Ga naar inhoud

GEERT805

Lid
 Bekijk profiel  Bekijk hun activiteit

  • Items

    7

  • Registratiedatum

  • Laatst bezocht

 Inhoudstype 

Berichten die geplaatst zijn door GEERT805

    Updates komen terug

    in Archief Bestrijding malware & virussen

    Geplaatst:

    ComboFix 13-03-28.01 - stefanie 29/03/2013 10:50:45.2.2 - x86

    Microsoft Windows 7 Home Premium 6.1.7601.1.1252.32.1043.18.2038.1076 [GMT 1:00]

    Gestart vanuit: c:\users\stefanie\Desktop\ComboFix.exe

    gebruikte Opdracht switches :: c:\users\stefanie\Desktop\CFScript.txt

    AV: Microsoft Security Essentials *Enabled/Updated* {3F839487-C7A2-C958-E30C-E2825BA31FB5}

    SP: Microsoft Security Essentials *Enabled/Updated* {84E27563-E198-C6D6-D9BC-D9F020245508}

    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    * Nieuw herstelpunt werd aangemaakt

    .

    .

    (((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    c:\program files\Application Updater

    c:\program files\Application Updater\ApplicationUpdater.exe

    c:\program files\Application Updater\config.ini

    c:\program files\YTD Toolbar

    c:\program files\YTD Toolbar\IE\7.0\config.ini

    c:\program files\YTD Toolbar\IE\7.0\ytdToolbarIE.dll

    c:\program files\YTD Toolbar\Res\amazon.gif

    c:\program files\YTD Toolbar\Res\dailymotion.gif

    c:\program files\YTD Toolbar\Res\ebay.gif

    c:\program files\YTD Toolbar\Res\facebook.gif

    c:\program files\YTD Toolbar\Res\googleplus.gif

    c:\program files\YTD Toolbar\Res\hulu.gif

    c:\program files\YTD Toolbar\Res\icon_settings.gif

    c:\program files\YTD Toolbar\Res\Lang\res1031.ini

    c:\program files\YTD Toolbar\Res\Lang\res1033.ini

    c:\program files\YTD Toolbar\Res\Lang\res1034.ini

    c:\program files\YTD Toolbar\Res\Lang\res1036.ini

    c:\program files\YTD Toolbar\Res\Lang\res1040.ini

    c:\program files\YTD Toolbar\Res\metacafe.gif

    c:\program files\YTD Toolbar\Res\radio-close.gif

    c:\program files\YTD Toolbar\Res\radio-minimize.gif

    c:\program files\YTD Toolbar\Res\radiobeta.gif

    c:\program files\YTD Toolbar\Res\search-button-hover.gif

    c:\program files\YTD Toolbar\Res\search-button.gif

    c:\program files\YTD Toolbar\Res\search-chevron-hover.gif

    c:\program files\YTD Toolbar\Res\search-chevron.gif

    c:\program files\YTD Toolbar\Res\search_amazon.gif

    c:\program files\YTD Toolbar\Res\search_baidu.gif

    c:\program files\YTD Toolbar\Res\search_ebay.gif

    c:\program files\YTD Toolbar\Res\search_yahoo.gif

    c:\program files\YTD Toolbar\Res\search_yandex.gif

    c:\program files\YTD Toolbar\Res\search_youtube.gif

    c:\program files\YTD Toolbar\Res\twitter.gif

    c:\program files\YTD Toolbar\Res\veoh.gif

    c:\program files\YTD Toolbar\Res\widgets.xml

    c:\program files\YTD Toolbar\Res\youtube.gif

    c:\program files\YTD Toolbar\Res\ytd.gif

    c:\program files\YTD Toolbar\Res\ytd_logo.gif

    c:\program files\YTD Toolbar\Res\ytd_logo_hover.gif

    c:\program files\YTD Toolbar\WidgiHelper.exe

    .

    .

    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    -------\Service_Application Updater

    .

    .

    (((((((((((((((((((( Bestanden Gemaakt van 2013-02-28 to 2013-03-29 ))))))))))))))))))))))))))))))

    .

    .

