Ga naar inhoud

sidehero

Lid
  • Items

    11
  • Registratiedatum

  • Laatst bezocht

sidehero's prestaties

  1. bedankt het is verder gelukt hopelijk komt het niet terug.
  2. gedaan en gelukt lijkt in eerste oogopslag weg te zijn.. alleen is dit ook weg?
  3. zelfs een systeem herstel loopt helemaal vast.. Na verschillende keren niet gelukt.. geeft een foutmelding na het proces dat het herstellen niet gebeurd is..
  4. Rapport staat hieronder. Helaas is het nog steeds niet opgelost dat savings sidekick komt nog steeds voor zodra ik het internet op ga, teksten waar ik met mijn muis overheen ga krijg ik meteen die rommel in een venstertje. Zat zelf te denken Wat nou als ik een systeem herstel doe na 1 maand geleden? Toen dat nog niet was.? Emsisoft Emergency Kit - Versie 3.0 Laatste Update: 5-11-2012 16:50:04 Scaninstellingen: Scantype: Diepe scan Objecten: Rootkits, Geheugen, Sporen, C:\ Detecteer riskware: Uit Scan archieven: Aan ADS Scan: Aan Bestandsextensiefilter: Uit Geavanceerde cache: Aan Directe schijftoegang: Uit Scan gestart: 5-11-2012 17:03:58 C:\Program Files (x86)\Wolfenstein - Enemy Territory\pb\htm\wa001382.htm -> (INFECTED_JS) Ontdekt: JS:Trojan.Gamburl.A ( Gescand 531536 Gevonden 1 Scan geëindigd: 5-11-2012 20:05:19 Scantijd: 3:01:21 C:\Program Files (x86)\Wolfenstein - Enemy Territory\pb\htm\wa001382.htm -> (INFECTED_JS) Verwijderd JS:Trojan.Gamburl.A ( Verwijderd 1
  5. nog steeds niet verdwenen lijkt me erg hardnekkig
  6. gedaan en dit is de log. ComboFix 12-11-02.02 - patrick 03-11-2012 12:53:13.4.2 - x64 Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.31.1043.18.4094.1882 [GMT 1:00] Gestart vanuit: c:\users\patrick\Downloads\ComboFix.exe gebruikte Opdracht switches :: c:\users\patrick\Desktop\CFScript.txt AV: Norton 360 Premier Edition *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF} FW: Norton 360 Premier Edition *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4} SP: Norton 360 Premier Edition *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . FILE :: "c:\program files (x86)\Common Files\Windows Live\.cache\f2d5322b1cdb44b04\bingbarsetup.exe" . . (((((((((((((((((((((((((((((((((( Andere Verwijderingen ))))))))))))))))))))))))))))))))))))))))))))))))) . . c:\program files (x86)\Common Files\Windows Live\.cache\f2d5322b1cdb44b04\bingbarsetup.exe c:\programdata\{32364CEA-7855-4A3C-B674-53D8E9B97936} c:\programdata\{32364CEA-7855-4A3C-B674-53D8E9B97936}\{D3742F82-1C1A-4DCC-ABBD-0E831C0185CC}.msi . . (((((((((((((((((((( Bestanden Gemaakt van 2012-10-03 to 2012-11-03 )))))))))))))))))))))))))))))) . . 2012-11-03 12:10 . 2012-11-03 12:10 -------- d-----w- c:\users\patrick\AppData\Local\temp 2012-11-03 12:10 . 2012-11-03 12:10 -------- d-----w- c:\users\Default\AppData\Local\temp 2012-11-02 16:15 . 2012-11-03 11:51 -------- d-----w- C:\32788R22FWJFW 2012-10-31 20:10 . 2012-10-31 20:10 -------- d-----w- c:\users\patrick\AppData\Roaming\Malwarebytes 2012-10-31 20:09 . 2012-10-31 20:09 -------- d-----w- c:\programdata\Malwarebytes 2012-10-31 20:09 . 2012-10-31 20:10 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware 2012-10-31 20:09 . 2012-09-29 18:54 25928 ----a-w- c:\windows\system32\drivers\mbam.sys 2012-10-31 19:41 . 2012-10-31 19:41 388096 ----a-r- c:\users\patrick\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2012-10-31 19:41 . 2012-10-31 19:41 -------- d-----w- c:\program files (x86)\Trend Micro 2012-10-27 14:04 . 2012-10-27 14:04 15712 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\ef2ff7eb1cdb44b03\MeshBetaRemover.exe 2012-10-27 14:04 . 2012-10-27 14:04 89944 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\ec65db6b1cdb44b02\DSETUP.dll 2012-10-27 14:04 . 2012-10-27 14:04 537432 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\ec65db6b1cdb44b02\DXSETUP.exe 2012-10-27 14:04 . 2012-10-27 14:04 1801048 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\ec65db6b1cdb44b02\dsetup32.dll 2012-10-21 15:01 . 2012-10-30 15:53 -------- d-----w- c:\program files (x86)\Mozilla Maintenance Service 2012-10-19 16:12 . 2012-10-19 16:12 -------- d-----w- c:\users\patrick\AppData\Roaming\TuneUp Software 2012-10-19 16:11 . 2012-10-19 16:12 -------- d-----w- c:\programdata\TuneUp Software 2012-10-10 15:00 . 2012-09-13 13:45 2048 ----a-w- c:\windows\system32\tzres.dll 2012-10-10 15:00 . 2012-09-13 13:28 2048 ----a-w- c:\windows\SysWow64\tzres.dll 2012-10-10 15:00 . 2012-08-24 16:07 218624 ----a-w- c:\windows\system32\wintrust.dll 2012-10-10 15:00 . 2012-08-24 15:53 172544 ----a-w- c:\windows\SysWow64\wintrust.dll 2012-10-10 14:59 . 2012-06-02 00:20 174592 ----a-w- c:\windows\system32\cryptsvc.dll 2012-10-10 14:59 . 2012-06-02 00:20 132096 ----a-w- c:\windows\system32\cryptnet.dll 2012-10-10 14:59 . 2012-06-02 00:20 1268736 ----a-w- c:\windows\system32\crypt32.dll 2012-10-10 14:59 . 2012-06-02 00:02 985088 ----a-w- c:\windows\SysWow64\crypt32.dll 2012-10-10 14:59 . 2012-06-02 00:02 98304 ----a-w- c:\windows\SysWow64\cryptnet.dll 2012-10-10 14:59 . 2012-06-02 00:02 133120 ----a-w- c:\windows\SysWow64\cryptsvc.dll 2012-10-10 14:59 . 2012-08-29 11:40 4699520 ----a-w- c:\windows\system32\ntoskrnl.exe 2012-10-09 15:58 . 2012-10-09 15:58 10220472 ----a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe . . . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-11-02 16:48 . 2010-05-20 18:52 268952 ----a-w- c:\windows\SysWow64\PnkBstrB.exe 2012-11-02 16:48 . 2010-05-20 18:52 268952 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr 2012-11-01 19:49 . 2010-05-20 18:52 268952 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0 2012-10-09 15:58 . 2012-03-31 08:55 696760 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2012-10-09 15:58 . 2012-03-03 12:22 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2012-09-27 22:18 . 2006-11-02 12:35 65309168 ----a-w- c:\windows\system32\mrt.exe 2012-08-31 15:10 . 2012-08-31 15:11 477168 ----a-w- c:\windows\SysWow64\npdeployJava1.dll 2012-08-31 15:10 . 2012-04-28 13:13 473072 ----a-w- c:\windows\SysWow64\deployJava1.dll 2012-08-21 11:01 . 2012-09-18 19:48 33240 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys 2012-08-21 11:01 . 2010-08-02 09:51 125872 ----a-w- c:\windows\system32\GEARAspi64.dll 2012-08-21 11:01 . 2010-08-02 09:51 106928 ----a-w- c:\windows\SysWow64\GEARAspi.dll . . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "WindowsWelcomeCenter"="oobefldr.dll" [2009-04-11 2153472] "SmpcSys"="c:\program files\PACKARD BELL\SetUpMyPC\SmpSys.exe" [2008-07-07 1038136] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 138240] "swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-05-18 68856] "IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2008-04-28 1828136] "DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2011-01-20 1305408] "uTorrent"="c:\program files (x86)\uTorrent\uTorrent.exe" [2012-06-17 880496] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "SmpcSys"="c:\program files\Packard Bell\SetupMyPC\SmpSys.exe" [2008-07-07 1038136] "TrueImageMonitor.exe"="c:\program files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe" [2009-11-13 5075776] "SSBkgdUpdate"="c:\program files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2003-09-29 155648] "OpwareSE4"="c:\program files (x86)\ScanSoft\OmniPageSE4.0\OpwareSE4.exe" [2006-03-21 69632] "WinampAgent"="c:\program files (x86)\Winamp\winampa.exe" [2011-03-22 74752] "CanonSolutionMenuEx"="c:\program files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE" [2010-04-02 1185112] "GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040] "AppleSyncNotifier"="c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2011-09-27 59240] "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-08-27 59280] "QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2012-04-18 421888] "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-07-31 38872] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-11 919008] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696] "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-09-09 421776] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2010-11-17 1207312] McAfee Security Scan Plus.lnk - c:\program files (x86)\McAfee Security Scan\3.0.207\SSScheduler.exe [2011-6-17 272528] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) "HideFastUserSwitching"= 0 (0x0) . [hkey_local_machine\software\Wow6432Node\microsoft\windows\currentversion\explorer\ShellExecuteHooks] . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux"=wdmaud.drv . S2 afcdpsrv;Acronis Nonstop Backup service;c:\program files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [2010-05-27 2475952] S3 afcdp;afcdp;c:\windows\system32\DRIVERS\afcdp.sys [2010-05-27 250464] . . HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs Themes ezSharedSvc . Inhoud van de 'Gedeelde Taken' map . 2012-11-03 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-31 15:58] . 2012-11-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-07-25 16:56] . 2012-11-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-07-25 16:56] . 