Huib1

De computer was nog steeds heel traag. Ik heb nu AVG helemaal verwijderd en dat is de oplossing. Hij is nu weer normaal. Heeft u een idee hoe dat kan? Als ik een andere virusscanner installeer krijg ik dan ook weer een trage computer? Graag uw zienswijze. Groeten

Hij is nog steeds heel traag. Ik heb de indruk dat AVG de boosdoener is, want toen ik AVG had verwijderd, werd de computer veel sneller. Ik moest AVG verwijderen, omdat het Combofix uitschakelde. Natuurlijk heb ik AVG daarna weer geïnstaleerd, omdat ik niet zonder beveiliging kan. Ik zal nogmaals AVG volledig verwijderen en u daarover berichten. Groeten, Huib Papenhuijzen

hierbij de log van adwcleaner # AdwCleaner v2.008 - Verslag gemaakt op 18/11/2012 om 13:11:35 # Geactualiseerd op 17/11/2012 door Xplode # Besturingssysteem : Windows Vista Home Premium (32 bits) # Gebruiker : Gebruiker - PC_VAN_GEBRUIKE # Opstarten Modus : Normale modus # Gelanceerd vanaf : C:\Users\Gebruiker\Desktop\adwcleaner.exe # Optie [Verwijderen] ***** [Diensten] ***** ***** [Files / Mappen] ***** Map Verwijdert : C:\ProgramData\Trymedia Map Verwijdert : C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Extensions\meinjhkhgaalhfbinmclpmjikccbplkf Map Verwijdert : C:\Users\Gebruiker\AppData\LocalLow\AVG Secure Search Map Verwijdert : C:\Users\Gebruiker\AppData\LocalLow\Conduit ***** [Register] ***** Sleutel Verwijdert : HKCU\Software\AppDataLow\Software\Conduit Sleutel Verwijdert : HKCU\Software\AppDataLow\Software\SmartBar Sleutel Verwijdert : HKCU\Software\AVG Secure Search Sleutel Verwijdert : HKCU\Software\Conduit Sleutel Verwijdert : HKCU\Software\Google\Chrome\Extensions\meinjhkhgaalhfbinmclpmjikccbplkf Sleutel Verwijdert : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706} Sleutel Verwijdert : HKCU\Software\Softonic Sleutel Verwijdert : HKLM\Software\AVG Secure Search Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8} Sleutel Verwijdert : HKLM\SOFTWARE\Google\Chrome\Extensions\meinjhkhgaalhfbinmclpmjikccbplkf Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC} ***** [browsers] ***** -\\ Internet Explorer v7.0.6000.16982 [OK] Het register bevat geen enkele ongeoorloofde invoer. -\\ Google Chrome v23.0.1271.64 File : C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Preferences Verwijdert [l.13] : homepage = "hxxp://search.conduit.com/?ctid=CT3241951&SearchSource=48", Verwijdert [l.61] : icon_url = "hxxp://search.conduit.com/fav.ico", Verwijdert [l.64] : keyword = "search.conduit.com", Verwijdert [l.67] : search_url = "hxxp://search.conduit.com/Results.aspx?q={searchTerms}&SearchSource=49&ctid=CT3[...] Verwijdert [l.1614] : homepage = "hxxp://search.conduit.com/?ctid=CT3241951&SearchSource=48", ************************* AdwCleaner[R1].txt - [3548 octets] - [18/11/2012 13:09:16] AdwCleaner[s1].txt - [3383 octets] - [18/11/2012 13:11:35] ########## EOF - C:\AdwCleaner[s1].txt - [3443 octets] ##########

computer nog steeds traag. kan het te maken hebben met avg? hier is de log ComboFix 12-11-16.02 - Gebruiker 17-11-2012 23:09:48.3.2 - x86 Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1252.31.1043.18.1015.202 [GMT 1:00] Gestart vanuit: C:\Users\Gebruiker\Desktop\ComboFix.exe gebruikte Opdracht switches :: C:\Users\Gebruiker\Desktop\CFScript.txt FILE :: "c:\program files\GUT1A73.tmp" (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) C:\Users\GEBRUI~1\AppData\Local\Temp\ae201572-4813-4010-9ed2-ee29ddec066a\CliSecureRT.dll C:\Users\Gebruiker\AppData\Local\Temp\ae201572-4813-4010-9ed2-ee29ddec066a\CliSecureRT.dll ---- Voorgaande Run ------- C:\df83804940e838526b67350ad07632e3\ar-sa\spwizui.dll.mui C:\df83804940e838526b67350ad07632e3\bg-bg\spwizui.dll.mui C:\df83804940e838526b67350ad07632e3\cs-cz\spwizui.dll.mui