    2013-03-29 10:24 . 2013-03-29 10:24 29904 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{573363EC-A6A9-4F14-AF99-203D1D89A0DE}\MpKsl79412fe7.sys

    2013-03-29 10:20 . 2013-03-29 10:20 -------- d-----w- c:\users\Default\AppData\Local\temp

    2013-03-29 09:50 . 2013-03-29 09:50 29904 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{573363EC-A6A9-4F14-AF99-203D1D89A0DE}\MpKsl1a46dfd5.sys

    2013-03-29 08:04 . 2013-03-15 07:21 7108640 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{573363EC-A6A9-4F14-AF99-203D1D89A0DE}\mpengine.dll

    2013-03-27 19:37 . 2013-03-15 07:21 7108640 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll

    2013-03-25 09:27 . 2013-03-25 09:27 388096 ----a-r- c:\users\stefanie\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

    2013-03-25 09:27 . 2013-03-25 09:27 -------- d-----w- c:\program files\Trend Micro

    2013-03-25 09:11 . 2013-03-25 09:11 94112 ----a-w- c:\windows\system32\WindowsAccessBridge.dll

    2013-03-25 09:11 . 2013-03-25 09:11 -------- d-----w- c:\program files\Java

    2013-03-22 21:12 . 2013-03-22 21:12 745472 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe

    2013-03-22 21:09 . 2012-08-24 17:05 136560 ----a-w- c:\windows\system32\drivers\ksecpkg.sys

    2013-03-22 21:09 . 2012-08-24 17:02 369856 ----a-w- c:\windows\system32\drivers\cng.sys

    2013-03-22 21:09 . 2012-08-24 16:57 247808 ----a-w- c:\windows\system32\schannel.dll

    2013-03-22 21:09 . 2012-08-24 16:56 1039360 ----a-w- c:\windows\system32\lsasrv.dll

    2013-03-22 21:08 . 2013-02-12 03:32 15872 ----a-w- c:\windows\system32\drivers\usb8023.sys

    2013-03-22 21:05 . 2012-11-28 18:03 740840 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{F763604D-D6BA-406D-9D03-A94D2275ABE8}\gapaengine.dll

    .

    .

    .

    ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    2013-03-25 09:11 . 2012-07-03 19:40 861088 ----a-w- c:\windows\system32\npDeployJava1.dll

    2013-03-25 09:11 . 2012-07-03 19:40 782240 ----a-w- c:\windows\system32\deployJava1.dll

    2013-03-13 10:38 . 2012-04-28 19:58 73432 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

    2013-03-13 10:38 . 2012-04-28 19:58 693976 ----a-w- c:\windows\system32\FlashPlayerApp.exe

    2013-02-12 04:48 . 2013-03-13 10:56 474112 ----a-w- c:\windows\apppatch\AcSpecfc.dll

    2013-02-12 04:48 . 2013-03-13 10:56 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll

    2013-01-30 10:53 . 2012-04-28 20:10 232336 ------w- c:\windows\system32\MpSigStub.exe

    2013-01-20 14:59 . 2013-01-20 14:59 195296 ----a-w- c:\windows\system32\drivers\MpFilter.sys

    2013-01-20 14:59 . 2012-03-20 18:44 100328 ----a-w- c:\windows\system32\drivers\NisDrvWFP.sys

    2013-01-05 05:00 . 2013-02-13 18:39 3967848 ----a-w- c:\windows\system32\ntkrnlpa.exe

    2013-01-05 05:00 . 2013-02-13 18:38 3913064 ----a-w- c:\windows\system32\ntoskrnl.exe

    2013-01-04 04:50 . 2013-02-13 18:38 169984 ----a-w- c:\windows\system32\winsrv.dll

    2013-01-04 03:00 . 2013-02-13 18:39 2347008 ----a-w- c:\windows\system32\win32k.sys

    2013-01-03 05:05 . 2013-02-13 18:38 1293672 ----a-w- c:\windows\system32\drivers\tcpip.sys

    2013-01-03 05:04 . 2013-02-13 18:38 187752 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS

    .

    .

    ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

    REGEDIT4

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]

    @="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"

    [HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]

    2013-02-26 18:36 220632 ----a-w- c:\users\stefanie\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910_1\SkyDriveShell.dll

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]

    @="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"

    [HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]

    2013-02-26 18:36 220632 ----a-w- c:\users\stefanie\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910_1\SkyDriveShell.dll

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]

    @="{BBACC218-34EA-4666-9D7A-C78F2274A524}"

    [HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]

    2013-02-26 18:36 220632 ----a-w- c:\users\stefanie\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910_1\SkyDriveShell.dll

    .

