eric1969

dit is wat er uit het log te voor schijn kwam: Zoek.exe v5.0.0.0 Updated 18-Januari-2014 Tool run by norabo on zo 19-01-2014 at 15:20:01,97. Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\norabo\Desktop\zoek.exe [scan all users] [Checkboxes used] ==== Older Logs ====================== C:\zoek-results2014-01-17-181758.log 24812 bytes ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== ====== C:\Users\norabo\AppData\Local\Temp ==== ====== Java Cache ===== ====== C:\Windows\SysWOW64 ===== 2014-01-15 13:40:38 95E15A2DE75AB48728AB8E1911C3EDB1 264616 ----a-w- C:\Windows\SysWOW64\javaws.exe 2014-01-15 13:40:29 CB3638541DCAC86EE17FA8258202E20E 175016 ----a-w- C:\Windows\SysWOW64\javaw.exe 2014-01-15 13:40:29 A7871E39687EC6EE9712209DAE248B3A 96168 ----a-w- C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-01-15 13:40:29 9395BBE294045909A025C9F3DC3D9025 174504 ----a-w- C:\Windows\SysWOW64\java.exe ====== C:\Windows\SysWOW64\drivers ===== ====== C:\Windows\Sysnative ===== 2014-01-15 14:16:38 F2BF71FCEAB8FB8A691408C478E2FF4C 3156480 ----a-w- C:\Windows\Sysnative\win32k.sys ====== C:\Windows\Sysnative\drivers ===== 2014-01-15 14:16:40 DCA68B0943D6FA415F0C56C92158A83A 99840 ----a-w- C:\Windows\Sysnative\drivers\usbccgp.sys 2014-01-15 14:16:40 18A85013A3E0F7E1755365D287443965 53248 ----a-w- C:\Windows\Sysnative\drivers\usbehci.sys 2014-01-15 14:16:40 12FEB33791920678F8433701C822BCFD 325120 ----a-w- C:\Windows\Sysnative\drivers\usbport.sys 2014-01-15 14:16:39 FFA06EF43987ED0DD42AD59B260C0C78 7808 ----a-w- C:\Windows\Sysnative\drivers\usbd.sys 2014-01-15 14:16:39 DD253AFC3BC6CBA412342DE60C3647F3 30720 ----a-w- C:\Windows\Sysnative\drivers\usbuhci.sys 2014-01-15 14:16:39 8D1196CFBB223621F2C67D45710F25BA 343040 ----a-w- C:\Windows\Sysnative\drivers\usbhub.sys 2014-01-15 14:16:39 765A92D428A8DB88B960DA5A8D6089DC 25600 ----a-w- C:\Windows\Sysnative\drivers\usbohci.sys 2014-01-15 14:16:36 3555BA97171CD153118F73FDCCC8BFDE 376768 ----a-w- C:\Windows\Sysnative\drivers\netio.sys 2014-01-14 18:25:43 0BB97D43299910CBFBA59C461B99B910 25928 ----a-w- C:\Windows\Sysnative\drivers\mbam.sys ====== C:\Windows\Tasks ====== ====== C:\Windows\Temp ====== ======= C:\Program Files ===== 2014-01-17 14:21:52 -------- d-----w- C:\Program Files\trend micro ======= C:\PROGRA~2 ===== 2014-01-16 08:14:38 -------- d-----w- C:\PROGRA~2\uTorrent 2014-01-08 14:37:22 -------- d-----w- C:\PROGRA~2\Freemake ======= C: ===== ====== C:\Users\norabo\AppData\Roaming ====== 2014-01-17 18:15:31 -------- d-----w- C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp 2014-01-17 18:15:31 -------- d-----w- C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp 2014-01-17 18:15:31 -------- d-----w- C:\Users\norabo\AppData\Local\Temp 2014-01-17 18:15:31 -------- d-----w- C:\Users\Default\AppData\Local\Temp 2014-01-17 18:15:31 -------- d-----w- C:\Users\Default User\AppData\Local\Temp 2014-01-17 12:41:00 -------- d-----w- C:\Users\norabo\AppData\Roaming\BitComet 2014-01-15 12:55:51 -------- d-----w- C:\Users\norabo\AppData\Roaming\0F1F1C2Y1H1P1C0I0T 2014-01-08 14:38:23 -------- d-----w- C:\Users\norabo\AppData\Local\FreemakeVideoConverter 2014-01-08 14:37:57 -------- d-----w- C:\Users\norabo\AppData\Locallow\entrusted 2014-01-08 14:35:51 -------- d-----w- C:\Users\norabo\AppData\Local\Programs ====== C:\Users\norabo ====== 2014-01-17 14:21:34 662C39FC1E27131551D557862CEC47F0 935175 ----a-w- C:\Users\norabo\Downloads\RSITx64.exe 2014-01-15 12:55:01 35AAEDE3CEF2C74B1B46557340277122 1129552 ----a-w- C:\Users\norabo\Downloads\utorrent [1].exe 2014-01-14 18:06:28 -------- d-----w- C:\ProgramData\1C17B 2014-01-08 14:37:35 -------- d-----w- C:\ProgramData\Freemake 2013-12-26 10:49:09 -------- d-----w- C:\Users\norabo\Corel DRAW Graphics Suite X5 15.0.0 ====== C: exe-files == 2014-01-17 18:22:12 3C2A9F3195CDDD8943971DC8A677EF25 294912 ----a-w- C:\Windows\Temp\bcdedit.exe 2014-01-17 14:21:53 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\norabo.exe 2014-01-17 14:21:34 662C39FC1E27131551D557862CEC47F0 935175 ----a-w- C:\Users\norabo\Downloads\RSITx64.exe 2014-01-16 08:14:38 ECF7042E33204DBEAE8295427478C028 399736 ----a-w- C:\Program Files (x86)\uTorrent\uTorrent.exe 2014-01-16 07:02:25 1D0A1FF655C6CF2EA2DE4FB6AA8246AD 9046696 ----a-w- C:\Program Files (x86)\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\32.0.1700.76\32.0.1700.76_31.0.1650.63_chrome_updater.exe 2014-01-15 13:40:38 95E15A2DE75AB48728AB8E1911C3EDB1 264616 ----a-w- C:\Windows\SysWOW64\javaws.exe 2014-01-15 13:40:29 CB3638541DCAC86EE17FA8258202E20E 175016 ----a-w- C:\Windows\SysWOW64\javaw.exe 2014-01-15 13:40:29 9395BBE294045909A025C9F3DC3D9025 174504 ----a-w- C:\Windows\SysWOW64\java.exe 2014-01-15 13:32:39 3842C46F2FBC7522EF625F1833530804 145408 ----a-w- C:\Users\norabo\AppData\LocalLow\Sun\Java\jre1.7.0_51\lzma.exe 2014-01-15 13:06:01 C82A6D1E1CEB24A963C5CA20B574B78F 1340496 ----a-w- C:\Users\norabo\AppData\Roaming\uTorrent\updates\3.3.2_30446.exe 2014-01-15 12:55:51 8C7FB9078A63B7E5E899E7A2DBB0DB53 1114624 ----a-w- C:\Users\norabo\AppData\Roaming\0F1F1C2Y1H1P1C0I0T\uTorrent Packages\uninstaller.exe 2014-01-15 12:55:01 35AAEDE3CEF2C74B1B46557340277122 1129552 ----a-w- C:\Users\norabo\Downloads\utorrent [1].exe === C: other files == 2014-01-18 13:30:04 DAD95015747A9E7B4725D6F3D23D712E 328 ----a-w- C:\Users\norabo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PU1T7NL8\home[1].vbs 2014-01-17 18:04:39 6AC56FFB9FC788EAE59E3041FD4B754A 71446013 ----a-w- C:\Users\Public\Desktop\sample_17-01-2014_1904.zip 2014-01-15 14:16:40 DCA68B0943D6FA415F0C56C92158A83A 99840 ----a-w- C:\Windows\System32\drivers\usbccgp.sys 2014-01-15 14:16:40 18A85013A3E0F7E1755365D287443965 53248 ----a-w- C:\Windows\System32\drivers\usbehci.sys 2014-01-15 14:16:40 12FEB33791920678F8433701C822BCFD 325120 ----a-w- C:\Windows\System32\drivers\usbport.sys 2014-01-15 14:16:39 FFA06EF43987ED0DD42AD59B260C0C78 7808 ----a-w- C:\Windows\System32\drivers\usbd.sys 2014-01-15 14:16:39 DD253AFC3BC6CBA412342DE60C3647F3 30720 ----a-w- C:\Windows\System32\drivers\usbuhci.sys 2014-01-15 14:16:39 8D1196CFBB223621F2C67D45710F25BA 343040 ----a-w- C:\Windows\System32\drivers\usbhub.sys 2014-01-15 14:16:39 765A92D428A8DB88B960DA5A8D6089DC 25600 ----a-w- C:\Windows\System32\drivers\usbohci.sys 2014-01-15 14:16:38 F2BF71FCEAB8FB8A691408C478E2FF4C 3156480 ----a-w- C:\Windows\System32\win32k.sys 2014-01-15 14:16:36 3555BA97171CD153118F73FDCCC8BFDE 376768 ----a-w- C:\Windows\System32\drivers\netio.sys 2014-01-14 18:25:43 0BB97D43299910CBFBA59C461B99B910 25928 ----a-w- C:\Windows\System32\drivers\mbam.sys ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-21-602978243-359986793-629424688-1003\Software\Microsoft\Windows\CurrentVersion\Run] "TomTomHOME.exe"="C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe" "uTorrent"="C:\Program Files (x86)\uTorrent\uTorrent.exe" [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\RunOnce] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CLMLServer"="C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe" "StartCCC"="C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe MSRun" "APSDaemon"="C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" "RemoteControl11"="C:\Program Files (x86)\CyberLink\PowerDVD11\PDVD11Serv.exe" "Reader Library Launcher"="C:\Program Files (x86)\Sony\Reader\Data\bin\launcher\Reader Library Launcher.exe" "HP Software Update"="C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe" "Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" "iTunesHelper"="C:\Program Files (x86)\iTunes\iTunesHelper.exe" "AvastUI.exe"="C:\Program Files\AVAST Software\Avast\AvastUI.exe /nogui" "mobilegeni daemon"="C:\Program Files (x86)\Mobogenie\DaemonProcess.exe" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "TomTomHOME.exe"="C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe" "uTorrent"="C:\Program Files (x86)\uTorrent\uTorrent.exe" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="c:\\progra~3\\browse~1\\261249~1.132\\{c16c1~1\\browse~1.dll" ==== Startup Registry Enabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RTHDVCPL"="C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s" "MedionReminder"="C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe" "SBRegRebootCleaner"="C:\Program Files (x86)\Ad-Aware Antivirus\SBRC.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] "MedionReminder"="C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe /DeleteRunKey" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="C:\\PROGRA~2\\SearchProtect\\SearchProtect\\bin\\SPVC64Loader.dll" ==== Startup Folders ====================== 2013-06-18 12:56:00 1954 ----a-w- C:\Users\norabo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Inktwaarschuwingen controleren - HP Deskjet 1050 J410 series.lnk ==== Task Scheduler Jobs ====================== C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [11-12-2013 17:32] C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ [undetermined Task] C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [21-10-2011 13:19] ==== Other Scheduled Tasks ====================== "C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe] "C:\Windows\SysNative\tasks\CreateChoiceProcessTask" [C:\Windows\System32\browserchoice.