2012-11-02 c:\windows\Tasks\NUSchedule.job - c:\program files (x86)\Norton Utilities 15\nu.exe [2012-07-25 09:17] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NVRaidService"="c:\windows\system32\nvraidservice.exe" [2008-08-18 333344] "RtHDVCpl"="RAVCpl64.exe" [2008-09-18 6495264] "Skytel"="Skytel.exe" [2008-09-18 1833504] "FujiKeyboard"="c:\acer\Preload\Autorun\DRV\FUJI Keyboard\ABoard.exe" [2008-09-18 79416] "Setresolution"="c:\acer\config\1920X1080.cmd" [bU] "Acronis Scheduler2Service"="c:\program files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe" [2009-11-13 357304] "Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2009-06-17 130576] "CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2010-03-25 2726728] . ------- Bijkomende Scan ------- . uStart Page = hxxp://www.google.com uLocal Page = c:\windows\system32\blank.htm mStart Page = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0413&s=1&o=vp64&d=0510&m=imedia_d7000_nl mDefault_Page_URL = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0413&s=1&o=vp64&d=0510&m=imedia_d7000_nl mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = *.local IE: E&xporteren naar Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000 IE: Easy-WebPrint Afdrukken - c:\program files (x86)\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html IE: Easy-WebPrint Afdrukvoorbeeld - c:\program files (x86)\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html IE: Easy-WebPrint Toevoegen aan afdruklijst - c:\program files (x86)\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html IE: Easy-WebPrint Versneld afdrukken - c:\program files (x86)\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html TCP: DhcpNameServer = 212.54.40.25 212.54.35.25 FF - ProfilePath - c:\users\patrick\AppData\Roaming\Mozilla\Firefox\Profiles\opnn3pjg.default\ FF - prefs.js: browser.startup.homepage - Grepolis - De browsergame in de klassieke Oudheid FF - ExtSQL: 2012-10-08 16:47; {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}; c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.2.0.9\coFFPlgn FF - ExtSQL: 2012-10-27 16:07; crossriderapp5060@crossrider.com; c:\users\patrick\AppData\Roaming\Mozilla\Firefox\Profiles\opnn3pjg.default\extensions\crossriderapp5060@crossrider.com FF - ExtSQL: !HIDDEN! 2010-05-20 03:03; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension . - - - - ORPHANS VERWIJDERD - - - - . AddRemove-Adobe Shockwave Player - c:\windows\System32\Macromed\SHOCKW~1\UNWISE.EXE AddRemove-AutoHotkey - c:\program files (x86)\AutoHotkey\uninst.exe AddRemove-Easy-WebPrint - c:\windows\IsUn0413.exe AddRemove-EasyBits Magic Desktop - c:\windows\system32\ezMDUninstall.exe . . . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\N360] "ImagePath"="\"c:\program files (x86)\Norton 360 Premier Edition\Engine\6.4.0.9\ccSvcHst.exe\" /s \"N360\" /m \"c:\program files (x86)\Norton 360 Premier Edition\Engine\6.4.0.9\diMaster.dll\" /prefetch:1" . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @SACL= @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Control] @SACL= . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\EnableFullPage] @SACL= . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Implemented Categories] @SACL= . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @SACL= @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9f.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @SACL= @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @SACL= @="ShockwaveFlash.ShockwaveFlash.9" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Programmable] @SACL= . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @SACL= @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9f.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @SACL= @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @SACL= @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @SACL= @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @SACL= @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Control] @SACL= . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @SACL= @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9f.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @SACL= @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Programmable] @SACL= . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @SACL= @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9f.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @SACL= @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @SACL= @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @SACL= @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}] @Denied: (A 2) (Everyone) @SACL= @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil9f.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}\Elevation] @SACL= "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}\LocalServer32] @SACL= @="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil9f.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}\TypeLib] @SACL= @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}] @Denied: (A 2) (Everyone) @SACL= @="IFlashBroker" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\ProxyStubClsid32] @SACL= @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\TypeLib] @SACL= @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}] @Denied: (A 2) (Everyone) @SACL= . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0] @SACL= @="Shockwave Flash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}] @Denied: (A 2) (Everyone) @SACL= @="" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0] @SACL= @="FlashBroker" . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes] "SymbolicLinkValue"=hex(6):5c,00,52,00,45,00,47,00,49,00,53,00,54,00,52,00,59, 00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\ . Voltooingstijd: 2012-11-03 13:13:00 ComboFix-quarantined-files.txt 2012-11-03 12:12 ComboFix2.txt 2012-11-03 11:46 ComboFix3.txt 2012-11-02 16:40 ComboFix4.txt 2012-11-01 18:57 . Pre-Run: 299.313.848.320 bytes beschikbaar Post-Run: 298.170.437.632 bytes beschikbaar . - - End Of File - - 5AC49DBA336398365E6C2DEC65A86DF7
  7. ComboFix 12-11-02.02 - patrick 02-11-2012 17:26:25.2.2 - x64 Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.31.1043.18.4094.2084 [GMT 1:00] Gestart vanuit: c:\users\patrick\Downloads\ComboFix.exe AV: Norton 360 Premier Edition *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF} FW: Norton 360 Premier Edition *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4} SP: Norton 360 Premier Edition *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((( Bestanden Gemaakt van 2012-10-02 to 2012-11-02 )))))))))))))))))))))))))))))) . . 2012-11-02 16:37 . 2012-11-02 16:37 -------- d-----w- c:\users\patrick\AppData\Local\temp 2012-11-02 16:37 . 2012-11-02 16:37 -------- d-----w- c:\users\Default\AppData\Local\temp 2012-11-02 16:15 . 2012-11-02 16:22 -------- d-----w- C:\32788R22FWJFW 2012-10-31 20:10 . 2012-10-31 20:10 -------- d-----w- c:\users\patrick\AppData\Roaming\Malwarebytes 2012-10-31 20:09 . 2012-10-31 20:09 -------- d-----w- c:\programdata\Malwarebytes 2012-10-31 20:09 . 2012-10-31 20:10 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware 2012-10-31 20:09 . 2012-09-29 18:54 25928 ----a-w- c:\windows\system32\drivers\mbam.sys 2012-10-31 19:41 . 2012-10-31 19:41 388096 ----a-r- c:\users\patrick\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2012-10-31 19:41 . 2012-10-31 19:41 -------- d-----w- c:\program files (x86)\Trend Micro 2012-10-27 14:04 . 2012-10-27 14:04 7450888 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\f2d5322b1cdb44b04\bingbarsetup.exe 2012-10-27 14:04 . 2012-10-27 14:04 15712 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\ef2ff7eb1cdb44b03\MeshBetaRemover.exe 2012-10-27 14:04 . 2012-10-27 14:04 89944 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\ec65db6b1cdb44b02\DSETUP.dll 2012-10-27 14:04 . 2012-10-27 14:04 537432 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\ec65db6b1cdb44b02\DXSETUP.exe 2012-10-27 14:04 . 2012-10-27 14:04 1801048 ----a-w- c:\program files (x86)\Common Files\Windows Live\.cache\ec65db6b1cdb44b02\dsetup32.dll 2012-10-21 15:01 . 2012-10-30 15:53 -------- d-----w- c:\program files (x86)\Mozilla Maintenance Service 2012-10-19 16:12 . 2012-10-19 16:12 -------- d-----w- c:\users\patrick\AppData\Roaming\TuneUp Software 2012-10-19 16:11 . 2012-10-19 16:12 -------- d-----w- c:\programdata\TuneUp Software 2012-10-19 16:11 . 2012-10-19 16:11 -------- d-sh--w- c:\programdata\{32364CEA-7855-4A3C-B674-53D8E9B97936} 2012-10-10 15:00 . 2012-09-13 13:45 2048 ----a-w- c:\windows\system32\tzres.dll 2012-10-10 15:00 . 2012-09-13 13:28 2048 ----a-w- c:\windows\SysWow64\tzres.dll 2012-10-10 15:00 . 2012-08-24 16:07 218624 ----a-w- c:\windows\system32\wintrust.dll 2012-10-10 15:00 . 2012-08-24 15:53 172544 ----a-w- c:\windows\SysWow64\wintrust.dll 2012-10-10 14:59 . 2012-06-02 00:20 174592 ----a-w- c:\windows\system32\cryptsvc.dll 2012-10-10 14:59 . 2012-06-02 00:20 132096 ----a-w- c:\windows\system32\cryptnet.dll 2012-10-10 14:59 . 2012-06-02 00:20 1268736 ----a-w- c:\windows\system32\crypt32.dll 2012-10-10 14:59 . 2012-06-02 00:02 985088 ----a-w- c:\windows\SysWow64\crypt32.dll 2012-10-10 14:59 . 2012-06-02 00:02 98304 ----a-w- c:\windows\SysWow64\cryptnet.dll 2012-10-10 14:59 . 2012-06-02 00:02 133120 ----a-w- c:\windows\SysWow64\cryptsvc.dll 2012-10-10 14:59 . 2012-08-29 11:40 4699520 ----a-w- c:\windows\system32\ntoskrnl.exe 2012-10-09 15:58 . 2012-10-09 15:58 10220472 ----a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe . . . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-11-01 19:49 . 2010-05-20 18:52 268952 ----a-w- c:\windows\SysWow64\PnkBstrB.exe 2012-11-01 19:49 . 2010-05-20 18:52 268952 ----a-w- c:\windows\SysWow64\PnkBstrB.xtr 2012-10-31 17:33 . 2010-05-20 18:52 268952 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0 2012-10-09 15:58 . 2012-03-31 08:55 696760 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2012-10-09 15:58 . 