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016]

    "Spotify"="c:\users\stefanie\AppData\Roaming\Spotify\Spotify.exe" [2012-10-26 7880664]

    "Spotify Web Helper"="c:\users\stefanie\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2012-10-26 1199576]

    "KiesPreload"="c:\program files\Samsung\Kies\Kies.exe" [2012-07-16 975800]

    "Facebook Update"="c:\users\stefanie\AppData\Local\Facebook\Update\FacebookUpdate.exe" [2012-09-10 138096]

    "NokiaSuite.exe"="c:\program files\Nokia\Nokia Suite\NokiaSuite.exe" [2012-12-21 1090040]

    "Skype"="c:\program files\Skype\Phone\Skype.exe" [2013-01-08 18708224]

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-09-23 141848]

    "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-09-23 173592]

    "Persistence"="c:\windows\system32\igfxpers.exe" [2009-09-23 150552]

    "MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-01-27 947152]

    "Zune Launcher"="c:\program files\Zune\ZuneLauncher.exe" [2011-08-05 159456]

    "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2011-10-14 2299176]

    "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-12-03 946352]

    "KiesTrayAgent"="c:\program files\Samsung\Kies\KiesTrayAgent.exe" [2012-07-16 3524536]

    "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

    "ConsentPromptBehaviorAdmin"= 5 (0x5)

    "ConsentPromptBehaviorUser"= 3 (0x3)

    "EnableUIADesktopToggle"= 0 (0x0)

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

    "aux"=wdmaud.drv

    .

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

    @="Service"

    .

    R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [x]

    R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]

    R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]

    R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [x]

    S1 MpKsl1a46dfd5;MpKsl1a46dfd5;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{573363EC-A6A9-4F14-AF99-203D1D89A0DE}\MpKsl1a46dfd5.sys [x]

    S1 MpKsl79412fe7;MpKsl79412fe7;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{573363EC-A6A9-4F14-AF99-203D1D89A0DE}\MpKsl79412fe7.sys [x]

    S2 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [x]

    S3 NisSrv;Microsoft Netwerkinspectie;c:\program files\Microsoft Security Client\NisSrv.exe [x]

    S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [x]

    .

    .

    --- Andere Services/Drivers In Geheugen ---

    .

    *NewlyCreated* - MPKSL79412FE7

    *NewlyCreated* - WS2IFSL

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

    LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr TBS fdrespub AppIDSvc QWAVE wcncsvc Mcx2Svc SensrSvc

    GPSvcGroup REG_MULTI_SZ GPSvc

    .

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService

    FontCache

    .

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]

    2013-03-15 20:29 1629648 ----a-w- c:\program files\Google\Chrome\Application\25.0.1364.172\Installer\chrmstp.exe

    .

    Inhoud van de 'Gedeelde Taken' map

    .

    2013-03-29 c:\windows\Tasks\Adobe Flash Player Updater.job

    - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-28 10:38]

    .

    2013-03-29 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2381401793-2272292330-2518124029-1001Core.job

    - c:\users\stefanie\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-09-10 18:51]

    .

    2013-03-29 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2381401793-2272292330-2518124029-1001UA.job

    - c:\users\stefanie\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-09-10 18:51]

    .

    2013-03-29 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

    - c:\program files\Google\Update\GoogleUpdate.exe [2012-08-26 10:37]

    .

    2013-03-29 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

    - c:\program files\Google\Update\GoogleUpdate.exe [2012-08-26 10:37]

    .

    .

    ------- Bijkomende Scan -------

    .

    uStart Page = https://www.google.be/

    TCP: DhcpNameServer = 195.130.131.130 195.130.130.2

    .

    .

    --------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

    .

    [HKEY_USERS\S-1-5-21-2381401793-2272292330-2518124029-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="WindowsLiveMail.Email.1"

    .

    [HKEY_USERS\S-1-5-21-2381401793-2272292330-2518124029-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="WindowsLiveMail.VCard.1"

    .

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

    @Denied: (A) (Users)

    @Denied: (A) (Everyone)

    @Allowed: (B 1 2 3 4 5) (S-1-5-20)

    "BlindDial"=dword:00000000

    "MSCurrentCountry"=dword:000000b5

    .

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

    @Denied: (Full) (Everyone)

    .

