Ga naar inhoud

villa8608

Lid
  • Items

    15
  • Registratiedatum

  • Laatst bezocht

Berichten die geplaatst zijn door villa8608

  1. De laatste dagen valt het mij op de mn pc aan een hoog cpu gebruik draaid. Meestal draaid ie mooi rond alleen de laatste dagen zit ie bijna constant aan de 100%... Heb al CCleaner en mne AVG erop laten draaien maar helaas blijft ie nog steeds hoge toeren draaien. Ook is de pc zeer traag en soms loopt ie gewoon vast :-(

    Heb er een RSIT logje van bijgevoegd...

    Grtz Danny

    Logfile of random's system information tool 1.09 (written by random/random)

    Run by Danny at 2013-10-07 21:21:22

    Microsoft Windows XP Professional Service Pack 3

    System drive C: has 7 GB (21%) free of 31 GB

    Total RAM: 990 MB (27% free)

    Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 21:21:39, on 7/10/2013

    Platform: Windows XP SP3 (WinNT 5.01.2600)

    MSIE: Internet Explorer v8.00 (8.00.6001.18702)

    Boot mode: Normal

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\PROGRA~1\AVG\AVG2014\avgrsx.exe

    C:\Program Files\AVG\AVG2014\avgcsrvx.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\svchost.exe

    C:\Program Files\HitmanPro.Alert\hmpalert.exe

    C:\WINDOWS\Explorer.EXE

    C:\WINDOWS\system32\spoolsv.exe

    C:\Program Files\Analog Devices\SoundMAX\smax4.exe

    C:\Program Files\Belgium Identity Card\BeID Certprop\beidsccertprop.exe

    C:\Program Files\AVG\AVG2014\avgui.exe

    C:\Program Files\AVG\AVG2014\avgfws.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Program Files\AVG\AVG2014\avgidsagent.exe

    C:\Program Files\AVG\AVG2014\avgwdsvc.exe

    D:\Program Files\Wondershare\1-Click PC Care\CareMon.exe

    C:\Program Files\Java\jre7\bin\jqs.exe

    C:\Program Files\AVG\AVG2014\avgnsx.exe

    C:\Program Files\AVG\AVG2014\avgemcx.exe

    C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe

    C:\WINDOWS\system32\svchost.exe

    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

    C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe

    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

    C:\Program Files\AVG\AVG2014\avgcsrvx.exe

    C:\WINDOWS\system32\taskmgr.exe

    C:\Program Files\Mozilla Firefox\firefox.exe

    C:\Program Files\Mozilla Firefox\plugin-container.exe

    C:\Documents and Settings\Loodts Danny\Mijn documenten\Downloads\RSIT.exe

    C:\Program Files\trend micro\Loodts Danny.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!

    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = Bing

    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll

    O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll

    O4 - HKLM\..\Run: [soundMax] "C:\Program Files\Analog Devices\SoundMAX\smax4.exe" /tray

    O4 - HKLM\..\Run: [beidsccertprop] C:\Program Files\Belgium Identity Card\BeID Certprop\beidsccertprop.exe

    O4 - HKLM\..\Run: [synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon

    O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\AVG2014\avgui.exe" /TRAYONLY

    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

    O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')

    O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')

    O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

    O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Plugin Control) - http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab

    O16 - DPF: {4FEE6316-7B6F-4A6C-BD4E-4157C59A9E9D} - http://static.s2g.gate5.de/ovi_maps/OviMaps_2.3.37.6.cab

    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1351228504000

    O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab

    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

    O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

    O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

    O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe

    O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2014\avgfws.exe

    O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2014\avgidsagent.exe

    O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2014\avgwdsvc.exe

    O23 - Service: CareMon - Unknown owner - D:\Program Files\Wondershare\1-Click PC Care\CareMon.exe

    O23 - Service: HitmanPro.Alert Service (hmpalertsvc) - SurfRight B.V. - C:\Program Files\HitmanPro.Alert\hmpalert.exe

    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe

    O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

    O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe

    O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe

    O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe

    --

    End of file - 7162 bytes

    ======Scheduled tasks folder======

    C:\WINDOWS\tasks\Adobe Flash Player Updater.job

    C:\WINDOWS\tasks\OGALogon.job

    C:\WINDOWS\tasks\User_Feed_Synchronization-{7BB94E5C-683F-441A-95AC-4BA7B16EE2BA}.job

    =========Mozilla firefox=========

    ProfilePath - C:\Documents and Settings\Loodts Danny\Application Data\Mozilla\Firefox\Profiles\4y0w6cnf.default

    "belgiumeid@eid.belgium.be"=C:\Program Files\Mozilla Firefox\extensions\belgiumeid@eid.belgium.be

    "wrc@avast.com"=C:\Program Files\Alwil Software\Avast5\WebRep\FF

    [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]

    "Description"=Adobe® Flash® Player 11.8.800.168 Plugin

    "Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@garmin.com/GpsControl]

    "Description"=Garmin GPS Control for Firefox

    "Path"=C:\Program Files\Garmin GPS Plugin\npGarmin.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.40.2]

    "Description"=Java™ Deployment Toolkit

    "Path"=C:\WINDOWS\system32\npDeployJava1.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.40.2]

    "Description"=Oracle® Next Generation Java™ Plug-In

    "Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]

    "Description"=Ag Player Plugin

    "Path"=C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeLive,version=1.3]

    "Description"=Office Live Update v1.3

    "Path"=C:\Program Files\Microsoft\Office Live\npOLW.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709]

    "Description"=WLPG Install MIME type

    "Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]

    "Description"=Windows Presentation Foundation plug-in for Mozilla browsers

    "Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

    [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]

    "Description"=Handles PDFs in-place in Firefox

    "Path"=

    C:\Program Files\Mozilla Firefox\extensions\

    belgiumeid@eid.belgium.be

    C:\Program Files\Mozilla Firefox\searchplugins\

    google.xml

    ======Registry dump======

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]

    Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23 60568]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]

    Java Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-09-13 462248]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]

    Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]

    Java Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-09-13 171944]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]

    "SoundMax"=C:\Program Files\Analog Devices\SoundMAX\smax4.exe [2005-09-07 716800]

    "beidsccertprop"=C:\Program Files\Belgium Identity Card\BeID Certprop\beidsccertprop.exe [2012-02-21 31768]

    "Synchronization Manager"=C:\WINDOWS\system32\mobsync.exe [2008-04-14 144384]

    "AVG_UI"=C:\Program Files\AVG\AVG2014\avgui.exe [2013-09-15 4851760]

    "QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2010-11-09 421888]

    "KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

    "ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]

    C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Garmin Lifetime Updater]

    D:\Program Files\Garmin\Lifetime Updater\2013\GarminLifetime.exe [2012-01-06 1446760]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]

    C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]

    WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2009-01-30 133632]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]

    "notification packages"=scecli

    C:\WINDOWS\system32\devebibo.dll

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro35]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\hitmanpro35.sys]

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]

    "dontdisplaylastusername"=0

    "legalnoticecaption"=

    "legalnoticetext"=

    "shutdownwithoutlogon"=1

    "undockwithoutlogon"=1

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

    "NoDriveTypeAutoRun"=145

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]

    "HonorAutoRunSetting"=1

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

    "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

    "C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe"="C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe:*:Enabled:Apache HTTP Server"

    "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

    "C:\Program Files\Messenger\msmsgs.exe"="C:\Program Files\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"

    "C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe"="C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe:*:Enabled:nSvcAppFlt"

    "C:\WINDOWS\system32\winlogon.exe"="C:\WINDOWS\system32\winlogon.exe:*:Enabled:winlogon"

    "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

    "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"

    "D:\Java\bin\javaw.exe"="D:\Java\bin\javaw.exe:*:Enabled:Java Platform SE binary"

    "C:\WINDOWS\system32\mmc.exe"="C:\WINDOWS\system32\mmc.exe:*:Enabled:Microsoft Management Console"

    "C:\Program Files\Internet Explorer\iexplore.exe"="C:\Program Files\Internet Explorer\iexplore.exe:*:Enabled:Internet Explorer"

    "C:\Program Files\AVG\AVG2014\avgmfapx.exe"="C:\Program Files\AVG\AVG2014\avgmfapx.exe:*:Enabled:Installer voor AVG"

    "C:\Program Files\AVG\AVG2014\avgnsx.exe"="C:\Program Files\AVG\AVG2014\avgnsx.exe:*:Enabled:Online Shield"

    "C:\Program Files\AVG\AVG2014\avgdiagex.exe"="C:\Program Files\AVG\AVG2014\avgdiagex.exe:*:Enabled:AVG Diagnostics 2014"

    "C:\Program Files\AVG\AVG2014\avgemcx.exe"="C:\Program Files\AVG\AVG2014\avgemcx.exe:*:Enabled:Persoonlijke e-mailscanner"

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

    "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

    "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

    "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"

    "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"

    "C:\Program Files\BearShare Applications\BearShare\BearShare.exe"="C:\Program Files\BearShare Applications\BearShare\BearShare.exe:*:Enabled:BearShare"

    "D:\Program Files\BearShare\BearShare\BearShare.exe"="D:\Program Files\BearShare\BearShare\BearShare.exe:*:Enabled:BearShare"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Your Image File Name Here without a path]

    "Debugger="

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]

    "midimapper"=midimap.dll

    "msacm.imaadpcm"=imaadp32.acm

    "msacm.msadpcm"=msadp32.acm

    "msacm.msg711"=msg711.acm

    "msacm.msgsm610"=msgsm32.acm

    "msacm.trspch"=tssoft32.acm

    "vidc.cvid"=iccvid.dll

    "vidc.I420"=msh263.drv

    "vidc.iv31"=ir32_32.dll

    "vidc.iv32"=ir32_32.dll

    "vidc.iv41"=ir41_32.ax

    "vidc.iyuv"=iyuv_32.dll

    "vidc.mrle"=msrle32.dll

    "vidc.msvc"=msvidc32.dll

    "vidc.uyvy"=msyuv.dll

    "vidc.yuy2"=msyuv.dll

    "vidc.yvu9"=tsbyuv.dll

    "vidc.yvyu"=msyuv.dll

    "wavemapper"=msacm32.drv

    "msacm.msg723"=msg723.acm

    "vidc.M263"=msh263.drv

    "vidc.M261"=msh261.drv

    "msacm.msaudio1"=msaud32.acm

    "msacm.sl_anet"=sl_anet.acm

    "msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax

    "vidc.iv50"=ir50_32.dll

    "msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm

    "wave"=wdmaud.drv

    "midi"=wdmaud.drv

    "mixer"=wdmaud.drv

    "aux"=wdmaud.drv

    "msacm.siren"=sirenacm.dll

    ======File associations======

    .scr - install -

    .cpl - cplopen -

    ======List of files/folders created in the last 1 month======

    2013-10-07 21:21:22 ----DC---- C:\rsit

    2013-10-07 21:13:51 ----DC---- C:\Program Files\Mozilla Maintenance Service

    2013-10-07 17:56:14 ----C---- C:\WINDOWS\system32\spmsg2.dll

    2013-10-07 17:56:12 ----HDC---- C:\WINDOWS\$NtUninstallXPSEPSCLP$

    2013-09-25 23:08:24 ----DC---- C:\Program Files\Common Files\PDF Architect

    2013-09-25 23:05:13 ----SHDC---- C:\RECYCLER

    2013-09-25 20:28:10 ----DC---- C:\Documents and Settings\Loodts Danny\Application Data\PDF Architect