C:\df83804940e838526b67350ad07632e3\da-dk\spwizui.dll.mui C:\df83804940e838526b67350ad07632e3\de-de\spwizui.dll.mui C:\df83804940e838526b67350ad07632e3\el-gr\spwizui.dll.mui C:\df83804940e838526b67350ad07632e3\en-us\spwizui.dll.mui C:\df83804940e838526b67350ad07632e3\es-es\spwizui.dll.mui C:\df83804940e838526b67350ad07632e3\et-ee\spwizui.dll.mui C:\df83804940e838526b67350ad07632e3\eula\ar-sa\license_addendum_1.rtf C:\df83804940e838526b67350ad07632e3\eula\bg-bg\license_addendum_1.rtf C:\df83804940e838526b67350ad07632e3\eula\cs-cz\license_addendum_1.rtf C:\df83804940e838526b67350ad07632e3\eula\da-dk\license_addendum_1.rtf C:\df83804940e838526b67350ad07632e3\eula\de-de\license_addendum_1.rtf C:\df83804940e838526b67350ad07632e3\eula\el-gr\license_addendum_1.rtf C:\df83804940e838526b67350ad07632e3\eula\en-us\license_addendum_1.rtf C:\df83804940e838526b67350ad07632e3\eula\es-es\license_addendum_1.rtf C:\df83804940e838526b67350ad07632e3\eula\et-ee\license_addendum_1.rtf C:\df83804940e838526b67350ad07632e3\eula\fi-fi\license_addendum_1.rtf C:\df83804940e838526b67350ad07632e3\eula\fr-fr\license_addendum_1.rtf C:\df83804940e838526b67350ad07632e3\eula\he-il\license_addendum_1.rtf C:\df83804940e838526b67350ad07632e3\eula\hr-hr\license_addendum_1.rtf C:\df83804940e838526b67350ad07632e3\eula\hu-hu\license_addendum_1.rtf C:\df83804940e838526b67350ad07632e3\eula\it-it\license_addendum_1.rtf C:\df83804940e838526b67350ad07632e3\eula\ja-jp\license_addendum_1.rtf C:\df83804940e838526b67350ad07632e3\eula\ko-kr\license_addendum_1.rtf C:\df83804940e838526b67350ad07632e3\eula\lt-lt\license_addendum_1.rtf C:\df83804940e838526b67350ad07632e3\eula\lv-lv\license_addendum_1.rtf C:\df83804940e838526b67350ad07632e3\eula\nb-no\license_addendum_1.rtf C:\df83804940e838526b67350ad07632e3\eula\nl-nl\license_addendum_1.rtf C:\df83804940e838526b67350ad07632e3\eula\pl-pl\license_addendum_1.rtf C:\df83804940e838526b67350ad07632e3\eula\pt-br\license_addendum_1.rtf C:\df83804940e838526b67350ad07632e3\eula\pt-pt\license_addendum_1.rtf C:\df83804940e838526b67350ad07632e3\eula\ro-ro\license_addendum_1.rtf C:\df83804940e838526b67350ad07632e3\eula\ru-ru\license_addendum_1.rtf C:\df83804940e838526b67350ad07632e3\eula\sk-sk\license_addendum_1.rtf C:\df83804940e838526b67350ad07632e3\eula\sl-si\license_addendum_1.rtf C:\df83804940e838526b67350ad07632e3\eula\sr-latn-cs\license_addendum_1.rtf C:\df83804940e838526b67350ad07632e3\eula\sv-se\license_addendum_1.rtf C:\df83804940e838526b67350ad07632e3\eula\th-th\license_addendum_1.rtf C:\df83804940e838526b67350ad07632e3\eula\tr-tr\license_addendum_1.rtf C:\df83804940e838526b67350ad07632e3\eula\uk-ua\license_addendum_1.rtf C:\df83804940e838526b67350ad07632e3\eula\zh-cn\license_addendum_1.rtf C:\df83804940e838526b67350ad07632e3\eula\zh-hk\license_addendum_1.rtf C:\df83804940e838526b67350ad07632e3\eula\zh-tw\license_addendum_1.rtf C:\df83804940e838526b67350ad07632e3\fi-fi\spwizui.dll.mui C:\df83804940e838526b67350ad07632e3\fr-fr\spwizui.dll.mui C:\df83804940e838526b67350ad07632e3\he-il\spwizui.dll.mui C:\df83804940e838526b67350ad07632e3\hr-hr\spwizui.dll.mui C:\df83804940e838526b67350ad07632e3\hu-hu\spwizui.dll.mui C:\df83804940e838526b67350ad07632e3\it-it\spwizui.dll.mui C:\df83804940e838526b67350ad07632e3\ja-jp\spwizui.dll.mui C:\df83804940e838526b67350ad07632e3\ko-kr\spwizui.dll.mui C:\df83804940e838526b67350ad07632e3\lt-lt\spwizui.dll.mui C:\df83804940e838526b67350ad07632e3\lv-lv\spwizui.dll.mui C:\df83804940e838526b67350ad07632e3\nb-no\spwizui.dll.mui C:\df83804940e838526b67350ad07632e3\nl-nl\spwizui.dll.mui C:\df83804940e838526b67350ad07632e3\pl-pl\spwizui.dll.mui C:\df83804940e838526b67350ad07632e3\pt-br\spwizui.dll.mui C:\df83804940e838526b67350ad07632e3\pt-pt\spwizui.dll.mui