Ga naar inhoud

InternetMarketer

Lid
 Bekijk profiel  Bekijk hun activiteit

  • Items

    48

  • Registratiedatum

  • Laatst bezocht

 Inhoudstype 

Alles dat geplaatst werd door InternetMarketer

  1. InternetMarketer
    Dit wil niet lukken. Ik heb het bestand op cd gezet en de computer herstart. Na het drukken van de del toets kwam ik in een BIOS scherm die er geheel anders uitzag dan in de handleiding. Ik volgens mij het cd/dvd station als First boot device ingesteld, maar omdat alles er geheel anders uitzag, weet ik dit niet zeker. Na nogmaals herstarten gebeurt er niets, ik kom niet automatisch in een blauw scherm waarna memtest+86 gaat starten. Ik weet echt niet wat ik nu moet doen.
  2. InternetMarketer
    Ik kreeg weer een Blue Screen vanmorgen. Hieronder vind je de gegevens van een nieuw dmp bestand van 06-11-2012 8:11:54 Bug Check String: KMODE_EXCEPTION_NOT_HANDLED Bug Check Code: 0x0000001e Caused By Driver: usbhub.sys Parameter 1: ffffffff`c0000005 Parameter 2: fffff800`0307090b Parameter 3: 00000000`00000000 Parameter 4: ffffffff`ffffffff
  3. InternetMarketer
    Ik heb zojuist het nvstor64.sys bestand gekopieerd naar c:\windows\system32\drivers.
  4. InternetMarketer
    Ik heb 4 bestanden gevonden door te zoeken in c:\windows. Zie screenshot in de bijlage. Wat moet ik nu precies doen en welk bestand moet ik vervangen? - - - Updated - - - Sorry, hier het juiste screenshot.
  5. InternetMarketer
    nvstor64.sys leverde geen zoekresultaten op.
  6. InternetMarketer
    Hier is de link van Speccy http://speccy.piriform.com/results/H4yQBVrvehr5ZFuntggCnwS Merk computer: Acer Model: Aspire M3641
  7. InternetMarketer
    Ik kreeg vanmorgen 4 x een Blue Screen. In BlueScreenView heb ik nu 1 dmp bestand waarvan hieronder de gegevens: Bug Check String: KMODE_EXCEPTION_NOT_HANDLED Bug Check Code: 0x0000001e Caused By Driver: nvstor64.sys Parameter 1: ffffffff`c0000005 Parameter 2: fffff800`030b69c4 Parameter 3: 00000000`00000000 Parameter 4: ffffffff`ffffffff
  8. InternetMarketer
    Iedere dag wanneer ik de computer opstart loopt hij één keer en soms twee keer vast. Het beeld blijft dan stil staan en ik kan niets meer doen met de muis. Soms word het een wazig beeld met allemaal strepen. Als ik dan de computer uit zet met de aan/uit knop, en weer opstart gaat het weer goed. Behalve vanmorgen, toen kreeg ik een Blue Screen. De geheugen dump bleef steken bij 15, ik denk dat alles hier weer vastliep. Ik heb Blue Screen View gestart, maar hierin staan geen resultaten
  9. InternetMarketer
    Ik heb vanmorgen de computer opgestart zonder Blue Screen problemen. Daarna heb ik Blue Screen View gedownload, maar zonder resultaten. Het bovenste en onderste deel van het overzicht zijn beide leeg. Moet ik wachten op de volgende keer dat ik een blue screen error krijg?
  10. InternetMarketer
    Bedankt voor de tip, ik ga iedere week de pc schoon houden met CCleaner. Ik heb nu een ander probleem. De eerste keer dat ik de computer opstartte vandaag kreeg ik een blue screen error. Ik heb daarna de computer opnieuw opgestart en kreeg toen een melding dat Windows was hersteld van een onverwachte afsluiting. Ik heb de technische informatie van het blue screen opgeschreven en de technische details van de onverwachte afsluiting van Windows opgeslagen. Kan ik die informatie hier toevoegen of wil je dat ik daar een nieuwe discussie voor open?
  11. InternetMarketer
    Gigantisch bedankt voor alle hulp en voor jouw geduld. Ik heb nog één vraagje en dan zal ik op de knop Markeer als OPGELOST klikken: Is het zinvol om die laatste acties met CCleaner bijvoorbeeld 1 keer in de maand uit te voeren?
  12. InternetMarketer
    Ik heb nu een aantal keren geprobeerd om verschillende sites te starten waarop ik vastliep. Dit ging nu allemaal goed. Ik had eerder ook een aantal keren per dag, wanneer ik 's morgens opstartte, een blue screen error. Ik heb toen altijd de computer uitgezet met de aan/uit knop, en weer opnieuw opgestart. Dit heb ik ook niet meer gehad sinds de eerdere scans. Zou fantastisch zijn als dit hiermee ook opgelost is. Hoe kan ik voorkomen dat ik weer zoveel rotzooi op mijn computer krijg? Ik was me er niet van bewust.
  13. InternetMarketer
    Hier is de inhoud van het Combifix log: ComboFix 12-10-26.01 - acer m3641 26-10-2012 13:43:41.4.4 - x64 Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.31.1043.18.4094.2460 [GMT 2:00] Gestart vanuit: c:\users\acer m3641\Desktop\ComboFix.exe AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C} SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((( Bestanden Gemaakt van 2012-09-26 to 2012-10-26 )))))))))))))))))))))))))))))) . . 2012-10-26 12:09 . 2012-10-26 12:09 -------- d-----w- c:\users\Evert\AppData\Local\temp 2012-10-26 12:09 . 2012-10-26 12:09 -------- d-----w- c:\users\Default\AppData\Local\temp 2012-10-26 12:09 . 2012-10-26 12:09 -------- d-----w- c:\users\acer m3641\AppData\Local\temp 2012-10-26 11:21 . 2012-10-26 11:40 -------- d-----w- C:\32788R22FWJFW 2012-10-26 06:10 . 2012-10-17 00:31 9291768 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{45DA62E3-CA50-48C0-865A-9E685C69F0D8}\mpengine.dll 2012-10-24 07:10 . 2012-10-24 07:10 -------- d-----w- c:\users\acer m3641\AppData\Roaming\Malwarebytes 2012-10-24 07:10 . 2012-10-24 07:10 -------- d-----w- c:\programdata\Malwarebytes 2012-10-24 07:10 . 2012-10-24 07:10 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware 2012-10-24 07:10 . 2012-09-29 17:54 25928 ----a-w- c:\windows\system32\drivers\mbam.sys 2012-10-23 16:33 . 2012-10-23 16:33 388096 ----a-r- c:\users\acer m3641\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2012-10-23 16:33 . 2012-10-23 16:33 -------- d-----w- c:\program files (x86)\Trend Micro 2012-10-19 15:38 . 2012-09-24 21:16 95208 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll 2012-10-11 05:35 . 2012-10-20 07:25 12872 ----a-w- c:\windows\system32\bootdelete.exe 2012-10-10 05:10 . 2012-09-13 13:45 2048 ----a-w- c:\windows\system32\tzres.dll 2012-10-10 05:10 . 2012-09-13 13:28 2048 ----a-w- c:\windows\SysWow64\tzres.dll 2012-10-10 05:10 . 2012-08-24 16:07 218624 ----a-w- c:\windows\system32\wintrust.dll 2012-10-10 05:10 . 2012-08-24 15:53 172544 ----a-w- c:\windows\SysWow64\wintrust.dll 2012-10-10 05:10 . 2012-06-02 00:20 1268736 ----a-w- c:\windows\system32\crypt32.dll 2012-10-10 05:10 . 2012-06-02 00:20 174592 ----a-w- c:\windows\system32\cryptsvc.dll 2012-10-10 05:10 . 2012-06-02 00:20 132096 ----a-w- c:\windows\system32\cryptnet.dll 2012-10-10 05:10 . 2012-06-02 00:02 985088 ----a-w- c:\windows\SysWow64\crypt32.dll 2012-10-10 05:10 . 2012-06-02 00:02 133120 ----a-w- c:\windows\SysWow64\cryptsvc.dll 2012-10-10 05:10 . 2012-06-02 00:02 98304 ----a-w- c:\windows\SysWow64\cryptnet.dll 2012-10-10 05:10 . 2012-08-29 11:40 4699520 ----a-w- c:\windows\system32\ntoskrnl.exe 2012-10-09 08:16 . 2012-10-09 08:16 -------- d-----w- c:\program files (x86)\Market Samurai 2012-10-04 08:36 . 2012-10-24 06:54 -------- d-----w- c:\programdata\webex . . . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-10-11 05:12 . 2006-11-02 12:35 65309168 ----a-w- c:\windows\system32\mrt.exe 2012-10-09 09:23 . 2012-04-11 08:48 696760 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2012-10-09 09:23 . 2011-10-22 05:46 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2012-09-10 18:35 . 2012-09-10 18:36 821736 ----a-w- c:\windows\SysWow64\npDeployJava1.dll 2012-09-10 18:35 . 2010-09-13 17:32 746984 ----a-w- c:\windows\SysWow64\deployJava1.dll 2012-08-24 11:15 . 2012-09-23 06:59 17810944 ----a-w- c:\windows\system32\mshtml.dll 2012-08-24 10:39 . 2012-09-23 06:59 10925568 ----a-w- c:\windows\system32\ieframe.dll 2012-08-24 10:31 . 2012-09-23 07:00 2312704 ----a-w- c:\windows\system32\jscript9.dll 2012-08-24 10:22 . 2012-09-23 07:00 1346048 ----a-w- c:\windows\system32\urlmon.dll 2012-08-24 10:21 . 2012-09-23 07:00 1392128 ----a-w- c:\windows\system32\wininet.dll 2012-08-24 10:20 . 2012-09-23 07:00 1494528 ----a-w- c:\windows\system32\inetcpl.cpl 2012-08-24 10:18 . 2012-09-23 07:00 237056 ----a-w- c:\windows\system32\url.dll 2012-08-24 10:17 . 2012-09-23 07:00 85504 ----a-w- c:\windows\system32\jsproxy.dll 2012-08-24 10:14 . 2012-09-23 07:00 173056 ----a-w- c:\windows\system32\ieUnatt.exe 2012-08-24 10:14 . 2012-09-23 07:00 816640 ----a-w- c:\windows\system32\jscript.dll 2012-08-24 10:13 . 2012-09-23 07:00 599040 ----a-w- c:\windows\system32\vbscript.dll 2012-08-24 10:12 . 2012-09-23 07:00 2144768 ----a-w- c:\windows\system32\iertutil.dll 2012-08-24 10:11 . 2012-09-23 07:00 729088 ----a-w- c:\windows\system32\msfeeds.dll 2012-08-24 10:10 . 2012-09-23 07:00 96768 ----a-w- c:\windows\system32\mshtmled.dll 2012-08-24 10:09 . 2012-09-23 07:00 2382848 ----a-w- c:\windows\system32\mshtml.tlb 2012-08-24 10:04 . 2012-09-23 07:00 248320 ----a-w- c:\windows\system32\ieui.dll 2012-08-24 06:59 . 2012-09-23 07:00 1800704 ----a-w- c:\windows\SysWow64\jscript9.dll 2012-08-24 06:51 . 2012-09-23 07:00 1129472 ----a-w- c:\windows\SysWow64\wininet.dll 2012-08-24 06:51 . 2012-09-23 07:00 1427968 ----a-w- c:\windows\SysWow64\inetcpl.cpl 2012-08-24 06:47 . 2012-09-23 07:00 142848 ----a-w- c:\windows\SysWow64\ieUnatt.exe 2012-08-24 06:47 . 2012-09-23 07:00 420864 ----a-w- c:\windows\SysWow64\vbscript.dll 2012-08-24 06:43 . 2012-09-23 07:00 2382848 ----a-w- c:\windows\SysWow64\mshtml.tlb 2012-08-21 09:13 . 2011-11-02 08:24 359464 ----a-w- c:\windows\system32\drivers\aswSP.sys 2012-08-21 09:13 . 2011-11-02 08:24 969200 ----a-w- c:\windows\system32\drivers\aswSnx.sys 2012-08-21 09:13 . 2011-11-02 08:24 59728 ----a-w- c:\windows\system32\drivers\aswTdi.sys 2012-08-21 09:13 . 2011-11-02 08:24 71600 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys 2012-08-21 09:13 . 2011-11-02 08:24 44272 ----a-w- c:\windows\system32\drivers\aswRdr.sys 2012-08-21 09:13 . 2011-11-02 08:24 25232 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys 2012-08-21 09:12 . 2011-11-02 08:24 41224 ----a-w- c:\windows\avastSS.scr 2012-08-21 09:12 . 2011-11-02 08:24 227648 ----a-w- c:\windows\SysWow64\aswBoot.exe 2012-08-21 09:12 . 2011-02-10 10:48 285328 ----a-w- c:\windows\system32\aswBoot.exe . . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 94208 ----a-w- c:\users\acer m3641\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 94208 ----a-w- c:\users\acer m3641\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 94208 ----a-w- c:\users\acer m3641\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2008-03-04 21:38 121392 ----a-w- c:\acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 138240] "SoMud"="c:\program files (x86)\SoMud\somud.exe" [2011-06-28 3888128] "swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-11-12 68856] "Greenshot"="c:\program files (x86)\Greenshot\Greenshot.exe" [2010-07-12 548864] "Jing"="c:\program files (x86)\TechSmith\Jing\Jing.exe" [2012-02-01 2918224] "Grammar.net’s Grammar Checker"="c:\program files (x86)\Grammar.net’s Grammar Checker\GrammarChecker.exe" [2012-06-18 73216] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "PCMMediaSharing"="c:\program files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe" [2008-01-25 204908] "SiteAdvisor"="c:\program files (x86)\SiteAdvisor\6172\SiteAdv.exe" [2007-08-24 36640] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-06-25 98304] "WarReg_PopUp"="c:\acer\WR_PopUp\WarReg_PopUp.exe" [2006-11-05 57344] "EEventManager"="c:\program files (x86)\Epson Software\Event Manager\EEventManager.exe" [2009-12-03 976320] "googletalk"="c:\program files (x86)\Google\Google Talk\googletalk.exe" [2007-01-01 3739648] "eSnips_Downloader"="c:\program files (x86)\Logia\eSnipsDownloader\eSnips_Downloader.exe" [2010-05-24 1234432] "avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-08-21 4282728] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008] "azontop100analyzer"="c:\program files (x86)\AzonTop100Analyzer\azontop100analyzer.exe" [2012-06-09 44474097] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848] . c:\users\Evert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ OpenOffice.org 3.4.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2012-4-19 1199104] . c:\users\acer m3641\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Dropbox.lnk - c:\users\acer m3641\AppData\Roaming\Dropbox\bin\Dropbox.exe [2012-5-24 27112840] Feed Notifier.lnk - c:\program files (x86)\Feed Notifier\notifier.exe [2012-7-24 58368] OneNote 2007 Schermopname en Snel starten.lnk - c:\program files (x86)\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ ASETRES.EXE [2008-4-14 20480] Empowering Technology Launcher.lnk - c:\acer\Empowering Technology\eAPLauncher.exe [2008-9-23 535336] Sitecom Wireless Utility.lnk - c:\program files (x86)\Sitecom\Common\RaUI.exe [2010-6-3 1773568] WinZip Quick Pick.lnk - c:\program files (x86)\WinZip\WZQKPICK.EXE [2010-11-30 608584] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro36] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro36.sys] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro36Crusader] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro36CrusaderBoot] @="" . R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-09 250808] S2 ABBYY.Licensing.FineReader.Sprint.9.0;ABBYY FineReader 9.0 Sprint Licensing Service;c:\program files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [2009-05-14 759048] S2 Acer HomeMedia Connect Service;Acer HomeMedia Connect Service;c:\program files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe [2008-01-25 269448] S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960] . . HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs Themes . Inhoud van de 'Gedeelde Taken' map . 2012-10-26 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-11 09:23] . 2012-10-26 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-06-05 07:29] . 2012-10-26 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-06-05 07:29] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast] @="{472083B0-C522-11CF-8763-00608CC02F24}" [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}] 2012-08-21 09:11 133400 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 97792 ----a-w- c:\users\acer m3641\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 97792 ----a-w- c:\users\acer m3641\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 97792 ----a-w- c:\users\acer m3641\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2008-03-04 21:39 51248 ----a-w- c:\acer\Empowering Technology\eDataSecurity\x64\PSDProtect.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvSvc"="c:\windows\system32\nvsvc64.dll" [2007-11-27 88064] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-11-27 10721312] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-11-27 74752] "RtHDVCpl"="RAVCpl64.exe" [2008-03-25 6150656] "Skytel"="Skytel.exe" [2007-11-20 1826816] "eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\x64\eDSloader.exe" [2008-03-04 560688] "NVRaidService"="c:\windows\system32\nvraidservice.exe" [2008-06-06 333344] . ------- Bijkomende Scan ------- . uLocal Page = c:\windows\system32\blank.htm uDefault_Search_URL = hxxp://www.google.com/ie mDefault_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0413&s=1&o=vp64&d=1109&m=aspire_m3641 mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = *.local uSearchAssistant = hxxp://www.google.com/ie uSearchURL,(Default) = hxxp://search.yahoo.com/search?fr=mcafee&p=%s IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: Download Web &Images with SoMud - c:\program files (x86)\SoMud\scripts\ie\images-url.html IE: Download with SoMud - c:\program files (x86)\SoMud\scripts\ie\link-url.html IE: E&xporteren naar Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000 TCP: DhcpNameServer = 192.168.1.1 192.168.1.1 FF - ProfilePath - c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\ FF - prefs.js: browser.search.defaulturl - FF - prefs.js: browser.startup.homepage - hxxps://www.google.com/ FF - prefs.js: network.proxy.gopher - FF - prefs.js: network.proxy.gopher_port - 0 FF - prefs.js: network.proxy.type - 0 FF - ExtSQL: 2012-10-26 13:30; {B7082FAA-CB62-4872-9106-E42DD88EDE45}; c:\program files (x86)\McAfee\SiteAdvisor FF - ExtSQL: !HIDDEN! 2010-06-06 09:50; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension FF - ExtSQL: !HIDDEN! 2012-03-10 10:49; 5affxtbr@MyWebFace_5a.com; c:\program files (x86)\MyWebFace_5a\bar\1.bin . - - - - ORPHANS VERWIJDERD - - - - . Toolbar-10 - (no file) Wow6432Node-HKLM-Run-<NO NAME> - (no file) AddRemove-Allscoop RSS Submit Pro 1.0 - c:\windows\system32\ss2uinst.exe AddRemove-InstallBrain Updater Service - c:\programdata\InstallBrainService\ibsvc.exe . . . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_287_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_287_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}] @Denied: (A 2) (Everyone) . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0] @="Shockwave Flash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}] @Denied: (A 2) (Everyone) @="" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0] @="FlashBroker" . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes] "SymbolicLinkValue"=hex(6):5c,00,52,00,45,00,47,00,49,00,53,00,54,00,52,00,59, 00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\ . Voltooingstijd: 2012-10-26 14:18:20 ComboFix-quarantined-files.txt 2012-10-26 12:18 ComboFix2.txt 2012-10-25 14:09 ComboFix3.txt 2012-10-24 15:34 . Pre-Run: 202.190.618.624 bytes beschikbaar Post-Run: 202.093.678.592 bytes beschikbaar . - - End Of File - - 7370B12608994EF055C5E41CFE916005
  14. InternetMarketer
    Hierbij alvast the inhoud van de log ADWCleaner. I ga nu Combifix laten uitvoeren en zal de resultaten in mijn volgende reactie plakken. # AdwCleaner v2.005 - Verslag gemaakt op 26/10/2012 om 13:28:37 # Geactualiseerd op 14/10/2012 door Xplode # Besturingssysteem : Windows Vista Home Premium Service Pack 2 (64 bits) # Gebruiker : acer m3641 - PC_VAN_ACERM364 # Opstarten Modus : Normale modus # Gelanceerd vanaf : C:\Users\acer m3641\Downloads\adwcleaner.exe # Optie [Verwijderen] ***** [Diensten] ***** ***** [Files / Mappen] ***** File Verwijdert : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnu.dll File Verwijdert : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnu.xpt File Verwijdert : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnupdater2.dll File Verwijdert : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnupdater2.xpt File Verwijdert : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml File Verwijdert : C:\Program Files (x86)\Mozilla FireFox\searchplugins\Search_Results.xml File Verwijdert : C:\user.js File Verwijdert : C:\Users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\searchplugins\Askcom.xml File Verwijdert : C:\Users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\searchplugins\Conduit.xml File Verwijdert : C:\Users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\searchplugins\my-web-search.xml File Verwijdert : C:\Users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\searchplugins\Search_Results.xml File Verwijdert : C:\Users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\searchplugins\searchya.xml File Verwijdert : C:\Users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\searchplugins\SweetIm.xml Verwijdert bij het opstarten : C:\Program Files (x86)\Application Updater Verwijdert bij het opstarten : C:\Program Files (x86)\Babylon Verwijdert bij het opstarten : C:\Program Files (x86)\BrotherSoft_Extreme Verwijdert bij het opstarten : C:\Program Files (x86)\Common Files\Software Update Utility Verwijdert bij het opstarten : C:\Program Files (x86)\Common Files\spigot Verwijdert bij het opstarten : C:\Program Files (x86)\Conduit Verwijdert bij het opstarten : C:\Program Files (x86)\Ilivid Verwijdert bij het opstarten : C:\Program Files (x86)\Ironsource Verwijdert bij het opstarten : C:\Program Files (x86)\Mozilla Firefox\Extensions\afurladvisor@anchorfree.com Verwijdert bij het opstarten : C:\Program Files (x86)\Serif__WebPlus Verwijdert bij het opstarten : C:\Program Files (x86)\Softonic_Netherlands Verwijdert bij het opstarten : C:\Program Files (x86)\SweetIM Verwijdert bij het opstarten : C:\Program Files (x86)\YouTube Downloader Toolbar Verwijdert bij het opstarten : C:\ProgramData\Anti-phishing Domain Advisor Verwijdert bij het opstarten : C:\ProgramData\Babylon Verwijdert bij het opstarten : C:\ProgramData\boost_interprocess Verwijdert bij het opstarten : C:\ProgramData\InstallMate Verwijdert bij het opstarten : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ilivid Verwijdert bij het opstarten : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TheBflix Verwijdert bij het opstarten : C:\ProgramData\Premium Verwijdert bij het opstarten : C:\ProgramData\SweetIM Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\Local\Babylon Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\Local\Conduit Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\Local\Ilivid Player Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\LocalLow\AskToolbar Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\LocalLow\BabylonToolbar Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\LocalLow\bbrs_002.tb Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\LocalLow\BrotherSoft_Extreme Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\LocalLow\Conduit Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\LocalLow\ConduitEngine Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\LocalLow\mediabarim Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\LocalLow\PHPNukeDU Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\LocalLow\PriceGong Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\LocalLow\Search Settings Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\LocalLow\searchquband Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\LocalLow\Searchqutoolbar Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\LocalLow\Serif__WebPlus Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\LocalLow\ShopperReports3 Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\LocalLow\Softonic_Netherlands Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\LocalLow\TheBflix Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\LocalLow\Toolbar4 Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\Roaming\Babylon Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\Conduit Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\ConduitCommon Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\CT2102399 Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\CT2144081 Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\CT2405280 Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\CT2603445 Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\CT2776682 Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\CT3000930 Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\{07364a98-eb02-4736-bc54-ebe437fccb87} Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0} Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}(327) Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\{46735dee-f862-49d1-876d-6382794dc625}(328) Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\{51a86bb3-6602-4c85-92a5-130ee4864f13}(345) Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\{65ca59ee-9920-4d7f-8c41-bfa12403261a}(329) Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\{75656794-AB59-4712-BFBC-5D816D56F3BC} Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7} Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\{9eb64fa9-57c4-4a41-9940-e12e0418b693}(330) Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847} Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\bbrs_002@blabbers.com Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@babylon.com Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\toolbar@ask.com Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\mediabarim Verwijdert bij het opstarten : C:\Users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\Searchqutoolbar Verwijdert bij het opstarten : C:\Users\Evert\AppData\Local\Babylon Verwijdert bij het opstarten : C:\Users\Evert\AppData\LocalLow\AskToolbar Verwijdert bij het opstarten : C:\Users\Evert\AppData\LocalLow\BabylonToolbar Verwijdert bij het opstarten : C:\Users\Evert\AppData\LocalLow\Search Settings Verwijdert bij het opstarten : C:\Users\Evert\AppData\LocalLow\ShopperReports3 Verwijdert bij het opstarten : C:\Users\Evert\AppData\Roaming\Babylon Verwijdert bij het opstarten : C:\Users\Evert\AppData\Roaming\Mozilla\Firefox\Profiles\3bsihu5s.default\extensions\{28387537-e3f9-4ed7-860c-11e69af4a8a0} Verwijdert bij het opstarten : C:\Users\Evert\AppData\Roaming\Mozilla\Firefox\Profiles\3bsihu5s.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7} Verwijdert bij het opstarten : C:\Users\Evert\AppData\Roaming\Mozilla\Firefox\Profiles\3bsihu5s.default\extensions\{c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} Verwijdert bij het opstarten : C:\Users\Evert\AppData\Roaming\Mozilla\Firefox\Profiles\3bsihu5s.default\mediabarim Verwijdert bij het opstarten : C:\Users\Evert\AppData\Roaming\Mozilla\Firefox\Profiles\3bsihu5s.default\Searchqutoolbar Verwijdert bij het opstarten : C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE} ***** [Register] ***** Sleutel Verwijdert : HKCU\Software\APN Sleutel Verwijdert : HKCU\Software\AppDataLow\Software\AskToolbar Sleutel Verwijdert : HKCU\Software\AppDataLow\Software\blekkotb Sleutel Verwijdert : HKCU\Software\AppDataLow\Software\BrotherSoft_Extreme Sleutel Verwijdert : HKCU\Software\AppDataLow\Software\Conduit Sleutel Verwijdert : HKCU\Software\AppDataLow\Software\conduitEngine Sleutel Verwijdert : HKCU\Software\AppDataLow\Software\ConduitSearchScopes Sleutel Verwijdert : HKCU\Software\AppDataLow\Software\Crossrider Sleutel Verwijdert : HKCU\Software\AppDataLow\Software\PHPNukeDU Sleutel Verwijdert : HKCU\Software\AppDataLow\Software\PriceGong Sleutel Verwijdert : HKCU\Software\AppDataLow\Software\Savings Sidekick Sleutel Verwijdert : HKCU\Software\AppDataLow\Software\Search Settings Sleutel Verwijdert : HKCU\Software\AppDataLow\Software\searchqutoolbar Sleutel Verwijdert : HKCU\Software\AppDataLow\Software\Serif__WebPlus Sleutel Verwijdert : HKCU\Software\AppDataLow\Software\Softonic_Netherlands Sleutel Verwijdert : HKCU\Software\AppDataLow\Toolbar Sleutel Verwijdert : HKCU\Software\Ask.com Sleutel Verwijdert : HKCU\Software\BabylonToolbar Sleutel Verwijdert : HKCU\Software\BrowserCompanion Sleutel Verwijdert : HKCU\Software\DataMngr_Toolbar Sleutel Verwijdert : HKCU\Software\ilivid Sleutel Verwijdert : HKCU\Software\InstalledBrowserExtensions Sleutel Verwijdert : HKCU\Software\Ironsource Sleutel Verwijdert : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{37476589-E48E-439E-A706-56189E2ED4C4} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{79A765E1-C399-405B-85AF-466F52E918B0} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{A7BC02AF-1128-4A31-BCF8-1A3EE803D3B3} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{A81A974F-8A22-43E6-9243-5198FF758DA1} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Anti-phishing Domain Advisor Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BabylonToolbar Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\blekkotb Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BrotherSoft_Extreme Toolbar Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BrowserCompanion Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ilivid Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\PHPNukeDU Toolbar Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Savings Sidekick Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Searchqu 406 MediaBar Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\searchya Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Serif__WebPlus Toolbar Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Softonic_Netherlands Toolbar Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SoftwareUpdUtility Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Wincore MediaBar Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{04671EDC-FFBF-48AA-B445-B5770011CB4B} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{07364A98-EB02-4736-BC54-EBE437FCCB87} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{20A0BE68-8FD9-4539-8712-CE3D1C1FDFC6} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{26C9E18C-3717-4BE1-A225-04E4471F5B6E} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{46735DEE-F862-49D1-876D-6382794DC625} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{51A86BB3-6602-4C85-92A5-130EE4864F13} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{65CA59EE-9920-4D7F-8C41-BFA12403261A} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35C-6118-11DC-9C72-001320C79847} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07364A98-EB02-4736-BC54-EBE437FCCB87} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{20A0BE68-8FD9-4539-8712-CE3D1C1FDFC6} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{26C9E18C-3717-4BE1-A225-04E4471F5B6E} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{46735DEE-F862-49D1-876D-6382794DC625} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{51A86BB3-6602-4C85-92A5-130EE4864F13} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{65CA59EE-9920-4D7F-8C41-BFA12403261A} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7E39928C-E12F-4BAD-A8D9-CCD5A5200B39} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18} Sleutel Verwijdert : HKCU\Software\SMTTB2009 Sleutel Verwijdert : HKCU\Software\Softonic Sleutel Verwijdert : HKCU\Software\Somoto Toolbar Sleutel Verwijdert : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Sleutel Verwijdert : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9} Sleutel Verwijdert : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} Sleutel Verwijdert : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8A96AF9E-4074-43B7-BEA3-87217BDA7406} Sleutel Verwijdert : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21} Sleutel Verwijdert : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B} Sleutel Verwijdert : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847} Sleutel Verwijdert : HKLM\Software\APN Sleutel Verwijdert : HKLM\Software\Application Updater Sleutel Verwijdert : HKLM\Software\AskToolbar Sleutel Verwijdert : HKLM\Software\Babylon Sleutel Verwijdert : HKLM\Software\BabylonToolbar Sleutel Verwijdert : HKLM\Software\BrotherSoft_Extreme Sleutel Verwijdert : HKLM\Software\BrowserCompanion Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{15F6BCB7-BB0F-4A66-8762-4765B05597EB} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{1973277F-87B0-4EA3-9ED2-470A91D284CF} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{1FC41815-FA4C-4F8B-B143-2C045C8EA2FC} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{20EDC024-43C5-423E-B7F5-FD93523E0D9F} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{21493C1F-D071-496A-9C27-450578888291} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{373ED12D-B306-43AC-9485-A7C5133DC34C} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{403A885F-CB00-40C1-BDC1-EB09053194F7} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{4CE516A7-F7AC-4628-B411-8F886DC5733E} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{55C1727F-5535-4C2A-9601-8C2458608B48} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{628F3201-34D0-49C0-BB9A-82A26AEFB291} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{6C259840-5BA8-46E6-8ED1-EF3BA47D8BA1} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{A7DDCBDE-5C86-415c-8A37-763AE183E7E4} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{AD25754E-D76C-42B3-A335-2F81478B722F} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{ED6535E7-F778-48A5-A060-549D30024511} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\DiscoveryHelper.DLL Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\dnu.EXE Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\escort.DLL Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\esrv.EXE Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\GIFAnimator.DLL Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\IMTrProgress.DLL Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\IMWeb.DLL Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\TbCommonUtils.DLL Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\TbHelper.EXE Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\tdataprotocol.DLL Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\updatebho.DLL Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\wit4ie.DLL Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\WMHelper.DLL Sleutel Verwijdert : HKLM\SOFTWARE\Classes\b Sleutel Verwijdert : HKLM\SOFTWARE\Classes\bbylnApp.appCore Sleutel Verwijdert : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Conduit.Engine Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CrossriderApp0005060.BHO Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CrossriderApp0005060.BHO.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\DiscoveryHelper.iMesh6Discovery Sleutel Verwijdert : HKLM\SOFTWARE\Classes\DiscoveryHelper.iMesh6Discovery.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\dnUpdate Sleutel Verwijdert : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser Sleutel Verwijdert : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController Sleutel Verwijdert : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\escort.escortIEPane Sleutel Verwijdert : HKLM\SOFTWARE\Classes\escort.escortIEPane.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\escort.escrtBtn.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc Sleutel Verwijdert : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\esrv.searchyaESrvc Sleutel Verwijdert : HKLM\SOFTWARE\Classes\esrv.searchyaESrvc.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd Sleutel Verwijdert : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\I Sleutel Verwijdert : HKLM\SOFTWARE\Classes\imweb.imwebcontrol Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF Sleutel Verwijdert : HKLM\SOFTWARE\Classes\ironsource.searchyaappCore Sleutel Verwijdert : HKLM\SOFTWARE\Classes\ironsource.searchyaappCore.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\ironsource.searchyaHlpr Sleutel Verwijdert : HKLM\SOFTWARE\Classes\ironsource.searchyaHlpr.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils Sleutel Verwijdert : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator Sleutel Verwijdert : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard Sleutel Verwijdert : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\sim-packages Sleutel Verwijdert : HKLM\SOFTWARE\Classes\SMTTB2009.IEToolbar Sleutel Verwijdert : HKLM\SOFTWARE\Classes\SMTTB2009.IEToolbar.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar Sleutel Verwijdert : HKLM\SOFTWARE\Classes\SWEETIE.IEToolbar.