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\HPCustParticipation HP Deskjet 1050 J410 series" ["C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HPCustPartic.exe"] "C:\Windows\SysNative\tasks\Apple\AppleSoftwareUpdate" [C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe] "C:\Windows\SysNative\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc] ==== Firefox Extensions ====================== ==== Firefox Plugins ====================== ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="Startpagina.nl | Jouw startpagina voor weer, verkeer en meer" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="Startpagina.nl | Jouw startpagina voor weer, verkeer en meer" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes "DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="{searchTerms} - Bing" {63034A23-0F8A-47E6-8484-2ABF0D218F88} Google Url="{searchTerms} - Google Search" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="{searchTerms} - Google Search}" ==== Empty IE Cache ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\norabo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\norabo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\6MM608QK will be deleted at reboot C:\Users\norabo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\8PVD1J91 will be deleted at reboot C:\Users\norabo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PU1T7NL8 will be deleted at reboot C:\Users\norabo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\SDRUPT0T will be deleted at reboot C:\Users\norabo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\TN8RW3JR will be deleted at reboot C:\Users\norabo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XKQ071MJ will be deleted at reboot ==== Empty FireFox Cache ====================== No FireFox Cache found ==== Empty Chrome Cache ====================== C:\Users\norabo\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache is not empty, a reboot is needed ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=1313 folders=167 169684571 bytes) ==== Empty Temp Folders ====================== C:\Users\Default\AppData\Local\Temp emptied successfully C:\Users\Default User\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\Users\norabo\AppData\Local\Temp will be emptied at reboot C:\Windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\norabo\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Users\norabo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\6MM608QK" not found "C:\Users\norabo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\8PVD1J91" not found "C:\Users\norabo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\PU1T7NL8" not found "C:\Users\norabo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\SDRUPT0T" not found "C:\Users\norabo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\TN8RW3JR" not found "C:\Users\norabo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XKQ071MJ" not found "C:\Users\norabo\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KZWS7KCS\games2.spele.nl" not found ==== EOF on zo 19-01-2014 at 15:39:30,22 ====================== tevens was dit het antwoord van microsoft op mijn vraag over t blijven verdubbelen van mijn mailtjes in postvak verzonden,helaas klinkt dit als chinees voor mij..... tevens was dit het antwoord van microsoft op mijn vraag over t blijven verdubbelen van mijn mailtjes in postvak verzonden,helaas klinkt dit als chinees voor mij..... Hallo, Bedankt dat je contact met ons opgenomen hebt en onze welgemeende excuses voor de vertraging in onze reactie. Ik begrijp dat je hebt gemerkt dat je map Verzonden te snel volloopt met dubbel verzonden berichten en ik wil je hier graag bij helpen. Dit gebeurt vaak, als je je account hebt toegevoegd aan één of meerdere mailclients, zoals een desktop mailprogramma of een app op je telefoon, omdat er iets mis gaat met de synchronisatie. Je kunt dit oplossen door je account uit je mailclients te verwijderen en ze daarna opnieuw toe te voegen. Controleer eerst wel of de programma's die je gebruikt voor het benaderen van je berichten niet je berichten downloaden zonder een kopie achter te laten op de server. Dit kun je op de volgende manier doen: 1. Meld je aan via http://mail.live.com. 2. Ga naar het tandwiel en kies voor Meer e-mailinstellingen. 3. Kies onder Account beheren voor de optie Verbinding maken met apparaten en apps via POP. 4. Controleer nu of de eerste optie is aangevinkt. Als dit niet het geval is, raad ik je aan om je berichten eerst vanuit je mailclient naar jezelf te sturen, omdat je ze anders kwijt bent en wij ook niets meer voor je kunnen doen. Laat het ons even weten, als je hier vragen over hebt. Met vriendelijke groet, Mechteld