    2013-09-23 06:16:44 ----AC---- C:\WINDOWS\zoek-delete.exe

    2013-09-22 20:14:22 ----DC---- C:\AdwCleaner

    2013-09-22 12:30:17 ----DC---- C:\WINDOWS\Temp

    2013-09-22 11:28:15 ----DC---- C:\Program Files\HiJackThis

    2013-09-22 08:33:36 ----DC---- C:\Program Files\HitmanPro.Alert

    2013-09-22 08:33:36 ----AC---- C:\WINDOWS\system32\hmpalert.dll

    2013-09-22 08:33:36 ----AC---- C:\WINDOWS\system32\drivers\hmpalert.sys

    2013-09-21 13:19:34 ----DC---- C:\Documents and Settings\All Users\Application Data\TuneUp360

    2013-09-21 11:04:42 ----AC---- C:\WINDOWS\system32\drivers\avgtpx86.sys

    2013-09-21 11:03:39 ----HDC---- C:\$AVG

    2013-09-21 11:02:05 ----DC---- C:\Documents and Settings\All Users\Application Data\MFAData

    2013-09-21 07:21:52 ----DC---- C:\Program Files\CCleaner

    2013-09-21 07:08:52 ----SHDC---- C:\Documents and Settings\All Users\Application Data\{D1D4879F-2279-49C9-AEBF-3B95C84EAA8F}

    2013-09-20 10:19:21 ----AC---- C:\WINDOWS\system32\FlashPlayerInstaller.exe

    2013-09-20 09:30:43 ----SHDC---- C:\Documents and Settings\All Users\Application Data\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}

    2013-09-18 08:25:43 ----DC---- C:\WINDOWS\system32\cache

    2013-09-17 07:16:25 ----DC---- C:\Program Files\AVG

    2013-09-15 08:21:08 ----AC---- C:\WINDOWS\system32\FNTCACHE.DAT

    2013-09-14 08:33:17 ----DC---- C:\Program Files\Enigma Software Group

    2013-09-14 08:32:04 ----DC---- C:\WINDOWS\865537E164904193A4B6669C62711852.TMP

    2013-09-14 08:31:57 ----DC---- C:\Program Files\Common Files\Wise Installation Wizard

    2013-09-14 08:00:57 ----AC---- C:\WINDOWS\system32\FlashPlayerApp.exe

    2013-09-13 20:21:13 ----DC---- C:\User Data

    2013-09-13 15:56:21 ----AC---- C:\WINDOWS\system32\javaws.exe

    2013-09-13 15:56:07 ----AC---- C:\WINDOWS\system32\WindowsAccessBridge.dll

    2013-09-13 15:56:07 ----AC---- C:\WINDOWS\system32\javaw.exe

    2013-09-13 15:56:07 ----AC---- C:\WINDOWS\system32\java.exe

    2013-09-12 18:47:55 ----DC---- C:\Documents and Settings\Loodts Danny\Application Data\AVG2014

    2013-09-12 18:46:12 ----DC---- C:\Documents and Settings\All Users\Application Data\AVG2014

    2013-09-12 05:36:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2876315$

    2013-09-12 05:36:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2876217$

    2013-09-12 05:36:16 ----HDC---- C:\WINDOWS\$NtUninstallKB2864063$

    2013-09-10 22:11:44 ----AC---- C:\WINDOWS\system32\drivers\avgidsshimx.sys

    ======List of files/folders modified in the last 1 month======

    2013-10-07 21:21:39 ----DC---- C:\Program Files\Trend Micro

    2013-10-07 21:21:25 ----DC---- C:\WINDOWS\Prefetch

    2013-10-07 21:14:01 ----DC---- C:\Documents and Settings\Loodts Danny\Application Data\Mozilla

    2013-10-07 21:13:53 ----DC---- C:\Program Files\Mozilla Firefox

    2013-10-07 21:13:51 ----DC---- C:\Program Files

    2013-10-07 21:01:59 ----DC---- C:\WINDOWS\AppPatch

    2013-10-07 21:01:45 ----SHDC---- C:\WINDOWS\Installer

    2013-10-07 21:01:44 ----HDC---- C:\Config.Msi

    2013-10-07 20:53:00 ----DC---- C:\WINDOWS\system32\CatRoot2

    2013-10-07 20:11:55 ----DC---- C:\WINDOWS

    2013-10-07 18:00:16 ----HDC---- C:\WINDOWS\inf

    2013-10-07 17:56:14 ----DC---- C:\WINDOWS\system32

    2013-10-07 17:56:03 ----RSDC---- C:\WINDOWS\assembly

    2013-10-07 17:55:45 ----DC---- C:\WINDOWS\system32\nl-nl

    2013-10-07 17:55:43 ----DC---- C:\WINDOWS\system32\XPSViewer

    2013-10-07 16:48:27 ----C---- C:\WINDOWS\SchedLgU.Txt

    2013-10-07 16:42:09 ----DC---- C:\WINDOWS\system32\drivers

    2013-10-07 16:28:28 ----HDC---- C:\WINDOWS\$hf_mig$

    2013-09-28 17:43:53 ----DC---- C:\WINDOWS\Minidump

    2013-09-27 20:14:51 ----SDC---- C:\WINDOWS\Tasks

    2013-09-27 20:14:51 ----DC---- C:\Program Files\Google

    2013-09-25 23:08:24 ----DC---- C:\Program Files\Common Files

    2013-09-23 06:16:32 ----ADC---- C:\Documents and Settings\All Users\Application Data\TEMP

    2013-09-22 20:15:55 ----DC---- C:\Documents and Settings\Loodts Danny\Application Data\Uniblue

    2013-09-21 13:49:07 ----DC---- C:\WINDOWS\Help

    2013-09-21 13:20:55 ----DC---- C:\Documents and Settings\Loodts Danny\Application Data\AVG

    2013-09-21 12:38:59 ----DC---- C:\Documents and Settings\All Users\Application Data\TuneUp Software

    2013-09-18 07:14:11 ----SDC---- C:\WINDOWS\Downloaded Program Files

    2013-09-16 09:54:51 ----ASHC---- C:\boot.ini

    2013-09-16 09:54:51 ----AC---- C:\WINDOWS\win.ini

    2013-09-16 09:54:51 ----AC---- C:\WINDOWS\system.ini

    2013-09-16 09:22:26 ----DC---- C:\Program Files\Spybot - Search & Destroy 2

    2013-09-14 08:00:49 ----DC---- C:\WINDOWS\system32\Macromed

    2013-09-13 18:12:05 ----DC---- C:\WINDOWS\Debug

    2013-09-13 18:07:05 ----DC---- C:\WINDOWS\system32\inetsrv

    2013-09-13 15:55:43 ----AC---- C:\WINDOWS\system32\npdeployJava1.dll

    2013-09-13 15:55:43 ----AC---- C:\WINDOWS\system32\deployJava1.dll

    2013-09-13 05:17:08 ----DC---- C:\WINDOWS\system32\Adobe

    2013-09-12 05:37:58 ----RSHDC---- C:\WINDOWS\system32\dllcache

    2013-09-12 05:37:54 ----DC---- C:\Program Files\Internet Explorer

    2013-09-12 05:37:46 ----DC---- C:\WINDOWS\ie8updates

    2013-09-12 05:34:13 ----DC---- C:\WINDOWS\system32\MRT

    2013-09-12 05:32:04 ----AC---- C:\WINDOWS\system32\MRT.exe

    2013-09-11 15:10:34 ----SDC---- C:\Documents and Settings\Loodts Danny\Application Data\Microsoft

    2013-09-10 15:51:18 ----DC---- C:\Program Files\Microsoft

    ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R0 AVGIDSHX;AVGIDSHX; C:\WINDOWS\system32\DRIVERS\avgidshx.sys [2013-09-02 145720]

    R0 Avglogx;AVG Logging Driver; C:\WINDOWS\system32\DRIVERS\avglogx.sys [2013-09-02 223032]

    R0 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; C:\WINDOWS\system32\DRIVERS\avgmfx86.sys [2013-08-20 102200]

    R0 Avgrkx86;AVG Anti-Rootkit Driver; C:\WINDOWS\system32\DRIVERS\avgrkx86.sys [2013-09-08 27448]

    R0 nvata;nvata; C:\WINDOWS\system32\DRIVERS\nvata.sys [2006-01-27 99584]

    R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2008-07-04 44944]

    R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]

    R1 AmdK8;Stuurprogramma voor AMD-processor; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2005-03-09 43008]

    R1 AsIO;AsIO; C:\WINDOWS\system32\drivers\AsIO.sys [2005-12-22 5685]

    R1 Avgdiskx;AVG Disk Driver; C:\WINDOWS\system32\DRIVERS\avgdiskx.sys [2013-08-01 120120]

    R1 AVGIDSDriver;AVGIDSDriver; C:\WINDOWS\system32\DRIVERS\avgidsdriverx.sys [2013-09-02 209208]

    R1 AVGIDSShim;AVGIDSShim; C:\WINDOWS\system32\DRIVERS\avgidsshimx.sys [2013-09-10 22840]

    R1 Avgldx86;AVG AVI Loader Driver; C:\WINDOWS\system32\DRIVERS\avgldx86.sys [2013-09-02 176952]

    R1 Avgtdix;AVG TDI Driver; C:\WINDOWS\system32\DRIVERS\avgtdix.sys [2013-08-01 193848]

    R1 avgtp;avgtp; \??\C:\WINDOWS\system32\drivers\avgtpx86.sys []

    R1 kbdhid;Stuurprogramma voor toetsenbord-HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14720]

    R2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys [2009-08-05 54752]

    R2 hmpalert;HitmanPro.Alert Support Driver; \??\C:\WINDOWS\system32\drivers\hmpalert.sys []

    R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\ADIHdAud.sys [2005-10-05 141312]

    R3 AEAudioService;AEAudio Service; C:\WINDOWS\system32\drivers\AEAudio.sys [2005-03-04 127872]

    R3 Avgfwdx;Avgfwdx; C:\WINDOWS\system32\DRIVERS\avgfwdx.sys [2012-01-12 30944]

    R3 HDAudBus;Microsoft UAA-busstuurprogramma voor High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]

    R3 HidUsb;Microsoft HID Class-stuurprogramma; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]

    R3 mouhid;Stuurprogramma voor muis-HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-09-06 12288]

    R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]

    R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2013-02-08 12648960]

    R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2006-02-17 34176]

    R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2006-02-17 13056]

    R3 SenFiltService;SenFilt Service; C:\WINDOWS\system32\drivers\Senfilt.sys [2005-08-11 393088]

    R3 usbccgp;Microsoft generiek hoofd-USB-stuurprogramma; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]

    S0 aswKbd;aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys []

    S0 aswNdis;avast! Firewall NDIS Filter Service; C:\WINDOWS\system32\DRIVERS\aswNdis.sys []

    S0 aswNdis2;avast! Firewall Core Firewall Service; C:\WINDOWS\system32\drivers\aswNdis2.sys []

    S0 aswRvrt;aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys []

    S0 aswVmm;aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys []

    S0 Lbd;Lbd; C:\WINDOWS\system32\DRIVERS\Lbd.sys []

    S1 aswFW;avast! TDI Firewall driver; C:\WINDOWS\system32\drivers\aswFW.sys []

    S1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys []

    S1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys []

    S1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys []

    S1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys []

    S1 ovfsthmkxrnwxrjfotqknaeykryodqruqegqjf;ovfsthmkxrnwxrjfotqknaeykryodqruqegqjf; C:\WINDOWS\system32\drivers\ovfsthlukfeaayodgvmoieslkxvswlxvyqppih.sys []

