions.incredibar_i.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6OyZjiEuIi&loc=IB[...] Verwijdert : user_pref("extensions.incredibar_i.upn2", "6OyZjiEuIi"); Verwijdert : user_pref("extensions.incredibar_i.upn2n", "92262741949956850"); Verwijdert : user_pref("extensions.incredibar_i.vrsn", "1.5.11.14"); Verwijdert : user_pref("extensions.incredibar_i.vrsnTs", "1.5.11.142:42:02"); Verwijdert : user_pref("extensions.incredibar_i.vrsni", "1.5.11.14"); Verwijdert : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.AutoSearchEventData", "auto%20search"); Verwijdert : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.ClearCacheDate", 25); Verwijdert : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.DNSCatch", true); Verwijdert : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.DisplayEULA", false); Verwijdert : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.DnsCatchEventData", "dns%20catch"); Verwijdert : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.FirstLaunchShown", true); Verwijdert : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.LoadLayoutDate.62781", 25); Verwijdert : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.NewTabSearchEventData", "tab%20search"); Verwijdert : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.ShowDescriptiveText", true); Verwijdert : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.ShowRecommendedOptions", true); Verwijdert : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.StateReportDate", "1359135461836"); Verwijdert : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.TopRightSearchEventData", "top%20right%20search[...] Verwijdert : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.customNewTab", false); Verwijdert : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.helpUsImprove", true); Verwijdert : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.hideOthers", false); Verwijdert : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.processAddrBar", true); Verwijdert : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.restoreSearch", false); Verwijdert : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.revision", "37"); Verwijdert : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.searchHistory", true); Verwijdert : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.session", "6C78A0D5CB8196A1665F1B2B05409A19F16F[...] Verwijdert : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.showFirstLaunchOptions", false); Verwijdert : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.tb_lang", "en"); Verwijdert : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.tool_id", "62781"); Verwijdert : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.user_id", "62166435"); Verwijdert : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.user_key", "712c0dbaef97a6fd3975ac0c17cbef2a547[...] Verwijdert : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.user_layouts", "62781"); Verwijdert : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.user_lnames", "Gamers%20Unite%21%20Snag%20Bar")[...] Verwijdert : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.xml_service_url", "64e3a27980eeceb34248bc3e680b[...] Verwijdert : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.yahooSearch", true); Verwijdert : user_pref("sweetim.toolbar.UserSelectedSaveSettings", "true"); Verwijdert : user_pref("sweetim.toolbar.Visibility.VisibilityGuardLastUnHide", "1354665645531"); Verwijdert : user_pref("sweetim.toolbar.Visibility.enable", "true"); Verwijdert : user_pref("sweetim.toolbar.Visibility.intervaldays", "7"); Verwijdert : user_pref("sweetim.toolbar.cargo", "3.1010000.10011"); Verwijdert : user_pref("sweetim.toolbar.cda.DisableOveride.enable", "true"); Verwijdert : user_pref("sweetim.toolbar.cda.HideOveride.enable", "true"); Verwijdert : user_pref("sweetim.toolbar.cda.RemoveOveride.enable", "true"); Verwijdert : user_pref("sweetim.toolbar.cda.returnValue", "hide"); Verwijdert : user_pref("sweetim.toolbar.dialogs.0.enable", "true"); Verwijdert : user_pref("sweetim.toolbar.dialogs.0.handler", "chrome://sim_toolbar_package/content/optionsdialog-h[...] Verwijdert : user_pref("sweetim.toolbar.dialogs.0.height", "335"); Verwijdert : user_pref("sweetim.toolbar.dialogs.0.id", "id_options_dialog"); Verwijdert : user_pref("sweetim.toolbar.dialogs.0.title", "$string.config.label;"); Verwijdert : user_pref("sweetim.toolbar.dialogs.0.url", "hxxp://www.sweetim.com/simffbar/options_remote_ff.asp?la[...] Verwijdert : user_pref("sweetim.toolbar.dialogs.0.width", "761"); Verwijdert : user_pref("sweetim.toolbar.dialogs.1.enable", "true"); Verwijdert : user_pref("sweetim.toolbar.dialogs.1.handler", "chrome://sim_toolbar_package/content/exampledialog-h[...] Verwijdert : user_pref("sweetim.toolbar.dialogs.1.height", "300"); Verwijdert : user_pref("sweetim.toolbar.dialogs.1.id", "id_example_dialog"); Verwijdert : user_pref("sweetim.toolbar.dialogs.1.title", "Example (unit-test) dialog"); Verwijdert : user_pref("sweetim.toolbar.dialogs.1.url", "chrome://sim_toolbar_package/content/exampledialog.html"[...] Verwijdert : user_pref("sweetim.toolbar.dialogs.1.width", "500"); Verwijdert : user_pref("sweetim.toolbar.dialogs.2.enable", "true"); Verwijdert : user_pref("sweetim.toolbar.dialogs.2.handler", "chrome://sim_toolbar_package/content/cdadialog-handl[...] Verwijdert : user_pref("sweetim.toolbar.dialogs.2.height", "150"); Verwijdert : user_pref("sweetim.toolbar.dialogs.2.id", "id_dialog_hide_disable_remove"); Verwijdert : user_pref("sweetim.toolbar.dialogs.2.title", "Option Dialog"); Verwijdert : user_pref("sweetim.toolbar.dialogs.2.url", "hxxp://www.sweetim.com/simffbar/simcdadialog.asp"); Verwijdert : user_pref("sweetim.toolbar.dialogs.2.width", "530"); Verwijdert : user_pref("sweetim.toolbar.dnscatch.domain-blacklist", ".*.sweetim.com/.*|.*.facebook.com/.*|.*.goog[...] Verwijdert : user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0"); Verwijdert : user_pref("sweetim.toolbar.keywordUrlGuard.enable", "true"); Verwijdert : user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7"); Verwijdert : user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log"); Verwijdert : user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000"); Verwijdert : user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7"); Verwijdert : user_pref("sweetim.toolbar.mode.debug", "false"); Verwijdert : user_pref("sweetim.toolbar.newtab.created", "false"); Verwijdert : user_pref("sweetim.toolbar.newtab.enable", "true"); Verwijdert : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "appbario8 Customized Web Sea[...] Verwijdert : user_pref("sweetim.toolbar.previous.browser.search.defaulturl", "hxxp://search.conduit.com/ResultsEx[...] Verwijdert : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "Google"); Verwijdert : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "about:home"); Verwijdert : user_pref("sweetim.toolbar.previous.keyword.URL", "hxxp://search.avg.com/route/?d=4df6acfe&v=7.005.0[...] Verwijdert : user_pref("sweetim.toolbar.rc.url", "hxxp://www.sweetim.com/simffbar/rc.html?toolbar_version=$ITEM_V[...] Verwijdert : user_pref("sweetim.toolbar.scripts.0.addcontextdiv", "true"); Verwijdert : user_pref("sweetim.toolbar.scripts.0.callback", "simVerification"); Verwijdert : user_pref("sweetim.toolbar.scripts.0.domain-blacklist", ""); Verwijdert : user_pref("sweetim.toolbar.scripts.0.domain-whitelist", "hxxp://(www.|apps.)?facebook\\.com.*"); Verwijdert : user_pref("sweetim.toolbar.scripts.0.elementid", "id_script_sim_fb"); Verwijdert : user_pref("sweetim.toolbar.scripts.0.enable", "true"); Verwijdert : user_pref("sweetim.toolbar.scripts.0.id", "id_script_fb"); Verwijdert : user_pref("sweetim.toolbar.scripts.0.url", "hxxp://sc.sweetim.com/apps/in/fb/infb.js"); Verwijdert : user_pref("sweetim.toolbar.scripts.1.addcontextdiv", "true"); Verwijdert : user_pref("sweetim.toolbar.scripts.1.callback", "simVerification"); Verwijdert : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", ""); Verwijdert : user_pref("sweetim.toolbar.scripts.1.domain-whitelist", "hxxps://(www.|apps.)?facebook\\.com.*"); Verwijdert : user_pref("sweetim.toolbar.scripts.1.elementid", "id_script_sim_fb"); Verwijdert : user_pref("sweetim.toolbar.scripts.1.enable", "false"); Verwijdert : user_pref("sweetim.toolbar.scripts.1.id", "id_script_fb_hxxpS"); Verwijdert : user_pref("sweetim.toolbar.scripts.1.url", "hxxps://sc.sweetim.com/apps/in/fb/infb.js"); Verwijdert : user_pref("sweetim.toolbar.scripts.2.addcontextdiv", "false"); Verwijdert : user_pref("sweetim.toolbar.scripts.2.callback", ""); Verwijdert : user_pref("sweetim.toolbar.scripts.2.domain-blacklist", ".*.google..*|.*.bing..*|.*.live..*|.*.msn..[...] Verwijdert : user_pref("sweetim.toolbar.scripts.2.domain-whitelist", ""); Verwijdert : user_pref("sweetim.toolbar.scripts.2.elementid", "id_predict_include_script"); Verwijdert : user_pref("sweetim.toolbar.scripts.2.enable", "false"); Verwijdert : user_pref("sweetim.toolbar.scripts.2.id", "id_script_prad"); Verwijdert : user_pref("sweetim.toolbar.scripts.2.url", "hxxp://cdn1.certified-apps.com/scripts/shared/enable.js?