2012-03-03 12:22 73656 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2012-09-27 22:18 . 2006-11-02 12:35 65309168 ----a-w- c:\windows\system32\mrt.exe 2012-08-31 15:10 . 2012-08-31 15:11 477168 ----a-w- c:\windows\SysWow64\npdeployJava1.dll 2012-08-31 15:10 . 2012-04-28 13:13 473072 ----a-w- c:\windows\SysWow64\deployJava1.dll 2012-08-21 11:01 . 2012-09-18 19:48 33240 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys 2012-08-21 11:01 . 2010-08-02 09:51 125872 ----a-w- c:\windows\system32\GEARAspi64.dll 2012-08-21 11:01 . 2010-08-02 09:51 106928 ----a-w- c:\windows\SysWow64\GEARAspi.dll . . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "WindowsWelcomeCenter"="oobefldr.dll" [2009-04-11 2153472] "SmpcSys"="c:\program files\PACKARD BELL\SetUpMyPC\SmpSys.exe" [2008-07-07 1038136] "ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 138240] "swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-05-18 68856] "IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe" [2008-04-28 1828136] "DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2011-01-20 1305408] "uTorrent"="c:\program files (x86)\uTorrent\uTorrent.exe" [2012-06-17 880496] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "SmpcSys"="c:\program files\Packard Bell\SetupMyPC\SmpSys.exe" [2008-07-07 1038136] "TrueImageMonitor.exe"="c:\program files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe" [2009-11-13 5075776] "SSBkgdUpdate"="c:\program files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2003-09-29 155648] "OpwareSE4"="c:\program files (x86)\ScanSoft\OmniPageSE4.0\OpwareSE4.exe" [2006-03-21 69632] "WinampAgent"="c:\program files (x86)\Winamp\winampa.exe" [2011-03-22 74752] "CanonSolutionMenuEx"="c:\program files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE" [2010-04-02 1185112] "GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040] "AppleSyncNotifier"="c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2011-09-27 59240] "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-08-27 59280] "QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2012-04-18 421888] "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-07-31 38872] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-07-11 919008] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696] "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2012-09-09 421776] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2010-11-17 1207312] McAfee Security Scan Plus.lnk - c:\program files (x86)\McAfee Security Scan\3.0.207\SSScheduler.exe [2011-6-17 272528] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "EnableUIADesktopToggle"= 0 (0x0) "HideFastUserSwitching"= 0 (0x0) . [hkey_local_machine\software\Wow6432Node\microsoft\windows\currentversion\explorer\ShellExecuteHooks] . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux"=wdmaud.drv . S2 afcdpsrv;Acronis Nonstop Backup service;c:\program files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [2010-05-27 2475952] S3 afcdp;afcdp;c:\windows\system32\DRIVERS\afcdp.sys [2010-05-27 250464] . . HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs Themes ezSharedSvc . Inhoud van de 'Gedeelde Taken' map . 2012-11-02 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-31 15:58] . 2012-11-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-07-25 16:56] . 2012-11-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-07-25 16:56] . 2012-11-01 c:\windows\Tasks\NUSchedule.job - c:\program files (x86)\Norton Utilities 15\nu.exe [2012-07-25 09:17] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NVRaidService"="c:\windows\system32\nvraidservice.exe" [2008-08-18 333344] "RtHDVCpl"="RAVCpl64.exe" [2008-09-18 6495264] "Skytel"="Skytel.exe" [2008-09-18 1833504] "FujiKeyboard"="c:\acer\Preload\Autorun\DRV\FUJI Keyboard\ABoard.exe" [2008-09-18 79416] "Setresolution"="c:\acer\config\1920X1080.cmd" [bU] "Acronis Scheduler2Service"="c:\program files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe" [2009-11-13 357304] "Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2009-06-17 130576] "CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2010-03-25 2726728] . ------- Bijkomende Scan ------- . uStart Page = hxxp://www.google.com uLocal Page = c:\windows\system32\blank.htm mStart Page = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0413&s=1&o=vp64&d=0510&m=imedia_d7000_nl mDefault_Page_URL = hxxp://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0413&s=1&o=vp64&d=0510&m=imedia_d7000_nl mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = *.local IE: E&xporteren naar Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000 IE: Easy-WebPrint Afdrukken - c:\program files (x86)\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html IE: Easy-WebPrint Afdrukvoorbeeld - c:\program files (x86)\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html IE: Easy-WebPrint Toevoegen aan afdruklijst - c:\program files (x86)\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html IE: Easy-WebPrint Versneld afdrukken - c:\program files (x86)\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html TCP: DhcpNameServer = 212.54.40.25 212.54.35.25 FF - ProfilePath - c:\users\patrick\AppData\Roaming\Mozilla\Firefox\Profiles\opnn3pjg.default\ FF - prefs.js: browser.startup.homepage - Grepolis - De browsergame in de klassieke Oudheid FF - ExtSQL: 2012-10-08 16:47; {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}; c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_6.2.0.9\coFFPlgn FF - ExtSQL: 2012-10-27 16:07; crossriderapp5060@crossrider.com; c:\users\patrick\AppData\Roaming\Mozilla\Firefox\Profiles\opnn3pjg.default\extensions\crossriderapp5060@crossrider.com FF - ExtSQL: !HIDDEN! 2010-05-20 03:03; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension . - - - - ORPHANS VERWIJDERD - - - - . AddRemove-Adobe Shockwave Player - c:\windows\System32\Macromed\SHOCKW~1\UNWISE.EXE AddRemove-AutoHotkey - c:\program files (x86)\AutoHotkey\uninst.exe AddRemove-Easy-WebPrint - c:\windows\IsUn0413.exe AddRemove-EasyBits Magic Desktop - c:\windows\system32\ezMDUninstall.exe . . . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\N360] "ImagePath"="\"c:\program files (x86)\Norton 360 Premier Edition\Engine\6.4.0.9\ccSvcHst.exe\" /s \"N360\" /m \"c:\program files (x86)\Norton 360 Premier Edition\Engine\6.4.0.9\diMaster.dll\" /prefetch:1" . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @SACL= @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Control] @SACL= . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\EnableFullPage] @SACL= . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Implemented Categories] @SACL= . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @SACL= @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9f.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @SACL= @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @SACL= @="ShockwaveFlash.ShockwaveFlash.9" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Programmable] @SACL= . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @SACL= @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9f.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @SACL= @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @SACL= @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @SACL= @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @SACL= @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Control] @SACL= . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @SACL= @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9f.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @SACL= @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Programmable] @SACL= . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @SACL= @="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash9f.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @SACL= @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @SACL= @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @SACL= @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}] @Denied: (A 2) (Everyone) @SACL= @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil9f.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}\Elevation] @SACL= "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}\LocalServer32] @SACL= @="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil9f.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D4304BCF-B8E9-4B35-BEA0-DC5B522670C2}\TypeLib] @SACL= @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}] @Denied: (A 2) (Everyone) @SACL= @="IFlashBroker" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\ProxyStubClsid32] @SACL= @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2E4BB6BE-A75F-4DC0-9500-68203655A2C4}\TypeLib] @SACL= @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}] @Denied: (A 2) (Everyone) @SACL= . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{D27CDB6B-AE6D-11CF-96B8-444553540000}\1.0] @SACL= @="Shockwave Flash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}] @Denied: (A 2) (Everyone) @SACL= @="" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\TypeLib\{FAB3E735-69C7-453B-A446-B6823C6DF1C9}\1.0] @SACL= @="FlashBroker" . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes] "SymbolicLinkValue"=hex(6):5c,00,52,00,45,00,47,00,49,00,53,00,54,00,52,00,59, 00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\ . Voltooingstijd: 2012-11-02 17:40:09 ComboFix-quarantined-files.txt 2012-11-02 16:40 ComboFix2.txt 2012-11-01 18:57 . Pre-Run: 301.765.386.240 bytes beschikbaar Post-Run: 300.670.132.224 bytes beschikbaar . - - End Of File - - 75FE7C29E019DC752DE63F8EA853D333
