Ga naar inhoud

Delange81

Lid
  • Items

    4
  • Registratiedatum

  • Laatst bezocht

Berichten die geplaatst zijn door Delange81

  1. Hier het resultaat

    ComboFix 12-11-02.02 - Jeroen en Nynke 02-11-2012 13:04:27.1.2 - x86

    Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.31.1043.18.1013.367 [GMT 1:00]

    Gestart vanuit: c:\users\Jeroen en Nynke\Downloads\ComboFix.exe

    AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}

    SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}

    SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    .

    .

    (((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    C:\install.exe

    c:\users\Jeroen en Nynke\AppData\Roaming\Microsoft\Windows\Recent\Unlock.url

    c:\users\Jeroen en Nynke\Documents\~WRL0002.tmp

    .

    .

    (((((((((((((((((((( Bestanden Gemaakt van 2012-10-02 to 2012-11-02 ))))))))))))))))))))))))))))))

    .

    .

    2012-11-02 12:13 . 2012-11-02 12:13 -------- d-----w- c:\users\Jeroen en Nynke\AppData\Local\temp

    2012-11-02 12:13 . 2012-11-02 12:13 -------- d-----w- c:\users\Default\AppData\Local\temp

    2012-11-02 08:09 . 2012-10-12 05:56 6918632 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{14E7D872-76CA-4419-91CA-E9B89A1CA8BB}\mpengine.dll

    2012-11-01 18:00 . 2012-11-02 07:53 -------- d-----w- c:\program files\Mozilla Thunderbird

    2012-11-01 15:25 . 2012-09-29 18:54 22856 ----a-w- c:\windows\system32\drivers\mbam.sys

    2012-11-01 13:24 . 2012-11-01 13:24 -------- d-----w- c:\program files\CDBurnerXP

    2012-11-01 10:08 . 2012-11-01 10:08 388096 ----a-r- c:\users\Jeroen en Nynke\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

    2012-11-01 10:07 . 2012-11-01 10:07 -------- d-----w- c:\program files\Trend Micro

    2012-10-28 09:47 . 2012-10-28 09:47 -------- d-----w- c:\windows\Vista_32

    2012-10-28 09:20 . 2010-04-27 14:19 1214976 ----a-w- c:\windows\system32\drivers\athr.sys

    2012-10-28 08:32 . 2012-10-28 08:32 -------- d-----w- c:\users\Jeroen en Nynke\AppData\Local\WinZip

    2012-10-16 13:59 . 2012-10-31 18:20 -------- d-----w- c:\users\Jeroen en Nynke\AppData\Local\Thunderbird

    2012-10-16 13:59 . 2012-10-16 13:59 -------- d-----w- c:\users\Jeroen en Nynke\AppData\Roaming\Thunderbird

    2012-10-16 13:58 . 2012-11-02 09:33 -------- d-----w- c:\program files\Mozilla Maintenance Service

    2012-10-11 06:55 . 2012-06-02 00:02 985088 ----a-w- c:\windows\system32\crypt32.dll

    2012-10-11 06:55 . 2012-06-02 00:02 98304 ----a-w- c:\windows\system32\cryptnet.dll

    2012-10-11 06:55 . 2012-06-02 00:02 133120 ----a-w- c:\windows\system32\cryptsvc.dll

    2012-10-11 06:54 . 2012-08-24 15:53 172544 ----a-w- c:\windows\system32\wintrust.dll

    2012-10-11 06:54 . 2012-08-29 11:27 3602816 ----a-w- c:\windows\system32\ntkrnlpa.exe

    2012-10-11 06:54 . 2012-08-29 11:27 3550080 ----a-w- c:\windows\system32\ntoskrnl.exe

    2012-10-11 06:54 . 2012-09-13 13:28 2048 ----a-w- c:\windows\system32\tzres.dll

    .

    .

    .

    ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    2012-10-30 22:51 . 2012-03-15 17:15 361032 ----a-w- c:\windows\system32\drivers\aswSP.sys

    2012-10-30 22:51 . 2012-03-15 17:14 35928 ----a-w- c:\windows\system32\drivers\aswRdr.sys

    2012-10-30 22:51 . 2012-03-15 17:14 54232 ----a-w- c:\windows\system32\drivers\aswTdi.sys

    2012-10-30 22:51 . 2012-03-15 17:14 738504 ----a-w- c:\windows\system32\drivers\aswSnx.sys

    2012-10-30 22:51 . 2012-03-15 17:14 58680 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys

    2012-10-30 22:51 . 2012-03-15 17:15 21256 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys

    2012-10-30 22:51 . 2012-03-15 17:14 41224 ----a-w- c:\windows\avastSS.scr

    2012-10-30 22:50 . 2012-03-15 17:14 227648 ----a-w- c:\windows\system32\aswBoot.exe

    2012-08-24 15:53 . 2012-09-23 06:58 834048 ----a-w- c:\windows\system32\wininet.dll

    2012-08-24 14:07 . 2012-09-23 06:58 389632 ----a-w- c:\windows\system32\html.iec

    2012-08-24 13:41 . 2012-09-23 06:58 1383424 ----a-w- c:\windows\system32\mshtml.tlb

    .