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook Sleutel Verwijdert : HKLM\SOFTWARE\Classes\sweetim_urlsearchhook.toolbarurlsearchhook.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TbCommonUtils.CommonUtils.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TbHelper.TbDownloadManager.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TbHelper.TbPropertyManager.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TbHelper.TbRequest Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TbHelper.TbRequest.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TbHelper.TbTask Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TbHelper.TbTask.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TbHelper.ToolbarHelper.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Toolbar.CT2102399 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Toolbar.CT2603445 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Toolbar.CT2776682 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Toolbar.CT3000930 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Toolbar3.ContextMenuNotifier.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Toolbar3.CustomInternetSecurityImpl.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Toolbar3.SMTTB2009 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Toolbar3.SMTTB2009.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{03119103-0854-469D-807A-171568457991} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{09C554C3-109B-483C-A06B-F14172F1A947} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{15F6BCB7-BB0F-4A66-8762-4765B05597EB} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{252C2315-CCE0-4446-8DA7-C00292A690BA} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{403A885F-CB00-40C1-BDC1-EB09053194F7} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{4D3B167E-5FD8-4276-8FD7-9DF19C1E4D19} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{55C1727F-5535-4C2A-9601-8C2458608B48} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{69332529-EEC8-4D0D-9FD3-202C4AE8E589} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{8830DDF0-3042-404D-A62C-384A85E34833} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{92380354-381A-471F-BE2E-DD9ACD9777EA} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{955B782E-CDC8-4CEE-B6F6-AD7D541A8D8A} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{96F7FABC-5789-EFA4-B6ED-1272F4C1D27B} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{AD25754E-D76C-42B3-A335-2F81478B722F} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{B12E99ED-69BD-437C-86BE-C862B9E5444D} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{B87F8B63-7274-43FD-87FA-09D3B7496148} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{C2CF0D01-7657-48AA-98C9-AE5E64757FCC} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{C4BAE205-5E02-4E32-876E-F34B4E2D000C} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{EEE6C35F-6118-11DC-9C72-001320C79847} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\updatebho.TimerBHO Sleutel Verwijdert : HKLM\SOFTWARE\Classes\updatebho.TimerBHO.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\wit4ie.WitBHO Sleutel Verwijdert : HKLM\SOFTWARE\Classes\wit4ie.WitBHO.2 Sleutel Verwijdert : HKLM\Software\Conduit Sleutel Verwijdert : HKLM\Software\conduitEngine Sleutel Verwijdert : HKLM\Software\DataMngr Sleutel Verwijdert : HKLM\Software\ilivid Sleutel Verwijdert : HKLM\Software\Ironsource Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\SweetIM.exe Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011501160} Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{2EF92CBB-D12C-41B0-857B-7BE4536AC1F7} Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{6293E22F-B36A-49D3-8961-99EAA446920B} Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96} Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7E39928C-E12F-4BAD-A8D9-CCD5A5200B39} Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{872F3C0B-4462-424C-BB9F-74C6899B9F92} Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{AEE88B81-C2FB-4733-A826-88CB0A67FB61} Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B6F8DA9F-2696-419e-A8A3-19BE41EF51BD} Sleutel Verwijdert : HKLM\Software\PHPNukeDU Sleutel Verwijdert : HKLM\Software\Search Settings Sleutel Verwijdert : HKLM\Software\SearchquMediabarTb Sleutel Verwijdert : HKLM\Software\Serif__WebPlus Sleutel Verwijdert : HKLM\Software\Softonic_Netherlands Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{04671EDC-FFBF-48AA-B445-B5770011CB4B} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{13119113-0854-469D-807A-171568457991} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{1C950DE5-D31E-42FB-AFB9-91B0161633D8} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{22222222-2222-2222-2222-220022502260} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2656B92B-0207-4afb-BEBF-F5FD231ECD39} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{27BF8F8D-58B8-D41C-F913-B7EEB57EF6F6} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{2EF92CBB-D12C-41B0-857B-7BE4536AC1F7} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{33119133-0854-469D-807A-171568457991} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{338B4DFE-2E2C-4338-9E41-E176D497299E} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{34CB0620-E343-4772-BBA8-D3074BC47516} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3BDF4CE9-E81D-432B-A55E-9F0570CE811F} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3BF72F68-72D8-461D-A884-329D936C5581} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{412CD209-DDA4-4275-8C79-55F1C93FBD47} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{54B24FA9-87E8-47FC-8589-F9D382D8B299} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{57CADC46-58FF-4105-B733-5A9F3FC9783C} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{59570C1F-B692-48c9-91B4-7809E6945287} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{5B45AC88-523C-431E-86D7-F339B2EE262E} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{6293E22F-B36A-49D3-8961-99EAA446920B} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{63A0F7FA-2C95-4d7e-AF25-EFCC303D20A1} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{6559E502-6EE1-46b8-A83C-F3A45BDA23EE} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{6801410E-CC88-42D6-A93B-909E95645407} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{78E9D883-93CD-4072-BEF3-38EE581E2839} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{7E39928C-E12F-4BAD-A8D9-CCD5A5200B39} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{82AC53B4-164C-4B07-A016-437A8388B81A} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{83AC1413-FCE4-4A46-9DD5-4F31F306E71F} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{8B0C188C-F6F3-484D-8225-E40262DDE633} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{9F34B17E-FF0D-4FAB-97C4-9713FEE79052} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A2858A72-758F-4486-B6A1-7F1DCC0924FA} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A4A0CB15-8465-4F58-A7E5-73084EA2A064} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A9A56B8E-2DEB-4ED3-BC92-1FA450BCE1A5} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AE338F6D-5A7C-4D1D-86E3-C618532079B5} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{AEE88B81-C2FB-4733-A826-88CB0A67FB61} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B6F8DA9F-2696-419e-A8A3-19BE41EF51BD} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C339D489-FABC-41DD-B39D-276101667C70} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C63CA8A4-AB4E-49e5-A6C0-33FC86D80205} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{C6A7847E-8931-4a9a-B4EF-72A91E3CCF4D} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CA3EB689-8F09-4026-AA10-B9534C691CE0} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D565B35E-B787-40FA-95E3-E3562F8FC1A0} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D89031C2-10DA-4C90-9A62-FCED012BC46B} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DD0F1D24-E250-4e93-966C-65615720AEFB} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E15A9BFD-D16D-496D-8222-44CADF316E70} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{EC1277BB-1C71-4c0d-BA6D-BFEA16E773A6} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\clbfjfbnelcflpgpklppgplejolacbej Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dhkplhfnhceodhffomolpfigojocbpcb Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110011501160} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{28387537-E3F9-4ED7-860C-11E69AF4A8A0} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3C883496-DBA0-44C8-8691-142FDFB8B14E} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{65F10D02-BDFB-4372-979D-078BEDB14BDC} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{819DC4CA-4FFF-4C2E-800D-F346471D99BC} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99079A25-328F-4BD4-BE04-00955ACAA0A7} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A87D9683-4F27-43D1-8367-8E797627830D} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BCEAAC73-320A-4D0F-BF37-2CDFBCA8F9B4} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C27889EB-2CA6-4354-A463-2C120253FD06} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C2D64FF7-0AB8-4263-89C9-EA3B0F8F050C} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D9B97B71-DFCE-4D36-BA46-B8BF66CB67C4} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F3FEE66E-E034-436A-86E4-9690573BEE8A} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FF048CDB-0E18-4406-AA8C-5EC79CF8FDEA} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{8A96AF9E-4074-43B7-BEA3-87217BDA7406} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A7BC02AF-1128-4A31-BCF8-1A3EE803D3B3} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A81A974F-8A22-43E6-9243-5198FF758DA1} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Anti-phishing Domain Advisor Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\blekkotb Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\BrotherSoft_Extreme Toolbar Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Conduit Engine Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\conduitEngine Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ilivid Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\PHPNukeDU Toolbar Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Savings Sidekick Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Searchqu 406 MediaBar Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\searchya Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Serif__WebPlus Toolbar Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Softonic_Netherlands Toolbar Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdUtility Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Wincore MediaBar Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{1C950DE5-D31E-42FB-AFB9-91B0161633D8} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{27BF8F8D-58B8-D41C-F913-B7EEB57EF6F6} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{3BF72F68-72D8-461D-A884-329D936C5581} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{54B24FA9-87E8-47FC-8589-F9D382D8B299} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{5B45AC88-523C-431E-86D7-F339B2EE262E} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{6801410E-CC88-42D6-A93B-909E95645407} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{78E9D883-93CD-4072-BEF3-38EE581E2839} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{83AC1413-FCE4-4A46-9DD5-4F31F306E71F} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{8B0C188C-F6F3-484D-8225-E40262DDE633} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{A9A56B8E-2DEB-4ED3-BC92-1FA450BCE1A5} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{AE338F6D-5A7C-4D1D-86E3-C618532079B5} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{B6F8DA9F-2696-419e-A8A3-19BE41EF51BD} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{C339D489-FABC-41DD-B39D-276101667C70} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{D89031C2-10DA-4C90-9A62-FCED012BC46B} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{E15A9BFD-D16D-496D-8222-44CADF316E70} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{01221FCC-4BFB-461C-B08C-F6D2DF309921} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{23119123-0854-469D-807A-171568457991} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{2A42D13C-D427-4787-821B-CF6973855778} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{2E9A2DCB-F5DB-40D0-8E62-3B47DD476A77} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{3D8478AA-7B88-48A9-8BCB-B85D594411EC} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{452AE416-9A97-44CA-93DA-D0F15C36254F} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{45CDA4F7-594C-49A0-AAD1-8224517FE979} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{4897BBA6-48D9-468C-8EFA-846275D7701B} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{4D8ED2B3-DC62-43EC-ABA3-5B74F046B1BE} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550055505560} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{59B23951-2232-4AFB-81D4-64A8A16D457A} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{5E8CD073-21DF-4117-9BBD-D03C45D36CAE} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660066506660} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{78888F8B-D5E4-43CE-89F5-C8C18223AF64} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{817923CB-4744-4216-B250-CF7EDA8F1767} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{81E522F1-9E90-47DD-A2CE-39B0C00274A0} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{81E852CC-1FD5-4004-8761-79A48B975E29} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{8B8558F6-DC26-4F39-8417-34B8934AA459} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{8E096DFB-6AB7-45C7-BF64-B313C7096529} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{95B6A271-FEB4-4160-B0FF-44394C21C8DC} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{996A9940-2F2C-4486-A479-439C4A15F278} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{9B7D44BA-376C-456F-B289-5034270322FD} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{9BD8FF26-2C71-4D35-9FE2-AD8D25AECC36} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{9E393F82-2644-4AB6-B994-1AD39D6C59EE} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{9F0C17EB-EF2C-4278-9136-2D547656BC03} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{A3A2A5C0-1306-4D1A-A093-9CECA4230002} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{A439801C-961D-452C-AB42-7848E9CBD289} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{B2CA345D-ADB8-4F5D-AC64-4AB34322F659} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{B37B4BA6-334E-72C1-B57E-6AFE8F8A5AF3} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{B77AD4AC-C1C2-B293-7737-71E13A11FFEA} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{B9F43021-60D4-42A6-A065-9BA37F38AC47} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{BBA74401-6D6F-4BBD-9F65-E8623814F3BB} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{BCE6E914-AEF0-4FEE-8FC8-06F9B42BF890} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{BD8D5FFA-4F92-48AD-BFBE-7896916656F5} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{BF921DD3-732A-4A11-933B-A5EA49F2FD2C} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{C8D424EF-CB21-49A0-8659-476FBAB0F8E8} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{C92E6D80-EC54-45CC-AC4B-A7CF42F11B52} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{CA1CE38C-F04C-471F-B9F3-083C58165C10} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{D1CB564E-F38A-4F2A-8257-60E3F8BE9F34} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{D2F39980-399F-492E-8D88-5FF7CCB3B47F} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{D83B296A-2FA6-425B-8AE8-A1F33D99FBD6} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{E67D5BC7-7129-493E-9281-F47BDAFACE4F} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{E773F2CF-5E6E-FF2B-81A1-AC581A26B2B2} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{EEE6C358-6118-11DC-9C72-001320C79847} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{EEE6C359-6118-11DC-9C72-001320C79847} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{EEE6C35A-6118-11DC-9C72-001320C79847} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{F293BBC0-DA7E-4CF1-9EEA-CE90CFE0DF86} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{F4EBB1E2-21F3-4786-8CF4-16EC5925867F} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{FEFBC559-C3C7-4287-B05B-49D489B80749} Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD21} Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170} Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF Sleutel Verwijdert : HKU\S-1-5-21-103516781-1625148633-3302575936-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Waarde Verwijdert : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{65CA59EE-9920-4D7F-8C41-BFA12403261A}] Waarde Verwijdert : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}] Waarde Verwijdert : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{07364A98-EB02-4736-BC54-EBE437FCCB87}] Waarde Verwijdert : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{46735DEE-F862-49D1-876D-6382794DC625}] Waarde Verwijdert : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{51A86BB3-6602-4C85-92A5-130EE4864F13}] Waarde Verwijdert : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{65CA59EE-9920-4D7F-8C41-BFA12403261A}] Waarde Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Anti-phishing Domain Advisor] Waarde Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [sweetIM] Waarde Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe] Waarde Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs [C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll] ***** [browsers] ***** -\\ Internet Explorer v9.0.8112.16421 Vervangen : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://searchya.com/?chnl=fap&s=2&cr=879914219&cd=2XzutAtN2Y1L1QzutDtDyCtD0BtAyE0AtB0FtAyEtCyD0C0A0FtN0D0TzutBtDtCtBtDtBtDzz --> hxxp://www.google.com -\\ Mozilla Firefox v15.0 (nl) Profielnaam : default File : C:\Users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\prefs.js C:\Users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\user.js ... Verwijdert ! Verwijdert : user_pref("CT2102399..clientLogIsEnabled", true); Verwijdert : user_pref("CT2102399..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...] Verwijdert : user_pref("CT2102399..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...] Verwijdert : user_pref("CT2102399.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); Verwijdert : user_pref("CT2102399.CT2102399", "CT2102399"); Verwijdert : user_pref("CT2102399.CurrentServerDate", "26-6-2011"); Verwijdert : user_pref("CT2102399.DialogsAlignMode", "LTR"); Verwijdert : user_pref("CT2102399.DialogsGetterLastCheckTime", "Sun Jun 26 2011 16:02:21 GMT+0200"); Verwijdert : user_pref("CT2102399.DownloadReferralCookieData", ""); Verwijdert : user_pref("CT2102399.EMailNotifierPollDate", "Sun Jun 26 2011 16:02:17 GMT+0200"); Verwijdert : user_pref("CT2102399.ExternalComponentPollDate128987942863125952", "Sun Jun 26 2011 16:02:17 GMT+020[...] Verwijdert : user_pref("CT2102399.ExternalComponentPollDate129007784800094055", "Sun Jun 26 2011 16:02:17 GMT+020[...] Verwijdert : user_pref("CT2102399.ExternalComponentPollDate129237587753858307", "Sun Jun 26 2011 16:02:17 GMT+020[...] Verwijdert : user_pref("CT2102399.FeedLastCount128731380714969334", 296); Verwijdert : user_pref("CT2102399.FeedLastCount129315323335031267", 359); Verwijdert : user_pref("CT2102399.FeedPollDate128734848660238153", "Sun Jun 26 2011 16:02:18 GMT+0200"); Verwijdert : user_pref("CT2102399.FeedPollDate128734848780081259", "Sun Jun 26 2011 16:02:18 GMT+0200"); Verwijdert : user_pref("CT2102399.FeedPollDate128734848899768760", "Sun Jun 26 2011 16:02:18 GMT+0200"); Verwijdert : user_pref("CT2102399.FeedPollDate128734849162893952", "Sun Jun 26 2011 16:02:18 GMT+0200"); Verwijdert : user_pref("CT2102399.FeedPollDate128734849447894294", "Sun Jun 26 2011 16:02:18 GMT+0200"); Verwijdert : user_pref("CT2102399.FeedPollDate128734849563988162", "Sun Jun 26 2011 16:02:19 GMT+0200"); Verwijdert : user_pref("CT2102399.FeedPollDate128734849871644036", "Sun Jun 26 2011 16:02:19 GMT+0200"); Verwijdert : user_pref("CT2102399.FeedPollDate128734850012112791", "Sun Jun 26 2011 16:02:19 GMT+0200"); Verwijdert : user_pref("CT2102399.FeedPollDate128734851254769189", "Sun Jun 26 2011 16:02:19 GMT+0200"); Verwijdert : user_pref("CT2102399.FeedPollDate128734851343519240", "Sun Jun 26 2011 16:02:19 GMT+0200"); Verwijdert : user_pref("CT2102399.FeedPollDate128734851486175530", "Sun Jun 26 2011 16:02:19 GMT+0200"); Verwijdert : user_pref("CT2102399.FeedPollDate128734851555550653", "Sun Jun 26 2011 16:02:20 GMT+0200"); Verwijdert : user_pref("CT2102399.FeedPollDate128734851626019450", "Sun Jun 26 2011 16:02:20 GMT+0200"); Verwijdert : user_pref("CT2102399.FeedPollDate128734851705082013", "Sun Jun 26 2011 16:02:20 GMT+0200"); Verwijdert : user_pref("CT2102399.FeedPollDate128737397111669438", "Sun Jun 26 2011 16:02:19 GMT+0200"); Verwijdert : user_pref("CT2102399.FeedPollDate128737397234794525", "Sun Jun 26 2011 16:02:19 GMT+0200"); Verwijdert : user_pref("CT2102399.FeedPollDate128737397358857050", "Sun Jun 26 2011 16:02:19 GMT+0200"); Verwijdert : user_pref("CT2102399.FeedPollDate128902540560556910", "Sun Jun 26 2011 16:02:18 GMT+0200"); Verwijdert : user_pref("CT2102399.FeedPollDate129116725838750303", "Sun Jun 26 2011 16:02:18 GMT+0200"); Verwijdert : user_pref("CT2102399.FeedPollDate129176784974660683", "Sun Jun 26 2011 16:02:19 GMT+0200"); Verwijdert : user_pref("CT2102399.FeedPollDate129192039304157236", "Sun Jun 26 2011 16:02:19 GMT+0200"); Verwijdert : user_pref("CT2102399.FeedPollDate129195361967280412", "Sun Jun 26 2011 16:02:19 GMT+0200"); Verwijdert : user_pref("CT2102399.FeedPollDate129311824697844123", "Sun Jun 26 2011 16:02:19 GMT+0200"); Verwijdert : user_pref("CT2102399.FeedPollDate129311824697844129", "Sun Jun 26 2011 16:02:19 GMT+0200"); Verwijdert : user_pref("CT2102399.FeedPollDate129313894484444664", "Sun Jun 26 2011 16:02:18 GMT+0200"); Verwijdert : user_pref("CT2102399.FeedPollDate129315104353631992", "Sun Jun 26 2011 16:02:18 GMT+0200"); Verwijdert : user_pref("CT2102399.FeedPollDate129315323335343769", "Sun Jun 26 2011 16:02:18 GMT+0200"); Verwijdert : user_pref("CT2102399.FeedTTL128734849162893952", 5); Verwijdert : user_pref("CT2102399.FeedTTL128734849447894294", 20); Verwijdert : user_pref("CT2102399.FeedTTL128734849563988162", 30); Verwijdert : user_pref("CT2102399.FeedTTL128734849871644036", 15); Verwijdert : user_pref("CT2102399.FeedTTL128734850012112791", 5); Verwijdert : user_pref("CT2102399.FeedTTL128902540560556910", 40); Verwijdert : user_pref("CT2102399.FeedTTL129116725838750303", 40); Verwijdert : user_pref("CT2102399.FeedTTL129176784974660683", 40); Verwijdert : user_pref("CT2102399.FeedTTL129192039304157236", 40); Verwijdert : user_pref("CT2102399.FeedTTL129311824697844123", 40); Verwijdert : user_pref("CT2102399.FeedTTL129311824697844129", 40); Verwijdert : user_pref("CT2102399.FeedTTL129313894484444664", 40); Verwijdert : user_pref("CT2102399.FeedTTL129315104353631992", 40); Verwijdert : user_pref("CT2102399.FeedTTL129315323335343769", 40); Verwijdert : user_pref("CT2102399.FirstServerDate", "26-6-2011"); Verwijdert : user_pref("CT2102399.FirstTime", true); Verwijdert : user_pref("CT2102399.FirstTimeFF3", true); Verwijdert : user_pref("CT2102399.FixPageNotFoundErrors", true); Verwijdert : user_pref("CT2102399.GroupingServerCheckInterval", 1440); Verwijdert : user_pref("CT2102399.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); Verwijdert : user_pref("CT2102399.HasUserGlobalKeys", true); Verwijdert : user_pref("CT2102399.HomePageProtectorEnabled", true); Verwijdert : user_pref("CT2102399.Initialize", true); Verwijdert : user_pref("CT2102399.InitializeCommonPrefs", true); Verwijdert : user_pref("CT2102399.InstallationAndCookieDataSentCount", 2); Verwijdert : user_pref("CT2102399.InstalledDate", "Sun Jun 26 2011 16:02:21 GMT+0200"); Verwijdert : user_pref("CT2102399.InvalidateCache", false); Verwijdert : user_pref("CT2102399.IsGrouping", false); Verwijdert : user_pref("CT2102399.IsInitSetupIni", true); Verwijdert : user_pref("CT2102399.IsMulticommunity", false); Verwijdert : user_pref("CT2102399.IsOpenThankYouPage", true); Verwijdert : user_pref("CT2102399.IsOpenUninstallPage", true); Verwijdert : user_pref("CT2102399.IsProtectorsInit", true); Verwijdert : user_pref("CT2102399.LanguagePackLastCheckTime", "Sun Jun 26 2011 16:02:21 GMT+0200"); Verwijdert : user_pref("CT2102399.LanguagePackReloadIntervalMM", 1440); Verwijdert : user_pref("CT2102399.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...] Verwijdert : user_pref("CT2102399.LastLogin_3.5.0.12", "Sun Jun 26 2011 16:02:21 GMT+0200"); Verwijdert : user_pref("CT2102399.LatestVersion", "3.3.3.2"); Verwijdert : user_pref("CT2102399.Locale", "nl"); Verwijdert : user_pref("CT2102399.MCDetectTooltipHeight", "83"); Verwijdert : user_pref("CT2102399.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); Verwijdert : user_pref("CT2102399.MCDetectTooltipWidth", "295"); Verwijdert : user_pref("CT2102399.MyStuffEnabledAtInstallation", true); Verwijdert : user_pref("CT2102399.OriginalFirstVersion", "3.5.0.12"); Verwijdert : user_pref("CT2102399.RadioIsPodcast", false); Verwijdert : user_pref("CT2102399.RadioLastCheckTime", "Sun Jun 26 2011 16:02:20 GMT+0200"); Verwijdert : user_pref("CT2102399.RadioLastUpdateIPServer", "3"); Verwijdert : user_pref("CT2102399.RadioLastUpdateServer", "129315398872270000"); Verwijdert : user_pref("CT2102399.RadioMediaID", "9511994"); Verwijdert : user_pref("CT2102399.RadioMediaType", "Media Player"); Verwijdert : user_pref("CT2102399.RadioMenuSelectedID", "EBRadioMenu_CT21023999511994"); Verwijdert : user_pref("CT2102399.RadioShrinkedFromSetup", false); Verwijdert : user_pref("CT2102399.RadioStationName", "Radio%201%20"); Verwijdert : user_pref("CT2102399.RadioStationURL", "hxxp://www.omroep.nl/live/radio1-breed.asx"); Verwijdert : user_pref("CT2102399.SavedHomepage", "hxxp://www.searchqu.com/406"); Verwijdert : user_pref("CT2102399.SearchEngineBeforeUnload", "PHPNukeDU Customized Web Search"); Verwijdert : user_pref("CT2102399.SearchFromAddressBarIsInit", true); Verwijdert : user_pref("CT2102399.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT210[...] Verwijdert : user_pref("CT2102399.SearchInNewTabEnabled", true); Verwijdert : user_pref("CT2102399.SearchInNewTabIntervalMM", 1440); Verwijdert : user_pref("CT2102399.SearchInNewTabLastCheckTime", "Sun Jun 26 2011 16:02:19 GMT+0200"); Verwijdert : user_pref("CT2102399.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...] Verwijdert : user_pref("CT2102399.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...] Verwijdert : user_pref("CT2102399.SearchProtectorEnabled", true); Verwijdert : user_pref("CT2102399.SearchProtectorToolbarDisabled", false); Verwijdert : user_pref("CT2102399.ServiceMapLastCheckTime", "Sun Jun 26 2011 16:02:17 GMT+0200"); Verwijdert : user_pref("CT2102399.SettingsLastCheckTime", "Sun Jun 26 2011 16:02:17 GMT+0200"); Verwijdert : user_pref("CT2102399.SettingsLastUpdate", "1307636202"); Verwijdert : user_pref("CT2102399.ThirdPartyComponentsInterval", 504); Verwijdert : user_pref("CT2102399.ThirdPartyComponentsLastCheck", "Sun Jun 26 2011 16:02:17 GMT+0200"); Verwijdert : user_pref("CT2102399.ThirdPartyComponentsLastUpdate", "1256026239"); Verwijdert : user_pref("CT2102399.ToolbarShrinkedFromSetup", false); Verwijdert : user_pref("CT2102399.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2102399"); Verwijdert : user_pref("CT2102399.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,OurTo[...] Verwijdert : user_pref("CT2102399.UserID", "UN56079921564721778"); Verwijdert : user_pref("CT2102399.WeatherNetwork", ""); Verwijdert : user_pref("CT2102399.WeatherPollDate", "Sun Jun 26 2011 16:02:19 GMT+0200"); Verwijdert : user_pref("CT2102399.WeatherUnit", "C"); Verwijdert : user_pref("CT2102399.alertChannelId", "518308"); Verwijdert : user_pref("CT2102399.generalConfigFromLogin", "{\"SocialDomains\":\"social.conduit.com;apps.conduit.[...] Verwijdert : user_pref("CT2102399.globalFirstTimeInfoLastCheckTime", "Sun Jun 26 2011 16:02:21 GMT+0200"); Verwijdert : user_pref("CT2102399.homepageProtectorEnableByLogin", true); Verwijdert : user_pref("CT2102399.initDone", true); Verwijdert : user_pref("CT2102399.isAppTrackingManagerOn", true); Verwijdert : user_pref("CT2102399.isFirstRadioInstallation", false); Verwijdert : user_pref("CT2102399.myStuffEnabled", true); Verwijdert : user_pref("CT2102399.myStuffPublihserMinWidth", 400); Verwijdert : user_pref("CT2102399.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...] Verwijdert : user_pref("CT2102399.myStuffServiceIntervalMM", 1440); Verwijdert : user_pref("CT2102399.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...] Verwijdert : user_pref("CT2102399.searchProtectorDialogDelayInSec", 10); Verwijdert : user_pref("CT2102399.searchProtectorEnableByLogin", true); Verwijdert : user_pref("CT2102399.testingCtid", ""); Verwijdert : user_pref("CT2102399.toolbarAppMetaDataLastCheckTime", "Sun Jun 26 2011 16:02:21 GMT+0200"); Verwijdert : user_pref("CT2102399.toolbarContextMenuLastCheckTime", "Sun Jun 26 2011 16:02:21 GMT+0200"); Verwijdert : user_pref("CT2102399.usagesFlag", 1); Verwijdert : user_pref("CT2144081..clientLogIsEnabled", false); Verwijdert : user_pref("CT2144081..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...] Verwijdert : user_pref("CT2144081..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...] Verwijdert : user_pref("CT2144081.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); Verwijdert : user_pref("CT2144081.AppTrackingLastCheckTime", "Mon Aug 29 2011 14:27:56 GMT+0200"); Verwijdert : user_pref("CT2144081.CT2144081", "CT2144081"); Verwijdert : user_pref("CT2144081.CurrentServerDate", "29-8-2011"); Verwijdert : user_pref("CT2144081.DialogsAlignMode", "LTR"); Verwijdert : user_pref("CT2144081.DialogsGetterLastCheckTime", "Mon Aug 29 2011 14:27:47 GMT+0200"); Verwijdert : user_pref("CT2144081.DownloadReferralCookieData", "{\"BannerName\":\"\",\"BannerTypeId\":\"\",\"Bann[...] Verwijdert : user_pref("CT2144081.FirstServerDate", "3-1-2011"); Verwijdert : user_pref("CT2144081.FirstTime", true); Verwijdert : user_pref("CT2144081.FirstTimeFF3", true); Verwijdert : user_pref("CT2144081.FixPageNotFoundErrors", false); Verwijdert : user_pref("CT2144081.GroupingServerCheckInterval", 1440); Verwijdert : user_pref("CT2144081.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); Verwijdert : user_pref("CT2144081.HasUserGlobalKeys", true); Verwijdert : user_pref("CT2144081.HomePageProtectorEnabled", false); Verwijdert : user_pref("CT2144081.Initialize", true); Verwijdert : user_pref("CT2144081.InitializeCommonPrefs", true); Verwijdert : user_pref("CT2144081.InstallationAndCookieDataSentCount", 3); Verwijdert : user_pref("CT2144081.InstalledDate", "Mon Jan 03 2011 08:10:09 GMT+0100"); Verwijdert : user_pref("CT2144081.IsAlertDBUpdated", true); Verwijdert : user_pref("CT2144081.IsGrouping", false); Verwijdert : user_pref("CT2144081.IsMulticommunity", false); Verwijdert : user_pref("CT2144081.IsOpenThankYouPage", true); Verwijdert : user_pref("CT2144081.IsOpenUninstallPage", true); Verwijdert : user_pref("CT2144081.LanguagePackLastCheckTime", "Mon Aug 29 2011 14:27:47 GMT+0200"); Verwijdert : user_pref("CT2144081.LanguagePackReloadIntervalMM", 1440); Verwijdert : user_pref("CT2144081.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...] Verwijdert : user_pref("CT2144081.LastLogin_3.3.0.19", "Mon Jan 03 2011 12:20:54 GMT+0100"); Verwijdert : user_pref("CT2144081.LastLogin_3.3.2.1", "Tue Mar 22 2011 13:15:55 GMT+0100"); Verwijdert : user_pref("CT2144081.LastLogin_3.5.0.12", "Sun Jun 26 2011 16:03:40 GMT+0200"); Verwijdert : user_pref("CT2144081.LastLogin_3.6.0.10", "Mon Aug 29 2011 14:27:47 GMT+0200"); Verwijdert : user_pref("CT2144081.LatestVersion", "3.5.0.12"); Verwijdert : user_pref("CT2144081.Locale", "en"); Verwijdert : user_pref("CT2144081.MCDetectTooltipHeight", "83"); Verwijdert : user_pref("CT2144081.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); Verwijdert : user_pref("CT2144081.MCDetectTooltipWidth", "295"); Verwijdert : user_pref("CT2144081.MyStuffEnabledAtInstallation", true); Verwijdert : user_pref("CT2144081.SearchEngineBeforeUnload", "PHPNukeDU Customized Web Search"); Verwijdert : user_pref("CT2144081.SearchFromAddressBarIsInit", true); Verwijdert : user_pref("CT2144081.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT214[...] Verwijdert : user_pref("CT2144081.SearchInNewTabEnabled", true); Verwijdert : user_pref("CT2144081.SearchInNewTabIntervalMM", 1440); Verwijdert : user_pref("CT2144081.SearchInNewTabLastCheckTime", "Mon Aug 29 2011 14:27:47 GMT+0200"); Verwijdert : user_pref("CT2144081.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...] Verwijdert : user_pref("CT2144081.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...] Verwijdert : user_pref("CT2144081.SearchProtectorEnabled", false); Verwijdert : user_pref("CT2144081.SearchProtectorToolbarDisabled", false); Verwijdert : user_pref("CT2144081.ServiceMapLastCheckTime", "Mon Aug 29 2011 14:27:46 GMT+0200"); Verwijdert : user_pref("CT2144081.SettingsLastCheckTime", "Mon Aug 29 2011 14:27:46 GMT+0200"); Verwijdert : user_pref("CT2144081.SettingsLastUpdate", "1314539878"); Verwijdert : user_pref("CT2144081.ThirdPartyComponentsInterval", 504); Verwijdert : user_pref("CT2144081.ThirdPartyComponentsLastCheck", "Mon Aug 29 2011 14:27:46 GMT+0200"); Verwijdert : user_pref("CT2144081.ThirdPartyComponentsLastUpdate", "1246790578"); Verwijdert : user_pref("CT2144081.ToolbarShrinkedFromSetup", false); Verwijdert : user_pref("CT2144081.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2144081"); Verwijdert : user_pref("CT2144081.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...] Verwijdert : user_pref("CT2144081.UserID", "UN86973214677777829"); Verwijdert : user_pref("CT2144081.ValidationData_Search", 0); Verwijdert : user_pref("CT2144081.ValidationData_Toolbar", 2); Verwijdert : user_pref("CT2144081.alertChannelId", "543640"); Verwijdert : user_pref("CT2144081.approveUntrustedApps", true); Verwijdert : user_pref("CT2144081.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...] Verwijdert : user_pref("CT2144081.globalFirstTimeInfoLastCheckTime", "Mon Aug 29 2011 14:27:47 GMT+0200"); Verwijdert : user_pref("CT2144081.homepageProtectorEnableByLogin", true); Verwijdert : user_pref("CT2144081.initDone", true); Verwijdert : user_pref("CT2144081.isAppTrackingManagerOn", true); Verwijdert : user_pref("CT2144081.myStuffEnabled", true); Verwijdert : user_pref("CT2144081.myStuffPublihserMinWidth", 400); Verwijdert : user_pref("CT2144081.