Ga naar inhoud

WouterG

Lid
  • Items

    24
  • Registratiedatum

  • Laatst bezocht

Alles dat geplaatst werd door WouterG

  1. Oké, ze zijn verwijdert. Bedankt voor de hulp en het advies!
  2. Ja, ik krijg de optie alleszins toch te zien, moet ik dat doen? Ik had ze voorlopig laten staan omdat ik niet precies wist waar ze voor dienden?
  3. ja, ze zijn nog altijd te vinden in mijn configuratiescherm
  4. Zoek.exe Version 4.0.0.4 Updated 24-September-2013 Tool run by Gebruiker on zo 29/09/2013 at 14:36:37,31. Microsoft Windows 7 Ultimate 6.1.7601 Service Pack 1 x86 Running in: Normal Mode No Internet Access Detected Launched: C:\Users\Gebruiker\Downloads\zoek.exe [script inserted] [Checkboxes used] ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-2144678352-162549144-307977195-1001\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} deleted successfully HKEY_USERS\S-1-5-21-2144678352-162549144-307977195-1001\Software\Microsoft\Internet Explorer\SearchScopes\{B57FD759-EF0E-4E63-9D9D-ACCA03E8CB12} deleted successfully ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\defaulttabupdate deleted successfully HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\defaulttabupdate deleted successfully ==== FireFox Fix ====================== Deleted from C:\Users\Gebruiker\AppData\Roaming\Mozilla\Firefox\Profiles\0\prefs.js: Added to C:\Users\Gebruiker\AppData\Roaming\Mozilla\Firefox\Profiles\0\prefs.js: user_pref("browser.startup.homepage", "http://www.google.com"); user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q="); user_pref("browser.newtab.url", "http://www.google.com/"); user_pref("browser.search.defaultengine", "Google"); user_pref("browser.search.defaultenginename", "Google"); user_pref("browser.search.selectedEngine", "Google"); user_pref("browser.search.order.1", "Google"); user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q="); user_pref("browser.search.suggest.enabled", true); user_pref("browser.search.useDBForOrder", true); ProfilePath: C:\Users\Gebruiker\AppData\Roaming\Mozilla\Firefox\Profiles\0 user.js not found ---- Lines Downloader.com removed from prefs.js ---- ---- Lines Downloader.com modified from prefs.js ---- ---- Lines OneClickDownload removed from prefs.js ---- ---- Lines OneClickDownload modified from prefs.js ---- ---- FireFox user.js and prefs.js backups ---- prefs_20132909_1443_.backup ==== Registry Fix Code ====================== Windows Registry Editor Version 5.00 [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7825CFB6-490A-436B-9F26-4A7B5CFC01A9}] ==== Deleting Files \ Folders ====================== "C:\Program Files\OApps" not found "C:\Users\Gebruiker\AppData\Roaming\DefaultTab" not found "C:\Program Files\DefaultTab" not found "C:\Users\Gebruiker\AppData\Roaming\Jazz" deleted "C:\Users\Gebruiker\AppData\Roaming\Jingles" deleted "C:\Users\Gebruiker\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\OneClickDownloader@OneClickDownloader.com.xpi" deleted "C:\Users\Gebruiker\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\OneClickDownloader@OneClickDownloader.com.xpi" deleted "C:\Users\Gebruiker\AppData\Roaming\Mozilla\Firefox\Profiles\0\extensions\OneClickDownloader@OneClickDownloader.com.xpi" deleted "C:\Users\Gebruiker\AppData\Roaming\EndNote" deleted "C:\Program Files\Common Files\DVDVideoSoft\TB" deleted "C:\Program Files\Common Files\DVDVideoSoft\bin" deleted "C:\Program Files\1ClickDownload" deleted "C:\Program Files\MyPC Backup" deleted "C:\Users\Gebruiker\AppData\Roaming\DVDVideoSoftIEHelpers" deleted "C:\ProgramData\Tarma Installer" deleted "C:\Users\Gebruiker\AppData\LocalLow\PriceGong" deleted "C:\Windows\system32\config\systemprofile\AppData\LocalLow\Application Updater" deleted ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== ====== C:\Users\GEBRUI~1\AppData\Local\Temp ==== ====== Java Cache ===== ====== C:\Windows\system32 ===== 2013-09-29 08:05:06 7487FAC8BBC5FFF36AA792D92592E1CD 410392 ----a-w- C:\Windows\System32\FNTCACHE.DAT ====== C:\Windows\system32\drivers ===== 2013-09-14 13:17:41 DDCE686D76C2B4DB435A3AF5BD0E691D 133056 ----a-w- C:\Windows\System32\drivers\ataport.sys ====== C:\Windows\Tasks ====== ====== C:\Windows\Temp ====== ======= C:\Program Files ===== ======= C: ===== ====== C:\Users\Gebruiker\AppData\Roaming ====== 2013-09-28 11:04:54 355A3579E053788A9C1FF83153A83FDB 109280 ----a-w- C:\Users\Gebruiker\AppData\Local\GDIPFONTCACHEV1.DAT ====== C:\Users\Gebruiker ====== ====== C: exe-files == 2013-09-28 12:45:42 DAB964EB33250ADB77D5ACBD2F62E036 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-2144678352-162549144-307977195-1001\$IE689H9.exe 2013-09-28 12:45:42 660522FF480D598903AAD97152514A5A 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-2144678352-162549144-307977195-1001\$I2NOV54.exe 2013-09-28 12:45:42 3F0848AB1790B5EC930FF54ADD47156D 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-2144678352-162549144-307977195-1001\$IVOU3VT.exe 2013-09-28 12:45:33 B0829803A3FDFA41A4AA40E70B718D4B 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-2144678352-162549144-307977195-1001\$I8LSQ9L.exe 2013-09-28 12:43:40 5046F2CD721549FBEA9DFB0A46531CF4 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-2144678352-162549144-307977195-1001\$I8JXM2N.exe 2013-09-28 12:43:34 5F85DBDBD9DDE6DE79E45DEAF30ADCD2 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-2144678352-162549144-307977195-1001\$IKD3B9R.exe 2013-09-28 12:43:10 8A8BD116E2B4B2AE526CF799BC72E439 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-2144678352-162549144-307977195-1001\$IEHHBTS.exe 2013-09-28 12:42:56 D4D5F663B7BFB5E4265018C0011CC7B2 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-2144678352-162549144-307977195-1001\$I6MSLV5.exe 2013-09-28 12:42:56 762A87ADD802327B4C277CE22C941BD9 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-2144678352-162549144-307977195-1001\$IRHFJQ0.exe 2013-09-28 11:05:41 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\Trend Micro\Gebruiker.exe 2013-09-28 11:05:04 69CA82A7482A00D8EE063D2B97FC4338 781383 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-2144678352-162549144-307977195-1001\$R2NOV54.exe === C: other files == 2013-09-28 12:45:58 739AAB8E5AFD1D44708061F1C0455AF3 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-2144678352-162549144-307977195-1001\$IUM9OIO.bat 2013-09-28 12:43:31 B41F9D007AA02B60EDAA07DA2FC33CAD 544 ----a-w- C:\$RECYCLE.BIN\S-1-5-21-2144678352-162549144-307977195-1001\$IGT0KKY.zip ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-21-2144678352-162549144-307977195-1001\Software\Microsoft\Windows\CurrentVersion\Run] "Spotify Web Helper"="C:\Users\Gebruiker\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" "RESTART_STICKY_NOTES"="C:\Windows\System32\StikyNot.