    S1 ShldDrv;Panda File Shield Driver; C:\WINDOWS\System32\DRIVERS\ShlDrv51.sys []

    S2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys []

    S2 aswMonFlt;aswMonFlt; \??\C:\WINDOWS\system32\drivers\aswMonFlt.sys []

    S2 PavProc;Panda Process Protection Driver; \??\C:\WINDOWS\system32\DRIVERS\PavProc.sys []

    S3 AVFSFilter;AVFSFilter; C:\WINDOWS\system32\DRIVERS\avfsfilter.sys []

    S3 Avgfwfd;AVG network filter service; C:\WINDOWS\system32\DRIVERS\avgfwdx.sys [2012-01-12 30944]

    S3 cpuz135;cpuz135; \??\C:\WINDOWS\TEMP\cpuz135\cpuz135_x32.sys []

    S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2011-10-18 78136]

    S3 esgiguard;esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys []

    S3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\HdAudio.sys [2004-10-27 145920]

    S3 hitmanpro3;Hitman Pro 3 Support Driver; C:\WINDOWS\system32\drivers\hitmanpro3.sys []

    S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2006-04-12 49664]

    S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2006-04-12 16496]

    S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2006-04-12 21568]

    S3 Lavasoft Kernexplorer;Lavasoft helper driver; \??\C:\Program Files\Lavasoft\Ad-Aware\KernExplorer.sys []

    S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys []

    S3 SYMIDSCO;SYMIDSCO; \??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\idsdefs\20050901.036\symidsco.sys []

    S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys []

    S3 usb_rndisx;USB RNDIS-adapter; C:\WINDOWS\system32\DRIVERS\usb8023x.sys [2013-02-12 12928]

    S3 USBCCID;USB Smart Card reader; C:\WINDOWS\system32\DRIVERS\usbccid.sys [2013-03-06 29184]

    S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]

    S3 usbscan;Stuurprogramma voor USB-scanner; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]

    S3 USBSTOR;Stuurprogramma voor USB-massaopslag; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]

    S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2009-01-30 38528]

    S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

    S4 WS2IFSL;Windows Socket 2.0 Non-IFS-omgeving voor serviceproviderondersteuning; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-09-07 12032]

    ======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

    R2 avgfws;AVG Firewall; C:\Program Files\AVG\AVG2014\avgfws.exe [2013-09-22 1358944]

    R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files\AVG\AVG2014\avgidsagent.exe [2013-09-03 3538480]

    R2 avgwd;AVG WatchDog; C:\Program Files\AVG\AVG2014\avgwdsvc.exe [2013-09-22 301152]

    R2 CareMon;CareMon; D:\Program Files\Wondershare\1-Click PC Care\CareMon.exe [2011-11-10 146792]

    R2 hmpalertsvc;HitmanPro.Alert Service; C:\Program Files\HitmanPro.Alert\hmpalert.exe [2013-09-18 1830768]

    R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2013-09-13 182696]

    R2 SDScannerService;Spybot-S&D 2 Scanner Service; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [2012-11-13 1103392]

    R2 SDUpdateService;Spybot-S&D 2 Updating Service; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [2012-11-13 1369624]

    R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 1529728]

    R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]

    S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

    S2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2006-01-24 131139]

    S2 SDWSCService;Spybot-S&D 2 Security Center Service; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [2012-11-13 168384]

    S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-01 257416]

    S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]

    S3 fsssvc;De service Windows Live Family Safety; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-08-05 704864]

    S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]

    S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-09-11 118680]

    S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]

    S3 WMPNetworkSvc;Windows Media Player Network Sharing-service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2009-02-04 917504]

    S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-04-18 754856]

    S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]

    S4 ForceWare Intelligent Application Manager (IAM);ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe [2006-02-17 139264]

    S4 ForcewareWebInterface;Forceware Web Interface; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe [2006-02-17 20543]

    S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

    S4 nSvcIp;ForceWare IP service; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe []

    S4 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2007-08-09 73728]

    -----------------EOF-----------------

  2. Tja, volgens ne maat van mij zou deze aangekochte tool mn pc zeer goed opkuisen ?? Als dit niet nodig is kan ik altijd mn geld terug vragen volgens AVG... Is deze tool volledig overboden dan ? :hmmmm::dong:

    - - - Updated - - -

    Zoek.exe Version 4.0.0.4 Updated 19-September-2013

    Tool run by Loodts Danny on ma 23/09/2013 at 6:14:11,29.

    Microsoft Windows XP Professional 5.1.2600 Service Pack 3 x86

    Running in: Normal Mode Internet Access Detected

    Launched: C:\DOCUME~1\LOODTS~1\LOCALS~1\Temp\Rar$EX05.250\zoek.exe [script inserted]

    ==== Deleting Files \ Folders ======================

    "C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\15.4.0\ToolbarUpdater.exe" not found

    "C:\WINDOWS\Tasks\AVG PC Tuneup Integrator Scan and Repair.job" deleted

    "C:\Documents and Settings\Loodts Danny\Mijn documenten\avg_tuh_stf_all_2014_147.exe" deleted

    "C:\WINDOWS\tasks\AVG PC Tuneup Integrator Start On Loodts Danny Logon.job" not deleted

    "C:\Program Files\AVG\AVG PC Tuneup\aushelper.dll" deleted

    "C:\Program Files\AVG\AVG PC Tuneup\AxComponents20.bpl" deleted

    "C:\Program Files\AVG\AVG PC Tuneup\BoostSpeed.exe" deleted

    "C:\Program Files\AVG\AVG PC Tuneup\commonforms.dll" deleted

    "C:\Program Files\AVG\AVG PC Tuneup\helper.dll" deleted

    "C:\Program Files\AVG\AVG PC Tuneup\localizer.dll" deleted

    "C:\Program Files\AVG\AVG PC Tuneup\madBasic_.bpl" deleted

    "C:\Program Files\AVG\AVG PC Tuneup\madDisAsm_.bpl" deleted

    "C:\Program Files\AVG\AVG PC Tuneup\madExcept_.bpl" deleted

    "C:\Program Files\AVG\AVG PC Tuneup\PerlRegExp.bpl" deleted

    "C:\Program Files\AVG\AVG PC Tuneup\RegistryCleanerHelper.dll" deleted

    "C:\Program Files\AVG\AVG PC Tuneup\rtl120.bpl" deleted

    "C:\Program Files\AVG\AVG PC Tuneup\vcl120.bpl" deleted

    "C:\Program Files\AVG\AVG PC Tuneup" deleted

    ==== After Reboot ======================

    ==== Deleting Files / Folders ======================

    "C:\WINDOWS\tasks\AVG PC Tuneup Integrator Start On Loodts Danny Logon.job" not found

    ==== EOF on ma 23/09/2013 at 6:18:52,87 ======================

  3. Zoek.exe Version 4.0.0.4 Updated 19-September-2013

    Tool run by Loodts Danny on zo 22/09/2013 at 12:17:46,34.

    Microsoft Windows XP Professional 5.1.2600 Service Pack 3 x86

    Running in: Normal Mode Internet Access Detected

    Launched: C:\DOCUME~1\LOODTS~1\LOCALS~1\Temp\Rar$EX03.859\zoek.exe [script inserted] [Checkboxes used]

    ==== Deleting CLSID Registry Keys ======================

    ==== Deleting CLSID Registry Values ======================

    ==== Installed Programs ======================

    Adobe Flash Player 11 ActiveX

    Adobe Flash Player 11 Plugin

    Adobe Reader X (10.1.4) - Nederlands

    AVG 2014

    AVG PC Tuneup

    AVG Security Toolbar

    Belgium e-ID middleware 4.0.4 (build 7251)

    Beveiligingsupdate voor Windows Internet Explorer 7 (KB938127-v2)

    Beveiligingsupdate voor Windows Internet Explorer 7 (KB956390)

    Beveiligingsupdate voor Windows Internet Explorer 7 (KB958215)

    Beveiligingsupdate voor Windows Internet Explorer 7 (KB960714)

    Beveiligingsupdate voor Windows Internet Explorer 7 (KB961260)

    Beveiligingsupdate voor Windows Internet Explorer 7 (KB963027)

    Beveiligingsupdate voor Windows Internet Explorer 7 (KB969897)

    Beveiligingsupdate voor Windows Internet Explorer 8 (KB2530548)

    Beveiligingsupdate voor Windows Internet Explorer 8 (KB2544521)

    Beveiligingsupdate voor Windows Internet Explorer 8 (KB2559049)

    Beveiligingsupdate voor Windows Internet Explorer 8 (KB2586448)

    Beveiligingsupdate voor Windows Internet Explorer 8 (KB2618444)

    Beveiligingsupdate voor Windows Internet Explorer 8 (KB2647516)

    Beveiligingsupdate voor Windows Internet Explorer 8 (KB2675157)

    Beveiligingsupdate voor Windows Internet Explorer 8 (KB2722913)

    Beveiligingsupdate voor Windows Internet Explorer 8 (KB2744842)

    Beveiligingsupdate voor Windows Internet Explorer 8 (KB2761465)

    Beveiligingsupdate voor Windows Internet Explorer 8 (KB2792100)

    Beveiligingsupdate voor Windows Internet Explorer 8 (KB2797052)

    Beveiligingsupdate voor Windows Internet Explorer 8 (KB2799329)

    Beveiligingsupdate voor Windows Internet Explorer 8 (KB2809289)

    Beveiligingsupdate voor Windows Internet Explorer 8 (KB2817183)

    Beveiligingsupdate voor Windows Internet Explorer 8 (KB2829530)

    Beveiligingsupdate voor Windows Internet Explorer 8 (KB2838727)

    Beveiligingsupdate voor Windows Internet Explorer 8 (KB2846071)

    Beveiligingsupdate voor Windows Internet Explorer 8 (KB2847204)

    Beveiligingsupdate voor Windows Internet Explorer 8 (KB2862772)

    Beveiligingsupdate voor Windows Internet Explorer 8 (KB2870699)

    Beveiligingsupdate voor Windows Media Player (KB2834904-v2)

    Beveiligingsupdate voor Windows Media Player (KB2834904)

    Beveiligingsupdate voor Windows XP (KB2584146)

    Beveiligingsupdate voor Windows XP (KB2585542)

    Beveiligingsupdate voor Windows XP (KB2598479)

    Beveiligingsupdate voor Windows XP (KB2603381)

    Beveiligingsupdate voor Windows XP (KB2621440)

    Beveiligingsupdate voor Windows XP (KB2631813)

    Beveiligingsupdate voor Windows XP (KB2641653)

    Beveiligingsupdate voor Windows XP (KB2646524)

    Beveiligingsupdate voor Windows XP (KB2647518)

    Beveiligingsupdate voor Windows XP (KB2653956)

    Beveiligingsupdate voor Windows XP (KB2655992)

    Beveiligingsupdate voor Windows XP (KB2659262)

    Beveiligingsupdate voor Windows XP (KB2660465)

    Beveiligingsupdate voor Windows XP (KB2661637)

    Beveiligingsupdate voor Windows XP (KB2676562)

    Beveiligingsupdate voor Windows XP (KB2686509)

    Beveiligingsupdate voor Windows XP (KB2691442)

    Beveiligingsupdate voor Windows XP (KB2695962)

    Beveiligingsupdate voor Windows XP (KB2698365)

    Beveiligingsupdate voor Windows XP (KB2705219)

    Beveiligingsupdate voor Windows XP (KB2712808)

    Beveiligingsupdate voor Windows XP (KB2718523)

    Beveiligingsupdate voor Windows XP (KB2719985)