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...] Verwijdert : user_pref("CT2144081.myStuffServiceIntervalMM", 1440); Verwijdert : user_pref("CT2144081.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...] Verwijdert : user_pref("CT2144081.oldAppsList", "128769980274913307,128769980274913308,111,128770788891944305,128[...] Verwijdert : user_pref("CT2144081.searchProtectorDialogDelayInSec", 10); Verwijdert : user_pref("CT2144081.searchProtectorEnableByLogin", true); Verwijdert : user_pref("CT2144081.testingCtid", ""); Verwijdert : user_pref("CT2144081.toolbarAppMetaDataLastCheckTime", "Mon Aug 29 2011 14:27:47 GMT+0200"); Verwijdert : user_pref("CT2144081.toolbarContextMenuLastCheckTime", "Mon Aug 29 2011 14:27:47 GMT+0200"); Verwijdert : user_pref("CT2144081.usagesFlag", 2); Verwijdert : user_pref("CT2405280..clientLogIsEnabled", true); Verwijdert : user_pref("CT2405280..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...] Verwijdert : user_pref("CT2405280..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...] Verwijdert : user_pref("CT2405280.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); Verwijdert : user_pref("CT2405280.BrowserCompStateIsOpen_129460356361856285", true); Verwijdert : user_pref("CT2405280.BrowserCompStateIsOpen_129460356364512539", true); Verwijdert : user_pref("CT2405280.BrowserCompStateIsOpen_129460356365762570", true); Verwijdert : user_pref("CT2405280.BrowserCompStateIsOpen_129530456751575930", true); Verwijdert : user_pref("CT2405280.CTID", "CT2405280"); Verwijdert : user_pref("CT2405280.CurrentServerDate", "26-6-2011"); Verwijdert : user_pref("CT2405280.DialogsAlignMode", "LTR"); Verwijdert : user_pref("CT2405280.DialogsGetterLastCheckTime", "Sun Jun 26 2011 16:03:15 GMT+0200"); Verwijdert : user_pref("CT2405280.DownloadReferralCookieData", ""); Verwijdert : user_pref("CT2405280.EMailNotifierPollDate", "Sun Jun 26 2011 16:03:14 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedLastCount1783261708582779529", 1480); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392415092", "Tue Apr 05 2011 18:51:15 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392415098", "Tue Apr 05 2011 18:51:15 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392415104", "Tue Apr 05 2011 18:51:15 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392415110", "Tue Apr 05 2011 18:51:15 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392415116", "Tue Apr 05 2011 18:51:15 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392415122", "Tue Apr 05 2011 18:51:15 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392571378", "Tue Apr 05 2011 18:51:16 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392571384", "Tue Apr 05 2011 18:51:16 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392571390", "Tue Apr 05 2011 18:51:16 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392571396", "Tue Apr 05 2011 18:51:16 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392571402", "Tue Apr 05 2011 18:51:16 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392571408", "Tue Apr 05 2011 18:51:16 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392571414", "Tue Apr 05 2011 18:51:16 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392571420", "Tue Apr 05 2011 18:51:16 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392571426", "Tue Apr 05 2011 18:51:16 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392571432", "Tue Apr 05 2011 18:51:16 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392571438", "Tue Apr 05 2011 18:51:17 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392571444", "Tue Apr 05 2011 18:51:17 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392727700", "Tue Apr 05 2011 18:51:17 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392727706", "Tue Apr 05 2011 18:51:17 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392727712", "Tue Apr 05 2011 18:51:17 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392727718", "Tue Apr 05 2011 18:51:17 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392727724", "Tue Apr 05 2011 18:51:17 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392727730", "Tue Apr 05 2011 18:51:17 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392727736", "Tue Apr 05 2011 18:51:17 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392727742", "Tue Apr 05 2011 18:51:17 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392727748", "Tue Apr 05 2011 18:51:17 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392727754", "Tue Apr 05 2011 18:51:18 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392727760", "Tue Apr 05 2011 18:51:18 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392727766", "Tue Apr 05 2011 18:51:18 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392727772", "Tue Apr 05 2011 18:51:18 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392727778", "Tue Apr 05 2011 18:51:18 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392727784", "Tue Apr 05 2011 18:51:18 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392727790", "Tue Apr 05 2011 18:51:18 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392727796", "Tue Apr 05 2011 18:51:18 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392727802", "Tue Apr 05 2011 18:51:18 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392727808", "Tue Apr 05 2011 18:51:18 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392727814", "Tue Apr 05 2011 18:51:19 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392727820", "Tue Apr 05 2011 18:51:19 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392727826", "Tue Apr 05 2011 18:51:19 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392727832", "Tue Apr 05 2011 18:51:19 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392727838", "Tue Apr 05 2011 18:51:19 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392727844", "Tue Apr 05 2011 18:51:19 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392727850", "Tue Apr 05 2011 18:51:19 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392727856", "Tue Apr 05 2011 18:51:19 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392727862", "Tue Apr 05 2011 18:51:19 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392727868", "Tue Apr 05 2011 18:51:19 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392727874", "Tue Apr 05 2011 18:51:20 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392727880", "Tue Apr 05 2011 18:51:20 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392727886", "Tue Apr 05 2011 18:51:20 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392727892", "Tue Apr 05 2011 18:51:20 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedPollDate129255180392727898", "Tue Apr 05 2011 18:51:20 GMT+0200"); Verwijdert : user_pref("CT2405280.FeedTTL129255180392415104", 15); Verwijdert : user_pref("CT2405280.FeedTTL129255180392415116", 60); Verwijdert : user_pref("CT2405280.FeedTTL129255180392571420", 60); Verwijdert : user_pref("CT2405280.FeedTTL129255180392571426", 15); Verwijdert : user_pref("CT2405280.FeedTTL129255180392571432", 2); Verwijdert : user_pref("CT2405280.FeedTTL129255180392571438", 15); Verwijdert : user_pref("CT2405280.FeedTTL129255180392727700", 30); Verwijdert : user_pref("CT2405280.FeedTTL129255180392727706", 5); Verwijdert : user_pref("CT2405280.FeedTTL129255180392727712", 5); Verwijdert : user_pref("CT2405280.FeedTTL129255180392727724", 5); Verwijdert : user_pref("CT2405280.FeedTTL129255180392727736", 30); Verwijdert : user_pref("CT2405280.FeedTTL129255180392727742", 30); Verwijdert : user_pref("CT2405280.FeedTTL129255180392727766", 15); Verwijdert : user_pref("CT2405280.FeedTTL129255180392727778", 15); Verwijdert : user_pref("CT2405280.FeedTTL129255180392727784", 15); Verwijdert : user_pref("CT2405280.FeedTTL129255180392727790", 15); Verwijdert : user_pref("CT2405280.FeedTTL129255180392727808", 1440); Verwijdert : user_pref("CT2405280.FeedTTL129255180392727838", 10); Verwijdert : user_pref("CT2405280.FeedTTL129255180392727856", 5); Verwijdert : user_pref("CT2405280.FirstServerDate", "19-8-2010"); Verwijdert : user_pref("CT2405280.FirstTime", true); Verwijdert : user_pref("CT2405280.FirstTimeFF3", true); Verwijdert : user_pref("CT2405280.FirstTimeSettingsDone", true); Verwijdert : user_pref("CT2405280.FixPageNotFoundErrors", false); Verwijdert : user_pref("CT2405280.GroupingServerCheckInterval", 1440); Verwijdert : user_pref("CT2405280.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); Verwijdert : user_pref("CT2405280.HasUserGlobalKeys", true); Verwijdert : user_pref("CT2405280.Initialize", true); Verwijdert : user_pref("CT2405280.InitializeCommonPrefs", true); Verwijdert : user_pref("CT2405280.InstallationAndCookieDataSentCount", 3); Verwijdert : user_pref("CT2405280.InstalledDate", "Thu Aug 19 2010 16:23:11 GMT+0200"); Verwijdert : user_pref("CT2405280.InvalidateCache", false); Verwijdert : user_pref("CT2405280.IsAlertDBUpdated", true); Verwijdert : user_pref("CT2405280.IsGrouping", false); Verwijdert : user_pref("CT2405280.IsMulticommunity", false); Verwijdert : user_pref("CT2405280.IsOpenThankYouPage", true); Verwijdert : user_pref("CT2405280.IsOpenUninstallPage", true); Verwijdert : user_pref("CT2405280.LanguagePackLastCheckTime", "Sun Jun 26 2011 16:03:15 GMT+0200"); Verwijdert : user_pref("CT2405280.LanguagePackReloadIntervalMM", 1440); Verwijdert : user_pref("CT2405280.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...] Verwijdert : user_pref("CT2405280.LastLogin_2.7.2.0", "Thu Aug 19 2010 16:23:34 GMT+0200"); Verwijdert : user_pref("CT2405280.LastLogin_3.5.0.12", "Sun Jun 26 2011 16:03:16 GMT+0200"); Verwijdert : user_pref("CT2405280.LatestVersion", "3.3.3.2"); Verwijdert : user_pref("CT2405280.Locale", "en-us"); Verwijdert : user_pref("CT2405280.LoginCache", 4); Verwijdert : user_pref("CT2405280.MCDetectTooltipHeight", "83"); Verwijdert : user_pref("CT2405280.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); Verwijdert : user_pref("CT2405280.MCDetectTooltipWidth", "295"); Verwijdert : user_pref("CT2405280.MyStuffEnabledAtInstallation", true); Verwijdert : user_pref("CT2405280.RadioIsPodcast", false); Verwijdert : user_pref("CT2405280.RadioLastCheckTime", "Sun Jun 26 2011 16:03:15 GMT+0200"); Verwijdert : user_pref("CT2405280.RadioLastUpdateIPServer", "3"); Verwijdert : user_pref("CT2405280.RadioLastUpdateServer", "129167775315800000"); Verwijdert : user_pref("CT2405280.RadioMediaID", "20503713"); Verwijdert : user_pref("CT2405280.RadioMediaType", "Media Player"); Verwijdert : user_pref("CT2405280.RadioMenuSelectedID", "EBRadioMenu_CT240528020503713"); Verwijdert : user_pref("CT2405280.RadioShrinkedFromSetup", false); Verwijdert : user_pref("CT2405280.RadioStationName", "Virgin%20Radio%20Classic%20Rock"); Verwijdert : user_pref("CT2405280.RadioStationURL", "hxxp://www.smgradio.com/core/audio/wmp/live.asx?service=vcbb[...] Verwijdert : user_pref("CT2405280.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER[...] Verwijdert : user_pref("CT2405280.SearchFromAddressBarIsInit", true); Verwijdert : user_pref("CT2405280.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT240[...] Verwijdert : user_pref("CT2405280.SearchInNewTabEnabled", true); Verwijdert : user_pref("CT2405280.SearchInNewTabIntervalMM", 1440); Verwijdert : user_pref("CT2405280.SearchInNewTabLastCheckTime", "Sun Jun 26 2011 16:03:16 GMT+0200"); Verwijdert : user_pref("CT2405280.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...] Verwijdert : user_pref("CT2405280.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...] Verwijdert : user_pref("CT2405280.ServiceMapLastCheckTime", "Sun Jun 26 2011 16:03:14 GMT+0200"); Verwijdert : user_pref("CT2405280.SettingsCheckIntervalMin", 120); Verwijdert : user_pref("CT2405280.SettingsLastCheckTime", "Sun Jun 26 2011 16:03:14 GMT+0200"); Verwijdert : user_pref("CT2405280.SettingsLastUpdate", "1308819485"); Verwijdert : user_pref("CT2405280.ThirdPartyComponentsInterval", 504); Verwijdert : user_pref("CT2405280.ThirdPartyComponentsLastCheck", "Sun Jun 26 2011 16:03:14 GMT+0200"); Verwijdert : user_pref("CT2405280.ThirdPartyComponentsLastUpdate", "1246790578"); Verwijdert : user_pref("CT2405280.ToolbarShrinkedFromSetup", false); Verwijdert : user_pref("CT2405280.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2405280"); Verwijdert : user_pref("CT2405280.UserID", "UN41179060862830047"); Verwijdert : user_pref("CT2405280.WeatherNetwork", ""); Verwijdert : user_pref("CT2405280.WeatherPollDate", "Sun Jun 26 2011 16:03:15 GMT+0200"); Verwijdert : user_pref("CT2405280.WeatherUnit", "C"); Verwijdert : user_pref("CT2405280.alertChannelId", "799768"); Verwijdert : user_pref("CT2405280.backendstorage.for_aoi", "31333039303936393938"); Verwijdert : user_pref("CT2405280.backendstorage.for_ccid", "476F727373656C"); Verwijdert : user_pref("CT2405280.backendstorage.for_cdtr5", "31333039303936393938"); Verwijdert : user_pref("CT2405280.backendstorage.for_cid", "4E4C"); Verwijdert : user_pref("CT2405280.backendstorage.for_ip", "38332E3131392E3136372E313431"); Verwijdert : user_pref("CT2405280.backendstorage.for_lcut", "31333039303936393939"); Verwijdert : user_pref("CT2405280.backendstorage.for_pid", "31303130"); Verwijdert : user_pref("CT2405280.backendstorage.for_rid", "3033"); Verwijdert : user_pref("CT2405280.backendstorage.for_zoneid", "39353034"); Verwijdert : user_pref("CT2405280.clientLogIsEnabled", false); Verwijdert : user_pref("CT2405280.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asm[...] Verwijdert : user_pref("CT2405280.generalConfigFromLogin", "{\"SocialDomains\":\"social.conduit.com;apps.conduit.[...] Verwijdert : user_pref("CT2405280.globalFirstTimeInfoLastCheckTime", "Sun Jun 26 2011 16:03:16 GMT+0200"); Verwijdert : user_pref("CT2405280.homepageProtectorEnableByLogin", true); Verwijdert : user_pref("CT2405280.initDone", true); Verwijdert : user_pref("CT2405280.isAppTrackingManagerOn", true); Verwijdert : user_pref("CT2405280.isFirstRadioInstallation", false); Verwijdert : user_pref("CT2405280.myStuffEnabled", true); Verwijdert : user_pref("CT2405280.myStuffPublihserMinWidth", 400); Verwijdert : user_pref("CT2405280.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...] Verwijdert : user_pref("CT2405280.myStuffServiceIntervalMM", 1440); Verwijdert : user_pref("CT2405280.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...] Verwijdert : user_pref("CT2405280.oldAppsList", "128325851945531999,128310509462438058,111,129460356720606270,129[...] Verwijdert : user_pref("CT2405280.searchProtectorDialogDelayInSec", 10); Verwijdert : user_pref("CT2405280.searchProtectorEnableByLogin", true); Verwijdert : user_pref("CT2405280.testingCtid", ""); Verwijdert : user_pref("CT2405280.toolbarAppMetaDataLastCheckTime", "Sun Jun 26 2011 16:03:15 GMT+0200"); Verwijdert : user_pref("CT2405280.toolbarContextMenuLastCheckTime", "Sun Jun 26 2011 16:03:15 GMT+0200"); Verwijdert : user_pref("CT2405280.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Reg[...] Verwijdert : user_pref("CT2603445..clientLogIsEnabled", true); Verwijdert : user_pref("CT2603445..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...] Verwijdert : user_pref("CT2603445..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...] Verwijdert : user_pref("CT2603445.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); Verwijdert : user_pref("CT2603445.CurrentServerDate", "26-6-2011"); Verwijdert : user_pref("CT2603445.DialogsAlignMode", "LTR"); Verwijdert : user_pref("CT2603445.DialogsGetterLastCheckTime", "Sun Jun 26 2011 16:03:26 GMT+0200"); Verwijdert : user_pref("CT2603445.DownloadReferralCookieData", ""); Verwijdert : user_pref("CT2603445.EMailNotifierPollDate", "Sun Jun 26 2011 16:03:24 GMT+0200"); Verwijdert : user_pref("CT2603445.FeedLastCount129162461833103140", 625); Verwijdert : user_pref("CT2603445.FeedPollDate129150409730308153", "Sun Jun 26 2011 16:03:25 GMT+0200"); Verwijdert : user_pref("CT2603445.FeedPollDate129150410477960158", "Sun Jun 26 2011 16:03:26 GMT+0200"); Verwijdert : user_pref("CT2603445.FeedPollDate129150411149992123", "Sun Jun 26 2011 16:03:26 GMT+0200"); Verwijdert : user_pref("CT2603445.FeedPollDate129150411149992124", "Sun Jun 26 2011 16:03:26 GMT+0200"); Verwijdert : user_pref("CT2603445.FeedPollDate129150413057804235", "Sun Jun 26 2011 16:03:26 GMT+0200"); Verwijdert : user_pref("CT2603445.FeedPollDate129150414312491517", "Sun Jun 26 2011 16:03:24 GMT+0200"); Verwijdert : user_pref("CT2603445.FeedPollDate129150414941085546", "Sun Jun 26 2011 16:03:24 GMT+0200"); Verwijdert : user_pref("CT2603445.FeedPollDate129150415506867223", "Sun Jun 26 2011 16:03:24 GMT+0200"); Verwijdert : user_pref("CT2603445.FeedPollDate129150416295308354", "Sun Jun 26 2011 16:03:24 GMT+0200"); Verwijdert : user_pref("CT2603445.FeedPollDate129150416821245960", "Sun Jun 26 2011 16:03:24 GMT+0200"); Verwijdert : user_pref("CT2603445.FeedPollDate129150417598276979", "Sun Jun 26 2011 16:03:24 GMT+0200"); Verwijdert : user_pref("CT2603445.FeedPollDate129150418464839018", "Sun Jun 26 2011 16:03:24 GMT+0200"); Verwijdert : user_pref("CT2603445.FeedPollDate129150418961870358", "Sun Jun 26 2011 16:03:24 GMT+0200"); Verwijdert : user_pref("CT2603445.FeedPollDate129150419428120755", "Sun Jun 26 2011 16:03:25 GMT+0200"); Verwijdert : user_pref("CT2603445.FeedPollDate129150421384370672", "Sun Jun 26 2011 16:03:25 GMT+0200"); Verwijdert : user_pref("CT2603445.FeedPollDate129150422141713870", "Sun Jun 26 2011 16:03:25 GMT+0200"); Verwijdert : user_pref("CT2603445.FeedPollDate129150443759997630", "Sun Jun 26 2011 16:03:26 GMT+0200"); Verwijdert : user_pref("CT2603445.FeedPollDate129150461459212855", "Sun Jun 26 2011 16:03:25 GMT+0200"); Verwijdert : user_pref("CT2603445.FeedPollDate129150462560150661", "Sun Jun 26 2011 16:03:26 GMT+0200"); Verwijdert : user_pref("CT2603445.FeedPollDate3663488606370908700", "Sun Jun 26 2011 16:03:24 GMT+0200"); Verwijdert : user_pref("CT2603445.FeedPollDate3663488606476150000", "Sun Jun 26 2011 16:03:24 GMT+0200"); Verwijdert : user_pref("CT2603445.FeedPollDate3927911755645313500", "Sun Jun 26 2011 16:03:25 GMT+0200"); Verwijdert : user_pref("CT2603445.FeedPollDate3927911755645379000", "Sun Jun 26 2011 16:03:25 GMT+0200"); Verwijdert : user_pref("CT2603445.FeedTTL129150410477960158", 2); Verwijdert : user_pref("CT2603445.FeedTTL129150414312491517", 5); Verwijdert : user_pref("CT2603445.FeedTTL129150417598276979", 10); Verwijdert : user_pref("CT2603445.FirstServerDate", "26-6-2011"); Verwijdert : user_pref("CT2603445.FirstTimeFF3", true); Verwijdert : user_pref("CT2603445.GroupingServerCheckInterval", 1440); Verwijdert : user_pref("CT2603445.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); Verwijdert : user_pref("CT2603445.HasUserGlobalKeys", true); Verwijdert : user_pref("CT2603445.Initialize", true); Verwijdert : user_pref("CT2603445.InitializeCommonPrefs", true); Verwijdert : user_pref("CT2603445.InstallationAndCookieDataSentCount", 1); Verwijdert : user_pref("CT2603445.InvalidateCache", false); Verwijdert : user_pref("CT2603445.IsGrouping", false); Verwijdert : user_pref("CT2603445.IsInitSetupIni", true); Verwijdert : user_pref("CT2603445.LanguagePackLastCheckTime", "Sun Jun 26 2011 16:03:29 GMT+0200"); Verwijdert : user_pref("CT2603445.LanguagePackReloadIntervalMM", 1440); Verwijdert : user_pref("CT2603445.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...] Verwijdert : user_pref("CT2603445.LastLogin_3.5.0.12", "Sun Jun 26 2011 16:03:26 GMT+0200"); Verwijdert : user_pref("CT2603445.LatestVersion", "3.3.3.2"); Verwijdert : user_pref("CT2603445.Locale", "nl"); Verwijdert : user_pref("CT2603445.MCDetectTooltipHeight", "83"); Verwijdert : user_pref("CT2603445.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); Verwijdert : user_pref("CT2603445.MCDetectTooltipWidth", "295"); Verwijdert : user_pref("CT2603445.MyStuffEnabledAtInstallation", true); Verwijdert : user_pref("CT2603445.RadioIsPodcast", false); Verwijdert : user_pref("CT2603445.RadioLastCheckTime", "Sun Jun 26 2011 16:03:25 GMT+0200"); Verwijdert : user_pref("CT2603445.RadioLastUpdateIPServer", "3"); Verwijdert : user_pref("CT2603445.RadioLastUpdateServer", "129162538128430000"); Verwijdert : user_pref("CT2603445.RadioMediaID", "20473530"); Verwijdert : user_pref("CT2603445.RadioMediaType", "Media Player"); Verwijdert : user_pref("CT2603445.RadioMenuSelectedID", "EBRadioMenu_CT260344520473530"); Verwijdert : user_pref("CT2603445.RadioShrinkedFromSetup", false); Verwijdert : user_pref("CT2603445.RadioStationName", "Radio%20Netherlands"); Verwijdert : user_pref("CT2603445.RadioStationURL", "hxxp://www.rnw.nl/distrib/realaudio/ram/live/rnw_live_1.asx"[...] Verwijdert : user_pref("CT2603445.SearchInNewTabEnabled", true); Verwijdert : user_pref("CT2603445.SearchInNewTabIntervalMM", 1440); Verwijdert : user_pref("CT2603445.SearchInNewTabLastCheckTime", "Sun Jun 26 2011 16:03:28 GMT+0200"); Verwijdert : user_pref("CT2603445.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...] Verwijdert : user_pref("CT2603445.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...] Verwijdert : user_pref("CT2603445.ServiceMapLastCheckTime", "Sun Jun 26 2011 16:03:23 GMT+0200"); Verwijdert : user_pref("CT2603445.SettingsLastCheckTime", "Sun Jun 26 2011 16:03:24 GMT+0200"); Verwijdert : user_pref("CT2603445.SettingsLastUpdate", "1308582358"); Verwijdert : user_pref("CT2603445.ThirdPartyComponentsInterval", 504); Verwijdert : user_pref("CT2603445.ThirdPartyComponentsLastCheck", "Sun Jun 26 2011 16:03:23 GMT+0200"); Verwijdert : user_pref("CT2603445.ThirdPartyComponentsLastUpdate", "1256026239"); Verwijdert : user_pref("CT2603445.ToolbarShrinkedFromSetup", false); Verwijdert : user_pref("CT2603445.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2603445"); Verwijdert : user_pref("CT2603445.UserID", "UN65005968067412355"); Verwijdert : user_pref("CT2603445.WeatherNetwork", ""); Verwijdert : user_pref("CT2603445.WeatherPollDate", "Sun Jun 26 2011 16:03:24 GMT+0200"); Verwijdert : user_pref("CT2603445.WeatherUnit", "C"); Verwijdert : user_pref("CT2603445.alertChannelId", "996268"); Verwijdert : user_pref("CT2603445.generalConfigFromLogin", "{\"SocialDomains\":\"social.conduit.com;apps.conduit.[...] Verwijdert : user_pref("CT2603445.globalFirstTimeInfoLastCheckTime", "Sun Jun 26 2011 16:03:27 GMT+0200"); Verwijdert : user_pref("CT2603445.homepageProtectorEnableByLogin", true); Verwijdert : user_pref("CT2603445.initDone", true); Verwijdert : user_pref("CT2603445.isAppTrackingManagerOn", true); Verwijdert : user_pref("CT2603445.isFirstRadioInstallation", false); Verwijdert : user_pref("CT2603445.myStuffEnabled", true); Verwijdert : user_pref("CT2603445.myStuffPublihserMinWidth", 400); Verwijdert : user_pref("CT2603445.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...] Verwijdert : user_pref("CT2603445.myStuffServiceIntervalMM", 1440); Verwijdert : user_pref("CT2603445.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...] Verwijdert : user_pref("CT2603445.searchProtectorDialogDelayInSec", 10); Verwijdert : user_pref("CT2603445.searchProtectorEnableByLogin", true); Verwijdert : user_pref("CT2603445.testingCtid", ""); Verwijdert : user_pref("CT2603445.toolbarAppMetaDataLastCheckTime", "Sun Jun 26 2011 16:03:26 GMT+0200"); Verwijdert : user_pref("CT2603445.toolbarContextMenuLastCheckTime", "Sun Jun 26 2011 16:03:29 GMT+0200"); Verwijdert : user_pref("CT3000930..clientLogIsEnabled", true); Verwijdert : user_pref("CT3000930..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...] Verwijdert : user_pref("CT3000930..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...] Verwijdert : user_pref("CT3000930.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); Verwijdert : user_pref("CT3000930.CT3000930", "CT3000930"); Verwijdert : user_pref("CT3000930.CurrentServerDate", "27-10-2011"); Verwijdert : user_pref("CT3000930.DSInstall", true); Verwijdert : user_pref("CT3000930.DialogsAlignMode", "LTR"); Verwijdert : user_pref("CT3000930.DialogsGetterLastCheckTime", "Thu Oct 27 2011 13:18:28 GMT+0200"); Verwijdert : user_pref("CT3000930.DownloadReferralCookieData", ""); Verwijdert : user_pref("CT3000930.EMailNotifierPollDate", "Thu Oct 27 2011 13:18:41 GMT+0200"); Verwijdert : user_pref("CT3000930.FirstServerDate", "27-10-2011"); Verwijdert : user_pref("CT3000930.FirstTime", true); Verwijdert : user_pref("CT3000930.FirstTimeFF3", true); Verwijdert : user_pref("CT3000930.FixPageNotFoundErrors", true); Verwijdert : user_pref("CT3000930.GroupingServerCheckInterval", 1440); Verwijdert : user_pref("CT3000930.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); Verwijdert : user_pref("CT3000930.HPInstall", true); Verwijdert : user_pref("CT3000930.HasUserGlobalKeys", true); Verwijdert : user_pref("CT3000930.HomePageProtectorEnabled", true); Verwijdert : user_pref("CT3000930.HomepageBeforeUnload", "hxxp://search.conduit.com/?ctid=CT3000930&SearchSource=[...] Verwijdert : user_pref("CT3000930.Initialize", true); Verwijdert : user_pref("CT3000930.InitializeCommonPrefs", true); Verwijdert : user_pref("CT3000930.InstallationAndCookieDataSentCount", 1); Verwijdert : user_pref("CT3000930.InstallationType", "Unknown"); Verwijdert : user_pref("CT3000930.InstalledDate", "Thu Oct 27 2011 13:18:30 GMT+0200"); Verwijdert : user_pref("CT3000930.InvalidateCache", false); Verwijdert : user_pref("CT3000930.IsGrouping", false); Verwijdert : user_pref("CT3000930.IsInitSetupIni", true); Verwijdert : user_pref("CT3000930.IsMulticommunity", false); Verwijdert : user_pref("CT3000930.IsOpenThankYouPage", true); Verwijdert : user_pref("CT3000930.IsOpenUninstallPage", true); Verwijdert : user_pref("CT3000930.IsProtectorsInit", true); Verwijdert : user_pref("CT3000930.LanguagePackLastCheckTime", "Thu Oct 27 2011 13:18:30 GMT+0200"); Verwijdert : user_pref("CT3000930.LanguagePackReloadIntervalMM", 1440); Verwijdert : user_pref("CT3000930.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...] Verwijdert : user_pref("CT3000930.LastLogin_3.7.0.6", "Thu Oct 27 2011 13:18:42 GMT+0200"); Verwijdert : user_pref("CT3000930.LatestVersion", "3.5.0.12"); Verwijdert : user_pref("CT3000930.Locale", "en"); Verwijdert : user_pref("CT3000930.MCDetectTooltipHeight", "83"); Verwijdert : user_pref("CT3000930.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); Verwijdert : user_pref("CT3000930.MCDetectTooltipWidth", "295"); Verwijdert : user_pref("CT3000930.MyStuffEnabledAtInstallation", true); Verwijdert : user_pref("CT3000930.OriginalFirstVersion", "3.7.0.6"); Verwijdert : user_pref("CT3000930.RadioIsPodcast", false); Verwijdert : user_pref("CT3000930.RadioLastCheckTime", "Thu Oct 27 2011 13:18:30 GMT+0200"); Verwijdert : user_pref("CT3000930.RadioLastUpdateIPServer", "3"); Verwijdert : user_pref("CT3000930.RadioLastUpdateServer", "129524371989230000"); Verwijdert : user_pref("CT3000930.RadioMediaID", "21889712"); Verwijdert : user_pref("CT3000930.RadioMediaType", "Media Player"); Verwijdert : user_pref("CT3000930.RadioMenuSelectedID", "EBRadioMenu_CT300093021889712"); Verwijdert : user_pref("CT3000930.RadioShrinkedFromSetup", false); Verwijdert : user_pref("CT3000930.RadioStationName", "California%20Rock%20-%20Rock"); Verwijdert : user_pref("CT3000930.RadioStationURL", "hxxp://www.feedlive.net/california.asx"); Verwijdert : user_pref("CT3000930.SavedHomepage", "hxxp://www.searchqu.com/406"); Verwijdert : user_pref("CT3000930.SearchCaption", "Serif WebPlus Customized Web Search"); Verwijdert : user_pref("CT3000930.SearchEngineBeforeUnload", "Serif WebPlus Customized Web Search"); Verwijdert : user_pref("CT3000930.SearchFromAddressBarIsInit", true); Verwijdert : user_pref("CT3000930.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT300[...] Verwijdert : user_pref("CT3000930.SearchInNewTabEnabled", true); Verwijdert : user_pref("CT3000930.SearchInNewTabIntervalMM", 1440); Verwijdert : user_pref("CT3000930.SearchInNewTabLastCheckTime", "Thu Oct 27 2011 13:18:42 GMT+0200"); Verwijdert : user_pref("CT3000930.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...] Verwijdert : user_pref("CT3000930.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usa[...] Verwijdert : user_pref("CT3000930.SearchProtectorEnabled", true); Verwijdert : user_pref("CT3000930.SearchProtectorToolbarDisabled", false); Verwijdert : user_pref("CT3000930.SendProtectorDataViaLogin", true); Verwijdert : user_pref("CT3000930.ServiceMapLastCheckTime", "Thu Oct 27 2011 13:18:27 GMT+0200"); Verwijdert : user_pref("CT3000930.SettingsLastCheckTime", "Thu Oct 27 2011 13:18:28 GMT+0200"); Verwijdert : user_pref("CT3000930.SettingsLastUpdate", "1313478245"); Verwijdert : user_pref("CT3000930.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT3000930&SearchSource=13"); Verwijdert : user_pref("CT3000930.ThirdPartyComponentsInterval", 504); Verwijdert : user_pref("CT3000930.ThirdPartyComponentsLastCheck", "Thu Oct 27 2011 13:18:27 GMT+0200"); Verwijdert : user_pref("CT3000930.ThirdPartyComponentsLastUpdate", "1312887586"); Verwijdert : user_pref("CT3000930.ToolbarShrinkedFromSetup", false); Verwijdert : user_pref("CT3000930.TrusteLinkUrl", "hxxp://trust.conduit.com/CT3000930"); Verwijdert : user_pref("CT3000930.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...] Verwijdert : user_pref("CT3000930.UserID", "UN77644834797084117"); Verwijdert : user_pref("CT3000930.WeatherNetwork", ""); Verwijdert : user_pref("CT3000930.WeatherPollDate", "Thu Oct 27 2011 13:18:29 GMT+0200"); Verwijdert : user_pref("CT3000930.WeatherUnit", "C"); Verwijdert : user_pref("CT3000930.alertChannelId", "1392662"); Verwijdert : user_pref("CT3000930.backendstorage.2956691a129435476717737888000000paramsgk", "7B227570646174655265[...] Verwijdert : user_pref("CT3000930.backendstorage.2956691a129435539843256473000000paramsgk", "7B227570646174655265[...] Verwijdert : user_pref("CT3000930.backendstorage.2956691a129435539843256473000000twittertemplate_notify_followers[...] Verwijdert : user_pref("CT3000930.backendstorage.2956691a129435539843256473000000twittertemplate_notify_followers[...] Verwijdert : user_pref("CT3000930.backendstorage.2956691a129435539843256473000000twittertemplate_notify_following[...] Verwijdert : user_pref("CT3000930.backendstorage.2956691a129435539843256473000000twittertemplate_notify_following[...] Verwijdert : user_pref("CT3000930.backendstorage.2956691a129435539843256473000000twittertemplate_notify_home", "3[...] Verwijdert : user_pref("CT3000930.backendstorage.2956691a129435539843256473000000twittertemplate_notify_home_coun[...] Verwijdert : user_pref("CT3000930.backendstorage.twittertemplate_2956691a129435539843256473000000_dailyactivity",[...] Verwijdert : user_pref("CT3000930.backendstorage.twittertemplate_2956691a129435539843256473000000_lifetimesent", [...] Verwijdert : user_pref("CT3000930.components.1000034", true); Verwijdert : user_pref("CT3000930.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...] Verwijdert : user_pref("CT3000930.globalFirstTimeInfoLastCheckTime", "Thu Oct 27 2011 13:18:29 GMT+0200"); Verwijdert : user_pref("CT3000930.homepageProtectorEnableByLogin", true); Verwijdert : user_pref("CT3000930.initDone", true); Verwijdert : user_pref("CT3000930.isAppTrackingManagerOn", true); Verwijdert : user_pref("CT3000930.isFirstRadioInstallation", false); Verwijdert : user_pref("CT3000930.myStuffEnabled", true); Verwijdert : user_pref("CT3000930.myStuffPublihserMinWidth", 400); Verwijdert : user_pref("CT3000930.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...] Verwijdert : user_pref("CT3000930.myStuffServiceIntervalMM", 1440); Verwijdert : user_pref("CT3000930.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...] Verwijdert : user_pref("CT3000930.revertSettingsEnabled", true); Verwijdert : user_pref("CT3000930.searchProtectorDialogDelayInSec", 10); Verwijdert : user_pref("CT3000930.searchProtectorEnableByLogin", true); Verwijdert : user_pref("CT3000930.testingCtid", ""); Verwijdert : user_pref("CT3000930.toolbarAppMetaDataLastCheckTime", "Thu Oct 27 2011 13:18:28 GMT+0200"); Verwijdert : user_pref("CT3000930.toolbarContextMenuLastCheckTime", "Thu Oct 27 2011 13:18:30 GMT+0200"); Verwijdert : user_pref("CommunityToolbar.CantToolbarBeEngineOwner", "CT2603445,CT2405280"); Verwijdert : user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT2102399&Search[...] Verwijdert : user_pref("CommunityToolbar.ConduitSearchList", "PHPNukeDU Customized Web Search,Serif WebPlus Cust[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1168776/1164461/NL", "\"0\"[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1392662/1388321/NL", "\"0\"[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/518308/514178/NL", "\"0\"")[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/543640/539509/NL", "\"0\"")[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/799768/795587/NL", "\"0\"")[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/NL", "\"0\"")[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/996268/991987/NL", "\"0\"")[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2102399", [...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2144081", [...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2405280", [...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2603445", [...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT3000930", [...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.0[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.2[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.5.[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.6.[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.7.[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2102399",[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2144081",[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2405280",[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2603445",[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT3000930",[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=12/30/2[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT3000930&octid=[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2102399/CT2102399[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2144081/CT2144081[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2405280/CT2405280[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2603445/CT2603445[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/equalizer[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/minimize.