  8. Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 21:38:06, on 1-11-2012 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v9.00 (9.00.8112.16450) Boot mode: Normal Running processes: C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe C:\Program Files (x86)\Norton Utilities 15\Tools\Disk Doctor\DiskDoctorSrvProxy.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files (x86)\Norton Utilities 15\Tools\SpeedDisk\SpeedDiskSrvProxy.exe C:\ACER\Preload\Autorun\DRV\FUJI Keyboard\ABoard.exe C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe C:\Program Files (x86)\uTorrent\uTorrent.exe C:\ACER\Preload\Autorun\DRV\FUJI Keyboard\AOSD.exe C:\Program Files (x86)\McAfee Security Scan\3.0.207\SSScheduler.exe C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe C:\Program Files (x86)\ScanSoft\OmniPageSE4.0\OpWareSE4.exe C:\Program Files (x86)\Winamp\winampa.exe C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\iTunes\iTunesHelper.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = iGoogle Redirect R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file) O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360 Premier Edition\Engine\6.4.0.9\coIEPlg.dll O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files (x86)\Canon\Easy-WebPrint\EWPBrowseLoader.dll O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360 Premier Edition\Engine\6.4.0.9\IPS\IPSBHO.DLL O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files (x86)\Canon\Easy-WebPrint\Toolband.dll O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360 Premier Edition\Engine\6.4.0.9\coIEPlg.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [smpcSys] C:\Program Files\Packard Bell\SetupMyPC\SmpSys.exe O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe O4 - HKLM\..\Run: [sSBkgdUpdate] "C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files (x86)\ScanSoft\OmniPageSE4.0\OpwareSE4.exe" O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe" O4 - HKLM\..\Run: [CanonSolutionMenuEx] "C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE" /logon O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter O4 - HKCU\..\Run: [smpcSys] C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [indxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020 O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun O4 - HKCU\..\Run: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe" /MINIMIZED O4 - Global Startup: Logitech SetPoint.lnk = ? O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files (x86)\McAfee Security Scan\3.0.207\SSScheduler.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Easy-WebPrint Afdrukken - res://C:\Program Files (x86)\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html O8 - Extra context menu item: Easy-WebPrint Afdrukvoorbeeld - res://C:\Program Files (x86)\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html O8 - Extra context menu item: Easy-WebPrint Toevoegen aan afdruklijst - res://C:\Program Files (x86)\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html O8 - Extra context menu item: Easy-WebPrint Versneld afdrukken - res://C:\Program Files (x86)\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll O23 - Service: Acronis Scheduler2Service (AcrSch2Svc) - Acronis - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) - Unknown owner - C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: Acronis Nonstop Backup service (afcdpsrv) - Acronis - C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing) O23 - Service: Norton Disk Doctor Service (DiskDoctorService) - Symantec Corporation - C:\Program Files (x86)\Norton Utilities 15\Tools\Disk Doctor\DiskDoctorSrv.exe O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\PACKARDBELL\Packard Bell Recovery Management\Service\ETService.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - C:\Windows\SYSTEM32\HidService.exe O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logitech\Bluetooth\LBTServ.exe O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files (x86)\McAfee Security Scan\3.0.207\McCHSvc.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files (x86)\Norton 360 Premier Edition\Engine\6.4.0.9\ccSvcHst.exe O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe O23 - Service: ForceWare IP service (nSvcIp) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\SysWOW64\IoctlSvc.exe O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: Norton SpeedDisk Service (SpeedDiskService) - Symantec Corporation - C:\Program Files (x86)\Norton Utilities 15\Tools\SpeedDisk\SpeedDiskSrv.exe O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: UsbClientService - Unknown owner - C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 15403 bytes
  9. hierbij de update.. helaas niets opgelost nog. Malwarebytes Anti-Malware (-evaluatieversie-) 1.65.1.1000 Malwarebytes : Free anti-malware download Databaseversie: v2012.11.01.07 Windows Vista Service Pack 2 x64 NTFS Internet Explorer 9.0.8112.16421 patrick :: PC_VAN_PATRICK [administrator] Realtime bescherming: Ingeschakeld 1-11-2012 20:34:52 mbam-log-2012-11-01 (20-34-52).txt Scantype: Snelle scan Ingeschakelde scanopties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM Uitgeschakelde scanopties: P2P Objecten gescand: 205674 Verstreken tijd: 2 minuut/minuten, 4 seconde(n) Geheugenprocessen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Geheugenmodulen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Registersleutels gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Registerwaarden gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Registerdata gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Mappen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Bestanden gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) (einde)
  10. een rapportje van wat ik las wat de volgende actie zou moeten zijn. # AdwCleaner v2.006 - Verslag gemaakt op 01/11/2012 om 19:11:08 # Geactualiseerd op 30/10/2012 door Xplode # Besturingssysteem : Windows Vista Home Premium Service Pack 2 (64 bits) # Gebruiker : patrick - PC_VAN_PATRICK # Opstarten Modus : Normale modus # Gelanceerd vanaf : C:\Users\patrick\Downloads\adwcleaner.exe # Optie [Verwijderen] ***** [Diensten] ***** ***** [Files / Mappen] ***** File Verwijdert : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnu.dll File Verwijdert : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnu.xpt File Verwijdert : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnupdater2.dll File Verwijdert : C:\Program Files (x86)\Mozilla Firefox\plugins\npdnupdater2.xpt File Verwijdert : C:\Program Files (x86)\Mozilla Firefox\searchplugins\avg-secure-search.xml File Verwijdert : C:\Users\patrick\AppData\Roaming\Mozilla\Firefox\Profiles\opnn3pjg.default\searchplugins\daemon-search.xml Verwijdert bij het opstarten : C:\Program Files (x86)\Common Files\Software Update Utility Verwijdert bij het opstarten : C:\Program Files (x86)\Winamp Toolbar Verwijdert bij het opstarten : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PriceGong Verwijdert bij het opstarten : C:\ProgramData\Winamp Toolbar Verwijdert bij het opstarten : C:\Users\patrick\AppData\Local\Savings Sidekick Verwijdert bij het opstarten : C:\Users\patrick\AppData\Local\Winamp Toolbar Verwijdert bij het opstarten : C:\Users\patrick\AppData\Roaming\Mozilla\Firefox\Profiles\opnn3pjg.default\Conduit Verwijdert bij het opstarten : C:\Users\patrick\AppData\Roaming\Mozilla\Firefox\Profiles\opnn3pjg.default\ConduitCommon Verwijdert bij het opstarten : C:\Users\patrick\AppData\Roaming\Mozilla\Firefox\Profiles\opnn3pjg.default\ConduitEngine Verwijdert bij het opstarten : C:\Users\patrick\AppData\Roaming\Mozilla\Firefox\Profiles\opnn3pjg.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f} Verwijdert bij het opstarten : C:\Users\patrick\AppData\Roaming\Mozilla\Firefox\Profiles\opnn3pjg.default\extensions\{8A9386B4-E958-4c4c-ADF4-8F26DB3E4829} Verwijdert bij het opstarten : C:\Users\patrick\AppData\Roaming\Mozilla\Firefox\Profiles\opnn3pjg.default\extensions\engine@conduit.com Verwijdert bij het opstarten : C:\Users\patrick\AppData\Roaming\Mozilla\Firefox\Profiles\opnn3pjg.default\WinampToolbarData Verwijdert bij het opstarten : C:\Users\patrick\AppData\Roaming\OpenCandy ***** [Register] ***** Sleutel Verwijdert : HKCU\Software\AppDataLow\Software Sleutel Verwijdert : HKCU\Software\AVG Secure Search Sleutel Verwijdert : HKCU\Software\Cr_Installer Sleutel Verwijdert : HKCU\Software\IGearSettings Sleutel Verwijdert : HKCU\Software\InstalledBrowserExtensions Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\SoftwareUpdUtility Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Winamp Toolbar Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1631550F-191D-4826-B069-D9439253D926} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{32099AAC-C132-4136-9E9A-4E364A424E17} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} Sleutel Verwijdert : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Winamp Toolbar Sleutel Verwijdert : HKCU\Software\Softonic Sleutel Verwijdert : HKCU\Software\Winamp Toolbar Sleutel Verwijdert : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E} Sleutel Verwijdert : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233} Sleutel Verwijdert : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4FC7-90CC-5EA0ABBE9EB8} Sleutel Verwijdert : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4DC8-84D1-F5D7BAF2DB0C} Sleutel Verwijdert : HKLM\Software\AVG Secure Search Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{6C259840-5BA8-46E6-8ED1-EF3BA47D8BA1} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{835315FC-1BF6-4CA9-80CD-F6C158D40692} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\{B27D9527-3762-4D71-963D-FB7A94FDD678} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\dnu.EXE Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\PriceGongIE.DLL Sleutel Verwijdert : HKLM\SOFTWARE\Classes\AppID\winamptbServer.exe Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CrossriderApp0005060.BHO Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CrossriderApp0005060.Sandbox Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CrossriderApp0005060.Sandbox.