seal40

Alvast beter. Maar heb zelf met wat hulp van het internet ook in het opstartmenu "msconfig" enkele programma's uitgeschakel die steeds mee werden opgestart maar nooit echt gebruikt werden. Dus hierbij bedankt voor alle hulp en dan denk ik dat de discussie als opgelost beschouwd mag worden tenzij u nog iets negatief gevonden hebt in het laatste logje. Grtz

Hallo, hier is het logje: # AdwCleaner v1.801 - Logfile created 08/23/2012 at 21:37:08 # Updated 14/08/2012 by Xplode # Operating system : Windows Vista Home Premium Service Pack 2 (32 bits) # User : Larry - PC001 # Boot Mode : Normal # Running from : C:\Users\Larry\Bluetooth Software\Desktop\adwcleaner.exe # Option [Delete] ***** [services] ***** Stopped & Deleted : vToolbarUpdater11.2.0 ***** [Files / Folders] ***** Folder Deleted : C:\Inbox Folder Deleted : C:\Users\Larry\AppData\Local\AVG Secure Search Folder Deleted : C:\Users\Demi Verborgt\AppData\Local\AVG Secure Search Folder Deleted : C:\Users\PC\AppData\LocalLow\AskToolbar Folder Deleted : C:\Users\Larry\AppData\LocalLow\AVG Secure Search Folder Deleted : C:\Users\Larry\AppData\LocalLow\Conduit Folder Deleted : C:\Users\Larry\AppData\LocalLow\ShoppingReport2 Folder Deleted : C:\Users\Demi Verborgt\AppData\LocalLow\PriceGong Folder Deleted : C:\Users\Larry\AppData\Roaming\Mozilla\Firefox\Profiles\gwtu5uai.default\Conduit Folder Deleted : C:\Users\Larry\AppData\Roaming\Mozilla\Firefox\Profiles\gwtu5uai.default\CT2405280 Folder Deleted : C:\Users\Larry\AppData\Roaming\Mozilla\Firefox\Profiles\gwtu5uai.default\extensions\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} Folder Deleted : C:\ProgramData\AVG Secure Search Folder Deleted : C:\Program Files\AVG Secure Search Folder Deleted : C:\Program Files\Conduit Folder Deleted : C:\Program Files\Common Files\AVG Secure Search File Deleted : C:\Users\Larry\AppData\Roaming\Mozilla\Firefox\Profiles\gwtu5uai.default\searchplugins\Conduit.xml File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\avg-secure-search.xml ***** [Registry] ***** [*] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2405280 Key Deleted : HKCU\Software\AppDataLow\Software\Conduit Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong Key Deleted : HKCU\Software\AppDataLow\Software\ShoppingReport2 Key Deleted : HKCU\Software\AVG Secure Search Key Deleted : HKCU\Software\Conduit Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ShoppingReport2 Key Deleted : HKCU\Software\Softonic Key Deleted : HKLM\SOFTWARE\AVG Secure Search Key Deleted : HKLM\SOFTWARE\Classes\AppID\PriceGongIE.DLL Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1 Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1 Key Deleted : HKLM\SOFTWARE\Classes\PriceFactorIE.PriceGongBHO Key Deleted : HKLM\SOFTWARE\Classes\PriceFactorIE.PriceGongBHO.1 Key Deleted : HKLM\SOFTWARE\Classes\PriceGongIE.PriceGongCtrl Key Deleted : HKLM\SOFTWARE\Classes\PriceGongIE.PriceGongCtrl.1 Key Deleted : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol Key Deleted : HKLM\SOFTWARE\Classes\S Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1 Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1 Key Deleted : HKLM\SOFTWARE\Conduit Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar] ***** [Registre - GUID] ***** Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{835315FC-1BF6-4CA9-80CD-F6C158D40692} Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D2A2595C-4FE4-4315-AA9B-19DBD6271B71} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A1F1ECD3-4806-44C6-A869-F0DADF11C57C} Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{8B3372D0-09F0-41A5-8D9B-134E148672FB} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8} Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94} Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706} Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E} Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233} Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B} Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC} Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233} Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706} Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}] Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}] Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}] ***** [internet Browsers] ***** -\\ Internet Explorer v9.0.8112.16421 [OK] Registry is clean. -\\ Mozilla Firefox v14.0.1 (nl) Profile name : default File : C:\Users\PC\AppData\Roaming\Mozilla\Firefox\Profiles\0sm40t3j.default\prefs.js Deleted : user_pref("avg.install.installDirPath", "C:\\ProgramData\\AVG Secure Search\\11.1.0.12"); Deleted : user_pref("browser.search.defaultenginename", "AVG Secure Search"); Deleted : user_pref("browser.search.selectedEngine", "AVG Secure Search"); Deleted : user_pref("keyword.URL", "hxxp://isearch.avg.com/search?cid=%7Bf2456ea1-e364-4ea2-9a8c-2fafa579e89a%[...] Profile name : default File : C:\Users\Larry\AppData\Roaming\Mozilla\Firefox\Profiles\gwtu5uai.default\prefs.js Deleted : user_pref("CT2405280.