[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/play.gif"[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/stop.gif"[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/vol.gif",[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Crystal/minimize.g[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Crystal/play.gif",[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Crystal/stop.gif",[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Crystal/stopped.GI[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Crystal/vol.gif", [...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Midnight/equalizer[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Midnight/minimize.[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Midnight/play.gif"[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Midnight/stop.gif"[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Midnight/vol.gif",[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/StarFleet/equalize[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/StarFleet/minimize[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/StarFleet/play.gif[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/StarFleet/stop.gif[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/StarFleet/vol.gif"[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"c88[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en-us", "\"[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=nl", "\"634[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/16409683.xml", "\"5ed02478c3f1621091d[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/16727535.xml", "\"62692fdbbc21da3c17a[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/18863815.xml", "\"a82b6be7a02f76e5716[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/19058681.xml", "\"e853df514fbf2e142fb[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/19248106.xml", "\"2ab169f443fef2269d3[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/19554706.xml", "\"d3fe253b7a05439e4f0[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/428333.xml", "\"f8f175557850819247793[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/807095.xml", "\"7a20374cab99da4db1a5e[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://twitter.com/users/show/813286.xml", "\"cb27dbfa8e2a22ad75e52[...] Verwijdert : user_pref("CommunityToolbar.EngineHiddenByUser", true); Verwijdert : user_pref("CommunityToolbar.EngineOwner", ""); Verwijdert : user_pref("CommunityToolbar.EngineOwnerGuid", "{9eb64fa9-57c4-4a41-9940-e12e0418b693}"); Verwijdert : user_pref("CommunityToolbar.EngineOwnerToolbarId", "cashkeywords"); Verwijdert : user_pref("CommunityToolbar.IsEngineShown", false); Verwijdert : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true); Verwijdert : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\acer m3641\\AppData\\Roaming\\Mozil[...] Verwijdert : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.7.0.6"); Verwijdert : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2144081"); Verwijdert : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{9eb64fa9-57c4-4a41-9940-e12e0418b693}"); Verwijdert : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "cashkeywords"); Verwijdert : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://search.yahoo.com/search?fr=mcafee[...] Verwijdert : user_pref("CommunityToolbar.ToolbarsList", "CT2405280,CT2144081,CT2102399,CT2603445,CT3000930"); Verwijdert : user_pref("CommunityToolbar.ToolbarsList2", "CT2405280,CT2144081,CT2102399,CT3000930"); Verwijdert : user_pref("CommunityToolbar.ToolbarsList4", "CT2102399,CT2603445,CT3000930"); Verwijdert : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Wed Jun 01 2011 11:03:21 GMT+02[...] Verwijdert : user_pref("CommunityToolbar.alert.alertEnabled", true); Verwijdert : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440); Verwijdert : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Fri May 13 2011 08:22:58 GMT+0200"); Verwijdert : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com"); Verwijdert : user_pref("CommunityToolbar.alert.firstTimeAlertShown", true); Verwijdert : user_pref("CommunityToolbar.alert.locale", "en"); Verwijdert : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440); Verwijdert : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Sun Jun 26 2011 11:28:56 GMT+0200"); Verwijdert : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559"); Verwijdert : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20); Verwijdert : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com"); Verwijdert : user_pref("CommunityToolbar.alert.showTrayIcon", false); Verwijdert : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300); Verwijdert : user_pref("CommunityToolbar.alert.userId", "{6a8643bb-e01b-475a-a527-68b0f58a8219}"); Verwijdert : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Sun Jun 26 2011 16:02:22 GMT+0200"); Verwijdert : user_pref("CommunityToolbar.globalUserId", "faf53959-a1dc-4c91-aab4-416b88e85ef9"); Verwijdert : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true); Verwijdert : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true); Verwijdert : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT3000930"); Verwijdert : user_pref("CommunityToolbar.killedEngine", true); Verwijdert : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Thu Oct 27 2011 13:18:2[...] Verwijdert : user_pref("CommunityToolbar.notifications.alertEnabled", true); Verwijdert : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440); Verwijdert : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Thu Oct 27 2011 14:18:35 GMT+020[...] Verwijdert : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com"); Verwijdert : user_pref("CommunityToolbar.notifications.firstTimeAlertShown", true); Verwijdert : user_pref("CommunityToolbar.notifications.locale", "en"); Verwijdert : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440); Verwijdert : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Thu Oct 27 2011 13:18:28 GMT+0200"); Verwijdert : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611"); Verwijdert : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20); Verwijdert : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com"); Verwijdert : user_pref("CommunityToolbar.notifications.showTrayIcon", false); Verwijdert : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300); Verwijdert : user_pref("CommunityToolbar.notifications.userId", "494faea1-b6f9-4200-af05-82bdde8a2582"); Verwijdert : user_pref("CommunityToolbar.originalHomepage", "hxxp://www.searchqu.com/406"); Verwijdert : user_pref("CommunityToolbar.originalSearchEngine", "Ask.com"); Verwijdert : user_pref("CommunityToolbar.twitter.user_16409683.LastCheckTime", "Sun Jun 26 2011 16:03:19 GMT+0200[...] Verwijdert : user_pref("CommunityToolbar.twitter.user_16727535.LastCheckTime", "Sun Jun 26 2011 16:03:19 GMT+0200[...] Verwijdert : user_pref("CommunityToolbar.twitter.user_18863815.LastCheckTime", "Sun Jun 26 2011 16:03:19 GMT+0200[...] Verwijdert : user_pref("CommunityToolbar.twitter.user_19058681.LastCheckTime", "Sun Jun 26 2011 16:03:19 GMT+0200[...] Verwijdert : user_pref("CommunityToolbar.twitter.user_19248106.LastCheckTime", "Sun Jun 26 2011 16:03:19 GMT+0200[...] Verwijdert : user_pref("CommunityToolbar.twitter.user_19554706.LastCheckTime", "Sun Jun 26 2011 16:03:19 GMT+0200[...] Verwijdert : user_pref("CommunityToolbar.twitter.user_19757371.LastCheckTime", "Sun Jun 26 2011 16:03:19 GMT+0200[...] Verwijdert : user_pref("CommunityToolbar.twitter.user_428333.LastCheckTime", "Sun Jun 26 2011 16:03:19 GMT+0200")[...] Verwijdert : user_pref("CommunityToolbar.twitter.user_807095.LastCheckTime", "Sun Jun 26 2011 16:03:19 GMT+0200")[...] Verwijdert : user_pref("CommunityToolbar.twitter.user_813286.LastCheckTime", "Sun Jun 26 2011 16:03:19 GMT+0200")[...] Verwijdert : user_pref("CommunityToolbar.undefined", ""); Verwijdert : user_pref("browser.search.defaultengine", "Ask.com"); Verwijdert : user_pref("browser.search.defaultenginename", "Ask.com"); Verwijdert : user_pref("browser.search.defaultthis.engineName", "Serif WebPlus Customized Web Search"); Verwijdert : user_pref("browser.search.order.1", "Ask.com"); Verwijdert : user_pref("extensions.3499ur3ur4hfsudfs.scode", "\n(function(){var bdomains={\"search.babylon.com\":[...] Verwijdert : user_pref("extensions.BabylonToolbar.aflt", "orgnl"); Verwijdert : user_pref("extensions.BabylonToolbar.bbDpng", 9); Verwijdert : user_pref("extensions.BabylonToolbar.cntry", "NL"); Verwijdert : user_pref("extensions.BabylonToolbar.firstRun", false); Verwijdert : user_pref("extensions.BabylonToolbar.hdrMd5", "16CF41C68B3BE94A0B29AF1AEEA7C243"); Verwijdert : user_pref("extensions.BabylonToolbar.lastActv", "19"); Verwijdert : user_pref("extensions.BabylonToolbar.lastDP", 9); Verwijdert : user_pref("extensions.BabylonToolbar.lastVrsn", "1.1.5"); Verwijdert : user_pref("extensions.BabylonToolbar.lastVrsnTs", ""); Verwijdert : user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "8.0"); Verwijdert : user_pref("extensions.BabylonToolbar.newTab", true); Verwijdert : user_pref("extensions.BabylonToolbar.newTabUrl", "hxxp://search.babylon.com/?babsrc=NT_FFUP"); Verwijdert : user_pref("extensions.BabylonToolbar.propectorlck", 59428597); Verwijdert : user_pref("extensions.BabylonToolbar.smplGrp", "free"); Verwijdert : user_pref("extensions.BabylonToolbar_i.aflt", "babsst"); Verwijdert : user_pref("extensions.BabylonToolbar_i.babExt", ""); Verwijdert : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=101241"); Verwijdert : user_pref("extensions.BabylonToolbar_i.hardId", "84415caf0000000000000060b34a2f34"); Verwijdert : user_pref("extensions.BabylonToolbar_i.id", "84415caf0000000000000060b34a2f34"); Verwijdert : user_pref("extensions.BabylonToolbar_i.instlDay", "15400"); Verwijdert : user_pref("extensions.BabylonToolbar_i.instlRef", "sst"); Verwijdert : user_pref("extensions.BabylonToolbar_i.newTab", false); Verwijdert : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar"); Verwijdert : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon"); Verwijdert : user_pref("extensions.BabylonToolbar_i.smplGrp", "none"); Verwijdert : user_pref("extensions.BabylonToolbar_i.srcExt", "ss"); Verwijdert : user_pref("extensions.BabylonToolbar_i.tlbrId", "base"); Verwijdert : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17"); Verwijdert : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1715:41:13"); Verwijdert : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17"); Verwijdert : user_pref("extensions.SmartSuggestor.aid", "10007"); Verwijdert : user_pref("extensions.SmartSuggestor.dnsErrorHandlerFid", 61101); Verwijdert : user_pref("extensions.SmartSuggestor.dnsErrorHandlerUpdate", "1320174552590"); Verwijdert : user_pref("extensions.SmartSuggestor.showButton", false); Verwijdert : user_pref("extensions.adapter@babylontc.com.install-event-fired", true); Verwijdert : user_pref("extensions.asktb.ff-original-keyword-url", "hxxp://www.searchqu.com/web?src=ffb&systemid=[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.InstallationThankYouPage", true); Verwijdert : user_pref("extensions.crossriderapp5060.5060.InstallationTime", 1345108124); Verwijdert : user_pref("extensions.crossriderapp5060.5060.InstallationUserSettings.searchUserConifrmation", false[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.InstallationUserSettings.setHomepage", false); Verwijdert : user_pref("extensions.crossriderapp5060.5060.InstallationUserSettings.setNewTab", false); Verwijdert : user_pref("extensions.crossriderapp5060.5060.InstallationUserSettings.setSearch", false); Verwijdert : user_pref("extensions.crossriderapp5060.5060.active", true); Verwijdert : user_pref("extensions.crossriderapp5060.5060.addressbar", ""); Verwijdert : user_pref("extensions.crossriderapp5060.5060.backgroundjs", "\n\n\"undefined\"!=typeof _GPL_BG_NEW&&[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.backgroundver", 7); Verwijdert : user_pref("extensions.crossriderapp5060.5060.can_run_bg_code", true); Verwijdert : user_pref("extensions.crossriderapp5060.5060.certdomaininstaller", ""); Verwijdert : user_pref("extensions.crossriderapp5060.5060.changeprevious", false); Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie.InstallationTime.expiration", "Fri Feb 01 2030 0[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie.InstallationTime.value", "1345108124"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 [...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_aoi.value", "1345108124"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_blocklist.expiration", "Fri Oct 26 2012 13:[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_blocklist.value", "%22nonexistantdomain.com[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_country_code.expiration", "Mon Oct 29 2012 [...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_country_code.value", "%22NL%22"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_crr.expiration", "Fri Feb 01 2030 00:00:00 [...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_crr.value", "1351250737"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 01 [...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_hotfix20111102645.value", "%221%22"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_installer_params.expiration", "Fri Feb 01 2[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_installer_params.value", "%7B%22source_id%2[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_parent_zoneid.value", "%2214019%22"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_pc_20120828.expiration", "Fri Feb 01 2030 0[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_pc_20120828.value", "1346218404031"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_product_id.expiration", "Fri Feb 01 2030 00[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_product_id.value", "%221224%22"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_zoneid.value", "%2268230%22"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie.dbtest.expiration", "Fri Feb 01 2030 00:00:00 GM[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie.dbtest.value", "1346050059309"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.description", "Savings Sidekick"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.domain", ""); Verwijdert : user_pref("extensions.crossriderapp5060.5060.enablesearch", false); Verwijdert : user_pref("extensions.crossriderapp5060.5060.fbremoteurl", ""); Verwijdert : user_pref("extensions.crossriderapp5060.5060.group", 0); Verwijdert : user_pref("extensions.crossriderapp5060.5060.homepage", ""); Verwijdert : user_pref("extensions.crossriderapp5060.5060.iframe", false); Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.InstallerIdentifiers.expiration", "Fri Feb 0[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.InstallerIdentifiers.value", "%7B%22installe[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_appVer.expiration", "Fri Feb 01 20[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_appVer.value", "37"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_lastVersion.expiration", "Fri Feb [...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_lastVersion.value", "0"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_meta.expiration", "Fri Feb 01 2030[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_meta.value", "%7B%7D"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_nextCheck.expiration", "Fri Oct 26[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_nextCheck.value", "true"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_queue.expiration", "Fri Feb 01 203[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_queue.value", "%7B%7D"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_remote_resources.expiration", "Fri[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_remote_resources.value", "%7B%22re[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.js", "\n\nif(\"undefined\"!=typeof _GPL_PLUGIN){var _GP[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.manifesturl", ""); Verwijdert : user_pref("extensions.crossriderapp5060.5060.name", "Savings Sidekick"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.newtab", ""); Verwijdert : user_pref("extensions.crossriderapp5060.5060.opensearch", ""); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_1.code", "appAPI._cr_config={appID:funct[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_1.name", "base"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_1.ver", 3); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_1000014.code", "Array.prototype.indexOf|[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_1000014.name", "GPL Plugin (Loader)"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_1000014.ver", 7); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_1000015.code", "var _GPL_BG={vars:{},rul[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_1000015.name", "GPL Background (BG)"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_1000015.ver", 4); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_13.code", "(function(a){a.selectedText=f[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_13.name", "CrossriderAppUtils"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_13.ver", 2); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_14.code", "if(typeof(appAPI)===\"undefin[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_14.name", "CrossriderUtils"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_14.ver", 2); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_15.code", "(function(f){var u={};var e=M[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_15.name", "FacebookFFIE"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_15.ver", 1); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_16.code", "(function(f,{if(typeof(==[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_16.name", "FFAppAPIWrapper"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_16.ver", 3); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_17.code", "if(typeof window!==\"undefine[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_17.name", "jQuery"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_17.ver", 3); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_21.code", "var CrossriderDebugManager=(f[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_21.name", "debug"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_21.ver", 3); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_22.code", "(function(a){appAPI.queueMana[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_22.name", "resources"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_22.ver", 2); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_28.code", "var CrossriderInitializerPlug[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_28.name", "initializer"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_28.ver", 2); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_4.code", "/*! jQuery v1.7.1 jquery.com |[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_4.name", "jquery_1_7_1"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_4.ver", 3); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_47.code", "(function(){appAPI.ready=func[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_47.name", "resources_background"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_47.ver", 1); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins_lists.plugins_0", "17,14,16,47,1000015"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins_lists.plugins_1", "17,14,13,16,15,4,1,21,22,100[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.pluginsurl", "hxxp://app-static.crossrider.com/plugin/a[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.pluginsversion", 15); Verwijdert : user_pref("extensions.crossriderapp5060.5060.publisher", "215 Apps"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.searchstatus", 0); Verwijdert : user_pref("extensions.crossriderapp5060.5060.setnewtab", false); Verwijdert : user_pref("extensions.crossriderapp5060.5060.settingsurl", ""); Verwijdert : user_pref("extensions.crossriderapp5060.5060.thankyou", ""); Verwijdert : user_pref("extensions.crossriderapp5060.5060.updateinterval", 360); Verwijdert : user_pref("extensions.crossriderapp5060.5060.ver", 37); Verwijdert : user_pref("extensions.crossriderapp5060.adsOldValue", -1); Verwijdert : user_pref("extensions.crossriderapp5060.apps", "5060"); Verwijdert : user_pref("extensions.crossriderapp5060.bic", "1392eb1e9ab2b9248257a3067778409f"); Verwijdert : user_pref("extensions.crossriderapp5060.cid", 5060); Verwijdert : user_pref("extensions.crossriderapp5060.firstrun", false); Verwijdert : user_pref("extensions.crossriderapp5060.hadappinstalled", true); Verwijdert : user_pref("extensions.crossriderapp5060.installationdate", 1345108175); Verwijdert : user_pref("extensions.crossriderapp5060.lastcheck", 22520522); Verwijdert : user_pref("extensions.crossriderapp5060.lastcheckitem", 22520846); Verwijdert : user_pref("extensions.crossriderapp5060.modetype", "production"); Verwijdert : user_pref("extensions.efwbjkbewre83sfr3.scode", "(function(){try{if('mystart.incredibar.com,premiumr[...] Verwijdert : user_pref("extensions.enabledAddons", "feedly@devhd:10.2,info@bflix.info:5.0,info@thebflix.com:4.0,s[...] Verwijdert : user_pref("extensions.ffxtlbr@babylon.com.install-event-fired", true); Verwijdert : user_pref("extensions.linkextend.addit.remoteInstallItems", "{ \"software\": {\"20\": {\"id\": \"20\[...] Verwijdert : user_pref("extensions.mywebsearch.prevKwdEnabled", true); Verwijdert : user_pref("extensions.mywebsearch.prevKwdURL", "hxxp://www.searchqu.com/web?src=ffb&systemid=406&q="[...] Verwijdert : user_pref("extensions.ocr@babylon.com.install-event-fired", true); Verwijdert : user_pref("extensions.searchya_i.aflt", "foxtab"); Verwijdert : user_pref("extensions.searchya_i.dfltLng", ""); Verwijdert : user_pref("extensions.searchya_i.dfltSrch", true); Verwijdert : user_pref("extensions.searchya_i.dnsErr", true); Verwijdert : user_pref("extensions.searchya_i.excTlbr", false); Verwijdert : user_pref("extensions.searchya_i.hmpg", true); Verwijdert : user_pref("extensions.searchya_i.hmpgUrl", "hxxp://searchya.com/?chnl=fap&s=0&cr=879914219&cd=2XzutA[...] Verwijdert : user_pref("extensions.searchya_i.id", "84415caf0000000000000060b34a2f34"); Verwijdert : user_pref("extensions.searchya_i.instlDay", "15378"); Verwijdert : user_pref("extensions.searchya_i.instlRef", "fap"); Verwijdert : user_pref("extensions.searchya_i.newTab", true); Verwijdert : user_pref("extensions.searchya_i.newTabUrl", "hxxp://searchya.com/?chnl=fap&s=2&cr=879914219&cd=2Xzu[...] Verwijdert : user_pref("extensions.searchya_i.prdct", "searchya"); Verwijdert : user_pref("extensions.searchya_i.prtnrId", "ironsrc"); Verwijdert : user_pref("extensions.searchya_i.smplGrp", "none"); Verwijdert : user_pref("extensions.searchya_i.srchPrvdr", "SearchYa!"); Verwijdert : user_pref("extensions.searchya_i.tlbrId", "base"); Verwijdert : user_pref("extensions.searchya_i.tlbrSrchUrl", "hxxp://searchya.com/?chnl=fap&s=3&cr=879914219&cd=2X[...] Verwijdert : user_pref("extensions.searchya_i.vrsn", "1.5.11.13"); Verwijdert : user_pref("extensions.searchya_i.vrsnTs", "1.5.11.1316:16:07"); Verwijdert : user_pref("extensions.searchya_i.vrsni", "1.5.11.13"); Verwijdert : user_pref("extensions.toolbar.mindspark._5aMembers_.homepage", "hxxp://home.mywebsearch.com/index.jh[...] Verwijdert : user_pref("extensions.toolbar.mindspark._5aMembers_.recentlyClosed", "{\"list\":[{\"url\":\"hxxp://s[...] Verwijdert : user_pref("extensions.toolbar@ask.com.install-event-fired", true); Verwijdert : user_pref("somoto.dnscatch", "hxxp://www.bigseekpro.com/search/toolbar/somud/{25EE1629-5B99-4713-888[...] Verwijdert : user_pref("somoto.homepage", "hxxp://www.bigseekpro.com/somud/{25EE1629-5B99-4713-8886-7E595F89FEA8}[...] Verwijdert : user_pref("sweetim.toolbar.previous.browser.search.defaulturl", "hxxp://search.conduit.com/ResultsEx[...] Verwijdert : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "My Web Search"); Verwijdert : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "hxxp://www.searchqu.com/406"); Verwijdert : user_pref("sweetim.toolbar.urls.homepage", "hxxp://home.sweetim.com/?st=2&barid={4B45C800-58B1-11E1-[...] Profielnaam : default File : C:\Users\Evert\AppData\Roaming\Mozilla\Firefox\Profiles\3bsihu5s.default\prefs.js Verwijdert : user_pref("browser.search.defaultengine", "Ask.com"); Verwijdert : user_pref("browser.search.order.1", "Ask.com"); Verwijdert : user_pref("browser.startup.homepage", "hxxp://www.searchqu.com/406"); Verwijdert : user_pref("extensions.asktb.ff-original-keyword-url", "hxxp://nl.search.yahoo.com/search?fr=greentre[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.InstallationTime", 1347541587); Verwijdert : user_pref("extensions.crossriderapp5060.5060.active", true); Verwijdert : user_pref("extensions.crossriderapp5060.5060.addressbar", ""); Verwijdert : user_pref("extensions.crossriderapp5060.5060.backgroundjs", "\n\n\"undefined\"!=typeof _GPL_BG_NEW&&[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.backgroundver", 7); Verwijdert : user_pref("extensions.crossriderapp5060.5060.can_run_bg_code", true); Verwijdert : user_pref("extensions.crossriderapp5060.5060.certdomaininstaller", ""); Verwijdert : user_pref("extensions.crossriderapp5060.5060.changeprevious", false); Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie.InstallationTime.expiration", "Fri Feb 01 2030 0[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie.InstallationTime.value", "1347541587"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 [...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_aoi.value", "1347541587"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_blocklist.expiration", "Tue Oct 23 2012 19:[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_blocklist.value", "%22nonexistantdomain.com[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_country_code.expiration", "Thu Oct 25 2012 [...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_country_code.value", "%22NL%22"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_crr.expiration", "Fri Feb 01 2030 00:00:00 [...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_crr.value", "1351014269"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 01 [...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_hotfix20111102645.value", "%221%22"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_installer_params.expiration", "Fri Feb 01 2[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_installer_params.value", "%7B%22source_id%2[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_parent_zoneid.value", "%2214019%22"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_pc_20120828.expiration", "Fri Feb 01 2030 0[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_pc_20120828.value", "1347541606253"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_product_id.expiration", "Fri Feb 01 2030 00[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_product_id.value", "%221224%22"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_zoneid.value", "%2281656%22"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie.dbtest.expiration", "Fri Feb 01 2030 00:00:00 GM[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie.dbtest.value", "1347541588387"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.description", "Savings Sidekick"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.domain", ""); Verwijdert : user_pref("extensions.crossriderapp5060.5060.enablesearch", false); Verwijdert : user_pref("extensions.crossriderapp5060.5060.fbremoteurl", ""); Verwijdert : user_pref("extensions.crossriderapp5060.5060.group", 0); Verwijdert : user_pref("extensions.crossriderapp5060.5060.homepage", ""); Verwijdert : user_pref("extensions.crossriderapp5060.5060.iframe", false); Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_appVer.expiration", "Fri Feb 01 20[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_appVer.value", "37"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_lastVersion.expiration", "Fri Feb [...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_lastVersion.value", "0"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_meta.expiration", "Fri Feb 01 2030[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_meta.value", "%7B%7D"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_nextCheck.expiration", "Wed Oct 24[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_nextCheck.value", "true"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_queue.expiration", "Fri Feb 01 203[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_queue.value", "%7B%7D"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_remote_resources.expiration", "Fri[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_remote_resources.value", "%7B%22re[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.js", "\n\nif(\"undefined\"!=typeof _GPL_PLUGIN){var _GP[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.manifesturl", ""); Verwijdert : user_pref("extensions.crossriderapp5060.5060.name", "Savings Sidekick"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.newtab", ""); Verwijdert : user_pref("extensions.crossriderapp5060.5060.opensearch", ""); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_1.code", "appAPI._cr_config={appID:funct[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_1.name", "base"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_1.ver", 3); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_1000014.code", "Array.prototype.indexOf|[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_1000014.name", "GPL Plugin (Loader)"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_1000014.ver", 7); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_1000015.code", "var _GPL_BG={vars:{},rul[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_1000015.name", "GPL Background (BG)"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_1000015.ver", 4); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_13.code", "(function(a){a.selectedText=f[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_13.name", "CrossriderAppUtils"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_13.ver", 2); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_14.code", "if(typeof(appAPI)===\"undefin[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_14.name", "CrossriderUtils"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_14.ver", 2); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_15.code", "(function(f){var u={};var e=M[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_15.name", "FacebookFFIE"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_15.ver", 1); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_16.code", "(function(f,{if(typeof(==[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_16.name", "FFAppAPIWrapper"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_16.ver", 3); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_17.code", "if(typeof window!==\"undefine[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_17.name", "jQuery"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_17.ver", 3); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_21.code", "var CrossriderDebugManager=(f[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_21.name", "debug"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_21.ver", 3); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_22.code", "(function(a){appAPI.queueMana[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_22.name", "resources"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_22.ver", 2); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_28.code", "var CrossriderInitializerPlug[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_28.name", "initializer"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_28.ver", 2); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_4.code", "/*! jQuery v1.7.1 jquery.com |[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_4.name", "jquery_1_7_1"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_4.ver", 3); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_47.code", "(function(){appAPI.ready=func[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_47.name", "resources_background"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_47.ver", 1); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins_lists.plugins_0", "17,14,16,47,1000015"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins_lists.plugins_1", "17,14,13,16,15,4,1,21,22,100[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.pluginsurl", "hxxp://app-static.crossrider.com/plugin/a[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.pluginsversion", 15); Verwijdert : user_pref("extensions.crossriderapp5060.5060.publisher", "215 Apps"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.searchstatus", 0); Verwijdert : user_pref("extensions.crossriderapp5060.5060.setnewtab", false); Verwijdert : user_pref("extensions.crossriderapp5060.5060.settingsurl", ""); Verwijdert : user_pref("extensions.crossriderapp5060.5060.thankyou", ""); Verwijdert : user_pref("extensions.crossriderapp5060.5060.updateinterval", 360); Verwijdert : user_pref("extensions.crossriderapp5060.5060.ver", 37); Verwijdert : user_pref("extensions.crossriderapp5060.apps", "5060"); Verwijdert : user_pref("extensions.crossriderapp5060.bic", "139bfbcd47326b25129b3cd9561afa26"); Verwijdert : user_pref("extensions.crossriderapp5060.cid", 5060); Verwijdert : user_pref("extensions.crossriderapp5060.firstrun", false); Verwijdert : user_pref("extensions.crossriderapp5060.hadappinstalled", true); Verwijdert : user_pref("extensions.crossriderapp5060.installationdate", 1347541587); Verwijdert : user_pref("extensions.crossriderapp5060.lastcheck", 22516886); Verwijdert : user_pref("extensions.crossriderapp5060.lastcheckitem", 22516911); Verwijdert : user_pref("extensions.crossriderapp5060.modetype", "production"); Verwijdert : user_pref("extensions.enabledAddons", "mozillaextension@somud.com:1.0,wrc@avast.com:7.0.1466,crossri[...] -\\ Google Chrome v [Onmogelijk de versie te verkrijgen] File : C:\Users\acer m3641\AppData\Local\Google\Chrome\User Data\Default\Preferences Verwijdert [l.8] : homepage = "hxxp://home.sweetim.com/?st=2&barid={4B45C800-58B1-11E1-A7DE-002421827688}", Verwijdert [l.12] : urls_to_restore_on_startup = [ "hxxp://home.sweetim.com/?st=2&barid={4B45C800-58B1-11E1-A7DE-002421827688}" ] Verwijdert [l.68] : keyword = "search.sweetim.com", Verwijdert [l.71] : search_url = "hxxp://search.sweetim.com/search.asp?src=6&st=2&q={searchTerms}&barid={4B45C800-58B1-11E1-A7DE-002421827688}", Verwijdert [l.1515] : homepage = "hxxp://home.sweetim.com/?st=2&barid={4B45C800-58B1-11E1-A7DE-002421827688}", Verwijdert [l.1917] : urls_to_restore_on_startup = [ "hxxp://home.sweetim.com/?st=2&barid={4B45C800-58B1-11E1-A7DE-002421827688}" ] ************************* AdwCleaner[s1].txt - [149805 octets] - [26/10/2012 13:28:37] ########## EOF - C:\AdwCleaner[s1].txt - [149867 octets] ##########