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\dnUpdate Sleutel Verwijdert : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser Sleutel Verwijdert : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUIBrowser.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController Sleutel Verwijdert : HKLM\SOFTWARE\Classes\dnUpdater.DownloadUpdController.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF Sleutel Verwijdert : HKLM\SOFTWARE\Classes\PriceFactorIE.PriceGongBHO Sleutel Verwijdert : HKLM\SOFTWARE\Classes\PriceFactorIE.PriceGongBHO.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\PriceGongIE.PriceGongCtrl Sleutel Verwijdert : HKLM\SOFTWARE\Classes\PriceGongIE.PriceGongCtrl.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\toolband.eb_explorerbar Sleutel Verwijdert : HKLM\SOFTWARE\Classes\toolband.eb_explorerbar.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\toolband.fh_hookeventsink Sleutel Verwijdert : HKLM\SOFTWARE\Classes\toolband.fh_hookeventsink.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\toolband.ipm_printlistitem Sleutel Verwijdert : HKLM\SOFTWARE\Classes\toolband.ipm_printlistitem.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\toolband.pm_dialogeventshandler Sleutel Verwijdert : HKLM\SOFTWARE\Classes\toolband.pm_dialogeventshandler.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\toolband.pm_launcher Sleutel Verwijdert : HKLM\SOFTWARE\Classes\toolband.pm_launcher.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\toolband.pm_printmanager Sleutel Verwijdert : HKLM\SOFTWARE\Classes\toolband.pm_printmanager.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\toolband.pr_bindstatuscallback Sleutel Verwijdert : HKLM\SOFTWARE\Classes\toolband.pr_bindstatuscallback.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\toolband.pr_cancelbuttoneventhandler Sleutel Verwijdert : HKLM\SOFTWARE\Classes\toolband.pr_cancelbuttoneventhandler.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\toolband.pr_printdialogcallback Sleutel Verwijdert : HKLM\SOFTWARE\Classes\toolband.pr_printdialogcallback.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\toolband.tbtoolband Sleutel Verwijdert : HKLM\SOFTWARE\Classes\toolband.tbtoolband.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\toolband.useroptions Sleutel Verwijdert : HKLM\SOFTWARE\Classes\toolband.useroptions.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{507591C2-2F4E-46A7-92D6-E6CFF82E5F26} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{538CD77C-BFDD-49B0-9562-77419CAB89D1} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{8B3372D0-09F0-41A5-8D9B-134E148672FB} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\TypeLib\{92380354-381A-471F-BE2E-DD9ACD9777EA} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\WinampTb.AOLTBSearch Sleutel Verwijdert : HKLM\SOFTWARE\Classes\WinampTb.AOLTBSearch.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\WinampTb.AOLToolBand Sleutel Verwijdert : HKLM\SOFTWARE\Classes\WinampTb.AOLToolBand.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\WinampTb.Downloader Sleutel Verwijdert : HKLM\SOFTWARE\Classes\WinampTb.Downloader.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\WinampTb.ToolbarInfo Sleutel Verwijdert : HKLM\SOFTWARE\Classes\WinampTb.ToolbarInfo.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\WinampTb.ToolbarParams Sleutel Verwijdert : HKLM\SOFTWARE\Classes\WinampTb.ToolbarParams.1 Sleutel Verwijdert : HKLM\SOFTWARE\Classes\WinampTbServer.AolToolbarHelper Sleutel Verwijdert : HKLM\SOFTWARE\Classes\WinampTbServer.AolToolbarHelper.1 Sleutel Verwijdert : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96} Sleutel Verwijdert : HKLM\Software\Winamp Toolbar Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{1631550F-191D-4826-B069-D9439253D926} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{22222222-2222-2222-2222-220022502260} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{57BCA5FA-5DBB-45A2-B558-1755C3F6253B} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{6EF4E91D-DDD5-4478-BCA7-DA04435934C0} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{841FD004-57A2-4B49-BBDB-5897394619DB} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{B38D6EDE-390B-4620-8365-29E16459EBDA} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{D2A2595C-4FE4-4315-AA9B-19DBD6271B71} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E1164984-B567-47BD-A7FF-240C2594404A} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E15A9BFD-D16D-496D-8222-44CADF316E70} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{F20F11FD-203E-45A9-B7BB-AFC1B4FEA7A6} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FE178B09-C8AA-4734-804D-1849BCCA0C29} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\bkomkajifikmkfnjgphkjcfeepbnojok Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dhdepfaagokllfmhfbcfmocaeigmoebo Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{EEE7E0A3-AE64-4DC8-84D1-F5D7BAF2DB0C} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1631550F-191D-4826-B069-D9439253D926} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{25CEE8EC-5730-41BC-8B58-22DDC8AB8C20} Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\PriceGong Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdUtility Sleutel Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Winamp Toolbar Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{1631550F-191D-4826-B069-D9439253D926} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{57BCA5FA-5DBB-45A2-B558-1755C3F6253B} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{6EF4E91D-DDD5-4478-BCA7-DA04435934C0} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{7B089B94-D1DC-4C6B-87E1-8156E22C1D96} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{B38D6EDE-390B-4620-8365-29E16459EBDA} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{D2A2595C-4FE4-4315-AA9B-19DBD6271B71} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{E15A9BFD-D16D-496D-8222-44CADF316E70} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{F20F11FD-203E-45A9-B7BB-AFC1B4FEA7A6} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\CLSID\{FE178B09-C8AA-4734-804D-1849BCCA0C29} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{0F54B66A-21CF-4548-AE59-A6B83EE6676F} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{51A971CA-D36E-4D13-A799-2CF0A491D04D} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{56FBEA9F-EF93-4318-B75F-A96FC7C7BD7B} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{660E6F4F-840D-436D-B668-433D9591BAC5} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660066506660} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{66DD22B9-6521-4B05-97DB-0EBC00B1DA5D} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{78B3C85E-44FF-4DC8-B3AD-156F39DC75E5} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{841FD004-57A2-4B49-BBDB-5897394619DB} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{E1164984-B567-47BD-A7FF-240C2594404A} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{E19FDA06-5BDF-43C2-B794-BCD8A4C2051F} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{E7435878-65B9-44D1-A443-81754E5DFC90} Sleutel Verwijdert : HKLM\SOFTWARE\Classes\Interface\{FAB076F5-E4DD-4EA4-AFEE-F18BF972B057} Waarde Verwijdert : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{57BCA5FA-5DBB-45A2-B558-1755C3F6253B}] Waarde Verwijdert : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{EBF2BA02-9094-4C5A-858B-BB198F3D8DE2}] Waarde Verwijdert : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{32099AAC-C132-4136-9E9A-4E364A424E17}] ***** [browsers] ***** -\\ Internet Explorer v9.0.8112.16421 Vervangen : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = my.daemon-search.com --> hxxp://www.google.com -\\ Mozilla Firefox v16.0.2 (nl) Profielnaam : default File : C:\Users\patrick\AppData\Roaming\Mozilla\Firefox\Profiles\opnn3pjg.default\prefs.js C:\Users\patrick\AppData\Roaming\Mozilla\Firefox\Profiles\opnn3pjg.default\user.js ... Verwijdert ! Verwijdert : user_pref("CT2269050.ALLOW_SHOWING_HIDDEN_TOOLBAR", false); Verwijdert : user_pref("CT2269050.BrowserCompStateIsOpen_129681780741097243", true); Verwijdert : user_pref("CT2269050.DSInstall", false); Verwijdert : user_pref("CT2269050.DialogsAlignMode", "LTR"); Verwijdert : user_pref("CT2269050.DialogsGetterLastCheckTime", "Mon Apr 23 2012 16:41:17 GMT+0200"); Verwijdert : user_pref("CT2269050.FirstTimeFF3", true); Verwijdert : user_pref("CT2269050.HPInstall", false); Verwijdert : user_pref("CT2269050.HasUserGlobalKeys", true); Verwijdert : user_pref("CT2269050.Initialize", true); Verwijdert : user_pref("CT2269050.InitializeCommonPrefs", true); Verwijdert : user_pref("CT2269050.InstalledDate", "Mon Apr 23 2012 16:41:17 GMT+0200"); Verwijdert : user_pref("CT2269050.IsGrouping", false); Verwijdert : user_pref("CT2269050.IsInitSetupIni", true); Verwijdert : user_pref("CT2269050.IsMulticommunity", false); Verwijdert : user_pref("CT2269050.IsOpenThankYouPage", true); Verwijdert : user_pref("CT2269050.IsOpenUninstallPage", true); Verwijdert : user_pref("CT2269050.LanguagePackLastCheckTime", "Mon Apr 23 2012 16:41:17 GMT+0200"); Verwijdert : user_pref("CT2269050.Locale", "en"); Verwijdert : user_pref("CT2269050.MCDetectTooltipHeight", "83"); Verwijdert : user_pref("CT2269050.