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); Deleted : user_pref("CT2405280.CTID", "CT2405280"); Deleted : user_pref("CT2405280.CurrentServerDate", "11-5-2011"); Deleted : user_pref("CT2405280.DialogsAlignMode", "LTR"); Deleted : user_pref("CT2405280.DownloadReferralCookieData", ""); Deleted : user_pref("CT2405280.EMailNotifierPollDate", "Wed May 11 2011 09:42:50 GMT+0200 (Romance (zomertijd)[...] Deleted : user_pref("CT2405280.FeedLastCount1783261708582779529", 2218); Deleted : user_pref("CT2405280.FeedPollDate129212394466815234", "Thu Aug 19 2010 20:31:14 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466815240", "Thu Aug 19 2010 20:31:14 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466815246", "Thu Aug 19 2010 20:31:15 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466815252", "Thu Aug 19 2010 20:31:15 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466815258", "Thu Aug 19 2010 20:31:15 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466815264", "Thu Aug 19 2010 20:31:15 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466815270", "Thu Aug 19 2010 20:31:15 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466815276", "Thu Aug 19 2010 20:31:15 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466815282", "Thu Aug 19 2010 20:31:15 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466815288", "Thu Aug 19 2010 20:31:15 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466815294", "Thu Aug 19 2010 20:31:16 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466815300", "Thu Aug 19 2010 20:31:16 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466815306", "Thu Aug 19 2010 20:31:16 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466815312", "Thu Aug 19 2010 20:31:16 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466971568", "Thu Aug 19 2010 20:31:16 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466971574", "Thu Aug 19 2010 20:31:16 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466971580", "Thu Aug 19 2010 20:31:16 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466971586", "Thu Aug 19 2010 20:31:16 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466971592", "Thu Aug 19 2010 20:31:17 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466971598", "Thu Aug 19 2010 20:31:17 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466971604", "Thu Aug 19 2010 20:31:18 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466971610", "Thu Aug 19 2010 20:31:18 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466971616", "Thu Aug 19 2010 20:31:18 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466971622", "Thu Aug 19 2010 20:31:18 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466971628", "Thu Aug 19 2010 20:31:18 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466971634", "Thu Aug 19 2010 20:31:18 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466971640", "Thu Aug 19 2010 20:31:18 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466971646", "Thu Aug 19 2010 20:31:18 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466971652", "Thu Aug 19 2010 20:31:18 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466971658", "Thu Aug 19 2010 20:31:18 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466971664", "Thu Aug 19 2010 20:31:18 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466971670", "Thu Aug 19 2010 20:31:19 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466971676", "Thu Aug 19 2010 20:31:19 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466971682", "Thu Aug 19 2010 20:31:19 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466971688", "Thu Aug 19 2010 20:31:19 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466971694", "Thu Aug 19 2010 20:31:19 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466971700", "Thu Aug 19 2010 20:31:20 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394466971706", "Thu Aug 19 2010 20:31:20 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394467127962", "Thu Aug 19 2010 20:31:20 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394467127968", "Thu Aug 19 2010 20:31:20 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394467127974", "Thu Aug 19 2010 20:31:20 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394467127980", "Thu Aug 19 2010 20:31:20 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394467127986", "Thu Aug 19 2010 20:31:20 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394467127992", "Thu Aug 19 2010 20:31:20 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394467127998", "Thu Aug 19 2010 20:31:20 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394467128004", "Thu Aug 19 2010 20:31:20 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394467128010", "Thu Aug 19 2010 20:31:21 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394467128016", "Thu Aug 19 2010 20:31:21 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394467128022", "Thu Aug 19 2010 20:31:21 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394467128028", "Thu Aug 19 2010 20:31:21 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394467128034", "Thu Aug 19 2010 20:31:21 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129212394467128040", "Thu Aug 19 2010 20:31:21 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392415092", "Tue Mar 29 2011 23:19:42 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392415098", "Tue Mar 29 2011 23:19:42 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392415104", "Tue Mar 29 2011 23:19:42 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392415110", "Tue Mar 29 2011 23:19:44 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392415116", "Tue Mar 29 2011 23:19:44 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392415122", "Tue Mar 29 2011 23:19:45 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392571378", "Tue Mar 29 2011 23:19:45 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392571384", "Tue Mar 29 2011 23:19:45 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392571390", "Tue Mar 29 2011 23:19:45 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392571396", "Tue Mar 29 2011 23:19:46 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392571402", "Tue