  15. InternetMarketer
    Ik heb nu alles gedaan zoals je beschreven hebt. Ik hoop dat je nu de juiste resultaten hebt. Hieronder de inhoud van de log: ComboFix 12-10-25.01 - acer m3641 25-10-2012 15:50:10.4.4 - x64 NETWORK Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.31.1043.18.4094.3275 [GMT 2:00] Gestart vanuit: c:\users\acer m3641\Desktop\ComboFix.exe gebruikte Opdracht switches :: c:\users\acer m3641\Desktop\CFScript.txt AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C} SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((( Bestanden Gemaakt van 2012-09-25 to 2012-10-25 )))))))))))))))))))))))))))))) . . 2012-10-25 14:01 . 2012-10-25 14:01 -------- d-----w- c:\users\Evert\AppData\Local\temp 2012-10-25 14:01 . 2012-10-25 14:01 -------- d-----w- c:\users\Default\AppData\Local\temp 2012-10-25 14:01 . 2012-10-25 14:01 -------- d-----w- c:\users\acer m3641\AppData\Local\temp 2012-10-24 07:10 . 2012-10-24 07:10 -------- d-----w- c:\users\acer m3641\AppData\Roaming\Malwarebytes 2012-10-24 07:10 . 2012-10-24 07:10 -------- d-----w- c:\programdata\Malwarebytes 2012-10-24 07:10 . 2012-10-24 07:10 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware 2012-10-24 07:10 . 2012-09-29 17:54 25928 ----a-w- c:\windows\system32\drivers\mbam.sys 2012-10-23 16:33 . 2012-10-23 16:33 388096 ----a-r- c:\users\acer m3641\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2012-10-23 16:33 . 2012-10-23 16:33 -------- d-----w- c:\program files (x86)\Trend Micro 2012-10-23 14:29 . 2012-10-17 00:31 9291768 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{28EE2000-10E4-4061-B972-0BBCBEB6B0AD}\mpengine.dll 2012-10-19 15:38 . 2012-09-24 21:16 95208 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll 2012-10-11 05:35 . 2012-10-20 07:25 12872 ----a-w- c:\windows\system32\bootdelete.exe 2012-10-10 05:10 . 2012-09-13 13:45 2048 ----a-w- c:\windows\system32\tzres.dll 2012-10-10 05:10 . 2012-09-13 13:28 2048 ----a-w- c:\windows\SysWow64\tzres.dll 2012-10-10 05:10 . 2012-08-24 16:07 218624 ----a-w- c:\windows\system32\wintrust.dll 2012-10-10 05:10 . 2012-08-24 15:53 172544 ----a-w- c:\windows\SysWow64\wintrust.dll 2012-10-10 05:10 . 2012-06-02 00:20 1268736 ----a-w- c:\windows\system32\crypt32.dll 2012-10-10 05:10 . 2012-06-02 00:20 174592 ----a-w- c:\windows\system32\cryptsvc.dll 2012-10-10 05:10 . 2012-06-02 00:20 132096 ----a-w- c:\windows\system32\cryptnet.dll 2012-10-10 05:10 . 2012-06-02 00:02 985088 ----a-w- c:\windows\SysWow64\crypt32.dll 2012-10-10 05:10 . 2012-06-02 00:02 133120 ----a-w- c:\windows\SysWow64\cryptsvc.dll 2012-10-10 05:10 . 2012-06-02 00:02 98304 ----a-w- c:\windows\SysWow64\cryptnet.dll 2012-10-10 05:10 . 2012-08-29 11:40 4699520 ----a-w- c:\windows\system32\ntoskrnl.exe 2012-10-09 08:16 . 2012-10-09 08:16 -------- d-----w- c:\program files (x86)\Market Samurai 2012-10-04 08:36 . 2012-10-24 06:54 -------- d-----w- c:\programdata\webex . . . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-10-11 05:12 . 2006-11-02 12:35 65309168 ----a-w- c:\windows\system32\mrt.exe 2012-10-09 09:23 . 2012-04-11 08:48 696760 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2012-10-09 09:23 . 2011-10-22 05:46 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2012-09-10 18:35 . 2012-09-10 18:36 821736 ----a-w- c:\windows\SysWow64\npDeployJava1.dll 2012-09-10 18:35 . 2010-09-13 17:32 746984 ----a-w- c:\windows\SysWow64\deployJava1.dll 2012-08-24 11:15 . 2012-09-23 06:59 17810944 ----a-w- c:\windows\system32\mshtml.dll 2012-08-24 10:39 . 2012-09-23 06:59 10925568 ----a-w- c:\windows\system32\ieframe.dll 2012-08-24 10:31 . 2012-09-23 07:00 2312704 ----a-w- c:\windows\system32\jscript9.dll 2012-08-24 10:22 . 2012-09-23 07:00 1346048 ----a-w- c:\windows\system32\urlmon.dll 2012-08-24 10:21 . 2012-09-23 07:00 1392128 ----a-w- c:\windows\system32\wininet.dll 2012-08-24 10:20 . 2012-09-23 07:00 1494528 ----a-w- c:\windows\system32\inetcpl.cpl 2012-08-24 10:18 . 2012-09-23 07:00 237056 ----a-w- c:\windows\system32\url.dll 2012-08-24 10:17 . 2012-09-23 07:00 85504 ----a-w- c:\windows\system32\jsproxy.dll 2012-08-24 10:14 . 2012-09-23 07:00 173056 ----a-w- c:\windows\system32\ieUnatt.exe 2012-08-24 10:14 . 2012-09-23 07:00 816640 ----a-w- c:\windows\system32\jscript.dll 2012-08-24 10:13 . 2012-09-23 07:00 599040 ----a-w- c:\windows\system32\vbscript.dll 2012-08-24 10:12 . 2012-09-23 07:00 2144768 ----a-w- c:\windows\system32\iertutil.dll 2012-08-24 10:11 . 2012-09-23 07:00 729088 ----a-w- c:\windows\system32\msfeeds.dll 2012-08-24 10:10 . 2012-09-23 07:00 96768 ----a-w- c:\windows\system32\mshtmled.dll 2012-08-24 10:09 . 2012-09-23 07:00 2382848 ----a-w- c:\windows\system32\mshtml.tlb 2012-08-24 10:04 . 2012-09-23 07:00 248320 ----a-w- c:\windows\system32\ieui.dll 2012-08-24 06:59 . 2012-09-23 07:00 1800704 ----a-w- c:\windows\SysWow64\jscript9.dll 2012-08-24 06:51 . 2012-09-23 07:00 1129472 ----a-w- c:\windows\SysWow64\wininet.dll 2012-08-24 06:51 . 2012-09-23 07:00 1427968 ----a-w- c:\windows\SysWow64\inetcpl.cpl 2012-08-24 06:47 . 2012-09-23 07:00 142848 ----a-w- c:\windows\SysWow64\ieUnatt.exe 2012-08-24 06:47 . 2012-09-23 07:00 420864 ----a-w- c:\windows\SysWow64\vbscript.dll 2012-08-24 06:43 . 2012-09-23 07:00 2382848 ----a-w- c:\windows\SysWow64\mshtml.tlb 2012-08-21 09:13 . 2011-11-02 08:24 359464 ----a-w- c:\windows\system32\drivers\aswSP.sys 2012-08-21 09:13 . 2011-11-02 08:24 969200 ----a-w- c:\windows\system32\drivers\aswSnx.sys 2012-08-21 09:13 . 2011-11-02 08:24 59728 ----a-w- c:\windows\system32\drivers\aswTdi.sys 2012-08-21 09:13 . 2011-11-02 08:24 71600 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys 2012-08-21 09:13 . 2011-11-02 08:24 44272 ----a-w- c:\windows\system32\drivers\aswRdr.sys 2012-08-21 09:13 . 2011-11-02 08:24 25232 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys 2012-08-21 09:12 . 2011-11-02 08:24 41224 ----a-w- c:\windows\avastSS.scr 2012-08-21 09:12 . 2011-11-02 08:24 227648 ----a-w- c:\windows\SysWow64\aswBoot.exe 2012-08-21 09:12 . 2011-02-10 10:48 285328 ----a-w- c:\windows\system32\aswBoot.exe . . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 94208 ----a-w- c:\users\acer m3641\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 94208 ----a-w- c:\users\acer m3641\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 94208 ----a-w- c:\users\acer m3641\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2008-03-04 21:38 121392 ----a-w- c:\acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 138240] "SoMud"="c:\program files (x86)\SoMud\somud.exe" [2011-06-28 3888128] "swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-11-12 68856] "Greenshot"="c:\program files (x86)\Greenshot\Greenshot.exe" [2010-07-12 548864] "Jing"="c:\program files (x86)\TechSmith\Jing\Jing.exe" [2012-02-01 2918224] "Grammar.net’s Grammar Checker"="c:\program files (x86)\Grammar.net’s Grammar Checker\GrammarChecker.exe" [2012-06-18 73216] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "PCMMediaSharing"="c:\program files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe" [2008-01-25 204908] "SiteAdvisor"="c:\program files (x86)\SiteAdvisor\6172\SiteAdv.exe" [2007-08-24 36640] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-06-25 98304] "WarReg_PopUp"="c:\acer\WR_PopUp\WarReg_PopUp.exe" [2006-11-05 57344] "EEventManager"="c:\program files (x86)\Epson Software\Event Manager\EEventManager.exe" [2009-12-03 976320] "googletalk"="c:\program files (x86)\Google\Google Talk\googletalk.exe" [2007-01-01 3739648] "eSnips_Downloader"="c:\program files (x86)\Logia\eSnipsDownloader\eSnips_Downloader.exe" [2010-05-24 1234432] "avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-08-21 4282728] "Anti-phishing Domain Advisor"="c:\programdata\Anti-phishing Domain Advisor\visicom_antiphishing.exe" [2011-12-21 206504] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008] "SweetIM"="c:\program files (x86)\SweetIM\Messenger\SweetIM.exe" [2011-08-01 114992] "azontop100analyzer"="c:\program files (x86)\AzonTop100Analyzer\azontop100analyzer.exe" [2012-06-09 44474097] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848] . c:\users\Evert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ OpenOffice.org 3.4.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2012-4-19 1199104] . c:\users\acer m3641\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Dropbox.lnk - c:\users\acer m3641\AppData\Roaming\Dropbox\bin\Dropbox.exe [2012-5-24 27112840] Feed Notifier.lnk - c:\program files (x86)\Feed Notifier\notifier.exe [2012-7-24 58368] OneNote 2007 Schermopname en Snel starten.lnk - c:\program files (x86)\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ ASETRES.EXE [2008-4-14 20480] Empowering Technology Launcher.lnk - c:\acer\Empowering Technology\eAPLauncher.exe [2008-9-23 535336] Sitecom Wireless Utility.lnk - c:\program files (x86)\Sitecom\Common\RaUI.exe [2010-6-3 1773568] WinZip Quick Pick.lnk - c:\program files (x86)\WinZip\WZQKPICK.EXE [2010-11-30 608584] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro36] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro36.sys] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro36Crusader] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro36CrusaderBoot] @="" . R2 ABBYY.Licensing.FineReader.Sprint.9.0;ABBYY FineReader 9.0 Sprint Licensing Service;c:\program files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [2009-05-14 759048] R2 Acer HomeMedia Connect Service;Acer HomeMedia Connect Service;c:\program files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe [2008-01-25 269448] R2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960] R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-09 250808] . . --- Andere Services/Drivers In Geheugen --- . *NewlyCreated* - ECACHE . HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs Themes . Inhoud van de 'Gedeelde Taken' map . 2012-10-25 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-11 09:23] . 2012-10-25 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-06-05 07:29] . 2012-10-25 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-06-05 07:29] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}] 2012-03-15 21:26 287048 ----a-w- c:\program files (x86)\Hotspot Shield\HssIE\HssIE_64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast] @="{472083B0-C522-11CF-8763-00608CC02F24}" [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}] 2012-08-21 09:11 133400 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 97792 ----a-w- c:\users\acer m3641\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 97792 ----a-w- c:\users\acer m3641\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 97792 ----a-w- c:\users\acer m3641\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2008-03-04 21:39 51248 ----a-w- c:\acer\Empowering Technology\eDataSecurity\x64\PSDProtect.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvSvc"="c:\windows\system32\nvsvc64.dll" [2007-11-27 88064] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-11-27 10721312] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-11-27 74752] "RtHDVCpl"="RAVCpl64.exe" [2008-03-25 6150656] "Skytel"="Skytel.exe" [2007-11-20 1826816] "eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\x64\eDSloader.exe" [2008-03-04 560688] "NVRaidService"="c:\windows\system32\nvraidservice.exe" [2008-06-06 333344] . ------- Bijkomende Scan ------- . uLocal Page = c:\windows\system32\blank.htm uDefault_Search_URL = hxxp://www.google.com/ie mDefault_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0413&s=1&o=vp64&d=1109&m=aspire_m3641 mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = *.local uSearchAssistant = hxxp://www.google.com/ie uSearchURL,(Default) = hxxp://search.yahoo.com/search?fr=mcafee&p=%s IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: Download Web &Images with SoMud - c:\program files (x86)\SoMud\scripts\ie\images-url.html IE: Download with SoMud - c:\program files (x86)\SoMud\scripts\ie\link-url.html IE: E&xporteren naar Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000 TCP: DhcpNameServer = 192.168.1.1 192.168.1.1 FF - ProfilePath - c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\ FF - prefs.js: browser.search.defaulturl - FF - prefs.js: browser.startup.homepage - hxxps://www.google.com/ FF - prefs.js: network.proxy.gopher - FF - prefs.js: network.proxy.gopher_port - 0 FF - prefs.js: network.proxy.type - 0 FF - ExtSQL: 2012-10-24 09:58; {4ED1F68A-5463-4931-9384-8FFF5ED91D92}; c:\program files (x86)\McAfee\SiteAdvisor FF - ExtSQL: !HIDDEN! 2010-06-06 09:50; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension FF - ExtSQL: !HIDDEN! 2012-03-10 10:49; 5affxtbr@MyWebFace_5a.com; c:\program files (x86)\MyWebFace_5a\bar\1.bin FF - user.js: network.protocol-handler.warn-external.dnupdate - false);user_pref(extensions.searchya_i.hmpg, true FF - user.js: extensions.searchya_i.hmpgUrl - hxxp://searchya.com/?chnl=fap&s=0&cr=879914219&cd=2XzutAtN2Y1L1QzutDtDyCtD0BtAyE0AtB0FtAyEtCyD0C0A0FtN0D0TzutBtDtCtBtDtBtDzz FF - user.js: extensions.searchya_i.dfltSrch - true FF - user.js: extensions.searchya_i.srchPrvdr - SearchYa! FF - user.js: extensions.searchya_i.dnsErr - true FF - user.js: extensions.searchya_i.newTab - true FF - user.js: extensions.searchya_i.newTabUrl - hxxp://searchya.com/?chnl=fap&s=2&cr=879914219&cd=2XzutAtN2Y1L1QzutDtDyCtD0BtAyE0AtB0FtAyEtCyD0C0A0FtN0D0TzutBtDtCtBtDtBtDzz FF - user.js: extensions.searchya_i.tlbrSrchUrl - hxxp://searchya.com/?chnl=fap&s=3&cr=879914219&cd=2XzutAtN2Y1L1QzutDtDyCtD0BtAyE0AtB0FtAyEtCyD0C0A0FtN0D0TzutBtDtCtBtDtBtDzz&q= FF - user.js: extensions.searchya_i.id - 84415caf0000000000000060b34a2f34 FF - user.js: extensions.searchya_i.instlDay - 15378 FF - user.js: extensions.searchya_i.vrsn - 1.5.11.13 FF - user.js: extensions.searchya_i.vrsni - 1.5.11.13 FF - user.js: extensions.searchya_i.vrsnTs - 1.5.11.1316:16 FF - user.js: extensions.searchya_i.prtnrId - ironsrc FF - user.js: extensions.searchya_i.prdct - searchya FF - user.js: extensions.searchya_i.aflt - foxtab FF - user.js: extensions.searchya_i.smplGrp - none FF - user.js: extensions.searchya_i.tlbrId - base FF - user.js: extensions.searchya_i.instlRef - fap FF - user.js: extensions.searchya_i.dfltLng - FF - user.js: extensions.searchya_i.excTlbr - false FF - user.js: extensions.BabylonToolbar_i.id - 84415caf0000000000000060b34a2f34 FF - user.js: extensions.BabylonToolbar_i.hardId - 84415caf0000000000000060b34a2f34 FF - user.js: extensions.BabylonToolbar_i.instlDay - 15400 FF - user.js: extensions.BabylonToolbar_i.vrsn - 1.5.3.17 FF - user.js: extensions.BabylonToolbar_i.vrsni - 1.5.3.17 FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.5.3.1715:41 FF - user.js: extensions.BabylonToolbar_i.prtnrId - babylon FF - user.js: extensions.BabylonToolbar_i.prdct - BabylonToolbar FF - user.js: extensions.BabylonToolbar_i.aflt - babsst FF - user.js: extensions.BabylonToolbar_i.smplGrp - none FF - user.js: extensions.BabylonToolbar_i.tlbrId - base FF - user.js: extensions.BabylonToolbar_i.newTab - false FF - user.js: extensions.BabylonToolbar_i.babTrack - affID=101241 FF - user.js: extensions.BabylonToolbar_i.babExt - FF - user.js: extensions.BabylonToolbar_i.srcExt - ss FF - user.js: extensions.BabylonToolbar_i.instlRef - sst . - - - - ORPHANS VERWIJDERD - - - - . Toolbar-10 - (no file) Wow6432Node-HKLM-Run-<NO NAME> - (no file) WebBrowser-{65CA59EE-9920-4D7F-8C41-BFA12403261A} - (no file) WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file) AddRemove-Allscoop RSS Submit Pro 1.0 - c:\windows\system32\ss2uinst.exe AddRemove-BabylonToolbar - c:\program files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\uninstall.exe AddRemove-conduitEngine - c:\progra~2\CONDUI~1\ConduitEngineUninstall.exe AddRemove-InstallBrain Updater Service - c:\programdata\InstallBrainService\ibsvc.exe AddRemove-PHPNukeDU Toolbar - c:\progra~2\PHPNUK~1\UNINST~1.EXE AddRemove-Savings Sidekick - c:\program files (x86)\Savings Sidekick\Uninstall.exe AddRemove-Searchqu 406 MediaBar - c:\program files (x86)\Windows iLivid Toolbar\uninstall.exe . . . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_287_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_287_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}] @Denied: (A 2) (Everyone) . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0] @="Shockwave Flash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}] @Denied: (A 2) (Everyone) @="" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0] @="FlashBroker" . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes] "SymbolicLinkValue"=hex(6):5c,00,52,00,45,00,47,00,49,00,53,00,54,00,52,00,59, 00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\ . Voltooingstijd: 2012-10-25 16:09:22 ComboFix-quarantined-files.txt 2012-10-25 14:09 ComboFix2.txt 2012-10-24 15:34 . Pre-Run: 200.982.695.936 bytes beschikbaar Post-Run: 200.816.599.040 bytes beschikbaar . - - End Of File - - 4861DBA5E3BC3C3D321220953B2A7778
  16. InternetMarketer
    Ik heb nu Combifix.exe op m'n bureaublad. Starten in de veilige modus wil me niet lukken. Ik heb twee keer geprobeerd op te starten en gelijk na de start een paar keer op F8 gedrukt, maar ik kreeg beide keren niet de mogelijkheid om voor veilige modus te kiezen. Ik heb nu Combifix in de normale situatie gescand, hopende dat de vorige versie op mijn bureaublad het probleem was. Combifix heeft nu wel een log bestand opgeslagen. Hieronder vind je de inhoud van deze log. Ik hoop dat het nu wel de juiste informatie geeft: ComboFix 12-10-25.01 - acer m3641 25-10-2012 14:01:48.3.4 - x64 Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.31.1043.18.4094.1890 [GMT 2:00] Gestart vanuit: c:\users\acer m3641\Desktop\ComboFix.exe gebruikte Opdracht switches :: c:\users\acer m3641\Desktop\CFScript.txt AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C} SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((( Bestanden Gemaakt van 2012-09-25 to 2012-10-25 )))))))))))))))))))))))))))))) . . 2012-10-25 12:28 . 2012-10-25 12:28 -------- d-----w- c:\users\Default\AppData\Local\temp 2012-10-25 12:28 . 2012-10-25 12:28 -------- d-----w- c:\users\acer m3641\AppData\Local\temp 2012-10-25 12:28 . 2012-10-25 12:28 -------- d-----w- c:\users\Evert\AppData\Local\temp 2012-10-24 14:48 . 2012-10-25 11:55 -------- d-----w- C:\32788R22FWJFW 2012-10-24 07:10 . 2012-10-24 07:10 -------- d-----w- c:\users\acer m3641\AppData\Roaming\Malwarebytes 2012-10-24 07:10 . 2012-10-24 07:10 -------- d-----w- c:\programdata\Malwarebytes 2012-10-24 07:10 . 2012-10-24 07:10 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware 2012-10-24 07:10 . 2012-09-29 17:54 25928 ----a-w- c:\windows\system32\drivers\mbam.sys 2012-10-23 16:33 . 2012-10-23 16:33 388096 ----a-r- c:\users\acer m3641\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2012-10-23 16:33 . 2012-10-23 16:33 -------- d-----w- c:\program files (x86)\Trend Micro 2012-10-23 14:29 . 2012-10-17 00:31 9291768 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{28EE2000-10E4-4061-B972-0BBCBEB6B0AD}\mpengine.dll 2012-10-19 15:38 . 2012-09-24 21:16 95208 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll 2012-10-11 05:35 . 2012-10-20 07:25 12872 ----a-w- c:\windows\system32\bootdelete.exe 2012-10-10 05:10 . 2012-09-13 13:45 2048 ----a-w- c:\windows\system32\tzres.dll 2012-10-10 05:10 . 2012-09-13 13:28 2048 ----a-w- c:\windows\SysWow64\tzres.dll 2012-10-10 05:10 . 2012-08-24 16:07 218624 ----a-w- c:\windows\system32\wintrust.dll 2012-10-10 05:10 . 2012-08-24 15:53 172544 ----a-w- c:\windows\SysWow64\wintrust.dll 2012-10-10 05:10 . 2012-06-02 00:20 1268736 ----a-w- c:\windows\system32\crypt32.dll 2012-10-10 05:10 . 2012-06-02 00:20 174592 ----a-w- c:\windows\system32\cryptsvc.dll 2012-10-10 05:10 . 2012-06-02 00:20 132096 ----a-w- c:\windows\system32\cryptnet.dll 2012-10-10 05:10 . 2012-06-02 00:02 985088 ----a-w- c:\windows\SysWow64\crypt32.dll 2012-10-10 05:10 . 2012-06-02 00:02 133120 ----a-w- c:\windows\SysWow64\cryptsvc.dll 2012-10-10 05:10 . 2012-06-02 00:02 98304 ----a-w- c:\windows\SysWow64\cryptnet.dll 2012-10-10 05:10 . 2012-08-29 11:40 4699520 ----a-w- c:\windows\system32\ntoskrnl.exe 2012-10-09 08:16 . 2012-10-09 08:16 -------- d-----w- c:\program files (x86)\Market Samurai 2012-10-04 08:36 . 2012-10-24 06:54 -------- d-----w- c:\programdata\webex . . . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-10-11 05:12 . 2006-11-02 12:35 65309168 ----a-w- c:\windows\system32\mrt.exe 2012-10-09 09:23 . 2012-04-11 08:48 696760 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2012-10-09 09:23 . 2011-10-22 05:46 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2012-09-10 18:35 . 2012-09-10 18:36 821736 ----a-w- c:\windows\SysWow64\npDeployJava1.dll 2012-09-10 18:35 . 2010-09-13 17:32 746984 ----a-w- c:\windows\SysWow64\deployJava1.dll 2012-08-24 11:15 . 2012-09-23 06:59 17810944 ----a-w- c:\windows\system32\mshtml.dll 2012-08-24 10:39 . 2012-09-23 06:59 10925568 ----a-w- c:\windows\system32\ieframe.dll 2012-08-24 10:31 . 2012-09-23 07:00 2312704 ----a-w- c:\windows\system32\jscript9.dll 2012-08-24 10:22 . 2012-09-23 07:00 1346048 ----a-w- c:\windows\system32\urlmon.dll 2012-08-24 10:21 . 2012-09-23 07:00 1392128 ----a-w- c:\windows\system32\wininet.dll 2012-08-24 10:20 . 2012-09-23 07:00 1494528 ----a-w- c:\windows\system32\inetcpl.cpl 2012-08-24 10:18 . 2012-09-23 07:00 237056 ----a-w- c:\windows\system32\url.dll 2012-08-24 10:17 . 2012-09-23 07:00 85504 ----a-w- c:\windows\system32\jsproxy.dll 2012-08-24 10:14 . 2012-09-23 07:00 173056 ----a-w- c:\windows\system32\ieUnatt.exe 2012-08-24 10:14 . 2012-09-23 07:00 816640 ----a-w- c:\windows\system32\jscript.dll 2012-08-24 10:13 . 2012-09-23 07:00 599040 ----a-w- c:\windows\system32\vbscript.dll 2012-08-24 10:12 . 2012-09-23 07:00 2144768 ----a-w- c:\windows\system32\iertutil.dll 2012-08-24 10:11 . 2012-09-23 07:00 729088 ----a-w- c:\windows\system32\msfeeds.dll 2012-08-24 10:10 . 2012-09-23 07:00 96768 ----a-w- c:\windows\system32\mshtmled.dll 2012-08-24 10:09 . 2012-09-23 07:00 2382848 ----a-w- c:\windows\system32\mshtml.tlb 2012-08-24 10:04 . 2012-09-23 07:00 248320 ----a-w- c:\windows\system32\ieui.dll 2012-08-24 06:59 . 2012-09-23 07:00 1800704 ----a-w- c:\windows\SysWow64\jscript9.dll 2012-08-24 06:51 . 2012-09-23 07:00 1129472 ----a-w- c:\windows\SysWow64\wininet.dll 2012-08-24 06:51 . 2012-09-23 07:00 1427968 ----a-w- c:\windows\SysWow64\inetcpl.cpl 2012-08-24 06:47 . 2012-09-23 07:00 142848 ----a-w- c:\windows\SysWow64\ieUnatt.exe 2012-08-24 06:47 . 2012-09-23 07:00 420864 ----a-w- c:\windows\SysWow64\vbscript.dll 2012-08-24 06:43 . 2012-09-23 07:00 2382848 ----a-w- c:\windows\SysWow64\mshtml.tlb 2012-08-21 09:13 . 2011-11-02 08:24 359464 ----a-w- c:\windows\system32\drivers\aswSP.sys 2012-08-21 09:13 . 2011-11-02 08:24 969200 ----a-w- c:\windows\system32\drivers\aswSnx.sys 2012-08-21 09:13 . 2011-11-02 08:24 59728 ----a-w- c:\windows\system32\drivers\aswTdi.sys 2012-08-21 09:13 . 2011-11-02 08:24 71600 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys 2012-08-21 09:13 . 2011-11-02 08:24 44272 ----a-w- c:\windows\system32\drivers\aswRdr.sys 2012-08-21 09:13 . 2011-11-02 08:24 25232 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys 2012-08-21 09:12 . 2011-11-02 08:24 41224 ----a-w- c:\windows\avastSS.scr 2012-08-21 09:12 . 2011-11-02 08:24 227648 ----a-w- c:\windows\SysWow64\aswBoot.exe 2012-08-21 09:12 . 2011-02-10 10:48 285328 ----a-w- c:\windows\system32\aswBoot.exe . . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 94208 ----a-w- c:\users\acer m3641\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 94208 ----a-w- c:\users\acer m3641\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 94208 ----a-w- c:\users\acer m3641\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2008-03-04 21:38 121392 ----a-w- c:\acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 138240] "SoMud"="c:\program files (x86)\SoMud\somud.exe" [2011-06-28 3888128] "swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-11-12 68856] "Greenshot"="c:\program files (x86)\Greenshot\Greenshot.exe" [2010-07-12 548864] "Jing"="c:\program files (x86)\TechSmith\Jing\Jing.exe" [2012-02-01 2918224] "Grammar.net’s Grammar Checker"="c:\program files (x86)\Grammar.net’s Grammar Checker\GrammarChecker.exe" [2012-06-18 73216] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "PCMMediaSharing"="c:\program files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe" [2008-01-25 204908] "SiteAdvisor"="c:\program files (x86)\SiteAdvisor\6172\SiteAdv.exe" [2007-08-24 36640] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-06-25 98304] "WarReg_PopUp"="c:\acer\WR_PopUp\WarReg_PopUp.exe" [2006-11-05 57344] "EEventManager"="c:\program files (x86)\Epson Software\Event Manager\EEventManager.exe" [2009-12-03 976320] "googletalk"="c:\program files (x86)\Google\Google Talk\googletalk.exe" [2007-01-01 3739648] "eSnips_Downloader"="c:\program files (x86)\Logia\eSnipsDownloader\eSnips_Downloader.exe" [2010-05-24 1234432] "avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-08-21 4282728] "Anti-phishing Domain Advisor"="c:\programdata\Anti-phishing Domain Advisor\visicom_antiphishing.exe" [2011-12-21 206504] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008] "SweetIM"="c:\program files (x86)\SweetIM\Messenger\SweetIM.exe" [2011-08-01 114992] "azontop100analyzer"="c:\program files (x86)\AzonTop100Analyzer\azontop100analyzer.exe" [2012-06-09 44474097] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848] . c:\users\Evert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ OpenOffice.org 3.4.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2012-4-19 1199104] . c:\users\acer m3641\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Dropbox.lnk - c:\users\acer m3641\AppData\Roaming\Dropbox\bin\Dropbox.exe [2012-5-24 27112840] Feed Notifier.lnk - c:\program files (x86)\Feed Notifier\notifier.exe [2012-7-24 58368] OneNote 2007 Schermopname en Snel starten.lnk - c:\program files (x86)\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ ASETRES.EXE [2008-4-14 20480] Empowering Technology Launcher.lnk - c:\acer\Empowering Technology\eAPLauncher.exe [2008-9-23 535336] Sitecom Wireless Utility.lnk - c:\program files (x86)\Sitecom\Common\RaUI.exe [2010-6-3 1773568] WinZip Quick Pick.lnk - c:\program files (x86)\WinZip\WZQKPICK.EXE [2010-11-30 608584] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro36] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro36.sys] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro36Crusader] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro36CrusaderBoot] @="" . R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-09 250808] S2 ABBYY.Licensing.FineReader.Sprint.9.0;ABBYY FineReader 9.0 Sprint Licensing Service;c:\program files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [2009-05-14 759048] S2 Acer HomeMedia Connect Service;Acer HomeMedia Connect Service;c:\program files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe [2008-01-25 269448] S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960] . . HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs Themes . Inhoud van de 'Gedeelde Taken' map . 2012-10-25 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-11 09:23] . 2012-10-25 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-06-05 07:29] . 2012-10-25 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-06-05 07:29] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}] 2012-03-15 21:26 287048 ----a-w- c:\program files (x86)\Hotspot Shield\HssIE\HssIE_64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast] @="{472083B0-C522-11CF-8763-00608CC02F24}" [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}] 2012-08-21 09:11 133400 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 97792 ----a-w- c:\users\acer m3641\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 97792 ----a-w- c:\users\acer m3641\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 97792 ----a-w- c:\users\acer m3641\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2008-03-04 21:39 51248 ----a-w- c:\acer\Empowering Technology\eDataSecurity\x64\PSDProtect.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvSvc"="c:\windows\system32\nvsvc64.dll" [2007-11-27 88064] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-11-27 10721312] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-11-27 74752] "RtHDVCpl"="RAVCpl64.exe" [2008-03-25 6150656] "Skytel"="Skytel.exe" [2007-11-20 1826816] "eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\x64\eDSloader.exe" [2008-03-04 560688] "NVRaidService"="c:\windows\system32\nvraidservice.exe" [2008-06-06 333344] . ------- Bijkomende Scan ------- . uLocal Page = c:\windows\system32\blank.htm uDefault_Search_URL = hxxp://www.google.com/ie mDefault_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0413&s=1&o=vp64&d=1109&m=aspire_m3641 mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = *.local uSearchAssistant = hxxp://www.google.com/ie uSearchURL,(Default) = hxxp://search.yahoo.com/search?fr=mcafee&p=%s IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: Download Web &Images with SoMud - c:\program files (x86)\SoMud\scripts\ie\images-url.html IE: Download with SoMud - c:\program files (x86)\SoMud\scripts\ie\link-url.html IE: E&xporteren naar Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000 TCP: DhcpNameServer = 192.168.1.1 192.168.1.1 FF - ProfilePath - c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\ FF - prefs.js: browser.search.defaulturl - FF - prefs.js: browser.startup.homepage - hxxps://www.google.com/ FF - prefs.js: network.proxy.gopher - FF - prefs.js: network.proxy.gopher_port - 0 FF - prefs.js: network.proxy.type - 0 FF - ExtSQL: 2012-10-24 09:58; {4ED1F68A-5463-4931-9384-8FFF5ED91D92}; c:\program files (x86)\McAfee\SiteAdvisor FF - ExtSQL: !HIDDEN! 2010-06-06 09:50; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension FF - ExtSQL: !HIDDEN! 2012-03-10 10:49; 5affxtbr@MyWebFace_5a.com; c:\program files (x86)\MyWebFace_5a\bar\1.bin FF - user.js: network.protocol-handler.warn-external.dnupdate - false);user_pref(extensions.searchya_i.hmpg, true FF - user.js: extensions.searchya_i.hmpgUrl - hxxp://searchya.com/?chnl=fap&s=0&cr=879914219&cd=2XzutAtN2Y1L1QzutDtDyCtD0BtAyE0AtB0FtAyEtCyD0C0A0FtN0D0TzutBtDtCtBtDtBtDzz FF - user.js: extensions.searchya_i.dfltSrch - true FF - user.js: extensions.searchya_i.srchPrvdr - SearchYa! FF - user.js: extensions.searchya_i.dnsErr - true FF - user.js: extensions.searchya_i.newTab - true FF - user.js: extensions.searchya_i.newTabUrl - hxxp://searchya.com/?chnl=fap&s=2&cr=879914219&cd=2XzutAtN2Y1L1QzutDtDyCtD0BtAyE0AtB0FtAyEtCyD0C0A0FtN0D0TzutBtDtCtBtDtBtDzz FF - user.js: extensions.searchya_i.tlbrSrchUrl - hxxp://searchya.com/?chnl=fap&s=3&cr=879914219&cd=2XzutAtN2Y1L1QzutDtDyCtD0BtAyE0AtB0FtAyEtCyD0C0A0FtN0D0TzutBtDtCtBtDtBtDzz&q= FF - user.js: extensions.searchya_i.id - 84415caf0000000000000060b34a2f34 FF - user.js: extensions.searchya_i.instlDay - 15378 FF - user.js: extensions.searchya_i.vrsn - 1.5.11.13 FF - user.js: extensions.searchya_i.vrsni - 1.5.11.13 FF - user.js: extensions.searchya_i.vrsnTs - 1.5.11.1316:16 FF - user.js: extensions.searchya_i.prtnrId - ironsrc FF - user.js: extensions.searchya_i.prdct - searchya FF - user.js: extensions.searchya_i.aflt - foxtab FF - user.js: extensions.searchya_i.smplGrp - none FF - user.js: extensions.searchya_i.tlbrId - base FF - user.js: extensions.searchya_i.instlRef - fap FF - user.js: extensions.searchya_i.dfltLng - FF - user.js: extensions.searchya_i.excTlbr - false FF - user.js: extensions.BabylonToolbar_i.id - 84415caf0000000000000060b34a2f34 FF - user.js: extensions.BabylonToolbar_i.hardId - 84415caf0000000000000060b34a2f34 FF - user.js: extensions.BabylonToolbar_i.instlDay - 15400 FF - user.js: extensions.BabylonToolbar_i.vrsn - 1.5.3.17 FF - user.js: extensions.BabylonToolbar_i.vrsni - 1.5.3.17 FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.5.3.1715:41 FF - user.js: extensions.BabylonToolbar_i.prtnrId - babylon FF - user.js: extensions.BabylonToolbar_i.prdct - BabylonToolbar FF - user.js: extensions.BabylonToolbar_i.aflt - babsst FF - user.js: extensions.BabylonToolbar_i.smplGrp - none FF - user.js: extensions.BabylonToolbar_i.tlbrId - base FF - user.js: extensions.BabylonToolbar_i.newTab - false FF - user.js: extensions.BabylonToolbar_i.babTrack - affID=101241 FF - user.js: extensions.BabylonToolbar_i.babExt - FF - user.js: extensions.BabylonToolbar_i.srcExt - ss FF - user.js: extensions.BabylonToolbar_i.instlRef - sst . - - - - ORPHANS VERWIJDERD - - - - . Toolbar-10 - (no file) Wow6432Node-HKLM-Run-<NO NAME> - (no file) WebBrowser-{65CA59EE-9920-4D7F-8C41-BFA12403261A} - (no file) WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file) AddRemove-Allscoop RSS Submit Pro 1.0 - c:\windows\system32\ss2uinst.exe AddRemove-BabylonToolbar - c:\program files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\uninstall.exe AddRemove-conduitEngine - c:\progra~2\CONDUI~1\ConduitEngineUninstall.exe AddRemove-InstallBrain Updater Service - c:\programdata\InstallBrainService\ibsvc.exe AddRemove-PHPNukeDU Toolbar - c:\progra~2\PHPNUK~1\UNINST~1.EXE AddRemove-Savings Sidekick - c:\program files (x86)\Savings Sidekick\Uninstall.exe AddRemove-Searchqu 406 MediaBar - c:\program files (x86)\Windows iLivid Toolbar\uninstall.exe . . . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_287_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_287_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}] @Denied: (A 2) (Everyone) . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0] @="Shockwave Flash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}] @Denied: (A 2) (Everyone) @="" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0] @="FlashBroker" . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes] "SymbolicLinkValue"=hex(6):5c,00,52,00,45,00,47,00,49,00,53,00,54,00,52,00,59, 00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\ . Voltooingstijd: 2012-10-25 14:36:35 ComboFix-quarantined-files.txt 2012-10-25 12:36 ComboFix2.txt 2012-10-24 15:34 . Pre-Run: 201.004.732.416 bytes beschikbaar Post-Run: 200.997.097.472 bytes beschikbaar . - - End Of File - - 894A511FEB301F05E0C82C20EB2A4F96
  17. InternetMarketer
    Hallo, Even een paar opmerkingen en vragen voordat ik verder ga: 1) Ik zie dat Combifix geen log bestand heeft opgeslagen. Combifix opende vanzelf een log na de scan. Hiervan heb ik de inhoud in dit forum geplakt. 2) Ik heb Combifix als snelkoppeling op mijn bureaublad. 3) Hoe kan ik mijn computer in de veilige modus starten? 4) Waar moet ik nu precies starten om de juiste scans uit te voeren en jou de goede resultaten te laten zien? Alvast bedankt...
