WouterG

Oké, ze zijn verwijdert. Bedankt voor de hulp en het advies!

Ja, ik krijg de optie alleszins toch te zien, moet ik dat doen? Ik had ze voorlopig laten staan omdat ik niet precies wist waar ze voor dienden?

ja, ze zijn nog altijd te vinden in mijn configuratiescherm

Zoek.exe Version 4.0.0.4 Updated 24-September-2013 Tool run by Gebruiker on zo 29/09/2013 at 14:36:37,31. Microsoft Windows 7 Ultimate 6.1.7601 Service Pack 1 x86 Running in: Normal Mode No Internet Access Detected Launched: C:\Users\Gebruiker\Downloads\zoek.exe [script inserted] [Checkboxes used] ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-2144678352-162549144-307977195-1001\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} deleted successfully HKEY_USERS\S-1-5-21-2144678352-162549144-307977195-1001\Software\Microsoft\Internet Explorer\SearchScopes\{B57FD759-EF0E-4E63-9D9D-ACCA03E8CB12} deleted successfully ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\defaulttabupdate deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\defaulttabupdate deleted successfully ==== FireFox Fix ====================== Deleted from C:\Users\Gebruiker\AppData\Roaming\Mozilla\Firefox\Profiles\0\prefs.js: Added to C:\Users\Gebruiker\AppData\Roaming\Mozilla\Firefox\Profiles\0\prefs.js: user_pref("browser.startup.homepage", "http://www.google.com"); user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q="); user_pref("browser.newtab.url", "http://www.google.com/"); user_pref("browser.search.defaultengine", "Google"); user_pref("browser.search.defaultenginename", "Google"); user_pref("browser.search.selectedEngine", "Google"); user_pref("browser.search.order.1", "Google"); user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q="); user_pref("browser.search.suggest.enabled", true); user_pref("browser.search.useDBForOrder", true); ProfilePath: C:\Users\Gebruiker\AppData\Roaming\Mozilla\Firefox\Profiles\0 user.js not found ---- Lines Downloader.com removed from prefs.js ---- ---- Lines Downloader.com modified from prefs.js ---- ---- Lines OneClickDownload removed from prefs.js ---- ---- Lines OneClickDownload modified from prefs.js ---- ---- FireFox user.js and prefs.js backups ---- prefs_20132909_1443_.backup ==== Registry Fix Code ====================== Windows Registry Editor Version 5.00 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7825CFB6-490A-436B-9F26-4A7B5CFC01A9}] ==== Deleting Files \ Folders ====================== "C:\Program Files\OApps" not found "C:\Users\Gebruiker\AppData\Roaming\DefaultTab" not found "C:\Program Files\DefaultTab" not found "C:\Users\Gebruiker\AppData\Roaming\Jazz" deleted "C:\Users\Gebruiker\AppData\Roaming\Jingles" deleted "C:\Users\Gebruiker\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\OneClickDownloader@OneClickDownloader.com.xpi" deleted "C:\Users\Gebruiker\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\OneClickDownloader@OneClickDownloader.com.xpi" deleted "C:\Users\Gebruiker\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\OneClickDownloader@OneClickDownloader.com.xpi" deleted "C:\Users\Gebruiker\AppData\Roaming\EndNote" deleted "C:\Program Files\Common Files\DVDVideoSoft\TB" deleted "C:\Program Files\Common Files\DVDVideoSoft\bin" deleted "C:\Program Files\1ClickDownload" deleted "C:\Program Files\MyPC Backup" deleted "C:\Users\Gebruiker\AppData\Roaming\DVDVideoSoftIEHelpers" deleted "C:\ProgramData\Tarma Installer" deleted "C:\Users\Gebruiker\AppData\LocalLow\PriceGong" deleted "C:\Windows\system32\config\systemprofile\AppData\LocalLow\Application Updater" deleted ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== ====== C:\Users\GEBRUI~1\AppData\Local\Temp ==== ====== Java Cache ===== ====== C:\Windows\system32 ===== 2013-09-29 08:05:06 7487FAC8BBC5FFF36AA792D92592E1CD 410392 ----a-w- C:\Windows\System32\FNTCACHE.DAT ====== C:\Windows\system32\drivers ===== 2013-09-14 13:17:41 DDCE686D76C2B4DB435A3AF5BD0E691D 133056 ----a-w- C:\Windows\System32\drivers\ataport.sys ====== C:\Windows\Tasks ====== ====== C:\Windows\Temp ====== ======= C:\Program Files ===== ======= C: ===== ====== C:\Users\Gebruiker\AppData\Roaming ====== 2013-09-28 11:04:54 355A3579E053788A9C1FF83153A83FDB 109280 ----a-w- C:\Users\Gebruiker\AppData\Local\GDIPFONTCACHEV1.DAT ====== C:\Users\Gebruiker ====== ====== C: exe-files == 2013-09-28 12:45:42 DAB964EB33250ADB77D5ACBD2F62E036 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-2144678352-162549144-307977195-1001\$IE689H9.exe 