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Adobe ARM"="C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Spotify Web Helper"="C:\Users\Gebruiker\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" "RESTART_STICKY_NOTES"="C:\Windows\System32\StikyNot.exe" ==== Startup Registry Disabled ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Adobe ARM] "command"="\"C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe\"" "hkey"="HKLM" "item"="Adobe ARM" "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\CanonMyPrinter] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="CanonMyPrinter" "hkey"="HKLM" "command"="C:\\Program Files\\Canon\\MyPrinter\\BJMyPrt.exe /logon" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\CanonSolutionMenu] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="CanonSolutionMenu" "hkey"="HKLM" "command"="C:\\Program Files\\Canon\\SolutionMenu\\CNSLMAIN.exe /logon" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Dell Webcam Central] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Dell Webcam Central" "hkey"="HKLM" "command"="\"C:\\Program Files\\Dell Webcam\\Dell Webcam Central\\WebcamDell.exe\" /mode2" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\NvCplDaemon] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="NvCplDaemon" "hkey"="HKLM" "command"="RUNDLL32.EXE C:\\Windows\\system32\\NvCpl.dll,NvStartup" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\NVHotkey] "command"="rundll32.exe C:\\Windows\\system32\\nvHotkey.dll,Start" "hkey"="HKLM" "item"="NVHotkey" "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\nwiz] "command"="nwiz.exe /install" "hkey"="HKLM" "item"="nwiz" "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\RESTART_STICKY_NOTES] "command"="C:\\Windows\\system32\\StikyNot.exe" "hkey"="HKCU" "item"="RESTART_STICKY_NOTES" "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Spotify] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Spotify" "hkey"="HKCU" "command"="\"C:\\Users\\Gebruiker\\AppData\\Roaming\\Spotify\\spotify.exe\" /uri spotify:autostart" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Spotify Web Helper] "command"="\"C:\\Users\\Gebruiker\\AppData\\Roaming\\Spotify\\Data\\SpotifyWebHelper.exe\"" "hkey"="HKCU" "item"="Spotify Web Helper" "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Steam] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="Steam" "hkey"="HKCU" "command"="\"C:\\Program Files\\Steam\\Steam.exe\" -silent" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SunJavaUpdateSched] "command"="\"C:\\Program Files\\Common Files\\Java\\Java Update\\jusched.exe\"" "hkey"="HKLM" "item"="SunJavaUpdateSched" "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" ==== Startup Folders ====================== 2011-09-10 13:12:30 1057 ----a-w- C:\Users\Gebruiker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ==== Task Scheduler Jobs ====================== C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [21/09/2013 10:06] C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ [undetermined Task] C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [18/03/2013 22:04] ==== Firefox Extensions ====================== ==== Firefox Plugins ====================== ==== Chrome Look ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions aoifgeijnkleoboobbjbnjkbkahpkofm - C:\Program Files\OApps\chrome-sl.crx[] jplinpmadfkdgipabgcdchbdikologlh - No path found[] kdidombaedgpfiiedeimiebkmbilgmlc - C:\Program Files\DefaultTab\DefaultTab.crx[] mkfokfffehpeedafpekjeddnmnjhmcmk - C:\Program Files\Norton 360\Engine\20.4.0.40\Exts\Chrome.crx[12/09/2013 17:26] HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions nikpibnbobmbdbheedjfogjlikpgpnhp - C:\Users\Gebruiker\AppData\Roaming\DVDVideoSoft\dvsYoutubeDownload.crx[14/10/2012 12:19] Google Docs - Gebruiker - Default\Extensions\aohghmighlieiainnegkcijnfilokake Google Drive - Gebruiker - Default\Extensions\apdfllckaahabafndbhieahigkjlhalf YouTube - Gebruiker - Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo Google Search - Gebruiker - Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf Windows Media Player Extension for HTML5 - Gebruiker - Default\Extensions\hokdglbhghcebcopdbanieangmcamaak Norton Identity Protection - Gebruiker - Default\Extensions\mkfokfffehpeedafpekjeddnmnjhmcmk Gmail - Gebruiker - Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia DefaultTab - C:\Windows\system32\config\systemprofile - Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc ==== Chrome Fix ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc deleted successfully ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="https://www.google.be/" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="https://www.google.be/" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes "DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}" ==== Reset Google Chrome ====================== C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\aoifgeijnkleoboobbjbnjkbkahpkofm deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\jplinpmadfkdgipabgcdchbdikologlh deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc deleted successfully ==== HijackThis Entries ====================== R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer! R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer! R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = O1 - Hosts: ::1 localhost #[iPv6] O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\20.4.0.40\coIEPlg.dll O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\20.4.0.40\IPS\IPSBHO.DLL O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\20.4.0.40\coIEPlg.dll O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\RunOnce: [NCInstallQueue] rundll32 netman.dll,ProcessQueue O4 - HKCU\..\Run: [spotify Web Helper] "C:\Users\Gebruiker\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe O4 - Startup: Dropbox.lnk = Gebruiker\AppData\Roaming\Dropbox\bin\Dropbox.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {49312E18-AA92-4CC2-BB97-55DEA7BCADD6} (WMI Class) - https://support.dell.com/systemprofiler/SysProExe.CAB O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files\Norton 360\Engine\20.4.0.40\ccSvcHst.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe ==== Empty IE Cache ====================== C:\Users\Gebruiker\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully ==== Empty FireFox Cache ====================== No FireFox Cache found ==== Empty Chrome Cache ====================== C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully C:\Users\Gebruiker\AppData\Local\Google\Chrome\User Data\Default\Application Cache\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\GEBRUI~1\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== EOF on zo 29/09/2013 at 14:55:39,78 ======================
  5. Hier is het logbestand Logfile of random's system information tool 1.09 (written by random/random) Run by Gebruiker at 2013-09-28 13:05:39 Microsoft Windows 7 Ultimate Service Pack 1 System drive C: has 73 GB (30%) free of 238 GB Total RAM: 3572 MB (62% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 13:05:52, on 28/09/2013 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v10.0 (10.00.9200.16686) Boot mode: Normal Running processes: C:\Program Files\Norton 360\Engine\20.4.0.40\ccSvcHst.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskhost.exe C:\Users\Gebruiker\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Windows\System32\StikyNot.exe C:\Users\Gebruiker\AppData\Roaming\Dropbox\bin\Dropbox.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Users\Gebruiker\Downloads\RSIT.exe C:\Program Files\trend micro\Gebruiker.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer! R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer! R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = O1 - Hosts: ::1 localhost #[iPv6] O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\20.4.0.40\coIEPlg.dll O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\20.4.0.40\IPS\IPSBHO.DLL O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll O2 - BHO: HelloWorldBHO - {7825CFB6-490A-436B-9F26-4A7B5CFC01A9} - C:\Program Files\OApps\SelectionLinks.dll O2 - BHO: DefaultTabBHO - {7F6AFBF1-E065-4627-A2FD-810366367D01} - C:\Users\Gebruiker\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabBHO.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\20.4.0.40\coIEPlg.dll O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" O4 - HKLM\..\RunOnce: [NCInstallQueue] rundll32 netman.dll,ProcessQueue O4 - HKCU\..\Run: [spotify Web Helper] "C:\Users\Gebruiker\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_5FEA36A39174F28C3634662B2D565CAA] "C:\Program Files\Google\Chrome\Application\chrome.exe" --no-startup-window O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe O4 - Startup: Dropbox.lnk = Gebruiker\AppData\Roaming\Dropbox\bin\Dropbox.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {49312E18-AA92-4CC2-BB97-55DEA7BCADD6} (WMI Class) - https://support.dell.com/systemprofiler/SysProExe.CAB O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: DefaultTabSearch - Unknown owner - C:\Program Files\DefaultTab\DefaultTabSearch.exe O23 - Service: DefaultTabUpdate - Unknown owner - C:\Users\Gebruiker\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files\Norton 360\Engine\20.4.0.40\ccSvcHst.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe -- End of file - 5118 bytes ======Scheduled tasks folder====== C:\Windows\tasks\Adobe Flash Player Updater.job C:\Windows\tasks\GoogleUpdateTaskMachineCore.job C:\Windows\tasks\GoogleUpdateTaskMachineUA.job ======Registry dump====== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}] Norton Identity Protection - C:\Program Files\Norton 360\Engine\20.4.0.40\coIEPlg.dll [2013-05-31 509776] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}] Norton Vulnerability Protection - C:\Program Files\Norton 360\Engine\20.4.0.40\IPS\IPSBHO.DLL [2013-04-09 387040] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}] Java Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-04-04 462752] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7825CFB6-490A-436B-9F26-4A7B5CFC01A9}] SelectionLinks - C:\Program Files\OApps\SelectionLinks.dll [2013-08-05 483840] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01}] DefaultTab Browser Helper - C:\Users\Gebruiker\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabBHO.dll [2013-09-11 450680] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}] Java Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-04-04 171424] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar] {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files\Norton 360\Engine\20.4.0.40\coIEPlg.dll [2013-05-31 509776] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce] "NCInstallQueue"=rundll32 netman.dll,ProcessQueue [] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "Spotify Web Helper"=C:\Users\Gebruiker\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [2013-07-07 1104384] "GoogleChromeAutoLaunch_5FEA36A39174F28C3634662B2D565CAA"=C:\Program Files\Google\Chrome\Application\chrome.exe [2013-07-25 846288] "RESTART_STICKY_NOTES"=C:\Windows\System32\StikyNot.exe [2009-07-14 354304] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2009-03-24 1983816] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2009-03-18 767312] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Dell Webcam Central] C:\Program Files\Dell Webcam\Dell Webcam Central\WebcamDell.exe [2008-10-17 442536] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon] C:\Windows\system32\NvCpl.dll [2009-06-16 13793824] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NVHotkey] C:\Windows\system32\nvHotkey.dll [2009-06-16 92704] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz] nwiz.exe /install [] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RESTART_STICKY_NOTES] C:\Windows\system32\StikyNot.exe [2009-07-14 354304] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify] C:\Users\Gebruiker\AppData\Roaming\Spotify\spotify.exe [2013-07-07 4640768] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify Web Helper] C:\Users\Gebruiker\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [2013-07-07 1104384] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam] C:\Program Files\Steam\Steam.exe [2013-03-29 1631144] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-03-12 253816] C:\Users\Gebruiker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup Dropbox.lnk - C:\Users\Gebruiker\AppData\Roaming\Dropbox\bin\Dropbox.exe [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders] "SecurityProviders"=credssp.dll [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] "ConsentPromptBehaviorAdmin"=5 "ConsentPromptBehaviorUser"=3 "EnableUIADesktopToggle"=0 "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoDriveTypeAutoRun"=145 "NoDrives"=0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer] "NoResolveSearch"=1 "NoDrives"=0 [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.msadpcm"=msadp32.acm "midimapper"=midimap.dll "wavemapper"=msacm32.drv "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVYU"=msyuv.dll "VIDC.IYUV"=iyuv_32.dll "vidc.i420"=iyuv_32.dll "VIDC.YVU9"=tsbyuv.dll "msacm.l3acm"=C:\Windows\System32\l3codeca.acm "vidc.cvid"=iccvid.dll "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "MSVideo8"=VfWWDM32.dll "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv "wave2"=wdmaud.drv "midi2"=wdmaud.drv "mixer2"=wdmaud.drv "aux2"=wdmaud.drv ======File associations====== .js - edit - C:\Windows\System32\Notepad.exe %1 ======List of files/folders created in the last 1 month====== 2013-09-28 13:05:39 ----D---- C:\rsit 2013-09-14 15:25:03 ----A---- C:\Windows\system32\jscript9.dll 2013-09-14 15:25:03 ----A---- C:\Windows\system32\jscript.dll 2013-09-14 15:25:02 ----A---- C:\Windows\system32\jsproxy.dll 2013-09-14 15:25:02 ----A---- C:\Windows\system32\ieui.dll 2013-09-14 15:25:02 ----A---- C:\Windows\system32\iesetup.dll 2013-09-14 15:25:01 ----A---- C:\Windows\system32\urlmon.dll 2013-09-14 15:25:01 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe 2013-09-14 15:25:01 ----A---- C:\Windows\system32\msfeeds.dll 2013-09-14 15:25:01 ----A---- C:\Windows\system32\iesysprep.dll 2013-09-14 15:25:01 ----A---- C:\Windows\system32\iernonce.dll 2013-09-14 15:25:01 ----A---- C:\Windows\system32\ie4uinit.exe 2013-09-14 15:25:00 ----A---- C:\Windows\system32\iertutil.dll 2013-09-14 15:24:59 ----A---- C:\Windows\system32\wininet.dll 2013-09-14 15:24:58 ----A---- C:\Windows\system32\ieframe.dll 2013-09-14 15:24:56 ----A---- C:\Windows\system32\mshtml.dll 2013-09-14 15:17:50 ----A---- C:\Windows\system32\shell32.dll 2013-09-14 15:17:50 ----A---- C:\Windows\system32\shdocvw.