C:\df83804940e838526b67350ad07632e3\ro-ro\spwizui.dll.mui C:\df83804940e838526b67350ad07632e3\ru-ru\spwizui.dll.mui C:\df83804940e838526b67350ad07632e3\sk-sk\spwizui.dll.mui C:\df83804940e838526b67350ad07632e3\sl-si\spwizui.dll.mui C:\df83804940e838526b67350ad07632e3\spclite.exe C:\df83804940e838526b67350ad07632e3\spwizui.dll C:\df83804940e838526b67350ad07632e3\sr-latn-cs\spwizui.dll.mui C:\df83804940e838526b67350ad07632e3\sv-se\spwizui.dll.mui C:\df83804940e838526b67350ad07632e3\th-th\spwizui.dll.mui C:\df83804940e838526b67350ad07632e3\tr-tr\spwizui.dll.mui C:\df83804940e838526b67350ad07632e3\uk-ua\spwizui.dll.mui C:\df83804940e838526b67350ad07632e3\zh-cn\spwizui.dll.mui C:\df83804940e838526b67350ad07632e3\zh-hk\spwizui.dll.mui C:\df83804940e838526b67350ad07632e3\zh-tw\spwizui.dll.mui C:\Users\GEBRUI~1\AppData\Local\Temp\ae201572-4813-4010-9ed2-ee29ddec066a\CliSecureRT.dll C:\Users\Gebruiker\AppData\Local\Temp\ae201572-4813-4010-9ed2-ee29ddec066a\CliSecureRT.dll (((((((((((((((((((( Bestanden Gemaakt van 2012-10-17 to 2012-11-17 )))))))))))))))))))))))))))))) 2012-11-17 22:33:27 . 2012-11-17 22:33:27 -------- d-----w- C:\Users\Default\AppData\Local\temp 2012-11-17 20:45:05 . 2012-11-17 20:45:05 -------- d-----w- C:\Users\Default\AppData\Roaming\TuneUp Software 2012-10-29 20:44:40 . 2012-10-29 20:44:40 388096 ----a-r- C:\Users\Gebruiker\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2012-10-29 20:44:35 . 2012-10-29 20:44:35 -------- d-----w- C:\Program Files\Trend Micro 2012-10-27 08:58:34 . 2012-10-27 08:58:34 -------- d-----w- C:\Users\Gebruiker\AppData\Roaming\AVG2013 2012-10-27 07:04:48 . 2012-10-27 07:04:48 -------- d-----w- C:\Users\Gebruiker\AppData\Roaming\TuneUp Software 2012-10-27 06:58:56 . 2012-11-17 21:55:52 -------- d-----w- C:\ProgramData\AVG2013 2012-10-27 06:50:43 . 2012-10-30 07:13:26 -------- d-----w- C:\Users\Gebruiker\AppData\Local\Avg2013 2012-10-27 06:50:43 . 2012-10-27 06:50:43 -------- d-----w- C:\Users\Gebruiker\AppData\Local\MFAData 2012-10-24 16:04:02 . 2012-10-24 16:04:02 -------- d-----w- C:\Users\Gebruiker\AppData\Local\CRE . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) 2012-10-05 18:55:59 . 2012-10-05 18:55:59 4096000 ----a-w- C:\Program Files\GUT1A73.tmp ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2011-05-11 04:28:20 1232896] "WindowsWelcomeCenter"="oobefldr.dll" [2006-11-02 12:34:50 2159104] "ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2006-11-02 12:35:32 125440] "Facebook Update"="C:\Users\Gebruiker\AppData\Local\Facebook\Update\FacebookUpdate.exe" [2012-07-12 18:51:38 138096] "KiesPDLR"="C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe" [2011-09-29 15:19:26 20880] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IgfxTray"="C:\Windows\system32\igfxtray.exe" [2008-06-18 12:01:34 141848] "HotKeysCmds"="C:\Windows\system32\hkcmd.exe" [2008-06-18 12:01:26 166424] "Persistence"="C:\Windows\system32\igfxpers.exe" [2008-06-18 12:01:30 133656] "KiesHelper"="C:\Program Files\Samsung\Kies\KiesHelper.exe" [2011-09-29 15:19:14 929680] "KiesTrayAgent"="C:\Program Files\Samsung\Kies\KiesTrayAgent.exe" [2011-09-29 15:19:16 3508112] "APSDaemon"="C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-09-27 06:22:28 59240] "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2011-11-12 23:24:58 421736] "Adobe ARM"="C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 10:55:28 937920] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.0.207\SSScheduler.exe [2011-6-17 272528] Inhoud van de 'Gedeelde Taken' map 2012-10-29 C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2152611085-2006390814-3870214851-1000Core.job - C:\Users\Gebruiker\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-10-16 10:04:28 . 