2013-09-28 12:45:42 660522FF480D598903AAD97152514A5A 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-2144678352-162549144-307977195-1001\$I2NOV54.exe 2013-09-28 12:45:42 3F0848AB1790B5EC930FF54ADD47156D 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-2144678352-162549144-307977195-1001\$IVOU3VT.exe 2013-09-28 12:45:33 B0829803A3FDFA41A4AA40E70B718D4B 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-2144678352-162549144-307977195-1001\$I8LSQ9L.exe 2013-09-28 12:43:40 5046F2CD721549FBEA9DFB0A46531CF4 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-2144678352-162549144-307977195-1001\$I8JXM2N.exe 2013-09-28 12:43:34 5F85DBDBD9DDE6DE79E45DEAF30ADCD2 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-2144678352-162549144-307977195-1001\$IKD3B9R.exe 2013-09-28 12:43:10 8A8BD116E2B4B2AE526CF799BC72E439 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-2144678352-162549144-307977195-1001\$IEHHBTS.exe 2013-09-28 12:42:56 D4D5F663B7BFB5E4265018C0011CC7B2 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-2144678352-162549144-307977195-1001\$I6MSLV5.exe 2013-09-28 12:42:56 762A87ADD802327B4C277CE22C941BD9 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-2144678352-162549144-307977195-1001\$IRHFJQ0.exe 2013-09-28 11:05:41 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\Trend Micro\Gebruiker.exe 2013-09-28 11:05:04 69CA82A7482A00D8EE063D2B97FC4338 781383 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-2144678352-162549144-307977195-1001\$R2NOV54.exe === C: other files == 2013-09-28 12:45:58 739AAB8E5AFD1D44708061F1C0455AF3 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-2144678352-162549144-307977195-1001\$IUM9OIO.bat 2013-09-28 12:43:31 B41F9D007AA02B60EDAA07DA2FC33CAD 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-2144678352-162549144-307977195-1001\$IGT0KKY.zip ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-21-2144678352-162549144-307977195-1001\Software\Microsoft\Windows\CurrentVersion\Run] "Spotify Web Helper"="C:\Users\Gebruiker\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" "RESTART_STICKY_NOTES"="C:\Windows\System32\StikyNot.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Adobe ARM"="C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Spotify Web Helper"="C:\Users\Gebruiker\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" "RESTART_STICKY_NOTES"="C:\Windows\System32\StikyNot.exe" ==== Startup Registry Disabled ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Adobe ARM] "command"="\"C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe\"" "hkey"="HKLM" "item"="Adobe ARM" "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\CanonMyPrinter] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="CanonMyPrinter" "hkey"="HKLM" "command"="C:\\Program Files\\Canon\\MyPrinter\\BJMyPrt.exe /logon" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\CanonSolutionMenu] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="CanonSolutionMenu" "hkey"="HKLM" "command"="C:\\Program Files\\Canon\\SolutionMenu\\CNSLMAIN.exe /logon" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Dell Webcam Central] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Dell Webcam Central" "hkey"="HKLM" "command"="\"C:\\Program Files\\Dell Webcam\\Dell Webcam Central\\WebcamDell.exe\" /mode2" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\NvCplDaemon] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="NvCplDaemon" "hkey"="HKLM" "command"="RUNDLL32.EXE C:\\Windows\\system32\\NvCpl.dll,NvStartup" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\NVHotkey] "command"="rundll32.exe C:\\Windows\\system32\\nvHotkey.dll,Start" "hkey"="HKLM" "item"="NVHotkey" "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\nwiz] "command"="nwiz.exe /install" "hkey"="HKLM" "item"="nwiz" "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\RESTART_STICKY_NOTES] "command"="C:\\Windows\\system32\\StikyNot.exe" "hkey"="HKCU" "item"="RESTART_STICKY_NOTES" "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Spotify] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Spotify" "hkey"="HKCU" "command"="\"C:\\Users\\Gebruiker\\AppData\\Roaming\\Spotify\\spotify.exe\" /uri spotify:autostart" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Spotify Web Helper] "command"="\"C:\\Users\\Gebruiker\\AppData\\Roaming\\Spotify\\Data\\SpotifyWebHelper.exe\"" "hkey"="HKCU" "item"="Spotify