    Beveiligingsupdate voor Windows XP (KB2723135)

    Beveiligingsupdate voor Windows XP (KB2724197)

    Beveiligingsupdate voor Windows XP (KB2727528)

    Beveiligingsupdate voor Windows XP (KB2731847)

    Beveiligingsupdate voor Windows XP (KB2753842-v2)

    Beveiligingsupdate voor Windows XP (KB2753842)

    Beveiligingsupdate voor Windows XP (KB2757638)

    Beveiligingsupdate voor Windows XP (KB2758857)

    Beveiligingsupdate voor Windows XP (KB2761226)

    Beveiligingsupdate voor Windows XP (KB2770660)

    Beveiligingsupdate voor Windows XP (KB2778344)

    Beveiligingsupdate voor Windows XP (KB2779030)

    Beveiligingsupdate voor Windows XP (KB2780091)

    Beveiligingsupdate voor Windows XP (KB2799494)

    Beveiligingsupdate voor Windows XP (KB2802968)

    Beveiligingsupdate voor Windows XP (KB2807986)

    Beveiligingsupdate voor Windows XP (KB2808735)

    Beveiligingsupdate voor Windows XP (KB2813170)

    Beveiligingsupdate voor Windows XP (KB2813345)

    Beveiligingsupdate voor Windows XP (KB2820197)

    Beveiligingsupdate voor Windows XP (KB2820917)

    Beveiligingsupdate voor Windows XP (KB2829361)

    Beveiligingsupdate voor Windows XP (KB2834886)

    Beveiligingsupdate voor Windows XP (KB2839229)

    Beveiligingsupdate voor Windows XP (KB2845187)

    Beveiligingsupdate voor Windows XP (KB2849470)

    Beveiligingsupdate voor Windows XP (KB2850851)

    Beveiligingsupdate voor Windows XP (KB2850869)

    Beveiligingsupdate voor Windows XP (KB2859537)

    Beveiligingsupdate voor Windows XP (KB2864063)

    Beveiligingsupdate voor Windows XP (KB2876217)

    Beveiligingsupdate voor Windows XP (KB2876315)

    Beveiligingsupdate voor Windows XP (KB956390)

    CCleaner

    Compatibiliteitspakket voor het 2007 Microsoft Office system

    DownloadX ActiveX Download Control 1.6.7

    Garmin Communicator Plugin

    Garmin Lifetime Updater

    Garmin USB Drivers

    Google Chrome

    Google Earth

    Google Update Helper

    HitmanPro.Alert

    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)

    Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)

    Hotfix voor Windows XP (KB2756822)

    Hotfix voor Windows XP (KB2779562)

    Hotfix voor Windows XP (KB942288-v3)

    Hotfix voor Windows XP (KB959765)

    HP Deskjet 1050 J410 series Haelp

    ImagXpress

    Java 7 Update 40

    Java Auto Updater

    Java 6 Update 31

    Junk Mail filter update

    Microsoft .NET Framework 2.0 Service Pack 2

    Microsoft .NET Framework 3.0 Service Pack 2

    Microsoft .NET Framework 3.5 SP1

    Microsoft .NET Framework 4 Client Profile

    Microsoft .NET Framework 4 Client Profile NLD Language Pack

    Microsoft Antimalware Service NL-NL Language Pack

    Microsoft Application Error Reporting

    Microsoft Choice Guard

    Microsoft Internationalized Domain Names Mitigation APIs

    Microsoft National Language Support Downlevel APIs

    Microsoft Office File Validation Add-In

    Microsoft Office Live Add-in 1.3

    Microsoft Office Professional Editie 2003

    Microsoft Security Client NL-NL Language Pack

    Microsoft Silverlight

    Microsoft SQL Server 2005 Compact Edition [ENU]

    Microsoft Sync Framework Runtime Native v1.0 (x86)

    Microsoft Sync Framework Services Native v1.0 (x86)

    Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053

    Microsoft Visual C++ 2005 Redistributable

    Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148

    Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219

    Mozilla Firefox 24.0 (x86 nl)

    Mozilla Maintenance Service

    MSN

    MSVC80_x86_v2

    MSVC90_x86

    MSVCRT

    MSXML 4.0 SP2 (KB954430)

    MSXML 4.0 SP2 (KB973688)

    MSXML 6.0 Parser (KB933579)

    NeroLiveGadget

    neroxml

    Nokia Ovi Application Installer

    Nokia Ovi Content Copier

    Nokia Ovi One Touch Access

    Nokia Ovi System Utilities

    Nokia Software Updater

    Nokia_Multimedia_Common_Components_2_5

    NVIDIA Drivers

    NVIDIA ForceWare Network Access Manager

    OGA Notifier 2.0.0048.0

    Photo Notifier and Animation Creator

    Primo

    Runtime

    Security Update for CAPICOM (KB931906)

    Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)

    Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)

    Security Update for Microsoft .NET Framework 3.5 SP1 (KB2736416)

    Security Update for Microsoft .NET Framework 3.5 SP1 (KB2840629)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2832407)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2835393)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628)

    Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628v2)

    Security Update for Taalpakket voor Microsoft .NET Framework 4 Client Profile - NLD (KB2518870)

    Segoe UI

    swMSM

    Taalpakket voor Microsoft .NET Framework 4 Client Profile - NLD

    TuneUp Utilities 2013

    TuneUp Utilities Language Pack (nl-NL)

    Update for Microsoft .NET Framework 3.5 SP1 (KB963707)

    Update voor Windows Internet Explorer 8 (KB2598845)

    Update voor Windows XP (KB2661254-v2)

    Update voor Windows XP (KB2718704)

    Update voor Windows XP (KB2736233)

    Update voor Windows XP (KB2749655)

    Update voor Windows XP (KB2863058)

    Update voor Windows XP (KB951978)

    Visual C++ 2008 x86 Runtime - (v9.0.30729)

    Visual C++ 2008 x86 Runtime - v9.0.30729.01

    Visual Studio 2012 x86 Redistributables

    Visual Studio C++ 10.0 Runtime

    WebFldrs XP

    WebReg

    Windows Driver Package - Garmin (grmnusb) GARMIN Devices (06/03/2009 2.3.0.0)

    Windows Internet Explorer 7

    Windows Internet Explorer 8

    Windows Live - Hulpprogramma voor uploaden

    Windows Live Call

    Windows Live Communications Platform

    Windows Live Essentials

    Windows Live Family Safety

    Windows Live ID Sign-in Assistant

    Windows Live Mail

    Windows Live Messenger

    Windows Live Photo Gallery

    Windows Live Sync

    Windows Live Writer

    Windows Media Format 11 runtime

    Windows Media Player 11

    WinRAR archiver

    ==== Deleting Services ======================

    ==== FireFox Fix ======================

    Deleted from C:\Documents and Settings\Loodts Danny\Application Data\Mozilla\Firefox\Profiles\l4dg0w08.default\prefs.js:

    user_pref("browser.startup.homepage", "http://www.google.com");

    user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");

    user_pref("browser.newtab.url", "http://www.google.com/");

    user_pref("browser.search.defaultengine", "Google");

    user_pref("browser.search.defaultenginename", "Google");

    user_pref("browser.search.selectedEngine", "Google");

    user_pref("browser.search.order.1", "Google");

    user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");

    user_pref("browser.search.suggest.enabled", true);

    user_pref("browser.search.useDBForOrder", true);

    Added to C:\Documents and Settings\Loodts Danny\Application Data\Mozilla\Firefox\Profiles\l4dg0w08.default\prefs.js:

    user_pref("browser.startup.homepage", "http://www.google.com");

    user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");

    user_pref("browser.newtab.url", "http://www.google.com/");

    user_pref("browser.search.defaultengine", "Google");

    user_pref("browser.search.defaultenginename", "Google");

    user_pref("browser.search.selectedEngine", "Google");

    user_pref("browser.search.order.1", "Google");

    user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");

    user_pref("browser.search.suggest.enabled", true);

    user_pref("browser.search.useDBForOrder", true);

    ==== Deleting Files \ Folders ======================

    "C:\Program Files\AVG Secure Search\15.5.0.2\AVG Secure Search_toolbar.dll" not found

    ==== Files Recently Created / Modified ======================

    ====== C:\WINDOWS ====

    ====== C:\DOCUME~1\LOODTS~1\LOCALS~1\Temp ====

    ====== Java Cache =====

    ====== C:\WINDOWS\system32 =====

    2013-09-22 06:33:36 76B42B02D04325605FB8EF6DB50E51E8 564312 -c--a-w- C:\WINDOWS\System32\hmpalert.dll

    2013-09-20 08:19:21 7C66EECFBFAF06AE86C817FFD27AA383 3723656 -c--a-w- C:\WINDOWS\System32\FlashPlayerInstaller.exe

    2013-09-15 06:21:08 E2F0CC3FDCFE9F2804355E464F23CA5F 215264 -c--a-w- C:\WINDOWS\System32\FNTCACHE.DAT

    2013-09-14 06:00:57 E9B05DF6E6E8F01AB8EC3036F7770396 692616 -c--a-w- C:\WINDOWS\System32\FlashPlayerApp.exe

    2013-09-14 06:00:57 733AB625B4398BA223A9664EE6473051 71048 -c--a-w- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl

    2013-09-13 13:56:21 ACA17F8E1F9E8891DE15E2527D8D74D0 264616 -c--a-w- C:\WINDOWS\System32\javaws.exe

    2013-09-13 13:56:07 EC94122E6DCB6E731D8513A89AC9CF12 175016 -c--a-w- C:\WINDOWS\System32\javaw.exe

    2013-09-13 13:56:07 EC2A0F271C0FD4AD57B137845577F539 175016 -c--a-w- C:\WINDOWS\System32\java.exe

    2013-09-13 13:56:07 65F0FBCDBBA20FC4B0DADCA922150A99 94632 -c--a-w- C:\WINDOWS\System32\WindowsAccessBridge.dll

    ====== C:\WINDOWS\system32\drivers =====

    2013-09-22 06:33:36 EB31420DADAF0C646C13E90FEAEAD49F 14376 -c--a-w- C:\WINDOWS\System32\drivers\hmpalert.sys

    2013-09-21 09:04:42 BB83BDE5C9EB8A1B932D4A8374758EF8 37664 -c--a-w- C:\WINDOWS\System32\drivers\avgtpx86.sys

    2013-08-28 13:24:41 0C9ACEF23B537D6E8B1373C98D066B1C 257928 -c--a-w- C:\WINDOWS\System32\drivers\tmcomm.sys

    ====== C:\WINDOWS\Tasks ======

    2013-09-21 11:21:49 B9C4B4905B31BE27CAD5962D989BAF19 474 -c--a-w- C:\WINDOWS\Tasks\AVG PC Tuneup Integrator Scan and Repair.job

    2013-09-18 05:14:03 BED1305C283A87E2B9AFEA4CFB477B07 940 -c--a-w- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job

    2013-09-15 10:05:54 BE0C5B54E27A552CE3053C812BDC008D 1056 -c--a-w- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job

    2013-09-15 10:05:54 9575508A7C7AB4AE67BD6F1CDA1D553F 1052 -c--a-w- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job

    ====== C:\WINDOWS\Temp ======

    ======= C:\Program Files =====

    2013-09-22 06:44:42 -------- dc----w- C:\Program Files\Mozilla Maintenance Service

    2013-09-22 06:33:36 -------- dc----w- C:\Program Files\HitmanPro.Alert

    2013-09-21 09:04:38 -------- dc----w- C:\Program Files\Common Files\AVG Secure Search