2012-07-12 18:51:38] 2012-11-05 C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2152611085-2006390814-3870214851-1000UA.job - C:\Users\Gebruiker\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-10-16 10:04:28 . 2012-07-12 18:51:38] 2012-11-17 C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe [2011-05-26 19:45:09 . 2011-05-26 19:44:31] 2012-11-17 C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe [2011-05-26 19:45:09 . 2011-05-26 19:44:31] 2012-10-31 C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2152611085-2006390814-3870214851-1000Core.job - C:\Users\Gebruiker\AppData\Local\Google\Update\GoogleUpdate.exe [2011-05-11 18:31:22 . 2011-05-11 18:31:06] 2012-11-17 C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2152611085-2006390814-3870214851-1000UA.job - C:\Users\Gebruiker\AppData\Local\Google\Update\GoogleUpdate.exe [2011-05-11 18:31:22 . 2011-05-11 18:31:06] ------- Bijkomende Scan ------- uStart Page = hxxp://www.google.be/ uInternet Settings,ProxyOverride = *.local IE: E&xporteren naar Microsoft Excel - C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 TCP: DhcpNameServer = 10.0.0.138

Hierbij de twee log's. De computer blijft traag reageren. ComboFix 12-10-31.03 - Gebruiker 01-11-2012 21:25:49.1.2 - x86 Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1252.31.1043.18.1015.137 [GMT 1:00] Gestart vanuit: c:\users\Gebruiker\Desktop\ComboFix.exe . . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\users\GEBRUI~1\AppData\Local\Temp\ae201572-4813-4010-9ed2-ee29ddec066a\CliSecureRT.dll c:\users\Gebruiker\AppData\Local\Temp\ae201572-4813-4010-9ed2-ee29ddec066a\CliSecureRT.dll . . (((((((((((((((((((( Bestanden Gemaakt van 2012-10-01 to 2012-11-01 )))))))))))))))))))))))))))))) . . 2012-10-29 20:44 . 2012-10-29 20:44 388096 ----a-r- c:\users\Gebruiker\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2012-10-29 20:44 . 2012-10-29 20:44 -------- d-----w- c:\program files\Trend Micro 2012-10-27 08:58 . 2012-10-27 08:58 -------- d-----w- c:\users\Gebruiker\AppData\Roaming\AVG2013 2012-10-27 07:04 . 2012-10-27 07:04 -------- d-----w- c:\users\Gebruiker\AppData\Roaming\TuneUp Software 2012-10-27 06:58 . 2012-11-01 17:15 -------- d-----w- c:\programdata\AVG2013 2012-10-27 06:50 . 2012-10-30 07:13 -------- d-----w- c:\users\Gebruiker\AppData\Local\Avg2013 2012-10-27 06:50 . 2012-10-27 06:50 -------- d-----w- c:\users\Gebruiker\AppData\Local\MFAData 2012-10-24 21:01 . 2012-10-24 21:01 -------- d-----w- C:\df83804940e838526b67350ad07632e3 2012-10-24 16:04 . 2012-10-24 16:04 -------- d-----w- c:\users\Gebruiker\AppData\Local\CRE 2012-10-12 05:55 . 2012-10-12 05:55 -------- d-----w- c:\users\Gebruiker\AppData\Roaming\SUPERAntiSpyware.com 2012-10-12 05:55 . 2012-10-12 05:55 -------- d-----w- c:\programdata\SUPERAntiSpyware.com 2012-10-05 18:55 . 2012-10-05 18:55 4096000 ----a-w- c:\program files\GUT1A73.tmp . . . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . . . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2011-05-11 1232896] "WindowsWelcomeCenter"="oobefldr.dll" [2006-11-02 2159104] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2006-11-02 125440] "Facebook Update"="c:\users\Gebruiker\AppData\Local\Facebook\Update\FacebookUpdate.exe" [2012-07-12 138096] "KiesPDLR"="c:\program files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe" [2011-09-29 20880] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-06-18 141848] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-06-18 166424] "Persistence"="c:\windows\system32\igfxpers.exe" [2008-06-18 133656] "KiesHelper"="c:\program files\Samsung\Kies\KiesHelper.exe" [2011-09-29 929680] "KiesTrayAgent"="c:\program files\Samsung\Kies\KiesTrayAgent.exe" [2011-09-29 3508112] "APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2011-09-27 59240] "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2011-11-12 421736] "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\3.0.207\SSScheduler.exe [2011-6-17 272528] . S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [x] . . Inhoud van de 'Gedeelde Taken' map . 