    ------------------------ Andere Aktieve Processen ------------------------

    .

    c:\program files\Microsoft Security Client\MsMpEng.exe

    c:\windows\system32\taskhost.exe

    c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe

    c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

    c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

    c:\windows\system32\conhost.exe

    c:\windows\system32\igfxsrvc.exe

    c:\program files\Windows Media Player\wmpnetwk.exe

    c:\program files\PC Connectivity Solution\ServiceLayer.exe

    c:\program files\PC Connectivity Solution\Transports\NclUSBSrv.exe

    c:\program files\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe

    c:\windows\system32\DllHost.exe

    c:\windows\system32\sppsvc.exe

    c:\program files\Internet Explorer\iexplore.exe

    c:\program files\Internet Explorer\iexplore.exe

    c:\program files\Internet Explorer\iexplore.exe

    .

    **************************************************************************

    .

    Voltooingstijd: 2013-03-29 11:27:50 - machine werd herstart

    ComboFix-quarantined-files.txt 2013-03-29 10:27

    ComboFix2.txt 2013-03-27 11:26

    .

    Pre-Run: 167.753.379.840 bytes beschikbaar

    Post-Run: 167.594.176.512 bytes beschikbaar

    .

    - - End Of File - - 4EBD4583C769EAFD97868E3F3675F794

    Updates komen terug

    in Archief Bestrijding malware & virussen

    Geplaatst:

    ComboFix 13-03-27.01 - stefanie 27/03/2013 12:11:12.1.2 - x86

    Microsoft Windows 7 Home Premium 6.1.7601.1.1252.32.1043.18.2038.977 [GMT 1:00]

    Gestart vanuit: c:\users\stefanie\Desktop\ComboFix.exe

    AV: Microsoft Security Essentials *Enabled/Updated* {3F839487-C7A2-C958-E30C-E2825BA31FB5}

    SP: Microsoft Security Essentials *Enabled/Updated* {84E27563-E198-C6D6-D9BC-D9F020245508}

    SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

    .

    .

    (((((((((((((((((((((((((((((((((( Andere Verwijderingen )))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    C:\install.exe

    c:\program files\BrowserCompanion

    c:\program files\BrowserCompanion\BCHelper.exe

    c:\program files\BrowserCompanion\blabbers-ch.crx

    c:\program files\BrowserCompanion\logo.ico

    c:\program files\BrowserCompanion\sqlite3.dll

    c:\program files\SavingsApp

    c:\program files\SavingsApp\SavingsApp.dll

    c:\program files\SavingsApp\SavingsApp.exe

    c:\program files\SavingsApp\SavingsApp.ico

    c:\program files\SavingsApp\SavingsApp.ini

    c:\program files\SavingsApp\SavingsAppGui.exe

    c:\program files\SavingsApp\SavingsAppInstaller.log

    c:\program files\SavingsApp\Uninstall.exe

    c:\users\stefanie\3456062.dll

    c:\users\stefanie\3483875.dll

    .

    .

    (((((((((((((((((((( Bestanden Gemaakt van 2013-02-27 to 2013-03-27 ))))))))))))))))))))))))))))))

    .

    .

    2013-03-27 11:22 . 2013-03-27 11:22 -------- d-----w- c:\users\Default\AppData\Local\temp

    2013-03-27 11:07 . 2013-03-27 11:07 29904 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{6417AA7D-EA3F-4B32-9928-C20C8285A6E1}\MpKslb5bf66f2.sys

    2013-03-27 09:57 . 2013-03-15 07:21 7108640 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{6417AA7D-EA3F-4B32-9928-C20C8285A6E1}\mpengine.dll

    2013-03-26 18:22 . 2013-03-15 07:21 7108640 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll

    2013-03-25 09:27 . 2013-03-25 09:27 388096 ----a-r- c:\users\stefanie\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe

    2013-03-25 09:27 . 2013-03-25 09:27 -------- d-----w- c:\program files\Trend Micro

    2013-03-25 09:11 . 2013-03-25 09:11 94112 ----a-w- c:\windows\system32\WindowsAccessBridge.dll

    2013-03-25 09:11 . 2013-03-25 09:11 -------- d-----w- c:\program files\Java

    2013-03-22 21:12 . 2013-03-22 21:12 745472 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe

    2013-03-22 21:09 . 2012-08-24 17:05 136560 ----a-w- c:\windows\system32\drivers\ksecpkg.sys

    2013-03-22 21:09 . 2012-08-24 17:02 369856 ----a-w- c:\windows\system32\drivers\cng.sys