    2013-09-21 09:04:38 -------- dc----w- C:\Program Files\AVG Secure Search

    2013-09-17 05:16:25 -------- dc----w- C:\Program Files\AVG

    2013-09-14 06:33:17 -------- dc----w- C:\Program Files\Enigma Software Group

    2013-09-14 06:31:57 -------- dc----w- C:\Program Files\Common Files\Wise Installation Wizard

    ======= C: =====

    2013-09-17 07:00:35 E1FBA773EDD99BD76B3DD9275169B636 43008 -c--a-w- C:\CV Loodts D_2013_foto.doc

    ====== C:\Documents and Settings\Loodts Danny\Application Data ======

    2013-09-21 09:04:50 -------- dc----w- C:\Documents and Settings\Loodts Danny\Local Settings\Application Data\AVG Secure Search

    2013-09-21 09:04:43 -------- dc----w- C:\Documents and Settings\Loodts Danny\Application Data\AVG Secure Search

    2013-09-21 09:02:05 -------- dc----w- C:\Documents and Settings\Loodts Danny\Local Settings\Application Data\MFAData

    2013-09-17 05:18:05 -------- dc----w- C:\WINDOWS\system32\config\systemprofile\Application Data\AVG2014

    2013-09-17 05:16:27 -------- dc----w- C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Avg2014

    2013-09-15 06:23:55 6D3BB10618945C18BA4733219C316673 47024 -c--a-w- C:\Documents and Settings\Loodts Danny\Local Settings\Application Data\GDIPFONTCACHEV1.DAT

    2013-09-12 16:47:55 -------- dc----w- C:\Documents and Settings\Loodts Danny\Application Data\AVG2014

    2013-09-12 16:35:36 -------- dc----w- C:\Documents and Settings\Loodts Danny\Local Settings\Application Data\Avg2014

    ====== C:\Documents and Settings\Loodts Danny ======

    2013-09-21 12:03:12 -------- dc-h--r- C:\Documents and Settings\Loodts Danny\Onlangs geopend

    2013-09-20 08:36:08 65C22204431B26D1051909968A8F35BD 78415736 -c--a-w- C:\Documents and Settings\Loodts Danny\Mijn documenten\avg_tuh_stf_all_2014_147.exe

    2013-09-18 04:19:59 1393FBD6435180ABCD55AA93C56579E4 1830768 -c--a-w- C:\Documents and Settings\Loodts Danny\Bureaublad\hmpalert.exe

    ====== C: exe-files ==

    2013-09-22 07:54:34 65C22204431B26D1051909968A8F35BD 78415736 -c--a-w- C:\Documents and Settings\Loodts Danny\Mijn documenten\Downloads\avg_tuh_stf_all_2014_147.exe

    2013-09-22 06:44:45 AEFBD718AF1AABE7820053650C2E2F08 106212 -c--a-w- C:\Program Files\Mozilla Maintenance Service\Uninstall.exe

    2013-09-22 06:44:42 0329A45C849C9D77901094B8FFE8BBB9 118680 -c--a-w- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

    2013-09-22 06:41:35 41FD44338808C222DEDBC019CCFB565B 281768 -c--a-w- C:\Documents and Settings\Loodts Danny\Mijn documenten\Downloads\Firefox Setup Stub 24.0.exe

    2013-09-22 06:33:36 1393FBD6435180ABCD55AA93C56579E4 1830768 -c--a-w- C:\Program Files\HitmanPro.Alert\hmpalert.exe

    2013-09-21 10:49:32 F075BAB3DE6E552DEAA50C5ACA25219C 347464 -c--a-w- C:\Program Files\AVG\AVG PC Tuneup\TaskManager.exe

    2013-09-21 10:49:32 CD0B7EB650631E49BF47E3D3C8F32F28 53576 -c--a-w- C:\Program Files\AVG\AVG PC Tuneup\version.exe

    2013-09-21 10:49:32 84467C7C63D0A1DBF4DF4050B49DEE38 257352 -c--a-w- C:\Program Files\AVG\AVG PC Tuneup\TrackEraser.exe

    2013-09-21 10:49:32 729491978B8CF662882D4A49166141CC 886600 -c--a-w- C:\Program Files\AVG\AVG PC Tuneup\TweakManager.exe

    2013-09-21 10:49:32 06E9AE36F1D933B939F6B96EC1EAC27C 647496 -c--a-w- C:\Program Files\AVG\AVG PC Tuneup\SystemInformation.exe

    2013-09-21 10:49:31 F6A6D1F7AD41690B91544BA079B9173B 232776 -c--a-w- C:\Program Files\AVG\AVG PC Tuneup\RegistryDefrag.exe

    2013-09-21 10:49:31 E283E57EACE80E2B49B999CACB099A95 279368 -c--a-w- C:\Program Files\AVG\AVG PC Tuneup\StartupManager.exe

    2013-09-21 10:49:31 DF21955D2CCAAE15B68BE194A8867E5D 71496 -c--a-w- C:\Program Files\AVG\AVG PC Tuneup\rdboot32.exe

    2013-09-21 10:49:31 BC1C6F055B0FF615B497052883ECACCA 207688 -c--a-w- C:\Program Files\AVG\AVG PC Tuneup\FileShredder.exe

    2013-09-21 10:49:31 A09D390A98B9942F2542E4275320EBFE 588104 -c--a-w- C:\Program Files\AVG\AVG PC Tuneup\ServiceManager.exe

    2013-09-21 10:49:31 4598876533A0C14AEEC66358AF49F364 249160 -c--a-w- C:\Program Files\AVG\AVG PC Tuneup\RescueCenter.exe

    2013-09-21 10:49:31 43532AB53C5EFDAD418FA71C2B883E0A 83784 -c--a-w- C:\Program Files\AVG\AVG PC Tuneup\rdboot64.exe

    2013-09-21 10:49:31 38BA892BEAF60D646D9B1B5AEB39E731 450376 -c--a-w- C:\Program Files\AVG\AVG PC Tuneup\RegCleaner.exe

    2013-09-21 10:49:31 23A82DEAA4A8FD8BA26EFB863C2FCCCD 386376 -c--a-w- C:\Program Files\AVG\AVG PC Tuneup\InternetOptimizer.exe

    2013-09-21 10:49:31 002B4C0DFD4E334F7B63615112576CB5 205128 -c--a-w- C:\Program Files\AVG\AVG PC Tuneup\ProgramManager.exe

    2013-09-21 10:49:30 F3841E0C5BACC84216A6375CC73F5405 239944 -c--a-w- C:\Program Files\AVG\AVG PC Tuneup\DiskDoctor.exe

    2013-09-21 10:49:30 F248E5EC68A185D1C9D00F63E608DC47 496968 -c--a-w- C:\Program Files\AVG\AVG PC Tuneup\DiskCleaner.exe

    2013-09-21 10:49:30 F190804A5F6D5C2E2EF59830F4949937 10456 -c--a-w- C:\Program Files\AVG\AVG PC Tuneup\AusUninst.exe

    2013-09-21 10:49:30 D43C3160A33E57E93923903FF13A4CD1 765256 -c--a-w- C:\Program Files\AVG\AVG PC Tuneup\unins000.exe

    2013-09-21 10:49:30 9389FF4D36E99352E440CCBEB17C884E 803144 -c--a-w- C:\Program Files\AVG\AVG PC Tuneup\BoostSpeed.exe

    2013-09-21 10:49:30 8E5F30BF387CC484A20035BFD8250F2B 211784 -c--a-w- C:\Program Files\AVG\AVG PC Tuneup\DuplicateFileFinder.exe

    2013-09-21 10:49:30 8E57313A3433EFAEC8C05723555CCA60 92488 -c--a-w- C:\Program Files\AVG\AVG PC Tuneup\cdefrag.exe

    2013-09-21 10:49:30 52CF2C6A7898B37BD9731E340D64C762 212296 -c--a-w- C:\Program Files\AVG\AVG PC Tuneup\DiskWiper.exe

    2013-09-21 10:49:30 2E1AB1265E54D650AFEB39414D0CB94A 510280 -c--a-w- C:\Program Files\AVG\AVG PC Tuneup\FileRecovery.exe

    2013-09-21 10:49:30 25C551922E2C4C5600339A83FAEAA707 473928 -c--a-w- C:\Program Files\AVG\AVG PC Tuneup\DiskExplorer.exe

    2013-09-21 10:49:30 1EBDD4243A1905F2FCAE4F4404C68C06 452936 -c--a-w- C:\Program Files\AVG\AVG PC Tuneup\DiskDefrag.exe

    2013-09-21 09:04:42 B387C48CDDB2CC5A9D0D9BBCCBFC50D8 640176 -c--a-w- C:\Program Files\Common Files\AVG Secure Search\DriverInstaller\15.4.0\DriverInstaller.exe

    2013-09-21 09:04:40 948909A99D9F9F5063128994B3B3D8B0 2267824 -c--a-w- C:\Program Files\Common Files\AVG Secure Search\ScriptHelperInstaller\15.4.0\ScriptHelper.exe

    2013-09-21 09:04:39 8754BA5FCC85325C229ADCB72087706E 1616048 -c--a-w- C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\15.4.0\ToolbarUpdater.exe

    2013-09-21 09:04:38 94BA6BFC9227C59FD0969C54C102D14C 641200 -c--a-w- C:\Program Files\AVG Secure Search\PostInstall.exe

    2013-09-21 09:04:38 8869725DD27C46270A8EC56101C1FDF8 920240 -c--a-w- C:\Program Files\AVG Secure Search\lip.exe

    2013-09-21 09:04:38 6F8DAE4F43AF2F070292198CEAE16995 2285232 -c--a-w- C:\Program Files\AVG Secure Search\vprot.exe

    2013-09-21 09:04:38 288C4B8AB34A0F41D9E5BDFE42705C27 1822896 -c--a-w- C:\Program Files\AVG Secure Search\Uninstall.exe

    2013-09-21 09:01:58 69CB50E35865038BD2B0454B592BEB4B 4425448 -c--a-w- C:\Documents and Settings\Loodts Danny\Mijn documenten\Downloads\avg_avc_stb_all_2014_4117.exe

    2013-09-21 05:20:49 096C3277599629BD22AF6959D20774B9 4454952 -c--a-w- C:\Documents and Settings\Loodts Danny\Mijn documenten\Downloads\ccsetup405.exe

    2013-09-21 04:10:32 0B1CD71CE29E8123A664A5B40153D2FE 1915744 -c--a-w- C:\Program Files\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\29.0.1547.76\29.0.1547.76_29.0.1547.66_chrome_updater.exe

    2013-09-20 08:36:08 65C22204431B26D1051909968A8F35BD 78415736 -c--a-w- C:\Documents and Settings\Loodts Danny\Mijn documenten\avg_tuh_stf_all_2014_147.exe

    2013-09-20 08:19:21 7C66EECFBFAF06AE86C817FFD27AA383 3723656 -c--a-w- C:\WINDOWS\system32\FlashPlayerInstaller.exe

    2013-09-20 07:39:27 4D7FB9493EBE8B9210DA9D9F3FD0B4E8 253488 -c--a-w- C:\Program Files\AVG\AVG2014\avgndisx.exe

    2013-09-18 04:19:59 1393FBD6435180ABCD55AA93C56579E4 1830768 -c--a-w- C:\Documents and Settings\Loodts Danny\Bureaublad\hmpalert.exe

    2013-09-18 04:07:36 6B110E925294547A7D288F26DA19D199 179687 -c--a-w- C:\WINDOWS\865537E164904193A4B6669C62711852.TMP\WiseCustomCalla18.exe