  18. InternetMarketer
    Sorry voor dit bericht. I had het vorige log per ongeluk twee keer toegevoegd. Ik weet alleen niet hoe ik deze post kan verwijderen, vandaar dit korte bericht. Mijn PC is inmiddels al veel sneller geworden!!
  19. InternetMarketer
    ComboFix 12-10-24.02 - acer m3641 25-10-2012 7:50.2.4 - x64 Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.31.1043.18.4094.2618 [GMT 2:00] Gestart vanuit: c:\users\acer m3641\Downloads\ComboFix.exe gebruikte Opdracht switches :: c:\users\acer m3641\Desktop\CFScript.txt AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C} SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\progra~2\WI371A~1 c:\progra~2\WI371A~1\Datamngr\datamngr.dll c:\progra~2\WI371A~1\Datamngr\datamngrUI.exe c:\progra~2\WI371A~1\Datamngr\FirefoxExtension\chrome.manifest c:\progra~2\WI371A~1\Datamngr\FirefoxExtension\components\DataMngrHlp.dll c:\progra~2\WI371A~1\Datamngr\FirefoxExtension\components\DataMngrHlp.xpt c:\progra~2\WI371A~1\Datamngr\FirefoxExtension\content\DataMngr.js c:\progra~2\WI371A~1\Datamngr\FirefoxExtension\content\FFBHO.js c:\progra~2\WI371A~1\Datamngr\FirefoxExtension\content\overlay.js c:\progra~2\WI371A~1\Datamngr\FirefoxExtension\content\overlay.xul c:\progra~2\WI371A~1\Datamngr\FirefoxExtension\content\Settings.xml c:\progra~2\WI371A~1\Datamngr\FirefoxExtension\install.rdf c:\progra~2\WI371A~1\Datamngr\x64\datamngrUI.exe c:\progra~2\WI371A~1\ToolBar\as_guid.dat c:\progra~2\WI371A~1\ToolBar\chrome\content\bandoocode.js c:\progra~2\WI371A~1\ToolBar\chrome\content\data\search\engines.xml c:\progra~2\WI371A~1\ToolBar\chrome\content\data\search\search.xsl c:\progra~2\WI371A~1\ToolBar\chrome\content\imeshcode.js c:\progra~2\WI371A~1\ToolBar\chrome\content\lib\about.xml c:\progra~2\WI371A~1\ToolBar\chrome\content\lib\bandoocode.js c:\progra~2\WI371A~1\ToolBar\chrome\content\lib\dtxpanel.xul c:\progra~2\WI371A~1\ToolBar\chrome\content\lib\dtxpanelwin.xul c:\progra~2\WI371A~1\ToolBar\chrome\content\lib\dtxprefwin.xul c:\progra~2\WI371A~1\ToolBar\chrome\content\lib\dtxtransparentwin.xul c:\progra~2\WI371A~1\ToolBar\chrome\content\lib\dtxwin.xul c:\progra~2\WI371A~1\ToolBar\chrome\content\lib\emailnotifierproviders.xml c:\progra~2\WI371A~1\ToolBar\chrome\content\lib\external.js c:\progra~2\WI371A~1\ToolBar\chrome\content\lib\imeshcode.js c:\progra~2\WI371A~1\ToolBar\chrome\content\lib\neterror.xhtml c:\progra~2\WI371A~1\ToolBar\chrome\content\lib\nsDragAndDrop.js c:\progra~2\WI371A~1\ToolBar\chrome\content\lib\vmncode.js c:\progra~2\WI371A~1\ToolBar\chrome\content\lib\wmpstreamer.html c:\progra~2\WI371A~1\ToolBar\chrome\content\modules\datastore.jsm c:\progra~2\WI371A~1\ToolBar\chrome\content\neterror.xhtml c:\progra~2\WI371A~1\ToolBar\chrome\content\partner.coupons.xml c:\progra~2\WI371A~1\ToolBar\chrome\content\preferences.xml c:\progra~2\WI371A~1\ToolBar\chrome\content\radiobeta.js c:\progra~2\WI371A~1\ToolBar\chrome\content\template.xml c:\progra~2\WI371A~1\ToolBar\chrome\content\toolbar.htm c:\progra~2\WI371A~1\ToolBar\chrome\content\toolbar.xul c:\progra~2\WI371A~1\ToolBar\chrome\content\vmncode.js c:\progra~2\WI371A~1\ToolBar\chrome\content\vmnrsswin.xml c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\alert_coupon.css c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\arrow-next-off.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\arrow-next.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\arrow-previous-off.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\arrow-previous.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\bg-coupon-blue.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\bg-save.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\btn-getcoupon.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\btn-next-blue.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\btn-previous-blue.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\btn-wide-close-over.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\btn-wide-close.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\coupon-activated.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\couponTooltip.js c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\css\dialog.css c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\css\ie7style.css c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\ico-coupon.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\ico-dollar.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\arrow-grey.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\arrows_grey-left.gif c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\arrows_grey-right.gif c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\bg_top.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\btn-back.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\btn-getcoupon.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\btn-search.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\coupon-activated.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\delete.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\loader.gif c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\scrollb-disable.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\scrollb-down.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\scrollb.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\scrollt-disable.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\scrollt-down.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\scrollt.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\sprite.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\tab-arrow-hover.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\tab-arrow.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\tab-off-l.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\tab-off-l_BAK.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\tab-off-r.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\tab-off-r_BAK.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\tab-on-l.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\tab-on-r.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\tab-over-l.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\tab-over-r.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\tab-white-left.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\tab-white-mdl.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\tab-white-right.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\images\vid-bg.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\index.html c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\jquery.contextMenu.css c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\jquery.contextMenu.js c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\js\jquery-1.4.2.min.js c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\js\jquery.event.wheel.js c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\js\jquery.scrollTo-min.js c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\js\JSON.js c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\js\listnav.js c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\js\main.js c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\page_white_copy.gif c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\panel.html c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\partner.xml c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\placeholder-logo.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\skin\css\dialog.css c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\skin\images\bg.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\skin\images\btn-wide-close-over.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\skin\images\btn-wide-close.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\skin\images\default.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\skin\images\transparent.gif c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\skin\images\win-btm-left.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\skin\images\win-btm-mdl.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\skin\images\win-btm-right-resize.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\skin\images\win-btm-right.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\skin\main.html c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\skin\scripts\defscript.js c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\tb_icon.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\widget.jsw c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\widget.xml c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Coupons_v2\widget_version.txt c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\css\dialog.css c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\arrow-grey.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\arrows_grey-left.gif c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\arrows_grey-right.gif c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\back.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\btn-search-over.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\btn-search.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\delete.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\scrollb-disable.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\scrollb-down.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\scrollb.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\scrollt-disable.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\scrollt-down.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\scrollt.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-arrow-hover.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-arrow.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-off-l.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-off-r.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-on-l.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-on-r.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-over-l.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-over-r.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-red-left.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-red-mdl.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-red-right.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-white-left.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-white-mdl.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\tab-white-right.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\throbber.gif c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\vid-bg.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\images\youtube.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\index.html c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\js\function.js c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\js\jquery-1.4.2.min.js c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\js\JSON.js c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\css\dialog.css c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\bg-facebook.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\blank.gif c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\btn-wide-close-over.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\btn-wide-close.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\default.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\transparent.gif c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\win-btm-left.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\win-btm-mdl.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\win-btm-right-resize.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\images\win-btm-right.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\main.html c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\scripts\defscript.js c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\skin\scripts\jquery-1.4.2.min.js c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\tb_icon.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\widget.jsw c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\widget.xml c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.MyStartFacebook\widget_version.txt c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.PPCBully\tb_icon.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.PPCBully\widget.js c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.PPCBully\widget.xml c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.PPCBully\widget_version c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\css\twitter.css c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\btn-login-over.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\btn-login.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\btn-submit.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\loginbg.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\refresh-over.gif c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\refresh.gif c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\scrollbottom-disable.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\scrollbottom-down.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\scrollbottom-over.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\scrollbottom.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\scrolltop-disable.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\scrolltop-down.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\scrolltop-over.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\scrolltop.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\tab-off-l.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\tab-off-r.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\tab-on-l.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\tab-on-r.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\throbber.gif c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\twitter-logo48.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\images\twitter_top.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\js\jquery.js c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\js\scripts.js c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\skin\css\dialog.css c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\skin\images\bg.gif c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\skin\images\btn-wide-close-over.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\skin\images\btn-wide-close.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\skin\images\default.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\skin\images\transparent.gif c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\skin\images\win-btm-left.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\skin\images\win-btm-mdl.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\skin\images\win-btm-right-resize.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\skin\images\win-btm-right.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\skin\main.html c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\skin\scripts\defscript.js c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\tb_icon.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\widget.js c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\widget.xml c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.Twitter\widget_version.txt c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\css\autocomplete.css c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\css\dialog.css c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\arrow-grey.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\arrows_grey-left.gif c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\arrows_grey-right.gif c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\bg.gif c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\btn-search-over.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\btn-search.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\powered-by-youtube.gif c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-off-l.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-off-r.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-on-l.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-on-r.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-red-left.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-red-mdl.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-red-right.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-white-left.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-white-mdl.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\tab-white-right.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\throbber.gif c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\vid-bg.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\images\youtube.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\index.html c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\js\autocomplete.js c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\js\jquery-1.4.3.min.js c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\js\paginator.js c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\js\youtube.js c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\css\dialog.css c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\bg.gif c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\btn-search.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\btn-wide-close-over.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\btn-wide-close.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\default.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\tab-off-l.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\tab-off-r.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\tab-on-l.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\tab-on-r.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\transparent.gif c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\win-btm-left.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\win-btm-mdl.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\win-btm-right-resize.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\images\win-btm-right.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\main.html c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\skin\scripts\defscript.js c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\tb_icon.png c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\widget.jsw c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\widget.xml c:\progra~2\WI371A~1\ToolBar\chrome\content\widgets\net.vmn.www.YouTube_v2\widget_version.txt c:\progra~2\WI371A~1\ToolBar\chrome\skin\babylon_logo.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\bandoo.css c:\progra~2\WI371A~1\ToolBar\chrome\skin\bluelite.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\bluesky.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\btn-search-over.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\btn-search.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\btn-settings-over.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\btn-settings.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\btn-widgets-over.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\btn-widgets.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\btn_settings.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\ca.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\dictionary.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\divider.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\downloadcom.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\dtxlogo.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\ebay.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\email.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\email_on.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\facebook.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\games.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\graphred0.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\graphred0_5.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\graphred1.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\graphred1_5.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\graphred2.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\graphred2_5.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\graphred3.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\graphred3_5.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\graphred4.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\graphred4_5.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\graphred5.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\graphredna.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\grey.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\ico-shield.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\icon_radio_png c:\progra~2\WI371A~1\ToolBar\chrome\skin\icon_seperator_png c:\progra~2\WI371A~1\ToolBar\chrome\skin\images.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\imesh.css c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\add.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\aol.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\arrow-dn.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\arrow-right-disabled.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\arrow-right.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\arrow-up.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\bg-btn-divider.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\bg-btn-end.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\bg-btn-mdl.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\bg-btn-mdl_ff.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\bg-btn-start.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\bg-btnover-divider.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\bg-btnover-end.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\bg-btnover-mdl.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\bg-btnover-mdl_ff.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\bg-btnover-start.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\blank.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\btn-widgets-over.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\btn-widgets.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\btn_slider.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\btnback-down-vista.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\btnback-vista.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\btnleft-down-vista.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\btnleft-vista.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\btnright-down-vista.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\btnright-vista.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\button-splitter-down-vista.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\button-splitter-vista.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\checkmark.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\chevron.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\collapse.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\comcast.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\dtx.css c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\edit-back-hot.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\edit-back.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\expand.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\found.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\gmail.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\highlight.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\highlight_blue.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\highlight_cyan.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\highlight_lime.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\highlight_magenta.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\highlight_yellow.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\hotmail.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\ico-check.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\imap.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\lastsearch-thumb-back.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\loadingMid.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\lock.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\logo-separator.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\mailcom.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\menu_bg-basic.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\menu_separator_bar.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\menu_separator_white.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\menuitem-splitter.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\menuitemback-down-vista.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\menuitemback-vista.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\menuitemleft-down-vista.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\menuitemleft-vista.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\menuitemright-down-vista.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\menuitemright-vista.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\modify.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\move.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\movetarget.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\css\panels.css c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\css\popupAbout.css c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\css\popupGames.css c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\css\popupRSS.css c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\css\popupWidgets.css c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\default\css\dialog.css c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\default\images\bg.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\default\images\btn-search.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\default\images\btn-wide-close-over.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\default\images\btn-wide-close.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\default\images\default.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\default\images\tab-off-l.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\default\images\tab-off-r.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\default\images\tab-on-l.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\default\images\tab-on-r.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\default\images\transparent.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\default\images\ttlbar-left.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\default\images\ttlbar-mdl.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\default\images\ttlbar-right.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\default\images\win-btm-left.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\default\images\win-btm-mdl.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\default\images\win-btm-right-resize.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\default\images\win-btm-right.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\default\images\win-left.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\default\images\win-right.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\default\main.html c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\default\scripts\defscript.js c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\footer.htm c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\gamecategory.xsl c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\gameData.js c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\gameList.xsl c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\games.xsl c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\gametype.xsl c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\arrow-dn.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\arrow-sml-drop.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\arrow-sml.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\arrow-up.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\arrowr-bluew5.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\bg-aboutbox.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\bg-btnover.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\bg-pnl520x390.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\btn-addtoolbar-left-over.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\btn-addtoolbar-left.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\btn-addtoolbar-right.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\btn-back.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\btn-close-grey.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\btn-close-greyover.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\btn-drag.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\btn-mdl-over.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\btn-mdl.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\btn-moredetails.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\btn-next-over.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\btn-next.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\btn-play-left-over.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\btn-play-left.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\btn-previous-over.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\btn-previous.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\btn-right-over.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\btn-search-pnlbtm-over.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\btn-search-pnlbtm.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\btn-try-left-over.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\btn-try-left.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\bullet-orange.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\gamethumb-on.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\gamethumb2-over.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\ico-calendar.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\ico-dollar.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\ico-download.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\ico-joystick24.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\ico-news24.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\ico-play.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\ico-tags.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\icon-Add.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\icon-download.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\icon-Info.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\icon-play.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\icon-shop.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\menul-bgon.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\menul-bgover.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\panel-botm-noscroll.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\scroll-bg-206.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\scroll-bg.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\scroll-topwin.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\scrollb-disable.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\scrollb-down.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\scrollb-over.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\scrollb.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\scrollt-disable.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\scrollt-down.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\scrollt-over.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\scrollt.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\searchbox-pnlbtm.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\star_x_grey.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\star_x_orange.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\TRUSTe_about.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\view-detailed-on.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\view-detailed-over.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\view-thumb-on.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\view-thumb-over.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\widgets-square-16px.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\widgets-square-24px.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\images\widgets.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\initHTML.html c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\popupGames.html c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\popupHTML.html c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\popupRSS.html c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\popupWidgets.html c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\panels\scroll.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\pop.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\css\manager.css c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\css\slider.css c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\images\bg-pnl.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\images\btn-close-grey.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\images\btn-close-greyover.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\images\collapsed_button.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\images\expanded_button.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\images\ico-playstation-down.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\images\ico-playstation-over.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\images\ico-playstation.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\images\ico-radio.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\images\music-note.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\images\radio-btn-pause-on.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\images\radio-btn-pause.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\images\radio-btn-play-on.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\images\radio-btn-play.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\images\radio-eq-bg.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\images\radio-eq-buffer.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\images\radio-eq-busy.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\images\radio-eq-off.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\images\radio-eq-on.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\images\radio-eq-warning.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\images\radio-options-design-on.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\images\radio-options-design.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\images\radio-options-on.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\images\radio-options.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\images\radio-volume-0.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\images\radio-volume-1.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\images\radio-volume-2.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\images\radio-volume-3.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\images\radio-volume-mute.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\images\scrollbar-handle.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\images\scrollbar-track.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\images\slider.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\images\slideron.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\images\track.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\managerpanel.html c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radio\volumeslider.html c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radiobeta-buffering.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radiobeta-connecting.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radiobeta-playing.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radiobeta-stopped.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\radiobeta.ico c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\reload.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\remove.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\rename.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\resize-box.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\rss.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\rsschannelback.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\RSSLogo.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\rsstabdivider.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\scroll-left.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\scroll-right.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\search-go.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\search.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\text-ellipsis.xml c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\throbber.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\toolbarsplitter.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\transparent_1px.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\uwa\border_02.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\uwa\border_03.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\uwa\border_04.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\uwa\border_06.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\uwa\border_07.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\uwa\border_08.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\uwa\border_09.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\uwa\border_10.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\uwa\border_11.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\uwa\border_12.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\uwa\border_13.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\uwa\border_14.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\uwa\border_15.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\uwa\border_16.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\uwa\border_18.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\uwa\border_19.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\uwa\border_20.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\uwa\border_21.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\uwa\btn-close-grey.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\uwa\btn-close-greyover.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\uwa\close-hot.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\uwa\close-normal.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\uwa\loadingMid.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\uwa\proxy.html c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\uwa\template.html c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\uwa\template.xml c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\uwa\templateFF.html c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\uwa\throbber.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\weatherbutton\icons\cond999.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\weatherbutton\icons\icons.xml c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\weatherbutton\icons\na-s.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\weatherbutton\icons\na-t.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\weatherbutton\icons\na.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\add.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\arrowr-bluew5.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue-whitebg.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\bg-pnl520x350blue.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\box-check.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\box-uncheck.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-close-grey.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-close-greyover.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-delete.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm-over.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btn-search-pnlbtm.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next-off.