hallo kape, bedankt voor je snelle hulp.mijn mailtjes zijn vanaf vanmiddag 13.00 uur tot nu verdubbeld tot 628 stuks...verder heb ik gedaan wat je vroeg en dit is er uit gekomen: Zoek.exe v5.0.0.0 Updated 17-Januari-2014 Tool run by norabo on vr 17-01-2014 at 18:54:24,11. Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64 Running in: Normal Mode Internet Access Detected Launched: C:\Users\norabo\AppData\Local\Temp\Rar$EXa0.604\zoek.exe [scan all users] [Quick Scan] [Auto Clean] ==== System Restore Info ====================== 17-1-2014 18:55:06 Zoek.exe System Restore Point Created Succesfully. ==== Creating Sample_17-01-2014_1904.zip ====================== Process iexplore.exe killed Process rundll32.exe killed Copied file C:\Users\norabo\iTunes64Setup.exe to sample\iTunes64Setup.exe sample\iTunes64Setup.exe renamed to 91C72FB8035A33C00D18E987A780D0D2 C:\Users\Public\Desktop\sample_17-01-2014_1904.zip created successfully ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} deleted successfully HKEY_USERS\S-1-5-21-602978243-359986793-629424688-1003\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} deleted successfully HKEY_USERS\S-1-5-21-602978243-359986793-629424688-1003\Software\Microsoft\Internet Explorer\SearchScopes\{A384B67D-EE5A-4351-A454-DFEEDAD30CFA} deleted successfully ==== Deleting CLSID Registry Values ====================== ==== Deleting Services ====================== ==== Deleting Files \ Folders ====================== C:\Users\norabo\AppData\Local\genienext deleted C:\PROGRA~2\TornTV.com deleted C:\Users\norabo\daemonprocess.txt deleted C:\PROGRA~2\Delta deleted C:\PROGRA~2\entrusted deleted C:\PROGRA~2\Yontoo deleted C:\PROGRA~2\Conduit deleted C:\found.000 deleted C:\found.001 deleted C:\Users\norabo\AppData\Roaming\Yontoo deleted C:\ProgramData\Conduit deleted C:\ProgramData\Partner deleted C:\ProgramData\Tarma Installer deleted C:\ProgramData\Babylon deleted C:\Users\norabo\AppData\Local\Wajam deleted C:\Users\norabo\AppData\Local\SearchProtect deleted C:\Users\norabo\AppData\Local\Mobogenie deleted C:\Users\norabo\AppData\Local\cache deleted C:\Users\norabo\AppData\Local\PackageAware deleted C:\Users\norabo\AppData\Local\Conduit deleted C:\Users\norabo\AppData\Local\Google\Chrome\User Data\Default\Extensions\niapdbllcanepiiimjjndipklodoedlc deleted C:\windows\SysNative\Tasks\BackgroundContainer Startup Task deleted C:\Users\norabo\AppData\LocalLow\PriceGong deleted C:\Users\norabo\AppData\LocalLow\Conduit deleted C:\windows\SysNative\Tasks\EPUpdater deleted C:\Windows\Syswow64\sho367.tmp deleted C:\Windows\Syswow64\sho42B8.tmp deleted C:\Windows\Syswow64\sho6518.tmp deleted C:\Windows\Syswow64\sho8373.tmp deleted C:\Windows\Syswow64\shoAE21.tmp deleted C:\Windows\Syswow64\shoBA0A.tmp deleted C:\Windows\Syswow64\shoBF0D.tmp deleted C:\Windows\Syswow64\shoD7C3.tmp deleted C:\Windows\Syswow64\shoE868.tmp deleted C:\Windows\Syswow64\SearchProtect deleted C:\Windows\SysWow64\searchplugins deleted C:\Windows\SysWow64\Extensions deleted C:\Users\norabo\Documents\PC Speed Maximizer deleted C:\Users\norabo\iTunes64Setup.exe deleted "C:\Users\norabo\AppData\Roaming\Olhee\ysgy.cod" deleted "C:\Users\norabo\AppData\Roaming\Olhee" deleted "C:\Users\norabo\AppData\Roaming\Yretq" deleted ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== ====== C:\Users\norabo\AppData\Local\Temp ==== 2014-01-14 18:24:13 3549CA5E8809FF9BE5F7216D4FBB7443 4459336 ----a-w- C:\Users\norabo\AppData\Local\Temp\tbWise.dll 2014-01-14 18:22:38 36179B382A989075FF5FA282434F6892 394736 ----a-w- C:\Users\norabo\AppData\Local\Temp\uninst1.exe ====== Java Cache ===== 2014-01-14 18:27:08 70DA11532F531B0661D1AD8D00CF1A4A 83 ----a-w- C:\Users\norabo\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\13\3d9e380d-6.0.lap 2014-01-14 18:27:15 5D48E92A736232DBD585829F546DC49C 24806 ----a-w- C:\Users\norabo\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\38\2fb889a6-4cc7dcaa 