Web Helper" "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Steam] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Steam" "hkey"="HKCU" "command"="\"C:\\Program Files\\Steam\\Steam.exe\" -silent" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SunJavaUpdateSched] "command"="\"C:\\Program Files\\Common Files\\Java\\Java Update\\jusched.exe\"" "hkey"="HKLM" "item"="SunJavaUpdateSched" "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" ==== Startup Folders ====================== 2011-09-10 13:12:30 1057 ----a-w- C:\Users\Gebruiker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ==== Task Scheduler Jobs ====================== C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [21/09/2013 10:06] C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ [undetermined Task] C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [18/03/2013 22:04] ==== Firefox Extensions ====================== ==== Firefox Plugins ====================== ==== Chrome Look ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions aoifgeijnkleoboobbjbnjkbkahpkofm - C:\Program Files\OApps\chrome-sl.crx[] jplinpmadfkdgipabgcdchbdikologlh - No path found[] kdidombaedgpfiiedeimiebkmbilgmlc - C:\Program Files\DefaultTab\DefaultTab.crx[] mkfokfffehpeedafpekjeddnmnjhmcmk - C:\Program Files\Norton 360\Engine\20.4.0.40\Exts\Chrome.crx[12/09/2013 17:26] HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions nikpibnbobmbdbheedjfogjlikpgpnhp - C:\Users\Gebruiker\AppData\Roaming\DVDVideoSoft\dvsYoutubeDownload.crx[14/10/2012 12:19] Google Docs - Gebruiker - Default\Extensions\aohghmighlieiainnegkcijnfilokake Google Drive - Gebruiker - Default\Extensions\apdfllckaahabafndbhieahigkjlhalf YouTube - Gebruiker - Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo Google Search - Gebruiker - Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf Windows Media Player Extension for HTML5 - Gebruiker - Default\Extensions\hokdglbhghcebcopdbanieangmcamaak Norton Identity Protection - Gebruiker - Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk Gmail - Gebruiker - Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia DefaultTab - C:\Windows\system32\config\systemprofile - Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc ==== Chrome Fix ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc deleted successfully ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="https://www.google.be/" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="https://www.google.be/" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}" ==== Reset Google Chrome ====================== C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\aoifgeijnkleoboobbjbnjkbkahpkofm deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\jplinpmadfkdgipabgcdchbdikologlh deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc deleted successfully ==== HijackThis Entries ====================== R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer! R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer! R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = O1 - Hosts: ::1 localhost #[iPv6] O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\20.4.0.40\coIEPlg.dll O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\20.4.0.40\IPS\IPSBHO.DLL O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\20.4.0.40\coIEPlg.dll O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\RunOnce: [NCInstallQueue] rundll32 netman.dll,ProcessQueue O4 - HKCU\..\Run: [spotify Web Helper] "C:\Users\Gebruiker\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe O4 - Startup: Dropbox.lnk = Gebruiker\AppData\Roaming\Dropbox\bin\Dropbox.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {49312E18-AA92-4CC2-BB97-55DEA7BCADD6} (WMI Class) - https://support.dell.com/systemprofiler/SysProExe.CAB O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files\Norton 360\Engine\20.4.0.40\ccSvcHst.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe ==== Empty IE Cache ====================== C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully ==== Empty FireFox Cache ====================== No FireFox Cache found ==== Empty Chrome Cache ====================== C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Application Cache\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\GEBRUI~1\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== EOF on zo 29/09/2013 at 14:55:39,78 ======================