    2013-09-17 05:14:12 01B1A747A2CCA60BC6D10824435CA1AD 4424240 -c--a-w- C:\Documents and Settings\Loodts Danny\Mijn documenten\Downloads\avg_avct_stb_all_2014_4116_cm10.exe

    2013-09-16 07:44:53 662C39FC1E27131551D557862CEC47F0 935175 -c--a-w- C:\Documents and Settings\Loodts Danny\Mijn documenten\Downloads\RSITx64 (1).exe

    2013-09-16 07:44:30 662C39FC1E27131551D557862CEC47F0 935175 -c--a-w- C:\Documents and Settings\Loodts Danny\Mijn documenten\Downloads\RSITx64.exe

    === C: other files ==

    2013-09-22 09:30:46 6D6A5BBDCE29EBA03AADD01012F4C404 1191554 -c--a-w- C:\Documents and Settings\All Users\Application Data\AVG2014\IDS\outbox\p0\submit.zip

    2013-09-22 09:30:39 DC777876A358D00AD3081FB0F3254E46 442907 -c--a-w- C:\Documents and Settings\All Users\Application Data\AVG2014\IDS\quarantine\0da0e147-d6c3-4f0b-8187-7d50ecb51a79.zip

    2013-09-22 06:33:36 EB31420DADAF0C646C13E90FEAEAD49F 14376 -c--a-w- C:\WINDOWS\system32\drivers\hmpalert.sys

    2013-09-21 09:04:42 BB83BDE5C9EB8A1B932D4A8374758EF8 37664 -c--a-w- C:\WINDOWS\system32\drivers\avgtpx86.sys

    2013-09-21 09:04:38 264F8E1A89771B80D9F2985A68BAA8C3 178115 -c--a-w- C:\Program Files\AVG Secure Search\data.zip

    ==== Startup Registry Enabled ======================

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

    "DWQueuedReporting"="C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe -t"

    [HKEY_USERS\S-1-5-21-484763869-963894560-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Run]

    "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe"

    [HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run]

    "DWQueuedReporting"="C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe -t"

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "SoundMax"="C:\Program Files\Analog Devices\SoundMAX\smax4.exe /tray"

    "beidsccertprop"="C:\Program Files\Belgium Identity Card\BeID Certprop\beidsccertprop.exe"

    "AVG_UI"="C:\Program Files\AVG\AVG2014\avgui.exe /TRAYONLY"

    "vProt"="C:\Program Files\AVG Secure Search\vprot.exe"

    "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe -atboottime"

    "Synchronization Manager"="%SystemRoot%\system32\mobsync.exe /logon"

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]

    "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe"

    ==== Startup Registry Disabled ======================

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"=""

    "hkey"="HKCU"

    "command"=""

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Adobe ARM]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="AdobeARM"

    "hkey"="HKLM"

    "command"="\"C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe\""

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Garmin Lifetime Updater]

    "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"

    "item"="Garmin Lifetime Updater"

    "hkey"="HKLM"

    "command"="D:\\Program Files\\Garmin\\Lifetime Updater\\2013\\GarminLifetime.exe /StartMinimized"

    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run-]

    "QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"

    ==== Task Scheduler Jobs ======================

    C:\WINDOWS\tasks\Adobe Flash Player Updater.job --a--c--- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [20/09/2013 10:19]

    C:\WINDOWS\tasks\AVG PC Tuneup Integrator Scan and Repair.job --a--c--- C:\Program Files\AVG\AVG PC Tuneup\BoostSpeed.exe [03/11/2011 17:20]

    C:\WINDOWS\tasks\AVG PC Tuneup Integrator Start On Loodts Danny Logon.job --a--c--- [undetermined Task]

    C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job --a--c--- C:\Program Files\Google\Update\GoogleUpdate.exe [15/09/2013 12:05]

    C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job --a--c--- [undetermined Task]

    C:\WINDOWS\tasks\OGALogon.job --a--c--- C:\WINDOWS\system32\OGAEXEC.exe [03/08/2009 15:07]

    C:\WINDOWS\tasks\User_Feed_Synchronization-{7BB94E5C-683F-441A-95AC-4BA7B16EE2BA}.job --ah-c--- C:\WINDOWS\system32\msfeedssynC:.exe []

    ==== Firefox Extensions ======================

    AppDir: C:\Program Files\Mozilla Firefox

    - Belgium eID - %AppDir%\extensions\belgiumeid@eid.belgium.be

    ==== Firefox Plugins ======================

    Profilepath: C:\Documents and Settings\Loodts Danny\Application Data\Mozilla\Firefox\Profiles\l4dg0w08.default

    9CD2D34FEEEB929E3735F78B991BE609 - C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\15.4.0\npsitesafety.dll - AVG SiteSafety plugin

    101700E93EB905992B518256CB441829 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll - Google Update

    E5AF72B7353FF8D431A7C463A4229524 - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll - Shockwave Flash

    CA0E1DFBE480CF0BE13A0883BEB378B6 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll - Java Platform SE 7 U40

    AF661355EBAB898EB92D5454AEF93CE0 - C:\WINDOWS\system32\npdeployJava1.dll - Java Deployment Toolkit 7.0.400.43

    F045DF7AF127DC4BCC53421850114E15 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll - Silverlight Plug-In

    209FE38A622E3A30CE01B5D95E1D6241 - C:\Program Files\Garmin GPS Plugin\npGarmin.dll - Garmin Communicator Plug-In

    3509063A268A4197CF8E713BD22B0978 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll - Windows Live® Photo Gallery

    7ABA2EAB736F7E9EB0E03ACAA42CCB51 - C:\Program Files\Microsoft\Office Live\npOLW.dll - Microsoft Office Live Plug-in for Firefox / Microsoft Office Live Plug-in for Firefox

    AB87EEFFD18F2BAAFC274E7075EA6C67 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll - Windows Presentation Foundation / Windows Presentation Foundation

    901DF887DBDF87FA3C659239F68F3228 - C:\Program Files\Windows Media Player\npdrmv2.dll - Microsoft® DRM

    0F9DEA5814D22F83FED5F427E263DED0 - C:\Program Files\Windows Media Player\npdsplay.dll - Windows Media Player Plug-in Dynamic Link Library

    F89E6BBD6A080D8C714DFB6F30678288 - C:\Program Files\Windows Media Player\npwmsdrm.dll - Microsoft® DRM

    7D28153B7D586330678AD522B71D89CB - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrlui.dll - Microsoft® Silverlight

    3EA079023D32054BFD73D08E77C72609 - C:\WINDOWS\system32\npptools.dll - Besturingssysteem Microsoft® Windows®

    ==== Chrome Look ======================

    Google Docs - Loodts Danny - Default\Extensions\aohghmighlieiainnegkcijnfilokake

    Google Drive - Loodts Danny - Default\Extensions\apdfllckaahabafndbhieahigkjlhalf

    YouTube - Loodts Danny - Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo

    Google Search - Loodts Danny - Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf

    Chrome In-App Payments service - Loodts Danny - Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda

    Gmail - Loodts Danny - Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

    ==== Set IE to Default ======================

    Old Values:

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

    "Start Page"="https://www.google.be/"

    New Values:

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]

    "Start Page"="https://www.google.be/"

    ==== All HKCU SearchScopes ======================

    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes

    "DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

    {0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"

    {6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

    ==== Reset Google Chrome ======================

    C:\Documents and Settings\Loodts Danny\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences was reset successfully

    C:\Documents and Settings\Loodts Danny\Local Settings\Application Data\Google\Chrome\User Data\Default\Web Data was reset successfully

    ==== HijackThis Entries ======================

    C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe

    C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN NL: Hotmail, Outlook, Skype, Messenger, het laatste nieuws, entertainment en meer!

    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = Bing

    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll

    O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll

    O4 - HKLM\..\Run: [soundMax] "C:\Program Files\Analog Devices\SoundMAX\smax4.exe" /tray

    O4 - HKLM\..\Run: [beidsccertprop] C:\Program Files\Belgium Identity Card\BeID Certprop\beidsccertprop.exe

    O4 - HKLM\..\Run: [synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon

    O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\AVG2014\avgui.exe" /TRAYONLY

    O4 - HKLM\..\Run: [vProt] "C:\Program Files\AVG Secure Search\vprot.exe"

    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

    O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')

    O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')

    O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

    O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Plugin Control) - http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab

    O16 - DPF: {4FEE6316-7B6F-4A6C-BD4E-4157C59A9E9D} - http://static.s2g.gate5.de/ovi_maps/OviMaps_2.3.37.6.cab

    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1351228504000

    O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab

    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

    O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\15.4.0\ViProtocol.dll

    O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

    O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

    O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe

    O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2014\avgfws.exe

    O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2014\avgidsagent.exe

    O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2014\avgwdsvc.exe

    O23 - Service: CareMon - Unknown owner - D:\Program Files\Wondershare\1-Click PC Care\CareMon.exe

    O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: HitmanPro.Alert Service (hmpalertsvc) - SurfRight B.V. - C:\Program Files\HitmanPro.Alert\hmpalert.exe

    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe

    O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

    O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe

    O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe

    O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe

    O23 - Service: vToolbarUpdater15.4.0 - Unknown owner - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\15.4.0\ToolbarUpdater.exe

    ==== Empty IE Cache ======================

    C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully

    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

    C:\Documents and Settings\Loodts Danny\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

    ==== Empty FireFox Cache ======================

    C:\Documents and Settings\LocalService\Local Settings\Application Data\Mozilla\Firefox\Profiles\lsd6e4lm.default\Cache emptied successfully

    C:\Documents and Settings\Loodts Danny\Local Settings\Application Data\Mozilla\Firefox\Profiles\l4dg0w08.default\Cache emptied successfully

    ==== Empty Chrome Cache ======================

    C:\Documents and Settings\Loodts Danny\Local Settings\Application Data\Google\Chrome\User Data\Default\Cache emptied successfully

    ==== Empty All Flash Cache ======================

    Flash Cache Emptied Successfully

    ==== Empty All Java Cache ======================

    Java Cache cleared successfully

    ==== After Reboot ======================

    ==== Empty Temp Folders ======================

    C:\WINDOWS\Temp successfully emptied

    C:\DOCUME~1\LOODTS~1\LOCALS~1\Temp successfully emptied

    ==== Empty Recycle Bin ======================

    C:\RECYCLER successfully emptied

    ==== Deleting Files / Folders ======================

    "C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not found

    "C:\Documents and Settings\Loodts Danny\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not deleted

    ==== EOF on zo 22/09/2013 at 12:36:02,71 ======================

  4. Hijack logje :

    Logfile of Trend Micro HijackThis v2.0.5

    Scan saved at 7:28:01, on 21/09/2013

    Platform: Windows XP SP3 (WinNT 5.01.2600)

    MSIE: Internet Explorer v8.00 (8.00.6001.18702)

    CHROME: 22.0.1229.79

    Boot mode: Normal

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\PROGRA~1\AVG\AVG2014\avgrsx.exe

    C:\Program Files\AVG\AVG2014\avgcsrvx.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\Explorer.EXE

    C:\WINDOWS\system32\spoolsv.exe

    C:\Program Files\Analog Devices\SoundMAX\smax4.exe

    C:\Program Files\Belgium Identity Card\BeID Certprop\beidsccertprop.exe

    C:\Program Files\AVG\AVG2014\avgui.exe

    C:\Program Files\AVG Secure Search\vprot.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Program Files\AVG\AVG2014\avgfws.exe