Mar 29 2011 23:19:46 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392571408", "Tue Mar 29 2011 23:19:46 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392571414", "Tue Mar 29 2011 23:19:46 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392571420", "Tue Mar 29 2011 23:19:46 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392571426", "Tue Mar 29 2011 23:19:46 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392571432", "Tue Mar 29 2011 23:19:46 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392571438", "Tue Mar 29 2011 23:19:46 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392571444", "Tue Mar 29 2011 23:19:46 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392727700", "Tue Mar 29 2011 23:19:47 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392727706", "Tue Mar 29 2011 23:19:47 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392727712", "Tue Mar 29 2011 23:19:47 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392727718", "Tue Mar 29 2011 23:19:47 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392727724", "Tue Mar 29 2011 23:19:47 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392727730", "Tue Mar 29 2011 23:19:47 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392727736", "Tue Mar 29 2011 23:19:47 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392727742", "Tue Mar 29 2011 23:19:47 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392727748", "Tue Mar 29 2011 23:19:47 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392727754", "Tue Mar 29 2011 23:19:47 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392727760", "Tue Mar 29 2011 23:19:48 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392727766", "Tue Mar 29 2011 23:19:48 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392727772", "Tue Mar 29 2011 23:19:48 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392727778", "Tue Mar 29 2011 23:19:48 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392727784", "Tue Mar 29 2011 23:19:48 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392727790", "Tue Mar 29 2011 23:19:49 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392727796", "Tue Mar 29 2011 23:19:49 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392727802", "Tue Mar 29 2011 23:19:49 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392727808", "Tue Mar 29 2011 23:19:49 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392727814", "Tue Mar 29 2011 23:19:49 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392727820", "Tue Mar 29 2011 23:19:49 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392727826", "Tue Mar 29 2011 23:19:49 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392727832", "Tue Mar 29 2011 23:19:49 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392727838", "Tue Mar 29 2011 23:19:49 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392727844", "Tue Mar 29 2011 23:19:49 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392727850", "Tue Mar 29 2011 23:19:50 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392727856", "Tue Mar 29 2011 23:19:50 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392727862", "Tue Mar 29 2011 23:19:50 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392727868", "Tue Mar 29 2011 23:19:50 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392727874", "Tue Mar 29 2011 23:19:50 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392727880", "Tue Mar 29 2011 23:19:50 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392727886", "Tue Mar 29 2011 23:19:50 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392727892", "Tue Mar 29 2011 23:19:50 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedPollDate129255180392727898", "Tue Mar 29 2011 23:19:50 GMT+0200 (Romance (z[...] Deleted : user_pref("CT2405280.FeedTTL129212394466815246", 15); Deleted : user_pref("CT2405280.FeedTTL129212394466815258", 60); Deleted : user_pref("CT2405280.FeedTTL129212394466815312", 60); Deleted : user_pref("CT2405280.FeedTTL129212394466971568", 15); Deleted : user_pref("CT2405280.FeedTTL129212394466971574", 2); Deleted : user_pref("CT2405280.FeedTTL129212394466971580", 15); Deleted : user_pref("CT2405280.FeedTTL129212394466971592", 30); Deleted : user_pref("CT2405280.FeedTTL129212394466971598", 5); Deleted : user_pref("CT2405280.FeedTTL129212394466971604", 5); Deleted : user_pref("CT2405280.FeedTTL129212394466971616", 5); Deleted : user_pref("CT2405280.FeedTTL129212394466971628", 30); Deleted : user_pref("CT2405280.FeedTTL129212394466971634", 30); Deleted : user_pref("CT2405280.FeedTTL129212394466971658", 15); Deleted : user_pref("CT2405280.FeedTTL129212394466971670", 15); Deleted : user_pref("CT2405280.FeedTTL129212394466971676", 15); Deleted : user_pref("CT2405280.FeedTTL129212394466971682", 15); Deleted : user_pref("CT2405280.FeedTTL129212394466971700", 1440); Deleted : user_pref("CT2405280.FeedTTL129212394467127980", 10); Deleted : user_pref("CT2405280.FeedTTL129212394467127998", 5); Deleted : user_pref("CT2405280.FeedTTL129255180392415104", 15); Deleted : user_pref("CT2405280.FeedTTL129255180392415116", 60); Deleted : user_pref("CT2405280.FeedTTL129255180392571420", 60); Deleted : user_pref("CT2405280.FeedTTL129255180392571426", 15); Deleted : user_pref("CT2405280.FeedTTL129255180392571432", 2); Deleted : user_pref("CT2405280.FeedTTL129255180392571438", 15); Deleted : user_pref("CT2405280.FeedTTL129255180392727700", 2); Deleted : user_pref("CT2405280.FeedTTL129255180392727706", 5); Deleted : user_pref("CT2405280.FeedTTL129255180392727712", 5); Deleted : user_pref("CT2405280.FeedTTL129255180392727724", 