    2013-03-22 21:09 . 2012-08-24 16:57 247808 ----a-w- c:\windows\system32\schannel.dll

    2013-03-22 21:09 . 2012-08-24 16:56 1039360 ----a-w- c:\windows\system32\lsasrv.dll

    2013-03-22 21:08 . 2013-02-12 03:32 15872 ----a-w- c:\windows\system32\drivers\usb8023.sys

    2013-03-22 21:05 . 2012-11-28 18:03 740840 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{F763604D-D6BA-406D-9D03-A94D2275ABE8}\gapaengine.dll

    2013-03-10 17:26 . 2013-03-10 17:26 -------- d-----w- c:\program files\Application Updater

    2013-03-10 17:25 . 2013-03-10 17:26 -------- d-----w- c:\program files\YTD Toolbar

    2013-02-26 18:43 . 2013-02-26 18:43 -------- d-----w- c:\windows\nl

    2013-02-26 18:42 . 2012-09-12 14:58 49664 ----a-w- c:\windows\system32\drivers\fssfltr.sys

    2013-02-26 18:38 . 2010-06-02 03:55 74072 ----a-w- c:\windows\system32\XAPOFX1_5.dll

    2013-02-26 18:38 . 2010-06-02 03:55 527192 ----a-w- c:\windows\system32\XAudio2_7.dll

    2013-02-26 18:38 . 2010-05-26 10:41 248672 ----a-w- c:\windows\system32\d3dx11_43.dll

    2013-02-26 18:38 . 2010-05-26 10:41 2106216 ----a-w- c:\windows\system32\D3DCompiler_43.dll

    2013-02-26 18:38 . 2009-09-04 16:29 453456 ----a-w- c:\windows\system32\d3dx10_42.dll

    2013-02-26 18:38 . 2006-11-29 12:06 3426072 ----a-w- c:\windows\system32\d3dx9_32.dll

    2013-02-26 18:37 . 2013-02-26 18:34 5659096 ----a-w- c:\program files\Common Files\Windows Live\.cache\f2f6e92b1ce144f04\skydrivesetup.exe

    2013-02-26 18:37 . 2013-02-26 18:37 -------- d-----r- c:\users\stefanie\SkyDrive

    2013-02-26 18:34 . 2013-02-26 18:34 94040 ----a-w- c:\program files\Common Files\Windows Live\.cache\efeb72811ce144f03\DSETUP.dll

    2013-02-26 18:34 . 2013-02-26 18:34 525656 ----a-w- c:\program files\Common Files\Windows Live\.cache\efeb72811ce144f03\DXSETUP.exe

    2013-02-26 18:34 . 2013-02-26 18:34 1691480 ----a-w- c:\program files\Common Files\Windows Live\.cache\efeb72811ce144f03\dsetup32.dll

    2013-02-26 18:34 . 2013-02-26 18:34 89944 ----a-w- c:\program files\Common Files\Windows Live\.cache\eca8e5791ce144f02\DSETUP.dll

    2013-02-26 18:34 . 2013-02-26 18:34 537432 ----a-w- c:\program files\Common Files\Windows Live\.cache\eca8e5791ce144f02\DXSETUP.exe

    2013-02-26 18:34 . 2013-02-26 18:34 1801048 ----a-w- c:\program files\Common Files\Windows Live\.cache\eca8e5791ce144f02\dsetup32.dll

    2013-02-26 18:34 . 2013-02-26 18:34 537432 ----a-w- c:\program files\Common Files\Windows Live\.cache\eaae468e1ce144f01\DXSETUP.exe

    2013-02-26 18:34 . 2013-02-26 18:34 89944 ----a-w- c:\program files\Common Files\Windows Live\.cache\eaae468e1ce144f01\DSETUP.dll

    2013-02-26 18:34 . 2013-02-26 18:34 1801048 ----a-w- c:\program files\Common Files\Windows Live\.cache\eaae468e1ce144f01\dsetup32.dll

    .

    .

    .