    C:\Program Files\AVG\AVG2014\avgidsagent.exe

    C:\Program Files\AVG\AVG2014\avgwdsvc.exe

    D:\Program Files\Wondershare\1-Click PC Care\CareMon.exe

    C:\Program Files\Java\jre7\bin\jqs.exe

    C:\Program Files\AVG\AVG2014\avgnsx.exe

    C:\Program Files\AVG\AVG2014\avgemcx.exe

    C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe

    C:\WINDOWS\system32\svchost.exe

    C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\ToolbarUpdater.exe

    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

    C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\loggingserver.exe

    C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe

    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

    C:\Program Files\AVG\AVG2014\avgcsrvx.exe

    C:\Documents and Settings\Loodts Danny\Mijn documenten\Downloads\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll

    O2 - BHO: (no name) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - (no file)

    O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\15.5.0.2\AVG Secure Search_toolbar.dll

    O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll

    O3 - Toolbar: (no name) - !{2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)

    O3 - Toolbar: (no name) - !{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - (no file)

    O3 - Toolbar: (no name) - !{ad708c09-d51b-45b3-9d28-4eba2681febf} - (no file)

    O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\15.5.0.2\AVG Secure Search_toolbar.dll

    O4 - HKLM\..\Run: [soundMax] "C:\Program Files\Analog Devices\SoundMAX\smax4.exe" /tray

    O4 - HKLM\..\Run: [beidsccertprop] C:\Program Files\Belgium Identity Card\BeID Certprop\beidsccertprop.exe

    O4 - HKLM\..\Run: [synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon

    O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\AVG2014\avgui.exe" /TRAYONLY

    O4 - HKLM\..\Run: [vProt] "C:\Program Files\AVG Secure Search\vprot.exe"

    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

    O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')

    O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')

    O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

    O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Plugin Control) - http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab

    O16 - DPF: {4FEE6316-7B6F-4A6C-BD4E-4157C59A9E9D} - http://static.s2g.gate5.de/ovi_maps/OviMaps_2.3.37.6.cab

    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1351228504000

    O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab

    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab

    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

    O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\15.5.0\ViProtocol.dll

    O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

    O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

    O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe

    O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2014\avgfws.exe

    O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2014\avgidsagent.exe

    O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2014\avgwdsvc.exe

    O23 - Service: CareMon - Unknown owner - D:\Program Files\Wondershare\1-Click PC Care\CareMon.exe

    O23 - Service: Google Update-service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Update-service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe

    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

    O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe

    O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe

    O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe

    O23 - Service: vToolbarUpdater15.5.0 - Unknown owner - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\ToolbarUpdater.exe

    --

    End of file - 7529 bytes

  5. Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 11:27:07, on 14/09/2013

    Platform: Windows XP SP3 (WinNT 5.01.2600)

    MSIE: Internet Explorer v8.00 (8.00.6001.18702)

    Boot mode: Normal

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\PROGRA~1\AVG\AVG2014\avgrsx.exe

    C:\Program Files\AVG\AVG2014\avgcsrvx.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE

    C:\WINDOWS\system32\svchost.exe

    C:\Program Files\Microsoft Security Client\MsMpEng.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\Explorer.EXE

    C:\WINDOWS\system32\spoolsv.exe

    C:\Program Files\AVG\AVG2014\avgfws.exe

    C:\Program Files\Analog Devices\SoundMAX\smax4.exe

    C:\Program Files\Microsoft Security Client\msseces.exe

    C:\Program Files\Belgium Identity Card\BeID Certprop\beidsccertprop.exe

    C:\Program Files\AVG\AVG2014\avgui.exe

    C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Program Files\AVG\AVG2014\avgidsagent.exe

    C:\Program Files\AVG\AVG2014\avgwdsvc.exe

    D:\Program Files\Wondershare\1-Click PC Care\CareMon.exe

    C:\Program Files\Java\jre7\bin\jqs.exe

    C:\Program Files\AVG\AVG2014\avgnsx.exe

    C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe

    C:\Program Files\AVG\AVG2014\avgemcx.exe

    C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe

    C:\WINDOWS\system32\svchost.exe

    C:\Program Files\WebConnect\updateWebConnect.exe

    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

    C:\Program Files\AVG\AVG2014\avgcsrvx.exe

    C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe

    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

    C:\WINDOWS\system32\notepad.exe

    C:\Program Files\Mozilla Firefox\firefox.exe

    C:\WINDOWS\system32\msiexec.exe

    C:\Program Files\Trend Micro\HijackThis\HiJackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = QVO6

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Bing

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = QVO6

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = QVO6

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = QVO6

    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.snap.do/?publisher=DownloadX&dpid=DownloadX&co=BE&userid=cbfa51aa-98d9-4594-918a-ab9d3bfb9fb8&searchtype=ds&q={searchTerms}

    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.snap.do/?publisher=DownloadX&dpid=DownloadX&co=BE&userid=cbfa51aa-98d9-4594-918a-ab9d3bfb9fb8&searchtype=ds&q={searchTerms}

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = QVO6

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = QVO6

    R3 - URLSearchHook: (no name) - {D8278076-BC68-4484-9233-6E7F1628B56C} - (no file)

    O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - (no file)

    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    O2 - BHO: WebConnect - {2316c625-b487-4410-a1a5-ff040b65245f} - C:\Program Files\WebConnect\WebConnectbho.dll

    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll

    O2 - BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll

    O2 - BHO: (no name) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - (no file)

    O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

    O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll

    O2 - BHO: Softonic Helper Object - {E87806B5-E908-45FD-AF5E-957D83E58E68} - (no file)

    O3 - Toolbar: (no name) - !{2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)

    O3 - Toolbar: (no name) - !{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - (no file)

    O3 - Toolbar: (no name) - !{ad708c09-d51b-45b3-9d28-4eba2681febf} - (no file)

    O3 - Toolbar: (no name) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - (no file)

    O3 - Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - (no file)

    O4 - HKLM\..\Run: [soundMax] "C:\Program Files\Analog Devices\SoundMAX\smax4.exe" /tray

    O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey

    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

    O4 - HKLM\..\Run: [beidsccertprop] C:\Program Files\Belgium Identity Card\BeID Certprop\beidsccertprop.exe

    O4 - HKLM\..\Run: [synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon

    O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\AVG2014\avgui.exe" /TRAYONLY

    O4 - HKLM\..\Run: [spyHunter Security Suite] C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe

    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

    O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')

    O4 - HKUS\.DEFAULT\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'Default user')

    O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll

    O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll

    O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Plugin Control) - http://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab

    O16 - DPF: {4FEE6316-7B6F-4A6C-BD4E-4157C59A9E9D} - http://static.s2g.gate5.de/ovi_maps/OviMaps_2.3.37.6.cab

    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1351228504000

    O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab

    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

    O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)

    O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

    O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

    O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2014\avgfws.exe

    O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2014\avgidsagent.exe

    O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2014\avgwdsvc.exe

    O23 - Service: CareMon - Unknown owner - D:\Program Files\Wondershare\1-Click PC Care\CareMon.exe

    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Java\jre7\bin\jqs.exe

    O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe

    O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

    O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe

    O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe

    O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe

    O23 - Service: SpyHunter 4 Service - Enigma Software Group USA, LLC. - C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE

    O23 - Service: Update WebConnect - WebConnect - C:\Program Files\WebConnect\updateWebConnect.exe

    O23 - Service: Wsys Service (WsysSvc) - Wsys Co., Ltd. - C:\Documents and Settings\All Users\Application Data\eSafe\eGdpSvc.exe

    --

    End of file - 10137 bytes

  6. Logfile of Trend Micro HijackThis v2.0.4

    Scan saved at 19:45:06, on 15/08/2010

    Platform: Windows XP SP3 (WinNT 5.01.2600)

    MSIE: Internet Explorer v8.00 (8.00.6001.18702)

    Boot mode: Normal

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\Explorer.EXE

    C:\WINDOWS\system32\spoolsv.exe

    C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe

    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe

    C:\Program Files\Common Files\Java\Java Update\jusched.exe

    C:\Program Files\Telenet Security Pack\Common\FSM32.EXE

    C:\WINDOWS\system32\ctfmon.exe

    C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe

    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe

    C:\Program Files\Google\Update\1.2.183.29\GoogleCrashHandler.exe

    C:\Program Files\Telenet Security Pack\Anti-Virus\fsgk32st.exe

    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe

    C:\Program Files\Telenet Security Pack\Anti-Virus\FSGK32.EXE

    C:\Program Files\Telenet Security Pack\Common\FSMA32.EXE

    C:\Program Files\Telenet Security Pack\Common\FSHDLL32.EXE

    D:\Java\bin\jqs.exe

    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe

    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe

    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe

    C:\WINDOWS\system32\nvsvc32.exe

    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

    C:\WINDOWS\system32\svchost.exe

    C:\Program Files\Telenet Security Pack\FWES\Program\fsdfwd.exe

    C:\Program Files\Telenet Security Pack\Anti-Virus\fssm32.exe

    C:\Program Files\Telenet Security Pack\Anti-Virus\fsav32.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\Program Files\Common Files\Java\Java Update\jucheck.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\WINDOWS\system32\msiexec.exe

    D:\hijack2.0.4\Trend Micro\HiJackThis\HiJackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll

    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

    O2 - BHO: LitmusBHO - {C6867EB7-8350-4856-877F-93CF8AE3DC9C} - C:\Program Files\Telenet Security Pack\NRS\iescript\baselitmus.dll

    O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Java\bin\jp2ssv.dll

    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - D:\Java\lib\deploy\jqs\ie\jqs_plugin.dll

    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

    O3 - Toolbar: Browsing Protection Toolbar - {265EEE8E-3228-44D3-AEA5-F7FDF5860049} - C:\Program Files\Telenet Security Pack\NRS\iescript\baselitmus.dll

    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

    O4 - HKLM\..\Run: [Google Updater] "C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -systray -startup

    O4 - HKLM\..\Run: [Google Quick Search Box] "C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe" /autorun

    O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup

    O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup

    O4 - HKLM\..\Run: [NokiaMusic FastStart] "C:\Program Files\Nokia\Ovi Player\NokiaOviPlayer.exe" /command:faststart

    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

    O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

    O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Telenet Security Pack\Common\FSM32.EXE" /splash

    O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Telenet Security Pack\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW

    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

    O4 - HKCU\..\Run: [iLike] C:\Program Files\iLike\1.2.17\ilikesidebar.exe /checkforupdate

    O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

    O4 - HKCU\..\Run: [NokiaOviSuite2] C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe -tray

    O4 - HKCU\..\Run: [Performance Center] C:\Program Files\Ascentive\Performance Center\APCMain.exe -m

    O4 - HKCU\..\Run: [DriverScanner] "D:\DriverScanner\launcher.exe" delay 20000

    O4 - Startup: Mediacontrole PMB.lnk = C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe

    O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html

    O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

    O16 - DPF: {4FEE6316-7B6F-4A6C-BD4E-4157C59A9E9D} (Ovi maps browser plugin) - http://static.s2g.gate5.de/ovi_maps/OviMaps_2.3.37.6.cab

    O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab

    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

    O20 - AppInit_DLLs: C:\PROGRA~1\Google\GO333C~1\GOEC62~1.DLL

    O22 - SharedTaskScheduler: Preloader van browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll

    O22 - SharedTaskScheduler: Cache-daemon voor onderdeelcategorieën - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll

    O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - Unknown owner - C:\Program Files\Telenet Security Pack\Anti-Virus\fsgk32st.exe

    O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe

    O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Telenet Security Pack\FWES\Program\fsdfwd.exe

    O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Telenet Security Pack\Common\FSMA32.EXE

    O23 - Service: F-Secure ORSP Client (FSORSPClient) - F-Secure Corporation - C:\Program Files\Telenet Security Pack\ORSP Client\fsorsp.exe

    O23 - Service: Google Desktop Manager 5.9.1005.12335 (GoogleDesktopManager-051210-111108) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe

    O23 - Service: Google Updateservice (gupdate1c99034b8d861dc) (gupdate1c99034b8d861dc) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - D:\Java\bin\jqs.exe

    O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe

    O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe

    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

    O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

    --

  7. Bij deze,

    Malwarebytes' Anti-Malware 1.44

    Database versie: 3681

    Windows 5.1.2600 Service Pack 3

    Internet Explorer 8.0.6001.18702

    15/08/2010 16:00:04

    mbam-log-2010-08-15 (16-00-04).txt

    Scan type: Volledige Scan (C:\|D:\|E:\|)

    Objecten gescand: 185894

    Verstreken tijd: 58 minute(s), 37 second(s)

    Geheugenprocessen geïnfecteerd: 0

    Geheugenmodulen geïnfecteerd: 0

    Registersleutels geïnfecteerd: 8

    Registerwaarden geïnfecteerd: 1

    Registerdata bestanden geïnfecteerd: 0

    Mappen geïnfecteerd: 0

    Bestanden geïnfecteerd: 2

    Geheugenprocessen geïnfecteerd:

    (Geen kwaadaardige items gevonden)

    Geheugenmodulen geïnfecteerd:

    (Geen kwaadaardige items gevonden)

    Registersleutels geïnfecteerd:

    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{00a6faf1-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.