2014-01-14 18:27:13 1FBF1282E18B7CF2DEE76DF2CEC7A3E6 17726 ----a-w- C:\Users\norabo\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\55\7c8e77b7-31bfffcc ====== C:\Windows\SysWOW64 ===== 2014-01-15 13:40:38 95E15A2DE75AB48728AB8E1911C3EDB1 264616 ----a-w- C:\Windows\SysWOW64\javaws.exe 2014-01-15 13:40:29 CB3638541DCAC86EE17FA8258202E20E 175016 ----a-w- C:\Windows\SysWOW64\javaw.exe 2014-01-15 13:40:29 A7871E39687EC6EE9712209DAE248B3A 96168 ----a-w- C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-01-15 13:40:29 9395BBE294045909A025C9F3DC3D9025 174504 ----a-w- C:\Windows\SysWOW64\java.exe ====== C:\Windows\SysWOW64\drivers ===== ====== C:\Windows\Sysnative ===== 2014-01-15 14:16:38 F2BF71FCEAB8FB8A691408C478E2FF4C 3156480 ----a-w- C:\Windows\Sysnative\win32k.sys ====== C:\Windows\Sysnative\drivers ===== 2014-01-15 14:16:40 DCA68B0943D6FA415F0C56C92158A83A 99840 ----a-w- C:\Windows\Sysnative\drivers\usbccgp.sys 2014-01-15 14:16:40 18A85013A3E0F7E1755365D287443965 53248 ----a-w- C:\Windows\Sysnative\drivers\usbehci.sys 2014-01-15 14:16:40 12FEB33791920678F8433701C822BCFD 325120 ----a-w- C:\Windows\Sysnative\drivers\usbport.sys 2014-01-15 14:16:39 FFA06EF43987ED0DD42AD59B260C0C78 7808 ----a-w- C:\Windows\Sysnative\drivers\usbd.sys 2014-01-15 14:16:39 DD253AFC3BC6CBA412342DE60C3647F3 30720 ----a-w- C:\Windows\Sysnative\drivers\usbuhci.sys 2014-01-15 14:16:39 8D1196CFBB223621F2C67D45710F25BA 343040 ----a-w- C:\Windows\Sysnative\drivers\usbhub.sys 2014-01-15 14:16:39 765A92D428A8DB88B960DA5A8D6089DC 25600 ----a-w- C:\Windows\Sysnative\drivers\usbohci.sys 2014-01-15 14:16:36 3555BA97171CD153118F73FDCCC8BFDE 376768 ----a-w- C:\Windows\Sysnative\drivers\netio.sys 2014-01-14 18:25:43 0BB97D43299910CBFBA59C461B99B910 25928 ----a-w- C:\Windows\Sysnative\drivers\mbam.sys 2013-12-19 14:42:14 AAB5F5336EDBB5D99CC7E1A9F4D8F63F 79672 ----a-w- C:\Windows\Sysnative\drivers\aswstm.sys ====== C:\Windows\Tasks ====== ====== C:\Windows\Temp ====== ======= C:\Program Files ===== 2014-01-17 14:21:52 -------- d-----w- C:\Program Files\trend micro ======= C:\PROGRA~2 ===== 2014-01-16 08:14:38 -------- d-----w- C:\PROGRA~2\uTorrent 2014-01-08 14:37:22 -------- d-----w- C:\PROGRA~2\Freemake ======= C: ===== ====== C:\Users\norabo\AppData\Roaming ====== 2014-01-17 12:41:00 -------- d-----w- C:\Users\norabo\AppData\Roaming\BitComet 2014-01-15 12:55:51 -------- d-----w- C:\Users\norabo\AppData\Roaming\0F1F1C2Y1H1P1C0I0T 2014-01-08 14:38:23 -------- d-----w- C:\Users\norabo\AppData\Local\FreemakeVideoConverter 2014-01-08 14:37:57 -------- d-----w- C:\Users\norabo\AppData\Locallow\entrusted 2014-01-08 14:35:51 -------- d-----w- C:\Users\norabo\AppData\Local\Programs ====== C:\Users\norabo ====== 2014-01-17 14:21:34 662C39FC1E27131551D557862CEC47F0 935175 ----a-w- C:\Users\norabo\Downloads\RSITx64.exe 2014-01-15 12:55:01 35AAEDE3CEF2C74B1B46557340277122 1129552 ----a-w- C:\Users\norabo\Downloads\utorrent [1].exe 2014-01-14 18:06:28 -------- d-----w- C:\ProgramData\1C17B 2014-01-08 14:37:35 -------- d-----w- C:\ProgramData\Freemake 2013-12-26 10:49:09 -------- d-----w- C:\Users\norabo\Corel DRAW Graphics Suite X5 15.0.0 2013-12-19 14:42:25 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast ====== C: exe-files == 2014-01-17 14:21:53 9A2347903D6EDB84C10F288BC0578C1C 388608 ----a-w- C:\Program Files\trend micro\norabo.exe 2014-01-17 14:21:34 662C39FC1E27131551D557862CEC47F0 935175 ----a-w- C:\Users\norabo\Downloads\RSITx64.exe 2014-01-17 14:20:45 662C39FC1E27131551D557862CEC47F0 935175 ----a-w- C:\Users\norabo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ILXA1AU9\RSITx64.exe 2014-01-17 12:39:47 A04F1066AC9403129EAD06F14E763D3F 9471280 ----a-w- C:\Users\norabo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D1UAJZRR\BitComet_1.37_x64_setup.exe 2014-01-17 08:51:51 2AC021D18007B50EF1A4FC8FCA634A48 124536 ----a-w- C:\Users\norabo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MX29UD0L\FixBadtr.exe 2014-01-16 08:14:38 ECF7042E33204DBEAE8295427478C028 399736 ----a-w- C:\Program Files (x86)\uTorrent\uTorrent.exe 2014-01-16 08:13:20 ECF7042E33204DBEAE8295427478C028 399736 ----a-w- C:\Users\norabo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ILXA1AU9\2.2.1.25113_utorrent.exe 2014-01-16 07:02:25 1D0A1FF655C6CF2EA2DE4FB6AA8246AD 9046696 ----a-w- C:\Program Files (x86)\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\32.0.1700.76\32.0.1700.76_31.0.1650.63_chrome_updater.exe 2014-01-15 13:40:38 