[...] Verwijdert : user_pref("sweetim.toolbar.search.external", "<?xml version=\"1.0\"?><TOOLBAR><EXTERNAL_SEARCH engin[...] Verwijdert : user_pref("sweetim.toolbar.search.history.capacity", "10"); Verwijdert : user_pref("sweetim.toolbar.searchguard.enable", "false"); Verwijdert : user_pref("sweetim.toolbar.searchguard.initialized_by_rc", "true"); Verwijdert : user_pref("sweetim.toolbar.simapp_id", "{2F84BB36-0846-11E2-9A33-6C626D981E70}"); Verwijdert : user_pref("sweetim.toolbar.urls.homepage", "hxxp://home.sweetim.com/?crg=3.1010000.10011&barid={2F84[...] Verwijdert : user_pref("sweetim.toolbar.version", "1.7.0.3"); Verwijdert : user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_blackList", "form=CONTLB|babsrc=too[...] Verwijdert : user_pref("{336D0C35-8A85-403a-B9D2-65C292C39087}.ScriptData_WSG_whiteList", "{\"search.babylon.com\[...] -\\ Google Chrome v24.0.1312.56 File : C:\Users\MEDION\AppData\Local\Google\Chrome\User Data\Default\Preferences [OK] De file bevat geen enkele ongeoorloofde invoer. ************************* AdwCleaner[s1].txt - [55574 octets] - [26/01/2013 17:53:33] ########## EOF - C:\AdwCleaner[s1].txt - [55635 octets] ##########

Top! Dankjewel! Moet ik die map dan maar gewoon laten staan? Enne, ik durf het bijna niet te vragen, maar weet je misschien ook hoe je MyStart er weer uit krijgt? Ben er al uren mee bezig geweest.... Dit is trouwens de eerste keer in 15 jaar, dat ik dit soort dingen heb :-( Vriendelijke groeten, YJB11

Haihai, moest even een dagje weg. Heb uitgevoerd wat je schreef en dit zijn de nieuwe logs: Malwarebytes Anti-Malware (-evaluatieversie-) 1.70.0.1100 Malwarebytes : Free anti-malware download Databaseversie: v2013.01.25.07 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 9.0.8112.16421 MEDION :: MEDION-PC [administrator] Bescherming: Ingeschakeld 25-1-2013 18:20:24 mbam-log-2013-01-25 (18-20-24).txt Scan type: Snelle scan Ingeschakelde scan opties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM Uitgeschakelde scan opties: P2P Objecten gescand: 249476 Verstreken tijd: 2 minuut/minuten, 12 seconde(n) Geheugenprocessen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Geheugenmodulen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Registersleutels gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Registerwaarden gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Registerdata gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Mappen gedetecteerd: 1 C:\ProgramData\IBUpdaterService (PUP.InstallBrain) -> Succesvol in quarantaine geplaatst en verwijderd. Bestanden gedetecteerd: 1 C:\ProgramData\IBUpdaterService\repository.xml (PUP.InstallBrain) -> Succesvol in quarantaine geplaatst en verwijderd. (einde) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 18:26:50, on 25-1-2013 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v9.00 (9.00.8112.16457) Boot mode: Normal Running processes: C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe C:\Users\MEDION\AppData\Roaming\Dropbox\bin\Dropbox.exe C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe C:\Program Files (x86)\AVG Secure Search\vprot.exe C:\Program Files (x86)\AVG\AVG2013\avgui.exe D:\ProgramData\Boinc\projects\einstein.phys.uwm.edu\einsteinbinary_BRP4_1.22_windows_intelx86__BRP4SSE.exe D:\ProgramData\Boinc\projects\boinc.bakerlab.org_rosetta\minirosetta_3.45_windows_x86_64.exe D:\ProgramData\Boinc\projects\boinc.bakerlab.org_rosetta\minirosetta_3.45_windows_x86_64.exe D:\ProgramData\Boinc\projects\boinc.bakerlab.org_rosetta\minirosetta_3.45_windows_x86_64.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll O2 - BHO: RoboForm BHO - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll O3 - Toolbar: (no name) - {D0F4A166-B8D4-48b8-9D63-80849FE137CB} - (no file) O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll O4 - HKLM\..\Run: [iAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" O4 - HKLM\..\Run: [ConnectionCenter] "C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup O4 - HKLM\..\Run: [Reader Library Launcher] C:\Program Files (x86)\Sony\Reader\Data\bin\launcher\Reader Library Launcher.exe O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG Secure Search\vprot.exe" O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY O4 - HKLM\..