    ((((((((((((((((((((((((((((((((((((((( Find3M Rapport ))))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    2013-03-25 09:11 . 2012-07-03 19:40 861088 ----a-w- c:\windows\system32\npDeployJava1.dll

    2013-03-25 09:11 . 2012-07-03 19:40 782240 ----a-w- c:\windows\system32\deployJava1.dll

    2013-03-13 10:38 . 2012-04-28 19:58 73432 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

    2013-03-13 10:38 . 2012-04-28 19:58 693976 ----a-w- c:\windows\system32\FlashPlayerApp.exe

    2013-02-12 04:48 . 2013-03-13 10:56 474112 ----a-w- c:\windows\apppatch\AcSpecfc.dll

    2013-02-12 04:48 . 2013-03-13 10:56 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll

    2013-01-30 10:53 . 2012-04-28 20:10 232336 ------w- c:\windows\system32\MpSigStub.exe

    2013-01-20 14:59 . 2013-01-20 14:59 195296 ----a-w- c:\windows\system32\drivers\MpFilter.sys

    2013-01-20 14:59 . 2012-03-20 18:44 100328 ----a-w- c:\windows\system32\drivers\NisDrvWFP.sys

    2013-01-05 05:00 . 2013-02-13 18:39 3967848 ----a-w- c:\windows\system32\ntkrnlpa.exe

    2013-01-05 05:00 . 2013-02-13 18:38 3913064 ----a-w- c:\windows\system32\ntoskrnl.exe

    2013-01-04 04:50 . 2013-02-13 18:38 169984 ----a-w- c:\windows\system32\winsrv.dll

    2013-01-04 03:00 . 2013-02-13 18:39 2347008 ----a-w- c:\windows\system32\win32k.sys

    2013-01-03 05:05 . 2013-02-13 18:38 1293672 ----a-w- c:\windows\system32\drivers\tcpip.sys

    2013-01-03 05:04 . 2013-02-13 18:38 187752 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS

    .

    .

    ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten )))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond

    REGEDIT4

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{37483b40-c254-4a72-bda4-22ee90182c1e}]

    2011-05-09 09:49 176936 ----a-w- c:\program files\NCH_EN\prxtbNCH_.dll

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]

    "{37483b40-c254-4a72-bda4-22ee90182c1e}"= "c:\program files\NCH_EN\prxtbNCH_.dll" [2011-05-09 176936]

    .

    [HKEY_CLASSES_ROOT\clsid\{37483b40-c254-4a72-bda4-22ee90182c1e}]

    .

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]

    "{37483B40-C254-4A72-BDA4-22EE90182C1E}"= "c:\program files\NCH_EN\prxtbNCH_.dll" [2011-05-09 176936]

    .

    [HKEY_CLASSES_ROOT\clsid\{37483b40-c254-4a72-bda4-22ee90182c1e}]

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]

    @="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"

    [HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]

    2013-02-26 18:36 220632 ----a-w- c:\users\stefanie\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910_1\SkyDriveShell.dll

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]

    @="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"

    [HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]

    2013-02-26 18:36 220632 ----a-w- c:\users\stefanie\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910_1\SkyDriveShell.dll

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]

    @="{BBACC218-34EA-4666-9D7A-C78F2274A524}"

    [HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]

    2013-02-26 18:36 220632 ----a-w- c:\users\stefanie\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910_1\SkyDriveShell.dll

    .

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016]

    "Spotify"="c:\users\stefanie\AppData\Roaming\Spotify\Spotify.exe" [2012-10-26 7880664]

    "Spotify Web Helper"="c:\users\stefanie\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2012-10-26 1199576]

    "KiesPreload"="c:\program files\Samsung\Kies\Kies.exe" [2012-07-16 975800]

    "Facebook Update"="c:\users\stefanie\AppData\Local\Facebook\Update\FacebookUpdate.exe" [2012-09-10 138096]

    "NokiaSuite.exe"="c:\program files\Nokia\Nokia Suite\NokiaSuite.exe" [2012-12-21 1090040]

    "Skype"="c:\program files\Skype\Phone\Skype.exe" [2013-01-08 18708224]

    .

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-09-23 141848]

    "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-09-23 173592]

    "Persistence"="c:\windows\system32\igfxpers.exe" [2009-09-23 150552]

    "MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-01-27 947152]

    "Zune Launcher"="c:\program files\Zune\ZuneLauncher.exe" [2011-08-05 159456]

    "SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2011-10-14 2299176]

    "Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-12-03 946352]

    "KiesTrayAgent"="c:\program files\Samsung\Kies\KiesTrayAgent.exe" [2012-07-16 3524536]

    "SearchSettings"="c:\program files\Common Files\Spigot\Search Settings\SearchSettings.exe" [2013-02-23 1297728]

    "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

    "ConsentPromptBehaviorAdmin"= 5 (0x5)

    "ConsentPromptBehaviorUser"= 3 (0x3)

    "EnableUIADesktopToggle"= 0 (0x0)

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]

    "aux"=wdmaud.drv

    .