95E15A2DE75AB48728AB8E1911C3EDB1 264616 ----a-w- C:\Windows\SysWOW64\javaws.exe 2014-01-15 13:40:29 CB3638541DCAC86EE17FA8258202E20E 175016 ----a-w- C:\Windows\SysWOW64\javaw.exe 2014-01-15 13:40:29 9395BBE294045909A025C9F3DC3D9025 174504 ----a-w- C:\Windows\SysWOW64\java.exe 2014-01-15 13:32:39 3842C46F2FBC7522EF625F1833530804 145408 ----a-w- C:\Users\norabo\AppData\LocalLow\Sun\Java\jre1.7.0_51\lzma.exe 2014-01-15 13:06:01 C82A6D1E1CEB24A963C5CA20B574B78F 1340496 ----a-w- C:\Users\norabo\AppData\Roaming\uTorrent\updates\3.3.2_30446.exe 2014-01-15 13:05:58 C82A6D1E1CEB24A963C5CA20B574B78F 1340496 ----a-w- C:\Users\norabo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D1UAJZRR\utorrent (1).exe 2014-01-15 12:55:51 8C7FB9078A63B7E5E899E7A2DBB0DB53 1114624 ----a-w- C:\Users\norabo\AppData\Roaming\0F1F1C2Y1H1P1C0I0T\uTorrent Packages\uninstaller.exe 2014-01-15 12:55:01 35AAEDE3CEF2C74B1B46557340277122 1129552 ----a-w- C:\Users\norabo\Downloads\utorrent [1].exe 2014-01-15 12:53:53 57F9E61A3ABB26D903AA9FDD733D4838 688432 ----a-w- C:\Users\norabo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D1UAJZRR\utorrent.exe 2014-01-14 18:25:14 683FDD3D773C58B262DC07CD0C6CE938 10285040 ----a-w- C:\Users\norabo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ILXA1AU9\mbam-setup-1.75.0.1300.exe 2014-01-14 18:22:38 36179B382A989075FF5FA282434F6892 394736 ----a-w- C:\Users\norabo\AppData\Local\Temp\uninst1.exe === C: other files == 2014-01-17 18:04:39 6AC56FFB9FC788EAE59E3041FD4B754A 71446013 ----a-w- C:\Users\Public\Desktop\sample_17-01-2014_1904.zip 2014-01-16 08:09:02 21BBE8C15DEA86F8C2374F30A4676D3D 102 ----a-w- C:\Users\norabo\AppData\Local\Temp\utt69AD.tmp.bat 2014-01-15 14:16:40 DCA68B0943D6FA415F0C56C92158A83A 99840 ----a-w- C:\Windows\System32\drivers\usbccgp.sys 2014-01-15 14:16:40 18A85013A3E0F7E1755365D287443965 53248 ----a-w- C:\Windows\System32\drivers\usbehci.sys 2014-01-15 14:16:40 12FEB33791920678F8433701C822BCFD 325120 ----a-w- C:\Windows\System32\drivers\usbport.sys 2014-01-15 14:16:39 FFA06EF43987ED0DD42AD59B260C0C78 7808 ----a-w- C:\Windows\System32\drivers\usbd.sys 2014-01-15 14:16:39 DD253AFC3BC6CBA412342DE60C3647F3 30720 ----a-w- C:\Windows\System32\drivers\usbuhci.sys 2014-01-15 14:16:39 8D1196CFBB223621F2C67D45710F25BA 343040 ----a-w- C:\Windows\System32\drivers\usbhub.sys 2014-01-15 14:16:39 765A92D428A8DB88B960DA5A8D6089DC 25600 ----a-w- C:\Windows\System32\drivers\usbohci.sys 2014-01-15 14:16:38 F2BF71FCEAB8FB8A691408C478E2FF4C 3156480 ----a-w- C:\Windows\System32\win32k.sys 2014-01-15 14:16:36 3555BA97171CD153118F73FDCCC8BFDE 376768 ----a-w- C:\Windows\System32\drivers\netio.sys 2014-01-15 12:55:43 1F5117882F4B0695C446D59BCDF27A47 26528 ----a-w- C:\Users\norabo\AppData\Local\Temp\scoped_dir_7420_27667\wajam.crx 2014-01-15 12:49:22 C82AB54C276A1734876D911EC622A7C2 53 ----a-w- C:\Users\norabo\AppData\Local\Temp\utt535E.tmp.bat 2014-01-14 18:25:43 0BB97D43299910CBFBA59C461B99B910 25928 ----a-w- C:\Windows\System32\drivers\mbam.sys ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-21-602978243-359986793-629424688-1003\Software\Microsoft\Windows\CurrentVersion\Run] "TomTomHOME.exe"="C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe" "uTorrent"="C:\Program Files (x86)\uTorrent\uTorrent.exe" [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\RunOnce] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CLMLServer"="C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe" "StartCCC"="C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe MSRun" "APSDaemon"="C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" "RemoteControl11"="C:\Program Files (x86)\CyberLink\PowerDVD11\PDVD11Serv.exe" "Reader Library Launcher"="C:\Program Files (x86)\Sony\Reader\Data\bin\launcher\Reader Library Launcher.exe" "HP Software Update"="C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe" "Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" "SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" "iTunesHelper"="C:\Program Files (x86)\iTunes\iTunesHelper.exe" "AvastUI.exe"="C:\Program Files\AVAST Software\Avast\AvastUI.exe /nogui" "mobilegeni daemon"="C:\Program Files (x86)\Mobogenie\DaemonProcess.exe" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] "TomTomHOME.exe"="C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe" "uTorrent"="C:\Program Files (x86)\uTorrent\uTorrent.exe" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="c:\\progra~3\\browse~1\\261249~1.132\\{c16c1~1\\browse~1.dll" ==== Startup Registry Enabled x64 ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RTHDVCPL"="C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s" "MedionReminder"="C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe" "SBRegRebootCleaner"="C:\Program Files (x86)\Ad-Aware Antivirus\SBRC.