2012-10-29 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2152611085-2006390814-3870214851-1000Core.job - c:\users\Gebruiker\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-10-16 18:51] . 2012-11-01 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2152611085-2006390814-3870214851-1000UA.job - c:\users\Gebruiker\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-10-16 18:51] . 2012-11-01 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2011-05-26 19:44] . 2012-11-01 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2011-05-26 19:44] . 2012-10-31 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2152611085-2006390814-3870214851-1000Core.job - c:\users\Gebruiker\AppData\Local\Google\Update\GoogleUpdate.exe [2011-05-11 18:31] . 2012-11-01 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2152611085-2006390814-3870214851-1000UA.job - c:\users\Gebruiker\AppData\Local\Google\Update\GoogleUpdate.exe [2011-05-11 18:31] . . ------- Bijkomende Scan ------- . uStart Page = hxxp://www.google.be/ uInternet Settings,ProxyOverride = *.local IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 TCP: DhcpNameServer = 192.168.2.254 . - - - - ORPHANS VERWIJDERD - - - - . WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file) WebBrowser-{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - (no file) HKLM-Run-ROC_roc_dec12 - c:\program files\AVG Secure Search\ROC_roc_dec12.exe HKLM-Run-HF_G_Jul - c:\program files\AVG Secure Search\HF_G_Jul.exe AddRemove-01_Simmental - c:\program files\Samsung\USB Drivers\01_Simmental\Uninstall.exe AddRemove-02_Siberian - c:\program files\Samsung\USB Drivers\02_Siberian\Uninstall.exe AddRemove-03_Swallowtail - c:\program files\Samsung\USB Drivers\03_Swallowtail\Uninstall.exe AddRemove-04_semseyite - c:\program files\Samsung\USB Drivers\04_semseyite\Uninstall.exe AddRemove-05_Sloan - c:\program files\Samsung\USB Drivers\05_Sloan\Uninstall.exe AddRemove-06_Spencer - c:\program files\Samsung\USB Drivers\06_Spencer\Uninstall.exe AddRemove-07_Schorl - c:\program files\Samsung\USB Drivers\07_Schorl\Uninstall.exe AddRemove-08_EMPChipset - c:\program files\Samsung\USB Drivers\08_EMPChipset\Uninstall.exe AddRemove-09_Hsp - c:\program files\Samsung\USB Drivers\09_Hsp\Uninstall.exe AddRemove-11_HSP_Plus_Default - c:\program files\Samsung\USB Drivers\11_HSP_Plus_Default\Uninstall.exe AddRemove-16_Shrewsbury - c:\program files\Samsung\USB Drivers\16_Shrewsbury\Uninstall.exe AddRemove-17_EMP_Chipset2 - c:\program files\Samsung\USB Drivers\17_EMP_Chipset2\Uninstall.exe AddRemove-18_Zinia_Serial_Driver - c:\program files\Samsung\USB Drivers\18_Zinia_Serial_Driver\Uninstall.exe AddRemove-19_VIA_driver - c:\program files\Samsung\USB Drivers\19_VIA_driver\Uninstall.exe AddRemove-20_NXP_Driver - c:\program files\Samsung\USB Drivers\20_NXP_Driver\Uninstall.exe AddRemove-22_WiBro_WiMAX - c:\program files\Samsung\USB Drivers\22_WiBro_WiMAX\Uninstall.exe AddRemove-24_flashusbdriver - c:\program files\Samsung\USB Drivers\24_flashusbdriver\Uninstall.exe AddRemove-25_escape - c:\program files\Samsung\USB Drivers\25_escape\Uninstall.exe . . . ************************************************************************** . catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover Rootkit scan 2012-11-01 21:38 Windows 6.0.6000 NTFS . scannen van verborgen processen ... . scannen van verborgen autostart items ... . scannen van verborgen bestanden ... . Scan succesvol afgerond verborgen bestanden: 0 . ************************************************************************** . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 "MSCurrentCountry"=dword:000000b5 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . ------------------------ Andere Aktieve Processen ------------------------ . c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe c:\program files\Bonjour\mDNSResponder.exe c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE c:\program files\Common Files\Nero\Nero BackItUp 4\NBService.exe c:\windows\system32\conime.exe c:\windows\system32\igfxsrvc.exe c:\windows\ehome\ehmsas.exe c:\program files\iPod\bin\iPodService.exe c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe . ************************************************************************** . Voltooingstijd: 2012-11-01 21:45:00 - machine werd herstart ComboFix-quarantined-files.txt 2012-11-01 20:44 . Pre-Run: 71.194.689.536 bytes beschikbaar Post-Run: 72.579.203.072 bytes beschikbaar . - - End Of File - - AEC1D7F0EFF957AE5F840594F504C03D Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 10:27:32, on 2-11-2012 Platform: Windows Vista (WinNT 6.00.1904) MSIE: Internet Explorer v7.00 (7.00.6000.16982) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Windows\System32\hkcmd.exe C:\Windows\System32\igfxpers.exe C:\Windows\system32\igfxsrvc.exe C:\Program Files\Samsung\Kies\KiesTrayAgent.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Windows\ehome\ehtray.exe C:\Users\Gebruiker\AppData\Local\Facebook\Update\FacebookUpdate.exe C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe C:\Program Files\McAfee Security Scan\3.0.207\SSScheduler.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\AVG\AVG2013\avgui.exe C:\Windows\system32\wuauclt.exe C:\Users\Gebruiker\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Gebruiker\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Gebruiker\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Gebruiker\AppData\Local\Google\Chrome\Application\chrome.exe C:\Windows\system32\NOTEPAD.EXE C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O4 - HKLM\..\Run: [igfxTray] C:\Windows\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe O4 - HKLM\..\Run: [KiesHelper] C:\Program Files\Samsung\Kies\KiesHelper.exe /s O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files\Samsung\Kies\KiesTrayAgent.exe O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\AVG2013\avgui.exe" /TRAYONLY O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Gebruiker\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver O4 - HKCU\..\Run: [KiesPDLR] C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.0.207\SSScheduler.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O16 - DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} (asusTek_sysctrl Class) - http://support.asus.com/select/asusTek_sys_ctrl3.cab O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} (SysInfo Class) - http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.4.24.0.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files\AVG\AVG10\Toolbar\ToolbarBroker.exe (file missing) O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2013\avgidsagent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2013\avgwdsvc.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.0.207\McCHSvc.exe O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe -- End of file - 6522 bytes

Systeemherstel heb ik al geprobeerd, maar dat bracht geen oplossing. De taakmanager geeft vaak aan dat de cpu voor 100 % wordt belast, terwijl de actieve taken opgeteld maar een belasting laten zien van 10 - 20 procent. Dus is hij met andere taken bezig die de taakmanager niet laat zien. Dat kan ook plotseling gebeuren, als ik niets op de computer doe. En dat kan wel een half uur duren.