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

    @="Service"

    .

    R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [x]

    R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [x]

    R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]

    R3 WatAdminSvc;Windows Activation Technologies-service;c:\windows\system32\Wat\WatAdminSvc.exe [x]

    S1 MpKslb5bf66f2;MpKslb5bf66f2;c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{6417AA7D-EA3F-4B32-9928-C20C8285A6E1}\MpKslb5bf66f2.sys [x]

    S2 Application Updater;Application Updater;c:\program files\Application Updater\ApplicationUpdater.exe [x]

    S2 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [x]

    S3 NisSrv;Microsoft Netwerkinspectie;c:\program files\Microsoft Security Client\NisSrv.exe [x]

    S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [x]

    .

    .

    --- Andere Services/Drivers In Geheugen ---

    .

    *NewlyCreated* - MPKSLB5BF66F2

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]

    LocalServiceAndNoImpersonation REG_MULTI_SZ SSDPSRV upnphost SCardSvr TBS fdrespub AppIDSvc QWAVE wcncsvc Mcx2Svc SensrSvc

    GPSvcGroup REG_MULTI_SZ GPSvc

    .

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - LocalService

    FontCache

    .

    .

    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]

    2013-03-15 20:29 1629648 ----a-w- c:\program files\Google\Chrome\Application\25.0.1364.172\Installer\chrmstp.exe

    .

    Inhoud van de 'Gedeelde Taken' map

    .

    2013-03-27 c:\windows\Tasks\Adobe Flash Player Updater.job

    - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-28 10:38]

    .

    2013-03-27 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2381401793-2272292330-2518124029-1001Core.job

    - c:\users\stefanie\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-09-10 18:51]

    .

    2013-03-27 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2381401793-2272292330-2518124029-1001UA.job

    - c:\users\stefanie\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-09-10 18:51]

    .

    2013-03-27 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

    - c:\program files\Google\Update\GoogleUpdate.exe [2012-08-26 10:37]

    .

    2013-03-27 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

    - c:\program files\Google\Update\GoogleUpdate.exe [2012-08-26 10:37]

    .

    .

    ------- Bijkomende Scan -------

    .

    uStart Page = https://www.google.be/

    TCP: DhcpNameServer = 195.130.131.130 195.130.130.2

    .

    - - - - ORPHANS VERWIJDERD - - - -

    .

    HKCU-Run-KiesAirMessage - c:\program files\Samsung\Kies\KiesAirMessage.exe

    AddRemove-SavingsApp - c:\program files\SavingsApp\Uninstall.exe

    .

    .

    .

    --------------------- VERGRENDELDE REGISTER SLEUTELS ---------------------

    .

    [HKEY_USERS\S-1-5-21-2381401793-2272292330-2518124029-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="WindowsLiveMail.Email.1"

    .

    [HKEY_USERS\S-1-5-21-2381401793-2272292330-2518124029-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice]

    @Denied: (2) (LocalSystem)

    "Progid"="WindowsLiveMail.VCard.1"

    .

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

    @Denied: (A) (Users)

    @Denied: (A) (Everyone)

    @Allowed: (B 1 2 3 4 5) (S-1-5-20)

    "BlindDial"=dword:00000000

    "MSCurrentCountry"=dword:000000b5

    .

    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

    @Denied: (Full) (Everyone)

    .

    Voltooingstijd: 2013-03-27 12:26:12

    ComboFix-quarantined-files.txt 2013-03-27 11:26

    .

    Pre-Run: 164.225.007.616 bytes beschikbaar

    Post-Run: 169.105.293.312 bytes beschikbaar

    .