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] "MedionReminder"="C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe /DeleteRunKey" [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="C:\\PROGRA~2\\SearchProtect\\SearchProtect\\bin\\SPVC64Loader.dll" ==== Startup Folders ====================== 2013-06-18 12:56:00 1954 ----a-w- C:\Users\norabo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Inktwaarschuwingen controleren - HP Deskjet 1050 J410 series.lnk ==== Task Scheduler Jobs ====================== C:\Windows\tasks\Adobe Flash Player Updater.job --a------ C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [11-12-2013 17:32] C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ [undetermined Task] C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [21-10-2011 13:19] ==== Other Scheduled Tasks ====================== "C:\Windows\SysNative\tasks\Adobe Flash Player Updater" [C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe] "C:\Windows\SysNative\tasks\CreateChoiceProcessTask" [C:\Windows\System32\browserchoice.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineCore" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\GoogleUpdateTaskMachineUA" [C:\Program Files (x86)\Google\Update\GoogleUpdate.exe] "C:\Windows\SysNative\tasks\HPCustParticipation HP Deskjet 1050 J410 series" ["C:\Program Files\HP\HP Deskjet 1050 J410 series\Bin\HPCustPartic.exe"] "C:\Windows\SysNative\tasks\Apple\AppleSoftwareUpdate" [C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe] "C:\Windows\SysNative\tasks\OfficeSoftwareProtectionPlatform\SvcRestartTask" [%systemroot%\system32\sc.exe start osppsvc] ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions] "linkfilter@kaspersky.ru"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2011\FFExt\linkfilter@kaspersky.ru" [] ==== Firefox Extensions ====================== ==== Firefox Plugins ====================== ==== Chrome Look ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions jbolfgndggfhhpbnkgnpjkfhinclbigj - No path found[] jpmbfleldcgkldadpdinhjjopdfpjfjp - C:\Users\norabo\AppData\Local\Wajam\Chrome\wajam.crx[] nbmafkdmkkckhggblphicnnhlgljnoje - C:\Program Files (x86)\TornTV.com\torn2_10.crx[] niapdbllcanepiiimjjndipklodoedlc - C:\Program Files (x86)\Yontoo\YontooLayers.crx[] pgafcinpmmpklohkojmllohd****efph - C:\ProgramData\BrowserProtect\2.6.1125.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.crx[] Delta Toolbar - norabo\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde ==== Chrome Fix ====================== C:\Users\norabo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_nbmafkdmkkckhggblphicnnhlgljnoje_0.localstorage deleted successfully C:\Users\norabo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_nbmafkdmkkckhggblphicnnhlgljnoje_0.localstorage-journal deleted successfully C:\Users\norabo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_niapdbllcanepiiimjjndipklodoedlc_0.localstorage deleted successfully C:\Users\norabo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_niapdbllcanepiiimjjndipklodoedlc_0.localstorage-journal deleted successfully C:\Users\norabo\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde deleted successfully ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="Startpagina.nl | Jouw startpagina voor weer, verkeer en meer" "Default_Page_URL"="Welcome to ALDI" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{A384B67D-EE5A-4351-A454-DFEEDAD30CFA}" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{A384B67D-EE5A-4351-A454-DFEEDAD30CFA}] not found New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Default_Page_URL"="MSN NL: Hotmail, Outlook, Skype, het laatste nieuws, entertainment en meer!" "Start Page"="Startpagina.nl | Jouw startpagina voor weer, verkeer en meer" [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes] "DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} Unknown Url="Not_Found" {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="{searchTerms} - Bing" {63034A23-0F8A-47E6-8484-2ABF0D218F88} Google Url="{searchTerms} - Google Search" {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="{searchTerms} - Google