Hier is het logbestand Logfile of random's system information tool 1.09 (written by random/random) Run by Gebruiker at 2013-09-28 13:05:39 Microsoft Windows 7 Ultimate Service Pack 1 System drive C: has 73 GB (30%) free of 238 GB Total RAM: 3572 MB (62% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 13:05:52, on 28/09/2013 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v10.0 (10.00.9200.16686) Boot mode: Normal Running processes: C:\Program Files\Norton 360\Engine\20.4.0.40\ccSvcHst.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskhost.exe C:\Users\Gebruiker\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Windows\System32\StikyNot.exe C:\Users\Gebruiker\AppData\Roaming\Dropbox\bin\Dropbox.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Users\Gebruiker\Downloads\RSIT.exe C:\Program Files\trend micro\Gebruiker.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer! R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer! R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = O1 - Hosts: ::1 localhost #[iPv6] O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\20.4.0.40\coIEPlg.dll O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\20.4.0.40\IPS\IPSBHO.DLL O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll O2 - BHO: HelloWorldBHO - {7825CFB6-490A-436B-9F26-4A7B5CFC01A9} - C:\Program Files\OApps\SelectionLinks.dll O2 - BHO: DefaultTabBHO - {7F6AFBF1-E065-4627-A2FD-810366367D01} - C:\Users\Gebruiker\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabBHO.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\20.4.0.40\coIEPlg.dll O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\RunOnce: [NCInstallQueue] rundll32 netman.dll,ProcessQueue O4 - HKCU\..\Run: [spotify Web Helper] "C:\Users\Gebruiker\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_5FEA36A39174F28C3634662B2D565CAA] "C:\Program Files\Google\Chrome\Application\chrome.exe" --no-startup-window O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe O4 - Startup: Dropbox.lnk = Gebruiker\AppData\Roaming\Dropbox\bin\Dropbox.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {49312E18-AA92-4CC2-BB97-55DEA7BCADD6} (WMI Class) - https://support.dell.com/systemprofiler/SysProExe.CAB O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: DefaultTabSearch - Unknown owner - C:\Program Files\DefaultTab\DefaultTabSearch.exe O23 - Service: DefaultTabUpdate - Unknown owner - C:\Users\Gebruiker\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files\Norton 360\Engine\20.4.0.40\ccSvcHst.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe -- End of file - 5118 bytes ======Scheduled tasks folder====== C:\Windows\tasks\Adobe Flash Player Updater.job C:\Windows\tasks\GoogleUpdateTaskMachineCore.job C:\Windows\tasks\GoogleUpdateTaskMachineUA.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}] Norton Identity Protection - C:\Program Files\Norton 360\Engine\20.4.0.40\coIEPlg.dll [2013-05-31 509776] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}] Norton Vulnerability Protection - C:\Program Files\Norton 360\Engine\20.4.0.40\IPS\IPSBHO.DLL [2013-04-09 387040] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-04-04 462752] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7825CFB6-490A-436B-9F26-4A7B5CFC01A9}] SelectionLinks - C:\Program Files\OApps\SelectionLinks.dll [2013-08-05 483840] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01}] DefaultTab Browser Helper - C:\Users\Gebruiker\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabBHO.dll [2013-09-11 450680] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-04-04 171424] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files\Norton 360\Engine\20.4.0.40\coIEPlg.dll [2013-05-31 509776] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce] "NCInstallQueue"=rundll32 netman.dll,ProcessQueue [] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Spotify Web Helper"=C:\Users\Gebruiker\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [2013-07-07 1104384] "GoogleChromeAutoLaunch_5FEA36A39174F28C3634662B2D565CAA"=C:\Program Files\Google\Chrome\Application\chrome.exe [2013-07-25 846288] "RESTART_STICKY_NOTES"=C:\Windows\System32\StikyNot.exe [2009-07-14 354304] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2009-03-24 1983816] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2009-03-18 767312] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Dell Webcam Central] C:\Program Files\Dell Webcam\Dell Webcam Central\WebcamDell.exe [2008-10-17 442536] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon] C:\Windows\system32\NvCpl.dll [2009-06-16 13793824] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NVHotkey] C:\Windows\system32\nvHotkey.dll [2009-06-16 92704] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz] nwiz.exe /install [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RESTART_STICKY_NOTES] C:\Windows\system32\StikyNot.exe [2009-07-14 354304] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify] C:\Users\Gebruiker\AppData\Roaming\Spotify\spotify.exe [2013-07-07 4640768] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify Web Helper] C:\Users\Gebruiker\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [2013-07-07 1104384] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam] C:\Program Files\Steam\Steam.exe [2013-03-29 1631144] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-03-12 253816] C:\Users\Gebruiker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup Dropbox.lnk - C:\Users\Gebruiker\AppData\Roaming\Dropbox\bin\Dropbox.