5); Deleted : user_pref("CT2405280.FeedTTL129255180392727736", 30); Deleted : user_pref("CT2405280.FeedTTL129255180392727742", 30); Deleted : user_pref("CT2405280.FeedTTL129255180392727748", 2); Deleted : user_pref("CT2405280.FeedTTL129255180392727766", 15); Deleted : user_pref("CT2405280.FeedTTL129255180392727778", 15); Deleted : user_pref("CT2405280.FeedTTL129255180392727784", 15); Deleted : user_pref("CT2405280.FeedTTL129255180392727790", 15); Deleted : user_pref("CT2405280.FeedTTL129255180392727808", 1440); Deleted : user_pref("CT2405280.FeedTTL129255180392727838", 10); Deleted : user_pref("CT2405280.FeedTTL129255180392727856", 5); Deleted : user_pref("CT2405280.FirstServerDate", "20-7-2010"); Deleted : user_pref("CT2405280.FirstTime", true); Deleted : user_pref("CT2405280.FirstTimeFF3", true); Deleted : user_pref("CT2405280.FirstTimeSettingsDone", true); Deleted : user_pref("CT2405280.FixPageNotFoundErrors", true); Deleted : user_pref("CT2405280.GroupingServerCheckInterval", 1440); Deleted : user_pref("CT2405280.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); Deleted : user_pref("CT2405280.Initialize", true); Deleted : user_pref("CT2405280.InitializeCommonPrefs", true); Deleted : user_pref("CT2405280.InstallationAndCookieDataSentCount", 3); Deleted : user_pref("CT2405280.InstallationType", "UnknownIntegration"); Deleted : user_pref("CT2405280.InstalledDate", "Tue Jul 20 2010 12:50:20 GMT+0200 (Romance (zomertijd))"); Deleted : user_pref("CT2405280.InvalidateCache", false); Deleted : user_pref("CT2405280.IsGrouping", false); Deleted : user_pref("CT2405280.IsMulticommunity", false); Deleted : user_pref("CT2405280.IsOpenThankYouPage", false); Deleted : user_pref("CT2405280.IsOpenUninstallPage", true); Deleted : user_pref("CT2405280.LanguagePackLastCheckTime", "Wed May 11 2011 09:42:52 GMT+0200 (Romance (zomert[...] Deleted : user_pref("CT2405280.LanguagePackReloadIntervalMM", 1440); Deleted : user_pref("CT2405280.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...] Deleted : user_pref("CT2405280.LastLogin_2.7.1.3", "Wed May 11 2011 09:42:52 GMT+0200 (Romance (zomertijd))"); Deleted : user_pref("CT2405280.LatestVersion", "3.2.5.2"); Deleted : user_pref("CT2405280.Locale", "en-us"); Deleted : user_pref("CT2405280.LoginCache", 4); Deleted : user_pref("CT2405280.MCDetectTooltipHeight", "83"); Deleted : user_pref("CT2405280.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); Deleted : user_pref("CT2405280.MCDetectTooltipWidth", "295"); Deleted : user_pref("CT2405280.RadioIsPodcast", false); Deleted : user_pref("CT2405280.RadioLastCheckTime", "Wed May 11 2011 09:42:53 GMT+0200 (Romance (zomertijd))")[...] Deleted : user_pref("CT2405280.RadioLastUpdateIPServer", "3"); Deleted : user_pref("CT2405280.RadioLastUpdateServer", "129167775315800000"); Deleted : user_pref("CT2405280.RadioMediaID", "20503713"); Deleted : user_pref("CT2405280.RadioMediaType", "Media Player"); Deleted : user_pref("CT2405280.RadioMenuSelectedID", "EBRadioMenu_CT240528020503713"); Deleted : user_pref("CT2405280.RadioStationName", "Virgin%20Radio%20Classic%20Rock"); Deleted : user_pref("CT2405280.RadioStationURL", "hxxp://www.smgradio.com/core/audio/wmp/live.asx?service=vcbb[...] Deleted : user_pref("CT2405280.SavedHomepage", "hxxp://www.google.be/"); Deleted : user_pref("CT2405280.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER[...] Deleted : user_pref("CT2405280.SearchFromAddressBarIsInit", true); Deleted : user_pref("CT2405280.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT240[...] Deleted : user_pref("CT2405280.SearchInNewTabEnabled", true); Deleted : user_pref("CT2405280.SearchInNewTabIntervalMM", 1440); Deleted : user_pref("CT2405280.SearchInNewTabLastCheckTime", "Wed May 11 2011 09:42:50 GMT+0200 (Romance (zome[...] Deleted : user_pref("CT2405280.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...] Deleted : user_pref("CT2405280.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...] Deleted : user_pref("CT2405280.SettingsCheckIntervalMin", 120); Deleted : user_pref("CT2405280.SettingsLastCheckTime", "Wed May 11 2011 09:42:48 GMT+0200 (Romance (zomertijd)[...] Deleted : user_pref("CT2405280.SettingsLastUpdate", "1300903796"); Deleted : user_pref("CT2405280.ThirdPartyComponentsInterval", 504); Deleted : user_pref("CT2405280.ThirdPartyComponentsLastCheck", "Wed May 11 2011 09:42:48 GMT+0200 (Romance (zo[...] Deleted : user_pref("CT2405280.ThirdPartyComponentsLastUpdate", "1279117606"); Deleted : user_pref("CT2405280.TrusteLinkUrl", "hxxp://trust.conduit.com/EB_ORIGINAL_CTID"); Deleted : user_pref("CT2405280.UserID", "UN47060458677062655"); Deleted : user_pref("CT2405280.ValidationData_Search", 2); Deleted : user_pref("CT2405280.ValidationData_Toolbar", 2); Deleted : user_pref("CT2405280.WeatherNetwork", ""); Deleted : user_pref("CT2405280.WeatherPollDate", "Wed May 11 2011 09:42:54 GMT+0200 (Romance (zomertijd))"); Deleted : user_pref("CT2405280.WeatherUnit", "C"); Deleted : user_pref("CT2405280.alertChannelId", "799768"); Deleted : user_pref("CT2405280.backendstorage._fb_dailyactivity", "31333032323131363135393635"); Deleted : user_pref("CT2405280.backendstorage._fb_lifetimesent", "54525545"); Deleted : user_pref("CT2405280.backendstorage.facebook_ctid_connect_send", "73656E646564"); Deleted : user_pref("CT2405280.backendstorage.gs_dailyactivity", "31333035303939373738303632"); Deleted : user_pref("CT2405280.backendstorage.gs_lifetimesent", "54525545"); Deleted : user_pref("CT2405280.backendstorage.ytapp_dailyactivity", "31333035303939373738383833"); Deleted : user_pref("CT2405280.backendstorage.ytapp_lifetimesent", "54525545"); Deleted : user_pref("CT2405280.clientLogIsEnabled", true); Deleted : user_pref("CT2405280.