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); Verwijdert : user_pref("CT2269050.MCDetectTooltipWidth", "295"); Verwijdert : user_pref("CT2269050.MyStuffEnabledAtInstallation", true); Verwijdert : user_pref("CT2269050.SearchCaption", "DVDVideoSoftTB Customized Web Search"); Verwijdert : user_pref("CT2269050.SearchFromAddressBarIsInit", true); Verwijdert : user_pref("CT2269050.SendProtectorDataViaLogin", true); Verwijdert : user_pref("CT2269050.ServiceMapLastCheckTime", "Mon Apr 23 2012 16:41:16 GMT+0200"); Verwijdert : user_pref("CT2269050.SettingsLastCheckTime", "Mon Apr 23 2012 16:41:16 GMT+0200"); Verwijdert : user_pref("CT2269050.SettingsLastUpdate", "1333626561"); Verwijdert : user_pref("CT2269050.TBHomePageUrl", "hxxp://search.conduit.com/?ctid=CT2269050&SearchSource=13"); Verwijdert : user_pref("CT2269050.ToolbarShrinkedFromSetup", false); Verwijdert : user_pref("CT2269050.Uninstall", true); Verwijdert : user_pref("CT2269050.alertChannelId", "666138"); Verwijdert : user_pref("CT2269050.initDone", true); Verwijdert : user_pref("CT2269050.navigateToUrlOnSearch", false); Verwijdert : user_pref("CT2269050.revertSettingsEnabled", true); Verwijdert : user_pref("CT2269050.testingCtid", ""); Verwijdert : user_pref("CT2269050.toolbarAppMetaDataLastCheckTime", "Mon Apr 23 2012 16:41:17 GMT+0200"); Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2269050/CT2269050[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/?aid=666138&fid=661999", "\"0\""[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/666138/661999/NL", "\"0\"")[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/NL", "\"0\"")[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2269050", [...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.2[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2269050",[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/20[...] Verwijdert : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"c46[...] Verwijdert : user_pref("CommunityToolbar.EngineHiddenByUser", true); Verwijdert : user_pref("CommunityToolbar.EngineOwner", "ConduitEngine"); Verwijdert : user_pref("CommunityToolbar.EngineOwnerGuid", "engine@conduit.com"); Verwijdert : user_pref("CommunityToolbar.EngineOwnerToolbarId", "conduitengine"); Verwijdert : user_pref("CommunityToolbar.IsEngineShown", false); Verwijdert : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true); Verwijdert : user_pref("CommunityToolbar.OriginalEngineOwner", "ConduitEngine"); Verwijdert : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "engine@conduit.com"); Verwijdert : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "conduitengine"); Verwijdert : user_pref("CommunityToolbar.ToolbarsList", "ConduitEngine,CT2269050"); Verwijdert : user_pref("CommunityToolbar.ToolbarsList4", "CT2269050"); Verwijdert : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Tue Mar 22 2011 22:15:48 GMT+01[...] Verwijdert : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440); Verwijdert : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Sat Jun 25 2011 18:19:50 GMT+0200"); Verwijdert : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com"); Verwijdert : user_pref("CommunityToolbar.alert.firstTimeAlertShown", true); Verwijdert : user_pref("CommunityToolbar.alert.locale", "en"); Verwijdert : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440); Verwijdert : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Sun Jun 26 2011 14:03:14 GMT+0200"); Verwijdert : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559"); Verwijdert : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20); Verwijdert : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com"); Verwijdert : user_pref("CommunityToolbar.alert.showTrayIcon", false); Verwijdert : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300); Verwijdert : user_pref("CommunityToolbar.alert.userId", "cb79ce0c-9f22-4afb-be87-468e503bfab0"); Verwijdert : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true); Verwijdert : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true); Verwijdert : user_pref("CommunityToolbar.originalHomepage", "www.ogame.nl"); Verwijdert : user_pref("CommunityToolbar.originalSearchEngine", "chrome://browser-region/locale/region.properties[...] Verwijdert : user_pref("ConduitEngine.AppTrackingLastCheckTime", "Fri May 27 2011 22:15:51 GMT+0200"); Verwijdert : user_pref("ConduitEngine.CTID", "ConduitEngine"); Verwijdert : user_pref("ConduitEngine.DialogsGetterLastCheckTime", "Fri Apr 01 2011 18:21:21 GMT+0200"); Verwijdert : user_pref("ConduitEngine.FirstServerDate", "03/23/2011 00"); Verwijdert : user_pref("ConduitEngine.FirstTime", true); Verwijdert : user_pref("ConduitEngine.FirstTimeFF3", true); Verwijdert : user_pref("ConduitEngine.HasUserGlobalKeys", true); Verwijdert : user_pref("ConduitEngine.Initialize", true); Verwijdert : user_pref("ConduitEngine.InitializeCommonPrefs", true); Verwijdert : user_pref("ConduitEngine.InstalledDate", "Tue Mar 22 2011 22:15:48 GMT+0100"); Verwijdert : user_pref("ConduitEngine.IsMulticommunity", false); Verwijdert : user_pref("ConduitEngine.IsOpenThankYouPage", false); Verwijdert : user_pref("ConduitEngine.IsOpenUninstallPage", true); Verwijdert : user_pref("ConduitEngine.LanguagePackLastCheckTime", "Sat Apr 02 2011 19:22:30 GMT+0200"); Verwijdert : user_pref("ConduitEngine.LastLogin_3.3.2.1", "Sat Mar 26 2011 00:11:51 GMT+0100"); Verwijdert : user_pref("ConduitEngine.LastLogin_3.3.3.2", "Sat Apr 02 2011 20:14:36 GMT+0200"); Verwijdert : user_pref("ConduitEngine.SearchFromAddressBarIsInit", true); Verwijdert : user_pref("ConduitEngine.SettingsLastCheckTime", "Sat Apr 02 2011 20:14:36 GMT+0200"); Verwijdert : user_pref("ConduitEngine.UserID", "UN98923562184428881"); Verwijdert : user_pref("ConduitEngine.componentAlertEnabled", false); Verwijdert : user_pref("ConduitEngine.engineLocale", "nl"); Verwijdert : user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Sat Apr 02 2011 19:22:30 GMT+0200"); Verwijdert : user_pref("ConduitEngine.globalFirstTimeInfoLastCheckTime", "Sat Apr 02 2011 18:14:36 GMT+0200"); Verwijdert : user_pref("ConduitEngine.initDone", true); Verwijdert : user_pref("ConduitEngine.isAppTrackingManagerOn", true); Verwijdert : user_pref("FirstSearch.winamp_toolbar.search.hasDoneFirst", 11); Verwijdert : user_pref("aol_toolbar.surf.date", "66"); Verwijdert : user_pref("aol_toolbar.surf.lastDate", "1"); Verwijdert : user_pref("aol_toolbar.surf.lastMonth", "10"); Verwijdert : user_pref("aol_toolbar.surf.lastYear", "2012"); Verwijdert : user_pref("aol_toolbar.surf.month", "66"); Verwijdert : user_pref("aol_toolbar.surf.prevMonth", "4292"); Verwijdert : user_pref("aol_toolbar.surf.total", "64842"); Verwijdert : user_pref("aol_toolbar.surf.week", "1080"); Verwijdert : user_pref("aol_toolbar.surf.year", "50541"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.InstallationThankYouPage", true); Verwijdert : user_pref("extensions.crossriderapp5060.5060.InstallationTime", 1351346832); Verwijdert : user_pref("extensions.crossriderapp5060.5060.InstallationUserSettings.searchUserConifrmation", false[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.InstallationUserSettings.setHomepage", false); Verwijdert : user_pref("extensions.crossriderapp5060.5060.InstallationUserSettings.setNewTab", false); Verwijdert : user_pref("extensions.crossriderapp5060.5060.InstallationUserSettings.setSearch", false); Verwijdert : user_pref("extensions.crossriderapp5060.5060.active", true); Verwijdert : user_pref("extensions.crossriderapp5060.5060.addressbar", ""); Verwijdert : user_pref("extensions.crossriderapp5060.5060.backgroundjs", "\n\n\"undefined\"!=typeof _GPL_BG_NEW&&[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.backgroundver", 7); Verwijdert : user_pref("extensions.crossriderapp5060.5060.can_run_bg_code", true); Verwijdert : user_pref("extensions.crossriderapp5060.5060.certdomaininstaller", ""); Verwijdert : user_pref("extensions.crossriderapp5060.5060.changeprevious", false); Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie.InstallationTime.expiration", "Fri Feb 01 2030 0[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie.InstallationTime.value", "1351346832"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 [...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_aoi.value", "1351346832"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_blocklist.expiration", "Thu Nov 01 2012 17:[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_blocklist.value", "%22nonexistantdomain.com[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_country_code.expiration", "Sat Nov 03 2012 [...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_country_code.value", "%22NL%22"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_crr.expiration", "Fri Feb 01 2030 00:00:00 [...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_crr.value", "1351785357"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 01 [...