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2013-09-14 15:17:46 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2013-09-14 15:17:46 ----A---- C:\Windows\system32\winsrv.dll 2013-09-14 15:17:46 ----A---- C:\Windows\system32\KernelBase.dll 2013-09-14 15:17:46 ----A---- C:\Windows\system32\kernel32.dll 2013-09-14 15:17:46 ----A---- C:\Windows\system32\conhost.exe 2013-09-14 15:17:41 ----A---- C:\Windows\system32\drivers\ataport.sys 2013-09-14 15:17:38 ----A---- C:\Windows\system32\win32k.sys ======List of files/folders modified in the last 1 month====== 2013-09-28 13:05:52 ----D---- C:\Program Files\Trend Micro 2013-09-28 13:05:41 ----D---- C:\Windows\temp 2013-09-28 12:10:17 ----D---- C:\Program Files\WhatsRunning 2013-09-28 12:10:04 ----RD---- C:\Program Files 2013-09-28 12:09:49 ----D---- C:\Windows\system32\drivers 2013-09-28 12:09:16 ----SHD---- C:\Windows\Installer 2013-09-28 12:09:00 ----SHD---- C:\System Volume Information 2013-09-28 12:07:57 ----D---- C:\Windows\System32 2013-09-28 12:07:57 ----D---- C:\Windows\Panther 2013-09-28 12:07:57 ----D---- C:\Windows\inf 2013-09-28 12:07:57 ----D---- C:\Windows\debug 2013-09-28 12:07:57 ----D---- C:\Windows 2013-09-28 10:45:02 ----D---- C:\Users\Gebruiker\AppData\Roaming\Dropbox 2013-09-27 23:11:27 ----D---- C:\Windows\system32\config 2013-09-26 18:15:29 ----A---- C:\Windows\system32\PerfStringBackup.INI 2013-09-23 20:09:42 ----D---- C:\Windows\rescache 2013-09-23 19:20:16 ----D---- C:\Windows\Microsoft.NET 2013-09-23 19:19:46 ----RSD---- C:\Windows\assembly 2013-09-23 00:49:32 ----D---- C:\Windows\winsxs 2013-09-23 00:48:30 ----D---- C:\Users\Gebruiker\AppData\Roaming\Spotify 2013-09-22 21:01:02 ----D---- C:\Windows\system32\catroot2 2013-09-22 21:01:02 ----D---- C:\Windows\system32\catroot 2013-09-22 14:55:25 ----D---- C:\Users\Gebruiker\AppData\Roaming\Skype 2013-09-22 09:57:07 ----D---- C:\Program Files\DefaultTab 2013-09-21 10:06:18 ----A---- C:\Windows\system32\FlashPlayerApp.exe 2013-09-17 20:31:50 ----D---- C:\Users\Gebruiker\AppData\Roaming\vlc 2013-09-17 17:48:04 ----D---- C:\Program Files\Internet Explorer 2013-09-17 17:48:03 ----D---- C:\Windows\system32\en-US 2013-09-17 17:47:59 ----D---- C:\Windows\system32\DriverStore 2013-09-14 15:29:32 ----D---- C:\ProgramData\Microsoft Help 2013-09-14 15:22:47 ----D---- C:\Windows\system32\MRT 2013-09-14 15:20:26 ----A---- C:\Windows\system32\MRT.exe ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440] R0 SymDS;Symantec Data Store; C:\Windows\system32\drivers\N360\1404000.028\SYMDS.SYS [2013-05-21 367704] R0 SymEFA;Symantec Extended File Attributes; C:\Windows\system32\drivers\N360\1404000.028\SYMEFA.SYS [2013-05-23 934488] R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360] R1 BHDrvx86;BHDrvx86; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\BASHDefs\20130924.001\BHDrvx86.sys [2013-09-24 1097304] R1 ccSet_N360;Norton 360 Settings Manager; C:\Windows\system32\drivers\N360\1404000.028\ccSetx86.sys [2013-04-16 134744] R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096] R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [2013-08-27 376920] R1 IDSVix86;IDSVix86; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\IPSDefs\20130927.002\IDSvix86.sys [2013-08-21 392792] R1 SRTSPX;Symantec Real Time Storage Protection (PEL); C:\Windows\system32\drivers\N360\1404000.028\SRTSPX.SYS [2013-03-05 32344] R1 SymIRON;Symantec Iron Driver; C:\Windows\system32\drivers\N360\1404000.028\Ironx86.SYS [2013-03-05 175264] R1 SymNetS;Symantec Network Security WFP Driver; C:\Windows\System32\Drivers\N360\1404000.028\SYMNETS.SYS [2013-04-25 339544] R3 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-03-19 242240] R3 e1yexpress;Intel® Gigabit Network Connections Driver; C:\Windows\system32\DRIVERS\e1y6232.sys [2009-06-13 221912] R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2013-08-27 108120] R3 NAVENG;NAVENG; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\VirusDefs\20130927.018\NAVENG.SYS [2013-09-07 93272] R3 NAVEX15;NAVEX15; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\VirusDefs\20130927.018\NAVEX15.SYS [2013-09-07 1612376] R3 netw5v32;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\netw5v32.sys [2009-07-14 4231168] R3 OA001Ufd;Creative Camera OA001 Upper Filter Driver; C:\Windows\system32\DRIVERS\OA001Ufd.sys [2008-06-03 144672] R3 OA001Vid;Creative Camera OA001 Function Driver; C:\Windows\system32\DRIVERS\OA001Vid.sys [2008-09-18 277440] R3 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2006-10-29 28544] R3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 84992] R3 SRTSP;Symantec Real Time Storage Protection; C:\Windows\System32\Drivers\N360\1404000.028\SRTSP.SYS [2013-05-16 603224] R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT.SYS [2013-06-22 142496] R3 WinUsb;WinUSB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968] S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704] S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720] S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312] S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888] S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 78336] S3 catchme;catchme; \??\C:\Users\GEBRUI~1\AppData\Local\Temp\catchme.sys [] S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368] S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632] S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848] S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632] S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304] S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032] S3 Synth3dVsc;Synth3dVsc; C:\Windows\System32\drivers\synth3dvsc.sys [] S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 49664] S3 tsusbhub;@%SystemRoot%\system32\drivers\tsusbhub.sys,-1; C:\Windows\system32\drivers\tsusbhub.sys [] S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840] S3 VGPU;VGPU; C:\Windows\System32\drivers\rdvgkmd.sys [] S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328] S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736] S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920] S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam.sys [2008-05-06 11520] ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-11 65640] R2 DefaultTabUpdate;DefaultTabUpdate; C:\Users\Gebruiker\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe [2013-08-05 107520] R2 N360;Norton 360; C:\Program Files\Norton 360\Engine\20.4.0.40\ccSvcHst.exe [2013-05-21 144368] R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2009-06-16 211488] R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2013-01-27 66872] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] S2 DefaultTabSearch;DefaultTabSearch; C:\Program Files\DefaultTab\DefaultTabSearch.exe [2013-09-16 573952] S2 gupdate;Google Update-service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-03-18 116648] S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-06-21 162408] S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-09-21 257416] S3 gupdatem;Google Update-service (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-03-18 116648] S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632] S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696] S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184] S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2013-03-29 543656] S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992] S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-09-02 1343400] S4 AppMgmt;Application Management; C:\Windows\system32\svchost.exe [2009-07-14 20992] S4 CscService;Offline Files; C:\Windows\System32\svchost.exe [2009-07-14 20992] S4 PeerDistSvc;BranchCache; C:\Windows\System32\svchost.exe [2009-07-14 20992] -----------------EOF-----------------
  6. In mijn configuratiescherm kwam ik tijdens het opruimen van mijn laptop 2 programma's tegen waar ik niet direct van kon zeggen wat ze waren, namelijk 'Roll' en 'DefaultTab'. Tijdens het googlen van deze programma's kwam ik eerder verontrustende berichten tegen, nu is mijn vraag of ik deze best kan verwijderen of niet? Bij het programma 'Roll' staat geen uitgever en geen bestandsgrootte, bij 'DefaultTab' vind ik de uitgever Search Results LLC en versie 2.2.8.0. Vormen deze programma's een gevaar voor mijn laptop?