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asm[...] Deleted : user_pref("CT2405280.myStuffEnabled", true); Deleted : user_pref("CT2405280.myStuffPublihserMinWidth", 400); Deleted : user_pref("CT2405280.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...] Deleted : user_pref("CT2405280.myStuffServiceIntervalMM", 1440); Deleted : user_pref("CT2405280.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...] Deleted : user_pref("CT2405280.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Reg[...] Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://www.bing.com/search?FORM=IEFM1&q=[...] Deleted : user_pref("CommunityToolbar.ToolbarsList", "CT2405280"); Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT2405280"); Deleted : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Tue Mar 29 2011 23:19:44 GMT+0200 (Rom[...] Deleted : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2405280"); Deleted : user_pref("avg.install.installDirPath", "C:\\ProgramData\\AVG Secure Search\\11.1.0.12"); Deleted : user_pref("browser.search.defaultenginename", "AVG Secure Search"); Deleted : user_pref("browser.search.defaultthis.engineName", "Softonic-Eng7 Customized Web Search"); Deleted : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2405280&Sea[...] Deleted : user_pref("keyword.URL", "hxxp://isearch.avg.com/search?cid=%7Bb2437268-7a14-4a0e-a065-2033d5f52d85%[...] ************************* AdwCleaner[R1].txt - [29241 octets] - [23/08/2012 21:33:25] AdwCleaner[s1].txt - [29819 octets] - [23/08/2012 21:37:08] ########## EOF - C:\AdwCleaner[s1].txt - [29948 octets] ##########

Bedankt, deze simpele oplossing werkte wel. Als admin kunnen starten via program files met resultaat hieronder: Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 18:17:42, on 23/08/2012 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v9.00 (9.00.8112.16421) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Program Files\Windows Defender\MSASCui.exe C:\Windows\RtHDVCpl.exe C:\Windows\BisonCam\BisonHK.exe C:\Windows\BisonCam\BsMnt.exe C:\Program Files\System Control Manager\MGSysCtrl.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE C:\Program Files\AVG\AVG8\avgtray.exe C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe C:\Program Files\AVG Secure Search\vprot.exe C:\Program Files\Samsung\Kies\KiesTrayAgent.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe C:\Windows\ehome\ehtray.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\uTorrent\uTorrent.exe C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE C:\Windows\system32\wuauclt.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe C:\Windows\system32\conime.exe C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.msi.com.tw R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Aanmelden | Facebook R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.msi.com.tw R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = SearchAmong {searchTerms} webs search R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = O1 - Hosts: ::1 localhost O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [startCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [bisonHK] C:\Windows\BisonCam\BisonHK.exe O4 - HKLM\..\Run: [bsMnt] C:\Windows\BisonCam\BsMnt.exe O4 - HKLM\..\Run: [MGSysCtrl] C:\Program Files\System Control Manager\MGSysCtrl.exe O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [skytel] Skytel.exe O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe O4 - HKLM\..\Run: [WPCUMI] C:\Windows\system32\WpcUmi.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [Nero MediaHome 4] "C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe" /AUTORUN O4 - HKLM\..\Run: [vProt] "C:\Program Files\AVG Secure Search\vprot.exe" O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files\Samsung\Kies\KiesTrayAgent.exe O4 - HKLM\..\Run: [ROC_roc_dec12] "C:\Program Files\AVG Secure Search\ROC_roc_dec12.exe" /PROMPT /CMPID=roc_dec12 O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" O4 - HKCU\..\Run: [KiesPDLR] C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe O4 - HKCU\..\Run: [Nero MediaHome 4] "C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe" /AUTORUN O4 - HKCU\..\Run: [KiesHelper] C:\Program Files\Samsung\Kies\KiesHelper.exe /s O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-21-51771456-1125700521-3641177712-1002\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NeroMediaHomeUser.4') O4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE O8 - Extra context menu item: Afbeelding verzenden naar &Bluetooth-apparaat... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Pagina verzenden naar &Bluetooth-apparaat... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\11.2.0\ViProtocol.dll O20 - AppInit_DLLs: avgrsstx.dll O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe O23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files\AVG\AVG8\Toolbar\ToolbarBroker.exe O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: Nero MediaHome 4 Service (NeroMediaHomeService.4) - Nero AG - C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe O23 - Service: SCM Driver Daemon (NishService) - Unknown owner - C:\Program Files\System Control Manager\edd.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe O23 - Service: vToolbarUpdater11.2.0 - Unknown owner - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe -- End of file - 11492 bytes De pc lijkt terug normaal te werken alleen zou het wat sneller mogen. Vooral in het opstarten dan. Enige tips daarvoor?? Toch alvast bedankt voor alle hulp.