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-next.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous-off.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\btnarrow-previous.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\ico-check.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid-s.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\ico-hotandhumid.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\options-weather.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\over-blue.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\over-orange.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\powered-by-weatherbug2.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\radio-checked.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\radio-unchecked.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\searchbox-pnlbtm.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\images\weather-contour.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\popupWeather.css c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\weatherbutton\panels\popupWeather.html c:\progra~2\WI371A~1\ToolBar\chrome\skin\lib\yahoo.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\lichen.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\logo-about.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\logo-over.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\logo-separator.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\logo.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\mail.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\maps.bmp c:\progra~2\WI371A~1\ToolBar\chrome\skin\menuseparatorback.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\modify-save.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\modify.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\modifyhot.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\music.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\news.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\options\options-main.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\options\options-search.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\options\options-weather.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\options\options-weather.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\options\options-widgets.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\orange.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\pixsy.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\protect-id.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\radiobeta-buffering.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\radiobeta-connecting.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\radiobeta-playing.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\radiobeta-stopped.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\radiobeta.ico c:\progra~2\WI371A~1\ToolBar\chrome\skin\relatedlinks.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\rss-collapse.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\rss-delete.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\rss-expand.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\rss-feed.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\rss-folder-remove.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\rss-folder-rename.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\rss-folder.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\rss-found.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\rss-reload.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\rss-subscribe.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\rss.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\rssback.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\rsstopback.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\search-over.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\search.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\search_button_over_png c:\progra~2\WI371A~1\ToolBar\chrome\skin\search_button_png c:\progra~2\WI371A~1\ToolBar\chrome\skin\searchbar\searchbar-background-left.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\searchbar\searchbar-background-middle.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\searchbar\searchbar-background-right.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\settings.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\shopping.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\siteinfo.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\skin-bluelite.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\skin-bluesky.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\skin-grey.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\skin-lichen.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\skin-orange.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\skin-yellow.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\skin.xml c:\progra~2\WI371A~1\ToolBar\chrome\skin\technorati.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\throbber.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\toolbarsplitter.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\translate.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\video.bmp c:\progra~2\WI371A~1\ToolBar\chrome\skin\vmn.css c:\progra~2\WI371A~1\ToolBar\chrome\skin\vmn.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\weather.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\web.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\widgets-square-16px.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\wikipedia.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\yahoosearch.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\yellow.gif c:\progra~2\WI371A~1\ToolBar\chrome\skin\youtube.png c:\progra~2\WI371A~1\ToolBar\chrome\skin\zoom.png c:\progra~2\WI371A~1\ToolBar\components\windowmediator.js c:\progra~2\WI371A~1\ToolBar\dtUser.exe c:\progra~2\WI371A~1\ToolBar\manifest.xml c:\progra~2\WI371A~1\ToolBar\searchquband.dll c:\progra~2\WI371A~1\ToolBar\uninstall.exe c:\progra~2\WI371A~1\uninstall.exe c:\program files (x86)\BabylonToolbar c:\program files (x86)\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbar.crx c:\program files (x86)\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarApp.dll c:\program files (x86)\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarEng.dll c:\program files (x86)\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe c:\program files (x86)\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll c:\program files (x86)\BabylonToolbar\BabylonToolbar\1.4.19.19\bh\BabylonToolbar.dll c:\program files (x86)\BabylonToolbar\BabylonToolbar\1.4.19.19\uninstall.exe c:\program files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarApp.dll c:\program files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarEng.dll c:\program files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarsrv.exe c:\program files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\uninstall.exe c:\program files (x86)\BabylonToolbar\sqlite3.dll c:\program files (x86)\ConduitEngine c:\program files (x86)\ConduitEngine\appContextMenu.xml c:\program files (x86)\ConduitEngine\ConduitEngine.dll c:\program files (x86)\ConduitEngine\ConduitEngineHelper.exe c:\program files (x86)\ConduitEngine\ConduitEngineUninstall.exe c:\program files (x86)\ConduitEngine\engineContextMenu.xml c:\program files (x86)\ConduitEngine\EngineSettings.json c:\program files (x86)\ConduitEngine\INSTALL.LOG c:\program files (x86)\ConduitEngine\toolbar.cfg c:\program files (x86)\PHPNukeDU c:\program files (x86)\PHPNukeDU\GottenAppsContextMenu.xml c:\program files (x86)\PHPNukeDU\OtherAppsContextMenu.xml c:\program files (x86)\PHPNukeDU\PHPNukeDUToolbarHelper.exe c:\program files (x86)\PHPNukeDU\SharedAppsContextMenu.xml c:\program files (x86)\PHPNukeDU\tbPHPN.dll c:\program files (x86)\PHPNukeDU\toolbar.cfg c:\program files (x86)\PHPNukeDU\ToolbarContextMenu.xml c:\program files (x86)\PHPNukeDU\uninstall.exe c:\programdata\Ask . . (((((((((((((((((((( Bestanden Gemaakt van 2012-09-25 to 2012-10-25 )))))))))))))))))))))))))))))) . . 2012-10-25 06:17 . 2012-10-25 06:17 -------- d-----w- c:\users\Evert\AppData\Local\temp 2012-10-25 06:17 . 2012-10-25 06:17 -------- d-----w- c:\users\Default\AppData\Local\temp 2012-10-25 06:17 . 2012-10-25 06:17 -------- d-----w- c:\users\acer m3641\AppData\Local\temp 2012-10-24 14:48 . 2012-10-25 05:45 -------- d-----w- C:\32788R22FWJFW 2012-10-24 07:10 . 2012-10-24 07:10 -------- d-----w- c:\users\acer m3641\AppData\Roaming\Malwarebytes 2012-10-24 07:10 . 2012-10-24 07:10 -------- d-----w- c:\programdata\Malwarebytes 2012-10-24 07:10 . 2012-10-24 07:10 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware 2012-10-24 07:10 . 2012-09-29 17:54 25928 ----a-w- c:\windows\system32\drivers\mbam.sys 2012-10-23 16:33 . 2012-10-23 16:33 388096 ----a-r- c:\users\acer m3641\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2012-10-23 16:33 . 2012-10-23 16:33 -------- d-----w- c:\program files (x86)\Trend Micro 2012-10-23 14:29 . 2012-10-17 00:31 9291768 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{28EE2000-10E4-4061-B972-0BBCBEB6B0AD}\mpengine.dll 2012-10-19 15:38 . 2012-09-24 21:16 95208 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll 2012-10-11 05:35 . 2012-10-20 07:25 12872 ----a-w- c:\windows\system32\bootdelete.exe 2012-10-10 05:10 . 2012-09-13 13:45 2048 ----a-w- c:\windows\system32\tzres.dll 2012-10-10 05:10 . 2012-09-13 13:28 2048 ----a-w- c:\windows\SysWow64\tzres.dll 2012-10-10 05:10 . 2012-08-24 16:07 218624 ----a-w- c:\windows\system32\wintrust.dll 2012-10-10 05:10 . 2012-08-24 15:53 172544 ----a-w- c:\windows\SysWow64\wintrust.dll 2012-10-10 05:10 . 2012-06-02 00:20 1268736 ----a-w- c:\windows\system32\crypt32.dll 2012-10-10 05:10 . 2012-06-02 00:20 174592 ----a-w- c:\windows\system32\cryptsvc.dll 2012-10-10 05:10 . 2012-06-02 00:20 132096 ----a-w- c:\windows\system32\cryptnet.dll 2012-10-10 05:10 . 2012-06-02 00:02 985088 ----a-w- c:\windows\SysWow64\crypt32.dll 2012-10-10 05:10 . 2012-06-02 00:02 133120 ----a-w- c:\windows\SysWow64\cryptsvc.dll 2012-10-10 05:10 . 2012-06-02 00:02 98304 ----a-w- c:\windows\SysWow64\cryptnet.dll 2012-10-10 05:10 . 2012-08-29 11:40 4699520 ----a-w- c:\windows\system32\ntoskrnl.exe 2012-10-09 08:16 . 2012-10-09 08:16 -------- d-----w- c:\program files (x86)\Market Samurai 2012-10-04 08:36 . 2012-10-24 06:54 -------- d-----w- c:\programdata\webex . . . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-10-11 05:12 . 2006-11-02 12:35 65309168 ----a-w- c:\windows\system32\mrt.exe 2012-10-09 09:23 . 2012-04-11 08:48 696760 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2012-10-09 09:23 . 2011-10-22 05:46 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2012-09-10 18:35 . 2012-09-10 18:36 821736 ----a-w- c:\windows\SysWow64\npDeployJava1.dll 2012-09-10 18:35 . 2010-09-13 17:32 746984 ----a-w- c:\windows\SysWow64\deployJava1.dll 2012-08-24 11:15 . 2012-09-23 06:59 17810944 ----a-w- c:\windows\system32\mshtml.dll 2012-08-24 10:39 . 2012-09-23 06:59 10925568 ----a-w- c:\windows\system32\ieframe.dll 2012-08-24 10:31 . 2012-09-23 07:00 2312704 ----a-w- c:\windows\system32\jscript9.dll 2012-08-24 10:22 . 2012-09-23 07:00 1346048 ----a-w- c:\windows\system32\urlmon.dll 2012-08-24 10:21 . 2012-09-23 07:00 1392128 ----a-w- c:\windows\system32\wininet.dll 2012-08-24 10:20 . 2012-09-23 07:00 1494528 ----a-w- c:\windows\system32\inetcpl.cpl 2012-08-24 10:18 . 2012-09-23 07:00 237056 ----a-w- c:\windows\system32\url.dll 2012-08-24 10:17 . 2012-09-23 07:00 85504 ----a-w- c:\windows\system32\jsproxy.dll 2012-08-24 10:14 . 2012-09-23 07:00 173056 ----a-w- c:\windows\system32\ieUnatt.exe 2012-08-24 10:14 . 2012-09-23 07:00 816640 ----a-w- c:\windows\system32\jscript.dll 2012-08-24 10:13 . 2012-09-23 07:00 599040 ----a-w- c:\windows\system32\vbscript.dll 2012-08-24 10:12 . 2012-09-23 07:00 2144768 ----a-w- c:\windows\system32\iertutil.dll 2012-08-24 10:11 . 2012-09-23 07:00 729088 ----a-w- c:\windows\system32\msfeeds.dll 2012-08-24 10:10 . 2012-09-23 07:00 96768 ----a-w- c:\windows\system32\mshtmled.dll 2012-08-24 10:09 . 2012-09-23 07:00 2382848 ----a-w- c:\windows\system32\mshtml.tlb 2012-08-24 10:04 . 2012-09-23 07:00 248320 ----a-w- c:\windows\system32\ieui.dll 2012-08-24 06:59 . 2012-09-23 07:00 1800704 ----a-w- c:\windows\SysWow64\jscript9.dll 2012-08-24 06:51 . 2012-09-23 07:00 1129472 ----a-w- c:\windows\SysWow64\wininet.dll 2012-08-24 06:51 . 2012-09-23 07:00 1427968 ----a-w- c:\windows\SysWow64\inetcpl.cpl 2012-08-24 06:47 . 2012-09-23 07:00 142848 ----a-w- c:\windows\SysWow64\ieUnatt.exe 2012-08-24 06:47 . 2012-09-23 07:00 420864 ----a-w- c:\windows\SysWow64\vbscript.dll 2012-08-24 06:43 . 2012-09-23 07:00 2382848 ----a-w- c:\windows\SysWow64\mshtml.tlb 2012-08-21 09:13 . 2011-11-02 08:24 359464 ----a-w- c:\windows\system32\drivers\aswSP.sys 2012-08-21 09:13 . 2011-11-02 08:24 969200 ----a-w- c:\windows\system32\drivers\aswSnx.sys 2012-08-21 09:13 . 2011-11-02 08:24 59728 ----a-w- c:\windows\system32\drivers\aswTdi.sys 2012-08-21 09:13 . 2011-11-02 08:24 71600 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys 2012-08-21 09:13 . 2011-11-02 08:24 44272 ----a-w- c:\windows\system32\drivers\aswRdr.sys 2012-08-21 09:13 . 2011-11-02 08:24 25232 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys 2012-08-21 09:12 . 2011-11-02 08:24 41224 ----a-w- c:\windows\avastSS.scr 2012-08-21 09:12 . 2011-11-02 08:24 227648 ----a-w- c:\windows\SysWow64\aswBoot.exe 2012-08-21 09:12 . 2011-02-10 10:48 285328 ----a-w- c:\windows\system32\aswBoot.exe . . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 94208 ----a-w- c:\users\acer m3641\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 94208 ----a-w- c:\users\acer m3641\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 94208 ----a-w- c:\users\acer m3641\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2008-03-04 21:38 121392 ----a-w- c:\acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 138240] "SoMud"="c:\program files (x86)\SoMud\somud.exe" [2011-06-28 3888128] "swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-11-12 68856] "Greenshot"="c:\program files (x86)\Greenshot\Greenshot.exe" [2010-07-12 548864] "Jing"="c:\program files (x86)\TechSmith\Jing\Jing.exe" [2012-02-01 2918224] "Grammar.net’s Grammar Checker"="c:\program files (x86)\Grammar.net’s Grammar Checker\GrammarChecker.exe" [2012-06-18 73216] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "PCMMediaSharing"="c:\program files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe" [2008-01-25 204908] "SiteAdvisor"="c:\program files (x86)\SiteAdvisor\6172\SiteAdv.exe" [2007-08-24 36640] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-06-25 98304] "WarReg_PopUp"="c:\acer\WR_PopUp\WarReg_PopUp.exe" [2006-11-05 57344] "EEventManager"="c:\program files (x86)\Epson Software\Event Manager\EEventManager.exe" [2009-12-03 976320] "googletalk"="c:\program files (x86)\Google\Google Talk\googletalk.exe" [2007-01-01 3739648] "eSnips_Downloader"="c:\program files (x86)\Logia\eSnipsDownloader\eSnips_Downloader.exe" [2010-05-24 1234432] "avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-08-21 4282728] "Anti-phishing Domain Advisor"="c:\programdata\Anti-phishing Domain Advisor\visicom_antiphishing.exe" [2011-12-21 206504] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008] "SweetIM"="c:\program files (x86)\SweetIM\Messenger\SweetIM.exe" [2011-08-01 114992] "azontop100analyzer"="c:\program files (x86)\AzonTop100Analyzer\azontop100analyzer.exe" [2012-06-09 44474097] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848] . c:\users\Evert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ OpenOffice.org 3.4.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2012-4-19 1199104] . c:\users\acer m3641\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Dropbox.lnk - c:\users\acer m3641\AppData\Roaming\Dropbox\bin\Dropbox.exe [2012-5-24 27112840] Feed Notifier.lnk - c:\program files (x86)\Feed Notifier\notifier.exe [2012-7-24 58368] OneNote 2007 Schermopname en Snel starten.lnk - c:\program files (x86)\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ ASETRES.EXE [2008-4-14 20480] Empowering Technology Launcher.lnk - c:\acer\Empowering Technology\eAPLauncher.exe [2008-9-23 535336] Sitecom Wireless Utility.lnk - c:\program files (x86)\Sitecom\Common\RaUI.exe [2010-6-3 1773568] WinZip Quick Pick.lnk - c:\program files (x86)\WinZip\WZQKPICK.EXE [2010-11-30 608584] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro36] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro36.sys] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro36Crusader] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro36CrusaderBoot] @="" . R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-09 250808] S2 ABBYY.Licensing.FineReader.Sprint.9.0;ABBYY FineReader 9.0 Sprint Licensing Service;c:\program files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [2009-05-14 759048] S2 Acer HomeMedia Connect Service;Acer HomeMedia Connect Service;c:\program files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe [2008-01-25 269448] S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960] . . HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs Themes . Inhoud van de 'Gedeelde Taken' map . 2012-10-25 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-11 09:23] . 2012-10-25 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-06-05 07:29] . 2012-10-25 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-06-05 07:29] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}] 2012-03-15 21:26 287048 ----a-w- c:\program files (x86)\Hotspot Shield\HssIE\HssIE_64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast] @="{472083B0-C522-11CF-8763-00608CC02F24}" [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}] 2012-08-21 09:11 133400 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 97792 ----a-w- c:\users\acer m3641\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 97792 ----a-w- c:\users\acer m3641\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 97792 ----a-w- c:\users\acer m3641\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2008-03-04 21:39 51248 ----a-w- c:\acer\Empowering Technology\eDataSecurity\x64\PSDProtect.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvSvc"="c:\windows\system32\nvsvc64.dll" [2007-11-27 88064] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-11-27 10721312] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-11-27 74752] "RtHDVCpl"="RAVCpl64.exe" [2008-03-25 6150656] "Skytel"="Skytel.exe" [2007-11-20 1826816] "eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\x64\eDSloader.exe" [2008-03-04 560688] "NVRaidService"="c:\windows\system32\nvraidservice.exe" [2008-06-06 333344] . ------- Bijkomende Scan ------- . uLocal Page = c:\windows\system32\blank.htm uDefault_Search_URL = hxxp://www.google.com/ie mDefault_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0413&s=1&o=vp64&d=1109&m=aspire_m3641 mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = *.local uSearchAssistant = hxxp://www.google.com/ie uSearchURL,(Default) = hxxp://search.yahoo.com/search?fr=mcafee&p=%s IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: Download Web &Images with SoMud - c:\program files (x86)\SoMud\scripts\ie\images-url.html IE: Download with SoMud - c:\program files (x86)\SoMud\scripts\ie\link-url.html IE: E&xporteren naar Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000 TCP: DhcpNameServer = 192.168.1.1 192.168.1.1 FF - ProfilePath - c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\ FF - prefs.js: browser.search.defaulturl - FF - prefs.js: browser.startup.homepage - hxxps://www.google.com/ FF - prefs.js: network.proxy.gopher - FF - prefs.js: network.proxy.gopher_port - 0 FF - prefs.js: network.proxy.type - 0 FF - ExtSQL: 2012-10-24 09:58; {4ED1F68A-5463-4931-9384-8FFF5ED91D92}; c:\program files (x86)\McAfee\SiteAdvisor FF - ExtSQL: !HIDDEN! 2010-06-06 09:50; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension FF - ExtSQL: !HIDDEN! 2012-03-10 10:49; 5affxtbr@MyWebFace_5a.com; c:\program files (x86)\MyWebFace_5a\bar\1.bin FF - user.js: network.protocol-handler.warn-external.dnupdate - false);user_pref(extensions.searchya_i.hmpg, true FF - user.js: extensions.searchya_i.hmpgUrl - hxxp://searchya.com/?chnl=fap&s=0&cr=879914219&cd=2XzutAtN2Y1L1QzutDtDyCtD0BtAyE0AtB0FtAyEtCyD0C0A0FtN0D0TzutBtDtCtBtDtBtDzz FF - user.js: extensions.searchya_i.dfltSrch - true FF - user.js: extensions.searchya_i.srchPrvdr - SearchYa! FF - user.js: extensions.searchya_i.dnsErr - true FF - user.js: extensions.searchya_i.newTab - true FF - user.js: extensions.searchya_i.newTabUrl - hxxp://searchya.com/?chnl=fap&s=2&cr=879914219&cd=2XzutAtN2Y1L1QzutDtDyCtD0BtAyE0AtB0FtAyEtCyD0C0A0FtN0D0TzutBtDtCtBtDtBtDzz FF - user.js: extensions.searchya_i.tlbrSrchUrl - hxxp://searchya.com/?chnl=fap&s=3&cr=879914219&cd=2XzutAtN2Y1L1QzutDtDyCtD0BtAyE0AtB0FtAyEtCyD0C0A0FtN0D0TzutBtDtCtBtDtBtDzz&q= FF - user.js: extensions.searchya_i.id - 84415caf0000000000000060b34a2f34 FF - user.js: extensions.searchya_i.instlDay - 15378 FF - user.js: extensions.searchya_i.vrsn - 1.5.11.13 FF - user.js: extensions.searchya_i.vrsni - 1.5.11.13 FF - user.js: extensions.searchya_i.vrsnTs - 1.5.11.1316:16 FF - user.js: extensions.searchya_i.prtnrId - ironsrc FF - user.js: extensions.searchya_i.prdct - searchya FF - user.js: extensions.searchya_i.aflt - foxtab FF - user.js: extensions.searchya_i.smplGrp - none FF - user.js: extensions.searchya_i.tlbrId - base FF - user.js: extensions.searchya_i.instlRef - fap FF - user.js: extensions.searchya_i.dfltLng - FF - user.js: extensions.searchya_i.excTlbr - false FF - user.js: extensions.BabylonToolbar_i.id - 84415caf0000000000000060b34a2f34 FF - user.js: extensions.BabylonToolbar_i.hardId - 84415caf0000000000000060b34a2f34 FF - user.js: extensions.BabylonToolbar_i.instlDay - 15400 FF - user.js: extensions.BabylonToolbar_i.vrsn - 1.5.3.17 FF - user.js: extensions.BabylonToolbar_i.vrsni - 1.5.3.17 FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.5.3.1715:41 FF - user.js: extensions.BabylonToolbar_i.prtnrId - babylon FF - user.js: extensions.BabylonToolbar_i.prdct - BabylonToolbar FF - user.js: extensions.BabylonToolbar_i.aflt - babsst FF - user.js: extensions.BabylonToolbar_i.smplGrp - none FF - user.js: extensions.BabylonToolbar_i.tlbrId - base FF - user.js: extensions.BabylonToolbar_i.newTab - false FF - user.js: extensions.BabylonToolbar_i.babTrack - affID=101241 FF - user.js: extensions.BabylonToolbar_i.babExt - FF - user.js: extensions.BabylonToolbar_i.srcExt - ss FF - user.js: extensions.BabylonToolbar_i.instlRef - sst . - - - - ORPHANS VERWIJDERD - - - - . Toolbar-10 - (no file) Wow6432Node-HKLM-Run-<NO NAME> - (no file) WebBrowser-{65CA59EE-9920-4D7F-8C41-BFA12403261A} - (no file) WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file) AddRemove-Allscoop RSS Submit Pro 1.0 - c:\windows\system32\ss2uinst.exe AddRemove-BabylonToolbar - c:\program files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\uninstall.exe AddRemove-conduitEngine - c:\progra~2\CONDUI~1\ConduitEngineUninstall.exe AddRemove-InstallBrain Updater Service - c:\programdata\InstallBrainService\ibsvc.exe AddRemove-PHPNukeDU Toolbar - c:\progra~2\PHPNUK~1\UNINST~1.EXE AddRemove-Savings Sidekick - c:\program files (x86)\Savings Sidekick\Uninstall.exe AddRemove-Searchqu 406 MediaBar - c:\program files (x86)\Windows iLivid Toolbar\uninstall.exe . . . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_287_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_287_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}] @Denied: (A 2) (Everyone) . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0] @="Shockwave Flash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}] @Denied: (A 2) (Everyone) @="" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0] @="FlashBroker" . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes] "SymbolicLinkValue"=hex(6):5c,00,52,00,45,00,47,00,49,00,53,00,54,00,52,00,59, 00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\ . Voltooingstijd: 2012-10-25 08:25:38 ComboFix-quarantined-files.txt 2012-10-25 06:25 ComboFix2.txt 2012-10-24 15:34 . Pre-Run: 201.514.721.280 bytes beschikbaar Post-Run: 201.413.840.896 bytes beschikbaar . - - End Of File - - 32C4A3B65C79EF8327CDC2C26E9D506D
  20. InternetMarketer
    ComboFix 12-10-24.01 - acer m3641 24-10-2012 16:54:42.1.4 - x64 Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.31.1043.18.4094.2497 [GMT 2:00] Gestart vanuit: c:\users\acer m3641\Downloads\ComboFix.exe AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C} SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\progra~2\SPINWR~1\SPINwr~1.exe c:\program files (x86)\Mozilla Firefox\searchplugins\SearchquWebSearch.xml c:\program files (x86)\Savings Sidekick c:\program files (x86)\Savings Sidekick\Savings Sidekick-bg.exe c:\program files (x86)\Savings Sidekick\Savings Sidekick.exe c:\program files (x86)\Savings Sidekick\Savings Sidekick.ico c:\program files (x86)\Savings Sidekick\Savings Sidekick.ini c:\program files (x86)\Savings Sidekick\Savings SidekickInstaller.log c:\program files (x86)\Savings Sidekick\Uninstall.exe c:\program files (x86)\SoMud Toolbar\tbHElper.dll c:\programdata\100 c:\users\acer m3641\AppData\Local\Savings Sidekick c:\users\acer m3641\AppData\Local\Savings Sidekick\Chrome\Savings Sidekick.crx c:\users\acer m3641\AppData\Roaming\.# c:\users\acer m3641\AppData\Roaming\.#\MBX@BF8@3A2990.### c:\users\acer m3641\AppData\Roaming\.#\MBX@BF8@3A29C0.### c:\users\acer m3641\AppData\Roaming\.#\MBX@BF8@3A29F0.### c:\users\acer m3641\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2 .lnk c:\users\acer m3641\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3 .lnk c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\chrome.manifest c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\imgs\arwDwn.gif c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\imgs\flgs\ae.png c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\imgs\flgs\bg.png c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\imgs\flgs\ch.png c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\imgs\flgs\cn.png c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\imgs\flgs\cz.png c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\imgs\flgs\de.png c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\imgs\flgs\eg.png c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\imgs\flgs\en.png c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\imgs\flgs\es.png c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\imgs\flgs\fr.png c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\imgs\flgs\gr.png c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\imgs\flgs\he.png c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\imgs\flgs\il.png c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\imgs\flgs\it.png c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\imgs\flgs\ja.png c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\imgs\flgs\jp.png c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\imgs\flgs\nl.png c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\imgs\flgs\no.png c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\imgs\flgs\pl.png c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\imgs\flgs\pt.png c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\imgs\flgs\ro.png c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\imgs\flgs\ru.png c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\imgs\flgs\sa.png c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\imgs\flgs\se.png c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\imgs\flgs\sv.png c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\imgs\flgs\tr.png c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\imgs\flgs\ua.png c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\imgs\flgs\us.png c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\imgs\help_16.gif c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\imgs\home.gif c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\imgs\icon_seperator.png c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\imgs\logo.PNG c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\imgs\privecy_16_hot.gif c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\imgs\specialoffer.gif c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\imgs\tellafriend.gif c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\mtstart.js c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\searchya.css c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\searchya.xul c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\content\tmplt.js c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\extensions\ffxtlbr@searchya.com\install.rdf c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\searchplugins\SearchquWebSearch.xml c:\users\acer m3641\AppData\Roaming\ubot c:\users\acer m3641\g2mdlhlpx.exe D:\install.exe . . (((((((((((((((((((( Bestanden Gemaakt van 2012-09-24 to 2012-10-24 )))))))))))))))))))))))))))))) . . 2012-10-24 15:23 . 2012-10-24 15:23 -------- d-----w- c:\users\Evert\AppData\Local\temp 2012-10-24 15:23 . 2012-10-24 15:23 -------- d-----w- c:\users\Default\AppData\Local\temp 2012-10-24 15:23 . 2012-10-24 15:23 -------- d-----w- c:\users\acer m3641\AppData\Local\temp 2012-10-24 14:48 . 2012-10-24 14:49 -------- d-----w- C:\32788R22FWJFW 2012-10-24 08:22 . 2012-10-24 08:22 69000 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{28EE2000-10E4-4061-B972-0BBCBEB6B0AD}\offreg.dll 2012-10-24 07:10 . 2012-10-24 07:10 -------- d-----w- c:\users\acer m3641\AppData\Roaming\Malwarebytes 2012-10-24 07:10 . 2012-10-24 07:10 -------- d-----w- c:\programdata\Malwarebytes 2012-10-24 07:10 . 2012-10-24 07:10 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware 2012-10-24 07:10 . 2012-09-29 17:54 25928 ----a-w- c:\windows\system32\drivers\mbam.sys 2012-10-23 16:33 . 2012-10-23 16:33 388096 ----a-r- c:\users\acer m3641\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2012-10-23 16:33 . 2012-10-23 16:33 -------- d-----w- c:\program files (x86)\Trend Micro 2012-10-23 14:29 . 2012-10-17 00:31 9291768 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{28EE2000-10E4-4061-B972-0BBCBEB6B0AD}\mpengine.dll 2012-10-19 15:40 . 2012-10-19 15:40 -------- d-----w- c:\programdata\Ask 2012-10-19 15:38 . 2012-09-24 21:16 95208 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll 2012-10-11 05:35 . 2012-10-20 07:25 12872 ----a-w- c:\windows\system32\bootdelete.exe 2012-10-10 05:10 . 2012-09-13 13:45 2048 ----a-w- c:\windows\system32\tzres.dll 2012-10-10 05:10 . 2012-09-13 13:28 2048 ----a-w- c:\windows\SysWow64\tzres.dll 2012-10-10 05:10 . 2012-08-24 16:07 218624 ----a-w- c:\windows\system32\wintrust.dll 2012-10-10 05:10 . 2012-08-24 15:53 172544 ----a-w- c:\windows\SysWow64\wintrust.dll 2012-10-10 05:10 . 2012-06-02 00:20 1268736 ----a-w- c:\windows\system32\crypt32.dll 2012-10-10 05:10 . 2012-06-02 00:20 174592 ----a-w- c:\windows\system32\cryptsvc.dll 2012-10-10 05:10 . 2012-06-02 00:20 132096 ----a-w- c:\windows\system32\cryptnet.dll 2012-10-10 05:10 . 2012-06-02 00:02 985088 ----a-w- c:\windows\SysWow64\crypt32.dll 2012-10-10 05:10 . 2012-06-02 00:02 133120 ----a-w- c:\windows\SysWow64\cryptsvc.dll 2012-10-10 05:10 . 2012-06-02 00:02 98304 ----a-w- c:\windows\SysWow64\cryptnet.dll 2012-10-10 05:10 . 2012-08-29 11:40 4699520 ----a-w- c:\windows\system32\ntoskrnl.exe 2012-10-09 08:16 . 2012-10-09 08:16 -------- d-----w- c:\program files (x86)\Market Samurai 2012-10-04 08:36 . 2012-10-24 06:54 -------- d-----w- c:\programdata\webex . . . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-10-11 05:12 . 2006-11-02 12:35 65309168 ----a-w- c:\windows\system32\mrt.exe 2012-10-09 09:23 . 2012-04-11 08:48 696760 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2012-10-09 09:23 . 2011-10-22 05:46 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2012-09-10 18:35 . 2012-09-10 18:36 821736 ----a-w- c:\windows\SysWow64\npDeployJava1.dll 2012-09-10 18:35 . 2010-09-13 17:32 746984 ----a-w- c:\windows\SysWow64\deployJava1.dll 2012-08-24 11:15 . 2012-09-23 06:59 17810944 ----a-w- c:\windows\system32\mshtml.dll 2012-08-24 10:39 . 2012-09-23 06:59 10925568 ----a-w- c:\windows\system32\ieframe.dll 2012-08-24 10:31 . 2012-09-23 07:00 2312704 ----a-w- c:\windows\system32\jscript9.dll 2012-08-24 10:22 . 2012-09-23 07:00 1346048 ----a-w- c:\windows\system32\urlmon.dll 2012-08-24 10:21 . 2012-09-23 07:00 1392128 ----a-w- c:\windows\system32\wininet.dll 2012-08-24 10:20 . 2012-09-23 07:00 1494528 ----a-w- c:\windows\system32\inetcpl.cpl 2012-08-24 10:18 . 2012-09-23 07:00 237056 ----a-w- c:\windows\system32\url.dll 2012-08-24 10:17 . 2012-09-23 07:00 85504 ----a-w- c:\windows\system32\jsproxy.dll 2012-08-24 10:14 . 2012-09-23 07:00 173056 ----a-w- c:\windows\system32\ieUnatt.exe 2012-08-24 10:14 . 2012-09-23 07:00 816640 ----a-w- c:\windows\system32\jscript.dll 2012-08-24 10:13 . 2012-09-23 07:00 599040 ----a-w- c:\windows\system32\vbscript.dll 2012-08-24 10:12 . 2012-09-23 07:00 2144768 ----a-w- c:\windows\system32\iertutil.dll 2012-08-24 10:11 . 2012-09-23 07:00 729088 ----a-w- c:\windows\system32\msfeeds.dll 2012-08-24 10:10 . 2012-09-23 07:00 96768 ----a-w- c:\windows\system32\mshtmled.dll 2012-08-24 10:09 . 2012-09-23 07:00 2382848 ----a-w- c:\windows\system32\mshtml.tlb 2012-08-24 10:04 . 2012-09-23 07:00 248320 ----a-w- c:\windows\system32\ieui.dll 2012-08-24 06:59 . 2012-09-23 07:00 1800704 ----a-w- c:\windows\SysWow64\jscript9.dll 2012-08-24 06:51 . 2012-09-23 07:00 1129472 ----a-w- c:\windows\SysWow64\wininet.dll 2012-08-24 06:51 . 2012-09-23 07:00 1427968 ----a-w- c:\windows\SysWow64\inetcpl.cpl 2012-08-24 06:47 . 2012-09-23 07:00 142848 ----a-w- c:\windows\SysWow64\ieUnatt.exe 2012-08-24 06:47 . 2012-09-23 07:00 420864 ----a-w- c:\windows\SysWow64\vbscript.dll 2012-08-24 06:43 . 2012-09-23 07:00 2382848 ----a-w- c:\windows\SysWow64\mshtml.tlb 2012-08-21 09:13 . 2011-11-02 08:24 359464 ----a-w- c:\windows\system32\drivers\aswSP.sys 2012-08-21 09:13 . 2011-11-02 08:24 969200 ----a-w- c:\windows\system32\drivers\aswSnx.sys 2012-08-21 09:13 . 2011-11-02 08:24 59728 ----a-w- c:\windows\system32\drivers\aswTdi.sys 2012-08-21 09:13 . 2011-11-02 08:24 71600 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys 2012-08-21 09:13 . 2011-11-02 08:24 44272 ----a-w- c:\windows\system32\drivers\aswRdr.sys 2012-08-21 09:13 . 2011-11-02 08:24 25232 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys 2012-08-21 09:12 . 2011-11-02 08:24 41224 ----a-w- c:\windows\avastSS.scr 2012-08-21 09:12 . 2011-11-02 08:24 227648 ----a-w- c:\windows\SysWow64\aswBoot.exe 2012-08-21 09:12 . 2011-02-10 10:48 285328 ----a-w- c:\windows\system32\aswBoot.exe . . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 94208 ----a-w- c:\users\acer m3641\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 94208 ----a-w- c:\users\acer m3641\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 94208 ----a-w- c:\users\acer m3641\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2008-03-04 21:38 121392 ----a-w- c:\acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 138240] "SoMud"="c:\program files (x86)\SoMud\somud.exe" [2011-06-28 3888128] "swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-11-12 68856] "Greenshot"="c:\program files (x86)\Greenshot\Greenshot.exe" [2010-07-12 548864] "Jing"="c:\program files (x86)\TechSmith\Jing\Jing.exe" [2012-02-01 2918224] "Grammar.net’s Grammar Checker"="c:\program files (x86)\Grammar.net’s Grammar Checker\GrammarChecker.exe" [2012-06-18 73216] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "PCMMediaSharing"="c:\program files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe" [2008-01-25 204908] "SiteAdvisor"="c:\program files (x86)\SiteAdvisor\6172\SiteAdv.exe" [2007-08-24 36640] "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-06-25 98304] "WarReg_PopUp"="c:\acer\WR_PopUp\WarReg_PopUp.exe" [2006-11-05 57344] "EEventManager"="c:\program files (x86)\Epson Software\Event Manager\EEventManager.exe" [2009-12-03 976320] "googletalk"="c:\program files (x86)\Google\Google Talk\googletalk.exe" [2007-01-01 3739648] "eSnips_Downloader"="c:\program files (x86)\Logia\eSnipsDownloader\eSnips_Downloader.exe" [2010-05-24 1234432] "avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-08-21 4282728] "Anti-phishing Domain Advisor"="c:\programdata\Anti-phishing Domain Advisor\visicom_antiphishing.exe" [2011-12-21 206504] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-27 919008] "SweetIM"="c:\program files (x86)\SweetIM\Messenger\SweetIM.exe" [2011-08-01 114992] "azontop100analyzer"="c:\program files (x86)\AzonTop100Analyzer\azontop100analyzer.exe" [2012-06-09 44474097] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848] . c:\users\Evert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ OpenOffice.org 3.4.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2012-4-19 1199104] . c:\users\acer m3641\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Dropbox.lnk - c:\users\acer m3641\AppData\Roaming\Dropbox\bin\Dropbox.exe [2012-5-24 27112840] Feed Notifier.lnk - c:\program files (x86)\Feed Notifier\notifier.exe [2012-7-24 58368] OneNote 2007 Schermopname en Snel starten.lnk - c:\program files (x86)\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ ASETRES.EXE [2008-4-14 20480] Empowering Technology Launcher.lnk - c:\acer\Empowering Technology\eAPLauncher.exe [2008-9-23 535336] Sitecom Wireless Utility.lnk - c:\program files (x86)\Sitecom\Common\RaUI.exe [2010-6-3 1773568] WinZip Quick Pick.lnk - c:\program files (x86)\WinZip\WZQKPICK.EXE [2010-11-30 608584] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro36] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro36.sys] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro36Crusader] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro36CrusaderBoot] @="" . R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-09 250808] S2 ABBYY.Licensing.FineReader.Sprint.9.0;ABBYY FineReader 9.0 Sprint Licensing Service;c:\program files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [2009-05-14 759048] S2 Acer HomeMedia Connect Service;Acer HomeMedia Connect Service;c:\program files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe [2008-01-25 269448] S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-07-27 63960] . . HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs Themes . Inhoud van de 'Gedeelde Taken' map . 2012-10-24 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-11 09:23] . 2012-10-24 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-06-05 07:29] . 2012-10-24 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-06-05 07:29] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}] 2012-03-15 21:26 287048 ----a-w- c:\program files (x86)\Hotspot Shield\HssIE\HssIE_64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast] @="{472083B0-C522-11CF-8763-00608CC02F24}" [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}] 2012-08-21 09:11 133400 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 97792 ----a-w- c:\users\acer m3641\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 97792 ----a-w- c:\users\acer m3641\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2011-02-18 05:12 97792 ----a-w- c:\users\acer m3641\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2008-03-04 21:39 51248 ----a-w- c:\acer\Empowering Technology\eDataSecurity\x64\PSDProtect.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvSvc"="c:\windows\system32\nvsvc64.dll" [2007-11-27 88064] "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-11-27 10721312] "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-11-27 74752] "RtHDVCpl"="RAVCpl64.exe" [2008-03-25 6150656] "Skytel"="Skytel.exe" [2007-11-20 1826816] "eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\x64\eDSloader.exe" [2008-03-04 560688] "NVRaidService"="c:\windows\system32\nvraidservice.exe" [2008-06-06 333344] . ------- Bijkomende Scan ------- . uLocal Page = c:\windows\system32\blank.htm uDefault_Search_URL = hxxp://www.google.com/ie mDefault_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0413&s=1&o=vp64&d=1109&m=aspire_m3641 mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = *.local uSearchAssistant = hxxp://www.google.com/ie uSearchURL,(Default) = hxxp://search.yahoo.com/search?fr=mcafee&p=%s IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: Download Web &Images with SoMud - c:\program files (x86)\SoMud\scripts\ie\images-url.html IE: Download with SoMud - c:\program files (x86)\SoMud\scripts\ie\link-url.html IE: E&xporteren naar Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000 TCP: DhcpNameServer = 192.168.1.1 192.168.1.1 FF - ProfilePath - c:\users\acer m3641\AppData\Roaming\Mozilla\Firefox\Profiles\vb3pdfou.default\ FF - prefs.js: browser.search.defaulturl - FF - prefs.js: browser.search.selectedEngine - Ask.com FF - prefs.js: browser.startup.homepage - hxxps://www.google.com/ FF - prefs.js: keyword.URL - hxxp://www.searchqu.com/web?src=ffb&systemid=406&q= FF - prefs.js: network.proxy.gopher - FF - prefs.js: network.proxy.gopher_port - 0 FF - prefs.js: network.proxy.type - 0 FF - ExtSQL: 2012-10-24 09:58; {4ED1F68A-5463-4931-9384-8FFF5ED91D92}; c:\program files (x86)\McAfee\SiteAdvisor FF - ExtSQL: !HIDDEN! 2010-06-06 09:50; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension FF - ExtSQL: !HIDDEN! 2012-03-10 10:49; 5affxtbr@MyWebFace_5a.com; c:\program files (x86)\MyWebFace_5a\bar\1.bin FF - user.js: network.protocol-handler.warn-external.dnupdate - false);user_pref(extensions.searchya_i.hmpg, true FF - user.js: extensions.searchya_i.hmpgUrl - hxxp://searchya.com/?chnl=fap&s=0&cr=879914219&cd=2XzutAtN2Y1L1QzutDtDyCtD0BtAyE0AtB0FtAyEtCyD0C0A0FtN0D0TzutBtDtCtBtDtBtDzz FF - user.js: extensions.searchya_i.dfltSrch - true FF - user.js: extensions.searchya_i.srchPrvdr - SearchYa! FF - user.js: extensions.searchya_i.dnsErr - true FF - user.js: extensions.searchya_i.newTab - true FF - user.js: extensions.searchya_i.newTabUrl - hxxp://searchya.com/?chnl=fap&s=2&cr=879914219&cd=2XzutAtN2Y1L1QzutDtDyCtD0BtAyE0AtB0FtAyEtCyD0C0A0FtN0D0TzutBtDtCtBtDtBtDzz FF - user.js: extensions.searchya_i.tlbrSrchUrl - hxxp://searchya.com/?chnl=fap&s=3&cr=879914219&cd=2XzutAtN2Y1L1QzutDtDyCtD0BtAyE0AtB0FtAyEtCyD0C0A0FtN0D0TzutBtDtCtBtDtBtDzz&q= FF - user.js: extensions.searchya_i.id - 84415caf0000000000000060b34a2f34 FF - user.js: extensions.searchya_i.instlDay - 15378 FF - user.js: extensions.searchya_i.vrsn - 1.5.11.13 FF - user.js: extensions.searchya_i.vrsni - 1.5.11.13 FF - user.js: extensions.searchya_i.vrsnTs - 1.5.11.1316:16 FF - user.js: extensions.searchya_i.prtnrId - ironsrc FF - user.js: extensions.searchya_i.prdct - searchya FF - user.js: extensions.searchya_i.aflt - foxtab FF - user.js: extensions.searchya_i.smplGrp - none FF - user.js: extensions.searchya_i.tlbrId - base FF - user.js: extensions.searchya_i.instlRef - fap FF - user.js: extensions.searchya_i.dfltLng - FF - user.js: extensions.searchya_i.excTlbr - false FF - user.js: extensions.BabylonToolbar_i.id - 84415caf0000000000000060b34a2f34 FF - user.js: extensions.BabylonToolbar_i.hardId - 84415caf0000000000000060b34a2f34 FF - user.js: extensions.BabylonToolbar_i.instlDay - 15400 FF - user.js: extensions.BabylonToolbar_i.vrsn - 1.5.3.17 FF - user.js: extensions.BabylonToolbar_i.vrsni - 1.5.3.17 FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.5.3.1715:41 FF - user.js: extensions.BabylonToolbar_i.prtnrId - babylon FF - user.js: extensions.BabylonToolbar_i.prdct - BabylonToolbar FF - user.js: extensions.BabylonToolbar_i.aflt - babsst FF - user.js: extensions.BabylonToolbar_i.smplGrp - none FF - user.js: extensions.BabylonToolbar_i.tlbrId - base FF - user.js: extensions.BabylonToolbar_i.newTab - false FF - user.js: extensions.BabylonToolbar_i.babTrack - affID=101241 FF - user.js: extensions.BabylonToolbar_i.babExt - FF - user.js: extensions.BabylonToolbar_i.srcExt - ss FF - user.js: extensions.BabylonToolbar_i.instlRef - sst . - - - - ORPHANS VERWIJDERD - - - - . Toolbar-10 - (no file) Wow6432Node-HKCU-Run-WMPNSCFG - c:\program files (x86)\Windows Media Player\WMPNSCFG.exe Wow6432Node-HKLM-Run-eRecoveryService - (no file) Wow6432Node-HKLM-Run-<NO NAME> - (no file) Toolbar-10 - (no file) WebBrowser-{65CA59EE-9920-4D7F-8C41-BFA12403261A} - (no file) WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file) AddRemove-Allscoop RSS Submit Pro 1.0 - c:\windows\system32\ss2uinst.exe AddRemove-InstallBrain Updater Service - c:\programdata\InstallBrainService\ibsvc.exe AddRemove-Savings Sidekick - c:\program files (x86)\Savings Sidekick\Uninstall.exe AddRemove-FoxTab PDF Creator - c:\program files (x86)\FoxTabPDFConverter\Uninstall\Uninstall.exe AddRemove-{79A765E1-C399-405B-85AF-466F52E918B0} - c:\program files (x86)\Ask.com\Updater\Updater.exe . . . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_287_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_287_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_287.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}] @Denied: (A 2) (Everyone) . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0] @="Shockwave Flash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}] @Denied: (A 2) (Everyone) @="" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0] @="FlashBroker" . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes] "SymbolicLinkValue"=hex(6):5c,00,52,00,45,00,47,00,49,00,53,00,54,00,52,00,59, 00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\ . Voltooingstijd: 2012-10-24 17:34:33 ComboFix-quarantined-files.txt 2012-10-24 15:34 . Pre-Run: 201.533.083.648 bytes beschikbaar Post-Run: 201.306.521.600 bytes beschikbaar . - - End Of File - - 72412980ADA6CF142E41C66432334121