Search}" {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} Unknown Url="Not_Found" ==== Deleting CLSID Registry Keys ====================== HKEY_USERS\S-1-5-21-602978243-359986793-629424688-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8} deleted successfully HKEY_USERS\S-1-5-21-602978243-359986793-629424688-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8} deleted successfully HKEY_USERS\S-1-5-21-602978243-359986793-629424688-1003\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} deleted successfully HKEY_USERS\S-1-5-21-602978243-359986793-629424688-1003\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B} deleted successfully HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8} deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8} deleted successfully ==== Deleting CLSID Registry Values ====================== HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\virtualKeyboard@kaspersky.ru deleted successfully HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\KavAntiBanner@Kaspersky.ru deleted successfully HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\linkfilter@kaspersky.ru deleted successfully ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\jbolfgndggfhhpbnkgnpjkfhinclbigj deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\nbmafkdmkkckhggblphicnnhlgljnoje deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\niapdbllcanepiiimjjndipklodoedlc deleted successfully HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\pgafcinpmmpklohkojmllohd****efph deleted successfully HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B} deleted successfully ==== Empty IE Cache ====================== C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\norabo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully C:\Users\norabo\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\norabo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D1UAJZRR will be deleted at reboot C:\Users\norabo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ILXA1AU9 will be deleted at reboot ==== Empty FireFox Cache ====================== No FireFox Cache found ==== Empty Chrome Cache ====================== C:\Users\norabo\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache is not empty, a reboot is needed ==== Empty All Java Cache ====================== Java Cache cleared successfully ==== C:\zoek_backup content ====================== C:\zoek_backup (files=1313 folders=167 169684571 bytes) ==== Empty Temp Folders ====================== C:\Users\Default\AppData\Local\Temp emptied successfully C:\Users\Default User\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\Users\norabo\AppData\Local\Temp will be emptied at reboot C:\Windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\norabo\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== Deleting Files / Folders ====================== "C:\Users\norabo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D1UAJZRR" deleted "C:\Users\norabo\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ILXA1AU9" deleted "C:\Users\norabo\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KZWS7KCS\mm.markandmini.com" not found "C:\Users\norabo\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\KZWS7KCS\static.issuu.com" not found ==== EOF on vr 17-01-2014 at 19:17:58,46 ======================

mis ik nu iets of staat hier ergens het antwoord tussen of het inderdaad om een virus of iets dergelijks gaat?

hallo beste mensen, ik zit met een probleem dat luid als volgt: sinds een week tijd heb ik problemen met het feit dat in mijn map verzonden items de mailtjes blijven terug komen en zich steeds vermenigvuldigen.dit gaat in een rap tempo.binnen een dag zijn dit er ruim 3000 stuks! ik blijf ze steeds verwijderen maar ze blijven ook net zo snel weer terug komen.ik heb het programma mailwarebytes los gelaten en deze komt steeds terug met de melding: pup.optinalcategorie registry value objekt hkcu\software\microsoft\windows tevens is rond de zelfde periode mijn upload snelheid drastisch verlaagd.deze komt niet hoger dan 260 kb/s terwijl dit normaal 2 mb/s zou moeten zijn.de download snelheid is wel gewoon normaal.zou dit met elkaar te maken kunnen hebben en vooral wat kan ik er aan doen? er is gisteren een monteur langs geweest die alles na gemeten heeft en ik haalde bij hem gewoon de snelheid die normaal is.hij sprak over een software matig probleem.ik hoop dat er iemand een oplossing voor mij heeft B.V.D eric