  7. Ik heb op aanraden van een vriend mijn laptop laten uitblazen en de problemen zijn precies verdwenen, bedankt voor alle hulp en moeite!
  8. Maar het is toch niet normaal dat ik ook zo'n piekmomenten krijg als ik niets anders heb openstaan dan google chrome (zelfs sites zonder filmpjes of dergelijke) of lichte programma's? vroeger was dit helemaal niet en het zijn toch overdreven piekmomenten voor wat er draait, niet? (CPU 100% bij gewone sites zoals google of zelfs deze site)
  9. Oké, maar verklaren deze processen ook de piekmomenten op andere momenten (wanneer farcry2 niet draait) of hangen de piekmomenten op elk moment van andere processen af? En wat kan ik nu dan nog doen om de piekmomenten te voorkomen?
  10. Sorry voor het late antwoord, maar ik was op vakantie. Ik heb op een piekmoment een screenshot gemaakt van mijn taakbeheer de processen met hoge CPU opgezocht met what's running. Hierbij waren vooral de processen met nummers 952, 1704, 2468 en 2524 opvallend, de andere processen had ik zo openstaan. Bij what's running stond echter niet bij elk proces een + teken bij services (misschien omdat het piekmoment al voorbij was?). Alleszins de printscreens van alle processen en het taakbeheer zitten in bijlagen.
  11. Hier zijn 2 printscreens van verschillende piekmomenten, het CPU gebruik is reeds lichtjes gedaald omdat ik het snipping tool niet direct open kreeg. Enig idee of hier ergens een probleem te zien valt?
  12. Ah oei, ik zal volgende keer proberen om van alle gebruikers te selecteren
  13. Het is ondertussen gelukt om een printscreen van mijn taakbeheer te maken tijdens een piekmoment, er is buiten taakbeheer zelf echter niets te zien dat CPU verbruikt.
  14. Ik heb net de scan laten lopen en er werden geen integriteitsfouten gevonden, enig idee wat ik nog zou kunnen doen? Nogmaals bedankt voor alle hulp!
  15. Ik ga direct de scan laten lopen en de resultaten posten. Het is mij trouwens nog niet gelukt om een afbeelding te maken van mijn taakbeheer bij een piekmoment, want tegen de tijd dat ik taakbeheer (wat ik op voorhand reeds open had staan) te zien krijg, is de piek weer voorbij en zijn er geen processen zichtbaar die CPU verbruiken. Ik heb wel gemerkt dat er bij een aantal handelingen de pieken sneller voorkomen, bijvoorbeeld als ik de startpagina van facebook open, dan loopt hij bijna altijd vast zonder dat ik nog maar heb proberen inloggen, of ook bij het spelen van een game wanneer het spel wordt opgeslagen of bij een iets actiever stuk. Ik weet niet of jullie hier iets mee zijn, maar wou het toch maar even melden.
  16. Log Name: Application Source: Microsoft-Windows-Wininit Date: 9/07/2013 21:01:35 Event ID: 1001 Task Category: None Level: Information Keywords: Classic User: N/A Computer: Gebruiker-PC Description: Checking file system on C: The type of the file system is NTFS. A disk check has been scheduled. Windows will now check the disk. CHKDSK is verifying files (stage 1 of 5)... 219904 file records processed. File verification completed. 383 large file records processed. 0 bad file records processed. 2 EA records processed. 58 reparse records processed. CHKDSK is verifying indexes (stage 2 of 5)... 272800 index entries processed. Index verification completed. 0 unindexed files scanned. 0 unindexed files recovered. CHKDSK is verifying security descriptors (stage 3 of 5)... 219904 file SDs/SIDs processed. Cleaning up 2064 unused index entries from index $SII of file 0x9. Cleaning up 2064 unused index entries from index $SDH of file 0x9. Cleaning up 2064 unused security descriptors. Security descriptor verification completed. 26449 data files processed. CHKDSK is verifying Usn Journal... 37075920 USN bytes processed. Usn Journal verification completed. CHKDSK is verifying file data (stage 4 of 5)... 219888 files processed. File data verification completed. CHKDSK is verifying free space (stage 5 of 5)... 17000326 free clusters processed. Free space verification is complete. Adding 1 bad clusters to the Bad Clusters File. CHKDSK discovered free space marked as allocated in the master file table (MFT) bitmap. CHKDSK discovered free space marked as allocated in the volume bitmap. Windows has made corrections to the file system. 244093951 KB total disk space. 175672508 KB in 191914 files. 88276 KB in 26450 indexes. 4 KB in bad sectors. 331859 KB in use by the system. 65536 KB occupied by the log file. 68001304 KB available on disk. 4096 bytes in each allocation unit. 61023487 total allocation units on disk. 17000326 allocation units available on disk. Internal Info: 00 5b 03 00 07 55 03 00 45 83 05 00 00 00 00 00 .[...U..E....... 0f 0d 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 ....:........... c0 8a 34 00 50 01 33 00 e8 17 33 00 00 00 33 00 ..4.P.3...3...3. Windows has finished checking your disk. Please wait while your computer restarts. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" /> <EventID Qualifiers="16384">1001</EventID> <Version>0</Version> <Level>4</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2013-07-09T19:01:35.000000000Z" /> <EventRecordID>33038</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>Application</Channel> <Computer>Gebruiker-PC</Computer> <Security /> </System> <EventData> <Data> Checking file system on C: The type of the file system is NTFS. A disk check has been scheduled. Windows will now check the disk. CHKDSK is verifying files (stage 1 of 5)... 219904 file records processed. File verification completed. 383 large file records processed. 0 bad file records processed. 2 EA records processed. 58 reparse records processed. CHKDSK is verifying indexes (stage 2 of 5)... 272800 index entries processed. Index verification completed. 0 unindexed files scanned. 0 unindexed files recovered. CHKDSK is verifying security descriptors (stage 3 of 5)... 219904 file SDs/SIDs processed. Cleaning up 2064 unused index entries from index $SII of file 0x9. Cleaning up 2064 unused index entries from index $SDH of file 0x9. Cleaning up 2064 unused security descriptors. Security descriptor verification completed. 26449 data files processed. CHKDSK is verifying Usn Journal... 37075920 USN bytes processed. Usn Journal verification completed. CHKDSK is verifying file data (stage 4 of 5)... 219888 files processed. File data verification completed. CHKDSK is verifying free space (stage 5 of 5)... 17000326 free clusters processed. Free space verification is complete. Adding 1 bad clusters to the Bad Clusters File. CHKDSK discovered free space marked as allocated in the master file table (MFT) bitmap. CHKDSK discovered free space marked as allocated in the volume bitmap. Windows has made corrections to the file system. 244093951 KB total disk space. 175672508 KB in 191914 files. 88276 KB in 26450 indexes. 4 KB in bad sectors. 331859 KB in use by the system. 65536 KB occupied by the log file. 68001304 KB available on disk. 4096 bytes in each allocation unit. 61023487 total allocation units on disk. 17000326 allocation units available on disk. Internal Info: 00 5b 03 00 07 55 03 00 45 83 05 00 00 00 00 00 .[...U..E....... 0f 0d 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 ....:........... c0 8a 34 00 50 01 33 00 e8 17 33 00 00 00 33 00 ..4.P.3...3...3. Windows has finished checking your disk. Please wait while your computer restarts. </Data> </EventData> </Event>
  17. Hier zijn de resultaten van de Error scan en de Benchmark scan, het is voorlopig nog niet gelukt om een printscreen te nemen op een piekmoment, maar ik merk precies toch al een beetje verbetering na wat jullie mij vorige keren hebben aangeraden om te doen!