    .

    ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

    REGEDIT4

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]

    @="{472083B0-C522-11CF-8763-00608CC02F24}"

    [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]

    2012-10-30 22:50 121528 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-10-30 4297136]

    .

    c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\

    WinZip Quick Pick.lnk - c:\program files\WinZip\WZQKPICK32.EXE [2012-10-18 685496]

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

    "EnableUIADesktopToggle"= 0 (0x0)

    .

    [HKLM\~\startupfolder\C:^Users^Jeroen en Nynke^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.3 .lnk]

    path=c:\users\Jeroen en Nynke\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3 .lnk

    backup=c:\windows\pss\OpenOffice.org 3.3 .lnk.Startup

    backupExtension=.Startup

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Camera Assistant Software]

    2007-02-13 07:30 405504 ----a-w- c:\program files\Camera Assistant Software for Toshiba\traybar.exe

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EEventManager]

    2009-12-03 09:12 976320 ----a-w- c:\program files\Epson Software\Event Manager\EEventManager.exe

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ehTray.exe]

    2008-01-19 07:33 125952 ----a-w- c:\windows\ehome\ehtray.exe

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EPSON SX218 Series]

    2009-09-14 07:00 200704 ----a-w- c:\windows\System32\spool\drivers\w32x86\3\E_FATIGDE.EXE

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]

    2010-11-09 17:42 136176 ----atw- c:\users\Jeroen en Nynke\AppData\Local\Google\Update\GoogleUpdate.exe

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]

    2008-06-18 13:01 166424 ----a-w- c:\windows\System32\hkcmd.exe

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]

    2008-06-18 13:01 141848 ----a-w- c:\windows\System32\igfxtray.exe

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes' Anti-Malware (reboot)]

    2012-09-29 18:54 981656 ----a-w- c:\program files\Malwarebytes' Anti-Malware\mbam.exe

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Persistence]

    2008-06-18 13:01 133656 ----a-w- c:\windows\System32\igfxpers.exe

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]

    2010-11-29 15:38 421888 ----a-w- c:\program files\QuickTime\QTTask.exe

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]

    2007-01-18 13:46 4349952 ----a-w- c:\windows\RtHDVCpl.exe

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]

    2009-04-11 06:28 1233920 ----a-w- c:\program files\Windows Sidebar\sidebar.exe

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Toshiba Registration]

    2007-02-19 14:00 571024 ----a-w- c:\program files\TOSHIBA\Registration\ToshibaRegistration.exe

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]

    2008-01-19 07:38 1008184 ----a-w- c:\program files\Windows Defender\MSASCui.exe

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]

    2008-01-19 07:33 202240 ----a-w- c:\program files\Windows Media Player\wmpnscfg.exe

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]

    "DisableMonitoring"=dword:00000001

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]

    "DisableMonitoring"=dword:00000001

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]

    "DisableMonitoring"=dword:00000001

    .

    Inhoud van de 'Gedeelde Taken' map

    .

    2012-11-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

    - c:\program files\Google\Update\GoogleUpdate.exe [2010-11-09 17:42]

    .

    2012-11-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

    - c:\program files\Google\Update\GoogleUpdate.exe [2010-11-09 17:42]

    .

    2012-11-02 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-226775539-4037053312-285300858-1000Core.job

    - c:\users\Jeroen en Nynke\AppData\Local\Google\Update\GoogleUpdate.exe [2011-04-11 17:42]

    .

    2012-11-02 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-226775539-4037053312-285300858-1000UA.job

    - c:\users\Jeroen en Nynke\AppData\Local\Google\Update\GoogleUpdate.exe [2011-04-11 17:42]

    .

    .

    ------- Bijkomende Scan -------

    .

    IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200

    TCP: DhcpNameServer = 192.168.2.254

    .

    - - - - ORPHANS VERWIJDERD - - - -

    .