Bedankt voor de snelle hulp. Ik heb de stappen doorlopen en dit is het resultaat: Malwarebytes Anti-Malware (-evaluatieversie-) 1.62.0.1300 Malwarebytes : Free anti-malware download Databaseversie: v2012.08.23.04 Windows Vista Service Pack 2 x86 NTFS Internet Explorer 9.0.8112.16421 Larry :: PC001 [administrator] Realtime bescherming: Ingeschakeld 23/08/2012 14:23:51 mbam-log-2012-08-23 (14-23-51).txt Scantype: Snelle scan Ingeschakelde scanopties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM Uitgeschakelde scanopties: P2P Objecten gescand: 249884 Verstreken tijd: 16 minuut/minuten, 58 seconde(n) Geheugenprocessen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Geheugenmodulen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Registersleutels gedetecteerd: 28 HKCR\AppID\{D2083641-E57F-4eab-BB85-0582424F4A29} (Adware.HotBar.CP) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\Typelib\{B035BA6B-57CD-4F72-B545-65BE465FCAF6} (Adware.ShoppingReport2) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\Typelib\{D44FD6F0-9746-484E-B5C4-C66688393872} (Adware.ShoppingReport2) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\Interface\{0EB3F101-224A-4B2B-9E5B-DF720857529C} (Adware.ShoppingReport2) -> Succesvol in quarantaine geplaatst en verwijderd. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{BDEA95CF-F0E6-41E0-BD3D-B00F39A4E939} (Adware.ShoppingReport2) -> Succesvol in quarantaine geplaatst en verwijderd. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B58926D6-CFB0-45D2-9C28-4B5A0F0368AE} (Adware.ClickPotato) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\ClickPotatoLiteAX.info (Adware.ClickPotato) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\ClickPotatoLiteAX.info.1 (Adware.ClickPotato) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\ClickPotatoLiteAX.UserProfiles (Adware.ClickPotato) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\ClickPotatoLiteAX.UserProfiles.1 (Adware.ClickPotato) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\MenuButtonIE.ButtonIE (Adware.ClickPotato) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\MenuButtonIE.ButtonIE.1 (Adware.ClickPotato) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\ShoppingReport2.HbAx (Adware.ShopperReports) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\ShoppingReport2.HbAx.1 (Adware.ShopperReports) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\ShoppingReport2.HbInfoBand (Adware.ShopperReports) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\ShoppingReport2.HbInfoBand.1 (Adware.ShopperReports) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\ShoppingReport2.IEButton (Adware.ShopperReports) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\ShoppingReport2.IEButton.1 (Adware.ShopperReports) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\ShoppingReport2.IEButtonA (Adware.ShopperReports) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\ShoppingReport2.IEButtonA.1 (Adware.ShopperReports) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\ShoppingReport2.RprtCtrl (Adware.ShopperReports) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\ShoppingReport2.RprtCtrl.1 (Adware.ShopperReports) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\AppID\MenuButtonIE.DLL (Adware.ClickPotato) -> Succesvol in quarantaine geplaatst en verwijderd. HKCU\Software\ShoppingReport2 (Adware.ShoppingReport2) -> Succesvol in quarantaine geplaatst en verwijderd. HKLM\SOFTWARE\ClickPotatoLite (Adware.ClickPotato) -> Succesvol in quarantaine geplaatst en verwijderd. HKLM\SOFTWARE\QuestBrowse (Adware.QuestBrowse) -> Succesvol in quarantaine geplaatst en verwijderd. HKLM\SOFTWARE\ShoppingReport2 (Adware.ShoppingReport2) -> Succesvol in quarantaine geplaatst en verwijderd. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ShoppingReport2 (Adware.Hotbar) -> Succesvol in quarantaine geplaatst en verwijderd. Registerwaarden gedetecteerd: 5 HKCU\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{EB620C54-E229-4942-87CE-E717109FC8C6} (Adware.ShoppingReport2) -> Data: -> Succesvol in quarantaine geplaatst en verwijderd. HKCU\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping|{EB620C54-E229-4942-87CE-E717109FC8C6} (Adware.ShoppingReport2) -> Data: 2 -> Succesvol in quarantaine geplaatst en verwijderd. HKCU\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{DB38E21A-0133-419d-92AD-ECDFD5244D6D} (Adware.ShoppingReport2) -> Data: -> Succesvol in quarantaine geplaatst en verwijderd. HKCU\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping|{DB38E21A-0133-419d-92AD-ECDFD5244D6D} (Adware.ShoppingReport2) -> Data: 3 -> Succesvol in quarantaine geplaatst en verwijderd. HKLM\SOFTWARE\Mozilla\Firefox\extensions|ClickPotatoLite@ClickPotatoLite.com (Adware.ClickPotato) -> Data: C:\Program Files\ClickPotatoLite\bin\10.0.666.0\firefox\extensions -> Succesvol in quarantaine geplaatst en verwijderd. Registerdata gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Mappen gedetecteerd: 16 C:\ProgramData\2ACA5CC3-0F83-453D-A079-1076FE1A8B65 (Adware.Seekmo) -> Succesvol in quarantaine geplaatst en verwijderd. C:\ProgramData\ClickPotatoLiteSA (Adware.ClickPotato) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files\ClickPotatoLite (Adware.ClickPotato) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files\ClickPotatoLite\bin (Adware.ClickPotato) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files\ClickPotatoLite\bin\10.0.666.0 (Adware.ClickPotato) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files\ClickPotatoLite\bin\10.0.666.0\firefox (Adware.ClickPotato) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files\ClickPotatoLite\bin\10.0.666.0\firefox\extensions (Adware.ClickPotato) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files\ClickPotatoLite\bin\10.0.666.0\firefox\extensions\plugins (Adware.ClickPotato) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files\ShoppingReport2 (Adware.ShoppingReport2) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files\ShoppingReport2\Bin (Adware.ShoppingReport2) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files\ShoppingReport2\Bin\2.7.34 (Adware.ShoppingReport2) -> Succesvol in quarantaine geplaatst en verwijderd. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ClickPotato (Adware.ClickPotato) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files\Mozilla Firefox\extensions\{D9ADB0A8-7BFB-498D-9880-EE78A81CCFA0} (Adware.QuestBrowse) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files\Mozilla Firefox\extensions\{D9ADB0A8-7BFB-498D-9880-EE78A81CCFA0}\chrome (Adware.QuestBrowse) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files\Mozilla Firefox\extensions\{D9ADB0A8-7BFB-498D-9880-EE78A81CCFA0}\defaults (Adware.QuestBrowse) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files\Mozilla Firefox\extensions\{D9ADB0A8-7BFB-498D-9880-EE78A81CCFA0}\defaults\preferences (Adware.QuestBrowse) -> Succesvol in quarantaine geplaatst en verwijderd. Bestanden gedetecteerd: 17 C:\Program Files\Mozilla Firefox\plugins\npclntax_ClickPotatoLiteSA.dll (Adware.ClickPotato) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Users\Larry\Downloads\BS_Player.exe (Adware.Bundler) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Users\PC\Downloads\VIO_Player_Setup.exe (PUP.Bundle.Installer.OI) -> Succesvol in quarantaine geplaatst en verwijderd. C:\ProgramData\ClickPotatoLiteSA\ClickPotatoLiteSA.dat (Adware.ClickPotato) -> Succesvol in quarantaine geplaatst en verwijderd. C:\ProgramData\ClickPotatoLiteSA\ClickPotatoLiteSAAbout.mht (Adware.ClickPotato) -> Succesvol in quarantaine geplaatst en verwijderd. C:\ProgramData\ClickPotatoLiteSA\ClickPotatoLiteSAEULA.mht (Adware.ClickPotato) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files\ClickPotatoLite\bin\10.0.666.0\ClickPotatoLiteSAHook.dll (Adware.ClickPotato) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files\ClickPotatoLite\bin\10.0.666.0\firefox\extensions\install.rdf (Adware.ClickPotato) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files\ClickPotatoLite\bin\10.0.666.0\firefox\extensions\plugins\npclntax_ClickPotatoLiteSA.dll (Adware.ClickPotato) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files\ShoppingReport2\Uninst.exe (Adware.ShoppingReport2) -> Succesvol in quarantaine geplaatst en verwijderd. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ClickPotato\About Us.lnk (Adware.ClickPotato) -> Succesvol in quarantaine geplaatst en verwijderd. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ClickPotato\ClickPotato Customer Support.lnk (Adware.ClickPotato) -> Succesvol in quarantaine geplaatst en verwijderd. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ClickPotato\ClickPotato Uninstall Instructions.lnk (Adware.ClickPotato) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files\Mozilla Firefox\extensions\{D9ADB0A8-7BFB-498D-9880-EE78A81CCFA0}\chrome.manifest (Adware.QuestBrowse) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files\Mozilla Firefox\extensions\{D9ADB0A8-7BFB-498D-9880-EE78A81CCFA0}\install.rdf (Adware.QuestBrowse) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files\Mozilla Firefox\extensions\{D9ADB0A8-7BFB-498D-9880-EE78A81CCFA0}\chrome\questbrowse.jar (Adware.QuestBrowse) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files\Mozilla Firefox\extensions\{D9ADB0A8-7BFB-498D-9880-EE78A81CCFA0}\defaults\preferences\prefs.js (Adware.QuestBrowse) -> Succesvol in quarantaine geplaatst en verwijderd. (einde) 2012/08/23 14:21:33 +0200 PC001 Larry MESSAGE Starting protection 2012/08/23 14:21:44 +0200 PC001 Larry MESSAGE Protection started successfully 2012/08/23 14:21:47 +0200 PC001 Larry MESSAGE Starting IP protection 2012/08/23 14:22:02 +0200 PC001 Larry MESSAGE IP Protection started successfully 2012/08/23 14:23:10 +0200 PC001 Larry MESSAGE Starting database refresh 2012/08/23 14:23:10 +0200 PC001 Larry MESSAGE Stopping IP protection 2012/08/23 14:23:15 +0200 PC001 Larry MESSAGE IP Protection stopped 2012/08/23 14:23:24 +0200 PC001 Larry MESSAGE Database refreshed successfully 2012/08/23 14:23:24 +0200 PC001 Larry MESSAGE Starting IP protection 2012/08/23 14:23:39 +0200 PC001 Larry MESSAGE IP Protection started successfully 2012/08/23 14:47:50 +0200 PC001 Larry MESSAGE Executing scheduled update: Daily 2012/08/23 14:47:52 +0200 PC001 Larry MESSAGE Database already up-to-date 2012/08/23 14:53:19 +0200 PC001 Larry MESSAGE Starting protection 2012/08/23 14:53:33 +0200 PC001 Larry MESSAGE Protection started successfully 2012/08/23 14:53:36 +0200 PC001 Larry MESSAGE Starting IP protection 2012/08/23 14:53:55 +0200 PC001 Larry MESSAGE IP Protection started successfully 2012/08/23 14:54:16 +0200 PC001 Larry IP-BLOCK 218.7.17.183 (Type: outgoing, Port: 16723, Process: utorrent.exe) 2012/08/23 16:10:51 +0200 PC001 Larry IP-BLOCK 222.71.19.115 (Type: outgoing, Port: 16723, Process: utorrent.exe) Voor het logje van Hijack This heb ik nu het probleem dat ik Hijack This niet kan openen. Zowel niet van het bureaublad alsook niet vanuit programFiles/trendmicro/hijackthis/hijachthis (als administrator met rechtermuisknop.) Krijg telkens de melding dat hijackthis alreeds open is. Groeten

Ter aanvulling: Na scan van AVG virus de virusvault leeggemaakt en daarna aangelogd op account van de dochter en het scherm van Sabam komt "voorlopig" niet terug. Enkel Trojan Horse blijft hij melding van geven maar ik kan hem niet verwijderen via AVG.