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=5 "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=145 "NoDrives"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoResolveSearch"=1 "NoDrives"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVYU"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.i420"=iyuv_32.dll "VIDC.YVU9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "vidc.cvid"=iccvid.dll "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "MSVideo8"=VfWWDM32.dll "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv "wave2"=wdmaud.drv "midi2"=wdmaud.drv "mixer2"=wdmaud.drv "aux2"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 ======List of files/folders created in the last 1 month====== 2013-09-28 13:05:39 ----D---- C:\rsit 2013-09-14 15:25:03 ----A---- C:\Windows\system32\jscript9.dll 2013-09-14 15:25:03 ----A---- C:\Windows\system32\jscript.dll 2013-09-14 15:25:02 ----A---- C:\Windows\system32\jsproxy.dll 2013-09-14 15:25:02 ----A---- C:\Windows\system32\ieui.dll 2013-09-14 15:25:02 ----A---- C:\Windows\system32\iesetup.dll 2013-09-14 15:25:01 ----A---- C:\Windows\system32\urlmon.dll 2013-09-14 15:25:01 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe 2013-09-14 15:25:01 ----A---- C:\Windows\system32\msfeeds.dll 2013-09-14 15:25:01 ----A---- C:\Windows\system32\iesysprep.dll 2013-09-14 15:25:01 ----A---- C:\Windows\system32\iernonce.dll 2013-09-14 15:25:01 ----A---- C:\Windows\system32\ie4uinit.exe 2013-09-14 15:25:00 ----A---- C:\Windows\system32\iertutil.dll 2013-09-14 15:24:59 ----A---- C:\Windows\system32\wininet.dll 2013-09-14 15:24:58 ----A---- C:\Windows\system32\ieframe.dll 2013-09-14 15:24:56 ----A---- C:\Windows\system32\mshtml.dll 2013-09-14 15:17:50 ----A---- C:\Windows\system32\shell32.dll 2013-09-14 15:17:50 ----A---- C:\Windows\system32\shdocvw.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2013-09-14 15:17:46 ----A---- C:\Windows\system32\winsrv.dll 2013-09-14 15:17:46 ----A---- C:\Windows\system32\KernelBase.dll 2013-09-14 15:17:46 ----A---- C:\Windows\system32\kernel32.dll 2013-09-14 15:17:46 ----A---- C:\Windows\system32\conhost.exe 2013-09-14 15:17:41 ----A---- C:\Windows\system32\drivers\ataport.sys 2013-09-14 15:17:38 ----A---- C:\Windows\system32\win32k.sys ======List of files/folders modified in the last 1 month====== 2013-09-28 13:05:52 ----D---- C:\Program Files\Trend Micro 2013-09-28 13:05:41 ----D---- C:\Windows\temp 2013-09-28 12:10:17 ----D---- C:\Program Files\WhatsRunning 2013-09-28 12:10:04 ----RD---- C:\Program Files 2013-09-28 12:09:49 ----D---- C:\Windows\system32\drivers 2013-09-28 12:09:16 ----SHD---- C:\Windows\Installer 2013-09-28 12:09:00 ----SHD---- C:\System Volume Information 2013-09-28 12:07:57 ----D---- C:\Windows\System32 2013-09-28 12:07:57 ----D---- C:\Windows\Panther 2013-09-28 12:07:57 ----D---- C:\Windows\inf 2013-09-28 12:07:57 ----D---- C:\Windows\debug 2013-09-28 12:07:57 ----D---- C:\Windows 2013-09-28 10:45:02 ----D---- C:\Users\Gebruiker\AppData\Roaming\Dropbox 2013-09-27 23:11:27 ----D---- C:\Windows\system32\config 2013-09-26 18:15:29 ----A---- C:\Windows\system32\PerfStringBackup.INI 2013-09-23 20:09:42 ----D---- C:\Windows\rescache 2013-09-23 19:20:16 ----D---- C:\Windows\Microsoft.NET 2013-09-23 19:19:46 ----RSD---- C:\Windows\assembly 2013-09-23 00:49:32 ----D---- C:\Windows\winsxs 2013-09-23 00:48:30 ----D---- C:\Users\Gebruiker\AppData\Roaming\Spotify 2013-09-22 21:01:02 ----D---- C:\Windows\system32\catroot2 2013-09-22 21:01:02 ----D---- C:\Windows\system32\catroot 2013-09-22 14:55:25 ----D---- C:\Users\Gebruiker\AppData\Roaming\Skype 2013-09-22 09:57:07 ----D---- C:\Program Files\DefaultTab 2013-09-21 10:06:18 ----A---- C:\Windows\system32\FlashPlayerApp.exe 2013-09-17 20:31:50 ----D---- C:\Users\Gebruiker\AppData\Roaming\vlc 2013-09-17 17:48:04 ----D---- C:\Program Files\Internet Explorer 2013-09-17 17:48:03 ----D---- C:\Windows\system32\en-US 2013-09-17 17:47:59 ----D---- C:\Windows\system32\DriverStore 2013-09-14 15:29:32 ----D---- C:\ProgramData\Microsoft Help 2013-09-14 15:22:47 ----D---- C:\Windows\system32\MRT 2013-09-14 15:20:26 ----A---- C:\Windows\system32\MRT.exe ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440] R0 SymDS;Symantec Data Store; C:\Windows\system32\drivers\N360\1404000.028\SYMDS.SYS [2013-05-21 367704] R0 SymEFA;Symantec Extended File Attributes; C:\Windows\system32\drivers\N360\1404000.028\SYMEFA.SYS [2013-05-23 934488] R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360] R1 BHDrvx86;BHDrvx86; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\BASHDefs\20130924.001\BHDrvx86.sys [2013-09-24 1097304] R1 ccSet_N360;Norton 360 Settings Manager; C:\Windows\system32\drivers\N360\1404000.028\ccSetx86.sys [2013-04-16 134744] R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096] R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [2013-08-27 376920] R1 IDSVix86;IDSVix86; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\IPSDefs\20130927.002\IDSvix86.sys [2013-08-21 392792] R1 SRTSPX;Symantec Real Time Storage Protection (PEL); C:\Windows\system32\drivers\N360\1404000.028\SRTSPX.SYS [2013-03-05 32344] R1 SymIRON;Symantec Iron Driver; C:\Windows\system32\drivers\N360\1404000.028\Ironx86.SYS [2013-03-05 175264] R1 SymNetS;Symantec Network Security WFP Driver; C:\Windows\System32\Drivers\N360\1404000.028\SYMNETS.SYS [2013-04-25 339544] R3 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-03-19 242240] R3 e1yexpress;Intel® Gigabit Network Connections Driver; C:\Windows\system32\DRIVERS\e1y6232.sys [2009-06-13 221912] R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2013-08-27 108120] R3 NAVENG;NAVENG; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\VirusDefs\20130927.018\NAVENG.SYS [2013-09-07 93272] R3 NAVEX15;NAVEX15; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\VirusDefs\20130927.018\NAVEX15.SYS [2013-09-07 1612376] R3 netw5v32;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\netw5v32.sys [2009-07-14 4231168] R3 OA001Ufd;Creative Camera OA001 Upper Filter Driver; C:\Windows\system32\DRIVERS\OA001Ufd.sys [2008-06-03 144672] R3 OA001Vid;Creative Camera OA001 Function Driver; C:\Windows\system32\DRIVERS\OA001Vid.sys [2008-09-18 277440] R3 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2006-10-29 28544] R3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 84992] R3 SRTSP;Symantec Real Time Storage Protection; C:\Windows\System32\Drivers\N360\1404000.028\SRTSP.SYS [2013-05-16 603224] R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT.SYS [2013-06-22 142496] R3 WinUsb;WinUSB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968] S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704] S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720] S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312] S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888] S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 78336] S3 catchme;catchme; \??\C:\Users\GEBRUI~1\AppData\Local\Temp\catchme.sys [] S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368] S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632] S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848] S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632] S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304] S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032] S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys [] S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 49664] S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys [] S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840] S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys [] S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328] S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736] S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920] S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam.sys [2008-05-06 11520] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-11 65640] R2 DefaultTabUpdate;DefaultTabUpdate; C:\Users\Gebruiker\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe [2013-08-05 107520] R2 N360;Norton 360; C:\Program Files\Norton 360\Engine\20.4.0.40\ccSvcHst.exe [2013-05-21 144368] R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2009-06-16 211488] R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2013-01-27 66872] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] S2 DefaultTabSearch;DefaultTabSearch; C:\Program Files\DefaultTab\DefaultTabSearch.exe [2013-09-16 573952] S2 gupdate;Google Update-service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-03-18 116648] S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-06-21 162408] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-21 257416] S3 gupdatem;Google Update-service (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-03-18 116648] S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696] S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2013-03-29 543656] S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992] S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-09-02 1343400] S4 AppMgmt;Application Management; C:\Windows\system32\svchost.exe [2009-07-14 20992] S4 CscService;Offline Files; C:\Windows\System32\svchost.exe [2009-07-14 20992] S4 PeerDistSvc;BranchCache; C:\Windows\System32\svchost.exe [2009-07-14 20992] -----------------EOF-----------------