    WebBrowser-{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)

    MSConfigStartUp-MSC - c:\program files\Microsoft Security Client\msseces.exe

    AddRemove-01_Simmental - c:\users\Jeroen en Nynke\Pictures\Telefoon\USB Drivers\01_Simmental\Uninstall.exe

    AddRemove-02_Siberian - c:\users\Jeroen en Nynke\Pictures\Telefoon\USB Drivers\02_Siberian\Uninstall.exe

    AddRemove-03_Swallowtail - c:\users\Jeroen en Nynke\Pictures\Telefoon\USB Drivers\03_Swallowtail\Uninstall.exe

    AddRemove-04_semseyite - c:\users\Jeroen en Nynke\Pictures\Telefoon\USB Drivers\04_semseyite\Uninstall.exe

    AddRemove-05_Sloan - c:\users\Jeroen en Nynke\Pictures\Telefoon\USB Drivers\05_Sloan\Uninstall.exe

    AddRemove-06_Spencer - c:\users\Jeroen en Nynke\Pictures\Telefoon\USB Drivers\06_Spencer\Uninstall.exe

    AddRemove-07_Schorl - c:\users\Jeroen en Nynke\Pictures\Telefoon\USB Drivers\07_Schorl\Uninstall.exe

    AddRemove-08_EMPChipset - c:\users\Jeroen en Nynke\Pictures\Telefoon\USB Drivers\08_EMPChipset\Uninstall.exe

    AddRemove-09_Hsp - c:\users\Jeroen en Nynke\Pictures\Telefoon\USB Drivers\09_Hsp\Uninstall.exe

    AddRemove-11_HSP_Plus_Default - c:\users\Jeroen en Nynke\Pictures\Telefoon\USB Drivers\11_HSP_Plus_Default\Uninstall.exe

    AddRemove-16_Shrewsbury - c:\users\Jeroen en Nynke\Pictures\Telefoon\USB Drivers\16_Shrewsbury\Uninstall.exe

    AddRemove-17_EMP_Chipset2 - c:\users\Jeroen en Nynke\Pictures\Telefoon\USB Drivers\17_EMP_Chipset2\Uninstall.exe

    AddRemove-18_Zinia_Serial_Driver - c:\users\Jeroen en Nynke\Pictures\Telefoon\USB Drivers\18_Zinia_Serial_Driver\Uninstall.exe

    AddRemove-19_VIA_driver - c:\users\Jeroen en Nynke\Pictures\Telefoon\USB Drivers\19_VIA_driver\Uninstall.exe

    AddRemove-20_NXP_Driver - c:\users\Jeroen en Nynke\Pictures\Telefoon\USB Drivers\20_NXP_Driver\Uninstall.exe

    AddRemove-21_Searsburg - c:\users\Jeroen en Nynke\Pictures\Telefoon\USB Drivers\21_Searsburg\Uninstall.exe

    AddRemove-22_WiBro_WiMAX - c:\users\Jeroen en Nynke\Pictures\Telefoon\USB Drivers\22_WiBro_WiMAX\Uninstall.exe

    AddRemove-24_flashusbdriver - c:\users\Jeroen en Nynke\Pictures\Telefoon\USB Drivers\24_flashusbdriver\Uninstall.exe

    AddRemove-25_escape - c:\users\Jeroen en Nynke\Pictures\Telefoon\USB Drivers\25_escape\Uninstall.exe

    .

    .

    .

    **************************************************************************

    .

    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, GMER - Rootkit Detector and Remover

    Rootkit scan 2012-11-02 13:13

    Windows 6.0.6002 Service Pack 2 NTFS

    .

    scannen van verborgen processen ...

    .

    scannen van verborgen autostart items ...

    .

    scannen van verborgen bestanden ...

    .

    Scan succesvol afgerond

    verborgen bestanden: 0

    .

    **************************************************************************

    .

    --------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

    .

    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

    @Denied: (A) (Users)

    @Denied: (A) (Everyone)

    @Allowed: (B 1 2 3 4 5) (S-1-5-20)

    "BlindDial"=dword:00000000

    "MSCurrentCountry"=dword:000000b5

    .

    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]

    @Denied: (A) (Users)

    @Denied: (A) (Everyone)

    @Allowed: (B 1 2 3 4 5) (S-1-5-20)

    "BlindDial"=dword:00000000

    .

    [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]

    @Denied: (A) (Users)

    @Denied: (A) (Everyone)

    @Allowed: (B 1 2 3 4 5) (S-1-5-20)

    "BlindDial"=dword:00000000

    .

    Voltooingstijd: 2012-11-02 13:16:15

    ComboFix-quarantined-files.txt 2012-11-02 12:16

    .

    Pre-Run: 73.813.549.056 bytes beschikbaar

    Post-Run: 73.741.905.920 bytes beschikbaar

    .

    - - End Of File - - CD5E5E4C8E612A427FAC7BDEE5DC2F7F

  2. Bedankt voor het kijken.

    Ik heb Malwarebytes' Anti-Malware gedraaid en alles was goed.