  18. Ik ben momenteel een paar dagen van huis weg zonder laptop, maar ik zal er direct aan beginnen als ik terug ben. Nogmaals bedankt voor alle hulp!
  19. http://speccy.piriform.com/results/xxSvhoETLI1Bi1Bh8S7B18f
  20. Het logbestand van Combofix, nogmaals bedankt voor alle hulp ComboFix 13-07-02.03 - Gebruiker 03/07/2013 10:40:46.1.2 - x86 Microsoft Windows 7 Ultimate 6.1.7601.1.1252.32.1033.18.3572.2377 [GMT 2:00] Gestart vanuit: c:\users\Gebruiker\Downloads\ComboFix.exe AV: Norton 360 *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF} FW: Norton 360 *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4} SP: Norton 360 *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((( Bestanden Gemaakt van 2013-06-03 to 2013-07-03 )))))))))))))))))))))))))))))) . . 2013-07-03 08:47 . 2013-07-03 08:47 -------- d-----w- c:\users\Default\AppData\Local\temp 2013-07-02 20:10 . 2013-07-02 20:10 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2013-07-02 20:10 . 2013-04-04 12:50 22856 ----a-w- c:\windows\system32\drivers\mbam.sys 2013-07-02 16:27 . 2013-07-02 16:27 388096 ----a-r- c:\users\Gebruiker\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe 2013-07-02 16:27 . 2013-07-02 16:27 -------- d-----w- c:\program files\Trend Micro 2013-07-01 14:26 . 2013-07-01 14:26 -------- d-----w- c:\users\Gebruiker\AppData\Roaming\Malwarebytes 2013-07-01 14:25 . 2013-07-01 14:25 -------- d-----w- c:\programdata\Malwarebytes 2013-07-01 13:06 . 2013-07-01 13:06 -------- d-----w- c:\users\Gebruiker\AppData\Roaming\SUPERAntiSpyware.com 2013-06-29 15:28 . 2013-06-29 15:28 -------- d-----w- c:\users\Gebruiker\AppData\Local\PunkBuster 2013-06-18 15:25 . 2013-06-22 11:31 -------- d-----w- c:\windows\system32\drivers\N360\1404000.028 2013-06-12 18:42 . 2013-06-08 11:13 2706432 ----a-w- c:\windows\system32\mshtml.tlb 2013-06-12 18:42 . 2013-06-08 11:41 218112 ----a-w- c:\program files\Internet Explorer\sqmapi.dll 2013-06-12 11:48 . 2013-04-25 23:30 1505280 ----a-w- c:\windows\system32\d3d11.dll 2013-06-12 11:47 . 2013-05-10 03:20 24576 ----a-w- c:\windows\system32\cryptdlg.dll 2013-06-12 11:47 . 2013-04-26 04:55 492544 ----a-w- c:\windows\system32\win32spl.dll 2013-06-12 11:47 . 2013-05-13 03:08 903168 ----a-w- c:\windows\system32\certutil.exe 2013-06-12 11:47 . 2013-05-13 04:45 140288 ----a-w- c:\windows\system32\cryptsvc.dll 2013-06-12 11:47 . 2013-05-13 04:45 1160192 ----a-w- c:\windows\system32\crypt32.dll 2013-06-12 11:47 . 2013-05-13 04:45 103936 ----a-w- c:\windows\system32\cryptnet.dll 2013-06-12 11:47 . 2013-05-13 03:08 43008 ----a-w- c:\windows\system32\certenc.dll 2013-06-12 11:47 . 2013-04-17 07:02 1230336 ----a-w- c:\windows\system32\WindowsCodecs.dll 2013-06-12 11:47 . 2013-05-06 05:06 3968872 ----a-w- c:\windows\system32\ntkrnlpa.exe 2013-06-12 11:47 . 2013-05-06 05:06 3913576 ----a-w- c:\windows\system32\ntoskrnl.exe 2013-06-12 11:47 . 2013-05-08 05:38 1293672 ----a-w- c:\windows\system32\drivers\tcpip.sys . . . ((((((((((((((((((((((((((((((((((((((( Find3M Rapport )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2013-06-29 15:29 . 2013-01-27 20:05 136720 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys 2013-06-29 15:28 . 2013-01-27 20:05 183520 ----a-w- c:\windows\system32\PnkBstrB.exe 2013-06-22 07:57 . 2012-01-29 17:34 142496 ----a-w- c:\windows\system32\drivers\SYMEVENT.SYS 2013-06-12 08:06 . 2012-04-01 14:30 692104 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2013-06-12 08:06 . 2011-09-06 18:21 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2013-05-11 11:22 . 2013-05-11 11:22 745472 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe 2013-05-11 11:22 . 2013-05-11 11:22 523264 ----a-w- c:\windows\system32\vbscript.dll 2013-05-11 11:22 . 2013-05-11 11:22 185344 ----a-w- c:\windows\system32\elshyph.dll 2013-05-11 11:22 . 2013-05-11 11:22 158720 ----a-w- c:\windows\system32\msls31.dll 2013-05-11 11:22 . 2013-05-11 11:22 150528 ----a-w- c:\windows\system32\iexpress.exe 2013-05-11 11:22 . 2013-05-11 11:22 138752 ----a-w- c:\windows\system32\wextract.exe 2013-05-11 11:22 . 2013-05-11 11:22 137216 ----a-w- c:\windows\system32\ieUnatt.exe 2013-05-11 11:22 . 2013-05-11 11:22 12800 ----a-w- c:\windows\system32\mshta.exe 2013-05-11 11:22 . 2013-05-11 11:22 73728 ----a-w- c:\windows\system32\SetIEInstalledDate.exe 2013-05-11 11:22 . 2013-05-11 11:22 719360 ----a-w- c:\windows\system32\mshtmlmedia.dll 2013-05-11 11:22 . 2013-05-11 11:22 61952 ----a-w- c:\windows\system32\tdc.ocx 2013-05-11 11:22 . 2013-05-11 11:22 48640 ----a-w- c:\windows\system32\mshtmler.dll 2013-05-11 11:22 . 2013-05-11 11:22 38400 ----a-w- c:\windows\system32\imgutil.dll 2013-05-11 11:22 . 2013-05-11 11:22 361984 ----a-w- c:\windows\system32\html.iec 2013-05-11 11:22 . 2013-05-11 11:22 23040 ----a-w- c:\windows\system32\licmgr10.dll 2013-05-11 11:22 . 2013-05-11 11:22 1441280 ----a-w- c:\windows\system32\inetcpl.cpl 2013-05-11 11:22 . 2013-05-11 11:22 110592 ----a-w- c:\windows\system32\IEAdvpack.dll 2013-04-13 04:45 . 2013-05-15 16:17 474624 ----a-w- c:\windows\apppatch\AcSpecfc.dll 2013-04-13 04:45 . 2013-05-15 16:17 2176512 ----a-w- c:\windows\apppatch\AcGenral.dll 2013-04-12 13:45 . 2013-04-24 13:09 1211752 ----a-w- c:\windows\system32\drivers\ntfs.sys 2013-04-10 05:18 . 2013-05-15 16:16 728424 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys 2013-04-10 05:18 . 2013-05-15 16:16 218984 ----a-w- c:\windows\system32\drivers\dxgmms1.sys 2013-04-10 03:14 . 2013-05-15 16:17 2347520 ----a-w- c:\windows\system32\win32k.sys . . ((((((((((((((((((((((((((((((((((((( Reg Opstartpunten ))))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* lege verwijzingen & legitieme standaard verwijzingen worden niet getoond REGEDIT4 . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2013-05-25 00:36 130736 ----a-w- c:\users\Gebruiker\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2013-05-25 00:36 130736 ----a-w- c:\users\Gebruiker\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2013-05-25 00:36 130736 ----a-w- c:\users\Gebruiker\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Spotify Web Helper"="c:\users\Gebruiker\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2013-06-30 1104384] . c:\users\Gebruiker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Dropbox.lnk - c:\users\Gebruiker\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2013-5-25 27776968] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM] 2013-04-04 21:06 958576 ----a-w- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonMyPrinter] 2009-03-24 02:00 1983816 ----a-w- c:\program files\Canon\MyPrinter\BJMYPRT.EXE . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonSolutionMenu] 2009-03-18 01:40 767312 ----a-w- c:\program files\Canon\SolutionMenu\CNSLMAIN.EXE . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Dell Webcam Central] 2008-10-17 09:41 442536 ------w- c:\program files\Dell Webcam\Dell Webcam Central\WebcamDell.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon] 2009-06-16 08:27 13793824 ----a-w- c:\windows\System32\nvcpl.dll . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NVHotkey] 2009-06-16 08:27 92704 ----a-w- c:\windows\System32\nvhotkey.dll . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz] 2009-06-10 20:59 1657376 ----a-w- c:\windows\System32\nwiz.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RESTART_STICKY_NOTES] 2009-07-14 01:14 354304 ----a-w- c:\windows\System32\StikyNot.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify] 2013-06-30 19:47 4643328 ----a-w- c:\users\Gebruiker\AppData\Roaming\Spotify\spotify.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify Web Helper] 2013-06-30 19:47 1104384 ----a-w- c:\users\Gebruiker\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam] 2013-03-29 19:53 1631144 ----a-w- c:\program files\Steam\Steam.exe . [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] 2013-03-12 05:32 253816 ----a-w- c:\program files\Common Files\Java\Java Update\jusched.exe . R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848] R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 49664] R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [x] R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys [x] R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [2011-09-02 1343400] R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam.sys [2008-05-06 11520] S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\N360\1404000.028\SYMDS.SYS [2013-05-21 367704] S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\N360\1404000.028\SYMEFA.SYS [2013-05-23 934488] S1 BHDrvx86;BHDrvx86;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\BASHDefs\20130702.001\BHDrvx86.sys [2013-05-31 1002072] S1 ccSet_N360;Norton 360 Settings Manager;c:\windows\system32\drivers\N360\1404000.028\ccSetx86.sys [2013-04-16 134744] S1 IDSVix86;IDSVix86;c:\programdata\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_20.3.1.22\Definitions\IPSDefs\20130702.001\IDSvix86.sys [2013-05-18 386720] S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\N360\1404000.028\Ironx86.SYS [2013-03-05 175264] S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\N360\1404000.028\SYMNETS.SYS [2013-04-25 339544] S2 N360;Norton 360;c:\program files\Norton 360\Engine\20.4.0.40\ccSvcHst.exe [2013-05-21 144368] S3 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2013-03-19 242240] S3 e1yexpress;Intel® Gigabit Network Connections Driver;c:\windows\system32\DRIVERS\e1y6232.sys [2009-06-13 221912] S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2012-08-10 106656] S3 netw5v32;Intel® Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168] S3 OA001Ufd;Creative Camera OA001 Upper Filter Driver;c:\windows\system32\DRIVERS\OA001Ufd.sys [2008-06-03 144672] S3 OA001Vid;Creative Camera OA001 Function Driver;c:\windows\system32\DRIVERS\OA001Vid.sys [2008-09-18 277440] . . [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}] 2013-06-22 08:15 1165776 ----a-w- c:\program files\Google\Chrome\Application\27.0.1453.116\Installer\chrmstp.exe . Inhoud van de 'Gedeelde Taken' map . 2013-07-03 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-01 08:06] . 2013-07-03 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files\Google\Update\GoogleUpdate.exe [2013-03-18 20:04] . 2013-07-03 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files\Google\Update\GoogleUpdate.exe [2013-03-18 20:04] . . ------- Bijkomende Scan ------- . uStart Page = https://www.google.be/ IE: E&xporteren naar Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000 TCP: DhcpNameServer = 192.168.1.1 . - - - - ORPHANS VERWIJDERD - - - - . WebBrowser-{A1E75A0E-4397-4BA8-BB50-E19FB66890F4} - (no file) WebBrowser-{30F9B915-B755-4826-820B-08FBA6BD249D} - (no file) . . . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\N360] "ImagePath"="\"c:\program files\Norton 360\Engine\20.4.0.40\ccSvcHst.exe\" /s \"N360\" /m \"c:\program files\Norton 360\Engine\20.4.0.40\diMaster.dll\" /prefetch:1" . --------------------- VERGRENDELDE REGISTER SLEUTELS --------------------- . [HKEY_USERS\S-1-5-21-2144678352-162549144-307977195-1001\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*] @Allowed: (Read) (RestrictedCode) "??"=hex:2c,46,2c,1e,2e,33,63,ca,22,f3,ef,bc,b8,81,d1,c5,eb,dd,25,bc,a7,c6,53, 45,88,2f,4c,37,d6,6a,eb,b1,92,00,bd,f5,3c,f6,65,b1,75,be,16,67,3f,b2,1f,73,\ "??"=hex:35,fc,c6,3d,c9,02,ad,db,37,1f,61,de,0f,33,8f,50 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_7_700_224_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . --------------------- DLLs Geladen Onder Lopende Processen --------------------- . - - - - - - - > 'Explorer.exe'(3248) c:\users\Gebruiker\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll . Voltooingstijd: 2013-07-03 10:50:42 ComboFix-quarantined-files.txt 2013-07-03 08:50 . Pre-Run: 71.169.224.704 bytes free Post-Run: 70.836.363.264 bytes free . - - End Of File - - A7AF1348A1C2087CEE3E01C8B2F1732B A36C5E4F47E84449FF07ED3517B43A31
  21. Hij had inderdaad geen nieuwe gemaakt, hier is de juiste Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 9:41:18, on 3/07/2013 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v10.0 (10.00.9200.16611) Boot mode: Normal Running processes: C:\Program Files\Norton 360\Engine\20.4.0.40\ccSvcHst.exe C:\Windows\system32\Dwm.exe C:\Windows\system32\taskhost.exe C:\Windows\Explorer.EXE C:\Users\Gebruiker\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe C:\Users\Gebruiker\AppData\Roaming\Dropbox\bin\Dropbox.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer! R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer! R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = O1 - Hosts: ::1 localhost #[iPv6] O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\20.4.0.40\coIEPlg.dll O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\20.4.0.40\IPS\IPSBHO.DLL O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\20.4.0.40\coIEPlg.dll O4 - HKCU\..\Run: [spotify Web Helper] "C:\Users\Gebruiker\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - Startup: Dropbox.lnk = Gebruiker\AppData\Roaming\Dropbox\bin\Dropbox.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {49312E18-AA92-4CC2-BB97-55DEA7BCADD6} (WMI Class) - https://support.dell.com/systemprofiler/SysProExe.CAB O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files\Norton 360\Engine\20.4.0.40\ccSvcHst.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe -- End of file - 4606 bytes