\Run: [CanonSolutionMenuEx] C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon O4 - HKLM\..\Run: [QuickTime Plugin Install] C:\Program Files (x86)\QuickTime\Plugins\DeleteMe1.exe O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\RunOnce: [Malwarebytes Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe" O4 - HKCU\..\Run: [RoboForm] "C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe" O4 - HKCU\..\Run: [457433CDB496691E1CA028D09E64E69E4FA5889F._service_run] "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=service O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - Startup: Dropbox.lnk = MEDION\AppData\Roaming\Dropbox\bin\Dropbox.exe O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Formulieren Invullen - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComFillForms.html O8 - Extra context menu item: Formulieren opslaan - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComSavePass.html O8 - Extra context menu item: RoboForm Werkbalk - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll O9 - Extra button: Formulier Invullen - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll O9 - Extra 'Tools' menuitem: Formulieren Invullen - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll O9 - Extra button: Opslaan - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll O9 - Extra 'Tools' menuitem: Formulieren opslaan - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll O9 - Extra button: Show Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll O9 - Extra 'Tools' menuitem: RoboForm Werkbalk - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\14.0.1\ViProtocol.dll O18 - Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter hijack: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O20 - AppInit_DLLs: c:\progra~3\sideki~1\22513~1.159\{6f06c~1\sskmngr.dll O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing) O23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files (x86)\AVG\AVG10\Toolbar\ToolbarBroker.exe O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgfws.exe O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Intel® Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Sidekick Manager - Unknown owner - C:\ProgramData\Sidekick Manager\2.2.513.159\{6f06cdeb-5de2-4520-aef2-1aa556ca7a6b}\sskmngr.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: Sony SCSI Helper Service - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\Fsk\SonySCSIHelperService.exe O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: AVG PC TuneUp Service (TuneUp.UtilitiesSvc) - AVG - C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: UMVPFSrv - Logitech Inc. - C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: vToolbarUpdater14.0.1 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.0.1\ToolbarUpdater.exe O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 18581 bytes

Haihai, wat fijn dat jullie me helpen! Hier is de log: Logfile of Trend Micro HijackThis v2.0.4Scan saved at 21:19:36, on 23-1-2013 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v9.00 (9.00.8112.16457) Boot mode: Normal Running processes: C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe C:\Program Files (x86)\PowerISO\PWRISOVM.EXE C:\Program Files (x86)\AVG Secure Search\vprot.exe C:\Program Files (x86)\AVG\AVG2013\avgui.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\ProgramData\Sidekick Manager\2.2.513.159\{6f06cdeb-5de2-4520-aef2-1aa556ca7a6b}\sskmngr.exe C:\Program Files (x86)\AVG\AVG2013\avgcfgex.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Google\Chrome\Application\chrome.exe C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: (no name) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file) R3 - URLSearchHook: uTorrentBar_NL Toolbar - {87775fdb-6972-41f9-ae51-8326e38cb206} - C:\Program Files (x86)\uTorrentBar_NL\prxtbuTo0.dll R3 - URLSearchHook: (no name) - {0cc09160-108c-4759-bab1-5c12c216e005} - (no file) F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file) O2 - BHO: RoboForm BHO - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll O2 - BHO: uTorrentBar_NL - {87775fdb-6972-41f9-ae51-8326e38cb206} - C:\Program Files (x86)\uTorrentBar_NL\prxtbuTo0.dll O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\14.0.2.14\AVG Secure Search_toolbar.