  21. InternetMarketer
    Ik heb twee log bestanden in Malwarebytes. Ik heb een nieuwe scan gedaan in HijackThis en de inhoud van de nieuwe log hieronder geplakt. Hieronder de inhoud van deze bestanden en van het nieuwe HijackThis log: Malwarebytes bestand 1: ------------------------ Malwarebytes Anti-Malware (-evaluatieversie-) 1.65.1.1000 Malwarebytes : Free anti-malware download Databaseversie: v2012.10.24.01 Windows Vista Service Pack 2 x64 NTFS Internet Explorer 9.0.8112.16421 acer m3641 :: PC_VAN_ACERM364 [administrator] Realtime bescherming: Ingeschakeld 24-10-2012 9:14:10 mbam-log-2012-10-24 (09-14-10).txt Scantype: Snelle scan Ingeschakelde scanopties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM Uitgeschakelde scanopties: P2P Objecten gescand: 246595 Verstreken tijd: 5 minuut/minuten, 38 seconde(n) Geheugenprocessen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Geheugenmodulen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Registersleutels gedetecteerd: 25 HKCR\CLSID\{33AA308B-B565-4376-AC66-59EE9B6AD13E} (PUP.SearchYa) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\CLSID\{98889811-442D-49dd-99D7-DC866BE87DBC} (PUP.SearchYa) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921} (PUP.SearchYa) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\Babylon.dskBnd.1 (PUP.SearchYa) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\Babylon.dskBnd (PUP.SearchYa) -> Succesvol in quarantaine geplaatst en verwijderd. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC} (PUP.SearchYa) -> Succesvol in quarantaine geplaatst en verwijderd. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC} (PUP.SearchYa) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\ironsource.searchyadskBnd.1 (PUP.SearchYa) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\ironsource.searchyadskBnd (PUP.SearchYa) -> Succesvol in quarantaine geplaatst en verwijderd. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{33AA308B-B565-4376-AC66-59EE9B6AD13E} (PUP.SearchYa) -> Succesvol in quarantaine geplaatst en verwijderd. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{33AA308B-B565-4376-AC66-59EE9B6AD13E} (PUP.SearchYa) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\CLSID\{5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} (PUP.Blabbers) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\TypeLib\{830B56CB-FD22-44AA-9887-7898F4F4158D} (PUP.Blabbers) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\tdataprotocol.CTData.1 (PUP.Blabbers) -> Succesvol in quarantaine geplaatst en verwijderd. HKCR\tdataprotocol.CTData (PUP.Blabbers) -> Succesvol in quarantaine geplaatst en verwijderd. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{00CBB66B-1D3B-46D3-9577-323A336ACB50} (PUP.Blabbers) -> Succesvol in quarantaine geplaatst en verwijderd. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00CBB66B-1D3B-46D3-9577-323A336ACB50} (PUP.Blabbers) -> Succesvol in quarantaine geplaatst en verwijderd. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{25927741-5E5B-4D27-8D8B-9188FE64373F} (PUP.SearchYa) -> Succesvol in quarantaine geplaatst en verwijderd. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{25927741-5E5B-4D27-8D8B-9188FE64373F} (PUP.SearchYa) -> Succesvol in quarantaine geplaatst en verwijderd. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{963B125B-8B21-49A2-A3A8-E37092276531} (PUP.Blabbers) -> Succesvol in quarantaine geplaatst en verwijderd. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{963B125B-8B21-49A2-A3A8-E37092276531} (PUP.Blabbers) -> Succesvol in quarantaine geplaatst en verwijderd. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{37476589-E48E-439E-A706-56189E2ED4C4} (PUP.BFlix) -> Succesvol in quarantaine geplaatst en verwijderd. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BrowserCompanion (PUP.Blabbers) -> Succesvol in quarantaine geplaatst en verwijderd. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7647A02C-1158-4DA9-A467-507550047B35} (PUP.BFlix) -> Succesvol in quarantaine geplaatst en verwijderd. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{7647A02C-1158-4DA9-A467-507550047B35} (PUP.BFlix) -> Succesvol in quarantaine geplaatst en verwijderd. Registerwaarden gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Registerdata gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Mappen gedetecteerd: 20 C:\ProgramData\TheBflix (PUP.BFlix) -> Succesvol in quarantaine geplaatst en verwijderd. C:\ProgramData\TheBflix\data (PUP.BFlix) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files (x86)\BrowserCompanion (PUP.Blabbers) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Users\acer m3641\AppData\Roaming\HBLite (Adware.Hotbar) -> Succesvol in quarantaine geplaatst en verwijderd. C:\ProgramData\HBLiteSA (Adware.Hotbar) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Users\acer m3641\AppData\Roaming\ShopperReports3 (Adware.ShopperReports) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files (x86)\HBLite (Adware.Hotbar) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files (x86)\HBLite\bin (Adware.Hotbar) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files (x86)\HBLite\bin\11.0.349.0 (Adware.Hotbar) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files (x86)\HBLite\bin\11.0.349.0\firefox (Adware.Hotbar) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files (x86)\HBLite\bin\11.0.349.0\firefox\extensions (Adware.Hotbar) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files (x86)\ShopperReports3 (Adware.ShopperReports) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files (x86)\ShopperReports3\bin (Adware.ShopperReports) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files (x86)\ShopperReports3\bin\3.1.22.0 (Adware.ShopperReports) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files (x86)\ShopperReports3\bin\3.1.22.0\firefox (Adware.ShopperReports) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files (x86)\ShopperReports3\bin\3.1.22.0\firefox\firefoxtoolbar (Adware.ShopperReports) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files (x86)\ShopperReports3\bin\3.1.22.0\firefox\firefoxtoolbar\extensions (Adware.ShopperReports) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files (x86)\ShopperReports3\bin\3.1.22.0\firefox\firefoxtoolbar\extensions\chrome (Adware.ShopperReports) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files (x86)\ShopperReports3\bin\3.1.22.0\firefox\firefoxtoolbar\extensions\chrome\content (Adware.ShopperReports) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files (x86)\ShopperReports3\bin\3.1.22.0\firefox\firefoxtoolbar\extensions\components (Adware.ShopperReports) -> Succesvol in quarantaine geplaatst en verwijderd. Bestanden gedetecteerd: 27 C:\Program Files (x86)\Ironsource\searchya\1.5.11.13\searchyaTlbr.dll (PUP.SearchYa) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (PUP.SearchYa) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files (x86)\BrowserCompanion\tdataprotocol.dll (PUP.Blabbers) -> Succesvol in quarantaine geplaatst en verwijderd. C:\ProgramData\TheBflix\background.html (PUP.BFlix) -> Succesvol in quarantaine geplaatst en verwijderd. C:\ProgramData\TheBflix\ajhcekcffkpnaednoeoegnmnjdlnjjmg.crx (PUP.BFlix) -> Succesvol in quarantaine geplaatst en verwijderd. C:\ProgramData\TheBflix\content.js (PUP.BFlix) -> Succesvol in quarantaine geplaatst en verwijderd. C:\ProgramData\TheBflix\settings.ini (PUP.BFlix) -> Succesvol in quarantaine geplaatst en verwijderd. C:\ProgramData\TheBflix\uninstall.exe (PUP.BFlix) -> Succesvol in quarantaine geplaatst en verwijderd. C:\ProgramData\TheBflix\data\content.js (PUP.BFlix) -> Succesvol in quarantaine geplaatst en verwijderd. C:\ProgramData\TheBflix\data\jsondb.js (PUP.BFlix) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files (x86)\BrowserCompanion\blabbers-ff-full.xpi (PUP.Blabbers) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files (x86)\BrowserCompanion\BCHelper.exe (PUP.Blabbers) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files (x86)\BrowserCompanion\blabbers-ch.crx (PUP.Blabbers) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files (x86)\BrowserCompanion\logo.ico (PUP.Blabbers) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files (x86)\BrowserCompanion\sqlite3.dll (PUP.Blabbers) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files (x86)\BrowserCompanion\toolbar.dll (PUP.Blabbers) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files (x86)\BrowserCompanion\uninstall.exe (PUP.Blabbers) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files (x86)\BrowserCompanion\updater.ini (PUP.Blabbers) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files (x86)\BrowserCompanion\widgetserv.exe (PUP.Blabbers) -> Succesvol in quarantaine geplaatst en verwijderd. C:\ProgramData\HBLiteSA\HBLiteSA.dat (Adware.Hotbar) -> Succesvol in quarantaine geplaatst en verwijderd. C:\ProgramData\HBLiteSA\HBLiteSAAbout.mht (Adware.Hotbar) -> Succesvol in quarantaine geplaatst en verwijderd. C:\ProgramData\HBLiteSA\HBLiteSAEULA.mht (Adware.Hotbar) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files (x86)\HBLite\bin\11.0.349.0\firefox\extensions\install.rdf (Adware.Hotbar) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files (x86)\ShopperReports3\bin\3.1.22.0\firefox\firefoxtoolbar\extensions\install.rdf (Adware.ShopperReports) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files (x86)\ShopperReports3\bin\3.1.22.0\firefox\firefoxtoolbar\extensions\chrome\content\InfoPane.xul (Adware.ShopperReports) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files (x86)\ShopperReports3\bin\3.1.22.0\firefox\firefoxtoolbar\extensions\components\BRNstFF.xpt (Adware.ShopperReports) -> Succesvol in quarantaine geplaatst en verwijderd. C:\Program Files (x86)\ShopperReports3\bin\3.1.22.0\firefox\firefoxtoolbar\extensions\components\BrowserExtensionFF.xpt (Adware.ShopperReports) -> Succesvol in quarantaine geplaatst en verwijderd. (einde) Malwarebytes bestand 2: ------------------------- 2012/10/24 09:10:43 +0200 PC_VAN_ACERM364 acer m3641 MESSAGE Starting protection 2012/10/24 09:10:43 +0200 PC_VAN_ACERM364 acer m3641 MESSAGE Protection started successfully 2012/10/24 09:10:43 +0200 PC_VAN_ACERM364 acer m3641 MESSAGE Starting IP protection 2012/10/24 09:10:48 +0200 PC_VAN_ACERM364 acer m3641 MESSAGE IP Protection started successfully 2012/10/24 09:10:57 +0200 PC_VAN_ACERM364 acer m3641 MESSAGE Starting database refresh 2012/10/24 09:10:57 +0200 PC_VAN_ACERM364 acer m3641 MESSAGE Stopping IP protection 2012/10/24 09:10:57 +0200 PC_VAN_ACERM364 acer m3641 MESSAGE IP Protection stopped successfully 2012/10/24 09:11:00 +0200 PC_VAN_ACERM364 acer m3641 MESSAGE Database refreshed successfully 2012/10/24 09:11:00 +0200 PC_VAN_ACERM364 acer m3641 MESSAGE Starting IP protection 2012/10/24 09:11:04 +0200 PC_VAN_ACERM364 acer m3641 MESSAGE IP Protection started successfully 2012/10/24 09:11:48 +0200 PC_VAN_ACERM364 acer m3641 IP-BLOCK 207.232.22.60 (Type: outgoing, Port: 50473, Process: avastsvc.exe) 2012/10/24 09:12:12 +0200 PC_VAN_ACERM364 acer m3641 IP-BLOCK 207.232.22.60 (Type: outgoing, Port: 50501, Process: avastsvc.exe) 2012/10/24 09:22:22 +0200 PC_VAN_ACERM364 acer m3641 IP-BLOCK 178.90.90.169 (Type: outgoing, Port: 6881, Process: somud.exe) 2012/10/24 09:25:53 +0200 PC_VAN_ACERM364 acer m3641 IP-BLOCK 58.241.9.30 (Type: outgoing, Port: 6881, Process: somud.exe) 2012/10/24 09:26:01 +0200 PC_VAN_ACERM364 acer m3641 IP-BLOCK 222.71.82.205 (Type: outgoing, Port: 6881, Process: somud.exe) 2012/10/24 09:27:55 +0200 PC_VAN_ACERM364 acer m3641 IP-BLOCK 109.230.220.234 (Type: outgoing, Port: 6881, Process: somud.exe) 2012/10/24 09:29:25 +0200 PC_VAN_ACERM364 acer m3641 IP-BLOCK 222.65.40.129 (Type: outgoing, Port: 6881, Process: somud.exe) 2012/10/24 09:32:24 +0200 PC_VAN_ACERM364 acer m3641 IP-BLOCK 218.8.129.169 (Type: outgoing, Port: 6881, Process: somud.exe) 2012/10/24 09:37:00 +0200 PC_VAN_ACERM364 acer m3641 IP-BLOCK 178.90.90.169 (Type: outgoing, Port: 6881, Process: somud.exe) 2012/10/24 09:43:23 +0200 PC_VAN_ACERM364 acer m3641 IP-BLOCK 94.102.51.136 (Type: outgoing, Port: 6881, Process: somud.exe) 2012/10/24 09:46:32 +0200 PC_VAN_ACERM364 acer m3641 IP-BLOCK 93.174.91.131 (Type: outgoing, Port: 6881, Process: somud.exe) 2012/10/24 09:52:04 +0200 PC_VAN_ACERM364 acer m3641 IP-BLOCK 178.90.90.169 (Type: outgoing, Port: 6881, Process: somud.exe) 2012/10/24 09:56:18 +0200 PC_VAN_ACERM364 acer m3641 MESSAGE Starting protection 2012/10/24 09:56:18 +0200 PC_VAN_ACERM364 acer m3641 MESSAGE Protection started successfully 2012/10/24 09:56:18 +0200 PC_VAN_ACERM364 acer m3641 MESSAGE Starting IP protection 2012/10/24 09:56:22 +0200 PC_VAN_ACERM364 acer m3641 MESSAGE IP Protection started successfully 2012/10/24 09:58:59 +0200 PC_VAN_ACERM364 acer m3641 IP-BLOCK 213.55.114.173 (Type: outgoing, Port: 49277, Process: somud.exe) 2012/10/24 10:00:22 +0200 PC_VAN_ACERM364 acer m3641 IP-BLOCK 207.232.22.60 (Type: outgoing, Port: 49470, Process: avastsvc.exe) 2012/10/24 10:02:48 +0200 PC_VAN_ACERM364 acer m3641 IP-BLOCK 89.28.31.195 (Type: outgoing, Port: 6881, Process: somud.exe) 2012/10/24 10:04:33 +0200 PC_VAN_ACERM364 acer m3641 IP-BLOCK 89.28.48.37 (Type: outgoing, Port: 6881, Process: somud.exe) 2012/10/24 10:05:13 +0200 PC_VAN_ACERM364 acer m3641 IP-BLOCK 91.188.37.36 (Type: outgoing, Port: 6881, Process: somud.exe) 2012/10/24 10:06:09 +0200 PC_VAN_ACERM364 acer m3641 IP-BLOCK 77.78.201.34 (Type: outgoing, Port: 6881, Process: somud.exe) HijackThis bestand: ------------------- Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 10:12:11, on 24-10-2012 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v9.00 (9.00.8112.16450) Boot mode: Normal Running processes: C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files (x86)\SoMud\somud.exe C:\Program Files (x86)\TechSmith\Jing\Jing.exe C:\Program Files (x86)\Sitecom\Common\RaUI.exe C:\Program Files (x86)\WinZip\WZQKPICK.EXE C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe C:\Program Files (x86)\Google\Google Talk\googletalk.exe C:\Program Files (x86)\Logia\eSnipsDownloader\eSnips_Downloader.exe C:\Program Files\AVAST Software\Avast\AvastUI.exe C:\ProgramData\Anti-phishing Domain Advisor\visicom_antiphishing.exe C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe C:\Users\acer m3641\AppData\Roaming\Dropbox\bin\Dropbox.exe C:\Program Files (x86)\AzonTop100Analyzer\azontop100analyzer.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\Feed Notifier\notifier.exe C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE C:\Acer\Empowering Technology\eDataSecurity\x86\eDSMSNLoader32.exe C:\Windows\SysWOW64\conime.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = iGoogle Redirect R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = iGoogle Redirect R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://search.yahoo.com/search?fr=mcafee&p=%s R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R3 - URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll F2 - REG:system.ini: UserInit=userinit.exe, O1 - Hosts: ::1 localhost O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll O2 - BHO: eSnipBHO - {B530A9A4-1722-4D16-AAD6-AA85E3AD2ADE} - C:\Program Files (x86)\Logia\eSnipsDownloader\eSnipsBHO.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [PCMMediaSharing] "C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe" O4 - HKLM\..\Run: [siteAdvisor] "C:\Program Files (x86)\SiteAdvisor\6172\SiteAdv.exe" O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe O4 - HKLM\..\Run: [EEventManager] "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe" O4 - HKLM\..\Run: [googletalk] "C:\Program Files (x86)\Google\Google Talk\googletalk.exe" /autostart O4 - HKLM\..\Run: [eSnips_Downloader] "C:\Program Files (x86)\Logia\eSnipsDownloader\eSnips_Downloader.exe" -startup O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui O4 - HKLM\..\Run: [Anti-phishing Domain Advisor] "C:\ProgramData\Anti-phishing Domain Advisor\visicom_antiphishing.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [sweetIM] C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe O4 - HKLM\..\Run: [azontop100analyzer] "C:\Program Files (x86)\AzonTop100Analyzer\azontop100analyzer.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [msnmsgr] ~"C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [soMud] "C:\Program Files (x86)\SoMud\somud.exe" /bg O4 - HKCU\..\Run: [EPSON SX218 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGDE.EXE /FU "C:\Windows\TEMP\E_SE15.tmp" /EF "HKCU" O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [Greenshot] "C:\Program Files (x86)\Greenshot\Greenshot.exe" O4 - HKCU\..\Run: [Jing] C:\Program Files (x86)\TechSmith\Jing\Jing.exe O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe O4 - HKCU\..\Run: [Grammar.net’s Grammar Checker] C:\Program Files (x86)\Grammar.net’s Grammar Checker\GrammarChecker.exe O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE') O4 - Startup: Dropbox.lnk = C:\Users\acer m3641\AppData\Roaming\Dropbox\bin\Dropbox.exe O4 - Startup: Feed Notifier.lnk = C:\Program Files (x86)\Feed Notifier\notifier.exe O4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE O4 - Startup: OpenOffice.org 3.2 .lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe O4 - Startup: OpenOffice.org 3.3 .lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe O4 - Global Startup: ASETRES.EXE O4 - Global Startup: Empowering Technology Launcher.lnk = ? O4 - Global Startup: Sitecom Wireless Utility.lnk = C:\Program Files (x86)\Sitecom\Common\RaUI.exe O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files (x86)\WinZip\WZQKPICK.EXE O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 O8 - Extra context menu item: Download Web &Images with SoMud - C:\Program Files (x86)\SoMud\scripts\ie\images-url.html O8 - Extra context menu item: Download with SoMud - C:\Program Files (x86)\SoMud\scripts\ie\link-url.html O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll O23 - Service: ABBYY FineReader 9.0 Sprint Licensing Service (ABBYY.Licensing.FineReader.Sprint.9.0) - ABBYY - C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe O23 - Service: Acer HomeMedia Connect Service - CyberLink - C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe O23 - Service: ePerformance Service (AcerMemUsageCheckService) - Unknown owner - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing) O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing) O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: HitmanPro Scheduler (HitmanProScheduler) - SurfRight B.V. - C:\Program Files\HitmanPro\hmpsched.exe O23 - Service: Hotspot Shield Service (hshld) - Unknown owner - C:\Program Files (x86)\Hotspot Shield\bin\openvpnas.exe O23 - Service: Hotspot Shield Routing Service (HssSrv) - AnchorFree Inc. - C:\Program Files (x86)\Hotspot Shield\HssWPR\hsssrv.exe O23 - Service: Hotspot Shield Tray Service (HssTrayService) - Unknown owner - C:\Program Files (x86)\Hotspot Shield\bin\HssTrayService.EXE O23 - Service: Hotspot Shield Monitoring Service (HssWd) - Unknown owner - C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Ralink Registry Writer (RalinkRegistryWriter) - Ralink Technology, Corp. - C:\Program Files (x86)\Sitecom\Common\RegistryWriter.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared Files\RichVideo.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: RoboSoft Database Server (RSDBServerService) - Rudenko Software - C:\Program Files (x86)\RoboSoft4\RSDBServer.exe O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: SiteAdvisor-service (SiteAdvisor Service) - Unknown owner - C:\Program Files (x86)\SiteAdvisor\6172\SAService.exe O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 16006 bytes
  22. InternetMarketer
    Ik gebruik Firefox en hieronder vind je de inhoud van de log: Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 18:37:52, on 23-10-2012 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v9.00 (9.00.8112.16450) Boot mode: Normal Running processes: C:\Acer\Empowering Technology\eDataSecurity\x86\eDSMSNLoader32.exe C:\Program Files (x86)\SoMud\somud.exe C:\Program Files (x86)\TechSmith\Jing\Jing.exe C:\Program Files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe C:\Program Files (x86)\Sitecom\Common\RaUI.exe C:\Program Files (x86)\WinZip\WZQKPICK.EXE C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe C:\Program Files (x86)\Google\Google Talk\googletalk.exe C:\Program Files (x86)\Logia\eSnipsDownloader\eSnips_Downloader.exe C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe C:\Program Files (x86)\Windows iLivid Toolbar\Datamngr\datamngrUI.exe C:\Program Files\AVAST Software\Avast\AvastUI.exe C:\Users\acer m3641\AppData\Roaming\Dropbox\bin\Dropbox.exe C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe C:\Program Files (x86)\Feed Notifier\notifier.exe C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE C:\ProgramData\Anti-phishing Domain Advisor\visicom_antiphishing.exe C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe C:\Program Files (x86)\BrowserCompanion\BCHelper.exe C:\Program Files (x86)\AzonTop100Analyzer\azontop100analyzer.exe C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\Ask.com\Updater\Updater.exe C:\Windows\SysWOW64\conime.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe C:\Program Files (x86)\Internet Explorer\IELowutil.exe C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = iGoogle Redirect R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Analysis of program downloads scanned for viruses and spyware. R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com/?st=2&barid={4B45C800-58B1-11E1-A7DE-002421827688} R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = iGoogle Redirect R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Analysis of program downloads scanned for viruses and spyware. R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Analysis of program downloads scanned for viruses and spyware. R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://search.yahoo.com/search?fr=mcafee&p=%s R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll R3 - URLSearchHook: YouTube Downloader Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files (x86)\YouTube Downloader Toolbar\IE\4.7\youtubedownloaderToolbarIE.dll R3 - URLSearchHook: Softonic Netherlands Toolbar - {65ca59ee-9920-4d7f-8c41-bfa12403261a} - C:\Program Files (x86)\Softonic_Netherlands\tbSoft.dll R3 - URLSearchHook: ToolbarURLSearchHook Class - {CA3EB689-8F09-4026-AA10-B9534C691CE0} - C:\Program Files (x86)\SoMud Toolbar\tbhelper.dll R3 - URLSearchHook: PHPNukeDU Toolbar - {46735dee-f862-49d1-876d-6382794dc625} - C:\Program Files (x86)\PHPNukeDU\prxtbPHPN.dll R3 - URLSearchHook: BrotherSoft Extreme Toolbar - {51a86bb3-6602-4c85-92a5-130ee4864f13} - C:\Program Files (x86)\BrotherSoft_Extreme\prxtbBro0.dll R3 - URLSearchHook: Serif WebPlus Toolbar - {07364a98-eb02-4736-bc54-ebe437fccb87} - C:\Program Files (x86)\Serif__WebPlus\prxtbSeri.dll R3 - URLSearchHook: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll F2 - REG:system.ini: UserInit=userinit.exe O1 - Hosts: ::1 localhost O2 - BHO: script helper for ie - {00cbb66b-1d3b-46d3-9577-323a336acb50} - C:\Program Files (x86)\BrowserCompanion\jsloader.dll O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file) O2 - BHO: Serif WebPlus - {07364a98-eb02-4736-bc54-ebe437fccb87} - C:\Program Files (x86)\Serif__WebPlus\prxtbSeri.dll O2 - BHO: CrossriderApp0005060 - {11111111-1111-1111-1111-110011501160} - C:\Program Files (x86)\Savings Sidekick\Savings Sidekick.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Updater For Spam Free Search Bar - {20a0be68-8fd9-4539-8712-ce3d1c1fdfc6} - C:\Program Files (x86)\blekkotb\auxi\blekkoAu.dll O2 - BHO: Ironsource LTD Helper Object - {25927741-5E5B-4D27-8D8B-9188FE64373F} - C:\Program Files (x86)\Ironsource\searchya\1.5.11.13\bh\searchya.dll O2 - BHO: Spam Free Search Bar - {26c9e18c-3717-4be1-a225-04e4471f5b6e} - C:\Program Files (x86)\blekkotb\blekkoDx.dll O2 - BHO: Wincore Mediabar - {28387537-e3f9-4ed7-860c-11e69af4a8a0} - C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\ToolBar\wincoreimdtx.dll O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll O2 - BHO: PHPNukeDU - {46735dee-f862-49d1-876d-6382794dc625} - C:\Program Files (x86)\PHPNukeDU\prxtbPHPN.dll O2 - BHO: BrotherSoft Extreme - {51a86bb3-6602-4c85-92a5-130ee4864f13} - C:\Program Files (x86)\BrotherSoft_Extreme\prxtbBro0.dll O2 - BHO: Softonic Netherlands Toolbar - {65ca59ee-9920-4d7f-8c41-bfa12403261a} - C:\Program Files (x86)\Softonic_Netherlands\tbSoft.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Update Timer - {963B125B-8B21-49A2-A3A8-E37092276531} - C:\Program Files (x86)\BrowserCompanion\updatebhoWin32.dll O2 - BHO: Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~2\WI371A~1\ToolBar\searchqudtx.dll O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll O2 - BHO: UrlHelper Class - {A40DC6C5-79D0-4ca8-A185-8FF989AF1115} - C:\PROGRA~2\WI371A~1\Datamngr\IEBHO.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll O2 - BHO: eSnipBHO - {B530A9A4-1722-4D16-AAD6-AA85E3AD2ADE} - C:\Program Files (x86)\Logia\eSnipsDownloader\eSnipsBHO.dll O2 - BHO: Wincore Mediabar - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - C:\PROGRA~2\BEARSH~1\MediaBar\Datamngr\ToolBar\wincorebsdtx.dll O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing) O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll O2 - BHO: YouTube Downloader Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files (x86)\YouTube Downloader Toolbar\IE\4.7\youtubedownloaderToolbarIE.dll O2 - BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files (x86)\Hotspot Shield\HssIE\HssIE.dll O2 - BHO: SMTTB2009 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files (x86)\SoMud Toolbar\tbcore3.dll O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll O3 - Toolbar: Softonic Netherlands Toolbar - {65ca59ee-9920-4d7f-8c41-bfa12403261a} - C:\Program Files (x86)\Softonic_Netherlands\tbSoft.dll O3 - Toolbar: SoMud Toolbar - {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Program Files (x86)\SoMud Toolbar\tbcore3.dll O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing) O3 - Toolbar: Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll O3 - Toolbar: Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~2\WI371A~1\ToolBar\searchqudtx.dll O3 - Toolbar: PHPNukeDU Toolbar - {46735dee-f862-49d1-876d-6382794dc625} - C:\Program Files (x86)\PHPNukeDU\prxtbPHPN.dll O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll O3 - Toolbar: BrotherSoft Extreme Toolbar - {51a86bb3-6602-4c85-92a5-130ee4864f13} - C:\Program Files (x86)\BrotherSoft_Extreme\prxtbBro0.dll O3 - Toolbar: Serif WebPlus Toolbar - {07364a98-eb02-4736-bc54-ebe437fccb87} - C:\Program Files (x86)\Serif__WebPlus\prxtbSeri.dll O3 - Toolbar: YouTube Downloader Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files (x86)\YouTube Downloader Toolbar\IE\4.7\youtubedownloaderToolbarIE.dll O3 - Toolbar: Wincore Mediabar - {28387537-e3f9-4ed7-860c-11e69af4a8a0} - C:\PROGRA~2\IMESHA~1\MediaBar\Datamngr\ToolBar\wincoreimdtx.dll O3 - Toolbar: Wincore Mediabar - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - C:\PROGRA~2\BEARSH~1\MediaBar\Datamngr\ToolBar\wincorebsdtx.dll O3 - Toolbar: Spam Free Search Bar - {26c9e18c-3717-4be1-a225-04e4471f5b6e} - C:\Program Files (x86)\blekkotb\blekkoDx.dll O3 - Toolbar: SearchYa Toolbar - {33AA308B-B565-4376-AC66-59EE9B6AD13E} - C:\Program Files (x86)\Ironsource\searchya\1.5.11.13\searchyaTlbr.dll O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (file missing) O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll O4 - HKLM\..\Run: [PCMMediaSharing] "C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\PCMMediaSharing.exe" O4 - HKLM\..\Run: [siteAdvisor] "C:\Program Files (x86)\SiteAdvisor\6172\SiteAdv.exe" O4 - HKLM\..\Run: [startCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe O4 - HKLM\..\Run: [EEventManager] "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe" O4 - HKLM\..\Run: [googletalk] "C:\Program Files (x86)\Google\Google Talk\googletalk.exe" /autostart O4 - HKLM\..\Run: [eSnips_Downloader] "C:\Program Files (x86)\Logia\eSnipsDownloader\eSnips_Downloader.exe" -startup O4 - HKLM\..\Run: [babylonToolbar] "C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe" /md I O4 - HKLM\..\Run: [DATAMNGR] C:\PROGRA~2\WI371A~1\Datamngr\DATAMN~1.EXE O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui O4 - HKLM\..\Run: [searchSettings] "C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe" O4 - HKLM\..\Run: [Anti-phishing Domain Advisor] "C:\ProgramData\Anti-phishing Domain Advisor\visicom_antiphishing.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [sweetIM] C:\Program Files (x86)\SweetIM\Messenger\SweetIM.exe O4 - HKLM\..\Run: [browser companion helper] "C:\Program Files (x86)\BrowserCompanion\BCHelper.exe" /T=3 /CHI=clbfjfbnelcflpgpklppgplejolacbej O4 - HKLM\..\Run: [azontop100analyzer] "C:\Program Files (x86)\AzonTop100Analyzer\azontop100analyzer.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files (x86)\Ask.com\Updater\Updater.exe" O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [msnmsgr] ~"C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [soMud] "C:\Program Files (x86)\SoMud\somud.exe" /bg O4 - HKCU\..\Run: [EPSON SX218 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGDE.EXE /FU "C:\Windows\TEMP\E_SE15.tmp" /EF "HKCU" O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [Greenshot] "C:\Program Files (x86)\Greenshot\Greenshot.exe" O4 - HKCU\..\Run: [Jing] C:\Program Files (x86)\TechSmith\Jing\Jing.exe O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe O4 - HKCU\..\Run: [Grammar.net’s Grammar Checker] C:\Program Files (x86)\Grammar.net’s Grammar Checker\GrammarChecker.exe O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE') O4 - Startup: Dropbox.lnk = C:\Users\acer m3641\AppData\Roaming\Dropbox\bin\Dropbox.exe O4 - Startup: Feed Notifier.lnk = C:\Program Files (x86)\Feed Notifier\notifier.exe O4 - Startup: OneNote 2007 Schermopname en Snel starten.lnk = C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE O4 - Startup: OpenOffice.org 3.2 .lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe O4 - Startup: OpenOffice.org 3.3 .lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe O4 - Global Startup: ASETRES.EXE O4 - Global Startup: Empowering Technology Launcher.lnk = ? O4 - Global Startup: McAfee Security Scan Plus.lnk = ? O4 - Global Startup: Sitecom Wireless Utility.lnk = C:\Program Files (x86)\Sitecom\Common\RaUI.exe O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files (x86)\WinZip\WZQKPICK.EXE O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 O8 - Extra context menu item: Download Web &Images with SoMud - C:\Program Files (x86)\SoMud\scripts\ie\images-url.html O8 - Extra context menu item: Download with SoMud - C:\Program Files (x86)\SoMud\scripts\ie\link-url.html O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} - O18 - Protocol: base64 - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files (x86)\BrowserCompanion\tdataprotocol.dll O18 - Protocol: chrome - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files (x86)\BrowserCompanion\tdataprotocol.dll O18 - Protocol: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll O18 - Protocol: prox - {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files (x86)\BrowserCompanion\tdataprotocol.dll O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll O20 - AppInit_DLLs: C:\PROGRA~2\WI371A~1\Datamngr\datamngr.dll C:\PROGRA~2\WI371A~1\Datamngr\IEBHO.dll O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll O23 - Service: McAfee Application Installer Cleanup (0148221350970653) (0148221350970653mcinstcleanup) - McAfee, Inc. - C:\Windows\TEMP\014822~1.EXE O23 - Service: ABBYY FineReader 9.0 Sprint Licensing Service (ABBYY.Licensing.FineReader.Sprint.9.0) - ABBYY - C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe O23 - Service: Acer HomeMedia Connect Service - CyberLink - C:\Program Files (x86)\Acer Arcade Live\Acer HomeMedia Connect\Kernel\DMS\CLMSServer.exe O23 - Service: ePerformance Service (AcerMemUsageCheckService) - Unknown owner - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing) O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing) O23 - Service: eDataSecurity Service - Egis Incorporated - C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe O23 - Service: eRecovery Service (eRecoveryService) - Acer Inc. - C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe O23 - Service: eSettings Service (eSettingsService) - Unknown owner - C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: HitmanPro Scheduler (HitmanProScheduler) - SurfRight B.V. - C:\Program Files\HitmanPro\hmpsched.exe O23 - Service: Hotspot Shield Service (hshld) - Unknown owner - C:\Program Files (x86)\Hotspot Shield\bin\openvpnas.exe O23 - Service: Hotspot Shield Routing Service (HssSrv) - AnchorFree Inc. - C:\Program Files (x86)\Hotspot Shield\HssWPR\hsssrv.exe O23 - Service: Hotspot Shield Tray Service (HssTrayService) - Unknown owner - C:\Program Files (x86)\Hotspot Shield\bin\HssTrayService.EXE O23 - Service: Hotspot Shield Monitoring Service (HssWd) - Unknown owner - C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe O23 - Service: McAfee SiteAdvisor Service - McAfee, Inc. - c:\PROGRA~2\mcafee\SITEAD~1\mcsacore.exe O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Ralink Registry Writer (RalinkRegistryWriter) - Ralink Technology, Corp. - C:\Program Files (x86)\Sitecom\Common\RegistryWriter.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\CyberLink\Shared Files\RichVideo.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: RoboSoft Database Server (RSDBServerService) - Rudenko Software - C:\Program Files (x86)\RoboSoft4\RSDBServer.exe O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: SiteAdvisor-service (SiteAdvisor Service) - Unknown owner - C:\Program Files (x86)\SiteAdvisor\6172\SAService.exe O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 24050 bytes
  23. InternetMarketer
    Hallo, Dit is mijn eerste bericht in dit forum, en ik hoop dat iemand mij kan helpen. Tijdens het bezoeken van verschillende internet sites krijg ik zeer regelmatig een bericht waardoor internet geblokkeerd wordt. Meestal krijg ik het volgende bericht: "Script: chrome://bbrs_002.tb/content/witapi.js:529" Soms ook deze: "Een script op deze pagina is bezig, of het reageert niet meer. U kunt het script nu stoppen, of u kunt verdergaan om te zien of het script zal worden voltooid." Weet iemand wat hier het probleem is en hoe ik dit kan oplossen? InternetMarketer
Logo

OVER ONS

PC Helpforum helpt GRATIS computergebruikers sinds juli 2006. Ons team geeft via het forum professioneel antwoord op uw vragen en probeert uw pc problemen zo snel mogelijk op te lossen. Word lid vandaag, plaats je vraag online en het PC Helpforum-team helpt u graag verder!

SITEMAP

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.