    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{07b18ea1-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.

    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{07b18ea9-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.

    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{07b18eab-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.

    HKEY_CLASSES_ROOT\TypeLib\{497dddb6-6eee-4561-9621-b77dc82c1f84} (Rogue.Ascentive) -> Quarantined and deleted successfully.

    HKEY_CLASSES_ROOT\Interface\{4e980492-027b-47f1-a7ab-ab086dacbb9e} (Rogue.Ascentive) -> Quarantined and deleted successfully.

    HKEY_CLASSES_ROOT\Interface\{5ead8321-fcbb-4c3f-888c-ac373d366c3f} (Rogue.Ascentive) -> Quarantined and deleted successfully.

    HKEY_CLASSES_ROOT\CLSID\{31f3cf6e-a71a-4daa-852b-39ac230940b4} (Rogue.Ascentive) -> Quarantined and deleted successfully.

    Registerwaarden geïnfecteerd:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\WINDOWS\system32\SysRestore.dll (Rogue.Ascentive) -> Quarantined and deleted successfully.

    Registerdata bestanden geïnfecteerd:

    (Geen kwaadaardige items gevonden)

    Mappen geïnfecteerd:

    (Geen kwaadaardige items gevonden)

    Bestanden geïnfecteerd:

    C:\WINDOWS\system32\SysRestore.dll (Rogue.Ascentive) -> Quarantined and deleted successfully.

    C:\WINDOWS\system32\user32.dat (Trojan.Downloader) -> Quarantined and deleted successfully.

    + HijackThis log

    Malwarebytes' Anti-Malware 1.44

    Database versie: 3681

    Windows 5.1.2600 Service Pack 3

    Internet Explorer 8.0.6001.18702

    15/08/2010 16:23:57

    mbam-log-2010-08-15 (16-23-57).txt

    Scan type: Snelle Scan

    Objecten gescand: 116569

    Verstreken tijd: 5 minute(s), 1 second(s)

    Geheugenprocessen geïnfecteerd: 0

    Geheugenmodulen geïnfecteerd: 0

    Registersleutels geïnfecteerd: 0

    Registerwaarden geïnfecteerd: 0

    Registerdata bestanden geïnfecteerd: 0

    Mappen geïnfecteerd: 0

    Bestanden geïnfecteerd: 0

    Geheugenprocessen geïnfecteerd:

    (Geen kwaadaardige items gevonden)

    Geheugenmodulen geïnfecteerd:

    (Geen kwaadaardige items gevonden)

    Registersleutels geïnfecteerd:

    (Geen kwaadaardige items gevonden)

    Registerwaarden geïnfecteerd:

    (Geen kwaadaardige items gevonden)

    Registerdata bestanden geïnfecteerd:

    (Geen kwaadaardige items gevonden)

    Mappen geïnfecteerd:

    (Geen kwaadaardige items gevonden)

    Bestanden geïnfecteerd:

    (Geen kwaadaardige items gevonden)

    Grts

    Danny

  8. Sinds een aantal weken is mn pc veel trager geworden nadat ik het security pack van telenet heb geinstalleerd. Het lijkt of mn pc soms heel traag opent of zelfs vastloopt... :-(

    Had eerst het antivirus van Avast en bij deze had ik dit probleem totaal niet !! Weet iemand mss wat er ad hand kan zijn ? heb alvast een log file gemaakt.

    Alvast bedankt !!

    Logfile of Trend Micro HijackThis v2.0.2

    Scan saved at 16:35:49, on 13/08/2010

    Platform: Windows XP SP3 (WinNT 5.01.2600)

    MSIE: Internet Explorer v8.00 (8.00.6001.18702)

    Boot mode: Normal

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\WINDOWS\Explorer.EXE

    C:\Program Files\Google\Update\1.2.183.29\GoogleCrashHandler.exe

    C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe

    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe

    C:\Program Files\Common Files\Java\Java Update\jusched.exe

    C:\Program Files\Telenet Security Pack\Common\FSM32.EXE

    C:\WINDOWS\system32\ctfmon.exe

    C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe

    C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe

    C:\Program Files\Telenet Security Pack\Anti-Virus\fsgk32st.exe

    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe

    C:\Program Files\Telenet Security Pack\Anti-Virus\FSGK32.EXE

    C:\Program Files\Telenet Security Pack\Common\FSMA32.EXE

    C:\Program Files\Telenet Security Pack\Common\FSHDLL32.EXE

    D:\Java\bin\jqs.exe

    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe

    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe

    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe

    C:\WINDOWS\system32\nvsvc32.exe

    C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

    C:\WINDOWS\system32\svchost.exe

    C:\Program Files\Telenet Security Pack\FWES\Program\fsdfwd.exe

    C:\Program Files\Telenet Security Pack\Anti-Virus\fssm32.exe

    C:\Program Files\Telenet Security Pack\Anti-Virus\fsav32.exe

    C:\Program Files\Common Files\Java\Java Update\jucheck.exe

    C:\Program Files\Mozilla Firefox\firefox.exe

    C:\Program Files\Mozilla Firefox\plugin-container.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\Program Files\Internet Explorer\iexplore.exe

    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Hotmail, Messenger, nieuws en entertainment vind je op MSN.nl

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

    R3 - URLSearchHook: myBabylon English Toolbar - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - C:\Program Files\myBabylon_English\tbmyB1.dll

    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll

    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll (file missing)

    O2 - BHO: myBabylon English Toolbar - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - C:\Program Files\myBabylon_English\tbmyB1.dll

    O2 - BHO: LitmusBHO - {C6867EB7-8350-4856-877F-93CF8AE3DC9C} - C:\Program Files\Telenet Security Pack\NRS\iescript\baselitmus.dll

    O2 - BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Java\bin\jp2ssv.dll

    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - D:\Java\lib\deploy\jqs\ie\jqs_plugin.dll

    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

    O3 - Toolbar: myBabylon English Toolbar - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - C:\Program Files\myBabylon_English\tbmyB1.dll

    O3 - Toolbar: Browsing Protection Toolbar - {265EEE8E-3228-44D3-AEA5-F7FDF5860049} - C:\Program Files\Telenet Security Pack\NRS\iescript\baselitmus.dll

    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

    O4 - HKLM\..\Run: [Google Updater] "C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -systray -startup

    O4 - HKLM\..\Run: [Google Quick Search Box] "C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox.exe" /autorun

    O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup

    O4 - HKLM\..\Run: [NokiaMServer] C:\Program Files\Common Files\Nokia\MPlatform\NokiaMServer /watchfiles startup

    O4 - HKLM\..\Run: [NokiaMusic FastStart] "C:\Program Files\Nokia\Ovi Player\NokiaOviPlayer.exe" /command:faststart

    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

    O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"

    O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Telenet Security Pack\Common\FSM32.EXE" /splash

    O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Telenet Security Pack\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW

    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

    O4 - HKCU\..\Run: [iLike] C:\Program Files\iLike\1.2.17\ilikesidebar.exe /checkforupdate

    O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"

    O4 - HKCU\..\Run: [NokiaOviSuite2] C:\Program Files\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe -tray

    O4 - HKCU\..\Run: [Performance Center] C:\Program Files\Ascentive\Performance Center\APCMain.exe -m

    O4 - HKCU\..\RunOnce: [shockwave Updater] C:\WINDOWS\system32\Adobe\Shockwave 11\SwHelper_1151601.exe -Update -1151601 -"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; FBSMTWB; GTB6.3; .NET CLR 2.0.50727; OfficeLiveConnector.1.3; OfficeLivePatch.0.0; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; MSN OptimizedIE8;NLBE)" -"Shockwave 3D Pool - Fun Free Flash Sport Game Online from Shockwave.com"

    O4 - Startup: Mediacontrole PMB.lnk = C:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe

    O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html

    O9 - Extra button: In weblog opnemen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra 'Tools' menuitem: &In weblog opnemen met Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll

    O9 - Extra button: Onderzoek - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

    O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - Pagina niet gevonden | Facebook

    O16 - DPF: {4FEE6316-7B6F-4A6C-BD4E-4157C59A9E9D} (Ovi maps browser plugin) - http://static.s2g.gate5.de/ovi_maps/OviMaps_2.3.37.6.cab

    O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab

    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

    O20 - AppInit_DLLs: C:\PROGRA~1\Google\GO333C~1\GOEC62~1.DLL

    O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Telenet Security Pack\Anti-Virus\fsgk32st.exe

    O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe

    O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Telenet Security Pack\FWES\Program\fsdfwd.exe

    O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Telenet Security Pack\Common\FSMA32.EXE

    O23 - Service: F-Secure ORSP Client (FSORSPClient) - F-Secure Corporation - C:\Program Files\Telenet Security Pack\ORSP Client\fsorsp.exe

    O23 - Service: Google Desktop Manager 5.9.1005.12335 (GoogleDesktopManager-051210-111108) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe

    O23 - Service: Google Updateservice (gupdate1c99034b8d861dc) (gupdate1c99034b8d861dc) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - D:\Java\bin\jqs.exe

    O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe

    O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe

    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

    O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

    --

    End of file - 9721 bytes

  9. Hoi,

    Sinds enkele dagen krijg ik een ballonnetje met de boodschap dat ik een ongeregistreerde versie van malware doctor bezit ?? En dat ik me moet registreren ????:s Ook komen er regelmatig engelstalige advertensies door:s

    Weet iemand hoe ik me hier van kan ontdoen want heel dat gedoe begint mij serieus op mn systeem te werken.. :-( :bawling::viking:

    heb al verschillende online virusscans gedaan maar die vinden zelf ook niets

    Zelf beschik ik over windows XP proff. en AVG 8.5

    Mvg,

    Villa

×
×
  • Nieuwe aanmaken...

Belangrijke informatie

We hebben cookies geplaatst op je toestel om deze website voor jou beter te kunnen maken. Je kunt de cookie instellingen aanpassen, anders gaan we er van uit dat het goed is om verder te gaan.