Mijn Vista werd geleidelijk steeds trager en er is nu bijna niet meer mee te werken. Ik heb een log aangemaakt met Hijack. Graag advies. Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 21:49:57, on 29-10-2012 Platform: Windows Vista (WinNT 6.00.1904) MSIE: Internet Explorer v7.00 (7.00.6000.16982) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Windows\System32\hkcmd.exe C:\Windows\System32\igfxpers.exe C:\Windows\system32\igfxsrvc.exe C:\Program Files\Samsung\Kies\KiesTrayAgent.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\AVG Secure Search\vprot.exe C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe C:\Program Files\AVG\AVG2013\avgui.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Windows\ehome\ehtray.exe C:\Users\Gebruiker\AppData\Local\Google\Update\GoogleUpdate.exe C:\Users\Gebruiker\AppData\Local\Facebook\Update\FacebookUpdate.exe C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe C:\Program Files\McAfee Security Scan\3.0.207\SSScheduler.exe C:\Windows\ehome\ehmsas.exe C:\Windows\system32\wuauclt.exe C:\Windows\system32\taskmgr.exe C:\Users\Gebruiker\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Gebruiker\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Gebruiker\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Gebruiker\Downloads\HijackThis.exe C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: (no name) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file) O1 - Hosts: ::1 localhost O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file) O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\Run: [igfxTray] C:\Windows\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe O4 - HKLM\..\Run: [KiesHelper] C:\Program Files\Samsung\Kies\KiesHelper.exe /s O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files\Samsung\Kies\KiesTrayAgent.exe O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [vProt] "C:\Program Files\AVG Secure Search\vprot.exe" O4 - HKLM\..\Run: [ROC_roc_dec12] "C:\Program Files\AVG Secure Search\ROC_roc_dec12.exe" /PROMPT /CMPID=roc_dec12 O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [HF_G_Jul] "C:\Program Files\AVG Secure Search\HF_G_Jul.exe" /DoAction O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\AVG2013\avgui.exe" /TRAYONLY O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [Google Update] "C:\Users\Gebruiker\AppData\Local\Google\Update\GoogleUpdate.exe" /c O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Gebruiker\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver O4 - HKCU\..\Run: [KiesPDLR] C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE') O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.0.207\SSScheduler.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O16 - DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} (asusTek_sysctrl Class) - http://support.asus.com/select/asusTek_sys_ctrl3.cab O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} (SysInfo Class) - http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.4.24.0.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\11.2.0\ViProtocol.dll O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files\AVG\AVG10\Toolbar\ToolbarBroker.exe (file missing) O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2013\avgidsagent.exe O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2013\avgwdsvc.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.0.207\McCHSvc.exe O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe O23 - Service: vToolbarUpdater11.2.0 - Unknown owner - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe -- End of file - 8660 bytes