  22. Hier zijn de logfiles van Malwarebytes en HijackThis, Malwarebytes kon niks vinden Malwarebytes Anti-Malware 1.75.0.1300 Malwarebytes : Free anti-malware download Databaseversie: v2013.07.02.06 Windows 7 Service Pack 1 x86 NTFS Internet Explorer 10.0.9200.16618 Gebruiker :: GEBRUIKER-PC [administrator] 2/07/2013 22:12:51 mbam-log-2013-07-02 (22-12-51).txt Scan type: Snelle scan Ingeschakelde scan opties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM Uitgeschakelde scan opties: P2P Objecten gescand: 202066 Verstreken tijd: 6 minuut/minuten, 15 seconde(n) Geheugenprocessen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Geheugenmodulen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Registersleutels gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Registerwaarden gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Registerdata gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Mappen gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) Bestanden gedetecteerd: 0 (Geen kwaadaardige objecten gedetecteerd) (einde) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 18:30:12, on 2/07/2013 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v10.0 (10.00.9200.16611) Boot mode: Normal Running processes: C:\Program Files\Norton 360\Engine\20.4.0.40\ccSvcHst.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskhost.exe C:\Users\Gebruiker\AppData\Roaming\Dropbox\bin\Dropbox.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer! R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer! R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: (no name) - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - (no file) O1 - Hosts: 194.71.107.15 Download music, movies, games, software! The Pirate Bay - The galaxy's most resilient BitTorrent site O1 - Hosts: 194.71.107.15 thepiratebay.org O1 - Hosts: 194.71.107.15 Download music, movies, games, software! The Pirate Bay - The galaxy's most resilient BitTorrent site O1 - Hosts: 194.71.107.15 thepiratebay.org O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\20.4.0.40\coIEPlg.dll O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\20.4.0.40\IPS\IPSBHO.DLL O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\20.4.0.40\coIEPlg.dll O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - Startup: Dropbox.lnk = Gebruiker\AppData\Roaming\Dropbox\bin\Dropbox.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Gebruiker\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {49312E18-AA92-4CC2-BB97-55DEA7BCADD6} (WMI Class) - https://support.dell.com/systemprofiler/SysProExe.CAB O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files\Norton 360\Engine\20.4.0.40\ccSvcHst.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe -- End of file - 4951 bytes
  23. Hier is de logfile, bedankt voor het snelle antwoord! Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 18:30:12, on 2/07/2013 Platform: Windows 7 SP1 (WinNT 6.00.3505) MSIE: Internet Explorer v10.0 (10.00.9200.16611) Boot mode: Normal Running processes: C:\Program Files\Norton 360\Engine\20.4.0.40\ccSvcHst.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskhost.exe C:\Users\Gebruiker\AppData\Roaming\Dropbox\bin\Dropbox.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer! R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer! R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: (no name) - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - (no file) O1 - Hosts: 194.71.107.15 Download music, movies, games, software! The Pirate Bay - The galaxy's most resilient BitTorrent site O1 - Hosts: 194.71.107.15 thepiratebay.org O1 - Hosts: 194.71.107.15 Download music, movies, games, software! The Pirate Bay - The galaxy's most resilient BitTorrent site O1 - Hosts: 194.71.107.15 thepiratebay.org O2 - BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\20.4.0.40\coIEPlg.dll O2 - BHO: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\20.4.0.40\IPS\IPSBHO.DLL O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\20.4.0.40\coIEPlg.dll O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE') O4 - Startup: Dropbox.lnk = Gebruiker\AppData\Roaming\Dropbox\bin\Dropbox.exe O8 - Extra context menu item: E&xporteren naar Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Gebruiker\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {49312E18-AA92-4CC2-BB97-55DEA7BCADD6} (WMI Class) - https://support.dell.com/systemprofiler/SysProExe.CAB O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files\Norton 360\Engine\20.4.0.40\ccSvcHst.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe -- End of file - 4951 bytes
  24. De laatste anderhalve maand heb ik met mijn laptop regelmatig last van pieken in CPU van 80%-100% en mijn physical memory zit bijna permanent rond 50%. Hierdoor werkt mijn laptop zeer traag of loopt hij zelfs vast, en daarna evensnel als het gekomen is verdwijnt het weer. De specs van mijn pc zijn volgende: - Processor: intel core 2 duo CPU P8600 2.40GHz - RAM: 4GB - Systeem: 32-bit - Grafisch kaart: NVIDIA Quadro NVS 160M - OS: windows 7 In de tussentijd heb ik reeds het volgende geprobeerd (zonder veel succes): - Volledige systeemscan met anti-virus, anti-spyware en anti-malware - Opkuisen met CCleaner - Register leegmaken - Defragmenteren - Onnodige programma's wissen - Onnodige opstartprogramma's verwijderen Ik heb bij mijn taskmanager gekeken welke processen CPU gebruiken, maar dat is enkel taskmanager zelf. Ik heb ook gedacht aan virussen of spyware of malware, maar daar is niets van te vinden. En de rest dat ik geprobeerd heb helpt ook niet. Voorlopig zit ik door mijn ideeën en kennis heen aan wat het zou kunnen liggen of wat ik zou kunnen doen, kan iemand mij helpen?
×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.