    - - End Of File - - 4B77555253331F4FE5D384CF0D29C3AC

    Updates komen terug

    in Archief Bestrijding malware & virussen

    Geplaatst:

    ik heb het probleem dat er altijd vijf updates blijven terug kom voor installatue

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 10:45:54, on 25/03/2013

    Platform: Windows 7 SP1 (WinNT 6.00.3505)

    MSIE: Internet Explorer v10.0 (10.00.9200.16521)

    Boot mode: Normal

    Running processes:

    C:\Windows\system32\taskhost.exe

    C:\Windows\system32\Dwm.exe

    C:\Windows\Explorer.EXE

    C:\Windows\system32\taskeng.exe

    C:\Windows\System32\igfxtray.exe

    C:\Windows\System32\hkcmd.exe

    C:\Windows\System32\igfxpers.exe

    C:\Windows\system32\igfxsrvc.exe

    C:\Program Files\Microsoft Security Client\msseces.exe

    C:\Program Files\Zune\ZuneLauncher.exe

    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

    C:\Program Files\Samsung\Kies\KiesTrayAgent.exe

    C:\Program Files\MyWebFace_5a\bar\1.bin\5abrmon.exe

    C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe

    C:\Program Files\Common Files\Java\Java Update\jusched.exe

    C:\Program Files\Windows Sidebar\sidebar.exe

    C:\Users\stefanie\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe

    C:\Program Files\Samsung\Kies\Kies.exe

    C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe

    C:\Program Files\Skype\Phone\Skype.exe

    C:\Program Files\Windows Live\Messenger\msnmsgr.exe

    C:\Windows\system32\DllHost.exe

    C:\Program Files\Internet Explorer\IELowutil.exe

    C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe

    C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe

    C:\Windows\system32\wuauclt.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN België: Hotmail, Skype, nieuws, entertainment, lifestyle en meer!

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, het laatste nieuws en entertainment | MSN.NL

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer wordt aangeboden door MSN and Bing

    R3 - URLSearchHook: YTD Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files\YTD Toolbar\IE\7.0\ytdToolbarIE.dll

    O2 - BHO: CrossriderApp0004639 - {11111111-1111-1111-1111-110011461139} - C:\Program Files\SavingsApp\SavingsApp.dll

    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    O2 - BHO: NCH EN - {37483b40-c254-4a72-bda4-22ee90182c1e} - C:\Program Files\NCH_EN\prxtbNCH_.dll

    O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll

    O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

    O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll

    O2 - BHO: YTD Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files\YTD Toolbar\IE\7.0\ytdToolbarIE.dll

    O3 - Toolbar: NCH EN Toolbar - {37483b40-c254-4a72-bda4-22ee90182c1e} - C:\Program Files\NCH_EN\prxtbNCH_.dll

    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

    O3 - Toolbar: YTD Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files\YTD Toolbar\IE\7.0\ytdToolbarIE.dll

    O4 - HKLM\..\Run: [igfxTray] C:\Windows\system32\igfxtray.exe

    O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe

    O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe

    O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey

    O4 - HKLM\..\Run: [Zune Launcher] "C:\Program Files\Zune\ZuneLauncher.exe"

    O4 - HKLM\..\Run: [synTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe

    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

    O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files\Samsung\Kies\KiesTrayAgent.exe

    O4 - HKLM\..\Run: [searchSettings] "C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe"

    O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

    O4 - HKLM\..\RunOnce: [MyWebFace_5abar Uninstall] rundll32 C:\PROGRA~1\5AUNIN~1.DLL,O -3

    O4 - HKCU\..\Run: [sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun

    O4 - HKCU\..\Run: [spotify] "C:\Users\stefanie\AppData\Roaming\Spotify\Spotify.exe" /uri spotify:autostart

    O4 - HKCU\..\Run: [spotify Web Helper] "C:\Users\stefanie\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe"

    O4 - HKCU\..\Run: [KiesPreload] C:\Program Files\Samsung\Kies\Kies.exe /preload

    O4 - HKCU\..\Run: [KiesAirMessage] C:\Program Files\Samsung\Kies\KiesAirMessage.exe -startup

    O4 - HKCU\..\Run: [Facebook Update] "C:\Users\stefanie\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver

    O4 - HKCU\..\Run: [NokiaSuite.exe] C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe -tray

    O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun

    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

    O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

    O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll

    O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll

    O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

    O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

    O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

    O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

    O23 - Service: Application Updater - Spigot, Inc. - C:\Program Files\Application Updater\ApplicationUpdater.exe

    O23 - Service: Google Updateservice (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

    O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

    O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

    --

    End of file - 7768 bytes

Logo

OVER ONS

PC Helpforum helpt GRATIS computergebruikers sinds juli 2006. Ons team geeft via het forum professioneel antwoord op uw vragen en probeert uw pc problemen zo snel mogelijk op te lossen. Word lid vandaag, plaats je vraag online en het PC Helpforum-team helpt u graag verder!

SITEMAP

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.