In mijn configuratiescherm kwam ik tijdens het opruimen van mijn laptop 2 programma's tegen waar ik niet direct van kon zeggen wat ze waren, namelijk 'Roll' en 'DefaultTab'. Tijdens het googlen van deze programma's kwam ik eerder verontrustende berichten tegen, nu is mijn vraag of ik deze best kan verwijderen of niet? Bij het programma 'Roll' staat geen uitgever en geen bestandsgrootte, bij 'DefaultTab' vind ik de uitgever Search Results LLC en versie 2.2.8.0. Vormen deze programma's een gevaar voor mijn laptop?

Ik heb op aanraden van een vriend mijn laptop laten uitblazen en de problemen zijn precies verdwenen, bedankt voor alle hulp en moeite!

Maar het is toch niet normaal dat ik ook zo'n piekmomenten krijg als ik niets anders heb openstaan dan google chrome (zelfs sites zonder filmpjes of dergelijke) of lichte programma's? vroeger was dit helemaal niet en het zijn toch overdreven piekmomenten voor wat er draait, niet? (CPU 100% bij gewone sites zoals google of zelfs deze site)

Oké, maar verklaren deze processen ook de piekmomenten op andere momenten (wanneer farcry2 niet draait) of hangen de piekmomenten op elk moment van andere processen af? En wat kan ik nu dan nog doen om de piekmomenten te voorkomen?

Sorry voor het late antwoord, maar ik was op vakantie. Ik heb op een piekmoment een screenshot gemaakt van mijn taakbeheer de processen met hoge CPU opgezocht met what's running. Hierbij waren vooral de processen met nummers 952, 1704, 2468 en 2524 opvallend, de andere processen had ik zo openstaan. Bij what's running stond echter niet bij elk proces een + teken bij services (misschien omdat het piekmoment al voorbij was?). Alleszins de printscreens van alle processen en het taakbeheer zitten in bijlagen.

Hier zijn 2 printscreens van verschillende piekmomenten, het CPU gebruik is reeds lichtjes gedaald omdat ik het snipping tool niet direct open kreeg. Enig idee of hier ergens een probleem te zien valt?

Ah oei, ik zal volgende keer proberen om van alle gebruikers te selecteren

Het is ondertussen gelukt om een printscreen van mijn taakbeheer te maken tijdens een piekmoment, er is buiten taakbeheer zelf echter niets te zien dat CPU verbruikt.

Ik heb net de scan laten lopen en er werden geen integriteitsfouten gevonden, enig idee wat ik nog zou kunnen doen? Nogmaals bedankt voor alle hulp!

Ik ga direct de scan laten lopen en de resultaten posten. Het is mij trouwens nog niet gelukt om een afbeelding te maken van mijn taakbeheer bij een piekmoment, want tegen de tijd dat ik taakbeheer (wat ik op voorhand reeds open had staan) te zien krijg, is de piek weer voorbij en zijn er geen processen zichtbaar die CPU verbruiken. Ik heb wel gemerkt dat er bij een aantal handelingen de pieken sneller voorkomen, bijvoorbeeld als ik de startpagina van facebook open, dan loopt hij bijna altijd vast zonder dat ik nog maar heb proberen inloggen, of ook bij het spelen van een game wanneer het spel wordt opgeslagen of bij een iets actiever stuk. Ik weet niet of jullie hier iets mee zijn, maar wou het toch maar even melden.