Hallo, ik ben nieuw hier op het forum en heb geen ervaring met het verwijderen van virussen. Gisteren de dochter op de laptop aan het "werken" (muziek en /of films aan t downloaden) en iets later komt ze af met : papa mijn account is geblokkeerd door Sabam en ze vragen om 50 euro te betalen om te deblokkeren; Na google te raadplegen het bestaan van Sabamvirus ontdekt en zo bij jullie terechtgekomen. Virusscanner AVG gaf melding van Trojan Horse Generic6. Kunnen jullie mij helpen aub? Logje van HijackThis: Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 22:26:39, on 22/08/2012 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v9.00 (9.00.8112.16421) Boot mode: Normal Running processes: C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Windows Defender\MSASCui.exe C:\Windows\RtHDVCpl.exe C:\Windows\BisonCam\BisonHK.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE C:\Windows\BisonCam\BsMnt.exe C:\Program Files\System Control Manager\MGSysCtrl.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\Program Files\AVG\AVG8\avgtray.exe C:\Windows\System32\wpcumi.exe C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe C:\Program Files\AVG Secure Search\vprot.exe C:\Program Files\Samsung\Kies\KiesTrayAgent.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Windows\ehome\ehtray.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\uTorrent\uTorrent.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtProc.exe C:\Windows\system32\wuauclt.exe C:\Windows\system32\conime.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Windows\system32\Macromed\Flash\FlashUtil11e_ActiveX.exe C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe C:\Program Files\Internet Explorer\iexplore.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.msi.com.tw R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = SearchAmong {searchTerms} webs search R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = SearchAmong {searchTerms} webs search R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Aanmelden | Facebook R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.msi.com.tw R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = This message is from the Microsoft Safety & Security Center R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = SearchAmong {searchTerms} webs search R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = SearchAmong {searchTerms} webs search R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: ::1 localhost O2 - BHO: (no name) - {0E1230F8-EA50-42A9-983C-D22ABC2EED3B} - (no file) O2 - BHO: PriceGong - {1631550F-191D-4826-B069-D9439253D926} - C:\Program Files\PriceGong\2.6.4\PriceGongIE.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll O2 - BHO: Windows Live Aanmelden - Help - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file) O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [startCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe O4 - HKLM\..\Run: [bisonHK] C:\Windows\BisonCam\BisonHK.exe O4 - HKLM\..\Run: [bsMnt] C:\Windows\BisonCam\BsMnt.exe O4 - HKLM\..\Run: [MGSysCtrl] C:\Program Files\System Control Manager\MGSysCtrl.exe O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [skytel] Skytel.exe O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe O4 - HKLM\..\Run: [WPCUMI] C:\Windows\system32\WpcUmi.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [Nero MediaHome 4] "C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe" /AUTORUN O4 - HKLM\..\Run: [vProt] "C:\Program Files\AVG Secure Search\vprot.exe" O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files\Samsung\Kies\KiesTrayAgent.exe O4 - HKLM\..\Run: [ROC_roc_dec12] "C:\Program Files\AVG Secure Search\ROC_roc_dec12.exe" /PROMPT /CMPID=roc_dec12 O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe" O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" O4 - HKCU\..\Run: [KiesPDLR] C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe O4 - HKCU\..\Run: [Nero MediaHome 4] "C:\Program Files\Nero\Nero MediaHome 4\NeroMediaHome.exe" /AUTORUN O4 - HKCU\..\Run: [KiesHelper] C:\Program Files\Samsung\Kies\KiesHelper.exe /s O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\Windows\system32\Macromed\Flash\FlashUtil11e_ActiveX.exe -update activex O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-21-51771456-1125700521-3641177712-1002\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NeroMediaHomeUser.4') O4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE O4 - Global Startup: Bluetooth Manager.lnk = ? O4 - Global Startup: BTTray.lnk = ? O4 - Global Startup: McAfee Security Scan Plus.lnk = ? O8 - Extra context menu item: Afbeelding verzenden naar &Bluetooth-apparaat... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Pagina verzenden naar &Bluetooth-apparaat... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {1ABA5FAC-1417-422B-BA82-45C35E2C908B} (20-20 3D Viewer for IKEA) - http://kitchenplanner.ikea.com/NL/Core/Player/2020PlayerAX_IKEA_Win32.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\11.2.0\ViProtocol.dll O20 - AppInit_DLLs: avgrsstx.dll O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe O23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files\AVG\AVG8\Toolbar\ToolbarBroker.exe O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe O23 - Service: Nero MediaHome 4 Service (NeroMediaHomeService.4) - Nero AG - C:\Program Files\Nero\Nero MediaHome 4\NMMediaServerService.exe O23 - Service: SCM Driver Daemon (NishService) - Unknown owner - C:\Program Files\System Control Manager\edd.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe O23 - Service: vToolbarUpdater11.2.0 - Unknown owner - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe -- End of file - 13168 bytes