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file) O3 - Toolbar: uTorrentBar_NL Toolbar - {87775fdb-6972-41f9-ae51-8326e38cb206} - C:\Program Files (x86)\uTorrentBar_NL\prxtbuTo0.dll O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG Secure Search\14.0.2.14\AVG Secure Search_toolbar.dll O3 - Toolbar: (no name) - {D0F4A166-B8D4-48b8-9D63-80849FE137CB} - (no file) O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll O4 - HKLM\..\Run: [iAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" O4 - HKLM\..\Run: [ConnectionCenter] "C:\Program Files (x86)\Citrix\ICA Client\concentr.exe" /startup O4 - HKLM\..\Run: [Reader Library Launcher] C:\Program Files (x86)\Sony\Reader\Data\bin\launcher\Reader Library Launcher.exe O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG Secure Search\vprot.exe" O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2013\avgui.exe" /TRAYONLY O4 - HKLM\..\Run: [CanonSolutionMenuEx] C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon O4 - HKLM\..\Run: [QuickTime Plugin Install] C:\Program Files (x86)\QuickTime\Plugins\DeleteMe1.exe O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKCU\..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe" O4 - HKCU\..\Run: [RoboForm] "C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe" O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - Startup: Dropbox.lnk = MEDION\AppData\Roaming\Dropbox\bin\Dropbox.exe O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Formulieren Invullen - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComFillForms.html O8 - Extra context menu item: Formulieren opslaan - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComSavePass.html O8 - Extra context menu item: RoboForm Werkbalk - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O9 - Extra button: eBay.nl - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - http://rover.ebay.com/rover/1/1346-72745-17534-1/4 (file missing) O9 - Extra 'Tools' menuitem: eBay.nl - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - http://rover.ebay.com/rover/1/1346-72745-17534-1/4 (file missing) O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll O9 - Extra button: Formulier Invullen - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll O9 - Extra 'Tools' menuitem: Formulieren Invullen - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll O9 - Extra button: Opslaan - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll O9 - Extra 'Tools' menuitem: Formulieren opslaan - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll O9 - Extra button: Show Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll O9 - Extra 'Tools' menuitem: RoboForm Werkbalk - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: eBay.nl - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - http://rover.ebay.com/rover/1/1346-72745-17534-1/4 (file missing) (HKCU) O9 - Extra 'Tools' menuitem: eBay.nl - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - http://rover.ebay.com/rover/1/1346-72745-17534-1/4 (file missing) (HKCU) O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file) O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\14.0.1\ViProtocol.dll O18 - Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O18 - Filter hijack: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll O20 - AppInit_DLLs: c:\progra~3\sideki~1\22513~1.159\{6f06c~1\sskmngr.dll O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing) O23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files (x86)\AVG\AVG10\Toolbar\ToolbarBroker.exe O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgfws.exe O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Intel® Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Sidekick Manager - Unknown owner - C:\ProgramData\Sidekick Manager\2.2.513.159\{6f06cdeb-5de2-4520-aef2-1aa556ca7a6b}\sskmngr.exe O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: Sony SCSI Helper Service - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\Fsk\SonySCSIHelperService.exe O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: AVG PC TuneUp Service (TuneUp.UtilitiesSvc) - AVG - C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: UMVPFSrv - Logitech Inc. - C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: vToolbarUpdater14.0.1 - Unknown owner - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\14.0.1\ToolbarUpdater.exe O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 19368 bytes

Hallo, ik heb sinds kort een map sh4ldr op mijn c schijf staan. AVG zegt er niets van, maar het lijkt mij niets... Weet iemand of en hoe ik dit kwijt raak?