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_hotfix20111102645.value", "%221%22"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_installer_params.expiration", "Fri Feb 01 2[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_installer_params.value", "%7B%22source_id%2[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_parent_zoneid.value", "%2245990%22"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_pc_20120828.expiration", "Fri Feb 01 2030 0[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_pc_20120828.value", "1351346980878"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_product_id.expiration", "Fri Feb 01 2030 00[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_product_id.value", "%221265%22"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie._GPL_zoneid.value", "%2299007%22"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie.dbtest.expiration", "Fri Feb 01 2030 00:00:00 GM[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.cookie.dbtest.value", "1351346971541"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.description", "Savings Sidekick"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.domain", ""); Verwijdert : user_pref("extensions.crossriderapp5060.5060.enablesearch", false); Verwijdert : user_pref("extensions.crossriderapp5060.5060.fbremoteurl", ""); Verwijdert : user_pref("extensions.crossriderapp5060.5060.group", 0); Verwijdert : user_pref("extensions.crossriderapp5060.5060.homepage", ""); Verwijdert : user_pref("extensions.crossriderapp5060.5060.iframe", false); Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.InstallerIdentifiers.expiration", "Fri Feb 0[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.InstallerIdentifiers.value", "%7B%22installe[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_appVer.expiration", "Fri Feb 01 20[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_appVer.value", "37"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_lastVersion.expiration", "Fri Feb [...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_lastVersion.value", "0"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_meta.expiration", "Fri Feb 01 2030[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_meta.value", "%7B%7D"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_nextCheck.expiration", "Thu Nov 01[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_nextCheck.value", "true"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_queue.expiration", "Fri Feb 01 203[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_queue.value", "%7B%7D"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_remote_resources.expiration", "Fri[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.Resources_remote_resources.value", "%7B%22re[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.SoftwareDetected.expiration", "Fri Feb 01 20[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.internaldb.SoftwareDetected.value", "%7B%22AnySoftware%[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.js", "\n\nif(\"undefined\"!=typeof _GPL_PLUGIN){var _GP[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.manifesturl", ""); Verwijdert : user_pref("extensions.crossriderapp5060.5060.name", "Savings Sidekick"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.newtab", ""); Verwijdert : user_pref("extensions.crossriderapp5060.5060.opensearch", ""); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_1.code", "appAPI._cr_config={appID:funct[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_1.name", "base"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_1.ver", 3); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_1000014.code", "Array.prototype.indexOf|[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_1000014.name", "GPL Plugin (Loader)"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_1000014.ver", 7); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_1000015.code", "var _GPL_BG={vars:{},rul[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_1000015.name", "GPL Background (BG)"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_1000015.ver", 4); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_13.code", "(function(a){a.selectedText=f[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_13.name", "CrossriderAppUtils"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_13.ver", 2); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_14.code", "if(typeof(appAPI)===\"undefin[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_14.name", "CrossriderUtils"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_14.ver", 2); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_15.code", "(function(f){var u={};var e=M[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_15.name", "FacebookFFIE"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_15.ver", 1); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_16.code", "(function(f,{if(typeof(==[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_16.name", "FFAppAPIWrapper"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_16.ver", 3); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_17.code", "if(typeof window!==\"undefine[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_17.name", "jQuery"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_17.ver", 3); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_21.code", "var CrossriderDebugManager=(f[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_21.name", "debug"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_21.ver", 3); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_22.code", "(function(a){appAPI.queueMana[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_22.name", "resources"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_22.ver", 2); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_28.code", "var CrossriderInitializerPlug[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_28.name", "initializer"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_28.ver", 2); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_4.code", "/*! jQuery v1.7.1 jquery.com |[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_4.name", "jquery_1_7_1"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_4.ver", 3); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_47.code", "(function(){appAPI.ready=func[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_47.name", "resources_background"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins.plugin_47.ver", 1); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins_lists.plugins_0", "17,14,16,47,1000015"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.plugins_lists.plugins_1", "17,14,13,16,15,4,1,21,22,100[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.pluginsurl", "hxxp://app-static.crossrider.com/plugin/a[...] Verwijdert : user_pref("extensions.crossriderapp5060.5060.pluginsversion", 15); Verwijdert : user_pref("extensions.crossriderapp5060.5060.publisher", "215 Apps"); Verwijdert : user_pref("extensions.crossriderapp5060.5060.searchstatus", 0); Verwijdert : user_pref("extensions.crossriderapp5060.5060.setnewtab", false); Verwijdert : user_pref("extensions.crossriderapp5060.5060.settingsurl", ""); Verwijdert : user_pref("extensions.crossriderapp5060.5060.thankyou", ""); Verwijdert : user_pref("extensions.crossriderapp5060.5060.updateinterval", 360); Verwijdert : user_pref("extensions.crossriderapp5060.5060.ver", 37); Verwijdert : user_pref("extensions.crossriderapp5060.adsOldValue", -1); Verwijdert : user_pref("extensions.crossriderapp5060.apps", "5060"); Verwijdert : user_pref("extensions.crossriderapp5060.bic", "13aa28c888a995a18eb3775ece869ab5"); Verwijdert : user_pref("extensions.crossriderapp5060.cid", 5060); Verwijdert : user_pref("extensions.crossriderapp5060.firstrun", false); Verwijdert : user_pref("extensions.crossriderapp5060.hadappinstalled", true); Verwijdert : user_pref("extensions.crossriderapp5060.installationdate", 1351346850); Verwijdert : user_pref("extensions.crossriderapp5060.lastcheck", 22529756); Verwijdert : user_pref("extensions.crossriderapp5060.lastcheckitem", 22529756); Verwijdert : user_pref("extensions.crossriderapp5060.modetype", "production"); Verwijdert : user_pref("extensions.crossriderapp5060.reportInstall", true); Verwijdert : user_pref("extensions.enabledAddons", "{0b38152b-1b20-484d-a11f-5e04a9b0661f}:5.6.19.1,{ACAA314B-EEB[...] Verwijdert : user_pref("winamp_toolbar.buttons.layout", "shoutcast_30026;mobile/android_33522;post_to_twitter_335[...] Verwijdert : user_pref("winamp_toolbar.firsttime.showwindow", false); Verwijdert : user_pref("winamp_toolbar.guid", "{2B962002-B1E5-83A3-197B-B8E214DB0723}"); Verwijdert : user_pref("winamp_toolbar.install.lastTbVersion", "5.6.19.1"); Verwijdert : user_pref("winamp_toolbar.metrics.activestampdate", "1"); Verwijdert : user_pref("winamp_toolbar.metrics.activestampmonth", "10"); Verwijdert : user_pref("winamp_toolbar.metrics.activestampyear", "2012"); Verwijdert : user_pref("winamp_toolbar.metrics.originalDate", "9"); Verwijdert : user_pref("winamp_toolbar.metrics.originalHours", "17"); Verwijdert : user_pref("winamp_toolbar.metrics.originalMinutes", "1"); Verwijdert : user_pref("winamp_toolbar.metrics.originalMonth", "6"); Verwijdert : user_pref("winamp_toolbar.metrics.originalSeconds", "23"); Verwijdert : user_pref("winamp_toolbar.metrics.originalYear", "2011"); Verwijdert : user_pref("winamp_toolbar.remote.publish.xml", "1351709626468"); Verwijdert : user_pref("winamp_toolbar.search.cid", "15-05-2012"); Verwijdert : user_pref("winamp_toolbar.search.focusnewtab", false); Verwijdert : user_pref("winamp_toolbar.search.instd", "20110609165706847"); Verwijdert : user_pref("winamp_toolbar.search.newtab", false); Verwijdert : user_pref("winamp_toolbar.search.oid", "09-06-2011"); Verwijdert : user_pref("winamp_toolbar.search.populateoncomplete", false); Verwijdert : user_pref("winamp_toolbar.search.savehistory", true); Verwijdert : user_pref("winamp_toolbar.search.searchtype", "web"); Verwijdert : user_pref("winamp_toolbar.search.source", "tb50-ff-winamp"); Verwijdert : user_pref("winamp_toolbar.skin.custom", true); Verwijdert : user_pref("winamp_toolbar.upgrade.showwindow", false); Verwijdert : user_pref("winamp_toolbar.winamp.appversion", "1"); Verwijdert : user_pref("winamp_toolbar.winamp.artist", ""); Verwijdert : user_pref("winamp_toolbar.winamp.button.focus", true); Verwijdert : user_pref("winamp_toolbar.winamp.button.forward", true); Verwijdert : user_pref("winamp_toolbar.winamp.button.open", true); Verwijdert : user_pref("winamp_toolbar.winamp.button.pause", true); Verwijdert : user_pref("winamp_toolbar.winamp.button.play", true); Verwijdert : user_pref("winamp_toolbar.winamp.button.rewind", true); Verwijdert : user_pref("winamp_toolbar.winamp.button.stop", false); Verwijdert : user_pref("winamp_toolbar.winamp.button.volume", true); Verwijdert : user_pref("winamp_toolbar.winamp.info.url", "hxxp://music.aol.com/artist/{artist}"); Verwijdert : user_pref("winamp_toolbar.winamp.ticker.show", true); Verwijdert : user_pref("winamp_toolbar.winamp.title", "-999999"); Verwijdert : user_pref("winamp_toolbar.winamp.tracklength", "-999999"); Verwijdert : user_pref("winamp_toolbar.winamp.tracktime", "-999999"); Verwijdert : user_pref("winamp_toolbar.winamp.volume", "255"); ************************* AdwCleaner[s1].txt - [39263 octets] - [01/11/2012 19:11:08] ########## EOF - C:\AdwCleaner[s1].txt - [39324 octets] ##########
  11. Ten allereerste ik ben Patrick! Zooo ik heb een probleempje Sinds kort staat er bij mij het welgekende virus savings sidekick Hieronder een voorbeeld ervan : Nou heb ik iets gelezen over hijack ? of hoe het programma ook genoemd werd.. Nu heb ik een logje waar jullie wat mee moesten doen.. Ik weet begod niet wat dus ben erg blij als jullie mij verder willen helpen. Enige computer ervaring heb ik speel er veel mee leuk om dingen te weten te komen maar hiermee kom ik momenteel niet veel verder. Mijn bedankje alvast. ( oja heb al eerder threats gelezen en snap het een beetje ) Groetjes Patrick. hieronder het rapport: Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 18:40:23, on 1-11-2012 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v9.00 (9.00.8112.16450) Boot mode: Normal Running processes: C:\ACER\Preload\Autorun\DRV\FUJI Keyboard\ABoard.exe C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe C:\ACER\Preload\Autorun\DRV\FUJI Keyboard\AOSD.exe C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe C:\Program Files (x86)\uTorrent\uTorrent.exe C:\Program Files (x86)\McAfee Security Scan\3.0.207\SSScheduler.exe C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe C:\Program Files (x86)\Norton Utilities 15\Tools\Disk Doctor\DiskDoctorSrvProxy.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files (x86)\Norton Utilities 15\Tools\SpeedDisk\SpeedDiskSrvProxy.exe C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe C:\Program Files (x86)\ScanSoft\OmniPageSE4.0\OpWareSE4.exe C:\Program Files (x86)\Winamp\winampa.exe C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe C:\Program Files (x86)\iTunes\iTunesHelper.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0413&s=1&o=vp64&d=0510&m=imedia_d7000_nl R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = my.daemon-search.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0413&s=1&o=vp64&d=0510&m=imedia_d7000_nl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0413&s=1&o=vp64&d=0510&m=imedia_d7000_nl R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local F2 - REG:system.ini: UserInit=C:\Windows\system32\ezShellStart.exe, O1 - Hosts: ::1 localhost O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file) O2 - BHO: PriceGong - {1631550F-191D-4826-B069-D9439253D926} - C:\Program Files (x86)\PriceGong\2.6.4\PriceGongIE.dll (file missing) O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton 360 Premier Edition\Engine\6.4.0.9\coIEPlg.dll O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files (x86)\Canon\Easy-WebPrint\EWPBrowseLoader.dll O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton 360 Premier Edition\Engine\6.4.0.9\IPS\IPSBHO.DLL O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll O2 - BHO: Aanmeldhulp voor Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files (x86)\Canon\Easy-WebPrint\Toolband.dll O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton 360 Premier Edition\Engine\6.4.0.9\coIEPlg.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) O3 - Toolbar: Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll O4 - HKLM\..\Run: [smpcSys] C:\Program Files\Packard Bell\SetupMyPC\SmpSys.exe O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe O4 - HKLM\..\Run: [sSBkgdUpdate] "C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files (x86)\ScanSoft\OmniPageSE4.0\OpwareSE4.exe" O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe" O4 - HKLM\..\Run: [CanonSolutionMenuEx] "C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE" /logon O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter O4 - HKCU\..\Run: [smpcSys] C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [indxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020 O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun O4 - HKCU\..\Run: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe" /MINIMIZED O4 - Global Startup: Logitech SetPoint.lnk = ? O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files (x86)\McAfee Security Scan\3.0.207\SSScheduler.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Easy-WebPrint Afdrukken - res://C:\Program Files (x86)\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html O8 - Extra context menu item: Easy-WebPrint Afdrukvoorbeeld - res://C:\Program Files (x86)\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html O8 - Extra context menu item: Easy-WebPrint Toevoegen aan afdruklijst - res://C:\Program Files (x86)\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html O8 - Extra context menu item: Easy-WebPrint Versneld afdrukken - res://C:\Program Files (x86)\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html O8 - Extra context menu item: Free YouTube Download - C:\Users\patrick\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\patrick\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll O9 - Extra button: Verzenden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: Verz&enden naar OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll O10 - Unknown file in Winsock LSP: c:\windows\system32\nvlsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} (System Requirements Lab) - http://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll O23 - Service: Acronis Scheduler2Service (AcrSch2Svc) - Acronis - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe O23 - Service: Adobe Active File Monitor V6 (AdobeActiveFileMonitor6.0) - Unknown owner - C:\Program Files (x86)\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: Acronis Nonstop Backup service (afcdpsrv) - Acronis - C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: Bonjour-service (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: @dfsrres.dll,-101 (DFSR) - Unknown owner - C:\Windows\system32\DFSR.exe (file missing) O23 - Service: Norton Disk Doctor Service (DiskDoctorService) - Symantec Corporation - C:\Program Files (x86)\Norton Utilities 15\Tools\Disk Doctor\DiskDoctorSrv.exe O23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\PACKARDBELL\Packard Bell Recovery Management\Service\ETService.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - C:\Windows\SYSTEM32\HidService.exe O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Canon Inkjet Printer/Scanner/Fax Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE O23 - Service: iPod-service (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logitech\Bluetooth\LBTServ.exe O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files (x86)\McAfee Security Scan\3.0.207\McCHSvc.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files (x86)\Norton 360 Premier Edition\Engine\6.4.0.9\ccSvcHst.exe O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files (x86)\Nero\Nero8\Nero BackItUp\NBService.exe O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: NMIndexingService - Nero AG - C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe O23 - Service: ForceWare IP service (nSvcIp) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing) O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\Windows\SysWOW64\IoctlSvc.exe O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\SLsvc.exe,-101 (slsvc) - Unknown owner - C:\Windows\system32\SLsvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: Norton SpeedDisk Service (SpeedDiskService) - Symantec Corporation - C:\Program Files (x86)\Norton Utilities 15\Tools\SpeedDisk\SpeedDiskSrv.exe O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: UsbClientService - Unknown owner - C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 17447 bytes
×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.