    Hier het resultaat van HiJack.Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 9:41:29, on 2-11-2012

    Platform: Windows Vista SP2 (WinNT 6.00.1906)

    MSIE: Internet Explorer v7.00 (7.00.6002.18005)

    Boot mode: Normal

    Running processes:

    C:\Windows\system32\Dwm.exe

    C:\Windows\Explorer.EXE

    C:\Windows\system32\taskeng.exe

    C:\Windows\system32\taskeng.exe

    C:\Program Files\IObit\Smart Defrag 2\SmartDefrag.exe

    C:\Program Files\AVAST Software\Avast\AvastUI.exe

    C:\Program Files\WinZip\WZQKPICK32.EXE

    C:\Program Files\Windows Media Player\wmpnscfg.exe

    C:\Users\Jeroen en Nynke\AppData\Local\Google\Chrome\Application\chrome.exe

    C:\Users\Jeroen en Nynke\AppData\Local\Google\Chrome\Application\chrome.exe

    C:\Users\Jeroen en Nynke\AppData\Local\Google\Chrome\Application\chrome.exe

    C:\Users\Jeroen en Nynke\Downloads\HijackThis.exe

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

    O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

    O2 - BHO: PNBHO - {FBAAD182-3C7A-4BC4-A5E9-207B8E0F02FD} - C:\Program Files\DeLorme\SendToGPS\PNPluginForIE.dll

    O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui

    O4 - HKCU\..\Run: [Google Update] "C:\Users\Jeroen en Nynke\AppData\Local\Google\Update\GoogleUpdate.exe" /c

    O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')

    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')

    O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')

    O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK32.EXE

    O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200

    O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll

    O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe

    O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

    O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

    O23 - Service: NitroPDFReaderDriverCreatorReadSpool (NitroReaderDriverReadSpool) - Nitro PDF Software - D:\Nitro PDF\Reader\NitroPDFReaderDriverService.exe

    O23 - Service: O2Micro Flash Memory Card Service (o2flash) - O2Micro International - C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe

    O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

    --

    End of file - 3160 bytes

  3. Zou iemand mij misschien kunnen helpen? Mijn laptop Toshiba P200 met Vista is zo traag.

    Ik heb al HiJackThis gedownload hier het resultaat:

    Ik hoor het graag.

    Groeten Jeroen

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 11:10:56, on 1-11-2012

    Platform: Windows Vista SP2 (WinNT 6.00.1906)

    MSIE: Internet Explorer v7.00 (7.00.6002.18005)

    Boot mode: Normal

    Running processes:

    C:\Windows\system32\Dwm.exe

    C:\Windows\Explorer.EXE

    C:\Windows\system32\taskeng.exe

    C:\Windows\system32\taskeng.exe

    C:\Program Files\IObit\Smart Defrag 2\SmartDefrag.exe

    C:\Program Files\AVAST Software\Avast\AvastUI.exe

    C:\Program Files\WinZip\WZQKPICK32.EXE

    C:\Program Files\Windows Media Player\wmpnscfg.exe

    C:\Users\Jeroen en Nynke\Downloads\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Zoeken

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

    R3 - URLSearchHook: (no name) - {472734EA-242A-422b-ADF8-83D1E48CC825} - (no file)

    R3 - URLSearchHook: (no name) - {3ad798d0-4642-4c55-bc14-cfe7dd19e0d1} - (no file)

    O1 - Hosts: ::1 localhost

    O2 - BHO: (no name) - {3ad798d0-4642-4c55-bc14-cfe7dd19e0d1} - (no file)

    O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

    O2 - BHO: (no name) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - (no file)

    O2 - BHO: PNBHO - {FBAAD182-3C7A-4BC4-A5E9-207B8E0F02FD} - C:\Program Files\DeLorme\SendToGPS\PNPluginForIE.dll

    O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)

    O3 - Toolbar: (no name) - {3ad798d0-4642-4c55-bc14-cfe7dd19e0d1} - (no file)

    O3 - Toolbar: (no name) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - (no file)

    O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll

    O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui

    O4 - HKLM\..\Run: [ROC_roc_ssl_v12] "C:\Program Files\AVG Secure Search\ROC_roc_ssl_v12.exe" / /PROMPT /CMPID=roc_ssl_v12

    O4 - HKCU\..\Run: [Google Update] "C:\Users\Jeroen en Nynke\AppData\Local\Google\Update\GoogleUpdate.exe" /c

    O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')

    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')

    O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')

    O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK32.EXE

    O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200

    O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000

    O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL

    O9 - Extra button: eBay - {C08CAF1D-C0A3-40D5-9970-06D067EAC017} - eBay, de wereldwijde online handelsplaats (file missing)

    O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll

    O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe

    O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

    O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

    O23 - Service: NitroPDFReaderDriverCreatorReadSpool (NitroReaderDriverReadSpool) - Nitro PDF Software - D:\Nitro PDF\Reader\NitroPDFReaderDriverService.exe

    O23 - Service: O2Micro Flash Memory Card Service (o2flash) - O2Micro International - C:\Program Files\O2Micro Flash Memory Card Driver\o2flash.exe

    O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

    --

    End of file - 4896 bytes

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.